Analysis

  • max time kernel
    507s
  • max time network
    373s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    09/02/2025, 15:35

General

  • Target

    Luna-Grabber-Alpha.zip

  • Size

    7.2MB

  • MD5

    c95a5ab682cde6071300ec764565c869

  • SHA1

    709bd30116acaca357e4a39209737bd99eb67a07

  • SHA256

    ed00a5f71e3527314904701a72657b5cc812b1afcfbdd13e9487dc3add12c689

  • SHA512

    cac8dac34ed6d05c2296009cd2bb3a7afa07ab58970e72d752547f9374f37059efcbed380531ed4f3d689b36fd5d91e90a67d243a50a0d7dbfc33e20eb4a272e

  • SSDEEP

    196608:KMVFkE8DSc4eokbV5C5BTDZasMKvjx9Bu:KMV2E8D2eokJg5BTDP1F9A

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-Alpha.zip
    1⤵
      PID:1732
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2304
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe"
        1⤵
          PID:2908
        • C:\Windows\SysWOW64\DllHost.exe
          C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
          1⤵
          • System Location Discovery: System Language Discovery
          PID:840
        • C:\Windows\explorer.exe
          "C:\Windows\explorer.exe"
          1⤵
            PID:780
          • C:\Windows\explorer.exe
            "C:\Windows\explorer.exe"
            1⤵
              PID:2032

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\Desktop\BackupJoin.M2T

              Filesize

              281KB

              MD5

              efd3fcf4dd78f7aea14d0265f212132b

              SHA1

              af5c18132b69b59952ed7d5b1857984269c9ae34

              SHA256

              de5128b351a0943ec3a20fc91cd5b57e02ba22c964c8a3b8167d6efb864ba45e

              SHA512

              3cbedf2bd2dfec681c1032581e23a304acc0ef6ea9a6f99850299e180b1d9338af950af8137a64f9d48ae724689d3e011f941ab85f6a677650e8ad7471f6cc51

            • C:\Users\Admin\Desktop\ClearClose.cab

              Filesize

              273KB

              MD5

              ae69b90fff0f525af65937268d61b4f4

              SHA1

              985039c487c9d8e2fb88bdbe87217d699495533c

              SHA256

              50e0d801433407c71d7621da78aef38b6fd62d318a374d1410f072117e47f035

              SHA512

              750a7893f3c1ffd6f7cd0151c8d9e6097e65c4d13459785325105329b0c39fba6ae0235158d73e7cd92014b9027ac771551108ee29b3fafcc73270d48a219129

            • C:\Users\Admin\Desktop\CloseTest.i64

              Filesize

              215KB

              MD5

              6515532eb4cdb72dce9911fabb791c37

              SHA1

              4b735dc3ec99a95942487f0014ed19c450aaf2d6

              SHA256

              adbd09262c742ce650d9ff0e1adb58ee59203bf54ebe6071a82e89a96500e876

              SHA512

              eb0b910fbe0ab6af9e9ef99af9f01c4c492acd6aad781faa7739a0338b5e6f24a98ff113574b000cf816da7bb45f3a7319dcbdda644b5dc9a2175e3b38d65bd4

            • C:\Users\Admin\Desktop\CompareUninstall.xlsx

              Filesize

              11KB

              MD5

              351fa7e85363a1cc301d87f44c4ee9ff

              SHA1

              0dbb4e3c30578d5ca3b3a53d677b1f0dc796f929

              SHA256

              36ef61c0af1c713e429230b451dd5704c35e918ec2fefadff1c05758cd708dc2

              SHA512

              0bc5e6943caa50228fcebaf7f1205a1236d09a34ef4527763341ad1a0e68c4a7e81c8d7b740e7572d079a937b543e4a5d6f70d4275d087f933d66068ad44559a

            • C:\Users\Admin\Desktop\CompareUnregister.emz

              Filesize

              237KB

              MD5

              feb163f5a7d8d189b3a063ff1bf9d539

              SHA1

              322da3f656ba9b9460fa08c616ea70bc317f7608

              SHA256

              da26c6e4b2c067d5c3b9cab1a05e0eaea8d00a27e8ae1487bee6debb4f086cc3

              SHA512

              0430cd2ffaeb9bc5fc982f76a1f0072faae01797bb02cc138c2fa9eaabfd68a3fb6809ee1fc59cf03fa905806ea7d063b7ed4b5e553b03310b867ada15bf0457

            • C:\Users\Admin\Desktop\CompleteHide.xltm

              Filesize

              200KB

              MD5

              8fe043696a932c38cb6fddf6db2dabe3

              SHA1

              d65e1117853cbe4d8abe705506fe86db25820ebe

              SHA256

              d3baeeef03c8869f50d7c19b9d1d671d39330ba8cd62d7d418c9afcd4b2cf0dd

              SHA512

              288806694738696827fa6c197b8efe14341a226c674b8116fda056bf6f7004376a6ba3dc91ab896feceec5fdebf209a0eeee7bd38b913fde9ec952c86284358a

            • C:\Users\Admin\Desktop\ConvertFromRequest.m1v

              Filesize

              127KB

              MD5

              1099be41356e5feb02e24929187404fb

              SHA1

              d750dbcfe0e0e86eb106266af76dc156f7832428

              SHA256

              cf748d95b580771e02a6ce1e04abce5afa9431c07ac49173d24b7be1525ec50b

              SHA512

              1956bb7efe5bd78d58ad9f04d785974646d4f9f52c7effd74a9dd4f10ce3bfbc2151fe6b02b0e55fc27724388e4fad84880256cdd370c0a3242641678b781586

            • C:\Users\Admin\Desktop\ConvertResume.bin

              Filesize

              113KB

              MD5

              064d4551699a11c63125fbadc493bab8

              SHA1

              a51a1ef599317cfe0ca41cb65a3aedf8b64b0209

              SHA256

              0c8b5c8c5c66b497c5bd5814c991d25551d552744e921e710c9d2139222b6502

              SHA512

              b41e64e0dd514df5f76e3ab58e3bfe141d94d78af0687233c7873f07253b52dd923c97f2808be41d756140e2fba8d657ad0d8a23a6150f6f947565e3b7b6cbc4

            • C:\Users\Admin\Desktop\DebugSubmit.exe

              Filesize

              266KB

              MD5

              03355c28ef186c92d611211b674ce864

              SHA1

              4901086132d6c08fe5aa3ef2079b7832c3b9938a

              SHA256

              6b97ff9d89f03628a225738c7b9b5b1308c476b6d7b86e3559dc6d01e8b9643f

              SHA512

              fc0ca72869e880976a0e065bcde0a544721e3114a471a76fbdd0ac325b3cdcccd45da7279ad5d6bb249ee69eb4047011933e6dac7d801e9d5a72f24118f33150

            • C:\Users\Admin\Desktop\EnableBlock.emf

              Filesize

              164KB

              MD5

              5ea6ce45bf91d5c764738527de0fff21

              SHA1

              a8283ab5e12b353fe92cd9856054032a39263bf3

              SHA256

              a06746bd0a15d46dd763aa0c9a5a9fe1a67c6010fb4cdf5981f5f1ee4110e1e3

              SHA512

              d7b88b6efdc2ea7ec1e8ff6015913244dafc5938910e64bc3f7436a8e855251c2184234d482ebf887dd171a65c86e619a4745b74dea32f4e740e490374f51b4a

            • C:\Users\Admin\Desktop\ExpandInstall.xlsb

              Filesize

              288KB

              MD5

              76f013829490583fef10b4674a70da58

              SHA1

              7b35b27e1097f163beff2e067a0ede20372fb4ef

              SHA256

              e03659a242525c1885781971c917760f181c97882df22186cb82cc802d15269d

              SHA512

              99a79fee77dd1952252734ff8e781fd77debe1d8c14520a8129ec4d4de486d7cd66f365609bea5c73651ba8849bbc2813b39b6c6bff3dd7658a0f2b66fa977bf

            • C:\Users\Admin\Desktop\ImportExit.docx

              Filesize

              222KB

              MD5

              5337535b109f00ff7d5ef124032bac28

              SHA1

              d9636789385f9255972ab99cb3670eee74518525

              SHA256

              6542843ad5a279dfac6a576d72a94c0d704864c8edd4c7f104cbe7e942a89380

              SHA512

              037e4e512f1a63e90253bc08657a3236db428528e6662e82ffbdab9f94a4d1aba45ae52b4bfcf239b715fc1097866b8d85e0a73d1e0b3c4630c4524fedb6b04a

            • C:\Users\Admin\Desktop\OpenConvertTo.xlsx

              Filesize

              208KB

              MD5

              6f3514c10db316602900d316da992015

              SHA1

              68815cd111e1bed93f006c91288eb20af801f0c8

              SHA256

              2202b53e353b516eae168f39b4034c76c0d557043734102ecf03aa6d2b0ecf20

              SHA512

              ee240ded3e746c09580031e1d0baa99e4603a72a395a41adba7d1aca0e6dc253e2ba9b409b8d80e4711fcca11ea91cc42bf4e204df185f9f9873cddb189796f6

            • C:\Users\Admin\Desktop\OutShow.ocx

              Filesize

              186KB

              MD5

              5222cd3cfc41d2f42fca061cc30252c8

              SHA1

              29cde4f986d556f79550297276b745d131e4bb9e

              SHA256

              ba1481fdc0c2c20113da62dcffbd884a2a6bd036a2b275ab4302d8657b906f94

              SHA512

              7b6790d72bd6962b9db94ad3ef5a65a96f1c81da820bc16b0ab48aabdc9efb0be6a6b4e59b0b83e59160d6cff15abdc2fd31e50a700241c6cbf183fcd366f4ed

            • C:\Users\Admin\Desktop\ProtectNew.mp2v

              Filesize

              171KB

              MD5

              9e6fc6fadce5a9e207417b6a04038801

              SHA1

              034ca0851d4f19332f38d6980aaec96e328c61a0

              SHA256

              5b786ccb87bf5ecf21f64d697dd520d2508518ceb874f09221702e259bebf16c

              SHA512

              66bc55367ba6171b8cd23dc4700e11b1580e737fef2be92e6e284758c818951a9db22fe2b3ff44bda2b7bd79fff5b510202b0772f43f9fc8493dbbd19c8f6f43

            • C:\Users\Admin\Desktop\ReadDisable.ppsm

              Filesize

              193KB

              MD5

              122c44b7ada6a3f15eacb94a1b4650c9

              SHA1

              4203341769ff52f95d59e59e6ea5e8d8b80fb703

              SHA256

              ae654b0c2a395b78d22c51603cf43dafaf2de738c341cff3637bcd815ee89f86

              SHA512

              5af0257d0dfb4a979de77a9a870067735056448dfb7024a94d4738fdd98421757829632469ccb96938f1dec2efa88d188b7049600d38c54ab565aa743d044ce3

            • C:\Users\Admin\Desktop\ReceiveCheckpoint.scf

              Filesize

              252KB

              MD5

              f3cb4c08687ab8abdc9d2e0d3dd17555

              SHA1

              daf058a3fb5c68a4799d1b500884d3ab6120828c

              SHA256

              85a6d1f190469ba0a945a6c84c0d574b12dde9ec3d6e6abd529874e86dec5cf1

              SHA512

              ca073d0d351177d2b42efc89191f6852b03df623ac677092319a3c6994ea7584f0f3edb3cacdfc5564f7ffc64e8c66505f62b7ab2b1e62873c45227d4fafb242

            • C:\Users\Admin\Desktop\ResetRemove.wmx

              Filesize

              105KB

              MD5

              bf12e20fedf1ca315a7ccd5a28d003de

              SHA1

              06f81c09fd44971ac77d317b429c2d574d3f8955

              SHA256

              b2dcbaaad82a933c8d6f3a01c6efd80d7d3225d60986870ed5583360c6c0162c

              SHA512

              2b545e61ec6ffd959d5283c27ee3443644bc751997fa0a15a9542946f586608ac384fe6cff972fc172546ae9cdafbaf98c5d033144714e7bf2e0ac0d640e4061

            • C:\Users\Admin\Desktop\RestartConvertFrom.docx

              Filesize

              21KB

              MD5

              39ef42132fc96960bb44159873787a32

              SHA1

              a6c5170c07328bf8b620c65f37f13e8a72ec3f7b

              SHA256

              3f867e793a0ccf241b5bd665ed261e0749afe113348c6cdc0b8e78faa6b9bddb

              SHA512

              ff9815a4925a2da32d472caa09eae0e3c806ee4aaabeba55087221067eed997556920e836404463ebffb0f4985d9f08ccf5e71945198abbca04727bf75112374

            • C:\Users\Admin\Desktop\RestartUnblock.mpg

              Filesize

              303KB

              MD5

              9f6ab036fb95bfe35b6d117c448106a2

              SHA1

              54eff5a0a892edd61dd769d41b87d610e6070385

              SHA256

              87d166a8a3559a03e25e6a5c58c525172b7c71eb82eb1cec50349c1d7cc0421b

              SHA512

              0dba95057560212d6773ed4c40808648233c30c1a6f664cc06c6112d6124d58cb4758f686b521ee4c7c1b0325ba70f4d5a0b9b657d6553fefdc6f6fb5a49e9ca

            • C:\Users\Admin\Desktop\RestoreInitialize.temp

              Filesize

              157KB

              MD5

              cb90d12935c74e3c1df9bbca3987d8b6

              SHA1

              adc59b84f6f9bf2acf22313a8274ef36ec652530

              SHA256

              7e1566b334a153f836ca6cd106e81d49cb712658a86c4e38172e03c0d32b6a72

              SHA512

              4ec99fd61f5b3f6c890f41735199b8a2fdb07d48aa526376837d597a30780adc6e9f32c591437fc3f6316889b8539b67d9043d0094e45e263ca0e99d5fdc5d6f

            • C:\Users\Admin\Desktop\RestorePublish.bin

              Filesize

              230KB

              MD5

              e345ff6a941cc32f3a4076b8f05ae924

              SHA1

              47f636c14ba18d1a1d99974ab842d0168524b0a3

              SHA256

              726d4f39d3334369187240f7b92031304e7d2325b0044e12f099ee7fbf1ab529

              SHA512

              25e12959f9bc3032301c4946a52a99028f092015a1e4082a588f7b23a8b1d602c11da3c09f930c223cb898f5b8d11fedeb73ab53e33f582629fee0d1806f1fd2

            • C:\Users\Admin\Desktop\RevokeLimit.aiff

              Filesize

              149KB

              MD5

              6863a09722df133af2a59009bd15c77b

              SHA1

              71e8ddc99e1c92d14dd85d6a91933000c57f0d31

              SHA256

              aee31b0b707fc1099848259b173f14e17b6794b2394c891ec84f4fd1baa0d0bd

              SHA512

              f76ab07cc1dc97721194c7f667887f257a84f977f51fc682a700a6b35598fad62580e35d2b9387cba1979470742610e7274c64f43fa59a860f5c47b99c9033ec

            • C:\Users\Admin\Desktop\SetCompress.css

              Filesize

              120KB

              MD5

              a2b20373bb274fe8d8a2b855a2942568

              SHA1

              4266f843bd3914fdc02d29527dbf210699e9ea33

              SHA256

              e4db488d3e53520141922f881b01eed78e68cb434a9ff455c70aea45fae74619

              SHA512

              e16542310274eb6e920c8d16cb95f88c4a4479fb470fccc050f645cc9bf892b70e802a7d417af5feb6c7a930edb6dc1bf69d183eaae08f05dc17a4208091318d

            • C:\Users\Admin\Desktop\ShowJoin.ADTS

              Filesize

              295KB

              MD5

              70a7ba085ae6e34fbfc8604f68254e1a

              SHA1

              a39b3a9bc8d413612d93e3299461426036cf8491

              SHA256

              ef7919e9e6af881619f6de70a20c5f094b32315fb6f90d648b1c5e5f793b3500

              SHA512

              96d92d308a3f985c0d36f8855221688dd0015c0b925992086eaf85be8f110541f814b95c027248dc447c5530a01e51eba82668703cbd6635d229b687633b1c63

            • C:\Users\Admin\Desktop\StepReset.xltm

              Filesize

              142KB

              MD5

              7e47bf6ab705d8808dcf056233f68ae0

              SHA1

              a4e1c8d3836ff8827abd0a294a987f7a3939cd38

              SHA256

              5c82be8d9ddfc8be902e30dbb47471bb70dd9f3e641a2ecd707c2eece4d115df

              SHA512

              ab21bbdf5106338534d3cfd50c9a989ff234408f9808a2e647379a6dbc7c1438fdcef26dc91353884f889211ab5d661f4735d7a8633ac5c3cf9f3eb95b624788

            • C:\Users\Admin\Desktop\SuspendResolve.MTS

              Filesize

              259KB

              MD5

              c5bc391b451668ec949fce0c23dbbc5a

              SHA1

              87e4701ab9a8cbe7c2cca4d19ec8f80ee62abcfe

              SHA256

              3d53460e66f831b338a439d3a0a66088563a86b49e3fabbb21750bcbe25dac5a

              SHA512

              d66bec63d1e63102849634c28ff6b7917c9632473a06e7de3987b6b2b585cf954a28e39d4108c6c75131c2f25c9781b16e3d4ae395944d885c3dbc8508a1c169

            • C:\Users\Admin\Desktop\UnblockLimit.mov

              Filesize

              244KB

              MD5

              0103a9db2c98e4fe67c8799eb1a88bdb

              SHA1

              7ee7ed5fde6fad138f9c8b07acdb16c5eb9942ac

              SHA256

              35749a48dca8730b292978563aa693186d0087026eaa5e1717f0856586abbb15

              SHA512

              f627cea97f24e55a6d49b7ed25cd5a66056d6c928b20089914756ae390425fbab0f405cc536974fb52acf770bfde785b394f2b243fc9274dbd71637f85204b8a

            • C:\Users\Admin\Desktop\UnblockSubmit.vbs

              Filesize

              416KB

              MD5

              150a8006b6011f3c474dbf79df2f703c

              SHA1

              af5d533b28bc38999b7497b491f4080986a1a955

              SHA256

              8f84af4e0e2ea85ec0402a32947d3fc7772ca5b70ae3bee2fc3f4660986f1760

              SHA512

              129bb6057993c49ce17ec4aab0db7c138a6b19327f111056ab4ebf722a405565ffe6901a2fdb0e9e746166006bc0019b9f577410f3a6a2e0514467da9776124e

            • C:\Users\Admin\Desktop\UndoInvoke.wps

              Filesize

              135KB

              MD5

              3c24eb685d8fc960ccc367889dce29de

              SHA1

              71db914b5394438a8d3cd50408f9eba9c108225d

              SHA256

              b39422444d837d017b830a1b6b1cd68b118437b5ee99bce02cd6a9ff88586fb0

              SHA512

              483a401fe6ec5f99b761bea7084305aa9c1bef86eb6688e4531cdf5ad7ce5d40dcc32d04ee5017a86a946a89138d1948269529d6663bdafb8eb2857328c3b6b9

            • C:\Users\Admin\Desktop\UnpublishLimit.dotm

              Filesize

              178KB

              MD5

              35be8405165e8b5fc07eb705e83fd91e

              SHA1

              e275486d55a5d0dc0d37d720495abe83ce1d034d

              SHA256

              ce33d8f8049bbf17939c0b937b063f7e64e120f032b21990b93c0d7ab8585c45

              SHA512

              51846d8416ad11340ead36a78ab5e762e3b813979c879d1adbdb19c7bba97090c25b9e990745ac675355105cdb8e018a60b633f5a7bc132911df358e7fb742e9

            • C:\Users\Admin\Documents\CompareUninstall.mpp

              Filesize

              575KB

              MD5

              16ea29ebcf64158e44000baebd1e40de

              SHA1

              572ae8b7b4364092d54aae0af0b4248623c24a4e

              SHA256

              773eb0e0ea90c32362ac8a8588d122c6e119d1820804ed0fcb0242e5dc3c3a3c

              SHA512

              447142df7af15d9fa89c6398679c538138032d36e509f1f27c7177c8d1553d8bb372327824abb90ce97b48507f3fb78894769930db5293639e8e2d8390b0dcb6

            • C:\Users\Admin\Documents\CompressExpand.vdx

              Filesize

              1.3MB

              MD5

              9a7a817ab781b822d1c07cf36fb9631d

              SHA1

              f823e77ea04e6397046900bcfc69c98e561f6846

              SHA256

              20cb876d29e0ed0be8f2a9e311742ebbd9f098190587619b57c4047ca9eeaa11

              SHA512

              c0d92e0b5ac47fda0d6d6b4fe002d758a5409099f765a0800c7a94ef53ee2c24a896c626f190621986fa8b92ffbe6d4a39ac029d8b748cc9c259f76c5ca59198

            • C:\Users\Admin\Documents\CompressRegister.vsx

              Filesize

              745KB

              MD5

              3c67ae4c81e66f4c3b588d1b6c84036b

              SHA1

              a55ca14867f7c28e7de35c1adf73a264fc7c7e03

              SHA256

              7173c0432eb2c6f789a9ba68667d8ecdd09d49267ddbddc9c228d7a8014bb68a

              SHA512

              41da648fb9a5c9d2ee864ffcc7b5a26887d108886c566f85d66d67d13b89c59e2237f234b10d7168b70fd5b21defcab427ba529e77830548b4f3ea9cd84f4643

            • C:\Users\Admin\Documents\ConvertFromFormat.vsdx

              Filesize

              788KB

              MD5

              8af67a36f59e6da49c15fa9ef3e7a110

              SHA1

              6cee770ab68a775a3808edde41cfd8dc9cde2568

              SHA256

              69bed48ebd79175c94b6fa5c0539d8f05153820697ea4126423f724a40dc0fa1

              SHA512

              a8a6e54ef3ac59c98b51cfd0360a6da7f8f521b7f293e294ac43448c7240795f12bc5d5596b4ab1de7a2396ff273a783f27e7a69c9ad0f6197e18e4c11598457

            • C:\Users\Admin\Documents\ConvertToGet.xlsb

              Filesize

              532KB

              MD5

              d3b5cf41e0484fa06c997faa1417e38c

              SHA1

              2115f814cfa781e1cea1efb2a83ca42ce659bad1

              SHA256

              8f0afdc3039254374a2303dd183b340dfd6835c3c5bcabc98a85e27dfb3d106b

              SHA512

              5ec89ed6dc5d322425840f7f2dd9c67fc7337da969954bbb8a18714ab55e64652eaf4e2dd590a60b6ca486e8995e79c5596f53fdbb689579994eb678d474dadb

            • C:\Users\Admin\Documents\DisconnectMerge.pdf

              Filesize

              1.1MB

              MD5

              826b7e791cbb6eb41cd74a30cd91a790

              SHA1

              1c437297ecb887b651474d85045c943405c349ca

              SHA256

              2361c9f38356ddd5ce367aa82044a10218e13b8540b7c5767d96cc54d5512b7e

              SHA512

              ed6e8ac4756df485b5e90d175d039dd07bac069296c0fd26b648ce516851f20a72f86c334dd214807f7f547086a85e031b6afabd3fb9a1b940a4d20ed6e0d064

            • C:\Users\Admin\Documents\DismountUnblock.wps

              Filesize

              1.4MB

              MD5

              e4b7bf240783f7c6309fa0723929b189

              SHA1

              efc8ea07c9d2838ec83f8f6e902fda8d4d11fd57

              SHA256

              bb97c26e03b31589425932c3351d3c7c83c8ba4c3c3e8171364e219fa1f32180

              SHA512

              19e1a52572bafae3a1ccfa468ccdb78e0e7ac75d58eeeaa38a9c141c40f6f4a96ea02a9d8b057363e642a375afbce55b3819cbd09c8ee0143c942945a4043c7a

            • C:\Users\Admin\Documents\GroupUnregister.pptm

              Filesize

              1.2MB

              MD5

              d7e83f75813f70e237ef96688405c69f

              SHA1

              4e158c080a65be48fc95429b6cac38d52c3c06bb

              SHA256

              788f9e840e04f06e8a85cd3fd9cc41c3d1c6a6530807af584206143be5da1424

              SHA512

              56a8dcf935b51354a766d8d2f9f7589239faab42402e3cd91f5ad3d38f185ec4b888cf924709d45bba41ca4222898e9e7177e8535eef38ee9901b90761116dc7

            • C:\Users\Admin\Documents\HideEnter.ods

              Filesize

              702KB

              MD5

              0f601f9e3c4709ee472f6d8702d46e52

              SHA1

              0939c5f64bf55a90a03d80b2b58379fca8c8d546

              SHA256

              961eb5761b073e01f8243ffdaf6f70214cb8ca2fd68a6860b3df56f162c07742

              SHA512

              e1f276d7b097bde29457a74126c9e5fde26e2e2fb3d054e1cdc148ba58c0a360781c6eb3b8843f4366590822ed415b640446e5635b216e3fe836b0cd1f7e9125

            • C:\Users\Admin\Documents\PopSet.vst

              Filesize

              830KB

              MD5

              68d2a4da44c0a6f4368762da1b94f893

              SHA1

              5694b5dd5a37c6d917fb3943213450ec1ee3143c

              SHA256

              f9f656e74dbc8872486183d0d09d25df91eb70c956e754805e265102ffc55e25

              SHA512

              a50c68a1d8f3584b8906b7e429821c006dc1865a984a7f656b573a926419be307c78e88a4798425ac313ab292c6a786cc7101ef0b5484658405c8570e472e075

            • C:\Users\Admin\Documents\ProtectUse.xla

              Filesize

              1.1MB

              MD5

              0a8e30c64048591763528ac01aa4d873

              SHA1

              aa49b92307564fe83d72795e4a03ad4edf68c287

              SHA256

              aa488c6b7960ec087d6a0483aa082f906a35fd2865a3efd2f5ced5ff520a5ed9

              SHA512

              d85542a5af96655a80726521c42988234467bf521183f68dfba6bdd06c9da3e51966baf4216d7838e0cfbd5dedcc4f357cf476f08137fbad0e0b8038bc83bcd2

            • C:\Users\Admin\Documents\PublishBackup.docx

              Filesize

              16KB

              MD5

              e6006d81ed3f507b59768d93633e820b

              SHA1

              cc1d795592c5d539d2b2cd960801cba2f87d62f2

              SHA256

              ffcc9ff66de60df3d706602072639493e4f8f0e7766adef203a23a7ba8b1f665

              SHA512

              a2816acebd938a18291c2557650ab0d3eab128eb5e0f4f80876e55b2282f0ffba901a55ba0de2d32e7d58b0dbeed4607bccfe863657b5f0df18b93ae437f7c51

            • C:\Users\Admin\Documents\PushUnpublish.ods

              Filesize

              1.0MB

              MD5

              5c611ec0f10ee3e5074a66e391192f5d

              SHA1

              34e2a7e9cefcdbe9a055e38115a45e8ceb7ea26a

              SHA256

              c4784f3ed237d563465968439cea66ee726733c5b6aa9ad312173e0271a218d8

              SHA512

              baf97333998143c9f727dec2562aed9483c50ad5c54d026ffa7058365dbc67971fa7d0ce52a1dc39a7b1478ba6c5b110ad1febd3589243c0013089247d521e78

            • C:\Users\Public\Desktop\Adobe Reader 9.lnk

              Filesize

              1KB

              MD5

              1835e5bf4f207fbcc9bf394029eef6d9

              SHA1

              5fa90dcd038a0fed6342502fab5d2de641472c65

              SHA256

              03ed1426f4cd4fdba73a909c8e60ec42e2e9f9ccb3d478ac67e53318b59206f3

              SHA512

              69ab114a69483c3a3b8c44f53f3ebf2b11f90e35663d4b59a3adc75865b3b2446bad9dd26d79d84e014a0265f9fab2023929b839736ed1c49d96f6f37218ace2

            • C:\Users\Public\Desktop\Firefox.lnk

              Filesize

              931B

              MD5

              5e68918ebee58fb31454b0f195352005

              SHA1

              1c7455b4511c93e31745fd638c80ea821f657d08

              SHA256

              81df36cef3e2e954d159413f254b2f550a32f86fc6367ec7b168cc0bedd7a333

              SHA512

              35068825b78291ad8d92086633c3b6e6fc268217faa7a442d716ddfc6a54922f883d1404acdf5e72b5864d6e12d1085a3eb7018086d7bbe25136d57208998acb

            • C:\Users\Public\Desktop\Google Chrome.lnk

              Filesize

              2KB

              MD5

              089de7dafd23c3cc3d4d1fea54b387ab

              SHA1

              0530beeb8a452c37396234bc39e7b8ecd49e5b96

              SHA256

              42f1386ea546692b8798a346b50d3a2998a61a0d014c0bcc347025dbbfff28c9

              SHA512

              6e7938a890854ded756055d02f2ad1e6c8c898d1f01608acc717f7ff4bec8afc2b21017cf94cd234aec99391a7eb52bbc08dabde4bd94ee20f44d439ce4a622c

            • C:\Users\Public\Desktop\VLC media player.lnk

              Filesize

              878B

              MD5

              d904af1977a6f4580bb051765a3545b5

              SHA1

              269af05f54d07743545d44580c00390ac9a1ed85

              SHA256

              9b41154ca85e90451bb0c7ff2597fb26e62c23694b94a8c747608f9a63994491

              SHA512

              a4cfff2d13dc7a50ad789e7de130291c80fdbd777479dfae5e3fa181aeaf9693f6ef6478bcf81f0c82723b925b071030d7fc4c88d82ec62af3d0ab6e89856f31

            • C:\vcredist2010_x64.log-MSI_vc_red.msi.txt

              Filesize

              363KB

              MD5

              f7bd4c92f82693d63ce09c049c4664ef

              SHA1

              409bbb90535a137cc92e5be52a102b028020a44e

              SHA256

              a646bdc1de6b5c07c24b51fc3274e80a72d9a83809350e54cf9ef54f4d2e16e7

              SHA512

              4adac5eaa574fe9a566d05660b51169b7d76ac60964a5b893d1dce450a9ae1731e35a08c72324896c2b56e25f2fd2b8533a45ccc05f311b15e3e79b403a69635

            • C:\vcredist2010_x64.log.html

              Filesize

              86KB

              MD5

              4765e329b71fbd2b87622db80cf205d5

              SHA1

              97536694941929f6e55dce48fea4683560eb7a50

              SHA256

              82aecca9a2d64ed5fd5c37a904e2852a88368530bcc5789186a1f6b09bb2887b

              SHA512

              fee9fc24a37ee941d32d708f4a339b76b08d4ab5386a05acd3d07ace6dd0389ed784c74bd05c100b378a0304bc27471f944d08cc75afa85b821238244757dc60

            • C:\vcredist2010_x86.log-MSI_vc_red.msi.txt

              Filesize

              378KB

              MD5

              947f735d4d0e3db1637ea8f2074b0374

              SHA1

              85715b9ee4c3f7627cd3d5d84522a12c4f7a600c

              SHA256

              c5ac091c1d6deb2adfe94932ad9d3a9992a5ca58ae764a5fe361e424a17c7925

              SHA512

              ace933ede851f4f6dddc2d81f2b760b471a788d6e064c4581abb8f12cd025175a9165712ee1a4cd326aeef7254a9a4149460990cd125b61b24914a7db98540d9

            • C:\vcredist2010_x86.log.html

              Filesize

              81KB

              MD5

              f840ddbeea06a9f8c7a952b9cc09b77c

              SHA1

              62507de59397bae6831213d8693057b495acf376

              SHA256

              a0901d7f688c09d44661bd101636f435818168894f412dec2c56017795e8cbe4

              SHA512

              4c52886f6427438cd185aaded7b51ae2cd1376242a2294ae69820176b6c683a05cc84d58a52c39de273a14062506bedc34c81175314ed7517bfc263c8e052982

            • C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log

              Filesize

              165KB

              MD5

              e51530e65931247278acce1089a83c94

              SHA1

              4f9bdb1bda827d3275df8ac135c032f82729f083

              SHA256

              c1d0b8c9c35cd06695a9f413e41a870131228ef43252633799bb129de1a468ea

              SHA512

              4df28773a9fc5157200bfa5eeb271ea3161f64cc67c1167c4c6584b8e3f8e3b095408755aa9e9fdd6eb358ec18a61b10fe0b12e8148e8f795cab776f6da91933

            • C:\vcredist2012_x64_1_vcRuntimeAdditional_x64.log

              Filesize

              193KB

              MD5

              2fd14ca4a49c216c508ef9da5dd5eeb3

              SHA1

              a0ec036109c5d2b1265cc770edf8f7fd05addf8c

              SHA256

              461e8dac9a7a898a964c3f932347985140c34150416fda71a68b4d7884614f36

              SHA512

              337bb79003661a7877428412af5465d68ffeac59e69fb0195d458bc42ca3b2773dfffcb23829a4a208b80bbe50d16b3ebbc5bc28dcdb860b3da4d1cb3fd83af1

            • C:\vcredist2012_x86_0_vcRuntimeMinimum_x86.log

              Filesize

              168KB

              MD5

              f90b326a6e03e684570c11c9211fb2ba

              SHA1

              82cc9ac4ab38ee928d98d5e714b717189a2684ae

              SHA256

              65498e483784c2dd2390e897b7fa433a2d06580b2d115bc621e2826c61b6a812

              SHA512

              57ce985fa5177e49cfa2cb1a5752b0d17612cb45b93bdef6d1199eac451eb6ac589bf8e3666eb2763fd122fcd7e4dd83f9b3a21b118b54e2c1c63e86d79c21e3

            • C:\vcredist2012_x86_1_vcRuntimeAdditional_x86.log

              Filesize

              206KB

              MD5

              8060b8e681e3fe5c59c3211a67bf504d

              SHA1

              5c778dc6afb02d19456ccc35f931aa672ffafb3e

              SHA256

              4f9dc67315c4a227d612c0e9c22c6ae0e7ad2be7564922e4c99f768134337778

              SHA512

              dbdc6a35462520af6e35399596e2bf03452def266838207caad075cd723a7463247ccf81d459afdc782cf0c5ce8962a4c6849c9e4dc5be5ff05d719077384a1f

            • C:\vcredist2013_x64_000_vcRuntimeMinimum_x64.log

              Filesize

              167KB

              MD5

              353efa863e1825afd2aee8ff1b8c95c5

              SHA1

              e57b5e04789c7219643b43160dd646d3cd15aa9e

              SHA256

              1fd15d5031663fb3da4e045077c0b414c82aaaec853210e3f17da960f602dbda

              SHA512

              2993a92e1e68bd7b76a858285458de62e655888e522dac5c5f452f2b756e9add17bb112bc49387413f9995f2121e2d3d993b4050ccee57172e858ed347e339dd

            • C:\vcredist2013_x64_001_vcRuntimeAdditional_x64.log

              Filesize

              188KB

              MD5

              31b2b785d59838090f5717ed12168c1e

              SHA1

              a84a50d4b3596c553ffeafe22215e30ee1b60281

              SHA256

              b38a0fac51f0e4ff4593b29c19d752164237cd348e11a3687caa84eeda3acc0d

              SHA512

              39c8e6cbd10a8e21b6bd709a2fe7d431a01ace65bdbe43cfb959e9105cfa3bac34c0444cbf5eb45cbbf222abaf581cc501819378c9278935716669dc52489d59

            • C:\vcredist2013_x86_000_vcRuntimeMinimum_x86.log

              Filesize

              168KB

              MD5

              d432d322879926a144e311d7f4a9d500

              SHA1

              9562f579e898d2395a6188a8ae728e6ad4b89530

              SHA256

              9cc4aa4140ef5883fda6dd8401490e9fd6d036ed96038ccd20875ce18cc88c4a

              SHA512

              57f3e258875830600c7d3a07771950a9038347a367258bfc047116250026440e94d9e3814e133484d6cd8f94e9b951663eed961e1872967f076075cff0b60363

            • C:\vcredist2013_x86_001_vcRuntimeAdditional_x86.log

              Filesize

              196KB

              MD5

              791af2d228b8e8920124590365b5d517

              SHA1

              ef5f2a0fcdf7ae7bf606af810b1401d4a53e57b6

              SHA256

              545feb8b7b32c45a2e87bddcf79a6835203d03abbacaf84c3dfd41b136a74b02

              SHA512

              0ac8569086ce448c27b7e428261eaf692e82a98406263fc7e431a1bf9a4fdead5aa145722ec0e0706f374e23dc3af6cd59d203f13b281023988656c28a427770

            • C:\vcredist2022_x64_000_vcRuntimeMinimum_x64.log

              Filesize

              121KB

              MD5

              61cddc550569197fd896bf1e64aa2054

              SHA1

              f523ed85cf870bf311c2560e10d3995de62dba21

              SHA256

              2f29afc8a77767e7b608bf459bf3980cdff7dbf715bcf78d5973e9fa101502df

              SHA512

              b6c9d6205692e3c030139f4bf894c6b30c91e0164613f68561b21c76d41c01a91553feec2d372be07aefa78c07b511db233a30ef8c27f3b3e68a04b2ced37bd8

            • C:\vcredist2022_x64_001_vcRuntimeAdditional_x64.log

              Filesize

              127KB

              MD5

              a0b2c3d3add6cd3ca03e8e15128009f4

              SHA1

              edbb20df2e787c6e1dc49593b8f08f9ce4db0271

              SHA256

              909968a60c9de4d1818cb10c89bc36132bf32e9d466be307f958c07256935364

              SHA512

              dcfde60c97359255c8206b58ab39f9faf296d078787a3f3212c7e3fcf79cda648c8e68ac09e14627099a539f3414e7a30375e34aa312abad0fb8bfac32e607d5

            • C:\vcredist2022_x86_001_vcRuntimeMinimum_x86.log

              Filesize

              121KB

              MD5

              e8fd8956ad36c48b470adcf80b3d9944

              SHA1

              ab298358dd4e9ac1414b7f16388b99aa55cbe6c2

              SHA256

              28fe6ccda169c36aa02ca2c8db562ce96266045cd53c0f97925fef1cf4e46675

              SHA512

              88b98716722cc957c952e017259b83dc64a262a9ad8f201f498244ca7fdd322a13487381c50474f755887d8621442ab24c4596c927bafd2322992679dc49f76c

            • C:\vcredist2022_x86_002_vcRuntimeAdditional_x86.log

              Filesize

              133KB

              MD5

              ece061bc65797b00ce0170d50d6da850

              SHA1

              bd2997b14a223eb2bd7ccae31ed35886043de432

              SHA256

              4dd5e297c2163caf0f231981ff89837b9e3ebca3245cd05966e7f6bd9f99c838

              SHA512

              e8637428e42fc8cb3c62aa8a21810c4d03b9b9bccbd5dea8fdd46ad1f076a0856aacf95068d7cb48925a81244f1165143cccdddae242a018c2b9b65c4fbacd1b