Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/11/2024, 20:36

General

  • Target
    f8861968e6cf59cdda7e73ba7a69390d6bb42201e1f7f3d0074c019111f7bdfb.exe
  • Size 771KB
  • Sample241104-zdvstszjam
  • SHA256 f8861968e6cf59cdda7e73ba7a69390d6bb42201e1f7f3d0074c019111f7bdfb
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file
  • Drops file in Drivers directory 9 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
  • Modifies Windows Firewall 2 TTPs 3 IoCs
  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 21 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 5 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Blocklisted process makes network request 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 25 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 11 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 12 IoCs
  • Launches sc.exe 1 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 9 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 6 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 22 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f8861968e6cf59cdda7e73ba7a69390d6bb42201e1f7f3d0074c019111f7bdfb.exe
    "C:\Users\Admin\AppData\Local\Temp\f8861968e6cf59cdda7e73ba7a69390d6bb42201e1f7f3d0074c019111f7bdfb.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdate.exe
      "C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdate.exe" /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&experiments=buildid%3Dmain%7CThu%2C%2031%20Dec%202099%2023%3A59%3A59%20GMT&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkxRd01qSTBOakEzTmpjeU56UTNOek16TUxLd01ETXdNRFUwTmpNMk1UTzBOREcxTURDckJRQ254QTJ6OjpEQkRFQUxDT0RFOjpocHNhMjAyMUBNRVRBIn0"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2284
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:3212
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        • Modifies registry class
        PID:4456
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDEuMTI4OCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0Q4OTY4RkYyLUUwQjEtNEExMy1BM0UyLUM5RjI5OTVGM0JDNn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy44MTcuMSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjwvYXBwPjwvcmVxdWVzdD4
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1344
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /handoff "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&experiments=buildid%3Dmain%7CThu%2C%2031%20Dec%202099%2023%3A59%3A59%20GMT&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkxRd01qSTBOakEzTmpjeU56UTNOek16TUxLd01ETXdNRFUwTmpNMk1UTzBOREcxTURDckJRQ254QTJ6OjpEQkRFQUxDT0RFOjpocHNhMjAyMUBNRVRBIn0&nolaunch=0" /installsource taggedmi /sessionid "{9F91183F-DDF6-4797-A3C7-C6E60571D64A}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:5016
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Blocklisted process makes network request
    • Enumerates connected drives
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2128
  • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
    "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    PID:4920
    • C:\Program Files (x86)\Dropbox\Update\Install\{AE71B7E6-1C7B-4A6A-A288-FB3CF62465F2}\DropboxClient_211.4.6008.x64.exe
      "C:\Program Files (x86)\Dropbox\Update\Install\{AE71B7E6-1C7B-4A6A-A288-FB3CF62465F2}\DropboxClient_211.4.6008.x64.exe" /S /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkxRd01qSTBOakEzTmpjeU56UTNOek16TUxLd01ETXdNRFUwTmpNMk1UTzBOREcxTURDckJRQ254QTJ6OjpEQkRFQUxDT0RFOjpocHNhMjAyMUBNRVRBIiwib21haGEtaW5zdGFsbGVyLWlkIjoie0JBNkEzRTMwLTdGQkItNDlBNC05QUI4LUM5ODJFQjRDMEJCM30iLCJyZXF1ZXN0X3NlcXVlbmNlIjowfQ /InstallType:MACHINE
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1220
      • C:\Program Files (x86)\Dropbox\Client_211.4.6008\Dropbox.exe
        "C:\Program Files (x86)\Dropbox\Client\..\Client_211.4.6008\Dropbox.exe" /install /InstallType:MACHINE /InstallDir:"C:\Program Files (x86)\Dropbox\Client" /KillEveryone:YES /IsAutoUpdate:
        3⤵
        • Drops file in Drivers directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Adds Run key to start application
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1700
        • C:\Windows\system32\netsh.exe
          C:\Windows\system32\netsh.exe advfirewall firewall delete rule name=Dropbox
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          PID:2028
        • C:\Windows\system32\netsh.exe
          C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=tcp localport=17500-17510
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          PID:1196
        • C:\Windows\system32\netsh.exe
          C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=udp localport=17500
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          PID:1996
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.77.0.dll"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:628
          • C:\Windows\SysWOW64\regsvr32.exe
            /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.77.0.dll"
            5⤵
            • Modifies system executable filetype association
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            PID:4600
        • C:\Windows\SysWOW64\regsvr32.exe
          C:\Windows\SysWOW64\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.77.0.dll"
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4356
          • C:\Windows\system32\regsvr32.exe
            /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.77.0.dll"
            5⤵
            • Modifies system executable filetype association
            • Modifies registry class
            PID:1652
        • C:\Windows\system32\regsvr32.exe
          C:\Windows\system32\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxOfficeAddin.14.dll"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:2860
          • C:\Windows\SysWOW64\regsvr32.exe
            /S "C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxOfficeAddin.14.dll"
            5⤵
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            PID:3488
        • C:\Windows\SysWOW64\regsvr32.exe
          C:\Windows\SysWOW64\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxOfficeAddin64.14.dll"
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1588
          • C:\Windows\system32\regsvr32.exe
            /S "C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxOfficeAddin64.14.dll"
            5⤵
            • Modifies registry class
            PID:2964
        • C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxUpdateClient.exe
          "C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxUpdateClient.exe" --install-elevation-service --appid={CC46080E-4C33-4981-859A-BBA2F780F31E} --enable-logging --vmodule=*/dropbox/update_client/*=2
          4⤵
          • Executes dropped EXE
          • Modifies registry class
          PID:4740
        • C:\Windows\system32\runonce.exe
          "C:\Windows\system32\runonce.exe" -r
          4⤵
          • Checks processor information in registry
          • Suspicious use of WriteProcessMemory
          PID:4924
          • C:\Windows\System32\grpconv.exe
            "C:\Windows\System32\grpconv.exe" -o
            5⤵
              PID:3664
          • C:\Windows\System32\sc.exe
            C:\Windows\System32\sc.exe failure DbxSvc reset= 3600 actions= restart/5000/restart/30000//
            4⤵
            • Launches sc.exe
            PID:5108
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            C:\Windows\System32\WindowsPowerShell\v1.0\powershell "Get-AppxPackage C27EB4BA.DropboxOEM | Remove-AppxPackage"
            4⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:1380
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            C:\Windows\System32\WindowsPowerShell\v1.0\powershell "Get-AppxProvisionedPackage -Online | Where-Object DisplayName -In \"C27EB4BA.DropboxOEM\" | Remove-ProvisionedAppxPackage -Online"
            4⤵
            • Drops file in Windows directory
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:1652
            • C:\Users\Admin\AppData\Local\Temp\81CA879F-C747-46C3-9B72-F7A00B203493\dismhost.exe
              C:\Users\Admin\AppData\Local\Temp\81CA879F-C747-46C3-9B72-F7A00B203493\dismhost.exe {889FC223-1741-4468-AD0B-BF91B7543F6E}
              5⤵
              • Executes dropped EXE
              • Drops file in Windows directory
              PID:452
      • C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe
        "C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe" /crashhandler
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2276
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iOSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBkb3dubG9hZF90aW1lX21zPSIyMjIxOCIgZG93bmxvYWRlZD0iMTk5NDM1NjI0IiB0b3RhbD0iMTk5NDM1NjI0Ii8-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48L2FwcD48L3JlcXVlc3Q-
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:1232
    • C:\Windows\system32\DbxSvc.exe
      C:\Windows\system32\DbxSvc.exe
      1⤵
      • Executes dropped EXE
      PID:4788
    • C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxUpdateOnDemand.exe
      "C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxUpdateOnDemand.exe" -Embedding
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3000
      • C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
        "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ondemand
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4924
        • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
          "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrun 1 /noappwasrunning /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkxRd01qSTBOakEzTmpjeU56UTNOek16TUxLd01ETXdNRFUwTmpNMk1UTzBOREcxTURDckJRQ254QTJ6OjpEQkRFQUxDT0RFOjpocHNhMjAyMUBNRVRBIiwicmVxdWVzdF9zZXF1ZW5jZSI6MH0
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious use of SetWindowsHookEx
          PID:1864
          • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
            "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:crashpad-handler --no-upload-gzip --no-rate-limit --capture-python --no-identify-client-via-url --database=C:\Users\Admin\AppData\Local\Dropbox\Crashpad --metrics-dir=0 --url=https://d.dropbox.com/report_crashpad_minidump --https-pin=0xfb,0xe3,0x1,0x80,0x31,0xf9,0x58,0x6b,0xcb,0xf4,0x17,0x27,0xe4,0x17,0xb7,0xd1,0xc4,0x5c,0x2f,0x47,0xf9,0x3b,0xe3,0x72,0xa1,0x7b,0x96,0xb5,0x7,0x57,0xd5,0xa2 --https-pin=0x7f,0x42,0x96,0xfc,0x5b,0x6a,0x4e,0x3b,0x35,0xd3,0xc3,0x69,0x62,0x3e,0x36,0x4a,0xb1,0xaf,0x38,0x1d,0x8f,0xa7,0x12,0x15,0x33,0xc9,0xd6,0xc6,0x33,0xea,0x24,0x61 --https-pin=0x36,0xab,0xc3,0x26,0x56,0xac,0xfc,0x64,0x5c,0x61,0xb7,0x16,0x13,0xc4,0xbf,0x21,0xc7,0x87,0xf5,0xca,0xbb,0xee,0x48,0x34,0x8d,0x58,0x59,0x78,0x3,0xd7,0xab,0xc9 --https-pin=0xf7,0xec,0xde,0xd5,0xc6,0x60,0x47,0xd2,0x8e,0xd6,0x46,0x6b,0x54,0x3c,0x40,0xe0,0x74,0x3a,0xbe,0x81,0xd1,0x9,0x25,0x4d,0xcf,0x84,0x5d,0x4c,0x2c,0x78,0x53,0xc5 --https-pin=0xbd,0xac,0xcb,0xf2,0xe8,0xb2,0x7c,0xc,0x2,0xa6,0x89,0xee,0x86,0x6c,0x9b,0x86,0xec,0x4,0x44,0x2a,0xfc,0xdd,0xdd,0x5d,0x4e,0xc3,0x6d,0xef,0x21,0xe7,0x61,0xdd --https-pin=0xaf,0xf9,0x88,0x90,0x6d,0xde,0x12,0x95,0x5d,0x9b,0xeb,0xbf,0x92,0x8f,0xdc,0xc3,0x1c,0xce,0x32,0x8d,0x5b,0x93,0x84,0xf2,0x1c,0x89,0x41,0xca,0x26,0xe2,0x3,0x91 --https-pin=0x8b,0xb5,0x93,0xa9,0x3b,0xe1,0xd0,0xe8,0xa8,0x22,0xbb,0x88,0x7c,0x54,0x78,0x90,0xc3,0xe7,0x6,0xaa,0xd2,0xda,0xb7,0x62,0x54,0xf9,0x7f,0xb3,0x6b,0x82,0xfc,0x26 --https-pin=0xb9,0x4c,0x19,0x83,0x0,0xce,0xc5,0xc0,0x57,0xad,0x7,0x27,0xb7,0xb,0xbe,0x91,0x81,0x69,0x92,0x25,0x64,0x39,0xa7,0xb3,0x2f,0x45,0x98,0x11,0x9d,0xda,0x9c,0x97 --https-pin=0x5a,0x88,0x96,0x47,0x22,0xe,0x54,0xd6,0xbd,0x8a,0x16,0x81,0x72,0x24,0x52,0xb,0xb5,0xc7,0x8e,0x58,0x98,0x4b,0xd5,0x70,0x50,0x63,0x88,0xb9,0xde,0xf,0x7,0x5f --https-pin=0xa4,0x95,0xc8,0xd1,0x10,0xe8,0xb9,0xe2,0x0,0xf3,0x70,0xae,0xda,0x3f,0xf9,0x2e,0xe4,0x3f,0x8e,0x3d,0x4e,0xc0,0xdb,0x1c,0xd,0xc5,0x8b,0xd7,0x62,0x88,0xb,0xa5 --https-pin=0xa0,0x2f,0xaf,0xa1,0x92,0xc8,0xcb,0x81,0xcb,0x13,0x41,0x55,0x4f,0x9c,0x5,0xb7,0x1c,0xca,0x2a,0x89,0xb,0xd,0x12,0x98,0xd6,0x83,0x64,0x7c,0x96,0x1e,0xfb,0xdf --https-pin=0x6a,0x97,0xb5,0x1c,0x82,0x19,0xe9,0x3e,0x5d,0xec,0x64,0xba,0xd5,0x80,0x6c,0xde,0xb0,0xf8,0x35,0x5b,0xe4,0x7e,0x75,0x70,0x10,0xb7,0x2,0x45,0x6e,0x1,0xaa,0xfd --https-pin=0x2b,0x7,0x1c,0x59,0xa0,0xa0,0xae,0x76,0xb0,0xea,0xdb,0x2b,0xad,0x23,0xba,0xd4,0x58,0xb,0x69,0xc3,0x60,0x1b,0x63,0xc,0x2e,0xaf,0x6,0x13,0xaf,0xa8,0x3f,0x92 --annotation=is_store_managed=false --annotation=machine_id=dc5cddf5-9e4b-4c89-ba53-89649a7a5ee7 --annotation=platform=win "--annotation=platform_version=10 2004" --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7fff57874378,0x7fff57874338,0x7fff57874348
            4⤵
            • Executes dropped EXE
            PID:1576
          • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
            "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:exit-monitor -method:collectupload -session-token:54af0d65-9e8f-47ae-924e-f2c5d274ada1 -target-handle:680 -target-shutdown-event:664 -target-restart-event:668 "-target-command-line:\"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe\" /firstrun 1 /noappwasrunning /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkxRd01qSTBOakEzTmpjeU56UTNOek16TUxLd01ETXdNRFUwTmpNMk1UTzBOREcxTURDckJRQ254QTJ6OjpEQkRFQUxDT0RFOjpocHNhMjAyMUBNRVRBIiwicmVxdWVzdF9zZXF1ZW5jZSI6MH0" -python-version:3.8.17 -process-type:main -handler-pipe:\\.\pipe\crashpad_1864_FWWIJVERMYPFXTAU
            4⤵
            • Executes dropped EXE
            PID:3960
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c "ver"
            4⤵
              PID:880
            • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
              "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /restartexplorer
              4⤵
              • Executes dropped EXE
              • Suspicious behavior: EnumeratesProcesses
              PID:688
            • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
              "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=gpu-process --crashpad-handler-ipc-pipe-name="\\.\pipe\crashpad_1864_FWWIJVERMYPFXTAU" --crashpad-annotations="product_name:desktop_client,buildid:main,buildno:Dropbox-win-211.4.6008,platform:win,platform_version:10 2004" --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5192 --field-trial-handle=5248,i,15865915600650127981,14687197847449513940,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
              4⤵
              • Executes dropped EXE
              PID:4924
            • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
              "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --standard-schemes=dbx-local --secure-schemes=dbx-local,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=dbx-local,sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes=dbx-local --mojo-platform-channel-handle=5300 --field-trial-handle=5248,i,15865915600650127981,14687197847449513940,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              4⤵
              • Executes dropped EXE
              PID:4516
            • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
              "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --crashpad-handler-ipc-pipe-name="\\.\pipe\crashpad_1864_FWWIJVERMYPFXTAU" --crashpad-annotations="product_name:desktop_client,buildid:main,buildno:Dropbox-win-211.4.6008,platform:win,platform_version:10 2004" --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6016 --field-trial-handle=5248,i,15865915600650127981,14687197847449513940,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
              4⤵
                PID:2244
              • C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
                "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --standard-schemes=dbx-local --secure-schemes=dbx-local,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=dbx-local,sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes=dbx-local --app-path="C:\Program Files (x86)\Dropbox\Client\211.4.6008\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=8560 --field-trial-handle=5248,i,15865915600650127981,14687197847449513940,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                4⤵
                  PID:3912
          • C:\Windows\explorer.exe
            explorer.exe
            1⤵
            • Boot or Logon Autostart Execution: Active Setup
            • Enumerates connected drives
            • Checks SCSI registry key(s)
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:3548
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
              PID:2448

            Network

                  MITRE ATT&CK Enterprise v15

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  e577d51.rbs

                  • Path C:\Config.Msi\e577d51.rbs
                  • Size 7KB
                  • SHA256 a65feedbc7d3f896384590a0e486fa7cc50583c06d03f0b083dfae1fd414a8d5
                  • MD5 SHA1 SHA512 SSDEEP

                  StoreLogo.contrast-black_scale-100.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-black_scale-100.png
                  • Size 842B
                  • SHA256 10a723abb8c4fbfd13890abbb03ae29f6dee95af4897556f2e7a06381b10d088
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-black_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-black_scale-125.png
                  • Size 1009B
                  • SHA256 34b48161fae3f477f775e9f3579c0fc55faf238a5936cf90c8d290b81a103001
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-black_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-black_scale-150.png
                  • Size 1KB
                  • SHA256 86bef6bac9539ac4b2251554266e7bcb9a81ab2b7c3950c4b159adfb52a2d468
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-black_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-black_scale-200.png
                  • Size 1KB
                  • SHA256 83cce654db3fe11233cbffc3ff1db2baad2f7e53dc722a1a73283a875a012e4d
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-black_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-black_scale-400.png
                  • Size 2KB
                  • SHA256 9f071e3a27f710b72811405d974d95bceb0e93214f4163a18012a8e8a4c3bc75
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-white_scale-100.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-white_scale-100.png
                  • Size 818B
                  • SHA256 401dfffa0848dd6bc92699020b02c6757d3b9d4e54b9f7c85b12045ad832579b
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-white_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-white_scale-125.png
                  • Size 955B
                  • SHA256 fce4249d823250d696cc2d31906277b99018245f20bdd0cd0f33c1d3d40cb82e
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-white_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-white_scale-150.png
                  • Size 1KB
                  • SHA256 a28c376ce00aa77d75c7ddc479be2cd73e3d624eaa302d045fde48fbea01f958
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-white_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-white_scale-200.png
                  • Size 1KB
                  • SHA256 8a2c861f6cb067fe75b2628c44950457412cd8f717b00435c77043c068bfa9fd
                  • MD5 SHA1 SHA512

                  StoreLogo.contrast-white_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.contrast-white_scale-400.png
                  • Size 2KB
                  • SHA256 91227bbe5b1379b65a611d3c3909f15090191601604a6e3b4f753d22562f4970
                  • MD5 SHA1 SHA512

                  StoreLogo.scale-100.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.scale-100.png
                  • Size 808B
                  • SHA256 49c9e1ed82c31479724ee6e9fded8be6f1d0af3ec21598433cc874b570e5be1a
                  • MD5 SHA1 SHA512

                  StoreLogo.scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.scale-125.png
                  • Size 960B
                  • SHA256 03cf02e09caf6da61ab2cc26baade70d945817064300305fb048714d35a7aa09
                  • MD5 SHA1 SHA512

                  StoreLogo.scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.scale-150.png
                  • Size 1KB
                  • SHA256 65faadc3a38b925583f6938b178914ad9b54b62a8c5d75046386196365594295
                  • MD5 SHA1 SHA512

                  StoreLogo.scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.scale-200.png
                  • Size 1KB
                  • SHA256 ff8e81c6591dbe709022a947f590229c7a566bba9c8fcebf1fa1b03dea56c6fa
                  • MD5 SHA1 SHA512

                  StoreLogo.scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\StoreLogo.scale-400.png
                  • Size 2KB
                  • SHA256 c8f8705fba32eaabe20f654d42ab1eb3439f8a674d53a85d596df4d7dbb82b49
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-black.png
                  • Size 2KB
                  • SHA256 b30e4d5cba1ea574459bdde0cc41dc04995e419b80e62d9384c2c5ae8d86ed44
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-black_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-black_scale-125.png
                  • Size 1KB
                  • SHA256 744bf505b69bb0de1cecb1054e06b436ca91b0f4296c4240e186f5c32ba9468f
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-black_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-black_scale-150.png
                  • Size 2KB
                  • SHA256 316a375a222d28e5a371e193881e5fcbaa72ab58138dfb54b8a75f7fb8438454
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-black_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-black_scale-200.png
                  • Size 4KB
                  • SHA256 7fa2beee1c84acecd66b0f34c4dc5c22284a376c5cca1b4bbcfa21955d34e0c3
                  • MD5 SHA1 SHA512 SSDEEP

                  TileSmall.contrast-black_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-black_scale-400.png
                  • Size 7KB
                  • SHA256 d966355f02930ea16084a6d9e750f3e4d6cc9c0960a3d8e3c00543a1c821e3d5
                  • MD5 SHA1 SHA512 SSDEEP

                  TileSmall.contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white.png
                  • Size 1KB
                  • SHA256 8cf1735955eb588386eb404304efed2b13e193b294d8a851d343834c04cf580e
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-white_scale-100.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white_scale-100.png
                  • Size 1KB
                  • SHA256 dfc2078b5f36adf8815e31918655f339b0024edd3defff09e2c084a0fff890e8
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-white_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white_scale-125.png
                  • Size 1KB
                  • SHA256 3ce16bef87a29a5bd597aa6e1910170f876633647859e0e95f3321554e581ca0
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-white_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white_scale-150.png
                  • Size 2KB
                  • SHA256 a698442e659f4620b5834f8e2c5ad4223279452bbc2d91aee0c625c6a59da0f0
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-white_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white_scale-200.png
                  • Size 3KB
                  • SHA256 26e1fa2a2f0aca1b344b2b59abf5663d6cd4f7b69d0f5d8d8d9687e52593eca9
                  • MD5 SHA1 SHA512

                  TileSmall.contrast-white_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.contrast-white_scale-400.png
                  • Size 7KB
                  • SHA256 b294930c03b6d86f5765e650273c9d2a7b90bae3e4a7d63b6f766914f3bff5a4
                  • MD5 SHA1 SHA512 SSDEEP

                  TileSmall.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.png
                  • Size 1KB
                  • SHA256 7b8d04dbc781bb2ef7c6697177f41ecca6d1abbb9b6264700d1b9da87a7c4e38
                  • MD5 SHA1 SHA512

                  TileSmall.scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.scale-125.png
                  • Size 1KB
                  • SHA256 46f36c5347b394635317ba6ff0b436c63c0bdf50868131f86721f98fe0dc834e
                  • MD5 SHA1 SHA512

                  TileSmall.scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.scale-150.png
                  • Size 2KB
                  • SHA256 4dc436394ff2b6f66c846a9e7499f5affb49807babb36b082b2a39ac4de4f431
                  • MD5 SHA1 SHA512

                  TileSmall.scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.scale-200.png
                  • Size 3KB
                  • SHA256 d5b905ff6d4888479eb587a1cb0c4b291a7b063002cbe252e9dcf67886433e9b
                  • MD5 SHA1 SHA512

                  TileSmall.scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TileSmall.scale-400.png
                  • Size 7KB
                  • SHA256 2c02fdef716808679b62e68774603b383ad8d18dded430577132e1188218891c
                  • MD5 SHA1 SHA512 SSDEEP

                  TinyTile.contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-black.png
                  • Size 1KB
                  • SHA256 39fad5cbb4e4cbcbf7ae6f319536f09850814690bb1dcbe319d1e733a4577e7f
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-black_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-black_scale-125.png
                  • Size 1KB
                  • SHA256 a0caf8f293aba7045dd603514e8b0c4303259ba3e2ac3bce4711953ac531556b
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-black_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-black_scale-150.png
                  • Size 1KB
                  • SHA256 fa59094e662ea019895bcc9691918feed1c5f4059fa2a993344cb4e2dc428aff
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-black_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-black_scale-200.png
                  • Size 2KB
                  • SHA256 9319fc5f163cbc9698c3c8618391341784ba450b847bf34cb50d9a6f18cdf8ca
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-black_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-black_scale-400.png
                  • Size 4KB
                  • SHA256 ba6353451658887bb758b97687d5cef9e5f475cd1d997dbe43b591e80e1c32bd
                  • MD5 SHA1 SHA512 SSDEEP

                  TinyTile.contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-white.png
                  • Size 1KB
                  • SHA256 ae4a90f3837784aa05a9c93cdf1afc4bdfab944f26e924ef8d60093063fe3d1f
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-white_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-white_scale-125.png
                  • Size 1KB
                  • SHA256 34599c2249279d48d3da628ece3a080b81529768c33f9c35b4c9cac730b40270
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-white_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-white_scale-150.png
                  • Size 1KB
                  • SHA256 266019879888a5c9d275a6e56c86b9281fa0232b4b5a5c8f7a72d34196e3c593
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-white_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-white_scale-200.png
                  • Size 2KB
                  • SHA256 356544638e33837d6e903f3c38e03d0b068e864cc2700a457aa42ebeeccdd06f
                  • MD5 SHA1 SHA512

                  TinyTile.contrast-white_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.contrast-white_scale-400.png
                  • Size 4KB
                  • SHA256 9195c995f3a72b88a0e7497ef1c6a2e10c6ba8a3b5c7e02a793e7f3bfb6bda2d
                  • MD5 SHA1 SHA512 SSDEEP

                  TinyTile.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.png
                  • Size 1KB
                  • SHA256 561ca42a1519c230756e7dc551329da441e6e7789f6156f7ac515be094b1ca83
                  • MD5 SHA1 SHA512

                  TinyTile.scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.scale-125.png
                  • Size 1KB
                  • SHA256 b4d0fdb3e633ae44e5ef3a2cbd07133a769c739e71bb7eb6fdc52a93553fe689
                  • MD5 SHA1 SHA512

                  TinyTile.scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.scale-150.png
                  • Size 1KB
                  • SHA256 d4a16dba610e11cf827019dd79a32312e2da9d822b97b96200b52deaf7f899db
                  • MD5 SHA1 SHA512

                  TinyTile.scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.scale-200.png
                  • Size 1KB
                  • SHA256 e596602dbdf5ba148d9f3cac6f4943fc93d3141afe8d32ad1273537284ad5220
                  • MD5 SHA1 SHA512

                  TinyTile.scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\TinyTile.scale-400.png
                  • Size 3KB
                  • SHA256 31417e5050802908b26c340730219731db5c359ae27f60261e750e4260ff5fbe
                  • MD5 SHA1 SHA512

                  backup.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\backup.png
                  • Size 6KB
                  • SHA256 5bfc58e4b27a8405effcf108856d2650299afcf55eab83e95370c9b6066709b0
                  • MD5 SHA1 SHA512 SSDEEP

                  binder.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\binder.png
                  • Size 2KB
                  • SHA256 f582ca6fdf085b23240b35411040b0b5bff6c2ec1ed5b2c0f7add35c88c65914
                  • MD5 SHA1 SHA512

                  external_drive.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\external_drive.png
                  • Size 6KB
                  • SHA256 971d455f91faf6bf320ed366f0881fc613c3228daa9ed91e0d6c864ece1a735e
                  • MD5 SHA1 SHA512 SSDEEP

                  gdoc.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\gdoc.png
                  • Size 1KB
                  • SHA256 4541fbe81bc51114ef18706d2b37a44c1c5ba14454fc26b8a058bb31bd8cfb79
                  • MD5 SHA1 SHA512

                  gsheet.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\gsheet.png
                  • Size 1KB
                  • SHA256 70f5bf52350b6aaf67ad1296a947ba2a87c12dbbef76d1c3f73fec723977a81b
                  • MD5 SHA1 SHA512

                  gslides.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\gslides.png
                  • Size 1KB
                  • SHA256 c6ed27af06f6d5e565469d95bd7ac077418971bb1dc7f2fe068d07cf0f84284e
                  • MD5 SHA1 SHA512

                  logo.contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-black.png
                  • Size 850B
                  • SHA256 f1169f6b53191be05946e9ced0dbb6676b61ac9902db3218e69eb5ed4252d67a
                  • MD5 SHA1 SHA512

                  logo.contrast-black_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-black_scale-125.png
                  • Size 1KB
                  • SHA256 08a92e353e5c573045edc67b2c58fe245d5ad40c3c3e63edcf4ebcb0f1efc5bf
                  • MD5 SHA1 SHA512

                  logo.contrast-black_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-black_scale-150.png
                  • Size 1KB
                  • SHA256 bacbe3c51cc9b59f42b3b5e246d9c2e3843a08369d7551bfe53e6542a847e9f6
                  • MD5 SHA1 SHA512

                  logo.contrast-black_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-black_scale-200.png
                  • Size 1KB
                  • SHA256 742e2f2a19e3158f1df75cbac15400b9ff4f14e6f4cbea5c856d1a8e07d52cb0
                  • MD5 SHA1 SHA512

                  logo.contrast-black_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-black_scale-400.png
                  • Size 2KB
                  • SHA256 a722bae20339682d00edc12d01930b8ea9670d3a48f4e85e5d8c483a2f9f3f6f
                  • MD5 SHA1 SHA512

                  logo.contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-white.png
                  • Size 829B
                  • SHA256 b483f895037bb12a7d9f4678382479abbfc67a898d5da76606011d133e119396
                  • MD5 SHA1 SHA512

                  logo.contrast-white_scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-white_scale-125.png
                  • Size 966B
                  • SHA256 e8449b860cf4eaf5b894a606ca19951e4ca9561e0dd2e8a82b142bcee256a846
                  • MD5 SHA1 SHA512

                  logo.contrast-white_scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-white_scale-150.png
                  • Size 1KB
                  • SHA256 e59ab89cdb6a4e395e43abd6de2dc56a8a198c9250700505cdd7da8bc70e1814
                  • MD5 SHA1 SHA512

                  logo.contrast-white_scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-white_scale-200.png
                  • Size 1KB
                  • SHA256 72e9a9762f27b239382346341733aae6d3fd8cc87441dbeaa92459197f7c4b12
                  • MD5 SHA1 SHA512

                  logo.contrast-white_scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.contrast-white_scale-400.png
                  • Size 2KB
                  • SHA256 c8db5c7d9e4196500a6707a22af86038af867a16810d079dc0bd7ce9f2209997
                  • MD5 SHA1 SHA512

                  logo.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.png
                  • Size 807B
                  • SHA256 5b4295cda56616386c8a51e9950c4b6bf881da8e38a3b06af45dbc383efe2a9a
                  • MD5 SHA1 SHA512

                  logo.scale-125.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.scale-125.png
                  • Size 979B
                  • SHA256 993a57d13e17efeea8a4d82a2c34e1366370d3ffb869e1f4bdfb7eeee7e95713
                  • MD5 SHA1 SHA512

                  logo.scale-150.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.scale-150.png
                  • Size 1KB
                  • SHA256 12e29e0f3c411aab7cac939243217ec2cc5d2e704d5e2e3046fef76b1f9ddc08
                  • MD5 SHA1 SHA512

                  logo.scale-200.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.scale-200.png
                  • Size 1KB
                  • SHA256 2470fbedd07761a881bc3ba492eda9b7650fb6abc5fac62014cd6afd5837e60d
                  • MD5 SHA1 SHA512

                  logo.scale-400.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.scale-400.png
                  • Size 2KB
                  • SHA256 0e261e6c03acabdffe199b1f06358fb5aae4581503166e824ca51f641ac5c821
                  • MD5 SHA1 SHA512

                  logo.targetsize-16.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-16.png
                  • Size 369B
                  • SHA256 480bd88e54f2f39583b7360b7412486067dc8f0acdfb9396ca4b2571349515b7
                  • MD5 SHA1 SHA512

                  logo.targetsize-16_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-16_altform-unplated_contrast-black.png
                  • Size 352B
                  • SHA256 768dedd2f167c28e0e628326fdb17f9d0a3b50d2776600968ad00682a6a84de4
                  • MD5 SHA1 SHA512

                  logo.targetsize-16_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-16_altform-unplated_contrast-white.png
                  • Size 382B
                  • SHA256 7fcccb4c85dcc54849c88d74241db75e5174160e0e364558073d6e6c01ad107e
                  • MD5 SHA1 SHA512

                  logo.targetsize-20.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-20.png
                  • Size 433B
                  • SHA256 92ecfadf6d728ab3346f8498bab501014be35881bb605d585209033c0c8738cd
                  • MD5 SHA1 SHA512

                  logo.targetsize-20_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-20_altform-unplated_contrast-black.png
                  • Size 429B
                  • SHA256 fc27012a9f08d137a192e4651fe1170348fba0e755bc20dcd18a040761764028
                  • MD5 SHA1 SHA512

                  logo.targetsize-20_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-20_altform-unplated_contrast-white.png
                  • Size 424B
                  • SHA256 9ba3a66c924c24287fff271985cd9cbc41d98ea3003ff079485ed16096b40af8
                  • MD5 SHA1 SHA512

                  logo.targetsize-24.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-24.png
                  • Size 549B
                  • SHA256 b1c4bb67f7d23a1f7c7a336ffd7b6c9eac64d166c62c71f01900057acf6ffc97
                  • MD5 SHA1 SHA512

                  logo.targetsize-24_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-24_altform-unplated_contrast-black.png
                  • Size 545B
                  • SHA256 962a367ddb4e1a3c1b4d15c5bccb26c8dacdf90874709b2049137c6611cedbce
                  • MD5 SHA1 SHA512

                  logo.targetsize-24_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-24_altform-unplated_contrast-white.png
                  • Size 525B
                  • SHA256 fc2025e7019faf3c3e2f6bf953710aecd4d77eb3a270c301e14acb056a3f5e41
                  • MD5 SHA1 SHA512

                  logo.targetsize-256.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-256.png
                  • Size 3KB
                  • SHA256 017de63c54a90a3fd5355ccb74b1030d7ddbd3795d17d5531d8d3b4925d09e5f
                  • MD5 SHA1 SHA512

                  logo.targetsize-256_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-256_altform-unplated_contrast-black.png
                  • Size 4KB
                  • SHA256 db7844bdeb530f730adcd6e8133c0268bb4f623a126cc021d896f3bd3b5bbcc3
                  • MD5 SHA1 SHA512 SSDEEP

                  logo.targetsize-256_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-256_altform-unplated_contrast-white.png
                  • Size 3KB
                  • SHA256 00c062d5b17bfecc284c1a2cae4ab3982475726be67fcdc031051a2a069079f2
                  • MD5 SHA1 SHA512

                  logo.targetsize-30.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-30.png
                  • Size 634B
                  • SHA256 0f1d81715883c6335a6cd9e7d5eef096ffe151844c0754e61ba5051a0d3fd6d9
                  • MD5 SHA1 SHA512

                  logo.targetsize-30_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-30_altform-unplated_contrast-black.png
                  • Size 632B
                  • SHA256 c7965f12e0d493c4282994e07dbc051b26dd5d95fe390527f6506a5877e068b1
                  • MD5 SHA1 SHA512

                  logo.targetsize-30_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-30_altform-unplated_contrast-white.png
                  • Size 608B
                  • SHA256 96519fbbba9029fc6214df166334808e86df8751f7405a0b8af812c870a56c96
                  • MD5 SHA1 SHA512

                  logo.targetsize-32.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-32.png
                  • Size 649B
                  • SHA256 0532b07e9decf2e53c44a17207a7c93b57e2285e6f65f349750bde4a4e6f72f4
                  • MD5 SHA1 SHA512

                  logo.targetsize-32_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-32_altform-unplated_contrast-black.png
                  • Size 683B
                  • SHA256 5e4bef37189b940b417efdc91f0abf569edb8e067d5bac1864a1eb47a68946be
                  • MD5 SHA1 SHA512

                  logo.targetsize-32_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-32_altform-unplated_contrast-white.png
                  • Size 673B
                  • SHA256 5ff9fba41b80869407e9df6799aab8a9d3ab86b086b93a0173f66f8faafe4689
                  • MD5 SHA1 SHA512

                  logo.targetsize-36.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-36.png
                  • Size 749B
                  • SHA256 7d70ccd21823c7918de26edddf6b3a35773512b074225bc3b24b028d1a0596af
                  • MD5 SHA1 SHA512

                  logo.targetsize-36_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-36_altform-unplated_contrast-black.png
                  • Size 780B
                  • SHA256 89fd40e83ff38d64fe6427cb74cc3ac5ac09de46536a74a2df0208909094740d
                  • MD5 SHA1 SHA512

                  logo.targetsize-36_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-36_altform-unplated_contrast-white.png
                  • Size 757B
                  • SHA256 82b4667bdb04975842375cdb2d3adea035166366e6dad08a3d5c5e4e884ef87b
                  • MD5 SHA1 SHA512

                  logo.targetsize-40.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-40.png
                  • Size 787B
                  • SHA256 ba53865cc9bf60d1b21daa381bd3ae27b75c26fd45d8ff4393f88686bfcec2d1
                  • MD5 SHA1 SHA512

                  logo.targetsize-40_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-40_altform-unplated_contrast-black.png
                  • Size 824B
                  • SHA256 dbe1f856324c36cb597cae985f4f1d65e12d63a9435a43457207caa7712d9d2f
                  • MD5 SHA1 SHA512

                  logo.targetsize-40_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-40_altform-unplated_contrast-white.png
                  • Size 761B
                  • SHA256 b665198e59b16b6a095f65a01d1e2d6247b6c9694dadc3ec4c2a95986538aa9c
                  • MD5 SHA1 SHA512

                  logo.targetsize-48.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-48.png
                  • Size 868B
                  • SHA256 6fe5eb7d05d520584f2158e8669264977a437f7daf75b7994f13aedfd2381539
                  • MD5 SHA1 SHA512

                  logo.targetsize-48_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-48_altform-unplated_contrast-black.png
                  • Size 969B
                  • SHA256 b91fdbc9c46552c90c0ca41ee8fcd543f383dd6f50bc15f04e6b25e8fa29f4b1
                  • MD5 SHA1 SHA512

                  logo.targetsize-48_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-48_altform-unplated_contrast-white.png
                  • Size 879B
                  • SHA256 abba9fbb0af323e7c41bcc85a771950101f4442706f1d1fd8f0c1c5c64d2fc11
                  • MD5 SHA1 SHA512

                  logo.targetsize-60.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-60.png
                  • Size 918B
                  • SHA256 bc4c7c205e546bce49c87f7c61791ddcca6ee4de5eb99ce50a578bdab146f138
                  • MD5 SHA1 SHA512

                  logo.targetsize-60_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-60_altform-unplated_contrast-black.png
                  • Size 1001B
                  • SHA256 85e92f78430d788acd376c9213a70aefc2ec15df1cd0b3188e28cb4f5f0979b6
                  • MD5 SHA1 SHA512

                  logo.targetsize-60_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-60_altform-unplated_contrast-white.png
                  • Size 939B
                  • SHA256 470869b40f07e488c5150036e97170c544013b27e7256bf80846f085da3a8ab6
                  • MD5 SHA1 SHA512

                  logo.targetsize-64.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-64.png
                  • Size 1KB
                  • SHA256 c290188a41172f8158c0f975e744b7400592fdab11e119a4093539ad83270586
                  • MD5 SHA1 SHA512

                  logo.targetsize-64_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-64_altform-unplated_contrast-black.png
                  • Size 1KB
                  • SHA256 10e278df172c7444c8cc1c3b199d353e4fcaea2f03ea1807ae1ba20970d9e3f7
                  • MD5 SHA1 SHA512

                  logo.targetsize-64_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-64_altform-unplated_contrast-white.png
                  • Size 1KB
                  • SHA256 ed5a2cc70db8bb0b07f67565d2a2a4a33e5102102f39aaf6a0d3bab2621a9391
                  • MD5 SHA1 SHA512

                  logo.targetsize-72.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-72.png
                  • Size 1KB
                  • SHA256 239b121a9a36aa687205c73d3899b130e5ed12d75c2030fdc654765eb890faac
                  • MD5 SHA1 SHA512

                  logo.targetsize-72_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-72_altform-unplated_contrast-black.png
                  • Size 1KB
                  • SHA256 e47eb78010e8a7a79781def9442f5addfc3b0fbede2a721084a4b7f2e8810e47
                  • MD5 SHA1 SHA512

                  logo.targetsize-72_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-72_altform-unplated_contrast-white.png
                  • Size 1KB
                  • SHA256 4bb3259d2836a8f904f5703c42e3c7db4924ff3bedc8847b45d2828b43e5c8ed
                  • MD5 SHA1 SHA512

                  logo.targetsize-80.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-80.png
                  • Size 1KB
                  • SHA256 a972691debb27d28217e363c2a02023907c4ee51fdd58fcf0c60d64b856e7e31
                  • MD5 SHA1 SHA512

                  logo.targetsize-80_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-80_altform-unplated_contrast-black.png
                  • Size 1KB
                  • SHA256 6684bf37a8dc1b5424e756c33b3f90bb881181dfd85d57470eb3c18fcef5e656
                  • MD5 SHA1 SHA512

                  logo.targetsize-80_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-80_altform-unplated_contrast-white.png
                  • Size 1KB
                  • SHA256 cdc8afbdfc96aa91d1e3df6ee6223e23b041fab55429ca375d4c528ff23babf7
                  • MD5 SHA1 SHA512

                  logo.targetsize-96.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-96.png
                  • Size 1KB
                  • SHA256 122e0ada5316373920063713ec84087e6769b2280e75858af9ec6586daf72cd6
                  • MD5 SHA1 SHA512

                  logo.targetsize-96_altform-unplated_contrast-black.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-96_altform-unplated_contrast-black.png
                  • Size 1KB
                  • SHA256 7c40b6cfcd8bcbb201a2edf811022a37ca47b73e85ec5785996477adcd0eaace
                  • MD5 SHA1 SHA512

                  logo.targetsize-96_altform-unplated_contrast-white.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\logo.targetsize-96_altform-unplated_contrast-white.png
                  • Size 1KB
                  • SHA256 b644ea2d909241dbfdcc7caed90d4a8d9cae526939832ea5312161e60fc24bd5
                  • MD5 SHA1 SHA512

                  paper.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\paper.png
                  • Size 2KB
                  • SHA256 3d11454bfbde59784ddd1ea185bd250d82ea02b31290e8ca7ffd3cf7467bb83b
                  • MD5 SHA1 SHA512

                  papert.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\papert.png
                  • Size 2KB
                  • SHA256 d14d32557b917bc18f36a96157b8530b5cbe03bb34430c61229acd20ced24274
                  • MD5 SHA1 SHA512

                  passwords.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\passwords.png
                  • Size 5KB
                  • SHA256 bd15f021e8ba0f65ed8acb83b75c144318cd07908fb1821368ec2e43731e20f7
                  • MD5 SHA1 SHA512 SSDEEP

                  vault.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\vault.png
                  • Size 5KB
                  • SHA256 051675975d3c1d1c2f9405fd714d0ff632da85b6515cfde7efd4586b32885fa4
                  • MD5 SHA1 SHA512 SSDEEP

                  web.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\Assets\web.png
                  • Size 2KB
                  • SHA256 9871614ac39353ee111c07526131c473d10a556c5a91e9594f5a4c340078e1e4
                  • MD5 SHA1 SHA512

                  DropboxUpdateClient.exe

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\DropboxUpdateClient.exe
                  • Size 5.5MB
                  • SHA256 0e96a7b6895479c69ff8024d531cfeca245744e5bc8b19f5c88afe981b165029
                  • MD5 SHA1 SHA512 SSDEEP

                  dbx-canary.sys

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\driver_amd64\dbx-canary.sys
                  • Size 46KB
                  • SHA256 4269061949da67e35b2df4c13afdcc7bf7406366d199ac25d7a70393b2af9b5c
                  • MD5 SHA1 SHA512 SSDEEP

                  dropboxstatus-connecting.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\dropboxstatus-connecting.png
                  • Size 244B
                  • SHA256 4879e1e5feb9c2aa2582bd6669d848209f04f9e4e86717fde6266f37782d4fd3
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 359B
                  • SHA256 215ac170ddc8d7ad810403656f55f3f2ceade5e81904308bb6db9580bb564b0a
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 398B
                  • SHA256 f0c856cb962fda54d1b297c6999078d42bdf5d270d9da265a754146442b6e0d7
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 479B
                  • SHA256 4c9b5626742949f90521ea0721c22f6f2778d8f4f0032baa1ca5fdbe538f1270
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 545B
                  • SHA256 ba29d0e510004171e69dc56faedbc3f2ccc6972d569835acca6c2c13e98c3471
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 354B
                  • SHA256 68c05fb5b39ba1068e39d153253a9ecd1b15ee0e0573725eecb76eecd5d30c95
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 484B
                  • SHA256 828e270c7b2437e179f8ea7c89066610765b23423dd5b9bec748c59f0b90e53f
                  • MD5 SHA1 SHA512

                  dropboxstatus-idle.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\dropboxstatus-idle.png
                  • Size 219B
                  • SHA256 a098e050f067bd14de41d0c3773b348b43621130b17340249dc331f441fe385a
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 292B
                  • SHA256 8ea78c2b2f5f50640ee0cdbcbf32ff61c95d1cca383e2858419edb9482c2cb3e
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 347B
                  • SHA256 640148ecad930799f19273e6e703689a32be19dc900172f899f6831e551d605d
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 497B
                  • SHA256 e21391160f1142cc12eba0cc667f2fbff2f0905b82855385ed9f0c79b3413ef6
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 500B
                  • SHA256 246541e42d74e337bf93492da61e244d15a724cb77e12d4ae6ac81c5e3b76827
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 339B
                  • SHA256 7322a0ed70b4ee98b15da5c7ac30082580bffc0c6b4ebee9722f049f39c511ad
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\dark\[email protected]
                  • Size 444B
                  • SHA256 e5c20664f6c1c24477af32a1f69420c4f5b5ec96e4c3426ca232101d2bdf807c
                  • MD5 SHA1 SHA512

                  dropboxstatus-connecting.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\dropboxstatus-connecting.png
                  • Size 616B
                  • SHA256 89a854d6c3c9046621f002e68bf62191396c5d3ce868bb7226d6e2baf21d5524
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 850B
                  • SHA256 c9563283ec6dad1b3da15561e94ffb36e97700f9444d7a908a5ca5b7f81b0be0
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 955B
                  • SHA256 460264cf30e2e7cf6ef1e6fa5fc49af4ea2d5fc62e1abe718e2a208e26316b75
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 1KB
                  • SHA256 fa39b29d9edc9a32c3d9d54323cdeab6d95018d86404baeff00cc18b55640de5
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 1KB
                  • SHA256 363e40480a84ba4de25e01104f27d834acc0e5bd986a2d9a5e8f6e931eb960e4
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 2KB
                  • SHA256 2aee831a42ce8f755a9108124b2893c2501f5dcb6c9d286b0065e100842a2681
                  • MD5 SHA1 SHA512

                  dropboxstatus-idle.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\dropboxstatus-idle.png
                  • Size 484B
                  • SHA256 bbaeba414da07b9a42d7e16f581dffc4dc2b0553dde5d0a799271c0b4b41b67d
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 640B
                  • SHA256 a759f2b68a2bb7ad75c8460fd44cf27f77d9447b4efcd65c7a62cfd27f575a17
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 718B
                  • SHA256 777e430dac2785081a899329d2a76a64a174ef57683315ab4c80d3a13a3cd19e
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 940B
                  • SHA256 42760b6c8ad45cd02f3f7276e721e5a623d720fdb0af8c8ce330f5cc0d949de7
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 1KB
                  • SHA256 87b95507e1395c363e814644723305aedb62bd989631e51a7dce03d36f820fc1
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\legacy\[email protected]
                  • Size 2KB
                  • SHA256 88f5ad501b3eda190391e39852edfcaa62ccda155d97ac9906f5c24590b984a3
                  • MD5 SHA1 SHA512

                  dropboxstatus-connecting.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\dropboxstatus-connecting.png
                  • Size 270B
                  • SHA256 ef84388ed457a1ece5f3dadd768bee7149773be4db65e31906168f3d397244e7
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 363B
                  • SHA256 7561f3ab28686e7aed1899b06fb49510c596597470d210b07a6d7c275e0f41b9
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 424B
                  • SHA256 6baa74141bf56a5322cd41415b9756686f6acea7b03b23addbdc4ba52678956b
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 457B
                  • SHA256 0714ff4682d950b78e4f7135aa41eee4bf14e3be769f3ec71742474321654533
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 549B
                  • SHA256 017c764d5785aecd98943d90b1a60acc662424de66b19f0fb259551814a084b9
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 356B
                  • SHA256 d7593e7752ad786454809cad2a3cf0263a1f4946155026213af90a115807871f
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 516B
                  • SHA256 80b8c11dc30aef1b9c0b469af47fe8ff83f4b6b68e3874b2f18ec8716e1f8340
                  • MD5 SHA1 SHA512

                  dropboxstatus-idle.png

                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\dropboxstatus-idle.png
                  • Size 217B
                  • SHA256 981b9ff92e28c83e9e3b43e45bf51b1a2f7dd2242837681f4a71784d9a60057d
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 278B
                  • SHA256 fd5df7a65010498b37a02a14b9604410bafc98d546957cfdefa3e1b9a761882c
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 341B
                  • SHA256 8e37becbb06509835ae09ef704b6c62208ecd6e80f280d47d68799207e086e65
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 436B
                  • SHA256 915f1777e60d5ad2b9546ad03f34157b70f3d8ad1607e5b87c111be4692b054c
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 487B
                  • SHA256 c64ddc1326f394a08eab8f98ab502dd648f0b269d9807ed7e64ff6ee4d9e201c
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 326B
                  • SHA256 5236c151f310555761abab2296c2130cfc9d3af072c9e88917227350f69225c6
                  • MD5 SHA1 SHA512
                  • Path C:\Program Files (x86)\Dropbox\Client\211.4.6008\images\03_Tray_Icon\win\light\[email protected]
                  • Size 423B
                  • SHA256 4f2be4041a2866d83856af99185c920353a3e6bd7c3a4b19da52673d5cae515c
                  • MD5 SHA1 SHA512

                  Dropbox.VisualElementsManifest.xml

                  • Path C:\Program Files (x86)\Dropbox\Client\Dropbox.VisualElementsManifest.xml
                  • Size 396B
                  • SHA256 33f3f139855a7890c515a0daf2cef5c798a665ede2fe29c9673703fc1bf1795a
                  • MD5 SHA1 SHA512

                  DropboxUninstaller.exe

                  • Path C:\Program Files (x86)\Dropbox\Client\DropboxUninstaller.exe
                  • Size 226KB
                  • SHA256 1f94df3488b8385c3d7bc0cbd33ca29b3217eac829e40814003456dbce2e335b
                  • MD5 SHA1 SHA512 SSDEEP

                  Dropbox.msix

                  • Path C:\Program Files (x86)\Dropbox\Client\PackageAssets\Dropbox.msix
                  • Size 63KB
                  • SHA256 a2ec9f068d143908442b7c591d3a278bb69b60c38076141f5d2912f1c644fa42
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxExt.77.0.dll

                  • Path C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt.77.0.dll
                  • Size 402KB
                  • SHA256 e5298655d36393459837332c4dff12b7e7a899c96b4bba8276ead1b0c3bfe591
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxExt64.77.0.dll

                  • Path C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt64.77.0.dll
                  • Size 455KB
                  • SHA256 5cccb54f0d768d1ad1663b00cb1d92157b7eebe6657777522e044245d9196653
                  • MD5 SHA1 SHA512 SSDEEP

                  resources.pri

                  • Path C:\Program Files (x86)\Dropbox\Client\PackageAssets\resources.pri
                  • Size 19KB
                  • SHA256 44d17a201fc1c3745a8bc8337a4008b68edbec069af6074db22195fc6c346517
                  • MD5 SHA1 SHA512 SSDEEP

                  qt.conf

                  • Path C:\Program Files (x86)\Dropbox\Client\qt.conf
                  • Size 87B
                  • SHA256 10c3bd5eab821203724b2d9d307ada10be23da078f95fef232d0509e8b54b050
                  • MD5 SHA1 SHA512

                  resources.pri

                  • Path C:\Program Files (x86)\Dropbox\Client\resources.pri
                  • Size 136KB
                  • SHA256 d616de2adfdb87eb4a46cda9af64295521de0313bb2bfaf047c16cce959a9135
                  • MD5 SHA1 SHA512 SSDEEP

                  Resources.resw

                  • Path C:\Program Files (x86)\Dropbox\Client_211.4.6008\211.4.6008\Strings\language-es-ES\Resources.resw
                  • Size 7KB
                  • SHA256 75997383b6597a725ecdc87f688ef632e218bb627bb724c347416937deab768f
                  • MD5 SHA1 SHA512 SSDEEP

                  python38.dll

                  • Path C:\Program Files (x86)\Dropbox\Client_211.4.6008\211.4.6008\python38.dll
                  • Size 11.0MB
                  • SHA256 1c452e272a033dd6b76fb5351ad49960aa617f255694a6a5f71224afb4956ced
                  • MD5 SHA1 SHA512 SSDEEP

                  vcruntime140.dll

                  • Path C:\Program Files (x86)\Dropbox\Client_211.4.6008\211.4.6008\vcruntime140.dll
                  • Size 96KB
                  • SHA256 c179d8914ba8e57b2f8f4d6c101c2c550c7c6712a7f0f9920a97db340f9d9574
                  • MD5 SHA1 SHA512 SSDEEP

                  Dropbox.exe

                  • Path C:\Program Files (x86)\Dropbox\Client_211.4.6008\Dropbox.exe
                  • Size 8.8MB
                  • SHA256 db8d8b860a758f8f5c2dbe239e50df635375e315e092872d4b26348828ae2ff1
                  • MD5 SHA1 SHA512 SSDEEP

                  @PaxHeader

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\@PaxHeader
                  • Size 28B
                  • SHA256 eb7ae0eb1420c4dd29c8e597fc0cc5531b0f2c7b5f72275ce5ac4c4eb375cb6b
                  • MD5 SHA1 SHA512

                  @PaxHeader

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\@PaxHeader
                  • Size 28B
                  • SHA256 5a91e4e117ccacc7c7a47833e6dcd41b5fb52be6092887ea6afe2a8cabb6f795
                  • MD5 SHA1 SHA512

                  DropboxCleanup.exe

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxCleanup.exe
                  • Size 299KB
                  • SHA256 0d9c6de8a57443bffe718d3256fdd467b8970124ba65d8accb6f47dc54d46d72
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxCrashHandler.exe

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxCrashHandler.exe
                  • Size 129KB
                  • SHA256 2e3925b6c2175a98024551fea9e0b8dbc54f4107322c97b1493add40ed8ab73b
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxUpdate.exe

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdate.exe
                  • Size 127KB
                  • SHA256 7655221b493047c61285e1de78807d0584920b0d14d150e2487da9728b1926f3
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxUpdateBroker.exe

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdateBroker.exe
                  • Size 75KB
                  • SHA256 4988fdaeb6a33a3169a9ea445f5bc00b7bdacb78f7ed6a98b2ad2eb73b551ff2
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxUpdateHelper.msi

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdateHelper.msi
                  • Size 26KB
                  • SHA256 0772c75f19a0e35b3b02831563a72897d68fc7eb2b304f2d7cc58eca0a00cfe5
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxUpdateOnDemand.exe

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\DropboxUpdateOnDemand.exe
                  • Size 75KB
                  • SHA256 70272968ff5e1c47883ecb74680cf3a298af7b87ccacb932a57a0198ed69a65e
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdate.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdate.dll
                  • Size 1.1MB
                  • SHA256 34b68127792f3c80c4a3e616c9c8cff8e53533518f80c4aac78f2aaa26e9615a
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_da.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_da.dll
                  • Size 32KB
                  • SHA256 8fadf121a5766032bfddd0f6342dd6e2a612996370ed1f5c548f5cbb5ac548f9
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_de.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_de.dll
                  • Size 35KB
                  • SHA256 9373bfaac15573f63b42cbcd39e4ef15a06d6a27696541f1274a2aef25570e70
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_en.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_en.dll
                  • Size 31KB
                  • SHA256 67d5c3f8a6e9415deef22148a4216518a7ee52b468ba6bb1c67020d56d9e3745
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_es-419.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_es-419.dll
                  • Size 33KB
                  • SHA256 4d43704f744093b41f9d3315c508933a91c481732b84e0b14bf642aa5d03e020
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_es.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_es.dll
                  • Size 33KB
                  • SHA256 7dc6bb82fb6133e879309b0200aec7ae7c6346deb05a53daf1803443db3c8cbb
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_fr.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_fr.dll
                  • Size 34KB
                  • SHA256 3f3ac9e29e480d1c6eb271a538bb966953c9464659d044cdccd8c99df7f703a1
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_id.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_id.dll
                  • Size 31KB
                  • SHA256 e0d5ea9edec2692553371e4579a63d5dc7c554867f3f90ebec722d97d2af87b5
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_it.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_it.dll
                  • Size 33KB
                  • SHA256 83c860a5942fd6b307c428869a1debb188fa4a8dc27d2ffe4abe0b8453254e7b
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_ja.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_ja.dll
                  • Size 27KB
                  • SHA256 016567f8ee776cb57dfbc7e6a8908bef7004fd9abab4286800863c745c08e1c0
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_ko.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_ko.dll
                  • Size 27KB
                  • SHA256 4638e83c8e01e837078797f8ce2e4015a05aa7e6ee121dda107adc473f4c281b
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_ms.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_ms.dll
                  • Size 31KB
                  • SHA256 d7e3c82e12447a9aa4085317f65447607b75f62fa89edd38fb5621dbaad9211d
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_nl.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_nl.dll
                  • Size 34KB
                  • SHA256 5f577d78457e5010c90b3614f94eb3b03f4f66c752191e25ce2b4f397d481ad9
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_no.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_no.dll
                  • Size 32KB
                  • SHA256 8a1622e758b4cdcdcef80095f59c604ba878b1c853d66a338459b4de32ed5fdb
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_pl.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_pl.dll
                  • Size 33KB
                  • SHA256 16ffbd7af2dc7d11199bd769ac3355efb39b4267f0758ef8d60ce4bdf927d394
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_pt-BR.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_pt-BR.dll
                  • Size 32KB
                  • SHA256 b500301065031c6826991f0b0e712e2ac09c465f686b27e0aa5121a9d2bc2529
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_ru.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_ru.dll
                  • Size 33KB
                  • SHA256 8e5ddf0615b84665e5cb5b13a0d5f72167c82dc4a86cc49616ea445f6b801eaf
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_sv.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_sv.dll
                  • Size 32KB
                  • SHA256 401263a24666710b8895e0d5fa5857f7d86c4ec21595573894e07517e94b52ff
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_th.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_th.dll
                  • Size 31KB
                  • SHA256 63e7af52e0f6e41c351d33ed4928647ab3abbca3c767de570891c3ada13d4e1e
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_uk.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_uk.dll
                  • Size 32KB
                  • SHA256 cbd96676b5097470250dc8285c6523ed598ccb58a4990c78abba79d4e1a67e9e
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_zh-CN.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_zh-CN.dll
                  • Size 25KB
                  • SHA256 084a88a2171690934370cc603c0d809ffb9f0e55aeaa4055f38af2239d0606e5
                  • MD5 SHA1 SHA512 SSDEEP

                  goopdateres_zh-TW.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\goopdateres_zh-TW.dll
                  • Size 25KB
                  • SHA256 2217e104660a21c2c9be0ad68846fbb4f7ee16510ece768f055d9e9cbbd60a9b
                  • MD5 SHA1 SHA512 SSDEEP

                  npDropboxUpdate3.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\npDropboxUpdate3.dll
                  • Size 273KB
                  • SHA256 e07b2a1d2c932fc38d3fa6401ff0be653250a1e8173311a9312ef9478da28e2a
                  • MD5 SHA1 SHA512 SSDEEP

                  psmachine.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\psmachine.dll
                  • Size 211KB
                  • SHA256 3582062df2b1120e6cbe47a4c5066b0f3e0959518ab572a62f2817e55bab6518
                  • MD5 SHA1 SHA512 SSDEEP

                  psuser.dll

                  • Path C:\Program Files (x86)\Dropbox\Temp\GUM753F.tmp\psuser.dll
                  • Size 211KB
                  • SHA256 56ec8884c392f95202d07959414d256c737354ad3243971ef47e44a32f011aa5
                  • MD5 SHA1 SHA512 SSDEEP

                  Dropbox.lnk

                  • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk
                  • Size 1KB
                  • SHA256 acbfba201afd9caf68b9feec33def047f308d0f62d36ceb7a8e931d23731161a
                  • MD5 SHA1 SHA512

                  Dropbox.lnk~RFe585eb5.TMP

                  • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk~RFe585eb5.TMP
                  • Size 1KB
                  • SHA256 1507f764cc57a95103e76a884b7f40e1cdb916106d73e37c9bd84f60d4365f9d
                  • MD5 SHA1 SHA512

                  __PSScriptPolicyTest_c5tgyl14.kmq.ps1

                  • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_c5tgyl14.kmq.ps1
                  • Size 60B
                  • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                  • MD5 SHA1 SHA512

                  System.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nsmE4C4.tmp\System.dll
                  • Size 12KB
                  • SHA256 b467c725ad6653e53c99048ff35ad02a0e8cf68acb8471ee87d1f73a88a98315
                  • MD5 SHA1 SHA512 SSDEEP

                  default.dic

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                  • Size 2B
                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                  • MD5 SHA1 SHA512

                  dism.log

                  • Path C:\Windows\Logs\DISM\dism.log
                  • Size 2.1MB
                  • SHA256 95eb5b34033c3ed71fee5bf3f22be72f6a1a57adea68b2cb3194771a3a4c9b59
                  • MD5 SHA1 SHA512 SSDEEP

                  SET59F5.tmp

                  • Path C:\Windows\System32\SET59F5.tmp
                  • Size 45KB
                  • SHA256 4c95bb59380e8037887f65f25042524f78b0f39ac1ce0876235f9c9259cef401
                  • MD5 SHA1 SHA512 SSDEEP

                  DropboxUpdateTaskMachineUA.job

                  • Path C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
                  • Size 924B
                  • SHA256 16e382163a04f5d7109272bd0176293a87820318138a3ca94e6593ac1d23d448
                  • MD5 SHA1 SHA512

                  memory/1380-5163-0x000001BA5D470000-0x000001BA5D496000-memory.dmp

                  memory/1380-5162-0x000001BA5D3D0000-0x000001BA5D3DA000-memory.dmp

                  memory/1380-5161-0x000001BA5D400000-0x000001BA5D416000-memory.dmp

                  memory/1380-5158-0x000001BA5D3A0000-0x000001BA5D3C2000-memory.dmp

                  memory/1652-5175-0x00000195DBE80000-0x00000195DBEA4000-memory.dmp

                  memory/2244-5619-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5616-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5617-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5621-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5622-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5618-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2244-5620-0x00000226AD1B0000-0x00000226AD1B1000-memory.dmp

                  memory/2284-67-0x00000000036E0000-0x00000000036E1000-memory.dmp

                  memory/3912-5683-0x00007FFF662D0000-0x00007FFF662D1000-memory.dmp

                  memory/3912-5682-0x00007FFF65950000-0x00007FFF65951000-memory.dmp

                  memory/4924-5636-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5627-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5596-0x000002214EBB0000-0x000002214EBB1000-memory.dmp

                  memory/4924-5635-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5634-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5633-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5632-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5631-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5630-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5629-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5628-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5595-0x000002214EBB0000-0x000002214EBB1000-memory.dmp

                  memory/4924-5626-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5625-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5624-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5623-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5598-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5599-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5600-0x000002214F780000-0x000002214F782000-memory.dmp

                  memory/4924-5597-0x000002214EBB0000-0x000002214EBB1000-memory.dmp

                  memory/4924-5568-0x00007FFF65C10000-0x00007FFF65C11000-memory.dmp