4925eacf...06d1

C:\Users\FD1HVy\Desktop\42F0.TMP.EXE.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	1.12 MB
MD5	8933f4286f0838fe9357eaa6544c6c33
SHA1	532ba518d39c30552ce007ac7e251067f5d3295a
SHA256	4925eacfa63f5fbd5f18dfebd3bbd2edf233ed579a30b6f49e31117a1f1c06d1
SSDeep	24576:rAHnh+eWsN3skA4RV1Hom2KXMmHaKJxvye2Yc/U75:Gh+ZkldoPK8YaK/yvYcU
ImpHash	afcdf79be1557326c854b6e20cb900a7

File Reputation Information

»

Severity	Blacklisted
Names	Mal/Generic-S

PE Information

»

Image Base	0x400000
Entry Point	0x42800a
Size Of Code	0x8e000
Size Of Initialized Data	0x90800
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2019-01-05 18:45:12+00:00

Sections (5)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x8dfdd	0x8e000	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.68
.rdata	0x48f000	0x2fd8e	0x2fe00	0x8e400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.76
.data	0x4bf000	0x8f74	0x5200	0xbe200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	1.2
.rsrc	0x4c8000	0x544c0	0x54600	0xc3400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	7.89
.reloc	0x51d000	0x7134	0x7200	0x117a00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	6.78

Imports (18)

»

WSOCK32.dll (23)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WSACleanup	0x74	0x48f7c8	0xbca10	0xbbe10	-
socket	0x17	0x48f7cc	0xbca14	0xbbe14	-
inet_ntoa	0xc	0x48f7d0	0xbca18	0xbbe18	-
setsockopt	0x15	0x48f7d4	0xbca1c	0xbbe1c	-
ntohs	0xf	0x48f7d8	0xbca20	0xbbe20	-
recvfrom	0x11	0x48f7dc	0xbca24	0xbbe24	-
ioctlsocket	0xa	0x48f7e0	0xbca28	0xbbe28	-
htons	0x9	0x48f7e4	0xbca2c	0xbbe2c	-
WSAStartup	0x73	0x48f7e8	0xbca30	0xbbe30	-
__WSAFDIsSet	0x97	0x48f7ec	0xbca34	0xbbe34	-
select	0x12	0x48f7f0	0xbca38	0xbbe38	-
accept	0x1	0x48f7f4	0xbca3c	0xbbe3c	-
listen	0xd	0x48f7f8	0xbca40	0xbbe40	-
bind	0x2	0x48f7fc	0xbca44	0xbbe44	-
closesocket	0x3	0x48f800	0xbca48	0xbbe48	-
WSAGetLastError	0x6f	0x48f804	0xbca4c	0xbbe4c	-
recv	0x10	0x48f808	0xbca50	0xbbe50	-
sendto	0x14	0x48f80c	0xbca54	0xbbe54	-
send	0x13	0x48f810	0xbca58	0xbbe58	-
inet_addr	0xb	0x48f814	0xbca5c	0xbbe5c	-
gethostbyname	0x34	0x48f818	0xbca60	0xbbe60	-
gethostname	0x39	0x48f81c	0xbca64	0xbbe64	-
connect	0x4	0x48f820	0xbca68	0xbbe68	-

VERSION.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetFileVersionInfoW	0x0	0x48f76c	0xbc9b4	0xbbdb4	0x6
GetFileVersionInfoSizeW	0x0	0x48f770	0xbc9b8	0xbbdb8	0x5
VerQueryValueW	0x0	0x48f774	0xbc9bc	0xbbdbc	0xe

WINMM.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
timeGetTime	0x0	0x48f7b8	0xbca00	0xbbe00	0x94
waveOutSetVolume	0x0	0x48f7bc	0xbca04	0xbbe04	0xbb
mciSendStringW	0x0	0x48f7c0	0xbca08	0xbbe08	0x32

COMCTL32.dll (11)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
ImageList_ReplaceIcon	0x0	0x48f088	0xbc2d0	0xbb6d0	0x6f
ImageList_Destroy	0x0	0x48f08c	0xbc2d4	0xbb6d4	0x54
ImageList_Remove	0x0	0x48f090	0xbc2d8	0xbb6d8	0x6d
ImageList_SetDragCursorImage	0x0	0x48f094	0xbc2dc	0xbb6dc	0x72
ImageList_BeginDrag	0x0	0x48f098	0xbc2e0	0xbb6e0	0x50
ImageList_DragEnter	0x0	0x48f09c	0xbc2e4	0xbb6e4	0x56
ImageList_DragLeave	0x0	0x48f0a0	0xbc2e8	0xbb6e8	0x57
ImageList_EndDrag	0x0	0x48f0a4	0xbc2ec	0xbb6ec	0x5e
ImageList_DragMove	0x0	0x48f0a8	0xbc2f0	0xbb6f0	0x58
InitCommonControlsEx	0x0	0x48f0ac	0xbc2f4	0xbb6f4	0x7b
ImageList_Create	0x0	0x48f0b0	0xbc2f8	0xbb6f8	0x53

MPR.dll (4)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WNetUseConnectionW	0x0	0x48f3f8	0xbc640	0xbba40	0x49
WNetCancelConnection2W	0x0	0x48f3fc	0xbc644	0xbba44	0xc
WNetGetConnectionW	0x0	0x48f400	0xbc648	0xbba48	0x24
WNetAddConnection2W	0x0	0x48f404	0xbc64c	0xbba4c	0x6

WININET.dll (14)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
InternetQueryDataAvailable	0x0	0x48f77c	0xbc9c4	0xbbdc4	0x9b
InternetCloseHandle	0x0	0x48f780	0xbc9c8	0xbbdc8	0x6b
InternetOpenW	0x0	0x48f784	0xbc9cc	0xbbdcc	0x9a
InternetSetOptionW	0x0	0x48f788	0xbc9d0	0xbbdd0	0xaf
InternetCrackUrlW	0x0	0x48f78c	0xbc9d4	0xbbdd4	0x74
HttpQueryInfoW	0x0	0x48f790	0xbc9d8	0xbbdd8	0x5a
InternetQueryOptionW	0x0	0x48f794	0xbc9dc	0xbbddc	0x9e
HttpOpenRequestW	0x0	0x48f798	0xbc9e0	0xbbde0	0x58
HttpSendRequestW	0x0	0x48f79c	0xbc9e4	0xbbde4	0x5e
FtpOpenFileW	0x0	0x48f7a0	0xbc9e8	0xbbde8	0x35
FtpGetFileSize	0x0	0x48f7a4	0xbc9ec	0xbbdec	0x32
InternetOpenUrlW	0x0	0x48f7a8	0xbc9f0	0xbbdf0	0x99
InternetReadFile	0x0	0x48f7ac	0xbc9f4	0xbbdf4	0x9f
InternetConnectW	0x0	0x48f7b0	0xbc9f8	0xbbdf8	0x72

PSAPI.DLL (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetProcessMemoryInfo	0x0	0x48f484	0xbc6cc	0xbbacc	0x15

IPHLPAPI.DLL (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
IcmpCreateFile	0x0	0x48f154	0xbc39c	0xbb79c	0x85
IcmpCloseHandle	0x0	0x48f158	0xbc3a0	0xbb7a0	0x84
IcmpSendEcho	0x0	0x48f15c	0xbc3a4	0xbb7a4	0x87

USERENV.dll (4)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
DestroyEnvironmentBlock	0x0	0x48f750	0xbc998	0xbbd98	0x4
UnloadUserProfile	0x0	0x48f754	0xbc99c	0xbbd9c	0x2c
CreateEnvironmentBlock	0x0	0x48f758	0xbc9a0	0xbbda0	0x0
LoadUserProfileW	0x0	0x48f75c	0xbc9a4	0xbbda4	0x21

UxTheme.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
IsThemeActive	0x0	0x48f764	0xbc9ac	0xbbdac	0x3f

KERNEL32.dll (164)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
DuplicateHandle	0x0	0x48f164	0xbc3ac	0xbb7ac	0xe8
CreateThread	0x0	0x48f168	0xbc3b0	0xbb7b0	0xb5
WaitForSingleObject	0x0	0x48f16c	0xbc3b4	0xbb7b4	0x4f9
HeapAlloc	0x0	0x48f170	0xbc3b8	0xbb7b8	0x2cb
GetProcessHeap	0x0	0x48f174	0xbc3bc	0xbb7bc	0x24a
HeapFree	0x0	0x48f178	0xbc3c0	0xbb7c0	0x2cf
Sleep	0x0	0x48f17c	0xbc3c4	0xbb7c4	0x4b2
GetCurrentThreadId	0x0	0x48f180	0xbc3c8	0xbb7c8	0x1c5
MultiByteToWideChar	0x0	0x48f184	0xbc3cc	0xbb7cc	0x367
MulDiv	0x0	0x48f188	0xbc3d0	0xbb7d0	0x366
GetVersionExW	0x0	0x48f18c	0xbc3d4	0xbb7d4	0x2a4
IsWow64Process	0x0	0x48f190	0xbc3d8	0xbb7d8	0x30e
GetSystemInfo	0x0	0x48f194	0xbc3dc	0xbb7dc	0x273
FreeLibrary	0x0	0x48f198	0xbc3e0	0xbb7e0	0x162
LoadLibraryA	0x0	0x48f19c	0xbc3e4	0xbb7e4	0x33c
GetProcAddress	0x0	0x48f1a0	0xbc3e8	0xbb7e8	0x245
SetErrorMode	0x0	0x48f1a4	0xbc3ec	0xbb7ec	0x458
GetModuleFileNameW	0x0	0x48f1a8	0xbc3f0	0xbb7f0	0x214
WideCharToMultiByte	0x0	0x48f1ac	0xbc3f4	0xbb7f4	0x511
lstrcpyW	0x0	0x48f1b0	0xbc3f8	0xbb7f8	0x548
lstrlenW	0x0	0x48f1b4	0xbc3fc	0xbb7fc	0x54e
GetModuleHandleW	0x0	0x48f1b8	0xbc400	0xbb800	0x218
QueryPerformanceCounter	0x0	0x48f1bc	0xbc404	0xbb804	0x3a7
VirtualFreeEx	0x0	0x48f1c0	0xbc408	0xbb808	0x4ed
OpenProcess	0x0	0x48f1c4	0xbc40c	0xbb80c	0x380
VirtualAllocEx	0x0	0x48f1c8	0xbc410	0xbb810	0x4ea
WriteProcessMemory	0x0	0x48f1cc	0xbc414	0xbb814	0x52e
ReadProcessMemory	0x0	0x48f1d0	0xbc418	0xbb818	0x3c3
CreateFileW	0x0	0x48f1d4	0xbc41c	0xbb81c	0x8f
SetFilePointerEx	0x0	0x48f1d8	0xbc420	0xbb820	0x467
SetEndOfFile	0x0	0x48f1dc	0xbc424	0xbb824	0x453
ReadFile	0x0	0x48f1e0	0xbc428	0xbb828	0x3c0
WriteFile	0x0	0x48f1e4	0xbc42c	0xbb82c	0x525
FlushFileBuffers	0x0	0x48f1e8	0xbc430	0xbb830	0x157
TerminateProcess	0x0	0x48f1ec	0xbc434	0xbb834	0x4c0
CreateToolhelp32Snapshot	0x0	0x48f1f0	0xbc438	0xbb838	0xbe
Process32FirstW	0x0	0x48f1f4	0xbc43c	0xbb83c	0x396
Process32NextW	0x0	0x48f1f8	0xbc440	0xbb840	0x398
SetFileTime	0x0	0x48f1fc	0xbc444	0xbb844	0x46a
GetFileAttributesW	0x0	0x48f200	0xbc448	0xbb848	0x1ea
FindFirstFileW	0x0	0x48f204	0xbc44c	0xbb84c	0x139
SetCurrentDirectoryW	0x0	0x48f208	0xbc450	0xbb850	0x44d
GetLongPathNameW	0x0	0x48f20c	0xbc454	0xbb854	0x20f
GetShortPathNameW	0x0	0x48f210	0xbc458	0xbb858	0x261
DeleteFileW	0x0	0x48f214	0xbc45c	0xbb85c	0xd6
FindNextFileW	0x0	0x48f218	0xbc460	0xbb860	0x145
CopyFileExW	0x0	0x48f21c	0xbc464	0xbb864	0x72
MoveFileW	0x0	0x48f220	0xbc468	0xbb868	0x363
CreateDirectoryW	0x0	0x48f224	0xbc46c	0xbb86c	0x81
RemoveDirectoryW	0x0	0x48f228	0xbc470	0xbb870	0x403
SetSystemPowerState	0x0	0x48f22c	0xbc474	0xbb874	0x48a
QueryPerformanceFrequency	0x0	0x48f230	0xbc478	0xbb878	0x3a8
FindResourceW	0x0	0x48f234	0xbc47c	0xbb87c	0x14e
LoadResource	0x0	0x48f238	0xbc480	0xbb880	0x341
LockResource	0x0	0x48f23c	0xbc484	0xbb884	0x354
SizeofResource	0x0	0x48f240	0xbc488	0xbb888	0x4b1
EnumResourceNamesW	0x0	0x48f244	0xbc48c	0xbb88c	0x102
OutputDebugStringW	0x0	0x48f248	0xbc490	0xbb890	0x38a
GetTempPathW	0x0	0x48f24c	0xbc494	0xbb894	0x285
GetTempFileNameW	0x0	0x48f250	0xbc498	0xbb898	0x283
DeviceIoControl	0x0	0x48f254	0xbc49c	0xbb89c	0xdd
GetLocalTime	0x0	0x48f258	0xbc4a0	0xbb8a0	0x203
CompareStringW	0x0	0x48f25c	0xbc4a4	0xbb8a4	0x64
GetCurrentProcess	0x0	0x48f260	0xbc4a8	0xbb8a8	0x1c0
EnterCriticalSection	0x0	0x48f264	0xbc4ac	0xbb8ac	0xee
LeaveCriticalSection	0x0	0x48f268	0xbc4b0	0xbb8b0	0x339
GetStdHandle	0x0	0x48f26c	0xbc4b4	0xbb8b4	0x264
CreatePipe	0x0	0x48f270	0xbc4b8	0xbb8b8	0xa1
InterlockedExchange	0x0	0x48f274	0xbc4bc	0xbb8bc	0x2ec
TerminateThread	0x0	0x48f278	0xbc4c0	0xbb8c0	0x4c1
LoadLibraryExW	0x0	0x48f27c	0xbc4c4	0xbb8c4	0x33e
FindResourceExW	0x0	0x48f280	0xbc4c8	0xbb8c8	0x14d
CopyFileW	0x0	0x48f284	0xbc4cc	0xbb8cc	0x75
VirtualFree	0x0	0x48f288	0xbc4d0	0xbb8d0	0x4ec
FormatMessageW	0x0	0x48f28c	0xbc4d4	0xbb8d4	0x15e
GetExitCodeProcess	0x0	0x48f290	0xbc4d8	0xbb8d8	0x1df
GetPrivateProfileStringW	0x0	0x48f294	0xbc4dc	0xbb8dc	0x242
WritePrivateProfileStringW	0x0	0x48f298	0xbc4e0	0xbb8e0	0x52b
GetPrivateProfileSectionW	0x0	0x48f29c	0xbc4e4	0xbb8e4	0x240
WritePrivateProfileSectionW	0x0	0x48f2a0	0xbc4e8	0xbb8e8	0x529
GetPrivateProfileSectionNamesW	0x0	0x48f2a4	0xbc4ec	0xbb8ec	0x23f
FileTimeToLocalFileTime	0x0	0x48f2a8	0xbc4f0	0xbb8f0	0x124
FileTimeToSystemTime	0x0	0x48f2ac	0xbc4f4	0xbb8f4	0x125
SystemTimeToFileTime	0x0	0x48f2b0	0xbc4f8	0xbb8f8	0x4bd
LocalFileTimeToFileTime	0x0	0x48f2b4	0xbc4fc	0xbb8fc	0x346
GetDriveTypeW	0x0	0x48f2b8	0xbc500	0xbb900	0x1d3
GetDiskFreeSpaceExW	0x0	0x48f2bc	0xbc504	0xbb904	0x1ce
GetDiskFreeSpaceW	0x0	0x48f2c0	0xbc508	0xbb908	0x1cf
GetVolumeInformationW	0x0	0x48f2c4	0xbc50c	0xbb90c	0x2a7
SetVolumeLabelW	0x0	0x48f2c8	0xbc510	0xbb910	0x4a9
CreateHardLinkW	0x0	0x48f2cc	0xbc514	0xbb914	0x93
SetFileAttributesW	0x0	0x48f2d0	0xbc518	0xbb918	0x461
CreateEventW	0x0	0x48f2d4	0xbc51c	0xbb91c	0x85
SetEvent	0x0	0x48f2d8	0xbc520	0xbb920	0x459
GetEnvironmentVariableW	0x0	0x48f2dc	0xbc524	0xbb924	0x1dc
SetEnvironmentVariableW	0x0	0x48f2e0	0xbc528	0xbb928	0x457
GlobalLock	0x0	0x48f2e4	0xbc52c	0xbb92c	0x2be
GlobalUnlock	0x0	0x48f2e8	0xbc530	0xbb930	0x2c5
GlobalAlloc	0x0	0x48f2ec	0xbc534	0xbb934	0x2b3
GetFileSize	0x0	0x48f2f0	0xbc538	0xbb938	0x1f0
GlobalFree	0x0	0x48f2f4	0xbc53c	0xbb93c	0x2ba
GlobalMemoryStatusEx	0x0	0x48f2f8	0xbc540	0xbb940	0x2c0
Beep	0x0	0x48f2fc	0xbc544	0xbb944	0x36
GetSystemDirectoryW	0x0	0x48f300	0xbc548	0xbb948	0x270
HeapReAlloc	0x0	0x48f304	0xbc54c	0xbb94c	0x2d2
HeapSize	0x0	0x48f308	0xbc550	0xbb950	0x2d4
GetComputerNameW	0x0	0x48f30c	0xbc554	0xbb954	0x18f
GetWindowsDirectoryW	0x0	0x48f310	0xbc558	0xbb958	0x2af
GetCurrentProcessId	0x0	0x48f314	0xbc55c	0xbb95c	0x1c1
GetProcessIoCounters	0x0	0x48f318	0xbc560	0xbb960	0x24e
CreateProcessW	0x0	0x48f31c	0xbc564	0xbb964	0xa8
GetProcessId	0x0	0x48f320	0xbc568	0xbb968	0x24c
SetPriorityClass	0x0	0x48f324	0xbc56c	0xbb96c	0x47d
LoadLibraryW	0x0	0x48f328	0xbc570	0xbb970	0x33f
VirtualAlloc	0x0	0x48f32c	0xbc574	0xbb974	0x4e9
IsDebuggerPresent	0x0	0x48f330	0xbc578	0xbb978	0x300
GetCurrentDirectoryW	0x0	0x48f334	0xbc57c	0xbb97c	0x1bf
lstrcmpiW	0x0	0x48f338	0xbc580	0xbb980	0x545
DecodePointer	0x0	0x48f33c	0xbc584	0xbb984	0xca
GetLastError	0x0	0x48f340	0xbc588	0xbb988	0x202
RaiseException	0x0	0x48f344	0xbc58c	0xbb98c	0x3b1
InitializeCriticalSectionAndSpinCount	0x0	0x48f348	0xbc590	0xbb990	0x2e3
DeleteCriticalSection	0x0	0x48f34c	0xbc594	0xbb994	0xd1
InterlockedDecrement	0x0	0x48f350	0xbc598	0xbb998	0x2eb
InterlockedIncrement	0x0	0x48f354	0xbc59c	0xbb99c	0x2ef
GetCurrentThread	0x0	0x48f358	0xbc5a0	0xbb9a0	0x1c4
CloseHandle	0x0	0x48f35c	0xbc5a4	0xbb9a4	0x52
GetFullPathNameW	0x0	0x48f360	0xbc5a8	0xbb9a8	0x1fb
EncodePointer	0x0	0x48f364	0xbc5ac	0xbb9ac	0xea
ExitProcess	0x0	0x48f368	0xbc5b0	0xbb9b0	0x119
GetModuleHandleExW	0x0	0x48f36c	0xbc5b4	0xbb9b4	0x217
ExitThread	0x0	0x48f370	0xbc5b8	0xbb9b8	0x11a
GetSystemTimeAsFileTime	0x0	0x48f374	0xbc5bc	0xbb9bc	0x279
ResumeThread	0x0	0x48f378	0xbc5c0	0xbb9c0	0x413
GetCommandLineW	0x0	0x48f37c	0xbc5c4	0xbb9c4	0x187
IsProcessorFeaturePresent	0x0	0x48f380	0xbc5c8	0xbb9c8	0x304
IsValidCodePage	0x0	0x48f384	0xbc5cc	0xbb9cc	0x30a
GetACP	0x0	0x48f388	0xbc5d0	0xbb9d0	0x168
GetOEMCP	0x0	0x48f38c	0xbc5d4	0xbb9d4	0x237
GetCPInfo	0x0	0x48f390	0xbc5d8	0xbb9d8	0x172
SetLastError	0x0	0x48f394	0xbc5dc	0xbb9dc	0x473
UnhandledExceptionFilter	0x0	0x48f398	0xbc5e0	0xbb9e0	0x4d3
SetUnhandledExceptionFilter	0x0	0x48f39c	0xbc5e4	0xbb9e4	0x4a5
TlsAlloc	0x0	0x48f3a0	0xbc5e8	0xbb9e8	0x4c5
TlsGetValue	0x0	0x48f3a4	0xbc5ec	0xbb9ec	0x4c7
TlsSetValue	0x0	0x48f3a8	0xbc5f0	0xbb9f0	0x4c8
TlsFree	0x0	0x48f3ac	0xbc5f4	0xbb9f4	0x4c6
GetStartupInfoW	0x0	0x48f3b0	0xbc5f8	0xbb9f8	0x263
GetStringTypeW	0x0	0x48f3b4	0xbc5fc	0xbb9fc	0x269
SetStdHandle	0x0	0x48f3b8	0xbc600	0xbba00	0x487
GetFileType	0x0	0x48f3bc	0xbc604	0xbba04	0x1f3
GetConsoleCP	0x0	0x48f3c0	0xbc608	0xbba08	0x19a
GetConsoleMode	0x0	0x48f3c4	0xbc60c	0xbba0c	0x1ac
RtlUnwind	0x0	0x48f3c8	0xbc610	0xbba10	0x418
ReadConsoleW	0x0	0x48f3cc	0xbc614	0xbba14	0x3be
GetTimeZoneInformation	0x0	0x48f3d0	0xbc618	0xbba18	0x298
GetDateFormatW	0x0	0x48f3d4	0xbc61c	0xbba1c	0x1c8
GetTimeFormatW	0x0	0x48f3d8	0xbc620	0xbba20	0x297
LCMapStringW	0x0	0x48f3dc	0xbc624	0xbba24	0x32d
GetEnvironmentStringsW	0x0	0x48f3e0	0xbc628	0xbba28	0x1da
FreeEnvironmentStringsW	0x0	0x48f3e4	0xbc62c	0xbba2c	0x161
WriteConsoleW	0x0	0x48f3e8	0xbc630	0xbba30	0x524
FindClose	0x0	0x48f3ec	0xbc634	0xbba34	0x12e
SetEnvironmentVariableA	0x0	0x48f3f0	0xbc638	0xbba38	0x456

USER32.dll (160)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
AdjustWindowRectEx	0x0	0x48f4cc	0xbc714	0xbbb14	0x3
CopyImage	0x0	0x48f4d0	0xbc718	0xbbb18	0x54
SetWindowPos	0x0	0x48f4d4	0xbc71c	0xbbb1c	0x2c6
GetCursorInfo	0x0	0x48f4d8	0xbc720	0xbbb20	0x11f
RegisterHotKey	0x0	0x48f4dc	0xbc724	0xbbb24	0x256
ClientToScreen	0x0	0x48f4e0	0xbc728	0xbbb28	0x47
GetKeyboardLayoutNameW	0x0	0x48f4e4	0xbc72c	0xbbb2c	0x141
IsCharAlphaW	0x0	0x48f4e8	0xbc730	0xbbb30	0x1c4
IsCharAlphaNumericW	0x0	0x48f4ec	0xbc734	0xbbb34	0x1c3
IsCharLowerW	0x0	0x48f4f0	0xbc738	0xbbb38	0x1c6
IsCharUpperW	0x0	0x48f4f4	0xbc73c	0xbbb3c	0x1c8
GetMenuStringW	0x0	0x48f4f8	0xbc740	0xbbb40	0x158
GetSubMenu	0x0	0x48f4fc	0xbc744	0xbbb44	0x17a
GetCaretPos	0x0	0x48f500	0xbc748	0xbbb48	0x10a
IsZoomed	0x0	0x48f504	0xbc74c	0xbbb4c	0x1e2
MonitorFromPoint	0x0	0x48f508	0xbc750	0xbbb50	0x218
GetMonitorInfoW	0x0	0x48f50c	0xbc754	0xbbb54	0x15f
SetWindowLongW	0x0	0x48f510	0xbc758	0xbbb58	0x2c4
SetLayeredWindowAttributes	0x0	0x48f514	0xbc75c	0xbbb5c	0x298
FlashWindow	0x0	0x48f518	0xbc760	0xbbb60	0xfb
GetClassLongW	0x0	0x48f51c	0xbc764	0xbbb64	0x110
TranslateAcceleratorW	0x0	0x48f520	0xbc768	0xbbb68	0x2fa
IsDialogMessageW	0x0	0x48f524	0xbc76c	0xbbb6c	0x1cd
GetSysColor	0x0	0x48f528	0xbc770	0xbbb70	0x17b
InflateRect	0x0	0x48f52c	0xbc774	0xbbb74	0x1b5
DrawFocusRect	0x0	0x48f530	0xbc778	0xbbb78	0xc4
DrawTextW	0x0	0x48f534	0xbc77c	0xbbb7c	0xd0
FrameRect	0x0	0x48f538	0xbc780	0xbbb80	0xfd
DrawFrameControl	0x0	0x48f53c	0xbc784	0xbbb84	0xc6
FillRect	0x0	0x48f540	0xbc788	0xbbb88	0xf6
PtInRect	0x0	0x48f544	0xbc78c	0xbbb8c	0x240
DestroyAcceleratorTable	0x0	0x48f548	0xbc790	0xbbb90	0xa0
CreateAcceleratorTableW	0x0	0x48f54c	0xbc794	0xbbb94	0x58
SetCursor	0x0	0x48f550	0xbc798	0xbbb98	0x288
GetWindowDC	0x0	0x48f554	0xbc79c	0xbbb9c	0x192
GetSystemMetrics	0x0	0x48f558	0xbc7a0	0xbbba0	0x17e
GetActiveWindow	0x0	0x48f55c	0xbc7a4	0xbbba4	0x100
CharNextW	0x0	0x48f560	0xbc7a8	0xbbba8	0x31
wsprintfW	0x0	0x48f564	0xbc7ac	0xbbbac	0x333
RedrawWindow	0x0	0x48f568	0xbc7b0	0xbbbb0	0x24a
DrawMenuBar	0x0	0x48f56c	0xbc7b4	0xbbbb4	0xc9
DestroyMenu	0x0	0x48f570	0xbc7b8	0xbbbb8	0xa4
SetMenu	0x0	0x48f574	0xbc7bc	0xbbbbc	0x29c
GetWindowTextLengthW	0x0	0x48f578	0xbc7c0	0xbbbc0	0x1a2
CreateMenu	0x0	0x48f57c	0xbc7c4	0xbbbc4	0x6a
IsDlgButtonChecked	0x0	0x48f580	0xbc7c8	0xbbbc8	0x1ce
DefDlgProcW	0x0	0x48f584	0xbc7cc	0xbbbcc	0x95
CallWindowProcW	0x0	0x48f588	0xbc7d0	0xbbbd0	0x1e
ReleaseCapture	0x0	0x48f58c	0xbc7d4	0xbbbd4	0x264
SetCapture	0x0	0x48f590	0xbc7d8	0xbbbd8	0x280
CreateIconFromResourceEx	0x0	0x48f594	0xbc7dc	0xbbbdc	0x66
mouse_event	0x0	0x48f598	0xbc7e0	0xbbbe0	0x331
ExitWindowsEx	0x0	0x48f59c	0xbc7e4	0xbbbe4	0xf5
SetActiveWindow	0x0	0x48f5a0	0xbc7e8	0xbbbe8	0x27f
FindWindowExW	0x0	0x48f5a4	0xbc7ec	0xbbbec	0xf9
EnumThreadWindows	0x0	0x48f5a8	0xbc7f0	0xbbbf0	0xef
SetMenuDefaultItem	0x0	0x48f5ac	0xbc7f4	0xbbbf4	0x29e
InsertMenuItemW	0x0	0x48f5b0	0xbc7f8	0xbbbf8	0x1b9
IsMenu	0x0	0x48f5b4	0xbc7fc	0xbbbfc	0x1d2
TrackPopupMenuEx	0x0	0x48f5b8	0xbc800	0xbbc00	0x2f7
GetCursorPos	0x0	0x48f5bc	0xbc804	0xbbc04	0x120
DeleteMenu	0x0	0x48f5c0	0xbc808	0xbbc08	0x9e
SetRect	0x0	0x48f5c4	0xbc80c	0xbbc0c	0x2ae
GetMenuItemID	0x0	0x48f5c8	0xbc810	0xbbc10	0x152
GetMenuItemCount	0x0	0x48f5cc	0xbc814	0xbbc14	0x151
SetMenuItemInfoW	0x0	0x48f5d0	0xbc818	0xbbc18	0x2a2
GetMenuItemInfoW	0x0	0x48f5d4	0xbc81c	0xbbc1c	0x154
SetForegroundWindow	0x0	0x48f5d8	0xbc820	0xbbc20	0x293
IsIconic	0x0	0x48f5dc	0xbc824	0xbbc24	0x1d1
FindWindowW	0x0	0x48f5e0	0xbc828	0xbbc28	0xfa
MonitorFromRect	0x0	0x48f5e4	0xbc82c	0xbbc2c	0x219
keybd_event	0x0	0x48f5e8	0xbc830	0xbbc30	0x330
SendInput	0x0	0x48f5ec	0xbc834	0xbbc34	0x276
GetAsyncKeyState	0x0	0x48f5f0	0xbc838	0xbbc38	0x107
SetKeyboardState	0x0	0x48f5f4	0xbc83c	0xbbc3c	0x296
GetKeyboardState	0x0	0x48f5f8	0xbc840	0xbbc40	0x142
GetKeyState	0x0	0x48f5fc	0xbc844	0xbbc44	0x13d
VkKeyScanW	0x0	0x48f600	0xbc848	0xbbc48	0x321
LoadStringW	0x0	0x48f604	0xbc84c	0xbbc4c	0x1fa
DialogBoxParamW	0x0	0x48f608	0xbc850	0xbbc50	0xac
MessageBeep	0x0	0x48f60c	0xbc854	0xbbc54	0x20d
EndDialog	0x0	0x48f610	0xbc858	0xbbc58	0xda
SendDlgItemMessageW	0x0	0x48f614	0xbc85c	0xbbc5c	0x273
GetDlgItem	0x0	0x48f618	0xbc860	0xbbc60	0x127
SetWindowTextW	0x0	0x48f61c	0xbc864	0xbbc64	0x2cb
CopyRect	0x0	0x48f620	0xbc868	0xbbc68	0x55
ReleaseDC	0x0	0x48f624	0xbc86c	0xbbc6c	0x265
GetDC	0x0	0x48f628	0xbc870	0xbbc70	0x121
EndPaint	0x0	0x48f62c	0xbc874	0xbbc74	0xdc
BeginPaint	0x0	0x48f630	0xbc878	0xbbc78	0xe
GetClientRect	0x0	0x48f634	0xbc87c	0xbbc7c	0x114
GetMenu	0x0	0x48f638	0xbc880	0xbbc80	0x14b
DestroyWindow	0x0	0x48f63c	0xbc884	0xbbc84	0xa6
EnumWindows	0x0	0x48f640	0xbc888	0xbbc88	0xf2
GetDesktopWindow	0x0	0x48f644	0xbc88c	0xbbc8c	0x123
IsWindow	0x0	0x48f648	0xbc890	0xbbc90	0x1db
IsWindowEnabled	0x0	0x48f64c	0xbc894	0xbbc94	0x1dc
IsWindowVisible	0x0	0x48f650	0xbc898	0xbbc98	0x1e0
EnableWindow	0x0	0x48f654	0xbc89c	0xbbc9c	0xd8
InvalidateRect	0x0	0x48f658	0xbc8a0	0xbbca0	0x1be
GetWindowLongW	0x0	0x48f65c	0xbc8a4	0xbbca4	0x196
GetWindowThreadProcessId	0x0	0x48f660	0xbc8a8	0xbbca8	0x1a4
AttachThreadInput	0x0	0x48f664	0xbc8ac	0xbbcac	0xc
GetFocus	0x0	0x48f668	0xbc8b0	0xbbcb0	0x12c
GetWindowTextW	0x0	0x48f66c	0xbc8b4	0xbbcb4	0x1a3
ScreenToClient	0x0	0x48f670	0xbc8b8	0xbbcb8	0x26d
SendMessageTimeoutW	0x0	0x48f674	0xbc8bc	0xbbcbc	0x27b
EnumChildWindows	0x0	0x48f678	0xbc8c0	0xbbcc0	0xdf
CharUpperBuffW	0x0	0x48f67c	0xbc8c4	0xbbcc4	0x3b
GetParent	0x0	0x48f680	0xbc8c8	0xbbcc8	0x164
GetDlgCtrlID	0x0	0x48f684	0xbc8cc	0xbbccc	0x126
SendMessageW	0x0	0x48f688	0xbc8d0	0xbbcd0	0x27c
MapVirtualKeyW	0x0	0x48f68c	0xbc8d4	0xbbcd4	0x208
PostMessageW	0x0	0x48f690	0xbc8d8	0xbbcd8	0x236
GetWindowRect	0x0	0x48f694	0xbc8dc	0xbbcdc	0x19c
SetUserObjectSecurity	0x0	0x48f698	0xbc8e0	0xbbce0	0x2be
CloseDesktop	0x0	0x48f69c	0xbc8e4	0xbbce4	0x4a
CloseWindowStation	0x0	0x48f6a0	0xbc8e8	0xbbce8	0x4e
OpenDesktopW	0x0	0x48f6a4	0xbc8ec	0xbbcec	0x228
SetProcessWindowStation	0x0	0x48f6a8	0xbc8f0	0xbbcf0	0x2aa
GetProcessWindowStation	0x0	0x48f6ac	0xbc8f4	0xbbcf4	0x168
OpenWindowStationW	0x0	0x48f6b0	0xbc8f8	0xbbcf8	0x22d
GetUserObjectSecurity	0x0	0x48f6b4	0xbc8fc	0xbbcfc	0x18c
MessageBoxW	0x0	0x48f6b8	0xbc900	0xbbd00	0x215
DefWindowProcW	0x0	0x48f6bc	0xbc904	0xbbd04	0x9c
SetClipboardData	0x0	0x48f6c0	0xbc908	0xbbd08	0x286
EmptyClipboard	0x0	0x48f6c4	0xbc90c	0xbbd0c	0xd5
CountClipboardFormats	0x0	0x48f6c8	0xbc910	0xbbd10	0x56
CloseClipboard	0x0	0x48f6cc	0xbc914	0xbbd14	0x49
GetClipboardData	0x0	0x48f6d0	0xbc918	0xbbd18	0x116
IsClipboardFormatAvailable	0x0	0x48f6d4	0xbc91c	0xbbd1c	0x1ca
OpenClipboard	0x0	0x48f6d8	0xbc920	0xbbd20	0x226
BlockInput	0x0	0x48f6dc	0xbc924	0xbbd24	0xf
GetMessageW	0x0	0x48f6e0	0xbc928	0xbbd28	0x15d
LockWindowUpdate	0x0	0x48f6e4	0xbc92c	0xbbd2c	0x1fd
DispatchMessageW	0x0	0x48f6e8	0xbc930	0xbbd30	0xaf
TranslateMessage	0x0	0x48f6ec	0xbc934	0xbbd34	0x2fc
PeekMessageW	0x0	0x48f6f0	0xbc938	0xbbd38	0x233
UnregisterHotKey	0x0	0x48f6f4	0xbc93c	0xbbd3c	0x308
CheckMenuRadioItem	0x0	0x48f6f8	0xbc940	0xbbd40	0x40
CharLowerBuffW	0x0	0x48f6fc	0xbc944	0xbbd44	0x2d
MoveWindow	0x0	0x48f700	0xbc948	0xbbd48	0x21b
SetFocus	0x0	0x48f704	0xbc94c	0xbbd4c	0x292
PostQuitMessage	0x0	0x48f708	0xbc950	0xbbd50	0x237
KillTimer	0x0	0x48f70c	0xbc954	0xbbd54	0x1e3
CreatePopupMenu	0x0	0x48f710	0xbc958	0xbbd58	0x6b
RegisterWindowMessageW	0x0	0x48f714	0xbc95c	0xbbd5c	0x263
SetTimer	0x0	0x48f718	0xbc960	0xbbd60	0x2bb
ShowWindow	0x0	0x48f71c	0xbc964	0xbbd64	0x2df
CreateWindowExW	0x0	0x48f720	0xbc968	0xbbd68	0x6e
RegisterClassExW	0x0	0x48f724	0xbc96c	0xbbd6c	0x24d
LoadIconW	0x0	0x48f728	0xbc970	0xbbd70	0x1ed
LoadCursorW	0x0	0x48f72c	0xbc974	0xbbd74	0x1eb
GetSysColorBrush	0x0	0x48f730	0xbc978	0xbbd78	0x17c
GetForegroundWindow	0x0	0x48f734	0xbc97c	0xbbd7c	0x12d
MessageBoxA	0x0	0x48f738	0xbc980	0xbbd80	0x20e
DestroyIcon	0x0	0x48f73c	0xbc984	0xbbd84	0xa3
SystemParametersInfoW	0x0	0x48f740	0xbc988	0xbbd88	0x2ec
LoadImageW	0x0	0x48f744	0xbc98c	0xbbd8c	0x1ef
GetClassNameW	0x0	0x48f748	0xbc990	0xbbd90	0x112

GDI32.dll (35)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
StrokePath	0x0	0x48f0c4	0xbc30c	0xbb70c	0x2b6
DeleteObject	0x0	0x48f0c8	0xbc310	0xbb710	0xe6
GetTextExtentPoint32W	0x0	0x48f0cc	0xbc314	0xbb714	0x21e
ExtCreatePen	0x0	0x48f0d0	0xbc318	0xbb718	0x132
GetDeviceCaps	0x0	0x48f0d4	0xbc31c	0xbb71c	0x1cb
EndPath	0x0	0x48f0d8	0xbc320	0xbb720	0xf3
SetPixel	0x0	0x48f0dc	0xbc324	0xbb724	0x29b
CloseFigure	0x0	0x48f0e0	0xbc328	0xbb728	0x1e
CreateCompatibleBitmap	0x0	0x48f0e4	0xbc32c	0xbb72c	0x2f
CreateCompatibleDC	0x0	0x48f0e8	0xbc330	0xbb730	0x30
SelectObject	0x0	0x48f0ec	0xbc334	0xbb734	0x277
StretchBlt	0x0	0x48f0f0	0xbc338	0xbb738	0x2b3
GetDIBits	0x0	0x48f0f4	0xbc33c	0xbb73c	0x1ca
LineTo	0x0	0x48f0f8	0xbc340	0xbb740	0x236
AngleArc	0x0	0x48f0fc	0xbc344	0xbb744	0x8
MoveToEx	0x0	0x48f100	0xbc348	0xbb748	0x23a
Ellipse	0x0	0x48f104	0xbc34c	0xbb74c	0xed
DeleteDC	0x0	0x48f108	0xbc350	0xbb750	0xe3
GetPixel	0x0	0x48f10c	0xbc354	0xbb754	0x204
CreateDCW	0x0	0x48f110	0xbc358	0xbb758	0x32
GetStockObject	0x0	0x48f114	0xbc35c	0xbb75c	0x20d
GetTextFaceW	0x0	0x48f118	0xbc360	0xbb760	0x224
CreateFontW	0x0	0x48f11c	0xbc364	0xbb764	0x41
SetTextColor	0x0	0x48f120	0xbc368	0xbb768	0x2a6
PolyDraw	0x0	0x48f124	0xbc36c	0xbb76c	0x250
BeginPath	0x0	0x48f128	0xbc370	0xbb770	0x12
Rectangle	0x0	0x48f12c	0xbc374	0xbb774	0x25f
SetViewportOrgEx	0x0	0x48f130	0xbc378	0xbb778	0x2a9
GetObjectW	0x0	0x48f134	0xbc37c	0xbb77c	0x1fd
SetBkMode	0x0	0x48f138	0xbc380	0xbb780	0x27f
RoundRect	0x0	0x48f13c	0xbc384	0xbb784	0x26a
SetBkColor	0x0	0x48f140	0xbc388	0xbb788	0x27e
CreatePen	0x0	0x48f144	0xbc38c	0xbb78c	0x4b
CreateSolidBrush	0x0	0x48f148	0xbc390	0xbb790	0x54
StrokeAndFillPath	0x0	0x48f14c	0xbc394	0xbb794	0x2b5

COMDLG32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetOpenFileNameW	0x0	0x48f0b8	0xbc300	0xbb700	0xc
GetSaveFileNameW	0x0	0x48f0bc	0xbc304	0xbb704	0xe

ADVAPI32.dll (33)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetAce	0x0	0x48f000	0xbc248	0xbb648	0x123
RegEnumValueW	0x0	0x48f004	0xbc24c	0xbb64c	0x252
RegDeleteValueW	0x0	0x48f008	0xbc250	0xbb650	0x248
RegDeleteKeyW	0x0	0x48f00c	0xbc254	0xbb654	0x244
RegEnumKeyExW	0x0	0x48f010	0xbc258	0xbb658	0x24f
RegSetValueExW	0x0	0x48f014	0xbc25c	0xbb65c	0x27e
RegOpenKeyExW	0x0	0x48f018	0xbc260	0xbb660	0x261
RegCloseKey	0x0	0x48f01c	0xbc264	0xbb664	0x230
RegQueryValueExW	0x0	0x48f020	0xbc268	0xbb668	0x26e
RegConnectRegistryW	0x0	0x48f024	0xbc26c	0xbb66c	0x234
InitializeSecurityDescriptor	0x0	0x48f028	0xbc270	0xbb670	0x177
InitializeAcl	0x0	0x48f02c	0xbc274	0xbb674	0x176
AdjustTokenPrivileges	0x0	0x48f030	0xbc278	0xbb678	0x1f
OpenThreadToken	0x0	0x48f034	0xbc27c	0xbb67c	0x1fc
OpenProcessToken	0x0	0x48f038	0xbc280	0xbb680	0x1f7
LookupPrivilegeValueW	0x0	0x48f03c	0xbc284	0xbb684	0x197
DuplicateTokenEx	0x0	0x48f040	0xbc288	0xbb688	0xdf
CreateProcessAsUserW	0x0	0x48f044	0xbc28c	0xbb68c	0x7c
CreateProcessWithLogonW	0x0	0x48f048	0xbc290	0xbb690	0x7d
GetLengthSid	0x0	0x48f04c	0xbc294	0xbb694	0x136
CopySid	0x0	0x48f050	0xbc298	0xbb698	0x76
LogonUserW	0x0	0x48f054	0xbc29c	0xbb69c	0x18d
AllocateAndInitializeSid	0x0	0x48f058	0xbc2a0	0xbb6a0	0x20
CheckTokenMembership	0x0	0x48f05c	0xbc2a4	0xbb6a4	0x51
RegCreateKeyExW	0x0	0x48f060	0xbc2a8	0xbb6a8	0x239
FreeSid	0x0	0x48f064	0xbc2ac	0xbb6ac	0x120
GetTokenInformation	0x0	0x48f068	0xbc2b0	0xbb6b0	0x15a
GetSecurityDescriptorDacl	0x0	0x48f06c	0xbc2b4	0xbb6b4	0x148
GetAclInformation	0x0	0x48f070	0xbc2b8	0xbb6b8	0x124
AddAce	0x0	0x48f074	0xbc2bc	0xbb6bc	0x16
SetSecurityDescriptorDacl	0x0	0x48f078	0xbc2c0	0xbb6c0	0x2b6
GetUserNameW	0x0	0x48f07c	0xbc2c4	0xbb6c4	0x165
InitiateSystemShutdownExW	0x0	0x48f080	0xbc2c8	0xbb6c8	0x17d

SHELL32.dll (15)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
DragQueryPoint	0x0	0x48f48c	0xbc6d4	0xbbad4	0x20
ShellExecuteExW	0x0	0x48f490	0xbc6d8	0xbbad8	0x121
DragQueryFileW	0x0	0x48f494	0xbc6dc	0xbbadc	0x1f
SHEmptyRecycleBinW	0x0	0x48f498	0xbc6e0	0xbbae0	0xa5
SHGetPathFromIDListW	0x0	0x48f49c	0xbc6e4	0xbbae4	0xd7
SHBrowseForFolderW	0x0	0x48f4a0	0xbc6e8	0xbbae8	0x7b
SHCreateShellItem	0x0	0x48f4a4	0xbc6ec	0xbbaec	0x9a
SHGetDesktopFolder	0x0	0x48f4a8	0xbc6f0	0xbbaf0	0xb6
SHGetSpecialFolderLocation	0x0	0x48f4ac	0xbc6f4	0xbbaf4	0xdf
SHGetFolderPathW	0x0	0x48f4b0	0xbc6f8	0xbbaf8	0xc3
SHFileOperationW	0x0	0x48f4b4	0xbc6fc	0xbbafc	0xac
ExtractIconExW	0x0	0x48f4b8	0xbc700	0xbbb00	0x2a
Shell_NotifyIconW	0x0	0x48f4bc	0xbc704	0xbbb04	0x12e
ShellExecuteW	0x0	0x48f4c0	0xbc708	0xbbb08	0x122
DragFinish	0x0	0x48f4c4	0xbc70c	0xbbb0c	0x1b

ole32.dll (22)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CoTaskMemAlloc	0x0	0x48f828	0xbca70	0xbbe70	0x67
CoTaskMemFree	0x0	0x48f82c	0xbca74	0xbbe74	0x68
CLSIDFromString	0x0	0x48f830	0xbca78	0xbbe78	0x8
ProgIDFromCLSID	0x0	0x48f834	0xbca7c	0xbbe7c	0x14b
CLSIDFromProgID	0x0	0x48f838	0xbca80	0xbbe80	0x6
OleSetMenuDescriptor	0x0	0x48f83c	0xbca84	0xbbe84	0x147
MkParseDisplayName	0x0	0x48f840	0xbca88	0xbbe88	0xd4
OleSetContainedObject	0x0	0x48f844	0xbca8c	0xbbe8c	0x146
CoCreateInstance	0x0	0x48f848	0xbca90	0xbbe90	0x10
IIDFromString	0x0	0x48f84c	0xbca94	0xbbe94	0xcd
StringFromGUID2	0x0	0x48f850	0xbca98	0xbbe98	0x179
CreateStreamOnHGlobal	0x0	0x48f854	0xbca9c	0xbbe9c	0x86
OleInitialize	0x0	0x48f858	0xbcaa0	0xbbea0	0x132
OleUninitialize	0x0	0x48f85c	0xbcaa4	0xbbea4	0x149
CoInitialize	0x0	0x48f860	0xbcaa8	0xbbea8	0x3e
CoUninitialize	0x0	0x48f864	0xbcaac	0xbbeac	0x6c
GetRunningObjectTable	0x0	0x48f868	0xbcab0	0xbbeb0	0x97
CoGetInstanceFromFile	0x0	0x48f86c	0xbcab4	0xbbeb4	0x2d
CoGetObject	0x0	0x48f870	0xbcab8	0xbbeb8	0x35
CoSetProxyBlanket	0x0	0x48f874	0xbcabc	0xbbebc	0x63
CoCreateInstanceEx	0x0	0x48f878	0xbcac0	0xbbec0	0x11
CoInitializeSecurity	0x0	0x48f87c	0xbcac4	0xbbec4	0x40

OLEAUT32.dll (29)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
LoadTypeLibEx	0xb7	0x48f40c	0xbc654	0xbba54	-
VariantCopyInd	0xb	0x48f410	0xbc658	0xbba58	-
SysReAllocString	0x3	0x48f414	0xbc65c	0xbba5c	-
SysFreeString	0x6	0x48f418	0xbc660	0xbba60	-
SafeArrayDestroyDescriptor	0x26	0x48f41c	0xbc664	0xbba64	-
SafeArrayDestroyData	0x27	0x48f420	0xbc668	0xbba68	-
SafeArrayUnaccessData	0x18	0x48f424	0xbc66c	0xbba6c	-
SafeArrayAccessData	0x17	0x48f428	0xbc670	0xbba70	-
SafeArrayAllocData	0x25	0x48f42c	0xbc674	0xbba74	-
SafeArrayAllocDescriptorEx	0x29	0x48f430	0xbc678	0xbba78	-
SafeArrayCreateVector	0x19b	0x48f434	0xbc67c	0xbba7c	-
RegisterTypeLib	0xa3	0x48f438	0xbc680	0xbba80	-
CreateStdDispatch	0x20	0x48f43c	0xbc684	0xbba84	-
DispCallFunc	0x92	0x48f440	0xbc688	0xbba88	-
VariantChangeType	0xc	0x48f444	0xbc68c	0xbba8c	-
SysStringLen	0x7	0x48f448	0xbc690	0xbba90	-
VariantTimeToSystemTime	0xb9	0x48f44c	0xbc694	0xbba94	-
VarR8FromDec	0xdc	0x48f450	0xbc698	0xbba98	-
SafeArrayGetVartype	0x4d	0x48f454	0xbc69c	0xbba9c	-
VariantCopy	0xa	0x48f458	0xbc6a0	0xbbaa0	-
VariantClear	0x9	0x48f45c	0xbc6a4	0xbbaa4	-
OleLoadPicture	0x1a2	0x48f460	0xbc6a8	0xbbaa8	-
QueryPathOfRegTypeLib	0xa4	0x48f464	0xbc6ac	0xbbaac	-
RegisterTypeLibForUser	0x1ba	0x48f468	0xbc6b0	0xbbab0	-
UnRegisterTypeLibForUser	0x1bb	0x48f46c	0xbc6b4	0xbbab4	-
UnRegisterTypeLib	0xba	0x48f470	0xbc6b8	0xbbab8	-
CreateDispTypeInfo	0x1f	0x48f474	0xbc6bc	0xbbabc	-
SysAllocString	0x2	0x48f478	0xbc6c0	0xbbac0	-
VariantInit	0x8	0x48f47c	0xbc6c4	0xbbac4	-

Icons (2)

»

Memory Dumps (2)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuild	Bitness	Entry Point	AV	YARA	Actions
42f0.tmp.exe.exe	1	0x00290000	0x003B4FFF	Relevant Image		32-bit	0x002B9D26			... Memory Dump Actions Go to Process Go to AV Match Download Dump
42f0.tmp.exe.exe	1	0x00290000	0x003B4FFF	Process Termination		32-bit	-			... Memory Dump Actions Go to Process Go to AV Match Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Trojan.GenericKD.31498667	Malicious

C:\Users\FD1HVy\Documents\16hIz1 tYfBoIcwVhJi.docx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.59 KB
MD5	c4d0bd12984f10e1ba281b52f9df57db
SHA1	d808708096e9f3f223c91613c7b9d96d8b31864e
SHA256	452e71a2d3af5a1c76076a4d499ab4ae50a199a98a0dc5d7fdab55ea98595a44
SSDeep	384:anKVwLjk3dnYHd8l246JhVmadCH7aLDTE14Jrx5n261WddvIXHqhqDAGZzmxlcMz:angYHXHXVdCH7anTpJrx5n29KHq8h5RO
ImpHash	-

C:\Users\FD1HVy\Documents\59kI0eZovuo4vI8.docx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	26.05 KB
MD5	f4fa8c59a4db76eb66d0819b716dbb96
SHA1	be0615edfd2354af72fca16076cc496e2021d2ab
SHA256	937cb92fe85272915dafa08d7e14bb0a2b3659cd832038bea522dd00120e5f24
SSDeep	768:J36rBe5yWS2x40VxYQGndW6/iR2+Nz4adpJXV8:J4Ux4HndWUGU+K
ImpHash	-

C:\Users\FD1HVy\Documents\aOtbGAAYxtk159gxW.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	72.66 KB
MD5	39f0600f1b82237caf7b4574dbc5e446
SHA1	f732fec2ec1ec159f31b9963f83bba232a7b681e
SHA256	f19033cab834f5ef262d778440825b0b792e16f4c5fcdefa61a5d4fd82803031
SSDeep	1536:S7wvH1j/yxAFq40UMyq3I+xA9CXUN4/aBZU+mksj7Nwz6v1XBy2rlkFM:fvVj/r0UMRYF9TC/aBZU1BRwQXgklku
ImpHash	-

C:\Users\FD1HVy\Documents\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	416 Bytes
MD5	0f7ba26150f268958089c7fa30606b66
SHA1	114759f3df2880f5b7edaa6452282dfbc3debda4
SHA256	ec8bc33a5496911116f3d95baa6174714db8cf8ea3fdf4cf30fa55d429d2c4b0
SSDeep	6:rkr4GjQFjv+Zv9ueYmlNZPfPxeJBLJZBJd0WqYYXoHGQTz5hQ8vp0tpFEg2nbIFA:4r+jmZVueY4NPe0vWHGq5hQIOtQ5Iun
ImpHash	-

C:\Users\FD1HVy\Documents\eJ Z0ZcCpMN.doc.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	53.11 KB
MD5	84e42d199f778c8036e6d1d03c84dfd0
SHA1	a66cf9d0626ae0aee672aec8f29c05d2e1d82025
SHA256	1c6bb5fd8cf0503334c608eb56ce3d66dd264708740a5c4d0e92e0def127c5ce
SSDeep	1536:RDR1uc0FQA9MANNCmvF9ZVzAguB3mR09ROI:RDqJFdhF5zALX0I
ImpHash	-

C:\Users\FD1HVy\Documents\HD2UssJoRg1BYp.csv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.19 KB
MD5	43f933cb07ded2e89ce89c253327d9ec
SHA1	56a8f93001d58822fcbad076d56ec5c45a792c3b
SHA256	2d1cdc3ee3f9029993167566780813323f14c6f8afe0a9cad8590f03eda40d2e
SSDeep	384:II6JUGdb20UckG3PNqj4sD8rTil4DiEegA4I1RMUgbM3FaY5T1BCMJzq66kIe+RJ:zCdHU9G3Ve4Ji4D23/2xY53CMJzq6kjJ
ImpHash	-

C:\Users\FD1HVy\Documents\Lh2OVLi_4PS_2RxxQd.odp.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.95 KB
MD5	d242b12a97668fd3d95f042af92fe522
SHA1	ece3202b87c24ce1fe7f7144b3ae238ea007adbf
SHA256	4ff42503ad66c1f87b579f28d37bec99f5310e5470d4742092c28694767c7712
SSDeep	768:Y1X7NTdkBvPA39/EDVjpqWRGCSub2Cso7umlktLQ2aEe:Y1XZTGBvP3qYTSubZPusP
ImpHash	-

C:\Users\FD1HVy\Documents\LI-IwwMLWnmp-I.pptx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.84 KB
MD5	2076bfdc54e48bb6f972ff62149a8323
SHA1	3c74951d696bd6814ef6675985080a9020dd3052
SHA256	81c953269de00941f702d0f13adc4c5ff185772060e487a30e85cd838cb3c316
SSDeep	768:3uLUVhJ7gPP5830Nm++aruqr8xxDqh1w67Xn:YMhBCvm+/S08xp21R3
ImpHash	-

C:\Users\FD1HVy\Documents\nDdxnatd.pptx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.95 KB
MD5	68394a1372fe59778ec9f465f1b74676
SHA1	2413661c9be4f8134a7b75e17eaa2f59ebea5fec
SHA256	0fa8463a26d54e38c92b38ea8dfbdb47141d480c03263169ae75f44858443158
SSDeep	1536:Y+cAk4koM0AelZtp3KMm9ax5M/zTsT8yO79nzCLKH9kEnwkqR/El:Y+cr0N/t5KM4ax5M/UQyOMLKdf
ImpHash	-

C:\Users\FD1HVy\Documents\NHgtkAPLnX.docx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.16 KB
MD5	45ee5fb343562493bdb49dc9e4975880
SHA1	b6a6de019d03ec3e9c1df624f6bed1b1b5ac8ea8
SHA256	a4ae364a6cfff5cb15eb697a4c7066fe3791198d03f267ccb1efbd9e2804773f
SSDeep	768:oqfP30WC9BUwQqmlseFaxfPk/eGxkYoGBi:oqfP3phseFeU/dzi
ImpHash	-

C:\Users\FD1HVy\Documents\NwJd3dflnaF4DbF3Yn.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.33 KB
MD5	d3a01cb8d54da718f3ed71414395bff8
SHA1	6d8b133706d5913d1a3ca4302ce2cfe0a0de1008
SHA256	4f0a9c105c5e07fd13224d7774d5985f6ccc478cf2dae84813ab8720d2ed11fb
SSDeep	1536:pz8ktaoswgt1hd/vguSrIZoWelU4LCXcpbvUA9+QBpbtKgRUqhgAwaGzCf5:akvsVhd/vguSUod1GXcpPoCRiAwtz25
ImpHash	-

C:\Users\FD1HVy\Documents\O8- 8r.odt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	64.58 KB
MD5	8208b9973465ea4f41317371597e8468
SHA1	c1ba6591755a52421fc51cee2edba3cfe293c993
SHA256	2d0ea5c34ec171599ead8de8f95a4a6402ddfaa0487ca8727f48419b91cb7e1c
SSDeep	1536:MDglabEOHO5Ee5J9F/DOvtJ6mfaoHBw1VsoT1RykBCM:h7mGPF7GlaoHAdDyQ
ImpHash	-

C:\Users\FD1HVy\Documents\ooKroY8WpRTqCJ.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.03 KB
MD5	f2b8a3a847d2b5eefcfd9bec9c9bb428
SHA1	3dc07cce6bd42583c8c7f60f529107a36f6f3392
SHA256	0ccbbfa6f0f54b2ad67d2ee8c4d90714f3cdc2be6a1c067fd5511a030c08dc61
SSDeep	1536:qOb/ptZJcl0Ue/cMtS2kv2jgEcAsaox9CMHR7AwDwx+:Zb/L6FeTs2kv2iAJoDTx7Awcg
ImpHash	-

C:\Users\FD1HVy\Documents\oZbDkszpyQazC9.docx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	79.55 KB
MD5	5f4eae9c46fba033857edb1a0fbaee6f
SHA1	12def50a2731d0013155104c309ce8f471856490
SHA256	f76ac7efd41cb960c90f0b09e3cbd18c8d15daf5fa58023a7b1327542fa6056d
SSDeep	1536:wGTyUc2yCZPP7giHFLSoc085VDoA6/VUOOMSixh4gMcqt7qYH3M6:wQcFiHgoc0wVDb7diL4KgqY86
ImpHash	-

C:\Users\FD1HVy\Documents\QjLwz6.pptx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.56 KB
MD5	cc79c911da3fa7d177ad3e16c7c64add
SHA1	508cc7ab6f0ee4c5dffc24d0dc5bac67fbb07bdf
SHA256	b12cc767b036f4b3325c9e7ac4ac981ef2122680bb54c40c7d6e3638c34293fc
SSDeep	1536:0a3Qt5+x3Or65PoGsEynfhrEUAjdk/LTf+MZdN7u2dZjXSTkfCy/JOr:1Q6HPX9IQ3hk/LTGyu2HjCTWCy/kr
ImpHash	-

C:\Users\FD1HVy\Documents\T- t3K 6dV0.docx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	58.75 KB
MD5	d15bcc9ce1c4255e7558f05ce4d7e7c5
SHA1	77a93f53596f1cd9aef0bc1bb4304034436fe02f
SHA256	a2ebfabb88de8f58c8486915a5581dd5dc35977127ae4b3697eb67813cb98420
SSDeep	1536:vGoRyCWHDfayKP0wibt4D5lR8gYFdjo4X0/q8LLR:LaH+Ri2DN8gkjo4XX4R
ImpHash	-

C:\Users\FD1HVy\Documents\WfOLKWjF.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.66 KB
MD5	ae1b59b82111af6a867c30418a423e14
SHA1	7f2fc652c4e991e2a05ea39b87c73a79cd0d1e9c
SHA256	bc258dfa25d85ccd840e0bb8658d9fec112cba848e1cfdd7d7de62435f45e1c0
SSDeep	96:+jv3z1t9WfoezS3fZ8Y7NzAhxNDmHn5QYoCm+rBUpk3k67jyahVCwp5UnasJiNEf:+j5Re2RbJe8Hn5QYIuT06ThVCwZsN
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\1ft lPPb9LICRxn6.doc.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.94 KB
MD5	732b8d6ad63b3ad0b6f4bf8aa6dbeaf7
SHA1	fd4ac031b180225f610cedef79ad17e4b817a211
SHA256	02862c0de59dde6d0207f3134c040d47a7634c03cd35b64074ad7e241a24380d
SSDeep	192:yA4oVnvuV1ifVijS6xLI+NRpe5W3rCXjqMW+fxPHklcTOQY8KnRS+Af74Cz/:4ohy1itijS6aMRkXjLBE8OvZS+A0G
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\6O-EvMa xQmykruQi.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.61 KB
MD5	76636b9d60ad94f0b9790fcf2540dfa9
SHA1	d452bd3898403b7705e1aff1352a31f84c1dcac1
SHA256	21bb38ca05b12146296543ced287b7d64e0177bcd4f75dbe6a91e2fc751dd2ff
SSDeep	192:+JzDUfyuQwSWWZ3Ff0o1m04TpQ2AfnZQfp523pR7uG41jSV:K4yH1Z50xlTUnifpcZpuxoV
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\7QJQVMK.csv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.02 KB
MD5	52abf31668d36b97c5ed1c487e85a079
SHA1	09f5114aacbfdcacc848f402d5e0dcedf7f453b3
SHA256	2bec4c4b1ee12ec7fb2ea0fd9a61b5b2c6dbdecbbe8f3703244ebe356c85a036
SSDeep	768:Z2KLKOEs/OuTUdsdA6ZBhICNeTVUQ7Id9//rc7XaLxi:leOLTgadNc7I3/TcCxi
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\cYT5WT.odt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	98.89 KB
MD5	19c21dc6595aa1d499938463119e431c
SHA1	98f97ce9b3d28b8ccf6fdb0598497bc6838d55f0
SHA256	6b376bc6a8b879dce0b87962afb462a00c2eaf77d45ba5e4bf009183b8b42723
SSDeep	1536:lDj1DYuDmQKaOnk368LCLXtxOCcg+BE/kF+TGFGvbF+K5ZDGcb+gVmXCiiOLlvz6:FJDhDzUWrJaM2zoKOcbbmiGzyN5ys
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\eY_Dc1TDsg.pdf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.61 KB
MD5	c4b7eb7886c15ee0af8a43f5e75cb07c
SHA1	72e602d706cc5145e2a16c33db7070fb3ca12d3b
SHA256	5c662ef032a37ceef27be406a6f9ee64691cc839ddc952062f3a5197bb24dbc5
SSDeep	768:hC2s3Tf07WdOgdxZK55VqLeLsExrq0HmsXiTYEPey7DjSGJMv3VP8Nlq83dtFaTx:hC/3D07WTM55VqLeTbmmikmeyeOMvlPZ
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\hR3cojo6WftWpyW3h.odt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.08 KB
MD5	25423ecb194880fc39a295c17de8f48f
SHA1	fe7453fc2a326bc7710c25c3dd5fba4c056a3bc2
SHA256	f6ee94907a80399397d3efb1d3103086a9bd2cad2c9d4fb60ecb42839c38cade
SSDeep	768:FL0foh9ToYbDGMyX1pCykeGcEj9YCVUUi5/kIbjzz8mgxaa4sxUL1rmeg+jnHWcx:FLh/GIeGcUVC5/kcDIxaafxN+LHWc2rA
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\IVMtcxmHJDptt31P9OCD.xls.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.84 KB
MD5	c595264524e33daf26fde6546ad9941a
SHA1	86b9f179a155862e4a35c15c9f998d47d28bb0cc
SHA256	9b810708fa19fd62d62afcc9b1ededd4131ae7b74bc45632aefe2a478a5e73be
SSDeep	1536:VyFpEXfVXWNKd6LELjmpdAHD2Gbv8dSpVHoyugIp95JbNpd0N8U:YyfVXqELjwKHKGb8dqVHPugIpPJbNwNH
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\4lc7ZSflvh25kv.pps.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.56 KB
MD5	685f2b3a0ad71eff3425453e48ddb420
SHA1	ec69df7731ec1d28e74296374eb290f85a3a87b9
SHA256	da5d0eafe45d4daa3e4732a743c0e1f59c547ed6ac93ea88c7a02ecd455f6a97
SSDeep	192:n3o/W6wVRI+YAIhslmZDjLOLNM4BoniUxmpaJMHmrK7AsUAxG0:nY/zwg+YA4dLOC4BonP4wJMGqFHh
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\JzioP.odp.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.94 KB
MD5	79390e93937d8d04f44ae03d5c62e473
SHA1	4ed812759a790c9ee2dda98ae62c56bb073874db
SHA256	939bdc14f3c096056586042ba8f79f4b23d358a7e8b9bbb3091902887788ec60
SSDeep	96:AVSNNtW9Cv0EB+b9BK9mq/4RsDG3+bYYuh8dItlu4XEetJ+G/b4jque:AVSHtW9CvBgLKj4RM/UFhXtBXEuJ+6b5
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\lTD44h.ots.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.17 KB
MD5	c1b22fc22892a46d4b50ebcf2d47092f
SHA1	6500678e07579142681b2f9a31aaf7d52ebbf390
SHA256	42115d443642f3cf6b639c0ada3a93b133a18d383e8820eb21b802c6e2195aff
SSDeep	768:TRFU/e3U8VCNo25cHIB+Jjbr/Ne/yJC0pRDA00egSdSLsqTiOcwN8Rs6tM3IBQSP:TRFT2oIcHtbrTc0s0JgTLsqTikmBioX
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\244Ql-yOIaa.pps.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	25.77 KB
MD5	bd029b3e9b883674a325594481bca92f
SHA1	6fc26bdc9f336e5c36443e3572b1ea3fc9875455
SHA256	8524d93d49fcbebb067e16dea13a82262f4a60c64672c5dae86c0bd55a4a6404
SSDeep	768:+4zeQLEqceaoVD8pI9/HORmxKDfA4QrMm0DyLTUG:wQLR6GcIpORmscYy
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\5R 2.rtf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.86 KB
MD5	cf7a9560d42528dd8016977e6b6dd96b
SHA1	829307a41e5a5af2280f80b5640f2dd562856154
SHA256	fb5a113e63ed6238e00bd0e7216e515801e1709469d5a8aa520bffef9ef3a0cf
SSDeep	192:bT3CH6u6n3Lb+OfTVzUIvo5xnjsbsyi52xokWadLDDMW1BBlfbKP0/R:b7CaT/Zbo5ZjxyiPSvDMWfTbd
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\bbYe6GX.rtf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	31.77 KB
MD5	f6286d02dcc57d8e36ef4e95be44fa36
SHA1	9f700783d1b0158f1118f07da3e200906801f983
SHA256	5e3b8de1997fa3d6788ebbef8187c1b7855b5172606606e67e916dad86d92d0a
SSDeep	768:mHUhXdlb6u5zO6kQuI0qdSC32YLa5xMoOAdh8I:mHUhXvb6/xQxXdSCfLCxckWI
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\HGH4Uw7jgwUTEi7Vo_.ppt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.59 KB
MD5	47370f098846d34aae52d4579f270a39
SHA1	cc79d221af0c9aa6f107826f8f3b9ce3d994d8e8
SHA256	2dd0362ed0ffe44c613a12e80b536a83f8e974d88c5680aa709fe9d8322fdf44
SSDeep	1536:wmr+UoRqCB3FYMLEsitXzTAgPDQ0O0RbRhbQagnIr4lf92SV8brCtCtX1:wm9or3eSEsMjHx3hbP/rk92q4X1
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\lWEK-JelBvY6EHJ.xlsx.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	24.64 KB
MD5	af2c499d078d3bc0c614a9725db649bc
SHA1	25d28b8f9998d40824d7fb20fead3cc5b843adab
SHA256	57b15a8411f93cdc5cf65d9cfdf94a68ad50a6a6660b388e446bbed29761c500
SSDeep	384:gWAdL7Th6GZf4Qz7xLy/FWAmnraxV5TXgzoiczUwoSTpSbPR3VvFoAdN5jV:+L7Th6HQzZy/EdAV5icw6S7vhdF
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\rar_tJIXYd14cWJz.odp.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	43.44 KB
MD5	f2582512dc5db177b48c6e0792f862b2
SHA1	c93cc4f055cca81da2bae4de258c359b672ca659
SHA256	a57b930fa46fc557ae6dc0c8f89fa6081979859a0f6cd9809f9b09f8dbdd1ec9
SSDeep	768:OvKcqU7rSjYgiDPYMHy5yLPaT2FTualq6OcT4B3aej0Z0m+sSv/jvH7HWpaIR61i:W7b7rSyCyPaqFTrw6OCej0WUSv/AaIRj
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\Zjnf2x96GL5i.rtf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	33.81 KB
MD5	6cd0634e8c05f18f677189e0f64bd3bd
SHA1	0d4b590e59752a5f60d0681f2e518d6fc89c844a
SHA256	95f136ee030293d1bd7c6eb87c3eb024a55922fdd743cff60161bd8543331610
SSDeep	768:OLqVrNXssjzxKcHsI29Q8eQ6vYILZueYZdXhdPl3is8MdPgUAUf:OWVFssjzxKcn2iC6v5ueYZxhdtSs8Po
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\bVjgYdkDx.odt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	21.38 KB
MD5	bb24e5b2853fad57c302623246572c63
SHA1	d0fc29fe717e54a7f6bf4010f5e99be9f71dfbff
SHA256	12e3fe37fbd06537ec7820e9734ee0e8c9a231c8f09509f61636b045ed6699cc
SSDeep	384:zaXO60fRXkWSmEgA54GTHbBfPt4BvllSVSWBJAGSGnzCUojhN9neDCtdis:iO60fCWNKPtmohVAhTncCz
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\kDeOPhXR4D.csv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	67.38 KB
MD5	0159f35d6cd770d88113d6c9be6dfb3f
SHA1	614beca5db3a0e4507ef15069e2683d83e939237
SHA256	5b42f2dbf32c8c96eb51264f005c5f46347dfb8b4df0db3ea18e3a0da6d5daec
SSDeep	1536:+RdoUn4jY1zVhxI1BFv9rxuVxXZxFTjfT4LcJC4xoupVnbhn:+35qDKbXRfKv4xT1n
ImpHash	-

C:\Users\FD1HVy\Documents\My Shapes\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	224 Bytes
MD5	10cd12542918bbe6abae6dab785433e0
SHA1	fb1f09a6c0b9db1078701ebffb41ddad85ece0a6
SHA256	df8d0e2da57bdcaef6460a0af81b367959b48574e90b9e7f913a45352819b396
SSDeep	6:rkrPxo412K7tyqBoBuJDFDy+RLYKiEn3DHNUmy1Av:4rpp12gt7dNFD/RLx9nDmrE
ImpHash	-

C:\Users\FD1HVy\Documents\My Shapes\Favorites.vssx.$ANTA

Dropped File

Text

Unknown

»

Mime Type	text/plain
File Size	16 Bytes
MD5	4518d4a26d988ae74e0ea1d65db35eb4
SHA1	433cc077dd68e44e091f722ea25b75f07a66cce4
SHA256	afa74f1295bfe203bc539a85f20d14e73b6105ecaeace620b677110075819068
SSDeep	3:nmLbn:mnn
ImpHash	-

C:\Users\FD1HVy\Documents\My Shapes\_private\folder.ico.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.23 KB
MD5	670a88689978ca94c8941353bff6b030
SHA1	fcc6e8c05c69c94323b8bf050184412a6b816260
SHA256	eda5c1b9a41b165475b484a690f47e9350323167f41be5d8d92e435649273b44
SSDeep	768:zyCL+1kXK3akhNPx4NPRWDSqXXGfctdXfOvXf36Ez:zRiNK1RW2RctGPnz
ImpHash	-

C:\Users\FD1HVy\Documents\Outlook Files\kkcie@kdj.kd.pst.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	265.02 KB
MD5	46251b1c434218cee8ee255aaaa6b344
SHA1	ec31d274469fc0bfe99a4840de8887fd6b4cae50
SHA256	1359dd048c5315996de60589f6c6511071f35d1854648b5406bcaa45d024977d
SSDeep	6144:GorW19Tt4V8CfWonNpsoV4e3Ktdnsf578+U:GsW32fWoNpiIKAf5Y+U
ImpHash	-

C:\Users\FD1HVy\Downloads\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	288 Bytes
MD5	60ad862e7e55e64ab70a04cfcf4ae98f
SHA1	a4b17abcd253c5d07abfeb577da519fb8e12d9a3
SHA256	8019000823b638e66c3160e10ce3f6b6da1447bd2fe08cc01d8f3f9081ea10f3
SSDeep	6:rkr4GjQFjv+Zv9ueYmlNZPfPxeJBBkWIFqKt1y8TC88:4r+jmZVueY4NPwOgKWKm
ImpHash	-

C:\Users\FD1HVy\Pictures\0Vl-GMFm9nq0tPej.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	49.98 KB
MD5	bf69e403d69967a57e4f79378554b130
SHA1	14a3992e9f2095372492ec9390551dfee7d4e19a
SHA256	02e3b2d55b5b11e5b5ff94e269a2f76cbc093319ad94e152bcd9fc88d50dfe5d
SSDeep	768:EzGEJoLRKTb4gXoF1R68pJzF+nLsV+g6poekyuri18ApFvfjacxmxxesU:EzDJodhgC68nZMsV+glekyurktWu/sU
ImpHash	-

C:\Users\FD1HVy\Pictures\5MOGH3JqsJ.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	35.05 KB
MD5	89c0a41c103f228ca01eaefbcd07ce7a
SHA1	e73e7de2fc4a112f6f751736a3811ca214369ff2
SHA256	9e2a6b932335678a09e678bbcbf80c71d8172d137b4f136048a555628c6d83c0
SSDeep	768:ElKbBtTVX/qKHjGxfQ4v+7qdmDoe+ISkKuu0oHglaSxl/NDUPkZUAo0:EK1/qWjGx1m/vBSkt0HglaSx/DUMZUAN
ImpHash	-

C:\Users\FD1HVy\Pictures\9TpncYB524P.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	50.55 KB
MD5	1a1f46576bf29eb1a152207a8f21db88
SHA1	0e05862df61f010f9da29a4e73dc89a663d8f9d2
SHA256	bdf0331884c10468623f0562b2cd92b6b381466576fea1647f58ecd89f79ffc3
SSDeep	768:E53x/n0ngtiuNXf0lMGRD0OtBx4URE4g6wQsDjUpOMDDsKasWLe7bV/xBqC:E5B/nRtiuxfWM+04cnWyUsKvWL0V/x1
ImpHash	-

C:\Users\FD1HVy\Pictures\BWdI74zS0.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	31.95 KB
MD5	8d738be3ad9c24817f06833fb2997a54
SHA1	11c8f5ef7dc44fd9ddb789e51312f1aacd500f6a
SHA256	ecf5bec21dee13da445cdfc541ec8b86a9102b3b7c0bb254c96efa9bc162a6fc
SSDeep	768:EoCoiu4nZCTRJz688KUCdFrj42zH78c95iccD4MU3:EoCVbs9Jz68nDdFrU6bBuccDLU3
ImpHash	-

C:\Users\FD1HVy\Pictures\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	e6ccd241aa4338a01867678c23e0074f
SHA1	2cda2acc25bb6426da7f03c08299b65c70564f10
SHA256	240b28d462d640b6138d2b7519192adf88403b4aa09f84012b8261b03baa4a35
SSDeep	12:4r+jmZVueY4NPoLrDMJlwZ5wX96z1/e4zoy3wwyjD:46KZVW4NgLvK+0X9Ge40y3www
ImpHash	-

C:\Users\FD1HVy\Pictures\eY_MSASCT-tpPguP.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	81.56 KB
MD5	f3c62ed967afb0202ab3607fb437971e
SHA1	84008b984c3c296427bbac87b6cc8cba65b1765d
SHA256	7fb610f617ab160679dbcc54fd0d13c7af792daa9ac205ed46fea357f567e210
SSDeep	1536:EcL3Q2teieI0weDjcbi8MLbQ91TA9QdCiwoLzpgf8t+6WECYUJku8:EuQ2te5I0LDjcrML8bs2sS/9fsku8
ImpHash	-

C:\Users\FD1HVy\Pictures\fW_IRtjvKhZB-.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	6.42 KB
MD5	77d470d0ca5fb914521cd7fe5b93b976
SHA1	09bea0b6babcc01a678d159b4f0da5bd089a0e0e
SHA256	d8c8d6fa1894f20a364a6fc464bc88080631620865127c4b267b9fe7d6cf7d76
SSDeep	96:EhlGGEAUCqqaC1psCgawSPZzJlf+FShP65YliYl887XJ:ELvdtdpHwSPZH+fmiU7Z
ImpHash	-

C:\Users\FD1HVy\Pictures\GbOsv53gLsdhP15shLc.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	61.59 KB
MD5	ab2ea367d8c32cbb2141229cb612c646
SHA1	432da7a5e1b5c6fb7e1f0efe670735dbf1b0558e
SHA256	44168072d93d403b7cff73c7b310dc6e0530b8f0cf95f89dd0237acecee65cf1
SSDeep	1536:Bz1ih+kEVsQ7IGsC5JY+7ktuCBVF91TymyAx8e07:e4kI7IOJHQL1umyj1
ImpHash	-

C:\Users\FD1HVy\Pictures\h5_ZfAY-6STnb.gif.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	98.02 KB
MD5	01bee0c1fd3c51240271434283380857
SHA1	b3274b8a89825d7f4991edbe1a15e8e991539a3f
SHA256	fb7ea9f5bd8839c9ca16025793976f6b41f7a41217a6eca35b05ab782a542d0d
SSDeep	1536:qtn5OxqCzkXKJGqdccNlkYwGGkO2TEsYotLU2KlEktOYbcBUdp0Ejm3yEWU:S4xqEkXEpCrYFO2gh7vOYIBUHlmb
ImpHash	-

C:\Users\FD1HVy\Pictures\i5q_5Bq6.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	74.38 KB
MD5	f54baa710fcf613f74eeb8e4e8af91ec
SHA1	64d3e8ab83510440f21a41a1d7d8bef5cb6848fb
SHA256	d4e1ddd917ccf0db6389c02faceb063f926e23c83bb6fc045c2ec2685281fe72
SSDeep	1536:EFmAJsbK9m2k75c/eBGVso5PA9Zl3cV0qWr4uN0XjS2SLA4xZmX2jAM:E1JS+Wo5UcxE4uN/2SMig2jAM
ImpHash	-

C:\Users\FD1HVy\Pictures\KI1iqiSuYI.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	52.66 KB
MD5	8e3caa08b5418a15ea91e3e9db10b099
SHA1	797ef4620675c329eb30d03676e544f77534e67a
SHA256	09626a9189439cb16be41f12945b64a8f871da705ef744b2dd1c539987c16f5e
SSDeep	1536:MHgRdSGjSRaObUIIJJLG4j5qoRBiKKu9f//:VrSGjSwUUd64j5Q2//
ImpHash	-

C:\Users\FD1HVy\Pictures\kr_O D2ok83jLZ-Nq.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.62 KB
MD5	07c9ab6d80cfbf488f6afda3e4c3f99a
SHA1	0ff4efb8929db9f8c6445f4cc4c94addd25ef1ac
SHA256	0a08230c7e790c87f5049dd38966ab24eda8171046224e8b9fe30e929fe4c2ea
SSDeep	384:VXD1Ts/W5fv2PjYmeG/GlWO2oMGYVUeGGHZPGCCAJeG5/h:51TsuheP8jG+YDlG5CFsAh
ImpHash	-

C:\Users\FD1HVy\Pictures\qBLfci.gif.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.58 KB
MD5	84dc70caf9240192a43c5adb6c25ea69
SHA1	e02c521d555eed2bde1cedf078aa77eef7fa1b08
SHA256	3e36b27cb7ef6bb12e8d2a444aa69f372d792f92054ffbb5c639be44ecc8f00e
SSDeep	384:3xXQprQ2B6dbQJDUu50jdt18ExLekCNPsI+jYOW3:Z2k2JDHMtfYuxI
ImpHash	-

C:\Users\FD1HVy\Pictures\Rk8a.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.08 KB
MD5	b79cdfc447c00d2f541d5c2f8cf7ced2
SHA1	fbbfbd17fa6501fa8e3e23bca1b577c53d4b73ae
SHA256	b3e00da13cae87cc9c6fc723edfaaee97a0a98f8d2ff9382e75576982bc20d86
SSDeep	1536:+RFgF4gVmnoK1lroYl/ClE4tvg09BCRk75hJKncrqm9IjoB4HT0cos8K:+RFFoslqE0aitnKcrnAoBKTcsF
ImpHash	-

C:\Users\FD1HVy\Pictures\wWIF_SR6x0w3shayx.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	89.94 KB
MD5	c2b0e2f5e26f207b08639eab44f83336
SHA1	89c80da4cc9514922e884777ebad995f763f79ac
SHA256	69562bd42287972e538dba164080d92d0699af2def19ada79425db1b4270ead1
SSDeep	1536:yaahNX3KzKzTH34y8o8MwIDSF38R3y1KWo+BZGCD7CpUzFah8Mx:yaawas5MwIGp8R3KKWo+DbCpUFMx
ImpHash	-

C:\Users\FD1HVy\Pictures\XwG8Sj1nv9U.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	68.16 KB
MD5	4876f7f2fa266756d033b595e89087dc
SHA1	dc72c4fdfd38462c60bd513bf843435c760501ff
SHA256	7f38fa1373051549425344ec149216eb772042f1b7a15b402e25ea3067deacf4
SSDeep	1536:EaatGD7E5OW3qKMksYPjRaS/vdSLMSBJ0SuCKDb:EVAF+zMzYbRaBLMSBJoCEb
ImpHash	-

C:\Users\FD1HVy\Pictures\YwIpia.gif.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	62.64 KB
MD5	d80acb5ce7e054a218d7766238f2f207
SHA1	c51b062e39e66ebb9fe5ba2c3576f3fa1ea3ddb4
SHA256	3b3cf6c5cfb4fc6502bab5a5da7c93e50a68a28c6414acc3f0fb9639adad20ae
SSDeep	1536:6nhOPxY9UuVNELzrKbNNTQZ3x58odixoHDQSIwjjv:lxre+zcQ3x5hdixG/Iir
ImpHash	-

C:\Users\FD1HVy\Pictures\Camera Roll\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	192 Bytes
MD5	a4c6630a1bac5723628f08410a2faeff
SHA1	dddeeff701eb80cfbff3df60163108b04d6aabc5
SHA256	262b277d6e5a6794056074fcdda16c5faf4116d7215785ae5b1d291c89de2cf3
SSDeep	3:rVbaUqYrOdVjTM31jv+ZvRruarYmtGhDYMgNZPLplPt8fF7tj0eIagXhvbsTaCrz:rkr4GjQFjv+Zv9ueYmlNZPfPt8tN04QS
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\-3KPTEtzyngOb.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	1.09 KB
MD5	ae4af02cb8ffd67862424635a095ec15
SHA1	43283391231430d9525c4809f44aba66299bdf28
SHA256	23c136358576a99a4f5d08291e07db4d7f6bcd41f4564a917e4350b3b525f222
SSDeep	24:zIdpZQjhxGZ734ZCU39zk54qsx+aBRabedX1+uGRCNqQcqg1g:EJC6V3EC49zkbsQanabeBdkYqQSy
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\6EeiE520t8A11Pm.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.89 KB
MD5	27adacc67936fe682b4f31ee62d09d4a
SHA1	712514ff48a4e6ccb285bb567ba9e5de4c12ff85
SHA256	68b162ed48dc5547169f072adecfdb23553aa506566d2f5d9e12925eb3f89c07
SSDeep	1536:0FTxOoBRYp+rfkJxBoZ4qf7SCj/mhhIKGeP0X7jResmoTy9Hekb0HXeYFUo:0vVEErwnQ4vCjghIKp0Lj+oO9He5zR
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\7mFkSCM1jm586Ad_.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.83 KB
MD5	5cc5586af395d0083bc8bd45b9df3c52
SHA1	cba1646878ba96adc6fcd36d6b06edea27a6f3ed
SHA256	6fb1f01ee0dfa33504658cd54031d8f9b237cd854b2cc3e3d13cee54f7f01ea5
SSDeep	384:/qj3R9Ukmo/kW0fjPtTGGm5AV6p092vrDrcjSP3pdHXwLSBT6VJDWOhIccMj+mdL:yjvUYqj1TjsJd3bHgE6VJDhI+EWhGVut
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\7yKccLuS8OBSzjABi0L.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	49.78 KB
MD5	f6568e2a1e75327b57c1e79c12de26a4
SHA1	3ee8f3aab2a0ddddcdc7f3c911809930716e441c
SHA256	73c7e38c40d8a4000b7d611757ab359ece414eda85f14a1058fe38d39d74cc5e
SSDeep	768:ECrDKO0VTxUoVPtGb7nzMe53vrp+51lyutjYBj8ZLpNLWnKCwz0v2aDpEKtqIg:ECSO0VTztGbt/Qu0jQj7P+aDpE2K
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\AsLbgf0HCR8rP.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	67.17 KB
MD5	fd8d3755fa3a7e93900d9beb0d30f828
SHA1	a6839a4100bef443aadbe504fb9cc54655f694af
SHA256	af33feb0f19fe9ef9963b379a248e6fefaec2679241507b0774d4e1049f0a6f6
SSDeep	1536:RyHWAg39EJfLIb1FDS/qwf0+PU77hRKL3z0TgCBTM2VXmF+VEnHR:Ry49EJfkjG0JtUL3YzMGmiEHR
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\bflIcpkmQtP.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.70 KB
MD5	a8f000b75fa38f51032c531a2a690d8a
SHA1	a4c3e1886a596f54089aec5cabc5a4e15600177b
SHA256	df57d9b0607d680b81fb101298430a63bd5d41afd3d15be3c98c78fe203eda3b
SSDeep	384:gjiirdwyb4FUUrkVjEIGOXsCWBL5fAtlbB1ChUR62Kkwc0yaP:UiirGw4FU+kV/1X5WBxEhbzRf+HP
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\EWWH.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.02 KB
MD5	283f4400e1aff2f89c9e044dbfa63df8
SHA1	a4375787104e2c5b0d01831183bc43556c385ac7
SHA256	01e8bcd2a09a00eda15091c7dfd7bdda9748568771a4bbb587d33260aa476e07
SSDeep	384:hoo0spxMzWdK7AS1NHEIeJImGwreeaG21fV/hH6EIqjNhjo:6sp0WUjhwSRjJXlo
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\fgq5EW8t8.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.08 KB
MD5	1ed86ce5c557e12a4cafb85b12691d9c
SHA1	247fcfb12d9531d3b3c675407e0699a7ef3562ee
SHA256	9fee87dd9f6289acc722fef168b6b0599952f9dd82846e0318d597666555cf68
SSDeep	192:ViXPpvaJ9UnrndRCJ/n/r2X2+/hFUyKNYUzGqpZU6ZS0vNNKQu:ViXFaJ9U7dRCJ/n/r6hFUyKNYAGqpZUr
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\J06YyOv018ZbSPW7yM.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	21.03 KB
MD5	4dad3be8078dd479c8038c476d3cdba3
SHA1	d2bed3db587c6725b100037336405284f1d322d5
SHA256	34a94c05dcd2ae747a861eefb46073137563945b49813724523c3017f6e8eb2e
SSDeep	384:kt8VLZizx42YkYyQG3Z5hmfU98PhYOgCvov4QOjmNBQQ8s/OjYE:I8VLZk42YkAGHhhQhYOGOyz+s/OjYE
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\maAjSjcXjKdUlEc2T.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	61.72 KB
MD5	fc1e6d592cd487ecb53aa727f5bf195e
SHA1	124d0fb814f4b81119a6645eb193b5806c42fcab
SHA256	1c9cf2f015be2a54f14a0fd39a6ec19df902d643d9885fc1f3c4a7110198578c
SSDeep	1536:EY1sa7pQYQo1Ql9Hdjtg/8v5bQoIQk+/asYyPnPOT:EyscpQYN1C9jtm8hbjIQkEasYSPS
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\OjV9.png.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	50.38 KB
MD5	6e27e7e575abdee01e01d5cba1b2829f
SHA1	0cdfa77e002ee1012f07b53446a5e721843e1186
SHA256	5476b2f472ed51ed9d2273fcfc3491656b3a492cee45653e74f28ccbc834a01e
SSDeep	768:SFTtWD4sXwbB7vZHIWp3MVXJ83YpMyQWD1DvSX9OO95RCm6rQtGgjT+O4VjhSO:g7FNIF5NpMyQWxDvS0wRCmjtkjhSO
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\Z3f-n12Dk_aAtm.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.16 KB
MD5	8cd542bcf12fd251c0595bb31298e14f
SHA1	bcbda5d60301a07d774b254826163f6b71fed8a6
SHA256	d023dc3f27dc4422496845895002b88a3195f3c50db015f81bfe60f9f14be584
SSDeep	1536:4QHcCMWAcOK0nJI/NQKu573FUe4ery/D60zQpYc3nFqt8xAgJfBg:42c2AOCmxq7xxe/D/a3Fqt8Gofy
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\z6qa.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	73.00 KB
MD5	89e16074f2cffaa5a0ae0e3143295495
SHA1	17c406835859863d852ed2e152d07b8ee45fac34
SHA256	e03e82a9ec2e96c0f42845749273b8269d62d5e0973f95f584832c7940bbcb1c
SSDeep	1536:yI0pDW6Wi6q2jB/uegtDu7ksi1c2Hf5ZOZUWLLY9n3S20fiAyu:L0pxWe2cjtOu1cIfEUa89n3S2oCu
ImpHash	-

C:\Users\FD1HVy\Videos\-frmf8je.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	51.03 KB
MD5	5b71ad56ac75cb2eccdbff6748d174be
SHA1	64528cab45e77ce7b691a8ee6543f96a0161025c
SHA256	067ed2cf92e85ac1f086c8465f6c9b71bf0a4ab0cd6f17b1a4a4d2c3a30ea891
SSDeep	1536:1EQFKfg9UpaJr8Hym1UvwCRFbvIVNKy9K7awN4x+:1EIXJr8Hym1cF0VNKy9Kn4A
ImpHash	-

C:\Users\FD1HVy\Videos\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	8e8291c837f4b2cfecac91a1197f7a5d
SHA1	994863ce4a988823d9a5d1909f5bdf56f3b34e48
SHA256	984b53337f0f3426b118772b9c105a103fad32f766441bce09a34728edeabb8d
SSDeep	12:4r+jmZVueY4NPdZzTZ0329iP17p1+XnXX8fxN+xZj:46KZVW4NJMSiPvAn86j
ImpHash	-

C:\Users\FD1HVy\Videos\96vXR96flJJML\1OjHCE.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	62.91 KB
MD5	0976900bbc935ca8040b5572e4c8a9d7
SHA1	1be5773da12ce00ba978d734dc191746b9a337bc
SHA256	c0cf37f52b3fac79119353b88594f702294f5acd1fa7a7878234a8fc11b93759
SSDeep	1536:1Uc5Gjin+U8TMR+qG5S+8yIrr+R81pvZh:1UcV+/IRUS+Z2rcCn
ImpHash	-

C:\Users\FD1HVy\Videos\96vXR96flJJML\vJ4PRQa2pJimDueSCaM.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.00 KB
MD5	2a12bf818e7ae9009d5d196f7420911c
SHA1	0c2e35304b177b1cbf71f135cfe56d6b045bf9a6
SHA256	c0dc034b96515e583fc7d1b97a2a56dcc9c1fdff15415000aecbc3dbb9749e0b
SSDeep	384:fm+o2k/Fl+xYitBe9xzle6dp8bgYzYfQ1u8NWJls8beaPzxzSv51xffr:fmGkf+x7XeImpwgK1u8NWboar9EHBr
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\8PG6kQ2SW4h7w.flv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.47 KB
MD5	95e5757202a9613f1ff22cdbf48381c2
SHA1	b62b531b509536c103865005515f619ad82adac8
SHA256	f7b841ce4e71b70c5daf89eb405597a3cfe9789a9adcce6a75c6dd23645c3d61
SSDeep	1536:Az3t1YPJJLt8Y39adpQJ6NZH6SdM7sHPiGoKuhT9Lj5ffO8Lwk:+XKJLNaduKZaSdHPbVu/xfOCwk
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\E8Q4uNIBQS8v.flv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.77 KB
MD5	14c819f8c51e0f275ca488e7c775cdbc
SHA1	4995c088af6d04159f66034cf853bcf5bd699215
SHA256	cac916eda8f4a7e97135ec80ed1b718d71b6421e12e26a08d97eeb580fdbabc9
SSDeep	1536:A/2yNoUh7zyrgoOqGdEb0WYsF/m1fOvNO6NpUuLmtdUaY9EHK6iYdvzobEBD:Au3Uh/Ho7eu0DQO1fyUuLmtqaSEq6l73
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\gOxwTO2-sZ.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.00 KB
MD5	b1255d5b9354c9448a3352c33432d015
SHA1	7c8def4d97c7881756ced779e90337be5880b4c7
SHA256	5bf8cce75c793539cdb4e106b0f0d82b845f867676ba40b36632b55054a04fe9
SSDeep	768:Tpby4VqIe9I5xLgc2uSM6VkGb9Rcq6c2K2jDQN+Zvnc1Q2uGplRhizJWoCdLTbe2:Tpby4Vqx9GxMcvYkGb9R36Bj67Sz0h80
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\NLad7.avi.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	91.86 KB
MD5	6e17bdc3edab27c52b8592eea5557782
SHA1	195a8aa80255422458d72118cc7b308fcdab0310
SHA256	09d9485f537830d8f51ede844f3b1bec09c523d6eb4f4fdb42cbca953d8c8170
SSDeep	1536:3cNb5iJzXyqwdntSh7O1x2PHsMY829j5/yW/wrmtHy/HiuMKZl9xMSNXJOFL56y8:sb+XyVdt3x2PHDR29jdyW/wuHWHIKZhF
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\oxSznFWHwYcj-6Y.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	55.66 KB
MD5	1d2d5cfe8ac89f836dac7626bece5b65
SHA1	eecf3b5233a154a0f51b27f58354b1a9d7344177
SHA256	43ec7b9e31aff833172825122f4f062c33bfc6a3238bcc7777aac44d8626364e
SSDeep	1536:dOLXJv+nmjr0ZbiEra1T0UDzAj41ajbDgt6ClgWr:YjJSmjr0ZbiH9f041Ggtjlg2
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\rggg9G4RHZvsA0kg01.flv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.83 KB
MD5	e9718148b72c4f90c7aed516eb4c2227
SHA1	b3287ad5dc38e02a021eccc0b284176933e52b47
SHA256	a608e0262e2a7da35f3511a094e132f302acccefa14058e821d8f2d535ffc149
SSDeep	1536:EcxCmqSKx/jBDPkMG19s2VoZVouRZraq8YdzwqaE9JeQwtqYKSlY1FW5Htof1WUP:/o/O19s2VEuQZ5dBHeQqqll1FWUIop
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\0l3d58qA0oi.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	44.58 KB
MD5	c73a2756340324279c336c30fb8ae9d9
SHA1	089391a6ef0e0c1b46f12f22f0365d7331697474
SHA256	308e231790542b32524bbd2e4ec36155a7ed74dadc5f02411c75e9303ceb9e68
SSDeep	768:Pby56IM4F7l31dXaLknufgQWDEy+pNKAE7ilpYhSPpKLc6sur1qY:Pby9p1xAA/+X3LL5PuMY
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\3lc9YJH.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	97.80 KB
MD5	04fa373b540b856ed07420d53a6a9ba3
SHA1	2410f978421dbb385ccd3a623a348d4e608c3211
SHA256	e7cf112e477f8839d409c6f13e1ad2183a645bbcf21eb58456a5d5e1af53718c
SSDeep	3072:gMllbHBBCqyD8yJAzaNiMW3USbAfcuk+QQpjEjX4C:g8hCtJAciT3UKxMXj2
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\h8KMQ6UP_q4ir-v.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	85.83 KB
MD5	26d7da004c2a71fab9ed2e4dc306db4c
SHA1	18bf1fe9e703af9e5d99fbafa7fa7b9d23aab977
SHA256	ba7291bc083cad10b962750aca602621639f86df2b083b5b9444920fe92645f5
SSDeep	1536:yQ+SxPVhurxY1TB1MqIXFJ5mEEsDM/LDiKfAJ1mhr9ZP2K:yZSxPX3TgqIXXAEvGLWZMhxF2K
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\yxs3r3.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	48.66 KB
MD5	ff331671df21c8bd1d9d1675ce04e666
SHA1	07b866b25d82fa8056cfd42aa4f0691d561ddb8c
SHA256	10d8e1f30211fca83eec22b80023f3fc5fe6c6c25f075e391f1fe4d2dd3703e8
SSDeep	1536:NKXp8iUMkZc2jGbrjz/KSc2KF4RnbPDj4Y:NKZ87wbrXf0snbPT
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\c1tN0jRrSKz9_ 3.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.19 KB
MD5	3e32625b4dfcd8fdbef85bb8b94eb79d
SHA1	bf40a6ecacd5b008a7379caa58f0aad987296cc9
SHA256	41fd06fdcfcdd5f0692ef662bfd2c0514592382066f9cd8a316f2fc7d08dbaf3
SSDeep	768:oqzUh/E5CeyXXH8aq6UcZBNobIv3kWEAP9haix3+E1pzwBGYQ7PywMHB1:oqzUCPcZc0v3ZZP9hjd1poGYIDMT
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\WfuP9I.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.25 KB
MD5	d1fffeb45a1fe5eb98ce3fc8aa799092
SHA1	b5228be6e8014e6b630f5fa960a393eb9d15d313
SHA256	66e77c0101870ab2cca6a15163211a4d79e67a01d789b18d5ba4f593c0d0c222
SSDeep	3072:WWr1BIm6ve0ICADxSzTY1eI+C39yv8OTNwfRy:WJzIwnnhn8kwfRy
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yzzjzdDz73JlAs1uEFCr.avi.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	50.81 KB
MD5	8b03937c0f3c8c3a78777ae46b38dea1
SHA1	31066e61aefa36b6bd51022e387c33e4b25626bf
SHA256	e09e9aa065f997e4b34268daaf0ba9dd53e31a88c6755840dade060e5de37f28
SSDeep	1536:a+Kry6CVHY7jiBa2U76r2uBuawl3kTC0/hX:srkHY7jiBQg2uBw6thX
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\--f6foz.avi.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	53.50 KB
MD5	88f4f529991e431a57042ecac6c67aa8
SHA1	77663df9af282b2c8a1879b3841f10c0fb4e3abb
SHA256	a82eb4c57fb2fbabe57f9c7b12e84bb18c6f50ffc70725877d353fba37f16ddc
SSDeep	768:cEztuKcSuUc+4fJDHrsdMZ5kocca+DVA0nj9Xzk4b2jBrFVFbiI/Ni9WijryKy1:cEzWXb+4RvkocchV1j9XgbtBuIMVy1
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\38VodG.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	50.52 KB
MD5	ca7d19eaa470388d20c16357f39f4099
SHA1	650cec579860c2098bea0e12a680d6d231984410
SHA256	c75af785605aafa73d66da4a2828580be0592669de98a007e7a78dfcdb5ea67d
SSDeep	768:258sFvHz0BefygQFzOjIVHhQHBB7P2c363bgdMbsYcfnMYaDgzRtby+cJaLnH24T:Atz0g6rOjcmhduAw0dMFgNNyXenH2m
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\jgIUi-yVs0307RW IcX.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.91 KB
MD5	b9f5c41999dfb8e26184f4baac746734
SHA1	4822074824498e6b3cec2dcf9e265d695645f9fd
SHA256	6afba03fe943a8ccbce502a6817a267ceb31818592058e98be191bdc6a983e36
SSDeep	384:jmd1dDrYG7Pek7igg8hMrrv/QH3pac+kL4ygGxzWH:KdLIePBGgg8krAH3Ac+kLOuSH
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\kdyPGegxQAqdUuFtfW.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.58 KB
MD5	59a5fb9e499411e04d4fd3fc5ce4d369
SHA1	abc7d6096b0b473d7a661ee97aa63852c2e4d2ba
SHA256	94e8855236cda40aaa93ed20a535dc98145d7d5eb175288ea7ff529be8672ed5
SSDeep	768:DUysWWVjVG/Jj3B9cYweoFIoGJR9EyyXIS5/H/KcWbdY:DU1fG/JNHweIITJR9Eyyz5KBY
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\u5YsBEddaGYJI-.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	52.41 KB
MD5	e132fe42d815d83b5aef0ee086b30afc
SHA1	b50f0a7255b0550c9198ab8ae7ccfbaa56d0b6df
SHA256	4dffadc76eaf9c66da8449226f9aa115248a308fc60f2130805bb13ed24ab6b8
SSDeep	1536:9HywktNTpvwmF+yaCGzbF1AV392AdJHiHsOan0VydX:U1FNadbHANVdwshMc
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\tr4gQM\Cu3r8FST64g6XD.flv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	64.92 KB
MD5	9fec9fde3d2397cd4f3cd202c73e222e
SHA1	01d2c4ef4d6d5aef4f56734babc266bf433322e3
SHA256	cd20c6aa53efef6b711bf2b3d546ddd58ff9f2e9d1c5da2be817ed75acbd75c1
SSDeep	1536:2cSNulhYtfdo05XqLOB3SmxGp021L8+mmORE66Emj4H:lS4lhYbo05rKNL8E6Sj4H
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\tr4gQM\DU9VQvjn.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	77.48 KB
MD5	7ebded21bda5e5c8c8517fe0d190422b
SHA1	9f2111ee54cf8ca807208918fa755707bdcc276d
SHA256	7c5b2a6963245230a8495e70a1d11da24d6b5242447b1e527a0a2febbc5cbd91
SSDeep	1536:gibV/d6NU2k6G0ozZJ/Mp2nf8nHAt0RT7/X2UT0AfXB/407FqqE5L:lb9kzkpf/M+SA8T7P2k0A1JqbL
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\tr4gQM\recAT1.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	65.27 KB
MD5	c3750f03727d91316b6362bb65c511c9
SHA1	d5f9b5c3355d81e288e6ed07a658fdeae120f7cc
SHA256	f0fb1f1855c436d62c3a136f9e2c4cba1697126d6d199646e288685b9209a572
SSDeep	768:L5mLD6rFiD5q1LseicWqRYknZK4ydsQuWSdKG5XaPdcoINUUdJsVG26uZJW/i1ty:tuD6rFpoOWkYoZK3dF79coaU47pq1PCB
ImpHash	-

C:\Users\FD1HVy\Music\2 MaJ1.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.94 KB
MD5	f1df22f52220a802a3e858d26fcf1084
SHA1	340e8c27065fd9f054cad68586f1138a1fa4df19
SHA256	e614378f0255d0c9a874a8c0f8e9be7b4df52ddc4f3c71324d0f57805dd2d1c3
SSDeep	768:4uzFJDnzMMjqH8AbDg8iFKc0zViLsTd9cSqwskq9rqk:HIMYbDtER0EL+dGBkqlqk
ImpHash	-

C:\Users\FD1HVy\Music\fR5QK.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	56.66 KB
MD5	c1ba3ab9de68aad0848280a677bf00a3
SHA1	1e670fa69cd4838ebb5f95d5c7fea75bfd4f54eb
SHA256	64069651d8917596266eab1397552f794239a56e5a448dbd4bad5fa821c61bb4
SSDeep	1536:/3SrAIoLoTI/inhzdxT80rp5WJQn8Z1GSVY:SzOAIanhb3rIS8Cf
ImpHash	-

C:\Users\FD1HVy\Music\gXtG5sqySgJuIPIsH.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.94 KB
MD5	e50e9e76cc9964252609bc6b36dadfeb
SHA1	7c222b521945d850bb3a5eeea5bc136aca684d6c
SHA256	620cb42cf3c39b0115ac28d851bbcd760610057f75869f26017e54347afb6acd
SSDeep	1536:SklLAOfNY6dFQ7DTMMd+UjknQaKVBqtPfYILHb2DGFaW+dl:SklLA0NhraDIhUjRB2fYIbbHFaW+dl
ImpHash	-

C:\Users\FD1HVy\Music\Juj1PsS7vx.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.52 KB
MD5	4c713c64e9014a35e4d3766c25b812c4
SHA1	9c3db18edf6a36ee422aa6f51da954e1c23f3279
SHA256	a1e560bbbe2de17b5fd18a1a25cfeddd9d17e4972d22b3db7fa960cd4f3aad2c
SSDeep	768:4Xov82gGVYfUyrelT03+aVDXn0ChUVXJiySHD+akjdnY6uV3n9NtAJzhf0lc9RvD:62gKmeOOaV720D+ZdKZnnSbR9RDUeZq6
ImpHash	-

C:\Users\FD1HVy\Music\MZTSENpJHOvP.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	67.03 KB
MD5	497911be0244d265351e2c1d1bf706a9
SHA1	5eddcc240fc6edac42a8113675bc15b4884666c1
SHA256	adcf65027e13824b84081d6b65f2a51aad4880d8a764170c24487a81877413c1
SSDeep	1536:QhgukeF6u7QjXVj9sUqDuwKjrTnTmXMmkvX5BU2vna+88v8G:QrTlETh9sUqQacmkvX5jPc8v8G
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\7eNkYBcGM pJGAedeLc.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.73 KB
MD5	0e394ccf329e4251b8fcff26ed6e4c22
SHA1	4cfc8c7c1583eb085198e384542ed3b3536b55c0
SHA256	1969ea82d266fc79306f67bae6e9d30304d814e1310f978390fa0357a4170c75
SSDeep	192:JQO3O33PW98eV1JQY5k/DGSvuJhZzXCv7ivmWDZ8cLTM6i:JVe37s3H5k/DG+uJfzSv7GmWKcxi
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\bg_rcFiS42y.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	65.06 KB
MD5	878c6ccce844ed05ca31b9675eb20205
SHA1	76cd8eee8292c1f673464c7e35942d7c2c1d8273
SHA256	05de2e723624855f43263bde168aab70c4b68fd8b702552055e2e72a24d5ea74
SSDeep	1536:h+s3KkrZOTFjQTEJUOsQWR4MG12qPK7wAtzue0V55bJDKhzb3:MpTRQTKd744MI+NcfFJWh3
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\D4sWWmt- Hf4jGE2.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	63.09 KB
MD5	338ceb0fa05b95acc57548d3803f8911
SHA1	e6df804060eaccf07b2bd81e7a24d1dfe1d82c7a
SHA256	30453cf86c769184e157f0b37e84d3d19c3e575a224ee04e6fb57aa76ff9c16d
SSDeep	1536:+PBHfWKm/M3ctuxR3Xtk6KO4HlSc3q5KDu63r/RZue1R:MWx/mctuxRHtktln3eKDuofuef
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\P0gI1wm_F5y2n.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	73.11 KB
MD5	9ccebec10cd133c9dc131e3a0b78a7fc
SHA1	b7758da3f22e06fffaa1256447ceb99c77cb2a82
SHA256	423803600a25f20b4b6e6539e6c19607b1fce9a1084877b6beae6667c4195861
SSDeep	1536:o+BCDCgqAWVS9ZxQpcJNa2qEJtgQwZA+fe0AxPPJlnHcc2Ujx/2:o+YWVS9cC9tgQU9fy1PJFPx+
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\_lDKW-L4K_DTCAjQT1.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	80.33 KB
MD5	5f68a84c571408fafee30c8f250ff846
SHA1	d622b5bc0b11449709cc1b11f314bb3db4e33514
SHA256	666597047c44bac67772d5ed00e12b0ca288ed174379a1d45c14547a714b550d
SSDeep	1536:t/PMMP6n52Md7z5+QfrpdNjwKNUIRiargd1xOFEuBWNYT5GXATjctq:t3XynVDftfjJNRbUkFlwNOhA0
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\xavp\fKGiw.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	49.16 KB
MD5	4a827bc8de41c6e42cb6549124f6e3ba
SHA1	02f9a5d131671c4ef0f4e09e272415c6c2230516
SHA256	6c9023f132a10058034e42291c9bfca7af811002d8a1ffa7e77624fc3f879fd5
SSDeep	1536:Meuq8UfCzG/muhiR1gyQziwxED939BBRMhQ22xJfvjpccbNqB:5uq8Na/XhiRZgdxEDtVRJ22xjcK0B
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\0csxPXrUs0a.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.61 KB
MD5	05dde34ef28f90411adcae9efe8527b4
SHA1	bd4f539cdc50f349d249ab0a90a53ce1edc640e3
SHA256	4238550e9687920cb0f71b0a1f2a779792a91f685ed38075d2e6c7ee5181d84c
SSDeep	48:45SVjcGMcL9trRjXXH/lvgRxgncn0qfNNOD/b:4oVgEjnNvWnAD/b
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\mxXesXXst_.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.42 KB
MD5	8f6e153bc9f6ee7a43fb86cbad16c694
SHA1	aacacf721c03f544ffa7928847d2b101ec029b47
SHA256	c1b683960821c578dabfa3ed2f140a0b933bb7034a4045958f066a90e8b4c422
SSDeep	768:9PomgU9z4Q9rT8qIramE3rU5wx/oPIRB3/vp8t1KBI0Yrby5eMD3mFLCvtxITtiN:x2QR8hFE7U5wxQPiB3/v+t1KBIO5eA3P
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\0QhbS_hT9Zbd62A.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	26.34 KB
MD5	af4a7cf881cffe0dd1391dbfd64465c8
SHA1	f1a772308157265f6b1f5635389be79c5c88a31a
SHA256	77993f05179d178314874fb2a065738fe951fdedb110e149ca841c5e16269453
SSDeep	768:4+NTK2MLZs3YcSoR1PG5A9QrpvexC+Q4faAyKmYHeHoty:3K2MAS4Q9verfaARH+
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\4YRCHooZsp.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	43.95 KB
MD5	7cd551213989c0a725298abba51a47cc
SHA1	b7adcd18a0b1fb1336f1731ec20fce87d834d33d
SHA256	f5ef1f45091f97ff855dd40497e87355aa98c7d41f0b6f00c0260fd248401f15
SSDeep	768:YhyFVb4wbIiUkwKZEsa9FviaQKm9P5jPVnCg8py3y2VpsSdnihLui8ogH:YAFtFukzZEYd5ztCTpDQsSJiRhmH
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\g4kPqWyZSQA5pz.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.72 KB
MD5	705ea294b81a9177715d29a92d018939
SHA1	72e91cd05e18aa766237a40cda5dd33956ea3ac8
SHA256	c4440f65de2d7e61f6bb6ca1dc548749315f83995743d37d6a06e1ca206504eb
SSDeep	1536:bFOmbaa17veLW76NUh+vsC70KrDeUp+ejr3F5bcQ+Kks3/KPcnm1omXOoq38MPR:bEWvcW76NSWsC70QjjR+KksvKUntdoqV
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\zMKZMHlWmMpV7lZ.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.73 KB
MD5	24d92396e23024980ccd48208d3d14fa
SHA1	c5278b3f54cdae54011974aaa405255a57cf80e4
SHA256	a9780c5431f87dd71ab8f3ec3c0eea759a91d8c2f50d3f6e174258a210a99156
SSDeep	1536:12Pis5Qizzry37GqUBK6ug70v95cllB0uGU89djvQ2MMac7:1giGry3Cqd6Wv9O0u8rYrY7
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\-a1fx91SeT 48T\HkFnDV.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	92.59 KB
MD5	cdfb45d3e9dc1ad0acd66157270a3c75
SHA1	69c166b1f6205ca5f1d963ea70c4b119bf14c6fb
SHA256	4cdc75dc91c16bc5723ea1e2dd6aa2b0f5b01e343b5fea839dfe0df0f24dea00
SSDeep	1536:NOxTskFoUjveoEStvMJclVFjZVZ1ubWrXeGzYEnR/vjHpaHY2axm1rQO4TWqp9Ds:NLwoUjGhS5vJQbkOfEnRXbpGSwrTqPA3
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\-a1fx91SeT 48T\mzZHZq983SYlb.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	28.14 KB
MD5	8b1b1a69f7fcd179e5355af51af065e4
SHA1	5742d1521cbb2fc3255f514be19be967ca6518ca
SHA256	bd529af549e34f2f889ec88cc502ce914cd761618753520b4ad023a9465aec77
SSDeep	768:EFzQWYcMY/BjDBjLf0+2/f2i6MbbjBSyqQLxAWPqpbv5P/:CiY/fHx2n6kbjBSyqQ2WPqpbp
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\-a1fx91SeT 48T\ssO YlBHXom4.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	72.27 KB
MD5	63a4a098a81d636a5f7c61e7c33eb502
SHA1	236172bd7b1fcb4bb3578901de6f5d3d7cedaf60
SHA256	57ce25989494eb055a3b1f2b6fa8990104ca86f685619a5ebe7ae44abed787aa
SSDeep	1536:xRZg6za9HW1xb8+E1PyRAZOOSk8IT4NDyZmgSZjw:xTgDx+OPdZOOSkiyZmpy
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\A-LWlY-3UKn4PQ_Otnq\Glkh.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	25.45 KB
MD5	839f11652cf1958141787469f79e34c8
SHA1	f19742476414392adecdd5aa780c8b11f21d2ed2
SHA256	e2932566cab3c683ef2fe7c53980ba172e0763bcb4de9859483b122432a21317
SSDeep	768:Hjq5eVP3cgEsVDeL96AFff6qBPDytfDYBLg+q+S:m5eRsg5De/SEYfDYuVx
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\A-LWlY-3UKn4PQ_Otnq\ymTK.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	69.88 KB
MD5	63961461788fcee619dfd0b268ffbbef
SHA1	e4ade66da372452ee0a649c0dbbb1b6667a41ea8
SHA256	50b296e60d487045880ac9abdf5899a50e2a792562b0ceaee25e284069d581ab
SSDeep	1536:NrE5jIYBOdg1XPqsc+jsgPWjoawqPYVoUfNLUYmV9l6FjM:NI5sjdgtPjHAYzlVyuM
ImpHash	-

C:\Users\FD1HVy\Music\spIObPh75b\caX1anHBaP9sA34Tftcq.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	94.08 KB
MD5	d4c1240520a56f3e99f19558d4c01b6b
SHA1	e1fea8806f93e9b34e5fa9c3e85193073384c560
SHA256	260fc3dd28c7800f96444638d5a601ef4dd04cc6a21ab20c8a9d45c019e665cf
SSDeep	1536:WKRLKHkfRf73SELZYkVS5hH7NIL9CN66qkio7U+yLYAyVHe8ME+gYtvn76MQq1GF:WIikJbS8YPHZIL9Cc6PiMU+G3yVHSgC0
ImpHash	-

C:\Users\FD1HVy\Music\tG2O\lJ_RJDQgish84bCgxK.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.50 KB
MD5	fa6c49fe1334cf7e13685c64cbc2d183
SHA1	8f81e6ef45b3a18875a28c5362adbdbc6c99de98
SHA256	d852b6528917f4c6c3d4f59d02208a8c40d83b8ae470b89600ff064ee5b08fde
SSDeep	768:STIIviaWssnwDmHGG7ARkD3uOiHEwQvOt8X6UvPt0NbS6tQJ1+G0A0yuHLE8aZtp:k8wDmma2K+RCvv6mtYlqox9sZt936Qp
ImpHash	-

C:\Users\FD1HVy\Desktop\1YTxNPPGwWg.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.17 KB
MD5	9e73a91cfb0469824d3dd9266977fd30
SHA1	3a51742d79ea41ef54c9e525ed5f5cb149bd77ae
SHA256	228f50e2eda7111c2104b1da9b504f6f211c9de76c612375b21a5dd528cc3223
SSDeep	1536:MItgOy9Ev7cq9C+kayOBQx4bKqFtsb2H+cSesenNGrnUEW2UVpqnAtImOAzuk38T:1yU9D1BQx4LFu2H+cJjnZVpSoRLK7bxf
ImpHash	-

C:\Users\FD1HVy\Desktop\2V N4wBRBU.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.84 KB
MD5	1de759b8383434d953de32e46eede9eb
SHA1	9d9a493991f941f683198123dfa2e769af7e4ce8
SHA256	db6207beb60afbee6e75928833e8bd05c51f02d5294d18f8d192bf921513ad10
SSDeep	384:dd54fi5k4jsW5v9TqG9Bqp3oP3ZtB2oiHnkPM0hzszdvfBUNaDnpdC5ve9:da6z5vFF90eP3p2/Hh0+zlZxu+
ImpHash	-

C:\Users\FD1HVy\Desktop\42F0.TMP.EXE.exe.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.12 MB
MD5	2ea83d3cced190b529ab755e9b4ddd0e
SHA1	7af1e3d9b694d7c455496cff0178506b8682e3f1
SHA256	c22303790d63118f6b5c450e76bd750438087527b5271c8b22506a86b1172244
SSDeep	24576:549qHnXoMW+Bto+YB7d1gr6Y+TUOEa7hyI8K:5arMBtNYBh1gr6dTUza7QvK
ImpHash	-

C:\Users\FD1HVy\Desktop\5NSsZwi6b.rtf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	8.75 KB
MD5	fd579570320a65c08f18f913cd8a98e3
SHA1	cba0906e0b8c3897dfb1a9e3c695b665c7c86dd3
SHA256	8bf10511f54cdfb81e67502e5c2f6307d826339893638b06fa6d1260ebfdba75
SSDeep	192:NYrpgCBITpdm17Jt3NIONLMktPTz90H1arsSFzJVVlFgChS1CuK:0OpU7Jt3NIONtb0HwLtJVVfgCE1CH
ImpHash	-

C:\Users\FD1HVy\Desktop\9IrmcPpBnuYGc4Yelr9W.mp4.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	20.20 KB
MD5	268bda79ba3f3f8a3f80fe1ac56529e7
SHA1	4d02b2f1d4cc9c74e7aa4a64c71d67f73706c8c6
SHA256	a503a7ccdd23fdb3c3b58cc63d44041043153993d94424cf81a2eb651360ca3c
SSDeep	384:UR9VGtDY2n/C3Bk3CLAQHILxi3/8NPQWdqaROyxFM+QYwU+k4liXE7NWPy:uoDJnaR2CXamsQqRhxF/DpXty
ImpHash	-

C:\Users\FD1HVy\Desktop\9PZJqif.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	33.12 KB
MD5	76ccb193c56c7e0bdd05d074cb687bfe
SHA1	37268a113d9cf7e99c408b142bb0dbd68390dd90
SHA256	af66f4edd091f8568c75ba66b1b0f90e2451ca186e9ec99b83a1410c96aa2be1
SSDeep	768:48/Ipv+SKCfObYPqg010NHX4wGohUUHkKKiQueaF5fKN:FrCWHt0N3lThnkDaF5fKN
ImpHash	-

C:\Users\FD1HVy\Desktop\aYyiLdyhoIdALfth0-Sh.csv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.92 KB
MD5	14b2750cde2627f7031dad334d798c24
SHA1	310723d62a0188ee5d57a26cea8c5686cc6f7bdb
SHA256	37ba6e137a6cd805a568fb866eff970f5c35f2fe33f333c27888ce5c6e549363
SSDeep	768:upo3PhYet58yD4TjAo7CSEnZsjDUTYA2JsPRvAO/dS32pZCotG1+tn8V:KKmyD4TjAorkcHiZ4O/9pZ/1S
ImpHash	-

C:\Users\FD1HVy\Desktop\aZ 2dgF6.ppt.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.16 KB
MD5	8db68fbf8e5e93f725338b943714671e
SHA1	05cdec4a6f94902423f2ca54f8a778506e0a8fe2
SHA256	e3d103364c05c97400891dd802b10a1b5f975c1be0970c21f32dfd9994b96b58
SSDeep	768:27PaHghy+3g/dzHs6J6QbzQ7/eX/eRaFHZS63iugl0T3sEbALRKt+qUXIfWf70O:2DaHghy+0zM6PbiePeROHZS6as3PbMRp
ImpHash	-

C:\Users\FD1HVy\Desktop\BbxrQ2nHZPP_A.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.62 KB
MD5	5b4f77b897ad4f8d8c1ec2a1addeeba8
SHA1	b23d2373265db27a71cd7546113a61d332754293
SHA256	dba68a98ea57856a40c1f4ccb3a338727e744d06887d2853c74d906cc7dda330
SSDeep	1536:G8G9b8ckaUwbuGk6RwBA/6jB6YwBCkJ/nVVAUA2mXqXjYHFOp+RuD50F2nrKnigk:G8ybVk46TawBX2Z/nHX/XkHFOUuDuFq5
ImpHash	-

C:\Users\FD1HVy\Desktop\CgH9zawVTY35raopEyZt.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.61 KB
MD5	465503a9aed5c81d23d9bdb9b8014a10
SHA1	f8af84257d888d2b89bffa28cfcd9fe7d1dbf837
SHA256	4cf42aea9fe5ff55c24ba6bc3e020a033bb8b63bd4b8fe06ddeb2ff864dc7a8f
SSDeep	3072:6hzcym6UqXcHMYXhbNrPJFPyOA3K/fzRTXxvy3a:I4yhuxb1PzPyOA6TxFB
ImpHash	-

C:\Users\FD1HVy\Desktop\CtmEppS 7Ks0.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	94.27 KB
MD5	2fa5d1ca80b91b52d8f33fad1b4909b4
SHA1	08a4a540ee6b0756575cbe6e69acb85abdd74ba9
SHA256	751619a8bad55cbfb03ca70b3ffbbcb7ce8cc2057177ed11de69a110b3663c7f
SSDeep	1536:qkJ0t6xJoOeFouDzP6bPGlbShQZWj7AYwqUuI9upVQp9atXaadRrZXjy:qkJ0Aom0PaPCGvAYwSwYQwaa/rpjy
ImpHash	-

C:\Users\FD1HVy\Desktop\desktop.ini.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	288 Bytes
MD5	ec7cbe65eafb4544b4cbf2cf01e243f4
SHA1	5c3d2d48a1775fb6bb71db4effcb577e74a8d729
SHA256	f99f4b50e98e7c16fe37c3a4bea4a13e51a6cf505a32339ce7908f0ab38d4050
SSDeep	6:rkr4GjQFjv+Zv9ueYmlNZPfPxeJB3wEuIrhb7FMrYh3:4r+jmZVueY4NP6hFeY
ImpHash	-

C:\Users\FD1HVy\Desktop\f9lcZFridHfs.rtf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.11 KB
MD5	83a3f4e3a2230b42293d036758137fde
SHA1	9b7ce66ee38ba7f0991a507f1c8bbe48d0970b16
SHA256	1c384031f8e90bf72c68938380590e3bb5eac191bb610d29e538d9a0897527a0
SSDeep	768:RIs0Jx2fgWstxUumXz8rmhfrX57h8xrfsCyYkVKZsMvEtaiVeKqBVObEu:oJgfgbxU5XrrXSIsuMMtUO3
ImpHash	-

C:\Users\FD1HVy\Desktop\gp1QElBYzj-bWq.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	22.72 KB
MD5	cd45ab8dbd69cbec891006d934255f0b
SHA1	a7cdf06dcc4f8aafa43dedb8d8161cf942c13d73
SHA256	a88c8a977d6b1e54b3215c1df6c7358051d47204b86c9b6ec7e15c9b4e2e9035
SSDeep	384:EsavGEIbj4ovTUTYBGGtaR/jp+32UibmgjeISfVJDCI5MGP9LzzmBcaqy7zDiF4x:EfIP4G9BFMRbpYLMS9JOcPhvp8riFU
ImpHash	-

C:\Users\FD1HVy\Desktop\jHCQtc-oyo Hp07enJ.ots.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	53.69 KB
MD5	63352c1a012f80111c53d0ecd2a48b11
SHA1	0d7963baf748cafd2acb03f8bb47d5b7e9022490
SHA256	243c0034bcec64ea21a46d0a8c069baa70eefcc5100a75a86af6fcf7cd4b8d18
SSDeep	1536:TrF/NISBkUiRWLIFv/yVhvG6vcCuDPh0EitTViUdzm:ggDYpsVhu6vcCAPh05thiUdzm
ImpHash	-

C:\Users\FD1HVy\Desktop\kLTeW7.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	98.39 KB
MD5	6430905ebf1dc7f652c478840c294ec9
SHA1	df800e14963ed9b7deaef39f3392ec6bce361d81
SHA256	7ae700bd1bbc915bbeac5646999c2dffb9c2d5d5f4f62097dbdca8acfb1ec68e
SSDeep	3072:ByJvweWy35G1TiktFIRbi1avOASzzylE0J:BAweWQ5KeEAi1Bw
ImpHash	-

C:\Users\FD1HVy\Desktop\LdhR.mkv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.34 KB
MD5	ecec01be641db20723ad4e3321a310a4
SHA1	0feb36692cef5fecdae756cda221ef18cc0cb4d0
SHA256	1a858c383b5f0152120ad3526042c5058580c766fe15b8828d9425b6ef5013f0
SSDeep	384:8w1fQ7OY0gcP0avRF7TQr8UZQTGJAF0ynwHPK3Th4wQ+IZqznw:i9ovP7i8UZPJA+ywHC3Th9QTsw
ImpHash	-

C:\Users\FD1HVy\Desktop\MDF9dFhi.gif.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.58 KB
MD5	003f607e138e77a35747395891ef5ebe
SHA1	57254edafe299906640b8b863bce82d24c45e9f0
SHA256	c6ae46257f8c5d75f49c31ca53423afa8e71302db880712ae24637037ebb0cae
SSDeep	384:0xaIguV3UvFnUGW+L+8PeFCj0feHCy0MF2EgvA6N8Vlb+r7dLSaOyEd3XMV:cgXtfW+i8GFCj0feHF0Mte2GtLhOHdn4
ImpHash	-

C:\Users\FD1HVy\Desktop\OD9hoNYV uW0IIj2du.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	33.73 KB
MD5	9e8412ad0f61ee3e92c9239148e7b287
SHA1	0451eaad09e6616c0b1bb99163bfbb04640637f9
SHA256	21cfc365ebd511f7747058be94f95978e8730626afd21b4392d0bf838b25a0bf
SSDeep	384:EFJBrxeZb+PNmukOH338G7DFy7fVJ4FRLRajt+sdW9lowcsQArBhO2CrwW/zXn6z:EbBgwXv8wE7sFjoDW/al2Crfz6Duz72X
ImpHash	-

C:\Users\FD1HVy\Desktop\oIFaH-1_nryv.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	54.95 KB
MD5	b68e9e420fe14438cc1107f8fed6c0c9
SHA1	70e146d1c8f6223946d0e2dd96141ef22a1b5595
SHA256	37aef997821dc054069bd57472866bb09623f31037b5abbfaeca6f4a0c342339
SSDeep	768:MDdJKZELRCaBK8u+fD00z15jQ8AAn3eRD8s6TFDcHFT82WfHetMSeaGxf8qIyC:M+ZORCaBK8u+FMjCDOTFvMn9C
ImpHash	-

C:\Users\FD1HVy\Desktop\QKxk.mp3.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	81.16 KB
MD5	fdd50569894d6aab5245b5b8fb2ebf9c
SHA1	2eb8c8c003f8ebb7887f0a888a2590f96320012c
SHA256	1e57d280f08923035e36e6c3ec0b74cccf4dfdadfe9149b1642b6681355d1d77
SSDeep	1536:UTlpeZsQavmllJcAXYq53lrTFowWW9x86JX7OXlqlbmf4Y5PRbJ5r3Df0iHatAgg:UTlp2sjylJcahTqwWAx86JUlj5lJFcW3
ImpHash	-

C:\Users\FD1HVy\Desktop\tK8Qmak8ns0qz6I3UcG.wav.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	63.86 KB
MD5	eac56ef8ee161e0448ed39e2cfa19942
SHA1	b819554a45861538cca98d8a11ce23f32f098a45
SHA256	548b01da50e2f53939ae9297149f37f85c562cee20339b61e8752d9b9f08d441
SSDeep	768:/oXzKYzyXkqh8OPpxRcHs6QI3TTWZrYpTZVVTf4fPYnjQACBZu2UkaWx9+qQesCJ:6zT/4fPmlmZ6VTwdakxx9+qtsYprphZ
ImpHash	-

C:\Users\FD1HVy\Desktop\uaY41mSq.csv.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	70.14 KB
MD5	47c0df0e97bd5a2acabc4ce0999177d6
SHA1	e0757d38f09a23392a437ed49461cc657277a42d
SHA256	8bbe4d74d398666ea276cb0e556355d763be42d271dd587bda66db5147155fb8
SSDeep	1536:TX2ne23nXRDVbgT1jfW5uvS/wzFxTdkxTBT2wDq6R0MESbf3E:TaXZdghj6Ipk+wD/ESo
ImpHash	-

C:\Users\FD1HVy\Desktop\WrCkWcj.m4a.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	31.73 KB
MD5	6dbe3812fe106b45d448d1c4b808c099
SHA1	51919a7f293956592d070f5b53ed91ba229d82d7
SHA256	5af795c60db2c8745a30d355ab91956a9fb6df58f911749cf4b7be892b7a5f9b
SSDeep	768:4lZhad+73vka+3yvtNHWnsn80NOi+c6Kk0O6:GZh/jv03mNH23U+c65z6
ImpHash	-

C:\Users\FD1HVy\Desktop\xV3SDT.ots.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	13.67 KB
MD5	b81f14c50cb806b72472254b7df19f25
SHA1	e0894cdf042c3e3cbbc4a3c704ea76c0d363bf3c
SHA256	bd554b3e8d3917ccaaa43664eaf12195d83fe1bd15120ebb5d90d89ceaac0bc8
SSDeep	384:TAQaIT/7sPEQ0SV3sfAmMxb8MSnbJ9emLOlHUJlUi2:MQVjxP0QQb8MQLOxUJlUL
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\1aQmLq17nlG1P.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	28.52 KB
MD5	82d993b13a7d3b4394f40a8ddf779168
SHA1	f9bdc48660d523c434628a18859666b7a38b7e3f
SHA256	651271f977eaf0d33a8c0828ce6e9393e80a543fb6389fb3e1bd33549378ca20
SSDeep	768:EQf+4ltC3sj4UJYzwNNL6j8GkGyeGU4DT/9vHJo4r7yb:EE+4vCwjJ6wfL6IjS7k9vHJhub
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\5N nlGCuCJHLr.gif.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	61.06 KB
MD5	1ec1b1c1827ca739c1c7509159add589
SHA1	a0358b7e65fecab5d1a23f0bf5a0853a2ac853d1
SHA256	a8bd635dd445b7c01f7ebb579d22337f6dac1a3c17435d6a5ef000f8069010cc
SSDeep	1536:lrNDets88pfR0FHdQzSaN7Q5zE7blTf8fApF+M:lFKsLJm9QeaKq9FB
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\5qUH.doc.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.91 KB
MD5	f0b57e7f8d93d012d3e3c3f10efc3983
SHA1	2aba5b58356f8d6648607d0a0a2a6cb7e55a789e
SHA256	c45995569f7df8d545f1d4b78167ab28cd72362f699d0a925000e68da1c4e3b2
SSDeep	192:ymmyPiYUBlZCRwPhu33xwcvJv9oSCdR4aJM1/skoHnwCrq2QVV0Qn+6Y:9IYKlZvS3xwEuSOnJTBHwCrq2iTn3Y
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\b029yG4LTNtgmmqX_G.odp.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.56 KB
MD5	f25a5db1184f475e289c4198224e97b1
SHA1	4ef2c6add39d643274c93b7f998fa50ddc4f7416
SHA256	64cb6b98d2d1d290701604eda6eacba67117771dc8a261b385693cfb84d66393
SSDeep	768:JPbI+i6H5otYuJ6Or4sdYVh5hwThxsX0f:Js+iO+RJ6OL+BX0f
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\D-AgzySFKdtUp0Q.doc.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.16 KB
MD5	ecbcf35461f78960c574ebf312fbb192
SHA1	bed9b459d16bc4984cbb90b444ce741db773e348
SHA256	28da4794594fed328acd02a0a7b22b972c3bdd7f2a67d1ab821edeba7c08b9f0
SSDeep	384:Fm8FbUAs9eHU7owmKLwTu+raJYODn/2pvbEblrc094AGZuJrAp:FmibUAsDncuqSmpOwAiuJI
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\g6f-14R3g3sZGYbIp.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.52 KB
MD5	1bb058d3a442d4a9710d1fc0b5df04d5
SHA1	1e016843c7ab773ee5f15ba806505466de88007e
SHA256	d3d65ffba26bdb9ddf5190f4b075e4308b1054f06755a29954908b4efd471b82
SSDeep	1536:F7jf4oQhvzsUEcVaoQAojPBLVA/bRJneq7o1oZdbW56brHit3cE1nANFBJs4ZI2d:FHCJsUzVPQhMlBb7o1WbvrCBn1nANFBh
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\lB o7wz9.bmp.$ANTA

Dropped File

Binary

Unknown

»

Mime Type	application/x-dosexec
File Size	26.56 KB
MD5	7e212f1889f4681c6c79955e22aeedda
SHA1	407a4dc566abbe36e73e38a2e135fe4e80b12918
SHA256	8ea7ad7b6bca7644b1624494ee823947c2eb399a4fd894b52f40b0eea5099f65
SSDeep	768:ELrN49Z5NKTVlI3lQRwgy0GMXTfenjWn3sDHO:ELrN4/5NKTAVQC0GMXTeWn3AHO
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\M9-n.avi.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	45.48 KB
MD5	daaf09349bfc718526f16901c446c71f
SHA1	f8c2c70e637eabfc0e715c993e63a4fe3f7dd317
SHA256	19e27e9779d8e7a0f7881fbc3569fbf415e38548420e840b972d1c871b3c71fe
SSDeep	768:ddQ48XZQr6stbTjqgNXXJsivQCdfePtwuuHJPHPcRM9A//0sd49Kbrik/:3QN1stbSwpIemPtwuaJPHkmY/W5k/
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\MjT96UMRMqqhF.swf.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	77.47 KB
MD5	d39e480b57f695c80a52037d641ab417
SHA1	550f261eebb8714bbb2434efab4cdf8cd1ba6805
SHA256	d034e30deb8c6252b10cb1fa50185cb9323160bb8c9d43c15e4d901af2de5362
SSDeep	1536:4qPiGmnpdukSMwdmVO9KxpCdNgXxtWBJ8Dm6icVZWc+:4PvVSBAVcmwdNght2e9iN
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\PhzRCCH.jpg.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.70 KB
MD5	9b7e35192dc6c792a4a1f4460be36f67
SHA1	98cad86c9dbeb3fff94b77817059e1ad83c1d8ee
SHA256	0690f1af579ae02668e136d02d62b14ee69e2606bf04b2c3512e7043b72d15ee
SSDeep	1536:gYOdVU14X3opytuhoEpHcADWEWTqtu4LC6LHbhI0wGoOe9ToiMU75ic1Ev6:gjdVU1lQthEpHoAu4LxLHbmBGu9tMUNL
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\xvNld.ots.$ANTA

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.08 KB
MD5	f0c9c32b1dae8763211b92d474dfa837
SHA1	f93451b69bcbead4ac5d385d6b4b6c849e8afcba
SHA256	cab7c078fb5d2055e80a028ed644ce9942a727979ffcf6f3a860b898bbe0d48b
SSDeep	1536:cHq20T6B0u3hbsj0JdcLfiOP2ZJp91fcJvGhW9mR0mWbUuFOY+sBSX7Fyz:cHBQ6TRsj0JUqo2REJehWwmmAUuEgBSS
ImpHash	-

C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW_TO_RECOVER_MY_FILES.TXT

Dropped File

Text

Unknown

»

Also Known As	C:\Users\FD1HVy\Desktop\HOW_TO_RECOVER_MY_FILES.TXT (Dropped File) C:\Users\FD1HVy\AppData\Roaming\HOW_TO_RECOVER_MY_FILES.TXT (Dropped File) C:\Users\FD1HVy\AppData\Local\HOW_TO_RECOVER_MY_FILES.TXT (Dropped File)
Mime Type	text/plain
File Size	199 Bytes
MD5	c55bcef1c6a201aaab15cebb675a4708
SHA1	bd3ce2aa14af9a731dff6a48f159355094381b80
SHA256	14886829d758a0794f5a01f90f4812ce33377087b2335cdea88820233902bdfd
SSDeep	3:ty/Ur633gEkyJp7GQJAC+A6fRAEeyiJAC47SW54KOaTEVuv+kYLvDX/MLt5I8Jz6:AKa3gXyj7GxCSfmEemCYl4kQrMRld6
ImpHash	-

C:\Users\FD1HVy\Documents\AGO5jVFwME.pptx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	70.38 KB
MD5	49bb9df4a3f37dfcecb022d44d646376
SHA1	1c222de2cf7e85a774f93c62202881d91b220de1
SHA256	93b338bd94ace6bc145f364421b57a0549e80a96b427129849dcecf8530f437b
SSDeep	1536:nlJ27Rr+E0Fy5db9QD1Sh+cM7S5VSNKAo0R/d/Az4zvsm8DWqZNPWNGXK2gq6:lJ27cE0Fy5QcAWVcKle/d/lAmXN8Qn
ImpHash	-

C:\Users\FD1HVy\Documents\CzDg7AgA6_wtvH.ods.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.33 KB
MD5	19964d35298d7e7a91e6da14692731eb
SHA1	ae00b8ca5e02d863349e7119ed7d924186701407
SHA256	e530080b10def3c800d7ca11eeb2acaa7ab89a8e93e001f85a547a4d92a1cd43
SSDeep	96:vLxmVwtPkmZAxNdwjSCpJa/fC5IRvE4q+T4mQhV+CUdxJL+GScg:DxmVwtPV6tcoXjBbq+MmQhV+LHk
ImpHash	-

C:\Users\FD1HVy\Documents\Database1.accdb.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	340.02 KB
MD5	bf093735cb922adbb4e201b013e0ef43
SHA1	43ae534edf7ae091b22339e3e7c5fc3792766c1a
SHA256	1a50e435a96dcc04b0d5dae88247a47ef33b8e02827f59bf3bb0e02ff5a71352
SSDeep	6144:0A38agXiUtKujtaKgJjsA0c1IGsaVIvwtzl9YGQal5n/kkrgiLD:R1AiUHpPAc7vBrC/kCD
ImpHash	-

C:\Users\FD1HVy\Documents\mnsjU.xlsx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	71.95 KB
MD5	aa105bc9afdeb933a414c32ea27dc80b
SHA1	c1b2670fa8d1c6b44f1591f1d97c1658923fc28c
SHA256	77cadfaee48d009bb39f7f33a2e138f032a2f04a58a5dc5c46fbe19807b95c4f
SSDeep	1536:wrEE5ZfvbQNdNY4twRZoEH7Vil9x7KE6iTdmMycCkE8HQ6HnrZtv:K/CYIAGE0l7MM3CMrHnjv
ImpHash	-

C:\Users\FD1HVy\Documents\z6U2MzO.xlsx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	75.28 KB
MD5	beabe5c2cf129b7804ce62b6f4a80873
SHA1	23d008af88a6dbd8d1ed183d03aeac375ca8cf8a
SHA256	24375209fcd0cfa64a75342f0c065df0490cad718a8033de4c17b821cc176cf3
SSDeep	1536:LVmmK4NDKI/H33ed0rSorOuE/4Db0kCocDfllWmzf5FOd1rGXIzpqvm7Koi:LVrh4ueurfKuU4Db0keBlWmzxFOfrGXd
ImpHash	-

C:\Users\FD1HVy\Documents\z_HKc3lg6.pptx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	61.84 KB
MD5	72b9736a9eef721358da8a25e34beb48
SHA1	83da2d3d77c9701f67eb3a12760d5638bf397e13
SHA256	82372ab516deed53d97f78f9d2f1182f0fe33c880a1f3fe40f982fd22b827bd6
SSDeep	1536:bdKmRDomLh5nzfUwBrHuultX7VZIzHC/7zPz9aBrkYw0:bfNhhTUwhHNtBZSi/XxOP
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\g_XT5mjGuHk8Nmh4F.pptx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	44.28 KB
MD5	a60b1d6cd0d8d18869ec342091b4ebe9
SHA1	c277febeb7eb43454e409e928623f53b24acc700
SHA256	54d616f3507a70bf9306e2521bdf47dc33b8f746f79e836e0496806bc6b0b379
SSDeep	768:DrLmy7gQ53zN0NkNZe5lODbaq6aaNobT0zI+N92F6b8QmU15kdyfx/ZTuOFVCarq:HuQ70N2UzqfBh2mumktRZTugG
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\IWVSvvMxlOfdD1.ods.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	79.88 KB
MD5	eca33da1ef1b18f252f7264c781bdd1c
SHA1	8637051abbee17ba269efcd4e2543b4c33818fde
SHA256	19f46cf7f427317c8bcbbe0d353dd00a4d9afd94f9d58df7e56e7fb408930570
SSDeep	1536:TjVBCnNr+ucY5RyFj3kJrdQ78mNmEoDlol32K+ObAnlo1ihGcROWuqsSH:TRBSZxn7yFQJJqpE5K/baljOWuWH
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\Ko5KMbWIjv.pdf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	43.45 KB
MD5	96ec4ae904c1b7e88965499b518fc237
SHA1	a8591a1bab9a8d32466227e0a530be26c9ea9ba8
SHA256	04a264b5dffc6be5e1cabc3e647f64ba1ad0e23fad09871291f825fb19d920b7
SSDeep	768:gHOsuOdrmC4sHThGKV93uvEUDg49lw23r8HaQemg6d0Cih+bBTt4GiVPlPYf8cb0:gH4ermMdH5UDN9lwqr86Od0Cg6BTtcP1
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\sAJ5q4Jpz7.csv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	72.03 KB
MD5	2001e869635faeb4d5b3178c61777713
SHA1	1d87ee0f00747038b2296fc983bdf6fa9371c36f
SHA256	338ec850a65f2ba6fba88653e3b026e4b93a99dbf8891588b8d1cc3c2adae57c
SSDeep	1536:UNd3/rt4ztxdtmID1yG6MXyQIco7mcheHU5pP1PWCKR5pfNvFL9+:4d38txdND1PUz1eCmvNvX+
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\VmdYvxc3Ol-gmt2M.xls.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	88.88 KB
MD5	fce2704769ddb99d821f10bc15fb7569
SHA1	6505226bc14a2dabba805887c096e6a403df26d2
SHA256	0fc8ebe5e7151d50e2ec0e23074ed1c7fbabd43e897a923b837a9ce4f656d833
SSDeep	1536:YifxCWjJyRJN2KRauGxo9HOkb/w6w2rEgvQSFPgbzr5t9XaOUnWU:IW1e22uWZOEEgvTgbzr5t3G
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\E_f7p3czO1Cdd9o.xls.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	40.91 KB
MD5	fa48fd584bbcbbd7062b671837aadb11
SHA1	077313ee7cd5545a5cffa495f52d03baca9a3fb3
SHA256	3a7a7e32106cb5d4d1f74b5c7c74737c4dae8332463718fd46885e62d1ef8cca
SSDeep	768:I0fvnX+dQ8tGG38pqwaog4CFf9IFoWOehn9k4QFR:ZsXB38kwFg4gSp9nm5FR
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\hhInqxZ8uBmIDhBj07.csv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	91.73 KB
MD5	ddae85fb30d36107a38c8af6d019b50d
SHA1	4dc2a93b588f66cde92df1f0c72354b3fdecee3b
SHA256	103c733ff7b6cc14f5e793ea764399d5ca0554e329dfceed99e6fa9924587948
SSDeep	1536:lZhn25AbYWn5kSVh8+C+1pbzD61jOsCP2tlO/r5mbgJf8/vSq8Z:jPZh8oDbzDjrPgnbqkSR
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\F0N0.rtf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	85.97 KB
MD5	9539c646daf0cba42247e0ee3e8ecf48
SHA1	85cc164d4eb31ee9e5d52b27435854373ffca8d8
SHA256	e4645621ab932738c1891e19f7b4d712c5e3077de5223e371055c0b40d8e4208
SSDeep	1536:/wE81Zu0H7ahzL5Gn6JOAdnBi8Gi6bMM4G2lhbyenkGYG6txYQ:/wEd27ahz0n6J3GX2aenqnxx
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\HUjUtG60c TddWcmy.rtf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	92.00 KB
MD5	65ae5795cd6835131f3232382ed053d3
SHA1	41cad1dbfb8da3bd1725774f8c965a8064642c2b
SHA256	c7af87f5657800252c6c897049cb7b62828290027a6b79567249c09701dec167
SSDeep	1536:4/RM/ZlIKvdWFaw05IiF5iAo6pg1jD9KM1/jcu4J7GVQFnZrgVwTGa8YehrpdQ6J:JBSydr5IN6pg1jDbgnoOlTqpdQ6J
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\ul2gt2Lt.xlsx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	82.64 KB
MD5	612210d0146c670514a9da756710a6e7
SHA1	c322f92ff6cd8c02952d76d8d9ece281a85d2d18
SHA256	fc4d0ec7763527d67a472d59cf49f1ad560c4ce283771bd1970372a8baf09daf
SSDeep	1536:eEw/mi1UYhrjOSvGDczp7pCttX9SC5CtHNTfqRKJLc2qAv6HYc2byC74fb025W:eEw/mOhyGuczhpOR9SCCJq0JLBcYcngD
ImpHash	-

C:\Users\FD1HVy\Documents\D2Y3tG\kc_ drhegB\WZ9w\-HpKoiMRyoVVCXApKjWd\zSm3MoFqp.odp.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.11 KB
MD5	1e627d0669dfefda5aaa17004188ae38
SHA1	52c95a38ca03e55f61260acb7baea9ace42ab7c1
SHA256	62a68b91cea364fd73107b1b40a2e1a47faf605b0628bd349a9d94868e674a4b
SSDeep	768:A29gdLvdjjmvODLr9JLz92wwHW4a67h6W737mTuFtP00xyqqCGO9P+bqCGjBvn1m:YLvljNnr95zzw1aG6W7rmaFtPtxyqqcE
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\9Y-cpSQgv6l3vMS-rl5.png.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.67 KB
MD5	72434e7f6db35578e4e4e9584180f29d
SHA1	4fe639da08f708ce99d44c2c5351b68d4cd272cf
SHA256	b79ada127f269ce6bbdf917783e714f6dbf45bdd7063123bb2a0919d229882b7
SSDeep	768:5ve/STSqpRsW6DitUCTDTJsdBh0MTytivOrH43tNZLRax4hkTiRZ1:tMqIDiuCTJsTmaGimrH4bREK1RX
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\W ZDfbD_wanSc.gif.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	60.73 KB
MD5	6faec4a4749fe1254b0faa3b31241f0d
SHA1	ff039ec3973f21608547faea08300fbd04514687
SHA256	d84cb43928a7261e9d00969b88954909724696e20f485abaec83871c2ec36d2c
SSDeep	1536:sKJN3e970dYxTDRl15aXIznZrF3B+jLcJhH56E5:fJN3eFfxn2WZr1pN5z
ImpHash	-

C:\Users\FD1HVy\Pictures\cLIkSZ\X0f8JSrsqtdBsB.png.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	99.22 KB
MD5	b468262e46acea4766effdef0b90b7ec
SHA1	c48b77c8243c34668586c21b7b863e003b870994
SHA256	6eb765b6b340ca427a7a92614daf7b2078513c106c443f243a97872672421588
SSDeep	1536:5lHP4Efnswk1CcIXxb7o8tpK0Z8rBcrgFS5gKZuAC9O66GCgrKAL97y7h:/PVfa1fIBbM8tpK0Ecfg5fD6GCKKAxgh
ImpHash	-

C:\Users\FD1HVy\Pictures\Saved Pictures\desktop.ini.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	192 Bytes
MD5	14fba752443a4bc5bbb169684c534ef1
SHA1	e77920471046be0f82504c4489e8b01d81b0d21b
SHA256	a43b90c9b6713d7fa7b79feba0bb6217ba144e61361528f36dcbe6b055583a5b
SSDeep	3:rVbaUqYrOdVjTM31jv+ZvRruarYmtGhDYMgNZPLplPt8fF7tj0eIagXhvbsTaCPs:rkr4GjQFjv+Zv9ueYmlNZPfPt8tN04QR
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\9ua4aLpWeNEQZn vUIUd.mkv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	39.58 KB
MD5	5b13ffe3f86a9f5a6268b373f2affefc
SHA1	451bbfc440c47c2e30276620cc72c9bad902582e
SHA256	d3d16e7e301017b6368d7b4b842800a2ff0fb333d80e9e1c32ed6bef8d98a91d
SSDeep	768:hJqvj2L/6TLlgvPf6YVXmjWL3kO8N5BswSeqawDRS0BabG4SF2BcPu5:h8v8MMnPNAWLEBswS3acMZ62yc
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\9zsS8CRW.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	42.36 KB
MD5	0e4d58ec93f8eea49b0c2cc13fdc32e2
SHA1	266fa78bd6c3bbe58f425b730074526fc4ea55c4
SHA256	c7cbb47a0e62e93959ccdf9093b680ea38a34be078495bbf7dbe2f5a666ac5ad
SSDeep	768:G8rSJEYNRQwfIPxf0EliDFWigmy3VMbj/Nskcje1ZUm1JstZiOSGpesf4:TxYlfGxff4Dc3e//Nvj5+ZibGcsf4
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\F0zOuSSpVPNmctC-N.swf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	50.73 KB
MD5	f276423be9bd4bf81448982d09939bbc
SHA1	aec7bf880c7b9697397d2bc8ce060433c4ae3950
SHA256	f45893acc575fa6e24518e448d3f418710b97bb1a2d45b1aa5e8f4398423368c
SSDeep	1536:Ww4J6Dy74PGjQY7LHZKIzo9e5jDTfyRv9mplyFER:QJ6Dy7Q3KjnfKCIFm
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\wJA95KXdyH.flv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.02 KB
MD5	14b722be56035174537821b887829fa2
SHA1	3987c5c383ef93e349b29357677398dbe27af461
SHA256	58ab37963017ebca79709f09658c59b673d7d659fe101f718d31972739309bcc
SSDeep	384:GjOq9Dg/i/C0hKXuZQeTuaw7LsCOzv486:G6406//hKXcfaaw7LL+P6
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\GPtGPTImgDjIi0576udd.swf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.53 KB
MD5	bfc9aca302c502e8d43d37042cca136c
SHA1	f6ef214eb9f2ead7038960358f45f17a01c5fc8e
SHA256	ca720dce77f6ac2844d5f36f6c813e52cc64225cc6230350fee4c4b8908c6bac
SSDeep	768:HyfpGknkoFzZtQs7f0yUbdyICEyOYPwBfiR:HBCRdZNMyQdyTVOYPwBaR
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\IQ0I29Q qVTPWYuVmY.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	45.73 KB
MD5	1641ce5c91e7fa3aed5254a5a939983c
SHA1	ac05efc537782322c163e150248afc241422aa3e
SHA256	09fc70a2c3b36239f99f63b9d9640162067625a5da8d8aec21889b3e3934aba4
SSDeep	768:hSJg4gxboEiUEnj7rhER8P7xh0sJeEv6o4SImu2vts/3ixu05afyifN/l:hr4ilY9lMhoH7v+/3cu05upRl
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\jyNO5NcyIG2nrd\s4MXeg0Vr.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.97 KB
MD5	cfcc72f4935c8f8d5e7007d366cff614
SHA1	f39be10007aac16f21d5ab2bc059230a343c07d7
SHA256	20de06a2f7673f3bd0ccd21368abf2f27d21c1ba88c525c21b49b44ac862adf9
SSDeep	384:oKc1Sh0aJuZenS37vYn1xrAGOrtW+QgIJvCrDQ1PavACrf63RuFLPK0TXMwTOfkC:oK6SDM3sn1xEGOIwAKKCACrfpRP5YwTo
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\333uErW2SJ.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	1.47 KB
MD5	2b1f2690374edcb78c81e1f7073dc9ff
SHA1	a13f0c7b12ba695745b25c84de50b8821c25ea74
SHA256	746c4872fe9d3df0b65aac9863475aadcf55b2df636816583fc47e616d564003
SSDeep	24:Zj1slTlVYmoz4bDUCTXckTjGGKbTbBDhvKfOFQfsbeT/G7/6Y1PgaCAOowo58xjn:Zj1cVYmoz4blTXvTjeT/vc6C2/6YBCv9
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\C98TxuIy1khtVyZ_cTR.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	52.20 KB
MD5	2a428969e4a639b9359884a26793c8e1
SHA1	8c2884fe8db255708e9d2a9aaa4bf7f5d6a1e35f
SHA256	8df886ae39ede04a73c9a57550cdd80cee3c6a4faa26b67d46b6e89e170a1306
SSDeep	768:E2FchwmQnZznM6LR/HYJBixaWbTO7TbNH9p8bU+EaljxJSU6GqrrAO10:E2n9MK/LaWvSdpesbhEn
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\Hf dn4y4LLHbc.swf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	67.38 KB
MD5	c9fefe07f22136a83338fb99b34c8d27
SHA1	969bd5d525a4d37d9234d9102da2f13e7dc1e439
SHA256	ceafe4cbc11ac45385bedd8cc55a60447fd336927f8e1fa85349d35e1613ac06
SSDeep	1536:GlY7cmHQVVyTm+NXDfzeoc+0Q0zb5R4iydocZ24kqbV6D5MfQ:fcmHQVcT/hDzpTVAH2djtISfQ
ImpHash	-

C:\Users\FD1HVy\Videos\KW4s-- cgXZEZC\T H0jeo_wwrX\pNrmbcA\yyOweBt9y9iUOOrJX\vBQeWbI.swf.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	47.44 KB
MD5	477bf2eac0a9a5932cbd44cc462584c7
SHA1	a782f2288964d536718a740ee2ff7da8dfa2bc60
SHA256	cd6649be9f5d7cc575f1bb3f65269b751d0657ee9bcf92746c5d0e8bc03b65ec
SSDeep	768:ygwceRGcjNDPxghYRydObNMwhcZQxnvVYwgsNO5mlkzByFI6dJGEBRShtHc0pGk:yPxRljNDPxghYRjhMwdvSENO5mlkUFI3
ImpHash	-

C:\Users\FD1HVy\Music\desktop.ini.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	8b6c8adc1e0ba6407c8cd343068ef3a7
SHA1	3c6209a88feb97b877505d273c8c7f6b7dade19f
SHA256	684c487faa2a750402e3e310954bc1623fee659e2e69e00f0367d09296e40a80
SSDeep	12:4r+jmZVueY4NPG50RkWHj8LPFpChkEclUp5p+0vFVRz:46KZVW4NepC0i4wp+KVB
ImpHash	-

C:\Users\FD1HVy\Music\xJgB9.wav.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.50 KB
MD5	6ab3e068af5f3dadc081c10a64ad83b4
SHA1	a345b73b60230592569dc066a95f5a3b71081919
SHA256	56dceea16d6ed69bb73b0db98e5f9f03725c74ccc8daf9b27aaddf1c89396d1f
SSDeep	48:QlYULU3rgwPJfwg2zoAaPdiFTP+KRsyXOile4XJmF8zJrSo6kBeDWbVRl/:QlVU3rX2EFdoVX7eaJq8zwoZNbXl/
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\dle rck7Umm-.wav.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	22.38 KB
MD5	fba08eb7b8be860453ded99df09615b1
SHA1	e65c1fd64b16474e5d65ffeea255508fe2ff62a1
SHA256	e16dbf6665df46d31ed3d342577b752696f7f89aec7199b47d04b26aaefabf7a
SSDeep	384:/MpghaqSAYiC6dci+okRxKbG8Y1iz5WA4G+oOtbSY+bV5wDRQJli6u7RX1:/q6anZwci+okRLEzwAOXbdS8DR0TkRX1
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\JUnckwz0f9.wav.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	91.94 KB
MD5	5de5b4c35d3d764eac8bb0fab290e489
SHA1	3b90db574c189052d07a1eec65e3c0b2b52cf6b4
SHA256	0eac794a629b7ef23f16571fb0734545ce37651acfabcdd55d3b185a08e56141
SSDeep	1536:xLq/YiLzHRvQ9VVaeR0NRHEdD6rwv6i0avL2gXybFCfwlel3psL5Q8fXfvukVP3x:ZYpXxv8WederwvJ0aqqNf3l3GHnukB3x
ImpHash	-

C:\Users\FD1HVy\Music\9sMMb260B1u\xavp\WC8LUkBjI.mp3.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	32.34 KB
MD5	da872fc92d8cbf7867ce9bf053f6e428
SHA1	98f5132b142249d9eea6cb9dcb8b387133287a6a
SHA256	b15fd4d2dff6681fd24db425eb1956bc085e8fd7cced5895676571de78eb2a4b
SSDeep	768:31iWzAYNXN/f1oZfMyo3tgOJFhgrnAm3NkutzOsZUImjxvVGei:LAYL/w+gOBg7guShxW
ImpHash	-

C:\Users\FD1HVy\Music\RjvHKIDt9\evi6Nl1 g1KyY\-a1fx91SeT 48T\kEfh1XIhHEyxIZI.m4a.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	46.88 KB
MD5	412169c1b706b9a382910520ae98708a
SHA1	bd4a9a0094e7c40ee81a1676381250263162edb5
SHA256	069cda023300f5d31f2da4e9fe0373e7359c401c05e8a65eaee24d00207f2912
SSDeep	768:4+BiN+Az5Z3Ip1RyZQjaEmVVunhfgvxSTdLypqy90Ne+dykLHeVRxJ5D1+VAPW8P:pUZzn4pLjaEmV0TdLypVEXciwxZ+VwGS
ImpHash	-

C:\Users\FD1HVy\Music\spIObPh75b\TFaPhwZGXS0zM.wav.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	16.98 KB
MD5	83bcd09c9e2e7e4f573214416d6a1813
SHA1	83f27f0ce1c3d5caa8645c365e7f7d6a10dc54d8
SHA256	624c821b4e7b5a7898f496e87ebfa3a10d93ec45a875945e9171253af8440acc
SSDeep	384:1gPEXidRekik/eVg/S072mKd3hdb+4ZPNJ9avqeSN7VRy5Jl:mcARikWe619JrXNVVy5r
ImpHash	-

C:\Users\FD1HVy\Music\tG2O\KxIfNFq_eT6K4Yywd.m4a.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	29.12 KB
MD5	6704e2d98b3fbadc5904b3ea9fd5a7b0
SHA1	279c08e67d1792c42c6b48658d1bb405b6d203a2
SHA256	5afe4caa80bb4258ded489ea386953e93635a214bc1445b405a61fa0e13ec3f2
SSDeep	768:4E4jYUKa/BSHGOUp8fpgKQ58V/xUd64tO5vdQOw6tcMn:93UK2BSHzhpgf8Vuk5vFJhn
ImpHash	-

C:\Users\FD1HVy\Music\tG2O\vgfSxUhhzUZpNrrLJ3hR.mp3.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	59.55 KB
MD5	56c3244372d274183cc4fe2bc974f719
SHA1	f8c0598c3a46de24516990b2d03e9d287e54bacc
SHA256	951ff799d37694458d6fed7196f3d3d8addd0fda2e8365c76cbe1e1a037a2943
SSDeep	1536:TH5av7KaYxdcnfGBqK2q5slYgvXRWZ3SOEM5Ai:TQvDnfb/1YgvsZiOZAi
ImpHash	-

C:\Users\FD1HVy\Desktop\0ocQBHc.xls.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	9.16 KB
MD5	917e22c4ead32595ad9f98cacfc5b1b7
SHA1	e8ad9d92c1f84a35b7f74a06c7f63858767ea269
SHA256	5f54731ff52a39258f4565fd51af17336e8b4bc42811ebf50054e21430d36d16
SSDeep	192:c6SpUdBvVZNgpIBri8x2Nvy3uUI6It7mjDdwT:7SpUdBNZjYXy3u76I1mvdM
ImpHash	-

C:\Users\FD1HVy\Desktop\A2BeonpxV2cn0bIC.png.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.75 KB
MD5	f4b173f1c1bc7add41b43d08947c4f78
SHA1	d8a6cc517f1bfe34c39e1d32b4a61292c9f88e41
SHA256	90479c5f9a0ba8a80ebda52b5f0607b670a94529f26fccf5bde7d032e080156b
SSDeep	768:K/AnHJsYtF0tGZNFnZxPb/BqzD3o8bJIo+M9IaHySTprX6SCk2sH:KoH2uFnnM/3o8bJIo+M9H1rX6Sb
ImpHash	-

C:\Users\FD1HVy\Desktop\AQwif8E74Z.avi.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	94.55 KB
MD5	cb2d05b89881e8fb3bc977857165287b
SHA1	6d20c0779bad14cec278f7d54ae1af5926faeaeb
SHA256	639d1ebfb29267a6b7e10ea6b700ecf19ae6a9ee6176a24378811008c837a2fa
SSDeep	1536:9okmY7MVVKyaQq6hJZMfxtnPbGNrXJGTm+DOdBFKh+pEcLPd6uKT/dIn2wKVCXD8:9okL7qMyr9hazGN7JF+iKh1cL8uKe2TF
ImpHash	-

C:\Users\FD1HVy\Desktop\bUb qc_SLq8O.mp4.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	23.05 KB
MD5	c4739684818ae58d499ecd9b673d3486
SHA1	b2c272558c0dbaa0d66a7673dd2954609ed672f9
SHA256	93fcdae2bdb4e7e6b2216f47a12cba7b7135e80643fa15f61397a423c0c6b47c
SSDeep	384:sZHwgnXkTHeo6AWitjdIPaRhR2s8bZ1uVw8Q5PQ5jN7NACTwr513YBAnB2uiMB8a:sWgXkjP67itiEn2s8NMVRf5jzAywr51J
ImpHash	-

C:\Users\FD1HVy\Desktop\BwLCz.jpg.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	85.69 KB
MD5	795b0ff56cd6e8cba79e245a17ebf0aa
SHA1	212849efbf5d395bb46dfb2cadca9115b0faa39c
SHA256	5c63cc76b353e21a52983fbdd4542ee06ea0d7640a132e081b4f6c5b85c787fa
SSDeep	1536:UHwhAx4jBY6HAdboWr8EWxBNXz8M4NCXt9zP0EkLjniRRd4MKvH8d2MGfesPx:UkS6HCXW9XQCXD0EkLjniRz4102tLx
ImpHash	-

C:\Users\FD1HVy\Desktop\cSg8 emhaX_r.ots.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.80 KB
MD5	e46a55611f8298cce77e0babd2dd1df1
SHA1	424b954d2ef9b2e75c28a7da5ef06616a7485836
SHA256	5627686327dec959eb6d8bd96a3fab77370bb3ab2f5b542e04e87204da2265a1
SSDeep	768:2ncOJcO8xSn7npD6QGC9gaXc5DG/VDF0xw+nBEaIM/K+NiRYrAm:26nSn7pD6TaeXw+BEaIuyY8m
ImpHash	-

C:\Users\FD1HVy\Desktop\I4IMK8uPkmw_W.mp3.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	31.89 KB
MD5	c914a33f22a9abbbb411386c200c1bef
SHA1	6a44f7051efc2d8d0ea6074b2f46af59967083ec
SHA256	63f4aab3082f13863511bc2a0546f065379cb7a3275143f48b5c9474f349cdc9
SSDeep	768:nrCiXxrPad0STqRhwatzcbPIc6DJGm/co+ZM22BRpcgQ0:vXxrPaWS+Ca6bPIc6DJGyp+ZB2Bs0
ImpHash	-

C:\Users\FD1HVy\Desktop\mA8Gl8nzr8.xlsx.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	95.50 KB
MD5	e5717d9304badc5a804409096fb98e34
SHA1	c29326bf26e58acde9e85bf3275fab2fee958add
SHA256	b4fd0e6df9b7d6259b3f67dabc3a44216a4a7a70e196c3826c53c8e5e44b2987
SSDeep	1536:tZSGC3UFdwT7rfLcEAQ743GrZGFB14HvAapOsi0/+ShY96udE9pXiDUnqtq/:tkGC3y473cEAQ02rZGH1+BpySi8ual
ImpHash	-

C:\Users\FD1HVy\Desktop\Tj494Ho-BBcDUp1CA.mkv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	91.31 KB
MD5	ec45f69e3c9687977fc591cef7761ed9
SHA1	d42c7e746413dab1158431c5ebf880dabe31b1db
SHA256	c7819642fecb1bb48cef61a5629ab4df3808164d5336bb93444e0d2c806d13e5
SSDeep	1536:8q0byWopdAD5lU3vKbi1GYRQ8gUTzRFdzFBI7HjmP6SXC9cUoa1FY:l8fozAllU/W4XgUTzl4H6XCSqPY
ImpHash	-

C:\Users\FD1HVy\Desktop\V_VfUPg6JY sjdteIA3.gif.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	2.58 KB
MD5	2f2424c5e1ff2629c9dafc14a1566fab
SHA1	a655fd42b9974834b81b83346f80f8fdabd47058
SHA256	34f0f299fdc9e1f7073c30cb3a4d9e63934df211557ff0954cf6167764408cbb
SSDeep	48:kjkUCFrW4XISkXjTpmZLNqtfV8UlG7hkz8GO8Zj1pJQqXL0jhPE6EtD:kjKFSwTWVcBwNdA7hrUZtjb0+D
ImpHash	-

C:\Users\FD1HVy\Desktop\WMWtJGFcI6Q-91k75WQc.wav.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	54.73 KB
MD5	eb079042416404ea6a9645dba9e4abef
SHA1	79abfe84d9844c89421806cb06eb21c0f88ef3b0
SHA256	5598a71583b48130f3dd459eda737121cf330fae2b221d07e532356f7fb34540
SSDeep	1536:834pqgxt/vSy2x0O8AUhYRHE7VWC9LcyjjUigX5D:M4pLt/v5LYRYHgpD
ImpHash	-

C:\Users\FD1HVy\Desktop\_uPhYhD.png.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	12.91 KB
MD5	483fdae078c59cefb15660c22569d352
SHA1	818434c166ab854b5c59cbccc70b90cc2b4a7b65
SHA256	b32c0cd9682a5557e67b972bdc04e4908763c06edb5ae6c80dfb4710417d20a2
SSDeep	384:qeX4Wk5KnQUeeqEBCtwW7HYdQZY/eUe3iSdfJej:qeouQxeqTLHYd/eURSdfJQ
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\-ibxuw5BT.mp4.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	35.27 KB
MD5	bb5bd165b87f9d28c016e7245b1ac83d
SHA1	39e33a566b7180e14927a5020106c2b8aa5f4b65
SHA256	84f61eb8d8f69a31f6a4f70a8b6203aace7cf457829e0dec6df724c142353c26
SSDeep	768:IAX+QuPg6fFK6/UWkAK8Ff93ILYzGHGEkKgrAPdpnDl75cQVsQ:nXZu4y/dZFLSHHkK4ArnZ7qQj
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\dcplTjPjl4z2QV.odp.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	37.03 KB
MD5	b6447d1f3c1387670ac69f282a1acde6
SHA1	5c7526c07f617d99bac90846c656b85955ea2202
SHA256	da9fabe022665d9baf7f825f49eb50287038625543dd220f10947d10f0444910
SSDeep	768:TUDu0ryJwQ3yHOuHFs6UrNrh5H7EFsIu2ca1C+ywPaa:iu1wQiH3+BZVNUtca13aa
ImpHash	-

C:\Users\FD1HVy\Desktop\uI6dJwkjdmY9\Jk_T2yqTjjg2-B-HH.flv.$ANTA

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	79.09 KB
MD5	43e843cf478fd9fd568ebdcd195a0365
SHA1	cf96d1f62f9ecd18ffced24b4a1469b71287fefb
SHA256	7087f2296014298c420e53d67d33941ea2d86821230ab191054d7421c950f768
SSDeep	1536:zvxk2wBDifSElCDtLaY0nA4clzdiWPP2yfORD8oh:zqd5OY0nNUzdz2Fhh
ImpHash	-

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After