VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
|
Threat Names: |
Generic.Ransom.Hiddentear.A.29080EF9
Generic.Ransom.Hiddentear.A.BFCB80C1
|
hidden-tear.exe
Windows Exe (x86-32)
Created at 2021-01-15T07:47:00
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x41daa6 |
Size Of Code | 0x1bc00 |
Size Of Initialized Data | 0x19c00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2021-01-15 04:42:09+00:00 |
Version Information (11)
»
Assembly Version | 1.0.0.0 |
Comments | - |
CompanyName | - |
FileDescription | hidden-tear |
FileVersion | 1.0.0.0 |
InternalName | hidden-tear.exe |
LegalCopyright | Copyright © 2015 |
LegalTrademarks | - |
OriginalFilename | hidden-tear.exe |
ProductName | hidden-tear |
ProductVersion | 1.0.0.0 |
Sections (3)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x402000 | 0x1bab4 | 0x1bc00 | 0x200 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 4.66 |
.rsrc | 0x41e000 | 0x198d4 | 0x19a00 | 0x1be00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 4.46 |
.reloc | 0x438000 | 0xc | 0x200 | 0x35800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 0.1 |
Imports (1)
»
mscoree.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
_CorExeMain | 0x0 | 0x402000 | 0x1da7c | 0x1bc7c | 0x0 |
Memory Dumps (11)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
hidden-tear.exe | 1 | 0x00FC0000 | 0x00FF9FFF | Relevant Image |
![]() |
32-bit | - |
![]() |
![]() |
...
|
buffer | 1 | 0x01591000 | 0x01591FFF | First Execution |
![]() |
32-bit | 0x01591000 |
![]() |
![]() |
...
|
buffer | 1 | 0x01591000 | 0x01591FFF | Content Changed |
![]() |
32-bit | 0x01591EFF |
![]() |
![]() |
...
|
buffer | 1 | 0x01592000 | 0x01592FFF | First Execution |
![]() |
32-bit | 0x01592000 |
![]() |
![]() |
...
|
buffer | 1 | 0x01592000 | 0x01592FFF | Content Changed |
![]() |
32-bit | 0x015924A0 |
![]() |
![]() |
...
|
buffer | 1 | 0x01591000 | 0x01591FFF | Content Changed |
![]() |
32-bit | 0x0159106E |
![]() |
![]() |
...
|
buffer | 1 | 0x0147B000 | 0x0147BFFF | Marked Executable |
![]() |
32-bit | - |
![]() |
![]() |
...
|
buffer | 1 | 0x03221000 | 0x03222FFF | Marked Executable |
![]() |
32-bit | - |
![]() |
![]() |
...
|
buffer | 1 | 0x03223000 | 0x03224FFF | Marked Executable |
![]() |
32-bit | - |
![]() |
![]() |
...
|
buffer | 1 | 0x087A0000 | 0x087A3FFF | Marked Executable |
![]() |
32-bit | - |
![]() |
![]() |
...
|
hidden-tear.exe | 1 | 0x00FC0000 | 0x00FF9FFF | Process Termination |
![]() |
32-bit | - |
![]() |
![]() |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Generic.Ransom.Hiddentear.A.29080EF9 |
Malicious
|
C:\Users\FD1HVy\Desktop\-oOWejWsgFpbJi.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\3Lu6NY1C.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\4phdci9dUrTtxEhd5.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\6GZj_.ppt | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\99M_21.mp4 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\BzFCpK3sA5 wIqY9MGu.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\dKCfEqBglP.jpg | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\DnES9puJGLTmbfl.jpg | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\E_PYESz.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\f4QGiSQ-xLpo.csv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\g471KyerOmcuRL fE5 B.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\glbxRUnvXcoLYQx2cpe.ppt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\Isc XPXB1.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\kQ86MC1.mkv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\KRuLz.doc.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\kukoDO.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\mmSb.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\MtjxaRpWiJUz-pMNd0.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\OR_8lE.docx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\phuiz_R3 PSU2JRxN.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\qTJkG5.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\rsFq.mkv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\RZiwHrqcHk3rcIk02.rtf.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\t o-Yt.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\th_rcS.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\uXegZz.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\y2rly3.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\vWbL6uc\3HrDhfqmZhB.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\vWbL6uc\7M364Y3X_UXYU UP.png | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\vWbL6uc\aPnucObt29svDP.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\vWbL6uc\vkYWC9I1XS-9Ff2-mwpj.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\vWbL6uc\y_0P8_Vkj-rbPJDEs2JD.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Links\Desktop.lnk.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Links\Downloads.lnk.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Links\OneDrive.lnk | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\-kh7W.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\2AlglI-kRXO07vf6mRl3.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\2eSzq9Y1XoyyJ.odt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\4YO1JI2QHo8.xlsx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\6A3x3HYZlUw-jocCtXyu.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\6JUfaPYgT09Q.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\7iH0V.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\7pV8z.xlsx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\9Y5OPP98C74NYX.xlsx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\aAouGUNpl.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\BXjlS.docx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\FHc0yWr1i.pdf.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\HmNTn3.odt | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\iJoe7Hh.xlsx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\J iQz2X5eVcquOHDXjx.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\jBgd4y9d9T.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\kdhFe0o1UxY04c.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\O7LAjrgCCQ1T Qzj3.ppt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\ORf11e65l-wzgxT.odt | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\TZT4Ovk.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\w8vJNHz 68_RzkaBSlFS.xlsx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\_rTaR0wLgZy.rtf.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\mR0Z4dQEnFd3hpw.ppt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\PwlfOCUlPSFxnHHg1.docx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\TNKLVGUYmxuf.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\vaiz.odt | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\yjR74yBiX0xOA.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\CJ1ohevyYPMWq1qc1.doc | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HxC5EM1.csv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\LN9x2L_FAc8UbDgsN4ej.pdf | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\M9qjHW7w4yW.doc | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\O2pIFAXIeiKv.odt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\vcZtVTb7DpoRLydqL.xlsx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\_WkFoo.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HqVun79_LztQd\D4lhot0.csv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HqVun79_LztQd\HAWdKfOXO2VPD8KDWRX.doc | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HqVun79_LztQd\HCeaJLiUqT_zEXlk.pptx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HqVun79_LztQd\JEMnD0m.pptx.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\HqVun79_LztQd\m9zQt.pdf | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\_BaF8C5_MTcPdIH1ZGwc\e 4bpw4ZNWHs NfchA.odt.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\_BaF8C5_MTcPdIH1ZGwc\gccJC4DK0Ej.odt | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\_BaF8C5_MTcPdIH1ZGwc\jh07bY79kBHMz.xls | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Documents\Rj5-SiksS\H_3XcyOgEOX8weMmYZ\_BaF8C5_MTcPdIH1ZGwc\xbO01DF5ooTfiYa6FU.xlsx | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\7HaCO4.bmp | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\GHCge9sEIqZ0K.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\hC3JNWuwUD4.bmp | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\Itg12K.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\OHEF3T8xYwC_eUXE_dMl.jpg | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\vOIgjTe.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\xEKc8tzH1gI6wLl1yM.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\yRl.bmp | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\Z940ry9PLm6wG.bmp.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\Zkv 5 HDcDPXOiUxxY.png | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\0oPi8 iuhAtaYlf ypF.png | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\3YwxgHS7wo.png | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\9iaOT7qGh72qgWE.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\Im8OFHwAT_X7YEe8sogt.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\mkpx10BDTjql.png | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\qFC6XqgfxGQdE62.bmp | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\qiJE_.png.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\VCt2uI.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\WUv6X3hQvEJpuJ3lR.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\YNrl6yfl-HPXEIC6gM.jpg | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\zNjoEXp1.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Pictures\tIziTy8oOGmMTGbF\ZxA7 W9FkkJiS9M.jpg.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\TxV-H.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\_1y4c4_l8VCHzKqC.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\nwRVX3Jt6l7-6fbjB4.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\OhrFw4wOk-ruuQrf3jS4\lNk2M RoL.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\qSbN7sk\hhnf512tBu -TkP05o.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\qSbN7sk\M7O-hH-jTha.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\3yt3ueS.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\4wt5QOTj1Ctz.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\89oIRz4N1t wsgaYd.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\bVSeyLKc1Js\T7Lk.mp3.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\iiIFP8WyHtLZVuP\nJiStawjzVXqPQ_gXLW.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\7Xz8A\uI9AcgegV4QGJeFzPa\iiIFP8WyHtLZVuP\UEVqGhOZs6DE5gW.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\NY3gnwFowUC_DF_fGyRg\xW3 6nt ZrFl64-tuE4.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Music\NY3gnwFowUC_DF_fGyRg\yoRDyP-.mp3 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\iDZvrmECq0VOUKjjTh.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\m3tuExCypRmBis PD.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\puCwv.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\_9MqPeo.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\J4nxTnlP0.mp4 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\Kk1g5NzXQdP.avi.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\vcVxaaKHZomYrCV419.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\9b4bsILU0XLzUeXX\4T4n7jFsdiP.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\9b4bsILU0XLzUeXX\uePUKqElPP4YAG.mp4 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\9b4bsILU0XLzUeXX\zniMqYfkh-z.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\snTy4YXrtwjoO.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\UA3z-kPU7C.avi.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\QEmWIgBHWIlal9PO\L8iYGvYA_7Y.mkv | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\QEmWIgBHWIlal9PO\MZfJ3crkp29NpXlV.avi | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\QEmWIgBHWIlal9PO\U-MxN15t0I.mkv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\hEWR_paHyCJ\QEmWIgBHWIlal9PO\uPoxBYnaB.avi.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\k4YWOx0eAwxMX__rnRG\6wDFs.avi.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\k4YWOx0eAwxMX__rnRG\7199yKnCUmoxD.mkv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\k4YWOx0eAwxMX__rnRG\D-nTnJ9ak4vtRGg.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\k4YWOx0eAwxMX__rnRG\QFMsez47.mkv.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\lf4sRlkHb9\k4YWOx0eAwxMX__rnRG\vgS_5FELSSv3TXBfeX.mp4.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Videos\sJ-bgujrBCwZVZv\30Pz2rALSR7mz.avi.a | Dropped File | Stream |
Unknown
|
...
|
»
C:\Users\FD1HVy\Desktop\READ_ME.txt | Dropped File | Text |
Unknown
|
...
|
»