Analysis

  • max time kernel
    90s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    19/11/2024, 13:14

General

  • Target

    a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.exe

  • Size

    8.5MB

  • MD5

    0998e782949c5e0705fccd1be667a336

  • SHA1

    cd8817282ef0f227c8be3bcfdfbdc4a3c512ca9a

  • SHA256

    a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af

  • SHA512

    0812f01f96e7ec4cf5a5db68a920c22f516b3f1d17b2c0e9766fef0e2c17892ffb78745a535429a8832319f68e936fa2fba1069c4f7ea22eeb967da78ca3b1f6

  • SSDEEP

    196608:AD9R6QTQEGgjuyScd+bRR5q7lyhhVzYXyUeqRPy8e7eRp4:AD9YEGgjhSFH5KCaiUeeyPeRa

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 7 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 10 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 25 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.exe
    "C:\Users\Admin\AppData\Local\Temp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2748
    • C:\Users\Admin\AppData\Local\Temp\is-FJLSS.tmp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-FJLSS.tmp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.tmp" /SL5="$301C6,8014012,1145856,C:\Users\Admin\AppData\Local\Temp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2964
      • C:\Users\Admin\AppData\Local\Temp\is-TTR15.tmp\closeapp.exe
        "C:\Users\Admin\AppData\Local\Temp\is-TTR15.tmp\closeapp.exe" FindMyFiles
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:2792
      • C:\ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe
        "C:\ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe" -install
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1100
      • C:\Program Files (x86)\FindMyFiles\AbLauncher.exe
        "C:\Program Files (x86)\FindMyFiles\AbLauncher.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2192
        • C:\ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe
          "C:\ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbBugReporter.dll

    Filesize

    91KB

    MD5

    ffb415dd1a93bf8542ec38f4749a33ad

    SHA1

    195e03887ccbb4e8bc7d9035695123d453bc9ae4

    SHA256

    0a236c5a628a7759274b85353df4a3b5f60fb5160c14cf7d115093775760f40a

    SHA512

    bd2a2f994954aa00053f6409d3df440453323a8fdff890f8ec155bd256162fb45e25e43ddb551b11a6e8e5096357370186da7d04a64d00c7eb967e8ebf9af072

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbCommons.dll

    Filesize

    124KB

    MD5

    23e7ca3293036aac1b04a25976c36821

    SHA1

    4c79e4a0fafb8f20ab15067cf5ede09167f9850c

    SHA256

    f45e5f1beb6030857a180929940f72b0974f943475467c9fc220ea98d91d7cc8

    SHA512

    5839c9653ef211d5a0edd7b40e1deea2793f9fdf5e4c4cb136c1a63c787fe4f57dba340931257466e95d83baab56b9bb0e5a28a0d7b7b2ec3bf1fea6cb5fbbce

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbDefault.dll

    Filesize

    423KB

    MD5

    05036c8208cbddd6ae3fa5b2e8c07f44

    SHA1

    5110f8801e97d7f2c31e7c33f59f743cbeeba423

    SHA256

    74249769541f952618c5d99cb95eb99f6a68a6479dddf4f03f9edf278f7248e3

    SHA512

    62f2aafdbbce0a0aff212e5363217915404e4bc50f211ab343c62b6baf8afdbf03b7c2514687c82e378205ddc872676295c4aeb115d7346fd2bf67d111700f09

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbGui.dll

    Filesize

    296KB

    MD5

    f5d65f39de6120a749e6691641daebf3

    SHA1

    0a454a11fdec457b84d0738de637fc16a0c4925d

    SHA256

    df887b6e4df92da6dc3a8f99a881d0e17712fe7269f1ebc2fecc8b09773f648c

    SHA512

    d5336bad694f5b9c1c0ae28b8c358dc81ef14a2b1a71134414be92b85ce6f004127cd967648120d8b052eea289b604deb3154f231b09e12710419b9c2e55d17b

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbLanguage.dll

    Filesize

    49KB

    MD5

    6ce45d2ec46a3acc82227146cf37bd36

    SHA1

    e309b0367e389c15d0f78454ff3a90b00c68a327

    SHA256

    f07ec6a4ac14ef77b623247607ab616b2565d097b586fc61c73f99580784d26c

    SHA512

    a82593265318d4b9f67a2e0edd4f3fd79bc0a18f055336eeb5ecbbb8ae708e397142f83bb54e44f0ae43a9eb2da08147a6842174b3aeea5077759d54073841dd

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbLauncher.UpdateRoutines.Plugin.Base.dll

    Filesize

    14KB

    MD5

    09b8f03be416e59747d1944d622ec20c

    SHA1

    3bd8982f5f1cdfd6f01067027613fb0310eab24e

    SHA256

    2af7118f25d99492e1487399ccf740cce7a5c6d02357cc4b0058c7d0e0374d88

    SHA512

    585c405313a16ff57b866e32e3309856dc952b168f016b6e10b3040307134166fabe7d4948bb6d2b614cce3d66cca3d98d7f96a1a402b2cf8982f304c7190b57

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbLog.Commons.dll

    Filesize

    14KB

    MD5

    3c37b92ed22524ab90b3b78c43076f8c

    SHA1

    5e6919125d3773be2faf5805c6ca3d19a7952406

    SHA256

    d94a52f99da0232b520060a17c85c6be06fb14de11fb0e2cb8e1a4a8ead37a25

    SHA512

    cb8716df57a7d417e3c6248b689425e27ef8240f1233c224f35bb3f052e361a446f151031e6a7dfecc2b4a8ff22de7c2de15e316506854f27f6e56bd0a2ad8f7

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbLog.dll

    Filesize

    31KB

    MD5

    d74f21180a66b81c354fd65279530ea8

    SHA1

    1c88e2431e85ed53a5998b6b39223edd452d3d95

    SHA256

    9688607dd13af582091f10382220772880db4db1aae3e92ecd6bf6e3c4ea0026

    SHA512

    e610e6ebca3e367c5f121e0c3f33519896dec1a47c7f53e5bc66a59ad65bd1d55a998ffdaa0febf56653699ad7da0e866535f55495593093ba8a7bb2f4ea4a60

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\AbRegistration.dll

    Filesize

    240KB

    MD5

    73dfb47f90193cf85050090f72de270e

    SHA1

    091b2ae8752facee3dd896c9d84b1a1c8f73da1c

    SHA256

    984bdb343fbbd5a6666a45caa56c5bff5810a995fead714dc9562dc486ba43c7

    SHA512

    06bf5786ae759271d9c3356a18026cfc62ff77372ff443d704293600a9ec666424cc7e95fd0af7ef094a6531f24762a3f8207618b8033cfa202a63681c203d11

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.cs.lang

    Filesize

    2KB

    MD5

    892cf81d8503c82688f5bc2fa6368aba

    SHA1

    cafe09c413fba14d6bd397caf648cfc2ad8cc70a

    SHA256

    2331a3e1a76d5eb5af54fcf9eec5ef6c62193f04946abfee4b6d8fe87377a724

    SHA512

    53d162d1ab10af452a70f2a2a09e13f32f1f5f1fcf2de5383ac9b3f86ed678be38ff0f4d0f555dd0355c802ffe14166bb86c464afef5b9dfeaf423c1a076dbbb

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.da.lang

    Filesize

    2KB

    MD5

    48282d5d0ae3804d8494787653d11cf5

    SHA1

    f275f428c492aa5ddf66d99ac067450ef216a572

    SHA256

    a45461e4bd5630f6c0d2c827307a34e6f84c08c033880f555673e084f1f12326

    SHA512

    967191fad0876973d3d7a027dfcf4f1cef7bea880a2ebc4e13b9314804b9b83797d183d6bbb5ea43ea036afa868a1c2b0b5f8f0ae54b61988722a71b30cef4b4

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.de.lang

    Filesize

    2KB

    MD5

    3e6136860bc341e8ccd3ad75c6785243

    SHA1

    bc57505f89d2562d4cb108dde1e6c8483aa3f1cd

    SHA256

    2947ae7a0a0b1f01794c24d888d4043f307b9dfe3d9d67ad60f94d4a8f23fe49

    SHA512

    1b25b6463b7f2cdb5bbf98bf6dc76fe1464aac0cec144c11bd5167262519524e04b916f1ae10bd5f8a22941f67fe7aad71dbe26feba0ad73398ba319b4efa4e9

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.el.lang

    Filesize

    3KB

    MD5

    1f963282698ecab57139c3070f9859ab

    SHA1

    6a6f99c8ea1b69d3853a9c10f7fc20e2e51e5c5d

    SHA256

    220708d0854a328c4648aa553a6de97f3230e9e8e5d78071361300261723d1e7

    SHA512

    abb2d285d9dbf6cf5ee4535bf4db8dfdb33cf14f2b7b25bd7681d32bd243256487a5d387518ced04fe0a72aabc9975183b7f538203134f484e824257c981f6f0

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.en.lang

    Filesize

    2KB

    MD5

    42c705eb61c55afc8555969bbd5c5641

    SHA1

    4561490aa99739fc6e69b0d697a894192f854af7

    SHA256

    7ad8cf0b3cc7ec308b345b14f417396baed95418486e3e07e823e1de1eadd3a4

    SHA512

    fcd8d6d1d4ebe0aa93548314cf93a72f4ca886bfcc768d8c197424880978e05533b0f655c1e88d1e4c12ad3b3edd0106381331317493e4a87d98a37d4039f493

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.es-ar.lang

    Filesize

    2KB

    MD5

    6d8005a391ac5a80dc362fc890eb1441

    SHA1

    5584cb4aa4afc51816149aed43b2699f54b2e950

    SHA256

    8929e6401538219fce4e4d6d94bdf2f759646a0e02c252aee171c1bfce547e71

    SHA512

    4ce0c227bd54fcdfd0790436390cd671f3346a558d9e757161d980daf140703f0fb1c7e148fb426c747857622be0913f4228f7184a845d9dc688cd68ef4287a5

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.es-mx.lang

    Filesize

    1KB

    MD5

    04bf85db4c87e6c9538a39be5494c0cd

    SHA1

    3554bf01e347db6d2d6245262e362fa59b54baae

    SHA256

    921d5679509738f6f8eacfa525321b0ceb6d43f6d22b2bd0480dc72e2cade846

    SHA512

    1fea7f4b115610a5c91e1f78601069cf307a3d71c2fd38b8fd6d61a26292c965089087cb1a130a88e1f5d5fbbadfa489915f0081621a6a3ff2b1a0be95b8dd6b

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.es.lang

    Filesize

    2KB

    MD5

    46a5aff0e8bed38c71d491701b22b268

    SHA1

    60f1e7fa1fd39a239e71a3739374e7e6cff97bd9

    SHA256

    fa9ed5b24030cb443314f3b651e1a4d15ab8132495b6319d0047186d24f6d39a

    SHA512

    eebfbb19e11d3bae66aa7a89d5b01ce6fd903f58897d7ec5efa70abfc41edf20f751392f3bfbe0a462a04104ccc47e41238719c1767906b617e617c2cdc932ed

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.fr.lang

    Filesize

    2KB

    MD5

    08d142f3d4c9ff7cbae29d40bf396c4e

    SHA1

    2b75f366698c831486004d4e363a27f94e41b0a0

    SHA256

    75ff5b09f1aadc9fa98c8de5b073374d6fbede1acc1a316c1a71fe4a0e97e9bb

    SHA512

    b4f690575685c7ddb73ed8deb2cbfd29fdd0fdaab0347327c8b774713c74fb82203aa2d77049d4802f2784fcc32f5ea835af1a89d64e67831dc0a7df3059a568

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.hu.lang

    Filesize

    2KB

    MD5

    e5ae460b0222755bab2238bc3a38b57c

    SHA1

    c8d45682bb0ffcd0c1d6bb318d2aaaf1ed2916e3

    SHA256

    eb72ed7f02fc509e06e89afeba17f4143cf1c63fd2ea00595a2316035837b069

    SHA512

    194b4924248c0d3f2306d88979625b45ad077f607755bd2c4cef12afce4bb28708c4b3561b3847cba510247434c40a40ce1a34ae90e5a037cbeaf93158fa4d16

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.it.lang

    Filesize

    2KB

    MD5

    6a122251d9e419107b1c9f88195d2a95

    SHA1

    77f3052cc8d575ca56062b543953a0c627a59b33

    SHA256

    49733224c63c16ec5b1657786d5aad67a208d4dbcef07e9a8e384dcfdf1a14f9

    SHA512

    def05bc4d171ede129258858ad1780a040520a6f7a87745c62849a5fa2a7daa1144b391ce6bb010db2dd66b81616c43a90284816b73b76af82f6e75e564b95dc

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.ja.lang

    Filesize

    2KB

    MD5

    70fb3d95355af199812185032fa185d6

    SHA1

    84b55ec4deaab568c54b49090b77c610828e845a

    SHA256

    6115956a02f0fb171c45d92e989f0142f950fc1cc0922dd979f78a6676c277cc

    SHA512

    2694020a7ce8036b5e07ef6c06af4e7b21c5ace1efdb6637c3e22776cf5796203ce73706e7f6c7e5bc23a9866d5076e4d42ed87b69192d487b6f894040eb8223

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.ko.lang

    Filesize

    2KB

    MD5

    4e9e64f74e7c247108edfb643e5b4f39

    SHA1

    e1ac8649067a84ce67c9e3bc2b6dab55982b83fa

    SHA256

    979f90f37f26998886b4e8a5103ad98f80ecc6fd1b93ad5c5fcf1e719471e84d

    SHA512

    7a0a8d09d9cc1eba26111aba86d0e4ec2857f6fc3aec159a67a18d747546bd52e7150538786cea617fbafa23a12665050beb0fbffe95b0609dd476451a043729

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.nb.lang

    Filesize

    2KB

    MD5

    8f3e79b4e47832322466d3c89e436af0

    SHA1

    063e4ca5348bc32cb2266fc41075236ff3a49f4a

    SHA256

    a0de80fb8e85f204b3c3947bf6138eabc150d5e767f94ab66a35d763fc625692

    SHA512

    9da79d418e53b499ce8b4bcbd859eb91fae4ab4c21ea5ffb0c8a2bb3afb476d1ca39cd19e4b46436d9d514a6a37581e30d76d3f306945a58383dc2411b596426

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.nl.lang

    Filesize

    2KB

    MD5

    c7130bb52b7a50d0280f05f25ed61749

    SHA1

    6d6e161a378aa16e56f60b306e3c048535ea9b58

    SHA256

    15ee1016ad7dfa4152e95b866fa8aa268306a630b25f0eb2246873492595ac8a

    SHA512

    f8fa81ca4bf331097574e44d16d2a9420c2e2028d597f5dc0579ea39a6d6cba4a58bac09b3665eed4dd847f751b8a298dbe704f40479c32de8bb1011b72c6961

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.pl.lang

    Filesize

    2KB

    MD5

    cdc72ebf3e33fbab4174bd18c9eca653

    SHA1

    4cb239bc034001ad33c32a8c40a585893ba25c99

    SHA256

    98e22858626932cd93f5f4e2a404b58549aa671128df320959ddbe7d359414c0

    SHA512

    fb5080318963f94c4c9d4cce46787b83937bc88f4f215d8ecebe2b6e96863d861fc6700c1eaf472d6b18ab05a56b46f81779f63674cc0d25c65da16a2a77a894

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.pt-br.lang

    Filesize

    2KB

    MD5

    81310fbe70d8f8c50e25ffc436f9b600

    SHA1

    46354f01481eb979d2740b1e726ea607315295ad

    SHA256

    dce86b92b78f372f726847adddb82b5e13eb4cff46341a6dca38f35392424548

    SHA512

    fe4cf411b6cf982b46e452300ca885d75750eda3c56b42728feb0c4a3c84cbf634c08146ac59b6bba30d3df42d1ff5eecdf129b6d8399a7039d93419c3147d43

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.ru.lang

    Filesize

    3KB

    MD5

    9068f01c994dc272f8c6b22e5563ad66

    SHA1

    8978dafb7931aba98094d33ed004a89ac0ec48da

    SHA256

    7da442c4bc70ba35a7a7a828b285065ffb0ee7f6815ff38532150bc792688e23

    SHA512

    733a71314c8e4c456fa493cac20f12f432b6d9124353f4901bbdc8e40092a06e244185f56c991c6f0f221351b26c26d6831322c8c6fadbe622e682996f047329

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.sk.lang

    Filesize

    2KB

    MD5

    8f6db6475da415f02405a2c7b97d953d

    SHA1

    8c7f76902b16e2475dabb0c03d8ee0ef8510fe89

    SHA256

    d19d4c149667da10718afc36385291545172b6686c4246e12e6b8adc06f227a8

    SHA512

    ace8bef33393429cce4e1da209ab87a2d1da831994d35a204e3c68b638f4f9c1c08ff7a7c2b5d9b4b10eb50ee9ae8b35301a52ac97099a17fc3918a6e7a2e2b7

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.sv.lang

    Filesize

    1KB

    MD5

    77bd9249919fcb14021d74008081c8f3

    SHA1

    7a33912ac574aadf79da4098bad02e9e617a95ec

    SHA256

    154b8752d59d015b8ae247d838e67f74d6de05bca2b57be53c4bd861ddb439f7

    SHA512

    f71f7f2087b13412b627cbd25714347e2617b195f0444bedef296eb8f9892d7a62e91f83b399a42bac56899d8ca8182c321b6c5ff307c87a9d605960d2751d16

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.tr-tr.lang

    Filesize

    2KB

    MD5

    2870193c262d90ebef4fe8e8dd41c0bd

    SHA1

    4ef0294358bb157ad8e65aff4813317aee45acf0

    SHA256

    aa9b6bff3bfad946e9b4c4bf6b661315ec982e9a49b5962d974ba25582d1616a

    SHA512

    72ab7cded3fdda36ebf33e601ea19a5275aaf0838e10caef95eaf0f72311c07205dd867a711a54087ccb8807dafcb691b5f48a8c0629fff278b7f708a4abacf5

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.tr.lang

    Filesize

    2KB

    MD5

    914b2860029ed27935cf93046ef2c19f

    SHA1

    2f183f43df02dfe948265fb06c341f4f8c70e879

    SHA256

    7dab0308d5f56b3d748ce878ae080f61726ec1e94f8ecd8043683e0970d77d26

    SHA512

    d7238576618763a192e3f0a2bc4de9f1f7268202a70e294fd762522f07ec531608e2bdd115ea3416c16213b95ffbe61f1eeadd930872b0ab117e8dadc2e7a01e

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.uk.lang

    Filesize

    3KB

    MD5

    ba269edd94d46bfc92bb6c1ca9c627f8

    SHA1

    7d67499c2ba7810df9eb8548e65f53a2f78c33b4

    SHA256

    f0ae4ddef41631d9a0f9e6b91701478864368881149491ab0b7f7e955119a289

    SHA512

    63ff12e0435f134c608111710413b202a4cf1795f4647063b44b7794d2ef24b79570b9f49c700946e531ead1f046f66aa1e97adf9fd4d6d22e3f4f31eb6e7b1b

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbBugReporter.zh.lang

    Filesize

    2KB

    MD5

    92a4750a9cf239ec2930ab4395dc5922

    SHA1

    53a0f608f834a14bcb05ee59934fb2dc18589eeb

    SHA256

    a0850825d5c99af884986e334e49baf8a630c4e20a6420c8bcd7b449a9dedf9d

    SHA512

    4578d3ede4aa93d674cc2691b7b12a6e93a34c3461da8496994b208a326a7dec95c5fa280dbd12be0749a4338d87ae0377edb821937a267fb3e3eab3328c3a8d

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.cs.lang

    Filesize

    14KB

    MD5

    d3d49808709804fb84692065740297d2

    SHA1

    0c29d88c570a3d64f772c839b24a9d758bb09821

    SHA256

    152f20aa04ea4a3bec86141571c4f2ddc5475255b0eb36483590d168ff1d024f

    SHA512

    87843423eb5f8709ef5c7a4f362a2cfa0b4f6961fb2a5a92edca4a825d6f1ab7a5f62d2cba37e0aa7ac90d4abd666c548c80cf6b19e0f644e559834221c6f7b5

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.da.lang

    Filesize

    12KB

    MD5

    40e74e08dfdbc1836001d7d83d71fa32

    SHA1

    65b8e237dc652459796c5ebab4d485c6632f89ed

    SHA256

    56089debb9c801eaf0a8dbd88a57af9db95de9d5e7995a959950735d388ee297

    SHA512

    4f4a51c43383a6bd1548f1ae6c52a32fcfe917f792d57712ff5ac265a5c27de8ddbcbff03644fe817a82c46e648c82835e297bffb417af7229b8962408c9a60a

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.de.lang

    Filesize

    15KB

    MD5

    3d8e136c53b7201b7ac5c59231d5b515

    SHA1

    1ef1b0886d6e75f30fea3a537db56f062b922c5d

    SHA256

    a0de4dbb212e69727b5ca4ca95b99d1a444a4ea287a8fc98d55372779f50f842

    SHA512

    66240b28dd6689f3c0b01e025a422d57b97224203d5d4f8b3c595b02678acdac7d58939bd7fbe34900821a7cf9b39fec42abe5e3204f050cf5cd6b7d940ebbe3

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.el.lang

    Filesize

    17KB

    MD5

    fff652d77be6727f0d9d90b78fbe4c30

    SHA1

    4e1dd1bfe97a1190b8d15f33af15d99fad315033

    SHA256

    87312edf20b0f5cd283ad014496003f8461b7d4b288aeb27943a0c1ae88a2102

    SHA512

    7151001d827cd54951baa3e314362817b56a9df601cb9397e15827b7a635c6339f6fb287574d147a2eb9a60ca6341cc059d9fb889a0aa9a61b42524c97f91349

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.en.lang

    Filesize

    14KB

    MD5

    48dca44b7491153c410f94e1c7189e47

    SHA1

    9ed8ab08c862774d043274da15d50c79dffa8015

    SHA256

    900268b7ebfd9a9884b13313855e21457cc47d901e88f2b50addf175dbe095e4

    SHA512

    eae4fdda950172f6603aa0988b160c75e586377e25692569dba100a8a430710057fbaf173940b59cdf1beadde690508cd5ed1c476f11b845b8f720fbbdca5cbb

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.es-ar.lang

    Filesize

    12KB

    MD5

    262bc4beb36f21d1d6b229ec64d567ed

    SHA1

    c2ee67912c50f7a0d92d460e1993bac25b8500d8

    SHA256

    3d381b7672a711bc2ea6c8b7990a102d7df9d739206e52efce97f9b176a041e9

    SHA512

    f45a234ea3d7dc00e9b3fb6463ab47ef6997a7671b3d322845a3b495ae307b7533376913e883d68f394baf8c899ed96e26f7bb548154a4e67009ef3281f87122

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.es-mx.lang

    Filesize

    9KB

    MD5

    ec933cb8b0d6f413351c34a675783628

    SHA1

    0b39c960d0cc6e51db51f7e77b348a222d5dfa11

    SHA256

    c4b96404139f905751a453789f677199d4321581798fcb7ebbf6c8b321f7c3c9

    SHA512

    06aa97df06442e40cbf058adde4e938edbe61f796b3a869f4a75ef84ebcaca078e50ea7f6749ec4186d01b4590812e93d3f75f2cf9e962c0b98358a129cd4e57

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.es.lang

    Filesize

    14KB

    MD5

    3cda9e49578cdc437fd88eb4657ef46a

    SHA1

    2727405ed15f113bd79c2e0ff4aab040b447da7a

    SHA256

    f9fa9db2b0452d426d9fbc197ec5e927b222d69876c5b17343d27c909c13c6f4

    SHA512

    c22375ff924baeea5dd626f834de2bb4d2e0b3384c76a9a52c518830ebcfd67dff8640b96bb266d1fc54e43f59756ef6591aaf1a5622f665f784a5a54a70ab7e

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.fr.lang

    Filesize

    13KB

    MD5

    9d993f31ef0378aaa75928031d012286

    SHA1

    12fe1614491eb15a3473bb9678a46ea35fb85204

    SHA256

    4aacc7c597d14ae9e92e48b92a98cb2800296f01639f6e2f6316e3a2ed6645e6

    SHA512

    d196e499a206f2b5545cb6114dea727b3246687139ff85b432f567f64d8d2e743b7701f431df8d809e9cc56f5db40329dead7b927ac60d4dd7cec401d6b8d0cd

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.hu.lang

    Filesize

    11KB

    MD5

    2ad193de6bb0729eeabc4461170fa45b

    SHA1

    4d31b311ceac08afd0a08222871f7b35bbd5f151

    SHA256

    dcc483b946f3e23efd07e348d2950ff871a4235592348c09fc8d9bd995c67a3b

    SHA512

    5285ce56610bb3bafa78b8a624cbe1381cb9715e589ec02ebff9d4ff53c430ea40fe1a97b8d4c47245023f6b1ae87987be69ec0998c99b91825d73028931ebca

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.it.lang

    Filesize

    12KB

    MD5

    f81db2733fe494541c3890aff9ca479a

    SHA1

    5bf982deb3d7fb23fb57aac95ba59819c1fe1787

    SHA256

    d8ce16edfd92941c99ab060beb7a731f74213bccaa244a78ec90cb1c50cae45f

    SHA512

    b174cf3702600e63511659559b01b30d25ae0b6b9b51c09224e01a81f526b826c74e08df1585a8aa1ebf1cf4eb81dcc39c22b26cd4fa9c7f65a8e29eb328950a

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.ja.lang

    Filesize

    14KB

    MD5

    dd4e0bc13113934a3e3bace65955bcc7

    SHA1

    3149b3af4a60193e651a8fcf0c781110829ec854

    SHA256

    50a3de70578ed782673da764d673f0638506f591813fe1e17d68d5add1d3d0b3

    SHA512

    93f10f8ff4a7edbbf744fd0bd541227b994fff62b3ba99871a4d9a8412a1da222244b07175b91d707f88c101cc0341ee4f4eadde07eedcbf70b430a6d749aff7

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.ko.lang

    Filesize

    13KB

    MD5

    6e98d53dab2887cd0c84ac83a7929e8e

    SHA1

    6f37620954246a0652d374706b3aebb741e6bde8

    SHA256

    ac2dc9bdb282e867f05a5586a2fa45568b757be2cbc0985905eef16d37079c26

    SHA512

    425909ef6c81494bd38108ce4d18be7ae7b77f55437fd8a32ebfadc4b55d22b595a37795c43aec66b950b6e3c73485b474d681ea678d96eb30840fff31c55f32

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.nb.lang

    Filesize

    12KB

    MD5

    811035138a37d45c5f978ea68296a416

    SHA1

    9118311ba80637ffeb50cad09f43faddae698bbf

    SHA256

    5ecf1a28d58ab74ffacf06e6de84654d3cab759c0db81ae40c923092afc7c891

    SHA512

    845352523e2e080e4a773f3371912dc54788104d1e5324cb99525772423fb94891a8c5cc9ecb0cbab692e32d7d3a26608ed52245e7dec20934ee0e53adf5429a

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.nl.lang

    Filesize

    11KB

    MD5

    b17605f2f353b88152ad945851e31bd1

    SHA1

    86b7d4532105838c86bb5547a383e00965bfa797

    SHA256

    0119ba0132be1989abc534e5bd4af8e7600471501d73a7f06a40f176fead887d

    SHA512

    47348aa3ad76a58575ba5f73b308064e68a6feb3cd32422daa3a78076551b305121d79cbb40ccea8d69901ecb9653fc42f85c1fb7d1f57770d6e4eb3b7a6fe2c

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.pl.lang

    Filesize

    13KB

    MD5

    fbc6b9959b6b7534c65d554bce0716f7

    SHA1

    79957bbfd077f74a39631d621198ee2edf464a49

    SHA256

    932e357871aa042a618ba974534d89b91af11d3ff18979db95fd7acb5facb1eb

    SHA512

    4b29a9bbff6563d316e401e2b1fbe1a1ea9e89717eb4e9bcd1057d31289fc734a448afb7abc620629127580cff642bbcb5d362bc9b109e9cdaf6db2fc6f1b28c

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Assets\Languages\AbDefault.pt-BR.lang

    Filesize

    12KB

    MD5

    47cf5a020f1bb12e794ce7f1efff47f6

    SHA1

    0a8f7ac95165ea7248d81b15886981fe5b468dad

    SHA256

    982f421853d3f7d58db06344ca31859bd856a2227ca3667d2d28342eaa1bc2e0

    SHA512

    1c85147c86fd7624b561294b9f7ce0dc854e8ccfb06ae365eba991dd40f4f42c02621bb9b9ed0a828c36c22aa976d0ac4d385c2e7d0f4e7dd3ac152ce7338148

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe.config

    Filesize

    3KB

    MD5

    92460802de7bf06dedee2b432e68df59

    SHA1

    7f07cb2c68de17238a68133d49e090fdf5ddf26b

    SHA256

    c16e56a053ee3c79fe5175164139e6d9fc1456b641e82e6b454f3f7198946828

    SHA512

    e3044e8ad06523cc0546445b842a944a6ea5e8fb48c36372a2635e09a0579abb0b42ed90be5d73fa43d212ecbcb5a48ef839c40878841d0e1b1f76a3b30b9e63

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\Newtonsoft.Json.dll

    Filesize

    648KB

    MD5

    91acee2abdeb39fb0b6e41b4da52cc75

    SHA1

    54367277ec9522ac060a21e2ac6b3c9e75dd82b1

    SHA256

    1ad83fb9f3cb4f5d19698fefba63214131105ae7256b2440581b7cbfaf16a778

    SHA512

    130afee760c2c3bce8149b9a4c6d19392075144b6392b7f10d17901abbcf862b1917364fad41b769f849cec7da45e859954c44e0dc227e216266b19d3991c0c2

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\OpenAbExtension.dll

    Filesize

    89KB

    MD5

    61a486d9624d26d68f95eb3fd96409cf

    SHA1

    017cd207917824ea7ca9c2ff60470787baf7203e

    SHA256

    fa37a97f758d34a13201e357baf21ea5713c3d6cdd4cde021d4e61eb6526e35c

    SHA512

    ac08090da68d7e7a7762e4b09f8e0d7e1bdbf46d63d151d14ec067a3bff4c2f45ff098cf4f3d3e45b80b3a534268bb5bc6b84fd3ece1468d3f5e0866b323e164

  • C:\ProgramData\Abelssoft\FindMyFiles\Program\log4net.dll

    Filesize

    278KB

    MD5

    2c37fdb34a7a288d89bed687d30ff1ce

    SHA1

    edfa617680188a3ec593086cbf8ad7322d51f70d

    SHA256

    00065d9d7a03a52ee25d6b15f1d4a7216f815fc5757d8e741e22f14603ce7c98

    SHA512

    a6a05b06995b6dffd52748fe9d482c6b9185124b64b01e3812d278aeddbc131383a4dad482b1229aa92ac39b19ca5de67f0a627f51ab4a2f4959e7c2eb67fb87

  • C:\Users\Admin\AppData\Local\Abelssoft\.teleData

    Filesize

    502B

    MD5

    187d6db691de5e14324669c17cb6e9d6

    SHA1

    5fa7a2778db6790af69671a43a929d07d87a9c98

    SHA256

    42c4996c2e8ba87166a84c1f9d981072c32d7b899067dbb6c8d4ad3ecd6d5641

    SHA512

    598e1c79bf8219385e177eec63cf2a080545f1d0a5770bb5411b00754760bce3a904a4c50dfdb2f298b7c1ffb6d810173cedf9976132328817bbea85a1e8e08c

  • C:\Users\Admin\AppData\Local\Temp\CabEC44.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEC57.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

  • \Program Files (x86)\FindMyFiles\AbLauncher.exe

    Filesize

    20KB

    MD5

    3a416610eb9a90cd6864e163651bb7a6

    SHA1

    e861dbf669bbcee8dab7d8a61eaa16c0de43fb1d

    SHA256

    dd06c19409868269b7934888c0dc1226c985ba502dd2be8750df26d780cddf6d

    SHA512

    73a1894ab1cfd1fe7a5ff8dfe02e407444d80e66ed66ff97078c443a1c9ff2c7b935620cea920af3075a7474fdecbb770c77cdc3fe74d2f7112c8158019fa47f

  • \ProgramData\Abelssoft\FindMyFiles\Program\FindMyFiles.exe

    Filesize

    2.8MB

    MD5

    e2ceb86b21f9bedc16de7965a2de0329

    SHA1

    430cee13d4e7deec2fa1846f1c18e37a606d96ee

    SHA256

    3dfcc2f4432dd3e3ae36f4538b7c5085a790a4316dde89f75f18aeacc2d8ee92

    SHA512

    1c769cc87addc55366a8f4a0073710044496c92da9c69197ce0f9ec62c0e6317c4acae3999c5a4a401ec43599323e996e075485ded401d0a9f44526154ad5aac

  • \Users\Admin\AppData\Local\Temp\is-FJLSS.tmp\a1f41b8a706a7d98596cf555320a5a3bb85dd85a9d8fed16de4187a5cc6f29af.tmp

    Filesize

    3.3MB

    MD5

    4e2862b5545bb3aae791e11e2ec105ae

    SHA1

    0f622fcd6072b38967ee63baeb476638bfefb28f

    SHA256

    eefc27f6c2a82da0d4f30d361e07439e6d9169eb071d994edea676201f1607da

    SHA512

    d719b860d271be33af72647e503c7c2606c9406b04c2bec7004af88f57acdfd4a46ea092ed0fab50902a51daa62717e3e6cd956758a96b5a0327e0d973af4517

  • \Users\Admin\AppData\Local\Temp\is-TTR15.tmp\closeapp.exe

    Filesize

    227KB

    MD5

    9a2bbf4de6279c9321969c6257f48939

    SHA1

    4fdf355fa10fbd61c1d4c47e21e66b09493a1621

    SHA256

    40e33b4ded6db4e96b7ba89770b248d62ffd5f9175e2e0b58692084ce3b91a10

    SHA512

    3afd50668327f518e0d5dfe8200f43ee29cdf8dea8667e31131005e1d0e67acb96f4c218b2ab1f7a3ee926bf600b57b046b5c21ba40de779acc03d130087a4cc

  • \Users\Admin\AppData\Local\Temp\is-TTR15.tmp\isxdl.dll

    Filesize

    164KB

    MD5

    735c1b6a6233ac5eca5eabb6edb8de3e

    SHA1

    fbea3d1230f3cac2f1b67141fa0706ccc5e52759

    SHA256

    17415e672d167bb83f865a73e0c399696f1d953edf43a21e55cf79c4e5320d23

    SHA512

    9f3c933ce3a8d9799ee7de091f84a57b3f13f0bef23c28e8a26e7287dc6c37393a704785d3fa72c83c966f6d3431c30c2164e699d2149caff0799da7385a0060

  • memory/1100-698-0x0000000001140000-0x000000000115C000-memory.dmp

    Filesize

    112KB

  • memory/1100-864-0x000000001AF00000-0x000000001AF14000-memory.dmp

    Filesize

    80KB

  • memory/1100-819-0x000000001B240000-0x000000001B28A000-memory.dmp

    Filesize

    296KB

  • memory/1100-817-0x00000000012B0000-0x00000000012BC000-memory.dmp

    Filesize

    48KB

  • memory/1100-821-0x000000001C390000-0x000000001C436000-memory.dmp

    Filesize

    664KB

  • memory/1100-704-0x0000000000C20000-0x0000000000C28000-memory.dmp

    Filesize

    32KB

  • memory/1100-702-0x0000000001160000-0x000000000117A000-memory.dmp

    Filesize

    104KB

  • memory/1100-874-0x000000001B190000-0x000000001B19C000-memory.dmp

    Filesize

    48KB

  • memory/1100-700-0x000000001B140000-0x000000001B18E000-memory.dmp

    Filesize

    312KB

  • memory/1100-696-0x0000000000840000-0x0000000000880000-memory.dmp

    Filesize

    256KB

  • memory/1100-694-0x0000000000830000-0x0000000000840000-memory.dmp

    Filesize

    64KB

  • memory/1100-692-0x00000000005E0000-0x0000000000604000-memory.dmp

    Filesize

    144KB

  • memory/1100-690-0x0000000000240000-0x00000000002AE000-memory.dmp

    Filesize

    440KB

  • memory/1100-688-0x00000000012C0000-0x000000000158E000-memory.dmp

    Filesize

    2.8MB

  • memory/1100-873-0x000000001BEC0000-0x000000001BEF0000-memory.dmp

    Filesize

    192KB

  • memory/1100-865-0x000000001B290000-0x000000001B2C4000-memory.dmp

    Filesize

    208KB

  • memory/2192-878-0x0000000001390000-0x000000000139A000-memory.dmp

    Filesize

    40KB

  • memory/2192-879-0x0000000000250000-0x0000000000258000-memory.dmp

    Filesize

    32KB

  • memory/2412-884-0x0000000000730000-0x000000000074C000-memory.dmp

    Filesize

    112KB

  • memory/2412-1005-0x000000001C660000-0x000000001C706000-memory.dmp

    Filesize

    664KB

  • memory/2412-1022-0x000000001B300000-0x000000001B30A000-memory.dmp

    Filesize

    40KB

  • memory/2412-1021-0x000000001BFE0000-0x000000001BFF8000-memory.dmp

    Filesize

    96KB

  • memory/2412-1020-0x000000001C020000-0x000000001C048000-memory.dmp

    Filesize

    160KB

  • memory/2412-1018-0x000000001B300000-0x000000001B30A000-memory.dmp

    Filesize

    40KB

  • memory/2412-1019-0x000000001B300000-0x000000001B30A000-memory.dmp

    Filesize

    40KB

  • memory/2412-880-0x0000000000410000-0x000000000047E000-memory.dmp

    Filesize

    440KB

  • memory/2412-881-0x0000000000230000-0x0000000000254000-memory.dmp

    Filesize

    144KB

  • memory/2412-883-0x0000000000BA0000-0x0000000000BE0000-memory.dmp

    Filesize

    256KB

  • memory/2412-886-0x000000001A9E0000-0x000000001A9FA000-memory.dmp

    Filesize

    104KB

  • memory/2412-887-0x0000000000750000-0x0000000000758000-memory.dmp

    Filesize

    32KB

  • memory/2412-885-0x000000001A990000-0x000000001A9DE000-memory.dmp

    Filesize

    312KB

  • memory/2412-1013-0x000000001B410000-0x000000001B440000-memory.dmp

    Filesize

    192KB

  • memory/2412-1007-0x000000001BDF0000-0x000000001BE24000-memory.dmp

    Filesize

    208KB

  • memory/2412-1006-0x000000001B130000-0x000000001B144000-memory.dmp

    Filesize

    80KB

  • memory/2412-882-0x00000000005A0000-0x00000000005B0000-memory.dmp

    Filesize

    64KB

  • memory/2412-1003-0x000000001AB20000-0x000000001AB2C000-memory.dmp

    Filesize

    48KB

  • memory/2412-1004-0x000000001AB30000-0x000000001AB7A000-memory.dmp

    Filesize

    296KB

  • memory/2748-1002-0x0000000000400000-0x0000000000525000-memory.dmp

    Filesize

    1.1MB

  • memory/2748-23-0x0000000000400000-0x0000000000525000-memory.dmp

    Filesize

    1.1MB

  • memory/2748-2-0x0000000000401000-0x00000000004B7000-memory.dmp

    Filesize

    728KB

  • memory/2748-0-0x0000000000400000-0x0000000000525000-memory.dmp

    Filesize

    1.1MB

  • memory/2792-22-0x0000000000400000-0x000000000043E000-memory.dmp

    Filesize

    248KB

  • memory/2964-992-0x0000000000400000-0x000000000075F000-memory.dmp

    Filesize

    3.4MB

  • memory/2964-9-0x0000000000400000-0x000000000075F000-memory.dmp

    Filesize

    3.4MB

  • memory/2964-734-0x0000000000400000-0x000000000075F000-memory.dmp

    Filesize

    3.4MB

  • memory/2964-27-0x0000000000400000-0x000000000075F000-memory.dmp

    Filesize

    3.4MB

  • memory/2964-25-0x0000000000400000-0x000000000075F000-memory.dmp

    Filesize

    3.4MB