ceb37386180a22b2dad5a1628659c9f526200390729835f539a9f0147ca4ebde

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 13:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe
Size

6.1MB
MD5

da71708b7b9ab59308a89c73ce99c1a9
SHA1

5b06cc7cf23950019881093721a761de44220519
SHA256

ceb37386180a22b2dad5a1628659c9f526200390729835f539a9f0147ca4ebde
SHA512

31039b04a7f32f5bb6bb2d641ceab6a5320761fae767075472788ba50751b4ba9f0a67dbd6b649c78ba508bc1ff37dc7f8d72b0b8eada4f77eeeaecdf66339ab
SSDEEP

196608:QxfipLtftjz3oFbgPEfzA1TMd5sHP0HiG:QxAYFsP0A1TO+vPG

Score

7^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2756-0-0x0000000000400000-0x0000000000FF5000-memory.dmp	upx
behavioral1/memory/2756-563-0x0000000000400000-0x0000000000FF5000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe

Enumerates system info in registry 2 TTPs 64 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 1012	2756	da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe	32
PID 2756 wrote to memory of 1012	2756	da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe	32
PID 2756 wrote to memory of 1012	2756	da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe	32
PID 2756 wrote to memory of 1012	2756	da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe	32
PID 1012 wrote to memory of 1076	1012	cmd.exe	33
PID 1012 wrote to memory of 1076	1012	cmd.exe	33
PID 1012 wrote to memory of 1076	1012	cmd.exe	33
PID 1012 wrote to memory of 1076	1012	cmd.exe	33
PID 1012 wrote to memory of 1776	1012	cmd.exe	34
PID 1012 wrote to memory of 1776	1012	cmd.exe	34
PID 1012 wrote to memory of 1776	1012	cmd.exe	34
PID 1012 wrote to memory of 1776	1012	cmd.exe	34
PID 1012 wrote to memory of 1268	1012	cmd.exe	35
PID 1012 wrote to memory of 1268	1012	cmd.exe	35
PID 1012 wrote to memory of 1268	1012	cmd.exe	35
PID 1012 wrote to memory of 1268	1012	cmd.exe	35
PID 1012 wrote to memory of 608	1012	cmd.exe	36
PID 1012 wrote to memory of 608	1012	cmd.exe	36
PID 1012 wrote to memory of 608	1012	cmd.exe	36
PID 1012 wrote to memory of 608	1012	cmd.exe	36
PID 1012 wrote to memory of 1008	1012	cmd.exe	37
PID 1012 wrote to memory of 1008	1012	cmd.exe	37
PID 1012 wrote to memory of 1008	1012	cmd.exe	37
PID 1012 wrote to memory of 1008	1012	cmd.exe	37
PID 1012 wrote to memory of 1056	1012	cmd.exe	38
PID 1012 wrote to memory of 1056	1012	cmd.exe	38
PID 1012 wrote to memory of 1056	1012	cmd.exe	38
PID 1012 wrote to memory of 1056	1012	cmd.exe	38
PID 1012 wrote to memory of 1696	1012	cmd.exe	39
PID 1012 wrote to memory of 1696	1012	cmd.exe	39
PID 1012 wrote to memory of 1696	1012	cmd.exe	39
PID 1012 wrote to memory of 1696	1012	cmd.exe	39
PID 1012 wrote to memory of 2184	1012	cmd.exe	40
PID 1012 wrote to memory of 2184	1012	cmd.exe	40
PID 1012 wrote to memory of 2184	1012	cmd.exe	40
PID 1012 wrote to memory of 2184	1012	cmd.exe	40
PID 1012 wrote to memory of 1472	1012	cmd.exe	41
PID 1012 wrote to memory of 1472	1012	cmd.exe	41
PID 1012 wrote to memory of 1472	1012	cmd.exe	41
PID 1012 wrote to memory of 1472	1012	cmd.exe	41
PID 1012 wrote to memory of 800	1012	cmd.exe	42
PID 1012 wrote to memory of 800	1012	cmd.exe	42
PID 1012 wrote to memory of 800	1012	cmd.exe	42
PID 1012 wrote to memory of 800	1012	cmd.exe	42
PID 1012 wrote to memory of 1924	1012	cmd.exe	43
PID 1012 wrote to memory of 1924	1012	cmd.exe	43
PID 1012 wrote to memory of 1924	1012	cmd.exe	43
PID 1012 wrote to memory of 1924	1012	cmd.exe	43
PID 1012 wrote to memory of 824	1012	cmd.exe	44
PID 1012 wrote to memory of 824	1012	cmd.exe	44
PID 1012 wrote to memory of 824	1012	cmd.exe	44
PID 1012 wrote to memory of 824	1012	cmd.exe	44
PID 1012 wrote to memory of 684	1012	cmd.exe	45
PID 1012 wrote to memory of 684	1012	cmd.exe	45
PID 1012 wrote to memory of 684	1012	cmd.exe	45
PID 1012 wrote to memory of 684	1012	cmd.exe	45
PID 1012 wrote to memory of 3000	1012	cmd.exe	46
PID 1012 wrote to memory of 3000	1012	cmd.exe	46
PID 1012 wrote to memory of 3000	1012	cmd.exe	46
PID 1012 wrote to memory of 3000	1012	cmd.exe	46
PID 1012 wrote to memory of 2428	1012	cmd.exe	47
PID 1012 wrote to memory of 2428	1012	cmd.exe	47
PID 1012 wrote to memory of 2428	1012	cmd.exe	47
PID 1012 wrote to memory of 2428	1012	cmd.exe	47

C:\Users\Admin\AppData\Local\Temp\da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Windows\SysWOW64\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\F834.tmp\dos.bat""
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1012
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "base64.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1076
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "bin.luadoc" nselib
    3⤵
    - Enumerates system info in registry
    PID:1776
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "bit.luadoc" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1268
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "comm.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:608
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "datafiles.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1008
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "dns.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1056
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "http.lua" nselib
    3⤵
    - Enumerates system info in registry
    PID:1696
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ipOps.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2184
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "listop.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1472
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "match.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:800
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "msrpc.lua" nselib
    3⤵
    PID:1924
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "msrpcperformance.lua" nselib
    3⤵
    PID:824
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "msrpctypes.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:684
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "netbios.lua" nselib
    3⤵
    - Enumerates system info in registry
    PID:3000
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "nmap.luadoc" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2428
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "nsedebug.lua" nselib
    3⤵
    - Enumerates system info in registry
    PID:1708
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "openssl.luadoc" nselib
    3⤵
    - Enumerates system info in registry
    PID:1372
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "packet.lua" nselib
    3⤵
    PID:1876
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "pcre.luadoc" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1564
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "pop3.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1428
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "shortport.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2608
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2908
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smbauth.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1492
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "snmp.lua" nselib
    3⤵
    PID:2752
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ssh1.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2552
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ssh2.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2572
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "stdnse.lua" nselib
    3⤵
    PID:2540
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "strbuf.lua" nselib
    3⤵
    - Enumerates system info in registry
    PID:2588
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "tab.lua" nselib
    3⤵
    PID:2988
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "unpwdb.lua" nselib
    3⤵
    - Enumerates system info in registry
    PID:2224
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "url.lua" nselib
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1404
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y passwords.lst "nselib\data"
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:576
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y usernames.lst "nselib\data"
    3⤵
    - Enumerates system info in registry
    PID:2804
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "asn-query.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2716
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "auth-owners.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2864
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "auth-spoof.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1300
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "banner.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:1432
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "daytime.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:768
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "dns-random-srcport.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:1928
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "dns-random-txid.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1536
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "dns-recursion.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1568
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "dns-zone-transfer.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1920
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "finger.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1900
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ftp-anon.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:324
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ftp-bounce.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2592
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ftp-brute.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2816
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "html-title.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:752
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "http-auth.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:1596
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "http-open-proxy.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2336
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "http-passwd.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2312
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "http-trace.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2932
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "iax2-version.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2468
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "irc-info.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:1548
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ms-sql-info.nse" scripts
    3⤵
    PID:2368
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "mysql-info.nse" scripts
    3⤵
    PID:2236
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "nbstat.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:2440
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "p2p-conficker.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2352
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "pop3-brute.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:2096
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "pop3-capabilities.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1776
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "pptp-version.nse" scripts
    3⤵
    PID:1268
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "realvnc-auth-bypass.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:3008
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "robots.txt.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2888
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "rpcinfo.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1440
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "script.db" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:524
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "skypev2-version.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1832
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-brute.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1460
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-check-vulns.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:800
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-enum-domains.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1640
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-enum-processes.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1924
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-enum-sessions.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1844
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-enum-shares.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2452
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-enum-users.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2432
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-os-discovery.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:2420
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-pwdump.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2428
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-security-mode.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1708
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-server-stats.nse" scripts
    3⤵
    PID:1408
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smb-system-info.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:984
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smtp-commands.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1424
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smtp-open-relay.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:1840
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "smtp-strangeport.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1428
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "sniffer-detect.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2064
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "snmp-brute.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:336
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "snmp-sysdescr.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2788
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "sql-injection.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:2916
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "ssh-hostkey.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2284
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "sshv1.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2400
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "sslv2.nse" scripts
    3⤵
    - Enumerates system info in registry
    PID:2692
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "telnet-brute.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2556
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "upnp-info.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2524
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy /q /y "whois.nse" scripts
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:2644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\F834.tmp\asn-query.nse

Filesize
15KB

MD5
655b5814d77e28f6d5f73d9ac08c51bf

SHA1
6693b6fc9c0fff829dcca4a072d924a648ae37a4

SHA256
926e5dd640afc10a5346c88c5cc20ac93b5f9314579d52c859706ad3c345d1de

SHA512
4eee3e7eb80046c15a71e54db26a4841c8096c44c09022ca934b4dd527c157985f57a737c02ee03a381c2c01aa3ae3f3845c8d46858a951a5e3eea12c5800f4b

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\auth-owners.nse

Filesize
1KB

MD5
a4c7bf1754b01139450eb4f24cb41ccf

SHA1
7d0973ea25d91d828b5c823b0d1e6a9e55312197

SHA256
d28f2a62cdfd9a518ad71f81f21114ebaeb9a7c397708f23234613f760dd3d7e

SHA512
09de4f7ea79cfc634047ff0c9b47fad9f8e0d0098a147e3ba56c47d356170f152ef45390081438c3014de7a3f5ae1d6c10723d13415dbe9ce91193d3f837188c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\auth-spoof.nse

Filesize
705B

MD5
7180a7babbfa61e6bfc21d394623084a

SHA1
32742d4fcb94765b927b2cc412f5974ab045b381

SHA256
4efe87b17fb2028d93e841f8ec4533d067c322da05282d1b97367aa1d1ff2dbd

SHA512
7bb0636c88485388217cc1dfc80745808d61b2a59230612f1bd611e594c8a92aa6089b79ceb05d2765520c16b72cb4a7a70e2178cc08b3774bb568eacfe1df20

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\banner.nse

Filesize
5KB

MD5
66d6539cdea7e211e8623c7844abbbcc

SHA1
ad827f862847cdea45db8256503954e4a58215a3

SHA256
82dc222da380a2c42cbb212a632c001836b31f762fcf8ac3952f68434c5ef9c8

SHA512
7e11bfd1c4592e42e4a16b4ac92633c7415f1ddd738d8de4f1064739abbc3ea6fb00456d28b28f191df15aa26d04bbdd2f77ac9161083234cf1f62c6d95e0bfe

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\base64.lua

Filesize
4KB

MD5
179b5c1daa2badfeeda38de342176ed7

SHA1
a8edb1fed4cdcf913ea3ecdedb6905e34d7899d5

SHA256
a29f16ef675dc69b9de11933c9b8ede27ae93772d37f8d2ccd4565f56e0e3bb3

SHA512
4cbe78df4df68d50457101b7ed2c92c34af3257334d60647877072f797ba5aae78a8915f586f324269f48436bdcae19aaf51a0455c451716eb5a62531f194388

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\bin.luadoc

Filesize
3KB

MD5
9590e1349eb05d6d3f43497910a2e4b8

SHA1
e840343091b21ab22a1b32e61a8a217c9af32fcf

SHA256
07ef7abe830d068f9d6d46c2095595fe9a513001abbd78fee6b6a87608478fc3

SHA512
e8c032f9f166a96e6703a8635067c327d578018badef3e3dc45a19c42af2bf46b00d70f7667569615be92d6d8016a58ab2875e8f08b34ac4b83e14cd7b794f9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\comm.lua

Filesize
4KB

MD5
d9f4e5d45a2676141520a2a86abc46e7

SHA1
9629f4eb13f5326751fb9a441d51708bd96b7e4d

SHA256
f4b3d83ccb5811cd425afb2bfc955a02b89b6e0b332e1dc73401b0df1636c90e

SHA512
6eca18d272b7004f7c4bc5db5c3811ff3ccdbc76ea4e31d337230ee52de8337820af3ec217fa048b35eacb8b566ce5a8efe10c2601ff49862239ff5567cd5bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\datafiles.lua

Filesize
9KB

MD5
bba9d5772d097a7441f68dfac0d88eeb

SHA1
1cefdc6cf9da9a6176189b65a7627c663525984d

SHA256
1db2adfca2136655fc7134ed9300315c40eb8e2fe5678770cdd27a728fd60219

SHA512
18747eabca995be6238411a72556934258d293b9c3768a4ad1702204a363eddfa5f1468601bd463a764427cfca517786c06a59e5e84aff550bc47bf649fd8ca9

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\dns-random-srcport.nse

Filesize
6KB

MD5
13b1e8e95638c9799cb51f9b1496b4e8

SHA1
c50d8de6ac013cee5b1f68fe0088ef21dd468255

SHA256
2f56f433f02ea7bd37d34652be2de2badc70a5edb4f19aa74ecd3dc9ef1ec65d

SHA512
4ab0ef04cd3b4db80cadad1eadec7cd92c81e774d38defd7aefb4542465a2221be25112b51ae4946d7bb8cda2e19433b602f59fd5115e2473c4963b8cd56f8a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\dns-recursion.nse

Filesize
1KB

MD5
8ac50ba0620a0041832318cda649a7df

SHA1
878e453e693ea3c05f27a67e208588829b70cf79

SHA256
0870b7354b3eee8d42a159100b661cdcbb4178b8312230213134e62773f10d94

SHA512
f5ec4b17a65530d7761cf9e5313dab5fc2e9f32e7aa6e7164fd7169b5dc1d07b26b6f84f943eac24b0a7b47a8c236f77c60039c75503a70f3bfaac10875e1e95

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\dns-zone-transfer.nse

Filesize
11KB

MD5
517df9a5a6122038d064806d35f67fc9

SHA1
f9a357e6f7b1b79640cd01d3cb7ea7ef51076184

SHA256
925e4a9d79193b0864a84a25fdc1f57b8e07287efe276335b22f4a572f705d2b

SHA512
5c8c708b7d16140c036895e0a2fc8c93f0df7f6f4208a6e52c3f5de6c38064c91b99acf87bc1a1a80489c56d011a7f3e50d81bbd1a1c0195180185dfdecd3652

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\dos.bat

Filesize
3KB

MD5
8cba70402d60ff6366bfa5cbb1ba5315

SHA1
0166f6a8ac164b8e31fa084c1554b448b271ac65

SHA256
d89d1f17630a0ef1ef1a428febfb2ceae4bb7b7a5f9f302a24f9ae4a48cf5f22

SHA512
8abbd2a69d45ab28402899f21d76826e2b64d6998ed56a2d89dc78f6517f80279e41ed114242d0a6c7071925a0ddb1ca5f0a7470fd0fc7266c3f2127d8d17f07

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\finger.nse

Filesize
492B

MD5
16245f20109b3df421ee4998f5a62c23

SHA1
739fadc579af05b3cb1d809b7cf3856912e7d3bb

SHA256
caacdc5b70e89a5df6cf477ff495c188d3db0fb202091aff49431cc26544dd0a

SHA512
e1b20632da8ec3633e890b93919d1ba96bdcf04ae5cdaab212f7a331a3c30c24e81fa461e037ece1b984fa7835c48669ce2ab904dd0b6f7c7cb2335d7c5a9184

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\ftp-anon.nse

Filesize
1KB

MD5
8163e64168f636970eb994a2e3a798c4

SHA1
820b686af22412f673f411de8e4fea889413c7f6

SHA256
ec4fb1afa65aa612d68577bbdcde493046d7896dfda790742f64783e427766ce

SHA512
c475861f1b5a97da7305ad2d732c21e3f2d0e929c3201e35c299738e3c91493dc905ade315989b297e7907b974e700164d4c4e302282b95b5786b0cfea90fd85

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\ftp-bounce.nse

Filesize
3KB

MD5
c159231b3798efa09e7f955cfd9319c7

SHA1
062238c49eadc3cecdde01cb3f5bc87c20c86b7b

SHA256
d75a3c51333552eb7275cbad63890c5a829e9ef6fe457af1171b6c47cf5538b4

SHA512
f3d7e4bc66069f45071d384e4cb48ba41fbb1b4197d75fc4461c85f105e54dac2a64b09f8614c0155a62780568aace40055ccb77159a49830c2fdb7992f21278

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\ftp-brute.nse

Filesize
1KB

MD5
c828e31e8ac0be51793270e8f48d7e92

SHA1
37b90d007a572ea693758dd62c3f1c8bcf167d3e

SHA256
69958f73a56bd512581da4d05b1adf5073b85f58b49f34e2f92686348eeca17a

SHA512
fcc54e127bb4f2869feebc4714d9f837b4d148a7254b2a5bafdd0195b3e98c688a90d2ec0d8a65fce95ff1dcd166b21bd7c9cadb3dfdb9d8c97c7a5e7c561481

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\html-title.nse

Filesize
6KB

MD5
a97ade5d6105569018c177c21b40af17

SHA1
cfece9cadcd24fbf45ad207b641b97a5bc5e6067

SHA256
425657a427ba1c6e1d20885fdb44d2c78660e526ce955f91c79f4c994cb1e9a4

SHA512
f0421b422cc46ea320fd8c3c733e930f60959b6f30b5001a72f2f1f1e40c08e422d9cf543622ef477de5445c36ecb1eb4bbdee81e8bc3999fb170c3808a106db

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\http-auth.nse

Filesize
2KB

MD5
c7410a4ecd9f204dfb7c8b8977bb191d

SHA1
9d5a1ec3532dc34bf646cfe8bacb45ffe515e2a6

SHA256
a8f106acf4f3c5c61c28db94d037193b8aed18a27aa427a433c2e42623f57303

SHA512
1e1f0de4267876193a040846eb30deea11b7d4e4b99ec1fcb590e7d93b1d4c6cf0ab73327315189783317de74bf611dce80174f76c4c55cb5bb71a31888c2416

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\http-open-proxy.nse

Filesize
2KB

MD5
eb2e8b06d94a8089c23d92d8bfb6257f

SHA1
f3176bc28e4cee8a89167276f48f5e8779a83027

SHA256
4e6cc10e18d5fb4f6751f14f06ea88f0b452c0828922db37d68a00a500422f99

SHA512
2a32c479f0f526fbafa1b4b82c969a75dac1aa49b2f35302f8216162587a6e43029260b4bc22832dd402189702d6401788b998118ce8469f35e93d981f0a2160

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\http-passwd.nse

Filesize
2KB

MD5
c884f9d2d84ac56ba7cc13490db79ba7

SHA1
87ca3a64dbd43281f782cb2e2d010a634f2e3f10

SHA256
f0884d15f53d030c9c48667dbe99c796316c35f2af8263217e6a73beb563afda

SHA512
a3916a37ee2b7e184a541e43524ce0a0053702d8637dedd43f137e1bef43b744f1a6ba0afd9ab2402710a4bd55351043c619d49080e7ff8ace59a1fdbb4a25ad

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\http-trace.nse

Filesize
2KB

MD5
8c270ebc0476113b1520f7583b16db5e

SHA1
4bcb879cf929a43422dd7d512f66726a6f444d88

SHA256
0620431fde9428d942bed28df390b4c815ee6b429cb46ec28f369b78d644f4e6

SHA512
ce5227a48aedd09fe3f2c4f16456c093375cb62869c3f722c351a8e3a7decabfe36b3974f86b060e2c8020b0ea086be3d099b201403f28f9f7f3d2a28c09a818

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\iax2-version.nse

Filesize
1KB

MD5
51a753ed085a14255ae2a57f19e9aa14

SHA1
6a49d6f672c3eadb491e3d3472250cb4447e10b5

SHA256
13df67c9cffc2d2691f4c586ec8f8cd9a109d9e4de1f552c9b77ff5947da119d

SHA512
c7dcead7d5bd6bb9e99adcacd03476b11960dffe99cddebc0b6a62d7afeb4a8ba9f04cb65f145fb792851b5b8c8d357219f972b0fa35052dc182f4150e4b23c3

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\irc-info.nse

Filesize
6KB

MD5
09912691fbcf78c96039cef9b0fca2db

SHA1
5b9832ac7f70f07e898a08daa37b5fad542786cf

SHA256
105813cea616dc933ea1bd8092dc59355850b769038a075d87a1bcb150976e34

SHA512
b03cd2f6e3ef32cff731998ed34220fd7427dac954b73211dc6e5d5fc85a7adc96cc54b32185287217594daf155cb044586b1c7b76996e445251fbeffd4b32fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\match.lua

Filesize
1KB

MD5
42ea1417c6a298a2aac68aad3a1c86bc

SHA1
bcb0650e3f62f780f6e7c0407fd72099d2e42b5b

SHA256
5e4a7fe39037b99c87b6ada1c97d8df6e5bfe1799a957603d7bd94fd9ae4f9da

SHA512
4801b9a0c2dc20168a14fd1f39b378ed611b1bf0a45819c1b567b06fce8171b4e927c654522f4bf514b75d4d32d2fb3c84939618445dc11704e851bd95206a6a

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\ms-sql-info.nse

Filesize
9KB

MD5
358f3b234b865d91430051e7b688a1cc

SHA1
9d49fd4933c329b541719eb6f03089c15b543390

SHA256
05d73ba1f2b2a0345c9d294d7e5d1176f5c6170a1bbcf473ec858763e8fd77fb

SHA512
6a5c06137e4250896bd6a769aec3206c2b803399d4edb3e52cd50626f02c9d4448b0e03af0291941bcf34647492accbaecfedc47be8fdf6ef1bf719a9e46e280

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\msrpc.lua

Filesize
126KB

MD5
7cb6591acbf28a777e4bf5516c6a914e

SHA1
fd7022f0771151d56cc7f1afc3ab94f5e8c813fe

SHA256
8fc4219a7ad845f3a2a1209d5692802c9fd53e8f080d744de56af3981678649c

SHA512
478162145777fe914a7479b9a7541c3a7b62f7cb0509a56df8f6ef150a2331d4f6c5c14061f42169378b5fd1e79a874b898b2920695c05c065b901230122928c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\msrpcperformance.lua

Filesize
28KB

MD5
15b846bebc8fee8d9e10135bf0c9a87a

SHA1
b8589bc9b14a43fcfd8210286f42e0251224388f

SHA256
7989d69bf8fa583beb833a5e5a117166e09a33294e5e3b7fc02a021ae3dfa34c

SHA512
8eed412b03cd43062b1051609ac9c6ef00d3bec7c196200527770619f7f9b7be026234e7f1921d55ce660a14b4b67c8c131bdc246415e9df4e977d1755b1ef36

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\msrpctypes.lua

Filesize
170KB

MD5
8ad83c99f178cb91eeefd08a35afc253

SHA1
9662415ea94e18934bfdfa9605fe8325c54b25ee

SHA256
cc77350ce381b7883b094a6060125025f12b68cac20869c69b59693c9ed48883

SHA512
c37f9a99d82eda3b20f5131c73d62ce3eb4d1c9e5437094cbdce24cdff9bc5c4712c6fe1881acfe92e703203c8727cc1b53f9ddc4cff554ebacf571a70c1b91f

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\mysql-info.nse

Filesize
4KB

MD5
9c4ddd5fac4bbb9b11eec604a714a5d6

SHA1
a4c4c95f965b98f9c14c988ec128a6d5a2860839

SHA256
e6d935690c81b58e4de449cc8ee0ec502fde26fc40b040540c94ea3132f4b1a5

SHA512
8e0c4abbbbbb051e0b8f02fba1e7c582ec86e70969a4c35f6852d5d237df78f884abbfd656f6b8f42486694caaaf0c90053a3c1a9313eb1055794bdd936e4561

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nbstat.nse

Filesize
4KB

MD5
9c9b71bb4d6d565eac4a5d6fc9a12134

SHA1
eec7fbf4ebf9d02fb0de5590466a03f530b48689

SHA256
aeaadf3aa7feb215010c40121fe8497d7af374ead50dac25302ad61f11e8dc6f

SHA512
267f5a4935cd1945b74052c034d115666b61c2a068353647a19700b4bf9107d126053487587f6b57aca72acab8747ce305f7d5d31bcc87c83c8beadb96b42b07

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\netbios.lua

Filesize
11KB

MD5
c13884309b5c04d3b6006127491667ca

SHA1
6586dca5125bc205e6141002dbd968c43833534e

SHA256
d2842b6d5d794c01031f40647cd14ef7d78bbc120b4bca8cd2f57399e1f3e2af

SHA512
015d4e2486b92c654f66e8eb26e5d4006301260c87a9a411955b4a1674bd5f821f5a149b79bb5dbc7c9a572cc901e221309749bcf8f625bf9bd7e44052308ab6

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nmap.luadoc

Filesize
24KB

MD5
3709af20402413eae8c170367f649433

SHA1
eb0113ec35ba667d721d4cda6e716a7e809d8668

SHA256
c9f99e5cf270a548352980fc6595a7fad1ed3c464150d1131cd22ccd0a8788da

SHA512
ff41576a72ac500d2b6bee89833db5177609ebd1ceb58b1e9227396cca9a31194bd97392e495518757c06fcaa377743b422d8539035fc9cafc90ad8376bef246

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\bit.luadoc

Filesize
2KB

MD5
46f0f8a80e17a885ca1100440cc42189

SHA1
d0b6ccb6f270a66b54d79b5c4d71089f20b1f264

SHA256
1eccbcd899e822bd20eb41eccdd27b92be59a8b2285674bd1e32a43dd8845992

SHA512
6668b724e87d3c64771cc74c79e11976172a60062759ff2e06c6fbe1d9a1a25a02457af80e8d82d90eacb8a69dc04ef49cc3229fe6864ce436cd412e5fc4f9e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\data\passwords.lst

Filesize
1KB

MD5
b0274e4f7483a1582abfca97d645d47d

SHA1
60370188d9dd37997370024d2f312be758f864ce

SHA256
59dd4f7638b6e727b727a70bdb0f29aca712ac3913f97ec09b284949b6e6af2c

SHA512
ac07312911f1f4e5a69e0dc503490eaeabf43606f53ee781efe1ec44d5a03e22e01a6b4e366dabaf5514db8d4e1d8877b049c0a40efe087fc8e2221dcbc68b1d

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\dns.lua

Filesize
22KB

MD5
7e3adfdec65e908ff7c928ad9943c442

SHA1
78a19119052c834f3e2aaa26cdbcbd7e06c0f2bb

SHA256
36c9fb2907966743aa98e1daa7ca3d490a4d4b908c11f9e84d222d12853ed417

SHA512
6da41bb01e5a315976dd19acf4059af15fde43b6a445fc62927cb344f5f6139d941788f2a191efb58533ea45e7d299e5902e92576637439a4259dd020e07db9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\http.lua

Filesize
9KB

MD5
614bbcfb57de5accc599534c5b9ad82c

SHA1
807ad6513bea781f9dcc678e700acc850396f652

SHA256
2146b5f570e55102d2e14c57db6ed4cebcadeb6b80264b6b92e6828122cb1a42

SHA512
36ac8afb46d7acbbbc5eb496db417c0ddb02ab6bfd1b0804999e50e41ae88321bcaf58402220dbdd7e0d11a0999526eef29ccb1bcbc7af1ef00bf8fd7de81407

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\ipOps.lua

Filesize
15KB

MD5
047487e20932519ed8ac0a4eeaf03689

SHA1
f8b2cb467087a7a6c878571aaea8971b995673a9

SHA256
9dfcaf4ad2f3577e6435f22b0229218d02b9dca432fda8afe6cd13e4d6ebc0d0

SHA512
d7b60b0ec4002fdcd4bb139e93f15e6fdfbceb35e40a8560662fb9afb75664fab34a2a3dccbaea30ac53b6defecfb47f0a1e256a1feb9b2adf4aeea021e94f55

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\listop.lua

Filesize
4KB

MD5
79f93795e99d29a78f75d0978759c3d1

SHA1
ec79b43102683c094fe38a62642f77e561307d28

SHA256
85927a619c60c29f562a62d13be3b00bad18f077a8a84e3d4283fc6053c16360

SHA512
b9c4690708a6c48252db6ff1dccfe5dab9dd2207c3db799c3ff39a7bf3f1c9d618eb62a4110ea8908a1927515e803f6a598c01ac3fc1ba4fcd017bce3299bc68

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\nsedebug.lua

Filesize
3KB

MD5
ca4aae223d78cc66877efbeae896059d

SHA1
7cfea410bbdbf1b752c4a597abee654047a0a80a

SHA256
beee88877b112d4f77f79a44d93197e35685bdb4340bbd22e24edb82003b3b93

SHA512
e6b9b29c087ea51d434486e471bd748d6e7bce2a356ed7e5211e9fb32bc9c08068f53f3bf2f2dc179d8b17b3c874091cc2fb3ac576d6264bf5bb0046d40d870a

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\pop3.lua

Filesize
5KB

MD5
3944c209b7379b6dbeecaec7218e8386

SHA1
12cdfd73f14473b2e1d217c3c5f10117ba0fb0ee

SHA256
441e571390e5353092b1fc339f13323c62faa0270c3f8b93489eea3575397d67

SHA512
c94a750a0ef34ad2c1a3bca4bb33c2e7b004f376e71873d5556ba1932a6ee6657f55c068fc46072cad72fd56160b4aa44ac9545941ecfcfe75c438ce791ab14f

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\shortport.lua

Filesize
4KB

MD5
03464dbfec0f56bfe6ad99b637746bac

SHA1
4705d1ab90183d278123ad8b61367b5565fd02df

SHA256
466bfd2daee410d1372270c1be51b87ad812e39bd17734acf3e76673e995dd6e

SHA512
0f78e874ad0314226e6a79eeb3a32518e724b4c38f9bfab1735997156a3c0fdc424b759539c4d01cc17f1f075471c139cd58fdcb587c2af7583dbad6879f1fb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\smbauth.lua

Filesize
28KB

MD5
cb31a6fedcb9204ccdb09563a7d34f60

SHA1
c53aa8d4ad28851d80f731109de23678749ae51d

SHA256
f26acaa5a1c7c38a664e1b034ee0f2e5702c15920e2719515587b053897ee1c9

SHA512
8581ddf946e70037a3bdbab6f6645f6ae4582a05a445c6fe45ac8e62b8305e8f04f8b555ccfbf32a4795e98786e7b97373e3a5d3ca9fc5ffbbebf34ae62965e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\snmp.lua

Filesize
16KB

MD5
05efef3832dde4336163de6728e99536

SHA1
128cdcf02fe2d46895c8a1ce8c323b1f5a78868b

SHA256
16c81261a1037b84d45fd8bed919a5d8b3109c8a2072b40728820671c9d1cc93

SHA512
d638a5d8b642206748956256292e8ee181f8e4b2e983893c44535288ddd1fb9ff4d958c74db1d0fe2c2508932511e3595d53b989a39adc5f5b17dbd5250856bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\ssh1.lua

Filesize
5KB

MD5
c0af097072d207f0fcc8af1ca888e79b

SHA1
93cea3ad56d5da43b94c0f5324770978adfec3e6

SHA256
72c82c6aab4c4c8a0b370df1dc0b40496d907dc8bcbd65ac1deadd94c862438d

SHA512
5fe8c39e1db595711a57bdaac0e29647c5ea6186dbac39e7044369eca44d4046530edf15ecbb8b12fbd4d3ab041fbaf32ae626e6c71f637f83055d7f9ede1acd

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\ssh2.lua

Filesize
6KB

MD5
5fe178ba7d535624010babc6409fcb42

SHA1
d564a82cba954713786d4c8fc24562252794e77d

SHA256
42bdb3b0ca30485035897190e1bb691d2b62b17453e0116644775e987d8c9d19

SHA512
bab351923cb185e7317be4ec097ef39dc5853e791a190bd9209cd138eea8f477bb3a317306a4ff6bb4e10ec4654558ca1b4b65e664c40405ffb456763a3cce5d

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\unpwdb.lua

Filesize
4KB

MD5
3dedf8d7a2689bda1bafb3629f0e3075

SHA1
44265ba71ec009f00885d4eb5d01386f243f70f3

SHA256
581f6394b085d8639662c43cbb71d6b1d679d136228cc05d2ed7d6f54ca9de68

SHA512
57ae40a06c27c652b94a29e0d4a39c8c60ea7dc706012be4fe1c2c3e655cc38245cf1379e0477d953fa6b00050de7944d0277d2fde811a3658ce72898e87947e

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\nselib\url.lua

Filesize
11KB

MD5
aa9c555b7a3fc2608ecd926c5e544f7a

SHA1
e6134ca639fee3130773391d8cb5ccbfef3e1f4c

SHA256
db19ccfd5800c62ccf4867c8a58d36174a19b6f4bce5be64301b5cb0a4a459a0

SHA512
030b23a97f8bd5c0819bc08f11c301798479144748bb4673cd48573db8d6db936843f16a9063639560781cc0677bbbebd7d6f83e8825ef41538f749d0f902772

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\openssl.luadoc

Filesize
5KB

MD5
5fa40639fb86dbb845445d297b6a4863

SHA1
55ccbb6dde0395b335b70cb27a43ff5fb71043cd

SHA256
cdeee8c5f6ec27c9e416f7c72cb75752b92bdfc8c65c7b87fb9faef527f8dfbf

SHA512
2722ccd59dd0adc0c1426d211b1b443d9c007811e1097c35dde5be4deffcc43d98193fc1543922caf7ac3643aa7ae3ea4ec30922e08f0fae046402636c210e39

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\p2p-conficker.nse

Filesize
21KB

MD5
1a01a05abdb2aa4be8899f630b63157b

SHA1
81f3dd64814706a16bc5eb66623e5502a015f3da

SHA256
9f6c0c966de2a7938e5a8ed6570df76d8561001a37c52df93f6309b94867d12a

SHA512
bf57ccb34ad23a801857643677b7151ce8f1606a2c471f0ba1a63648b6b3a5aa013a483fc7224e19883238d41f6c8044d3eff49905d6d4fc0293920105734030

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\packet.lua

Filesize
21KB

MD5
e87a9fc70c69635ff39c9217610f7722

SHA1
4eb651bd093c86bfc7cd878764ecfef76a3b6de1

SHA256
2f4fbf2e9dea98aac7b5eb82e71bb453a4a7ad8b3fbf9f223399e440c91098ba

SHA512
860aa7a8cc321c210f0c142e76c689aba7047fce4fc9d39a9bf02278571fbbc66ef8d525de8cce2a73c7b389c6d855dfcab90c36f649d44c55e5c8415f2ae3e2

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\pcre.luadoc

Filesize
6KB

MD5
b5eb91da2868426b2dfa329ba048b9c9

SHA1
fb8f3de0d1f890f79f504cf0d4be70bb462f8a6d

SHA256
ca5559914a5080825723dca39bdd650251fdc6980ccfa86663de32934dd157b6

SHA512
ae6037b8c624300118c6a9e94d67e52fb414ca584841be91d2be25aa30225c8cff7450d039d8720dfe61461860066b0d7d8cfe0f740cd17994974f282d9cbc59

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\pop3-brute.nse

Filesize
2KB

MD5
58982ac931f9279da4e2692c9b32cd2a

SHA1
a5b09d8f17ef083bf03ce64f6a961fcfb3903538

SHA256
3fbcafacf1c97df63640e6cdc5f8a029f7c0cc6edc3b225e7ac19d9d1a678d89

SHA512
6f484758d60cd69a715993cc13f7baa4b1aaef4461e24a415e118419cb413a95ac45954ae7fab2ba10070073503c8ac3eb58762269eaf89e5ef72a44e6d10525

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\pop3-capabilities.nse

Filesize
1KB

MD5
4e4b02a767e9857c5022a51acc450457

SHA1
fd5497e46d0369a1c438b49652d3dcb30ae6a3c1

SHA256
50bd28a7858f194b15e24d54abecaf9ffb108f6457076d4e573b30b606df4b31

SHA512
dd792e8f6943e7aff43eabb6fd7f1b0cc055b777e453122f77699f6cc96d9543f31fef848769d57bc55fe8e5dda757a242fe416cf05201975e981f17c629acff

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\realvnc-auth-bypass.nse

Filesize
1KB

MD5
ff00b76a5077007d0a8fe90a5cea4bb2

SHA1
4a2768838acd5fe1eaf61046d71858f71cb232e1

SHA256
20128aace0bfce25ff9c59af80005d2be08f274cedd910ce47a70bbc5ada903b

SHA512
7df11433e484b7048eea77aafc5e553bd93dac67dc288075b485d301e1f35e852750ce74debfd55b5947360d3dee2698925f2699aa348d58edd56a270ec29518

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\robots.txt.nse

Filesize
2KB

MD5
a6ffc72da3901bedd3fb801ac3cbd088

SHA1
d01162c8cbffa1ee3a29ccc8469ac397adc90ea7

SHA256
02db1ae6760a953ded40c38ced17adcc3ca79a0f3f32f0f993d5ee9666e7dd5b

SHA512
7731b083cc1ac9b889d52f2c030a78fbfba45c2445f73b62bb1685e8d696cbe794cd5e333e422709241c4b7fee864758de12dbcbaed68839b881c767c7aacde5

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\rpcinfo.nse

Filesize
3KB

MD5
08ff780147fe2a29da8b9a8507c93db8

SHA1
b3c74f71522241cd429b4166ac815d652404b7b2

SHA256
5dfc84abc93275c6d12a6621c0e8beb93b580cb1bbf8e7cb4dd22caaac0279c2

SHA512
a615b8c776744931295331c4eaee578949b7dcfb8e26df6b6f244bd88917feaf01ad4411a4831a3c51843425e90f7920e6984b001c18c83d4279efce4541e8b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\script.db

Filesize
4KB

MD5
3b4976e3924326bc47276681ab048cf1

SHA1
3962a75bd4610a59cb3c52e716458570f6c17c67

SHA256
6376a9cf0b2eecf53a703bf6282ac9be56aba606ea2f0dd69238cbc0307f82c0

SHA512
8923cb4a03e485747a91dcb0d603c463eb147cdf35e47f7fa2561e7b58aa2adcd152abdf649a8bf7937ab5440bce6f0066b40538c2bffaaebea9e8f86994064a

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\daytime.nse

Filesize
493B

MD5
1de3104eca30370bc1e4e8af81820d9a

SHA1
581acb6841d58a1582a5c06f0304525efde5408b

SHA256
81176e090eb8f26ea2891d5b22f717c56eba199512b29d5c1ebd86463cd5a596

SHA512
245fe76bc9f2a6c3350175e08e4652aae00829f8a391755266bd807cecc79288088756c9bf290cb1b75d530e1d90f133632f0cdeddc58dc66dafa4e6fb8d2b45

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\dns-random-txid.nse

Filesize
6KB

MD5
be6fd871f29b17c2e0e5a2a723f410b8

SHA1
6b9f317508b92d649002e3844bb62b8412405df2

SHA256
805d83d7cfa7d72c949a359e96790e31e6d0a8ebfb2bdf41945fe58c7f8e734d

SHA512
312f30929e7e7234608bb1c08e508c12975deafdec125270ae334d1599d4ee088378768ba1f52ebde55c31f5a35cecc2e85b066bddc78adc7a058bdf88b6ed73

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\pptp-version.nse

Filesize
3KB

MD5
6a942c6f6becc4b2f591aa1593eb3625

SHA1
21fbae66751b6f139fa1a25c76fece9fa3be3147

SHA256
8e9a607f00b4db37c35922910a16f156fd59b2c3e7298da2382ac00772ab3f13

SHA512
a61d79900366f7e6094a034fc5644224e24dfe06961b350c1a94d69cc87e3e581fb79da2921093a3406115998d20217e8d6076559a9d2960b55bc7f363d3fff9

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\skypev2-version.nse

Filesize
1KB

MD5
86298abc992a1ba153286da402fc2a0a

SHA1
3d7b41a220aa9badb5abf815f167a1eef95e0923

SHA256
0527ef1de0c1af51002e4692b0846eb606707d93a45880323f1d1185d2d73738

SHA512
5ad5833eedf073b7ea916a615ce34ebaa18c940680381fb3a3aff8cace819195e961ef2c34f00518b8619ef73e359074dc241267bc3cb7ce924d67ccf52cbbf5

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-brute.nse

Filesize
40KB

MD5
da26546c0ae698fc1ffab9003f987c74

SHA1
15c20eb5a7f29f52cb72490ead9f1357440f380b

SHA256
b9db9d70b8e4e7580b6929d787723f5eadca27ddd57e89117172ff151c2504c0

SHA512
0e03b4c3ff86b99a25ec7b37a96a51006d5c6ddfb291e1d4d5e6c04d7cf0c39d39b203f7fb4a17984b1a886d01636bf2f196a3dbdc18b13e17625752223ab6d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-check-vulns.nse

Filesize
14KB

MD5
873f8804a0f13bb75228207efe0e2977

SHA1
a421effa0e417dd3697ed440d8a0fb3356ddacd0

SHA256
d21bc75801e2067aadaada5906f1f5456e7140e6000c2994f87bbb8daf2d408c

SHA512
d6ddd35b585cb0161f870fb8c9d0bc4623fca19b147dcdc91cdf37f036d8a2173696e3853b7ff0cf8d2f3824d0a534f542fa799672c0c1ce288666929b46869c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-enum-domains.nse

Filesize
9KB

MD5
6fb5971a9dde2242af04c0cdda7df24e

SHA1
0c3bde4d5965ed04b4d44aa35ea4eeb377de18dc

SHA256
8abda467bdcb82a33f3a0cd3efd7b6a7c70370ed23f4b6ec3862e460f94ee7df

SHA512
b918a4e32c0e9e2867172410142fef14ef5f511c80a72eb5a71eae18da01d2e1c7f18e32c099222940f9ebafc1e623f9daa6abdc579047926e5864cc0bd0b33d

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-enum-processes.nse

Filesize
7KB

MD5
8c0d104860151dcd4589a9565f8ee300

SHA1
b13b095ddc9316d3c823c62750f32905397d1b96

SHA256
f0ebf5e8989f070fb3bd43c0c4e9523501eed53157f1967b4b4bb1b97ce1e5e1

SHA512
653bb600bb63782f358808a133b56361bdaba5f15b1f67192b957ef1ddfc49a640ffba5e5e3247d2d31bc8a57c01d14434d3758f77d4299734b5bff3679980ac

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-enum-sessions.nse

Filesize
11KB

MD5
7bae0122d716cd0ae429927e6c7430e1

SHA1
6e100c96e0cad1147aeba03098cd792603121407

SHA256
82e4b38ada8cff3bd47d5a1b9bd924f4362d8d611f0bdb482ac4541a9ef12af6

SHA512
7ec8fba1e0cb8b31b5d954890b8be44ede99b41f5e36a0205d1d2e4ea736e8e3be99a738aa464a2bbfdd62028ac8866882c2f9ee7904452065aebf27e420a506

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-enum-shares.nse

Filesize
9KB

MD5
8191c635724e082fdd80f5fb34dffb9f

SHA1
d17c887ab91c706d53856983c7473722d9a59ea5

SHA256
1b6f9c27497f47ac8d4e8a2e423648ada7993916db767bb3ab8f79e35a803f25

SHA512
c438973b785478a5ca3d568316f438b94af7b2abfeb3c3b1177654fd1c25aafcad1e9b60d65a7f5fa666603fe30d5f85a94a343b1b3cc7436d5818f344ba6203

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-enum-users.nse

Filesize
11KB

MD5
ccaf36af95dfb96ce6313f683ceaa4df

SHA1
39568aed618f7b548c531b415e6015eb6cdd91a8

SHA256
cfed9aa8fd868272e53c82d283a407bade9d8853d405a3fe7fe0b2bdc9f8eefb

SHA512
01586646199b8e9baa17a06c6dc01d4f026da2df27b3d03a554c6828ab65b6f795e36403590405492b61529275a083e30c9c3189e742ff3b994704ff5a7d277b

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-os-discovery.nse

Filesize
2KB

MD5
b2d574cfd6de8e2647ac909645a54e43

SHA1
e926d9dc0a947bb71a76f1d27c0be33440d61673

SHA256
40d7e096432f5211e7fc9b7e8dacbcb97c22f9d78f8b3cccb417014bed76877b

SHA512
5f63f18a6d486550fe007ff83ed7a99d7e9fb47a34ee5ff2433a36fec5da72d74ac3c29fd7d85af9abcb8435898d81149863e6c20095189545bfa658cac1f751

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-pwdump.nse

Filesize
17KB

MD5
61a1f750242af7d3adc424576ac38a7d

SHA1
c62708ef8706defce582268932bed9e0b5f68ee9

SHA256
8e407e5933189d7ea6db1e764dac14ba41a307a6798af4fcaac0af6977f1561c

SHA512
ef4f3be7b22567d33ab3ab3310e3380924a5cb0ab33db68e49cb8619ee5b52935a8889725533fc4a6a926b71d1beb5340abfb0ae71185e8482a55f2f9919bf65

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-security-mode.nse

Filesize
4KB

MD5
60ae5db0be7fa455944d11df3dbcfe08

SHA1
67939bff19bf9a9269248d7dccdc73afe4cb1b06

SHA256
df1e0139e331633a81f4789402450954ca871b1a13b8ff33a1a2766e278ac181

SHA512
ddf3bbeafc9953109400a2aab479c1d744f8c9c6c32b12fa0ede67fd07960d624a47f664362f3337d84dd9e596428ac2ad7c02e4a6c47318290948292a72e38a

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-server-stats.nse

Filesize
2KB

MD5
d61e0fd764efd0cb92cd0d8b113fe2fe

SHA1
6bed0c58a17566f807c27b59995f2a67d8466f67

SHA256
db90b9b691d8e1418fb36ac2f9aed0f5e5ae2c4c46aa571ef4fc0a7a8c64c7b2

SHA512
fbaf21c2f677d3ddf73f550b40f8a55664ed8276c060b302547bf200d1b5364d48b2d7e17617d332f39148ef90dd3ef28cdf9095e360b870dd256081f107a2da

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smb-system-info.nse

Filesize
13KB

MD5
be6b41f328bcc815ce49f55286a8da05

SHA1
ba4d60e395ec62f9de9ab7dfa1f4dca5257a427a

SHA256
84a1d16713c69086bf5a19837b70339fb1cd81f6b3ce0ed2d48c335864d2d1a7

SHA512
5f156daf8d48da1303e52f8fa64518b3c2066a9ffec3591e07d2e7c7295fa18fa5d4f927651a0a8e1a5577c9892d38c573196fab75206c18e14037b3ebb8d302

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smtp-commands.nse

Filesize
4KB

MD5
16a259f078897326039b9887b40902e5

SHA1
b3161b0fe234e032d530e77e8eb1a4a864877c7a

SHA256
b8d3783ce0b58cf5aa8decaec49ea0b235ea8305ddeef6ddd7b06673bdb8db84

SHA512
41385723eddf20e51b73e52f41aef68d28d49ccac6a0c2fac609e1e82b152393106004f0e18dcc3067bea4392b3779e94b2a7b5001d507e0e7e49278495f7d43

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smtp-open-relay.nse

Filesize
4KB

MD5
af4c6ca161dd584784cbf55f5139e337

SHA1
b3f241d64f9b16cd0c564c54911216bfbb14e5d7

SHA256
c56f9a79237f53efb879831fdef5ab90c0e928ff082ef2d3bf8262fecf296360

SHA512
de34fd07f103674c6083310a6766645a8de729568d8a1ff66d814494a93a80f2c322d89dc872cdb485a0df998b4cd93495e7392dcf0a830ee9fb14dcea5a960f

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\smtp-strangeport.nse

Filesize
727B

MD5
060082a32e357cd94e89cf51452d0f01

SHA1
fa0c37e96d712563dec5afaf78ba97260083f306

SHA256
7048d48a62f4b4fc827042c4791b783fe8773b97b519b993265d69833b31a7fe

SHA512
00d84deb0ac715e4082575ea05b222f9fe14606c000192e221ad2f925e3e706ee51099ef0b8b6cb1f5ff6f8d49c9c7b060c4e363ffd5c026f2a4630690e0f0b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\sniffer-detect.nse

Filesize
3KB

MD5
1f71203a9544b744029a58afe201ef53

SHA1
a617fdb4e33c5c34efe79e89c60ca9850ea3b548

SHA256
84f9b185a44b6a2361f79c4bfc7abe43a7607fb448cbec76e6e74a394656df5d

SHA512
e1becf55b87a6b2e18690fe3c55186ba12ca8420113d104a0b83da400e53040951f914ac1e935d5970bb29ce187a955476261fa7255a87b2c35712dd2fba87e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\snmp-brute.nse

Filesize
2KB

MD5
25b1481fbf14dfcfce8122a25024f954

SHA1
dc41e781053d13e645647e9a38034593827ef738

SHA256
e5f8691615601624d02662f6c5f3ab30fa0165f5061f73ad19f934160fb1157d

SHA512
bc1d81717f6cf9298c64aa1a3e0ff10769df4b2f94a33b28f677d1f1f0d03d1b5ec8eac789b36519130a7dd5927c1915d2e2784d69ac03d7bc55a5629dffd98d

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\snmp-sysdescr.nse

Filesize
2KB

MD5
f9076b6e23a75dbfde3a6b4c0911e8cc

SHA1
c464b8f8f8e09363380a8aefd7618c2c0c40d34f

SHA256
bd36eb81999cc42147274620f32eadc6a267f8d6bb709a0b224754e499b21a9e

SHA512
b34f7bc2b8abab3dd01c30687a75e7e6564d101836bb1856f8ce84fd745b6c8e2302bc502f4d3e5bf76fb975536da9a5e1224fad11c3df6c8584e31d7930ea74

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\sql-injection.nse

Filesize
6KB

MD5
59ccdb3464ebe40a5c1db1be9ecdd4e2

SHA1
835886eb3b46fcdfafe21ff31bfd688417449424

SHA256
aaf78ff999116d6a2b96208033c65e66a2f35e2ad0d4057cc8f8e1edc9263263

SHA512
452078369941b81b1aef28ed80f553d8104a67bf4e7678d751c43071b320ca5e110e73c57d571937cf5c84db82f543b25c06713148921fbcbb380807d57d4a0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\ssh-hostkey.nse

Filesize
4KB

MD5
cfcb3383f33a15d71f77cd1ac7d21d8a

SHA1
e944b8746bd3984f4eda8395776a270f35bac8d0

SHA256
a05d034444aec384f7035c57910fd2389f79aa2d9a439a58bc853508a0509133

SHA512
c2c63385663934622669853bb2e4874ebc9da4a90574699acac15cacf48883b41f64d7a8b70530ce9f396d6e2b66bc69eb7ce1c51086207186231da649593655

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\sshv1.nse

Filesize
1KB

MD5
204a18a0ad00520e83bd2605c78ee94d

SHA1
6d5b0e5d23974eb4028509d050ef1a92b3868bf6

SHA256
ed5a54b8406dc7008b53f8ec674e5c71b96c47355175ee6b451b66c6d399fa9d

SHA512
dce95925e81a499d80103832e916c9682006d582c2cb387a4adc9ce8729fe9f103800fcbe8c60c04669cfc2dd3629712d06807f1004a0c35133071e85c3006ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\sslv2.nse

Filesize
6KB

MD5
588ecbfddd4644a33c9404f8bcc9aaea

SHA1
5f35064f971157b9afb220ad31cf69dc59135518

SHA256
597f6003d2d9b307779f40da60fe9724352f297cfd1f576b35eb7832c961f349

SHA512
a26dfac42da54b8981fef9d9a41f2590807a7327fb284a9708359c137fff522bf9ea68817163a206da5b7ad06054f502665cf51f867c5d84da28d4127d012eff

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\telnet-brute.nse

Filesize
5KB

MD5
2654e8876dabbdaa643cd526ae6b66d8

SHA1
55437cd8d56d35f8edd1b5cde04be7f54b254481

SHA256
7f2c2269255ee7df80e1e78192ce10a5e5120189bc6bae5b56ca07278ff3b3c2

SHA512
44f60894d7b51247875a66269da5df017ec5e005da55908775ca6bc7b09faf02c170bc515355dcc3ad2c2527bd1f4e26707a3354a91ad4b8edcce1eda789f44e

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\upnp-info.nse

Filesize
5KB

MD5
83e67f2272fd00874e080de98a0ab431

SHA1
e6d0766d127fd14df85747038a365d9c0ac36394

SHA256
53635877fe3faeb47aa11b6cc0ec42a1e2078d5e7c73de4db72d4db9e485c589

SHA512
cfc2f0945a6b592dcad7200eb0956a53fa4979cd8227b1aa7f286d1abfb291807e1270fb073754156da9bce6a306c0ed6ff1dd300522cfab083835be350bca11

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\scripts\whois.nse

Filesize
87KB

MD5
184fbde8c1c8c7ab041a0d0dc41d9bbb

SHA1
4e7f19c1061e6b5849e57faf4b0c733c60cc213b

SHA256
794dc95a4e0ca0895efe96446945959e98743907713b1d41747048e90dee2350

SHA512
0e2e3b72c93f816043da6f58d0ae33b9d85a7bcf2de01a39d2d3614985e3c0c4bbc5bd1651f99924d11cd446128091d04f75a6b0ae1db2ed90870cc705956795

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\stdnse.lua

Filesize
7KB

MD5
b558411c1300ef57924a40a576c3887a

SHA1
3640374d475054e619e409d77ef211a3ad36a528

SHA256
f2ecafffb2558f133b0b903a36fc604df9e439ce42ecfd84dfeecb989e0cb867

SHA512
92a6bf1b008abbb8700bc091da43ac7447cc47b6856cfb14ae7edaa258e9c6fee5894d0fa160f0fa43b26eb9a5d8fd83eae2e1be56284b91279838bb84041fa1

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\strbuf.lua

Filesize
4KB

MD5
0df36aa635b72f3e484e757d69ab7f0e

SHA1
d84b591c3f479c5e4257b8d0b80cc7c1e389f91f

SHA256
bc2229defeb8ab46aeb259df1d2f7d6ec5a6a4f821e3a4f896c677e6fb17fe97

SHA512
e13a7fead45473f903a6d63d00e9e1ce9f7991f75ad401d708c61e16468df817ea50a649d64bdbece6a60a373b56f16f7310fd8437b03c29a0a5bf68307a552d

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\tab.lua

Filesize
2KB

MD5
e52ecb47ddb176719f55f4f7e1ce263a

SHA1
c1571c36efdf7560cf9eae6e1ba863ac234f94c0

SHA256
c86cc0b6879737f6f30ac5ffa1f137b1380ebe5bfaaeaab4139c8bded5791ca7

SHA512
33ae690edf7e4e101e41f0af62ad906ce99a3c21f3894a6243779201a6e13b2e434241d1f8ff4da8721791ed47bb50b5314bde9e17779d63e467adc2053d5603

Download Submit
C:\Users\Admin\AppData\Local\Temp\F834.tmp\usernames.lst

Filesize
72B

MD5
31990eb67231e20ea645dccda8f9b621

SHA1
cf23ee3f8abcc45db84f86ff8132690a37f244b7

SHA256
07c7cfa57c0550a90f6453dc7ee2a5f90c062229dfc3fc09d9df5de7f3d1d308

SHA512
425355574aa5dc9f8064d5d0716cd87453a637017183b5f42c00a3d4e917070d9fbd9defc82d4b1720633e3e9be4071447027aeb8a4ce63575b1e60323e54491

Download Submit
memory/2756-0-0x0000000000400000-0x0000000000FF5000-memory.dmp

Filesize
12.0MB

Download
memory/2756-563-0x0000000000400000-0x0000000000FF5000-memory.dmp

Filesize
12.0MB

Download
memory/2908-316-0x0000000076C40000-0x0000000076D3A000-memory.dmp

Filesize
1000KB

Download
memory/2908-315-0x0000000076B20000-0x0000000076C3F000-memory.dmp

Filesize
1.1MB

Download