Overview

overview

8

Static

static

3

bea8257728...ef.exe

windows10-2004-x64

8

bea8257728...ef.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe
  • Size 4.9MB
  • Sample261027-e3y7bsys6n
  • SHA256 bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealerupx

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Sets service image path in registry 3 TTPs 2 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 6 IoCs
    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 1 IoCs
    defense_evasion
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 23 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Gathers network information 2 TTPs 1 IoCs

    Uses commandline utility to view network configuration.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 34 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of WriteProcessMemory 25 IoCs
  • System policy modification 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe
    "C:\Users\Admin\AppData\Local\Temp\bea8257728e962f6e4d5d7f16c1313b7223ac9532c0b6e16b30fd1961e8f3cef.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4124
    • C:\Users\Admin\AppData\Roaming\2345PCSafe\Download\2345pcsafe_v7.9.1.13920.exe
      "C:\Users\Admin\AppData\Roaming\2345PCSafe\Download\2345pcsafe_v7.9.1.13920.exe" /S /LOCK3HP=1 /LOCKIEHP=1 /LOCKBROWSER=1 /LOCKENGINE=1 /AUTOLAUNCH=0 /AUTOLAUNCHPARAM= /LOCKNEWTAB=1 /DSAFELNK=1 /D=C:\Program Files (x86)\2345Soft\2345PCSafe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:616
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=install --installtype=new --lockIEState=1 --lock3rdState=1 --lockBrowserState=1 --lockBrowserType=2 --lockEngineState=1 --locknewtab=1 --silent=1
        3⤵
        • Sets service image path in registry
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        • System policy modification
        PID:3920
        • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeCenter\2345SafeCenterInstaller.exe
          "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeCenter\2345SafeCenterInstaller.exe" --type=install --invoke_product=1 --path="C:\Program Files (x86)\2345Soft\" --lockExplorerKB=0 --lockIEState=1 --lock3rdState=1 --locknewtab=1 --lockBrowserState=1 --lockBrowserType=2 --lockEngineState=1 --safe_override=0
          4⤵
          • Sets service image path in registry
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:2796
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho64.dll"
            5⤵
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2192
            • C:\Windows\system32\regsvr32.exe
              /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho64.dll"
              6⤵
              • Installs/modifies Browser Helper Object
              • Modifies registry class
              PID:2860
          • C:\Windows\SysWOW64\regsvr32.exe
            "C:\Windows\SysWOW64\regsvr32.exe" /s "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeBho.dll"
            5⤵
            • Installs/modifies Browser Helper Object
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            PID:5060
        • C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345SoftMgr.exe
          "C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345SoftMgr.exe" --shortcut=notify --from=s --entry=12 --package="C:\Users\Admin\AppData\Roaming\SoftMgr_2345\2345softmgr_v7.0.2.3786.7z" --nwinst=1
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4692
          • C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345SoftMgrShell64.exe
            "C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345SoftMgrShell64.exe" --install=SoftMgrMenu64.dll
            5⤵
            • Executes dropped EXE
            • Modifies system executable filetype association
            • Modifies registry class
            PID:2576
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ExtShell64.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ExtShell64.exe" --install=AvShellExt64.dll
        3⤵
        • Executes dropped EXE
        • Modifies system executable filetype association
        • Modifies registry class
        PID:4512
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=installstatic --installtype=new --usertype=GF --silent=1 --preversion=0.0.0.0
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:5168
  • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterSvc.exe
    "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterSvc.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4496
    • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
      "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Drops file in Program Files directory
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2856
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterCrashReport.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterCrashReport.exe" --crashtype=Driver
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3504
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterInstaller.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterInstaller.exe" --type=after_upgrade --invoke_product=6
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4480
      • C:\Windows\SysWOW64\ipconfig.exe
        "C:\Windows\System32\ipconfig.exe" /flushdns
        3⤵
        • System Location Discovery: System Language Discovery
        • Gathers network information
        PID:1200
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe" /notify_guard
        3⤵
        • Executes dropped EXE
        PID:3404
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SafeCenterUpdate.exe" --type=default
        3⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:5900
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345SFGuard64.exe" /notify_desk_guard
        3⤵
        • Executes dropped EXE
        PID:3420
  • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeSvc.exe
    "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeSvc.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2488
    • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
      "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:1396
    • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeTray.exe
      "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeTray.exe" --type=logonauto --sf=1
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1608
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe" --type=repair
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:672
        • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe
          "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe" --type=repairfiles --target=normally
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5672
      • C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
        "C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:856
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345NightMode.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345NightMode.exe" --type=silent --switch=enable
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1208
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ManuUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ManuUpdate.exe" --type=manusaferepair
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2300
      • C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe
        "C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345SafeUpdate.exe" --type=default
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        PID:3492

Network

        MITRE ATT&CK Enterprise v16

        Reconnaissance

        Resource Development

        Initial Access

        Execution

        Command and Scripting Interpreter

        1
        T1059

        Persistence

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Browser Extensions

        1
        T1176

        Create or Modify System Process

        1
        T1543

        Windows Service

        1
        T1543.003

        Event Triggered Execution

        2
        T1546

        Change Default File Association

        1
        T1546.001

        Component Object Model Hijacking

        1
        T1546.015

        Privilege Escalation

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Create or Modify System Process

        1
        T1543

        Windows Service

        1
        T1543.003

        Event Triggered Execution

        2
        T1546

        Change Default File Association

        1
        T1546.001

        Component Object Model Hijacking

        1
        T1546.015

        Defense Evasion

        Debugger Evasion

        1
        T1622

        Modify Registry

        5
        T1112

        Credential Access

        Credentials from Password Stores

        1
        T1555

        Credentials from Web Browsers

        1
        T1555.003

        Unsecured Credentials

        1
        T1552

        Credentials In Files

        1
        T1552.001

        Discovery

        Debugger Evasion

        1
        T1622

        Peripheral Device Discovery

        1
        T1120

        Query Registry

        2
        T1012

        System Information Discovery

        3
        T1082

        System Location Discovery

        1
        T1614

        System Language Discovery

        1
        T1614.001

        System Network Configuration Discovery

        1
        T1016

        Lateral Movement

        Collection

        Data from Local System

        1
        T1005

        Command and Control

        Exfiltration

        Impact

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        2345ShellPro.exe
        • Path C:\Program Files (x86)\2345Soft\2345PCSafe\7.9.1.13920\2345ShellPro.exe
        • Size 1.3MB
        • SHA256 3abd0d7ecd1a49df82668233192a7cd5629fcb89b0797e00c18314931e3af8fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345RTProtect.exe
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\2345RTProtect.exe
        • Size 2.3MB
        • SHA256 72ce3134cbc1370f280bff1d682438310912a3797e6fac8ea04ff24b0ee71e66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BQ01.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\Data\BQ01.data
        • Size 3KB
        • SHA256 4370f764cb85700e242e8d3cb3d51b1d5a21f13777880e62db03c33c86a4b750
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        64_2345SafeCenterSvc.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\Data\Recover\64_2345SafeCenterSvc.data
        • Size 8KB
        • SHA256 4c2716f23cdcb5de619a1a34f08fd596782b32339a2380ac614c912bc713386e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DriverApi.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\DriverApi.dll
        • Size 765KB
        • SHA256 7da984552020a080d7fe319baf8112e2ce7fff157e5e8a6aee0abaa72e9a57bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DriverInstall.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\DriverInstall.dll
        • Size 7.0MB
        • SHA256 7562f909ad5864bb70c0925eaaf78390cb12ef1ef0deda8c1a6425ef2efe24c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NsProtectApi.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\NsProtectApi.dll
        • Size 67KB
        • SHA256 c9131a384d4eda8ceba30b38bc9286663d913d462f3d2564a1a097f8c2647793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectLogistics.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\ProtectLogistics.dll
        • Size 1.9MB
        • SHA256 afdcf071642136b4c02e96601fb9e69a78e7a5b69a12257afcf08f51cf6bba3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TkNitrome.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\TkNitrome.dll
        • Size 1.9MB
        • SHA256 161bc9031a67e5cb36c6612943bcf845a66d4b72c734dff13c108cebe5402d63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WebProtect.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\WebProtect.dll
        • Size 5.7MB
        • SHA256 b8a37512e41dbf31da7175077926b5b0cc456af9ab7b30aacd112555aa97ba17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-console-l1-1-0.dll
        • Size 18KB
        • SHA256 24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-datetime-l1-1-0.dll
        • Size 17KB
        • SHA256 c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-debug-l1-1-0.dll
        • Size 17KB
        • SHA256 7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 17KB
        • SHA256 f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l1-1-0.dll
        • Size 21KB
        • SHA256 1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l1-2-0.dll
        • Size 17KB
        • SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-file-l2-1-0.dll
        • Size 17KB
        • SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-handle-l1-1-0.dll
        • Size 17KB
        • SHA256 dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-heap-l1-1-0.dll
        • Size 17KB
        • SHA256 535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 18KB
        • SHA256 2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-memory-l1-1-0.dll
        • Size 18KB
        • SHA256 ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 17KB
        • SHA256 dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 18KB
        • SHA256 9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 19KB
        • SHA256 4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-profile-l1-1-0.dll
        • Size 17KB
        • SHA256 f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 17KB
        • SHA256 966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-string-l1-1-0.dll
        • Size 17KB
        • SHA256 339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-synch-l1-1-0.dll
        • Size 19KB
        • SHA256 cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 18KB
        • SHA256 f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-core-util-l1-1-0.dll
        • Size 17KB
        • SHA256 34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-conio-l1-1-0.dll
        • Size 18KB
        • SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-convert-l1-1-0.dll
        • Size 21KB
        • SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 19KB
        • SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-math-l1-1-0.dll
        • Size 28KB
        • SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-multibyte-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 25KB
        • SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-private-l1-1-0.dll
        • Size 71KB
        • SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-process-l1-1-0.dll
        • Size 18KB
        • SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 23KB
        • SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-string-l1-1-0.dll
        • Size 23KB
        • SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        concrt140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\concrt140.dll
        • Size 243KB
        • SHA256 b721897db5542d5b0c970ec624440442ed9ae781e55147feb9ff264f70f66cde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 aa65b590b535eda30e42baa4eac59860ce7414cbce396968e8818faa4df79fc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp120.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcp120.dll
        • Size 444KB
        • SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcp140.dll
        • Size 438KB
        • SHA256 2db7fd3c9c3c4b67f2d50a5a50e8c69154dc859780dd487c28a4e6ed1af90d01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcr120.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\msvcr120.dll
        • Size 948KB
        • SHA256 86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rcrs.data
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\rcrs.data
        • Size 21KB
        • SHA256 3cd31e8153516f5036daae481ace74a043aa6a85b76b8d23f59d0e334f544fe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\ucrtbase.dll
        • Size 1.1MB
        • SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\7.9.1.11484\vcruntime140.dll
        • Size 78KB
        • SHA256 9d02e952396bdff3abfe5654e07b7a713c84268a225e11ed9a3bf338ed1e424c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HipsGlobal
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\HipsGlobal
        • Size 29B
        • SHA256 5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4
        • MD5 SHA1 SHA512
        Submit Download

        RcmdBrowser
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\RcmdBrowser
        • Size 1KB
        • SHA256 c5aab7e3f285cc6fb4b6f2cbfc2b4dbcacd1997e7b81c30bbfe79d8c524838b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        RcmdBrowser
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\RcmdBrowser
        • Size 1KB
        • SHA256 8b9563fb4cd5d7213ad2938a14f36e1f895a91889ab2fada1ea32fc264582ed6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SCWebSilAct
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SCWebSilAct
        • Size 321B
        • SHA256 ed6bccf6dfbbfbeb1ecdb7fb4a3ee9ca6c71fba54eac55decfbeaa3fb5012a49
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 345B
        • SHA256 3289bc1fb651b02bd49ff571467b6a7826ecdd99100445132d02c5892349dcfb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 977B
        • SHA256 78a9f6acd87299a988a0c2001f1ca31a507fe0478827abd117fa91cab96d90e8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 1KB
        • SHA256 37b4562360464eaf8c91e19275ec28fa9b1e86c95efc6f719de893537e7af81a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 1KB
        • SHA256 58b3476abb741b664fa57db489595a839bfac19e4cfa583f03c82f2cdd930dbb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 2KB
        • SHA256 f974e22bfd1136f266c519f02853fcdc4406bf3079d1634fbec395713edf95c2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 10KB
        • SHA256 010108fab7b5ee455fb6ca6da43632a74426da02d075ea93ddfa883731396493
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 12KB
        • SHA256 3b2e66a98f411f227da130519762e4585ef636160dc9927f53d1dc189021e35e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SettingCenter
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SettingCenter
        • Size 12KB
        • SHA256 919131809b6b67ff4f2002b7bd5824b81e9ae54442d80e142525b515ece3146f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspectRecordConf
        • Path C:\Program Files (x86)\2345Soft\2345SafeCenter\CommonFiles\Config\SuspectRecordConf
        • Size 217B
        • SHA256 ff70678d81da4dd8a3a993d561c5d3b9e721fa1237ad3625d8dd31b3c0b6d011
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FileInfo.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk8D6E.tmp\FileInfo.dll
        • Size 1.1MB
        • SHA256 2d6d9fdecfc5c4a658d728b9c9aae0e17c506fb8bbdcb8e94c665ba64d51c3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RCWidgetPlugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk8D6E.tmp\RCWidgetPlugin.dll
        • Size 3.3MB
        • SHA256 90354234bef3cf24d9813b1d55cb034c2fec541e26a91a02088c52d820c35cce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk8D6E.tmp\System.dll
        • Size 27KB
        • SHA256 0b399864057723bd388f8924baca252f8ca582287f5862460d042bfb8d2f11bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk8D6E.tmp\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 97b88d15406bdd99e4b2c89d1e366a400bc96d31dd4987c8fa02733c6296ff83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345MonCfg
        • Path C:\Users\Admin\AppData\Roaming\2345AvScan\2345MonCfg
        • Size 1KB
        • SHA256 c4757f69efc5e9f2786609f82f234ca9019d93e439cfbb9980c91916109e33cc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        fppcycfg
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Config\fppcycfg
        • Size 249B
        • SHA256 de90d879bb5f779732e718ba19322a868a363c04478ac800301e4dc5aff8afce
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        SafeDownloader.lock
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Data\SafeDownloader.lock
        • Size 4B
        • SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
        • MD5 SHA1 SHA512
        Submit Download

        2345PCSafe.OL.OnlineTask.data.old.backup
        • Path C:\Users\Admin\AppData\Roaming\2345PCSafe\Update\InstalledFiles\2345PCSafe.OL.OnlineTask.data.old.backup
        • Size 1KB
        • SHA256 bc517985a2efcf0fe669a8762f8d899877df2e193814cc89fa587f2aefdaa24f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ClickStat
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\Data\ClickStat
        • Size 4KB
        • SHA256 cbc5d3acfb4e98530904dbef9eb1ed8deed48692bfa75b733fefb908e6210ca6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UserLabelStatSwitch
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\Data\UserLabelStatSwitch
        • Size 233B
        • SHA256 da71decaf4a28aa1396cf5fd1f496336a81867d862e4bc720e0612ecad3ef7b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Tshbinfo
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\JQStorage\Tshbinfo
        • Size 193B
        • SHA256 67205ed846944aa51143e6f0255cfc9a38c678c9c5550157714c33bada042321
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        2345SafeCenter.NewVersion.data
        • Path C:\Users\Admin\AppData\Roaming\2345SafeCenter\Update\download\0\2345SafeCenter.NewVersion.data
        • Size 793B
        • SHA256 31c49de8253a883deb806303c6aa962ff772037978138a8667c91b36dba63baf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        InsTmpCfgData.dat
        • Path C:\Users\Admin\AppData\Roaming\InsLogicCfg\InsTmpCfgData.dat
        • Size 217B
        • SHA256 7aa5a4162cbf6d6e055b8fb79013d1814fed779b3fd699ad6b7f86ff6fe4f250
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        2345MiniUI.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345MiniUI.dll
        • Size 3.6MB
        • SHA256 14e9351fca41e261ba9f32032d6f716064f62a873a5db576833d05b630bdddb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2345SoftMgrShell64.exe
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345SoftMgrShell64.exe
        • Size 621KB
        • SHA256 be898f77a4d55fd08ad5e3554769d7fbd55aa0b52f1a854d3114ca464888a9e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftUninstall.ico
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345Soft\icon\SoftUninstall.ico
        • Size 5KB
        • SHA256 2ce7d429e468e0306bf7c2b7d75a0cf859fcf0db9ded7d8e8236dc34d22a33b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftUpdateRemind.ico
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\2345Soft\icon\SoftUpdateRemind.ico
        • Size 57KB
        • SHA256 b94b43d9dc696f4e668d341394bbde177fbc5bf128e422cd93abef3016223b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftDataCenter.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftDataCenter.dll
        • Size 1.9MB
        • SHA256 6101c46b8a01071b61718d281343022981eeaa9ca8c80c811f661b8556517860
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgr.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgr.dll
        • Size 3.4MB
        • SHA256 d253c3dfd4fd67b67de579bbc3bec2b107b9a033d448c4bbcd88d45b170da709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgrMain.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgrMain.dll
        • Size 855KB
        • SHA256 06e0f7a7f2404efe66d1063bc91687555d3124dd5a81ed28b8f406e862a69926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftMgrUI.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftMgrUI.dll
        • Size 1.3MB
        • SHA256 f521400ae528638cd20359451ecbe05ffdf5447996d8721eaf2f97b792cbd06c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SoftNotify.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\SoftNotify.dll
        • Size 1.4MB
        • SHA256 39d93ce9f7d095ae976ce127184d04ba4c3e1620b7702e86e9d6b56e87eb1851
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcurl_x86.dll
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\7.0.2.3786\libcurl_x86.dll
        • Size 2.1MB
        • SHA256 07a41d74c2698eca2d80335a69f3a9e8323d430ace499b76fa69106a40b6f384
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config.ini
        • Path C:\Users\Admin\AppData\Roaming\SoftMgr_2345\Application\config.ini
        • Size 50B
        • SHA256 4c0caaf2878925f600959f0f7e079ff5c4c66149921a451da70dd79f0ad9d802
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/1608-2065-0x0000000037160000-0x0000000037170000-memory.dmp
        Download

        memory/2796-1739-0x000000006C9E0000-0x000000006D0E5000-memory.dmp
        Download

        memory/2796-1689-0x000000006C9E0000-0x000000006D0E5000-memory.dmp
        Download

        memory/2856-1702-0x000000000BA40000-0x000000000BA41000-memory.dmp
        Download

        memory/2856-1701-0x000000000BA30000-0x000000000BA31000-memory.dmp
        Download

        memory/2856-1703-0x000000006D0F0000-0x000000006E0F0000-memory.dmp
        Download

        memory/2856-1575-0x0000000037730000-0x0000000037740000-memory.dmp
        Download