Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
General
-
Target
Pass_1234_Setup.rar
-
Size
4.7MB
-
MD5
7f3bc1e7b722097a93170295bdba493d
-
SHA1
d2191ee5a6c458a5943b5d47832aea89fe47775d
-
SHA256
ccd529f9416bb4f4f526a344a164ddb045efb3bba7ebc007bd72bf6fea2ddeff
-
SHA512
439e40fcf792129a4d3ce61795aa96757ae52a0c803552fa802f14b46cb111be09ef22c179976a48c1ce0c934d3ff4a44f216b0651a4d41bedc69e03ca9f9930
-
SSDEEP
98304:HUWmGraxuEMZhRrjuCJMr7NEyd0j35jri8Xntwhll8xpB+y0:Jm8kR8PPMrnd0jJjr13tm8jB30
Malware Config
Signatures
Files
-
Pass_1234_Setup.rar.rar
Password: 1234
-
About/AppCompat.admx
-
About/AppXRuntime.admx.xml
-
About/AttachmentManager.admx
-
About/AuditSettings.admx.xml
-
About/AutoPlay.admx
-
About/Biometrics.admx
-
About/Bits.admx
-
About/CEIPEnable.admx
-
About/COM.admx
-
About/CipherSuiteOrder.admx
-
About/Conf.admx
-
About/ControlPanel.admx
-
About/ControlPanelDisplay.admx
-
About/Cpls.admx
-
About/CredSsp.admx
-
About/CredUI.admx
-
About/CredentialProviders.admx
-
About/CtrlAltDel.admx
-
About/DCOM.admx
-
About/DFS.admx
-
About/DWM.admx
-
About/Desktop.admx
-
About/DeviceCompat.admx
-
About/DeviceInstallation.admx
-
About/DeviceSetup.admx
-
About/DigitalLocker.admx
-
About/DiskDiagnostic.admx
-
About/DiskNVCache.admx
-
About/DiskQuota.admx
-
About/DistributedLinkTracking.admx
-
About/DnsClient.admx
-
About/EAIME.admx
-
About/EarlyLaunchAM.admx
-
About/EdgeUI.admx
-
About/EncryptFilesonMove.admx
-
About/ErrorReporting.admx
-
About/EventForwarding.admx.xml
-
About/EventLog.admx
-
About/EventViewer.admx
-
About/Explorer.admx
-
About/ExternalBoot.admx.xml
-
About/FileHistory.admx
-
About/FileRecovery.admx
-
About/FileRevocation.admx
-
About/FileServerVSSProvider.admx
-
About/FileSys.admx.xml
-
About/FolderRedirection.admx
-
About/FramePanes.admx
-
About/GameExplorer.admx
-
About/Globalization.admx
-
About/GroupPolicy-Server.admx
-
About/GroupPolicy.admx
-
About/GroupPolicyPreferences.admx
-
About/Help.admx
-
About/HelpAndSupport.admx
-
About/ICM.admx
-
About/IIS.admx
-
About/InkWatson.admx
-
About/Kerberos.admx
-
About/LanmanServer.admx
-
About/LeakDiagnostic.admx
-
About/LinkLayerTopologyDiscovery.admx
-
About/LocationProviderAdm.admx
-
About/Logon.admx
-
About/MMC.admx
-
About/MMCSnapIns2.admx
-
About/MMCSnapins.admx
-
About/MSDT.admx
-
About/MSI.admx
-
About/MediaCenter.admx
-
About/MobilePCMobilityCenter.admx
-
About/MobilePCPresentationSettings.admx
-
About/Msi-FileRecovery.admx
-
About/NAPXPQec.admx
-
About/NCSI.admx
-
About/Netlogon.admx
-
About/NetworkConnections.admx
-
About/NetworkIsolation.admx
-
About/NetworkProjection.admx
-
About/OfflineFiles.admx
-
About/P2P-pnrp.admx
-
About/ParentalControls.admx
-
About/PeerToPeerCaching.admx
-
About/PenTraining.admx
-
About/PerformanceDiagnostics.admx
-
About/PerformancePerftrack.admx
-
About/Power.admx
-
About/PowerShellExecutionPolicy.admx
-
About/PreviousVersions.admx
-
About/Printing.admx
-
About/Printing2.admx
-
About/Programs.admx
-
About/PswdSync.admx
-
About/QOS.admx
-
About/RPC.admx
-
About/RacWmiProv.admx
-
About/Radar.admx
-
About/ReAgent.admx
-
About/Reliability.admx
-
About/RemoteAssistance.admx
-
About/RemovableStorage.admx
-
About/Scripts.admx
-
About/Securitycenter.admx
-
About/Sensors.admx
-
About/ServerManager.admx
-
About/Servicing.admx
-
About/SettingSync.admx
-
About/Setup.admx
-
About/SharedFolders.admx
-
About/Sharing.admx
-
About/Shell-CommandPrompt-RegEditTools.admx
-
About/ShellWelcomeCenter.admx
-
About/Sidebar.admx
-
About/SkyDrive.admx.xml
-
About/Smartcard.admx
-
About/Snis.admx
-
About/Snmp.admx
-
About/SoundRec.admx
-
About/StartMenu.admx
-
About/SystemRestore.admx
-
About/TPM.admx
-
About/TabletPCInputPanel.admx
-
About/TabletShell.admx
-
About/TaskScheduler.admx
-
About/Taskbar.admx
-
About/TerminalServer-Server.admx
-
About/TerminalServer.admx
-
About/Thumbnails.admx
-
About/TouchInput.admx
-
About/UserProfiles.admx
-
About/VolumeEncryption.admx
-
About/W32Time.admx
-
About/WCM.admx
-
About/WDI.admx
-
About/WPN.admx
-
About/WinCal.admx.xml
-
About/WinInit.admx
-
About/WinLogon.admx
-
About/Windows.Data.TimeZones.ar-SA.pri
-
About/Windows.Data.TimeZones.bg-BG.pri
-
About/Windows.Data.TimeZones.cs-CZ.pri
-
About/Windows.Data.TimeZones.da-DK.pri
-
About/Windows.Data.TimeZones.de-DE.pri
-
About/Windows.Data.TimeZones.el-GR.pri
-
About/Windows.Data.TimeZones.en-GB.pri
-
About/Windows.Data.TimeZones.en-US.pri
-
About/Windows.Data.TimeZones.es-ES.pri
-
About/Windows.Data.TimeZones.et-EE.pri
-
About/Windows.Data.TimeZones.fi-FI.pri
-
About/Windows.Data.TimeZones.fr-FR.pri
-
About/Windows.Data.TimeZones.he-IL.pri
-
About/Windows.Data.TimeZones.hr-HR.pri
-
About/Windows.Data.TimeZones.hu-HU.pri
-
About/Windows.Data.TimeZones.it-IT.pri
-
About/Windows.Data.TimeZones.ja-JP.pri
-
About/Windows.Data.TimeZones.ko-KR.pri
-
About/Windows.Data.TimeZones.lt-LT.pri
-
About/Windows.Data.TimeZones.lv-LV.pri
-
About/Windows.Data.TimeZones.nb-NO.pri
-
About/Windows.Data.TimeZones.nl-NL.pri
-
About/Windows.Data.TimeZones.pl-PL.pri
-
About/Windows.Data.TimeZones.pt-BR.pri
-
About/Windows.Data.TimeZones.pt-PT.pri
-
About/Windows.Data.TimeZones.ro-RO.pri
-
About/Windows.Data.TimeZones.ru-RU.pri
-
About/Windows.Data.TimeZones.sk-SK.pri
-
About/Windows.Data.TimeZones.sl-SI.pri
-
About/Windows.Data.TimeZones.sr-Latn-RS.pri
-
About/Windows.Data.TimeZones.sv-SE.pri
-
About/Windows.Data.TimeZones.th-TH.pri
-
About/Windows.Data.TimeZones.tr-TR.pri
-
About/Windows.Data.TimeZones.uk-UA.pri
-
About/Windows.Data.TimeZones.zh-CN.pri
-
About/Windows.Data.TimeZones.zh-HK.pri
-
About/Windows.Data.TimeZones.zh-TW.pri
-
About/Windows.Data.TimeZones/Windows.Data.TimeZones.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ar-SA.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.bg-BG.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.cs-CZ.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.da-DK.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.de-DE.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.el-GR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-GB.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-US.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.es-ES.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.et-EE.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fi-FI.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fr-FR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.he-IL.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hr-HR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hu-HU.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.it-IT.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ja-JP.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ko-KR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lt-LT.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lv-LV.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nb-NO.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nl-NL.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pl-PL.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-BR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-PT.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ro-RO.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ru-RU.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sk-SK.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sl-SI.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sr-Latn-RS.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sv-SE.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.th-TH.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.tr-TR.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.uk-UA.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-CN.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-HK.pri
-
About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-TW.pri
-
About/Windows.admx
-
About/WindowsAnytimeUpgrade.admx
-
About/WindowsBackup.admx
-
About/WindowsColorSystem.admx
-
About/WindowsConnectNow.admx
-
About/WindowsDefender.admx
-
About/WindowsExplorer.admx
-
About/WindowsFileProtection.admx
-
About/WindowsFirewall.admx
-
About/WindowsMail.admx
-
About/WindowsMediaDRM.admx
-
About/WindowsMediaPlayer.admx
-
About/WindowsMessenger.admx
-
About/WindowsProducts.admx
-
About/WindowsRemoteManagement.admx
-
About/WindowsRemoteShell.admx
-
About/WindowsServer.admx
-
About/WindowsUpdate.admx
-
About/Winsrv.admx
-
About/WordWheel.admx
-
About/WorkFolders-Client.admx
-
About/WorkplaceJoin.admx.xml
-
About/en-US/ActiveXInstallService.adml.xml
-
About/en-US/AddRemovePrograms.adml.xml
-
About/en-US/AppCompat.adml.xml
-
About/en-US/AppXRuntime.adml.xml
-
About/en-US/AppxPackageManager.adml.xml
-
About/en-US/AttachmentManager.adml.xml
-
About/en-US/AuditSettings.adml.xml
-
About/en-US/AutoPlay.adml.xml
-
About/en-US/Biometrics.adml.xml
-
About/en-US/Bits.adml.xml
-
About/en-US/Bits.admx
-
About/en-US/CEIPEnable.adml.xml
-
About/en-US/COM.adml.xml
-
About/en-US/CipherSuiteOrder.adml.xml
-
About/en-US/Conf.adml.xml
-
About/en-US/Conf.admx
-
About/en-US/ControlPanel.adml.xml
-
About/en-US/ControlPanelDisplay.adml.xml
-
About/en-US/ControlPanelDisplay.admx
-
About/en-US/Cpls.adml.xml
-
About/en-US/CredSsp.adml.xml
-
About/en-US/CredSsp.admx
-
About/en-US/CredUI.adml.xml
-
About/en-US/CredentialProviders.adml.xml
-
About/en-US/Croatian.ini
-
About/en-US/CtrlAltDel.adml.xml
-
About/en-US/DCOM.adml.xml
-
About/en-US/DFS.adml.xml
-
About/en-US/DWM.adml.xml
-
About/en-US/Danish.ini
-
About/en-US/Desktop.adml.xml
-
About/en-US/Desktop.admx
-
About/en-US/DeviceCompat.adml.xml
-
About/en-US/DeviceInstallation.adml.xml
-
About/en-US/DeviceInstallation.admx
-
About/en-US/DeviceSetup.adml.xml
-
About/en-US/DigitalLocker.adml.xml
-
About/en-US/DiskDiagnostic.adml.xml
-
About/en-US/DiskNVCache.adml.xml
-
About/en-US/DiskQuota.adml.xml
-
About/en-US/DistributedLinkTracking.adml.xml
-
About/en-US/DnsClient.adml.xml
-
About/en-US/EAIME.adml.xml
-
About/en-US/EarlyLaunchAM.adml
-
About/en-US/EdgeUI.adml.xml
-
About/en-US/EncryptFilesonMove.adml.xml
-
About/en-US/English.ini
-
About/en-US/ErrorReporting.adml.xml
-
About/en-US/EventForwarding.adml.xml
-
About/en-US/EventLog.adml.xml
-
About/en-US/EventViewer.adml.xml
-
About/en-US/Explorer.adml.xml
-
About/en-US/ExternalBoot.adml.xml
-
About/en-US/FileHistory.adml.xml
-
About/en-US/FileRecovery.adml.xml
-
About/en-US/FileRevocation.adml.xml
-
About/en-US/FileServerVSSProvider.adml.xml
-
About/en-US/FileSys.adml.xml
-
About/en-US/Finnish.ini
-
About/en-US/FolderRedirection.adml.xml
-
About/en-US/FramePanes.adml.xml
-
About/en-US/GameExplorer.adml.xml
-
About/en-US/Globalization.adml.xml
-
About/en-US/GroupPolicy-Server.adml.xml
-
About/en-US/GroupPolicy.adml.xml
-
About/en-US/GroupPolicyPreferences.adml.xml
-
About/en-US/Hebrew.ini
-
About/en-US/Help.adml.xml
-
About/en-US/HelpAndSupport.adml.xml
-
About/en-US/Hungarian.ini.ps1
-
About/en-US/ICM.adml.xml
-
About/en-US/IIS.adml.xml
-
About/en-US/Indonesian.ini
-
About/en-US/InetRes.adml.xml
-
About/en-US/InkWatson.adml.xml
-
About/en-US/Japanese.ini
-
About/en-US/KDC.adml.xml
-
About/en-US/Kazakh.ini
-
About/en-US/Kerberos.adml.xml
-
About/en-US/Korean.ini.ps1
-
About/en-US/Kurdish.ini
-
About/en-US/LanmanServer.adml.xml
-
About/en-US/LeakDiagnostic.adml.xml
-
About/en-US/LinkLayerTopologyDiscovery.adml.xml
-
About/en-US/LocationProviderAdm.adml.xml
-
About/en-US/Logon.adml.xml
-
About/en-US/MMC.adml.xml
-
About/en-US/MMCSnapIns2.adml.xml
-
About/en-US/MMCSnapins.adml.xml
-
About/en-US/MSDT.adml.xml
-
About/en-US/MSI.adml.xml
-
About/en-US/MediaCenter.adml.xml
-
About/en-US/MobilePCMobilityCenter.adml.xml
-
About/en-US/MobilePCPresentationSettings.adml.xml
-
About/en-US/Msi-FileRecovery.adml.xml
-
About/en-US/NAPXPQec.adml.xml
-
About/en-US/NCSI.adml.xml
-
About/en-US/Netlogon.adml.xml
-
About/en-US/NetworkConnections.adml.xml
-
About/en-US/NetworkIsolation.adml
-
About/en-US/NetworkProjection.adml.xml
-
About/en-US/Norwegian.ini
-
About/en-US/OfflineFiles.adml.xml
-
About/en-US/P2P-pnrp.adml.xml
-
About/en-US/ParentalControls.adml.xml
-
About/en-US/PeerToPeerCaching.adml.xml
-
About/en-US/PenTraining.adml.xml
-
About/en-US/PerformanceDiagnostics.adml.xml
-
About/en-US/PerformancePerftrack.adml.xml
-
About/en-US/Power.adml.xml
-
About/en-US/PowerShellExecutionPolicy.adml.xml
-
About/en-US/PreviousVersions.adml.xml
-
About/en-US/Printing.adml.xml
-
About/en-US/Printing2.adml.xml
-
About/en-US/Programs.adml.xml
-
About/en-US/PswdSync.adml.xml
-
About/en-US/QOS.adml.xml
-
About/en-US/RPC.adml.xml
-
About/en-US/RacWmiProv.adml.xml
-
About/en-US/Radar.adml.xml
-
About/en-US/ReAgent.adml.xml
-
About/en-US/Reliability.adml.xml
-
About/en-US/RemoteAssistance.adml.xml
-
About/en-US/RemovableStorage.adml.xml
-
About/en-US/Scripts.adml.xml
-
About/en-US/Securitycenter.adml.xml
-
About/en-US/Sensors.adml.xml
-
About/en-US/ServerManager.adml.xml
-
About/en-US/Servicing.adml.xml
-
About/en-US/SettingSync.adml.xml
-
About/en-US/Setup.adml.xml
-
About/en-US/SharedFolders.adml.xml
-
About/en-US/Sharing.adml.xml
-
About/en-US/Shell-CommandPrompt-RegEditTools.adml.xml
-
About/en-US/ShellWelcomeCenter.adml.xml
-
About/en-US/Sidebar.adml.xml
-
About/en-US/SimpChinese.ini
-
About/en-US/Sinhala.ini
-
About/en-US/SkyDrive.adml.xml
-
About/en-US/Slovak.ini
-
About/en-US/Smartcard.adml.xml
-
About/en-US/Snis.adml.xml
-
About/en-US/Snmp.adml.xml
-
About/en-US/SoundRec.adml.xml
-
About/en-US/StartMenu.adml.xml
-
About/en-US/Swedish.ini
-
About/en-US/SystemRestore.adml.xml
-
About/en-US/TPM.adml.xml
-
About/en-US/TabletPCInputPanel.adml.xml
-
About/en-US/TabletShell.adml.xml
-
About/en-US/TaskScheduler.adml.xml
-
About/en-US/Taskbar.adml.xml
-
About/en-US/TerminalServer-Server.adml.xml
-
About/en-US/TerminalServer.adml.xml
-
About/en-US/Thai.ini
-
About/en-US/Thumbnails.adml.xml
-
About/en-US/TouchInput.adml.xml
-
About/en-US/TradChinese.ini
-
About/en-US/Ukrainian.ini
-
About/en-US/UserProfiles.adml.xml
-
About/en-US/UyghurLatin.ini
-
About/en-US/Uzbek.ini
-
About/en-US/Vietnamese.ini
-
About/en-US/VolumeEncryption.adml.xml
-
About/en-US/W32Time.adml.xml
-
About/en-US/WCM.adml.xml
-
About/en-US/WDI.adml.xml
-
About/en-US/WPN.adml.xml
-
About/en-US/WinCal.adml.xml
-
About/en-US/WinInit.adml.xml
-
About/en-US/WinLogon.adml.xml
-
About/en-US/Windows.Data.TimeZones.ar-SA.pri
-
About/en-US/Windows.Data.TimeZones.bg-BG.pri
-
About/en-US/Windows.Data.TimeZones.cs-CZ.pri
-
About/en-US/Windows.Data.TimeZones.da-DK.pri
-
About/en-US/Windows.Data.TimeZones.de-DE.pri
-
About/en-US/Windows.Data.TimeZones.el-GR.pri
-
About/en-US/Windows.Data.TimeZones.en-GB.pri
-
About/en-US/Windows.Data.TimeZones.en-US.pri
-
About/en-US/Windows.Data.TimeZones.es-ES.pri
-
About/en-US/Windows.Data.TimeZones.et-EE.pri
-
About/en-US/Windows.Data.TimeZones.fi-FI.pri
-
About/en-US/Windows.Data.TimeZones.fr-FR.pri
-
About/en-US/Windows.Data.TimeZones.he-IL.pri
-
About/en-US/Windows.Data.TimeZones.hr-HR.pri
-
About/en-US/Windows.Data.TimeZones.hu-HU.pri
-
About/en-US/Windows.Data.TimeZones.it-IT.pri
-
About/en-US/Windows.Data.TimeZones.ja-JP.pri
-
About/en-US/Windows.Data.TimeZones.ko-KR.pri
-
About/en-US/Windows.Data.TimeZones.lt-LT.pri
-
About/en-US/Windows.Data.TimeZones.lv-LV.pri
-
About/en-US/Windows.Data.TimeZones.nb-NO.pri
-
About/en-US/Windows.Data.TimeZones.nl-NL.pri
-
About/en-US/Windows.Data.TimeZones.pl-PL.pri
-
About/en-US/Windows.Data.TimeZones.pt-BR.pri
-
About/en-US/Windows.Data.TimeZones.pt-PT.pri
-
About/en-US/Windows.Data.TimeZones.ro-RO.pri
-
About/en-US/Windows.Data.TimeZones.ru-RU.pri
-
About/en-US/Windows.Data.TimeZones.sk-SK.pri
-
About/en-US/Windows.Data.TimeZones.sl-SI.pri
-
About/en-US/Windows.Data.TimeZones.sr-Latn-RS.pri
-
About/en-US/Windows.Data.TimeZones.sv-SE.pri
-
About/en-US/Windows.Data.TimeZones.th-TH.pri
-
About/en-US/Windows.Data.TimeZones.tr-TR.pri
-
About/en-US/Windows.Data.TimeZones.uk-UA.pri
-
About/en-US/Windows.Data.TimeZones.zh-CN.pri
-
About/en-US/Windows.Data.TimeZones.zh-HK.pri
-
About/en-US/Windows.Data.TimeZones.zh-TW.pri
-
About/en-US/Windows.adml.xml
-
About/en-US/WindowsAnytimeUpgrade.adml.xml
-
About/en-US/WindowsBackup.adml.xml
-
About/en-US/WindowsColorSystem.adml.xml
-
About/en-US/WindowsConnectNow.adml.xml
-
About/en-US/WindowsDefender.adml
-
About/en-US/WindowsExplorer.adml.xml
-
About/en-US/WindowsFileProtection.adml.xml
-
About/en-US/WindowsFirewall.adml.xml
-
About/en-US/WindowsMail.adml.xml
-
About/en-US/WindowsMediaDRM.adml.xml
-
About/en-US/WindowsMediaPlayer.adml.xml
-
About/en-US/WindowsMessenger.adml.xml
-
About/en-US/WindowsProducts.adml.xml
-
About/en-US/WindowsRemoteManagement.adml.xml
-
About/en-US/WindowsRemoteShell.adml.xml
-
About/en-US/WindowsServer.adml.xml
-
About/en-US/WindowsUpdate.adml.xml
-
About/en-US/Winsrv.adml.xml
-
About/en-US/WordWheel.adml.xml
-
About/en-US/WorkFolders-Client.adml.xml
-
About/en-US/WorkplaceJoin.adml.xml
-
About/en-US/fthsvc.adml.xml
-
About/en-US/hotspotauth.adml.xml
-
About/en-US/iSCSI.adml.xml
-
About/en-US/msched.adml.xml
-
About/en-US/nca.adml
-
About/en-US/pca.adml.xml
-
About/en-US/sdiageng.adml.xml
-
About/en-US/srm-fci.adml.xml
-
About/en-US/tcpip.adml.xml
-
About/en-US/wlansvc.adml.xml
-
About/en-US/wwansvc.adml.xml
-
About/fthsvc.admx
-
About/hotspotauth.admx
-
About/iSCSI.admx
-
About/inetres.admx.xml
-
About/kdc.admx
-
About/langs/AppCompat.admx
-
About/langs/AppXRuntime.admx.xml
-
About/langs/AttachmentManager.admx
-
About/langs/AuditSettings.admx.xml
-
About/langs/AutoPlay.admx
-
About/langs/Biometrics.admx
-
About/langs/Bits.admx
-
About/langs/CEIPEnable.admx
-
About/langs/COM.admx
-
About/langs/CipherSuiteOrder.admx
-
About/langs/Conf.admx
-
About/langs/ControlPanel.admx
-
About/langs/ControlPanelDisplay.admx
-
About/langs/Cpls.admx
-
About/langs/CredSsp.admx
-
About/langs/CredUI.admx
-
About/langs/CredentialProviders.admx
-
About/langs/Croatian.ini
-
About/langs/CtrlAltDel.admx
-
About/langs/DCOM.admx
-
About/langs/Danish.ini
-
About/langs/Desktop.admx
-
About/langs/DeviceCompat.admx
-
About/langs/DeviceInstallation.admx
-
About/langs/English.ini
-
About/langs/Finnish.ini
-
About/langs/Hebrew.ini
-
About/langs/Hungarian.ini.ps1
-
About/langs/Indonesian.ini
-
About/langs/Japanese.ini
-
About/langs/Kazakh.ini
-
About/langs/Korean.ini.ps1
-
About/langs/Kurdish.ini
-
About/langs/Norwegian.ini
-
About/langs/SimpChinese.ini
-
About/langs/Sinhala.ini
-
About/langs/Slovak.ini
-
About/langs/Swedish.ini
-
About/langs/Thai.ini
-
About/langs/TradChinese.ini
-
About/langs/Ukrainian.ini
-
About/langs/UyghurLatin.ini
-
About/langs/Uzbek.ini
-
About/langs/Vietnamese.ini
-
About/langs/Windows.Data.TimeZones.ar-SA.pri
-
About/langs/Windows.Data.TimeZones.bg-BG.pri
-
About/langs/Windows.Data.TimeZones.cs-CZ.pri
-
About/langs/Windows.Data.TimeZones.da-DK.pri
-
About/langs/Windows.Data.TimeZones.de-DE.pri
-
About/langs/Windows.Data.TimeZones.el-GR.pri
-
About/langs/Windows.Data.TimeZones.en-GB.pri
-
About/langs/Windows.Data.TimeZones.en-US.pri
-
About/langs/Windows.Data.TimeZones.es-ES.pri
-
About/langs/Windows.Data.TimeZones.et-EE.pri
-
About/langs/Windows.Data.TimeZones.fi-FI.pri
-
About/langs/Windows.Data.TimeZones.fr-FR.pri
-
About/langs/Windows.Data.TimeZones.he-IL.pri
-
About/langs/Windows.Data.TimeZones.hr-HR.pri
-
About/langs/Windows.Data.TimeZones.hu-HU.pri
-
About/langs/Windows.Data.TimeZones.it-IT.pri
-
About/langs/Windows.Data.TimeZones.ja-JP.pri
-
About/langs/Windows.Data.TimeZones.ko-KR.pri
-
About/langs/Windows.Data.TimeZones.lt-LT.pri
-
About/langs/Windows.Data.TimeZones.lv-LV.pri
-
About/langs/Windows.Data.TimeZones.nb-NO.pri
-
About/langs/Windows.Data.TimeZones.nl-NL.pri
-
About/langs/Windows.Data.TimeZones.pl-PL.pri
-
About/langs/Windows.Data.TimeZones.pt-BR.pri
-
About/langs/Windows.Data.TimeZones.pt-PT.pri
-
About/langs/Windows.Data.TimeZones.ro-RO.pri
-
About/langs/Windows.Data.TimeZones.ru-RU.pri
-
About/langs/Windows.Data.TimeZones.sk-SK.pri
-
About/langs/Windows.Data.TimeZones.sl-SI.pri
-
About/langs/Windows.Data.TimeZones.sr-Latn-RS.pri
-
About/langs/Windows.Data.TimeZones.sv-SE.pri
-
About/langs/Windows.Data.TimeZones.th-TH.pri
-
About/langs/Windows.Data.TimeZones.tr-TR.pri
-
About/langs/Windows.Data.TimeZones.uk-UA.pri
-
About/langs/Windows.Data.TimeZones.zh-CN.pri
-
About/langs/Windows.Data.TimeZones.zh-HK.pri
-
About/langs/Windows.Data.TimeZones.zh-TW.pri
-
About/msched.admx.xml
-
About/nca.admx
-
About/pca.admx
-
About/ru-RU/ActiveXInstallService.adml.xml
-
About/ru-RU/AddRemovePrograms.adml.xml
-
About/ru-RU/AppCompat.adml.xml
-
About/ru-RU/AppXRuntime.adml.xml
-
About/ru-RU/AppxPackageManager.adml.xml
-
About/ru-RU/AttachmentManager.adml.xml
-
About/ru-RU/AuditSettings.adml.xml
-
About/ru-RU/AutoPlay.adml.xml
-
About/ru-RU/Biometrics.adml.xml
-
About/ru-RU/Bits.adml.xml
-
About/ru-RU/Bits.admx
-
About/ru-RU/CEIPEnable.adml.xml
-
About/ru-RU/COM.adml.xml
-
About/ru-RU/CipherSuiteOrder.adml.xml
-
About/ru-RU/Conf.adml.xml
-
About/ru-RU/Conf.admx
-
About/ru-RU/ControlPanel.adml.xml
-
About/ru-RU/ControlPanelDisplay.adml.xml
-
About/ru-RU/ControlPanelDisplay.admx
-
About/ru-RU/Cpls.adml.xml
-
About/ru-RU/CredSsp.adml.xml
-
About/ru-RU/CredSsp.admx
-
About/ru-RU/CredUI.adml.xml
-
About/ru-RU/CredentialProviders.adml.xml
-
About/ru-RU/Croatian.ini
-
About/ru-RU/CtrlAltDel.adml.xml
-
About/ru-RU/DCOM.adml.xml
-
About/ru-RU/DFS.adml.xml
-
About/ru-RU/DWM.adml.xml
-
About/ru-RU/Danish.ini
-
About/ru-RU/Desktop.adml.xml
-
About/ru-RU/Desktop.admx
-
About/ru-RU/DeviceCompat.adml.xml
-
About/ru-RU/DeviceInstallation.adml.xml
-
About/ru-RU/DeviceInstallation.admx
-
About/ru-RU/DeviceSetup.adml.xml
-
About/ru-RU/DigitalLocker.adml.xml
-
About/ru-RU/DiskDiagnostic.adml.xml
-
About/ru-RU/DiskNVCache.adml.xml
-
About/ru-RU/DiskQuota.adml.xml
-
About/ru-RU/DistributedLinkTracking.adml.xml
-
About/ru-RU/DnsClient.adml.xml
-
About/ru-RU/EAIME.adml.xml
-
About/ru-RU/EarlyLaunchAM.adml
-
About/ru-RU/EdgeUI.adml.xml
-
About/ru-RU/EncryptFilesonMove.adml.xml
-
About/ru-RU/English.ini
-
About/ru-RU/ErrorReporting.adml.xml
-
About/ru-RU/EventForwarding.adml.xml
-
About/ru-RU/EventLog.adml.xml
-
About/ru-RU/EventViewer.adml.xml
-
About/ru-RU/Explorer.adml.xml
-
About/ru-RU/ExternalBoot.adml.xml
-
About/ru-RU/FileHistory.adml.xml
-
About/ru-RU/FileRecovery.adml.xml
-
About/ru-RU/FileRevocation.adml.xml
-
About/ru-RU/FileServerVSSProvider.adml.xml
-
About/ru-RU/FileSys.adml.xml
-
About/ru-RU/Finnish.ini
-
About/ru-RU/FolderRedirection.adml.xml
-
About/ru-RU/FramePanes.adml.xml
-
About/ru-RU/GameExplorer.adml.xml
-
About/ru-RU/Globalization.adml.xml
-
About/ru-RU/GroupPolicy-Server.adml.xml
-
About/ru-RU/GroupPolicy.adml.xml
-
About/ru-RU/GroupPolicyPreferences.adml.xml
-
About/ru-RU/Hebrew.ini
-
About/ru-RU/Help.adml.xml
-
About/ru-RU/HelpAndSupport.adml.xml
-
About/ru-RU/Hungarian.ini.ps1
-
About/ru-RU/ICM.adml.xml
-
About/ru-RU/IIS.adml.xml
-
About/ru-RU/Indonesian.ini
-
About/ru-RU/InetRes.adml.xml
-
About/ru-RU/InkWatson.adml.xml
-
About/ru-RU/Japanese.ini
-
About/ru-RU/KDC.adml.xml
-
About/ru-RU/Kazakh.ini
-
About/ru-RU/Kerberos.adml.xml
-
About/ru-RU/Korean.ini.ps1
-
About/ru-RU/Kurdish.ini
-
About/ru-RU/LanmanServer.adml.xml
-
About/ru-RU/LeakDiagnostic.adml.xml
-
About/ru-RU/LinkLayerTopologyDiscovery.adml.xml
-
About/ru-RU/LocationProviderAdm.adml.xml
-
About/ru-RU/Logon.adml.xml
-
About/ru-RU/MMC.adml.xml
-
About/ru-RU/MMCSnapIns2.adml.xml
-
About/ru-RU/MMCSnapins.adml.xml
-
About/ru-RU/MSDT.adml.xml
-
About/ru-RU/MSI.adml.xml
-
About/ru-RU/MediaCenter.adml.xml
-
About/ru-RU/MobilePCMobilityCenter.adml.xml
-
About/ru-RU/MobilePCPresentationSettings.adml.xml
-
About/ru-RU/Msi-FileRecovery.adml.xml
-
About/ru-RU/NAPXPQec.adml.xml
-
About/ru-RU/NCSI.adml.xml
-
About/ru-RU/Netlogon.adml.xml
-
About/ru-RU/NetworkConnections.adml.xml
-
About/ru-RU/NetworkIsolation.adml
-
About/ru-RU/NetworkProjection.adml.xml
-
About/ru-RU/Norwegian.ini
-
About/ru-RU/OfflineFiles.adml.xml
-
About/ru-RU/P2P-pnrp.adml.xml
-
About/ru-RU/ParentalControls.adml.xml
-
About/ru-RU/PeerToPeerCaching.adml.xml
-
About/ru-RU/PenTraining.adml.xml
-
About/ru-RU/PerformanceDiagnostics.adml.xml
-
About/ru-RU/PerformancePerftrack.adml.xml
-
About/ru-RU/Power.adml.xml
-
About/ru-RU/PowerShellExecutionPolicy.adml.xml
-
About/ru-RU/PreviousVersions.adml.xml
-
About/ru-RU/Printing.adml.xml
-
About/ru-RU/Printing2.adml.xml
-
About/ru-RU/Programs.adml.xml
-
About/ru-RU/PswdSync.adml.xml
-
About/ru-RU/QOS.adml.xml
-
About/ru-RU/RPC.adml.xml
-
About/ru-RU/RacWmiProv.adml.xml
-
About/ru-RU/Radar.adml.xml
-
About/ru-RU/ReAgent.adml.xml
-
About/ru-RU/Reliability.adml.xml
-
About/ru-RU/RemoteAssistance.adml.xml
-
About/ru-RU/RemovableStorage.adml.xml
-
About/ru-RU/Scripts.adml.xml
-
About/ru-RU/Securitycenter.adml.xml
-
About/ru-RU/Sensors.adml.xml
-
About/ru-RU/ServerManager.adml.xml
-
About/ru-RU/Servicing.adml.xml
-
About/ru-RU/SettingSync.adml.xml
-
About/ru-RU/Setup.adml.xml
-
About/ru-RU/SharedFolders.adml.xml
-
About/ru-RU/Sharing.adml.xml
-
About/ru-RU/Shell-CommandPrompt-RegEditTools.adml.xml
-
About/ru-RU/ShellWelcomeCenter.adml.xml
-
About/ru-RU/Sidebar.adml.xml
-
About/ru-RU/SimpChinese.ini
-
About/ru-RU/Sinhala.ini
-
About/ru-RU/SkyDrive.adml.xml
-
About/ru-RU/Slovak.ini
-
About/ru-RU/Smartcard.adml.xml
-
About/ru-RU/Snis.adml.xml
-
About/ru-RU/Snmp.adml.xml
-
About/ru-RU/SoundRec.adml.xml
-
About/ru-RU/StartMenu.adml.xml
-
About/ru-RU/Swedish.ini
-
About/ru-RU/SystemRestore.adml.xml
-
About/ru-RU/TPM.adml.xml
-
About/ru-RU/TabletPCInputPanel.adml.xml
-
About/ru-RU/TabletShell.adml.xml
-
About/ru-RU/TaskScheduler.adml.xml
-
About/ru-RU/Taskbar.adml.xml
-
About/ru-RU/TerminalServer-Server.adml.xml
-
About/ru-RU/TerminalServer.adml.xml
-
About/ru-RU/Thai.ini
-
About/ru-RU/Thumbnails.adml.xml
-
About/ru-RU/TouchInput.adml.xml
-
About/ru-RU/TradChinese.ini
-
About/ru-RU/Ukrainian.ini
-
About/ru-RU/UserProfiles.adml.xml
-
About/ru-RU/UyghurLatin.ini
-
About/ru-RU/Uzbek.ini
-
About/ru-RU/Vietnamese.ini
-
About/ru-RU/VolumeEncryption.adml.xml
-
About/ru-RU/W32Time.adml.xml
-
About/ru-RU/WCM.adml.xml
-
About/ru-RU/WDI.adml.xml
-
About/ru-RU/WPN.adml.xml
-
About/ru-RU/WinCal.adml.xml
-
About/ru-RU/WinInit.adml.xml
-
About/ru-RU/WinLogon.adml.xml
-
About/ru-RU/Windows.Data.TimeZones.ar-SA.pri
-
About/ru-RU/Windows.Data.TimeZones.bg-BG.pri
-
About/ru-RU/Windows.Data.TimeZones.cs-CZ.pri
-
About/ru-RU/Windows.Data.TimeZones.da-DK.pri
-
About/ru-RU/Windows.Data.TimeZones.de-DE.pri
-
About/ru-RU/Windows.Data.TimeZones.el-GR.pri
-
About/ru-RU/Windows.Data.TimeZones.en-GB.pri
-
About/ru-RU/Windows.Data.TimeZones.en-US.pri
-
About/ru-RU/Windows.Data.TimeZones.es-ES.pri
-
About/ru-RU/Windows.Data.TimeZones.et-EE.pri
-
About/ru-RU/Windows.Data.TimeZones.fi-FI.pri
-
About/ru-RU/Windows.Data.TimeZones.fr-FR.pri
-
About/ru-RU/Windows.Data.TimeZones.he-IL.pri
-
About/ru-RU/Windows.Data.TimeZones.hr-HR.pri
-
About/ru-RU/Windows.Data.TimeZones.hu-HU.pri
-
About/ru-RU/Windows.Data.TimeZones.it-IT.pri
-
About/ru-RU/Windows.Data.TimeZones.ja-JP.pri
-
About/ru-RU/Windows.Data.TimeZones.ko-KR.pri
-
About/ru-RU/Windows.Data.TimeZones.lt-LT.pri
-
About/ru-RU/Windows.Data.TimeZones.lv-LV.pri
-
About/ru-RU/Windows.Data.TimeZones.nb-NO.pri
-
About/ru-RU/Windows.Data.TimeZones.nl-NL.pri
-
About/ru-RU/Windows.Data.TimeZones.pl-PL.pri
-
About/ru-RU/Windows.Data.TimeZones.pt-BR.pri
-
About/ru-RU/Windows.Data.TimeZones.pt-PT.pri
-
About/ru-RU/Windows.Data.TimeZones.ro-RO.pri
-
About/ru-RU/Windows.Data.TimeZones.ru-RU.pri
-
About/ru-RU/Windows.Data.TimeZones.sk-SK.pri
-
About/ru-RU/Windows.Data.TimeZones.sl-SI.pri
-
About/ru-RU/Windows.Data.TimeZones.sr-Latn-RS.pri
-
About/ru-RU/Windows.Data.TimeZones.sv-SE.pri
-
About/ru-RU/Windows.Data.TimeZones.th-TH.pri
-
About/ru-RU/Windows.Data.TimeZones.tr-TR.pri
-
About/ru-RU/Windows.Data.TimeZones.uk-UA.pri
-
About/ru-RU/Windows.Data.TimeZones.zh-CN.pri
-
About/ru-RU/Windows.Data.TimeZones.zh-HK.pri
-
About/ru-RU/Windows.Data.TimeZones.zh-TW.pri
-
About/ru-RU/Windows.adml.xml
-
About/ru-RU/WindowsAnytimeUpgrade.adml.xml
-
About/ru-RU/WindowsBackup.adml.xml
-
About/ru-RU/WindowsColorSystem.adml.xml
-
About/ru-RU/WindowsConnectNow.adml.xml
-
About/ru-RU/WindowsDefender.adml
-
About/ru-RU/WindowsExplorer.adml.xml
-
About/ru-RU/WindowsFileProtection.adml.xml
-
About/ru-RU/WindowsFirewall.adml.xml
-
About/ru-RU/WindowsMail.adml.xml
-
About/ru-RU/WindowsMediaDRM.adml.xml
-
About/ru-RU/WindowsMediaPlayer.adml.xml
-
About/ru-RU/WindowsMessenger.adml.xml
-
About/ru-RU/WindowsProducts.adml.xml
-
About/ru-RU/WindowsRemoteManagement.adml.xml
-
About/ru-RU/WindowsRemoteShell.adml.xml
-
About/ru-RU/WindowsServer.adml.xml
-
About/ru-RU/WindowsUpdate.adml.xml
-
About/ru-RU/Winsrv.adml.xml
-
About/ru-RU/WordWheel.adml.xml
-
About/ru-RU/WorkFolders-Client.adml.xml
-
About/ru-RU/WorkplaceJoin.adml.xml
-
About/ru-RU/fthsvc.adml.xml
-
About/ru-RU/hotspotauth.adml.xml
-
About/ru-RU/iSCSI.adml.xml
-
About/ru-RU/msched.adml.xml
-
About/ru-RU/nca.adml
-
About/ru-RU/pca.adml.xml
-
About/ru-RU/sdiageng.adml.xml
-
About/ru-RU/srm-fci.adml.xml
-
About/ru-RU/tcpip.adml.xml
-
About/ru-RU/wlansvc.adml.xml
-
About/ru-RU/wwansvc.adml.xml
-
About/sdiageng.admx
-
About/srm-fci.admx
-
About/tcpip.admx.xml
-
About/wlansvc.admx.xml
-
About/wwansvc.admx.xml
-
Setup.exe.exe windows x86
Password: 1234
15940531cd353c80c835bc6da7fc9e23
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
VirtualAlloc
GetModuleFileNameW
GetCurrentThreadId
GetLastError
ExitProcess
GetProcessHeap
GetModuleHandleW
GetTickCount
lstrcmpiW
WriteConsoleW
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleHandleExW
GetCommandLineA
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
HeapSize
HeapReAlloc
CloseHandle
DecodePointer
shell32
ShellExecuteW
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ