威脅數據庫 惡意軟體 UDS：DangerousObject.Multi.Generic

UDS：DangerousObject.Multi.Generic

惡意軟體 年Sumo3000年
發佈時間：
最後更新：
翻譯為：

威脅評分卡

人氣排名： 38
威胁级别： 70 % (高的)
受感染的计算机： 3,812,390
初见： June 26, 2013
最后一次露面： September 27, 2026
受影响的操作系统： Windows

UDS：DangerousObject.Multi.Generic是一種惡意軟件威脅，通常在損壞的PC上的多個位置同時發現該威脅。報告最頻繁的位置UDS：DangerousObject.Multi.Generic本身是“文檔和設置”，通常是C驅動器的組件。 UDS：DangerousObject.Multi.Generic很難通過許多安全應用程序從受影響的計算機中查找和卸載。 UDS：DangerousObject.Multi.Generic的檢測僅可用於添加到排除項，忽略，瀏覽包含該項的位置或可能產生威脅描述。 PC用戶要么被帶到空文件夾，要么無法訪問該對象。

別名

15 个安全供应商将此文件标记为恶意文件。

防毒軟體供應商 检测
Ikarus JS.Downloader.BSO
Comodo UnclassifiedMalware
Kaspersky Trojan.Script.Suspic.gen
GData Script.Trojan.Agent.FZPT9I
ClamAV Win.Worm.Agent-4608
Avast JS:Downloader-BSP [Trj]
Symantec VBS.Downloader.Trojan
Fortinet MSIL/Agent.QOJ!tr
AhnLab-V3 Trojan/Win32.Agent
McAfee-GW-Edition BehavesLike.Win32.SpyGate.nm
Sophos Mal/Generic-S
Avast Win32:Dropper-gen [Drp]
Symantec Trojan.Gen.2
K7AntiVirus Trojan ( 004c9e0e1 )
McAfee Artemis!29BE907DE7BA

SpyHunter 检测并删除 UDS：DangerousObject.Multi.Generic

文件系統詳情

UDS：DangerousObject.Multi.Generic 可能會創建以下文件：
展开全部 | 全部收缩
# 文件名 MD5 偵測
1. 0UL6KGCP3JW6U70KT3HJ.exe c0addb549ade9e125bd2e4218ef66b69 96
2. ctfmon.exe 70be95ed9fd0b45718ac47ddcdb08c1d 46
3. b8dc74d9e926b07b4af2d68d4f700ee6554dc92f302f03e7367dff53315106f4 f76a6556cddc2eae4628baa647d38061 5
4. Setup2.exe 12824e8576094015111f9cd6db064ab6 5
5. 02a53d660332c25af623bbb7df57c2aad1b0b91b_0004233610 cdc459a866361463d719bc89622300f3 5
6. av.exe 903b2f07578e461f2119be6ad274382d 4
7. run.exe 1b8ceba270bcec714babe5a0862ef028 4
8. myxsaqlu.exe fda7582057ac8815534e19d31146c2b6 3
9. 932C.exe 91c9d076ba5c2ab4868c1d1627616936 3
10. pcmfid2030win2kxp.exe 1bbe3afd7b228a31753ba7bcedad5d77 3
11. webcomponents.exe 39edc0d2e7eb2a04ea678ab19b21999a 3
12. codstart.exe b5862b7715bde3913466a72385515e17 3
13. securitycheck.exe 2ab12f81eaa26364e736ccd8c37207f0 2
14. desktop.exe f6d7c2c0267684aa10facd84315ebe9a 2
15. protectionpaladin.exe bdd85920307233788f161789b7d1cba2 2
16. utf-8''ser.exe; filename=ser.exe 8ab064e069a639d707e38ec5d7e85c21 2
17. setup_win_32bit_1.139.exe 3d85be7cc2f2e96cd586d66a625669b9 2
18. utf-8''a.exe; filename=a.exe 05e6b3ce2da9b80da4191e2ceaccd822 2
19. diplomnaya_rabota.exe 68dac0f4bb0e6e3333641a22b24c423b 2
20. utf-8''business%20sender%20multi%20web%20whatsapp%20%2b%20warmer%20by%20tiger%20vikram%20%20-%20reseller%20license.exe 63d1a1bd194f92d4c495e997f020129e 2
21. conhost.exe 3b4d04d340c5e9380e7b4b93fbe213e5 2
22. 1.exe 3ae39f0bbdf786e7616d65c3a9b82a05 2
23. 4admins.exe cb0a8bcb42c4f36e251c4ba71f89c5fa 2
24. pcmainu-1878.exe 45db692874be54ae84efd117649a7efc 2
25. update.exe 0c9e8523a87bd6cda6f6fffaa6ae6dd2 2
26. utf-8''back.exe; filename=back.exe 2f6bca09290879b07957d4d0246b2750 2
27. V4aidQkD.exe 67029b569ad726b1b87cc62760472cc8 2
28. the-mop-2016.9.3.0-win.exe 7db0680dd0bb8ccc1f32add9cc73dc3d 1
29. cs.exe a136aa371eb80d61a757fa41be426770 1
30. c:\users\\downloads\zoomdirectupdate.exe 9de4d7258d4e32a1b63d5c95bbebbbb9 1
更多文件

註冊表詳情

UDS：DangerousObject.Multi.Generic 可能會創建以下註冊表項或註冊表項：
File name without path
1233213123213[1].exe
activate-with-pass___3456.exe
adobe[1].exe
AdobeUpdaterV131.exe
AdobeUpdaterV202.exe
amadka[1].exe
amadka[2].exe
Cthulhu.vbs
DiscordCrash.exe
edgems131.exe
fiile__pass__1234_active.exe
fiile__pass___1234.exe
file-password___2345.exe
file__setup__3456.exe
ladas[1].exe
linda5.exe
linda5[1].exe
main-setup.exe
main__file.exe
mixpub2.exe
MPGPH131.exe
new_installer_1234.exe
new_setup_1234.exe
open___setup__p@ss__3456.exe
open___setup__with__3456.exe
open___with___setup__1234.exe
Open__File___Setup.exe
open__full__setup-1234.exe
Open__SETUP.exe
Open__Setup_1234.exe
open__setup__1234.exe
open__setup__3456.exe
open__with_Pass__1234.exe
open_main_file.exe
open_setup_1234.exe
Open_setup_pass_1234.exe
password is ___1234_setup.exe
pigalicapi.exe
RageMP131.exe
rc66.dat
RetailerRise[1].exe
rhgtdfs.exe
Routes Installation.exe
seed.sfx.exe
setup_10.2_mix3.exe
setup___pass__1234.exe
setup___pass___1234.exe
toolspub1[1].exe
ts66.dat
tuc4[1].exe
tuc6[1].exe
use__pass__1234_activate.exe
wfplwfs.exe
Regexp file mask
%allusersprofile%\directxplayer\directxreplacer.exe
%allusersprofile%\slidetoshutdown64.exe
%allusersprofile%\windows host\windows host.exe
%appdata%\[RANDOM CHARACTERS].ps1
%appdata%\erfd.exe
%appdata%\fgds.exe
%appdata%\fredwd.exe
%appdata%\hbtgvrf.exe
%appdata%\iamazon.exe
%appdata%\windata\windows programs.exe
%programfiles%\gedit\[NUMBERS].exe
%temp%\haleng.exe
%temp%\hypno launcher.exe
%userprofile%\pictures$\[RANDOM CHARACTERS].exe
%windir%\fonts\del.ps1
%windir%\fonts\sasd.bat
%windir%\syswow64\spier.exe
%windir%\tasks\crss.exe
HKEY..\..\..\..{RegistryKeys}
getfiles.wiki
Software\360 Dev\ProZipper
Software\DreamTrips
Software\Macrosol
SOFTWARE\Marg
Software\Microsoft\Windows\CurrentVersion\Run\ServiceDLL
Software\ProZipper
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
{361B0837-A53B-4F5E-8541-D66D7D66DDA6}_is1
{7CFDF263-212A-4B81-8D97-2DB021B5BB2A}_is1

目錄

UDS：DangerousObject.Multi.Generic 可能會創建以下目錄或目錄：

%ALLUSERSPROFILE%\DNTException
%ALLUSERSPROFILE%\MPGPH131
%ALLUSERSPROFILE%\MSIUpdaterV131_346889e96494e8fd7895d6ab35be317c
%ALLUSERSPROFILE%\MSIUpdaterV131_708f86c7449baa8ed309c374f21ce511
%ALLUSERSPROFILE%\handlersupport
%ALLUSERSPROFILE%\jndraacsywhc
%ALLUSERSPROFILE%\ndfbaljqaqzm
%HOMEDRIVE%\netflix party
%LOCALAPPDATA%\WindowsApp
%LOCALAPPDATA%\reserve
%PROGRAMFILES%\BRÅÀÌ
%PROGRAMFILES%\Cartol
%PROGRAMFILES%\Company\NewProduct
%PROGRAMFILES%\DR탔
%PROGRAMFILES%\Domtes
%PROGRAMFILES%\FJKa
%PROGRAMFILES%\GameBox INC
%PROGRAMFILES%\GuySatosa
%PROGRAMFILES%\Gyunr
%PROGRAMFILES%\Lara\vold
%PROGRAMFILES%\Lertok
%PROGRAMFILES%\Miicrosoft
%PROGRAMFILES%\Mirales\pack
%PROGRAMFILES%\PowerControl
%PROGRAMFILES%\Razer\Cortex\win
%PROGRAMFILES%\Tลภฬ
%PROGRAMFILES%\Untri
%PROGRAMFILES%\VR\Versium Research
%PROGRAMFILES%\Vinds
%PROGRAMFILES%\aer
%PROGRAMFILES%\aezsa
%PROGRAMFILES%\afis
%PROGRAMFILES%\agjx
%PROGRAMFILES%\ahp
%PROGRAMFILES%\aicj
%PROGRAMFILES%\aiokdj
%PROGRAMFILES%\ais
%PROGRAMFILES%\aisj
%PROGRAMFILES%\aizu
%PROGRAMFILES%\america
%PROGRAMFILES%\aoigez
%PROGRAMFILES%\aoisw
%PROGRAMFILES%\aoiz
%PROGRAMFILES%\auejv
%PROGRAMFILES%\azds
%PROGRAMFILES%\aze
%PROGRAMFILES%\azew
%PROGRAMFILES%\big
%PROGRAMFILES%\bitoura
%PROGRAMFILES%\bnb
%PROGRAMFILES%\bnscc
%PROGRAMFILES%\bod
%PROGRAMFILES%\bolliw
%PROGRAMFILES%\bollow
%PROGRAMFILES%\bzsk
%PROGRAMFILES%\calm
%PROGRAMFILES%\chaima
%PROGRAMFILES%\charbs
%PROGRAMFILES%\ckls
%PROGRAMFILES%\cnis
%PROGRAMFILES%\cns
%PROGRAMFILES%\cnus
%PROGRAMFILES%\cwijz
%PROGRAMFILES%\data finder
%PROGRAMFILES%\decapeta
%PROGRAMFILES%\drÅÀÌ
%PROGRAMFILES%\efcc
%PROGRAMFILES%\einc
%PROGRAMFILES%\eoi
%PROGRAMFILES%\ergdf
%PROGRAMFILES%\ergv
%PROGRAMFILES%\erv
%PROGRAMFILES%\euhnf
%PROGRAMFILES%\evje
%PROGRAMFILES%\evnie
%PROGRAMFILES%\exex
%PROGRAMFILES%\fdgr
%PROGRAMFILES%\fhfhf
%PROGRAMFILES%\fizr
%PROGRAMFILES%\frunis
%PROGRAMFILES%\fzef
%PROGRAMFILES%\gdffv
%PROGRAMFILES%\ghizjf
%PROGRAMFILES%\gho
%PROGRAMFILES%\gie
%PROGRAMFILES%\gisof
%PROGRAMFILES%\gje
%PROGRAMFILES%\gjed
%PROGRAMFILES%\gjke
%PROGRAMFILES%\gjr
%PROGRAMFILES%\goef
%PROGRAMFILES%\goqilekd
%PROGRAMFILES%\grjkza
%PROGRAMFILES%\gsdf
%PROGRAMFILES%\gus
%PROGRAMFILES%\gvbc
%PROGRAMFILES%\hah
%PROGRAMFILES%\hcj
%PROGRAMFILES%\hfggb
%PROGRAMFILES%\hgef
%PROGRAMFILES%\hjcs
%PROGRAMFILES%\htee
%PROGRAMFILES%\hyde
%PROGRAMFILES%\hzs
%PROGRAMFILES%\ieiez
%PROGRAMFILES%\ioio
%PROGRAMFILES%\iska
%PROGRAMFILES%\ivjr
%PROGRAMFILES%\jal
%PROGRAMFILES%\jaxa
%PROGRAMFILES%\jfas
%PROGRAMFILES%\jhgs
%PROGRAMFILES%\jka
%PROGRAMFILES%\jkaz
%PROGRAMFILES%\jkfa
%PROGRAMFILES%\jsw
%PROGRAMFILES%\jzi
%PROGRAMFILES%\kambi
%PROGRAMFILES%\kejf
%PROGRAMFILES%\kjd
%PROGRAMFILES%\kjq
%PROGRAMFILES%\laddenr
%PROGRAMFILES%\lasqoil
%PROGRAMFILES%\max
%PROGRAMFILES%\minoucha
%PROGRAMFILES%\moch
%PROGRAMFILES%\narkou
%PROGRAMFILES%\nikes
%PROGRAMFILES%\notri
%PROGRAMFILES%\oazd
%PROGRAMFILES%\ogjz
%PROGRAMFILES%\oiaks
%PROGRAMFILES%\oilk
%PROGRAMFILES%\oizak
%PROGRAMFILES%\orchard
%PROGRAMFILES%\ozi
%PROGRAMFILES%\ozkz
%PROGRAMFILES%\paow
%PROGRAMFILES%\plets
%PROGRAMFILES%\plwk
%PROGRAMFILES%\poz
%PROGRAMFILES%\pozd
%PROGRAMFILES%\provas
%PROGRAMFILES%\pythons
%PROGRAMFILES%\reduce
%PROGRAMFILES%\rine
%PROGRAMFILES%\rtv
%PROGRAMFILES%\sdf
%PROGRAMFILES%\sdfhja
%PROGRAMFILES%\sdfs
%PROGRAMFILES%\sdjhq
%PROGRAMFILES%\sdkw
%PROGRAMFILES%\sdws
%PROGRAMFILES%\slimer
%PROGRAMFILES%\smoutar
%PROGRAMFILES%\somorit
%PROGRAMFILES%\sqda
%PROGRAMFILES%\sqkjz
%PROGRAMFILES%\sql
%PROGRAMFILES%\stream
%PROGRAMFILES%\subtar
%PROGRAMFILES%\sup
%PROGRAMFILES%\tanrug
%PROGRAMFILES%\taras\org
%PROGRAMFILES%\ticar
%PROGRAMFILES%\tolas\kant
%PROGRAMFILES%\torrto
%PROGRAMFILES%\traj
%PROGRAMFILES%\trobif
%PROGRAMFILES%\truck
%PROGRAMFILES%\tyfhgbv
%PROGRAMFILES%\tÅÀÌ
%PROGRAMFILES%\uhuj
%PROGRAMFILES%\ultimatule
%PROGRAMFILES%\uqkjb
%PROGRAMFILES%\vbne
%PROGRAMFILES%\verses
%PROGRAMFILES%\vgaoe
%PROGRAMFILES%\vik
%PROGRAMFILES%\vkjd
%PROGRAMFILES%\vkjz
%PROGRAMFILES%\vnsk
%PROGRAMFILES%\vnzjks
%PROGRAMFILES%\vxids
%PROGRAMFILES%\vÅÀÌ
%PROGRAMFILES%\wkj
%PROGRAMFILES%\wkv
%PROGRAMFILES%\wxe
%PROGRAMFILES%\zabita
%PROGRAMFILES%\zefjcj
%PROGRAMFILES%\zeglame
%PROGRAMFILES%\zok
%PROGRAMFILES%\zufj
%PROGRAMFILES(X86)%\VR\Versium Research
%PROGRAMFILES(X86)%\data finder
%PROGRAMFILES(x86)%\Cartol
%PROGRAMFILES(x86)%\DR탔
%PROGRAMFILES(x86)%\Domtes
%PROGRAMFILES(x86)%\GameBox INC
%PROGRAMFILES(x86)%\Koler
%PROGRAMFILES(x86)%\Lara\vold
%PROGRAMFILES(x86)%\Lertok
%PROGRAMFILES(x86)%\Mirales\pack
%PROGRAMFILES(x86)%\Razer\Cortex\win
%PROGRAMFILES(x86)%\Tลภฬ
%PROGRAMFILES(x86)%\Untri
%PROGRAMFILES(x86)%\aer
%PROGRAMFILES(x86)%\ahp
%PROGRAMFILES(x86)%\aicj
%PROGRAMFILES(x86)%\ais
%PROGRAMFILES(x86)%\america
%PROGRAMFILES(x86)%\aokc
%PROGRAMFILES(x86)%\azds
%PROGRAMFILES(x86)%\aze
%PROGRAMFILES(x86)%\azew
%PROGRAMFILES(x86)%\bitoura
%PROGRAMFILES(x86)%\bolliw
%PROGRAMFILES(x86)%\bzsk
%PROGRAMFILES(x86)%\calm
%PROGRAMFILES(x86)%\chaima
%PROGRAMFILES(x86)%\ckls
%PROGRAMFILES(x86)%\cnis
%PROGRAMFILES(x86)%\cnus
%PROGRAMFILES(x86)%\decapeta
%PROGRAMFILES(x86)%\drÅÀÌ
%PROGRAMFILES(x86)%\fdgr
%PROGRAMFILES(x86)%\fizr
%PROGRAMFILES(x86)%\gdffv
%PROGRAMFILES(x86)%\gisof
%PROGRAMFILES(x86)%\gje
%PROGRAMFILES(x86)%\gjed
%PROGRAMFILES(x86)%\goqilekd
%PROGRAMFILES(x86)%\gsdf
%PROGRAMFILES(x86)%\gus
%PROGRAMFILES(x86)%\hfggb
%PROGRAMFILES(x86)%\htee
%PROGRAMFILES(x86)%\hyde
%PROGRAMFILES(x86)%\hzs
%PROGRAMFILES(x86)%\ieiez
%PROGRAMFILES(x86)%\ioio
%PROGRAMFILES(x86)%\jsw
%PROGRAMFILES(x86)%\kejf
%PROGRAMFILES(x86)%\laddenr
%PROGRAMFILES(x86)%\lasqoil
%PROGRAMFILES(x86)%\max
%PROGRAMFILES(x86)%\minoucha
%PROGRAMFILES(x86)%\moch
%PROGRAMFILES(x86)%\narkou
%PROGRAMFILES(x86)%\notri
%PROGRAMFILES(x86)%\oiaks
%PROGRAMFILES(x86)%\oilk
%PROGRAMFILES(x86)%\orchard
%PROGRAMFILES(x86)%\ozi
%PROGRAMFILES(x86)%\plets
%PROGRAMFILES(x86)%\plwk
%PROGRAMFILES(x86)%\provas
%PROGRAMFILES(x86)%\pythons
%PROGRAMFILES(x86)%\reduce
%PROGRAMFILES(x86)%\rtv
%PROGRAMFILES(x86)%\sdjhq
%PROGRAMFILES(x86)%\sdws
%PROGRAMFILES(x86)%\shift
%PROGRAMFILES(x86)%\slimer
%PROGRAMFILES(x86)%\smoutar
%PROGRAMFILES(x86)%\sqkjz
%PROGRAMFILES(x86)%\sql
%PROGRAMFILES(x86)%\stream
%PROGRAMFILES(x86)%\subtar
%PROGRAMFILES(x86)%\sup
%PROGRAMFILES(x86)%\tanrug
%PROGRAMFILES(x86)%\ticar
%PROGRAMFILES(x86)%\tolas\kant
%PROGRAMFILES(x86)%\torrto
%PROGRAMFILES(x86)%\traj
%PROGRAMFILES(x86)%\tyfhgbv
%PROGRAMFILES(x86)%\tÅÀÌ
%PROGRAMFILES(x86)%\ultimatule
%PROGRAMFILES(x86)%\verses
%PROGRAMFILES(x86)%\vgaoe
%PROGRAMFILES(x86)%\vkjd
%PROGRAMFILES(x86)%\vnsk
%PROGRAMFILES(x86)%\vxids
%PROGRAMFILES(x86)%\vÅÀÌ
%PROGRAMFILES(x86)%\wkv
%PROGRAMFILES(x86)%\wxe
%PROGRAMFILES(x86)%\zabita
%PROGRAMFILES(x86)%\zefjcj
%PROGRAMFILES(x86)%\zeglame
%PROGRAMFILES(x86)%\zufj
%ProgramFiles%\Inb\spok\bin
%ProgramFiles(x86)%\Inb\spok\bin
%USERPROFILE%\Pictures\Adobe Films
%allusersprofile%\F01FF211
%allusersprofile%\Hdlharas
%allusersprofile%\MicrosoftSystem
%allusersprofile%\MicrosoftSystemData
%allusersprofile%\MicrosoftSystemx32x64Service
%allusersprofile%\WinTrackerSP
%allusersprofile%\configsystemupdate
%allusersprofile%\document
%allusersprofile%\msiboost
%allusersprofile%\msibooster
%allusersprofile%\msiboostsasum
%allusersprofile%\perflogs
%allusersprofile%\reaitekhd
%allusersprofile%\sY2NsQjNsETOsATOsIDOsUWOsIWOsMDOsU2NsUWO
%allusersprofile%\windowspaint
%appdata%\406d6c22b040c6
%appdata%\704b6797337c48
%appdata%\Advanced DAP Editor Plus
%appdata%\CustomRP
%appdata%\DeformatterAlgorithm
%appdata%\FileSection
%appdata%\GoogleUpp
%appdata%\NextChannelSink
%appdata%\ServiceData
%appdata%\SytMicrosoftSystemCheck
%appdata%\TypeId
%appdata%\a091ec0a6e2227
%appdata%\aptx
%appdata%\cabview
%appdata%\contentcloud
%appdata%\dcbbc
%appdata%\dcomcnfg
%appdata%\dxdiag
%appdata%\inetcpl
%appdata%\kbda1
%appdata%\mfvdsp
%appdata%\microsoftsystemcheck
%appdata%\programfiles
%appdata%\secwinpch
%appdata%\toc
%appdata%\waac
%appdata%\waam
%appdata%\waan
%appdata%\ypsx_cloud
%appdata%\yspx
%localappdata%\AdobeUpdaterV131_708f86c7449baa8ed309c374f21ce511
%localappdata%\AdobeUpdaterV1_a43486128347910740fccfba86a78a02
%localappdata%\AdobeUpdaterV2022_451f9496b208dc847378977d2bad6beb
%localappdata%\ExtreamFanV5
%localappdata%\Google\Conf
%localappdata%\Media\Conf
%localappdata%\MicrosoftSystemApplications
%localappdata%\Microsoft\Conf
%localappdata%\Mozilla\Conf
%localappdata%\Packages\Conf
%localappdata%\ProtectBrowser
%localappdata%\RageMP1
%localappdata%\SysWins
%localappdata%\SystemConfigs
%localappdata%\WindowsCodePage
%localappdata%\packages\rnews
%localappdata%\waan
%programfiles%\FatherDupyru
%programfiles%\JHFQs
%programfiles%\NameCerako
%programfiles%\PowerControl_3_1
%programfiles%\TightMakele
%programfiles%\Wimsys
%programfiles%\aefsq
%programfiles%\barnja
%programfiles%\bcjz
%programfiles%\bfdfv
%programfiles%\bsvnz
%programfiles%\chokla
%programfiles%\dogj
%programfiles%\ezhz
%programfiles%\faeqsd
%programfiles%\fddv
%programfiles%\fghgj
%programfiles%\fhzja
%programfiles%\guitt
%programfiles%\izioa
%programfiles%\jfiz
%programfiles%\nzi
%programfiles%\psne
%programfiles%\qsjs
%programfiles%\sbnsh
%programfiles%\sdfa
%programfiles%\trtuy
%programfiles%\vbnds
%programfiles%\wejhb
%programfiles%\ytggh
%programfiles%\zejhf
%programfiles%\zfkjej
%programfiles%\zzeg
%programfiles(x86)%\guitt
%public%\Applications\PerfLogs
%public%\systemupdate
%temp%\1000010001
%temp%\1000011001
%temp%\1000016001
%temp%\1000021001
%temp%\1000022001
%temp%\1000030012
%temp%\1000055001
%temp%\1000063011
%temp%\1000140001
%temp%\1000181001
%temp%\1000212050
%temp%\1000301001
%temp%\110000000011111
%temp%\245982232302
%temp%\3086a343d2
%temp%\5454e6f062
%temp%\577f58beff
%temp%\5eb6b96734
%temp%\8942edbb88
%temp%\EdgeMS131_346889e96494e8fd7895d6ab35be317c
%temp%\ad40971b6b
%temp%\be894f49a9
%temp%\cfe42aa7a6
%temp%\ebb444342c
%temp%\edgems131_708f86c7449baa8ed309c374f21ce511
%temp%\powerexpertnt
%userprofile%\Pictures\Minor Policy
%userprofile%\documents\guardfox
%userprofile%\documents\simpleadobe
%windir%\publicgaming

分析报告

一般信息

姓： DangerousObject.Generic
簽名狀態： No Signature

已知樣本

MD5: 39bb66cdece1b4bac924beebab24543b
SHA1: 85235b56534a924706bd5cfbd434309c3e201522
文件大小: 3.09 MB ， 3085789位元組
MD5: c12d93daac86935ddfb9bd927b11ae4c
SHA1: d993eb4e4c9cdded3e0da8199cf251b1cd47826e
文件大小: 4.18 MB ， 4175487位元組
MD5: 30092c611928bbc9d5b2e38cf697fc64
SHA1: 9bc0ecbc016cf112af76102331133654cf6effde
文件大小: 527.29 KB ， 527295位元組
MD5: dcfff0032dc745711bd1244b6cca9ae5
SHA1: 3c3a77d11d735bb60fcc3351cdee5d02a72728ed
文件大小: 4.31 MB ， 4306985位元組
MD5: 0c5bbac93945abcb8da4e8186e9a1514
SHA1: 8c342a67bbcf6ff5e142bcc15e54fd72050da88f
文件大小: 2.83 MB ， 2828456位元組
顯示更多
MD5: 2d0d22d45fcdaade8a5117928b6d3ebd
SHA1: 173be7c350cd0f90e2dd4feece8ec9138fa1f4d2
文件大小: 4.06 MB ， 4058040位元組
MD5: 6c292e16738ded3419ccf291dc3a5132
SHA1: a9d290ade35fdca75195812e5f3e62fc61b12a4e
文件大小: 4.31 MB ， 4312539位元組
MD5: 059ef7433bff7cd3bec850d7c0b1d22a
SHA1: 478ba8188ea931fbe099e8e5e1eeaaa5349fd063
文件大小: 7.59 MB ， 7593500位元組
MD5: 4fbf5dfe628777c99b186a025d91884c
SHA1: d41558c432b298b60049ef85a7dccf02c00fad93
文件大小: 3.88 MB ， 3876982位元組
MD5: b79ffa3faa9eed4bbee35186b3d0459d
SHA1: 8357238b601df8939bbbe077674a1fbe34d5be5d
文件大小: 4.49 MB ， 4494075位元組
MD5: 585607954dbd44e1fa2b0f53dac55c5d
SHA1: 3ae071e2e791661cf161c5cfc3f58fe2a0b89ba6
文件大小: 130.78 KB ， 130775位元組
MD5: a2cd8596e9954ea61f72461be2c67a26
SHA1: 880a0b53336edbe8c2bef7fd235eb8095d0274d4
文件大小: 7.54 MB ， 7535902位元組
MD5: 8b69daf389eae842474563294a936797
SHA1: 8488f2921a8117371bbfea105bb4d269338fb3c8
文件大小: 3.61 MB ， 3612523位元組
MD5: e1e4fc7dbb4c8f4ecf11d995bd710d37
SHA1: 4dedc3a2ca3ced76854cd844679f54a004955fd0
文件大小: 451.57 KB ， 451572位元組
MD5: 40ea7095ab597dc7207b06fe2745d043
SHA1: bb95c156190ffb9fd68b28a2723eb288e25e4b87
文件大小: 437.15 KB ， 437147位元組
MD5: f0e59d9733bf03a0839e144b756543ef
SHA1: 1948c9b310b60f5c5fbe80d805ca7f269f9173c4
文件大小: 6.59 MB ， 6592389位元組
MD5: 8bc161a0600c3e13e60f730106edd3bd
SHA1: 043eace87f0943675f93129dbe5f99cf19981ed1
文件大小: 494.53 KB ， 494533位元組
MD5: 4e01a71e9d968a8f7297ab0786d59821
SHA1: 3cd25c16c543d160dd59b98b4dd24771d5d36513
文件大小: 468.48 KB ， 468480位元組
MD5: ad73f094b5c6e74a259a5251bb13694d
SHA1: 5bec96f91746cd2891f5621678c8e3be77216da2
文件大小: 2.82 MB ， 2823168位元組
MD5: 6f4ede44f07dc3c158e3a02743d079e7
SHA1: da5074a7899daea57b5fcf34daaaa4888e2e2930
文件大小: 5.05 MB ， 5047653位元組
MD5: 33f587933432b94be127446b636231eb
SHA1: 56c921520364a184a5f9107a9a468252f6af01b6
文件大小: 523.24 KB ， 523238位元組
MD5: 7c8d5d755828ae998d0a1480442234ca
SHA1: 77ace3b36cac70e29686adad14911b468107a9b8
文件大小: 2.22 MB ， 2222901位元組
MD5: 217f5ab2beb3feff4fe3642eb162fcec
SHA1: cf71d7ea84842591ece6c24532378d39c73573f7
文件大小: 1.73 MB ， 1732096位元組
MD5: 2164826774217a7f4e35763953f32fdd
SHA1: 7b5e72ce6ceb3432fc63aa3ea24efd1450717055
文件大小: 7.87 MB ， 7866570位元組
MD5: eef91a63195c7b86516d60a5b2f07838
SHA1: a5f6f02c30f4b5502a0879c29a37bee0a38efdb2
文件大小: 4.11 MB ， 4107663位元組
MD5: b19e8837b6b7b133ad8d496c6049fbb4
SHA1: 9db909dfaa48bc4ac59915825543c122d299b201
文件大小: 1.05 MB ， 1052672位元組
MD5: 6624afa9edbfceb7ef18207e6ffe306d
SHA1: 60f0884f6a2533f23d0ccfe0a5fbdad1efb05525
文件大小: 3.10 MB ， 3095453位元組
MD5: c42219c402b1013ab227743e25b12377
SHA1: 32e58a41c43355c0876cc565ec9772ebb8fb98ca
文件大小: 1.25 MB ， 1247232位元組
MD5: 372b5eb9bcd5eebba3b803174f891898
SHA1: acd8b9e23552e041ea180d23eb8ce39f2c1296d1
文件大小: 5.08 MB ， 5076481位元組
MD5: f2d40df00fda3eaf73138dc60177a27b
SHA1: a0eaa993ad8540d710d5d98aa08a97203acf9f30
文件大小: 2.67 MB ， 2674176位元組
MD5: 7163f6d96ae2b1c83330bdb4b2a7f50e
SHA1: 598bd36ee0651f76d2f1ad2a26b4b661b9f278f9
文件大小: 7.34 MB ， 7338513位元組
MD5: 56657262b0ce29fdad44f87bc3d06259
SHA1: 25768458bdc711b967e42c106da6f3c61cda561a
文件大小: 7.48 MB ， 7476007位元組
MD5: 356fbf594484d26f1dbf257d05b76c0d
SHA1: 42b5c99995a082abe01eb5ca31465ef62c6289c9
文件大小: 4.36 MB ， 4355459位元組
MD5: deee0809abf05e18500c6a990d0b2acb
SHA1: 095e27be92aed590019f02cfc8906d25d1ee7afb
文件大小: 461.60 KB ， 461598位元組
MD5: 76bc3d6e6cdbf3c8cc37e118654f6683
SHA1: 8d6440b0755e8ee8d66bf17fd66b842782d38ddb
文件大小: 2.45 MB ， 2447872位元組
MD5: e90c0da581fb9f7d713747a44774e3ce
SHA1: cf9a73de423c69739521b80c7d4464a7f9e9680b
文件大小: 5.18 MB ， 5178905位元組
MD5: 675613da238f0197ff97823978e9e206
SHA1: 962174574da88433f40bbd1089c0aae164011ff5
文件大小: 3.40 MB ， 3400244位元組
MD5: 31ade6efa057cc4f6434a872afdbcce7
SHA1: 8d14bfa9aae542defef6e6506ff3bdddf09cd10a
文件大小: 4.96 MB ， 4964583位元組
MD5: a8872cb5c5de87aff86b06fa82667a04
SHA1: 1f55f1fe3ef194ea4db14aad2cec81f03c4f69bf
文件大小: 2.23 MB ， 2225629位元組
MD5: f337a323fe16d783ab2c82435aad120c
SHA1: d250bfd436581ce88c5626e72a83410d277931d6
文件大小: 7.28 MB ， 7281058位元組
MD5: a568bbee82163d29b72d6236f650d6ae
SHA1: 0a2cfd8a3aca46781504dfb409b1a1a6f9b9d33a
文件大小: 482.23 KB ， 482227位元組
MD5: 02b7c983c6f45741180780469f43d777
SHA1: f9174a7768727baeb03a4277f172d3df795e5543
文件大小: 4.18 MB ， 4176094位元組
MD5: 10b91310569261e40a5b9ea60609b5db
SHA1: 1c935c53d560ebd8d6cb9df980fddf61e6a52fe4
文件大小: 1.93 MB ， 1925777位元組
MD5: e434ab8576192ac86d1b535b3fb8edbf
SHA1: 87cc180d39263973e960b8d22942ed52f03a7243
文件大小: 2.04 MB ， 2043464位元組
MD5: 11dde12908f6f9dd5a1a547f6f7386b1
SHA1: 9a39d3e987ab6b46bcd29e76802a2b1f42b530c2
文件大小: 2.22 MB ， 2222901位元組
MD5: 4232b91b183fa63670f65915cfd9b61c
SHA1: 1aaf827723646220d248e8ea3af8061a9eb6247a
文件大小: 4.56 MB ， 4562171位元組
MD5: 4d00204c805a047237431defbb66eac2
SHA1: 0348a3e6aa4c353aedbfb32280c24113edb142e0
文件大小: 3.79 MB ， 3790293位元組
MD5: 035b2727fb815b94e16f2d30933a56bb
SHA1: d1bcdea99a315bae6d232651eec632fbb497f859
文件大小: 8.14 MB ， 8136704位元組
MD5: de1c202e9919f49f5bc3bcca25ff0c2e
SHA1: 4a3d44f2828404a444a2b6c0b93f5113fbdb4451
文件大小: 7.90 MB ， 7902469位元組
MD5: 3d26ed829c1fbdfd14e1d4effa3f2cc3
SHA1: d68b06b225a319ba5dbb44158c6aacb86af37215
文件大小: 4.89 MB ， 4890900位元組
MD5: 17990ef1abc0757bb352c04c96faa596
SHA1: db7722ef289a00ae865ddf0a82b4c5779a3869ea
文件大小: 7.10 MB ， 7101535位元組
MD5: 70a0ef7c7676f2319ed981dd7831c98c
SHA1: 565471aa1d933f8d58dc111e5942c519522af10a
文件大小: 1.53 MB ， 1532023位元組
MD5: c47d58ff6704eecadde811a302efc21c
SHA1: 7c500e6bf6cd2ebf4cb823e73703bedd8a43a1d4
文件大小: 5.50 MB ， 5502976位元組
MD5: 6f1ea56cd75823cc601ac44b49e88b54
SHA1: dee87b5c3b3f5776600eeb07f64af18620cef7c6
文件大小: 1.36 MB ， 1363968位元組
MD5: de75bc5f0be264639be93827c88566a0
SHA1: 421ccf7cd085296a2bb2a6cdbffd7932937bcf34
文件大小: 7.17 MB ， 7165620位元組
MD5: 61d017a10fce5ed81c8c5ae4928751ed
SHA1: 58c068969572f00b1b4d7e09181f36667aed187a
文件大小: 4.51 MB ， 4513548位元組
MD5: 6c026eccf6451a39c02266bd9d54ec88
SHA1: 1d3fcf141615a9f5c7cfa30f625e6964dce9e33b
文件大小: 490.86 KB ， 490862位元組
MD5: 78da26965e3e25a845b4a125fb494c62
SHA1: ae0c95b4939d348a6ca9aa8695a2206666e0eadb
文件大小: 2.23 MB ， 2226392位元組
MD5: 951a48d9ccc3f6ef2d48aedfdc991c20
SHA1: d55443fbe80fb0afa431a1db8ab64f99c59d84d5
文件大小: 126.83 KB ， 126827位元組
MD5: 6fb06e290c7799b1951fe598dfe90f33
SHA1: b34f39a2717d93389df9076660dbd051614c948f
文件大小: 4.11 MB ， 4105266位元組
MD5: 80df8a8438fdea50d54782089fde1ad2
SHA1: ee81d26d279120de82510a4d41449de91b2bab81
文件大小: 7.27 MB ， 7272046位元組
MD5: 4df89460e2fbb0c9484d859cbd615301
SHA1: d06520d948612aa14b27ca84a45350e9b99e786c
文件大小: 7.19 MB ， 7192019位元組
MD5: 322f1b3e0de0b5953f26d65e093b2407
SHA1: 114167f2a01de3daab351ef0d3be44cc0cece7fd
文件大小: 8.86 MB ， 8863744位元組
MD5: a3ed5ced6dcb2365d140d5335e7c234b
SHA1: 66540183766e91d6d7761ab53cbaec98654f13f6
文件大小: 1.26 MB ， 1258869位元組
MD5: 10f3e7825efb70f098a39045a39f39d2
SHA1: 62caf6f23ae29d9b68859a3f2374293da74f096c
文件大小: 3.41 MB ， 3411019位元組
MD5: 95ca1920e233a128e96925a536edecbe
SHA1: 9992439f411d5bb217c5246a6b20e890c21ad391
文件大小: 557.25 KB ， 557255位元組
MD5: e04234af01b4bd34fcd9ce2b3f0891b6
SHA1: 59b435abda7761f08efc2c0c3e7c5fb695b4c6e6
文件大小: 4.20 MB ， 4200389位元組
MD5: db86037549360e9f0e4ed4e867f00586
SHA1: 0e3096f3d07c2f51dcbc6aed607f8e56c8305f98
文件大小: 9.88 MB ， 9882856位元組
MD5: 2a4d1ab880b708a3edf01e82e2e5837d
SHA1: 4f6ebd85cd6b10c79bd5cebed876872daf807e8b
文件大小: 524.43 KB ， 524428位元組
MD5: 5562df3e4e196502332370bd15f11b85
SHA1: 08fd67e5014fb147f86cd2aef1a4402846ff1260
文件大小: 2.23 MB ， 2225629位元組
MD5: 749d59581ff9d5f4096b7582b5283dae
SHA1: 8ddc36619efaccddb8eef1f9c87b810af5a06734
文件大小: 4.95 MB ， 4954921位元組
MD5: aa2438c6b27fcaedad12bb71f7bc4207
SHA1: aa16edb957987b7d22d3339c106ba99be6023b26
文件大小: 1.32 MB ， 1324993位元組
MD5: ac36d478899fc8a5ff5fae696d84604b
SHA1: e7a765d8921d03081260e2720aa8ade3459c4a68
文件大小: 3.09 MB ， 3094141位元組
MD5: 033ed2d6c7e392f75b92ab13f58542d1
SHA1: e3f1b3e66368515ac72ca02786c2487e0f68d110
文件大小: 495.14 KB ， 495141位元組
MD5: 70ad7dc0bc75421f6cae3a8d011c69f0
SHA1: ba1a688b200d14c7015874778d31b65e1460dc21
文件大小: 3.64 MB ， 3642054位元組
MD5: fdc4e449c94e5f153ecb3369e1536117
SHA1: 5ae82c94d3c31f7641676701f57f6c985f2ce1ab
文件大小: 3.09 MB ， 3088237位元組
MD5: 205f2364220f287c4ebcb4708146bb11
SHA1: c381a2bfe9a23aa42ff3ac0618501ddf4ad323d5
文件大小: 7.14 MB ， 7143404位元組
MD5: 5ac8ea9ad6bfd5d016c01f6706d57f08
SHA1: e848f31c058f16468f5a029fcad082819b5d3360
文件大小: 5.56 MB ， 5560340位元組
MD5: 38a5a542fcb67c9ffe2f7e9d3e188dae
SHA1: 114301a3f627fbee905941866c4faa24c9f3e149
文件大小: 9.03 MB ， 9034752位元組
MD5: fa58904ed9d4eac24ea8198addfb4aa0
SHA1: 35ff309c6c89992bc8c877457072789330325cc7
文件大小: 5.29 MB ， 5285518位元組
MD5: 4c737bed0fcd1836a5b6bfc033b3c03b
SHA1: d22035014cc535cc189f0f066efc263caf1fe5a7
文件大小: 14.85 KB ， 14848位元組
MD5: fbc8772f7de22c39d566ac879e9745fe
SHA1: fc71d4f0db0332489fcc264a47c1dbfec2cf4d23
文件大小: 1.98 MB ， 1980928位元組
MD5: 321af91014a50c0cbf937fe1da692ffa
SHA1: 12e7fd07a7e09ae3c51d852a5cdc74e0da33bedb
文件大小: 6.94 MB ， 6942208位元組
MD5: 60700731255519eb952ba84f46fdf26a
SHA1: cb0236273a7eae0bacd162382962b9df5a625165
文件大小: 8.33 MB ， 8326735位元組
MD5: 4a2730ce7bc4e41e89ed307fbb6913ca
SHA1: ed0016b208308b54da5cba423056c80e7c8d9826
文件大小: 8.46 MB ， 8456192位元組
MD5: 33ea72f4cec1a8e447b32a6c175e5712
SHA1: 01122ecd46af42eb75f5c34ebe9d115862ca4af8
文件大小: 149.50 KB ， 149504位元組
MD5: 3cf00aaaaef27eb2ae32a236ad5b6237
SHA1: a92fe278995edf3c338c89a79d99f20c2ce2a2b7
文件大小: 6.09 MB ， 6094848位元組
MD5: 7acd21b62a69d0d8fb30f0c4953de7cc
SHA1: 1598708868502bc4fc8d79ed96e067ba1af6b1c2
文件大小: 3.87 MB ， 3869817位元組
MD5: 1deb5b13b68a2d3bbaeead2afb35b85f
SHA1: 8f3d5381f40d4d9c6ba0faabd4658290ad53b450
文件大小: 3.31 MB ， 3314783位元組
MD5: 670aac76e06b7c320230ddeac843286b
SHA1: 79f602ed425cc40422ef0ed119339aa255969c8e
文件大小: 4.39 MB ， 4393801位元組
MD5: 937101b5d3e4a4ac5f177d66e93dd981
SHA1: f4b482e7229eb6c7014f858259c73defe5e42501
文件大小: 4.73 MB ， 4732272位元組
MD5: 48265a1171a12ddabd22909cdbab3fed
SHA1: 8a9dac7b446eae8b7c4db710633fa0990d108d91
文件大小: 1.50 MB ， 1497960位元組
MD5: b618421b64a1db235f619b67cb7fe5fb
SHA1: b3fe4f8b359d745f66d0af6d07e15fdb2b71661b
文件大小: 3.98 MB ， 3977819位元組
MD5: 69ff6da6e5f0b77baec8dcb7b2c7b5b1
SHA1: 7b91bcd8e277584a36d796ec00fb1b72de17f895
文件大小: 3.14 MB ， 3138400位元組
MD5: e8aac77cb911d16f9c5349b93213f1e2
SHA1: 2dbe67282c5b308eb8db63ac4f7f3047c16f31b6
文件大小: 1.06 MB ， 1060864位元組
MD5: b88a22633117b5af6d6df5d83528d4e9
SHA1: 20977ee1374eca5039d0d404ca9b1f1eecbb9137
文件大小: 2.40 MB ， 2402816位元組
MD5: 9a9f0d5174a1b0ab91f4a19f3ac60d6a
SHA1: 66fa4b9f0d0dfb8076617bcc8c2f444bfafe6c2c
文件大小: 3.15 MB ， 3151666位元組
MD5: a8792e9c50ba54a939e4a6047a7d22da
SHA1: c46400c8ba53957e25b6648cc981ff15f09b3abd
文件大小: 8.79 MB ， 8792462位元組
MD5: 4d1f15512bcdbdf031cc2f50cc0582de
SHA1: 14cd24798c91dead533af28de18411a8129edc8a
文件大小: 4.30 MB ， 4297216位元組
MD5: 65a919b3d949ee72bddf8c29d13cdccc
SHA1: 9b512b928566e9cd676e8c70f1375310f5e0004a
文件大小: 7.08 MB ， 7075922位元組
MD5: 501f8f539b7bf0b12320230de03f4ce2
SHA1: 6dd53555a58447cd3c68f2d0be7f063fd184d679
文件大小: 7.21 MB ， 7212374位元組
MD5: 1a951d8cb3f6effc621061788120ff59
SHA1: 4f800e29d9f95007a9a62fc1c5e5b4dc1935d2e7
文件大小: 8.70 MB ， 8702714位元組
MD5: 7c0b4daf241642103cd8160b5e5c2608
SHA1: 5500064bc2a6bc1f7094d8f3f685846f822c069d
文件大小: 468.65 KB ， 468646位元組
MD5: 2a21403d762c26fd6064055e60b74b86
SHA1: db457e5ee7d90e11aacaaf78d8f8284356bab3ed
文件大小: 977.08 KB ， 977081位元組
MD5: 7e7b8e94590f6de1b25904f4b6e3a069
SHA1: 316032d1c82fadd15e64b12c87627bdaee97d744
文件大小: 3.57 MB ， 3568773位元組
MD5: 9395ea91161bbab31947af69c69dd990
SHA1: a750ade5270bad59f7dde2a8b958658a78e6f0e1
SHA256: 57960227E6B7B437E741DA3C556950F9137647D18F181BFDDF9024FD889DD5F4
文件大小: 7.16 MB ， 7157970位元組
MD5: 673d0b2c8e80338282932562cc90e72e
SHA1: 1e00886fbd1112ce819e6cdd54d51ffe8d39922a
SHA256: C4629F46163187653B1CAC05F8E7FE4A0C3C99A1A9489CCB18524F9DF6BC99E7
文件大小: 613.68 KB ， 613682位元組
MD5: e6a4434a41acab6e3b1e9b0d550bfb0a
SHA1: 8106bd204be6b49ce34086196e3d7bdcb1acce06
SHA256: A666F643DFD3A2D041B966AA02F801FB676286606DA6F06EDB4482D422C3E795
文件大小: 1.86 MB ， 1862610位元組
MD5: cef4d829285fa9f0f8a8e1f3976ceaed
SHA1: 48b07dfd715ee7fa0c0d7ad635b726906736e27d
SHA256: 13EBB721198F052F267A95676A9587982CCCA5C7194AB3338BC1E3494D687C1D
文件大小: 3.48 MB ， 3479508位元組
MD5: 12e487dd60b1eaa1641e5ea986f70371
SHA1: c98d305a01adfbae184f9fb307f3beec858390af
SHA256: BE7C909913A1C2EF4DDEEFA1B065B62A181E5D1696AF5FC8DBC42FD734201720
文件大小: 2.46 MB ， 2464768位元組
MD5: ff9c6f07944cba0e7228c41e18e16d63
SHA1: 3b4f98c93ecbfe25503a49e5c238ebbdffbc7256
SHA256: 74D0C949AD1466958936792E2A952BF6FD5284D55AB1CC5C066722A813290EBB
文件大小: 7.24 MB ， 7238153位元組
MD5: 34120046629b6e30af9130df6dd52d2e
SHA1: e89a99a899c2714e3b679242e5f85d8af4793fc6
SHA256: 6D1223AC6CE962702D399C0ECE87462EB233E24D86010F4E50455C00215BF27C
文件大小: 5.94 MB ， 5943517位元組
MD5: 41c421c506669a95ed3b9c57c09ce433
SHA1: 70a542035e398347641a482264c6d8778e115714
SHA256: 7CBF5E46B0C3D3A60BE17970D098EF358D2EAABA64C5A4E47C36FC1E1DF67B3B
文件大小: 6.28 MB ， 6279696位元組
MD5: b97345fe3e0a7761570ae64008d8d929
SHA1: 4c992dc12ed08ef4fb374bcba28973ac3f2a712e
SHA256: D1AACB79BC55A83F79EC6BF8094506F282D5527A128D186E4F4C1BC7CE135EC5
文件大小: 7.72 MB ， 7719214位元組
MD5: 71d41ca0439b393f8854001d9fccdd80
SHA1: e7c0dac55a9ae519e7c7d34f1a60f01741469898
SHA256: EC627B8E7CF3A92ABC2F6E6B78F94B5382994A9E2648E2FD029ADEB16AA8B326
文件大小: 7.89 MB ， 7885699位元組
MD5: 7b62b1e2968d963230698955066d0a8e
SHA1: 66855cf96efc2039b86aa36c36543ba7899eb239
SHA256: 3CDCA75089231BF7ACBF2E45AC0DA65F6326B33CB5D86411C8C5DF4878287748
文件大小: 4.76 MB ， 4764416位元組
MD5: d9e80b62d1232029b6f2bf6187d6b670
SHA1: 832c639ec65bc40a7a10a5690193bebb42a7adee
SHA256: 7CEB53E589F2458BB2DDBEE6D4DEAB06097B8758DCFAD11F41B76E01C0238267
文件大小: 510.36 KB ， 510363位元組
MD5: fec8d7b0f68dd3ed6065153829302da7
SHA1: 9f885b0b432268fedb63180fedbff8145b2a05fc
SHA256: 55CE09DE2FC986D143EB12C95D813AB083596213612317149032EF9A1AE4E947
文件大小: 8.07 MB ， 8074216位元組
MD5: d5ad6dadc00f463d4f38311604c13020
SHA1: 3fa055cef96f36ab2a7d39532707d8aed7743a1d
SHA256: 61E279F4BAABEDA01BD4A49E370F9BC849B380A0CE2D4F600DD95429BE03EE4A
文件大小: 3.68 MB ， 3684562位元組
MD5: e0e04498283de72a70435d5bfe2a5f55
SHA1: d552ac9ae85c9d7cd6af61fb083c3e54daa64e7c
SHA256: 03322B22E6EBF2644B75566D238C19E2A7B21C2A9E2C5BCDCD3AC74DFBEE092C
文件大小: 390.68 KB ， 390680位元組
MD5: 96c5adfae12894b9978b887877fad4c5
SHA1: 883af4d84d2a14f2c9b6f265e9e14704d610c455
SHA256: AF6F686657A6C78B5E1F1CD14900AE53B74696B9BFD97D1B3B7D123A219FBBC4
文件大小: 1.64 MB ， 1640351位元組
MD5: fdbbd54cab287114e1bc0d194a4c0d9d
SHA1: 9e902ba98fe008050e10220c1fd4616f4c06b08d
SHA256: FBE89475450A5BA6315DFC8C354A06E14B92E22294782BA4AF05560992E0F16E
文件大小: 3.58 MB ， 3576007位元組
MD5: 8c60dd816f7b39f0ddfd1707c22a9304
SHA1: d08afd401387acff6174d9e4e43cf34ea06e8a26
SHA256: 7C1AEE3DE7D869FEDDFF91F0ED735FD8F8C855ADAFF193A15797F3736C8EB687
文件大小: 310.24 KB ， 310240位元組
MD5: cc8e7d7ac9880bcdf1ad23c103d6a722
SHA1: d3cbe9769d5edbe61abb265301699ebffff1116d
SHA256: 1781D77159C3F117E97EDC1BAA090D34DDB3986AA3F4F257D6902177F07806F8
文件大小: 8.88 MB ， 8884736位元組
MD5: 6e8d2159ac721a18326eb85826330d23
SHA1: e8b8a3d5f3a26bfdc0b395adb106322161a5a966
SHA256: 9B96A2612A39BCA6F86974133AF37BA654A9BAD097ED57455643AABC9EFABBD4
文件大小: 3.46 MB ， 3462998位元組
MD5: cd881d67966582febe60422cf8f6289f
SHA1: 50bf20ea584f393921c7068faed98c5b40251378
SHA256: C727E6E5A12CB1544720FAD3ABF21B60980C873175B91866E11A42BDAADCDBAE
文件大小: 4.45 MB ， 4453630位元組
MD5: 2bbaf9ae8c73afe237e50f924c480bed
SHA1: 5728b9c8a57f8538b3ae6e7d3a5bffd5462ce8a0
SHA256: 57D596B29D6FC2C917503116419917C74D504BE7733B31AC4637B6792E8ABF72
文件大小: 3.10 MB ， 3098653位元組
MD5: 99b4b3a1847ebe524d4b28179b45c674
SHA1: 931dedeaca90ab273bdf103aab9f1b943d4e83c4
SHA256: 375ADD48C91787315B3DE22E7081DCB35C8D964235D3B902844165EC415BB595
文件大小: 4.81 MB ， 4810056位元組
MD5: 629a36d902a04273eb43ecf35fd4fc5d
SHA1: 0aa37e5a26818dcbbce318cfcf74ff38785e7691
SHA256: B575D8F293A836DA6BE4DAB7D354F73C011E730C8BC0730DC3D4A2B0517BE516
文件大小: 4.63 MB ， 4633007位元組
MD5: 6b0bc7ac9271315bd5497dd42b44eb9a
SHA1: 9413a1aa7574bd281fb2c6291f8d812ad0499506
SHA256: 1C4E66DD3F51EAB5C1CF5F1E1BA24039DA6208D5B153283EEEE92096E776681F
文件大小: 2.81 MB ， 2811045位元組
MD5: 1f197dbac1524d45e9fcd5688925b5ce
SHA1: 63a73c58a25c5cfca78dc0f883f40f8aaa2cff77
SHA256: 8456535F45BFC71A17929A070263257BD91CF3694B6202316A795889774773C8
文件大小: 67.91 KB ， 67909位元組
MD5: 959a4984f88f0c71acbf71e86ecefb9a
SHA1: a5c7ca81741d47525f034ed756ee7462acb6debb
SHA256: 98D7A75B3B5F541C4CFB11DA0DFAC8FAFF74AE3468C8E87D3A3072CA6CA17880
文件大小: 3.54 MB ， 3542685位元組
MD5: 7f4e6eec3f0ed804a66b1976da5bad24
SHA1: eb1154090857e459abbd2b64a7bb88356bb41146
SHA256: 888A546D81D5A41A8F3E3526CD08355EB08F26E34D3132BABFCDFD2A68A67730
文件大小: 5.23 MB ， 5231975位元組
MD5: 756481247968abd3195f4d8bc7070a8e
SHA1: 9d898cb0299affd24ed14477f5201ed5162eeb69
SHA256: 8813E520BEB688B1540578F93973120EBE71B98E86E933466F12771C00DA12DF
文件大小: 2.45 MB ， 2447872位元組
MD5: bc14117a8ed2f6d72b86f40d682544ba
SHA1: 047aab0ec141d4a8d8814c80e31e9b99106ca0da
SHA256: B80114DB37215DC33A49CE7E21A6BAAF96DD60BA5BF3D80B97E12FA82A4561F6
文件大小: 7.20 MB ， 7203379位元組
MD5: 6d72982c567b6951b6117acaf8c67cca
SHA1: fe8c4146120d87b3dc16f085a48ae88d1580baf3
SHA256: 7EA33F5CE09B20C3A30CB89BCBE57D385B6190AA0463C2D87F619FCC3D892808
文件大小: 6.86 MB ， 6864590位元組
MD5: 81be73dcd352a00b336bc6b05cfdae60
SHA1: 181d4c14e4cec3a7ce79cf5a896cc2962778f427
SHA256: 4F8E57FF904792CB899E4A168E1E0CAE69F7C6EB2AB49C4C291B5473A86B4D44
文件大小: 3.66 MB ， 3661210位元組
MD5: a7721d08e4939bbc28f4dbc0a03eed3b
SHA1: efbb9ec634b956a383f0031554c805cb4b32710d
SHA256: 8487F6EDD8294D1055E7C568DFCF3BCF7E05404CBD4F6BE44E28A1D5C1AED960
文件大小: 2.45 MB ， 2447872位元組
MD5: 44627c2bb7dd3f24a27da1f75a754b01
SHA1: 80e21de335fb77fe5e478589afdf61d773131736
SHA256: D874AAB0916EE1AEA6EF15D2F2DC941AEEF755DA67B0ADBE9D74D2274752EF0E
文件大小: 5.29 MB ， 5289744位元組
MD5: 77812c81d90d544b9a3923edd0eb49d8
SHA1: dd856965fc4959c51341d81b94198d17dee7be7e
SHA256: 3CB868FECD372D8E8576260DC7F2A260651C678C449F942D569D6EE52D0FD170
文件大小: 7.47 MB ， 7467637位元組
MD5: 77d3d39aaca10981883267435c41ed11
SHA1: fe78b63465142c8800faf299950a3103ed8a5397
SHA256: 354BB31660091CC513A159B9493E2E4428AB07AF0BADDB2EC04C1993A28D48C2
文件大小: 472.42 KB ， 472416位元組
MD5: d090052019751c65269f0e6ff75204f2
SHA1: 795ec0e06b348289044a915f97b3f20b1a7ab091
SHA256: E91D7ECC61134C76BCFE2738D81924E8EDE42A4DDA75D77F93DAE05F79D8E392
文件大小: 1.73 MB ， 1734144位元組
MD5: 570d57e6bd9f9c0019e32d887a2bc006
SHA1: 66b8d5fdc03f74b6afce8ba6c557e91b0105aae7
SHA256: 00BF97A0C81B19689E2C7239DA69083C86767D460FCEAFCE93076BF90912B73D
文件大小: 7.36 MB ， 7363249位元組
MD5: e05b3791e9d416974e4aa7275a05e4fb
SHA1: 7443774e7e84f461fa75e8dc67d9eb78f3294934
SHA256: 19F7DABBA0395AB890A3F6EFF80553B61404AD209B000C2972037B16C30689C1
文件大小: 3.74 MB ， 3743722位元組
MD5: 738798b7b863958cb38d7375330c8faa
SHA1: 5441dadd198b9b47aff758afa180055a6b6101d3
SHA256: 1CCBC25C61EBE20E6D5EF6B4FA79820D2AD947BCD18C39EA55D1191F2090D42E
文件大小: 2.22 MB ， 2222878位元組
MD5: df10202539240189f2f35fc7c1637ae1
SHA1: b6aa3e73894f5ac9afdd77305d3ab25ed6c68b29
SHA256: 747B2AF198AF3DFBE25EF7852AE676FC8FDA61CAB9E09AF114002D0D5856B5EC
文件大小: 3.56 MB ， 3564374位元組
MD5: e509a4a297b6f4dd52b1ae4d608a01b6
SHA1: ecd6a05526ca9c00d0076d8fe3679ffa157142ce
SHA256: 7BA3C6A5E054F6AEA6DD3696C65242355B9F10ADA292FE3799F54F25CB54EDB1
文件大小: 2.06 MB ， 2055168位元組
MD5: 076c4892a57dbe1dc3e04bd828dd2207
SHA1: df1160b820a34a603124377d2dad808b0b2dabd3
SHA256: B8B63C4BA5504FDEBDCD1A79AF053F854BAD9E6CC46739001DFDFAB3FADA185E
文件大小: 402.49 KB ， 402490位元組
MD5: c64994ecfe2a69e523ffe5acd72afdb9
SHA1: 39b5fcd881d0a9d52f0782be418ef92d7fc71f00
SHA256: 57AD06765A07116EFB435B5A8934AE8C9766BC642BA39CF12483D744E85EA453
文件大小: 7.10 MB ， 7098257位元組
MD5: fc1cbe4b183e43bd39fa3f9b6f4292ce
SHA1: 66022d348e7ec8f83e760567f36f502293489432
SHA256: 040448F3631EF9595D542D2C837155E44D93A253D694659ECCA5EA8936824119
文件大小: 3.10 MB ， 3098733位元組
MD5: de49d35200a7934e347cbadbabad0b47
SHA1: ed6d21a2b809290e8a5975024b7b701ee91abb1d
SHA256: 0F97EF8F6163B0C39AB5A5581B8D5667949E093D1BCFF555BB799CC9E2DDAC80
文件大小: 7.45 MB ， 7450015位元組
MD5: 45844b0c41d35e130d25705d95538f60
SHA1: 40f0da31ae4411eec2c65ddcb8499426322b7c20
SHA256: 7F462B6EC3FF8C76722521F58BD2A87CA04CA3B07D877503050F69F8BC42C8E7
文件大小: 7.89 MB ， 7885699位元組
MD5: 20fc1c8114735bfea355131d75cea7f0
SHA1: da6028fe71ebe182a08b6157932e615ae55b0498
SHA256: 6A1E0BC86B6C0ACB17E8D33502C98B2CA4064C0AABBAEAFE2636F7F191D84A45
文件大小: 5.42 MB ， 5417472位元組
MD5: 2267b1c096c18744b3750254db5d92e3
SHA1: c91d94f33ea9a449771c8b79631cfe378db4e356
SHA256: 7576FFC3349D7C88CF7CAFF636515D3A79274225515A41A57130988D916A4EE7
文件大小: 5.43 MB ， 5433635位元組
MD5: 7e0091686f97337c546a6f0103d1e16d
SHA1: 377040bdacf72e45645b43825ab4a4f13be8ea2e
SHA256: 5F13907D53BBF7E7405A06AB9998FF6585891A5F22EBC6C716794E83A6B0A7FC
文件大小: 8.23 MB ， 8228864位元組
MD5: b5657a088ea44deb6a19ad4dc1fe00c6
SHA1: 281a03c8b79554059191343b3f32618a67cfc37f
SHA256: 7A1C36FA418587BA34C828ABF39FE41E1F48BDD54CE4019FA3BA1D0538F85E05
文件大小: 8.99 MB ， 8987648位元組
MD5: 51c8860ccc7431d141e8420944273660
SHA1: 599b069c81a502aaeab14f72d97a6388293f986d
SHA256: BFEB475451BDC4863623F98D18AEBCCE9ACDD08E14D59A5EA57237F338A87ECE
文件大小: 1.46 MB ， 1455990位元組
MD5: 968959d4adcde6b00d4a66031126539b
SHA1: 9a85237642bc0af607f6072e1746aca2161748ed
SHA256: A9AECE9D9C709E1D937BA18FF61F7D17938043EE6CDFDAD3A58E390796380F2C
文件大小: 8.21 MB ， 8207552位元組
MD5: c2163217c01e1e0ea7bd58cf9c85600b
SHA1: 392caca3ed59ed5f3007cde725dfc6eab7be1979
SHA256: 8CC1BB26DC9BC76C8E6BFD0A2EF542854528726E66F76C44DD09A18D8B00019D
文件大小: 7.35 MB ， 7346047位元組
MD5: 9458032ca529c58f29a1d626246361eb
SHA1: 64d286856c7cf03f9130adbd84c8c59d7a602573
SHA256: 9D72390E2E05726FA7B839E4F4B6E6246BDA27E029F3B4D6C7C88A3C0A0DE3E9
文件大小: 3.63 MB ， 3633751位元組
MD5: 5f7d291896c82cc57b99101c17f53f32
SHA1: 3864cebab4006d2b932b2940ce2007330e1dc8f0
SHA256: 21932AB86F2B8163CFADE13775EDC274C14E8D693915E9C3CF0B738B085E4786
文件大小: 6.08 MB ， 6082048位元組
MD5: 06164429bdc6da4b191008e1d4b8d3c8
SHA1: 2c4cf2a2a6676e9ce3ef3d3d588f369b57e4fb8c
SHA256: 39B93A0D07AF9D78F8819B98ECCE0C7BA3282131ACBBA081C3CCE88B1D1DCB7D
文件大小: 9.29 MB ， 9288192位元組
MD5: 99796dd65db64198d1eea10683f6af2b
SHA1: a7e405294f142a8a36ba7ef0b5d81ca3bf5b3505
SHA256: 02376F2973D2D5FC84C5C601A5F23D8850BDA2692E996630875C17B54E5F8640
文件大小: 7.86 MB ， 7863662位元組
MD5: cedae208bd96d094ba1148b3a82b9801
SHA1: 8c744e4aebf9fd95aa9e57ae4221f64e91a42d9e
SHA256: 9D6B565170509FB8E2C2C7A4E04AD023244BD2E5F8377A9FE1A87862EE59D585
文件大小: 390.57 KB ， 390568位元組
MD5: 0e3a8f8bf474bc8f9cfc3d85a3d194cc
SHA1: 505b01df6d7280b2877b57edb74dc91451c3396c
SHA256: C9FB6BB33969559CE098362CF9940518CB92084DDCDD3C25990EFA3A71D9F202
文件大小: 476.01 KB ， 476014位元組
MD5: 341632222e0938edfd38135f14b22b16
SHA1: 2f784fcb01d0ddc3a4d6c055468e586c93535f7f
SHA256: D4D307F8FBBD25A27326A3E9C990DCB7B5635F774E6DD41C294A987C02404464
文件大小: 164.33 KB ， 164328位元組
MD5: deab5b2940fc362c6436fee6e9086b34
SHA1: 7ae99f8d7d06bfcc8fb48a337343cf3dbef59acd
SHA256: F43EC19D42D28F9BBAD3AF3907E9EE6170A8D9A34FC86AC35F762AC437B53F1D
文件大小: 3.72 MB ， 3717851位元組
MD5: 07b7a525f5cb1c81ff02f86d1456c71b
SHA1: 48954ea3e570500929765569b7c32b16fe7d339b
SHA256: 6FAB8E82B7E113672D96F95076F56D17FC211C385944E7B9002B9FF215621707
文件大小: 795.14 KB ， 795136位元組
MD5: 06238cff8882fe50dcd005da31cd7158
SHA1: 345f6e0652de589bb38657b3c35aba2134a6eaab
SHA256: 3D2B6C32C0CF67346796C6CE27465BACAA3AE7A6F37803A794969CFBA40F2E20
文件大小: 785.34 KB ， 785339位元組
MD5: 430db6f444970894df2c90b070c0e336
SHA1: b9dd12ef37cd5b195243880a940fc4e0595012c5
SHA256: D8B34E525B9A924D7E56C14DA9F52F426CC5C29FF7B0201670DB331795428A21
文件大小: 7.25 MB ， 7253648位元組
MD5: 08d919cfe29fc358886f25fc6bc1a478
SHA1: 022ea57944a1ed83263f45dc43fdc3c22b9e8d87
SHA256: AA45BF5E0496A437295849FCACEFDE44C68151CC47B332592DBA6AD7799B18B6
文件大小: 483.51 KB ， 483508位元組
MD5: d730a8adc941849db9a00e7b713895a7
SHA1: 1c11d1c4a191d9d4f9cb226d0752480139237fa0
SHA256: 1DB9251BF1DA60C0CDBD86F3A7AECA96A2B6C6EB16E0587BC68B233F4F4CA6F3
文件大小: 7.94 MB ， 7943984位元組
MD5: 6870b0d8f3a5aff3d38691134eb95565
SHA1: edb21cba84b0af708a66a8e1d387b298d54f3f4f
SHA256: 1BB66B8DAB8E5377AF87337B2E03A7624ED1B98BB485A349B0318BBFB3F95762
文件大小: 2.93 MB ， 2929179位元組
MD5: cadb79674cbe4b9cca4e311aec79db09
SHA1: 8d585e1f8e192415029fc3ce3fa79c4f41b078f0
SHA256: B184EC003C053B3EDB1D36F3913486ACFE51A44E2B88003C75F6D6D3F9E79492
文件大小: 1.11 MB ， 1105920位元組
MD5: f90dbe2570d430e553781b6d26b2aa2a
SHA1: 073d3b1edaabadd063cc6101b0be3163ff3fe964
SHA256: B7891E22EFB0CE4855D8A5E6FC5F0011F6D6D654DCEDEF704BF69B29EACA8B47
文件大小: 178.69 KB ， 178688位元組
MD5: 304b9ac6805ebe0767c4749fe6f2ea6a
SHA1: 06a6c111c3718f91d07a7b2ee69e93c6c0ccb3d4
SHA256: 79CD8186C3ABD8A83890CDA9839F6B09B5129C7B0D2E989212A1230613AD2253
文件大小: 40.45 KB ， 40448位元組
MD5: 128ec86b0cae6f70826dc79e157fea39
SHA1: 66749af3eed2f514d1a0f2e4ea90186de7e58ae3
SHA256: C4A21CDD604FA20B8130017548F77548A7E2C9F9072ABD8155B3589DC4174927
文件大小: 186.37 KB ， 186368位元組
MD5: 110a65a2ebc9cff9238dbabda3bca438
SHA1: fec7501901c49648c966c284f894ee52cc735d9a
SHA256: F28A6338605772547D584D3722C031A1D74DEEDEBA6242710D9E9D71BB4BA14E
文件大小: 80.38 KB ， 80384位元組
MD5: b684365bc0548fa7d72fb3d9102b138c
SHA1: 54c9a5be6b1eaccddb10b4ed75d39017388032df
SHA256: 57F180ACF1822BEE049DC470FCC08F8C4F8AC57CE3C22FE038B5E5F05BBE1ABC
文件大小: 3.83 MB ， 3832975位元組
MD5: c6a08bb285ad689179764c4112c301f6
SHA1: 03ef42583e3cf939a21d8890070cb83552e403a6
SHA256: 578FDA36205E5E16FFC0ABF08DA248DE1CFB99A93BFF781B9835C0CFAA3575B2
文件大小: 7.33 MB ， 7332425位元組
MD5: 74f90d5eea8eca82cb23459e4600847b
SHA1: 36a3db7669c15f229a3b4e55f6aa3ce848050678
SHA256: 06AC06595B66C1778AF3DF2C9EF775E5030B657FD9B7C053730028708DE9F4A8
文件大小: 1.84 MB ， 1835008位元組
MD5: 599e593cf68b55cfc0a34955575cc710
SHA1: 3eb95415d57746bbde7449a82832bbbadb670202
SHA256: 872389451AE1EFC9C8EDB406064A33E962D0693D059CB445787AD105E5653129
文件大小: 1.56 MB ， 1558528位元組
MD5: abd2e0451fff74cf5120cc29c5600a30
SHA1: a3721f2c95c5c8d689ef63ec7095f3cc580fc84d
SHA256: 28C78D3E8CF121EC14E2282916765FAADC1C5EDB02143C935B1BCE6BDAB6A5B7
文件大小: 472.83 KB ， 472827位元組
MD5: 051a51cf8cc7181f3c0fdfec05794ced
SHA1: 3a315aa995c0aac4fb8f540d595859e800183225
SHA256: BD81EAAFACF5958793192C1F92B59097EC6CEA9F7B44C254E2E446139F73FF48
文件大小: 325.06 KB ， 325056位元組
MD5: 47343bdd416d61185dbfc471ad4fc559
SHA1: 0941ed214fb8d85005a7cbdd52045734907b80db
SHA256: A15B3D39C2B1CAD92DC451CF85CAD6FA562B797D05EB70FCB33E3BE803B11F68
文件大小: 7.95 MB ， 7945433位元組
MD5: 21d1ff464254550807e2d7107e010498
SHA1: 23b75ed5f06334972f854d0083328ab7e323d681
SHA256: 65EE70E11167972180756E6DF667C9823A0274D86337E79E95C3F62EC29885CA
文件大小: 3.65 MB ， 3646852位元組
MD5: 390e9b73e6c062541ecabab6865af3bd
SHA1: 8296a5c31ecd1f876d8afd1ccc802689128b153e
SHA256: 44BE3BC568CC10B965529A1B33E28B7F300884217C008C14D446FA78EAD70A66
文件大小: 9.82 MB ， 9818097位元組
MD5: e1a0587d30acf446562e2bfbde5df169
SHA1: 8e3686f54a39480c7ed8b487b93e3322917f1f95
SHA256: C2E887691445C02F607CF81D65AF36572B309529861E5D9AD1BDEFB541D18710
文件大小: 2.68 MB ， 2677248位元組
MD5: 5037dedb87fb9677031baf772e90a217
SHA1: b99a8702c83c207c66ea6538b9440c11d4909730
SHA256: CF5D66A80ED8E94ECF4D0554417435BE65E76E430CB61B3395773D208AE56798
文件大小: 169.63 KB ， 169632位元組
MD5: 2f366d5ab29ea54f8da94819cab6e121
SHA1: e06978ef4b8a3896891d4d423d797f1c609e2b3f
SHA256: E883526C718E4B1462D5BCC33621555621BD00C5EF21C688754E50F83D023BB2
文件大小: 2.68 MB ， 2677760位元組
MD5: 1cf9775210bc2f88e7914134e86b7fec
SHA1: 649d7467a2ff8d1d1c3f5e7ab5d2f84463a39675
SHA256: 394DA89752DFB199E7547BE5989BBD796517D87E8EC78F2A97E4BC5D89F38CA4
文件大小: 3.53 MB ， 3533954位元組
MD5: a0f595c00c02b7d70c580224311642b9
SHA1: c149ac2babfc61544d79703521750034c279e79b
SHA256: 08925165CEEDA08FF54B54DDB9996E998E1088781DDE5DB1FACB711CC44F52AB
文件大小: 3.43 MB ， 3433057位元組
MD5: 5687882ffc3cc1224d8ad7c1bc3f92cb
SHA1: dc00c38fdbe0f9e71e8e21b0206b8f965a0c6ffa
SHA256: EE5CB13F37E1EC4B4A0A7B98946C0E7473F8F1F97801F1DE34434125DA1B08B8
文件大小: 4.54 MB ， 4540617位元組
MD5: 06f666395e41fb2b2c2fefcdda5882f3
SHA1: 53092dacc571068a57dda4e2ed9d1e7379617135
SHA256: 7208E1C1D73ADC0C87D4A422068F382D443396AB266833B31E610696F61EB194
文件大小: 3.82 MB ， 3815005位元組
MD5: ff1887d95886f7165735a1b220634456
SHA1: 652d9da28d67e2b7c199803cd74c52c1fdd25c67
SHA256: E9EA6E463FA44658F69EEC0AD98713AB8AC2714EA707A506C43D01942062E55D
文件大小: 9.39 MB ， 9387656位元組
MD5: 30134902004e24e6516ae838cfa66a47
SHA1: b158f9881d1974474ae7c428c3a9416b4150ca4e
SHA256: 7DF0C6A24B580DA0FA94C697C15F645A9487A7B7F08B36882A4B23236EB3D7CD
文件大小: 549.89 KB ， 549888位元組
MD5: 0b708fdc8655dce8a20f696126e84cb3
SHA1: f16f05c77b3e39052c10e9bec0e3f4ca65582c7b
SHA256: DF908A0005BC9A7A0B9B97E2ACFB31BE59C3360C6539F42DD2A52383021E7DCA
文件大小: 3.56 MB ， 3561126位元組
MD5: fa349b64a5fcc42a2debe751a6d9f2fb
SHA1: 9189bfc5a1a3a1949f603f48fc92c07f85934922
SHA256: 1CC3E9DA68C1E7AF1ECF494BF2E130BF6D1B6025391ADCB4F352286F99F945A8
文件大小: 460.29 KB ， 460293位元組
MD5: 00df387f6bcc2c6ff754f20abe127ea9
SHA1: 93a726f011905997d14c97ee4410b9bde07bd157
SHA256: 0484E9AE6C830BFAEC1247DEF49BDC237F1F2884BA2699F9F0586F76FB332628
文件大小: 8.93 MB ， 8927888位元組
MD5: de2dc60e1c07b9b722d890f4d9b4e842
SHA1: f44fbc538d3229650d7ed2231fefcefdcc455e27
SHA256: 97A9DC422F23E8CDADF3A098D515759A67BB7DA1AC6C2A9EDB8B035FCD71E952
文件大小: 4.72 MB ， 4719699位元組

以上未顯示1315個額外樣本。

Windows 可攜式執行檔屬性

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have resources
  • File doesn't have security information
  • File has been packed
  • File has exports table
  • File has TLS information
  • File is "other" type (not driver, not console, not GUI)
顯示更多
  • File is .NET application
  • File is 32-bit executable
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

文件圖示

顯示更多

1644未顯示其他圖示。

Windows PE 版本資訊

姓名 价值
Assembly Version
  • 26.1.4.0
  • 26.0.25.0
  • 22.0.0.0
  • 10.0.27840.1000
  • 9.4.6.0
  • 8.0.5.1
  • 7.0.0.2
  • 7.0.0.1
  • 6.3.7.1
  • 6.2.22621.1
顯示更多
  • 5.11.0.2
  • 5.7.2.0
  • 5.6.0.0
  • 5.4.2.0
  • 5.1.1.7
  • 4.3.0.0
  • 4.0.3.0
  • 3.8.1.2
  • 3.7.4.1
  • 3.7.1.1
  • 3.6.0.0
  • 3.5.0.0
  • 2.4.0.33783
  • 1.99.0.0
  • 1.92.2.8615
  • 1.89.1.7744
  • 1.86.2.7676
  • 1.54.9114.11026
  • 1.14.7086.17467
  • 1.10.15.0
  • 1.9.0.0
  • 1.7.2.0
  • 1.5.2.0
  • 1.5.0.0
  • 1.4.4.0
  • 1.3.3.7
  • 1.3.1.0
  • 1.3.0.0
  • 1.2.0.0
  • 1.1.0.0
  • 1.0.5234.27985
  • 1.0.2983.35942
  • 1.0.14.0
  • 1.0.6.0
  • 1.0.0.2
  • 1.0.0.1
  • 1.0.0.0
  • 0.13.4.0
  • 0.1.0.0
  • 0.0.0.0
Build Date 2019/12/09
Builder
  • ahileeeeeess 00:08:54 02/05/2025
  • ahileeeeeess 00:19:10 02/07/2025
  • ahileeeeeess 00:40:16 19/07/2025
  • ahileeeeeess 00:42:09 19/05/2025
  • ahileeeeeess 01:14:00 01/06/2026
  • ahileeeeeess 02:08:36 28/02/2026
  • ahileeeeeess 06:39:12 19/07/2025
  • ahileeeeeess 11:59:23 07/01/2026
  • ahileeeeeess 12:27:54 20/01/2026
  • ahileeeeeess 13:24:34 22/06/2025
顯示更多
  • ahileeeeeess 13:41:14 10/07/2025
  • ahileeeeeess 13:53:53 11/12/2025
  • ahileeeeeess 14:01:46 10/07/2025
  • ahileeeeeess 14:13:02 14/01/2026
  • ahileeeeeess 14:25:28 04/03/2026
  • ahileeeeeess 14:54:56 08/04/2026
  • ahileeeeeess 15:08:21 22/04/2026
  • ahileeeeeess 15:19:06 07/08/2025
  • ahileeeeeess 15:22:13 23/12/2025
  • ahileeeeeess 15:26:24 14/06/2026
  • ahileeeeeess 15:55:30 15/04/2025
  • ahileeeeeess 16:17:10 28/12/2025
  • ahileeeeeess 16:18:25 18/02/2026
  • ahileeeeeess 16:23:34 18/01/2026
  • ahileeeeeess 17:04:58 12/04/2026
  • ahileeeeeess 17:17:19 08/07/2025
  • ahileeeeeess 17:19:46 05/03/2026
  • ahileeeeeess 17:36:47 25/12/2025
  • ahileeeeeess 18:07:24 25/12/2025
  • ahileeeeeess 18:17:11 14/12/2025
  • ahileeeeeess 18:20:26 07/01/2026
  • ahileeeeeess 18:20:56 06/11/2025
  • ahileeeeeess 18:25:58 28/04/2026
  • ahileeeeeess 18:29:56 26/01/2026
  • ahileeeeeess 19:19:57 16/01/2026
  • ahileeeeeess 19:30:34 21/12/2025
  • ahileeeeeess 19:57:34 12/01/2026
  • ahileeeeeess 20:09:21 12/01/2026
  • ahileeeeeess 20:24:04 05/02/2026
  • ahileeeeeess 20:34:41 24/12/2025
  • ahileeeeeess 20:45:54 02/12/2025
  • ahileeeeeess 20:48:58 19/03/2026
  • ahileeeeeess 21:02:54 12/12/2025
  • ahileeeeeess 21:11:20 09/09/2025
  • ahileeeeeess 21:14:28 14/02/2026
  • ahileeeeeess 21:26:25 10/02/2026
  • ahileeeeeess 21:52:09 26/12/2025
  • ahileeeeeess 21:57:39 14/08/2025
  • ahileeeeeess 22:03:51 03/05/2026
  • ahileeeeeess 22:15:34 13/01/2026
  • ahileeeeeess 22:19:33 10/01/2026
  • ahileeeeeess 22:27:49 20/10/2025
  • ahileeeeeess 23:28:36 04/02/2026
  • ahileeeeeess 23:35:24 17/02/2026
  • ahileeeeeess 23:44:51 17/11/2025
  • ahileeeeeess 23:48:00 05/01/2026
  • ahileeeeeess 23:49:39 22/10/2025
  • ahileeeeeess 23:53:42 01/04/2026
  • Almany 12:54:42 19/06/2024
Comment Modified:1995-2015 www.win2Farsi.com
Comments
  • ${Name} 1.1
  • 1.0
  • 3.0.01
  • 30mySFfu辅助
  • A:1000$L:1031
  • A:1000$L:1031$O:MultiArch$P:60
  • A:1000$L:1031$P:500$O:MultiArch
  • A font management tool for CS:GO
  • A modern, lightweight PDF viewer for Windows
  • Aplikacja służąca do weryfikacji integralności plików klienta gry.
顯示更多
  • Application based on SMath Viewer Desktop.
  • Automotive Diagnostics Software
  • AutoUpdate Pro
  • barograph smokable
  • Blake3 Hasher
  • Bollix Vivisecting
  • Bringing mods from the scene to the masses!
  • Chase (Sem Nome)
  • Collecteur de dinosaures
  • Compiled 2023Q4
  • Copyright of this software held by the publisher of this package.
  • Copyright of this software held by the publisher of this package.
  • CoServices AutoUpdater
  • Created with InstallForge 1.4.4
  • Criado com o HTMLRunExe
  • DashPanelServer is NOT official software of Codemasters™, Image Space Incorporated™, iRacing™, Simbin™, Slightly Mad Studios™ or Kunos Simulazioni™. The names pCars, Project Cars, Assetto Corsa, AC, iRacing, rFactor, rFactor 2, Game Stock car, RaceRoom Racing Experience, GTR2, Race07, RaceRoom The Game 2, and GTR Evolution are used for identification purposes only. All trademarks and registered trademarks are the property of their respective owners. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  • EO.Total 2026
  • Freeware
  • FutureXGame.com
  • Game.con hacker-editor designed for beginners in order to help them learn duke 3d con programming easier.
  • Gaming platform REST API service
  • Generate malicious executable files
  • High-performance pathfinding and flocking behavior simulation library
  • hIvhhxJHe8USPKoKfxMVjn8Pw
  • http://www.autoitscript.com/autoit3/
  • IDM Repack Silent by ptk911
  • If you have problems using the package, contact: irfan@linux.edvz.tuwien.ac.at
  • Immersive sound experience enhancement software
  • Installer for Blazer Browser
  • IoT-driven urban infrastructure management and analytics platform
  • Just to verify paradigm : one source for multiple free used C compilers
  • KaOs Krew
  • Keep your system up to date
  • L2兰色游
  • Licensed under the terms of the GNU General Public License
  • lkå®Ð
  • MADARA
  • Made By Paid
  • MicrosoftApi
  • Mob: 0912 297 4535
  • Modified by an unpaid evaluation copy of Resource Tuner 2. http://www.heaventools.com
  • MSCLoader Mod file
  • My Summer Car Mod file
  • Next-generation type-2 hypervisor and VM lifecycle manager
  • Optimized for .NET performance
  • Optimize performance, improve privacy, and remove bloatware.
  • Payload for Umbral Stealer
  • PopWndL0g
  • Product Installer
  • QuickShare
  • ScreenSaver
  • Softtrack Unattendeds
  • Teletest Wavescan V2.4 Contact Eddyfi via www.teletestndt.com for further information
  • This installation was built with Inno Setup.
  • This installation was built with Inno Setup: http://www.innosetup.com
  • This installation was built with InstallAware: http://www.installaware.com
  • This projector was created using SWF Studio by Tatiana Feldman for The Australasian Institute of Mining and Metallurgy
  • Tibia is a massively multiplayer online roleplaying game. Enter a medieval fantasy scenery, meet players from all over the world and have adventures together with them.
  • Total Security
  • unipdf.com
  • utC4bMdLoluw1z5T96IsGKZ
  • VBVNXMCBVMNXCBNBFLPJIOPWRW87E90RW7809VX7CV8X7C097
  • Version 3.67.1
  • weatherized sociocultural
  • WinASAR 文件管理工具
  • www.seacos.com
  • wYdTRFy0hZ4hK4cj3pktHbO192dH
  • XCoder
  • Yadiv Backup
  • Программа для накрутки поведенческих факторов сайта по принципу автоматизированного взаимного обмена посещениями из поиска Яндекс и Google с другими пользователями системы.
  • 作者:小鱼儿yr
  • 作者：朱 江(Richie) Tel:(+86)13075947257 E-mail:ceo@coolboo.com
  • 整合By→小鱼儿yr
  • 此安装程序由 Inno Setup 构建。
  • 编程交流群:849503677
  • 龙头选手
Company Name
  • .
  • 8to32.com
  • Abelssoft
  • AccentSoft Team
  • Acpbyte, Inc.
  • AgentFlow Labs
  • Akaikt Software
  • Alexey M. Blinov
  • ALJKDSJKLSAVNKSADVN9R987R897QWERQWEBQWBELJQHWLRH
  • Andrey Ivashov (SMath)
顯示更多
  • Anonymouse
  • AOMEI International Network Limited.
  • AotForms
  • ArchiVid0201.org.ua
  • ArchiVid0209.org.ua
  • ArchiVid0213.org.kz
  • Arua
  • Ascensio System SIA
  • AudioSync Dynamics Inc
  • AZ-INVEST
  • B-FG Data Recovery
  • Babylon
  • BCmeil Recovery Software
  • Belkin Corporation
  • BGmeil Recovery Software
  • Blazer Browser
  • Bombina Soft
  • Buhl Data Service GmbH
  • CBmeil Recovery Software
  • cheat-launcher
  • ChemTable Software
  • CipSoft GmbH
  • Client
  • CnCLab
  • Codessentials
  • CoolPDF Software, Inc.
  • Cracking the code 4 fun!
  • deacidifies infinitively succeeded
  • def
  • DefendGate Inc.
  • Department of Transportation
  • Devastator's production
  • DGI-Futura
  • Digerati Editorial
  • DIGITAL imaging s.a.s. - Nichelino - Torino - Italy
  • Digital Solutions, LLC.
  • DNA Pagamentos
  • dolloped pipiness beringed
  • Dotch
  • Dovetail Games
  • DTS, Inc
  • Duck Martians AI Labs
  • Easeware
  • Eddyfi UK Ltd.
  • EduTech Dynamics
  • EnigmaSoft Limited
  • Epic Games, Inc.
  • Essential Data Tools
  • Essential Objects, Inc.
  • EYMON LLC
  • EZB Systems, Inc.
  • Figma, Inc.
  • FileZilla Project
  • FineShare Inc.
  • FireNinja7365
  • Flexera
  • Fmhbits
  • FreeMan
  • Fz Soft
  • GameModding.com
  • Game repack
  • Gemoo Inc.
  • Generic Internet
  • Gerz
  • GiliSoft Internation LLC.
  • H2MAC
  • HANCOM SECURE Inc.
  • hGems, Inc.
  • Hitspark
  • Hocus Pocus Software Ltda
  • Home
  • Home User
  • Hong Kong Ke Mo software Co., Limited
  • https://github.com/noradlb1
  • https://www.xyboot.com/
  • Hunting Simulator (v1.0)
  • HyperCore Labs
  • iMobie Inc.
  • Individual Software Inc.
  • Infinitysoft
  • Integem
  • Internet
  • iQ-TEAM, Inc.
  • JFX
  • Jlp Sistemas
  • Jordan Russell
  • jrsoftware.org
  • JWTS
  • KaOs Krew
  • Kaspersky

以上未顯示113個附加項目。

Created
  • 7z SFX Constructor v4.5.0.0 (http://usbtor.ru/viewtopic.php?t=798)
  • 7z SFX Constructor v4.6.0.0 (http://usbtor.ru/viewtopic.php?t=798)
File Description
  • .
  • 1 Setup
  • 19.04.2000
  • 30mySFfu辅助
  • 80 Setup
  • 473 Setup
  • 8787456893456395UIO32434TIO3YO4TY324OT32IU4TY34T349
  • AC3Filter Setup
  • AccServer
  • Acpbyte Utilities Setup
顯示更多
  • AdStRkJ
  • Age of Origins
  • AI Vocal Rapper Setup
  • Ai_Assistant
  • All Media Fixer Setup
  • Alpha Cheat
  • Alt Down Solo Setup
  • Alternate File Browser Setup
  • AnySign For PC
  • AnyTime Application
  • AnyTrans
  • AnyUnlock - iPhone Password Unlocker
  • AotForms
  • Apple Music Converter Setup
  • AppTrans
  • Archive Convert Setup
  • Archive Extract Setup
  • Archive Password Recovery Setup
  • ArchiVid.org.ua
  • ArchiVid0206.org.ua
  • Arua Patch Client
  • Asistenti i Instalimit të Windows
  • Asistent inštalácie Windowsu
  • Assistentd'instal·laciódelWindows
  • ATA SMART Diagnostics Setup
  • Audio Book Console Setup
  • Audio Book Conversion Setup
  • AudioBook Setup
  • Audio Capture Monitor Setup
  • Audio CD Grabber Setup
  • Audio Director Setup
  • Audio Editor Assistant Setup
  • Audio File Converter Setup
  • Audio Library Setup
  • Audio Master Pad Setup
  • Audio Recorder Lite Setup
  • Audio Record Lib Setup
  • Audio Tag Editor Setup
  • AutoClick JuaniPiola
  • Auto Font Installer
  • AutoUpdate Pro
  • Avast Antivirus Free
  • Avast Patch Setup
  • AVI Codec Setup
  • Backup and Recovery Setup
  • Backup Assistance Setup
  • Backup Driver Setup
  • Backup Master Setup
  • Barrymore Player
  • BCmeil Setup
  • BDP CapturadorHost
  • BDrivelib Setup
  • BeFactor
  • belka-dominika_zacieniowane.exe
  • Berry Player Setup
  • BetterFPS
  • BGmeil Setup
  • Blake3 Hasher
  • blazer_installer
  • BLE to MQTT Bridge
  • BluRay2MKV Setup
  • Bone Collector
  • BP Media Player Setup
  • Browser Backup Setup
  • BumTuner Setup
  • C++ Application Development Framework
  • Cabinet Self-Extractor
  • calculating transform Expert Gateway
  • calypsonian overturning sworn
  • CataLib Setup
  • Catwalk Countdown
  • CBmeil Setup
  • CD Play Station Setup
  • CD Studio Setup
  • CDS Viewer Setup
  • Chase (Sem Nome)
  • cheat-launcher
  • CheatboxPlusPlus
  • CheckDrive 2025
  • Check Flash Setup
  • Check Flash Tool Setup
  • chop MFC Application
  • CHTrainer
  • CI Catalog Professional Setup
  • Citrix Alternative
  • CLARA
  • Cleaner Spare Setup
  • Clean Manager Pro Setup
  • Client
  • Clone App Parameters Setup

以上未顯示547個附加項目。

File Version
  • 6000.3.12.16556090
  • 6000.1.16.6799091
  • 6000.0.62.16359173
  • 2022.3.62.7762112
  • 2022.3.58.15564654
  • 2022.3.13.13767893
  • 2021.3.40.7326391
  • 2021.3.31.3410402
  • 2016.2.7.4
  • 2015.8.13.1
顯示更多
  • 192.168.0001
  • 125.11.6.0
  • 118.0.0.586
  • 118.0.0.429
  • 65.23.85
  • 51.1054.0.0
  • 51.1052.0.0
  • 51.52.0.0
  • 51.49.0.0
  • 26.5.0.18164
  • 26.1.4.8724
  • 26.1.0.1031
  • 26.03.01.2960
  • 26.02.02.2570
  • 26.0.717
  • 26.0.25.0
  • 25.06.00.0709
  • 25.01.00.8902
  • 24.08.02.8277
  • 22.0.0.0
  • 21.20.8.505
  • 20,18,7,26
  • 19, 0, 0, 1
  • 16.11.34407.143
  • 16.0.28315.86 built by: D16.0
  • 16, 1, 4, 133
  • 14, 2, 0, 0
  • 12.0.40664.0
  • 12, 0, 0, 1
  • 11.00.26100.1 (WinBuild.160101.0800)
  • 11.00.22621.1 (WinBuild.160101.0800)
  • 10.50.125
  • 10.2.8.129
  • 10.0.27840.1000
  • 10.0.19041.1 (WinBuild.160102.0800)
  • 10.0.4.112
  • 10.0.4.111
  • 10.0.0.0
  • 9.89.0.0
  • 9.80.0.0
  • 9.7.6.3860
  • 9.4.6.5738
  • 9.4.0.129
  • 9.2.0.1010
  • 9.0Gr432
  • 8.54
  • 8.40
  • 8.8.5.1
  • 8.8.4.3
  • 8.4.5.3
  • 8.0.5.1
  • 8.0.0.109
  • 8.0.0.95
  • 8.0.0
  • 7.79.1-DEV
  • 7.21.7.117
  • 7.7.1.9
  • 7.0.1.99
  • 7.0.0.2
  • 7.0.0.1
  • 6.303.5.3182
  • 6.36.5.2
  • 6.9.2.0
  • 6.8.19.3
  • 6.3.7.1
  • 6.3.1.2590
  • 6.3.1.2552
  • 6.2.22621.1
  • 6.0.242
  • 6.0.22.0
  • 6.0.0.6
  • 5.37
  • 5.21.2117
  • 5.11.3.0
  • 5.11.0.2
  • 5.11.0.0
  • 5.10.3.0
  • 5.9.3.0
  • 5.8.9.998
  • 5.7.3.0
  • 5.7.2.3841
  • 5.7
  • 5.6.5.2
  • 5.6.0.0
  • 5.4.4
  • 5.4.2.1893
  • 5.4.0.0
  • 5.1.1.7
  • 5.1
  • 5.00

以上未顯示161個附加項目。

Internal Build Number 200860
Internal Name
  • ${Name}
  • .
  • AccServer.exe
  • AdStRkJ_sound.exe
  • Age.of.Origins.exe
  • Ai_Assistant.exe
  • Alpha Cheat.exe
  • AnySign4PC
  • AnyTrans-Setup
  • AotForms.dll
顯示更多
  • ASrj.exe
  • asx
  • ATW
  • AutoClick JuaniPiola.exe
  • AutoUpdate.exe
  • AutoUpdater.exe
  • Baixaki.exe
  • BaterAMP
  • BDPCapturadorHost.exe
  • befactor.exe
  • belka-dominika_zacieniowane.exe.tmp
  • BetterFPS.dll
  • Blake3 Hasher.exe
  • blazer_installer.exe
  • brain
  • bt_new
  • CABSFX
  • calculatingtransform.exe
  • CardMagic
  • Catwalk Countdown
  • Cheatbox++.dll
  • chop
  • CLARA.exe
  • CleanTemp
  • Client.dll
  • CNC12PLCDiagnosticScreen.exe
  • ConfiguradorSistemas
  • ConsoleApplication14.exe
  • Controle de Qualidade.exe
  • CorrisAssists.dll
  • Crack.exe
  • CryptoObfuscatorBodyDecryptor.exe
  • DashPanelServer.exe
  • Decryptor.exe
  • DH.exe
  • download.exe
  • DownloaderApp.exe
  • DTSLoopbackService.exe
  • DUMo
  • dv_kernl.dll
  • ebridge
  • EO.Extensions.dll
  • ET.exe
  • EXPL0RER
  • eZKX.exe
  • FAN_TOOL_V1.0.exe
  • FileProtection.exe
  • FileZilla 3
  • Flash
  • FONA Art. Plus
  • FontBackup
  • Font Manager.exe
  • FutureXGame.exe
  • GCHE11
  • Gerz Clock
  • Gracco Atualização
  • grandchase.exe
  • Guncelleme70.exe
  • Hasher.exe
  • HIGHPLAN
  • History Of Metin2
  • IAPTool.exe
  • ignitex.exe
  • ILBR.exe
  • Inspector Gadget
  • Install.exe
  • Installer.exe
  • JazzHallow.exe
  • JffD.exe
  • KeyBrute
  • KG-S65G Program.exe
  • Krata Mateusz.exe.tmp
  • Launcher
  • Launcher.exe
  • LaunchRes
  • lcd-setter
  • Lesson01
  • libcurl
  • LicenceMngr.exe
  • MADARA.exe
  • main
  • Main.exe
  • Metin2Client
  • metin2_patcher
  • MicrosoftApi.exe
  • MiniTool.AutoTaskService.dll
  • MiProAddInColorPicker.resources.dll
  • MiProAddInFontPicker.dll
  • miranda32
  • Mobile.exe

以上未顯示103個附加項目。

Legal Copyright
  • (C) 1987-2024 Hocus Pocus Software Ltda.
  • (C) 1987-2025 Hocus Pocus Software Ltda.
  • (c) 1999, 2000 Ken Baker and Webcrafters Technology Consulting
  • (C) 2005 Martin J. Fiedler
  • (c) 2005-2023 Unity Technologies. All rights reserved.
  • (c) 2005-2024 Unity Technologies. All rights reserved.
  • (c) 2005-2025 Unity Technologies. All rights reserved.
  • (c) 2005-2026 Unity Technologies. All rights reserved.
  • (c) 2006, 2007 M. McClanahan
  • (c) EZB Systems, Inc.
顯示更多
  • (c) FreeMan. All rights reserved.
  • (c) MAGIX Software GmbH. All rights reserved.
  • (C) Malwarebytes. All rights reserved.
  • (c)Nikzzzz
  • (c) Puran Software. All rights reserved.
  • (C) Qihoo 360 Technology Co. Ltd., All rights reserved.
  • (c) Screenshoter
  • (c) Software Assistant
  • (С) ЗАО НВП Болид 2016г
  • 30mySFfu辅助
  • 87A 9SDV7AS89D7 VS890V7 S89V7S8V90 7SDV8D09A7V D8A90V7D9VA
  • 2002
  • 2005-2014 copyright JWTS
  • 2012-2015@ nis set
  • ? 1996 - 2021 Daniel Stenberg, <daniel@haxx.se>.
  • Administrator
  • All rights reserved
  • All rights reserved
  • Autoriõigus © Microsoft Corporation. Kõik õigused on reserveeritud.
  • Autorska prava © Microsoft Corporation. Sva prava pridržana.
  • Autorska prava © Microsoft Corporation. Sva prava zadržana.
  • Autortiesības © Microsoft Corporation. Visas tiesības paturētas.
  • Bản quyền © Microsoft Corporation. Bảo lưu mọi quyền.
  • CoolPDF Software, Inc.
  • Copyright &copy; 2014-2015 Oasgames,Inc
  • Copyright (C) 1998
  • Copyright (C) 1999-2000 Y.Shirakawa
  • Copyright (C) 2004
  • Copyright (C) 2004 - 2021
  • Copyright (C) 2004 CnCLab
  • Copyright (C) 2004 Macrovision Corporation
  • Copyright (C) 2004-2006
  • Copyright (C) 2006-2024
  • Copyright (C) 2009
  • Copyright (C) 2010
  • Copyright (C) 2011
  • Copyright (C) 2012
  • Copyright (C) 2013
  • Copyright (C) 2014
  • Copyright (C) 2015
  • Copyright (C) 2015 GitHub, Inc. All rights reserved.
  • Copyright (C) 2015 NCsoft Corporation. All Rights Reserved
  • Copyright (c) 2020 Flexera. All Rights Reserved.
  • Copyright (C) 2021
  • Copyright (c) 2022 Arua
  • Copyright (C) 2023
  • Copyright (c) 2026 Duck Martians AI Labs
  • Copyright (C) CipSoft GmbH 2002-2009
  • Copyright (c) DTS Inc. All rights reserved.
  • Copyright (C) FineShare Inc. All rights reserved
  • Copyright (C) Gemoo Inc. All rights reserved
  • COPYRIGHT(C) HANCOM SECURE Inc. ALL RIGHTS RESERVED.
  • Copyright (C) HFM2
  • Copyright (C) iMobie Inc. All rights reserved
  • Copyright (c) Microsoft Corporation. All rights reserved.
  • Copyright (c) Smart-Clip team,2004-2006
  • Copyright (C) The Qt Company Ltd. and other contributors.
  • Copyright (C) TourBox Tech Inc.
  • Copyright 2014
  • Copyright 2016-2025. EnigmaSoft Limited. All rights reserved.
  • Copyright 2016-2026. EnigmaSoft Limited. All rights reserved.
  • Copyright 2022
  • Copyright 2024
  • Copyright 2025
  • Copyright 2026 Gstarsoft Co.,Ltd. All rights reserved.
  • Copyright by Abelssoft
  • Copyright c 1998
  • Copyright dotSetup.io Open Source Project
  • Copyright Epic Games, Inc. All Rights Reserved.
  • Copyright ReefHence BambooHence SoftSetupProgram 1991-2003
  • Copyright © 1985-2002 Macromedia, Inc.
  • Copyright © 1992-2022
  • Copyright © 1994-2011
  • Copyright © 1996-2000 Macromedia, Inc.
  • Copyright © 1997, 2010 WinInizio Software
  • Copyright © 1997-2025 Jordan Russell. Portions Copyright © 2000-2025 Martijn Laan.
  • Copyright © 1999
  • Copyright © 1999 by Guillaume Di Giusto. All Rights Reserved.
  • Copyright © 2000-2007 Miranda IM Project. This software is released under the terms of the GNU General Public License.
  • Copyright © 2000-2008 Miranda IM Project. This software is released under the terms of the GNU General Public License.
  • Copyright © 2000-2010 Miranda IM Project. This software is released under the terms of the GNU General Public License.
  • Copyright © 2000-2017 Miranda IM Project. This software is licensed under the terms of the GNU General Public License.
  • Copyright © 2001
  • Copyright © 2007-2021 UltFone Co.,Ltd.
  • Copyright © 2008 Murray - Collier. All rights reserved.
  • Copyright © 2009-2025 Wargaming.net
  • Copyright © 2009-2026 Wargaming.net
  • Copyright © 2014
  • CopyRight © 2014-2015
  • Copyright © 2015

以上未顯示174個附加項目。

Legal Trademarks
  • $
  • All trademarks are property of their respective owners. calculating transform is a trademark of Murray - Collier.
  • AnyTime is a trademark of Individual Software Inc.
  • AutoUpdate Pro
  • BeFactor
  • Director® is a registered trademark and Shockwave(tm) is a trademark of Macromedia, Inc.
  • FineShare Inc. All rights reserved
  • Flash
  • Gemoo Inc. All rights reserved
  • Gerz
顯示更多
  • GuysHence JuvenileHence SoftSetup
  • iMobie Inc. All rights reserved
  • KaOs Krew
  • KaOs Krew 2022
  • lkå®Ð
  • NO LIMIT TECHNOLOGY (CYPRUS) LTD
  • PandoraMT2
  • PDF2EXE
  • QuickShare
  • Registered trademarks and service marks are the property of their respective owners
  • security@work
  • SmartCity™
  • SYAUDFPAYDF9 SADUF908AD7 FS8907FS8 9D9F789SA7DF90 A7SD89F7A
  • The AusIMM
  • This product is licensed under GNU v3.0
  • Tibia is a registered Trademark of CipSoft GmbH.
  • TourBox Tech Inc.
  • utC4bMdLol
License https://curl.se/docs/copyright.html
Original File Name
  • Screenshoter.exe
  • Setup.exe
Original Filename
  • AccServer.exe
  • AdStRkJ_sound.exe
  • Age.of.Origins.exe
  • Ai_Assistant.exe
  • Alpha Cheat.exe
  • AnySign4PC.exe
  • AnyTrans-Setup
  • AnyUnlock - iPhone Password Unlocker-setup.exe
  • AotForms.dll
  • ASrj.exe
顯示更多
  • asx.exe
  • ATW.EXE
  • AutoClick JuaniPiola.exe
  • AutoUpdate.exe
  • AutoUpdater.exe
  • awrdpr.exe
  • Baixaki.exe
  • BaterAMP.exe
  • BDPCapturadorHost.exe
  • befactor.exe
  • belka-dominika_zacieniowane.exe.tmp
  • BetterFPS.dll
  • Blake3 Hasher.exe
  • blazer_installer.exe
  • brain.exe
  • bt_new.exe
  • CABSFX
  • calculatingtransform_service.exe
  • CardMagic.exe
  • Catwalk Countdown
  • Cheatbox++.dll
  • chop.EXE
  • CLARA.exe
  • CleanTemp.exe
  • Client.dll
  • CNC12PLCDiagnosticScreen.exe
  • ConfiguradorSistemas.exe
  • ConsoleApplication14.exe
  • Controle de Qualidade.exe
  • CorrisAssists.dll
  • Crack.exe
  • CrashLogMailer.exe
  • CryptoObfuscatorBodyDecryptor.exe
  • CS2.exe
  • DashPanelServer.exe
  • Decryptor.exe
  • download.exe
  • DownloaderApp.exe
  • download_sem_lm.exe
  • DTSAudioService.exe
  • dv_kernl.dll
  • ebridge.EXE
  • EO.Extensions.dll
  • ET.exe
  • EXPL0RER.exe
  • eZKX.exe
  • FAN_TOOL_V1.0.exe
  • FileProtection.exe
  • filezilla.exe
  • FileZilla_3.69.1_win32-setup.exe
  • FONA Art. Plus.EXE
  • FontBackup.EXE
  • Font Manager.exe
  • FutureXGame.exe
  • GCHE11.exe
  • Gerz Clock.scr
  • Gracco Atualização.exe
  • grandchase.exe
  • Guncelleme70.exe
  • Hasher.exe
  • HFM2.exe
  • HIGHPLAN.exe
  • hIvhhxJHe8USP
  • IAPTool.exe
  • ig.exe
  • ignitex.exe
  • ILBR.exe
  • Install.exe
  • Installer.exe
  • JazzHallow.exe
  • JffD.exe
  • KeyBrute.exe
  • KG-S65G Program.exe
  • Krata Mateusz.exe.tmp
  • Launcher.exe
  • LaunchRes.rc
  • lcd-setter.exe
  • Lesson01.exe
  • libcurl.dll
  • LicenceMngr.exe
  • MADARA.exe
  • Main.exe
  • main.exe
  • Metin2Client.exe
  • metin2_patcher.exe
  • MicrosoftApi.exe
  • MiniTool.AutoTaskService.dll
  • MiProAddInColorPicker.resources.dll
  • MiProAddInFontPicker.dll
  • miranda32.exe

以上未顯示111個附加項目。

Private Build
  • 02e41ec
  • 0330f92
  • “周公解梦”软件作者朱江保留“周公解梦”软件的所有版权信息！ E-mail:ceo@coolboo.comTel:(+86)13075947257
Product Name
  • ${PROGRAM_DISPLAY_NAME}
  • .
  • 1
  • 8A087V89A7SVD87ASD89V7ASD87 8AS7DV097SAD8V7DV0S7VD0 8AS7D0V87A8S0V7
  • 30mySFfu辅助
  • 473
  • 2021-11-11 12:47:06
  • AC3Filter
  • Accent WORD Password Recovery
  • AdStRkJ
顯示更多
  • Age of Origins
  • AI Vocal Rapper
  • Ai_Assistant
  • Alpha Cheat
  • Alt Down Solo
  • Alternate File Browser
  • AnySign4PC
  • AnyTime Organizer
  • AnyTrans
  • AnyUnlock - iPhone Password Unlocker
  • AotForms
  • Api
  • Apple Music Converter
  • AppTrans
  • Archive Convert
  • Archive Extract
  • Archive Password Recovery
  • ArchiVid
  • Around
  • Asistent de instalare Windows
  • Asistente para la instalación de Windows
  • Asistent inštalácie Windowsu
  • Assistant d’installation de Windows
  • Assistente de Instalação do Windows
  • Assistente per l'installazione di Windows
  • Assistente de Instalação do Windows
  • asx
  • Asystent instalacji systemu Windows
  • ATA SMART Diagnostics
  • AudioBook
  • Audio Book Console
  • Audio Book Conversion
  • Audio Capture Monitor
  • Audio CD Grabber
  • Audio Director
  • Audio Editor Assistant
  • Audio File Converter
  • Audio Library
  • Audio Master Pad
  • Audio Recorder Lite
  • Audio Record Lib
  • Audio Tag Editor
  • AutoClick JuaniPiola
  • AutoUpdater.Properties
  • Avast Antivirus Free
  • Avast Patch
  • AVI Codec
  • Backup and Recovery
  • Backup Assistance
  • Backup Driver
  • Backup Master
  • Barrymore Player
  • BaterAMP
  • BDrivelib
  • BeFactor
  • Beknights Recommittal Bashings
  • Berry Player
  • BetterFPS
  • Blake3 Hasher
  • Blazer Browser Installer
  • BLE Bridge
  • BluRay2MKV
  • Bone Collector
  • BP Media Player
  • Brain Train to Go!
  • Browser Backup
  • Brute Force Key Generator
  • BumTuner
  • CABSFX
  • calculating transform
  • Capturador Host
  • CardMagic
  • CataLib
  • Catwalk Countdown
  • CD Play Station
  • CD Studio
  • CDS Viewer
  • Character Control - Planescape: Torment
  • Chase (Sem Nome)
  • cheat-launcher
  • CheatboxPlusPlus
  • Cheat Happens Trainer
  • CheckDrive
  • Check Flash
  • Check Flash Tool
  • chop Application
  • CLARA
  • Cleaner Spare
  • Clean Manager Pro
  • CleanTemp

以上未顯示541個附加項目。

Product Version
  • v23.0.1.19
  • 6000.3.12f1 (fca03ac9b0d5)
  • 6000.1.16f1 (67bef3276ff1)
  • 6000.0.62f1 (f99f05b3e950)
  • 2022.3.62f2 (7670c08855a9)
  • 2022.3.58f1 (ed7f6eacb62e)
  • 2022.3.13f1c1 (d214d547af8b)
  • 2021.3.40f1 (6fcab7dbbbc1)
  • 2021.3.31f1 (3409e2af086f)
  • 2015.8.13.1
顯示更多
  • 192.168.0001
  • 125.11.6.0
  • 65.23.85
  • 28.0.4.0
  • 26.5.0.18164
  • 26.1.4.8724
  • 26.1.0.0
  • 26.03.01.2960
  • 26.02.02.2570
  • 26.0.25.0
  • 26.0
  • 25.06.00.0709
  • 25.01.00.8902
  • 24.3.8975.0
  • 24.08.02.8277
  • 22.0.0.0
  • 22
  • 21.20.8.505
  • 19, 0, 0, 1
  • 17.12.1002
  • 16.11.34407.143
  • 16.0.28315.86
  • 16, 1, 4, 133
  • 14, 2, 0, 0
  • 13.0.0.0
  • 12.0.40664.0
  • 12, 0, 0, 1
  • 11.00.26100.1
  • 11.00.22621.1
  • 10.50
  • 10.4.17
  • 10.2H
  • 10.017
  • 10.0D
  • 10.0.27840.1000
  • 10.0.19041.1 (WinBuild.160102.0800)
  • 9.89
  • 9.80
  • 9.41
  • 9.7.6.3860
  • 9.4.6-enterprise
  • 9.4.0.129
  • 9.2.0.1010
  • 9.0G
  • 8.54
  • 8.40
  • 8.8.5.1
  • 8.8.4.3
  • 8.0.5.1
  • 8.0.0
  • 7.79.1-DEV
  • 7.21.7.117
  • 7.0.1.99
  • 7.0.0.2
  • 7.0.0.1
  • 6.303.5.3182
  • 6.36.5.2
  • 6.9.2.0
  • 6.8.24.9
  • 6.8
  • 6.6.1
  • 6.3.7.1
  • 6.3.6.0
  • 6.3
  • 6.2.22621.1
  • 6.1.1.1
  • 6.0.242
  • 6.0
  • 5.37
  • 5.21.2117
  • 5.11.0.2
  • 5.8
  • 5.7.2.3841
  • 5.7
  • 5.6.0.0
  • 5.4.4
  • 5.4.2.1893
  • 5.2
  • 5.1.1.7
  • 5.1
  • 5.00
  • 5.0.8
  • 5.0.8
  • 5, 4, 3, 0
  • 5,0,30,0
  • 4.18.27050.2
  • 4.3.0.0
  • 4.2.0.4
  • 4.1.2.3
  • 4.0.3.0

以上未顯示159個附加項目。

Program I D com.embarcadero.HS_Svc
Special Build 101905
Squirrel Aware Version 1
Translation Marie-Christine Hirtz
Web
  • http://ourworld.compuserve.com/homepages/gdgpage
  • http://www.gdgsoft.com
Website https://nolimitdronez.com; https://flysafe-unlock.com

數位簽名

簽署者 根 地位
1C-Buhgalteriya 1C-Buhgalteriya Hash Mismatch
AUTO-M3 Kft. AUTO-M3 Kft. Self Signed
Ado- es Penzugyi Ellenorzesi Hivatal Ado- es Penzugyi Ellenorzesi Hivatal Self Signed
C2RService C2RService Hash Mismatch
JWTS COMODO RSA Code Signing CA Self Signed
顯示更多
iMobie Inc. COMODO RSA Extended Validation Code Signing CA Self Signed
Open Source Developer, Midia Technologies Certum CA Root Not Trusted
Open Source Developer, Dominik Reichl Certum Code Signing 2021 CA Hash Mismatch
Crimson-Pond Crimson-Pond Self Signed
Hancom Secure Inc. DigiCert EV Code Signing CA (SHA2) Hash Mismatch
DTS, Inc. DigiCert High Assurance Code Signing CA-1 Hash Mismatch
Doctor Web Ltd. DigiCert SHA2 Assured ID Code Signing CA Hash Mismatch
Exodus Movement Inc DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 Hash Mismatch
Spotify AB DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 Hash Mismatch
Tenorshare Co., Ltd. DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 Self Signed
FineShare Co., Ltd. DigiCert Trusted Root G4 Root Not Trusted
Meixiang Technology (chengdu) Co., Ltd DigiCert Trusted Root G4 Root Not Trusted
MiniTool Software Limited DigiCert Trusted Root G4 Root Not Trusted
Notepad++ DigiCert Trusted Root G4 Hash Mismatch
Sage South Africa (Pty) Ltd DigiCert Trusted Root G4 Root Not Trusted
Tenorshare Co., Ltd. DigiCert Trusted Root G4 Root Not Trusted
ZWSOFT CO., LTD.(Guangzhou) DigiCert Trusted Root G4 Hash Mismatch
Digital Certificate Digital Certificate Self Signed
SWMarkt24 GmbH Entrust Extended Validation Code Signing CA - EVCS2 Self Signed
FACEIT AC FACEIT AC Self Signed
FileZilla FileZilla Self Signed
FileZilla FTP Client FileZilla FTP Client Self Signed
Free Free Self Signed
Gemoo Inc GlobalSign Root Not Trusted
IP Blinov Alexey Mikhailovich GlobalSign Root Not Trusted
AO Kaspersky Lab GlobalSign Code Signing Root R45 Hash Mismatch
CRYSTAL RICH LTD. GlobalSign Code Signing Root R45 Hash Mismatch
EasyAntiCheat Oy GlobalSign Code Signing Root R45 Hash Mismatch
iMobie Inc. GlobalSign GCC R45 EV CodeSigning CA 2020 Self Signed
Datpol Janusz Siemienowicz GlobalSign Root CA Hash Mismatch
HONG KONG KE MO SOFTWARE CO., LIMITED HONG KONG KE MO SOFTWARE CO., LIMITED Self Signed
Little-Voice Little-Voice Self Signed
MADARA MADARA Self Signed
Microsoft Corporation Microsoft Code Signing PCA 2011 Hash Mismatch
Microsoft VcRedist Microsoft VcRedist Self Signed
Microsoft Corporation Microsoft Windows Code Signing PCA 2024 Hash Mismatch
NotepadFree NotepadFree Self Signed
No Zebra Network SA SSL.com Code Signing Enterprise Intermediate CA RSA R1 Hash Mismatch
Essential Objects, Inc. SSL.com Code Signing Intermediate CA ECC R2 Self Signed
Max Biotech Limited SSL.com Code Signing Intermediate CA RSA R1 Self Signed
BlazerBrowser.com LLC SSL.com EV Code Signing Intermediate CA RSA R3 Self Signed
ZOOG SERVICES SINGLE MEMBER PRIVATE COMPANY SSL.com EV Root Certification Authority RSA R2 Root Not Trusted
NO ZEBRA NETWORK SA SSL.com Root Certification Authority RSA Hash Mismatch
EYMON LLC Sectigo Public Code Signing Root E46 Root Not Trusted
NCSOFT Corporation Sectigo Public Code Signing Root R46 Hash Mismatch
NO LIMIT TECHNOLOGY (CYPRUS) LTD Sectigo Public Code Signing Root R46 Root Not Trusted
Teamport Inc. Sectigo Public Code Signing Root R46 Root Not Trusted
ShadowWhisperer ShadowWhisperer Self Signed
Sony Sony Self Signed
Easeware Technology Limited Symantec Class 3 SHA256 Code Signing CA Hash Mismatch
KOSCOM CORP. Symantec Class 3 SHA256 Code Signing CA Hash Mismatch
TAH-Club TAH-Club Self Signed
Dev Net Thawte Code Signing CA - G2 Self Signed
Advanced Micro Devices Inc. USERTrust RSA Certification Authority Hash Mismatch
Teamport Inc. USERTrust RSA Certification Authority Root Not Trusted
JWTS UTN-USERFirst-Object Root Not Trusted
VcRedist VcRedist Self Signed
Software Assistant VeriSign Class 3 Public Primary Certification Authority - G5 Root Not Trusted
Vichingo455 Software Developer Vichingo455 Software Developer Self Signed
Vidello Limited Vidello Limited Self Signed
WEST COMPANY WEST COMPANY Self Signed
YCL Solutions YCL Solutions Self Signed
Zilla Company Zilla Company Self Signed
ab0532a0cd344ae198e7b6f6ca067dd2 ab0532a0cd344ae198e7b6f6ca067dd2 Self Signed
qeFKxTXoIAGpcYrJB5QDFm2ctYr97cEkTx0X3WQicz3UJWAqtlbiWZZKRKoK qeFKxTXoIAGpcYrJB5QDFm2ctYr97cEkTx0X3WQicz3UJWAqtlbiWZZKRKoK Self Signed
BOLID ZAO NVP thawte Primary Root CA Root Not Trusted
DS NET CORP SA DE CV thawte SHA256 Code Signing CA Hash Mismatch
tycsports.com tycsports.com Self Signed
vcRedist vcRedist Self Signed
vcredist vcredist Self Signed

文件特徵

  • $Id: UPX
  • .adata
  • .arch
  • .aspack
  • .NET
  • .petite
  • .sdata
  • .UPX
  • .vmp0
  • 00 section
顯示更多
  • 2+ executable sections
  • 7-zip (In Overlay)
  • 7-zip Installer
  • 7zSFX
  • adata with ImpREC
  • Agile.net
  • AMS
  • AutoHK
  • Autoit
  • Badsig nsis
  • big overlay
  • CAB SFX
  • Confuser
  • CreateThread
  • CryptUnprotectData
  • Default Version Info
  • dll
  • Enigma
  • Fody
  • fptable
  • GenKrypt
  • GetConsoleWindow
  • golang
  • HighEntropy
  • imgui
  • Inno
  • InnoSetup Installer
  • Installer Manifest
  • Installer Version
  • MZ (In Overlay)
  • Neolite
  • NewLateBinding
  • nosig nsis
  • No Version Info
  • ntdll
  • Nullsoft Installer
  • packed
  • PEC2
  • PECompact v2.20
  • Py-installer
  • RAR (In Overlay)
  • RARinO
  • Reactor
  • RijndaelManaged
  • Run
  • SIM
  • SUF
  • SusSec
  • themida
  • themida section variant
  • upx
  • UPX!
  • UPX x64
  • vb6
  • VirtualAllocExNuma
  • VirtualQueryEx
  • vmp with ShellExecuteA, no signature
  • vmp with VirtualProtect, no signature
  • Wextract
  • WinRAR SFX
  • WinZip SFX
  • WRARSFX
  • WriteProcessMemory
  • x64
  • x86
  • ZIP (In Overlay)
  • ZIPinO
  • zlib (In Overlay)
  • zlib overlay
  • ZwQueryInformationProcess

區塊資訊

總區塊數： 2
潛在惡意塊： 0
白名單區塊： 1
未知區塊： 1

視覺化地圖

0 ?
0 - 可能的安保塊
? - 未知塊
x - 潛在惡意區塊

相似家庭

  • 4Shared.B
  • AdGazelle.A
  • AdjProg.A
  • Agent.AITA
  • Agent.AIZA
顯示更多
  • Agent.AN
  • Agent.ANH
  • Agent.BKJ
  • Agent.DSFA
  • Agent.DSFB
  • Agent.DSFC
  • Agent.EDA
  • Agent.FDD
  • Agent.FDJ
  • Agent.FRE
  • Agent.GAE
  • Agent.GDFK
  • Agent.IOG
  • Agent.IOW
  • Agent.JCG
  • Agent.KD
  • Agent.KOEB
  • Agent.KTDA
  • Agent.LA
  • Agent.LPQ
  • Agent.M
  • Agent.TJR
  • Agent.XDE
  • Agent.XYB
  • Agent.ZFX
  • Alman.C
  • Autoit
  • Autorun.X
  • Babar.AE
  • BadIIS.X
  • BadJoke.FH
  • BadJoke.XA
  • Bancteian.B
  • Banker.AN
  • Banker.E
  • Banker.FD
  • Banker.GT
  • Banker.TH
  • Banload.Q
  • Banload.XQ
  • Banload.XT
  • Barys.M
  • Barys.O
  • BestaFera.G
  • Bestafera.A
  • BitWall.A
  • Bitcoinminer.FD
  • Brute.LBA
  • Brute.LBE
  • BypassUAC.FB
  • Caosoft.A
  • Chapak.HBX
  • ClipBanker.J
  • ClipBanker.JG
  • Clipbanker.DI
  • CobaltStrike.GI
  • CobaltStrike.GIA
  • CobaltStrike.SW
  • Coiner.B
  • Coinminer.GLA
  • Coins.E
  • Crack.BU
  • Crack.K
  • Delf.DA
  • Delf.Q
  • Delf.XB
  • DialupPass.A
  • Dinwod.E
  • DotSetupIo.A
  • Downloader.AA
  • Downloader.Agent.BAB
  • Downloader.Agent.BTF
  • Downloader.Agent.BXE
  • Downloader.Agent.TJ
  • Downloader.FSB
  • Downloader.I
  • Dropper.Delf.C
  • Dropper.Delf.CD
  • Dropper.Delf.CF
  • Dropper.ML
  • FSG.Gen
  • FakeAV.AU
  • Farfli.DC
  • GameHack.SD
  • Gamehack.CAC
  • Gamehack.CAD
  • Gamehack.GACI
  • Gamehack.GAGD
  • Gamehack.GDCD
  • Gamehack.ODB
  • Gamehack.PSJ
  • Gamehack.SGA
  • HEUR.Malware.Win32.Posin
  • HWIDChanger.B
  • HackKMS.GL

以上未顯示其他195個家庭。

文件已修改

文件 屬性
\device\harddisk0\dr0 Generic Read,Generic Execute,Write Data,Write Attributes,Write extended,Append data,Delete,LEFT 786496
\device\harddisk0\dr0 Generic Read,Write Data,Write Attributes,Write extended,Append data
\device\namedpipe Generic Read,Write Attributes
\device\namedpipe Generic Write,Read Attributes
\device\namedpipe\dav rpc service Generic Read,Write Data,Write Attributes,Write extended,Append data
\device\namedpipe\gmdasllogger Generic Write,Read Attributes
\device\namedpipe\pshost.134031941067220042.1664.defaultappdomain.powershell Generic Read,Write Data,Write Attributes,Write extended,Append data,LEFT 524288
\device\namedpipe\pshost.134239084589470051.9764.defaultappdomain.powershell Generic Read,Write Data,Write Attributes,Write extended,Append data,LEFT 524288
\device\namedpipe\pshost.134257440106095987.8700.defaultappdomain.powershell Generic Read,Write Data,Write Attributes,Write extended,Append data,LEFT 524288
\device\namedpipe\srvsvc Generic Read,Write Data,Write Attributes,Write extended,Append data
顯示更多
\device\namedpipe\wkssvc Generic Read,Write Data,Write Attributes,Write extended,Append data
c: Read Attributes,Synchronize,Write Attributes
c:\f3db.tmp\make_shortcut.bat Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\program files (x86)\acpbyte\acpbyte utilities 3\acebyte utilities.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\acpbyte utilities.exe Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\config.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\config.dll.cfg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\defragmentmanager.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\diskcleaner.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\embed.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\filemanager.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\360-care.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\computer-control.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\css\help.css Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\css\is-s8hb1.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\file-manager.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\area-3-buttons.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\area-more-operations.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\area-news.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\bar-deep-scan.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\bar-quick-scan.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-add-file-type.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-bot-left.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-bot-m.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-bot-right.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-computer-control.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-config-turbo-boost.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-context-menu-manager.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-deep-scan.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-disk-check.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-disk-cleaner-file-typle.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-disk-cleaner.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-disk-defragmenter.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-driver-backup.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-empty-folder-finder.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-file-encryption.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-file-manager.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-file-shredder.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-file-splitter.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-main-interface.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-memory-defragment.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-optimize.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-privacy-protection.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-process-manager.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-quick-scan.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-recover-manager.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-registry-cleaner.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-shortcut-cleaner.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-shutdown-scheduler.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-startup-manager.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-system-uninstall.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-top-file-finder.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-top-left.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-top-m.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-top-right.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box-turbo-boost.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\box2-top.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-360care.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-add.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-backward.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-begin-turbo-boost.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-forward.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-more.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-option.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-pricacy-protect.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-quick-launch.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-recover.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-remove.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-scan-drive.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-scan-folder.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-scan-in-privacy-protection.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-scan.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-turbo-boost.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\button-utilities-box.jpg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-07gln.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-0gp8f.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-342f8.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-35s93.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-37m07.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-3aaoi.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-3kkp7.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-467i6.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-4h2u6.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-4r1kq.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-50abi.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-6bt2t.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-6mfp2.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-7ujgl.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-8bl94.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-8h20v.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-93080.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-ar6gp.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-bas32.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-cjbl2.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-dq6rs.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-dqop0.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-e5rak.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-e6bdo.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-ebhrq.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-eca1f.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-edh87.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-f7fji.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-hadlg.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-i599f.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-ig7n7.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-ih5b1.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-jin8m.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-jn4dd.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-jsgkq.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-k7vo0.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-kk529.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-le73v.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-m0j1b.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-mh3qj.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-n6o4m.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-nah0d.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-nmpml.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-oja8c.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-onfe1.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-otd3k.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-phlpj.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-pklm7.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-r6fsj.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-rk1ea.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-rvqfo.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-scaer.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-sthag.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-t015m.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-trq6u.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-u8ieg.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-ulrkp.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-v34oc.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\images\is-vcemb.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\index.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-1hie1.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-29rga.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-c2oef.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-kk79d.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-q4cle.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-u3bi0.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-uju7e.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\is-uro4m.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\pc-optimization.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\pc-repair.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\privacy-protect.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\helps\turbo-boost.html Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-3eges.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-3im2f.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-54p7c.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-84d1k.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-98mur.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-ajmt7.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-atvij.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-bkh5r.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-ccpdr.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-d6rbm.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-g704e.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-h61r1.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-i8i7v.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-j2nfo.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-j7lgj.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-jg03t.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-l9634.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-m577r.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-nmq0f.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-qb34q.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-qcb84.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-qn55n.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-scnvb.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-t15bf.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-umgp3.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-v18m3.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\is-vsd8o.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\mlutil.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\mlutil.dll.cfg Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\netreg.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\privacyclean.dat Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\privacyclear.dll Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\privacysetting.xml Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\activate_btn.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\activate_btn_hover.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\is-2f6os.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\is-3klct.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\is-pfss8.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\is-t2rlc.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\is-tves8.tmp Generic Write,Read Attributes
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\purchase_bg.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\upgrade_btn.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\images\upgrade_btn_hover.png Synchronize,Write Data
c:\program files (x86)\acpbyte\acpbyte utilities 3\purchase\index.html Synchronize,Write Data

以上未顯示22750個附加文件。

註冊表修改

鍵::值 数据 API名稱
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::proxybypass  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::intranetname  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::uncasintranet  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::autodetect RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::proxybypass  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::intranetname  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::uncasintranet  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\zonemap::autodetect RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe <상Ǜ RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Cfwicwxr\AppData\Local\Temp\~nsuA.tmp\Un_A.exe RegNtPreCreateKey
顯示更多
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Cfwicwxr\AppData\Local\Temp\~nsuA.tmp\Un_A.exe\??\C:\Users\Cfwicwxr\AppData\Local\Temp\~nsuA.tmp RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 빼俀Ǜ RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Cfwicwxr\AppData\Local\Temp\nsk7A3C.tmp\ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 蕟Ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 T�? xy;kP~�ރ;���z��^;۴��}�� Vs}�kP~H�)����1������d<B xF e;��1���h�n�};e��;e�� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 CL�r�l��*����8��B +� �� �6 �} �� �� 7� xy �� �� ۀ>�=�������B�O�����x�%���8�5����Bx��� ���\�!IN�sb �!>!wz#@�#�O$kF$��$¨%:�%f�%�' RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 脂ﰁǛ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 ]� xykP~�ރ������^۴�}��Vs}kP~�)���1N�����dB  F e�s��1C��h�n�}e��e�� RegNtPreCreateKey
HKU\.DEFAULT\software\microsoft\windows\currentversion\themes\personalize::appsuselighttheme RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::enablefiletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::enableautofiletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::enableconsoletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::filetracingmask ￿ RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::consoletracingmask ￿ RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::maxfilesize  RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasapi32::filedirectory %windir%\tracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::enablefiletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::enableautofiletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::enableconsoletracing RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::filetracingmask ￿ RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::consoletracingmask ￿ RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::maxfilesize  RegNtPreCreateKey
HKLM\software\microsoft\tracing\rasmancs::filedirectory %windir%\tracing RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe 㮯㩎Ǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 髕㩐Ǜ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\run::qnihir.exe C:\Users\Jojoblbs\AppData\Local\Temp\GEIHIMNOYLP\QNIHIR.exe RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe å⴬Ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 ȁx龡^紘Ç獖}좟Ê RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 兿ĸ鈉øꌉĶꄍ阎Ľ鬎ʂԏÞ䈑Âø밓Ɣ똕ĥ츕ë䈛x䤝Ē猟ɢ䀣ʲ갤Ç숤ʨ春ʐ븥ė椧ĒꄨěสĹ뜪Ģ윪Þ㴬䠱Oⰵɝ혺ɲ츻Ĵ噀ñ끀Ī덂®䡆¶賂¦홌ʅ቎ĤÁꝒª穔R띔Ü录Ī፡Ĥ陣w걣ʛづŔ퍥h坧ʡ㹭ŃŁ詰ʜ䁱£㱲湲Jꍵ~ꭵĊ뱶ġ᝹ʁ鱹9 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::inno setup: setup version 5.5.1 (a) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::inno setup: app path C:\Users\Slwmnhjx\AppData\Local\Folder Time Update 5.0.1.72 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::installlocation C:\Users\Slwmnhjx\AppData\Local\Folder Time Update 5.0.1.72\ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::inno setup: icon group (Default) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::inno setup: user Slwmnhjx RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::inno setup: language English RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::displayname Folder Time Update 5.0.1.72 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::uninstallstring "C:\Users\Slwmnhjx\AppData\Local\Folder Time Update 5.0.1.72\uninstall\unins000.exe" RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::quietuninstallstring "C:\Users\Slwmnhjx\AppData\Local\Folder Time Update 5.0.1.72\uninstall\unins000.exe" /SILENT RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::nomodify  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::norepair  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::installdate % RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\folder time update_is1::estimatedsize ⡈ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 沪돴Ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 }�? xyRkP~�ރR����!��^R۴��}�L Vs}UkP~n�)�U��1 ������dRB �F e�;��1���h�n�}Re��Re�� RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 㥬ᓁǛ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 �H xyLkP~�ރL���%#��^L۴��}�� Vs}HkP~H��10������dLB �F e����1���h�n�}Le��Le�� RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Apcmynlf\AppData\Local\Temp\~nsu.tmp\Au_.exe RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Apcmynlf\AppData\Local\Temp\~nsu.tmp\Au_.exe\??\C:\Users\Apcmynlf\AppData\Local\Temp\~nsu.tmp RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 艉ᱷ羅Ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 �Q xykP~ �ރ���:��^۴�}�Vs}>kP~>��1M�����dB F e<A��1���h �n�}e��e�� RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe ⑞璉Ǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe ⑞璉Ǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe ꍯ豥兀Ǜ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::inno setup: setup version 5.5.7 (a) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::inno setup: app path C:\Users\Kxcxxypb\AppData\Local\DataBase Recovery 1.0.5.29 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::installlocation C:\Users\Kxcxxypb\AppData\Local\DataBase Recovery 1.0.5.29\ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::inno setup: icon group (Default) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::inno setup: user Kxcxxypb RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::inno setup: language English RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::displayname DataBase Recovery 1.0.5.29 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::uninstallstring "C:\Users\Kxcxxypb\AppData\Local\DataBase Recovery 1.0.5.29\uninstall\unins000.exe" RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::quietuninstallstring "C:\Users\Kxcxxypb\AppData\Local\DataBase Recovery 1.0.5.29\uninstall\unins000.exe" /SILENT RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::nomodify  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::norepair  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::installdate %! RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\database recovery_is1::estimatedsize ⸺ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 3�X xykP~ �ރ���m��^۴���z}��Vs};kP~�)�;��1I�����dB F e�9��1���h�n�}e��e�� RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\explorer::slowcontextmenuentries `$�!�:i��+00��� Gs]XM���"�2��FXD�':D��exA-��LG=�A��J� �C� RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\5.0\cache\content::cacheprefix RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\5.0\cache\cookies::cacheprefix Cookie: RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\internet settings\5.0\cache\history::cacheprefix Visited: RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 -T�r�w��*����8\x��B +� �� �6 �} �� �� 7� xy �� �� ۀ>�=�����B�O�����x�%���8�5����Bx��� ���\�!IN�sb �!>!wz#@�#��#�O$kF$��$¨%:�%f�%� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 .T�r�w��*����8\x��B +� �� �6 �} �� �� 7� xy �� �� ۀ>�=�����B�O�����x�%���8�5����Bx��� ���\�!IN�sb �!>!wz#@�#��#�O$kF$��$¨%:�%f�%� RegNtPreCreateKey
HKCU\software\microsoft\edge\blbeacon::failed_count RegNtPreCreateKey
HKCU\software\microsoft\edge\blbeacon::state  RegNtPreCreateKey
HKCU\software\microsoft\edge\thirdparty::statuscodes (NULL) RegNtPreCreateKey
HKCU\software\microsoft\edge\thirdparty::statuscodes  RegNtPreCreateKey
HKCU\software\microsoft\edge\blbeacon::state  RegNtPreCreateKey
HKCU\software\macromedia\shockwave 8\uicontrol\sw3dbaddriverlist1:: *2k*savage/ix!^5.12.01.7012$79x=stbnvidiatnt16mb!=4.10.01.9131$o2k=diamondstealthiiis530!=5.12.01.8007-8.30.24$72k=m!=5.00.2180. RegNtPreCreateKey
HKCU\software\macromedia\shockwave 8\uicontrol\sw3dbaddriverlist2:: *9x*g200!^4.11.01.2519$o9x*g200!=4.12.01.2730$o9x=glintr3.!^4.12.01.2107-0829R$omc=.display_rage128!1.0.1f14/opengl1.1.2$59x=mag RegNtPreCreateKey
HKCU\software\oray\sunlogin\sunloginclient::9.1.0.53088_isfisrstrunseted 1 RegNtPreCreateKey
HKCU\software\oray\sunlogin\sunloginclient::9.1.0.53088_isrunseted 1 RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\customizedapps::  RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\sharedconfig::busypause  RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\sharedconfig::filecache RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\sharedconfig::filecachekb d RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\sharedconfig::rollback RegNtPreCreateKey
HKCU\software\headlight\getrighttogo\sharedconfig::dotgetright RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Ctubcqkc\AppData\Local\Temp\~nsuA.tmp\Un_A.exe RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Ctubcqkc\AppData\Local\Temp\~nsuA.tmp\Un_A.exe\??\C:\Users\Ctubcqkc\AppData\Local\Temp\~nsuA.tmp RegNtPreCreateKey
HKCU\.jcspro:: RegNtPreCreateKey
HKLM\system\controlset001\control\session manager::pendingfilerenameoperations \??\C:\Users\Ctubcqkc\AppData\Local\Temp\~nsuA.tmp\Un_A.exe\??\C:\Users\Ctubcqkc\AppData\Local\Temp\~nsuA.tmp\??\C:\Users\Ct RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe 뜃஄ǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe ꌕ㡱຅ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 �EH xy)kP~ �ރ)���R ��^)۴�8}��Vs}�kP~���1;��8���d)B RF e���1���h �n�})e��)e�� RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\explorer::slowcontextmenuentries `$�!�:i��+00��� Gs]XM���"�2��FX��y g�����O� 6 �LG=�A��J� �C� RegNtPreCreateKey
HKCU\local settings\muicache\17\52c64b7e::@c:\windows\system32\wshext.dll,-4511 Open &with Command Prompt RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\applicationassociationtoasts::vbsfile_.vbs RegNtPreCreateKey
HKCU\local settings\software\microsoft\windows\shell\muicache::c:\windows\system32\wscript.exe.friendlyappname Microsoft ® Windows Based Script Host RegNtPreCreateKey
HKCU\local settings\software\microsoft\windows\shell\muicache::c:\windows\system32\wscript.exe.applicationcompany Microsoft Corporation RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 Q�6 xy kP~�ރ ������^ ۴�}��Vs}4kP~4��1������d B F e0 ��1���h�n�} e�� e�� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 `�r�T��*����8��B +� �� �6 �} �� �� 7� xy �� �� ۀ>�����B�����x�%���8�5����Bx�����\�!IN�sb!>!wz#@�#��#�O$kF$��$¨%:�%f�%�'�'i'�!(�) RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe 䲛འǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 䲛འǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 ~Z�r�T��*����8\x��B +� �� �6 �} �� �� 7� xy �� �� ۀ>�����B�����x�%���8�5����Bx�����\�!IN�sb!>!wz#@�#��$kF$��%:�%f�%�'�'i'�!(�) ;)� RegNtPreCreateKey
HKCU\software\winrar sfx::c%%users%iteusyifc:\users\user\appdata\roaminglocalc:\users\user\appdata\local\temp C:\Users\Iteusyif\AppData\Local\Temp\ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 �V xy�ރVs}%��h�n� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 $\A xy�5��!wz#@�%:�%f�/9�/�F1HO1�D9ߔ>3�@V�J��N$R20V �VN�YS�`�2n�Ap��rnJu�~y�^{�=���P��{�jI�ރ�����7����b:���������6��T��T��a �T��n���*����F��T��m���p�'��IV�gi�t����$�>�[� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 %\C xy�5��!wz#@�%:�%f�/9�/�F1HO1�D9ߔ>3�@V�J��N$N�R20V �VN�YS�`�2n�Ap��rnJu�~y�9y�^{�=���P��{�jI�ރ�����7����b:���������6��T��T��a �T��n���*����F��T��m���p�'��IV�gi�t����$ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\explorer\mountpoints2\##10.200.31.10#amas::_labelfromdesktopini RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe ᙬᗔǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe ����� RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 䯞ᗔǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 뿫ᗔǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 㐷ᗔǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe ॵᗔǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 樄ᗔǜ RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\8094640eb5a7a1ca119c1fddd59f810263a7fbd1::blob 0� �L:3L�ҼƩ�5.3OE��ʶ>۟�܇Խ.���c��H �O�S~0|0 +�200 +�7<�0 +�200 +�7<�0g� 00 +�7<�0g� 00 +�7<� V0T++ +�7   +�7  RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\4efc31460c619ecae59c1bce2c008036d94c84b8::blob �O�Hq ��p��G[0�0��{�5��^�kOxw�� ӹ�)+�j�n�L%.2� hɨ��� < BGlobalSign Code Signing Root R45b {�U>��n��7���67W��K7�/��"��߆S00g� 00 +�7<� RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\4efc31460c619ecae59c1bce2c008036d94c84b8::blob \]���c��6�����N�1F a����,�6�L��  0 +Tg��ލ��0�Q{���F� �x9���C�VP�Ζ;S00g� 00 +�7<�b {�U>��n��7���67W��K7�/��"��߆ B RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\8094640eb5a7a1ca119c1fddd59f810263a7fbd1::blob ˝��I/u�),!�����d������՟�c���~��+h��z 0 + R\�� ���n�mH��l����������gS�0++ b ,��7�l�*�s��=%�)R�SdsIv::��l�i 0G RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\d69b561148f01c77c54578c10926df5b856976ad::blob �߸I�U�-��>�( R)�� oLʉ˜Qw�C'Ѷ���5���U2�"� T0R++ +�7 +++++S@0>0 +�200 +�7<�0g� 00 +�7<� 0 RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\d69b561148f01c77c54578c10926df5b856976ad::blob \�<�8 {e�k�?�ӛ�֛VH�w�Ex� &�[�iv�r��z���<�H��S��K�.E$�MP�c������b ˵"׷�'�j�[��.}Y�cZ|�r �c�; 0GlobalSign Root CA - R3S@0>0 RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\8094640eb5a7a1ca119c1fddd59f810263a7fbd1::blob O���"d9 7B��Ʈ0� �L:3L�ҼƩ�5.3OE��ʶ>۟�܇Խ.���c��H �O�S~0|0 +�200 +�7<�0 +�200 +�7<�0g� 00 +�7<�0g� 00 +�7<� V0T++ RegNtPreCreateKey
HKLM\software\microsoft\systemcertificates\authroot\certificates\8094640eb5a7a1ca119c1fddd59f810263a7fbd1::blob \˝��I/u�),!�����d������՟�c���~��+h��z 0 + R\�� ���n�mH��l����������gS�0++ b ,��7�l�*�s��=%�)R�SdsIv::��l RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 雊뮿ᛲǜ RegNtPreCreateKey
HKLM\software\microsoft\windows\currentversion\policies\system::consentpromptbehavioradmin RegNtPreCreateKey
HKLM\software\microsoft\windows\currentversion\policies\system::enablelua RegNtPreCreateKey
HKLM\software\microsoft\windows\currentversion\policies\system::promptonsecuredesktop RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 p� xykP~�ރ������^۴� }��Vs}kP~��1J�� ���dB  F eho��1A��h�n�}e��e�� RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 獃谷ᦲǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe 忽☚ǜ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\conhost.exe 滩럦♟ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc3475 ���M��^T}�Vs}`��� RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 墪ĸ⬉ʾ鈉øꌉĶꄍ阎Ľ鬎ʂ먎ÍԏÞ阐†䈑Âø밓Ɣ똕ĥ츕ë䈛x䤝Ē猟ɢ䀣ʲ茣ǧ찣ŏ갤Ç숤ʨ春ʐ븥ė椧ĒꄨěสĹ뜪Ģ윪Þ㴬倰ĥ䠱Oⰵɝ혺ɲ츻Ĵ噀ñ끀Ī덂®䡆¶賂¦홌ʅ቎ĤÁ齒ŊꝒª穔R띔Ü录Ī乖ʗ瑜ť፡Ĥ陣w걣ʛづŔ퍥h坧ʡ㹭ŃŁ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::inno setup: setup version 5.5.8 (a) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::inno setup: app path C:\Users\Zjscmgzf\AppData\Local\Multi File Organizer 5.1 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::installlocation C:\Users\Zjscmgzf\AppData\Local\Multi File Organizer 5.1\ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::inno setup: icon group (Default) RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::inno setup: user Zjscmgzf RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::inno setup: language English RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::displayname Multi File Organizer 5.1 RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::uninstallstring "C:\Users\Zjscmgzf\AppData\Local\Multi File Organizer 5.1\uninstall\unins000.exe" RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::quietuninstallstring "C:\Users\Zjscmgzf\AppData\Local\Multi File Organizer 5.1\uninstall\unins000.exe" /SILENT RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::nomodify  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::norepair  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::installdate %  RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\uninstall\multi file organizer_is1::estimatedsize ≂ RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe ὚䝓⠔ǜ RegNtPreCreateKey
HKLM\software\classes\typelib\{b526a8a5-e1b5-49bd-8ca6-d1c00e0c5b06}\1.0:: FileSys Plugin RegNtPreCreateKey
HKLM\software\classes\typelib\{b526a8a5-e1b5-49bd-8ca6-d1c00e0c5b06}\1.0\flags:: 0 RegNtPreCreateKey
HKLM\software\classes\typelib\{b526a8a5-e1b5-49bd-8ca6-d1c00e0c5b06}\1.0\0\win32:: C:\Program Files (x86)\Common Files\SWF Studio\FileSys.dll RegNtPreCreateKey
HKLM\software\classes\typelib\{b526a8a5-e1b5-49bd-8ca6-d1c00e0c5b06}\1.0\helpdir:: C:\Program Files (x86)\Common Files\SWF Studio RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}:: _CPlugin RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\proxystubclsid32:: {00020424-0000-0000-C000-000000000046} RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\typelib:: {B526A8A5-E1B5-49BD-8CA6-D1C00E0C5B06} RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\typelib::version 1.0 RegNtPreCreateKey
HKLM\software\classes\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}:: _CPlugin RegNtPreCreateKey
HKLM\software\classes\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\proxystubclsid32:: {00020424-0000-0000-C000-000000000046} RegNtPreCreateKey
HKLM\software\classes\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\typelib:: {B526A8A5-E1B5-49BD-8CA6-D1C00E0C5B06} RegNtPreCreateKey
HKLM\software\classes\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\typelib::version 1.0 RegNtPreCreateKey
HKLM\software\classes\wow6432node\clsid\{89dbd92a-4845-4d51-b413-cc685de0e499}:: FileSys.CPlugin RegNtPreCreateKey
HKLM\software\classes\wow6432node\clsid\{89dbd92a-4845-4d51-b413-cc685de0e499}\progid:: FileSys.CPlugin RegNtPreCreateKey
HKLM\software\classes\wow6432node\clsid\{89dbd92a-4845-4d51-b413-cc685de0e499}\inprocserver32:: C:\Program Files (x86)\Common Files\SWF Studio\FileSys.dll RegNtPreCreateKey
HKLM\software\classes\wow6432node\clsid\{89dbd92a-4845-4d51-b413-cc685de0e499}\typelib:: {B526A8A5-E1B5-49BD-8CA6-D1C00E0C5B06} RegNtPreCreateKey
HKLM\software\classes\wow6432node\clsid\{89dbd92a-4845-4d51-b413-cc685de0e499}\version:: 1.0 RegNtPreCreateKey
HKLM\software\classes\filesys.cplugin:: FileSys.CPlugin RegNtPreCreateKey
HKLM\software\classes\filesys.cplugin\clsid:: {89DBD92A-4845-4D51-B413-CC685DE0E499} RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}:: CPlugin RegNtPreCreateKey
HKLM\software\classes\wow6432node\interface\{fd72dc67-8b79-46cd-837d-00bff9185136}\proxystubclsid:: {00020424-0000-0000-C000-000000000046} RegNtPreCreateKey
HKCU\system\currentcontrolset\control\mediaproperties\privateproperties\directinput\vid_0627&pid_0001\calibration\0::guid 슠肜隦ᇰƀ䕄呓 RegNtPreCreateKey
HKCU\software\microsoft\directinput\bef4d8793f083486c0d8aa7898346ee2f7f500a8_0001502334538a75fa0016ec7e::name BEF4D8793F083486C0D8AA7898346EE2F7F500A8_0001502334 RegNtPreCreateKey
HKCU\software\microsoft\directinput\bef4d8793f083486c0d8aa7898346ee2f7f500a8_0001502334538a75fa0016ec7e::usesmapper RegNtPreCreateKey
HKCU\software\microsoft\directinput\mostrecentapplication::name BEF4D8793F083486C0D8AA7898346EE2F7F500A8_0001502334 RegNtPreCreateKey
HKCU\software\microsoft\directinput\mostrecentapplication::id BEF4D8793F083486C0D8AA7898346EE2F7F500A8_0001502334538A75FA0016EC7E RegNtPreCreateKey
HKCU\software\microsoft\directinput\mostrecentapplication::version ࠀ RegNtPreCreateKey
HKCU\software\microsoft\directinput\mostrecentapplication::mostrecentstart 䝖⫭ǜ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 哣Ǭ䠱O噀ñ቎ĤÁŁ剰Ǣ鱹9傄ë횎ǜ릣ʝ閾ʴ淃⟋ʪ柏ũߙĤᰂŁ鍂€ꩠŖÉ窵ň忶Ǥ対þ RegNtPreCreateKey
HKLM\software\microsoft\windows nt\currentversion\notifications\data::418a073aa3bc1c75 哤Ǭ䠱O噀ñ቎ĤÁŁ剰Ǣ鱹9傄ë횎ǜ鶝’릣ʝ閾ʴ淃⟋ʪ柏ũߙĤᰂŁ鍂€ꩠŖÉ窵ň忶Ǥ対þ RegNtPreCreateKey
HKLM\software\microsoft\windows\currentversion\runonce::wextract_cleanup0 rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\Hfhluogf\AppData\Local\Temp\IXP000.TMP\" RegNtPreCreateKey
HKLM\system\controlset001\services\bam\state\usersettings\s-1-5-21-3119368278-1123331430-659265220-1001::\device\harddiskvolume2\windows\system32\cmd.exe 境ᮐⵗǜ RegNtPreCreateKey
HKCU\software\microsoft\windows\currentversion\explorer\advanced::hidden  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::antivirusoverride  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::antivirusdisablenotify  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::firewalldisablenotify  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::firewalloverride  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::updatesdisablenotify  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center::uacdisablenotify  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center\svc::antivirusoverride  RegNtPreCreateKey
HKLM\software\wow6432node\microsoft\security center\svc::antivirusdisablenotify  RegNtPreCreateKey

以上未顯示1632其他登錄修改。

Windows API 使用情況

類別 API
Process Shell Execute
  • CreateProcess
  • ShellExecute
  • ShellExecuteEx
  • WinExec
  • WriteConsole
Syscall Use
  • ntdll.dll!NtAcceptConnectPort
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAccessCheckByType
  • ntdll.dll!NtAddAtomEx
  • ntdll.dll!NtAdjustPrivilegesToken
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAllocateLocallyUniqueId
  • ntdll.dll!NtAlpcAcceptConnectPort
  • ntdll.dll!NtAlpcCancelMessage
  • ntdll.dll!NtAlpcConnectPort
顯示更多
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcCreatePort
  • ntdll.dll!NtAlpcCreatePortSection
  • ntdll.dll!NtAlpcCreateResourceReserve
  • ntdll.dll!NtAlpcCreateSectionView
  • ntdll.dll!NtAlpcCreateSecurityContext
  • ntdll.dll!NtAlpcDeletePortSection
  • ntdll.dll!NtAlpcDeleteSectionView
  • ntdll.dll!NtAlpcDeleteSecurityContext
  • ntdll.dll!NtAlpcDisconnectPort
  • ntdll.dll!NtAlpcImpersonateClientOfPort
  • ntdll.dll!NtAlpcOpenSenderProcess
  • ntdll.dll!NtAlpcOpenSenderThread
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcQueryInformationMessage
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtAlpcSetInformation
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtCancelIoFileEx
  • ntdll.dll!NtCancelTimer2
  • ntdll.dll!NtCancelWaitCompletionPacket
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtCompareSigningLevels
  • ntdll.dll!NtCompleteConnectPort
  • ntdll.dll!NtConnectPort
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateKey
  • ntdll.dll!NtCreateMailslotFile
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateNamedPipeFile
  • ntdll.dll!NtCreatePort
  • ntdll.dll!NtCreatePrivateNamespace
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtCreateTimer
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateUserProcess
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDelayExecution
  • ntdll.dll!NtDeleteValueKey
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFindAtom
  • ntdll.dll!NtFlushKey
  • ntdll.dll!NtFlushProcessWriteBuffers
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtFsControlFile
  • ntdll.dll!NtGetCachedSigningLevel
  • ntdll.dll!NtGetCompleteWnfStateSubscription
  • ntdll.dll!NtGetContextThread
  • ntdll.dll!NtGetWriteWatch
  • ntdll.dll!NtImpersonateAnonymousToken
  • ntdll.dll!NtLoadKeyEx
  • ntdll.dll!NtLockFile
  • ntdll.dll!NtLockVirtualMemory
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtNotifyChangeDirectoryFile
  • ntdll.dll!NtNotifyChangeKey
  • ntdll.dll!NtNotifyChangeMultipleKeys
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenMutant
  • ntdll.dll!NtOpenProcess
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenSymbolicLinkObject
  • ntdll.dll!NtOpenThread
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtPowerInformation
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDebugFilterState
  • ntdll.dll!NtQueryDefaultLocale
  • ntdll.dll!NtQueryDirectoryFile
  • ntdll.dll!NtQueryDirectoryFileEx

以上未顯示261個附加項目。

Anti Debug
  • CheckRemoteDebuggerPresent
  • IsDebuggerPresent
  • NtQuerySystemInformation
  • OutputDebugString
User Data Access
  • GetComputerName
  • GetComputerNameEx
  • GetUserDefaultLocaleName
  • GetUserName
  • GetUserNameEx
  • GetUserObjectInformation
  • OpenClipboard
Other Suspicious
  • AdjustTokenPrivileges
  • SetWindowsHookEx
Process Manipulation Evasion
  • NtUnmapViewOfSection
  • ReadProcessMemory
  • VirtualAllocEx
Process Terminate
  • TerminateProcess
Keyboard Access
  • GetAsyncKeyState
  • GetKeyState
Encryption Used
  • BCryptOpenAlgorithmProvider
  • CryptAcquireContext
Network Winsock2
  • WSAConnect
  • WSASend
  • WSASocket
  • WSAStartup
  • WSAttemptAutodialName
Network Winsock
  • accept
  • bind
  • closesocket
  • connect
  • freeaddrinfo
  • getaddrinfo
  • gethostbyname
  • gethostname
  • getpeername
  • getsockname
顯示更多
  • inet_addr
  • recv
  • send
  • sendto
  • setsockopt
  • socket
Network Winhttp
  • WinHttpConnect
  • WinHttpOpen
  • WinHttpOpenRequest
  • WinHttpReceiveResponse
  • WinHttpSendRequest
Network Info Queried
  • GetAdaptersAddresses
  • GetAdaptersInfo
  • GetNetworkParams
Service Control
  • OpenSCManager
  • OpenService
Network Wininet
  • HttpOpenRequest
  • HttpQueryInfo
  • HttpSendRequest
  • InternetConnect
  • InternetOpen
  • InternetOpenUrl
  • InternetQueryOption
  • InternetReadFile
  • InternetReadFileEx
  • InternetSetOption
Network Icmp
  • IcmpCreateFile
  • IcmpSendEcho
  • IcmpSendEcho2Ex

Shell指令執行

(NULL) main.bat /S
WriteConsole:
WriteConsole: C:\Users\Vhzmmaz
WriteConsole: e296a0
WriteConsole: &
顯示更多
WriteConsole: cls
WriteConsole:
WriteConsole: 27e296a027206973206e6f7420726563
C:\WINDOWS\system32\mode.com mode 65,10
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p294583091523215221751987930779 -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_10.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_9.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_8.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
C:\Users\Vhzmmazo\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
WriteConsole: The system canno
C:\WINDOWS\system32\attrib.exe attrib +H "svchost.exe"
WriteConsole: File not found -
C:\WINDOWS\system32\svchost.exe "svchost.exe"
WriteConsole: Launched 'svchos
WriteConsole: Press any key to
"C:\Users\Nytdhxau\AppData\Local\Temp\is-D1R8C.tmp\d993eb4e4c9cdded3e0da8199cf251b1cd47826e_0004175487.tmp" /SL5="$30276,3928446,54272,c:\users\user\downloads\d993eb4e4c9cdded3e0da8199cf251b1cd47826e_0004175487.exe"
"C:\Users\Vrctfzos\AppData\Local\Temp\is-3DFEK.tmp\3c3a77d11d735bb60fcc3351cdee5d02a72728ed_0004306985.tmp" /SL5="$20246,4059919,54272,c:\users\user\downloads\3c3a77d11d735bb60fcc3351cdee5d02a72728ed_0004306985.exe"
"C:\Users\Qxztmgql\AppData\Local\Temp\is-44M91.tmp\173be7c350cd0f90e2dd4feece8ec9138fa1f4d2_0004058040.tmp" /SL5="$60060,3809845,54272,c:\users\user\downloads\173be7c350cd0f90e2dd4feece8ec9138fa1f4d2_0004058040.exe"
"C:\Users\Vabchxuf\AppData\Local\Temp\is-1C1JS.tmp\a9d290ade35fdca75195812e5f3e62fc61b12a4e_0004312539.tmp" /SL5="$E0056,4064350,54272,c:\users\user\downloads\a9d290ade35fdca75195812e5f3e62fc61b12a4e_0004312539.exe"
"C:\Users\Lkyprjml\AppData\Local\Temp\is-NJA4B.tmp\478ba8188ea931fbe099e8e5e1eeaaa5349fd063_0007593500.tmp" /SL5="$20222,7338868,68608,c:\users\user\downloads\478ba8188ea931fbe099e8e5e1eeaaa5349fd063_0007593500.exe"
"C:\Users\Zntbqyrl\AppData\Local\Temp\is-2LMNU.tmp\d41558c432b298b60049ef85a7dccf02c00fad93_0003876982.tmp" /SL5="$30114,3628779,54272,c:\users\user\downloads\d41558c432b298b60049ef85a7dccf02c00fad93_0003876982.exe"
"C:\Users\Udrzxjbf\AppData\Local\Temp\is-041ON.tmp\8357238b601df8939bbbe077674a1fbe34d5be5d_0004494075.tmp" /SL5="$10240,4247030,54272,c:\users\user\downloads\8357238b601df8939bbbe077674a1fbe34d5be5d_0004494075.exe"
"C:\Users\Cfwicwxr\AppData\Local\Temp\~nsuA.tmp\Un_A.exe" _?=c:\users\user\downloads\
taskkill /IM "TourBox Console.exe" /F
"C:\Users\Narcdlcc\AppData\Local\Temp\is-FTQGK.tmp\8488f2921a8117371bbfea105bb4d269338fb3c8_0003612523.tmp" /SL5="$10240,3365523,54272,c:\users\user\downloads\8488f2921a8117371bbfea105bb4d269338fb3c8_0003612523.exe"
(NULL) C:\Users\Eipohvrt\AppData\Local\Temp\RarSFX0\1-Install.bat
WriteConsole: C:\Users\Eipohvr
WriteConsole: powercfg
WriteConsole: /setactive 8c5e
C:\WINDOWS\system32\powercfg.exe powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
WriteConsole: Access is denied
WriteConsole: start
WriteConsole: nvidiaProfileIn
C:\Users\Eipohvrt\AppData\Local\Temp\RarSFX0\nvidiaProfileInspector.exe nvidiaProfileInspector.exe speed.nip
"C:\Users\Okuhqfod\AppData\Local\Temp\is-V653V.tmp\is-SGMHR.tmp" /SL4 $B003E "c:\users\user\downloads\1948c9b310b60f5c5fbe80d805ca7f269f9173c4_0006592389.exe" 6234276 403968
"C:\Users\Itstnnrm\AppData\Local\Temp\is-ML14K.tmp\da5074a7899daea57b5fcf34daaaa4888e2e2930_0005047653.tmp" /SL5="$4021C,4799436,54272,c:\users\user\downloads\da5074a7899daea57b5fcf34daaaa4888e2e2930_0005047653.exe"
(NULL) C:\Users\Kjxwittk\AppData\Local\Temp\Wialwz4.bat
WriteConsole: C:\Users\Kjxwitt
WriteConsole: cd
WriteConsole: /d "C:\Users\Kj
WriteConsole: nircmd
WriteConsole: win min process
C:\Users\Kjxwittk\appdata\local\temp\work\nircmd.exe nircmd win min process "cmd.exe"
WriteConsole: chcp
WriteConsole: 65001
WriteConsole: 1>
WriteConsole: nul
C:\WINDOWS\system32\chcp.com chcp 65001
WriteConsole: Color
WriteConsole: 0f
WriteConsole: set
WriteConsole: "Arch="
WriteConsole: "ArgNsudo="
WriteConsole: "MainFolder1="
WriteConsole: "MainFolder2="
WriteConsole: "ProcList="
WriteConsole: "NumberWin="
WriteConsole: SetLocal
WriteConsole: EnableDelayedEx
WriteConsole: "Arch=x64"
WriteConsole: (
WriteConsole: If
WriteConsole: "x86" == "x86"
WriteConsole: if
WriteConsole: not
WriteConsole: defined PROCESSO
WriteConsole: Arch=x86
WriteConsole: )
WriteConsole: reg
WriteConsole: query "HKU\S-1-
WriteConsole: 2>
WriteConsole: &1
WriteConsole: ||
WriteConsole: elevate "C:\Use
WriteConsole: &&
WriteConsole: exit
C:\WINDOWS\system32\reg.exe reg query "HKU\S-1-5-19"
WriteConsole: defined WT_SESSI
WriteConsole: add "HKCU\Conso
WriteConsole:
WriteConsole: add "HKU\S-1-5-
C:\WINDOWS\system32\reg.exe reg add "HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "AppsUseLightTheme" /t reg_dword /d 0 /f
WriteConsole: /I
WriteConsole: "Kjxwittk" NEQ "
WriteConsole: NSudoLG
WriteConsole: -U:T -P:E -UseC
C:\Users\Kjxwittk\appdata\local\temp\work\nsudolg.exe NSudoLG -U:T -P:E -UseCurrentConsole "C:\Users\Kjxwittk\AppData\Local\Temp\Wialwz4.bat" any_word
"C:\Users\Aqoemsqf\AppData\Local\Temp\is-32PO5.tmp\7b5e72ce6ceb3432fc63aa3ea24efd1450717055_0007866570.tmp" /SL5="$1023E,7599386,54272,c:\users\user\downloads\7b5e72ce6ceb3432fc63aa3ea24efd1450717055_0007866570.exe"
"C:\Users\Okhzzfib\AppData\Local\Temp\is-KOKN4.tmp\a5f6f02c30f4b5502a0879c29a37bee0a38efdb2_0004107663.tmp" /SL5="$30040,3856957,56832,c:\users\user\downloads\a5f6f02c30f4b5502a0879c29a37bee0a38efdb2_0004107663.exe"
C:\Users\Jojoblbs\AppData\Local\Temp\EGOINOHMNGE\MFZRTD.exe
C:\Users\Jojoblbs\AppData\Local\Temp\GEIHIMNOYLP\QNIHIR.exe 5624
"C:\Users\Ujdtdgjo\AppData\Local\Temp\is-04N14.tmp\acd8b9e23552e041ea180d23eb8ce39f2c1296d1_0005076481.tmp" /SL5="$20216,4829398,54272,c:\users\user\downloads\acd8b9e23552e041ea180d23eb8ce39f2c1296d1_0005076481.exe"
"C:\Users\Kfehsaqk\AppData\Local\Temp\is-7P7OD.tmp\598bd36ee0651f76d2f1ad2a26b4b661b9f278f9_0007338513.tmp" /SL5="$3006A,7076765,54272,c:\users\user\downloads\598bd36ee0651f76d2f1ad2a26b4b661b9f278f9_0007338513.exe"
open C:\Users\Gbwholbb\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe __IRAOFF:1740146 "__IRAFN:c:\users\user\downloads\25768458bdc711b967e42c106da6f3c61cda561a_0007476007.exe" "__IRCT:0" "__IRTSS:0" "__IRSID:S-1-5-21-3119368278-1123331430-659265220-1001"
"C:\Users\Erqlqhet\AppData\Local\Temp\is-SCVCO.tmp\42b5c99995a082abe01eb5ca31465ef62c6289c9_0004355459.tmp" /SL5="$2020A,4108435,54272,c:\users\user\downloads\42b5c99995a082abe01eb5ca31465ef62c6289c9_0004355459.exe"
"C:\Users\Scbopfxf\AppData\Local\Temp\is-JNIUA.tmp\cf9a73de423c69739521b80c7d4464a7f9e9680b_0005178905.tmp" /SL5="$801EA,4931888,54272,c:\users\user\downloads\cf9a73de423c69739521b80c7d4464a7f9e9680b_0005178905.exe"
"C:\Users\Cecibbcq\AppData\Local\Temp\is-4R6MV.tmp\962174574da88433f40bbd1089c0aae164011ff5_0003400244.tmp" /SL5="$1022C,3152073,54272,c:\users\user\downloads\962174574da88433f40bbd1089c0aae164011ff5_0003400244.exe"
"C:\Users\Zxqrhtcp\AppData\Local\Temp\is-S835D.tmp\8d14bfa9aae542defef6e6506ff3bdddf09cd10a_0004964583.tmp" /SL5="$1022E,4717534,54272,c:\users\user\downloads\8d14bfa9aae542defef6e6506ff3bdddf09cd10a_0004964583.exe"
(NULL) C:\Users\Azrdhuil\AppData\Local\Temp\sgqriSL.bat
WriteConsole: C:\Users\Azrdhui
WriteConsole: /d "C:\Users\Az
C:\Users\Azrdhuil\appdata\local\temp\work\nircmd.exe nircmd win min process "cmd.exe"
WriteConsole: "Azrdhuil" NEQ "
C:\Users\Azrdhuil\appdata\local\temp\work\nsudolg.exe NSudoLG -U:T -P:E -UseCurrentConsole "C:\Users\Azrdhuil\AppData\Local\Temp\sgqriSL.bat" any_word
"C:\Users\Gbmgtcyz\AppData\Local\Temp\is-P6JNL.tmp\d250bfd436581ce88c5626e72a83410d277931d6_0007281058.tmp" /SL5="$80060,7019294,54272,c:\users\user\downloads\d250bfd436581ce88c5626e72a83410d277931d6_0007281058.exe"
"C:\Users\Slwmnhjx\AppData\Local\Temp\is-NUG8E.tmp\f9174a7768727baeb03a4277f172d3df795e5543_0004176094.tmp" /SL5="$4027C,3928990,54272,c:\users\user\downloads\f9174a7768727baeb03a4277f172d3df795e5543_0004176094.exe"
"C:\Users\Slwmnhjx\AppData\Local\Folder Time Update 5.0.1.72\foldertimeupdate.exe" -i
"C:\Users\Erjtdyfo\AppData\Local\Temp\is-HSRG0.tmp\87cc180d39263973e960b8d22942ed52f03a7243_0002043464.tmp" /SL5="$20230,1797162,73216,c:\users\user\downloads\87cc180d39263973e960b8d22942ed52f03a7243_0002043464.exe"
(NULL) C:\Users\Fpkgndma\AppData\Local\Temp\TtPmKu9.bat
WriteConsole: C:\Users\Fpkgndm
WriteConsole: /d "C:\Users\Fp
C:\Users\Fpkgndma\appdata\local\temp\work\nircmd.exe nircmd win min process "cmd.exe"
WriteConsole: "Fpkgndma" NEQ "
C:\Users\Fpkgndma\appdata\local\temp\work\nsudolg.exe NSudoLG -U:T -P:E -UseCurrentConsole "C:\Users\Fpkgndma\AppData\Local\Temp\TtPmKu9.bat" any_word
"C:\Users\Cjmuzlfz\AppData\Local\Temp\is-G4OP4.tmp\1aaf827723646220d248e8ea3af8061a9eb6247a_0004562171.tmp" /SL5="$2005C,4315105,54272,c:\users\user\downloads\1aaf827723646220d248e8ea3af8061a9eb6247a_0004562171.exe"
"C:\Users\Xcwodikm\AppData\Local\Temp\is-E6J7M.tmp\0348a3e6aa4c353aedbfb32280c24113edb142e0_0003790293.tmp" /SL5="$30030,3539577,56832,c:\users\user\downloads\0348a3e6aa4c353aedbfb32280c24113edb142e0_0003790293.exe"
"C:\Users\Ksueedbb\AppData\Local\Temp\is-PP62N.tmp\4a3d44f2828404a444a2b6c0b93f5113fbdb4451_0007902469.tmp" /SL5="$10244,7063796,832512,c:\users\user\downloads\4a3d44f2828404a444a2b6c0b93f5113fbdb4451_0007902469.exe"
"C:\Users\Opiczqhs\AppData\Local\Temp\is-26C4H.tmp\d68b06b225a319ba5dbb44158c6aacb86af37215_0004890900.tmp" /SL5="$20244,4643848,54272,c:\users\user\downloads\d68b06b225a319ba5dbb44158c6aacb86af37215_0004890900.exe"
"C:\Users\Fjqawzsv\AppData\Local\Temp\is-Q96VA.tmp\db7722ef289a00ae865ddf0a82b4c5779a3869ea_0007101535.tmp" /SL5="$4005E,6839762,54272,c:\users\user\downloads\db7722ef289a00ae865ddf0a82b4c5779a3869ea_0007101535.exe"
"C:\Users\Cwaquvmm\AppData\Local\Temp\is-UVIPG.tmp\421ccf7cd085296a2bb2a6cdbffd7932937bcf34_0007165620.tmp" /SL5="$300B6,6903882,54272,c:\users\user\downloads\421ccf7cd085296a2bb2a6cdbffd7932937bcf34_0007165620.exe"
"C:\Users\Kggexarb\AppData\Local\Temp\is-U77KV.tmp\58c068969572f00b1b4d7e09181f36667aed187a_0004513548.tmp" /SL5="$50044,4265366,54272,c:\users\user\downloads\58c068969572f00b1b4d7e09181f36667aed187a_0004513548.exe"
(NULL) C:\Users\Enqgotaj\AppData\Local\Temp\oecR8Qg.bat
WriteConsole: C:\Users\Enqgota
WriteConsole: /d "C:\Users\En
C:\Users\Enqgotaj\appdata\local\temp\work\nircmd.exe nircmd win min process "cmd.exe"
WriteConsole: "Enqgotaj" NEQ "
C:\Users\Enqgotaj\appdata\local\temp\work\nsudolg.exe NSudoLG -U:T -P:E -UseCurrentConsole "C:\Users\Enqgotaj\AppData\Local\Temp\oecR8Qg.bat" any_word
"C:\Users\Apcmynlf\AppData\Local\Temp\~nsu.tmp\Au_.exe" _?=c:\users\user\downloads\
"C:\Users\Zlocmpnu\AppData\Local\Temp\is-G9S8Q.tmp\b34f39a2717d93389df9076660dbd051614c948f_0004105266.tmp" /SL5="$2026C,3858220,54272,c:\users\user\downloads\b34f39a2717d93389df9076660dbd051614c948f_0004105266.exe"
"C:\Users\Kmgegvoh\AppData\Local\Temp\is-NGTHF.tmp\ee81d26d279120de82510a4d41449de91b2bab81_0007272046.tmp" /SL5="$20260,7011222,54272,c:\users\user\downloads\ee81d26d279120de82510a4d41449de91b2bab81_0007272046.exe"
"C:\Users\Kwzzyszt\AppData\Local\Temp\is-DE27J.tmp\d06520d948612aa14b27ca84a45350e9b99e786c_0007192019.tmp" /SL5="$6005A,6930308,54272,c:\users\user\downloads\d06520d948612aa14b27ca84a45350e9b99e786c_0007192019.exe"
c:\users\user\downloads\114167f2a01de3daab351ef0d3be44cc0cece7fd_0008863744.exe c:\users\user\downloads\114167f2a01de3daab351ef0d3be44cc0cece7fd_0008863744.exe
"C:\Users\Nkuzsdmx\AppData\Local\Temp\is-MJ5LR.tmp\59b435abda7761f08efc2c0c3e7c5fb695b4c6e6_0004200389.tmp" /SL5="$4017A,3949670,56832,c:\users\user\downloads\59b435abda7761f08efc2c0c3e7c5fb695b4c6e6_0004200389.exe"
(NULL) C:\Users\Pizimkam\AppData\Local\Temp\PHgCG2S.bat
WriteConsole: C:\Users\Pizimka
WriteConsole: /d "C:\Users\Pi
C:\Users\Pizimkam\appdata\local\temp\work\nircmd.exe nircmd win min process "cmd.exe"
WriteConsole: "Pizimkam" NEQ "
C:\Users\Pizimkam\appdata\local\temp\work\nsudolg.exe NSudoLG -U:T -P:E -UseCurrentConsole "C:\Users\Pizimkam\AppData\Local\Temp\PHgCG2S.bat" any_word

以上未顯示額外執行的3047 。