Analysis

  • max time kernel
    77s
  • max time network
    87s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    25-04-2024 03:35

General

  • Target

    MaxBulkMailer_64bit_setup_v8.8.6.exe

  • Size

    132.7MB

  • MD5

    fa026225ad1bdd7d1647027832849218

  • SHA1

    dbc5dabaadb4de5cee0ddf8eebcb28c8a903dad1

  • SHA256

    8d30bef2c2ae05cda155bbb5b5935c2e1c77b52c087dc50ec4c4d0a5751b37c3

  • SHA512

    cea96ed92c6704bcdbf03072ba369f77ca28fa48129d7dd64555313c44ed0200cde1eba438a5ccfd7fec13792e782345c408b54a858690f41e46e22ed05745ed

  • SSDEEP

    3145728:cctPTsn65O2hKBapL4NYlr6sIQi8OruAhdn/d:ccZYnCO2hKsd4j7zNh1l

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MaxBulkMailer_64bit_setup_v8.8.6.exe
    "C:\Users\Admin\AppData\Local\Temp\MaxBulkMailer_64bit_setup_v8.8.6.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2920
    • C:\Users\Admin\AppData\Local\Temp\is-I9QFQ.tmp\MaxBulkMailer_64bit_setup_v8.8.6.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-I9QFQ.tmp\MaxBulkMailer_64bit_setup_v8.8.6.tmp" /SL5="$501F8,138221571,831488,C:\Users\Admin\AppData\Local\Temp\MaxBulkMailer_64bit_setup_v8.8.6.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2956
      • C:\Users\Admin\AppData\Local\Temp\is-T6EO8.tmp\vc_redist.x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-T6EO8.tmp\vc_redist.x64.exe" /install /quiet /norestart
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2716
        • C:\Users\Admin\AppData\Local\Temp\is-T6EO8.tmp\vc_redist.x64.exe
          "C:\Users\Admin\AppData\Local\Temp\is-T6EO8.tmp\vc_redist.x64.exe" /install /quiet /norestart -burn.unelevated BurnPipe.{867D3AB9-12E7-403D-8E83-86DAC118BEFB} {CA20CEB4-B51C-4DC5-AF02-DFCA11CAC51F} 2716
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3484
      • C:\Program Files\MaxBulk Mailer\MaxBulkMailer.exe
        "C:\Program Files\MaxBulk Mailer\MaxBulkMailer.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: GetForegroundWindowSpam
        PID:4940
  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer.exe
    "C:\Program Files\MaxBulk Mailer\MaxBulkMailer.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2500

Network

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Libs\Address Bookx64.dll
    Filesize

    35KB

    MD5

    c734ef304a1de26483b2de2be6f47236

    SHA1

    15cdf39d2adc0ca61f02763eba8c585dabc320c2

    SHA256

    0138ee342556ecfe17c1e0e2d2b42aa86d039592cc7d1dba2e80b4b7b2b93db1

    SHA512

    249d918c8f0df37081eb0210c20f88b4ddb164cd16fb2b56c52f43cd3f542bdf4bdca57602f4f11b3758553f4b89f196867c8cce0417f347abce299b1f9762a1

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Libs\GZipx64.dll
    Filesize

    145KB

    MD5

    485365703da1c7a4c56e0b01f3a84bb7

    SHA1

    b6af549250282c5639e69a4dce4607015b237ef2

    SHA256

    848eb259a391db18e046324db0b835379436d98c2a62aca1006a4d4020fa9dee

    SHA512

    9dc696fd72bf90efc864f37ce6e55172ad383aba553ca498b5acab89a46cdb354989ec7d9a755729af150649fd98109b4ba11fea69d4807565bfb8212156ced8

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_ChartDirector_ChartDirector7_Plugin_21067.dll
    Filesize

    3.8MB

    MD5

    cb20c614aef3a716217a381ee5421fda

    SHA1

    f36110e924b4c66d6f063fde3471b0c4cf5082e2

    SHA256

    782f55791142c03dbc053ab0fb0fe1e21ce794602bad3d4cf10f725682b8a724

    SHA512

    e307cb644b0e60b5db9548bea9c0fcb211c3589274b79839254e550513c1f53c96cae25db81ad4efd410b77e128315ceae3ef0e1c2540b65760e557fbdb5c2bc

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_Util_SystemInformation_Plugin_21067.dll
    Filesize

    214KB

    MD5

    a75b1a5a3bb36e18a1c3c02ceb8ec8c2

    SHA1

    f549f1da2f054eaf42b093ca7773c1b87bcf50c5

    SHA256

    5ac03d9c09a11936bb86b48454445f8242dc22f9ebf01ee54a826639bebf580c

    SHA512

    2d2755a146faebb96f7e4b773048b3f72263ddbade664288b63204d5d12758b19bdb5b52181a15cb2977799b9299aed9fffa7d1832894f6e99d763cd50dc0437

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MySQLCommunityPluginx64.dll
    Filesize

    5.9MB

    MD5

    b408c4f30e60f835487590ecdd8c56a7

    SHA1

    598749516bd86871def2b9fdc8da008910554924

    SHA256

    adfe2579b8b11a76d99908fe5b5ee0a4c4dc4b638cc705c6e8dd1bda05c9189a

    SHA512

    59b0b9aca995d9f5390c2992e48a46c0f6bc1df142843b920078ab9e7d1e3139dfecc6810605a87190d444f736cf1bc67131ab97ea32da18f2ffff319b913fcc

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-20EBR.tmp
    Filesize

    2KB

    MD5

    352611936a85921bd335632b85e1bd2d

    SHA1

    c233de68ca65d19cacecfdbc76a07c9e7774e20e

    SHA256

    e0f2b31e1de0831082e3a586c762ef35632692bff511924a95b5be1b3129e420

    SHA512

    193e300a00a23d629f68c32ddf7ac449ee20e246e44e7d11301d81d898ff4cfdd46db5e949d7b51fc15b5c157b7c5a21ab1bf40e993191b551f1f41e09ba1fbc

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-4UCII.tmp
    Filesize

    1KB

    MD5

    7d054736e030f08e104ed7168c14a7a8

    SHA1

    a52e22d88a15d16bd6d1f3b4f9eb6c699a9b6e9c

    SHA256

    dbf923ef2c3ddceacf4a6486fc7a0009cd4f8797cfe747cd7ff5537fa9360d75

    SHA512

    aef9d69a9d3eebeb41f9f54446d216c6bf53715fa14240f3af7a31192fc4d28a5aad9cca02936800400d06e461a54c3031b2a3a5273190b820b2df02c31100b1

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-58OE6.tmp
    Filesize

    1KB

    MD5

    6a4fc177e6672191047facc48705b853

    SHA1

    75cc638eef8671582aac3be656ed0e98da0c6c0f

    SHA256

    f28c5aed0e0362be511c3a2bef748db1ee52a2b5dd87ff83a124c17197098c9b

    SHA512

    59332eabdaf8ae9b2f0e1883b87ed2a56b33534a715744d169dd901a4e95b3c1d1611537ba085104d44298c9940f827d761450a64a7f66a18bee2727ac36af29

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-7GLUF.tmp
    Filesize

    2KB

    MD5

    e9b02ab764c7538260f2801276b3c102

    SHA1

    bbfe58f4f71f4f38b5e6aa5612ca976fb02e2c44

    SHA256

    cde1872e0452510ec87ab6c25be7a52f8eb55c9bbc278ae8a8178686a218e6f9

    SHA512

    3d1abd97c73f41d52c792e9ac69f106cb3f812663944fdd90fb54737d3fc6e4c33e2611a10b53279a8506fac932ebde0de8ee07ac8a0dfede18a1941a56059ad

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-A2QN4.tmp
    Filesize

    1KB

    MD5

    a284c4a7b480226d89c720b8af8d8af4

    SHA1

    a775ca34938e8184450475f27f832e897f4f0a63

    SHA256

    42be2f74d6c9682756c1d1161a0653d791a2364a09cc5c3fd066db33800cbb5d

    SHA512

    ec37eb275c40fae01c5cb575013798651e69bf90775d22513afc12b76602f0bed1688c1e042d41137715ec4c4e87d31b61622f38026b2ab34805f7c3fddd5b12

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-BT0LM.tmp
    Filesize

    128KB

    MD5

    9262836c02543ef0dccd2eac445b8e96

    SHA1

    a977b0b3d44b213c8801b961deb8f1dba20c1cd4

    SHA256

    8ec15740e30475cf427e522c6c12d0a63fcd66e60d36505d901e6d19298adaf5

    SHA512

    5046851fff216cba52fc01cb565f024802abda519fb13e10e575fff86d266e94bce3ae5fd1f1c65504596de393473ed398e6e1bc405aaece7313f1957b2b0db7

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-H4C2B.tmp
    Filesize

    2KB

    MD5

    d0a9f4229d6577917090fb5c4ab94075

    SHA1

    d976ee4e888f3da3d6959d8d97f6c6665c2ba32d

    SHA256

    30c963b486bc45d1bdb2810495584613324488c6787c965e05416ff0213d6ecc

    SHA512

    8350f983122a71c4de2c7dfacf7fba9842bb88aecfe28027363a8cf12ab5d1ca84ca38a3b40fa3d958fcfa969fae71be7d2304164bc77addd4ae6711dda9d6f0

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-KAUGH.tmp
    Filesize

    1KB

    MD5

    63d50249de76453f1256839f17a698b6

    SHA1

    d2443b232b42ec7544beca08f047a7355b5e173c

    SHA256

    8e07acb7ca5547e4ef435ecc731d1e5b8a6b439ae400c4aa49787d018b685653

    SHA512

    28a1cd94ac10d7b624ba76ad71a6f450160adeb2e3e4ffea430ce5a5882e945dbe94f5691d4a69e5844cd10a1a6a921ab5a21494c29039f138750c90876a9c11

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer Resources\is-OUHC6.tmp
    Filesize

    1KB

    MD5

    592c5a998e791bceeac4da37cd7446c7

    SHA1

    ed3ba2f2418ced3ea501b33fabd65f599b0f914c

    SHA256

    89f5b74e18c76ee976ecf4eaf049bc10b0a6635f3c9c4ee853d320a0b6d59af0

    SHA512

    76360c04824496d2b849d31e7df148eddba9a15e7c3c194cb40d4ad0ad0982747caa4154389c8d21440c28a4021133006e34d95c306632f0880b3c5cb10a496c

  • C:\Program Files\MaxBulk Mailer\MaxBulkMailer.exe
    Filesize

    48.6MB

    MD5

    61a303797e14fd8cced6526484eb0acd

    SHA1

    5fbe7cdac427e99cbea9ae4cb77e7350101679db

    SHA256

    e1a4e1ef9df7c5684f09c08c487179b83d2b0e50dfee4723397ef7befce35977

    SHA512

    a40aabdff3bff78d69dcf9c13e296d5cbc674f40731737b43998ca44ab9ac9e941b268f5e99af5615361093e918092047331a16c6b122a0cfc72c159c3dc8607

  • C:\Program Files\MaxBulk Mailer\XojoGUIFramework64.dll
    Filesize

    3.9MB

    MD5

    65fbf7cbd083e7d916512c968481070f

    SHA1

    b695a4b862365f3b9627e9298764245aa2934663

    SHA256

    ed3f6c931f2db4625dc2ac0860cd741663b6c4b5bb44b802296b7eef1a9f014b

    SHA512

    2062898b65b4804855a0d7efef8f82b596bccb58df7c7012ba1e7561c5b7e9a2c36f6c6e44824e83e1058547633cf3786cc8e9d303586388edf3d98c7ab6425a

  • C:\Program Files\MaxBulk Mailer\msvcr120.dll
    Filesize

    940KB

    MD5

    9c861c079dd81762b6c54e37597b7712

    SHA1

    62cb65a1d79e2c5ada0c7bfc04c18693567c90d0

    SHA256

    ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c

    SHA512

    3aa770d6fba8590fdcf5d263cb2b3d2fae859e29d31ad482fbfbd700bcd602a013ac2568475999ef9fb06ae666d203d97f42181ec7344cba023a8534fb13acb7

  • C:\Users\Admin\AppData\Local\Temp\is-I9QFQ.tmp\MaxBulkMailer_64bit_setup_v8.8.6.tmp
    Filesize

    3.1MB

    MD5

    d4c82a987962fd49651ac789e494b07a

    SHA1

    5ff5521b601e53a13dc7411e72115ad0dcc39118

    SHA256

    45cec5933876b74aae2aacf2a69f74a8f03e1a2f2360d5829b7b823dc66abdab

    SHA512

    23865356813240d88c1c9fbdb73c15b2ed1dcc8d37a3c6119e8c7ff817983e890687454614798e73afb362c4c1f13fea24bd30e5a5cedc7fdfe67b1745ad2d04

  • C:\Users\Admin\AppData\Local\Temp\is-T6EO8.tmp\vc_redist.x64.exe
    Filesize

    14.6MB

    MD5

    45b47f4214ddc9f4782363a38504c9d2

    SHA1

    10b1683ea3ff5f36f225769244bf7e7813d54ad0

    SHA256

    da66717784c192f1004e856bbcf7b3e13b7bf3ea45932c48e4c9b9a50ca80965

    SHA512

    c87955c5542e39fbb44c6edf9ea0c6671693e7cd93b2bbb3988bd51c4e0bfc4c46fbd968ba9bc6327b21f2e52dd1dfe8d0d077aa27a8619bcf61edc3f58b246a

  • C:\Users\Admin\AppData\Local\Temp\{d992c12e-cab2-426f-bde3-fb8c53950b0d}\.ba1\logo.png
    Filesize

    1KB

    MD5

    d6bd210f227442b3362493d046cea233

    SHA1

    ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

    SHA256

    335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

    SHA512

    464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\Appearance Pakx64.dll
    Filesize

    240KB

    MD5

    eedddc846f4722a7a318a5010dcfb4fe

    SHA1

    bd12a4b372c05d18960ce2ef7682a6cb5e72f61b

    SHA256

    f546937adb095e9ff14456b8d21bd4405eff74563792e8b59fa4fd9e1f608d0f

    SHA512

    c020bc2d6c01cb1cbef06c61f94ac7a5dff4a5550a001ca71a9f9acec315b1ca35351676d0626f8d199f31a9ab2caa4085c79538df85d18138fe0c32c61e0362

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\Browser Pluginx64.dll
    Filesize

    488KB

    MD5

    c479fe70e65a9e755ddaca14ee61c666

    SHA1

    0d4a0d90c3cbc74556d3ae91169a36421657f89d

    SHA256

    f57421737920184969a73f04034eae8e6a6e23713c024bdd94855b0e39d79785

    SHA512

    12696f839287715e20797bee6caf697a54a67061be743946a2d6072ff7a78f15fb349c50b97bc3a9cde2a5ed87ffc9109bef0540b2d9bc064392707e39d2a546

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\CalendarControlPluginx64.dll
    Filesize

    40KB

    MD5

    6d3f0439e377d19ce163179f3136468a

    SHA1

    2c43d5400233b1deb54531d38413f66b7a30bcd2

    SHA256

    63c6f4bcaa04c498bde87093ab1c740fac12b68307fd1ca052cff5227d67ddf6

    SHA512

    f0010ca66fedf4eb09e0aac47969f93852e89e0a700abebaae613caaaca97861983ff2cf183038aad936f039b592019e7fa523d0eaa8c8a615c1bb795a016b78

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\Cryptox64.dll
    Filesize

    689KB

    MD5

    94a4bf5c216d55fcbab0bb66668c48b4

    SHA1

    23efc01c46c0e6966abfc66ef133e9a3087586eb

    SHA256

    6f36beec47cedfe91237608baf2c208e6f3bf1e65813d8e540402ea0746f6098

    SHA512

    8f8dc69d7a36369c1caa43d64e7fe7c02d75e92192853a88d01332654863b78b3167aca86b7c56556ec6efe7bff19e83a6e3143be0e1fbec84fdbda3d50b2d2e

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\GUIKitx64.dll
    Filesize

    78KB

    MD5

    5ac6a7c2ffdf33d63ef03e6fd907330e

    SHA1

    f180f3e8e3250782508b8bb8a0488af68e853db5

    SHA256

    b7932855880e5f9abf05916eec88d04f150a446903ec6e5c05fa2706ce27804e

    SHA512

    328fe8cb9cc243f71a79ee0647e2f60e9589f303a7ab369e4b15e1020860b95d744cdc0bff3fb8855197e009284f7121e30fe55d6b746d954b1f1dfaf30d9dd9

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\Internet Encodingsx64.dll
    Filesize

    30KB

    MD5

    db7c8985a8e1dde6ae5e54d4f62a32e3

    SHA1

    7af33d6baae8c4d86a4b5c2dc739822b071ecb06

    SHA256

    a27d2932e1a8fa1e31f831ed038b3ec70aecf43c0845364eaeaac27a6cef7aab

    SHA512

    a174dc0ee8692268e6e4e5b9b196186e31c5a63a504ed47e936f5ff266257deba2c6792c951ef22cb6f738f74061cfa77d995dcfcbf618f7387d5a0136a3c0ba

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_Images_PNG_Plugin_21067.dll
    Filesize

    316KB

    MD5

    65ff437c32d942608f8a7d80dc733be7

    SHA1

    90126e42afffd2ac277ba45b0ccdd89b9d2d1fb1

    SHA256

    b560ad232088e4a76536f9f2966e34c39455a436d84c67e3e8ba1f4de2bf171b

    SHA512

    866f3e9b99f9209f3ef3c1dbcecbc4bd0bc415e4629516c1b6b389704a8b5a90acc098e84edacdb4e47fd34608849183ba99b0dd4dd304eaa311040c8a65a34f

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_MacBase_NSUtil_Plugin_21067.dll
    Filesize

    99KB

    MD5

    75d108972b6b7549df6ba9ae3ac0649f

    SHA1

    43e6ca3ab89f2feb72b027f56dd8ff0aa5ad3b9d

    SHA256

    ac33405f0b9da9791697e37aad443adcaebba723e3ccbfb7f7897e391327c869

    SHA512

    e396adeb28a19821acbab09a1cfab338723cd772daa951fc3bf9279b4c74afee7170ac04d3ae072424372995f86129b87e1ab8433ff93fe8690e8610596ff69b

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_MacClassic_MacTT_Plugin_21067.dll
    Filesize

    55KB

    MD5

    49c02e183f6b724b11b4bec1b60e76a1

    SHA1

    d32d9971b80a9acacd042ef9aa932ca376113c16

    SHA256

    63463aced724b7e357d6ae0737a4cd0954665ffecf2961babf8f977fa80e532b

    SHA512

    25c73260373616e5ad56b47cfe6915aa6728201c29750462547d478823bc6b8e39387f0e4df08753dbf2c7086436a97a4b6e60d9cb92ebecafe76ad3ae21f650

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_MacCocoa_NSText_Plugin_21067.dll
    Filesize

    110KB

    MD5

    dbb5cedb6b0346d9b68804f3385eb455

    SHA1

    a43e5083d6e6be7f46799961a1e6858c592667b3

    SHA256

    4b52edb76259bbcb57727be960fcdb9f8a5abc0943108623efe07b22b8de79d8

    SHA512

    f59d50345ed6ba54d399636d6a5d082f7f9702ef7927e9fcad03021d58f2197ec06f433358257ac6e5877f3a6b5466034b3f503fd3b7498d4c709d1ab2a9004b

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_Main_NSBase_Plugin_21067.dll
    Filesize

    66KB

    MD5

    1a65fdc960e5bd65b4d1272e654ee1cd

    SHA1

    e349e02701c04ab402db2aa4734acaed18f070d9

    SHA256

    1b92f3a55647aa4b70ea0609788eaace1745fc7fb570a72cea8ed690a40c2189

    SHA512

    d680022f9e10881ae1a426f33570800cac6c0adf0b6ffb107e1af9d60ca41a567092acf42b1b352aedd2fc4e1a4310050497c0ba587f2a18ba0f4863d4fef23d

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_Main_Registration_Plugin_21067.dll
    Filesize

    167KB

    MD5

    21fa799a3219799f52f398a9902ceb3b

    SHA1

    16ec81ea0117603dc9964327ddd7eacb3334014f

    SHA256

    b87e6606f2aee629c080d973eadc5e41a32c45496c3f168393f71e4dcc55ab33

    SHA512

    19e20ce0553e240c774565973281bb321c42d85e43079688af6b74b699659020d7b78ff888818addf4c5dea3691d3fbb7afde0e1b6e272b57cae8cd28a57d9f6

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\MBS_Picture_Icon_Plugin_21067.dll
    Filesize

    82KB

    MD5

    cd13bf66ffb56e591d4eaa8469464a15

    SHA1

    9fedbec32a580780a15396301026f10667a71141

    SHA256

    080f7c36cb93572451f2d6185dfcbcccb298515617669d5aa1444d9394875906

    SHA512

    36e6cc3486b696f65b66ad3e24a485870b5b1df4dea9ad7c7ac268fb3ed9a31475e4d0813776211af17b70efe3a3ecc4ebde58e8f3d89ea804545d337a1ef421

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\RegExx64.dll
    Filesize

    375KB

    MD5

    aef42c8511158c6b702c961068a766e4

    SHA1

    cc6cd668b6ba94417d2eb4304e2d258b7d56c784

    SHA256

    7bb542b6962ec28943eeb9d670caa75d33801b378fec4b7766e1dd5c2a958ee6

    SHA512

    6bcdde0724119cb94bf322f7f33b6f7ecd50cfbbc90e0c5f17a09c6bfc955a3aa10b71d0110b3ee3d973de023841fdf13cfb2e89b4c588cdf1d68702456874d8

  • \Program Files\MaxBulk Mailer\MaxBulkMailer Libs\SSLSocketx64.dll
    Filesize

    2.3MB

    MD5

    830b35e9a8c6057ce8ed302b93e26245

    SHA1

    ea464f8c99d4e777c9d339053a0e52f90ea96f4c

    SHA256

    4d33aa16dca0bb21045e54d8e76b700df0e2d0c208c7b5cdf35cea553065a9f3

    SHA512

    b062be9eb12cf244cd1ba3992ca39b9139050a1cfa82b2705ba3e9f6e5d02fc0352308aa0141bd834ec4d8b71011b8c873bd3632b4daf725ff0e42397a9d152f

  • \Program Files\MaxBulk Mailer\icudt73.dll
    Filesize

    30.5MB

    MD5

    e2faa43cc20814637bdb72908d5e0502

    SHA1

    4dea2cec338bcbcbb42d2928bbba0b493762b5a5

    SHA256

    1b838025cf1f27fee7dcac57b569479e78a753fc50aa83fcace3ecddb26c3927

    SHA512

    758d7446d6b4505301bd93286dd477771861cf15c9de23f9dbaa5d020e724dd2bde556e4fc48df1c6852d3f9b7662ca8fb37991af1cd6592375c074a042b6165

  • \Program Files\MaxBulk Mailer\icuin73.dll
    Filesize

    2.9MB

    MD5

    361f19a218e828a7bf8c17d59927eb43

    SHA1

    e4e37b82970e31894b3fcce687a6f69dd3fdd79d

    SHA256

    c2bb0bccb9009107edcbd9fe367e8b15ea22bcc15dc5002c46f1af20712569ad

    SHA512

    5510ba4bcb88693069073594baf98d22d57dca413e25953d5f7072ba0ae95178b69bbdf89b4feb455239a1845347d6322a5b2e69fc2b61e3e8a7a0a1e029740d

  • \Program Files\MaxBulk Mailer\icuuc73.dll
    Filesize

    2.2MB

    MD5

    5ed1f28c8c84c0384b4ebecedb0e471f

    SHA1

    4cca20ed5bce6eb3ff19c3977a96342c3b605f13

    SHA256

    a7a8a6a691c698ff6ec545d84fbe3e81e7c80a0e44b4a2fb7c7ca8b7a668c07c

    SHA512

    cdfa5872b14801cfdff8994ccdfba25a50360ada9ec1766c9cdb04fed24d0c29493e840355517c8bc395f34110774b4d2660b43689a9ff06737f7a382419183f

  • \Program Files\MaxBulk Mailer\msvcp140.dll
    Filesize

    554KB

    MD5

    c7a693fcffcb6c245282d1132e38ac5b

    SHA1

    8965f69c938eecb2226ad7329a9df5109d93cb8c

    SHA256

    a8102891d06b5f21c35c67e4ab26eb84f54405b67e67eaf75dadc62cef08b55a

    SHA512

    321456ae04eb392734a0aba27e965500467d58dc1277fc550b6573916607ba53c686db05219ce326fb3f9289cc4430b85990362f630e4a7829345067986ca6d2

  • \Program Files\MaxBulk Mailer\vcruntime140.dll
    Filesize

    94KB

    MD5

    6e34fc4a713c3fbd88e47ac188d2540d

    SHA1

    1877a17da406d147566168c56aac1eb576782b37

    SHA256

    d8faf8ebf360ed0b3b1a43877a04863f7e044b3d19b641d88737e0829d683b36

    SHA512

    848a1d9602210d7da0f6e4d7817af08dc02baac7eccf1cfaadaf3a24b55e1316e77c40672a6a1195797e525f448817e534ae200e99cdf548ee64a7996fbcec4f

  • \Program Files\MaxBulk Mailer\vcruntime140_1.dll
    Filesize

    36KB

    MD5

    d76532f224b6648179b77525326e8754

    SHA1

    cb0a90adf84b9c19e750b166789452693f031053

    SHA256

    0d8217dbb0d52a3f8cd233b089131ca19aa6e0fc0c0fb10081f3c50761f5d15e

    SHA512

    721b4f0f55fbeefa394d3471c66d32e2f0f452f9977987450b1662b8e2e9a88d1b9c014b5f2a4b378d99f6fe4de6b5810f8b00157ae25b0de2a3bf3e211ea2fc

  • \Users\Admin\AppData\Local\Temp\{d992c12e-cab2-426f-bde3-fb8c53950b0d}\.ba1\wixstdba.dll
    Filesize

    118KB

    MD5

    4d20a950a3571d11236482754b4a8e76

    SHA1

    e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c

    SHA256

    a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b

    SHA512

    8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2

  • memory/2500-1428-0x0000000140000000-0x00000001430A5000-memory.dmp
    Filesize

    48.6MB

  • memory/2920-8-0x0000000000400000-0x00000000004D8000-memory.dmp
    Filesize

    864KB

  • memory/2920-0-0x0000000000400000-0x00000000004D8000-memory.dmp
    Filesize

    864KB

  • memory/2920-1424-0x0000000000400000-0x00000000004D8000-memory.dmp
    Filesize

    864KB

  • memory/2920-2-0x0000000000400000-0x00000000004D8000-memory.dmp
    Filesize

    864KB

  • memory/2956-1078-0x0000000000850000-0x0000000000851000-memory.dmp
    Filesize

    4KB

  • memory/2956-1423-0x0000000000400000-0x000000000071A000-memory.dmp
    Filesize

    3.1MB

  • memory/2956-6-0x0000000000850000-0x0000000000851000-memory.dmp
    Filesize

    4KB

  • memory/2956-1077-0x0000000000400000-0x000000000071A000-memory.dmp
    Filesize

    3.1MB

  • memory/2956-1381-0x0000000000400000-0x000000000071A000-memory.dmp
    Filesize

    3.1MB

  • memory/2956-9-0x0000000000400000-0x000000000071A000-memory.dmp
    Filesize

    3.1MB

  • memory/4940-1367-0x0000000140000000-0x00000001430A5000-memory.dmp
    Filesize

    48.6MB