LockedList.zip
- SHA256 4de20f933325cdefaa93653b0be736db5ae35e97d4173c16dbcd2b073c916da8
Overview
overview
3Static
static
3Docs/Locke...me.ps1
windows10-2004-x64
3Docs/Locke...me.ps1
windows11-ltsc_2024-x64
3Plugins/Lo...64.dll
windows10-2004-x64
1Plugins/Lo...64.dll
windows11-ltsc_2024-x64
1Plugins/x8...st.dll
windows10-2004-x64
3Plugins/x8...st.dll
windows11-ltsc_2024-x64
3Plugins/x8...st.dll
windows10-2004-x64
3Plugins/x8...st.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Docs/LockedList/Readme.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Docs/LockedList/Readme.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Plugins/LockedList64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Plugins/LockedList64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Plugins/x86-ansi/LockedList.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
Plugins/x86-ansi/LockedList.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Plugins/x86-unicode/LockedList.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
Plugins/x86-unicode/LockedList.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target LockedList.zip
- Size 92KB
- Sample261017-hdblhsde96
- SHA256 4de20f933325cdefaa93653b0be736db5ae35e97d4173c16dbcd2b073c916da8
- MD5 34977b8b8ce07e3ee18b6f5d9a8fca7a
- SHA1 a6c594c16fee06df073249584dee77604fa8c8c7
- SHA512 05315846f20606769bd19226b45004f3f9cd6ca96352b4e2cb276a062e90c79bc1a038969dacbb519ce54ab393329d6a1d53148152e1f1043d05612566f3b3c8
- SSDEEP 1536:4d+UYjKWZAKdNeHjqUkswxIfnclbzNllLEc7r6oCFTWvNvzL5S4W0KI/Au7OU:4d+UYeWCKieXrKQbzN/wcHuFgR1W0jok
- TLSH T10993E164C22D4CF5E6F6EFF610E12623689AD23E89F144535EEC1184890B6D3EB3936D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Plugins/LockedList64.dll unpack001/Plugins/x86-ansi/LockedList.dll unpack001/Plugins/x86-unicode/LockedList.dll
File Explorer
-
LockedList.zip.zip 92KB
-
Contrib/LockedList3/CRTReplica.cpp8KB
-
Contrib/LockedList3/LockedList.cpp84KB
-
Contrib/LockedList3/LockedList.h683B
-
Contrib/LockedList3/LockedList.rc3KB
-
Contrib/LockedList3/LockedList.sln2KB
-
Contrib/LockedList3/LockedList.vcxproj31KB
-
Contrib/LockedList3/LockedList.vcxproj.filters1KB
-
Contrib/LockedList3/SystemEnum.cpp31KB
-
Contrib/LockedList3/SystemEnum.h2KB
-
Contrib/LockedList3/api.h2KB
-
Contrib/LockedList3/nsis_tchar.h4KB
-
Contrib/LockedList3/pluginapi.c6KB
-
Contrib/LockedList3/pluginapi.h3KB
-
Contrib/LockedList3/resource.h731B
-
Docs/LockedList/Readme.txt.ps1 25KB
-
Examples/LockedList/LockedListApplications.nsi587B
-
Examples/LockedList/LockedListAutoClose.nsi477B
-
Examples/LockedList/LockedListAutoCloseSilent.nsi826B
-
Examples/LockedList/LockedListAutoNext.nsi717B
-
Examples/LockedList/LockedListCaptions.nsi443B
-
Examples/LockedList/LockedListClasses.nsi413B
-
Examples/LockedList/LockedListCloseProcess.nsi602B
-
Examples/LockedList/LockedListCustom.nsi1KB
-
Examples/LockedList/LockedListEnumProcesses.nsi579B
-
Examples/LockedList/LockedListFindProcess.nsi485B
-
Examples/LockedList/LockedListFolder.nsi437B
-
Examples/LockedList/LockedListIgnoreBtn.nsi1KB
-
Examples/LockedList/LockedListKernel32.nsi600B
-
Examples/LockedList/LockedListNotepad.nsi445B
-
Examples/LockedList/LockedListShell32.nsi582B
-
Examples/LockedList/LockedListTest.nsi4KB
-
Plugins/LockedList64.dll.dll 9KB
-
Plugins/x86-ansi/LockedList.dll.dll 27KB
-
Plugins/x86-unicode/LockedList.dll.dll 28KB
Contrib/LockedList3/CRTReplica.cpp
- SHA256 f865f8a4b28d8015144f815c15dcbcce6985bacdcc21c9d38dd388b36ce83bc0
- MD5 ecabb8cc4e84a3e79df5f1d74bda54d3
- SHA1 4a85c4308b9d0a61c1e6d7f0929e70ddfdba99eb
- SHA512 e4119c68f571268b0d4c733fe8a15b976ee2c7a2ccce6240e8c3efe3110af9c63ebd8177869b45b7c414f3ec3b7d2ce64d3126bebea06e558fb0401592736e63
- SSDEEP 96:xwWBM0oNfZAYP3qI82XABhVDUy4q6Ap8/UvkprCuq5KL/jAqxt2GWPChX0djwkeA:2WQDAv2w6TJM/
- TLSH T10A02FA1944D160774ABF53A6AA1F822BC2128427E3EE31E4781CD3985B235F173B6ED7
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/LockedList.cpp
- SHA256 0a0626179f66077458a19dec20858b64f60e7764e357cb9b4321e91711493ee8
- MD5 df5e1cee7b1b0c6b578cadc8736c432f
- SHA1 47ec18326577e5dba3b5e8144cc2dd17dca57782
- SHA512 c12cd619f424e12b17fcf0d537c0708e45ae81c09fdef153743cae289127cfd72ee636c9693ae7908073b965b5f8d35d0c700d438be5359ecc963efe5bc99071
- SSDEEP 768:eoRidIyOrds12GPR8NHPAwRlv2zlQ+XNAvIqA7iSSk/ioLbmax3:CdvH2w8QlhXNGWRbj
- TLSH T12D83D882510F12523DF72B79BBC2105AEB75C11B6B7A421178CD8180AF395BD91B0FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/LockedList.h
- SHA256 d14940694ca4c91899d4fa835ea18feadc84bfef536c2803cfb8fbabf86685f0
- MD5 6b01307b26f947567114a00f6ae08723
- SHA1 7aa38ad20c696c48166d67e9cb52416fdc4435f7
- SHA512 cb77a5b7e2a411429a6d638b97ef0699b5798ed9e532aa071d187e1ce052c79ba4e7719c15d6d616e1bf1427270139464cc487c425b42a52ec4b069c4a1c5492
- TLSH T1B0017B1D4F0B091A10741F7A5B1C0461991D8AD35EEF60E4B9DD19B82F5282404ECE9E
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/LockedList.rc
- SHA256 3398c19cf82c51e8f98dfabf50cbe09574ab941ba6c267e132b9532098fbee19
- MD5 247f8024257c21f798244b9c57f38d9f
- SHA1 ddb6864561026b07a801b494d693276c910b53d2
- SHA512 303f0e0313e33fdc8aabcba396560eb90644511fbf81436cd94228e664001bb71075b7cfd3a0171af2b5875fc16c357edda4facabae67081ad6cce0d21a4e3d2
- TLSH T10F71EFA34C8105374A35B3F27D002F56D369826F56620658B24DF9A85FBBA1F029DCAE
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/LockedList.sln
- SHA256 16febdcaa34241dda1e1d24bff2cf2ebade27deb766c72de334cbb0299c7cac9
- MD5 666a6a440597fbd7fe90de0a07cbbdcf
- SHA1 0d3e777f03d9bb642f6d12ebd99d75aa2790d771
- SHA512 8e0ab10c070fb51d11d97b7525f52e5b5793c0ef5a9c44a218156caa83ab7a28caf97ff3506b800bd6786c85e0d6469371157e545b743e88eaca364e29e49be5
- TLSH T1E651B568714E6E82C2C06A5BD2B467B339A9A76E41420D3E5C43C4F9BF1B93109778DB
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/LockedList.vcxproj
- SHA256 84a9482502d55cbe266482f586110876ac63e57a6a02352ea29fa9043dfac030
- MD5 db424b6a7b48874d9de00396fc8c82b9
- SHA1 4ec508c5ecb11c63ef7d78603738ba3e72b9dc19
- SHA512 2f0a96383e0f8d5951ab74a96c9eb8b36cdd9b4cbed5e6293144b79c696d9dc18fe5806ee83dfb50ae877dea578b9f4ff7933c56b6457e57db68d5e0c8dcd005
- SSDEEP 384:Vag47fxifxS9xq9x+fxGfxAfxzfxy9x+9xn:Vag4VGw46iUNQkn
- TLSH T13AE2CF59E8D41D17D0B78223E1E22482EE71C6470E874C28F89E9B9F5F775986223F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/LockedList.vcxproj.filters
- SHA256 77dc2069ab98d62a82a83314dbc5a37a16e58ec7e3c061dfb7e5b9df543c1d25
- MD5 4b5d4ff8e01a4f28a472a5f46c151c3b
- SHA1 89b88880de10f95679d782484d9681f806bb82b3
- SHA512 26694b1bef3b6613719ccb05aa8341bbd6d28536e2a17623276f7653c549e308c251464f87c36ff08f80bc89c8550eef566c39c45f94f715211b8ea13a6ea719
- TLSH T1DF41C031C5EC2E4C2032555BF785ED05EF28B3E7908141497AA9F18B6FF3648D227AA8
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/SystemEnum.cpp
- SHA256 c27152eb3593743a71502d3f59c7f112b07fb775ef3b6a21dc30593fb5b22e2f
- MD5 77fd8c3ae5b7601caf84ca3b37a15165
- SHA1 076c719edf504a73c0fdda5612f22260332971da
- SHA512 15bbbae9c52a57098ecc2efcb202d2f6b3d71175f468d4503a1306902a375f9346cdc0b83a0192bc727321a8a62563cbca1287b05dbfe1bf0ce2dfa901f4692c
- SSDEEP 768:qRvhnLdQhv/Z4zHGY5XeEq3EqceIHvhND9AvUD1EJptUijew8wS:wdc0z9z
- TLSH T19DE2A595995EA15158FB1B217B92405BEFBA412B123F833038CCC3847F3E96952B1FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/SystemEnum.h
- SHA256 6732a39a82b55b973eaeb06de8682c76266ca5c9d071d904b0e299cd313a1d1b
- MD5 d70f2b45652a42c8d296b208b68ab9c9
- SHA1 03351fdb60008c170cde58597a19c3982cc24af2
- SHA512 4ad85d123136d40b4c276853a6aa85f2647d73cb16dd4d4f25d325205498fcbf210bdbff4e68e0eee85f7c5f45e86e5a5a386704eaf9e910deef3483265f8b49
- TLSH T1A741353D960A62604C79EB5D52102AD21498A2036A7FD27478FC9B607EB542D04F9DFC
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/api.h
- SHA256 98c9fb425c8f81cea1979f480b9192189b19843590185091761d2434ec9804a3
- MD5 117cb0da7675185249e4be554de4ec83
- SHA1 cff2f63425f4d2fa8f039a5dde8a21e37b6284d4
- SHA512 a6e17e802460db525ea0c2ce42af589bf159960710c60584c3063f592bb0ac7cefd6fb6ee1f56d41259163d0250b3473e2cc7aaaab1e26d8a9811eec883d7d5e
- TLSH T1BF5173883C8642B30CB01295562C06E6F21FD9668F8656D0319C99784F35E6F93F25FE
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/nsis_tchar.h
- SHA256 67deaa036a55cef07fd3ced024365a0979b6b8676db0ec1238475afe0de469df
- MD5 d5ef6f39d1799009d6ae7a7d7c725e0e
- SHA1 0b323e9b8f015148619f6cd8467f181951ba1939
- SHA512 da6d9584957928db84b3fe4c1990513c09a847dacbb2fd833cb4a8b71f27ec03c0a647aeffd0acfbc7e2353b79201db358d80c5b9d75748c5799e2727bad2525
- SSDEEP 96:ZVJMi3/pruj7aSuxGmQoSIyIVf7C79k2ExzjL8/q62BUZ3g97bbPlkaLvXiPXIUs:Ki3/pruj7atxGmQo1yIR2Z2jA/q62WZM
- TLSH T1DBA1976C6DDAD56204726262820C98A0F24ADCB35AE131FEF41ECC0C5F174799AF75EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/pluginapi.c
- SHA256 a1ccddd22d9aaef33a24b44161189f7c256b03450bb25aed46cc343bb6d761f1
- MD5 569d9bca335e5a0cfcaa7df89fab8562
- SHA1 c4f375ed88a15ee45aee6a98522f2cb4f002a79f
- SHA512 ebd98a252d7e83ac5dc3a93a61a1bd07fce6274d62292f2eb8c783d6e634636c0dfb2820563e5e98e1ece8ef9f015d5b835505259a1d17778e53081a4dd3629b
- SSDEEP 192:zHl0N1k6KP6+na6Y866Y68TRU6rQ16rsC6rSrXZrXZiWVHViI:zGN21Za6HYNTRU8U8sC8SrXdXcWhb
- TLSH T100E1208A091AB0500EF29BB47FAB0855E21D81433DBD95B4B49D126CEF774B51B70FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Contrib/LockedList3/pluginapi.h
- SHA256 2ac1accb86f13db6842d297262602344244a14777dd337605f12e32c385e15e5
- MD5 4fec02ec30ef5ea2b8a5a613065cf425
- SHA1 f9256044d22197a17c3e06a1ab734b25739fbd68
- SHA512 3b084d899f362ec0bbdb353e00154ae4b576f21e3b6485faedd38ad0a3e56d4b3553f4b84fc6c78bce2c9041631f0a6501c22b0ee8a8c2d2a6b98f87d39af84e
- TLSH T1E951DC48251920840DB0E3FB739E2C4161EC92173FA6ACF4B15F1B6C134E70A29B2EDE
- MD5 SHA1 SHA512 TLSH
Contrib/LockedList3/resource.h
- SHA256 f9af605aa1033a9735ebf8d8f8b0751c849d67d833f01f041269c17bb823391e
- MD5 5a3da3dad259d20743e1ede833e0093d
- SHA1 d60e03f07f406f658b44652d216a3a6afacbfd8b
- SHA512 1b294f0804b563f995edbe6d66056fdb8610ccc76a1d51b2549cd328165bd1102778cf8daa2b19bb631c5f12b9beafb443c610e623fe170342153eb805af0f5c
- TLSH T1C201F43A4CC9889B0568F0C100095603085DFC6BA9A515BF32CC6CDC9F2511203FE48E
- MD5 SHA1 SHA512 TLSH
Docs/LockedList/Readme.txt
- SHA256 67e74bf1ff5184c8711b46e3173aaf0de7c791661ce23acfbcee7f1a019edf30
- MD5 790482da616c8c13a0ea97ccafad94d3
- SHA1 6e8c269587ded5cff4d12b38e5b45e027757be95
- SHA512 2be4c782b68b910acdaffabd3f29047b3d95ef4b1d71f9fc0aa35522b7501a6209bb0adf5ca433016be1dcbe6ad9dee669d6cac0c7e329a92bd5af4f7aa01c34
- SSDEEP 384:3ZWFWd+LwshqllrRe0h4ZaNog2y0ToTNIdKFt3QCq:3ZWQd+cRlrRe368ToBId0g
- TLSH T1F5C2864FA50F236622F20085394973ABE72DC12DE395754D389CC34C2B769AB97B61EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Examples/LockedList/LockedListApplications.nsi
- SHA256 4dd712874c479a7f68651db209d68a536e2f07fef99c23b051286b8b961fdf58
- MD5 791afb72bb0ff2cf7b8d3b4f633bab93
- SHA1 78fbbf5f8b4905e5cff4419de43f5879ae3b617b
- SHA512 d5cce07cc031e8dff94caee6edca078261d87001156b75865e9a3ace2a3b135e9034c3b480aa8e4d78cd7ac156550abeed4b71bbc7421a79104345ba862a970a
- TLSH T10FF028AA4A2E1E10FBB358F0950F806A3028C4ED8CC053886A9E91C846170DFA3F31DC
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListAutoClose.nsi
- SHA256 5d03696055c494aaf9aebfbaa56f5f41d2f4560a5b8c3ff02f8262b717e5caf1
- MD5 1a2f1d839a94714e52db8817fc022740
- SHA1 cad3a168964eb5f734628e5882126dbf04327b39
- SHA512 09044708e5ed7b96edce99897bd1bdca403dc2238ab2f5c73ff36dc87cba8679ad685b2b68b96f1c3246b8533377d0d3ce5f66612467a5f9d08e76d5a6d0a7d1
- TLSH T170F0271AC62D0E10FBFB4DF0661A04463929D0EC99C15786AA6D95D145160DBA3F36E8
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListAutoCloseSilent.nsi
- SHA256 99af728f45cb38aa70159bbe2bbfb4cdfb152d00177ca4efc96401b94d00e2ff
- MD5 331412dc666791119d2d6385b7fd1954
- SHA1 2e96bdb1e09b4393591236575eb6b6475794cfc4
- SHA512 c95f965eef2172c98413be6192678c9b676b2731bb62022305d3b2fb3eda888d9ece15d57f4d31bdad4241ab556109b4682f8c97147f544d57127eb4ad631c87
- TLSH T176011E16562A1D4CF3374AA22986A38B78A4C05DC9D45F05F26C56E213108DBBBF66CE
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListAutoNext.nsi
- SHA256 fd4f7fb89731c00b2b665beb3d78e55852b6e344eff3644ecb41e109e4ef4beb
- MD5 c724e73fc8beee3d669674e922b29ca5
- SHA1 50b606a58837a5decd72364a9adfeb73a6735b22
- SHA512 1652932b1ba93e0e65525c2fd6e36eab264fec6fe4fbabc21b388c46022db3a23c675ffcce4081e3f834f44733dee3ad89019b7c720c712fb85004b8c4d69e3e
- TLSH T19701682ED86E1F10B7F70CE0150F20AA3869D0AD4DC15342FA1C97D44E220DB92B3AE8
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListCaptions.nsi
- SHA256 e8432f21eab7b71456749722a527bec599020d8ef1854b061124729038926998
- MD5 649b39218b69fdbc847b18dadfda1398
- SHA1 99afc53008d5493616bb21a58b45c8ad0a95f711
- SHA512 423e66c9578b4eebcf467dc5a7baa7b7f8d8ca37cb35dbed36bfd25ac1f39b42c8e99925ddf40049b6c8e5aa82086cd7aa3c4ff8ec9f9d67b21ffc71865713a7
- TLSH T189F05C1A892D0E00FBFB0DF0621A10563429D1EC8CC09385AA6D95D501160DBD3F36EC
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListClasses.nsi
- SHA256 9e3cf844d024bc7c1daf8b0f55e1febe842a199453b2e33ac48465965f1a50eb
- MD5 58a25859d35e96ab9e13f10cf09f3974
- SHA1 76dbde7a30c81c4498fb5e6f927da700b8f701b0
- SHA512 a5f4634c38cd87a5da4f9d1ed77d52621d5b2f8b02c104d217a17315fdc4fd7af0b749f2ee18b1edaf40bf2016c8d793764c12b78c57b02fc7ecb6c41adeda84
- TLSH T111E02B1ACA3D1E00FBBB0DF5511A10563919D1BC89C19781AA6D95D146124DB93F35EC
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListCloseProcess.nsi
- SHA256 797c82180b796685a60d68b0ecca2e775e13e52cb490f8e4399f1b91ebfe0743
- MD5 a6df4919b70cd536f776e0a470555a66
- SHA1 28cd663c6a704289b80a1c19725cfad060e9f2bc
- SHA512 805bf932bbef717ed1f1b1deb85dc1528fb321338b93b6e718a347a29677b9643a81239109a9d1cd6757f1a0b5983be3a64da44f97c070b9624e0daa5d998aa9
- TLSH T191F07815851D0C08B3BF19A12704408B3DAAF4BDCA81A2A1BD9D84F156215C7B2B65DC
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListCustom.nsi
- SHA256 62797a2046601706869b79409659ffd482becc75c39957b1196c9c443f562011
- MD5 9f1a8204bb1bdb190a0bb40a59732611
- SHA1 eebfddd3fdfc4042abe89c46e325f124fd92b685
- SHA512 66ed92080ccdab9b7a0b4fb236d00c9d4b115744f48bff9eac6856be5c93a5dc32a4e858c8eed56890a92b888df66dd0d2f4a6f584e926afdfcd938dbfb3262a
- TLSH T12A31ED0DBD261C44BFF209922E4B10DAADB0A0BD5B545309F2DD40D40B2729EA2F6ED9
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListEnumProcesses.nsi
- SHA256 2ec422f1063e4323b3e9d36de6a42daf828ae2ded719a6c42c3e0f60020f4e09
- MD5 42c5b104ccb328b3243e39801bd8dfa1
- SHA1 d19d7426f9511ecf2a1d20e983b37ed5b044f0c0
- SHA512 7d2175feb2d53c78a33508d34d858cc0165e65fcf52d8002f3db977ea2b984a1887fa97b441ea7ea813b370271f61dbec4f08a2aa3df23a67f2fd02ac43c42e3
- TLSH T13CF0DD621A1F2E38A7BB4EB12415C10D3459C2CA48C23250F21CC1E103210EF37F35CD
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListFindProcess.nsi
- SHA256 eaca74b2fe6fda1cea4886436cea05c8bc2c366bee75562458529bc55db29cfd
- MD5 0996f746ed56bb0ad892c1cd759aa403
- SHA1 49f94cbe1c136a0c7e237cd0a5ff33c295caab8e
- SHA512 5f06b6100eca211253bd88d2f23813cd42bc9a840f99615a4af8c34a9ef4c8b08e1891f57df7696256a922c8cc20a02a98fbae2946d0f59955087c2b0744cf66
- TLSH T1B8F05292490F0E28A33B4CA11224E14A78CAD1DA8DC26B90F79D84F00B358D777F72CD
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListFolder.nsi
- SHA256 17617698d1c09f07db62810fc0a0ff20d657b2b52b20fb4512e5d4c6a8721e5f
- MD5 5f8414ee61b988849b209392415fe2dc
- SHA1 a0b673de5eab3b5326941ab239c6b3e111e2f1ba
- SHA512 5c1153d94956dfd88dd065f99c0852f57c5f6b43b96bb1649b0f926473bb64dd3ccfe5db3bfa17f81a328bb220ce07a4b3ac634e77a3884ee90a3d6adf20ce4e
- TLSH T1A2E0EC1ACA2D0E00FBF749E5511A1456251CE4ED99C05385BA5D91D502160DFA3F36D9
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListIgnoreBtn.nsi
- SHA256 fcd83b4b4d668a3de5125a7ba2895d2838f6ea92927cd686fb166d912b017791
- MD5 491c0581bf93385898028b99ab5ece28
- SHA1 63c0855db6c29b6abc0cfc970da3b92751b9d347
- SHA512 5b474b3a29a01638d64b1818e439dd1f16e4cedfccee729652929dd482342b989a3f335a6f710afaad5443269b87ae6fb120574091df5faa25fb0f394ef1b401
- TLSH T1F031BC362A6A6D11FBB348B0188944A955B8956E84E08210FDAE8DD96D040F7E3F26EC
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListKernel32.nsi
- SHA256 989b400b6336299a94a78d7d57c86dec68541fe91f5cd8edf0e168878cdbde29
- MD5 bf841690ac5637686ca7a6fac6092779
- SHA1 b944e56a5d27f6e28d75a01f23f172b268b1091f
- SHA512 2deffc606b2ff89f7f70203f85f3eb54fa681627afe18a1357522f049b9427b28346a4ab646c7868debf6c6bb852b5c22d1fb33ba04ca4980547dc2cf34b6d60
- TLSH T11BF07D06C52C0D04F7F309D0120A408A356CD4BC59D16384BAFD81D242220CBE2F36E8
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListNotepad.nsi
- SHA256 801c158ef410a826159900428861cbf7a76084c3892c8a57799433f8e3ff011d
- MD5 04946dc2fea95bea75c239bed759adc6
- SHA1 01a96c5e077cf57f6dbeea5df2656f232fa0186a
- SHA512 ac33dd5e5a1ca12e5fb950f6531f1b919d021f8f8350e29da3066716a88d6d40f5a8bc3f3bc034894609d899db8af99f9bcbade141613f1e7f72c68fa8c441f6
- TLSH T119F05C1AC52D0E00FBFB4DF0551E00463919D0FC99C15385AB5D94D105160DB93F36E8
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListShell32.nsi
- SHA256 e5998d5c9ddd3aa09582d96990dcf27a13424b11b6e3cf8e6de48fb864522c24
- MD5 fb7d8d58ba6f523dd58608625fc13130
- SHA1 96a19bfb18469dc1cfe6cf8033b1089cdfc28c18
- SHA512 0c00692e38739c8d3d9837973cd4f3f5f12443850eeebb67dff23eb587254487fdb926d2f93fda74815757b70c43b3f2a86e3eafb1805ea717e48674c67bd8dd
- TLSH T161F04C16C52D0D04F7FB09E0261A008B396DD4BD5AD16394BAAD90D246270DBE3F36E8
- MD5 SHA1 SHA512 TLSH
Examples/LockedList/LockedListTest.nsi
- SHA256 b7c45bcfe730e0a0b24bae3cb8e4d7a8fee3de9b4fcdf638c27471f0e97b8bbb
- MD5 d15a342def031e5bb4e118951c2004b1
- SHA1 8f8ddba39bb83ffa02921e5bb8ddd0b95eaf03f9
- SHA512 62573fa68bbc6603c877b02bd018b835b03ca8fe65b0a04aeef8dc4765e858977dd06f6ffbfaec7d9363b40d33667ba61584c7015d835e52028fc9258c628f89
- SSDEEP 96:DLMKUGJM5GuZ9yv7PZkkTmkjDmxdRDb/aVEBg7QIyqGhrIAuBQDaa+9D5ySNKVjS:cKlJMwuZ9G7PZkkT5jD8Tn/aVEC7QIyw
- TLSH T1B6911F1BA92A1C75FB7345A02A0F149FAB14D47D858406667ABD00DC0B138D7A3FB6CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LockedList64.dll
- IMPHASH 30682cbcd9e51d263811845cece41fd0
- SHA256 4e2b4b1edb69b00cedb91dc8e49b847a65ca0d2652064a8d6ef827eed49620ad
- MD5 677681075bf5bc79879c0dbedeed1c0c
- SHA1 c51b02537bb9f5fd6ff2da8ecab6e2874120a756
- SHA512 97771399174c965de98e9444795ab625dec183540633246cb1f57281b7e2bfc684a16c2c4f65a576714df3f475805728c2ff74a3779e2984eeab8163a86c11a8
- SSDEEP 192:zZLexn8jDfTRPe+ph5Tcz/sETbZGA/wlsU8+CqX:zZLex8j7TVe+ph5wzbbZN/wlsU8lq
- TLSH T1F912F84527F8124CE4E64674AA760F1FEBB5B84A1461D71F0930D14E6F1BB02BE3ABA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetCurrentProcess
lstrcmpW
CloseHandle
GlobalAlloc
lstrcpynW
GlobalFree
lstrcpyW
WaitForSingleObject
GetModuleHandleW
OpenProcess
LoadLibraryW
lstrlenW
GetProcAddress
ResetEvent
CreateEventW
lstrcatW
GetVersion
QueryDosDeviceW
user32
wsprintfW
GetWindow
GetWindowThreadProcessId
GetWindowTextW
EnumWindows
GetWindowLongPtrW
IsWindow
SendMessageW
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
shell32
CommandLineToArgvW
EnumSystemProcesses64W
GetSystemModulesCount64W
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=41, id=1, productName=Unmarked objects,
count=11, id=185, version=30716,
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=3, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Plugins/x86-ansi/LockedList.dll
- IMPHASH 1f24eeb49cd5ab55727208afd8ac7b2f
- SHA256 7f150baffafedd777ae27ad7d9782f4e804653068053102e55c8438230e65868
- MD5 a1ac202541aeb73245d9caedca1c9577
- SHA1 d30dc312d5394f5cde418560bb2e0b6e46f4f7d6
- SHA512 73e641317b7c16f4f3f8c2786897bac8891065b7f877af3c0892ba222ea4737679096cd9241e0225b85ceb8a1a3d6b9b7016ed016f83ca3d05a2aa33d6cc5913
- SSDEEP 768:4yINiCg6KMSMfnYRLYpZjS17JShksxagf6qg:hxap6HhJSfxbZ
- TLSH T178C21941495110F7E7AE063878D93B1F9EFEF53824E1A4A78F37A0D82E65117F62A342
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16117
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
comctl32
ImageList_ReplaceIcon
ImageList_Create
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
PathRemoveFileSpecA
PathFileExistsA
PathAppendA
kernel32
LoadLibraryA
DuplicateHandle
ResetEvent
CreateFileA
lstrcmpA
lstrlenA
GetCurrentProcess
WaitForSingleObject
OpenProcess
GlobalAlloc
WideCharToMultiByte
Sleep
TerminateProcess
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GlobalFree
LocalAlloc
GetExitCodeThread
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetCurrentProcessId
LocalFree
CreateThread
lstrcpyA
lstrcpynA
QueryDosDeviceA
SetEvent
TerminateThread
CreateEventA
GetProcAddress
GetVersion
user32
CallWindowProcA
DestroyMenu
EnableWindow
MapWindowPoints
LoadImageA
SetWindowTextA
GetSystemMetrics
OpenClipboard
DispatchMessageA
PostMessageA
IsWindow
AppendMenuA
CreatePopupMenu
ShowWindow
GetCursorPos
SetWindowPos
SendMessageTimeoutA
GetDlgItem
EmptyClipboard
PeekMessageA
CreateWindowExA
CharLowerA
DestroyIcon
MessageBoxA
SetWindowLongA
GetWindowTextA
TranslateMessage
IsDialogMessageA
SendMessageA
GetClientRect
wsprintfA
MsgWaitForMultipleObjects
TrackPopupMenu
CreateDialogParamA
SetActiveWindow
GetWindowRect
ScreenToClient
GetClassNameA
CloseClipboard
GetMessageA
SetCursor
DestroyWindow
GetWindow
GetWindowThreadProcessId
GetWindowLongA
EnumWindows
MoveWindow
SetCursorPos
SetClipboardData
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
shell32
ShellExecuteExA
ExtractIconExA
AddApplications
AddCaption
AddClass
AddCustom
AddFile
AddFolder
AddModule
CloseProcess
Dialog
EnumProcesses
FindProcess
InitDialog
IsFileLocked
Show
SilentPercentComplete
SilentSearch
SilentWait
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=98, id=1, productName=Unmarked objects,
count=15, id=185, version=30716,
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=3, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Plugins/x86-unicode/LockedList.dll
- IMPHASH c26621761683a926589c7f7a96aa5d75
- SHA256 671570118024c9132f12999e198cebc87b3bf1846695553bf478c5a42efec226
- MD5 2ee096682cc84f5fd44fb5291c00596c
- SHA1 8dccebf054abe13e5b324dfdfbe6605553971396
- SHA512 1ffdc3a5256b8eb62aff82c6429dcdf582009a908d43ab30d3fad84770b012be59c972323b6ae2b8d7ea2ae29d8ab3a99913205a0b33582e95dc813c31507d3d
- SSDEEP 768:Mne3kAZoxbRX66y11T9vBD3fNUHeBuf6qW:MnnTZyX9vBDvNU+UZ
- TLSH T107D2194457E000F7F7BE1AB079A92B0A5ABEF91868F195AB4F3754CA1D61112F628343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16437
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
comctl32
ImageList_ReplaceIcon
ImageList_Create
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
kernel32
QueryDosDeviceW
DuplicateHandle
CreateEventW
GetCurrentProcess
WaitForSingleObject
GetModuleHandleW
OpenProcess
GlobalAlloc
Sleep
TerminateProcess
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetLastError
GlobalFree
LocalAlloc
GetExitCodeThread
WaitForMultipleObjects
lstrcmpiW
lstrcatW
CloseHandle
GetCurrentProcessId
LocalFree
lstrcpyW
CreateThread
lstrcpynW
SetEvent
LoadLibraryW
TerminateThread
GetProcAddress
ResetEvent
GetVersion
user32
DestroyIcon
SetWindowTextW
CallWindowProcW
SetClipboardData
EnableWindow
MapWindowPoints
SendMessageW
GetSystemMetrics
MessageBoxW
OpenClipboard
CreateWindowExW
IsWindow
CreateDialogParamW
SendMessageTimeoutW
CreatePopupMenu
ShowWindow
GetCursorPos
SetWindowPos
SetWindowLongW
GetDlgItem
EmptyClipboard
GetClassNameW
MoveWindow
GetWindowTextW
AppendMenuW
SetCursorPos
IsDialogMessageW
TranslateMessage
wsprintfW
CharLowerW
GetClientRect
MsgWaitForMultipleObjects
PostMessageW
LoadImageW
TrackPopupMenu
GetMessageW
SetActiveWindow
GetWindowRect
ScreenToClient
CloseClipboard
SetCursor
DestroyWindow
GetWindow
GetWindowThreadProcessId
GetWindowLongW
EnumWindows
DispatchMessageW
PeekMessageW
DestroyMenu
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
shell32
ExtractIconExW
ShellExecuteExW
AddApplications
AddCaption
AddClass
AddCustom
AddFile
AddFolder
AddModule
CloseProcess
Dialog
EnumProcesses
FindProcess
InitDialog
IsFileLocked
Show
SilentPercentComplete
SilentSearch
SilentWait
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=97, id=1, productName=Unmarked objects,
count=15, id=185, version=30716,
count=4, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,