9c88c66f...df14 | Files
Logo
Try VMRay Analyzer
VTI SCORE: 93/100
Dynamic Analysis Report
Classification: Trojan, Dropper, Ransomware

9c88c66f44eba049dcf45204315aaf8ba1e660822f9e97aec51b1c305f5fdf14 (SHA256)

Kraken.exe

Windows Exe (x86-32)

Created at 2018-09-14 09:46:00

...

Notifications (1/1)

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

Remarks

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

Filters:
Filename Category Type Severity Actions
C:\Users\CIiHmnxMn6Ps\Desktop\Kraken.exe Sample File Binary
Blacklisted
...
»
Mime Type application/x-dosexec
File Size 530.50 KB
MD5 e2251a00f5d025ee89228720dc5c2f65 Copy to Clipboard
SHA1 ca7835865133121788bb07fb49cedad3e9601656 Copy to Clipboard
SHA256 9c88c66f44eba049dcf45204315aaf8ba1e660822f9e97aec51b1c305f5fdf14 Copy to Clipboard
SSDeep 12288:PatscnMD/K0FQwcbU5ZDv/Zd6kEpliRalbgr1j:Ctsc70FQfQr7/6kml4als1j Copy to Clipboard
ImpHash f34d5f2d4577ed6d9ceec516c1f5a744 Copy to Clipboard
File Reputation Information
»
Severity
Blacklisted
First Seen 2018-09-07 20:04 (UTC+2)
Last Seen 2018-09-14 03:49 (UTC+2)
Names Win32.Trojan.Generickd
Families Generickd
Classification Trojan
PE Information
»
Image Base 0x400000
Entry Point 0x482a54
Size Of Code 0x80c00
Size Of Initialized Data 0x3c00
File Type executable
Subsystem windows_gui
Machine Type i386
Compile Timestamp 2018-09-07 04:17:34+00:00
Version Information (11)
»
Assembly Version 0.1.5.6
LegalCopyright © Microsoft Corporation. All righrs reserved.
InternalName Kraken.exe
FileVersion 0.1.5.6
CompanyName -
LegalTrademarks -
Comments Authorization Manager Service
ProductName Microsoft® Windows® Operation System®
ProductVersion 0.1.5.6
FileDescription Microsoft® Authorization Manager Service
OriginalFilename Kraken.exe
Sections (3)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x402000 0x80a5a 0x80c00 0x200 cnt_code, mem_execute, mem_read 7.9
.rsrc 0x484000 0x3803 0x3a00 0x80e00 cnt_initialized_data, mem_read 5.97
.reloc 0x488000 0xc 0x200 0x84800 cnt_initialized_data, mem_discardable, mem_read 0.1
Imports (1)
»
mscoree.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
_CorExeMain 0x0 0x402000 0x82a32 0x80c32 0x0
Icons (1)
»
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hu-hu\ui-strings.js Modified File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 10.39 KB
MD5 40b470f1a770360c8111b65a4be4480b Copy to Clipboard
SHA1 e344b876f6dc789c2dafc1e1393ef17c09d85fae Copy to Clipboard
SHA256 d1a8e4bc61d32224eee151b6ad8e9ad6e4b9372e3ced603d6106bf7db60a30ce Copy to Clipboard
SSDeep 192:rpwPPaDuqu/z7GmzjTEErEvAB1n9jF6dxLtzGF+3aeUt1/XwTD2EAJcx6KtNmoLN:r6i6qgmmzHE1A3xkjtplUtu2Er8ULFcc Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\scan_poster2x.jpg Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000749-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 82.98 KB
MD5 db57949925606aa90a4cda70637ba6d7 Copy to Clipboard
SHA1 0cfe3ba979ed561fc621a4b26afff45c243b062b Copy to Clipboard
SHA256 c58a6362d8510a4bb6333810c9ef30aa389e04a7e2e9a53779586826101a7257 Copy to Clipboard
SSDeep 1536:xiRfP2+NVd0L2oExidaQ/gHL1FHPbv8klW5nGwLtfhQt45hOKKqcANme7QMTCB9r:xiRG+yL2ohapFv78AwLtpQtGKqcMP7js Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-fr\ui-strings.js Modified File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 10.73 KB
MD5 6621f6e3f6f01ee83369e1bb43220250 Copy to Clipboard
SHA1 2c50465545b97889072297de7e02ec4ad6f889bd Copy to Clipboard
SHA256 6bd0ef665193d400497206344f6e1ca6cd804e9c9e2049effd16ba94ca07148e Copy to Clipboard
SSDeep 192:OHzmPgjn/AZpZummEZxia6bbno3gVZ2EEvLXDVBhVOGzOF6VC1Egk8JTFkip:hcCpZuREZ09roYETXhDVOGzM1fkckip Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-ma\ui-strings.js Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-ma\00000425-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 11.23 KB
MD5 40bbdf9998bb3e54d262f45de318c0ef Copy to Clipboard
SHA1 41b41b39029c5d8ede304c174b53e92dd7989fe4 Copy to Clipboard
SHA256 ad4072217fc1d115270af134d6691a35fd3d10df3a2785a1ea43a05ce38d98a5 Copy to Clipboard
SSDeep 192:WjVszqVRhy0Hk+Gg0DG9DEB+zgJ3Ytk85OgVf1V3ahO6glXFbXkl5Kr:Wj/yom6WB+Q85tBoODbkDKr Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons_retina.png Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000221-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 17.86 KB
MD5 df8e3193c2490c39d86eb12b53f45c95 Copy to Clipboard
SHA1 d730b9a5c6cf85e2d4a0fb13ecb8144b0dceee90 Copy to Clipboard
SHA256 848181af90b0cd35ef654d5534da66d370541b97a2c1411569619e74d3e9c59b Copy to Clipboard
SSDeep 384:dwhdjkRjhLW4yO94ClpsmBZwQxJ6+zLr07gUnMbvfLBOEW2MZ35Uw:UeRF/SvQxJ6wX07gUnMbLBBgjUw Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hu-hu\ui-strings.js Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hu-hu\00000427-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 10.89 KB
MD5 7d23203cb8bd60759668f1c0bc817b87 Copy to Clipboard
SHA1 50d5beef2e1457847411dd67c684caba03c97fcf Copy to Clipboard
SHA256 9943d7bcb5fd36528d2c78afb153e3aa207f0719912b0358efac866b0784097e Copy to Clipboard
SSDeep 192:rpwPPaDuqu/z7GmzjTEErEvAB1n9jF6dxLtzGF+3aeUt1/XwTD2EAJcx6KtNmoLr:r6i6qgmmzHE1A3xkjtplUtu2Er8ULFcG Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\illustrations_retina.png Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000219-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 19.86 KB
MD5 ad89ba80abdcbf925334902afaedc07a Copy to Clipboard
SHA1 c98547c561f3c644f83eb8dbf8546e25693c62bd Copy to Clipboard
SHA256 779d01a31ebcc65f12e67991cd22a19c5b794484803dbe556e87ce3cededdb3e Copy to Clipboard
SSDeep 384:F6EwEoUR0r/UTXO+6L5bU2OiI65ag9hkdKbsIVrtF6QKUaFSHJypcdSoT8jk1D5U:F6qR0rol2DI6rzVuQUFSHkiJggh5sGWx Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons.png Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000215-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 8.38 KB
MD5 fb3cc4d78ef4b51c2ef2061c8600b032 Copy to Clipboard
SHA1 4788f4c8fb1041744798f1cf30e0c79e1faf0dee Copy to Clipboard
SHA256 301698a3e5ba24624597a61126bf17def3b0a0186c31214c70419768fa2bb2c1 Copy to Clipboard
SSDeep 192:kx/VExynRAeE9HIUMQ+qdU7cdlaTASsg7yS29jP:kx/VExy8IUEccUa8SsfS2RP Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster2x-dark.jpg Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000742-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 68.09 KB
MD5 abd1232fc81b6eb052aec30ca3bc3afd Copy to Clipboard
SHA1 aaa71867a0e2688a1f2e1cf63da1ed0c65939cdd Copy to Clipboard
SHA256 c813e31ba991a32d67e179cff74e192f62a8d27ec67a5b4e7ca20c22d11e124f Copy to Clipboard
SSDeep 1536:0Cx3pEUUeSXvOq8HV0m7y/gmU9hevqWcZHD9XX3q1TGj61X6Xi:0ZXfo10mm/gGvqWcZHD96p861KXi Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\optimize_poster.jpg Modified File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 23.47 KB
MD5 1556434720b44b467adffe21365b0624 Copy to Clipboard
SHA1 bed3eb74fa34660f4fc7e9e7af0adaf35ff82c7a Copy to Clipboard
SHA256 b2e807be1d6f3e6c3a6d9c2c331e494877f5f564bbb9d18e38c846a1b5a920b6 Copy to Clipboard
SSDeep 384:oILFvXxD0fdVv8QAsR7IjDCi+J7TmPSkr8ByjYa3Vyt44BnN7jscahcXls:Bv6fdFAIIt87Fk3YxHBnFjscns Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster2x.jpg Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000743-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 68.09 KB
MD5 4f8baa2eb89f00aaf53db2b533910121 Copy to Clipboard
SHA1 5c47ae13a2debb8e352a293c2d9fa6a2de06274a Copy to Clipboard
SHA256 bbd73d4fdc4a2077911d85cca9a815c5baae4104ef02d06c472fed5f5344b9a9 Copy to Clipboard
SSDeep 1536:4SO+meNvsdDg9/dzoLu9oUt+ugN1amHSl8wq49cchKWDb9JJff:4SO+mWG6/dz1gNPHJcXln Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ca-es\ui-strings.js Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ca-es\00000934-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 16.77 KB
MD5 103e7d4285d9fd4572b6620fc05f3b2e Copy to Clipboard
SHA1 3ba6c877ceeb4386987f5a92caeabfaaf0e7091c Copy to Clipboard
SHA256 7c260fec4304a0a3e646ecf6f751ad9b34e23fd740b9461fefa98ef233b91e63 Copy to Clipboard
SSDeep 384:kchjky5N7G03kojVYSj78rH+GsrXxXNmxWd5qYXV:kchjkSq03nj57ovsrqI5XV Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\cs-cz\ui-strings.js Modified File Stream
Unknown
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\cs-cz\00000935-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 16.66 KB
MD5 1da01d4ac9e07abbb47e017accc8bae5 Copy to Clipboard
SHA1 45d7a35617a2feb3ed9a0998b44cd9e075e5c188 Copy to Clipboard
SHA256 06f5452ae7491d9e8292abb98529bd7f650d7f5810bf45bc2ad5f58c7cc38065 Copy to Clipboard
SSDeep 384:QJOc8yFVVbvNA89hWllRSJ3GfBqwtepVT:AOcfVbvNA88PMWfBtOVT Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\00000538-Lock.onion Created File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.97 KB
MD5 a3d92aff31e1f61e75a4ac3edfabb46e Copy to Clipboard
SHA1 69c99771dd61b2e366107aeefce269b39775ff18 Copy to Clipboard
SHA256 036d7954fa6f58d113643c5d378337460422c772e797c52639e7d3cb08ff7be2 Copy to Clipboard
SSDeep 24:g3UYCvLQw0NarIoJtnIG5MgecIdjSVe39WNsA1lUaFnP1nmsVXhR0gxpbFYn3ipW:8AkmnZMFft93G51l7P5BvPxO4egg Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\themes\dark\00000577-Lock.onion Created File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.67 KB
MD5 47082eb3dfad1d919aa1adedc124e201 Copy to Clipboard
SHA1 faf21a950a1de3650b5b546dddded608c70655c7 Copy to Clipboard
SHA256 b3dadd4e3361571b442bcb616ccad67257debe113e5f40998afb6a9b0a77acda Copy to Clipboard
SSDeep 48:9MZXNTfuJ7JSP5zN6030AXwZPfn+37/TSwStUOC:9ANy2RN6YXwZ3+bT+G Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\epdf\00000292-Lock.onion Created File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 3.64 KB
MD5 5f96b495fef55c8da20f3a6cda7c3f76 Copy to Clipboard
SHA1 e171ef1faa637dc5b3d933224cb39b6931e37efe Copy to Clipboard
SHA256 fa8a500bbd30fd57840d95f24b6a3ccd5562df369ea50355faa813ffe37d4b2f Copy to Clipboard
SSDeep 96:F9bQfx/0Yi3ZLSxORb6sHxqMqhCFyQQpHOSSgYDZ5uAEZV:F9bEd+ZLkORbXahNQQZOCYNIAU Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\00000545-Lock.onion Created File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 1.62 KB
MD5 0c8ccf762d6958c8aa980661bef66bb9 Copy to Clipboard
SHA1 3374e3c9ccebe6b52c636d1563e6e7c387052a97 Copy to Clipboard
SHA256 9d73a951b259dc06822273c7c632ddbb24d7a05c0b11fd122f2e9eeef12d1861 Copy to Clipboard
SSDeep 24:AKxpvnZaP43uc4iT/lBkwYW6gSXq+wRwDzfsMCDQMEGiYEVPPC6Vpex6Gq9Ua:/xp6T9i7lawYWGCeOD4nlpm6Gq9b Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\epdf\00000293-Lock.onion Created File Stream
Unknown
...
»
Mime Type application/octet-stream
File Size 2.91 KB
MD5 772e65fe2a10f592853d16130eacc89b Copy to Clipboard
SHA1 88a8cce0cc1a088fe0f23c55b7450315123ce9e4 Copy to Clipboard
SHA256 7a177596cc26cd113a76448f181a05127fc1cdab58dc580080b498edc822b108 Copy to Clipboard
SSDeep 48:GW3jWqJTXR9/Ik7XdELwnkaqhgR7sOjU0wwGR1do4PvN/o524i3bpRVGf8RMKFLX:v3//f7XvkaqGRnj0wMTrn6524mC8R5tn Copy to Clipboard
C:\ProgramData\EventLog.txt Created File Text
Unknown
...
»
Mime Type text/plain
File Size 43.89 KB
MD5 1b0a6a1baaf925bbc5faaf46aba3204a Copy to Clipboard
SHA1 3066f360ea1d9f83a878eed713f4fb44c19791e7 Copy to Clipboard
SHA256 3f5bf8857903b23c1b4df4fe67a701cb5e01e8c0bab6c287f036d27a14ecbe0c Copy to Clipboard
SSDeep 768:D+xRjXmjx4nTqhKFGNqefhERl//Kx90KI87aHtQB0b9QPwUzXhWLmjLHHQQWGuma:D+xRbmjx4nTqhKFGNqefhERl//Kx90KG Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster2x-dark.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 67.59 KB
MD5 4ef121d5600c5afca6fe9a25904e8b88 Copy to Clipboard
SHA1 e7764367a4718e321ddba0ac171b1b7f7c6947b2 Copy to Clipboard
SHA256 e39e21e54b66c229687e50e01db04d991ca79c44e4d85f5d4f850b088ace1ece Copy to Clipboard
SSDeep 1536:0Cx3pEUUeSXvOq8HV0m7y/gmU9hevqWcZHD9XX3q1TGj61X6X6:0ZXfo10mm/gGvqWcZHD96p861KX6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\PlayStore_icon.svg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\00000930-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 6.67 KB
MD5 905ff9f3cfbcf8ddbd0eb74bb8bfee78 Copy to Clipboard
SHA1 6ca14184b9d639ccdb2711505cbfd668d27ef3ca Copy to Clipboard
SHA256 4cdeb236babb32f53821472230866e62a897e3ecce4fd6c0cf854a96c9e978d3 Copy to Clipboard
SSDeep 192:jO29ub0bBFIikKL4lt1C6dNLm3PgHwqc/XaZ:jP9eyjIikKMlnd9m3YHw9m Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\00000420-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 9.36 KB
MD5 de7be05fd83b0df9f8ae48e72332fb39 Copy to Clipboard
SHA1 34641a57abb4d2bba9c6f1bb1523a4ee0b469702 Copy to Clipboard
SHA256 7209a7a89882ccc3bdb96ae5d23a9fd66676b5a9c3e96e892bdd956aa00c5b29 Copy to Clipboard
SSDeep 192:68e/+4+TWWN1QbdkA4ohcq1x5/d/Nb4d5aQdZ3fu+vU:xe/+TdN1QpXDcovFKdMQdJfI Copy to Clipboard
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrome.7z Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrome.7z (Modified File)
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\00001275-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 10.00 MB
MD5 bcb39190507a3d384885187c95a1c538 Copy to Clipboard
SHA1 218134b49a96db372e91a83b2901c3d008fb03e8 Copy to Clipboard
SHA256 87d22b8e31f60ae8e9e6bdeff45b76c43cfc6e226710a98e36d95013e700112b Copy to Clipboard
SSDeep 196608:EeUhGrDwd3fHoGYMvi6vxXeiozV+5tGd+XZgkrpdQi5aC:E1h3d3foqd1eiows+XZg+5F Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hr-hr\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.50 KB
MD5 15fba68edc9c80f3c84b20a08259d632 Copy to Clipboard
SHA1 6833ebdf491aa3ba53bf239d582cad2ec5f2886c Copy to Clipboard
SHA256 f0d4d5364f887f33962e9accafcb5dcecf39b2bb5c3334712f8e32dc7f6f3210 Copy to Clipboard
SSDeep 192:FkLqOY+3rngDCH3q+z7s+AbZ8v8D410ULbWScU8GXq4p5/4jFAFek9er97B7:KmO9rgy3qae9gB02bWMLpSK9O917 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hr-hr\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hr-hr\00000426-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 10.00 KB
MD5 97abfdc970422d67e0211ce3e063a345 Copy to Clipboard
SHA1 50b4828c8ce1736537d0c4869b7909b36c4970b9 Copy to Clipboard
SHA256 9ac992d1fe437cbd808f26a807d8de3de838d0c6d58ec7bf4306b402ac39a58f Copy to Clipboard
SSDeep 192:FkLqOY+3rngDCH3q+z7s+AbZ8v8D410ULbWScU8GXq4p5/4jFAFek9er97BNyjl:KmO9rgy3qae9gB02bWMLpSK9O91G Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\example_icons2x.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000738-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 6.00 KB
MD5 1dc3d44b50465f1fcccb7a2958ea4b2c Copy to Clipboard
SHA1 46c09c00031e9c2f48f445a0e38101112e2048b7 Copy to Clipboard
SHA256 820b85cbbe286013bf354ebf9d517b7e1bec186890e7f45364271b5da4ebf3b1 Copy to Clipboard
SSDeep 96:yhzQeZzQEmIfCF8wEnxVSlrAKF2SVSI1Tr+6rnNLj0D29tkAT5yhJVgG5t3WWw5:kZqCwOxVSlrtaEVjiivK8G7A5 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 7.88 KB
MD5 c3984910bcb5452b4023a359bb6b2ed1 Copy to Clipboard
SHA1 68d1982928182b632184aa29a865c618e839ab6b Copy to Clipboard
SHA256 620a507b9b137609fc65e4950f6e725fd99f4056fb32462b98f45e72e3445ab3 Copy to Clipboard
SSDeep 192:kLxqS1dB/te+s9YL9bncCzkFJxdiVe7XICGSq2/7IYHsXXyo:k9qSr7PiCzkjKTS5/7oXyo Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\redact_poster.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000746-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 27.94 KB
MD5 cfdbbd7a489b0a50d9916741526de1d0 Copy to Clipboard
SHA1 20cd4aa128aaf35578c724c92c4d333fab29cd4c Copy to Clipboard
SHA256 b59257c0f7435b6ef18199dbed4c0eef7f946b80425ce5ee0f9acf61bf738983 Copy to Clipboard
SSDeep 768:XrkZ9JxZu7x+23UUM1SLr36LsfOJxLUYv:XYrJxZIx+221cr3Gsf+wYv Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\eu-es\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\eu-es\00000422-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 9.92 KB
MD5 3a97b22fe1875a5404e1a722964c0d05 Copy to Clipboard
SHA1 986ce6231b0b3a4143494c9509e1c28091112901 Copy to Clipboard
SHA256 0e49aefffdb0d6c07c3613c42cf665be03324151810bcc674ef3ba00fb3aa2aa Copy to Clipboard
SSDeep 192:WfEnnte+6eiBdtmXBXd2GTOfCFbWbEathiY03gc5Dujg+y0y7nkdBuPPZaumB:W14iBdIKGTO4bWX3i73Nujg+JxaxnmB Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGMGPUOptIn.ini Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.69 KB
MD5 7ab906f5ee8f8e643f44f2d60311c767 Copy to Clipboard
SHA1 15c9f1d52d586a12011407c4fd8bc2c2978fcf3f Copy to Clipboard
SHA256 28a8aeac5c53b50d9c89958c404f9aaa2106a0168dc23e6428c71e21a293fbc3 Copy to Clipboard
SSDeep 24:5eBYbDOo35bBhheg+gkNUfbCjV29ANd81lBJnPpaQaviVZyv1/p04L44giy5GV0o:8Pg5FegPG3286PpM6Gyny09TW Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\selector.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\00000932-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 17.89 KB
MD5 7788fd5f646c96a9178895624c92911b Copy to Clipboard
SHA1 04ea6d20b015f8f6d027bf69fee9773848c82e6a Copy to Clipboard
SHA256 7a6a4b3b18de72eb9533a07e68ec92da9772f327e9215e65903c19d6fafd4eb6 Copy to Clipboard
SSDeep 384:wIPZOzkIyOYRZpgTqrL9YjaPNS7K8T0kCisJ54UGNvI2bdEupe+M:ZkMZIopYjaPNS28ThxshGNQrszM Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons_ie8.gif Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000216-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 8.47 KB
MD5 83712c3c5fbd1fec64560ad2fcd00536 Copy to Clipboard
SHA1 eeef17f6a896e873b7b356f23ebcf1d83e831858 Copy to Clipboard
SHA256 9481bb56b1b75f33370b94ae568bac9b3ca7226e8f71488fbea24a60ffdf963e Copy to Clipboard
SSDeep 192:vo2UREtP4BVn8s0HmcFC9INqN88y66D09XNfCO//+p69D+n:g2U8Pyn8sUFC9SqH6DuNPGq0 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\scan_poster.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000748-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 30.14 KB
MD5 b6fbb6435a93fb782e0cebaf651428fa Copy to Clipboard
SHA1 35efee550173900323e8208ac86d08ef6646ba8c Copy to Clipboard
SHA256 9ca1fc48cd0d35024635c54eb1bb0a2b0f2854e40829ecf4d88f0d56bd8e881a Copy to Clipboard
SSDeep 768:umT5QejXYz3cfChXbd2ARCEGIdIocPMTBoJAhG6zsM8yE0DKjVFyh9jEy:n+47fOrvpGSqwBmAhp4nyMGEy Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\protect_poster2x.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000745-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 58.17 KB
MD5 91120505cdb0d059b6b81afc8022ef20 Copy to Clipboard
SHA1 50c8e1afb06e1687bc643d492fdb153e1ae3568d Copy to Clipboard
SHA256 5363bf091b4164870d97210253c6393b30219861e9ef1acf75ddc5fc4e2ae962 Copy to Clipboard
SSDeep 1536:Bcr/BmgV76r6XTAeYTz+R+vyY3hdnQPVySxsbg:BSAG2e8Bz+RfY3jg Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\protect_poster.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 22.81 KB
MD5 cc20bf380f20bada5b9c16a6c7762bed Copy to Clipboard
SHA1 73c7e2e28a6449c401fb3cb9f5f9c20a0248dfc4 Copy to Clipboard
SHA256 9dc0a21aaef574b7951cfe275fcc534ba83eb9eae408ee7ec4dc9ab6c26a74f1 Copy to Clipboard
SSDeep 384:lRte47haKuJxEtaXAc6M8GRk9fn8+gpWtUTaqa+t8kG45fy3cPSf:lDe47hNFkXKM8Cy/zyWyGqlPdfy3c6f Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons_retina.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000217-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 15.61 KB
MD5 a8efb389201cb91c5c284790c026ffaf Copy to Clipboard
SHA1 e81d3eeea4517c3a71e77a309d5787fed4c5fefc Copy to Clipboard
SHA256 75975222fababb1c50fc21aa74ffb726d22531b5f4462be519a5af1044547634 Copy to Clipboard
SSDeep 384:dwP5PjtGfj0Z8BnI6AomuXeZYxyErsBxf8W6I:dwP5PJgfBnIhlYeZY9sBxWI Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-ma\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 10.73 KB
MD5 796ad2c241b47c8f9f53ffbc277ecca3 Copy to Clipboard
SHA1 6c574b5f6a1e8a663cf138bf5e6ee315ff3dd899 Copy to Clipboard
SHA256 0fc937fe2b11ea2c1d57ec4a28fe5fa3f8ed484bc65fc00332193ac82af9ed07 Copy to Clipboard
SSDeep 192:WjVszqVRhy0Hk+Gg0DG9DEB+zgJ3Ytk85OgVf1V3ahO6glXFbXki:Wj/yom6WB+Q85tBoODbki Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\00000224-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 15.61 KB
MD5 c3d33c9b68ba3aa2fb2145e01843520f Copy to Clipboard
SHA1 928e8de5c1b7c3d8fa7536ec8176068e9104d1bc Copy to Clipboard
SHA256 d1b4eac277fcbab7b93ee3c504f1d61b8fb206445b273a09c98f07b18a983144 Copy to Clipboard
SSDeep 384:CarTH29ixkwjkLKhXxYIt9wyZe9HdSC4QGms1bcWMVvKsg:f8ixkZOhG8xeZdLGmyj/j Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\redact_poster.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 27.44 KB
MD5 3a491f6883d01683e4d8e3271b6b24bb Copy to Clipboard
SHA1 6e0feed824ebf19ea9fd07137dae872fc55e44ae Copy to Clipboard
SHA256 e7b9e3fdac402e112dafbc1316eb10667bd5dffe4e441c1139041469d0e6ccfd Copy to Clipboard
SSDeep 768:XrkZ9JxZu7x+23UUM1SLr36LsfOJxLUYW:XYrJxZIx+221cr3Gsf+wYW Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000220-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 8.69 KB
MD5 29fb426ad7056e6f466d1a74744a3e58 Copy to Clipboard
SHA1 e3e62eab66e6cc0a81afc7a9a6be075b62a4c939 Copy to Clipboard
SHA256 13261f49e17d73d1f8d7f2567bf4b6511b5ea54e55716269f0a3c8616ab49521 Copy to Clipboard
SSDeep 192:uV0l5QSHGeJq51cIxeTT6zS6bx9crk6AUDyrI2domJ3MU1UUa:FQSmiq51E6ZFiAIyEWomq4UUa Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\optimize_poster.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000739-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 23.97 KB
MD5 67373c4a76559649d9e4fcceeeb35b7c Copy to Clipboard
SHA1 5a1c1c1efb58646c50c60f19503aefab458439cf Copy to Clipboard
SHA256 3633adee017a9c9647a8904b5f6504e0f099141928cbfc61d8eff97efd7f326c Copy to Clipboard
SSDeep 384:oILFvXxD0fdVv8QAsR7IjDCi+J7TmPSkr8ByjYa3Vyt44BnN7jscahcXlAe:Bv6fdFAIIt87Fk3YxHBnFjscnz Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 67.59 KB
MD5 a18874c90d9258533580cd5c9b84cc99 Copy to Clipboard
SHA1 ddc2d67cc8097d6558b8135a48b709097c081ddb Copy to Clipboard
SHA256 1756cbb4f2523a5151287f58eac088d98d75163064edb0c8eeab8a9bb8cf9f31 Copy to Clipboard
SSDeep 1536:riogNlcLuX1pgFQGr9XfDJ1802Uv2YHwDReaE1z5uGnp7S:ngPcLuXvgffHwRXDReF5uW7S Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\protect_poster.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000744-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 23.31 KB
MD5 eec163e103125cabd371256b0e8b633b Copy to Clipboard
SHA1 ec394df0ab994ac7146612c0dd5d376410351be0 Copy to Clipboard
SHA256 2e4fb1ced45ffe9669201240d4465a214ca395f5d2009d27518e9ef6454f3ff4 Copy to Clipboard
SSDeep 384:lRte47haKuJxEtaXAc6M8GRk9fn8+gpWtUTaqa+t8kG45fy3cPS79:lDe47hNFkXKM8Cy/zyWyGqlPdfy3c6Z Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_ie8.gif Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\00000223-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 8.47 KB
MD5 b7e434e1794fb30c5b2ed158edcd018d Copy to Clipboard
SHA1 790d86af467d9798e92afe710baedd055794ab11 Copy to Clipboard
SHA256 c4ef7eaa95675083ca7444f2a16f7e7113247522ab40cb323b1bafe26369b4f5 Copy to Clipboard
SSDeep 192:1In119lwfUwWmHqRqtJAWHwtToAyErG6nWBqHMhyfr:a1PqUHm0oWWHwtoAyEDnWBqH2yfr Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\00000222-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 8.38 KB
MD5 ab58f93b204bcf4d3d36e92408971adc Copy to Clipboard
SHA1 9e04aed00e37bcaecbd010af16e206248140f79c Copy to Clipboard
SHA256 2e271d34d6a1a0b6d24c2a1f682ced49fa987a2bed1a56d487a239ddaa44685a Copy to Clipboard
SSDeep 192:kLxqS1dB/te+s9YL9bncCzkFJxdiVe7XICGSq2/7IYHsXXyM+5:k9qSr7PiCzkjKTS5/7oXyM+5 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\illustrations.png Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\00000218-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 9.09 KB
MD5 f82b369623032cc6d82417693d617135 Copy to Clipboard
SHA1 38f177d6461b70ebc38ef00ed4cb053c189d3ea8 Copy to Clipboard
SHA256 2d177d4a3e6a86b33d0810857ba42b867069deb98f2a048dfb3327293387c8cf Copy to Clipboard
SSDeep 96:TFgCDMw65MyRop5PgvJUDuthjMb3t6julET/wrnDqwG+w8OzhQnDW3IAck6vTSy4:xgxeCM6ju+TgqP8ioR5RvTSyf1OunBfO Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 182.46 KB
MD5 8fb2220650486e3c7e45aacd11195b28 Copy to Clipboard
SHA1 a781f23ae8b8d82c801f2a1991bd20b5c44f33e8 Copy to Clipboard
SHA256 bd885fb7f9ad7190e603f77f88828f5270a71ca1796f7c14f7a0faf4591566fd Copy to Clipboard
SSDeep 3072:mX5M/ioET7/Z/qYFuWNjfbHuX2T/5/dGc4uka2AtSyNLMDTJ5MtvVmbvR:25M/Cj/uXa5McZd2At7mJ5MuzR Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\redact_poster2x.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 68.48 KB
MD5 a0a5fea2bfb7409683891cbc9e0462a7 Copy to Clipboard
SHA1 9296745713a279559568db17592a1972d165e6c4 Copy to Clipboard
SHA256 a38458091fa5900eddb29cf6afb620e6a13c0754bfd2c5864ac663deb002e9dd Copy to Clipboard
SSDeep 1536:VzMGEX653oeestUKp5w0yG6QzgLQo6ZS1rSEa5bzG:VzV3oQUKTPzgqZS1rY6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 7.88 KB
MD5 b326fb5b9cc4f8fd908f95022e42b395 Copy to Clipboard
SHA1 b34d0cd1c4951fa5c4820d9539dcf771e5335273 Copy to Clipboard
SHA256 d71e4f72a699bb30816a3a7620b5bac3ad5186855864a5842bd8269a1f37313d Copy to Clipboard
SSDeep 192:kx/VExynRAeE9HIUMQ+qdU7cdlaTASsg7yS2k:kx/VExy8IUEccUa8SsfS2k Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fi-fi\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fi-fi\00000423-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 10.11 KB
MD5 2f183925fd19d6f083621d16cf3e7472 Copy to Clipboard
SHA1 3e3a7a9fd1e7d008c03552bf73ca8d896fd842cb Copy to Clipboard
SHA256 cfb52c86c0b64ac07dc1ff274a6ef0b9edca9325bc329ef1fcb83cb4967cfe34 Copy to Clipboard
SSDeep 192:58qfB1g/nmAq1f6fI+GW5PmO9YsDprqF6ysRrATp1k7wh5m13cLI9WjiBFNDL:58VOAq1fLoPB1rIQrAd1k7doI9WYZL Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\es-es\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.83 KB
MD5 f1208299ee44760fbf2f4333c7839979 Copy to Clipboard
SHA1 8d1b1bb140be34a0f3ddb14c989726e502723d83 Copy to Clipboard
SHA256 0a7c19b5e77ae385b6aae450711506d7cc5eea71ee3f46d5161ee630980d9f71 Copy to Clipboard
SSDeep 192:QLS0EHI1oWVZoVRkH08NFX4lKidZdw5tNYNQ283VNDpPqFjYk2nWF:+SPHI1BZoXoXVid85tVlpPWjfd Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\PlayStore_icon.svg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 6.17 KB
MD5 03d1b92f4756ce7fabce9d92c9f44a23 Copy to Clipboard
SHA1 7309082d886e8c4bb06399a76c8d5ce72345c417 Copy to Clipboard
SHA256 6837a1a8cc8537687515376198d5a178a1ed492fa327f577e3673a06ca2dce38 Copy to Clipboard
SSDeep 192:jO29ub0bBFIikKL4lt1C6dNLm3PgHwqc/Xac:jP9eyjIikKMlnd9m3YHw9/ Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\plugin.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\00000931-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 332.00 KB
MD5 9ed5507a5fdea4499c29ca2e19a7c622 Copy to Clipboard
SHA1 5cf5d523e57c46999535c4cea1eac68025cb49d7 Copy to Clipboard
SHA256 4d377429a5923b4f1d9bc48af2f028684af4d21670591398c1d0895d1c51e2ee Copy to Clipboard
SSDeep 6144:WzI7QRFsR0LP/1FJHIG8duTxp7jpIzX/WgxuiOkZf9vE6V5GnkSCBS83Y:XYI0T/1Fedgp7jkvbpZ/HYHoSOY Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\selector.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 17.39 KB
MD5 b76addfcaeb3b554e7379b29ca137278 Copy to Clipboard
SHA1 6db31aafd7b7973851f3ca9dda7a9cbf42bff7c5 Copy to Clipboard
SHA256 a7253bdc6059a8417ef0f1e61655adae95b542e9c043b686e50cf09539122f50 Copy to Clipboard
SSDeep 384:wIPZOzkIyOYRZpgTqrL9YjaPNS7K8T0kCisJ54UGNvI2bdr:ZkMZIopYjaPNS28ThxshGNQ8 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ca-es\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.27 KB
MD5 e9ec08de96f28f65bda2687d21eeb6fe Copy to Clipboard
SHA1 5a090f17da2f86aad253b43bb69ea23cf27151ab Copy to Clipboard
SHA256 6ae5c15b994a1335ddc43fe7485d5a0558204ce5eef068549bc27ac4363a6e07 Copy to Clipboard
SSDeep 384:kchjky5N7G03kojVYSj78rH+GsrXxXNmxWd5qYp:kchjkSq03nj57ovsrqI5p Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\optimize_poster2x.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 65.34 KB
MD5 a0ae7a0009444008aefe96aaa3e80774 Copy to Clipboard
SHA1 ea1127a806ecee567edc8ac3cda6f956210f0e07 Copy to Clipboard
SHA256 b82d2b9814efa79af42cf732ccef0bc258720ccbe24c167460015a99958163b3 Copy to Clipboard
SSDeep 1536:3psLkrRQewBrcLAGQ5I/pYj2eiHgAKXxBvv5l9nBwKVi8tuAX5T4:3p7FLW6II/p7rHgxBlHwKVis5T4 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\PlayStore_icon.svg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 7.25 KB
MD5 abfd910ec5b62a6e71f8afc521009b13 Copy to Clipboard
SHA1 e06c26ba13d374429b7299255a4a95491ffd1102 Copy to Clipboard
SHA256 f1214f171c96fe18fdf51f76b210fd86a3efea9ba28c25faf2efd39f74ea31a3 Copy to Clipboard
SSDeep 192:4kmZihix8KaugYAt2ucVPSM/4IV24hqEt:rm8hixSKYO1SWN5t Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\scan_poster2x.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 82.48 KB
MD5 0a16ea202de1909e8eb3fd7bbc430293 Copy to Clipboard
SHA1 f47718cd3c98bb4cb95f9036ab283cf5aed532cc Copy to Clipboard
SHA256 aa87b136c3d562ed6f4e976247eb786729e60bfb3e51bf5a2ac38378d930a343 Copy to Clipboard
SSDeep 1536:xiRfP2+NVd0L2oExidaQ/gHL1FHPbv8klW5nGwLtfhQt45hOKKqcANme7QMTCB9f:xiRG+yL2ohapFv78AwLtpQtGKqcMP7jU Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.19 KB
MD5 43912f317546fd95b0590628fccd8f97 Copy to Clipboard
SHA1 deca48c995a256a40f500e04aeb0e18bbc7953a9 Copy to Clipboard
SHA256 445a47cf70d0813c4f06f07b67b585175ef6df11da2dc7254e13eec6555fcbef Copy to Clipboard
SSDeep 24:ce0RBzKaZGJq5AVFMy5GjywHm+ApH4rTT66L1bm3QEz:cFRUyANQJG+ApYrTvb1e Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons_ie8.gif Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 7.97 KB
MD5 fdb24ee938c1d44d1967bb6a48ec1b2d Copy to Clipboard
SHA1 3682a46328ff0b8e928d12914bca099a49e8caf3 Copy to Clipboard
SHA256 20455d7556f9f88c04aaf1ff52a0550810bf05619b499945c34719b0adac230a Copy to Clipboard
SSDeep 192:vo2UREtP4BVn8s0HmcFC9INqN88y66D09XNfCO//+p69D+l:g2U8Pyn8sUFC9SqH6DuNPGqq Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons_retina.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.11 KB
MD5 ca9d0f9c30967baa45bddcc345962a83 Copy to Clipboard
SHA1 1088be3ea1915e646b23b2492dca32427399564f Copy to Clipboard
SHA256 284c8d939c610339a015feb1cd82005b331e18bfc625e6b4408f4b6d541130e0 Copy to Clipboard
SSDeep 384:dwP5PjtGfj0Z8BnI6AomuXeZYxyErsBxf8WF:dwP5PJgfBnIhlYeZY9sBx5 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\cs-cz\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.16 KB
MD5 8d810b0030353165249bd02f9dfdb2a6 Copy to Clipboard
SHA1 c53c6a6b0e5faa2d142765a055ee0086f06c4732 Copy to Clipboard
SHA256 28c1d3a6dba3c33904cb875d98d1985be035e19c9781e32cceab7adf453bc794 Copy to Clipboard
SSDeep 384:QJOc8yFVVbvNA89hWllRSJ3GfBqwtepVU:AOcfVbvNA88PMWfBtOVU Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\optimize_poster2x.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000740-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 65.84 KB
MD5 af404b612ff55262454e78e34c7512f8 Copy to Clipboard
SHA1 a13356cedaf3867b710a48cadcfb52501fff89c3 Copy to Clipboard
SHA256 82dd0596a2d3ce8ab9159bc36c13eda96945003e07f31b4be3fca0a27bc64607 Copy to Clipboard
SSDeep 1536:3psLkrRQewBrcLAGQ5I/pYj2eiHgAKXxBvv5l9nBwKVi8tuAX5TI:3p7FLW6II/p7rHgxBlHwKVis5TI Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\protect_poster2x.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 57.67 KB
MD5 33a56526c695db1b3d78ab7d6e7413da Copy to Clipboard
SHA1 f193933fdda3e9a4dfc8536aee6a138d9325bece Copy to Clipboard
SHA256 13adf3476060654e261f5045de13ced0784750ea2e20d257e81ef6236846a913 Copy to Clipboard
SSDeep 1536:Bcr/BmgV76r6XTAeYTz+R+vyY3hdnQPVySxsbQ:BSAG2e8Bz+RfY3jQ Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 8.19 KB
MD5 894df75768bbc717792e44042cf7629b Copy to Clipboard
SHA1 aefb9c5078fcd0ca837cc06c6c19020a68cba8ca Copy to Clipboard
SHA256 9ee08c55c7cde5367e9617914f755961ff0b1c4423179cb5990f78f5014b3015 Copy to Clipboard
SSDeep 192:uV0l5QSHGeJq51cIxeTT6zS6bx9crk6AUDyrI2domJ3MUJ:FQSmiq51E6ZFiAIyEWomqG Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\es-es\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\es-es\00000421-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 10.33 KB
MD5 9ace209c980df2d10dc67f82d4727264 Copy to Clipboard
SHA1 6c7a8f3326462b056e3982d6e6ad924e4eb6a0ca Copy to Clipboard
SHA256 48d5d91d4ed81e1f19e51e9bdfd7d432c709576ca013da0d56a4f369a7599436 Copy to Clipboard
SSDeep 192:QLS0EHI1oWVZoVRkH08NFX4lKidZdw5tNYNQ283VNDpPqFjYk2nWnhBSC:+SPHI1BZoXoXVid85tVlpPWjff+C Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\00000933-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 1.69 KB
MD5 eb2c7da749ddbaf4cb3bb68b8dd98afc Copy to Clipboard
SHA1 582372f3bbb114780cd2c35b3482b1d77d0b336e Copy to Clipboard
SHA256 edb29007b7ba7d93893acb369b23d82a4d3377b93972747762b6634ba3bb5edd Copy to Clipboard
SSDeep 24:ce0RBzKaZGJq5AVFMy5GjywHm+ApH4rTT66L1bm3QEN+PdViNVK9kZ9wlwcUAQh:cFRUyANQJG+ApYrTvb1dVqVKMtcde Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster2x.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 67.59 KB
MD5 051bd0cf044d214bb6320a382a62ae83 Copy to Clipboard
SHA1 cb8b9149a4d408743f8f79d23b9fc715a726f6b5 Copy to Clipboard
SHA256 1bce345765e31ada22695fe2c27be3e17ab0ae5d35dd5e7df237a204d9c698c8 Copy to Clipboard
SSDeep 1536:4SO+meNvsdDg9/dzoLu9oUt+ugN1amHSl8wq49cchKWDb9JJf7:4SO+mWG6/dz1gNPHJcXlj Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_ie8.gif Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 7.97 KB
MD5 af6f1ce8f2aad964cbdc05b6543bb341 Copy to Clipboard
SHA1 6e159acbc4458d3b67c5be5d8f2fb2e14fd4afa6 Copy to Clipboard
SHA256 8384f32e43e458f791c7e33d13677768d12cace472b3ed532cf4f8d1dabb3f48 Copy to Clipboard
SSDeep 192:1In119lwfUwWmHqRqtJAWHwtToAyErG6nWBqHMhyfh:a1PqUHm0oWWHwtoAyEDnWBqH2yfh Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons_retina.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 17.36 KB
MD5 47d9f0f65742c4987304cffb176bdca8 Copy to Clipboard
SHA1 c705adcf042c325559b2c59612dd2bde6779c418 Copy to Clipboard
SHA256 e203a9a84036bf7600b42d39397c04a8fcf74de85f36809dd60b8d2438c0c13d Copy to Clipboard
SSDeep 384:dwhdjkRjhLW4yO94ClpsmBZwQxJ6+zLr07gUnMbvfLBOEW2MZ3t:UeRF/SvQxJ6wX07gUnMbLBBg3 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\organize_poster.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000741-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 68.09 KB
MD5 b7fd98543397b4e13d395cc89895a180 Copy to Clipboard
SHA1 a4c135c94b34cbbe944e0d0b12b8182ed4da87e9 Copy to Clipboard
SHA256 c9828ba00064046cb24f40ad39c3968caf7baa41290fcef96f039dfe9b04b5c3 Copy to Clipboard
SSDeep 1536:riogNlcLuX1pgFQGr9XfDJ1802Uv2YHwDReaE1z5uGnp7G:ngPcLuXvgffHwRXDReF5uW7G Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\scan_poster.jpg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 29.64 KB
MD5 d3e894ac56f23630b4e446f35cc76216 Copy to Clipboard
SHA1 07968dc5b81c7fdf17c1a0ce4c54bd9c6c0683a4 Copy to Clipboard
SHA256 48ad63da0e65139ceaa2d0168568058bdb6c992865c1a3db8d5c41e45fc6c73b Copy to Clipboard
SSDeep 768:umT5QejXYz3cfChXbd2ARCEGIdIocPMTBoJAhG6zsM8yE0DKjVFyh9jEw:n+47fOrvpGSqwBmAhp4nyMGEw Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-fr\ui-strings.js Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-fr\00000424-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 11.23 KB
MD5 e285d1646649e9456613a00aba23f82a Copy to Clipboard
SHA1 e393e9027f20559d1db19d76209e92065469c561 Copy to Clipboard
SHA256 9816f91d84f2adbc48069987aea2056210c140fa4d84cf93be557332ed9b5abf Copy to Clipboard
SSDeep 192:OHzmPgjn/AZpZummEZxia6bbno3gVZ2EEvLXDVBhVOGzOF6VC1Egk8JTFki5HzE:hcCpZuREZ09roYETXhDVOGzM1fkcki54 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.11 KB
MD5 3106b6d0f6aeca7bc0fcc08dbdf829c3 Copy to Clipboard
SHA1 0bf9062c33b9aae94e9c7908f9ca6864c64bec67 Copy to Clipboard
SHA256 5fd2e6dc51999c4b5c496c2f33bd268d426fa5fe2e0870e18a3c92a768c3cb17 Copy to Clipboard
SSDeep 384:CarTH29ixkwjkLKhXxYIt9wyZe9HdSC4QGms1bcWMVvh:f8ixkZOhG8xeZdLGmyjE Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\00000000-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 182.96 KB
MD5 dbcbee51b39a86edda0d4b5bda82fa02 Copy to Clipboard
SHA1 6090fc43bacc32f3ee9c6d3e8c36326d3579606e Copy to Clipboard
SHA256 341a1ef149a50111eee312706a894cc1a3222b1b4a8d8881b00c8ec3abeb6070 Copy to Clipboard
SSDeep 3072:mX5M/ioET7/Z/qYFuWNjfbHuX2T/5/dGc4uka2AtSyNLMDTJ5MtvVmbvA:25M/Cj/uXa5McZd2At7mJ5MuzA Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\example_icons2x.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 5.50 KB
MD5 f7876a8aa89a2accbe8c31f465387c99 Copy to Clipboard
SHA1 e928c32ddad7dc9f6d02412f633d0db844408670 Copy to Clipboard
SHA256 8a85a2ac8698fec454cf47748b372d35a8afd552ec398a61329241e18c19b645 Copy to Clipboard
SSDeep 96:yhzQeZzQEmIfCF8wEnxVSlrAKF2SVSI1Tr+6rnNLj0D29tkAT5yhJVgG5w:kZqCwOxVSlrtaEVjiivK8Gm Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\illustrations.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 8.59 KB
MD5 ba8db7473c804274ede06e3105e05176 Copy to Clipboard
SHA1 82ec317c44791cfa249ac39e1df4324873e6c27c Copy to Clipboard
SHA256 52e41eab1247256e0379b3dc115f8352db808c383c746a61bdaea1b7e288aaec Copy to Clipboard
SSDeep 96:TFgCDMw65MyRop5PgvJUDuthjMb3t6julET/wrnDqwG+w8OzhQnDW3IAck6vTSyX:xgxeCM6ju+TgqP8ioR5RvTSyf1OunBfp Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 8.86 KB
MD5 3b500316ea0947df32318385275fd317 Copy to Clipboard
SHA1 6d6b302b98340ef80c215a48f64edb41fc440c2a Copy to Clipboard
SHA256 3028fca6724638bf19fe18770cfa620fe3f0f61909ea4385b4e30e7daa89f7cf Copy to Clipboard
SSDeep 192:68e/+4+TWWN1QbdkA4ohcq1x5/d/Nb4d5aQd6:xe/+TdN1QpXDcovFKdMQd6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\redact_poster2x.jpg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\00000747-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 68.98 KB
MD5 0414e745944512adc2e569f6ec56dee1 Copy to Clipboard
SHA1 015f94e240453df5ba5289cddb0469c6c8fa151b Copy to Clipboard
SHA256 658035de5b7866b7b33e95402563b7e1b1ec5d41b0e4d2ce26fe2028040040bb Copy to Clipboard
SSDeep 1536:VzMGEX653oeestUKp5w0yG6QzgLQo6ZS1rSEa5bz/X:VzV3oQUKTPzgqZS1rYTX Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGMGPUOptIn.ini Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\00000001-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 2.19 KB
MD5 88498b444c4b5e0e3845c19bedca793b Copy to Clipboard
SHA1 24e8090890dc83cba1ba967da785230fb36c7f29 Copy to Clipboard
SHA256 09805616f6816d114afa36f81e64d666399c0d94b4f503f364b39751bcb52444 Copy to Clipboard
SSDeep 48:8Pg5FegPG3286PpM6Gyny09TrtFG9yBLIsM:dwgeN6gyJ/4Oe Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\eu-es\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.42 KB
MD5 f392cc9e03495d9c8aed4866b3e29746 Copy to Clipboard
SHA1 c013eeba50560c60c19b40e9fa6ab5e939bbb827 Copy to Clipboard
SHA256 3af037baa3ab29830b5b452493a5aff7ce188827dcaea87d9803a20fa132abf0 Copy to Clipboard
SSDeep 192:WfEnnte+6eiBdtmXBXd2GTOfCFbWbEathiY03gc5Dujg+y0y7nkdBuPPZ6:W14iBdIKGTO4bWX3i73Nujg+Jxax6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\AppStore_icon.svg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\00000929-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 15.50 KB
MD5 e329b42eb14d31918528f8699785224c Copy to Clipboard
SHA1 9f59755c78254817062f4be15f9125f842a03ec8 Copy to Clipboard
SHA256 6970b235576a7e62b862d998d3a030bea48aaf59d3eff19ca0bcbb55434cb425 Copy to Clipboard
SSDeep 384:Zn0B1v5TSsmqrFbvEvN8YogWJn4ZyJ3bbXCtZjaUcHu7udW:u7vOq9Mi/kIfCjdKA Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\plugin.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 331.50 KB
MD5 780cce6641cfeefb031f9f6c1fe6e0ff Copy to Clipboard
SHA1 08ecfa03667650b0b16ab036db28ec1742ff4280 Copy to Clipboard
SHA256 593402013b00ed76ccba359022495187c970c677e6cb18c68364a4ccdc1cff33 Copy to Clipboard
SSDeep 6144:WzI7QRFsR0LP/1FJHIG8duTxp7jpIzX/WgxuiOkZf9vE6V5GnkSCBS836:XYI0T/1Fedgp7jkvbpZ/HYHoSO6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\illustrations_retina.png Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 19.36 KB
MD5 3fa81e3c1e4eb63c027b1199691b3d46 Copy to Clipboard
SHA1 4a4319ffb2127db496aecbd3d870eecfaff74b72 Copy to Clipboard
SHA256 e0b5c076d982ff276a0ad2d9b928b7109f536898de624d17a5b7dc294dfbf555 Copy to Clipboard
SSDeep 384:F6EwEoUR0r/UTXO+6L5bU2OiI65ag9hkdKbsIVrtF6QKUaFSHJypcdSoT8jk1D5N:F6qR0rol2DI6rzVuQUFSHkiJggh5sGWk Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fi-fi\ui-strings.js Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 9.61 KB
MD5 ce35ea948638c1f448b74692ecc2b7d1 Copy to Clipboard
SHA1 fffcf747748a1b6c919e3b2e5295e56dbe5fee8a Copy to Clipboard
SHA256 e7b766b67cb00ebab19da060904df522d6b796a942c863c2f63b2034ba664119 Copy to Clipboard
SSDeep 192:58qfB1g/nmAq1f6fI+GW5PmO9YsDprqF6ysRrATp1k7wh5m13cLI9WjU:58VOAq1fLoPB1rIQrAd1k7doI9Wg Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\PlayStore_icon.svg Modified File Stream
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\00000928-Lock.onion (Created File)
Mime Type application/octet-stream
File Size 7.75 KB
MD5 00e8da0b9f52c2424921dd8eab19aeff Copy to Clipboard
SHA1 10a74ac96233929bb201084fbda6c4f059b9537c Copy to Clipboard
SHA256 26167d97e8358c143ed740073ad934a5ebd17a9b2fa6a188af3a2292d7de8c55 Copy to Clipboard
SSDeep 192:4kmZihix8KaugYAt2ucVPSM/4IV24hqE1Lk:rm8hixSKYO1SWN5q Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\AppStore_icon.svg Modified File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.00 KB
MD5 88b15ca15c0cdb76fb04ba38741b8343 Copy to Clipboard
SHA1 d044f7089b7a97e6196cad0705197263a7663985 Copy to Clipboard
SHA256 40ee5a881365460d668047f90db400879f535bb47ee5b75d329226738083e117 Copy to Clipboard
SSDeep 384:Zn0B1v5TSsmqrFbvEvN8YogWJn4ZyJ3bbXCtZjaUcHuT:u7vOq9Mi/kIfCjdT Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\eu-es\00000552-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.06 KB
MD5 25e4a93a2e5474243e5bbc125b94ddeb Copy to Clipboard
SHA1 82ad9b075069ac4fa378438e09e3a12d4c3368c3 Copy to Clipboard
SHA256 8066824d504e370fc23462742206a0287743e3011ab7c17e635d340d2cc53326 Copy to Clipboard
SSDeep 384:OUO4/yTEb8vhXsoO0VFouvGLLczVYBUFtpfq8mVIK8:3qIb8vhXvrvy0V+Qt9qz4 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ru-ru\00000566-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 21.66 KB
MD5 ac9ed7b951e34b78d64bb198c09b9ea1 Copy to Clipboard
SHA1 c46bd2210ad99daf56f0ef0e4f34c16779170017 Copy to Clipboard
SHA256 f8e8101d2359ba8183fb8712bc9320a31f46788972e7149603f886bb3d348583 Copy to Clipboard
SSDeep 384:0S7CMaIrja7uyh5B17g2fjbbSuj9jleCUApOiM1kajRAXSB4cGtv5qhnhm:DCMj3adB1821j9jleCDOxf0SBLGtkhm Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\css\00000295-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 5.02 KB
MD5 cc7984f4f33f76f8cb906e019251ea5d Copy to Clipboard
SHA1 7775133f6b3832d802f7870d781db76a986da2c8 Copy to Clipboard
SHA256 7ba2c9ea425415ccbe5b2a6767a1548dc29fe50383dbf49b1e712d88be269c3f Copy to Clipboard
SSDeep 96:fAe9lr6V6vNaBLgwnlEsqIp8E5FIsipgOhfWQG+ACuNQIbpf7u:fe8EBLZlpqroUnA3NrZ7u Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\fr-fr\00000554-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.75 KB
MD5 17ddc07cdf45b25ec55b07730b96c6db Copy to Clipboard
SHA1 a7fc78b00883a901f30e6a47fc8ad6511dc3b6ce Copy to Clipboard
SHA256 35a0daa199e8b8fe4e9b10540fde7e45d5955ec687f682d5c35503561adc660c Copy to Clipboard
SSDeep 384:/0rSb9YefgHoi3YGkM7pyGb0tYyeR+Ozubse9LWIdmS3skR3nB:/0rmniIGXlPxyeqbVE1SR Copy to Clipboard
C:\ProgramData\Eula.txt Created File Text
Not Queried
...
»
Mime Type text/plain
File Size 7.31 KB
MD5 8c24c4084cdc3b7e7f7a88444a012bfc Copy to Clipboard
SHA1 5ab806618497189342722d42dc382623ac3e1b55 Copy to Clipboard
SHA256 8329bcbadc7f81539a4969ca13f0be5b8eb7652b912324a1926fc9bfb6ec005a Copy to Clipboard
SSDeep 192:RCVPxjERdQe/lb9iLbRvhSXH3DsDw3zF55Mz6h:RcFERdXlRiLbujuw3zF55jh Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\cpdf\00000290-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 3.33 KB
MD5 1afea0514680fef446d45ac121bfc9be Copy to Clipboard
SHA1 b3b151714779f63b0185448aa066a6fdf7377372 Copy to Clipboard
SHA256 f3e685fc6d2c63d21d483ab66155abc5e42e05b075de5249c9d8ba6606ef95d1 Copy to Clipboard
SSDeep 96:m70R81fzxfgBsk5l4/sSH7yJFDdaHnxRPTSAeTr5:m7g81dfgBfMluzd6xlSp5 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\cs-cz\00000547-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.77 KB
MD5 965fc921a91495ced80022a606a80dc9 Copy to Clipboard
SHA1 b920e5d747a84d7d2f96ac1386b7fc2f0d250583 Copy to Clipboard
SHA256 19945eaeee836a5a9c087050387f094d6db31fbe823d02d4b3ea4e4504864645 Copy to Clipboard
SSDeep 384:4BEd5Npij4xh7JY/aVv1bxr7cuRI5OjVe8zla0TpGCw6P:4BEPi4L7IcxxrjW5OPzRs6P Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\css\00000575-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 5.05 KB
MD5 25ffc8faa03401e6952dfe3aba71e9ab Copy to Clipboard
SHA1 476a7fef36a0265e746987f0e84b93077a85ce71 Copy to Clipboard
SHA256 007c65f0779cbfb14e9b6b794e0dc35b67b7476988a0b0e8607184b8686de904 Copy to Clipboard
SSDeep 96:atYkfhIaFrezd5iGyk8QS0LG6op2RzzH0xg/z1TbsY7782WpSH+wEaxlBV8:atY1p22Sc7Nz8gZTgY/8XSjv1V8 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\00000927-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.25 KB
MD5 e7202b51b78cfea5a3e9a052e07dec41 Copy to Clipboard
SHA1 196b3ce57635b81fcc22ded19d5913f39cb23e68 Copy to Clipboard
SHA256 91971e7a2fcbdd5af767d54ee676cdfaf3c50b56fd09288637bb940fbe189740 Copy to Clipboard
SSDeep 384:XAWTBlTOoxJgXTlE0k93NYBPV3UfuYGJFx/:XRBliCJgXTlE3uBPBNLFx/ Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\00000540-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.52 KB
MD5 3ddc772c2cfe1de7b87bafd4f067e056 Copy to Clipboard
SHA1 b37af95e71f473a0cccd8d3ca8e3259d99256102 Copy to Clipboard
SHA256 41b1e782fbd4f22c9321a191d8fb1a1ac15b6bc3cdf788ce4456bba120612962 Copy to Clipboard
SSDeep 24:a/CV9jvV4b4JRMK54vaXLTMGhNmfXafIfdZJc1rx4jTV6IdT9urKG/SKibAnkqn:X9jd6CRMK66MpVZJErinJdwrj/PkM Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\css\00000294-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.69 KB
MD5 6f35a321c1a04e7f600d40a3d6e1a833 Copy to Clipboard
SHA1 6f9a28806406942f07e9dbfe66f810288eec0ca1 Copy to Clipboard
SHA256 2dafed71bc08801a90e406d0925b1960302f991dd986835a7677274f5ce0c754 Copy to Clipboard
SSDeep 48:s3PHNk3IFDIEwdTsrpqWrQRYKEWQKULCi3JCuAS:P4FsuNhrfPKS9CuAS Copy to Clipboard
C:\ProgramData\Microsoft.zip Created File Unknown
Not Queried
...
»
Mime Type application/zip
File Size 157.33 KB
MD5 5fffb905d9a881a36420a40f7ea1e999 Copy to Clipboard
SHA1 ca06e8c601d802b3c18d2de0c37ce4fff8ae782a Copy to Clipboard
SHA256 e78fe7d61b760118529858351c20e2814d5ca8a0c16e7c65fd180fd12f431824 Copy to Clipboard
SSDeep 3072:lGaL6nBYtIFRgWoIutqXZuyVnrhuMUK18cih4hodDphXYYx0wvZXrLoyy4d3U8Pc:lGY6nBkztqjn8cC4h+phXYelvpN3E8Pc Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\nl-nl\00000561-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.17 KB
MD5 c88258557b651fe7e63bc99183e82e70 Copy to Clipboard
SHA1 ac2420f977fb5b450d8a13037f80f84c0c6ca6c1 Copy to Clipboard
SHA256 dd4d232655944536801abd530a91931145590bdd15e1696eee2bd3ad5a4f4af7 Copy to Clipboard
SSDeep 384:lmRAbLCePTP9j/kjVBkN4OwQhprLsq1B82Z:sRheBjcbpQhprLsqr82Z Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\da-dk\00000548-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.08 KB
MD5 e63e8461ae64f4deea7cf637cbe5e86d Copy to Clipboard
SHA1 1b54cef00ca39c987d63a6c731da667e5bd3c336 Copy to Clipboard
SHA256 1dd6aea21e5bb20803392eab446ce4d757f3834aeb3a2282f238ae0b661957e3 Copy to Clipboard
SSDeep 384:jwY2HG8xyK/PxCVgZg/A32F2obV0v7JWDIGo6:Z+TB8/AQjVNo6 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\00000576-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.67 KB
MD5 82a43b9814fda16ba34402a694b162fa Copy to Clipboard
SHA1 312e187a840b92acd0a6b6dc3548d9d5a24e4b34 Copy to Clipboard
SHA256 0aecba8482521357ef8c6b8ca8bf103a3836b514b1508b8a44b0552b419648c7 Copy to Clipboard
SSDeep 48:Kvi3VxyWpXZUcltzbZuaGC+7F8TQ9ixU+b2k1+R3:2CVsWpJU+fZqmEAxU+b2k8 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\uk-ua\00000571-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 21.98 KB
MD5 21a1949f88e83c401a018be4e997f91e Copy to Clipboard
SHA1 7dff8d62230994bee0808f8525953b3f6981db46 Copy to Clipboard
SHA256 e7093668d4f8c4e03e11bda7966c5f706d346207f713e98895729421aa4366a1 Copy to Clipboard
SSDeep 384:2ivNBbSnLuiRWfcy1O+cUQn9sSkg3GwGiBs/CAR2fVIJ9bW1dwuGwwjXrCjFxffK:rPSLfRWUy/+lGiBs/CxtZ1ifjAPs1Gj4 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\es-es\00000551-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.98 KB
MD5 0cc11fe027f1f46ff4731e02d75804d7 Copy to Clipboard
SHA1 57dcd71a35db8aa47966b0c16b517b1f5382abba Copy to Clipboard
SHA256 6eb5f718c45c595177619e43c73a72a902430f8c8e479599256f3ab4a8c2340b Copy to Clipboard
SSDeep 384:up6i+BMwii+CxC2z7i+BPUpwTuSvGBhQ5TnHDB:0p+BMwfxbzG+WwTXuBK5TjB Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\00000539-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.97 KB
MD5 eedd177b26eaa34ce01169cf62a06b47 Copy to Clipboard
SHA1 ac5c1fcf52d564464eaf56981a5e440ec17e1bd6 Copy to Clipboard
SHA256 9b53c629ff34da2f3c61c4fbfc384e2c21cfbe5fa1743d211406f3334cc50b3a Copy to Clipboard
SSDeep 48:VS/1trkldmYsSBIXjEg3IVlJ1/LbuIUpIEDsm++SzS5qlaLtyXK:KtAsYMzBYl/CIEDs7z8fZAK Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\hu-hu\00000556-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.94 KB
MD5 97e2bd08ecade37a70bfc7d26c5bdf3d Copy to Clipboard
SHA1 247d36fdbae32823efb42b9ce746ab8ae31398c8 Copy to Clipboard
SHA256 272118fca9f160f026e7ef90bd82e5431c66fc7d8094838f8490fa2604ff6add Copy to Clipboard
SSDeep 384:fcM+BuY0Bt2Rp3UnOImwH9cmf+9bFyC0R9D0joKn0wd45GpJ0DmU3d7Y:fc1TOQRpkOVwdBG5sCwW05GPa3k Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\sl-si\00000568-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.06 KB
MD5 229f97cdc7fcbe0626fb5326a0bd3466 Copy to Clipboard
SHA1 33fc2739208179d14dff5c1d9de458284c597c22 Copy to Clipboard
SHA256 66739e58fddba9e24c035e2993d48efceb62d76d4b9aa9fe591eef04c7e91804 Copy to Clipboard
SSDeep 384:kj4TUxsnOrQ5wwOgmiAlpQS4qsCnOHhEJZGh1Yy:kj4TUxdQOwssSpsCnOHhT1Yy Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\fi-fi\00000553-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.64 KB
MD5 6db0e080fb7316edf6dc5fe95c2f0733 Copy to Clipboard
SHA1 87319f678a7bc1ad176957b3cffaa7b2318ad5cc Copy to Clipboard
SHA256 f3265ff968cbf81e460a647759990df0699d92d9de9560613cb8096f8ac67a7b Copy to Clipboard
SSDeep 192:A5O5UMtr7GXaxETdmCgnIlGGjmBSfhYjZgm4cj4bO1uZcFW7EsJ2qcDpVVBXlvxx:x5tma7fGsO4wO0ZV7EsJ2JD/Xlv9Covn Copy to Clipboard
C:\PerfLogs\# How to Decrypt Files.html Created File Text
Not Queried
...
»
Also Known As C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\es-es\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\eu-es\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fi-fi\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-fr\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-ma\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\he-il\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hr-hr\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\hu-hu\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ar-ae\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ca-es\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\cs-cz\# How to Decrypt Files.html (Created File)
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\# How to Decrypt Files.html (Created File)
Mime Type text/html
File Size 11.78 KB
MD5 855095155222830e0269875f32ca635f Copy to Clipboard
SHA1 56b1b506b8fd5c4cb427f2706a99d7ee0f15d772 Copy to Clipboard
SHA256 9e24110e8db7e18faba2e80d5558c8de7a2d1f3b6d8746879ebf87c4e96f931e Copy to Clipboard
SSDeep 192:0Oota5SqD1ajqaqj5i231NUMVrKF01xpFG3oly52jtZxzemjsewuqyjGEI:wanD1ajq5r3K4E3oU5WR7IeCjB Copy to Clipboard
C:\ProgramData\sdelete64.exe Created File Binary
Not Queried
...
»
Mime Type application/x-dosexec
File Size 163.14 KB
MD5 ff4cc6c8e77e184246fa687eab0b0807 Copy to Clipboard
SHA1 9fa2cfcc7dac712eff626ff7437d579ccc3ca58a Copy to Clipboard
SHA256 29a7b149b75d216ac057edcf963e424ec40fa1150c415f812ecdabd934c85386 Copy to Clipboard
SSDeep 3072:c4ZJe7NvuMBzWYbDEjTs9w28NkI5UFZTtbxSvknIMo:c4beJv3bojTs9TESZg9 Copy to Clipboard
ImpHash 1558573ef0edc6e5e0fd3da827d65ba0 Copy to Clipboard
PE Information
»
Image Base 0x140000000
Entry Point 0x140006a74
Size Of Code 0x12200
Size Of Initialized Data 0x14c00
File Type executable
Subsystem windows_cui
Machine Type amd64
Compile Timestamp 2018-01-07 20:45:08+00:00
Version Information (8)
»
LegalCopyright Copyright (C) 1999-2018 Mark Russinovich
InternalName SDelete
FileVersion 2.01
CompanyName Sysinternals - www.sysinternals.com
ProductName Sysinternals Sdelete
ProductVersion 2.01
FileDescription Secure file delete
OriginalFilename sdelete.exe
Sections (6)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x140001000 0x12139 0x12200 0x400 cnt_code, mem_execute, mem_read 6.46
.rdata 0x140014000 0xf0dc 0xf200 0x12600 cnt_initialized_data, mem_read 4.38
.data 0x140024000 0x3de0 0x1a00 0x21800 cnt_initialized_data, mem_read, mem_write 2.9
.pdata 0x140028000 0xeac 0x1000 0x23200 cnt_initialized_data, mem_read 4.74
.rsrc 0x140029000 0x548 0x600 0x24200 cnt_initialized_data, mem_read 3.78
.reloc 0x14002a000 0x598 0x600 0x24800 cnt_initialized_data, mem_discardable, mem_read 5.24
Imports (6)
»
VERSION.dll (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
VerQueryValueW 0x0 0x1400143a0 0x22880 0x20e80 0xe
GetFileVersionInfoW 0x0 0x1400143a8 0x22888 0x20e88 0x6
GetFileVersionInfoSizeW 0x0 0x1400143b0 0x22890 0x20e90 0x5
KERNEL32.dll (88)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
WaitForSingleObject 0x0 0x140014088 0x22568 0x20b68 0x508
WriteFile 0x0 0x140014090 0x22570 0x20b70 0x534
ReadFile 0x0 0x140014098 0x22578 0x20b78 0x3c3
DeviceIoControl 0x0 0x1400140a0 0x22580 0x20b80 0xe1
SetFilePointer 0x0 0x1400140a8 0x22588 0x20b88 0x474
FindClose 0x0 0x1400140b0 0x22590 0x20b90 0x134
CloseHandle 0x0 0x1400140b8 0x22598 0x20b98 0x52
GetTickCount 0x0 0x1400140c0 0x225a0 0x20ba0 0x29a
FormatMessageW 0x0 0x1400140c8 0x225a8 0x20ba8 0x164
ExpandEnvironmentStringsW 0x0 0x1400140d0 0x225b0 0x20bb0 0x123
GetCurrentDirectoryW 0x0 0x1400140d8 0x225b8 0x20bb8 0x1c5
GetDiskFreeSpaceW 0x0 0x1400140e0 0x225c0 0x20bc0 0x1d6
RemoveDirectoryW 0x0 0x1400140e8 0x225c8 0x20bc8 0x406
GetFullPathNameW 0x0 0x1400140f0 0x225d0 0x20bd0 0x202
CreateFileW 0x0 0x1400140f8 0x225d8 0x20bd8 0x8f
GetLastError 0x0 0x140014100 0x225e0 0x20be0 0x208
GetFileAttributesW 0x0 0x140014108 0x225e8 0x20be8 0x1f1
DeleteFileW 0x0 0x140014110 0x225f0 0x20bf0 0xd7
FindFirstFileW 0x0 0x140014118 0x225f8 0x20bf8 0x13f
FindNextFileW 0x0 0x140014120 0x22600 0x20c00 0x14b
MoveFileW 0x0 0x140014128 0x22608 0x20c08 0x365
OutputDebugStringW 0x0 0x140014130 0x22610 0x20c10 0x38c
WriteConsoleW 0x0 0x140014138 0x22618 0x20c18 0x533
SetFilePointerEx 0x0 0x140014140 0x22620 0x20c20 0x475
HeapReAlloc 0x0 0x140014148 0x22628 0x20c28 0x2da
VirtualFree 0x0 0x140014150 0x22630 0x20c30 0x4fb
VirtualAlloc 0x0 0x140014158 0x22638 0x20c38 0x4f8
GetVersion 0x0 0x140014160 0x22640 0x20c40 0x2aa
GetCommandLineW 0x0 0x140014168 0x22648 0x20c48 0x18d
GetModuleHandleW 0x0 0x140014170 0x22650 0x20c50 0x21e
GetStdHandle 0x0 0x140014178 0x22658 0x20c58 0x26b
LoadLibraryW 0x0 0x140014180 0x22660 0x20c60 0x341
LocalAlloc 0x0 0x140014188 0x22668 0x20c68 0x346
LocalFree 0x0 0x140014190 0x22670 0x20c70 0x34a
GetProcAddress 0x0 0x140014198 0x22678 0x20c78 0x24c
GetModuleFileNameW 0x0 0x1400141a0 0x22680 0x20c80 0x21a
GetFileType 0x0 0x1400141a8 0x22688 0x20c88 0x1fa
LCMapStringW 0x0 0x1400141b0 0x22690 0x20c90 0x32f
SetFileAttributesW 0x0 0x1400141b8 0x22698 0x20c98 0x46f
SetStdHandle 0x0 0x1400141c0 0x226a0 0x20ca0 0x494
EnterCriticalSection 0x0 0x1400141c8 0x226a8 0x20ca8 0xf2
LeaveCriticalSection 0x0 0x1400141d0 0x226b0 0x20cb0 0x33b
HeapSize 0x0 0x1400141d8 0x226b8 0x20cb8 0x2dc
HeapAlloc 0x0 0x1400141e0 0x226c0 0x20cc0 0x2d3
EncodePointer 0x0 0x1400141e8 0x226c8 0x20cc8 0xee
DecodePointer 0x0 0x1400141f0 0x226d0 0x20cd0 0xcb
ExitProcess 0x0 0x1400141f8 0x226d8 0x20cd8 0x11f
GetModuleHandleExW 0x0 0x140014200 0x226e0 0x20ce0 0x21d
MultiByteToWideChar 0x0 0x140014208 0x226e8 0x20ce8 0x369
WideCharToMultiByte 0x0 0x140014210 0x226f0 0x20cf0 0x520
HeapFree 0x0 0x140014218 0x226f8 0x20cf8 0x2d7
GetConsoleMode 0x0 0x140014220 0x22700 0x20d00 0x1b2
ReadConsoleInputA 0x0 0x140014228 0x22708 0x20d08 0x3b8
SetConsoleMode 0x0 0x140014230 0x22710 0x20d10 0x44b
GetStringTypeW 0x0 0x140014238 0x22718 0x20d18 0x270
DeleteCriticalSection 0x0 0x140014240 0x22720 0x20d20 0xd2
FlushFileBuffers 0x0 0x140014248 0x22728 0x20d28 0x15d
GetConsoleCP 0x0 0x140014250 0x22730 0x20d30 0x1a0
RtlUnwindEx 0x0 0x140014258 0x22738 0x20d38 0x425
IsDebuggerPresent 0x0 0x140014260 0x22740 0x20d40 0x302
IsProcessorFeaturePresent 0x0 0x140014268 0x22748 0x20d48 0x306
GetStartupInfoW 0x0 0x140014270 0x22750 0x20d50 0x26a
RtlCaptureContext 0x0 0x140014278 0x22758 0x20d58 0x418
RtlLookupFunctionEntry 0x0 0x140014280 0x22760 0x20d60 0x41f
RtlVirtualUnwind 0x0 0x140014288 0x22768 0x20d68 0x426
UnhandledExceptionFilter 0x0 0x140014290 0x22770 0x20d70 0x4e2
SetUnhandledExceptionFilter 0x0 0x140014298 0x22778 0x20d78 0x4b3
SetLastError 0x0 0x1400142a0 0x22780 0x20d80 0x480
InitializeCriticalSectionAndSpinCount 0x0 0x1400142a8 0x22788 0x20d88 0x2eb
Sleep 0x0 0x1400142b0 0x22790 0x20d90 0x4c0
GetCurrentProcess 0x0 0x1400142b8 0x22798 0x20d98 0x1c6
TerminateProcess 0x0 0x1400142c0 0x227a0 0x20da0 0x4ce
TlsAlloc 0x0 0x1400142c8 0x227a8 0x20da8 0x4d3
TlsGetValue 0x0 0x1400142d0 0x227b0 0x20db0 0x4d5
TlsSetValue 0x0 0x1400142d8 0x227b8 0x20db8 0x4d6
TlsFree 0x0 0x1400142e0 0x227c0 0x20dc0 0x4d4
IsValidCodePage 0x0 0x1400142e8 0x227c8 0x20dc8 0x30c
GetACP 0x0 0x1400142f0 0x227d0 0x20dd0 0x16e
GetOEMCP 0x0 0x1400142f8 0x227d8 0x20dd8 0x23e
GetCPInfo 0x0 0x140014300 0x227e0 0x20de0 0x178
GetCurrentThreadId 0x0 0x140014308 0x227e8 0x20de8 0x1cb
GetProcessHeap 0x0 0x140014310 0x227f0 0x20df0 0x251
LoadLibraryExW 0x0 0x140014318 0x227f8 0x20df8 0x340
QueryPerformanceCounter 0x0 0x140014320 0x22800 0x20e00 0x3a9
GetCurrentProcessId 0x0 0x140014328 0x22808 0x20e08 0x1c7
GetSystemTimeAsFileTime 0x0 0x140014330 0x22810 0x20e10 0x280
GetEnvironmentStringsW 0x0 0x140014338 0x22818 0x20e18 0x1e1
FreeEnvironmentStringsW 0x0 0x140014340 0x22820 0x20e20 0x167
USER32.dll (9)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
LoadCursorW 0x0 0x140014350 0x22830 0x20e30 0x1ef
InflateRect 0x0 0x140014358 0x22838 0x20e38 0x1b9
GetSysColorBrush 0x0 0x140014360 0x22840 0x20e40 0x17e
SetCursor 0x0 0x140014368 0x22848 0x20e48 0x28e
SetWindowTextW 0x0 0x140014370 0x22850 0x20e50 0x2d3
GetDlgItem 0x0 0x140014378 0x22858 0x20e58 0x129
EndDialog 0x0 0x140014380 0x22860 0x20e60 0xda
DialogBoxIndirectParamW 0x0 0x140014388 0x22868 0x20e68 0xaa
SendMessageW 0x0 0x140014390 0x22870 0x20e70 0x280
GDI32.dll (6)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
StartPage 0x0 0x140014050 0x22530 0x20b30 0x2b2
EndDoc 0x0 0x140014058 0x22538 0x20b38 0xef
StartDocW 0x0 0x140014060 0x22540 0x20b40 0x2b0
SetMapMode 0x0 0x140014068 0x22548 0x20b48 0x294
GetDeviceCaps 0x0 0x140014070 0x22550 0x20b50 0x1cb
EndPage 0x0 0x140014078 0x22558 0x20b58 0xf2
COMDLG32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
PrintDlgW 0x0 0x140014040 0x22520 0x20b20 0x15
ADVAPI32.dll (7)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
CryptAcquireContextW 0x0 0x140014000 0x224e0 0x20ae0 0xb1
RegSetValueExW 0x0 0x140014008 0x224e8 0x20ae8 0x27e
RegQueryValueExW 0x0 0x140014010 0x224f0 0x20af0 0x26e
RegOpenKeyW 0x0 0x140014018 0x224f8 0x20af8 0x264
RegCreateKeyW 0x0 0x140014020 0x22500 0x20b00 0x23c
RegCloseKey 0x0 0x140014028 0x22508 0x20b08 0x230
CryptGenRandom 0x0 0x140014030 0x22510 0x20b10 0xc1
Digital Signatures (2)
»
Certificate: Microsoft Corporation
»
Issued by Microsoft Corporation
Parent Certificate Microsoft Code Signing PCA
Country Name US
Valid From 2017-08-11 20:11:15+00:00
Valid Until 2018-08-11 20:11:15+00:00
Algorithm sha1_rsa
Serial Number 33 00 00 01 79 7C 2E 57 4E 52 E1 CA D6 00 01 00 00 01 79
Thumbprint 5E AD 30 0D C7 E4 D6 37 94 8E CB 0E D8 29 A0 72 BD 15 2E 17
Certificate: Microsoft Code Signing PCA
»
Issued by Microsoft Code Signing PCA
Country Name US
Valid From 2010-08-31 22:19:32+00:00
Valid Until 2020-08-31 22:29:32+00:00
Algorithm sha1_rsa
Serial Number 61 33 26 1A 00 00 00 00 00 31
Thumbprint 3C AF 9B A2 DB 55 70 CA F7 69 42 FF 99 10 1B 99 38 88 E2 57
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\zh-tw\00000573-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.19 KB
MD5 1e23be827162e6a8a7a622d869a4a46f Copy to Clipboard
SHA1 71c9f9e4131f9f06762220c50b79e6afea65f2ce Copy to Clipboard
SHA256 36d1f730fa5f05c77359ad8d0b8fc290321ba8871f195fc65d5e2845acbd08b3 Copy to Clipboard
SSDeep 192:Qk6Nrf5RtH72yZFPJN1CmpBmDP3vMk9rIyLoTznAMem3l63ysFfc6Iowxo66sw5H:qB/7XUDPUiTofAdcLAJIxVw5Hki Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\pt-br\00000563-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.83 KB
MD5 d9ca2827280c64de443c2fa5cde1cddf Copy to Clipboard
SHA1 f3a9741abdc09a295db00c6e885197e723ab292a Copy to Clipboard
SHA256 240e45391ed80701257d66316e4e8fdf71d27a91c9aa554917b518d5a4080203 Copy to Clipboard
SSDeep 384:GfYKxvaVPdeH+mcJTmwSc5ai8IW7UDEC8UnnD1XaCfkd:GxaE+m4mw1W7UPBaYkd Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\00000296-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.67 KB
MD5 48196c3b008bcabe1d63afb9a2e3d62c Copy to Clipboard
SHA1 f05bae782ad2da95e932805ff081c3a7fc418888 Copy to Clipboard
SHA256 8ac5e6a2191639ff66705c380170ba644e2fc997a47d55a5e85fed2584788094 Copy to Clipboard
SSDeep 24:64wS1Y6ALo8biWKHMU1G9qqHhvAh6J8yDYdfjbpdxkgMJRWmtC2oj/JFh/t:ftiLo8WTsUU9qqBIaUDdUJRVtCNj/bhl Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\root\00000565-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.38 KB
MD5 fc5baee6b989d91ae8b7a3950da729b1 Copy to Clipboard
SHA1 57fdbde429fa53a36d1e7cf6973815a61ce3469e Copy to Clipboard
SHA256 819c1707df4ad8d9c853a2aa3b34031b2dd048a127da64dbd1c13751cf626787 Copy to Clipboard
SSDeep 192:WTO1JatKC1qYzjJlLdnDmprwDhJBOGmsw+e4k5keqNr5j1S1RbEu17H3XKlWNhuz:WTKwtKnklDVJB2vhaeqTZbu17H1WZ Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ja-jp\00000558-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 18.17 KB
MD5 67291398659d77ffba258862f4055b54 Copy to Clipboard
SHA1 1234d8e85c393143b49cb575e0ca3a8b0e5b2773 Copy to Clipboard
SHA256 a0a6ef12d9657853d48922ac8764c1f7fc1f2319e4a12c2f04201672258b44c9 Copy to Clipboard
SSDeep 384:hG/3pnBSULvykWzsJ8I62YXULRE65VYsMyrOIUto:hGvpnoUeRA8erz5VYsMLbo Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\00000297-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.67 KB
MD5 29ab582ca66674e861e159b71b00315b Copy to Clipboard
SHA1 41561b5fdd20a184246364c93ddfd6fd89e2582d Copy to Clipboard
SHA256 175e980d35226aa10dea8e78c5d74f8320d0915115ee39eee1edffe1fbea4cd9 Copy to Clipboard
SSDeep 48:5ydw8Yll2PShWXZ1MgtLIabAKEqmVmINSVRUR2vBEOR:5XlMmWJ1FCX+RUR2vhR Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\sk-sk\00000567-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.06 KB
MD5 d3fe71379f78b586c0e568f1ae3c78f5 Copy to Clipboard
SHA1 57cc5763c49cd64f7e8da7e334e4c0aa40520315 Copy to Clipboard
SHA256 5a4fb19b594212bf7ecdfaade4ab2f95ee64a27c5a72ec506114b4ea7d166d65 Copy to Clipboard
SSDeep 384:7ohAZ+ZFKZ4S2JKcjjFzL/epzveTyBM96iB9MlWsahpXAmr6:7+5zLjFzLmFe8M9fWlWPQd Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\00000543-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.52 KB
MD5 41cf76b9c142b9ab6e9f40179de5ff12 Copy to Clipboard
SHA1 20d645c91902a3588bf09ce0eb3068ae5538ebde Copy to Clipboard
SHA256 66d2cf56d435751986b60003d883a234869e9111efab117be884bbb1949a8023 Copy to Clipboard
SSDeep 24:Rv1GYORBCd8dq6YL1IQGEY9pgWSLnlFsJuoiC4L9gSxLnTGNUlRqUxA+GpMboWAq:Rv1KBCTLbWSDAT2gcTGaDqY/MrezFGk Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\pl-pl\00000562-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.98 KB
MD5 95f6d066c4b90575f659d2f9cf4683ac Copy to Clipboard
SHA1 1521e03bd063f0d2683e521743b1da949f1b9892 Copy to Clipboard
SHA256 f847f6bd854ef97d8280e3250f15d012b220c4cda9d8b35547d5f798ca4945c9 Copy to Clipboard
SSDeep 384:r1lvNLMCgn/mwzjNySECRKzHqyCQ3ITmJ7jz9oNbSuDX:dwNnB7JRKzH+QTJjGNPX Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\00000298-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.59 KB
MD5 70fb042090fc9f5309303df43c863da9 Copy to Clipboard
SHA1 189c592aeba562c05574a23d425e927a600e6b8a Copy to Clipboard
SHA256 3987eb05b220e71d0bb1481d8cb3db7f96139df5da1fad4b9309844b0666a763 Copy to Clipboard
SSDeep 48:bZAtWx78JHwfF6PPAaTKosyrSoRsUEB/PRMI5b:bZAsJ896F6PXTKoskSipq/N5b Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\tr-tr\00000570-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.25 KB
MD5 9e5168ea8f4ce371a06e3a58eb8d9505 Copy to Clipboard
SHA1 e79644e15f65a85ac3fa79d2728be443cd4c77e8 Copy to Clipboard
SHA256 efef790693c0d0eedd0befdd7f9dcf21f3edbfe7749a60dfb9287e64447c0af7 Copy to Clipboard
SSDeep 192:oqsICj5mEqxuyAlffdBAQs+igQVmQkeX49ywyFbfLCqzrzmlUQXrXcQvhoNguAXO:oRIO5uuysD0SeI9yfVf2aaWsvosXOuq Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\de-de\00000549-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 17.22 KB
MD5 685f2ed5f393580d3b56e72149834276 Copy to Clipboard
SHA1 8cebfd209eea930e8795c282f852f5f954acf061 Copy to Clipboard
SHA256 ee40de56ce969d80f6da1b2ee527a8eaa0e4635a65dab5b21f398c4c2041f05a Copy to Clipboard
SSDeep 384:qTok8/EhPBVfRn9jyrmIkQANL8nz0L2cs8tV6S168Q:9Mh5VJckQK8z62cs89I7 Copy to Clipboard
C:\ProgramData\sdelete.exe Created File Binary
Not Queried
...
»
Mime Type application/x-dosexec
File Size 152.63 KB
MD5 f2bbf310a35f43916db6b664325b76a9 Copy to Clipboard
SHA1 47ab6883dbf15736755eea62e4a0f9594b54071c Copy to Clipboard
SHA256 e75ef627bc6475287e73349e5ed4f9d9b831c9535c7b2751ed0d217c93a4b997 Copy to Clipboard
SSDeep 3072:wzuoRFwoaXkn3uT8ZUF7jAcxtiBRrKyOf:w5pN3u97SyHf Copy to Clipboard
ImpHash 5e7462da27166d003bc079955dfed93d Copy to Clipboard
PE Information
»
Image Base 0x400000
Entry Point 0x40699f
Size Of Code 0x12600
Size Of Initialized Data 0x11a00
File Type executable
Subsystem windows_cui
Machine Type i386
Compile Timestamp 2018-01-07 20:48:14+00:00
Version Information (8)
»
LegalCopyright Copyright (C) 1999-2018 Mark Russinovich
InternalName SDelete
FileVersion 2.01
CompanyName Sysinternals - www.sysinternals.com
ProductName Sysinternals Sdelete
ProductVersion 2.01
FileDescription Secure file delete
OriginalFilename sdelete.exe
Sections (5)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x401000 0x125c0 0x12600 0x400 cnt_code, mem_execute, mem_read 6.63
.rdata 0x414000 0xca92 0xcc00 0x12a00 cnt_initialized_data, mem_read 4.52
.data 0x421000 0x3388 0x1400 0x1f600 cnt_initialized_data, mem_read, mem_write 3.53
.rsrc 0x425000 0x548 0x600 0x20a00 cnt_initialized_data, mem_read 3.77
.reloc 0x426000 0x124c 0x1400 0x21000 cnt_initialized_data, mem_discardable, mem_read 6.39
Imports (6)
»
VERSION.dll (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
VerQueryValueW 0x0 0x4141c8 0x20278 0x1ec78 0xe
GetFileVersionInfoW 0x0 0x4141cc 0x2027c 0x1ec7c 0x6
GetFileVersionInfoSizeW 0x0 0x4141d0 0x20280 0x1ec80 0x5
KERNEL32.dll (86)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
WaitForSingleObject 0x0 0x414044 0x200f4 0x1eaf4 0x4f9
WriteFile 0x0 0x414048 0x200f8 0x1eaf8 0x525
ReadFile 0x0 0x41404c 0x200fc 0x1eafc 0x3c0
DeviceIoControl 0x0 0x414050 0x20100 0x1eb00 0xdd
SetFilePointer 0x0 0x414054 0x20104 0x1eb04 0x466
FindClose 0x0 0x414058 0x20108 0x1eb08 0x12e
CloseHandle 0x0 0x41405c 0x2010c 0x1eb0c 0x52
GetTickCount 0x0 0x414060 0x20110 0x1eb10 0x293
FormatMessageW 0x0 0x414064 0x20114 0x1eb14 0x15e
ExpandEnvironmentStringsW 0x0 0x414068 0x20118 0x1eb18 0x11d
GetCurrentDirectoryW 0x0 0x41406c 0x2011c 0x1eb1c 0x1bf
GetDiskFreeSpaceW 0x0 0x414070 0x20120 0x1eb20 0x1cf
RemoveDirectoryW 0x0 0x414074 0x20124 0x1eb24 0x403
GetFullPathNameW 0x0 0x414078 0x20128 0x1eb28 0x1fb
CreateFileW 0x0 0x41407c 0x2012c 0x1eb2c 0x8f
GetLastError 0x0 0x414080 0x20130 0x1eb30 0x202
GetFileAttributesW 0x0 0x414084 0x20134 0x1eb34 0x1ea
DeleteFileW 0x0 0x414088 0x20138 0x1eb38 0xd6
FindFirstFileW 0x0 0x41408c 0x2013c 0x1eb3c 0x139
FindNextFileW 0x0 0x414090 0x20140 0x1eb40 0x145
MoveFileW 0x0 0x414094 0x20144 0x1eb44 0x363
OutputDebugStringW 0x0 0x414098 0x20148 0x1eb48 0x38a
RtlUnwind 0x0 0x41409c 0x2014c 0x1eb4c 0x418
WriteConsoleW 0x0 0x4140a0 0x20150 0x1eb50 0x524
SetFilePointerEx 0x0 0x4140a4 0x20154 0x1eb54 0x467
VirtualFree 0x0 0x4140a8 0x20158 0x1eb58 0x4ec
VirtualAlloc 0x0 0x4140ac 0x2015c 0x1eb5c 0x4e9
GetVersion 0x0 0x4140b0 0x20160 0x1eb60 0x2a2
GetCommandLineW 0x0 0x4140b4 0x20164 0x1eb64 0x187
GetModuleHandleW 0x0 0x4140b8 0x20168 0x1eb68 0x218
GetStdHandle 0x0 0x4140bc 0x2016c 0x1eb6c 0x264
LoadLibraryW 0x0 0x4140c0 0x20170 0x1eb70 0x33f
LocalAlloc 0x0 0x4140c4 0x20174 0x1eb74 0x344
LocalFree 0x0 0x4140c8 0x20178 0x1eb78 0x348
GetProcAddress 0x0 0x4140cc 0x2017c 0x1eb7c 0x245
GetModuleFileNameW 0x0 0x4140d0 0x20180 0x1eb80 0x214
GetFileType 0x0 0x4140d4 0x20184 0x1eb84 0x1f3
LCMapStringW 0x0 0x4140d8 0x20188 0x1eb88 0x32d
SetFileAttributesW 0x0 0x4140dc 0x2018c 0x1eb8c 0x461
LeaveCriticalSection 0x0 0x4140e0 0x20190 0x1eb90 0x339
EnterCriticalSection 0x0 0x4140e4 0x20194 0x1eb94 0xee
HeapSize 0x0 0x4140e8 0x20198 0x1eb98 0x2d4
SetStdHandle 0x0 0x4140ec 0x2019c 0x1eb9c 0x487
HeapAlloc 0x0 0x4140f0 0x201a0 0x1eba0 0x2cb
EncodePointer 0x0 0x4140f4 0x201a4 0x1eba4 0xea
DecodePointer 0x0 0x4140f8 0x201a8 0x1eba8 0xca
ExitProcess 0x0 0x4140fc 0x201ac 0x1ebac 0x119
GetModuleHandleExW 0x0 0x414100 0x201b0 0x1ebb0 0x217
MultiByteToWideChar 0x0 0x414104 0x201b4 0x1ebb4 0x367
WideCharToMultiByte 0x0 0x414108 0x201b8 0x1ebb8 0x511
HeapFree 0x0 0x41410c 0x201bc 0x1ebbc 0x2cf
GetConsoleMode 0x0 0x414110 0x201c0 0x1ebc0 0x1ac
ReadConsoleInputA 0x0 0x414114 0x201c4 0x1ebc4 0x3b5
SetConsoleMode 0x0 0x414118 0x201c8 0x1ebc8 0x43d
GetStringTypeW 0x0 0x41411c 0x201cc 0x1ebcc 0x269
DeleteCriticalSection 0x0 0x414120 0x201d0 0x1ebd0 0xd1
FlushFileBuffers 0x0 0x414124 0x201d4 0x1ebd4 0x157
GetConsoleCP 0x0 0x414128 0x201d8 0x1ebd8 0x19a
IsDebuggerPresent 0x0 0x41412c 0x201dc 0x1ebdc 0x300
IsProcessorFeaturePresent 0x0 0x414130 0x201e0 0x1ebe0 0x304
GetStartupInfoW 0x0 0x414134 0x201e4 0x1ebe4 0x263
UnhandledExceptionFilter 0x0 0x414138 0x201e8 0x1ebe8 0x4d3
SetUnhandledExceptionFilter 0x0 0x41413c 0x201ec 0x1ebec 0x4a5
SetLastError 0x0 0x414140 0x201f0 0x1ebf0 0x473
InitializeCriticalSectionAndSpinCount 0x0 0x414144 0x201f4 0x1ebf4 0x2e3
Sleep 0x0 0x414148 0x201f8 0x1ebf8 0x4b2
GetCurrentProcess 0x0 0x41414c 0x201fc 0x1ebfc 0x1c0
TerminateProcess 0x0 0x414150 0x20200 0x1ec00 0x4c0
TlsAlloc 0x0 0x414154 0x20204 0x1ec04 0x4c5
TlsGetValue 0x0 0x414158 0x20208 0x1ec08 0x4c7
TlsSetValue 0x0 0x41415c 0x2020c 0x1ec0c 0x4c8
TlsFree 0x0 0x414160 0x20210 0x1ec10 0x4c6
IsValidCodePage 0x0 0x414164 0x20214 0x1ec14 0x30a
GetACP 0x0 0x414168 0x20218 0x1ec18 0x168
GetOEMCP 0x0 0x41416c 0x2021c 0x1ec1c 0x237
GetCPInfo 0x0 0x414170 0x20220 0x1ec20 0x172
GetCurrentThreadId 0x0 0x414174 0x20224 0x1ec24 0x1c5
GetProcessHeap 0x0 0x414178 0x20228 0x1ec28 0x24a
LoadLibraryExW 0x0 0x41417c 0x2022c 0x1ec2c 0x33e
RaiseException 0x0 0x414180 0x20230 0x1ec30 0x3b1
QueryPerformanceCounter 0x0 0x414184 0x20234 0x1ec34 0x3a7
GetCurrentProcessId 0x0 0x414188 0x20238 0x1ec38 0x1c1
GetSystemTimeAsFileTime 0x0 0x41418c 0x2023c 0x1ec3c 0x279
GetEnvironmentStringsW 0x0 0x414190 0x20240 0x1ec40 0x1da
FreeEnvironmentStringsW 0x0 0x414194 0x20244 0x1ec44 0x161
HeapReAlloc 0x0 0x414198 0x20248 0x1ec48 0x2d2
USER32.dll (9)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
LoadCursorW 0x0 0x4141a0 0x20250 0x1ec50 0x1eb
InflateRect 0x0 0x4141a4 0x20254 0x1ec54 0x1b5
GetSysColorBrush 0x0 0x4141a8 0x20258 0x1ec58 0x17c
SetCursor 0x0 0x4141ac 0x2025c 0x1ec5c 0x288
SetWindowTextW 0x0 0x4141b0 0x20260 0x1ec60 0x2cb
GetDlgItem 0x0 0x4141b4 0x20264 0x1ec64 0x127
EndDialog 0x0 0x4141b8 0x20268 0x1ec68 0xda
DialogBoxIndirectParamW 0x0 0x4141bc 0x2026c 0x1ec6c 0xaa
SendMessageW 0x0 0x4141c0 0x20270 0x1ec70 0x27c
GDI32.dll (6)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
StartPage 0x0 0x414028 0x200d8 0x1ead8 0x2b2
EndDoc 0x0 0x41402c 0x200dc 0x1eadc 0xef
StartDocW 0x0 0x414030 0x200e0 0x1eae0 0x2b0
SetMapMode 0x0 0x414034 0x200e4 0x1eae4 0x294
GetDeviceCaps 0x0 0x414038 0x200e8 0x1eae8 0x1cb
EndPage 0x0 0x41403c 0x200ec 0x1eaec 0xf2
COMDLG32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
PrintDlgW 0x0 0x414020 0x200d0 0x1ead0 0x15
ADVAPI32.dll (7)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
CryptAcquireContextW 0x0 0x414000 0x200b0 0x1eab0 0xb1
RegSetValueExW 0x0 0x414004 0x200b4 0x1eab4 0x27e
RegQueryValueExW 0x0 0x414008 0x200b8 0x1eab8 0x26e
RegOpenKeyW 0x0 0x41400c 0x200bc 0x1eabc 0x264
RegCreateKeyW 0x0 0x414010 0x200c0 0x1eac0 0x23c
RegCloseKey 0x0 0x414014 0x200c4 0x1eac4 0x230
CryptGenRandom 0x0 0x414018 0x200c8 0x1eac8 0xc1
Digital Signatures (2)
»
Certificate: Microsoft Corporation
»
Issued by Microsoft Corporation
Parent Certificate Microsoft Code Signing PCA
Country Name US
Valid From 2017-08-11 20:11:15+00:00
Valid Until 2018-08-11 20:11:15+00:00
Algorithm sha1_rsa
Serial Number 33 00 00 01 79 7C 2E 57 4E 52 E1 CA D6 00 01 00 00 01 79
Thumbprint 5E AD 30 0D C7 E4 D6 37 94 8E CB 0E D8 29 A0 72 BD 15 2E 17
Certificate: Microsoft Code Signing PCA
»
Issued by Microsoft Code Signing PCA
Country Name US
Valid From 2010-08-31 22:19:32+00:00
Valid Until 2020-08-31 22:29:32+00:00
Algorithm sha1_rsa
Serial Number 61 33 26 1A 00 00 00 00 00 31
Thumbprint 3C AF 9B A2 DB 55 70 CA F7 69 42 FF 99 10 1B 99 38 88 E2 57
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\nb-no\00000560-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.81 KB
MD5 fc6ac15da6e151e3904ec18b1821c6fa Copy to Clipboard
SHA1 8dac3f0ba7cb20bdb1e82de7ac6379cf3e7e1d62 Copy to Clipboard
SHA256 ea16deba87dc24a9c0a578c8e69dbd48077ef1bb5c4b8b90286cbb8b40047f5c Copy to Clipboard
SSDeep 384:k45ux6T8/EkCZq+LDUWYcbAYlaC2FqXfWtpaDJe3TB:yjCk+LDUWYDeaCfXwpatwl Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\00000541-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.97 KB
MD5 bf1e2e5b0251fc25baffe8c76254a853 Copy to Clipboard
SHA1 f37aa7b2c9a93e31ca9eb8ae179bdeab9392f3d2 Copy to Clipboard
SHA256 4018936c8a23e643b7fe76e94062e5b446edf787556ac8c4321ea7b522afc530 Copy to Clipboard
SSDeep 48:icfBaBw/RSRZFlglIFIvWRYkgKWEXJCPUAI1Sug2JFol0n:iOmZFlpafEJOUH48FH Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ca-es\00000546-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.22 KB
MD5 357656a7d7b4cf76f14de55bab0f00d8 Copy to Clipboard
SHA1 2598b7dd64fb966804ce7e0351b21382a7f915c9 Copy to Clipboard
SHA256 08701e2860503f6fef8e2c51fd86eb2d524f3e56501ac59fc470502bf8dcd555 Copy to Clipboard
SSDeep 384:f0VzQ5kYW0DxK4OQ0EtNnrun92PKCbL3I88sKb3krmYSHEz7w:nTxIsNn6n92J3CsKb3kSYcD Copy to Clipboard
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\00001277-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 22.33 KB
MD5 b216a671d1dbb2faa07a63d8b05e6871 Copy to Clipboard
SHA1 2bf62173b0297e736fd53639e3b475645aa8c10c Copy to Clipboard
SHA256 7ed1b90d21a93708794d6880b80392c069c80993451718042ac747e703e2831a Copy to Clipboard
SSDeep 384:ntPB+2kvnzis952/naa2gsOAyLnWDLfG2PmGuaiudtzl+AiuGT9IbZxNtcsuG:ntP43us3Cnrl0jG2uiiul+puc9IFxnc8 Copy to Clipboard
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\00001278-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 8.25 KB
MD5 907ef47bc0b228e75465e79fa20fd7d5 Copy to Clipboard
SHA1 f587fd0e04f5d9a0a6d068ac61800ef4f05aab9f Copy to Clipboard
SHA256 eafb66bf34676770d5350fe35cc7a9c927b3859bf1deb9ad45c6ed04041c7277 Copy to Clipboard
SSDeep 192:2NT7ZbS7FUxZrDdACBgLzrVMkGsjnO2aJazoJC0SVYlaiOo7:21dKyDVPBgPtG0oYzt0blaq7 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\it-it\00000557-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.73 KB
MD5 8a279f75689c4d61c14e5f68444fe2e0 Copy to Clipboard
SHA1 09cb3e20206750f75da103e827caae3c256365a1 Copy to Clipboard
SHA256 4c556d6edf08915fa703da67e2fb13d39b23985d6362735ced6926eaf7c23ac6 Copy to Clipboard
SSDeep 384:ZivTrQ3k6KtGOUFANSAHpKFfws1CI5orPyNFiFXKOz8as90UyuhUG:cvTU3Ni4eSgpy5omNFh0huhN Copy to Clipboard
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\00001279-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 8.17 KB
MD5 33c3c29c377a5f67c8a84f952751115f Copy to Clipboard
SHA1 903e04d12d1885715828edc0aafe1ea602a8bd17 Copy to Clipboard
SHA256 162edc9b51fbb563ae0d470e110975da4613fca7624c551c885ab4ab8ab2e4b5 Copy to Clipboard
SSDeep 192:xsKYAFh9ZaR8LESIqmwTNxMPGTtYbj07/vKtXdidgnLI4q5z:WkF0RPSIqmwTNPtYbQTvLdWELp Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ca-es\00000299-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.61 KB
MD5 eb640a5a1059c16b2189a4c77e4f9e6c Copy to Clipboard
SHA1 d10928b4186433a1b5add483bfa66d861927b069 Copy to Clipboard
SHA256 84318a3003cafd6559932f01e98c5fb214ae472df98dd1d81a705bc323ac127a Copy to Clipboard
SSDeep 48:Oqn08YgdH3qTSxok6PTJwGzs4GBQ66LyY52x:/d6TwokeTJwGzyBmLyY52x Copy to Clipboard
C:\ProgramData\Safe.exe Created File Binary
Not Queried
...
»
Mime Type application/x-dosexec
File Size 847.50 KB
MD5 c13d28dd3d19f5e01ef708fcdbb5e3b2 Copy to Clipboard
SHA1 e1791cc248bef5abbf3cb015e18a7ba88f0eee98 Copy to Clipboard
SHA256 9c5b36db0d61dbf12414ac7c09f6c89395ac6af0438959a858e4cffcf6df4192 Copy to Clipboard
SSDeep 24576:cAHnh+eWsN3skA4RV1Hom2KXMmHayfgO5:7h+ZkldoPK8YayH Copy to Clipboard
ImpHash afcdf79be1557326c854b6e20cb900a7 Copy to Clipboard
PE Information
»
Image Base 0x400000
Entry Point 0x42800a
Size Of Code 0x8e000
Size Of Initialized Data 0x45a00
File Type executable
Subsystem windows_gui
Machine Type i386
Compile Timestamp 2018-09-07 07:11:29+00:00
Sections (5)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text 0x401000 0x8dfdd 0x8e000 0x400 cnt_code, mem_execute, mem_read 6.68
.rdata 0x48f000 0x2fd8e 0x2fe00 0x8e400 cnt_initialized_data, mem_read 5.76
.data 0x4bf000 0x8f74 0x5200 0xbe200 cnt_initialized_data, mem_read, mem_write 1.2
.rsrc 0x4c8000 0x9720 0x9800 0xc3400 cnt_initialized_data, mem_read 5.22
.reloc 0x4d2000 0x7134 0x7200 0xccc00 cnt_initialized_data, mem_discardable, mem_read 6.78
Imports (18)
»
WSOCK32.dll (23)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
WSACleanup 0x74 0x48f7c8 0xbca10 0xbbe10 -
socket 0x17 0x48f7cc 0xbca14 0xbbe14 -
inet_ntoa 0xc 0x48f7d0 0xbca18 0xbbe18 -
setsockopt 0x15 0x48f7d4 0xbca1c 0xbbe1c -
ntohs 0xf 0x48f7d8 0xbca20 0xbbe20 -
recvfrom 0x11 0x48f7dc 0xbca24 0xbbe24 -
ioctlsocket 0xa 0x48f7e0 0xbca28 0xbbe28 -
htons 0x9 0x48f7e4 0xbca2c 0xbbe2c -
WSAStartup 0x73 0x48f7e8 0xbca30 0xbbe30 -
__WSAFDIsSet 0x97 0x48f7ec 0xbca34 0xbbe34 -
select 0x12 0x48f7f0 0xbca38 0xbbe38 -
accept 0x1 0x48f7f4 0xbca3c 0xbbe3c -
listen 0xd 0x48f7f8 0xbca40 0xbbe40 -
bind 0x2 0x48f7fc 0xbca44 0xbbe44 -
closesocket 0x3 0x48f800 0xbca48 0xbbe48 -
WSAGetLastError 0x6f 0x48f804 0xbca4c 0xbbe4c -
recv 0x10 0x48f808 0xbca50 0xbbe50 -
sendto 0x14 0x48f80c 0xbca54 0xbbe54 -
send 0x13 0x48f810 0xbca58 0xbbe58 -
inet_addr 0xb 0x48f814 0xbca5c 0xbbe5c -
gethostbyname 0x34 0x48f818 0xbca60 0xbbe60 -
gethostname 0x39 0x48f81c 0xbca64 0xbbe64 -
connect 0x4 0x48f820 0xbca68 0xbbe68 -
VERSION.dll (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetFileVersionInfoW 0x0 0x48f76c 0xbc9b4 0xbbdb4 0x6
GetFileVersionInfoSizeW 0x0 0x48f770 0xbc9b8 0xbbdb8 0x5
VerQueryValueW 0x0 0x48f774 0xbc9bc 0xbbdbc 0xe
WINMM.dll (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
timeGetTime 0x0 0x48f7b8 0xbca00 0xbbe00 0x94
waveOutSetVolume 0x0 0x48f7bc 0xbca04 0xbbe04 0xbb
mciSendStringW 0x0 0x48f7c0 0xbca08 0xbbe08 0x32
COMCTL32.dll (11)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
ImageList_ReplaceIcon 0x0 0x48f088 0xbc2d0 0xbb6d0 0x6f
ImageList_Destroy 0x0 0x48f08c 0xbc2d4 0xbb6d4 0x54
ImageList_Remove 0x0 0x48f090 0xbc2d8 0xbb6d8 0x6d
ImageList_SetDragCursorImage 0x0 0x48f094 0xbc2dc 0xbb6dc 0x72
ImageList_BeginDrag 0x0 0x48f098 0xbc2e0 0xbb6e0 0x50
ImageList_DragEnter 0x0 0x48f09c 0xbc2e4 0xbb6e4 0x56
ImageList_DragLeave 0x0 0x48f0a0 0xbc2e8 0xbb6e8 0x57
ImageList_EndDrag 0x0 0x48f0a4 0xbc2ec 0xbb6ec 0x5e
ImageList_DragMove 0x0 0x48f0a8 0xbc2f0 0xbb6f0 0x58
InitCommonControlsEx 0x0 0x48f0ac 0xbc2f4 0xbb6f4 0x7b
ImageList_Create 0x0 0x48f0b0 0xbc2f8 0xbb6f8 0x53
MPR.dll (4)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
WNetUseConnectionW 0x0 0x48f3f8 0xbc640 0xbba40 0x49
WNetCancelConnection2W 0x0 0x48f3fc 0xbc644 0xbba44 0xc
WNetGetConnectionW 0x0 0x48f400 0xbc648 0xbba48 0x24
WNetAddConnection2W 0x0 0x48f404 0xbc64c 0xbba4c 0x6
WININET.dll (14)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
InternetQueryDataAvailable 0x0 0x48f77c 0xbc9c4 0xbbdc4 0x9b
InternetCloseHandle 0x0 0x48f780 0xbc9c8 0xbbdc8 0x6b
InternetOpenW 0x0 0x48f784 0xbc9cc 0xbbdcc 0x9a
InternetSetOptionW 0x0 0x48f788 0xbc9d0 0xbbdd0 0xaf
InternetCrackUrlW 0x0 0x48f78c 0xbc9d4 0xbbdd4 0x74
HttpQueryInfoW 0x0 0x48f790 0xbc9d8 0xbbdd8 0x5a
InternetQueryOptionW 0x0 0x48f794 0xbc9dc 0xbbddc 0x9e
HttpOpenRequestW 0x0 0x48f798 0xbc9e0 0xbbde0 0x58
HttpSendRequestW 0x0 0x48f79c 0xbc9e4 0xbbde4 0x5e
FtpOpenFileW 0x0 0x48f7a0 0xbc9e8 0xbbde8 0x35
FtpGetFileSize 0x0 0x48f7a4 0xbc9ec 0xbbdec 0x32
InternetOpenUrlW 0x0 0x48f7a8 0xbc9f0 0xbbdf0 0x99
InternetReadFile 0x0 0x48f7ac 0xbc9f4 0xbbdf4 0x9f
InternetConnectW 0x0 0x48f7b0 0xbc9f8 0xbbdf8 0x72
PSAPI.DLL (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetProcessMemoryInfo 0x0 0x48f484 0xbc6cc 0xbbacc 0x15
IPHLPAPI.DLL (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
IcmpCreateFile 0x0 0x48f154 0xbc39c 0xbb79c 0x85
IcmpCloseHandle 0x0 0x48f158 0xbc3a0 0xbb7a0 0x84
IcmpSendEcho 0x0 0x48f15c 0xbc3a4 0xbb7a4 0x87
USERENV.dll (4)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
DestroyEnvironmentBlock 0x0 0x48f750 0xbc998 0xbbd98 0x4
UnloadUserProfile 0x0 0x48f754 0xbc99c 0xbbd9c 0x2c
CreateEnvironmentBlock 0x0 0x48f758 0xbc9a0 0xbbda0 0x0
LoadUserProfileW 0x0 0x48f75c 0xbc9a4 0xbbda4 0x21
UxTheme.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
IsThemeActive 0x0 0x48f764 0xbc9ac 0xbbdac 0x3f
KERNEL32.dll (164)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
DuplicateHandle 0x0 0x48f164 0xbc3ac 0xbb7ac 0xe8
CreateThread 0x0 0x48f168 0xbc3b0 0xbb7b0 0xb5
WaitForSingleObject 0x0 0x48f16c 0xbc3b4 0xbb7b4 0x4f9
HeapAlloc 0x0 0x48f170 0xbc3b8 0xbb7b8 0x2cb
GetProcessHeap 0x0 0x48f174 0xbc3bc 0xbb7bc 0x24a
HeapFree 0x0 0x48f178 0xbc3c0 0xbb7c0 0x2cf
Sleep 0x0 0x48f17c 0xbc3c4 0xbb7c4 0x4b2
GetCurrentThreadId 0x0 0x48f180 0xbc3c8 0xbb7c8 0x1c5
MultiByteToWideChar 0x0 0x48f184 0xbc3cc 0xbb7cc 0x367
MulDiv 0x0 0x48f188 0xbc3d0 0xbb7d0 0x366
GetVersionExW 0x0 0x48f18c 0xbc3d4 0xbb7d4 0x2a4
IsWow64Process 0x0 0x48f190 0xbc3d8 0xbb7d8 0x30e
GetSystemInfo 0x0 0x48f194 0xbc3dc 0xbb7dc 0x273
FreeLibrary 0x0 0x48f198 0xbc3e0 0xbb7e0 0x162
LoadLibraryA 0x0 0x48f19c 0xbc3e4 0xbb7e4 0x33c
GetProcAddress 0x0 0x48f1a0 0xbc3e8 0xbb7e8 0x245
SetErrorMode 0x0 0x48f1a4 0xbc3ec 0xbb7ec 0x458
GetModuleFileNameW 0x0 0x48f1a8 0xbc3f0 0xbb7f0 0x214
WideCharToMultiByte 0x0 0x48f1ac 0xbc3f4 0xbb7f4 0x511
lstrcpyW 0x0 0x48f1b0 0xbc3f8 0xbb7f8 0x548
lstrlenW 0x0 0x48f1b4 0xbc3fc 0xbb7fc 0x54e
GetModuleHandleW 0x0 0x48f1b8 0xbc400 0xbb800 0x218
QueryPerformanceCounter 0x0 0x48f1bc 0xbc404 0xbb804 0x3a7
VirtualFreeEx 0x0 0x48f1c0 0xbc408 0xbb808 0x4ed
OpenProcess 0x0 0x48f1c4 0xbc40c 0xbb80c 0x380
VirtualAllocEx 0x0 0x48f1c8 0xbc410 0xbb810 0x4ea
WriteProcessMemory 0x0 0x48f1cc 0xbc414 0xbb814 0x52e
ReadProcessMemory 0x0 0x48f1d0 0xbc418 0xbb818 0x3c3
CreateFileW 0x0 0x48f1d4 0xbc41c 0xbb81c 0x8f
SetFilePointerEx 0x0 0x48f1d8 0xbc420 0xbb820 0x467
SetEndOfFile 0x0 0x48f1dc 0xbc424 0xbb824 0x453
ReadFile 0x0 0x48f1e0 0xbc428 0xbb828 0x3c0
WriteFile 0x0 0x48f1e4 0xbc42c 0xbb82c 0x525
FlushFileBuffers 0x0 0x48f1e8 0xbc430 0xbb830 0x157
TerminateProcess 0x0 0x48f1ec 0xbc434 0xbb834 0x4c0
CreateToolhelp32Snapshot 0x0 0x48f1f0 0xbc438 0xbb838 0xbe
Process32FirstW 0x0 0x48f1f4 0xbc43c 0xbb83c 0x396
Process32NextW 0x0 0x48f1f8 0xbc440 0xbb840 0x398
SetFileTime 0x0 0x48f1fc 0xbc444 0xbb844 0x46a
GetFileAttributesW 0x0 0x48f200 0xbc448 0xbb848 0x1ea
FindFirstFileW 0x0 0x48f204 0xbc44c 0xbb84c 0x139
SetCurrentDirectoryW 0x0 0x48f208 0xbc450 0xbb850 0x44d
GetLongPathNameW 0x0 0x48f20c 0xbc454 0xbb854 0x20f
GetShortPathNameW 0x0 0x48f210 0xbc458 0xbb858 0x261
DeleteFileW 0x0 0x48f214 0xbc45c 0xbb85c 0xd6
FindNextFileW 0x0 0x48f218 0xbc460 0xbb860 0x145
CopyFileExW 0x0 0x48f21c 0xbc464 0xbb864 0x72
MoveFileW 0x0 0x48f220 0xbc468 0xbb868 0x363
CreateDirectoryW 0x0 0x48f224 0xbc46c 0xbb86c 0x81
RemoveDirectoryW 0x0 0x48f228 0xbc470 0xbb870 0x403
SetSystemPowerState 0x0 0x48f22c 0xbc474 0xbb874 0x48a
QueryPerformanceFrequency 0x0 0x48f230 0xbc478 0xbb878 0x3a8
FindResourceW 0x0 0x48f234 0xbc47c 0xbb87c 0x14e
LoadResource 0x0 0x48f238 0xbc480 0xbb880 0x341
LockResource 0x0 0x48f23c 0xbc484 0xbb884 0x354
SizeofResource 0x0 0x48f240 0xbc488 0xbb888 0x4b1
EnumResourceNamesW 0x0 0x48f244 0xbc48c 0xbb88c 0x102
OutputDebugStringW 0x0 0x48f248 0xbc490 0xbb890 0x38a
GetTempPathW 0x0 0x48f24c 0xbc494 0xbb894 0x285
GetTempFileNameW 0x0 0x48f250 0xbc498 0xbb898 0x283
DeviceIoControl 0x0 0x48f254 0xbc49c 0xbb89c 0xdd
GetLocalTime 0x0 0x48f258 0xbc4a0 0xbb8a0 0x203
CompareStringW 0x0 0x48f25c 0xbc4a4 0xbb8a4 0x64
GetCurrentProcess 0x0 0x48f260 0xbc4a8 0xbb8a8 0x1c0
EnterCriticalSection 0x0 0x48f264 0xbc4ac 0xbb8ac 0xee
LeaveCriticalSection 0x0 0x48f268 0xbc4b0 0xbb8b0 0x339
GetStdHandle 0x0 0x48f26c 0xbc4b4 0xbb8b4 0x264
CreatePipe 0x0 0x48f270 0xbc4b8 0xbb8b8 0xa1
InterlockedExchange 0x0 0x48f274 0xbc4bc 0xbb8bc 0x2ec
TerminateThread 0x0 0x48f278 0xbc4c0 0xbb8c0 0x4c1
LoadLibraryExW 0x0 0x48f27c 0xbc4c4 0xbb8c4 0x33e
FindResourceExW 0x0 0x48f280 0xbc4c8 0xbb8c8 0x14d
CopyFileW 0x0 0x48f284 0xbc4cc 0xbb8cc 0x75
VirtualFree 0x0 0x48f288 0xbc4d0 0xbb8d0 0x4ec
FormatMessageW 0x0 0x48f28c 0xbc4d4 0xbb8d4 0x15e
GetExitCodeProcess 0x0 0x48f290 0xbc4d8 0xbb8d8 0x1df
GetPrivateProfileStringW 0x0 0x48f294 0xbc4dc 0xbb8dc 0x242
WritePrivateProfileStringW 0x0 0x48f298 0xbc4e0 0xbb8e0 0x52b
GetPrivateProfileSectionW 0x0 0x48f29c 0xbc4e4 0xbb8e4 0x240
WritePrivateProfileSectionW 0x0 0x48f2a0 0xbc4e8 0xbb8e8 0x529
GetPrivateProfileSectionNamesW 0x0 0x48f2a4 0xbc4ec 0xbb8ec 0x23f
FileTimeToLocalFileTime 0x0 0x48f2a8 0xbc4f0 0xbb8f0 0x124
FileTimeToSystemTime 0x0 0x48f2ac 0xbc4f4 0xbb8f4 0x125
SystemTimeToFileTime 0x0 0x48f2b0 0xbc4f8 0xbb8f8 0x4bd
LocalFileTimeToFileTime 0x0 0x48f2b4 0xbc4fc 0xbb8fc 0x346
GetDriveTypeW 0x0 0x48f2b8 0xbc500 0xbb900 0x1d3
GetDiskFreeSpaceExW 0x0 0x48f2bc 0xbc504 0xbb904 0x1ce
GetDiskFreeSpaceW 0x0 0x48f2c0 0xbc508 0xbb908 0x1cf
GetVolumeInformationW 0x0 0x48f2c4 0xbc50c 0xbb90c 0x2a7
SetVolumeLabelW 0x0 0x48f2c8 0xbc510 0xbb910 0x4a9
CreateHardLinkW 0x0 0x48f2cc 0xbc514 0xbb914 0x93
SetFileAttributesW 0x0 0x48f2d0 0xbc518 0xbb918 0x461
CreateEventW 0x0 0x48f2d4 0xbc51c 0xbb91c 0x85
SetEvent 0x0 0x48f2d8 0xbc520 0xbb920 0x459
GetEnvironmentVariableW 0x0 0x48f2dc 0xbc524 0xbb924 0x1dc
SetEnvironmentVariableW 0x0 0x48f2e0 0xbc528 0xbb928 0x457
GlobalLock 0x0 0x48f2e4 0xbc52c 0xbb92c 0x2be
GlobalUnlock 0x0 0x48f2e8 0xbc530 0xbb930 0x2c5
GlobalAlloc 0x0 0x48f2ec 0xbc534 0xbb934 0x2b3
GetFileSize 0x0 0x48f2f0 0xbc538 0xbb938 0x1f0
GlobalFree 0x0 0x48f2f4 0xbc53c 0xbb93c 0x2ba
GlobalMemoryStatusEx 0x0 0x48f2f8 0xbc540 0xbb940 0x2c0
Beep 0x0 0x48f2fc 0xbc544 0xbb944 0x36
GetSystemDirectoryW 0x0 0x48f300 0xbc548 0xbb948 0x270
HeapReAlloc 0x0 0x48f304 0xbc54c 0xbb94c 0x2d2
HeapSize 0x0 0x48f308 0xbc550 0xbb950 0x2d4
GetComputerNameW 0x0 0x48f30c 0xbc554 0xbb954 0x18f
GetWindowsDirectoryW 0x0 0x48f310 0xbc558 0xbb958 0x2af
GetCurrentProcessId 0x0 0x48f314 0xbc55c 0xbb95c 0x1c1
GetProcessIoCounters 0x0 0x48f318 0xbc560 0xbb960 0x24e
CreateProcessW 0x0 0x48f31c 0xbc564 0xbb964 0xa8
GetProcessId 0x0 0x48f320 0xbc568 0xbb968 0x24c
SetPriorityClass 0x0 0x48f324 0xbc56c 0xbb96c 0x47d
LoadLibraryW 0x0 0x48f328 0xbc570 0xbb970 0x33f
VirtualAlloc 0x0 0x48f32c 0xbc574 0xbb974 0x4e9
IsDebuggerPresent 0x0 0x48f330 0xbc578 0xbb978 0x300
GetCurrentDirectoryW 0x0 0x48f334 0xbc57c 0xbb97c 0x1bf
lstrcmpiW 0x0 0x48f338 0xbc580 0xbb980 0x545
DecodePointer 0x0 0x48f33c 0xbc584 0xbb984 0xca
GetLastError 0x0 0x48f340 0xbc588 0xbb988 0x202
RaiseException 0x0 0x48f344 0xbc58c 0xbb98c 0x3b1
InitializeCriticalSectionAndSpinCount 0x0 0x48f348 0xbc590 0xbb990 0x2e3
DeleteCriticalSection 0x0 0x48f34c 0xbc594 0xbb994 0xd1
InterlockedDecrement 0x0 0x48f350 0xbc598 0xbb998 0x2eb
InterlockedIncrement 0x0 0x48f354 0xbc59c 0xbb99c 0x2ef
GetCurrentThread 0x0 0x48f358 0xbc5a0 0xbb9a0 0x1c4
CloseHandle 0x0 0x48f35c 0xbc5a4 0xbb9a4 0x52
GetFullPathNameW 0x0 0x48f360 0xbc5a8 0xbb9a8 0x1fb
EncodePointer 0x0 0x48f364 0xbc5ac 0xbb9ac 0xea
ExitProcess 0x0 0x48f368 0xbc5b0 0xbb9b0 0x119
GetModuleHandleExW 0x0 0x48f36c 0xbc5b4 0xbb9b4 0x217
ExitThread 0x0 0x48f370 0xbc5b8 0xbb9b8 0x11a
GetSystemTimeAsFileTime 0x0 0x48f374 0xbc5bc 0xbb9bc 0x279
ResumeThread 0x0 0x48f378 0xbc5c0 0xbb9c0 0x413
GetCommandLineW 0x0 0x48f37c 0xbc5c4 0xbb9c4 0x187
IsProcessorFeaturePresent 0x0 0x48f380 0xbc5c8 0xbb9c8 0x304
IsValidCodePage 0x0 0x48f384 0xbc5cc 0xbb9cc 0x30a
GetACP 0x0 0x48f388 0xbc5d0 0xbb9d0 0x168
GetOEMCP 0x0 0x48f38c 0xbc5d4 0xbb9d4 0x237
GetCPInfo 0x0 0x48f390 0xbc5d8 0xbb9d8 0x172
SetLastError 0x0 0x48f394 0xbc5dc 0xbb9dc 0x473
UnhandledExceptionFilter 0x0 0x48f398 0xbc5e0 0xbb9e0 0x4d3
SetUnhandledExceptionFilter 0x0 0x48f39c 0xbc5e4 0xbb9e4 0x4a5
TlsAlloc 0x0 0x48f3a0 0xbc5e8 0xbb9e8 0x4c5
TlsGetValue 0x0 0x48f3a4 0xbc5ec 0xbb9ec 0x4c7
TlsSetValue 0x0 0x48f3a8 0xbc5f0 0xbb9f0 0x4c8
TlsFree 0x0 0x48f3ac 0xbc5f4 0xbb9f4 0x4c6
GetStartupInfoW 0x0 0x48f3b0 0xbc5f8 0xbb9f8 0x263
GetStringTypeW 0x0 0x48f3b4 0xbc5fc 0xbb9fc 0x269
SetStdHandle 0x0 0x48f3b8 0xbc600 0xbba00 0x487
GetFileType 0x0 0x48f3bc 0xbc604 0xbba04 0x1f3
GetConsoleCP 0x0 0x48f3c0 0xbc608 0xbba08 0x19a
GetConsoleMode 0x0 0x48f3c4 0xbc60c 0xbba0c 0x1ac
RtlUnwind 0x0 0x48f3c8 0xbc610 0xbba10 0x418
ReadConsoleW 0x0 0x48f3cc 0xbc614 0xbba14 0x3be
GetTimeZoneInformation 0x0 0x48f3d0 0xbc618 0xbba18 0x298
GetDateFormatW 0x0 0x48f3d4 0xbc61c 0xbba1c 0x1c8
GetTimeFormatW 0x0 0x48f3d8 0xbc620 0xbba20 0x297
LCMapStringW 0x0 0x48f3dc 0xbc624 0xbba24 0x32d
GetEnvironmentStringsW 0x0 0x48f3e0 0xbc628 0xbba28 0x1da
FreeEnvironmentStringsW 0x0 0x48f3e4 0xbc62c 0xbba2c 0x161
WriteConsoleW 0x0 0x48f3e8 0xbc630 0xbba30 0x524
FindClose 0x0 0x48f3ec 0xbc634 0xbba34 0x12e
SetEnvironmentVariableA 0x0 0x48f3f0 0xbc638 0xbba38 0x456
USER32.dll (160)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
AdjustWindowRectEx 0x0 0x48f4cc 0xbc714 0xbbb14 0x3
CopyImage 0x0 0x48f4d0 0xbc718 0xbbb18 0x54
SetWindowPos 0x0 0x48f4d4 0xbc71c 0xbbb1c 0x2c6
GetCursorInfo 0x0 0x48f4d8 0xbc720 0xbbb20 0x11f
RegisterHotKey 0x0 0x48f4dc 0xbc724 0xbbb24 0x256
ClientToScreen 0x0 0x48f4e0 0xbc728 0xbbb28 0x47
GetKeyboardLayoutNameW 0x0 0x48f4e4 0xbc72c 0xbbb2c 0x141
IsCharAlphaW 0x0 0x48f4e8 0xbc730 0xbbb30 0x1c4
IsCharAlphaNumericW 0x0 0x48f4ec 0xbc734 0xbbb34 0x1c3
IsCharLowerW 0x0 0x48f4f0 0xbc738 0xbbb38 0x1c6
IsCharUpperW 0x0 0x48f4f4 0xbc73c 0xbbb3c 0x1c8
GetMenuStringW 0x0 0x48f4f8 0xbc740 0xbbb40 0x158
GetSubMenu 0x0 0x48f4fc 0xbc744 0xbbb44 0x17a
GetCaretPos 0x0 0x48f500 0xbc748 0xbbb48 0x10a
IsZoomed 0x0 0x48f504 0xbc74c 0xbbb4c 0x1e2
MonitorFromPoint 0x0 0x48f508 0xbc750 0xbbb50 0x218
GetMonitorInfoW 0x0 0x48f50c 0xbc754 0xbbb54 0x15f
SetWindowLongW 0x0 0x48f510 0xbc758 0xbbb58 0x2c4
SetLayeredWindowAttributes 0x0 0x48f514 0xbc75c 0xbbb5c 0x298
FlashWindow 0x0 0x48f518 0xbc760 0xbbb60 0xfb
GetClassLongW 0x0 0x48f51c 0xbc764 0xbbb64 0x110
TranslateAcceleratorW 0x0 0x48f520 0xbc768 0xbbb68 0x2fa
IsDialogMessageW 0x0 0x48f524 0xbc76c 0xbbb6c 0x1cd
GetSysColor 0x0 0x48f528 0xbc770 0xbbb70 0x17b
InflateRect 0x0 0x48f52c 0xbc774 0xbbb74 0x1b5
DrawFocusRect 0x0 0x48f530 0xbc778 0xbbb78 0xc4
DrawTextW 0x0 0x48f534 0xbc77c 0xbbb7c 0xd0
FrameRect 0x0 0x48f538 0xbc780 0xbbb80 0xfd
DrawFrameControl 0x0 0x48f53c 0xbc784 0xbbb84 0xc6
FillRect 0x0 0x48f540 0xbc788 0xbbb88 0xf6
PtInRect 0x0 0x48f544 0xbc78c 0xbbb8c 0x240
DestroyAcceleratorTable 0x0 0x48f548 0xbc790 0xbbb90 0xa0
CreateAcceleratorTableW 0x0 0x48f54c 0xbc794 0xbbb94 0x58
SetCursor 0x0 0x48f550 0xbc798 0xbbb98 0x288
GetWindowDC 0x0 0x48f554 0xbc79c 0xbbb9c 0x192
GetSystemMetrics 0x0 0x48f558 0xbc7a0 0xbbba0 0x17e
GetActiveWindow 0x0 0x48f55c 0xbc7a4 0xbbba4 0x100
CharNextW 0x0 0x48f560 0xbc7a8 0xbbba8 0x31
wsprintfW 0x0 0x48f564 0xbc7ac 0xbbbac 0x333
RedrawWindow 0x0 0x48f568 0xbc7b0 0xbbbb0 0x24a
DrawMenuBar 0x0 0x48f56c 0xbc7b4 0xbbbb4 0xc9
DestroyMenu 0x0 0x48f570 0xbc7b8 0xbbbb8 0xa4
SetMenu 0x0 0x48f574 0xbc7bc 0xbbbbc 0x29c
GetWindowTextLengthW 0x0 0x48f578 0xbc7c0 0xbbbc0 0x1a2
CreateMenu 0x0 0x48f57c 0xbc7c4 0xbbbc4 0x6a
IsDlgButtonChecked 0x0 0x48f580 0xbc7c8 0xbbbc8 0x1ce
DefDlgProcW 0x0 0x48f584 0xbc7cc 0xbbbcc 0x95
CallWindowProcW 0x0 0x48f588 0xbc7d0 0xbbbd0 0x1e
ReleaseCapture 0x0 0x48f58c 0xbc7d4 0xbbbd4 0x264
SetCapture 0x0 0x48f590 0xbc7d8 0xbbbd8 0x280
CreateIconFromResourceEx 0x0 0x48f594 0xbc7dc 0xbbbdc 0x66
mouse_event 0x0 0x48f598 0xbc7e0 0xbbbe0 0x331
ExitWindowsEx 0x0 0x48f59c 0xbc7e4 0xbbbe4 0xf5
SetActiveWindow 0x0 0x48f5a0 0xbc7e8 0xbbbe8 0x27f
FindWindowExW 0x0 0x48f5a4 0xbc7ec 0xbbbec 0xf9
EnumThreadWindows 0x0 0x48f5a8 0xbc7f0 0xbbbf0 0xef
SetMenuDefaultItem 0x0 0x48f5ac 0xbc7f4 0xbbbf4 0x29e
InsertMenuItemW 0x0 0x48f5b0 0xbc7f8 0xbbbf8 0x1b9
IsMenu 0x0 0x48f5b4 0xbc7fc 0xbbbfc 0x1d2
TrackPopupMenuEx 0x0 0x48f5b8 0xbc800 0xbbc00 0x2f7
GetCursorPos 0x0 0x48f5bc 0xbc804 0xbbc04 0x120
DeleteMenu 0x0 0x48f5c0 0xbc808 0xbbc08 0x9e
SetRect 0x0 0x48f5c4 0xbc80c 0xbbc0c 0x2ae
GetMenuItemID 0x0 0x48f5c8 0xbc810 0xbbc10 0x152
GetMenuItemCount 0x0 0x48f5cc 0xbc814 0xbbc14 0x151
SetMenuItemInfoW 0x0 0x48f5d0 0xbc818 0xbbc18 0x2a2
GetMenuItemInfoW 0x0 0x48f5d4 0xbc81c 0xbbc1c 0x154
SetForegroundWindow 0x0 0x48f5d8 0xbc820 0xbbc20 0x293
IsIconic 0x0 0x48f5dc 0xbc824 0xbbc24 0x1d1
FindWindowW 0x0 0x48f5e0 0xbc828 0xbbc28 0xfa
MonitorFromRect 0x0 0x48f5e4 0xbc82c 0xbbc2c 0x219
keybd_event 0x0 0x48f5e8 0xbc830 0xbbc30 0x330
SendInput 0x0 0x48f5ec 0xbc834 0xbbc34 0x276
GetAsyncKeyState 0x0 0x48f5f0 0xbc838 0xbbc38 0x107
SetKeyboardState 0x0 0x48f5f4 0xbc83c 0xbbc3c 0x296
GetKeyboardState 0x0 0x48f5f8 0xbc840 0xbbc40 0x142
GetKeyState 0x0 0x48f5fc 0xbc844 0xbbc44 0x13d
VkKeyScanW 0x0 0x48f600 0xbc848 0xbbc48 0x321
LoadStringW 0x0 0x48f604 0xbc84c 0xbbc4c 0x1fa
DialogBoxParamW 0x0 0x48f608 0xbc850 0xbbc50 0xac
MessageBeep 0x0 0x48f60c 0xbc854 0xbbc54 0x20d
EndDialog 0x0 0x48f610 0xbc858 0xbbc58 0xda
SendDlgItemMessageW 0x0 0x48f614 0xbc85c 0xbbc5c 0x273
GetDlgItem 0x0 0x48f618 0xbc860 0xbbc60 0x127
SetWindowTextW 0x0 0x48f61c 0xbc864 0xbbc64 0x2cb
CopyRect 0x0 0x48f620 0xbc868 0xbbc68 0x55
ReleaseDC 0x0 0x48f624 0xbc86c 0xbbc6c 0x265
GetDC 0x0 0x48f628 0xbc870 0xbbc70 0x121
EndPaint 0x0 0x48f62c 0xbc874 0xbbc74 0xdc
BeginPaint 0x0 0x48f630 0xbc878 0xbbc78 0xe
GetClientRect 0x0 0x48f634 0xbc87c 0xbbc7c 0x114
GetMenu 0x0 0x48f638 0xbc880 0xbbc80 0x14b
DestroyWindow 0x0 0x48f63c 0xbc884 0xbbc84 0xa6
EnumWindows 0x0 0x48f640 0xbc888 0xbbc88 0xf2
GetDesktopWindow 0x0 0x48f644 0xbc88c 0xbbc8c 0x123
IsWindow 0x0 0x48f648 0xbc890 0xbbc90 0x1db
IsWindowEnabled 0x0 0x48f64c 0xbc894 0xbbc94 0x1dc
IsWindowVisible 0x0 0x48f650 0xbc898 0xbbc98 0x1e0
EnableWindow 0x0 0x48f654 0xbc89c 0xbbc9c 0xd8
InvalidateRect 0x0 0x48f658 0xbc8a0 0xbbca0 0x1be
GetWindowLongW 0x0 0x48f65c 0xbc8a4 0xbbca4 0x196
GetWindowThreadProcessId 0x0 0x48f660 0xbc8a8 0xbbca8 0x1a4
AttachThreadInput 0x0 0x48f664 0xbc8ac 0xbbcac 0xc
GetFocus 0x0 0x48f668 0xbc8b0 0xbbcb0 0x12c
GetWindowTextW 0x0 0x48f66c 0xbc8b4 0xbbcb4 0x1a3
ScreenToClient 0x0 0x48f670 0xbc8b8 0xbbcb8 0x26d
SendMessageTimeoutW 0x0 0x48f674 0xbc8bc 0xbbcbc 0x27b
EnumChildWindows 0x0 0x48f678 0xbc8c0 0xbbcc0 0xdf
CharUpperBuffW 0x0 0x48f67c 0xbc8c4 0xbbcc4 0x3b
GetParent 0x0 0x48f680 0xbc8c8 0xbbcc8 0x164
GetDlgCtrlID 0x0 0x48f684 0xbc8cc 0xbbccc 0x126
SendMessageW 0x0 0x48f688 0xbc8d0 0xbbcd0 0x27c
MapVirtualKeyW 0x0 0x48f68c 0xbc8d4 0xbbcd4 0x208
PostMessageW 0x0 0x48f690 0xbc8d8 0xbbcd8 0x236
GetWindowRect 0x0 0x48f694 0xbc8dc 0xbbcdc 0x19c
SetUserObjectSecurity 0x0 0x48f698 0xbc8e0 0xbbce0 0x2be
CloseDesktop 0x0 0x48f69c 0xbc8e4 0xbbce4 0x4a
CloseWindowStation 0x0 0x48f6a0 0xbc8e8 0xbbce8 0x4e
OpenDesktopW 0x0 0x48f6a4 0xbc8ec 0xbbcec 0x228
SetProcessWindowStation 0x0 0x48f6a8 0xbc8f0 0xbbcf0 0x2aa
GetProcessWindowStation 0x0 0x48f6ac 0xbc8f4 0xbbcf4 0x168
OpenWindowStationW 0x0 0x48f6b0 0xbc8f8 0xbbcf8 0x22d
GetUserObjectSecurity 0x0 0x48f6b4 0xbc8fc 0xbbcfc 0x18c
MessageBoxW 0x0 0x48f6b8 0xbc900 0xbbd00 0x215
DefWindowProcW 0x0 0x48f6bc 0xbc904 0xbbd04 0x9c
SetClipboardData 0x0 0x48f6c0 0xbc908 0xbbd08 0x286
EmptyClipboard 0x0 0x48f6c4 0xbc90c 0xbbd0c 0xd5
CountClipboardFormats 0x0 0x48f6c8 0xbc910 0xbbd10 0x56
CloseClipboard 0x0 0x48f6cc 0xbc914 0xbbd14 0x49
GetClipboardData 0x0 0x48f6d0 0xbc918 0xbbd18 0x116
IsClipboardFormatAvailable 0x0 0x48f6d4 0xbc91c 0xbbd1c 0x1ca
OpenClipboard 0x0 0x48f6d8 0xbc920 0xbbd20 0x226
BlockInput 0x0 0x48f6dc 0xbc924 0xbbd24 0xf
GetMessageW 0x0 0x48f6e0 0xbc928 0xbbd28 0x15d
LockWindowUpdate 0x0 0x48f6e4 0xbc92c 0xbbd2c 0x1fd
DispatchMessageW 0x0 0x48f6e8 0xbc930 0xbbd30 0xaf
TranslateMessage 0x0 0x48f6ec 0xbc934 0xbbd34 0x2fc
PeekMessageW 0x0 0x48f6f0 0xbc938 0xbbd38 0x233
UnregisterHotKey 0x0 0x48f6f4 0xbc93c 0xbbd3c 0x308
CheckMenuRadioItem 0x0 0x48f6f8 0xbc940 0xbbd40 0x40
CharLowerBuffW 0x0 0x48f6fc 0xbc944 0xbbd44 0x2d
MoveWindow 0x0 0x48f700 0xbc948 0xbbd48 0x21b
SetFocus 0x0 0x48f704 0xbc94c 0xbbd4c 0x292
PostQuitMessage 0x0 0x48f708 0xbc950 0xbbd50 0x237
KillTimer 0x0 0x48f70c 0xbc954 0xbbd54 0x1e3
CreatePopupMenu 0x0 0x48f710 0xbc958 0xbbd58 0x6b
RegisterWindowMessageW 0x0 0x48f714 0xbc95c 0xbbd5c 0x263
SetTimer 0x0 0x48f718 0xbc960 0xbbd60 0x2bb
ShowWindow 0x0 0x48f71c 0xbc964 0xbbd64 0x2df
CreateWindowExW 0x0 0x48f720 0xbc968 0xbbd68 0x6e
RegisterClassExW 0x0 0x48f724 0xbc96c 0xbbd6c 0x24d
LoadIconW 0x0 0x48f728 0xbc970 0xbbd70 0x1ed
LoadCursorW 0x0 0x48f72c 0xbc974 0xbbd74 0x1eb
GetSysColorBrush 0x0 0x48f730 0xbc978 0xbbd78 0x17c
GetForegroundWindow 0x0 0x48f734 0xbc97c 0xbbd7c 0x12d
MessageBoxA 0x0 0x48f738 0xbc980 0xbbd80 0x20e
DestroyIcon 0x0 0x48f73c 0xbc984 0xbbd84 0xa3
SystemParametersInfoW 0x0 0x48f740 0xbc988 0xbbd88 0x2ec
LoadImageW 0x0 0x48f744 0xbc98c 0xbbd8c 0x1ef
GetClassNameW 0x0 0x48f748 0xbc990 0xbbd90 0x112
GDI32.dll (35)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
StrokePath 0x0 0x48f0c4 0xbc30c 0xbb70c 0x2b6
DeleteObject 0x0 0x48f0c8 0xbc310 0xbb710 0xe6
GetTextExtentPoint32W 0x0 0x48f0cc 0xbc314 0xbb714 0x21e
ExtCreatePen 0x0 0x48f0d0 0xbc318 0xbb718 0x132
GetDeviceCaps 0x0 0x48f0d4 0xbc31c 0xbb71c 0x1cb
EndPath 0x0 0x48f0d8 0xbc320 0xbb720 0xf3
SetPixel 0x0 0x48f0dc 0xbc324 0xbb724 0x29b
CloseFigure 0x0 0x48f0e0 0xbc328 0xbb728 0x1e
CreateCompatibleBitmap 0x0 0x48f0e4 0xbc32c 0xbb72c 0x2f
CreateCompatibleDC 0x0 0x48f0e8 0xbc330 0xbb730 0x30
SelectObject 0x0 0x48f0ec 0xbc334 0xbb734 0x277
StretchBlt 0x0 0x48f0f0 0xbc338 0xbb738 0x2b3
GetDIBits 0x0 0x48f0f4 0xbc33c 0xbb73c 0x1ca
LineTo 0x0 0x48f0f8 0xbc340 0xbb740 0x236
AngleArc 0x0 0x48f0fc 0xbc344 0xbb744 0x8
MoveToEx 0x0 0x48f100 0xbc348 0xbb748 0x23a
Ellipse 0x0 0x48f104 0xbc34c 0xbb74c 0xed
DeleteDC 0x0 0x48f108 0xbc350 0xbb750 0xe3
GetPixel 0x0 0x48f10c 0xbc354 0xbb754 0x204
CreateDCW 0x0 0x48f110 0xbc358 0xbb758 0x32
GetStockObject 0x0 0x48f114 0xbc35c 0xbb75c 0x20d
GetTextFaceW 0x0 0x48f118 0xbc360 0xbb760 0x224
CreateFontW 0x0 0x48f11c 0xbc364 0xbb764 0x41
SetTextColor 0x0 0x48f120 0xbc368 0xbb768 0x2a6
PolyDraw 0x0 0x48f124 0xbc36c 0xbb76c 0x250
BeginPath 0x0 0x48f128 0xbc370 0xbb770 0x12
Rectangle 0x0 0x48f12c 0xbc374 0xbb774 0x25f
SetViewportOrgEx 0x0 0x48f130 0xbc378 0xbb778 0x2a9
GetObjectW 0x0 0x48f134 0xbc37c 0xbb77c 0x1fd
SetBkMode 0x0 0x48f138 0xbc380 0xbb780 0x27f
RoundRect 0x0 0x48f13c 0xbc384 0xbb784 0x26a
SetBkColor 0x0 0x48f140 0xbc388 0xbb788 0x27e
CreatePen 0x0 0x48f144 0xbc38c 0xbb78c 0x4b
CreateSolidBrush 0x0 0x48f148 0xbc390 0xbb790 0x54
StrokeAndFillPath 0x0 0x48f14c 0xbc394 0xbb794 0x2b5
COMDLG32.dll (2)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetOpenFileNameW 0x0 0x48f0b8 0xbc300 0xbb700 0xc
GetSaveFileNameW 0x0 0x48f0bc 0xbc304 0xbb704 0xe
ADVAPI32.dll (33)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetAce 0x0 0x48f000 0xbc248 0xbb648 0x123
RegEnumValueW 0x0 0x48f004 0xbc24c 0xbb64c 0x252
RegDeleteValueW 0x0 0x48f008 0xbc250 0xbb650 0x248
RegDeleteKeyW 0x0 0x48f00c 0xbc254 0xbb654 0x244
RegEnumKeyExW 0x0 0x48f010 0xbc258 0xbb658 0x24f
RegSetValueExW 0x0 0x48f014 0xbc25c 0xbb65c 0x27e
RegOpenKeyExW 0x0 0x48f018 0xbc260 0xbb660 0x261
RegCloseKey 0x0 0x48f01c 0xbc264 0xbb664 0x230
RegQueryValueExW 0x0 0x48f020 0xbc268 0xbb668 0x26e
RegConnectRegistryW 0x0 0x48f024 0xbc26c 0xbb66c 0x234
InitializeSecurityDescriptor 0x0 0x48f028 0xbc270 0xbb670 0x177
InitializeAcl 0x0 0x48f02c 0xbc274 0xbb674 0x176
AdjustTokenPrivileges 0x0 0x48f030 0xbc278 0xbb678 0x1f
OpenThreadToken 0x0 0x48f034 0xbc27c 0xbb67c 0x1fc
OpenProcessToken 0x0 0x48f038 0xbc280 0xbb680 0x1f7
LookupPrivilegeValueW 0x0 0x48f03c 0xbc284 0xbb684 0x197
DuplicateTokenEx 0x0 0x48f040 0xbc288 0xbb688 0xdf
CreateProcessAsUserW 0x0 0x48f044 0xbc28c 0xbb68c 0x7c
CreateProcessWithLogonW 0x0 0x48f048 0xbc290 0xbb690 0x7d
GetLengthSid 0x0 0x48f04c 0xbc294 0xbb694 0x136
CopySid 0x0 0x48f050 0xbc298 0xbb698 0x76
LogonUserW 0x0 0x48f054 0xbc29c 0xbb69c 0x18d
AllocateAndInitializeSid 0x0 0x48f058 0xbc2a0 0xbb6a0 0x20
CheckTokenMembership 0x0 0x48f05c 0xbc2a4 0xbb6a4 0x51
RegCreateKeyExW 0x0 0x48f060 0xbc2a8 0xbb6a8 0x239
FreeSid 0x0 0x48f064 0xbc2ac 0xbb6ac 0x120
GetTokenInformation 0x0 0x48f068 0xbc2b0 0xbb6b0 0x15a
GetSecurityDescriptorDacl 0x0 0x48f06c 0xbc2b4 0xbb6b4 0x148
GetAclInformation 0x0 0x48f070 0xbc2b8 0xbb6b8 0x124
AddAce 0x0 0x48f074 0xbc2bc 0xbb6bc 0x16
SetSecurityDescriptorDacl 0x0 0x48f078 0xbc2c0 0xbb6c0 0x2b6
GetUserNameW 0x0 0x48f07c 0xbc2c4 0xbb6c4 0x165
InitiateSystemShutdownExW 0x0 0x48f080 0xbc2c8 0xbb6c8 0x17d
SHELL32.dll (15)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
DragQueryPoint 0x0 0x48f48c 0xbc6d4 0xbbad4 0x20
ShellExecuteExW 0x0 0x48f490 0xbc6d8 0xbbad8 0x121
DragQueryFileW 0x0 0x48f494 0xbc6dc 0xbbadc 0x1f
SHEmptyRecycleBinW 0x0 0x48f498 0xbc6e0 0xbbae0 0xa5
SHGetPathFromIDListW 0x0 0x48f49c 0xbc6e4 0xbbae4 0xd7
SHBrowseForFolderW 0x0 0x48f4a0 0xbc6e8 0xbbae8 0x7b
SHCreateShellItem 0x0 0x48f4a4 0xbc6ec 0xbbaec 0x9a
SHGetDesktopFolder 0x0 0x48f4a8 0xbc6f0 0xbbaf0 0xb6
SHGetSpecialFolderLocation 0x0 0x48f4ac 0xbc6f4 0xbbaf4 0xdf
SHGetFolderPathW 0x0 0x48f4b0 0xbc6f8 0xbbaf8 0xc3
SHFileOperationW 0x0 0x48f4b4 0xbc6fc 0xbbafc 0xac
ExtractIconExW 0x0 0x48f4b8 0xbc700 0xbbb00 0x2a
Shell_NotifyIconW 0x0 0x48f4bc 0xbc704 0xbbb04 0x12e
ShellExecuteW 0x0 0x48f4c0 0xbc708 0xbbb08 0x122
DragFinish 0x0 0x48f4c4 0xbc70c 0xbbb0c 0x1b
ole32.dll (22)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
CoTaskMemAlloc 0x0 0x48f828 0xbca70 0xbbe70 0x67
CoTaskMemFree 0x0 0x48f82c 0xbca74 0xbbe74 0x68
CLSIDFromString 0x0 0x48f830 0xbca78 0xbbe78 0x8
ProgIDFromCLSID 0x0 0x48f834 0xbca7c 0xbbe7c 0x14b
CLSIDFromProgID 0x0 0x48f838 0xbca80 0xbbe80 0x6
OleSetMenuDescriptor 0x0 0x48f83c 0xbca84 0xbbe84 0x147
MkParseDisplayName 0x0 0x48f840 0xbca88 0xbbe88 0xd4
OleSetContainedObject 0x0 0x48f844 0xbca8c 0xbbe8c 0x146
CoCreateInstance 0x0 0x48f848 0xbca90 0xbbe90 0x10
IIDFromString 0x0 0x48f84c 0xbca94 0xbbe94 0xcd
StringFromGUID2 0x0 0x48f850 0xbca98 0xbbe98 0x179
CreateStreamOnHGlobal 0x0 0x48f854 0xbca9c 0xbbe9c 0x86
OleInitialize 0x0 0x48f858 0xbcaa0 0xbbea0 0x132
OleUninitialize 0x0 0x48f85c 0xbcaa4 0xbbea4 0x149
CoInitialize 0x0 0x48f860 0xbcaa8 0xbbea8 0x3e
CoUninitialize 0x0 0x48f864 0xbcaac 0xbbeac 0x6c
GetRunningObjectTable 0x0 0x48f868 0xbcab0 0xbbeb0 0x97
CoGetInstanceFromFile 0x0 0x48f86c 0xbcab4 0xbbeb4 0x2d
CoGetObject 0x0 0x48f870 0xbcab8 0xbbeb8 0x35
CoSetProxyBlanket 0x0 0x48f874 0xbcabc 0xbbebc 0x63
CoCreateInstanceEx 0x0 0x48f878 0xbcac0 0xbbec0 0x11
CoInitializeSecurity 0x0 0x48f87c 0xbcac4 0xbbec4 0x40
OLEAUT32.dll (29)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
LoadTypeLibEx 0xb7 0x48f40c 0xbc654 0xbba54 -
VariantCopyInd 0xb 0x48f410 0xbc658 0xbba58 -
SysReAllocString 0x3 0x48f414 0xbc65c 0xbba5c -
SysFreeString 0x6 0x48f418 0xbc660 0xbba60 -
SafeArrayDestroyDescriptor 0x26 0x48f41c 0xbc664 0xbba64 -
SafeArrayDestroyData 0x27 0x48f420 0xbc668 0xbba68 -
SafeArrayUnaccessData 0x18 0x48f424 0xbc66c 0xbba6c -
SafeArrayAccessData 0x17 0x48f428 0xbc670 0xbba70 -
SafeArrayAllocData 0x25 0x48f42c 0xbc674 0xbba74 -
SafeArrayAllocDescriptorEx 0x29 0x48f430 0xbc678 0xbba78 -
SafeArrayCreateVector 0x19b 0x48f434 0xbc67c 0xbba7c -
RegisterTypeLib 0xa3 0x48f438 0xbc680 0xbba80 -
CreateStdDispatch 0x20 0x48f43c 0xbc684 0xbba84 -
DispCallFunc 0x92 0x48f440 0xbc688 0xbba88 -
VariantChangeType 0xc 0x48f444 0xbc68c 0xbba8c -
SysStringLen 0x7 0x48f448 0xbc690 0xbba90 -
VariantTimeToSystemTime 0xb9 0x48f44c 0xbc694 0xbba94 -
VarR8FromDec 0xdc 0x48f450 0xbc698 0xbba98 -
SafeArrayGetVartype 0x4d 0x48f454 0xbc69c 0xbba9c -
VariantCopy 0xa 0x48f458 0xbc6a0 0xbbaa0 -
VariantClear 0x9 0x48f45c 0xbc6a4 0xbbaa4 -
OleLoadPicture 0x1a2 0x48f460 0xbc6a8 0xbbaa8 -
QueryPathOfRegTypeLib 0xa4 0x48f464 0xbc6ac 0xbbaac -
RegisterTypeLibForUser 0x1ba 0x48f468 0xbc6b0 0xbbab0 -
UnRegisterTypeLibForUser 0x1bb 0x48f46c 0xbc6b4 0xbbab4 -
UnRegisterTypeLib 0xba 0x48f470 0xbc6b8 0xbbab8 -
CreateDispTypeInfo 0x1f 0x48f474 0xbc6bc 0xbbabc -
SysAllocString 0x2 0x48f478 0xbc6c0 0xbbac0 -
VariantInit 0x8 0x48f47c 0xbc6c4 0xbbac4 -
Icons (4)
»
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\css\00000574-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.69 KB
MD5 f6398b5ccd5c91dbe0d44da446b5b45f Copy to Clipboard
SHA1 3a34969a94c98e257e754e5cc0310a83408a5e8a Copy to Clipboard
SHA256 714bee5a2292bf7934bd1c1788e34e5caf65e1f3e2e610e9539ec06f7c6833da Copy to Clipboard
SSDeep 48:/nrpyHXtOGbJDUrrXyRVtv/8tOgUkak566W0Pb6/vtCdV:/rG/JDeTIkF5BrW3gV Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ro-ro\00000564-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.23 KB
MD5 d4f62447c6caa53e09e74c686a73073e Copy to Clipboard
SHA1 838a7ac072c4eedb7eb56ea86f1754603940b1c8 Copy to Clipboard
SHA256 389dd4b1eb8daf808c2e61cec8c99167fc186726457c1de4ae5c01d713bcdb84 Copy to Clipboard
SSDeep 384:P2dZYSg7jJpAciG5YNliAFzMlmtDfqKCbqPhPJiE8:P2dZYnJpAFiYNlHPaqPhP8 Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\00000542-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.97 KB
MD5 57a91bf2309cb3ed95d1a3502b541bac Copy to Clipboard
SHA1 adfee7a86c112179d66f98bddb4b5d3be681c3a9 Copy to Clipboard
SHA256 a4dcea6ff76b2e48005303f606ae882102b9170c0652c20e3daca79dd848cb92 Copy to Clipboard
SSDeep 48:WQqauaIVqy1FN7++th/GaWQquLrIHQcNNoMbIQ:qgiK+tVGaWQquYwcfrIQ Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\zh-cn\00000572-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.42 KB
MD5 c6bcd81f6ee185535a984e9691bfa775 Copy to Clipboard
SHA1 6ecb210402423c4c58c9006e581099c9d8b5478c Copy to Clipboard
SHA256 d9f121ef574f20addcc92114e96ad981c35f28bf05968dd90433fc75d9c63e7a Copy to Clipboard
SSDeep 192:CISvdIk7Aooj6MFXWeEBkF/M5cZC+FfQAGdy48RasVhP0P8N6Nt5JQWqcIXDXCIW:CIsddENF0kFk5cZiAX4WLP/6BqcIb6p Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ko-kr\00000559-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 16.45 KB
MD5 aefb07730aebec48974aa20c93ed26b4 Copy to Clipboard
SHA1 41ce10ec2c593da6b713d47149d4c02a8bc8779f Copy to Clipboard
SHA256 67def18c32d187c534db99d876fdb5096260d4d5b9e4ba7325524fd097164825 Copy to Clipboard
SSDeep 384:KnbotwwKGV4JVlzY92FVz8ZCnWnHyPLc4wyQECfF:SboaDa2rzY9it8IWHqIRxRfF Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\00000578-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 1.59 KB
MD5 0b9f6683e25b8e488e5bc468dc67b3d7 Copy to Clipboard
SHA1 718cf4dd447eb73640fc9e2d2e6bf660a4cf0402 Copy to Clipboard
SHA256 0dbade5da71542a18229965d9804f0e1ff6ad217586c69d9adce5083304de442 Copy to Clipboard
SSDeep 48:5uxT8vz5LViRrT/tLCfPivsVeYsd1PYnNJ9c5qGZ5zPPZ5t:5uxT8v1SrTVKi0CPAnyqMZPh5t Copy to Clipboard
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\00001276-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 17.55 KB
MD5 92b3db580811d866ae747e056fbd32ad Copy to Clipboard
SHA1 d23c051e4b27b5c85480b48196e2ed7992781131 Copy to Clipboard
SHA256 7242b3fcc0f3eaa6706dd78e136897f38e235c6ae1eb40e7bf7adfcd5364e444 Copy to Clipboard
SSDeep 384:VlE95T4Q/UGaFT4v7hEpOpEH6Xu83nzk8xqon9R:jsKJeep/6e4zkr+7 Copy to Clipboard
C:\ProgramData\NoMoreLog.zip Created File Unknown
Not Queried
...
»
Mime Type application/zip
File Size 424.71 KB
MD5 c32de23012079cd05c10307ea42b89a5 Copy to Clipboard
SHA1 372f4ac7918badc107bec744791f1a6856d0f222 Copy to Clipboard
SHA256 cd0eefc487b93838af927a9ea050d62d48275372f3a37f51ca0460064644258b Copy to Clipboard
SSDeep 12288:LscnMD/K0FQwcbU5ZDv/Zd6kEpliRalbgr1K:Lsc70FQfQr7/6kml4als1K Copy to Clipboard
C:\ProgramData\release.bat Created File Text
Not Queried
...
»
Mime Type text/plain
File Size 0.77 KB
MD5 168d004edc82b4a7c11b09c1e3b223d8 Copy to Clipboard
SHA1 7d1ca31490cf87fdf228a7bc33f7d8b66eabfeff Copy to Clipboard
SHA256 60400532cf0ec1271d0717e2064de6d14a770b9a78c34b6082788cbe38755f15 Copy to Clipboard
SSDeep 12:qaPEfVQsbeVQsD76VpR3vfrCFI4vINZf3XeOHiFuYZzvc4/HcYmKUwoarCwa6:xCQsbwQsKV/og3XfvYZbF/vN1ogP Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\en-gb\00000550-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 14.42 KB
MD5 3277af2d6756c2a39fc6a6b66c9173ec Copy to Clipboard
SHA1 9cf5261aed578cd51b02413ba060af908e6569c6 Copy to Clipboard
SHA256 c6408fd00239a7732585cbb5d85e657c18a16826229ad5994a360f81f68a28ce Copy to Clipboard
SSDeep 192:J8lrEVqb5zls0QmsHIdjPvqlUrWAwQ79S9X5cNLPXS3DAUw2j6z2qylRpIwKvKlY:ql8ss0SKznG5oPX2wU46TIwK0Y Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\hr-hr\00000555-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.30 KB
MD5 4566f65e4676761e121367bb6d905853 Copy to Clipboard
SHA1 1b08487fe4cac6f6de5449d7f86f2006932093f0 Copy to Clipboard
SHA256 d91ce866b8a025e39a1b5b99e2b15d963e96e3093ddf7d9f1d01355e744442fb Copy to Clipboard
SSDeep 384:ZWLgVfckygL0rJQU2rJMit4ZPL2KHgbOu29r:L0FguJLc4ZxS6r Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\cpdf\00000291-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 2.91 KB
MD5 5bf84a03ed6cd6a6f9a26465047bd81a Copy to Clipboard
SHA1 55c6f904a2b6ff4c6e537571a6bca3294c8b5f05 Copy to Clipboard
SHA256 94b32f0e46aca395560faa0f54002875a93cafb875a9f7079ac57d7c9c7e7481 Copy to Clipboard
SSDeep 48:6JV+p/uqi4Lm4EzuScAph+dq3Ld7IDYVxJqLi8dsmZXD7V+pFLKyHk4TWOrWCHdk:6JQfm1uSlL+d8Ld7JLqLrrNtiLZkMWPN Copy to Clipboard
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\sv-se\00000569-Lock.onion Created File Stream
Not Queried
...
»
Mime Type application/octet-stream
File Size 15.16 KB
MD5 21e3702434943c2d530e0e6dcde397d8 Copy to Clipboard
SHA1 49f09428b1f8a651f6413009210260d598a47e60 Copy to Clipboard
SHA256 8b1fe136a33553fcb58a635e5661b4f570413e0369a41d80907b802e71508acf Copy to Clipboard
SSDeep 384:lTnYNWyT5L6cC0K1waZsDaFkC+n086HGc89dpr:lz4WA5UX1ww3W0fTapr Copy to Clipboard
Exit-Icon
WHOIS Domain Information
Domain Name
WHOIS Response 

       		
      

     

    

   

  

  

  

  

   

    
    

     Function Logfile
    

    

     

      Download-Icon
     

    

    

     Exit-Icon
    

   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image