Overview

overview

7

Static

static

1

unnamed (1).webp

windows10-2004-x64

Resubmissions

06/03/2024, 19:10

240306-xvh49agf8z1

06/03/2024, 19:09

240306-xt72zsgf8t1

06/03/2024, 19:09

240306-xtsbjagf7y3

06/03/2024, 19:07

240306-xslglagf6v3

06/03/2024, 19:06

240306-xr9sssgf514

06/03/2024, 19:04

240306-xrdqcsgf4w1

06/03/2024, 19:04

240306-xq39magf4t3

06/03/2024, 19:04

240306-xqwvjsgf311

05/03/2024, 21:33

240305-1ect3sah837

05/03/2024, 21:32

240305-1d2rtahh8v3

Analysis

  • max time kernel
    305s
  • max time network
    311s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 21:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

Errors

Reason
Machine shutdown

General

  • Target
    unnamed (1).webp
  • Size 7KB
  • Sample240305-1ect3sah83
  • SHA256 f425fe60d959b2354f3012877931e7308c1e8b34df5cb63d4c50e9f191883509
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
persistence

Malware Config

Signatures

  • Modifies system executable filetype association 2 TTPs 1 IoCs
    persistence
  • Registers COM server for autorun 1 TTPs 42 IoCs
    persistence
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 15 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\unnamed (1).webp"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4476
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\unnamed (1).webp
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1124
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbace446f8,0x7ffbace44708,0x7ffbace44718
        3⤵
          PID:1520
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
          3⤵
            PID:2712
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
            3⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:4072
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
            3⤵
              PID:4608
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
              3⤵
                PID:1244
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
                3⤵
                  PID:2196
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
                  3⤵
                    PID:5064
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10903708020790407412,12836389717477578419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
                    3⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:432
              • C:\Windows\System32\CompPkgSrv.exe
                C:\Windows\System32\CompPkgSrv.exe -Embedding
                1⤵
                  PID:1056
                • C:\Windows\System32\CompPkgSrv.exe
                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                  1⤵
                    PID:1396
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
                    1⤵
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4776
                    • C:\Windows\system32\dashost.exe
                      dashost.exe {5e43079c-31fc-4d69-852eae1664ec1a2c}
                      2⤵
                        PID:1112
                    • C:\Windows\System32\DataExchangeHost.exe
                      C:\Windows\System32\DataExchangeHost.exe -Embedding
                      1⤵
                        PID:996
                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                        1⤵
                        • Suspicious use of SetWindowsHookEx
                        PID:5336
                      • C:\Windows\SysWOW64\DllHost.exe
                        C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                        1⤵
                          PID:5720
                        • C:\Windows\explorer.exe
                          C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
                          1⤵
                          • Modifies Internet Explorer settings
                          • Modifies registry class
                          • Suspicious behavior: AddClipboardFormatListener
                          • Suspicious behavior: GetForegroundWindowSpam
                          • Suspicious use of FindShellTrayWindow
                          PID:5828
                          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe
                            "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe" /uninstall
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of AdjustPrivilegeToken
                            PID:4736
                            • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe
                              "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe /uninstall /permachine /silent /childprocess /enableOMCTelemetry /cusid:S-1-5-21-513485977-2495024337-1260977654-1000
                              3⤵
                                PID:1372
                              • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe
                                C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe /uninstall /peruser /childprocess /enableOMCTelemetry
                                3⤵
                                • Modifies system executable filetype association
                                • Registers COM server for autorun
                                • Adds Run key to start application
                                • Drops desktop.ini file(s)
                                • Modifies registry class
                                • Suspicious behavior: EnumeratesProcesses
                                PID:1020
                                • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileSyncConfig.exe
                                  "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileSyncConfig.exe" /uninstall
                                  4⤵
                                  • Registers COM server for autorun
                                  • Modifies registry class
                                  PID:4424
                          • C:\Windows\SysWOW64\DllHost.exe
                            C:\Windows\SysWOW64\DllHost.exe /Processid:{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
                            1⤵
                              PID:932
                            • C:\Windows\System32\rundll32.exe
                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                              1⤵
                                PID:2396
                              • C:\Windows\system32\LogonUI.exe
                                "LogonUI.exe" /flags:0x4 /state0:0xa3939855 /state1:0x41c64e6d
                                1⤵
                                • Modifies data under HKEY_USERS
                                • Suspicious use of SetWindowsHookEx
                                PID:5396

                              Network

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    settings.dat
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                    • Size 152B
                                    • SHA256 50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    settings.dat
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                    • Size 152B
                                    • SHA256 d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    Preferences
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                    • Size 6KB
                                    • SHA256 bc2e4c57993054a03b9e9f91659413566b89285b4075f03e70dffefef3ae6ce9
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    Preferences
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                    • Size 6KB
                                    • SHA256 769258729c2b259a8c5072999f1fe75091bacccca9789d05296473f6a5e8ab95
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CURRENT
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                    • Size 16B
                                    • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    Local State
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                    • Size 11KB
                                    • SHA256 a7b815b46ab392d524f5bf840ef12cd949ad079a0482c066425e4be095082129
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    data_1
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1
                                    • Size 264KB
                                    • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    Uninstall-PerMachine-2024-3-5.2136.1372.1.odl
                                    • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\setup\Uninstall-PerMachine-2024-3-5.2136.1372.1.odl
                                    • Size 256B
                                    • SHA256 c27ff9ccdae9b57f8539617e879a7b2293e4c07a770ec2048c84de1cd2e29c2e
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    StartUnifiedTileModelCache.dat
                                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
                                    • Size 21KB
                                    • SHA256 1924b26aaa60bcb899712e55a917870daca9e77f9ddb94f305a7f333ab16412b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    aria-debug-1020.log
                                    • Path C:\Users\Admin\AppData\Local\Temp\aria-debug-1020.log
                                    • Size 470B
                                    • SHA256 d69b0c122d40890dc73c57b71eba087374c9f85273744e2582a264042825d82e
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    aria-debug-1372.log
                                    • Path C:\Users\Admin\AppData\Local\Temp\aria-debug-1372.log
                                    • Size 470B
                                    • SHA256 27d8a59f2e116a24522050bb1ba96d8c03042f1a79ef24cf48b5d79492d6521d
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    tmp50D6.tmp
                                    • Path C:\Users\Admin\AppData\Local\Temp\tmp50D6.tmp
                                    • Size 20.1MB
                                    • SHA256 e4527f58d720706502cfcbdc23b5609a9078a19efb8ef098ff7b113dbce3d6af
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    AddGet.jpg
                                    • Path C:\Users\Admin\Desktop\AddGet.jpg
                                    • Size 423KB
                                    • SHA256 ba4f62762657331bfc04def293da489a126dfd9eac2a6877037a8f0ed31ef224
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    BackupDisable.mpeg
                                    • Path C:\Users\Admin\Desktop\BackupDisable.mpeg
                                    • Size 186KB
                                    • SHA256 7ce932bfa2565537bff6c91a7a361efc26950fafcf96b265c74b60517f72d4e1
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    BlockJoin.mp2v
                                    • Path C:\Users\Admin\Desktop\BlockJoin.mp2v
                                    • Size 335KB
                                    • SHA256 1b1c2dfeff4d896856eea4d464e8a07c2b57b2a7bca4fae3ced4cb761200ce82
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ClearUnlock.dotx
                                    • Path C:\Users\Admin\Desktop\ClearUnlock.dotx
                                    • Size 261KB
                                    • SHA256 dc640c78707d966b926999392ffc69c53f60bef08aa0d3684fefd5829fac1e41
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CompareJoin.avi
                                    • Path C:\Users\Admin\Desktop\CompareJoin.avi
                                    • Size 161KB
                                    • SHA256 2a7369ea4fd647a0341220c9f49434cc84167f45dc3d7052e39986b63b997600
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CompareSave.mp4
                                    • Path C:\Users\Admin\Desktop\CompareSave.mp4
                                    • Size 398KB
                                    • SHA256 40db876492edba6a9f35d6f67a9e2680df9c0610a5d12600ede7d177b2388712
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ConvertFromUse.vsw
                                    • Path C:\Users\Admin\Desktop\ConvertFromUse.vsw
                                    • Size 298KB
                                    • SHA256 dae724a464ac5cc228109f50e17cefb15c384f1676fdf79f358fbb9c7c4e99af
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    DisconnectWatch.xsl
                                    • Path C:\Users\Admin\Desktop\DisconnectWatch.xsl
                                    • Size 286KB
                                    • SHA256 2f40e320e92072267c0cd38fa2d5c4b2f069b378ee01a5ee20f0a30aad52b691
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ExportDebug.vb
                                    • Path C:\Users\Admin\Desktop\ExportDebug.vb
                                    • Size 584KB
                                    • SHA256 9612ed660a46f35256456fee22ed9335fdd50f3f83bd07bb08c68a8ce93d42af
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    GetUnlock.DVR
                                    • Path C:\Users\Admin\Desktop\GetUnlock.DVR
                                    • Size 373KB
                                    • SHA256 84d53249b8a79529578fc4354b68fcba8abae6a655d0adafce8bd2cb3bf756f8
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    InitializeUnblock.jpg
                                    • Path C:\Users\Admin\Desktop\InitializeUnblock.jpg
                                    • Size 311KB
                                    • SHA256 1e272d662c731b007c08d987a32a5db3017fe3a02bf3b8bb279350cf8c3f3b44
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    InstallTest.wmv
                                    • Path C:\Users\Admin\Desktop\InstallTest.wmv
                                    • Size 223KB
                                    • SHA256 be4d59c6f291599a13b25077056387b8c4f3732c5491afe9305b99858303082b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    OutExport.ppt
                                    • Path C:\Users\Admin\Desktop\OutExport.ppt
                                    • Size 385KB
                                    • SHA256 54f203a79edd75731c968f2f66403d0ae21723da727b76d1e5a95d70be9023fd
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    PingConnect.ogg
                                    • Path C:\Users\Admin\Desktop\PingConnect.ogg
                                    • Size 149KB
                                    • SHA256 28a87a2176e9f6a312f6392e561bee632db9f15a28e1f3ed6e6db3c3411c87e7
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    PushCopy.css
                                    • Path C:\Users\Admin\Desktop\PushCopy.css
                                    • Size 174KB
                                    • SHA256 1072337e65c1d2c96eeb51e542d0604c14444758df7ae9bff9e5b7c3df049838
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ReadPop.dotx
                                    • Path C:\Users\Admin\Desktop\ReadPop.dotx
                                    • Size 248KB
                                    • SHA256 ddac99b7c27d175e2b725164af1a2cb8527fa2845528717f23aded114f6b47af
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RepairComplete.wma
                                    • Path C:\Users\Admin\Desktop\RepairComplete.wma
                                    • Size 323KB
                                    • SHA256 26d6a2cc25ffa422e30751319f9ccd623c01db18e80c1a58713eca001d55713b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ResetUninstall.pot
                                    • Path C:\Users\Admin\Desktop\ResetUninstall.pot
                                    • Size 410KB
                                    • SHA256 ad62d5ac3f426995242c4f7712f0837afc35a7e33c6ae82b45b245a5459a42fd
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    SearchUse.zip
                                    • Path C:\Users\Admin\Desktop\SearchUse.zip
                                    • Size 236KB
                                    • SHA256 2d6f7f1cf7f1de79fc312a8452db8e049c465ff151eb1ffef82fac37c026e987
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    StopTrace.mp2
                                    • Path C:\Users\Admin\Desktop\StopTrace.mp2
                                    • Size 360KB
                                    • SHA256 2760aaf416098d8c1e2863e7bfaf5653dd4ee228217bbcc8da798436029fc35f
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    SuspendReceive.ADTS
                                    • Path C:\Users\Admin\Desktop\SuspendReceive.ADTS
                                    • Size 273KB
                                    • SHA256 4b86afc0532aa17bf5441df8cc0a4cccb1f7d845a80e8f62927003d3dddefa29
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    SyncGroup.fon
                                    • Path C:\Users\Admin\Desktop\SyncGroup.fon
                                    • Size 211KB
                                    • SHA256 65c8cb415c8ae766f1a1c2a4c59a682206d6667b8b4b7852766f0a96094974de
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    UnpublishExpand.001
                                    • Path C:\Users\Admin\Desktop\UnpublishExpand.001
                                    • Size 199KB
                                    • SHA256 fe750691d1187f70cabb9c29b190bc95bbd6efd87c1f34e7ef7cf36ae441a857
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    WriteTrace.mpg
                                    • Path C:\Users\Admin\Desktop\WriteTrace.mpg
                                    • Size 348KB
                                    • SHA256 2441e4ae810cdd2526908ed71b22bcc7cc4d2bcca3412ebf3b60634c39c5725e
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    AddConnect.txt
                                    • Path C:\Users\Admin\Downloads\AddConnect.txt
                                    • Size 593KB
                                    • SHA256 c64be936695d6bf10cfe2e73d01ed1d362ab475312083a5c236deea8cffad0ba
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    BlockRepair.midi
                                    • Path C:\Users\Admin\Downloads\BlockRepair.midi
                                    • Size 524KB
                                    • SHA256 76b5fbdbb18f5ffc606cbe970f06bc2c7ea0653e903263025fd85a958501a570
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CheckpointCompare.ps1
                                    • Path C:\Users\Admin\Downloads\CheckpointCompare.ps1
                                    • Size 627KB
                                    • SHA256 c422afee7ad8a9a83d0fe3f7b9af3df5a92ed36e1a0b233b054cb28a8fa9a788
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ClearCompress.vst
                                    • Path C:\Users\Admin\Downloads\ClearCompress.vst
                                    • Size 645KB
                                    • SHA256 a5a0eb3c8a28a00b36207164a870df22a024bf5c8eb3384b73dc534ec2710270
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CompareDeny.m3u
                                    • Path C:\Users\Admin\Downloads\CompareDeny.m3u
                                    • Size 886KB
                                    • SHA256 02e5b68f3d98a77908f14f5efc19628d3fb3edda6e9c56069d4e91fe98f66a12
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CompleteImport.cab
                                    • Path C:\Users\Admin\Downloads\CompleteImport.cab
                                    • Size 662KB
                                    • SHA256 656cbafa3bf660114ab4b7d029bce9c3c89c4f76ce722f3b2317753bad895c73
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CompleteProtect.wps
                                    • Path C:\Users\Admin\Downloads\CompleteProtect.wps
                                    • Size 541KB
                                    • SHA256 e3c50d21d109b338c16b1c6fdd0c9c1af80266d6aca441f47542eb82cd62402c
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ConvertClose.ppsx
                                    • Path C:\Users\Admin\Downloads\ConvertClose.ppsx
                                    • Size 473KB
                                    • SHA256 145d1950e1fb3bf121f979b949a47a0ce46505ddd104fbf5d5b454b9980c7ae5
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ConvertConfirm.cfg
                                    • Path C:\Users\Admin\Downloads\ConvertConfirm.cfg
                                    • Size 455KB
                                    • SHA256 5b833c2c17de79935d683378510b49b605990f284e4439fbf87d5d0e70fce34c
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ExpandPop.dll
                                    • Path C:\Users\Admin\Downloads\ExpandPop.dll
                                    • Size 799KB
                                    • SHA256 5e3c89a9bb784e34085ebc39a1bde90d7d51c45de356e0b63a6f583e90c7b8e0
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    FormatRename.cr2
                                    • Path C:\Users\Admin\Downloads\FormatRename.cr2
                                    • Size 851KB
                                    • SHA256 06f59483929b2b25ca6b2290b4daf4e2f02b268ee36ab0e58adc725a01300c68
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    GetPop.M2TS
                                    • Path C:\Users\Admin\Downloads\GetPop.M2TS
                                    • Size 782KB
                                    • SHA256 ee40112a78df0c31fb0fefef9e5079a8757dbc11c4d869b9b57a3d3fe417d0e4
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    GetUnprotect.cfg
                                    • Path C:\Users\Admin\Downloads\GetUnprotect.cfg
                                    • Size 748KB
                                    • SHA256 3453923f60f90049ffeb9eff94d4b4b34d163a952f6a7f86248199c4dea588c5
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ImportLock.DVR
                                    • Path C:\Users\Admin\Downloads\ImportLock.DVR
                                    • Size 713KB
                                    • SHA256 39e01eb5d039f8903de6653e41ecc58f395902a0e529af271ccd8901905a9130
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    InitializeProtect.xsl
                                    • Path C:\Users\Admin\Downloads\InitializeProtect.xsl
                                    • Size 421KB
                                    • SHA256 44cd7adb73fa9e09b15be9e2cbbe0350d0731a056683038d00bba1cb5616e4c1
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    InitializeUnpublish.ADTS
                                    • Path C:\Users\Admin\Downloads\InitializeUnpublish.ADTS
                                    • Size 369KB
                                    • SHA256 df5b9e77896cedf00c15f6d7fb3d6350055b8ddce025e661bba50c5ada2689d3
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    LimitSet.dxf
                                    • Path C:\Users\Admin\Downloads\LimitSet.dxf
                                    • Size 834KB
                                    • SHA256 edb23e74662be6854c10d839210387a4371988acad07dd708b5cc07a38e3c372
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    PublishUnprotect.TTS
                                    • Path C:\Users\Admin\Downloads\PublishUnprotect.TTS
                                    • Size 507KB
                                    • SHA256 25d1521c4c627d5c29d85d79a893522d4343f4e84a53951c2ffbbb8fc7038302
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RedoShow.gif
                                    • Path C:\Users\Admin\Downloads\RedoShow.gif
                                    • Size 335KB
                                    • SHA256 6931cb8bcd1581f5d2f7d1028f0eabd2d2eb2e2e1ff9314f3f9f1b4fb337aa11
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RequestStop.ADTS
                                    • Path C:\Users\Admin\Downloads\RequestStop.ADTS
                                    • Size 352KB
                                    • SHA256 506c5d6fc2668c8bf9f909a41d7370945aea702ee4e61e16d997c631a02fa9e5
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RequestWrite.wdp
                                    • Path C:\Users\Admin\Downloads\RequestWrite.wdp
                                    • Size 817KB
                                    • SHA256 b746b87286576f2ba689dddd3e5bb78f7133df07c256d207edeaf7d165ef7ec2
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ResizeUse.pptx
                                    • Path C:\Users\Admin\Downloads\ResizeUse.pptx
                                    • Size 610KB
                                    • SHA256 eb120aa5c662d5b15930a383e87d52b1c8c659ce4ddae2aa17fd53bbba790cb2
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RestoreStart.clr
                                    • Path C:\Users\Admin\Downloads\RestoreStart.clr
                                    • Size 387KB
                                    • SHA256 b1b2508a5df7ca170d6cc38fff1f73d6bf2f52c84d88e057196ffc0a9aad3e62
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    RevokeTrace.dwg
                                    • Path C:\Users\Admin\Downloads\RevokeTrace.dwg
                                    • Size 679KB
                                    • SHA256 c066c9a9f7293545badf7e77bcb311f5e5977c9fac7e67e28510dcf890112ca6
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ShowComplete.gif
                                    • Path C:\Users\Admin\Downloads\ShowComplete.gif
                                    • Size 490KB
                                    • SHA256 e8352f938f6e6d75a2a9c6acfc924be7267f48cf988f56fe769b9721ddc75c1f
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    ShowSet.AAC
                                    • Path C:\Users\Admin\Downloads\ShowSet.AAC
                                    • Size 559KB
                                    • SHA256 f533a6db6ba52bdada8997ad5275127f89247206ffdab5982bfbbe17ea256490
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    SkipRestart.cfg
                                    • Path C:\Users\Admin\Downloads\SkipRestart.cfg
                                    • Size 438KB
                                    • SHA256 533798e5f43c7fd46b8b1bb63c2ca0d539558f61c55f9fb362e1f83cc55b5d1c
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    StepUnblock.001
                                    • Path C:\Users\Admin\Downloads\StepUnblock.001
                                    • Size 404KB
                                    • SHA256 ebf06780e03120ff5671fd2afc2c5805e7be3683cb7f4decf4b45ab4fbcf6597
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    UnpublishGrant.jpe
                                    • Path C:\Users\Admin\Downloads\UnpublishGrant.jpe
                                    • Size 576KB
                                    • SHA256 8ec893a0bf2aae4236059dde4da185134698ea9c6858b8db8344b0d993e25c5b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    UnregisterOptimize.cmd
                                    • Path C:\Users\Admin\Downloads\UnregisterOptimize.cmd
                                    • Size 920KB
                                    • SHA256 6eff82edeb00eb394ebf5fb17c13f20fcdedd39a0d7ca81849df9d6692204b0f
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    UnregisterRemove.asp
                                    • Path C:\Users\Admin\Downloads\UnregisterRemove.asp
                                    • Size 318KB
                                    • SHA256 b00c0b664e696f1b1326d318902b30ba11b005e8726f419dac13779adbc03975
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    UseRead.7z
                                    • Path C:\Users\Admin\Downloads\UseRead.7z
                                    • Size 696KB
                                    • SHA256 f64c154fa9c17aabad85257eb5bd943fc26e05f089549298db2e6e5736b48c80
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download