4cae4494...0458

C:\Users\FD1HVy\Desktop\mspusf.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	156.00 KB
MD5	fcd21c6fca3b9378961aa1865bee7ecb
SHA1	0abaa05da2a05977e0baf68838cff1712f1789e0
SHA256	4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458
SSDeep	1536:7ZLTzASUIG0TOOYTufIaSWvRYkekdvizSBXxNe9VPw6s6aUCT7Q7qn:OBI9HYyfNBdviGBBQsrhPk4
ImpHash	93736e6ffcbf0a539a73e55e921de1cb

File Reputation Information

»

Severity	Suspicious
Families	-

PE Information

»

Image Base	0x400000
Entry Point	0x401690
Size Of Code	0x17800
Size Of Initialized Data	0x14200
File Type	FileType.executable
Subsystem	Subsystem.windows_cui
Machine Type	MachineType.i386
Compile Timestamp	1970-01-01 00:00:00+00:00

Sections (4)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x176d2	0x17800	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.81
.rdata	0x419000	0x9869	0x9a00	0x17c00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.24
.data	0x423000	0x7f24	0x2400	0x21600	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	3.36
.reloc	0x42b000	0x26f8	0x2800	0x23a00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	5.2

Imports (10)

»

KERNEL32.dll (106)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateEventA	0x0	0x41904c	0x21994	0x20594	0x82
LeaveCriticalSection	0x0	0x419050	0x21998	0x20598	0x339
FileTimeToSystemTime	0x0	0x419054	0x2199c	0x2059c	0x125
EnterCriticalSection	0x0	0x419058	0x219a0	0x205a0	0xee
FindClose	0x0	0x41905c	0x219a4	0x205a4	0x12e
SetThreadPriorityBoost	0x0	0x419060	0x219a8	0x205a8	0x49a
GetSystemInfo	0x0	0x419064	0x219ac	0x205ac	0x273
WaitForMultipleObjects	0x0	0x419068	0x219b0	0x205b0	0x4f7
FindNextFileW	0x0	0x41906c	0x219b4	0x205b4	0x145
SetThreadAffinityMask	0x0	0x419070	0x219b8	0x205b8	0x490
SetProcessShutdownParameters	0x0	0x419074	0x219bc	0x205bc	0x483
GetSystemTime	0x0	0x419078	0x219c0	0x205c0	0x277
ReadFile	0x0	0x41907c	0x219c4	0x205c4	0x3c0
Process32FirstW	0x0	0x419080	0x219c8	0x205c8	0x396
Process32NextW	0x0	0x419084	0x219cc	0x205cc	0x398
CreateToolhelp32Snapshot	0x0	0x419088	0x219d0	0x205d0	0xbe
GetSystemWindowsDirectoryA	0x0	0x41908c	0x219d4	0x205d4	0x27b
CreateFileW	0x0	0x419090	0x219d8	0x205d8	0x8f
SetFileAttributesW	0x0	0x419094	0x219dc	0x205dc	0x461
Wow64DisableWow64FsRedirection	0x0	0x419098	0x219e0	0x205e0	0x513
Wow64RevertWow64FsRedirection	0x0	0x41909c	0x219e4	0x205e4	0x517
UnhandledExceptionFilter	0x0	0x4190a0	0x219e8	0x205e8	0x4d3
SetUnhandledExceptionFilter	0x0	0x4190a4	0x219ec	0x205ec	0x4a5
IsDebuggerPresent	0x0	0x4190a8	0x219f0	0x205f0	0x300
EncodePointer	0x0	0x4190ac	0x219f4	0x205f4	0xea
DecodePointer	0x0	0x4190b0	0x219f8	0x205f8	0xca
TerminateProcess	0x0	0x4190b4	0x219fc	0x205fc	0x4c0
HeapFree	0x0	0x4190b8	0x21a00	0x20600	0x2cf
TlsGetValue	0x0	0x4190bc	0x21a04	0x20604	0x4c7
TlsSetValue	0x0	0x4190c0	0x21a08	0x20608	0x4c8
InterlockedIncrement	0x0	0x4190c4	0x21a0c	0x2060c	0x2ef
GetModuleHandleW	0x0	0x4190c8	0x21a10	0x20610	0x218
GetCurrentThreadId	0x0	0x4190cc	0x21a14	0x20614	0x1c5
InterlockedDecrement	0x0	0x4190d0	0x21a18	0x20618	0x2eb
GetProcAddress	0x0	0x4190d4	0x21a1c	0x2061c	0x245
WideCharToMultiByte	0x0	0x4190d8	0x21a20	0x20620	0x511
DeleteCriticalSection	0x0	0x4190dc	0x21a24	0x20624	0xd1
InitializeCriticalSectionAndSpinCount	0x0	0x4190e0	0x21a28	0x20628	0x2e3
GetCPInfo	0x0	0x4190e4	0x21a2c	0x2062c	0x172
GetACP	0x0	0x4190e8	0x21a30	0x20630	0x168
GetOEMCP	0x0	0x4190ec	0x21a34	0x20634	0x237
IsValidCodePage	0x0	0x4190f0	0x21a38	0x20638	0x30a
RtlUnwind	0x0	0x4190f4	0x21a3c	0x2063c	0x418
IsProcessorFeaturePresent	0x0	0x4190f8	0x21a40	0x20640	0x304
HeapAlloc	0x0	0x4190fc	0x21a44	0x20644	0x2cb
HeapReAlloc	0x0	0x419100	0x21a48	0x20648	0x2d2
MultiByteToWideChar	0x0	0x419104	0x21a4c	0x2064c	0x367
LoadLibraryW	0x0	0x419108	0x21a50	0x20650	0x33f
GetModuleFileNameW	0x0	0x41910c	0x21a54	0x20654	0x214
GetConsoleCP	0x0	0x419110	0x21a58	0x20658	0x19a
GetConsoleMode	0x0	0x419114	0x21a5c	0x2065c	0x1ac
LCMapStringW	0x0	0x419118	0x21a60	0x20660	0x32d
GetStringTypeW	0x0	0x41911c	0x21a64	0x20664	0x269
SetFilePointer	0x0	0x419120	0x21a68	0x20668	0x466
GetModuleFileNameA	0x0	0x419124	0x21a6c	0x2066c	0x213
WriteConsoleW	0x0	0x419128	0x21a70	0x20670	0x524
SetStdHandle	0x0	0x41912c	0x21a74	0x20674	0x487
GetCurrentThread	0x0	0x419130	0x21a78	0x20678	0x1c4
SetEvent	0x0	0x419134	0x21a7c	0x2067c	0x459
WaitForSingleObject	0x0	0x419138	0x21a80	0x20680	0x4f9
GetLogicalDriveStringsW	0x0	0x41913c	0x21a84	0x20684	0x208
SystemTimeToTzSpecificLocalTime	0x0	0x419140	0x21a88	0x20688	0x4be
FindFirstFileW	0x0	0x419144	0x21a8c	0x2068c	0x139
GetProcessHandleCount	0x0	0x419148	0x21a90	0x20690	0x249
GetProcessTimes	0x0	0x41914c	0x21a94	0x20694	0x252
CloseHandle	0x0	0x419150	0x21a98	0x20698	0x52
GetSystemTimes	0x0	0x419154	0x21a9c	0x2069c	0x27a
SwitchToThread	0x0	0x419158	0x21aa0	0x206a0	0x4bc
SetLastError	0x0	0x41915c	0x21aa4	0x206a4	0x473
GetStdHandle	0x0	0x419160	0x21aa8	0x206a8	0x264
FlushFileBuffers	0x0	0x419164	0x21aac	0x206ac	0x157
WriteFile	0x0	0x419168	0x21ab0	0x206b0	0x525
lstrlenA	0x0	0x41916c	0x21ab4	0x206b4	0x54d
GetSystemWindowsDirectoryW	0x0	0x419170	0x21ab8	0x206b8	0x27c
GetEnvironmentVariableW	0x0	0x419174	0x21abc	0x206bc	0x1dc
GetCurrentProcessId	0x0	0x419178	0x21ac0	0x206c0	0x1c1
GetLastError	0x0	0x41917c	0x21ac4	0x206c4	0x202
Sleep	0x0	0x419180	0x21ac8	0x206c8	0x4b2
SetProcessPriorityBoost	0x0	0x419184	0x21acc	0x206cc	0x482
GetTickCount	0x0	0x419188	0x21ad0	0x206d0	0x293
GetCurrentProcess	0x0	0x41918c	0x21ad4	0x206d4	0x1c0
CreateMutexW	0x0	0x419190	0x21ad8	0x206d8	0x9e
MoveFileW	0x0	0x419194	0x21adc	0x206dc	0x363
DeleteFileA	0x0	0x419198	0x21ae0	0x206e0	0xd3
lstrcpynA	0x0	0x41919c	0x21ae4	0x206e4	0x54a
Process32First	0x0	0x4191a0	0x21ae8	0x206e8	0x395
OpenProcess	0x0	0x4191a4	0x21aec	0x206ec	0x380
Process32Next	0x0	0x4191a8	0x21af0	0x206f0	0x397
GetModuleHandleA	0x0	0x4191ac	0x21af4	0x206f4	0x215
GetComputerNameA	0x0	0x4191b0	0x21af8	0x206f8	0x18c
GetNativeSystemInfo	0x0	0x4191b4	0x21afc	0x206fc	0x225
SetErrorMode	0x0	0x4191b8	0x21b00	0x20700	0x458
GetSystemDirectoryW	0x0	0x4191bc	0x21b04	0x20704	0x270
GetVolumeInformationA	0x0	0x4191c0	0x21b08	0x20708	0x2a5
GetVersionExW	0x0	0x4191c4	0x21b0c	0x2070c	0x2a4
GetEnvironmentVariableA	0x0	0x4191c8	0x21b10	0x20710	0x1db
CreateThread	0x0	0x4191cc	0x21b14	0x20714	0xb5
GetProcessHeap	0x0	0x4191d0	0x21b18	0x20718	0x24a
MoveFileExA	0x0	0x4191d4	0x21b1c	0x2071c	0x35f
SetFilePointerEx	0x0	0x4191d8	0x21b20	0x20720	0x467
GetFileSizeEx	0x0	0x4191dc	0x21b24	0x20724	0x1f1
FindFirstFileA	0x0	0x4191e0	0x21b28	0x20728	0x132
RemoveDirectoryA	0x0	0x4191e4	0x21b2c	0x2072c	0x400
SetFileAttributesA	0x0	0x4191e8	0x21b30	0x20730	0x45e
FindNextFileA	0x0	0x4191ec	0x21b34	0x20734	0x143
ExitProcess	0x0	0x4191f0	0x21b38	0x20738	0x119

USER32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
wsprintfW	0x0	0x41927c	0x21bc4	0x207c4	0x333
CharLowerA	0x0	0x419280	0x21bc8	0x207c8	0x2b
CharUpperA	0x0	0x419284	0x21bcc	0x207cc	0x39

ADVAPI32.dll (18)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CryptGetHashParam	0x0	0x419000	0x21948	0x20548	0xc4
CryptAcquireContextA	0x0	0x419004	0x2194c	0x2054c	0xb0
CryptCreateHash	0x0	0x419008	0x21950	0x20550	0xb3
CryptDestroyHash	0x0	0x41900c	0x21954	0x20554	0xb6
CryptHashData	0x0	0x419010	0x21958	0x20558	0xc8
OpenProcessToken	0x0	0x419014	0x2195c	0x2055c	0x1f7
GetTokenInformation	0x0	0x419018	0x21960	0x20560	0x15a
SetKernelObjectSecurity	0x0	0x41901c	0x21964	0x20564	0x2ad
GetUserNameA	0x0	0x419020	0x21968	0x20568	0x164
RegQueryValueExA	0x0	0x419024	0x2196c	0x2056c	0x26d
CryptAcquireContextW	0x0	0x419028	0x21970	0x20570	0xb1
CryptGenRandom	0x0	0x41902c	0x21974	0x20574	0xc1
ControlService	0x0	0x419030	0x21978	0x20578	0x5c
OpenSCManagerA	0x0	0x419034	0x2197c	0x2057c	0x1f8
QueryServiceStatusEx	0x0	0x419038	0x21980	0x20580	0x229
OpenServiceW	0x0	0x41903c	0x21984	0x20584	0x1fb
CloseServiceHandle	0x0	0x419040	0x21988	0x20588	0x57
CryptReleaseContext	0x0	0x419044	0x2198c	0x2058c	0xcb

SHELL32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHGetFolderPathW	0x0	0x419220	0x21b68	0x20768	0xc3
ShellExecuteExW	0x0	0x419224	0x21b6c	0x2076c	0x121

ole32.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
StringFromGUID2	0x0	0x419298	0x21be0	0x207e0	0x179

PSAPI.DLL (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetModuleFileNameExW	0x0	0x419218	0x21b60	0x20760	0x10

SHLWAPI.dll (19)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PathAddBackslashA	0x0	0x41922c	0x21b74	0x20774	0x2f
PathFindFileNameA	0x0	0x419230	0x21b78	0x20778	0x48
SHRegSetUSValueA	0x0	0x419234	0x21b7c	0x2077c	0xf1
PathAppendA	0x0	0x419238	0x21b80	0x20780	0x33
PathIsDirectoryA	0x0	0x41923c	0x21b84	0x20784	0x58
PathFindFileNameW	0x0	0x419240	0x21b88	0x20788	0x49
StrCpyNW	0x0	0x419244	0x21b8c	0x2078c	0x124
StrCpyW	0x0	0x419248	0x21b90	0x20790	0x125
PathFileExistsW	0x0	0x41924c	0x21b94	0x20794	0x45
StrCatW	0x0	0x419250	0x21b98	0x20798	0x10e
wvnsprintfA	0x0	0x419254	0x21b9c	0x2079c	0x16f
StrCmpW	0x0	0x419258	0x21ba0	0x207a0	0x123
StrCmpIW	0x0	0x41925c	0x21ba4	0x207a4	0x119
StrStrIW	0x0	0x419260	0x21ba8	0x207a8	0x145
PathFindExtensionW	0x0	0x419264	0x21bac	0x207ac	0x47
StrStrIA	0x0	0x419268	0x21bb0	0x207b0	0x144
StrCatBuffA	0x0	0x41926c	0x21bb4	0x207b4	0x10b
StrNCatW	0x0	0x419270	0x21bb8	0x207b8	0x133
wnsprintfA	0x0	0x419274	0x21bbc	0x207bc	0x16d

MPR.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
WNetEnumResourceW	0x0	0x4191f8	0x21b40	0x20740	0x1c
WNetOpenEnumW	0x0	0x4191fc	0x21b44	0x20744	0x3d
WNetCloseEnum	0x0	0x419200	0x21b48	0x20748	0x10

NETAPI32.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
NetApiBufferFree	0x0	0x419208	0x21b50	0x20750	0x65
NetWkstaGetInfo	0x0	0x41920c	0x21b54	0x20754	0x108
NetServerGetInfo	0x0	0x419210	0x21b58	0x20758	0xdc

ntdll.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
ZwQueryInformationProcess	0x0	0x41928c	0x21bd4	0x207d4	0x409
ZwUnmapViewOfSection	0x0	0x419290	0x21bd8	0x207d8	0x47c

Exports (1)

»

Api name	EAT Address	Ordinal
?ReflectiveLoader@@YGKPAX@Z	0x3b50	0x1

Memory Dumps (2)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuild	Bitness	Entry Point	AV	YARA	Actions
mspusf.exe	1	0x00830000	0x0085DFFF	Relevant Image		32-bit	0x00833A30			... Memory Dump Actions Go to Process Go to AV Match Go to YARA Matches Download Dump
mspusf.exe	1	0x00830000	0x0085DFFF	Process Termination		32-bit	-			... Memory Dump Actions Go to Process Go to AV Match Go to YARA Matches Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Gen:Heur.Ransom.Imps.1	Malicious

YARA Matches (2)

»

Rule Name	Rule Description	Classification	Score	Actions
WiltedTulip_vminst	Malware used in Operation Wilted Tulip	-	5/5	... YARA Actions Show Ruleset Show Match
ReflectiveLoader	Reflective loader usage	-	3/5	... YARA Actions Show Ruleset Show Match

\\?\C:\Users\FD1HVy\AppData\Roaming\5hVk52ujjP2vb7epC7.xls

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\5hVk52ujjP2vb7epC7.xls.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	51.33 KB
MD5	b11208b7bd6ed368a86b3e2061ec2775
SHA1	4705d5afb7ff689a7bc687ddbbf5bf583ac4f122
SHA256	418f0e6527108b11efda97c3637cdcc5291dbab1e12fcfc39d0d847c6658a3e6
SSDeep	1536:dWtX01coMWdA9AN8eOGsMhlOogUrcw2hj:y7o3ZNIklOBSo
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\0R6G zd4i6nTDGa8VNm.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\0R6G zd4i6nTDGa8VNm.png (Modified File)
Mime Type	application/octet-stream
File Size	30.13 KB
MD5	896634abdd09cf04f6092ed7562adb83
SHA1	2d2cde0b60a4381cec8205496fb6e7d563f66da6
SHA256	718090836d1e80f9a7c69a3d1b22a9e6cb02fbb4ef851597725fddd278fc87b1
SSDeep	768:opoxMVRlLkpqqG9fGlcK9zajBCuy9tBGhg02Csb3dc:amMVzopYGlB9WjJgtBAg9vbW
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\8zg7I2Esm.docx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\8zg7I2Esm.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	9.31 KB
MD5	a4b78f99b1b9288f05cdad9ba84b4dcc
SHA1	85f0b58c62c397d71fb5fe6b8b12d3c8b8b6df34
SHA256	a678f2359239d4f3f1b592e1362d7f559c85d6c04c8ebb9d6b7d600c769a77b5
SSDeep	192:6tgyOLf6UyqPJJNmVPQ0TRGMRmsm4DarPueD1NxHdgMLBNgspWD:6Jcf1y2TQ0fEUPZhgMVNvpK
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\CjrpV8NWiwYR.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\CjrpV8NWiwYR.png (Modified File)
Mime Type	application/octet-stream
File Size	56.70 KB
MD5	b9dea4018ec45b57a7cd9629b4113248
SHA1	599a2c218312d50b30923748444b4a205a4ae7c0
SHA256	c247fd091f1a8090334ece15bf07b82c81ca013012cb839cc6f08f69ad21875d
SSDeep	768:QO7E4H9xpJtERglEjzULGR9AAXNse3LzKHPbv17+OnJv/EJH9U/RKUxa0NfKmf39:Qb4H9ojxPtX2eX+rp1kH9YRtaEikwE
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\CUCgHoAM.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\CUCgHoAM.wav (Modified File)
Mime Type	application/octet-stream
File Size	76.17 KB
MD5	8955bdece8b233afe6652c6befd259ce
SHA1	9baf371d587956ddcf7b5ce240d398643f9effac
SHA256	5543aa260ad8abe30dd9f63911a006f1a6625e883f1594bb9231f627bc7e944f
SSDeep	1536:IGomfv9ly7YDqc6t6BBd2Wpsdk6l8hBiRd34o1x3wARmzUSFSHreYTQSl+bWL:IGoUewqYBBHpsdk64BiR6o1x3LjHyYTr
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\DRvrEGQ_bV7.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\DRvrEGQ_bV7.png (Modified File)
Mime Type	application/octet-stream
File Size	90.37 KB
MD5	be431dd4b9a8820a5142c967c1f7b9d5
SHA1	aa5dcdc283c30f3d3a38187e9c7a99442eb27a41
SHA256	c8bbb84f8d0432978a603378e60d47b9831afbc45bcad179a1aa9018d41e2cb5
SSDeep	1536:aqsxlz0JWQ50bZ1zzQlVxYRpQnsYyBOJkANXkZ9ymiITS799zR7VUxY0SjCsrr:A0Jh0dMYsnIO/cymiWS7nZv0Sjl3
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\DVmE9qFtb1fE2H.bmp.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\DVmE9qFtb1fE2H.bmp (Modified File)
Mime Type	application/octet-stream
File Size	81.14 KB
MD5	806acc9dd3a93c7fb627b52cea0d8f23
SHA1	bf863145f4bb8a2edc8263d602d2f936071b2076
SHA256	5f344a9ca7a211ad566e1f319f008c6fe8e950200b780fb834b5f487349d15d4
SSDeep	1536:cMFvakFA7jCI9On+gt81guyG0oRORoswap9YGJ5:cM9ojCIY+71tF0oROaapdz
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\f_xuR_I_FeQoISyA_I.avi.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\f_xuR_I_FeQoISyA_I.avi (Modified File)
Mime Type	application/octet-stream
File Size	56.80 KB
MD5	29b9c4cce9a0fbbdb72be238922ab75b
SHA1	cc2d7d45a51d1d0c69aabdefaf6eb6559731c87f
SHA256	f0e641f925dae2a00b3902fde1171d386ad93c7c8940c759b8e24964a4586681
SSDeep	768:kDpY5zdoDtP575r3URoNe/6QtclN675NKJWTcZfRNvdzFW50vYwcuzzfjkTYbRWV:klP15rYBcloXKJKcvlHTcuXfwUbRdBYh
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\j9Q4P.avi.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\j9Q4P.avi (Modified File)
Mime Type	application/octet-stream
File Size	93.34 KB
MD5	51e00f3f4b3dd89235fabbd34e280140
SHA1	e61c5f610d8f23f43eee1682297403350d3d2e91
SHA256	aa70af3500f498f629a97e38278ceeae991a7c3488ae71df8ab790d43ad38a16
SSDeep	1536:yK5QExthespTml6COohtielx1wTXhSJu4gLDYx+5TWykhVaztMHeirEo/I9:yR6usBmECXht7lx1wThXjYs5TH5e1rQ9
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\juYPe6EuKhsFCwN.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\juYPe6EuKhsFCwN.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	14.13 KB
MD5	cc330b5338fcb1b8b7a4f88d66ffe18b
SHA1	5cc45707ef8744f049f6629898d7a1551c27314c
SHA256	838ed91a96d2b610b8a6607b5dd644ff1fe1f6f780ee786c0349c284385d2a6d
SSDeep	384:P0ImImJnd+rlI0lWpMoK7l7FBbDp45aB4diQBZBSpK:1z8+xHgA7l7/W8iswZB9
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\jZeT4BL.m4a

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\jZeT4BL.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	12.38 KB
MD5	eef8628fd9da78114e6edae9dd87e3b9
SHA1	486942a28f8530f557927b4acce4af517f3c7f71
SHA256	b7ce4178a046684a72f807633d499b9dd2c02b2dd5bf1a071fd446911581f730
SSDeep	384:1qsxyJidyf3kNQILBWNkYyfGUsw0896y93VhvE82uKpK:lyJiMPkN3NWNkaw08l93VRE6
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\mlrbk-2k1.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\mlrbk-2k1.jpg (Modified File)
Mime Type	application/octet-stream
File Size	83.59 KB
MD5	a3b28bc5ff200e936f24ed31f5ea799f
SHA1	dd78e90f76bec6e55419870a5c234e2e060399b5
SHA256	97d6477989b300e6fc6b8a583b7cfe353e44cd7d0180917280cd206629a483e2
SSDeep	1536:2j65sFIlYmU5o7ttZqdtDSiNkPLZ5ENFZYdqnkPAj77:zsFybxqdtDlK1eNFmdqn4Ar
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\n5hRh8HkX hRtD-9n.png

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\n5hRh8HkX hRtD-9n.png.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	36.88 KB
MD5	19bb443c9f9f3ae8afc6c6870a33db1f
SHA1	9a7fc2087f9e3858f2a90c9d8ba26abbfb64195b
SHA256	a3f4a60d273a0633f24cd9dc699d2c839b7fefd36c2f4c1f0beea9a74b4020bf
SSDeep	768:qhirN4NpLVT2IQaCTdIm3eDgiH2GR8XRKTKmhs784fH5:qsaNpLVTZySH/8XRef4fZ
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\PjcNBr9EvQRuRkXhA.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\PjcNBr9EvQRuRkXhA.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	90.06 KB
MD5	270b3c71d05a66eb0361fe9fe8c8af67
SHA1	6bdc77a8155513c9aba877e9a4611f79b0b7687a
SHA256	c61a3cedc08ca7d3f0ea5cebd0eae878724f3b46a5e73f3ac35cbaa28aed376a
SSDeep	1536:klrS9gBbBWaZl3K2RCsj4Yk//cZzO2l8FEJaSpZQ4RpapCApvDFWKNrhsZ1qCmrx:klBWolR9b5R+FdoZQSqvDnNV01qCm7R
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\QsWrg_KB.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\QsWrg_KB.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	99.30 KB
MD5	dd8ab6c93dc17f949d2a49fb20b39f68
SHA1	0146dd615902d228371be1a95e53b05229556aa8
SHA256	89057c6befe2c105e3393f89b54e7329bc754f13bf55714ae3d006b598c3919d
SSDeep	3072:rnTZWYEuhia+hAVMPhnBjVQkw436xrbFD7:rIYEXa+/nrV6xrbR
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\s8RH8_.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\s8RH8_.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	91.85 KB
MD5	2ed59a06a46c7c4ed650538567a39f12
SHA1	1f018944b08aaf6cc9d5dcbe641598612b2b6f59
SHA256	f6bc94cbedeeda667f65e884a441b2619a5aef81aac99e26952cdf7fef80ff5b
SSDeep	1536:Hu9MxHdIG9jtpfgrB5tR6PMeSWkCtiGKnnsoIGCiok4pGduu50LkuFP1lKV4WIsN:PJyG9RtgrBt6PcwBesoIGjXXduuqp10f
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\SKsJaHK4avL.odp

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\SKsJaHK4avL.odp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	7.54 KB
MD5	6ab5d429337a678d27349a81f96c9ac9
SHA1	0827afaf5725eca2953696bc365d8c9d0132ced3
SHA256	6474b76130f1f9a54f4d6859438d49962a6279e7c819fd74fc67261cedb19d04
SSDeep	192:iG/ZsVFq0k26Jw/912CXr2WuMDl0cuF3dTw0t4ZiWvzCspWD:iGhsVFq8KgFb2Wfl0lFeHAiz1pK
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\uBqsl.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\uBqsl.png (Modified File)
Mime Type	application/octet-stream
File Size	88.89 KB
MD5	18d2a003c6180ac46bd5746b2a647ea4
SHA1	79cde926de2e7801d2f1ceb890c630aea10f8012
SHA256	695a57aed156827fbf9ec13972b0b1d8f45eab274be5eab1c6a680fc530e422f
SSDeep	1536:FXbK2GDMPXnaPyIekzKVQEIf1yk1wRUd8oWZRobRzlL5NzB40mkWcuGy5wCAwLsy:tbK2GDOaqIeLVQE2AyT8oWyRt5NzBdWV
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\UFfU-NQWoB7XyHy.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\UFfU-NQWoB7XyHy.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	4.69 KB
MD5	2ec3f16f88b6ee49ea2ce743f33c9f70
SHA1	1c6df20ad65df6c1b35f87593f76e4d493d5413c
SHA256	d09c266a8668122033935bd37e2dcb43a701d0756ee3276ad5cafe804d9b2dd5
SSDeep	96:Pl6a2nk9tj0zUO2O/2DVwBWEzzkf4Eco/zhZDqlnl7jt6Yp5i+I0fS+WD:Pl6a2nkj04DOkQPzAh/zhgln1jtKspWD
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\Yjcpzl.ppt

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\Yjcpzl.ppt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	99.45 KB
MD5	b6d458197a4cc6484f4569a04b252d68
SHA1	038eebb901e232b92d3e61b56fffe08eeb1e4e3f
SHA256	931b73c4c94e2dd9a11326b4e017431638f07a0a61582457c124d9890e4f256b
SSDeep	3072:1IZikUpPpXp509YRsu1uJwIGnDfDppcNuK8om6GbXHr:siDXL09YuTJwIGDfDjcNsomXDHr
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\_ZxYRX.rtf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\_ZxYRX.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	60.03 KB
MD5	4eee782a7400fcd84e7d4ed1152bd579
SHA1	b9366464822a66da88f58a37e7c26e501da6bbf2
SHA256	fce49c27ba8737783594b597007cfe098cacf3c4a9948fb39ee510291ce0611b
SSDeep	1536:ralkIZ2SSHZTUhmW+F+scVH73dxcgj8SspTFTcoIbG:u3SHZTymvsbd38SaRQA
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\3475V2DB.pdf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\3475V2DB.pdf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	77.99 KB
MD5	991945b2b650a1447d3432f134a6bed2
SHA1	ae93aa0d6308b7f05a06db587a8023130793602d
SHA256	25538c337e44ac2b4548147717aad03a2fb880f8d5a4c01677c0dbda647f908e
SSDeep	1536:ly9sT9ju7ZG2hwQVQTDrQPCdqQFySozhUqvQ:AyT8s2ZiIKFnozhhY
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\5dJ40KpaZH5gABK Wvl.xls

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\5dJ40KpaZH5gABK Wvl.xls.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	70.80 KB
MD5	5d167881147add655151832d92fe9da0
SHA1	be7cefbc410f271d8235516ec91504193b117b2f
SHA256	3aff28ae567c51bdbbbffdea782bc39140d9149fb5462a1d28f1aed4b2a54e00
SSDeep	1536:aYujzuE5ojVJe+7yXXDiSR+J9XUu5ojoFQmFrEmI3j3:aYujzuE5Oe+keZ4NcXqj3
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\5WpFV5we BjOWCFQ_8P.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\5WpFV5we BjOWCFQ_8P.png (Modified File)
Mime Type	application/octet-stream
File Size	71.40 KB
MD5	3bd3b5c9dc0a5fc46881bc88128cac0b
SHA1	594fa98fea69d0e2fd1dc1d0f3b634ebc5ac157c
SHA256	f256e9a83ca04a5234401674590dcde1f090d4363687265e43c87686a5414c08
SSDeep	1536:2lmNUC82CZ66Ky6bhB6i7pB4y6rNrLrF3ajM9LOdBcAjSBLQwrgQP8ye:KF0Jy6FJf4x5d3CO3qSyw0QY
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\7SFq.jpg

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\7SFq.jpg.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	18.49 KB
MD5	ca30a5f7cfb1463f8cddd3e80f768c96
SHA1	c0d54066733dd48e407a2234c5a086059576c60d
SHA256	5f30048ab7de18ef2624438316f3b0b47aeede7392760de9e00ec7bbe49cf1c7
SSDeep	384:XCA+sHXYPxGxhNtgBMBAWg3ZApRs8AEbZaJHpkQiioilZpK:XSGXYgtgShDiGVgA
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\aqQlS_nJ46AyT-L-zj.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\aqQlS_nJ46AyT-L-zj.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	82.25 KB
MD5	77bb26138e226aaf1ee42d6d8e2f2adc
SHA1	c0af1cede62e8788ac076609fa5a67aa7f98ac84
SHA256	df7d3a18f2410b596fae08be36efcc7dd16db8f9ad098c38f5a8b760e81ccbb3
SSDeep	1536:vikcMzwNRZiCimyGkr1edIbhx3wx/4HyS1u4V5a65Nsh0PGimB:vFcMUvnydIdINFwZ4N1u4XabQmB
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\Cb9DBpMZ2 ZiZd.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\Cb9DBpMZ2 ZiZd.jpg (Modified File)
Mime Type	application/octet-stream
File Size	21.33 KB
MD5	efe6b4c4993e2e96f058ca82aaa3c892
SHA1	752cffd9c733d9ada3c9f35586c6790d63f95830
SHA256	82462a3241b4f66e37264ae63cdd3107e79965fa2a273c0130dcd097b1373989
SSDeep	384:uFcNc4Wc8NXvAaf/7h2glg7CmUkrfw8BgI4HHXcfbGgMcrAZwL4B/pK:uFYcJLXBV2gm7ZUwo8WZnXgJzrAwsBw
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\DE3scvajpXnclcE34.xls

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\DE3scvajpXnclcE34.xls.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	18.47 KB
MD5	6f5f38ec44dca20dc25966807e9d8010
SHA1	02c551c8a4ba3971143344ca066c8bd443e156ed
SHA256	3f9696b508c4b3bfaad2186d8831bea110a65c78755d5f4a5337fa370ea56d4a
SSDeep	384:sS7sxSjwI/gLAp31jL6+celDUqqRHC/cuWlKzv7pHCNYLnEVpK:sSPwI/gLA3d2+cVqqRuJWlKzUGYO
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\K7u1HHJ_-wyjZGJCddO.doc.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\K7u1HHJ_-wyjZGJCddO.doc (Modified File)
Mime Type	application/octet-stream
File Size	92.62 KB
MD5	3ef0c9a5a8d6ba759c9f8fcdeaf83777
SHA1	07ee8c1dfd51735792d2c70938ae5b7a478af13e
SHA256	78953d7dfe2b45bbdcb1a17f0677d7fdb70b7edcd8e2925295210c7a7da0fe07
SSDeep	1536:DuIuQzamBbwLIHb9c2TjmM/SLbU4WCOcv7ggm51iF3woWnQhuLbIk78bX2O70p:DuPQt/Huu/SUCOcv7zkH+YbIkgbG3
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\lDvQFP7B58nzHOr.m4a

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\lDvQFP7B58nzHOr.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	41.28 KB
MD5	5e5dfb754865b4e774cf3aa1d8372bd4
SHA1	41a94d7ff9e4293b6db6bce9eab314289001a74f
SHA256	08f4bf30ec8f3568ea11eb1f8714b9d15c95bca5310fdafe24693ce0b4483f2f
SSDeep	768:IYVs8XnYYs9J/LbMhwLVApYDDYClRZAkESii7Valklrg3UNkYAg:VVs8XXQk+VAOvxRCkE9i7glJhYD
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\PYzrJzKfYy0WH.jpg

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\PYzrJzKfYy0WH.jpg.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	58.63 KB
MD5	35f44e555e47733f4d87ba20ed7b044e
SHA1	9195429a7a547abc14f6ceca36a91c8ca0869af3
SHA256	6b7c356f0918fdee442be9098d4d30a6c1158ce4e0e0d5fc66e437052de2dec2
SSDeep	1536:h1BTa7kvni3wG+z5oLyxAfvH+GJ+xnSMM+xze4AFBNAh1tZRo:h1xa7kaAGS5oSq+a+xnSMM+xze4A+h1i
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\rBWrlFNmCY.bmp.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\rBWrlFNmCY.bmp (Modified File)
Mime Type	application/octet-stream
File Size	1.91 KB
MD5	ca2419c8d0286255a25b2b61366399d0
SHA1	c548774ccfc6cd89c2a884a5d9d233db1292040c
SHA256	bb6af7534f3616c5c5ef2d5beb389f8928ae6cdeeae4aac0d563e979535c6528
SSDeep	48:BTGVmjMx00PfWtAU++0XoGmmTy2EG/xWZV2VEam0+Ho+9f/a+/+73H:NaPfWtInFtTyFG/YGC0+I0fS+WD
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\RwNhKXau 7hWtmS6.png

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\RwNhKXau 7hWtmS6.png.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	17.19 KB
MD5	faad9696b0ef09125e479d60f9bbf58e
SHA1	1706d5f0829e52a4331854e45ecf71cd9aa63092
SHA256	e88bfb23eeeff5d4e83427ce19b48ada14bbb3a40642b9c995e0b2fa6b2f7784
SSDeep	384:5RtNE1cT7rD3aEUOtRNPasB0UHrKNed8CO2la3pdR3JTscAH7zJ2pK:vtNEe7rLa00ALKOO2lcXFsDBh
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\OifmxvKJj07hQoi0y.ppt.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\OifmxvKJj07hQoi0y.ppt (Modified File)
Mime Type	application/octet-stream
File Size	80.35 KB
MD5	82b4318de76f242da2e152519d3b7ebf
SHA1	de30823f09e7295f749530a0e7b8a772937f25e2
SHA256	58031c96b64037f042e985dad89ea9669116b43b62ef97ccb8ef5ba340c95402
SSDeep	1536:GrAm7LgPOl5cTCGgZvzjFzxLXqNv6+19g+Ds6fL/Oiz/rB3bs4gT:YLWINZv3vMDss/Oiz1C
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\SbwWluUpbQiQnJG8qbe.pdf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\SbwWluUpbQiQnJG8qbe.pdf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	69.02 KB
MD5	c20693c7752f8efb0faf761e465f74ec
SHA1	d2a07450e62d9c2ee1df7fc74de74c8a9173dcad
SHA256	bfbff57ed4b907773ec0e85d6e60cd1fe9d2fba02c374ce5a17588a9a72c4a6f
SSDeep	1536:wsqWtjLrXyuCLDYCBp8HWTUCY+wMNvvjTh9As4gXbl:YWtLXyuCXYCB62AiwQv7dl
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\SJcMEwGL9beIVl4.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\SJcMEwGL9beIVl4.wav (Modified File)
Mime Type	application/octet-stream
File Size	90.32 KB
MD5	35be471366bf03d4226e57e08e536e71
SHA1	e230d1d3198daf6dca578ebee833859bc49a4df8
SHA256	8b2c4180d9851165bc2a6f9ce5cce812dd464b3e5fab5870e29049e8e6125e56
SSDeep	1536:tZL+NPAaW+O+t345KXFKFQAOuFmTxGDtFVC9TnzAPDf7NYtXMzsBLWbfb3plbsPC:b+aaHo5KX8FQ44T0kxsHS2zssPIPOE8T
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\8_rlQ cdl 6S_NtQ4.ods.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\8_rlQ cdl 6S_NtQ4.ods (Modified File)
Mime Type	application/octet-stream
File Size	91.50 KB
MD5	2c8aeb4d847e72545dc572b3adc875d8
SHA1	d7e5636f7e571099c9fe55b9cf8e61874b65bf70
SHA256	c14fb8656b878406eceb4e702c139e1c7067e270fc54e5fc7b4cb87e67842871
SSDeep	1536:uYKpHkGPlf6jh+W7mZdRPiGe1zYF8rQNh+uq1E4WLziaAcQWzQyYuOd:uVHkKlf8h+W0RPiHat/OWqaAcQWzQruc
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\9JP3XV6aItTN8Fsv.gif.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\9JP3XV6aItTN8Fsv.gif (Modified File)
Mime Type	application/octet-stream
File Size	69.89 KB
MD5	6fa93417c1fe3020c290e6b3eb4db26d
SHA1	6f4e92f495e61be2e67a53a47b26c2ac0ba755cd
SHA256	ee7fd7d5b25ba1be44679cc68524b2de1f78d5c385ac28c5194183984cefd5ff
SSDeep	1536:50uUkLOnDMSziVFwfjUgYH0Tj8Fe8bUYn1pZG0JEXvR3JmVD9sR7qDx:50uFsDGDCjUzH9bvDG0JevR3w2E
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\aNP_CKGono8FHP.bmp

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\aNP_CKGono8FHP.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	53.65 KB
MD5	78c4d20e45a6487be61ef4598665cca5
SHA1	e45a026ccbfe815d4952d005fb48d2abc38196c6
SHA256	8152e91f06bb4a18571e898e0764ed8de502bf5494cfa16896be447a29424c01
SSDeep	1536:WMKhWh7E108nlqjyrWS5J8S1vnyw1byMETdSscw:3b8lqjyCSuK9b8uw
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\Eiu0lN-XaE.docx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\Eiu0lN-XaE.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	12.90 KB
MD5	b7040d47a73bb1de42b504ba63bf4593
SHA1	d9e677fcc7fb7f8a4fd39a1a9474b154112d5777
SHA256	7adc49bede901978e2fb4c96fb0385ed7a07411ad118d340e20f5886ad9191de
SSDeep	192:DkY6aY3I+7Jaz0VpeexUQcc/k5Z0VVUclTvL7bSOqxOEU49vpdhQifJGspWD:Dn6aYNJaYVeQVkcVDv7qIlmmix5pK
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\I0Kapz95f.avi

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\I0Kapz95f.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	85.04 KB
MD5	e5481dbebbba37962302ad63fb0cdc5f
SHA1	4051785875b977c45b49d14fda5daa1542029504
SHA256	bd13e41768a23e8f511c70266b5e361d6d3135d349897ab9a6b0ed66fc595524
SSDeep	1536:+0ToPzMjM1tzjo410YL/wsjVzk8wqPyvf6WZwRpzpZP8M4Vs8yOIwsFHouzd:aAA1to42hspef6WZwvLwy8sFHoYd
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\OCsemDUOtc.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\OCsemDUOtc.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	36.34 KB
MD5	9ebe31a43bb0d4f75d0f2d59f88def9d
SHA1	aceceb244e6abdd275b5ece121e4dfaa2ec84bd2
SHA256	e9df11ec898048af3022c20866c7d96d25772e94b581d78486e31b9dc7c1204b
SSDeep	768:xd6pAI3ezSrCChdsU7d7VQ/c5rnrEENjR6A6O5XCQLd1v4XteUv:xYpAI3e+r12m7VQ/kNjf9JCQjv4deI
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\Rud6mibY589Ee3.mkv

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\Rud6mibY589Ee3.mkv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	39.29 KB
MD5	471dfca4f9008f52f69f58033a898abd
SHA1	c14e998c44a045ed3331820b1ddc770de71b3742
SHA256	f7441a65d5e8c43f3b81f5cab0b8491e7cba51bf757709d3e39eabcf606a3d27
SSDeep	768:opCYOhYCvdfC3fPV23Fy5KHSU1uQbizNspf2ctt67K8MWf6JYaJvw+9:opCt+ClfC3wEMH7M26st2UwtMWfsvwA
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\xs8aVnsK9NnWwoql.png

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\xs8aVnsK9NnWwoql.png.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	42.74 KB
MD5	80a3915dae7f2d67eeaa2ba90b851d73
SHA1	a63ad2eccdc8f7d44efbf0d81d3fa9bfaaa61053
SHA256	b5060a18436af9367d35be41e215380aa144c49959d3d2441ef513e64741a938
SSDeep	768:ZedHdo4d6VfCdunIVGzstTSbj38yK6z5OUtbK31onAFChQi:IdjWCdu2tGP3e6FOUcFumi
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\yGjZ.rtf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\yGjZ.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	23.70 KB
MD5	46360f6ca3de385d62fabfc0fa41332b
SHA1	dba9407a27b56832071e7ca91422219d1ff804f9
SHA256	9971c866a812caf6f02a8eef37b0c2a385bc8f4ca92c3de60e1dbce88b6c142e
SSDeep	384:PqC+3EePFbDVMVb1Mhwrw+Uf2IXYr3W36YN6z75P9RMEWXjs4+6spK:PqCAbDVhp+C2FSe7DRJWXoK3
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\yKYlr_viA.odt

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\yKYlr_viA.odt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	82.07 KB
MD5	6245e9a4c2c73c20d3ab63b8ef531eff
SHA1	39d27363eb9e1f47bf703777bd0d0f87b43e5662
SHA256	1a47dd6b382bac31e1f3229abaff191a3f5de3b3ce6705c9c446902586e3e311
SSDeep	1536:uwILqGwMxh/AtmW2jPLvg39SryZXlrAcw5eNWV2nvpJ699bzb:ugUQcW2jktXlJw5eNjhJ6Hbzb
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\tCY_wfmFOaMzCGVNZFEd.m4a.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\tCY_wfmFOaMzCGVNZFEd.m4a (Modified File)
Mime Type	application/octet-stream
File Size	75.36 KB
MD5	034bcd4197aefb90671e2cdb58fbb6cc
SHA1	7ecd38855214af4eda9d4290ce77c1f0dc556052
SHA256	d36f2f37a4559dcd3578cdc4c3ce431d689a8d17986742d2beb5d311e04106d0
SSDeep	1536:JbQkyIdyre48T2hvtstsEC/nbetDCVNQQUyrYUSJ7j4zpkCVRT0nl0:mAd6e464O5Gffi34duq
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\TLtL7FqQ6HKzRKYgMVx.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\TLtL7FqQ6HKzRKYgMVx.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	61.65 KB
MD5	c7e6da736ede82f820f3411c9edd4d38
SHA1	72537b2c5cebd1bb76f0d9115cc151a7a11b5a3d
SHA256	763c342ed81dd6f1f124c7a530beeead99713d966fb3be12587fb03bf219d375
SSDeep	1536:3AEAw3JRfU9vqanlkV+8sVkp7hK6kiAGqXJyZ8aBonr2FYKQ:wLo0qEkXv7hCX8ZhonwRQ
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\tpWq0W7bdVW50sRvURB.ods.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\tpWq0W7bdVW50sRvURB.ods (Modified File)
Mime Type	application/octet-stream
File Size	39.17 KB
MD5	89d57398216908ccc54f0b3390594c8e
SHA1	69de8073dfd7a0dc56f1f545b5cdbff34e1f99e9
SHA256	24697160bcd40f85bd0d7c5f4a495c142ac7b67338a71bf47adaa12866cb9b70
SSDeep	768:mdl5LLmdsVBvFP949AxPr1oxV1qNqU2H/JVC46BAEq2pddWLnr:mdv20BvV75olqNqh/4BAEv3donr
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\WDZdqCHFFcmh9_.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\WDZdqCHFFcmh9_.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	90.88 KB
MD5	26fb274b2db1ace424ac3886803d18a4
SHA1	60be2da9bfc0b8794eaf65dc4b427bc43f3d765e
SHA256	9616026b3637646f2df2b232ec6435f4a1d62d4a398c71a27bea7485c301d8f1
SSDeep	1536:wErugcPxXU1yWCs0q9AHKg+pBuc+m1nEATH9YbRuScNYPuWar8xNUVJ:DKgcPJGyWh0mAHKg+yOKAz0pcOPxnSVJ
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\wO3YP7g6H.wav

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\wO3YP7g6H.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	6.45 KB
MD5	a73b4a784b4779a1c50f3810cd1fcd70
SHA1	e2cf7f442a0a78bb8af87c9befe2e62b589d021f
SHA256	03ce62f5fc53e813de61ee7d6e6585e4020534e5f1d8f506804e4fef5c5bd76c
SSDeep	96:xHAVBaCD4ZN64LKaTvYGVU7PZnMUp/GwKu+GAhbV/GorGB+I0fS+WD:OnARLKVSU7tdOFNGoSBspWD
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\yn-OCsN4T3Jmv.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\yn-OCsN4T3Jmv.wav (Modified File)
Mime Type	application/octet-stream
File Size	59.60 KB
MD5	87ab257ac9c2016a5df7223f270c1d5e
SHA1	412b80b00f1bf54cc81d7ee692c279f38e17edd5
SHA256	f4c9d450d3d080b97c5938a2484a87deee29ba48f6c0973223263c8c7d8ed885
SSDeep	1536:4HAYMPsCuIHHb4sFc/kSBMmNctxDJJaMKXkS4vSB:4JEsKhFYkSBM7TJDXcB
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\ZSfJsNS2sePMKa.pps.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\ZSfJsNS2sePMKa.pps (Modified File)
Mime Type	application/octet-stream
File Size	18.72 KB
MD5	e6438b981e7fe3040c8cc15feaae659a
SHA1	680b99e39e11a860c42eb73d0a35b4f6def305dc
SHA256	15ce5773fc2aeb720236acfb2d037124c26ad1c81a7543847e7b3226aef49ce0
SSDeep	384:3f2yENzEaEnorHUvHM9UH1wzBIp08UG2QJsqnQpK:3f259Mn+U6S1LPJsqb
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\ztT1zUqOHSnYLoXvx2_E.csv

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\ztT1zUqOHSnYLoXvx2_E.csv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	36.30 KB
MD5	979dcc30f3d12f7360cf7dc11725d577
SHA1	cc3dec2af7fb588abdb6c33af429fe59daaff366
SHA256	6d00b979b2e98f536b7e4f3fc66a12ead71f76b4bd0444df74231b33d6355a71
SSDeep	768:2KL83DNvnD4ZNWzlvh2m+K26Rn5RyKCuRHYXJXhu1B:lLKaNWzlJ2dKrRCKRajc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\1WQmayKDv.pptx.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\1WQmayKDv.pptx (Modified File)
Mime Type	application/octet-stream
File Size	61.44 KB
MD5	d2d1511b0f00fe515f9ad726f94ae5c5
SHA1	0f8474ce077da2d6b15b6b7988bde97919d42dbe
SHA256	66626cf3afd68d416190300a39990ddd2b4f56a99b6ef702b58daec12872ac92
SSDeep	1536:PQVAw/1XBbo8/yZdzWGxMLrEuClb3/2Fhz:PQS611o8qZd7+iyFt
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\-nk0Jwf_DtIx7OFnM.xlsx.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\-nk0Jwf_DtIx7OFnM.xlsx (Modified File)
Mime Type	application/octet-stream
File Size	39.42 KB
MD5	241588a10aabb9df4a9d1d1554f1febe
SHA1	48f8a0e773a8b7345eaaba3dcec7cc9acd064790
SHA256	776b486e578f51fb25b517fe2cfe59635c5a83ffbf4707e8aff55c55fa4f042e
SSDeep	768:xt6+vSuH8iftIz43D+38qT9lg9r9GjW0Fxxk9v4Sqc7J:3/8QtI0K38iCRkj9Fxxk9CA
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\s2-ewyNmBK.gif.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\s2-ewyNmBK.gif (Modified File)
Mime Type	application/octet-stream
File Size	66.40 KB
MD5	3ebaa0dafe8999f7b03099d14c6d1a15
SHA1	ec35c04310d763afc19a4cc442443242eb0e81d7
SHA256	5a5284e23a3e67e831d2d7f939c31be8a6a6441c72e6a30043941dba2c3d7805
SSDeep	1536:BbTyuDtJ6zdNzk5Arckv0aDnDW+Y3QuCYUsOvtRI0cLr3s3X:QdNg5ArciDnDW+zuSvtRI0O83X
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\36V5IRtis-.pps

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\36V5IRtis-.pps.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	5.37 KB
MD5	c7fa9a9eedae09eaad54c71195768e3e
SHA1	bc3bf77477aac3ff609353a42282b52e5813c649
SHA256	1217fa57b47dc27e9a6e816aa886eac814ab41723e4863a20043afccdcd3d2b5
SSDeep	96:xxO8y85GOVWa8v8XO6lw1N4nR18j/SxGkHys33xzKxzX4c0HEvQS+9yjwQ+I0fSp:xoj85e8XOEAp+Ht3xYscuEoNEwQspWD
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\82f_2PILY3Rkg8CydxKr.xlsx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\82f_2PILY3Rkg8CydxKr.xlsx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	23.02 KB
MD5	b992bfc2b5a888546c6cf34ce8f03e45
SHA1	2283f59ecce2a44a8916548e3404f5abaec87269
SHA256	f8da9fe4547f47de459b33aa66ceeb40f1995d9cf4461f8dbbff93d09a3f3718
SSDeep	384:P95Nf3Z7FnFpoxf3G1UyWyv2TCOJeVs3s7/hmqA+sSBiMC95DcDTXv+SR22pK:1p5DcKSCxasjhmqAVDcDTXbRc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\7d9vJ0y5f9LLSOKq2PHP.ppt.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\7d9vJ0y5f9LLSOKq2PHP.ppt (Modified File)
Mime Type	application/octet-stream
File Size	78.06 KB
MD5	1532a86697edc5073a3c1381d6cf5064
SHA1	f3a6c15438009d47e05085149b3d7109db5a5229
SHA256	b016c9d9f3882f86facd310aac2ad45f647f2aa12e115b827782a1fa70d7a37a
SSDeep	1536:Yvzf9EZf1gRKPnfc0PXJkgn2wjDXLlVHA9VGhrOOnY8/3SJAbl51k6V9:cyXgwnfdPXJk4XLlVHmsh5VSYl51k6n
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\9H_Sl92NVVWuSvdwZJYh.pptx.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\9H_Sl92NVVWuSvdwZJYh.pptx (Modified File)
Mime Type	application/octet-stream
File Size	95.20 KB
MD5	3d761c0eeeab96172b8afb74dde32bc0
SHA1	1697e4cf694754eaf2f214f30d52aad66c99c7ef
SHA256	198d65268df426cab8cbede443c3009ad4a7de8d8b3ac9a3d11ca65302804a4f
SSDeep	1536:dImd4VFJ6xnjKHl3WviHNt6+yfKhL4CfQcrP9waSS4dSpcxgPlhh3fEvHG9qW9Cn:PCJUWF31Nt6+QEtfQGPKLgNhpfE/G9RG
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\chS1ef v8z.odp

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\chS1ef v8z.odp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	97.59 KB
MD5	ce85e913ccd158b29b2bc8575af68681
SHA1	d54aabd158d7a86f974bb21d9c2bfabe7606049e
SHA256	e9b30e7363cbaa897bb2a95e18a269b0bc8e85357768eb45f399da8b63345195
SSDeep	1536:kIcqnfjtFRKIP8hLnuJXSYi6iRLSaXLkrPKpS0LaFhuBMinfib9c7+p5gJt7b4gD:kSxFsIPg+C6iRLSa7uSGinfU97MbjlR
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\CsjFe8d.pptx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\CsjFe8d.pptx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	96.20 KB
MD5	9b75f41cf9fd5ee29e1c609fb5cbd69a
SHA1	71c45635e2f48ba83c18f829bdbbc5d060b5a588
SHA256	c002f6f6a929e094cbcdd2a01f82ff50b02ed7013aafc1d816b75819976a3ae8
SSDeep	3072:HIpgesc7jDPeeUZOgoB9EYmcRijzRGykiXyKFX:oSDcvDm/tyC8l9Eyc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\mDGOSIz_qds.docx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\mDGOSIz_qds.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	90.93 KB
MD5	651f0e0a9d556d9372c3738a829f9295
SHA1	22f15efa34fde1c7903dd3faff270d1fc84d4ce9
SHA256	08289c8a945ec19c146965753249407a65c28a827b2f489195af9cc0f465dea9
SSDeep	1536:Ftywe5mPgA7h2fp0WzS7Z5+gisb6OefquY8UfnGz0kKfHmVHC4KRLUPS0SJPUCbd:FtamIIh2BuH3iy6DSuYQzxKfGVH4xUPs
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\MRcnfzewVmw.docx.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\MRcnfzewVmw.docx (Modified File)
Mime Type	application/octet-stream
File Size	24.96 KB
MD5	ef394868a7a609ac5cd05d6049191ea4
SHA1	4772303b982d75262077f676571224daf0f95c52
SHA256	bb73c23ece12e976bc6670c3376f91b9d046c310828cb56612d86407857c8fab
SSDeep	384:ErzHQ+ny76vh83280+WUEjuMJIPeqXkXk4AJNv/U+wbLwpkCiEABnVTRQF1bXP6H:YRy76G32aGd+2S/NmjcQtQnb6Bnf
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\NUZN31jJgT6UykF_.ots.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\NUZN31jJgT6UykF_.ots (Modified File)
Mime Type	application/octet-stream
File Size	9.36 KB
MD5	f691a296095f23982d46a1c71fa8ffb6
SHA1	2cdd3029d03f785e1173938a9f3b1c8dbe7ee396
SHA256	bf4e8187227ffc6afa2f041a9b074244a2f60495f14e3efeb4f48a626b39c4de
SSDeep	192:VDYIwJP/k/IVav9gZbF7BxMZ6DMRyLPkC3i00exH8iF11spWD:Vfwp/KIVaFgZtBxMIARA3Z0exN1WpK
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\quCysrsmVF.pptx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\quCysrsmVF.pptx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	58.58 KB
MD5	f25cccbc160b69d9b61985ddaacb94f1
SHA1	4d99a4c3b4fd5da5daaa9f0aea8df3d8cc94890d
SHA256	ce786aa8e0615194a3efeee3ddfbe6dfbdd7c6dd7cddd061a2a0e7c89c8dbd4a
SSDeep	1536:0EA9Pm0k2Yv0mmVgtaw3pYwhtc576QwI7sZ4cgsVL:0HPmvGitawHhED3wZxL
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\spmR iwVLu JE 9B.rtf.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\spmR iwVLu JE 9B.rtf (Modified File)
Mime Type	application/octet-stream
File Size	51.76 KB
MD5	53543602ffa9174a8a7c9db585721d43
SHA1	e533e493a0bb269c52d4b953e5bdb54e9a22ff4b
SHA256	04739fabc4c6be5e6e398d14eebf1c0e23d2380a75fdf4983c1b372b560a88c5
SSDeep	1536:51bQkVBoHWKNzMGm2Vi75LRqnebnbKGxIDo:4kVizHjViCneb2GxP
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\U8_NH2Y.pdf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\U8_NH2Y.pdf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	60.01 KB
MD5	c8adbaa0bc56c906c83b0a36d25d0173
SHA1	d8e5d75c1b5f9cf6cd7a0854dac05f80ccba85fa
SHA256	3f6bdb33dfd895d008b8274abee289262589ddab3a04c9a478b9bdbb248e6611
SSDeep	1536:Sfttb9NovM252aAP6BqjwMHqcWvjxR6mTi:SfHbMvipjocWvd0
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Outlook Files\kkcie@kdj.kd.pst.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Outlook Files\kkcie@kdj.kd.pst (Modified File)
Mime Type	application/octet-stream
File Size	265.50 KB
MD5	b41e0b6cc9b071a65d3794f863202621
SHA1	7ff3594bc5ec0d7061d9fc63d247e38c0b8eeb67
SHA256	49e26be88aaf3642fb014c4d4f5b887cd5843c88a56da0578c01c8976811d3b2
SSDeep	1536:KcQagqDZLsM25H4VJGR6G+1hxJNhxGgEUN4AR:6aWr5oJo6G+1hxJ3ogBbR
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\cpdJYzaQxXso.odt

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\cpdJYzaQxXso.odt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	94.11 KB
MD5	77b81f4bc6beed718c5d7695ffe4b123
SHA1	26da64f894ed3f85a9ab3ef6c45df709d0c521d2
SHA256	52c18960c1f2d8ed91f89ea32e346ce2d28a4302a64c9c2f7fc30c0760502937
SSDeep	1536:h5cci++0tXJbMFL0LHqtJ4HXrFdLMC6TX9Uk3L+pTwmjeLpKt:sapJG0O0HXxdIlX9fgTZiYt
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\ivPZqJfxmHT.pps.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\ivPZqJfxmHT.pps (Modified File)
Mime Type	application/octet-stream
File Size	48.49 KB
MD5	433cc4d302ea5d73eb4287a31af93ed4
SHA1	1092e3d19419e6a927b6b5f817b5746e648c4049
SHA256	010e724e07162510cbb2cc61852e6fab33a7c93705c1e942acf5a1e723b9705b
SSDeep	1536:g8PdyHqa8u86Spc379j8YR/a0yGFCrYxE:Ddu7a6h7PCGUrYE
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\8GgGCWAXxjKLpeoA40OY.odp.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\8GgGCWAXxjKLpeoA40OY.odp (Modified File)
Mime Type	application/octet-stream
File Size	96.88 KB
MD5	9c7a12a9c842752ebbb4c382ce1b7a24
SHA1	061340b9ed706507fdd050ffc30bb86efe789c64
SHA256	93e3767abdee295c3a1fbf9dc65e2cb3ef4ca51a5dba7253afcaecd55a3bc4c1
SSDeep	3072:os/h/ulBHTCeOtHJ1mQ0wf+5cSMtVPEPg:oshWXXSpVff+nqMPg
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\gaAE08.xlsx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\gaAE08.xlsx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	76.18 KB
MD5	5acb701fdd0e4b800d8d7260f1e41781
SHA1	c5dd3526f55416ce86790a6ad758754d10e850bf
SHA256	7d7cc53b944de4966613bf6da417fd8d7235a3602a5ddec16dfc5a3491171c8b
SSDeep	1536:k+/F68hxOiPZ6Pjh3AyA/seM8irTA16Gt718N38+Vw4UykyEFKBs:kagcUiP8AyA2rcIsz4UfR
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\CNnaWo_J.xls

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\CNnaWo_J.xls.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	7.92 KB
MD5	2817755478b9ce0da3ee634595a6b9a0
SHA1	4fe776caecbbd19319b0b69f5e8cc9c2fd9d88e1
SHA256	e8a95370f9da9d4150dbc015d27fda37cbf43cd88d04324c9db8a3b82a042038
SSDeep	192:xJqXqC3rFLZEDU1P3bN1Mw20pX9ue0SosJAhIGspWD:nw3pLCcbd2UN100JAW5pK
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\EPWE.xlsx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\EPWE.xlsx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	22.73 KB
MD5	90e9f6531788d5034da95f3f573dd5f8
SHA1	241b899d15adb67beaefcc272c6b5ce6af659918
SHA256	5c9fcd9e023c0733ccc6870c21a658c490513b8b530d88eb865818255ba59df4
SSDeep	384:P3ZmkTSZcB1ZgSxABCxLWChMqpxCnTjv46I8abPUYN3SXw8kDgFU6kk5uipKsfYz:PXTSZcB3g7MxLWCh3pxrXFbseSAp56kf
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\JzVy_5xEKQ.xlsx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\JzVy_5xEKQ.xlsx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	25.84 KB
MD5	7c5ab1d15f435ee78cbd12e7b79b8d4d
SHA1	05e0aab86098f5a2dc605ad7c27a9de5fd7b25ea
SHA256	ba99175aaca5c96e7269f04ad8b8c6f184172f80b937238c786123eb6972a5b5
SSDeep	768:WdPOHtCSdrURAp1odWr2+w9+2mHaf7yfcDUtZY5K:oPetlUR2WWyhI2W67y206K
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\M24gnx.pps.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\M24gnx.pps (Modified File)
Mime Type	application/octet-stream
File Size	47.16 KB
MD5	f26f16f609ba1d1049c3bb39b09c68ec
SHA1	2e1688ccde94c7bad1f83c1998a1dbaf70cec000
SHA256	fbe0de3400b1923d7c54966eea81482fdb2ce7b26387c583a959895da7ea0e51
SSDeep	768:mYNelyyxyofXy/bCLmCUywpMmEXVscqg3w5maqMURs6p6dqt2mKoVUMHSGFf:mYYIyxDXaCCNkmEleZqMURs6EY2kVrf
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\MXMHgMI.ods

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\MXMHgMI.ods.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	81.89 KB
MD5	4ed674ff56ddf15bb8d8d0802eb6a494
SHA1	d47b0aeb35e309cfe913a7c75bbdb8cff89974a3
SHA256	13ca810ea21a1c595404ec4c6cd1d686d2296192dec25676d4d5c8a0338ecde7
SSDeep	1536:v4+0LU8CYeTY3vxLHrnbCur4XqXk1aV9hp7x1Rc8HFIgpzB97RHGT3doGN1zK4Ce:DW5eTqFzbuqUcV9x1zSstaraQzKObL
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\VcL01ptYXVDK5.rtf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\VcL01ptYXVDK5.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	82.39 KB
MD5	dfb2ce72ceb9db68427978ac1067368b
SHA1	388cf75d3683f3a7aac8b009da760cd1849e3425
SHA256	4a9404b42b3c6d77d18cdc0c0b1079e16596751a33a7a7ea99fa3a4330434a3b
SSDeep	1536:Xmsg4xr66sI7Zz8Wi2sJ37qhH9FsZCG+KwBm7311kNVo/fIT5Ccrw:lW6t7RizJ3kH9FghWE3kbo/YE
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\VSf1IL-6_DKVGroXOg.docx

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\VSf1IL-6_DKVGroXOg.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	41.51 KB
MD5	7730e39ab5f2720fab7a960c7a3b6159
SHA1	c780be0c5bd1a30e0c0adfbb2655969fab068210
SHA256	42a4a30faa8a89e500a760be76cc4d8ef953d6904a0199dfab1d53b446cc11de
SSDeep	768:IWE5C9rR/chfifXG9qztcOkJY5FhOZfSVztIBzeLza4X:Dm8Uhfi/oOU8FhymSBzoX
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\PoJjjS_vt-KW.doc

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\PoJjjS_vt-KW.doc.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	68.96 KB
MD5	7740293cd078f3ae8f6c1f3348553095
SHA1	3575ba2740ebbe83a564053b656fa8cbf3866a5d
SHA256	1d367ec011925bb843bba551be875fd88c6769b011c7d2be49512d23c5e30e43
SSDeep	1536:eKOBiWDDAPPITNg92GVc7VP2si7+Meo4fYGvj96wMOpCBIsoph:eKOUWDEITrGKl2sO+MgAGvBLMgt3ph
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\RcZvqUQNfrhT.rtf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\RcZvqUQNfrhT.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	97.18 KB
MD5	ef666fbf3212614879b4dc07afa0867f
SHA1	e5d5be10fd63d99a9a7032ba1f8e001c08966cac
SHA256	1578ea7b230782094ca40fc1c719a323be65078a170782b5f43125f85c427a7a
SSDeep	1536:ewBBfzRAXfxVb0uKwHLiWtEwtStOEbsHduAJiA9/RbZsg9P4YQKG4ciCOz:/BdlwT/r9gOsi9/RtsTKG4ciJz
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\tPNskvgoa.ots

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\tPNskvgoa.ots.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	79.78 KB
MD5	30e4b2dd127e786f3f629ef8de63080f
SHA1	f406e83e46b7de4d918ab6d247b7df777c64c77b
SHA256	fc4141a82ff6c846e7a3c2bb4ebe4f9137dabee76e266bc62a12b88a3731dc5f
SSDeep	1536:4bHqnXeSOEn7zIZl8CEuMQlqWCiNiXbdFqhgYD6hJunKy/9NB5ChZ4e3mG+Rhz:oHqnXe/veKMQlqWCiqxO57ByZ4QM
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\tYF1BO7xWTgAbs uk76.csv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\tYF1BO7xWTgAbs uk76.csv (Modified File)
Mime Type	application/octet-stream
File Size	51.92 KB
MD5	6ee9b9ce26c227b7fd1aa90825ffbfcc
SHA1	6344427ba08864a601e68f8edf6cb15e5805da13
SHA256	fab58d481328b66fa9626462e69980bb9c38e658160ac8efa7a52414caf14402
SSDeep	768:XLyQ1HOeKPVhHpcIX8fNVyfubZCRkV2qdIoTg6pf9jWHvnjQrJBQqxyAs6w2xcgm:bR1HORVXhw/yWVCEpYfqJyqxyQdxaK2
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\vTQY5QAfnqPKv2th.odt

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\vTQY5QAfnqPKv2th.odt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	45.13 KB
MD5	0a428f160cc4ba427ad1d4299fd0f7d0
SHA1	fe0d6cdcecbb11f0743c1de016b4a6a5d45dcbbb
SHA256	ce8a4b765af4c3b7e341ad99e76725bbad5e0fde56043e5ad9b22d3f2638af83
SSDeep	768:bv97T+HioSjgfip4DdWMaKpJjD+mNmSmk3+gLHPXKceuPQ9oYqazYr79y+q:bv93+C5gKLba+mgSlJxPQ9wazCo+q
ImpHash	-

\\?\C:\Users\FD1HVy\Music\33TPGnDT5IeW5L2R8Q.wav

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\33TPGnDT5IeW5L2R8Q.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	66.74 KB
MD5	757adaeb64e728f173bf0fd6949c7366
SHA1	ef7a4fe7eaa6601eb8d4316bab041d79137b27cd
SHA256	a6c4198fee4cd6a324e3001c330d626172b0203a4775ba2bd142cc897fa10c27
SSDeep	1536:0bA/woEORNrAXBiwwbHJawXZEfJm+XCyu4sh0Uv:P/woEONrgwb7XZGJXCGWx
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\pEnlGp0QjdthKZA-Yo5o.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\pEnlGp0QjdthKZA-Yo5o.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	31.95 KB
MD5	7bab175795216625b0b3e54770235f56
SHA1	f3588a3633683c85b775db7d2836e617c01cb950
SHA256	7161dc42c45aed375157e139628b6717913b7ed6b0079696da391b3544af3aab
SSDeep	768:WyLaRJTwJRWqEtL87VYH6xmG9UQ5B+oSN9uBuJVuo:WFRJUEtAVo7joSN95JVuo
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\ZwNcr2UV.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\ZwNcr2UV.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	11.17 KB
MD5	1a4813eed8a226b9b3e7f63f14eb6c5f
SHA1	03c85856f08629c9b09938bdd7286f586571c42d
SHA256	691c062093b81c03c438586c067598336b2d63938b24d5f5eeae30c8bdcb4852
SSDeep	192:Pl6agwQpIqfYvwRoO7481Sfym4hrrAaJY6tL85raT5N/miplcFvoyAsO1JS8ZoRr:P0yPqWwXPfh7JYA/D/mAl0voy+JWTWpK
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\Ph7y_8.m4a.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\Ph7y_8.m4a (Modified File)
Mime Type	application/octet-stream
File Size	66.15 KB
MD5	2369ec41348ec6e2144781c02bc27330
SHA1	0e2f9547f2dfffd412a9adce32a694a8ca9d3c37
SHA256	568dd9ce4f65774087cadd99c3e56e2877f349f5cb30271b40115ea7fc04c448
SSDeep	1536:FU0GpRyCW3yA+NYs9ktdNG/DdU5NB8ZTmX3wFN7Xmc3zG6Gl9uQAGtyUNh:C0kWiYkk18ZTmXAFN7hSBAGtyAh
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\Pq-yXja0.m4a

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\Pq-yXja0.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	29.10 KB
MD5	efdaa54e8bd32679729ba55c57cfa98a
SHA1	491832344c404c98132710c108ecf52920a47f57
SHA256	01abac5bc2401cbd32fb1cdead5fffd031f22ec873fed2d9281708635285bbde
SSDeep	768:u9EnXk2LPq5nFFOMPp1tCkvQPgt9IqkLeZJrANnY:OEnu5n7QGQPPqTJrF
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\ioaNBIFVnbYskp4.wav

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\ioaNBIFVnbYskp4.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	92.61 KB
MD5	43f12b3064f3adb6db33e90b5d77a0d8
SHA1	793762033555684d8cec56a02c9f3a62ca607bfe
SHA256	575ceed428780fe1fba2102b559573c8f598fc08eae7dcc113d522ce2f60b1eb
SSDeep	1536:r2BKcpdyMNetMKB8AJrI4bmewTj1ZX4RvHg+UvRErWOlWScz9RZlimkUwmiW9GDP:rNCDetMKB8izFwX1N+UKrwL7NlwmiWcP
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\0JKj5_ifBaM.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\0JKj5_ifBaM.wav (Modified File)
Mime Type	application/octet-stream
File Size	18.08 KB
MD5	0ccd15954c37f90ada259dee112e35a4
SHA1	5524fbbbf8212e8aafc22c3400424dc94e837e34
SHA256	0f62bd4c32cc1169909e355347ba147093587e882b49eab32a003dafa15477fd
SSDeep	384:bYMfWQ5HjQjtZ3lVBx0MaK87uiZ6hibSjCio/MpK:bnj5DOroMKuiZQjCik
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\3MXWb597R4.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\3MXWb597R4.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	72.34 KB
MD5	b80cd4e316d072fa52fcef3fc8e9024d
SHA1	f47709574997459e2c07a1f772523907d403ff7a
SHA256	5c434eeebbbc3edd32c57e755adbc0205174b78f55492d74fccbce3426e47607
SSDeep	1536:mpd7Mct1ERB0EjGTo9X63oKBtMRqwerFaGvm5OmEQ7/WGaT8qmq:I0RBwoGvBOWrFagm5Z7eLmq
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\BhtHzSyEfD5ggEidkz.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\BhtHzSyEfD5ggEidkz.wav (Modified File)
Mime Type	application/octet-stream
File Size	88.52 KB
MD5	e0082d895711bed42e98a93c69f0a001
SHA1	c7b390444fb88374dc1723058ee34d9bb07a5704
SHA256	0828307e599b697dc65671bbeb78eb8b60d9e998f3da337afa41c2e9e421fc21
SSDeep	1536:zlxN77HWUqu4C34O2khq7KkFpOnIPjxsScQ2c+fB9qsxnbuVMCtIAz9+QW97l:zlz772Uqu4/O2EYKk78eGScQk/bxnKVu
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\fJIkxuPkzHAaTw7Bvg2.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\fJIkxuPkzHAaTw7Bvg2.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	86.86 KB
MD5	82e3e5a7b9a0bfc8fc08ed50ce9252c4
SHA1	ffdf04063664bfb2a938994c1a7ff0540f09136d
SHA256	05265eae12e35f186c5605e5fc86b9496d873b8a2d28ec5b4b4e4ac83de3042d
SSDeep	1536:Keg+dF0DI0eu4AY98HGTEwGMKMeBSOube31SQkBgv55Aq7M8cE:KGj01trY98C6n5BSlelSQNvXAqlcE
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\ut8OaMa5zK99bj4EvRQ.csv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\ut8OaMa5zK99bj4EvRQ.csv (Modified File)
Mime Type	application/octet-stream
File Size	64.15 KB
MD5	1744cede2f7de4d9d78c67dd27877627
SHA1	8b3ebed0ddbaf0b01909f79888aa99fffe1c4e68
SHA256	56c4ae3076d9ceb5f8c7692d8e7162c3f024901e0ea611439aa0f86c28d3d656
SSDeep	1536:b8vxbh0rfVtd5DB5l4TdiIgsEfYat8vAymPlJ:by6z/50dtEfYaXhH
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\lwEeZe6NJKctwuGef3c.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\lwEeZe6NJKctwuGef3c.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	24.59 KB
MD5	e679bb0571dda6129b0323ed787d3547
SHA1	4a4325e2aa888b3a5f31f36c036870a83e9c9556
SHA256	5077617b8b20c8882bccab4a485dbe681e02301882681d12bc88410f77f9be34
SSDeep	768:4/0L+B9XklCL9pWeNkwoo0wsTUYnGnzBmPyB:4ML+S89pWeNk3wQUYnGnD
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\rWrYpfOfe9_Zr8omah.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\rWrYpfOfe9_Zr8omah.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	19.22 KB
MD5	5316b8f44ae65993293928022f806cfc
SHA1	c3d3c6bffb72bd200d3e13d33ab87d9143cd074a
SHA256	1657e03a359f74c2b8a22a0fe9f86cff1962e7e1e7c94baffd299767e5ea0d63
SSDeep	384:P0wICnA1h9Dj5qIaX+0tIvEdWvbDfLS3mBM+ED+ZRaKxLzQ+pK:eCnKTsJO0tIvEQvbrL2DD+ZRvxE
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\Wv1ct5mSPlb.wav

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\Wv1ct5mSPlb.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	51.72 KB
MD5	6ace6fb400ed4c3588b102aa46fae038
SHA1	b4263b6867ab76ad38d895fa048b72c9b45878a7
SHA256	2f426a3c91c6d10931ca8a7923d8fc6fafce8fc01fcfffc37b583a6dbc83a59b
SSDeep	1536:Cq1HiheCXGg9lQDT5Qb3tF46GIkuusEV7W:3lC2gfQn5QbTeFx7W
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\W-oOtVbhE3qMz.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\W-oOtVbhE3qMz.wav (Modified File)
Mime Type	application/octet-stream
File Size	4.99 KB
MD5	bf495245022ea2e31d3636056b1741e6
SHA1	aaafccab91c8ffd46573079bbfb374cc37741a48
SHA256	b29827fe6fcd601239095482d429234b012dd10ef380a8dee061cc6e1fc215f2
SSDeep	96:xHLnjFGbad0/h81qFtPJEa5OEiYLJAg0YB6oyIhMtIrSyab1gbJf+I0fS+WD:fGbadaQQAEiQJl01oyIhaIrSy4OZspWD
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\yvlM_ciBT0jsrUW.pptx.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\yvlM_ciBT0jsrUW.pptx (Modified File)
Mime Type	application/octet-stream
File Size	12.82 KB
MD5	4b3bb64f477a305d99f04584620519fa
SHA1	32665cc95c10fa7c664c4a4db89423030961b55a
SHA256	6246081641d64df40b0bd5506b1cb0f9e5220afebd09ef6b40cd29ba72080c86
SSDeep	192:Rsuk60nee7JIrtH4czjFxqAF4BxGZZFVR/vAhfFK4vaA39CmX8LNkhYTlhoYsE4a:RXoWScmW4mZJ0fDv/3mhpKYn4RpK
ImpHash	-

\\?\C:\Users\FD1HVy\Music\VO0C5WvUIA8AyL.m4a.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\VO0C5WvUIA8AyL.m4a (Modified File)
Mime Type	application/octet-stream
File Size	51.35 KB
MD5	f9a53f915eb89f3455766f35370c8a44
SHA1	3b28f1a27dd2bf4c522686784cfc0aa92dd76c4c
SHA256	464801caf5d1f4adb277d680e5186a7aefa81f0f7cadf5780ef7d192953a34fe
SSDeep	1536:Aup2WFCnVLANbsZ6mA4l3P3hUnL20eAXZox:AlVLAbsZ6mAw3yL20ewZox
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\7k19qHZKQ\v24aCFd5CzBX.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\7k19qHZKQ\v24aCFd5CzBX.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	52.21 KB
MD5	38bfd6b591c0663dfcc8698dc3409b18
SHA1	7ce61e9c651f155b774ef1fa80748f11a4e3f92c
SHA256	60f25a2869542b37f81bd20f1df6d8a650627ac4aaa3bd503290814d1b3754c3
SSDeep	768:lJ0biPieMzsYL+AXb8p81+C3HwnueIzTUN141oAfSQk0o2nGTHS1S3RI9aOX:lubHhRNb+8/He+4P41oc1kSgybDX
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\Ftx5O-lqQUv4Qc8fXk.mp3

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\Ftx5O-lqQUv4Qc8fXk.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	98.88 KB
MD5	b484600f63b02b5fe76f8d0f17779346
SHA1	f40f32a0c01293ac140568cf93d7dee965f346e4
SHA256	b414e7ae62801f8ab2017e0986cef029edc5c8530ba736f25f2c7012bd09e413
SSDeep	1536:ZsLZIAWQhxWLS1FQ8w1mB4vlGDPukNjALUEQoyDiAaNHaGLHT/yucDZqAB3Gsgbe:ZsuhnL6C0TGNgERyDiJau/H4qa3MiuuP
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\JKFgwNnPDq3IzeypAX.wav

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\JKFgwNnPDq3IzeypAX.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	72.70 KB
MD5	979c74b50a163eec639b47d5c1dc6863
SHA1	2eb38d69eb12daf1d132a4396120e77e85e38dbe
SHA256	e7a30faab0397d9a2f9b026edd8f3335afc3d81bf02e772ea157b05a4ac66a1a
SSDeep	1536:hGAp16g+C3r1Fs/7DnBrrrMgxOG4JMXGyb0ZjUP7lL7/75NrDc6I3x:hGAKg+Y7knZXj94JMvSgH/lNrAj
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\7k19qHZKQ\UMILH6.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\7k19qHZKQ\UMILH6.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	19.72 KB
MD5	d81dd4d19662a4683eec0e90e8754b3e
SHA1	7e15782b250d734d96199b62d8a88f0318be7ed3
SHA256	e205c1e312103469208130d3c2970e389973b85527f93f67be564404e9223b01
SSDeep	384:P0OZtWpzzurCUBlb25ak/54WiPbfd1zpVU0CRIOhweWSJhpXhosWpEyrpK:lQzz8CIU5/o7zpVU0HOhHLQpDM
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\hnSSITWu7H4.odt.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\hnSSITWu7H4.odt (Modified File)
Mime Type	application/octet-stream
File Size	32.20 KB
MD5	5490f5d43c3dc40d34054bca38e27a08
SHA1	0f7bb43c32cd8306f44e9a3c2a0704f68b7e0663
SHA256	f725ac7ad0d3cf1f850ee40fcbe7c366cdbe0c3b39ed69a6362c062933411094
SSDeep	768:PQ2uTP8s1fFU6Zy1ztagLhbOfbaf/bj5yxwyoAcnjrE1auhGnK:5uTP8sFFUIyqgL8fbaf/ZGLzIuhGnK
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\NXIDve2FMxUql9.wav.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\NXIDve2FMxUql9.wav (Modified File)
Mime Type	application/octet-stream
File Size	64.49 KB
MD5	950efb8d3a2566ad38142715e6fa7119
SHA1	63f6fd35fca4799465b3712565cc6eb98f4b0719
SHA256	08a2cd82a1b62e0b4b856e44630d0f316c98b0c0cded7c4a3ec109602b9913e2
SSDeep	1536:w0qAkL8mP9dl0HjplbV1BHPdjrpn1jubhr9dGz:59kL86/CHtlbV1BbnJivdy
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\7ln6G64dp6.gif

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\7ln6G64dp6.gif.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	71.60 KB
MD5	caf8b6f53cefa4eb3434c3f88c5d25e0
SHA1	1319ced1950fdecc1449ce9981fa42dda9f93051
SHA256	9db29e609f8969610e8fb90ee913c283aafc86eb97ee35cea984d2816cc3e0c3
SSDeep	1536:av08HKcP3IJ2v3DsD0a+BMst8GmX/Um9YAYkQ0h6rLJslAt:av08HN3IwfYTlstI/r2b0w32lAt
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\6to-Do2T3Y6Ag.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\6to-Do2T3Y6Ag.jpg (Modified File)
Mime Type	application/octet-stream
File Size	35.13 KB
MD5	36b3fb3ecac306771469ce814a195833
SHA1	a60e2355530dc39e2de440e176e7dede565109c7
SHA256	6ca4c9c0f23fb8215a61f818e9eef1a25a5a152c715b3b37fdd334f46dd5194c
SSDeep	768:oIgn/FCIagiqLOGjaUWYu7SxMTU1DB3+IUso9mWxRvu:0n/sZnyOGjpWJoMo1Dt+codw
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\toS-EwE0vCCwoskwD1\HN-OE9UFOJ0.mp3.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\toS-EwE0vCCwoskwD1\HN-OE9UFOJ0.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	78.12 KB
MD5	974bf6901332bfee69a009654a39227b
SHA1	92965953493158f8f8bfb842912c3d3a1df6a366
SHA256	cd749e6c70f7b9e784c3930d1588a627099a7c6765ac6b1aea135a8f5b59cab3
SSDeep	1536:8eSuYg2VVJtPwrbc/U4m2ki9ZG3SMzsd1SoBlK1Er6hPHrVEr:8eSuYdVJtPwktm2mgr5BM1EOxCr
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\ai_VKHzC7Sqq7BSY5RS0.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\ai_VKHzC7Sqq7BSY5RS0.jpg (Modified File)
Mime Type	application/octet-stream
File Size	19.10 KB
MD5	6d5519becfaea915d865d70c8767ab89
SHA1	e33f9eb4e1a3f9b8a7dabf3741a09279864a8c71
SHA256	e1a36d2e8ac093d46a0eea8c848ecc6307f888a6dc32e5150f4281a5ed34f0e7
SSDeep	384:lveGKIpzYg1elbVIsny2kQ+E03a+UbkprUDYUV538q8pK:lveGKIHURny203a+UmU0UDNn
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\dF_BgEryZj.gif.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\dF_BgEryZj.gif (Modified File)
Mime Type	application/octet-stream
File Size	68.28 KB
MD5	f743a771cabe325377965c32215dd48d
SHA1	64b2cebc3aad94d6004a99e6277bf840a87ae3e4
SHA256	e94026d8f97d0f6a5b1414dbfd06ab31b1d212c2b25577962c9ccde18dacc7c5
SSDeep	1536:ygT3QYXFflo/82+zuzgQIrGFN9RoGfx59kwSf9bA:5T3xVw82eusQIrcfxgbA
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\F1oeE.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\F1oeE.png (Modified File)
Mime Type	application/octet-stream
File Size	7.83 KB
MD5	b3d1da3ebde4a391879e6e1558234122
SHA1	9422325855bed44bef78f8858acf4d9fa25a02c3
SHA256	2aebff95f38bd81643979ec0ac8d6da2f10e448973a7ae0944e53737ae4aa8e1
SSDeep	192:7IzKBurmFc7weyoO8N8yNTus0Tuc91updIspWD:7FJyzN8yVA91updHpK
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\3w6B72hITb.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\3w6B72hITb.png (Modified File)
Mime Type	application/octet-stream
File Size	56.09 KB
MD5	203d71be24188076e25f85c57294c1b6
SHA1	ebacd7819882ea4067cc6aca3c4ad309de635860
SHA256	f80414bc51aa59c6701abc95a7ee629466e0d5721403ff0e8b931ebf0a2f74d7
SSDeep	1536:NrKSq0Gx+kqQbGxcrdhI0unmBaokWS5xFOBwZEq1:MSqb+FxcrdunM65xFnF
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\0 jXVleh5y.bmp

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\0 jXVleh5y.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	52.17 KB
MD5	2b377e29f4164d345ebf33c9e462134d
SHA1	716479fe32dffa6df752b8c10b499e298943edc7
SHA256	d4e6191c19db36a30df3381fe923d729e20579ac40993054392340e35a71386d
SSDeep	1536:iDcd3tPHAixaIBaItnEyMF3N+11vpZKaNktjpMo:9PvAW55Eyw3N8xpZpmtNMo
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\iRuE37I4VoTmYoZQwpA.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\iRuE37I4VoTmYoZQwpA.png (Modified File)
Mime Type	application/octet-stream
File Size	99.83 KB
MD5	9b081c22298e14a0a4d61b70a8f8988d
SHA1	8185a89ac94b6a195be80f460668162fe4f877bd
SHA256	122f42246a0d92b451a3c18fbb7e767842565323ac7aa48a2ebf6720438374e7
SSDeep	1536:jA4PMdxX1EQpfy0uWQyAZfNVSADdLZpPDf9bkPcNFYXHBh+m:j9MdxX1ESy0VQDZfNrflAPAFoHBhd
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\Kiw0vwA10s0.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\Kiw0vwA10s0.png (Modified File)
Mime Type	application/octet-stream
File Size	71.82 KB
MD5	98882bfe3da662b9d8ec2c8fdec2efb4
SHA1	99e48e2e8cc28e6bb8158c5b99e68179b31e24bb
SHA256	2cc70f1f47fb34f99f60958e70949e5a9989379ebebd9172ac11990cecf86de3
SSDeep	1536:q12DlOhTNVDiHVXMSfqJGn2v3PTEFqCkE1MxYMtgqr4ivLueE:pIREHVMQuGsfTcXsgqr4ivLm
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\O7DPIcWP9p.jpg

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\O7DPIcWP9p.jpg.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	83.77 KB
MD5	21f2d184ab9ac4ba2ac9bf9f5d34ec12
SHA1	f834ac1eaab23a2be8e6a0f15902b1c6c3a6054b
SHA256	ff7eb435f292e834fbd1b0850e8763bf2627ba4fec6c582c950ffda8bde96396
SSDeep	1536:QUq/Thct6pacdCRFgQEeXksveF001Xa4WYY5QRCKEuWc4TgEuHYr:QNThw6g7JXkseJu6FR4sHYr
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\qC_RZrVpYkb.bmp.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\qC_RZrVpYkb.bmp (Modified File)
Mime Type	application/octet-stream
File Size	78.14 KB
MD5	64c60aec2c5b70edb211fccafd3b55b1
SHA1	35c677250d1f3f0c74871b55d0a4c5b7c47b7737
SHA256	81f69f6d044abed2acd3c7f07c05da866612f907c18004af347e855d72623312
SSDeep	1536:QMv0tH3B3UA8oMi/zwxkBun/NrwFxUttxM5m59eA3LaWpTHkCVC+sH:HcJ3B3XMuMkU/9wFx2vMQ9THWH
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\QQo9Vv.bmp.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\QQo9Vv.bmp (Modified File)
Mime Type	application/octet-stream
File Size	87.35 KB
MD5	cff993a59ab07d89f764c8c4c2f4ece5
SHA1	a1907f12274b71df4d211d7d0416e5708f0bac9b
SHA256	f5ffc3604479db8b69935f443c2c8fa552fe1f95d17b2644cfb60a8840242e07
SSDeep	1536:DDQS2wImNLf0AwDeFRvtqkMeZlyt52jIrS7h7q58/8qET0FNxJPbm1/wE:YSv9vw3eyt5HsQ5Y8Zkdcd
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\wAVErpzAz.png.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\wAVErpzAz.png (Modified File)
Mime Type	application/octet-stream
File Size	97.82 KB
MD5	d0fde85d2fee0acfb4f09ac659e71a11
SHA1	acaed2a624634ed1254b5098c57299744bf2c910
SHA256	8cb4498db99902a7cd431cbfbfde4f3fd6aaf5c4b82f561895f4c1a213d9744c
SSDeep	1536:VQZ9/l4m8L/PI612gLQD9o3VEs31KVXtSIhDkRfOBYDZkZKYJsTtCYPrTlR:VQOhLv12gLCbsEA2MWxZfJsBCYPrTlR
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\xYVA6nzw2.bmp

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\xYVA6nzw2.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	95.38 KB
MD5	a35b107944ce26dc20da9fa5719acb95
SHA1	ee43d8117cce3075ec15a10c970d2bb2d4313c0d
SHA256	9851beb97943f40f0686f551b92c54d089762b60eb879447796d221d24f8bbd5
SSDeep	1536:7WGXqb+QUUTAw+ahqOoUYdhpwQa2cX0DmB2PJ+ubSXDyWCFQp7yTF32Ef6VK0J/h:79Xqb+Q6YqOoUYxwQa25C0Pcu7WC6p77
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\msDAnVl Vs INrTL.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\msDAnVl Vs INrTL.jpg (Modified File)
Mime Type	application/octet-stream
File Size	47.75 KB
MD5	0841fa7833be97e341e96e8295877f86
SHA1	1e1ac4c1056083385d0ae4c144682ad6735dc100
SHA256	0447232e1d30e79c5d9febbc053fe3926d3c055e6fa3beb88d646ffa95ef5331
SSDeep	768:yNXSCFNCa9v19IbTphikmmXUyPOKdJxTAyOv/TuwX0aOk+T9+MH21NBS7lawKDKE:yNXSCfCw19opmUUGdJd0nTuwI0hNBrBL
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\oOTvWfHAVr.png

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\oOTvWfHAVr.png.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	98.89 KB
MD5	bd81b81aa526ce21e18fccc719c09ddb
SHA1	1d1a94e67ebfbdfc3155f7516e8d2b8170e4d685
SHA256	e1b391209944aea6a237fb058a27d0f4ce76ceba3502e27b7c051bd966eaea71
SSDeep	1536:3fONFEn9SAnDxtUvkH4XS/Ug7vcOhunRVp+uW3/7B1DJ0oyDz4kXcQ/PDUBttuN:3f1wAntWsH4XS82YER/N1FjyP4a9/
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\wI6_mSLtm0QHgo.gif

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\wI6_mSLtm0QHgo.gif.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	97.07 KB
MD5	527441bf47b6e65614d0d16913e83bfe
SHA1	a127ec8f6e8d3b047224f2b05c28189e7c7553a9
SHA256	0c36767b2e541bb7bfd322a5d3607be79914f454ee654b039e2dbae257f13051
SSDeep	1536:jueejLhylU2p+zNdaJcTHtbgPHRXYQIBTvtf/KapdqXjIJkRBrN1PU+1P//Xq17:jTeP3IsNmwH5axXB4TVXneXUJkLv9FG
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\x7M0JVNEgkR8AAFTEXtY.jpg.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\x7M0JVNEgkR8AAFTEXtY.jpg (Modified File)
Mime Type	application/octet-stream
File Size	62.49 KB
MD5	413a4222702530fb897aaf2383dc3cf2
SHA1	df06bc3700c35b1030079c265fef06d7d070e09f
SHA256	31a82e4e5c9a5d3804973b4b3dae679ee8a092ada87d7505c2039f112d30e869
SSDeep	1536:zg6MS7k1WD6Sd66REHgj4KS4FJqR1h5uWkQ28CNDZaEwJjFKLLw:fMS78YnaHgj4LloCCdvSjms
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\cDQNx.mp4

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\cDQNx.mp4.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	33.31 KB
MD5	4f9901f86c5712d4cb95ab8d9df77c30
SHA1	85f88a895012cd9c7ea92ef8479349268ebe053c
SHA256	d5e9508fd7b1295b6e791eca7117dc45e2e758098a4b96417d9b2294b8762281
SSDeep	768:EKypF0e6mTbacOTvXtTai/Bwy2Xa6QgceskVMkfVryv6+EEp:DEFPTbanXtT//2vfQgbskVf9V+p
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\6HAlI.avi

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\6HAlI.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	12.71 KB
MD5	bedcfb3902c7a5e96b7120a033d8e9c3
SHA1	2339ab3e70e69612286fe7102c931926d2cf1282
SHA256	640a546a33d10152f2300597698a5e348aaf51f4454d4dcb2bbeb76df81b84ee
SSDeep	384:QHhY+f0U4l+SG+6overqXa988FpHeDq1YK5iTBXpK:QHhYE1AG+6oQqXa9hFUq1Yp2
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\8aR-oZ.mp4

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\8aR-oZ.mp4.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	97.88 KB
MD5	db655f4de009e62c0a2652844353959f
SHA1	621b8c2f1ca79f6d0898e333684b883412a19816
SHA256	fd215828d7187392fd993874b277ec13b02b680d1584e6fb23be48ee9d43c113
SSDeep	1536:HiT2iG+PQ9NQF06SfibawXsVPQ/SE4b2acnZbfo95Bv5N5m6+++0H0UfOBwYyuCP:AGvH7FVPQ/facnZw95/Ncj+HH0rGui
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\e7C5rm59mT0uP_9f.avi.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\e7C5rm59mT0uP_9f.avi (Modified File)
Mime Type	application/octet-stream
File Size	71.00 KB
MD5	99088991ed1541a7270b080339905064
SHA1	db5b7e5609446daafe6beedc8de4b45eafe8ddff
SHA256	384abc7de102a10d3561b0f61c325719bf14398accbfdfc5361a4baa78232f4f
SSDeep	1536:LF8RavyJhyx1z4wzJjWXrLoc4AnjY0Jwnco/D6MhfM:4JJhSDROvnjY0JwnB6MhfM
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\9t0zT_40.mkv

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\9t0zT_40.mkv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	55.22 KB
MD5	c65c93d2049157bfd4b84eebd2da50fa
SHA1	4c5ad3f3ccefdd117e8486f19b491d9c0f8a74d6
SHA256	e86dfa1fa784aceebddd1eb355acf5f4ec308667447330c9cd0826aff9795d6b
SSDeep	1536:qeDcRfR2SVsK52QvSP9OM0BT0v6SZiF6CjNK1FBgI1jWT2tb:vDcXDsRQQYMfv1NANYF116Wb
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\JifxRs4kGA26s8ZB.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\JifxRs4kGA26s8ZB.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	19.16 KB
MD5	cb2793543c5b6c45ebf8181cc853a1b8
SHA1	f2280aa0c09e1be6cee96ac8e3dae6f30ffaf15b
SHA256	5f4fd2d459c218b945398e2c21564235995c32065bbb1fce7bd99f89fb1fd79e
SSDeep	384:aiHOBkM8McktjZk+RTxhYuwTis8yW0rKkWU9Z+oSjJ6hy8pK:aiAkMVtjZk+Rn3w2s8yWSKkRmZn
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\smX5XObO64h XQO8UV.avi

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\smX5XObO64h XQO8UV.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	57.83 KB
MD5	35cac12877119f7e8263dc8a10e0d01d
SHA1	a455f2892698efb626b31df58594b7d8b14adc1e
SHA256	a863cebcad4c795e34b50d845fc72afcc0f4b1bd864be6d64c7620d9b6416d02
SSDeep	1536:c/661B/hVziLOnrOCoQtuFPb26//yo/Ut:c/6613Vf3yPfCo/Ut
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\fR4 C.mp4

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\fR4 C.mp4.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	55.49 KB
MD5	e929ece61f2b9076198d2b345323106f
SHA1	6c35d49afd8aa9f3eecc27e90512de3f595a8a3e
SHA256	bbf75a907ccfb99ecf5d4c05c949010e48219700b305d5355450d24c77aa1845
SSDeep	1536:A4JBjlVqijj+rot32fiY61MfiOZDCkmVifKcRn:ASBB4/rot32V61oiHkHRn
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\iGBmnx.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\iGBmnx.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	12.88 KB
MD5	631eb0cf0e2e0a1da928752864ce5e71
SHA1	18ea016ae495ec6cdb27cf0bdff08a751f6f228d
SHA256	781936e48bc22c7c4d16bab374185f43fe8a823c0ccdf5eb3944bb48d42649e6
SSDeep	384:KXRYR5KtJMj34roZHAMKoLisjdRv/GrEpK:aRYRUt+r4qZk8RC
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\MTVtI3u5U.mkv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\MTVtI3u5U.mkv (Modified File)
Mime Type	application/octet-stream
File Size	51.47 KB
MD5	331c332dcaceff0fb91c2750ba101cf5
SHA1	95065f581c4c551065e5f8c63aeb694fd03641da
SHA256	8eb9e4f28defe2433760b47a102e44ca92dd881acac5a3623e6ed3adf614ccd3
SSDeep	768:uZ0tqBFR4UGVmaFA8SGkMgGguJFo3MqUKnC/YHypcPjfhIp6Q/w5GYYf+yrcJO1c:Ymy4ZVVdlkMgGZJ6wxYSaTG3Yo1YV
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\mZX-jxKKh.mkv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\mZX-jxKKh.mkv (Modified File)
Mime Type	application/octet-stream
File Size	13.94 KB
MD5	3ce89531fe584b51a0341b1a5bf0c86d
SHA1	e6649b0f95494e453b84df53ccbebc291dcd982e
SHA256	e8530f31deaf7fcc6e694cf0b82b7790c480c42dacf024fd864e71bf7b24d781
SSDeep	384:EfZQMetXKY0CEUPhcnLkKYyU3mO7p7Z3uMzpK:EfKMIKRLk9y9YpZeB
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\Z2p1JCW7G9Pu\w7jO4I_4r ubq7OFIn.flv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\Z2p1JCW7G9Pu\w7jO4I_4r ubq7OFIn.flv (Modified File)
Mime Type	application/octet-stream
File Size	43.55 KB
MD5	cc215e102c900c9b62bce6209158a26f
SHA1	784033b294db6553e2c98688d6afe0b82d3b4b18
SHA256	5689f430a8a0d0c034579eae0b98299e91f4c5a98c1d94f750b19dd952870b1e
SSDeep	768:emulaUFTth/iYYV2jo5bktrhNRelOSFKvvFn+BJjiSItBRq6s71B0Nf/0f+OCC3e:jCRRthiLOo5krhKU/sBQSc2wN30NzaM6
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\ZXAEqbOqqWast AZ98L.flv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\ZXAEqbOqqWast AZ98L.flv (Modified File)
Mime Type	application/octet-stream
File Size	34.05 KB
MD5	6577577dfe8cccb248dd7496a9445b16
SHA1	0b6f5e5b656734011c269e418dc3f17bdc1ef560
SHA256	49f459bc520d7272bc1dd082d802a474d62d4aa6d46e28e92d27678be7912b70
SSDeep	768:MMMJwM3UYDi36bKUa6ufD+7fdvx5x68E5p:MRVBDGq1x5MVp
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\OoNzmd4unsBSLKUjo7.avi.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\OoNzmd4unsBSLKUjo7.avi (Modified File)
Mime Type	application/octet-stream
File Size	34.10 KB
MD5	e7e2bb2c8811280669698ecb9bcf0f49
SHA1	a1fffc5e2bfab1938fcda7873b0cbd9c934aa5be
SHA256	c84964fdc7b9855b30ee47b15522cff0cce5a1427099a525e8e7112644f5cd11
SSDeep	768:C+a8sz/RpduC4sq6nLeE7hyAvhrZmK9UKt1nF:X7swNR6nL37hpvhrVhF
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\t8NhEX.mkv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\t8NhEX.mkv (Modified File)
Mime Type	application/octet-stream
File Size	62.04 KB
MD5	d2c14f7c9757e3dc74b4eece6ec063a7
SHA1	3f0f90d8f8dc78ec83cd12957a17b84d4eb15b02
SHA256	99e809c3d9d344ba69c8614d04969e1e3393f6df1c96d24babb1d108cdc47441
SSDeep	768:sNTn4jpvQ1pi/zdRjk+xCffdT/fDNtQDlbgPRqyYuAJIMLiwAmj2PtjLt87nc168:sytYf0LuBfLgbIRrgDmtXuZM3SO
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\VzUBwEA5P.avi

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\VzUBwEA5P.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	27.90 KB
MD5	6857335ec77df6aceb4f86575b5a46b8
SHA1	f0346fbc86d151362c6130fbe358de3426e7d2ba
SHA256	f2a04de496aa0218b64e30bdeacaefc947ac66075b39c858a3ebfce93ef6690d
SSDeep	768:eomw6jHZuE1NfANJaVWH5N3xAesTmt4l9o/:eoB6jHQo+TaIH5lxATTmt4lo
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\WlTa\2oN gpnuW1JXd5I9rz.swf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\WlTa\2oN gpnuW1JXd5I9rz.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	17.53 KB
MD5	f07ac4ff7602764d44248e89498d081d
SHA1	dd83f7224c200f896824e21681defa604b5547ad
SHA256	d5b7b35df69d13bc0135bd889e759fc0430eceb5c0ab4fedc962b8c00bb0c9a2
SSDeep	384:XQ2rfXI1gLes8vgu6dMqqBsOmLk70vBfWzf5UuW8Uzzx6pK:g2lWgHdMhKk7F5hIH
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\WlTa\d0y3irQ9gxE8.flv.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\WlTa\d0y3irQ9gxE8.flv (Modified File)
Mime Type	application/octet-stream
File Size	66.26 KB
MD5	9bd5441c099e3479b3f2fc6b58e859da
SHA1	f923295077ef2a834e7554e454fff5466fb5e0d8
SHA256	4a7583794061dc3d8ff3b3cc6a092b55d5fff67cb55fcac15e4945a3ac0b05e9
SSDeep	1536:eL8H05FtGs3iOhaHDCos+ETeAuBGOvmGd6SUVl/xTjTsOAwH6qC0cs:e4H05FtGsy1Ej66jIKH675s
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\WlTa\r47Nb711Z06w9.mp4

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\WlTa\r47Nb711Z06w9.mp4.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	37.45 KB
MD5	f01fae7a4a6b346d97cf56760f5be184
SHA1	6d8185cf7d4a2d07463e3f372e2df95386b3bdea
SHA256	3850c577797b9620533dc61c4e7c810d9dbf4376855f52bb5b56f494b79cfc6e
SSDeep	768:KBaLy10IIqr48E2IR20B4iY10TKPdOvdON/B56qApXH6SyXbe:/23c5R2e45zdUAL56q+mX6
ImpHash	-

\\?\C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.txd0t

Dropped File

Stream

Unknown

»

Also Known As	\\?\C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log (Modified File)
Mime Type	application/octet-stream
File Size	552 Bytes
MD5	3ce5de18c8793cded7cc3c56f90f5eb0
SHA1	f4993679cb6e24db365330bbdc29d1d91284a21b
SHA256	4e36c0890a4e13239f81ab4c373c80df9f5db631188acd6155a54c2155f631f2
SSDeep	12:3lRZlUp3F2JrBjAoP9sUqL571ytluf8dC/EH+1wQH3nfh+nFRn:3ly3F2sLjyXp4/Ee1wa3nfhMR
ImpHash	-

\\?\C:\$GetCurrent\SafeOS\GetCurrentRollback.ini

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	668 Bytes
MD5	fd529244f7a10965455d1a4acaddc9e3
SHA1	a2ab0052830a2667670fb50afd2bdf592164b862
SHA256	95a798d3ff5e1621b510a8079f4c4be0357f407cf2a669741b5ab550af96af5d
SSDeep	12:tM/ywKuKZc7Kz3UYLlUp3F2JrBjAoP9sUqL571ytluf8dC/EH+1wQH3nfh+nFRn:tM/ywKuoc7KbdC3F2sLjyXp4/Ee1wa34
ImpHash	-

\\?\C:\588bce7c90097ed212\1025\eula.rtf

Modified File

Stream

Unknown

»

Also Known As	\\?\C:\588bce7c90097ed212\1025\eula.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	7.89 KB
MD5	7a509562990e0bcc9e036f7fc0ba6fa1
SHA1	e6cd533839c8b1d2e76b194d4586c99fe5ef3f07
SHA256	8a339f3e8c8b93c298f09fa77f50ede76cdba501277237735ded705959cac586
SSDeep	192:CCx7KivTr8q9vQtxi4hWMymyrJtmCNbzvMeL7lyR:C27frr88vQ3VodzVJLhE
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\!TXDOT_READ_ME!.txt

Dropped File

Text

Unknown

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\$GetCurrent\SafeOS\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\Outlook Files\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\WlTa\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\toS-EwE0vCCwoskwD1\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Pictures\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\588bce7c90097ed212\1025\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\AppData\Roaming\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\AppData\Local\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\7k19qHZKQ\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\Z2p1JCW7G9Pu\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\JI_ROcYP5iaMyIhA11bQ\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Desktop\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\$GetCurrent\Logs\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\588bce7c90097ed212\1028\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\!TXDOT_READ_ME!.txt (Dropped File) \\?\C:\Users\FD1HVy\Desktop\T2UrA\!TXDOT_READ_ME!.txt (Dropped File)
Mime Type	text/plain
File Size	1.99 KB
MD5	4f8cc0ec3b5be13683db70ad25e526a1
SHA1	8b9259e90096d3db005dc62f6dfa98d6f3866b30
SHA256	4fadb9b629e3d1c290aef74c69e172abf9184d2bd5568ad4e3612370d6235563
SSDeep	48:2W1T6hwbXK8YfATNrq1P9okcgcizYD8rjSv:2W13OfAT41+97iBrjo
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Local\Resmon.ResmonCfg.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Local\Resmon.ResmonCfg (Modified File)
Mime Type	application/octet-stream
File Size	7.93 KB
MD5	3b507a5389683f3c95a0fd42d6cd7fb4
SHA1	129613bfe854a3df056b2613fde1eab9438533a8
SHA256	b18b405a4373b1fabb82f54ecba54902f7bf0f75c613ba335a4f908e98144f25
SSDeep	192:2t10lE1dC993NvSv1n64FdGXK8TorreiEbNq6qfZgGSewArrsFr5tL9pspWD:20OTIhSv1n6aG68ToveiEpdoZg7ew3r7
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\aNTcu_iQUI-LLKOyho.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\aNTcu_iQUI-LLKOyho.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	79.01 KB
MD5	5d36a5da45a1c38cee1ac6e4fc455fac
SHA1	091d79ac2fb74e65ac7846a28e9915a7e96231bf
SHA256	19870a7b84e69f561f784d8140c5b269aa49b6d7b883d52ddbabd3081b5e58a2
SSDeep	1536:A8vVJdSSxUhnS6kI5/dOryoJCFeSgotBARffvu3FwH6GL3LGG4G9:A8vVPUhS6v5lI4FHs3vutCH
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\c39tCHh.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\c39tCHh.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	63.31 KB
MD5	c665dfb185cae4cfff7f95b3d9d5d449
SHA1	e7c6f6f0a720bf3e2715d00606db67620fef7c1f
SHA256	d6eb51282e6a0a0078fe7ec0e71ff7630c5d1eb4694cb98d7612b803d515c1a2
SSDeep	1536:ytuNqyvSPWYcQajccjWWSonk78+34tEcJhoWwz3G+IDJ0:yw+9MjccqWLn68+34tEcwWw61t0
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\cv28-Ixq4k3KD.mkv

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\cv28-Ixq4k3KD.mkv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	85.01 KB
MD5	402df8ee6be684cd13c93e9f07afcbfc
SHA1	f32f95d7993fb71a8469d2ea04316e70c6077119
SHA256	5d9d9989b2c295b723a1b338eea6acff128585847ae764822c23e57350280aca
SSDeep	1536:36gqJJA22lyIAlct/qeZBI+JB2yvDWkU633GUy47HnaHbq0Iwnou:36guAJcHlc8eM+JkwU6nGh4C+0Iaou
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\D3INp6Ei.xlsx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\D3INp6Ei.xlsx (Modified File)
Mime Type	application/octet-stream
File Size	73.78 KB
MD5	89631096fe1eb0b17165a11ddd1c2168
SHA1	000773238cc9ba11bfd536ab1242dabb3c133820
SHA256	b1675af709e48d97b9abb1011dd75e500eef604c689d86a89b26d8ba485a2b2b
SSDeep	1536:jB1Hgdd338J5c8cz6f6oZUjzYH8Enjwor8tXTjL/eEz0cGvuQntf:jBazHuqzwHZU3YcEnse8YO0RmKh
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\ET9_8drX4.bmp.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\ET9_8drX4.bmp (Modified File)
Mime Type	application/octet-stream
File Size	88.34 KB
MD5	622f374fda72b9fec5ac31d4b57657a4
SHA1	9f6815a6c16bc4d96e09cea9d1f6b330f61b7e3c
SHA256	c0153e727dd51f082627f7f7bc891736da0e83bab64b65878d449375da0086b1
SSDeep	1536:t3N5nlNVR/9u78+Q6/IJ1Xu7qHiJnLeucJJd41suWQZVFVDCJOzk/kEudeQQaemE:t3DnVR2cJ1XRiJnUpEnVDCJ2RJpePN
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\mFz6aNQKv94_Rr.mkv.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\mFz6aNQKv94_Rr.mkv (Modified File)
Mime Type	application/octet-stream
File Size	88.09 KB
MD5	41ceabf8e69e85206dd26f0787f6c3b6
SHA1	7a78462dec1429008f4d2223af2a57f446531576
SHA256	c24409c6eb315f46239a71c035c203078ce2ab4722ea5f9a89ea2f1dba526d3f
SSDeep	1536:z2Qv0R9Jae1UYDZF4bN8+t4ZWqugzSraZRxsBbr1ftOFCvmFPCjl7gYJR9RYQvO:yQ83t1v4bN8+t4Mh4ebr1ftECvmsj5ZW
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\PDHYzrp.wav.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\PDHYzrp.wav (Modified File)
Mime Type	application/octet-stream
File Size	58.86 KB
MD5	6a4d323ebab89519396064e51bcdd41b
SHA1	16a5a5ee5c53704e7489088c130cfbec9e5d3086
SHA256	56108eed0b2f28113e4a5ef590814fd6d44d5c7b59a81e7f4ef4c6450355b850
SSDeep	1536:TO6FLqSIcaNYU4tiX9X6/JlpNEvEC5I3inRUYc9mufl8evBo8HC0:CKJTU4tS9KRlpNJ7Ovc9PWUWcC0
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\pMTil.png

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\pMTil.png.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	79.11 KB
MD5	11ea3b4e45a2f00503f296b13e7f8388
SHA1	7ea575aeb7354013197c45dbd3cdca8da926ef35
SHA256	6c1c8f7a5daf890811ee281587ad03ac48fc7fc4a5ee30811f605f5822158f73
SSDeep	1536:FqY2dUf+rAjDiQ68XtEpgeV9Rxww7YEMWFIOG7wXm9FmU3d+kvLT38WKc:FqYqUOAnW8XfeVxwwBFIp77tt+kv/38m
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\sT1K.flv

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\sT1K.flv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	77.80 KB
MD5	14ab087868419cf2892229fee20abdd2
SHA1	37499aefe73f82787096593a163910f4d00ebc31
SHA256	7a4c74cc6a84a9cd5cee0b85ba6f6bfb9c2ed30164fbf056ea00801811c32f9a
SSDeep	1536:qznKnP2OmB3bFq/xyk/G5S1FbAzq+a1iCNl0VWWwEY8zcxoDb0LTPp:qzKnDErFqpBDMz/mibPwEYDo/0p
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\U6XvU G.bmp.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\U6XvU G.bmp (Modified File)
Mime Type	application/octet-stream
File Size	91.99 KB
MD5	14bb117bda44ba9112c70e00bf9c22cb
SHA1	4a0f904c771a88117691c6dec738a4608e83bf6a
SHA256	f7fb4dae3465e78bc13c868b99d461195719c28ca80308e12088a5f32256af80
SSDeep	1536:qtAxSa5DWTjM6eUPm1IEIrOy8U20iuEW3Sy1AiI3WA4vRyYeNzCC1rsUy:Ia5DWqUe6EIb8Z0itSL57v7eNeChHy
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\U9jIHqltNvJBusuu8M.m4a.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\U9jIHqltNvJBusuu8M.m4a (Modified File)
Mime Type	application/octet-stream
File Size	9.04 KB
MD5	565d7db73504d74965764c17eac625a6
SHA1	8db53c6f1cbca993e1eecdc4f4a04c69d8ec3e00
SHA256	f1f7400aeb87e82bad37d6e85b14a0b66d26837796cf1da22468ef783bcb9de6
SSDeep	192:115d7k1PVYOBqrsBv6pDCiwr4W++ykC6wBYxr8uiNOfQIzNsHnspWD:115dk/1p8puzr4WikoY69sj5pK
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\3QaEJDzGG8TQ5z.rtf

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\3QaEJDzGG8TQ5z.rtf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	70.05 KB
MD5	3872508818ca9099bfa1964880915c52
SHA1	ce886b42946b61c2d9116b8eeb5646bd833a29af
SHA256	c6dc8dcf539f42de4c0668f77e8bcdbc4ce48737c904bca067ebcd429ec1cd90
SSDeep	1536:M0k8HMQNoPd5G9EQQxyLlE7/7TXqI9pDOwfbW18ncKZXb7nkd6wt7AT:nAdEEByLlEL6IPDO85ncK57nC6wt7AT
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\wL6CtWVaL-45s.odp.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\wL6CtWVaL-45s.odp (Modified File)
Mime Type	application/octet-stream
File Size	82.78 KB
MD5	ca90abd9348a15b022ce94d27b5464b6
SHA1	d161f3969f752ad19e6f22df1aff437d94d34a6b
SHA256	5a4952fe77d08dc3120533a8f9696eba507443558ff592aaceaebc2e2433c7ac
SSDeep	1536:7KZeIDpkdLwpYuLm9YlTTGWbMfq0jiRLFoGqc+d+gxJDdWxZmyY7i73wIQbEOk3V:22dLwpYN9UTTG/fqJhwJDdJyYO7AIROU
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\XqhhUYjJL0U.rtf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\XqhhUYjJL0U.rtf (Modified File)
Mime Type	application/octet-stream
File Size	35.13 KB
MD5	73a8f13337691d6670d478974cb8f6d7
SHA1	be30a510f648ba1506bcc5c7eccec4765b5a040c
SHA256	809a172c3dac4337c74fdbc4140b83be25349e06375f955aac35237a821b8800
SSDeep	768:TF+1W50yZhZ6yf+gMKRJZFTq3le3Zsxbe4P7U8X7jbh4mk/iyZOWdQyjLjRyy:TFDZTsKR94lVxa4P7UQBF+4Wvyy
ImpHash	-

\\?\C:\Users\FD1HVy\AppData\Roaming\YDXeffFC99vGn.mp3.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\AppData\Roaming\YDXeffFC99vGn.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	70.15 KB
MD5	78d0a14e6c6158bc8f5b2d89b3569f0d
SHA1	2d75f9c708d69ec58ce6180d24baa235192fc44f
SHA256	db16a69fb2805af3a5a65a3da6cffb17e67983a9caeaa8b0266f8ff8be6f043f
SSDeep	1536:8yAK4m6bLkazvN7FlHDWRY6R8Le6P1rqp7F5HCWwxnu7Z2:om6blN7THDt2ZY+p7F5HHi+k
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\8dOKYe-qP.odt

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\8dOKYe-qP.odt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	12.24 KB
MD5	8d81ac41d7c8db865af4f49a51eaa5bc
SHA1	c0bf41026ef6c9b03eeeb142796473d0fb88e59e
SHA256	6e63ec3161cfa94c96305eea279e535cc8ea200772794f36345bbcbba81e37e3
SSDeep	192:L6CgPkMbidZ1jXZgoBYXPovZlbJRIahbc5bQBKHS9GJpJn3vB4FM+Fru6spWD:L6CgPaZ121gn9RIAgi+t3uGLpK
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\BBeZnteC-7.mp3

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\BBeZnteC-7.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	37.13 KB
MD5	58ed65928502b98a8b39bc03e414ae3f
SHA1	9a892005ea2d87fdd1ff2c7a7ccae85fe47b6760
SHA256	04859512897eebd0d46b7a3fc863d473e8f6ea5a000cb8d0321eaa882692240a
SSDeep	768:D7juc3WpXynTuQgLff2gP0U5XE0LLPGh7eMPom9M7ef:Tuc3qX6iFM+XPP07eMgD7A
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\CyLY.bmp

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\CyLY.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	51.34 KB
MD5	fd12bb85163fa165fed89b8c2f74f78a
SHA1	c768ee2d30fe26d5c2f626bd01ffd826c221be04
SHA256	2f6b6d99ec50f1c77e47932e3bdb14f926752e6fcc2d2048064f95539990bd17
SSDeep	1536:J8cW3akj31w1avgNrnrerV6N6SR5mFi69eZtY3DQ97skMgylwxotI9pV:HW3rL2nN3erV6NLmFDmh77ylwuKb
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\GHZr_0qE96Rjj.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\GHZr_0qE96Rjj.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	5.67 KB
MD5	3eaa6a0db75caa3f8cc30b29fbd84b4a
SHA1	8973f9fa4d780367d140c9c538f55998fd530dfa
SHA256	7534d1053f7b849bdef39002593dea816d3c021001806915f881eddbb974f78a
SSDeep	96:HnP/HoqResT8nkD7FdeHbWP8RIaRz+dpxP4d/h1Ona/X34FBzfmDcatOJ+I0fS+K:HP/F7kqy7WPwIOurQtgvzusJspWD
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\jhscRm6vvE.csv

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\jhscRm6vvE.csv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	48.52 KB
MD5	fb451b79726f920c1c0aa801dfd04c94
SHA1	f611bd9093a3718764408bfa4d1454ac763a3f99
SHA256	3ae728fde4f93ab946340ab61639dad548e54a1876f254eb1ca6e5c2b406feaf
SSDeep	1536:PeSoZIxIApDPJzYfuri4UlgqgMD9TBX4X1w:GS+gDxUWWwMDXX4G
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\oIyEk1tbor7X9s.bmp

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\oIyEk1tbor7X9s.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	88.13 KB
MD5	941ffc484d10a86c9ab74f1d6d65e2f4
SHA1	afb65438cce319d47b40c4116ce61b6d027d5965
SHA256	75eb4804e12b7c636266745e3c8f3f9406ea19897c666b511735a13f4773a0c2
SSDeep	1536:HiOvlVrl1NdAxsrkkMAYBWGloYXQY4iYU8ZTSJrpPJgWdGmYB9cAwJYS4qaa:HiuVGxdJdgWYU4SDKpr23x45a
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\OO_s81.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\OO_s81.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	43.74 KB
MD5	1728b22ffbb37f318dc771e22d58e1c8
SHA1	617b5ef494d8859f5dc370d19fb76f372d2a7a08
SHA256	0706afc3d2cda8ddc3cb4c3a2eb58981154ed95e71e8a775f81cfebd611ec339
SSDeep	768:TKQucxydABCDkC9YMdKnC9edmX3lfl7GtU1nyPYQ/qZQTLose8IB5CXJrXjEC:2QumydABUkC3dKnC9egFQtUIgQrTLo6r
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\RnjQ5ZSPpYJwR3B.jpg.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\RnjQ5ZSPpYJwR3B.jpg (Modified File)
Mime Type	application/octet-stream
File Size	92.45 KB
MD5	3ccad766e7ac9a852e264d41b3bc6c06
SHA1	d751f0022a5a8efab17ca993fe2acdf21879029c
SHA256	1ebc56eeaabba9b1b005098b2d99375b72323de80ba2fc1be0479877324238bf
SSDeep	1536:cAY96+ZJTp+amuCQ4dkhOVm7j5s263DKyvM4BjYI3tNwhhOu+ywnbVRA89is:tQh+amuCnuOV092zKGM4eI3H5y+VRNJ
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\3dId0lsBJQweABTLa.bmp.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\3dId0lsBJQweABTLa.bmp (Modified File)
Mime Type	application/octet-stream
File Size	55.43 KB
MD5	786785d5f297a06979cff52ee1b40c17
SHA1	ad0f1d155e20f0cc5936244a0098ea83cc23d1bf
SHA256	019bd3994634b5d94f942827ab6ec96bfd0d486bc6365074ca2994e284d9dd50
SSDeep	1536:iNU4Ttu+OFU6oV9DqWWtSEEQ3gY2wdJFf8g:aUGsoqWjqJFkg
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\R1PzCjuzfThXdK9.ppt

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\R1PzCjuzfThXdK9.ppt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	8.39 KB
MD5	92f780ac7f52d51c9aa3b18e91debc42
SHA1	e600ef78515e960035ca2d1e9a985898bf417a65
SHA256	f9f4ac31bb48ea277043bb3394b528c2d018b411b1651897e6c1484b4bb308c7
SSDeep	192:xGamuPfrsrHKKkTEJBujiCeCFB5th6FVvI6TeIpzDVCQJ+Go3spWD:JmkQrHvGC0WdCF6FVvIkzDVCQbo8pK
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\T2UrA\X24_B.gif

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\T2UrA\X24_B.gif.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	36.82 KB
MD5	809cf584163d723c1b714c2cfdac3ece
SHA1	fc0b609fe35eb9299f6c652a273afab059d2864d
SHA256	7808c847c4366283654f4583c28a25c47c976b790d990aa464d23d0150b1896a
SSDeep	768:pp5WUONKqXf5LCrQaRsk1Z3pg4zL8WzlZoln5NdgnK2At:pQkq5+NRsk1998ClKISt
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\VCbe_Sa0NEidgDcyfgFz.flv.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\VCbe_Sa0NEidgDcyfgFz.flv (Modified File)
Mime Type	application/octet-stream
File Size	94.03 KB
MD5	9e5aa1258718927ee4cfe389436337da
SHA1	12b5d2d51440066b8f3df5485b0cb997379e2611
SHA256	ff333d65a15be9b02d64cbaa27ca2d3e1e54ceb5a93196ea8101ca5ec720c8d3
SSDeep	1536:13rJZP3zaeDnBT3xmmHotUqQNFzC0k6dqU2Jehv2PZuYjPMHitkGRSMpjw2RkNjI:R3zx7JqQNZVvdwoOPZuYjPyzGRlw2UcF
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\Vn Oo.gif.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\Vn Oo.gif (Modified File)
Mime Type	application/octet-stream
File Size	14.46 KB
MD5	df5313cf6f8d95d0a3ff25cb4ab94940
SHA1	76d1e35f4ba0a7fbf302062f242530931a912716
SHA256	d67164352af8c4080023b7a495bcb27779e4be9c3e69382b7e6b3b34da7610be
SSDeep	384:1cGJh2XzUawHSR7WDez1Jv/ydijwXZavF+ipK:auhEoa97Wq5Jva8wIvF+t
ImpHash	-

\\?\C:\Users\FD1HVy\Desktop\Zau1_Q_6PWntC.gif

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Desktop\Zau1_Q_6PWntC.gif.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	47.55 KB
MD5	697d5797136270e5aa0312bc5af33d53
SHA1	a55b4bf99876c541b5dfd0749bb7a1b0dd7e89e8
SHA256	b1a31df7a40ce13c78336fad96d52a038084f306a3cc36481ffe4fcbdc69f94d
SSDeep	768:1W5a+nnni4838YsdBLkPrg3NQIb+h/PwMlB+QCBtJAIgINW5dL2RtM7oQSv+a/7H:1W5ainivMYAkPrMXI/BPCBnbNW5Z1gWA
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\27kj6w0qCAmGPNM.docx

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\27kj6w0qCAmGPNM.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	99.10 KB
MD5	ddf552fad39144b3be5e5ce81e905344
SHA1	5c18a47b10ad849a3272a2c8a7cdcba1c03839fe
SHA256	d3f1f8a7cd9155e813302ad464de589c96fb19d1ea4913648443fce8de906d97
SSDeep	3072:ZnbH1qfC1/PblEfyvpkSmpMgGJn/s0BriJUKdk:ZnbH95XvKMgexien
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\4oSJqKCx.docx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\4oSJqKCx.docx (Modified File)
Mime Type	application/octet-stream
File Size	77.81 KB
MD5	9b241b93c24e82a3c6503eb29d1a1f83
SHA1	1e384317485da93b1dc57554c42d0d281fc803bc
SHA256	3f0f0e0a5c6e2fe32a74161abf9752b253d742d0c5f175d42497c41823a889b8
SSDeep	1536:blQQess6qtVNQuh7uTdzDI7T1H2w/VY2bmtiFW6UmDJRPb:BeuqtVNoBI1H/hbhFlUmD7b
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\6IKlp7h.ppt

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\6IKlp7h.ppt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	24.06 KB
MD5	eccaa80eb4185272cfd60deb4d84a6c1
SHA1	8e496deb37f692c250985843c2565da03c904a12
SHA256	b998a99006c6257b4d42b44995b650119f24419f42f3c61620f3a6f40fc53211
SSDeep	768:fUuc5exnEFQK4tk0C2CGaIAAoNtxGHROfMc:fUucWE14cLGDAAoSOfMc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\aayLh9Av.xlsx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\aayLh9Av.xlsx (Modified File)
Mime Type	application/octet-stream
File Size	7.03 KB
MD5	10ebb435fc5be6a903190b76c3802114
SHA1	82e70cc34fd37184325a95c56ec36995b24b08db
SHA256	7ac9d39cf17320c17df2ac837790036d4b7235bd78db941a58e58aa40f7de892
SSDeep	192:EGAhvqddGWqfAF6QFwgLzL3V9IWkVdm41zspWD:QAddGWuAFwwlaWOmpK
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\dMMktGSdsuA8JTH.docx

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\dMMktGSdsuA8JTH.docx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	8.59 KB
MD5	7755723fc0cbe678f81f048981c49620
SHA1	c294a1d5298ff6648318cf56f58faa748108bdf8
SHA256	716d264c71385e90bb85c0bf72ecd314883b6cb0a509acefecd2349866eac877
SSDeep	192:rrJDpFW7P4694uSlfgjvw3kkCQGKbHLy/vu787Z1bk2q6ixZBBYqT36H3spWD:xDu7PDhSajKONmrWv1bhF8w8pK
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\lLleeaH.xlsx

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\lLleeaH.xlsx.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	46.39 KB
MD5	6bdb353d01d2608c633df6b479748f9b
SHA1	e522ae4e251d211aa5c8c86cb178f45bed6d559d
SHA256	b946d03e8ee2e15ec357c18dc2c2d3bd425c19a95e757389374546d7682a3dee
SSDeep	768:RSpsx9L3xqRlF6mcfh1L6kKOr5TCY7oqJNocktFNMv6gw+H24YgFcJJRZw6Dy:0sxSRDOh1OkKO1mUJCVGvSpXphy
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\lzf-_9_.pptx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\lzf-_9_.pptx (Modified File)
Mime Type	application/octet-stream
File Size	99.78 KB
MD5	4994706f666f4549260180ea1e4f277b
SHA1	293d71aa78e47f6eb0f25dd4c5ec780e9065acf0
SHA256	4fc431cd18c99a38d5a0b00fa3ad67ab998e316afe29fb4ec28505f908d70878
SSDeep	3072:zsztWuITOpU5tMLgiYoADW9eZbZW+sF8vZTmVGPKVC9:zgtzIoUULK698w+sivZTAGOc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Md5Q.odt.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Md5Q.odt (Modified File)
Mime Type	application/octet-stream
File Size	28.14 KB
MD5	5998f2c27f49a4cdc6b0f550f6194202
SHA1	1c74a1d6892eaf89c861fcb70f054c613ef34613
SHA256	c5bfcb761f1f062aab480d95790dbe0939d7b57308c4c1bea04d5feced39e0e8
SSDeep	768:+LGnjiMla8l0ix6JQk9nCCVKY2qN3id3Z:q0NlbyFnCC9pN3QZ
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\QQnuWmakq.docx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\QQnuWmakq.docx (Modified File)
Mime Type	application/octet-stream
File Size	31.34 KB
MD5	51da7f9acc57ec7736809782daf873bc
SHA1	462caf79e1fe787f56f86882288534336a39433c
SHA256	695f9bd466ff50f8b0c8a6e5227830373981a11ca21a5ace4395a56c53904331
SSDeep	384:v45vBfBVHpf66aM09OnsqnVM+ErJsBmPAPkYW/5SRhE6LvzQzjY6pvX7LfE/xVAl:IBpf7nVM+QaBopYGIRbLsXY6VrLfyHl8
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\sA2u-LPe-LiGoMos.pdf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\sA2u-LPe-LiGoMos.pdf (Modified File)
Mime Type	application/octet-stream
File Size	70.45 KB
MD5	02e6c53feb57ea3b162c7f1235327b35
SHA1	d5fe9db738d97ec9f39fe799b59c55302b094f29
SHA256	daa01d39dd6992ea862d6359fb07ae4a169e45427c23e13030e8d7b180bd859c
SSDeep	1536:Td5l8wENT8l5uv721qFpeyspnIC64Mtpkaz8s7Zm6uij:R5l85N57wqFphsOoaz8sY6uc
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\UgOWYrVuYDiW8pkWKYl.xls.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\UgOWYrVuYDiW8pkWKYl.xls (Modified File)
Mime Type	application/octet-stream
File Size	59.48 KB
MD5	e30073e2b750a4a72111cd1906df4a65
SHA1	dca39a3a105edebc8d52f16aad745c0606b1a214
SHA256	89cd3ac70f0b2338f861818358803b1e1e73d74d2c160551ebfc2ef337168757
SSDeep	1536:FKSYxSD+XOpc+Y15JK8fT3Di3dB+RSZ/07lWBIu0MbCLYat:wSYk6c61W8fT3Di3qcp07l6t0MbCh
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\2o _xfnucm3wfE92We.ods.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\2o _xfnucm3wfE92We.ods (Modified File)
Mime Type	application/octet-stream
File Size	88.94 KB
MD5	90eb6a82973a6d9b157118e36b2978a3
SHA1	8fe5c94387340daddecad2edf46cd7464f97cab2
SHA256	4566d8fa86e8fe074cc552361c89f863550332be87273e02bb61abec73c7366b
SSDeep	1536:k5rCbrR631dlV91gqx1rxzI6/9msEn6ekX0v3z4r4NiQjTtPgkmD3n9hcwx0p2up:GrCbrKzlVMqx1rtjbS40vj4sMd39ywxa
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\j7-b.pdf

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\j7-b.pdf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	18.89 KB
MD5	2ba343c1c17e3a18e7bc559f678afa1d
SHA1	4d3a56a2e8724d6f5a5ebf28f115755f03d22959
SHA256	4641454b7d768ca52605eaf385e2745de390b9a4fe1d1105c496e6b622d4c31e
SSDeep	384:uJXmPnCL1hM8KMCrWf/Qe6yz0eiTCWuoFDHYEQWpK:M8Qa8KM716yz0eiTl1nQB
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\LFpWuQJ-aF.doc.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\LFpWuQJ-aF.doc (Modified File)
Mime Type	application/octet-stream
File Size	29.19 KB
MD5	bbfefc9520015aa38ffab7eb4f1d2e05
SHA1	af081adc95545eb32f8bbc5356d3bdf65521241a
SHA256	e1661a0a21b30373bfc563446a4fb9083f1cbc996bfe08cfb2fddaa426031112
SSDeep	768:ZR0TyRShnLu3xJVI8lhuAL3eKEjKwfQLv:HqLu3jJV3
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\wUuIQI1na.odp

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\jDtkUz0kU8\wUuIQI1na.odp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	43.76 KB
MD5	ebadda4f8518f152254e0fbe9a5ba4dc
SHA1	a26e005cb8c5ea909400f31cab854419294ad6fd
SHA256	2c2719ae59bfaf24f54eaa272d06a5026a399a226f1c662abbe4e4a2738157c0
SSDeep	768:NoJzfU+E+7Vj/NwrAVQWuZ6DPHP4z6wBLPZP/vLigfmAhKjA0rodf8ZElbNopr:NoJzMuhaA1fDPP4myTZnTiTjA0roN5li
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\xuaWupFvOSfqE.pps

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\xuaWupFvOSfqE.pps.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	67.62 KB
MD5	16454542f422a651448f9935eab9fc33
SHA1	e064ea4631591feac097f8c48ee66a3b043680ec
SHA256	816eae2de68a4e601816ddc7f8943522290cea1c859dcd94d92686865fb3002e
SSDeep	1536:SZqlsjID5QnTtdlEioPyqtcr9lSx5Mfx2Ff0D:SglsFTtTqtcrzf40D
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\Uct9z.odt

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\Uct9z.odt.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	7.93 KB
MD5	e1f4681549f81556168e60efa443d0be
SHA1	b7c2205a469a693e448be7252926a60aae693610
SHA256	184015c0ae6ab1ae64f66900de029154e2e09dd85dacb910599d03b797cf9960
SSDeep	192:gb7XcWRkuxkAmczn8z2iTVLlBfSY8yRKHUgtspWD:YxRkucAcNdTfSdyRKHDepK
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\w3sXXqR.xlsx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\w3sXXqR.xlsx (Modified File)
Mime Type	application/octet-stream
File Size	73.08 KB
MD5	6177b8ead4ed942be44128ee4837fbe7
SHA1	28948dd842bb2f4df4f1421d3f5f3ed89ed03726
SHA256	28e0aa6147cdeb00714b086392eae569c2dc498bdc325318f0b6073af303490b
SSDeep	1536:qQUXrmACRP9ofrQgfYqxEsT77dnbJGLozs0fojih6y:sXARafp/7HGLozs0fojih/
ImpHash	-

\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\iTea.pptx.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Documents\Z5Oif6_Mr_Ui\_L78DH7wK y2TBjiEU\_HV0qcp0pks\iTea.pptx (Modified File)
Mime Type	application/octet-stream
File Size	13.89 KB
MD5	788393968d34da6a634db8409b4c3196
SHA1	af7ebba6a77e3045ef181dad7c2803d4dd9d331b
SHA256	237729902685333217a64d4d14451cbf8cb3172121e59461d579ad4aff471e75
SSDeep	192:scASWfS4GM/xq9Pf1ngCpLJkmCQz7wI49TNTi1cCn24Pyi0W3iDwTjyb5jgtesTE:s1ndg9lnH17zz7wIo4Syd0bUTi5jMHpK
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\KXtDlQHWMbiCZ2hHs6x.m4a

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\OAdJkPb-\KXtDlQHWMbiCZ2hHs6x.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	10.81 KB
MD5	ed0fdea2ebe0e395b0348aa0d9f25c94
SHA1	214cea01f359599fe851e5d08d904d553ce00742
SHA256	f6786f128731a9e227ac5239f916b361bb3cb0d04f40825bfd55885d055c9a89
SSDeep	192:1068vN/ro1yk463wXusNRklhLGSkDK7lmTtJr/n1ONEG5nftFHJj+VDAnfWNUspK:1068vNToIk46KuscMm7ITtJpwEG5ftFv
ImpHash	-

\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\zaYdv7kbUlcUxSz3KeA-.wav

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\ESQxTLKmutc\zaYdv7kbUlcUxSz3KeA-.wav.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	76.90 KB
MD5	23262e19b230daaf39e2ac8d92c2afe6
SHA1	1affb24e73ab6e88df1948273a44cfb298f851f9
SHA256	b156248ee4b12ffac4c7b319aca289739ccf1e2047ec14fc19ea1a329b1f2d6e
SSDeep	1536:tkqz/qYhaRCwyLMz++TB3puPT88tQfyYUoNYEK2vH0d/iebm:6qz/bhaRCnMXZpuIAGvNHvH0Bi7
ImpHash	-

\\?\C:\Users\FD1HVy\Music\fXQDJP18MMdWjvedkW4.mp3.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\fXQDJP18MMdWjvedkW4.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	35.41 KB
MD5	7dcdfd62d52d27a042b5907f4bcb3563
SHA1	b5219929842aaa8e28594b90aca79ceefafb9419
SHA256	9a80699c9cec5bd3379cfe370b6cbef752fcf6669cfe6c0195d7741de056485a
SSDeep	768:TdLLiE6LWSNfGLHinK6nnNlapNWxf+a19Tsk0JGcbmHMAhHHJpRK/P:TdLiE6LWSJSDKNlapYxG09rKGcSlpHJi
ImpHash	-

\\?\C:\Users\FD1HVy\Music\JI_ROcYP5iaMyIhA11bQ\U7kcA.mp3

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\JI_ROcYP5iaMyIhA11bQ\U7kcA.mp3.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	31.57 KB
MD5	b22cfd8fa22f5f4bc4f49601bc12c659
SHA1	f14e795e03ae5004eabe944b0f5c6f303da037c9
SHA256	7b9a3214c353aa99a7b14e8e7a5618e17d383226a4b72f4a116bcad077574da1
SSDeep	768:0xtIiMKZG2N19f3nucxgv1edTmVeQgAiS0l3:0LB3nucxukdTmwQaSg
ImpHash	-

\\?\C:\Users\FD1HVy\Music\m-T19pWPhwjALOHNq.wav.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\m-T19pWPhwjALOHNq.wav (Modified File)
Mime Type	application/octet-stream
File Size	41.87 KB
MD5	4e72375e17d2694813b9c89825f469e3
SHA1	7c03429c7f594183ff6b130f55503f50b7d6dc1f
SHA256	33ec8abcc5f8d57e28e63cb5f4b55b9eb4f6f607ac80deb2a4a536b6d8214a28
SSDeep	768:m4N31gBa/uIaRNdn+CPXjQgvLLcImMRuOU9kC5ksh+AkPovgyuqE8sy:mO31CamIE6CPU2INouOUSTPo1ZEzy
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\Mo9aZN_6Jq9VyBd _y.m4a.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\Mo9aZN_6Jq9VyBd _y.m4a (Modified File)
Mime Type	application/octet-stream
File Size	18.57 KB
MD5	52327c6ca7b7da10e34746b89a107738
SHA1	8c466f5bbf67b3d47ce8298656bb2d2fd353711e
SHA256	600689d7593f9f840027b8f809829a7a3b3eed2171c24d4e6769576b58d3feb8
SSDeep	384:1VFCdH7WGCN6McmL8BObjQ8gFAXXqKgJ6jZwQJc+nT855bOMGpK:kH7VII+sSX6K8OZw0hQ55R
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\o_54eDamWws3.mp3.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\VdR6kOMbj3V3xP\o_54eDamWws3.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	97.07 KB
MD5	e7253aea32d2a32dd0390b4e91a1c23b
SHA1	0e188fa7a6256cbd789ffae7ff611a37b12a4518
SHA256	611e54105e43072245e0302c4f3469ba24674ef8fb48bd3f3b528411dd4c5c93
SSDeep	1536:iVY+8uQ4ZSYONQQyjvHfmGUiELkoCs30bA0CDcyHoefk1JvaC5ZrlFg:G8uQ4ZSxg/6i6v0A1BzaaC5JXg
ImpHash	-

\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\WDCK.m4a

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\rUUROgRx9gfXRUYVye\WDCK.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	18.80 KB
MD5	55856a65e2324849de5efc6939b2fc4a
SHA1	cad3535aa3830d8bafe6b87f3a58556885d0085b
SHA256	f88cfe9639593b8bb14b7b941cfde46ca3ecf6ef818c8cfc10352964a4647940
SSDeep	384:1xWT2+aoucYA6KxWp2pDskCVVpQrCEfRCRp7SRxmVV7iO+pK:HOecYA6KxVIFiYD+Q3iO5
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\5YOR.m4a

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\5YOR.m4a.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	92.69 KB
MD5	7bcf740c034fe2e34e5f3a96323216d3
SHA1	465825f269dca11c611d6f38a9d8a785c78d9f9a
SHA256	245def231a62779caef5a3097c8ed360f260297f5602d3f7339d96d7da138e4c
SSDeep	1536:fy2/avlpp/X6hH+b2+HSd2l9Gpw/wd1SyZxRmqpw0IICc2AEogg/8IS2SyobFy:fyDpxX6htmF9Gpw+1nr9woCccb47
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\cSnUOnQz6xEd.wav.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\cSnUOnQz6xEd.wav (Modified File)
Mime Type	application/octet-stream
File Size	96.44 KB
MD5	ba7371672e4b96c77ee77b28158b3a41
SHA1	b221936234586239925cd5c37ae55e8d0d1b5638
SHA256	30e25bb31aa6f8d348808c4ea2633bdf001b2b42cb558a6b96c02a45b86df6b4
SSDeep	1536:prZt3/9WCZoL5TSzgxPspWrYn88i63b7JmHfTJFnWKNfqC7ApvGoMEpQmIcvLGYL:9ZJ9WCEZKW58ZEjnWeyCUpGGarEh
ImpHash	-

\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\toS-EwE0vCCwoskwD1\uUCd01DT4yfQz.wav.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Music\z37nyAMgu2jp3cfWIU\toS-EwE0vCCwoskwD1\uUCd01DT4yfQz.wav (Modified File)
Mime Type	application/octet-stream
File Size	25.87 KB
MD5	247014d4967e54eccc3b0ea3dadd1f4d
SHA1	6278af9d37bcf06afc049f10c71004f33055d5b2
SHA256	f81983232de06791bc4a51f995463c6e01c7af013f104951d4da421184606be7
SSDeep	768:gm9fh1seuzRg7phE4YFTrPj7fGUdF2gszD:gmBbseuzS7DkFTzjS02gszD
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\gpNFvPMeWkFC.gif.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\gpNFvPMeWkFC.gif (Modified File)
Mime Type	application/octet-stream
File Size	13.08 KB
MD5	9e47b0cb74a0c6effb8cd2fbcb0a7f4b
SHA1	79949396e8b7213ca3229383082e070b6913eda7
SHA256	d34cea0d2ba66ac2fd82211f98ff2ca66fae18ed32258e1bab63fee0ebea47c0
SSDeep	384:aOdVLcM3z5FVdzZBuQF1YFbX+DQei1AeA0XpK:BdFX3z5rFZ3FaFbuM3Or
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\JNDCEREvKtt-06-A0UX8.png.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\JNDCEREvKtt-06-A0UX8.png (Modified File)
Mime Type	application/octet-stream
File Size	42.54 KB
MD5	a26525dd576760b0279652620f279c34
SHA1	8fe66d65cdac99ed7b6dbe88ea24a97046f09d60
SHA256	4f04c8090a0fa9874b299ca6373f930ee12de537ed20c784433034fb0ff5c8c7
SSDeep	768:s0PU4xv275v1vlZnJ7X98eFwG2esJ1oziw3BK5Wmr+Oc8wmV:s0s4U7N1vLn1XNKG2em1uiw3Y5W6+h8B
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\Bn2jVBj5I1Q6.png.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\Bn2jVBj5I1Q6.png (Modified File)
Mime Type	application/octet-stream
File Size	76.77 KB
MD5	f284fafad94e649ed38dac24a8f2e578
SHA1	02234b01b242859ff3e060ff9664098b1e125d39
SHA256	4a534d232b9f69b33fabf98e85959108ce4e568e89f40b55dfb1a6a85a0fc769
SSDeep	1536:VyuR+2OGK8+bHh0itHXJD5UTkdKUGZA0kZVJxdQPL+JgGxjHc3Wh:VyK+2Rs1tzURZlkZ/QPm3jNh
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\bwUCcMWGBF1Mcn_.gif.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\bwUCcMWGBF1Mcn_.gif (Modified File)
Mime Type	application/octet-stream
File Size	96.66 KB
MD5	3141662c19663d2a6f1655a16a100c67
SHA1	a897e17658c6096ba4c22a8f83518b2c599ddd32
SHA256	b6b6712c69b6b909aafa9d1f47b5a56e2996a9e3f2d7a593865054146b0c8277
SSDeep	1536:l2sH+0PJLvGSqN/PD4r0inorOHfdSjarvKnIkOYi3uo2qtNRR:l2setDXDbeorAfdSRi3u3Qj
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\-aUMUjkCqPRwR9Vt.gif

Modified File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	86.40 KB
MD5	b511a5bf8cc0e88e0d31830b4df4a978
SHA1	2ea1fa8c90a53d4fe6065344d9615d0c7b5a0a25
SHA256	f2766707dc54a95e778042b343703fb0cae8fbaf55ae52735efa32156aae2dc2
SSDeep	1536:RIjNlkXJCYu64q6cE8hADqTBF1WRWsMKfgl2pmlXkYf3bdbsGjXirMs:RIjNlkXJCYu64DN8h8GNhKkxZkYf3bda
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\e0RUl3aLEh6brT_yeUb0.jpg

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\e0RUl3aLEh6brT_yeUb0.jpg.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	21.50 KB
MD5	19065f5f56d7b51212f61a8e4a40d2cf
SHA1	a2c03e3841200420d986fe65cded3334e3f1d5c3
SHA256	5482b47ec4784f09e79feb921ca5e1c3b9bb0d10d15a8dbaa75c7496a168964b
SSDeep	384:dl2qRy2IvK25eZFOMS1vGfzokRAlRkStwmWHdmPC4a6ElwVlguHltEi74rDBBFrM:dlDy3vx4e1vGrArjwzaEl2NP7qM
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\EVRLdIxDOIvB-Fc9_h.gif.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\EVRLdIxDOIvB-Fc9_h.gif (Modified File)
Mime Type	application/octet-stream
File Size	72.21 KB
MD5	51f05291ca585441129e92aec25c22e4
SHA1	090f08138d6b15a7bae2b8939385f0bb3bcd71cd
SHA256	5dd72f988f31b40996bed5072844f17560a05dbc1382e4788e19749b15d5edd5
SSDeep	1536:10p51o+R2Dc2X8HtgIrCi8jiimebcsWSv4mPX47KRAb1:1fYqX8HtgTmOcsrv4KX47KRO
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\VM0 JSKujUy.jpg

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\VM0 JSKujUy.jpg.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	53.76 KB
MD5	eaf151051e7b8cf80e7c3c322c4ab8cc
SHA1	ddfd4ccbab17df638cd698e50ed6c45c6bdcd661
SHA256	6f13fe50d881a6b46aa77072d4e16e96a127ce1b9cce36a8df839c91aede0441
SSDeep	1536:bAnQlYvk1o0b8Od9o//cYLlfrkB+3Y9A4ca:b5ic1pEcuOB+3Za
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\nDbY.bmp

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\nDbY.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	7.44 KB
MD5	6f98a1f97e4b5b624f9f2839a5fdd42d
SHA1	a4bb123e2002b236fd0784c1a53c5efc6b2d50f8
SHA256	334a7bd75d6541a1f09ca07aff3316f5b48424825d9864cfd711776c59ef6d35
SSDeep	192:ZKu3Tmc3Hq6tVC2/ecmSr5+RczQPKJRnWRGk1iTspWD:gu3Tmc6eC2/X5cRMVWR+opK
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\SjHlBfZqKWu.bmp.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\SjHlBfZqKWu.bmp (Modified File)
Mime Type	application/octet-stream
File Size	14.56 KB
MD5	1bf5880a6d65fef011e9477eaca21b2b
SHA1	79312d129a588a355013ba9091f888c7507a4e95
SHA256	ce739befb1eba74c886be4bcf144c31dc800c1a09a9619de001e72ebf91a20bf
SSDeep	384:KHANIhHp2eHuUMlvVWayHYiqx0fQghZuEpK:KHANIhHpDHuFvVRi60fFs/
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\SUlXmTX1.jpg.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\SUlXmTX1.jpg (Modified File)
Mime Type	application/octet-stream
File Size	40.21 KB
MD5	a2c58c636fa2922a09333618df7e0a7d
SHA1	6e8b00a6fc2a508f961e22f1d28c60b2d1220a70
SHA256	7f91dd28d4999bfb5ce01c4273aea485cf39917ee354b3aad835b652d41f143a
SSDeep	768:ZUa0nuN7L20a4i1lszAXjyJeghmkX3yIbr5W1W9QhtJ4MN8nXeN42N:mCRS0hmmQjyJFhmQyIn54rNuOO2N
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\Xej8a4-yl4uAkyUIiU1.jpg.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\Xej8a4-yl4uAkyUIiU1.jpg (Modified File)
Mime Type	application/octet-stream
File Size	27.30 KB
MD5	78ff8fc6f8ea4f800ec672a57707034a
SHA1	5c1cb15a833f5123b598f79054c08a6e66135d1f
SHA256	22b44fa2c0fafa59c5faf3da665b0351b17810fab3f9f432eee37fc39f62bbca
SSDeep	768:CQi0ta6MpUMpECEjryPaa0IqlnwaYmqn0LXJpMyACOo:x3a6tMpE0yaO1q0DMA
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\g_PWWk0DwHdiVJ7TQ.jpg.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\g_PWWk0DwHdiVJ7TQ.jpg (Modified File)
Mime Type	application/octet-stream
File Size	90.77 KB
MD5	33fd0daab2379291667a133e2eb20759
SHA1	f6c7011ca92cda330a9a43e7a56c211ff7145a7d
SHA256	e30d4fad178ca2f1f501ea1fe977ff8302b44da99b443ff8a07c40e67e6894b3
SSDeep	1536:UNx+oa5Y+yCpqcpouEAy35nJACrp+LbNyKoJyAjYb2NzBzZIqU8Mkj+Xgrjx2RZ7:JjcCp1poeyJJFoovAAjQeXIAMkjEmjbg
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\42OnoQ2VRBixgPOTlYl.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\42OnoQ2VRBixgPOTlYl.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	99.91 KB
MD5	68082e8078aca8d8c4c097b1ebf6f35f
SHA1	eb99b17dddfc29e21750042ae924c5070bbad7ca
SHA256	2409d9c647c650c4b61eefb8a79c515a6dea5b8fc9bb5966e4fb0b77bc0120fd
SSDeep	1536:qxI03uAuoaKk80fcrWcBbjtKAg2/HJkpkRCI2FDApQfKLJ7:dyutxrGWcBPtKIxai2FAMKl7
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\hrFHHxEDNXCX.swf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\hrFHHxEDNXCX.swf (Modified File)
Mime Type	application/octet-stream
File Size	20.80 KB
MD5	4896fe761515a0251f9225165e34ee43
SHA1	3368f2cc5471ffd76ac7dfe2827fbcfb71f8ca33
SHA256	af4f4c250b566ca9057faf7806105b5792d093df1d0288cc2a9b011805df8a76
SSDeep	384:LnMocLrIOMRnpQmGoAkhb4lYOKRafzyw+wuH4A4wNTA7pK:4oGrI3Rn3Golb4ySm5H4ATNJ
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\P6NtF9p_sziw.mp4.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\E10w7BI-yN9p\YD6Z6S-cuGg\P6NtF9p_sziw.mp4 (Modified File)
Mime Type	application/octet-stream
File Size	72.38 KB
MD5	81422442ecc686030ad2dd6ca78cd806
SHA1	eff368c8d9f3e1cdbdb6128c51ccb6c8e05ff664
SHA256	6b40660d279bb218e5583f2cb5f49eaface326ba2c0488e7b0b555189e06e3b3
SSDeep	1536:l8QL+5qmpfZzozHyJJ0oM4xFqEsyuVo7jwplPZHEP:la5q2xzwHy3M4xFq96j4vEP
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\gPsXouAw.flv

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\gPsXouAw.flv.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	38.54 KB
MD5	358429ac5d3253597e295431e5252672
SHA1	64fccfe44f1e719180d67e92a40592c067b5dde9
SHA256	5c28a4857ed9f6337704fa69c34b902cd4553c57c93369a6718c56ec6ee71030
SSDeep	768:rI/NC+CXaNUEzRKiJ4cFiAzSeb+jI6y7DoSY5RtRMfES8EbvQjSRF7SOWJz:rIlC+cau8DVLSewyA/5Rsf/bvG8FuOWZ
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\GsXmIOztESVB3CY.mp4.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\GsXmIOztESVB3CY.mp4 (Modified File)
Mime Type	application/octet-stream
File Size	84.35 KB
MD5	5460bb9a7b54b6573afd7cf6929bc453
SHA1	be0e440f2eaba26000b5b90ae6628966a51981fb
SHA256	bf4a26a17ce2de9e19a92cfa8a199effb99a42dde5b87f188ea0e91df065b50c
SSDeep	1536:u9IwxzcjeNelyrL827VoZC8E41UZ3BR0MYAW3ZyW17uizB4IEMmF2:u/cje9rL80oVE+a3B+MYAW3Zv7uily2
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\JbkR3ATa90b5U.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\JbkR3ATa90b5U.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	8.45 KB
MD5	15f3816162598cab033b2532ad32ff75
SHA1	4771f42bab5c470f8c37f660b5695264c88eb932
SHA256	334542a85ed4f23f4fdb72171f4877486d2cca8545b4377aeb561e3b986f5647
SSDeep	192:nnIiRaXnEN8VhM8Np5ydf4de+RvlTFDFAHjIwPWKLivZzspWD:nIiCaOM8Npvde+9RFDqDIwPWKLiRIpK
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\vH3psvYnWA.swf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0ll0qUCYfiYHKHKER R\vH3psvYnWA.swf (Modified File)
Mime Type	application/octet-stream
File Size	7.83 KB
MD5	d5b37efffcc26e3185699d24af96d5c1
SHA1	c33b7f72420ab0c61aba72ab653c6108e6591e60
SHA256	3d3aff9cd11ee6743777c532906819bb99fa4cc0abb458f51fd37a217684fe34
SSDeep	192:/OUuUScrWeS6nxPWTfs8LzLIEkYEjn4spWD:mUuBc6qxPgftLz2pK
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0qq-2JELVv.avi

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\0qq-2JELVv.avi.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	77.73 KB
MD5	a6ab75baaa873bb911af527689b6ec8d
SHA1	4233c4c0d09e19fa5bd3487759007444039a9eef
SHA256	4f80f58c92ce500f86030812bfc34ee3d5001357b26c75b711d0af260fe262ad
SSDeep	1536:UFVm5foGIhZmoD6GPMemiBRNry1XLdBeOu16c7CIXbJHfCcjGPdR8rMf1:UGahZmC70emsodzucOLJ63PvuM9
ImpHash	-

\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\cBmZZ5bX2Jx3bJhbUv.bmp

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Pictures\kG7T_G4j-\cBmZZ5bX2Jx3bJhbUv.bmp.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	32.38 KB
MD5	bfb1ab3ea3bed216be13f56b23d3adc1
SHA1	b1b3ea6d48a2ad54f6690428669d5963b157d48a
SHA256	608b5019efd21419b0f5da007e9da079ec9b43f16236dede9c0518c6c2b80459
SSDeep	768:KxRlh5SnnuoJSrMGc//zSNcou/6QFoTlypIkHCSso:KxJ5wHJgMGKz0coOyRypI2
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\I8mA7.swf

Modified File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\I8mA7.swf.txd0t (Dropped File)
Mime Type	application/octet-stream
File Size	61.03 KB
MD5	4dd736974dcfc151c0a632b140698868
SHA1	782455f29a45ed41871aadb5acb1afb9b30de221
SHA256	53b08efb2aee5a60ddd64510391da12bf34951dd58ac4b6d740f436e02c3780e
SSDeep	1536:oVFTTtVZxPm2QbeRC5gxn95OgI2N7YleR5JTqgROYSS:qF/LLPs5gVNslY3NwS
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\IWWrfzZp12CtwW5GR.mkv.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\IWWrfzZp12CtwW5GR.mkv (Modified File)
Mime Type	application/octet-stream
File Size	47.42 KB
MD5	39461bdefe41f463a88795a68db53423
SHA1	3d65316ec9f39fdcbb6038d81a0706db0d7de9ca
SHA256	3991abaa2556ed59c3ff2bdd8911050e659a5a960a4fd6ebdef3c03b73b7b479
SSDeep	768:J2mnTOoWvDGbbqw3LJGYvs80a/PaY25W3c6SVFjPK1UMqQYjwQC4iDDhcp9kqgNZ:J2mTCGT9GYvsVa/PaYyWgVFLAUMqQPB5
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\LISQrmwmwFkmeV9a6dun.mp4.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\LISQrmwmwFkmeV9a6dun.mp4 (Modified File)
Mime Type	application/octet-stream
File Size	61.30 KB
MD5	38cc182946c47a72f3fae2a948697277
SHA1	80619a69cfc117a93c777ad6542b5cdeca11d630
SHA256	f80cf60d75047242500be55c0a8b05f3b2066d9b29d1fa7d8e60464dde060c71
SSDeep	1536:hYa1lB/YBHzPQdq6ydRiaFxO5owFLKgrFnUL9xMQAq:hl/YBTIXiRiw6RLJC4QAq
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\Z2p1JCW7G9Pu\AuNane-wUgoPDM.swf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\a w2nq\Z2p1JCW7G9Pu\AuNane-wUgoPDM.swf (Modified File)
Mime Type	application/octet-stream
File Size	72.36 KB
MD5	bf1abf1bf277a13c32f082a5e26ada6e
SHA1	6afca3d2fbda4fdb203b1814accc03c85dc441a5
SHA256	54f6800cadec69345f80d37d052458f560b0adf6d0e459347f411406d95f1bbd
SSDeep	1536:l/DrbK6eHP4ZCkx7k4gSL2oNhg+0f95edsCAJcLc5cF4RcGOGq:l/n1eHPy5x7Rg+p0V5eBGceRcGs
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\ay37U hT.mp4.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\ay37U hT.mp4 (Modified File)
Mime Type	application/octet-stream
File Size	55.82 KB
MD5	1064faab7fad152624722e81b31c8830
SHA1	a42b945bb5224ebc7dfd8733d4dde553b7c9158b
SHA256	070e0296effa8caa9fbea132f41b6607cfe5318acdc83f5d9747982bfafbfdc2
SSDeep	1536:FjCAirhP+bVSyLiohtF72wuQImtrhmDevonz:VCAEh4VRF7GQhp6lz
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\kxtmh_DCIU7SgwmG7I.swf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\kxtmh_DCIU7SgwmG7I.swf (Modified File)
Mime Type	application/octet-stream
File Size	77.60 KB
MD5	aae08018d6bc624da4c824c868c05b08
SHA1	a4753bd7be4c0116ec3eb91199d8cbea6be43a5a
SHA256	6bf0f75c664dec7fb249d7eefccead520e96a4d67b8bb4674b6ac686333f0e2a
SSDeep	1536:b4di1WGsjXDwKO2dMaOZ/NVzfS+kQRF9sgbXfihRVWRzVhe:b4uBcXDwUmaOZldK2j9fzfiv8zK
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\WxV-TMM4v.avi.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\ofxv0mmpKK_\WxV-TMM4v.avi (Modified File)
Mime Type	application/octet-stream
File Size	69.56 KB
MD5	1232ee6867a7e42fca211ebde19d521b
SHA1	cab0da5c90f7df2eaaf5b0908ff0e1d7dc6d63bd
SHA256	c9d8c12a09d4df078fe8f960b198d1a9ebadf9e9cae5f24e7a6c03d52e5d7f69
SSDeep	1536:g1jrMyu51aLkeekl0BSj3pqjPax4nfI2kuT4jLh5211EkGqdpC29:g1jr1WeekESjiyxPNuTyy1v979
ImpHash	-

\\?\C:\Users\FD1HVy\Videos\WlTa\2q3Ks4TNs0IQQ.swf.txd0t

Dropped File

Stream

Not Queried

»

Also Known As	\\?\C:\Users\FD1HVy\Videos\WlTa\2q3Ks4TNs0IQQ.swf (Modified File)
Mime Type	application/octet-stream
File Size	95.87 KB
MD5	fe2c8a2baeaf538a9b2b72d09f81d605
SHA1	1251f1d56f0d7f94c67e3496a659abc1d02f70ee
SHA256	7770f7800952676d94f5bc4a963fd7311d89feb270dd1368f6f921dccdd0c102
SSDeep	1536:2Z1wtCTvrlmEooNGqlnhJ4TXIPy9ih1zLGEY7CUv6NVZVobYk4EYXiIAhqTy6Ey3:2/wt+MEoQl/4TXIq9i2EYmUSNLVUTH6r
ImpHash	-

Remarks (1/1)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After