| edcfa1ebba218fef31113b6ce16724ec4d8836439e26899ec11cddee848436bd.exe.000 | |
| PE32 executable (GUI) Intel 80386, for MS Windows | 389632 bytes |
| 2016-12-22 11:05:15 | |
| 38503c00be6b7f7eeb5076c0bd071b4c | |
| 6c03203b2d49756c34361dabd9667181d278496c | |
| edcfa1ebba218fef31113b6ce16724ec4d8836439e26899ec11cddee848436bd | |
| 0f13ef689be3e9368e3486a8b1268dd872599ebbc9cd7d49e386f4b37923416ca03f2a2954ed58c2697d99e7912333370f43c50f187b38c8c8c583517767699d | |
| 6144:DBPWQvWZvufr3gXHy50YsX9OtPncT7Sn98jw3jc/Neyo8vTjqks4h1GoGSLm7Xa:Ua+gZvp6DmAcZ5vDEPWja | |
| 07c06fdf6b11c27c520bf00a7c172986 | |
| N/A | |
| Source: |

| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |