1.9
低危
DACN
0.14
FACILE
1.00
IMCLNet
0.74
MFGraph
0.00
反病毒引擎
未检测
暂无反病毒引擎检测结果
静态指标
查询计算机名称
(2 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545344.515125 GetComputerNameW |
computer_name:
TU-PC
|
success | 1 | 0 |
|
1727545344.875375 GetComputerNameW |
computer_name:
TU-PC
|
success | 1 | 0 |
检查进程是否被调试器调试
(2 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545344.421125 IsDebuggerPresent |
failed | 0 | 0 | |
|
1727545344.828375 IsDebuggerPresent |
failed | 0 | 0 |
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(3 个事件)
| section | .MPRESS1 |
| section | .MPRESS2 |
| section | .imports |
动态指标
分配可读-可写-可执行内存（通常用于自解压）
(2 个事件)
在 PE 资源中识别到外语
(4 个事件)
| name | RT_ICON | language | LANG_PORTUGUESE | filetype | None | sublanguage | SUBLANG_PORTUGUESE_BRAZILIAN | offset | 0x00008078 | size | 0x000025a8 | ||||||||||||||||||
| name | RT_DIALOG | language | LANG_PORTUGUESE | filetype | None | sublanguage | SUBLANG_PORTUGUESE_BRAZILIAN | offset | 0x00006a78 | size | 0x00000140 | ||||||||||||||||||
| name | RT_GROUP_ICON | language | LANG_PORTUGUESE | filetype | None | sublanguage | SUBLANG_PORTUGUESE_BRAZILIAN | offset | 0x0000a6e0 | size | 0x00000014 | ||||||||||||||||||
| name | RT_MANIFEST | language | LANG_PORTUGUESE | filetype | None | sublanguage | SUBLANG_PORTUGUESE_BRAZILIAN | offset | 0x0000a734 | size | 0x0000022e | ||||||||||||||||||
在文件系统上创建可执行文件
(1 个事件)
| file | C:\Users\Administrator\AppData\Local\Temp\lzljp.exe |
投放一个二进制文件并执行它
(1 个事件)
| file | C:\Users\Administrator\AppData\Local\Temp\lzljp.exe |
一个进程创建了一个隐藏窗口
(1 个事件)
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
在用户文件夹中创建可执行文件
(1 个事件)
| file | C:\Users\Administrator\AppData\Local\Temp\lzljp.exe |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2071-10-02 02:28:38
PE Imphash
687a00a1c5353da665519febeef2cf71
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .MPRESS1 | 0x00001000 | 0x00006000 | 0x00005c00 | 3.048681079723622 |
| .MPRESS2 | 0x00007000 | 0x00001000 | 0x00000400 | 5.880026201846157 |
| .rsrc | 0x00008000 | 0x00003000 | 0x00002a00 | 4.166038881601248 |
| .imports | 0x0000b000 | 0x00001000 | 0x00000400 | 3.0762862022655533 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00008078 | 0x000025a8 | LANG_PORTUGUESE | SUBLANG_PORTUGUESE_BRAZILIAN | None |
| RT_MENU | 0x00004180 | 0x00000104 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_DIALOG | 0x00006a78 | 0x00000140 | LANG_PORTUGUESE | SUBLANG_PORTUGUESE_BRAZILIAN | None |
| RT_GROUP_ICON | 0x0000a6e0 | 0x00000014 | LANG_PORTUGUESE | SUBLANG_PORTUGUESE_BRAZILIAN | None |
| RT_MANIFEST | 0x0000a734 | 0x0000022e | LANG_PORTUGUESE | SUBLANG_PORTUGUESE_BRAZILIAN | None |
Imports
Library USER32.dll:
• 0x403040 SendMessageA
• 0x403044 PostQuitMessage
• 0x403048 DestroyWindow
• 0x40304c DefWindowProcA
• 0x403050 CreateWindowExA
• 0x403054 LoadCursorA
• 0x403058 LoadIconA
• 0x40305c RegisterClassExA
• 0x403060 LoadAcceleratorsA
• 0x403064 FindWindowA
• 0x403068 ShowWindow
• 0x40306c UpdateWindow
• 0x403070 GetMessageA
• 0x403074 TranslateMessage
• 0x403078 DispatchMessageA
Library KERNEL32.dll:
• 0x403000 lstrcpyA
• 0x403004 HeapAlloc
• 0x403008 GetCommandLineA
• 0x40300c GetStartupInfoA
• 0x403010 ExitProcess
• 0x403014 GetLastError
• 0x403018 GetModuleHandleA
• 0x40301c GetEnvironmentStringsA
• 0x403020 LeaveCriticalSection
• 0x403024 EnterCriticalSection
• 0x403028 DeleteCriticalSection
• 0x40302c GetLocalTime
• 0x403030 DeleteFileA
• 0x403034 LoadLibraryA
• 0x403038 GetProcessHeap
L!Win32 .EXE.
.MPRESS1
.MPRESS2
.imports
tFV@@UI@XVu
EuUXQ[
%XIE0X
VtE[U@tU
hMH0UER
}ht }it
Iu_A[^H
3@00,j
<"u>"u
FVQ%FP,P0
YRGXSZ+[3VHE
,L5V0
VQRiD|
,IXPXF[R
KD[fP/t
H)FVTsb
c7"fm,CBkQ8Zh
KAI[XV%t
Z,Pv,&
[FI8yS
XdEBXy~
E%P"\ GQy
o"?&>D4y
ysU>Nm
7I-Q:^kkMc
U<wzI5
"y(EOci
_egSaRj
hQ2ndkQjI
J)J[LV
d$RhEK
l;gd;x|
H$`V!*`
KE8rAMlmP^fphO
`Fo5DoW-7
0ehG[E
hw5mhF
U#<ViD`~u
6,j%[w_M5JV1
1E6vPUpR1
EsCT:,KPX
v\hD|)1bBELV5O?|-L"3
A&G24bu*?3w
' i?&e[u^hA$w5
`M(HM*
$[5Vgu
8p{yrVMS*4
:^;~,_s
GRk>qt
%gK"+a'
<`(*py
|XHn#6?L
PgQ( JUsFQ
_;[e=|
A/L$`z9
Xi[}wBp
QiD|zXk
iHik6C!"i
{*hr%nH1
,L[#xZ
^'S_-V
1|OX1g+4RZ#
ROIf.@1
~QP9.~
UANN>#cdYu;yD;x<*=hZ
?O`9za#p
tMhFHt%Q
fZuSAVWAf9
GGEGGEM;r
E@,XF3
hFUPPP]Vt$
USER32.dll
SendMessageA
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
LoadAcceleratorsA
FindWindowA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
KERNEL32.dll
lstrcpyA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetLastError
GetModuleHandleA
GetEnvironmentStringsA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLocalTime
DeleteFileA
LoadLibraryA
GetProcessHeap
8Muex<
KERNEL32
VirtualProtect
G(XPTPjxWXt=
Softtonic
classFirst
tarrantules
Harisma
av - va
Batang
Riched32.dll
RichEdit
Last hero
down town
Rolland Dorsetshire
I=/-;6=
K+-4!<.>S1
T%"I"
GetModuleHandleA
GetProcAddress
KERNEL32.DLL
USER32.dll
LoadIconA
t7Kt'Kt
.#WM.#
7 7 7 7 7 7 7 5
7 l\7 7 7 7 7 7 7 7 7 7 7 7 0
7 7 7 7 7 7 7 7 7 n^7 7 6
7 7 7 7 7 7 7 7 4
6 :!:!:!:!:!:!:!J3:!:!9!:!:!
p:!:!:!:!:!:!:!6
7 ;";";";";";";";"\N;";"q`;";";";";";";";";";";";"7
:!;#;#;#;#;#;#;#\O;#\O;#;#:!:!:#;#;#;#;#;#;#;#:!
;#?%?%?%?%?%?%?%?%tg?%?%u?%?%?%?%?%?%?%;#
?%D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,D,?%
F/J2D,D,J2J2J2J2J2J2J2J2J2J2J2J2J2J2J2J2J2D,D,D,D,D,D,J2J2J2F/
F/F/pWpWpWpWpWpWpWpWpWlTpWlTpWpWpWlTlTlTlTlTlTlTlTlTlTlTlTF/L5
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="1.0.0.0"
processorArchitecture="*"
name="Company.Product.Name"
type="win32"
<description></description>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
</dependentAssembly>
</dependency>
</assembly>
USER32.dll
SendMessageA
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
LoadAcceleratorsA
FindWindowA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
KERNEL32.dll
lstrcpyA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetLastError
GetModuleHandleA
GetEnvironmentStringsA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLocalTime
DeleteFileA
LoadLibraryA
GetProcessHeap
O f f i c e 2 0 0 7 ( & B l u e S t y l e )
O f f i c e 2 0 0 7 ( B & l a c k S t y l e )
O f f i c e 2 0 0 7 ( & S i l v e r S t y l e )
O f f i c e 2 0 0 7 ( & A q u a S t y l e )
W i n & d o w s 7
A b o u t G a n d e d
M S S a n s S e r i f
C a n c e l
S y s T a b C o n t r o l 3 2
S y s L i s t V i e w 3 2
s 2 6 a 5 9 c d 6 4 0 3 4 4 b 5 d 4 b 2 c 5 c a 2 a a 6 4 4
C : \ f 5 d 1 9 e c a f 0 5 d 8 1 3 0 1 8 2 6 8 7 a 3 b 4 0 f a e b 9 d 4 5 1 b b b 9 3 5 1 e a 7 d 1 0 d 7 d e
C : \ U s e r s \ L i s a \ D e s k t o p \ v D w e v a h O . e x e
C : \ C N L q 7 e p R . e x e
C : \ 2 1 b c 9 6 1 0 8 1 7 1 a 0 a c 2 a 5 d 7 5 0 9 5 c 6 b 1 9 1 e 5 b 9 3 f 6 7 0 6 d c 4 a 8 0 2 a 3 7 0 2 c 7 6 8 f 4 d 4 6 a b
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ x N 4 c D n q y . e x e
C : \ a 5 6 5 8 9 3 e 5 5 c 0 a 3 1 4 d 1 0 3 2 3 b f 0 7 e a 1 0 1 a d 0 8 c f 0 d 6 5 6 e 5 7 5 5 7 b 0 d 8 2 0 b f c f 4 4 5 5 2 c
C : \ 9 d 3 5 c d 0 7 7 7 3 b f 9 7 9 0 f e d d 8 5 5 c 3 0 f 5 b 9 1 4 0 6 c 5 e 9 d 6 7 8 9 c f 0 f f 1 1 d a b 3 4 6 e f 1 4 3 1 8
C : \ e 9 3 b a 8 a f 8 6 e 6 e c 1 8 0 b 8 e 2 a 4 9 7 d b f 9 a 8 a 5 9 4 7 2 7 8 e 7 3 2 7 6 9 a a 7 1 6 c 9 9 b 1 7 1 0 d 8 e a 8
C : \ 1 d b 5 0 d 4 a 0 a 0 0 3 7 0 6 1 9 7 7 6 a e 7 5 1 7 b a e c 1 3 2 7 1 a 8 2 5 3 d f 3 e e 1 3 5 f 4 2 d a 2 1 7 7 5 b 5 c d 1
C : \ 6 e 2 c 9 8 4 7 a 5 1 8 6 b f 4 8 8 2 6 5 b 5 5 2 5 7 7 7 f 3 6 e 6 3 6 0 1 0 d e f 0 1 7 a d b 6 9 0 7 e 7 e 7 6 1 8 7 8 9 0 8
C : \ u H T g o M t Y . e x e
C : \ 4 e 3 a 6 6 2 3 1 e 4 a 0 f a 6 a d 0 c 7 a c 8 0 c 7 0 9 c 5 e 5 8 d e 1 e 0 d 3 9 8 d a 1 3 b 1 a a 8 d 9 b 0 d 9 1 8 c 6 5 3
C : \ a 6 S J q b Y 2 . e x e
C : \ 8 f d d 4 e b 8 6 1 3 b 5 b 1 a 3 0 a e a b c b 6 3 1 2 5 3 8 2 0 d 8 c 5 4 b c a f 4 e e 5 1 8 8 0 4 9 3 a 1 3 c 5 0 a 3 3 4 6
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ c e 7 f 8 9 5 1 5 5 5 a 1 3 8 d 2 d 6 e 5 0 9 6 4 4 b 9 e 4 0 9 c f 5 4 5 a d 5 e 2 1 e 3 5 b 8 c 0 8 b b 1 1 d 0 9 4 9 f 9 3 1
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Y u u K y 9 B 5 . e x e
C : \ W o m _ 5 Z c r . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ U 7 D v Y i c j . e x e
C : \ 3 d 8 1 c 4 9 d e 9 e 0 d 3 3 4 9 c 8 e 0 b 0 d 6 5 c 3 b b 5 f 1 7 5 7 8 a e e d 1 3 b 0 5 f 3 7 1 c 9 3 0 6 5 f d 4 1 9 5 d b
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Q y a W Z C z p . e x e
C : \ 4 4 0 5 0 9 3 3 9 0 4 3 1 4 f e e d 8 4 2 4 5 0 7 6 5 e 8 9 4 7 5 4 f 1 3 4 7 b 2 f e c 2 d 8 c 3 4 c c 1 8 b 3 0 b a 2 1 c 4 0
C : \ e 3 6 f 9 0 4 6 b f 0 7 7 e 7 7 9 e f 0 4 0 a e 9 b 8 6 b d b 8 5 b 9 3 2 3 6 4 0 f f f 4 d a 4 0 f b 9 d 8 1 b 9 d 5 2 e 0 7 b
C : \ 1 d 9 d 0 f a 3 a 4 e d 9 2 4 1 7 5 b b b 7 b f b c 0 b 4 1 a a c 7 e b 8 3 7 f 6 c 3 7 c e 0 3 5 9 d 8 6 b e c 0 5 2 d b 1 1 3
C : \ y C _ c t l u Y . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 6 l x y q V U B . e x e
C : \ 7 b 0 7 a 7 2 8 e 2 6 6 1 9 0 3 2 b 8 b 2 d 2 5 6 6 a d 3 7 8 9 2 8 c 6 b d 9 a c 7 5 6 9 3 4 0 5 e 5 2 1 a 2 2 9 c e e f c e a
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ P s 3 U Q 6 f 5 . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ . p e 3 2 . e x e
C : \ U s e r s \ R A 4 9 1 ~ 1 . V U L \ A p p D a t a \ L o c a l \ T e m p \ 7 a f 9 4 2 5 7 8 a c e d 5 9 f b b c 9 9 3 2 0 6 6 e 2 d b 5 b . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 8 L 9 Q N B C E . e x e
C : \ f e 7 8 1 5 4 0 d 3 9 0 f f 1 d 0 0 3 7 d 0 1 d 4 8 b a e c 2 7 1 7 8 c e 2 d 8 8 9 2 7 d 2 e 2 f d 5 f 9 5 5 0 a 8 6 f 4 1 5 c
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ T 8 o p 7 Z m i . e x e
c : \ t a s k \ F F 4 D D 0 B F 0 3 6 6 5 B 3 7 B 7 3 4 C C 9 A D F C 0 A B 5 4 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 3 6 9 3 7 7 1 9 a 3 0 b 2 c b e 4 2 4 c 8 d 9 a 1 d a 6 5 3 1 c . v i r u s . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ C l K 5 3 g B b . e x e
C : \ f d a e f 6 3 d 6 e 5 b d b 9 4 9 5 4 9 5 b 3 d 1 f 5 c 6 a 5 2 f 3 b 2 c c d 3 5 e b d b 7 5 d d f f b f 4 3 8 2 3 7 f 7 5 1 7
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 1 e 6 e 7 3 6 c 1 b 4 0 3 7 b 7 _ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 2 a d 7 e 9 1 e e 8 a 8 6 1 0 3 0 c a 7 c e 4 c 4 2 e 0 b 2 4 d 4 d 6 1 d d 2 a b 3 c a 6 3 f 8 f 0 9 0 9 4 4 c 8 2 7 4 d 6 1 1
C : \ e f 1 2 e d c 7 c b c 2 3 2 0 7 f e 5 1 3 0 8 6 5 c e e 6 a 8 3 1 d 3 e c b a 0 8 9 f 4 e 2 b a 6 1 b f d 0 6 8 6 5 5 b 6 4 d 4
C : \ d e 4 3 8 7 5 8 8 7 8 0 5 7 6 6 3 9 3 7 b 2 7 b b e 6 5 e b 8 e a 4 4 f 7 1 b 6 6 a 0 e 0 f 4 7 b 9 9 b f c 6 6 4 4 c d 9 0 1 3
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ d b a 5 6 6 b 2 7 b 4 1 3 d 6 2 _ l z l j p . e x e
C : \ a 4 e 4 7 6 d 0 f f 4 a 1 b 0 0 d 2 9 0 e c 4 e e c 4 3 7 1 d 4 c e e d 3 d 1 4 f a 8 7 9 d d a e d 7 9 0 1 b f 4 a 8 0 e 2 b f
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ c 7 a 7 1 5 1 2 8 f 2 3 9 4 d 2 0 0 1 f d a 6 3 0 6 7 c 1 7 d 7 d 2 0 8 7 a b 1 5 8 7 2 a 3 1 4 1 7 2 c d 8 8 e b 3 7 7 f 1 1 0
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ b 2 5 5 3 7 b 0 4 4 e 7 4 4 9 c 2 7 4 f 3 b 9 0 c a 3 1 5 3 d d 2 6 4 4 d b 5 4 c 6 c 3 5 3 0 e 7 3 3 1 e f b 7 5 d f 5 3 a 4 5
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 4 d 5 b 7 e 6 a 4 9 f 1 a 4 0 0 a c c 0 0 0 8 d d a d e f c 6 5 2 4 4 1 9 5 d 9 5 8 1 8 a b 8 7 1 e 1 e 6 b c 1 7 8 f 2 a f 5 3
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 6 c e a b 4 7 4 2 a 6 6 8 b 8 9 0 b 8 f 8 6 a f a 7 a e d 5 e e 4 c 4 9 2 0 1 f d 1 6 b 4 a 7 8 b f 2 8 e a e 3 2 2 0 a 2 b 6 6
C : \ c d 3 0 2 e 3 f 4 d 4 a 8 6 0 6 3 b 4 7 8 7 b 9 d 5 6 b 6 8 0 e a 3 d c 3 c 8 a 2 9 e 2 3 3 8 c 3 e 7 c e 6 5 e e 0 0 5 a 3 9 7
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ b d 5 3 d f 5 1 3 5 1 4 f 4 2 3 b 9 3 a 3 a 4 f 8 e d c 1 4 1 9 6 f 1 d c d 1 c 8 f f 4 3 3 4 3 8 7 7 e a 2 f 9 d e c b 1 4 7 4
C : \ 0 8 f 7 e b 8 7 2 c e d b 0 3 6 4 9 2 0 a f c d 0 2 f 1 a 4 7 0 9 3 8 6 5 4 f 6 7 7 f 9 b 4 b f e 2 9 5 1 9 c 5 4 7 b 5 7 c 5 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 4 9 8 7 9 9 4 4 d f 6 2 f 7 5 2 _ l z l j p . e x e
C : \ c 5 8 5 d 2 7 8 d 6 e 5 7 9 3 3 9 1 8 8 c 2 8 0 c e d e 9 2 3 5 e 2 4 8 1 a 0 5 4 a b 3 3 9 4 8 9 2 8 d 4 6 5 c 3 c b 7 f 6 6 6
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 0 6 0 b d a a e b 2 6 4 f 6 7 2 1 e f f 6 e 2 d d 5 c 6 e 8 b 1 0 a 1 6 1 8 5 0 e f 8 e 0 7 9 b e c 1 f 7 4 8 f a 1 0 1 d 1 3 3
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 0 1 2 e 0 4 f 5 1 2 8 3 0 3 c f 6 1 1 1 3 c 8 a d 8 3 a 7 5 e 5 7 d 6 2 8 3 c 6 e 2 1 9 c b 0 9 0 2 b 8 3 9 3 1 c b b f e f 9 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 2 a 4 b a d e b 1 6 c b 9 3 6 b _ l z l j p . e x e
C : \ c 9 d d 8 5 5 d a a c 9 f 5 8 2 8 7 c e b 2 b 7 4 e 9 0 1 0 e 7 2 9 0 2 2 7 f a 2 6 3 b d 3 1 e a b 0 4 d b a 9 4 c b 1 6 6 6 e
C : \ 5 9 7 4 d 2 9 5 2 2 b 2 c a d 4 4 8 0 f f a 6 0 c 9 8 4 4 b 4 f 7 b 4 5 9 b 6 5 3 8 5 e 7 2 0 1 1 b 5 8 e 9 d d 5 d 2 8 e c 4 0
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 2 2 a 7 5 0 e 1 f 6 4 e 1 e 0 5 6 c 7 3 d f 1 c 9 6 6 c 3 e 9 5 d 9 b 2 8 5 9 f 4 6 a e b 6 3 4 d a 3 c 7 1 0 7 a 9 a f 0 a f 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ c b 4 6 b 7 d 4 6 d 8 a 4 0 d d 0 e f 9 d 9 b f 0 3 4 b b 0 3 d 8 6 6 c 3 e 6 b d 3 c b 2 6 9 0 a 1 0 b f 1 2 0 9 3 a a 6 e 7 f
C : \ 5 8 3 0 d c 5 4 8 3 6 b 5 0 1 0 9 2 8 5 5 9 b a 8 b 7 4 9 1 5 8 4 6 e 5 0 1 1 8 c 0 7 3 9 f 1 a 7 3 9 3 0 1 c 9 1 4 6 c 7 1 5 a
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ a a 7 6 d 6 0 6 9 c 7 c 2 9 5 6 2 9 d 2 f 4 8 e b f 1 e f 4 a 2 a e c c a d c 4 f 2 9 8 3 7 3 d 5 0 d 3 a 8 1 7 1 c f a 6 3 0 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 9 6 1 5 e a 3 d 7 5 2 3 2 4 4 f 1 0 0 a 6 1 5 0 f 9 1 9 2 b f 8 6 0 7 3 f 9 6 9 e 9 e b c c 5 3 3 c 1 3 c 3 4 b a 4 e b 7 c 7 0
C : \ c b 2 8 4 5 c c f 6 d 6 9 b 0 f 3 5 b f d 1 6 9 4 6 e 9 0 1 5 7 0 9 a e 9 8 e 5 7 1 3 c 6 9 5 4 4 3 1 c 3 5 2 6 6 9 c 9 b 9 6 4
C : \ a 8 3 c 6 3 4 0 b 3 5 0 8 7 7 6 a b 3 1 5 d 6 3 c d 1 d c 3 8 6 6 f d f 6 3 2 7 6 3 e a 1 2 e e 4 d c c f 7 4 5 f 9 7 9 7 b 6 3
C : \ a 7 9 5 8 e 9 3 1 9 1 5 3 d 5 2 2 7 1 c 7 0 0 9 d 5 d e 3 3 4 a 8 f f f 7 1 e c 5 0 7 4 c 2 1 a 7 f a b e 6 8 e 3 d 8 1 d 4 9 a
C : \ 1 a 0 c f e 9 5 f c d 5 6 e 5 4 9 9 b 7 7 9 a 7 7 c a 1 2 f 9 b b 4 9 d f 2 c 6 9 3 6 e b 9 5 6 9 b 9 1 7 9 f 1 a 1 2 5 a e 8 c
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ d e d 6 4 f 7 6 c c 6 2 6 d 8 9 f 9 b f b a 5 6 f d 8 f d 8 2 e 4 c 1 5 b 1 c 1 0 0 8 3 f e 0 6 3 8 a 8 4 5 1 8 1 7 b b 3 4 8 7
C : \ 2 7 4 5 5 c d a 1 7 b 5 b 0 8 c e 8 6 c 7 5 c 9 1 b 6 a 3 6 6 6 8 7 9 7 e a 5 d 4 6 a 5 d 4 1 f 2 1 b 7 e a d d 3 d 7 d f c d e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 4 a 1 7 7 7 8 2 b c 3 1 c f 7 c 4 d 7 7 7 7 c b 2 c d 0 1 d 9 6 3 4 5 b 2 1 b d b 8 8 8 9 e 6 5 b 2 6 a 7 e 4 a b 1 9 9 d 5 7 1
C : \ 4 f 3 0 e 6 e 7 a e 2 0 1 0 3 a 2 5 0 b 3 1 6 0 9 2 b 5 8 d b 0 d b c e 7 7 3 5 0 d 2 e 2 7 1 3 e 5 9 e d 2 6 b 0 9 0 b c 6 5 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ f 7 1 9 b a 3 c f 7 a e d 4 1 e 0 1 6 5 d 4 5 3 6 d 6 4 3 3 b 6 0 d b b 4 1 0 5 b 6 f a d 2 1 0 1 2 1 5 4 5 2 b 3 f 2 3 6 9 9 c
C : \ 9 8 8 7 5 e 3 7 b 3 4 b c 5 a e d d e c 1 8 0 0 a 8 b 4 2 6 f 5 f e a 2 8 b 2 4 f f f 4 a e c 0 f e 2 8 b 4 0 5 4 a 7 1 9 c 9 d
C : \ U s e r s \ V i r t u a l \ A p p D a t a \ L o c a l \ T e m p \ 7 8 6 8 c 4 5 d 5 a 5 0 5 3 c 8 9 e d 6 5 4 a 5 a b d 2 a c 5 2 6 7 c 4 3 d 7 c f 0 9 f 0 e 2 e 8 4 7 f 6 8 3 8 8 8 5 5 7 1 3 9 . e x e
C : \ 0 2 d 7 4 9 4 c 5 4 1 e f e c 1 5 2 6 4 3 d a b 7 5 7 f f 5 e b 5 6 c 0 a 2 6 4 d 4 5 7 c 4 d 3 8 6 5 7 3 2 2 4 8 2 d 5 1 0 f b
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 2 1 5 5 8 6 d 5 f a 4 0 8 5 d 2 e 3 b 6 a d c a 4 c c 0 7 a 2 f c b c 6 3 3 e a e 7 b 4 8 a 3 0 6 3 3 7 c e 3 a 6 5 5 3 d 7 5 5
C : \ 5 0 3 6 e 0 3 c 9 3 6 2 5 f d 8 e 2 b 6 a 7 b a b f 8 1 f a 6 4 0 5 5 c c 1 6 6 6 3 b c 9 8 8 f 5 b 7 3 1 f 9 3 a b e 5 d 5 b f
C : \ 3 9 9 e 6 6 c 6 e 9 d d 3 e e 6 7 6 1 1 a 9 9 8 1 b 4 f 3 b 8 b 8 1 2 a f 0 6 b 5 6 8 f 1 a 7 a 3 1 8 3 b d 6 8 2 d 0 d e c 5 7
C : \ d 1 0 e 1 3 b b 1 c d 5 2 4 0 e d 9 a b e d f 4 f 3 2 0 4 6 c 0 f e 1 e 6 e 9 1 0 a 1 a c 5 4 c d 1 7 1 0 2 9 a 0 a f 2 7 5 d d
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 5 c 9 9 0 a f 9 5 2 6 8 c 9 2 8 _ l z l j p . e x e
C : \ 6 b 9 8 0 4 c d 1 8 c 7 9 a 0 3 f 0 b b e 9 2 9 6 2 6 0 f c d 7 8 c 2 d c c 0 c 7 9 5 a 2 8 9 8 4 9 e c 9 5 4 7 1 7 2 f 6 e 9 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 3 6 5 b e 3 6 1 9 0 b a c 5 a f 9 c d d a a d 6 e 6 f 7 2 c 3 c 4 7 3 4 9 1 f 4 5 d 4 e 7 8 9 9 c e 1 d 9 8 b e 2 b 7 3 e e 0 5
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 2 5 5 5 9 2 b 7 5 2 4 f 1 5 0 e b 8 c 6 9 b c 1 5 a 4 6 8 2 a 1 8 4 a d a 1 0 c d 1 2 a c 9 6 0 5 1 8 b 0 0 9 f c 7 9 4 9 c d 9
C : \ e 6 0 5 9 5 2 4 7 e 0 e 2 0 0 a 3 0 7 3 e f 1 3 8 f 5 d f 7 5 0 3 0 3 7 7 e b 8 2 a 2 7 0 b 3 6 f 6 5 6 5 b 0 e f 5 e c d c 1 f
C : \ U s e r s \ V i r t u a l \ A p p D a t a \ L o c a l \ T e m p \ 6 8 9 0 3 2 5 6 d e 2 2 c 7 5 a 7 a d 7 5 4 c b 5 7 5 e 1 7 f b e 2 1 a 4 a 1 f 0 6 0 4 a c a 1 8 8 7 4 7 0 5 a f 9 0 3 c 1 8 d . e x e
C : \ a f 2 5 8 c 0 4 d f 2 1 4 3 1 8 5 b a c 2 4 d e a 4 7 6 c 5 b 9 4 4 7 2 8 1 7 d 1 4 c 5 d 5 6 a 8 f e 1 e 6 4 0 a 8 9 3 5 b 1 6
C : \ 3 d e 8 e 7 1 5 3 7 4 b 1 c 6 8 2 8 c 5 6 5 a 3 3 e e d 9 e 4 a 5 0 1 e 6 d 9 7 6 e f e 1 d 5 6 1 2 9 8 f 5 2 3 e 3 b b d 4 a 3
C : \ 1 1 2 1 5 4 b a 4 5 5 3 4 3 8 b 9 3 2 0 a 8 e 6 4 1 b 5 b 7 b 4 6 0 a c 1 9 2 b e f 3 3 4 0 7 0 e 5 c b 3 c 5 1 c 1 0 a 1 7 e 4
C : \ 5 1 7 d 0 e a e 0 d 2 f e 9 7 8 b 0 9 5 d 8 4 0 8 e c c 6 a a 0 5 7 0 3 c a e 5 b b 4 2 0 9 3 e 2 4 3 2 a f 9 e 5 a 9 b 6 f b 1
C : \ e 5 1 1 1 3 b 3 7 6 b 1 e 6 5 1 2 4 e f 0 5 b 3 6 4 d f a 5 3 b 7 c b 6 5 7 6 e a b f f 3 e 2 5 a 4 f 4 7 5 f 3 9 3 7 8 d f 2 0
C : \ f 4 b e e 0 6 0 6 f 0 d 1 c b c a 6 9 3 6 0 9 e 9 d 5 c e f 4 4 5 7 0 3 f 3 0 8 c c a 4 6 f 8 3 6 7 6 6 e 1 9 e 3 2 1 d 4 d 5 e
C : \ 9 c b b 6 b a 7 a 9 1 a c 3 8 1 4 9 4 8 2 1 0 0 7 8 b 5 9 a 1 d f c 9 b 1 1 7 e 4 6 2 e 7 2 3 3 b 7 3 5 c b d d b 9 8 a 9 3 1 5
C : \ 6 5 a 8 e 2 6 6 7 9 b e 5 9 2 d 2 7 6 e a 0 3 e 0 5 2 0 6 4 7 f 4 a b 5 0 e a 1 8 f d 4 6 e d a d 9 c 4 8 d 6 f 3 1 2 a f 1 f 1
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ b a 2 5 8 8 7 6 6 b d 5 c 4 6 4 5 6 9 e 5 8 4 c 1 9 8 6 0 d e 9 4 2 1 c 8 8 0 2 e 5 b 4 7 f 2 c 3 9 b 9 d 3 7 d f 7 b 1 1 4 3 4
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ b 0 6 e 7 b 1 1 6 9 d 8 1 c e 4 1 c 3 6 c d f d a 0 7 8 6 1 a d 0 b f d e 6 9 5 e e 1 e c e a c 5 f 7 6 7 0 9 3 e a b 5 0 d 9 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ b 4 f 7 a 8 f 9 b 8 9 f 3 e c 4 7 5 c f 6 1 7 5 c 8 7 0 d 7 6 6 8 0 8 5 f d 2 9 7 5 d d b 4 7 5 2 f 5 c 4 5 7 3 1 9 5 2 8 c d d
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 2 8 e e e 7 b 9 d 1 6 0 8 2 a 1 0 8 8 5 0 d 1 b 8 a c 5 c 9 1 f 3 e f 7 f c 6 3 2 e 7 5 4 3 1 9 7 a 2 1 b a c 3 a 1 5 3 d d 7 2
C : \ f a 9 f 8 d b 1 0 2 1 7 e a 2 9 3 4 6 6 6 5 1 d a b 5 5 f 1 b 7 1 9 8 a 0 6 7 6 5 0 4 4 5 5 b 7 1 2 9 8 3 d f a 5 1 5 0 c e 5 5
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 6 c 3 2 1 8 4 2 0 0 c b 0 0 8 6 _ l z l j p . e x e
C : \ c f a 6 a 7 e 7 d a b 0 a 0 7 e 6 e 2 8 d 9 c e 2 a 0 b 1 c 6 1 a 3 f 4 a b 6 8 6 0 1 f 6 2 d e 2 1 9 7 b a 0 e a c d 7 6 2 7 f
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ f c e d c 0 a b 4 c 5 1 4 a 3 3 _ l z l j p . e x e
C : \ e c e 4 5 2 2 d 5 7 d f 0 2 5 6 9 7 c 2 8 9 e 7 1 d 1 a 8 8 c 2 3 1 d 2 e 9 8 7 5 9 6 f 1 5 6 8 e 6 3 b d 0 c 4 4 f 1 3 0 9 1 6
C : \ 1 4 5 0 7 f 2 c 6 c 1 f d d 6 e d 5 c b d a f c 7 c f 0 8 c 3 b e d 9 b 1 4 d e 9 0 d d 6 e 1 c 8 7 9 d 4 3 b d a a c 4 6 e 4 5
C : \ 8 5 2 5 4 4 0 d 6 0 a f 2 0 2 f 7 6 2 7 8 a 8 2 8 6 e f 2 4 4 2 f 0 8 b 2 e d 7 9 2 3 3 7 0 4 6 a 9 b 6 b 7 7 a 1 9 7 7 f 7 c 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 6 1 c 1 1 f 8 b 5 3 6 0 e 8 a 3 b b 5 3 7 7 c 2 d b 3 4 c e 9 5 0 4 0 4 e 6 8 c 0 4 c 7 6 4 c e b 0 5 9 1 1 1 7 b 8 c 7 d 7 4 9
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 0 9 8 3 8 5 f c f d 4 a 7 c c 5 _ l z l j p . e x e
C : \ 6 9 d 9 c 0 7 b 9 6 6 8 4 4 8 f a 7 9 b e f 9 0 0 1 b 3 6 3 8 4 8 5 d d 0 8 6 0 d c b 0 6 5 b e 4 0 e 3 e 3 a 4 b 5 2 6 1 e 3 8
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ a a f 4 d 5 5 c e 8 2 e 1 4 6 6 4 d 9 2 d e a 6 e 0 7 5 0 4 a 2 a e 0 b 6 a 0 8 9 d 6 f d 2 8 1 b b b 0 b 9 7 9 7 b 1 a 6 4 4 b
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ 0 d a f 9 7 0 5 5 5 5 d 9 d a 3 4 6 a 4 9 e 5 c b 8 e 2 6 5 1 f 0 8 a a 0 4 6 a 8 5 e 8 0 d 4 7 8 2 9 f 5 8 3 b b 1 b 7 2 5 9 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ f 8 e 1 b 6 1 5 c e 0 a 1 0 8 0 a d 1 a 8 1 8 6 1 b 5 6 3 a 7 0 e 8 c d f a 9 e d 7 6 4 a 0 b a 7 3 3 7 b e 1 b b b b b 2 6 3 8
C : \ d 4 1 7 1 d b f 8 6 7 a 0 a 1 b 2 6 6 7 b d 4 b 1 7 1 f e c e 1 a c 8 b 4 b e 6 1 0 a a 2 4 b 7 f 3 c e 8 5 3 a a 6 b a a 9 1 5
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ 6 d 8 9 b 6 1 6 5 d 2 e 1 3 3 0 7 d 7 0 b e 1 d 4 c 4 d f c a a 7 b f f 9 5 a 9 1 2 1 a 3 8 0 6 9 c 0 a a c f 7 f 8 d 8 7 a a 7
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
c : \ t a s k \ 8 3 A 9 4 0 A 5 E 5 F D 6 D 7 D E 1 8 C 1 C F 9 7 A 1 4 9 0 E F . e x e
C : \ a a 7 b 8 d a c 3 d d 7 0 d c 2 7 c 2 1 a 2 4 9 6 7 6 e 3 4 4 6 f 4 a 7 8 a 6 2 8 a 6 8 9 a c c b 8 a e c 3 2 4 8 a e 0 e f c c
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ l z l j p . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ d 9 a 6 0 7 8 c 8 5 d 3 8 3 e 7 6 d e 9 c 4 1 5 6 0 b a 3 d f a 7 9 0 6 c 6 6 4 1 2 a 3 c d a b 8 b 6 5 5 e 3 4 4 9 7 5 1 2 b b
C : \ 7 1 2 0 9 3 0 c 4 6 e 9 0 c 3 9 5 4 b 1 b 8 3 c f 4 a 6 3 1 5 1 f 7 e 9 7 4 1 8 a 9 8 f 2 a 0 7 b d d 4 0 2 8 d d e 8 9 c 7 f e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ l z l j p . p e 3 2
C : \ c 5 0 1 5 7 c 1 3 3 c 3 5 3 1 0 4 f 9 7 d 5 1 e 6 f 7 e 0 9 7 4 8 f 0 5 8 0 8 5 b 9 1 b 1 4 d c 8 4 3 4 b a f 0 2 5 4 4 d a 4 4
C : \ c 2 f 1 f 0 5 3 1 7 d 9 a 5 1 4 d d c a 2 e 3 1 7 8 c 8 b 9 0 9 e e 5 5 f 1 9 2 f 4 f b 7 e 3 7 4 9 5 1 d 8 5 2 1 0 7 c a 3 a 5
Process Tree
-
0e0d8eb16a9d696c5ab2da6bac6f0d2799beed83be4fad89ac312f48fe3303ec.exe (3012)
"C:\Users\Administrator\AppData\Local\Temp\0e0d8eb16a9d696c5ab2da6bac6f0d2799beed83be4fad89ac312f48fe3303ec.exe"
- lzljp.exe (2736) "C:\Users\ADMINI~1\AppData\Local\Temp\lzljp.exe"
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
| Name | d671358411c14f3b_lzljp.exe |
|---|---|
| Filepath | C:\Users\Administrator\AppData\Local\Temp\lzljp.exe |
| Size | 54.2KB |
| Processes | 3012 (0e0d8eb16a9d696c5ab2da6bac6f0d2799beed83be4fad89ac312f48fe3303ec.exe) |
| Type | MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS |
| MD5 | 17198945a615963b714c88c7bab5b2bb |
| SHA1 | a88e6fd8bc3fd8043362dc8ac794b1d16fb858e7 |
| SHA256 | d671358411c14f3b69a3a7fc0e6dbeffa1811c12f44cac995b77a47b1eae1be4 |
| CRC32 | BC4D6B8A |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
Sorry! No dropped buffers.