Overview

overview

10

Static

static

10

2026-07-18...lc.exe

windows10-2004-x64

10

2026-07-18...lc.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/07/2026, 23:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-18_cc24ad94decbeb66524661ad205cedaa_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc.exe
  • Size 668KB
  • Sample260718-3p4fwsft7j
  • SHA256 caf12dc6939adf8fd71cdb2341a6509841ac338b734812d4fb6c2b9ff6db9e9c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoveryransomware

Malware Config

Extracted

Path

  • C:\Users\Admin\Documents\Outlook Files\RECOVERY INFORMATION.txt

Ransom Note
  • Your files have been encrypted To recover them you need decryption tool You can contact us in two ways: 1 Download TOR Browser https://www.torproject.org/download/ (in some cases required VPN to download) Open TOR browser and follow by link below: http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/594276092A33EA30239A67F10CBCF573DBF3290305594E34AE7EBEF091F08633 2 Contact by email: [email protected] Your key: 594276092A33EA30239A67F10CBCF573DBF3290305594E34AE7EBEF091F08633 Include your key in your letter Our guarantee: we provide free decyrption for 3 files up to 3 megabytes (not zip,db,backup)
URLs

  • http://weaxorpemwzoxg5cdvvfd77p3qczkxqii37ww4foo2n4jcft3mytbpyd.onion/lsaHqOhaJLOyrWSPvtJajdzqrftqzOlt/594276092A33EA30239A67F10CBCF573DBF3290305594E34AE7EBEF091F08633

Signatures

  • Renames multiple (1916) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-18_cc24ad94decbeb66524661ad205cedaa_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-18_cc24ad94decbeb66524661ad205cedaa_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc.exe"
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4340
    • C:\Users\Admin\AppData\Local\Temp\2026-07-18_cc24ad94decbeb66524661ad205cedaa_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-18_cc24ad94decbeb66524661ad205cedaa_cobalt-strike_coinminer_icedid_luca-stealer_njrat_stealc.exe" --tel=2
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:756
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4368

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        CloseMount.odt.wex
        • Path C:\Users\Admin\Documents\CloseMount.odt.wex
        • Size 1.3MB
        • SHA256 24d1e2a070906aa4e1a37ba3a6a99301685ec664a813668e8e528e29fbcefdcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressMove.txt.wex
        • Path C:\Users\Admin\Documents\CompressMove.txt.wex
        • Size 1.6MB
        • SHA256 94b554e18d6d976556da65a48f3d195d76793e06deb99257f778e9c66d229144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectInitialize.dotx.wex
        • Path C:\Users\Admin\Documents\ConnectInitialize.dotx.wex
        • Size 1.3MB
        • SHA256 db8163f8546b835ff9ae85ae93b6f38c6b846f94b32fea9aa4ed0523995e78e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertDisable.htm.wex
        • Path C:\Users\Admin\Documents\ConvertDisable.htm.wex
        • Size 1.1MB
        • SHA256 5128e61f2b2be16944b02f31ad185713810de5d63bfd29819003c33207246de9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertFromDismount.ppsx.wex
        • Path C:\Users\Admin\Documents\ConvertFromDismount.ppsx.wex
        • Size 1.2MB
        • SHA256 43063e4af58782c7bdcc65be39ab4028363472db5e45f99f85e8e674c875ba47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CopySync.rtf.wex
        • Path C:\Users\Admin\Documents\CopySync.rtf.wex
        • Size 1.1MB
        • SHA256 c62fde15a21b674b48c5a27bb8caa0309796a717e5f0d82105495f112f0bd835
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugUnblock.dotx.wex
        • Path C:\Users\Admin\Documents\DebugUnblock.dotx.wex
        • Size 1.5MB
        • SHA256 8839f34e0991159d5e2d6af676b38f8728173296885bcd903d97312ce959566e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableDeny.xlsx.wex
        • Path C:\Users\Admin\Documents\DisableDeny.xlsx.wex
        • Size 894KB
        • SHA256 03c7c611150ef2e39297c0749a76076304f5a00571c17feecc744101133fc00b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditCompare.dot.wex
        • Path C:\Users\Admin\Documents\EditCompare.dot.wex
        • Size 757KB
        • SHA256 a4ed45e347bd338e42ce0ad77929b720a0bac320cc4106e1f3f9a6de81c24cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnableSwitch.pdf.wex
        • Path C:\Users\Admin\Documents\EnableSwitch.pdf.wex
        • Size 940KB
        • SHA256 78c61007801cc1f056d72e929a9d8623ba8dc22b9783c9208d71922e85370150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportCheckpoint.vdw.wex
        • Path C:\Users\Admin\Documents\ExportCheckpoint.vdw.wex
        • Size 1.4MB
        • SHA256 4ccaaee6b2428c507ead840b40d9fe5078aa9d21545a7fe5da624d10cab44987
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MergeApprove.vssx.wex
        • Path C:\Users\Admin\Documents\MergeApprove.vssx.wex
        • Size 1.5MB
        • SHA256 2ab64f219c134575c2bd27004fd62888ee972e1c87c1f4722c8fd3d586b8cd92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Quick Notes.one.wex
        • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Quick Notes.one.wex
        • Size 351KB
        • SHA256 5b3cdd13a5248f2b1571574a659657740309db919a9d636e3871837f7386afdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Outlook Data File - zpikwxuhjs.pst.wex
        • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - zpikwxuhjs.pst.wex
        • Size 265KB
        • SHA256 6ff892e8a743eba575984c275bb1351a4971aedab3d98b5dcf61e9c625a75fa1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RECOVERY INFORMATION.txt
        • Path C:\Users\Admin\Documents\Outlook Files\RECOVERY INFORMATION.txt
        • Size 661B
        • SHA256 19f232b2b9ddb7c0c2848d76c0fb11ec0d9983ef835df4f70edaa8dad0eb3cf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        RenameWrite.pdf.wex
        • Path C:\Users\Admin\Documents\RenameWrite.pdf.wex
        • Size 848KB
        • SHA256 37be4823c4e652b0bff54d8b082733909336b0c7a957f1b588d30baf08082f3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RequestSave.ppsx.wex
        • Path C:\Users\Admin\Documents\RequestSave.ppsx.wex
        • Size 1.2MB
        • SHA256 5b3cd50f7f0cbc73aa9f6aa9b718355a1f0bcd2b0290b49ff766f9b519809c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetLock.dotm.wex
        • Path C:\Users\Admin\Documents\ResetLock.dotm.wex
        • Size 1.5MB
        • SHA256 628a40be429e17c5e35e54066551cdcd4a26827293a8626b04a9ea4e14b67a84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveUpdate.xls.wex
        • Path C:\Users\Admin\Documents\SaveUpdate.xls.wex
        • Size 665KB
        • SHA256 65c0ed8bc089f9eda7e681085fa06c77cfe04eb134ae01ea4fe2c9f642377976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetImport.vstm.wex
        • Path C:\Users\Admin\Documents\SetImport.vstm.wex
        • Size 711KB
        • SHA256 0594a0d86e85407c78443390888c542d6d0c8b82360d6adfd158dc6f55dfa292
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipPublish.vssx.wex
        • Path C:\Users\Admin\Documents\SkipPublish.vssx.wex
        • Size 619KB
        • SHA256 182ef580f74f9aa6974481d2781d7b1153e08408f1a14f60dd54d97db884b3d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipShow.dot.wex
        • Path C:\Users\Admin\Documents\SkipShow.dot.wex
        • Size 573KB
        • SHA256 e9de8abfdbda4ec5165666291cc82953f0739f6770f75991bce0c4c9989fb546
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartAssert.vssx.wex
        • Path C:\Users\Admin\Documents\StartAssert.vssx.wex
        • Size 2.2MB
        • SHA256 fae32597713f9706d5a1bd2f813c1ea0808ee8948c730340ff9b63e15d0ceaa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartRename.xls.wex
        • Path C:\Users\Admin\Documents\StartRename.xls.wex
        • Size 1.4MB
        • SHA256 b519c6ee699950daf1ad934c7ee9eeab454faa46565678de05623d93dc32660f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepGet.mpp.wex
        • Path C:\Users\Admin\Documents\StepGet.mpp.wex
        • Size 986KB
        • SHA256 d3e1a0bdf41627eb964da1c990cec7311ed9292216b73970283cd6556c1c4d6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceOptimize.docm.wex
        • Path C:\Users\Admin\Documents\TraceOptimize.docm.wex
        • Size 1.1MB
        • SHA256 41c3f62fc0cb04d7f005967842e123c50c3d762523abb74b906f0926d2f341bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockCopy.pptm.wex
        • Path C:\Users\Admin\Documents\UnlockCopy.pptm.wex
        • Size 802KB
        • SHA256 5cf46faa8ad022beff9a773da756a502a60e73aa45b753c7ab2f14786122ef8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WatchGroup.xps.wex
        • Path C:\Users\Admin\Documents\WatchGroup.xps.wex
        • Size 1.0MB
        • SHA256 b8d75b6e16910c353c54d607c4c7bd72b0d77839b8c1d184fbc27a38426ab7ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AddStop.htm.wex
        • Path C:\Users\Admin\Music\AddStop.htm.wex
        • Size 185KB
        • SHA256 f719bfb16c993f7da8b7d700c892d1df4457640e02e1a1c18c768e12a7a2c36a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ApproveCompress.mp4v.wex
        • Path C:\Users\Admin\Music\ApproveCompress.mp4v.wex
        • Size 152KB
        • SHA256 ed5911fd3bac1576c1678462f07aeae74bbd74c1090deb5f4b7a2b442aa3d7d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BlockPing.mhtml.wex
        • Path C:\Users\Admin\Music\BlockPing.mhtml.wex
        • Size 275KB
        • SHA256 2ce988519d5b941208560c5b0da9084a49b7f9385afa3d49cf4eea90301adedb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CheckpointSplit.ps1.wex
        • Path C:\Users\Admin\Music\CheckpointSplit.ps1.wex
        • Size 300KB
        • SHA256 a5b85672a5f10eda1ca2fa139fd2e249eca9e1fb7d0c80049e5bc87b69d8f76a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ClearConvertTo.wpl.wex
        • Path C:\Users\Admin\Music\ClearConvertTo.wpl.wex
        • Size 366KB
        • SHA256 4b7551925041e4cd5d1a8327cecad9db912d9d211879f1106a275eb7e390afef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressDismount.mov.wex
        • Path C:\Users\Admin\Music\CompressDismount.mov.wex
        • Size 267KB
        • SHA256 c6cc18c48c74d81ece9569e03fe145fcd087f0e1a3a11388a1a49e29d1a7b934
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertClear.avi.wex
        • Path C:\Users\Admin\Music\ConvertClear.avi.wex
        • Size 160KB
        • SHA256 324db623c1435c291a170501726b5ebae398829e2c56b69130a5277b9191adeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugFormat.ps1.wex
        • Path C:\Users\Admin\Music\DebugFormat.ps1.wex
        • Size 415KB
        • SHA256 e0b80fb41bfaf1b0f581ec826981630a47bfb25734dfc43d4072861a88760f46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditSkip.xltm.wex
        • Path C:\Users\Admin\Music\EditSkip.xltm.wex
        • Size 333KB
        • SHA256 4e4e612091c6053ffd366db8b092bc540dd8f7f4cf35e53657733907ee9a51fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnableSwitch.ttc.wex
        • Path C:\Users\Admin\Music\EnableSwitch.ttc.wex
        • Size 390KB
        • SHA256 0effcce268496eb264c667e6a36e3eba82eb49bebb2ab2cbe2f112e718dc209d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExitStep.au.wex
        • Path C:\Users\Admin\Music\ExitStep.au.wex
        • Size 325KB
        • SHA256 d297adde5320c241a0794acb719271f903075878d80d4e11e737933e8d4c1550
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportBackup.dib.wex
        • Path C:\Users\Admin\Music\ExportBackup.dib.wex
        • Size 358KB
        • SHA256 9f942e16468b5db57aac4a9863dfff3d9f2b132f115d9b2624bb0d6e3698fc8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindRevoke.odt.wex
        • Path C:\Users\Admin\Music\FindRevoke.odt.wex
        • Size 226KB
        • SHA256 0eee7d8c93f12e97a49de90ee8afc45de0fbd449ab7cb2d1b4f7041fbe2fa16c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FormatMove.dotx.wex
        • Path C:\Users\Admin\Music\FormatMove.dotx.wex
        • Size 234KB
        • SHA256 c11b6439dabd5bfc9d9f491cd9cb5eff044b72576cad793bdbbf8405a5e0090f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitializePush.mp2.wex
        • Path C:\Users\Admin\Music\InitializePush.mp2.wex
        • Size 316KB
        • SHA256 d667af79abf710397c5cc3ca634f9fb43f79aa74e4da0a25a2a9d9bbaa91bc10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallAssert.jpg.wex
        • Path C:\Users\Admin\Music\InstallAssert.jpg.wex
        • Size 601KB
        • SHA256 d976f94df913731c75b35b796317314027cb92e358626b721764d3df726598a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallImport.pps.wex
        • Path C:\Users\Admin\Music\InstallImport.pps.wex
        • Size 259KB
        • SHA256 44f23a46d046caf64abcbda9de8f87a6ad8768c939495291ff8cd4822c254941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MeasureCompare.mov.wex
        • Path C:\Users\Admin\Music\MeasureCompare.mov.wex
        • Size 341KB
        • SHA256 ea81aff1b6a3400fb381ab69fcbd77bd67f9836ec06474db40b2861778c8d683
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MoveDisable.pdf.wex
        • Path C:\Users\Admin\Music\MoveDisable.pdf.wex
        • Size 399KB
        • SHA256 33db167888684bffc95b4119c586a117f28b5e3f0eda045c4f1f587d7593d545
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NewInstall.xps.wex
        • Path C:\Users\Admin\Music\NewInstall.xps.wex
        • Size 308KB
        • SHA256 46643fcac135e3c4d8e2088461434aaa90c3f23e7e6e551a828e5bb933e89ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenStep.doc.wex
        • Path C:\Users\Admin\Music\OpenStep.doc.wex
        • Size 193KB
        • SHA256 70e10c8ae7741a93afe24095f95bc25a85069e8ebcf01071d199ad4e789ae447
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopSearch.mp3.wex
        • Path C:\Users\Admin\Music\PopSearch.mp3.wex
        • Size 440KB
        • SHA256 83b0d6b47fe6e0aafc3a62c4e6fc7ce32b0a5ff270d01784042c698c3430bf05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopSelect.js.wex
        • Path C:\Users\Admin\Music\PopSelect.js.wex
        • Size 432KB
        • SHA256 a68f49580ff04c0c52c920b3abc8f0ebeba6ce1c63377dba4bfe0e8b44978af1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishSplit.3gp.wex
        • Path C:\Users\Admin\Music\PublishSplit.3gp.wex
        • Size 407KB
        • SHA256 2158ea9f83d9877253299ab4ed98c3a47b662cd2258ce3ff1ae2bcbfe0ba0ef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RemoveEnter.rm.wex
        • Path C:\Users\Admin\Music\RemoveEnter.rm.wex
        • Size 201KB
        • SHA256 ee39c009c48b0853d578a9104eddcb367803c4d39504148dad382b28eb3bd292
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameOpen.wmf.wex
        • Path C:\Users\Admin\Music\RenameOpen.wmf.wex
        • Size 209KB
        • SHA256 3e328f3756b87e29932095deaaf20ab60bb00010fc08aabca46789d50c1bdb4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RepairRevoke.3gpp.wex
        • Path C:\Users\Admin\Music\RepairRevoke.3gpp.wex
        • Size 382KB
        • SHA256 6f46767ac5d754f9b1622b159cfc708efd6ebc146d66543cc91dbbcbd7878a9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveRead.m1v.wex
        • Path C:\Users\Admin\Music\SaveRead.m1v.wex
        • Size 292KB
        • SHA256 1bee14055e40efb20ed42c195196e9561937aad4f3fb641ae3245aed3f461da7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipUnregister.ps1.wex
        • Path C:\Users\Admin\Music\SkipUnregister.ps1.wex
        • Size 177KB
        • SHA256 3b3a1d3d7e517155e59af44cfbfec36374c6edfc1a0df09b2c13b02711a4100e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepTrace.tiff.wex
        • Path C:\Users\Admin\Music\StepTrace.tiff.wex
        • Size 251KB
        • SHA256 72b3c9559555e73607530bacc7ebc7028c4bf02378897a14e7a60ab819972bef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SubmitInitialize.ADTS.wex
        • Path C:\Users\Admin\Music\SubmitInitialize.ADTS.wex
        • Size 374KB
        • SHA256 c5f92c1a8cd7a2037087994a9dfafa0e9320af33a9398d23dd659c4d63fe6f9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SyncPop.MTS.wex
        • Path C:\Users\Admin\Music\SyncPop.MTS.wex
        • Size 349KB
        • SHA256 78d36d698b1b0cbf5f551c53ff545da83f969989feed439cd1ad29ade07b77fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceCheckpoint.tiff.wex
        • Path C:\Users\Admin\Music\TraceCheckpoint.tiff.wex
        • Size 284KB
        • SHA256 e5b038288e9688d4bd64e83fbef658d25dab4821de3e133deeeaa515ad1ca267
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnregisterOpen.xml.wex
        • Path C:\Users\Admin\Music\UnregisterOpen.xml.wex
        • Size 423KB
        • SHA256 868c2075c17c25f3035cccd36aba7ed6dd4410720253d172cda2fc4e69361586
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseSuspend.docx.wex
        • Path C:\Users\Admin\Music\UseSuspend.docx.wex
        • Size 168KB
        • SHA256 6839a03c9b87ff564fab08ccaa7f822a684dd995d73cf5488e3c52e5feaa40bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitRestart.ini.wex
        • Path C:\Users\Admin\Music\WaitRestart.ini.wex
        • Size 218KB
        • SHA256 0530c153fdd577ba8cc4cc2eb5d3deba3ecfe24fb42bb41c04fd8d5ef86c2bfe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AddResize.jpg.wex
        • Path C:\Users\Admin\Pictures\AddResize.jpg.wex
        • Size 285KB
        • SHA256 df59162710321a1ae8bb1a6f4fbd8c77fb09350788860a6ecae9e722462f624c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AssertMeasure.dxf.wex
        • Path C:\Users\Admin\Pictures\AssertMeasure.dxf.wex
        • Size 296KB
        • SHA256 9184d6b6645cf5b10fe7479cb3beb3436660fe3992768144a980d210bfd5176c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BlockEnable.dwg.wex
        • Path C:\Users\Admin\Pictures\BlockEnable.dwg.wex
        • Size 179KB
        • SHA256 768d56495edab6b5b6baeb1f82cabb45387161e622deaecf60c061f3aa8ae175
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BlockSave.wmf.wex
        • Path C:\Users\Admin\Pictures\BlockSave.wmf.wex
        • Size 306KB
        • SHA256 5888dbc15625f5bb9eaa1847901230538072b75ba0e26fc1d9ce95bc9ac4ce13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BlockSwitch.dxf.wex
        • Path C:\Users\Admin\Pictures\BlockSwitch.dxf.wex
        • Size 317KB
        • SHA256 4483d26097c035f4bc2d0c25ed1012c935c1e827a9474521f344f9d3438504cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CloseEdit.jpeg.wex
        • Path C:\Users\Admin\Pictures\CloseEdit.jpeg.wex
        • Size 169KB
        • SHA256 c1d2e9ddad3ffa764dc67c0d970fc3d89d19d1d7e0dbb74b389f69ef77c94779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmAssert.tiff.wex
        • Path C:\Users\Admin\Pictures\ConfirmAssert.tiff.wex
        • Size 254KB
        • SHA256 24846b1deffdd30e3cffb3fa266772a8012226a15feceb4057cd2f8e3c8e435e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmResume.jpeg.wex
        • Path C:\Users\Admin\Pictures\ConfirmResume.jpeg.wex
        • Size 264KB
        • SHA256 73e666e4aace8c1a4523964ca721db1dbad6abff9c25e7bccd0c24e1d041ce2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmUnlock.raw.wex
        • Path C:\Users\Admin\Pictures\ConfirmUnlock.raw.wex
        • Size 275KB
        • SHA256 4f2976476cc348568e0a24ee25d2876082298fcd73f6ea73022273c9c2bf0a90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CopySkip.emf.wex
        • Path C:\Users\Admin\Pictures\CopySkip.emf.wex
        • Size 158KB
        • SHA256 a15846e57ee82c0db37b500f1a1bb5be5be3acd2d1fd1f9cb522ead4ea368813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinAssert.cr2.wex
        • Path C:\Users\Admin\Pictures\JoinAssert.cr2.wex
        • Size 232KB
        • SHA256 e9bc90a5c54665fda140d1d34a49bc5c8de134824ffa9641aecd907ba3cb0654
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PingBackup.crw.wex
        • Path C:\Users\Admin\Pictures\PingBackup.crw.wex
        • Size 222KB
        • SHA256 135a3d89ab96987fb0deda2baa8d3dd6ec0ed6876c643b385cd6f983f734f88c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushMove.gif.wex
        • Path C:\Users\Admin\Pictures\PushMove.gif.wex
        • Size 190KB
        • SHA256 30687fb85d8507d73d866b2fc58f47ba5f0a68e4882482eb86451fae391b572d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowInitialize.dwg.wex
        • Path C:\Users\Admin\Pictures\ShowInitialize.dwg.wex
        • Size 455KB
        • SHA256 e7f288bc34d3cdb0a89dd296d512b34e626e6b478c4109d16951f0f05956b6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepRename.svgz.wex
        • Path C:\Users\Admin\Pictures\StepRename.svgz.wex
        • Size 201KB
        • SHA256 fde1ad43f5c3feea207d4831be416a24178cd8d2d4a768d5e6aabfe62982d50f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StopPush.wmf.wex
        • Path C:\Users\Admin\Pictures\StopPush.wmf.wex
        • Size 328KB
        • SHA256 6fc30db60ce6775592f3089e8d71d2299c66e6a57f4010b8683f2cf512056403
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnpublishWait.tiff.wex
        • Path C:\Users\Admin\Pictures\UnpublishWait.tiff.wex
        • Size 148KB
        • SHA256 93f80c72ac8c3a45637c347fe1818e576452f547a34ac107580266774eb93b07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download