e2ac9692...a787

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\White.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	35.50 KB
MD5	c7157973ae9bfd04f871e9b80c4b0644
SHA1	826e0e9d7ce6d614238e93d48b3a5a0c29aa3c0d
SHA256	e2ac9692c0816ccd59d1844048c6238dc5d105b0477620eeb1cdb0909804a787
SSDeep	768:2mOHkWx/vS4BZimJOLbVxlQdPAyI1V1zatwv:2mOHkE3GmJOLbvlwAyI1V1zlv
ImpHash	f34d5f2d4577ed6d9ceec516c1f5a744
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

File Reputation Information

»

Severity	Blacklisted
First Seen	2019-06-22 11:29 (UTC+2)
Last Seen	2019-07-05 14:34 (UTC+2)
Names	ByteCode-MSIL.Trojan.Blackheart
Families	Blackheart
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x40a22e
Size Of Code	0x8400
Size Of Initialized Data	0x800
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2018-03-24 15:59:42+00:00

Version Information (11)

»

Assembly Version	1.0.0.0
Comments	-
CompanyName	-
FileDescription	White
FileVersion	1.0.0.0
InternalName	White.exe
LegalCopyright	Copyright © 2018
LegalTrademarks	-
OriginalFilename	White.exe
ProductName	White
ProductVersion	1.0.0.0

Sections (3)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x402000	0x8234	0x8400	0x200	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	4.69
.rsrc	0x40c000	0x588	0x600	0x8600	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	4.01
.reloc	0x40e000	0xc	0x200	0x8c00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	0.08

Imports (1)

»

mscoree.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_CorExeMain	0x0	0x402000	0xa1fc	0x83fc	0x0

Memory Dumps (3)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuilds	Bitness	Entry Points	Actions
system.core.ni.dll	1	0x7FEF00A0000	0x7FEF03CDFFF	Content Changed	-	64-bit	0x7FEF0160EF8, 0x7FEF024CB20, ...	... Memory Dump Actions Download Dump Go to process
system.core.ni.dll	1	0x7FEF00A0000	0x7FEF03CDFFF	Content Changed	-	64-bit	0x7FEF0160EF8	... Memory Dump Actions Download Dump Go to process
system.core.ni.dll	1	0x7FEF00A0000	0x7FEF03CDFFF	Content Changed	-	64-bit	0x7FEF0160F00, 0x7FEF024CB20, ...	... Memory Dump Actions Download Dump Go to process

Local AV Matches (1)

»

Threat Name	Severity
Generic.Ransom.Hiddentear.A.A3A73378	Malicious

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_route_details.js

Modified File

Text

Malicious

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\HGIjdA7eq2Xc7yvb_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	text/javascript
File Size	232.84 KB
MD5	d53b98ae34a46a7623626f01d0284586
SHA1	ff6c2523e597aa864edda23b085ce7333a071a23
SHA256	0d19eaebaaacee03e6a432b592d11d60d2265950437169cdb0e40297326996d2
SSDeep	6144:BR6ARySX5u96k9cj56d/Fa0lZ/C93BTdZRkYvyNGYEP:B8UySXVcDaoq9x5T3yCP

YARA Matches (1)

»

Rule Name	Rule Description	Classification	Severity	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	Malicious	... YARA Actions Show Ruleset Show Match

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\common.js

Modified File

Text

Malicious

»

Mime Type	text/javascript
File Size	50.38 KB
MD5	98fcd76ff5fd5fd86a48f6262707da09
SHA1	c8badfa274c7dfa770d507e117f930a310a7c4f4
SHA256	2b70cf94a4741fd21d374d146aa4a67f5c895e72b3a196328b38bb800e109d4e
SSDeep	1536:1F/2xfULPxqq6Sfe9wLPrF5ueSLdufik4MnTb:1JPdYS3jF5kLMfBBTb

YARA Matches (1)

»

Rule Name	Rule Description	Classification	Severity	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	Malicious	... YARA Actions Show Ruleset Show Match

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\mirroring_common.js

Modified File

Text

Malicious

»

Also Known As	C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\O46MCRADkWf1eiRJ_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	text/javascript
File Size	171.73 KB
MD5	0e62aeb9e2021a82f4b5ff7aa926cdfa
SHA1	b47cbb169cb75c2d6ec724c54d435143b63ed98c
SHA256	b9d905475e35ec4a4c1b6797ae0b4db26ff93d6e8f3bfe56de76a78322028a05
SSDeep	3072:GF5yyWfPxBJ5PJaJIigbGxdIiXbah33ziQm6RrNi3D6df0Y5G6gFSz2Tisug:QghrigbkbahWuVI3Dyt5GLFS6Kg

YARA Matches (1)

»

Rule Name	Rule Description	Classification	Severity	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	Malicious	... YARA Actions Show Ruleset Show Match

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\cast_app.js

Modified File

Text

Malicious

»

Mime Type	text/javascript
File Size	136.72 KB
MD5	1e3565e96d63b7acc42e9fffc4025104
SHA1	a47c9fb4c0c0c840ce5f6034a3feb378012c3eeb
SHA256	394b29873dca1e59392653497fe1d5c4649303b1c481a6bf38ff294e411105d4
SSDeep	3072:l/Noty/ozWwKEDULuUQ2U7wD66nlqwMdXckZTBwN3lj2TT9rI:l/Noty/ozrACUe6lqwMVcGTGj2T5I

YARA Matches (1)

»

Rule Name	Rule Description	Classification	Severity	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	Malicious	... YARA Actions Show Ruleset Show Match

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.36 KB
MD5	6920613923a1f23d0ddc7e1445285c36
SHA1	b58dae393d6ae52e4a060e2330ef00e66177b3fd
SHA256	6d8fa20721f9a522f2eeb5ed09825ebe2069659d01d1efb1067f2af6029e6cb4
SSDeep	96:BLVMu1V+LnPcCjVFAeJ8PM61DUqwyQlexZlj5xTB6zHze8neb44HT867:PMWI0gVBJ8PTFpxvoHy8CI67

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\07A3lpMWHSDcuLLu_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Also Known As	C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml (Modified File) C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\6g8F2hNJAgnDmKCY_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/octet-stream
File Size	582.62 KB
MD5	8554b79c7ee4ead2694b89e988668286
SHA1	a42b877c104d61f5105ca634fa49a2c03a5d5eb2
SHA256	b1651d486641c899c89f4200192007d580864d0a15911294614de8db080f0f93
SSDeep	12288:YzB05+R+ZrKqC7HJ/eUAwnQMLqPLLOz5wb07SWnKVNMJcOVaRe:IA+R6+qu1bQ08nONwb0+WJqiac

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	20.36 KB
MD5	2004b2c5b035b025feed451d5edecd38
SHA1	fbf1cf3a12eb2e043202ca002be3faa07ba90d7f
SHA256	976936f5f3b4c55c36fb3e97e9c0f558f90de2d1989c795d0548187f1ce96c95
SSDeep	384:/Gkg7hNiNZb20KMdH2nHMhLPBlArtoA3rhzPozSK2suczrnNO:/Gk24NZb2pLCLPBC9zgzS8jzrnNO

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	457.48 KB
MD5	52b5fe6f8b132dda3417b1651efa3b68
SHA1	1c53d39af0ab75e0d45359bb84c25f6a70d2525a
SHA256	37e85f404d589c67d6c0577e5b17aad5c9285156fff204148608f180f5e80506
SSDeep	12288:At6P+c+cItibTSa/S4k9BKxkYhwyi5JnvOaQFU5:7P+L25kYhwyi5d5
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	20.52 KB
MD5	7a07743adc3a97bf83b77ada06ef8af3
SHA1	88a2d633f71da5230dce60f5e1d6c8f8eb9a4720
SHA256	f415d7940cb3b24f76fc0e37d922d2ea1db8db5cc255259cdc4f209dcb880be8
SSDeep	384:r0Ez7Zyt16ZUMsIl+/clzLxGRSqIySYgGI0jllmj4l+GxeUdraRFa:r3HZc6WIiuGRsyS/SR+Gxeym7a
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	88.34 KB
MD5	aab71f73715f1f2f30abf942488b365f
SHA1	332bc037ac6ab109d66b0c69e2d95b4fdcd5a164
SHA256	e1daf9f98bf8b51714c61ceb10571866ba1969d93191edd8d8a50062b1b93df6
SSDeep	1536:S4G6HzeTIHGwHLXlUDNwqH8rotYsSTOGygt76FcMEa7xPmF:S4G6HzeEHGwTlANwqJtYEfgt6vr7E
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	65.98 KB
MD5	da77b080d622dd76853589b86978cb77
SHA1	af476672feb46e03db9f7a04c73e720faef10357
SHA256	3a670d3134327a5adc01ac9d09758af9f5907f565ac86e83c4c38b1249f3dfda
SSDeep	1536:iMsZ1/bcTX/MI8Wc2lgQsJ9ZkUeHmnGzWPa5DdfAA:kZ1jczUIhcGgQszsCGiPaHAA
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	79.02 KB
MD5	64c26301efc78da770639e7bd0430b5b
SHA1	fb3574ec6cb51b577045d0459aa78c12aa693419
SHA256	53caca8c8eb0ed8dd78f1607fe5d8fc5e9e7b85490b230e797108a2b92ff48f8
SSDeep	1536:ARlbP2U15986rQ/wvIMac60V2tUWNbgmDL4ugh1CXJYAU9KK7FW1Ep5d9:05P106rpvIMrAyKLpD3UY08C9
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	66.94 KB
MD5	a2b310e7a2f2c29af856123f969e9486
SHA1	604b7dbb33c460ead04b4fa75b6e4cfde7685d6a
SHA256	cc64f32928a3fc480c26716627dcf416c064286d1a1261f990354d217daaa227
SSDeep	1536:IS4oncPUPVlNmkyr08Hi0G/t8aW5nWbwncy/5:H4mcGVKqb/05WbwJ
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	17.19 KB
MD5	611ebb0f0953bbb3892e29862645cebc
SHA1	0dc38d9c4d48b26c1c6d7c453b8d4892a54bd17b
SHA256	c2cfdb4865392dd3b4303821e8388be5ca05ef34ff0ea52ea0605bb23e394afb
SSDeep	384:JsPckl6KhN8gKMs0MrJbYkfBWlHLtUoJHtOmh1yGbi+y9:CeENrNIakfYZKSOmhLbM
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\jqfPAittDpwttukU_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	66.53 KB
MD5	874559236aebc8c3ae474127eabe1d1b
SHA1	624596e31a3854fff75a76420ad2ed91db92a364
SHA256	427ea28c9682bfcc18f72a8c15082bbd1d32b15e2233351b670fc93d62e33b27
SSDeep	1536:Gzolx6/W7IV8/rhLhWCtJ2eaiDw0OSIAFrGLMfvq:Gw6QlhWne1ySIor6Mfvq
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\1iYK2IfhMmis3MeG_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	65.25 KB
MD5	1e6d1fe79c6109c7a8a2ccda46b5c27e
SHA1	6003f88216dd256eb61dd0595917c21db3e8bb95
SHA256	fd8dfcb859ef6c21fb33ba4193e2b779ca25d05bfea0fc0463e574a08ca603c5
SSDeep	1536:Bth09pja4FY6YG5aMBf+eTswnMahEnoDFdog5CuPdqG1qG:mra4mEUyWsinUog5CG5
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	22.58 KB
MD5	a84fcc29b884ac63bf8aaa945870edab
SHA1	14c596d6847eb4a5aa317589ff2810c5a7b02da6
SHA256	da307d05574f6bc8438c8330fec9ae7bae126e649e6281380143f0868a063fca
SSDeep	384:oeLECUYLquGsFPflmqEKKCC4H8xEYfQE5wojhVFRvqDbLpQyLbHw9PjfMoSJw:iCUYLtfPNmqVFcxN/wojhjRSDb1QyDwR
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	21.27 KB
MD5	1a2b71a0c69fc807c4874f577df99215
SHA1	93ebe878aeadfeea62e10937bb73f8e2b0ffecf1
SHA256	fd432ef8dd01a132e937072d8609c0517ee1cb18b54b4e048081f9d76db001e9
SSDeep	384:/MvgQp5BEOO6dkvOELE7SnWIwXDgazGT6ktYGi6q+h+MytIZZOXyMyAq/J6L0fr:kgQnBEO3yvxgunW1DgToniyafVMyhQ4T
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\KJzZ7x1W3bCW9Gdf_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	22.55 KB
MD5	9443c84848941d13ef74b15a7862f87f
SHA1	128a36c787c5e9fd4db57bd9a66027b01226decc
SHA256	64f8c7094f0fd3693fcc218fc8ee491f9932fae13a8528d01b26c9c60e487253
SSDeep	384:H0nkMvn9plNXWYAvWzKDxEj3Cd8n1Q2sG9XpYbosAGojnJOSTiMwaOYUascjGAFP:UvPN+yWI3HvbsbosgjnlGMwaOYoS
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\yJ5yPLHroRvUNbiA_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	65.27 KB
MD5	7093d41497b5ce029c72736418a1862d
SHA1	90fa9ce28a936fb6d6c8bbd1172f02f59bd0aff8
SHA256	8c724cb6a7777f4f08fbf33c1d608b3ba655b8967bd9ae281b61f662d91d5510
SSDeep	1536:K1SNHITEBi54Lu4jCUg8rGjCBV+9kaC3BaunTrqyFf5Dyfe:XphgYPuUgyGGC923BzrqO1Ee
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	66.59 KB
MD5	06bf491e3cfbf0ed0e7381b446571f5c
SHA1	cbed70752192242a23edb4608c7d1df35f739542
SHA256	0080e6402b90ad056ddd6aab92128213814b02fffafff6add467f02359b26845
SSDeep	1536:Tm4HivhJi8GUBdBSTNdYZrEEs4vyveG8YnLOv/Ta+:TIvLi8GmBST3Or/yHCv++
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	65.31 KB
MD5	e4911ba66feab0dd4affd73bb21543ed
SHA1	0504239c955f157d66c294381d6a7aedd98b5b0c
SHA256	7084f99d69b2638513e7861f904816ef0158d69c3c8e50c9cac58d07254041c5
SSDeep	1536:+v069EqkoOLvg9vAUVcUECK6D2cABnnTPdiRoAU4o:8KqkoiEvAYllJ2/l5TApo
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	155.42 KB
MD5	4c05057f24e03c7e7af441e19612d834
SHA1	d5b98f4a14837f279cb0b3d489363308e2d1e1f4
SHA256	01af626020e5099d306871b8971f9feeb308a473486fcf48891e5f4974dd6f82
SSDeep	3072:1x33JNCj/c+Omr+oVNVW33jOmQpAZ2pfzT8yRz/H/koHJt7eQd1SfDoErZ:1RJNM/ZOY77myDDR7xHHSQd1WDTZ
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	151.58 KB
MD5	23259bd575e97860ab0bfbdc9ede770b
SHA1	06d7a512dc3157f46849b82dbf314b9c6cc7de66
SHA256	5bbbc9db2a0062cb88ac9ec4ea71689d7f99d01e554fd1524d7a59635f1aea49
SSDeep	3072:qMCv24jxYND+NoOATMOUzBN+QvfBK3iYju2T8EVlFQ:qMbnV+5P9Nv5sK2T8EbFQ
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	69.30 KB
MD5	16896558a7cb3482bfe876bb6a5d0e5f
SHA1	9c1bd3f575111144c853cb93d385b07f34bcea94
SHA256	a3935748be9c4a65e3f4c62cab17ec4d11a42bdc82f134e6cc9471673bcceaab
SSDeep	1536:UYM1cO66bKwG/ZvwxYmiaorZj0U+lWjKahSh+Hx0a47+Rlm4OJiuH:UBpbKjZvMiaodj3+ojKiqkx0a47+Rlmd
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\MzYTWSIWKlkVAdF9_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	120.38 KB
MD5	c74f4e8744d805833932f27cf81f37fc
SHA1	b9326d5ed63e957255dc8ad28d080e365649a59b
SHA256	03de49a852f0beafd78a7c5373ab6fb79d518942950295223eb8382c75a82537
SSDeep	1536:xeiqqRP1SczfSraKBjpZn6We05I1QthErlylq3PkLjXn0CMsz/5ljQ+pPEi4z0xf:zq6tShdn6WvNeBlmjkUDjjPG03dNgw
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\trGNmivLSi8V0vyV_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	116.62 KB
MD5	7191f47f7818f91a052285309bb3558c
SHA1	8a16848a986d830e34c399f97172698eaf06dd55
SHA256	fc1355b80e91b8b7f1b960dc23403d7ac87e0624ea92466f430d84dc6419a8e2
SSDeep	3072:o5U7Gm0d72KUrsFI4Xd3iz6x2w88cuPhK8Pv:VGmkksFI6Fi3w88cuc8Pv
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	295.69 KB
MD5	346a4696c4dc5f43b89dcef8aedf9005
SHA1	17249a7e7007feb544166ef52d4b84f497f7294c
SHA256	621681c12348af14754b3c799a489b6505e93a896de646849a4fe42fb7e7b0b5
SSDeep	6144:+Mu7cqyK/IrnEWrWyh0aKReQqxe1PcZkTuk7G57f+bS7TIiOrrO9UKGfHphah:+MQLQrnEvyh7GHqxe1YM7y+yMiOrrOmk
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\license.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	68.94 KB
MD5	fc984140b41ccedc59ec5daba2b837e3
SHA1	84f2bf9585b867a5bdc690feef96012f56b27412
SHA256	4a12e9508530eb437c89e20e1d7f6fb022427ae5813ed0237c9ce1ef6452e9a0
SSDeep	1536:e7IXW4uZUQ+/oLK3BbH5U+rGSbj0wQw9hDaNYy9/C15:e7l/ZcokZTV01wrRy8
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\UBjnb7t1zMnMBJbv_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	text/html
File Size	119.31 KB
MD5	89028bd97ec470ba1d3ebbedbed84cf3
SHA1	4630e0967bc188ea8de067942ce6d707f8fc1a37
SHA256	d2578e2a8a16efba4304dc2d0b3360f59336538c0f6c1c49809e799d64285e05
SSDeep	3072:KE5n44pgFN2In9ouvrdYnrxIsxGN8Mo1ZT5zg9:1ld80IfiGswis
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	99.91 KB
MD5	087d8558b6c60f64e26bb080870c9d85
SHA1	4105a2659f2c9c05963960d5e495574cc2f526cd
SHA256	96ee637eab2167dbe7c4025a0c685f9840402e3c04fdbca62579bba3369af7cb
SSDeep	3072:U5HZS1UPN2BilJi4LzKhSU4kCMQvSy3nvLupXjIVr:U7bN5LLzKwjLhqkeX+
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\license.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	60.42 KB
MD5	8277d51e6992271cce79e2610713fac5
SHA1	a34dadc10f0fb9e0d0aa1570981c82505470efc9
SHA256	7ad15cfda57065e71952e42c4f8219aa7529a09b0fdf0da1de56fb31eee51e5d
SSDeep	1536:KmUsc1TIMYvgiPO2GPhTL66WWZv1lNwcrRxkfQpLOtlVmI07JSNbA:KnsoYgPhTe6WWVvNwafuqSnNyJOM
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\license.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\LIOSrmVSElFOiaKt_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	text/html
File Size	58.16 KB
MD5	02da322e5eeea24e6c85186af078a684
SHA1	77d6a7456637b1f352fab8c16af1d5ca67a8f30b
SHA256	bfb91910be7b3e360a555c35eef8b1df12f1cf2426b76765cc408f0227710d64
SSDeep	768:JycN1ZhS/9fq/JSrCbqT/MNUMP3sS7Lhm/wN3zkTg3WlwphNgfzY4UQoYWGfM42h:XNBl0raqTkNDLE/wN34c6UQosfGzd
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\license.html

Modified File

Text

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\rzvNSNIGMjrOQsEf_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	text/html
File Size	251.48 KB
MD5	c5ee6362caadacbd01c568c44d5306c8
SHA1	2c0d74f5bfcaf754f479e222f980f3292abbde3b
SHA256	067536b40f998c761b174726764cbd278cf7467d2c421bf5394c94d2991ff397
SSDeep	6144:lLRd+Vm7fBabGlWGY4HLTZIcVkJbY5tVlAHzXxy5V/Q13oUzxP:PUVm7IbGla2tXistkE52trzp
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\license.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	53.08 KB
MD5	9091fc6d36188b2041a4b8db140eaa85
SHA1	822c46f08ca14968a5020228cbc7aacb33bc460f
SHA256	0250bd317cc927a663d8efb32426c8154a7ff059b19b29f5129004b4d50addc0
SSDeep	768:faDWwxFikzFpUCdBMV/1WrkVppruxkIwrHIK41Ti+R0eGeQHTzEVT3+wKzZF2WBz:fjwxFNdkIgpVgGWHEHTzy3+3P2CEg
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	233.92 KB
MD5	975c2b863940faae30f543bdfaf2f4ad
SHA1	e9f77fbfbf96e42bf6e614d4220c7282a26cbf6b
SHA256	c5f0e3a5b3cf2b1b6770543ba75666f2acbb8baedeae1f0d10e71fc5905a2296
SSDeep	6144:PsumoRvVTxOy4pA6rVrSBE9cgOvbFnklf:U5oR7Oy4pASVOzZklf
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\BRdlang32.SUO

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.27 KB
MD5	e6b5d632b5d7c0e3a3cce1d5030003ac
SHA1	06ba5b78edc1b7e4c7a7700641893e8efbf2ab47
SHA256	e922b51ce9304044b1f9b3690812c7199d1c5306514a597aca9b15d8284a2dc1
SSDeep	384:8yZr0wn+UrVeEn/N8hoSPI0F9T715zvFqbxa:8yZoalReEXF03T7Xzvsbxa

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Multimedia.SUO

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.27 KB
MD5	2f2deb550b04ce37fb31ae199d8ed81a
SHA1	782add2a231f47f10cafcb7d7d477de5df3bf1a5
SHA256	818f95adbe2607b1ae80f03dac4908b6c8a323289cbc6c9c294af08d2286b880
SSDeep	1536:FfWK3KC8P5Fu90vYkdiM5n8NKOyWSbR6Jcc+V7lVX2NTQY/8PCH:Fl8Xu9UXdNVbUJb6X4TQc8PCH

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\pddom.SUO

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.27 KB
MD5	102edca2b8868299d5fb0cd932049fde
SHA1	77e9ac767ab0fe9f4c208d82fcce298a854b572a
SHA256	7e9ebed5a23f7ec1fb8a2b7e1a034e5259667c67ee2103cc75531b3bc8271344
SSDeep	192:G/VwABXypDnmcRjLeljaKFgnKX5vkeFVHIeScYWvVd3eFrOP0kXKVqmIUKZygW:owwX2nmcpSlmKenKX5vnIeSHOL3eQP0v

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\PPKLITE.SUO

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	502.27 KB
MD5	b54dfa656b93d7005cb95aa3ba8f5833
SHA1	457c5cdbf13fa8096ff2cbba29396a59c88306b1
SHA256	98b18fba4eac836b124b024cc2f8a8d28cf5f5679cfcd3a06918833b9dafde1b
SSDeep	12288:Tx6BNL8Od3PmlnCNSBF9Umh+aylenLE+K4ue8Opv2AoXGR:Tc3L8OVuoyFrh+aylezzun2R

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	134.20 KB
MD5	7f551130f0794db5c6144faa6dd6c404
SHA1	b6d1fa692c45b945c2a760b0d29a7507cc6214e5
SHA256	7c5fce119e2f29a0d10f33d8932251521d769b1ee1ce8cc7227cf50c4f20743f
SSDeep	3072:E2wPh2LnUHS+pVRdYmH4y+RPMkcyJVn/0Pjssm1DsbZ:iPh2LnaS+bRdFj6/0Pjs4Z
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	200.95 KB
MD5	97f200a8ebae423304b5956fb50c0b38
SHA1	0bbd93a1c40e87b0a9eaf0b44becbc530b664c3e
SHA256	80a76fdfa64bc2e7e83ed9dda645c41de1e5621a9f64203aa4dd8bfb98da01d0
SSDeep	3072:6Wuk+TSK3LuK/0gNI0IByCUJIb3HHpMlCAM6S/KjssZAGcNIGAztM:ykXKcgNKYCUJu3n2l1MqjssZno
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	31.52 KB
MD5	2f8edd496312f357ec0b946d248e957a
SHA1	4c6c5efcab86e2fd5ebce98eb55e26d933cc9d35
SHA256	3da1677bc936aae17c8c6de9939d05028b5ba786540d68bc724582b94e2a8966
SSDeep	768:gndvO3gMuNi7rN73iRm3G7RmU08zqyYONlCji9:gno3Wi/R3aWEmU08zqji9
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	98.09 KB
MD5	572b33438d7660b887c494172ef4fe52
SHA1	fd4649803e8cbf0e5c4ee1ba403df710e69dc74f
SHA256	dad2ed5cc709f99dc45d85b740c781b84592f946a62426a82f3d9de15eda624c
SSDeep	1536:MXCkX9inUg3FtDK4tx+4Taaqo1gIWpv+1W7BoX+Lj4tGH6iduZurIa0tJ0t5MR:MJXOUylKIHTajo1PWdakj+Kl0X0t5MR
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	51.72 KB
MD5	2c1fb2ae6f0e5d2ff53ab3e44ab748d7
SHA1	76ac19f222d4fa87281744720cab5f6eeeb3484d
SHA256	88a0ca898db6cc1af2f16a34304719de2316af64f890ac0fca582cd4bbba68c7
SSDeep	1536:G6QnWQaS0x/V9c3NKTwlrblE+7bzNHIz0ta:GgxdCdu+rSAIzv
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	187.16 KB
MD5	e81556846947c6c5c64d8242c5186360
SHA1	0ceb10c80c4f0c8a77689e006d1548dc34bf3ba0
SHA256	88142dacb4f4cf6d39a4ba53da427bad0a69bed3b0ff0880d65e097ef42f5de8
SSDeep	3072:tFaQIy26h+jzIsjdCruc/yL2hju/7uFb4s1a1A/o5+lnziXmDelJU:zPIIh4zIsBC62yL2pFUs1aa/owzymcJU
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf (Modified File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\UhY1gYVTSFdjEXMc_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	618.39 KB
MD5	316b2973cd6ae4f893338ea9a8ecd2f2
SHA1	a24ae62f50475df399151c15ed79641499382d61
SHA256	38dbf915dc9cf4224b0a18728b3fffbd40e0d5a3c448f8ceee7ba70fe7206b3a
SSDeep	12288:H2hko62+RJFzkDtYQC2wqnBavKX2OpWerxWVqmOXbfBKiERWBKqGt:096HRJFzkDa/ynB2LyUJOr5KaPE
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\UP5B9CIpsI6U0ga5_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	195.94 KB
MD5	9904c3d0bc04416eb87d90c0d661a17f
SHA1	2b55c3007ee8134ffe1d77afa850326c2fa16d33
SHA256	d67d25c39ea32b6a0a6e44517250514617059860df0f0b6e870003407ddd4851
SSDeep	6144:TgX13R2KVI+UoS42v9+yIu5crNkpjdQmL:LS4zVVtiZkpjfL
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	274.55 KB
MD5	24a26083daabfe102a5d97b9eb2ff91f
SHA1	f653a1084a28652746cae45ece51a262a329d821
SHA256	74f0c4fa285d9997aff927ac07169588512b3b801efc63d9fbedd23f6f1653e2
SSDeep	6144:9fzeHpdRvxcajQ777glFmHn/mgzz7U7TMttQxxm:9gdRvxcv/7uFmHn/xIYj7
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Dynamic.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	134.77 KB
MD5	52ac0eabc83f4f6c038f45dc22931766
SHA1	514e14d3cf4ac6108ff66cd643174dab7871dc0b
SHA256	b89278aa90297370ef20fa93572393f090d203589aad6c7c83834f9aeb6a02f4
SSDeep	3072:I+P9Q8Z3DRjlYn+C9aK2kqjCkxxV9zzan2wR4zNPbyb:I2Z3DRknsjjC2V9zU2D5Dyb
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	110.20 KB
MD5	2d6f272d94359832c543ff1c6bb0a4db
SHA1	0a5c67adcb6cf811c63f260bc414dbc97db0aff4
SHA256	6d93faf2b8469b593f8f440ef1c0d84abac9a97634948c1a814128a3505518f1
SSDeep	3072:DSqNWGw22t5s/fYTIOFkwAsOTJ0dN9qUJlsnX36Zak:DtnYt2YTNFkwAsC0djqUjsHnk
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	112.27 KB
MD5	3cadb28dc7e47dc9e320c7c4638dc8c2
SHA1	ca8f38ce2c256df893783dfb534eb3695fedebf5
SHA256	5ce6b8a4fba2fdfa1f97daf3810313ac493caf23172be857735f96e967bba4a2
SSDeep	3072:Xy++zJ/MHQwmoY2xlsPr76ExCONSu2oX3J2:XyzSw5L2xlsPJNxzQ
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\SignHere.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	52.38 KB
MD5	49b1709c0817a8e86a70b95326f9626f
SHA1	efbb98c18fb303fc5e02c37188a4ef829ba4b607
SHA256	20256a6b86e716d87a8eb891f7e29a750de22fcbd0c5c6bcc54445db364eec5f
SSDeep	1536:oN+sQZchAMG++T3XmmNUVgaL7P5e4z1vw:okZTi+L9NUKaL7Pck1vw
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Dynamic.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	36.38 KB
MD5	88bc519e3d2cd9006695381fad5a35dd
SHA1	149c42b480dc725901962d53e3a9b5d86b1862cc
SHA256	005978206f86d55c76c7f0ece115c87b815d588775d31ba2c4d7d17719cfd0dd
SSDeep	768:wYR/JDvQ9X00GmwwFzJpnamsBME1EIcegESnMcyAzI4mm:wY7UPzeJME1EVEidyUJ
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\Dynamic.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\xHbUImJv2zI9jDNU_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	49.42 KB
MD5	5bc3062f92ff5830a85a46eddd37f775
SHA1	d7e6102ba7606d196c822eb4a2c139dd9d741d31
SHA256	fdcd699ada645a95d516e71839e924e3b85477cacf8e2bee04048e5d66d0c9ec
SSDeep	1536:LDT7yYFcMORQz32MIbrAhR3/ZxyUnoqe7Kf8bvk:3T7vcGLkbcPPZTnde7Nvk
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\SignHere.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	58.06 KB
MD5	8f28c53157562d7f572dceac72f5425a
SHA1	52648e35e9919cbfca605035c478033d2d9796dd
SHA256	4c3c424156ad511b0f47e735304a7047cbc691e5acb775327811c4556c518be5
SSDeep	1536:H4D3LUs7j3VdkMqlC4aR3AkdqejhdmM7SpxIu:Rs7j3VKMqlC4aRrbjh4WSpx7
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\SignHere.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	40.53 KB
MD5	36ffef22efefe66e8867a78b84508aeb
SHA1	1452b0f52149b260e2477ebc22d0f371129bbfd2
SHA256	79a07071cb017517c67f0bea0c11b6bb9068879cbcc085b01a3c8b6263d830b1
SSDeep	768:A2I2ikLZGP34YLydWKIi7HG6TaiVwhEA9//5LvQBfKxpAKDSDNOC:rHg4YLydvIWeiiVIBfKFSR
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\StandardBusiness.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	82.09 KB
MD5	a91125e58ece9faec1b7c51ccb7379f8
SHA1	71bc12616bb1a4ec3168934e8c2411aa17ce97c5
SHA256	285437fd69e65010435920a3f6e7bfbe35555bc16cf2dac6a0788e9ac23e6b13
SSDeep	1536:xh06zzuG3mQH5VgkAxqOT9Qq/zDLleDeXRby5ia/5Ch0BHLmJWJCzDBFsGMgM5yc:xh06zztmQH5Kk9OZbl6Jia/ECrpJCs73
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\Dynamic.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\K78malgiyFR0WuQE_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	58.23 KB
MD5	36e354b880d827589b81d915a846bea5
SHA1	2d47210990d27e9920d39b7d144037e908eb6c0b
SHA256	26a15d579f858ca56ccb8a4bb73cc90f1ccf315ccd1a0538cce5e7c48577fa27
SSDeep	1536:zS/GAcZU9cgYuzXIFEtY9z2BYIwIsNOmIHqTvus:zSqK9fOEt8zxOmsPs
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\SignHere.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\qYPgBM49HDD9uMKq_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/pdf
File Size	39.44 KB
MD5	1883da107317622058732ebc1cb22ba2
SHA1	2d47348c91530fcc427ce7b8a79f7a6d6727317d
SHA256	eed1df1aa6c06c3b612e3dca35962fa2fe681878b2f79f1dbc033dc1b6defbd9
SSDeep	768:tlEfQKhvAvDSqSlH2x4Zr22Don+4n0b8UyMI+:toQDvNSV2x4Zr22s+m1UtT
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Faces.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\EzUGGk8jqbIbyUw1_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Faces.pdf (Modified File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\IICStlLMfshzZD2V_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Faces.pdf (Modified File)
Mime Type	application/pdf
File Size	32.50 KB
MD5	a3e717bbf50cde98dfadd27abcab621e
SHA1	7af35a08ce5408c7920b588fb434a163d890716e
SHA256	54502ab5b6dec993db914904da242ac7c9dee3d3186e909714a38845bcad4673
SSDeep	768:/1YMIWiYbbTdM1B7njXcocIA7AM5eQdBODe7FJ4dfdfca42fH:CMIhYbgZjsoxQ/5lyDoFJ4dlfZVH
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Pointers.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\bABshaja9VTE4XsP_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\W9nU7iDTAPWi8ud7_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Pointers.pdf (Modified File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Pointers.pdf (Modified File)
Mime Type	application/pdf
File Size	46.06 KB
MD5	491e33db9ad70f33d2d00b0352d02bb9
SHA1	51d9358b4cb775cd3f882dc2186205a4342ec46d
SHA256	4a06d1434b3211b8dca3a747b8e2a05af00b44045619e5201899d3d3fe05741e
SSDeep	768:zB87arT3Qc0jAhJBG7GfRrHZwxFANZW3iu8TBGnfQUjFtI7MTnD6rE1FtPF+niKI:lWaAcCAhJBjfRiDUZWSAfQyF/DGaPFO+
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Standard.pdf

Modified File

PDF

Unknown

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\SEELacg7F67ZxvV2_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\M12DXPXtL2GyDkLA_ENCRYPTED_BY.WHITEROSE (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Standard.pdf (Modified File)
Mime Type	application/pdf
File Size	113.50 KB
MD5	8d4a72656d0a538b05e14efb928f0d1b
SHA1	82bde7d741d2593e7e440ae6350ffb78e45354a2
SHA256	6785985eef214927c9174e1639c0c852f279ae18aed12d8c82b682e50805790b
SSDeep	3072:2qaEOkbmi4pDnobVL8cGJBWeNRaPXpPK0WGOC:2AJ4pL8VL8cGJBWePSJD
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	816 bytes
MD5	41c18856136df2d70ab74d7f7bd591a1
SHA1	0b3d5cc1493983cde3c58234ed971883355842fd
SHA256	2dd7bd1a84b4ba3e7c09c2f7db9732a59d47c874d38f5de3645c0b92f01cdf67
SSDeep	24:uGon27SeiLwMuVnHC6AY59snTznI3XlAr:uGonrh8Muti6X9WaXc

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.59 KB
MD5	56a912a3ce060388f665f885ed7f79f5
SHA1	01c44ccd68d8867b057914e36264af3d1834bc17
SHA256	6a56dd494c41c11b17b9ddeef8422f29b8c75476467c1e845c53ee859c04e482
SSDeep	48:F02psyYPdUfMaZv5qBAJ8aQ0AFnG5aZs0:4dUfVh58f0AJG5Ms0

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tr.gif

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	352 bytes
MD5	4bfd00b9f05eac9535ebbd35aee03073
SHA1	f4ea5a28b27ddab40d916d9489f7f2996e1c3bc3
SHA256	341ad0c017f2021f8278fa75c01da20d5fea0cf27d7baf38e1e30f34621f64b7
SSDeep	6:nlLnS1mZK+0hJ2zZS/H/LJT2emHmaDk5CFuD/JINtuGICgqVyj0Y52x:nRS6K+62zwV6tnw/JGJ13N5x

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.06 KB
MD5	f96ad452eff4af3c700f5ece8212dc2f
SHA1	5bf1c29e6638ab4e85a284bdc7a920d654af3e93
SHA256	4c4c7136d0a0f969a3f34c004abde60f8e2aef2efcd6584fd480682e8b6e66f7
SSDeep	24:SM5XKVdP6y1TGbVZasjhGTPJ9sMBFPcvhl7EcIAPxn+lM/i6n:zXKSucn8J91zPcBBJnsW

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf

Modified File

PDF

Unknown

»

Mime Type	application/pdf
File Size	7.66 KB
MD5	3af081f3b477e696f828b7dc99041c88
SHA1	b00063a12162a4f332cfa44c52b15b3f3d72a2c6
SHA256	465050ed646104762b5ebe4a262911f152c38c0421d6087001d6154c88403ec0
SSDeep	96:MI+AL5pYwtUH+RkZzItyE+8tw9g5RRDLK1gvsu1Me1gZReC00vgHPOvDrW8nRyuC:MIT5pNUEkZYZw9g57mQavggD6Y1bbg
Error Remark	Could not parse sample file: No /Root object! - Is this really a PDF?

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_JO.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.41 KB
MD5	eef6b6a08806930a41da5ab652a15a41
SHA1	1ea42a622b4bfd9566bc031622ef53c8a7003e5a
SHA256	3672d8626cc9c1551d5ce18d2dc815f84067759e01bcd0ad68c2d765ddb0b8e1
SSDeep	384:r2E2PrhOr/rOE3OqF6ewJsZykVeWEszBfgllI+cjy3mZHeDoeRtNwin7nW4:r+4eE3r1pg1WE4e5cWWZAoeRT7T

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_OM.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.41 KB
MD5	8bd5cc715b0952c5f8dadafbbd5c9f7d
SHA1	eb82e0dd3f480b53855a97e429e40c32d65b8de0
SHA256	dd5a519e7a3f97c1bbdf9b3c584bec6a45d0176d874a8da1722f6cbfd07c6d6c
SSDeep	384:r2E2PrhOr/rOE3OqF6ewJsZykVeWEszBfgllI+cjy3mZHeDoeRtNwin7n1:r+4eE3r1pg1WE4e5cWWZAoeRT71

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.el_GR.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.91 KB
MD5	8931a9956ec18fddb77b8b76be5126c5
SHA1	132b9c6ad8886536482765444bc6e60bdbfea58a
SHA256	5a69f9cb9fbce72a5c2a94133a021dddcb248b48d97a8103cdc433b2e7e2ecdf
SSDeep	384:hDLNClxI92L8Ii+r75trAMFBW1oKvjXaxsOcMMQ5dVNXIQ+Y3ccPEicHEMRn7:hDx6uGr7DAtkiI5EYM4M7

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.89 KB
MD5	ca9358c293fb05d5e0fbc14ab9512df4
SHA1	02012f7abe2531f38495a96023c2f061e3a8d90b
SHA256	9dadd08e78f29bc2ef1083e85cdb53782347aa07aa4490ffee807df36ca566bb
SSDeep	768:zJDHTAoNNzKnZ0r0iUdK5XFDKR4qZiVgZ3rrBEj2DWi:zJDziUy+FDUZm6raQ

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_CL.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	b566f88a35e094836109835aa1237379
SHA1	5f663482813242bf38566007892e4ea10314ca4e
SHA256	9c711a41443ce527eca375140088cc10fd79a9ca67ee96d9201df0613ec5a87c
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNhq:+nhHgHddtliZw4zGc7+ncf6YENhonS34

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.he_IL.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	26.20 KB
MD5	7114e17f7e1fc4fc2a231ecdf6749a6b
SHA1	89731e1b829c596b7f4b468458e48a4ae1bd2c62
SHA256	4a2fa67f0cfbff6662288dae49cf4f320d14b9f5c432168a5a3d0514ec641f30
SSDeep	384:e3d7avN5+rcGF3A1WRCF3muyeVtzdCZ0eCMCL72dMhUO2bGz44WT1L0JRHq2aqRx:e3cNEQGi1QTC1fL72dMZ2TAVaqR4LfS

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.lt_LT.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.23 KB
MD5	81567ccce56e01d5a575107137a7e20a
SHA1	cbafb10ce46495bb66871706de421d914af84287
SHA256	0343712f91104519b94a566ed5ab2220b8ea9afed1ecf88acb5b24c3c5f23a41
SSDeep	768:+7U+XEOXmTiLOb44KP2QZCct5dPMxdTWhoZ:+7f0CqiybRKekCcLxMxdTWyZ

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.uk.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	28.83 KB
MD5	cfab53cfd7362ddc8fe1523653824613
SHA1	ff7118df4cba9cf398b67e8e450e7aafd0863918
SHA256	fd77abd1db68046d5b09b23d8b5b7d336320b76e89b498a74cf18aaefb49539e
SSDeep	768:fz6Z/FlykF/joWyAdsTjO3Iii2eSfhr+I+eO0pL8Qx7BHA2UbxbEyC1vjjbA6:fz8/nygH32TjCIdahr3+UFPmb3gv/

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.uk_UA.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	28.83 KB
MD5	e3448b13e9abeabc6aaa38e0c518e632
SHA1	e83219079d805ff9a0b7eb3bbef0d9bb999e8119
SHA256	8c0d650f963e026e960185804321c3c9ced955713ff3192ae8aee39d61ca2d0f
SSDeep	768:fz6Z/FlykF/joWyAdsTjO3Iii2eSfhr+I+eO0pL8Qx7BHA2UbxbEyC1vjjb2:fz8/nygH32TjCIdahr3+UFPmb3gv2

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.zh_TW_STROKE.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	24.39 KB
MD5	ca80584bd77bf9e3f2b74ee165661a1a
SHA1	f5e118ca8bfed8d946fa04647526b8ab5999338a
SHA256	97af25307161c72690840953b6621b107270e02ee00303fca0827cbc3f1c35ce
SSDeep	384:RvS3ySz3OWzuOUj1qORhCdjBoWPBedJ/JBvnGIrEtO6H1eDemOavsRVCzVTr:hls3tUj1VCdVoWaJxBvnJEt9oSavsRC

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.39 KB
MD5	1fb7b4095cf5827776062d25901aba39
SHA1	6258515cb0d106a6504ab9f76193be06d0d80e6d
SHA256	4f1a10c2a7269d4f631fd805939771518defe7116779828b85c408a0da1f929c
SSDeep	192:QCjkcd64spwshSf+zybduZnYxSXmq8Knyij/ju3tCOkECq5jd2/sqni:QLp5mKyZucq8Kn36tnkLqtai

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.34 KB
MD5	7b97c9f31ae0a5c176ad0af20419294e
SHA1	c443239aff8925c9654196e54ac6c1e27e483da5
SHA256	092ee0511f4dedbe78ab5ee0b7f0e8180befcf992fd29393f8683f9ec8bdc5b3
SSDeep	384:vU3ApeOyfY1plE6UjX7pwY8tjICwsaGgNlwYxz7ao:v7eOywzUjXSIBseNldxz7ao

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.70 KB
MD5	8df7a0d3c8cc18ea96d43993643ea7f0
SHA1	07bb05ab65decc312d2de76552b566e5880fafd2
SHA256	3d2c47f5390ea581b97da0cf76ee0a64c13f981e98565db43250f770d5944935
SSDeep	384:W9xhAgi+hoQh6L8+IZMGEP5qyz0//W1GtjKdj+69gLX2Pq:W9xhAKBh242ZP5cG1GNKdS0zy

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.78 KB
MD5	de7bbc9310e3f5bef4c084543c48c734
SHA1	d41779d6d502699621cf69c6ad578b90995b0a6f
SHA256	c47cb12f98dfefa2ffb9135920a386c193cf5d838a18ae417e62a213c70c810f
SSDeep	192:+YgP7s1NO72NRe0h0Gmvq1jfiZZsrF8R1lgnKKgCi+ynjxHf8HYYH:Zp1NOCNU0uS1rmZsrFdnhni+Uf8HZH

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.10 MB
MD5	4a399cb8f329fcd9ab3f990b668fd76e
SHA1	359804684d68b8a6535a0320b5447d17618d70bc
SHA256	21c8e6d4a764e78d5915927d976399331bc40d2a2d3eea2c8efffa83e1ae5aec
SSDeep	98304:+RumNB9EVjA9RX+DNk/SCbIga6zYE6INFMemaeMiSsKIMdqAoE/Gej:sB9EqfXeeZNDY8NF7m9MiSJ1wKGej

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\icudtl.dat

Modified File

Stream

Unknown

»

Also Known As	C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\ALbDENB5mLtKeXIW_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/octet-stream
File Size	9.66 MB
MD5	3234bcc11b0af49a9a055d899f15fd81
SHA1	39f6661d4c15c8ef206594013ace3a12622c3ff5
SHA256	2dcd61882496d197106f9f4cc84faff3959fcc840abe88dfefbad821fde2576c
SSDeep	196608:XQ8AkpvzcFqR5S4qQjhHS9Dt/N49hgxrim18UofpIG0twUANcHIXhLN:XK45JpjhHUMjm1JofpItwT6IRLN

C:\Program Files (x86)\Java\jre7\Welcome.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	1.22 KB
MD5	cbec0bd546f1c265cdbfc9daa70fc661
SHA1	b0b6fc078bb582f817d7846020b30cf51b253f5c
SHA256	3167f003410a0bf44d57109327f7126226844537cdbca0b40a48d3659b846998
SSDeep	24:kJwnVnW++cFcUvDqIdHZOqvTDeBgdj3rh4JNmFJOt9lSj0SiMCX/gF9i:kJqlW+PrvDdOq/dj2J0fiMUgq
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml

Modified File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.28 KB
MD5	83564da900c8b6fe0f2e926fae2573d9
SHA1	52e25bc9ecfff9326eb7adcefeb5664e55049078
SHA256	e1a29a297cf3fbeef781e648ca4a48db5773a45551e6b67cd5ede0644da44453
SSDeep	192:K1xf8qVOCGGM2949z9BrejMz/H/T2ObjHnYwY9kjJvhzv:y8q4DNdz/ejI/TDjHa9kNt

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\index.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	2.30 KB
MD5	c9ad64b5e871a5619dd68b3531c57f18
SHA1	efeb40b69364fac0213fdbcfd3cef15fddbde731
SHA256	08a59e3919fa7074249e071961542ec8b248960cad1970463f5014047a97e380
SSDeep	48:/mQSYJceOIs+aiTRG18uXL4Q3sZISXn1+3F+aOYuik8p01+Vst:NSYJ/s+aBoOQnqkYRk8prst
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\view.html

Modified File

Text

Unknown

»

Mime Type	text/html
File Size	6.08 KB
MD5	7ada0d6943bb77701a08d7f91803421c
SHA1	67915111baf6a4fbfc82ed18114c328ec8e5975e
SHA256	d348a3b5f67e5c022af5d6243108a7fb3a4803d6b9b51b896deda88c33aa33c4
SSDeep	96:62YRD3urlA49DRIHm3AbmoLsQuaGFJtwwKYT23aVUUOwz0Ccp5Wpcly04U:62QuDaHzERwwKBqKUJRKWclz
Parser Error Remark	Static analyzer was unable to completely parse the analyzed file

C:\Perfect.sys

Dropped File

Text

Unknown

»

Mime Type	text/plain
File Size	25 bytes
MD5	ea6d12c0226873ad0648f15f5f71ca1e
SHA1	69acc0a91cd7d7c2f04d65c66678335cb2de5c39
SHA256	0fbe7ab43c2cd6977d5b4fff0706cb412bc6bc76d78ec0d2185f4833496077e7
SSDeep	3:c2FyNYjSMLK:JDLK

C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\nJpHIWJexNSAXHyl_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.02 KB
MD5	1a954b26ca45ad12df22b26c830b209b
SHA1	f94ed732d9563866a0c6a95f17dfe43ce0e7324a
SHA256	7812e29d667d4e99fa2dc5e01b59f4645d04e49116af64484ed0db4c52bd8607
SSDeep	48:dzKflC8+NBhxY9tB1vLsX7oiXHPMqFXGpFQUUhaZx:dGA8Oa9f1v1iXRFXGzQUUax

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\mdZVDszAEEDJcHs0_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	688 bytes
MD5	6f20c0f75f92a5ce58ac919b7b2bf3d1
SHA1	43c1e503801b0b9a1b71d0f76d3b99c7f89b6901
SHA256	008a1a461e1404997e25ad0d4c7690f00044e75a85a866e090196b68af7a4f4f
SSDeep	12:b41y+FqRITsB+q027lzz61wRLhq+Du8lNdDnlCr1sb7R9hTcAfKJrh:E1yJRITi+Glz2eRLA+DflCheVTTLKX

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\qWhQE3v6fDESPcWc_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	131.45 KB
MD5	83c423f63864fd39d973c4adf231beaf
SHA1	ddd4ab4884f14738fde5300344570964fb4aee07
SHA256	80b6ece6ff55088ed1bc878b24ceff9217a3e8241c21b08fa67127e00cd953ed
SSDeep	3072:7N8Jm6A6biDxmV7LpeakWx1OoOumRgXQaSiwzXqh8iHAEShE4zHJi9Tl:J8JVbbilCuWx1+HFNj7hDla

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\kzFqXts99w19ynIa_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.55 KB
MD5	db11daaf002401bd5c7b6e6bb7142691
SHA1	389b6e678541240453345a1103ed04f1325882b9
SHA256	dbba01a9c217c9c60b721f381170e68d4ee44f673772f27fa5db6ce2118ef019
SSDeep	1536:yxkCZzkTVF7echdjh0CvC+e1SHyaJvIVIxGrO3ZsWklYuUc94UrCoI5c:hyiVF7echdjhuWIVIxGrEZHklYuj7rHh

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\itpMInBRwZJnVgdQ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.23 KB
MD5	47b20428a45bc90e21fd1413e1098224
SHA1	b1e15e4e9a1a7a3e3b78737f517dd761a5cabbec
SHA256	e26f367f6eb695a97aabfaf54a5f67462b04fa8bd5d6da27bd5cce0e21e441d3
SSDeep	1536:RIX3DsC9E0pofRjMSTpLrQGyi1XpVx5j7IcscfJbJ6HW:RIHDsCe0pURjDpL0tQ1ecRbJ6HW

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\h9FyjlZqk9j9mdon_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	291.64 KB
MD5	01a9ecfa47c139c6e5341d79e5d610f8
SHA1	29ca142a902cb7241e755d670a3d32b2f1392cce
SHA256	fb530e280a17af7e25c774e57574b350f3cf8fdc2d952dd01b64c871dfb2a26e
SSDeep	6144:lsJ6LhDZ9yuckUmQgVbQ679c5+bAZz1IA//A2K/iLhL:w6L1yuckxRVU6edpZ3AEVL

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\CAWLDMKY2b2fwtSg_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.77 KB
MD5	aeaf7a41a2f964b4edbffbe8ea69301f
SHA1	777804b2b40b4146a53806c9414f6eb2b5d320f6
SHA256	91a39bd911c33b7a3765e74b544506000dc920ecb1a212b8a840f7d84ec5552e
SSDeep	96:GFyDSmN1F0cy2PvmSjntBEP055apMmrKRqbJsCFyiD+73jz+9cttVxlEGY:GcDSmNOkrBFGWR3Ii3jS9OvxCJ

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\y9dCIHna7rbWWuyb_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.77 KB
MD5	af2116dcc63a90d8c3806e7c305eb31c
SHA1	bbd79853ee54afef226d9c813199ed4a6b06c236
SHA256	be0b7851bf004fdf61d62fa984976a31a7ddd0aba662b54578d81ba9863a40a6
SSDeep	96:GfXGyZK9TA6fX74Bd6A9S/KG4aHKHckFrNLcLiwVk8Z:GOY6fr4aAolRHKHb/4LdVk6

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\U1JpoiIitxpLS7jA_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.77 KB
MD5	2fd253f231ce755d18324ce4c7a7ad2d
SHA1	ed2852337de60c659ba77bc90ac2c30d1e91c60e
SHA256	1d827107676d329920b0224bffeea84e353c71e6f613ddc8cc8cab5b1a9ce066
SSDeep	96:GhlkqXAHa6ohr+PueQGccyekwC4rnoR/MdplCIf/+3LTWm+3gSQZmzL1:GL+xQn3wCY+/0f/+76mYgSQZmt

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\NwcxGsbb4ZSxdQiA_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.27 KB
MD5	3ca952a9bdc0cc0f24e58369df9c6444
SHA1	6048738f68704e03b4a490bbd542ec5282d315b1
SHA256	d79a0259579aa95f7d6a738fbd28fb366043c804f7216f672ee493d01d44f761
SSDeep	384:Wp0qoAl591UHM6xnT16G8WU46kSmgpmRIWU5r:W1Zl53YM6x84/Smwwy

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Fs6VL6l5PITynOjq_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.20 KB
MD5	dc7894fc159dd8c76e20353e08aecd04
SHA1	4bb491c1c4b90b98c18bff6feb21bf8633f5fe21
SHA256	b5dc6bfe852ef7f0b0ccf0c606d7e718efd6cb9e4591d72f45fcb3ac429758e0
SSDeep	768:e7LJiBs/JPbVh+R5lo39wfPdKzVThn4Ysgh20mbKD1tH8/JQT4kBtVc:e7LJAsrhEsy3dKzVThn4Ysgas14krVc

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\cKg3XCRoPcIffUIA_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	70.30 KB
MD5	0284475c3aa664218a704e3ee07e64ad
SHA1	89748c0827efaa1593c69ffd3b7c9dea96063815
SHA256	7d49a5658608b826b07846dcb7b46256834ed48d129593cc7034ba99d2cff8e1
SSDeep	1536:8FU6fCaNtUAoUdUBQbEPbwwdeBvKN+MexBFNWB3pNR0npf:kUjafDYBQkbLN+MaBPWB3epf

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\DnQgxZuNdaDOKGQ7_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	56.14 KB
MD5	e1de4a382ebd0b17fd034f58b8b87883
SHA1	7dd6791fe5a1194d5898ecabfe0b8c2da7376e08
SHA256	7eac2043547499cf994e31942a7397968538edbfd2b229442fab98f415f43db3
SSDeep	1536:ALT19gBqM+eNjeW4LeRgApz/I36dRZ9/ZGLpx1JLB7e:ALpiMMPjeW2Aps+RZ50Lxq

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\YymLJq8zndCiiExT_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	40.03 KB
MD5	67711cb8d9d7334fa881a96ff0df5b71
SHA1	1be760586d01c5a892afc3da2c81aa4ba52d83e9
SHA256	ad9d0ad2dd8700b4180b7c53e7abb1977e854857b7903244ff1c0af76e4b27f9
SSDeep	768:0m4Eanh2dJ2r65WM9SHlsM0kbeWz6IDrEsWVWjUjlX6/Rarc7CHGIKH8F:j4zMdJIydSHlIoT6IDTWVW4jlGAGIKHE

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dt1sfi6QqglYIjCN_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.41 KB
MD5	f08a8870a2071daf495bdc1e7fe35bf9
SHA1	309f5acf4fa8c7373a484fc7525ada56120b20aa
SHA256	e597ca989bb1b86944a3ed96de235c4c7eaf7b58f0b9c649d06f321cba0fe8c3
SSDeep	768:AEk2OfOxOgpXg76AFJ1FpuSxumQgnQ2harGxRk:A5AxNy5t7uSxumQxkarz

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\yvRwfJyoCngNnmdv_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	96.25 KB
MD5	299a6e63d8eaaf63ff0af4cac9008f04
SHA1	2830f5ea785ce1b15bc80be9d1f08f527c02abe6
SHA256	8bbf3d7878ee63ebb4f558e8029af78d2f729135b1e2136fc6d313f102c29db7
SSDeep	1536:IyTB3t8Yn12Nh+f5Bzy31bSf4ssP2cKLFjiAYgsnd8/18rFI:vd9hnkOzy31mf4W/RUgsq/18S

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\kwNMP5ubLfcl6Pbu_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.38 KB
MD5	d38ae00d54a4095c0b13a1bc1066fe38
SHA1	714566ef13ea39e675fec49cb88cb371cd6a2f2d
SHA256	0b2004ed36979826bcd3037caa59880f0408cf853ea005c5107c43d86348f070
SSDeep	1536:b1nI1misM5k+h4KwmCUry87oTAYHrZ1ZRAaWMqob7HAhlg5UYM:Z/isCk+hvd7GAe1ZRRIofAhlQUv

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\WqCJzci9hue8qcAt_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	103.39 KB
MD5	9e0e66c7f52d70b10231c64ae3d23f27
SHA1	71925e615414308a854970cdb1ef3ab0ec44ce9c
SHA256	b045f59f90c55744526078f9c08e77e76be4429a2c37cc7aefbf5691f46230b6
SSDeep	3072:nfQUOQ5S3Ymx2W5LFo6hPLsnS/1LZWbKzjnYsv:gQAX5Jo6hgnS4KzjY2

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\aoqvGANMXrXBBGJ1_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	57.67 KB
MD5	1a0a94239f763cdf347307b504c968be
SHA1	a6f2b7c1eb1a8b04933a6eee6ccdec0701ec909a
SHA256	6aaeb36e7f5f63f22cb1965cce9c83ef97901b397e4d6930a2d5c3412dc2beb3
SSDeep	1536:8F1hB+Jz1xFv6miZaZ9OGSZs7HLMV2tajZuW950HBcA/0os:81Byvv6faObK7HwsUjZbCR/0os

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\Sg9q82AA6oJB0YCM_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	41.92 KB
MD5	6c49f301838e38819320c3ca5eeb11e7
SHA1	6a1b37915c91cffbe1745fa46d49e3a36178d98d
SHA256	bfa0c40d94cb0912f2e06177807fd85061d5b1186f41148706ebe6868dcef4e5
SSDeep	768:KDUmwLxJ+Kk1GsSHjP2jPWLrghhJnAMR2ky/k/OkATwOX39DDZdWXe2AwG4h3TdW:IUJ4KkZU2j+IhhFDR/ySOf8O/dWX64hc

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\z0QlxqmpdluBHfwz_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	100.00 KB
MD5	f669538170e4ea7519691025b1eb728d
SHA1	b8587a748ed0affa4f89d4821125e775c4a57d42
SHA256	88e24611db379dd38193b38a7f4cc051eda9ffc0928962aef4310c623c8147fd
SSDeep	1536:nEBsA+xCJVKmaapVanpx0uH7rXgkqQpoAuvNMwz+CblKTZvr6O4NeOnGPo319Ldw:nQsLEYmaazcx0kgXQuvNTblKdj1sgN

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\zU1A0Fd9kYXPwFt8_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	880 bytes
MD5	f881b4da00b0af03b517fcbd7774efc8
SHA1	1ad7c0546240932f73fc7a5df3eda952f1e18b8c
SHA256	d181ddf32c45c75868bbfcb0542f10ca0402cf2630b4b9466f1a610528534eb4
SSDeep	24:zYJUcMuNIjMtMfLDYx4/lIaRHJo/RYbrDqeXiV0:zYOruNztUDYx2IaRHJo/IqeXiV0

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\4XyrLWTydN38GJ2D_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.20 KB
MD5	b9f84e619b04593ad2880582334b9a86
SHA1	945fab9de6f950ba820ae43f0c9cc55d41e96a90
SHA256	452f25783ace2a387255deee42d15d6bd67a777eb72e8e56d486795cf74991bb
SSDeep	24:BY5dwEihiJVybK7COKodkVT8pl0A3chx+A3cZBqC838kY1hHDu71e/aqeKrR74sf:ecE0ZyKipGAshxncZq1QhjK1ucshiaf/

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ISb0hOROgQMM7p8x_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	848 bytes
MD5	2ebd49b40f49bc2cc901f19a9007a335
SHA1	fdc34e8c814433e86d2304efed1972c06b12af30
SHA256	b92026445fc4d22ee9dee69e7c1b433f013cc4d75abea73e123c77cf75e75ee8
SSDeep	12:T1xO1kNa80AeiLcrnjCk6kUQ5cJ8MjqimgSuMBJkHfw9E3vqFFB+GgrCDXGWO7/0:X0kI8re5rnrUT5mgBMD3IauSNO7HFGH

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\44IDtftBqTLhEnOk_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.48 KB
MD5	70f4fd5eedf329e57d122086adb5cec8
SHA1	e27e9a5341d5d3e9bc17d28ecf93ac9e2b64edf6
SHA256	18542ede2d0a193c06dca8beac9fc6abf23b3a49a712feaaf312ca04383ecf54
SSDeep	24:Ls5uJKnU2z1iGQgkpuLkCUKR4Pz3cl+Kwiuns2S6yRJNQoZMjWSA403WGDXeVpMV:Lssf2BxQEkBKocl+KwJvyhCpAbWYXe2R

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\AnEfzZkHQgeyr07x_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.16 KB
MD5	f45e7a1228b18815c7908ea301a8bf6e
SHA1	33c3e6f3118c024acc1652134af34d3c1082bb0b
SHA256	f99eb7126f1ee97db572b5f54a0b0c722705c7c71c6cc747a660cf12db363ba2
SSDeep	24:v2d2/KglozurWAj8BJK5m5bL5mFVW/+aZ8NgsHHaJjq:k2VloKrVi/YVW2aZsgsH6Jjq

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\2XISBZxfqwxoaKRc_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	e7b7e7b0b151c3091ef81eb0325869f1
SHA1	a8ebfad5d617b7069a5c04baa14581a8769410de
SHA256	f7bffc45ddfd7c3a65e7c1268570b99763285e5b4a2039726eba5cc2a189654c
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNha:+nhHgHddtliZw4zGc7+ncf6YENhonSw

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\bWmJIOvshzaJ1eCr_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.91 KB
MD5	f84642ac880e9e3b3c53fc8ef37301c8
SHA1	be824395184ec3118c4a10fc8f418433538b3834
SHA256	1e9da2743fd2706c55d4652f5652fd69bd1404e4de398814eeb1b7f455d01b83
SSDeep	384:Flgq8jgU+cjaQElCDBrm8/3co0zRqUpIAGc9B3s:7gqcgU+pCdJrInDt8

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\DHBhmoep5ipCa88W_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	328.44 KB
MD5	b91eb99283d49d86ae716cff573079a6
SHA1	e06a977124a969477800610d69d6c119c763281f
SHA256	f2c7da1117ec132fecf9b5b79826d1415a23fee7378028aa5de00360acce912a
SSDeep	6144:rc8My7YurYlY1XceWg7qe62WIfbboGSCu/OJerXCKWl6kkG0ApAfgpiu2:Tvs8FlL7mj4TOcKWkkUfgpi

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\p5MC1Rh8emaeIaj6_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.53 KB
MD5	85cc5f8ab63335eb898cc73c1478ea77
SHA1	6152304ed4274e48baf4d68b92ee79f439e3dca3
SHA256	f601e052a0a21aaad3da451a39e2efa650d1c02c96eaef498e3ee70608cd5158
SSDeep	192:VElZXdfDqhnvWOEOiY1P5/BSuMrAOmQ0kkaxCuZT7tVQDR0FPh:ehrouRY1h/BSuMl0kkyT7tVQDWP

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\YpIe6A0cEKEvvXBh_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.28 KB
MD5	4e86f53af9000ad76ba5f25922a249cc
SHA1	3092bcb8ad346f1591a88b5da77de7a47a343553
SHA256	d42a9267ada0b60ee6edd33d5d910ea1ab2a0480fd734750aa3036705f395835
SSDeep	192:CD4j3RbKiprIQa7ImqLdtL5nsk1OmbALMjdjIMo1w:CmheAL3LBH1FbaMtIJ2

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\NUmDA2rNHnqoNoTm_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.55 KB
MD5	98b2eb994689fa1ba3b943b181a7daa0
SHA1	2a1a4b004fe755eb4a3bb1a58d8c12ed125a299f
SHA256	ed0fc93974d972c0e8eb98b188df7a6ad80c5f56e0a777e838c4b0ad148c0a71
SSDeep	192:Npt70ukdg7tqz/0dLqf7D5cY6DKP4QeJYTp49PNJX+i9j7aK:Z0i55qDFczd+O3F+iXaK

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\leifFKiT8LVFAaay_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.80 KB
MD5	bd7ae0e0b0c11b751fa24ae3e16ce197
SHA1	c00836b099d1ace24a0a287358c6c9b9ec501a8e
SHA256	6a7e9d8c386e782cf2b0cca7912da4ec63855cd1578725c04cef45a757dca79e
SSDeep	192:qknOD7eI9vhMEnyuNHRpOjIsQHVhIp46WE0/k+IHjqj6:W7eIVhMfuTbn6Wr/kdDn

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\cHwYj4mbobDXPEzZ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	296.50 KB
MD5	aae77ddaa72bbd810b90808db1fc8f89
SHA1	4bb69d5690c7984284c0ddf410accf6ac2e12ee2
SHA256	47f52d2ebd01fa496e3d408650a461a3b98949062015337733612c90f05220d9
SSDeep	6144:UI1Katxe7P5ioVoWOhLn1tF/ALkrasNXd31ObBT+:1F4DgKoFLn1Hjra6XdFEBT+

C:\Program Files (x86)\Java\jre7\lib\deploy\ndUUw3FtEFVfnlNF_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.89 KB
MD5	13e1b6da77fd2f610f5d8fbbf18a7cb9
SHA1	2463c40e728327951be26b016b42aeff9aba08dc
SHA256	388f88e2f9c7cee0829731f6ebb8a8df7f6d7a8559b7bb57d78dc2d2d572b811
SSDeep	384:AmTN3X6NX9zCiBUaXA01XBWVdiA2ZLNMDG7nbMa4:DNn6PCidXAwUVdiA2BNMy7nbMP

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\zFOBAfFXviAwx6Jb_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	864 bytes
MD5	d93f24f5b940c6faa94b3802e0a319de
SHA1	6f6eb888c20cd329a16a38f1c00b2730f6fb8797
SHA256	0bd0bd402a7cdf5bf4ea32f88b9b7115df9ae6d7b2b7cf2da57773b8e5cf82e2
SSDeep	24:IaPSU//C6eEq6uTVP/bJ7Tf5CpYaXV6Tvwhp9oHK:IaPN/re96gBFwvwjyMHK

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UoqGEl5ggpqCzmPP_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.48 KB
MD5	480d98b5b53408fb09023097a7714431
SHA1	13d2c85c428b0d6c1ec3cb3b47356ebe1563504f
SHA256	0599bd56efd0f79556bc72c8ae24a2012032b85aa073eb8f996f11954ed7541e
SSDeep	24:I0nIdYo5JAjEKBTCnF8q00NAHkqc9SznqU5y15TC1TJSkAVeMNt7Q+FNd8UXfgfX:IFB5JVKRk8mNikqcoqUKlCZckGq+Z8uA

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\XvoCapPDZjQGBhis_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	7c73391b3bd5f4e28566ff8a3ea564ef
SHA1	96896382b85da6040ce9b89ce482a5c54a662d49
SHA256	e64cb6a6997280c47ab1d6420c1bad45647df5676ff3ebd1320ebaead5817301
SSDeep	24:2XqrFJ4EK6i68LuwIdgVyK02xN16ZoK4yXgqtCn3w2ARMa7HZpwUTYj66q:7rX4ETAIOAK02xX6ZoByX+gWa1FL

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\OYDjPITVfKyYRMHS_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.08 KB
MD5	2597fdbb7323fd49512f30a276791856
SHA1	49d9df3942feca859cd380574b3a2c3d2185ff9d
SHA256	380b5ccc35b49d5b68590dbd0cb8bc0d1282106ff419fa4ed87eae068e5dce75
SSDeep	24:5g0cxakhoZSmJVyTiVzGNZZqVZKtW88VZ2vSxBxg7xlQY/yMLUwr:5sxavZzVZVzGIbljxPXY/yMLr

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\fgWtkXpoDvEqvYAd_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.31 KB
MD5	5ffbe9e884d993e81f44f4951a0d0e10
SHA1	4887b2c752d1e46fce174a049bb2fff55087c349
SHA256	7db492f6422962457bb7566974128270759e3375d158ca86ac28f4b058d8f032
SSDeep	48:DBXVUhpKzzRyLMn/evKITeHniKeYWj2xecGc5pS3ydD89XaL:DBXVULpLAEKLHnpVbAciQD8p8

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TFWfQhPpRIA8tgaW_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.22 KB
MD5	38a90cb80c6680e52fc66709866ae699
SHA1	886b890c627edd8a53a13da7d342947471d8114d
SHA256	f290f72a7ea8f41a7448157b81bbbf10beab146669c35c1bef54118e2886db65
SSDeep	24:vmgm7Ph3jZrexx50aaT/8nDIVwA85WiZZH8S4euJRRYTrmmUltciJbELodn:vmgOPhzZruf0r8nU/eGyij5Esd

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\qbcfnDRCFhvIdk3x_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.09 KB
MD5	b95f6d47e50297b4aa5249f6b1443c23
SHA1	b3ea892d1584dcbfafc0ca4ce4c826a04663f3b9
SHA256	55ad731f17440550a5cb190ba8f7d838827eace0c28786b1227ca7f1570f1e43
SSDeep	24:nrELIVfS08YbvipjF+88JtJuoaDMyaTA16NpHfwCCz:nrjVzJbqRF+88JPuDDMbNvp6

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\UBukoW0sMY2fUrov_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.41 KB
MD5	ad46230d948c65301d35a9ec41549cad
SHA1	5de93233a6a135036d2f3e8b1164b5fc9a3f755c
SHA256	4c9b890ceaaa5a1192ddecb8d0187d8367191cbcbba3c9a41066edd7daacfdda
SSDeep	48:cgF5vrPQF4Q59n7xhS3WvdKGTDtDPGwKAjBtDWVhEeSv/CwIGNsOWiq5:zvrPQeQ5vhS3WVJDPGwNtDWVhEeAOi5e

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\goRWldTxXYwVTpnc_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	816 bytes
MD5	ec73710326740968c926c7a0d649733e
SHA1	9810e68b9e49c6408b77160aad74045763dffb50
SHA256	417535c5acd48d74388953cf09b633f8ad59f78e0b52aabcedf43da2b3b98197
SSDeep	24:brv0LQ0PDWDt0sDZ6sPodcOV40FOIin4dFrAwf8:br8Lbs61dhFn2/

C:\Program Files (x86)\Mozilla Firefox\ctcohNjgDgyaMLsZ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.98 KB
MD5	2e8a9af2879879d21d938e726bf08729
SHA1	ca25c5ef77755f0f31a9f87ed9f3dd89a7a7537c
SHA256	1afbdf308d18647e47b4b4c30ed84a8bd19efb38e11bc8c84c9676f3521d502e
SSDeep	384:gTxco6HBpzMaoyZwsW/UJ7BCB1+AqoJ4V7KbXUxfxLjM+2xr4We39fx/SDWI/o3o:K6hpMNsGykL+AfylKw5Gxcb9OLA8IC

C:\Program Files (x86)\Mozilla Firefox\browser\EdrXWn4dqZM5XCXt_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	81.80 KB
MD5	f6f9965ae7a17ed4cd7354f0e6d2552b
SHA1	ce17a245ca49a81de8c13b7c516a26d35b7ad90d
SHA256	77db90d252892fd1f951ae39c1ece0acbca6c9a1201dc3376d21ad91614c2556
SSDeep	1536:ResoZUmLLckStseBJSOBXoG3yb4atLg21TDL/S97FyhxYJT:FoZUIokStnJH6JtLg2NfSOhxYJT

C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\KroOXuyXQNCc3uVJ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.16 KB
MD5	604a06047b191f44ed627a58e9a1dfaa
SHA1	f0fdde67bcf08a2489e29ab27f112307f8f527dd
SHA256	bed40c13c081b29450d52afe89e0f97b1bdde03d5204b4fa012153d634859b32
SSDeep	96:qvQoYN4GQ52ZlcIqo+G7yyCJE7rSNmJ133nOmYgT:vNBQ52ZlHcK/Pj33nuY

C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\DpMkn1dkPbdoTUvT_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.44 KB
MD5	74fbbc219113bea437abc3cec058445f
SHA1	9ce62b98111d5f3be8e72b4427452116d3ce1982
SHA256	b22c2ac17abc09957c5087151d561b3ad75253965bbcd2287c42483618de44d0
SSDeep	48:Ls6o8sE5NqIVhtxcnlFcqRKg27i8lQC/S4/JqymqoD7jPbyHE1iR9xhSQ:qvQpZOnlyqMgc3QC64xqBqQjyHRzbR

C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\uS143jiC7BWG0nUi_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.88 KB
MD5	02b536797dc8ac0b80051814d27f3379
SHA1	41d554ddef06667abf4613992f721c72e7d2318e
SHA256	75f1b1eaa7d4ca8e7d722c57726dad254c29584615b6587ce185b4f3c64d1da8
SSDeep	48:Ls6o8sE5NLJ7LiEQZ3Yl3SPrGqmJbknn5pccIQqiL1zlPoZRvCoDAK/EhQ5kh1nM:qvQhJnin3Yl3SPrGfVknnSAzlQ/PD//3

C:\ProgramData\Mozilla\logs\I8J3eVKVuSq2Ipgu_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	432 bytes
MD5	60eb67c13aae8068afa985cd39d5719b
SHA1	84d093fadab10725b1d1b535f35cc3a7039a1b37
SHA256	28c4c0f5e2eced242210328343de2065cd4d189674fe371eeab50115541fbd8d
SSDeep	12:shG4ERXxxzx46qF08lvAgPMc10XporzU42H:l4K3xu08J2poc42H

C:\ProgramData\Sun\Java\Java Update\TizQXjdwxpZnZbLy_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	384 bytes
MD5	ac70552d7c769a7a59fb0fd1dcdaa7ad
SHA1	9db560670ad1500ec9ff2bfa39bbdd3c72943348
SHA256	d86da7e40c13d317236fc3ebf3bd1520779e9a64d2d6e09a7e878560bf600b1d
SSDeep	6:QQd6ztS6NUHso705MbyPe7ofbL8J2bFcN8KbsFhJjM1tU9bU21nGtBaDg4Wef2RH:F6zqMo+MbyPKofPKnAFfw4J96Cg4mR/v

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Nw2fIEpLjTHuJyO0_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.27 KB
MD5	20ed47c674c6301a7cb572dd883ffbe1
SHA1	26012205ac78c6a49490f8c30c33e90813a0e950
SHA256	bfe2bb524480f9b4a17defd14e5ff792817dc0ff6aad0608227c96893b42d106
SSDeep	384:uvGMWh4OaZOrXnWuh8EP1BjN5So8bvpf3Z6JkEVT2TQe825ge:u6KO5zOENBh4vpvZMTnC

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\PDFKqEkkqad2YWIE_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	68.97 KB
MD5	5f9a4c3d663bdadf3e38bdf993b48eee
SHA1	47deb20c1b5232869a1831d546fcaa459c5c8a69
SHA256	09558cb3a71c54b79c116dd90d90277d809b1c6ade84a6436e4c489a061fec91
SSDeep	1536:oo8F8TdUN7Nv5Xf4AVjZ3X/TxLWaUsomX0AELbcxU6p:n3ONv5Xf4sFPTxKhsoQp

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\x9bLBWgrA6vaWdUk_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 bytes
MD5	6218b178adceb1900d7b6c1abd598385
SHA1	aaa05d2b9b8c2f3bcd73daa7fffe64e5840fefda
SHA256	6004611eab7828afe0bfbae6ffec9b01c56edb24dd60d2f4662bb968db14cf48
SSDeep	12:5bChGZDTfE1UmdbI/g9jQIV/VB8pOEhrB9qEdVmb:5bwGZvE1UmjQIVtB4HrdVmb

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\aZ7XeBTWceAgpd7b_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	432 bytes
MD5	1d25f55184b3127aea80df9a3933bd1c
SHA1	85e4c38ab5c413f84f8f16feeadf92f7691607d9
SHA256	7c9e33736a7c662d273e59bffa61f195d610d58ca903dff13c9895b7392efe5e
SSDeep	12:5bChGNEqduHO7TzrOjXUkT/5EciW0gHr2GFfCc5:5bwGSvu7c4gHqG1Cc5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\PXUATy1A0QxQgF53_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.05 KB
MD5	874bddc142b8830a30ecddb6d1ce68b3
SHA1	f526fd21ea1bcf42dd362a7ac30994cb966df935
SHA256	7341391bb3ccfc8b281b34048d582ccdec272ac3ba84f51794cd395ec1bd4b19
SSDeep	192:wBGJvBsUzyBg5PNXmcyb1TRcmh7QJnNRBvApfVXSfHXWmjFJE0/MwmVjFvqzg3qG:9ZsU2WlNXmc81TRPivQfcPRHf/nmZ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\PuZaKcN8KTopLZsT_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	31.31 KB
MD5	09a5062f7609ddb0cc7a9b598ab8f991
SHA1	445fcad0ad549cb206f7262c6ebee6b25b329c57
SHA256	037c3fdda50bb410d2a8fca6037460c8a4d6171c9f1ef42b7210aa4cb8877758
SSDeep	768:J54BNMhltkGBRQD3N1miQIaSqk7csQcpxftIg6i:+yhltkGBRQ3Tv97ccDVIgV

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\SBY7ggxtsNOuNVXv_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	485.45 KB
MD5	5a996a0154b665a69acbd9a410fe9688
SHA1	1ee96824f45316a53084ec8186e907a01df411f8
SHA256	cc142f3706a57025994c366cb7d4eb1e1693cc1809119b5633f790f111a2bf90
SSDeep	12288:1/5qtSFRmJtv1yOVCF8/RP9Uj0W5u/5dlBzl:sSFRmJtv1zBFqj0xxdlB5

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\sBYeJIWta0zp8W8b_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.23 KB
MD5	5c1fc12dc61ad7d77804d93bebc21df1
SHA1	4744731e26d24e8952a39b827dbea40d2959f418
SHA256	4ea42e377be30a2e27b56334fd022a27b6cf67cb28fcb64ea86bdadacbe455dd
SSDeep	192:W691/lkI4+YjWQBwl+CmAlkxc94rh9i9t4jaWbjC8uy8j:7vsMgCVYr7jaCNu9

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\XV703HCg6ImNQqHt_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	320 bytes
MD5	772395c8920050fcb7a6b1e68689d23c
SHA1	40317aa0a403857e9bf6caa3960a3739be632849
SHA256	85ed8da875a2585fd76f8e5da231eb13b239de5c2ec70aef14d26d3e3d9fc305
SSDeep	6:eOUQhdqRrdQ3KRwLfzaOAa5cFG7Pmcr/Sbt9JgNljNnKRgOuPJvMKjXiXew:/UQhc5dQ3KRw7zaOAycFG7qDghNMwyXZ

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\3yXCe8S4BtHT6o2F_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Query Error

»

Mime Type	application/octet-stream
File Size	20.17 KB
MD5	cc7643c0c8b4ff15e9c9f662eef0eb18
SHA1	34de482780d1aee8254e5ceb8a7a0419f247fe99
SHA256	7e00f898fae5ffd5e19c578a552ef12b8a0e1265b774c863069f5aefeab82681
SSDeep	384:2M6MHDapbutWALVz2KM/JYKIGLS/uhGBYQnk4fe2cc4QJcrsN/Zs+waRouihy8X/:2FMHQIRz2ut0S+7QnhfeKJgKNm/Xa87

C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.36 KB
MD5	29a5135b50b710e6c558d9f0044bd7cd
SHA1	fbadb3a5475424079f506f87c916c12e93131911
SHA256	c795d9b5638547b1ec74ed4878a5ec26e4df1f41958b6e86064cb04c9cf3a3bf
SSDeep	192:Qqig7FP8573nkekreZEhXyyVsYcIz0JL/V+AkWVIm:F7V85b0hhXdVsrIz01NiWVIm

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.20 KB
MD5	1bcad97616df39d966352a37c107c396
SHA1	5f4b96bc5dea122dd948dd5d2f526765659c4636
SHA256	d757cd90b9f3612e64746796743c793e097daa3a6d5dbac59900498fa6047ff3
SSDeep	48:kNESrvIb08gIjJmmercaXP/+1CQOxEKtVxll07q0xhbZuZ:keSTIZv1neBf/+0QOTtVN0+xZ

C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	30.62 KB
MD5	36f06434f352aec34854560acac0a66a
SHA1	461a104ddb1bdfb542451d145673f06d74cf55cc
SHA256	3a77b7bcb492d3f8344f39922a3c829e9ac1b14878dd1c4942a44d2e05b2ea7a
SSDeep	768:ImVW+sw8gl2S0KZ26mhFwfbBr73j6kgh1Tqo7Wj1HDfOeDN+o:nWi8dozFPkB7WjoeYo

C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.53 KB
MD5	3b930818b4bb9a4526b25cc6021eea89
SHA1	5aa338ebe1d583f3a31b5f96c8657808f4bae755
SHA256	c5548e29ced0d5da9b03af57516e228482e89d4f4355d46e6fde7244552dd4eb
SSDeep	192:ouHq2F0HlUWzpq0AJYXkX3aWQaawHagzub0Qz:oiq2FuUW90YY3aWQf/Cujz

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\DVA.SUO

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.77 KB
MD5	f151e8748dd2e03da64f94698531cf9a
SHA1	49ba5c35286f55007ea42c9d58a48edb93236572
SHA256	81876eb1e33d10f97c79c61f133476ce2f8258a19baf44d0efb6cc26f1b5ba57
SSDeep	384:kPKZEM6i9tWvEZdt+pCKZ7vlJz+g0W8HyORE0udP+lHCYK:kcXtWvEPt+pbT+UORjw+G

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Spelling.SUO

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.77 KB
MD5	a261a059b2d4ac43dfdfed89e5abb0de
SHA1	f02b9766d5dc60fcb0a224403a94e29efa902dc7
SHA256	6ddfa2cf4f7b2014d51f7fc47e2e09f74bdd11d0723bf7744378fb1404fa4d43
SSDeep	192:GKET88paVAzF0kyeY2zzOi8RGVEKrgfwlhC7VGSfx6DjE84bJ1EpVyyIzs8t3vjj:g88UY6x2zhlrgfwXC3sDjExt+k4Lo

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\updater.SUO

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.27 KB
MD5	5e1d0bb99a1afc5e13b2d7a78eadf63e
SHA1	6c7f0b8c40fdeb2b08bf4861803158a50534fc18
SHA256	0a7a0f3a49a8e2f2f829301c67f4e9ced915b4f1ccd827b4b5e5c8b58c264fcb
SSDeep	192:GN8vSut6GCc3l8QmorV4ovTPCOsLsC7fbGYHFisSw1tDDnmC/ovNl:MutAc1BJrmEP5sLJbGYlih2Dnu

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\main.css

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.91 KB
MD5	79ba6b02e91119adeaac1c184ec969fe
SHA1	915e22e747880cd994b9c057e5c66382708b5c33
SHA256	c4dd0e5b94d4d79a30be966e404f5abca600a4d216b5833d95eefc2d0f94ed08
SSDeep	192:CWDLdsp9/iFA5j7shkVujJnA4Y69KeB7uJo/DSdPwDBuz8WvLSkGletxJr8uvPU:rdspltF7Ik85B9KW6GOPw9uz8wMlwxty

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.67 KB
MD5	e40018336d42ccacc2def6dd67d97bc1
SHA1	04909190f24a2ef376aded1f0810355cbe66c9b1
SHA256	4aa82b8e33b54d753c195995d75e3bbd6bcc4d1e8835355d1adb3abcfd1336ff
SSDeep	48:OUh/WCPZgwiYMcm1Duiw2T+ZATDvNQcF0/Z51:jNScgDTTOmKcF0Rz

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.16 KB
MD5	0945ba59f10ff9cae3ce216287884ed8
SHA1	f79ce3b5e8c11a5da85e1657f17674d6d1f834b6
SHA256	910b7abea33070021c304df95ba1719aaef65052cd24e772810a5d2e0cb8fab1
SSDeep	24:/Y61+7OSbIhLUzy6Z7Qd5J1XZ+PqiqNYT8Cnl5SDXQAifZW:/N4Mhgzgd5J1XstTNnyDgdW

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.06 KB
MD5	34c40e07aa1348961e93ced715207d89
SHA1	d0ad2fff83546975b6675e264d2cff3a407a37f4
SHA256	3a2a1b206d94cd4501be9bc6822e98fd85e13dc75cf96a30d1d500100e74e4f9
SSDeep	24:SM5GsiYVJOrtrUhONAKmeBSd/w1RH/OXFdJ05E8F:z5J6RUhfKmekRGkFz05E8F

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.23 KB
MD5	2fbd5aa307aa894b616aa7f04a008939
SHA1	2022426ba10cd721fff6e73cd09d7345700655ab
SHA256	980cfaea6541eccb54d93d16c5c04bc45f093825e9184b46310ef5323e64f19d
SSDeep	24:+fdrPdiFEUG5c3X/vtz8U2/E77s/G91FqKWoXyezZAadOJHIDpKlsUPfIMePx:MffUX/vq/E3MAXXyezZAa4TlsIf7mx

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IN.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.41 KB
MD5	cd0cf1e997d93b708c906ba72a39d155
SHA1	06801b614c1b115192a9200ec27928d660eb7635
SHA256	9bf0273f7e9a929f12a32a605effdf8d86da85ed153b1b30cfbcffd1abb011bd
SSDeep	384:r2E2PrhOr/rOE3OqF6ewJsZykVeWEszBfgllI+cjy3mZHeDoeRtNwin7nIh6:r+4eE3r1pg1WE4e5cWWZAoeRT7a6

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_TN.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.41 KB
MD5	5c3489336d8de592c3b1d5865d19ed51
SHA1	57290af2be1e8f0daa9e62095981ee7fc1c30a5c
SHA256	b2fb590b130761a5c5770acfd36d1cf8785c72543e3cf855ab4c6bdd1228d225
SSDeep	384:r2E2PrhOr/rOE3OqF6ewJsZykVeWEszBfgllI+cjy3mZHeDoeRtNwin7n65i:r+4eE3r1pg1WE4e5cWWZAoeRT70i

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.el.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.91 KB
MD5	6a754a77a6afaa0a1b5652b044da5dfe
SHA1	6795a3f995e133b388544d0e163da9ad36e35de9
SHA256	7b295cd10c3c219d52fccfe5c05eecd5b84986e7499771b4835b7ee0a5f278eb
SSDeep	384:hDLNClxI92L8Ii+r75trAMFBW1oKvjXaxsOcMMQ5dVNXIQ+Y3ccPEicHEMRnu:hDx6uGr7DAtkiI5EYM4Mu

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.89 KB
MD5	479fea1b8001867f2c48a689a4438625
SHA1	396dbabe2d0933838298cd345d3cadb85626f884
SHA256	deb21d068a1aba3d45e9a3b2c40d1820012c9700e11cd5019481d0165625dbc5
SSDeep	768:zJDHTAoNNzKnZ0r0iUdK5XFDKR4qZiVgZ3rrBEj2DWk:zJDziUy+FDUZm6ray

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_DO.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	b586c78caac50571dad410e94a6e72d3
SHA1	43b2fbd32118e13ce3e90b495d712a1531deb587
SHA256	ec60a72396ddc35f56991c30854ba963ee7f4fd50687eb05431832bef3c9e01b
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNho:+nhHgHddtliZw4zGc7+ncf6YENhonSu

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_EC.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	ace4b836dad0ee37bd572bff0cd365ac
SHA1	6ecc48e16561f0e50955a09555a1db5fe2652f2a
SHA256	ae6cb5d272ee11201c1c5f8e1531c40f41801512a3839ffd72e38eb46333c7b4
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKzbYK5ysh:+nhHgHddtliZw4zGc7+ncf6aYKAs4IB

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_PR.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	638dc42106c039bba1ad08bef6aeb462
SHA1	fbabadf44e0fcfaf0de4fb98006f1f12826901db
SHA256	de31d03ed1c05d495534fc8c0a60c53d32ff09264e83aec68a2a85073f2e8a79
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNhl:+nhHgHddtliZw4zGc7+ncf6YENhonScI

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_SV.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	3006416fb0cdf94225e99c187bb8e3da
SHA1	265738ff902845f7779bcb6e206ab3d147a6c2b3
SHA256	1a0ecde0e04230dcddb02fd7fb0deada6bfa1c0c3b0caa85c1b966c4880ad297
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNhp:+nhHgHddtliZw4zGc7+ncf6YENhonSD

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_UY.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.95 KB
MD5	697016b37ce7beeac06baefab8f0a1ff
SHA1	5b49bca2ab68afe4e90c25cf1e393eae158fadf2
SHA256	946e768d580562c9ee4dc485842e4c14eb0db2a1784c7dd0f306ffc2d7aa9305
SSDeep	384:+nhHjKi0/ZpbIcZHd1ztlHJAZseGBs1JZGfQv4kQ//nmeUtQEG4vmuGKtNRepNhh:+nhHgHddtliZw4zGc7+ncf6YENhonS0K

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.hr_HR.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.80 KB
MD5	33467c5dce070b7c9e2e44a1abff564d
SHA1	866136c33dc4ed06dd978dc454de3bace2111f3e
SHA256	53cbc7a47a7bd8e12b23590a89a8e14b9317baf346d45c3f5c8c935c7c1c06b0
SSDeep	768:rcsc6mzd/GHDwBFafOWSrLMpyauySdbCzixlizvPEk:TztjyIfgopypWixlS3

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ja_JP.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	25.61 KB
MD5	a79732032a0ffa67b9229c4e07e11578
SHA1	945c31ddf29de789b9cf3cda2c5957e2875d1e62
SHA256	0791511784fcdcae409d4c3db9215d5a9d144a59386cf3ac92c0322904ec7dbd
SSDeep	384:9wvl76nBK2QGyihD9SWQp/VRaQ9JZMmv9dR3FuISZAx9G2Xh4l6EWZiXsAkIiJsr:9MWnFSM8WQpnaSNx1ud12XA1sa4w

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ko_KR.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.86 KB
MD5	341ac25721d19c7fa1ebc84fc8046982
SHA1	a59aa0b9bbe071bbaffaa3c61786d02394b2a308
SHA256	0206610c1c1329dd9bb8f265a11e712b40571667f7f3e4bced3ac58b921b02d0
SSDeep	384:IVYjFTh9y1/PXrmEwbKMWBUGxa3u15p70ZNBN4P7B71BM0dpeUwWEYJRi2oNGNk:I4h9a/Pr2bcuieM5p7syl5RLwWEki2oT

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.nb.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.75 KB
MD5	fe3a561f7507b5170ee18e6eb74ff667
SHA1	02f40aacefe7c39b60cc46670eadf9e0b66c4a71
SHA256	2d802ba4fa535d2dd484cf5e3854172beed59e9976c3a9ea5c953d6e10a4c037
SSDeep	768:BAH1whd0Gz8E/9b3H9ESK1NjgCpCLc2IPBbIF28TK:Bvhd0y8Yb3XK1hgmkcNIg8m

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.nl.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.70 KB
MD5	7bb0a484fa723ccf93f92c3c249e12ff
SHA1	d91cb24f90aa75654868242d32fee37fccfb671f
SHA256	a746e1bcc885d7f97cfac19081c20579f7a0ce1e8d4de182ef8d0e735cec6fae
SSDeep	768:S/wlbJO6lRnVuiN35YSQnMIYpViHOZe3zQMmea2u:mwzOORVuA35dUMNVfOVQ2u

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.pl.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.84 KB
MD5	a2281dec08c3d1908e6b1f86f37559ae
SHA1	728b23e7d1724fefa0ff8cf8fe99ee31190adad6
SHA256	db846c8f4ce16c44835e5d16322ac99228a947e124046f19760a65b9385eacca
SSDeep	768:pthwgKB/vonv+sj78AlY54wKH9jBiudtjlKifXfR3:6fVEmsj7Y7a9jBiujjlKifX53

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.pl_PL.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.84 KB
MD5	2d98400ec083b99a956fdda4ed9670a8
SHA1	b9e635f7441139cde1589594cf4fb8753ee64704
SHA256	0171e78bb168e6395a8b7a957a5e930f882898c70214eea2a73f8a55bd08d3fb
SSDeep	768:pthwgKB/vonv+sj78AlY54wKH9jBiudtjlKifXfRii:6fVEmsj7Y7a9jBiujjlKifX59

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.pt_BR.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.94 KB
MD5	9412d42f043f19ef5ccf65872a609333
SHA1	6684a70b3ab18ee89f25a27cecad018a15c7d2d9
SHA256	0be54725cc72b69c55969ea65cfd0960372ed71c46a7c213262ec98bbd9cc911
SSDeep	768:UG9t9kj+OdzADcgTkShZqYEBUBrh80pn27Smv:HCLdoxh2g47Smv

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ru.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.41 KB
MD5	b9dedc2c43a09846bd759d7412f84ca1
SHA1	92cd335f905c72cd772c902c2df7d4b3ddeff44b
SHA256	bf6e7e6ae0e48af29e1a17cd92ccde3ae184dc935e8f00a4937d7c5916792600
SSDeep	768:QotvueY/aS5+/yebGD2JwHVRoqx7QnaRpDfnijZRY:du1aS5mjg3xMnmD/iZq

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ru_RU.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.41 KB
MD5	161648f06dcece0042cec98f3835d062
SHA1	e4fa6ebe08c85f82f75d520c7e39f10ca46d2f76
SHA256	d28977363d89d89e0e0143a109ffddf55e4d8627bf177cd189515b3cc1fe1e47
SSDeep	768:QotvueY/aS5+/yebGD2JwHVRoqx7QnaRpDfnijZR7:du1aS5mjg3xMnmD/iZJ

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.sk.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.62 KB
MD5	ca6f5c209495b9abbd0c668d3ead6719
SHA1	09c267db6fa1a954a5c001a2890f4446f92512db
SHA256	69f0b4a8cf2d8d3c88ef3df03db28a9738544213a201442ff98b8bd2f1f29b59
SSDeep	384:4MZJNsuyTcfQnQcHXZ8PLv+OaCz7KZTf2fJhgzNC6SQdBgMXqr6s:vdYcJ0X6L+/CzGZCfJR5r6s

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\HKSCS.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	382.11 KB
MD5	ab211628814b5f903725025bd1612b8f
SHA1	441241013437bb01d1bc31913fdd74d9969e0455
SHA256	dfa95afc64aad06c3c6fde56413aa64113ca5c04badad162d90cd558f73da350
SSDeep	6144:6GEVsqjsTqc2ot+xv6Jzc8NSHKfvVDCPcltChLf8h8FKOOB47jL5a2CE:6rP8j22+x6gPHKfvVmPjpkO0OzdJZ

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CHINSIMP.TXT

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	198.92 KB
MD5	8a2ab88f8ef54c0b64469b70c4523915
SHA1	4924e8b5fee1849fe197020e24dc3fa819e1b296
SHA256	a188f6a1f6974bacf3f9a6f40e456222c6b20f3685457530618dfbed291b34ce
SSDeep	3072:wwJJoFWohyPf6/MX7xHikeo9oLaKSGIy1xNeQLkNixKG9dO6K+It+WxQpumick3P:bP8Urxuo9oGKZQVNq3gtWpJCP

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.38 KB
MD5	c00dbddd62fece32515ec36f5e1217eb
SHA1	042478d3033ec45d860237c272476bd249eaaaf6
SHA256	ccd6b053b56c016f88ac52a83c0609ba34d3d43546fc0c3852a769aac17602d8
SSDeep	192:ydgGhrxBOHu/Aak7s9sz4j0fWEUPKicCKrG5PswDfA56+EpWpCXOWZgE69fKYlHI:y+GhrxVAaWs9wzpqBp+EdXjqIb

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\KOREAN.TXT

Modified File

Stream

Not Queried

»

Also Known As	C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\zpcwTV4IyK2Cxpmg_ENCRYPTED_BY.WHITEROSE (Dropped File)
Mime Type	application/octet-stream
File Size	356.70 KB
MD5	cd466589a4f70ff66e309e76d73ef046
SHA1	0612849d12b9aa29aa5ba3f9307f96ad806e4ad2
SHA256	bea84ed98441b9dab2fd4e29b319bb5e82e5e6a33749df9bf0dbb130ca7b6a57
SSDeep	6144:wWkYLO1zKQfZpVpfUl7TfVpKJu6U/DoAR8B+Yh6WHfU39jr3WjGBl5Xw1CJhtJZN:sYL4mkxfUlnV3tQ6JtnySvJhtJZIGCi

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1255.TXT

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.66 KB
MD5	e48a3bcf376baab87af10a53f5885af1
SHA1	60e9567634cf842d238dc32d0cfbad3d9fd2fe40
SHA256	103cb6c9a958692ca7b6fea6c415a5637bfc250774028620a824bae1f6f94d2b
SSDeep	192:A6FVOpzU94TRTTE18XBwkFXCZ0trFneJor2TJSwB4JIIOev:we1U6OJCooUE6

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP950.TXT

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	510.78 KB
MD5	eb79be0b88898715b4d9d1513f76a91d
SHA1	d5f4bb659984367e475e7b86a5a48bd6bf75b660
SHA256	6c35f37082d8ed961fed6affa0fb7eeee1d7b2c3680730b33edc1a0455124b8a
SSDeep	6144:j9yuMsJb262zPrqr916QSyccZaIG0rHkvuO0mRUu94xMldCcSQLMmXv0v5KMZ+4e:51+Pqh1/SyzaIGuHju9Dn0lRHc9Go

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrome.7z

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	173.49 MB
MD5	e6413b04508793c12c35a62212d9cdf1
SHA1	a834626eefcbe788053667d100dbf3ad45491875
SHA256	ea79defd73a3cac3532ac891f3fe765f4190df78f4301f5d69b5f7071c4eec67
SSDeep	196608:7/b+NZXibVKao9UVagSt+EHNjtBbDqJQKLfrH5JBbpyzDA:ngybVPcbEGPbDqucfrHB1yzs

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\smalllogo.png

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.00 KB
MD5	2e3aab57feaab4de4dc141d8d827b8fb
SHA1	1ab038ac3456dc13c26dc001f4c93dd9c4cd073f
SHA256	f729719bb032a1a68589e9c5ea8c2e8675504f656725f874f04ab9018c1daa7a
SSDeep	192:lGrO/ytVMp7YbbfnxaKb1ast3s14oKRX1FF3E5TknT1NzUVhbeqbIR:lGrO/aQQb/xaKb5t3srKnfWwTg7aAQ

C:\Program Files (x86)\Java\jre7\THIRDPARTYLICENSEREADME.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	173.09 KB
MD5	d7ed145647beb2bab1004778741cb744
SHA1	f4b15798a41a468bd082af5d840ec4fbe63cda10
SHA256	a1525032d07a5edaa5dcb648316fa7b7b7b34a7b936bd4a676fa80e050bd6579
SSDeep	3072:hNzm2uo7vNj5nK4PBc5be1vxWutF2yMk4zEXpF1V+KxWrSG2gxH6:K297nDZcg1v4ubtXDFn+Kx0fU

C:\Program Files (x86)\Java\jre7\bin\client\Xusage.txt

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.67 KB
MD5	0703a02a5465287306d4006179e0501a
SHA1	7608b070f22a7a09977f7070021ce8de8f66b0d3
SHA256	835d86c97f1456050bd97e17bd3615f82f7e30097b675454b86c6681bcb723f7
SSDeep	24:NjqNaUbqGfP2x9n4tOXFkfhYz32K9ihCxKWsGmF2457r3kfXsPtTc3wOh2OCSBn:waqfuTXC8wCxlsrU4x3GItwzZl

C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	432 bytes
MD5	2aea2987786b5a427884757c868b9813
SHA1	12c058985bbfb26e89a0fb8da306c1bd8ff519fa
SHA256	bfac4ff42db5527c287b55533377ad6074dbcf6e436420fff7c69b1d4bac1b7c
SSDeep	12:EOkz8IdUAlwc2OzEMH14mgK3wLlq9wbEyB+yetAq:Xkfblwcn1CKwpq9wwyLeeq

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.09 KB
MD5	89157eed16580e53fab7996756ace2c0
SHA1	6c1d2629439ae88797f0ef0f15a62e26ebca1bf9
SHA256	b4b1a994ddd992bf14d18cbf22e6c7d1f01cf4331777d93c4722ff4a4aa0ebd3
SSDeep	768:yNvDL+n0VhvexmAZZMWSYkon3PcaCiG5+ObTU7KWhyRrl5xazQXaMV0v8Pr8SmNz:iq0VhrwZ9YonfcaibggRxazQXaM2v8Po

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfo.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.41 KB
MD5	50825e3bb31f19f9320ec94445bf637c
SHA1	a44513f361e7e1070b1a155cee9ab05a6fb40889
SHA256	d43dc16dd7bed233e7536f63993f13ba7ae10fbf35f7d4db8c3f69185e3904e9
SSDeep	24:I0HRUoLsYjrk+zinrAK1I08vSCp8GMTci4saDLnj245usRssVMc935udo2f:IuUoL4zrAKyp/p8GUuHeBsrDudog

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Class.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	960 bytes
MD5	7427562727bd8afeb9e500d2c2f554e0
SHA1	9155b6a6cd0a54888ffb5bfe84d0a61d32d815f9
SHA256	c61f5bf9b0872fcd5b2b710d65bd0d0ced3ea7383c186dc4110f274b8bcdadd7
SSDeep	24:IqfDkPQMYvwofiA5lykN80Ru068URiiSN3izLrzM1doGiG:IqfIgtiAzBDiVG3izfzMTpl

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Interface.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.02 KB
MD5	00465d1f85f164e25275f1519112a339
SHA1	a91193292e801073f1713e9f228befee6072b2d5
SHA256	f62a613d21047d3ff68bcb42d8713b81e63ac0c262b4e8c7c87220cb411e6080
SSDeep	24:0KpL6mu1YNY8Cj3SEknxfAjkM+nZ+nHxirG5dC6xT:0r1e3CrRkxAgBQnHXd/xT

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\MDIParent.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.03 KB
MD5	c51869b18d7f3a804dad6f885553feda
SHA1	47843466e4b2d6933e4fe305ad4e187c92ea2801
SHA256	2c7e67281f100dfa7e58f58d850c0d2073bf9d6a3fe342bf54317f6a3dee2d15
SSDeep	384:w4x4wyZqD3v306Mc4MVvVn4Halj6vDajzTJTz//wYMjE:w9wAY306H4GV46J1Nw9jE

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TextFile.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	816 bytes
MD5	8e0b5654bc3e3367280e358ae4fc0551
SHA1	afe24878b9ab417fed9caf569fbe2cb794ca284f
SHA256	09107ddfc9bd4997316898e12dc2146cd1d3d810e2079b26badaa8b25a56c0fb
SSDeep	24:rh7Q6my+v+ZQQkmNi/j4T1+MODVsyhdOr+QA047p:r8PvuQQHNi/j4TIJJsyhHN

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UserControl.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.66 KB
MD5	6fe0fdb495219bf13740d059c853a123
SHA1	152c25fe2b7d2d3f45f7eba9f8c73100c1019490
SHA256	c5413b81373d6d61126689686430a1a51e9db3ff8959a85edba330ff60496af1
SSDeep	48:wgrSf/1M4L/c3gFJAYcFXWBJlQSF9E41kyjx:j6tHjc3gFuL6lNx

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Module.zip

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	848 bytes
MD5	1080a942af3d321332e0eaf657a7b308
SHA1	9fbcb258a95b60beae1e9f49d19c10015c4bf550
SHA256	52155d07a2450d037647ab494bf42d87170f3f65b6930d029d7d3e2b1cf7b9d4
SSDeep	24:QVw1SOK5XtfDPhLbc0BFVZVBlKMQHXaMpAoCh4:mw1SFNDBhrVBlKMyX52Lh4

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\128.png

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.27 KB
MD5	1206d040b66098663b2be28909e622cd
SHA1	d9646cc4ba1c5dd76c07c140d4d0480fb36983dd
SHA256	ddebbff78ca120ad154869ef0772160fbbf4aa45eef7835c73f7602727851b29
SSDeep	192:8/FwUHrcjHpHtwLdUN707eTPQkfkBcysMT:8/FnyXwxUJ07eT0Oysa

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\material_css_min.css

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	280.31 KB
MD5	49ccbc8ba575e9bfaf3bd05bc074d870
SHA1	ee6a3bea7ee991f104aafb532e95b01b2517f094
SHA256	7fccef9f56640ad809e9ea573541cade59c3646c40c549eff296aa90f2d2c6ce
SSDeep	6144:ytthGAC0788/C39RLtJYA6NfGOhx7lar4+IXtqrhPtG0ckHeklONhWyN:ye07TKRUGxr7IX4h1PHe0fyN

C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\vmlaNWf1stSsGRWD_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.00 KB
MD5	bf40fad385d14cc36d9d8774f48dfdad
SHA1	d081d9a83a889ce9f4192500df53e119c599da24
SHA256	92f731dac0cc491d6804d6576d2e94ce093b8ebaa78e7921b8ced6850c931906
SSDeep	96:urhwSvXv8URULEPvJMyYqjT7N+zZdCLkSAnaBWA9ghR+apkBtFQk20k2k9KXGDCw:urhlPv8pWORklStSVAA9++alR95DCVoL

C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\NL0QxsekVOgY3tnX_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	4cac5b3840c8a45ea28a4464ec789e32
SHA1	de92a181c57a600e9ffe4c3d731092c85217da13
SHA256	d89fd6142858508667da1ea5b3552b755a71eae9b45fe1524b7e8d82a66bd5c6
SSDeep	48:OAEhu8w0fVNbBZmHLVE1WjgCs3/Zzle1XtIgLYU9f:sw0fDNZIfsvZzKXHLYUp

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\FVSKpA6OhpjuQaxv_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.06 KB
MD5	bb4f2f0d4edd6dbad304301de7bcf0d6
SHA1	ea751a76ec3cc980d72b65beb91afcd0de918888
SHA256	e579b536a2ea606f8a15f00be2f804e60407492b345f41ca8baf4131ca0784fc
SSDeep	24:FzjceHSyhhu/vEkyjIn7+o48UwzEnMKfxNLmAsU7yQ0i4Vqtp:hjFS+cExMKVOEnJfizvVqn

C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\wn7s6U07zP3M6FWV_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.39 KB
MD5	e7f5d0786c505fc994b4c71910c7b080
SHA1	bbd24e81d1491af351dae91c1ef0f81ddf7581ee
SHA256	65ed033d3a6c339f8346ebb83ff5914430f0aea6de618ff7a4fd3772d2ed5630
SSDeep	192:D1G+sEZnRCGvCe6nwD1MpHNqLMaCdumt8SjDSRk7Ui+kFkZM+gfn7e2rE8T:D1dZRCeCpVHNpaC4JTUWuMM/fn7rr3T

C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\F23W0UFRuv3FOPkc_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.58 KB
MD5	c4f28207712e7344064a0418ad10081f
SHA1	6daacabeb21fbb8a63b0dfc085b6b2073abbbd88
SHA256	66092d29766b8c1ff3f80727e87cf08556198bbd5cea9c42ba8b3ddda6181f7f
SSDeep	48:UHN40eY7wDNPrTJylluPsrI21Y+W/nhBvgvsk3bJvE:W40eGurTMlAyI2QnrvQN3b1E

C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\URWff2HlQ1SGCQGK_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.44 KB
MD5	133f18d7aa609e04c0b7fb05090c0c3e
SHA1	b5589801a1124a6e7ce4534fe73d4bd9be6f8fc1
SHA256	3760be45c650d7aa3b2de0d5414291f5ad4509b03dd71e78968a43ec2b908268
SSDeep	96:tatjrKhzOz+HNsf1gdXjTMD+dSpGJ4uM12:tCrr1gpfU4Sslt

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\fbmr5YeXC4eV585h_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.33 KB
MD5	cec0ea8a73723f3ae220aacd74bb06d9
SHA1	1cfd9d271c3da26e0616b124ed10b17ea874ba6b
SHA256	0d208d4be5489bda6d22f63e25d93710a276a110d90ddfe5cdfef7a20e09da20
SSDeep	24:kHDOvj0ufCd/9uiP1WNsKmt9T1hfEktOmjF5epsHvPNSv7zLkngnVLqHa:COv4ufC3u61WNsltC1mZ5ey9SzzYgZq6

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\7LLlrATi7zGmgeep_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.64 KB
MD5	6392356a68591798d676ef6dd86ef3d0
SHA1	b825337836e493d6ef0d025837a570822cbc1722
SHA256	388c99f280c6fa64bff1dc79b2de09de01a4afd319a4d9e33d72f673a959872e
SSDeep	1536:87xdPjS+BDRFCHayUbTV64mn3y76HpU2wep8:6PjJRFC6HUx3y76HC2vm

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\fRmvWUvDwyYZVTe9_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	87.69 KB
MD5	25e22524117c0b04bb10ee2bcd81b4a1
SHA1	7754c22b88d535f1856382e515b5fa1e2b3f611b
SHA256	00d48702379d57e2eb7a3ca7e42aa3d9e5b688b5f3070ec001177022ad789261
SSDeep	1536:AVlodxxHt3yP2jIbUL314O9ivICD9Y78JV7bXk+Gwf0C2XP/vFMZ5G:AwnX3yP2jIbSX96L5C8PPBGI2XP/vFMS

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\gram7wcfeYZTO2Df_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.56 KB
MD5	6828d44d6f383bb90d619034a3ac6a9d
SHA1	198c3a10536cf44ea14754593917ff6920890ce3
SHA256	f3cf8199e2fdc853f9507d755eb45bc590eadcde5db54f52b3905e3968344e0f
SSDeep	768:36usZYrN1GWeEjenu2iwzS33a8NUWL9alQK8HGBQ4:qqeEQu2NzwZ9apWGBQ4

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\NrNsBkGddI8v7HZF_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	291.55 KB
MD5	45bd06758cf965d702a349d93127236f
SHA1	dea0e5e795a6f07a4930c89f5eb8b18b5050f943
SHA256	7d95cb513c4b87c11ffa3311db030599c284e5e052bde79e66b42320c6dc57d8
SSDeep	6144:bx9NTWs+IKvRpq3svjNOoTwlltGbwnBnOQNhn0yu2glbR0n5Ojf:brNTb+FvR03yjoYwftRn5Xn0/2glbL

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\OQhWijbKxVG54yPo_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	72.00 KB
MD5	d2f69ffd0a06721fddbb864f593f585a
SHA1	326cecee8d6b44e36454a6b8192591f38aa73b95
SHA256	0ce39da23b7ecdaf9a21881323f184d87c8937279faf4798eeb76a4a8914a693
SSDeep	1536:HjiL6CJM/lzXZL3fWgmZcqd1ebc6RCfnX+lX52Pc9Gt:HjiLHKzXZL3IZczb9Cv+tOcot

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\qjWLb5GjMzKJg5Bv_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	398.77 KB
MD5	d30a681823d8c9d98830a5ed24593a90
SHA1	c95d8ad564ed07cb11dbecf8052e7715dde102a1
SHA256	120e01fbc003296573f0a43652e957ba5a1de33b54445ea990ea775720504d0e
SSDeep	12288:D3dp69LC0Tzr/9G04ApVlIzQeiLfjX3CFIGnyI:a9PZnlIzviLfjnCFPn

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\GYuIQywHJR0p0OoE_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.77 KB
MD5	abf908bc5d36358accc7cc3a6ac100f3
SHA1	07246bd403147ad4c69f8336cadc4a73f8f09d90
SHA256	ef9599cd10b45dbb7b18de5c5dc007b7c91c084f5a294866d30951db17dee2a5
SSDeep	96:GK4saCmz2ifXopv9MsdBVI3+KupMVbk1kP2cbwzz4p5ZUFC9CPFmYY+h93A3H:GK4nzWO+BVIFu2VmObwI5ZGFDXe

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\203c410uTU8VGL7r_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	478.27 KB
MD5	e3c4f591f33846bed69b6592bd59749f
SHA1	afeef7ada531abd9e1f03b5c22b90dc0b66d378d
SHA256	42b71c189eadac4851f9e6030abe89d9b217f7c424037de03f0fc548c7ecb73a
SSDeep	12288:4nBqZlmwwnDYNz/gvVEElad+xD+KpcJ/5UvqG:/ZgwwDug9EAa8p/pcJR6qG

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\flFKy0Mpqfmb3Pgq_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	126.77 KB
MD5	992193f3777d4c092d44c36efbc16fc9
SHA1	0e1af90d23eb6bf900cb279e8709faafee750883
SHA256	6d64304a72a8a5e1e35f6ec681e231c54711011a2fd707411ecfe99f2285a862
SSDeep	3072:tysCpNPy8yBlwK7ybOmpWc2aQXscFbM+1VuR33VAreU:ty9Jy4VQccFf+Jy6U

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\pArkm1rsnSUdaZXB_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	74.27 KB
MD5	85e4852d500043edfc1cfd8350ad8d0d
SHA1	27c12007f5460914a622d4ade7343b7b6a5c2363
SHA256	c4050dd6a72d80f5815e870f4d8a3e6c69ed08a75d51eddcf02389589246797b
SSDeep	1536:RtrOahRAa2hm3AkmYO2S7jCqkQDdonADVHfVSWpz2H:RxOVa2EmYOf3CjQBonQVHfsWpSH

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\4xvHJZE2b8HtDCVa_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.77 KB
MD5	07955e5b4b06fe2e849f67a822890b02
SHA1	d918cb31450c9cd97f77e6d0cea7184e3db48994
SHA256	249856900bb8691f5ee4579d8eccc04e63153aa65d670885f1ca36a381a42c15
SSDeep	192:GaK7QEQTjRCUeOYlk2I45iTUsgSujmGVZtzvbGVbot7yiWGnoQr3tYUTORLMn+cE:sc7te4JDq1xVZtLaVbCTnoo8OE

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\eagUBKk7DBogq52n_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.27 KB
MD5	93856a87130f240b2d5478a0d17530d3
SHA1	f25fded098c560e7210916eb2fdf98fe6fd37bdc
SHA256	446bca58b727b99551cdc07ba625edcb5152af5b2d30c5b914df99561fc18f7f
SSDeep	384:FDpQAsfeP11AgS1DHZg4By+omr6f18SovGjdsRju8Joh/ISyPT5KyR+jIGyoqm6L:TjPv9SFq/+9mfmSWGjiR4/ISuMQakL

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\7KEOZm1q89PIDbbu_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.77 KB
MD5	7e39bdf64058d378261d786d678f6c4a
SHA1	68336918a5fc53d0b98827186d745c79709c7b68
SHA256	3ee3e4755b223e9369b5bae5899e9668a86b1aa9083001fbe763b28d618e0275
SSDeep	768:s3HVMYpXVUsyuOBtV4CI0ygxhN6rCab2jFEV:OVMYpFJRot2GNN6sjiV

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\iS5HgpM64VPdl9U0_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	34.12 KB
MD5	410adec21e5061c602f734ee13e41e6c
SHA1	0c7d952af37f3450ca96820f4ba8c0a19e9c1924
SHA256	198cf4bb64becc5933c9a1faba2b686d2fcaacdf1caf00a02216ef3f3202bb37
SSDeep	768:1zvdKkkbkVCLgRm2/EIMsKtAvpfu8unBEe5YieaKU4:1zvokkcm2/xMVtIpG8+z5YhaKb

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\lqX2VOJVaMnIUJ1V_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.22 KB
MD5	9350d43ec9a95e89afd6559f09607625
SHA1	6a47ce09db8a7d4656dbc027c3da5d3b0ff46e19
SHA256	34df3707fb32d07ecd03407d7051988dbb3555bff10a1944986a8b43a64e7f26
SSDeep	768:AhXMpJ0tPiUO7xVJhFjnOimcZwPK3rbxVja63cfsRWHj01Xt0rSzE:IO0wUO7x/hF6ZLPIjj1sgajQt+SQ

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\p1RlzdGLhDWcsl7H_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	330.08 KB
MD5	4d53ab97ff4c71de4525bdcd6751bb37
SHA1	520bb1d5b48c0b106de59c6de531532fde0fb417
SHA256	d8d4db39a6a543c8bf95dec9d561d6490deb60451b570ecf3e58c01b35f8199c
SSDeep	6144:5bXQ1+v8yUbjaniUOFAUp40vDpjZvE1436mHXM6jVNUWAXdxZpVsb9VUK93a+:5bXQ1WUbjaniBG0vd1vZ3BHXMzWAtxZO

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Wg4sLKb8g8LUjrtR_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	177.06 KB
MD5	3f0a7915067372a42a7de178b337fd79
SHA1	0f427f1ccf030fd79d24f6c2016ecc500e2ffe84
SHA256	6a1700cb9e76b9cacf9e1bbf4a9141089fd965c5980ba095b727c3f55cdc9224
SSDeep	3072:KZOVA1eB5066yLCGs3VRsCOkQMDExFW4eQKQXsrF6xhZt4F5438b//1FUnMhBdRm:VWeB5JjSRsChQxFReIXL/vTAeqBziJ

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\XnXVM2FfAzDnHTgQ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.62 KB
MD5	246c5bb52cda5325b2917a190bfd6244
SHA1	77bd975ef5f9598923ff8e933345e50fa55fb251
SHA256	5030ddbed0e8086fc9fbbc0b715ef103f1553abb282a5cfbcd64fe011fbdddf9
SSDeep	768:rWxjzG8ziP3aCFtI4YbIAFxs6Q9r7UbZH17r6fn7wiLG2kTM:rWEf3hcbIAlQ9rA36P7hSK

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\xt9fYMEiv28tZydd_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.39 KB
MD5	6a2b11b009e00614065cb6ed401366d1
SHA1	64bbaae58fefac18974c33c535bddf6c485545ca
SHA256	3dd3bc4b33a5137a66b0cb877e0d07a04422ac347da6ec880e70ce18514369d7
SSDeep	768:4nPOhw4qoIA/mpl65fRqx/Qb+dOYnvSe6GWSkX1tj8LRfwAIN2tsFr:NwHY/mpl6qdgDX1tjSRI/WYr

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\7O5T4vvpVoBLMjvq_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	95.03 KB
MD5	db003242a227e4946002e5cb9689b880
SHA1	2852167cb4deb38b2290f95f924ff7bd0518f855
SHA256	aafa204eb2918050174c6a188266997ed2b938e91ae34d288c7df414c9bdf95a
SSDeep	1536:Dnq6dvnwah6qX2N2NAiFS5PFeaE4Pjh7kwSW2pHtf0FBlhXiuB1z2nJ+R1Dkb8sD:rq6d/wah6qXs2NLo5MaE4Lu9W2z0Ff9g

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\AdlY6NMf268itrSo_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	41.33 KB
MD5	99b03b0a42919a4d6af94bdcf6871aff
SHA1	bfd934936616b4641c842cddc959bb95cda14d50
SHA256	ba339e1aeb7615e35cade18091ceab95acf700818e9f567fb0d330707b74d74c
SSDeep	768:sFN5iYtAk/60Rgg4mgRWhpjrtBhMwV353ySwX6V9nL7/SXTezOatpCNQpmNvRv:sEYty0ujCpvtBhDVBBDSXTLLv5

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\Ion32s7xxNYLGVEw_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	148.12 KB
MD5	d98e39ce16c1a1222a14a2a60f259bb8
SHA1	d3bd809296c0af8af5c9bf53d2c00cbede22fb2f
SHA256	1e99f81e0381c7c84c9085d0e3f5d28da331e7347cf1c9b0b06357fd15c58a26
SSDeep	3072:D5DJoou1gAG7TOIPtYkQfVDf2kWXMDzmAj8tAkVnSrG161a0XxI:9DY1g/XQfVDOk9DJYtBVnSrGrZ

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\EtKuX3wgd712AfJi_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	63.22 KB
MD5	f81280fabe8f13f22ff2da752bd0e2e3
SHA1	1770517f83094b5f87ec4a65ef811f406a012ee5
SHA256	3e70ed45cc8d24a82f218ae920d9039934b219e3cc9004066b68c1c78ca79937
SSDeep	1536:Et/6t//5R5Il7txPqP3EW3MwA/xyXq2F73lZPFBnd:EAt//5Uvh23d3fAgFRZPN

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\llronrj6m4L20yD7_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.67 KB
MD5	9ed8ec29393fa98d8e10358a04a7fcae
SHA1	97db53e27df72bdfc284666ebfdaba776a3f9a19
SHA256	02f393414ebb564d6d864d08852ee3e586073ca847b5f9b8bf380f591c4c9827
SSDeep	768:UsDrY/VdbPMeMzQRhxAfxorQc/5dokqDFYOFpOfGEoeJU+LgeDMXt:UsDrwXbKUGWDqDPFpwXJU+LzU

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\TSJpVNkhaDGCSBuH_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.34 KB
MD5	29cb6083d002658deb38aa8f0746064c
SHA1	99752a98e8af1b32e821fb6f8ccfd5edf06bc0d9
SHA256	082605726f3384febda6f23497d3a68fc30cfb948ce998f4384e344b88d806f5
SSDeep	768:ZVuKWANDHK49JXyxoq0Ydezd/10i8FRymvWXyBTkki:eiDHKGJXyCqRA1SimvZBTRi

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\S45MmqvozQ9XOS47_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	191.86 KB
MD5	900749b1d85b52cb28260f3dcf6a75d7
SHA1	55474e2c8797b373bd006fa7880d2f9866a03d59
SHA256	dc880052c2ca4a1d9378f7def85aab52adeda2874024e4a4d9d5cb7d2b697a7b
SSDeep	3072:39qWu5GvMMy5YDonUG1PlJC7oIJccH5M3YL0EgKsCb09DjbBChynjhVVVFC55h4:g5GvdqYDov1bQoIG4AYoAsZFbBTnjFVF

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\M0lMOcFURGCD4Kqd_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	92.16 KB
MD5	688b0670a3120467e6b6c16f087a79f4
SHA1	98b6cc2998fc54319dd884e87530e467032c94c7
SHA256	7498d835d5b17d1d59a7572f39a9c5352030b1bf037b91e054c4d1b8b53f7eea
SSDeep	1536:CYwTzeLL4EJfXP7SN1giEGjnmpZzlCG4FBPSG4SRYh2TdfyeRRI3CC4Z4GaPKP:6Tz6RP7SN+iEGjmpZr4j4A+2ZfVRI3Cx

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\lpRtrAP5ajx5gGX2_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.77 KB
MD5	6cbe210b835aee7a797876bffc35d1e1
SHA1	0654fecb1c2ecb8c4bd2a1a43b78a9daad10157c
SHA256	a8378b3a6917f887eda5df12a3dd7e3137f754e7a02cf17e967e1aa3985aeb1b
SSDeep	192:GL7rBbhBCnm+W0gwddef5b6v/nV6Fa2/tDiZ5Ye:87rdCm+WN5b6XU3ZiZ+e

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\mlpy2e987AYcHRaA_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.20 KB
MD5	35a915df543af35700a33f0e574d8f18
SHA1	551b109f0011c34e902f001bd5b4b8f0743a44b9
SHA256	432822a530580e8a8ec50c51d8362b57460261fb177c1632039e09b1e2fc15e5
SSDeep	24:Vn9Ert2MqWdJmVMUayEIMvDdo5gZKTl469+n+UY+w+KSWKXJfg11CP/es5I7V7:YwC3UapJvDdo5gZKTl4c+n9nw+7XC1mq

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\qVjTFD7XcrwHfsgm_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	848 bytes
MD5	288029f4da1467e751a1e718812a91f5
SHA1	7ced70f0a91bdb16c7e47d53efdab8409486bc3a
SHA256	eee2753223291c14db1e840327fdaf1de39acd2f817ab920be7748fc577bbe33
SSDeep	24:V0/qrDK6bqsd27etImJ7rv1YZofAWcJqE0jMP:V0/KDKQ07eSwvqOUJx0jMP

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\vZm36eES2fY7q1yS_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	df0c1a67c8fe27cd17d16b554a3880f9
SHA1	d2414f4c94023d41991bd4b17833808e0f96e8ff
SHA256	c6dc8b8a492a3eca9fc089dbb1d11e3f6558730ce06bcf8601c85a6ff9f53454
SSDeep	24:KTsOqzd0IHVaQMzBqCxYPoKO6sANPPU+ZSC9VBwoPzabiX:KTWdBwywKOlAVPU+ZJPiiX

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\VerMXCMJ82j5ZWRE_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	752 bytes
MD5	74fa01e0a3cef639fb01e96a340491e5
SHA1	612404b5abc4aae92fd84d8d13f66d97fec8f564
SHA256	0263ec64c80e6ee23953adf3465ce0b958a689e73cceae7839aa45e86838e788
SSDeep	12:ba4qeGKpmkSV+uDX+pB88tAqnCkoq2AhuVEz3a35Iw7yV/NEIS4OtDVKkHFKcX:m4qF6bSSpB8KAqnCkozAwia6AtDxQcX

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tznp4lDQwoOlMI0R_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.14 KB
MD5	38f2e2e843636a6c00584106ecbaaf66
SHA1	8655897abadf8c8d205c6bf99c45064c907dd334
SHA256	415855da4293b812b6d93993081abb4de25b1a053f1379bc74cf5b8e3e50da5d
SSDeep	24:wqRlru5Szkb3A4Tsuj2/H1Ed2RCFDok7lwXPsk4Ln77:wqzOSz+3TseuA2QFtiXPsNr

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\1QzweS0avTC4DOx1_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	efc12431a6ed9294305b0ed1173496ed
SHA1	be97cf3acc4f9f0eb57226cca0dfa459d79347bf
SHA256	2dda163e7eaa1e0b7c17a6b3ff3d05194fb3374e53750fc9b0c56930fd9a86b3
SSDeep	24:7D5JbARL0voWiL5Wwe911EKxkboTWkcElfcXOHxOD/cGcE:/5KLlWiLMpOM2EhcXO1E

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\RjNeUbctNjkkThWq_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.38 KB
MD5	e12a68a3ae12a9ed083fc4ee19f3f4f8
SHA1	3db9aad606850f7af299b20288b5ef763248ec0c
SHA256	cc55f12253f462a473052d85299aef36f399d39752002905eb96e979191a1fa7
SSDeep	24:NwWKb+kVnb89MG/woS+j1+ImXzvK+wfJbTaT+v0F0nwv6r+z6PRP9g1HAQu35AVu:iWKbJg9M8wojhOzwxyTaGmPRP9iHg4u

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\IM3XyugL5J5C9MkQ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.62 KB
MD5	fb48d99e48d1ddcd25deccaaec781095
SHA1	f85abedfcaa4853089d9bd93a1b7da2dce12946a
SHA256	a0ced1451f5374d1bf604f7a00c89ad9d3fd0b5e61124aa2b967afd313b62f7e
SSDeep	48:l5lkYkNKpOOxyudgffiGoMDGQWaaNaLCS/ejv/jC1z:RvkNK1dgffilMDGZQCS2jv/W1z

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\iC8ooqJWa6qNxtOM_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	480 bytes
MD5	c888f4d5c927700a2f051f9149e0005a
SHA1	c2895ab07bb394a7e6176484d25b0b71d5c5c409
SHA256	4cd6a7723753d8877df5372dfa89ee444a3dae122c585be641773a00c779ec64
SSDeep	12:qjy8LX0WI/irzCcJ5y4XjGwtW0BEb2F4AcTbiB:q9IH/IzCQFXSEWki2F+CB

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\JVqyUFgpyQwgcFH8_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	496 bytes
MD5	e3dba1c02da91c9f3a7b7dfab905e8cf
SHA1	3e70428687effbfb952a7b17c97275b2f3cad879
SHA256	53d14ab4fe71329a624927223dcd35c5bec0ea9768dd4e4eb5e90634edd34db9
SSDeep	6:dHGAD7Kjyy7ORTjArUilp6+KquOymR8HO5AXrl8C2lu2ALfQMSjfH8E0/htKx892:NGMKjyLYOpUH+7/Cw4j8E0JUyu/n

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rRTYdho18HYQGDuX_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.14 KB
MD5	9033707f9db58092f3dea26b1ab729ef
SHA1	61bd3bc8555e3498cfd2babde6bac5fa684b7c9b
SHA256	9eb59bfeee380d11cf6ec546aae0946e224420712a31b68eec1b55feedc69291
SSDeep	24:YtJaA5cfdLDDbdNLvb4rWEFQ92wgEN6b5lYvvYPyunIw2K6zIN0cH:xAGlx94WH92pbX2vYaYIFK6e0s

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\M3ptqJ2MgLWleAbK_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	352 bytes
MD5	0fc383380d5de9bdbc8275f560a2d0ff
SHA1	f36d1bb1d7f16788ef444473014676cc7ce6d31a
SHA256	91860245745ed0ee99fd985738cdf8d2d6dd1f424c37f49aa88af49047d19489
SSDeep	6:nlLnS1lLSxNiZl4qCq6kXqAEyilHY4d5jvQ+jvrYSBLogtXn:nRSnCQq+CAEyil4Yjv/o4Fn

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\3GYp6dRad4k37kZT_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.39 KB
MD5	a3d1aa6ea96f9dda8f8978e49900343f
SHA1	f350925ef62d2333988f51c719c08b6263c74bcf
SHA256	d94015588b43a88f7ae40dd01addc3950c240fc69c7572dbe6cae0e3787f2d36
SSDeep	24:JSaNbzR7QUJQ7bu0PW3MaH8JiAOsrP+1Tv4o8JFWWhs9BUOcHogeBNrpgL:QaNtQQQ7buKZYAOe+1TvsNKyOL3c

C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\9mQFeGyn4OjAHSyh_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	640 bytes
MD5	432356a0ab056b4f2cc46d5f0faf4c70
SHA1	ece9658f59701f5ea2d0ed5e994d45d7926f2e20
SHA256	4f54cd6cf90667325d807c468b7625d3515cba5b98ebfe4d4aaec52d17b8ac19
SSDeep	12:+yvCyHsVUmbDbk9MdD7Ss0Uvka2mV071pUr8MDxwCusZ3xrX8ws/an:+yvx8UCbf17SQZ28071p2FwCusrvs/a

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\eI7zaJ0UZhLIczRV_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	209.75 KB
MD5	fff4c73fad431bc0773d2e6172e9bd39
SHA1	314700997ced3f8c05f95ae8e9640c7326633f93
SHA256	042883d031b781e35f69ca4def1f1c25c0ef430501277b7f31a396ece6a393b5
SSDeep	6144:LpegcuaPM62deuXR62bJqlO1ZJYnJ3FD5+diy:Uuao0UR6c2sZenJ3zuiy

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\eNgLT3JYanuTadDC_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	103.92 KB
MD5	0f390407fc09ea4009b51534726601f5
SHA1	072e77e8fcb20a017ff402158f76ad832ee7ecef
SHA256	d8030f31f5b11b0d838ca74b62e486a5de95cc143ef864705194c81ff2a196a4
SSDeep	3072:S7mrfiYwsRoJreWLSflVdRVANDyzzOrHPy:bfiA2IWLIlVdjOra

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\7gutylOfsOcapH33_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	167.97 KB
MD5	679b37160cb12a402b92377ddbfd6e2b
SHA1	9323b05f70ebb9aa0c57f2178b57b3f5dfba0dce
SHA256	95d5030f48eae80588efc911a34a420808a9dfcf6956b8c4a72fff661ca23d10
SSDeep	3072:HYXA28WhAPhuUY5it7/Rp2P1fKnjobi90axwiuKl6BFbENlFeEuC38Lw8K7hhKLJ:HYw2jhAPh654s1i0bU0JTBFbENDeEuCm

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\J9oEb2qK6YgfUHdT_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.91 KB
MD5	1cb11ebb0346edd679c9a0c7f75a4767
SHA1	c7816e2544f86777b9a0e1434bdff4842ea0cc12
SHA256	12b4e8bddaebd3398ca3d080ed91530686362bbca029d34bf3b4735c65c2467c
SSDeep	192:OGHmKuseCqhB3uKg4B73/0TRsEGvNJcF4YWuNFRU0uHANM0mn2HGadC61BRcETsD:OGGKuseCOBx/B73/0TRsF1JUhDFRU0u1

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\6sPR1YZlR2DvlZBr_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.77 KB
MD5	79187437505644e7ef3e35b17a82d92e
SHA1	1583f6f50ef0b79847d72e0b4615f30212689f51
SHA256	3b62d3f5daead1bfdf643717b966973ee90d17267d4b1107295ac9054c74b639
SSDeep	384:Glmv1yqyKDoJQkGWKCDUDZ3NDzCJQ9nT+0uFcekCC+VEsMaaAZY+y3hIg:DBoKkrDUN9D6Qx+tFcekC9VEs9a6wig

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\MjxLqoLaZYpuUgud_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.50 KB
MD5	8e137a5a4cbf2a650e8dbc0d1f36ac6a
SHA1	68a095bb7b47651241f836d8bb28ad59a7dd0880
SHA256	a71320aa84f19cdd6139d87315c607dcba8def4b7f92f4db4c32a1f7e5471994
SSDeep	384:A7S/iRqrkESCsyqEuIB4d/VTldid/+M2KpYXO0:8S/IRELsyP4d/VZdi9b2Ku

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\DkR6XmCZSrZmD5hu_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.30 KB
MD5	87e6696dd64de6ec4ef200bf3d11cf69
SHA1	4fa75f394c87f86542c98509c5426337ed704826
SHA256	a1b677aa4531d80d33621ccbbc3b122b56cdeae90c9461f8b9a64d4326c7f5a5
SSDeep	384:iJI50EvvlO+sNz95x9P4eGk2tMwnOX0uuCrpSEKS:iGEp93hfGrM8OXCAqS

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\jczZnMpN1oLlbmah_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.58 KB
MD5	dd92f29dfe333d26b07bf4ee5162e067
SHA1	160f8495789d45908cbcffea0d404fa6169587c8
SHA256	7a3076b26bc73506bbf787a717f2282b5cc3598547e6a4919a0c5898657ed9dc
SSDeep	384:zeq+I18IxorAw9qwSVqqKFbId9/l8mr8w+9YUWZY1jeMeeOv/Yv6eiKPiRv+MmjQ:ze/IG19qbqb8d9JuPF9eM7g6m5+acmF

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\aGNH37t7hPtDqQzH_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.12 KB
MD5	f68d5bfa38a18e3e81b13487ab74096d
SHA1	8cdaf7a3ddfcda82b8173d433b4743d98910ec7d
SHA256	2add9f1338947909fb71c17c99aac0ad8ed8597facea25636b0010daa062a51a
SSDeep	384:6DcDjuG+MYC4EqdNE4PTSv1O30QxmmbJMtTQ2nPnEhyGV:hDjAMYCBzy0gbbJMNQWnbY

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SxvCsvgUpMeDZ9st_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	200.47 KB
MD5	5671cb215bb787d6d975e6faf99702b1
SHA1	e8ae1e31d29eaec86c7f96f8226667c6d1755e51
SHA256	cf1aa8594eece0f837731102550c6b166a2e76d3c156316f3a18ea6ca4c15bc8
SSDeep	6144:JN+muP6hgzC5nfb0wqbWjG3bXfcVdN6Zl:JNSFG5nz0wqYG7S+Zl

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\dkRdpO2ZBMKhX7ra_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.62 KB
MD5	16f81ca8b900bf93191e6a9994c27bfd
SHA1	c7a111575822ae4a1505e9c66150fd73f8bc7b8a
SHA256	3417f0f355347a660965c0c8234efd2b549b2fee7fa15462d77a0f57f84dc9a2
SSDeep	384:bLfObERKuWKuncQD+8DjAsXL8LDI5NrpufuScGHdoS6:bLAEIbKucXz3IjrpKBqS6

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\8ieKQjHlzamtOv4j_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.20 KB
MD5	859927193890d9f395c3e32d22be7ca3
SHA1	97990a3b442d4a6ae098b27d6432d8da0e567a90
SHA256	334b108c744fdbfc3dc2129f2d4cf880e3e5a7a66fef93e21a957be2f56e0891
SSDeep	384:Zf/x/+/ODDUFOmXeMnwzAKD/LcFnisRbgbPHFqkxmkUlNGJ:Zf/x/wO/muMwVDSnisx+F2lNGJ

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\yByUlydPXWrXtHVF_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.86 KB
MD5	f8dd530576b097417d384f41e56443c2
SHA1	873d680657add096d5a165d0423f623343e8c084
SHA256	a1648b104965b8de9577532f260f9999059b0ca3b068f66fe21ef567ae2425ee
SSDeep	192:Sy4BW0umXBED1sCkMTFYa4BhRRcuJ7ZDI6w8u9aWrox295UjHtJfZ:SfW0QsCkeFl4BfVNO8u9kegvh

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\Kei8ciUUnq0Kg02S_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.69 KB
MD5	4ea9c554250f0dd4aea571d9a2e0cf47
SHA1	f3059d77e3c231815c0b7c342e8d2fa8a18f7ade
SHA256	c8b440134beb846230eaabdb16a62b0cffb759473adea9b4ce61973ca4886b93
SSDeep	192:AGvGA2fkXYGjoWbGx3SmGe7XOWfHvzFol2g3w2MsiAJF:vGfnGkW6x3SmGkO6vzi+NWF

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\iAeKh3L1NOD25Vi6_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.67 KB
MD5	e58cacc29467801e744cfc06a09f5900
SHA1	1081f467f5e863df6d79362bfcf5baf823820c7f
SHA256	796c035afaa43bae0ef9b20fc58fc4d6a8ec4b1c26d99b2a17fea142b15d41aa
SSDeep	192:q7KmsVWyJ/CeOCRaBIRNLYlJ0osiIW1sr/xsNYAx+ijI/Hb:C9SHBfJ7LYlKPWsLKHxhe7

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\xeOGWwBoK73HWE7d_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.00 KB
MD5	068f1ea153f70cdcd7f200ed66620561
SHA1	c0ce6ffb273814369a0d2a4e7956d3a4f7a79146
SHA256	17b75216b3f64165ceeb89c13a5f280706673ec093a562ad61f5f707252cf5e5
SSDeep	192:K5hAYVm9ObA+79X4PJzrDs3XO3MewcNr6aj:KYWm9uA+JyDqXgrF

C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\hjFIBiJDN5WWuvfk_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	789.41 KB
MD5	05247001c2b06cff2118d9a1acc6d85f
SHA1	5195abff75410cfd8f026080d18c959fb222420c
SHA256	1ee7b7d65bd8ea077d1f08481b0537042688702e39833e5336e3ccec88fbe762
SSDeep	24576:uCwgBOMQEbWWf/qbkFqmIBPp52eV2Xl745e:uCwrMxKbKipV8ge

C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\outWcKHREqCkYKQq_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.92 KB
MD5	e75556a76f3025a3bfa28681dd26e737
SHA1	66936dfa2fa035024ee1a8684cf212916ebd624f
SHA256	39705d4f99a7fbb116b4e91e0527554691c495bd6f00bf8741d12ed0cfe42674
SSDeep	192:9X0uUbgYtYxRdinshVlHvycJyceBc6si3dN3NqHDE:9EukfIWnshzPyUuXpB

C:\Program Files (x86)\Java\jre7\lib\NoOsF7cixkx5YEiK_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.39 KB
MD5	728dc41423d87af8032359280b752772
SHA1	50ce50f0264328f6f086fe2dcb21cd6de26fef27
SHA256	9e54e9855a0856f5c701f956285392e75a1a40b91ac908b69dbb5e349eab159f
SSDeep	96:g9XSgfRRx/6WTApo5VPP/FHJGeCIS6HHsxokeh9d6fmkn8mhJPh8:g9XSgZqGAy5FFkeCZ0sykeh9smk9A

C:\Program Files (x86)\Java\jre7\lib\deploy\44mpjA4HuCWKPn7S_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.45 KB
MD5	92737683eadcfd8f707a4519a9910e9e
SHA1	29ffdb7d31bdd7dd63f41c39bfe93dfd38ed60c0
SHA256	033e44db79630b5cb867dfbdbff80003b7a9477c5458be3bdddb466c8c7ee28a
SSDeep	384:C2m9t8ikMKMSY6itS+JnXOAIhHwH0VnM1XjzdKvJ:CfrAJMH6iE+g/hQHSnWd+

C:\Program Files (x86)\Java\jre7\lib\images\cursors\QBXzVsxIskGiYdz6_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	416 bytes
MD5	a6b5d219828e94b53940f156712445c1
SHA1	1cd8b1290b9a4d1ef21a4d706bab24bc6c164b8c
SHA256	976aaa933b31cc9f55d8de4ef99d9793d76a33f25c7f2a48a02801044bc03232
SSDeep	12:4tyZ6jiuNc7L4QQjl93aDO5ne9p5xHA1N:4ty6NLD3ao8p5lA1N

C:\Program Files (x86)\Java\jre7\lib\images\cursors\6fwwzXn8pC6ZQXmc_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	416 bytes
MD5	8997ef80d9b76b232c92fd8de3c96613
SHA1	3bc8f9a0ec712519c9a3774022ba0c46d1c47591
SHA256	e4b75381875abae191dc2ee2a840c21d40ad938fcaa1f17766ad91304e84e1bc
SSDeep	12:4tyZ6jiuNc7L4qrmf2G9ThM7sG2IY9Es1OpBih:4ty6NZf2UVM7Mr1qih

C:\Program Files (x86)\Java\jre7\lib\images\cursors\YdT4Zt5tn2GbHnYl_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	416 bytes
MD5	7d702fdc5de977537d406f00a6e16f9b
SHA1	63f11c7135e04fbd7875312ce2e78429f55395dd
SHA256	6c3204aa3890694429fbdf7709751a12436ce67fe3f666b641f8ba9678c1493a
SSDeep	12:EOkmVtPes0w8Tt4WjgqxNpM0AYShDPq0qj72CEB:XkmVtPwDTtbjgOxAnDySvB

C:\Program Files (x86)\Java\jre7\lib\images\cursors\3MNnDS2juSeFfZ59_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	416 bytes
MD5	8e8de84b8db53d9d36a523aae3f880be
SHA1	ce83fe0300159cd3e4ad07604418afe092e05382
SHA256	120ad4545f6f8f1d92bac9384e5235d6a230027089278ba7d5d6f1541af4d9f5
SSDeep	12:4tyZ6jiuNc7L4eVGlLKvrO2JWuxQNXPMhe6K:4ty6NCVGCp3xQqS

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\PknxeKvlsAZdoOwj_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	880 bytes
MD5	b397ff9334fb2065f4666925b86b1b5a
SHA1	6a0d056fb633ad6c80e8037af6e94a0c1589c520
SHA256	cabd7ac3ef80282412b036eb7e6038bfd5a7040329be4a382c2311b21fe3a0f9
SSDeep	24:IaPSUfZcdPkAjKXojxuzZZyAOn5KPjIWEBcc7bxrWAis:IaPNfEPkAuYxOSAk52vEBc4bpvis

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UWvhw1RNRshb5GdG_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	816 bytes
MD5	e8eebeca949231e7ddfd9672f9711411
SHA1	6e494a7dece82d7f9e1fc0e85bc1d965a020b57b
SHA256	89668f615ddaec7b3ac893b120ed141b38c3042160958fa2a13d5079ad9d16f1
SSDeep	12:IL7bsvG7WzIon1EqqwlK1ua2sNpDlCdvvdkr7nyzh/MWN+7XoFycMM/GA9YyR:IL7AGQnBqw8MsNzoHkoxnONM+JyR

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\vQkef0FJoHkXp5BF_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.64 KB
MD5	bf6d0e666547782fb53158cac1007019
SHA1	cdd9d4e192077726aa5b52d3fbae60d088f4f70b
SHA256	079e488585f326202562f94f2f5669328c021b450ddbc41e5fcb2e88b4f6553a
SSDeep	48:NoXeh9eZDIj2Mm32xpPv4On2prSJ6IBYtLltbvdhGf:YehsXMA2xtgw2prw6BZna

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\0ej2Ls7LCTfDnnam_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.34 KB
MD5	6cbaee64ea2f8936eb2bfa13918070c8
SHA1	088a7f9707325e1579b8b3c6f3878f3a72f5fd8f
SHA256	899790bd53dae70d4bfc2c78ec96673aebd01e64c87aacbfe13128260c790473
SSDeep	48:DBXVUhpKzzRyLMn/evKITeHniKeYWj2xqS5YC6qetVp5ylGSO7euDG/+F:DBXVULpLAEKLHnpVbxY17vEzO7ZGw

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\bNdlpS4BJKO8WZg0_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.19 KB
MD5	27f64556028d9ff3a6fd0840ce01d0dc
SHA1	c548ab526ee6f77ebe27580953bf5296a9b3b879
SHA256	d856ed6825af02ae5e84e1a8273c598813b0dfd6fd2f8048e98097d0a2c1de93
SSDeep	24:vmgm7Ph3jZrexj24XO0b5mYFfiqwsB8i5CquiOYoiXwEfcU:vmgOPhzZrujf95mIijwVUHgxx

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\NH4i01RyfZRSgnF9_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.59 KB
MD5	252ecb4c5c7337ac605b234b6a8f8cc8
SHA1	f8dbf1e7cb9ca22af0e6a21081a2d287928d5b76
SHA256	f1a336641349cedb087e6eec58d851e5033bb647d8a42739ef7e44604ebd1a10
SSDeep	24:eYnplOPlVHHGwSczZlpC/JJDAaXGWX6SyahqWMyizZ8bLLY5xh5lT6:eGvO9HzR0jJXKYVL6hfT6

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\kYeplwmTetGA0s4h_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	864 bytes
MD5	0dda9991d80c30c46aaf91453ffd7498
SHA1	65f15647eddd205daad3781593aa0762786433a6
SHA256	6e4106ade37c95cc678dfbad01d02fb84721ada1adbadaeffbcbd6302091f1d6
SSDeep	24:L7voosg1yyl1Ju9bLT9bde3kDSe4K07tl/j4OstlodcU6T:L7ug1yylHuvU3kIzutloSUu

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\JpFxFxFRKrsTDGVs_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.53 KB
MD5	9f2f770699689f3f1bcb8b958bbe1e22
SHA1	a716ad660b71ca7e484cdeb2b83f80030f94b102
SHA256	3ec653a539eeca12565bd36d3979357eaedfa32c31e667e1b1742d9a3b259b37
SSDeep	24:QuznqV077zPQopEI0FlvvBr9uyCwdYqX6NPoXMzftgOxrEg1r1gaAlO71JPuKNCm:vOeTE73V9Ai6NPoXMzlNWna0Uzgu/P

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\MZyRjWCHRh2nbh1e_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.41 KB
MD5	1596c1dded985e45e5a3e9656c012885
SHA1	3d51ce418764059fedbb87e3babc1f33f7ab0989
SHA256	3ddabdd1e45ed97ea0f1898e1867df4b29b961a9c36a61f00c65101c4a791504
SSDeep	768:jm/1lbjIOGLrxtSr8CguUWGQNlgfuU0jso+YYMwyV+9AoCJpBtzPoULWfm5qvq:y/H3ItfxtSfwQNGfuUeso+YY8WoRtzAM

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\tRgMKlowZfMmJzU2_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.94 KB
MD5	e5a9fd06b9843d91b4aa529bfe8b9b93
SHA1	d319370183a6b28c02758bcafec57535653b8a1a
SHA256	e4d3ba4fad737c95f347d676894b66f89baf7066146816a0556a81d6a010c83f
SSDeep	192:dnC4DQfhM2tusSRBu94tPJFXu0OFQXMJLwXtBqtwMHe3Z73Vpcqfo00hyB/V60aS:dnlF+45XWt+tKHCZPcm908BVl

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\I5Vjgv4rxA3D6D61_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.28 KB
MD5	f1e20a83e08047a6711c06d0a1327aa0
SHA1	6e4d81a9cfd401a9b4ed695e1023351596e694bc
SHA256	149338eb131849cf960930a2c21ba4200233899945bf5426ca075c0a29fd3413
SSDeep	24:a8p/v4oZLzfFzIbVMvOfhnI80MN2y2vGDfaByS3yS8m8Lwf6uqpuxbDhH:jnLzFzIbVMv/EwGDQV3X8x8SVp6hH

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\4erOsWFdHE20DBMN_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	59.28 KB
MD5	32cdb74afb02f07e955d084897489532
SHA1	dfea231d54c82ae58490e2e64aebcf5d1ae41e50
SHA256	9a6a1314f6f72a8e4ec8286f81d815bd5c1fd2709f7b77473e9d2d369a2995ed
SSDeep	1536:ukgdkSagYZNuIp1uj8w3FYmKkxmI1dOOp1mooHEjXhBO/w0eREM2q:uXGSN8P1s8wPKkxmU8OcxohBO/vOt

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\BznryFvk83vpqn61_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.69 KB
MD5	7eec4b2f7b44b840b01a250a74827066
SHA1	5212a32974b1f122ff830f6f87844a1665bb48ac
SHA256	fa2c482591fcbefc75901384201ad842a614eca7ec076c3155e76bd803afb2af
SSDeep	48:bzdOB3ivfWwptpACU9r+Pl9z6P57kLfcM:FYIWMtfUAPS57kLkM

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension State\JBnIEdQu2bJKCUTV_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.42 KB
MD5	87faa32a304c06b3deb076d5ab2bc6a5
SHA1	35c9cfebe51df14d3c841c0dda5091cb1fa187c9
SHA256	f625a12cc34207a6fea163921727d334f462fea31496ed68833e2b6aa7f2a6fa
SSDeep	24:uDXzNigYsW4GRNkhERWMTnHkv1nmfvenaYfmTGASeLsumo4+nFPOPMTPGlRx+:UMgYCGrWQEdmfTYfpC4mTP6Rx+

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\Q3pcqVpqXy0x3RqR_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	236.34 KB
MD5	6ff7705bd061567d3b11a691929259bf
SHA1	415790dc59111f644b729e7c107ae30a4ba54f3c
SHA256	461fdc22f16e70afca83e93c3710762e5db14cf255ffeb6d4fcd6fea38e7a0af
SSDeep	6144:WmaAwWdCwbmS/8j2Jbl0doyt2fU2eecAF+yOjcUA3fXgZjQDyBEi:/DhdCw7/vbl0dsheQ+yOo3ajcyBEi

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\css\uV4ElyV2G6nWVFD1_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.95 KB
MD5	5a8a79397ce99997715d4d89d825ad0a
SHA1	f65faf10810a7ba428906f827107fe8781c3a9a1
SHA256	d88a578bf8125e2ccb7b5d83a8a439bf88d93712bf36c02044c686c3b5f139ac
SSDeep	48:+1yqgeivTqssOSDaxEy8L1SoypWdQJJ1T9KYzUspTI2bYRjqV:+IkibqssruBQ0MdQJjDrpT3a2V

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\html\hmsDd9P1rHoj7Rju_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	bc9665dff290e29eba3a4ab73e5a2bf8
SHA1	50473e539698308a56a75d32f0b3eb6cd67b43ac
SHA256	5003c04610755b640e013e1e82bc3a0e18674587e67253c9e978a4ddb8a79d97
SSDeep	24:rsuH4qEexi8eVA0AjGHF1O4HkPf6VYILvroGULB5e7gF5vkTgemb:zxi8eojGHnO4HkPf6VvLrozLBdrggemb

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\3O5SiXzEHvJNcKj5_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.52 KB
MD5	7fb011160fc8119c9ecc279250316895
SHA1	f504fbe910645ef4c997552962148d8afd6a7ae4
SHA256	5714d703503219c9d6ccc4b480c2162915f5818426ab3c2cd2cea0e69b9acb71
SSDeep	96:80JoXguUaOBkG1jtsSHclZiLo3ORnmOTWbOAeFxacQmP60nsJ:80J9bsS8niLo+RnmwUum3mXnsJ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\MkQi86Ul0pLrhh6j_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	432 bytes
MD5	aa7cec384a815dd30915fa5f4f065047
SHA1	abf435bf8a5393a34db7422892a201b76a2f8480
SHA256	87f3f1815740682f92e9e7884971976fd84d5cde74bf30534976f56bd7ad7c86
SSDeep	6:lxBikbCQEG151qQvMyYYEQZES1EDYvnGvT+sYPebzsdPgeHnTeriTrh2n7MJb/l0:5bChG58yT6SvOiRIkPghwrh2n7Av6V

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\images\FidQwAzJ8OnD0HGs_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	432 bytes
MD5	df177144dfe1e479e2d842d1af02bd70
SHA1	e8196b26fb1aaf90fe21f4b28bc626e98a532fd1
SHA256	1729342c2ade240dc87225bf69c91d83720f1c328b8079c29797a257f221a2be
SSDeep	12:5bChGNEPCw2qiV9fD2YjwdC8q9CZcZoQwSH:5bwGSPjOF2OwFq0ZcZoQwSH

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\wDg9RlBiSBRuTGop_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	51.78 KB
MD5	b390fd91d8409968c6cc47e338fe3b5f
SHA1	2d52659c6d159b7cde29c884dfb99f44b7ac77aa
SHA256	8e91c43e96114083a78c8f442a020e2d028dfa31f0e1b324c126b79893ae2fc1
SSDeep	1536:WRGtG6uxMZLOtv6Nhk8b68YUB0kQzQb/Y:ls6uxMZ+6LjJhfv7Y

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\nEAqnjs8L6rmCtbG_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.30 KB
MD5	f1cc8577eda16d576ba24f92d08ca427
SHA1	388388a7b8509f89426836c05141bf4e6e35e2fc
SHA256	01dbf86422fad3d2332a77e91d6ac0d0d02fbe49a40fc95f2e49ba47481b9ad9
SSDeep	96:etnkgnqWa1rGVJFyAwrJT/La/kKOpYnOvRXhaoxt09YX2Ac2N4y:etfqWcSzeJDlloSRXTX2V2Nl

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\PpPZ3Tc5xNFfNlGa_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.42 KB
MD5	124af2343f593eda514ac1b2cb052055
SHA1	71e022f62009a9423d7b302a8d3f70b8812d019b
SHA256	c26d0fc93912cf8a2030189312efa5bbb515698185329aae0390ae431a2395d0
SSDeep	384:UBrwHz6bCLUpq4ByyR+4bcxrcbSu3JIoze1o/PhjIG6I:U58NLUg4Byyw8uu3Jpz9j+I

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\jmcFVQgqew4nYNr2_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.58 KB
MD5	cae7c18490237ba763ff0133aea3c1d0
SHA1	3cd901d5c62278d9a3b9dd0fa8c23c9846ae1217
SHA256	8949e1f15d6b496a5364f2e5b471ed0933ca17c350160a702c1ee5c0f649455f
SSDeep	48:FCiGfJ3x8Fs7gp+mIQ7gcHtY1Tq9rNLT2g2L19na/Um86xU8EeS:AfJaFmG+meUHf2L3CX86xUZ

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\iUhfMv5XQzUXs8PR_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.78 KB
MD5	70386aa14fb96e0c40f01a05851dd1ae
SHA1	528028c50b365a67500a9888cf2b1781c31db898
SHA256	1533a9fcd8fb70a1fbd33dc0a84acd68e69eb58508bc14b30492282b18197196
SSDeep	192:fjHxTwbM+6xqZbXkstQ47I4xfDViJ4H5dC2:fjNwuxHDWIkhiJ4dC2

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\KFvPp6NTCh0QDYjm_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	512 bytes
MD5	43ae4bbdd1e3f4c4cd7f33f301e26e36
SHA1	49130dff45a1993b0f9cef86eaff57d2533621f1
SHA256	9b59e1846635326c0f255058365a262c19ef897a58f6304af23ccafb26525e84
SSDeep	12:uoOLGwoZRqMYlQ7dS3OyYQ5MeC9XXqzDpebc5V:zZZRtPdIOPQaecsDpebcV

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\NMuKW0yfkbyVFUOZ_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	320 bytes
MD5	740307de7ee232cfb1fdb5553c9d0df7
SHA1	2ff7b8c04aa62a661e96654706aaa91dd5021b57
SHA256	ac434161f15871c4c969bd43b0818c84c305b6aed895e1389f676461b1619a8b
SSDeep	6:eOUQhdqKDXJZ/0wSUq+WzW9r3DwsRp4DfPVNMyFs1H1xZEBgFtAeeDOIutxmOBWO:/UQhcYXHLXFwHDfd+ymrMcGeeo7WO

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cast_setup\4Z0hrhbaTxOb2Y1Y_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	320 bytes
MD5	a656c8ee8dda6b17e4cb5dbe94141a1a
SHA1	fda6b4768ef893e9994cab70100f32eac6fdafce
SHA256	9c503b25d40f74e0e04f987a58114a9d2a876da3aa62b2a4ac02a6ab78e09854
SSDeep	6:eOUQhdqYeMJb0gra+cRqISqrU3KUce7lStLKP53CGXKIZsauC:/UQhcYe606a+cAISoU3CeRS0skbl

C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\cloud_route_details\c9KGxQfaD4C5btTs_ENCRYPTED_BY.WHITEROSE

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.58 KB
MD5	11b7281e8413032aea060678de46f61b
SHA1	ed789ef76d0a8264aec42e62eacea5b6b264bd1a
SHA256	ec9587fcf427ce7c27fec5921831d2ca1871011c01f636ce457d25969d5d7395
SSDeep	48:5TUXhR+Hkn14ZxI3/yiQI1v2MGenO9Fv4rUo+9LHOWyPv+EXKbkziZ:5W3+En1ua3/y0v5nns4EjOWEmBZ

C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT

Dropped File

Text

Not Queried

»

Also Known As	C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Resource\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\Adobe\Acrobat\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\Portal\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\Stationery\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\microsoft shared\VSTA\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\Services\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Common Files\SpeechEngines\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\default_apps\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Extensions\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Java\jre7\bin\client\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Java\jre7\bin\dtplugin\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Microsoft.NET\RedistList\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Microsoft.NET\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Firefox\defaults\pref\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Firefox\defaults\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Firefox\dictionaries\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Firefox\webapprt\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Firefox\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Mozilla Maintenance Service\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows NT\TableTextService\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Gadgets\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\Windows Sidebar\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Program Files (x86)\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\Acrobat\10.0\Replicate\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\Acrobat\10.0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\Acrobat\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\ARM\Reader_10.0.0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\ARM\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\Adobe\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\ProgramData\HOW-TO-RECOVERY-FILES.TXT (Dropped File) c:\users\public\desktop\how-to-recovery-files.txt (Dropped File) c:\users\public\documents\how-to-recovery-files.txt (Dropped File) c:\programdata\microsoft\windows\start menu\how-to-recovery-files.txt (Dropped File) c:\programdata\microsoft\windows\templates\how-to-recovery-files.txt (Dropped File) C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Recovery\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\Cache\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\HOW-TO-RECOVERY-FILES.TXT (Dropped File) c:\users\5p5nrgjn0js halpmcxz\appdata\local\how-to-recovery-files.txt (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Crashpad\reports\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Crashpad\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ar\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\bg\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ca\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\cs\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\da\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\de\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\am\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\ar\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\bg\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\_locales\bn\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Applications\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\EVWhitelist\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\FileTypePolicies\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\OriginTrials\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\PepperFlash\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\pnacl\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\SSLErrorAssistant\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\SwReporter\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\WidevineCdm\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\CrashReports\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\HOW-TO-RECOVERY-FILES.TXT (Dropped File) c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\windows\history\how-to-recovery-files.txt (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft Help\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\updates\E7CF176E110C211B\updates\0\HOW-TO-RECOVERY-FILES.TXT (Dropped File) C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Mozilla\updates\E7CF176E110C211B\updates\HOW-TO-RECOVERY-FILES.TXT (Dropped File)
Mime Type	text/plain
File Size	6.77 KB
MD5	6ed7c0eecfdea7c82c69f9073d01c89b
SHA1	0de0a5738bd9fa34e202bcf66f052c36b2eee735
SHA256	bdd1f3afc77b2f61647e6f550a5b9ccec01aef70ed904d38b2f45f24d722994b
SSDeep	192:1ezYQYB9PreN6IHiO5fMLkm7Hg+atdMpTn8TN:1egPrediONMBl8MtncN

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After