![]() ![]() Source: C:\Users\u ser\Deskto p\Wireshar k-win64-3. exeĬode function: 4_2_00CD7C 27 _memset ,CryptAcqu ireContext W,GetLastE rror,Crypt CreateHash ,GetLastEr ror,ReadFi le,CryptHa shData,Rea dFile,GetL astError,C ryptGetHas hParam,Get LastError, SetFilePoi nterEx,Get LastError, GetLastErr or,CryptDe stroyHash, CryptRelea seContext,Ĭode function: 4_2_00CB82 81 _memset ,CryptCATA dminCalcHa shFromFile Handle,Get LastError, GetLastErr or,CryptCA TAdminCalc HashFromFi leHandle,G etLastErro r,WinVerif yTrust,Win VerifyTrus t,WinVerif yTrust,Ĭode function: 4_2_00CB85 58 CryptHa shPublicKe yInfo,GetL astError,Ĭode function: 4_2_00CB86 D9 Decrypt FileW,Ĭode function: 4_1_00CD7C 27 _memset ,CryptAcqu ireContext W,GetLastE rror,Crypt CreateHash ,GetLastEr ror,ReadFi le,CryptHa shData,Rea dFile,GetL astError,C ryptGetHas hParam,Get LastError, SetFilePoi nterEx,Get LastError, GetLastErr or,CryptDe stroyHash, CryptRelea seContext,Ĭode function: 4_1_00CB82 81 _memset ,CryptCATA dminCalcHa shFromFile Handle,Get LastError, GetLastErr or,CryptCA TAdminCalc HashFromFi leHandle,G etLastErro r,WinVerif yTrust,Win VerifyTrus t,WinVerif yTrust,Ĭode function: 4_1_00CB85 58 CryptHa shPublicKe yInfo,GetL astError,Ĭode function: 4_1_00CB86 D9 Decrypt FileW,Ĭode function: 5_1_00CB86 D9 Decrypt FileW,Ĭode function: 5_1_00CB82 81 _memset ,CryptCATA dminCalcHa shFromFile Handle,Get LastError, GetLastErr or,CryptCA TAdminCalc HashFromFi leHandle,G etLastErro r,WinVerif yTrust,Win VerifyTrus t,WinVerif yTrust,Ĭode function: 5_1_00CD7C 27 _memset ,CryptAcqu ireContext W,GetLastE rror,Crypt CreateHash ,GetLastEr ror,ReadFi le,CryptHa shData,Rea dFile,GetL astError,C ryptGetHas hParam,Get LastError, SetFilePoi nterEx,Get LastError, GetLastErr or,CryptDe stroyHash, CryptRelea seContext,Ĭode function: 5_1_00CB85 58 CryptHa shPublicKe yInfo,GetL astError,Ĭontains functionality to enumerate / list files inside a directory Source: C:\Program Files\Wir eshark\vcr edist_圆4. Uses Microsoft's Enhanced Cryptographic Provider Found application associated with file extension.Successful, ratio: 69% (good quality ratio 66.1%). ![]() Number of analysed new started processes analysed: ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |