General

  • Target

    2194688963fe0bc9762a619a49d00038bbd66bf4c90a84645abdd04bfb592cee.exe

  • Size

    66.2MB

  • MD5

    4b1d2180f614788cfc8ff5036e3baedf

  • SHA1

    457b08ef50b22600235dd6a049321510b8ab28eb

  • SHA256

    2194688963fe0bc9762a619a49d00038bbd66bf4c90a84645abdd04bfb592cee

  • SHA512

    7bff1cb24a2c7bb3ac3899c2244de001fad672d8507f20bd8be8389c9adb250eda0fb18aa5f9297962471dd7f0a5a322219d9b161b0fbe6126c70273fd0b23d6

  • SSDEEP

    1572864:zUICzDXev6RlcYuG1jsE4MaEWWMTm4jw414gy97aGzt:szBcY51js1MaE5p4jw8U7vzt

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 4 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 4 IoCs
  • Detects executables referencing combination of virtualization drivers 2 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2194688963fe0bc9762a619a49d00038bbd66bf4c90a84645abdd04bfb592cee.exe
    .exe windows:5 windows x86 arch:x86

    c552a31531df962b2298e689961d15c2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FileInfo.dll
    .dll windows:5 windows x86 arch:x86

    3a6d8acc41f04bc6deabddffc34af1cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/RCWidgetPlugin.dll
    .dll windows:5 windows x86 arch:x86

    1555149127b5a5bf9f369ac692b04244


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    216ff05c01e38b13fee53b7ace6b1894


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/upgrade_data.dll
    .dll windows:5 windows x86 arch:x86

    11e67fb6c0ba40a29d0d67dc345da7b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_17_/GameHall_2345/2345GameHall.exe
    .exe windows:5 windows x86 arch:x86

    8869276eb0e2a3f0de7742daa57a3c5b


    Code Sign

    Headers

    Imports

    Sections

  • $_17_/GameHall_2345/coral_extract.dll
    .dll windows:4 windows x86 arch:x86

    27078d36f37371b0a00fb89ab0cc3581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_21_/2345Explorer/User Data/Default/FaviconsV3
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/A5.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AA0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AB0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AD1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AE0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AF0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AG0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AI0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AJ1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AK1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AL2.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AP0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AQ0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AR0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AS0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AT1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AW0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AX0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/AY0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/B1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BA1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BB0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BC0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BD0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BE0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BF1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BG1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BH0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BI0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BJ0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BK0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/BL0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/C.ini
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/C3.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/D1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/E1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/G0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/H5.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/J0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/K1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/L0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/N2.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/O1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/P4.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/Q1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/R8.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/S1.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/U0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/V0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/W0.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/Y2.data
  • $_21_/2345Explorer/User Data/Default/TempOnlinedata/Z0.data
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/0A769DCC9171C2D65859358BC914EA0A.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/19B1E1822F836B48AD265D535871A4A2.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/1BD32688A1AFEE390A9BAA2F980F51C5.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/330AAA4A96A46A07C94ED7354B3FAB20.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/41230D9A154D1A90D5EB5C1AE37BB209.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/46E9C14A58C4EF7625A2C4C27E740B2B.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/62EC2E3F32D22D641A5244295E4A5163.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/67207B521013E18730BA6B7947CEB1F3.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/91739D10F91EBA1695D944B9001A8CA2.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/BB35D9B59F4CC10D8FA23899F8CBB054.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/D42116CE4D6D78DCE0A1927AF0B40F79.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/EECDB8AC8759019D28F5B7F20EE7CC69.jpg
    .jpg
  • $_21_/2345Explorer/User Data/Default/Thumbnails/v1/thumbnailslist
  • $_22_/clear_cache.exe
    .exe windows:5 windows x86 arch:x86

    3c953ec4645cac3aae6598d8162b94b0


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/10.25.0.21758.manifest
  • $_56_/2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    2c7bbba8114a1db482eb2a2ac8bfb8cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/2345Recommender.exe
    .exe windows:5 windows x86 arch:x86

    6c549a7e5ea7659b53cc36e030d81164


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/2345SafeCenterInstaller.exe
    .exe windows:5 windows x86 arch:x86

    a4ffcde1c017c903b0764627fb14a028


    Headers

    Imports

    Sections

  • $_56_/Assistant/2345InstUI.dll
    .dll windows:5 windows x86 arch:x86

    d08960554e6a4af4919731e20cdb9ead


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Assistant/2345MgrDLL.dll
    .dll windows:5 windows x86 arch:x86

    7a6a3930555239ace5e5dab44b8b53cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Assistant/2345MgrDLL64.dll
    .dll windows:5 windows x64 arch:x64

    3fd95ad73eafd552fa062e48ae42ef88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Assistant/HelperTool64.exe
    .exe windows:5 windows x64 arch:x64

    e8de56d93e2963aab9409153ff1f2b45


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/Assistant/OptimizeTool.dll
    .dll windows:5 windows x86 arch:x86

    db722b9c7af74f133b7f2e856b17512e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Assistant/Update_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    5a90065e89256fc0c3dd3aba7e651f68


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/Doctor/Doctor_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    e4c1335ecafebd3bc95066b3f7bdde46


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/Doctor/Downloader_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    3d06f7be9c2c3643f76a9c85f5d10ab1


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/Doctor/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Extensions/defalut_extensions.json
  • $_56_/Locales/zh-CN.pak
  • $_56_/Plugins/np-mswmp.dll
    .dll windows:6 windows x86 arch:x86

    6248bec906df433624b546a90f44da2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Swiftshader/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    9c6cc4c8576e643ce601643ae11eae27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    29d66a6c4f8ddc5483849ae0aaff3847


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Trident_core.dll
    .dll windows:5 windows x86 arch:x86

    4f59dedf4795de72de80d6fed4d1b583


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    c552a31531df962b2298e689961d15c2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/RCWidgetPlugin.dll
    .dll windows:5 windows x86 arch:x86

    1555149127b5a5bf9f369ac692b04244


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    216ff05c01e38b13fee53b7ace6b1894


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/un.FileInfo.dll
    .dll windows:5 windows x86 arch:x86

    f1c205497d3caf8a03d2452df400819b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Upgrade_2345Explorer.dll
    .dll windows:5 windows x86 arch:x86

    36bda4bde4f003982b0a87ed19b62785


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/Upgrade_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    50e06c5f7bd82f15774d6ae304483914


    Code Sign

    Headers

    Imports

    Sections

  • $_56_/WidevineCdm/LICENSE
  • $_56_/WidevineCdm/_platform_specific/win_x86/widevinecdm.dll
    .dll windows:5 windows x86 arch:x86

    fd6a744b08454b218d3c9d3b4aaae08e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/WidevineCdm/_platform_specific/win_x86/widevinecdm.dll.sig
  • $_56_/WidevineCdm/manifest.json
  • $_56_/capture.dll
    .dll windows:5 windows x86 arch:x86

    a8feb5dbfc27c550c84f2199a565c102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/chrome.dll
    .dll windows:5 windows x86 arch:x86

    d6307573bc51472e529f23447db19212


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/chrome_100_percent.pak
  • $_56_/chrome_200_percent.pak
  • $_56_/chrome_child.dll
    .dll windows:5 windows x86 arch:x86

    a8199befcef87452b8266a084c628dab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    151cb6cadd120048c706148baf11e472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/chrome_initial.dll
    .dll windows:5 windows x86 arch:x86

    8dea77f17fb04881e1c9b581de7dd1cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/chrome_watcher.dll
    .dll windows:5 windows x86 arch:x86

    5e88594997871a1f86d8786dbd7d8d97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/coral_extract.dll
    .dll windows:4 windows x86 arch:x86

    27078d36f37371b0a00fb89ab0cc3581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/courgette_dll.dll
    .dll windows:5 windows x86 arch:x86

    1d7c9bcc99e6aca371d12f2394c4a65a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/crashpad_helper.exe
    .exe windows:5 windows x86 arch:x86

    9f627af0c884015a05b789528a42a7e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/icudtl.dat
  • $_56_/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/libegl.dll
    .dll windows:5 windows x86 arch:x86

    43ced9fbedd4b8728f88a6f1c6b7c779


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/libglesv2.dll
    .dll windows:5 windows x86 arch:x86

    d3899d0b7f58f2ff0d0d1b102d59f8f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_56_/natives_blob.bin
    .js
  • $_56_/prefs.dat
  • $_56_/resources.pak
  • $_56_/snapshot_blob.bin
  • $_56_/v8_context_snapshot.bin
  • $_56_/welcome.ini
  • $_56_/widevinecdmadapter.dll
    .dll windows:5 windows x86 arch:x86

    e1657452eeece97e13fb59ec5f6e070a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/10.25.0.21758.manifest
  • $_65_/2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    2c7bbba8114a1db482eb2a2ac8bfb8cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/2345Recommender.exe
    .exe windows:5 windows x86 arch:x86

    6c549a7e5ea7659b53cc36e030d81164


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/Assistant/2345InstUI.dll
    .dll windows:5 windows x86 arch:x86

    d08960554e6a4af4919731e20cdb9ead


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Assistant/HelperTool64.exe
    .exe windows:5 windows x64 arch:x64

    e8de56d93e2963aab9409153ff1f2b45


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/Assistant/OptimizeTool.dll
    .dll windows:5 windows x86 arch:x86

    db722b9c7af74f133b7f2e856b17512e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Assistant/Update_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    5a90065e89256fc0c3dd3aba7e651f68


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/Doctor/Doctor_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    e4c1335ecafebd3bc95066b3f7bdde46


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/Doctor/Downloader_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    3d06f7be9c2c3643f76a9c85f5d10ab1


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/Doctor/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Locales/zh-CN.pak
  • $_65_/Plugins/np-mswmp.dll
    .dll windows:6 windows x86 arch:x86

    6248bec906df433624b546a90f44da2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Swiftshader/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    9c6cc4c8576e643ce601643ae11eae27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    29d66a6c4f8ddc5483849ae0aaff3847


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Trident_core.dll
    .dll windows:5 windows x86 arch:x86

    4f59dedf4795de72de80d6fed4d1b583


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    c552a31531df962b2298e689961d15c2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/RCWidgetPlugin.dll
    .dll windows:5 windows x86 arch:x86

    1555149127b5a5bf9f369ac692b04244


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    216ff05c01e38b13fee53b7ace6b1894


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/un.FileInfo.dll
    .dll windows:5 windows x86 arch:x86

    f1c205497d3caf8a03d2452df400819b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Upgrade_2345Explorer.dll
    .dll windows:5 windows x86 arch:x86

    36bda4bde4f003982b0a87ed19b62785


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/Upgrade_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    50e06c5f7bd82f15774d6ae304483914


    Code Sign

    Headers

    Imports

    Sections

  • $_65_/capture.dll
    .dll windows:5 windows x86 arch:x86

    a8feb5dbfc27c550c84f2199a565c102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/chrome.dll
    .dll windows:5 windows x86 arch:x86

    d6307573bc51472e529f23447db19212


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/chrome_100_percent.pak
  • $_65_/chrome_200_percent.pak
  • $_65_/chrome_child.dll
    .dll windows:5 windows x86 arch:x86

    a8199befcef87452b8266a084c628dab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    151cb6cadd120048c706148baf11e472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/chrome_initial.dll
    .dll windows:5 windows x86 arch:x86

    8dea77f17fb04881e1c9b581de7dd1cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/chrome_watcher.dll
    .dll windows:5 windows x86 arch:x86

    5e88594997871a1f86d8786dbd7d8d97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/coral_extract.dll
    .dll windows:4 windows x86 arch:x86

    27078d36f37371b0a00fb89ab0cc3581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/courgette_dll.dll
    .dll windows:5 windows x86 arch:x86

    1d7c9bcc99e6aca371d12f2394c4a65a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/crashpad_helper.exe
    .exe windows:5 windows x86 arch:x86

    9f627af0c884015a05b789528a42a7e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/icudtl.dat
  • $_65_/libcurl_x86.dll
    .dll windows:6 windows x86 arch:x86

    a996403d816908e79c3d6e0ea1cbe2e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/libegl.dll
    .dll windows:5 windows x86 arch:x86

    43ced9fbedd4b8728f88a6f1c6b7c779


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/libglesv2.dll
    .dll windows:5 windows x86 arch:x86

    d3899d0b7f58f2ff0d0d1b102d59f8f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_65_/natives_blob.bin
    .js
  • $_65_/prefs.dat
  • $_65_/resources.pak
  • $_65_/snapshot_blob.bin
  • $_65_/v8_context_snapshot.bin
  • $_65_/welcome.ini
  • $_65_/widevinecdmadapter.dll
    .dll windows:5 windows x86 arch:x86

    e1657452eeece97e13fb59ec5f6e070a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Protect/2345ExplorerAssistant.exe
    .exe windows:5 windows x86 arch:x86

    3a32cdb269f08988a7a8538dbd6dbcb3


    Code Sign

    Headers

    Imports

    Sections

  • Protect/2345MiniPage.exe
    .exe windows:5 windows x86 arch:x86

    3a32cdb269f08988a7a8538dbd6dbcb3


    Code Sign

    Headers

    Imports

    Sections

  • Protect/Helper_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    c6e8bd2e433bc48b6b25f594a9b816b5


    Code Sign

    Headers

    Imports

    Sections

  • Protect/Protect_2345Explorer.exe
    .exe windows:5 windows x86 arch:x86

    617a7ae13bb745c75afd4645e9dd037c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Protect/ServiceManager.exe
    .exe windows:5 windows x86 arch:x86

    28a1c7684512a57b333f057adfe2eee2


    Code Sign

    Headers

    Imports

    Sections

  • Protect/Tool_Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    e05a72d416d18dddb745b70f2a38d123


    Code Sign

    Headers

    Imports

    Sections

  • Protect/UpdateMain.dll
    .dll windows:5 windows x86 arch:x86

    8db164b89d27f5185d33915f855a0aea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Protect/coral_extract.dll
    .dll windows:4 windows x86 arch:x86

    27078d36f37371b0a00fb89ab0cc3581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Protect/courgette_dll.dll
    .dll windows:5 windows x86 arch:x86

    160ac172e0449b6b838fd4afd801d697


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/2345Hotnew.ico
  • Resource/2345Site.ico
  • Resource/AssocIcon/pdf.ico
  • User Data/Default/FaviconsV3
  • User Data/Default/Thumbnails/v1/0A769DCC9171C2D65859358BC914EA0A.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/19B1E1822F836B48AD265D535871A4A2.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/1BD32688A1AFEE390A9BAA2F980F51C5.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/330AAA4A96A46A07C94ED7354B3FAB20.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/41230D9A154D1A90D5EB5C1AE37BB209.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/46E9C14A58C4EF7625A2C4C27E740B2B.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/62EC2E3F32D22D641A5244295E4A5163.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/67207B521013E18730BA6B7947CEB1F3.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/91739D10F91EBA1695D944B9001A8CA2.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/BB35D9B59F4CC10D8FA23899F8CBB054.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/D42116CE4D6D78DCE0A1927AF0B40F79.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/EECDB8AC8759019D28F5B7F20EE7CC69.jpg
    .jpg
  • User Data/Default/Thumbnails/v1/thumbnailslist