hxxps://bonzi[.]link/

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
220s
max time network
219s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
10/08/2026, 16:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bonzi.link/
Sample260810-tmxe5axzes

Score

8^/10

google discovery execution persistence phishing

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 2 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	MSAGENT.EXE
Key created	\REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components	tv_enua.exe

Executes dropped EXE 8 IoCs

pid	Process
5220	MSAGENT.EXE
5320	tv_enua.exe
6084	BonziBDY_35.EXE
6080	MSAGENT.EXE
2784	tv_enua.exe
5416	AgentSvr.exe
3520	BonziBDY_35.EXE
6164	AgentSvr.exe

Loads dropped DLL 52 IoCs

pid	Process
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
5648	BonziBuddy432.exe
6084	BonziBDY_35.EXE
6084	BonziBDY_35.EXE
6084	BonziBDY_35.EXE
6084	BonziBDY_35.EXE
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
5284	BonziBuddy432.exe
6080	MSAGENT.EXE
6004	regsvr32.exe
5036	regsvr32.exe
6000	regsvr32.exe
5424	regsvr32.exe
8	regsvr32.exe
5164	regsvr32.exe
3336	regsvr32.exe
2784	tv_enua.exe
3684	regsvr32.exe
3684	regsvr32.exe
648	regsvr32.exe
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
6164	AgentSvr.exe
6164	AgentSvr.exe
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE
6164	AgentSvr.exe
6164	AgentSvr.exe
6164	AgentSvr.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet"	tv_enua.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
170	3644	firefox.exe

Drops file in System32 directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\SET3D2A.tmp	tv_enua.exe
File created	C:\Windows\SysWOW64\SET3D2A.tmp	tv_enua.exe
File opened for modification	C:\Windows\SysWOW64\msvcp50.dll	tv_enua.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page3.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\~GLH0046.TMP	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page16.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page14.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page16.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page1.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Bonzi's Beach Checkers.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page1.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page9.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page7.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Jigsaw.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page8.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page4.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page3.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page15.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\t2.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BonziBDY.vbw	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\j001.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page11.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page5.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Apps.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\s1.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page16.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp002.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page9.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb006.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Jigsaw.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\BonziBuddy.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page15.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page14.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\msvbvm60.dll	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page12.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page13.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page8.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page9.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page13.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page1.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Uninstall.exe	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.vbs	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page10.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page6.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page6.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb009.gif	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page2.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Uninstall.ini	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\BG\Bg1.bmp	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page15.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Options\fix.bat	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\MSAGENTS\Peedy.acs	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page17.htm	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page1.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\p001.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\sites.nbd	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page14.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page17.htm	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page9.jpg	BonziBuddy432.exe
File opened for modification	C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb003.gif	BonziBuddy432.exe

Drops file in Windows directory 58 IoCs

description	ioc	Process
File opened for modification	C:\Windows\fonts\andmoipa.ttf	tv_enua.exe
File opened for modification	C:\Windows\msagent\intl\SET35AE.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\help\tv_enua.hlp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentDp2.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\chars\Bonzi.acs	BonziBuddy432.exe
File opened for modification	C:\Windows\msagent\SET3545.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SET3545.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SET3558.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentMPx.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SET3547.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\chars\Peedy.acs	BonziBuddy432.exe
File opened for modification	C:\Windows\msagent\AgentCtl.dll	MSAGENT.EXE
File created	C:\Windows\help\SET35AD.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\SET3D05.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SET3569.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET358B.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SET358B.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\agtinst.inf	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentSR.dll	MSAGENT.EXE
File created	C:\Windows\lhsp\help\SET3D17.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentAnm.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SET35DE.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\chars\Bonzi.acs	BonziBuddy432.exe
File opened for modification	C:\Windows\msagent\SET356A.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\tv\tv_enua.dll	tv_enua.exe
File opened for modification	C:\Windows\lhsp\tv\tvenuax.dll	tv_enua.exe
File opened for modification	C:\Windows\fonts\SET3D18.tmp	tv_enua.exe
File opened for modification	C:\Windows\lhsp\tv\SET3D16.tmp	tv_enua.exe
File opened for modification	C:\Windows\help\SET35AD.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SET3569.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\SET358C.tmp	MSAGENT.EXE
File created	C:\Windows\INF\SET3D19.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgtCtl15.tlb	MSAGENT.EXE
File opened for modification	C:\Windows\lhsp\help\SET3D17.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\chars\Peedy.acs	BonziBuddy432.exe
File created	C:\Windows\msagent\SET356A.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\AgentPsh.dll	MSAGENT.EXE
File created	C:\Windows\msagent\SET359C.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\intl\SET35AE.tmp	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SET3D16.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentDPv.dll	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET3546.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\help\Agt0409.hlp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\intl\Agt0409.dll	MSAGENT.EXE
File opened for modification	C:\Windows\INF\SET3D19.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\SET3558.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET359C.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\mslwvtts.dll	MSAGENT.EXE
File created	C:\Windows\lhsp\tv\SET3D05.tmp	tv_enua.exe
File created	C:\Windows\fonts\SET3D18.tmp	tv_enua.exe
File opened for modification	C:\Windows\msagent\AgentSvr.exe	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET3559.tmp	MSAGENT.EXE
File created	C:\Windows\INF\SET358C.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET35DE.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\INF\tv_enua.inf	tv_enua.exe
File created	C:\Windows\msagent\SET3546.tmp	MSAGENT.EXE
File opened for modification	C:\Windows\msagent\SET3547.tmp	MSAGENT.EXE
File created	C:\Windows\msagent\SET3559.tmp	MSAGENT.EXE

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Executes a command shell one-liner 1 TTPs 2 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5512	cmd.exe
5484	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 23 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AgentSvr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tv_enua.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBuddy432.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MSAGENT.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	grpconv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBDY_35.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBuddy432.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MSAGENT.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AgentSvr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	grpconv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tv_enua.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BonziBDY_35.EXE

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1240	msedge.exe

Checks processor information in registry 2 TTPs 28 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\MiscStatus\1	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{37DEB788-2D9B-11D3-9DD0-C423E6542E10}\TypeLib\Version = "1.0"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{55DD814E-A1B7-4808-9625-4F75A3FAD8A7}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B1BE807-567F-11D1-B652-0060976C699F}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FDE-1BF9-11D2-BAE8-00104B9E0792}\TypeLib	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{322982E0-0855-11D3-9DCF-DDFB3AB09E18}\TypeLib\ = "{972DE6B5-8B09-11D2-B652-A1FD6CC34260}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BonziCHECKERS.BonziCHECKERSControl	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\MiscStatus\1	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0\FLAGS\ = "2"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE9-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F5BE8BD4-7DE6-11D0-91FE-00C04FD701A5}\ = "_AgentEvents"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A7B93C8D-7B81-11D0-AC5F-00C04FD97575}\TypeLib	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D41-2CDD-11D3-9DD0-D3CD4078982A}\InprocServer32\ = "C:\\PROGRA~2\\BONZIB~1\\ACTIVE~1.OCX"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE9-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E91E27A3-C5AE-11D2-8D1B-00104B9E072A}\Implemented Categories\{40FC6ED9-2438-11CF-A3DB-080036F12502}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\VersionIndependentProgID	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SSCalendar.SSDayCtrl.1\CLSID\ = "{643F1350-1D07-11CE-9E52-0000C0554C0A}"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1533A365-F76F-4518-8A56-4CD34547F8AB}\Control\	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\TypeLib	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{159C2806-4A71-45B4-8D4E-74C181CD6842}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	BonziBDY_35.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\ProgID\ = "MSComctlLib.Toolbar.2"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D41-2CDD-11D3-9DD0-D3CD4078982A}\TypeLib	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4F7AE600-0142-11D3-9DCF-89BE4EFB591E}\ProxyStubClsid32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.TabStrip\CurVer\ = "MSComctlLib.TabStrip.2"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDC-1BF9-11D2-BAE8-00104B9E0792}\Programmable	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D47-2CDD-11D3-9DD0-D3CD4078982A}\MiscStatus\ = "0"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\ = "IStatusBar"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FD8-1BF9-11D2-BAE8-00104B9E0792}\VersionIndependentProgID	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B1BE803-567F-11D1-B652-0060976C699F}\Forward\ = "{916694A8-8AD6-11D2-B6FD-0060976C699F}"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDC-1BF9-11D2-BAE8-00104B9E0792}\Version\ = "3.0"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{53FA8D46-2CDD-11D3-9DD0-D3CD4078982A}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EE11629B-36DF-11D3-9DD0-89D6DBBBA800}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\Version	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{916694A8-8AD6-11D2-B6FD-0060976C699F}\ = "RegiCon"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FE0-1BF9-11D2-BAE8-00104B9E0792}\TypeLib\ = "{065E6FD1-1BF9-11D2-BAE8-00104B9E0792}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8671A88-E5DD-11CD-836C-0000C0C14E92}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{643F1351-1D07-11CE-9E52-0000C0554C0A}\TypeLib\Version = "1.0"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FE3-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{24830770-5D94-11CE-9412-0000C0C14E92}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\ToolboxBitmap32\ = "C:\\Program Files (x86)\\BonziBuddy432\\MSCOMCTL.OCX, 1"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Threed.SSOption	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4F7AE601-0142-11D3-9DCF-89BE4EFB591E}\ProgID\ = "ActiveSkin.COMScript.1"	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{53FA8D46-2CDD-11D3-9DD0-D3CD4078982A}\TypeLib\ = "{972DE6B5-8B09-11D2-B652-A1FD6CC34260}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\CLSID\ = "{248DD896-BB45-11CF-9ABC-0080C7E7B78D}"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B976285-3692-11D0-9B8A-0000C0F04C96}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{065E6FE0-1BF9-11D2-BAE8-00104B9E0792}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A45DB4F-BD0D-11D2-8D14-00104B9E072A}\MiscStatus\1	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{53FA8D31-2CDD-11D3-9DD0-D3CD4078982A}\TypeLib	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FD8-1BF9-11D2-BAE8-00104B9E0792}\ToolboxBitmap32\ = "C:\\Program Files (x86)\\BonziBuddy432\\ssa3d30.ocx, 109"	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDF-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FD5-1BF9-11D2-BAE8-00104B9E0792}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1EF6BEC0-E669-11CD-836C-0000C0C14E92}\ProxyStubClsid32	BonziBuddy432.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53FA8D41-2CDD-11D3-9DD0-D3CD4078982A}\InprocServer32	BonziBuddy432.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Agent.Character2.2\CLSID\ = "{D45FD301-5C6E-11D1-9EC1-00C04FD7081F}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6BA90C00-3910-11D1-ACB3-00C04FD97575}\ProxyStubClsid32	AgentSvr.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\ToolboxBitmap32\ = "C:\\Program Files (x86)\\BonziBuddy432\\MSCOMCTL.OCX, 4"	BonziBuddy432.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\bon4.zip:Zone.Identifier	firefox.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3520	BonziBDY_35.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe
4128	msedge.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	3644	firefox.exe
Token: SeDebugPrivilege	3644	firefox.exe
Token: SeDebugPrivilege	3644	firefox.exe
Token: SeDebugPrivilege	3644	firefox.exe
Token: SeDebugPrivilege	3644	firefox.exe
Token: SeDebugPrivilege	3644	firefox.exe
Token: 33	6164	AgentSvr.exe
Token: SeIncBasePriorityPrivilege	6164	AgentSvr.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
4128	msedge.exe
4128	msedge.exe
6164	AgentSvr.exe
6164	AgentSvr.exe
4128	msedge.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
6164	AgentSvr.exe
6164	AgentSvr.exe

Suspicious use of SetWindowsHookEx 36 IoCs

pid	Process
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
3644	firefox.exe
5648	BonziBuddy432.exe
5320	tv_enua.exe
5220	MSAGENT.EXE
6084	BonziBDY_35.EXE
6084	BonziBDY_35.EXE
5284	BonziBuddy432.exe
6080	MSAGENT.EXE
2784	tv_enua.exe
5416	AgentSvr.exe
3520	BonziBDY_35.EXE
3520	BonziBDY_35.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4292 wrote to memory of 3644	4292	firefox.exe	83
PID 4292 wrote to memory of 3644	4292	firefox.exe	83
PID 3644 wrote to memory of 4388	3644	firefox.exe	84
PID 3644 wrote to memory of 4388	3644	firefox.exe	84
PID 3644 wrote to memory of 4388	3644	firefox.exe	84
PID 3644 wrote to memory of 2980	3644	firefox.exe	85
PID 3644 wrote to memory of 2980	3644	firefox.exe	85
PID 3644 wrote to memory of 2980	3644	firefox.exe	85
PID 3644 wrote to memory of 2980	3644	firefox.exe	85
PID 3644 wrote to memory of 3320	3644	firefox.exe	86
PID 3644 wrote to memory of 3320	3644	firefox.exe	86
PID 3644 wrote to memory of 3320	3644	firefox.exe	86
PID 3644 wrote to memory of 3320	3644	firefox.exe	86
PID 3644 wrote to memory of 2120	3644	firefox.exe	87
PID 3644 wrote to memory of 2120	3644	firefox.exe	87
PID 3644 wrote to memory of 2120	3644	firefox.exe	87
PID 3644 wrote to memory of 4832	3644	firefox.exe	88
PID 3644 wrote to memory of 4832	3644	firefox.exe	88
PID 3644 wrote to memory of 4832	3644	firefox.exe	88
PID 3644 wrote to memory of 4832	3644	firefox.exe	88
PID 3644 wrote to memory of 5096	3644	firefox.exe	90
PID 3644 wrote to memory of 5096	3644	firefox.exe	90
PID 3644 wrote to memory of 5096	3644	firefox.exe	90
PID 3644 wrote to memory of 5096	3644	firefox.exe	90
PID 3644 wrote to memory of 4972	3644	firefox.exe	91
PID 3644 wrote to memory of 4972	3644	firefox.exe	91
PID 3644 wrote to memory of 4972	3644	firefox.exe	91
PID 3644 wrote to memory of 4972	3644	firefox.exe	91
PID 3644 wrote to memory of 3000	3644	firefox.exe	92
PID 3644 wrote to memory of 3000	3644	firefox.exe	92
PID 3644 wrote to memory of 3000	3644	firefox.exe	92
PID 3644 wrote to memory of 3000	3644	firefox.exe	92
PID 3644 wrote to memory of 392	3644	firefox.exe	93
PID 3644 wrote to memory of 392	3644	firefox.exe	93
PID 3644 wrote to memory of 392	3644	firefox.exe	93
PID 3644 wrote to memory of 392	3644	firefox.exe	93
PID 3644 wrote to memory of 4120	3644	firefox.exe	94
PID 3644 wrote to memory of 4120	3644	firefox.exe	94
PID 3644 wrote to memory of 4120	3644	firefox.exe	94
PID 3644 wrote to memory of 4120	3644	firefox.exe	94
PID 3644 wrote to memory of 4416	3644	firefox.exe	99
PID 3644 wrote to memory of 4416	3644	firefox.exe	99
PID 3644 wrote to memory of 4416	3644	firefox.exe	99
PID 3644 wrote to memory of 4416	3644	firefox.exe	99
PID 3644 wrote to memory of 1832	3644	firefox.exe	102
PID 3644 wrote to memory of 1832	3644	firefox.exe	102
PID 3644 wrote to memory of 1832	3644	firefox.exe	102
PID 3644 wrote to memory of 1832	3644	firefox.exe	102
PID 3644 wrote to memory of 4784	3644	firefox.exe	103
PID 3644 wrote to memory of 4784	3644	firefox.exe	103
PID 3644 wrote to memory of 4784	3644	firefox.exe	103
PID 3644 wrote to memory of 4784	3644	firefox.exe	103
PID 5648 wrote to memory of 5512	5648	BonziBuddy432.exe	110
PID 5512 wrote to memory of 5220	5512	cmd.exe	112
PID 5512 wrote to memory of 5320	5512	cmd.exe	113
PID 5284 wrote to memory of 5484	5284	BonziBuddy432.exe	122
PID 5484 wrote to memory of 6080	5484	cmd.exe	124
PID 5484 wrote to memory of 2784	5484	cmd.exe	125
PID 6080 wrote to memory of 6004	6080	MSAGENT.EXE	127
PID 6080 wrote to memory of 5036	6080	MSAGENT.EXE	128
PID 6080 wrote to memory of 6000	6080	MSAGENT.EXE	129
PID 6080 wrote to memory of 5424	6080	MSAGENT.EXE	130
PID 6080 wrote to memory of 8	6080	MSAGENT.EXE	131
PID 6080 wrote to memory of 5164	6080	MSAGENT.EXE	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://bonzi.link/"
1⤵
- Suspicious use of WriteProcessMemory
PID:4292
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://bonzi.link/
  2⤵
  - Drops desktop.ini file(s)
  - Detected potential entity reuse from brand GOOGLE.
  - Checks processor information in registry
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3644
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1996 -prefsLen 27100 -prefMapHandle 2000 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {42e7b529-f89b-4b20-8845-52e4c742ee53} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4388
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2496 -prefsLen 27136 -prefMapHandle 2500 -prefMapSize 270279 -ipcHandle 2508 -initialChannelId {a5df76dc-f6ec-42a9-b1b5-486d1aa1cc29} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2980
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3668 -prefsLen 25213 -prefMapHandle 3672 -prefMapSize 270279 -jsInitHandle 3676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3684 -initialChannelId {1d37c138-0ec4-478d-a3d3-00a678e542a8} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3320
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3832 -prefsLen 27326 -prefMapHandle 3836 -prefMapSize 270279 -ipcHandle 3932 -initialChannelId {e95af563-0270-475b-9a8d-5223d5c1fdeb} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2120
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4372 -prefsLen 34825 -prefMapHandle 4376 -prefMapSize 270279 -jsInitHandle 4380 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2760 -initialChannelId {ca319341-bf54-4679-b3fb-cf6c911fda5e} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4996 -prefsLen 35012 -prefMapHandle 4952 -prefMapSize 270279 -ipcHandle 4964 -initialChannelId {0cd15a4d-f62b-4ca5-a3ec-895c60d57e90} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5096
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172 -prefsLen 32899 -prefMapHandle 5176 -prefMapSize 270279 -jsInitHandle 5180 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5192 -initialChannelId {f29b0c39-ed14-4e93-954f-52022daaa360} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5220 -prefsLen 32951 -prefMapHandle 5224 -prefMapSize 270279 -jsInitHandle 5228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5236 -initialChannelId {c27d4e28-978c-4be3-9732-f5aeaf7c7b46} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3000
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5628 -prefsLen 32951 -prefMapHandle 5632 -prefMapSize 270279 -jsInitHandle 5636 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5640 -initialChannelId {32fc8429-b95b-4b81-93f1-9f89e7c446b1} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:392
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6012 -prefsLen 32951 -prefMapHandle 2808 -prefMapSize 270279 -jsInitHandle 2880 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6008 -initialChannelId {4819fca3-6ef2-4f2b-9d28-d6d22a5e2060} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4120
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6420 -prefsLen 32951 -prefMapHandle 2808 -prefMapSize 270279 -jsInitHandle 6408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6396 -initialChannelId {045232e5-442d-4979-88c2-1b31be3852b7} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4416
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776 -prefsLen 32951 -prefMapHandle 5652 -prefMapSize 270279 -jsInitHandle 5780 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5848 -initialChannelId {25fbdb56-6467-4d43-b957-2bc8f74a606b} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:1832
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5160 -prefsLen 32951 -prefMapHandle 5532 -prefMapSize 270279 -jsInitHandle 5592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5836 -initialChannelId {2001163d-95bb-4c0a-8718-0dc551b5ba99} -parentPid 3644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:4784

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4688

C:\Users\Admin\Downloads\bon4\BonziBuddy432.exe
"C:\Users\Admin\Downloads\bon4\BonziBuddy432.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5648
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5512
- - C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
    MSAGENT.EXE
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:5220
- - C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
    tv_enua.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:5320

C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE
"C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6084

C:\Users\Admin\Downloads\bon4\BonziBuddy432.exe
"C:\Users\Admin\Downloads\bon4\BonziBuddy432.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5284
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5484
- - C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
    MSAGENT.EXE
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:6080
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:6004
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:5036
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:6000
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:5424
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:8
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentSR.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:5164
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:3336
  - - C:\Windows\msagent\AgentSvr.exe
      "C:\Windows\msagent\AgentSvr.exe" /regserver
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of SetWindowsHookEx
      PID:5416
  - - C:\Windows\SysWOW64\grpconv.exe
      grpconv.exe -o
      4⤵
      System Location Discovery: System Language Discovery
      PID:2928
- - C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
    tv_enua.exe
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Executes dropped EXE
    - Loads dropped DLL
    - Adds Run key to start application
    - Drops file in System32 directory
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:2784
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:3684
  - - C:\Windows\SysWOW64\regsvr32.exe
      regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:648
  - - C:\Windows\SysWOW64\grpconv.exe
      grpconv.exe -o
      4⤵
      System Location Discovery: System Language Discovery
      PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bonzibuddy.tk/
  2⤵
  PID:2184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://bonzibuddy.tk/
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:4128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x284,0x7ffdab1fc188,0x7ffdab1fc194,0x7ffdab1fc1a0
      4⤵
      PID:5696
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,7393947158576429360,16712628767553889075,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
      4⤵
      System Time Discovery
      PID:1240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,17488090474713716655,12426263374920116988,262144 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
      4⤵
      PID:3164
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,5026270271610651524,12162389655707309801,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
      4⤵
      PID:2296
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,17678889193231524542,10083867735204948082,2097152 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
      4⤵
      PID:1852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,2551239920296136439,10439085229962314282,2097152 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
      4⤵
      PID:576
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,10053055075800839848,1365795499279350258,2097152 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
      4⤵
      PID:5800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,12121379153581944316,15556849261211623624,2097152 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
      4⤵
      PID:4840
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,17594926286328364930,18275691777108822859,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
      4⤵
      PID:4352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3708,i,17095039325082895542,859753149522279703,2097152 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
      4⤵
      PID:5264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,13271462069450928890,2989454139477068354,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
      4⤵
      PID:2016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,3149819648204969166,6467396851345585981,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
      4⤵
      PID:3088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,15720688679754198232,878747156200009797,524288 --field-trial-handle=2172,i,9912582424662251364,14167387567178212749,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
      4⤵
      PID:5568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3088

C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE
"C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3520

C:\Windows\msagent\AgentSvr.exe
C:\Windows\msagent\AgentSvr.exe -Embedding
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6164

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2c0 0x344
1⤵
PID:5716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AUTPRX32.DLL

Path C:\Program Files (x86)\BonziBuddy432\AUTPRX32.DLL
Size 137KB
SHA256 0563e77b6bd63eb0561f6264badb5d07dacb7287ce029dc3ca3279a964ea6a6d
MD5 6e62806f4121eed119ef7d361f3322ca
SHA1 2265e83e068fd0bda58d0ed8366050614138787e
SHA512 fa5efb12fcd7d34a026b95a573c5a8b72dcacfa0c3df439e55691f27c9c0d8cd8905f0d3cad610259b9bdac474a3ed41796a91474e0ab522e78d8a2cf2a53dba
SSDEEP 1536:yTChuEXZnfAdeegEKMK53sORozp/pzbcsXG7fPKvKqRwYKIr0k7kZp:yTCUEXdowEc53sOc5b+n+05y0k7Up
TLSH
T110D34B76E1C3AAB1D9CB873C05E73A1B563B6B9087D2E5C346307811E6F36D19938392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ActiveSkin.ocx

Path C:\Program Files (x86)\BonziBuddy432\ActiveSkin.ocx
Size 336KB
SHA256 2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877
MD5 3d225d8435666c14addf17c14806c355
SHA1 262a951a98dd9429558ed35f423babe1a6cce094
SHA512 391df24c6427b4011e7d61b644953810e392525743914413c2e8cf5fce4a593a831cfab489fbb9517b6c0e7ef0483efb8aeaad0a18543f0da49fa3125ec971e1
SSDEEP 3072:TVKIgW9TkeIu2Yewxx3aGwz3OzT6pe3EhV665fi5sMfkjjyO0DtQo1fPqdXqvbFv:pKIkYPOpeUhV/oCMmjYtRne2LQ
TLSH
T1B1748E12F7C3C47AC15716314817BB7EA7B9E6028925928B236C3E4E2F72BC0695935F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BBReader.EXE

Path C:\Program Files (x86)\BonziBuddy432\BBReader.EXE
Size 1.0MB
SHA256 2836a35937ad987bd9ddba33162136d71bcbaba0ad6d9b1930a412961b3a3523
MD5 eea3608cb27995431165a2caaafb00a6
SHA1 45b73c03bd68be6b39d7e3737c4853db2998f3e0
SHA512 eafeda44eb25ed88e9ba286d18586c56c7e6e0d09930606306ad1cbc778a4c82cf167ec8dee045633ce480dbed954e8519614692f1fd458a8429a60de9f0e359
SSDEEP 24576:/fJVUJXElZF35fJ/8nSRigjeDnkHe/JE4q:/fJCJsvREnlgarg6Zq
TLSH
T10635CF17DE0C3159DB4208F09827767DE652582A8C0F8F83F793A9853BB3687B5E524B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bg1.bmp

Path C:\Program Files (x86)\BonziBuddy432\BG\Bg1.bmp
Size 868KB
SHA256 e4843ab74d29d608e406d137892afced0661ee56c3cd899cf49bc863dfc9e99a
MD5 1b360ab50e93b123ab13f036d5c76f45
SHA1 f274fe317961cab9f2d9a8bf558e7734d7a7a338
SHA512 e23a7c7394944482a94c6a56fb875def9b51e44b4ed0dff907ed57cc1d681ee8dc878c2a14b3b34793c4afbe8ccbb54258281d37fa2d90bf066c2365e0f8471a
SSDEEP 12288:4a9s25MGQUdzOZ9NYoNxG/bTyy9Fifuz2eRIpl8p9VncBvYOHVyxHvYDqEnKwMTC:4kj5/fdcNX70nYOOEG9nr
TLSH
T19F15F107B4851EB6EBF2A6BA58064361B7C2E832F78A757521C90F079AF9CD44FD0217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bg2.bmp

Path C:\Program Files (x86)\BonziBuddy432\BG\Bg2.bmp
Size 868KB
SHA256 2066f7ede6410b790ee3446b6c27470526969eb837ab9187f61c10c611bdcc5f
MD5 c7263e35b3e47b805356e06cbca930dc
SHA1 4dc3f33674bd914c86a4608aaf0a65b91df86e3b
SHA512 5732403c83678f0b582e8940c00e94a5e0376e80263b5ae804cb7cff18108a3c69ada76af66fb331cb67c0d89d4129bae28c17f3a91230eaf4717f6cbe7ef2e9
SSDEEP 24576:Ua1IqcHaBedHXQuGahQaeGDqV48bnPs10b:UbqcH9dA34QTBPs1y
TLSH
T16C1501579B190B9CE06F07B82CB24F9C73E4E89AAD74D7C49C0D633BBDA92D21930159
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bg3.bmp

Path C:\Program Files (x86)\BonziBuddy432\BG\Bg3.bmp
Size 868KB
SHA256 d983ff82ee546e5706da39531aff69721b9896fc99eacd59bfaeefdd0bef0147
MD5 fe0a9cbbb8b168c7f13b1669d2fbd801
SHA1 ca3eab96c7fe48fe27086941fc2c09549473e0d7
SHA512 59b3ada28a58795eabafe4b998062c6b5d27b3d370687666341fedc66f53e5ff5e8833b0eb378826fcc1a775706fcdba0dc1e4b99451aef8fb4aec6b1a3d8b3a
SSDEEP 12288:Q2hVooL/ozxPXQWNSc65DwyRVn/Vz39grtiL9AxrawMx9fDxiLvQXGFoPtniVuWF:rVoAoz9gWPEwA3WZiLaWEQXGFSnhWYr4
TLSH
T1311501145CC5CD9DFC37DA38ABAAC3D075B7528CC92C7C2F51A7A94065C8CCB906AA9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bonzi's Beach Checkers.exe

Path C:\Program Files (x86)\BonziBuddy432\Bonzi's Beach Checkers.exe
Size 7.8MB
SHA256 821a16b65f68e745492419ea694f363926669ac16f6b470ed59fe5a3f1856fcb
MD5 c3b0a56e48bad8763e93653902fc7ccb
SHA1 d7048dcf310a293eae23932d4e865c44f6817a45
SHA512 ae35f88623418e4c9645b545ec9e8837e54d879641658996ca21546f384e3e1f90dae992768309ac0bd2aae90e1043663931d2ef64ac541977af889ee72e721a
SSDEEP 196608:dHEIuTYGLjhw1ryZ5FVGFtJuLKMH0qyPbRSpXR:xyYoj2ryZ5FcnJGe7bob
TLSH
T141863392F8971934C1C81FB781C8117E9525AD528CF67DA63335B26E6372FDAC2603AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bonzi's Solitaire.exe

Path C:\Program Files (x86)\BonziBuddy432\Bonzi's Solitaire.exe
Size 3.2MB
SHA256 fe97b317d345fb3e708087ebf27a50c539f66fc77c7b6895825f564c9fefc4c6
MD5 493d8bee27d448c45f39a244fcf8eb62
SHA1 0acc859294d50fd2b49e0393b7699a552695d1a1
SHA512 c670f8cd182ef8a87daa8f1269868eda8d7ef96549c3c5d16325fc86a2272540aa8a1e12b7d7a12256ad67f421e8f2d5f416d72ebae5779e964ac6bf3ba209f6
SSDEEP 49152:qh1iXp1lbbqcH9dA34QTBPs1WVoPzlPJA3WYLaFQXGFSOA9HO:qh1iXp1p7H9Co/1eoPpP6hL8EGFSB9H
TLSH
T1DBE501077B484E98E87A4A746D76C39973A2FD05AE1C6B1B30C8771F2DF9CC65D6020A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bonzi's Solitaire.vbw

Path C:\Program Files (x86)\BonziBuddy432\Bonzi's Solitaire.vbw
Size 52B
SHA256 f8cae184ce04d906e348ff795aa20f6ac26e45ee41fa3de16c6985b291e3fdc4
MD5 9b909f17e524b7fa854ad4709dbc349a
SHA1 c66425f2082a88bbb248287128a1cda3a2fe7ade
SHA512 7124b6a8e66633c9fd1fcf006528db117de605ba7378b69fa6c7096f01a9f6d5757093a40e196d3e6b987a3ed4e96fed531ba05971974cd3143205d31e540dde
TLSH
T17D90022040100AF582019B9644702C69FE10934926229453350D49C0460E1D05525410
MD5 SHA1 SHA512 TLSH

Submit Download

BonziBDY.vbw

Path C:\Program Files (x86)\BonziBuddy432\BonziBDY.vbw
Size 53B
SHA256 4dd98f95113b70772308a4671a482b9b59bba5fbf41e928f2a833366c54424e4
MD5 b4d876161a7abb7bcaea37003dae158f
SHA1 5317af4e389e00103faf2ec0a1acfa2b59b30843
SHA512 3d5da08c1c39cb4ea24b66612a383e166500dbd891113f080c66ded8a29bf8e4094c6e407fc24f873d598e13daac8c06d91ba488f9d4ca10eecbc1f51f649767
TLSH
T1EA900231005445F882015B9141B12C5DFE1583882101909375055905470A144D319714
MD5 SHA1 SHA512 TLSH

Submit Download

BonziBDY_2.EXE

Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE
Size 796KB
SHA256 1e2994763a7674a0f1ec117dae562b05b614937ff61c83b316b135afab02d45a
MD5 8a30bd00d45a659e6e393915e5aef701
SHA1 b00c31de44328dd71a70f0c8e123b56934edc755
SHA512 daf92e61e75382e1da0e2aba9466a9e4d9703a129a147f0b3c71755f491c68f89ad67cfb4dd013580063d664b69c8673fb52c02d34b86d947e9f16072b7090fb
SSDEEP 24576:u1bv4xVGCPscduI4G7wO7GAlKawj90/J0H90fNYJmbZOrzw9HSiXVhgJO6akuqTH:uvakuugaEN
TLSH
T11E05D613F3A9E00DE47396B16A74926E59267C3645F8D91FB2801F193071AD3A8F1F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BonziBDY_35.EXE

Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE
Size 2.5MB
SHA256 88c03817ae8dfc5fc9e6ffd1cfb5b829924988d01cd472c1e64952c5398866e8
MD5 73feeab1c303db39cbe35672ae049911
SHA1 c14ce70e1b3530811a8c363d246eb43fc77b656c
SHA512 73f37dee83664ce31522f732bf819ed157865a2a551a656a7a65d487c359a16c82bd74acff2b7a728bb5f52d53f4cfbea5bef36118128b0d416fa835053f7153
SSDEEP 24576:KAS+cA9B93P0k/ubqLss6/BAgGz+nDbZ65EeLpCeet7hNSw/yinPo1rCmUGCx9xH:pSQclDbZ65zpCeet7hNSw/yinPo1tm
TLSH
T10EC53B13FE44E00EE57285F07874926B5A28BD3524B4DA0B73907E59A1F27E3EDA071B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BonziBDY_4.EXE

Path C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE
Size 3.2MB
SHA256 5678fd744faddb30a87568ae309066ef88102a274fff62f10e4963350da373bc
MD5 93f3ed21ad49fd54f249d0d536981a88
SHA1 ffca7f3846e538be9c6da1e871724dd935755542
SHA512 7923556c6d6feb4ff4253e853bae3675184eab9b8ce4d4e07f356c8624317801ee807ad5340690196a975824ea3ed500ce6a80c7670f19785139be594fa5e70f
SSDEEP 98304:F5xCKlYAaIn76cR9kyb6aHZ1m8nA2L7K9O:FbCKlYAaIn76cR9kyb6aHZ1m8nA2L7K0
TLSH
T1C7F51903B610A40DE1F285F27CA4D1EEB5193D7419B8A60772917F1BA1B97E3ACA431F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BonziBUDDY_Killer.exe

Path C:\Program Files (x86)\BonziBuddy432\BonziBUDDY_Killer.exe
Size 48KB
SHA256 6d80bd5a3d5ec6630e9a411a978c8e2c196f530f6a5b580fa982c5ad1622bd0c
MD5 913d38cb9d132c8c92b21cff05a7eb62
SHA1 eb829ea4de07193edb16d8c0196426919c452d42
SHA512 9b154d60352e864722c8f1ae0c0d0d4dcca670a47daea9b13b58a8cfd4f8c9275cebc6e51d755de77025e1a10115a2ac09416f273a44ead4a0c742f14e0e9d5d
SSDEEP 768:/oJ3E5YytYytYyy+YytYytYyt7sIi2fl1DEAJ3E:/OSJJm+JJB7sqDE2
TLSH
T13D237B39AF6BA172FDA2D7341DF19FE112937930F7206D6629584B2E0924241AFC930F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BonziCTB.dll

Path C:\Program Files (x86)\BonziBuddy432\BonziCTB.dll
Size 28KB
SHA256 f85525a3ebe334f7403f031ec47c2b32461650224223ee728107dce0e879ea93
MD5 6a4c7d730aed29b0405b03e128c1655a
SHA1 1dbb8dbbe7bac39196f7697486a36dedf59b31f1
SHA512 212ebd6b0cfa2500add4813860c74288e83a606676bcba837d500ac30960c10cbf1da25c7f7c526cf9953ea619f8a3244dc1d5fdccb1c1577b271e37289ecd7f
SSDEEP 384:MDM8av3HaAdlYeH73h0Bg/IX5HP30sLey:kU3HaAuAaagpvxC
TLSH
T1D5D28222B2EEC12ED51901B11E27E6ED10587E310FC5E61F75EDFB8E0E769409A24B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BonziCheckers.ocx

Path C:\Program Files (x86)\BonziBuddy432\BonziCheckers.ocx
Size 152KB
SHA256 9028075603c66ca2e906ecac3275e289d8857411a288c992e8eef793ed71a75b
MD5 66551c972574f86087032467aa6febb4
SHA1 5ad1fe1587a0c31bb74af20d09a1c7d3193ec3c9
SHA512 35c1f500e69cdd12ec6a3c5daef737a3b57b48a44df6c120a0504d340e0f721d34121595ed396dc466a8f9952a51395912d9e141ad013000f5acb138b2d41089
SSDEEP 1536:HtfBDnpy/MOuoHvCXDYd05gNsHzmDwUhUjm66UGi+axKQMArl4qwt4h0wcRv:dBLp4UoPC/zIwFsSp4pt4h0wov
TLSH
T143E30913B3A1820EC4955E74264BA3F8502D3E330660916F9797FA6C1EB5ED39E3472B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Thumbs.db

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\Thumbs.db
Size 23KB
SHA256 5d21bbd3ba16464b5ae1327867839f16eb5c161d60d2b5a81bd11a7f8075ffbf
MD5 4c436b128feda301505e84bd00e9aace
SHA1 61a3bac625abb015cc8e1a6397107dcaabd9866e
SHA512 82f0d1a7fe5a4274991eeeedcba120fd16924ca02ee69b2668b29a108a26b6c2ce7c3bee3d289e6281574f57ca4407d56025cd10142b9fb28cdd180d22c4e42e
SSDEEP 384:X43/Xud2Rb/kUYfJ90xFQKZ6YzPKfwy11t19WjSaeTAoQv4fFu6/n:XA/XuIhMUYfXoNYYKfw25ZhQvYFu6/
TLSH
T133B2C0833572E61CC016E7309C2299CA5D13BE689ECE57413BE7336B67795B01E89C98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

book

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\book
Size 16KB
SHA256 79acfe9005133be613baa6d85ff170ba9c4a7109d8dabd45cc5a39bf7f32b04a
MD5 15ea0525b8eadba671e9d56306de1b01
SHA1 056c306d935fffc9cd27e2db200c1efddc4155ad
SHA512 455b5b9daff01208df7a6cb2f24820130064dad73d8b34184a7f114f07221d2c5350c0e6b46ae5a0452db58fb95dfb27b20cfcaad1da2ecd9c03430f8b071966
SSDEEP 384:xk0LyR6Ld8z6k5+FUK2Aq/yqz+2LWmhvOTwoqCmfv69aQ31/bco:LLp06k5+H0/JKWLvO1qCmfyaQ3v
TLSH
T100729F188CEFFD021B2BD0272476A84FF64F58040AAF19C5DC11A3ADD67CF495C6A655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page0.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page0.jpg
Size 58KB
SHA256 4b0d3ac6305c56e814e87734d3798a4534b639fe7752a20bb398fa9eaf59bfd7
MD5 2f86991655a07f1e0ae608ae69c8de62
SHA1 89885605155e2a4162bdb5bd0631e01e350d7608
SHA512 1843da571ee2ab31f6449e94698e51445e458829fe37b98c8967e9d3572a06811c12438f3b7cb8e908d95dd583429d69c524a50bdfd0390a84af0ccef5f2b552
SSDEEP 1536:XF/EtriiF6Bh6jve8uwKht9APQv8gw7kZIz:XhwiiFaU2llt9APQv8TwZIz
TLSH
T132430267AF9E9F8BC7EC313013344F5C38E14D42FD642696477B48260BBAAEB61258D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page1.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page1.jpg
Size 52KB
SHA256 bc48c07bc245bb7a7561c983c72851bc2f48cae594472c48d3447456dcbea804
MD5 66fe43801d34b46bf67ed75989779010
SHA1 a5f48e93f10129ec8b0ae0b71a3901229d936fb4
SHA512 0c3ee73b3f1009140a5bbf8a07b059db37bdb30e673d46b87992541b4f96545f663b083c97926da7dbee053b5be557186aa9ea6e3a7deb2d511daa5f9f3e59da
SSDEEP 768:X9bCx4GufcGl9YGb2rmfSEU4oZJJgCba6l+RAk+BgPR0vK+/u6t1OChHdPvMm42J:N7GufcGdPh+2KZ0Ajg50jftMChHdHMFO
TLSH
T19933026D0B4013FFD244FB6B87B90512AE6A35E310EAD696C7B346D2A079ABDA751300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page10.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page10.jpg
Size 50KB
SHA256 170bdf6aaf4971f4a7f8647aff13e586be00dfcf6f102ddfc218a28b55fc855a
MD5 4ae333c66ef5fefe71af37c161ba20cb
SHA1 e0ddf6e7d3535847a507099280cf892df5c56742
SHA512 0e515f1e9b461267ca6c48be6874279d1eb575ae829ca2d1b0579d85f10e0249587c62d5063c3ad32416f1c0d66cb9d650f6cc58f27e10cf934430fd1a5fdcd1
SSDEEP 768:fMjSSMJr3FmxrLkjxF+x82RJxbmYR000MW0D+lM5J/+J1Kzew:kiJ7F6rLkjuO2RJF6/MTD+swJI6w
TLSH
T15C3302D98A570310FD86CAB4E471104DB17A24BA691B3B849BF8F4D0A0DFB56F2D588E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page11.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page11.jpg
Size 48KB
SHA256 1eec3c97c806459052a98661e0bfcdac4eafef0df5fd2af6c4c53916156e5eb1
MD5 deb89b81b2655a117454893c71cf39be
SHA1 1c573f99842e46abc56accd7cb4d7f4b0f93d063
SHA512 83536ba1b85b1822544997be4e4ec08e79684a747de5b2c1af3751d75d7dc848e0c743989cd5cc6996d3d8fad918cd7cf6420796d793e77c3261e58d61736107
SSDEEP 768:TNBT5XsT3Qkx6F61AJx292D3UQTpoN+qLf4dCqknXh+d4z2ZvhJcJbyFdDLam7nD:xy6F61AJ/DfTpMLfc6xOvhJqbyTL2Q
TLSH
T1152302E5C762DE228B51D3BA7C31EA17B28979D60413AEDE4893C95A2F7003DB0D24D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page12.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page12.jpg
Size 49KB
SHA256 2f52d995e111b8c9ac693663a03ca0545861e94c53c7110270d21ff10cd4876b
MD5 75ab958c17806c34e8bff5833816ce56
SHA1 45410fa635d296b400da35cfa90e4207e43b084a
SHA512 7947fe6708c45109befcea84019b5f5f84ec1a80137c1895045a38c9151a525df283a47f9f300a386df992492b4f4b12b8a8eb2f0f9c98f8e4a9660723b53c8f
SSDEEP 768:JiG0Rn43Vggfbb72O+6mbTupZ4ttiEXaBzbzCrcoRO5tlLTaqvmi3qvNFOk:Q1nIVggDbt+bc4m2rw1acmi6vXOk
TLSH
T1B2330202C257BB9FB623441A1D7B29526405AA768537F9341A7D52C83EC0C3AD578FFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page13.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page13.jpg
Size 51KB
SHA256 43f4e85f1c60b73fa8252dfc755e38649e8d23ba8a666a83d0cf859b0920f4a1
MD5 3b53202999c06a3fc163ca659dfa31de
SHA1 73fa0053205b67920f7d3e6eef7fe19819603847
SHA512 916aa4b595a91e13a0b1bddac0f9fedbd131fb024d0a925628fc332239fe053615298f5c18e2e8f4319f4d211c5d679aaa91350f5a781c8d0f18cbb71b3eb58c
SSDEEP 1536:BozxapdcGnnaRO6Rc9tK5D14lREgPRgyp7:qzx7Gnnf6CSQV
TLSH
T1E133027871D9CB05E7368A71DFF6C717D75D9FE821E68BC0C4E6848835A8A3934021B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page14.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page14.jpg
Size 55KB
SHA256 aa9acde92741388db556b92bb3b3c7052faf78984835d4e05f3ff1bb44c07a3c
MD5 2f0b89fb6286f9cc3d4f698cfe915d3a
SHA1 fb613a71ba544fff7e26be88e8c5316daa99fb0b
SHA512 742841434414a05d9f5985674268c776123c504b38239f5552dc4e4431254a604e678f5b818570dfd99fafb905fcf052fdcb614952ff9f2befdfaf62453a36af
SSDEEP 768:V0AcKUPRovLoIFeI5wf69TP84HyqTlUXVQ7OX60Lv0SffAALRf9X7BXftM18d0Mx:V/LUu4FU04SqqFFfmAxXfq19MirkZ
TLSH
T19A4301FB4F9EBB5050D91AF24ABC96A08E7F0C5485066F266C331DE391E0355BF88D46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page15.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page15.jpg
Size 62KB
SHA256 2f1b0d7ff847c3987ddcd2eb432c8311bb148de5164b3d96f9f9a267d412079a
MD5 b27f0a5f078782344ee60345bfb30b19
SHA1 1e2d4ca315e01e9625a906ddffdd3c336596c432
SHA512 58ca3d5336b9a37568bf0dd6fe92fee7a2ba6ecf4d24c66855f0f6dddbc402445e0830686f4566ea73eb1ab2217bdc15353979f4028654b06c8d793b15a87c82
SSDEEP 1536:BdydOqtR7qvAgK5BmJOemahS47B7Xbdnd/Bz:BMltBqbOCM4F7Jd/Bz
TLSH
T15353F1855A47DE036996BB33CB389F22D1839E0799F004152C7FFE5366B5B8366AE103
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page16.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page16.jpg
Size 52KB
SHA256 e43ef38555b187d9335c77d60ccd215504af10c626f76e4e4967fc690b6fc300
MD5 f9de53edeb7b5b9f1e59c41637553cdb
SHA1 7db31e8a8723f0b940504087371c50cb6953b9c4
SHA512 3a7be8b1f7c99242c381db4e0e6e52f3bcb71ac665d03ac81a93bf8f801335a6018faf7afa0d9d61bec7a481132f2541991e12c2e8d1d7a22eef13af955d9d64
SSDEEP 1536:lAppLK0eDfAmDFAyO7rlb+H3mrOJ5RI/3VlOU5z4tuf:lAjK0e3FAX7rlb+XFIPnz4tuf
TLSH
T15533024DBFD0B9D6DF18B1BC2A717284829D9E5163F33C1901BB4A7CA01F24846BB09B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page17.htm

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page17.htm
Size 1KB
SHA256 aca6a7880bd5a465d896f9d639e4a24fd93722d5d1f1b5bd08cde5479df67158
MD5 c03e5da83f9638627aad803869f8e89b
SHA1 a93e0f8abc90d90cb1b1caca5d96ba40a3f896de
SHA512 e100cb00036b6d6a25151ce0ceeca21654509ad23a4e89d244ed0692cc83e45bbf6ab6f40e8fdabef8cbd4782236e0f76ed54569d60320b8c8c541958a754962
TLSH
T1A941651667532D73D7C2555E714072C0EE925144A26AB774703BE34B72C226A4BBE3FC
MD5 SHA1 SHA512 TLSH

Submit Download

page17.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page17.jpg
Size 49KB
SHA256 f08a95be88f1a893ef2989b258ab5699e49978776012789a4bde7056710fd45d
MD5 7af7a675721f50492623d54c828fddcf
SHA1 bfacc606197c260dfd3d5c60c6eda264cbb1bf3e
SHA512 f049cff2a6e26b36dbf389b2625c272d35af4110f89789c1659eb6e13fefd057bdd7672209b3d693c7e0c2e31da376f47f892e7661579c333061f13a04613c15
SSDEEP 768:gSBkgMFBWq1nVeJbELAKNNSVO9ZLdFGga11FR6oKlCM9YojnU9Pq/Nirw1YTRg0Q:eggeBYzSVudCCYoqP80w1+g0nXlgp
TLSH
T15633F119DF164F3C29EC2CA34890E994ADC8FFC791570AD3E0B39EC165541AAC353A36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page2.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page2.jpg
Size 48KB
SHA256 b961e9334abeef3ccca67eead97cfbd6eddc857f3d0a411e1978e22a14c27aa1
MD5 9ea27ce1ba44be65a1756799a906668f
SHA1 a4420b616beb0e2f5166471d655cb7cdfc866e27
SHA512 660413d845cfdd583555e1b8227849f4605ff369dbf07fb4c7085dae3aae1929db1b265326b7545255ceb52729ac072f83ba1a6a455ab582f5e14080aabba32b
SSDEEP 1536:xJWFM8/gbPaNYYGo1NXeY1ST3vGcbRV2EOEYfD:yFM84bPaCY1VfSbhbFG
TLSH
T1A62302B46382F73FABE48163C12ED46BB919B21C61D6CD8CB4F2B5A409B07A15F6491C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page3.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page3.jpg
Size 57KB
SHA256 7fb6ec96530be3754466c0c7a33c5302b8e38dd9d1b7fdde8c32926e98b4ade6
MD5 7455ce480dcba6cc511dd8f5dcc7c3f8
SHA1 5395a1c85e25f2d33b545ae62f7c2b0d83a5eb03
SHA512 2f18c07f01c7bf6c7e8d5f6d77c02509f7da56a120d57e072cf9495dd54b23143c33079c735cfca2b7862d7266456447f4d63837b86310a964cfbca9854830c0
SSDEEP 1536:JoxQCuU9Nd16m+sGoQUktXSlDt2DWA9qC:JoxQz0QliDt2DrMC
TLSH
T1FD4302C3BF0E059AA8746B1D377E932C8A5617866C6B14A8093E4884F47076B3BA7856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page4.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page4.jpg
Size 46KB
SHA256 973f508f18f8c79dc0ae8810940d79ad3b46939ea69afc7c8864897d4cc284b4
MD5 1895fe2f1c64a21f45f4b14ba9f4ca3e
SHA1 da08d8d0ebe04c0c092166df13a1af530a968699
SHA512 e2670a834f6a963b4456bab85fd1194516c05e4bdf8ccb7117e0d0181fcbcc98f3ab8e40ca25df386e25170f728ce72f690c888f8dfbc37151c9dfdb27aa0e26
SSDEEP 768:V7SAqvu4i4joD3C84DrNjhxuT3U2HEl/0Ei3sdHIBzhKbpf/8Q2weD1iSh1d:5SA0LjYS84PxuTREOZsdHIBhQJRShv
TLSH
T1B223F246E310B74B903100B573FDE181AF6664ED20AB2D80DE31C6B53B1A7B97A76927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page5.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page5.jpg
Size 48KB
SHA256 3048bec5f4781d08360534a96ef7dec46a076cdb83cbfc1ecd84a157cf95f9f3
MD5 4ec64b5866f3e42edfbae14d18fec0ef
SHA1 61a38083b79dc0f56408b692db424ebe424a863f
SHA512 d1c268fc46aa14dd77eb42211deb620ce07c512f14a30d7a47a2d3ef30db6981f5db413f1cc170bd414a4f252cfa3243ef196b80fde0f04d4efff5582d51780c
SSDEEP 1536:xr+fHYna7fUdbzoeQ02cMn1Zm3spSnHw1o9kr:xr+fRMdbzR6n1Zpp6H9k
TLSH
T15323F1550582431A6328FEE2B37D84A6C86C063352B9DB4AEFBBA80452F6F2751DD437
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page6.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page6.jpg
Size 53KB
SHA256 a336ef4a9682e6209a47821007f4bb0ee2afb0e0bb2c3a15ef7d7c9928267aef
MD5 a644394a3090320de4583a807fb71ba4
SHA1 a54b6542e5fda980ca277c40f24e2c2863b4840e
SHA512 322e6d09e9f66d6ad8c81937a4716512bded93ef2ff164bc0beb1f7fabd0866e4ea70cbfb96e1f96b9db3c224bfe444d2369e1145318e28fc5237a7b53f12e56
SSDEEP 1536:RtO64aMRADTpymkb3oF9d7b0v8YjuZGUEHX3:rOzNc50oBXE
TLSH
T1004312A2B685CBD2B4B8A93E54B9452E20D45F7E70D2FDC4D2800164791DE1AC8DB3C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page7.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page7.jpg
Size 34KB
SHA256 94ab8fff641c839e81860b1c3b5f28cf83ed86b5285fae14f27a112c03845d24
MD5 e77e17381f924ec64b43a4e9cf881cef
SHA1 22cf59e2f8745f14909e5638f3c2d07a68048f93
SHA512 3da3e6b949e61524481a288012ba71248d787760208907c3d0243239e3fbcd661b579c3b1c0f06a59b9c3de589a612da241433baa4a970b723b9e6c065a0d22a
SSDEEP 768:K+sXyuFUlJvQx/OvPfzi8Kqn6FYH87/J6Iwz9D4WVw6Qc:aX9FJOvPn8SkwRD4+wVc
TLSH
T179F2F19BA4A47BEA9639402F3C37424E7AE43E55829E4A3FD0B91C42443EC8DC266874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page8.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page8.jpg
Size 52KB
SHA256 544e8923ccef640c4b22499319ae5eff1b7dbae862e0143c40f6e870e9159db2
MD5 a25d8068b62c373ea11dd9112857e80c
SHA1 bdcb6b8a76f4bccb664d93522eeb4dba9d851d2e
SHA512 7262e93d05b675d85119d85ef8474eb2ec58828c7ce0ada1b754d15af918330ee8858d9c73ef191b5bc7f50c84ae25047a35186ed6685c7c161a4aaa925e7354
SSDEEP 768:HGgdx4Qi6R4kOpQg7MO8PZ3zpunjS8SUSxhK1/nXBeeE7ya3t/13wlqKpXdO/GAc:HGgdC2rOT7Mh4PSU/hRjEGad/KqKpym
TLSH
T14633F15F3B89E762F808B06351B83168B72DDEC5401521F86CF52B1E96492A10FAF9FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page9.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page9.jpg
Size 49KB
SHA256 ff19988ec62abe0e0624c2c5f91994d59c050b32217d680254e6b7796b6e8041
MD5 3e93b462fccd9533c2dab973f717a8a2
SHA1 b0d6782f035a2d7e3de57a8260275586f3acb852
SHA512 8622968201a10bd95388426dd6fbc0f41a650a742de4ef07c315555064b3cf135525c2b3506dc0af9a559707567af11ed7ac48694cfc197d54f06bc20dfdbd13
SSDEEP 768:q6owM3jG5oS0LuSfunDpXeU5XtNFcxDy+4vZ2FL8uMlaA67LylfDWGuiFCLcAVZE:pZ0LuS2XBADy+MMso3yFhuiUwAVYf469
TLSH
T1D733F1A7739B5333AF0464689B30E9C5C7482613BE203A5111F366CDB4A5BE079ACF72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Thumbs.db

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\Thumbs.db
Size 128KB
SHA256 2637ab06ccab00a9b6937c7d2c02e42a46d98f4351bed5236801ad3d3cad98f8
MD5 91122bf7c12c199558ac2f24bcacbcb2
SHA1 bf3cacf426b9e76348e2f4da0922c510cc83c004
SHA512 dd52a1b2edbcaa11adab884de710edba1f42b47c53eb872cdb7f0710d550921a831aa85562a3dfaf1de9275b234d4f152e5c35350bf42674425a83c6e2db1da8
SSDEEP 3072:xahRtqLVIzBAoxNflaiXbJZkfDiyKLYd5WwqN8u:x6t6GzLaqSDyLYd5W
TLSH
T1A8D3021170E7CB96EA0BC93BFD54CB90684ABD055CD6ABA730C13F0E383A2169B3159C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

book

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\book
Size 18KB
SHA256 f4b69039fc2e5827377bfc2e650623f2a1d0959e462c46e8a5502c68991cc641
MD5 5e8dc6605c8cd8a06497a5c22574c3a4
SHA1 bbff2a4f492241359c14b3a7660153c8c0312463
SHA512 c137b5d888fbd5de91cdb7ff8baeecc5d3d1c193237a741a9741991e698925a89f7c623c7142a53704b3e0764b9d3ba28a9c93b455583b71d096ffe8e4ad80c6
SSDEEP 384:Uql1GOPedqnXkwK85IgLoQ81u0QKmYgCNFNYblfINIx9xdFwjA:UFO2dqnXk8zF81uymY/nNclWMEs
TLSH
T1E882AEC84DEC658103B7D12B64BB3D67BF162869181E3CD9F60454E2CABEF4CD596708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb001.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb001.gif
Size 38KB
SHA256 ab33039db90f44dbb3c9967ab157f40805dd68311a441ce5e819c286a3569ddd
MD5 b8d3f236077a74be9fc38fac772f1b16
SHA1 35f80cf295803363451dcf80c8e1f2b8610785d6
SHA512 a88b469bf08324ee4dc5679b4e8c574ef13b76be70612de910df088ab2bbfb177a6a447d622069735108562aaac68dc4ea745577d4c186412bfe4ca08a0feffc
SSDEEP 768:+YHxPbV9Gj6mrD+XOsTwtCehVMQcKHaDM/d/pTsMq3mCmZg6EOCFwYGBlo3/Nan/:91hcj6mn+XatFjVck1rq3mCmZ+OI44C/
TLSH
T10C03F1F4E6883AAD96001CB9CE2644EC1CBCCC695D399FF06419215DE88B1CFDD785BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb002.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb002.gif
Size 42KB
SHA256 d68e785094c2f0016c735ad9ac891e2ea2b0b30b4f30d800446759ba0134b7ac
MD5 794dedfb9768a5272ba8793933a3a44d
SHA1 010de007d8aa5fc21319cc8506b2d20565b29520
SHA512 fe2f5809f1cc2d0b3ac310a8b732ce4e014353056005ee6681c13181e3b9017d04f3ee1f8ba39c97dac00e944bbfb684c65de42e2092689d9b0f1c46d15e098b
SSDEEP 768:b+hT5mgjtrq5keDgMvpxuTEVTpYsLBfy6NTgMxMcA3kZIGjTwR7ZlyImx:ihVdrS7xuTYhouhxZA3pmwRH4x
TLSH
T10113F14ADC997B9F37424995C61101F8E984CA738A813DEC9CAE936CD5897F9082FB06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb003.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb003.gif
Size 51KB
SHA256 95cbcbd9c41c128ae03b8536ee229771a8a42e3cbf57faf4697aaabe98c11108
MD5 ec0b47d2d9057ac9d80a3f7f6367de4f
SHA1 228c3f34695afaf8a3c48e9268cf49d93a94db17
SHA512 8a77ee085dc0b5065789757f310f0e4b02b9ffb4e00ac159b6e2bd4e6b6fa634344456b6958998bc6905dae95bfddcd3863dd0504f6daec3dce685e260f6dbbd
SSDEEP 768:t2zuowW/tLmjkVspTBnJdZ/FobUD6f+uX7WxEWJgbrDGsCeQqkSOfr8Tvk2rQDKz:JX5usptDASe+uXYEbDTSqkr+EDI
TLSH
T1EE33F2DB50CE5F931DA80E4C7747C5EC26EE8F1E87146E3BC4B15E6881201E9BB8B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb004.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb004.gif
Size 49KB
SHA256 9f93891fe6aeeea23b10ae5aa680fd44e408b97ffd9df65cf0434fef1b049af0
MD5 b743e2052f735e7e2f132d2843e53641
SHA1 edf2545d4279ebcb965aa42523ef4a93cbaf67a3
SHA512 0a16105b057875b105f217b40d8305feb7039f5222d7ecae7c329ab1efb1e4811d4ba111124b4bf5cd40f6bcac843a99444795dd296cd97cc01547cb4cb6cd20
SSDEEP 768:h15afPZKJVPAQwrR2LFMZAVXeOVEq9VYLspbC+yo9KZz57AfLKwOEFqvNiIHhUXA:mcTABRKyZAVrVEq9GYla74fLSnQhZWh
TLSH
T1FF33F28788C5385A07EF9C266ED53859399C7B6C3FDEAF10416836C6A179803EC0D32B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb005.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb005.gif
Size 39KB
SHA256 0d177be82265d4458b9ab22efc15418128742dcd60488a5bdecd5d334164dedc
MD5 618feaf37b7c85b693ce5ae0ac51a508
SHA1 d648be18ec2d54a7fe5e808517bea12e19a70fde
SHA512 9ba910a321de102eb56662acd4236030e64fdd0c026a8a81724b21ab0c0a9b6be7a45117730fbe27eeaa49e22a9ac746d48a8399263c389a338765d8afbdb0c9
SSDEEP 768:vbU/XQVgW2Or+FxTa5z1JQRKqYS/WQ6Dy3tn65XgNQDdtGSkzooq+laZCYfEtkN6:TU/XQVg5iATc/WK1Vy9YXgyJioofl3/p
TLSH
T19C03F1390E82957696718F5F5D99ECDEE4C06DE858581A0A18F820FDCCD82CAF05D43F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb006.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb006.gif
Size 43KB
SHA256 3f5adbc7bef95ac98d78d9b2e2f25c1b89dd6a14b02ad0c6801de51fe1e48843
MD5 0058727d44f8467d8283250a0b43556e
SHA1 f2b42f0abe25803dd04b87a8512de171034c27be
SHA512 520620f5b52a062d3b37eb866cf731ac0eb876683d929db7b84777c40cd645364c2c715aad50e87951ebf483cd4f45efe00319be1a36d63248b4f4d9c611350b
SSDEEP 768:26VCMbPonLGwj6gH++FblMLED5QBoJ+hfdOKMMY5l5BHwNRIj/pbVgd:2683nLG0rD1l6EtafBQhB5l/Hg83s
TLSH
T17813029A836170BBD485783D21E217573EA247C01B662D73B17C3AE2E61740E6CCF5B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb007.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb007.gif
Size 26KB
SHA256 292ace5abc773d1dbe3db5c3a51d42b11a360e22b17643209b30f5988e437761
MD5 76a8d032c940da779016d3e356401758
SHA1 2d60e50d4830e1355863544effef81a153867503
SHA512 63abe8edd5bb928c4b594aded6da4e82efac7ea7ab086f2e5509391b1e0f5cb3fa6b965ffa4ffd342869d16d02b4c42e8b2c03b6b4a6fead8de581624d8643cc
SSDEEP 768:YjtOV94dzSId+OLzdlaSlQKaIJClau221xTjLnQ/ke:atOV949SyLfdXGIY5B1xTjj7e
TLSH
T1CCC2F158D0BCA66E9DF0CDB4080198C91305A2AD7FF1CD51E7E97075A60888FEC0029B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb008.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb008.gif
Size 35KB
SHA256 bdae04f6d7694e1981771c0a76fc555009dae6e56f2f11f8fdff87b2d9dd0797
MD5 517e6ce305c098d358d27e6a606a4e81
SHA1 1f90118a88f4593ea4dd748526180f6c69ee617d
SHA512 044a47bb0115a0b8ec905f4b433acf00866e5faf4349e57aab219c80641d24dcedaed17a170d7bd7eed2e2727daf80fa6eebdfb95791bdabd1dcd2fc80ee9b9a
SSDEEP 768:dchLzR9ww7Yar9fX6zeSYiALxe+WATWk1rvZfYYff:dcT9ww7r9f/SYiwxe6TWaphff
TLSH
T107F2F17BA06DFABF6E7009D0467FF05A600850B6006583E0C67E88E6C6C4FA37C91A97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb009.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb009.gif
Size 39KB
SHA256 b5cb2f91a884e832c0eecfffbc4b0f6920a67e0513f3e2ac9130bf6b744ad146
MD5 62b85bbb9df60349a7c0d8cb06e090e4
SHA1 4c231a467127d6cfc1118fd51a0b0220296e255a
SHA512 87e6608e33ec84ce04b20a44c69d1da3ca9f70b7f8542739456b27eb1d8c589f3cf6f22ca1b4777d0135e55f2f7e15cc5306736a5231bac81acb6b5d27f14134
SSDEEP 768:RE/q4lw0oh+UOlsD/KWg72UKlkLTNVSmhZKwDM5nwHYkOBVJCdEPZhLibZC:RHPTqEKWg72TkdcgZK6Mm47VJCmvibZC
TLSH
T1590301F31A844666E53EDF71DD8A4F7C722F8E15C41ABCB89C0278BED3A0B611709512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb010.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb010.gif
Size 43KB
SHA256 a16ddc10725a33dd91e617de97cfad7372ee33bbdf195312b70b1d10194b68c7
MD5 79a9739cb814396f6cda31b59d3d87bb
SHA1 2993f8102994a1e238cd48541cad333ed950e88d
SHA512 2a3e5fb4e102134aaab34d72246b194bba61b630e5e6ef7ced96574a137723cb716eb1d9a7350b4981048fcdb1f496d11fdcfa9edb5007aa06731b8ba09c62ef
SSDEEP 768:VAcmJclPBwQ55QaOCoJ8qDjgWceZXLghu1ymtGDZeZEGD:VMult5QbRJ8gkWcGLGDZmT
TLSH
T15713F198A2D0C0B8051BDA1FF9D551BCE09439DDA963DA1C06BF35A8FD06DC8F4A2D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb011.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb011.gif
Size 47KB
SHA256 741f4194e099e387d5b81753972074c2ec9944b36b442ee90f02f2e05a49e2f0
MD5 0420a172f5c3b557a58b9f51ed8c6249
SHA1 07c58efb0135071854091f6b3c504b380c971dd9
SHA512 eea3706f02d068df6e7f6744dc391400950cd635cb966fd224bd7818f140aea02e9389614e18887271cec6a167e699c36d37d2c972724222b9cdf978176ed755
SSDEEP 768:st8xDwGhRTy9eLtvLs1g8mmymVvt5NGHlpOdSlxUEkpFzTVbJAmmhIaxpnK+L:siSGGeLixFymVpgl8Ax0ZJcIaao
TLSH
T1C723012CF2961DCF02FAEE3CD8ACF8E12C95367099CA094D195DB4E7B14A1D54602E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb012.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb012.gif
Size 52KB
SHA256 47f4755a428995775089a622f33eb54c4505d8a6ad7963c6de646de0b2156017
MD5 03ac2cf533ad921fa2e570449c398d60
SHA1 b77a69ac67cc2ac113d997bf3c3d4cacd60b193d
SHA512 74acc8d75fcd3fdae5101b401e84042b6c04b3bd2347937d007201ffc9bcd06b84915beab9f58b3e1f0c09d9f49660eb979ff1d0d75db1e3396c31a5ebd0a794
SSDEEP 1536:8sTliWl9zQWGOEsaEfG3D+gZvRy9Zug9xj:jliWl93ysaND+gZMtbj
TLSH
T171330154506FEE6C1DCDF38ADCBE636C1221B1DE72DDBA90C8C171A9B5E0089A81B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb013.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb013.gif
Size 47KB
SHA256 f7eebb0ae58ea8e64160bf2bf8bab0955603c0208c3bfb760d89d01088f042c5
MD5 5ff48f51be9c3bed3e81d908c08d7135
SHA1 7673287c411d65538b7e60d1e51a92d1acbe4d07
SHA512 c73ba4a996fa14f3ea9e70f6a1e980c3cb0d0ed57efa8b8d241a99ea2155bfede9d898e6404704ee005c9de130777a4d2c364012398fd839c5966a476ed05d76
SSDEEP 768:2le+/ymlYswmymS3k1i+tWHbW31oCBYTWaoTYokjQ+8Mn7YjQA06p+MqIryP/a:we+/xLKk1htWHilRCTWak4Q+9YRIx/a
TLSH
T14123F1E2CBD650132C8CC8FA7548C23D3656B1EB1D03EABE149341E6C43369E1E225A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb014.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb014.gif
Size 55KB
SHA256 963bb112090949111b885ab790c9e032784d9dc6c0fb3388f47d011f5bdf6c7a
MD5 0c47d03a6d75689e2f84b925f87561de
SHA1 4782d1a60796d24f2406e35d18ee4c8fef59b64e
SHA512 c4e96977c2adfcd69cff2b22ff802bda3ae0c0ae6bfe3e2f1800a430d2f06749e450b4a39132be3e58c20e39e333eb7c79386ab69e8efbdb6256959c4a5a5feb
SSDEEP 1536:DFX9910RrVAcrsdRWc0Gl0wnM5fP38U64:ZX90Zsdz0GrKfPsn4
TLSH
T13B4302F9E6FF7429641960B6102BB246F63391E0B17B2322B8205354C11F89A76DCB7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb015.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb015.gif
Size 32KB
SHA256 84f12116cfbeeee6373bb94a0d878e134fff50d598d6f1578f4131d23be3703d
MD5 b9d7d09a834dc4541967ab78f7d0fd03
SHA1 9581e21ef862542ef9f6263ac81377c7f3469b0a
SHA512 a879dbacb814e1495f73a8a56aa46edefc6523ef9badf3d1845b6f9b234bb4daaea8d9537fd0babc4412c577860a1378802fe0a1bbe28a71283e4d5105c4176a
SSDEEP 768:+a9uy/miWwYeyCJnVfmWhhSH3BPyfdM9CKWb+12m+1YrxxlY:+rFlRwJVDQH3hKa9CKWbhAxi
TLSH
T1B5E2F1A2A1A13A4B1DE8B9C43C3644B60507588AAC3C8F7A4DD488F573B16D73DB8582
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb016.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb016.gif
Size 54KB
SHA256 7fd940a10524ed7aedb21658407cdbce0831475a51d7af081f1deacf9816fff0
MD5 7ceaf70c43de87fe8f7106c5c024c6e8
SHA1 72456f529f2e15112a57609950d5909c38471c61
SHA512 382d8be5378ad62d238bacc4a45b93728d214c026afdd2a23a3854392b8f6ba617ea2e477c583d3de843d900f9a67d557b437fadc99dd29980db41bd6e09d3c3
SSDEEP 1536:Op41pFNSInl10wW5Yw0DvSbd0/NlZR9jFB:OMJnXfdO0/Nlxjn
TLSH
T10A43029BA93ED525D31D021FE4C28D8B6B733C1F285D7136A2E2AB754900E754B3D81E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page0.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page0.jpg
Size 58KB
SHA256 314fb3fad61f23649e79e63f3e0644dd8a0f8fd219e489f8d6d2ad7893e60f0e
MD5 41386e0f455fbb9776aa8176b463b488
SHA1 5655105d8fb1f6f0d20ac2f0e154c5af9dcf581a
SHA512 b887a0fbe312dc5bb7c94f21327d8bb09f440ca3dd5187dd65baf0d75670d4e665e4fe99929c0662d4e95a3123b4114ed66fa51ec3575f7258a36163bb30d3fd
SSDEEP 1536:nKqEImov4gLI5Pq80Cdj+VTRHPCE5NeXZMvaFIYf:nKqEIogk5Pq80CJURaBZ7FL
TLSH
T169430206C7665F02D4F6D16262774D380BF2D056B7938F13B6A1770885283B77BA06EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page1.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page1.jpg
Size 53KB
SHA256 8edfe12a1d8674de7922a53aea1c8acd93a4e9b516e5c323f128e963aac974ea
MD5 170d89270e03dc2e7da9309abc47988d
SHA1 80227ad1bb344c35e156dd953299aacc9742a0f3
SHA512 0b5fe93a12362dc8012dbd31d95746d3d4d4ab99a219e0ab49861116c13b6f5d347e23c6fad323d533b9ec11001c57774ed7db84a9a7ac916c0426ecb44fce88
SSDEEP 768:BE4Sz9IGLZjDuLVDGQ8BqRVFv0UkAGO9DC9bUbYCkKubIlzPmihPcDaMHuu639hZ:qbpIGLIVbFGAGOwpeBkDgmaot6Nr6g
TLSH
T16D33021AFC322E68C96310B801FFE97657CD2F268350BF912175E2B21DE06964469F9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page10.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page10.jpg
Size 49KB
SHA256 606583c58aff143468c40e839c11710a9558c47b94d5a86d1151446f4c137404
MD5 a4ea32bc6c92c2cf5cfb2593f72ca463
SHA1 22ad90eeda027f59d41943e93b2ce8668baac676
SHA512 8d365184033b5fcf85db7c6c5fafb3e324050c96eb954db9bf2758e067d0513d7dd0754c1d9fbfab153ad2d05ee51d7afbfff24ed7605bda745d9a2af705fea2
SSDEEP 768:+c8EkQRFLvb2c36rFU+zX+BFveQMNmFkE/i6IQSMhtA/3abQIGObvcJxlrGkW:ulQHvbB3CzXKve8FkFzMhM3aRGOb8Gr
TLSH
T1433302E1709C1767E0A8567AC305B44A05E1B8B8B3A97ED74C24B9C8EF1EF50D183B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page11.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page11.jpg
Size 52KB
SHA256 1c2bf464976420ef71b59dbcb0fd16c20daec31f0fc5c03dbb3a4a5172c35712
MD5 e8462a12a60c127b7a231218cba2ca41
SHA1 c922d146f8111cbe053df6c7fe2241b4d006047e
SHA512 e2c2319dcddefbfba1299e3e58119077084c6c3b7f0eaf1d12991cea6510207b0d44712dd214d2f7fd08ed61520697908390b7e7c20ee0920b4766be0d6520d9
SSDEEP 1536:/5a7+g0Fl8ZeKKtpRTFuhfVz+dwRybpWKT6GGK1r:xGKLBFuJKqytW26X8r
TLSH
T18633F19D122595B451A801CD31B265A0EC6EB643307031F777F3BF88A2A41E915BE56F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page12.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page12.jpg
Size 48KB
SHA256 e42286e86415ed7ff3f5206909cfbc2a8111d9aea7160b06d73e71072f8fa8f6
MD5 13ac61ed6148d887ec6571e181ddb11b
SHA1 c3ab267bb353460da4c8505f343078bf97a9a6bb
SHA512 cc6293db93f1e3d503a91377ca03c16701aee403b2c704ca9e1bac54c06b5ab55ac5a63c1951051359098df42756a67043a3ad09c07ce787f27d108eb8bbcacc
SSDEEP 768:xGWKCiEZpzNPanZ79hR71QjAe/ExzEqUuCeHb8iVbBTOcKeSM1xzX/oRbLHlfYdD:xSChaZRhRZQkzEqUuLIWVT5ykzvodBAt
TLSH
T17A23F13783AC2F5BD6BE553F78E29EF825C62B50554607E897BE4F2B5AC0238820F504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page13.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page13.jpg
Size 54KB
SHA256 ee4abbebc89abb59e830f51932dc25bffd87debdff9813ce0eec216bedb0cb9c
MD5 af87095f0801e28bc9443aa19953bbbf
SHA1 b66a33b500769869a9b4a57cdf8d199e8a0cdf47
SHA512 f3bb8d9e77e18dd37eb0ff4b94d92babef0830682338578f851766913c0f0e2b4f5283b260f2bac7c6bc8e5736d9dc8c74e872392f96b493197f1284724a506c
SSDEEP 768:aEciiSVyLh7FC4rI67sy3MsOdfThwwoyKEqxusBoZd3sx/lwy+d3hh1lGqNMlZg0:aPayLhxLyXThwwo3BxdiIX+Xh1lGqgg0
TLSH
T10F43F1FA7007333196D1158379B8EF2C63FC208ABF6A4E8ECD75A654312D58B91D153A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page14.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page14.jpg
Size 56KB
SHA256 5c9c5b27a5104c494e657cd9d1d17b58338c3ed34dd38f51ad3a31d935bc88ee
MD5 746b6a0f5c5cc637ff48394408b305e0
SHA1 de128d29da3918cc229d595091c2adaee68718c9
SHA512 f43374471da73fe8839b87cb9b857de00ebb7ff573096eb37e9ea66dc8e4d444c03b67971dc6a65fb5d1fe88976468452e83ade73d4e4f6b52f41baca39fee57
SSDEEP 1536:sF5bJOhP5V/JOrVx4t+KKS9sNvxof2nNQ0wU0vZUv2:QO95VRrKEpfwQnUMKv2
TLSH
T122430243A13333704245338E367FC5C9A6DE5EB972499E6E0E34C40A82DF698E685A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page15.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page15.jpg
Size 36KB
SHA256 8a84938419a1f2a1895e482d2343cfb84a21ba2cd0053de298ac9315ead17dd9
MD5 447002498b5ba164f447e955afb8b85f
SHA1 fef56f859c3889f2fe84e0381605a7bd975b9ea0
SHA512 368eb3e01791014d64b5e2409d6f51e367d578ed4b44ef0a779e2fc09fd79c73cee3ddbd4ce6df38641ad90afb117e115413f497e3fbcbd43bd299f264950c4a
SSDEEP 768:L6Dvk5MByjyW3+mp/FpixL8RwRVuMKwTPrznQ1eKCcylAQu82D:Ak5AcpuG/nRwRVV/fc1eHcymV8w
TLSH
T16AF202961A446F07CDB3BBF21674C72917273D406966B8CFCFD4EA0EAC85D00666B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page16.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page16.jpg
Size 56KB
SHA256 1cf3ec993c10248ae71928616ed8f6747be08cfcaa2a5ebb8336eb0a83bbd992
MD5 e0de2c8139107ec64bde2b51f61014aa
SHA1 cbe82dadf635d5f8e4321fcf5000064884814085
SHA512 35c48f95917865178c9636b44c6ce9916f0c5911f81545f87d3a2a481e8ee22a35e8cef671b44d5e3ad63a399f8f5145b2a2fd43d131030e4ad17fe1bc5928ac
SSDEEP 1536:9oGIPZOTblwtORgKIqyKR0IajsQyIdIc5zl:aGc6hwSILu0jjsQbIc5zl
TLSH
T1834302BAE6C78BFD3A652CFB25DEC78741166543005807FA897C3E0986AD7411F42E8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page2.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page2.jpg
Size 49KB
SHA256 bf164e9e1b512dee0902b66d39c9e8b7a9bf8b25beea206d593c93fe60816502
MD5 ceb7742d1bf22a39caaa45cafef4a7b1
SHA1 37efafae5d2326cf52644304d4a06fbe826821c2
SHA512 18fd22e878e4931db7b62a9a61c75c9c540ff769c8ac17d9dbe56a2a335f7d07fa945e9f69593c219522e9bf00473b4f1784b96c094fbd3aa35b2e1d6ee27958
SSDEEP 1536:im5uRG8RmllAvP/5xggLRrKarF30QyWgDkk:iQv80HS/8gLROAh0f
TLSH
T16F33F1F9D1AD172C6A81014499FFBE9643D21047C2AD863A0E7118FD0C3A7BB5BB7927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page3.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page3.jpg
Size 55KB
SHA256 9080f1863c1c1b92068972bff9b7dd81b5abd314216f832879411d09b080de0c
MD5 6f5cb5263b60cf2ca44f87faf8a51e98
SHA1 774604cb4230782eb551a4a37aecbece3fc4f4a5
SHA512 84c9f549cc7a634005f99e731288906eef432fdceb25396a90266a765721009ee8643fa84466392b80b60d69b5b798e75218691a723e5601c962300eea5c46f6
SSDEEP 768:YmTm8Pk/E1MZwYWQKGSY3nS7cpDdBt/SA1wZoNvWkPS0vuYPdHoDZHeRn+85:YWQE1BYW8Ssdv/vuoNvxPHuYFHwZHej5
TLSH
T1414302049DC7F323B8DD114B14F53EC741B8F2DC06807DBC956476698FA9A2087A9BE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page4.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page4.jpg
Size 60KB
SHA256 e738143197ab2c1655345f29a3e89cdd65250d4eb631cfc930fb36abc4aff153
MD5 1501134aa82fc7f1a967560b85518ce3
SHA1 b39f0a515c7f19cfdcf35bcfa03f46387b2477bb
SHA512 286e45a571d8fd8a999f65ae571adf4f5dbb9c715ec70938689d224d15843e7dd8695f3c94ae0a5777f4d90416787c37400dd54a9d0ded4e9a953afd7a2f5b53
SSDEEP 1536:JDBDkXfVw6ipwYq7zYjxPNF+K5dfQcQT4swF/ESa6lRl5:JdkX9+jq7QJNcCgNwFMSFRl5
TLSH
T1AC531278259A2B13DD581098BBF46A5F45CDC5EEFCEA857E573BA8123F447E108AC081
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page5.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page5.jpg
Size 52KB
SHA256 0824f38b3169496765f8d1b6cf925af47a1b53940c7b1c52e4f30cd770f5ad01
MD5 f11574849d29f607d21a21b28765f686
SHA1 3546773053192e0b4044561af8f6e322f0eb585c
SHA512 1c67fae3befb86a371dd546c42a6da18abcc23b36bf811c885e0972814a7338ecc027732b1e9497183b7340c06aebc17098abd7fa1821ffb38fa572aeca27e1f
SSDEEP 768:wxLQ8kafOQogGbAdfMg6npex1fuU7LKAvCqJ3W7NfV6R9WL1w6PKYvQVY1XStbZq:IZmEx0fpex9x7LvPG7NfczyBQVYa01F
TLSH
T130330170015C0A6AD0DCC33D277A115789EF3BA6AE61E965DA75238F27EDD8063CA48C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page6.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page6.jpg
Size 47KB
SHA256 30a17bb3c29ce5fd12f6c26ef6d6f6adc019be7ebe858125ef5682a18452186d
MD5 5f122bd591cae0eb94e9a6aa30059354
SHA1 336bf094f4d7b91883e01c228401ace6533bc187
SHA512 6c99e11c8f7bf79114ab5c612cbcce3d7d4b0427e23ab25fd9cff02bed53b08b7b582dcf37845481259fb40a07e9e358ba79fb34f245e1380481737a934a0fda
SSDEEP 768:XwRsro3ZWzcnodWisMm5uuqBqYCx6Dd5Vj2n8rDjo7+Uj2ZwEt1nB8eUE:XwRagaW5F55UqRx8LVj2nQDjRG2Zj9pD
TLSH
T11B23F2796B0217213D3C3387E536F89E9437645FA90EC72A6E7074B2A193CC6541B3AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page7.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page7.jpg
Size 39KB
SHA256 799e45d8227d2a9718fe85a3d3281cd4f0ca47a634e72dfb3beb253968c438e4
MD5 55e51b0b399dfd183b5fff6b51f5af84
SHA1 f665b4c226cfdb5407e3cdd58201521d88131595
SHA512 a5c55f96b72a870ff79d0b8d56275944f069735e5b46df6ac6e48db1457e5a56633d8881bdfe574868e3edff1332b18d785858ab94dd5f492f034820d293cc0f
SSDEEP 768:1Hb1Eno1auB2eGFpveu4ykLNZpZ/pp76ZHZ1Y68pMoeBSjODGFgtVAnJ:1HBEn9RRpveuxk7p9r61J8OBSjODGFs8
TLSH
T1AC03F16A6519FB597EF040E851B94878AFE742B8AF2C978E8474C711F20D35B0381BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page8.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page8.jpg
Size 51KB
SHA256 82bf1e71642ce92294cedfaad9107c10f1a4e1f913fcdd2eaf7b3ce6594101df
MD5 1cd4763792731c95bd42cdf9ba1d7563
SHA1 ca99ddbcd46da3f5e8c2b946f1e2f3dc3a93b22c
SHA512 35a5821f598cafcf619fb39e09b8d9c8d5ff8631897d57a3c098e5f6c293af693fb1b6d76b8c2bd6f0c9cdda0b9ec6cd31a473ae3b672d42d117fcd3ccc47114
SSDEEP 1536:No2RANPdptbqU0zVV3F+4NA5QQ5YYjmZe6:NjRSdX+UmjuX2YAe6
TLSH
T102330245ABCA571C626AE8F074364F42AC6D01BDF0D9C5661EB1FF2174D12C2ACE338A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page9.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page9.jpg
Size 59KB
SHA256 215a885eb08f1cffce16c785be47456b38d17fb1485ede519d256d3405fc58da
MD5 f7a203715b8a65b20855de0ef6769c67
SHA1 aa1f011ce44d4beee0d29379dc17a8e09ad7d22f
SHA512 5fda653e314001e6c27df1507bbed7675da23fe883af9c28cb3aa5eb5fe9a13438daa50bc87114a5b1d521b74265f91124baf60a301bd634fd9c06db91845a56
SSDEEP 1536:tQF1Ia5qSlGBi4IMOfjWAMcFudGOetgwtY7TSpxDO:2F1J5qS4MuaWANM4OeesY7TS6
TLSH
T10C530245033F13C0E07957F75623AFB4023B59BA670FE815826C7F318E689C68ED9298
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp001.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\sp001.gif
Size 137KB
SHA256 3a91e9c0f4514096923eb665974724e63c3037c224ce156be44cff2c1a35fb1a
MD5 d1bf19f98e5b064078d2fdc074d9893b
SHA1 ecae2d5f2c6fe28e03baedcd84a27f0dd4ca51ff
SHA512 883f5327d6049237a66895b4d9a5e2ca49c8504582dd35201ae0e7de3262f2d729e3b7b1f4c795fd2d5d6d1cd89de8c3c3b0d3ce297ed6ef5d3494fb378a6df6
SSDEEP 3072:pSvjBKa3s+KkwJUOCdjRdDLX/WzjZ0+6KsM05VOPzRwUy6K+Fq:piBDQjMNRdDLX/Oa+DEOLR1RRq
TLSH
T14AD312446B47EE111CAB763B7E92B8C97C643BF4CE2C13A38A54E77D3526B046D6018E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

book

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\book
Size 9KB
SHA256 486c7e2d25096d871171fff1906c65f98e8c1fa888cc5c18558140f999274d4e
MD5 e2b9604a4c6c86aacc681d8e2e6b251f
SHA1 39b684099529adb2bfb78d0dd1233b03c9fc6528
SHA512 6ad292e3d20dfd42228387181322ec6d4622d35b85829910f760a3fecaf110a93f000e3cbdbc575cf8a95f6d621af04b973e7c027667f8b9adfe90273464c632
SSDEEP 192:2dhYeuT6k+F9xD8oSWMqQsCNHmYUlIkXm69Nr9RmK5I/RVT90EwYvysmi9DCaTLU:uhTuwZDtS7q4mYUKkXZ3RmYYlaEDKsDu
TLSH
T11C229F4A4C773E464135CA2B847118A77C961CE2558D32F5B4FEED77831EE8AE41CE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page0.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page0.jpg
Size 70KB
SHA256 6623c9cdac71de0076ec405505ee66671423752ae1c4d107963b41fed6234280
MD5 5d7dac6e837598fca17bc6dc6808921d
SHA1 8bea5a903042d1ca004b3307c43f4aa9fbfd27f9
SHA512 89c6af39a469efaf80f467ce910e9272dfae0fe0ca50ebeda8ecda3007e39548d2b8ff582cd9a2cca075ffe309b4103fa723a73c5f6117c8f0720e3124d1080b
SSDEEP 1536:bCVwyvz395ZqzU5jhNo2bWTR9GkKNdfL7bbx/+hqRmMII3:mVwaJaIjzZbWd9GkKNdf5/IqRmMf3
TLSH
T1AA63121E10C6470BB52FB8AB91EBE548BEA01D543BDEAFED95BE21CD10972C6F108052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page1.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page1.jpg
Size 64KB
SHA256 a40837d0619a98a96a5a5cab016ba35694914607665d6cdd795ee0076f56aaac
MD5 20ca931b49f42be729c409e5f4b719d5
SHA1 54948429d371f838d5c24817736442350941d4e2
SHA512 196fdb931daa28dadb29dc2404f61ae9cba007680738da87fa7fd425e05778454286127dec4e8756d88a73f27e3267e36eba19c731f73dbbbec08c4adfccb079
SSDEEP 1536:FXIYQf2NlfYHIZ7vkmZninE5eLVLGxPY3ptkpGpl7b7U6WVLv:OfiLfniE5eBGFY3pWGplX7BWVLv
TLSH
T1975302C9EA1EF3755EA22E1527F60A03D7CDC633380A766C4AACB4E5AA45475032272C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page10.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page10.jpg
Size 65KB
SHA256 dc60db3b80e4c049bf870b2ce9981fefba35fba7afba5e60d75b9c0dac8ee141
MD5 e86ba8546995f30e9dd40e363f7de50d
SHA1 4cd4146839f61ae3709849a33a0bb95cba76d9ad
SHA512 88b50c7f7257d9e58f554e1d11cbcda57e30f56ce434a240f07152f6cf85ce4369e0185a9c3c96b18b886c22f35fae1383bfc79fb2d8c607659cdf5e19a5e450
SSDEEP 1536:2Fm73QnnMfnpsGG3BSg8LJ7/a7CKNZOPh3OsDXexTb7qk:V2WnyGQBSg8Ld/sw3OIonr
TLSH
T1736301B3D35AFE38FB96D7318034344307A5E560618D7A3AE02774654080F694EDABFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page11.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page11.jpg
Size 62KB
SHA256 6a584c706ff3383b476fc4e55e7c16f0661c30c622237094f302db2f6cc7238a
MD5 7e1f1a4d240a827c40e9f3cd47d169e8
SHA1 a8587b711a0cbe45d6821750baf584d629e8c8d3
SHA512 30586da3a9227a91fd3437f9fc1aed54198a805ab970dd221bad7aa6ea47be598455ae54e3e5b664b01f60fe99736196f42fb832a10613b570ad162a4647bfaf
SSDEEP 1536:EFBCyvbFj4Ym5hzx6xGfzRlJIKpafsJhXdtkNfU:aBLvbFtm7xWUvoChttkc
TLSH
T1A65302EEEE96A7576EF3A3DC8F7D0BE4827ECDC6672A5B0091A3FAE541D08451C09110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page12.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page12.jpg
Size 66KB
SHA256 01006d2e7052d985101f0bce9c901c04fd55cd1cfb5e2d23385396f7e88e8fc0
MD5 739c4dcaad2aa6951b4c6b924d4078bc
SHA1 c85b0346d0bb95817ee94042b5e6bb4c1dd7065e
SHA512 a22e34ac31a6b8d98f8901b5f75faf0f5ee5c362781bc81d3135ef48cc63a30613f6db120b3716ff0094fae016f0be231557c41e31c6f40f8ea8bb2bb7d2aca1
SSDEEP 1536:NkhuqZWoh/DzWx2vcDThLAQTAgZ2XZCIwHSbEDDTumwl1A:NMuIWozjvOhLAQtLIwH2EDum4A
TLSH
T18C63021B932B9538F0A205A415B7C700D8D3678D91BA7798D1B44C2FBB5796E5302DCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page13.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page13.jpg
Size 69KB
SHA256 b5c0c80f4c8f8b83cfde14a90c04b7eb6c3cd01b1e8dfa92e398937c90e0e883
MD5 d8937305db2397be4d2d5aa50eccfa18
SHA1 a9e268193ac84de7383599ae766d4ea7fd2a6321
SHA512 9ad9dd0f5f6f005fa411550dd2fa649e3dfb2e4e179a90f2648ac66eeb45097b7e01b927488a61e9010c99bdcb4b07ae192cd40e06648b97a3aaaa6f754ca511
SSDEEP 1536:YLm5Ngbpg5TT6P5Gnmsz4ShsQiYmDGGl04qBWIr3PBYVkPtIhSoH+NqZUS:Rgbp26Pomsz4Se7YsGGl6t6VklIhjMS
TLSH
T13A6302E28657EF25E6D40214B2726CA7734F66932673CD8C2EB31E61AF4394A216C05F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page14.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page14.jpg
Size 61KB
SHA256 8882f1cf6f0cae626f8677ff3d1b415a5df88f32b7e6f94690a5997823b4916b
MD5 628fa9eb07409a1cbb50639f2c6f29f3
SHA1 e1f92ed329cd99f69112059b8f7e60879ad4ffc7
SHA512 68b53043af8a63a559bb1f3490a05d604bc5bd54e38d9121bb5730c12e8d1a6a0100ddeb86b705e0f6f38f6dcf3e20a3e8ab6e9b062a3c7e3d3429712a0c5735
SSDEEP 768:fbxjis58lWlrGO438roNrLQDE/nEM+ugAplEq+k718ZVkuw3Sc4f0n1zEPyBmDTI:Vji2a18Ar0D2R+6p/18ZVFynuqBrxx
TLSH
T10153023D1F1BEAB544EF570C552BAEB96A0CC4B40558C38DDFA71E6058B06321A71E23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page15.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page15.jpg
Size 65KB
SHA256 e71359b05df80c15916fb273710c8a87702af891b11734663cf538a6baf0a32d
MD5 3e720f815cd37130935c0be313d7fe4b
SHA1 7005998c4541f6da091379f748af5394fe2b221d
SHA512 b665452711869dd9d774a87daf988041b5538d6bd903bbf7038193af9e13ecfbad9420dc50f03486995b76082c07d03da5d67a0858d2b0325e51a8ef8814e295
SSDEEP 1536:piZP79KnuHPQbQVWSoFaAOgZMVJ6pdEPbjjahJFcfQhjsP:piRJKnifY7AAOgoIpWmhJyasP
TLSH
T16E63028F650A16198EE7A97964737CDFAD4CB1C5214103BC38269CEC38759ABA33397C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page16.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page16.jpg
Size 55KB
SHA256 0f36eb4f571237452098816d03de25c9081625391a2295a5db4cd0a01933ddfc
MD5 4f25fd90fff473840ef608d23efb3967
SHA1 76e3b424c934e67d35fac4419f8b5561ba1f133b
SHA512 99b21e3431865bff3b9ad871a53a874d382b8612f1651198d03190e23e189dfaebeccde2e85ac8b59148a7c44487187ebc4b86c5c9d08286b3e27497a4e57306
SSDEEP 1536:GxGDEPNNsYATLmhH2kqjFKeXcY6l94WH95ACH:kGyNhAClxeXcb94C953
TLSH
T1284302512F825BD390B3DAB14C78ADEA83957F4E01609DDF5A392E4DE1700B305A3626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page2.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page2.jpg
Size 56KB
SHA256 102bf8d718bc7fd52ed450f81f4810d2af5d9e76d1f42ee983eea70b7222b529
MD5 5ab46cfeccde266448fc395c13c18946
SHA1 7af4f9f9872c1c54100db865951bb7d5be5b413e
SHA512 d744ceda60881c071c68602545bfc48c164997196518df9debd24d21c30fcace4e8300bb8e6c7e4dcb3352d3a60db68efae88769d850dc3f1b2afb018c44f9cd
SSDEEP 1536:NbYPO/DFfU7uafuqeZOq8gDbLycqYQSAfyQIRwaDvIl:NU2tU7Ffu13DbLyEtAfHOND+
TLSH
T1A1430245E3E3EB5250581529EF6D6A36B2D271F7E85C8187042D04F894ACE8BB3079FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page3.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page3.jpg
Size 65KB
SHA256 45e619917f11c27e495813f5b3df036cbc1c022f8af9af174c3e606b0950fc0a
MD5 37d227a6ac8680e43df33ff6df5865da
SHA1 9d6aa22535d62783962c46be95cce2562aad894a
SHA512 993db401842dc987be8baa61b495b69bdce4764aeaebf2e67bd38b0899d00913b20ca1cfe686483dc7dbbfc6c2eae003e97d1b8888e494563df514cd84efa758
SSDEEP 1536:4EaRwsX8xyF6acM6FXTVlpnqNOrZmSOAb9pLFohLdGGJWAW7K9z:4EaPX8xyX6lTVlpnGOcSOArKhLdYe9z
TLSH
T10E6302F5A4BA1F457BC8C9BF6577067C0E0F68C92B1FE6043839970E561ECC17260162
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page4.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page4.jpg
Size 66KB
SHA256 d635654cda3fff19815d46e1ea912291adb2c553933709826c1a167b6b77dd53
MD5 fb612fa0ba27a05bdb5f2afacc5c9f74
SHA1 8b7ea2536a030b69c0e0ef578dd30897f4078768
SHA512 b86f8ae215a03d8f594197245f11617dbed4ca314eced6f8c7a6502e1313849a5d1ba7e08e001e8514f168d1c8ab7bbc87081c183ebf21608e086140ab74a97a
SSDEEP 1536:huG0NzAOopB02tyZz0iwRmjyuo5GD4wXjt/C/+:kG0N12tyZgiwRmOw
TLSH
T1B063026B96043B0BDF9941FB43B09D3114A5DFA82B41062E7CFDA94EDAC2C9D64A20D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page5.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page5.jpg
Size 60KB
SHA256 38be8805a0cf6c7d34cfbb7256242d3e0aea0f3d36185ce6e73c7284bdd87e24
MD5 91fd681cdd4a73a0c0dc4da4f5c2dbc7
SHA1 8c4df7e7b87ba388d065a5732d2a48f2a2b4d5d4
SHA512 e01db87b87da9b4638ab9ef6a01c1440ca2a2c678563a0ce8eda219989092e43e94dce53778ce240296659a3ccb923a29ea142198281c3245cc5d2ed666f2611
SSDEEP 1536:ruHXejb6uYKmWWW84lfsOk2iTXddFrRufuBiCeQGw6V:ruHXejRPlk26V8fuACDy
TLSH
T1A253021BEDEE9E8771017A7666B40F528DC9CE88195EF77F5AE01B01429AC01E3313E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page6.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page6.jpg
Size 61KB
SHA256 3c814e53b65c1752145f3248bc0996b9f8733537f9fece5e94aac072d6694364
MD5 9e3f913b8b1a04af35cc01c338489f3c
SHA1 dd5b3ca18b3e6d8050a01fdb9aa40058c2625b81
SHA512 c67f602b4b76c88bacefdc86cc929a8cc043556e575ea1de8a3ed0481dd42f69fd9175bb39c46632078121a9e21149d7c41b959c4a9c5c0ab6a4fc4f3258871c
SSDEEP 1536:NFlkK7z/sbfq3tLGeTiHGEvKB7a/8B4jUU9rDMq/J:rUbS3tGeSGEyFgW8UU9bB
TLSH
T10353012D1535FE5A23A2A33A2EB85170AB076C168EDC1A7642DE0766228B5CDF2710D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page7.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page7.jpg
Size 70KB
SHA256 db7027e0f7d02fe75874ab15de847352099e36bf10650c54c860e4fdd301d418
MD5 60447490b257933c2de36bffbdfe1f7c
SHA1 375aec1f6c66453b0f0968dd497e668ea1695e31
SHA512 1bcfda7d1a75e1f39a16952e99f27bc042601b167caf230eb7bb78f32ca18ad9be7670708f6c5be99839fece81bff4d9a6aceb753335644e49edc77d15464bb3
SSDEEP 1536:e4grkaCdT8o1YhpD87E6nVCAwfMAvW1PjHEiiw6H/zL1iom0G6:orkaYg5LD87H+f1vKPjHETHLh7NG6
TLSH
T145631256857E0870B43819EF493E08231A1F7EAB9DF8FF91513E6239E8A40643955E3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page8.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page8.jpg
Size 68KB
SHA256 d8333b0964148b5263793ca0493f40c373a47ea53fb3fd637f1431f44c414b7a
MD5 05de4b67553680cd23c5fa741b6991a0
SHA1 13123c66da9c4997142e991adc6bb952cae57713
SHA512 56be6cf453fe8c346d8723d2fc6b3cf5f4d1f22b5fb791b43a4fd9196308fb2163207e58082e5a764d52647d5b13bf846a2b47a1912dbe44f6cfcb3f7f7667a7
SSDEEP 1536:5rWjXQCP9rnV2UBB8gPS9dt7Hhp5lWuFGxZngs0FTYLu+l1Cz:hOXQG4A9S399IngDTYLui1E
TLSH
T1B26301BC0CA58738FDFFD0CA72701BA054C60665E475E129CB6929B0926C07F9A758DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page9.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page9.jpg
Size 66KB
SHA256 c64ce0ded53d511f9a6deba02741d37e5c96e760bc34b294f546931c14d8137a
MD5 4b4178dcdd926771e2d601f07edf1e55
SHA1 3b87b64c316e43c46466b4b5b5d77112a7d6caad
SHA512 beb93360b8c1e3373d2fdc04afd7fc018033045918cf0587eca94ba65e4361415b29f0c779a86101ef1146072a88e2763552cc20c877b8816841a67d39a0bad9
SSDEEP 1536:mLxi4xcD/EvePlKNlu5WmvQF/vRBqMq2Gh6gm3n0O6:mZxUgLoTItpBqM+6j0H
TLSH
T1076302C4B4098120BCA49E634076BD72317B2BF631F02B1D592D8E72FD39D916E39D86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp001.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp001.gif
Size 52KB
SHA256 86c740e67613e91aed0a45aefe643b50a3c763761264aab026859f3d1be20f74
MD5 a02aa2b82db348be4484ebe052d448d3
SHA1 08c3c37acc48fcfb2a3d2a99ab4f0bca732e3225
SHA512 bf83bb918b8698d33e12b518f6e0558cacc18bb6c0c55839778ea7f4446a141d2904fe30953ed12c95193c598c9366d4c79795a68f0e10a96b57f03fca42c482
SSDEEP 1536:sZF4Em45Y6UOgRLRVn7z1UlNh0PtKZst3/1q9m:2B/BiRx75UlNh08Zstem
TLSH
T18B330164E8C817F9250E559B802990B9ABF2A0FAE93605EF8F4435E46C2BDD05833737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp002.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp002.gif
Size 37KB
SHA256 92d4e729520977fe8c3cee533c7e259ab5ab67810f36c557c747ca821bc19ca0
MD5 f1d401ed4184aa59fb75fca83e854fd1
SHA1 f3742178548022de8b6534817ff90c88e76ee6f6
SHA512 e745de3058317d6bad692880afc00d9362619382a71d8ecac79045d3cd8d37aeae91a2a4eb87f3fac6273f75e6f80b1809c2bc9d0a175f5f0dd7fdf5904c3685
SSDEEP 768:BORzYNblHKMKRka0FspUmilhAgyf6A9UTK1blhVsZcW7pEGVIP6O:qWb1KLRka8kLivAgy+TqXVseW7SGe6O
TLSH
T16703F294BB72774A86E21C51FD1F7DE5D2224C5230A5422BAC1D7C079CD9B87EBE1381
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp003.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp003.gif
Size 54KB
SHA256 6078f5e78caa39fa31eaa23ab37e6939003b99e67a0c843335581cb8ec7c824b
MD5 e964851042773d0809582fde155b22c7
SHA1 6d8879362935fb3ab9364feda8fb78d30cc22187
SHA512 887eb03eb987df9c95b17ba93ad044bacae6dc9354eb5b994bfe0cb1a5c0959d360b3437f6eb4c8650176cd4cce9212bc5d5b9ba40359c0c33429391733cfd85
SSDEEP 1536:ycq7Eb2AjR6Osri/dD6u8K1PR7SEurrshS:5qIhMOsrIDL8K5R5+oE
TLSH
T10F4302A7D5EF33543296D612E21CC35CBC4907E79E3431B2E8151BAD2F1A85D1C1DB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp004.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp004.gif
Size 71KB
SHA256 e113e023fc04095434a417689f7b436a4e4120427c0f7368beb89e48e6ad6616
MD5 501eae9da0aebf0c28706d3e3a831f17
SHA1 265db0cdd91a9f77dcb6d0d23884d74adc068ecf
SHA512 7fa85df145f470b74a2889a06d39c48dda006b0f85d13b8b8da5574ff8ba10d18965b57b5e6fcc577b09ccacc723446faff0a6b0d6a3ead512fb6b4cd8237501
SSDEEP 1536:tNhcPTn+07ba0Ns/yrglBbEKxEPblDXo1CDpiBy+cbb:fh+n+0i0NkbEKmJDXzIBa
TLSH
T1C76312303A0DDF66BDE901FCD7EC7F90E80474EF6925429D2BCA94F716D1AC80A46922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp005.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp005.gif
Size 58KB
SHA256 f30c86b0ffc248ab421f3d2cdf6dbfa1d7c3504400a8026b8548d8161c4fb081
MD5 07d266b7a8c8499c57452f6c50046167
SHA1 9e63e66164e18b4e6e151137316d92872ef9d470
SHA512 f3825788af9bb7c20e094f3652fea15b8beed76d78be231477d7ce4a1d13e6162ed451427f62d60c5bc7a434e539932fa7e41b81ef9675a749124110ba766a04
SSDEEP 1536:q3PYoSkN3NBk/moEKwg/A83nlIMOV2XL/:q3QuB6l/pXCo/
TLSH
T173430282E58590B9A8AD8EFA21965E03DD93FD672C624436258F20FD0076C1FAB7C747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp006.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp006.gif
Size 63KB
SHA256 1341f0db796d31c7382655362a682a45f00d5160ca149ddb0e13444bb622d9c9
MD5 1b853f839789d4c8a1d47393c06b1f25
SHA1 c65cab86f2dec503fc5caad740fbd1e81c1c0f3f
SHA512 60f523d36a5251dfa8ce373f046e246543b8b9b44b1beead17d9f2c6fb4ec6fa1cc3557c1342b1f8e90351d69023807ce415afcd92733845298f3e65a9e93c48
SSDEEP 1536:eAPVvk1I1VcCJR0VSIU+e3rMyECQqOamZL9Z:eH1I1VcCMwinntaG9Z
TLSH
T13F5301AC9173E56C6F57F2665304E0E701CEB34EBB44D0A4D0126D72CEA62C06E4E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp007.gif

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\sp007.gif
Size 48KB
SHA256 4e7c34f76e045cf1acdc64071a7fe2d31fec2864d89fdd87e3d79e37dabf30fd
MD5 934535182612b7b90377550f6f1a7a49
SHA1 7fa2911dc190050ed7059259e3e55fb3ba3a0956
SHA512 44c2191ba807d53c0cad1a3297f5a114f15d270f80cb8900f7cedb432165d2f741f66c05bb724666a534c917782ce3108273164e3afb13d7c311db9f80d8b9c0
SSDEEP 768:0GaEbfiB0AWU76dfcTbXQvpmEeU/7ZafbiIuM73mwcbVLf5VPnhVRSDavH5t:0Hgo61cTbamIZafVLwbtnhVRYavHr
TLSH
T1E223021611E9D64CF08DA1FA831B5AE0C6A1DADE94E87ECB079E1FC6731C97501393CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

book

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\book
Size 10KB
SHA256 20a1a9d2a70aaa2d33355fb22284cd1ea5408824f93ab1d22f2145a99978402a
MD5 08e382c1440b50b8e997f0d320f6aad0
SHA1 167090cdb5c2a7b4b0fa63a0069b9e494c266a7c
SHA512 b0b6714d134b33a78bc766de89dbc01980aeefae397903f96d86e6f7b0fbd81711028623bee8425e0a483f83a801a2fcdc75226da3c46655aa146c8b4fad7929
SSDEEP 192:IHFWQFgGkpsuBJsz4J5etNtiKbS9Qph/vEmKHx4d53WWMt0x:oMdBJoUAQmxu7W3Mmx
TLSH
T13622AED7D4AB29C89193DC3B02345E43F3519858588F7DD93285AB84C2AFEE9C0B5700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page0.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page0.jpg
Size 54KB
SHA256 6b3f8d11aeebf4d407e67f89e7d81d166c705ce6a8e9850bc9750306729c6f27
MD5 b9a19f739a5abe70ea04ff265d56058d
SHA1 2d1232622417c444c0256fecae26cdd4d16af125
SHA512 973fe510824480f51603d4ce08af9d7054257ac5b30c6191b378716e8f1c611caf3f81089b321aaa378212677d1ea0e1170c14a1618b647b14959bbeb9ea25aa
SSDEEP 1536:0VaflZWiT3IxXHh1dtGdegoy32yAprWnqBEoH0DFWDP8T2EV:0VadFLIxXfP1gqn+ks
TLSH
T1D8430252FA906FF7369A3A1B1EE52009FD37F1D87BD98506683620DE57D900600333B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page1.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page1.jpg
Size 55KB
SHA256 ea87cabd9babb2b7e6791ac98451545e98051f5a3a65dc2021d41b6dc07e6441
MD5 bcb18e7091c9a053ffaad154a796e22d
SHA1 48bb71296fe3d9c41d1423bd90a70602e14cb942
SHA512 feff223b65d7cfadbfb83d2451672aa8d100de20274958f868649d9c92d8b83e43468041cf4ad2c20916edcc82ab1a3bd41740736e979168107fa07ae215fd4f
SSDEEP 1536:3m5/+Lytjq4dZk9wTcjMN/3H4/udWoLWvkkzaRYdcukqRz:3E/7jzdZkDjMR3HwuWLzoc0qR
TLSH
T1EC4302C1E32C5F934695386CE5B0B7C2F947A5C06E508AB12D72BB767C36A269C60833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page10.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page10.jpg
Size 50KB
SHA256 fbaffdfdd9ff30177d1da6ea5335a57fd31320158a6f659e1d0eaa433dc0df3c
MD5 0a1bbb7bead7a0dded90b8e4c1b52342
SHA1 49a94562c37da753d7b1f2f74ff9cc11d1c6e541
SHA512 4d6b7087f45ec4a854d84ee41bbbe9f72df8cb370bc303507dbdbe289af4c24e548afaf02e813307251470ba6627455dadf6d8c235ae0f611fb684662e8b7c27
SSDEEP 1536:Ymq/60IM/kri/ggfipWulT9q23lNqN842:Vq/jD/vfqlt6A
TLSH
T1DE33F20632D4D1C4183A42285FE6C7E7A49A6F87C4A307E5F5B7E90EB6AA03D513EC47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page11.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page11.jpg
Size 53KB
SHA256 6dce70dc115740d5d52c0c0e2f1811f3ca457f5a948f207a5a4fccdccccfa365
MD5 581f82609b4884e89379b5b09a53ea14
SHA1 a76e7bf6bc9f98b54ebbdc33d278e087a6e2bad4
SHA512 8928b9961e4c43e8817a392826585c63d37fe596b1ce8565b1ca935a96502347de85fd9a4ad4a71b1a3e649c61851a340634a0e886439b411d50440d103c2d21
SSDEEP 1536:LZkT7LbM6LRjWp2UJYsaJBzfD6DNLVT737IWP09fyi:Lm/LvjWp/Ysa/76npCai
TLSH
T1C23302BE331747AEACF76285B03478DDA0388703068963EB77F7D69091575A497E1870
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page12.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page12.jpg
Size 45KB
SHA256 f8a8b2816920237db53bcc287a704be0adb43a55971f3fccec2925fd9dd143df
MD5 01be157e8cd1fe6cb4a7003e78facbc9
SHA1 312658eb73982dc1cc9983fece10bfe9a1af3795
SHA512 e01474d0cce75963799b646860de1bd434d1fb282acfdd38eb262be7f1940974518b09803390d9a8814074fc9c4f58363be999b83c7c867a431b6b24e6f9ba89
SSDEEP 768:66o09bajejtBSogpa2XZx/2J1iI74N/9uuqjBiuvpmxXghP62wsFw4lXklOGVv5u:k0fjt6pA+9Tq8uBmyhP6MrJG55u
TLSH
T1BE23F1AC81918D313EBDE92463F2BC34D54E76126434C46475F326E7C8B8C9B0EBB55A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page15.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page15.jpg
Size 58KB
SHA256 8a040d1a94ab158f7807ddd2b9aaa0dba7a3e5dccfec6f2bea35673d29017de5
MD5 236ba278a1c1af72d6afc1a0d58f1bbf
SHA1 2642f8d0f4dfb84128975f53a84406aa9d28b0cf
SHA512 8af7461e6fc62bae79b9ad5d2a08daf644f20baa1f67f861632dedd65512dd64461a965a43fa529e0848305e3ae03b409f32e6ae8f3c134e262183b9424cde77
SSDEEP 1536:Ghswk1WinFuFzCUSLQjEn7YafH4LQthXYkRaT:Ghe1hnqPSs4n7d0Qth1RaT
TLSH
T13B43029AB6E8A77DA4055B30B2ECF4FE1279479DB6714099433EEF91782A2C0C9D530C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page16.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page16.jpg
Size 44KB
SHA256 1a298bc3cc19d27f7f6213b19ecd238c044f631ed3fcd93515437a66ce165ecd
MD5 b6332a8aa3afe8cb87be5284c263fa14
SHA1 3b5c9b7750c0c8349d6549ed87e5352289280918
SHA512 51d051afa48dc9db63cebb1f7d532df6b46c21e296b41400be0d641a78a59770728222193afb349e7851268c6a98d567c94951bf99ecd7dc9620d05ec3b57c47
SSDEEP 768:6dCxtPqx5Ix111111111SYBOMpoTxRZwKRGkvidwqwDyaXWOxH4FsLNZ7rZ63C4R:6dct8TYwNTHZwECwDbX1HZ37963CLE
TLSH
T18413E011A5917B3BE46F637BA0F18AFE122DCBB252BEAFC71D582541838C5718088353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page17.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg
Size 50KB
SHA256 473a890da22defb3fbd643246b3fa0d6d34939ac469cd4f48054ee2a0bc33d82
MD5 e8f52918072e96bb5f4c573dbb76d74f
SHA1 ba0a89ed469de5e36bd4576591ee94db2c7f8909
SHA512 d57dd0a9686696487d268ef2be2ec2d3b97baedf797a63676da5a8a4165cda89540ec2d3b9e595397cbf53e69dcce76f7249f5eeff041947146ca7bf4099819f
SSDEEP 768:jvSrbEi7f+t2R5Q9mEvXtdTsnHNGlTMmUWmuuh91+CGCso/gnLNeW3iRBrwyW3J9:jcctGaXvPlAmU9uuh+CsM8iR5w7Z9
TLSH
T1C133F1965D094F816DE107CAD0FF1E11F7201EF7E7F96268117A14488A3F5B848EAAE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page18.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg
Size 45KB
SHA256 03f269cd40809d7ec94f5fa4fff1033a624e849179962693cdc2c37d7904233b
MD5 108fd5475c19f16c28068f67fc80f305
SHA1 4e1980ba338133a6fadd5fda4ffe6d4e8a039033
SHA512 98c8743b5af89ec0072b70de8a0babfb5aff19bafa780d6ce99c83721b65a80ec310a4fe9db29a4bb50c2454c34de62c029a83b70d0a9df9b180159ea6cad83a
SSDEEP 768:3XqTLeimOlN/0wKIvbSN/TtQ0EmMhifv/n73LHZC9tuVLc17s/SruIftS6fEydPQ:+eimOcwT2hLMhifvHZDg7CIVS3Gex
TLSH
T13023F163B7709727A1BE9917E0E3A25EE5F67EFB64037B29B3B97D18075000150E098D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page19.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page19.jpg
Size 25KB
SHA256 993824753ee0f99b020da4f5f0bda4b14ae0e5b535be14eb24decf398b3ee60b
MD5 e84e01b21f58d34424cdaa9703aaacfc
SHA1 1e573d629799a349cb02cf83588ced99f66ecb10
SHA512 bd079ecf06e5f7b1295110cea78ab63ab8c2d4bd4657f785771e94d57b994b3f80bb191ddb6327c69358a6d432040a4d60c217c83a564b0e2ece1bad763fbd98
SSDEEP 768:pao3Ms8qeXyvFfRenr8qjD2F7yd+QJT/UK+/:rMrPMJInrp/lUQl8/
TLSH
T1AEC2C07D96970FFDE8D8DBB02771B364AA341B17E8CFC99DAE703264410E4806E6526C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page2.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page2.jpg
Size 58KB
SHA256 178e4e26ee97549199d6765c4823cb18783f40b60f78f1b21eceb562d4d4d20d
MD5 e9a0531812ba076f8610f9f877c5ed45
SHA1 0e92eeea404a592a8a1f3297bddc3033d3c26405
SHA512 255056acfe726570e2e9e7f607e9625478b455c8c90271c9e57a2a65b81ff2208d225b9130e7e7642ef04b73224a888a86e0852450b7d8d35f9eb0b95340a9d1
SSDEEP 1536:MdmPwS/4Md+4x5y+PDvgrzgWD+iAzAszcojzdsnbx:Mdm9/VFu+SzX+iAUszcojzd21
TLSH
T1DB430266F74C12B3E50FB8B0057DE8113F94A706617825A93FBB1B7E8A6C703168C69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page20.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page20.jpg
Size 49KB
SHA256 5fb9f37c7bcf322d4108fa7b424e54bb40f8dceb6016bf36c18d64003bf32635
MD5 b2f5bf2956be990bc111501337664892
SHA1 8cbc33dc7081d0160b18b63eda49c7f75d808bcf
SHA512 cab044b0eebddd9caad310c9770b13be0801f9577b3dad7c23c724eb82a643aecf8df43d2cfa73b1a40746cc320ad9e0075be31faff0417f3d3d5cb0b153b610
SSDEEP 1536:634L5xrncFAS16C5r/bfaJcaDT6+AkVL7Y:ZzcC86CB7aJcc2oRs
TLSH
T11B3301659BCAEEB1C154B0B386F708A8B2052051F377D32D27F6A86165F745D2BE320B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page3.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page3.jpg
Size 47KB
SHA256 a3cb8b835b33194095574d7a0eb26bc11f92189711abe86785918f848999add3
MD5 f2849d9e002cdfb7f49fdd599814d399
SHA1 716b514a999ea2eaa130e09bd194bb2464076a08
SHA512 b2e4e55fa0f38193e785f3c5938c76aa538d0ce111c0197f7112b8713e26854b9f599df277b07cf0ff9f726d4af526ed754d5338791c3f339a41779fb302d31c
SSDEEP 768:vcSA9oZWLv0my5cRBJeQa57cyxVuRRdRmvPHQr7mjFtitdsDoYTvvEMWkzKFY3Ye:v3duv6cRBgRFxARdM32gFtUdqjoFYovG
TLSH
T17723F1AC33849F9BBCA6E09C58B5514BEDF23E5600A64AAC4CF453751C35630FBF22A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page4.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page4.jpg
Size 55KB
SHA256 256aba539c9dfc725ecbb8925aef9e75435ce034597e16cdc21a4275c0ef814d
MD5 3f85711e30645829fc1ab0e2c338ee59
SHA1 dce77cd7d9513f092f6c2517d735444f678125db
SHA512 40b19fa25a18b4a768811b6fd3decf10fbaffedb9f267c4d070c21871e49c01b511a07f86d09a8fb41a57c28c7cf6fb2944e202d9c6296073aef4ab47439722e
SSDEEP 1536:mBIDghU78mh9vo4z1U9vlX+7oBo1F1wMx8x5k/KV8CiEvmCz:m8gm78Quq1U9NX8p1jrSvk/Y8JjCz
TLSH
T18343F2967986CC33E165983B5037CF828982533AE575ED223C7B1CA75FD960C19112FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page5.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page5.jpg
Size 41KB
SHA256 ffd5d52c98932d4feddfecd7aee546860c7fb46b6209dfc203e51a07c395a412
MD5 f333bc11d62a7eaf7cf4f0ef71078863
SHA1 389327a5c4a7b86de347726a6ab815eaba9d53f2
SHA512 9cfc8ca1e0fe9a5c152738494ad010aa35335eb40433d2b0eb2825368d5d23147daf636436c2a49f244cd101176678cd91b895bebca640372347758d92d74651
SSDEEP 768:kvuzxsFGaxON7w2UZCdq3/mv6gkR7qIAwj6DynNJ6t449vqK1:kmzxsIaxajvnkR7qIQDyn/4sq
TLSH
T1831302283F510BFAD63FC9E865B06BCD86D357A60069024855FABF1379CC9F019C85CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page6.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page6.jpg
Size 59KB
SHA256 a5b2142913ac2983dbfaca6bb6c6743c762cf6c2edd3ddc2778e7b23ca0cc3d6
MD5 b08b80d893510c78e9830c91139e4370
SHA1 82c85eb44e6f3cc710aa605581c3721673c41302
SHA512 dccde152efd04624b45b32f48e9f9891cba41e04871d06a72e57a4c43a1c497219c726347741382d07c79667515883329f06ca3511ca2655cc5fa5bb19fc7631
SSDEEP 768:5j2qGZxRQkHaBUe8sT/vkVaQwDtTR1wH7UGHx8PZRvmRZhD4FTqsO64X1Jvz8iqb:5ja7v62ep/R1g7UGHxA30ssMg1JLnTIL
TLSH
T1DA4302B3A7C96F55C18106B952F896E671AE7CC5F0A26CA3E4FE3AF51A7C34588C00D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page7.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page7.jpg
Size 55KB
SHA256 62c6f4ee6a937eed4c0d93ba1e07f290005e4a9158da345dfd64656906f7e0d5
MD5 a3bf21eef4dccfd537856c47e8476db1
SHA1 a748d1c7f4320ef79471e5375548d08824063a58
SHA512 497c445b1ed3afcc04df7a07f7d6f22c127fabcf8cdca936a5ed54f9d828cd3cc2a423216e3a7dc0bc038bf3219b70d1daf48107dde0fd7e9ff3709853042659
SSDEEP 1536:5RyxVwR5yLbVY3hFNLJ78O4E5PidYlGeJDzBH:PyT/bO3hDJ7543YDHBH
TLSH
T1F4430254FB24965FC91169F2C43B32016C93453EDC2AE86BEDB464091E69411FBB0BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page8.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page8.jpg
Size 44KB
SHA256 26040bf12d19bbe6c852237570e9a3722cc7dc7b11f4f2633aea014287bf3153
MD5 a9550dd62d93b2e7dfd2fa722311038e
SHA1 d9a8368accb18dbd0e3f8dcdc224f34e026a1e48
SHA512 09d849af3361577a64bc77758193f1094c10ba5b443a7fe5ca81ea18daa5ffc9d871ce1e5585c492ba571629e02286055c0fd02d0fa29715118fb4fa7f64e8e1
SSDEEP 768:EY+NFi+DPDcVhJDpGD6QMTvi4PX+5z4TkGHboxk0KIdprR8nYnJfAsjK6:DAFi+zQDBOC+5s7oxkXnYnJfAQK6
TLSH
T1FB23F16ED7D9DA8F6A7E14F2973C214990239DCE8C586EAB6D7FDB22107334421405EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page9.jpg

Path C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page9.jpg
Size 59KB
SHA256 0244e5c87ea823b5741c101129a3ab8a5dcbad798bde86ca15a838a777b26b67
MD5 3ad3093c88e7c3d5a15fd2bcf8951abf
SHA1 968617d0c5ffbaff35d5dd38b222ab9645987827
SHA512 53b2631b75cc7be8a6f5d687612521a4443ec7c9b6111ec1605c04ce2b04abb674962f37485ee3590573e62b7bed2b5c121d8f6277c3eca0f965b25e0ccd658c
SSDEEP 1536:oMaSaAbEObTgVVN6CMIhC2bh6qOtg104SzcZvwDsvX:oYSO+6dECGIdcSzuv3vX
TLSH
T12F5302601D0447C18DA12E3C3D31CFFA7DFF563A8BE493A845320C6439BBA65B6196DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CHORD.WAV

Path C:\Program Files (x86)\BonziBuddy432\CHORD.WAV
Size 17KB
SHA256 1cdb5e4d203f61e94c02f5eea5008289fb463c02174879887fc62574b34c12d3
MD5 e913f3f2201c09d938c63f10dc535bb1
SHA1 1e326ad6d1c2c538c429235006e0fa64f9aeec9d
SHA512 0838a26ee0d918cad1cec431ecd1ebe431f559951ccb85161823d234ae4157f0699d903af178b4af2d70046b04b29509bf1691f57c021f8f63dce579cbece233
SSDEEP 384:ExbeoR5vhvSHkvbG+uAK68LeqdyANaWoH9MJlNHRGke+:KbeoN6k3uAv4ec/wWo+vNHRR
TLSH
T17882BF46B726971D3932922E7DE34CA02511BF6E1D78C066E273C600B933AB74E57B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Intro2.wav

Path C:\Program Files (x86)\BonziBuddy432\Intro2.wav
Size 151KB
SHA256 1d648a27a0209959027567f793f8b3fd18a103b64e62eda3f20f11192bd0dfaa
MD5 125f1998a1e8fd06bb02f6168b0445fa
SHA1 d65ff4d8a79e47122ba872ee3f4986df7827766a
SHA512 62cf29c85efff23449f2cf0985c1eb5d71111bf5332e6932129ab9e9ec4d2fbf819851fbb9ea73946c24fa6a1715d1aea6eef58c5e52de340128a4aaf5267c56
SSDEEP 3072:vUF1vsEOPmTiWvqPNcHtPCChL7cuVzZDEoEvwLs:vU/vspmTlbz75law
TLSH
T1D5E3E132B8630F2117D6C111EAB26B201D5EF84DD9B63937DA9A8E14E602190F774FBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

J001.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\J001.nbd-SR
Size 147B
SHA256 56ac8a4f90686b433297712de577ba68e0970458dee218764ed3acb3b3560f7b
MD5 35c46be741382648dbc6c7241d1f7148
SHA1 24fea5f70e437ecd40a37035d2e1ca3df293d0db
SHA512 ebbacc846af47d3e955a43291626470c73296c874b7d80f0021ec577922f29f453ab5794925b6372b8a75b732677d7c27c16c1f8728ee60a57c66dc4a6c4d86e
TLSH
T139C09B4247054635D1C007D5A154341B02C5CD775031707DF75139C9FD4D48784F6735
MD5 SHA1 SHA512 TLSH

Submit Download

Jigsaw.exe

Path C:\Program Files (x86)\BonziBuddy432\Jigsaw.exe
Size 3.5MB
SHA256 c3dfadbe670df02d784aa9db249303d253ecd18a720299c9ab4e8968ba240e57
MD5 7958433a470290855e19ab23af9ceec8
SHA1 0240679dc940a51545ec484c130f15bc2077c0f2
SHA512 988a317864996eebcf0ca5b72ecc86b3ea091c34db6f064d8f3100c9aabc7da08caf2d722485c1be0d1420e65ed977833ae8dc38ab84a7400bf9c06c5daf83fd
SSDEEP 49152:7fB0dsoBfdDQfINDF/NMRXHDVBmHM1mEkPJMBXTMT6CjvjKlKpTCbspw7:10PBfdcfINP0XHDuM1dkPJtjvjrpTCo
TLSH
T10506222171139A22E7D68131EB28CA1DF6007DB1D697C74B62CCBE4F74B7A934DA0B16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSCOMCTL.OCX

Path C:\Program Files (x86)\BonziBuddy432\MSCOMCTL.OCX
Size 1.0MB
SHA256 3b6ccdb560d7cd4748e992bd82c799acd1bbcfc922a13830ca381d976ffcccaf
MD5 12c2755d14b2e51a4bb5cbdfc22ecb11
SHA1 33f0f5962dbe0e518fe101fa985158d760f01df1
SHA512 4c9b16fb4d787145f6d65a34e1c4d5c6eb07bff4c313a35f5efa9dce5a840c1da77338c92346b1ad68eeb59ef37ef18a9d6078673c3543656961e656466699cf
SSDEEP 24576:2EIDiOd04txdEa1C42Xp1C33wQjrDRjE4FSpUBqutFPJq6:2vtxdEas42ijRprBzR7
TLSH
T1B9352A1277E58022D0FB2670197B27B59BB67EA16C39E54F1B50360E2D32E82DE35327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSINET.OCX

Path C:\Program Files (x86)\BonziBuddy432\MSINET.OCX
Size 112KB
SHA256 73da54b69911bdd08ea8bbbd508f815ef7cfa59c4684d75c1c602252ec88ee31
MD5 7bec181a21753498b6bd001c42a42722
SHA1 3249f233657dc66632c0539c47895bfcee5770cc
SHA512 d671e25ae5e02a55f444d253f0e4a42af6a5362d9759fb243ad6d2c333976ab3e98669621ec0850ad915ee06acbe8e70d77b084128fc275462223f4f5ab401bc
SSDEEP 3072:i4QYXpLZaH+kCp1RCaSCF/6UMiySQYPfrj:i4rBfL1RCaSC0ej
TLSH
T1E3B33802B7E2417FF7A627346AF65BA95EF77D153C26984F9300328D5A32B40DA24327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSWINSCK.OCX

Path C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX
Size 105KB
SHA256 bf7e47c16d7e1c0e88534f4ef95e09d0fd821ed1a06b0d95a389b35364b63ff5
MD5 9484c04258830aa3c2f2a70eb041414c
SHA1 b242a4fb0e9dcf14cb51dc36027baff9a79cb823
SHA512 9d0e9f0d88594746ba41ea4a61a53498619eda596e12d8ec37d01cfe8ceb08be13e3727c83d630a6d9e6d03066f62444bb94ea5a0d2ed9d21a270e612db532a0
SSDEEP 3072:R7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrb:RNkVsuaRaU6mHGb
TLSH
T1A8B35C02B3E58171E5F22B300A361B61AFBEBD25AD31864BC354765D1E31B95EE3831B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ODKOB32.DLL

Path C:\Program Files (x86)\BonziBuddy432\ODKOB32.DLL
Size 16KB
SHA256 c4b58c78dc14e247ba303f630e42e9e56667dafef7aba1f0fdfd058b658f0a36
MD5 94f66cd6a18efdb663a61f2025ab31c5
SHA1 527afb33ff31f5ad1e60225081db34ad5083454b
SHA512 e4c14a7db92c9c7b10950ee52f34be73138ced3873962dc5a875949c533d187dc2251b0d37e6f855d54018b8662b63a611b1f0a71fb5c4744444dbf86492ed1e
SSDEEP 384:Hn4REhgb62Uw18UctNhOO6VXe2SPo2gLF5WaC+GN:H4R8k62YUe5wSz26V
TLSH
T1FD72399997D60EE3D4F62A3840F7BB276A36BB7807D1E5E38353546A18722D06839342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoDirPatcher.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.bat
Size 54B
SHA256 11c57b03dd1a8bdce3f15d74af679df4f7091fcec57699a09b47c83bca35a1d9
MD5 51b0404cce6d36549605f5674ef09bf9
SHA1 9fe00a443f136534667cff0bcdc4df1d5c033f30
SHA512 49b2c8618da03690a62caf405a4e062e3bf28404b7f411fbadb8c4e686189447e16dd9d6ddda197ec8483226c630b02954d8207541a3ff18161a8ebffdcd6b57
TLSH
T1CE9002161944A40696A15E1894451140E40763AA14985499522A26D4484F986D51A143
MD5 SHA1 SHA512 TLSH

Submit Download

AutoDirPatcher.vbs

Path C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.vbs
Size 1KB
SHA256 08583009a3ed2b1668f729edc48d7c8eeba302a7f42fb5c303a97dd38b747041
MD5 159d5892d949c6f759b5b17e99d38494
SHA1 4af96f926d6bacb966c8635239a9b3719007898b
SHA512 d3b4b913c60caa32f9a2201011ce24c7118266396bf7db2bf5fece2a2614a879d75d13c15b273b863a29b52518a12661bca4064e39cef403b5fb2de1f52760ed
TLSH
T19031FF06A71362E549E182D0C8FB89494AE43FF6F43758D13F06802E835977887BB8E6
MD5 SHA1 SHA512 TLSH

Submit Download

AutoShortcutsMaker.vbs

Path C:\Program Files (x86)\BonziBuddy432\Options\AutoShortcutsMaker.vbs
Size 1KB
SHA256 cbb7267266008da6d58707bdb91ee3c57bd208d0653a32a8e9b5a7f7080061ed
MD5 943e197d47fef0c8ff3bbdaac77388c4
SHA1 51d0ee2cb206cdcb0169d492e6c8dd6c604bb124
SHA512 5ad4e13e9cb321f9a23e2333d9dcc846fdf3d1b65291784fe310eb653122e17c55d48ffdab91b90f2c772411ca6c39de99f045a6f2375b5b140212db20f232a1
TLSH
T14A313CC5601910EC50B3B32C5C538D45FC9B23A0A02A5C2577E86C2F3D35BA68EFE88B
MD5 SHA1 SHA512 TLSH

Submit Download

BonziBuddy.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\BonziBuddy.bat
Size 4B
SHA256 e596899f114b5162402325dfb31fdaa792fabed718628336cc7a35a24f38eaa9
MD5 f24f62eeb789199b9b2e467df3b1876b
SHA1 de3ac21778e51de199438300e1a9f816c618d33a
SHA512 c2636ad578f7b925ee4cf573969d4ec6640de7b0176bf1701adece3a75937dc206ab1b8ee5343341d102c3bed1ec804a5c2a9e1222a7fb53a3cc02da55487329
MD5 SHA1 SHA512

Submit Download

CheckRuntimes.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\CheckRuntimes.bat
Size 199B
SHA256 18ee11dc6a159dbbab4f56c0a552fb3d8ab5c3c18fc1744516dfd1cb17a293d4
MD5 2966b9e9451b773573200add659bd660
SHA1 86d0a8f276abfb0f418a5b809e6733d8215ead4d
SHA512 c4fc45247a1068ac83eaad571f97077871ba2b7950dc8affe30759790633f09618ce92d4eafbc5e224b52ddc0118931afd72f6ed0be2b29db9224d865bf3394c
TLSH
T13AD0125A7FE1181E0B812B8364F537933651B1058536B6521CF79075E8164E7B335279
MD5 SHA1 SHA512 TLSH

Submit Download

ManualDirPatcher.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\ManualDirPatcher.bat
Size 51B
SHA256 999a70147a3115502d5b47c2bebb6731b2cffaba93be49502034eba06034f412
MD5 510937646168fa292f9485cefc3cd4fd
SHA1 8c70a305ebf5af333c5def9f4e9e9d0bb596d4d2
SHA512 244cbd347becd971b5da1e1909a0870003a4a96d811208f1d528df43b43de2a6e5a61ce9ced00690b67a2556a5a566cd3057214df8f3cea4dd8675e8b1726864
TLSH
T1079002164840450246811A0588452141A40792A524185455522637E8494F5899119012
MD5 SHA1 SHA512 TLSH

Submit Download

ManualDirPatcher.vbs

Path C:\Program Files (x86)\BonziBuddy432\Options\ManualDirPatcher.vbs
Size 1KB
SHA256 56e8d6f1006029624a8fb9b09cdd59f137eace19a122b82608e047613792de76
MD5 c594e329508a06ba5e89adf59821f9e3
SHA1 093a43a53d0129f5f04ed5bb48dc09ff21eb1a00
SHA512 c8cfa8560ed0ccb534a7b9626ea3b7dad13aae6f73276416a7f0183d0aed942f8d9f4b19eef7c64493983440603e1bde8e18428e0f93c5d5dc11dd947ee008f9
TLSH
T1A7310002A71362E509A182D0D8BF480946E43FB6F43A18D13F05C12E431D37887BB8E6
MD5 SHA1 SHA512 TLSH

Submit Download

ManualShortcutsMaker.vbs

Path C:\Program Files (x86)\BonziBuddy432\Options\ManualShortcutsMaker.vbs
Size 1KB
SHA256 5c724387b4b1819a197b0d06b88394d7705a7311d17c8e29ac76e3b7439aac1d
MD5 c33abdffe5e65874ee0ed59b40564cc0
SHA1 48ba2360d6bd774acf7019bb92e85460ccfa5059
SHA512 fb8a22f15679341245a576077fc29fc0ea03577df1270382c8703b168af7b941bdd956adfc574a501cb771272d112e120934d7d4f45dadb6608c40cf53af4a83
TLSH
T1874170C5601910E85073B32C5C539D05FC9B27A0A12A5C2577E8AC2B3D367A68EFE88F
MD5 SHA1 SHA512 TLSH

Submit Download

bonzibuddys.URL

Path C:\Program Files (x86)\BonziBuddy432\Options\bonzibuddys.URL
Size 121B
SHA256 ce6634b06d190b964741fb8dc53dad631a1b001a46193567e0d66bb478713b8e
MD5 34a3b31000b28910ccd2a759a885cc90
SHA1 a9a3f6c09af904036bd9607179ffcfe3c854b3ec
SHA512 8b2631718b65714df93672f1cf5bfb16f03c3240a85f13d8d0dfde8129af8bb030e81f07f1c63daec78701b1ea7a36ce82fe8a7fc548c4600bdd27dcbbb31961
TLSH
T109B092E9428680DED256AD0AA0B0F815A80C7AA048C3E44C6250DDAE2D860D1C45AB2A
MD5 SHA1 SHA512 TLSH

Submit Download

chose.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\chose.bat
Size 394B
SHA256 c191c970e39a53ae342515302c3bb1579ef5247ef76e8d2eb948000f2e5e0261
MD5 81b125b8da6edaf2f80ff3b90eea5981
SHA1 a9c9271e1ecaaf7fac491b3afc16e8a19eb9da5e
SHA512 75d5dcc3e31a3d5e607365c4c46a9694b9c002037437a1c75ea3cefd8170f4e7e7ec8246224df26118eec2f9dd6e6891dd59e4d23fa56c9b6ac0ab76c4d4a550
TLSH
T1C8E0D86CB30CF6351F189188C774665BFB49237F090E988ED02F7032254C5CBA684D01
MD5 SHA1 SHA512 TLSH

Submit Download

fix.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\fix.bat
Size 320B
SHA256 11c81b5638de403ab4bc1cb7299f7d46cc68da7c608dc971be6ff984c7391b8c
MD5 00403d6181d3bc1782b9e2108d372d56
SHA1 bfca4357e50788b265d616b446664fe8ea9646b5
SHA512 3895c40d018673663f1262f04f8962376f4d1e71753562afc4eedcdeb1ee4dd92bbe56b9f1dea5c4f45884e53c046b7dc919b6e87d1548198be2b9baf1dceb90
TLSH
T13CE048195E120B5573201AF7F45A6E692C87DCF9A27448F07B7FB59BDA22DC8E808037
MD5 SHA1 SHA512 TLSH

Submit Download

menu.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\menu.bat
Size 1KB
SHA256 b65d7b112c124ab6f1927a72244160f83e7db7a5c948ec0b325f237a306db546
MD5 f04f8720e413478c181ba2cef8e4d384
SHA1 a19137dad529e68ebaed4fecfa9a9018c7ee9de3
SHA512 b4d82e3f29f26c45c6533a56423c5770fff0217cc7237073e02df1a3a36716b54ac098aec83d64e1b1994350e1a0925b045a11ea6bba3a80c0fe94ebcde9d8e9
TLSH
T13141AA79B20CF2261B6161898BB51A46FF49736F090EDD9DE02F3136750DDC3A69DD02
MD5 SHA1 SHA512 TLSH

Submit Download

registry.reg

Path C:\Program Files (x86)\BonziBuddy432\Options\registry.reg
Size 8KB
SHA256 80088f8bc82b3facca2daf7066e9cb78e4bf0aa81c57f77a500a75e137c0b411
MD5 06730e009063976e92ca3155dbe21542
SHA1 1904d9b3aa4fbc3f2f21cca4bd15ab031767e84c
SHA512 98c9d5ce10ee66f533df8e8aaaee42aeee2475f3a7a9cc6fd4cf963313a5e85da154171e5f1f41024c4a3249f78fee946a0f2d3de69c80393562f6dc39e8fef4
SSDEEP 96:NOSPSdSMrcHSSOjRjcD6sDfLr4YtVRmWLTxJWOVzsEF3beRlj05OQHWseDn+a9R1:PKwMroOVjBsrVHskbeRHseD+axRJcB/u
TLSH
T18C02845336E82018B9F32A94DAF88D749725BC95471F967F2AD40D4F06F1A408912FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test.vbs

Path C:\Program Files (x86)\BonziBuddy432\Options\test.vbs
Size 1KB
SHA256 a49357c09b87f39aa3e7c1560de48e2a070f315399bc7a7337f7fa75f8b8a455
MD5 9673c87fa79561cb2ce31ea780e12985
SHA1 b20a855defe4d05e2e6a74ee34d8188d44772c58
SHA512 cd30be0ef65f02e5312ad330c3879dcb695fd6e68061792302908fe9ac35c0ff184a870eb9e67b3e942f0a624fafff9a4554c1e45c2136761b64a7efef7ff314
TLSH
T11E219DC0602910E88073F3285957DE05FCD623A061394C29B3A85C2F3D36BBA8EFD84B
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.bat

Path C:\Program Files (x86)\BonziBuddy432\Options\uninstall.bat
Size 27B
SHA256 8c2960f58beebab3b77bc4c705e06edd1620083ac9614368a4244dad7a4a89f7
MD5 a187448694701f15f5ac836a258cfa78
SHA1 b47137ef4b5613a8a0bc0fa3e3095177cdd2f35e
SHA512 fcb16cd4fe4c009b01583111ea4f4e14d3fda17633af45b1283a562e12388ce16ff37690e5f9c5ea69c7955ce0f5880a099b08699ea1c8192452a9e89327a6c2
MD5 SHA1 SHA512

Submit Download

P001.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\P001.nbd-SR
Size 231B
SHA256 3e8554436a52336c84117905b7b2383fe1aef01d613440d4cea70f035aaee28b
MD5 307f2e464cf4e0bb93fbf82037102e14
SHA1 b35f620a6dd2d0b5d04d669d4e2bb65c9c41363e
SHA512 d03df59f9ebd5040ec5f6fbd5c1e426d8f4881d61ac0e98423c26d39a56b170da6a3cde6bd231209739c9a89224220514371bab2ebc38f8d9e6d86c4a76721b8
TLSH
T105D0A7930B10539C56C404F18210331318E1C8032C9E402E7BC368DBFC1C50785A4750
MD5 SHA1 SHA512 TLSH

Submit Download

RACREG32.DLL

Path C:\Program Files (x86)\BonziBuddy432\RACREG32.DLL
Size 32KB
SHA256 054fbd3c3a31cea5c69c78c1455d19d2f3486e07428ea951f107d5dac3e58d25
MD5 4e86f6e372d5f823e457ee5358b46079
SHA1 75bf76ac7de2a577532965c121aa0478076eace0
SHA512 73b55608c748479ddd4cbdb2046488972bc2e9340e8c6fe6cf9d0d9badb344de9f5e7ed66f508c47db402d9479066d7f0f4644ba6551cec6318a5a5a468e5087
SSDEEP 384:IGgp/5m0wfOnnW8if3M7LXN5GeqfnWQ0TgEjb1qi:IGxfOnnSILXNdcClqi
TLSH
T132E2B616F3CAD1A6E11E03794EBAC2E557707C105E139B0F3145B3AD2D76E6758A8B03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reg.nbd

Path C:\Program Files (x86)\BonziBuddy432\Reg.nbd
Size 290B
SHA256 03b3858e5766b07b919d176b541a105faf76e1a28ba01e3593cc319ad87dc3b6
MD5 7c70fdb75615a12b46140d8e708b7fa6
SHA1 d2b5fe00939a1a53e249b7892b1d7d18f66adf45
SHA512 632568205be861f532da9bac3f423306f44ab6b8874c1a8dd5872534afbb809081c861bff6fe041a2d7296a627f7a988059989dc58f0ba3b4162439525695b3d
TLSH
T17FD072E2000648CE2809CC32605FF7A338EA2C689802928B8900CEA584DCBA41A1F5AA
MD5 SHA1 SHA512 TLSH

Submit Download

Reg.nbd

Path C:\Program Files (x86)\BonziBuddy432\Reg.nbd
Size 99B
SHA256 56010f4c8f146425eb326c79cbad23367301e6a3bc1e91fdcd671ce9f5fc4b63
MD5 4de674e08ea9abd1273dde18b1197621
SHA1 7592a51cf654f0438f8947b5a2362c7053689fd8
SHA512 976d5772c2b42616cf948f215a78fa47d8154798abf1148f7f750545ed3de9ec1ecdf2e7e16b99c1459e5519a81301b9c1e6864e992a807b78257f0abaecc4c8
TLSH
T1C1B0127096218C078BD30140660340019C3E9BF0D32C9593C04F4E0653B8150F90B8AC
MD5 SHA1 SHA512 TLSH

Submit Download

Reg.nbd

Path C:\Program Files (x86)\BonziBuddy432\Reg.nbd
Size 140B
SHA256 375ecd89ee18d7f318cf73b34a4e15b9eb16bc9d825c165e103db392f4b2a68b
MD5 a8ed45f8bfdc5303b7b52ae2cce03a14
SHA1 fb9bee69ef99797ac15ba4d8a57988754f2c0c6b
SHA512 37917594f22d2a27b3541a666933c115813e9b34088eaeb3d74f77da79864f7d140094dfac5863778acf12f87ccda7f7255b7975066230911966b52986da2d5c
TLSH
T107C0927096218C4783930341668380029C6E9AA0F32C9A92C34A4E0A5FA8693FA0B8AC
MD5 SHA1 SHA512 TLSH

Submit Download

Regicon.ocx

Path C:\Program Files (x86)\BonziBuddy432\Regicon.ocx
Size 76KB
SHA256 07e91d8ed149d5cd6d48403268a773c664367bce707a99e51220e477fddeeb42
MD5 32ff40a65ab92beb59102b5eaa083907
SHA1 af2824feb55fb10ec14ebd604809a0d424d49442
SHA512 2cfc5c6cb4677ff61ec3b6e4ef8b8b7f1775cbe53b245d321c25cfec363b5b4975a53e26ef438e07a4a5b08ad1dde1387970d57d1837e653d03aef19a17d2b43
SSDEEP 1536:5rPNWKPzHUIZurPA28AxaVgEbk2NRi6cVbAYAS9jbbx2+cW8vYvYBgbN:5LNWKPzUI8B+Iz758vCgYN
TLSH
T17973C602B3D7812FE69D0BB8097796AD08647D921FB0D1AF2791FA8C1A36D859D3071F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckRuntimes.bat

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat
Size 279B
SHA256 8ae1ed38bc650db8b14291e1b7298ee7580b31e15f8a6a84f78f048a542742ff
MD5 4877f2ce2833f1356ae3b534fce1b5e3
SHA1 7365c9ef5997324b73b1ff0ea67375a328a9646a
SHA512 dd43ede5c3f95543bcc8086ec8209a27aadf1b61543c8ee1bb3eab9bc35b92c464e4132b228b12b244fb9625a45f5d4689a45761c4c5263aa919564664860c5e
TLSH
T108D0C26BB7A0050E8A852EA54C802743503230098E1EBB821C7251A5D12340BF334F7B
MD5 SHA1 SHA512 TLSH

Submit Download

MSAGENT.EXE

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE
Size 391KB
SHA256 16ca09ad70561f413376ad72550ae5664c89c6a76c85c872ffe2cb1e7f49e2aa
MD5 66996a076065ebdcdac85ff9637ceae0
SHA1 4a25632b66a9d30239a1a77c7e7ba81bb3aee9ce
SHA512 e42050e799cbee5aa4f60d4e2f42aae656ff98af0548308c8d7f0d681474a9da3ad7e89694670449cdfde30ebe2c47006fbdc57cfb6b357c82731aeebc50901c
SSDEEP 6144:SFfDAEl3mNlHuHgUaJG6KPHdQM6FoVsmzY4fPLrKHo1Aa1PyhPpcgiMg7:qUNlOAUao6edbs9eY4H3KHo1AaNy9pL2
TLSH
T12284F12393E08237F1E61B301AF14A532B74BDA56FB5DB8F5290804D1A73AD89A35377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Readme.txt

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\Readme.txt
Size 369B
SHA256 b29f947446b61c80e8906be02b4793010aaaec5ab3c7538cc84cf0cb0b49631b
MD5 5eab14a5391248bade4c546b26e04db9
SHA1 f00f4103914cced6aa612547542b7278b7661430
SHA512 e18730a7bd2ee8fbb8c08c1258b0f7b39a7c0dec218f2c18bdc5f03dae7f8dcd31826af6373fbefcebed5e44b65ee8ae39d989756791ff9686115086813f7ae4
TLSH
T17DE0687EC74E126AA8728270A56B2460777F9076AA30046278CF60EA73A6398017B44D
MD5 SHA1 SHA512 TLSH

Submit Download

actcnc.exe

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\actcnc.exe
Size 6.0MB
SHA256 b4694750c1151663750e131ffd9b989a3b81818059b6d60dc279ecac966644e1
MD5 cbbe2893fe0c4a6ce7eee46c373ea0a3
SHA1 87af6b4d460fb9567a0d66d920cb8538be3c27c9
SHA512 fddc675d451812125d9026320d92ac561081790e721b2e3b85d992ed6bf861c16a550049edb115c64e15672d1c799361758adb8d6e33f9192329dc8604955b72
SSDEEP 98304:RqerrDKxrX7nG5Nzomw1te0Lkf7FDPhzQNoZnhntcab7iOZfmqhPHBSNU3dMj:rjKZn+FbAQ7FDNhZnTtb7iOoqNBSedMj
TLSH
T1EF5633375BC9808BE1D83B7A03D65A1375B1BC9C03B39B4E8370A456E6329C116BE779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spchapi.EXE

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\spchapi.EXE
Size 827KB
SHA256 7b05a46c786c91492d154683259c229aa9456286f688da18d4016d91625bebcc
MD5 46878602caa5debb728c0f740aeb45d6
SHA1 63237b1c8b656712d00a1e60a062a738f376a95c
SHA512 4b20b82a543d19932a1b32629b7af3f1dd820211e2350d5fe1ef66e07007fc0717919ec509b5ff6e1495f0511433763198689df4c820e08c3df0029ab74218b9
SSDEEP 12288:THT72nlSwJL/1+DjTRjMGEGqv9BNvGnUQ0EJBfGiromFn:Tv2lSjjTl7qvlvWUEJZ0m5
TLSH
T1FF05230142E44E67E1F05BB51AF026432BBABCA41E79F75FC215E19D5C32BE4AC34B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spchcpl.exe

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\spchcpl.exe
Size 927KB
SHA256 57858127f1a07233ccb4713bd29c860c9a7a201f2b8207ccfc91410478cce4b4
MD5 7506648bdb040a872901c74f7d057e90
SHA1 70bc6be71d2930a50bf0f92cd732531bb6bf5f8c
SHA512 80b92f6d463452b4e9816f27e5482fd18f144216de9f719ca71e5736aea9c6561cce178a5718d3a0e3ff33f7a179833099a154963ec89ec37bf81ce92eca8af4
SSDEEP 24576:D6ZYfzfV/7NVW/PuYiBXpIKlhR2SAIWTZX0k:VbfVn6UZIgX2EWTZ
TLSH
T15115231293D9467BF0B61BB514F81A0367B1FCA66FB4BB0F5392909D28726D08D70B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tv_enua.exe

Path C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe
Size 997KB
SHA256 709936902951fb684d0a03a561fb7fd41c5e6f81ecd60d326809db66eb659331
MD5 3f8f18c9c732151dcdd8e1d8fe655896
SHA1 222cc49201aa06313d4d35a62c5d494af49d1a56
SHA512 398a83f030824011f102dbcf9b25d3ff7527c489df149e9acdb492602941409cf551d16f6f03c01bc6f63a2e94645ed1f36610bdaffc7891299a8d9f89c511f7
SSDEEP 24576:+RuPGuSU5BiPic3l2iMVCKctDVq0HtPxZj+ihApGm7+MXnrejxAr:LH5Byd2PAd3q0HHZqJpFqMXn1
TLSH
T1B425236297EAC27BE1B277310EF641679A35BC962DF5E3DE4240901D0C22FA5187932F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSCALA32.OCX

Path C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX
Size 472KB
SHA256 8e52ef01139dc448d1efd33d1d9532f852a74d05ee87e8e93c2bb0286a864e13
MD5 ce9216b52ded7e6fc63a50584b55a9b3
SHA1 27bb8882b228725e2a3793b4b4da3e154d6bb2ea
SHA512 444946e5fc3ea33dd4a09b4cbf2d41f52d584eb5b620f5e144de9a79186e2c9d322d6076ed28b6f0f6d0df9ef4f7303e3901ff552ed086b70b6815abdfc23af7
SSDEEP 6144:H1v56AP7u/5b6HMpJVAtdP3IfZETrOn4jgO7jUvyDl2rwV2iM6QVS4AmuRkXc7k3:VvZ8YGZEeKUYlm827aREc7k3
TLSH
T1AEA47D13B8C0C56BCDB60630CE4F67B5F6FA96204E321E436354C7BC6B72F62961562A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSCALB32.OCX

Path C:\Program Files (x86)\BonziBuddy432\SSCALB32.OCX
Size 320KB
SHA256 5db33895923b7af9769ca08470d0462ed78eec432a4022ff0acc24fa2d4666e1
MD5 97ffaf46f04982c4bdb8464397ba2a23
SHA1 f32e89d9651fd6e3af4844fd7616a7f263dc5510
SHA512 8c43872396f5dceb4ba153622665e21a9b52a087987eab523b1041031e294687012d7bf88a3da7998172010eae5f4cc577099980ecd6b75751e35cfc549de002
SSDEEP 6144:ZD3OD+b26Wcix8swZOsfi8h72gYYXWQ+8MIdQpE:ZDeqb2Px8swss68h72gFWyum
TLSH
T1EF643A01F1415D27EDA70BB1486EE799B6683E211F2064D7A3C8ED7C1FB25F2AA1170B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSubTmr6.dll

Path C:\Program Files (x86)\BonziBuddy432\SSubTmr6.dll
Size 40KB
SHA256 48bb226b418dae999d66731599996e042c5592d845ea11548a15ccd3a00fb5ab
MD5 1556c5b52a751c31b4ca6fe757704131
SHA1 a04263b37b69a5a53eaccc6d30dda61b2808224a
SHA512 ea306e09834bd08edf8a5930c096eaff4ab6c6a8799f3910ab8ea88a0a25fde45de36887c13d468046e9bb2e1439e7bd34c970e3ef9f71d8e4eeb95b5fd60074
SSDEEP 768:Xr65PC/JXxK5yO2Zw5WdSYEFrAdOnBiyFm:GPC/Jhip2Zw5wSYCEMUR
TLSH
T1DF03B721738AE431E1D906B91D1A93D42665BC211D51AF2BB38FF39F2E35F43E612722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Snd1.wav

Path C:\Program Files (x86)\BonziBuddy432\Snd1.wav
Size 27KB
SHA256 11863d5b7fec50e3ca69f74066b68ed389a18b6990394f3ed21d6ea0e67262e5
MD5 7cf6069d29b9a66bf03ba1e554553fe9
SHA1 001de4b7b9082f951e782efb74601d8e0447bee6
SHA512 51414f0165ea67fcd96d0a5b2df1b321882145d3d3dcb146a0d896a3a0c395b2538cb01b7c27ce106acf65480d88bc5d2aba19e9ad03430bd756c5047f33d08d
SSDEEP 768:P0SgkJs9aE1NSGHd5W4AYVNwXLlNpm2y51mZ:PntE7IYVNwXLlNpmD5
TLSH
T195D25C2B2A0B0707E33367B4D87C21126454ACC8D56CEFA17AD34C5ADE0FC6A56F4B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Snd2.wav

Path C:\Program Files (x86)\BonziBuddy432\Snd2.wav
Size 38KB
SHA256 d59c9bc27494b2e68d5efdc1798dc5442f364bef46cfb1fcdf4b3b032358ac26
MD5 bd183af23b343b2789e61f03b536aad0
SHA1 66db4748e6214fdc4642e3f9a6bc4218b24ec5b4
SHA512 ad5191eddb6838ea7b9200bc7a10c06e0a41966ba627a52ccd5a4f1008b1b85edfc63939a264822b7e1e9caf40e3428ddaaaaa80c82bb5066afe802d0dc52211
SSDEEP 768:f9ZOco4aji+8S/y75qNGyFZraqGAJb9m:1/MjiEy7I8OZr7GATm
TLSH
T18603A36F2A1B1707D3326375DC7861024445ACC5D8ACEF91BBC2AE2FC90F85642E1BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

T001.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\T001.nbd-SR
Size 319B
SHA256 2f3d5ac26d4345be684f81cae8aa51f116334394680e9e6ac6a6ec49f58f3bac
MD5 877bd06f8b02ff562dd476306d8bb8a9
SHA1 ae4198c145e9d69e122f3a387519194d4280a089
SHA512 e8fa96008c4aaca4c4251bfb310c14a4501aa59b02827e68e91013f4089bd7e20a498923046bc4469985703c94b3c116da890270f0a806431601db605a840fc4
TLSH
T199E08C1317640AFEA58009CA8108762759F3C9BB1C1C608EBB6504EBF41E1866438772
MD5 SHA1 SHA512 TLSH

Submit Download

Uninstall.exe

Path C:\Program Files (x86)\BonziBuddy432\Uninstall.exe
Size 65KB
SHA256 465839938f2baec7d66dbc3f2352f6032825618a18c9c0f9333d13af6af39f71
MD5 578bebe744818e3a66c506610b99d6c3
SHA1 af2bc75a6037a4581979d89431bd3f7c0f0f1b1f
SHA512 d24fcd2f3e618380cf25b2fd905f4e04c8152ee41aeee58d21abfc4af2c6a5d122f12b99ef325e1e82b2871e4e8f50715cc1fc2efcf6c4f32a3436c32727cd36
SSDEEP 1536:y7YLOVDssf9ZMeQotjKgUT2UdpQyz27vWwp/c:l6Vv9ZMe4TbQTP/
TLSH
T1DF638D01F581D432D1251AFD6C2EF319DE3935112E3A24D3BFAE2A4DDFA9287191C1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

empop3.dll

Path C:\Program Files (x86)\BonziBuddy432\empop3.dll
Size 148KB
SHA256 f198ec842cf9b9d1e9e3f4bb6864fae7eea98d6919e0c6609e139e00c262d6bc
MD5 a0fdd2077934c34f08d48aa214da2c4e
SHA1 9b9593ef99515aac8665c6da73deb871815d73e9
SHA512 2bef50a54f8c06821e31771bac566992f7a8872709b8a993322a43750f19ccad773dd9fd88f87d819d317845ccfe1b66087c2b2bda094b3382e6054ccce2f62a
SSDEEP 3072:6eH6h4ZLkOO0qn4fZD82yuGqeWaZnYq2+DrDJxZbcG0Z3bp:s2yuGqeWaZnYq2er7lFKp
TLSH
T1E8E35A0273D0C075E2E9453D1E23B736EBBB59788E6605075F6817BD2FB2E90AE17206
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emsmtp.dll

Path C:\Program Files (x86)\BonziBuddy432\emsmtp.dll
Size 116KB
SHA256 743857c8be216893265c231ad45f4ffd3babb67c024ef8ceb5a698e292464263
MD5 365920b74d38322571e16f66686ef56b
SHA1 d4a112bcc048526d1e6b7a6841c059c63d23d4f6
SHA512 f13a913e09b467a929fb25da3fce4c9eded9571c2f43d6a9365de4e86f4183434d643c32f35e5ee4b8d7798b5aa24beaf3898d61e92daa4df35f0a31ea338164
SSDEEP 3072:cx57Ipkh2yuGqeWa6oat9Ts9zAEzmTzFJSB0EKqTu:tg2yuGqeWa6Z9TsdGyB0ZQ
TLSH
T160C34B02F7D1C0B5F186023C490B2776ABBBAE345E551947ABA027DC3F71F51BE1622A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicon.ico

Path C:\Program Files (x86)\BonziBuddy432\favicon.ico
Size 3KB
SHA256 d5343ff39d29ecd9b60fd31cc60321b2d4a36001d5d1ee24f6c766b10eef0095
MD5 e1a53bb79bcf97ae324b05552c1b3ca9
SHA1 5ee16e7d9fb3473df37f1c318881a59b1bf2d9ef
SHA512 1c8ac8b9a9e8e063f572c41ce9a7aac91dcf956763859716fa68247c3774cca00bf5aebd5dae3dfe6c0ef1a961cf640f7ad3c68965ec9d8b5e0d610b77c29c80
TLSH
T1EF712834B913B989C4566F3856E7CE860A60AEF4F28130634AC8887B8C5C202FF1B235
MD5 SHA1 SHA512 TLSH

Submit Download

j001.nbd

Path C:\Program Files (x86)\BonziBuddy432\j001.nbd
Size 10KB
SHA256 e312728e0491e1a15405566c8f591cf3ca6128ca17e5e022a7550494a600ad27
MD5 98c9159b828cbcd8f13a0491218bf537
SHA1 6b9a736cb7840300e56acd2cbc635d5e451a68ff
SHA512 9d07bdd0b7fbc3e23c6940c72e5e151271c61b703f0f6d858e81887fd4819f9574e4bc078bef8e2c3c9c661793884f98cc6305556f34d0092c6ce7c657aa16f8
SSDEEP 192:nnW1LaScTPa+SUYPh0fAosSQEmJ3yptPouBHHdam4Gzy56l7pL:W1LRcTPawDA9MmJ8tPo8n7zDlx
TLSH
T1D1229F8105FC8F05694FD85D605A4E0C360E9FB4C9DE29E2BA165BE7C31EF13852765C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

j2.nbd

Path C:\Program Files (x86)\BonziBuddy432\j2.nbd
Size 44KB
SHA256 c032c71a49e0cb05072602c99251e6b1d76ca2db57120fc402b93d3392df7c3c
MD5 788b0ec30cc5fae75d2a6ee0a3ef10fa
SHA1 a879dc350bbe79dc2cae04ee804fd6ee9a1f8e1b
SHA512 df5e1097db5326c168b0c840b2d598f82caab5138d30f899233a777e7164b8178e4ba9934eb0c32029533b6ee5f72c07fa279fcd93f8e11d4108485724abac1b
SSDEEP 768:cm+rR22Cxd9eCFkw5KvaaBIlZZuQVZPym/F5V43uffAGBLXVCCQDtWIcjQ:cmv/9eLOKvaanQVZPPF52efLDk
TLSH
T1D313BF4141FD890183EFD60DB11C0E8FBD1B6C7815EA65DAB812678EDB3BF40D8E6A54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

j2.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\j2.nbd-SR
Size 907B
SHA256 1837a9f0653a4093e448de37fdbf2bb0e4c3e98abb1414b8e60793a2863208a9
MD5 6f8c402777457a1cc7b7ca6f7a7657de
SHA1 b05c00f28f9185ffd43c9ee479976382c64adbfe
SHA512 777d34f5e4e24c4f053050a99e00c6a7065bb89690c542362eadce7552c71005b6a7de0fdb20eeacece70610c900a1d51b6485332971d598e6c0dc475b228bda
TLSH
T12911449303890BBEF59E0ED2C85B255320F4D452BD155288ABB3AAEB7C3F8C95430A34
MD5 SHA1 SHA512 TLSH

Submit Download

j3.nbd

Path C:\Program Files (x86)\BonziBuddy432\j3.nbd
Size 48KB
SHA256 197cd5e9b3bdec70314d3b3e5ddb5ee41578907a8a50d9ad2fc3683ff271656f
MD5 0b9550caef707aebf17f4c17a7e0f424
SHA1 06d91cae8ea9324f76b7828d2d2e9455ba2c6c7b
SHA512 d1cfda4b4d82a7cb0571e4c70dc5b8f4b2b19406364568a45e18dd68dfeeb1f37f4237b43448b0d1d12cfd388f54bd2d5f9390510593173c0dbcfddafcf18735
SSDEEP 1536:K6h3swrT9IiFyM0kQkjLlY2V1KBMlubUpkjQmwyFRx:Bhtrht/0LyLOUaUyHpx
TLSH
T1F423BE4040FC841143DBEA0EB12C1C4BBE114CBD69AA36DAF99653CBDB5FFA4E461B46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

j3.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\j3.nbd-SR
Size 1KB
SHA256 2a9cbdbd1459111eac43d2d505e7828108c68cc5042c97b4e93d235962f8ad59
MD5 4c273ee71a2d85203ca95387fa78a315
SHA1 195a066b030685b1fb8b5e594f6a77889a1ff3ab
SHA512 6e833e069f410d73976c97031b61949cfc31e81df7363e724090f13a5a2306496a1a15aa3ee01fa1cff43cf91d37d191c84be293ebf6ae7c1c5c3b55cee06724
TLSH
T13C11264613852A7CF5CD0FC9988F242621F1C6167D680558AFF31AEBBC3B9C05430676
MD5 SHA1 SHA512 TLSH

Submit Download

msvbvm60.dll

Path C:\Program Files (x86)\BonziBuddy432\msvbvm60.dll
Size 1.3MB
SHA256 2246b4feae199408ea66d4a90c1589026f4a5800ce5a28e583b94506a8a73dce
MD5 5343a19c618bc515ceb1695586c6c137
SHA1 4dedae8cbde066f31c8e6b52c0baa3f8b1117742
SHA512 708d8a252a167fa94e3e1a49e2630d07613ff75a9a3e779a0c1fcbec44aa853a68c401f31a2b84152f46a05f7d93f4e5e502afc7a60236a22ac58dea73fa5606
SSDEEP 24576:LlDYRayxYMsEVcQtFyBw2fO+wgw7HsltDngDG+QryQF63xxWPByACxlQ6kMX1Kse:BOayxtXyrgs3DngDyyQFwxxWPcxlQ3cf
TLSH
T14655BF1373D5AC73CBA721380A2A2375F6B4AF245A34ED8B13A4356F2937741532B726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcrt.dll

Path C:\Program Files (x86)\BonziBuddy432\msvcrt.dll
Size 288KB
SHA256 d7cea69a98579d928e534070f5293e80ed7df38baf611b20717ef55aa1344a18
MD5 055b02d711cdedb8c5997274c4e99cb8
SHA1 5c816eeb6e4d5f1c11e9f56c992ee7d452e7c0f9
SHA512 4774431fe768e424f46c833236a41d68f05d98ed14353b04428a5d190dbe213bb56087a5e5cca5cd98598f2c1611fddfed3a7a79bbd362bc02e586cc367907c0
SSDEEP 6144:yk54RkH8RKDou3LlG/3Roe0Ro4zJsdF9gjFMgiFjNr7mcl2oZhogKLOmJxZR92l3:R4RtIR3BG/3We0RVJsdFFUzchogKLOmc
TLSH
T12854BF217F91CDB9E6DB81700D287F2E9BBEB69044B4CC43A7D89F982B316429717127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

p001.nbd

Path C:\Program Files (x86)\BonziBuddy432\p001.nbd
Size 22KB
SHA256 6e39e8b14ac5a0dad47279595406a49c61c6748f16f4e69dd48738653e50882f
MD5 89baf0ce132d54517f89e6fdebb6764f
SHA1 41509f6bce097e434651148a36012cd8c66da2d7
SHA512 2b3d3fe6dc4bddc34005cbf461f27e10e7a330aba645dd27ce787bc79ff28e9627abd3adce27bc8741ed160ceda9c22fa0c62d9faa16454d6700437eb72a6e6b
SSDEEP 384:2Pt/eO/RjVAPQjOrjo9VrIxGs6PuobKQG1W1Wy9eNanfJzDxNp:2l/Z/xW3o9VMCJKQx1WyEKhhz
TLSH
T1ECA2CF1A683C730375BDD1D92074E93F2B7F9D92290AAB48BC6490ED45BBF208C28F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

s1.nbd

Path C:\Program Files (x86)\BonziBuddy432\s1.nbd
Size 188KB
SHA256 abad946feed68057f15569c0df432790b0c19a21149c8f07ecfc99fac2311616
MD5 4e4d3a1400a1d0bcf482fc8da711ccba
SHA1 751769e1582ce3a057ba6fb0270698a2a48d5dae
SHA512 13b04814456172ea858c220c36d0c066286965a2bcd217c0216788e3fb84ecc1c007ed8f44124a368400b858af584a2fff855919cb7bb3fb195da39abb0e675a
SSDEEP 3072:7P0t9Ul1fX5RKr/xooFEZZzpiqHYhT0Jic3IYbMCMW4NktxiR/1jRXvcsaKWN:7PoohGd0Vp/4hT0JH4YAqqRX0saKS
TLSH
T19214D0914E5EF162693D953110D33E1B468A12523CCCA7EF263854626AEFDAF3C0F62D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sites.nbd

Path C:\Program Files (x86)\BonziBuddy432\sites.nbd
Size 888B
SHA256 5a8749440d441766dba442097d5956cd7bfc0f3bb1fb46d431df341bba1a2778
MD5 a8e5c2cef7e455ce4f6cdd601ac774bb
SHA1 0ebe0f1ddbdcaee08d4a5505b6f8a329022e554d
SHA512 186a9146263011c70dd8c342956564163c4d496b938842eb2c06382464ab9aef73e5cf87dd70ee2d8177d61c1ccb3fb71510b5064b18a014b394322859fd7c3b
TLSH
T1311163A151EE4281C91CF8D34E2F6A19A69E86921E32B877240C930BCE541BB87742F5
MD5 SHA1 SHA512 TLSH

Submit Download

speedup.ico

Path C:\Program Files (x86)\BonziBuddy432\speedup.ico
Size 23KB
SHA256 aebda70076ae40f99896ee71d5a476444e91974a215663161b6b1d89faa3ab2c
MD5 6c9011742ff814f765779df48147fa58
SHA1 5519c010b4af11452d126439d9e670ef68c77057
SHA512 766005a4cfd5edb960346316725c1c4e427042118e1b702c0a67552b8c2de3a376ccd1422e0db0a8f955642a7e2686c70a266f01362bd17afefcea9823ce5d70
SSDEEP 384:y5R7s+8FEyEYGwnauSzZYPmeBjF6ScYrSY6w98MJlp:yT7s755qZYPnBh6pqJh9DJj
TLSH
T1B3B2D7A1E183F950C16CCD37C05FAE7C127D0C5ABDE9EA124154B90B7B3D2B42B03196
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssa3d30.ocx

Path C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx
Size 320KB
SHA256 7a0418b76d00665a71d13a30d838c3e086304bacd10d764650d2a5d2ec691008
MD5 48c35ed0a09855b29d43f11485f8423b
SHA1 46716282cc5e0f66cb96057e165fa4d8d60fbae2
SHA512 779938ec9b0f33f4cbd5f1617bea7925c1b6d794e311737605e12cd7efa5a14bbc48bee85208651cf442b84133be26c4cc8a425d0a3b5b6ad2dc27227f524a99
SSDEEP 6144:OEIHG7QYXSCz6QEPbLhB8Fp5qycE5lVdBqxuu3:9Im77XSTPbLhWp5vUf
TLSH
T101646C03B3C289B3C8970E31491B3FB9AB799D006D36A25B67657B0D2D72791DE0532B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sstabs2.ocx

Path C:\Program Files (x86)\BonziBuddy432\sstabs2.ocx
Size 288KB
SHA256 596f3235642c9c968650194065850ecb02c8c524d2bdcaf6341a01201e0d69be
MD5 7303efb737685169328287a7e9449ab7
SHA1 47bfe724a9f71d40b5e56811ec2c688c944f3ce7
SHA512 e0d9cb9833725e0cdc7720e9d00859d93fc51a26470f01a0c08c10fa940ed23df360e093861cf85055b8a588bb2cac872d1be69844a6c754ac8ed5bfaf63eb03
SSDEEP 6144:/sd14Jpad8qAuQGIBTOuCXMMpyU6XAcg0nTq:tS8qABGIBTJEMpIp
TLSH
T169549F43B3E1C4F3C2A31230592B57A99BB9B9106D34974BA390DF5C3D72647EA19327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t001.nbd

Path C:\Program Files (x86)\BonziBuddy432\t001.nbd
Size 29KB
SHA256 b30e7a66488327c0cf090ae98eece036f326c7f5b2ffa9f9cac3bf7df3e7af47
MD5 15a02eb5a83be1c01ff9579f2ce06aed
SHA1 1c8ed5541fb243602e963759ea4d284b9842000f
SHA512 06a562d88eeb6ddd8c056df834bc8d0e02bba501c417f9a2531761492233e0f07d17ba65602c6acac2bdcbb463bd6aedba2f397b5b707bc64565958b78f27472
SSDEEP 768:qPWd2Os9M7mXPNKjiFi6YtZGbdMzRoPQ/9RVH1pocYz0NVXejY:q+d2t62PUiFiJcdMKPQ/el0vejY
TLSH
T130D2CFB809F6961582BFE42C151A0E03774E5CF128651AE2FF4B27678BBFF50487C524
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t2.nbd

Path C:\Program Files (x86)\BonziBuddy432\t2.nbd
Size 65KB
SHA256 87d531d27e9987f39934b0f093542790f25882c9e6e20ca554ca0405a16a4acf
MD5 3a538baefe6893b4997ffcd25f339329
SHA1 c2d3e1f16c663c435735cf27a6e114f5b2f85df7
SHA512 e9eed3c7a0b9935e769b56d430fc6081e63f97a7d9d0df0b1913220cc0519223353ecc48b3dcc4a0147f77741d0367c0ba9b8d9a56645c1f03524399155c8c50
SSDEEP 1536:6BBO22jqRuV8t01n8XCF7yXOi0SOHnbOGHOvBPUmKQ:QB/2jqRuV8vCF7yhOHbjOUA
TLSH
T12063DF7501FD4D8A838FD42CB20A5C12732E4DB62A5B68D4BA494B5BC3AFF14D874B71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t3.nbd

Path C:\Program Files (x86)\BonziBuddy432\t3.nbd
Size 54KB
SHA256 94c638be958f83325f9b96303e050383881959f509bc6c4afacd890db3755672
MD5 132adcfde600f76d5f9e4e8d45b5d936
SHA1 619164a1f95d6f5c8286fa2ea7ab5513c6d4bb2b
SHA512 b3bfa48570fc472846ae11712616ba63c6fef5994f04d463ae06cac6dbe5bb19ce43816b0c4b15ec37bc537c8c24d747757df116dade99d2f3c42f0f312a021a
SSDEEP 768:UPPQ3iM/+52laQf145blVHuThJS/qiNpsBYmMFA5JPVqMPxR3lC87LOn2mx9gzTg:UPYw5Qj6OFJS189MAxP7EfM+
TLSH
T14143CE7802FA158A07ABEB5CB51D9D96B7AE0CB2996304C2BD075396C37FF408C71672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t3.nbd-SR

Path C:\Program Files (x86)\BonziBuddy432\t3.nbd-SR
Size 903B
SHA256 a994e2ea053542543b647dc81d6e0aa7fc7585311b77f5fd76e13b1bd73a67cf
MD5 d58e9150a9a022012c421bb8229385d3
SHA1 9c1ecb6c18cddf731003e805914534635b0476b5
SHA512 90ae9db622ed832adcab70aab7833ee8eae4f18b006b89d5982586fb492a797f7ea0e5cdefde16b6929168f0db80ff56d49a39c53ac744e4e3487ef84d44f7cb
TLSH
T1E511668343841B7AF18D0FC9858B201224F6C82FBC180148BFB36EE77C3B9864830626
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c0f239c7ed32f1c492df19d463edf2073ad4d721081b4a3b14c372062cca32ba
MD5 c315998145f0e2e943e87f7e58d6d900
SHA1 33d11ba46613900b72e84b37dd01a1855d594067
SHA512 bb251b0b7711a8694b23a7203d473d97a43c26db6edaffb49e2fa8046fe77babe795a833ff93e67f2984697d704d9d6ccd1f8ce0d2024615aa3c0d6e5d7ba75b
TLSH
T114D080333B5A7000DB955171D422C715533F44657483C712F114C84DDDF51D953C2193
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce9a45431fb053f46812395470c2ff6c9ccd1803075551fd01e4a51c3c4ecd4b
MD5 c8badd2ef76875dd0b2d479d596fe3d1
SHA1 e23e952ecb4d88e34cbd5328967dec2f0f4c9504
SHA512 049fd794e8c8698f9a3908ef9cdd577b41b7919eab42ac9ba4c6f3c4ba05742d9a6be6ee3b7daed591a94beeef3ba099eaaa2b4dcec22661479634920a672af6
TLSH
T16DD080333B1A7000D7955171D423C715533F446574838611F114C84DEDF51D953C2193
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1a22025c1094fd905c17caefbefc939de3b81880b1c0c2661493b1abffe97aff
MD5 53ac271f213ead77ee7e2e9cb39c1c3b
SHA1 c59b27c81d26d463e00cfb944d00b36c9ec0dce4
SHA512 b68b2fff41c8e5d3b260c60c4988ac24306b16cefc08ed555a4880223002eadd698b2f2df789c7c3f855207c942abbfc9aa2a7f5f669c0cb4e5fa659b2700d2f
TLSH
T1FAD0A72227563005F75851B1E4138715132E445239938611F114C94E9E751A912C21C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e754796ea215cd2378dbc919c9df7ca4424922de31d25879f710b1141c9d6ce7
MD5 ac58b54cb38db260fb318f2e9e26d018
SHA1 c3143ccfa41dc74f9e43118e9b02a6edb0cd5c8e
SHA512 8e0c0bf2a20e37519a7ac17e30a37f1778efb671be84ac7588606b6277e4f19a1ca0183bfb3794d573b99abec7b2b05c370788d162dd64f89dd3045daeca0aba
TLSH
T1C8712B214502C8EFF775C1F961C303B5BA7082FB8447BEB755502734B6063358E21B58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b565a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b565a.TMP
Size 3KB
SHA256 20eec72d426ffea3f685ffc31e0e2a48da25adbe4244912273abb851df243c35
MD5 02a15da410799e602ebe4a5761e6d265
SHA1 6d2e3b87231ee3cfb4ed656af35d6080e3387104
SHA512 ed6fbd84df50569cbff84936e45b371dac5a99bb42323c13e59e540528d4edbb38a2a6003ac5342bb64d76d5b2ef864411238c7e99f01962fa77a997c7ca360f
TLSH
T14E713C214502C8EFF775C1F961C303B5BA7082FB8447BE7755502B34B6063759E21B58
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d106adbe67ad4d32dfd7d4cb3f2dd7d5b640688b2b737f65270646b65e94cedc
MD5 d158024e61617524e91e26dd89ab9f2e
SHA1 641694f2fd8b208b641eda73917f680fde0d46b0
SHA512 ed825564e730392223e0738fa90a7412523e6d1cd36125d95a3d6337bbea638b71d45cf7be0070487aae7b92df13d198aef8efebe444335cccb7cc09643d59e7
TLSH
T112318EF7C3E8857D890156F4A7186F1BCE6D0915532C3C1AC9D4AE1FA3E2471D54094F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 62c8bf8b4cadbcb66e8a7c3a40c81f722c0708d5c9b183592664ea0365169947
MD5 30828faf14dc47fff5698d06bd6bc773
SHA1 95e45ac9a68a869ebb982584faef1e236b8ced25
SHA512 ce296e29b21cb4f1faf3c25783f8c527c21293b118b3eb4db804b0e45e36d29690886c8b0256432f151023dfd73f0f39b1ed0515501d4b4498c44ed13e29d40b
SSDEEP 192:sxZgRZyM/jK1Ml82jW/fisrWpVIX/BEdp++HW6+WNvGwGM/YHYqqeuIgEJ:sxZg1jW/fisrWvIX/KVHb3R/vF3I
TLSH
T11D52D811AA38597BCCDBD209FA557F53D6F91533A2904E449AFC8A1C01E6AEC2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 1795da0786939b84c58956144630dbca9fc27039442475947fbededc7171b093
MD5 a3dac3836e7722d96ca0879b5fd4f187
SHA1 eb128701e82aa71be715b82ee577b99dc61baf4c
SHA512 5086256f31828a516a43eea48fe8e13a3c57c30c6416868d7e95afb0ea451d9b243c9885eef4570e147bfb7d8c57cab3c645b9b197e6566212e2ec8de7b31787
SSDEEP 768:e5QRMuUWv0sTg8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJTLlTBshBro/wxDa:e5QRMuUWv0sTgu1jamTLROh6/wxW
TLSH
T1CEE21C3B284CCB7E4F841E6CEC2AAF976DD801CB67984D5447FA884C03C77EA511A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d4d6aacfbdb786ff84804e8695a2be7ef081e4016f15ba3bfda5c06dbb3456ac
MD5 1522729a038312962fe86972482f8c40
SHA1 59551f10b33ba71fcb85859bf606859a026378fa
SHA512 f892812c9578865ebe353f36e39324b282e560fd5329fefca811ba4ec4e5ac9a3af088288e1eef990cac13fab318eb95e5f3222fc36e6d9fbb969e993e1dd3ed
SSDEEP 48:KEqIfKfaU9vIlKkswnyZ2IPK7C8aar2qQUgg08pzINygKq1yn:KEq4KfakvWKksC62IK7CclGKOe
TLSH
T107A10F5130BE169178FE3508A665A7374E4131B3311DEA6F3BA941B20A2BF115EFCACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5f2e97f73188e1d518718fa5d5231b3d25e15cb2d75ab029ace44f0e0d37d16d
MD5 efd5fb5c225af8fd1f3da71267ba113e
SHA1 afad0d755e0bffaae897f91e30072181db537325
SHA512 aa38c04568cfe6ac6a50538375dd176ed42339499f89e3d807eb6cee1ef8f3ef5715c7e3fd9c73171af10903edc28143585b8f0b8e8fb5b05d243d435b565970
SSDEEP 384:zpsNWknrqceXKSX54atYmX5wZXxlBc9fxlqKWI48PAOL4:twHQxKowRLmfxsKWI4kAOM
TLSH
T12382193D9C756C3F09AEB748A60E2A236D685237D6F89A58D7DC170DC2BB54CF306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e4bd56e90220a85a380ec0c1093f079e023caac35e3e479aa9b83cb7c5cd70fb
MD5 3c48c2673cef10ab58bb0113b84c8753
SHA1 8b8336c27db8ad77f7efed49d31617b6a2aa8adb
SHA512 82d21975fa21c21eb0dd89675f761482941ef24655068f37581a22488c3bdcd8bbcec2779374a5feb59725301ec2736f4fdee2a701bb501b6a8d1112d088acac
SSDEEP 192:CONg6G+bgQmiUyTyDE54aP1Y6jzompHi8OyC3VU6:CONg6HgZDE54atYmX5puU6
TLSH
T15102D935A8383C7B9EF3AE85B4472B135F99112BE6956B44D6E82B1C01DB24C130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11edce7a57bf10d883764b81c1e21941b54cf21c6e67e52cb16b638d7a09306d
MD5 255fb5c1cb89bbf783475614cb25c9b2
SHA1 36fcf60e9654071326cc52e71a5d375908160368
SHA512 dac88894b4a54990be909f4bbe9048cbd6da1f486dcafb88e5e000f1efd79f6471e56a42e0e7493fe6a86c0f2658ad6b85ca2d4850bd17efb6486bdf502649ef
SSDEEP 192:ZONn6G+b3QmiUyGyOE54aP1Y6jzompHwZXrF/8ShfqBbU6:ZONn6HZUOE54atYmX5wZXxdmU6
TLSH
T1CE120A36A8387C6B5EE2A585B48737136EA95227D7C4BF50D6EC2B1C02DF25C130E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

78f191a5-b509-4a70-a40f-45831b031d31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\78f191a5-b509-4a70-a40f-45831b031d31.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 461d0f8a11d3f94c5cfd934c8d1c6f4b79ace3936dc295dedfa0822bd065db8a
MD5 600439fbd632acb10abf5ead24ba5ed0
SHA1 fda0cde8ee3f0a59bd8fb867921169ed872b686c
SHA512 4d618aa85e3c413e270a8045746ae3b89933522f3f6b1afd088d04784bb741352b7078ddfaead5136d3c86f99550eb572945d2b69b35ca57b4b4827147d511c5
TLSH
T11541075CB6FA1158B3B76E469BF6A86E447FB9772E0AD05E10010E4F0662A40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

5807

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\doomed\5807
Size 22KB
SHA256 bf2ef03190b1664923e95725bf2501464b66c9ec1a236a382191b469b6724734
MD5 61ddcd7b534a1929542c7abbccee3aa7
SHA1 05a26d49d5e8250a070d4dfc8d619d1684fee064
SHA512 db79fdcc67fadff6ff1fe44d75a85cbd54f76d69304137a649dbfbe1461acd33e1e3cf95183f3565cb0e72c11412d353c7f4d068521338cca70ba360db6a1948
SSDEEP 384:c4IM6bjt9YomNnGdGgJjqg4tn7hfoUqFRysEHS1PdMLUHS1PdM1HKKaPOGnA0QG9:Jx4gHNnRgdqRJ7hw5F0sEHSALUHSA1He
TLSH
T1B3A2C07A76B07645C3C1D194968BC94A2E2D0AF6D7DAE0CD35143E0389C63DCF5BA0AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2D826BD682ED46E2B50DA3AD49E455C6EEC72FD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\2D826BD682ED46E2B50DA3AD49E455C6EEC72FD6
Size 1.2MB
SHA256 7dec67e506916e881d62036cc3674aca817c596439c2cddec3b3d05369c975a5
MD5 d2fdb1522c780e50f667765c73501adf
SHA1 081c79e9b6eb5e1b1674732a494bb76d97b536c2
SHA512 76046673fe1c43a9ed1c7cc96b2e399f570a4ebe8a695c0d72167c8c67bbf20d2bbf1b22149cb9c14bea96a991e093503c77e3ad68f1f902962e57f04d7fc2a6
SSDEEP 12288:qhbpahWey5srxW3is8jCewp1Y4b8VSuD4xiT7tKWCe4gtRaW6V10VwlJqL6Wc/K3:qjiWeUsrxyFh4PNIA
TLSH
T1BD45F91AFF926E13C522137140BB23363B35E48567A1F32B16CFB562BC5A36C1D616AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 6c588489f12ac5bb80aa018bf56cdcbef55e263606087930b96a616889e75e26
MD5 b9d21853dc71ae35aa9f1df478628c68
SHA1 c5c484697d6973e5aa7d9dc0d48e2d96eb5014e5
SHA512 cb70fc5e7ea8bffda544c80a555aaeb4c426a6d687748dfef6cf84cd4f7f15146ab219a8f0180c49b10aa110ae50535483487bf85b57daea11e87081855ddccd
SSDEEP 384:HwCe7iO024YQDL84KKDL849B7SOEAd9KVRaAcP+AWRMAYk3hWM:QqZYQDL8lKDL8CB7S/AmVAf+hRM3k3hl
TLSH
T1C8729E3D9F013CAC1997C0E8C1B892DA8C19B7A7DFE6806D21683D0DC798969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5AA051856BABCD0421B41435FA303F94D1D73D77

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\5AA051856BABCD0421B41435FA303F94D1D73D77
Size 115KB
SHA256 59d81ece07e6a4ecf5dd635c5b3406bbc4e1b6f2ceef2a756b2d6a7ee207c1f2
MD5 e4f03892b157467a63b10aa74a1fdd60
SHA1 8e92b2907ec0bd2b76165f63bcf6ffffb23dcb03
SHA512 09c038dd69021ff5ce245bf40e8f3669720df049b5b76b1ba07841e17152ad3d1c3b118e952b7153e1bb45e3eaafeecd5e9c4fb99b6340bf1a0facd2e7ee486d
SSDEEP 1536:dJOxjxg+A9MqqLgKaf3X87QK7l8YCOQDxV/p0QPmH4WGw2U:dAxNlA9MasdRKV/TOHmA
TLSH
T123B31826EE555A53C82003F180EB27363F31E0859792F32F7ACE7166BC5A7B50D919AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 116d5f0f19d902afd722fcf7f696b4d8a3397976396bd226bc321fe4ac72270b
MD5 e65134ce97a4017ec6023bdc0569e6dd
SHA1 23fdae4111fc9ade3dc4fb1b430b1fe686800518
SHA512 601189423e97f7aec7c30dad415fe6fa194b4e675fc8b48ee0224480ebd5571f7103d0daa39ec61bbae4aedcf54d3b81278466dc68fd8e9121816d49820516be
SSDEEP 384:HXkRyiO024YhLDL84KKDL849B7SOEAd9KVRaAcP+AWRMAjdf:3mZYhLDL8lKDL8CB7S/AmVAf+hRMidf
TLSH
T186728E3D4F003CAC25A3C0ECC5F592AA4D18B7A7DFE6806D21583D0DCA98969B5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B44BF6D670D32C9EA518479561095459CC6DDCD3

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\B44BF6D670D32C9EA518479561095459CC6DDCD3
Size 16KB
SHA256 9822b845e65ea3a58070acc33e875eabd5d3b144992eda8ec28067baeb9b52b9
MD5 3ba087f34fad2adcbc4c4eac37a0186b
SHA1 54716058f76213d31d5fb609cf7e1a293aeab510
SHA512 6e0884dd3f7b63343b9000400c8a315bdf268ebb8ed7873d36ecc07ec19f82cc32d4bad68433e43cdb7b7a0ad4eebfcaa3acdddf18703dee86455bb5734cb1f8
SSDEEP 384:BDN1NoglLTRyFYFwKeCjBvB3CIPFJrHSawPu7KAvKrWCt2Bjr8:BJ3V51ya3eCtvByIPLHSawPu7KAvKiwB
TLSH
T1C472AE3A2B53710C4611C585E78E7B863C3EA32787D7F0F850946E40A6846E5F9AA1FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D28F28C0A8D6229B05E592A329077DF63213F457

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\D28F28C0A8D6229B05E592A329077DF63213F457
Size 235KB
SHA256 68b58d8958cbdebd1d3ed0f12311e035cbbe26e61d697747b013800549063240
MD5 fa6496e1bd0a7c81650ec2f37e266d87
SHA1 28f2d19a407a55ea7627cb4355ccf2fea5bcc071
SHA512 ab028e0b88c252b221003cfe93123507255a43e00534080fb62786bb8696899e70b11d189ea5c4f9992b3a408be902abddf280fa115585cfda10de40193850c4
SSDEEP 3072:QjsGB5CcjVtjZ/dLpN9CJWYjTSeGk8v4uy1LizgfGeTrx4wZaod:Q1FZ/BYnjjIg1LizgfGeTrx4wZRd
TLSH
T143340726EE515B53C82007F040EB27363F34E48257A6F32F6ACE7126BD5A3791DA15AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D2A9A285F9AAFBF693FC23BBCACE7F1E81C00FAE

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\D2A9A285F9AAFBF693FC23BBCACE7F1E81C00FAE
Size 157KB
SHA256 f040ebccd22aefdfaa7b71dcc31cc8e2b0724f12bc01c055d4b99ee262176020
MD5 7c460cf751ced680ef478fde8abb9e20
SHA1 3116ccbb8b4a595907971968ac4397a6bd832d85
SHA512 0ed4481d232ff06c5def9d55b4cb1865e519177cb7957f3029e3cfd2644a5ea29df84c1493c623acca5daf88e377886efb1c7da3f3b6943ffb3c0898632d08a4
SSDEEP 3072:Fq6qHW4KiwAoPmmj62p+21UPvnSTwpDjWPmmj62xaQ1UPvnSTwpDj+9AoAu:Fqn25ijYl1UPuy211UPuy2Wu
TLSH
T1BFF349CF76D173349DD2B2F1005B1619A2BA54159CC82C6FBC06F7F60AB498784ABF29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F3F23E973B00A770C69C4767A08C5AF504116654

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\33iyexir.default-release\cache2\entries\F3F23E973B00A770C69C4767A08C5AF504116654
Size 14KB
SHA256 a0467c5007ace967a2208524d78832ca89963fd6d0865e99b9e4dd574e2ccfce
MD5 3835a77f1ff1a9e8f1b4f898de540659
SHA1 36ae4f508c4147ef27b697977a991c70942b98e0
SHA512 9896a95b90883c7f4cadafd939238f92b5c7efe581a4f0ae564182c1a6f60ef6d5da61c5d163973b3a05b05add04330c14f96074a22694f2f3c9200520c2adc3
SSDEEP 384:YAYtX0pzpvd8iBoAMcKT7X1wdvNd9KVRaAcP+AWRMACbBO:hYEpV8VAMDT7lwdvNmVAf+hRMpY
TLSH
T16262BF3C0D013C9C04166E65CDAEC7C90C1EB9DF7FD1889C9A293944CB46B85B6BA89D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0001.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp
Size 8.0MB
SHA256 803f930cdd94198bdd2e9a51aa962cc864748067373f11b2e9215404bd662cee
MD5 8e15b605349e149d4385675afff04ebf
SHA1 f346a886dd4cb0fbbd2dff1a43d9dfde7fce348b
SHA512 8bf957ef72465fe103dbf83411df9082433eead022f0beccab59c9e406bbd1e4edb701fd0bc91f195312943ad1890fee34b4e734578298bb60bb81ed6fa9a46d
SSDEEP 196608:V0O2jYJ3lwVjDq+mROCHWGZAXzbwEbW7Zksdphk:xlJ1NAG2DbCtksd0
TLSH
T1BD8633862E0EDD7DC9F86F5AC56AF9B7942042531CA73EEC226146162731EDBD230F09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0002.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp
Size 8.0MB
SHA256 e1c89d9348aea185b0b0e80263c9e0bf14aa462294a5d13009363140a88df3ff
MD5 596cb5d019dec2c57cda897287895614
SHA1 6b12ea8427fdbee9a510160ff77d5e9d6fa99dfa
SHA512 8f5fc432fd2fc75e2f84d4c7d21c23dd1f78475214c761418cf13b0e043ba1e0fc28df52afd9149332a2134fe5d54abc7e8676916100e10f374ef6cdecff7a20
SSDEEP 196608:jU6VHTUkm3iwFb+BB5ch1SamqIz/Z+nxnfOUvKDb:jUwHgkm3PFb+dcjSam/AxOSu
TLSH
T1068633F7E545E1C68AD5691A07C25BB531B2AAEE63700AD4A1F0BD03872789B077FCC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0003.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp
Size 8.0MB
SHA256 5eec15c6ed08995e4aaffa9beeeaf3d1d3a3d19f7f4890a63ddc5845930016cc
MD5 7c8328586cdff4481b7f3d14659150ae
SHA1 b55ffa83c7d4323a08ea5fabf5e1c93666fead5c
SHA512 aa4220217d3af263352f8b7d34bd8f27d3e2c219c673889bc759a019e3e77a313b0713fd7b88700d57913e2564d097e15ffc47e5cf8f4899ba0de75d215f661d
SSDEEP 196608:j+c9TBb1iOMVP6i/MBrvqFua+2f384Hr5cadt1oDbmEmAn:ycrmCVriFL8i2XHn
TLSH
T12E863333008FD4BE61A5B6ABF9AA6856914A3105075A7CDBC33A18EDD0E3D3C4CDC5E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0004.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0004.tmp
Size 8.0MB
SHA256 fee4d861c7302f378e7ce58f4e2ead1f2143168b7ca50205952e032c451d68f2
MD5 4f398982d0c53a7b4d12ae83d5955cce
SHA1 09dc6b6b6290a3352bd39f16f2df3b03fb8a85dc
SHA512 73d9f7c22cf2502654e9cd6cd5d749e85ea41ce49fd022378df1e9d07e36ae2dde81f0b9fc25210a9860032ecda64320ec0aaf431bcd6cefba286328efcfb913
SSDEEP 196608:+Bfk4zng863A0M5cgvWQDyZHg7Kg3uP9Sgh1Hip5c82qNV:+Bs4Lg8qRM2iWIyNiN34SghNip59H
TLSH
T1968633281E1A0F244EDBF31BA2CAC522CB9DDBC81D554556B663AA40CDF8B124F1D7CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0005.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp
Size 8.0MB
SHA256 026893ba15b76f01e12f3ef540686db8f52761dcaf0f91dcdc732c10e8f6da0e
MD5 94e0d650dcf3be9ab9ea5f8554bdcb9d
SHA1 21e38207f5dee33152e3a61e64b88d3c5066bf49
SHA512 039ccf6979831f692ea3b5e3c5df532f16c5cf395731864345c28938003139a167689a4e1acef1f444db1fe7fd3023680d877f132e17bf9d7b275cfc5f673ac3
SSDEEP 196608:1gqa1/Oczng863A0M5cgvWQDyGwW6/esxhK2AIvXBK:OBFLg8qRM2iWIyGtzs/Im8
TLSH
T14E8633A689195B40D4FDE27352D78505E29ECBC42973907EE2D73A02DABCF814E1F68C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0006.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp
Size 1.8MB
SHA256 7fb63fca12ef039ad446482e3ce38abe79bdf8fc6987763fe337e63a1e29b30b
MD5 b3b7f6b0fb38fc4aa08f0559e42305a2
SHA1 a66542f84ece3b2481c43cd4c08484dc32688eaf
SHA512 0f4156f90e34a4c26e1314fc0c43367ad61d64c8d286e25629d56823d7466f413956962e2075756a4334914d47d69e20bb9b5a5b50c46eca4ef8173c27824e6c
SSDEEP 49152:8QJpj9To8B6CJ0BSZ45XkK3qVj4jFGeANjf:39To8YC2cKIj4jFHq
TLSH
T1D7853301D36931278AA2C517671D520CB52AE3CCBEAFA3BEDF4CD9B3F5A09610707526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\16.tmp
Size 1KB
SHA256 f783ade814f65f9e750acbb0bd27312cbfc86d699edfa2c77773c67094c11fc8
MD5 38851b1e45d75c5a7489188440c23ba8
SHA1 ef57d1afdce578cbcf6c79e613c805e24a840285
SHA512 88dc0680c9dc7b01c61ee7687fdfe95fbfcda6fb24c53ec643b5e0bfb3d8af9cf5dae098b6fcd22d3a92ce7b12a3f32862ad521b42e407de5be056dfea62135f
TLSH
T1611142E9890E8A55341DA3EED4A7901B070EF169B1AEF0E4715BE165217343EF123905
MD5 SHA1 SHA512 TLSH

Submit Download

2.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\2.tmp
Size 1KB
SHA256 4690ea1b97998f45a2bd991085dfb08177dd074bec58a9e07b61e3ed721bedce
MD5 4b332a1b235922a7870595abef346cb6
SHA1 a0a9a95768942641c0622ddf2e29624c5fecb4bb
SHA512 714447bd0441587dd0c17d0af0478aea575a419a20cba07508e03785f17d7a6f46dda686f9e9462125639039b9ce526538387e8822e2705a473ae45e85f3452d
TLSH
T12931C410FC23B584F9A661FB39D08F6D7351336681897144E3B2C1CC5EC8AF259D60CA
MD5 SHA1 SHA512 TLSH

Submit Download

7.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\7.tmp
Size 6KB
SHA256 1efb1a8831f68b443a3e3a06599e914162dc1a9b1b8f9ebc8020b40b72bbfb80
MD5 420aee57b5e083d256d28e45ef887adb
SHA1 39f58e11b68f13932217b98672c4f33adc353be8
SHA512 76ae5dbb4aa3baf1df3e5684855ece03cd7693698b993a40da579c78c4cf9ba3dc4baaf699933d4bf56eca12ea2847b02f997d5d8ab8e5f267d5f4d6634a52cc
SSDEEP 48:+sMzjxoIkdb1DXLP6zZQmmH/ToZU7et6bT:+hjxi7PUUH/7etwT
TLSH
T15FE1E795675DE1CDC6721FB2A8757A1A3F1E0C2EE826C0A59F77350B0CB0B2B8152790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp_0.tmp

Path C:\Users\Admin\AppData\Local\Temp\$inst\temp_0.tmp
Size 8.0MB
SHA256 6d92aa1027f45feaa436dfe2c32ecc926cf26c7f673586467f595a6d7076ca67
MD5 409b922a28e0fefc32c3e4c2f5fc03c7
SHA1 ed19ea09a0844de834c36e561f9c3b0215a6314d
SHA512 d0178b45ea61d45725e0765845532f57e11c99a9e87da85e2d17add87ef501dd4719f19e8d40481496c46cfbcb92352dd66f3e63bc568995ab78aafcc6b6f9da
SSDEEP 196608:yc6aYOvIgDWl7AWGTMIY313XKUl/nKHLbuWTGWSuUnyrBDQ:yScu8LGAIqRQuWTGWS/yrdQ
TLSH
T1128633A1C76E31D2404858E925B3B09A01AB35FC82F628BDF39D57E953062DF5B707B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADVPACK.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL
Size 73KB
SHA256 7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004
MD5 81e5c8596a7e4e98117f5c5143293020
SHA1 45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081
SHA512 05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6
SSDEEP 1536:3TlRSuxQYyqUB9XzWqxGHVcIIX5ZDBZGscEvWlExtJl966CX6q0uE:FfUB9XamGHpw5ZDXXPOixtJz3CX6qQ
TLSH
T1F573F79267F54062E2F35BB469B9163943F9BC312D36D25EDB001A1E38B1AD7DA38703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTANM.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL
Size 40KB
SHA256 905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7
MD5 48c00a7493b28139cbf197ccc8d1f9ed
SHA1 a25243b06d4bb83f66b7cd738e79fccf9a02b33b
SHA512 c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830
SSDEEP 768:8yIMbiY3hC8mrfiPjEx2GWwe6ZZWkqOkM+:7QWjExz1uVOkM+
TLSH
T110032B13F7DD41A7E4B3A9398EA2676BDBF1ED250429490B6B6408893EB4C119F3C707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTCTL.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL
Size 160KB
SHA256 d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a
MD5 237e13b95ab37d0141cf0bc585b8db94
SHA1 102c6164c21de1f3e0b7d487dd5dc4c5249e0994
SHA512 9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb
SSDEEP 3072:ZkIjP7Esjt0wltvOAwGpkoeSgnNr5W/13OG6eyAJ9LEJ0rS6fqra/G8:ZkMH9vOmp6QyErS6fqrg
TLSH
T1ECF36D02BBEEE1B1CF8914396D2527AE6F5AB5540C1158034B389B7D2F73FE1983B126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTDP2.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL
Size 60KB
SHA256 c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de
MD5 a334bbf5f5a19b3bdb5b7f1703363981
SHA1 6cb50b15c0e7d9401364c0fafeef65774f5d1a2c
SHA512 1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46
SSDEEP 768:ORFZebZ2LnrjclwaWxMT6TrShny3RFgfdZBXbDjvb4go8RX:gykrAmxMOXShne2fFPZogX
TLSH
T152537C42BBF7E0B4C3C11230A9620B6AFEBEED2549715C42A7E4195B3F31D42953A763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTDPV.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL
Size 64KB
SHA256 394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed
MD5 7c5aefb11e797129c9e90f279fbdf71b
SHA1 cb9d9cbfbebb5aed6810a4e424a295c27520576e
SHA512 df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a
SSDEEP 768:qgZW9S++qbJyUehRzfpvzsZttvN8B9ZyOkBePJnqvWpYhY6LbBXbJkwTBqr+X:VOSNqbJyNRzfO3ykEqmtUbksBqe
TLSH
T113535B237FA7817AE2D561318926CBEBFBF9EA11E4299443877008991B31F44A77D213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTMPX.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL
Size 60KB
SHA256 6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5
MD5 4fbbaac42cf2ecb83543f262973d07c0
SHA1 ab1b302d7cce10443dfc14a2eba528a0431e1718
SHA512 4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e
SSDEEP 1536:zPnTgec5MGWnBiRMFSDJN1+WPflnDPA6Vb19UiTo6:jnkCR0w2O6Vb1ro6
TLSH
T1F2534B2373D2D272E2F241B58E65671EB79CFE1188B0C7468B14198A7B76E41CF36227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTPSH.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL
Size 36KB
SHA256 8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f
MD5 b4ac608ebf5a8fdefa2d635e83b7c0e8
SHA1 d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9
SHA512 2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4
SSDEEP 384:XQtgoKUX4QGdcOOmuHZfCAC7+TMkXwDUuSHuDU2XwxLD54WFbvWpSy:XrgGFOmuHZfCfawg7HuDUuwh5
TLSH
T112F25C2237C319A6E1F1123898351720B6FEED2589B9E687475101AEAD30DC5DDFB327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTSR.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL
Size 60KB
SHA256 e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d
MD5 9fafb9d0591f2be4c2a846f63d82d301
SHA1 1df97aa4f3722b6695eac457e207a76a6b7457be
SHA512 ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a
SSDEEP 768:8Z5p1A/W6Xj3jz/yzDd5/VsnZxOn3U7fbtjHBf+0UlRV1fXXlgZEYnospk2MqD:8M/nXjzz/yXNcOkTN/UzV9X1gCOowT
TLSH
T1E6535B7273D1917AE7D20674CB925B35F7FADB11912688828BA40D5E3B32E418B3E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGENTSVR.EXE

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE
Size 268KB
SHA256 e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175
MD5 5c91bf20fe3594b81052d131db798575
SHA1 eab3a7a678528b5b2c60d65b61e475f1b2f45baa
SHA512 face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6
SSDEEP 6144:JGoqPGtL+sGpYq1Cn5bPypDhmaVnJPoE6iN:J/sGV4Yq1w5bPQhmKnJjj
TLSH
T13C445C2377C18476D2A611308D8B2767BBF6DE1019359D435BD47B1E2EF2BC26B3A224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGT0409.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL
Size 28KB
SHA256 6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1
MD5 0cbf0f4c9e54d12d34cd1a772ba799e1
SHA1 40e55eb54394d17d2d11ca0089b84e97c19634a7
SHA512 bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5
SSDEEP 384:zKLWayVWzvtm1N89n/ahnb9feoJsoYoJgrHoM:ho16N89n/ahnb9fTJJFu0M
TLSH
T1C2D2A85063F9861AF9FB3F7469B806605E3ABCA6ED79CA1C1240515E5A71F80CDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGT0409.HLP

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP
Size 8KB
SHA256 e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801
MD5 466d35e6a22924dd846a043bc7dd94b8
SHA1 35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10
SHA512 23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247
SSDEEP 96:lLD5gpakOhsBlFY5fGHxFHPvUtFXed2Gv/hWuIJzK:lLFhmg5AHPvUtFXbU8A
TLSH
T11A0284297D55CA6FE1A80631CC96FAFC3524BE489E04C303B049773D38B3208AB8607E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGT20.INF

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF
Size 2KB
SHA256 49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d
MD5 e4a499b9e1fe33991dbcfb4e926c8821
SHA1 951d4750b05ea6a63951a7667566467d01cb2d42
SHA512 a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a
TLSH
T16D41574A4803DF3937656F64B746DBEF6D5837E808312D63741B74A9D12D40543A84AF
MD5 SHA1 SHA512 TLSH

Submit Download

AGTCTL15.TLB

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB
Size 28KB
SHA256 3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2
MD5 f1656b80eaae5e5201dcbfbcd3523691
SHA1 6f93d71c210eb59416e31f12e4cc6a0da48de85b
SHA512 e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003
SSDEEP 384:fWPa0WPeUDTtdstZXmTSIgmiNSJR/bkuX+7kmU:98Y+ZWTSIgmiNC/b
TLSH
T18FD2EA52BB81CAB3C41D02355C1F47A65F60AD982F43B62B378CB76D6EB33C47A40A64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AGTINST.INF

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF
Size 7KB
SHA256 bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00
MD5 b127d9187c6dbb1b948053c7c9a6811f
SHA1 b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9
SHA512 88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476
SSDEEP 192:/kqbxJ5xRJqo4yOv/89dCqg2h/o84F7QroCEC7HB5o:TxA5etmlC7HBe
TLSH
T1E8F151A880268E26BDE43F5129074DCA7B285B9628169F4534DFB150473F6C8C39A1FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSLWVTTS.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL
Size 52KB
SHA256 ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0
MD5 316999655fef30c52c3854751c663996
SHA1 a7862202c3b075bdeb91c5e04fe5ff71907dae59
SHA512 5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44
SSDEEP 768:WIdDR7WGEjHZLTa97JHin0xrkQdya/vhaxRfI60AjO6WLnLD:WI77WjHVaN4Erkoya/vsfI6PjO6WT
TLSH
T1B4337C2336E359B6F0F221B08EE28B68FBF6AE6145744583478048D62D30D999E75B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Msvcirt.dll

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll
Size 76KB
SHA256 647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255
MD5 e7cd26405293ee866fefdd715fc8b5e5
SHA1 6326412d0ea86add8355c76f09dfc5e7942f9c11
SHA512 1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999
SSDEEP 1536:4Nx5jQM0/rmlYjYYwnlF6QXHhAk/tFeH3hNfcub:k5Y/rc/zXBAk/t0H3hNfcub
TLSH
T160730923A9C75138E285D7350D1257273EFFB1BA8706AF4392E9E439061972B4C336A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Msvcp50.dll

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll
Size 552KB
SHA256 91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a
MD5 497fd4a8f5c4fcdaaac1f761a92a366a
SHA1 81617006e93f8a171b2c47581c1d67fac463dc93
SHA512 73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25
SSDEEP 12288:7l3kpKgpWFynTJ2VKBrCT8KJyyj61Jz7q3OocHkCq9:uKgpWFynTN9CIK01d7q3OocHkCq9
TLSH
T1D6C44B12734B41F2D64463F0668A53399B34ECA90711F7E3E2DBED562F272D4A233A61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

W95INF16.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL
Size 2KB
SHA256 337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af
MD5 7210d5407a2d2f52e851604666403024
SHA1 242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9
SHA512 1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68
TLSH
T12041A3630638E8C6C01C03328A57CBC631B4D310538F4F0B0A69A57B3A92BCD877912A
MD5 SHA1 SHA512 TLSH

Submit Download

W95INF32.DLL

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL
Size 4KB
SHA256 e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5
MD5 4be7661c89897eaa9b28dae290c3922f
SHA1 4c9d25195093fea7c139167f0c5a40e13f3000f2
SHA512 2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f
SSDEEP 48:6Z3Mi+h0U47yaE6akf1WbvgFfSBZW3IezfXNFk5WgF:VEyaVaVv+aPWJXNyWg
TLSH
T1D591F10363F42677E1E70B3005571B2AF17EF970D7759ACB0D9400262C3A9C16E71BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

andmoipa.ttf

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf
Size 29KB
SHA256 38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e
MD5 c3e8aeabd1b692a9a6c5246f8dcaa7c9
SHA1 4567ea5044a3cef9cb803210a70866d83535ed31
SHA512 f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e
SSDEEP 768:xr+oVrM3Xz9CFnht6/zce4lA7DB8kmhI7oGH4w4EjKflHjbjC:xr+oVrMnz9CFht6/zce42RzmhI7oGYw9
TLSH
T178D24B4BF2A6CE4FF2D1E534DD246A3203F1F9BDCB3B457EBE881194E4924285814B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tv_enua.dll

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll
Size 1.2MB
SHA256 e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d
MD5 ed98e67fa8cc190aad0757cd620e6b77
SHA1 0317b10cdb8ac080ba2919e2c04058f1b6f2f94d
SHA512 ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0
SSDEEP 24576:vPwLKE+aAeUqG7AFbbynL1AgIy6cOi3gy3YuvtTNl:gLKCW0yL1AvuZZvt
TLSH
T1BA45BF2360CA185CD918127855673B728D3CF9929B5EF8D5FF08ACE2587F2237662783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tv_enua.hlp

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp
Size 11KB
SHA256 382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42
MD5 80d09149ca264c93e7d810aac6411d1d
SHA1 96e8ddc1d257097991f9cc9aaf38c77add3d6118
SHA512 8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9
SSDEEP 192:j2yDmtRZ4W9iBq7zlILADoq+1g7rZZBc:jVKtRmkIsDoq+y
TLSH
T17542528637950B33C2570233928EEFE873619D9D2D9353A23488B71C2DB6F2957661EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tv_enua.inf

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf
Size 2KB
SHA256 85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae
MD5 0a250bb34cfa851e3dd1804251c93f25
SHA1 c10e47a593c37dbb7226f65ad490ff65d9c73a34
SHA512 8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795
TLSH
T1C25176A58D1255A6BA7D3701D80A05CB3F9865F632204924B897B1C458E37CFB2FE0FB
MD5 SHA1 SHA512 TLSH

Submit Download

tvenuax.dll

Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll
Size 40KB
SHA256 c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0
MD5 1587bf2e99abeeae856f33bf98d3512e
SHA1 aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9
SHA512 43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a
SSDEEP 384:OWygeD+eKczRKfZsjdeGcOzOf33iX9aeF+xpzy1B9ta7kxAG9BoWWgiJ9VQ:OWo7RKfZsjdeGjFXf+HyVhaGEgiK
TLSH
T16E033B1237D680F6E3DF12309F505B6DE7FBFF2456E4800A0F6205C63A72646DA3A24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8f95969-cdf1-48d5-8e63-6b1c6f69eb56.zip

Path C:\Users\Admin\AppData\Local\Temp\d8f95969-cdf1-48d5-8e63-6b1c6f69eb56.zip
Size 3.8MB
SHA256 0c21f80ad1b3796c49429949e6a3d52cbe9c3b5b4c317690a749d80076396d0c
MD5 2d6fbb131e74f2bdbcc6e31d29b4a611
SHA1 8d7f58b2786c678f2502e83642b70183d80f64b3
SHA512 b3e43f1fa9c6dcd683c39cb32662e00753979618425cde33119510b8dd1e39b2e9ec29fcfe56fc9a8d4615e71d4412688d2f8cf1e2ee2b460a4c82d756d5e874
SSDEEP 49152:VdfjDwQTlRDkFv8OkaeyRNcFXJpaufQGndS+m+Zg/eBmMadCQ9zrqy0RHQmkAHY6:Dfje8DTM0JpzsQZg/umMk9J4NHYUlo0
TLSH
T12006E075D65C3609C98F83BEB50C2FC3984C4FBE8C54A96F6A6A97715CA31E63BC4840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\AlternateServices.bin
Size 11KB
SHA256 9eaf735619aecbbe66ed879a3779db5f95d219fde169c7deef225510fff132ca
MD5 58aaedab4a42e7fab9cefac85f7025fb
SHA1 dfe5dcfbf4831a13c61619236bb40d3e3a7fd690
SHA512 e1898afb5a0d7bbcf4a686db0e85a8034d013fbf3581fec1fd2f941c8e85fe24b5c531f399a58d16a3ed7c72a271eea31b6a8a2a4d8809e4dcbf0f0d5a0e01c8
SSDEEP 96:0++oaRpXbGe8tWsEfbEbEhheNkVJ00zr:dxt2YgTYk
TLSH
T1A232B6F713B26122F1A15FB8409F319ACE3703161E6096CADF0495E642E1394E12FBBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\AlternateServices.bin
Size 16KB
SHA256 f3f629cb4e75ea3f4c36ec3c0b8af5a6b2ee1600909e1ab4311586231494f47d
MD5 b6e55853e5a60888d2dd95b75d88a053
SHA1 1628d0363dd01fc1888cff0ce55f8acd2e0533f3
SHA512 8589a3ec0353af1fbdc2514e10c80fd5015cf3c57b55af089a25e47c66aa4f7ccbb24e8aea7f9cf040ff77fbfd656dd5c42d8602e53a808fd2d8e2e476383955
SSDEEP 96:PQOQf3yO7De8tPtEfbEbEgQeNkQI00zmHjoex2CseuZCMs4:SDxtqYgjYk5S2PFZ
TLSH
T1B672EBFB12F26062F1A14F74405E3199CD3702294E5896CBDF05A9EA42D5790E07FBBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 101KB
SHA256 05b0f37a0423676b1d2984696c22bec3af6a84f94bf09f50d79f1d7fab1edaeb
MD5 1ae1952a56d559cdc94b4034c5b181ec
SHA1 fd7eacb8065d0855964b567b7f71600141d2575c
SHA512 65dbdeed2de8645501ed1428a957e8eb29c8aea03c02a778220f6a8e159c0e4d2a796f762f5e1a27fc9bbc788d7c879c5627e6ee5b3c13a6339305d4982ccaf4
SSDEEP 1536:ofdL1j6E1gFJjOQG7HZj+Bl9CVZReZazCIvX9qtnwD29MjTXzf7Wbn2oY:mdBuEgxWHUX9kfeZ6xkaDJHXnWbn2oY
TLSH
T1A8A3E080DB1A403BEC2445BFB4D51B283735F4654A59AB1B3AAC04752DCB3FF2D0E66A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 a2c6a75188609e5b0e2f8f1aadd0aa6e44ec6513e61d47e6bbea1212541e65ac
MD5 aea8a6ad06e9a5f6e0b805572652e63d
SHA1 06f63633f13adb5348a49e27d1521cc8387d763f
SHA512 71dbd4fa63ec2056ee8c1342563905b017df67c7ca1f89bbbc076acab684d12690a446d6eb52ce09fb4da8bf6059eff249d856348a261ae778709266ade22535
SSDEEP 192:S1d66Joz1zgCl6mc0dKOv5zboBZrOhyjyI:cd66Joz1zgC1jfboBZrYyjF
TLSH
T1ECD1CA68F728863BC449027BCCB60B401E76788BA88E3F25319C650C2C572DE7B8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 101KB
SHA256 10eab743ddcca96ad6b9b504b64af3078b27b64bfaf55e78c3894ccafe21076e
MD5 f4df2a96303b5da9f8104a443d041a3f
SHA1 8b9bed64474fac038214ff419557d5585356e694
SHA512 cfe03193188473b848cba8074b8262b130d03f8a365bac9374a92d048e153c58463b7f939c359de432d79afa286cf05c7bbdb03833eeb51c6c9d34fb6ee50ce4
SSDEEP 1536:SfdL1j6E1gFJjOQG7HZj+Bl9CVZReZazCIvX9qtnwD29MjTXzf7Wbn2oy:MdBuEgxWHUX9kfeZ6xkaDJHXnWbn2oy
TLSH
T170A3E080DB1A403BEC2445BFB4D51B283735F4654A59AB1B3AAC04752DCB3FF2D0E66A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 6e37616d7330803bdc6fcec9d604e5fb5817a7fe9d648bb97af48609d7fea76a
MD5 38ff84cec3c8ad749af7ea32b9a98e92
SHA1 a385745792a3163d64ab4349deb1c2d3950a820a
SHA512 f61fc55c01f45ef77cad7a1629f42919f4918c2cdb915c5f79c2d562b2c67edb8d7896d817a6eec70e9d9a49d9d9e8085e30ce59eeeaae692b4b52c45f5a287f
SSDEEP 96:aF02Fk1Fk0kuFkE/dd66Joz1zgClKtmc0d/U7SdF95/7bkW6BrvErOhyUR6bWZ:l1d66Joz1zgCl6mc0dOOv5zboBMrOhye
TLSH
T1DEC1AA68F728463BC449027BCCB60B401E76798BA88E7F29319C650C2C572DE778D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\events\events
Size 1KB
SHA256 b886a9046d09354994a922bfb0c6bc64481ef282ecae63491f07fefddd5b396c
MD5 26b4a9edc94e82dc1e15a2a3e517814d
SHA1 33ebc8754bf31842a962709800f44603aa6276b0
SHA512 a6419fe58a2c27b271dcb9d538ade229f0418469c76d228c4162372c6f9990e90d85fc65c0e1383e30dfdf4ebbe86cea743585507e33d35adec8bdb678f344df
TLSH
T12F21454C39FA4D2AAC86E29C7440128E57558E1A16871D834E02EFCDCEE5ADA327A438
MD5 SHA1 SHA512 TLSH

Submit Download

364aaf1b-0173-4055-83f6-f43fb36b31b6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\364aaf1b-0173-4055-83f6-f43fb36b31b6
Size 2KB
SHA256 9c0bebb538aa481afbf2a91fb81c80536ffe7c1fa310f6965e3993e51375d7ee
MD5 a214cc6ca7ba99414700f1fb086ff1b3
SHA1 8293b7ad925923bfe93c120efe258122ca8c4f43
SHA512 9632590c870d22a6742d430aac974fb62617d903841f0f693179f816d99e684e27e5e900b5e641a2ec5e6cc5751b5558fb9c533274f448178695d22875c82e55
TLSH
T1C141435C35B85DB65CDAF19DD481238E57A08B0310C66C432E62EF0C8ED6ADD337A12B
MD5 SHA1 SHA512 TLSH

Submit Download

3a9a0e56-e1aa-46dc-9cbf-5df3ddc443a9

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\3a9a0e56-e1aa-46dc-9cbf-5df3ddc443a9
Size 16KB
SHA256 e2bb8415f405ee36e5970c3749ef4df048e1b65643bf7ed6ee597edfcb6418ac
MD5 3eb91cd6ffeee3fcad722322ed794718
SHA1 beb00120fa6d9020393b8bdee0c3daeefb24386b
SHA512 27f0476d774eb734e0085d94e95b932ca6d363019902c38d9c1b09f706bd562f7f60ae8d9d17ce9f7332056a17726fe35a1437e31c1def787a9f6f69f4b9c831
SSDEEP 192:/X19Bf+hP1u+padCTXITiqWmFLmdACdSMuxIAfJWTpn+HrC9RBYHV90bQw8XNSD7:jF+xUX8pfEHrC9018pwQDWmFUGwM0i7R
TLSH
T1F972DA566820457A8391E3A9D4FC7FC3E6F528CF4C419FCA9BE4BD0869DE0AD112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ed4d29d-681f-41b8-8a2e-3c78572ee4fd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\6ed4d29d-681f-41b8-8a2e-3c78572ee4fd
Size 883B
SHA256 c941c7505d18f1c83715a435826e0c06595af939f880b307927a5755614d3593
MD5 69b23e5eca80fdd4ed7618a38f03d2d0
SHA1 4589d8da8e17d2967e0dd526cabe3c4c66752ce8
SHA512 8c31f02bb2abf85505a7dd6ee97d0fd6acb1e1315bff5e1733a0fa785579240cb10fe87844ce8fce7b09aeb611519943b694402a8af9286bc415883ce810d99d
TLSH
T1DA11E780663475B2CCB8928B855937029FE87513C0C554143DB56F144D7E55EA3A630F
MD5 SHA1 SHA512 TLSH

Submit Download

735a66a1-02ef-4cd3-b211-d6aa07477d1b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\735a66a1-02ef-4cd3-b211-d6aa07477d1b
Size 886B
SHA256 d6f596827f1194b3e2d38a87cf081233556bb4f73a60d299e80a823ff6e7e4f7
MD5 25ba8cefc9a4d3c0ab34300d5452b781
SHA1 60bfdb67160a337538d9aeed3df1b9fb3a64cb4e
SHA512 4734a3c33bebd5ff56d35a30e816841cf664efa5962717f875243002e21177408ea276c6b386f4fdbdb2d522b5ec3a3285fa567806e9c5d633fe2cad83998ae4
TLSH
T15D112780573479B2CCB8D1CB94A577029EE4B05390C64C147D515F080CAB65EE39A307
MD5 SHA1 SHA512 TLSH

Submit Download

73e146e7-df5a-442b-afd7-bac566df22be

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\73e146e7-df5a-442b-afd7-bac566df22be
Size 235B
SHA256 a5d5e6812ebb735d3ab7e19307ae391601c6795ded66fb35fb6af31dfac0d29b
MD5 0e19dd14ac032b5110ebc49b96ae3f16
SHA1 064da69fe8345996347d6fa6185460dcf85531cd
SHA512 539b06d869f47231c5b956bba3ecaf812cbad94977a0dcce80e63552fe5d273965e0fe54963e0265dbe0fb7b7039157c7a4393b17a991ac92886d8bd87bcbd02
TLSH
T19AD0978015A8372C08100F06B4E269D670848C3318746850AA6200749AB99C40122826
MD5 SHA1 SHA512 TLSH

Submit Download

9e5a5246-1bda-4948-b4d3-4dac2337fbcc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\9e5a5246-1bda-4948-b4d3-4dac2337fbcc
Size 235B
SHA256 40a34cf9cdf3bbc559e92f858d3b25a448268539d18854cda787bcd381b64548
MD5 fa0487fdf643f6df12dd1ca5f48587fa
SHA1 83f05eda41ddc5c735c7e012ce9c189fddfc84ec
SHA512 bec67cd29db16bc06595632596cf1922d4a6a61369133de57c4eb815a913552a1ef2b34dec9540c71a53a45bd2276cf21d05477aab0529b90a08fdc39cc500ea
TLSH
T1F0D0A79428ACA76E18154F16F0A06FDA30948C3314646814D9A245749AFADC95291917
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\extensions.json
Size 16KB
SHA256 9ecb72f15cb87b72388821033ee9ec845a7675264fd6d3c9064fe03f5643ed91
MD5 897fca4f4e308c4001f8e769b175da99
SHA1 2461cc87b7599622724e4d51fe7c37274eb151c3
SHA512 41ee33601d7d5bc056f79266cc2009e4e39fce68af232cb402b430edd073df5502e483f8af0a22448d67a0193ff4a783e60892aeac7608b14f0b946ce07c6601
SSDEEP 384:VkI4vIUmldvT8dhWh94zX96ouL4HeL4PEL4HvL4HcL4HCo4h7:GI4gRfwXk4x634E424T4W4z49
TLSH
T1F872411545049EB8298FA78BAA367E01C37D473B60845C78F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs-1.js
Size 12KB
SHA256 fec528473db89e406af6e4b60f347124e372dfee22714b03e6bc8e6d69639ad6
MD5 60b5fe1490cfd71340416323cfdd3c84
SHA1 4fe5bdbd4c37cbc472130e2c6b5b3fd1d19f0a3f
SHA512 67b33e4191d5a51d75832718d920b8ebf1d7fb1136b16cf12b744762e9be66e4b3aaf83d8a136a854b65db3e992b6987aef880ef3a8bb6c9adac28ea665b4bd5
SSDEEP 192:tOCRffx6cWk1CSSnXLRHTx8dOBw88q90Fu34:ribRzpwG9o
TLSH
T11642883C51518F3F24B7327DAC29496019A14237B7BFBCD306B998C5449CF2541EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs-1.js
Size 6KB
SHA256 cf492acdd3a991796577fc0aade5bac0dfbb7ee234f618b64c9d7ed53f78a7d5
MD5 9a6d7a79ff32f7a4c6dc0f12c7dbeaf3
SHA1 7694a98025e9470a1b1b710979a08939a141ae6e
SHA512 340571f8f418db438514d59bbdc34e912f9a136641d3abb173db5a3fd215d1f683f0acb6fd20bff8b6ea185936a389195accfa990437e9f46074e3bc6e099b83
SSDEEP 96:xHThUTUQqGqyf1BWk1zSTCSSlNdv9j1nZRHboedaBw88P8L4cnVWE:zrRyf/WkcCSSn9bT4Bw88m
TLSH
T1B0E120789408CB7F74B676ACAC6489316AB2413B77BF28D750B954C8054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs-1.js
Size 7KB
SHA256 f1e773d7d91ea90ca2d6ebb8aff3cb2bb5fc0ce845677c234b44d4969420bec9
MD5 42214bb6df91a00be95ed9f507e123eb
SHA1 bf9b6192b0d65e73fbcc0e1214f88ea4ddd13242
SHA512 69f33ba64252a1915e1ed53c6240014862280df1840a25428b6b1a7fc1a8401f9aa6bcb265e9f74c38630ee427cb5d7fe9e8811077e5bf90a2e026ffda9605d6
SSDEEP 96:xHTh1TUQqGqyfx6cWkObzSTCSSlNdv9j1nZRWRPPoedsBw88R8L4cnV6E:zGRyfx6cWk1CSSn8RHTuBw88Q
TLSH
T1E6F1EB789404CF7F74B636ACAC2889305AB2023BB6BF68D751BA54C8054CF3445F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 6KB
SHA256 58b623d46f740a3c304a9b563babcbffa5ba5dbeb80217db67a0594cb6509e71
MD5 d82ed25afd8266072b8213e725235a2e
SHA1 8df052e66e87e223105494eac191035f5504c204
SHA512 ab977aa4a89a6d5134f623d6ac08db5c63ed36fd15496cf440725ea844eec8b3dc1e9da0fb5b6ffdeabe5dba3fffc53a35319e7c6532340723a6d5226c4e4398
SSDEEP 96:xHThUTUQqGqyf1B3J1zSLJSSlNdv9jhnZRHboedaBw88P8L4cnVWE:zrRyf/3JSJSSD9bT4Bw88m
TLSH
T194E130789408CB7F74B677ACAC6489315AB2413B77BF28D750BA5484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 12KB
SHA256 65f75d87815db8681ea21520701b64e92f39902d8a0782f8a92ca95954f2369e
MD5 56ac3c4fe4070d3331fb364073b26eab
SHA1 ace4e0e67c1dbfdeb8701a31aad9114b0bf2da1b
SHA512 9b9d0f611629271ae4b91aeaccc2466215b628936885d29881aa92f51087248a55c072ae247fd443c463629e5acda6aa610fcc73ee742ab90f4478ee103a72d1
SSDEEP 192:zOCRffx6cWk1CSSnXLRHTyOBw88OR4Fu3q:hibRzFwGpa
TLSH
T13942793C51518F3F64B7327DAC29896019A14237B7BFBCD306B998C5449CF2441EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 6KB
SHA256 83f6e3816092c2f891078a3be4801e546e6725f9e3c9148802685fb49225174f
MD5 c1d25e34a2afd3d12de7a718a3d6c689
SHA1 a37394ebed299fa29eb425a2f8efb23756738962
SHA512 b67e9dd7a9fc1cc3c17aefa5f035af859c2b3048704c11d07ca7a0869cd059890f6cb4e34d5590bece1490b76d7d115a457e0428f6ac5a6f5eb8a8988bd5307a
SSDEEP 96:xHThUTUQqGqyf1BWkObzSTCSSlNdv9j1nZRHboedaBw88P8L4cnVWE:zrRyf/Wk1CSSn9bT4Bw88m
TLSH
T1C0E130789508CB7F74B676ACAC6489316AB2413B77BF28C750B954C8054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 9KB
SHA256 29b30f1abd0aab7f9fffffdf51fd1b7fb92854779dd7cdacf19657e9ba1bc616
MD5 077abbfa73d99e99f722bc4ce0222374
SHA1 b261b90dec0ab47204b20bf1f69d34efcd3b7c10
SHA512 996bee8bc34bcf53587e6ec23cfa1638ac4f9f045b5110b023d0e6fc9db7c46f7b6cc799bdcd2e71fe6e8f6bfd6f2fae69d8523f9d7ffd7a7f821976cf74196e
SSDEEP 96:xHTh1TUbPqGqyfx6cWkObzSTCSSlNdv9j1nZRWRPPoedkIsOBw88qXEqcd8L4cnt:zOCRyfx6cWk1CSSn8RHTyOBw88tqcc
TLSH
T1C012DA3C5005CF7F74B6367CAC2889715AA2023BB6BF68D715B958C90548F3441FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 df353e7f7bedd2b0b199242100943619917c53a842ce64fa8d3a76952107f6a3
MD5 be5b3257740848e2ee500f56e45c7a5a
SHA1 7c045f103d26fa60a0a253d8d99646475bf91c45
SHA512 8254c7f2d30a15dfbdbbf1675bff060bccbb5dabf2fffa503c63e824889d445ec10cb0d9710713dc3f147313bd0be931d5598368de2fc2da3a055d2593c52eaf
TLSH
T19C31F9DB945A1AF16AB4F27AE448476ED0CE302084ED65E1D3BAAA46114E2C592CD21B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 890a911006ba2536a3a3102f294bcb290e06a526e6512ff76d8d16f98343474c
MD5 6ea38b83c1ef7fb32598b25b0744a9f1
SHA1 89f98e002afccccaf4e3b99a699efffeec26f4c1
SHA512 214fdf9f451fed58404c0c4b54be36eab07661d08a6fb3a6e7783cc39b4ef7c5934a976775cf1c5fcee4c1bfab0a99ff9a73ebabccc182a8135699a9a2086c44
TLSH
T1BC3119CB945A1AF16EB0F27AE048476ED0CE302084E919E1D3AAAA45104E2C592CD21B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\sessionstore-backups\recovery.jsonlz4
Size 2KB
SHA256 0acad15014052c9a0cd0fac6be00e66ee6957e96b05dc34d4e707ccd5917617f
MD5 16423b853fa5abee95768901ae164889
SHA1 f882072ea46c5a81c703d25f256ee7065c7e5159
SHA512 9d870c0a87a5abab7b5ebe9aaf8760044aa7c97514392b27c1e3c0199f41a9d644e168a62cee0af499c430eabf1c1c4ce50fef3053127bd4d5bef9f15060bb4c
TLSH
T11A514DC41D3CCDB5761405A582850BF6D243305AD38A5270C9B8DED3579D35E91CC315
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 11.0MB
SHA256 e9bdbdac5f26e91abf39fce545929386cac4458f82e87018bf4aa576e7c52c7a
MD5 09e74c429271d3f3f39e515d73e261cc
SHA1 26f8a2c7b32640a9e614d9a5b8ee358910c08af9
SHA512 518a846e3431f6becee0d0743d1563820eadec869595f67c74e20c137f00073a28259a82321a1ace3994f99c94171ce8e102dc17863e8ed37dcf5cb99bd99f32
SSDEEP 49152:8LALyBaeUmmnJS6HAueO6QC5zYYCooP3ab7qY5rmOr7K0PuJnh8lQV7byCOSf1LD:DI0hYQV7byCOWoenIVwwp
TLSH
T11DC66C9560E0D691E70149F7F35F43DB31BFC08C20A5C98017B8AAB858665DBEE6F368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 ba7dccf1f5a4116ac9e0a8880848059369f8ae8cc3ee45a820ba7ddf84aee8a1
MD5 2421fc66c1419591f1ac5393db771f88
SHA1 b33a93a5a60b0cc1b8a0c105b9c2c4ba7dcdfed9
SHA512 02ebf1c9b71cbf15c30168420a57dde70a17811c773f247b7efe6dad96fa58bd875088068545e070bee5618048c2ae83e1fcb1d3f6f6b4f463ae4dd1665764e8
SSDEEP 49152:dVDPE4URVScAJfDnjewNzT+ghHReb9QYbP+vai:/Ds4UjScAJfDbNzT+ghH++vz
TLSH
T1462639E860D1A257F3814073B64553EB21FFD00C6037DE084BA956E9A4B8CDF9E16B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bon4.rEQYXr_C.zip.part

Path C:\Users\Admin\Downloads\bon4.rEQYXr_C.zip.part
Size 49.8MB
SHA256 049d4326a7eed6461e8d17151b69509c806e495aedb3e72d9093651087c2315d
MD5 3ab34ec8ca3c5dcbf7b2641957ca1e01
SHA1 af64bfe777ec16feae43da72820907d273c21dce
SHA512 43833599a6f712f3c6a394e336f741bdcb53894a9a354d523ac5fe37f9791b995d52d468906c300ba26aedf4ec9f7e73b4803f6ff68a99b1a1c1d800ea14fd0a
SSDEEP 1572864:2f3tqlRW36fvWTAjiR2H7KQvkzAOh+Lf9lhrHIg:2PQsq2T2iM2pzDkXdt
TLSH
T140B733724E0FD1AA85F8F32B52C68419519553C90BB71CFEE3B229868375F974B2C788
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bonzi.acs

Path C:\Windows\msagent\chars\Bonzi.acs
Size 5.0MB
SHA256 f3d4425238b5f68b4d41ed5be271d2f4118a245baf808a62dc1a9e6e619b2f95
MD5 1fd2907e2c74c9a908e2af5f948006b5
SHA1 a390e9133bfd0d55ffda07d4714af538b6d50d3d
SHA512 8eede3e5e52209b8703706a3e3e63230ba01975348dcdc94ef87f91d7c833a505b177139683ca7a22d8082e72e961e823bc3ad1a84ab9c371f5111f530807171
SSDEEP 98304:KdAMaWetTel1Q9ypfl1ydxUa751yGEFbnHEpAbY+/ERW3lc6u7/jtzVJdcbJ:KdAMaWetTeAkLIdx751qFTkub//73lcM
TLSH
T1FE361252FB82A840C420D6372D6AE9E17626FF945F53570E2F1B7E3C2672175E62B203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Peedy.acs

Path C:\Windows\msagent\chars\Peedy.acs
Size 4.0MB
SHA256 b8112187525051bfade06cb678390d52c79555c960202cc5bbf5901fbc0853c5
MD5 49654a47fadfd39414ddc654da7e3879
SHA1 9248c10cef8b54a1d8665dfc6067253b507b73ad
SHA512 fa9cab60fadd13118bf8cb2005d186eb8fa43707cb983267a314116129371d1400b95d03fbf14dfdaba8266950a90224192e40555d910cf8a3afa4aaf4a8a32f
SSDEEP 98304:3RgeCo7/u08ypDpzduZcdZOZQDyMvgk302Dm2yqJK9:hgnf0ppbZOZ0y6309
TLSH
T16316122069C0B840DD9496375F6DE1E47620BF8CACA7AB463A4F7EB9143246FD47BD20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5284-6397-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/5284-6723-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/5648-5057-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/5648-5554-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/5648-5744-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/5648-5746-0x0000000000400000-0x0000000000424000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads