General Info

File name

Restorator.exe

Full analysis
https://app.any.run/tasks/d21aab3c-843e-4a4e-b925-32b87f073d8c
Verdict
Malicious activity
Analysis date
2/11/2019, 13:08:44
OS:
Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:

installer

Indicators:

MIME:
application/x-dosexec
File info:
PE32 executable (GUI) Intel 80386, for MS Windows, InnoSetup self-extracting archive
MD5

4fa201b62ebc23281ee05674557f6bca

SHA1

39873a6eb308050f111c989f8f1615c46cb5d710

SHA256

cff5017076b2409086a0a0832641ca0f22bdc63063b116aacad6092bafa3d486

SSDEEP

98304:VdfGeDyw+AMe0hJoat1zjwJdv3w6Wa+LefgiPHHQ0wy/:n+eDymMeXGQnv3HW4IivwS

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distored by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Software environment set and analysis options

Launch configuration

Task duration
60 seconds
Additional time used
none
Fakenet option
off
Heavy Evaision option
off
MITM proxy
off
Route via Tor
off
Network geolocation
off
Privacy
Public submission
Autoconfirmation of UAC
on

Software preset

  • Internet Explorer 8.0.7601.17514
  • Adobe Acrobat Reader DC MUI (15.023.20070)
  • Adobe Flash Player 26 ActiveX (26.0.0.131)
  • Adobe Flash Player 26 NPAPI (26.0.0.131)
  • Adobe Flash Player 26 PPAPI (26.0.0.131)
  • Adobe Refresh Manager (1.8.0)
  • CCleaner (5.35)
  • FileZilla Client 3.36.0 (3.36.0)
  • Google Chrome (68.0.3440.106)
  • Google Update Helper (1.3.33.17)
  • Java 8 Update 92 (8.0.920.14)
  • Java Auto Updater (2.8.92.14)
  • Microsoft .NET Framework 4.6.1 (4.6.01055)
  • Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Professional 2010 (14.0.6029.1000)
  • Microsoft Office Proof (English) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (French) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
  • Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
  • Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Single Image 2010 (14.0.6029.1000)
  • Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
  • Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
  • Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
  • Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (14.15.26706.0)
  • Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 (14.15.26706)
  • Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 (14.15.26706)
  • Mozilla Firefox 61.0.2 (x86 en-US) (61.0.2)
  • Notepad++ (32-bit x86) (7.5.1)
  • Opera 12.15 (12.15.1748)
  • Skype version 8.29 (8.29)
  • VLC media player (2.2.6)
  • WinRAR 5.60 (32-bit) (5.60.0)

Hotfixes

  • Client LanguagePack Package
  • Client Refresh LanguagePack Package
  • CodecPack Basic Package
  • Foundation Package
  • IE Troubleshooters Package
  • InternetExplorer Optional Package
  • KB2534111
  • KB2999226
  • KB976902
  • LocalPack AU Package
  • LocalPack CA Package
  • LocalPack GB Package
  • LocalPack US Package
  • LocalPack ZA Package
  • ProfessionalEdition
  • UltimateEdition

Behavior activities

MALICIOUS SUSPICIOUS INFO
Application was dropped or rewritten from another process
  • Restorator.exe (PID: 2756)
  • Restorator.exe (PID: 4088)
  • UninsHs.exe (PID: 2324)
Creates files in the user directory
  • is-KGGPI.tmp (PID: 2524)
Creates files in the Windows directory
  • is-KGGPI.tmp (PID: 2524)
Executable content was dropped or overwritten
  • is-KGGPI.tmp (PID: 2524)
  • Restorator.exe (PID: 3528)
Creates a software uninstall entry
  • is-KGGPI.tmp (PID: 2524)
Loads dropped or rewritten executable
  • is-KGGPI.tmp (PID: 2524)
Application was dropped or rewritten from another process
  • is-KGGPI.tmp (PID: 2524)
Creates files in the program directory
  • is-KGGPI.tmp (PID: 2524)

Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

Static information

TRiD
.exe
|   Inno Setup installer (82.8%)
.exe
|   Win32 Executable Delphi generic (10.7%)
.exe
|   Win32 Executable (generic) (3.4%)
.exe
|   Generic Win/DOS Executable (1.5%)
.exe
|   DOS Executable Generic (1.5%)
EXIF
EXE
MachineType:
Intel 386 or later, and compatibles
TimeStamp:
1992:06:20 00:22:17+02:00
PEType:
PE32
LinkerVersion:
2.25
CodeSize:
35840
InitializedDataSize:
16896
UninitializedDataSize:
null
EntryPoint:
0x9408
OSVersion:
1
ImageVersion:
null
SubsystemVersion:
4
Subsystem:
Windows GUI
FileVersionNumber:
0.0.0.0
ProductVersionNumber:
0.0.0.0
FileFlagsMask:
0x003f
FileFlags:
(none)
FileOS:
Win32
ObjectFileType:
Executable application
FileSubtype:
null
LanguageCode:
English (U.S.)
CharacterSet:
Windows, Latin1
Comments:
This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:
FileDescription:
Restorator 2007 Setup
FileVersion:
InternalName:
null
OriginalFileName:
null
ProductName:
null
ProductVersion:
null
Summary
Architecture:
IMAGE_FILE_MACHINE_I386
Subsystem:
IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date:
19-Jun-1992 22:22:17
Detected languages
Dutch - Netherlands
English - United States
Comments:
This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:
null
FileDescription:
Restorator 2007 Setup
FileVersion:
null
InternalName:
null
OriginalFilename:
null
ProductName:
null
ProductVersion:
null
DOS Header
Magic number:
MZ
Bytes on last page of file:
0x0050
Pages in file:
0x0002
Relocations:
0x0000
Size of header:
0x0004
Min extra paragraphs:
0x000F
Max extra paragraphs:
0xFFFF
Initial SS value:
0x0000
Initial SP value:
0x00B8
Checksum:
0x0000
Initial IP value:
0x0000
Initial CS value:
0x0000
Overlay number:
0x001A
OEM identifier:
0x0000
OEM information:
0x0000
Address of NE header:
0x00000100
PE Headers
Signature:
PE
Machine:
IMAGE_FILE_MACHINE_I386
Number of sections:
8
Time date stamp:
19-Jun-1992 22:22:17
Pointer to Symbol Table:
0x00000000
Number of symbols:
0
Size of Optional Header:
0x00E0
Characteristics
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
Sections
Name Virtual Address Virtual Size Raw Size Charateristics Entropy
CODE 0x00001000 0x00008B44 0x00008C00 IMAGE_SCN_CNT_CODE,IMAGE_SCN_MEM_EXECUTE,IMAGE_SCN_MEM_READ 6.57836
DATA 0x0000A000 0x00000248 0x00000400 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 2.72564
BSS 0x0000B000 0x00000E48 0x00000000 IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 0
.idata 0x0000C000 0x000008C2 0x00000A00 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 4.23859
.tls 0x0000D000 0x00000008 0x00000000 IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 0
.rdata 0x0000E000 0x00000018 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_SHARED 0.199108
.reloc 0x0000F000 0x00000850 0x00000000 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_SHARED 0
.rsrc 0x00010000 0x00002800 0x00002800 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_SHARED 4.27871
Resources
1

2

3

4

4089

4090

4091

4093

4094

4095

MAINICON

Imports
    kernel32.dll

    user32.dll

    oleaut32.dll

    advapi32.dll

    comctl32.dll

Exports

    No exports.

Screenshots

Processes

Total processes
39
Monitored processes
6
Malicious processes
0
Suspicious processes
1

Behavior graph

+
drop and start start drop and start restorator.exe no specs restorator.exe is-kggpi.tmp uninshs.exe no specs restorator.exe no specs restorator.exe no specs
Specs description
Program did not start
Integrity level elevation
Task сontains an error or was rebooted
Process has crashed
Task contains several apps running
Executable file was dropped
Debug information is available
Process was injected
Network attacks were detected
Application downloaded the executable file
Actions similar to stealing personal data
Behavior similar to exploiting the vulnerability
Inspected object has sucpicious PE structure
File is detected by antivirus software
CPU overrun
RAM overrun
Process starts the services
Process was added to the startup
Behavior similar to spam
Low-level access to the HDD
Probably Tor was used
System was rebooted
Connects to the network
Known threat

Process information

Click at the process to see the details.

PID
3044
CMD
"C:\Users\admin\AppData\Local\Temp\Restorator.exe"
Path
C:\Users\admin\AppData\Local\Temp\Restorator.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
3221226540
Version:
Company
Description
Restorator 2007 Setup
Version
Modules
Image
c:\users\admin\appdata\local\temp\restorator.exe
c:\systemroot\system32\ntdll.dll

PID
3528
CMD
"C:\Users\admin\AppData\Local\Temp\Restorator.exe"
Path
C:\Users\admin\AppData\Local\Temp\Restorator.exe
Indicators
Parent process
––
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Description
Restorator 2007 Setup
Version
Modules
Image
c:\users\admin\appdata\local\temp\restorator.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\winmm.dll
c:\windows\system32\samcli.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\mpr.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\users\admin\appdata\local\temp\is-knvj1.tmp\is-kggpi.tmp

PID
2524
CMD
"C:\Users\admin\AppData\Local\Temp\is-KNVJ1.tmp\is-KGGPI.tmp" /SL4 $3011C C:\Users\admin\AppData\Local\Temp\Restorator.exe 3376861 51200
Path
C:\Users\admin\AppData\Local\Temp\is-KNVJ1.tmp\is-KGGPI.tmp
Indicators
Parent process
Restorator.exe
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Description
Setup/Uninstall
Version
51.34.0.0
Modules
Image
c:\users\admin\appdata\local\temp\is-knvj1.tmp\is-kggpi.tmp
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\mpr.dll
c:\windows\system32\version.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\winmm.dll
c:\windows\system32\samcli.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\users\admin\appdata\local\temp\is-i8jqe.tmp\_shfoldr.dll
c:\windows\system32\shfolder.dll
c:\windows\system32\imageres.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\propsys.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\shdocvw.dll
c:\windows\system32\riched20.dll
c:\windows\system32\linkinfo.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\srvcli.dll
c:\windows\system32\cscapi.dll
c:\windows\system32\slc.dll
c:\program files\restorator 2007\restorator.exe
c:\program files\restorator 2007\uninshs.exe
c:\windows\system32\netutils.dll

PID
2324
CMD
"C:\Program Files\Restorator 2007\UninsHs.exe" /r=Restorator2007,ru,C:\Users\admin\AppData\Local\Temp\Restorator.exe
Path
C:\Program Files\Restorator 2007\UninsHs.exe
Indicators
No indicators
Parent process
is-KGGPI.tmp
User
admin
Integrity Level
HIGH
Exit code
0
Version:
Company
Han-soft
Description
Uninstall for InnoSetup by Han-soft
Version
2.1.0.88
Modules
Image
c:\program files\restorator 2007\uninshs.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\winmm.dll
c:\windows\system32\samcli.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\mpr.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll

PID
4088
CMD
"C:\Program Files\Restorator 2007\Restorator.exe"
Path
C:\Program Files\Restorator 2007\Restorator.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
bome.com
Description
Restorator: Edit Resources and User Interface
Version
3.7.0.1729
Modules
Image
c:\program files\restorator 2007\restorator.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\version.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\comdlg32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\uxtheme.dll

PID
2756
CMD
"C:\Program Files\Restorator 2007\Restorator.exe"
Path
C:\Program Files\Restorator 2007\Restorator.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
bome.com
Description
Restorator: Edit Resources and User Interface
Version
3.7.0.1729
Modules
Image
c:\program files\restorator 2007\restorator.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\version.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\winspool.drv
c:\windows\system32\comdlg32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\uxtheme.dll

Registry activity

Total events
396
Read events
383
Write events
13
Delete events
0

Modification events

PID
Process
Operation
Key
Name
Value
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\RestoratorContextMenu.dll
1
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: Setup Version
5.0.5-beta
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: App Path
C:\Program Files\Restorator 2007
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
InstallLocation
C:\Program Files\Restorator 2007\
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: Icon Group
Restorator 2007
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: User
admin
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: Selected Tasks
desktopicon,quicklaunchicon,startmenuicon
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
Inno Setup: Deselected Tasks
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
DisplayName
Restorator 2007
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
UninstallString
"C:\Program Files\Restorator 2007\unins000.exe"
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
QuietUninstallString
"C:\Program Files\Restorator 2007\unins000.exe" /SILENT
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
NoModify
1
2524
is-KGGPI.tmp
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Restorator 2007_is1
NoRepair
1

Files activity

Executable files
7
Suspicious files
0
Text files
116
Unknown types
16

Dropped files

PID
Process
Filename
Type
3528
Restorator.exe
C:\Users\admin\AppData\Local\Temp\is-KNVJ1.tmp\is-KGGPI.tmp
executable
MD5: 03f223c0325921ed76723d3cd2e33ab0
SHA256: c32f7e64a0c279a8cbcc34743ddc9a5cfe60fc8f2219b07da283db465b87dfef
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UninsHs.exe
executable
MD5: 57ab73a344317de3262bcbe834831b12
SHA256: 206139b9f803116cbf6bcacc3fb63a8b5f232b1a8a4606915ef67703bb8e9f19
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\upx.exe
executable
MD5: 3bb8d60966ee980c8e6ea2e940c41dd9
SHA256: ea85ff7e05480940d2cd08c53031e080ff55a124cb00d961fea7c277de80c734
2524
is-KGGPI.tmp
C:\Windows\system32\RestoratorContextMenu.dll
executable
MD5: feb0ea4b99ee29e94ffa3e90e4da28da
SHA256: 15242d9802a1d5c7a7dbef9ad1214171815a20f35105b1858896811029bf8fb1
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\unins000.exe
executable
MD5: cacf756ea5f708358eca560fa3906f67
SHA256: a3751a527b11fa2675392b6ba226a7fcc329123334f6230034329a3ca574c65f
2524
is-KGGPI.tmp
C:\Users\admin\AppData\Local\Temp\is-I8JQE.tmp\_shfoldr.dll
executable
MD5: 92dc6ef532fbb4a5c3201469a5b5eb63
SHA256: 9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\Restorator.exe
executable
MD5: 8beaad34af33bc1c4b5e5b479d539c8f
SHA256: ff71350164bd7e4f498413b365573029c0ea0154a5ccaa9327f8932c3a3948d9
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Help\What's New.lnk
lnk
MD5: a24772ac24e6b746e91cd93548a5ce6f
SHA256: 6c390cdcb3af44f5862c5091e1fa353c65f9c9e52f3787d9900b215e66b72c3b
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Help\Discussion Forums [online].lnk
lnk
MD5: 68284975358d882b5d935da11c571ac6
SHA256: a072f7a9e046bff6ee687cfd281f6eab301fc1c004b05f69b3baebb8bf917835
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Help\Tutorials.lnk
lnk
MD5: eb29466bd96b458c802c2baa091ba355
SHA256: 4f3b84470f9b7fc82c020ae40418fbec021be4d3eaf7c777bf005f555e1f83c3
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Help\FAQ (frequently asked questions).lnk
lnk
MD5: 1ab1601f003c86cf4ea0361c9b3469ef
SHA256: 0410cbc2f3fa82fa8b8aaf783b867dafcbe81c8438552639aa0616e78aae61dd
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Help\Reference Manual.lnk
lnk
MD5: cfabf038bb7e9747e249b7c529b11e0c
SHA256: ebb14e9f35daa66a92f71d6066ce6d6cfb833d7c995609c01c8008f800fb5726
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Ïðîâåðèòü Îáíîâëåíèÿ [online].lnk
lnk
MD5: 63e89818802659ad8dac0917605a53cf
SHA256: 672053fd41c91563dd867bed8d429e9206198060c0690df66211937182a9ac69
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Ñàéò àâòîðà ïåðåâîäà.lnk
lnk
MD5: 760f942a6316b1f15d3633984a292480
SHA256: 765c3aea5dbf08436bbb94bcccd09228e4e9b0299b7c23d56968d319a1714483
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Ñàéò Restorator.lnk
lnk
MD5: d0367d7654540a0d6e6283c3bda10773
SHA256: be0343ae247180b8717af91d710a3d7b10161f987ff463c33ac79b0f3b25753a
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Restorator 2007.lnk
lnk
MD5: eb75e114cf3d608dac1d3e871d2f24a9
SHA256: aeff2709012860733ee58002354e77767f2631a137ad2c7c80939999c80c1d33
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\unins000.dat
dat
MD5: 4eeba731e96963c6409f71f06e5462fa
SHA256: 8ab387019deb6ceadcff817fe3fa8a91f6e38245680fc698868b81efdd104726
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-KNVS3.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007\Uninstall Restorator 2007.lnk
lnk
MD5: 1e6302ed2c1855c55aaefb2260bece3d
SHA256: 8168236c96c62a265520cf29f2bb4ed8f09e194f28ab96b14db836cf00a6b536
2524
is-KGGPI.tmp
C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Restorator 2007.lnk
lnk
MD5: c1b658fbeabc9b9ddc43a01e843b32dd
SHA256: 7947a3fe7af88c0ff1d3b837fe144a5d7952aeeed8095543e5448b5de99ad67d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\upx.html
xml
MD5: d9baba9e20f4c6e0b99abd11a3c4cb50
SHA256: e4c96c64c46d68be3a3c0eac81d08071f88e9b324fc055ea97d5bcb9ebb6e13d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-1SG73.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-V30SU.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-QJUTI.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\upx.doc
text
MD5: 99b36d4b270308933a502b9a7f7f26b4
SHA256: ccb572c523d92a4a975ae0fed7a4a3ae7fafcf78355dfdcb84fe511842b75fca
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\upx.1
text
MD5: 921e0122f442f1bbd92cd7c126b58c81
SHA256: f4cb607abf02f446a74a58cf7649d151c977752f1a1ec66e4cc96253b363d51f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-R8CG4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\TODO
text
MD5: d334cebec3a1c4b627147111ddeb9d79
SHA256: e9c9143d22b397c5fd313de43e6141ecc7571031143a7f59dd5ac808f23af349
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\THANKS
text
MD5: b467632c6c96ecc420a6c27037fb4cf6
SHA256: 8cb0ef190e6d8e0db8704a5d3ef5a157348eb12f4422b7291e12357e0a62cd11
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\README.1ST
text
MD5: c0544680701d5fb42ad3a96ba4d15885
SHA256: 23afdb5a5e43443d1114c162d2e4dabb13e4b4cd41b804ec741a6956bc7e8790
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-A1GD9.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-CCP1E.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-ALM7I.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-71GD2.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\BUGS
text
MD5: 746c988c6f9d60fc6da52d2f3bb1dbf8
SHA256: 29e8de7adb68a87634407a27cf952dbba9f470d8edadedc8c1d41e8c49ce383c
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\NEWS
text
MD5: 755250a0574873f03d694fdf230bfb8f
SHA256: cd646baaec83b73b9f756afcfd83eefe812d64ab8d4f58eff489e08229780700
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\COPYING
text
MD5: dfeaf3dc4beef4f5a7bdbc35b197f39e
SHA256: 70439f6e2b47057a408d2390ed6663b9875f5a08066a06a060a357ef1df89a8c
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\README
text
MD5: 1f910bb499e040fb006a349c9fb5395f
SHA256: 90f9e98cda328f905bfd5b06c5b10c05ae6969abf6566a53a132c0f311ce05f2
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\LICENSE
text
MD5: 353753597aa110e0ded3508408c6374a
SHA256: 905d4a66d5324e154d976bbf88829d4d9263815a2b97cc40954f06d4a23c28eb
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-S46I3.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-8M42U.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-MSQU8.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-BDD66.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\UPX\is-RL7HA.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\order_form.html
html
MD5: 6ad06561f767ad62a0c6955ee8f2b894
SHA256: 671d77815cf864fd4af9b7d8ad7db5ec1b3f48993c6ffd0fe02052ae8c12624f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\webicon.ico
image
MD5: 9814d9f94e8f6ee572c1e59c23528846
SHA256: 4821259d47c91336a06aeb13a26abeda29398e831b1afb08e9cc415ab98bf1d3
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\styles.css
text
MD5: 4a72e1a5a316f83aeab5eea9b6c542d7
SHA256: 2b6c81da21c1b16ce47aec180be731766c1e2f96e883fbee8c32d6dbdc5ee275
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\purchase.html
html
MD5: 486e4533c9e946d9bae1458a830322da
SHA256: c6ff2bc37db8018322b1c3735feae7906d412ac9cebb3f1819c731a1cf6409d4
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-IA94P.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-7M544.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-SCJOR.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\license.txt
text
MD5: 830bc4e5ab2f21771c7319d8336e9979
SHA256: 3ac43eed1cd28a7efcfbf5421b9c95ef3b70e81ae551355b78618d4b883a86f1
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\features.html
html
MD5: 3c08536b8c7504f5fbf4586e082f7955
SHA256: 9d642a13d9ce1f46f6e6b1af2961af28d0a773dd8fd54c29644aab53c78798dd
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\zhmak.info.url
text
MD5: 17e2f9f61164ebb596a3f36d7b7139a1
SHA256: 31e083274f32aaabd7459b2c24f078adb9b95de3cdd625aec7a7f996cd743180
2524
is-KGGPI.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restorator 2007.lnk
lnk
MD5: 9185fae2587de708f6b2e5552396d9a6
SHA256: 27fcac62f88b1f2930cf1c3c735f8d3f008df978595b9bcd1715dda6df8223ca
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-02UM4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-LRCLK.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-OH37E.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-C36BR.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Windows\system32\is-BE515.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\edit_locale.png
image
MD5: f484014bba45ee59f49beebf300a62ce
SHA256: 9ce2e9534b7a01cb6fc7c6d28d0e74941847d8a2351dbad91007f1b9f5032164
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpwelcome.png
image
MD5: f39a01dc99e3951867805b52435e3041
SHA256: fdcd75ef277a33fbb64e36e2d7d333b7c5b23b3d2da80fe46fecadff898a3b93
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-N4PNH.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-KFGVF.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpstep1.png
image
MD5: 722c2ef3435c22013374706c4cb6bdb4
SHA256: 51e66111a9226c9236330a6e68fcc31848ae3e2c82e477e43bc44cc2d6a888a5
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpstep4.png
image
MD5: ad89b17784b4ef3d5f90dcc1c1adb8f4
SHA256: a1ba8675716fd3b2d02298958f2ff2580972b44ee6e827d20f18d31ffc7ee000
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpstep3.png
image
MD5: a404d03457c675c85171b098c44cb18d
SHA256: c65137c6df9b7e626418a4c263af585c70b84e057476cd57fc48d66b63121267
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpstep2.png
image
MD5: d633c03d70677e3af1a615109db53e95
SHA256: 4aa94aec7f00ab24cbdb981343679c2dc66a0687feb18a52a1b9fd19f6dd3c93
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-RLP4A.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-20BP4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-VJJS4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\respatcher.png
image
MD5: a6fe175d1d954628ad4d05aaa7503876
SHA256: e868580b05c7d1cb3da1dc2b777bfc05b813c15d2cedb24ed101664e3e048360
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\interface\overview.png
image
MD5: 50590e201bfb5cd8eefc5777be1d510b
SHA256: a7d9c5c0b6957d38e86a35f027dcbce5c40ab290130b3dbe85ce73f9575f05de
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\rpbluearrow.png
image
MD5: afc8f1f8fa347b642699a409166a802a
SHA256: 200cc7303eb065c7a71d47116d503f29d09199578962037c198d8123c0a7174b
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-5J7DM.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-73FMQ.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\rp\is-NSTNC.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\interface\is-0VSHS.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\interface\file_browser.png
image
MD5: 28c7435769db94538b9cfe55831104e7
SHA256: e1fe79061e70b5f3e36ecea69e0d217a5d1e88cf50d7e0fae844c739e6d131a6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\interface\is-ENB94.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\version_edit.png
image
MD5: dc2aa607c81a90698c85dd5d85dce3cb
SHA256: 29bf231d182556d3e9c057a96061003baa0e1de12fa6df5fdf1b08c1ef08fcf6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expstring.png
image
MD5: 62f80d7d6be684cfe3373c6ac94c284f
SHA256: 36cbd6e8c536f8ceb82cb5239d3b8856e95bfd9c61b31a814f91af9caf319f5f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\grab\grab_resources.png
image
MD5: 1c56383096a53fc4510dada53dfeb161
SHA256: c76daf5d150a8dece9eb4518fc7cd974719da7a3db16133841291fa4f134707f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-0RKL0.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-NLT7E.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\grab\is-KMK5R.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expopen.png
image
MD5: da9cc2584b060a6636be3003a5eab3e7
SHA256: 0513664b3e8b03ae3b6016b0dec50b32d979f9e6c0c5752dcc15f6d44c441252
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expimages.png
image
MD5: 68f31bff7fd453336325ca0c289f75ec
SHA256: 120a80d7767a3d18a9c1d69d3cf4fb5ff03c75d644453ec9da718162b2bb2670
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expmenu.png
image
MD5: 46f1e9df43145b86ade9a9bb616b9e84
SHA256: ccbccae8238963d6ff95b2c55c8916fe24c562a884967c8db429df4ea972f2bf
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-20UJV.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-6ABJ0.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expimage.png
image
MD5: df75560885ff8d1df885949a87b8d1f8
SHA256: fca8b80296ca3965103793d7eec4703863a3c770b19121628f1fe857011a57ef
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expicon.png
image
MD5: a46fb292e9f26c2e32e77bf4a1839eea
SHA256: 9c84b50b962e9abdce714f535ea5d47b194cb164f69ea82e0a2159851e54c07f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-3PO5O.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-AU8C8.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expdlg.png
image
MD5: ca2f6c7706599cb4adca911a7e2fd47c
SHA256: ae74c1b4650cc8370759c965fd1d52d8904f482855a52c97a829bc1d59c46a22
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expacc.png
image
MD5: 960c419c44beafabfa445ee0fc3fa766
SHA256: 0e42643847c56df8947e9b17df18465b694736acd9e197a2bf192833f517c3dd
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-UHLB4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-CFHVE.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-R3MQI.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\dlgedit2.png
image
MD5: 98f27a9a936024d94296e01fc91c587a
SHA256: 6dfa42d3341e3b41a755dc1caf83096d54c47a6c10bfa9403415758ac0db9d82
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\dlgedit3.png
image
MD5: d998d370b0a5c9799d576de3d018ef59
SHA256: 9b02f818cb4f961d2c46d199333adadf777f929c3054eab0c9bad251bb12f53a
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\is-TRVLR.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\is-L608E.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\dlgedit1.png
image
MD5: 7af5ee73161eded54676d1904e9406de
SHA256: d42afa68263c2c271f623bd60e15ed381e8e5847a598aea983b4a57fe7a5879f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\dlgedit\is-5OLPC.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\splash.png
image
MD5: 9b3ac13c91d4f7ec69ba33fae01022f0
SHA256: 35f8bd1ca95f9ecc1de8038bdf723e1b2f081d8782c82a2c78c11065116909ac
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\extract.png
image
MD5: 67b5718e61c0815818d35e2f7594fccb
SHA256: 3659fa020a051f84b55eeb394b8321c3a6e624d0af851904bf2cd0ba913c6f19
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-EJ9RH.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-26557.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\dragopen.png
image
MD5: 07fee3f5b1e8d6bdb5c5b7f6a266da53
SHA256: 4fc30a216f45023b0af9b5c405d28581374f562645ad77fef2854b982fbc760f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-06QFD.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\assign.png
image
MD5: 50fe36c6251c5e3772590ab88374029c
SHA256: 268bb083a5209b3cf8d548c3c60080c011850d3e502a28bf0695abda818f207c
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-BL1J3.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\arrow.png
image
MD5: b170a32eaa8d6cfb2860f1d35f72479c
SHA256: 38e4e01435aae0437f50f763c726ef6aebf0c125f6f630e68b617fda065b6725
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-C28CF.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\about_mod.png
image
MD5: 124d98e8472247ae45278b0059bc0e5a
SHA256: 2c4e1319f326fa825d07fb5ba1095ff1022786ef6fc04adcc4e03ee4c6bb6a82
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-GK08D.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\xp_manifest.png
image
MD5: f09fcb1adeb11f33fe918d72c16d3d46
SHA256: be536dc907de99252e14f149e72a68a136ad9c693f3aee1b17497442625dadbc
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\131.png
image
MD5: b02e48a86bcba395146bc79b0b41c733
SHA256: 700093c89010baf7598899c356d1f61b0c2bc3bfdac119aec9a0f2740e48dd3d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-JTE2Q.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-5C971.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\settings.png
image
MD5: 3c04365e569d0d56edef2ee2ae68bbb1
SHA256: 75c1a6c3f1663dad5882a4c9afd9890a3cc8d78adeb9c3faa9e9f3f24bb9d545
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\part_view_hex.png
image
MD5: 19bb9718d3ff75bece5e95e2ec5ca13a
SHA256: d95cfbfc4bee7b38cf1107f5bbaa10684cd171dba5cc81d29491a872e831cafe
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\part_view_rc.png
image
MD5: c8d241365b101a17a5a746392c73a850
SHA256: 723d6fefc9cac1694bbccc08042f76c0fd21473b352269587c20436ae72b8f90
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-RDG00.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-20E28.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-BT8UK.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\part_view_default.png
image
MD5: c1df56a328aec2cd8e2b8b4842911758
SHA256: 34ef509f8cec35eff350e1fe3a4a4bdad03db32af27736d3af951eadd808015d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-9HK2Q.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\forcefile.png
image
MD5: 3072f95b28155fde0b157a54a498aed6
SHA256: 1c41f83338871f28df3896dd9fdf523e54a19bca798a4537313fdaba210a9d5c
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\cm_file.png
image
MD5: 3888030e795cba7894ec23bca4213b4b
SHA256: 62b0cfe90091b9120fde1e77bbd9efa490643b1dc08337b7be56982afe6e0e53
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\find_in_files.png
image
MD5: b8198c6b2dc9e3a2048b97e3638b4b46
SHA256: 5d028a2ad1108d052e0d543b49e64a94009e52d1b603becde15d41df03ea36f2
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\cm_folder.png
image
MD5: 26226c8df842bd3689838ad72b8d2af2
SHA256: a7eb490d2def121aad33616452633c3ca31ec486435c02fad671c0d6b769256f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\cm_res.png
image
MD5: 0ec8e479af322614a71747814cb75027
SHA256: fb9f3df386ec4889eb42ce0715403e021f1fdbb68ae8485b21f825ac7895b752
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-9MUHA.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-RFG6V.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-1KRN7.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-1BDHI.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\snake.jpg
image
MD5: 42a9809b8e16703e02d226d1c3f454cb
SHA256: 7628e8568b2aff97dd40f3e299f38cd1e481c6e0e43aef65934ee8cfa67beb28
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\add_resource.png
image
MD5: 93e42b640529a4a838e2bf74b3b20e13
SHA256: b4f7ce6b00c285a94e948bc5f728556fb0fd2f318e811db5ad612ebe8dac6af5
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-VMKFH.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-ITFEQ.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\about\is-4KL6U.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\UIRecreator.html
html
MD5: 206288eafa0fb3a1cb6d8015fddd9755
SHA256: fa51af559d4a8f2cddcddbc8094bc1d99bbb65b544d2b4883f05d7e0dcf04178
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\whatis.html
html
MD5: 33726aa5fcd878a157dcc1fd80348c12
SHA256: a8bf9544c012c7b5d1acc4cb1660445ea9fb4c524e8fb442cc45ad4e37fabdbd
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\image004.jpg
image
MD5: 9da1b5bf2e576f06f992f43b4fb9d27c
SHA256: f2e8b78a1590e5b50f3f1ed02ec91d4ed63ed965b13df7192e1a0a11b670e722
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutTransMulti.html
html
MD5: 44f2ea3118d8cb00c14fd868392344e3
SHA256: 0caa14646e677c147ddc8f7ab8ce1f45c11cf474ca4a5fc94a5b95f6531673ec
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-7O8VC.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\images\is-P7SGJ.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-9STM2.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-03KKP.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutPatch.html
html
MD5: 9999ee48358a7947a3cf79e59a38a35e
SHA256: 4644fda71dfd5fb24ce4c2a3bae9a087f848180f6e124d54df0fe977d71b52c6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutGrab.html
html
MD5: 2ba9e9c05766689874049ca304a19bbe
SHA256: 0d6e707af506e1a1c074ab18edfde3e5b2104d460f1c630f1ba9dda6743de7c5
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutTrans.html
html
MD5: a86cfee560f4871915e3118c75e555e6
SHA256: e892e6fd910c4b3d4c5943d9d62b32135e7eaf7b6fa0ab093bb625771e51b870
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutSearch.html
html
MD5: 80dfeb5a9af932588e5ea3e8e8b6aa48
SHA256: 3f2b1494af845e5a48fece7fea042a2744c9a61db6e45eeb855fd6682f518aa9
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-8DJE5.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-4JL88.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-6TNSV.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-F4J6S.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutDelphi.html
html
MD5: a069a8823bc6235d5bb11d8df5d206a7
SHA256: ac3eb35965e54e46e9f3ffdae91c30eb4ffa336751c9530f6572a8d98b6b6062
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutAbout.html
html
MD5: 5f937870f2c2e22f0c6b8e72491da350
SHA256: acf6c918e53c27ca74aa81caa5920de66bf3c85a9b740f14bc5f0696262eb806
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutExplor.html
html
MD5: ba81e57f28c171aeacdf7de63ac86402
SHA256: 09621d7abcffb382ce6e2586c1e0722317fbf6f01c6a3e5d608f09cfbd5d38d3
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\TutExtrAll.html
html
MD5: 88ebb9854b6a4882e812ba2b4f445f5a
SHA256: 9951e5d33d5113c94d239dc95f0c4d580f1eeaa6d9f048645d1109da287f3277
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-OKFUE.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-411QG.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-8LGV5.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-5D87O.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\interface.html
html
MD5: 9b23383f9deff26068b2fdbccc9ae646
SHA256: 7facf2b7533d4cd817be5132497caeee4baa981442f343d47746dabcf9bf29ae
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\version_history.html
html
MD5: bcb78995d8ba402577e69df5cdb284de
SHA256: 18e363409c6a5755b1a0f7c44801642cf0231133ddb9488882738b11d8e00dd3
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\terms.html
html
MD5: 81c3811549e39d8bc45788e92bde575d
SHA256: 8f1d7469cceeaa11a92b36bdfe66ccf1cbeb335c554ad7e4a751f9a297078e87
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials.html
html
MD5: aef35b2765019c4b20e924fcb0c2b4e0
SHA256: 7fa2704dbf71e43c59f12a4f95f533bcaff54c86998a07f26267358584259ed5
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-7SE2O.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\is-38Q5G.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-0LTVM.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-SV7UL.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\support.html
html
MD5: 0b78f7420bb711e5f52bb6e07bf9b8d5
SHA256: aec2487fd58d4dff761f0dd2fd269eef899a73852258c203498a2785365de693
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\help.html
html
MD5: 53dacee8d5db588caf685f770320a4fa
SHA256: 19a1242943805211a4bf16df580cf1883c06a48ababf183f0c45ad436a3a37c6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\links.html
html
MD5: fa631e8f955b2c37959f58a166fe650c
SHA256: fb8065734830535a133f30e31be568c3a2c71f773fc6435698bb3dc5fce56dcd
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tech.html
html
MD5: e15a7bd6e0145357178e0748db77bfc2
SHA256: 8cd17e47fdc9ff5fc53dac1a28b6fccc13c2c6d8ce9d0151ef840fd467ce134c
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\FAQ.html
html
MD5: be5954d39ba8a76c991317521822ba26
SHA256: 4edc0273a3a25230164a4f38132f912def27e48d533e29ecef1d7fd6541cefcc
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-8G1DV.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-3A8GB.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-1G5EB.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-6B3F7.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\is-9D8CV.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\ml_result.gif
image
MD5: e72810b2a6e7a22dffb9f413ee0a9cb5
SHA256: febf879c2553a7eaad63d20a5f9cc4b319118bb03603c08455a1cc114afc1815
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\ml_save.gif
image
MD5: dee721765fcd6859d86c0e625f12a492
SHA256: 44c913084b851ee4eecfdeb8fc5e474391fa0b5738717c5e44ca781763182be2
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\ml_save2.gif
image
MD5: deb8bf407e287a6d7c839fa7e4ddbd0b
SHA256: d3565d01262df37ba3a3acba86beccdec5ebd0ca6e3666b348a64d1e347c45b8
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-K1I5I.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-O6RP3.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-TFI5U.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspstring.gif
image
MD5: ab45bae8d6efeb21647138c3a618aeb6
SHA256: 47f11e65ead8f77e332a65a22c26d222879fdee6863b36098bd19909edd00be1
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\ml_paste.gif
image
MD5: 7fdcda745d44486078863d12cce4f62d
SHA256: d97f25244519f94455edc71f60af312322e2ab7d4f00670d17fe38c0844b8add
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspmenupreview.gif
image
MD5: 0993ff8fe793a989b412733577f7c1a7
SHA256: 82de75862c993e65c23f1b273e7ec60b4638d8d06dc399edcd8d2477db4518b7
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\ml_copy.gif
image
MD5: a200bb3b897267a5f02ef56fc3db5300
SHA256: 6f5bd1a468ad2b894c574bd2a9d481985ce5ec08427e9b2f2cbd3f9b4c281436
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-SHM2A.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\transmulti\is-2KD2A.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-F7N0N.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-C5CQP.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspmenu1.gif
image
MD5: 8d2ae5f163048062e3b5f6f24c56981a
SHA256: 134605a13bc82d4c89b65e3cd78aaf63632d4d23f4aa9069191fe0d0b61a2a0e
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspmenu2.gif
image
MD5: 18177e4d509e99400d17159f9656165e
SHA256: 91c2b08b9f559fd5350054ed81db0ce2bb482a9d060782bdbef2dc2da90adf7f
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-EGL58.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-5Q15V.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspedit.gif
image
MD5: 448e4d544e03249c30d893f2b50efac3
SHA256: 5b2978b9140a7140579e9aaee6ec6eb3b8ace59d2a967ba0a115c33550fc2ec6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspdlgedit.gif
image
MD5: 7aeaf10f42dfb08d221f816f881c4047
SHA256: 3aadc3f5799a4ba364260fb8e560a045b3f4d7500bec75b2372c8d2dcb0a1eab
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-8TR4O.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-V4N9N.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolsave.gif
image
MD5: 551c8290efdae31f4ee54f47d8f8360f
SHA256: 0dcdfd2f9287e584e712580bcf57d98e72e162dd60521fbc36037185e3833739
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspchanged.gif
image
MD5: 9360308fcf9c02b3bc4ec438b2bcf6d1
SHA256: 348f0fd2f5488eb677d5cd380aa2a1d7f92d7d76f65943e032a608cffeb14e20
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\mspacc.gif
image
MD5: 5c7493d92d553f6e060d37bb8ad17f2f
SHA256: 70971a34e19cf545b2a0138c54b15abcead3c91782c49a25749ec9bfec134026
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-1JAF4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-7G004.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\trans\is-MFSSB.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolresource.gif
image
MD5: 3daca4801a8a25beb7e1dde994d975ff
SHA256: 2bace81263dacc9d68ff8d118cd2a04edd50283bc8a8437952b4939117c34d60
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolnewdir.gif
image
MD5: 5ba3749012080cb2a061d56a447bec8d
SHA256: 33ddbf72b035770375aa30d3fa4d98fbb0e9ceffdddbb0946de35f1188f1a5b4
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolhex.gif
image
MD5: 6efc8bbe64638b33fcf85b222d35b9e1
SHA256: 7e8a279c04a0c639285bc48b59be8a5f689023de745191ebdcc0bc4389fa8085
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolopen.gif
image
MD5: ed5148853e759aa1cdb12cfe5a204297
SHA256: 721416e93083dd21d048c2105a9514c42c2c23380dc2a8726eb1145e391fc45b
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolRC.gif
image
MD5: 1a5b5ada18ac6a97a57b388bc5426c4c
SHA256: 057c7fd994cb567d93ecc8abb7b6c1bc65cbc52a128ff302a68d14dc36e0cd2d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolrun.gif
image
MD5: c2bd1a9bfa5d2ef62c8c815fd3d30a49
SHA256: 1f3cf9d305d31cc7a9dcdad369454d680c5a2a1a780c21a044d2a84ac94b00e3
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-N3MUE.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-GPB17.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-N8HVP.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-OCPD5.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-AD7BP.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-7TUM6.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\tooledit.gif
image
MD5: 64a9d4b814263f391051bc563730f63f
SHA256: d6f4ba6208daa57d86d5f226701c20353a1bf2df038cf6aa98e24578f1ec1972
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\findfound.gif
image
MD5: a4ea0de7765b381b697ddd4833ce495c
SHA256: 21f1f08fcc18cb81e2cb294ec96c4be84ff84fe3b5673eec10544fead0d5338e
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolfind.gif
image
MD5: 92f6e63741dbdcf242fcd579f453558f
SHA256: 04621a6578a4e75e52578f6a6bb470eeadd4a6f245999d066ff41cc214b240bc
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\tooldirup.gif
image
MD5: 5f3962a622b0504cab8eba505aa51029
SHA256: 624bf67fdb538c7ab2e5c36f14edc153d6b930ce2dada9fcd416633ab349efc0
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\toolclose.gif
image
MD5: 67c05d75f5a8c2ae1b50582d065f9f4f
SHA256: 226f4558a455947da06a0d8c6762ac3043c5103a4c64edfec241d4a9b5eb375d
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-RD6GO.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-TV7K6.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-172G2.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\tool\is-87C2L.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\is-ES870.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\findbrowse.gif
image
MD5: 7454337e08c7e177072fbb03f89f104f
SHA256: 641aa245f70aa5d66a002793db38ebdbbaa47a271c83b0fdbf323b819c11cb86
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\finddlg.gif
image
MD5: 75c4a0004f5fd62d4801005c426c7193
SHA256: ce77031a529cdf791bf62d90fc786e9fc7342fb9253a43faea5e305c17fae229
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\is-G4LH4.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\find\is-R03L0.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\shnewdirs.gif
image
MD5: e41bf6fad99cf6bfae32e68e96056f58
SHA256: bf4c2ad68f9520403ffeab1df40b3127acc09c9509ee2126caa73d9d7e6de6e3
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\shopen.gif
image
MD5: b23e6eac0165aaa914b53ebcd1032763
SHA256: ac43065d51c2e1f37a8a20518d95c74879bb63852fa0d8648675e75496b79ac6
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\is-T9116.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\is-QA3AK.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\expopendlg.gif
image
MD5: 37241841524cd1e1c2b0a27ba98aaa6c
SHA256: 3414e86f2be656861f75549fcdc0cd3c1fa14e39d158c01c1c67d42fea78f2cb
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\sherror.gif
image
MD5: 99ad87a56963c062d6b71877f9abb570
SHA256: fbf08e390d46242a881b345a8b5c3b57e96c7caaa393e0aa947ba0237030171e
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\shassign.gif
image
MD5: c82bcf65d4a466158cd2a20d963ea0b8
SHA256: 0e03cb2fa10f32be13ff03e1fa1db51c08ce6635e406c56d5759ecf66ee9e427
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\is-KSG7S.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\extrall\is-J8DSI.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\rsttxt.gif
image
MD5: ee2eff00354ee6e14d59c62f7c47c534
SHA256: 76b93dbf14f61ef3c17856d01f758f9bf47257aec4e7d9aed314768b34f33477
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\rstsplash.gif
image
MD5: 508b7281f2357e65415c88f9058e39c1
SHA256: 465d407fdf4f302380ebd4eae8d1ed007035edc9a8c307122b7690c47da2fe1e
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\exp\is-GO7CJ.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\is-PAHGJ.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\is-45A2K.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\TSplashForm1_Image1_Picture_Data.bmp
image
MD5: 981c4396e392d684ba1b51e92e238450
SHA256: 1defdbfa0349576e3aad14afea96c3c8cac3749fc4e9def9b00ec4eecd6ff724
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\help\tutorials\delphi\is-ISBG3.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Users\Administrator\Desktop\Restorator 2007.lnk
lnk
MD5: 9080816344f497f96211175a18e90a02
SHA256: 8be2c9c7d9e94b9d6093eceac749440f97cbe32003e4248dc615115845767301
2524
is-KGGPI.tmp
C:\Program Files\Restorator 2007\is-B632R.tmp
––
MD5:  ––
SHA256:  ––
2524
is-KGGPI.tmp
C:\Users\admin\Desktop\Restorator 2007.lnk
lnk
MD5: 9080816344f497f96211175a18e90a02
SHA256: 8be2c9c7d9e94b9d6093eceac749440f97cbe32003e4248dc615115845767301
2524
is-KGGPI.tmp
C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Restorator 2007.lnk
lnk
MD5: c1b658fbeabc9b9ddc43a01e843b32dd
SHA256: 7947a3fe7af88c0ff1d3b837fe144a5d7952aeeed8095543e5448b5de99ad67d

Find more information of the staic content and download it at the full report

Network activity

HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0

No network activity.

Debug output strings

No debug info.