283733d6...1de6

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\QUyN8szwNXaqf4vU.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	433.00 KB
MD5	276f691a3df25481f59d79781799e35f
SHA1	d6d2c7b3cedf21b1accfa55bc3815e10fb9cb806
SHA256	283733d6765a164ec326e72b3f98cad9a00e6c771fabab2da419f790fb521de6
SSDeep	12288:dFzKYDAdBHMcK2wk8xNXDcFpaooyLBFVvcK5TV:dt9vlytFxT
ImpHash	07bf302be377739ccb37951f3e776d63

File Reputation Information

»

Severity	Blacklisted
Names	Mal/Generic-S

PE Information

»

Image Base	0x140000000
Entry Point	0x140031190
Size Of Code	0x4ea00
Size Of Initialized Data	0x1f000
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.amd64
Compile Timestamp	2020-08-09 18:09:44+00:00

Sections (7)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x140001000	0x4e82e	0x4ea00	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.4
.rdata	0x140050000	0x17f5c	0x18000	0x4ee00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.59
.data	0x140068000	0x2dac	0x1400	0x66e00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	2.68
.pdata	0x14006b000	0x3498	0x3600	0x68200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.63
_RDATA	0x14006f000	0x94	0x200	0x6b800	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	1.43
.rsrc	0x140070000	0x1e0	0x200	0x6ba00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	4.7
.reloc	0x140071000	0x7d8	0x800	0x6bc00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	5.4

Imports (11)

»

CRYPT32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CryptStringToBinaryA	0x0	0x1400500c0	0x66e98	0x65c98	0xde

MPR.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WNetGetConnectionW	0x0	0x140050488	0x67260	0x66060	0x2b

KERNEL32.dll (111)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
FindNextFileW	0x0	0x140050108	0x66ee0	0x65ce0	0x192
RemoveDirectoryW	0x0	0x140050110	0x66ee8	0x65ce8	0x4bd
SetFileTime	0x0	0x140050118	0x66ef0	0x65cf0	0x534
FindClose	0x0	0x140050120	0x66ef8	0x65cf8	0x17b
CopyFileW	0x0	0x140050128	0x66f00	0x65d00	0xad
GetFileTime	0x0	0x140050130	0x66f08	0x65d08	0x254
GetLastError	0x0	0x140050138	0x66f10	0x65d10	0x267
CreateEventW	0x0	0x140050140	0x66f18	0x65d18	0xbf
SetEvent	0x0	0x140050148	0x66f20	0x65d20	0x524
WaitForSingleObjectEx	0x0	0x140050150	0x66f28	0x65d28	0x5e7
GetLogicalDrives	0x0	0x140050158	0x66f30	0x65d30	0x26e
MultiByteToWideChar	0x0	0x140050160	0x66f38	0x65d38	0x3f2
WideCharToMultiByte	0x0	0x140050168	0x66f40	0x65d40	0x60d
CreateProcessW	0x0	0x140050170	0x66f48	0x65d48	0xe5
CreateDirectoryW	0x0	0x140050178	0x66f50	0x65d50	0xba
GetCurrentProcess	0x0	0x140050180	0x66f58	0x65d58	0x21d
WaitForMultipleObjects	0x0	0x140050188	0x66f60	0x65d60	0x5e4
GetQueuedCompletionStatus	0x0	0x140050190	0x66f68	0x65d68	0x2d1
ResumeThread	0x0	0x140050198	0x66f70	0x65d70	0x4d1
PostQueuedCompletionStatus	0x0	0x1400501a0	0x66f78	0x65d78	0x426
GetExitCodeThread	0x0	0x1400501a8	0x66f80	0x65d80	0x244
TerminateThread	0x0	0x1400501b0	0x66f88	0x65d88	0x59b
CreateThread	0x0	0x1400501b8	0x66f90	0x65d90	0xf2
ExitProcess	0x0	0x1400501c0	0x66f98	0x65d98	0x164
CreateIoCompletionPort	0x0	0x1400501c8	0x66fa0	0x65da0	0xd0
FormatMessageA	0x0	0x1400501d0	0x66fa8	0x65da8	0x1ac
LoadLibraryExA	0x0	0x1400501d8	0x66fb0	0x65db0	0x3c5
FreeLibrary	0x0	0x1400501e0	0x66fb8	0x65db8	0x1b1
HeapCreate	0x0	0x1400501e8	0x66fc0	0x65dc0	0x350
HeapFree	0x0	0x1400501f0	0x66fc8	0x65dc8	0x352
HeapLock	0x0	0x1400501f8	0x66fd0	0x65dd0	0x353
FindFirstFileW	0x0	0x140050200	0x66fd8	0x65dd8	0x186
HeapDestroy	0x0	0x140050208	0x66fe0	0x65de0	0x351
HeapUnlock	0x0	0x140050210	0x66fe8	0x65de8	0x359
GetConsoleMode	0x0	0x140050218	0x66ff0	0x65df0	0x202
GetConsoleCP	0x0	0x140050220	0x66ff8	0x65df8	0x1f0
HeapReAlloc	0x0	0x140050228	0x67000	0x65e00	0x355
HeapSize	0x0	0x140050230	0x67008	0x65e08	0x357
GetStringTypeW	0x0	0x140050238	0x67010	0x65e10	0x2de
SetStdHandle	0x0	0x140050240	0x67018	0x65e18	0x557
lstrcpyW	0x0	0x140050248	0x67020	0x65e20	0x649
Process32FirstW	0x0	0x140050250	0x67028	0x65e28	0x42f
lstrcatW	0x0	0x140050258	0x67030	0x65e30	0x640
Process32NextW	0x0	0x140050260	0x67038	0x65e38	0x431
CreateToolhelp32Snapshot	0x0	0x140050268	0x67040	0x65e40	0xfb
OpenProcess	0x0	0x140050270	0x67048	0x65e48	0x410
GetEnvironmentVariableW	0x0	0x140050278	0x67050	0x65e50	0x240
GetModuleFileNameW	0x0	0x140050280	0x67058	0x65e58	0x27a
TerminateProcess	0x0	0x140050288	0x67060	0x65e60	0x59a
GetShortPathNameW	0x0	0x140050290	0x67068	0x65e68	0x2d4
LocalFree	0x0	0x140050298	0x67070	0x65e70	0x3d2
GetSystemInfo	0x0	0x1400502a0	0x67078	0x65e78	0x2ea
Sleep	0x0	0x1400502a8	0x67080	0x65e80	0x58b
GetCommandLineW	0x0	0x1400502b0	0x67088	0x65e88	0x1dd
FlushFileBuffers	0x0	0x1400502b8	0x67090	0x65e90	0x1a5
DeleteCriticalSection	0x0	0x1400502c0	0x67098	0x65e98	0x111
SetFilePointerEx	0x0	0x1400502c8	0x670a0	0x65ea0	0x531
GetLocalTime	0x0	0x1400502d0	0x670a8	0x65ea8	0x268
InitializeCriticalSection	0x0	0x1400502d8	0x670b0	0x65eb0	0x367
LeaveCriticalSection	0x0	0x1400502e0	0x670b8	0x65eb8	0x3c0
EnterCriticalSection	0x0	0x1400502e8	0x670c0	0x65ec0	0x135
SleepEx	0x0	0x1400502f0	0x670c8	0x65ec8	0x58e
CloseHandle	0x0	0x1400502f8	0x670d0	0x65ed0	0x86
DeleteFileW	0x0	0x140050300	0x670d8	0x65ed8	0x116
SetFileAttributesW	0x0	0x140050308	0x670e0	0x65ee0	0x52b
GetProcessHeap	0x0	0x140050310	0x670e8	0x65ee8	0x2bb
FreeEnvironmentStringsW	0x0	0x140050318	0x670f0	0x65ef0	0x1b0
GetEnvironmentStringsW	0x0	0x140050320	0x670f8	0x65ef8	0x23e
GetCommandLineA	0x0	0x140050328	0x67100	0x65f00	0x1dc
GetCPInfo	0x0	0x140050330	0x67108	0x65f08	0x1c7
GetOEMCP	0x0	0x140050338	0x67110	0x65f10	0x29e
GetACP	0x0	0x140050340	0x67118	0x65f18	0x1b8
IsValidCodePage	0x0	0x140050348	0x67120	0x65f20	0x38e
FindFirstFileExW	0x0	0x140050350	0x67128	0x65f28	0x181
GetFileType	0x0	0x140050358	0x67130	0x65f30	0x255
LCMapStringW	0x0	0x140050360	0x67138	0x65f38	0x3b4
CreateFileW	0x0	0x140050368	0x67140	0x65f40	0xcb
WriteFile	0x0	0x140050370	0x67148	0x65f48	0x621
GetFileSizeEx	0x0	0x140050378	0x67150	0x65f50	0x253
ReadFile	0x0	0x140050380	0x67158	0x65f58	0x477
WriteConsoleW	0x0	0x140050388	0x67160	0x65f60	0x620
HeapAlloc	0x0	0x140050390	0x67168	0x65f68	0x34e
GetStdHandle	0x0	0x140050398	0x67170	0x65f70	0x2d9
GetModuleHandleExW	0x0	0x1400503a0	0x67178	0x65f78	0x27d
LoadLibraryExW	0x0	0x1400503a8	0x67180	0x65f80	0x3c6
TlsFree	0x0	0x1400503b0	0x67188	0x65f88	0x5ad
TlsSetValue	0x0	0x1400503b8	0x67190	0x65f90	0x5af
TlsGetValue	0x0	0x1400503c0	0x67198	0x65f98	0x5ae
TlsAlloc	0x0	0x1400503c8	0x671a0	0x65fa0	0x5ac
EncodePointer	0x0	0x1400503d0	0x671a8	0x65fa8	0x131
SetLastError	0x0	0x1400503d8	0x671b0	0x65fb0	0x53f
RaiseException	0x0	0x1400503e0	0x671b8	0x65fb8	0x466
RtlPcToFileHeader	0x0	0x1400503e8	0x671c0	0x65fc0	0x4dc
RtlUnwindEx	0x0	0x1400503f0	0x671c8	0x65fc8	0x4e0
InitializeSListHead	0x0	0x1400503f8	0x671d0	0x65fd0	0x36c
InitializeCriticalSectionAndSpinCount	0x0	0x140050400	0x671d8	0x65fd8	0x368
ResetEvent	0x0	0x140050408	0x671e0	0x65fe0	0x4ca
GetModuleHandleW	0x0	0x140050410	0x671e8	0x65fe8	0x27e
GetProcAddress	0x0	0x140050418	0x671f0	0x65ff0	0x2b5
RtlCaptureContext	0x0	0x140050420	0x671f8	0x65ff8	0x4d3
RtlLookupFunctionEntry	0x0	0x140050428	0x67200	0x66000	0x4da
RtlVirtualUnwind	0x0	0x140050430	0x67208	0x66008	0x4e1
IsDebuggerPresent	0x0	0x140050438	0x67210	0x66010	0x382
UnhandledExceptionFilter	0x0	0x140050440	0x67218	0x66018	0x5bc
SetUnhandledExceptionFilter	0x0	0x140050448	0x67220	0x66020	0x57b
GetStartupInfoW	0x0	0x140050450	0x67228	0x66028	0x2d7
IsProcessorFeaturePresent	0x0	0x140050458	0x67230	0x66030	0x389
QueryPerformanceCounter	0x0	0x140050460	0x67238	0x66038	0x450
GetCurrentProcessId	0x0	0x140050468	0x67240	0x66040	0x21e
GetCurrentThreadId	0x0	0x140050470	0x67248	0x66048	0x222
GetSystemTimeAsFileTime	0x0	0x140050478	0x67250	0x66050	0x2f0

USER32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
wsprintfW	0x0	0x140050500	0x672d8	0x660d8	0x3e5
CharLowerBuffW	0x0	0x140050508	0x672e0	0x660e0	0x30

ADVAPI32.dll (23)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
OpenServiceW	0x0	0x140050000	0x66dd8	0x65bd8	0x219
RegOpenKeyExW	0x0	0x140050008	0x66de0	0x65be0	0x28c
RegSetValueExW	0x0	0x140050010	0x66de8	0x65be8	0x2a9
RegCloseKey	0x0	0x140050018	0x66df0	0x65bf0	0x25b
CryptReleaseContext	0x0	0x140050020	0x66df8	0x65bf8	0xdc
CryptGenKey	0x0	0x140050028	0x66e00	0x65c00	0xd1
CryptImportKey	0x0	0x140050030	0x66e08	0x65c08	0xdb
CryptExportKey	0x0	0x140050038	0x66e10	0x65c10	0xd0
CryptDecrypt	0x0	0x140050040	0x66e18	0x65c18	0xc5
OpenProcessToken	0x0	0x140050048	0x66e20	0x65c20	0x215
GetTokenInformation	0x0	0x140050050	0x66e28	0x65c28	0x170
CloseServiceHandle	0x0	0x140050058	0x66e30	0x65c30	0x65
OpenSCManagerW	0x0	0x140050060	0x66e38	0x65c38	0x217
DeleteService	0x0	0x140050068	0x66e40	0x65c40	0xec
ControlService	0x0	0x140050070	0x66e48	0x65c48	0x6a
StartServiceW	0x0	0x140050078	0x66e50	0x65c50	0x2fb
CryptCreateHash	0x0	0x140050080	0x66e58	0x65c58	0xc4
CryptHashData	0x0	0x140050088	0x66e60	0x65c60	0xd9
CryptDestroyHash	0x0	0x140050090	0x66e68	0x65c68	0xc7
CryptGetHashParam	0x0	0x140050098	0x66e70	0x65c70	0xd5
CryptDestroyKey	0x0	0x1400500a0	0x66e78	0x65c78	0xc8
CryptAcquireContextW	0x0	0x1400500a8	0x66e80	0x65c80	0xc2
CryptEncrypt	0x0	0x1400500b0	0x66e88	0x65c88	0xcb

SHELL32.dll (5)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHEmptyRecycleBinW	0x0	0x1400504d0	0x672a8	0x660a8	0x13a
ShellExecuteExW	0x0	0x1400504d8	0x672b0	0x660b0	0x1b6
ShellExecuteW	0x0	0x1400504e0	0x672b8	0x660b8	0x1b7
SHGetKnownFolderPath	0x0	0x1400504e8	0x672c0	0x660c0	0x162
CommandLineToArgvW	0x0	0x1400504f0	0x672c8	0x660c8	0x7

ole32.dll (5)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CoUninitialize	0x0	0x140050588	0x67360	0x66160	0x90
CoCreateInstance	0x0	0x140050590	0x67368	0x66168	0x2b
CoInitializeSecurity	0x0	0x140050598	0x67370	0x66170	0x62
CoInitializeEx	0x0	0x1400505a0	0x67378	0x66178	0x61
CoTaskMemFree	0x0	0x1400505a8	0x67380	0x66180	0x8c

OLEAUT32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
VariantClear	0x9	0x1400504b0	0x67288	0x66088	-
SysFreeString	0x6	0x1400504b8	0x67290	0x66090	-
SysAllocString	0x2	0x1400504c0	0x67298	0x66098	-

NETAPI32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
NetShareEnum	0x0	0x140050498	0x67270	0x66070	0xde
NetApiBufferFree	0x0	0x1400504a0	0x67278	0x66078	0x51

IPHLPAPI.DLL (6)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetAdaptersInfo	0x0	0x1400500d0	0x66ea8	0x65ca8	0x44
IcmpSendEcho2	0x0	0x1400500d8	0x66eb0	0x65cb0	0x9a
IcmpParseReplies	0x0	0x1400500e0	0x66eb8	0x65cb8	0x98
IcmpCloseHandle	0x0	0x1400500e8	0x66ec0	0x65cc0	0x96
IcmpCreateFile	0x0	0x1400500f0	0x66ec8	0x65cc8	0x97
IcmpSendEcho	0x0	0x1400500f8	0x66ed0	0x65cd0	0x99

WS2_32.dll (13)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
connect	0x4	0x140050518	0x672f0	0x660f0	-
getaddrinfo	0x0	0x140050520	0x672f8	0x660f8	0xa5
closesocket	0x3	0x140050528	0x67300	0x66100	-
select	0x12	0x140050530	0x67308	0x66108	-
shutdown	0x16	0x140050538	0x67310	0x66110	-
WSAStartup	0x73	0x140050540	0x67318	0x66118	-
send	0x13	0x140050548	0x67320	0x66120	-
socket	0x17	0x140050550	0x67328	0x66128	-
WSACleanup	0x74	0x140050558	0x67330	0x66130	-
recv	0x10	0x140050560	0x67338	0x66138	-
WSAGetLastError	0x6f	0x140050568	0x67340	0x66140	-
freeaddrinfo	0x0	0x140050570	0x67348	0x66148	0xa4
inet_addr	0xb	0x140050578	0x67350	0x66150	-

Memory Dumps (2)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuild	Bitness	Entry Point	AV	YARA	Actions
quyn8szwnxaqf4vu.exe	1	0x13F490000	0x13F501FFF	Relevant Image		64-bit	0x13F4C0A58			... Memory Dump Actions Go to Process Download Dump
quyn8szwnxaqf4vu.exe	1	0x13F490000	0x13F501FFF	Final Dump		64-bit	-			... Memory Dump Actions Go to Process Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Trojan.GenericKD.34327466	Malicious

C:\Boot\en-US\bootmgr.exe.mui.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	83.56 KB
MD5	287df2f145b9d36f1a732569939f37d1
SHA1	fe524d34da450a6a1662e296e1a72af53ce88e2b
SHA256	05306e67bf172cc58bdb52e90813a3095a4cb8621f42c46152e46ba4fde5ca4c
SSDeep	1536:ZKjDcUlVKa0BGxa9f13oUjE/0kpz8tzWu/mrrDETilLwR:uA04tBGw9NoUhxtzKDETjR
ImpHash	-

C:\Boot\ja-JP\bootmgr.exe.mui.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.06 KB
MD5	f3d43295d4bbebe7739c468d15931e09
SHA1	53a421ea6b4246804b895b83cbbf716e1e5773c9
SHA256	0e52125e97e5f6dc82d815cd2dd077e3535ed7158be566ecb5ce6599b1dfa566
SSDeep	1536:k/n+wNp2a7tYE5EM6bHapH9Xy1F/l213p6FZnRjKvYH:kf+wtuMjH9XmF/ls3qn1EYH
ImpHash	-

C:\Boot\pl-PL\bootmgr.exe.mui.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	89.08 KB
MD5	a2ae2e32e384b780de58d54f3a83ab6c
SHA1	e51f4205501afd6270311ab087d6974c780668eb
SHA256	cd45689db7d92972cd0c77461962e895a2ccdcbe67de5c837dcf8081fe98211f
SSDeep	1536:oLD6ia3TAerqb+oLtRv6jJspdZRCyuaseNE0B46EwLFgtJJhJ:kmnjhPoLj/vCDYE0Oag/J
ImpHash	-

C:\Boot\nb-NO\bootmgr.exe.mui.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.58 KB
MD5	54b56dd52276afe1971b5964760293c5
SHA1	0bf6d6ff118dc81cf435f63b04cc359f903bb95a
SHA256	84a825acebf80dfaa25ed62edb84d0e466f34a2562293d0448fd38361f15ef43
SSDeep	1536:Q9BK8GaRymtsx+LzpRqv0AP5t/QE25A1tn2TPm7puRBO:Q9BmaRZt++LzOjI7GFmlR4
ImpHash	-

C:\Boot\sv-SE\bootmgr.exe.mui.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.06 KB
MD5	63b0bf0eb8eceb393c8c7b90fc4524ca
SHA1	82998b833df2c25fc66a08db4fc8535479c4ab59
SHA256	f7b04688e1926d6bca0547fcf6501b72c7638866ef3d9c3e570180df4ef653cd
SSDeep	1536:F9tctXEB+3kRfCtjkKojb4HVN4jaRQ6wRiJkNm4F:ftEXyGWCjkKFAaRQ3ikI4F
ImpHash	-

C:\Windows\PFRO.log.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	26.98 KB
MD5	4105a0661cc450fad00479bba199cdf7
SHA1	1a2032c25b7a8c8a9053eeb1cfb99bfd514b5f95
SHA256	2995b03b149bbe260fd23e76d31e6dc97d93437f9ba70c8683c2c0545e08a4f8
SSDeep	768:RAdHLTF7Ymcbv5txXh6cH5cd96IEGzpbn6:ROrTFkmcXxQcq76szc
ImpHash	-

C:\Windows\Starter.xml.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.57 KB
MD5	7074722bb4e293661e504d6abf6e9d6e
SHA1	cf4d4bcb2869b338fff79a0b3017007c08abbde0
SHA256	62fbc014fe147993a36350420c7e81c156bd81c13cdc79242e8115c61b0bfc9b
SSDeep	768:iuwDwDTWUWmv/F/35dhkVeAH3J3pfimNVSA+wnAUnzBTPjUHgu600CbXcP4JIUQY:iXDiTbWmnF/36Ve43pfiFA+wPQudCbX9
ImpHash	-

C:\Program Files\Internet Explorer\ie8props.propdesc.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.09 KB
MD5	a5ebd5d1994a0b3a3e1803ecd8564d54
SHA1	ba92926feb83072e724b8250bb715e789c0fc00b
SHA256	fb63b669dcfc7d3eddbb9157bd29df70fb683183748544832f169a83e923a561
SSDeep	48:IScbTzM8Nsqpxs5iktxI6+mT0bP/lqKZ+OCh/lBPB8CZzHpb38Ty/LwYtg8GDUu6:IPb9FLk8YT+FP8lNBPxpRLHtg8Gjc9
ImpHash	-

C:\Program Files (x86)\Internet Explorer\ie8props.propdesc.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.09 KB
MD5	15544739a56e750663a4b562176d1401
SHA1	fe5837cc985a3fe3cf0305e74a47104611236087
SHA256	fab8f75a2a017bdc4044f8e4576c99bdf7d7ce45dc210c1ceae29e24f4c8ef30
SSDeep	96:6VLrpOkZhNXaajD+9NL4FEDqR+soljj6LJ:+pLZhNqwD+HLgoqR+tlH6LJ
ImpHash	-

C:\Boot\Fonts\cht_boot.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.70 MB
MD5	c29a8a1d65695b3f01cafb2eada4a325
SHA1	94af1888015b6386deb0a357c2a2b797c439a73f
SHA256	925b2c4d21e23a3cef4908bde4888e03016f95c00de26db5f2131fbdae76655d
SSDeep	49152:nfvvLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYu+SV7SkCrWGBydrGOIs5KknYNqW8LG:Q8WbGOIghnW8q
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\freebl3.chk.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.38 KB
MD5	aefe8cc6adcf23d2867bdee78e76367d
SHA1	2400ce5166352ae3a97cf11de3875bcc55b1e4ec
SHA256	fdf1bc74f8b350ccfbe350b8101989fd5d313e44fbf5713a0a7af744786b5fec
SSDeep	24:riFlOVW5xQXJTTOvvqro4GK5WiNa4fDZDfrUVNDdReEzfXo7+KSi:eeBK4f5Wka4fdLrUVNJkIXXKSi
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\nssdbm3.chk.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.38 KB
MD5	d320905ef4ee065558ef321a18673d6d
SHA1	1366d6fade6059e8f6701a01584915d9f698a07f
SHA256	855317670a751e749a7839f2cdb5d99984b738f008fab85d71c006ed7699d384
SSDeep	24:eFXsbJY7F8EJ1PWPD81GQLoEvoRxbYpCEGDZz2E1n0ILVsjWu3Bs:eFXMJYx8A1d1xQmGFiszRsrBs
ImpHash	-

C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	838 Bytes
MD5	2d8b251484b680aa45897d2ee6790c7e
SHA1	7162908ee805cf4eae29f94807dc3e5b96b00efe
SHA256	642f3616e473e5668e22c9875813b74d5b3d603cfbe060bf45692cbfb09019b0
SSDeep	24:KNx9KdtOxz2h+qaLTEhroWktzdKTSaITRHy:8UtOs+qaqrTkheSaQS
ImpHash	-

C:\Boot\Fonts\jpn_boot.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.89 MB
MD5	c14b00f87a0e915e7b94bbd3d0ec88d2
SHA1	f70b12996b0e9ff32a9d1161a28fb694912b5361
SHA256	c65685a7cf7f4469f00be75e9cb565545b4c7d27ba7928f6f1d6f47bbfcbd1a3
SSDeep	49152:qfPe6imLe3IWYidPwzDXV7wPxHaHNzE/DfD3t8ZHHzOxw3w5:GgaHNzyDfD3t8ZHHzOW3M
ImpHash	-

C:\Program Files\DVD Maker\directshowtap.ax.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	60.50 KB
MD5	9d890348a14387c8c23ba0761d4c1714
SHA1	33368ed3292d02e927db0217148f3bd58082cbc4
SHA256	aa4743bc86a821ccb6bdca3b171d3a20abfeeef195a40ce9d5bbd5e89e49c9a2
SSDeep	1536:Cqrd+sZIWDpDdTPZnyqdXEYvheTWm+6KAIZHSVF0n9:VRLZIwjZ/f8L+HF9
ImpHash	-

C:\Program Files\DVD Maker\offset.ax.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.50 KB
MD5	d196bbb4b9be4931c9563ddf0df6ffb0
SHA1	2865e3f3d238b388dad024d0e5f3da9552d9e030
SHA256	e6f280ed087b6a46d772c09f0ecc825c8a0054d032ae30413acb71e64c805c39
SSDeep	768:9IoEixcpNyVdvTkE1TNMTxTcJrYzdiNgzJfDwFcecHNbup5yI5H4I8RL31BSEwVr:UiLdvTkENNMT6rsdGuw5Cmv5YTt3N6bn
ImpHash	-

C:\Program Files\DVD Maker\rtstreamsink.ax.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	77.50 KB
MD5	e57e070ccecc6a6206a67395fe893cfd
SHA1	815a7898241346153133415b86e3122eb25bde7c
SHA256	7c89a9f4b9b7358e887832e86379ef6a3f3be700823a2a2137043d9b5d96ab57
SSDeep	1536:c2r8eE/pAMeHGw3gFZFsHYHts91swlTfT0s3s+lq7oWafRuI0S87C:rr8eERAMeHiFJNmso30s3s+ldWafRo7C
ImpHash	-

C:\Program Files\DVD Maker\rtstreamsource.ax.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	52.00 KB
MD5	84eef418e8aba02a6672a65b9cdb7438
SHA1	bb6e275aed60440e351ebc6d291c2a81d83e3fbe
SHA256	db989b6258c4929e910823535238301eb5d3ccfb31108186ac4b7d2783377630
SSDeep	1536:Zt5PUNr8WZdG2Oh2hx6n/8W1jlGO9bVY1FsEH:nteLthKRB9bAFsEH
ImpHash	-

C:\Program Files\DVD Maker\soniccolorconverter.ax.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.00 KB
MD5	4828047870435bbafd9503803103abfe
SHA1	5f8ed346ac11f44ba5e430fe1bde40383a06545c
SHA256	f0b5fd8d10117ba0816cb8980d70bf18ced1ccca41014bddbe3b700c8f96e7e5
SSDeep	1536:FsngFw+MxO4OJjStz2ongmo/6WSl3z5pmOc5gVfRGyi8I:hFNMxZOVS92onFo/6dA5gVfRGyrI
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	838 Bytes
MD5	da8de1dad83281d97423b82f86e9820a
SHA1	fb2cc460d60c653e0d74915e01f119b01150f29a
SHA256	083f0d483a3982601b9f0ea1f3acf0f286ca485bcbd84e4965907e7508a5b2d3
SSDeep	24:M4GXM8bmuqFMz9nSD5yZEl/UkSe4MheENwsP:pjXMz9nSeERLSe5eESsP
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	862 Bytes
MD5	58448288e6bb117e2a2de5f98b39c3e2
SHA1	e4f9faa45ff0a782016ff6915cd7a069b31054c8
SHA256	b680e1e9ed1f0d42a3ffbdcb7080af4efeb8168ee1753c4b299e4c9451a02b10
SSDeep	12:TLvcBVILYotMON22mXyHZMMg6gLXfmLW3XN3vb33CChLwiO5s23jztBRKZk62tm:TLSVIJMOOXsz2vmgz1L6+kp0
ImpHash	-

C:\Boot\Fonts\wgl4_boot.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.84 KB
MD5	cc05cb0d789895e61b4a4c3323741aec
SHA1	e9cae22a17cd82f917e2ba8e3615203b4e13719d
SHA256	68a06de31eac8fb989292e526e36562e99a63b6ac5900803c9fcfdcc208355c2
SSDeep	768:yzwqpbmDfom3pWmT6vU1qej4HzpUsL2RDYApH35N7L4LcY+gFLhUd5Wi4LIb6l0Z:y0qIDom3UompvL2Rx5JdsLbcd5f9+LJ+
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	844 Bytes
MD5	ea74a713ec8ca4d89a31ef94f77fc63a
SHA1	0fc5e46eed5336ac11a6f9035b7b1b58b510c42c
SHA256	988ee410a2c81f8e3634cfbd2f58282a1133cc470bc7559ad2b55eed90e5a35b
SSDeep	24:SKbmSrM+GP1tjfG05Kr9hW8jJXfWq1V1GiSj:SK5M+GtVfGB5fWqgP
ImpHash	-

C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	850 Bytes
MD5	66bfa32679eb50521f50d2e258e3364a
SHA1	c5657a6a3330ddfdc10e79e6e1c08467c77e38cb
SHA256	a069b02fb17162ea101395aa9af0a91f09b180720622e3690df3db4872787256
SSDeep	12:bZgIg0MReJLS1JqhW82QYOc2bY4DhzANWugpuYdc9ouVQn2KSG6/73KTHukYKTFW:bZgIghEJewhWKpY0PpuYdc9tQnMz6dK
ImpHash	-

C:\ProgramData\Microsoft Help\MS.VISIO.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	862 Bytes
MD5	19008c598559cfca96aa610570d6c5f7
SHA1	d0c441fdbb7457977a8faa27b2961aad6b0f3506
SHA256	ee6910420ed37f2c2d383072154813781aea11cb1c45d387463c76d132efab00
SSDeep	24:L+3ihEfzKgfRHshltffPuCzaMYSgx/uxF1HUCNl:LQihSN5HsJf+QWlxanRl
ImpHash	-

C:\ProgramData\Microsoft Help\MS.VISIO_STD.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	862 Bytes
MD5	c4295095cf6d52603bb64bd41d2fd7c1
SHA1	5379b1365d72d86d83a50a582c071c3bec7b4427
SHA256	f678cce96c937bc560f3e5d9e1d84072ed42667987e46afbc56df299207dcb96
SSDeep	24:Cq739rG3zsuyrXerRwMl7UihKCwFpk1BlXEMLqNxTE8GC:Cq73Qz2bAl7zupQEKwTx
ImpHash	-

C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	874 Bytes
MD5	5309898f02e09f8fea8b106e55459e83
SHA1	01bd4438cabfed8415a5ea4259f6978eb8a2007f
SHA256	acf54616912dd518f073202faed7437e4707f95feed63ace4c7e7fc66e0e85a3
SSDeep	12:QwsTNC7YGdwFvrzC2k5rZ+Xte30jTRy+UneqD9d9xcoJsPElCQmvqCFnWENdo/Pb:Qwso0pe2k5cXtkEtBUnec9x3yPXnoCdy
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\precomplete.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.47 KB
MD5	bcb5efc78c5b01ba7e764bc8315825d7
SHA1	5dc955bf1ae26f5d4f93d8d9b5181a699b0e92b8
SHA256	0d6e484894d35ad7b234167892b950f71f14a934c0b36b4b0f5c7bae5f58e348
SSDeep	48:FyZQktZ+c2GJ9LQqmw0qhJm2kfnVFn9d/43JCdIWSjr:c6OA7GJ9L1l0km2kfnVFn9d/PtSjr
ImpHash	-

C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512.50 KB
MD5	9d7894a003e136d31806942c4d7eb9f8
SHA1	c8553710312d3c4786bec6ca737b57685737a561
SHA256	5a1774b082fa0b93719ee470c0a0cbfe57b16634152f0d7a8925dd48a0f0cc9c
SSDeep	1536:WVdsMHvvILRQnk5NGP+FlRkFpzunOdFPHKTVJ8tmFgcFk:WIMHIl5NGPELkFYOdZH6LJk
ImpHash	-

C:\Windows\ehome\ehRecvr.exe.config.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	632 Bytes
MD5	ab4e1d270e77e07b564a56f9e08f872a
SHA1	6f122f9a7513705750889f32128a990363525ea0
SHA256	6ac987475c15da0174ee1686e45be111b6becbe2f79ad3c0343ca3a186594d25
SSDeep	12:mIelx3MlTY50t9TxkW3g1K1fxdQxCz7BRRGca6MjBjH8jFnLZnqyMW6C9:gcl3xL4yXQ8XO6M1LuplnqRWH
ImpHash	-

C:\Windows\ehome\ehshell.exe.config.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.72 KB
MD5	4f6691090d3799fbde775aa44f3ef4bd
SHA1	c92c76dc6b1bc0b933f35d3c7c4d47ca49792b81
SHA256	49b22b3b2f30007ee6719e0a9a6d948c12842de7983d9d85787eab07fdd19b57
SSDeep	48:Z622bl2Ji6tWaJa9V/r70uiPKU0gFBYI+ZIUBoeHhQtsL9owc2Wl2WDDBIYPautf:A22Jl68aoV//0uiPKajYpoAQtsZoF2OR
ImpHash	-

C:\Windows\Fonts\8514fix.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.22 KB
MD5	d7e5c51cc706e0e206c2385b97140a47
SHA1	b7f6a8e4c8280fef4dc50f89b30cf3f5710dccb9
SHA256	fac9b3d98602708bdec3c6b115464b65d732e2c290bc5f1cfc05a91e1a7850e5
SSDeep	192:LXxbDRKYZ9FOdwcOp3IgbKuEgoHWTcpsCo1iVk3sqKy8YHEK7JddIj:LXZDU0w64gOrHOc2CkiWt8KdQ
ImpHash	-

C:\Windows\Fonts\8514oem.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.50 KB
MD5	d45384696ff29836364efabb0ce643b5
SHA1	e4865b9550bf73dd5c163f25c53f7f09c5f5886f
SHA256	b985346d0b1bcd9af086b71b6af8e953321ea260864713562a7b11eebdc1e19b
SSDeep	384:ywBytlfuscPHzLlokmxh0OgntUvJ+/LLH:y28WFI0OgavJ+/LLH
ImpHash	-

C:\Windows\Fonts\8514oemr.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.39 KB
MD5	3b5c0d491149bbd05ba9461c763a87d5
SHA1	fdf932580348695917ce938e25f1cd12e021d843
SHA256	0348fc543fbe752993f9c1eb1876c20d4a47972eb627a5b4938c004ce1d225ef
SSDeep	384:gnOwZV6b/pAcKLJbKhQpGiZKglZjbTYQFkaSXPL0c:g/VwMtGhsGYKmJz6auX
ImpHash	-

C:\Windows\Fonts\8514oemt.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.92 KB
MD5	785e8997b443b4a42edce7f57ca86b82
SHA1	82d63935ffeb97626cc1d3095b2cae592ced6793
SHA256	f95c2af23c17eb8841c1268fee6e25b7236517e9585afa0fdf4dfbf6a033af21
SSDeep	384:s/8/f+4dzoN/8vv93I8R5j4XeWS21iOSQC:4mhoR8vC8RquWD1id
ImpHash	-

C:\Windows\Fonts\8514sys.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.56 KB
MD5	bf8030553f82402fc208a803e54ef575
SHA1	7d9c5a6e47c1adfb4f81928ff1930bb7ecef70d6
SHA256	89068c6d60c7c4aff1f54a3b0580d68ab44b5a98e98e42293288f809c91e3049
SSDeep	192:nJTJy1GcmkE3GMHMoElaJaCmZxFNerS70ok9uPCt1drmn/HKRAcNIrml:dk1GcStzElZZzErFozPq9SqRAcNI6
ImpHash	-

C:\Windows\Fonts\8514syse.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.78 KB
MD5	907a3fae281bca6f365462b84ab1ce3c
SHA1	fd3489a8c03f858c2357c0428b4dccd6039e3599
SHA256	744fbadc4337436a95faa312efd035cc2d732103984214a2619ea36a5f1274e9
SSDeep	192:PgGcGNmpGP0wY6iJguorYpa/hj06X6wOXjhpJcriGbTE:PgGPNmp046N/KK6wWhgJY
ImpHash	-

C:\Windows\inf\af9035bda.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.06 KB
MD5	6801380fb2e5e79b02273a75826e5d50
SHA1	2aac149b5f20fe9f9be6df96835361ad6abc5a0c
SHA256	42fe47e2d7f7e828263752622788ba82411a68f56ec6f97b9d7a227a85cd9ef9
SSDeep	384:ss+a1Dv7iRiZNcZX1kxlUdYN6LquLZqD+x6HT:ss+a1DWRsNSXyTNwwD+ST
ImpHash	-

C:\Windows\Fonts\8514sysr.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.33 KB
MD5	972b2d482326da198a4a4f02a8ecdc81
SHA1	561ee12a3a68c290cf947cb0ab27f3fe32efba6f
SHA256	01ecc3eb23baeb9a53d38773973f2b68f2545f5372e266d3fcbf2f204e17dd9e
SSDeep	192:7brvsWajRDpOYlvar1YNqWWR77gDanKrMq/cp:nrvmR9PiruNqRkG1tp
ImpHash	-

C:\Windows\AppPatch\sysmain.sdb.pandemic

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	3.89 MB
MD5	d2814de0ffbf719641d90800ecf095ba
SHA1	e1eebde2dd2f5f992e4c795af9ce1bd449ca3654
SHA256	29c92b3ba67412e9356827ebd1ed4bfb3637c41bf3855febf91a9ab5e2829ba5
SSDeep	24576:vhQTWdYfXq1QgReaHaFWgKYUCXu/PO7yPHWtmdgeUrilawHh7UU+NN3qcKp1m8c:vhaUYfXq1Qe5aFJ1XuHO7yWtpX8pHh7u
ImpHash	-

C:\Windows\inf\agp.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.83 KB
MD5	21963acb16251732881a85af6221f6fb
SHA1	ad2eec377d9d74f952889a5ef1ffbf3fbd0e873c
SHA256	025170c3443bf9734ac932fabd5752f6921bf12f821eb3841a5b84235414648e
SSDeep	384:0KfefFGqGYPAWdS86yvLYn4I1jidAWEv/yAMQ8TFS:0KfefFjdRoLGM4sidfEv/y4h
ImpHash	-

C:\Windows\inf\amdsbs.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.94 KB
MD5	e2ddc3769847b97a7a66e315c2f79500
SHA1	21446838bd3f17d1382a8db6acd7ed65a5fb6566
SHA256	6aa3426b060213d7412e01f15028e77b4edce79964aab04ee1482097a871faa0
SSDeep	384:IqohQvjFw087hRO5IzrH5gazaLgxtDKJYlF:Iqo8IzrH5lmgxtDKJYL
ImpHash	-

C:\Windows\Fonts\85855.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.47 KB
MD5	1f951a5f31eb949a65bbf9be7b5b4f9f
SHA1	c70fb05d363c90ea942a449c712ac87d4a7cd9ca
SHA256	bd449696faa45cdcc53d703e4cf76287c27d4ebb768bffc0f08fd931093e8f16
SSDeep	192:PIXsBXo11PyV7h9pONiwGqXNZdM6KI1q0a3fgTA212dHxrIBA7oWeWlufF+l0DwC:OsBXo11eN9peGq2tH3fgTAddl7kM6qw3
ImpHash	-

C:\Windows\Fonts\85f1256.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.59 KB
MD5	e3e9dfc1c707f4ed0a47cde8de6fa7eb
SHA1	4978c0e4849fc61e7edf50756490d118532ff957
SHA256	4f9093d655d8e0d1ad8c3f44e192ba2db90feff30b7fa8166f03c55c4078deca
SSDeep	192:HMsDCalMOXry3iY8cNfzRXUvXezxqBbW34zDvGrlm+ScBOHZTZq2Oq7/uvWs8sx+:HMsvl/XGyRIENbLLWlmxcYHZT3OqaSOE
ImpHash	-

C:\Windows\inf\angel64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	23.72 KB
MD5	b35b2b926d45d7cbb0de668a62c57016
SHA1	8d2f51893931d6420abefc1c44a7d59bb15039ed
SHA256	f442bc7f23ddc59aae328d6c07a71545a28d6b3acd02e56b1026b69d1852e66b
SSDeep	384:BgSVqIyOoEmT7HtYc+9iU3XvwgbHW0ckx6KvN5TL8Jz3mzPk+OGvE069g99a6bSy:BgxIynpnHLKN/rzbEo5cV2zP6069gnaO
ImpHash	-

C:\Windows\inf\arc.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.11 KB
MD5	e6571060e68f9000a9321bb3b341fe69
SHA1	7badf03f04be9dbe9dc2f7a58ee6e8d7a4729165
SHA256	0f3783e1f47a41a363be2c88e0bdd861198e06ecac1992fe9fe53b5d02d60257
SSDeep	384:lkItroedYN9SYPaeAxbUozQRR5ZnOIckiISrzwU7MmF:NBXdYN9SYdgzQT609Svw7y
ImpHash	-

C:\Windows\inf\atiilhag.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	365.32 KB
MD5	af4590dc13d116881b655a56109aae52
SHA1	e3cbf3804b53cd20a096c385eadf9275e06376c1
SHA256	5c1ca4f94e9e635b16333d4c80c708fd27d093d044c14ac0c1523afdcaae20c6
SSDeep	3072:xl7IMyMgdfhCm8vX4zD+EoLkEVzjVe1CK/OAv5RIpTJ692j+XI8DXJe:nZyMgdJCm8vkyEoYEVHgoKmAYES+Xzc
ImpHash	-

C:\Windows\ehome\malgunmc.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.14 MB
MD5	5e7e57e2b53c5fea0cdca1851dff9c7a
SHA1	233d2495e7ccc48d900ac0775ca1939ac9b79eac
SHA256	ec745786f9f68d9df75eec168621ce548dcc8d3f38bf45ebdd3111a3406d5bc9
SSDeep	49152:J4gDG2HrVTxyIIUOMTJ9A7lyIzyE5+iJzpIey2k8ZZTrLPlGkkUpabXw2Kj07PYa:c2JcNoC3Tbc35
ImpHash	-

C:\Windows\inf\averfx2swtv_noavin_x64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	24.93 KB
MD5	af62608a48eb72da5febbb589763f58d
SHA1	599962c27b8e603a56fd24e833f75ca0164ed93c
SHA256	088547880d4c2f7e8085035304fef27ebce8a1604455fe5b335dc3ef4f92a964
SSDeep	384:+q7C3vcN+H0SzzHxicryqQCjkTyZBC6WVkxOKrNmF8VAf/0ZG3fvUiZj:bxSzzRiczVPZBCbVMOKrNS8w/0Qvvh
ImpHash	-

C:\Windows\Fonts\85s1256.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.86 KB
MD5	a0b4d13ef97fed1afb6b6a60ae370b00
SHA1	e5913b57eb385c9e2c3d700e6faced07e7a0342a
SHA256	734a65542533ff71c7b7c0cf395becba194a01093cc5a7133a51d13a740cdf51
SSDeep	192:6eIjEtOqWlUEN60EPG0GOZ9MHb+8CZGa8Q1z+S7/4aMZfpChaVNwDq8rVx71kaKX:6ePeUEZE+cZi7Ilp+DZB/P8f371kIk
ImpHash	-

C:\Windows\inf\avmx64c.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.92 KB
MD5	e022412faeb15a3f5e1fb4a06a9e56b3
SHA1	5bc3d8fa4031bca753ee96ba28b470265432792c
SHA256	1ebf52c2fab4652d4b26f33981c7faa6e3f89af078607b2f24269a813f99bde2
SSDeep	768:HmYZtidW0IKZ1Cjsuv/ettARiJTNVPxLoAcxtWk4JKrdtQ/GPO0ptv2ZOQ:HpLMruiWsJTNVBeeCpP9y
ImpHash	-

C:\Windows\inf\brmfcmdm.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	121.08 KB
MD5	f13ef062de96deed9dbd66e8ec4af929
SHA1	fad97809a3a53ee24ee3cc17c15c5c5ea5f29777
SHA256	e4b48068288de11c57f6eb796fbecb27707efcc6131e84bec6154fbc3549eb4f
SSDeep	3072:Zx0QBB0GHPVcLTP2Vwym9yd0uXl+A60u55:7CWPVyPk4
ImpHash	-

C:\Windows\Fonts\ANTQUAB.TTF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	147.96 KB
MD5	67b7d48b999eedd998e6d2ca573f5fbb
SHA1	2d4323eeb77a19dc1c4d8d882eec9d6afd754603
SHA256	5ff9eb7e0b819ac83a078ea2f7d6419488c5ff85ab66f2e2f1e8537852127d32
SSDeep	3072:+xRtotdx8vubv6vA7z3Eh6A7qfJWkkkJGsmK8k71UaHdfrE4:+xbvhFh69xV2smaRE4
ImpHash	-

C:\Windows\inf\bth.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	44.47 KB
MD5	768d4ff2e3d434e3cc9a919e416f8d28
SHA1	de3e043189bf1c9fe9da0d7bb86d3f1736c4600e
SHA256	e42b60e05736949fffbab11ec3a3cde7252b42cec345332223abb9dc3112a562
SSDeep	768:Jk/4tv8DBCr2eolExUFvgQgeRaUw8cGHmuqqqXEDbFJfRSB8xaTSTC9:Jk/41vrVomIvgVeRjNcfudbpJZSiaTQA
ImpHash	-

C:\Windows\Fonts\aparajb.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	211.30 KB
MD5	eca69798efce3a9434a5920db5e1e869
SHA1	97a17133cbb051f58a22a07375fa163ab2841e59
SHA256	5824ae8b50c361cca41ae4d8f56edf9b65d9bc010dd8220fa458ccf99d9440bc
SSDeep	6144:Dlxedn/Bx4RrOLZPvifBV55M3rogP3W8iWYnZz:DlxupqO93iEbYTLZz
ImpHash	-

C:\Windows\Fonts\aparaji.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	234.48 KB
MD5	3ee8813a1603e4591d7a0c0d3e883810
SHA1	d9d7be57ce8c1db3eb654c622070d53c8345ecb8
SHA256	c86c85893bb0f27901aca4089ecde2e6f3d14a86ec18afc1354a6fb3626752f3
SSDeep	6144:itkV3D0VEakgKc0CLa+gX10J3M28t5DpZ:ZVTEkgKKu+E10J828tJpZ
ImpHash	-

C:\Windows\Fonts\app855.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	36.92 KB
MD5	89b7ef8295cf0a5336f12c5f1023c2fb
SHA1	38ded23d176b411715c06b4a4c16537be0e2a0ad
SHA256	06a2afcdf55b1a42a08a61877bc479f7e880a86f61e4ef6b0a7947ae9e8bd388
SSDeep	768:fTbxBEP+3pt4KsBbp+8z/T3dhnQfFgBAytZEhqPiiKoXZ3Oq6s:7jXD4KODjd10UAyU0VKop3Oq6s
ImpHash	-

C:\Windows\Fonts\app866.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.09 KB
MD5	4b238b80c023d20c287ffd49d3c6fdaa
SHA1	dfdf2705fec3dd791fa6610972e224559d0f5a47
SHA256	ed5da97ca4dd692e48a5b8a86abc8ec4cb50cfc7c34052939091b1ee5c7d5347
SSDeep	768:Y48BV3biMV2YwPKbiTIGf/Vaq+HWvDk5Z1E2tlOYH0X5qxn2WgRru:Y4VMQdKuFf/IqSOcZ6WOYEY8RK
ImpHash	-

C:\Windows\L2Schemas\LAN_policy_v1.xsd.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.89 KB
MD5	370f4c807abc67d5a0ec079f04959fbb
SHA1	329045358114e7dfceae022ee697735e63c0146b
SHA256	f17150b36b04b85f8163b45cf3ac330733434336e2227e123e5badc91f38f041
SSDeep	96:iZ57dpgdx0fTyuNWrddWas9ntaK4lemVbddo9/yL:iZjpgdNuErn5At0HVxJ
ImpHash	-

C:\Windows\inf\cxfalcon_ibv64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.14 KB
MD5	d131882aef734ca78e70c4cbb729bf30
SHA1	9723fbe39dacddc2bdec60ae48f04c0796b1d631
SHA256	0f433e57a1c54658112d8d2fdb443376bfbd4de15eba539f9c927853f58693ff
SSDeep	768:RJogVu1SKSf7prfB9tzgYPfV2sgXg1Xk7qm4ZgDjxEskq+dfb8E:RhVu0KSfVLBzgYosUKAqmKgDjx0dfb8E
ImpHash	-

C:\Windows\Fonts\app932.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	79.50 KB
MD5	693ba539188e10fc0f01cdda3e55969d
SHA1	9e3e27f0331d2ef1927d96241f5789ce9ed7a75b
SHA256	e5f8b769b51e77907a1ae558544c5c8b9dbfbd5cbb022f7b99c01a3a447a85dc
SSDeep	1536:zbqNEJF/QY2hNmpnUok1FQe0IUHt1siiy1GEziCF:3qNEnOUGokZ03tCwiE
ImpHash	-

C:\Windows\Fonts\app936.fon.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	68.86 KB
MD5	db5d273a4005087f56bc31e6d454c6c8
SHA1	60e56d485e5009f33e4b26a89e6cc93ecca16d64
SHA256	14880615d3519762d346ddb396432182da222fae9535a2613567614da05c0a76
SSDeep	1536:lFHdmwPsvgOd3y+LDEY1j1LJHxByGGg8R5K7Dib9W:lKwPsos3yC91ZB7yG5sb9W
ImpHash	-

C:\Windows\L2Schemas\OneX_v1.xsd.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.32 KB
MD5	597cb75833ec12697f26f78511af870b
SHA1	d30877329eed423e9d7b34022727be11df1c234c
SHA256	b19fe3e61228771b1fdfb80f3a2e4b2f5b9492637488887efe461f92783971b1
SSDeep	192:0i7FEzYWJuoZWVqE7yVRlaIAD6L0HPhXG:0i7FEzYWJ9ZWVZ2laAL0ZW
ImpHash	-

C:\Windows\Media\ding.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	68.92 KB
MD5	9e5cdd71b03d1aad5261a20d473b4663
SHA1	fdde6ba4a1fca89277277d5d58d2d5fe1364b5fe
SHA256	88bb402a8628c9e30cc3eacbfd7c8c53528577fb43b4cc8e78b4fa86f5229c3c
SSDeep	1536:go+63Gvr+gZkYGWLhh9f+hzAyDNk5j5cYnd0/0lcbRoVppcW9:goDKbkYJdazrYtp0dMPJ9
ImpHash	-

C:\Windows\Media\ir_end.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	123.79 KB
MD5	95da398a251b08091c00a2c36d0b5729
SHA1	1c05066aaac54210b2f016529468ce86f554a498
SHA256	72487a54130966ae1a92534043b803a687aea13a8faef0e7a5c47acfb24ccd3b
SSDeep	3072:fwoRQLOuAI0saJvTgRW/niVzYwYdNs7izHmQTNGm9mKYJJ050rqj:YoiVA1vTgRW4YwYDyQNGm9Ow0u
ImpHash	-

C:\Windows\inf\cxraptor_fm1216mk5_ibv64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.24 KB
MD5	aa0c00eb32c5f4872933c6332f5fa657
SHA1	9c2fadffec52bedb89c49ea96697777ba65e46f3
SHA256	b182d2a0e19e3a22beabec1d7fcc222c138eacffb90833cf317c277156ec5201
SSDeep	384:PrZT+WSlIe/hYm8MuIZwLMzXXckEL5FQp+6YiLdhzeYmS295948w+aBo76UbfrXj:TYWIjanI6LsnckluZ6+as6UbfmLlRmME
ImpHash	-

C:\Windows\Media\notify.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	223.54 KB
MD5	e625738ff5024d42e73a3211e01e813d
SHA1	50ecbfc160645e793ed3bda924c97a4c75e2ded3
SHA256	05764402d5547d38ab9dbdc31a60543570a29972bddce094b2e7efd0bba57452
SSDeep	6144:wP52pUS2p5SQt4KNJPjf+5gsETBiiRzFk567oz8xcK:iMOxtlNZT+5gsEwiZk5rYeK
ImpHash	-

C:\Windows\inf\dc21x4vm.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	24.46 KB
MD5	ea310791e56ea0a930d7138ff6febe42
SHA1	030fb6660eb12c508bc77487d8ba69889bfdb1a7
SHA256	4de7c0ffce0fc564b50ff18e934548cd0abd70216b69c764117576d23f2bfbc9
SSDeep	384:Qmbs4cRG7EQoC6iWwy0MU0YFgn/qwjwusmEB8y+UqjVLnL1CNDVXv9Ye:QNT+EXvnQ0Y+nSEwzml3TADVf9h
ImpHash	-

C:\Windows\Panther\cbs_unattend.log.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	40.86 KB
MD5	21d02cc3966231a6ae684edff54de28e
SHA1	f858d2069a26a8219a863af857f131427225e76e
SHA256	89354403cce5943119e8ab1b82b735fd5b8b4c4a7b329d310169eefcf9fa6c86
SSDeep	768:KJQXX5BxgoFKjKlTg7EC9QmcdAb2pfSIT4k5IJ3XtS3BQ:0Qn5Bi4oKlhC9QmcdI01jsYBQ
ImpHash	-

C:\Windows\Panther\Contents1.dir.pandemic

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	580 Bytes
MD5	e4535b038a32dcfddeb226f5173e18b2
SHA1	5990b6da066eb47ab8af93d4a074786aa4574344
SHA256	cec364d55059ac67a76874907ac3b976667e25363a8cb72b8009c3c64a2044fd
SSDeep	12:4R5hOtkEHv245EWEOvoLJkWEp950+ymZilKEKI3+1H6ldKCW9+T8gwwcbKU3p:Ehnmv24ElOvP95xcAaldKCL4gwwcbbp
ImpHash	-

C:\Windows\Media\ringout.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.67 KB
MD5	709b0f4b517ee7495b50d5da2b9d05ff
SHA1	fb8631a216fe649fe513e06e921cfdf5304628b3
SHA256	ad658bb23a48b44cada2a4e5f934adcfae037c083263861a2000c300d2465f0e
SSDeep	1536:2RJXvMizjAbPagcGFeRh5xaDh5xhCtz12nuu4CK1Va0U1Qgrs6iUtmUCsz49n5i0:2RJfxsjajG2BaDh5xN21Va0SEUC2AnZP
ImpHash	-

C:\Windows\inf\disk.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.75 KB
MD5	532690fc50d0f96a54c573c4121225f7
SHA1	4e828ed020ea220f5efa7268ab7f01c4b5f17ed9
SHA256	c62027cbe5d921247135349af96546abba03ac1512619ebebed191a9ab5f3caf
SSDeep	384:nbki05sS4ghYkixb4Qna2zcceWUoGiZQBv0Pomr:nbkijgmlla2QcWo9Q6
ImpHash	-

C:\Windows\Fonts\arialbd.ttf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	731.67 KB
MD5	45267945b9fef298e90037a1a40cca78
SHA1	a31e736007d5d078708e1b5b51b320721184c9fc
SHA256	d6546930b0567c7952e846ae1673cf8c3afa343a5f809f5b77b2751f9a6bd5d4
SSDeep	12288:t9HzB6IXUVkFbfU6m/YzwYmpui7fHnhPoFPnhGV1j1jLRm/UjP+VjhYDjTUL/i7w:t9TBWk+6oXYjgfHnzjyMrpDuiHr0l
ImpHash	-

C:\Windows\Media\Speech Disambiguation.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	150.54 KB
MD5	a9676b4875895dabc3e2f1043210c211
SHA1	23eeb4fa5bed57e8032100e7376951caa5c849e7
SHA256	3cb45264f89b4c997413414eaeba2c717095dba9bf3c30b59f8a023ac61e6e50
SSDeep	3072:q9Uk5FFu0Ng6Kxx7A0gqhaKQrECRbTJOlnpUTMM3Pa1THv4fb/0u6AhI:igSRKxx7ThaKQrXkluTMbwfb8fAe
ImpHash	-

C:\Windows\Media\Speech On.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	144.54 KB
MD5	22839514f17762ee2827278a49319901
SHA1	b6afc22e6f7cd47fea763a170a5113a76818b24f
SHA256	353b2d0952b2e5454d24dc27ef3dcde8e84614ab980cb5be22755c12125645a9
SSDeep	3072:SjPY7l70EesiUMoqo1b9m2mUX7Nk5ri07KM5QKmzWN6batcM/:6PCDMOnm2X7AT71CKD62tcM/
ImpHash	-

C:\Windows\ehome\WTVGOTHIC-R.ttc.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.97 MB
MD5	3fd9a6fab26a19e930adf0f8b34a6f6e
SHA1	e4d12b536fef1dc006d280744bfd100792b19c05
SHA256	98c1477add4fd6412fb2590caeabf9da4c2db90ba0c60b75c30d458c8df6fab3
SSDeep	98304:RQHTIfv35mOfVR99ABeCWyRccOnvNeAImKOrynL/+JuDuMQ4fwV5PHhGykP0Ypad:RQH8YOJyS7vZImKBKGutEm/tkP0Yg
ImpHash	-

C:\Windows\Fonts\ARIALN.TTF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	170.36 KB
MD5	d640944d8a371423283769a9d2aedc92
SHA1	f38df7e2b9cb0f88ceb2d4f583dd81fe50575893
SHA256	e84c554da619521c7e671c27f914caf9e057bdafe31739ad881b33ed728e57b0
SSDeep	3072:W5zk2NYZNLEyNI1sAmSQdtbly+gS9RHBuetDB0wsMvAvYVIc:RGYgKI1uVn3rhugDB0wsJYL
ImpHash	-

C:\Windows\Media\Speech Sleep.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	126.29 KB
MD5	428e7c111e57d1932bd2dbf7e631dc79
SHA1	f4e55a89741ef325658a43ef7b587996e0e77f58
SHA256	f76e99b2c797c67107fb5f555a4574d0371ace346671dfefd8e202c7523b03b8
SSDeep	3072:VFHs9gtp3UB+M8hwzA4JfrRaonzXgHceGtt30ddhYWWQ2XodKp:nHtnkdc4JfQ+jwW/YDWQ2oMp
ImpHash	-

C:\Windows\Panther\setup.etl.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	180.50 KB
MD5	4db5212487a450fe7ee7c9225ccaf1ab
SHA1	7f8b2140017323bca013bc4061ce7980bf8ec918
SHA256	bff22ba9287ea53ada0db16014472c3db5f9b720ac01c42fadb15589293bb0cf
SSDeep	3072:UlapqkxgZ44iNaOUIcU004Lz7IkC4qYbyod/:UQpBqw+Tz7IkC4qYbb
ImpHash	-

C:\Windows\Panther\setupact.log.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	786.60 KB
MD5	6d6f1b54b1023e26e2e52b4d1b9c7c7f
SHA1	2c5a0f1e08e6dc372454bc20dd21749b99a7225e
SHA256	201fa22d4b833f7767348d5bba3479c1c60651a1da62618330c6f608444e6903
SSDeep	24576:qPjJGXUXQKDxXhH4TuEnKf006WYyva6i9MWZU:qFGEA8RhH450VYGvOti
ImpHash	-

C:\Windows\Fonts\ARIALNB.TTF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	175.17 KB
MD5	388257964100a48209885ed236dbd63f
SHA1	c09adfbf6b4121e0e55630db4aa4ba1c9630e0c3
SHA256	07261c448bdb297e31ed356d5c040aefaf44642cd4c4b74a854220aed50ffc61
SSDeep	3072:jIonD3TbOEumZVzI4raf1dp/mZydt9BuAcKHOrlyCb9i6Jp2R:UozTC7wUpuA/GrlJ9i1R
ImpHash	-

C:\Windows\Fonts\ARIALNBI.TTF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	174.64 KB
MD5	28018fee03e2660395ed4ddd1f3b6bbb
SHA1	7316cbfa65f38ab9b6f597a00e55ec383508d73e
SHA256	0270a51fbc8a488c9864b39033a2837759b8b9205bf5bdb858cb8d5451c400c2
SSDeep	3072:LarmSgdJcWJpviKKtQ8TTN93xDJW/BVmhl8DQg5qgIbhU:JnpviKKt/l9/W/Tmhl8DQg5qgIK
ImpHash	-

C:\Windows\Media\town.mid.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.08 KB
MD5	6dfb3c8c6a5a5047da41d797fb4449ef
SHA1	6264f18cc56084402c0856bc51e9d3110d6d519a
SHA256	fad19295b7994c5cf69ef83261d5ff1ac34db6e07bbd596bb6c729c7329901aa
SSDeep	384:+X+tBRz7M8bIELqd2magDPC0Mf0ppvzV4ZeQqXzqj5RlLIaagB4G/shtXSeFLq6j:+uFzIgqd2bgDPhVadqjUlday/5c
ImpHash	-

C:\Windows\Panther\setupinfo.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	354.75 KB
MD5	bfccd0e6d0bb320fd94879362eeafa98
SHA1	9361af4238d0d04aac37aeee272329b06d31837e
SHA256	5d0aa41559be510c3d0c5aa74626f1e0658864e69f9beab72e051993777769fd
SSDeep	6144:p7xrA3o6m/ujUVfMpChb0juXQXyqHcNUepsVHFEGNAMWeBWu3MjlTgE:p7x8tmzrTQX58NUeCl7tWjjaE
ImpHash	-

C:\Windows\inf\faxcn002.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.23 KB
MD5	ef5f7228e84dcf05e25873a2e184cd6b
SHA1	c146d7aa6d01c48535b10e5a316651037b73fc42
SHA256	56d36d6a8dce987db5310f0a65365c13f0067da98077a756c149a3d54d214dc2
SSDeep	96:61BDsPQG7w5Ck5/utLuoua/mnwL/GDpfS7JWqvqIPq1IKbC9jsCwcF8h57tm1u:6fsf7gCk4cKP+pfwSCKbyhFGz0Y
ImpHash	-

C:\Windows\inf\fdc.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.50 KB
MD5	24bbaca94c9d8e2e005751453697ca17
SHA1	45c4598b03e627b25a66c76723e72e0b1982825d
SHA256	b22077491459e14e01ba7e705b321f71330c5dd1c418e760d8af196ac2e09e65
SSDeep	192:79agELMweHoelvDelYF1PAQ0UPnrH1UspHV:79aPLefSQNPnrf
ImpHash	-

C:\Windows\Media\Windows Battery Critical.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	210.29 KB
MD5	51e1d105e2408869eb4cf92c7d902420
SHA1	587b64bf1b9ea02b3221aa11e82d775526f8db56
SHA256	cf6349ce470eb19a57561535a70d43bba817a9dc98468d583c202d139d7e00d7
SSDeep	6144:wr3KJSoVbBjHzD+HmsTUhiDrkQe9EWgNwzH3ymlReSEXhlff:yuDLsAEDrkQe9E3CDWhF
ImpHash	-

C:\Windows\inf\hcw72b64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	57.92 KB
MD5	5fa9f7a688eaf79a3fdbf5d7604af618
SHA1	8f3455048239d2b0661029263c41672665ca6275
SHA256	de808378a897558393664aa5d6cd902af6e59c0b81954309583ccfe095d3ab21
SSDeep	1536:63dF6SOF42eHU1eQ2gMYzrZ4w35FZkhFCx8vTMMS2x6XLM:MD6SY4fU1WYfiC5nkhFCx8TMMIY
ImpHash	-

C:\Windows\inf\hcw85b64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	154.70 KB
MD5	bec9a1555b59f8b14ea07d7fdd29523c
SHA1	47284dc8d80540d9564e56df33f675f71ebb9033
SHA256	9a6bc27bd084fb45700792966095db102f782abe361a00210a74d11864d57cda
SSDeep	1536:D0g/BiOmDPL2rg+2IJnnVjIrPmIfsuLSls7rKzxcVa4Tn/s3Jg71Hxmq+i84ckjB:D0qB2Pyrg6nGpwpzp+E5cULtWNB
ImpHash	-

C:\Windows\Media\Windows Default.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	71.42 KB
MD5	a584c6e58b6d82c829febacbf36f1079
SHA1	3801a970320785610795212c2211d2fc1525aadc
SHA256	c08fe3f05a59fccf39fa7a95ca5d4e8bbd4b377dc44793e11864d8404f16bece
SSDeep	1536:juu/2MdfDtTB9ewIg3+RiooZHBSyRuUG4z2lRpIiLFD:qulDtWwT3+MZHgD4q3D
ImpHash	-

C:\Windows\inf\hidirkbd.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.42 KB
MD5	125868d10b268d5b9d56827b92cb8c5c
SHA1	9512e0287ae63e73f1c3a974a884b13156afa574
SHA256	e7060a064ee4daa65b5d11e92e5b300c372334a5e52edc412197274aae9f370f
SSDeep	192:A718KooZ6U4GdIE0dvaGOldDPMfPzCQE87mCKGBkjZ15/j5Mf9PXd0/426:Ah8lY6IW9Q79MX571N2Z15yfn0Q26
ImpHash	-

C:\Windows\Media\Windows Feed Discovered.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.92 KB
MD5	61e652809ecdad06e85002aea78a534d
SHA1	e6f00cbdd2807846c1c0159e60695c719fc2878f
SHA256	3357224d39c77c83f2065bc921b51ddba51b109ff19b3b72c054d9bf3414b331
SSDeep	384:GKn/XkJepO23pcKugTxA4qiotK5PRr80veO4beQPQj9Yx1KrCyG5JcidW6JU2+RL:GKn/XkJepH5/ugFPqi4YRAgQfPQj9xCM
ImpHash	-

C:\Windows\inf\hidserv.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.57 KB
MD5	3d3b5513ce105dd4810d0a8a8cfcdd8a
SHA1	db8dbf188c4d57812b5c2dcf53ae988e094ae1ba
SHA256	320bd3f2129264ab8bbc6b368f3743412b3e45ae0540af01ce2dd96ebd9e7bb0
SSDeep	384:BCyW1jGsHBeQZML0+KqgNIX1wDhlCO28f3mh8b0biX7rq4/9HG/F:c2sh/oKhw8TCO28/mh8aiLrq4/9mN
ImpHash	-

C:\Windows\Media\Windows Hardware Remove.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	92.54 KB
MD5	1da72c65b35d61d53ece9775030e2b98
SHA1	e734503e32a260c96bf34264dc5c2278d0c604b7
SHA256	5c02990ae091d3fee8ff71cf7a95f7f588285e950ede4658a386565f0fbc0685
SSDeep	1536:Audmp2JhTyDiWukrov+M6eqN1WOgOXsaUdnGGRTFeFXzBVd7+pTzaYtycT7hPiLL:38pq+DHJMZy1WOgONaGGFQFXzP5+zfYN
ImpHash	-

C:\Windows\Media\Windows Information Bar.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	23.26 KB
MD5	ba8ee79c9ed305eefe13ee1e07a66eb3
SHA1	30e36648ccca9df8ed80043c727d0405c8b475e2
SHA256	0c341aeac85b3f010160f82f3664bad192650fb235a0ecc7ea1fcde4f08ba013
SSDeep	384:RZOoAhiFy9gdeMtiSe7gIxWEfEJcXgowM0CgrB8Zg0R4jtmpIDaArPtIeu0+q:6h2yydegi9xWBcXgk0CyB6g5n5r1u0X
ImpHash	-

C:\Windows\Media\Windows Navigation Start.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	11.57 KB
MD5	0078ed2d0205346fcb581b0ecf9d471b
SHA1	27aeed5c3b15f179f282fb370dd0c655c33ec786
SHA256	bea253e97cb3b415cb44d168366d3efaaad0029fb18d27017c02f809465c8ba3
SSDeep	192:f4d7X4c5vzO0oXI6tduwb4n9+YzfTlzvs9/CRwFXz1nTSVUzeCgpafjNeFnhZxHr:fNyzOq6tb4n9+YLZYxuGzpTSVUzeCgoM
ImpHash	-

C:\Windows\PolicyDefinitions\AddRemovePrograms.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.10 KB
MD5	149c0503712da0c8b6af40dd292eb371
SHA1	540b6c5bbeaceba40526d80c4723ebd271df0b35
SHA256	dddfc954cebb529c681fbe7b02181f960a6a3247734c2f41b546b7a8146cba70
SSDeep	96:O3pRtdskay7jF/uiJw0rLq5UZQpifMFTuX9ivVpR+0M7Zm0CpV:O3JtakpUvqMsYSghV
ImpHash	-

C:\Windows\PolicyDefinitions\AppCompat.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.77 KB
MD5	89457909fbbc1f4025d6472d88982aea
SHA1	007504680f33a25a57860a79e5e78f5ddcc19b4f
SHA256	d5c799a2a9dd1b9b5c79ceb83929824319f9ae30bbc51cb32847a497a503a85f
SSDeep	96:Z2TPMcdUCcPysYeY6IQ1JEC5afgJFTFN38gJGtNByXz4tn7mfqTB+Aftf9Wbb/WA:Z2ThdfcKLnQPEC5Tl2gJGtNMiGqTM2fG
ImpHash	-

C:\Windows\Media\Windows Print complete.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	346.04 KB
MD5	ad01f30662e920158faf7b318fa9d7c2
SHA1	0505975535dc981a1908d7ac60be023283842c73
SHA256	718a7665a885086d06a5935aaee77dca422d8f6b7e416026b439b4410349d732
SSDeep	6144:Plgm+IXU1Ifb1CLRhTYQkAsJdqwVWoJYInlHwWE46qUnj9PUUFleemoncy1xPtht:yK4LRBYAstzNAH9PrlPcy1xlD
ImpHash	-

C:\Windows\Media\Windows Shutdown.wav.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	165.97 KB
MD5	7e4b3a3501d141bf944d3653da57b8e7
SHA1	fe11094a5296ca97b6fa45c5071652d0ec39fdf0
SHA256	4aa35efe8891867e58ce245aa6d4c6ce4bd9f64d50745e59dadba05ac6e7f754
SSDeep	3072:X5YN+eaCtvFbjew9V8EWqEyevDjgjYRIxhfGdQzBGBF9I5dUG0TAFsZ/JjOTQlMF:XOVaCttbjew78EWqogT7GdQF+F9I5dU4
ImpHash	-

C:\Windows\PolicyDefinitions\Biometrics.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.40 KB
MD5	23884676cff827556b2e02de289132d1
SHA1	154fde8f76069d63df11b0f9f03a39b941b61725
SHA256	2e55c4d63b05bde11ee949c96a35b9c697ff4e11076b9db56ad5bd07922907a8
SSDeep	96:aTuHPgGZ/TvRxu2BfGQaKMTwWnKOy9jJzFaCA7wTX:ayPgWLbyTTFVytJZm6
ImpHash	-

C:\Windows\PolicyDefinitions\ControlPanel.admx.pandemic

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	3.04 KB
MD5	d863f38efca7e39fbe6fd079bbc0512a
SHA1	15f858e59683b7d2285716f4fae0b05f34117316
SHA256	a4794571a4f7d3d476838418cdb73263a25d00b6acb1c50e96f1ddc167f8d336
SSDeep	48:OQCZnT/CRC2lMVlWKRJl5aa6qDXoDUrAKz3F5Okzs9XNqo4lxbjjhmwtE:0xqMVlPnaa6ISUUD3XNj0RlI
ImpHash	-

C:\Windows\PolicyDefinitions\Cpls.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	a796fd7a054cdef8ede2bf05d03eeec7
SHA1	3ae1803562a318c3455ddae61c2006cb77ef9d0e
SHA256	7e90e6613055ea2430e0167aa814639e1fb51ea55bee90d6de3b7b615b29d488
SSDeep	48:ZyAzd8QXdPDlDdi3B6DVXMOox6eQhnGCEmveb:jdXdPDaohRo8hoOeb
ImpHash	-

C:\Windows\PolicyDefinitions\CredUI.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.21 KB
MD5	4c23bb7a4aa45c37491f2f309431cabe
SHA1	29e1e617af5e0651f49a8d80ad641624e353c652
SHA256	db7c9516ee0bd47fc4fd27073d481a9ffb44ea1c52867076bcce9b2f9433cf41
SSDeep	48:NyiVycuf8dT5NkKMsPz/lEKTOho5LT2Be01:1Nt5ioFjN2Bl
ImpHash	-

C:\Windows\PolicyDefinitions\DCOM.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.88 KB
MD5	45d435fec797a6d55e7a13e26f9b6e9e
SHA1	b9b5e85e38d6ca7a3d11690234526a9b02beecac
SHA256	d31a76112d3dd59586ad69e64846fb2b4cde89fa0748334ec9d32e3528fc5271
SSDeep	48:/M31VPyplmPr9mgEum/YWIP4PS+BtC37wIOkUQ4ZIBIrEQKmTq:EFVcl9om/tCskLwIDB4CIrEFD
ImpHash	-

C:\Windows\inf\keyboard.PNF.pandemic

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	120.80 KB
MD5	59c309f64579742ad995635dce38fc1d
SHA1	fcea3001a695df93cbd42d52aa07c6b68cde22c7
SHA256	091e90715e8e207e73c2f0d48d2a6188762873014e0d828652e69969d3644166
SSDeep	1536:8vXIzVsMO542gW2HQu9SpfR2gvDYWdjpae8DwUwFrrNGDYpa3L2sp2PO:8vXIzVsMON+9STRYWZpa5zwk2sb
ImpHash	-

C:\Windows\PolicyDefinitions\DeviceInstallation.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.62 KB
MD5	e72f6c44d93d9f0d5caabfbbe01f14b6
SHA1	f904135ae88aab78887884827b799263e42bfee8
SHA256	eaf81b8c1b9f8952f4f63b4ce620ab6ef4d47ef34202a698ce71aa33ae6fd5a2
SSDeep	384:qOCEYECK0FTTEPQUfdli6ZZuR+/tmFRM1AU8OJ/EP:qOC3ECKUTTqQSI67PCRM1AlOJ/EP
ImpHash	-

C:\Windows\PolicyDefinitions\DiskDiagnostic.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.46 KB
MD5	b4e825567dac9947f75a5cdea520c787
SHA1	49e834134aabb43bc144695bb43f250b05b6bda6
SHA256	164ab6505f0f964ee2434defa1a82f2fcc659d0a4f7a2d69543f2649ab4c7d1a
SSDeep	96:Vps74kXt9yqwe4VxIQhetUMp5vZfzSCClbit0HFuM6gR:A7ZXnyfVxlhH4Bklet0luu
ImpHash	-

C:\Windows\PolicyDefinitions\DiskQuota.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.48 KB
MD5	fb58d131c16cc41838b815388343d8f2
SHA1	4e00b7bd9819f11105cf4f0cc929a140c3651e3a
SHA256	91699e6e479dd2671417851b3a593b94aef559038cf05b56721f4c52245fedac
SSDeep	192:xqROfndPGZZMcvuWU7wiNPrT+JsLjXNUvJJGQnje/:AcpG9uWKhtLjWx8Qj8
ImpHash	-

C:\Windows\inf\kscaptur.PNF.pandemic

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	41.55 KB
MD5	6f3802d64ce180ffb2cc2744f82bbc6b
SHA1	11de92396626645a2db723d8a4a491bc4002abe5
SHA256	a93d2f4ab3378f347d80473bc1faefc902b582d64995c5f03999b418aad00b94
SSDeep	768:F5+0lCHr6CCxyVUtuTBLdMqbkfBAI/Af7laXBeFfbbw1QtMG0U/IXJdsfi:TNCH2Ce+lfOa4Ajl2Cbbw1Qt7ByJdsfi
ImpHash	-

C:\Windows\PolicyDefinitions\DnsClient.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.55 KB
MD5	79dae5c392c39754d26017632de9d363
SHA1	708e17a76a11ea5f55b2d5a7bbcbc02ed72505b1
SHA256	314e61d458f0082e23a3c543df2060ef98a6088e4c290b7d20545a87d321c32e
SSDeep	192:64Q2U4POKctia6tG5qEtqLcU3fLN2JDUO86fWWSdKeFlPxcE2lGIEN03D3:6GU/dtetG5LZUT0mO86uWGrWD
ImpHash	-

C:\Windows\inf\ksfilter.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.35 KB
MD5	e1b515e2f59688a474b198e885021792
SHA1	3957812e998e25906861d2d22020b19f4e563348
SHA256	69c5153ac441a194381ee4ea077392168e8a985fe2ce400ef575e3f2e0855c76
SSDeep	384:rkc0vP1xWQTD7W7bWLnw6nRDkax8LrilQQ+3odIooxEs4CISZuR7bG1mioLMmyJl:rkc0vP1xjTvW7bUw6nRAAIrRQ6odIoo1
ImpHash	-

C:\Windows\inf\lsi_fc.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.45 KB
MD5	9bd9476dbe60749e49358c3f1d97f72b
SHA1	2c7a2204d7cc2959ec027f1bae6b27da32f0f791
SHA256	1d1679d614fcccc6bf7f4e3c098732520e809e3e71907b17a5a7e92304ed9040
SSDeep	384:ZwAtztQ/cor0DDAkIECWC8YDjei9S11jpmc5mY:ZwSz3DDq75QEcf
ImpHash	-

C:\Windows\PolicyDefinitions\EnhancedStorage.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	5.48 KB
MD5	f8f6953c2eee2ce8a5b6b78082a5092d
SHA1	5bd50ac86519624765941d45dc7563f668d5f2be
SHA256	5e45dbeb1d96458b6c47352cbddbbbbcd250620b3d8463b62549874a85d048af
SSDeep	96:Mk3JcUMssrrSDLPkydCo59UCsWHkLl3xgqUMe4EMhte+gMSCoh:Mk3JcU1srr0LsOCqXnENu/1M2+/oh
ImpHash	-

C:\Windows\inf\lsi_sas.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.70 KB
MD5	991863d1da5d6f5592cbae0896da3c6e
SHA1	0a2a998f7de31b41fc19770de98e06934a7331fc
SHA256	a116919bb59caeb003fc2d2850269f53f3308bc2bd41e13f0e297d5801574240
SSDeep	384:Wqs9cUipdVewLjUP8I1G+fcuJ4B1B4Qj1B9KvY1sGkc:WvUdypfJQB4eIvYyGz
ImpHash	-

C:\Windows\PolicyDefinitions\EventLog.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.64 KB
MD5	6b5eeeb1dcc30c2259e98c8b70ccefd5
SHA1	31b3215deea7e7efb040cb05df1b97f34e49e734
SHA256	5b60c9e75a6a43857900c4b0e30ab8d5273c7d3048a0615119f07d948b3bbd8d
SSDeep	192:QkKvwcDQvVPTjuqw/uuW3o1wFxz48oMAiU+jAzSvuSqUDqMopkyxBpyxO6zxhfM0:cvGvsiGvivweDlopvFn6NW8D/z
ImpHash	-

C:\Windows\PolicyDefinitions\EventViewer.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.97 KB
MD5	336a84677c606df2de2ffff0bc126603
SHA1	30d7d2d4ca9e81aebd80df166a0417f4b8c4587d
SHA256	579bc5fdae8d88b07732956150005ed1cad2ab11efe8929e1aff66798fa71b41
SSDeep	48:wAG4xrg6H6XAlnVEG/JLQmwz8YnJruVZCfq/NVG4cjPYhgrwt4/K08xdvmGa/9m:5mi6XOOAJLAoYnIaq/vhhhgrGVXvDa/U
ImpHash	-

C:\Windows\PolicyDefinitions\fthsvc.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.68 KB
MD5	daa45b43679e896f5d5558eb3ca3476a
SHA1	84e87397f237636034830477eb42f99a0791f3be
SHA256	45a341e1a95fdd970854d90a0be683cb4787b8e23b9ce33d95ede5675d98cf12
SSDeep	48:6RMiZpwuaQIW983vN3J7mgDqIzYka5+IXOW6ZoOiuZpo8lCLiO2lFMLqLwh8ZEcN:UhZZaQEKgXYkKRORayuf8ZECIOp
ImpHash	-

C:\Windows\inf\mcx2.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.18 KB
MD5	4accc7eb758d237a171656acf61e4144
SHA1	ecd44e8e1ad1f1b17e03c75cac8949c504d8e3f1
SHA256	5b37d4a78f6d7a1a4c4595c85bd7c84ebb962d56ce5e3b19ed5d505b0b6127e1
SSDeep	192:ZSEnk2Xc0gCt+syBSBeSrBXRDUTQxN0v+hXemNOREiRc:ZZnkoxgCIsyBSBFrTlZhXeuORE1
ImpHash	-

C:\Windows\inf\mdm5674a.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	63.14 KB
MD5	4f45bd2d333ba71c6be786b8daf4931a
SHA1	43722032dec387227f3073bf8ef62925427c02ea
SHA256	faec250558880c5bb03da2c0d99aab70bfcace685217be58c509cf9405d7a941
SSDeep	1536:VSoQfHgonGfD3y2t9RB++yIG5t2/Lfdenq27ZCJXmW/lhO1pdIu:MoQVnGfD3N9zbbetIjdOqcZCJ2h1
ImpHash	-

C:\Windows\inf\mdmagm64.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.60 KB
MD5	8b4ac1f70cb6dd0f16876b62f6d98e6a
SHA1	654bad85ff9c3d690898c8173179de5db401657d
SHA256	e3b00393f7a1b5f225f7570a07803233d6602ae2638e859ea540749c3598bfcc
SSDeep	1536:nFxeQBE7FSJSqa7J1bbRGawxrQKLS+nArfEIk2cNo1oa:Fxe97FSJSV7JpbwawNQJ+neJb
ImpHash	-

C:\Windows\PolicyDefinitions\ICM.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.59 KB
MD5	91411798f9f6066f766469ac473aac8f
SHA1	d7d7ec859a44773889ac8e4853603316eb1c8bdc
SHA256	90970ff15b3fe1c36a0d3f1812dda8636dd410a9f921f1848bccda3f7ec06ad3
SSDeep	384:4WRlQ05o3ZTJUHzT+We4YgGfPtjGZMPkj7aqqYVLVXZsKkk6J/SLXfVLJ2V8lpUO:t2WwZF4fvL3GjGA3YVdZ1u/gCX4
ImpHash	-

C:\Windows\Prefetch\ADDINUTIL.EXE-8F48E508.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	40.19 KB
MD5	fa83062a87cae41ba52ba79afd92e7b4
SHA1	72039322bf137b7485076383e1e976db0bd9e595
SHA256	c84566373604be4180e24c62193868913e6b80342e7e25e66955d21cc5aeaf44
SSDeep	768:2U9yb8ZH1jhrHED9bsB5uRkd/RtnmZTVWTkzkliI1G0W2kBnnleP6h5x:4uH1dHNB4M/RtnmZpWTUkliIvpkBnUCt
ImpHash	-

C:\Windows\inf\mdmairte.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.90 KB
MD5	048b871b370844d295fd89ddf4e61060
SHA1	40f96c4b61da7f14f8d808f5329f5ece9877775b
SHA256	d617a5294d093f4aabedfe9dec1161ff0160a0f63a9731882ec5329c10e53d99
SSDeep	192:pcp4xENdSDNFlmCgQGzAowSWuUd4IYCNk1Bv3cEE2uBF5kkAhf3Hu2fUkkI:KSxSdSDlxTC/wXzCGkLv3SxIg2fUkkI
ImpHash	-

C:\Windows\inf\mdmaiwa3.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	25.34 KB
MD5	1c97aca8a4aeab842f4d5f94cb821ba1
SHA1	00fadc42989f2a59ec9dec356dba204ec0718116
SHA256	9145e0ec1194971ab89745b4e277356ab71a017e25970d002cb1c0b716d3cfb0
SSDeep	768:tk2c1C6gNBDIPCu2RCtRdJV68JBiK2T1G11r:YC3GvLJwNUr
ImpHash	-

C:\Windows\Prefetch\BCSSYNC.EXE-861DE060.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.25 KB
MD5	3c17a1361197027aaf380b55f74bd352
SHA1	1cbcf02ae05f70ba362144bac2488ef52ed15eea
SHA256	7c5676b4d6778a905545c15fe51066521bf5619a987b0bb08afeec2ec6866454
SSDeep	384:cp9gdWA5yMMj2NF3CqSdcgJpErmUkbbWPAlCI9crlMD:cjKWiyMu2LCqEceEcbbxP9EMD
ImpHash	-

C:\Windows\inf\mdmaiwa4.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	143.04 KB
MD5	0ad72b33ca1bbad34edcb2c0541bcabc
SHA1	ffab6efad1318d43dbc63c13581ff8130799a713
SHA256	c00637bfec2b72c63e200cb4d2f6cfb927724b5d4fcf67db7754c8a498091303
SSDeep	1536:ftuh+/BhNh7hiYm5DzvE3buZN/LHK3SWbFdXJI5weKd9eYC:fAU/Bvh7/m5Do3buzLq9PXzI
ImpHash	-

C:\Windows\Prefetch\BCSSYNC.EXE-E11E559D.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.54 KB
MD5	da2a7c3ffad6c96a526e2d3f5a38827d
SHA1	fe4a96f26667a1dab8103a6e4cff0f1bd354cca7
SHA256	a988665a8e9da86c3d79076686700a01529143ac64efd431e7bdd9478c57656e
SSDeep	384:mFtP9/gpoXbjPQ+V8rAA4hvtBa7hE5XJoIUXKixT5UjsdtuTWxiJ:mFj/gpoLjY+CA7Pa7hKXSI727mWiJ
ImpHash	-

C:\Windows\Prefetch\BOOTSTRAP_X86_64.EXE-B4992A3A.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.30 KB
MD5	533aa86e8d81733b252059aa737cab47
SHA1	930ea105b510b7af72368299773bf597f28789d5
SHA256	2bd0896f3e837114f2491e1eeb00d9b37f1313438954028e715e91088095183a
SSDeep	96:6uZXZqvN/8u3Os+HKD3KV/+ehjXAsnLNtHQ/:60XZqvRl+63KhjhUY5tw/
ImpHash	-

C:\Program Files\Common Files\Services\verisign.bmp.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.14 KB
MD5	018b00d729bce20f8840bcc9e6f7ad1c
SHA1	11094430f7aed86e09f83f3c58b4571b1adcdebb
SHA256	d9b2b44e8f269e18767ffa4074f9100ee03fb7a450f9c3931e304f22b2a69054
SSDeep	96:yKwhGTPvKXWhXeJOlRBcLsBIWORqMWWh7g:yKwhEvKeOJOlRahWORqyh7g
ImpHash	-

C:\Windows\inf\mdmar1.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	20.72 KB
MD5	2ec84adc08fe9eb5040ba52b66d3fbfd
SHA1	c041946af217f2d67d8f04dc26d980b5f96da01c
SHA256	d8dcbe39505f0518fa055e60c850768c580cad5e85a4b1939efa7eb61ce894cd
SSDeep	384:/2v1Y+tOCKNLaCjKepOgaJOfCQK43nbxrzvsZPRPcjCrGCslJD1WhXuTsLkh1HFj:ev1Yo5s3KeAga8lnbBsZP91lyJCXuIL4
ImpHash	-

C:\Windows\Prefetch\CLEAN_NET_64.EXE-4AB4B238.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.76 KB
MD5	0a51afb7ad05e6f068cccc68d1f9a815
SHA1	d72b7c787062bbbbc2d02db84ddd3ff4b73f7235
SHA256	1e66d452d875a60607d4405df2d7ff1fe11e2b069e86915f9e30410263926b5f
SSDeep	48:2RXj2ZN2SDOTv2eosoqFwOy8wfMXVafubk:8qZNPOTon8wfM8WQ
ImpHash	-

C:\Windows\Prefetch\CLEAN_NET_64.EXE-98AE464C.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.07 KB
MD5	a07e6a27fe19e7b0e5f49d7015e82705
SHA1	23ddeff8d04d711e26383fd6cdfcbb1a7800af21
SHA256	267d666c3a81173ddba55cee55e2dabde0940476d718fcf5b4297760c26000f8
SSDeep	48:+VDmzl5o9RFEUc8Cx+ZMGzSbbPetJ1hbSHZ+vqDo:l6NkxlGzSneJC4iDo
ImpHash	-

C:\Windows\inf\mdmaus.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.48 KB
MD5	7b5c87c33ffae836e1128c92725848cd
SHA1	a23be7675bc4e6ea73c125e93233a33ab14880ec
SHA256	17a8d3050caed79afc15212601f20872ff0e90830fea7b739da68912e61cac2e
SSDeep	768:Y2+aYsZwwziO0J8cjWTAo8YSzWUPdRZ3whGE8hOjChw:N+OcBJ8cjW0vYcPh3YGEtjCw
ImpHash	-

C:\Windows\inf\mdmboca.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	95.74 KB
MD5	3c1d5b8f4140c69653026c5446e48f6b
SHA1	9561ae0bffc07860c7f15f36904cebf5ff08569b
SHA256	656f2561f9858ce7e1ded61c3edcb8290f288265b55ed97cee75052e037f2716
SSDeep	1536:0EzhJjWdMRN4FaA7PDMebEeZUzPwM3U/ZY/Ip2qpPg9HOh2:jzhJp47PDFQ8IIazIHpPGuc
ImpHash	-

C:\Windows\PolicyDefinitions\iSCSI.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.21 KB
MD5	f1bf0ec3af2bf84af72e34a5e05935a0
SHA1	7b9c8d0c083425fec61ac143d21079c0b26d464c
SHA256	0cc8c417461f39659c2311c0b3dbc685e58f0a58be1f3ba4863d72384bcd052a
SSDeep	96:UwKJxjSCZXEsI9oNv+TEC+oMgbciXbuM+pd+TpXjR3w7uPqa9WjUB2TqOM9dWkX+:yjSnsIW5+Tv3bseFgaPb9WzqDXIjzr28
ImpHash	-

C:\Windows\inf\mdmbr004.PNF.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	43.98 KB
MD5	9fb5178a46061918cf2700f33b9d642e
SHA1	742cc27f9a7f2623fa22291fed35724525d73252
SHA256	5116b92369d321136b0660be75594e7f3ba1924d87ac96cf80995d73016410e3
SSDeep	768:b/23WR1n+86j4ZHw5H8zfJGEsrqyAPXkJq1qnPchlTnEASDlV6GK1RU:S3Wixj4ZHw5c7wBu38Q1qWTElTK0
ImpHash	-

C:\Windows\Prefetch\DINOTIFY.EXE-06EB7C61.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.63 KB
MD5	d4737c9a75ac855b3adda2c8b4eb14ae
SHA1	fe572a26ecfc6b5d080dc7cd6d5876cf14e53996
SHA256	9acee5b882a0d067b934dceb92130b49d052235e34617c0fe203fad64d1a1441
SSDeep	384:zDd/yBRBynGwcX2JEJTbFRGoSsrxfC9pxmYUPI6Gwl:zDdqXVwcX2+JHHFqvQPkq
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	49.86 KB
MD5	c265764411a01c8aa6c111b78efe8b43
SHA1	a28c499c1a0f516ef93fdf8d2f7487011b5bc3da
SHA256	7619521eb200c2b23e39124cebb8a687916f153d7ad54aa8703b31e0b755eda1
SSDeep	768:soG/sRr2+Em5uSuTNiI9/OoiohSSfqEG3HPri/SRp+gCEhvKs01lrk:soG/Iam5hg3JhXqEG3cgCQvKhlw
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.58 KB
MD5	f5d0d067242364319c65438da29823e9
SHA1	2e1b8bd89f787c5c095f184d34b91ee6169111cf
SHA256	a8858b4b42d75a2cc99e55345f8eddffd318421e0cf0a2418c908edc05e6cfce
SSDeep	384:Bx9OO/87BYbXS8jrLYooJYdVT3/ZDQrVcsj5G+7ARL9iHf:B3OQ8ViXS8E5E31o3GD9o
ImpHash	-

C:\Windows\PolicyDefinitions\Kerberos.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.12 KB
MD5	5f2cf8f89b92ff1195cbf2c2c59a3be0
SHA1	c6ea5352e28208bd014aa59e04f19b7333fd2e81
SHA256	d0aa3aab114eda853a102f5fea61d774d46d0f22d9417b7cdd27478eeb8972fa
SSDeep	96:lt2QnrVLzCm004IHKCvGY8M+qeQjql8Za:l8QxXC516h+Rb2a
ImpHash	-

C:\Windows\PolicyDefinitions\LinkLayerTopologyDiscovery.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.09 KB
MD5	4a499bbf0b196af1972e9bb2ba8c601d
SHA1	d7952a08d59d70faf37588abc51ffa123ef23929
SHA256	5971106cace60d81d0ca2290e0242d439a86de79915ecb9baf0457ef0cc968e2
SSDeep	96:74tY4fEoJdIaHfxdLZDj2IZa2ln0pRqAV5IkTfMOqSXse:74ttRJHfxPDj2IZcRqI5IkTUOf
ImpHash	-

C:\Windows\Prefetch\EXCEL.EXE-DA46ABE4.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	74.33 KB
MD5	1ed5ea1d08e80e73a5c89afa3d1f9e2e
SHA1	c6916c12dd6ce2e93ec84981c5ab0762d11240e2
SHA256	32e1e191cb7081270325706931d55d2da6547c624005abc06bbc156c353b6294
SSDeep	1536:kaasW/6bLRLaUlqiiCTElLFk3xWaJ/7I/x9wfSdtyCCi:M4R/lMOuekJAadMi
ImpHash	-

C:\Windows\PolicyDefinitions\MMCSnapins.admx.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	56.09 KB
MD5	a4c5b344c28f29732bbd7fd7e37b3cf1
SHA1	f5c9f1a36f30a6d8cadd78efa6e76bab61cc17ba
SHA256	24de51b7355825883a811a91d43c7e928983298f4c4691ecf48e736f7413a1db
SSDeep	1536:gi2VOhEI55M30l6OB6e/WyZzWJ1XRT+UI+rU:gi2Yrnl6W/bU1Xh/I+rU
ImpHash	-

C:\Windows\Prefetch\FLASHPLAYER11_2R202_233_WINAX-361B57A6.pf.pandemic

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.54 KB
MD5	45f9c011caaa5380822714c81aa5da01
SHA1	50637b7d4d756a2a3a67b471da0c48e5717a4414
SHA256	a4d3c13b972f1d7304120ef139e74cce439f15bc0708a6ff86053e413862397e
SSDeep	768:5cexUZaVr0nhq2SVHhuDgYW8S+yQJ6DnKMde1jyNUPX1ar:TU2r0nhqlVHwDb56BAIqX1ar
ImpHash	-

C:\Windows\inf\mdmbw561.PNF.pandemic

Dropped File

Unknown

»

Mime Type	-
File Size	35.82 KB
MD5	47d6935e26032dfeb500d18ffd63cbd4
SHA1	3de153cb4fcaedfd20aa76d6dfdb58b3a9995e34
SHA256	8e1c940a40848c007e1bc8b396db82c8652f8c619b0868fba369b64f286cc2ef
SSDeep	768:wLilOYmR+a2Utn233r0He/VZaTw9ieACm3jXhTq4DuivBSnJUYASwfUI:wqOYmR+a2M2370Hy82KRnynJUYmUI
ImpHash	-

C:\Windows\Prefetch\FUNKY MEMORIES.EXE-6735C7FD.pf.pandemic

Dropped File

Unknown

»

Mime Type	-
File Size	11.86 KB
MD5	fa179364f45a9ca9c23f123c3fb89b6c
SHA1	f09afa84146933573406c3981682d9d4a2396749
SHA256	cb795f309de0bcf7b6f869eb996a55b38d510594075b6e2827e0c118587caad5
SSDeep	192:BThChUDETReDGrM6Ht0htOnA2Lw0SdCxrITP7omC1WmE96JCVI7Bm1qFv+o+g29+:BlCCAtGcN0htOnJ5SdCaLMmC1Wmy/I7d
ImpHash	-

C:\Windows\inf\mdmcdp.PNF.pandemic

Dropped File

Unknown

»

Mime Type	-
File Size	17.10 KB
MD5	075c816cbcc9a22d543ef124bf954071
SHA1	b2666b1f2b73e049641d4d81383aaf59d66ef4f1
SHA256	20913538e2f87e309a94f696bcfa67427a06b1bb5d7e25518e368fb400c3c784
SSDeep	384:aJBDXBUB06be+cLmbLd2cBXhBnK0/q8n/Mq6VjXmhu4y5kfDa/BKVx:iq06y+cCbLkcBXzKGn/OjV4FLa/BKVx
ImpHash	-

C:\Windows\PolicyDefinitions\MSDT.admx.pandemic

Dropped File

Unknown

»

Mime Type	-
File Size	4.04 KB
MD5	3ac0ec50905fce1bde65390316d0c7c3
SHA1	dfb349624e1c6518878db31ee39d4907eba6bba6
SHA256	3bfa45674167e57d43b832adf90a3b6b852db17c7b747994f953149edb38d289
SSDeep	96:wdvUPhaq4EYtlAXAl/V4lAyB+4DWSrWm09w/nB1s:lUErXAl/V4lAATDzrWmr/nB1s
ImpHash	-

C:\Windows\Prefetch\JAVACPL.EXE-2F6C67E0.pf.pandemic

Dropped File

Unknown

»

Mime Type	-
File Size	12.45 KB
MD5	2efb33131f3c12dfdeb782e172a39398
SHA1	9b1d9483d4511a956559db7160db3a9dcf537ddf
SHA256	6a845e7719c3348efcb73ffb7676996064fee4e2973c576d02c178845d15961c
SSDeep	384:AT0bXF/x2N8RGKOqEU5NNPVLn1ESgC7Eik:ATYhx55NtVZSTik
ImpHash	-

C:\bootmgr.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	375.29 KB
MD5	04f8ad50ece2bb652b8ada08629a6a7b
SHA1	3cace7b5d806db5d5e6a23d80e8d99e26730b6d8
SHA256	63f1b4fcc3a10bb0fa691dba1810c882b37b3678534a101b5e048912872cd619
SSDeep	6144:5jzUdNnpKcdrNNYei1QfWoDxo0xdMJ5fTmSd5rrkTI4FUYf/OwnpO/80SAUoaLpE:53Ukii1EdrrMJ5ii5rr54FUO590SAl33
ImpHash	-

C:\Boot\cs-CZ\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	87.58 KB
MD5	b9c095a8559eae5802f45b57fe2a57d0
SHA1	c23f5606d1a23a6bc8ec9411e3eb83f277a264b6
SHA256	f8ce98f87a7ead265a5562ae8cc1b641775e1e2d860500eeee1affd1d9f333f4
SSDeep	1536:NxW9Q97Ku6VFMaMnTkzpnMNVHLCkFF6GkA8RNwXcw2cDF:1d2VrMNVHVF6lAmNwMw2a
ImpHash	-

C:\Boot\de-DE\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	90.06 KB
MD5	6e808d3119f5672003ad77f29347a965
SHA1	3572194c5080ba944f197d995eab54bf89235d18
SHA256	c1e6ee40955be2a3566b54fa6934d47bec0e7108b67e8589c1c339cccbcdfe16
SSDeep	1536:s+7Cm0dfjHVe+KlPdzbjndyLY3A84XQYAj54FaGisEq9Qm:s+Gm0dfjHVJSbRyk3A84gYAlwQm
ImpHash	-

C:\Boot\da-DK\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	86.06 KB
MD5	86f45d25f5c2c66a4d92f324e6d59ae4
SHA1	9c999fb2541b1284650360fdb394656516ab5a9f
SHA256	865ac125279a872192febc60016d49f8aa2287d7ae817ad832c4acd86d08b55c
SSDeep	1536:qKwBFEKJIt4KKVP6pO02ts5sKbdEgSuC7ST:8FBJIt4KKiOnts5LbdEKUST
ImpHash	-

C:\Boot\el-GR\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	93.08 KB
MD5	173895b3ccd0216430e9b56355876264
SHA1	38cd34aadab07bb4228055d1dc345bad44fd47ee
SHA256	8b59f34a2040fcf08c3de80ee515a8322b94e66afeee26115e69bf4399ff1437
SSDeep	1536:0liXOMctV3PZryVXH2f7iVz6g+UsOaZr1oK51W40kFP8m:ciXOtP3PZrcH2fpiK75hl8m
ImpHash	-

C:\Boot\en-US\memtest.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.08 KB
MD5	3b8c33351c172bd9132fca1e87711578
SHA1	77eae5f4883bbe054a3d550421fa781205b9a667
SHA256	9a3963ec0a64f2f5b4f0bb618d1447b058cb01878431d8fac59bb6600a2c190f
SSDeep	768:v/AKtChgjGBQdGOtjVvB2o5d5HIDfjhhoPSXGHAlJDKlqJ0SLR3pIWs:v/1ig6cGgVvAo5zID7nhWYJDgQ0SXIWs
ImpHash	-

C:\Boot\es-ES\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	88.58 KB
MD5	f4a58ef054a2bc8ee2597ad80e8af2cb
SHA1	0c6b459630b813c1a26bf3c17557a2f44b5aef09
SHA256	d1505e41101718840a27adb460c17e3a5d952239eea1da966f14d5a340a7268a
SSDeep	1536:AKtIgOvDdO/+pqGcJZQLdkwE6/FkqEnMmPJvUOwAgkeU:JtItvBO/oqGYZQnEBndyYeU
ImpHash	-

C:\Boot\fr-FR\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	91.56 KB
MD5	d6f0c754464242cc4d00724113199e2d
SHA1	2b027434581b77f62ed38ee0560b3d62b0856dee
SHA256	e7251b9aa5a205686c935f7cf98ccc9d1d46fe3025184c3011454f33a69fbaaa
SSDeep	1536:5/7UVuXzHSvCfS2EPRyeZ+UW80/2QaIjIm0v7RmV0QbB2puVjtLonQ17C:5/cOjS6K2Re0UWeQaG09mVFqeTm
ImpHash	-

C:\Boot\fi-FI\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	87.56 KB
MD5	188fa2e3501c953d58e880c1afd2382c
SHA1	7de5d38328ccb717555fcae5e81f50535581159c
SHA256	d8c25454fa8a8a62cadee7cd7cc0e671500bfbb4ec9bf6d8d9fb090acfdac544
SSDeep	1536:hHtI7dm9jf171sSbDRmrXMnOqRAvtEW2wnGPLKGjWQ3M3gC0:Y7dG717ymmGOqROEEGPLjb3Mv0
ImpHash	-

C:\Boot\hu-HU\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	89.06 KB
MD5	e0aad892fbb9a17202bea40ae6ddfeb2
SHA1	01eefb59ea81dda9c0208e50fe24cf4a7c4e1c09
SHA256	2649cfe56c55b353440f3be6364bb35318d6ebfd5ba64445dd47a8f95d6a0bf6
SSDeep	1536:xknEvjP4lUCXgsrRo+P3vnyl1ficCqO5rYLtGqb/LSBwFnQOLsg0okYv8FYGW74c:x8Eb4lUCXgsrRo+Pvy/Kj5rW5fSMn9kA
ImpHash	-

C:\Boot\it-IT\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	89.08 KB
MD5	8feb6c406807193ae6f23a932bdd7d49
SHA1	c5b28a46b749d42af60ecb6d42cd55757d9dbad1
SHA256	593f6c3c347aa364250c12bedbc83ad8b5846ed4a94bfe16e056229f02141490
SSDeep	1536:CDwrTpmm/anhv2JoedDkBgP7ZI9oS8Dxe0KMNaROZ+VvJhY:v4nv4o8DkqPtIaS8lhQhVPY
ImpHash	-

C:\Boot\ko-KR\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	74.08 KB
MD5	4bcbfd1aab43d9ca67ee08e42963b995
SHA1	122bf56702b8070686e381e5070a6653b78ee3ef
SHA256	7eaa07a42cb3b845bed139a81511b876945a74f75b5d72c25ef7180382e5ed5a
SSDeep	1536:w3n5kjd0T0mW1Mp+F2KpTX1D8XeANlZe1zS2uyyJfCi3vsWpHhNV3WhBO8QqhUM:C5aSWXF2KFX1IuAN3e1zS2uySCKvsALs
ImpHash	-

C:\Boot\pt-BR\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	88.56 KB
MD5	024649ec2f496cfa59f14293193bfff1
SHA1	ad1b434e755a8825cd096ee1f5ae3c89fa1eab17
SHA256	a6393f2829fccfa1b17b3be9791e2225049d042adc8e379d8fb24e3182934c12
SSDeep	1536:08yCOaES5zoT9wtBnUwWBrbSBTWg2tjvuZY1i3IwynxZqydGeoaQ0J:t0aFXtB7JBTWg4jI3IwGxDxona
ImpHash	-

C:\Boot\nl-NL\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	89.08 KB
MD5	3223b3cc4284d16b06ddee491940be4a
SHA1	6b94bbe14fb43cd4ac346edebed5797224b073b1
SHA256	0ab967318e21c58a84f85786cca60a821047ca48851178792ae486725b44f7d9
SSDeep	1536:NhID3H15UpWewSY2hCMZx9RUBeZ3rDStX7vd4K8SG0S7i2b4h2N:NKD31SIewSHhCMZRu+b2V7vdDWiJG
ImpHash	-

C:\Boot\Fonts\chs_boot.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.52 MB
MD5	f30ead1cda944fe5e35979b2f1f0a8fa
SHA1	efd475cf1e9a5a2902fd2ddf8479cfa745ce9484
SHA256	c60c92452950556ef4830f533236de921e2ec0589332dc05940756a3c860bdc6
SSDeep	49152:nRLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYuU1B3zCOGHrSGjwe18wGHLuRapXtX:Pz1GHrHwe1auRa1F
ImpHash	-

C:\Boot\ru-RU\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	88.58 KB
MD5	13f7f8233945d9e473f25063b78af16c
SHA1	2c951f58e06ed8c70041d22bae7fed61ee09c657
SHA256	7e5df87dec6bdaf992ec3e033d595586f4baf594ae5a60439a68b51bc7a4bb4e
SSDeep	1536:nGbdU3kfJdHZuyfLXId3DWJ6BrC9tb/e+qrzXJcEYhhzT:nIJu2LYdKkhCfbMrdK3
ImpHash	-

C:\Boot\pt-PT\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	88.06 KB
MD5	a36e6cdaf8c0948df8426dc81818b9e4
SHA1	3ade57b394e652ea82de6ca7b28ee054f731fc52
SHA256	7de074a1687f3dd66617ef646652de0edd4645816b6cf062480d9187447da0ab
SSDeep	1536:XK6k2t5+5pxoN8uwfF46cVgqsum9MghtFFiDUHcyyMoB3M2/KYU4qI7ge+G+B:ap3pyJXYumSwt3sMcyynMM9xwGq
ImpHash	-

C:\Boot\zh-CN\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.56 KB
MD5	dc6f7fe3f083f1b49134c47e56b2c18e
SHA1	1eeff64f9d2d06f292fdf4378636948267a69810
SHA256	008cf3c598ef23046af0e882b6e66c5aeafc41da35b4c2d6abe255767c7d412b
SSDeep	1536:XisGGb+S6V4ErajzV0RQZrpPwz1YqlctbKBeOU1uRud5Gh2/lkYkt:XTbb4V/WjoQZrV+1Y1F2IgwdkYkt
ImpHash	-

C:\Windows\DtcInstall.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.22 KB
MD5	7ba601eba86e23498d896c73b555df17
SHA1	3649ab706e977926453b8b77a29f40ab45e7208b
SHA256	bf6c809f9d7ff08dce284cb43fcfd8caf783e097223684dd2235ee15fbd3cd2f
SSDeep	48:zMMOxshc8O0Y7bqAN+HULsUw/Ou1sYwug+dPS9k6Xcjz1VlkAhfn65XLPTjAd5m+:FkCcVOG+0oU9u1Ox26Xcjz1NhSJvHBEt
ImpHash	-

C:\Boot\zh-HK\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.08 KB
MD5	0f48274a8b2d9a3599f0892d72e986ee
SHA1	2cfd3fec470e50490779769fc26872b0ee8dfd21
SHA256	7deebc329ac34f6e0be5111ef4d26965539546fa5b274a03ada2b151c37b8cfa
SSDeep	1536:DsA3X4+VCRAZo4VeS7JnZGXJNlnvKS08yAN7yCmQOdIA/i:4A3X4+E/4VeS7VZwJNlTyyyClQi
ImpHash	-

C:\Boot\zh-TW\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.06 KB
MD5	b13eacf8315c2a736c42e939871c644b
SHA1	3a98ae2ca2e90dee21557d42280a6bab7684f580
SHA256	7c2d99bb945c807e04bf5907d2298a3900beaec10df617f861e136d1ec4043d3
SSDeep	1536:P3zxqaQKwT6PRoyMfBWV/MuvpEcEgA97qj7J8Y24QJ8hBGSoSY:PjJ3wYRjge/DRELpqXJ/QehBJoV
ImpHash	-

C:\Boot\tr-TR\bootmgr.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	85.56 KB
MD5	70d51dd199c09a393d66f161b8082ba1
SHA1	6200702faec0a87ea0dc841549b929106d648bcd
SHA256	14b0f861960cc7a0ba7b7a0458c48e7ec331931cce7dc82e0ec2718b76cf0244
SSDeep	1536:sAfx4XUzgvLjpGY9RgBA6MVmfiSVEmuX7R4pRaRtOS:NfuUzgjjym6OiiSOmurR4oOS
ImpHash	-

C:\Windows\Professional.xml.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	52.80 KB
MD5	274658c4ddfcdca7ed87be40a2c28fba
SHA1	1ea88fa52695ceeaa6f866650b38b8ae0975d811
SHA256	b2f6ab3939d7baaaab29cb6cd8f756bf4e8e7e1bc7f3e00326b506b14c92bcda
SSDeep	768:lQrTAk7nIZZP5vDawbbSJqzZVuc1J/dkuCx3Q41FGpsIAI1m4cT:A8k7nInP5LlG8zZVRT/GTCGFI1mN
ImpHash	-

C:\Windows\setupact.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	770 Bytes
MD5	acd22021caae2ae96701ba8c8d5e521f
SHA1	e30f267dd9d61310b62ea1305bd5517e43c8ba09
SHA256	87aa1508ec7e2caedec2df2fb00441054620e4872fb96b1882eb5d3caddd92c4
SSDeep	24:J5y/euPs55msTO4PfTQyqZm9EuMNYvZgBp5tzgxSf/:SrPQ5m8tTQyq+hgBp5tzgxG
ImpHash	-

C:\Windows\TSSysprep.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.82 KB
MD5	47d94f6baec81f877f81145a1bca0714
SHA1	39bf18f14ad5c68ed546b415cd27a74e0c099a27
SHA256	219d39859f33e1c039edeb7864274b682523fc5a264e7f6f90b1fecb4572b568
SSDeep	48:oXwWR8GEZOE4RHieik0pzfoM71pXyVFcOErsa+C2S:ELEZOE4RCe/0pro61pXy7mT3
ImpHash	-

C:\Windows\WindowsShell.Manifest.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.23 KB
MD5	ee91b0568d5644d857dd1e372138d9c0
SHA1	d2dff79099d9c750849d3e05b629bafec8f031d4
SHA256	8bb171d6a006c4c4fdf02874763759ddb4989b3a4350b23d488da9ca2d054ec2
SSDeep	24:ElaYhcWG2kT5f4rAjEpSyIq4NdSTHgxqLDEUwukaoSGzzDYPC+H2E0O3:GettfugyIx0THgsLYokHSGvDYPCfEV
ImpHash	-

C:\Windows\WindowsUpdate.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	121.78 KB
MD5	f4d37b29697df0a22963daa0a862e98e
SHA1	9ce0f273802241390ec75c147b60768be30c3f4e
SHA256	6701edae9d491df711ed844404ccf043bf1cffb578a46d89519d1b7ccc0cf76a
SSDeep	3072:1gdds3HmoQOFPHsC2ExDXa2l5HJdXWM4y0MGePB5gp2i7Kc:1gns31QOFPHsVEVKs3XW+0cP3gd
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\dependentlibs.list.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	611 Bytes
MD5	14a721c1ac41eaff6f7672c588b467bf
SHA1	e8fab657ba3eb3ec74572f7eeef5599ef6aaf4c9
SHA256	43027f824962803f3afb9245046d5ec3c436a884fb8fde1189947000b1f33622
SSDeep	12:vGaD5SzywjlvQyn/yPJDihr37ONVhBVsT2mEg842ZIK7TT:vGc5SzlBGD0GNlGas842ZIk
ImpHash	-

C:\Windows\WMSysPr9.prx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	309.72 KB
MD5	9f0164b50e97f83902656b96b5b01eb4
SHA1	f08eb36574f1ea51a92095e52cd86a2d7195f196
SHA256	c282c4b40305b0ee6f7e32b5f8e4fe2f16a9469ac0ba4e3eaa7c19fe7ae928f0
SSDeep	3072:kq9VqewTbofFS29auclEDCoapyGeXH+k9ZK6VFQH:k/e9I2vDCoapyGeXH+k9ZK6VFQH
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\install.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.23 KB
MD5	7d442f84b989de4d610e48feb42911ba
SHA1	8969ddd87688dd864741bee0eb0c6de9659b27c6
SHA256	516399571d029666d081e9da5a80b5e79885ba87f32688e01826c64d72e3c241
SSDeep	384:Yo2A0S/ZGQPuBNLUYCXFULLGERGCT+VLfDlos7rEeGaJBbRO+1X0vOFdUOSB04rl:Lf/ZGRjBGoGCMLrP7ya/FJF4B0twdUc
ImpHash	-

C:\Program Files\DVD Maker\audiodepthconverter.ax.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	50.00 KB
MD5	db3b3943e3eb21acd58b2f1bca3f678f
SHA1	28ae67e8e185ed858abbb5cd26e34bae1421220c
SHA256	5efd8ce4c1da314353c5ac01e21a193fca4d7add472927e640a1fa68bd155238
SSDeep	1536:pYbYXTDcyZ8T1fFBvaMFyQqevG1vS9LWbeNcYZJ3R:eKsPT1FjyF5pnYZlR
ImpHash	-

C:\Program Files (x86)\MSBuild\Microsoft.Office.InfoPath.targets.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.25 KB
MD5	5debb7b9cc478c3a5bbb149b717cd3b4
SHA1	1a66f374a7993c29d24926478203766808307600
SHA256	54949f238fa01395ee933e1cfc58255b74ce323f2113bb998a7458a34b77f934
SSDeep	24:Qz8YQOoqlM/gSPkMaPjHIFLM4lTxW9Npo6aIZckGs09yivlOW13P8nl:uZhM/gSqDgLxAXORaCSWFP8nl
ImpHash	-

C:\Program Files\DVD Maker\bod_r.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	76.56 KB
MD5	58a7f70af1d7dc83c530a68b70de2533
SHA1	a26629ff1dff7f083408d859be14329b5927356f
SHA256	7445965f26aec5fb7fb56b4698440a3d91cb2f5766d5dea34fe42afe9f5f9863
SSDeep	768:KVJC74SYUk8OdMhOly0bVUDhUZlOn86jxIFdNAV/QYqtBy1chjFv/cSwurHmwgp6:Khb8OdUCEhsO8I0HAVoAyIMBgq2M
ImpHash	-

C:\ProgramData\Microsoft Help\Hx.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	902 Bytes
MD5	8a0dc7a3ad4e70c4e276a72c34886bd2
SHA1	d7316278db3a4e7fda5919d729e59068c0a42deb
SHA256	b5a8521fa5ac5a8765673eabb6fc1e52c373f4f6bb7df77ce841709562e9f4bb
SSDeep	12:HW01NMBcdY/rfSvml3p8ltGbhExwrRoHgwdS9VjgBiJHSq2bxF6X4Jggxv8BHtkn:HPN/PzqE2VpBdgaH0yExU0CmGoKUj
ImpHash	-

C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	862 Bytes
MD5	20411f6cb788df976a3b6e045cb214a0
SHA1	2c8e7ffd2c453fc65e3044df519e0575edb011df
SHA256	96bbb7593dedb46d28123a962258481979b77a71b0f4d807c0aa946600da7a13
SSDeep	24:KfWrMM5vLTFY0BDXzY4D0VnJYLbJOM8Gd:KfelLVDDfDqYJ8C
ImpHash	-

C:\Program Files\DVD Maker\Eurosti.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	55.93 KB
MD5	3c00ccd359a6d34d46de12f7ea809f35
SHA1	f6c1501ca803671510c28d1845be9cbc3c2f6086
SHA256	7639aa3e0d1a0b32d325399326002874d5f748cf40ac10381d3bd39ef1cd2424
SSDeep	1536:jm+87Nr192sfv4q7dSiEsQCIqd3YSizLuZDRb1Y9Tl:jm+eaA3mqd3VizYbe9Tl
ImpHash	-

C:\Program Files\DVD Maker\fieldswitch.ax.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	41.00 KB
MD5	318ca66928a9f337ff01fa7d9288fc09
SHA1	2cf63755fbe2b5797407576ef1ce37c47398c89e
SHA256	65c23dc97192dd752b5bbb39b127fe95482f379f2a05aa4d5dc8874e3f303753
SSDeep	768:a44RaCkA9a1GvTvmhI63P2KgXu5A93RyyfuzDz2JBVuzESN2RkFgYZvPdhgfBJG5:aJRaCKGvTehRJgXu69ByAuzDyBIzNFgM
ImpHash	-

C:\Program Files\DVD Maker\SecretST.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	97.01 KB
MD5	81740f2529adf344834e4540a39875ba
SHA1	7d5156e8bcc865356edc7f1668b41de4d1066fc7
SHA256	9e648fdfaabd5ebda92f9bda446217b0c4b091a4424ab1f138bf0c1ea17e9b37
SSDeep	3072:DZ1Jbc/+rzgce+hA82UbUaGQie+NbbP2vwvF:DZ1JbcWrzgce+hA8TUZQrY
ImpHash	-

C:\Program Files\DVD Maker\sonicsptransform.ax.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	51.00 KB
MD5	123b7217f34dc134a15648b2cf0cdf24
SHA1	b1d45e2509a27efc63edbdcb3906275538e3c36f
SHA256	1cd5da614fbbb9bea6228eb34669457c0dfecfc2fd7c3bd1de6312eea7adf0a5
SSDeep	1536:/VSA8rl0aw9ZnXmsXsrLezHXo+MWEJR3NJPWgK4:/VagZXmu6azHXMZhJPJ
ImpHash	-

C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	838 Bytes
MD5	8e0f2aa6971fcef4600a07ff83fbd0e4
SHA1	527d98f99686618d5a906cacef8dc21e585fca53
SHA256	18a6041cc111a7a6b909d5bf1fee65bd779f3db374b9d2641999854497197ce2
SSDeep	24:HkB/8pxq/0BcOFh0eB0Oja/EMwfs0kOOqXhyqJ:jq/scI+r5EfsXAr
ImpHash	-

C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	844 Bytes
MD5	72f378e6ade6bf832e48782455b3b3ea
SHA1	9a6c47876b6b3d3c00508fcfbbcd0ddcd71e6704
SHA256	8cf66f7b66586e99ce8cb7b6b024a6f589030b24ce0b31f6954f62e0a0c33bba
SSDeep	24:c68iDvWfjlfk7+49xAwrXeGmr0tBJaksYwVBt90cCg5a:OWMJs19LrOItLakbc90cha
ImpHash	-

C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	856 Bytes
MD5	75eba1b293d481e994aa2ea7bba8921c
SHA1	59a9e241280f7d6ee7841b1a2535fbdf9522e6ee
SHA256	f0310ff2e1d994b59fdbf415d0ce198f096e6ef7b12a459e15a9c597047591d3
SSDeep	24:rdICpOFON12r3VEFEV2eTiWiEfAe7NmLcZMS:rdICpO412D+60CiWfh0cZb
ImpHash	-

C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	892 Bytes
MD5	78e4d7dc7af6a178e4597807442acc31
SHA1	a65173111995e403ca940a22bb683b8144e199c8
SHA256	375d9a1a4be22aa9bf4b779b59f54bfc2fb705c2a316bce38650c83cb9cfd36c
SSDeep	24:foeqwWGq10ARMxDAYNlbvpSOGmzkeZxzju:AeqnT1JqbQAzDzG
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	856 Bytes
MD5	069061260a60ef9817d9a78f3e2c19a2
SHA1	59622a2b2bdfd2232d05dae3d5d274e1f5632aee
SHA256	53a07d6c13f3c3d3865bc157acf303ffa49194c3006d36925b8183f3bdfbd4d1
SSDeep	24:Fvqyrq+R+QLezdwvZadqvr0GctIbjngUjTn:FvTrqyL8whaEpPgSn
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	880 Bytes
MD5	ab4e71e026bc961102cc957be782ce0a
SHA1	3f18ee5715b5fdc47b46bf63950b6b0f84b81bdc
SHA256	5dc4e89ffaea150b6c2ea69e7f76950e914675c687fb7ca113b4d70f2c87edd4
SSDeep	24:wCaN9fr1UGonUEnrdIfHIAJQTcfbuL8ze+fXkYxzqcpM:wCaXr1pKdQJQT9aEb
ImpHash	-

C:\Boot\Fonts\kor_boot.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.26 MB
MD5	a27f5b7b868c5f487e363561fcf5acd2
SHA1	7e50246eabf8b41e12feab8ad77ce25eef0be3a1
SHA256	0c5a191d843ce8b3c07103a31994960fd11d79d67b684a22947f4bf4e923543f
SSDeep	24576:fGpPa2PYJqzMtenwoZ6DcTrk3LM9RlbkwoqR8QKV60MYCByDp7RbIUQ+q:6Brk3LM9Rlbk/fuGq
ImpHash	-

C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	838 Bytes
MD5	1103890fc796c9e3b278e7f78c3aa16f
SHA1	67420b0204192898a7b4f90e589f8850c51476e4
SHA256	15d977995c332e7908e5dee4329de98a4031ede21402320f3cd336bd897c1e62
SSDeep	24:fdvsCFeqBo1poEf5jySoJ7TAh6ZeK8m/4oKnuVm/rXB:f1sABBepD5+z7TAKejbonoDx
ImpHash	-

C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	826 Bytes
MD5	f1c9af170cd5d10f3e649652e40e9e15
SHA1	5a52ba1d809a27820d643a590d1b4270f6af9adb
SHA256	9e6f30586c7755c86a7fd361cab8a70fee6f13c865ffe99ad0101650a0d7432d
SSDeep	12:NvIAWcKuwZ9D0iPKU9TYkHrcgVW7kG95iWKXjpr2R1heEvWfxWPG6edj31Soj+T4:Nh5K97KyYkQ/5qdCPkkodLw3k
ImpHash	-

C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	850 Bytes
MD5	7ba53a641a0775101c3115acbdd1ef49
SHA1	8acbb68c7a511e643f70237721e53c2456fb64d9
SHA256	bcda55f51bc747c9d972997444b238b7eebeea231c077f773a1b502f509d6db9
SSDeep	24:TNX/00uP6X6hGOazdd08YibXGRHmm4mWy7D2:hvyP6XgGjdQibXGp2
ImpHash	-

C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	850 Bytes
MD5	0a7c6673ebeec258b0d1b2c3fce2eb0a
SHA1	dad73ab832e8ea5dbaf38f9c64fb9464320d6edc
SHA256	d58ddd52f00e36c7ff864055210d1a7d3ccda996e84832c90b0b3f72e0b54b39
SSDeep	24:iIXa3vjkY2b9M41VYB9FQMX08dmV7wNtOg:LXgvjkLXAZX08dmSX/
ImpHash	-

C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	874 Bytes
MD5	b9c695e2bcc27c50bbea27de8bec3f97
SHA1	bf6b8a667079f9f78f29270184e1ddb2b300d078
SHA256	779ef40704c58c0f335df154536ad1e4867a0fbb7b13969c8d950c3967ac0d24
SSDeep	24:FGVIUJVKPx93E1XYOTED/tcvLHqlAzDiO:iIQKj4Xb0/uzHjviO
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\omni.ja.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.45 MB
MD5	7d01edbd0d37146d73f60675cdc1c9cc
SHA1	1ea087101ba09dbb95aa8499147d60bc01dbe742
SHA256	681172a55f9fe9b031027bbfb61a9b797784d635cea2095d1d50017aea2104fd
SSDeep	196608:Jn9OVmGSFHqjErDcvMuCxINc+E5JR0feh:JQm/cvnWPRac
ImpHash	-

C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	856 Bytes
MD5	71220caee2b072134f450dc2e02d068e
SHA1	b2927c6048c58ac331e54b8254107099057a7c74
SHA256	20021c1c4b745340b32174c0fca6de4fa42c367a118e3d8bdb1f0c38a9f9f38c
SSDeep	24:4KYpu3FPIsNlvc3mIXWj0bZJedKM0TKN0PeoAF0vG:4KvPxl0X4+JedKl1eo7e
ImpHash	-

C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	880 Bytes
MD5	f4e9513f5ba15110ce53064b025fbe57
SHA1	d42dd700bd09fbe04919c28193ee15fdfdfd92b2
SHA256	93cefce0cdcc8e5a711b4a1ef54e6ce1f6141cdfb7c1c78706b15dff0ebc1421
SSDeep	24:B1KoG+MYulDqbAVgStdTVAXBHogjY2OkfAQ08QnV:8FlPtRVAXn70V
ImpHash	-

C:\ProgramData\Microsoft Help\MS.VISIO.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	838 Bytes
MD5	cde0fe5ee740ef1eb2855e245f2d4349
SHA1	bea706efd0c174d1f00c0bb2f73677c105d76f75
SHA256	1f210e33488ba6a09dcbee985bae31135213f27801236c7bd1226c3497f56671
SSDeep	24:EEkkWlhRCskqLonz5peSxRZjhjZ3mA2vFhZb:hq1Zk0onz5peSxjld3R2vrZb
ImpHash	-

C:\ProgramData\Microsoft Help\MS.VISIO.SHAPESHEET.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	904 Bytes
MD5	cffecb9beadc0c8a05a1bcc84199a2a3
SHA1	d887982ff4bdab0c0b2dd4a9635dd3b59f69e532
SHA256	5d45b2c003081b1cc67432594cd59bf7017ab758348a70561864869c4aff0808
SSDeep	12:tQLykE22xr4mSl02+fhPbFexspsAKz7xNHagRHNbfGnscAVlHDv8GGRSTquX:iekE1TS7IbF4spsAKBN6ucAXD5GR0jX
ImpHash	-

C:\ProgramData\Microsoft Help\MS.VISIO_PRM.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	862 Bytes
MD5	97467ba3270803e9d622ad96106fe822
SHA1	df92fe31b96a3f15b52f5a302571ce2186cf28b1
SHA256	cddf45cc362a52882f14ea32ad4e22421b181b748fe3cbfec3656c4ad791a522
SSDeep	24:RIOMrabo/ZxSnROzjM90N9Z5mgvtNLMw1K0cSjwKOa:OOMra0GqjXNEMN11KZzKh
ImpHash	-

C:\ProgramData\Microsoft Help\MS.WINPROJ.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	850 Bytes
MD5	8e24c2fa57b3866825547ed0aec06779
SHA1	54c22e69d084d58fb24246fe2c3ef8e14d1d1631
SHA256	cfd19c93019cc437484f34b5db4c20832982ec5bbd74db5163ef3363e1b1a19c
SSDeep	24:AoK9zFr29O5NNaDW5LRElPQdbvu5NFlKZGY2tFH1eCBos:Z2FqQNQYOt2KFlKZ32treCz
ImpHash	-

C:\ProgramData\Microsoft Help\MS.WINPROJ.DEV.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	874 Bytes
MD5	1b1676348fe88a3664552b1b357f4adc
SHA1	ca841280cf4fc95a3c76e055542a3015d78ffd9b
SHA256	d782fd13c3883c6e28b15a545bcab556519d861a63c76ecbd73863d2e65cf505
SSDeep	12:wdhqoUFk+dXnA7d+Gzkn5CmJ+tUduT5zIq/FlpP36D7kqGbdkGxtS+7aMGKojYOK:z3nIQqe5J+SUkqtl5KU7p/GKIYyY
ImpHash	-

C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	850 Bytes
MD5	f12d7e4c0bf2710a13518e22e7378a1f
SHA1	cacad5ff2b4425b41722022c7fe0099ae1a22480
SHA256	c4c79140dec42d2558e8fb0ec449d2836b5f0ea39dadcccaed078567a40004fe
SSDeep	12:WKLGKFTkatOHrAIzpuNRZl464rfLTQSccUpGZ5H3Jxm5SOAlzuqomhtG8pQeHXmL:WKJdkcOL5ENTlVcoyJZJK8OAJxT6s52
ImpHash	-

C:\ProgramData\Microsoft Help\nslist.hxl.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.96 KB
MD5	e7155fd51bb7c74dc7e510053152f6ed
SHA1	370b40401fec6e67cfc421a2ac5e80b52e1c55e3
SHA256	9d143579a8b8db4b79a9dccc02e9dedced89f97bc4cbc66f4f103b0470730e5e
SSDeep	192:u/tHKPhQWuj1Z/qjo5Exb9tz/QMtkDbffZ3XlYry4Ej:u/7j3Ko299l/QMCD7fhmyL
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\removed-files.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.31 KB
MD5	26269684d5232907dfb936bb99e6ed69
SHA1	1518290064813d8e15281f5dea0a07faf282f30d
SHA256	6692f1b760cabb8b6026da473853a6e777ebb74b513c3bed7588277ac1760c7e
SSDeep	768:PG8l52Tudc8VPxKJrexNeaTrYygd+mha6tcM/Y8RWY//+:plVBee3ecxmgOA/Y//+
ImpHash	-

C:\Program Files (x86)\Mozilla Firefox\softokn3.chk.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.38 KB
MD5	d63ee07b3091c4928893766ca6f6763d
SHA1	3e041a5ca3989033e6858381fe1fa92dd56ef33b
SHA256	7e6119f5df9542ebeb5fbdcad064258e73357084a181c1d400b89e474949073f
SSDeep	24:bfT1c8ZuLVSWKpcNzpwGbLt+War5aWVAWa6WBJG9ECKlFXrWdsrlPx4MEU:b+VfBNz2GlA51AWYU9ngFSKBPCM/
ImpHash	-

C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.02 MB
MD5	29d91ef5234cf7254fea7de1052813dd
SHA1	2002055a6c3f68f9ccd25a8d83a8441a91c2c515
SHA256	c4942e89dbf3253ea267716e5383086ca4da73b7b4a787023bdfd2f0efdc3e12
SSDeep	3072:/3QeLx8E0LdPNxhG7q//pcj53vs/InbrTIHvPnHmC5irUuMo/+ncoZZihnhW:/geL80AcRn7y/EouH/cpiu
ImpHash	-

C:\Users\Default\NTUSER.DAT.LOG.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.50 KB
MD5	23757062de832e9140e4bf52a3787291
SHA1	d6e86807a6a4c726fbb6a2ee27fc84514e561219
SHA256	62cd71583974f32c6d63b6dd68e2c9f474ffcd597b960fd2ef7a2b29d66ab906
SSDeep	24:LVCNALhqdt2G+eFXmHhRBCJsZ7l63GdXRpI09DgBVSacsngDQhAAiNjO1Uy+QJH3:LjLc2UmB7Cel63co0dcVSnsOS+61HjJX
ImpHash	-

C:\Users\Default\NTUSER.DAT.LOG1.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	185.50 KB
MD5	bea44154dc4812b0135d32839bc3f84e
SHA1	3debb00c07d7ba834215cee53c88e0d23f7605ec
SHA256	259c7c731048a3c4c664aa9dc14968c1dc98edf326ce01b3aa737354ecff3b7c
SSDeep	3072:hksMIc4Im0/EghUXS/3GxGoU2KlmWndXR:hkJRBciPG/CBR
ImpHash	-

C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.50 KB
MD5	b82a5fe0ba5e8dd3e4d6cf69d6943280
SHA1	ac4cdaa55c46365d3ce372d14faad5a88ac33a48
SHA256	cd53f49313c14a1c26074cf31209444fca39ae9b4f8de192aaf49b7e2674c1d5
SSDeep	1536:NWIvpvDe3Y6RbWrBr7Qt3oD1wK1ZYC7bjIqaK8VGvd0i358:LBMY6k6tedj7bRaK8kSGy
ImpHash	-

C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	512.50 KB
MD5	f3cc8a4c011ebc19a2850166016184ac
SHA1	e18d982b4b774df828c5cf234ba587df13b93d52
SHA256	73598abf15f56101e082652ada15d2d01b3038fc480e4106d2e5a12eb778a10b
SSDeep	1536:X2p2hMsh4Js1lOpZfBRAAKyWE6gtih+G2piZT4ECKOJ+bI:mMdSJGwZ5RzA+G2pOc5bD
ImpHash	-

C:\Windows\debug\sammui.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	773 Bytes
MD5	eda2ae4e3ac1fa9de2b8b30088c183f4
SHA1	65fbff2eb6fd227a5b517336dd91cd5bfca4d376
SHA256	b5008756965de7186fa2b010d74e8e005d3b44e26b7cfc4bfdd366880903dbd3
SSDeep	12:KQv/pkQ0E/FRb0gLmzfcW5aYYJwcF3xQjpU4traooPRbIUtsCx5s3Yj2rc81/5dr:KW/ptMzFa064HcRbtsCAWbY/
ImpHash	-

C:\Windows\addins\FXSEXT.ecf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.28 KB
MD5	def68e6641bd49c8a02d4cfe6fbcf452
SHA1	28282590e5208d7d85289ba5ffb7a24c671b8ea6
SHA256	fa4b4f53095809860ce09b2bc760cafa2dd2c554e505aa480a6bb593a7b787bc
SSDeep	24:MhqNSoUpzEqdoBygsurPa2eHMr1NZNgUW1fv6Q2JrUACu6UeLNNkOvk0:Mhq70xgsurPa4NZyBVv6Q2px96XbHM0
ImpHash	-

C:\Windows\AppPatch\drvmain.sdb.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	148.58 KB
MD5	e758d07e46e5b5247cf145df89c99b2d
SHA1	e4cc0d6afd5332cc37916410b862a8f8100053a5
SHA256	6f39400160b92971e49202cc8fd419abe6b15ba34d71e5caa7aefeaae5c7b6e2
SSDeep	1536:KGX2TKxaObt/BPmRr9byPT8gEedo0Ir7WWiJMrp8Nseq35watz/1ij:6KIOR/1mRhmTFd2ahM8Nbq35watztij
ImpHash	-

C:\Windows\ehome\ehcir.ird.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	814.31 KB
MD5	bed3391e1c595439d84b38473395a65e
SHA1	4b0cbbb6aae88dce0e090e52510d273b210cd87d
SHA256	2d04b347d71f1f7147b2a808a4ceab3528ca96b60f147daf6d2f88cd3bb9273e
SSDeep	24576:5tOcW2RXFbqQIAjvqll0/vgqf1OQLMhAg:rOB2hFbjIAjw0Hgqf1fQv
ImpHash	-

C:\Windows\ehome\ehexthost.exe.config.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.72 KB
MD5	eec78fa04c98a21638ece457013ae199
SHA1	83570c47f13dcf2c7ecb67ba56f59030c0bb6420
SHA256	aa2ff94d279657c673373d0bc27858f5c12f983df04d2dabfbea441e2ea72ebe
SSDeep	48:g3Y0CNlqzoqGVLByVjLU0+PD80q9PkAf2h4Nsxsu+EJPK7v:uYPqeGU0+bB0rf2h4WxsX6PU
ImpHash	-

C:\Windows\ehome\ehRec.exe.config.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	787 Bytes
MD5	4aedf6b26b537d870651f5bcb8f49fda
SHA1	43318153952696a5d49e38fe012be0f2b162646c
SHA256	04168083f55be94f649e644ea48b66b7554447a21a85b9be4df0bdeff0a5dfe9
SSDeep	24:cEXf9frMGzVLeq8YNdIEko8OlZKFPmCgH3:HrMsb8gmXQlQFeCgX
ImpHash	-

C:\Windows\AppPatch\msimain.sdb.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.68 MB
MD5	ce623e9b39a2453485647c4f05a048fd
SHA1	8d8518e9d3835c9c7a4ad8edf7fa1cb72d226058
SHA256	43c4753caab0eea3344d11614fa63d0bcbe9526d9c38591255705a8705a5920d
SSDeep	6144:xFIUo3CjqyefIdaAVVEnKi/OQmOgL9+qO9udJKrZfvMMznIjOlJJipepUbuVxjs:xIJlfAVVpOmkudJYMufJPUb
ImpHash	-

C:\Windows\ehome\ehSched.exe.config.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	632 Bytes
MD5	eb6f7c057b73db98ff90fe5ec0ce957b
SHA1	d267d8de1b9ab6b916607000c3c374f3d821a709
SHA256	81c4c66c2148290161387630796beb9c2264c0be27b7115a7fb279f4277abf72
SSDeep	12:R/9PVMSmv07ebwZW09CLctOg8eLFN0TSglhrjMmb5i:R/1VMs73RYjcDUHbli
ImpHash	-

C:\Windows\AppPatch\pcamain.sdb.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.38 KB
MD5	ddcf0bb6c8b20b63a80b46eb6edd653f
SHA1	973bd22ab2ecd9015b4945dfc15d70b73cf74838
SHA256	28dfac2b93f14d3c65e9326df3b9c8407e88e14d4a56b8e557fb49d168857928
SSDeep	768:By1RFe2T4W4d4EtxXFdtB/IDjqRBwMQooRPNb/7AADW/0B3zUqjBfhsrDE:I0ev4dnt7drQDeBwhooR1/cwQqBfhyDE
ImpHash	-

C:\Windows\en-US\bfsvc.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	8616c7d8a481588a3de73c04a1f641f2
SHA1	becb961f1c6c7c89e67a5f4e874ca50e0d4624aa
SHA256	8a43d54c1bb890ac746a33b58b2c66c4dff119f3c9132f293b779269e431fa2b
SSDeep	48:IQMxRN/vWFjLfGOBDR2XPS19tNN49yh0o1epN4rlQbpl3eF/QCcv:6x8n2PSjn49cON4rClY4lv
ImpHash	-

C:\Windows\ehome\luttx43.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	115.14 KB
MD5	a01113588e4c4a85ee210d817bdf239a
SHA1	b68e93bac4523355ac0486b66487da91a0beaf48
SHA256	7ed10d14ae23583ddd804b9f4d54a8fc4ce5fe4f40b99d5a7b4ca18eaf62c4e8
SSDeep	1536:W1TzIRHIi0lseID/PHtHC19hfXdXTcBsxILaPSbs6mcjPYDKvVA7wnO5TQKVHaev:WNIZlR3tipX1AsxjovmTQK8K
ImpHash	-

C:\Windows\inf\1394.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.69 KB
MD5	d748b8271deeb22f7ba35c181f882219
SHA1	6db84b6403ddd5590861922880dc6bc811f730d2
SHA256	78da9fbcca0057875fac6fee339bbff48427febd0bdf18b7c1ce4db05816ef8c
SSDeep	384:CuTp8+lpkD6puMseMLDs7fGcfarBk8HZOvOR8n5aS+/gJ/d4O54xZ:xpd6D6pyeMLD+Gqiu8gvOi5aSmmv2Z
ImpHash	-

C:\Windows\ehome\luttx83.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	113.00 KB
MD5	62302b74cb9b2ed4b50ef417384d3d50
SHA1	cfdb30efed3dc252e9127a3c873596e3be09ca2d
SHA256	3befed3f3e814d11b862a52be35302263f98679b8662a340552ac5729a2ecced
SSDeep	3072:hdKWLn7A93yJ9QoCYDVrGAifSmJE8mayaWovmTQKhz:vEvo9Mlff6iyaWo54
ImpHash	-

C:\Windows\inf\61883.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.81 KB
MD5	fab45815401c55aa30400d8fd4aeca49
SHA1	01f738e2f2a6bd2b86c14f9a9283993fd602222a
SHA256	c435924c7bbfc1452a11beb20e0ce323f33fdb8f881e3cf582b4c3c5afd31734
SSDeep	192:6z/sEYqnmzcedOgGoiAQA1vt9QdMsxsBM5dTyNm9VzE:qsEHmjcAfljQdzxeM5IeVA
ImpHash	-

C:\Windows\en-US\explorer.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.00 KB
MD5	ef87803b0c1c552334d27506660dd0e5
SHA1	1cc329e9514bf0a82f852943a1029040ec868c8b
SHA256	c97a1cc32467a93c0062239d32a9a62ea6634d1f59cd5917b41d4a822f0ff81b
SSDeep	384:ods6pmdGeB30Lg4c3leFXDKvI8SZ7ZtDSnxoGYUqvBKHyOINiYxr6oxyal:Asm+3leUAZ7DgWGzpreiYxGWy8
ImpHash	-

C:\Windows\en-US\fveupdate.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	c7e2ceb9bfe61046406e1de3de004855
SHA1	a39d18be93e80e81f4b5411db4ec6fcb7d069f48
SHA256	961099eb5b956175776527124baaf0a4f40273c0c744f47f95892ce95e8fe485
SSDeep	48:gRWCshq5M91T/iXFI+ArRtyX2CSNmpS4MME4m54gjKck5TsPL9lr4Qm/Nz2SobnK:gRWV1TqXG+qRtyfS4MGmGg2ck9sz9lrG
ImpHash	-

C:\Windows\en-US\helppane.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.00 KB
MD5	711a2f90cd9f32c6ad1ec36c9a950dbf
SHA1	36644412b8a6abaf69a2ff59e754bcd731504daf
SHA256	f26d6274b71a3f3a25af7fd3348e9af91a2cff9f5db865cb244be87253f4cdd6
SSDeep	384:B6/tL46W7NpZMrxT3ODo/9hswTGgBHe2s8ZSNNVw:utLZrF3ODfwTe2bYNVw
ImpHash	-

C:\Windows\Fonts\8514fixe.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.22 KB
MD5	18da019e2cd90045f58a4bce77c4bd13
SHA1	94446f82dab46ce1caf598113e0b3d5733a0df63
SHA256	e0717a50187be2f270ec55d073e95a05d2aad0affbf85e087f35325af5cfb4bd
SSDeep	192:0fVgMOJYLQnumljGMy9YJrd9JGwsWC+OwMcNnC6vnAthCP/Ez4dODfX6J:0fVdOJmAu0jZy9YFd9F7OwMFaIBz4QDo
ImpHash	-

C:\Windows\Fonts\8514fixg.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.75 KB
MD5	6e6b4b645948bd977328ffae4d53d95c
SHA1	67d180f724123c14437656828eaa42204691144c
SHA256	1cd7bd1385fab7426181aa8103d33b75c943d155e686e161511f2e18567d5e1e
SSDeep	192:clYwHrPrKWgolyDJtdU275VLMhh237oK1Y1/PQ5O7rApbBr9sUCli/EM:cl/XKpAoJ7US7MhhxqYJPQ5OSr2usM
ImpHash	-

C:\Windows\inf\acpi.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.05 KB
MD5	f9c3605366764b6ea35b16cf8de77711
SHA1	dd7c1f375a08520f6cecc640ce3e5b16e848d437
SHA256	8800ff68fdf67f0dc592632a45a05879014a81ae84bb5176431a50e5971b78ff
SSDeep	384:1/0WBTZa2tH7a+WGFOjK1josZipOZWAbBW:xBNR7LWGB1josZjHW
ImpHash	-

C:\Windows\Fonts\8514fixr.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.22 KB
MD5	d49d6ffac3135363583f5c84c45bc0fd
SHA1	f274536e66a220fa9fc13465e821d43f6c7ae07c
SHA256	58a0cc4c70c56fb9d2b5ca3ab9978ea29b7363d3c4a51996a073e83f31c42517
SSDeep	192:AlAqnOHzTA1CQNlWm0J2Az/qTkheUKh4jddjpf3nQRNML5Nd9kaT/jNk8tYt0jpB:AlAqis1ZNssE6UeUi4ZPXQrQNPbrjNkC
ImpHash	-

C:\Windows\Fonts\8514fixt.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.72 KB
MD5	3db351c962f261d26768130a1487f005
SHA1	931054065549941594e3667dbb46d2fb3b116140
SHA256	2370dc207d281913eadad91c3292947669255fc1c89bdd6addcc315b3a67c3f2
SSDeep	192:ViKh6SxTpF8IvpfXPdEgcgtVZSTqCV+NBPvG+FBiCC3+vGhvPizJL5YRx:ViKhVN0s/PdEtgtXSTMvDVC3+vGsJL5Y
ImpHash	-

C:\Windows\inf\acpipmi.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.48 KB
MD5	1e8ce1428ec1f97baaa3106055024132
SHA1	cf4d1e5f271e1d36805bcc400ded38e77995d101
SHA256	9091db4d9a799640bab5428a2b20a01f94d9af799411da148721cafb4cd2b94d
SSDeep	192:PhWZ3jJB31hRUCNEqux0mLW3sSd4s0V/UplMobuY:PhW9jJ7hR9Sx0O77FsMobH
ImpHash	-

C:\Windows\en-US\hh.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	3992ee09a1c7da8d58a1eea61f069558
SHA1	c1369f6f4a40ba745d65d58661382bfb50637744
SHA256	252af28db9dfe0908587289d20185663f919ad9387de6b8fe861e105ebe5e72a
SSDeep	48:wl7gJFf+jE4SzzZ6MsjReQE6L5cnHXLCOQ0mAs+xeMMaaBb:v9zzUDH5oClyNDaF
ImpHash	-

C:\Windows\Fonts\8514oeme.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.44 KB
MD5	796e9414553dc27353b042d5b0c8783b
SHA1	666aee129566802a94643cc7b6924743131d8a1f
SHA256	b1af1b43087ad81e8ffba3cf507609a479029bdb1a8e13e70592721362a46d95
SSDeep	384:83nUuU+YuqXCPgHLx2htPudOGJHE8Lz0n1BwjW78QC:83Uu7YuUC5hdFeNP0rwi7nC
ImpHash	-

C:\Windows\Fonts\8514oemg.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.00 KB
MD5	405d416507fdbb5a87dad410986a6198
SHA1	0b9f48ffab2822136ba6722fd7c2515cfa761e41
SHA256	48455afc4c2f8d2cbedef30b912736dbb4396f2553c828345ec5e1e58e718d80
SSDeep	192:NCnuCNma0Ez2cB1dJIVSYnDl+D74KPgMB7RXqJHhAkEU4OgioDnH7cx13DW83WfX:NCnv0Ey1V1n0pPgM3+BAi4koDnYKGW/
ImpHash	-

C:\Windows\en-US\notepad.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.50 KB
MD5	36efd7a7dd3a4833cc901252fcd2b7f9
SHA1	eb7f82a7418ed911b920d5e0a3b7ea6d2049fb16
SHA256	9282ae980872fed992de31093f93c9c48c5ee5ee80b02da52a7fcf0407d048d9
SSDeep	192:4gO/j93rKrFXK0AsWbk20Bnl/QP2R4IMgX9n7DQ6t/3HLVetvyhgfPu:4gOxbSLAv0f/0s97DQU/xA4
ImpHash	-

C:\Windows\inf\adp94xx.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.76 KB
MD5	192c75aacf4d675e19ac6865295cfcf6
SHA1	1a2cf328fedb4da01698626d08661d6b5ca8f6a1
SHA256	6a91021090f5348ff80d6c608fb343a894b8b206b01e98b7c1143a4a2f1772b1
SSDeep	384:m/Dlvpyfoi4AqXyEd2r1cfWU5PuRD6ngbEX7MPrT4:m7AqCYg1OW+uBkgblzT4
ImpHash	-

C:\Windows\inf\adpahci.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.18 KB
MD5	758ab1d00b6d40359fcaa6d08555c57a
SHA1	448b2486ead7834a6a08708de8acd77674b279c2
SHA256	29bccb8107968704efa38febcdeb7498c64c6a0e257c53e1c8e88721dd49e5db
SSDeep	384:ZbhF5NrPZ24o7m4gLkOHADpdqL73YsSVpci66qMjuVwK+aJ1SViy7N/W:ZlDNrPQD75PeAddqNHxB+hdNW
ImpHash	-

C:\Windows\en-US\regedit.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.50 KB
MD5	6cfe7fca7765ca25df7daa524ce04452
SHA1	f105fd727851451a21eb4b881916eeb7a3d81a49
SHA256	84a2e3fc77c59181ccecfa937d7d4c42742c706859a74f6e102b55e644295aa5
SSDeep	768:tUsDjGR4rzui25Ou+V7iwBax/rg8z603783iSZtd4H4OaL8N+NKBjq2P83xHrvC/:tU2BT2IZaxl2yS/d4HPa9Kq2k3xHD8n3
ImpHash	-

C:\Windows\en-US\twain_32.dll.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.50 KB
MD5	36d4c35d2447b79b085f68e432926771
SHA1	e8313437ccad83091a52888544360d5fc63f97fe
SHA256	181bc8f3d097e0c37e2de7e4e82972eb3ae90583affdf87fb77bec83d836c510
SSDeep	96:kXVFHAwYWMnEVAF+A3NrNktk4k9tkGG7JR0NxKLEUUc0LwJdetgcujqlWyGpNzQw:kVtvKktvUSunmUc7d0g/qlWJ
ImpHash	-

C:\Windows\inf\adpu320.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.41 KB
MD5	e4c9f36ce46edd8f093dcd4a0cb2397b
SHA1	6d39b4707c5975ee4d0f70e53e5db39b56a60815
SHA256	2eb855f51f644bea6d39586d015d4488ecb6fef4d0169f0bdb4857cf3a0d1ce5
SSDeep	384:kZXwV6uGNmjEtjVyUKDZTq4q2VsJJL1IsbxOBtbv4x4YMfSwBakM3uKg:0WzwtjVycJJIIW1v4x49fUeZ
ImpHash	-

C:\Windows\en-US\winhlp32.exe.mui.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.00 KB
MD5	7ffcac4932e34993b8fc45f89a676704
SHA1	826461e23a73c81fa12e2638f632b04917e33027
SHA256	3f6e63c0aa8c187f6a06a6b88c4082c86e33747109f224fae43c24f282d520aa
SSDeep	48:Ds4S9aPyhKzU/vH5WapnIqryPu+wnLfOpcTkrVpEVIy2L5cjvKZ/LfqhsVRBsoOd:FhPUKzU/P7pIaSPoYcwrVpAIyQyjqZRS
ImpHash	-

C:\Windows\Fonts\8514sysg.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.12 KB
MD5	8f4a5e04cd08c5da49f913e78dcf99d0
SHA1	4b41c8f7d8b9a11b67d20d3ce8da82525dfa5579
SHA256	73c6c542a80a6ea29c7db5740dd5543557a8c8bb4cc1dbf93803812a98841f98
SSDeep	192:BEUBL8fngO8croGif0LwfYGuBPbdePRkTN8o51vTTaEyzQ6ghHppw:+UBAPgNNGDLw3uhbdeYr5hTW7zQ6gxw
ImpHash	-

C:\Windows\inf\amdsata.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.47 KB
MD5	68dc1c26555605f7e76e7e2934f91f71
SHA1	fbbce8f42d1baec228b18c39cf16bf5a68d9a189
SHA256	24a5969e42f1635980c42ae905c5f130fafa3f5268f1133b3978475f235e0223
SSDeep	384:B+KyXTAoL71qlI78jks6HMViwGu/2FdaxfDkfMx:QAQNnuVlj/2cbEMx
ImpHash	-

C:\Windows\Fonts\8514syst.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.06 KB
MD5	1d69508eb2ca5d06974b1ec65143b01c
SHA1	44dbcbcdeaae26cbe58761afeb295231cbdc9ca2
SHA256	d4f888242d03f59ca0b24df4768b50602188e379e0ca02766168cc198aa56c74
SSDeep	192:pj449SY0rc93oZ0zyO+SIwYmx3hKOOPmqyB4MHwTD+XwccPkYHLYJqH:jE+CA7rD1xRKObBbHoDWwdH
ImpHash	-

C:\Windows\Fonts\85775.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.52 KB
MD5	356aaf7b6d49fd786914201b802a8435
SHA1	e8dc19f15bc200f30e6ddaee01502b06ce7a7d72
SHA256	326b16e128f4a45a7940dcfa91cb9a64e1a5f3b0bc6cbc734ea1ebfdd3506df9
SSDeep	192:4pv2fPXEx62HtABNqHNk0phytn/nxCIoxHp8kJe1A8w/ilDSov2PS0NjPgfzeRer:JfPXEx6UtABNqtI1EfVJuA8wi3Qb2RX7
ImpHash	-

C:\Windows\inf\angel264.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.91 KB
MD5	2ab263538b7ce6f5c44d06615712207a
SHA1	477cdbc1a13e16d6076e956d801cbded1a3ac75a
SHA256	cef4373f8dbc9e1e9b5bcaa4ad49fb21cf7989d4ff1e8fcdba9c113e60f99921
SSDeep	384:KSoVzoo4WcZZB8kFMGSBjFc8RuDN1YA2G66moOmMgrVrZuQNWPeGrpz39ev9ne8R:Qb4WczB8kuGSG1h66moRrVrZpNUrpz34
ImpHash	-

C:\Windows\Fonts\85f1255.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.55 KB
MD5	1424526197ecea0f83f47d710feb59c7
SHA1	6688a9b4c953e3c20011e6bfdee8c1518dfa029e
SHA256	859e5c2d04b717390c6a73783ce743426b20874bf249c0d3347c112f290168b7
SSDeep	192:+RK61I/qGh8OZ+Y80wpx9Ci7BbaaJB5Ot9R5tJVw2UqfqItfrUy87ZBg8:+RwirYw7oiFBJu9R5rVwVkqoB87ZD
ImpHash	-

C:\Windows\inf\angelu64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.05 KB
MD5	2dad5531980c8547efc12d825d7ab832
SHA1	6f71c28269011d41d8bf71b9ee62299a7926dda8
SHA256	a482dc611c5d8a74e1e9bb572cec1293e71d1502dda29f3a66da070a9e2e6a74
SSDeep	384:xsprgQ2hw3dSASV1ne7TvbfQjHDrPmkOQ1Q5Iv72FhgaUF73c37UF:xsZghcdSAKne7Tvbfq/cQ12FhZUFwk
ImpHash	-

C:\Windows\Fonts\85f1257.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.22 KB
MD5	bf4a5c5b68270dae28250f8c371bed2e
SHA1	cdffc3d8258422fcd8662f00cb8efacb0bdff3ed
SHA256	1d06c88796ab978b9a082353ecb0cd701845d2270a376a802b1ea3a3d5b7a56d
SSDeep	192:58SLXo1nbN+3XRZiKw5sPoMTM/Hxt93EIGSypp2JcFKpoa:58H1nbGBZiFhJbEpUaKia
ImpHash	-

C:\Windows\inf\arcsas.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.05 KB
MD5	95aa39ca4f0a299db8d771ab51724e7c
SHA1	907167ddc25fd6fd6cfa088551aca1fbbe1ce70f
SHA256	736a94140b9a3352f3df174febd37b3d075320ab8dcdaf9d26ad5382380b815f
SSDeep	768:PC3k1MO/STebvEGAfkl1+QL12bbWP+rnbusI7rt2WSQTulnj3gmL3DXLDioMf4Vv:PC01MgGcvYkaQZ2nWPEnFWSk0VzX6+TN
ImpHash	-

C:\Windows\inf\atiriol6.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	38.30 KB
MD5	c3efa4d873e6d1322d6e6cce85176540
SHA1	db9663e8a05ea62376314655fe35ced5ab03327c
SHA256	74f89077b98b482ad805ee591b392591c69e63c7d5db99fda3f6155225ff8b60
SSDeep	768:77UZyQywxOJ5HifqnMfq1Cfl0HR7jhQ9tLH0+duiDvSEsnjnliGm:7sss0/q6R71QT0kDqEKjn1m
ImpHash	-

C:\Windows\inf\avc.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.50 KB
MD5	96984deac2415d2adf72a680969f01c6
SHA1	4e723516735c59e955bdfcb70ea60c4f33d59302
SHA256	97115b913c7330102bd63d4296138a6c74bd2f7534482dbdeb9d3081677f90b9
SSDeep	384:AFGSjsUvXzMi5Aw/ABDQZ9gF40D9F1UC8/:A0Ms8Xj5z/ABDm9SDfC//
ImpHash	-

C:\Windows\Fonts\85f874.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.50 KB
MD5	4f39b6a8c77042a4e4ff589083db6551
SHA1	fe1a958e6e6c79c5f02f7a4a87961c496bce9fbf
SHA256	d74b85c47fe347be7c321541c1a8ef52f842f5f22680bbf84fa99cb7415fced6
SSDeep	384:8EkV8I2xeEZE80L1fOcxY7lKY913xgZHbxAWwwLOC:8Hm5eEXsM7lKY9TgFlA/wLOC
ImpHash	-

C:\Windows\inf\averfx2hbh826d_noaverir_x64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.62 KB
MD5	e3dd43dfff8e1422a598cd724bce58b5
SHA1	c159b9c88b67445e618c9cc8cfcf0938073e1859
SHA256	b4a848c0b13d43ae6f735227557a89c8658b28f0beaaf1d759450d668a23ae1a
SSDeep	384:qf/o7LKn7ir3/cFYNFFR8e6vjiuHXXu91sN8Or:qSLKn7irUOF383Xu9cF
ImpHash	-

C:\Windows\Fonts\85s1255.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.48 KB
MD5	1c99061b4f79739e34c1dcb9cf27ae51
SHA1	53f7213a3eb13161bff2c1a5897c4c99876afd35
SHA256	439f24a7c241916f3d3c7cf2ffe88c1b9712fc145c3ade97488dec77c489f751
SSDeep	192:3e+AHp0rtmqkn6FIh+ng6vhA1F9u6pzBGe7Ci5zIVX4TOHuoWmqe35QzdmBPuo67:3enJ0rtXkgIhlEuF4qzBgUIV1H3WI5QP
ImpHash	-

C:\Windows\inf\averfx2hbtv_x64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.55 KB
MD5	c88804e3dab0d63d312d554fb941e152
SHA1	363f31168e8bedf320217f9fc36fbac128f51251
SHA256	78c5e664051baedcd794703befe791aed42e2550aafddbf30c6dbc70b8805ccd
SSDeep	768:EALauso7bqrsr2EJBZEetjybDFWue85h2ZTx:EAL1s6bhrFJBZvtGHFWuesQ3
ImpHash	-

C:\Windows\inf\averfx2swtv_x64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.82 KB
MD5	b8d5429a1d27e83236d3f944f60f1856
SHA1	303cac1d672a8451ba8aa16a61515b290a54f361
SHA256	c786c78f21e9c8987f80d9a57d683da4c9141831db55cf592b01f6d357440f79
SSDeep	384:hGynBEPv/OytqqoSPbuZIRm4sHfruutEPDX645vldklUj3A5EnKdQi:hHEPHOyt6SqZOK0F59GlUw54i
ImpHash	-

C:\Windows\inf\averhbh826_noaverir_x64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.69 KB
MD5	52fcc28cb9ac7645d4b2d336856ec23f
SHA1	54bc990f8e03411498ac170620e0e93f52d40f3a
SHA256	47e31d58bea213920a6ac7794a85d91796445b13b26419d483f6e987c0d8f003
SSDeep	768:xv3LEWXj0bdT+b1TJuFC/OoHZP7tOYxgqZ/NMMga:xvLEZlsVuFC7JtOg7NM5a
ImpHash	-

C:\Windows\Fonts\85s1257.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.75 KB
MD5	8e5243f62401291b5296db4f1d700b6d
SHA1	78fcd346351102d42acb67d1d7ed29ec55645fde
SHA256	9f732646d4f9365bc7145cf07a04ee70158e6e96519e067d05aded0483cda9a7
SSDeep	192:QGeY5vr+EBUBhz7L6tGds6FvdrYESiQ/uJ60+vw0eawm7gbxhXZ:Q/ECZ7Lj7FqLia0JZKW
ImpHash	-

C:\Windows\Fonts\85s874.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.50 KB
MD5	718ece5a6fcf4ac3b4598a00441f4a84
SHA1	d137d72d822053be037a4f79ffc4d4915508503e
SHA256	4c3a9bc337b592174ff178d4181a7c06605907f872c8b16f96ffe968b9fd4c63
SSDeep	192:Z4XI3/2yEge/wbilBtFvn2yCFHkDm8hQlloya4nHLmW3Spl7uqttdGK5SdFXBL0:Z4QeZIuvtQXKhqloN4nrmzPinK5d
ImpHash	-

C:\Windows\inf\battery.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.68 KB
MD5	75e065183ad88efe0bd8b954e2381262
SHA1	cf555bb76be896e1f08c0e82be6e1575fe53b5d2
SHA256	522a3f3ca34b21b39cccd3304c8d7fa6c748211fc7176d31257cea634c8520cc
SSDeep	384:fzGMvbEjoO7sJ267EsNsgcLLoVN88iwggw4bml8:fzGX1D6Is+TLLm8Nnsbm8
ImpHash	-

C:\Windows\Fonts\AGENCYB.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	59.73 KB
MD5	cb442938676c2c1854c3419158a81eb0
SHA1	7716cac19d85ab3c83eb856536b7ff19cdfcf5b7
SHA256	583a315f521d0a85289bd340921ae55d33f42e190259e876a15d34fb593f3bde
SSDeep	1536:Llut1wALOIOmnZ9rmqvBFEYu8Gp7YrNO9iwhtrIIfX:G1wALOIOst1XuRxYrNO9iA/
ImpHash	-

C:\Windows\Fonts\AGENCYR.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	58.04 KB
MD5	a1f6cd35651a58bfcf736c6c11160b27
SHA1	648511d9efe24cdf3c9e8cee09d1b97a8b50c104
SHA256	6ab8a786a2abfee3c343c1e30ac4efe798b7f2632add11d8a0da56b58c30ca84
SSDeep	1536:51oGyUxi8C4KBPemRmszmoQ2r7wtK+hpE/hqJxULGBlO:51QUx8vRmgu2r7wtvEQxULGB8
ImpHash	-

C:\Windows\Fonts\ahronbd.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	49.79 KB
MD5	c087cf6d6bc1602670e4fbd9e69336ca
SHA1	910b6807a8d3d0c14059a12e591b6078b5161dca
SHA256	f8bc77b211d3b2fecdb98419f9d4c7fc9d22cd81b1d936133f6fb01166522b92
SSDeep	768:ylbOVS0U5pSdYDIuJNy0CkrBirSa/qHDOFrUWB7heA0nQiAQlZO9Oxft0qchXq9M:yg9U5tkirsrh/MiUaiAQlZ5azhH
ImpHash	-

C:\Windows\inf\bda.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.38 KB
MD5	284c6b389ee930fbef0173c511653f81
SHA1	81bf00c52d453f668ec99bca88cd7633d277faf2
SHA256	50e21b2f6f6f432c35806dfcd15a082ff4cabacda5f69cafef9bc45b153027b7
SSDeep	192:TZGdJIwDxlPKfqsKm7iwzco36N0Y6h6QKm6264l3hXLF1H0efYV9BPraY8ZVnk6:knrCfqAiUcoTYGI264lxB1HGHjGP5
ImpHash	-

C:\Windows\inf\blbdrive.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.33 KB
MD5	11d203263886f63263daa9faa231d8ed
SHA1	805c31d0c5aeb6fc7a774221f9823a0ab6475e77
SHA256	09f57e5f3f0354822469d017f3e080a91698eebdcbbffcdd242ebc66c5336f93
SSDeep	192:6sEqc4zGIvLmviTDz/qecKXHP2Yk0RYQU:JJc4KIvL2g/PcKXdhYP
ImpHash	-

C:\Windows\Fonts\ALGER.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	74.01 KB
MD5	73141160a9c062fab2bc262f7e52a1eb
SHA1	f086017d00b0e806b7ca246ee9d2caf7f282e964
SHA256	bad4734dd7b65db6c980d056387cf92b2cf71c0e370d2371c9c6e95d6a04aa09
SSDeep	1536:5Y/AF2jC7oWy/I4yPVgWzwWYXy8UfX63c9NXLyIXlot0IuBXa+S0qW:5MjW7oWylMaWYX9C6s9Nbyootduha+SG
ImpHash	-

C:\Windows\Fonts\andlso.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	155.73 KB
MD5	9dc1b30630d960dfad09a39c709b6114
SHA1	5d5467964c22abeae1eeb8a3daf98937b1dce4f3
SHA256	207e00d88b3c691ee533e18e116ea6b22a5067e023c2f5b87cbf55ea8a69aa52
SSDeep	3072:l5UY+B6Tp/2iqCa1OHseWwn4GqaiYrkSgK82cJwwQ2ggwJBCl1e16yjvQuGf/gyH:X3+k2Ca1tbwn4LaiYQSgK82cJVQ2ggw2
ImpHash	-

C:\Windows\ehome\mcetuningoverrides.xml.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	286.75 KB
MD5	366713ecd6fc60fc5539eb8f600cb735
SHA1	4f5e237592f8a352775dd3b20d5fcfe8cabad317
SHA256	b1829852e36cc012a9faf23f0a0a26788148d954f8d140ae100246cb56ed51f6
SSDeep	6144:vHwj+SP/8HHvItdfV1b2gbiaC7bhDpLG41MYL+J2S5rvX:vHe+Y/ZbtR2gbiaif1n+JbvX
ImpHash	-

C:\Windows\inf\brmfcmf.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	93.99 KB
MD5	1cc7b125b1daf87477e4711d4d19b7a7
SHA1	cf9b64bb82f04f0eb8a84bd20f77ff8e31993c39
SHA256	ad88093d811e25f9c804302e102d767265284911389c901aeab435fbf078d9d1
SSDeep	1536:hywy9muNs18eLSp/LoAMPEOfqL68HSbGfzuK8JzrzUhIg3lPe0:hycuNs+eLSSPEGaHkGfdQz+f3lz
ImpHash	-

C:\Windows\Fonts\angsa.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	107.73 KB
MD5	1088560007ee0d6ed6a1520f53fb1654
SHA1	0b9400a0bf080b76262fcbc9f1dcda8f8c91be92
SHA256	e7413577c4902df06933a63aa7ae36fd69565821c8964166bb6e6aac0db123f2
SSDeep	1536:EAcoO68jMyCSEsE36z53+SIFNR8EbsO8TfEMPw9MI422n3OpkrR4fuZHaeO:lcoO68hEqzhIFLts3wM8l23OCNIn
ImpHash	-

C:\Windows\Fonts\angsab.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	104.23 KB
MD5	8acd86c45b6e6e1e54958815d923ea1e
SHA1	44c270774041ac7951fa5a0a9413a52417daa356
SHA256	c0a553333f57895926293b94e1b30b0bbf177a485255ecdcffccafb7258849ef
SSDeep	1536:l77oTtaZgzUcwxPlrkZ/aCQUJZeFsExIXvJqz2yRxee9XMbG5UiDdQc4iHae3Rz:l7YLklqM2ZtExgRqz2m9cq5UiDdQ3LGz
ImpHash	-

C:\Windows\Fonts\angsai.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	101.52 KB
MD5	40a07569e893e2465952677beef2eb4a
SHA1	afdcdb25946a327349c865217b127ce75327db11
SHA256	f8b14520ea56d2299f0a1fb9a3ce45219004ce2562ba69d8c5d47590df8f28ff
SSDeep	3072:GtJk/8QS9j4KbHFQLYigaMK/3GoXjheGYI0:WJk/8QajHxAOoTQh
ImpHash	-

C:\Windows\Fonts\angsau.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	107.71 KB
MD5	69cbb8586e296398beac0651a9f7b72c
SHA1	981a17a736ad559013df238c68e49fda2b446a4a
SHA256	88658e5bbbae2b578939dd8154825f2911f810b506824c120939f71127a8184b
SSDeep	1536:T7FSy0/Vx+dXl/iXrJMCe452fwfKYd1U1txKfdifXxEMPw9MI422n3Opk+bLu1HK:b0/kVmu4MfGd1U1txKV2XiM8l23OC+rB
ImpHash	-

C:\Windows\Fonts\angsaub.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	104.25 KB
MD5	0c7bd80c15afa40cd3c9d0728c3fd1b3
SHA1	3661d29a86bf1d865b2ed4ad6db84fbefba1daf3
SHA256	15609b1c79512e934b9f68346bfc77590c214c1cdb6512f7b63ee39f5d13e599
SSDeep	1536:w4+iC1tx7ViJgQNi4xDu5B8Y2pSXQXN/fOYK4lb0MoRHmwxee9XMbG5UiNCPS/Hb:EiqViJ/xi5yUQ7xJI9cq5UiNCPRU
ImpHash	-

C:\Windows\Fonts\angsaui.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	101.48 KB
MD5	b8799d9bbc3dabaa2f86fd17af3cc249
SHA1	795ade5caf52212aca71b71a0ca67d3a80018480
SHA256	6dc52fdc19f01a927abb3ead3855f3d42180161d9ac111308d1611cbf9e948ec
SSDeep	3072:Rd0QQ6LdHoKIj627FwwE0hPDcuraMK/3GoXjheGYqQ:Q2LChW2wwE0xAooTQv
ImpHash	-

C:\Windows\ehome\mcskin.wmz.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.59 KB
MD5	69ddc6f273391395f8cb485a428cc1d9
SHA1	8073ea6566e1e492aa91e70e705cc6dfbdd48bd3
SHA256	913844ce0e6b2b68fcc44199423bd48e6bf4d90835218d6b511983f56780939e
SSDeep	48:7Oo69l1LdeIAqhWRx2sjJEmH/+zDD/eLdKz:7O9lEqkREYWzX2de
ImpHash	-

C:\Windows\ehome\mcsrchPH.propdesc.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.44 KB
MD5	315f8e77e5ea5d37331cc7075b000926
SHA1	0ad5fa7449b66d18052a8b66d3eeadee47ed6279
SHA256	f5c3a7c5fd8746af7aa28efcefda6735bd3e563d4ebc2275cf928e7772a7b8ca
SSDeep	96:9+cRqjILVasxQ9ZOOCjIByeT81iI3MqV032uwT54YFXsvBSl:9SW48bOMIByO03Mo0fwtTGQl
ImpHash	-

C:\Windows\ehome\MediaCenterWebLauncher.exe.manifest.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.04 KB
MD5	65454d8e1c96d79b26a50a897dc1439b
SHA1	5b87b33701e62bf8c469219b425b0c9baf7a3634
SHA256	d67efa2692ae8f509668692dc71ee14322f0e3f9178c4d8659a6a51f1176c8ee
SSDeep	48:o24w2CWF1RFuKinLl+WqPdnQNVZgIK7/7ulItEd34U:onXFPsK0VsnQNVOn779GZ
ImpHash	-

C:\Windows\inf\brmfcsto.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.71 KB
MD5	cecec4940737efac7c33c2a496e1fd51
SHA1	8693a05cf06d51d06d1dfc540364e35fdc263daa
SHA256	de3a81c20041c03328041d6fca1eb8780c8c0fc91a3c80e8da76f13d312ac145
SSDeep	192:IfvKSO77ZPD8Y9PZWSPU010U+1J0uVEG+Ozk3efG/vrrmNf7SsL5R5uy:WiSGPZPM010U+D3Cr3efGXa7LL5RQy
ImpHash	-

C:\Windows\inf\brmfcumd.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.74 KB
MD5	355d6a5e90eacfdddebd3f7bd8510f74
SHA1	63f7b4ac408a51d69af896cdc75cabc1a0517cc2
SHA256	5290e5b788fd5941e2aedc66163311e478c29684e02ee79ac387f883b5a294f3
SSDeep	192:LvqsEXaLnmLyjMH7Sfh9VRI3hc1tkSMa72clrW5BktyJA3eAfjlVFcY7bGJPB:Li7XabawuSfHI3hc1tjMiztyczf/6cbM
ImpHash	-

C:\Windows\inf\brmfcwia.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	257.21 KB
MD5	2c24845a4335de8d0983aa7c2ab16f3b
SHA1	8c1ef0fa520b80ebf703d943e9f156a0d34cead3
SHA256	15e25741b05dc0bb3e24dd10924e6df5ebc08a204dba569af4075de917edc44d
SSDeep	3072:KpRdFz2fVCumP6EPHvQU+HK497yeFeJJDq9f29wOZTP8+YF:SRdN2VUP6OPQU+d97yeFuDq9+9wUTPq
ImpHash	-

C:\Windows\Fonts\angsauz.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	103.62 KB
MD5	2a54b9d4166bc4cffbe23afafc2fa3eb
SHA1	5a84c63ba033ad5d80d5a9e2602f894fb340c779
SHA256	f43b36335c890c0f3e6bda992e2f5df3fc5cbbed0f48b45f48ee5d7d43a20ca7
SSDeep	1536:/a5G2V62GC6DUmLGg4LXAjBQr8qZFelHRdPuGT8qi3CUGcw4Awg4447XHaery:y5G2VACejLwXAjrqkHRfIv3zFwLwbKf
ImpHash	-

C:\Windows\Fonts\angsaz.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	103.66 KB
MD5	47f28bfc4d2d497dacb551422d7b9fb3
SHA1	032eaa7c12956db8800250cc2265d09daa02636a
SHA256	5201438fb083742bb28723ddf932c85c17f996fb58a2a4601588b18f541917a2
SSDeep	3072:JooUyJ6CzxbFAtRmTXx2eCIv3zFwLwR3Q:JooUaxbFAvm78e/xdg
ImpHash	-

C:\Windows\ehome\segmcr.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	126.99 KB
MD5	5f26a63c098b7da4079d6e1972a2f57b
SHA1	f760e533f02c8b5de30c83bbb695d0dd02a402f2
SHA256	429bf7df512eafbecdefb8b517d07c8723b7fb27db6b076fcdfd7400fea2dad1
SSDeep	3072:8sHBhi8obMhnkVUGzB+OaL7jIOFlgX+qV3i6JBVA2E8H7O1j7yor:XrlhkBzB+OcfIOLgOqFV+r
ImpHash	-

C:\Windows\ehome\segmcsb.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	115.17 KB
MD5	8e18513cb9bbff2b5127da8c4760dd60
SHA1	a135dc7670e0599a9dc2bd2ab90dd609e29c9b55
SHA256	36c24ea0a25059b816418ab84e13a11522fc236a9fea971a09aa55e7b1b81837
SSDeep	3072:WUOx/fA1LvMURtISuXpzoHC/ECGVA2E8H7O1j7Vo5:WUOxXACiqzoHVH5
ImpHash	-

C:\Windows\Fonts\ANTQUABI.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	147.39 KB
MD5	e43f246bc7ab5b425f5d488826065ded
SHA1	c21033967215a509ba0536460dc7a0b79f524cc5
SHA256	18830b3fca6238de32696cf4983fc64901c52ac42548992f65bccad9f9e2bba9
SSDeep	3072:2P7JxYQdS1PwbDxXUz647TL52AkvB/Y1v+rl7nymXu1Nofr4:m7j01oWz68HcAkp++FnJXu1Nm4
ImpHash	-

C:\Windows\inf\brmfport.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.45 KB
MD5	40e3e41213d88f404265eccbe841baca
SHA1	2e2b8a14fad103b4c8e5a020829dbbdb0ea5de62
SHA256	a639c4414020e5f2cc80b64626ad53c765c48f51ca1f46b24161d1a1a3a794a2
SSDeep	768:RYyTGRhaUYVtBHDj3rVXmjCo9X0N752jeMkGCeksFxiSHk2:CyQIpzjj3RX85+DwkGbksFxLHk2
ImpHash	-

C:\Windows\Fonts\ANTQUAI.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	146.10 KB
MD5	3764e76d59dd6162f09bf8f9a0a24da8
SHA1	02f070af2385527353626c98d246a2a98d84c5ae
SHA256	69084873bb6e7d60d3f643deeb619436d645b99193173065694a680bffe90bbe
SSDeep	3072:EMkkeTynEjTiuO290BFzaBksyA8DOl+9CWUC4frg:ounE/G290BFzaBkhQCWg
ImpHash	-

C:\Windows\Fonts\aparaj.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	217.64 KB
MD5	1abd819b005909265297ccc67b1cb81c
SHA1	3c317338f0ab43f9bfe3e9aaa8c6ed10a013309e
SHA256	f25f5293b156dfba6ed2ef6cc862e8a33f0f46f6a9c0084e72ca9f4d211df053
SSDeep	6144:q/cawnF5Gyiw9Fg0oim/I4Ihd424xEFTLaD0r+:/5iwPgVimwD/4aFnK0C
ImpHash	-

C:\Windows\ehome\segoemcl.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	106.41 KB
MD5	9cf761026b43f6a765eb56bdeb198861
SHA1	69c6fdc96c70bb61f8bcdbdb95680e590205e41e
SHA256	eb09a15607d5109397ac035b2aed3a4210c29d74625ba48f32e0ac9be4e07fb9
SSDeep	3072:PO6TllrdI59Mlgc50Ykr663YswKrfaHJ6WHoX:tW5qycT/KMfIX
ImpHash	-

C:\Windows\ehome\SS2.dvr-ms.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	515.01 KB
MD5	671b9803bc846f889a76d7b2c8b709de
SHA1	337092ddd6dcd20983c3331097b1f4181a86b997
SHA256	99e82ce52a29a8016d5ac14dfe6e889e65257225c222546e72180ef4c99087f7
SSDeep	6144:8KEwpVnIIwVKaCRgwCDeKrrR5vdTR+NpUl6FPvOs9N:83wpVIhVMRgwieEXTkuYFOu
ImpHash	-

C:\Windows\inf\bthmtpenum.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.25 KB
MD5	7e87ff042811c07b46cdcab1a53665f7
SHA1	da5d717cccae6fd52396504d628dd6817148e806
SHA256	0a7cdc43f42779b7c19707b2ca1c047cecd51b30a4b5f4b84e6a78a722ffd8ec
SSDeep	192:RQtkW0fgX5xNwCOshLHMK1GduACF/vzalXH/nUz5AcRmzc39CyH4/2CQE:O6gBwOhLv1GdrCJrapH/nk9N7kT
ImpHash	-

C:\Windows\inf\bthpan.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.18 KB
MD5	e1075269e863d23160711a0b000579fb
SHA1	b2cd07f53d93e8850be168f35b91a57e060e4cf8
SHA256	64739fdf192a64351256da2e1d46f290c6bfe3df5b1456567c4075e54342a40b
SSDeep	192:De5Eqyv387hvoAbb0j/TCi7zOyx0tkmuyomjTIyDqcDbs2JaoV1rv2+BsF:De5lyP87xbK/JzOyx0+7YI6qcDbs4aoq
ImpHash	-

C:\Windows\ehome\SS51.dvr-ms.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	643.01 KB
MD5	79fb3c11c481deb198e8ec086d3fc56f
SHA1	b6ba8cba7560631399aa66eabe5f014f33bc93c9
SHA256	49bfb6f8baedbbea69e7736c984690e5f44d1116e1efbdcf4ffd636831283db4
SSDeep	12288:UUqQgzyphy3yVXCJ4rNWU2Ibwa4YrTSN50dQdlaJ:UN7O3yiCJwR2IbQ6TSLnO
ImpHash	-

C:\Windows\inf\bthprint.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.69 KB
MD5	d6a16900964a6e2c6cf07e669e520c59
SHA1	7aa7623452554d35aed09e5373d649e975e0b463
SHA256	464a4aeb37a79d41910733c14abf1a879472d45c7a5ef10c29b585ff0bf7effa
SSDeep	192:4OdO7oCxN2AGUwLaaX/jj/jO5zNGjp/+CAxv9SX9:4OdizxN2pa8/XLOvGjp/+CAh0N
ImpHash	-

C:\Windows\inf\bthspp.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.10 KB
MD5	ead9483d71a01d3deddadf52a567784e
SHA1	c5eb4cc31b5cef612fd09a7630d13108810af21f
SHA256	280694f7464503720a395c5e9bd72fdd57b05cad5a501b300442b70bf96f32a2
SSDeep	192:ZVknKkB6ab96dz4I3jIRAEpfKqICBhWReGLjDzYG7FrL:ZqKkB6ab9jiEdKFJ9rfF
ImpHash	-

C:\Windows\Fonts\aparajbi.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	223.60 KB
MD5	9987e3046df0e8bdd2d9ceeba87e2678
SHA1	2cfe5014ee583c3d9f78c65cd2a7b4fe3ae3f71c
SHA256	2e6eab2435d7fb2b6b8a6836e4389bb6a08c451b6b255a9b155bb63e5566fef9
SSDeep	3072:qQ/Xsm9mgHh0irfLzV4RHvqXVDXABluRwRR8LaIUKyG79lNuJogspDbwl897dq4I:qs8SB0aVRF0qLaIUTG0yP+D1z
ImpHash	-

C:\Windows\inf\cdrom.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.51 KB
MD5	d1c12263f388993421daf9d7db31692e
SHA1	4524d5ae7855dab684d27d1379e5eb9405ddee96
SHA256	71009ded536eea29bc57bc12086ea742603934023c74904e3aba64af77f656b1
SSDeep	192:ETNlJmllpp6LNbCjxfpvLzn7ozFqkwveoIPb0bmdPcGvEfYAzf0hdYxN/DUkYgF1:ONfiGp07oZjwveh8ScfYAzfKdwRDUk+8
ImpHash	-

C:\Windows\Fonts\app775.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.47 KB
MD5	da4e6faa8b7d7f55ca4b9ee576cc660c
SHA1	c63555977fdc8baa748c5a8e6d7e27ef2e2667d4
SHA256	d42bec8291a1e7bb0a9079347807de589c5ef4013e3d142af623f57060d9e71e
SSDeep	768:Pzphg/V0HDPdlQlVZbs4WyXufxmoK8PczRafbb2TUaq3Ow:LHuV0HDPdqvbzvXfoBcsP29q3z
ImpHash	-

C:\Windows\inf\circlass.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.54 KB
MD5	3bf9a46cc4b85844e3368df56890fa15
SHA1	4604bd9555041292ac7b18ca6fe61769e16cbf9d
SHA256	d5fafe6550c8c9800ca98c0aa288d9be64b723149f98c92fb8ad6e447594b9ce
SSDeep	384:tjRXzFtLllfs6NjFOWnAgc/8E3OWtRUv46bIWOgIqMliWpa:tpLnQp/8EbreXW8MliW8
ImpHash	-

C:\Windows\inf\compositebus.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.32 KB
MD5	e4150673a963cd4c24b569a5edb4e5f5
SHA1	d666bf1e6e439339a8cbe86ef53b2d412c8becbc
SHA256	a07e546644198a1dcda770ab64eb193f94fc617d84ea7fbaccee7bd95cc27be8
SSDeep	192:eCY5aAIGBJqLVWFyLwrTpOkGjRwMHoUbcKfgVHZb+tH:eCtKqkFxYNjvHX6VHd+tH
ImpHash	-

C:\Windows\inf\cpu.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	25.11 KB
MD5	aac4ed6e9b83344927d8aa45f461da47
SHA1	ab08cbd565f4cb963ca4e17bd7c6351f694eb3ec
SHA256	34901b74ff6c12f43e4887c4ee01cde51e4984e7e74b2976b9cef0ce1549a2fc
SSDeep	768:DMnBBefyIkx+J6kVgQkWZ2RxT7ThXTbzDHV:DMBEKIkMwFWZ2HrhHzrV
ImpHash	-

C:\Windows\Fonts\app850.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.31 KB
MD5	071cf13ebef08075f1eb15749698de29
SHA1	3bb0e2301729e9e1fda221eb93999217a188b739
SHA256	d213e2cf23d6905600cbaf87732e509c828034788dfa71c97d28032aaff840e1
SSDeep	768:QD0p+RDuKS8BdjKuEWAlHUbNbyBHuJ12Ow0PI4APKV+X5HDn0+:JEpuKS8BnAlHq2On5APi+po+
ImpHash	-

C:\Windows\Fonts\app852.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.30 KB
MD5	5611c10d5d7183c9371714bf4f868130
SHA1	4c97523700027809b7463036e6834b9873f185bf
SHA256	d943218f7dbe800bf81380db7fc962e36dc65805bce59621fdbc01ce19e78055
SSDeep	768:kWq1XMQLUj5s32HCa0puJNpDGBRRiA7MtlnwM7/6I/81eZ:ScQUsmHCa0puBDGtMvnwMLnQw
ImpHash	-

C:\Windows\Fonts\app857.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.31 KB
MD5	94be3cb6cfb46eef581bbdfef5560f7f
SHA1	18f9a7cd7627d25e7dcc235b1367bd0fbd2ead1f
SHA256	1300de77291a1b1334226714210072892bb69bda5251d35e8f545972858f4444
SSDeep	768:kck9MV4a5HwDGg/N2dXrrDaXU3rOA5jv6NKKjQukKSp:kkVV5Hwf/N2dXvDak3rJv6dLK
ImpHash	-

C:\Windows\inf\crcdisk.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.45 KB
MD5	51e27f16b4ca40e0d9bff6330b481a2a
SHA1	4765dd4f095d3d8160357612bd2f9d59a20325b2
SHA256	b6ecd2e15fd262ef470d3b8ac4085d7b3d6c956a18b4fd3795b5b6ee7ec45824
SSDeep	96:e0TQbMFJUMTC8K2ng4ZAkwEK9/CyKALSQ4MOFXOuxW0LaObiGv7w/VkO4uSbOHqK:H2MF7Tyyl8N9Ksv4MGOIW0RDk8va
ImpHash	-

C:\Windows\L2Schemas\LAN_profile_v1.xsd.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.69 KB
MD5	69ec328327c943599d9247afc57b378a
SHA1	25cde5dfdf22111cc616d726554eb144b004934e
SHA256	212815d5943455d259d47e00e237d38e4468015dfa5ee99b614979147203fcc8
SSDeep	48:eS7ZzRLOASxdVIZj5DEYnNjpoGc3I+Q+CqsrXmhxjW8LouhN:eS7VRLjM8Z9EXf3eqiXexlLouv
ImpHash	-

C:\Windows\Media\chimes.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	211.79 KB
MD5	f8651d430b8aa0f4a4f52d1def93fae0
SHA1	948f02d6a1bd04c6497b1c44eae74df9c739daa2
SHA256	178ee5cc07cee289e39b11ada3075df857bfd94f805a5f4da8351cbe355d9dfc
SSDeep	6144:8R76gDUM6Iz63Q6yoaXct1pOyR0FPfKu9ii8:JEUMEQzsjp70lci8
ImpHash	-

C:\Windows\L2Schemas\WLANAP_profile_v1.xsd.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.83 KB
MD5	94cf6c96c318fc3e5f477f69927edcf0
SHA1	3630a8313221de85726530eecd23f838a73ecc88
SHA256	d638bfc9f70e9a654691745caa32ed80b6d1a1a5b2d91fa9c58553083c180a66
SSDeep	192:ptNOIUlAaR6Gu6nI4zM5rYm9B79yiwiTsSObYWax/do3rNfo:5OIyj9455vQiVgYWu/++
ImpHash	-

C:\Windows\Media\chord.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	111.79 KB
MD5	9092da7cd89fedeaa9a995c9a3c69448
SHA1	1aafdad51b97614ce905d5fe66f0eb9e8acde9e7
SHA256	c1788ff8920dbccf1ae85bf9d7bf46057828f7d8835b527cbc27399ef8d5c08d
SSDeep	3072:Onzt3HLk2tZOBDSpigMcdaH2A0Qgivcfhkr2:OztXo6OMpigdc2ABvcqS
ImpHash	-

C:\Windows\L2Schemas\WLAN_policy_v1.xsd.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.73 KB
MD5	63839488301728d65ef3a60d6b5a6189
SHA1	78ede17e3f417d0ee6e48f201c599c3da2deac1f
SHA256	596ca9b6bd7a43c5dbc15d83c008d8088dc823887952d39b6ef1ee2c68f200a3
SSDeep	192:vS1nDP+ksrDpytY0EnpmsIU79rJC5fhAXb2f9:88rQMnRIU792fGe
ImpHash	-

C:\Windows\Fonts\app949.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	79.50 KB
MD5	53b19c5c7d3c6d78ca2ed8eec0233c7b
SHA1	aec40041afb92c16e4608ef2538cfad6e8aba963
SHA256	b91fecb2f6b99e07aec616a0aa0cff6d7e99ef46057b7212e61bea3e8bdec1da
SSDeep	1536:WgdfKDysni2vb5ji5PmUlKRIbiFQKa2IcJJdT04:WUCTLvb5cPm8KRdxIcZ04
ImpHash	-

C:\Windows\Media\flourish.mid.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.18 KB
MD5	f60d915908672f6ff73145754b96cbf4
SHA1	7483f7c0f51f187700b07261dc09378469840abd
SHA256	5303b9b8ec0f668763ac1af8baa3a91563d574de1823fa227d84627935de6d53
SSDeep	384:aRFrrW5Q8xUZ5N43djUOx3FpKLPt6Z6F3h7WmL3auisWzHjW:ar3ZrZ5cdjnpKP827WmL3aXzDW
ImpHash	-

C:\Windows\Media\ir_begin.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	115.79 KB
MD5	3dd4683c2f3fb065edfad1e3d4e88928
SHA1	ac60b12ce424b83e7a29ee6458d588c82a470633
SHA256	f35d3fdef2b5e3aacb6f1fc1ada281c8cecfded52d332476b677b1aafbcef223
SSDeep	3072:DsWNl3qJz8qyPpgTxZUFydhitQeuiXng0l2M/j1w714Awn:ZG8PgYFydhit2iXg0jZg1w
ImpHash	-

C:\Windows\inf\cxfalpal_ibv64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	31.14 KB
MD5	058007aab0f423e93ba18b4ec510a69d
SHA1	4f246d0338ce9073e7f7bf4fb09e709a10e390d5
SHA256	618ae7df042f47cd5c309b6a808c9ede35c6c34862f4e23f803b03d4312072ba
SSDeep	768:aKpiu95l+pPHYWoYKRmbJ8hBUEJJt56nIDmqvG4TuMq+4ZuLy6:aKIOj2/YfRmyB56nIDedX+4ZuLy6
ImpHash	-

C:\Windows\Fonts\app950.fon.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	68.86 KB
MD5	3ae46bbb862fde2b9c1f464570c275c8
SHA1	ce4ce1df54da7e22937644e396135b098044c205
SHA256	d1ea1419315045ffe6ff09731cecbb6da35d8e074a848d720e4c1bb375e6428e
SSDeep	1536:QrcHiYFnfOlNW9IuF0cx8a1Di7vMKBn4nb7Aib9f:QACGf8WPF0w4Mb/jb9f
ImpHash	-

C:\Windows\L2Schemas\WLAN_profile_v1.xsd.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.73 KB
MD5	4b73f48c558cdc5fff899405ce23cdf0
SHA1	518fe60ab03d1e5f66da0c71af4168e9c6603609
SHA256	baf753fc8ec1628b71a0988e418b0754b668de617a738c9b2a1d0f51e035a5df
SSDeep	384:mPFcuIJi5VeUsmvUg+4vAVjSlp5QNv/t1S8eMJb4WwzU3O:mPSubKmvUf4vCUPQ9/KPMN4WwA3O
ImpHash	-

C:\Windows\Media\ir_inter.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	175.04 KB
MD5	b57a005b8e6550361ad499d270dee3e7
SHA1	8465ee8122160c054feb0c46f84822fbb4d4afa2
SHA256	904a4e1a800b14372fe548646445597619608fe09a3b297eee2b69289af85994
SSDeep	3072:rQRKVi7cnxujRdmINBJ4j9o8v6sSFBar0Hb+dwWzYLfIaUdYaQun7T3AcGA/sSiA:rO0iIno9dmUI9rGFBOpdvUWK9GQca0
ImpHash	-

C:\Windows\L2Schemas\WWAN_profile_v1.xsd.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.56 KB
MD5	79833b95cb40f7b288287e9599e94f1c
SHA1	ff6c363fa16807cf8634983d500b7bec44baca02
SHA256	2be6af61825c04b2d4b3ed1d056b3d00815296a9d07d35a059d00bdc481e1cc7
SSDeep	96:7eCdcMeHW9DDNGoEhhoWbIE+zqFaqlFd0QxzRuzXiMLxpzygS2oQ7MX8t8Idkn+:7eyemDNGoSJz+AaqlD0QeVFEUR7dk+
ImpHash	-

C:\Windows\Media\onestop.mid.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.64 KB
MD5	5b9b742a2899e19cb74d5d5dd892d049
SHA1	35c395048aa66aaf1effc8097a1dd38c9bd29cce
SHA256	383fa45ffa5e426066db5e10283ead8c43bf8a620880f63fa8d126f37782d6e3
SSDeep	768:4aitP6WyEe00AGPoq9BWZWmFfM6c+JeW4omk717rMc3aRuUHsd8uElr/6i:4xEV/00AYrSTFk6cgelU3PaUQsWDlui
ImpHash	-

C:\Windows\inf\cxraptor_fm1236mk5_ibv64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.11 KB
MD5	31947b5c0b0e2e2252626f09b9cbe74a
SHA1	9ea12cf97f7d8fc4f4c85bddefa6760e02e83359
SHA256	04efca1676ca65a7b705f644ca5db4bb6463bdb802e42055372809dbe76cdb5f
SSDeep	768:zqfP+vkMzihsk6nxIWHUdWgWZVjIirOZDtlE8kb:GfWv+snxIgmWgWbjIllfkb
ImpHash	-

C:\Windows\Media\recycle.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	109.67 KB
MD5	78c8121cf3b35afa612071178115b20f
SHA1	883dc9936d3e0f1a069df433518382f1e641e4ad
SHA256	ffcbee67020981e253821327f0fcad75b712116780980aa665fb67948afc0e4f
SSDeep	3072:P6qB8KidOX7ZnA2tuYgXu0ANVep1EVCfsk:P6EyOXRJAoNV4ICfj
ImpHash	-

C:\Windows\Fonts\arabtype.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	609.51 KB
MD5	0e60db9d5911ce3f513db0fbc0b1d717
SHA1	6e011fef8c4848ac221ca7b7a2563b75dd58f23b
SHA256	fda32f5e6c338e32697378549b44f00b976c00445d83c500eea530bbc16e463b
SSDeep	12288:eKCE6ea0qdJsdbrTeD3NuvvMT6BpMPEjItpRZPn0ED1rQ3IINBP:eG6ea0qdJsd3Ta3cvET6BpMzTF7aBP
ImpHash	-

C:\Windows\inf\cxraptor_philipstuv1236d_ibv64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	31.07 KB
MD5	64614ef800885b42928a6e20ff97f295
SHA1	f4a4ab155ad36d8753436c6869797b51af8da40b
SHA256	5862897e314127d0c85766647dd695c4f1b86b5fdd89ca09fb88de2345141278
SSDeep	768:nlLpK/eUGRf4Tclfw+n9GxLCoptCkFu4uGuGNtYh6i4J:nlpKGUGULB+pWuGNS2
ImpHash	-

C:\Windows\Panther\cbs.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.59 KB
MD5	7c11a033b534712e216b99ab654130b0
SHA1	3725d114a85306282ca9897deb02958d8f72298f
SHA256	089a825dcf8f32df0ebb8c1796a85a43426f30452ec25d43276b8d2b22b3e23a
SSDeep	768:leYoaIbO0Gpx3fCjT3zUVQWnxMXLTE3+y0JtzVt3cdqnetiYWNR+T4Ly:7IqJB4wZxM7TY2tpt3cYejj3
ImpHash	-

C:\Windows\Panther\Contents0.dir.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	580 Bytes
MD5	247b3d1e516d1e4b8e4ac9b1610b3305
SHA1	9119f68af06fefc68a052f9cc742828828005099
SHA256	04b953594753699cf3b7ad011aa86f52946e7beecf05f67844e690c1ae72c85a
SSDeep	12:55t6K/M/SWA1WGR77KqQDj7GrSfbe/oWSvQUA/ED:h6K7HWY777rSfi/CtA/ED
ImpHash	-

C:\Windows\Panther\DDACLSys.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.02 KB
MD5	b271399dc39820ed9a79f8818f747d5b
SHA1	c6eaec5019560b92dd5aa3a1ea246f87aa5f5893
SHA256	096c14502c01445b86d0cb10acaaf87846ac75e92f71d973b54eaddeb7052a26
SSDeep	24:RbJWmWFLAE1zqNoBa34pOiq/O4g9ETIA2Ms5tq:RwmcL+CwqqsiY5tq
ImpHash	-

C:\Windows\Fonts\arial.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	754.59 KB
MD5	acb77965774e0a893754209be73c45e8
SHA1	44cc3facae3bd20c266cf50bdf49e6cefb2aa384
SHA256	f9423d8ae717bddd58cf0c597894de08e7c93248aee2b8586cf96a26425b7286
SSDeep	12288:Ok0iTcMRTOiuWDc/JKJkhnV+DMxZvsgN/ggaqT0tTRUecC+hNzGdRsX3KNADalQ2:FAkTVuWDuJKJIVmEvsWgg1TwMCrqqNA0
ImpHash	-

C:\Windows\inf\digitalmediadevice.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.86 KB
MD5	93a8219f4d2e299906cec976fac06797
SHA1	e183a013263002f053e59a246e0979afb7d9d047
SHA256	7f77a6f0a432004c299b8a4cf64df9894a73f9d0bf3eaf1eed7544f9917cad78
SSDeep	192:Sq4i5MtOWf19/2gXWDdZSbp4/jht5QYXHqgVfitgaQgN73HRXF:Sqp5k/RWUbm/itBVNxF
ImpHash	-

C:\Windows\inf\display.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.07 KB
MD5	b25ecc7c85d3a0d5cbcea9598bbdb650
SHA1	bbc2a1dd3d8ece9e8673e5fb9e7a97b70100df09
SHA256	a1c0db691c73e9d954925304f7643d7cadc50614e5a347254881e5e2fa8b2cff
SSDeep	192:aKHAy/3XMeNTpP3mrWKIFsqeqmZvazMt++0yOPHauP2923mXa1woEP/Rk7Ns:EyvvNJzF7lmtDQL+DJ/RKs
ImpHash	-

C:\Windows\Panther\diagerr.xml.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.10 KB
MD5	45e880d7134b931bb8e3907b57168987
SHA1	0e7d4ea3e36126597c40f9230efc9ace6f61b137
SHA256	f05f0cd5d417320ba67f61c9c46efee85b391b60d6d3844154035fd7000dbda8
SSDeep	192:O2JrWGZPP32a4FW4djxxiAXozRD6um79oOCWA:lJrVVP38W4dlVXYlm79fA
ImpHash	-

C:\Windows\inf\divacx64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.13 KB
MD5	77bfb7a609fa551f4239119036debbd2
SHA1	07a521386fcea60744847ad215faf2c78413ee14
SHA256	b140403c272ccb8f61c87bb5d50ec10b7ede9ea29dc8fe02c1169982d0ed1c47
SSDeep	768:Wh0Nx3KNpUkgP2DS0lyPMfrRpa1aa57Y94mkfbin8:oreAUPMf3aZ7Y9ifbt
ImpHash	-

C:\Windows\inf\dot4.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	197.20 KB
MD5	f1019703454e2b039a5de6d848c22635
SHA1	d833a8b5daa7501455c639fd1a208a59ae69650e
SHA256	1a0231cf6cdb9d0faba0db8479bb5693d6836a0a7e9b9b0f2eafab030f9f10eb
SSDeep	3072:kkpKc4HJ6QNGPpHCAAF87QjhdFmqv2DxVKEWScZILTtWl:knHRN8iNK7QNdF8dVK+mqM
ImpHash	-

C:\Windows\Media\Speech Misrecognition.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	70.04 KB
MD5	a6a89dbc6c282d37fc289d74b590ac50
SHA1	1c6d7e82a47e519f60e27c828e104229733361fe
SHA256	b93000d39d313c83e46204b40dbbf05127eda463b04d943e8c5c0ec27164d67a
SSDeep	1536:kep9WK9AuvctesX7FXBL2Q5AzXNvnEHOmX8UsOyWkXX:lWK9AuEteoLyQ5+d8aU8Wkn
ImpHash	-

C:\Windows\Panther\diagwrn.xml.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.20 KB
MD5	24d7d872e021c271b8697bbcab4ccc4b
SHA1	e34df3bc0b127b68fdd3455f4f2281de9ca3a72b
SHA256	8bc3b38e00ddaf2890736e62b15ff56f1b65c16e9dac4ac82086c9125fd50fe5
SSDeep	192:E4LD4kRVHZnZSpqDasot4+KFhhBOwT4ozYShXcf0N0l9GmhdcPdUaxI:Hfd5ZSPvy+KawTLzY2Mf0cYmr+HI
ImpHash	-

C:\Windows\Fonts\arialbi.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	548.95 KB
MD5	70a48b714a07968d744bc62094ee81ba
SHA1	93936ec24f6e400283dd36945642d454550930c4
SHA256	385055f041555bcb52d969bbee35dcc61a1c651c120df5c7e8245d5e3812a55e
SSDeep	12288:rWWVpRo2QH8TUNSN+8kDvRJKAh7+XZ2JFPT3YR4q:KTEBoajZ1R4q
ImpHash	-

C:\Windows\Media\Speech Off.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	184.54 KB
MD5	4c1da66670748e763f9a97bfd043063a
SHA1	84bc072fbe166bea719f75780a5b9aba435ae435
SHA256	c94abca091e75edd63759f0c56e4a2150877039856cef632870abb2ffa7564eb
SSDeep	3072:/tSrXKR+FoqkNes7QzxqGcTA9KMy/brzl+F+t6LHmSUoCFsZhZDNMkFw:/IrXU+FoqkosdyKMyXXkLH6oyYhhNMk2
ImpHash	-

C:\Windows\Panther\MainQueueOnline0.que.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	28.67 KB
MD5	ddf5ae59a7d602ae9d3e766492578094
SHA1	08ad72464d2b3d84b760536435731c381998a552
SHA256	aeac50b08ca25ec3f4414e5af2c67b0d2925cf32c1f1a593a0335f0c591a91eb
SSDeep	768:bZsLkyzhyRFoFZvWDemWjvR0mmHJMUtaOTc1v:bqLXzhdeP2v6HLtC1v
ImpHash	-

C:\Windows\inf\dot4prt.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.48 KB
MD5	8a4457fbb4bef9b528ef5204dc0e83db
SHA1	a97de1aa8df02a2a63730efcfc32bc2e2265f552
SHA256	8ead0076ab1c618d2872af4c50674cd3c3459e4319efb1a83133e39ba9821f81
SSDeep	768:qZCcYxKSL5j832N/lJSMx6A64OPguA6GklcgxP5lrcxOgIMj4XOuO:qZlYgujW2NbSZAGIuA9Y7xjc8gIMjsOH
ImpHash	-

C:\Windows\inf\eaphost.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.02 KB
MD5	6a2cb62ae9acfa039362ee01d9232135
SHA1	44d7827c41c7bd02952c7a3ef7ac16cfff98c4c3
SHA256	2559b6378af6f25d5cc31f86a65d3bf2f83d5d7db9e488d43970fceaa6008a79
SSDeep	192:pCXQ4yXNtXr1XCBCoxcKkQD9aB/9JKw7B+cW1:pIQJf7xCB4a0B7Vsp
ImpHash	-

C:\Windows\Fonts\ariali.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	543.07 KB
MD5	e776a5dcd13671a26cd10480f3cb6776
SHA1	d0fc33b9d08ff69b254a5305a2c2c102ca51c740
SHA256	11b16563fa29efbfe34a4055b0814f9a357d7326c3a057b05fbc4c4f686404ba
SSDeep	12288:NoJOc983mv2hf33eHpWenMILpWpCB4MiYWz0RXlQ57tZXQichOvYjIQBri7grJmC:AO083mv2h/3eHpWenMILYxZXQWGI1M4U
ImpHash	-

C:\Windows\Panther\MainQueueOnline1.que.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.40 KB
MD5	709e04fcf7faa3216149b61c18a430d5
SHA1	48c173c5e264b1393046ab459aeaeebde84c62ec
SHA256	d4f77f5ea8b7d9cf46a9185a15e7be19bf33b76bc07c512a93194488cc160121
SSDeep	768:qC7zdqY8vwHzG1wfQod2X2Cm+m7cNYrPgiWf4ZbyaElpBBA:qC7hlXK82X2WEv0f4piLA
ImpHash	-

C:\Windows\inf\ehstorcertdrv.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.03 KB
MD5	881c9de7c052a26b823a69770a826e29
SHA1	405d76c9a05d57a9935962d2dbd96fe2945db88b
SHA256	a0f30d9096a211e141ecf4eabc085cd9d4a2a8a70a8abda604fef0e9fddb980e
SSDeep	192:sQV6Ge7gAxWmKwOH/YeITQHNUonmgEazmIkQoE765sCEG9I/xh8wEmt1p:Nhpwm/Y78Uonmg7kQ0u/xh8WtL
ImpHash	-

C:\Windows\inf\ehstorpwddrv.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.23 KB
MD5	a0355c2672db3f80ed86e3183c3b1700
SHA1	df8ea3bdbb7b80fbf7555f0ee28377025a445bc8
SHA256	f67d64fd0af1b106ea50a8bb8c0fd9eb659a560a4c5ae6698c1c4fa57e8240e9
SSDeep	192:dZPgGB10BFPAeUQ26lGo7W7m/SxdJNioRHGE342lr1vSu4:DPgGB1WIYlBW7motmY4O1vv4
ImpHash	-

C:\Windows\inf\elxstor.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.88 KB
MD5	467f3cadbe75534aac05e623e2d4b156
SHA1	c767b6ed270ac19022f3af4a67e10059b766c853
SHA256	a548914b73fb19cf5ca528a16979fbcbba746faefb3170e4c6b3fe44e0b16c5d
SSDeep	768:8+lxDEOIV+lqtFADUaQKsftu4/dQNPqlSLKpbkx/TL0i/nK7zs:8+jEelaTftflQNPq8Kp2TwY6g
ImpHash	-

C:\Windows\Media\tada.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	279.04 KB
MD5	3e4b9fefdd2d6da5d39618c6f7bffdef
SHA1	d20a514082c205c7555a1cb12fc46abeda8c1a8a
SHA256	b1902cb8b7e7af7f00260bd1aed3bccca3889e64367680e741a9b82a787a1a51
SSDeep	6144:Y/7MREHx0tPtvqik+49p4djGkS40XXUnrOyD/g+Hp3zrlpHvzW:YDMWG1vbEv4kkSTw6yrjJjrHvzW
ImpHash	-

C:\Windows\Media\Windows Balloon.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	174.54 KB
MD5	62434319abc2a70d9288d9db94e27677
SHA1	29e195ea0bc407f966f4fc172046e13acde60a55
SHA256	99647f05f8f4be2014af3f8ba1c7b446c6ad564418c9f007cf802f2500a1cf5f
SSDeep	3072:dmIgBf8Mf+hRYZ88sivHO3o4BN/x2ybDP16eccEd14Sqqx3zC6x6LJKEd3G9d567:dml8MGwBHOo4BNZ2y39nEdeS7x3px6Ii
ImpHash	-

C:\Windows\Panther\setuperr.log.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.07 KB
MD5	6ce29627bf8a950af5c282bff6868d17
SHA1	c4b57dc9f36102bc4c77648457bef860cb506167
SHA256	a2330eafc5f361b8e452515c14b5ad79046ec55eee021f7630b84e5bdf7ae0e6
SSDeep	24:tF6iBjvu9vfiaorl/1NyWnkWYNu3Tcz0Hf0zLzMs0o0E3T:toiBWy3GWn9YkwA0zLzO34
ImpHash	-

C:\Windows\Panther\unattend.xml.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.26 KB
MD5	342bb2bde2107f061e2c9b2f88d66b42
SHA1	8bb0408502389014a52ce3de1208597532fd85bb
SHA256	c5b63eb11ac65ae671fc6fd35d6fbf1fa40d2213afabba603fd3c6eb52fb921c
SSDeep	192:UN5O8hNfIXQIeirghCO+ze8obA1EJEP7h/ilkE410nhq:Uf/GKjl+q8o8mJEi2YM
ImpHash	-

C:\Windows\inf\faxca003.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.38 KB
MD5	1ed473ede7c47ec41d060e9510a28cdb
SHA1	c4f54bb5c843191246d53e893a661a22aaeb9f3a
SHA256	66fc1b28cd665ae67e97b55acf94f0b6ce5eecbabe9fa28d0fd7e0981c146e27
SSDeep	192:sJAuUMamGn7zaOejtheHEpN/yMgG0r5dkiQZp0cYWpJXkwk8q2MgXcuUF5SYXB:GA6hK6yk0r5dk1Z9tpJX+8umAxXB
ImpHash	-

C:\Windows\inf\faxcn001.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.36 KB
MD5	cfe0e43bcd84385baa113ae65ac3cc09
SHA1	289f29a8e120d661ef10bd2fd67e667d4ed6e719
SHA256	4554949a0b0875c243cc78cc4517756bcc03a61d369538cfeab094f6ecd49103
SSDeep	96:Lko7RbQbDsARb/cqvvpblgkNN9hDG0EYfXCrRTMsswCH0BKEMHWKf9pQQrkL:Lk5vvRblgkNNe0KtTmsYW03QQYL
ImpHash	-

C:\Windows\Fonts\ARIALNI.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	175.66 KB
MD5	435a346a03ffbcbc7f2a3da34f7c488f
SHA1	6ab06c12e16bd9dfcf1d355553db6b5ce367790e
SHA256	b97e090caa8b29e61bf1a09eca350816b685e5289a59fdf7db87dc8cb25baf79
SSDeep	3072:50zv44QKtEsNSdl9bHPG3JMxcIFPvF/NRGuNaqgKiW+0IU1:5744sQdvG9oF/NMuNPgKvt
ImpHash	-

C:\Windows\inf\flpydisk.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.94 KB
MD5	5b94bf41fa5e81eaa679edccac4c9ad6
SHA1	6a8b1d79a6240e0d479bc0e47f07cf6ef43101da
SHA256	da8a2a93b6575beeb89b7fa9a7abf0e84b5d92ab2c445a914b6427530a010b94
SSDeep	192:nk8t8zloWV2F5l4BplT+/raOxF40PiHUkaVI2rZHDryB+ULktTIaaPFP:nteqW0FzWC/XP9kaVI2rZHDSrLkNIVPp
ImpHash	-

C:\Windows\inf\gameport.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.50 KB
MD5	d2afcd6926085018570a2c0a5b70830c
SHA1	ac6338d229c22d05169cd8efd3da7fe0b3e4f597
SHA256	e127da79b0167c9c4daba617906f296ad7019dc3d3ade56a1e8179dcb53b8532
SSDeep	192:R86s+vDN1EMSt85CCHczKUAY0BbG0gnGGeVa5GVyaVYSwvhvl/IjkRA:RogsMSOH0K5bGpiESVyJBIjX
ImpHash	-

C:\Windows\inf\hal.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.00 KB
MD5	ea0e9984c2c6bef9b3050609439f3237
SHA1	3cb8f5bcaecda7dca343bcba8a613c5e8302cd2a
SHA256	e232e8c944f85a21da9c85565d149f2f6e3bdb561c61daca80e96466384de5c0
SSDeep	96:XTwafN0jeT+bTOroSajrVWm/5PfRAeAGwG277U/YNlqdWlafU3yFam+edTEQwf8h:DvdwXSasmxHRAcN/Ynx2QCaPed+f89Pf
ImpHash	-

C:\Windows\Media\Windows Battery Low.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	175.79 KB
MD5	a8e9255f3342b1625417aebcc36554cf
SHA1	e51bb1c7e52b83f2d15cece1e3dd9cac714ec72d
SHA256	5655f2505c5d558db7b125c28c58fd25e63fd093abd1212982adb2769e27822c
SSDeep	3072:KHIHGK9Bh332uZjdSjm7+m5a1DdDlCl35VqxfQK1nQOAwJn06V5iM:KHIv9r3R+mqm5a1zCN504K1nAGiM
ImpHash	-

C:\Windows\Media\Windows Critical Stop.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	156.04 KB
MD5	b0425437c5d633fb68ce063f935dc069
SHA1	505cb0f4fdd5ab7077e897b6e7d0b11a4a3e7515
SHA256	c487c032ca66ebcab94caad69f6d00601f274162a540a15fba718379b899706b
SSDeep	3072:D/hw3S5bVOjQK3JdA85iVfd/MfC90sElwQZLsgPt3cVtsprSAuJEhB/Ql8:IS5kjzdAVd/MfC98lw4QMMVtW2ai8
ImpHash	-

C:\Windows\inf\hcw85c64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.21 KB
MD5	d0977b05bc7f14b4b0178623b30938db
SHA1	1380ad8cc157a3b1c6efe59784e0cc20864be48a
SHA256	63cafdf1febd6b4c0d5cef1b028b8982fdfad85d4cfc08e0ded3efa5149ae1ef
SSDeep	384:SRQHrbkB+MW1mSbcAUQ/EMcIxj9ezPg3xx1x/:3fkB+M4rbLHgP8T
ImpHash	-

C:\Windows\inf\hdaudbus.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.17 KB
MD5	29f6f42bc676daed5d51c1b00c157ca0
SHA1	694c9c9d4996d7ce59dd1ddf7cd1cddbd4733dbc
SHA256	b4a02bfa369991baa7d320edbff146b925d4e2c785d84f33232b070fd13934db
SSDeep	192:tLukaQ5zpqYytrfT+eO6YnL5gkQ+v9f3KempL6yhFba/05z9VmSFw9c:/aQBpqNtrfSeOPnNgA9f656yf+8FbmER
ImpHash	-

C:\Windows\inf\hdaudio.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	167.71 KB
MD5	34a40fe0c70cb477e204cd7e5492a66a
SHA1	e6aa5afbb71070a22fa14bf0dd2b925307c10811
SHA256	ac749f93d96345195fa52283d017117ca6bb286a1182883f0864af9d31319a1e
SSDeep	3072:7FOKajOnQIJvAFTCzZ2VnslQLJs9AwJslW+e6:8KaSfAFi5Os9HJslW+e6
ImpHash	-

C:\Windows\Media\Windows Ding.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	187.79 KB
MD5	d63359e17a658d1fe99e895ba2144716
SHA1	8d1cd2e438cfcbe10565c744799afd4171c3ba1d
SHA256	2ee5ba97d9e6b643dbf364b54d1fca7e6d202fe705cd0ba0fc3b3179c2ed6bd0
SSDeep	3072:nRlCpjxGYlEDgqO9QRyJ5o5ONh9LxggWECU10OUDbbRKneyaY0/mbeTnUw0M+7am:R8qYGDgq5Ki5ONhxxggh90OUrR67reTs
ImpHash	-

C:\Windows\inf\hdaudss.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	64.47 KB
MD5	735200f5301eb8a85745fb3e37bc9162
SHA1	9cf90886f78b8e66204493f1d8b35fa1b3314674
SHA256	2daa1e1f450bdd788da47a1566caf0374a5db7e349ac5991a2058c5a750b2458
SSDeep	1536:2g5kCEtT4+p0LuiZCafVrqPXIZVdwFYj72f6YYCWV7c+fkQoWA:2gLEtZ6CheVln2fZD67cwkH
ImpHash	-

C:\Windows\inf\hidbth.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.38 KB
MD5	9bdf48c881455b6558c0ba22a7d91087
SHA1	5f1d78e97f3a56ff9cc4ef757071a3bceace03ba
SHA256	123b948a744bdf9960b26fa9798b30ad39a85cc4e9294a9c55a624d7aecea42c
SSDeep	192:mYB2crbXli0lDk0Y6O6usWL5hu8YBxLgKR/tJT9CrOFxfTJ:rhHXlN5mmusownLgyoKJ
ImpHash	-

C:\Windows\inf\hiddigi.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.04 KB
MD5	d6f98dd24868e9f3e926c54c44a3ddbc
SHA1	cfb0db2db9f7dd30f3e21d5d7f8d97c2ddb971ff
SHA256	3f23ff598c5ff48b42d32f8af7a54c76be7dc2aa5cc758da930c102b3a85bc82
SSDeep	192:SmOqwXM7COzHqIeSJXBAdLCPiP641MJD/0ILJVoE3jmLNiwGX9CdMeVq:SmOq/7RHNILC6y4SJrrJx6LNiJkdMx
ImpHash	-

C:\Windows\inf\hidir.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	33.71 KB
MD5	d72a8137a72230ce05cc0b272a672190
SHA1	6cbaeb6b3dfa8f86b608ac086ec3898371916867
SHA256	58f17fd2916949a0f74e62236dd710469a31e02e60b333bce0c93986b3b28870
SSDeep	768:TI0w/cQMx4SWsOfxSkAtBMy8Iz8iswJp9AUyjj25q4LmEq+NTQ:TrZrx7Of4kwBMB5wPOHHyCuTQ
ImpHash	-

C:\Windows\Media\Windows Error.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	168.04 KB
MD5	ffc367ce472e261e313983234c7a77d7
SHA1	b3b0a8f918a2e1722f217d213a4c13d57fe271e7
SHA256	4b2e3046f804e54e4449f42997e471136e5ab631b5e79287a86b75e340576dc2
SSDeep	3072:e5RG/ztZQ75kdmv+Ba18QHWDfAcoUIxSBOmsHAGAgzp05KaQhOuSce/Nb4NOlX7e:AG5ZQ75kd9A18JoUQmsH7NlYDQDKb4Nf
ImpHash	-

C:\Windows\Media\Windows Exclamation.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	235.15 KB
MD5	46f2a50637a28dc29a91a86f32746ad3
SHA1	ecaab33272069bb4b332995e0d44f1841e6bfac5
SHA256	6bf1cec5fe4d981f05e452754333596132f0988414443a3ac24f2e1845c6833b
SSDeep	6144:Ilbbmn0VOSq5Fe7qaAfaDS0yq85ifPqH2w6JRPwgWW/i:ES7e7qlflG8YfP22w63I
ImpHash	-

C:\Windows\Media\Windows Hardware Fail.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	87.04 KB
MD5	2705ca3e2a2f69de4ab10477400e3f0a
SHA1	b0b58bb78a6b2328e4cf716c35796a64834e67e2
SHA256	784fdb3ed816efb8fb3d22bc68339bfea8b11b8fd48e9338e4b208980a55f7df
SSDeep	1536:pe21ArdiGnw8s1AXZYonRNrYNZlYgiD5zHJQnuMEhp0sXyz8TU+9j+T2ol:1Mnw8EAJYARNk2N9QuM3sPt9j/A
ImpHash	-

C:\Windows\inf\hpoa1nd.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	41.41 KB
MD5	d505de2a5c3d56bf452b791e1519e48c
SHA1	b44bd1592dc06eb57f07b022cb5339d4a7f0696b
SHA256	599ea47215dd652572bff8ed043e9eb956145125eb8b2f8ba85579c2a47e365a
SSDeep	768:UVcNWl+EjVNoHpai52T/UvbiKrYf7ce6uDbCCs6umU2jfsrcrWJhLJd4YjBLdlqP:zEbo4uvbisYDcbCrzumU2o5JblDqP
ImpHash	-

C:\Windows\Media\Windows Hardware Insert.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	98.92 KB
MD5	40d53cb0aab971dd53572ddddbb1c644
SHA1	3b7a1aea347cbd4f2ecf319e72282ea87627b391
SHA256	78b5b14e5d8d35053ea37a7a2144e7c2eef60d19fd5cb27cfaea51177e95a926
SSDeep	1536:C0HF+hVydcqqlkI1Djd80L+84SvOF0PiVNZ14SHOPtZVjZKWiWDV5SYFO3QL9Sn:Ba3q6FFdOSQrnaPF1KROMaLcn
ImpHash	-

C:\Windows\inf\hpoa1sd.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	20.63 KB
MD5	0470ceab412c739e5b8472ff1429985e
SHA1	67de3d93e1866ed0acc3361834ed7e2c634026a7
SHA256	1a532ee7bf6545c9512daa48d4789cd11e453885d99167bd3d9599daad9a52c8
SSDeep	384:ln5BVEJBEQEsM9CS0Nx2FK1zdWM0KDwPIKgTMVXyfXh++R/uCr+YgQHiwy5NHC:ln5B2BEQEsM9C7oF6zpT2IGVXyfXh+oH
ImpHash	-

C:\Windows\Media\Windows Logoff Sound.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	186.43 KB
MD5	1fa688b659b3a9ac4bc9af0e3cb4d5a1
SHA1	580ec9da96f128379b1438ce5cbe4fcaf8621992
SHA256	5fb1a4c338463fe9e9344d57d925b4afb280c1f1285d44b28949ce31fde03c04
SSDeep	3072:5uyeaOQalNANjzh03kErO8SOI09s4uXskvFgfuGVgXTdDXbohNCz7vz+/ajGBde6:5bROQarAFl0/Ox69CskOuGVOr3K4Ak9M
ImpHash	-

C:\Windows\inf\hpoa1so.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.10 KB
MD5	340bb4f47254c69a8c1379a5bb688799
SHA1	d18cd5343e3fb74083df5301820db7ae0432202b
SHA256	4ec6e26c8afbf2f3126f613fa8af276ef9da7c573374960afc9e55838906736c
SSDeep	768:t9z2aw7v0mqCl5/4VB2/RpLizf4ncjFqE/NXTTqL71+7W1nXu57XBJtp:t913k4VB2/bWj4ncxj/NX3UQ7GXy7xN
ImpHash	-

C:\Windows\Media\Windows Logon Sound.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	154.22 KB
MD5	4f112b658aa9fc6263c58e23b399f217
SHA1	28bc3e166b8e5b15ed34a1e1302a6eaa74736c7c
SHA256	42ab984c38c67ec5fa265bfaebc394ba9b960fab3a7d6f39a4c51accbae78900
SSDeep	3072:7FJ+pmt2XqM6zoWVusI5KRGOsg4XGdGcMt6fTxYoYATFoJfcZ8:7P+pmo6eSusIoRGRSFMU76lmyJfcZ8
ImpHash	-

C:\Windows\Media\Windows Menu Command.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.01 KB
MD5	9dc85d065edd0900f9553d73a0dd5999
SHA1	97c939e64715827b253bf352b6b414d6c20f087c
SHA256	366d7f190c97b49c500c270ef937760fa774fe933932e32ea4605684e826765e
SSDeep	768:8OempVUoRtdjB/Db1FrSQ9gBi4JOjQeYTxLB:8OhVbdBBUQWQ4J4QeYd1
ImpHash	-

C:\Windows\inf\hpoa1ss.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.81 KB
MD5	0c78c94c2642d1191d3ca02e39643af6
SHA1	109570133b1e876af5a11267641f7c1f90fcb080
SHA256	d7bc096c100a9df201183f1a2d8be9a826071db0780c0bea9c1c4f477aef8adc
SSDeep	768:vGx5iNFsTlE6LrZtHIdSxBc4G3jW9Rry29FwPM//:GANGlEOwE5G3slL7
ImpHash	-

C:\Windows\Media\Windows Minimize.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	127.04 KB
MD5	7ea2c7397129f884c8a7a011d464f979
SHA1	ec7f54078d752265dd19fb5164fdddef4d3c2583
SHA256	3ac68069f0094500777094fab15403d481b0e55b8df8ca53ff282101d6bd08df
SSDeep	3072:qwMklZugFL3l9IKigfKdQ3l25ZGmgjxXuwTL3ZoAjv:xpFHtKa4iPuwX3mAb
ImpHash	-

C:\Windows\Media\Windows Notify.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	222.54 KB
MD5	c248d9efdcbe69859b88be1a3b237002
SHA1	7b3f3fb33a98b671a4b707ab5de9f229a3fbbd74
SHA256	0333dc3be08f7c02fe00135d0d76e44b1ce84f44f6869bdcbf49bd3da621bc11
SSDeep	6144:A0GWomatnDla/vSz6b3Agv76pRKvQkxwIlhmfR:qWod3a/8c3AgvupM3JlYR
ImpHash	-

C:\Windows\Media\Windows Pop-up Blocked.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	84.04 KB
MD5	132524368a1bded634b38f3f83bf178c
SHA1	4aae33c2cbeb32b48a251704122550bbb3314e4d
SHA256	b2c1409cc42eca4c6dde1d2c4eafbb85f3b857fc0795c9af28b919edf4b5220d
SSDeep	1536:v9SOx8Enn4E7N+Zn46g9vN6S9JV6jr3HawGM/qn9bYE4xdNQu5lfUs2Q:v9LJ4EwJdgD9GrVq9jUNP5dUXQ
ImpHash	-

C:\Windows\PolicyDefinitions\ActiveXInstallService.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	5.11 KB
MD5	57dc6ff5b4c6fccef4d19c9fba4ba89c
SHA1	b863c7a5a6e9be311c2263f16cbf6d283bf9a41b
SHA256	ef1e89a4fd160f4ea23be7fd68991272e7634cea5b4721a9d5b4e3241739d23a
SSDeep	96:36gHtx91rhMlIfecJaVHt/qgAPoeU7vJ1qf/l0X0Eek7Z8UT77rwGM+9dMIn:36I/rhMmfeRogs+UnHS6UTDwL+jMI
ImpHash	-

C:\Windows\PolicyDefinitions\AttachmentManager.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.33 KB
MD5	9a7a0d78739fc8801943592666a3b025
SHA1	207614f3d096da6ce0027711be6e383eae2ea6ca
SHA256	e961077b8f483a50993a9602eff5e8957765badfdfad866188431c903c5bc52f
SSDeep	96:aUaJtb8Ucfzn7RorYTwAIv/BYtI6FkUi5oHAqlg8nBcvj+dEv1W/ysIG6+k/OB0P:aBtb8bniHCXFU7Ug2+A/nJxk2QoC
ImpHash	-

C:\Windows\PolicyDefinitions\AutoPlay.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.81 KB
MD5	a5766fc568c6cf9487754b9ac80d9e0a
SHA1	dd2b2a59b5fb864a6ae429567dbc8a2728908f14
SHA256	a2b0f521b5367856751273c540b7f174c5b9fb7a9957be583a6c95a5fe7c4cf1
SSDeep	48:L/xf2CHY3EoqlaFuF8YjEKpU4/DZn6ll3iv7LJnKwja9nhc/42PnM7k/hvmcRv3+:F2CsEFTmYjEyUQDAlly5pa9hufU+/ztA
ImpHash	-

C:\Windows\inf\hpsamd.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.51 KB
MD5	9deaff5a3fca0a81bc76dd57efe82d2b
SHA1	44923730608b830b4dabe3e60d2c1e06ceaf8e79
SHA256	dac2ed1ca8f0f56091785282bd704d51602943aff5198c393742bc2203671cfd
SSDeep	768:cbA4z/ED1wnwZZdeCKRwLxZ/EdxiA1jS8dj7pN5V:cV8wuZQtwdZ/HA1pN7pNT
ImpHash	-

C:\Windows\inf\iastorv.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.70 KB
MD5	5a1c53d83144d79172d86564224fdb73
SHA1	557932cd743667193877088666f3e7786d609e43
SHA256	8477620680154538dd7724ce7f945b8dd9d6028c0cf038656fc11820f3942a05
SSDeep	384:KcqAhyYdghAKbRE2iwGZVsF3z5CM+36vR3+ZgMlkMzGYncfCs:1yYuAg+a2VsJz8M+38R3+Z9mMb2r
ImpHash	-

C:\Windows\Media\Windows Recycle.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	93.67 KB
MD5	75bab9d113f7c759cb70ccd3aa61d130
SHA1	5216593277974f4846000a75ed923275236532fd
SHA256	6726657321df544cb0d42963b49fc5ef5ee09af0e3ddd6b3356b0a8153edf549
SSDeep	1536:5kl0AOJ5E8g/TCQUyD+Vldryx/1tfn7xDfmxcyUAgr0Mubkx4tfbEne1tRcXaQg8:4OgTDHSVlJyB7xKZUATbnwgt69v
ImpHash	-

C:\Windows\Media\Windows Restore.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	151.79 KB
MD5	f04dd6efacf83b27d5408ea76f4c5810
SHA1	4675793ac63d7fac6a26750326bfd4fa577dac7f
SHA256	3de44f92ed32cfcc9ff2bc265557023624d30c93e11d602d50232f1c41874d21
SSDeep	3072:0p5StQyeGsNVzm/4MX5yGYmjLLX8daFaCuh4K0SIStJLb4miw8FalrCL:9t1eLMJy7mjLLCaMC5+HX0alrCL
ImpHash	-

C:\Windows\inf\igdlh.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	68.58 KB
MD5	16eb8b98d20ed3119a5a4127dbea0393
SHA1	5b517c790c9cc4c70298305c6982c3406bc1173d
SHA256	710bfbea05c7b99fde097ccbac9dc45f407dda50d79fe519e6cfc90f636fbe4d
SSDeep	1536:3C3qEmBVt9FKpaaP7C9hM+O2DlIAduKvLv65uSll8:y3qH/cnTTmlIAFy5uSH8
ImpHash	-

C:\Windows\inf\iirsp.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.21 KB
MD5	52a2eb4fd985bc2d2274817b24987b40
SHA1	233301a1977b2543d51e22be2a9adb95c9dc5126
SHA256	9a5c9be2f9f39e2a7713e0247e632df7a84aec76ae4f79fdd04d3acd633f34f8
SSDeep	192:R05JY0kcPBBwkY8UEzXaIIYJlp9ihYELFm035cSM2gv0gRbatrLVbQI:sm6P7UoqkvYLFmk5XbKQLeI
ImpHash	-

C:\Windows\inf\iirsp2.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.11 KB
MD5	6764d12333ba2b694d6858387eedb214
SHA1	5b7bce1c116fc874c648887ba237240190505b3f
SHA256	a521a8b6eb647fb78ad68d6edc2eeb4689e9bcc14ed3a9ed53b858bfc0c2df2d
SSDeep	192:rlgJvBC0GT/Mt7IS2vfK/44+Ef8bQtfttnyp6Zy+XHVr5fV8X1WZD8Oh:2xBCZcISyfKBjt/FZ71z8FWZ3h
ImpHash	-

C:\Windows\inf\image.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.71 KB
MD5	e16844ad8b088a6ff4b5d1d2ab1d1139
SHA1	167bd455936a83ec78751c5a5352c47b220c2efb
SHA256	fe3b20f79a6a7aa384c3672b2328198a0b9fd141ac2bf62df10c55f742960b06
SSDeep	384:BIIEhUotrPcrPHT+Y8E/9K3jlmpdB57enQ4if8rvawYQLnzvw8nFmGrpXc+2:mVPCvqY+Tli37QtTg2XvlXcR
ImpHash	-

C:\Windows\Media\Windows Ringin.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	194.79 KB
MD5	628a9b45195d51f3c19371e468c2451f
SHA1	e8edd4c09751fe59ece336a622fbc0ae7dfcc14b
SHA256	52dcf0a0c8eb25df39c6f330e521b66203ebb2a8b7e6ca0685a19f3228accc64
SSDeep	3072:JtWUWIAebZTNUEaoyq4FHtM/rNEYoLw+VMY62EHFd+tGOL2Az0fBhwYtNl/wUHma:LWBreV+EaB6cL/Vl62EDjy6KYt0zoh
ImpHash	-

C:\Windows\Media\Windows Ringout.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.05 KB
MD5	f52434e81b0c76aa57699afe53f1e310
SHA1	6771c8d0c7b498da775a39f3dd705b06c001861f
SHA256	f5f9b6c32a722bfe99f434e878a6bb1bf990a4cbf6cf3fcba7dc79ca50815af7
SSDeep	384:B3wmDAFFYvBlE/DM1x0WI1WjZJ3poOgxUUaZfNPiEB+fOEaOH0RoAnBars6x:FLI+BG/DU0W3jZixAZlqEBNpax
ImpHash	-

C:\Windows\Media\Windows Startup.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.98 KB
MD5	f547679b5a462e6907117114be72d839
SHA1	21e493ea5a8363e8630d337829764b5f0f8f5c0f
SHA256	562ea76a7418609f03fd41d653d72e915cee0a5c6d09fbc56c0b1fed7c224158
SSDeep	768:aHAHpfiznKF0qlgtgBW69xewJ6sR7fodkMPdpBsykY2gkLjgQ:LBkITGn69UW6e7idp+5YU3P
ImpHash	-

C:\Windows\Media\Windows User Account Control.wav.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	80.04 KB
MD5	abf94188a001c85e48e3a43734431dbb
SHA1	8b61a9dece86f3c6b36a9fef742fa2b8d5c49b6c
SHA256	b236ba7c9bb7620cbdc22a296e03293874c3536acc0c31703655cd97b18959c9
SSDeep	1536:Qwr80uc0CnaRSkgdL3dQwTL/ARiMRo73xak+bWYVJIyXVDt:Br80uc0CnaRSR3RmiaKYLbWYVJ/b
ImpHash	-

C:\Windows\PolicyDefinitions\Bits.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	48.53 KB
MD5	3a361c6037b1ff05d53fdd84a9055eae
SHA1	f4fe2f9466e452b81e9459bcc7ae61f49cb22790
SHA256	f5786234a0e2369607aefafd3fac79d7e58cecf1d710eb37c2a595a4ca5bbb59
SSDeep	1536:INNytCcImHsQISf8vvZDz8+Bd633nIQkH+O1QGW:AyYcIMsQt2Bz8j33tkeO1XW
ImpHash	-

C:\Windows\PolicyDefinitions\CEIPEnable.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.21 KB
MD5	d7d448ce81dd74ab144fd017bf1c7a85
SHA1	82e8ca1912e9ca43e841da9f83622b320cf5f4c5
SHA256	469e379c1c1bc81fef726a2ad9c7c6dc2831258e8dfdc1f6f7df0dda282416c5
SSDeep	48:9LmvdHYga5UTdXQM5kVPC6uTbckxkYONIkzuBWU5BNAyMOl:9CVYgaQJ5kVPylx7ON9kW0hMo
ImpHash	-

C:\Windows\PolicyDefinitions\CipherSuiteOrder.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.83 KB
MD5	fded94c0ad9c3ab531089865f30213b6
SHA1	1dc5f2a62b5f649f9b1fbbbe9d796119e98bc1fc
SHA256	5a03ea1077dc220c2848b8c0cdb614c6bfd8edad1c0138e0dc4330168254d2dd
SSDeep	24:2egEgRtcORXXAOQilFU1K2V8+aE8taQLquftBuNw9jNilWmIatsRCf6WN7g8Z/8w:2egEEcglFcVsnHw2iEbaJit8x8OVd
ImpHash	-

C:\Windows\inf\input.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	134.97 KB
MD5	e908baf041ae7da76a3621fa4c50b059
SHA1	9b743b5329579b8cf6e309dacc6066d977c52e9c
SHA256	97aeddf92619ba47fbc7076f91a18613f55b8485030f92bedf913c51f40fd9e6
SSDeep	1536:2AUv3ylJqYNZVPWLADFJ2bEHJPXNSgzUERl3GgSPYR46+nVF9HWxpnCQAnDr:21qlJBFsoxdN/IcWgO846UFNc6r
ImpHash	-

C:\Windows\PolicyDefinitions\COM.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.80 KB
MD5	129348aae099aaf45900ca75b8c8f298
SHA1	94df02a168a242602058cfba8e16f06a112a694f
SHA256	e8ec0cc54c5799906416c7487e70d557fa7fb8e0f8a41d36a63dbd79e5296fe3
SSDeep	48:dEiUDeX+qSsQaQlnE0rSqj+ojN9Rd8iKnnoyzs2VCKha14:dqc+e0OqC+9naZdI14
ImpHash	-

C:\Windows\ehome\WTVGOTHIC-RB.ttc.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.87 MB
MD5	6da6e392cb5457770e9c1d0f754fd487
SHA1	8bbad3dca9af58bb4f0d656757af7ca16bf4ad1a
SHA256	c5d44c36bc3f09f7982c7af264d2210fc9730b93cdcff97579f2c062151ff76c
SSDeep	196608:UUH9fKA/OUrpZuZAxDTvAhk9V96ptUAFI+v:UUhjHxDTvAg6ptg+v
ImpHash	-

C:\Windows\PolicyDefinitions\Conf.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	14.14 KB
MD5	1fd12df39b8a8c92c5d801d5de1e8f8a
SHA1	570afcca01b0197351f79abee5e02b541decd411
SHA256	d438559480b26683ae77c23b0f7a77dc2ebe97be94d4d4b79c8af254088e2414
SSDeep	384:tvWvf0q1nCUaZBGrJMpXMcx78LC6et5sD:tvW1HaUUMIILC6etuD
ImpHash	-

C:\Windows\inf\ipmidrv.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.93 KB
MD5	e1ae65e2abaf02e5e777a42c11bf143f
SHA1	b80b3216f376f956e2632c3d5df9eac7f13fb387
SHA256	8bdac018b239475c3ddfe1df8764bfb55e9a155e88499c1da86d90d6a2746ba0
SSDeep	192:mlvscniMOA9PEjvl/RtJmHvKKO4Jj0gF7wZ/mvip5boXgXCAA2:mRscniMO9vN4HW4Jj0sw53AgC72
ImpHash	-

C:\Windows\PolicyDefinitions\ControlPanelDisplay.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.36 KB
MD5	5665bf696cff22802499df677a182f88
SHA1	766609b5773ad31868cf49d16d7ee7082f6e8f51
SHA256	70f562a90701f5bd9c31b362edc5f9ba7d9448356cd1b2ca059db79d3d7b84b9
SSDeep	192:8Er3Q6RnS3ETQ9gkNFW0FDr9eQ/AgLqyE18RzQpt8zLvh3pqK2/zk:JNnsEMNFlOg2aRnvLqxA
ImpHash	-

C:\Windows\PolicyDefinitions\CredentialProviders.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.39 KB
MD5	2d22a40a03121d7bf653144412b88877
SHA1	e113d9f4a5df7299072b8e8bd56c4e149d8fc9d4
SHA256	0fdb26bb6c66284b69a42e29af03e0cbd81b5df77354a448f57edab2683a5e36
SSDeep	48:fdTXoyJb9WEhk9KTXx+DGb48ejJgGmQYhMqRQ40BLPpL:VT1Jb9+96B+Dg48ej6ZQY/ABLN
ImpHash	-

C:\Windows\PolicyDefinitions\CredSsp.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.03 KB
MD5	a175a9ac3a2a81c0dd7ffb4b5cc14b2a
SHA1	6e6bcc900195617ae0d7a2b860c8479dcaeb1404
SHA256	981ec8540966fcb69297f9455e85e8167a68a9f5545c9161bed9317ac1758c85
SSDeep	192:IlQEaT3LjfrmV4XsR3TMnLjMwYP68Aexq6B4hoxSKUfmPkEW3gyOSVZHawjOl:VHraYNl8bq6BxSOPyBJk
ImpHash	-

C:\Windows\inf\iscsi.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.39 KB
MD5	53f32b524c9f7b97af02764b81c2383d
SHA1	7c80b29f54e0ec32cca7beb57802843ad24d6799
SHA256	b21fe878d31236a38b29e14f1adeedb068578eb18c210cf4d903c0448a504b67
SSDeep	192:WKO6MBKMBn/Y7cCiF9tN4NWRwED20kUNmnGrwzcCaN6PiWYSvrV42a4P4Yh97Nr:W36MhB//FD+NW6oKn4wgPCD7pr7d
ImpHash	-

C:\Windows\PolicyDefinitions\CtrlAltDel.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.59 KB
MD5	f070c7ebdc3c7ca87a9ee8dbc01e5a80
SHA1	f09cbd31bd810cb4ded568a1fa78e4f7ebbe6464
SHA256	c402a750b4c279df129aad46b1ac367e87bf5b4771192b4c5b462a9da5cdcd2f
SSDeep	48:z5YQKGorjh7ETc98+AkWXeYDQxCvGx/ob62HHfGQJA+ry63Pe:zOQI7ETUTAkdYO76b62Hv9y63G
ImpHash	-

C:\Windows\PolicyDefinitions\Desktop.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.76 KB
MD5	f35af8db06828dd5d512de2ed40b1ff3
SHA1	6ec69748f9c6ecd23192139127a6ae3a1ebb9880
SHA256	20458dc00e322f20f1112bccc7d97ca6316bcf1754eae3ad87f484d2dc96f645
SSDeep	384:TDQNDhVW0hGOLDlfAfVDTsll6443o1MdjbOSV:TDQOiLDitDTul6JpbOSV
ImpHash	-

C:\Windows\PolicyDefinitions\DeviceRedirection.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.83 KB
MD5	2308b8195faec1aef298fbdf59354014
SHA1	47accb7267d1c5e1a669434cad4fffbd935f6d9f
SHA256	0ca3874b07127ffd44c01a5b5c9263a78b7e994c7592a45872805d7c0dd7a5f5
SSDeep	48:h3W+A7R3ah6gSk1BoV80k14hx/MKIZ/MvvV8NqJeXiXAIF9cObo8nbLu93Ck8ed/:E/7R3aoUP28j4zMi3BU0o8nbLY3CkXll
ImpHash	-

C:\Windows\PolicyDefinitions\DFS.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.57 KB
MD5	06eb954b1cb1d80b10c87a9ff50d0ebf
SHA1	8517c17ae2c778d2f633c2602989b59e05769896
SHA256	718328955a98cbce57e7b0799cc59341933a69848ccde7eea77ceb100b8e94c8
SSDeep	48:TlKjrW3Uo0LtC3xRu3wcZlvVN4t/GD3+J8T4O:TlKjoF084Dlvrs83+J8p
ImpHash	-

C:\Windows\PolicyDefinitions\DigitalLocker.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.45 KB
MD5	0ae014cbfcfc2101df4b6bc8a6afdbc0
SHA1	e459c7984b1a2217add8294423bf6fadf3433c49
SHA256	4d86613f5a900909aebaa1ee06e5d4497a5f7fbe80aabd4deecc37d7a768b24c
SSDeep	48:AQiOgoBliBFa67/MdNbAuyglB8e8VMWnUQ9QjvDcsUH3eNMn3t3ClpaHhN:AQqYa7/59wB8e8eQ9yDcp3eKn3t3HN
ImpHash	-

C:\Windows\PolicyDefinitions\DiskNVCache.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.19 KB
MD5	8d2bd73539675bd630edb1be24175e1c
SHA1	2d6f64faa1b64f380e9a621540eefb467017b344
SHA256	90813be11b24cbc59390fea0dabfb1bb80a3ad59fef89243b359f532d0f09f5a
SSDeep	48:MLxacjwT+qgLOMVmrA9e5gSUM33f+4GBCqKCIz07p566kCXzD4nINCySE6eVW:OHLOMVTh033f+rKCIzYn6NGsITSE6/
ImpHash	-

C:\Windows\inf\ks.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	126.14 KB
MD5	480285811e2a5fb0b768e7f6862f345e
SHA1	6de7f40dbf63399cbd520d33a14d9987a4e6bff8
SHA256	0f403c7381a316fd8e3e26cab0cbc00901fe12d5ffc13ea82c88a860eb0bf28b
SSDeep	3072:zI3PcvBJlDWAlDR6P0Zikqr9xxFh79PEYqxsMUX:U3U53lDRY0okqr6qMUX
ImpHash	-

C:\Windows\PolicyDefinitions\DistributedLinkTracking.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.47 KB
MD5	46b2a1a9cfcb70a9317d288aae2e1502
SHA1	4898c0eb6e200a344ffc494de680951474df0dbc
SHA256	65d9276c00ebea61d50c2f2e2e2f278c06dca012917a6dd9edd237c9b212c289
SSDeep	24:n80nTk47BJBLUWVfw2z+bmOB3jAfzftzohAjhEnG3dGFVlaqZGXw+9Hx5JLKzFgs:8kkW7K0fwYqhB3jCftMhAjhEGtGFDaqj
ImpHash	-

C:\Windows\PolicyDefinitions\DWM.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.98 KB
MD5	07731f08660824a3f752f3f6dd7daa6a
SHA1	a2d61908685a89efd5562177c457b784a71d2b74
SHA256	6eecebffbb89ff08fec8ede740615bc8216a987925b6f307430163c2ccf53754
SSDeep	192:t+UAL+8PBVzjgotR5BrebzdqWztYN2nJGW23MFgk3i:EUO+CHZL5gRztDJGWRz3i
ImpHash	-

C:\Windows\PolicyDefinitions\EncryptFilesonMove.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.44 KB
MD5	7176700ac6e8b60ad3a0b77792781b98
SHA1	9d93212861b4cd428f3a533593edf1d9d818ebc8
SHA256	8f3098129125fcb9aff9946c61416b5b73251115c459e68f42f7691d5e026ada
SSDeep	24:GRjdgp/hso9lJ2LxyFwheMXiNTm+i3Jn2zdCHlUaygqcrAabTtO6Dvys6Cl+tSB:cghhLHJ5wgMXiN6B3fl4abTtF6sWte
ImpHash	-

C:\Windows\inf\lltdio.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.19 KB
MD5	915ded2df16024ddbf68daf605ae7970
SHA1	21dc514a06308c53f21947a07dc0955d4d05aef1
SHA256	2d6b69abdf3f8a1c887501588ff96c817b4530f9eb54e42c25ad667ba1048688
SSDeep	192:qRAHsXj9HtVUxFVBhoiYNcq9IsSXoJpgE4StAFDw/rY9:vsXSxF3yiY9qLENtAAu
ImpHash	-

C:\Windows\PolicyDefinitions\ErrorReporting.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.73 KB
MD5	5d63907e995499c90cc991a7a2981039
SHA1	cb0b49b01ae7b977169a79e899fcfb0a06473316
SHA256	6eee8ce75c5fbd5623e712b20192b18f7e7cba1a87e645e719901b736b7f3d76
SSDeep	384:JxdGnxbNai94sKshyKmYNwE0T/Cg3Dt1MbhPR+LzGlkqJ3ZADELiCUB/:JrGxbEIjtyXowTTPZGhPR+K9Zlh4
ImpHash	-

C:\Windows\PolicyDefinitions\EventForwarding.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.45 KB
MD5	1d88cab25c37b74ef8e5f8f6ce92e140
SHA1	9ebca5c5662d3de337e9a23ebd0e134b7b932e07
SHA256	f5b73c3d889e5fb45c3fdd0a031331c97b97b10dc5955660ec74a1c0c50a4d81
SSDeep	48:jg8fha8QE+Emad3kMeuT7ogXmU9L6A/2y04I/TLGDIv:jg8fha8Qba1HogXmg6A/2hr2DIv
ImpHash	-

C:\Windows\inf\lsi_sas2.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	17.10 KB
MD5	d0a4e941aa5a29f6ee83d1e24acb883f
SHA1	f7efd3f34402904001d686cbd12bef40baf87bc9
SHA256	0f3afa43d2f17050206e7990e1bb8e8c5cf36d08b94750b5dca7e54cb80c8cd7
SSDeep	384:eDxc0XVIGymJmnEAROgyYQLE7cgrx/2rNLztQIKluR0NWMC/WV2AoJ:kxNX+RjEAMPYQLE7lKNLCIB0W/ihoJ
ImpHash	-

C:\Windows\inf\lsi_scsi.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	10.75 KB
MD5	efedb0b7935a9c818c6ac31792006f8d
SHA1	65c12dcd6a930a640c943126e4a2b53be4b8d393
SHA256	7319c26e988c2c57c7484e0f11aef16fb681bbb6da42b240189bc47383863aaf
SSDeep	192:3bu/FfDuLUuPafIOwZWFETWvqhw3z0q2ElRjroEsrSPcj0B5u0in09gA5sjLPLe6:3cRO8fIOwoeMzH24R/oE4eOfFZji6
ImpHash	-

C:\Windows\inf\machine.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	717.30 KB
MD5	8f0e036390b82586309142b81fbd4467
SHA1	a85e02b85d4b8ad33e655170beecaf6a4ce7e3ac
SHA256	fb9fa84b6ed95265842d12c980f035b347181d7823c0f0e87ecc4b172565a22f
SSDeep	6144:baxxkRXQVOJDDqkKkLla9H/cPOkuFja7jpb:bax5VO90+csuxcpb
ImpHash	-

C:\Windows\PolicyDefinitions\Explorer.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.25 KB
MD5	8a09a29b93f48c1b7933a5bbb26f1c10
SHA1	10a1ff3531961ba06a39958047dec6f3330a030e
SHA256	3b8e9092d2026e42510ca3c4b2cc78512b4ec9aeaacd08c0ab591bf4739e2f67
SSDeep	96:VjBF0/8peXnxeGTs7chBjyKmMAFtKj/ooNm6/LuoTzcFBGmRo:JBF0/8QUchZ//nNLJHc5m
ImpHash	-

C:\Windows\PolicyDefinitions\FileRecovery.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.59 KB
MD5	49106a363b4e6c39a7f6f319b727d44c
SHA1	0178a90e7451b7b18c6f70980a179162e7d52f36
SHA256	545f1c6446c007c5e40e0e701d34f30589699102709cdc1a04ebf805c8e39cbb
SSDeep	48:bNd2/utxWauDfkuxVNhq86FK6ee8RHzZHIrQ4y90NPJeP9iAg8zdv0a8n+:JsmzWauDfHxkFFges8T+liAb6a8+
ImpHash	-

C:\Windows\PolicyDefinitions\FileSys.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.53 KB
MD5	40ed48cf99e69b903183718e46758612
SHA1	be709e27ef1c99eef2c8c65864012f5dba9e4618
SHA256	c04407e725d728259c7de340c26028480eb15961ffc8ddb4ebd5c4a7e3ad3a74
SSDeep	192:yGrNVWuxIfIrTM0L0aNxQW54+MSwTyeW2qc:VZVAwr9NQW54+iTyeoc
ImpHash	-

C:\Windows\PolicyDefinitions\FolderRedirection.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.79 KB
MD5	dd0b7b98d73fb96a46c121823112a973
SHA1	331fcdcdb63e6ad2c24600f4273782d75f11eb2f
SHA256	1577412b47976156052c61a6142ef9aab875c0b1fab63eedf6cd35f46c0824f7
SSDeep	48:9zDLbCn1yR06VfNWbzje3KDCpVGIhDO7WJ/jXrgwtuMstZcVNYw+WM2:93Lbpls23KDCpVGalZjXrgt2NY/2
ImpHash	-

C:\Windows\PolicyDefinitions\FramePanes.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.98 KB
MD5	ca3f067a2910822295f02931d7caa630
SHA1	3aef1f94f2787530196b63286dc9f163618cd948
SHA256	54c5077459e3392bccd88cb55c79fe8772cf6bf18c12020a50250407d02d28dc
SSDeep	48:W9l10t/AZCuRdsUQeVImRDr9gTHakntBd:Wb1wuC5FeVIk9gOknLd
ImpHash	-

C:\Windows\inf\mchgr.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	131.00 KB
MD5	8f945d27da749ff4ff6a1a51965f8eb5
SHA1	8808d497b06aee07dc90aa03e9a611617adc970a
SHA256	53e31b5ddb563a06fa7b2652eca54495cc0eec4acdc2738c2444ac9917532e4c
SSDeep	1536:91SoBfjZwtwZaKXeuiyigH1uin41G7g2JJ/zUvzFJC2I9oySYtmPPzzmlfLILgSo:91BlS6Z9pi5iny2KvzClqBrzS7
ImpHash	-

C:\Windows\inf\mdm3com.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	132.44 KB
MD5	f25d52b46e5004abcbda659c6ab37384
SHA1	5a86125da42d4310eafe469bd9af507c4f6c3911
SHA256	3d054af7e7726fe8dfe450fe6557d221a1300e7004b973cee98037b474ecd41b
SSDeep	1536:6bFcOTRPfEmAyl4cFnI7rlbmd1G3h1KBrjIqX+WnllV:uTRPfE4lgr73hkBrjJug
ImpHash	-

C:\Windows\PolicyDefinitions\GameExplorer.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.70 KB
MD5	bd4d1b023eb26501235cda601a47b00d
SHA1	a863bde6def7421295509dc4d8f8271935da98ad
SHA256	60c1f35a467396f1b09ef56f62418581279c02bdf001fc606c1d2ea637c0636b
SSDeep	48:vpB3eTDg3nVGBdeZiMsl0BmJDOccarqP8+eg5+adKYge3ObeYPcwdq93BdW:vpgT8XYB8aGpccaJbgkadrhOqYcw
ImpHash	-

C:\Windows\PolicyDefinitions\Globalization.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.67 KB
MD5	c7818cadd5838d307b02feab62f1b6c5
SHA1	009e3562e895110ff0fd420d285654307a1d1799
SHA256	a9e459514360cd84d6f49760ed23441c9a7fdfe8eba7ce0568df3f27bb955d1a
SSDeep	384:5BMmQypsBD5/gkWIpBEPF+J8BDIEkx9M9RGeLxrYSrjLQqekp2QI6iDyrGinfdm+:5v8D5oL68BDnRG+rYSlVgQsqdCciD8
ImpHash	-

C:\Windows\PolicyDefinitions\GroupPolicy.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.46 KB
MD5	9e47b12d9662291bf63029c112845e5a
SHA1	84b2fb12f5f4655588b6b34f7ba0ba6be16c4b89
SHA256	350b446359d4761e33da373d509374f41fdade2b90950c4eec247f98c11d0416
SSDeep	384:lnvrkR25xtJ6hHkUauLGfuJCUiCzd5FkpJRErIH+9rLh81vDYrA/3QwPWr+Oc:pvgExH6xkUauLG/C5MprErIkh81bYKAC
ImpHash	-

C:\Windows\PolicyDefinitions\Help.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.08 KB
MD5	d702ae10d6a8e02568a77d447a4d59f0
SHA1	08c46f8167c181e2267607433caf930e8df2c1e6
SHA256	8aade409a7596b57e6736a6fcc1720af976c6eb71ce21bf2b7255077b94502b4
SSDeep	48:V+JrZEH9ciY/JdvGuYnTSaQuL27+eP+/UbGKMdKEnEblPV9dmaYyWBt3AwnUy:4li+PGTSaJWdgTCPpWv37nz
ImpHash	-

C:\Windows\inf\mdmadc.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	19.91 KB
MD5	d0ff8963694c81d32b80f08d4c447508
SHA1	8e20521b39c794c8916a9e93e165f88261216cb9
SHA256	8894dc3460f1112aba04a6c5c81ae585ad366b055a7d188d47f6f9fc1cbcd2fb
SSDeep	384:eUKe36KH+INLuyLcT3fCjsaHdEFqRdkTMqSg7cS+x6JaxQvzjf:enkH+ALul3fCjddEFqDkTTSggblxQrb
ImpHash	-

C:\Windows\PolicyDefinitions\HelpAndSupport.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.26 KB
MD5	12f9c1b69b0e832a5bacc3a0344dacaf
SHA1	dc90e44f1e74183137abeaefcc82ec5f3ed6b423
SHA256	cdc1fbc9afa38fb22b8d9d1c6051d7faba0521b004b933c48d4f2ce22515aadd
SSDeep	48:8Y+NZ2SvD0lWjz8IoEVpzJ3PcmLn8ubjbgG3B9p1eU25D4j/ZycRZKqTM6300dm6:8Y+kWX8IoCczFGx5jprZdRrw6300h9Cu
ImpHash	-

C:\Windows\PolicyDefinitions\HotStart.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.16 KB
MD5	9be0d4b3213e8b31eb2732d891ed9e80
SHA1	ae1756f96a749fe614b6d0de5719b9861450f7c3
SHA256	d144c0183916dae990487cbd31bcd1d932067e8ebbf85cb10431c92805835e27
SSDeep	48:zPSkOLh9jyX3Ik0M5VUaCtIiolEFFit76ma2JYnJSTy/BgtHSs:m7LLIY7uVUXCiolJt2LnJUggtys
ImpHash	-

C:\Windows\Prefetch\3DFTP.EXE-ABEF5C88.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	11.85 KB
MD5	6a8b07dcaea1551bb1208c72454101d5
SHA1	aa16b5018d3bd485d076acfc4d1df5e444d63526
SHA256	e1bbe2a35fad66a81fde28818a5632594f889765668faeed9006aa5a0cae4aef
SSDeep	192:3xZ4c0vO5LwSW96J7pXKxL0u2hTrNow9KspqUKgIaGGFD48vcBw:3k1WuSO6in2jv9R1LIad88vc2
ImpHash	-

C:\Windows\PolicyDefinitions\IIS.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.71 KB
MD5	f5c833c01449eda39c7d129d43f8b545
SHA1	4549a9b54c80f7b49de1deba8890606d476134a9
SHA256	a85828191324cca5b55ebadf0d70f8c6fb63ddf3b26f6d2564b9b66903064bdb
SSDeep	48:Losp8IrLpn0Jbl9FhfsdToXO1v18EhQKsO9Y:LosOKLJKdfsVoU1vTsz
ImpHash	-

C:\Windows\inf\mdmags64.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	175.35 KB
MD5	50a4f6bbf25cddf2d80848079149770f
SHA1	9316a66e482f4f5f6b5f06345cb61401aba5993d
SHA256	bdb415a4521bf682e698c26ec1b7e3697df3299ef60a10848b3ea15c6f892917
SSDeep	3072:XqfnPRW7uNe3D+vsl1DzS0+JRrkEb3rG5GJaup26Y0TipY0eHEQ6uNe/u8ZDUdqV:XcnPRW7IqDxT+J1kEb3rG5GJaup26Y0S
ImpHash	-

C:\Windows\inf\mdmaiwa.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.61 KB
MD5	5ff4a7361714f454abf6fe0b48a53e80
SHA1	d1804db4425057e8a5fe428532ddb05a776a512f
SHA256	c3d6d50d295bbe3109ce65ce414401f7ad74f97b9f670292d194f5e214fdf33b
SSDeep	768:+qs2B8E0b9W6HSiylE7plQRdMBfVcw70mQYnsBeb/:+RYH4W6HSvq7kNjFEb/
ImpHash	-

C:\Windows\Prefetch\ADDINUTIL.EXE-AF83E25A.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	74.18 KB
MD5	6e47ff5d33cb75a1d4afad438f7c60c0
SHA1	261934a0326c174224ade49ac98d4de389d5e7d4
SHA256	418645f6970a6f8019f04cf6428662a51c614080361c142a7661754d247bd7a6
SSDeep	1536:yGm8FRMtLV7J1EPu7qKu9wWhGbGlPIO1cJ/izIFajVdAuKWgrda:y18FRMthMPEluLIO1c9i4GVd3fgrda
ImpHash	-

C:\Windows\Prefetch\ADOBEARM.EXE-E8E973DD.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	26.27 KB
MD5	a50979f9e723534600d96f75df49f98e
SHA1	ca8e81a26d4a0de08c1fa84cd6ab5d4ab24501b2
SHA256	4b8e75a11d2eae72a4328ea3c8775b388efac03dae694d296bd47276a5b02fa9
SSDeep	384:xfkFUkVVoDUNjQHrv995LLMetz2LOGmdpIP/hb3DX7DnFl4i3CbNVyYifQrl:xfkFHowNjcrl95LXIOmPlzllWPnjh
ImpHash	-

C:\Windows\ehome\WTVGOTHIC-S.ttc.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	6.22 MB
MD5	0a5e6ad42ae3e59a52754e5919a308db
SHA1	ae07faee1229fb32f499282348beaa47b583e67c
SHA256	3bb7f170ef7de727cc0233f2456e16930d5b1bd6da7dbbda3f02050ad8952827
SSDeep	98304:z2+dWXKCbAvy3j6BiQ2RqxEEJRY2mFF5RBt7cns:z2mWaC8wjej24xv42mFF5RBos
ImpHash	-

C:\Windows\Prefetch\AUDIODG.EXE-D0D776AC.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	25.65 KB
MD5	a7d672ea3668f64144cbf81f4a486fae
SHA1	8ea1ccb9a7ebc1f909dc5c83e603010b16267c4c
SHA256	0336dd3cd64aa48bdb82a55eddbba110dcc86ba7cab3fc8aef55d3dfd5c11ef2
SSDeep	768:nlIkqXeqkOs0AorRXPH4yKqrEDD10mniqtbXs:nrqXmO/NrV4yHwD1tK
ImpHash	-

C:\Windows\inf\mdmaiwa5.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	36.30 KB
MD5	87c4554b1b1276d795f3ac58e7e4097f
SHA1	32e36a77644ca61da50c8270a72cf96afc8ac619
SHA256	a663b56c77a05ec7e549aa74c65c49271d90170432c42d6274d9fd399e7ae0d3
SSDeep	768:RYuQXXC8/18fJqslEeliIWJ0YiS8prKjQke5I5UY:auCBoJqe62b7I5UY
ImpHash	-

C:\Windows\Prefetch\CHROME.EXE-5FE9909D.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.26 KB
MD5	10b622f7a5e5981fc0387c369ef47d05
SHA1	cdde6cca200af58b6f0cacbc87fe352f935ce2fa
SHA256	ebd2f07c9e7935b823c8fa2d3e4eebfe8677bbe94af48ec814cea25ca3db96d4
SSDeep	768:cL6pqn94UT03ElQ3f7yAIWfab1lOn7R/EzqNp7c2e:cLeqnyUnQ3uWfIOBEObe
ImpHash	-

C:\Windows\inf\mdmaiwat.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.15 KB
MD5	138735aaf27d406838a1ad1b912b96e7
SHA1	b8b996a1ae4919ab1db80cdcb646d992b629e47e
SHA256	a867b6774e2a8ad858fb52b0b1a88cb3008a0047b87b1d64b0bb30242cb06cff
SSDeep	384:SoD25XDH/tKBfwM9e1JnJaMsNPRQ/6ZH15xMGQ:lDGz/tcH9eLbsNG/6115XQ
ImpHash	-

C:\Windows\Fonts\ARIALUNI.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.20 MB
MD5	49326c5b649b38d9bc3ebf88e7fa5936
SHA1	9d70136c54be81f40291e11b0f5d235c7c857b45
SHA256	d66abde483f5b3504741b6b87b1c28497d268db3cf694f7440a13b54907af6fd
SSDeep	98304:ADTiQrIi2wx7Xoh9YQDNGkDs8IeZiSpUcFJjRev+vGj51Pg4wPGMquH:Ap2FMkAEiAHJVjvGvPHwPGjuH
ImpHash	-

C:\Windows\Prefetch\CLEANMGR.EXE-B508FB28.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	93.77 KB
MD5	c6af6fe8516d0d5b4bda34f8b68c171c
SHA1	f0b4c8d0480442d8a70d99a159502f2d3d50c161
SHA256	b9175d48d588b12c45f706b768e8191c20342cc2b49d0d7e730778c61d8844df
SSDeep	1536:rAbc0RUn++4dXzeIdkAxDpVblW2QMzSaQGH5jadDQMroIEnu5/w5qIlXP:roRo++qzHdxbblBQM6Gl0B2lXP
ImpHash	-

C:\Windows\inf\mdmarch.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	57.98 KB
MD5	d1bdff8d12830cb80d165bd6e96e4918
SHA1	805945fab3edde420f5a2a29724bf62b8d5b4ccd
SHA256	d7c1fb67b68fa23ca9e689fe3d23d629de0f93d31e16f5fdc67c2bbfe33e65a5
SSDeep	1536:hM6Q57uu8oS8/SQNCp8sqDEZzLon83r+s7Odq:hM6Q57dqQaqezaMr+sSdq
ImpHash	-

C:\Windows\inf\mdmarn.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	21.59 KB
MD5	7bcb958de8afe0b418f98fac34e08430
SHA1	a1b29fa742e1bbd80015898b3e4b58c408a9ab54
SHA256	885ee9121fcfb87b998e49b6a4eef59dd4e0da4eaae975f4da3a2f2ff507f5c1
SSDeep	384:sNIzybED1r3CANmizbxe4E4NIfAjinrkCWDCALVJdpfCFI4D0Y9RMVafMu:sim4R7CsmizbvEzfAjyW+AL/dUD0Y9yY
ImpHash	-

C:\Windows\inf\mdmati.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	108.71 KB
MD5	715d5deef28241e95f947181684767ec
SHA1	99c889c3c173b2a25f48e84c00368f1111428d9a
SHA256	89c2fb90d807b23dfa7bc016f8ffc71aca29901dea16e329f400d3774510f6f2
SSDeep	3072:W0opXksqGZ66yWdEqoiXb7VhRgg5ZLqIL8:Uks7ZyW+qjug5ZLe
ImpHash	-

C:\Windows\Prefetch\CLEAN_NET_64.EXE-AC3CFA5D.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.25 KB
MD5	0447964adc830f48692b9e9ed6e6437d
SHA1	ed36ce66d9d88f8b3057680e3fd582798fec75e6
SHA256	2abfaa728dbbbfc77129425bcceb32ff4ccf162f4cb86dfb2e2cee9ee108394e
SSDeep	48:n5C1yFb+aX+ILhEF4opiuJNDU7iWLGoXqQf8Pj4YO2mz:n5C1yhYILuF4opb3DUnyQU62g
ImpHash	-

C:\Windows\Prefetch\CMD.EXE-89305D47.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	8.65 KB
MD5	5dfb2ec52a8ab2e0463766adda0fb36d
SHA1	c427a8672dff52a306fe01df9e4f957c2fd22e90
SHA256	c4ddecad412f724b2242859bf5849660755f46589ac75aab4f31b4c34537d0c4
SSDeep	192:D/+p9wxCrMkuFdKAiv5paEC6DMUI+0uC1Nl3k3onYT/wvkupLz:D+p9wo6ivzV8+0x2oYT/wv/Lz
ImpHash	-

C:\Windows\inf\mdmatm2k.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	24.98 KB
MD5	1c966207915edab5f68561ec8f5658bb
SHA1	506b031313753d7d1fc12948ac55f623d8b9e7fd
SHA256	464752b5e8baf5abab3c73ace4490170c10766af57fda15d1259bb536323edab
SSDeep	768:dloEKbVYPKc9VCAvlkNnAIgEiWuwAoVfKUMcL:dlgYPpxN4AGiWuwAcfKUMk
ImpHash	-

C:\Windows\Prefetch\COMPMGMTLAUNCHER.EXE-0BF80059.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	63.80 KB
MD5	9611b4ad3223791474c9267217dd449d
SHA1	65c7a28cbb5474063f2513988f2404b71259518e
SHA256	59a1d378743f13324f3ec17351030d12faffd6a2201cec1a8f1a1a19bb2518c4
SSDeep	1536:SrMvlR+2qi2yTSL93UGxu5SsTjsaxWowrDTbf+cvyXP/eBIqbnLz5WpHIL:1T2yTShkGxWSisaxRwnTb8nyIOnLNVL
ImpHash	-

C:\Windows\Prefetch\CONHOST.EXE-3218E401.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.02 KB
MD5	730f338a1a2b07fa6bfc3f9e5d700191
SHA1	8bb4b6e6963aa354d04b471dd02575b8a24305ec
SHA256	61da18eb02b09d6aa1b6373106164a976fa839b3c390de4ba1d485ccd590bf53
SSDeep	384:BX/YHcdUKKm2DF7APgfRE2M+/HuLT1rQ5+F+XvDwZLqz+Or:BvtUy2lAgEE/HuLZ6+ocZL0
ImpHash	-

C:\Windows\Prefetch\CONSENT.EXE-65F6206D.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	86.60 KB
MD5	98e663655be8f59429cb99e46440f307
SHA1	f00a6da38f3c30ff79fa798ca1ccf85e232921fe
SHA256	8a4980a63ccfe45c0601691ad25253796c27f43b0698307ad32d78f003840e4e
SSDeep	1536:sR7aI/4dJvz5Rwl2AyaC6URJ1MfXrtzQBIwY:Y/KhdRsHK62JCfJz
ImpHash	-

C:\Windows\PolicyDefinitions\inetres.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.94 MB
MD5	02b676f1d395049694eb364b00660eea
SHA1	45fea7623d0e4abdcd25d9c59b17b77c0b09b8bd
SHA256	0e91520a19088bd18d9ea54e18ea5eac24620de3348636c80f7f86edb3d49d63
SSDeep	6144:dJxi8GPf1uGpFubPVLRWLUZOv6JcnwZoxZyVIzawY:7kl2bPtRb
ImpHash	-

C:\Windows\Prefetch\CONTROL.EXE-9459D5A0.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.08 KB
MD5	82d00c395e9d0b2f0a427b2cb8c3ab6d
SHA1	c0318b2803354970d7a2b47c0a3817307f16944c
SHA256	c58005993ce64d52aeace6e3dfd0e50275de589e5665468e3949b972fa154afd
SSDeep	768:/P9hPzjEe9c8lcbO6iZCCUfdxFuBqSQZVU7GsWF8cD8uHTU4/NThRAh:H9hjtc8WbtLv86ZWGJF8cDjA4l/2
ImpHash	-

C:\Windows\Prefetch\CSC.EXE-6F2C7122.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	47.57 KB
MD5	be6a8c5dc77f72e3bbd1420dba9bcf30
SHA1	287866469a214693e6611f9fd285aa15b21e6bcb
SHA256	23627835eccfe35408726ac5bd0c6c7c9c5ee473136e7a558a4ad9fcc5f67f62
SSDeep	768:vvZhl/xp/oiydtDY66LlvQqLghyDnTrgJmoJEQ/e/im/kVL+WI5nxTFX+vMguiAs:3lzgiotkRLl7kunIm0G/n/kJc5nNFX+Z
ImpHash	-

C:\Windows\Prefetch\CVTRES.EXE-6280F3A8.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.12 KB
MD5	71122af12b19eb1d072a887099263fff
SHA1	21d51dd0dcd31610c42885903663a1c82880aa4b
SHA256	586f421cf5cf12eb1454092c9b3e5b46f77b488292161292edd02b6ad7873940
SSDeep	192:VvKFMS/HMVzmioFDoXL4hv7JHtVA7PL6ajvn9AePCKv+v1i6hTXvXFIxVDoNWe:pKFvvM1AyujZtsPpFuU6hTvVIxVDIWe
ImpHash	-

C:\Windows\Prefetch\DEFRAG.EXE-738093E8.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	15.51 KB
MD5	12dd3b8915b5f13a79a5af41968fe92c
SHA1	f479e45f5d8918e67fd73f3a084dabb2cbab3b0b
SHA256	d88176565770545467e7bb329e8a2f537cad28695d71bbea8533d811337b7a38
SSDeep	384:ObxJ68QwXJ1SifO9V6anSaAmzz8r6vANLnY9E2UZYb:ObxlJJ1SiW9sanymzzI6vANLz2UZYb
ImpHash	-

C:\Windows\Prefetch\DFRGUI.EXE-E344E070.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.77 KB
MD5	26651689b946736c5753da751246d8b3
SHA1	0910fd1dcb27516b2c58e5b06345adeef33b4fc8
SHA256	3cd39c2ed65e95f1bc5cbe04e794f3888cac8d53151a5bb98da25e8ae2a79d43
SSDeep	768:k0Swqwvr2O6ks3sqSHUAbSxCGf3Hdt69AwvgEHK6EByO6tjiTR5lvQz:PSrwjIdSHUA+cGPdVEqfUI5lvQz
ImpHash	-

C:\Windows\PolicyDefinitions\InkWatson.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.25 KB
MD5	c67de462b77d8efb5682eab6586131d1
SHA1	e1ec441b706625b3b87f3dbe48deaa1bae495fc6
SHA256	ab1c9ae4ef2b63e513e2a26a6ce8e64161169b78d5b1f3f1644954c953f7bf19
SSDeep	48:uGrpsOTi7BTmLgcmJ8Oq47jyyBC7c7bsrnZLMbMbJAlYZ:3TTi7BqLgd5qMZC7cEnZQkJA2Z
ImpHash	-

C:\Windows\inf\mdmbr002.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	51.48 KB
MD5	841b2acecec8319fdfdac0853922801a
SHA1	be48c1e48c3e0ff7d9071041fa861ef3475a67c4
SHA256	6b4f9b4d5f2479b0e470c2a16c1ac016fd9228ffb753a463fd8185f21d1bb9d9
SSDeep	1536:NZph9xA73mfZSmrQfIToDDh3wwYUSH2paqpUe82R4iw9Q2M:3LA71m50DDh3wNU+Wxa12AxM
ImpHash	-

C:\Windows\PolicyDefinitions\InputPersonalization.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	3.75 KB
MD5	f9b2f6ac4d3e100de0b57e05e386949b
SHA1	20e614ba0cca0aeb4aadaa5c73c4eddac9dbc4ea
SHA256	4cae8895a8e12a4b29a6556554bbf51fd5aa80507a0ecc56e42f7035f0c1431d
SSDeep	96:1OkmrElKgFOd4gAXh/QKPMfSkscx8T7C5ltwRcBy8H:1+rEMOYrAWfPsY8T7GwqjH
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-10C3CA32.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	18.00 KB
MD5	2c52d52c43f81b111d85a420ae1d871d
SHA1	7d9f58bdffbbff77b4176b6a13d8303ad92e21f7
SHA256	4d8385398784632e39ae8ac5d37a3307cb74068c532a9871f93dd8befb31949a
SSDeep	384:YXI1xlTY6nG4X9gnkD4esoJabOOgCrWW7zmvkuQ3Yft4CpXIQcCMBDZgD:DfBY6KkEesoIqgXc3f+3gD
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-7D2183B8.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.76 KB
MD5	332a0562065f0ca4ac8cb134fbeda474
SHA1	ffb6fd6fef91bfd74599b009b11b071da51853a9
SHA256	55d5fb52f52893fb33db9bfbd87b888082731084e0918ac672d9387e8657b8ae
SSDeep	768:0eNUAUwOeMWtV1Mlz30DNX8nhlwBslQsuIKmL4rA0Q/7mvxBRXU:0emAAeMgV1K3oNXcwBTssw0KavDRXU
ImpHash	-

C:\Windows\inf\mdmbr005.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	45.85 KB
MD5	a51c7ef664a163b8848042d04d78b7be
SHA1	b9e3035a8894f01cc4ef9ebf9b740b42f118715b
SHA256	9a25d7973803d0a665e139fcf3d5ec40afc46caa55e70a6bfbf42908df5f8162
SSDeep	768:VJVDjoujJ3L264xSoex3/dHD5zHbPTMjNwifi68x0y4cQegb2EpyQQApbBmXGJpA:Vvjo2JbZK0/dD5zH6WifAx0sQegKQ0GE
ImpHash	-

C:\Windows\inf\mdmbr006.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.25 KB
MD5	2892950577009cef751c40d607a95998
SHA1	4ba97a31dda2e167025c64deb521cfaba2c2c2ce
SHA256	7036c38321e2cf0e43edb1d2adb6062f72f69dc1f3a0310471d672d63ef7affd
SSDeep	768:dsVyCnm1Cc6uRl1SBsy2V8tQo95LqsycVj3acGLxPWTKmlSlgCmrZ5+zwLkuSPmu:vCnmgRrX2VqQQzy/AYebr+1d
ImpHash	-

C:\Windows\PolicyDefinitions\LanmanServer.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	836da6fad63e79a64a5adfe95fb39fc2
SHA1	73e8fb176e9ac5eb30ac01e720349d245afe35d5
SHA256	be50e7b3a36386652d592a9fc76da1c90dbb4f665ed1693d811f03a8b94573bf
SSDeep	48:/FMJQzjifmP7kEuODywMLXNTuTkXLGw8JsJ1ejZe1S/Kvk:/FMizji+jkENDywML0obGw8JszeI6Z
ImpHash	-

C:\Windows\PolicyDefinitions\LeakDiagnostic.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.65 KB
MD5	3013734d1c068b4b6d87fc83f7f2f051
SHA1	7e51030bc82d1d6261851c160653de02ea17eff5
SHA256	d4897c4dd945e6086a667f46f4c0ff28244ae56b3bf210489d7babb7308140b2
SSDeep	48:eCbqxQpFCrlw00FjB2QuOBj7juDjQH3CY8cjGtwh+SSqGGPdbW4eEQvMkFBIaTK:N+QbC5yFjYYj3uIXC1cjGOsDGPYEmoa2
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-AAD0E997.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.81 KB
MD5	d291f4ed2ec7fbe1c1b08b8ae7c5eed6
SHA1	19b07c538e6c894691cec03f190057776b6d9028
SHA256	bbd00cbb07fef2e8e7cb42f3b48dba60e8da322f0d38d6962449e7dd138d8815
SSDeep	384:jV+0a+OI337iAiQY8A6lhsQWIZXS1dgktOG4PfeA3C0cauvhAoL7g2b1fv8/gXUu:9xOK37iUYR6lO9IZ+vtOTfekppMionga
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-C5C55E89.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.02 KB
MD5	989554a0eb1ab1abbebdc7285078d509
SHA1	5ae398224c63afc136251f5a6e7650c7a013c2d1
SHA256	01c277eebf2f6831c93237af7dea8131b60afe910d4a9b5157534c9d6a11b59f
SSDeep	768:MnBY5ZITIJTd7kPgD4jFYkBfeZpwOKId6VuzdAILVDyvbg:KYjRwIIFYIfe/wOK86Vu5AIKM
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-EF479C03.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.60 KB
MD5	1dfab34532b7728a128a65486198ea33
SHA1	bbccd5fcfa41154344dd82931da177019238e359
SHA256	a5d5b76741506f6d02f95aab43961874f3d3ed23c738319bec75607878c58bf5
SSDeep	384:TBUxLiakt5Fm5dkwevcC3D6qML/t6n7xoeBdKAjCVQMWRlktXrF0TfJ508M6AA+G:QiBvGdkwevcAD1+sFoA88RUbKfJ50H6T
ImpHash	-

C:\Windows\inf\mdmbr007.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	45.16 KB
MD5	f93bdd096a8a337ff009ddf80409062c
SHA1	a766ae698c141458212bfda50e27c30c6e9ce0f3
SHA256	d0f4f75b485c78d59eea4a070d8783b1e1a595fa42c0e5b2d73f38e8437bfe96
SSDeep	768:EmmDflJvlVFZecA7xwuzXufLJAQ6MHWA+FfAsd/C6gBy/t2VTlGF+0PHT73krFpP:oDNNehwurufFuM2bFFzgs/oV0FTPHTK7
ImpHash	-

C:\Windows\inf\mdmbr008.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.04 KB
MD5	0683e7e6fb0b9ef8dd58f640a162d0a3
SHA1	ce0ea5b9b600859471cb065e2389e630fb35bb94
SHA256	f898c960b4e6f18ba142e49fb0444fc7dc98f1063246c89dca90d1a25ccbb9b7
SSDeep	768:7qqoHlJK7ffGdFV5SB08f+xlvzOL5lvKZARHqUTGvdPxIKJtdrNAfa:7qTjK76FTSB06xxqpbIUd+a
ImpHash	-

C:\Windows\Prefetch\DLLHOST.EXE-FF915DF9.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	81.74 KB
MD5	56edad4e721ed334ac9f2b6cb5e744cf
SHA1	a128eae9df1874b80346d766973bd7a07b5d76ee
SHA256	aa33c93fddac60da366ff543eb5174f09ebc17e4989c612cf9db217d61c17c9c
SSDeep	1536:n9KMsZoUhse1/Dsoc6Sl25bUDsbQmMZ0jd/zxbwKbaBtiEv9U/NU+XLClmc:9KMQ/seJDscs6Q4jZxbCtDvu/u
ImpHash	-

C:\Windows\Prefetch\DRVINST.EXE-5F8E77CD.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	40.45 KB
MD5	3ba6632ca48b7676755fe05a8240b4db
SHA1	cf9d1c72de739ff22a28da299595c11282bfb683
SHA256	230a0342696c927df6a28598c99c3372d044cafd0451ffd5801a614438e48b84
SSDeep	768:PiUEtTHPIi2OUI+MoaX/emBjpYiH6THqwSvSuMql/KUE/nqCCs:6ZPIi2OmMTGmRNHgq8uN/ORL
ImpHash	-

C:\Windows\Prefetch\EN_OFFICE_PROFESSIONAL_PLUS_2-E7418694.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	69.48 KB
MD5	98b2fe6e88d144c35b4eec768f14d69c
SHA1	58b5d3bc332374a1bd3e3a9294490ef6b1276678
SHA256	848ed002c3c1b5746c106a1cf514af61a539b66b20087c9e6832692943ce908a
SSDeep	1536:kDztq9RvB8fLobgfASCRuyTAMOdH8LtYcVkUgPy:kHtUsosIFRZAMO1cYcOr6
ImpHash	-

C:\Windows\Fonts\ariblk.ttf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	117.57 KB
MD5	a0bb3dbc0e08ba062ed2e3a8d127863f
SHA1	40806e774b2cf5b97822b50bcb4157253cf2eb3e
SHA256	e577626eb1fae2ec00e2e6be2c775aa728fa152753deb054e27a11427723ad7f
SSDeep	1536:da/bVsm9DS3TCOtAMuyJu67HLzybee4CUiYQhrUPg/eoRg3lFleh3XNbqXQHiq5/:dQVLDS+qcxILWd23ygReZ5qXjq5/
ImpHash	-

C:\Windows\inf\mdmbr00a.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.04 KB
MD5	647b4c02aab47e0169c8e84363a15f04
SHA1	f0b91339fc02c2efb6b4cf0dffcd93f0d40b0ac7
SHA256	41821ca081c90d826e0147acb51ed3ba67cd6e26aa8d75258695c7fbd9a980b3
SSDeep	768:wuwFBsFrFvkTXSuoK8n8Pc0jQQ1jUO/Z89U7sGgDe3:twYRFMPoGcYvPgnk
ImpHash	-

C:\Windows\inf\mdmbsb.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	33.38 KB
MD5	678f95f52342ccc4b8171cbd3bada09f
SHA1	ae58fff5c6d67a7359a4fb4469e896225a84d808
SHA256	169402230c645eb03d1c53acbd047755d132a08eec44408c3046e09813a9abba
SSDeep	768:R+9uEg5nvYE/nBL3JtJIiYmPrrtcdHedFvN7CM7s6qyQufg:R+9uhdYExJtySrrCdHedDyR8I
ImpHash	-

C:\Windows\inf\mdmbtmdm.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	60.27 KB
MD5	2a5a8c22c786f2df09efd53cd08a8aea
SHA1	e6942c3906c493a4473f00783e2c2083499bb5fb
SHA256	3207624117dc364f6fb17c917242dbe8ee6384e029c8898be5def85350a43fa9
SSDeep	1536:behwEVvik+i77Wqdz64Y+LDw0ehQ7dJFTcq0pOPBYqgmKIBG:pEvV7f5Y+Y0r7jWqiOJYlEG
ImpHash	-

C:\Windows\PolicyDefinitions\Logon.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	7.46 KB
MD5	1d81f2d2416d8df4d63bfb3df716f856
SHA1	aabbaaeaf6c2f5879640775f0961725de3e09ac8
SHA256	bef5c68621e8a233881921d819bebb207d8492f241b0e4ea9d22b70404d5aec4
SSDeep	192:RCsu7MVVh68lscyCbwtTXjRDe6z8VKsHdu:Usu7Mrh68nvwXhmk
ImpHash	-

C:\Windows\PolicyDefinitions\MediaCenter.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.24 KB
MD5	ee6142545914d227f087cd032b9b6ea8
SHA1	152bb7f3bf39d788306e2b332c5a70d0058b7563
SHA256	4bbde709db073d1621a8f928d63440a8099ef6be311802df41c6fe6f2ef73da1
SSDeep	48:FZDIkU9zzqqYuEEEn5UsNIZ5S1Aszx4fKqF4qw3CGZD:FJTEj+5UoIZSJdmKGfCCGt
ImpHash	-

C:\Windows\PolicyDefinitions\MMC.admx.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.00 KB
MD5	6967f4fff5939ce628cd1e7669c21981
SHA1	f0b583757d9df89fa995cc1221f6430ef65523c1
SHA256	5cd1c71d46dd0a86c874f4aef66a5df36bbf95b5f55afbef8eb224008814cb2c
SSDeep	96:gTKi7qriJOKN3NawyEJkFrYEfGBa8JQSkph97U:g+YqOhqpWzYpv7U
ImpHash	-

C:\Windows\Fonts\ARLRDBD.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.70 KB
MD5	62fd74a81d6dae32c87fcc74816bc062
SHA1	61df34997fa9337c3bb7596fb458c6fbcdd8104c
SHA256	ba43c014d8b4aa577083e6ad19cd80df804c3b36ab683aa7405aac57863cf8f6
SSDeep	768:5acUafVyF+SBUMME0j1oLXnDE0OL/pF1jPZ5TcaJ+RQrS7xA1hj61L73sMyYOK6:5acUGM+SSvrj2XnDEPF1jBD82m7L1L2L
ImpHash	-

C:\Windows\Fonts\BASKVILL.TTF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	54.19 KB
MD5	7ac1740ee25ea3043e2cdb19ea6239df
SHA1	c56b395f77edad3bb7b2ff68bc7fc1712510e347
SHA256	1c9bce96a1d3b03d7d6e00fd9df2ec2df2fa927a0a12758a30883adf8b3c4fb0
SSDeep	1536:5P//9cdGokr4Dd7fDge5erk+70vTQBlkJBM:5f9cc4d7DMg+7ZBN
ImpHash	-

C:\Windows\inf\mdmbug3.PNF.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	13.94 KB
MD5	3ee4892c530c46a86d6c65f1592d3244
SHA1	a54af11f11a0ef3fdaf18b1e82f221e2baf80aea
SHA256	f3cda34d8d63a39398e0d15065854051dbea1e54dc8907af8411f9367a5ee45d
SSDeep	384:z5pLlKiWX/zkzLuh7yDR84pBJKeOjZYEhW6Jk:z55A/6CyFpBPOjZYelJk
ImpHash	-

C:\Windows\Prefetch\EXCEL.EXE-F0766CF1.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	100.90 KB
MD5	08bf1b8517e0ba28755f842fdb9d01cf
SHA1	ce7cd4153d46c7d487f9d2a46c0e574607f1cbd1
SHA256	010ace7a0f641ed7f63ab61cf7ab21339e33120d68c73cb9441d61a807111970
SSDeep	1536:64o2k/QpCoRGCmUu+MjrNLrO0A0b9khrAyNfdo/yoNTGVIKi5252vQP9KrQvwu:ZBICpQWl0+RZW/yoNyC6669d
ImpHash	-

C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf.pandemic

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	27.30 KB
MD5	974bf704b4f41af43aa4b40c220ed358
SHA1	0ae2aaba9354317b5985381e018628cb9c822897
SHA256	6135b8f01f2ce21d121a1063cdeae64158f046542519b3c5790fad07ddaeb1e6
SSDeep	768:R5oa103d9407fBQVIRjaQnZ3G1gdsTK1arrO:R2Z3r4JIlaQZ21LmSrO
ImpHash	-

C:\Windows\inf\mdmc26a.PNF.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	30.56 KB
MD5	0da95e02b0e534f7dc3af7b66f689ff3
SHA1	fac4eeaf4225e133ebe11383d4cb1d61964fab6a
SHA256	f97c6cb75623da34498d87901e4a596b2a6cf3dc395579a19d6aeb58554f0b69
SSDeep	768:Qo4lcRqQ68k3Je5Bxa176XMtM/AFG7CbN:Gc76l5ejxa177tBs+bN
ImpHash	-

C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-41B177B8.pf.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	16.08 KB
MD5	bd7a0a9cc994fcf78afbfd95b78ceb9c
SHA1	d3de383fe6ed7bd1077115e96180f37f4f08940d
SHA256	c9c408e7de945bf0c7b9c391df97c9a03e24ba9ea14b50d2a134c8ca521a9efb
SSDeep	384:HpOofRHVKMwGibtz/JrryCrGUwegKILJH0heJYEGogEqH:JOcRVHibtzRfy0VCxtQY1jgEqH
ImpHash	-

C:\Windows\Prefetch\FLOWER_IT_NAMED.EXE-B7871171.pf.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	11.85 KB
MD5	28aaa967c0cd5ccfd90385ab51916502
SHA1	981d3155f3f9ff0b285cc297a0dbba3773dae027
SHA256	ec9855730e777afb457428a335df403b4add379e25473fb3af3b3ccdf1de0b50
SSDeep	192:9HIennHXoE6yjuTPqO5KgcGE2h3Z9ewZc6ZIt43iZOf72s3BjN6cGxREH0o:aOTjuTiyhEgUwZcZtUQ87N3Btp
ImpHash	-

C:\Windows\PolicyDefinitions\MobilePCMobilityCenter.admx.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	2.35 KB
MD5	645b9209f53b78a6d9b968a9aed5cdda
SHA1	59194ce98723a3404ac9ee37e36fcf21149e0ef3
SHA256	9d3cd9795b6a614b7cf515af5d0ee15ca550e2e46c940bdc0d9ea67aad9e1d5e
SSDeep	48:M62D08QFjC0rxId0VAFWyOSz1gxkOfnBzLVFIUd/diKAWv+4Bn5Q7q1+bE:MjzQw0Sd0iFLxix5BPTIUNQKAW2muKx
ImpHash	-

C:\Windows\PolicyDefinitions\MobilePCPresentationSettings.admx.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	2.44 KB
MD5	756ccd85e67ed830ae8a22fff72814d1
SHA1	c591623988c67ff03a75c6c9297360b72615642c
SHA256	2a4678113425cb0f5443e734dc5b5bc6273a0c5dea17d0f3f65e5069c1fcab05
SSDeep	48:xFQpftoFmZYmE9u5KXg14Ppc6MKfc4yguH00virE9guAXYNGFeJtb:xFoSFE4g14PWDn9rJpAXod
ImpHash	-

C:\Windows\Prefetch\IEXPLORE.EXE-1B894AFB.pf.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	137.12 KB
MD5	b451ecae4cb1585fd5110c2c96ee666b
SHA1	8e53ea5ccb8bafca44601077a31e29304574043b
SHA256	0267be0b64722a4162a4ca37f52522dab1f4aefacb1290c0251dcba910307c31
SSDeep	3072:RiyQ3KH7dDahL4BovxMgFnEGAMK6+BPF2g:IyQ6H7dGh46vxMgFbF+pZ
ImpHash	-

C:\Windows\Prefetch\IEXPLORE.EXE-F6A52C86.pf.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	102.53 KB
MD5	e3ea9fc57ca023e47f3565b5c38b92f7
SHA1	fe520b6babfd1c8865a8779fea9dea0634af8bf3
SHA256	a7b57cd84192993f74c8eaddea065066fa06659cf8d00d21ecab2d7442700fac
SSDeep	1536:D2QJQ6W5ZCq0o7ZmCsfVOfSKb+znfpYSVxF9BpOByNaE5J4uK19Y:D2EQJ0KmCsMqKCzGi9BTXCY
ImpHash	-

C:\Windows\Prefetch\INSTALLFLASHPLAYER.EXE-D17794CE.pf.pandemic

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	39.23 KB
MD5	65d934c2386d43fbb37be5f5cf59efb9
SHA1	5979de5b8f11b693b929f4c1031a12f017ca5232
SHA256	5e20a1b475dcda245f2839f19a54a06c21fae827571db0cc8bc6e8ae53b4be33
SSDeep	768:wlNXOZ2eQGN2duLFjUI5LgUQkpbAT463iUCzO9py1CRFBRJx78Zvq:wlNX62eQGN226Kpx6JCeyMdPIvq
ImpHash	-

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After