General

  • Target

    2e6d4ef6b3b907daa592344949af0da8_JaffaCakes118

  • Size

    12.1MB

  • MD5

    2e6d4ef6b3b907daa592344949af0da8

  • SHA1

    11e3f87431007a5346dccad9913285360595b538

  • SHA256

    38f31fcc35363540a217d569beffb0b7d05ef0be3a01c75a383cd150e053a95f

  • SHA512

    f1de6fc0ad7ba8dcf097dacdee5d6cb294452ec1abee40f0f3cc12cabbd007376591448cd530a0b5892eb007ddf87a967cde7f34e55e4e3a63da161607b6fbe3

  • SSDEEP

    393216:yd/B/r085XAlzcJgeV97VYlfnWXFA8E0UXqCNoFB1CK:y9B/zVAlzU7Vf4fWXbHU691CK

Score
10/10
upx

Malware Config

Signatures

  • Nirsoft 64 IoCs
  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 202 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e6d4ef6b3b907daa592344949af0da8_JaffaCakes118
    .zip
  • NirLauncher.cfg
  • NirLauncher.exe
    .exe windows:4 windows x86 arch:x86

    850c27e1727382be95b1ec69b638e5d5


    Headers

    Imports

    Sections

  • NirSoft/alternatestreamview.chm
    .chm
  • NirSoft/alternatestreamview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/altstreamdump.chm
    .chm
  • NirSoft/altstreamdump.exe
    .exe windows:4 windows x86 arch:x86

    b4b7fafd6e36f5128620e372306bb5a0


    Headers

    Imports

    Sections

  • NirSoft/appcrashview.chm
    .chm
  • NirSoft/appcrashview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/astlog.chm
    .chm
  • NirSoft/astlog.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/awatch.chm
    .chm
  • NirSoft/awatch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/axhelper.chm
    .chm
  • NirSoft/axhelper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/batteryinfoview.chm
    .chm
  • NirSoft/batteryinfoview.exe
    .exe windows:4 windows x86 arch:x86

    f193786b6f6b74eac04875505ed73766


    Headers

    Imports

    Sections

  • NirSoft/bluescreenview.chm
    .chm
  • NirSoft/bluescreenview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/bluetoothcl.chm
    .chm
  • NirSoft/bluetoothcl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/bluetoothview.chm
    .chm
  • NirSoft/bluetoothview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/bulkfilechanger.chm
    .chm
  • NirSoft/bulkfilechanger.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/bulletspassview-x64.exe
    .exe windows:4 windows x64 arch:x64

    f44e0a89c41f9aa04ac20124edc55cf6


    Headers

    Imports

    Sections

  • NirSoft/bulletspassview.chm
    .chm
  • NirSoft/bulletspassview.exe
    .exe windows:4 windows x86 arch:x86

    37359bb891e69bb6fbbdd91b92683acc


    Headers

    Imports

    Sections

  • NirSoft/chromecacheview.chm
    .chm
  • NirSoft/chromecacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/chromecookiesview.chm
    .chm
  • NirSoft/chromecookiesview.exe
    .exe windows:4 windows x86 arch:x86

    f14e7174edd7ad544a0105a9e261d5c3


    Headers

    Imports

    Sections

  • NirSoft/chromehistoryview.chm
    .chm
  • NirSoft/chromehistoryview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/chromepass.chm
    .chm
  • NirSoft/chromepass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/cleanafterme.chm
    .chm
  • NirSoft/cleanafterme.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/clipboardic.chm
    .chm
  • NirSoft/clipboardic.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/cports-x64.exe
    .exe windows:4 windows x64 arch:x64

    39f53b54eda7d803ee47f8a9bc33255a


    Headers

    Imports

    Sections

  • NirSoft/cports.chm
    .chm
  • NirSoft/cports.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/cprocess.chm
    .chm
  • NirSoft/cprocess.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/csvfileview.chm
    .chm
  • NirSoft/csvfileview.exe
    .exe windows:4 windows x86 arch:x86

    ed77b0ba826f319a214b1e146c76924b


    Headers

    Imports

    Sections

  • NirSoft/ctie.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/customexplorertoolbar.chm
    .chm
  • NirSoft/customexplorertoolbar.exe
    .exe windows:4 windows x86 arch:x86

    23f95c7d0757954fdac7ade346b3e652


    Headers

    Imports

    Sections

  • NirSoft/deviceioview.chm
    .chm
  • NirSoft/deviceioview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/devmanview-x64.exe
    .exe windows:4 windows x64 arch:x64

    4412ddcbc3625353f579e4766ea5b8db


    Headers

    Imports

    Sections

  • NirSoft/devmanview.chm
    .chm
  • NirSoft/devmanview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/dialupass.chm
    .chm
  • NirSoft/dialupass.exe
    .exe windows:4 windows x86 arch:x86

    4e69ae93cb7605f9ffc0d08ac7061c12


    Headers

    Imports

    Sections

  • NirSoft/diskcountersview.chm
    .chm
  • NirSoft/diskcountersview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/disksmartview.chm
    .chm
  • NirSoft/disksmartview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/dllexp-x64.exe
    .exe windows:4 windows x64 arch:x64

    4f507192a2d8c9e5ac0b4032ec9074ba


    Headers

    Imports

    Sections

  • NirSoft/dllexp.chm
    .chm
  • NirSoft/dllexp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/dnsdataview.chm
    .chm
  • NirSoft/dnsdataview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/domainhostingview.chm
    .chm
  • NirSoft/domainhostingview.exe
    .exe windows:4 windows x86 arch:x86

    e57fe1bf84f55bd374d825e4228ae8b7


    Headers

    Imports

    Sections

  • NirSoft/dotnetresourcesextract.chm
    .chm
  • NirSoft/dotnetresourcesextract.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • NirSoft/downtester.chm
    .chm
  • NirSoft/downtester.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/driveletterview.chm
    .chm
  • NirSoft/driveletterview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/driverview-x64.exe
    .exe windows:4 windows x64 arch:x64

    251f775f50111c57da083c030ef3e26c


    Headers

    Imports

    Sections

  • NirSoft/driverview.chm
    .chm
  • NirSoft/driverview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/fastresolver.chm
    .chm
  • NirSoft/fastresolver.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/faview.chm
    .chm
  • NirSoft/faview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/filetypesman-x64.exe
    .exe windows:4 windows x64 arch:x64

    4869ad86f4ae6cb2f6ebac5568628516


    Headers

    Imports

    Sections

  • NirSoft/filetypesman.chm
    .chm
  • NirSoft/filetypesman.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/firefoxdownloadsview.chm
    .chm
  • NirSoft/firefoxdownloadsview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/flashcookiesview.chm
    .chm
  • NirSoft/flashcookiesview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/gdiview-x64.exe
    .exe windows:4 windows x64 arch:x64

    a2c813ba4eae0c7032c74aa507d626b5


    Headers

    Imports

    Sections

  • NirSoft/gdiview.chm
    .chm
  • NirSoft/gdiview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/hashmyfiles.chm
    .chm
  • NirSoft/hashmyfiles.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/heapmemview-x64.exe
    .exe windows:4 windows x64 arch:x64

    c358672c86ed03e6efa6323a64260d5a


    Headers

    Imports

    Sections

  • NirSoft/heapmemview.chm
    .chm
  • NirSoft/heapmemview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/htmlastext.chm
    .chm
  • NirSoft/htmlastext.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/htmldocedit.chm
    .chm
  • NirSoft/htmldocedit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/httpnetworksniffer-x64.exe
    .exe windows:4 windows x64 arch:x64

    7f7bd05bcc2bab4712258626a7372e3a


    Headers

    Imports

    Sections

  • NirSoft/httpnetworksniffer.chm
    .chm
  • NirSoft/httpnetworksniffer.exe
    .exe windows:4 windows x86 arch:x86

    4241cb4c97d65d7acda5472f6a156bea


    Headers

    Imports

    Sections

  • NirSoft/iconsext.chm
    .chm
  • NirSoft/iconsext.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/iecacheview.chm
    .chm
  • NirSoft/iecacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/iecv.chm
    .chm
  • NirSoft/iecv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/iehv.chm
    .chm
  • NirSoft/iehv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/iepv.chm
    .chm
  • NirSoft/iepv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/insideclipboard.chm
    .chm
  • NirSoft/insideclipboard.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/installedcodec.chm
    .chm
  • NirSoft/installedcodec.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/ipinfooffline.chm
    .chm
  • NirSoft/ipinfooffline.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/ipnetinfo.chm
    .chm
  • NirSoft/ipnetinfo.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/livecontactsview.chm
    .chm
  • NirSoft/livecontactsview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/lsasecretsdump-x64.exe
    .exe windows:4 windows x64 arch:x64

    31712a793e664db336e8f23298ac5bab


    Headers

    Imports

    Sections

  • NirSoft/lsasecretsdump.chm
    .chm
  • NirSoft/lsasecretsdump.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/lsasecretsview-x64.exe
    .exe windows:4 windows x64 arch:x64

    34a9dd886983c52c8285b2d04ff52639


    Headers

    Imports

    Sections

  • NirSoft/lsasecretsview.chm
    .chm
  • NirSoft/lsasecretsview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/macaddressview.chm
    .chm
  • NirSoft/macaddressview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mailpv.chm
    .chm
  • NirSoft/mailpv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/monitorinfoview.chm
    .chm
  • NirSoft/monitorinfoview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mozillacacheview.chm
    .chm
  • NirSoft/mozillacacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mozillahistoryview.chm
    .chm
  • NirSoft/mozillahistoryview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mspass.chm
    .chm
  • NirSoft/mspass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/muicacheview.chm
    .chm
  • NirSoft/muicacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mweather.chm
    .chm
  • NirSoft/mweather.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/myeventviewer-x64.exe
    .exe windows:4 windows x64 arch:x64

    836df98720fef4d7c9e5d2e0abbde9bf


    Headers

    Imports

    Sections

  • NirSoft/myeventviewer.chm
    .chm
  • NirSoft/myeventviewer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mylastsearch.chm
    .chm
  • NirSoft/mylastsearch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/myuninst.chm
    .chm
  • NirSoft/myuninst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/mzcv.chm
    .chm
  • NirSoft/mzcv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/netpass-x64.exe
    .exe windows:4 windows x64 arch:x64

    58ec7664724f0305903ea3dec0b21c2c


    Headers

    Imports

    Sections

  • NirSoft/netpass.chm
    .chm
  • NirSoft/netpass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/netresview.chm
    .chm
  • NirSoft/netresview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/netrouteview.chm
    .chm
  • NirSoft/netrouteview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/networktrafficview-x64.exe
    .exe windows:4 windows x64 arch:x64

    850612ba5180ff6707cb3a8c4f9d9aa0


    Headers

    Imports

    Sections

  • NirSoft/networktrafficview.chm
    .chm
  • NirSoft/networktrafficview.exe
    .exe windows:4 windows x86 arch:x86

    59e7d6afca7e163a3dd00f2c6fd6fbe8


    Headers

    Imports

    Sections

  • NirSoft/nircmd-x64.exe
    .exe windows:4 windows x64 arch:x64

    2271fb0e72b987d6901475578fc30d3e


    Headers

    Imports

    Sections

  • NirSoft/nircmd.chm
    .chm
  • NirSoft/nircmd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/nircmdc-x64.exe
    .exe windows:4 windows x64 arch:x64

    7a2b5f6c75c26148ecdbe1a2e4da17df


    Headers

    Imports

    Sections

  • NirSoft/nircmdc.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/nirsoft.nlp
  • NirSoft/nk2edit-x64.exe
    .exe windows:4 windows x64 arch:x64

    ed2791c98e03e8e97e1dcf7dd5184767


    Headers

    Imports

    Sections

  • NirSoft/nk2edit.chm
    .chm
  • NirSoft/nk2edit.exe
    .exe windows:4 windows x86 arch:x86

    29d193a1da5e9ff5d7f23c85b920fd62


    Headers

    Imports

    Sections

  • NirSoft/ntfslinksview.chm
    .chm
  • NirSoft/ntfslinksview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/officeins.chm
    .chm
  • NirSoft/officeins.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/openedfilesview-x64.exe
    .exe windows:4 windows x64 arch:x64

    10c4336aed0037309f52b4984e44d99d


    Headers

    Imports

    Sections

  • NirSoft/openedfilesview.chm
    .chm
  • NirSoft/openedfilesview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/openwithview.chm
    .chm
  • NirSoft/openwithview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/operacacheview.chm
    .chm
  • NirSoft/operacacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/operapassview.chm
    .chm
  • NirSoft/operapassview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/outlookattachview-x64.exe
    .exe windows:4 windows x64 arch:x64

    bc0020c4acc113d220047a91032e5247


    Headers

    Imports

    Sections

  • NirSoft/outlookattachview.chm
    .chm
  • NirSoft/outlookattachview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/outlookstatview-x64.exe
    .exe windows:4 windows x64 arch:x64

    630d23c44193ef691c28b4ad2c6acf00


    Headers

    Imports

    Sections

  • NirSoft/outlookstatview.chm
    .chm
  • NirSoft/outlookstatview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/passwordfox.chm
    .chm
  • NirSoft/passwordfox.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/passwordscan.chm
    .chm
  • NirSoft/passwordscan.exe
    .exe windows:4 windows x86 arch:x86

    9db653b90162f7ad98627f83ed7dae5d


    Headers

    Imports

    Sections

  • NirSoft/pcanypass.exe
    .exe windows:4 windows x86 arch:x86

    7d64b217b0f38990442d1e1015e0f716


    Headers

    Imports

    Sections

  • NirSoft/pinginfoview.chm
    .chm
  • NirSoft/pinginfoview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/processactivityview-x64.exe
    .exe windows:4 windows x64 arch:x64

    c00e386809a3cfd00ae9707bb95940f4


    Headers

    Imports

    Sections

  • NirSoft/processactivityview.chm
    .chm
  • NirSoft/processactivityview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/processthreadsview-x64.exe
    .exe windows:4 windows x64 arch:x64

    f5c8ab76dbc80a603e311a43b8e1933a


    Headers

    Imports

    Sections

  • NirSoft/processthreadsview.chm
    .chm
  • NirSoft/processthreadsview.exe
    .exe windows:4 windows x86 arch:x86

    441568d28b42a07be5dd486e6469e039


    Headers

    Imports

    Sections

  • NirSoft/produkey-x64.exe
    .exe windows:4 windows x64 arch:x64

    848eaaf3fcf4c9a578591ec48d844cca


    Headers

    Imports

    Sections

  • NirSoft/produkey.chm
    .chm
  • NirSoft/produkey.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/pstpassword.chm
    .chm
  • NirSoft/pstpassword.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/rdpv.chm
    .chm
  • NirSoft/rdpv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/recentfilesview.chm
    .chm
  • NirSoft/recentfilesview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/regdllview-x64.exe
    .exe windows:4 windows x64 arch:x64

    da12f1a4da521b30a3a743d81f08f84f


    Headers

    Imports

    Sections

  • NirSoft/regdllview.chm
    .chm
  • NirSoft/regdllview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/regfileexport.chm
    .chm
  • NirSoft/regfileexport.exe
    .exe windows:4 windows x86 arch:x86

    c9fe59507eb882c0bf74e8d9cf6c490b


    Headers

    Imports

    Sections

  • NirSoft/regfromapp-x64.exe
    .exe windows:4 windows x64 arch:x64

    2270087b59bebd02a2e44a8468eebd18


    Headers

    Imports

    Sections

  • NirSoft/regfromapp.chm
    .chm
  • NirSoft/regfromapp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/regscanner-x64.exe
    .exe windows:4 windows x64 arch:x64

    3795ad44c66c0bd8cae3b71724c9e83c


    Headers

    Imports

    Sections

  • NirSoft/regscanner.chm
    .chm
  • NirSoft/regscanner.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/resourcesextract.chm
    .chm
  • NirSoft/resourcesextract.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/routerpassview.chm
    .chm
  • NirSoft/routerpassview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/runasdate-x64.exe
    .exe windows:4 windows x64 arch:x64

    204b52f98958d03a34312e71000a39e3


    Headers

    Imports

    Sections

  • NirSoft/runasdate.chm
    .chm
  • NirSoft/runasdate.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/runfromprocess-x64.exe
    .exe windows:4 windows x64 arch:x64

    e0946da22801e96bc8cfee677bd856db


    Headers

    Imports

    Sections

  • NirSoft/runfromprocess.chm
    .chm
  • NirSoft/runfromprocess.exe
    .exe windows:4 windows x86 arch:x86

    b7bcdf7d8ba815a7e80b2a522927ed39


    Headers

    Imports

    Sections

  • NirSoft/safaricacheview.chm
    .chm
  • NirSoft/safaricacheview.exe
    .exe windows:4 windows x86 arch:x86

    73e6d57b236b9dd073539ba7c4d9fc0a


    Headers

    Imports

    Sections

  • NirSoft/safarihistoryview.chm
    .chm
  • NirSoft/safarihistoryview.exe
    .exe windows:4 windows x86 arch:x86

    8fb246c22c6a33aa28b3d598971ac541


    Headers

    Imports

    Sections

  • NirSoft/searchfilterview.chm
    .chm
  • NirSoft/searchfilterview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/searchmyfiles-x64.exe
    .exe windows:4 windows x64 arch:x64

    c74be53b7a971e5ebcb5b295a22b8d51


    Headers

    Imports

    Sections

  • NirSoft/searchmyfiles.chm
    .chm
  • NirSoft/searchmyfiles.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/seqdownload.chm
    .chm
  • NirSoft/seqdownload.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/serviwin.chm
    .chm
  • NirSoft/serviwin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/shellbagsview.chm
    .chm
  • NirSoft/shellbagsview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/shellmenunew.chm
    .chm
  • NirSoft/shellmenunew.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/shexview-x64.exe
    .exe windows:4 windows x64 arch:x64

    d4f2f2a17193a8243e5691e8a478c098


    Headers

    Imports

    Sections

  • NirSoft/shexview.chm
    .chm
  • NirSoft/shexview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/shman.chm
    .chm
  • NirSoft/shman.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/shmnview-x64.exe
    .exe windows:4 windows x64 arch:x64

    91b013eb3fc48a57866f2067307aa722


    Headers

    Imports

    Sections

  • NirSoft/shmnview.chm
    .chm
  • NirSoft/shmnview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/siteshoter.chm
    .chm
  • NirSoft/siteshoter.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/skypelogview.chm
    .chm
  • NirSoft/skypelogview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/smsniff-x64.exe
    .exe windows:4 windows x64 arch:x64

    818e1ae5c27bee046134567783fa577c


    Headers

    Imports

    Sections

  • NirSoft/smsniff.chm
    .chm
  • NirSoft/smsniff.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/sniffpass-x64.exe
    .exe windows:4 windows x64 arch:x64

    8092fa57bd81e27ad791a655c8c4d789


    Headers

    Imports

    Sections

  • NirSoft/sniffpass.chm
    .chm
  • NirSoft/sniffpass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/socketsniff.chm
    .chm
  • NirSoft/socketsniff.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/specialfoldersview-x64.exe
    .exe windows:4 windows x64 arch:x64

    3b31460215480e39235bcd2c70b1e24e


    Headers

    Imports

    Sections

  • NirSoft/specialfoldersview.chm
    .chm
  • NirSoft/specialfoldersview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/sysexp-x64.exe
    .exe windows:4 windows x64 arch:x64

    dbc815cacc53a8fde48e8b30ba93342c


    Headers

    Imports

    Sections

  • NirSoft/sysexp.chm
    .chm
  • NirSoft/sysexp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/tabletextcompare.chm
    .chm
  • NirSoft/tabletextcompare.exe
    .exe windows:4 windows x86 arch:x86

    09def4e2b331f7d926a8434e62c52f43


    Headers

    Imports

    Sections

  • NirSoft/urlprotocolview.chm
    .chm
  • NirSoft/urlprotocolview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/urlstringgrabber.chm
    .chm
  • NirSoft/urlstringgrabber.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/usbdeview-x64.exe
    .exe windows:4 windows x64 arch:x64

    1486b848e77fddbb631900d39c2cad8c


    Headers

    Imports

    Sections

  • NirSoft/usbdeview.chm
    .chm
  • NirSoft/usbdeview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/usblogview.chm
    .chm
  • NirSoft/usblogview.exe
    .exe windows:4 windows x86 arch:x86

    9346c5b035182f4dd97f329366df8d1c


    Headers

    Imports

    Sections

  • NirSoft/userassistview.chm
    .chm
  • NirSoft/userassistview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/userprofilesview.chm
    .chm
  • NirSoft/userprofilesview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/videocacheview.chm
    .chm
  • NirSoft/videocacheview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/vlmshlp.dll
    .dll windows:4 windows x86 arch:x86

    82df39c15007a3d7d0f3fc5593b5c5e3


    Headers

    Imports

    Exports

    Sections

  • NirSoft/vncpassview.chm
    .chm
  • NirSoft/vncpassview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/volumouse.chm
    .chm
  • NirSoft/volumouse.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wakemeonlan.chm
    .chm
  • NirSoft/wakemeonlan.exe
    .exe windows:4 windows x86 arch:x86

    f52b8380c20c59aa278f17fabd0f3f0d


    Headers

    Imports

    Sections

  • NirSoft/webbrowserpassview.chm
    .chm
  • NirSoft/webbrowserpassview.exe
    .exe windows:4 windows x86 arch:x86

    f85e88da76c4efb7cf662d3a474072bd


    Headers

    Imports

    Sections

  • NirSoft/webcamimagesave.chm
    .chm
  • NirSoft/webcamimagesave.exe
    .exe windows:4 windows x86 arch:x86

    dba532d483b5a52e2026a758563172d7


    Headers

    Imports

    Sections

  • NirSoft/webcookiessniffer-x64.exe
    .exe windows:4 windows x64 arch:x64

    fa3f1aa5677df9667b55a8951baeb763


    Headers

    Imports

    Sections

  • NirSoft/webcookiessniffer.chm
    .chm
  • NirSoft/webcookiessniffer.exe
    .exe windows:4 windows x86 arch:x86

    4de539633692096dc2cee8dac5dada33


    Headers

    Imports

    Sections

  • NirSoft/websitesniffer-x64.exe
    .exe windows:4 windows x64 arch:x64

    a647cafc5a7925d08120b07697170edb


    Headers

    Imports

    Sections

  • NirSoft/websitesniffer.chm
    .chm
  • NirSoft/websitesniffer.exe
    .exe windows:4 windows x86 arch:x86

    08ff1adb2434b22e29009b647f6e23fc


    Headers

    Imports

    Sections

  • NirSoft/webvideocap.chm
    .chm
  • NirSoft/webvideocap.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/whatinstartup.chm
    .chm
  • NirSoft/whatinstartup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/whatishang.chm
    .chm
  • NirSoft/whatishang.exe
    .exe windows:4 windows x86 arch:x86

    3866c26d992ce5e67ed28275b0b9bf7d


    Headers

    Imports

    Sections

  • NirSoft/whoiscl.chm
    .chm
  • NirSoft/whoiscl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/whoistd.chm
    .chm
  • NirSoft/whoistd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/whosip.chm
    .chm
  • NirSoft/whosip.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wincrashreport.chm
    .chm
  • NirSoft/wincrashreport.exe
    .exe windows:4 windows x86 arch:x86

    5598bf0febc30a33f87ecb4ae2d8eaa3


    Headers

    Imports

    Sections

  • NirSoft/winfontsview.chm
    .chm
  • NirSoft/winfontsview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/winlister.chm
    .chm
  • NirSoft/winlister.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/winprefetchview.chm
    .chm
  • NirSoft/winprefetchview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wirelesskeydump-x64.exe
    .exe windows:4 windows x64 arch:x64

    fafa48d963e489867c8b95333469424a


    Headers

    Imports

    Sections

  • NirSoft/wirelesskeydump.chm
    .chm
  • NirSoft/wirelesskeydump.exe
    .exe windows:4 windows x86 arch:x86

    0bbd3443a045e969cdd37a3f59a051c9


    Headers

    Imports

    Sections

  • NirSoft/wirelesskeyview-x64.exe
    .exe windows:4 windows x64 arch:x64

    179d0cd9f0bf4f2b3d2fc4e01a28c913


    Headers

    Imports

    Sections

  • NirSoft/wirelesskeyview.chm
    .chm
  • NirSoft/wirelesskeyview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wirelessnetconsole.chm
    .chm
  • NirSoft/wirelessnetconsole.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wirelessnetview.chm
    .chm
  • NirSoft/wirelessnetview.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NirSoft/wnetwatcher.chm
    .chm
  • NirSoft/wnetwatcher.exe
    .exe windows:4 windows x86 arch:x86

    17be1028810f6735d98695fa77e119f0


    Headers

    Imports

    Sections

  • NirSoft/wul.chm
    .chm
  • NirSoft/wul.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • autorun.inf