legionlocker | 188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 17:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe
Size 3.4MB
Sample261011-v21a1ax18l
SHA256 188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99
MD5 35acbf4b0e8cfe8b9c3c2d5da5eb0131
SHA1 bc2d3b96b8f5d227b41611f64216753a898e804c
SHA512 381f3a0867207e9824a1382620c17d1b445e307512982279a285e7cb4ce2f79a7f48b549d5c78e0f1ef707ff10ec249784a1d6e88788eba1e861f492f19fe2ca
SSDEEP 98304:NUqA6Sp+ZIogCxfwijqisUzS5Q1J6KtqxxwwpJKILMW:JAOC/MINxxVpEp
TLSH
T122F533638D241271EBBAA23F9A5DD101A3607E1541D5B893F15EF4E06E73EF20FA2C94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution legionlocker ransomware themida trojan

Malware Config

Signatures

Family: LegionLocker
Ransomware family active in 2021.
ransomware legionlocker

Detected LegionLocker ransomware 1 IoCs

Sample contains strings associated with the LegionLocker family.

ransomware

resource	yara_rule
behavioral21/files/0x00030000000170c6-9.dat	family_legionlocker

Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	LegionL0cker.exe

Renames multiple (131) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	LegionL0cker.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	LegionL0cker.exe

Executes dropped EXE 1 IoCs

pid	Process
4068	LegionL0cker.exe

Themida packer 3 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
behavioral21/files/0x00030000000170c6-9.dat	themida
behavioral21/memory/4068-24-0x00000000008F0000-0x000000000115C000-memory.dmp	themida
behavioral21/memory/4068-25-0x00000000008F0000-0x000000000115C000-memory.dmp	themida

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	LegionL0cker.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4068	LegionL0cker.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2808	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LegionL0cker.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
5708	taskkill.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe
4068	LegionL0cker.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5708	taskkill.exe
Token: SeDebugPrivilege	4068	LegionL0cker.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4652 wrote to memory of 4068	4652	188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe	88
PID 4068 wrote to memory of 2808	4068	LegionL0cker.exe	89
PID 2808 wrote to memory of 5708	2808	cmd.exe	91

C:\Users\Admin\AppData\Local\Temp\188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe
"C:\Users\Admin\AppData\Local\Temp\188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4652
- C:\Users\Admin\AppData\Local\Temp\LegionL0cker.exe
  "C:\Users\Admin\AppData\Local\Temp\LegionL0cker.exe"
  2⤵
  - Identifies VirtualBox via ACPI registry values (likely anti-VM)
  - Checks BIOS information in registry
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4068
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe" /k color 47 && taskkill /f /im explorer.exe && Exit
    3⤵
    - Executes a command shell one-liner
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2808
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im explorer.exe
      4⤵
      System Location Discovery: System Language Discovery
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:5708

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Debugger Evasion

T1622

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LegionL0cker.exe

Path C:\Users\Admin\AppData\Local\Temp\LegionL0cker.exe
Size 3.1MB
SHA256 4cfb6842146846fca052d82cc0f80e23c3a7b23bd5958aecfa6a21e28825a1f0
MD5 d48b80eadbbe9bfb68f3fbe11a6cf0e5
SHA1 c099a07b701c1f06709e181481a5938f9b6e001a
SHA512 18aede3c47814d5a53dafaeab24da4a322ac8ed079640938cba4027903c07e524fee6f7746d0fdfc996bc9ad208441c6f11565fe56d603567d7cdefe4f8389ea
SSDEEP 98304:RUqA6Sp+ZIogCxfwijqisUzS5Q1J6KtqxxwwpJKILMWv:NAOC/MINxxVpEpW
TLSH
T1F4E533634C246671DBBE623F4A6DE101A3506E0415E9B9D3F15EF0A06DB3DF28F62C98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddRegister.fon.lock

Path C:\Users\Admin\Desktop\AddRegister.fon.lock
Size 618KB
SHA256 70b5c556ba05f563e34e52518b096f0b05f44d065c6d25e4ba86d57145ef4126
MD5 0387bbb4296ae1ea22fda924cce9fdd2
SHA1 18906236f30db8694f3487a9c4ecf3f629ca6996
SHA512 caa021e434121f37dac8de8be59be14c7225f3b0fbb96d3c2b9a393735881d81b5a1ee6cf1346143e7d7851ea4c98ed32a79e8a910d12039db3cad8bf148217d
SSDEEP 12288:PFLfQdPvh8LuonEwSfCXsM0spF+Z2OhbK0hg9CMaXcnC3CkHenCQYZ:PFLfQJvKuSrXsM0aFM1nX0C3fenKZ
TLSH
T1D1D42384D9CBDB045A06C22FA1506C68C27CBCA657E661D6203EFF2476B945CFB4C36B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveDeny.nfo.lock

Path C:\Users\Admin\Desktop\ApproveDeny.nfo.lock
Size 890KB
SHA256 ba6b5c430625e74d3e39b708e7b76480fa14288d9d13a6dd81fe65a5731a6f48
MD5 5a52c116229b37b6702a1c53c65d8a09
SHA1 998613970c7394187c5140f1b2f1925697a1a67b
SHA512 a860ef1c2acc7e70bf2f1c5d496c7e288b3f8eaeedecc5ed484a6e3af15f3e4d9114ed51756f67fad13eb2c79f6edf8d0ea9d45da0e49a4570bcd3e46c2ba816
SSDEEP 24576:bDkp8xB2pHYbIO+S0oCHUXg5ybNDya1uw:6sYpHQTCExya1uw
TLSH
T1C0152326E026623C1819C0AB63F89757176ED01BC130AA93650EF8CD0BA25D7E4EFD77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmRestore.rar.lock

Path C:\Users\Admin\Desktop\ConfirmRestore.rar.lock
Size 1.2MB
SHA256 8be92288d500e234dce0e8d0bdf979dd0ddc980eda189e4d19c08c4a755ecba8
MD5 91da38aeaafa3ee4a43a9080de547e20
SHA1 743ab20044f99de690703392a6f8751336518ada
SHA512 53a6f1685358533f236a5e488fd732ac20fa2ac1cc554146f328940a1ee242ac68055c8a190c80f2f39e2fd81d4613e5df1d761ecac7d0adf3ef8cfe9b2450ed
SSDEEP 24576:18TsraZGxkRAd8FdOe27unt9lfGGUXxOzX7FMCn56J39ggR9PRzkyMz3MDYtx:18QiRtFsju9flUBELFM8PaSx
TLSH
T17E4533D4705AB1BFD2E35D909FB10466A7C9DE83152B8DC3228BEBA5A54CE05C47ACF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertDismount.xml.lock

Path C:\Users\Admin\Desktop\ConvertDismount.xml.lock
Size 799KB
SHA256 ecf2e0b4dbe611dad95b11e6ec3d30797366ff1f68c3ea1a72fd3ff4e4bfd616
MD5 e98eb2369e5ef81bb57d75844073cbc1
SHA1 19aa58b1aeedda0a8ca690b05ee5a6f3a4445cf2
SHA512 d63601f7bdef2a096f8676b2d76b6f332136ad82235f32d88b2fcf1251c9e2e95057e73fe643639ea91138915f4489c19e54a4b38b34ba321e0cba469bb97c31
SSDEEP 12288:A6zTlu22J8vFDxuPaOQx0k43CpG/p9Z4YmaPD9Y/vNikm6ByPAPO77sVDTJbBpCs:tzTjv9xuP/Qx43f/yASckmNPAM72Xlr
TLSH
T11C0533C13DFD4FC6F9F8D4939493B9C201CC7E22F5A8990CC18AFA659A124A453C7E66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromPing.jpg.lock

Path C:\Users\Admin\Desktop\ConvertFromPing.jpg.lock
Size 709KB
SHA256 0028fbe846d4bb1798e2da63fb5aaa34c18e39bb9d452e26269972fa4678bf57
MD5 b268cdfd1b037215ffa84616636d099d
SHA1 369d6c18ed215f52ddd535f349e32fd411cd890e
SHA512 3e32bfa91062e30a74596d760e170f87121e2cffa78fe7e44a61c11c508bacb63179723ea47283fbc90d566213523735482846b0d41e676254be0a435666a0d7
SSDEEP 12288:5dk/Kl+iJ6xBxVdUcWszrPr2uvlq0bT6C871UlR7ToUit09PRYS/y4:bg46zmcWQPRb+PUfov4/R
TLSH
T137F4335AF268CF4D1186C8DAB3B1B7265E9706850486450BAC4E23BAEFC2DFCD2DE045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugConvert.vst.lock

Path C:\Users\Admin\Desktop\DebugConvert.vst.lock
Size 377KB
SHA256 38641fa54b19a2217c1064c239dbba7837bddf15a9fc22dd62c7333132073438
MD5 f2ec4c78cd0a9c1cbf7f8322b0eaeaed
SHA1 b292c9e3f6a38225a9713bab7f4398de40998ec1
SHA512 8220f1e7b12a7a5ef6663d6c9461b49f8619f3ec52af7f59cac24dba7615294eabec55053b5a4ee518db4ec2ac298b1dc1b7579ade385bf72e2327369f668133
SSDEEP 6144:me25hSsLBGgVLt4AdV9L+wvc9zzp9ZCAHkNetRQ9Wu7q/NQZP5g7XK/SdezEfegA:mo6BdRr+59zLMsWv8NGKXQSdbA
TLSH
T13B8423F148E2FAA9ACEA1B4573593DCC432C50EE0505C68442AEC5696931EEFB73D384
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountDebug.html.lock

Path C:\Users\Admin\Desktop\DismountDebug.html.lock
Size 769KB
SHA256 88e495e2b414e5ffdabf3da42119abbf641a32cade3c9a2e822b0e6df1a22704
MD5 a1a20f926fcddb8b7918f5397b4a7a3d
SHA1 f956c8844aa54038d03d59b4717010fbd09b71bd
SHA512 0df78fbcc4d937ff470763a197cc9b7127f9e1534b8edf9acd0c59786e8c3f5df0f5a1cee5f9126d4b9337b663210b8c75c98bb67f6c6d643967259f845a678e
SSDEEP 24576:A/m2IvdH2akojAraY0YzmrzC3iJ1ZpYDSS:B2IVWCj6RyrzGiHIWS
TLSH
T185F433353CF15C925D5AEA45BC087F6DC18A032061926DF60D9297FB1CFA9FAC28B394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountSync.xml.lock

Path C:\Users\Admin\Desktop\DismountSync.xml.lock
Size 588KB
SHA256 987dd335dc4caf9169eb253c814bf4fc3a9f56f3bd8a5ad8e4dc7575a1764863
MD5 ac06f12be37d995be43ea9da499b2f3a
SHA1 44291f2d3fe9bd31dd22afd7d7524bd8f7b41646
SHA512 7d32302a5425bc3eb6853dfd7e52f5e84ce0ab9ea40d5e9b1fcf17cd182a9eea578e86147630023e06d3da4b6c9f0d7e0ab0840ee33c79b15857b3921e6aa362
SSDEEP 12288:SUzvFZr5NTVIu5HWy7ds1EZL5kGMAwmBJysQHeFUtyPgxl3Ok:SY3xlr7VZL5kWfBJysyevKOk
TLSH
T13FD423C2D52E470E277E28867293EC0DA67DD63D0512A9F3789B32FD5424FB919206CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideMeasure.3g2.lock

Path C:\Users\Admin\Desktop\HideMeasure.3g2.lock
Size 528KB
SHA256 cc944888a0cf371eb74e8a888576c7640bf7412f590c239a620ab1b554d0cff7
MD5 12f0f566a7787f0c6cf26818a6b47985
SHA1 f80919acc6d4767986b2c17dfb50fb2ca5d288f6
SHA512 73a1347f946f58b4109db8bd45835b4eca63dd35953f58bc268209e39651a83d4018d54198d32dac2049c0f2406c264f3d58de14c240120995d6fc33ceab1ccd
SSDEEP 12288:983RmO98QXaduabDIg27VSu43FY+ASVMb7QSs9ZHA:983RB9Ddab8g27VSpivQSs9ZHA
TLSH
T113B4233969CA9C1F47713CBBECFB0535D9AADD954416A8B1CE33923CE6AF6827201701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoInstall.ppsm.lock

Path C:\Users\Admin\Desktop\RedoInstall.ppsm.lock
Size 347KB
SHA256 067779a4832c4103d708fcf052f9b4967176975342d5394813ca85c36eec0095
MD5 76d82bfea65b04c6de12b82bdb7e1767
SHA1 5d4d95a6ff00fc7559419f5331bdbb68fd6759f5
SHA512 cbdcd28ab4ec6559136faec03ff61b689687b8ec927dbbdb380a0db27c31f58edaec0239c49feedca451c8adbabe66091af758cad7918bf1ba5f17f60bfa4b26
SSDEEP 6144:xEh5rfWwNJH7qIVBTwol3D+7T07/8QfqWLzWybJ8iuDjCslq0aImIzly:xADH7Fj9lT+PYjblSJDjCsnnY
TLSH
T1C97423CC45DB35699F91ABE6CEB8C8252496FE2EECA330C223BD5C64514454CCD60B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeRevoke.hta.lock

Path C:\Users\Admin\Desktop\ResizeRevoke.hta.lock
Size 558KB
SHA256 8a1f4b85575dc9276ca61dddb2ab9deaa8d2f0e2f57636f0a0ba441f2b087c07
MD5 9fd8f207df60db6a838a9065b5d969a2
SHA1 b63ffdddf9ff3af92f2f7f351873fff9bf6b2f86
SHA512 2b19087e42e73b0895e8ce64e6b46cfef619652cf47220d1fd696f16092d6d90eefc635792d96a4e17d2f56c8d85aa9c79e5930a9afc3c9b1f202602377b5eef
SSDEEP 12288:2KY8mIuz9gmhT24sxprYekjN5iJFghIGo+40cuCcEPyFVNeL7g2L:LuRJhTYpseKziY2JgCcoyTNqg2L
TLSH
T128C423D6641D75B1310FA2A661AFAE10B333BDD585C7FE6023F981E5D0E0E7165262C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeEnable.docx.lock

Path C:\Users\Admin\Desktop\ResumeEnable.docx.lock
Size 14KB
SHA256 d753e675f390f9100fdc9e0e1dabd68cd5ca57d3a5f70a3207420e4704846b5e
MD5 2b64a79a7be3256d3b39d76f7bbe218f
SHA1 47efaef5a0be2ad1c10fc152d3ea156051733260
SHA512 bb6b04cda08b0c22d75c888255d3061b2c571744d7d5d37030c11009b64c9fd0b58cafc548d2377f1c1962c5c6c27c1b31e7638ab987be5d29c9e0a256898976
SSDEEP 384:TfQ+ic2qhVDLOIyc9pAVPneIsLagBZRiU5l9:Sc2sLOqSkIsLagPhz
TLSH
T1D762D1855274E8301ACFFFBEF5B73E8CD95D178958D6460809AF76B83F0EA0825C6818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowExit.potx.lock

Path C:\Users\Admin\Desktop\ShowExit.potx.lock
Size 437KB
SHA256 d561a589cbb18d0b56531ed4cdbb95865968d6c71a7de08117db981584851ab0
MD5 78c66f04d2ac7649a7da62f64dc2dd45
SHA1 4ea88c15c96e629e304804b20f29fbd8933719f0
SHA512 5d2caddc9b4fceec9e71b54a88548355c2574c1c76591bdece0b5558d939e2a0191979302e8422ad15261ea53fcdf26ec00c85b47fa79905a303b0dd03fe9ff7
SSDEEP 12288:b+ad5+ylBWQLQV08snoQT6wMTmayTxjIco2yKH:KadJnUVZeJpa8Gr2L
TLSH
T1549423BDE14ED781B73A6685DF864407F93731B6E13082AA4669AE0F21703BC4056F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestGroup.ppsm.lock

Path C:\Users\Admin\Desktop\TestGroup.ppsm.lock
Size 860KB
SHA256 ab2835dbc07271b12d2e51ce719718198ba767bb21e5d05e6ca839e45434c329
MD5 7eaac35a79cce2cbb94e957b8fe756fa
SHA1 a3119999ba78d65820791b3062a3d97df80e2b4c
SHA512 7f3b4e5882dfe68649b4b6529dced50d9d253040746e7b1f2fb6678ec4a096c49b412d20e581a407b138fa4dfc47a56098fb74e896a77d53fbc50d96e32f0da3
SSDEEP 24576:eWJCm3h2OhUtCalOyL6kMvbNPzzgnEJi6W:eC3tUMzyL6kMvhPXgnEXW
TLSH
T1B31533E9A91C95EEA8303E4056D9323CCCC26E37CD5E3E4AAD58A907B4434A5C317F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockBackup.docx.lock

Path C:\Users\Admin\Desktop\UnlockBackup.docx.lock
Size 13KB
SHA256 3cb4ce584c3619fcac0e2016dd5749c9c6caa70100f08af8efd158eff5f6890b
MD5 fe8cbf12e3f5e0540a6ac2374c71a461
SHA1 3bb768ad457c124c529e9217ea8efd8f3aef5bbb
SHA512 d556da36846104f34d185ab980729e2646b43ea652d5b2b61a5a5646428114458a4017956590ff68667f442e010a6cc794608a374d1f7df04306c7b5d1c9abb8
SSDEEP 384:TfQ+ic2FI5PmmcoU/rMZfx9XO0WHN9SjJFyUAudt3GOB:Sc2FI5Pmzgp20WqtoUAudt3H
TLSH
T1C952C0F555A8FF94F62FDD010E302C78EDD5706BECA2AAC2705B72932A10EB1936E415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishApprove.gif.lock

Path C:\Users\Admin\Desktop\UnpublishApprove.gif.lock
Size 649KB
SHA256 001c9fd61c1f02c01e509caec0b6837676168d1a4f74671bfe210b68030a5b47
MD5 83035e8dd0e5558b0b486f5959fc7c6c
SHA1 6216605b5c5415f7b5d8fd0a0106f978db51a70e
SHA512 767e1c40740ebb849c0beb7e819a66e2b46d3cea1dc1922b0db30946ddc48655035b9418f0cdd92203a6d77226481c71b9122517ce4496c9c49a092a17dd65a1
SSDEEP 12288:DhKMbH+ElhbL3+pfRThZ88Yg7sZnfYjQpvIwaOGLT7hDR5eS:DhTbH/fbL6RThZLAZRgw61fL
TLSH
T144E423B58C530E21DCCA7A2F5AF3BD046CB55851318E351724F9E226B266F0877B8A1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterReceive.vb.lock

Path C:\Users\Admin\Desktop\UnregisterReceive.vb.lock
Size 467KB
SHA256 689a069467391241b39d53544a60c2c31ee1bdbec741e2ac5a717686386d6044
MD5 716eb4416203bed142f80ecdf14307cf
SHA1 ef83f239f4d2589b0b4eae2cce630b66ddcf8900
SHA512 2f1402ba147a9c18aa4ecaf73fe596d26ba42c066e1d9c8024d600360e90355a26c6dde810105e71aba8e3edeca3d3e689629fd24db6ad050e46ee9a4931d954
SSDEEP 6144:vyVTmrekCc9QRfS7bkBrPiUOQ3+iIrZIbmbLez5rAyl6kqnTxjCn1a0UJJS/acGX:PXCc9QNybkBGUO/O6wfwVwE+7Go5+x
TLSH
T198A4236A62C42B1E54F96656904FEBC9CF630241A2AB33F0D283D5544FC7348D6B773A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateEnter.docx.lock

Path C:\Users\Admin\Desktop\UpdateEnter.docx.lock
Size 19KB
SHA256 af54a8f52ac97f8d132990ef3b24a3f45d208fcc13a3b6d8b496eba1933619f8
MD5 8b3bb6a83215304cb3af9bc2efd0c433
SHA1 f084579ee92ffd1c1a889021d6ca1ecef1fbb775
SHA512 121a66842c76c29ac14b714077627c16de402d6688d598bfab63bf531e864ac31ec8d9fb01aa024490864fafac46d9d29eb93ae58bbef76c87bd1432720cac5c
SSDEEP 384:TfQ+ic2rjojkro7Z+24G3DgkUfvrchn2Gcu7yEZvtlzXecX:Sc2rjGRF+24G38kKghn2OyS1A+
TLSH
T1AA92C0B2B9ACECE596E57B0BFA31D143ECF47293E76320174AB126647E023504674D2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveExit.potm.lock

Path C:\Users\Admin\Documents\ApproveExit.potm.lock
Size 478KB
SHA256 6be86277ba7b2b36d168e872003c418680e6569b434d699bac7c4578551d0a7a
MD5 6abcf0a5918e53e07bb34fa26bb5dd95
SHA1 b012fb621efb7e101d311710299866c5696ea49c
SHA512 ee8c3bd909354bb7fbf1fc26459a8c5b5619aaaf2faaf042763d291cf5be69476b713420b9d73033e39bb72d6055e209b567acfed9820233405c373de26dfae9
SSDEEP 12288:Wo/8uGbzPgyn2VJvzERmx/iGJB6w4kn7Q89gsGbZdjY:d/HMPg02VJvzE8vYw4k2Zdk
TLSH
T170A42328B0FF9C796FE0C82C5742D08B0FBBC94795996A227028E4A4DFC56C316D5DDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupSkip.rtf.lock

Path C:\Users\Admin\Documents\BackupSkip.rtf.lock
Size 510KB
SHA256 fecbeed08eba491ea4ea4ed1e232cfae1a3d563b9fa742a84d8b28150401cccc
MD5 0bcd967eb23b0fbcabc77309f13818f7
SHA1 bd548491e85fe01d0bcb69130ee72350da4b19df
SHA512 73d5c7ddc095a85b41cd499657bb918d8af90a3c3cf1036082f9e06ce6cc78e7a085439592775e8150a3a52d019193055d3718c218a96e207b211b6003a93443
SSDEEP 12288:iQ0VFr+AquzWnvBHd5pjG9lHh1O08QMEBFDauy75G:10V6uzWnv7CjHh1OCjaU
TLSH
T1A8B4232DC04CD4A2DD3F174AF7C04BF2B311017BB68D4B881BFADD57925864B2DA682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearBlock.mht.lock

Path C:\Users\Admin\Documents\ClearBlock.mht.lock
Size 446KB
SHA256 92ff47a9dd332016d329929a7b6210aa76ea030b7a5bb44d64e5888fc91e72aa
MD5 f773286b1fb36bce3952d7d0c4b2d103
SHA1 10b79977f344dd318e43a1573f2d676b0a60787e
SHA512 a57b4d4adac2612f1ed6db5f7bfa4749f0cf59a45857c08fc16cc214bcd7ce0eabfaf5e227bcef536fb33806689eeacf5498592d82523ac3273943e1392692be
SSDEEP 12288:eE4+sLprKNjeZlB543LycyfdaLHy099tWTfwlY8vm//XQ:L4+A8heZV8LycskLHy099tCwlY3Hg
TLSH
T150A423D106AAF012D3EDA95326EE16ECF81A11815DAE36AE473DF6DBE528140F506C33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressConnect.ods.lock

Path C:\Users\Admin\Documents\CompressConnect.ods.lock
Size 467KB
SHA256 349903415947669f1cbf25c758c681b786e3af565dc6957f77e0fbb7191711e2
MD5 472c4e7c98e2a2828203e744830a8423
SHA1 3ba14953d13989b9af308c0cc74fc385cda21143
SHA512 b0473b3bfedfb20c812fda0147862df8b1e9d4830bc741f139ff2eaa3a443d921623d5ebedca262dfa926dbef241df228e08fe14ecbea88c78be3fa27fed82e9
SSDEEP 12288:drh1i/qpXbRIje+/upLxmMh6ITcONlhI/r8fsMgMsE/W7:dWvamMgIBzIOtRI
TLSH
T105A423C05E5FE1CC24358AA794EC4D8E5BAA21D7BAF14786B6FD8FD0F962329118C503
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyLimit.pot.lock

Path C:\Users\Admin\Documents\DenyLimit.pot.lock
Size 457KB
SHA256 3c08a3bea6f664ce5d21cbbccba77f04d24de4fdd1b923599947698f281053cc
MD5 3d37bdf33ba9b82598345fbf3aa5e00e
SHA1 000a6b7d59522a446a58e227edfc3558c34ca649
SHA512 5b668f3f685a0b832b6309205a242ed6ebb1a81b3f932aaeaefc53865fc0ac5c676a764d08668fac871c79c6ad2244c94d273ac1c98781170c94529c1d11a6f0
SSDEEP 12288:RJl3LNUSx7qVVfBuSmdUc+uVj61X4R55G:fYLBuHlNVkX4v5G
TLSH
T1CBA4230CBC823CB66FB9C28637908A81D80692EE91F0811F15EEDC9C9455E6EFED7C51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableOptimize.vdw.lock

Path C:\Users\Admin\Documents\DisableOptimize.vdw.lock
Size 318KB
SHA256 bd2308a5bb1b5e5f7e5215695b681e49d98c0337cc54765b4ffa85c9b0e1e74a
MD5 02a1d7c6aaa6e25595989a8cefedd7dd
SHA1 d562172e0f23911d64c84557c371ce49db8de48d
SHA512 283cfe4c452efc34b5883c95dd30c912ee693102a0db09b80cd4421b870b3c6d33a01b4f7d0e742c674e53a928ef3b986258ed1a629b6ef070cba6feacf97aeb
SSDEEP 6144:GhinYgDe2t/KbAOAqy+atWTtqEhKUKuAInf1eZ5YhkmxH4yZhgv0yxrBmpyJ69:GYhVKeB+h4Ev5d0YCxy7oHh5w
TLSH
T14F64230BC2E2335E92D8E364FAFBB259419E33720CCF199113E56F34CA5479E640A5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableRead.ppsm.lock

Path C:\Users\Admin\Documents\DisableRead.ppsm.lock
Size 712KB
SHA256 8a41175edba2d2851815bc2c15e16fbc60acffc391754d4da8565d2aa4cf013b
MD5 63453dc8ef72e903791f224704e39b81
SHA1 1cb781364c986f3e15ec9e8a220b17d1b327e1b9
SHA512 7444ddd0482e77592ef676169437892f5f068617682c1d919482efaff0afa7ab3fe6a8d9a14288516e04a86703010f1b2cbc2fadd9f3bf44f247a4d191c60f00
SSDEEP 12288:7zRkq5vVNKYQAfv7ICL46oujf1UPwjXka0GntGimIg8QkCl2a:/RkovV9ZfvsCL46jjfqPWka0GntPmIaP
TLSH
T106F42310F5979E6C88474A1E8EA69550DFC0F0B92EDC126272F146A1F7C2D7EA3217B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportAdd.vssx.lock

Path C:\Users\Admin\Documents\ExportAdd.vssx.lock
Size 244KB
SHA256 150f015207ff1e4d98677e68fe22c28cdb932ed1de2b4e98d2a05da2e31ed2f2
MD5 d7857f008b67cd8d92d971d9812faecd
SHA1 f15cb7554738b21961f7d9434b64ec04908c6d50
SHA512 36524418fbb6deeba603e18001df005677b5f61de3881a0e26b720bb6d0158b55f615ea878c9e4b74c542927329031cd286624728e83a298a7a9694596cb8baa
SSDEEP 6144:E4RtBrieXPcLsb71Vzm/nDVdM/uE+mD9jYzwdUcNwgex/:bRWOcLsb7DmbDvE+cZdUbgg
TLSH
T11D3423CBEF391AA3C1A316BFB2BDD00E95D8C9184411EA1F41497CC4B06F7671A867AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupMove.xlsm.lock

Path C:\Users\Admin\Documents\GroupMove.xlsm.lock
Size 393KB
SHA256 697ad381d9a8e42bc9334c5eb34a3accbc2fa816e5eb70f8f7088a01fa428999
MD5 642ebee7caefd8bc86a120e97a93a257
SHA1 3884abe01ba237c3eac25ace3129a4b5114fbe3d
SHA512 ea1d47450647135d689e9cf64d1789517e8a8120c123e4af8b0362fcc7d502ea0b618ee956c5c375198ef03fa678deb79c6a0895b197fbac1871a9c6c61c40aa
SSDEEP 12288:S9qQvf0usDFP+2p3QgeXgyY1hPPfRR3c+Ah67V:S9TvfkDl33QlZshPxl06V
TLSH
T1638423D5A3D08B272347024E9136FB5325812689CD9FDD794EB22CD823EA27E1F575C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupSubmit.xls.lock

Path C:\Users\Admin\Documents\GroupSubmit.xls.lock
Size 435KB
SHA256 95650cd1f26adaebe399c056a3c8be7ed380a31883e306f2d1a65de69375987b
MD5 75c923f5f711712b4e68bddf8088db32
SHA1 1463a734a060d1c01c33d503ccbe28b65c3561db
SHA512 0246650e21db6bd0cf03a510cbdd88a60b6343111113ff7f1ca4b621f195440607588b4d860f5a32a3ab8f78201a56c36285fc5f4a2426b3096f531c4000ad61
SSDEEP 12288:7b2kQK/PTH1iYqK+nZRqH58crxHolb6jrHLT3MbHr/O6dJAh5sa:7b2kQK/PTHwz/EloxkHv6Hr/f7Ah5sa
TLSH
T1249423005039AB2C6F0BFA63AE39A72B5F1424626D45356F4A9A7DE614330578FFD2F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportMerge.pot.lock

Path C:\Users\Admin\Documents\ImportMerge.pot.lock
Size 223KB
SHA256 c7b25544e97546fdf447d0b7c52215663a88778c2bcd468777ee696df61fd3e7
MD5 0a4a75a6a5d788395aa0a14912d3961e
SHA1 6e81cc9c5bd7df2f40dc590ba55196e70bd9b6b4
SHA512 56db2bc30c7604265992388c5338cb95e8c1cc345afce14b4bb137afdd511cfa6531689e6a2d6bec7e84ec67d3801006677b9474ac79e64bf967c433a37c6f19
SSDEEP 6144:RMlp5q7oopWgVNbD8JVSiGnzdKiT92n70q:R6478QtRKx7b
TLSH
T1F42422458C9EE61FF3EE41C99028F92496C2F902A986147D7F9AC73070E287F68F7615
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeBlock.pptx.lock

Path C:\Users\Admin\Documents\InitializeBlock.pptx.lock
Size 212KB
SHA256 a93922eede84912ce684b58a1dac58cf20c51657fc0851f505ff3ca902d96701
MD5 3a40988ab00cd6b21be60206efce4d8d
SHA1 f01db8a7be01b48fc75674ffae3c5b9dccc84bbf
SHA512 a0b02e68bcf224049320c100bf8c04605f442431e9f78a7fa2b760b0bcac111ccbf2d4a15339e2911d06910d72487768ab8ed1465e203e1c2f47309aa7168f05
SSDEEP 3072:3CAvmU0iuex8Y8cjzQ4VIJOGCa1Xjx5aV+kyW4UHoQDJ3v0+snTRFVmiopS9CRf1:3CiiIiCj8Lzra3h0+snVREiCdZ2v7iJh
TLSH
T15824225C9B44F17883A477EC2A6F2AF4F0E34E424C2E9E1B626CD17A2663EF140514E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeSend.dot.lock

Path C:\Users\Admin\Documents\InitializeSend.dot.lock
Size 403KB
SHA256 b5279740274cf397be731581f838c67fc49ba2564a02dcfdfc83e3ac175a7151
MD5 320ea07024fc6861ee528f30f19fd21e
SHA1 b92fb064b935de6d1a32331d5dea2d68300f74c7
SHA512 b6a05db1dc9dd9563ea7b41df16a6968508554493561d4b86baaa40fa8e93de97125e92af0cb54f949a18df4879452e0132ac6d6c78efdbe489a7fb3a64ea547
SSDEEP 12288:HsanN7pEB4OC8XAMm2B+CLOhiaHY2uMUgEaMlhhA:MgpEwGh+C6hiYTdEa2g
TLSH
T1819423A5CDB6F0A69769E788315F1919C21099FEDE48F5C793A51C2F0850389FE0EE83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitResize.xlsx.lock

Path C:\Users\Admin\Documents\LimitResize.xlsx.lock
Size 520KB
SHA256 fbb08c51f1655b5923dba9bd6e0b541dc58019b43b7533222497eee344ccb661
MD5 53d72338e26530b69cd0fa0d91600031
SHA1 94ca0cd0d2f66f758474ee55430288121bd1588b
SHA512 a1afd750fbe7776960a155db6bf1e99d8f88b07ecac6edd95f6d4755d274e41796b3cc1be45ed37bbfa769050110824b7e31c6e2a6f43a7b7e62840c640fdebf
SSDEEP 12288:oNYPwV0rx/pyzuQiWv7MOZEL4eV4cUj7YL+ijHKe3uSvLkgdr5DNlOD:KC46QxMOSvV4hk/d3uSvLkgdNOD
TLSH
T1A9B4236ECB0D96B8B343AEC0D3E95ED3C1418F52EFD130AB55B270962698653B706C72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LockOpen.xlsx.lock

Path C:\Users\Admin\Documents\LockOpen.xlsx.lock
Size 11KB
SHA256 abc12bd38705a3aaf41de78ac10dcfc4a8401586f59622ac25cac7d08a9be051
MD5 adaf0d2c47c1ffb29310d35eae0bcbab
SHA1 49140361c5e0563ad233b1938d9bee895b394679
SHA512 30407618bf9ca63b4f767d0752dd5bd9b44b2ccd51c54806c799f979c2dee99232f3b6db851d9b6d7abb39d38af1b4bad7d645f344ba23b05db49c097d4058c5
SSDEEP 192:rX94VcQBYXvUc1S54wW64S3HkYOg9dJnqFnjKc72jlTK/PD5713+nLM1azUXKSKR:rt4kN1GJWrmTL9jsjWhq3un+azUaxHWs
TLSH
T1C332D03EC59A43B83575E67DC7B6BB066D827A5E0105482838CC902507A6384A5BBFBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeImport.xltm.lock

Path C:\Users\Admin\Documents\MergeImport.xltm.lock
Size 180KB
SHA256 d9cbf3806eb7f84876ecdd590b0548be90012c2b29ebdf04e548b948083ac6b5
MD5 0eed2d53f0a13b85adbd22c4051ae2e2
SHA1 606315bb383f6fd0dac63d934cbfc581639807c6
SHA512 9cc9ee4f97128b15750232dd910a132fca35f9cccc92d1b3bd9542b913964310a6b2cbb552208ab72667bccc72195b2a1c4b0ad9e381114ef7105d03cde37d0d
SSDEEP 3072:NvqezarnLQcCxwcOuyH16tyA7lO6ibtxh7IMdzg/yf6fNkRnObz4flMq6AMmCxZK:NWnL9CxwcOuJL862t778/i9E8RCxZUGG
TLSH
T11C041223602F4DC4B64E35D29FE235BEEB9DB31503949893CBB643661DB444CC8A6CE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeWait.dot.lock

Path C:\Users\Admin\Documents\MergeWait.dot.lock
Size 425KB
SHA256 1e4c9eb7a6879862ed27acb45c4e1913cf979424c36a34bfb43a1f73f2bb15c3
MD5 7c2387d43102be5d6203874bfbc56427
SHA1 7111b6e4e763ec9800a55cb16fe5d9fd006d24d7
SHA512 fd690f24172cd07d2e7107d210ba608c62c7120cc7c499ad93981b72f312ac8d74799bdc7bc02de6eb9412b8e2dbfdd96471356136524a958978271a4c18f3cb
SSDEEP 6144:7uraGJ2FovRvRw7IiSIK8nMqglPF1+RQ1FrtFtOlv8PfXKA5SbmDtZD2hT27T5uq:K/JnJvRaXSIKflqQhFtO475P2V27N3B
TLSH
T1DB942337BF8B06851E64432FB95136F79F6E63018C8ADD2EB17DA4FB6B00B13406255A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewMove.dotm.lock

Path C:\Users\Admin\Documents\NewMove.dotm.lock
Size 265KB
SHA256 944d3d6399a1bfd5ffbdccb79a24ea7846e3210c350b1a63508b0ce81cfa3f61
MD5 c7f02930d7a6dec50b8646169f6f5089
SHA1 3c4c1b2e6e68f3a0ee01f6d5ce8beea0fc296c33
SHA512 574a04f812e68b4e5b1da9527b99c4e9156906ffa21e6d82d75b79d9d3da81f9a383a8737edf1ba706023453e74e9909b831dd6c197289d91ac312352fbac188
SSDEEP 6144:/WtI5xwZOsz86CQMGst56cTxG+Lbm4IjTY4mJSuTMQJUx+Bb:/dOOszqQKttlGtfF0SBQJwsb
TLSH
T1BD4423FE994385B318291360FE1ABA773F20E5BECDAD9CF51D13708A8896E135352D90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingExport.docm.lock

Path C:\Users\Admin\Documents\PingExport.docm.lock
Size 499KB
SHA256 497f916f27c3d5ed2dde24ba9586f5569336b7524b3ca1ac39fb8317ecf9025c
MD5 b52238bd2aa0d9ba83cf8fda55040611
SHA1 bcf3ed90418754ad1b589c35da77112230a175a9
SHA512 975191606809aca81321eeefd733f425d4c42081ff4b17521722775ee9ee43149cf50718c624cc827efe47b4aaabab0bd7cb1d328b9db1b841d135d418962be8
SSDEEP 12288:boUjKn+OWZYXGlywRIFlOhLecplg1dlEUf9H:boUun+qWlnRIFEAckPDH
TLSH
T134B423063E8F1A7E0264E5AB5727F15CA463B42217C04E3D4887EC2CE7D52D176B9CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishSelect.xlsb.lock

Path C:\Users\Admin\Documents\PublishSelect.xlsb.lock
Size 382KB
SHA256 8b33d1ff76beb3657263cc1c8c93b3d05c1f1117e80630dc5d61c35fdba1ac42
MD5 2c3d3e12c4e640719a307935960185fc
SHA1 9c754e04fa456ce633f3820d2d8589d32238f608
SHA512 7d0daaf09c5d779bc061bc33cea07fafc7a727347b146851a62e48b3e6c0a4f53297559d7051db4afafa2a44feeede1e50ab31ca55bc937fb9375f0218bd342a
SSDEEP 6144:4hHWjA6sBOgoy5M7G937GrbceNm/JlcuZJKDhg5gxBD0yhabQJnJKtJjpg9i5a0a:48T+oCMoSfcQm/ncuZJK+C0yhemnO1qL
TLSH
T114842385651DCC64DA71845F49E3FC97473FAC884B72D3AB096CA19B012EDD328E26C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadRestore.xlsx.lock

Path C:\Users\Admin\Documents\ReadRestore.xlsx.lock
Size 13KB
SHA256 f37a4b8a67553c3f6e0a6eb1acf35a3088682a32aa545f46020537a0e9133bb3
MD5 87cdf6511f7d13af41bf8725f71cf03c
SHA1 000ca1f7727db75536444ad9bab4ff29a4ebe100
SHA512 a6dd422b660140642dbfe8ab87ca9eab14790a9dd628f6e642df35ce59dd0fd176e2f41e47ed3c573f7efca3d385d660653108c31d2db641cbc333a57a3e8fc5
SSDEEP 192:rX94VcQxPzxOGFPvOCAdn8zNgMyb4ebqXdvvcFTOtrakaFPTCQlZu43CF+W/NN3L:rt4ZbEGFPYdMs48C6Os+MZuOCHN6Q
TLSH
T16D52C0A8FAD7B1CC63341E546D71B70CEB4A1285A508E9414817BE11CE1D7398AFF338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveResize.docx.lock

Path C:\Users\Admin\Documents\ReceiveResize.docx.lock
Size 16KB
SHA256 0a8a4fe9283975cf95ed5774f382260a9f09302eaa68a13abdf2893c454627d0
MD5 ff8da099ae142deb3a49916d1833aa57
SHA1 9e24db632fe3d39944b3eaf5a2ea85d244a32d00
SHA512 70caafd8c36189c70ac280f4e0abbe2ef03cd8a29ed8e3fc58f7eb08596b82721100b6a038987fe1defe10a002508db153d480810de20f366102a2ea60960f2f
SSDEEP 384:TfQ+ic2uRiFyoSRLZDraGtRFK00J4hmRiYeD95AAzbaeHZLpPAeZp:Sc2uRiMoOtDrPrQumRiYehda8ZLDL
TLSH
T11972C0F79EB3E451704D3A638B5E3A2EAF845FBBBC9AE02D50C63F094C64962104D613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterTest.odp.lock

Path C:\Users\Admin\Documents\RegisterTest.odp.lock
Size 287KB
SHA256 7b25d328768711a4b4a6e00e7a200cb9b19c07b24907bf269b1e8a6d9586194c
MD5 8712c6ad6359dc9d6b4b96c4bd082fc1
SHA1 0ee04099eb95aac335aff9bd2d6fde5f44950e13
SHA512 910ef4bab08eceaf308a1e9cfe2689ca713c8bd37b317cf3fd847c9deb360a0547b8ede7000571ead3abf33a5faf9cfffc93c6404791e8cddffeaba4363e5fb4
SSDEEP 6144:wLDNJ6s19gxCQ0Oi2Ia4chbpss9Qd786JXRh7PqZBFnXRCUMJyjUqc7SLqe:wLDNJ6lB0CRP9O786NRlPqdZ0CUteqe
TLSH
T13C5423770F4A110334165213F4D5ADE142999E13EE479E97128D2CB1B8A8EA26B33D7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameClear.mht.lock

Path C:\Users\Admin\Documents\RenameClear.mht.lock
Size 276KB
SHA256 a359124b76f7446416faf9adb2ca848c5446a812e932e2bcf4967ab2eb41858f
MD5 b99a0eb98ed73ee04cddd0fb0829b7b2
SHA1 542573d86d0491a3d6193bdb6f146f12752c4951
SHA512 95af3bad95fbfcc0920c23fb20293cc0039d991be35b53da19e745aa9d6eb35a1c188c4fa60d1d06894254ce4df75f78f9a431a7bb156e2b2fdab70d82a2b5b2
SSDEEP 6144:xq1qn/jxL7nBIA8KU/KM6uyuZNuBQ3EHy:o1qLF7B/miZHuZN10Hy
TLSH
T18B5422B5DC055A439D6A30E04E7A3E35F8A685BD3C681D33042332AB7BB69C4F66E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairRename.potm.lock

Path C:\Users\Admin\Documents\RepairRename.potm.lock
Size 361KB
SHA256 0c276144bf7f125d91c251df5c5271ca499ac22b640de71bc208d529b3fdbcdd
MD5 59f363593411280bfe8fd636163be0f7
SHA1 c617ea9828a777ce5eba8a627065a48e003de4fa
SHA512 b318fb70577dab25462037bd630e1ec5b761683db4e2f6656acc28ce7ed194eb59d432ac11b08a7121a393635087c44fe41cdb70bd9b6127a7f11ebdfa9f9ede
SSDEEP 6144:D5vy3rwjzXo85EIoG3X7XT6gvjeYIeA/GIOkhWc+4C7IIgmPhAtMCBQPxLAFOcJi:Dk3rSXo85EIoG7DjIPGIOotIIItPGCCA
TLSH
T1597423BFB56AF0AEDB0E1E04D4D8A53711CA847FFC36B8001EB05B4ADF5516E8CA2521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeExpand.vst.lock

Path C:\Users\Admin\Documents\ResizeExpand.vst.lock
Size 372KB
SHA256 7420c06624c795845d5f48f99e2009748624f887c3c3a6c879364ce009dfbe12
MD5 e28f982189994e8df28608fe81ed2b3f
SHA1 44e367bfde9e4bf77fafbf6ab9b8ef8019db6737
SHA512 a9a76b5f451965857c2b1501c1f2cb97446796a6b7502946ca8c07112d245eceb31346543427dff54f1725b29c6d4411637146bb9abd037ae4aa6aa28222390f
SSDEEP 6144:bd5eIAj0aYFI3mQmNxeQw5rTbeqN7mlybE3dzipgf9RpuTjxr3:bd5yQxFwDmjJwBTyllyszv9exr
TLSH
T1498423D343C43E9DC923A399964AC14A66E8F3736348A00F14DB7673B60F5C5B5B826D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetSkip.ppt.lock

Path C:\Users\Admin\Documents\SetSkip.ppt.lock
Size 414KB
SHA256 01173200d094e23201b48a1d63dc1ebe37b2293ffcf43a5ef6b98f78e61c6d45
MD5 bfd342616c247b7f7bee1bd368285a8d
SHA1 85179e76bf291b503c275b57c094da725135b56a
SHA512 bca2ca0e64ae75737aebced0b9b1d3c926f7657e7bc700b6337635bb1f044ddfb09e725fb5d267db546c558a9ac7f0f80b921169786a0dbdae2d1b2005918efc
SSDEEP 12288:NPQERkL7CxL3eAIXoL8mEQpvIxcOXLNsrK:bR47NXoL8mFpvFO7YK
TLSH
T16194231965AF460C822BE777F1067A53149FE8725D938783DC84DBA2EA703670326F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipUnblock.htm.lock

Path C:\Users\Admin\Documents\SkipUnblock.htm.lock
Size 308KB
SHA256 cb3c326aa35e5aace2f9606a49d2d68a72a68851664f420c4ccc230608672428
MD5 9ea0b0584179f62fcb9f5229b010b583
SHA1 b9e58526fd92b73d37db7ac2ac439ccc37252984
SHA512 7f8058dac6bced995528a15e0e687f3052d4f07dc63b67946809a84e8a76fff5a8d623eb449c27f2ed79c26faa862d036c56cf4bcc7feb3f091fe5b8fd445963
SSDEEP 6144:Gc55xl/0j3XLbqZXQJrJE75d9DHx6Dz9N2x4fxmUMnFCrTaVHnQpp:/j8jn/6rdzC94e4UcSaVHnQH
TLSH
T15264234F7165B6A53D32D09F18328DA45BEB75F4A7C8E8E5A282F684898D01CC3435EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMeasure.htm.lock

Path C:\Users\Admin\Documents\StartMeasure.htm.lock
Size 201KB
SHA256 76427077eda7544a70e520a062ec78b548415033acf1f1f33a2fc283baf2d5fb
MD5 66cd09a9728d95660af156a048ee7bfa
SHA1 f604cbe56f1d5e6f013487f782887d1b64a6eb38
SHA512 d1aa4ae41b9cef2097301a3597ff7714f02f125c65e6d69a186ba0d1c8a55854ed01c5e765424b5d21b2b6459ba2b3bb454cf4d4e471414b539a8513122a0b2c
SSDEEP 6144:0tKmjZhMUbOVOV6btqbWT8/RrTaJh0FH1R:0tKmjZhkV9btqCY/WuH7
TLSH
T1F21423FF40254FD78167288B71308EC8290B837B550BF0D5F6D85661A39C5DAA37A8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncUnlock.odp.lock

Path C:\Users\Admin\Documents\SyncUnlock.odp.lock
Size 488KB
SHA256 136d792fd83c7c8dcbc152d9d15a7562c4d0d1faa4306514a244fc3cf843f5df
MD5 96f8cb5080e65c532a842f2b7d1f7ad6
SHA1 74dbbcdb851dca8a3ec4c82c215279b19917540c
SHA512 d607f8b60db37864de9b0e6d5daa22504768afdcf4027db1f3988f0b18124b50fdb5336a2aa4c4718957b4269690f82c46a7c75f64671dc2bad9df085dccdfab
SSDEEP 12288:JOirUVC+k58eMA3f1e8BgU/dTphAYB+6QVgSbcAmcu3s:J7UTxtANe8BTdTphAYBzg7bcAz
TLSH
T1FCB423A93C0FDB03493C7D34CB39A21FCD6DBE069AD24A98692AF10102979752FCD597
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TracePush.pps.lock

Path C:\Users\Admin\Documents\TracePush.pps.lock
Size 350KB
SHA256 a499003b7cfb64f4eb7f81437139db672b1b762e7f3e3f92d911cb2b628a1754
MD5 bd943b2e0c78d3e5a657045a1e81e5b2
SHA1 656ab9dd5f29b422e9cf7950788ae203ef458ee5
SHA512 7c713cfabf0ddfd5a0657d5204de7444ea7fe9e83bfbd18a97a76a5ac8027cc55ee2ffd8fbc5cdb8f3bbb96d00fa6b8a67ae64d562ef44d44f33be6b17c0bdf4
SSDEEP 6144:xSuB038uenq2gASsfJy48t0yVmGkjLKq9GkuELpQqbb/JvwiH81El9KYGd6AJdSr:I30/gTshOtfUfjFumWi/JvwipQjS4U
TLSH
T15B74230D6582CFA33EBF9EB7DC0312916A7F4A12CF4C38A38F2140FDB422565196B5A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TracePush.vdx.lock

Path C:\Users\Admin\Documents\TracePush.vdx.lock
Size 329KB
SHA256 29e613711759561c923905aa4390ff5b2a02414d1b10c6f7bddfda288832ccc3
MD5 d4c7faee5fb14a9f42d840e7f4d4fdae
SHA1 4c392447dc3dadf787c867256f05b5b8d1da47bb
SHA512 304e965eba97524901f010d3dd3d407ad426a581cd8316401a06a246263808ed7f27c2087d04e9315cf6ee9015f615d33736d515ec50ffe568be03f5dc2b9617
SSDEEP 6144:SXpf6ikJnffmCqPkJGSI/biAVv0AP7Quw99gSRhY9CBtak0sZ8:0ZkVOLSrCbdcUNWHCCBtavsZ8
TLSH
T1B87423A317C862459DB4C93DA3BA97249DF793704747267EE5843C0A072B13A6FBDAC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockCompare.vsdx.lock

Path C:\Users\Admin\Documents\UnblockCompare.vsdx.lock
Size 191KB
SHA256 0ecb2a4306fe63f4c88bfe4a6cb756fd4814f539f8c6be30d5f8300d622af439
MD5 d9d2ef6f9c212456e4e038e44e1169fc
SHA1 ce1e7a04ad775d9cd36c9669c262913fb6f9a285
SHA512 cddb55150abf422d3ce5fba585071557e9a44b5acb8d775eb80669f827cdf6357b9b8e84103e0eca3b913fa4a3588f8a0a4cc3946accb2dda4e51b29042b5afc
SSDEEP 3072:54NTD+KTpUaWMBYDyjK6YUSUZuwvQdaqpwnzAvE8B/i5eMo6FcUfcjwHeKvu:54NuKTs2jK6YUrywnzAv7mDF16Bcu
TLSH
T1AB14233B2060697B24BBB1537243338B523FDC9D47051BA6DD99786B2C3E70B14A2F60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallInvoke.xml.lock

Path C:\Users\Admin\Documents\UninstallInvoke.xml.lock
Size 297KB
SHA256 35621e9cddf092a793d365a03fd8116215855586370c9be02fd8210fddf48a9b
MD5 179376dccfa1908820d586c3a3f9d299
SHA1 9e347044d9a5279a11211a4d2e814c058093d44d
SHA512 5bb4c9fa0e3ff6cbaa460898164a85be7099cc486cd7ce9513299dc5b70b1026f48622557584cd73b580578d2c390bfd6d5772e10d6ddd875a2e46e8f8c716cf
SSDEEP 6144:uBOv7/ytJNfCP3JCG1t0yfpHWf5nvLi8d5WmwVbBz8gef12OmN6PkVvi5hgvkBnm:WOv7/ytnfwwkWyf1WBfPWBVbBogGIGk7
TLSH
T12154233AB90771B16BAA6040E1C7307A325E7576CF0C18F9D9D3BD4DD0508BDB90A95B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishOptimize.xps.lock

Path C:\Users\Admin\Documents\UnpublishOptimize.xps.lock
Size 340KB
SHA256 39f3a3fb887deeffb6d5fe8a50092c2a3cb498cee353aefbb2cde99b092979c6
MD5 42411b34e0d34c31f28a571b78aad8a8
SHA1 098481ca7c08f505bc3b3d06aabc7242f67165ea
SHA512 626a1f2501d15d23b4d64bf02e3cbb78c3e2d91628480e757ca4cdb7a9ae06ddea232d98df6da26e0a6ba77f1cb03561923739738a2b5442795597fc17bc0272
SSDEEP 6144:w2wR7Z/ngIe1J+wVNoRgC/o6dPNhANr7cPz1h4cz1TL0gbKeaAr:w2wR7Z/OJrHIQkrANgzZh9KeaQ
TLSH
T1B07423279A8690E6E95B08BB23B2D8A234D64C75A78E031B5BD3725D051784CFF670B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitFormat.docx.lock

Path C:\Users\Admin\Documents\WaitFormat.docx.lock
Size 17KB
SHA256 5bdf2f34224feed4662ebe74b920a3987a3cd5a434df66fd92f5f10743668427
MD5 48dd1b34bb4613ac30a298029fa570da
SHA1 fb9261c65935451d4fd4f0f834717b60291bd47a
SHA512 63e30fe6256a9940f8d1a23514c65c3e7a7e2d9fb9e7b5427ac29c9ac621343c67591efcd146988307ff59db99cb90fa62dc2fda5ad09cbab816be82c575696e
SSDEEP 384:TfQ+ic2NU4PW/wnz6pJ1uKW6gzIH+WJz6E/5yBd1gjCBMFgbH:Sc2O4PCwnzQblW6UIeWJuEBy6jC6Fgz
TLSH
T13482D027A4324A61F8C9E623FBD90CD7977095D2B19CFAAF5D0863B8F6E56103007C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitUndo.dot.lock

Path C:\Users\Admin\Documents\WaitUndo.dot.lock
Size 255KB
SHA256 e210f87fc6dac1927810ea6af6c1ec3079ab0c6cee0b45014c27e03bafcec163
MD5 2ddd3cb0a71b7484f53ed6989fbb7008
SHA1 3161186b510c606a1e7ae7e09fcf1fd2a8f0dfa6
SHA512 49de18c2807a9fb9dcd5d86666f8fa6dfeb3e6f1dfca2dcd0a420c1553052e0f9c4fcfc0e38d5ff657f60153bcb2b2e5572ed1368c79f39e63518bd63388e3da
SSDEEP 6144:uDMnSvXn5TF/kW8a6PpZIlbSkTQ2xAouZ2DB0UU4:hoX5hsQgxkTpxQ2ty4
TLSH
T15A4422EAB99010921F1C945470681BED16A4E63371876912D01F4CB7E9FB3F9B88BB73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertRestore.asx

Path C:\Users\Admin\Downloads\AssertRestore.asx
Size 896KB
SHA256 0bfa8d21729d17c9471d095e7aa29f991da267fbc0b3cc1e76137a4bab0722bf
MD5 187dd00066e682cc184c1df971500ea7
SHA1 00dd384dda7d94529de51fddd94f3d7d8c658825
SHA512 02915c9f39521f66531e10964c315ca1c333f6f015fe440f3dfa98510494ed42eed1c73f11fd1ff4a3ced64ad0ad83cdebd28c1b62d28d31b567960bd18ee7fb
SSDEEP 24576:3KUxMqvvJLKLTjjFOJ4m0+7m+RZYQaE5CWwaoiRsQnGt+vx1J5a:NbkjjFO6F4YQvCYpGCJc
TLSH
T1081533017471612D9D984F0D0A98271B735F2A77C368F39A87A416FD4FBA3889CF72A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupUnlock.mp3

Path C:\Users\Admin\Downloads\BackupUnlock.mp3
Size 700KB
SHA256 4ba6dfb65b8689a9301a7306bda8538637a036fb11010ae9ae71101e032236fa
MD5 e381ef0163e434c0eb68c307b07a50ec
SHA1 b844a733e64f45e739801c765eeb6b0f05681d2f
SHA512 90c2ce23382b01ecc70f2b3c3f65e4a9a5d8fefa39531803f647deadec309dbffc2e2dfd4c7288ee5577c2beff6864c2d8ea08bd9d70c1fc8ec40645d02c7b7d
SSDEEP 12288:IdjnF5ne5ZF/r8y4WEyAgGWfkuAKoQgw2nMBfRSgunUJhg/GP:KnqnQ/HfuAhDw38bs2uP
TLSH
T1BAE43374455B1E7C5965CEDC41E53A937890E9E3CAB7E2834BAA314FBD0C03988DAED0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockCopy.ps1xml

Path C:\Users\Admin\Downloads\BlockCopy.ps1xml
Size 1.1MB
SHA256 67602e302d663a20e02b6c149050f53567a3fc79e0f30cb120d40710fa9a90d3
MD5 6079e06dee45deece434f29cbb1a58d4
SHA1 e6dc93430346b4a4662d24cc9b0d1086380d5523
SHA512 5299d0b79a6f76c5bde41f781c98dc927b2c8686d563e3b267dd93dbdbc5fcc21b68b29103be6cf2b6f10dd94de29cecb37190e6867a7e47008d94427774570a
SSDEEP 24576:2xy/YqdKGuz88NppLcVfpAX1B1p76CXp5VlMikgHyHRqgwSwY6ng6:2Cdo48z9cC1B1pesPlMOH3bY6d
TLSH
T11F45338E2B3E0FDC798EDB56F3D7B82AC37E1348989615963C3A516310AD460D6B4E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupExpand.tiff.lock

Path C:\Users\Admin\Pictures\BackupExpand.tiff.lock
Size 241KB
SHA256 fb83a8d5415d45db262b85924919e234dd603109cbf20633b24ac51effaa3704
MD5 677504809b2178e964988215d7eea8a8
SHA1 62c0330e3508e17746f5b85ca54f1b9dc9eb18e0
SHA512 a29e8259bbf82fb2709eba9eec3b4e19805ca34731f8aa27465ae095bfdfe427973e687f34de337705c6f72b24fb203eac62271ae808f54675f40cee09f5cf53
SSDEEP 6144:JGNxVoPLkmUMyIY+90Ug4zSWemRCYnUPS8HXUgzIA:0NxK1UnIY+90J4zNtNL8IA
TLSH
T1C7342326A2546A3FB477FC61B9ED339B903CEA135BBCC954626861177CDE60B890C780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupOpen.jpeg.lock

Path C:\Users\Admin\Pictures\BackupOpen.jpeg.lock
Size 504KB
SHA256 a268266d139d5bf65118480aa8e99ca0ede5997a64027c344ae2b79206768d09
MD5 6946b7404a3fc2a563499501cd230a88
SHA1 4dbba823068cc2738731468cec08b06b151b8089
SHA512 e11b1bb87368928d5eba196612f4e7db52033579adcf001c4e5baffc451b4485d6b77ceb23669677d9a721b6ae067dc37a7285933fa0ca303289f6f23d198d3d
SSDEEP 12288:QS26KweqgzG7y21HQ0C+pinv1P3CcuvOMV8VCKLAwhP2+n:QBYn2Ey21s+6VytOeACK8whO+n
TLSH
T10CB4232E6929407EF676F7CBE0ECCC1E29229987FC8463F26C534C956DA151C5BCAC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteCheckpoint.png.lock

Path C:\Users\Admin\Pictures\CompleteCheckpoint.png.lock
Size 256KB
SHA256 f7080b034b2f07635f34ebde1ee3ef9f8a268186d35095c05f1d78b2b26e00db
MD5 555c0b5a0a524328420226b7e63a2eb6
SHA1 b72db831bd3ab90276a17f7dcd7ef69f041de3c0
SHA512 70ad52edc7fb7c58ef0940e924af1da2718d89bcd586778be50c0150f27efd6cbcf1932ce822e4c29043789f04910e12c9cec990f602c1292b15263a9c66ddf1
SSDEEP 6144:K8hTBekEOfmJ3WiNcB75lOnKEjr38uvEae7jGILr:LhTgku2B9m9Le7qIv
TLSH
T114442383D2A874F2A124CD7539F611239D980AF077FD79F7DAF4F28828319D88954396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmMerge.svgz.lock

Path C:\Users\Admin\Pictures\ConfirmMerge.svgz.lock
Size 220KB
SHA256 acc6ae100dab39767c85bd12942a2eb96d309d53209d0d4f5e2e372fd23f86d2
MD5 5feb9e8b18ef3ca7c333558ab096486e
SHA1 5cc1a57269d09772943a8137d6ba6962412cd074
SHA512 e41ccfa2a454d04beb8d106de279b794304a02637608fde6ac86c52e1f7aa32ee46382cdea87ab747720948c417f771b2a03aab07c184f483eea52e60cf8b8df
SSDEEP 6144:uSuFUUIqLLbAAUgl0EZFJACydbtPIYbV/YY39BxyTd8yz:u3FT6y0E7GrTNB4Hz
TLSH
T1BD24122F7B127F48DC2F3D2E4785A87E59153F04D823EDA3B851099D574E19229EB807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromGet.cr2.lock

Path C:\Users\Admin\Pictures\ConvertFromGet.cr2.lock
Size 320KB
SHA256 d099c2b79c9026764ed68d0fff817c5b3265d59f7095d72014b666d2286eddea
MD5 85840b3a196ff769f1def518920bb962
SHA1 1557b4cea4dc50c4db114cae29477d891ab8d1fa
SHA512 2676a0d0ab9f60d2926e197e453fb8935aee44499407a1ac4017ffcb8734251b307f14af77c8cc9af3a8d4df7436506e8f1d99e74fd0e58ef77b96029cf1c391
SSDEEP 6144:xdTQsZwuO+PUIxaOrUchf63Zr9Cvnfl3HoNLUgPOLGEEuAklicaCQmSIeMKX:pZwuUYUCfV3l4NXPOCulAXMm
TLSH
T1B26423B5AF40F3E734DF7AE6E253F0052D2C8B2581856ACB5827B7CB036D0C85AD124A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToTest.tiff.lock

Path C:\Users\Admin\Pictures\ConvertToTest.tiff.lock
Size 170KB
SHA256 ff5759189b1abdfea1a70861d905fb72e105a32a00df5174c0838c63fd3ab9f0
MD5 f72751cb8f30a67cc7c9c243f8ca9b99
SHA1 c6eebb818a54f7b8b899a0e0988343f86848cc31
SHA512 0daac8783a9abab900fdab4f6138195932d11f0eae3fc1c4daac3fee9adc8ac567dc687e8b5c1a4bdb41991ef606d332a67c2dae376ff744f38c84efb7222b5c
SSDEEP 3072:8iBz158HaoyVlA5epeaBDS8siAhSTwOJMwAxWhwo8CsaXUmR2HyXPXUcrbJtIxo:8Ipi6oSFQeeqvTwEMDoznEmkyvUcptIO
TLSH
T14E042357D9CE0485CDA08F978467F0A61DB5DDE3A4E5031E3D88AFF126512C7482AB73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableRequest.dib.lock

Path C:\Users\Admin\Pictures\DisableRequest.dib.lock
Size 334KB
SHA256 5cbd8b7ad0af0fac528088b1c251667daa463dd2767c025e182977d52c3291a6
MD5 165580bbeba8e3df5f74d6720ccb880f
SHA1 4fbaf96174380058cf5a5006ea8a23fd28e7a1ab
SHA512 a2424a74c58675260a5fd86279b66eed67b28686b38722f3d86e374b7d3fd2e0150660fa5866c60f7006b65c6724673bb80a033ec8c502802e628dc11d485e55
SSDEEP 6144:GoBJChvbN64IZBk+otk54wJOKGCXITQvMekHuV5ND8BaQ:Raho4I/kftCBJOKGiIm95zQh
TLSH
T1B774233D292DF5DD09A43D683FF036AE1A8E4C3FB14784A581C4196A870EA1FD58ADE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectAssert.crw.lock

Path C:\Users\Admin\Pictures\DisconnectAssert.crw.lock
Size 341KB
SHA256 7117068d5c8cba031c72c1a9c348d3a1209584f113e3e8be64eda5c91b7a5f7d
MD5 de4694df6aa7949f6c5b71a927f0725a
SHA1 ad0ca246b29ac418177ebe4c77e9a0e798425ec4
SHA512 9ee3f8803e0e2567a1bcc66de8597f2fffa7f05d966558ab3f0d08aeecdc2f2f9b78f899ba69d10542a68cd400ed3a08be0833f41cb207af05f22f7419f1bc89
SSDEEP 6144:s4nnFhYjQJcsH+vvCq2mb0URRSmNRFcdQP/E9J43NvmXR4ytkJ/1bUr5y4:s4n++lWaqpxSmNRaT98gR4ytu9bU84
TLSH
T1607423CA29F1AB67C6D7E834B9785B34A9EE14C6133A900F9BA7B4E0CC1CF4447865C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectConvertTo.jpeg.lock

Path C:\Users\Admin\Pictures\DisconnectConvertTo.jpeg.lock
Size 362KB
SHA256 26f8c3f2451b7ddd5296e336f17300814b790157bc145899359302c1107bf734
MD5 9d72252cd43a9c1117e4360301d6402f
SHA1 2b6a2f1229c648870ac5885017a0680e49d4ea12
SHA512 485fca67da7e6fcf594bdf0cc46a1cff20fa8e4f6b0765ed281080d1c21a95ee4a76197621aa3be36673bb714753fe9e84a62697765e8da940480d42ba46f1ae
SSDEEP 6144:Dmkiv6ARDHmUuHVcKkyMw5jv/4Qr4dOcLWPK7khlP0vnPSUyq96wxvNan:DAv6AR7mUcWKXMq74kELWPK7kPYn2RG2
TLSH
T146842321C543CFFA6F1CA598D86318149178F9A56623734B9B247EC0A93B588789CBCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableClear.eps.lock

Path C:\Users\Admin\Pictures\EnableClear.eps.lock
Size 213KB
SHA256 2ce626015d5e32697f801da0a7f8de05b29bc0813e2fc064b449ef2bff4e3eea
MD5 2eaae7d5bff06f00e99ecdb3275c2a31
SHA1 21e4e4fdeda6b6d54f557dc8f0d2ac8390576564
SHA512 974e05ebbf58d0abd9c8ab572a5857475ea794b06010543e4d335adc44626d1ddb6158415b2d943dc3795e15861951a715df1300bd9aaab19568e60456207666
SSDEEP 6144:SwKGl2nw/PPCsnYDkOZjin4Rz0rLskbrSeTSl0xLHLL:SwrddOZG4zKLsgSluL
TLSH
T17824225DC88F68BD571CFC7809A50E9717432FB054B1C29506DB64A9CC373A3C86ABEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitStep.gif.lock

Path C:\Users\Admin\Pictures\ExitStep.gif.lock
Size 163KB
SHA256 6d9299144692c223655f67e5622e3917a8a6e9c851d21125f31c5d97333500e2
MD5 d8da4d55704482841e7d37cf4271bea3
SHA1 7596be07de89651a1c14d3b9fbf98ee409378b64
SHA512 09d45daef3a396eca11e6c5222cc2a59a4009b65a2ba3db4a041a66883779354d8a870ee1fb695962be669490854355e2d68bae25a7d5ccddb82c62e3826e4cf
SSDEEP 3072:YOZvbc4oRlqXcVz5/reRVU79SwSAwsIGOgUjBB5EC63EMwSUR79005g:HRbfoPqsVdCVQc7sIGRUb5ECbv3l+
TLSH
T1B2F3231533BF1EC2BB02402AAC54587D9A7491BA1E7D8F78F71CD993821982DBC9B849
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportDebug.gif.lock

Path C:\Users\Admin\Pictures\ExportDebug.gif.lock
Size 234KB
SHA256 20521e507e982f3f72a04f1af7a9caf594b21b8fe6850c6f69c8905d6ae362e6
MD5 725585fe30c07faaecb3971e7c13a740
SHA1 355fda7d4b5fcd9e5e092783bb997c92b7cd6676
SHA512 17d8392af3e75cf11f9c792e99f37fae5b0a44e4a4dd74afe9a321a1e67a83b1d82e944225774c06bea5cf0ac932e26750f557eec1f7172605fca161448fd930
SSDEEP 6144:ZVO0S1F8an366HKjfx0+vvSZwO6I9G5Vwe3J:3Qx7HKGLOImVweZ
TLSH
T10D34239B4EFD8868405083445FEE7BF7A61E2E2CC6F0937C5A6546A1CDB44EED10E81D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportPush.tif.lock

Path C:\Users\Admin\Pictures\ExportPush.tif.lock
Size 135KB
SHA256 d8b85b6eb3527aa084146282401704b947e78f87f4c3367a0cc867e1f0c7529c
MD5 cc2a92b55af4855965d21e00c7a8ba54
SHA1 e60980410adacb8c45030d3cc2b93b7157db40dd
SHA512 84dc9ebe339624080345a69dbf60087600f764f69981d7e943a5c7f133329cd075e505b9990b654b94721cbf2c685788dd2558aca875320af65b8fc15fc7c9df
SSDEEP 3072:KGUyYBjK0HSeNJ6Imhz41vnulYRPaDVWjMM+sLOzz:KvyYJbNJ6I0svJRPaDV8M1sE
TLSH
T159D31243D43EDD326099F7DEDEEBE10E066D62D03A2D5A0F0919A953CB422D1C8FE952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportRegister.bmp.lock

Path C:\Users\Admin\Pictures\ImportRegister.bmp.lock
Size 305KB
SHA256 fdb30c4cacd216c4eee094447822216ad19bd6cd64f53e03e5d34a1c5df934f1
MD5 787fad9f05c83aac546ea0a3f8a6784e
SHA1 d4e442db3dbc42afa2762cc7331db35ad94e84fd
SHA512 3d92ec0f46978f9cfc2da92fd1a919ac1b8b9c8acaf7946d2ed00538ff44d59847dd565846dd3dca37a7f61e07fc45b82e86b8c68eeb67fd2f53d0dc1fc75721
SSDEEP 6144:+LFykvQEPrq0YmFYNTzvbZg64eQlq9iqiq2gfiewU8MIKm66:GykvQKtcTzNp4G9iTqHfhX8Wm7
TLSH
T12D64239DC5D3A8ADD4FE925BA343DE6872A3386BD401008878B9FF60FCE295A4D7005D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeCompress.wmf.lock

Path C:\Users\Admin\Pictures\InvokeCompress.wmf.lock
Size 263KB
SHA256 b37115f2283f69decacb45fe410941a415fee3efc383959204b31aa1593f341b
MD5 9b7d62bfb8ccc61015dc698ed2117a31
SHA1 69753c3594037d083430b3750d14333c5b012c0a
SHA512 8bcfcfdd01cd2f0b327d57689aed8496ab5d422f0815fddd8e9eb3d8023b7584919a233113c00c6a72b955531284d4cacb0a1a97c2ec3823c298464f4544b4d9
SSDEEP 6144:H/ktyGakeYG0XjOjIMyO1lanv+9h8bETvq65p:HzPkeYGtMMr3QcWyvdn
TLSH
T1CF442344A260B5806E5D7BB3A1E88A1A3584CC835B871FFDE1B81736BDB1757B31831E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeConfirm.gif.lock

Path C:\Users\Admin\Pictures\InvokeConfirm.gif.lock
Size 369KB
SHA256 aa273931dc2d2d18a51511cf3e3b61b20beb2c6375261382b6fb18a391ffc370
MD5 84ad39c8735dc58ab22f1be1fc9512c7
SHA1 5041146f7405e64816f940f17ca11f9f92a59b3a
SHA512 db12fbdffe532bc75785594afe345cb2e2a79aa4f772c3b5176be4df0e90c9a4de215abb8bf4addffd6418f65ec0ece85b9083b47332ffcdc2a52c3b0549491e
SSDEEP 6144:ChMhfY2s/a8fPDyLa0bTjVpTMy8njzoo0G+I/XE60n+PYcQEt30Egu085rbdqJW1:1hfNs/TTyLa0bTj3P8nj7VTvEYAEtkEp
TLSH
T1D38423C852F5573905AA8D39CE392812517605B0D4B2DE8F19B22FA7AFE0BD3F0451EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitBlock.bmp.lock

Path C:\Users\Admin\Pictures\LimitBlock.bmp.lock
Size 227KB
SHA256 38eb8694493951ba0d76ae46bab06f981b82fbec7c0c7c961f905fd00c0ca6e4
MD5 8dde5198578a9a9d0c237c8bf9fabe29
SHA1 dfab39a1f026438532d2b900105d0860275352f6
SHA512 9490d02869368463bb3bd36f359856c3d41a48acecfb27a9f54065b32e4d67db7779a15a8c6cb7e0a80a6893136801455684dc8eea3e5167f128a7ce5b862355
SSDEEP 6144:6KFQ9XE7oYZGf+tgzxMkhglm0cwM8VRQNgeS6ru:iP+qKAQgx8VRQNgZEu
TLSH
T1B3342362011562DBEEC60E7D8B93471D1C0530F8258B1A0593D87E7DDBCB5A2CBE7E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitRevoke.dxf.lock

Path C:\Users\Admin\Pictures\LimitRevoke.dxf.lock
Size 348KB
SHA256 0033f2f5e48e693bdcdba5422e5da066e17f56c06efe174e9c753c9730e86f59
MD5 79186a27d885c83bce6ee91b0fe8be9c
SHA1 fcc1ce276b4435f5ab9911f5bf6fa49dd1b0d2ac
SHA512 d73b2ceab75d0a6367bfbb3d2b66cbaa329097736fa5b0fd580a00772c9c0276a9e150e7c1bc5a2386de97816e845aba23458f9f97db90603384f5b90b80833d
SSDEEP 6144:4BvknG64HMuoWEOwEsMunmfjphf1uGX0Zq1bIKoQLLTq33Cx03Ip6dNUlpA6:SjMUFIm7TVEabIKRLTA5ukNUjA6
TLSH
T1147423A05ABFD934347E7C981B8A8B98E5D2B436B35C185FB44B2E508119C38F6DA10F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureRevoke.tif.lock

Path C:\Users\Admin\Pictures\MeasureRevoke.tif.lock
Size 184KB
SHA256 148cb0eb7709fe4effbd6945bd39927c2e53de44dbffc3321fbf547cbb45cb33
MD5 7b5f98b229f1d1f3a8e4467f64d871af
SHA1 45ab904f7720d4bb7a251aff781c6d7ab85b6e0b
SHA512 fbd0fc52b6f52074af96a6cfc4f820a7a17af8c4ea044f901d0a4123da14c8f179fe059e0bd86467c3a52bcecd500cdcae0bea4ede92ca6e895fa7393990963c
SSDEEP 3072:6jDGt56Yvce5xwxPT5RyPZ1/ldVTxMuttClFb3PK4rdWUpeST9trRTuRtEJc9A9/:p5lwxnq/llR7ClFbyaL/0tvD0
TLSH
T12C0423CDBE9F82F696B9A51D762F96558724DC54CC1088A8F89C7444ABE0330FC986F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectConvertFrom.svg.lock

Path C:\Users\Admin\Pictures\ProtectConvertFrom.svg.lock
Size 192KB
SHA256 ed85b9406f94a2bdc6f362c3c602dd9a86cc67eb9ef844d6369fca3f79b40ea6
MD5 be9b99c693396c06c3e3cbd9775eaa6a
SHA1 44e4070f33fa72f4361d7bba4e6dc1eb7646ac7b
SHA512 4af3554e5b2a61752a5e594da5a94764fa5f9408a83b6d99c1a85d1df287bd900adf7e23042ebcab471c77a56f4e5532a4bfab880c94e4dfc51373579a3df46f
SSDEEP 3072:iOCGycWd2T4i//VGNDV0+678HvbQFZCF++JWFEQDocph6UIBEvH:ZpWTiVGNDV0CAUF+TFWPO
TLSH
T17F1412BB420E5D71D5BDDACF240D161549F8A2A5CDCE7E9E14C0DB3AC96BAB6BCC8400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveSelect.gif.lock

Path C:\Users\Admin\Pictures\ReceiveSelect.gif.lock
Size 128KB
SHA256 f9b7acf888f98b676979a74b30bc9bc3e45cefa9d523dc8a1a2a426c54723d4d
MD5 e91d20074d0b2c37dceb1ccccb68c4e4
SHA1 42ccaac61833de3ef2ddda0657d6a7f4ddf94e02
SHA512 21827b4ad88b130e0a98f9551ed36664852866b57b409f14bb27fb786b823816b9d3b3bd21e857f326418ccd67756decf8a6a8b98407b39460a18cd086a519ca
SSDEEP 3072:FRQEHTH9dDB/wbkaocP3ZYfdJVVx6FXJlH5fajwtiLb3me+C:7xHD9dSbkaocPyfvnOBBtXvC
TLSH
T197D312F61E9B333621708825EDFAE02ADE01434A6B0D8EE5763A571B651601E77FCCD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveSet.svg.lock

Path C:\Users\Admin\Pictures\ReceiveSet.svg.lock
Size 298KB
SHA256 5eed672a72ebb484e9d5ebf736bcfa1c9314a8d1255dcb10c60864a057edcee5
MD5 1414fde125ac84d682ccd08e785b7cac
SHA1 2e4110d46a85eb2eef525cbe1b25b7939e058038
SHA512 be147adcd7b207165c36197439e04450915eec244d8d7427e7c95368921ff5ce6946d5f482e3d80ce4f4449fa70fc63e49969f9e4a0de1c8569da660d8dbbad3
SSDEEP 6144:hFZMIpO/WEVGfU0zqJs198o9ETrv3mva1YVpr0t0MJf/vOuq+H:hz2/JGf18oOuyiV2JnvOuD
TLSH
T1C65423D2C856E1E67924F9C79F82FD1A74B955E81F59CDA39803A6BCEC86D30F381810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterRequest.svg.lock

Path C:\Users\Admin\Pictures\RegisterRequest.svg.lock
Size 355KB
SHA256 b488b62016f77202356d2cd135c65eff4ef0498e7fd10c1522b319351f30f0bb
MD5 1dee3cb2ca9554272e74394cf8169adb
SHA1 1ccb4a832c52323364d4e1b120e29af2ab9ff795
SHA512 8122f189a1118cbf8f048096e62289a161c19a8dc82d1903497d6ad8905ac53a35ec217ace295d7d32aeb98cc638fcc99c0f2edfc99ca86a504c7c5c13b37164
SSDEEP 6144:haxae9zwysF7d86gxofdKlkg0zutMx/eF3OmwZBHcASgv1vhE:q5aFp8/EdKlkxzut4e5OlSgv1v6
TLSH
T1E87423E6DE23EFE05654DE91102492BBA88DDDEDCB96BE3A108F678FDC963710044618
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairResize.tif.lock

Path C:\Users\Admin\Pictures\RepairResize.tif.lock
Size 199KB
SHA256 65376a02cfa6d89acd3010285ca5eb68572b40a46865973c150615554e06c831
MD5 2722b63b2f2a92440319bf646341ef82
SHA1 38eac8291dc2c8c504ad89096ce8153d97355f78
SHA512 dfc418db1254283820620f1358bfe99949c26a42ca4d515c78a0ec2b08e1494806fff82d3de9b3a72294e4feb7faf2dcc6eb7efffdff0babf4953af3d16b3b53
SSDEEP 6144:KfX27p3J7pOAMwsWayKcejyYZEihnFY2UA:KfXKZ7pOViebZj/F
TLSH
T1F014122B26FB3A84236005F9F55D7548E23740AA8E3D7D359E193553B2CC3BD3D442A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectGroup.png.lock

Path C:\Users\Admin\Pictures\SelectGroup.png.lock
Size 177KB
SHA256 7eba6cd3c9a040ffbdb6db1db642f264da7964838926110aec95f35acd02c27f
MD5 669308e793ccda29456cdd637a52ef13
SHA1 d3208debf9bb186d285c1f3c2ec6e10c1e74699c
SHA512 0dbc86485367be588be81e95672b46c8deb845f785a6b7cb75add7edede3d84128762558a435c699ab86f03fad65d535f815d2ac5fdf3aabfb6f8438e9c62601
SSDEEP 3072:7lIxL9BiCuRxN6oDopaj6U6amOKBjI5utAp8YgNLVxjTKy8AqTaGnjHCkFZfur4T:R8L9ruRxN0LU6mKu5Wa8YgZVX8AqTaGj
TLSH
T1CB0422F2C134D77393C9905F743B98A1E5682665F613DA2CEDAF7DA024D0A8B334817A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetImport.jpg.lock

Path C:\Users\Admin\Pictures\SetImport.jpg.lock
Size 312KB
SHA256 44bbad6c6cf04779f400aecf3b00fd64c83b98ae874b3b02853b2bf2ad797dff
MD5 ff77e35a929a9817e22bcb3da7b73b67
SHA1 e6a05bd445ce948d15c0eecd7e426c7118cb5fd9
SHA512 62864c4d642e800c75d52e00a0733a5b67593b1a983aacfd8f8a39fdf96379f84c0df5ff81b43bd10bb0e6ab563c1ae2c74eeebe1eeea927aa6141f2090858bd
SSDEEP 6144:CrA74VZVeGDfa+5xvCrTbqs71dviztmL+9kV3N1GOgy/ZnpyvWcje:CrA74PxRKrv51hDi9UHvVyucje
TLSH
T1E364239D595A343D13887D7EF4C23A21E4875C74AE1581DDE28C06EFA3EDEB06DA120B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetMerge.crw.lock

Path C:\Users\Admin\Pictures\SetMerge.crw.lock
Size 284KB
SHA256 f2784d88e14eb3ef3bb086b579775e94538f61d289aaf9cca0409fe55f415bec
MD5 f837aa2080fc16ef5e23a8503e29909f
SHA1 059113de48229d340f64d1f66683be3e7fc73215
SHA512 593438852acecc55db43737d12f438d7178817708ab4de7cff129c5af57c14b422ddb1dc22213117e5a1668b4d6dde5cebac4fe557b3fde73091152720d1b464
SSDEEP 6144:z+Ux/bX+YdjmsthkOT/N0usIVzVUJJzgLTFt84Hamz:z+I/9msSSyOVhUvoFtj5z
TLSH
T1AA5423188489BC81121CE52F1D515AA8EFE658B439137E313ECEFF2D5A28CE87816737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetSave.dwg.lock

Path C:\Users\Admin\Pictures\SetSave.dwg.lock
Size 206KB
SHA256 7811927dc50cfe25fad4f4cb5960b3ab122aa30c8517a7d516ff2f81d236a7e1
MD5 35658d7d12264fcf631ac28552689a0c
SHA1 2b0fc4ada56ae05aefb23b3f9efb4c4a35523cb7
SHA512 60baa0d284d612e1b1367c6de602a7935f9937edecf288de63d122acb98c4b177ad570ab420d29f38c287c715bf0b805e6f2a80b721c8bf170d36b88d0c3c289
SSDEEP 6144:IuMaTZU3pQ/4kGbSEU6TNTCjVgoEC6oQhOyrfPTKM7PCt0JXH:Iufcq/4rOREVx/HKcPH
TLSH
T17B24222799182D825504375BE7FA1AE2D99964F975C80C9C884B5314CEEFC2387CEECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncEnable.ico.lock

Path C:\Users\Admin\Pictures\SyncEnable.ico.lock
Size 270KB
SHA256 247e07e7defd95ea4348b46da1c95d6e36c95d4b057069b1ae89f2ca99e8d204
MD5 2be189bd0619455a8a2a53427cabf943
SHA1 c583aa8f515051dba04ec0f3b9dfbe7d9f7fdfbf
SHA512 e1cb25a5c218ca00741276a45b0763bdb7e03f8bd5232686db52045b8ede10cda0b9466cd0fac7da9d1ad2ff430df6124507cd9b523d37b77e07e452a84402d8
SSDEEP 6144:2dmuM0N5aUQ10EiEBNu8w4EhMkpkGh5ScamRnjcXVEKK:2oVj0EBBNbgMk6MScPRj2VEj
TLSH
T12444233D6BBEECCF1F04A7511BA984D3CBBF92D4159902C95D4D3B2938C61636111367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncRename.tiff.lock

Path C:\Users\Admin\Pictures\SyncRename.tiff.lock
Size 156KB
SHA256 eaca51d1172c422b70bca8fc34ed31692b3262cac3e8b7739c89c7b09cf73d26
MD5 4c76bcfffbb3b5dcf4f97ba3f73f9085
SHA1 fe8483f8bbdd5868c49af1c6c833df41d1c31b15
SHA512 6ab76b3023021cb7bd4fae79def4718fe377a44270e7bef13be96234c117850080b9edbae12f526b0f96aa331c58b30ea55507072cc3bda5750e198e5ef849b2
SSDEEP 3072:2OPQMW3cBtMErI4RCEi0xTaVGb2b11EnByYerxjRjVxshq7:2OPUsBacPCEi0xlwEnNGxtjCc
TLSH
T1DCF313A18C1381D0924197DA26FC57812D684D37FA88A8854A7BBCB66FB343A58E4CF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoApprove.png.lock

Path C:\Users\Admin\Pictures\UndoApprove.png.lock
Size 327KB
SHA256 cc3f139a833a792fd03abd188ce050024d873ceb832013a57adf228b47667390
MD5 2a75a2af79ab87eb002f3d871777336b
SHA1 cf03fec1580fc5ebfab240988397025977a644a0
SHA512 7812b48563d908182a64a1b8de437715750c708587ae04e8e3e0f85957a9d73410d43fda1594da9615a0b5d48d7a7537b060e85394707ef7b96baf795c256e8e
SSDEEP 6144:DhRFn0eFTrJEUhgY6EHG22grtpgrZf0nTeDGBYehRbCGRNIWx:Dh30eNrXgYcZftKBvhRnLPx
TLSH
T1416423DC64FFA9EE7C434C17B9DE4F1611E9826DA8CF2A956E11159C0D8C9042BE8F88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterRemove.jpeg.lock

Path C:\Users\Admin\Pictures\UnregisterRemove.jpeg.lock
Size 277KB
SHA256 72f025933ad00eae4b2061cd5d292786cbaabc240372f58c3712c41e30d7f398
MD5 8f5361617e4943a49eb33950704d4f4b
SHA1 9e603a8b6b8e57aedba61afebbf891d5e1c32479
SHA512 0579860e658fb871623120069fa190e4fcd6c05634f21f6eecef1f98181f55f7cae6735724d295120dcbe2bb534c2859e7b005e1028f58d7059f5c44ee133bdb
SSDEEP 6144:v3BMcTvFNJ8QnXpAh1Q2iIdOU079xSudbHi2BLMAJ0ZcZWLNO:vrvFN6trd7dbI5LMAJ0+ULNO
TLSH
T17154239D6E9278CE320952E8D96039E777353AFAE7D18E43115C8C8A27CC129877DCB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateTest.tif.lock

Path C:\Users\Admin\Pictures\UpdateTest.tif.lock
Size 142KB
SHA256 b39b6991979f766f5ba5a258e18d105f602714bc3d7ebf136dabae9a07d88304
MD5 c0ce2aaa968b5a152991a17b817597f5
SHA1 e86ebd4a500d4a784cad60af81166ef196198f78
SHA512 b0b62a2b2c64fcfb273da80cd68f49d7342bf3de934e192bb2903671173801d938c78bb796da76aca4dc09e95540b76fdfd9f5172194e2ab559c0d7dda6ec923
SSDEEP 3072:IfA84+nfFUFODUk58WX+LSVHFCsGzrYogrHtkQsuLybLW40wiLIiw/Df0PG:If4+naFODR5RHDNxGbKwElSz
TLSH
T1C5E3128D7FBB02F78EA715F1A315C6726182D169289B7470EB321DC0C5808A2F3ADB91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseTrace.wmf.lock

Path C:\Users\Admin\Pictures\UseTrace.wmf.lock
Size 291KB
SHA256 e66920b2d2c919e67949b288f37d38cbd0afd448eab9829204f2c555a9b1cc8f
MD5 43bf134da71133b0bd1842957d2818b3
SHA1 58ce57b0ccba23d599422962af3b9df1d436a356
SHA512 bf14560b4b9a3e0d86bcba4bd88d62bf3ba8f46fc6744c7106cd2ef7c28d65610f8cf43f05d34ec4cc7e2cf084436b27a98e9423900d204076afdf2072dca351
SSDEEP 6144:astu2ZD2nMd1fUPIVIWF8RboMX7R7U/ySlY5D3ILofmbMTRKUujj:ua2MdBC+IQyNU/uDILofmbMTzujj
TLSH
T13B5423E18782E14AA7B0359CC805984E61BD970B6B9F3F271909E1927D2DF9CD840FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sDJnM.jpg.lock

Path C:\Users\Admin\Pictures\sDJnM.jpg.lock
Size 24KB
SHA256 b300b7c08942c8d84833af7aa561159abc80b885705d3c9d91c5864bb35ae924
MD5 51685665422c792de1925510ca15f3b0
SHA1 e7b40426da1944af999ed6d2bc884c4803b43fdb
SHA512 453a5241b83baa0f0aba6893314a54cdcf6f2dc1979d6345afa53a0b85c64626282ab7b10258917fa2b4565334b16ade3575eef3b99fcb8927b8941db5f3a2d7
SSDEEP 768:x7UGXuVMV2IZyvWJeQUVhxDncU2RRrF57TZAtG5:VUGHV2IZfe7xDwVF5ZAc
TLSH
T1F9B2E00773BFBAF3662952EE5142531C6269B298EC2E852D12379C3D04D9FC8D06A53F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4068-23-0x00000000762F0000-0x000000007657A000-memory.dmp

Download

memory/4068-27-0x00000000762F0000-0x000000007657A000-memory.dmp

Download

memory/4068-26-0x00000000762F0000-0x000000007657A000-memory.dmp

Download

memory/4068-25-0x00000000008F0000-0x000000000115C000-memory.dmp

Download

memory/4068-16-0x00000000008F0000-0x000000000115C000-memory.dmp

Download

memory/4068-24-0x00000000008F0000-0x000000000115C000-memory.dmp

Download

memory/4068-136-0x00000000008F0000-0x000000000115C000-memory.dmp

Download

memory/4068-18-0x000000007643E000-0x000000007643F000-memory.dmp

Download

memory/4068-201-0x00000000762F0000-0x000000007657A000-memory.dmp

Download

memory/4652-1-0x0000000000530000-0x00000000008A0000-memory.dmp

Download

memory/4652-0-0x0000000074C82000-0x0000000074C83000-memory.dmp

Download

memory/4652-3-0x00000000053D0000-0x0000000005462000-memory.dmp

Download

memory/4652-2-0x0000000005990000-0x0000000005F4A000-memory.dmp

Download

memory/4652-17-0x0000000074C70000-0x000000007542C000-memory.dmp

Download

memory/4652-5-0x0000000074C70000-0x000000007542C000-memory.dmp

Download

memory/4652-4-0x00000000053B0000-0x00000000053BA000-memory.dmp

Download