Analysis

  • max time kernel
    58s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2024, 20:59

General

  • Target

    PacketTracer62_setup.exe

  • Size

    146.7MB

  • MD5

    99f7e5e6af486e79b0564b44720a6692

  • SHA1

    00cd28ba57b6a0c60cfb801a5acbd6adf8f06db7

  • SHA256

    50d63c7b25d9d04317c1bf68353d453008738187427a7b1bd3b81b8b5014928b

  • SHA512

    f6d375a2d3bc71c4b83227e96e47b0769a74ccc013be63200501372996648519ecffe0f101f6bf20413b1141d6e6b0c603183e90608083f3a406361c7034f2b6

  • SSDEEP

    3145728:YQZ2ZRvk7yioYUD80tiJFXVcuLX74FyuSiF2pWx4Sw6zr4vDqZO:YQ2S7yeUwUiDVHXMFOiFQmRfzcv

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 30 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PacketTracer62_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\PacketTracer62_setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Users\Admin\AppData\Local\Temp\is-0TCOE.tmp\PacketTracer62_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-0TCOE.tmp\PacketTracer62_setup.tmp" /SL5="$400D6,153344372,118784,C:\Users\Admin\AppData\Local\Temp\PacketTracer62_setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2724
      • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe
        "C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        PID:1576

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\LANGUAGES\default.ptl

    Filesize

    1.3MB

    MD5

    74a48cce514f18e040e149cc15f45a44

    SHA1

    7188ab2acff05d8c608979270a4248a23150fb52

    SHA256

    65789f281c3fbd002bd2de2300fdf30ab199f010519a674cb19c957adbed961f

    SHA512

    28f29d14971cfd41bb1d67694eebce4818a394fb087c942920481e69e6600c580ca72af930f5be56ef5e76c0d4f5b8c9831424f732e506e2765e386617ad70f5

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Cursors\cClosedHand.xpm

    Filesize

    1KB

    MD5

    a0d490641bcda989eecdb91fa471422c

    SHA1

    fb4289466b2b48759acdb64154a7d06aaaae8e00

    SHA256

    5c3e0dd9a28ba06f43a0dbbf7775e08192e58d8d5c4ba2e32418e83d354fbd4a

    SHA512

    4f695fe3d11644c50cecd654d3bf78000b43689af36c420f266b72a9c61d23deb9611ba7a2a1fc1738417c905baf041482286f0386435cdc7b91a059c2968ed1

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Cursors\cConnect.xpm

    Filesize

    1KB

    MD5

    71f15e2b3cd5e725d632dbbcc7f31b42

    SHA1

    983035ea97170a2b693b2e27e3024f221c52eed3

    SHA256

    82287277e62f93fab944738cf4c1dcdb9647ee3748cfdffca15a9e892ffbfb49

    SHA512

    12d57d0e2f1ef5703a8a75acc11c696f168daef7c8ce586f88981c40a70565a6a7dacef5ef2f9dc503968a8199c138614e0e57001f01a9dfb69c045dd562c15a

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Cursors\cOpenHand.xpm

    Filesize

    1KB

    MD5

    a3f82eb6b6c6d8feee4e192ac9be05f1

    SHA1

    38b1aa18e08ffbe97f730e28707197a9fc874c9f

    SHA256

    a5844ae66b90b8a97bce4652b3c70cf7a7c9280a336793b47055ad5d0540a926

    SHA512

    f31a590f0e461dbe88b177e17a06d5bcf4541c9e8aadb5ebbd66e34816b41f3bf18e3e38d24db3bbfffca4cbee8664824271de49fbe2764705414dd3e565d489

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Cursors\cTargetX.xpm

    Filesize

    1KB

    MD5

    060fd7eddee3e3fa68b9042503a386ec

    SHA1

    f8530802b833cf949a9270cd4f284991246b8968

    SHA256

    f83654d4a7244a9abb8c86031a99b1812916b898486ebc7653fee3aa459832ed

    SHA512

    6f1c9f2ea4efa69ca6e87d6aa492d42019ede69dbcb9285fc6d37301643d841a728fae46a8a3de0b5bdb615e14e593199c10005732207d5563142f06c8766ce2

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\Devices\is-D82L9.tmp

    Filesize

    3KB

    MD5

    450aa86479c3c8769e96a7d08d5bdcff

    SHA1

    82217d384cf5e2497ac0e9102d8e594bc1c971e8

    SHA256

    a92e1e4b9127d3daa3540b86605a129b3d720132306f26a43cf38383b9a53b29

    SHA512

    40db581c2833f85bc4a5d240796e1e4b21f448755bbd1783b2bd8a4410b4f4a12970caf5d0963d69448086f168b9c4d87a26b33aea29a64a6768d7016cbf9900

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\Devices\is-HHSH7.tmp

    Filesize

    2KB

    MD5

    64a0f2731977dd389d611722ecca2f89

    SHA1

    1a649d2638c99a53658f760c270c1172397cebe5

    SHA256

    d963174e3b321cd55af9ff981be7fec7f805c7e455e1fd3304df2750871798cc

    SHA512

    77f660bcbc24d9eb1ae20dd1b9c1e6b362748dbbdfe3dbd8928cb5c20576d0dc8d2346abc4903b64ddec80e9e801bd4c8b0e09ceabf2cfeac756b33a0dd4fd10

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-1G8F6.tmp

    Filesize

    21KB

    MD5

    4c6e54d7d0f3f20c02a101d14665461b

    SHA1

    230feb1241c80e78aae2fae6e3ad737f3b4c07e6

    SHA256

    c0a01f450c566277e4aa39d2c60abebadec99592f864f54400b1c7383880faa3

    SHA512

    cba6a8f7de68995c002411062ef3b20de05565cc517c60770c6792b9dfe3a08fea2e58c1ceb9a381cef24e5a4ffb3aa52b1dac34ca78523d61f3c7bff331b0b4

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-39D4B.tmp

    Filesize

    23KB

    MD5

    e58a70d4ffcc7fd90b8f3ae82dde36d3

    SHA1

    f3ab610cc33e8c1650e79c7d5156e95d94664fa8

    SHA256

    5aa771e9b6a82051b789c9bfc36ad01f844a0594d907b054bbbae24a05100506

    SHA512

    687e4bc0cf34f740fc908725365b975e10d4fdf106e8933920e5e70ce4a2a7bc54af10bbbc8f28d4b218ad2630c4a2c038cac7e53479061394a5930a6d2a868b

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-6JPS6.tmp

    Filesize

    21KB

    MD5

    6068c1d8ea56021aa01e279c24e0ff7a

    SHA1

    7d1c0ef007f8730b2686ca54962c8a741c124c25

    SHA256

    7d5a475967b14cd1c8a3cda10009bda7b4ba2842e9612c4330727133a5182d33

    SHA512

    6b070b41c000f204023369401d82a8422384447848a26b68355005759b1ec84c6b77742af91ffe313d6354035e5cb924d42b814f3f0b2a46dd5bca6321b77426

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-8TLVA.tmp

    Filesize

    22KB

    MD5

    a3b0312322b4226b3fd338ecc7e63e97

    SHA1

    ff3aa709a9e9af8d0972707b12b6f46c1030b90a

    SHA256

    efb4be3b9da6bf3e3c000099ba8569c8cf990a584139c3f95472fe91152601f6

    SHA512

    215de3ff9a81ea8d628b95c2421c7aa8797a8681d83afbb2fbb5be297bcddca0865b3161d84d452e6e090f7a69a1a6725e90618ddf52186c57c9d95845637449

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-BOU2B.tmp

    Filesize

    22KB

    MD5

    d2c949d8c042f6c9e70a48379a32a6d9

    SHA1

    50e6b826c4b1e7cf9f1a7860dc6ce6f20ced2fc0

    SHA256

    1c9826994ea2d4e6e70ff846666561ebaf338d6346af883ecda2b9f40454d89a

    SHA512

    2d9054cbecacb00122a8069adfbe5e140d37b18fc7462df7f4a7dfd1157e9f57faa45fce5b8460f8dcf448b3eb88522630db825beb8ddb15d70e8a4b8a17758a

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-FN42A.tmp

    Filesize

    21KB

    MD5

    701ae91c48e6a38f909df4949a867730

    SHA1

    97330216566b02a8df7bc8494388b16ae095a0d7

    SHA256

    39ac84fab5a4dbf9120bdfa0d6d9e64d1a0d99e38051038116233e01b5321062

    SHA512

    0459117422009e76e2598fc7769dfa8f47607cebac701567c20223910ff1c3db41f919ec7dae53279cb08649740d2901b1434fa385e6ab80f060ae18eb01e595

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\PhysicalView\is-MVFPJ.tmp

    Filesize

    22KB

    MD5

    a0ce3eb41a0b69f09a309a32c10c9478

    SHA1

    b7e1b25f7ae8adcc9418265d8d052e874920f162

    SHA256

    b9639d53a4c79ede368fc9608078f5259dabae901fde4592b5dae9eedc878550

    SHA512

    fb404a6cb1a6eaab51aa78a42390a863d32d19ba715109538de3d3a88dfa27098c0e70b769f68bdc310e7506f607115930b11d1bfc67ad632162a7f2eb0bb98b

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Simulation\PDUGraphics\Status\aPDUUnexpected\is-3QFKK.tmp

    Filesize

    321B

    MD5

    8875b5c8ba4075a342c5249772ed4275

    SHA1

    c8c060a6bd8272400ad09891dabc9827c064c14c

    SHA256

    ed5d366a3a2677cec87ddeaa541fe886353b56ac8b0748a4459137a790672997

    SHA512

    1a938727acd0b3834c85b12860010229ec5fb2433539aa96f625f7a5e2480e4f1fb89c5fb977bf0a1e07f8a938e4396d631675217dfc178a2053746a3c99a1bf

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBCopy.png

    Filesize

    638B

    MD5

    93f75cdcfc3937aadc7d796b804fa299

    SHA1

    14792d1ccafb6a7ee0b87b8248ab1c77b4c28a1f

    SHA256

    12800f21cde1058232c912ffb7a0de1376583a6d87d9ef623f480975af120d4e

    SHA512

    878c95f08827500e175af67b0a1ded4f7034d7609c4eb56ebc45462ccf9a9a870f46d8006356c64e9b32674a9c7c59d2594629de9993ce99ea7591ce9dd1162d

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBCustomDevice.png

    Filesize

    1KB

    MD5

    965b4e6245b68ce616b0e62fc1cdc391

    SHA1

    a95306ed5e27cc566e8d8acaa9b6d63ba0a9305f

    SHA256

    7fb6fa71596138d1750278d5d35974131d74b183b93652007eebd4591e84e551

    SHA512

    28a202d31f02f1721ebe891bcb092efdfabca839c045cb49497533a61663ee559c9dd48bc604f86a477978a3e9fb4239179ae523750492198eaa9e690814b4e6

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBHelp.png

    Filesize

    1KB

    MD5

    20d8c45ccd0088e4c8b626cbeb1f114b

    SHA1

    4b9a3e845dffc540ed2e1665f6478a8baaebd267

    SHA256

    53ce03181337026da29b20d0e0134f1c5abd5e9b0093c222d130c63354b42857

    SHA512

    727a2f2abce2e60c1a0335823fa79d02ad8da20c723813c6bc7c38b1ebdb4ea79c506bde7176e1ee3d2edfbf1c4ecb1d0c09236362db345846a352dc25a2b7eb

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBNew.png

    Filesize

    1KB

    MD5

    7958b93ec194b5539aa2b3bf99d0d76a

    SHA1

    5086cc49b25e7b958c8d06f13c13e3999d99c970

    SHA256

    2dfa752e934b999794d06fa95a0284d5b8ce05bc6003465df194b7476621bcb7

    SHA512

    77818c017ebb8a365e3eb550cb64a1e2299252ae7ed4d69760c4124b2942c7f7d0b3f3ee61bc4dec4f9d2fa39bad903693384b454d08a3784e4352ae494220b6

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBOpen.png

    Filesize

    1KB

    MD5

    c95098d10d8abc08debdd4672a844daf

    SHA1

    fb0ae1500f52bf11170db6c8f9fe88cec425383e

    SHA256

    9072e0773533443280f866f1fbabc09e6ca02c36818fe8d387961dae6dda0cdb

    SHA512

    fec9a30ce2c70e23ac794b7c4146d576a1a67ddcff23a974be81bab2777472f7dcd29e0effccb2ec2009cdb1be95846d49d9b078cd2279cde24f3d6e8ed308d0

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBPalette.png

    Filesize

    1KB

    MD5

    c565a1c7979e8eb275a9a02a20df019f

    SHA1

    3c4649c984d9bd05e2f06e7d2f5826c97fe70bb7

    SHA256

    be3efee1f49a33aef3a3898af06616692c3cc08af91da94af561cb8ec4569b88

    SHA512

    a3db7f4d99bc05ce431bb11549b990232125910591ee3bbdfa7889c90efcd6a6bafc260c19db8b69f8805ca72e240466f2acf6a702e055de354c08ee2a1c98f1

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBPaste.png

    Filesize

    892B

    MD5

    027326f8d3d040c5751124b662541194

    SHA1

    dae6ecd1049931e46f2dc196f8b1d3d5624d327d

    SHA256

    6c443a4aee9e5a4721c11219b316e1bcfb6db6a8203fc52460afa9687ea1d795

    SHA512

    0640d2314f774a43cc6cded7caa4e50fdb832abd070fe16697d0bc2d8da480910bb77928ebf699969f7b54ebed85d0c42d54c8629c80635f359f0b4b587617d3

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBPrint.png

    Filesize

    1KB

    MD5

    528f4bd9094c58049b0143bc4149efe5

    SHA1

    84cf1beba5e5639e781038fa88b420ded86fd418

    SHA256

    ecf2f99c2c9e9d6664e1ff96b196fdb1584e17d810697e79618186eba90be439

    SHA512

    722e7f62f0ce3758381bf2ce5088a91930fb5b9f9100c71f705538afa84d25509d38951e7d314358fbd81e15205f3d4218427e6317e1c685752f2d9c724304e5

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBRedo.png

    Filesize

    1KB

    MD5

    008e238a574e790cfdcbf5d25420f84d

    SHA1

    c8b691bfa0a7a14c8e84c5511fea47dd5a405d88

    SHA256

    2d3ffe3f7492bd832e94f560500043d4636fd31a8f8843925492aaa9c213ebaa

    SHA512

    a773b02b52aabca7dbfa5088eb55ea206ee3ac9a1f2d41faf8806681157e5d349d47161a2050d1adb110c621acfa59bf450eab69548e738d72654e45168ed7a4

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBSave.png

    Filesize

    948B

    MD5

    230073e179d793e52e69ffc1d8d33660

    SHA1

    260434b03b45e4270c84ac02010285788aac06ea

    SHA256

    3f81734cf795be638c0cf21c66cd71caf33a3ea16a77234e75cbfb5f6b294a90

    SHA512

    d82e98d89c066d215813436e2e57eabb308f113103ea867848a9e698e09e0c3a6b06a51905cf7efe0c5cee2a3630f59f837d741c2eb758fe56d560634ceb810d

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBUndo.png

    Filesize

    1KB

    MD5

    763a54d995ec22c8ca28e69f8b7c5495

    SHA1

    cd5e79d1aeeabec4151d06c6f2386ceab6d33b9a

    SHA256

    c38ba316c010d49f8e8f2724624d1e7b0e29d2cd25898341a205d5d14ab75866

    SHA512

    9aa748af94713c5735b7fc27ae11c1cd431b615034fb6aeaec0f2a0c2e7922fa022e0ee0c8292542fb69cd7c4d2a8192f1c7f8a0bb50c00f295488ccdf659062

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBZoomIn.png

    Filesize

    1KB

    MD5

    b60bc5d4c73246fb5977c4f4ce42d33c

    SHA1

    84d34f74f211b9f557ec3ffb0210c5e0c2a4129e

    SHA256

    2ca786ce6e99f67d921f288386e8ed99d3760059c9ec32099774408abf2eb42a

    SHA512

    5ba400e69f7c7b2e3dd14a0c5d28ac313ce38043e987b2d38bd94895989a84c76a25f35081d400e605ae9374b1b75165e7d342009e18bdef8a62d8e325712de5

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBZoomOut.png

    Filesize

    1KB

    MD5

    6b0aa70556856480fe4eeba0bd2f4c69

    SHA1

    d2baf76c9ce38693493720da22da63867b5bb740

    SHA256

    2b47b33a8763b37355df76d27fbe329d021d67a323742b6f24a6ad56b6534ed5

    SHA512

    25544869fe2af4410e4458302b09ed33ddb95a5e87ef2294201b9237525a6e8b150aab2a4c5242a079dd36c37208d339a2ee437e3244ee22370a37f8c4ba6c99

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\Toolbar\iTBZoomReset.png

    Filesize

    1KB

    MD5

    d1e79a276a02ba0130f5ad99f8029406

    SHA1

    26c4fa407200df77aecc4529dc5fedb56be57665

    SHA256

    7c965cab47a49d0ed9af6cb77d4486ab7198b64e1131eb4256f73a7e16e5f0da

    SHA512

    6591b38a0d7868ae428badb91a4c0ffeeccf25fab66551624a2e33a8109f221d89e992d7b52242ad26164a08bdd6c8a4409f02f90cbe8c9ef863916b337731c4

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\art\app_student.png

    Filesize

    4KB

    MD5

    2252bad5dd0ac1ea389edda080987a93

    SHA1

    0172212c2e7c75dbf452fa0c60f60854b4620537

    SHA256

    498b5ead2011b941b5e289970db10aca5de827f12d451dbc1540051aa72fb0e3

    SHA512

    bcd710b45dbfe621eef8f0b03eac9b5f0a6ab896b8fa0a7dcf28ff5923f4e88614d858c55cc6679016b839e070556d9c16e61a6fc904d9b1f3237d66876e3a27

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PT.conf

    Filesize

    3KB

    MD5

    8a9f50539b03e006ba516b70c516a743

    SHA1

    c1c261baba56defb4648368d69970ca22eec4705

    SHA256

    d10608daaa41d1a6efaca000de0eb3f2b1c3c80670844405140466807874e481

    SHA512

    9512fedea1c99226e3200f4fa38e8e1af0973522f8620cb99d32cf0e66118776cf2dbdb25973398c1ae07e4b46c2f6eb972d8dcff6f5700a61a0e5b53a1ff66e

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtScript4.dll

    Filesize

    1.2MB

    MD5

    eef82de1fe0061459f8264d9895b1f9c

    SHA1

    948a3767ecf7c378bcdf9b9085f4853c816df573

    SHA256

    9017d492f5018f029099c0b447dc9be46ea6ef55e0682c961239e354b8f9f686

    SHA512

    4683bc99fe1a1dc982997633c66c4e6500e95c578a4641c0f4a4a6f23eaa792410d0388d6731ec6f7771db8ba0089ea564028ccfed91202b9cd9b89e46db1f1a

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\ClearTerminalAgent\Clear Terminal Agent.pts

    Filesize

    4KB

    MD5

    f537651f5deb62a2c145b395c474f1b8

    SHA1

    5385bde47ba815f86bc2bb0c9945c86e40767b74

    SHA256

    1d2ca94b5df1fe08ebd402a5cdd5f37f6a66e62556f90be172b001dab8c7dc76

    SHA512

    4c80073111a7a2f1b1809d3be7f8330f2d19a60b03c44113dbbd311a6ff462ebdedcdd73bf095769a278d7e7f02298d00be27b4f5e8a28000b3508f2693e94ba

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\LanMultiuserAgent\LanMultiuserAgent.pts

    Filesize

    145KB

    MD5

    1714be1fde95eb2d34e70557b8679052

    SHA1

    bcc748587e865c6001f211849a9e4f17e81dd582

    SHA256

    71741ff01d6db486ad88cd4e27dc8f82282e13508c5aba2eb813df842c365c2d

    SHA512

    685f221c3ae123170006cf529d3e3a717db3f30120cc8a8d4da88d3fd059d5f8380d7e8f7eb3421d534563f18c34b50fe2365497d38849bf419ff2f7c18cf6a9

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\PcSoftware\PcSoftware.pts

    Filesize

    5KB

    MD5

    5440014de3a843e2ee7f05a52e787da8

    SHA1

    af64699d85d08ae27faac493ca8e3715226fb01c

    SHA256

    09109307c00d10f6c015913b932beac6d502b9a8db81aaafd4ba45487d512ebf

    SHA512

    6fdf760a14b38a755af2cf6c402fcf7807da12028f1817226ce749b1fc80f22b9918f7b7792467c250b26509ba5d6c049d6ff0b0c8683260ddec03e6479dcb36

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\WanMultiuserAgent\WanMultiuserAgent.pts

    Filesize

    144KB

    MD5

    32c08dc2b61f9965376fe01863f72321

    SHA1

    3e94acd0d07142125b536063d30963df68cd1c79

    SHA256

    400385dfe7890b384e5bd637f8c593a5c2e2b11175805959f386f636add30fd0

    SHA512

    85e23d81c4ed1dc174609b0b9870d2f2f13b64e1a3d3b689d4c3814bbbb8794bf453380bea7edd4a020ed7c38814e25275b9ea4d3ed74b1a82983777843f73fe

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\ptaplayer\ptaplayer.pta

    Filesize

    1KB

    MD5

    74d810919b25921e24c03cb6d221204a

    SHA1

    1e71a7e2642137dceee0d94f306f5fc5280fac05

    SHA256

    116bf43351e809558ada7fb51aa94a73ad41d5c04ce76119171daf6c279b789b

    SHA512

    dfd6b1aba966ea136036a98198d75d9f1b8522124d30c8f4e5f5ee5bf32180293a62d0a91f17f714bfe65f376abc080b274279335d13dea3fb664447c94b62f2

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\extensions\upnp\upnp.pta

    Filesize

    1KB

    MD5

    e69f6dadbae2fded6100961dd9888c35

    SHA1

    95ac29099e5ff97e62195e2eb76578a60335d182

    SHA256

    d1826186e51724f4255bba3840c28e0660b8917afc0e2f9a35f0982f80518fd5

    SHA512

    a6ee0e4d5f33c6115d54f054ff6347d4ee518294053c11102a7f38a83c24f25d27c119018d202f298d254292c17fd8e6627e837385c2d09d09eeb2456ccd78ff

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\help\default\images\is-07QUE.tmp

    Filesize

    102KB

    MD5

    ecf444c32c6067848daf6fcd161c5dad

    SHA1

    bada5728a0143acee3a47e87b4c5a47e37059be3

    SHA256

    bd79ca2f5fcd97c0be491a58c53b26ca9a0193a813629d7d3ae6f3980c4272c8

    SHA512

    89f209c25174bbfa139bb00c32b6f36b92ca717fe5aa54b760878b1a6d98da954c9ca1446da74ce8e1e2a4ee699a40da3bfadea2b9036d1c037ba387268bc544

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\help\default\images\is-EJAGO.tmp

    Filesize

    64KB

    MD5

    64ea16ee1bbb43dbb5b87cb4afe87a22

    SHA1

    f3a1e2734710f0632ad3b544e7c04a5e2f2422aa

    SHA256

    01aa2797d196638c2694c62b7e18dfc9edb70b45bfced962323b11df110f713b

    SHA512

    021f3fc8d27e6777a2bc5c08e02cf0048d7e90feb17504d68404bb24013e3b5911a0e711144a5751efaf7eaab831db152e242a6743d535b3a81484594dc126f6

  • C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\help\default\images\is-R2AUE.tmp

    Filesize

    61KB

    MD5

    177e069234f8e7ee71561a772f7924d1

    SHA1

    74df616f894a49fe81d0218c46e4a0ee07f8c777

    SHA256

    9ff136d84dc4785ce9e75e12385b4da31feb195cbbfc8ea4f484aed4a43aa980

    SHA512

    296c6484bdf7c902009261dca9fd93279e6e9b2619cbc68eec046b12621b11cfb61be2b455ab1dba6de8f6f5b017a244b4599ad66c9314b59adf9ea12a95565b

  • C:\Users\Admin\AppData\Local\Temp\is-0TCOE.tmp\PacketTracer62_setup.tmp

    Filesize

    1.1MB

    MD5

    63b15124be653dbe589c7981da9d397c

    SHA1

    af8874bdf2ad726f5420e8132c10becc2bbcd93c

    SHA256

    61674b90891ca099d5fee62bf063a948a80863530ab6a31e7f9e06f0e5bc7599

    SHA512

    339b284b5dd7386dcfa86c8fdcf239a0e97cc168229ea9a66fc0c6b26771401fa7f27c2c6a435a836a43ea9c7e634a3e47ec77e0d27985794bbb4416dfc97ac8

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe

    Filesize

    46.1MB

    MD5

    e9ab0b7683c36639ae94c7d3fb40fc29

    SHA1

    465014c3e86c76374d7767c38769cf9f0adb6255

    SHA256

    b5548f2b436133662f4b651446128ef1ebe76685237061086f30a455ae2db880

    SHA512

    f1460c3c124e80301b18ef5d37aeb223d83fa1edc9c96e1b23d87471c6146b2600c8f98b19dab41782b55cd27f8b531b28dae3233cea4bb0db61d17706b213e9

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtCore4.dll

    Filesize

    2.4MB

    MD5

    29b2d5b98731f143597e9295c79e9a01

    SHA1

    366b3ce47b8ac34b558907340cd928b7fed8aa40

    SHA256

    7ffbca94d6da62285adfb93eaa18175896fa0f9b207d319fbca4a3ddada71a5c

    SHA512

    29fb7c2e0b0fa05fe02f9fc19dcd38e9bc8726d236e7769c607011210c4b97faff1fb25f06fc3c40436b0235682d07e14c01504583d241998ad2c4a6d90d1bab

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtGui4.dll

    Filesize

    8.0MB

    MD5

    3a671249237f8160fba030d88ce2780f

    SHA1

    c2f127a88ca643018a0c04adbbf64d9855ff56b3

    SHA256

    9b73080745c158e0232df82365d1af87d16c94c1ee41ff4a4049146179047c7a

    SHA512

    4914d8b14e4d7c12747457efb7da97f4a59b12f81cb1769e3d0de6b84a8faf4fef0260f32288d011a83ca9d5e3e25c1fd897d3e91038f3bcd4cb0b8456db243b

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtNetwork4.dll

    Filesize

    994KB

    MD5

    39e52f1b54b6d030d624bee2a5f2348d

    SHA1

    ab58e1d31f6300df97abf0f2078175e52b5d32a7

    SHA256

    78c3143b537c6ebfaf6ab70f66c6b80c2562eb899d22e2b2612fa7671d858c96

    SHA512

    020eb9c2807f03c2271cea06168705b5c1a7e1b6908c5e3d329d6f4de114124509683df0f20891f5793ad68e398ffc6056df4ab8aa56043b9e73a93960e15b74

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtScriptTools4.dll

    Filesize

    567KB

    MD5

    a62c5d4624a33b733ee6912c45e532f4

    SHA1

    17db4dd3f302941b6274637429e98df88870e7b7

    SHA256

    103707347d224d6247a4253713b248d5fd9112e714935cd842d06bbf853d828a

    SHA512

    1a7092da4f3bcdf824fd18614373429082978839369576c775b8f70a3440f9a8d3a4c586a6a0589d1793cb7f7ecb1740e0377a132e3577187af220bfcaa70fe9

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtWebKit4.dll

    Filesize

    12.2MB

    MD5

    54a39cdb34eba5f8ae29a94be6f61302

    SHA1

    e2282250e82987f87fddcc7363ae001ea6541144

    SHA256

    45a900773b0d72a0bbb0ac3f386ac5b856b3486be4b666abcf300a900cc82063

    SHA512

    7c95b2f11ed1fe2fb2f2d4d6bd49ea2adba300e6e99f6c54226a0d214b8bec216d066da0e2d4448d247d26d377c5c87678e90269f4598f281ae32b94963fa4fa

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\QtXml4.dll

    Filesize

    333KB

    MD5

    3af094895ffc8a5905a29e6f4081c87f

    SHA1

    0688e1230ee85e414193dbaec24f5ce917e3e3ae

    SHA256

    661ecd883fb7590fd0690d244f62a50155c404452f8ebd943888969c413bdbe6

    SHA512

    f1bc8f27eb2e2b724f1b5d719b0bfa056dcf7700c9f2e8cc8b2609559afdc23623e3499084bd095da25b9ec92b3d344c90736752b62136fa3dd3998b7589d847

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\dbghelp.dll

    Filesize

    625KB

    MD5

    6479a184873f7ca797ff0375d711e9a6

    SHA1

    34dfc72feee446e658a2c168632d216ed90589ca

    SHA256

    8f20f178991501542d542c8d613b036a15cd55370697aa82c0f7800ff4fbcc4e

    SHA512

    03829605886e2c2d2ec4e1b0923e9b84d3f77cf0082dcab902deda9926e6d5d48d8e09adf27ea72e146583f6547a24a98662468d8029740b9ae3032e29ab6d3e

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\imageformats\qgif4.dll

    Filesize

    26KB

    MD5

    7827a1b1048f5834912608a1f59ab9ec

    SHA1

    178401347bc396f2d2b65c0e8b09e1ce8e70eab5

    SHA256

    d9687b10ab70f6492f91b3f7a55bf9c08a717aeed63fe0bc0a848688adec36da

    SHA512

    043f69262b0d7b0a8fcda650366a6e2de5960aeb27593f5b005d62e51c14583af54d36c67c91b5e57cb7e9f660f5cece219fefabdcc7607a2fa959336d47a6cc

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\imageformats\qjpeg4.dll

    Filesize

    192KB

    MD5

    ba674b5c78df5a386ce658f49ac609b9

    SHA1

    6e2bb98c79fe1ec06ba87f79ad06c0b94ec39839

    SHA256

    e6de4945835788bc930f8ce535035f850a0d9c39116e7edf812a94c0ccaad380

    SHA512

    231a50fd02f31e3d183fc1fe8552952e62207cc4b3f4e634663861586129239e758b088adf87d7c07b9542e2b97145b7e56f61b4e5191877286058ac168102bf

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\libeay32.dll

    Filesize

    1.1MB

    MD5

    8b043541fbb07831c731566dbc1175a9

    SHA1

    3b8dcb6fdc48dbfdec789bf8a7182487181d3aed

    SHA256

    08409174c3fff9eb2d06f37802c7ad71c3b1c06a6faf917af9ab83a1bb7624d7

    SHA512

    e1f342dd39e2c7098dbade5dfe8fac1a2c2d030710a220792699caa2f4900d34e50daf9384414f3de8b5210cb88bba07cdd44a9d0407d813c14ca395f3781962

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\linguist.exe

    Filesize

    1.5MB

    MD5

    5cf78176b82dab43fdd9207fd912dfd8

    SHA1

    34464c44b2e13e75f4c08f8a73a249c79ed7ac5d

    SHA256

    b9bbcda5ec5331620106effc46b08700e142e08494187fede57ad32b2101dd1d

    SHA512

    03b2419a0b296038eb61603b779f4dedb9ce7b3eb51e60c66b2fc3d51126fc61bd7afc8a8c35198d38b8b3534d49b03a7b25559f0a138df7b057cc9f296a459d

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\ssleay32.dll

    Filesize

    268KB

    MD5

    39068a91d3cfa868182ad8c4fe8ce12c

    SHA1

    c1bc62eae8c597c13ad458551414352ea03af217

    SHA256

    0269ada04b83db3f2a5425be2c1b0cf32be682ea9af0ee915f2d46e8059c4b4e

    SHA512

    eb406486a54389f2339c5209e830ca7488657146af1d9da3d532d238efb45c2e4f8b830c2bdde1d9e6c754086c572f99ad1ec79af1e70ac85d664935fac6223e

  • \Program Files (x86)\Cisco Packet Tracer 6.2sv\unins000.exe

    Filesize

    1.1MB

    MD5

    dd44b6421c113809e89c1452b981982f

    SHA1

    30c0537d508ae77b69c14f447f92c3be6d62ba21

    SHA256

    da0d538aa4a67aa3527f25ca8b2224f23fec5ae21392681e710cbacb9b783bc1

    SHA512

    16aa0aba5b57413dd82aeb07091b64f06ba57cb2f000c2ff3fb4b3a3f30cd7535edbf299a49f4bcebbae9357597f15ac64db643ba280ee8575af52024cef813e

  • \Users\Admin\AppData\Local\Temp\is-R76F0.tmp\_isetup\_shfoldr.dll

    Filesize

    22KB

    MD5

    92dc6ef532fbb4a5c3201469a5b5eb63

    SHA1

    3e89ff837147c16b4e41c30d6c796374e0b8e62c

    SHA256

    9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

    SHA512

    9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

  • memory/1576-3449-0x0000000005310000-0x0000000005357000-memory.dmp

    Filesize

    284KB

  • memory/2128-15-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

  • memory/2128-2-0x0000000000401000-0x0000000000412000-memory.dmp

    Filesize

    68KB

  • memory/2128-3442-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

  • memory/2128-0-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

  • memory/2724-3410-0x0000000000400000-0x000000000052B000-memory.dmp

    Filesize

    1.2MB

  • memory/2724-3434-0x0000000000400000-0x000000000052B000-memory.dmp

    Filesize

    1.2MB

  • memory/2724-2185-0x0000000000400000-0x000000000052B000-memory.dmp

    Filesize

    1.2MB

  • memory/2724-17-0x0000000000400000-0x000000000052B000-memory.dmp

    Filesize

    1.2MB

  • memory/2724-8-0x0000000000400000-0x000000000052B000-memory.dmp

    Filesize

    1.2MB