Overview

overview

8

Static

static

3

bea8257728...ef.exe

windows10-2004-x64

8

bea8257728...ef.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe
  • Size 4.9MB
  • Sample261027-e3y7bsys6n
  • SHA256 bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojanupx

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 1 IoCs
  • Sets service image path in registry 3 TTPs 9 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 6 IoCs
    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs
    defense_evasion
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 23 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Gathers network information 2 TTPs 1 IoCs

    Uses commandline utility to view network configuration.

  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
    adwarespyware
  • Modifies Internet Explorer start page 1 TTPs 3 IoCs
    stealer
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 40 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of WriteProcessMemory 24 IoCs
  • System policy modification 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe
    "C:\Users\Admin\AppData\Local\Temp\bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1856
    • C:\Users\Admin\AppData\Roaming\2345PCSafe\Download\2345pcsafe_v7.9.1.13920.exe
      "C:\Users\Admin\AppData\Roaming\2345PCSafe\Download\2345pcsafe_v7.9.1.13920.exe" /S /LOCK3HP=1 /LOCKIEHP=1 /LOCKBROWSER=1 /LOCKENGINE=1 /AUTOLAUNCH=0 /AUTOLAUNCHPARAM= /LOCKNEWTAB=1 /DSAFELNK=1 /D=C:\Program Files (x86)\2345Soft\2345PCSafe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:3424
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=install --installtype=new --lockIEState=1 --lock3rdState=1 --lockBrowserState=1 --lockBrowserType=2 --lockEngineState=1 --locknewtab=1 --silent=1
        3⤵
        • Sets service image path in registry
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        • System policy modification
        PID:4288
        • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeCenter\2345SafeCenterInstaller.exe
          "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeCenter\2345SafeCenterInstaller.exe" --type=install --invoke_product=1 --path="C:\Program Files (x86)\2345Soft\" --lockExplorerKB=0 --lockIEState=1 --lock3rdState=1 --locknewtab=1 --lockBrowserState=1 --lockBrowserType=2 --lockEngineState=1 --safe_override=0
          4⤵
          • Drops file in Drivers directory
          • Sets service image path in registry
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Modifies Internet Explorer settings
          • Modifies Internet Explorer start page
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:3300
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho64.dll"
            5⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1372
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho64.dll"
              6⤵
              • Installs/modifies Browser Helper Object
              • Modifies registry class
              PID:1472
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho.dll"
            5⤵
            • Installs/modifies Browser Helper Object
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            PID:4972
        • C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345SoftMgr.exe
          "C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345SoftMgr.exe" --shortcut=notify --from=s --entry=12 --package="C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345softmgr_v7.0.2.3786.7z" --nwinst=1
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Modifies system certificate store
          • Suspicious use of WriteProcessMemory
          PID:408
          • C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345SoftMgrShell64.exe
            "C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345SoftMgrShell64.exe" --install=SoftMgrMenu64.dll
            5⤵
            • Executes dropped EXE
            • Modifies system executable filetype association
            • Modifies registry class
            PID:3252
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ExtShell64.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ExtShell64.exe" --install=AvShellExt64.dll
        3⤵
        • Executes dropped EXE
        • Modifies system executable filetype association
        • Modifies registry class
        PID:588
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=installstatic --installtype=new --usertype=GF --silent=1 --preversion=0.0.0.0
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:4400
  • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterSvc.exe
    "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterSvc.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2540
    • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
      "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
      2⤵
      • Sets service image path in registry
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Drops file in Program Files directory
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1560
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterCrashReport.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterCrashReport.exe" --crashtype=Driver
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2716
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterInstaller.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterInstaller.exe" --type=after_upgrade --invoke_product=6
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2524
      • C:\Windows\SysWOW64\ipconfig.exe
        "C:\Windows\System32\ipconfig.exe" /flushdns
        3⤵
        • System Location Discovery: System Language Discovery
        • Gathers network information
        PID:972
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe" /notify_guard
        3⤵
        • Executes dropped EXE
        PID:4004
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterUpdate.exe" --type=default
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:4760
  • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeSvc.exe
    "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeSvc.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4276
    • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
      "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:2960
    • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeTray.exe
      "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeTray.exe" --type=logonauto --sf=1
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:396
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=repair
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1028
        • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe
          "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe" --type=repairfiles --target=normally
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4540
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1480
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345NightMode.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345NightMode.exe" --type=silent --switch=enable
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3124
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ManuUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ManuUpdate.exe" --type=manusaferepair
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4716
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe" --type=default
        3⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:2316

Network

        MITRE ATT&CK Enterprise v16

        Reconnaissance

        Resource Development

        Initial Access

        Execution

        Command and Scripting Interpreter

        1
        T1059

        Persistence

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Browser Extensions

        1
        T1176

        Create or Modify System Process

        1
        T1543

        Windows Service

        1
        T1543.003

        Event Triggered Execution

        2
        T1546

        Change Default File Association

        1
        T1546.001

        Component Object Model Hijacking

        1
        T1546.015

        Privilege Escalation

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Create or Modify System Process

        1
        T1543

        Windows Service

        1
        T1543.003

        Event Triggered Execution

        2
        T1546

        Change Default File Association

        1
        T1546.001

        Component Object Model Hijacking

        1
        T1546.015

        Defense Evasion

        Debugger Evasion

        1
        T1622

        Modify Registry

        7
        T1112

        Subvert Trust Controls

        1
        T1553

        Install Root Certificate

        1
        T1553.004

        Credential Access

        Credentials from Password Stores

        1
        T1555

        Credentials from Web Browsers

        1
        T1555.003

        Unsecured Credentials

        1
        T1552

        Credentials In Files

        1
        T1552.001

        Discovery

        Debugger Evasion

        1
        T1622

        Peripheral Device Discovery

        1
        T1120

        Query Registry

        3
        T1012

        System Information Discovery

        4
        T1082

        System Location Discovery

        1
        T1614

        System Language Discovery

        1
        T1614.001

        System Network Configuration Discovery

        1
        T1016

        Lateral Movement

        Collection

        Data from Local System

        1
        T1005

        Command and Control

        Exfiltration

        Impact

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AX01.data.new
        • Path C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\SectionsBackup\SafeUpdate\Update\AX01.data.new
        • Size 824KB
        • SHA256 8b76c693b0150af642fb7daeb359b0881b7455054c3322753a4dd6ace013932e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345RTProtect.exe
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
        • Size 2.3MB
        • SHA256 72ce3134cbc1370f280bff1d682438310912a3797e6fac8ea04ff24b0ee71e66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345SafeCenterInstaller.exe
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterInstaller.exe
        • Size 1.5MB
        • SHA256 c80dfcd28ba51677612f8e0bec2219d8db423ae6e0cfb171a2a056d35cf32df4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BK01.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\Data\BK01.data
        • Size 6KB
        • SHA256 f6b4b008da7762fbfae93f35467dcf0b1320eebfaa06572bb7fb3345d2b42302
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BQ01.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\Data\BQ01.data
        • Size 3KB
        • SHA256 4370f764cb85700e242e8d3cb3d51b1d5a21f13777880e62db03c33c86a4b750
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        64_2345SafeCenterSvc.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\Data\Recover\64_2345SafeCenterSvc.data
        • Size 8KB
        • SHA256 4c2716f23cdcb5de619a1a34f08fd596782b32339a2380ac614c912bc713386e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DriverApi.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\DriverApi.dll
        • Size 765KB
        • SHA256 7da984552020a080d7fe319baf8112e2ce7fff157e5e8a6aee0abaa72e9a57bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DriverInstall.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\DriverInstall.dll
        • Size 7.0MB
        • SHA256 7562f909ad5864bb70c0925eaaf78390cb12ef1ef0deda8c1a6425ef2efe24c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NsProtectApi.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\NsProtectApi.dll
        • Size 67KB
        • SHA256 c9131a384d4eda8ceba30b38bc9286663d913d462f3d2564a1a097f8c2647793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectLogistics.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\ProtectLogistics.dll
        • Size 1.9MB
        • SHA256 afdcf071642136b4c02e96601fb9e69a78e7a5b69a12257afcf08f51cf6bba3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TkNitrome.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\TkNitrome.dll
        • Size 1.9MB
        • SHA256 161bc9031a67e5cb36c6612943bcf845a66d4b72c734dff13c108cebe5402d63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WebProtect.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\WebProtect.dll
        • Size 5.7MB
        • SHA256 b8a37512e41dbf31da7175077926b5b0cc456af9ab7b30aacd112555aa97ba17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-console-l1-1-0.dll
        • Size 18KB
        • SHA256 24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-datetime-l1-1-0.dll
        • Size 17KB
        • SHA256 c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-debug-l1-1-0.dll
        • Size 17KB
        • SHA256 7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 17KB
        • SHA256 f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l1-1-0.dll
        • Size 21KB
        • SHA256 1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l1-2-0.dll
        • Size 17KB
        • SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l2-1-0.dll
        • Size 17KB
        • SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-handle-l1-1-0.dll
        • Size 17KB
        • SHA256 dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-heap-l1-1-0.dll
        • Size 17KB
        • SHA256 535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 18KB
        • SHA256 2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-memory-l1-1-0.dll
        • Size 18KB
        • SHA256 ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 17KB
        • SHA256 dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 18KB
        • SHA256 9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 19KB
        • SHA256 4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-profile-l1-1-0.dll
        • Size 17KB
        • SHA256 f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 17KB
        • SHA256 966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-string-l1-1-0.dll
        • Size 17KB
        • SHA256 339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-synch-l1-1-0.dll
        • Size 19KB
        • SHA256 cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 18KB
        • SHA256 f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-util-l1-1-0.dll
        • Size 17KB
        • SHA256 34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-conio-l1-1-0.dll
        • Size 18KB
        • SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-convert-l1-1-0.dll
        • Size 21KB
        • SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 19KB
        • SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-math-l1-1-0.dll
        • Size 28KB
        • SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-multibyte-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 25KB
        • SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-private-l1-1-0.dll
        • Size 71KB
        • SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-process-l1-1-0.dll
        • Size 18KB
        • SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 23KB
        • SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-string-l1-1-0.dll
        • Size 23KB
        • SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        concrt140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\concrt140.dll
        • Size 243KB
        • SHA256 b721897db5542d5b0c970ec624440442ed9ae781e55147feb9ff264f70f66cde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 aa65b590b535eda30e42baa4eac59860ce7414cbce396968e8818faa4df79fc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp120.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcp120.dll
        • Size 444KB
        • SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcp140.dll
        • Size 438KB
        • SHA256 2db7fd3c9c3c4b67f2d50a5a50e8c69154dc859780dd487c28a4e6ed1af90d01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcr120.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcr120.dll
        • Size 948KB
        • SHA256 86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rcrs.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\rcrs.data
        • Size 21KB
        • SHA256 3cd31e8153516f5036daae481ace74a043aa6a85b76b8d23f59d0e334f544fe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\ucrtbase.dll
        • Size 1.1MB
        • SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\vcruntime140.dll
        • Size 78KB
        • SHA256 9d02e952396bdff3abfe5654e07b7a713c84268a225e11ed9a3bf338ed1e424c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HipsGlobal
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\HipsGlobal
        • Size 29B
        • SHA256 5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4
        • MD5 SHA1 SHA512
        Submit Download

        SCWebSilAct
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SCWebSilAct
        • Size 321B
        • SHA256 ed6bccf6dfbbfbeb1ecdb7fb4a3ee9ca6c71fba54eac55decfbeaa3fb5012a49
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 977B
        • SHA256 63ba22dca2e903bfa0cf63c8d365b385ac816392f7a2369ff34b12defeece220
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 1KB
        • SHA256 a05d34b6a3355b3057ceb3977e5bd37379d7904f667b321b7ff609877f7ea272
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 1KB
        • SHA256 55ae266a5a4e6b370c07729d2546f04354493f7bd221069e6d37929681848e00
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SuspectRecordConf
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SuspectRecordConf
        • Size 217B
        • SHA256 ff70678d81da4dd8a3a993d561c5d3b9e721fa1237ad3625d8dd31b3c0b6d011
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FBDC.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\FBDC.tmp
        • Size 235KB
        • SHA256 41f7b83d588db692602607b1260ec8af4b3a023680d07f8742b2d3c7752c28f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FileInfo.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsh9533.tmp\FileInfo.dll
        • Size 1.1MB
        • SHA256 2d6d9fdecfc5c4a658d728b9c9aae0e17c506fb8bbdcb8e94c665ba64d51c3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RCWidgetPlugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsh9533.tmp\RCWidgetPlugin.dll
        • Size 3.3MB
        • SHA256 90354234bef3cf24d9813b1d55cb034c2fec541e26a91a02088c52d820c35cce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsh9533.tmp\System.dll
        • Size 27KB
        • SHA256 0b399864057723bd388f8924baca252f8ca582287f5862460d042bfb8d2f11bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsh9533.tmp\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 97b88d15406bdd99e4b2c89d1e366a400bc96d31dd4987c8fa02733c6296ff83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345MonCfg
        • Path C:\Users\Admin\AppData\Roaming\2345AvScan\2345MonCfg
        • Size 1KB
        • SHA256 c4757f69efc5e9f2786609f82f234ca9019d93e439cfbb9980c91916109e33cc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SafeTray
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Config\SafeTray
        • Size 233B
        • SHA256 c4829f397d632291d21dfefe5500363c371606f3a4b39bd085c8a37baba41d1e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        fppcycfg
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Config\fppcycfg
        • Size 249B
        • SHA256 c92b92f8c6b8ccfc6ba64b301f743748d3922e793abc56eea57bf37cf7a1b8eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SafeDownloader.lock
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Data\SafeDownloader.lock
        • Size 4B
        • SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
        • MD5 SHA1 SHA512
        Submit Download

        AX01.data.LZMA
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Update\InstalledFiles\001\AX01.data.LZMA
        • Size 51KB
        • SHA256 b01fd8607940980b2d33588923cd3a2ccea26228c6bbecf7885970ff7351b021
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StatDuplicate
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\Data\StatDuplicate
        • Size 1KB
        • SHA256 3fdc225422427b13fae241e77cd7aaac831b2e01214d57428e1ed7e6c107a5a9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        UserLabelStatSwitch
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\Data\UserLabelStatSwitch
        • Size 233B
        • SHA256 da71decaf4a28aa1396cf5fd1f496336a81867d862e4bc720e0612ecad3ef7b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        InsTmpCfgData.dat
        • Path C:\Users\Admin\AppData\Roaming\InsLogicCfg\InsTmpCfgData.dat
        • Size 217B
        • SHA256 a04c7641ffa80783d7510f282c3bd30573f27f2664f152eabe56e72bd4aa719d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        2345Extract.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345Extract.dll
        • Size 977KB
        • SHA256 4a077f84696bcf4817c87a33b27201dc0bcde56002d91d4b2f3660b993779cbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345MiniUI.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345MiniUI.dll
        • Size 3.6MB
        • SHA256 14e9351fca41e261ba9f32032d6f716064f62a873a5db576833d05b630bdddb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftDataCenter.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftDataCenter.dll
        • Size 1.9MB
        • SHA256 6101c46b8a01071b61718d281343022981eeaa9ca8c80c811f661b8556517860
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgr.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgr.dll
        • Size 3.4MB
        • SHA256 d253c3dfd4fd67b67de579bbc3bec2b107b9a033d448c4bbcd88d45b170da709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgrMain.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgrMain.dll
        • Size 855KB
        • SHA256 06e0f7a7f2404efe66d1063bc91687555d3124dd5a81ed28b8f406e862a69926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgrUI.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgrUI.dll
        • Size 1.3MB
        • SHA256 f521400ae528638cd20359451ecbe05ffdf5447996d8721eaf2f97b792cbd06c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftNotify.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftNotify.dll
        • Size 1.4MB
        • SHA256 39d93ce9f7d095ae976ce127184d04ba4c3e1620b7702e86e9d6b56e87eb1851
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 07a41d74c2698eca2d80335a69f3a9e8323d430ace499b76fa69106a40b6f384
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        softuninstall.ico
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\Common\icon\softuninstall.ico
        • Size 5KB
        • SHA256 2ce7d429e468e0306bf7c2b7d75a0cf859fcf0db9ded7d8e8236dc34d22a33b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        softupdateremind.ico
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\Common\icon\softupdateremind.ico
        • Size 57KB
        • SHA256 b94b43d9dc696f4e668d341394bbde177fbc5bf128e422cd93abef3016223b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config.ini
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\config.ini
        • Size 50B
        • SHA256 4c0caaf2878925f600959f0f7e079ff5c4c66149921a451da70dd79f0ad9d802
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        {14452040-B587-4B85-9135-418606D22A75}
        • Path C:\Windows\Temp\{14452040-B587-4B85-9135-418606D22A75}
        • Size 159KB
        • SHA256 0e13241c5ab7fcb0d93e490ba3d147473ce68012921de158931320b76dc461b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {2260FB91-3700-4C79-93E9-A9F827B42F67}
        • Path C:\Windows\Temp\{2260FB91-3700-4C79-93E9-A9F827B42F67}
        • Size 219KB
        • SHA256 67885d9e98b87ac8758034f4122986cb263ba60e1f99b06b773ff4b6578af29e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {36215126-8C1A-4407-A41B-F46A0AFC4808}
        • Path C:\Windows\Temp\{36215126-8C1A-4407-A41B-F46A0AFC4808}
        • Size 225KB
        • SHA256 81eb19ca86afe1e5545aba302c68be527d3f7eda386776205df9614a2414bb57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {3B5892AF-6C30-46D6-90B8-1FA82933C8E6}
        • Path C:\Windows\Temp\{3B5892AF-6C30-46D6-90B8-1FA82933C8E6}
        • Size 94KB
        • SHA256 e97c232f96e6ec443600bb9a145e58500aea5312947051a00e3efe7f1e5116fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {3E03C447-8250-432C-90D1-E7EAC6A3F2AE}
        • Path C:\Windows\Temp\{3E03C447-8250-432C-90D1-E7EAC6A3F2AE}
        • Size 313KB
        • SHA256 c054d115b4d8a44598435eabdf781d120f75e22ac15b779ecddc1634084fb8b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {44C495C7-BF2B-457C-BDD5-646A932F9119}
        • Path C:\Windows\Temp\{44C495C7-BF2B-457C-BDD5-646A932F9119}
        • Size 400KB
        • SHA256 3b7f98b5f339a7de77effdf8a5c086de8496747a7ba280794c38d442197d5917
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {78EF27BC-ACE6-4325-B064-A3BF563FAB2A}
        • Path C:\Windows\Temp\{78EF27BC-ACE6-4325-B064-A3BF563FAB2A}
        • Size 45KB
        • SHA256 b76f039167ade2005d58539bfff28bf190ecc3782e4dc4594e6ea6cf41dc61a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/396-2167-0x0000000036C20000-0x0000000036C30000-memory.dmp
        Download

        memory/1560-1780-0x000000006CFA0000-0x000000006DFA0000-memory.dmp
        Download

        memory/1560-1779-0x000000000B450000-0x000000000B451000-memory.dmp
        Download

        memory/1560-1778-0x000000000B440000-0x000000000B441000-memory.dmp
        Download

        memory/1560-1642-0x0000000037250000-0x0000000037260000-memory.dmp
        Download

        memory/3300-1769-0x000000006C890000-0x000000006CF95000-memory.dmp
        Download

        memory/3300-1820-0x0000000071920000-0x0000000071949000-memory.dmp
        Download

        memory/3300-1822-0x000000006C890000-0x000000006CF95000-memory.dmp
        Download

        memory/3300-1750-0x0000000071920000-0x0000000071949000-memory.dmp
        Download

        memory/3320-2354-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2368-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1971-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1969-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1970-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1965-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1966-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1967-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1968-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1964-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1963-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1957-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1958-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1959-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2353-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1956-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2355-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2358-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2357-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2356-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2359-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2360-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2361-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2362-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2363-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2364-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2365-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2366-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2367-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1972-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1955-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-1954-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2389-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2390-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2391-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2392-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2393-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2394-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2395-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2396-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2399-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2398-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2400-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2397-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2402-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2401-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2403-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2404-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2442-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2443-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2444-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2445-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2446-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2447-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2448-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2449-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download

        memory/3320-2450-0x00000000081E0000-0x00000000081F0000-memory.dmp
        Download