e7b4f252bf38c69904078ed10709b758e63e80d0a1d87feb27de3cfa8349e7e7

Analysis

max time kernel
150s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/09/2024, 19:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe
Size

672KB
MD5

d0590a9e1d6f1c78c8388505684e95a8
SHA1

39b0fed8b9e80acb57f52da101fc5fc2cc14c8af
SHA256

e7b4f252bf38c69904078ed10709b758e63e80d0a1d87feb27de3cfa8349e7e7
SHA512

308ba9f0b213e0c8df033ae8ba2f5da11b883ef5efa461b115f3eb91d01fa4c9852a58b0a8fe5b93d68ea114af0eaef30cb5607b76197cf4005b8a2e5b56ca55
SSDEEP

6144:Ujgo0Wb3gDcSI69tUquYKqsHfphYa/7RTwBUDczbvG1gp+GYo:U0fWoFiqHUfpCW7lbwzzWgp+GB

Score

7^/10

discovery persistence spyware stealer

Malware Config

Signatures

Drops startup file 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\	BProtect.Exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\	BProtect.Exe

Executes dropped EXE 1 IoCs

pid	Process
2088	BProtect.Exe

Loads dropped DLL 4 IoCs

pid	Process
2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe
2088	BProtect.Exe
2088	BProtect.Exe
2088	BProtect.Exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\nxppmrw = "c:\\ptcupv\\nxppmrw.exe"	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft.NET\RedistList\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jre7\lib\ext\	BProtect.Exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ks_IN\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Filters\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\	BProtect.Exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Google\CrashReports\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Defender\de-DE\	BProtect.Exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe	BProtect.Exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Africa\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\	BProtect.Exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\	BProtect.Exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Triedit\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jre7\lib\security\	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\FreeCell\en-US\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\airappinstaller.exe	BProtect.Exe
File opened for modification	C:\Program Files\DVD Maker\fr-FR\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe$	BProtect.Exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\java-rmi.exe	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\ieinstal.exe$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe	BProtect.Exe
File opened for modification	C:\Program Files\Java\jre7\bin\kinit.exe	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\en-US\	BProtect.Exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\de-DE\	BProtect.Exe
File opened for modification	C:\Program Files\Windows Media Player\wmpnetwk.exe$	BProtect.Exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Mail\wab.exe	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\css\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\	BProtect.Exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe$	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\SpiderSolitaire\en-US\	BProtect.Exe
File opened for modification	C:\Program Files\Windows Media Player\wmpnscfg.exe$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\misc.exe$	BProtect.Exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\	BProtect.Exe
File opened for modification	C:\Program Files\Mozilla Firefox\minidump-analyzer.exe$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\it\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\js\	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\FreeCell\ja-JP\	BProtect.Exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE$	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows NT\Accessories\es-ES\	BProtect.Exe
File opened for modification	C:\Program Files\Internet Explorer\iexplore.exe$	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Checkers\fr-FR\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\VGX\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmpconfig.exe$	BProtect.Exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe	BProtect.Exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\sm\LC_MESSAGES\	BProtect.Exe
File opened for modification	C:\Program Files\Windows Photo Viewer\es-ES\	BProtect.Exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\	BProtect.Exe
File opened for modification	C:\Program Files\Microsoft Games\Minesweeper\en-US\	BProtect.Exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\bg\	BProtect.Exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\ja-JP\js\	BProtect.Exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehiUserXp\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_ja_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor\1.0.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehiProxy\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehiTVMSMusic\6.1.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehRecObj\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\MICROSOFT.VISUALBASIC.COMPATIBILITY.DATA.resources\8.0.0.0_it_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Playback\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.DesignTime\8.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_64\mcupdate\6.1.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Interop\6.1.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehiwmp\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_de_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC\stdole\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Ink.Resources\6.1.0.0_en_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Ink.Resources\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Permission\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\MICROSOFT.VISUALBASIC.COMPATIBILITY.DATA.resources\8.0.0.0_fr_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\8.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\System.Web\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_it_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.JScript\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\IEExecRemote\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_es_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_it_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data\1.0.0.0__89845dcd8080cc91\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\napcrypt\6.1.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_de_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\mcstoredb\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ehiVidCtl\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0\9.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm.Resources\6.1.0.0_it_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\microsoft.transactions.bridge.resources\3.0.0.0_it_b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\AppPatch\Custom\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe$	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\ipdmctrl\11.0.0.0__71e9bce111e9429c\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\mcstore\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_de_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\CustomMarshalers\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Permission\14.0.0.0__71e9bce111e9429c\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.Resources\1.0.0.0_en_31bf3856ad364e35\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\	BProtect.Exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.RuleWizard.Resources\6.1.0.0_fr_31bf3856ad364e35\	BProtect.Exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BProtect.Exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Local\Temp\:\systemlog.log	BProtect.Exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe
2088	BProtect.Exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2124 wrote to memory of 2088	2124	d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe	30
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31
PID 2088 wrote to memory of 1804	2088	BProtect.Exe	31

C:\Users\Admin\AppData\Local\Temp\d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d0590a9e1d6f1c78c8388505684e95a8_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2124
- \??\c:\ptcupv\BProtect.Exe
  c:\ptcupv\\BProtect.Exe
  2⤵
  - Drops startup file
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - NTFS ADS
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2088
- - C:\Windows\SysWOW64\regsvr32.exe
    regsvr32.exe /s scrrun.dll
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ptcupv\Set1.Ico

Filesize
9KB

MD5
a8723876fce60a8a786755b8f03f506f

SHA1
6028c0a510d1d6f9d3acc448f3b1d6a1bf387b58

SHA256
f68571caa7ca04d005c89c277a68fc0cb9d8fa90954006905a0277061c384d1c

SHA512
d105c3ebfe94905767c838a4ce207d14e4603cd49026f3f90b6c445fda93d4c954e39fde7b8b758f59238b3321893d2e342e2ab8700905dbf7f4308a5577c29b

Download Submit
C:\ptcupv\Set1.Ico

Filesize
9KB

MD5
8890e273a9e56dac31f81cc7fa26c5c7

SHA1
8f12fd23064aa2b0f27f2037a942542fc04b56d7

SHA256
645313f4a7c0fa7f77b70fc97b914d96efeaad97e4138b492a3ca164e5e732ba

SHA512
2c22817c20bcaec3140f45038e784319c6bbd35baa8fb422eb0ce19a9bb9091173f78fa9e1d4eccbf27ae805193f888180412afadba9ab55617091d637764981

Download Submit
C:\ptcupv\Set1.Ico

Filesize
9KB

MD5
158a718f12c57a71fee4aac8e2105e15

SHA1
b2ca53873b6655377cd54732398d3f878c7c5f9a

SHA256
09eae3feb458e2377c337013af6e613f9731f3f45b23525346268abbb5e4504f

SHA512
589cb0a04fafec1b2f5366527d9bd9eb7ad9e20569b783736ce318f88432c7a7dfb7ff594a5bffe767cc7541ad58a5e9bfa2a401c0148fc9adecf284837e559d

Download Submit
C:\ptcupv\Set1.Ico

Filesize
9KB

MD5
44a25814cfb6725162188030a06bc970

SHA1
e8aa9d254d27be368b90b7795645f062c6be3a83

SHA256
4c969ba0840848ad66df81236048ed022dc0fc4a29f654ee323252a6fcaa6455

SHA512
241db1011aecdae4129c9cc915f5b41f673444715468f2be56fe9e5dfaad3c2939dab505c8cf60db9663534d5972effe95d28fcc674919df489634cbc633d594

Download Submit
C:\ptcupv\Set1.Ico

Filesize
11KB

MD5
65e05bb6a7cca286ef3aac078f424dde

SHA1
7879706b32e8d21f60ee77344c53304c86234b3d

SHA256
107ec2be2cd38c85b1157faa55a0bb4332089c46005e8b73699be3f0ee372125

SHA512
2d2d2ddfb4953f6cceb8657634c3aacca798d3e2c70ad0ca9397a6e2c92fd5beb5d14a1a3d6bf933672da021e606a70c1d5c4765b6aa101b239de3f108f31608

Download Submit
C:\ptcupv\Set1.Ico

Filesize
11KB

MD5
e8c39a81624cbca3532230a7f2bcf597

SHA1
febe0c7d67dfff10d9d3dea2ba2c29ff1bb36e56

SHA256
f3ed3d43284b78b4b043a9a2451e7c8a291e2a6921e4777f91da507d0ec73e0e

SHA512
59b33325d08b92209038ed5908cf2495160eedda1cfc330f2ba4036ed0d03f0184bb607c9b84a7328ab5767c0af485788e8ab90b9c0623ff11a4b0044a819112

Download Submit
C:\ptcupv\Set1.Ico

Filesize
11KB

MD5
17ed949e0362b730c605c20655b5e9c8

SHA1
b73b589f512ba50b7efbb5dcfce11e595f1725b4

SHA256
35815066142c14b44440c38c221390fc580a33fa7432e1df415d2c8ae5b133d9

SHA512
805fe4064b555614c5662da6377e5f1304b813e3b08c4314c6bdb760fce4326aa65512083e486c5aed613d8e1714f6e2dc269ccc372e663f1ac1b2468aaedd5a

Download Submit
C:\ptcupv\Set1.Ico

Filesize
11KB

MD5
4cbe0527fa3df73fe1c757bad9a57adb

SHA1
a2ae37c50da5ae1e614e7196f19ec542d6ccb62b

SHA256
6ecaf565a4a70036684aafabed353d20d003bdf3da9fcd17ff9375e0e6e3e936

SHA512
5252429cc07206a5f09b015a7a6ce39e385e9258dacd3edeb03cd84a857cd0f48394b2ac246335b9309da1e70f044bfad11904657ac795786db6a1d319e61e19

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
b36c4ab4e76dbfd481a1ac3a39cebf8d

SHA1
196cb3a819fc5ca7fb9c1ed39af784cdc3588383

SHA256
e695da14c22d5ec133e2d05f39a269d04203a3dcc1e3bbc305918f3680d1d597

SHA512
e7902b91bbe749e799a8657ea1629e69e0aeaab0cae5710f7814f3fb095bc8c42966a3f9a1079f62daa542f047647d0b5addd77074b3a6e785d004aa35861626

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
30486f7192a156711f9b7ba53160fb07

SHA1
7be0f648fa05dfd9b519e3122680190ae19173e0

SHA256
f68592614db983b5b19dd162852a9fc8f7341e079075a4dc9f13e866c893e007

SHA512
df0dcaa9f03362ef9cb39abe782cbd24fa38bf7a4326405a4ee4b51bb2810e26cd080c71894ab215e834a358a4dea4d45e7e6e53f664b37bd7e5e3ac1f9e4554

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
6f6c68c2f26c053b6a33f3c426ca76c7

SHA1
ea09237fa814b3e580787a92f17d34d410b33edf

SHA256
578ef17c6db9b34928ff6d26ada02946a21addc266e5ca3e6808c65481a599dd

SHA512
79b220e4afe3499ec0f36f5b38058f629a1c610685f7c5ff7853298656001f892f38c78938a931d6626803a248189252ac4fe36f4428c1d4af9161b516d40136

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
b50b2212f404ebf5a6ec3ce75d85cf65

SHA1
e9ff3bd64f76714e05ca7bf8bbed2411046c74ab

SHA256
fe9af0bb0c30c167a6eb191c891a5aa5572e6b89063c2f679cdaab68cd520cf7

SHA512
ac084b386545a42dec573e95991743770fa50883022f852cad5d146c49bb0f605fae7e8e65cfd41621964090b1d21a90e61f90d29b982fa2a371c033c727c413

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
7f7cce8dd415eb375b5557708206587c

SHA1
794fb34239e5adc43b8765adcbf8974ed32d97cd

SHA256
532fd277c43e4430ed982a7604f5f942e01104fdbdbc3806f5167086e9874f0d

SHA512
a3bdb9231233f1907d43e224eeef3c5fc794304421f8b8b7b4dfc6b8466511977e4283b232849cc05a754ff1bf80b780858960eb159d99cb714d2faa768c9b1b

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
e93e73b5edb1d5de6c6fd615c067c212

SHA1
2d7be63df6a3baabae8b09ea68df92f60d0e0c26

SHA256
78c88e763d9bececd8a1e81841be706ebc699fe21b82c57aead37d20de9a1501

SHA512
54cba146a6aad723b7a9fb473425b494d818411c522c91ac20befb41db1930481b7ee5c2719cb31b972a98f9a00fe786583b6ba8613493d572dd2bfc692a4fa3

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
43d155e885caac57e016a57206c20a1a

SHA1
2fd610cd0f36accd6a37d16f4f766716aa3e4554

SHA256
8e5b9d4f88c971edc6b6bd91a1cee4418435cf6b2a75f3f5249c0da8e982e35e

SHA512
d903035bb8a722a4bed5c00b781e9f4de52d3654a9445fecb4d6112b8492e2c5b9d67b685077ec60caf7e62f87683b3f8051379ebabf942844ade8d201ef1403

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
90545af048f83cd057cdd3db3bd4b842

SHA1
66296cd4350a8f9256db1ad9505f4314ae1a681a

SHA256
dc47ae0d613f8fbb89864b8886bac225a3173f32b360c1886b425072ff160df3

SHA512
2b122474749b6afa2023638b46f5f675946f61c1953c55b70d60b056982f97ce510c9fd1b7505fa99efcaf0370d449070649f8d733d71610458b1bb8f4a7b2aa

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
30d6faf51bfdd3e531be2e02ee831005

SHA1
0a71abae64555bcfa8bda980476faa9885f50a00

SHA256
24599bc6283620dfd67d0c58b1f086f67e6427dc440c4691840ba1c4aa054531

SHA512
ed428cb8ce611a9f225089be69de2dc627cd2aa8ca7b32c3e81d093316768914b498341a0697979e9b3114d18c86702b243dfb6887814e3fb19080c343c7ce5e

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
ee4f617f5b729702a8ba404a6ecb8406

SHA1
df04dae9c87b49572e085faccd7c9582ad24a2c5

SHA256
b3797d358437db186c58c4778b91daa7857a0a97e353c2da25bc6842f07150c8

SHA512
35ac9971f925892449869cd35868377a371d2a833d0a91b5a018731610476be0980c59159705022adbd166417f5e2a4192207d7508bca87a035496024218c098

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
febffb7bdc60b2fa8fe97d6898e4f295

SHA1
d95f69d338e270cc834062b0a4aa7e2ccfdf0b84

SHA256
e4d566a974c9f875ff3646b4eb514470024fdcc467c919a5275c06ce9b230ba9

SHA512
4d25539829af538b8dd759230346820ac33c9aaf58a1e8d843ef3736599c4dd2f4d5e230fdbf0fb65a85ae08930849c906f862c77ed54b83ff5f1fe0c9070e8c

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
7c6a04dd5c9b07f1c60ac419a25ce679

SHA1
208ac73478edc73d2ee04d8c1c6f865b73c5303a

SHA256
9b75ec45c0a065861941231cb75fb4a38d970cc02bbad53c019066874e80806a

SHA512
8022a68a92537e0e1f1ef6b2ec0826a9e001b93f167f0f14a737c29cc2b4ac81b2c0e49be4799eca1560a7e25015cad249e39b91dbcadab70e2a2ae450998dd5

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
86f1a859f610859e74db6d64ff93739a

SHA1
29be107acbdcf329f272cbe320bbea0a4c61926e

SHA256
f70031dbb183657a99e76c27f762b08bb58a598375a8ee991dc5cfdd5f990cd4

SHA512
9d54f82ca2172b4181cd4e9b6e238e4ee73bba638de24df3f86176b28798c60540a4cdafc4c75a3d906819653f0009dddeee51bb930bde628e6261d4aa3d03f5

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
0e265afe71d58b16cb513fc197c271b7

SHA1
fce6f770e43b3a8533bebce19af0839f650338c7

SHA256
a7c98d6f52e08f85e561604f5b4065f86c1a86cd0aba792b6c5b9d0b23bfd9c4

SHA512
fdba366e110328fc2753bbee0561dbc14b8390b5ccf50f39ff98a351a6f974976646a2a62149014baba0f4c3bb5cdb429e7ee574b65a6541ff901b6bea02b7e2

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
536ea7e36cce8fe69d10b3f60011284a

SHA1
7b7b31c4e255c6bf2f553343f6a07d207f4572f7

SHA256
84884798ee5b15679ba8042593682dc7974e45e7d3317b5674f514c529a0585c

SHA512
ba2a3b8440a3d08ada6b250e915045eaaa3e3cb52f0ce10f644f5c231a7099c02f0f7c923ff2a91331617644f6776cd92376680be60c2e300f1436bde31e4663

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
4845c11aaac2d8d93211047880373cc2

SHA1
9bb0f933390555515d4a6f4e50d55217dba5c99a

SHA256
80bb2cf52ecfcc5c3865995df6af0e9396a028e37a146b02c2fcefc19c593dce

SHA512
6fff12d68ad45caef9139cb4adf970d003f43a8e347c7e1a786638cba0288a223e05000b9480d95f0a26ee2ea6a74c9b3297d71a24574c2d459ec726c13e3718

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
d1fcca6429b94eaafa6b311fbbb05ea1

SHA1
c3951249a55a324ba0889b86718228b2fb5efd7e

SHA256
a04300b70208431da495c9589cd8e8d0ae8f13105b0a9da83005279b40f528e8

SHA512
44565c9ce92985f3b7186e2c5898e21dac15b3199f53fa6da861d1e6c87f8d96524820ad2ccfd487c03b39a0a1502e31032533477653e4de0db04043997eb1af

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
e225baddd85c06c91f342383e2d49246

SHA1
381524a46f3edb090b258868656d1b657e2e592c

SHA256
aeadb424dddc0fa93ddbfe3e8d0503988b05febb52d10dd4c1cf0e998956727b

SHA512
1500259e062844850fbb4555490f499ad9708700f8f0ea1144cbf09fb0120d56a2b428056287cdbf4a245217afd46cf11031c867041f732f4fce44a33454a481

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
3217f2ae17cf84a946a5a4374d6f750a

SHA1
2e663169745bee8b9c5a2206fee8706f3d29eb6e

SHA256
46b4018e9cabb21bd77a58c5425f80d97db6d8dcb8cd5ecd5617210316b9478f

SHA512
f284b19305036187f8c3f8af7c3f7768311a827944f1c5db32b47c748bd488e5884ce0f3526d1c1a8bccc1de5ec87cedfc86fda8d2892e83bb5dc8cea151ad1b

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
78ca8bd9fc751765e10d5286f3a84269

SHA1
3d7c1b0a8d0b939b815c6571e79e61e13963619c

SHA256
3b7c5328e1de02eeb9e801a194a479a31235ce5523ecf119f4e187f05b704046

SHA512
3238a690bc85d2ce38e791f99d8387f7593674ceabd9526d4cb12fde7ffdd0eef38fb4c995ac2615eaacb65eca8e32c4283de6e2113c24b144ae4ea5f7d7d38b

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
e2b2a18c91951ff2df54b9ed6fd0cb68

SHA1
afcb373e9a00b6eb53b8559c0575ff729e314f32

SHA256
729768b299888cca44a22a10e78d1ac44d8c61c8765d51e7074f27de52953153

SHA512
94d907456c8df6b66fc41311494f67ae26ac03f702c156a7913ea8e92215e8e8f74020ff696af98556b765204cc0041160e57c6f2165876fe05c1fd8e110b37e

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
ef63685f1ecdcbea83ea7010d72738b2

SHA1
d7e2774589861d62ced2c8af23539dfe2a0f3bfc

SHA256
9f57ec411efac4cf596dcd339a2b514e9f94fbbb89fc95063ccc138fe3b07bfe

SHA512
863db8180293a2cf62b60cd4e3bf335414686142fc31721fb68f466dd07b514df63d90e62d435e42299ae0a5745261a3ebb07ef269d9e67f90161a0c519c99b3

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
8c832c7f5bfefd2eaf12c75d4b41d660

SHA1
30ac3de3de2b974175f91a7254e4a54f87fde2e2

SHA256
3659053b400633a5e648e799a5a482c0bff7fc5cda6aa399a986000a39fe1f50

SHA512
bfd35eb12d12292dbfd32b1df686803cf3eaacbc0b4c5e45b0f91b5379a1c58dbee3be9314dfd6e2c8a8cfeaa1201286d0f14cb17386f058d97acb04282db92b

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
315b3d443cbb9b4b31430582e4d5e9c5

SHA1
5a20281df19f458983ea78a194f543c963971d9a

SHA256
6346ca3a8beaee7da33529eb2a78b77a5ad8234e05e6ecb84b47da1f0035969f

SHA512
d4b25e4636aecffbb7421ebd17ccc19cf901892281e1634c8e27266155ea7f978deea2bc737823d39f56c3a9ea063ed726830fcec335ac1e1a37d315bf382a92

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
c4fb3c2711e2b48cd2f16651c08b1720

SHA1
24659beafdd79dc60b3c83128fa823f020dad5f2

SHA256
d10ab3883af01ff364aac2ebd741bfc9ddaa5fbcca6a5bbb03706e3db35c432b

SHA512
7c9c9b3c741a174293a54b9156eee98a4c229d7a0f244ed6b37deebab88e0f271f8bdf16f3e60361d57a05b80e150a6d635f0423e847dd1f7541285c731913a4

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
77419802fa630dc25edccb63d87ac50a

SHA1
58c40bfd97e1e9ad50b6e5ac3c0d37def657ebca

SHA256
aaa05fcc6fae50da9685f77e37dfd3bc488fc3518bd1cf1f3a443c8a7a32dce5

SHA512
052268f66b31708713c560a511ee2c1274c3a12cdfdc0519434fbfc05ebe357433de0be23da32572a39b23459584c5d91a3e08f8cc2c23bb3715773aa21b265c

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
dbbeab21a647c9427ed1776ac6528859

SHA1
b3f7d3cfd57be85789703af6732272270b90561c

SHA256
a27e2d006a60bb3cec72465e7428c2de33a4230bbe553fb06f26a4e5dee4cba4

SHA512
bd230d3032153ecdff7797f64df5aedcc58923153e2eb2a34695602624c658eb6a9151ce3ec9d174749bab664b8216732154bc946ebb5d6f9967b30350b275bf

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
c3eb769cc19ecaa4eb2b6b9db3b33d61

SHA1
9c74f8b0b3702177b16fcc3a3856507d2e5068d7

SHA256
336d663e2a3f9c16c0dd9480d05ec424da8f346196d52b26ec7a8b39c32cf32d

SHA512
0ad998ddf01b189921569ab57725876961608df00f754aee07aec2eb6e93a0a2288d0fe24a10f01add9e0f04c1317350cb6ea6e7def62bd374db680288a9419a

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
c14e45b686719c9a57a53c44933718e7

SHA1
b0646eee166e3b6a8e0ee535fad60b35b718f4a6

SHA256
ede242dafef8874f9bf8eedf4fea5645c3405b8bfaae99651942989257fcbd84

SHA512
eb929d4ea40c9e03017d038146ecb98302b28647a3a74c1208fe0a128003b90c4cc8c94e55febf784bc43b6b97f5643c3c43a864b5663f97967a1bc3d28b8629

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
0ebd4f176532bbd0efac28d10ab756a1

SHA1
b0b7f27348bf3ca78121c501c94d87b996263dc8

SHA256
2ac80fa002edb8e2ebf6e21bc01a979184e1a5c42b49889c5f331448266bc25e

SHA512
40269dd972fb3018bb10036cfd856459d034a99d27f45798888a25e40d523a11b9b673debc227f681e577fa7ad8bf1eade3401234869df31b2f7e327d672e537

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
161e4b1c496243d7adb168e2626953ec

SHA1
1010a7e3f312a133bcea2a4809db9bd8292ce7b9

SHA256
6021b7d84827504747570240b8a3bdf2e5588749658e444272bfc870af403187

SHA512
e82411b32bc47b1d41222e18de66c98e6c3bf7ca3e136d1061145635b7b67fa39bcb74f57fe6642ece57d1ab1b6dc62293f63daa4c05630b87dd0743f07d25dd

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
b5d372e02afa4a940d2c30e009418663

SHA1
ef3e101d7bf27853984d789f4b972ae29874bc4a

SHA256
c3553091e3e0d10328b3596ffcda4c8c48251400fd179d18f91f6c8a7c41158e

SHA512
65538c9044217a38b3a6152d501aee5af37c6cec3cf6c7798eb46143be5f3b814c25d07e1c929b0a0e1a2426399284a8d7a7f677cc23308b4a381064b6c70184

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
2276b1e1494279be21279f58e3a9ac11

SHA1
a59431a25b170d0e3e53bb2a8ab7e8c0f74b1ebf

SHA256
e0b7b6b30a028d2ce34b15c119b1c63e882b7b3a9fe7be02244fc6658fbf0b46

SHA512
aa3e30ee329d075cd6988a93483b7b798e62dc3d293c23807df0ec012b32014e1d0c6df22960e3f156ec0549495a6db37a0a8ec57288e59650d4768f89f66f75

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
aa81dbbb87437c8e0b210efccba50355

SHA1
e750769c3ffc64ad0294056ad7e2150cb20a1230

SHA256
963f2486fce93744270d272013818d7bb3af3d2ed82496291f30958d4970edbf

SHA512
521bbe1f1ff34014bba53f1157c5b43e86fac18c6e500bdfd19d399d2b7ac5cc4ecf74ddac58ab9e108a9f8d65dd5550b242b93ba4e393de45e9ddaf18bbaed6

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
940160684b76568b9af30bff5aac9f5f

SHA1
c2efd8c7ae0da8a3f3ec5ea7c87d6ca7f9d57ba9

SHA256
58a411411e670f669adc923993efff31609e66c6c4a03d5ed4c9ecb6d9f4854b

SHA512
82df92d4b2986fed7dc811247a43dfa534c48e17b1fcc57360d93f8d840ec4977cac4018dc3ed4de57c30f40876c30665f7cffcb2451349982f880252a4cba53

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
9e92ce2cb9a6e6880c7ecebed703dca9

SHA1
25986cb82b042a9132fef281007a00be454924f6

SHA256
71264cd68be8d20980d896229c10ccde768937518356c0168bc35036781c88a3

SHA512
f71fa1eb138c7824167c1e5d272142bf3638deec0fb5dbce73c78f23393c02d67a3967ef42181877dc594ccb7d1794fba2037a553df90bbc2b097ee15211f267

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
d2a4059669569967c2eac0dbeb2c6f5d

SHA1
0d5778dd21de3e3f4a397f3127677822064b8d47

SHA256
e3f13c324978522f5d52e86ebe3067ab9a55805abba39d88dbee4721a1356b9a

SHA512
95b56715cd38c2d0d27beb175a3da14eed3536be3f44ffbc7b2a5bcce73b0af8996f3996695254d4926a6043e03d14b1672eb9d054d25652655dafabb48f6310

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
8f86babd97b4648bd9faa16785a214a6

SHA1
e30d07e4b0569cf6867364718e36e13e95a1ed63

SHA256
240c5057885098b1c7f256697ecf36a2d9d32c67bbe2860d6867b8e17efa8817

SHA512
3b01fd79a01509df02038701b199dec89f075609c8a40ee0c46336bbb77629306b599bdc3f161927e3a570ed7e001e0bf1ef710f954270809c31903fd0702150

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
3044c5350aeaf22ea9e75d57f029ae3b

SHA1
326182c06d42c2a1430b1fcbc9342c6c5701399e

SHA256
464c4c6fcecf68a94cb1f25f8f4940a5c4541a2c13e3bd9a359b49ca566922fb

SHA512
c4e9648e035a8563db89b910b31b0cbb6197c4367104b000e150519bcbd58853dbcdfe5ac37f7e52d9b82af034b5a8a3fc2142d289cd7f9b601d3fd37e2db9a9

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
e8d735c896728ae1812b49b143df8900

SHA1
b72879b4f4ac0dc8e886649f3f86ff5741f80ae1

SHA256
6cefeb0896235c8cec35906312e0f932bf98585184dd451d7e7775bf14d1e975

SHA512
f6cfc06ced514526ea220fa73f81b6cbf19591fcc0969a6e5f47cb6c107d20d665c9a7e3dc01b965d53423dbf0c652bfc661fd6cb8ea28ba75071371e487cc58

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
020c83cc7847d4c45be6bf2ab5de37b1

SHA1
6445d8f567a038cdbc238d40bbc2ceabf167baea

SHA256
c2e1085acc60f82ca24edf41bd1e080b409b7baea541940874988f298031dfa0

SHA512
d94661b46d2baca640a5ec07cb04c41fccf0e8907da6db7828a10dfe75e3f8d8a984b9310ec4d7525792208229286a2a89c67e875d0a23278f98ba426beb2119

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
a760f4f42e9b840fc205d80d48c3e329

SHA1
691b8f021ce05e8148ce2647414c1a1523b87ca6

SHA256
71dc751f6364e947b9c110450a651741c14472bea5ba8203c99a91d9a5d3745c

SHA512
fbbc188d31fd9dea29f6163f9203aed15bbe3113e1eebc4332db027ec669985517fcaf17152539c6dabbf32d4c0d1eefaa942cdd8423a224c247654464b58f92

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
9KB

MD5
9716ac2f3722dfba717937642a5bdcfd

SHA1
f1c9500d521706ccbb5ed649f8137be9ab43602c

SHA256
ce05cf5882562eea3d7b377b1a6e691ef8d01ea8fcbf5fa27f93d464e4b14a8c

SHA512
f7f596e1dc6530eae7357280e3eccf69d5489f11c2549e3e488a8efdbdd0bb3a4b53ed308de97fb4f1279410dc86fc14f522273ecac89eba9a87f926426dadda

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
5fa734c2a30a65ae979bf79f4cc235db

SHA1
91836f5703f674e055de7e4be3dfd36e3f27e3d4

SHA256
9db3b7a77986a6658bc055e6b15cef94ad5b9a789f04cb2c55220cda7db8afe8

SHA512
1fa95063937c543c57c6b492e25fbe6ef948705010dbbb36815bd843e9821774a4ee870929711e44be35234cb5f6e85e71e75e85973068a1d4219cc769262531

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
07e58842eb29fb0256ffb1de57f62b5e

SHA1
c5736b76e305b6fd571758223915baabd63b717c

SHA256
f39ff429e707c6f4ba2f1eedad34068f8a5561cc8df12508f2e9bdcd5adead7a

SHA512
58ee5cdc03f91f6e27c0e45b970b56946e936bfc8f6d78464255b9b88b251ef6754aea1b19ff565ae76e7225e18cff8d8fb163a8db4c5d9da6cbb71dca068d33

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
984d50f98ceb1f95793d36b41b810afe

SHA1
9e710a1557b53ab92fe60106902a228c7e0d2bec

SHA256
c19d81e5a3a69f54f0fe737bc8c8981e285e29996a4a072a254c56172db406a1

SHA512
8c8854372882c3ae78860849670eca05217eca7a6430fd974732ee1d48cfa10adc66c5b0947ff1063e505d47e2230a773d5e30b7e4738b6d330c4b6d8c19cb87

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
687b71c8feb9ddd578a043d615ef91d2

SHA1
02bc1a2e427683a59fe4cebc75985096dfaf8f18

SHA256
e28798559e8bbe80d6b7bcdf75bb9a63f8577757cf675fe282d23e52a7bd2876

SHA512
bc3dd51c77a8578c22a2389579e9f8413d6511712b3097c7b2c68e3ecd0465af441f125dcc29b6e5a52ff14e1fa5cba7c0ff97f966a1bc1ab8444eb9e275a4e5

Download Submit
\??\c:\ptcupv\Set1.Ico

Filesize
5KB

MD5
76ca744aae657e9aa2dec8d0901ca86d

SHA1
d00628cb5ce3c1ed6d883c47feea5a2ed580a789

SHA256
9f26b74151a30eb105da23754832f319954d6a04d596a95d1e24947c38629394

SHA512
48f2c35a0d0db93b3e0c1ab6a23f5649e543f8a2a2f940d3b7391d8c99f78e1ed19704a3f36140407e7260600c0a95f1fefb8ff473db9bb2bfc3b0d16776fac8

Download Submit
\ptcupv\BProtect.exe

Filesize
76KB

MD5
d4b31610fa9e525e8a6a7d3251c456c6

SHA1
02abddca4e01b16b8799568a61c4829f936c6dff

SHA256
bf4cb287bb8d914aaae8f17e908905dafcb8b6e82028e0c6083096e074906643

SHA512
688dcf3eb0e84661547ef4581d518f7cb0de910b6c0aa7dced0a1d36f7d2369f32c831d37d9eb7340e7c28a03702f42fac8456a1360802b2d8a856ff0b75854e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads