47f5a231...09b4

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CUsersSonyAppDataLocalTemphvwfcsky8521.exe

Sample File

Binary

Suspicious

»

Also Known As	C:\Users\5P5NRG~1\AppData\Local\Temp\hvwfcsky31500.exe (Created File)
Mime Type	application/x-dosexec
File Size	1.22 MB
MD5	faf4de4e1c5d8e4241088c90cfe8eddd
SHA1	fcd241fdcd462199f2907ca34c73ce9c89b03e5f
SHA256	47f5a231f7cd0e36508ca6ff8c21c08a7248f0f2bd79c1e772b73443597b09b4
SSDeep	24576:2d2D4s/zj4pvOmB5h8DlVeZUEJt90nPx103CdnOQOdmdbDJKo:jDHzk1jZUElqg3bQOdmdbDJKo
ImpHash	27f610a2966ffaa9958098af7bf71994

File Reputation Information

»

Severity	Suspicious
First Seen	2019-02-05 14:27 (UTC+1)
Last Seen	2019-02-08 22:41 (UTC+1)
Names	Win32.Trojan.Filecoder
Families	Filecoder
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x4986d4
Size Of Code	0xe3e00
Size Of Initialized Data	0x54600
File Type	executable
Subsystem	windows_gui
Machine Type	i386
Compile Timestamp	2019-02-03 17:48:37+00:00

Version Information (8)

»

LegalCopyright	Copyright (C) KITTY'S LTD 2019
InternalName	hvwfcsky
FileVersion	1.2.0.0
CompanyName	KITTY'S LTD
ProductName	Service hvwfcsky
ProductVersion	1.2.0.0
FileDescription	Host Process for Windows Tasks
OriginalFilename	hvwfcsky

Sections (5)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0xe3df2	0xe3e00	0x400	cnt_code, mem_execute, mem_read	6.62
.rdata	0x4e5000	0x37ada	0x37c00	0xe4200	cnt_initialized_data, mem_read	4.94
.data	0x51d000	0xd020	0xaa00	0x11be00	cnt_initialized_data, mem_read, mem_write	4.94
.rsrc	0x52b000	0x518	0x600	0x126800	cnt_initialized_data, mem_read	3.74
.reloc	0x52c000	0xf194	0xf200	0x126e00	cnt_initialized_data, mem_discardable, mem_read	6.56

Imports (5)

»

SHLWAPI.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PathIsNetworkPathA	0x0	0x4e5294	0x11bdc8	0x11afc8	0x60

KERNEL32.dll (156)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CloseHandle	0x0	0x4e5018	0x11bb4c	0x11ad4c	0x52
DuplicateHandle	0x0	0x4e501c	0x11bb50	0x11ad50	0xe8
UnmapViewOfFile	0x0	0x4e5020	0x11bb54	0x11ad54	0x4d6
CreateFileMappingA	0x0	0x4e5024	0x11bb58	0x11ad58	0x89
MapViewOfFileEx	0x0	0x4e5028	0x11bb5c	0x11ad5c	0x358
CreateFileA	0x0	0x4e502c	0x11bb60	0x11ad60	0x88
GetSystemInfo	0x0	0x4e5030	0x11bb64	0x11ad64	0x273
FormatMessageA	0x0	0x4e5034	0x11bb68	0x11ad68	0x15d
LocalFree	0x0	0x4e5038	0x11bb6c	0x11ad6c	0x348
GetProcAddress	0x0	0x4e503c	0x11bb70	0x11ad70	0x245
GetModuleHandleA	0x0	0x4e5040	0x11bb74	0x11ad74	0x215
GetExitCodeProcess	0x0	0x4e5044	0x11bb78	0x11ad78	0x1df
CreateProcessW	0x0	0x4e5048	0x11bb7c	0x11ad7c	0xa8
TerminateProcess	0x0	0x4e504c	0x11bb80	0x11ad80	0x4c0
WaitForSingleObjectEx	0x0	0x4e5050	0x11bb84	0x11ad84	0x4fa
WaitForSingleObject	0x0	0x4e5054	0x11bb88	0x11ad88	0x4f9
CreateEventA	0x0	0x4e5058	0x11bb8c	0x11ad8c	0x82
SetEvent	0x0	0x4e505c	0x11bb90	0x11ad90	0x459
CreateSemaphoreA	0x0	0x4e5060	0x11bb94	0x11ad94	0xab
ReleaseSemaphore	0x0	0x4e5064	0x11bb98	0x11ad98	0x3fe
AreFileApisANSI	0x0	0x4e5068	0x11bb9c	0x11ad9c	0x15
ReadFile	0x0	0x4e506c	0x11bba0	0x11ada0	0x3c0
WriteFile	0x0	0x4e5070	0x11bba4	0x11ada4	0x525
MultiByteToWideChar	0x0	0x4e5074	0x11bba8	0x11ada8	0x367
WideCharToMultiByte	0x0	0x4e5078	0x11bbac	0x11adac	0x511
GetSystemDirectoryW	0x0	0x4e507c	0x11bbb0	0x11adb0	0x270
CreatePipe	0x0	0x4e5080	0x11bbb4	0x11adb4	0xa1
SetHandleInformation	0x0	0x4e5084	0x11bbb8	0x11adb8	0x470
GetProcessHeap	0x0	0x4e5088	0x11bbbc	0x11adbc	0x24a
HeapAlloc	0x0	0x4e508c	0x11bbc0	0x11adc0	0x2cb
GetCurrentProcess	0x0	0x4e5090	0x11bbc4	0x11adc4	0x1c0
GetLogicalDriveStringsW	0x0	0x4e5094	0x11bbc8	0x11adc8	0x208
GetCommandLineW	0x0	0x4e5098	0x11bbcc	0x11adcc	0x187
GetDriveTypeW	0x0	0x4e509c	0x11bbd0	0x11add0	0x1d3
GetWindowsDirectoryW	0x0	0x4e50a0	0x11bbd4	0x11add4	0x2af
Wow64DisableWow64FsRedirection	0x0	0x4e50a4	0x11bbd8	0x11add8	0x513
Wow64RevertWow64FsRedirection	0x0	0x4e50a8	0x11bbdc	0x11addc	0x517
QueryPerformanceCounter	0x0	0x4e50ac	0x11bbe0	0x11ade0	0x3a7
QueryPerformanceFrequency	0x0	0x4e50b0	0x11bbe4	0x11ade4	0x3a8
ResetEvent	0x0	0x4e50b4	0x11bbe8	0x11ade8	0x40f
WaitForMultipleObjectsEx	0x0	0x4e50b8	0x11bbec	0x11adec	0x4f8
OpenEventA	0x0	0x4e50bc	0x11bbf0	0x11adf0	0x374
SetWaitableTimer	0x0	0x4e50c0	0x11bbf4	0x11adf4	0x4ac
GetCurrentProcessId	0x0	0x4e50c4	0x11bbf8	0x11adf8	0x1c1
GetCurrentThreadId	0x0	0x4e50c8	0x11bbfc	0x11adfc	0x1c5
ResumeThread	0x0	0x4e50cc	0x11bc00	0x11ae00	0x413
TlsAlloc	0x0	0x4e50d0	0x11bc04	0x11ae04	0x4c5
TlsGetValue	0x0	0x4e50d4	0x11bc08	0x11ae08	0x4c7
TlsSetValue	0x0	0x4e50d8	0x11bc0c	0x11ae0c	0x4c8
TlsFree	0x0	0x4e50dc	0x11bc10	0x11ae10	0x4c6
CreateWaitableTimerA	0x0	0x4e50e0	0x11bc14	0x11ae14	0xbf
SetLastError	0x0	0x4e50e4	0x11bc18	0x11ae18	0x473
GetCurrentThread	0x0	0x4e50e8	0x11bc1c	0x11ae1c	0x1c4
GetThreadTimes	0x0	0x4e50ec	0x11bc20	0x11ae20	0x291
FindNextFileA	0x0	0x4e50f0	0x11bc24	0x11ae24	0x143
FindFirstFileExA	0x0	0x4e50f4	0x11bc28	0x11ae28	0x133
GetTimeZoneInformation	0x0	0x4e50f8	0x11bc2c	0x11ae2c	0x298
HeapSize	0x0	0x4e50fc	0x11bc30	0x11ae30	0x2d4
FreeEnvironmentStringsW	0x0	0x4e5100	0x11bc34	0x11ae34	0x161
GetLastError	0x0	0x4e5104	0x11bc38	0x11ae38	0x202
SwitchToThread	0x0	0x4e5108	0x11bc3c	0x11ae3c	0x4bc
Sleep	0x0	0x4e510c	0x11bc40	0x11ae40	0x4b2
WriteConsoleW	0x0	0x4e5110	0x11bc44	0x11ae44	0x524
HeapFree	0x0	0x4e5114	0x11bc48	0x11ae48	0x2cf
GetStringTypeW	0x0	0x4e5118	0x11bc4c	0x11ae4c	0x269
FormatMessageW	0x0	0x4e511c	0x11bc50	0x11ae50	0x15e
GetExitCodeThread	0x0	0x4e5120	0x11bc54	0x11ae54	0x1e0
EnterCriticalSection	0x0	0x4e5124	0x11bc58	0x11ae58	0xee
LeaveCriticalSection	0x0	0x4e5128	0x11bc5c	0x11ae5c	0x339
TryEnterCriticalSection	0x0	0x4e512c	0x11bc60	0x11ae60	0x4ce
DeleteCriticalSection	0x0	0x4e5130	0x11bc64	0x11ae64	0xd1
CreateFileW	0x0	0x4e5134	0x11bc68	0x11ae68	0x8f
FindClose	0x0	0x4e5138	0x11bc6c	0x11ae6c	0x12e
FindFirstFileExW	0x0	0x4e513c	0x11bc70	0x11ae70	0x134
FindNextFileW	0x0	0x4e5140	0x11bc74	0x11ae74	0x145
GetDiskFreeSpaceExW	0x0	0x4e5144	0x11bc78	0x11ae78	0x1ce
GetFileAttributesExW	0x0	0x4e5148	0x11bc7c	0x11ae7c	0x1e7
GetFileInformationByHandle	0x0	0x4e514c	0x11bc80	0x11ae80	0x1ec
SetEndOfFile	0x0	0x4e5150	0x11bc84	0x11ae84	0x453
SetFileAttributesW	0x0	0x4e5154	0x11bc88	0x11ae88	0x461
SetFilePointerEx	0x0	0x4e5158	0x11bc8c	0x11ae8c	0x467
GetTempPathW	0x0	0x4e515c	0x11bc90	0x11ae90	0x285
DeleteFileW	0x0	0x4e5160	0x11bc94	0x11ae94	0xd6
GetFileAttributesW	0x0	0x4e5164	0x11bc98	0x11ae98	0x1ea
RemoveDirectoryW	0x0	0x4e5168	0x11bc9c	0x11ae9c	0x403
GetModuleHandleW	0x0	0x4e516c	0x11bca0	0x11aea0	0x218
MoveFileExW	0x0	0x4e5170	0x11bca4	0x11aea4	0x360
GetCPInfo	0x0	0x4e5174	0x11bca8	0x11aea8	0x172
EncodePointer	0x0	0x4e5178	0x11bcac	0x11aeac	0xea
DecodePointer	0x0	0x4e517c	0x11bcb0	0x11aeb0	0xca
InitializeCriticalSectionAndSpinCount	0x0	0x4e5180	0x11bcb4	0x11aeb4	0x2e3
CreateEventW	0x0	0x4e5184	0x11bcb8	0x11aeb8	0x85
GetSystemTimeAsFileTime	0x0	0x4e5188	0x11bcbc	0x11aebc	0x279
GetTickCount	0x0	0x4e518c	0x11bcc0	0x11aec0	0x293
CompareStringW	0x0	0x4e5190	0x11bcc4	0x11aec4	0x64
LCMapStringW	0x0	0x4e5194	0x11bcc8	0x11aec8	0x32d
GetLocaleInfoW	0x0	0x4e5198	0x11bccc	0x11aecc	0x206
InitializeSListHead	0x0	0x4e519c	0x11bcd0	0x11aed0	0x2e7
IsProcessorFeaturePresent	0x0	0x4e51a0	0x11bcd4	0x11aed4	0x304
IsDebuggerPresent	0x0	0x4e51a4	0x11bcd8	0x11aed8	0x300
UnhandledExceptionFilter	0x0	0x4e51a8	0x11bcdc	0x11aedc	0x4d3
SetUnhandledExceptionFilter	0x0	0x4e51ac	0x11bce0	0x11aee0	0x4a5
GetStartupInfoW	0x0	0x4e51b0	0x11bce4	0x11aee4	0x263
CreateTimerQueue	0x0	0x4e51b4	0x11bce8	0x11aee8	0xbc
SignalObjectAndWait	0x0	0x4e51b8	0x11bcec	0x11aeec	0x4b0
CreateThread	0x0	0x4e51bc	0x11bcf0	0x11aef0	0xb5
SetThreadPriority	0x0	0x4e51c0	0x11bcf4	0x11aef4	0x499
GetThreadPriority	0x0	0x4e51c4	0x11bcf8	0x11aef8	0x28e
GetLogicalProcessorInformation	0x0	0x4e51c8	0x11bcfc	0x11aefc	0x20a
CreateTimerQueueTimer	0x0	0x4e51cc	0x11bd00	0x11af00	0xbd
ChangeTimerQueueTimer	0x0	0x4e51d0	0x11bd04	0x11af04	0x48
DeleteTimerQueueTimer	0x0	0x4e51d4	0x11bd08	0x11af08	0xda
GetNumaHighestNodeNumber	0x0	0x4e51d8	0x11bd0c	0x11af0c	0x229
GetProcessAffinityMask	0x0	0x4e51dc	0x11bd10	0x11af10	0x246
SetThreadAffinityMask	0x0	0x4e51e0	0x11bd14	0x11af14	0x490
RegisterWaitForSingleObject	0x0	0x4e51e4	0x11bd18	0x11af18	0x3f5
UnregisterWait	0x0	0x4e51e8	0x11bd1c	0x11af1c	0x4da
FreeLibrary	0x0	0x4e51ec	0x11bd20	0x11af20	0x162
FreeLibraryAndExitThread	0x0	0x4e51f0	0x11bd24	0x11af24	0x163
GetModuleFileNameW	0x0	0x4e51f4	0x11bd28	0x11af28	0x214
LoadLibraryExW	0x0	0x4e51f8	0x11bd2c	0x11af2c	0x33e
GetVersionExW	0x0	0x4e51fc	0x11bd30	0x11af30	0x2a4
VirtualAlloc	0x0	0x4e5200	0x11bd34	0x11af34	0x4e9
VirtualProtect	0x0	0x4e5204	0x11bd38	0x11af38	0x4ef
VirtualFree	0x0	0x4e5208	0x11bd3c	0x11af3c	0x4ec
InterlockedPopEntrySList	0x0	0x4e520c	0x11bd40	0x11af40	0x2f0
InterlockedPushEntrySList	0x0	0x4e5210	0x11bd44	0x11af44	0x2f1
InterlockedFlushSList	0x0	0x4e5214	0x11bd48	0x11af48	0x2ee
QueryDepthSList	0x0	0x4e5218	0x11bd4c	0x11af4c	0x39e
UnregisterWaitEx	0x0	0x4e521c	0x11bd50	0x11af50	0x4db
LoadLibraryW	0x0	0x4e5220	0x11bd54	0x11af54	0x33f
RaiseException	0x0	0x4e5224	0x11bd58	0x11af58	0x3b1
RtlUnwind	0x0	0x4e5228	0x11bd5c	0x11af5c	0x418
GetCommandLineA	0x0	0x4e522c	0x11bd60	0x11af60	0x186
ExitThread	0x0	0x4e5230	0x11bd64	0x11af64	0x11a
GetModuleHandleExW	0x0	0x4e5234	0x11bd68	0x11af68	0x217
SetEnvironmentVariableA	0x0	0x4e5238	0x11bd6c	0x11af6c	0x456
ExitProcess	0x0	0x4e523c	0x11bd70	0x11af70	0x119
GetModuleFileNameA	0x0	0x4e5240	0x11bd74	0x11af74	0x213
GetStdHandle	0x0	0x4e5244	0x11bd78	0x11af78	0x264
GetACP	0x0	0x4e5248	0x11bd7c	0x11af7c	0x168
HeapReAlloc	0x0	0x4e524c	0x11bd80	0x11af80	0x2d2
GetDateFormatW	0x0	0x4e5250	0x11bd84	0x11af84	0x1c8
GetTimeFormatW	0x0	0x4e5254	0x11bd88	0x11af88	0x297
IsValidLocale	0x0	0x4e5258	0x11bd8c	0x11af8c	0x30c
GetUserDefaultLCID	0x0	0x4e525c	0x11bd90	0x11af90	0x29b
EnumSystemLocalesW	0x0	0x4e5260	0x11bd94	0x11af94	0x10f
GetFileType	0x0	0x4e5264	0x11bd98	0x11af98	0x1f3
FlushFileBuffers	0x0	0x4e5268	0x11bd9c	0x11af9c	0x157
GetConsoleCP	0x0	0x4e526c	0x11bda0	0x11afa0	0x19a
GetConsoleMode	0x0	0x4e5270	0x11bda4	0x11afa4	0x1ac
ReadConsoleW	0x0	0x4e5274	0x11bda8	0x11afa8	0x3be
SetStdHandle	0x0	0x4e5278	0x11bdac	0x11afac	0x487
IsValidCodePage	0x0	0x4e527c	0x11bdb0	0x11afb0	0x30a
GetOEMCP	0x0	0x4e5280	0x11bdb4	0x11afb4	0x237
GetEnvironmentStringsW	0x0	0x4e5284	0x11bdb8	0x11afb8	0x1da

SHELL32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHGetFolderPathW	0x0	0x4e528c	0x11bdc0	0x11afc0	0xc3

ole32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CoCreateInstance	0x0	0x4e529c	0x11bdd0	0x11afd0	0x10
CoUninitialize	0x0	0x4e52a0	0x11bdd4	0x11afd4	0x6c
CoInitialize	0x0	0x4e52a4	0x11bdd8	0x11afd8	0x3e

ADVAPI32.dll (5)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CryptReleaseContext	0x0	0x4e5000	0x11bb34	0x11ad34	0xcb
CryptAcquireContextA	0x0	0x4e5004	0x11bb38	0x11ad38	0xb0
SetSecurityDescriptorDacl	0x0	0x4e5008	0x11bb3c	0x11ad3c	0x2b6
InitializeSecurityDescriptor	0x0	0x4e500c	0x11bb40	0x11ad40	0x177
CryptGenRandom	0x0	0x4e5010	0x11bb44	0x11ad44	0xc1

Digital Signatures (3)

»

Certificate: KITTY'S LTD

»

Issued by	KITTY'S LTD
Parent Certificate	Sectigo RSA Code Signing CA
Country Name	GB
Valid From	2019-02-01 00:00:00+00:00
Valid Until	2020-02-01 23:59:59+00:00
Algorithm	sha256_rsa
Serial Number	37 8D 55 43 04 8E 58 3A 06 A0 81 9F 25 BD 9E 85
Thumbprint	CF 93 3A 62 95 98 E5 E1 92 DA 20 86 E6 11 0A D1 97 4F 8E C3

Certificate: Sectigo RSA Code Signing CA

»

Issued by	Sectigo RSA Code Signing CA
Parent Certificate	USERTrust RSA Certification Authority
Country Name	GB
Valid From	2018-11-02 00:00:00+00:00
Valid Until	2030-12-31 23:59:59+00:00
Algorithm	sha384_rsa
Serial Number	1D A2 48 30 6F 9B 26 18 D0 82 E0 96 7D 33 D3 6A
Thumbprint	94 C9 5D A1 E8 50 BD 85 20 9A 4A 2A F3 E1 FB 16 04 F9 BB 66

Certificate: USERTrust RSA Certification Authority

»

Issued by	USERTrust RSA Certification Authority
Country Name	US
Valid From	2000-05-30 10:48:38+00:00
Valid Until	2020-05-30 10:48:38+00:00
Algorithm	sha384_rsa
Serial Number	13 EA 28 70 5B F4 EC ED 0C 36 63 09 80 61 43 36
Thumbprint	EA B0 40 68 9A 0D 80 5B 5D 6F D6 54 FC 16 8C FF 00 B7 8B E3

C:\ProgramData\Package Cache\{e52a6842-b0ac-476e-b48f-378a97a67346}\state.rsm.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.89 KB
MD5	96abc157b40bcbd82e91b5cd466d0c5d
SHA1	9d89cff6f2546fddc8193771ecf1ee443a29b514
SHA256	67c4500c0033f44b6875c671027af81a1e671a7b9e3ebb15d8467644d2e813ff
SSDeep	24:JnB3sMZq2QGvFD4XmgbRf/H6/nHmXexeQlWH3D8FEWf:JBcYT9M2efC/HMeYD1k

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\th\messages.json.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	4899c1d9c5f2e28a534176e2a84fbef1
SHA1	6fea3c3fe9f8467382fca31607008a19e9d58f77
SHA256	b3b4ea5af1765bf1203bd6bc5402f23c94dd9d614c5eb1ebf1bf36aa672af20b
SSDeep	6:uQjaVhU58qhEqgIKv1pYvjzs3BT25pN4ym4H3yUCcLXG2Hej4kGi+/aXoeIe3Xb8:UVhUNEZEvjYRTMpiUCcp+DGOj3XPZOTB

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\accessibility.EUQ.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	43.14 KB
MD5	f03dee0b757b7d423eca9c205004169c
SHA1	a36cff1204dfd2e954024e5b835824b2b260e09b
SHA256	f9b011db84b64f60ee9326a3cbe885159f754cead86fc1b44932171bad83f433
SSDeep	768:taqMkSGBOLYT1wxqWwFTlMmzDyVH64bede1Ojb8pdiWu5JdaY8Z2PdqG4WMY3Kes:UqHnOcT1e6AWDy1f1OjKKdaY4sMGNx8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\~nsu.tmp\Au_.exe.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	64.92 KB
MD5	0a377bcdbd9fad78d21d92c386b9e1bc
SHA1	987e422cf84573c83acc76041e0ae2cd3decdf09
SHA256	313c71099765e0940e9a51555dbca98546569716d43c542e98914902443e6e33
SSDeep	1536:CGaB9jIB6nT6rxmj+fkFfMT/SujcOZsudMHyjA9fyljknqUBctRSBzo:ClBdIB66mj+fofMWacO2VEEydknjKTSK

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	ff3c99e56acdf531921e2c3ab1133ddf
SHA1	af13e26fa1ad2beb32d4babf574deebad598d66c
SHA256	c9a0c3513a7a100dfa9bd9f3818024ecdfe6f7633e5b002b8e4f7a6d853f6335
SSDeep	6:+Wd1LbxFZ77Gcrq+PUMY33ocHOKetzWPtI04WxAB1NWWZvszpCDIPfOTLHpbABkS:Ld1XxTTrbQscPtIJW2fNWeG5fOnxAWiv

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_metadata\computed_hashes.json.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	28.78 KB
MD5	066c7bb4fb11cfee7288342cfc58f835
SHA1	656cd9b0fad35234dde35c29087aeef4ad4d259d
SHA256	345613b175b989960b1ebd3977910c3ec252dad0c93add3ea1b6adc90ec79388
SSDeep	768:mwAc7n1dk/gJmztOvUX/UKv70wRrZM4OBJ4Tfs3EGiH5Za3Io39Ex:Cc7+gJmzv/UKz0wBZMXB2Tf2iH5UIA9U

C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\20170605115313.pma.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.81 KB
MD5	d282d23dd35e314f5cf78b044fd69226
SHA1	1a18b68e6df7b687c2c24b2c03bcd055b861ecd6
SHA256	e8ff9082408a17bf61aa4d8a95679279bb23f3ea2eecdc83364e8601d59fe13b
SSDeep	96:rQYhBJrfCjDETDdbSTFTZgtjqH+oMxFygyMJkoyj+JI7GDsxVK/nQzGiPPRjY5k:rxhBJrajydbSTyqXCkoqGDjEim

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\_locales\pl\messages.json.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.78 KB
MD5	2d24eba6b16b7db6f6d6ca0b3b8f1d24
SHA1	d09dd706e0ef57635095f4df0a2eab14fb4b77fe
SHA256	ceee13d1dc5461e8e3da3401d871652cb2b542fbb25da147682985bff7fd2294
SSDeep	24:TzvMbX/loeQlzzWJxeFptyZ6WWIl9MlNl/:/UOeQlzz2eFnLs9MJ/

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\clickonce_bootstrap.exe.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.22 KB
MD5	1263b0a396ddfc30e9bc37f305f31589
SHA1	8893da16f6afacdcb64fc7844f78dc9bfcd2699e
SHA256	6d31d4eea365d1d80cb0ed46c84e89b46d0bb3c411f9f0e5906805e8bac32f97
SSDeep	384:xaHFMrSsTGMWq0cSNojF6trbjtuDCkD7A9fjVZ9GiH3Pn:xSclZ3jw3tuDi9fUm3Pn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\128.png.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.69 KB
MD5	e34e7b7f07c866e6fa71c3897c4d2116
SHA1	7f3524b10f9f7b3e9d1e10e3d2c6e3f4cb077af6
SHA256	0b09f5bca65c13d218e39caa9a3238201a6ce60154e8c8fc4ebf06d314f66d4f
SSDeep	192:lSP4J1HRf2XzAQtDeamudd2cfUMFnEUBdi+7:lTJ1xu/lVdd2cn7h

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.64 KB
MD5	a22cd14aaa18a3b17f20f25b4c81eb76
SHA1	3ac6753a11d10c6d0335a4628332410247e8e5fc
SHA256	da9caa0fa6f44adc0f60e35ad929e58ef77c9f7014300fdb12f3fe150466ccff
SSDeep	96:sLnIw047IsoGvIwZDuBWv8QGgG/iPkIsfiVD:SL9tNUQG3KPkIqiVD

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\AdobeArabic-Bold.otf.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	223.75 KB
MD5	972aaaa22253da832840b26a283c85d2
SHA1	d0ca223b043dd32e74f215e1ce80119335f39db7
SHA256	059a7540ce04edd70c2e122b4204991e0852226c8f55142e3a8c946dc6875e84
SSDeep	6144:AZfK4B4jGnYSofyEbds775VU5MGsmC1GFZQU:efPygYS1+sTismkOp

C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\1027.mst.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.14 KB
MD5	8e8bcc63f2491efca4deab28ee1f2e8c
SHA1	34212048f5a02b38e4fbf866a57de146875f537c
SHA256	845c4d58cef6107d4fd5986380acfba351247c93bfbe411b0e97943669a42681
SSDeep	768:mF7KtYgY5yxKxAKqyaybz6kucU2aeyH1/g3KBpzd0QmAPwrN5sn:mEq9YKxAKqyecU2I1/g3CplSy

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\tr\messages.json.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	abcdaa1b9e9bfb783be95686509f57e1
SHA1	29322cad3dc8127e3d8147d8aa8904b5b935425f
SHA256	0caf643889a9dff0b8b8d92b3cfd86f2e3ce81645457448a6aa84164b2329ce2
SSDeep	6:70kOtHe7gKOjkn93a7N+44V6tgouCfbhTeTxgnRNNFj5X7BSob/0fgCuyJt:oQ5OQc/vhqT6nv5X7BSobcItyJt

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\en\messages.json.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.50 KB
MD5	42abea173d81fe1ca7298ea44dae6d5e
SHA1	b710a0eb560b5df8ae23cfe354773e32325f05b3
SHA256	ed14e986c749075b8f67a6070f8cb896d4bd6c81ed5634d42ba25d74cf0ace47
SSDeep	384:oOK+pXgwwJy1p864+UmYKfjfQcANmfLRYWkK9+JkS0:I+pXgww01y64+UM8ofLyyF

C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.58 KB
MD5	4e420005f8b6b30899607cf03d06dc5f
SHA1	07ebda91f0cd3ccb8bb0b87324d6188891a5b14e
SHA256	cc2e3501fdf544913cba4595900432ce4ca7d89e4951fcabf28385e03f9abf19
SSDeep	12:U7mTX4TOz9SDdSG8ox2TbCs/fcie7hnq3lOMfnYx2j1WWRk8:kk4Cz9SDdSmxGWefDghslOMH1Th

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hu_HU\Reader_10.0.helpcfg.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	9533dc04f9df4da0711e6731d3c10f96
SHA1	cd8f78beb587231bfbbdb33598d58694debc5af1
SHA256	8bda4ec1f03304b3f7757b6e6c64ff5d37843f6ef51d2ecec090a143a54567f0
SSDeep	12:09Vm1VId7/bFQ+VlR378knkVfbp0pNExh9xf51B4bYVz5lXM:6dQ0HMVDp0pNEh95mYV1lc

C:\ProgramData\Microsoft Help\Hx.hxn.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.52 KB
MD5	7183be3c799b6845d6924c5dd3a2deaa
SHA1	e9b8ca3b5478378eb00b854ae65379155a6f1e58
SHA256	dbd530176209a366bac24ac5b17cdd5f3a9f4fdbe2df6a10a5183626342ed414
SSDeep	12:uOQlQ81yJKdUD4LqRyjpFKOJNT+XHWYKNtWmaMb:uRlj1eOhSyrnTo36aMb

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_TW\Reader_10.0.helpcfg.locked

Created File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	c8d0102bb7ddf868afd8e90b3fc2e039
SHA1	6214b7d9eeb13e883ceb28314cf9dafee350789f
SHA256	ec47dfaa6e0b73836df8d6d4ab41f30c4270f893726c7502ab33b752a85500d4
SSDeep	12:Onq1fl1raZKMBGH8pcbF7iH+IvquzGYUUGoJ5Da:Oqr1ra+4yRxSUUnT2

C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.84 KB
MD5	32f297914b0a98883066d1dc69ea20d7
SHA1	21bd7e04d27c98ab4c4077668b0516938033c99a
SHA256	61768831a400bff9de012143e4fd1fb77b528b21a8e7657c3789ba4f0373feb3
SSDeep	192:DRGRwYsThmMHbMw98Fr7ALzXHpa+txOdElBztMJzKI7+AFcvV0U+FM57:dGRwPIMHz90oPpTO0KzKYlCzt

C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	246.14 KB
MD5	322243629d66bb03cb6ee72a8e5b155e
SHA1	bbae822237c56521c58f86b93e87caf2b55c5399
SHA256	b9a3af991d12d95fd072328d45b6f582949b7c90296815d124712c21c6cf54b3
SSDeep	6144:o8ew/JXFoLrH/2z48pLBGj1JM9ngfz3X9Sxfxw1:9PUHH/OfGj1J53X9SBxW

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\safebrowsing\test-malware-simple.sbstore.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	c394f1bf93d8a03ffbaf0b6fad1b8ab3
SHA1	ac173e1a380a56fb74ea6e02433624f4080725e0
SHA256	23436b83131af75712c36c6f2ed8cacfe7570a55911947648aba0a79014c955f
SSDeep	6:dgS+JherN7QdA1mOH6Z3tZIGRo8Zc1B6VC7nEBzeeI3H/i2/ZgpXMSWEnQxgmmYP:EJhXemOaZdKGW8m3REBcf7/Zgp3WEUgi

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\bg\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.44 KB
MD5	61fcb325fe0bcf47974080104ac59b23
SHA1	1a587bd628943b21719bfb3301b469d927d2b1fa
SHA256	f4002159a48ebc57106b6fd0f76fae47075ecb5e5bdf8be16abf961fcef705e8
SSDeep	12:z284QIULuMwxKpP3QucM5apADCT7mvmY4W2k2mn:iULuMwApP3QucMYp9smY2kD

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\History\History.IE5\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.14 KB
MD5	da43c78ded532c004fe62ad135185504
SHA1	1db1eed106752b4659c50b2e0afa2b8ecde8890e
SHA256	17b0f2bdce6082b4b620e6808087b5ced1378d80fc0905c7715a0f6e77a5bd63
SSDeep	384:3ANcXd2QJwjguQB2Vb7ybAv8dJ7YmSea/8bpta6WkbO7/W2Vi:3ANLjjgOJss3Pota6LO7/9i

C:\Users\Public\Music\Sample Music\Kalimba.mp3.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.02 MB
MD5	dbbd68ad83cacd82ef9ba51de5cb4a09
SHA1	937338a62185e5025ee9809ee46443215a206aee
SHA256	e456b3d74e5a19c1a33cc638f92a364e0bf79929ee1bd9872d37153d4b3c7402
SSDeep	196608:Kmu2TgkTKpG3q5S5H6DH/6uevQO9tEyr46BzuIosFqgjwD6zcqir7ER3BR6A:KmdgM34YH6DfGzr3Vce4qir7GxRf

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\ctl_gb18030.cnv.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	223.20 KB
MD5	caadf66fc327b2fe3a8b86bebf569319
SHA1	00f23a1f036a0fdcbc83725ae1bc5c93d35807d0
SHA256	ad2241f82a9ddecf1211f47fefeffbfc8c0fdc4529e21df4abaea3a2e6367c99
SSDeep	6144:lCOwtlYdhG7zrkWvRd+RmO2y9T7CbpjwYOUm/huongI:l9wtlYdsvZvjgb9gVm/hvgI

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.14 KB
MD5	b7c4c4d65a9eec68651dab2517fcd11c
SHA1	ee04270cfd9b85461150f2b8860fa2f07c8524c9
SHA256	0dac7ca6e45f8b5ac41bb3a66cc1b603ffaa36b594a998de31794df0da6e1345
SSDeep	192:Y8Bp8FplAzZyuzaS1SmSwy0LS2EjXZ7w1dV3AwLilIutmKTyzI+H+82:Yo8LlAax3ZE7EkHQs6IqNz+H+v

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Visio\content14.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	99.36 KB
MD5	253ecd305f41c04a800f6a5ff669a03f
SHA1	0bff665992bdab3a59e199a9c1a1e1ed7dfcc704
SHA256	daa4c9639686308d01399c8d8c900eb4e01413ae3895d4efa50be353acca1c89
SSDeep	1536:3F5eIGZhjmYfZWVm7kSv2iFtUCQO09VnTSCv8U/B4T9u56uFROAyBzsGK+1GWY:HeIAnZWAp2qtUB91TWU/3tdyxsGK++

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	8242193ba925fefc557da396186765d3
SHA1	546031a30a69fa90985a34fb165a2bb70a5d404b
SHA256	e3b23c4b636101c48d06ef8762a13c35596e09b628252fd81d43f5a4085166f1
SSDeep	768:ApEWaxhYfutZWX2DE0lK1LMtigG5tsphEvzIR6eF8GDyf:ApE1gEsqlK1LMtigAt6h2IRXuuyf

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ca\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	a8723fc349b91e6230b844a4807ecfd5
SHA1	7ea09710ba9f1c95c023567c0de1e750f9657ffc
SHA256	32dbd0b5dd71ed609777e0e9767a47fcf25c843f648034bceedc37ea0b33bd7a
SSDeep	12:GrBEp7f4HZhWgFRF+/lKAc918fldopaWt2Dsy:oBEpkHZwQ+tK71elCam0F

C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	790.92 KB
MD5	4268cf95fe2dd2eaaa24276762e419ec
SHA1	01c86c167628284a7dafd604b6d0641ea919cff4
SHA256	4a1dede3cea5b030cd96a53c95ddfa38b2fd559e2e4e6a60136e8a96c176725d
SSDeep	12288:459EiT+AJ4jtqyjUAJT2VMAeGLaYxRSxfmZIh94Vy1PdrbdthSJVMAaOIA:4r1+HtIA8VMmeuSxuSh944PxGJVMFO9

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	16c07a5ed755c247f1c42120be795fab
SHA1	7f0408a659fcbead8fd75afdcd740331f6829a99
SHA256	62bd4814c0e6cd4a49bab6ef608677e14447eac34f3bd01e6a21a762cfdac4b0
SSDeep	6:DGnzSJ2Bi5guWim4aKkiSHHPzw9Z0u3/NxRXrOI0kHUyTW413q++JHH:KpBPiBkZk9ZR/NjrO+V1lq++lH

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.64 KB
MD5	9cd91cd62c06273c86b311374b9476a6
SHA1	37c7f04ae32c345f4fcceb76a450be17cccf3643
SHA256	3ac0f8b4067b7b3a73f9492cecafad6f6dab1ddba365ce275bf3a9dba389da45
SSDeep	768:gqM3eQafJBuT0Q9KZIDX1PpxP2x1IBXBv7FGFiO+:gq/+TXtvx+xKJ6Fi9

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Local State.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	66.17 KB
MD5	68d709a2a9bf079b862ad20f09be4f33
SHA1	0fc3ff39db26015aaa4c6a4728f987a900dc15ec
SHA256	40449cf5936373210dfbda40737d0a1b057c571dd4ee8ef46ce60a3d53de1d96
SSDeep	1536:VO/NbJgrB4xCnv1unzpxyPP+SHbuCmrx+K8ePufZ5xN:VO/NyLnqzryPexKePuhzN

C:\ProgramData\Microsoft\Windows\Power Efficiency Diagnostics\energy-ntkl.etl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.69 MB
MD5	e244d20aea8e8af88ef935629c83dfc5
SHA1	f9eb30b13c94b7b5faefa00f74cbbc023941cb9f
SHA256	d26c1acaa6e5d68e2bc01614fc1588e34e465fdbfae074ff259e9539f9d45dfc
SSDeep	49152:eXsYs3KUHlX3eBYe9zkQSL+RG4+6E47v9TY6XjSl8zq:C6KUHlXOP5W+RlJPi

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.14 KB
MD5	13519761f1c3a7aaed208029557e3bcc
SHA1	a9834dd46122cad8cf8f31159659333727346694
SHA256	3c6161e6df18be369b57f1d51f17191f45e29a847c6739fb8be9184f10e7bedf
SSDeep	768:FDCO9ieK7L5J1MSWsx0ivtneWQ4HaUQSKMqCIEO:ttiZ1MSR0GeW365SKJCIEO

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\3yDa4ifQGIzoWp6Xn6h.avi.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	31.23 KB
MD5	c94d7df86a83f4c6340653b70bf35636
SHA1	052c6cbba5d5dcba4126365005ce3d25d798ff55
SHA256	7fc4378c94541d5175854e0d3fc1fc98e1cb7c846d86b1fbc573023f75d3d95f
SSDeep	768:feuyQNp1TItiS6BQx3MZtZYjcNqnGvf2rFR9F91aZtF:fPv1TIFeTZccmGvurJ1EtF

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.30 KB
MD5	15372268a2bed76016b8e9f392b9eb68
SHA1	597d86b636ce1a8278f63bd20c878777c2e9b0b4
SHA256	faf50ea1c898836ed2993489abdbbf79ce71f933056206d345aec9e42f374e81
SSDeep	6:BS/Kw4QMuaUWErAYf5SzDsG/nRbgIKm7kBJ6dhzMKdVzRf/55QabnA:b/T/ZYUz6m7kyPxVt/55Q2A

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nb_NO\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	7973e214abead4e4bff6698ecd9cdd53
SHA1	a828036c05c96a0dba72e38f7bc4fb6cfb57d5f2
SHA256	b61bee10d1a417e9c857c024b3625fdf93372f6f35fab93b05c97f7341902601
SSDeep	12:7KGShNOkkD4+MOK0LwDAbfhPoI66ZGlOj0Ru8:7KrNO4R0LwDAbOIDGEjd8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.31 KB
MD5	335a687b7a267c6f453445613f52a30d
SHA1	68f469808c8964e4c5a05d53d9222168db964a76
SHA256	cb56fadecb327b24ad39d37cff5d9039de10dccee7bbfca98bbfc51a5954497b
SSDeep	24:wrImq0L0e1YajhkVueq5Zykyg/zfPdz/NmoFfYHgy20mMiGVOSIbz/:wrA0QaYajiVuenwzfPdYoIgyQY8SI/

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\sv\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.34 KB
MD5	f08c1f4448566a9201a9b3e44370d035
SHA1	baed7c99df5cafd15fd0ad59c6a919cb1d4cb927
SHA256	dd485813a74ac36cb948580c5db1a8de2d5be930fa24022360925c0ebc358ef5
SSDeep	6:gGLaDvnF5O4hEjPo0/0cVaL2gguR1iMrQkYPiLO2DP3B3aU9yENxdb0UDXHkQ:gdnF5Xhu0cVaL5VtYPsPx3akHNxRLHkQ

C:\Program Files (x86)\Java\jre7\lib\zi\America\Kentucky\Louisville.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.59 KB
MD5	0dbcece0097176ff43f0d6621afc5caf
SHA1	2118c995d3340352bd18855bb71f320bccfa90b9
SHA256	e212e6ba023318c5de195b4297171292a9db7704f64d9c1cafacbbe8efa88648
SSDeep	48:bLbDvJwn7cp3BbfQWurxivFtY5a9xNmtQ1h:HbzJwn7cpRbIWy8vFtYWxNmtQ1h

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.80 KB
MD5	bf647fd68982ea6f3a5c86588f9e2804
SHA1	bfd592c7f3ad3a98d87e95287d49883758f9a66e
SHA256	3e2a9ee40ea4b34387d4ca47845d4085623d8673729c52d81e3fda739a6d41e2
SSDeep	1536:7Jyk6L41giw3Yl7ZhFy7zThkUna0LqLeOUd0F6X6o9sDRNCwTgpzRFlFP:7JvvrbldhFyDhkUna0LGeOq6ztNorP

C:\Program Files (x86)\Mozilla Firefox\dictionaries\en-US.aff.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.33 KB
MD5	686c991ff9a34b663ce6433121d21daa
SHA1	6d2c00ab0b8f751044033e09a624fd501c460994
SHA256	f1c11cc637a7a49de8ee7e1d4ffd9ed1a3c6db2b4f49237db66c8834ead4232e
SSDeep	48:hIr51VqbXj6xtA9M0J0a6b7hdoZJd9xrYLT+A7rRf2Td9C:hGxqjj2Z0JAzEV9AyA7rRY9C

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\es\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.20 KB
MD5	0c443a5aafec425988e24e5bf9ab24de
SHA1	d7d2f231a32e7a2d5a32dc258a4d39c12680793d
SHA256	a6b2daa45cd55185de723e7c0a08f2424f4945bbc98f93961f86eafb179c666a
SSDeep	384:YIbhVw8bmsKdyR4JE/T96zDwcpl+32p1UUXif3:544mvdyOks3Jt7if3

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.14 KB
MD5	3b0da86934f607bfa9223d683df73b3a
SHA1	f450401ddb458b6f239d20a0afa26c49dd98e6a0
SHA256	e9fb051c51fea01e6ea9b64f6fabe39176f39a5002fc3c10cc464b5c251fd0e9
SSDeep	768:Hu1qUJQxJiPrthoCe6hIrBLX8aj4rgu+lWVV:HpUOythoC/hIVoaj4ilWD

C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazondotcom.xml.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.55 KB
MD5	4a188541d787829e76c8952852b2c840
SHA1	b48ddc40a8a3052cccee4c282e9aad59786ca88a
SHA256	8453a9b7e3c16c97deef907f12e269c691a48d3aea41e155b3881d7d5850b0eb
SSDeep	48:JQYT4gOssSZrNMDIk8amDRWjooPoemwzL6RO+/IVR:JQYT4gdrN0I0mDRToPQEKYR

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.14 KB
MD5	f9369d8823e8226334125e4191a83178
SHA1	07d16b8d1c3befed399c45f1224708f56d4e94b2
SHA256	011223d4265e4c895be8516d07186ee6c3a7516dd525f250fff74db712aec262
SSDeep	384:UKd1G6a1kipPY2bQbiJWKkEdfc6dLsVORZUh+R9HZKqnlNG8:LEzkIvGiJWKDzEORZM+znnfD

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pt_BR\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	a2a5751720ba3b3fce0711baa522c630
SHA1	eaed12d926477964c3c1bb42830f2b72433a836b
SHA256	e1ffd3548b7acc4247180581a5ea3f4e5ab79efd1cf04be59c3c96d8abcb2733
SSDeep	12:82LA58ERmfuNo6E4D02s4gMKHWXdc1Vb9n2bl:8aDEZNo6ES0XMlSDQ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\bn\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.83 KB
MD5	4d7b063d482415e8bbf1c0b9b17ec095
SHA1	25eb79c08858a8e8048aaed700e1998b59068b0b
SHA256	dbdfa987b258bd89a11541c0f79575589c9ce9210689a56f5f45771ca5036f26
SSDeep	384:CQtxRzO9UmTTR0mOmLrchesKfgfJVDxDSKBTaQwE8+DthVgRyfUpFI3qtgrZ8zyK:HxRq9LpO8jgftDijExI2U4vZ8J

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.30 KB
MD5	4c7b5951b0c73e52ce25f6ef7c70af64
SHA1	1d3c7949cf893f07e9ebccfee134f6a25d267ae6
SHA256	7d4be9ba5e096c5ada4bc0f324cd5c29abfa7da6baf188773a63e15cf0a96de8
SSDeep	6:iQJL6YRBmO00FHliGuKLdwi4lZiaeddORmvFjZYWZHkZdiq0Zk4ecn:vjHv7FYGb+idBddOgVjBq0Zxrn

C:\Program Files (x86)\Java\jre7\lib\zi\Indian\Antananarivo.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.22 KB
MD5	88a574056778a353594b74d2bada2bdf
SHA1	6d9d438e38640013bdc19536092a3328531a18c0
SHA256	0754291c22afc18627df0a03b6afb370b487ae39010cfcb48ba3cd4f76374e51
SSDeep	3:PkYFhiFz3xv+LFsNkmxn6FNAsFIn/pyn3ajKLFMH8czo1cyfY2VolyHnPpQo1YGH:PCFDEsNN6F8eKjgyaGyTVolyHnqlYfJ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.16 KB
MD5	48d355936a6f34b82baaff2ee8995200
SHA1	a92164acf9c5946d107643072171904f590898b5
SHA256	0c02ee5656ac716c5ab2f597cc57b68630d3dee7b62afbf1fa39ded390ea04f2
SSDeep	192:Frwky9rgfn4HxaoFd0DxGeP+4kpjT3u/rQnUPj5u5L9Z:NFUrgf4RvFexkV3u/Db5mLf

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	292.28 KB
MD5	361827322463da150b7cab63532eb86d
SHA1	88cfaf0f7a915caf88971f020e926c31a77501ae
SHA256	f6f0e06fe7f506000eda9e98b4454b4a8f85a8dbb13d398a6ffbe0d8965361e2
SSDeep	6144:h5uv02ELRAWnNJ01QJ6wtUBfxWL1qQ2YYAQWO9o5Dyka:Cv0deGJKvBfxIEoQTo5la

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.64 KB
MD5	8a5e2a32ca7c39e5fc2b165dff2a0f5d
SHA1	c40c0d05b2e041620d099609160b7eb881ad03f2
SHA256	39dccd6e5700594e965ed6be90579a9262e44fb6473bf933ce129afe116efa81
SSDeep	48:/sYAUigVO90nljorG1SHRx7velSnvmNojKkoxxKYTw2UeY+SsFN2NHRdbfwA:/sY6gC0nljIG14RklGuNoOBx7TpvrSsu

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.html.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.95 KB
MD5	8830810c59d0148fafcbaca0c893d49d
SHA1	d5cfa61c203a37d6ca5aabc5296506274be12530
SHA256	5b7e7db92cf5e194f1af0457e22b0b08aafe770d7e2124dc94efb3e22ffd9192
SSDeep	96:9huEUg7u9imJ/Iaq2fiulzo1S7nDXqOGHCwH5x+pAhLQOpTy4tIX40tZazUb6V0V:PUgetJJtfv97DXqzrH8AhkOJaX4wa4O6

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\ActionsPane3.xsd.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.27 KB
MD5	a726512ad36309818561713b1ee83efc
SHA1	a156aef09ce84db00665cf2ddcb916d77291c8e4
SHA256	88b3aba0a7175b4e6133e237a02909a0b0860b0a51dd0321f51e192a5af1b3a5
SSDeep	6:FlcsEW2VOh2mRtZhvhD5b9bsvK8h+Zss8FJfBscr:FiWEOh2md5b9bB8hGSHscr

C:\Program Files (x86)\Mozilla Firefox\defaults\pref\channel-prefs.js.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	5b9393a3c86733867d39058f71cf4755
SHA1	c3043abda56c6a22855f574c3d7b98acf855fe89
SHA256	5a0813d388a7fb3724325e675b740ffcc3e559228a30a02abcef19fa01e36fe0
SSDeep	12:gZSb/y6BqiTMGpEvCSrQeNLB6l2CDyLecfUUD9qgoeGhKA3e4:eSbvTqvCYQALBOILecci9qgoLhKA7

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\sk\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.39 KB
MD5	54199f711965910c972477a22f1c298d
SHA1	303e00008db4b0a029976716b98fb93f547eaefa
SHA256	ae371b722c2e4014a8007444b6c51540cd9e8dc55896db4bde86895bca59be0c
SSDeep	384:Byi+j6sPavzotjL6WV7DKKShZ4+5OpSu7tKBLtdiT:BcvBia7DWZ4+5Oh7YBfiT

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.02 KB
MD5	f3eb28ba422b031333979c7ba551bda5
SHA1	a03f968ed1ed1719266e041b476934ca3f0122e7
SHA256	e5cc693ed38761b2550561163cf574564b3e1b204bab92368325dd0422279335
SSDeep	768:BJqxkxFjCNksv7AkAwCewzTvhrHybFigvr5s070T7zey2nDs6jNxwL:jqixFkd7/RCHzT6DHdno

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\eu_ES\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	4e38f0483abe035ddb8a412ff3f3da27
SHA1	6bdcab8f8eeca35cd83aa532d14e8706ce4a3300
SHA256	8744b381356518e803c545d7b53c219677e1526b91302f420f22a214ac896891
SSDeep	12:6Zom3JLPzjnJ9uXLr9isLkDHo33zs5LimGGCbFUTG:6ZoYJb/Ir9pOaeLimhCxj

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\en_GB\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.34 KB
MD5	cb1d311929c5ee03ad935639ca715d5d
SHA1	c2521d435f05c37b46b31113bf75128b6834c757
SHA256	9d2344713fe20118cbacf61539378a987b50368e366d3f699e9bcc571225acfc
SSDeep	6:8c0Kiaq8SC5HSt6JEY16zEh2glzcqFKdJy/RHsJS4UTqupkrrU:8ctY+5HdJhEK2TvhL8

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroBroker.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	288.03 KB
MD5	2f4a53df1c22f0635b18d45911366e1a
SHA1	3b46a5de8ad7a3e70bdd2b58ee8b9cdce6242cc7
SHA256	6948023068233ac916bdab75fbae1da107bb42501ec949bbe3a0df2d4324f923
SSDeep	6144:/aa/g/+ZbDE7/Q/0D5Zksux4MCUEZi+Av/OaqMKpCb:/aa4mXu/vZRu9ys

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.09 MB
MD5	4b595285a103a3615fcb90a13104859f
SHA1	4a30bfb9fd0bcc509fc79859f5048005f66201e0
SHA256	e87d0b6280661464424275e470f30e59ce204fa4640ad1c48064a59579563c2d
SSDeep	24576:v9FjRlYavsvFL9haFJLe3bzgf/QodeSKxIaCi/6AzEINKC/J/TELPImfvdVu:v9FjRlYavy5CbLqb8fRdY+kwA5J/TaI9

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fr_FR\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	2593098ad695fc6df5d33d20e0ffb795
SHA1	b6ec08ec297b8c5e0bf61518137144d3837ea410
SHA256	ddb9ec8a5252cb742669b53bf3e8d25e302632fa4af6a1518a0eda90d5708e8b
SSDeep	12:sK+iKGmgmQmB4RaEDqNvW0Wg7478/w0R4WDdm9oz2Yddeh:rViDwaE+N5Wg79xPDdqoz2YCh

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_GB\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.34 KB
MD5	10108846999d0559022f60f68a93bd6f
SHA1	2371123bd3c0b5e7620f827bbcc7dae9a069c876
SHA256	471d2a19029fde11c2ac5bb5edb7d0ee83b10a694abf2107b0070587555b446e
SSDeep	6:+Nz4cPQDd1zwmOSmJf1iJi4n/78dJtB6Myz3te9kpIt0pE+1wPjbL:uWd6SAsn/IB6Zzs9kpI+m+1wPnL

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\th\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.98 KB
MD5	a73ca317111604899d171c3e758839ec
SHA1	5c4e505c3cafb1727d936c92e5c1d584866921d2
SHA256	4801db82e2154b3e6eb022c93e2bb4bdbdfe6fb9419977a8158c73a8daf7c206
SSDeep	384:A9C+POmMlAUssglRKX0W1/pQUiC/VC3rmiCN3x/3w3zBW0wPoR:A9CcOmMlTdglRSyu/41C3F3mBW0wP0

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ro_RO\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	bf080eee81a53ef1246342222bed2917
SHA1	ea05e27d36ca9658e312319e80e5c7182ce182a8
SHA256	fb74521b99bce2363488f711d86d24e31ecc49a61a5643610ce5ad1017078fd9
SSDeep	12:52ZZ4Ji2+O6mCS6g+GpCPB0sKZ5b/rjIrUyuaG7xWdD:524Ji2+O1p+o6BtQHIrUyuF8dD

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\lv\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.58 KB
MD5	4b5f639b9f63c32a3072c08dd7a4d0d5
SHA1	e03fb95b508b7643d8a1315bd47b2fa8885f80e9
SHA256	f1d21d723a65e51f9dd0d0dbbaa8c278f80bd3546cbcdc470810a16167b9b90b
SSDeep	384:5SfCCJJSQqreOJRirFcpOveXIE00zULBeehfmR/7sf0:CxJSx5ABcc2LwRhfmR/4c

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	8b29e40ac751a651f1791377500936db
SHA1	6f43b2f98b97d3a210b83c89b552dfd146de51aa
SHA256	968cfd01f4d5023914a13f179b9e03327242e692a8e5ff700af4c4e76bf4f521
SSDeep	6:suMhFawlx0Kahv4YTOds+HMOBzFgt4GxmX3IL7W0bfDxcgH3ymytRWOzcirsG8TS:suMhLl3VYTO7Muzat42LS0DVch4Yrj8u

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeFanHeitiStd-Bold.otf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.24 MB
MD5	c498a894fa0e7386b6d39b2905d1a9b7
SHA1	a6a5fe2650f8967b62848abf727643d5ff1750ea
SHA256	93da7c0134ee938b0d37e9bf03f7b8f47c8e7d6c54339d1041c408afe4df23b6
SSDeep	98304:yXRrRl4cJUgrdBSS24HPq4GO65XxQh2NkqXXZNKDRDEXw2Tu8O5QgMAUz9qYzMma:SRrR52gxBi4HCLnEh2Ndoiwyu8+MnzEB

C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.78 KB
MD5	8ee4cef123260bf89a22650110d643cb
SHA1	a9cb0c5f20280b256facc083e4bdda0ddfd06706
SHA256	abae9c6ad318d072e329f29997209b5cb19d1aeeacefb8a548f450e8e3b7ddd4
SSDeep	12:VdA1jW/K4yhZ2gZxVhJ1lJhpCW1bGPjSwqiHARVHFkDbuYyhTdWUzHr0zHmJRHAi:UuxkxL3rC8wjDgc+YyhTr0DQRgIzeCR

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\lv\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.33 KB
MD5	5af686e65f89b7dbb9b1d8818159d920
SHA1	e64ce943433f88fe7f5ff34d19e6b1a966cc7530
SHA256	5df1bb750eac59eae8a4be4d56825af1dc5fba0178d85cd562ae7a7f7e1c36f6
SSDeep	6:k0jNQcDA4MDRA1jVHSFsPFVuWUzrvxutRQ0NcrbZMcWT7xywCl:kFg3MDshjPFVZUzrZu42gyctwQ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\GoogleUpdateSetup.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.08 MB
MD5	aeac14baaa2a869b1c7ad40cecef1bbe
SHA1	e395e56f694706326abb32df3c01c819fc5802c4
SHA256	266beb075a1daa0fa4e049330212d7ab924f0ad3d654aca10983cd84fcc75f29
SSDeep	24576:nYOy/Hq2CjJFS1t/1nCXD8FTI9nZTDReeEYAnHq8:UjCj/inCXDIshZTDRMHP

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\default_apps\docs.crx.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.61 KB
MD5	231cf92d5dc6dde26533f97639a5d3b1
SHA1	d8d515822aaae755609f8c365d99d54556adeb60
SHA256	dbf91d7d1c47e2327f926c77cfb21e7507e8b019abdf9bc40648ee04351d21d2
SSDeep	96:FpbkC/QFxpXIL1sw43TRu/GGAA4MGnG5jQaLcfumAaygfzJUk:vQC/Qb9IL1sD3Q/GlA4E5kaLCD

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\Cache\C\E6\9DCB7d01.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	134.19 KB
MD5	6ae61b8d6bf5a4938d9a20d16bbbaa26
SHA1	3c47b5f828ec2e099bd6d37b7a4283834579c186
SHA256	3cab9e40f09f45e154d554b9841e0b3e125e7adbe830af358d765a2645de3020
SSDeep	3072:KDz69PAbXSUVH2pQJomduA4/eOE1Aegcmw:KD5mQ2p9W34/eLe/cmw

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\uk\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.44 KB
MD5	996ed78d952a5a79cf7f7f199c56f1d4
SHA1	611a7f70a74d7fc4d7404598ad3605ab5e471217
SHA256	39c5e428497e7efe0b64de53aecc2e136afd83cd0f5e9248b0b6a83e6dc72727
SSDeep	12:9jd47SXLWwWYofRZ/lYHibvYVcUlwJ6WBRZDwUZ8W88EEg:9ZNXywDg4avYVbszxwUZ9G

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Outlook\mapisvc.inf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.23 KB
MD5	3e7221fe5b5efcbb7b283c51c48e2ffc
SHA1	1fe3ad6760b73f31705ff5b12d81c189c0a317a5
SHA256	c0d8de19fad7e60185fa4cfcf35b603cd1e1ad9ea1ff496b88fad7d0e0aa1d3e
SSDeep	24:0hpx8ziiDmLZlZC6VL2U/ghx4bvo/5jM+e4nJV3JU7Gy1yjsu0ZI4GL:8iDmNlZ5rs4bS5Y+e4XWwQu0+

C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	222.12 KB
MD5	945a94e737214d39011accd8fba5c064
SHA1	dc5f7caefb41edd83d288eb121dadee3f9661228
SHA256	4f9d175f0b9541147b6cbd99587620d4fc5f6f09ca6a23473364968e438a8116
SSDeep	3072:8Ybb1/VeFbrhLXwgwl46u+FDdUg34RtRKI+vU2w2EZkGpRLmVCasYDjBrhDJo:53192Hl1fyKRPKICxFEm4IAbsr3o

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.73 KB
MD5	c9588d9cd5c2706955f64bc4eef1aac5
SHA1	3ba3f49b1f850e137efee9c6e0a4c4ede9362bd4
SHA256	bf3774d23f9e92cb06de3fccb7c780d834bf8aa22d2efc1d2931b8aa23104019
SSDeep	192:+HTxU3gDl8Q1k9HKVvkNjVvcqZ9dsIAZHJS6u:+zxk+X16iMlLoIAZHI6u

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	490ad53416691eaad22a654c951414e6
SHA1	7c4ed045125bcdc3577bfaf6a81ff6b8a56214ef
SHA256	090ed94b69ff844fed7f8fce96966bae2141b322dd3fabec4c1efb3ed64edd20
SSDeep	768:soAOEf6JPbSYecDrscLEGrb5vGm7XH0224FVQLyaQ1vY/uT:DEf6JPbzDQIXrbk802jgLFaT

C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	192.97 KB
MD5	00db5d7021db17d4671318a64f157c16
SHA1	ef8dd9bcf6f9a961dcd68fdec46e6b88fc05f6a2
SHA256	f79b8bc493d24bd0b133efc44c4bc5a31338bf08a6ec4f3bd12e4356824adeea
SSDeep	6144:6eIcbbqHKP2x6ZFSRlgSdx8unCq2r87xsGXVNghBQ:6rjHKPz7EeT4XFyO

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\nl\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	5da9242637134e19f71facad71c2b29a
SHA1	ecbe00b6ff217fd62c1c0a27c2fc0f87167de742
SHA256	5ca032e36c3d2d20abfc8898e3dd882dc90c758da6f1d07800328e3ab8a2509b
SSDeep	6:pJPAwue3im6BVBQWEAl9dkmtR0b0/v2tNF8n/ygASgODzGQ+oS5FuIA5Ppn9Je:39ujBkWE4kmt20/vONFPsvGQ+F5WZbe

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	38ee0fa73c27d26f7f9930b43bde4062
SHA1	7b4280f6666d2342d0a34982e126f9cdc151bb0c
SHA256	5743822a80dc438ca785669e0c14260daf5a906b2e3d385594296a6831885a05
SSDeep	6:uO1lw248+FfD2w74m3ceYxWTsfkM71Q+6/qYFKLxBn/o1LRiXK6d35i44YO:S7Dpsscf0s5S+XYKLBKcw

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.47 KB
MD5	49358a153fbdc5e7102b5ee1c20bb450
SHA1	40453eeebd7cce18fc74366b3bd5c5c4b9842331
SHA256	1d69bbbc30c743c697929acd3d45bc274b8678ac6569ab5e431521a997cd74d4
SSDeep	6:+NGA0TIKaQ7oBv6GrX7z4DnqYEhn7MdJjLSamkv/oD94HGRpZbNEJmDHO:+NV0sK/cBDE/zrmkv/HHgbNnu

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.05 KB
MD5	9cc5b47192b3260ab535fbe83f9cfb47
SHA1	0bfb7f13bf05332eb062ec624fd90f369dcf9787
SHA256	b9eeb69a808ed76cb3dfc3ca3475f54fee0719311cfbf06ad2263cca728d051d
SSDeep	192:tLWTT85xPqGbMW37K//nIo4two18hfvgd0guTEsN7hKwFQJG5EZs1LMhvg40H/dC:sTzjfEtwQ0vgmgGEsNw5hWqrEk

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ar\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.44 KB
MD5	dee0451a2a9c39926ffbb768369dfc58
SHA1	d32cdfbb3ab5e5a0420abff8bde72b137880e026
SHA256	88ac3f0692b6b2bc1e679c944f5fd2c24f2a226cded20b7f46357ae0798f4cb8
SSDeep	12:lSRsb6EK5i2Jg1iDutQ3b3Jcus4yjlyonI2Zvoi:Fb6Fh+MZaus46nZH

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\cs_CZ\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	40ca5381549d453666b85f6097221157
SHA1	dd5d82f14405f2f1b06bf6b116e8b31ab2677bd3
SHA256	c0f40434011ffd7fff851a672a49360f6341d6deee0f10b18efdf917c62d0300
SSDeep	12:Qhup9Dc6ol98pn/BtkhXAzTZG7THKp3c6nGKDP6W:QhM95ol9kDkqFAqp3/G6x

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\sv\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.78 KB
MD5	261d4fed11c049836ce66bba75e5a5f3
SHA1	ae5f76aad06c7a610721754a9bb3dd71f469e4c2
SHA256	33d7c8b3bc66c90dffbf8a222b14112fd4c41f1d3a16567c58dc1c171db4b858
SSDeep	384:xUk1H8VBaHEiwaANbAAjcB43BwQY8Ait4VC7mFkaFEB:xLH8+HkBHK8B4M7mF3C

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Office\ONetConfig\350db95df4cbd94b2a1c300510e12e11.sig.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.27 KB
MD5	351cf8ee9eaf403558dc5ab2975b30d8
SHA1	e3c12c21ad38c0a77062f7e080610b0989bb5a9c
SHA256	e32cd82813a62816f27de3989b3c9d25208267dc08a71b72cefc759e00dda080
SSDeep	3:lloc3Z94SIhYULQezdbf5ekD9FtnAkFPxbdD3GlwPENTzQFd3YC+LQRyQxhCMHr2:jE2kfRxbDoNTK3x+LQ4Qx/L+gVcRP

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ja_JP\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	6b14384010f2c22efa38ccf9b8c4a903
SHA1	43fbe3f0ec236f502cc0a76fdcbc9f566670b95b
SHA256	c37392853039afad5ff198cfbc4e71e8df0cd64048c707aa9a6bc5dcaf55209d
SSDeep	12:SZ+OR6EH2utn3eOF9eqa9A457knfAx26wz9glxG/:SkOfHvFeqa9A45Rxfrc

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AppConfigurationInternal.zip.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.23 KB
MD5	a759cb0e1112ff0bc55ba58df339e280
SHA1	9eb5dad371edb2ce395e0590f892f9c215874724
SHA256	2cadaa7e2aeb6adfc8d5fe16dede408503a0b196f48f32395162c81b583f725a
SSDeep	24:KLL2hSiB2OyV89nPs+syS5Qv/lUpXTBnwLQoXpyQvJIn6pyYa:KENmwlgQv/lmjBnwLQ4gQxGR1

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\0000E713\01_Music_auto_rated_at_5_stars.wpl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.16 KB
MD5	0706aaea64280462d57cf16933e94d49
SHA1	bd5cb4bf79d1b87e47c9a380ab4c8c39d6678a9e
SHA256	512d47a953ea4771cfcb984ed0555d0f29e487b93c1ded6a5f9568d35c913300
SSDeep	24:HjzbotvtbxAiTnq0Ndff5z7ThYIDfU4bv9idBi6FmkAxV+uw:Hjzqvt2iTq0NdX5baG8scs6F5AxE

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.48 KB
MD5	712021d48b068372d79f2baf90d104f1
SHA1	cb390601b9ef12afc407f3241b1a616f5791db4e
SHA256	0b8205ee6ca211441567c48d8379771e67d8466b27b5d378dae395afb2331ad7
SSDeep	384:qCaSAylhfCjq9PXAVLeeALU89Sq63zWzr5Z:Taicjq9YV6em1hrD

C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxC.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.92 KB
MD5	b6669535ebbbe295abbe204fa4e73086
SHA1	d60de5098e50ea0616a5dee5db7f2b6b7dcb6f41
SHA256	e4007a65f421a8be503f5b1f8d189e4660b5041779f001a0b3c14c0f2cce4d2b
SSDeep	24:/+ac7BcK3kX3e984oA4CYlMLMBRBJm4ZTB5hTQ1:W17Bxob3CYlZBJtLPQ1

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app.css.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.67 KB
MD5	1e6a450b561425042fb66ae8c8f3c1b7
SHA1	373c4c461bfa13759192c77389046aa7f3aaf969
SHA256	4adb8975d287b5b292ec70bb0dcdeacbd69d909aeb80a5c84553956ee5b25cd1
SSDeep	96:1kb44clMYPUW7Sr8tLRK574qDIOvnycosG1XW5z/7TuL2qaHixDgyTFhERWA0JX0:ycLlMQ+Qik0poBWR//HHHg6H0It7xPF

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ru\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.47 KB
MD5	d826d5665245b72c94e2a81324337d1a
SHA1	6f68ba8b5951b35359095250bd47425c97fa7cd3
SHA256	65ea74b1dd3df078b59cc346ccccd0a130a61f7cb47ca5d9d89c05d2b4e44b8c
SSDeep	12:RL0Fn+ZDvC2xsJ55g+DJgNyh9zorV7V+b/gD:PPxG55gU2izorV7V+b/gD

C:\Program Files (x86)\Java\jre7\bin\client\classes.jsa.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.00 MB
MD5	425fb54d410be7c6077887ce43a9b5ea
SHA1	5dedd84f92cd751a1af8a3d578adb84ef6f6a2de
SHA256	ecd6fc1370dee990ec4e10efce55802d1ea790aa8b56304f47d4319dbfae4e85
SSDeep	196608:PdwhbDaSYwSA4Mvf4dq5u8/xxUhMLUhFQxp/ZK7:P2buxCHCqh/xxUhMvnw7

C:\ProgramData\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	988.44 KB
MD5	15bd2644381fd2ea89a4fef666dba375
SHA1	1cd0b53beab3b627290f193b235e92b1bca81ca9
SHA256	c93f06c0eaf701de2b8fcfb6517eac926e01ba19e8ebd56436a83c03df91451e
SSDeep	24576:s2o+BaRJ24tiN5Cs9kygK64a4GNHCiwp39u:VhaPDtfs9pVzQZCXtu

C:\Program Files (x86)\Java\jre7\lib\deploy\jqs\jqs.conf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	40.00 KB
MD5	3258ed9e68abeb3bedc9b278272d8cb2
SHA1	d19357891355bcf16399e9da41604998bb00bb95
SHA256	ad48809a3bdc9bf82a0cf15905aabba6641abb25708a536eec7b85414c8a6bd7
SSDeep	768:TyX8k9HhR68CVq4Cfn+LsE8/1n0NqcW/esAKTXd1mEJ3bq3cmiU:TyX8gcqUsE8/1n5cW/Jh2MmiU

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	163.62 KB
MD5	3323f22bd3741638d6cf75650b785a5c
SHA1	eae71c0b7e9af42c3f06ce40c965c1f7bc9f96cb
SHA256	ca09e21099178a00d04dfd40e9d46a667f30b11a4102b361c285583acb6e7083
SSDeep	3072:9HwQbQfPhJOtjfDvbFhqv0JwIOUNPg7+ZEv/8cTrKleZYXNd7anXq9U5MPUScoYn:bbMJOtj7z1DNPg7X/8kKleod7aBkDctn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	336.14 KB
MD5	1acfc03b4602f533739e04020f7af793
SHA1	7645791408f62ab83f0d08cb93315f5b20bf9966
SHA256	cc67d9712a5c7745fe0587eba2dab6384531bfa6e3d7e66f2bf1e6dc24e884fa
SSDeep	6144:tPW25KQlFV5Y7WGzoSJs/pAVYVWYzHP9GcqeDvN+Oa:oQKQlFVd1Sm/MU9GcL7N+Oa

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar.txt.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.27 KB
MD5	c557fa2bcb1fc702a7b4258a17513ec4
SHA1	d20e9bebd5cbb92df1e4a71bb54b0058bd9135b1
SHA256	f4f13487199859946482ea6ebc716c25edf82ce9636d2a3886e43040fef422a9
SSDeep	384:Lc04g6yZaz+zikVigfxxRMdj+6Nzm3dRz+cDmq61ztokJOcmA7flmzIxFTL20vX1:Lcg6yZam5QpeH+cNTcxmcxF3vXq+

C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	802.56 KB
MD5	d6a1ee16993e28ad7048283f97c60475
SHA1	fe4c55de6d00896baefff0b6057276d8d15c085d
SHA256	f768cef0546a6601df5546fc6e39f812b8e4888014d5a1bea23ff591aff27d2c
SSDeep	12288:xHVfDoMQfAFWIx0JW7KAaRK09u2MgesMFnIGldD9uvPcaEXQwJ02nkwInMX93:xHdsM4A5mJXrdss8VfDQ39EgwJOwPXp

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_CN\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	6bf54148391a5fbbcbb9de1a66030087
SHA1	1a753889359f72400d906f0d164cfe0026396e05
SHA256	6515cbe13e520e525a1c73291b5fcfe79b00103481067dd38a88d32416f5edc9
SSDeep	12:+TEzzt+/UEO+wtSD53amgzXrNqGLQW7LTxLkrcTJ:VzC8zBxvI6BLThccTJ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_GB\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	09584b06fb63fef123f313c11f015479
SHA1	7e90299ab7f97cfaf19b0bba7642e7cc6da7f6f3
SHA256	93c9b50c48c063a90b85317387f28bf891d31e42e7ccee3643be3ef1cfed2e28
SSDeep	6:X7r5dI0TPJISFcOAZZh6n7eLJr46UH/HteQdNUF9z9FVv07V10pSH6QX+9VAm6:v3d+7NrEzdi9xC10G6V2m6

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\et\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.77 KB
MD5	4d64a2cab1cc15e15b217f2cebe0287e
SHA1	6dc2e8311b483bf8855595268157895d6df89884
SHA256	c4306c6757a1b2366492b4c9e3384f137e171d82c441359ece6324215de4727e
SSDeep	384:CgTMbTXP2VrJchknJk3xB9WbEp1UiGfZbQ4h5s8cx:CgT+TeKhkJk3xBwGUbtQ4h5Q

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Extensions\external_extensions.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.23 KB
MD5	e0919aac1137e2532e3ebcdd216dbb5d
SHA1	06ac471c97f964f57f9f78cc5db3ad4da399f74e
SHA256	fe02837f39e91a75e6bc971e50a79a4e5f8d7d5ffd3d5f429fff83ca5db4a3a5
SSDeep	6:mWHvg9d0ayKRx+4RI1jsvzxtpltAN58Xk4rh+:9vkksIJs7xtrti

C:\Program Files (x86)\Java\jre7\lib\zi\Atlantic\Azores.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.95 KB
MD5	2bc87b79a7a7af4d7fb5ade82d5f5c27
SHA1	4c301fe8eeabd271193143fce399257cb46983d5
SHA256	1a280d14391a5fb2906758026595d76c9c4aae06c8753ba6632e06c4707d4dee
SSDeep	48:HpAxVcrSygV2SAsINb6uzV0fJBbembO1COsvGw:mVcrCVRu7xmYUOsew

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\lt\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.48 KB
MD5	b82b613e43ca5786f21feb0bc5d3117e
SHA1	3cbbe25cfc105c27ddf00e2fa0c2f6e87eb8dcae
SHA256	566a8b51ef5cedf2512468f7a9f32e88fd57cccd9960c929f07be71b45737c9d
SSDeep	384:JKcMyGF5CsyH2Bhfc7LVxTMmdzRb1ZGj3tx0QnK:JKcf9seVfMCzV1ZWQ3

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	7c807d52adfd92c0b0c94363622e3eee
SHA1	a18589b9e14fdceb2c6672838da41d40c5ce0fff
SHA256	80ea65cf8a8f44e048be6e719788d751b99afd5cfc03726cf721e8a2643b9dca
SSDeep	6:LMiV0vhvMP/M5toVWOkq4ikXGmdPI5smAk74s1EkSPlgik4wuX:XIhUP/JQLskWmC5Ik7qsik4N

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\am\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	8202e80cdd60dce33162215edee26897
SHA1	fe5552cbc51a58349ae1d5c23442a19d348af975
SHA256	d41107883076487bff843e4d63b0961111b05c5a1fbc8587faa694ccafc84885
SSDeep	12:HW2SgI52lImPF6ufjNwJ83g2vKlTEDX77yTJ:HWRyIEtfjxK4DqJ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	7a4daf6c272931a2a1bd0435d839f6f4
SHA1	cb2392aa1c02e1d91fc9bbc1e726f948c17ee211
SHA256	7cd01a6e54d84e9688ede2464ba4a205f74e40ed08f167611c72601d282c9d3c
SSDeep	6:Rj+6nHBdnM7G5ucq0W3lACJ0i0eWbkoQKd1fCOIeZaM3pzM7p6lZYPGKSdLT:BnrC1c+KC6i0FYI1aO3aSpQ7p1SdLT

C:\Program Files (x86)\Uninstall Information\p champion.exe.locked

Created File

Binary

Not Queried

»

Mime Type	application/x-dosexec
File Size	73.50 KB
MD5	4c57982ec8950870993fbf3f0cfe58a5
SHA1	6986220df6d5dd4c4ad7a8c1bf40a07d8734c67d
SHA256	b90347f4531e381fe58219aba6fdca16b2c6aea7f28e0f28f2dd54539c7c9292
SSDeep	1536:KVGkuHxJW9e8AE2ksW2hGajxd5Qm7foQJVsWN5mcd4mY2UiOZE9I:LW9e9ESPYcx8mUwV5H4mY2UFZEK
ImpHash	7beef14680444ffb4c53491e56bb9187

PE Information

»

Image Base	0x400000
Entry Point	0x401486
Size Of Code	0xa600
Size Of Initialized Data	0x8600
File Type	executable
Subsystem	windows_gui
Machine Type	i386
Compile Timestamp	2019-01-08 15:17:04+00:00

Version Information (8)

»

LegalCopyright	Copyright (c) 2015 Wall-Walker
InternalName	p champion.exe
FileVersion	17.34.8.16
CompanyName	Wall-Walker
ProductName	Brand Clicks-And-Mortar Architectures
ProductVersion	22.4.7.24
FileDescription	P Champion
OriginalFilename	p champion.exe

Sections (6)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0xa5c7	0xa600	0x400	cnt_code, mem_execute, mem_read	6.64
.rdata	0x40c000	0x584e	0x5a00	0xaa00	cnt_initialized_data, mem_read	4.83
.data	0x412000	0x12b4	0xa00	0x10400	cnt_initialized_data, mem_read, mem_write	1.75
.gfids	0x414000	0xac	0x200	0x10e00	cnt_initialized_data, mem_read	1.4
.rsrc	0x415000	0x770	0x800	0x11000	cnt_initialized_data, mem_read	3.08
.reloc	0x416000	0xdc8	0xe00	0x11800	cnt_initialized_data, mem_discardable, mem_read	6.49

Imports (3)

»

USER32.dll (13)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetMessageW	0x0	0x40c108	0x1128c	0xfc8c	0x173
DefWindowProcW	0x0	0x40c10c	0x11290	0xfc90	0xa1
CreateWindowExW	0x0	0x40c110	0x11294	0xfc94	0x71
RegisterClassExW	0x0	0x40c114	0x11298	0xfc98	0x289
ShowWindow	0x0	0x40c118	0x1129c	0xfc9c	0x320
DispatchMessageW	0x0	0x40c11c	0x112a0	0xfca0	0xb5
TranslateMessage	0x0	0x40c120	0x112a4	0xfca4	0x33f
LoadIconW	0x0	0x40c124	0x112a8	0xfca8	0x223
LoadCursorW	0x0	0x40c128	0x112ac	0xfcac	0x221
PostQuitMessage	0x0	0x40c12c	0x112b0	0xfcb0	0x271
UpdateWindow	0x0	0x40c130	0x112b4	0xfcb4	0x357
BeginPaint	0x0	0x40c134	0x112b8	0xfcb8	0xe
EndPaint	0x0	0x40c138	0x112bc	0xfcbc	0xe9

GDI32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TextOutW	0x0	0x40c000	0x11184	0xfb84	0x317

KERNEL32.dll (63)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateFileW	0x0	0x40c008	0x1118c	0xfb8c	0xc2
DecodePointer	0x0	0x40c00c	0x11190	0xfb90	0xfe
WriteConsoleW	0x0	0x40c010	0x11194	0xfb94	0x5e0
SetFilePointerEx	0x0	0x40c014	0x11198	0xfb98	0x4fd
RaiseException	0x0	0x40c018	0x1119c	0xfb9c	0x440
GetConsoleCP	0x0	0x40c01c	0x111a0	0xfba0	0x1dc
FlushFileBuffers	0x0	0x40c020	0x111a4	0xfba4	0x192
HeapReAlloc	0x0	0x40c024	0x111a8	0xfba8	0x336
HeapSize	0x0	0x40c028	0x111ac	0xfbac	0x338
GetProcessHeap	0x0	0x40c02c	0x111b0	0xfbb0	0x2a2
GetConsoleMode	0x0	0x40c030	0x111b4	0xfbb4	0x1ee
WideCharToMultiByte	0x0	0x40c034	0x111b8	0xfbb8	0x5cd
UnhandledExceptionFilter	0x0	0x40c038	0x111bc	0xfbbc	0x582
SetUnhandledExceptionFilter	0x0	0x40c03c	0x111c0	0xfbc0	0x543
GetCurrentProcess	0x0	0x40c040	0x111c4	0xfbc4	0x209
TerminateProcess	0x0	0x40c044	0x111c8	0xfbc8	0x561
IsProcessorFeaturePresent	0x0	0x40c048	0x111cc	0xfbcc	0x36d
QueryPerformanceCounter	0x0	0x40c04c	0x111d0	0xfbd0	0x42d
GetCurrentProcessId	0x0	0x40c050	0x111d4	0xfbd4	0x20a
GetCurrentThreadId	0x0	0x40c054	0x111d8	0xfbd8	0x20e
GetSystemTimeAsFileTime	0x0	0x40c058	0x111dc	0xfbdc	0x2d6
InitializeSListHead	0x0	0x40c05c	0x111e0	0xfbe0	0x34b
IsDebuggerPresent	0x0	0x40c060	0x111e4	0xfbe4	0x367
GetStartupInfoW	0x0	0x40c064	0x111e8	0xfbe8	0x2be
GetModuleHandleW	0x0	0x40c068	0x111ec	0xfbec	0x267
RtlUnwind	0x0	0x40c06c	0x111f0	0xfbf0	0x4ad
GetLastError	0x0	0x40c070	0x111f4	0xfbf4	0x250
SetLastError	0x0	0x40c074	0x111f8	0xfbf8	0x50b
EnterCriticalSection	0x0	0x40c078	0x111fc	0xfbfc	0x125
LeaveCriticalSection	0x0	0x40c07c	0x11200	0xfc00	0x3a2
DeleteCriticalSection	0x0	0x40c080	0x11204	0xfc04	0x105
InitializeCriticalSectionAndSpinCount	0x0	0x40c084	0x11208	0xfc08	0x348
TlsAlloc	0x0	0x40c088	0x1120c	0xfc0c	0x573
TlsGetValue	0x0	0x40c08c	0x11210	0xfc10	0x575
TlsSetValue	0x0	0x40c090	0x11214	0xfc14	0x576
TlsFree	0x0	0x40c094	0x11218	0xfc18	0x574
FreeLibrary	0x0	0x40c098	0x1121c	0xfc1c	0x19e
GetProcAddress	0x0	0x40c09c	0x11220	0xfc20	0x29d
LoadLibraryExW	0x0	0x40c0a0	0x11224	0xfc24	0x3a7
GetStdHandle	0x0	0x40c0a4	0x11228	0xfc28	0x2c0
WriteFile	0x0	0x40c0a8	0x1122c	0xfc2c	0x5e1
GetModuleFileNameA	0x0	0x40c0ac	0x11230	0xfc30	0x262
MultiByteToWideChar	0x0	0x40c0b0	0x11234	0xfc34	0x3d1
ExitProcess	0x0	0x40c0b4	0x11238	0xfc38	0x151
GetModuleHandleExW	0x0	0x40c0b8	0x1123c	0xfc3c	0x266
GetACP	0x0	0x40c0bc	0x11240	0xfc40	0x1a4
HeapFree	0x0	0x40c0c0	0x11244	0xfc44	0x333
HeapAlloc	0x0	0x40c0c4	0x11248	0xfc48	0x32f
CloseHandle	0x0	0x40c0c8	0x1124c	0xfc4c	0x7f
FindClose	0x0	0x40c0cc	0x11250	0xfc50	0x168
FindFirstFileExA	0x0	0x40c0d0	0x11254	0xfc54	0x16d
FindNextFileA	0x0	0x40c0d4	0x11258	0xfc58	0x17d
IsValidCodePage	0x0	0x40c0d8	0x1125c	0xfc5c	0x372
GetOEMCP	0x0	0x40c0dc	0x11260	0xfc60	0x286
GetCPInfo	0x0	0x40c0e0	0x11264	0xfc64	0x1b3
GetCommandLineA	0x0	0x40c0e4	0x11268	0xfc68	0x1c8
GetCommandLineW	0x0	0x40c0e8	0x1126c	0xfc6c	0x1c9
GetEnvironmentStringsW	0x0	0x40c0ec	0x11270	0xfc70	0x227
FreeEnvironmentStringsW	0x0	0x40c0f0	0x11274	0xfc74	0x19d
LCMapStringW	0x0	0x40c0f4	0x11278	0xfc78	0x396
SetStdHandle	0x0	0x40c0f8	0x1127c	0xfc7c	0x522
GetFileType	0x0	0x40c0fc	0x11280	0xfc80	0x23e
GetStringTypeW	0x0	0x40c100	0x11284	0xfc84	0x2c5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\LocalLow\Sun\Java\AU\au.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	568.23 KB
MD5	8215e6db606017200e6655be8d28706c
SHA1	f743f3990251949ee045108e702e508fa5d614c3
SHA256	adae8aee0b4d46a7fa0527480723c2fc2ba465a5bdb2d65bc530ad643b53cbba
SSDeep	12288:lcrd9pp4jTmwxNNHi0BYsTjosN0EmkSGLX+A8ihJm3iddd:+zpATm2NNksPosCDkYA8v32n

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\Cache\F\23\7E0FEd01.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	62.27 KB
MD5	6118c34d48cf5e9932c7677e432e5283
SHA1	9e760da56e2d32286efe9f4905f4eba623af93b0
SHA256	06263d236945bf699938096751cbb537ed1ec1efc5389fc6dd02853852cc869b
SSDeep	1536:8Jvo8LpyORPJEZkPXSW6vTTgfAdiaQvNjuUP2d:81EZk6W6vfgIdia8N/+d

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.34 KB
MD5	0ddb3354f9883743d898b3f2d345da32
SHA1	cd7ea08fade443969643811d9b1f6d34c157f055
SHA256	520eebd241cd8fe3ceffe09ac925e76dfd4916067d0dfa9573716adb9a83e839
SSDeep	6:EDj6gueMicHvlh0Uds83UgTOoNmlDFH1dUemoi9fupKXfn+JHLCux4n:rgL0vn0us83zTOCyH16eNBd4

C:\Program Files (x86)\Mozilla Firefox\webapprt\omni.ja.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.62 KB
MD5	f1a2bfce57a7f3dfbe13ececda232623
SHA1	7e0e4f3319a65c33344bd890c718a66c7e96af5f
SHA256	d08aa8b2728183f5bd07baeeef225801e0d722819f955eaf20f1752cea325d28
SSDeep	768:gz+pXKf47NvxDz1tdvTy8mmJNzyuzGJ+wiGpbfU:U+sE1zPdvTveuaJ+wi+bfU

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.14 KB
MD5	fd6a41e47a0c26edd8e77a583883605a
SHA1	2322f928bf234813c782415dfecae0e04328f1d8
SHA256	2bb99b333cec31b557522faa4dd636b1a2bb830d557496ef73e6e87eadfeaf2a
SSDeep	192:5Lgy7T5vlmtL8Bp+JTBhUb8KWlEEfZhU+iYTHRPuxn9Aa:VdlNbBpSTnE8KiEsUDYTHwxn9x

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Outlook\RoamCache\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	670f7319bcae4aa7cc775e370b79e836
SHA1	5e5bf940481022ea6656692e234ee30d63a58e0e
SHA256	b2b216f307160019b183c574d243cad7220cad0c864c1552d5949143e3431441
SSDeep	12:NAb+fCeT9IaHyfacVLp082xiE7r7hJUNtm2lrg53n:NAaKeTmYNco9drjcm2lryn

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	331.05 KB
MD5	36a817ee2c36cbbfaf2ebf03496a2a40
SHA1	24db817df3168afde757d91ee47a025f5eae439c
SHA256	4e9359651ea73a2e111a7e7947972029f3840b0a9b6943547e77e7a7fdb14245
SSDeep	6144:5f65o2AZaiEIJjFnrpIzFGQFuEg1uv7mCIK5qUmPzvvQQU82xUl49TLGh:5co2xQPnFIZCuv73Z5pmPbQbxOyCh

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.98 KB
MD5	1680dcc02e0f29c9e76310e3efc6b826
SHA1	778fcc73a304f592be40e92ce5386eb4c0dda531
SHA256	3e0c1b7c6c9b4be51e60a97fb17736aa1e7e8322db0253342653981fb3a396d1
SSDeep	384:GZ+uIDjjmLoMLk9l/3FzzrL4/Kux4P7Smkt+mZ4TDGb6r/E1:GwuIDjjVMLkv/VzzvC4TlCXZqW6g1

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\css\craw_window.css.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.84 KB
MD5	99f8df2435ee3a58cf5aa6f13cee1f66
SHA1	e61baab43c41b6ded0271c6f9c7996399e66e1ef
SHA256	d5a073e52ff258b155d06d84386e7dd8cf86503470cbcf1ac68ab274b325a158
SSDeep	48:3s6cd0/iZdkgK0Qwn+YiyuFO17qdMc2HD1kBQBbEiBFwpnke:ncvq0ln+YiyuFu7SMfj1kBQBbDFKke

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Cookies.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.14 KB
MD5	775ec85d8b65af095cd8d06581763fef
SHA1	ede7be5270c103696a7841ce8b8bffcc6b903140
SHA256	8cdba3f27ea50413fb19a76b85eabfd2a41927aadcbf7e949f8e65a2b8ef0204
SSDeep	96:ryz3xNv3RYOLCk4iTnQIX0XM8Yd97WUVif1n5EYMNT6glYXkS3cnJUpY7qUvoyRG:cRJOjanQQmMDvWw0zuUBXkS3cJaa+E8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\html\craw_window.html.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.92 KB
MD5	e6c0c574e9dc8c3206c176d8e225ce60
SHA1	4490bc7f68c2548cb1ff3e16ce1eff185640fdf3
SHA256	22b39b491fea662ee6d30602bea2160d20ee477dfd386be88e3fe9ebebb7996f
SSDeep	24:x0+XrSX25yexGbvrfYcXlyJOUuB50O6aq9dis+Ty1:x3IkVxwTdlg9uDwHusyk

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\ACECache11.lst.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.28 KB
MD5	f46933292454b81c207dd2a6117c803d
SHA1	0ec4516b6c587f40648fe13ea5c423715d8b820e
SHA256	8270a033b0a3c414d43ad5db5bd7edb58e089e00025b25b215ed7baecfe329a9
SSDeep	24:w82rjit4Pru4SaUBHTynwcC1+5hPQGBiFfMghA4Q7p9Y1ocs0q6McEbfn:w5rjit+ZQHasytHiSEQL4otvn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\OfflineCache\index.sqlite.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	256.14 KB
MD5	f5c10a010d9db12e2f1bad62823a9fee
SHA1	3d1bf1c941fe47a00c10c994ba07e341a31b1889
SHA256	88dbb6ab78dbca6b0f8cba98757a4a5e39fbeed7a3c369e715d85281130da067
SSDeep	6144:cndCnEJUhwYf98BB4SqkGTUPrhnUqD0lem:zoUhTfCBnhnNI

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\it\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	e5f99e441f9a11f02b48832a1a86110b
SHA1	26af43f59a5f345b30b298159421ac80856471ba
SHA256	25715a63cb468c6ace2e3949d86d6c1a7643317c458ddf95641cce9db561a516
SSDeep	12:N6ImsQX4z3nk5tL/bO2KKjCt1fZ1zi9ryv0GhM:NjbZ3noLa27jC7Z89QS

C:\ProgramData\Package Cache\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\packages\vcRuntimeMinimum_amd64\cab1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.99 MB
MD5	3234d755a0d07c06a829e923c8934be1
SHA1	85b45d14f1c4382654cf6f8a6815e10dfb753f11
SHA256	930e5f581759b61a35ab5c05a198a3931d80fcbfef28d0a4cd2414eb06df56c0
SSDeep	24576:YedTzf3PQ5A7jCQuI2pl+s+8lSNEXk5D4rwY8e/ycMAI8qqJ8x5hd:Z3dwqiIsp14+8r

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\_locales\pt_PT\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.78 KB
MD5	0fb87c8d269a448b1481e8d8ac24f3b5
SHA1	377d9d570baeea6d6d1d7008323d62fe025e57c5
SHA256	37759587c63c1549f46016ad1d1c9e3ececc4dbffabf2bb7435b3fbc4ff73111
SSDeep	24:IYhPsxIseK4f7MO7XmjFd416tyTp6YNd3xZOR1OPUn:IYhUtP877dQ4Nd3PSyU

C:\Program Files (x86)\Java\jre7\lib\accessibility.properties.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.28 KB
MD5	d521d17793aa3e969108afb1416fe442
SHA1	146df07b29957d4edc16e5a2b8e1a58be065af2f
SHA256	fd68fa0dc42d8d06bb6a76e61181531f01f6f1482b2b633921d41b90bf95e540
SSDeep	6:U8WaHZpJjyJH9DD3CCWsfr17s5cr+vz1qRirqJXlrepm:/vHnJju9D3CCFxsar+v5jreBwm

C:\Program Files (x86)\Java\jre7\lib\zi\Australia\Adelaide.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.33 KB
MD5	95a8b2e99c7f7d787148563bca67e077
SHA1	9a9997930f06aa678876e7ca0b2dd1914bb873bb
SHA256	3736f85130644b93043c13b184235aa4acc23873dc6cf99d1931b95254e7a309
SSDeep	24:sIRL3UGvdRHNJPCyevqOnKc6R82E7gCOAysP+Ob5E33Sg2mM/GQpKu3ebKqwhqq8:sIrRHNFg7pQEkCCsrbE3ZjMOFBGqiqq8

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	87ae3e3421946bb786ef8935ffb002c8
SHA1	9d972bc496ddd6b312070f024b5e2c7d892f2805
SHA256	cb3f499d200b52c11f2fdc2b1251197c13c623af3d73230f0c93d07d99a5c450
SSDeep	6:9pcdzLvPr7Pl7Duskpib0UjZwteC7Ap/2SELzkJ3jadRHGgbF3y5Y4:9SdDPr7Pl7HkpibdnCEpuSEHkJ3fgbF+

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\PrivacIE\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	7cf0acf3145fa3179d7ff49caea5a519
SHA1	e707183dfbb5366ab282bad290b833e291979297
SHA256	b71de26dda268f28ac67bd26f854cda2b13b33981658cd0dc64a5c1c85b3495c
SSDeep	768:WJXVRkQlogvvyduP3g56CIwALXFrsey9GU7YPrrSltJscsZLzxIM:IoQlXyduP3g5KFrseybYPXSlIZLzeM

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows Sidebar\Settings.ini.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.22 KB
MD5	dfe702a9c94427e3d522890c29b1a44a
SHA1	2f1b007c1ccc706cc35f1bd5917775ed7ecbe4ac
SHA256	e17e5e6376d080757a8c7e5f8d0d224b158eb8da3d9f9338053d019ebe423ca6
SSDeep	6:7cY1Q7ovbxx1dJsvHe3NR/uaQxm1/fY+lUJck/H:YYrjRnNxuakmSascIH

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\manifests\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.84 KB
MD5	d39b8f3d179b037815d72b8bef7a4775
SHA1	472639e02127134fb0f767606421e346e4638128
SHA256	b3b15ad75999fe15cea771a0327c4bc32fd082e8e07c1738dff660b50c0ddd48
SSDeep	384:h3Vc6+R1YWPSe5ZVhCUlkZe8irGt+EYGFLWnZyto4pwOBFc1:h366Q1rPSSZDzlF8iybQZypwWc1

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nl_NL\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	6eb030664cfbadf2d4ac616653f47890
SHA1	0d792871991a328f5284d00d5826df5fb4924c87
SHA256	920c640611eb1d335e80776df049fe4f9527abab033dff54dd810e6ca3e5a3bf
SSDeep	12:AfhU8AnknnIHJjjk3pGKE1QD9cf6wNcArPWA4roVylIs6YErGV:LrnengJnk3sKE1Ycf6wNn19YE6V

C:\Program Files (x86)\Java\jre7\lib\zi\Antarctica\Casey.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.23 KB
MD5	a954936079bd5b4628c9ba368e92c6d3
SHA1	77459573a23aea9e888f18ba817919c6de0f9e1d
SHA256	f8f003fd7151cad79b8737af39b71926257290f0801a651a58d0ec20228e5775
SSDeep	6:X28kgOGVAr+14ChAaD+KUCgNDP9oGX8OQqH5Ffyn:X4grv14Chn7UCg5P9z8+jfy

C:\Program Files (x86)\Java\jre7\lib\zi\Pacific\Apia.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.69 KB
MD5	2ea189023e622bc30def06564fbfa5cb
SHA1	98589f3f64ed7af30370fb56c0548da05429ccc6
SHA256	2db5f14d922beff9d77d3b27b6efe8a3a7217a665557038b1aa115ee709c3398
SSDeep	12:nAWOZaYiAC0uGN5r8FHru1wbdNTOFN/+omcK7v7Mj9VFzF7e4mO1h6cni:nDOkYiCN5rWrukPTM/OcSjCFzth14Gi

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\si\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.47 KB
MD5	fc222d8fd2a2a1c50ba3c5cce8aef06c
SHA1	6df35f231607ac20c5f9013e0962cb2106890198
SHA256	b55d2f886f4fa765b9d724e8643bd2fd061c2071a2db8a67b8b3b600d9cc3dc0
SSDeep	12:R1NMYDZxgiMPoGsXNoHvZTj3Cahdx8il4:RrMYDZktsX64oiQ4

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\uk_UA\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	ed8b181838305468cf6788fe8b12fbed
SHA1	572b90046484b942a79e4d868fda487b69bde7d9
SHA256	ed2f48b3c386be63757d5740e1d02b63f0d4c6ba8f518a95ad2735179dcb7dfb
SSDeep	12:YBKFfywSr42lIm9nv3JJLGimNfNqi3HzB4i7vxtn:YBAqwvVAv33LGisfND3Jn

C:\ProgramData\Microsoft\MF\Active.GRL.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.75 KB
MD5	4b9d160626208d0e080f7e12de57b6aa
SHA1	1ea61f5ad8397821bdd2664d35d6f5f2ec6aa8b4
SHA256	00c698020db7b77fa9d098925392abf60b9ac3de745957f98dc5586d24e27c00
SSDeep	384:Iv8dkIN1bZfRTwtuSZEmj4MMMZYxcElnwBQ:IIljHMwSZElMZqjSBQ

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hr_HR\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	bbae4b143b1f85bd7071337cb033a7c5
SHA1	72cceed85b32577a0b022c437f450f8276c6e7ed
SHA256	17434f410be164471b7bab4f7a36ef636f509f7cf3c59412fa35fe0fcf5604fa
SSDeep	12:vTvnQkl+oXo6orwSweyj8inWYQVtRyTHYNPGfoNTu6:DQRAo6ywSwVj/WYwRsYNM6

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Suggested Sites~.feed-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	ea1c2fb09d4c6b85d535605d31e11ee7
SHA1	608268d1f290bd93eaf84721e8edbb8d02dd8ea6
SHA256	b18855f24405f92218fcf0a20dd8f135c2389e340e6863fcd4333ea06b5ebe7e
SSDeep	768:ZpD6BqVHvQE9t14EIQoiPOQstwG3OaZCfQ4gZkOhIscfMdsD:ZpDFHv/9QjubfQPhIsRdsD

C:\Users\Default\Contacts\Administrator.contact.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	66.92 KB
MD5	af284d99dc8cb1c7dd8195409036e0ab
SHA1	793f055ecb190a1540f33d5cf77f6cf7fd65afd8
SHA256	6fea82b6ceced827452159ad4dec4f974fa46d5a9533192beb8b1a0902af0ef5
SSDeep	1536:ltOfzTEK+wsCAredkIKuMgJ74x1uKIcEMqw+iefUHtSsaMf015EvJbGc:ltqI5wsLMkIKJeM8D7Mqw+i8hsP0bEhL

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	640.14 KB
MD5	50dbc16b1b09f5708e60232efef264a5
SHA1	62ca45748e6b700375a3beb72fb279c9f24c4e6c
SHA256	a230a5ef546f7ca94bd8c2803a425936b7d2ef419416491f0cb0bc64a2d4a67d
SSDeep	12288:G8xuPWIddCykDdPraIi/qQBjdGIXGDDoZwUdBhV3Q6EGzTRLY84mmoR5m:8WIGysQqUjpCDolU6lWI0

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\zh_TW\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.50 KB
MD5	6786c875505fdb97fe64f3f754a59520
SHA1	e780b82cdd4f6750528fc0464eee44283b2a9c25
SHA256	7c22ab051a8a5ffb053fa9277df37fd538d6d74a8133026a3253fc16d97c9a38
SSDeep	384:coACUqDpXyBrkjFzEauYEZiGjaz942E18i:CC5CBo/utZiGja9E18i

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	128.14 KB
MD5	cd8f5fc56a2d918e3bfd6313e558a396
SHA1	9d7062f8360c9f847b2c32761dd306dae89051aa
SHA256	1b11c70feb48342cbe33b8ee4fac93fa12d6238f80918dfc31ead7d82e9748ce
SSDeep	3072:DTMYptxPSaXdHM58CavjKtTROkgOeuG/3ca2Swy:DIQtkaCarKtVkOzG/3YS9

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.73 KB
MD5	75d31d724a461c35fc44a19c6bc349da
SHA1	adfb1ee5d880ff804b7e3b80128dc8c4ced32d32
SHA256	fcfeaad8f021fe6285c64e177f03a056ff53d37b87c8edf84c3147453e4f28e3
SSDeep	192:gV3gV6z5Xl6NyvB76ucdFcAIDV/ktOiLtzlXngpGhwy1oQhu6pVv3BsN:gV3gkzSyxAAAEVkAQXnqGhr1phu6ptWN

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	288.03 KB
MD5	0871d5db1c6d8380e2263638d246b893
SHA1	a83c2484550ee0c4311f2dbd0e1cc232483f1a6e
SHA256	2cfbaa8f41012a96cf595ae8d82383783f904f44563d3ddbfbf236404458d853
SSDeep	6144:kdwRFrFelsSSzUVFaQx3FAWiV6sXr0sVXlWiW24IntbQH11c4/+:kdwRasUVp1M6sXDlWioQujTW

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\128.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.00 KB
MD5	5c3525c70cfb4f852af2d53a570ffdca
SHA1	58231fed827961f9aa0ff62f389b60f0256315d0
SHA256	01e10fbce5bff437f33e1bb5a1ebf1620559bae9bf416347dc8b7584fa934bee
SSDeep	96:NBwH2hPdPXcdmpkD8PRitPjx589uZ8CI9ORB88ouk69VUmEtHCbkfV:NiH4PJXcdmW8pit1589uM9KBkmUmEtb

C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	243.02 KB
MD5	416e0f6c464a6653af543bd0663b77ce
SHA1	a8f7ada1e8c0f1134798e89084601cc2ffb38641
SHA256	983258590be15b0570e66d8768b41f8ca5e3e6cd20381f1fe73ca80cde9bae81
SSDeep	6144:4HgRaohA2fUNe9aw6qR0mswOnCirBRBPD4tYyv:4y6zmascwOnCYAY8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Themes\Custom.theme.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.89 KB
MD5	fc699db6404357d97e81d46afb590136
SHA1	95f4bf7b1abebbf2579adb6b0a0bda63da859627
SHA256	30383eabe4163e6e819936ea5b955cd1232bbe655eb219a2508e04ca7274a90f
SSDeep	24:8QwokjHrCr5+WT3uLJXnoMvcHLUX/mcuYccxUjO5C0SZsy8e+Y3Xk24lq47qnz1Q:8gkyeLJ3oMvQMnRoHsymqnAHRGanT

C:\Program Files (x86)\Mozilla Firefox\browser\blocklist.xml.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	81.67 KB
MD5	bff8aa663e83c96e588b1ab08caeead0
SHA1	dc766841f3ed2279b101ed3bc22b3311d4f0a9a8
SHA256	38afaf57761afd73a4a3802bc9754fe9738878c9990897f8f4df2d8f47551348
SSDeep	1536:m8r38TYSGhytRGzze6Yp6pRuvmeilnLTORDXxWosx0Y8Iy9yhnGPbXjb1wZYb:VYYSjGzz/RuLcvOpXbFY8Iocan1Xb

C:\Program Files (x86)\Windows Portable Devices\paraguay.exe.locked

Created File

Binary

Not Queried

»

Mime Type	application/x-dosexec
File Size	73.50 KB
MD5	c548f86dcfbfaf5cf29c77de834a5bb2
SHA1	71eeb8e573481f0e90e91d18671779c2d16c0d4b
SHA256	69ce830df603ff0c2d474068e39dd4d9fde674c10c46466f18ab58c2ec26348d
SSDeep	1536:XVGkuHxJW9e8AE2ksW2hGajxd5Qm7foQJVsWN5mcd4mX2USFfE9I:GW9e9ESPYcx8mUwV5H4mX2UOfEK
ImpHash	7beef14680444ffb4c53491e56bb9187

PE Information

»

Image Base	0x400000
Entry Point	0x401486
Size Of Code	0xa600
Size Of Initialized Data	0x8600
File Type	executable
Subsystem	windows_gui
Machine Type	i386
Compile Timestamp	2019-01-08 15:17:04+00:00

Version Information (8)

»

LegalCopyright	Copyright (c) 2003 Lyons, Morales and Garcia
InternalName	paraguay.exe
FileVersion	31.5.13.23
CompanyName	Lyons, Morales and Garcia
ProductName	Redefine Rich Systems
ProductVersion	21.29.4.26
FileDescription	Paraguay
OriginalFilename	paraguay.exe

Sections (6)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0xa5c7	0xa600	0x400	cnt_code, mem_execute, mem_read	6.64
.rdata	0x40c000	0x584e	0x5a00	0xaa00	cnt_initialized_data, mem_read	4.84
.data	0x412000	0x12b4	0xa00	0x10400	cnt_initialized_data, mem_read, mem_write	1.74
.gfids	0x414000	0xac	0x200	0x10e00	cnt_initialized_data, mem_read	1.4
.rsrc	0x415000	0x770	0x800	0x11000	cnt_initialized_data, mem_read	3.09
.reloc	0x416000	0xdc8	0xe00	0x11800	cnt_initialized_data, mem_discardable, mem_read	6.49

Imports (3)

»

USER32.dll (13)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetMessageW	0x0	0x40c108	0x1128c	0xfc8c	0x173
DefWindowProcW	0x0	0x40c10c	0x11290	0xfc90	0xa1
CreateWindowExW	0x0	0x40c110	0x11294	0xfc94	0x71
RegisterClassExW	0x0	0x40c114	0x11298	0xfc98	0x289
ShowWindow	0x0	0x40c118	0x1129c	0xfc9c	0x320
DispatchMessageW	0x0	0x40c11c	0x112a0	0xfca0	0xb5
TranslateMessage	0x0	0x40c120	0x112a4	0xfca4	0x33f
LoadIconW	0x0	0x40c124	0x112a8	0xfca8	0x223
LoadCursorW	0x0	0x40c128	0x112ac	0xfcac	0x221
PostQuitMessage	0x0	0x40c12c	0x112b0	0xfcb0	0x271
UpdateWindow	0x0	0x40c130	0x112b4	0xfcb4	0x357
BeginPaint	0x0	0x40c134	0x112b8	0xfcb8	0xe
EndPaint	0x0	0x40c138	0x112bc	0xfcbc	0xe9

GDI32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TextOutW	0x0	0x40c000	0x11184	0xfb84	0x317

KERNEL32.dll (63)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateFileW	0x0	0x40c008	0x1118c	0xfb8c	0xc2
DecodePointer	0x0	0x40c00c	0x11190	0xfb90	0xfe
WriteConsoleW	0x0	0x40c010	0x11194	0xfb94	0x5e0
SetFilePointerEx	0x0	0x40c014	0x11198	0xfb98	0x4fd
RaiseException	0x0	0x40c018	0x1119c	0xfb9c	0x440
GetConsoleCP	0x0	0x40c01c	0x111a0	0xfba0	0x1dc
FlushFileBuffers	0x0	0x40c020	0x111a4	0xfba4	0x192
HeapReAlloc	0x0	0x40c024	0x111a8	0xfba8	0x336
HeapSize	0x0	0x40c028	0x111ac	0xfbac	0x338
GetProcessHeap	0x0	0x40c02c	0x111b0	0xfbb0	0x2a2
GetConsoleMode	0x0	0x40c030	0x111b4	0xfbb4	0x1ee
WideCharToMultiByte	0x0	0x40c034	0x111b8	0xfbb8	0x5cd
UnhandledExceptionFilter	0x0	0x40c038	0x111bc	0xfbbc	0x582
SetUnhandledExceptionFilter	0x0	0x40c03c	0x111c0	0xfbc0	0x543
GetCurrentProcess	0x0	0x40c040	0x111c4	0xfbc4	0x209
TerminateProcess	0x0	0x40c044	0x111c8	0xfbc8	0x561
IsProcessorFeaturePresent	0x0	0x40c048	0x111cc	0xfbcc	0x36d
QueryPerformanceCounter	0x0	0x40c04c	0x111d0	0xfbd0	0x42d
GetCurrentProcessId	0x0	0x40c050	0x111d4	0xfbd4	0x20a
GetCurrentThreadId	0x0	0x40c054	0x111d8	0xfbd8	0x20e
GetSystemTimeAsFileTime	0x0	0x40c058	0x111dc	0xfbdc	0x2d6
InitializeSListHead	0x0	0x40c05c	0x111e0	0xfbe0	0x34b
IsDebuggerPresent	0x0	0x40c060	0x111e4	0xfbe4	0x367
GetStartupInfoW	0x0	0x40c064	0x111e8	0xfbe8	0x2be
GetModuleHandleW	0x0	0x40c068	0x111ec	0xfbec	0x267
RtlUnwind	0x0	0x40c06c	0x111f0	0xfbf0	0x4ad
GetLastError	0x0	0x40c070	0x111f4	0xfbf4	0x250
SetLastError	0x0	0x40c074	0x111f8	0xfbf8	0x50b
EnterCriticalSection	0x0	0x40c078	0x111fc	0xfbfc	0x125
LeaveCriticalSection	0x0	0x40c07c	0x11200	0xfc00	0x3a2
DeleteCriticalSection	0x0	0x40c080	0x11204	0xfc04	0x105
InitializeCriticalSectionAndSpinCount	0x0	0x40c084	0x11208	0xfc08	0x348
TlsAlloc	0x0	0x40c088	0x1120c	0xfc0c	0x573
TlsGetValue	0x0	0x40c08c	0x11210	0xfc10	0x575
TlsSetValue	0x0	0x40c090	0x11214	0xfc14	0x576
TlsFree	0x0	0x40c094	0x11218	0xfc18	0x574
FreeLibrary	0x0	0x40c098	0x1121c	0xfc1c	0x19e
GetProcAddress	0x0	0x40c09c	0x11220	0xfc20	0x29d
LoadLibraryExW	0x0	0x40c0a0	0x11224	0xfc24	0x3a7
GetStdHandle	0x0	0x40c0a4	0x11228	0xfc28	0x2c0
WriteFile	0x0	0x40c0a8	0x1122c	0xfc2c	0x5e1
GetModuleFileNameA	0x0	0x40c0ac	0x11230	0xfc30	0x262
MultiByteToWideChar	0x0	0x40c0b0	0x11234	0xfc34	0x3d1
ExitProcess	0x0	0x40c0b4	0x11238	0xfc38	0x151
GetModuleHandleExW	0x0	0x40c0b8	0x1123c	0xfc3c	0x266
GetACP	0x0	0x40c0bc	0x11240	0xfc40	0x1a4
HeapFree	0x0	0x40c0c0	0x11244	0xfc44	0x333
HeapAlloc	0x0	0x40c0c4	0x11248	0xfc48	0x32f
CloseHandle	0x0	0x40c0c8	0x1124c	0xfc4c	0x7f
FindClose	0x0	0x40c0cc	0x11250	0xfc50	0x168
FindFirstFileExA	0x0	0x40c0d0	0x11254	0xfc54	0x16d
FindNextFileA	0x0	0x40c0d4	0x11258	0xfc58	0x17d
IsValidCodePage	0x0	0x40c0d8	0x1125c	0xfc5c	0x372
GetOEMCP	0x0	0x40c0dc	0x11260	0xfc60	0x286
GetCPInfo	0x0	0x40c0e0	0x11264	0xfc64	0x1b3
GetCommandLineA	0x0	0x40c0e4	0x11268	0xfc68	0x1c8
GetCommandLineW	0x0	0x40c0e8	0x1126c	0xfc6c	0x1c9
GetEnvironmentStringsW	0x0	0x40c0ec	0x11270	0xfc70	0x227
FreeEnvironmentStringsW	0x0	0x40c0f0	0x11274	0xfc74	0x19d
LCMapStringW	0x0	0x40c0f4	0x11278	0xfc78	0x396
SetStdHandle	0x0	0x40c0f8	0x1127c	0xfc7c	0x522
GetFileType	0x0	0x40c0fc	0x11280	0xfc80	0x23e
GetStringTypeW	0x0	0x40c100	0x11284	0xfc84	0x2c5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\bg\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.42 KB
MD5	762bcd03022a90be9bdcf01fc84ae3e5
SHA1	1a00f21116d50a542b1e6391b9a10afa2c388e11
SHA256	d8bfdedb0cf6a7eead64996892f3ccfa31a50f85af480712192eed3e970bb3a2
SSDeep	12:ANHIWFF6eaTCeegA99eymYH8fgCMY4pV2K4b67bwaA:+IWgCG+9eymu8aA6A

C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	47.05 KB
MD5	6117f0fb8e18e25c265cabba96fa2faf
SHA1	671e884f7611491aae478281f8a0aeb2091e0df3
SHA256	a75e36cdc0b99274e852f61ea4799b2867416c5ff478eaa26507371d081aff3c
SSDeep	768:kbXHVZxcT+nKskTGXKjTFqz2yf/jbaf+6IEwcxJy4Rhh6hmIZU50uDl+3oh1vB6X:UFskgTYKF3y3famX4xJz7A7UKQl+3ohI

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sk_SK\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	af1ef7183d15aa484fbca7825fc16491
SHA1	baeef89c4a70b0bf14a1bbb25e01b94a884d997c
SHA256	d8e1f807ded158d21276321d1ceb3bcde379387e16212efae19cde4f175aa48b
SSDeep	12:JlM4XbP7QW4xjAME0LmDdK2p2kM+37A5z5+UmqorKNLDn:JlJbP7D4x8MEymDd3pDU5z5BIYn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\el\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.89 KB
MD5	4d85166203d5a4edce8435406fbaa2b5
SHA1	e4d13a703e02aa814c0e3ba5c315a37b6eb755a7
SHA256	df7ab084c124cb23b780c3d058cfaa8b036db324cf252bf8c01269f4f53d546a
SSDeep	384:/3W8Su1tUiUXTHfJ/Jk4WTmf81PdUWqalZyZG7ovl+:/Wyf0THfJBk4WTmfiPdFlcZGcv8

C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.66 KB
MD5	caf496a16b18de7e510208f2b5864feb
SHA1	e243be72e048721dfe2daf50ad302bf66f932678
SHA256	3839bd3b841ff5958929b1bef7ab23217bb2064a8ec8c06392454f7256e098b9
SSDeep	48:2lWbLs/JgaMGnzvUZTvRIUcxaG6ANyRpaxkBv23FagW3Q5b5E2z+KuPHUPa3As:2lGLzq7itxGEgxCFQLE2z+KuHUC

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012017071220170713\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	ec86fed60c067b47aca2a8badb97d183
SHA1	a607fc623c5dfc301c840640f2c9be67aabefac7
SHA256	3cd7bcf7b570fe77bea625a7ff9a703c631b6d94533a9fe2c3bf5bee06648a24
SSDeep	768:wFzuNgZ75Mp1FAgalo/Syy0TcHbkh1fy0Ub4Vg:ozRq5A4/Syyjb7nn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	240.34 KB
MD5	73df226888faa7eedbbfbb2d6f381f63
SHA1	0e8be6b87ee4c69489a0aa62a52fad07904996e6
SHA256	942e9c0c4c6efcab00a7293bf54f5e098b382556fbe120eff817bf3a194d1c04
SSDeep	6144:4mnSvX6w47rMYxFsFm29W5EWtQ9nZPRVkKXrPyI5wKRgF1:ZneX6HMY8kQt7F/wwC

C:\Program Files (x86)\Java\jre7\lib\i386\jvm.cfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.81 KB
MD5	ea2e202ce00aa59bc59a3b59d93ab54f
SHA1	4c7308fa1af14693f2bd8e33c9806c7c500d1de0
SHA256	ae54f274868f6cc4fe203b51ff0d6b898711a2e38dec2073dcf777fa0ab584bb
SSDeep	24:gBzZmSTGxdcRJPjhskZO5TPPWnabL9jQzXqLjItNP/Yg+is:gBz0xuXhbO5PVL9eK4NYHr

C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpSfc.bin.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	206.98 KB
MD5	3c5eba8a4c75af2626415689a9903102
SHA1	10dbf72a49667d42470907c2c40cda1bda7c2107
SHA256	3d4b692725d08c4bee01bd0e75b38e7f4385735892395e2fc588dcdc0ccc9714
SSDeep	6144:tzFLcNamcRfmLjiFvnGTYk+NwiH/RKQd68U:Liamw+yvGTZK5KC7U

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.config.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.83 KB
MD5	872f425a028d87ba7a4c96158cdd3b12
SHA1	3f2831f3ab474ed34bd03b211fb55318e49e2e80
SHA256	70135a8186422d39f5bf1025c9252b88d3b1041c4eb7e376bb55c0f7649a25d9
SSDeep	24:a5KH3CewJDXw1VplSLkrKMN6IzamZ/X6n:EKH6C1VplSLkeMNTOGX6n

C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.96 MB
MD5	b4a50518036dc2fbe5835437bf2a8854
SHA1	7526257eb270b978d503fc82be9332e8c2a2e298
SHA256	46ed9b699e7d82829310c459698566b3aa6594f6632b1bd34b1f6c54c1f3b864
SSDeep	98304:ltG2CvCjJDQUU4XHQYQDeld7CXzTFtg3P7RoDtkqPAAYfaXo+3Ph8RgaHLOGW3:ltWajZQUUZYHDOX3iyXo+58RgaHi3

C:\Program Files (x86)\Java\jre7\lib\zi\America\Argentina\Buenos_Aires.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.67 KB
MD5	1b9aee6253fdd9f19a822b7c2bf53a4c
SHA1	f35026cc71e955ee15c6c9a47bd7afd100eb185e
SHA256	81fe8d9fa33379dde46ab37cfb4e8c2b9abbd1116042ff3097224caacbf61524
SSDeep	12:gOyTpdhsC+2TSl0IA4ax4FdlUZ7FlF9djI6t2nDR+xADYRQzuB2d26qk8Ot:DwNsCzahaxZZBr9NI5DgCD8QqwI6qg

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ru_RU\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	a36fb28549f16a65d299b97a9247c338
SHA1	9a6cb976e631cd77ddcba9c2ea254ab29b5edd59
SHA256	f59f11b07b210668971552b7b836c98eb1e0071b3bd27ffbb6ec21063dd4762f
SSDeep	12:v719ThkwQOzGQbAJSxF54sLBSRcobaOW6I/JNS1t:x9TrQOSNSxjFF+bVMhN8

C:\Program Files (x86)\Common Files\Services\verisign.bmp.locked

Created File

Image

Not Queried

»

Mime Type	image/x-ms-bmp
File Size	2.64 KB
MD5	618aa7be4cd1750b0a5f6247d084392f
SHA1	fe878c289c59f085d8edf73cc634492ce6bb3281
SHA256	7f79dade5c9f7c6851af225be7d73d88b62259ed251638ba0140c7ea311cf2ed
SSDeep	12:VGSaGRX0BalfJeZqm3I03p21byt71t/rfahott6YYJ7rrluT1Sc8/M1il2lvf:ISrF0BbqWIJbqnLahwwjhrcZSccM1iYV

C:\Program Files (x86)\Java\jre7\lib\ext\access-bridge-32.jar.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	82.38 KB
MD5	c97526f00030a9ac85ca2c70026b955e
SHA1	2fc8e7abde9c5626ca27f0980eff34612017449e
SHA256	9a29effd4679ab2d42ffb838cacb57cf22e80fbf73afab58d57047db35bcda7f
SSDeep	1536:DyfArNjahSnc0cZEaIieBQ+q8GiLhbk+mKy++ZT+xjjkfbnDQp96jKwI9T4gn8:DmA5ja0c09aIiUqob7y+YTSjkfolwiZ8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\flapper.gif.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	68.84 KB
MD5	18711477816a6f2febe0714447f6db8f
SHA1	7cacc28f0b437871aa7dab18b754d365af080da7
SHA256	5b3a30ea004703ed22a56565b774917df9e107823b963033b91c173cc7aee180
SSDeep	1536:oyZlOaXPt49BoeXvj2/Ij16YZn4yZancSO4kQDxtH78K1:dlOaXPaoELFj16Y2n5RksD7Z

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\icon_128.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.45 KB
MD5	760fa68c3dfa9bf26c4597659668fa21
SHA1	430007fb3a6ee2e054828422088bc861e09dee14
SHA256	9ad62cf86241d7b11d79cdbc9f6603cb185a36e618f6a7f175e901c43d68e2fb
SSDeep	96:Rn6ff97Gx5sPhgq4ADXxdE96S+JGlNYDKs8lms:RkftbPDXxEuGzYPPs

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\sr\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.58 KB
MD5	d260b1f6daddc679b041eb07bfc0f5ca
SHA1	1b1232059a78975295e55b15d6573fd17a1d6907
SHA256	bb46c30b7997868a5cd7ba4614d5c72aaca7dd38d5d0908fee2d51069f39b7cc
SSDeep	384:V0ntikLI8tLoDUy83c9ZhF9SyN0/+dpxEOm4flgZyKPJueB:atrLfoDp9DFUyN0/+dnEMaZDueB

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	628.05 KB
MD5	3f638fca613b5ae0831143294065cb1d
SHA1	078b80d00e1da1317eb36c3cd4fa247686ad35b9
SHA256	9e7d578a65ca65d5e2dddcdcd6551e50934be2b3d9d8658fa160f72f970daa5c
SSDeep	12288:LGElAxBaEoOV8RP0rD6jx1sUBjpiuS9WlfUVQeBprLwMZU0KEFmPFLXXV05sLA:iEl7EoO6RP0rmjx/hWXbZU0KEFQ+sLA

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_CN\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.39 KB
MD5	b64104c5f3c093806786344ac4c2801d
SHA1	b98e2d7f905d514befa935620297a824438471cc
SHA256	8112608ab1650e25d2e86ca820b85952eed0b16d7e996b34d6b834c6f4e73639
SSDeep	12:En8UB3OYfB5DERulYtKdsfG7dUD4Sa1UNJtcURMrq:e8gPDAulYBy1TW+q

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\bg\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.45 KB
MD5	0b182bcb787542587c012bb423267d25
SHA1	39457426520a1794a239d171f543536901c5b83b
SHA256	739cdde912892c79120581db7fc11e7e868cc69b5ac11fefd0b70171b0767ff8
SSDeep	12:AVYYy6DRL0yKK/XjzCF/Zcl07qXg2nv9s74ndBfGKhe5JFvr:AVYYBx0yPyVGl07q64ndUXXFvr

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\58.0.3029.110.manifest.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	4efa58481a8f4e1675037fda201d6614
SHA1	e9fc7bee8c1a8f203d48f40a3b5d976b2bd50324
SHA256	35e810c93b22fb17670c1bc728db092869f3a10abda9fbe2eb0eb3b428305661
SSDeep	6:Rm77Ev/N4zz6fQA2ls0GIQ8ie1qf/N0mMcONeK5hqrR9cQF5t58CqMThsowbGu:RmEHY6oAks0NQgqf+mdONz5hqrRNF5t4

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\ko\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.19 KB
MD5	5247d7b004e1ce6d72df149ae6b22916
SHA1	b2ad89deeaaf6d49222b827af54c366a9e5b798c
SHA256	49825873bd9a0a0d86bd406edc0d30188527eba25aa13e914032c84f4758c47d
SSDeep	384:ynl5g+/GA8J1dxHv2PO7i851i5fqg/k8rfF6zf7:ynHgOGDMOh1i5ig/JrI7

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Feeds Cache\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	6ad0d259ad7e9ce21d3a496c8fbdd0ca
SHA1	1594e41113c370b47eff3c82f3a4756ad0604b7a
SHA256	12834c5f83d95270f9815733f9a98de728bc39024b7c41772f3c73a03b037eee
SSDeep	768:+YRkhQFs/WiJbYAcJDVtCswBeUItHLN4G3ub3FqDk5P7k7Xxq:LaewYAcdV4JItHLN+JqmTk1q

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\verified_contents.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.77 KB
MD5	13d7b5b026008648d322c6724843bb9f
SHA1	df189127de59a0745328133dea92df20ea57f8d0
SHA256	7715599971f704ed556406f246dba81f31465c83818c07240f94f050caa60312
SSDeep	192:d2Wkk2hOHhfajSZeKTfxtuWVTDGNBYfr7eDsgLnI9nqG4cuOXr:UWkHhOHhZcKdtGNefcPk9vuOb

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\sw\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.77 KB
MD5	7be30f99bf1e67327c56d02564ddd789
SHA1	06c230c229eba06a43d587a197de65973a31cf69
SHA256	11705eb885dbf92227a4b39e9554cdcfa4b4d1ac22d0187ff81bda91b1dc1951
SSDeep	384:5qduDZEpKzb59cPBXKfXKIIoq567EzhMKH5Q0DQdCQXsr:5qdu1b59OOKIGwahMe88QU

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\ca\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	98f59a12293b9b5794db02c06cb70cf4
SHA1	a15cd96ae58a10648dcf2555b4e0ab95a639ae37
SHA256	3ca8d0c0b7160c51bbf30c8db06fe7dd113e36e86c285c51b443d9ff09099ab9
SSDeep	6:+vHFYe68h6Dj5U9Ix4VhhA7jVScBsgz4o137jW2Ow3KmnDInIv9BX8VvnFgimQX8:+vHud8siCx4S1Swj9O2cnmMVfSPQXpzy

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_locales\cs\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.34 KB
MD5	01aa40704c6ae122a572367cf3e2895a
SHA1	71495d1e389735fcb6a0b300dab077596c07fd2e
SHA256	63c3a18083b70fac75a35164bf15bdf55ac0f49f2534010569fdac8be12e5570
SSDeep	6:q7fK9ot+p0Of3s6CjFsyrwLVPAI8wxqqxuXxKEDgRXUYVM/yCOXcPwRGjWlx:oK9ot+aO45r0Nsxt4LVoHSCwRGju

C:\Program Files (x86)\Java\jre7\lib\security\blacklist.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.84 KB
MD5	a23557c811b4b085f9bdacd670ee68c8
SHA1	ba0e14db48e0903fbb78e6ec50da56850dfceb0a
SHA256	712f58274beb817479cbf1e9fffbd7e6cb048c9d29d5e24251aa8e0e0bf9fc72
SSDeep	48:tUrqbkp11gLZXR1FFCCjpVb8vurJRGg2iGyRDYY8vkgsqaRzehgI/CYzVj6b:tUrqbuQvCCdVa6w7y1YTkgs1NehuYzcb

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\it_IT\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	bda08d399830e0cafde81ba8743c7821
SHA1	5b12738c2bdcbd280ec09cc744206ecc61655ab0
SHA256	6928b468faa863b6f5c90453bf13cd605f796a378e6f24bf2febb84f0182eb37
SSDeep	6:GA2LB+zLYM6VI56IWBvqJOJ93yTP1FmamdJbfgbBw9Wwd45Me4WBXrzzOH2Iwwt0:OLgndf0IZFmjzb0w9WATar6mhbrcQ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.67 KB
MD5	9e5b4a62f96eb66b9208cc3ab7204755
SHA1	463621cb7beb277de9b4e64cc5fadf87097f6109
SHA256	4fbf3050a73f7bb5df185f79081fdf8e1c0353bfeae1c48e5ccede9bc4cb7f9b
SSDeep	96:AHLZR300yB8PAxLGxPPi+/oEFxHXS4ATI2XEPi+bG:A00bPAxKFK+AEFx3XATIZqF

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\startupCache\startupCache.4.little.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	918.62 KB
MD5	87e61c0ba5670accbde32919d7dd36a2
SHA1	32203b21015302ccf5dd7563ac2a5d4806220d96
SHA256	f4575828933f0b7ae07b00059f964c2d6fe91772e145230faeed771d6d777cc5
SSDeep	12288:AJbSmRshUJBnu1xRr4m+8MVKlB9v5ahNBI1fqcYCIDp4oz/dcumYmPUfYGPPOnUw:A1Rsh1Dt4m+DKlTeNBIlNs4TPpq92+9i

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_OFF.GIF.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	cbfafe8f672cea785d931c78f6f26e7b
SHA1	a85b6353970655717bcfac6358007d5da3ecd999
SHA256	c92988e399114b8d8f4cc094a41ac3b12fa24d179112f521417f73b71adf3799
SSDeep	12:WaNdx5pSQZoHSfYuV3AWdr73fvO4zhawT4WRPd1sqc:Wa5gSfYqQaXO4zha+zPd1sn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\Cache\F\F0\ECB2Dd01.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.16 KB
MD5	56549bf68d65dd17928cf3fb6df77053
SHA1	c13fd4809202e0be8e7832d00033f67c633ef2b0
SHA256	179fdffba9ce869eb43181354cfd9cd1033a1fb2927ee7f1ebc3562ac9553794
SSDeep	768:OstcAk49YDXoX59Ci57UWaAkS5JapwlciD1Etzs99wU8IJ94vLKyFvlpCljd:rkXX05l7qAVHapwlAto9H8ZjMld

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ko_KR\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	877cf7aa75e12ee9b2248325a61104dc
SHA1	6bd4584cd92695f4256d9c6acb0c599acf2a4349
SHA256	0dd1cd24bb09532af0aded44dc1bdad1f6a42260ae805d38002589e546d6fda2
SSDeep	12:RFFCUkYifZfAsmv00XyMIDmC4r7FTNU6BWfhF/MR:RTPK1Asmv00LID0Fyfn/MR

C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	73.52 KB
MD5	8970f2e1c78ea7e2be71f7e073e538ed
SHA1	792e94ab10672f65a702df7eb2dcf89031d4e231
SHA256	61d066ea100aa69a1029a76c8da6b031c4c6961482ee824875e7c82df5d68ac0
SSDeep	1536:+bCduKy58K1Zo8kPWWJEa69XO5ISJwgWOV+RTxojwxTbKM:+Ge1+8kPWKEa69eISwRGab5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.61 KB
MD5	66628a566fe8b09af98bd19890d04327
SHA1	6e392c48188822321c9165080c82fa53fb60b674
SHA256	96ebb9807983b155fb73329b33271a9bd3d2958fbd3daea5e44009c0c60188f2
SSDeep	48:oHgbmsZbbu9GXV3I4EFhtAsQP4Ys+lSWO224/x:oH5q4AV35YAsQP8+lSnA

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\es_ES\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	2ac3043c1bd5649a4bff9710a7b90c61
SHA1	32e418b43f88625198d5dd880f9c0dd27467d93b
SHA256	cf96dd4f15052c79d8401c3a8830f556c53f54eac85b3691acd66f4379e4230d
SSDeep	12:NQfA8uElS0oy4K55MEUQ23yu2+hxmkgu6zi//aH6huqG:+WElSRyN0Q23SBkgzvb

C:\Program Files (x86)\Java\jre7\COPYRIGHT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.47 KB
MD5	778818ba5fd8e05b84e6b289bb94271a
SHA1	0676e8933c5957a7dee21d37a71e732033795d77
SHA256	3947bbfef5815970b392d080541f6655bd6b013b8c1d24ecbbff45ccf6508ff1
SSDeep	96:iwMUluux7pFjxzTMQ/ikYoyVCVYlZSOy2jPPo:iwDuux7ppx0yaoyVIOt4

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	34.97 KB
MD5	4e133f61ab56e09eda619b81da603dc4
SHA1	16c859d4f464049aaa8730e1272abf5ffb2ed30f
SHA256	cea9294dc71ca0d06c1ccc535ec12c12558434623dc6be6bbac18ddfb3c9033c
SSDeep	768:u8yTMZZLyAN5KYCvhsiY8qlQb1YVCI/P482l17avcE06yFj:2TcZLtDKYb01YVCI/PvW1Xxf

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\LocalLow\Adobe\Acrobat\10.0\rdrmessage.zip.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	41.64 KB
MD5	ad8c0fdc17f250f02e1ae31fc47f0a16
SHA1	2825e04cc30e1167ad0038014a105b955f3ac727
SHA256	5cb1ccd88ee6eeebb028d014495252a7556d9de9575130e4cd973a7e8208880b
SSDeep	768:OC9tEQH4jTf4sGIOfzaB6JH57to8ASDJJHsLjojXw89l8mPzQ:O+taj74vIazasXDAS1JWIXPimLQ

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.97 KB
MD5	9edb5a66ace860ad838ea3c7bd739839
SHA1	4139c03872d6d731405a571a5232d1cf265f0130
SHA256	cf8bf98099b119e8f3f4ed0cf9f1a82a2870d9b0bce1335530c21e9ea3ac0eaf
SSDeep	384:7sUib3OenagFzy57cwKQ3Kvhizfxqh2DJ7sY57Ax5hf:wUibJe57ZavMjAh2BsYBOv

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.62 KB
MD5	349b20afc442ee3375d1e2881a277df1
SHA1	4a816de4c06ca2847dbbe67ce9e31e816c635b12
SHA256	6eb167b26765ff84ae2430dad8fb2bd1dba6bac6ef3a67dea7d3ffc400b80e1d
SSDeep	12:3zxQq8cxZjuzvNZG/78qobj9Q7cpE1KLJc5LIZN5H0L6NV7jXAhkr:32ZcxsLLqQ9VpE1DLIP5pzfwhkr

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\cs\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.17 KB
MD5	59251f8db2b3947f5215b29a42dea0b2
SHA1	1e694a7bfda3d37504f598686d2cf6c9470239da
SHA256	4f2ccd092c66a1ef9d0cf320a649faadc22ac8929b55bdc97dc6e991733bf1eb
SSDeep	384:wJ5+XUXfjqId0wxQWTbN+7prkAP02N7oew7oYSZ+Els:oHOu0wacN+VgA1Nkew7rSnK

C:\READ-ME-NOW.txt

Created File

Text

Not Queried

»

Mime Type	text/plain
File Size	1.40 KB
MD5	d5a740b43e0b8487b475367ebffa9a78
SHA1	d7760deb9b0b5647b3b297cda7533b7c3f0fd035
SHA256	39e298627215ed3bed76686f52eb741335195c2cd09b69181892b4fa9f53f514
SSDeep	24:KaEhwBlovLDI5lgbspz6wT5Ud3xHH+++y3T6kQHKMyqYmVUs3B:KwBlovfIbgYpsHkGhmVUs3B

C:\Program Files (x86)\Java\jre7\lib\zi\America\Adak.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.33 KB
MD5	0f2862d940d6064e063ca3c2b10ec2cb
SHA1	2fb9a33e5403be9aa02902528f51dd85ed9da465
SHA256	541e26d36f318d77f866fbb683f0d68453ba4dd44eb2a13d3907fb9a4a4be83f
SSDeep	24:3yO8sA8zvEAALQuRrQ0J79upjsKIyC0LFCkqy7viBQFm6Yke/UHH6Bn0vle2:Cb8LEhDJ79u1W2FC+7viBsErc6B0vle2

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\sl\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.25 KB
MD5	2962e2c50ffbc98317e53e3039d01127
SHA1	03a54a63118fdb21636a3f2e465bd6802a13e09b
SHA256	30571ad16806d5e924f7f494715ad1b0ad2562edc305e0f3754b07b18874ef91
SSDeep	384:C9ovZno7xmLPXzZKtjIGQZCQ4oi/+F4MwLK6v7iKryxxFfw:wqo7xmLPtKtjJGCQ4L/+hoKISfw

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_TW\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	a810bc377d450a7869e685ff43e4a604
SHA1	5bd60efad78dfe5aa17a00c0725cfd32cc5460a3
SHA256	71a47360fa829be021360d83b225f809c331e57eaea4a272111c9ab82eb64006
SSDeep	6:vTKwDUkofjR4XE3ystLJRUNUQyLdaM4kHZOjIoWiLf+2te4ZMfFC54Go0O7CAout:Hon/gNUVdkrjICf+2a94hAvmzuf

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	cfd7baa05f28d06f164439fa025a1eb1
SHA1	faf29b82debce8dab98dd9c608edd60783d60f36
SHA256	0a8e8851e39daf9cb404e7190342a1dc16ccde95d44140bd5f83e8ae848c832c
SSDeep	768:a6oaz5d/akxeil4QMXDxrJIOQqrkDW10i4JGlDtJdfyCO1:a6bzzB/gD7+K1tiG7JEd

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ca_ES\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	ccc6fd9a78257bcd252e0ad8d27b0b0d
SHA1	4760656def593d0b350e83011c139d565649a601
SHA256	34a48dfbce9eb6ea1444461c3e3b981e44ec084a2bedc16577e2c2ef69933f4d
SSDeep	12:Qmp6T3yUYNq49cPQNTSRelbaeoDeZosEO3vHb7I1Kw35PNMVS68N0sA+YLlQn:QmET3yUYE49cPQlhoD01xvXvw9N88esb

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\Cache\0\98\B60F3d01.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	45.77 KB
MD5	c2f3a76ba8debc78fd6657ce7ddd5777
SHA1	33ac1ae5f0758c2778819bb16490d464b8263dfe
SHA256	b1bb43e2c700ac08a5f277f088d06be367f5a039cf288a64b86285297d3674c1
SSDeep	768:dN8z13G+hU3C4o/VnV4flO/Nh1vr2CwSQC76ti3NgBw82uLlnz:dAVB6DWNGNO/N/z2nC72i2Bw4

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\accessibility.ESP.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.64 KB
MD5	497cf75b8db77a7f2f762abd42434cd9
SHA1	40052fc3e857ce75ce54cc57eafea1efa3403386
SHA256	a05cccfdb2bf7fe53e7e06e662644f75efba57e77ac8472c9c5923316e60135a
SSDeep	768:uxzzG4tIEv2AWc7ERiRmpus7ikhqaJw4ZrqheDQ/vCm5LtCXs3D8BsdFBq+/MCNH:ugC2AzQMmpfiSqauUrFDQHCm5g8CsdJn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\_locales\ru\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.91 KB
MD5	06d40ed68f01dfa20d6073212db64dd6
SHA1	384b0723309bad23d5bffc6bfbbeb8f6fc93e58b
SHA256	eaf9c1f169b958d1df08d5fc2461e5be3ee91571acbe667826fd92460f8a2343
SSDeep	24:I88Lt1qcn+Vrlj/bOMHZ7xaJyC/hROHmB2WtvZM:INLt18FdBHZkEaROH22WPM

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Services\DEXShare.asfx.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.27 KB
MD5	eddc07e5e9489ae7c74f82fb1de55c09
SHA1	408aab9d4197c8d322507985b5f769435a58b39a
SHA256	40017ab07f64336094d5f803a7470148be919bb519782753bf2b87f8656ed51c
SSDeep	768:eJr//0f/gXsu3sGlo4DX4uD8yj76T/quaq2iHms0AQF+fN5Z9TdC1+uoTN:ed/wgXJ3+46ySGuaqRHms0AIcXzCxoTN

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Locales\am.pak.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	445.36 KB
MD5	2acf26e0019615600f292d311deec630
SHA1	9b4a40b8797bda2a5282e552401f739023830597
SHA256	f600a4d505e1d74f2b27b656d0999a99980c2198b8f6dcc7d279e26aae0e1df2
SSDeep	12288:9e6GBhfX0XasS2BB+kjKNpjvWbkBWBAyW1:QNBBEXaH2ljO0kBWB3W

C:\Program Files (x86)\Java\jre7\lib\management\jmxremote.access.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.05 KB
MD5	a26e2a862bbc139ab77e6b0526873700
SHA1	5ff7f31594f93da1b0debe23f508687cf4723757
SHA256	6314f7d5b3aefadb152662fb8eeacd0012d2736daa13504204f3b12f2bb1f3aa
SSDeep	96:W4zLgw1Qn4680OD4I/DUFBX7XICJ17Oggne:pzLgf8fD4IDCrJ17rgne

C:\Program Files (x86)\Java\jre7\lib\cmm\CIEXYZ.pf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	50.17 KB
MD5	37750f4028b8bc94c67465f92daff595
SHA1	7072807d01ce5160a8340b355c3e9e46d2748d24
SHA256	1d00e3b5ee19f481c82cdf7dfa73af8d81c4fcbf0ef7bc44110498bfc5aedb7c
SSDeep	1536:7YuHDJBir7tDzvlsrlmbqMzcciuv2eANM9:5DJgdmuVXek9

C:\Program Files (x86)\Java\jre7\lib\jfr\default.jfc.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.28 KB
MD5	2e7746db9d1d85825027a4a1dd07211c
SHA1	58f16cdfdab636ec18357ebad86d008d8df55c05
SHA256	39c2bbc348fae3dca4e87844dc9262bdc3e8a69c4b293413ec72479c830866a6
SSDeep	384:X4AhU/Srei85bQcx3BkMqc0HYhS3MShPEBhRB9Kf+7s:Xda9jUQBkdcIYhCVOP9gR

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\LocalLow\Sun\Java\Deployment\deployment.properties.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.84 KB
MD5	e8452ae17f5840d72d293344dda59a83
SHA1	661577f4c685ec9d7439ee6bb6c0d48afd9cd3cf
SHA256	dd2757cf3040df007c14790276a1e7921fdd907269050ca8da7d8656411f4de1
SSDeep	24:lx+ymqJvMfpCK1BzHRKf+S9/tLJQvxfGWZUekdl:/lNvMfIYrRKLlQv4ykdl

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\angular.js.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	560.33 KB
MD5	0b29886ffe4cfd34838554ea6877281b
SHA1	d65b5be1bf0d77dfb92fe0a0cc11247dad232f07
SHA256	a1231bd868793802d2cdc7326753485bbb3249cc05e858d2585b8e4c1eea7dc6
SSDeep	12288:Kk+x7gVbkCy14N6aHZ7uDn5b/n1ZYDEIEYJ6KJqrNDIvCBmgu:sx76b3y1UHcpnAwqJkNDIvCBmgu

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.14 KB
MD5	bbbacd33041348bce0774e919c079cfe
SHA1	f4331611e15ec058725f96a04dfce510fd2dec93
SHA256	d60dd6b7bec28f6225100e0016020dd7840249c659389ef067efbd6d681dafdf
SSDeep	384:xVgMa7/XpMziEXqLW4Y477aTvuxPGive59OqJSTCK4fYrDt:xuMa7/XpxEXqNHv5Giv+cqsmYft

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.80 KB
MD5	07a885e311fcbdf6bbf154c374f44104
SHA1	765f9e9581775d8f0184c5490bf7177883165cf4
SHA256	c94c33cef9e01fff18981ebdfd4e46406b1578577a0ceb306b8c7a6bff31eeb7
SSDeep	24:9/qXgxqg3l81jrJUxA2EtF2VB9vTwb5JI:JqXgTl8x2xEtFQvcLI

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\vi\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	5a85774b6e6d20320dbfc001c90291a9
SHA1	9a6e6f87511648bd1f00b72d87d1e960adc26e23
SHA256	c9d8d77dc97c0eb9124bae7693e4ad02ac8834fd075213c7242e553821c24bd5
SSDeep	6:q6HUSxSoVHETBrSvtCwO6R5emdyswbYbqC9m/wWS6C+/L2GB6rG7I/sK//gooIEw:q6D6V5OR/dysw8+f7z/jB6rKIpAIEw

C:\Program Files (x86)\Java\jre7\lib\zi\America\Indiana\Indianapolis.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.98 KB
MD5	39c912cc8260c7a92788914475b26377
SHA1	b8478fef325d7da8455abbb166f67bc272818988
SHA256	5902509de39d1ff20bebd9ae687e714bb8c221a5392838aa1f7420c6fdc1e05e
SSDeep	24:2mxaP+gAMxYFRGW5ASakrWPkPnkqChpa+RBG4sHHb:2oaPFvOFR/PakrhPncbG4ob

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	381.64 KB
MD5	7f3d9d909b840d56dd5cb80a13cfd655
SHA1	7971781a705b46a30766d047410f1e7835322e04
SHA256	2130687a1421404260eded52a43ef366247531fed838616373818a30bccb487c
SSDeep	6144:kPkd2t2Z/525jMBvwsW1f9r7fOyDHS0OPaKDORr65L1OklFDgYOuOAVZg8binNZd:3d2t2Z45jOINpBDq64PXgYpPTgbLHd48

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	096eead48ea4e4e1fc625eb088ff3917
SHA1	15e0a6045c31fb55f7118c9529a5cc47bd55d6cb
SHA256	f2ff98060a1355d9376e8f1073951141511ca46020c47cd3a5cea86bd599b302
SSDeep	768:xSXJqhRnLZdUV4oLnBoEhsWJFGn3rmyAtwuo2XJfMNwa:sZeRLZGZq6FwrQqydcwa

C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.27 KB
MD5	695af13ee25c0fe3cc0479aea09a5f4d
SHA1	b0611cfa4ecbad27f51d22fbff39dde40765da52
SHA256	4d13f6d1bb21b63db362eebaa6e6170d6847110d586aeafcba9311264e662301
SSDeep	48:6arOxCXu9hzX0+H6wxIye3jKPc3eHpqto/K7eMAPk/n+m/5:6ay4uL0g6f3QHTHMJ5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	c29321ee47ebbf1b64a499ba26eef717
SHA1	5f0419ca1ef2dddeea04deb4f98a935dc85dd9dd
SHA256	18d2aadf6d9c6203ff4f213bfc3ca8ea516eaa48a06fadc0858ab3442a0cb025
SSDeep	6:4npRfgveXOD8RJeeRg70JmOHa1Ov3xz+v+z2Msb8DQ3aBJv3MBqfPM72GzzzKrDd:4npRfPXvRJvgIrH3PxKWz2xjarMBqfPb

C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	48.19 KB
MD5	2be96497fcd94c175ca8dd7473f3d8a0
SHA1	f97cc21e1be4f5601ad9fb7df3d2f30236e014d4
SHA256	3311b1d7106c8adffbfdb7d7f28d5220c231762bad70611b614f010ddacb2fe5
SSDeep	1536:/3XZgO3EWs0RT4w4XSVT2nS/wzV4j1QvF:SO3EWJMSVVTGF

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.73 KB
MD5	1c2f73b4eeeb35a38900ea2776b87264
SHA1	65b5a04059283e832b770934c1574691fa33fd69
SHA256	83d157b59be2e9cad17230681e0c8210a4323a905e5b3a9328ef73a561384d22
SSDeep	48:kV1rrDpYmet2wwcC6UDAA3gbbvgNSQzVA2M/cB3n:kezwFLcA3g/gUQz9xB3n

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\logo.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.17 KB
MD5	6ca8c4559a59dfe7d54995d33ea879ea
SHA1	3139c7aa6c34034142b363dbeb0eb614c39909b3
SHA256	86d5f98492fa0ced29094727b1bbf21e9806d78122a1b381614c4c6d3f65ac1c
SSDeep	384:Z4MPZPZJ38XJppwXDsWk4eXfwdOiUBoPAQCV+N4FtfLpDBy:d1n38Zpp0kbCOi6xzV+NutfZE

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.42 KB
MD5	940c98f231703b9ec7e6e9c443d95daa
SHA1	7eef6232212a66af81a3f0612a40b45fbe071a93
SHA256	111ce6f5498ae78adae9362b4ab3e00ebef17dc56a48e79095bef424a1c27912
SSDeep	12:yXJcxyn7PAqd84RlmgNd1GfMpvDZXCM4CKZCz:y3Eq+Cm0d1es

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	54.52 KB
MD5	80e5d59d5af28017b7b5d4d73d9bdbb6
SHA1	1c03a99d905735bfc8e3b5c340873ddd8a4ebe1d
SHA256	9629f676ad836bebf41106974b437b2836b9907a3ffec388e9d65ca85c7e81de
SSDeep	768:SeRCfTUZ6PyUZrN1IL06vY0RH13BC7mXJk+dSwXHfNST9UlBu0dWmDQssa8DKk1:bKY6PyUhXIhbBOmOeXHlShon/Usod1

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.14 KB
MD5	aa5022ba795e926f5ea363e3c1bfe008
SHA1	a65fd0040726ac8ff74e32b29935cfd5454a96eb
SHA256	4c8b8d723bc9df201d7bb029343d43d6020f6efe51abe14ccce1cbe519ea80b1
SSDeep	768:1VUveJtXswl6nxa2m7m7bKr5fj1zBA3TdMHw/lpkEY3EqO97eDwgJvHu:oCcwkk2gm7+HzBA3OwjkP3EqO9CEgFu

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.88 KB
MD5	67fe326b40623b926af75a5710dd22e4
SHA1	ac46a1066da4b86a923988694efe7216f358f46f
SHA256	f11dab8e70323939c457a21da63cc78eeca5df9794554fdae6e6ed91741e4731
SSDeep	192:A5q1W91/AInFtgpKY4FpufVaqsMZwzhbneZnN5:DW91zFOKYAu8GZwlDQN5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\de\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.25 KB
MD5	61e43ccde1288d67002142ef5f608d0b
SHA1	5d0e0309e25c8e0c8b79212723b45f5dca89c156
SHA256	e0376f951c5950b573a43f0fd1daf29c6334854d84a819ffa735735c200932ae
SSDeep	384:SlWc7S22PD07/dN6R9K+Tq2FQRo2fTRZJwfLLbkwYPPkc:SX7N2r071g83bHGfOb

C:\Program Files (x86)\Java\jre7\lib\zi\CET.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.30 KB
MD5	d9d88e481246b3502c94f14cca27ff05
SHA1	f06d23e710fd9cd8293831041586f59e7ed1e1ad
SHA256	65a72e0d953126ea0da7c8beb661121905c3261a9dbf44b87f9fc011ae035552
SSDeep	24:/5WdrATkp9guAa3/4+sWu2u2ehfSHteB/Hi5muNnYdse1RvhkHT/9jmWCdBwwe7U:RWdSkp9guAav4+ruthfSHMdiIu6dse1j

C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Abidjan.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.20 KB
MD5	62dd5469dafa2a9773f38b427b4dca75
SHA1	f8cbd3ca0df5141b8cc26b05ea8cb63e39e8b9de
SHA256	e245f8d72730737c46e7d57b675939434636ff8104654f3325740fb47ca7b695
SSDeep	6:YE+uuyA2UkwyvLcJJSm0TBiO3rhT8R50hMd+QU:Z+uuzbYvLcJk3tTy6r

C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.73 KB
MD5	f69bf148d76234ce2654a36822ef3034
SHA1	14fa14788d0827dd7d8e1129875e8a5c4d75b685
SHA256	36cfb838444dcab6aa5c551a32f1f51d3b7ce476920db8b51623a3dc42e766ca
SSDeep	384:6oc/PCh5YRiI41GVD2UlHurfYIT5cyKNffzzJydNRBZZggT:CXCHYRKN3cxlyZB

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	127.58 KB
MD5	959eda712e7bf3461d0712742a08a04f
SHA1	aaa2e1f856ff1352b1c4f2096c0d4e78512f5fa1
SHA256	d7be0377285c16a387df540dbede2285439b5c103c4a12042f1fdd4add78093e
SSDeep	3072:HYppurQwEDrqhfLUILi6FqMwK3ujLJybpcR9GoPKD3YBjG3ccS0:4pkrQnDrqnecqMwK+PQyKHDoI

C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.00 MB
MD5	5f10ddbce42d7bc50354dcbd9625d8e8
SHA1	7c1fdf38e064e723a1c680fe566bc0c6f034f0fb
SHA256	7e570e846dcd084b5e4548b703651821433576661d6af47e9e68f49823eb7ff8
SSDeep	49152:mqbcC4OdFMH3NiJ79ePZ9+QVA99anTFQFXG8AaL+d:8CzdKQumrKTozH8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\ar\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	2ca5166502ca91bf907c791eb0243bc1
SHA1	3b27238a294a9744df269e21564c48419286563c
SHA256	77b2639fe2285cac7ad7f5cc0fff4c19af09410f7c32dd5582fc91e12a30f5b1
SSDeep	6:Pg5sbsgwsrqNARyBvKCMMb/7GI6ZyCC94mnTmKxCkP4yAPa8WK66nVeVoAeZqGT9:Pg5ouKqWRy8CMQ/LcyC+4VqF4yAPQNgt

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\da\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.00 KB
MD5	9180fdaf8eb07b2904b4bcb8a0dd5f13
SHA1	a3448f42dec5f638cd922188ef40cdc3ca2ad6dd
SHA256	ef1f0c4ba09252ef8a67ee4731537df022a1b6fa4f450c5132f00c67a33ab0fc
SSDeep	384:ZFVQeRWsPZ1gytbXahcxBGQS9VBEk8ms/l4qyXuqso:ZFVfzgAbhJSVEEClATso

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.14 KB
MD5	ae7f65c6d9d142a3f7a83425ad03c76a
SHA1	32a33882b213decaa52dbf45a8b360cec945b183
SHA256	6039799c8914cfb30b95c1f4f799ae7b3a20b87efb0985894ace878bfb378c17
SSDeep	768:bhcNbqi8iP+QuqzFFQXigIgxmPKqirMKNyDHG0Ms2IN4RqQid9r4eps9ZYa8Iy:b9oWQXeiFSmPKqirlNyDHGtAXPGHul

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	d4749d73802ff3ccb1ea8fb4ae07d81e
SHA1	d4d4ad66f25174558670bc0f44ce379d256d6a41
SHA256	d4d74a09b60c2cddc4923cff5d28867de3d2c73a52883b002138ea090972ecd3
SSDeep	6:cEo4+dMVW05LOi4h9JRe2Nu0K9do2GQNyu7MKIpZczVIQD1X7T:cV4iH0Oh9WTdfv0CVtl

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\thumbnails\4cc87c1409819bf06f42b782d4902b2f.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.31 KB
MD5	41ccb5a0b2e26851742b72459e94eda8
SHA1	c922072103137dc28b9ecf6339a761496ae906de
SHA256	2b6d29dfcd6b0006989bc50b2e3e920397125fbb128265a5319dabd5032077b6
SSDeep	384:u011Hn7a3y3mIbhCQnYUJij9ONaFywTAHmQxTAxwGdT+:ue/m+hCZRGcTAHmmJGo

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sv_SE\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	3193a2d534648a79081416617adde164
SHA1	c8d28eae8f268d5c3573894c23b4f7a972f0c397
SHA256	344eee010f0363ff4d174dbf6f7db7471e6342d768ae9f113814430ea8bde9aa
SSDeep	12:j4zH8BCmJ9gkInru0l9NBR7J409dNsALgHzbxS:qcBCcipnr3z40bNopS

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.10 MB
MD5	cc724e65781a480d86dce00eaacf67a4
SHA1	d02655b7005a8616ae11bb46c41e4586039fd6fd
SHA256	ba8c373c207979bac5c835468cb70afefe4c87d8e5a9a349d4f9fbc7a77b11fc
SSDeep	49152:CuqsLJEbo15ZNpbkaiA4EYjJoTE/yG/OPvxdxSir7V/ATkakK0UCI/RR/Sbq1P4c:C3wWo5kcGt6kOPvxdTl/Lauk

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\da_DK\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	4b36cd46f15c5f60eecfbc066becd787
SHA1	78116f49782dc0656f72298318cf0d3eeeb16921
SHA256	8de688217aec2ca04461e1d5bff159650b94a3fbabb97550c4b13889016610b9
SSDeep	12:QJjE5ZukJY6SzijJwjzcPYXEwautNTmXWakUZra/lVy:EjEfFSzi1wjAIEwaut3UZqlU

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\HKSCS.txt.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	381.98 KB
MD5	3945fe1a470ae8920f9abcf3387ede00
SHA1	a75bddc3c72b4ab59b8cb359ed41f2b8748c0c32
SHA256	a9d06dfee174e5a9f5e3daa2ad2fa7ca89d7a5f089a7e1d5a8c4a8f0da582711
SSDeep	6144:YxsB4dNRut2o+h1Zn6E+fVE4Pgo+kfVxZ99+OQoMs3ci7ouUC4bbizg:YmydNRuYHh7n6E7O3VQRsMuPg

C:\Program Files (x86)\Common Files\efficient_validation_integrating.exe.locked

Created File

Binary

Not Queried

»

Mime Type	application/x-dosexec
File Size	73.50 KB
MD5	1a76d7a6fbd06d762436c407a352a448
SHA1	63809fd1b6a6e922fb26baf4fa9ffda157396487
SHA256	dde37badc656312e4691062b3c5e77b75fa6f4f943dd70130e776665159ee25d
SSDeep	1536:XVGkuHxJW9e8AE2ksW2hGajxd5Qm7foQJVsWN5mcd4mp2UTs/E9I:GW9e9ESPYcx8mUwV5H4mp2Uw/EK
ImpHash	7beef14680444ffb4c53491e56bb9187

PE Information

»

Image Base	0x400000
Entry Point	0x401486
Size Of Code	0xa600
Size Of Initialized Data	0x8600
File Type	executable
Subsystem	windows_gui
Machine Type	i386
Compile Timestamp	2019-01-08 15:17:04+00:00

Version Information (8)

»

LegalCopyright	Copyright (c) 2015 Hahn-Bowers
InternalName	efficient_validation_integrating.exe
FileVersion	4.31.13.26
CompanyName	Hahn-Bowers
ProductName	Incubate Intuitive Interfaces
ProductVersion	21.3.27.1
FileDescription	Efficient Validation Integrating
OriginalFilename	efficient_validation_integrating.exe

Sections (6)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0xa5c7	0xa600	0x400	cnt_code, mem_execute, mem_read	6.64
.rdata	0x40c000	0x584e	0x5a00	0xaa00	cnt_initialized_data, mem_read	4.84
.data	0x412000	0x12b4	0xa00	0x10400	cnt_initialized_data, mem_read, mem_write	1.89
.gfids	0x414000	0xac	0x200	0x10e00	cnt_initialized_data, mem_read	1.4
.rsrc	0x415000	0x770	0x800	0x11000	cnt_initialized_data, mem_read	3.22
.reloc	0x416000	0xdc8	0xe00	0x11800	cnt_initialized_data, mem_discardable, mem_read	6.49

Imports (3)

»

USER32.dll (13)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetMessageW	0x0	0x40c108	0x1128c	0xfc8c	0x173
DefWindowProcW	0x0	0x40c10c	0x11290	0xfc90	0xa1
CreateWindowExW	0x0	0x40c110	0x11294	0xfc94	0x71
RegisterClassExW	0x0	0x40c114	0x11298	0xfc98	0x289
ShowWindow	0x0	0x40c118	0x1129c	0xfc9c	0x320
DispatchMessageW	0x0	0x40c11c	0x112a0	0xfca0	0xb5
TranslateMessage	0x0	0x40c120	0x112a4	0xfca4	0x33f
LoadIconW	0x0	0x40c124	0x112a8	0xfca8	0x223
LoadCursorW	0x0	0x40c128	0x112ac	0xfcac	0x221
PostQuitMessage	0x0	0x40c12c	0x112b0	0xfcb0	0x271
UpdateWindow	0x0	0x40c130	0x112b4	0xfcb4	0x357
BeginPaint	0x0	0x40c134	0x112b8	0xfcb8	0xe
EndPaint	0x0	0x40c138	0x112bc	0xfcbc	0xe9

GDI32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TextOutW	0x0	0x40c000	0x11184	0xfb84	0x317

KERNEL32.dll (63)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateFileW	0x0	0x40c008	0x1118c	0xfb8c	0xc2
DecodePointer	0x0	0x40c00c	0x11190	0xfb90	0xfe
WriteConsoleW	0x0	0x40c010	0x11194	0xfb94	0x5e0
SetFilePointerEx	0x0	0x40c014	0x11198	0xfb98	0x4fd
RaiseException	0x0	0x40c018	0x1119c	0xfb9c	0x440
GetConsoleCP	0x0	0x40c01c	0x111a0	0xfba0	0x1dc
FlushFileBuffers	0x0	0x40c020	0x111a4	0xfba4	0x192
HeapReAlloc	0x0	0x40c024	0x111a8	0xfba8	0x336
HeapSize	0x0	0x40c028	0x111ac	0xfbac	0x338
GetProcessHeap	0x0	0x40c02c	0x111b0	0xfbb0	0x2a2
GetConsoleMode	0x0	0x40c030	0x111b4	0xfbb4	0x1ee
WideCharToMultiByte	0x0	0x40c034	0x111b8	0xfbb8	0x5cd
UnhandledExceptionFilter	0x0	0x40c038	0x111bc	0xfbbc	0x582
SetUnhandledExceptionFilter	0x0	0x40c03c	0x111c0	0xfbc0	0x543
GetCurrentProcess	0x0	0x40c040	0x111c4	0xfbc4	0x209
TerminateProcess	0x0	0x40c044	0x111c8	0xfbc8	0x561
IsProcessorFeaturePresent	0x0	0x40c048	0x111cc	0xfbcc	0x36d
QueryPerformanceCounter	0x0	0x40c04c	0x111d0	0xfbd0	0x42d
GetCurrentProcessId	0x0	0x40c050	0x111d4	0xfbd4	0x20a
GetCurrentThreadId	0x0	0x40c054	0x111d8	0xfbd8	0x20e
GetSystemTimeAsFileTime	0x0	0x40c058	0x111dc	0xfbdc	0x2d6
InitializeSListHead	0x0	0x40c05c	0x111e0	0xfbe0	0x34b
IsDebuggerPresent	0x0	0x40c060	0x111e4	0xfbe4	0x367
GetStartupInfoW	0x0	0x40c064	0x111e8	0xfbe8	0x2be
GetModuleHandleW	0x0	0x40c068	0x111ec	0xfbec	0x267
RtlUnwind	0x0	0x40c06c	0x111f0	0xfbf0	0x4ad
GetLastError	0x0	0x40c070	0x111f4	0xfbf4	0x250
SetLastError	0x0	0x40c074	0x111f8	0xfbf8	0x50b
EnterCriticalSection	0x0	0x40c078	0x111fc	0xfbfc	0x125
LeaveCriticalSection	0x0	0x40c07c	0x11200	0xfc00	0x3a2
DeleteCriticalSection	0x0	0x40c080	0x11204	0xfc04	0x105
InitializeCriticalSectionAndSpinCount	0x0	0x40c084	0x11208	0xfc08	0x348
TlsAlloc	0x0	0x40c088	0x1120c	0xfc0c	0x573
TlsGetValue	0x0	0x40c08c	0x11210	0xfc10	0x575
TlsSetValue	0x0	0x40c090	0x11214	0xfc14	0x576
TlsFree	0x0	0x40c094	0x11218	0xfc18	0x574
FreeLibrary	0x0	0x40c098	0x1121c	0xfc1c	0x19e
GetProcAddress	0x0	0x40c09c	0x11220	0xfc20	0x29d
LoadLibraryExW	0x0	0x40c0a0	0x11224	0xfc24	0x3a7
GetStdHandle	0x0	0x40c0a4	0x11228	0xfc28	0x2c0
WriteFile	0x0	0x40c0a8	0x1122c	0xfc2c	0x5e1
GetModuleFileNameA	0x0	0x40c0ac	0x11230	0xfc30	0x262
MultiByteToWideChar	0x0	0x40c0b0	0x11234	0xfc34	0x3d1
ExitProcess	0x0	0x40c0b4	0x11238	0xfc38	0x151
GetModuleHandleExW	0x0	0x40c0b8	0x1123c	0xfc3c	0x266
GetACP	0x0	0x40c0bc	0x11240	0xfc40	0x1a4
HeapFree	0x0	0x40c0c0	0x11244	0xfc44	0x333
HeapAlloc	0x0	0x40c0c4	0x11248	0xfc48	0x32f
CloseHandle	0x0	0x40c0c8	0x1124c	0xfc4c	0x7f
FindClose	0x0	0x40c0cc	0x11250	0xfc50	0x168
FindFirstFileExA	0x0	0x40c0d0	0x11254	0xfc54	0x16d
FindNextFileA	0x0	0x40c0d4	0x11258	0xfc58	0x17d
IsValidCodePage	0x0	0x40c0d8	0x1125c	0xfc5c	0x372
GetOEMCP	0x0	0x40c0dc	0x11260	0xfc60	0x286
GetCPInfo	0x0	0x40c0e0	0x11264	0xfc64	0x1b3
GetCommandLineA	0x0	0x40c0e4	0x11268	0xfc68	0x1c8
GetCommandLineW	0x0	0x40c0e8	0x1126c	0xfc6c	0x1c9
GetEnvironmentStringsW	0x0	0x40c0ec	0x11270	0xfc70	0x227
FreeEnvironmentStringsW	0x0	0x40c0f0	0x11274	0xfc74	0x19d
LCMapStringW	0x0	0x40c0f4	0x11278	0xfc78	0x396
SetStdHandle	0x0	0x40c0f8	0x1127c	0xfc7c	0x522
GetFileType	0x0	0x40c0fc	0x11280	0xfc80	0x23e
GetStringTypeW	0x0	0x40c100	0x11284	0xfc84	0x2c5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.98 KB
MD5	eeccadf14ef8dee45a32cca3fd58e49e
SHA1	45dcdd06a95288429cdbd1d19bf047f377ab0ff1
SHA256	ad9f81ebbcce01e855cee870f5be943285a9083b66de8c506d957e544cbdf8f7
SSDeep	192:kbuBK7DtcYL3sr7wIp6h6dedxyHEYIEZfMsGB9JjlMn:ZI+M3sgi1dtIEyJjl8

C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.48 KB
MD5	35840a876859b23faf7f703e47450285
SHA1	d178d4a66dc4901070cd38fdc8a0d21372207e74
SHA256	5bffada662a87a61816806b4c94b11efb91d07324cdbb95cdb47ccbaf74fc11c
SSDeep	384:ldYDbHqQBj9/dtFUPjArqAK76SfG/PKQkIa4Q:ldwz5/dtFS8G1mS+Hbw

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\az\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.30 KB
MD5	96c51f5ddcb34bc1f21aa54e63eae3a6
SHA1	0092490242f1b504a09a0df88025f480d682274d
SHA256	2f8542874898d39ac07b850553abbabf75b107c072de9cfdeef499ae7e291089
SSDeep	6:2HZgNgFv4iCyoXOR8wRqjq9VSli2tJcEqKDXDk0B00ptCcf6F326NU35etF9:25gNKpCBCPYTl9tJ1qYXDv0kCcf6NHNn

C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.52 KB
MD5	f354c402bc3143d4c2f7e36e6e018571
SHA1	9dc11f767dbeecaab2e429d1d1c7cf856e86a492
SHA256	95b65f0a8fa177d965816b17efb087fd70e857f6f1441133a4c282fc85441904
SSDeep	1536:Nzsu8VymbaO5lld6oya8XaQPm/xCOnNFeS3fQ7tQL9ih+gsdcS:NYdVoOT7x6mEwFLoxszJ

C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	260.62 KB
MD5	fee498ef3fbc3b6da9304ece349f2937
SHA1	09dcc17300297b47573d12ba7eb4c1d0bf7491be
SHA256	debd7b247d43a26b61e3f1610afccb44c9f8e317700e9b18274f852c4dc7827c
SSDeep	3072:jhjvL7LG0ZtX4jvGDEzGFOCMQthHp8PrXHoBSu5cw1HeJWPyZhGOU6cfDReHGVF8:lj70iuKWar2fYKZhGty6JsGnO2rNW

C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Amsterdam.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.64 KB
MD5	2eb7f46358ebcb953068cd66cdd8a63e
SHA1	c5e551686aafc45c8e212b37fa412ab28a41e341
SHA256	0ed6511f26ce85b27863fcddcb96989d8d94c67fa25061cb7cc4dc1df545fe58
SSDeep	48:+3mxPzI60OMOYMuQVpFj1zwXIRAgEo4P1NM:+3mxj0I1HpvUCGLM

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\_locales\af\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.27 KB
MD5	d95b3777678aa9b561fd057ad08537c1
SHA1	9f6618505f85fb5e3fb88061ca79cffdf3568e89
SHA256	ed288276685c10cb63c288da9b3a8b2286cea79c1e3e5d9beecd39ea45a2d274
SSDeep	6:ci0VAS24BPOcmZW7Rj2o/zYIzC6PRW5TnlDWe0b/bBG26SNsig:cUszl7Rjvzyn5TtWei82t8

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sl_SI\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	b55e99dd69b693f6c17bbf6467b74957
SHA1	baf3bc1e1bd209c5d29100635cf78b1d921fd14d
SHA256	cc8decdfdfe253cc51e0ff59686c3326c1b4d435fbf185d168197ae98a4fcfe2
SSDeep	12:vzf5tKQVRzUlvh7uDR/JYBd2Stf7UvMxqDcvuN6dBn9k/:vzznVRzqJiNiRtjkNcWkBnO

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.00 MB
MD5	ec1fab93ef43fe2c596c736dbd636596
SHA1	1cc54857fc21322018b93a2c8982c521f1b66537
SHA256	5f742bccd5ec0773a20c791ee76207ed132d4531180025dc53798cf2b0862895
SSDeep	196608:jZnTf1gR2yboR9g8zqEmkH9faK+QCHkOtQoa9JSFZaYZ0dpUDeG1JX/1TULf9YdU:Z1WgR9JhdfaRkL9KZfEUDeG1wRva0h

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\ara131.lex.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.01 MB
MD5	bf297d568c670d9b315a759d90791aac
SHA1	f35854323e6a81a5dabce524e0010c28fd1f325d
SHA256	7bcd56e1860dcdd09c88cdd36905e255b0e03d2f3d0d736a33a98b0f4e3803ad
SSDeep	49152:TiyHhYpgFVj5K6xu1QQzMICrQpgm+c3n5Mgku:l55K6xu1QQzMICrCgm+c3n5Mgku

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ARABIC.TXT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.36 KB
MD5	e83abfb62a433fa2731e6be85971e49e
SHA1	ec2ba4f426bc4c1d5447f073ccbf73e4a66d5f46
SHA256	48c5a9b0fbcd021e380ca08c9bfd83e33adcdc8d4a26c3b24e907bceb6a9f821
SSDeep	384:m+PFX3WeQYsfzJRTwTMfkWXnSoMeYx/eYyQfU/X4xzCZwQihvFbBO+1KMv:m+PFXjwfzJ1wYfkOnSjsYyQf8IxuZDs9

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\_locales\ro\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.78 KB
MD5	7721b054cc1a617aa7e6e18830ad5879
SHA1	9b37b99ce906d0f16a7e49e4416131aa1583f267
SHA256	72363b6f97a95e1c8622230029afd931a107531d9ab4aff342ccfbae47393491
SSDeep	12:6r4ESOrBdCn7jk9OE3+AEPvdZVwclDE7w1B6+jxqcYzTE0TUtD5oZUZqCwyjQaIr:60UY7jk9JOLTgwi+jxV0+mOzD3x0

C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\AddIns.store.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.56 KB
MD5	b937f154ac538c7c0204b553205308bd
SHA1	cbc053b9be7d5a2a5d8fc4adc2d7551f98e07a73
SHA256	a38afc6676f3a09c911063d48a0afd065c2c250b7b429ac26915d67033c988ba
SSDeep	192:8C16rZ7TsYf8C6aO0NzpUzuCw151xCIfZItHrvCR9KE+:839xf8CzN6zuCg51vZItLqR9l+

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\fa\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.88 KB
MD5	19948a3d6086cec5ea23bceb50003519
SHA1	807b96a2eae74b62a6e693747772c92de341f5c9
SHA256	962bb094296d7a96ed6036d0e1328528aa40462f0367ba3f5e9f544d9751f2b1
SSDeep	384:H/DNOT1yb1kzfX3gVz7ltZCrAnBjUPranjxCc:HsT1yb2whM4UPranUc

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.14 MB
MD5	50c3995c522f14193d6e67192fe5e9e2
SHA1	9839aec7bb9d55352511887be36059c45ab46be4
SHA256	d0312bcc55e3324e20dd0e178fa71a0ef2334d7d33ce6f153dceed9fee524bcf
SSDeep	24576:7XVZaLs2g+5ikFtK4CrhIeKisSzGpMjmkNmAsEUwSxQvH:7/BF+q47eKisijmk0AGwSxEH

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\LocalLow\Sun\Java\jre1.7.0_45\Data1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.00 MB
MD5	001a6547aae142493ecd5d929b0bcb6d
SHA1	57b0512a88c21afb8a502a9a92433a2a1789f332
SHA256	5dff76af3761b2a393ebd8b53180ecd6e6b44e8665f06e05162c910cac160ad0
SSDeep	196608:JtZhQq8rFYsuGixpfjfBvZqaOmoTs4/z2HYCv5H8:vPQRh9uFBLOmCB/iH3H8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\zh\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.41 KB
MD5	c59b70877c336eb3df1c1c50c1f5a312
SHA1	843d2a70e219849373a08e4dfbdcdccb94b06b67
SHA256	10488ebd3d6a043c13c02aaa150c135b72bc5a63d848b38f3390fbd8cac86ca0
SSDeep	384:fenA6jMsAdC7Igp+sCM/R6Q50RXzYkdu6X1vmMXCN:fx5sAd9gAsZ/RjKRjLPXUMyN

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.09 KB
MD5	80c804335e9d0ce594240015e4955224
SHA1	c567b0abc7fb0c08b0fbf3375f0b97f4389bf0e3
SHA256	8b1c4aec15bd8e447b92435127fe2640c8bbc4e041d1be34360c118ed0488d0b
SSDeep	96:onNcWZZM8cfj0pGbtmEZ8yy69As8630kqNcF:VWIhjta4j03cF

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\de_DE\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	8d861ff040684f78dd13eba6f74d7c3f
SHA1	5505ca6e55f7a3c65182bc7b842bf6a3c903c489
SHA256	7bbf645f7fdeae27c1a5b768d869692f07981c2987f06f5c42835b7f7cecead3
SSDeep	12:jmeE/kkXQhAuuA6YDn/ytMx9GMgiKx4J7Jo1OB2dmsR:jm5/kOcAuuA6y6qOPr47o1xn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\cs\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.38 KB
MD5	871adc3020700e43fac2507e9ca997e1
SHA1	4fa5eca041ae31619a5d633662e3821da6f187f1
SHA256	bab2062612b6477c8b58b3cb1d897ac732a6b994db14665580c836ad23da20a0
SSDeep	6:80kaD9m1dx/Z4pTBitHk2lIbbdWOqTI2z7U2Z8oscmr+jEPF9P+e0Q9NWolTVg8C:8vaD9kp8KE2UdTR2z773sch499Jp9UoC

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\DEXShare.asfx.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.72 KB
MD5	97cc865b606dd4ff17639638d520e089
SHA1	2c4537873ec4c7065d7e89a22da3cd752b66ba1a
SHA256	40ae69028ba2513d7cf73dee42066904f7d414d2d3b75fe9d3a3e7e1c219a8f8
SSDeep	768:ZteZLWoyh/RaQnLTStTaYjJLKXSpKn0zHCHbe77Z+t8lFC:ZteFzyhJDSzLK+Kn0z/70alY

C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.61 KB
MD5	992ba6a1a0d8593fe8e314153238ae0c
SHA1	3e468927b5901ef48b4e7e34fe8a5e3285f88fb5
SHA256	169381c0b4f6bd24a12590fb81dfd6f1de1ff1f44510905b8e7fd90b82c8be3f
SSDeep	12:wgaiDdJMIliOd12NGYJMDqrw25Cqp5BKyLB:wfiZJllnY6ECqpDKsB

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.53 KB
MD5	c2934c0e81efade699d17a150da82b88
SHA1	a60f0d7a83b6aba807312ad5a809657c98afef47
SHA256	a6300a0ae5f73b7e42b2b4bcd39c24c42528cbcd5d378b6b6455488c23c35ee1
SSDeep	192:T5jKh1VciQ1bCewWsLKov5mhHXLvkq/h3Z3H01scuIt1TU9/TZ+Kk939LE7fX9a:h4KiGvwWsGoBmxTbZ30xlTmt+H9NLwfU

C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.36 KB
MD5	606c1c77eb1267d5c87109f7016648af
SHA1	4b273ff5c97555ee17f661bec1b3266d919ff29c
SHA256	3cdd16ec609a88ab8613b2a093381c44f258b43f2b73de43508ebe07e4da4058
SSDeep	6:8iUpb/W9wSiSCMyUgEPB/WCL7ORbUCH7G11tzI7fT9mKrmSMxcPfk:apb+wVMDn5WbFqAtrmSU

C:\ProgramData\Package Cache\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\packages\vcRuntimeAdditional_amd64\cab1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.33 MB
MD5	16af181f43477601bc1e21b548870488
SHA1	d60326d728cdb1c6ee092daa3a99dc3fdaa9b057
SHA256	aab7701496045b9d8d16c1aff64a63784ed3dc6d619a66e4eec17f0681c09271
SSDeep	98304:khzytTgagOU//8y8EAe0jHDSSB1gYIcmiChhphUicW1fXnZGZ+O/hAK9nkHkEV6g:eymagOU/RHf0CKzChhp+scZ+EBqEEaYB

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fi_FI\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	6db7fd07f5bcb18ff1e007f166673b0d
SHA1	28488d851fc3cedd1052a7472960b79476b24c4c
SHA256	06499a2ae7dc99d0ab86355965d33d17f2dc1da7fd504b41b31ec4654312c61f
SSDeep	12:5nkTF2+3o1NbEi53u3xdt36MbSKr8mPvh6fo4lJ:5kTnAbEi5e3x73fgo594H

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\index.dat.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	112.14 KB
MD5	cbf70c9c7e7f60189d781cb24837f528
SHA1	4303eeb798a015a81a35dc57d365fe422d749298
SHA256	56e3d2048e09c31ad598e251cca04797a6175da51da8725e763e9af6483c6102
SSDeep	3072:ahGap9Wjd93k9d8vhZr3mgkmfxBkIavGUTnaqe4A/:a4ap94zk9d8TbkKx8GUPA/

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	c1d8c448376543c913c978b1ab425668
SHA1	5cdbefb510296845052639911746e6f151c69261
SHA256	d6f559eae7fcc8fa78c635d29c0dc4dc9cfeb1ad3951afcf52deba52d6454894
SSDeep	6:GZwF26GSAuNLnjMZJszn1xVS6tvImICizQFZpz4lP/qd:rFVGSA4Fzn1zS6tvImICuQ+3qd

C:\Program Files (x86)\Java\jre7\lib\zi\America\North_Dakota\Beulah.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.38 KB
MD5	d1c997dbbe5383290d8be731625d8737
SHA1	a52fedaa4761a602fc699034ab84c0eb8351384e
SHA256	1e6a8ac4c512169971687fa251b0b3320afaa90b2b74bca40b460ddb9f79acff
SSDeep	24:obb51RFF+ONiv2dyRfdtMhPp/k+s4Ue1BEwDfp210IwynXSUmZtEVb4JSoNtST:obt1RH+Pv2FhPp/k3S1BEwDvcXSU5mSv

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\tr\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.22 KB
MD5	6f580f52d2d5b7b620e0a17e99b15e63
SHA1	7b9f317e78922d4ed98ad4c8d7391fe37765fb33
SHA256	04095d3eb1eca89551d434ef82351e68caa83ac554771481f89e6b93dfa5d098
SSDeep	384:sse2VBRSpTvzOT+QpFlBiMbWPW26UIE3RE2NxRnpy4xCyuExjdd5aO:s4VB0lv1QiMbdsLZ0+

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_PT\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.31 KB
MD5	064184b4d116e7ad3918bbeacab62903
SHA1	6e3edacd8f0a3e976fef0cbd918fb3aa27f765fb
SHA256	15ccd632fb1079776c1098e07064ef97920e436a02da12a8d40c1fd4eb0438e9
SSDeep	6:ifPC7pI7zKB1WHKEw+K+DgOpHfe8zMN2DJG4SG3x3nilIByEJFKHof4Wljf:97puecqAK+zpfewMN2DJG4SoViyyEJFr

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.02 MB
MD5	2a2edc73b1ad059afebd6b9f7d775deb
SHA1	abdfcbfc8b88d4832522d1bb169d9e4f225799cc
SHA256	e8d679854c284c7c21f1eea465782ea406a3590a2231d0cac714aefb78459aad
SSDeep	12288:QOqh6gzR2oGfSXHt6RBgIyaBFDZAfoVLYSwvdAiNc0tvJ32TE:k6gsj8MRegZAfo10VHtRkE

C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ByGxsyPX0i\2vnf21Uh.mp4.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.67 KB
MD5	0502cd4a2603550bad04709b65d40f16
SHA1	54e42c8fbdd80372222aa0c96549f299e9e53de0
SHA256	aaca4c52d972f181a33469f98554168842cc1c0911e644d2dec3e02051e9385b
SSDeep	384:ujj566G7QBjTk7YZrV1hfZl0lHsnIYpRWFBB7pHv:u56b7QBayrBB6opROB7N

C:\Program Files (x86)\Java\obvious.exe.locked

Created File

Binary

Not Queried

»

Mime Type	application/x-dosexec
File Size	73.50 KB
MD5	500fb7072c45ae2966d67fbf64acb673
SHA1	aaad3cb396c60cb7fd88e67162ba51a9a1fddb5b
SHA256	50db28528898b01727a6f42b012d6df019ab817c09958212e99d319314d0c1f6
SSDeep	1536:5VGkuHxJW9e8AE2ksW2hGajxd5Qm7foQJVsWN5mcd4mJ2USCyE9I:MW9e9ESPYcx8mUwV5H4mJ2UByEK
ImpHash	7beef14680444ffb4c53491e56bb9187

PE Information

»

Image Base	0x400000
Entry Point	0x401486
Size Of Code	0xa600
Size Of Initialized Data	0x8600
File Type	executable
Subsystem	windows_gui
Machine Type	i386
Compile Timestamp	2019-01-08 15:17:04+00:00

Version Information (8)

»

LegalCopyright	Copyright (c) 2014 May-Schmidt
InternalName	obvious.exe
FileVersion	25.8.5.32
CompanyName	May-Schmidt
ProductName	Brand Extensible Synergies
ProductVersion	21.21.0.32
FileDescription	Obvious
OriginalFilename	obvious.exe

Sections (6)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0xa5c7	0xa600	0x400	cnt_code, mem_execute, mem_read	6.64
.rdata	0x40c000	0x584e	0x5a00	0xaa00	cnt_initialized_data, mem_read	4.84
.data	0x412000	0x12b4	0xa00	0x10400	cnt_initialized_data, mem_read, mem_write	1.74
.gfids	0x414000	0xac	0x200	0x10e00	cnt_initialized_data, mem_read	1.4
.rsrc	0x415000	0x770	0x800	0x11000	cnt_initialized_data, mem_read	3.0
.reloc	0x416000	0xdc8	0xe00	0x11800	cnt_initialized_data, mem_discardable, mem_read	6.49

Imports (3)

»

USER32.dll (13)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetMessageW	0x0	0x40c108	0x1128c	0xfc8c	0x173
DefWindowProcW	0x0	0x40c10c	0x11290	0xfc90	0xa1
CreateWindowExW	0x0	0x40c110	0x11294	0xfc94	0x71
RegisterClassExW	0x0	0x40c114	0x11298	0xfc98	0x289
ShowWindow	0x0	0x40c118	0x1129c	0xfc9c	0x320
DispatchMessageW	0x0	0x40c11c	0x112a0	0xfca0	0xb5
TranslateMessage	0x0	0x40c120	0x112a4	0xfca4	0x33f
LoadIconW	0x0	0x40c124	0x112a8	0xfca8	0x223
LoadCursorW	0x0	0x40c128	0x112ac	0xfcac	0x221
PostQuitMessage	0x0	0x40c12c	0x112b0	0xfcb0	0x271
UpdateWindow	0x0	0x40c130	0x112b4	0xfcb4	0x357
BeginPaint	0x0	0x40c134	0x112b8	0xfcb8	0xe
EndPaint	0x0	0x40c138	0x112bc	0xfcbc	0xe9

GDI32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
TextOutW	0x0	0x40c000	0x11184	0xfb84	0x317

KERNEL32.dll (63)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateFileW	0x0	0x40c008	0x1118c	0xfb8c	0xc2
DecodePointer	0x0	0x40c00c	0x11190	0xfb90	0xfe
WriteConsoleW	0x0	0x40c010	0x11194	0xfb94	0x5e0
SetFilePointerEx	0x0	0x40c014	0x11198	0xfb98	0x4fd
RaiseException	0x0	0x40c018	0x1119c	0xfb9c	0x440
GetConsoleCP	0x0	0x40c01c	0x111a0	0xfba0	0x1dc
FlushFileBuffers	0x0	0x40c020	0x111a4	0xfba4	0x192
HeapReAlloc	0x0	0x40c024	0x111a8	0xfba8	0x336
HeapSize	0x0	0x40c028	0x111ac	0xfbac	0x338
GetProcessHeap	0x0	0x40c02c	0x111b0	0xfbb0	0x2a2
GetConsoleMode	0x0	0x40c030	0x111b4	0xfbb4	0x1ee
WideCharToMultiByte	0x0	0x40c034	0x111b8	0xfbb8	0x5cd
UnhandledExceptionFilter	0x0	0x40c038	0x111bc	0xfbbc	0x582
SetUnhandledExceptionFilter	0x0	0x40c03c	0x111c0	0xfbc0	0x543
GetCurrentProcess	0x0	0x40c040	0x111c4	0xfbc4	0x209
TerminateProcess	0x0	0x40c044	0x111c8	0xfbc8	0x561
IsProcessorFeaturePresent	0x0	0x40c048	0x111cc	0xfbcc	0x36d
QueryPerformanceCounter	0x0	0x40c04c	0x111d0	0xfbd0	0x42d
GetCurrentProcessId	0x0	0x40c050	0x111d4	0xfbd4	0x20a
GetCurrentThreadId	0x0	0x40c054	0x111d8	0xfbd8	0x20e
GetSystemTimeAsFileTime	0x0	0x40c058	0x111dc	0xfbdc	0x2d6
InitializeSListHead	0x0	0x40c05c	0x111e0	0xfbe0	0x34b
IsDebuggerPresent	0x0	0x40c060	0x111e4	0xfbe4	0x367
GetStartupInfoW	0x0	0x40c064	0x111e8	0xfbe8	0x2be
GetModuleHandleW	0x0	0x40c068	0x111ec	0xfbec	0x267
RtlUnwind	0x0	0x40c06c	0x111f0	0xfbf0	0x4ad
GetLastError	0x0	0x40c070	0x111f4	0xfbf4	0x250
SetLastError	0x0	0x40c074	0x111f8	0xfbf8	0x50b
EnterCriticalSection	0x0	0x40c078	0x111fc	0xfbfc	0x125
LeaveCriticalSection	0x0	0x40c07c	0x11200	0xfc00	0x3a2
DeleteCriticalSection	0x0	0x40c080	0x11204	0xfc04	0x105
InitializeCriticalSectionAndSpinCount	0x0	0x40c084	0x11208	0xfc08	0x348
TlsAlloc	0x0	0x40c088	0x1120c	0xfc0c	0x573
TlsGetValue	0x0	0x40c08c	0x11210	0xfc10	0x575
TlsSetValue	0x0	0x40c090	0x11214	0xfc14	0x576
TlsFree	0x0	0x40c094	0x11218	0xfc18	0x574
FreeLibrary	0x0	0x40c098	0x1121c	0xfc1c	0x19e
GetProcAddress	0x0	0x40c09c	0x11220	0xfc20	0x29d
LoadLibraryExW	0x0	0x40c0a0	0x11224	0xfc24	0x3a7
GetStdHandle	0x0	0x40c0a4	0x11228	0xfc28	0x2c0
WriteFile	0x0	0x40c0a8	0x1122c	0xfc2c	0x5e1
GetModuleFileNameA	0x0	0x40c0ac	0x11230	0xfc30	0x262
MultiByteToWideChar	0x0	0x40c0b0	0x11234	0xfc34	0x3d1
ExitProcess	0x0	0x40c0b4	0x11238	0xfc38	0x151
GetModuleHandleExW	0x0	0x40c0b8	0x1123c	0xfc3c	0x266
GetACP	0x0	0x40c0bc	0x11240	0xfc40	0x1a4
HeapFree	0x0	0x40c0c0	0x11244	0xfc44	0x333
HeapAlloc	0x0	0x40c0c4	0x11248	0xfc48	0x32f
CloseHandle	0x0	0x40c0c8	0x1124c	0xfc4c	0x7f
FindClose	0x0	0x40c0cc	0x11250	0xfc50	0x168
FindFirstFileExA	0x0	0x40c0d0	0x11254	0xfc54	0x16d
FindNextFileA	0x0	0x40c0d4	0x11258	0xfc58	0x17d
IsValidCodePage	0x0	0x40c0d8	0x1125c	0xfc5c	0x372
GetOEMCP	0x0	0x40c0dc	0x11260	0xfc60	0x286
GetCPInfo	0x0	0x40c0e0	0x11264	0xfc64	0x1b3
GetCommandLineA	0x0	0x40c0e4	0x11268	0xfc68	0x1c8
GetCommandLineW	0x0	0x40c0e8	0x1126c	0xfc6c	0x1c9
GetEnvironmentStringsW	0x0	0x40c0ec	0x11270	0xfc70	0x227
FreeEnvironmentStringsW	0x0	0x40c0f0	0x11274	0xfc74	0x19d
LCMapStringW	0x0	0x40c0f4	0x11278	0xfc78	0x396
SetStdHandle	0x0	0x40c0f8	0x1127c	0xfc7c	0x522
GetFileType	0x0	0x40c0fc	0x11280	0xfc80	0x23e
GetStringTypeW	0x0	0x40c100	0x11284	0xfc84	0x2c5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\ca\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.23 KB
MD5	7a0b84dc4e7c22bb7f241f155760cb4e
SHA1	e3aa71692f87fd24b29226244af88dd8b31e9f54
SHA256	9e0e894877eaae37955eaa65ce1260d09bc6822fd63ebfc0308e757f58d496bc
SSDeep	384:86Tgy7btJ083DDacHv7FyxJ6F3ArRBvAOM:86MyHfXacHMeF3AT4OM

C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Aden.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.20 KB
MD5	3e664f57cd4a6968268bef3d24b25bca
SHA1	b35d9d37dc7c7134027d11384069a904059ab8a3
SHA256	e462ec49fb3febf9d85dd26df5612f6012b12ce638aff039925a6cd1636f675d
SSDeep	6:dOPjRd1PQ00eDgwuE/t91a4tB84VDiovc+:4LW03Ruc93teSR3

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pl_PL\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	3d4ae2b66deb0e33e1d28c3924358cc8
SHA1	21faab13427a428c03bda6e91f4cda412f5c5b22
SHA256	b75fa7d5966b8dbd75bb152b237b8dcc1ad27c50b5a9bd08ea705ebe300bf730
SSDeep	12:OOCLAIeUuc/3D7o+7ehL4qtv/a5yYPot4c0DL:OOCLAaD7o+yxt3aHHDL

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 01.wma.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	197.23 KB
MD5	82df96c071f02aa58480c0019666445e
SHA1	cd983ae5a9ff780fc7bec7b23ae799b1e694e7cf
SHA256	85d6b75da3e236e0e060e41fea68ef30f85cb5b596a755749e43644ac21f591b
SSDeep	6144:AES+7BgviwVqhgVfNz/nHco7MmJDNVL0uugh0tk0K:NbwieYgVFDnHcfKJVL0uue0ta

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\LOG.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.33 KB
MD5	71d5bb51ce65d1fcc9605adf7f937f01
SHA1	0e2058d58ebbe4bc8066d6feb2f1b39c40afaab5
SHA256	78db01b1b863ad92654dac207962615213c735f0313e257c7be8d022f6536b9a
SSDeep	6:kRHID1u/FnAQLdO9E4/Jnn8UzOGaxM69V/FAz4AbBmeT+ZV0Sn:88kFVAB8PlxMsFAz4EmvZ2Sn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\icon_128.png.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.42 KB
MD5	18c5bfddced474226c9a2c6dd54b9618
SHA1	60d2db99ce9052320d74b107b91e0199a742a6bd
SHA256	291555320fb57e5e19881ed9febfb2ab85577882ef71513209397bc9c8e02717
SSDeep	96:AH6cgK9rwWYJQT0Z+wlwOfc43YXQjk2zBbqP1781c:AHIKUPgwtZ7bqP66

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\vi\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.73 KB
MD5	db883e36c84fc7c0093bd9b22d16352e
SHA1	f8b249d8f13557ce645725b15f3f753f8eb0c24a
SHA256	4892841e32e5434310f736b251f144ac5749ab28761474274f929bf1ebcba9cf
SSDeep	384:4PPnpBDkPA4rhUELr1mALFTTjn9KLMp4u6ZSAaIVaIVjJgnji:4HnpVkPxH1PFBKPuCaIVfVjJgnji

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	651.48 KB
MD5	ffef24088a0f0da083941f3a9fac9362
SHA1	0889b43b41d743d6f675a4738ea6b4ab67ae26b6
SHA256	f4e829a4d90692c4d218df54c8d5e3e10ede652502eb2ee639c5e09321e89a35
SSDeep	12288:KIzvAPv2akJt+QiwCca4AzcdgJhNa06U0PekWR8HxuxYLqDZnf:Nv6Oaw+NvTIdgHwQ0mRNxYQZnf

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\Firefox\Profiles\silmbjec.default\Cache\9\E0\F17B2d01.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.22 KB
MD5	7828cbee138ac35297716b1e92d0d6eb
SHA1	12828b5c61e12a4b6b13ba7a71f05c204711487d
SHA256	a7aaa382606940c1907eff6b26f78a0f3004b894d90e3d1feaccb0743ce4c948
SSDeep	384:2si5V3jrmo2a4klygHVF6YHh8AzDTU86HeZlv:2su+pPcyS4YH6wDKgh

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\ta\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.70 KB
MD5	9f184f05a662ac700dcbceb20d3a6f95
SHA1	007ab13b62a4062f4c9d36d64d3f1f2246d75c59
SHA256	f229adc4ca35d4024ac8cc245d3c14e6c3821935ff1cbfbeb7568c451ca641f5
SSDeep	384:vezdVcCU+QjRwHUfwZXJFrD/yjkr466/avYbKbVxri2/0viSFVn:vWdVcWQjiHFXJR/ld6/aZx9Rehn

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.33 KB
MD5	a109196699644555dc70805ed807d07d
SHA1	7b06177cd549f5524484255fb55adb9f776a7d01
SHA256	97913a08be1dbfc176e481c931963d462f041a6aa9fb5996cd449c918044471f
SSDeep	6:+0LOFVvlAMBPFQHrsIKkAcfMebuFCVnnVF+eVwO7GwuzkI5VhBTSyE7YR/:1y9PPQHr2cfMebZVVFNVwUGwud5VzKA/

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.59 KB
MD5	5fc7c29111802681e1638c24f1cd4250
SHA1	67def3dbcca0f13f76a90e40bc81bb7ce8b52520
SHA256	5fbb3620b5e54ec135e5a23894b7bf9cf8d33c402031fecc978f4a0fe33f736d
SSDeep	12:C98d+F2PRESvzu0351lEL0Jv8+GfVAp2dHiaT/+TjSGlL/M5zbhR26RWFE+SceiQ:S2K2z7p1l/GZYE+PZlLUtbDOJS6Je

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\uk\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.38 KB
MD5	b3c8b094f803544e0281c3b5d1586191
SHA1	7cb5b6c016ceabdef4ff00f26d2ee5a8175fad50
SHA256	71cb87d96480bd0b0152f888b09794ca1c782e59f707dd9b63b686b3315c5868
SSDeep	384:Ooch6b1s7TteRvNHnxFO0nU0uSYvmJlUtQnoyy5x+A6EXheeebH2zSMeh1jCOP1P:ZcEb1svtchx4v0uSbl5Q9XheeebHWteB

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.16 KB
MD5	608db7bd745933688e1547943c9e1d6b
SHA1	18e57647e7007ab83b8d9a18b869015eadd46aa0
SHA256	8db773a29a0c8d24a48ace6ab4d0f2530b27341ec43a7a4cdb8b25e2bf7b24d2
SSDeep	384:dXsD1u+7vS+hBLEg8OGErWvjZbqQTqnhQ+e6/T:dspu+7vSsyArGjZWXhe6/T

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services\DEXShare.asfx.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.78 KB
MD5	38165a33f7932cfc98d1b41309724619
SHA1	4ed53290d58072223e7b4080a72fb0398371af32
SHA256	4f3279d3d7d71aca986565ec9f4d05d34d38d5a02a30512e509f13d2f8ec8601
SSDeep	768:UwQOBgIgdaxnxV4647cknIiItYTmm/apxfA+Muk1+9R4hYPbum:UwQPdaxnxV46JknIiI6TmmCpxfAN+4hu

C:\Program Files (x86)\Java\jre7\lib\zi\SystemV\AST4ADT.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.38 KB
MD5	cd481ae388d92a30d8d5b3a66fd913c9
SHA1	09c846396c4baa5ec9edb595fc571b483848455c
SHA256	381500319e4ba51241dde7af4fb40f9922f3fb143d003de01e47a735e8237f1c
SSDeep	48:q6GxRiUJAM1qzU3XkZZE9YlASD8aO54lDc8JvuM4oP3SSmClkt:qo34kZAYlASDWu2M4oblw

C:\Program Files (x86)\Java\jre7\lib\deploy\ffjcext.zip.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.33 KB
MD5	fbe15e99b3de8705a8cc0b6f9cebe818
SHA1	d8ecfe6a47e54d80cf096e0b5b9bc1bb8b1b28f0
SHA256	d505d0a8556b3e5822953447e7b8002813952bef6025bf144f36adc5b33ea9e8
SSDeep	384:aPntpR9KuhoFIUAn46jKiYeAc/dJQF4E1Z9NcmLDRntvK8:aPnRAuEIUX6jKUAYW4MZ9i0Dz

C:\ProgramData\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\cab1.cab.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.70 MB
MD5	3335aef947261396ac00355e1345f773
SHA1	b56db60304d90365afba721d8e036c599a447efc
SHA256	523a4fc31e7d6ece78cdba09da80664af8e02c43f5f6811abb26475151001337
SSDeep	98304:JkGPhAeLcoJzubMS4QGRZNaD7vVoqBYXm92i3K47IhYJX/ku1K:JkGPhAe4qzubiQmw7v6qqXmTymK

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeFanHeitiStd-Bold.otf.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.24 MB
MD5	f01b68db51899cf09cea78d770f31f0b
SHA1	a39b120572d8ccb64a0474dafe90356ca16990c1
SHA256	023b7c01f1f2875cce24d638b01867f19c113263f9099e31ec29b62be6542f80
SSDeep	98304:yXRrRl4cJUgrdBSS24HPq4GO65XxQh2NkqXXZNKDRDEXw2Tu8O5QgMAUz9qYzMmA:SRrR52gxBi4HCLnEh2Ndoiwyu8+MnzEb

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\manifest.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.06 KB
MD5	c9ec48e2c4fe4224d64b974adda033bb
SHA1	7489cf837e7cf5a470952149de12e6b1448bdb2b
SHA256	878cecb9fb9240153fa3daf7d376b1cc233a73ffb4ba635832ac599172152406
SSDeep	24:xiuaTW/ctGD6UQ4pGAlg1EsTZ6EC1tlhBMOR127gsZPZgvSf7:xbyJwGTEl7zlUZ7f7

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.1.Crwl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.44 KB
MD5	563138d21e41bc909de60b7e75d7791c
SHA1	6b8dad1fcb3187c88b90fa02f80e01be664d696c
SHA256	97a6d50d9bd1e1b3324dd0e619e73f202234ed22d51e4c63d433987860bace39
SSDeep	12:iBRBeLshrPs2DlpR6dZDyCdYXMLi/ERbq:67C+JDdOZDRdV46bq

C:\Program Files (x86)\Common Files\Adobe\HelpCfg\tr_TR\Reader_10.0.helpcfg.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.48 KB
MD5	d82f328808568d81365dd4bc4e45069f
SHA1	0bcc2be5a20c3febe0eefc296cf08cb302f81c9e
SHA256	c0b28a8b843e601086a81c3b3103835fc3d801f49e031f1258f61ec0db2e38c0
SSDeep	12:f8HZIQe+zZvV9HsM/Ac43nzT4JccPij0EdnDISabryYr554u:k5FhVvV92X5nexryY/J

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrmstp.exe.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.64 MB
MD5	53d833a855d52373d400413d955c60a3
SHA1	d0117ac3261560dbeb32dd8f7fbfa645ea54d445
SHA256	e651ca676b1f8f7858d274fa71a90f85307213bdc8d8b04a8c702ca72e5d9d0d
SSDeep	24576:DxRxrfudG0o8o0H8VWp0YOIlU+orMubpXsqGZSMVptgByTp7KbC2GixGXIOy:Txr2dGF0NmIlTorMubgSMDtgcMIixmw

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	0.59 KB
MD5	fa03be4d6cdf3d7c1482a70df1a07bbe
SHA1	283b77f5ba11ccace6b6e3f7e2f35a12769d5115
SHA256	6828fec32e5be4e259bb5b3fa9ab5cdecb7e9281d025d3b0e520cf98461e6c4f
SSDeep	12:ZWakqASXi1oncSHW69yGFx94+n9HTpCKQsyQwigDPn0tGVj4QpDMF41rd3:yTSYCz7r5ZQsfwJDPn3dH04b

C:\Program Files (x86)\Java\jre7\lib\images\cursors\cursors.properties.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.39 KB
MD5	27e04e82d8b653639eda1176991f1915
SHA1	54f25113dd568e0102559b04fd887cad92d6b8f9
SHA256	db0f9734cf068aa40eb0d16a973b9251ec30bb02aef239805379adf7df4fa58e
SSDeep	24:SKmxIT5GvZ5fjO+zW0NsUzx1XCGiKdfN4EmNteY1iWkyKLVp+LLCzn:8xIT5GrfjXW0NJfXDj4BW7SfCz

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.64 KB
MD5	802f1ebc586d3a7aab7a4518995bc468
SHA1	70d98d469dfbb05a8f4999ccfa62f191fbb90af3
SHA256	c7691ab894fb31904afeb5bc05311ace79260e61b1c20bdee7d7a3d754fc6aa7
SSDeep	192:FsWsLw/ZrpB5pmIEFMYpHVsPjmpjOsx2X38S7Zxow5lyC:FsW1ZZpmIEFsPjmpjOsx2X3VtX

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\VBE6EXT.OLB.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	40.14 KB
MD5	6bd46f136db1590cc7583298025db886
SHA1	275bb9c3b40c0b46b2acc77b9b01569b438cb4e8
SHA256	a335b58b0a237cd3c398ebd41d314c58e5491c2c78f5dce9631e82fd33efdc23
SSDeep	768:xbWZDOG6frRSoEwNwc/bJ9Lkp2lyl+0wcP5AWq18pSjg:xbWJMkwNwc/bnuk1ceWnY8

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\nb\messages.json.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.81 KB
MD5	f7bc8ae7d088165681f8e139177e1039
SHA1	2c7dc106de102496a0dcef8c5689d888a944120f
SHA256	32162eb2440029f29352611ebe6de54b2b09a44a0bc5f97f11ffcb0837341345
SSDeep	384:OCqy6WnqK1BnPCorENB7Xghg1PKfhX6truy2gAqti:OCVnqwnqoruX+eXtrk

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl.locked

Created File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.16 KB
MD5	cce06411ca53bbaffc86f77c0833b88b
SHA1	b42859e22f0da531afa009de928866a7adb154ae
SHA256	0f443178c4f257db56a2e2cabc69f412ca822a9a24cac3b0b89cccc196374aa9
SSDeep	24:xLhct2ugDdlaKpHiv6SyvhalV14CubWly5XPTyL4UT8OSxBp6Hsn:hKthgxlaK9SB7iPA+PTy3TPaBUM

Notifications (2/2)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After