Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 21:51
Behavioral task
behavioral1
Sample
SimpleZapretGUI-Setup-1.0.0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
SimpleZapretGUI-Setup-1.0.0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
20 signatures
150 seconds
General
- Target SimpleZapretGUI-Setup-1.0.0.exe
- Size 25.0MB
- Sample261027-1qkn3aee72
- SHA256 54fefdfef27f1d0d4c98960281f4959ce5b16e9655a5bbf460f971c37325b95c
- MD5 9564c140e2f3e9a588cc5214a74f7797
- SHA1 46785e424e4da37c1754e26664645cd2273bfba2
- SHA512 7c0ed72931a6afbbe99bfa48318ec75e82f36dc5c2a1bec41401372de67be5ac7d70d1217e99b89cf661ac0c876fdea8c4c265cab11c6070cb25e86f2ecca651
- SSDEEP 786432:I+EtdmAKsYlE4yuCX8lfSo0QrnAUKXkKuEsu:yzdPz+qTsn3ZEx
- TLSH T1AB47333BB15B753EE06E1A3639B29214943B2B2079268C16E5F4CC5CCF291721E3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 2968 SimpleZapretGUI-Setup-1.0.0.tmp 1224 SimpleZapretGUI.exe - Loads dropped DLL 39 IoCs
pid Process 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 10 raw.githubusercontent.com 1 raw.githubusercontent.com 8 discord.com 9 discord.com - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-NA96Y81TVQ.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-XBGU6QT9IO.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-2SJ3IRH9EB.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-VM8CC4GIKI.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\MSVCP140_1.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\qtga.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\shiboken6\VCRUNTIME140_1.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\is-SFNVDKYR48.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\is-QW5UW890U6.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-K96MVQGD15.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-EFESUIYH96.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-LIZZ55T8AV.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\python3.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\unins000.dat SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\is-C90NSMKPH0.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\is-XGNYFP8PMF.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-QHTKXPC02H.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-UQ6PPGV6IM.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-P2LG6OR6E6.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-XNR3WWM1YG.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\libffi-7.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\pyside6.abi3.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\is-YB0NORAMRT.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\is-UN1X4DM2IT.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\is-EDCNP2BOZ8.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-W2KMIEJJSC.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-9ZUM5K7NUI.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-C9HSZ9DPL2.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Svg.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\tls\qopensslbackend.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\is-HTXJ21XZOT.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\is-XGKI6PDHH9.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\styles\is-KFRF3ZDTS8.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-JYSFL6EEE6.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Gui.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\qicns.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\is-8N6VYN2KMA.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-XM0SJTEZJN.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-7M8ZDPFWP5.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\shiboken6\is-15YSFTHYJJ.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\qgif.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Core.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\qwebp.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\is-PHQQHHSXHH.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-2CSRLTLYX9.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-EUFDZWTA7J.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-VI36RQVREA.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-DBT7JJ1EEM.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\is-I1FF6OF4RR.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\is-893VH5XUS9.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\is-HZZEKF6U8I.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-UD2YZZHNK5.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-1NOQ3PWUZL.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\unins000.dat SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\SimpleZapretGUI.exe SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\VCRUNTIME140_1.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\shiboken6\VCRUNTIME140.dll SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\imageformats\qjpeg.dll SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\is-ZI63JV5BB1.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-VEIXC5VEHE.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-IQ44DWA8BM.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-65HGLGKIN9.tmp SimpleZapretGUI-Setup-1.0.0.tmp File created C:\Program Files\SimpleZapretGUI\is-APGB93GNNL.tmp SimpleZapretGUI-Setup-1.0.0.tmp File opened for modification C:\Program Files\SimpleZapretGUI\_internal\PySide6\plugins\platforms\qdirect2d.dll SimpleZapretGUI-Setup-1.0.0.tmp - Launches sc.exe 64 IoCs
Sc.exe is a Windows utlilty to control services on the system.
pid Process 2928 sc.exe 1056 sc.exe 428 sc.exe 5360 sc.exe 4580 sc.exe 4792 sc.exe 2348 sc.exe 3296 sc.exe 5316 sc.exe 3560 sc.exe 4160 sc.exe 3540 sc.exe 1856 sc.exe 3848 sc.exe 5768 sc.exe 1296 sc.exe 2016 sc.exe 1340 sc.exe 3428 sc.exe 2944 sc.exe 3488 sc.exe 2488 sc.exe 4488 sc.exe 5204 sc.exe 4140 sc.exe 1056 sc.exe 3456 sc.exe 5608 sc.exe 936 sc.exe 3412 sc.exe 3568 sc.exe 6044 sc.exe 2788 sc.exe 4688 sc.exe 5940 sc.exe 2488 sc.exe 2228 sc.exe 4820 sc.exe 3500 sc.exe 4460 sc.exe 3020 sc.exe 404 sc.exe 5832 sc.exe 4532 sc.exe 3268 sc.exe 5072 sc.exe 1804 sc.exe 4360 sc.exe 5720 sc.exe 4260 sc.exe 1624 sc.exe 4836 sc.exe 3844 sc.exe 5576 sc.exe 2192 sc.exe 4688 sc.exe 2224 sc.exe 4848 sc.exe 3572 sc.exe 2148 sc.exe 4256 sc.exe 1488 sc.exe 4604 sc.exe 2000 sc.exe - Detects Pyinstaller 1 IoCs
resource yara_rule behavioral2/files/0x000c00000001c5f0-502.dat pyinstaller - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 2 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4764 cmd.exe 2568 cmd.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SimpleZapretGUI.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SimpleZapretGUI.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SimpleZapretGUI-Setup-1.0.0.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SimpleZapretGUI-Setup-1.0.0.tmp - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/1504-0-0x00000000000C0000-0x00000000001A3000-memory.dmp innosetup behavioral2/memory/1504-8-0x00000000000C0000-0x00000000001A3000-memory.dmp innosetup behavioral2/memory/1504-567-0x00000000000C0000-0x00000000001A3000-memory.dmp innosetup - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1224 SimpleZapretGUI.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2968 SimpleZapretGUI-Setup-1.0.0.tmp 2968 SimpleZapretGUI-Setup-1.0.0.tmp 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1224 SimpleZapretGUI.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1224 SimpleZapretGUI.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 2968 SimpleZapretGUI-Setup-1.0.0.tmp 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe 1224 SimpleZapretGUI.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1504 wrote to memory of 2968 1504 SimpleZapretGUI-Setup-1.0.0.exe 89 PID 2968 wrote to memory of 1224 2968 SimpleZapretGUI-Setup-1.0.0.tmp 92 PID 1224 wrote to memory of 2568 1224 SimpleZapretGUI.exe 93 PID 1224 wrote to memory of 4764 1224 SimpleZapretGUI.exe 95 PID 1224 wrote to memory of 5768 1224 SimpleZapretGUI.exe 97 PID 1224 wrote to memory of 3268 1224 SimpleZapretGUI.exe 99 PID 1224 wrote to memory of 5448 1224 SimpleZapretGUI.exe 101 PID 1224 wrote to memory of 3348 1224 SimpleZapretGUI.exe 103 PID 1224 wrote to memory of 1056 1224 SimpleZapretGUI.exe 105 PID 1224 wrote to memory of 428 1224 SimpleZapretGUI.exe 107 PID 1224 wrote to memory of 3568 1224 SimpleZapretGUI.exe 109 PID 1224 wrote to memory of 2148 1224 SimpleZapretGUI.exe 111 PID 1224 wrote to memory of 700 1224 SimpleZapretGUI.exe 113 PID 1224 wrote to memory of 3456 1224 SimpleZapretGUI.exe 115 PID 1224 wrote to memory of 4256 1224 SimpleZapretGUI.exe 117 PID 1224 wrote to memory of 5608 1224 SimpleZapretGUI.exe 119 PID 1224 wrote to memory of 3540 1224 SimpleZapretGUI.exe 121 PID 1224 wrote to memory of 5720 1224 SimpleZapretGUI.exe 123 PID 1224 wrote to memory of 1856 1224 SimpleZapretGUI.exe 125 PID 1224 wrote to memory of 460 1224 SimpleZapretGUI.exe 127 PID 1224 wrote to memory of 5360 1224 SimpleZapretGUI.exe 129 PID 1224 wrote to memory of 6044 1224 SimpleZapretGUI.exe 131 PID 1224 wrote to memory of 2788 1224 SimpleZapretGUI.exe 133 PID 1224 wrote to memory of 4584 1224 SimpleZapretGUI.exe 135 PID 1224 wrote to memory of 4376 1224 SimpleZapretGUI.exe 137 PID 1224 wrote to memory of 3656 1224 SimpleZapretGUI.exe 139 PID 1224 wrote to memory of 3560 1224 SimpleZapretGUI.exe 141 PID 1224 wrote to memory of 4260 1224 SimpleZapretGUI.exe 143 PID 1224 wrote to memory of 4740 1224 SimpleZapretGUI.exe 145 PID 1224 wrote to memory of 2488 1224 SimpleZapretGUI.exe 147 PID 1224 wrote to memory of 3500 1224 SimpleZapretGUI.exe 149 PID 1224 wrote to memory of 4160 1224 SimpleZapretGUI.exe 151 PID 1224 wrote to memory of 1624 1224 SimpleZapretGUI.exe 153 PID 1224 wrote to memory of 1488 1224 SimpleZapretGUI.exe 155 PID 1224 wrote to memory of 4460 1224 SimpleZapretGUI.exe 157 PID 1224 wrote to memory of 3848 1224 SimpleZapretGUI.exe 159 PID 1224 wrote to memory of 4580 1224 SimpleZapretGUI.exe 161 PID 1224 wrote to memory of 5072 1224 SimpleZapretGUI.exe 163 PID 1224 wrote to memory of 4604 1224 SimpleZapretGUI.exe 165 PID 1224 wrote to memory of 4488 1224 SimpleZapretGUI.exe 167 PID 1224 wrote to memory of 4812 1224 SimpleZapretGUI.exe 169 PID 1224 wrote to memory of 5768 1224 SimpleZapretGUI.exe 171 PID 1224 wrote to memory of 4792 1224 SimpleZapretGUI.exe 173 PID 1224 wrote to memory of 4688 1224 SimpleZapretGUI.exe 175 PID 1224 wrote to memory of 1340 1224 SimpleZapretGUI.exe 177 PID 1224 wrote to memory of 936 1224 SimpleZapretGUI.exe 179 PID 1224 wrote to memory of 4836 1224 SimpleZapretGUI.exe 181 PID 1224 wrote to memory of 5204 1224 SimpleZapretGUI.exe 183 PID 1224 wrote to memory of 904 1224 SimpleZapretGUI.exe 185 PID 1224 wrote to memory of 2224 1224 SimpleZapretGUI.exe 187 PID 1224 wrote to memory of 3020 1224 SimpleZapretGUI.exe 189 PID 1224 wrote to memory of 2000 1224 SimpleZapretGUI.exe 191 PID 1224 wrote to memory of 544 1224 SimpleZapretGUI.exe 193 PID 1224 wrote to memory of 2348 1224 SimpleZapretGUI.exe 195 PID 1224 wrote to memory of 5608 1224 SimpleZapretGUI.exe 197 PID 1224 wrote to memory of 4188 1224 SimpleZapretGUI.exe 199 PID 1224 wrote to memory of 1296 1224 SimpleZapretGUI.exe 201 PID 1224 wrote to memory of 1856 1224 SimpleZapretGUI.exe 203 PID 1224 wrote to memory of 3844 1224 SimpleZapretGUI.exe 205 PID 1224 wrote to memory of 3296 1224 SimpleZapretGUI.exe 207 PID 1224 wrote to memory of 4848 1224 SimpleZapretGUI.exe 209 PID 1224 wrote to memory of 2016 1224 SimpleZapretGUI.exe 211 PID 1224 wrote to memory of 3428 1224 SimpleZapretGUI.exe 213 PID 1224 wrote to memory of 1456 1224 SimpleZapretGUI.exe 215 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\SimpleZapretGUI-Setup-1.0.0.exe"C:\Users\Admin\AppData\Local\Temp\SimpleZapretGUI-Setup-1.0.0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1504 -
C:\Users\Admin\AppData\Local\Temp\is-DB5NEE55K1.tmp\SimpleZapretGUI-Setup-1.0.0.tmp"C:\Users\Admin\AppData\Local\Temp\is-DB5NEE55K1.tmp\SimpleZapretGUI-Setup-1.0.0.tmp" /SL5="$40118,24946235,869376,C:\Users\Admin\AppData\Local\Temp\SimpleZapretGUI-Setup-1.0.0.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2968 -
C:\Program Files\SimpleZapretGUI\SimpleZapretGUI.exe"C:\Program Files\SimpleZapretGUI\SimpleZapretGUI.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1224 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"4⤵
- Executes a command shell one-liner
PID:2568
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"4⤵
- Executes a command shell one-liner
PID:4764
-
-
C:\Windows\SYSTEM32\schtasks.exeschtasks /Query /TN SimpleZapretGUI4⤵PID:5768
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:3268
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:5448
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:3348
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:1056
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:428
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3568
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2148
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:700
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:3456
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4256
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5608
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3540
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5720
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:1856
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:460
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:5360
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:6044
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2788
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:4584
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:4376
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:3656
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3560
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4260
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:4740
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2488
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3500
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4160
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:1624
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:1488
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4460
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:3848
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4580
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5072
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4604
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4488
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:4812
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5768
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4792
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4688
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:1340
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:936
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4836
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5204
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:904
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2224
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3020
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2000
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:544
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2348
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:5608
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:4188
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:1296
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:1856
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3844
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:3296
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4848
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:2016
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3428
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:1456
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:5548
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:3212
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:5316
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:5940
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:4056
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:4872
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2488
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:404
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:4160
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:4980
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:5576
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4140
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:5832
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:5308
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2228
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:1804
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2192
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:3572
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2928
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵PID:1120
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:4820
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4688
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:2944
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:1056
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3412
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4532
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵PID:2392
-
-
C:\Windows\SYSTEM32\sc.exesc query zapret4⤵
- Launches sc.exe
PID:4360
-
-
C:\Windows\SYSTEM32\sc.exesc query WinDivert4⤵
- Launches sc.exe
PID:3488
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\SimpleZapretGUI\SimpleZapretGUI.exe
- Size 1.8MB
- SHA256 23b3a248bc34641efc82d152f6eddd1cfc76827248b086e977e4726ed14fb264
- MD5 f60b590d358cbc2bbf9f087ecc70b26f
- SHA1 2a3c20a6a46ec1ae509018a35e272433e4116010
- SHA512 a67c46d6b077cf8491c13d33bd434d5db8ab670c8592dba3f118002d13fe33cd446a9c50274ccb6a5673c1d8df1ebcff618910bf159862af104c6c426284e7cc
- SSDEEP 49152:6P5Kgf9/NeM0vIf2J1k+D0ukWw1KYKYognA:e/NeM81k+DXnjYKFgn
- TLSH T159851254F7E411F6F8B3963CC9A3855ADAB178650760C6EF43A042293F23BE06D3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\MSVCP140_1.dll
- Size 26KB
- SHA256 d419d24b0a76366f5c9d908b0e45fe70e9e9154bb8ad5f3de42070f2337f857b
- MD5 fe08ad3494b9568298efb27fdcb58fec
- SHA1 8b1d2d92d9bab5af2dfd861c3028a03208f89fd0
- SHA512 fcc27ecdc27fc28f9d3be2d0dd7d144f68866df9f937e64c459fcc51469facf4ae3bacd796a7fc1bad0d3b4f01537bccc2de67464f37ab631d444329cf24b5fc
- SSDEEP 384:3j72J9VQH+qNy09dmFWcS5gW7rHQIYiu9cQrPwwy8RbmL4nNypf5V:/8QH+qNy0PmgN5YiuiQrh5ALL
- TLSH T133C28D43E6108C05EC178934D8C69D69FA76F1904F92D3CB6359822D0FA63C27EBD769
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\MSVCP140_2.dll
- Size 265KB
- SHA256 89917964abb6ca16a260cab258e180c3abc239b5af00eed659d0edf0efdd339c
- MD5 7c25f16f795675c700fda2158053f3af
- SHA1 dab38fb397f538c2d5fa0125cca52ac6b3157cf0
- SHA512 ea6ffcb886faeace568741226f72afe5f801cfdcfe6e24b2d21b98d7ee680e8be7034e97c64dda37c940ca08382f13ec87ac0d559336745f85203ad1d385deb9
- SSDEEP 3072:FJ51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD79o:FJbjwvnQo/iy5L/XxTWrP
- TLSH T16D442812B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9F2BA533FE3529
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Core.dll
- Size 9.9MB
- SHA256 d6a3c37c5263c5d418fc0e80b722bc9fca7c0859e6f635f9624a2fde00bdc653
- MD5 0a09e0fee82bd90bec334e8f03a1a042
- SHA1 a4e82f844dfafee08fbe3079cfabad47f980753d
- SHA512 34a776db3e204b1aaa2c20335e9d5dfb3dd121d2b46899b01dcdc69c6af8523ede05fcb748818ae563588dd9711b812cd5dbd10a33c5cdf855ba791891bff5b9
- SSDEEP 98304:UoB9Y4db9sWFZhCUlKFdu9CwJsv6t3Im6hJMANkMa/3qzk:RYoJsWkkKFdu9CwJsv6t3qSAq/3qI
- TLSH T1BEA6290766FA0141F6F7D634CAB75126DB72BC865B3196DF025822291E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Gui.dll
- Size 9.1MB
- SHA256 ae29b005f51b6850bf57fa06fced0dc8c7039fd6fafc3bfbcfe76e38adc7abf1
- MD5 a5b87eecfa8ca85d1c52335404f8f437
- SHA1 df5d61fa2063c80671f3ae17df8df474e2022043
- SHA512 afaea3a42ba19711beea570f4a9ddef131391e0b6d60d2c9379366f8246cbf1dce5e31453d6bdab2d1fc5211a151a791e1a6d99ca90eeebf62341d0e8a3911c6
- SSDEEP 98304:M0NalC95b/Y0+6duqcprtoc6QMzqs5ROWlWAy:M0Z95b1duqcprtp6QM8WlWL
- TLSH T1D0A69D97B3A911C8D56BD13D8B9B5517EBB2300503529BDB01A1CA592F33BF12ABF321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\Qt6Network.dll
- Size 1.7MB
- SHA256 dd3512d1c5ed062d30c98426cd0a850f13e0cf31437afb5b0b474132b9c52922
- MD5 fa8c6be533d86d0c2485da069b750b93
- SHA1 c9b9e8726df6be50cf16c6227a91b4050db6c2c0
- SHA512 dc312bd9e2bbfc824054051029e6b3af2b5d123be963906d13ba0109f7a1e5799035e928d9683f580427906c4b672e0bbdd4f535dafc66a688fa43e3eb4aab62
- SSDEEP 49152:BL4bTLBqp8UcswuLTyOJrQ/jDANtXNJV+Nw:iTzwXNmw
- TLSH T14F855B17A3E50296C46FC179CB0B8A07EB73700587A29BDB42658F552F63BE22B7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\QtCore.pyd
- Size 3.2MB
- SHA256 74f96322c5e9cea73aefd2ed5870e5275336b31f552fcd32f12fc81d23f1bc6f
- MD5 7f15c96f82df5e869150d8ad37280d16
- SHA1 739cd6c0e00f5bd5f914d48d423de86270464587
- SHA512 85b4634746e4faf47a4896f20bc4b99cdf30169b5c0af4f2543dddc82029fb9a8d923aa9ec322fa6dacb283abe8b3e2b4284381ce751b3262b049373a930612e
- SSDEEP 49152:6OTsN2Bnd1NWAMgwrbrKGd18+uOXDVYgUhP2bSIF4QebRczJsE8ipLvgBAqi1RX5:6koFZ5GK
- TLSH T157F57D9F978911C0D63BE1BDCE0B4A07D6F2305245D6E34B056ACD641F973A226AEFC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\QtGui.pyd
- Size 3.7MB
- SHA256 7bef20046045199c037b7cbfedaa1c5464730fa948b2c9ec8afbf718e63774d4
- MD5 447b5680888393c4a12d27507d9c859b
- SHA1 ee8966c84cfca7dad8104f7218ec2f837e11c818
- SHA512 bdf0f13a48812c52ed6cd9497a12722c3fd92425dcc2c6ce4112ee3b1efd92e2878c9f0ccaeccdcda4aab5914aca706f5310ce0f3f694451ba9b5f81c728e170
- SSDEEP 49152:Y05/dY0JLFn0L31W6toKoGbOAmebWeCKZ+pCMj1DLXxCflVqlTprOFY6VGPptzkO:JytPzi9fQE
- TLSH T150064B9B5BAE11C0D337F1BDCD075A13D6F2349289C5930B0466CD685FA335226AAFE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\QtNetwork.pyd
- Size 985KB
- SHA256 c5038bb71fc9d57330fa2d8eeec65aab69fcf02687cc8f54dbfb5995cfec6a71
- MD5 481eb3b5150a863149bf637da6ef8533
- SHA1 f58080b24791c543ee9016899c8112f9e44fe1f0
- SHA512 49f492fa2d721c042ea6557d4b66013c85dfb0f77bff70a8b7ef946474832e56790d0949059748c7e7a6ec2498601a64dd392e9aa924a0c8b309b5e43b36d696
- SSDEEP 12288:9bISsP8Ou0T39IiUAHKl/TSLuC+cVMe8Urgba21sbb32CouD0gOIqo5n4U5h547x:9bd1u8UH0gXqc4U5hNn/Ohb18K38Y8Wd
- TLSH T1B9254B9B8B4502C1EA2EE1BCC9178A02D2F2B08796C5D30F4969CE597FD37A2751E7C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\pyside6.abi3.dll
- Size 249KB
- SHA256 d0b5c701fb3a8ea839e72b602058f3960935156ebeca084893c54c99e54dd707
- MD5 ef5550a3597b088b24291f659c0611b4
- SHA1 4dd45ac8b7e6bf414c5079e7fbe6ffa3de35a0c6
- SHA512 b12b244611b4e0d34b0b0bf0f0d5ceebfe97076c81837c37579c793d8a8263128a7fec5b9bc5452ebad0f2c682c499be61be3506c261507d5299df338f6eff23
- SSDEEP 3072:YvmgxPhf4YaW1SI7tIe0ihCVcQhc+UcQgw6fw8Zh2xZeO9th6F4ryUdHz19bdD:YvmchwYaW1SLPiNQKlW4ryUdR9x
- TLSH T139445C2B77105E99DDAFD2B8C902850AC6B3B45243A1E70F13A5CEE60F6B7523B1D346
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\PySide6\translations\is-MQ05GC2EBP.tmp
- Size 33B
- SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
- MD5 aaea7ba475c961f941d0a23488457beb
- SHA1 2bf0054002c8f7d85dd080df332553bf9b3a8e26
- SHA512 5b408c36c8f93f71e73e3d3b1c0c2ad699e92a6088604b8adf8e588e8a75fc3fc92828199b7f00f5b05b224ae819220d07e56d610a76a267594870bec77172be
- MD5 SHA1 SHA512
- Path C:\Program Files\SimpleZapretGUI\_internal\VCRUNTIME140.dll
- Size 96KB
- SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
- MD5 f12681a472b9dd04a812e16096514974
- SHA1 6fd102eb3e0b0e6eef08118d71f28702d1a9067c
- SHA512 7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
- SSDEEP 1536:BxhUQePlHhR46rXHHGI+mAAD4AeDuXMycecb8i10DWZz:Bvk4wHH+mZD4ADAecb8G1
- TLSH T1E0A37D4A77A542BBC06ED274C1A39906F7B0B840877063CF07B5466A5F23BE19E3E356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\VCRUNTIME140_1.dll
- Size 37KB
- SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
- MD5 75e78e4bf561031d39f86143753400ff
- SHA1 324c2a99e39f8992459495182677e91656a05206
- SHA512 ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
- SSDEEP 768:Xhh4pTUUtmUwqiu8oSRjez6SD7GkxZYj/9zLUr:xJ9x70GkxuZz2
- TLSH T1C9034B9463B88085E1AB82B0C4935F17BE7DF9654B50538F0BA1C15D2F63BD0BA3D32A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_bz2.pyd
- Size 81KB
- SHA256 f178e29921c04fb68cc08b1e5d1181e5df8ce1de38a968778e27990f4a69973c
- MD5 a4b636201605067b676cc43784ae5570
- SHA1 e9f49d0fc75f25743d04ce23c496eb5f89e72a9a
- SHA512 02096bc36c7a9ecfa1712fe738b5ef8b78c6964e0e363136166657c153727b870a6a44c1e1ec9b81289d1aa0af9c85f1a37b95b667103edc2d3916280b6a9488
- SSDEEP 1536:asRz7qNFcaO6ViD4fhaLRFc/a8kd7jzWHCxIStVs7Sywk:9RzGYYhaY9kd7jzWixIStVs+k
- TLSH T1CC839E93F6A456B9E41BA27A95B14353D330FE49039093EFF684831B2F03B917C6935A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_ctypes.pyd
- Size 119KB
- SHA256 92d7954d9099762d81c1ae2836c11b6ba58c1883fde8eeefe387cc93f2f6afb4
- MD5 87596db63925dbfe4d5f0f36394d7ab0
- SHA1 ad1dd48bbc078fe0a2354c28cb33f92a7e64907e
- SHA512 e6d63e6fe1c3bd79f1e39cb09b6f56589f0ee80fd4f4638002fe026752bfa65457982adbef13150fa2f36e68771262d9378971023e07a75d710026ed37e83d7b
- SSDEEP 3072:bsQx9bm+edYe3ehG+20t7MqfrSW08UficVISQPkFPR:QQxCOhGB0tgqfrSiUficrZ
- TLSH T13DC36B1B2354109AEA678078C5B35E07DB71F8595B2083CF0294C6AE2F63BE35E7E716
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_decimal.pyd
- Size 244KB
- SHA256 6314c99a3efa15307e7bdbe18c0b49bc841c734f42923a0b44aab42ed7d4a62d
- MD5 10f7b96c666f332ec512edade873eecb
- SHA1 4f511c030d4517552979105a8bb8cccf3a56fcea
- SHA512 cfe5538e3becbc3aa5540c627af7bf13ad8f5c160b581a304d1510e0cb2876d49801df76916dcda6b7e0654ce145bb66d6e31bd6174524ae681d5f2b49088419
- SSDEEP 6144:TogRj7JKM8c7N6FiFUGMKa3xB6Dhj9qWMa3pLW1A64WsqC:tPJKa7N6FEa3x4NlbqC
- TLSH T179346C1AA2490DA4DE778074D89B9B53F7B178844360C3CF43A48AA67F577A323BD784
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_hashlib.pyd
- Size 60KB
- SHA256 1be5cfd06a782b2ae8e4629d9d035cbc487074e8f63b9773c85e317be29c0430
- MD5 49ce7a28e1c0eb65a9a583a6ba44fa3b
- SHA1 dcfbee380e7d6c88128a807f381a831b6a752f10
- SHA512 cf1f96d6d61ecb2997bb541e9eda7082ef4a445d3dd411ce6fd71b0dfe672f4dfaddf36ae0fb7d5f6d1345fbd90c19961a8f35328332cdaa232f322c0bf9a1f9
- SSDEEP 768:aSz5iGzcowlJF+aSe3kuKUZgL4dqDswE9+B1fpIS5IHYiSyvc9eEdB:npWlJF+aYupZbdqDOgB1fpIS5IH7Sy+V
- TLSH T131537E05A69440B9C96742B8CAD31F5BEAF1F0405751ABEF0358C1CE1F237C396BA796
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_lzma.pyd
- Size 154KB
- SHA256 80a6ebe46f43ffa93bbdbfc83e67d6f44a44055de1439b06e4dd2983cb243df6
- MD5 b5fbc034ad7c70a2ad1eb34d08b36cf8
- SHA1 4efe3f21be36095673d949cceac928e11522b29c
- SHA512 e7185da748502b645030c96d3345d75814ba5fd95a997c2d1c923d981c44d5b90db64faf77ddbbdc805769af1bec37daf0ecee0930a248b67a1c2d92b59c250c
- SSDEEP 3072:MeORg8tdLRrHn5Xp4znfI9mNoY6JCvyPZxsyTxISe1KmDd:M/Rgo1L5wwYOY6MixJKR
- TLSH T1FFF33982A394F4E5F7628C78DA624F13D7F678490310929A12CCD36E2B1FB755A2E713
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_multiprocessing.pyd
- Size 32KB
- SHA256 be8269c83666eaa342788e62085a3db28f81512d2cfa6156bf137b13ebebe9e0
- MD5 71ac323c9f6e8a174f1b308b8c036e88
- SHA1 0521df96b0d622544638c1903d32b1aff1f186b0
- SHA512 014d73846f06e9608525a4b737b7fccbe2123d0e8eb17301244b9c1829498328f7bc839cc45a1563cf066668ea6e0c4e3a5a0821ab05c999a97c20aa669e9eda
- SSDEEP 768:Y3I65wgJ5xeSZg2edRnJ8ZISRtczYiSyvZCeEdP:gIgJ5Uqg2edRJ8ZISRtcz7Sy0b
- TLSH T157E26D43DA94189EE437C575D4D35F19E931F696075083DF2328C25E0F323826BAA79A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_queue.pyd
- Size 29KB
- SHA256 09c5faf270fd63bde6c45cc53b05160262c7ca47d4c37825ed3e15d479daee66
- MD5 23f4becf6a1df36aee468bb0949ac2bc
- SHA1 a0e027d79a281981f97343f2d0e7322b9fe9b441
- SHA512 3ee5b3b7583be1408c0e1e1c885512445a7e47a69ff874508e8f0a00a66a40a0e828ce33e6f30ddc3ac518d69e4bb96c8b36011fb4ededf9a9630ef98a14893b
- SSDEEP 768:lez/Dt36r34krA4eVIS7UAYiSyvAEYeEdSiD:leDE34krA4eVIS7UA7Sy9YLD
- TLSH T151D29E879AA45C96D433C17194E66E25F930FB91970083DF3218C35D1F337826BBA79A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_socket.pyd
- Size 75KB
- SHA256 8046bf64e463d5aa38d13525891156131cf997c2e6cdf47527bc352f00f5c90a
- MD5 e137df498c120d6ac64ea1281bcab600
- SHA1 b515e09868e9023d43991a05c113b2b662183cfe
- SHA512 cc2772d282b81873aa7c5cba5939d232cceb6be0908b211edb18c25a17cbdb5072f102c0d6b7bc9b6b2f1f787b56ab1bc9be731bb9e98885c17e26a09c2beb90
- SSDEEP 1536:C6DucXZAuj19/s+S+pjtk/DDTaVISQwn7SyML:C6DPXSuj19/sT+ppk/XWVISQwneL
- TLSH T1A2735A52A29050B9D27381B6C5635F23EB70F4C0179593CF1260DA6E2F23792AF7EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_ssl.pyd
- Size 155KB
- SHA256 58b772b53bfe898513c0eb264ae4fa47ed3d8f256bc8f70202356d20f9ecb6dc
- MD5 35f66ad429cd636bcad858238c596828
- SHA1 ad4534a266f77a9cdce7b97818531ce20364cb65
- SHA512 1cca8e6c3a21a8b05cc7518bd62c4e3f57937910f2a310e00f13f60f6a94728ef2004a2f4a3d133755139c3a45b252e6db76987b6b78bc8269a21ad5890356ad
- SSDEEP 3072:UhIDGtzShE3z/JHPUE0uev5J2oE/wu3rE923+nuI5Piev9muxISt710Y:UhIqtzShE3zhvyue5EMnuaF9mu3
- TLSH T10DF37C47F24419A7E817E4BDC2230A13EBB5F045231157CE49D6D68A0F13B46AF7ABA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\_uuid.pyd
- Size 23KB
- SHA256 51dd1ea5e8cacf7ec4cadefdf685334c7725ff85978390d0b3d67fc8c54fe1db
- MD5 13aa3af9aed86cc917177ae1f41acc9b
- SHA1 f5d95679afda44a6689dbb45e93ebe0e9cd33d69
- SHA512 e1f5dbd6c0afcf207de0100cba6f1344feb0006a5c12dc92768ab2d24e3312f0852f3cd31a416aafeb0471cd13a6c0408f0da62956f7870b2e22d174a8b23c45
- SSDEEP 384:I3AVpEWz6TPQxISewl4IYiSy1pCQXdW4i/8E9VFL2Utah:ISpENTQxISewLYiSyvNWeEdy
- TLSH T180B25C86CAA04C55DC2786B1A4E44F1AE931F7959B5083CB331DC1591FA13C367BA3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\base_library.zip
- Size 859KB
- SHA256 7f1b4a882cf9cfecc706584612ba39f6a4fae2204a4ccd44e0527a1d118cdabe
- MD5 538bd6a8637f9f6a98c8fa935daa9f0c
- SHA1 a34d914cd0b2d86f1b208de142a345178b5aeffa
- SHA512 5151ad2e1abae39da27bab0a9c21bd40c4f829a44c540306a58c0a9ae5d6b8dfc76ab1af38787cdfd7a5879dc88c018cdc55f45aaeeedb6119a9c118b4e0144b
- SSDEEP 12288:AfpE/Iy6uBevrcyNS/EHYKldZMNSA4a2YV8YZVdVwxljE:AfpERez7UEHYQMNSLa2/YZVwxm
- TLSH T1A3153A8069911ED7FD05F278815F8E3C069AB33ADB89D543BA4FC2D8BF472E00995A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\libcrypto-1_1.dll
- Size 3.3MB
- SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
- MD5 ab01c808bed8164133e5279595437d3d
- SHA1 0f512756a8db22576ec2e20cf0cafec7786fb12b
- SHA512 4043cda02f6950abdc47413cfd8a0ba5c462f16bcd4f339f9f5a690823f4d0916478cab5cae81a3d5b03a8a196e17a716b06afee3f92dec3102e3bbc674774f2
- SSDEEP 98304:kw+jlHDGV+EafwAlViBksm1CPwDv3uFfJ1:1slHDG2fwAriXm1CPwDv3uFfJ1
- TLSH T1E2F58C5AA3AC0184E5FAC17CC9574727E7B1B45A93B09BCF08A681780F27BD6273DB44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\libffi-7.dll
- Size 32KB
- SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
- MD5 eef7981412be8ea459064d3090f4b3aa
- SHA1 c60da4830ce27afc234b3c3014c583f7f0a5a925
- SHA512 dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
- SSDEEP 384:2nypDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYIoBneEAR8:2l0Vn5Q28J8qsqMttktDxOpWDG4yKRF
- TLSH T1CFE26B0B665059F0FA57C43A9766DE2AD73676301350A2CF02F5C2A62F5BBE0A63D209
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\libssl-1_1.dll
- Size 682KB
- SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
- MD5 de72697933d7673279fb85fd48d1a4dd
- SHA1 085fd4c6fb6d89ffcc9b2741947b74f0766fc383
- SHA512 0fd4678c65da181d7c27b19056d5ab0e5dd0e9714e9606e524cdad9e46ec4d0b35fe22d594282309f718b30e065f6896674d3edce6b3b0c8eb637a3680715c2c
- SSDEEP 12288:waXWJ978LddzAPcWTWxYx2OCf2QmAr39Zu+DIpEpXKWRq0qwMUxQU2lvz:dddzAjKnD/QGXKzpwMUCU2lvz
- TLSH T173E43A95ABB51498D5E6C17C8A534A33E3BAF4141330AFCF0661893E0F17BD92B3A758
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\psutil\_psutil_windows.pyd
- Size 69KB
- SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
- MD5 0a66d22d2ac4f9d41e1605b8d05de77b
- SHA1 062de44628065f96d8137a2f04d1a88cc560b56b
- SHA512 aa246c8d757a5be47e529889376faf9c94a5e377b20b418c4c7fa83e00c01060b01a887ebc662ab7bd42a6dac53abaac3a41b48b6a6f336d798c2ae782f80b5a
- SSDEEP 768:axgqyAz7MqVIiOSzTVCeur2wTljgUd+mZnJGL0kKoPVMDw4xulnFn9mcBQ3S3X/:uZzwq2+SBRJdpZnJbPoPVM04YnUjHmC
- TLSH T121631895B35900F8C91B913D9EB26A37E7B2B091132657CF0160D68A0FA3BD36E7DB41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\pyexpat.pyd
- Size 193KB
- SHA256 dbe6e7be3a7418811bd5987b0766d8d660190d867cd42f8ed79e70d868e8aa43
- MD5 6bc89ebc4014a8db39e468f54aaafa5e
- SHA1 68d04e760365f18b20f50a78c60ccfde52f7fcd8
- SHA512 b7a6a383eb131deb83eee7cc134307f8545fb7d043130777a8a9a37311b64342e5a774898edd73d80230ab871c4d0aa0b776187fa4edec0ccde5b9486dbaa626
- SSDEEP 3072:rkPTemtXBsiLC/QOSL6XZIMuPbBV3Dy9zeL9ef93d1BVdOd8dVyio0OwUpz1RPoi:AKmVG/pxIMuPbBFEFDBwpp2W
- TLSH T1F4147C5771A5C0EBD8938038D6974A0BDBB2F8A5038197CF1294EB7D5F27B423E68319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\python3.DLL
- Size 63KB
- SHA256 5d78cd1365ea9ae4e95872576cfa4055342f1e80b06f3051cf91d564b6cd09f5
- MD5 07bd9f1e651ad2409fd0b7d706be6071
- SHA1 dfeb2221527474a681d6d8b16a5c378847c59d33
- SHA512 def31d2df95cb7999ce1f55479b2ff7a3cb70e9fc4778fc50803f688448305454fbbf82b5a75032f182dff663a6d91d303ef72e3d2ca9f2a1b032956ec1a0e2a
- SSDEEP 768:kD8LeBLeeFtp5V1BfO2yvSk70QZF1nEyjnskQkr/RFB1qucwdBeCw0myou6ZwJqL:kDwewnvtjnsfwaVISQ0a7SydEnn
- TLSH T1A3537E529B64FCA2DAF6A5FC38D1998D582B12CC972984DCB578D3D30E1A310A127F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\python310.dll
- Size 4.3MB
- SHA256 058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
- MD5 c80b5cb43e5fe7948c3562c1fff1254e
- SHA1 f73cb1fb9445c96ecd56b984a1822e502e71ab9d
- SHA512 faa97a9d5d2a0bf78123f19f8657c24921b907268938c26f79e1df6d667f7bee564259a3a11022e8629996406cda9fa00434bb2b1de3e10b9bddc59708dbad81
- SSDEEP 49152:5vL1txd/8sCmiAiPw+RxtLzli0Im3wOc+28Ivu31WfbF9PtF+FNDHaSclAaBlh7y:Dw7Ad07RmodacSeSHCMTbSp4PS
- TLSH T165267B22A2640194DAB79477C5238646CBF1FC552F20E34F41A4BAD92F73BA316EF706
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\select.pyd
- Size 28KB
- SHA256 68b80009ab656ffe811d680585fac3d4f9c1b45f29d48c67ea2b3580ec4d86a1
- MD5 adc412384b7e1254d11e62e451def8e9
- SHA1 04e6dff4a65234406b9bc9d9f2dcfe8e30481829
- SHA512 f250f1236882668b2686bd42e1c334c60da7abec3a208ebebdee84a74d7c4c6b1bc79eed7241bc7012e4ef70a6651a32aa00e32a83f402475b479633581e0b07
- SSDEEP 384:rPxHeWt+twhCBsHqF2BMXR6VIS7GuIYiSy1pCQkyw24i/8E9VFL2Ut8JU:ZeS+twhC6HqwmYVIS7GjYiSyv7VeEdH
- TLSH T1F4D29F8BD7901889E823C6B154E68F06EA35B6614750C3CF3315C26D2F637C277BA799
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\shiboken6\MSVCP140.dll
- Size 536KB
- SHA256 fd4a8c046fa3fea9ca6132f50cf8a56cf1e783b2d3093ba5c85fa063bc6b3845
- MD5 2a8bbedde8181554c07c0e00ef1e8aed
- SHA1 c31bb1547533f01bf15de749b59ae7accc9f151b
- SHA512 58ea489e731fa7db1e9c2b8f047a9c3c98b0013f07dc8e2b65ba811b498077803d24bfc72c9813deee3c96f04383123c82c2b3e9a211d7b67ed6c1b2f40e1b4f
- SSDEEP 12288:kdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa6+:kdnGoU/7m/V5WZ8dQEKZm+jWodEER7+
- TLSH T1DDC41A27F74A06B0E195E3B8A1838702D7F1BC498322E3C752EB955D2F573D0A67B690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\shiboken6\Shiboken.pyd
- Size 32KB
- SHA256 2f6f3a694f675b1dafdae26903191613c02866ab48e02591ae34ca1a3b1284f1
- MD5 029554366ea1568dcd6b77de1f6e1be0
- SHA1 463430a1b104ac3243c2c5405b652c1eeb2f4faf
- SHA512 bc0af591f0170bb1f784c180b4578bed95cf978de3df0744e5804f7baf1037d917d627f4b7200c7214550a56be4115e51265412f5cad85069e8029bac1e0691b
- SSDEEP 384:JPvEWHltip0VJ4L+DX9bbll9mnCUGZjd0a9DHHQIYiu9c/wrTy8RbmL4nNy3Nx:JnFltipTLaBljDeeL5YiuiQT5ALvx
- TLSH T1F2E26A138F28284DE826D67E98926E16F2F1B1501750D7CF136BC59A4FA23C27D3E396
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\shiboken6\VCRUNTIME140_1.dll
- Size 40KB
- SHA256 fa577d54bd10a91e52472da784a619da6cf241af45f0a0c48b27e91fa0fe6104
- MD5 54b61d3e83af057de2e5176495c299c8
- SHA1 a2f3785b6faabd6d494f1fa725ae3b22e0e06981
- SHA512 0bc113f53ef21b1cc83d97c5f6f142bb21b5a865c96f380d522acb6c4e8b437da9f72b4a85d6a1f679cd308fe0b813999cd251cba86ecf560a2c4678560e1fb6
- SSDEEP 768:U3oZYctpzcx0pdESASv8375YiuiGOn5ALl:4c6wk3F7uP/
- TLSH T102037CA257B41846E46BD975C0D31E3BEB71F4256B9093CB03A8C21D1F627C07A7E366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\shiboken6\shiboken6.abi3.dll
- Size 384KB
- SHA256 de3c6b2ed5f75c9ac0de4a6844b653b3b9d09263ce68c2b5fc25a96c5c3e8469
- MD5 750d18d248b769f6d3c89c1161f6c005
- SHA1 fa9d041b9081c126d33ce47c00ff86018d05accf
- SHA512 30bc6e6997538c5b016d602709fae25d908e693a4531bfcbd13fac841fd6b7af9b84351c65c20bfd67f0d0f2b09fd82cba6e21c568ffd81b9fb09d299aab2c02
- SSDEEP 6144:VWuBtIS9E3S0zK5FLT0SgnIzIS60ofjBdx2cHWXLiPLHoASR:zSSbZTTmfgo7/g5wwR
- TLSH T1D2848E2BEF94109CF67B827C8563C606E6727492035197CB23B9C7C62B535EA7A3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\_internal\unicodedata.pyd
- Size 1.1MB
- SHA256 2cf6c5dea30bb0584991b2065c052c22d258b6e15384447dcea193fdcac5f758
- MD5 102bbbb1f33ce7c007aac08fe0a1a97e
- SHA1 9a8601bea3e7d4c2fa6394611611cda4fc76e219
- SHA512 a07731f314e73f7a9ea73576a89ccb8a0e55e53f9b5b82f53121b97b1814d905b17a2da9bd2eda9f9354fc3f15e3dea7a613d7c9bc98c36bba653743b24dfc32
- SSDEEP 12288:bMYYMmuZ63NoQCb5Pfhnzr0ql8L8koM7IRG5eeme6VZyrIBHdQLhfFE+uz9O:AYYuXZV0m8wMMREtV6Vo4uYz9O
- TLSH T147355909B9C24EE6E88B06B940D3117B2F61C1720F1B6B4F76A5532D9C763A34EE653C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SimpleZapretGUI\unins000.exe
- Size 4.2MB
- SHA256 181f056f115a39521d96e26b854ca035de2b6d71a2fc98297f095011282a3cb5
- MD5 2d3caf1bb9a5b11c148dd48d343b6a23
- SHA1 6d55136562599f3f801d6d138e2cacde4464062d
- SHA512 b193f6adb634379fdbde35d512048a22750ee82d321df03cbe90898fe3c8b6d263c62455b0e84013e484551909bda2d7325ea14db4ddd8bf2c5b5d3cf986eb33
- SSDEEP 98304:d9SZUvl30aj90ZFcvdQ0hdgvminQLMj+J5333Y:yItJj90Z6RgKwd
- TLSH T1E7168E03B388753EE4B71B3A983FA254583F7A213A26CD4B6BF4095C4F396416D2A747
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-DB5NEE55K1.tmp\SimpleZapretGUI-Setup-1.0.0.tmp
- Size 4.2MB
- SHA256 73e6b802921df223c0a2f005ce95ddc7ca1740fd2b9b0ccfa65fed139ac6c394
- MD5 0532534829744b9ba1c61a9e373825f2
- SHA1 b5d5834549e49f2fdc832ed2a2b71c7951b55136
- SHA512 8e17dc029eb61f76bd88437a1076902e85f75552a699f271fc4fc331b82954cb57fee6729a3826fa24c81f22042b3f82e349c3278a316aa3cac5902893856bc9
- SSDEEP 98304:F9SZUvl30aj90ZFcvdQ0hdgvminQLMj+J5333I:aItJj90Z6RgKwJ
- TLSH T163168E03B388753EE4B71A3A883FA654583F7A213A26CD4B6BF40D5C4F396416D2A747
- MD5 SHA1 SHA512 SSDEEP TLSH