7d6e42a390910baea993d5b264bd162e5b04c78a16eb8ec670817e6471b569fb

Resubmissions

11/07/2026, 23:52

260711-3wxlxsdt5z8

11/07/2026, 23:47

260711-3s8vsadt4y6

Analysis

user interaction
yes
max time kernel
91s
max time network
95s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 23:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ToolsDownloader++.exe
Size 17.3MB
Sample260711-3s8vsadt4y
SHA256 7d6e42a390910baea993d5b264bd162e5b04c78a16eb8ec670817e6471b569fb
MD5 9af365d08698a65e884998c933834a14
SHA1 c5be6763d612989016a5b82b60dcb68f96b438db
SHA512 25ef310208369844719d75d0487c0b3d83ea82153c11ca7ec4d4245954c458d4765fb843ba336268a1d1fea3c04b56820b921ceed9f47f8c808fd698d469a39a
SSDEEP 196608:rgRG1QrtdhSO0whEIAmmnL416cAEpL8cCvIw:rN1QrtdhSO0whEfmA41tAEpLjCvIw
TLSH
T19307A6776100C07DCA884074C281CF5FBD2828A56AE25FC3C49576F63E9ADB86DEBD46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

costura packer

Malware Config

Signatures

Costura .NET executable packer 4 IoCs

Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

costura packer

resource	yara_rule
behavioral2/files/0x000e00000001c505-288.dat	costura
behavioral2/files/0x000e00000001c503-255.dat	costura
behavioral2/files/0x000e00000001c518-254.dat	costura
behavioral2/files/0x000e00000001c524-253.dat	costura

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ToolsDownloader++.exe
"C:\Users\Admin\AppData\Local\Temp\ToolsDownloader++.exe"
1⤵
PID:3812
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe"
  2⤵
  PID:3588
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windeflogview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windeflogview"
  2⤵
  PID:3728
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\winprefetchview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\winprefetchview-x64"
  2⤵
  PID:4340
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windefthreatsview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windefthreatsview-x64"
  2⤵
  PID:4836
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\executedprogramslist.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\executedprogramslist"
  2⤵
  PID:5624
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\lastactivityview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\lastactivityview"
  2⤵
  PID:4980
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\fulleventlogview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\fulleventlogview-x64"
  2⤵
  PID:1844
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\usbdeview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\usbdeview"
  2⤵
  PID:5800
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\previousfilesrecovery-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\previousfilesrecovery-x64"
  2⤵
  PID:3324
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\regscanner.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\regscanner"
  2⤵
  PID:5824
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\shellbagsview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\shellbagsview"
  2⤵
  PID:2044
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\userassistview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\userassistview"
  2⤵
  PID:3068
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\taskschedulerview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\taskschedulerview-x64"
  2⤵
  PID:5292
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browserdownloadsview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browserdownloadsview-x64"
  2⤵
  PID:5444
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\JournalTrace.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\JournalTrace.exe"
  2⤵
  PID:2384
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browsinghistoryview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browsinghistoryview-x64"
  2⤵
  PID:5192
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\MRCv120.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\MRCv120.exe"
  2⤵
  PID:1972
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla"
  2⤵
  PID:1504
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\bstrings.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\bstrings"
  2⤵
  PID:3920
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser"
  2⤵
  PID:1464
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\Everything-1.4.1.1032.x86-Setup.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\Everything-1.4.1.1032.x86-Setup.exe"
  2⤵
  PID:6128
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser"
  2⤵
  PID:4080
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\VSCMount.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\VSCMount"
  2⤵
  PID:432
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\DumpIt.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\DumpIt.exe"
  2⤵
  PID:2392
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd"
  2⤵
  PID:2312
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd"
  2⤵
  PID:4352
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SumECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SumECmd"
  2⤵
  PID:1284
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\PECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\PECmd"
  2⤵
  PID:4240
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SrumECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SrumECmd"
  2⤵
  PID:6080
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AppCompatCacheParser.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AppCompatCacheParser"
  2⤵
  PID:5232
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser++.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser++.exe"
  2⤵
  PID:2740
- - C:\Windows\SYSTEM32\schtasks.exe
    schtasks /Run /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser"
    3⤵
    PID:7972
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\RedLotusTaskSentinel.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RedLotusTaskSentinel.exe"
  2⤵
  PID:5808
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\PowerShellParser++.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\PowerShellParser++.exe"
  2⤵
  PID:5248
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\JLECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\JLECmd"
  2⤵
  PID:2160
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe"
  2⤵
  PID:3516
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\MFTECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\MFTECmd"
  2⤵
  PID:1052
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SBECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\SBECmd"
  2⤵
  PID:4852
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\LECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\LECmd"
  2⤵
  PID:1684
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\VSCMount.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\VSCMount"
  2⤵
  PID:5920
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser"
  2⤵
  PID:5856
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd"
  2⤵
  PID:2952
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\EvtxECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\EvtxECmd"
  2⤵
  PID:4800
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser"
  2⤵
  PID:4848
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\bstrings.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\bstrings"
  2⤵
  PID:4400
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RECmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\RECmd"
  2⤵
  PID:5916
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla"
  2⤵
  PID:2376
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\previousfilesrecovery-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\previousfilesrecovery-x64"
  2⤵
  PID:4132
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browsinghistoryview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browsinghistoryview-x64"
  2⤵
  PID:4988
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\regscanner.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\regscanner"
  2⤵
  PID:3716
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\lastactivityview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\lastactivityview"
  2⤵
  PID:4108
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\userassistview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\userassistview"
  2⤵
  PID:3616
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windefthreatsview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windefthreatsview-x64"
  2⤵
  PID:3728
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\winprefetchview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\winprefetchview-x64"
  2⤵
  PID:5180
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\taskschedulerview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\taskschedulerview-x64"
  2⤵
  PID:3772
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\executedprogramslist.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\executedprogramslist"
  2⤵
  PID:3392
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\fulleventlogview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\fulleventlogview-x64"
  2⤵
  PID:3836
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windeflogview.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\windeflogview"
  2⤵
  PID:5848
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd"
  2⤵
  PID:3348
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\WinPrefetchView++.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\WinPrefetchView++.exe"
  2⤵
  PID:7924
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browserdownloadsview-x64.zip" -C "C:\Users\Admin\Desktop\Detect-Tools-Downloads\browserdownloadsview-x64"
  2⤵
  PID:8092
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\MRCv120.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\MRCv120.exe"
  2⤵
  PID:6752
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\BrowsingHistoryView++.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\BrowsingHistoryView++.exe"
  2⤵
  PID:6768
- C:\Users\Admin\Desktop\Detect-Tools-Downloads\USBDeview++.exe
  "C:\Users\Admin\Desktop\Detect-Tools-Downloads\USBDeview++.exe"
  2⤵
  PID:6784
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe"
  2⤵
  PID:7664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf6951.tmp\InstallOptions.dll
Size 15KB
SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
MD5 ece25721125d55aa26cdfe019c871476
SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
TLSH
T1E1624D1137C558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf6951.tmp\LangDLL.dll
Size 5KB
SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
MD5 68b287f4067ba013e34a1339afdb1ea8
SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
TLSH
T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf6951.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmcacheParser++.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser++.exe
Size 19.9MB
SHA256 cd525ba864ca9219e9cd12262674375f811562a0a27e70557aea27dc0eb1c9d2
MD5 61288589a0b3c8269b5eba13f6d7033e
SHA1 f89a605e91a30cc5be98ba6f880409a1fa18feee
SHA512 a402dbe7c38066accf29a425723b5f193f1d71ad31ff12ea566976b266002ded3d9585896c6859667801fbaec313de2b8bf54a6d9eea557a00627f28f2b8e3d2
SSDEEP 196608:njcoe441GMSZ/irOEa546f8rh0Qzy/w1l9uSuecwXq:nj644Y3GOEK4g8rKQzyo1l9uSuiXq
TLSH
T1C72795B76000C07DCA485075C690DF5FBC2868D65AF25BC384E47AA53BABCB87AD7C85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmcacheParser.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser.zip
Size 2.2MB
SHA256 d40d1e7863159dbd9aa3ae826d919edc490ca33df84bde57e86da848a583af03
MD5 e2b36f027d1388e940fcb10a00c11cef
SHA1 6a41fc80ac5c4875b2570653995c0a619f5b6c3b
SHA512 31fffffcd2045a458c2902dbf17fddce771962f7dc42f25455d6de8529661761a959132d8181933186386c32ed4e4880404b1b013386a778ed6630b2625bd2cd
SSDEEP 49152:gwW98L3C9/QKjmS0EKj/Anri5G1SkvmNWYh0bMUB540KCj2:g99G3qQ2YEKM25WS6mFq54032
TLSH
T1B2B5338E54B61F6196A392F74853C93355EB6C1FFE1AE4D04F52A2E3C0A14D8A2170EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmcacheParser.dll

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser\AmcacheParser.dll
Size 2.3MB
SHA256 9b58373e5e3b175df76e442140817f627f5987a999590d83c8b50aeb7d3d8fc7
MD5 5899d9c3760e0eb6beff9ae4bb966793
SHA1 bd01d4e3812496c33b7e2c9c1aaf542c264a7866
SHA512 d9a4ac2ef12c3ec4f9600d525128dfb447b178fcb8a0abd45bb9741fe58de4735af0baccf94e70c76b40884724014d6ec57bc9114fd6bdddebd92fcd4fadbe00
SSDEEP 49152:o/BiTKm5GP3HmBU7/m8am4kzqK9BdnDwSgP9pdAzvQTIcvtaOrB446eIQ:o/zmu6Qmj+zqKHdDwDlPAOh1446eIQ
TLSH
T17DB5120E3E565935C3B7A5761F52DE72007EEC0B092173D6DAF29EE4822CF5592B20A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmcacheParser.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\AmcacheParser\AmcacheParser.exe
Size 337KB
SHA256 344f5c8f289777677d2f7f93ca8525705f4670025331a56e88fdfd8bb8fa5f1a
MD5 eaf7eaa5bfc0e79dade48ab252669219
SHA1 122d0ae0e8037619ee87d044d3cd9516f4141a84
SHA512 2a13cdecb94803a130d6a0d977932d8c8d288f23c5046de517424b701b3b64e3db3047b063a9dfbdf999f80ab7704fe4ee70fb29aeda75f72ae645102acb73c9
SSDEEP 3072:62UjWfVKLer5BCypfO9D/zLjXEkecZA4nsSbUmUseJvHBmQ5IIbG/5bxiV7:botypfO9jrg4VUSuvHBmZ5diV7
TLSH
T10674090B7D160479D3B2D1795F93CE32503BBC1A0B6133DB87A0CFA54619FA5AEB6212
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingHistoryView++.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\BrowsingHistoryView++.exe
Size 17.1MB
SHA256 d786079a0baa94409fab081bea037a5a0e31bc024c864376ad17f6d76c288a43
MD5 dd940d887f3382ae88eb5d70691aa958
SHA1 f264eccd747f3048b4072a6b71c5789aa473b1e0
SHA512 013d1b319b5fd5f0d2d97cef762c4916e96f31d50acb62f1c537a36282808b0febe5e3acf250dfbd480e73b7a432001141ea6bb164ee4fa24d7e707b806fe6f7
SSDEEP 98304:5qEZMGD2J7mfzUahDcE49US26N/6L7dsJzsN3e8:T5G7mfzUahYE49US26N/6dspsN3e8
TLSH
T1DE07A772B011C07DDA850070C5D1CE1F782968969BE29F83CCA53AB63ADD978ADFBC45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DumpIt.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\DumpIt.exe
Size 615KB
SHA256 6a484c1db7718949c7027abde97e164c7e7e4e4214e3e29fe48ac4364c0cd23c
MD5 0f10da3a5eb49d17d73d8e195fe32f85
SHA1 95f7b26cd15170a3043d6d1f049b2a88fb7a5c5f
SHA512 58bdd11a5ec61d29241dee7d8ab6f8f65261a1145d7f6ab6c01d539068ff9f4c8fe98045df58a60232c682f58b4671c0c7073763eac68968ace8bf37c428eed0
SSDEEP 6144:tEYa+MVBkKTXC16IwvQqxxJxqi0CEqeTZN2U0npKDdsDB6pH3CohoyfytyhCZVzD:tEYa+M8K7C89Qq3JQgEzTZOA/yoHWrJN
TLSH
T17FD4E586EE54C4B1F1A281B4C76355BAFE6978050F706F9B12B493191F22AE34F39F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Everything-1.4.1.1032.x86-Setup.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\Everything-1.4.1.1032.x86-Setup.exe
Size 1.8MB
SHA256 781a31b440045219752a1bb40fbd204b1d96964d4bf56af01b18e3d549b037aa
MD5 349827100e8d4c33dbc91a4da3059bdd
SHA1 e323bcccf9c221cb03c7e1d9df33d2d13bac8df0
SHA512 bcf85f8642ceddef9cb820f9f648dc24deac3ae48941f98e3a7f73a6973e0decf877207fec8edcb1dc64d5ccc2336b0f77209e546b520fad40ec73fd9b15601e
SSDEEP 49152:M4Layct6Kw+4HNqzK8e8/rDcA8q9k4iKV/NGgxS:M466Kw+8Ucdrg/NBxS
TLSH
T17E95236697409647D4A3A230EABFA2D754F3BCB50C754AC7BB123F2C34116E3AC69346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EvtxECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\EvtxECmd.zip
Size 3.8MB
SHA256 4d740e51c4532c340d080f832c766c2acb0351832dae118d1abe9bb49203faa4
MD5 81c0422b8c27e4ed60e749796534bd14
SHA1 a36881a66b5dd661c8b198c5f347417b6ac7bfff
SHA512 6e8361cd3329a93d9208d370aeb992b594d9115aad4c3f4186d9184bf3a75b249d0a643d0d40fe345b1cb8247a7f744e28a302869b3dcecafd138055a1f143bb
SSDEEP 98304:yejBg2ZqJUr1yBH4aOq70yvWRFFIB3IUijLC+qSA:5li+1AOSMFFIB3di6+4
TLSH
T1620623918A6D4821C230FAB5409FCB0BD63F195F11E8DB2A1BBA1594EE433C7AF45F85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JLECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\JLECmd.zip
Size 2.9MB
SHA256 155ee54e6ac6b70bce1aa636ec52d0b0165263933764d9a45c85af97df546892
MD5 e0c15935f04af1bdf936c1663573ba63
SHA1 d85e7bee2e05e20428e30f56bf849c182709ccd3
SHA512 8cc64b72288d67036cc2ebcd46583240db0f29864b3421af0b75690b21a352dcc7bab79f0c0cc881386ce564c6e78e082d8c68551abbbd2cea3520ad08f790bc
SSDEEP 49152:ccY58Wir8AEIfUcZ5WPOVDPxVK1A6ncmff0dK2zDa7QWBLzeAlTHVj2iv/Pzuak:vnr8mU9qD58nH4K2z277VaAlJFvHTk
TLSH
T150D533B8A4D476FB7580DA606D3232C2C88F09511AD6CA73C22657D7F5C7CED2309AB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JournalTrace.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\JournalTrace.exe
Size 106KB
SHA256 46873781a5c80ea676f0ed8024b31423f22918d9f4723aba49b22c8e597ec0e6
MD5 779386ff00b119b91f1ef5e36168edae
SHA1 006588d6a5c531d0e9ff497cbf3bab32744e15d0
SHA512 7c1686cf33e8989064c8be404b0eca65609b30e7fbe8d7cc0b90fcefecd44ae024efdf3a65f4e08376c166b118a46eda550f563423261badfed91f7e5db96a13
SSDEEP 3072:RxnIDN+SRULe9DjbkNaze0ccGADupxYXGrAOOLChcRUzAXA8U9uv93n:eBu6Om1+G1h
TLSH
T142B3192576F48B6AD8BE0BF9543021150372315F5C06E72D4EC4B0DD2ABBF88DA62E5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\LECmd.zip
Size 2.9MB
SHA256 f3e9c799ec7d3fa4cd5f553ec3f9d544c80c8e48afd04ef43456da3d48ad0760
MD5 09140a2c59f3885704de2b0a26efbf82
SHA1 5d48628ad16fc9c277e8b07cf69f5a532e3c4da7
SHA512 f47d1d184d2efa442315b717ad58e4254ec08798102692a5d4e6dd559ef6460b03971d32d616ec64a178ea14d7e27a29911b4ca3b5bd15e56982cd4a79ae47c7
SSDEEP 49152:cuuqPwyeYGB2AsYl2Cm7AqlqM3m6PzPN2owkYxPOIZmI14z3VKL+wxjqzE9rv:1NjfGBpsYlDm7AqlTm68owkYxniMSwxt
TLSH
T148E5334BC5977C4AF3396F02F0283A8BB3C43368A850647BF5D46781E5A729A7E71235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MFTECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\MFTECmd.zip
Size 2.7MB
SHA256 60ae857a554b830243e38e91fafdfdf6066f31c703282c5c6f40daf3b64d3160
MD5 8d30ebcaa9ef5b71e52c227705b042ef
SHA1 5c9ae4c45aeb3dce96dec84c60d944b707bf3042
SHA512 f68e6bae336a91dad6a579cdfac9a28907afcd1019f8dba3397375b69b33eb0759d6345a44128d05cc2d981c24e015bdb8625a1de0138f7984249c6cdad6599c
SSDEEP 49152:5hAuzqhUrH79SUoGeX24S/EFUf01TMG2X9MVxUDwPoX21/BLdgJ/:5famx452TMUin2XK3Pog/9dU/
TLSH
T13BD53343954AEC32B623029EBECF16064091CFBC29C78EF15AE66184D614B79FF60BD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MRCv120.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\MRCv120.exe
Size 343KB
SHA256 72dc1ba6ddc9d572d70a194ebdf6027039734ecee23a02751b0b3b3c4ea430de
MD5 51d286bdf58359417a28e3132aba957f
SHA1 6fa7c189b736808c66c82ccf5f4aaa11f995c95a
SHA512 6559fb6fae7f8bcf17678d1e4d0b6e114171b8a8ad5428ba5f18eddf590ac4bebd785d3357494c009fba63f21dec0d03de448098c01fb0f7af3813405da91f28
SSDEEP 3072:grYXq3I6YMFFTUfL/HbYXQFUof0NuHeSrQIjn9k0jJ709s0O:aT8yGfLTFTFHeSXjrW9hO
TLSH
T1CB748FD562C83532DA430270B7F881E6742E6CEED559B487EF04BE581728AB39172B1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\PECmd.zip
Size 2.2MB
SHA256 e361d397c8c64959fd537e1826fcb89ea2d6fe24b3b4b63e6666479d565caa15
MD5 3c89f373d4b971b6e9c81338845fcda5
SHA1 7f518ee8e12cc954401b42c156e74bc22d0292fe
SHA512 5b9a79c0791eb69e81f4179cb1d3232d29180bc59b8f9aad9ef5e6aee510ce5baff2e7e9c159bfb1695e5a633689e9c648c91b8a05b66496ded6500036afbd7f
SSDEEP 49152:9TPTn2uhhs1uyTFwwAkdiUPiiniHgmvsuHDkTGItIJ7b4bSPbB/:VLnJsEkFxKlHnw1tU7b+w/
TLSH
T1F7B53330A5947EB07CF874D85BE0BB10C23FF546279BB4694F231029299B19DA8E54FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PowerShellParser++.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\PowerShellParser++.exe
Size 17.1MB
SHA256 d0676658a521fc3eb73e277bd491d611af07132924a517b803eb88adf53160ed
MD5 97fc7a657db44a5b10d742fda9f2f39b
SHA1 fdacd77932fe382e49193965c10ea6b48cf1315f
SHA512 53f4e43f8467d901300f4b5e3871f6a136d13d9e9d1adf38b584b5060c31fa86f6186d886b33947bcb3b6b6f9f8ac93824f036e5817a2c7102fcb2974419fcf4
SSDEEP 98304:klijrhos4LNH7/SARqrIIg5CaIH9Q31aAYCHOWICPriTqcX:kIjALNb/SPrII9ae9Q3YAYCHOWICPryX
TLSH
T14607A4727000D4BDCA845474C690CF1EBC282896ABF25F8388D476E53BEAD786DEBD45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RBCmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd.zip
Size 1.6MB
SHA256 e2b5c6ba8929a8731d861577c796763730e303ec2d4dd8d294ee0de8d5ceb541
MD5 43a71b551cdea4850d9c459186926328
SHA1 963bf2d77fdcf82b1df7499704284995b75626dd
SHA512 e38425a42183c4a3bc33c1fe1100f12a3e53a123572758bcd5f1c7d9759ea5af7e73566e917b803206734334e2c98babcb638eeb8d383b89abda29143f8e17da
SSDEEP 49152:rrxvKkBiNrIAA45Xv7wRVdF8cAKSaGQWy6uGkfBssA9:RhW5A45DkAKSaGQWygQsP9
TLSH
T1CA75332475AC210453AEF170A7AF06D99478BD2DCF1844D30AABE983D7E53AE370A573
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RBCmd.dll

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd\RBCmd.dll
Size 1.8MB
SHA256 cc76e6160d3cb200e7e52d05d1b24faca8213858abad53d02f196ce15a8d8fdc
MD5 32648183dc9b7330742ec058450bbeda
SHA1 699dbfa497384df3e7470b69e2682f3c2a55bc23
SHA512 fa07e48720f291e46e6f1bcfc10b1cdd6e2354a5071e59adf8343d5e4f4618f59f603e26e2461bbd2e4c5dcf5744b1a385ea74c264d6c4e81b84e1ef0e4c2da6
SSDEEP 49152:W/BxKm5GP3HmBU7/m8bgP9pdAzvQTIzvtaOrmUbu4:W/6mu6Qm9lPAOWXu4
TLSH
T16E8512D294A72355D1AF6A7364310CE50D6B2E3AFA2DE25B8AC0F16357B744C4332B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RBCmd.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RBCmd\RBCmd.exe
Size 428KB
SHA256 2b171799f1e46fa7dd6ce708e67bb8c37fd6a95f440635f9f519eb5ba48efc0a
MD5 27edd467c4c8fe211537f4a2717cd832
SHA1 1cdf8e7f5c2ce2b834b4916d5df79fd623a83425
SHA512 70ac2ba75e2d2c9e6f7dff3dcc7a6fcd542bdb05b3bc2f3db818375bc093a3fc62eb5a73694c0235903ae0a2db2cd189e9a473c229a9dc611869157eb8b26dab
SSDEEP 6144:fotypfO9jrg4SUNy8nfdUVDwB6qBJ5ci5gVK:QtypqrtNNy6dUVUBVBICgVK
TLSH
T11B941883D55723AAE16F9AB690610CD19B733C39EB65A2CB0780B5730B7369C5F36702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RECmd.zip
Size 4.5MB
SHA256 4a4e2f4beba54fdb9ba4eeb5e6f9d323e666b309e407ac89e047f82be0c963a2
MD5 ae4af18c845e6499f33ed5f8cbf4ac3c
SHA1 99575e13437b92f0ca6a7131c96ad6138ef2408b
SHA512 1d3809c91e4cea7625baf10a4a89872c2047d7fbb465c51df51f52f648f14230407d65238983307055c50ae43b1ef6c55a2d69ba24935f5e99bd1cbbdfc93d18
SSDEEP 98304:Qs5qbQk3hU9hTahUqUjMbHc2BFlWWJtJ99MW+8ohfLm7DC20AoeLq:/QtATDjKHc2BFIW7SW+8AaxjHLq
TLSH
T1B426339E183C8900D774917E34F8056EB8EBB32E7644EE1936772A25FCA33154F5A2D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RecentFileCacheParser.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser.zip
Size 1.5MB
SHA256 50731763d336940ae35d20575b058bda09f3abb96e4662bd61a5f2994017c46e
MD5 4003b6191e2007c82093f19d290c18f5
SHA1 7e41ea071bf8147240cdc590edcca25c78a790ed
SHA512 b6dd7faf516ca253fd3b042611b050919518593e6d8089debdf6f0f2f19378ef492b0dda7f91f70982bab69c3ae3f6a7277bd8f9339ca0dabee4c60637d1f696
SSDEEP 49152:Gi34s30inokjswndq7fDG9u3jBb+AmZrXqQuhNPmVDSf:134jinokjdnsbDYcx+HXNGPr
TLSH
T199753350E6CE8E10BF1873D31A6E7E4922F507C84D19FE997A9532A5C2E07C271E0E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RecentFileCacheParser.dll

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser\RecentFileCacheParser.dll
Size 1.5MB
SHA256 78525dcf9004dedc5abfccbf55a0dabd5324b50f25acc7683aa6cfedb19059ea
MD5 786130864354b4070935206a7a515bd9
SHA1 ca04f1c73bbdb56a55b1a83083dbec599b2774ef
SHA512 00ef0031017fbc9498db4b5634889a9c7056057fde6c811fd71d784117aca58573ae7ae6063563a6f45793f1be1a7d2a43ad4003a22a86d1d557ebc2819f17be
SSDEEP 24576:eB6xGjVMVa9ODCP3HIRivUU7/mLom8dlgMo99Zoem0xG5DaAdvJEwGuaQvta0nru:ZxKm5GP3HmBU7/m8bgP9pdAzvlvtaOru
TLSH
T1646512D1F098ADE5C42781F28C32E962285FBE5E86348B1D7A57B51E5AB32432133D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RecentFileCacheParser.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RecentFileCacheParser\RecentFileCacheParser.exe
Size 309KB
SHA256 10669c137ef644a3d60308ffc67dc257203fb38c1e9d12db5c4db37d5f37607f
MD5 7c24607f923ce1376c6590fd73eea495
SHA1 555ea9629edb62896c086382897411fcc489220e
SHA512 dc862764dd44b96d6a5caa5d85f62adab7052b16c3f3cb9880ef8c33875f4b6a379a5c04066050d5fd614f52af1eca0278d6bb01dfa5ef8890664c9326f03322
SSDEEP 6144:WotypfO9jrg4EUcdVdddHdddddCddddrddgYdd7dddddodddddsddAxddedddd/1:BtypqrtfcdVdddHdddddCddddrdd5ddp
TLSH
T1A2643B42F15868EAD06781B5CC729941B633BC4E87705A8F2752B63A1E733827937F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedLotusTaskSentinel.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\RedLotusTaskSentinel.exe
Size 3.8MB
SHA256 b0e95fb46b0519b5bdc3b06d3a21466af97930cd1eba53ba72b7af721cc74c0b
MD5 7af1961a67d78c1791f1b6fb45a8bd68
SHA1 19326b0268ad729c8fc9a64d1c1edbc40913aca1
SHA512 e0efecba938ea01780d9f6ec822084029f42c09c49efd83cb621c04114e19b7ea4fae38e04cc279c6e05eb8569cab2b93834bf676a0d0ec4d78f4061ad49a14b
SSDEEP 49152:ZOjPWi+TKuk2z7IU6i0XcmqIM455+i5CJG2rklZth2+EexjFT4GD1wZOh5Pc8Wna:Z0+dwrb1hxjF2tB9A
TLSH
T169067C06E7A610E5CDB6C338A552222BFAB17857537097CF4BD067560F63BE0AA7E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SBECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\SBECmd.zip
Size 3.0MB
SHA256 88edb98a32baaf68114aa106f25f999e46d387d9d0003d3222a1168cc1b7eb9b
MD5 ba83d3b62ab7ad17a2c3c3c4f7f82416
SHA1 f48515005036f8b8def6f02897b38801a1a6d5c6
SHA512 8511227c4e8d049443fd5e0f82e8f6c649a3eaeb347485bab417081ae2a2c845e07c14327fefc1a94d42d2cdd6c88478ef6d39a5b1dc02680b60411a17872ad9
SSDEEP 98304:RziJsW3NU/NuVwy9lzqi2lS5RX+warrpNfn:i3CFupq5I51+waPpN/
TLSH
T1A9E533B8BAC97304B7407C5309966C2D368A8A16B7FB06FE1E747A2E771D527AC31134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SrumECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\SrumECmd.zip
Size 2.0MB
SHA256 4d7035100f771a7ef5d75ac30e7edb70761976f2c92476213d19abb50d4c8489
MD5 abe8f88a499d12ca8a79f107cf94f1ee
SHA1 822e498e3016c02d9a8238c65efe951a8b40c313
SHA512 95e97dd04e26669b186d05c73ee171f369ef24bd723fcb59cb456ce834add65ff9b9f9dcbe21857f395ef96920c059b66fac86547c5bac124ece74ce5defd4d1
SSDEEP 49152:4t0pi9opIJm1HGSg7/sm7mdpJIkLkWxlswGsFRIqlkoLgBG:Fi2aJMos7/Iko61GsTKlG
TLSH
T1EFA5338FB0790BC1004BFA5E6402AAF7FDEFB61756EC43D59B519051ACA88B8173216F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SumECmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\SumECmd.zip
Size 1.6MB
SHA256 15c6aafc9084854824c8703cbf7aec74b49eb7cd84b82407bf4d90e2ba6bddf2
MD5 6422cbc8b00dcf2bccbc6aac3881a5c4
SHA1 1608c9649f0b514bf4039fe4c05b3703976ae986
SHA512 d9d15775f95451148391206a0f252c92cf36868ed723485e54afefd38cd3a7691181090098815744ba4d05df03de52fa27ea6831358ba333d26038f6b8f0702b
SSDEEP 49152:knx1IS3o3QSrQrmJq+VA9kz12y5ItI10JPVrkohZMII/YbzA8v:knLto3zrVJ5VA9kz1P5h0ZHZ5I/YbzAU
TLSH
T1F68533A13D67BF8BCF233AB7145071D8C0D33817BF200650635BC15DA7A6A6A06B9E4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

USBDeview++.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\USBDeview++.exe
Size 16.9MB
SHA256 1793405e1f1be508dde39021c1d83d25f36cb46601cf1c11b5de12e4e2309176
MD5 b64a7ca905ed2cac0187da2a1c9d1e00
SHA1 f90e8c480af6d92ebcf9af07abde9000283ace07
SHA512 1175eac449e26ea9b141fb8fb0418e3988095d11b77266c953bc0e0c15b9092076fc0e698fc301af508d0678b400f8882dde9021e2b3d5d247b60f11e91e03cd
SSDEEP 98304:sRb0RsYUavrX6BDyuCImp8KFLCOb9k8WPDDwNVGYUr:st0RVpIyuCZp75COb9kxPDDwNVGY8
TLSH
T1130796767010C07DCA481074C291CE0FB82968DA9BE25F83C8A57BF53A9ADB46DEFD45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VSCMount.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\VSCMount.zip
Size 1.5MB
SHA256 33f375b78c2fbb27901a63ceed1c79fa1f23ee9abda80d9371abe163c434b8e0
MD5 1da04a8602cdaadeda526337d1ccc024
SHA1 0ecd2d27daaf533c48fef56f2015124cb5087190
SHA512 5a63ab3a31b230a1e3010c3a0e5a3796d4cb5f2e42329fb8fa5f8638c9345595f430643bf2eb682378485a33d84311b4d2b8027f8fb53b3aacd28bc222ffa3d2
SSDEEP 49152:bDmmA1wAPBANYfxCE2WoY/I/V2SzxEWa+OPhZx9h4J:umswAWaZ2WoY/4JWJDg
TLSH
T1677533F0B8BD9743CB65C68B55D16BD08B8AE2CFA3132B1C5E9D2BC6021445E24C8DBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinPrefetchView++.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\WinPrefetchView++.exe
Size 19.4MB
SHA256 777a06d5a0aa04209ce09998fb7cde5717b72eb220a61c53eda910990a21925f
MD5 36f330462ff5c7e5aa038a9c0b7855db
SHA1 0c4a6fd63e00a5d586f1766f7bb4893d8cb27c8f
SHA512 8fe1d172bdc8c8dc96cec69422e3592611c9be0cafdccefc86f2f56cddf2f65094c9ebc402c4835041d8de5ee62b6ba4d8859b97960cd6515d5230e201821f38
SSDEEP 196608:SN7dfvyaXcP1CeLkHFu5nBeNn9JkTivXD:S7fLcPgewHFu5nBeNn9JkTeXD
TLSH
T16627D9B67000C1BEC64841B9C692CF0F792828D59AE11F83C8D476E53BAAD787EDBD45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WxTCmd.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd.zip
Size 5.8MB
SHA256 aa08a020cc9daa22551edbf07bca336cb8249ce29830d67cf09bc3703dffec6d
MD5 591349b7a46e1c768a0e47a620eb98d9
SHA1 0d08a32513cfa96f403b01c3e35d096855bafa87
SHA512 2b778ffe53932a4e7b22dcdaac325c39bb77989a2bd053968779a6bbf455864ab952494951ef1285a5d96f8043bd126eb25b7e756260a03bd761a00af524c909
SSDEEP 98304:M/SZZGktvzcC6dfJ+ONLiT2e8BMv4twT0JAvn1HM4ZeKQxVEcMOdOYncSRDkbdeA:3ZNrX6dxdD84t20JAvn1s4ZeKQxOD6c1
TLSH
T1F956330BD269C887C47B8648BCD21935AF84E56F2DF2A3074A92451F9F7B52F219CC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WxTCmd.runtimeconfig.json

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\WxTCmd\WxTCmd.runtimeconfig.json
Size 340B
SHA256 3c0bf772b95c93363a0a14e5df78e4ec408c90f04cb7103205af97b2d276fab0
MD5 a7bff45102af2bb94842c65f18db1d7a
SHA1 c5d918c97739067f26e90c266b3fe2ebb7f692de
SHA512 c58354cbba238cc3f62381db52c0f7c625d967b445212f56eeb45cf1b34fff0d26b48274bc429d7d86389f244d08c7c6798398632dc750097ffac70cf4add8c3
TLSH
T101E02664CE006CA701FA72BBC531C182EB30632700101891B4FC080C2F77DB50212F56
MD5 SHA1 SHA512 TLSH

Submit Download

browserdownloadsview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\browserdownloadsview-x64.zip
Size 286KB
SHA256 94542b21e90e24cdf940fdef0789b6a2e038d3dbcf1833545fd76298baa57218
MD5 5365ef26abc615e5a43acd4e21c05573
SHA1 37a4a26238232d0fd63f1142f7ff1a28963a3894
SHA512 c0348177a6ef40a991edef5e1098b4439eb047ea7f9820207ae75d53d2fd6c6f671910bb8580f6b9f1eae0a4a155dcaaacb7aa9c4dcb125c2f84f04d3ae0c657
SSDEEP 6144:s3SCZhcYv+OvfQoudK2LBHhUDQArBddt0yC1nLsm6o4YcrgznJ1:s30FOv4gyBHnqBddqJ7aMzn/
TLSH
T1705423AC91B6D0E2B8F9E47627A3539725975417136F22002F8DF13731B28997FBA312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

browsinghistoryview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\browsinghistoryview-x64.zip
Size 469KB
SHA256 455e7f71bf08a09dfbfd0068b8c37afec0bc956e6177089bbf60d58cb90c8911
MD5 573749c82ae3837a066c55dbb9ebc1d9
SHA1 3632fe7c1a77567117435accf691789d3f3ac3a3
SHA512 68dc96df126bbaa533a3b60f3563f135c0c79645e8a3513ef3710e38481a33b6a932810eb73153e69357a7947f7b02dca205b7f4c4ca7ba7928360b2218596e9
SSDEEP 6144:tXuseFlKH3MGzmaAf84TYW3uIORNHkP67TqSjf02k/xKiFsdGdSOMGg6xWssh0lZ:p/efI3maiqXDeSjsjTsEdpTsh0we9
TLSH
T1C3A4231D9CF55407AB8112560FF363889CF2EA98F94D7CB20B14E4E45E1BA683D9F06B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bstrings.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\bstrings.zip
Size 1.9MB
SHA256 0630d2b3a527f285c8407ece8deddcddfe92531a25e16c2d5ffd2d60fb90d8c6
MD5 f3889aa68d7628ba2f2830af6668efcd
SHA1 938c140cca763e11ef88f5066c1169b0cc58c747
SHA512 765995a9df960d797ed705c3ace6139efb278c298462d360072d6c680516bb0419db4c888d6ea4d651aaf30db0065b9a3739c570f1e3eb04151ccb3ddca8bf69
SSDEEP 49152:tOVv8MW8L+HV5tloiiFa1cacjwJ3f24FcCnnIR98zVF7gLqABqU4yuz:4vb+HzkFqcaXBf3cCIfo5Ef0U4Zz
TLSH
T1E19533553E2B2836FD62F0F1F793231525D9C44E4418AF8BE23BA10E1A817A4EB2547F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

executedprogramslist.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\executedprogramslist.zip
Size 52KB
SHA256 84057a0660a51f07c56d893b9949befcc55a271c0e65a23e765bf958b2ae947a
MD5 f8f7a4448239fb7e682cc30fe0971eb8
SHA1 be1bfbbcdbd0ac18d3da0e0c164bb0c90a959a1b
SHA512 354b17319ba82040f083f2e0a77eada47b95b0a48d4a7d8c751d7e77e834b3c3a3bdd8248dc5159735e98cc73c26116f95f03891c13c47f0e3e6ef235c9882d4
SSDEEP 1536:NavGicksQ9XONjlWCYo15HX5ot0xevNFgzP:cGic9Q9chGe5oDa
TLSH
T17E330230B3CF489C986BDDE5C463045AD2B326EC54613A9A268EC88B8C4FC49F941E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fulleventlogview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\fulleventlogview-x64.zip
Size 104KB
SHA256 dd67610f19a4fffe77460f55ebb318523cc8bcbcb8fc3d462ee0dffab4ba1d95
MD5 80ccd51aaf32fa6a9f272aad1d4d68df
SHA1 6f6395def6a63bafd73107fba302a1bbade471dd
SHA512 5343f2c18f38413fa21077a2e79312fc9d02838ccf15e0fc1559f349cb8c68da592f3dd0cedbcb57def28b7dd286fe236d8118127aeb61cd1340b64e34478555
SSDEEP 3072:GUUpEInS2SnSWU40p+9XgzCDZV2avgNe5yG8:PUmISVnVmADVI/G8
TLSH
T10BA31223DC7128EB664AD1B1E6E70D7E1459021515C4F029BB2EE03E9AB4CCC6B54EBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lastactivityview.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\lastactivityview.zip
Size 87KB
SHA256 09976fd76ae40a608f424655cda82b2be77c426c88ea95af78378b47630397bf
MD5 213adc37c29813db9b304c029eb83772
SHA1 e24c3ea2a2e8bef31626827553c13ee1fc1de8fb
SHA512 b38e21623729b6a6bb56af1ea8a6c9b42be2741c79ea453262a4f04e15a66a10e008158d9355298b7184808f2257891e2abefffea54cdfb84001dc57c1858681
SSDEEP 1536:gG3FFwlf+A2Gn9UFWWYu9gVwbOv4PgP1rwLfdK59/rSsV/FlgIMwfaUt:vFKlf+A2M9UFF9gmbOvigPwdoxrSSAmv
TLSH
T1159312F766D9B746EF1B97F85EC31630C82230D23DE907689D88281E39C5AB03596E5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

previousfilesrecovery-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\previousfilesrecovery-x64.zip
Size 77KB
SHA256 5eaff225d06abafc8528bde9ed6b6576b9bcd4229471df9bcc2daf986caa276f
MD5 4ce0ec24b949bfef231843b652aae635
SHA1 521cc647abdd809338d67ab6e8eb2cb413bf0b03
SHA512 8e61bcc011302cf9537132e7ed7e5707b7cf38516819949f64d214b8538cd5883d7645d7ab6b2a9b05f561d06fc7fe89e6494afdc16fdde0b4bbb913b78cd9fd
SSDEEP 1536:5ui1/8ez/ZvDB0pKgOirhuEa6eE+5bX9ayyfXLbpwo4D4LKN:5H8ez/ZLB0cgOvEa6+h4HbOzJN
TLSH
T11E7302426C5505A75D78AD33F8B9D3C70161DFBDC4A2FE00177D6D80782E8266E89EE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

regscanner.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\regscanner.zip
Size 65KB
SHA256 fe93d9534c634523c499c55590bf6bb4466624b975f3052606de38969e357b2d
MD5 149c053b64003f0c30768fb2e9119df9
SHA1 fceb664bb7e8a27bb25ea1d73c65dd58ee7f3210
SHA512 61742ae1329925b68df2d594c8255f4a1d5bc6693a832a2adf93503e476ecf7fb0d942bcd717c46fa72d088dcd59e317b627d856fee3ddc9ca4d2662842ac537
SSDEEP 1536:UUIlEa6TB85DQ2ZHEj8qKlYGgrZlTyHNCBdh3Cld:UUja6feHXB6NSMBdZod
TLSH
T1D06302E8B9E61B3AF143A3744569CDD20B2FC0BF42AD2A9E2F44904DB41D59DF600B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rla.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla.zip
Size 2.1MB
SHA256 927ae1c7e408c65a3c85297c660e91eb8190052964dc956eefdea41ba91237b2
MD5 c0b69611883f3899b3962c6bb2bb2a92
SHA1 debd17e458c9e2a1bde147f4ff9b40d6416c7cd8
SHA512 9d7f6f6f072df7d4209d5b4858c2bbbdf4b0e482aba907d0029c4a64722204465f051044d1bd93d40f025114bbf37869d129694dedf35669f58a376a312dbeea
SSDEEP 49152:tu9a2sx67/kiLKHEThp9KWK7nGYzIAMQf+who11n/sSXxejJs8:8s2WskMKqnKWKau/M4+Z9IjJP
TLSH
T1CBA5334DA4FF1FD392E6A87F081284677CCB9C57CB4E52F58E13A222356D0A469970CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rla.dll

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla\rla.dll
Size 2.0MB
SHA256 10dfc85761602fdf8ddec94c24aa6b2b4e42a0de289653db74a825916b307c05
MD5 6b1191ec3d332399095a8d1579642cfa
SHA1 a6416383a734f36b13167a0a3cbb25b40f5aa6c4
SHA512 18777469257d373754718b7b761e68c401988bdf418b80407bb6bd808055ed5e7bc7fb6a6df38382da505af8370b57c66baf6ddcc96ba59ef204674d1cdcd744
SSDEEP 49152:j/MTKm5bP5BU7/m8am4kzqKewSgP9pdAzvQTIcvtaOrVCu:j/jmxPzQmj+zqKewDlPAOhBCu
TLSH
T1E7A5234733EA9700C1F3A5F15822D9B30FF6AC478D4AC3678B913DA6BDB904C9962617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rla.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\rla\rla.exe
Size 316KB
SHA256 29f3270fd36af5817e3fd7fe27cfdf18d517f7d66db7cfd0e403322d1c04b3b2
MD5 26bb9caab4549b6969eab6ebd78062ce
SHA1 35b62f942dd67bfac96c917ea24d543653ced70b
SHA512 6159ca7f70e8ec0cbff7d0e163f66a01ff93e93b2580699a65cac564da7f8aa63e8f6ba36c9f556048e0cd07e2c47e5ed0bdf4d64b73f6addf703a8e87b07e9b
SSDEEP 6144:yotypfO9jrg4/UnS+o2tlad1mGCfXSCRaZcmGh5TVF:VtypqrtMnS78adMGC/SCQijvTVF
TLSH
T193649E03B35950AED0B2DAF4C992CA52FB727C054BA197CB03907E763E666DC6E75302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shellbagsview.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\shellbagsview.zip
Size 50KB
SHA256 d667323a180c19a6ea83e10fdbe4f34d30d66863015099bbae0575a1b851b4da
MD5 00e426e0c7cf9bd74cb3f617e4918d75
SHA1 64440b1bbfafafb0adef84f9a8a24981577b623d
SHA512 71dcb679ae7dbdbf73d0266aff1fe8abbe383711d68af27a0e64ab0f3b852cb510a67f42e52e8702194ad67573e06c7a3cbc9b9e9d57da1471541ce93d50d198
SSDEEP 768:RUdn3yG04g/m/YkW4yYivIlryi5h8ZCronaQ5sJN/KLnD5bLyzlsKlc3T:+deavW44Il2quZxnYN+nD5bLy5Ll4
TLSH
T1B43302110D890F89A0A6B1F87AD73DE801C17B45FEB3FBC5A5109EBB78194C9C969D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

systeminformer-build-canary-setup.exe

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\systeminformer-build-canary-setup.exe
Size 384KB
SHA256 de5d60696d0f3615147e95f7c9ac1480d97d8cd25cab804a7cc38a0c2deee8e9
MD5 0adb2d4b856a9bfffd6127fd37835c4b
SHA1 bf69180d661b7569f8580e01d623a63fdeaed8ec
SHA512 adbb1452580fc49eb634a6f23fe6cc436c601f6796c0024c9742b5cbe8f156a04f9cc85fcf8b0dbee58104a846d44933859579c58ef5292e99d4b488667f2062
SSDEEP 6144:9F4uHYwFphRQHQ9FydRKtfcZcEAa8Mvu225VgtzmNZ55wZo2M7xCCLeTvmjCNVpH:93HfQH2+S6/1vu225moNSPMnLeLmcphx
TLSH
T12884AE39E802E032C8D918B156EFEB795A3D89314B6702E393949DB18D385D17F3973A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskschedulerview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\taskschedulerview-x64.zip
Size 95KB
SHA256 862ac1c228283ee9d1ec9c73c35a743a870955c0e12935a0ceb4ff02913ef11a
MD5 4009c3b45618fb5917a2bd1ba57a87b9
SHA1 c00a4adda38457b2668b61d0a64e987fbac4c206
SHA512 261e5319b590a47c7d077fb6eb4c7ff6bb7fcefbe27945ac6f9d74390a58f6811971435273a3203b467a3f912380717c6dfb35d45779221fce995e403c2c866b
SSDEEP 1536:liIU+u3gi3jP7+ZqVE9XkP4AK1goahjZSO0gJAtYKFEjxFS3t2xRcdDqthTe4Oq9:lVUfgiv+ZqVE90wl+fOO0g+n6AYxmdDG
TLSH
T10BA312CE1A906B911CCE5535E0BA702679A47B17F092F162C073E6EAA47E543BFB3520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

usbdeview.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\usbdeview.zip
Size 94KB
SHA256 30e2f5103420630650d3bba3f5d28a828e664c414ba3baa2a979bc19b2bf12f6
MD5 028aed7b852ed82ca6a0bf716d256051
SHA1 9614e8b382546d412e10c8e1e197eb1cef450a72
SHA512 a8fb768ba36a299e88c108f8bfc890cdda6ee3970ec97a6ad0d1f95d3270136d43a373869898778bd90af4201c3119386e8ca736d96107e6a4e954230f6bce8b
SSDEEP 1536:pdkkbkpuUOlkGWgr/JvFUo6t7Fj/C6qMk2PlvBZwqRrjG2EvdzK2opuZeOEb:pdT4pMlkenUo6t0vMkiGqJG29sZu
TLSH
T1EB9312F1CFAB388D411F659733EDB04518F5BA4FB056C9B0D1AE568C2AEB5D0187A01E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

userassistview.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\userassistview.zip
Size 34KB
SHA256 11b75025ac99ad31fa2c27b91ebbdb891fced36ff8b2567b0b76146af88d57d9
MD5 835e2d88a162c26298f525fb256214e9
SHA1 5e430f65d44198a6a9dca59df094325737b14160
SHA512 4227c8229e47ae18e9cdcc386181564309365da9e7f5dfdba598912ddf21d16164b0187500f2352cef8de9c9b99b9922803077b77374627187075e2a290105f9
SSDEEP 768:4KIYTYv+Bvee0bbhZNt1CPRBo2r8lK/d2HN2lQykhpkGf:4K5TYv+4xtgPoEVd2+KPf
TLSH
T1C2F2F296307851161C07CDF2D818B4AA68D1BB430CD06875591EFBE05B8967F3D35EB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windeflogview.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\windeflogview.zip
Size 60KB
SHA256 235c17c453e96182a72ee957b40c567bc7bef2d466b8b7302d38e79cf1f3d219
MD5 8b40e7a4d472f2d3c77ac336dce1a915
SHA1 01e208cd4cbc2b005b0d063328273874d1c4cb39
SHA512 2df70004f3b39bcfab03775beacaafda8c8ebef7826bc0705496b873db12716b1bb7832a502c681796b15d7bad8700d5cf812b3103aba4648a25a6e8f7f0c5e5
SSDEEP 1536:FG8M7mvmzqio/QL8LcRwQN9hFgQrVXYuLct:FG8fmzqiUQgQqQN9g2VX5ct
TLSH
T1B653021BF55C8003CC30D371C563D909A5B4240A2BEEE54D6727A8EE85A6BBDF9A63C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windefthreatsview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\windefthreatsview-x64.zip
Size 79KB
SHA256 b6bfa9bec0c6b5bfec8404fbd4dbb95c34ac618fd6a21c5f3292c053673fb1e1
MD5 de068056a47d66edf9b943491b3256ad
SHA1 789948fad8e60cc0b5024bcaaed6bfe519f9ef7a
SHA512 20f7fc32c1fadc19e48c37194578b30acf20f9d3180ab8547da46c9259481d953e1c7e2080318f6e460cabb8c52b3f3bd403b89a1b15a0989e75a1ff29687708
SSDEEP 1536:iTOXd8gzfOER53BxqvqO/t96V+OvYQrYYN+O0TJK37OkH1aOacF:GOXZTOEavpvdOYoYdOwK37OkH1hae
TLSH
T14683022D0DD177A32A4A313B9228D55DE331DA03D39F852409CCEE28A77EB6D9D5CE12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winprefetchview-x64.zip

Path C:\Users\Admin\Desktop\Detect-Tools-Downloads\winprefetchview-x64.zip
Size 67KB
SHA256 a266a6750ab1b3078168b9b306befa9ad5a3069340e87fe0de609f417f0f1f18
MD5 ad62076fa68c147aaf7df16766fc4b5c
SHA1 ee48cdf413748fd3f3a2425354c10cc4a92275e4
SHA512 50d04884cb39e0e5e2924f90bd862fb958380ca8ad997fc6d957b927bdfcb4f2fe16d923c94c3446d9b264590151ec55439f5b73594b12cdb588253a08114a3d
SSDEEP 1536:lGu0FpztnYmqbnYXKBDr2XCK8V4m+irFJoqSoXN1uUN:sui1qbnYXvX0d+iB5SAPL
TLSH
T10D63019FC2F3AED2F4303690E4C696941FD1E227346540748BAF624CD2586D2D9F7B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2384-79-0x0000000004B80000-0x0000000004B8A000-memory.dmp

Download

memory/2384-76-0x0000000005130000-0x00000000056EA000-memory.dmp

Download

memory/2384-75-0x00000000000E0000-0x0000000000100000-memory.dmp

Download

memory/2384-77-0x0000000004AC0000-0x0000000004B52000-memory.dmp

Download

memory/2740-212-0x0000000140000000-0x00000001413EAE00-memory.dmp

Download

memory/3812-0-0x0000000140000000-0x0000000141159000-memory.dmp

Download

memory/3812-1-0x0000000140000000-0x0000000141159000-memory.dmp

Download

memory/5248-217-0x0000000140000000-0x0000000141115000-memory.dmp

Download

memory/5248-211-0x0000000140000000-0x0000000141115000-memory.dmp

Download

memory/6768-958-0x0000000140000000-0x0000000141119000-memory.dmp

Download

memory/7924-948-0x0000000140000000-0x0000000141372000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads