Overview

overview

10

Static

static

AdsPower-G...64.exe

windows7-x64

10

AdsPower-G...64.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    80s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    31-10-2022 10:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AdsPower-Global-4.10.18-x64.exe

  • Size

    173.8MB

  • MD5

    4ba2d52786e2bcd0d9447ec1de087adb

  • SHA1

    a8685d4f9eea009ebd2cfb5e2807987fc0870a45

  • SHA256

    ef7f698497ec7f0ad7db6f37af6662cca2f9fc6e5ca9867a5a1201e8d81859b9

  • SHA512

    b991a8ebf7d68be3aef896f9dcfb6fbf484f3be06cc3478183b2414659499c4d0877a8f169b727e120e9f1f491f20fd202cc322e6b4b211bb81512648280495a

  • SSDEEP

    3145728:8ZwolUi8zduNIAR5Nt0jycVLS0r4uf/MHqyyhSNByH/BbcW+SnXieo01M:ClUZ5QIs/mxVLgu3QqJhSNBsV+e1M

Score
10/10
jokerdiscoveryinfostealerpersistenceransomwaretrojan

Malware Config

Extracted

Path

C:\Program Files\AdsPower Global\LICENSES.chromium.html

Ransom Note
<!-- Generated by licenses.py; do not edit. --><!doctype html> <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width"> <meta name="color-scheme" content="light dark"> <title>Credits</title> <link rel="stylesheet" href="chrome://resources/css/text_defaults.css"> <style> html { --google-blue-50: rgb(232, 240, 254); --google-blue-300: rgb(138, 180, 248); --google-blue-600: rgb(26, 115, 232); --google-blue-900: rgb(23, 78, 166); --google-grey-200: rgb(232, 234, 237); --google-grey-800: rgb(60, 64, 67); --google-grey-900: rgb(32, 33, 36); --interactive-color: var(--google-blue-600); --primary-color: var(--google-grey-900); --product-background: var(--google-blue-50); --product-text-color: var(--google-blue-900); background: white; } @media (prefers-color-scheme: dark) { html { --interactive-color: var(--google-blue-300); --primary-color: var(--google-grey-200); --product-background: var(--google-grey-800); --product-text-color: var(--google-grey-200); background: var(--google-grey-900); } } body { color: var(--primary-color); font-size: 84%; max-width: 1020px; } a { color: var(--interactive-color); } .page-title { font-size: 164%; font-weight: bold; } .product { background-color: var(--product-background); color: var(--product-text-color); border-radius: 5px; margin-top: 16px; overflow: auto; padding: 2px; } .product .title { float: left; font-size: 110%; font-weight: bold; margin: 3px; } .product .homepage { color: var(--interactive-color); float: right; margin: 3px; text-align: right; } .product .homepage::before { content: " - "; } .product .show { color: var(--interactive-color); float: right; margin: 3px; text-align: right; text-decoration: underline; } .licence { border-radius: 3px; clear: both; display: none; padding: 16px; } .licence h3 { margin-top: 0; } .licence pre { white-space: pre-wrap; } .dialog #print-link, .dialog .homepage { display: none; } input + label + div { display: none; } input + label::after { content: "show license"; cursor: pointer; } input:checked + label + div { display: block; } input:checked + label::after { content: "hide license"; cursor: pointer; } </style> </head> <body> <span class="page-title" style="float:left;">Credits</span> <a id="print-link" href="#" style="float:right;" hidden>Print</a> <div style="clear:both; overflow:auto;"><!-- Chromium <3s the following projects --> <div class="product"> <span class="title">Abseil</span> <span class="homepage"><a href="https://github.com/abseil/abseil-cpp">homepage</a></span> <input type="checkbox" hidden id="0"> <label class="show" for="0" tabindex="0"></label> <div class="licence"> <pre> Apache License Version 2.0, January 2004 https://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. </pre> </div> </div> <div class="product"> <span class="title">Accessibility Audit library, from Accessibility Developer Tools</span> <span class="homepage"><a href="https://raw.githubusercontent.com/GoogleChrome/accessibility-developer-tools/master/dist/js/axs_testing.js">homepage</a></span> <input type="checkbox" hidden id="1"> <label class="show" for="1" tabindex="0"></label> <div class="licence"> <pre> Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but
Emails

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt

&lt;[email protected]&gt
URLs

https://www.apache.org/licenses/

https://www.apache.org/licenses/LICENSE-2.0

http://www.apache.org/licenses/

http://www.apache.org/licenses/LICENSE-2.0

http://code.google.com/p/y2038

http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/getentropy.2

http://mozilla.org/MPL/2.0/

http://www.torchmobile.com/

https://cla.developers.google.com/clas

http://www.openssl.org/)"

https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS

http://www.opensource.apple.com/apsl/

http://www.mozilla.org/MPL/

http://www.apple.com/legal/guidelinesfor3rdparties.html

http://developer.intel.com/vtune/cbts/strmsimd/922down.htm

http://skal.planet-d.net/coding/dct.html

http://developer.intel.com/vtune/cbts/strmsimd/appnotes.htm

http://www.elecard.com/peter/idct.html

http://www.linuxvideo.org/mpeg2dec/

https://www.freetype.org

Extracted

Family

joker

C2

https://mix-file.oss-ap-southeast-1.aliyuncs.com

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

    infostealertrojanjoker
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 19 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AdsPower-Global-4.10.18-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\AdsPower-Global-4.10.18-x64.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1036
  • C:\Program Files\AdsPower Global\AdsPower Global.exe
    "C:\Program Files\AdsPower Global\AdsPower Global.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Adds Run key to start application
    • Suspicious use of WriteProcessMemory
    PID:280
    • C:\Program Files\AdsPower Global\AdsPower Global.exe
      "C:\Program Files\AdsPower Global\AdsPower Global.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\adspower_global /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\adspower_global\Crashpad --url=https://logger.adspower.net/api/robotlog --annotation=_companyName=mix "--annotation=_productName=AdsPower Browser" --annotation=_version=4.10.18 --annotation=prod=Electron --annotation=ver=11.3.0 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2bc,0x2f4,0x14740d5e8,0x14740d5f8,0x14740d608
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1480
    • C:\Program Files\AdsPower Global\AdsPower Global.exe
      "C:\Program Files\AdsPower Global\AdsPower Global.exe" --type=gpu-process --field-trial-handle=960,17657859522759211290,8301360795808745242,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=968 /prefetch:2
      2⤵
        PID:1632
      • C:\Program Files\AdsPower Global\AdsPower Global.exe
        "C:\Program Files\AdsPower Global\AdsPower Global.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=960,17657859522759211290,8301360795808745242,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1320 /prefetch:8
        2⤵
          PID:1644
        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          "C:\Program Files\AdsPower Global\AdsPower Global.exe" --type=renderer --field-trial-handle=960,17657859522759211290,8301360795808745242,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-user-model-id="electron.app.AdsPower Global" --app-path="C:\Program Files\AdsPower Global\resources\app.asar" --node-integration --no-sandbox --no-zygote --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1396 /prefetch:1
          2⤵
            PID:1508

        Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          4.6MB

          MD5

          ffacd978a87b1e829656309b6c05bef2

          SHA1

          ec6ae9699c2d8bab9c8a5e30981a116d188868be

          SHA256

          bcbbab1ffa42c6e0910e4aba1b27f6f130e2ecd2bb066544df73c9f4c95188e3

          SHA512

          5cae4a36d091908fb96e7ede01e5ca5d49982c2e3182121a418ae22034e9c1b6f35efab7a79fa2236c07bc21228cc633ebf1663097111ce8daa365bd52e9a6cd

          Download Submit

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          3.2MB

          MD5

          3762dec9507a381c003a20c315a079a1

          SHA1

          ff1cdc2f40ce5b26b479ab58c5c32824cd4d2b6f

          SHA256

          2304d3dc8c9ba3119bfd46d776b9eb738409a36013a625cabc85ad1a463d4673

          SHA512

          8cd81f1e830d7227ece3eb978cfc27ba1e7be2b9dce018cc0e44bfaba5bdb995f0e53c84051c5f642a8b46634891b6e7f37c43080433fd29b37e8b1bc5190b83

          Download Submit

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          3.1MB

          MD5

          860262833c0da4d01f0907bcd2d45a3f

          SHA1

          ff3ac610562d8fc1ca43e5e2266f3ad9e85d6912

          SHA256

          1288c0c6dff7f8890704b29e53201f46b0650e941fb8eafe5e2e64df65e2712e

          SHA512

          1bdf3e2966d5ce301eb293cbd54dbcd700b2d213fd4e7a5c78677f74957fe7a25520fea71de77077924140412bd0724c14cf7ee0139ffa49da8c1da7cc5c048e

          Download Submit

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          3.1MB

          MD5

          9ae984835057d90e99070bffb8356ee4

          SHA1

          d4ad5f5faa795af93ba1784044f338bb722a2821

          SHA256

          2894b19031a2833c1faad945c0ea8477fe86b18784376e4044176e5b483a66b7

          SHA512

          6a091a764f250d8c4674e99028ed30cb86eb1638a469d7c16f4d84a3b3b14067f9df1fb2d3933e674df4b618e0e56a3e3669a2800c8624ab0834490ac35a7ca5

          Download Submit

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          24.8MB

          MD5

          dbbea5aac9a1dd999e0854434ece84de

          SHA1

          5f5468542b1ff0351223e206efa610b897cc0fcd

          SHA256

          885bbb2777532f2b5f96579bf11d30423f7448574a6f545243184d4f560365a7

          SHA512

          264021785cff96025682a26aee3d8563ade0c2a0d2cdfbbe187650a474f4b5109b2249ee7fb7dfcbdc6ffd99dd93298ac30c5414945fa182683bd5e8a0ec17bb

          Download Submit

        • C:\Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          35.9MB

          MD5

          d63820c5b47b0f9b1f32e4b2347650fe

          SHA1

          698bf8c79171a5ce14ef93b70d2eadf6af54775e

          SHA256

          a1323a9bfcfc523a0e6eefca22843049bbe1b7b57f68f07ca874db85231a65f9

          SHA512

          ba2e1819f866014e08c7975c7789f1240151c8bb0be1374dbf126bc04ff446f09b1e0af43cd25c5369b5387bd540c4108ee28f3c8cc6c815350f29813b4667f5

          Download Submit

        • C:\Program Files\AdsPower Global\D3DCompiler_47.dll
          Filesize

          3.0MB

          MD5

          62e1720ed850f142f43767404ff77e4b

          SHA1

          e5ea424a1b2f1626f094b8096714793bb118d868

          SHA256

          8f845ac000bb22015783c0c8631f55df14c08a57bb23b85349b7b2ad330191a6

          SHA512

          ee3d5cb1d26d471bb2cd09a46d3d27d6e4f10212e70176d55c8ffb1e91cd3ee1b7915c1acd16f6617abc659fe2ff2d9f1497c00c485d053ee2679decfcce71b7

          Download Submit

        • C:\Program Files\AdsPower Global\chrome_100_percent.pak
          Filesize

          121KB

          MD5

          06baf0ad34e0231bd76651203dba8326

          SHA1

          a5f99ecdcc06dec9d7f9ce0a8c66e46969117391

          SHA256

          5ae14147992a92548bcad76867dd88cdfcdb69d951c8720920cce6fb135e3189

          SHA512

          aff6616e56781ebb925a0ca146245ad3b2827250b32261c0c7c0d5b10b20a343a17fc3761c95d93104163e77b2eae3f1f9cbd3cb2b377f49b42bea39bdd09b91

          Download Submit

        • C:\Program Files\AdsPower Global\chrome_200_percent.pak
          Filesize

          181KB

          MD5

          57c27201e7cd33471da7ec205fe9973c

          SHA1

          a8e7bce09c4cbdae2797611b2be8aeb5491036f9

          SHA256

          dd8146b2ee289e4d54a4a0f1fd3b2f61b979c6a2baaba96a406d96c3f4fdb33b

          SHA512

          57258aa169bec66abf0f45a3e026bb68751fb970b74bd0cb465607fa3b2a89967e832d92d8f675f0449bb6662fcb7786d05f0597124cc8e18bb99a47245779b4

          Download Submit

        • C:\Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • C:\Program Files\AdsPower Global\icudtl.dat
          Filesize

          10.0MB

          MD5

          ad2988770b8cb3281a28783ad833a201

          SHA1

          94b7586ee187d9b58405485f4c551b55615f11b5

          SHA256

          df876c7af43ed93eec6aea4d2d55c805009c219653cdeb368f1d048f4922b108

          SHA512

          f27e542a9c6c60fa28c5b7cc2818079341ef93aef3bbcadecad2dc11aff5b1592b19c7ebfa543ea42a3cbfec26a668641b255545fb0912056e25e852c2dedd01

          Download Submit

        • C:\Program Files\AdsPower Global\libegl.dll
          Filesize

          449KB

          MD5

          0cd37ec010d7d7693ec460fe239e0426

          SHA1

          4a3dabe72c68c693cf6f71c5bd3c26a4f6b1d385

          SHA256

          7064d53b9f7ccc3234d69a0cd4e9357fb18a10762e2b99a123690b5eaf8a8d07

          SHA512

          e81c56d25365f804406e3c104c1ceba1728e67b752304555049cdac002096067bc96cd9da4cd38132295abe87f8634f907c723162e36b035b369345192a2e5e5

          Download Submit

        • C:\Program Files\AdsPower Global\libglesv2.dll
          Filesize

          2.6MB

          MD5

          b65309be2f1bbd0352eaf263d472fefb

          SHA1

          d35a17960147a53c1340e82b1e3d6428ba28c743

          SHA256

          1544d19f61921976befeb5c665cac0e7b20953ea2a6ced7a2bdea0ce96ca066a

          SHA512

          18e90f7c467badc56455ad1681c01b6b7c59351ab0156e6b855ad6a662c0d566dcde6a46531c4b54791bdff32739ccf3084a32be6de188a3f2de364bd5a3cd39

          Download Submit

        • C:\Program Files\AdsPower Global\locales\en-US.pak
          Filesize

          83KB

          MD5

          bd8f7b719110342b7cefb16ddd05ec55

          SHA1

          82a79aeaa1dd4b1464b67053ba1766a4498c13e7

          SHA256

          d1d3f892be16329c79f9a8ee8c5fa1c9fb46d17edfeb56a3d9407f9d7587a0de

          SHA512

          7cd1493e59e87c70927e66769eb200f79a57e1eb1223af4eb4064088571893d3e32cbc4b5ece568fd308992aad65684aa280dc9834f2b5d327bdee514b046e5e

          Download Submit

        • C:\Program Files\AdsPower Global\resources.pak
          Filesize

          4.8MB

          MD5

          d13873f6fb051266deb3599b14535806

          SHA1

          143782c0ce5a5773ae0aae7a22377c8a6d18a5b2

          SHA256

          7b953443e3cd54a0a4775528b52fbfe5ebecbc2c71731600ed0999d227969506

          SHA512

          1ab38fcb70d1958c74da2493459532b52a04b884009509a1ac8dd39f6e9e670658a52f4d19ef57f1bc71dccfdd6ceedbc18034bbcad0b500d75a97c74aac6939

          Download Submit

        • C:\Program Files\AdsPower Global\resources\app.asar
          Filesize

          25.6MB

          MD5

          8843e19c5eb4c5bf51b6e62700a60102

          SHA1

          c61fea2f52a0a0d7b974674e9513c6d82fbec60d

          SHA256

          0175f8a808e0a75fcbaf7b857595d3d0695aad2cfea785ea8aaad4f975ebdae9

          SHA512

          b295fcdd5eeedf02b624e493c8b02b541c42a95c2daa2a55dd04c2c20ece63df69a09f3c9d4307720d64d693161ec8d3e1607570795ac537937822aecdc88dd9

          Download Submit

        • C:\Program Files\AdsPower Global\resources\app.asar.unpacked\node_modules\ps-list\index.js
          Filesize

          4KB

          MD5

          32385488335d3acbac238ae79c09256b

          SHA1

          6945ac03e7581574c5e9dc0b943d89f13eb6bc81

          SHA256

          fb267dc224440784ece7cac39c0143d79420a206ac8054d5cec1bc702a885a9c

          SHA512

          76fbdc4e34e68acdbac018c73d937a3da3cad307e417174f9b52db26959388d23f9bb502f9b4f64e44f62565d675dedaabb4f4f3b0f3dbae088b284c96a8bfbe

          Download Submit

        • C:\Program Files\AdsPower Global\resources\app.asar.unpacked\node_modules\ps-list\package.json
          Filesize

          522B

          MD5

          fab8c951d36e58fc69feaeb3a5edc356

          SHA1

          d304db544078dd0a5095d4a86ef92c650a176895

          SHA256

          6784a7400f302ef6ea92423c0542ebb4babbe8f42c3d9ab857243f58a962f2ad

          SHA512

          ab09b51d7d0f0f029b563b8aef9371419c9ae414703742a9c8802acbe3a30111beaa7b485eafb5aeb103b8cf2f2c75853f9bb7b098809e6969cbaad8878003c2

          Download Submit

        • C:\Program Files\AdsPower Global\v8_context_snapshot.bin
          Filesize

          168KB

          MD5

          c2208c06c8ff81bca3c092cc42b8df1b

          SHA1

          f7b9faa9ba0e72d062f68642a02cc8f3fed49910

          SHA256

          4a67de195878d290f49b503b83e415917b8bbcbd9936b07a5d33b48e9bc6e0a3

          SHA512

          6c3c370dd086a976c44d4059a315bd3bcbb50961aa34734e65a40d861cffca9090d47cec74575afe23952e394e4845bda2d8798eebe01fb54a7a6288bce238f5

          Download Submit

        • C:\Users\Admin\AppData\Roaming\adspower_global\Crashpad\settings.dat
          Filesize

          40B

          MD5

          0a965647ae6da0469e74724b2f021006

          SHA1

          550696b2086cb67f3605379cb9e932c723925ad5

          SHA256

          f8c3928081a180177089200aeb103230c156618aa164761b5b7f4b9467ae672e

          SHA512

          09936cda0cb785debddb29ad5bf98b7eeb268c65926d5e4212c280c2b0096e27ab9be3ef188bfc0b6be0beb9930d929b4f9ced3ab2857ed70f24351ecea3c736

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          59.8MB

          MD5

          915bbb334b30f2544b3584ba21328c99

          SHA1

          522917a1eb0fe7556cdd9ff241a1da77d64178e8

          SHA256

          fd04a8a6e059df75e20e7b22523e8fb0fb9748fb8094393bba04b31acfbee6a9

          SHA512

          0a6a74183142b108c6cef03a583ef0cc258fd29c89e95ee1d3ead8917b61fd092316f93ea7034002aeb137ff8139f5ee37639e9a672c882d0a09b7884526f2f6

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          59.2MB

          MD5

          45c7736704819858bfaf24d3f74b7dc3

          SHA1

          756b822098a7668df00c4b18bad78c3eb7a25e81

          SHA256

          cd1ce8263da79a8b48fa7995c3a5667e13c8dc36b66e215150dfa5020f4ae0a1

          SHA512

          95a65935bd9b2f9bce3ec9803b626324c57e6669b894ebc192ab6d15eac3836755aed24039e03c833a1a1a7daf6488a97c2ffcbaaab15e37d3b13ce856f8b437

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          57.4MB

          MD5

          ecd786b9a419600f231d72698e27019d

          SHA1

          b091a1b997e2160fed36ae640dd939b9045fea64

          SHA256

          8efc0ea2422123eae9543deafd533a3dc77a50f9607bb24db72c2535c84c1885

          SHA512

          507aa5af93f092eb7bcb35aea6b3b390e8470cfb56888dfd976380b8c1191c118991928f2f262e70f6331c5e137eae1f682da122292cfa93baa6494964172957

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          52.5MB

          MD5

          f1d313f7a3b0127cbe3dfa7b87a12852

          SHA1

          61d959c287b31668ca86e818403f82ed9f4befe0

          SHA256

          3d66bfc6d2ae16518beec4de93e17996287c60cf51de1d657d57d02b51bc0abe

          SHA512

          f9c490bf6997900f629581d6940751f97820bff801f37ed038ea0a3fa7319c719c522b186724119449ce2ffd47682506317f10a64e311bd578224504d85c2110

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          64.4MB

          MD5

          a834d209ca3ba41b661ba7762bf6338f

          SHA1

          f21fcb32ca61d3c9407f207ca7dd4f78553c434d

          SHA256

          74dd8418e4dca94f5d6a0c1c7f8ac1921179e331ffa82234931dacef6a35e805

          SHA512

          9cdd32200cd2d8706ceed8df7a65a07217806abe5942743aa3e6b6cd474ef475620c91dcb658ac2795678086b02c1039a58f6a8bd23484380d8eaf53f91599a4

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          65.9MB

          MD5

          4c00652bd0f6164cf1357836067dc33d

          SHA1

          a11c5e9868604ad870eedab197fc6962ea2ba95f

          SHA256

          a5cb7d7d04192129f6997d2a3364698fbc06da12a6508a9e85e635fc3972f6d3

          SHA512

          ed2109ab5c6f28c6ca64d5c0a81ba5a606b2426be22208382336831ba81a42df9deccec20a13b74633dfdd32d956ccc1621c1fcecf6b1112582b2377e953cd56

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          65.2MB

          MD5

          c592df6bf4b52b8237698943e4b4e1ef

          SHA1

          e0c0eb3feb959b3a1df4bd8f61ce7f8739d96012

          SHA256

          c6e59f15af174a959ae8b5092c9e455ac0a8e5083ede4c9083fa53abec54c5a0

          SHA512

          34e4ed0fad698d7daece5e787d298974f1f09abd517b5e33ccb7e582ee3f71a6c10b29f74595824a17530fa321abfe9a53bce14bfd348d799af70324786fae28

          Download Submit

        • \Program Files\AdsPower Global\AdsPower Global.exe
          Filesize

          63.1MB

          MD5

          75f0c9a5f41812c8105dcb4b254fb427

          SHA1

          a56f91278c6704aea3afdef63875578e353e3139

          SHA256

          59f70d3b32896ddcc23fb8899ce646209d30f3f5c883d06e75b343bc066a02aa

          SHA512

          24fabe8daf933a492c2eda7e16b792da72428e364fe4f26b06284bbac2df153830412dc0daf1303d7ad8d5d42f18e987c9edc654e73f5d44891c9ed166d91a99

          Download Submit

        • \Program Files\AdsPower Global\d3dcompiler_47.dll
          Filesize

          3.0MB

          MD5

          62e1720ed850f142f43767404ff77e4b

          SHA1

          e5ea424a1b2f1626f094b8096714793bb118d868

          SHA256

          8f845ac000bb22015783c0c8631f55df14c08a57bb23b85349b7b2ad330191a6

          SHA512

          ee3d5cb1d26d471bb2cd09a46d3d27d6e4f10212e70176d55c8ffb1e91cd3ee1b7915c1acd16f6617abc659fe2ff2d9f1497c00c485d053ee2679decfcce71b7

          Download Submit

        • \Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • \Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • \Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • \Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • \Program Files\AdsPower Global\ffmpeg.dll
          Filesize

          2.7MB

          MD5

          8bf15122c6ed5a35354067aba38278c3

          SHA1

          85b5be6325404fa68c560d8de8bbf07125b738ad

          SHA256

          af323df235e6103dd434143692c5f286a08d9561a1b0bf788f24af36baea4c65

          SHA512

          14ce489e109ecf1662fc850b6e22495070c5c59c7abc27c4301bed3d5294073f1a97257bcb2db20ce9cc5adb59ea98ff7e5c6d94a68561dfa152bfa6106e3cfd

          Download Submit

        • \Program Files\AdsPower Global\libEGL.dll
          Filesize

          449KB

          MD5

          0cd37ec010d7d7693ec460fe239e0426

          SHA1

          4a3dabe72c68c693cf6f71c5bd3c26a4f6b1d385

          SHA256

          7064d53b9f7ccc3234d69a0cd4e9357fb18a10762e2b99a123690b5eaf8a8d07

          SHA512

          e81c56d25365f804406e3c104c1ceba1728e67b752304555049cdac002096067bc96cd9da4cd38132295abe87f8634f907c723162e36b035b369345192a2e5e5

          Download Submit

        • \Program Files\AdsPower Global\libGLESv2.dll
          Filesize

          2.6MB

          MD5

          b65309be2f1bbd0352eaf263d472fefb

          SHA1

          d35a17960147a53c1340e82b1e3d6428ba28c743

          SHA256

          1544d19f61921976befeb5c665cac0e7b20953ea2a6ced7a2bdea0ce96ca066a

          SHA512

          18e90f7c467badc56455ad1681c01b6b7c59351ab0156e6b855ad6a662c0d566dcde6a46531c4b54791bdff32739ccf3084a32be6de188a3f2de364bd5a3cd39

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\StdUtils.dll
          Filesize

          100KB

          MD5

          c6a6e03f77c313b267498515488c5740

          SHA1

          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

          SHA256

          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

          SHA512

          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\System.dll
          Filesize

          12KB

          MD5

          0d7ad4f45dc6f5aa87f606d0331c6901

          SHA1

          48df0911f0484cbe2a8cdd5362140b63c41ee457

          SHA256

          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

          SHA512

          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\UAC.dll
          Filesize

          14KB

          MD5

          adb29e6b186daa765dc750128649b63d

          SHA1

          160cbdc4cb0ac2c142d361df138c537aa7e708c9

          SHA256

          2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

          SHA512

          b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\WinShell.dll
          Filesize

          3KB

          MD5

          1cc7c37b7e0c8cd8bf04b6cc283e1e56

          SHA1

          0b9519763be6625bd5abce175dcc59c96d100d4c

          SHA256

          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

          SHA512

          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\WinShell.dll
          Filesize

          3KB

          MD5

          1cc7c37b7e0c8cd8bf04b6cc283e1e56

          SHA1

          0b9519763be6625bd5abce175dcc59c96d100d4c

          SHA256

          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

          SHA512

          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\nsDialogs.dll
          Filesize

          9KB

          MD5

          466179e1c8ee8a1ff5e4427dbb6c4a01

          SHA1

          eb607467009074278e4bd50c7eab400e95ae48f7

          SHA256

          1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

          SHA512

          7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\nsExec.dll
          Filesize

          6KB

          MD5

          ec0504e6b8a11d5aad43b296beeb84b2

          SHA1

          91b5ce085130c8c7194d66b2439ec9e1c206497c

          SHA256

          5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

          SHA512

          3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\nsProcess.dll
          Filesize

          4KB

          MD5

          f0438a894f3a7e01a4aae8d1b5dd0289

          SHA1

          b058e3fcfb7b550041da16bf10d8837024c38bf6

          SHA256

          30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

          SHA512

          f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

          Download Submit

        • \Users\Admin\AppData\Local\Temp\nsy3E1B.tmp\nsis7z.dll
          Filesize

          424KB

          MD5

          80e44ce4895304c6a3a831310fbf8cd0

          SHA1

          36bd49ae21c460be5753a904b4501f1abca53508

          SHA256

          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

          SHA512

          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

          Download Submit

        • memory/1036-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

          Filesize

          8KB

          Download