e53497cf...8324

C:\Users\FD1HVy\Desktop\LS_APPDATASAMPLE.EXE.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	54.00 KB
MD5	988f8230849de95fd733bae23fba3fa8
SHA1	72109e2f9e2e9413f2203e973861d0361a618d5a
SHA256	e53497cf42842efa84a776eaa1cf0580cfc07b9e76a74ddd52eff10cc6b78324
SSDeep	768:lvuye1kVtGBk6P/v7nWlHznbkVwrEKD9yDwxVSHrowNI2tG6o/t84B5P4jSdTa5:NeytM3alnawrRIwxVSHMweio32k+
ImpHash	ba2ce247fa49357770ce28f139e2f1ab

File Reputation Information

»

Severity	Blacklisted
First Seen	2019-09-30 11:38 (UTC+2)
Last Seen	2019-09-30 18:55 (UTC+2)
Names	Win32.Trojan.Filecoder
Families	Filecoder
Classification	Trojan

PE Information

»

Image Base	0x400000
Entry Point	0x409f20
Size Of Initialized Data	0xc200
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2018-04-02 16:47:20+00:00

Sections (1)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.rdata	0x401000	0xd388	0xd400	0x400	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	6.1

Imports (5)

»

KERNEL32.dll (45)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SetFilePointerEx	0x0	0x401024	0xcb54	0xbf54	0x467
CloseHandle	0x0	0x401028	0xcb58	0xbf58	0x52
lstrlenW	0x0	0x40102c	0xcb5c	0xbf5c	0x54e
CreateFileW	0x0	0x401030	0xcb60	0xbf60	0x8f
HeapCreate	0x0	0x401034	0xcb64	0xbf64	0x2cd
GetCurrentProcess	0x0	0x401038	0xcb68	0xbf68	0x1c0
ExitProcess	0x0	0x40103c	0xcb6c	0xbf6c	0x119
CreateThread	0x0	0x401040	0xcb70	0xbf70	0xb5
GetCurrentThread	0x0	0x401044	0xcb74	0xbf74	0x1c4
SetThreadPriority	0x0	0x401048	0xcb78	0xbf78	0x499
WaitForMultipleObjects	0x0	0x40104c	0xcb7c	0xbf7c	0x4f7
Sleep	0x0	0x401050	0xcb80	0xbf80	0x4b2
GetLogicalDrives	0x0	0x401054	0xcb84	0xbf84	0x209
SetFilePointer	0x0	0x401058	0xcb88	0xbf88	0x466
FindClose	0x0	0x40105c	0xcb8c	0xbf8c	0x12e
lstrcmpiA	0x0	0x401060	0xcb90	0xbf90	0x544
lstrcmpiW	0x0	0x401064	0xcb94	0xbf94	0x545
lstrcpyA	0x0	0x401068	0xcb98	0xbf98	0x547
ReadFile	0x0	0x40106c	0xcb9c	0xbf9c	0x3c0
lstrcatW	0x0	0x401070	0xcba0	0xbfa0	0x53f
GetModuleFileNameW	0x0	0x401074	0xcba4	0xbfa4	0x214
CreateProcessW	0x0	0x401078	0xcba8	0xbfa8	0xa8
GetEnvironmentVariableW	0x0	0x40107c	0xcbac	0xbfac	0x1dc
GetDriveTypeA	0x0	0x401080	0xcbb0	0xbfb0	0x1d2
GetTempPathW	0x0	0x401084	0xcbb4	0xbfb4	0x285
GetTempFileNameW	0x0	0x401088	0xcbb8	0xbfb8	0x283
SetFileAttributesW	0x0	0x40108c	0xcbbc	0xbfbc	0x461
GetFileAttributesW	0x0	0x401090	0xcbc0	0xbfc0	0x1ea
FindFirstFileW	0x0	0x401094	0xcbc4	0xbfc4	0x139
FindNextFileW	0x0	0x401098	0xcbc8	0xbfc8	0x145
CopyFileW	0x0	0x40109c	0xcbcc	0xbfcc	0x75
MoveFileExW	0x0	0x4010a0	0xcbd0	0xbfd0	0x360
SetPriorityClass	0x0	0x4010a4	0xcbd4	0xbfd4	0x47d
MultiByteToWideChar	0x0	0x4010a8	0xcbd8	0xbfd8	0x367
WideCharToMultiByte	0x0	0x4010ac	0xcbdc	0xbfdc	0x511
CompareStringA	0x0	0x4010b0	0xcbe0	0xbfe0	0x61
WriteFile	0x0	0x4010b4	0xcbe4	0xbfe4	0x525
GetFileSizeEx	0x0	0x4010b8	0xcbe8	0xbfe8	0x1f1
GetLastError	0x0	0x4010bc	0xcbec	0xbfec	0x202
lstrlenA	0x0	0x4010c0	0xcbf0	0xbff0	0x54d
GetProcessHeap	0x0	0x4010c4	0xcbf4	0xbff4	0x24a
HeapFree	0x0	0x4010c8	0xcbf8	0xbff8	0x2cf
HeapReAlloc	0x0	0x4010cc	0xcbfc	0xbffc	0x2d2
lstrcpyW	0x0	0x4010d0	0xcc00	0xc000	0x548
HeapAlloc	0x0	0x4010d4	0xcc04	0xc004	0x2cb

ADVAPI32.dll (8)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
RegQueryValueExW	0x0	0x401000	0xcb30	0xbf30	0x26e
RegOpenKeyExW	0x0	0x401004	0xcb34	0xbf34	0x261
RegCreateKeyExW	0x0	0x401008	0xcb38	0xbf38	0x239
RegCloseKey	0x0	0x40100c	0xcb3c	0xbf3c	0x230
CryptGenRandom	0x0	0x401010	0xcb40	0xbf40	0xc1
CryptReleaseContext	0x0	0x401014	0xcb44	0xbf44	0xcb
CryptAcquireContextW	0x0	0x401018	0xcb48	0xbf48	0xb1
RegSetValueExW	0x0	0x40101c	0xcb4c	0xbf4c	0x27e

SHELL32.dll (2)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHChangeNotify	0x0	0x4010dc	0xcc0c	0xc00c	0x7f
ShellExecuteExW	0x0	0x4010e0	0xcc10	0xc010	0x121

SHLWAPI.dll (3)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PathFindFileNameW	0x0	0x4010e8	0xcc18	0xc018	0x49
PathRemoveFileSpecW	0x0	0x4010ec	0xcc1c	0xc01c	0x8b
PathAddBackslashW	0x0	0x4010f0	0xcc20	0xc020	0x30

ntdll.dll (6)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_aulldiv	0x0	0x4010f8	0xcc28	0xc028	0x4fe
_alldiv	0x0	0x4010fc	0xcc2c	0xc02c	0x4f6
_allrem	0x0	0x401100	0xcc30	0xc030	0x4fa
_chkstk	0x0	0x401104	0xcc34	0xc034	0x502
RtlUnwind	0x0	0x401108	0xcc38	0xc038	0x396
NtQueryVirtualMemory	0x0	0x40110c	0xcc3c	0xc03c	0x135

Memory Dumps (2)

»

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuild	Bitness	Entry Points	AV	YARA	Actions
ls_appdatasample.exe.exe	1	0x00400000	0x0040EFFF	Relevant Image	-	32-bit	-			... Memory Dump Actions Download Dump Go to process Go to AV Match
ls_appdatasample.exe.exe	1	0x00400000	0x0040EFFF	Final Dump	-	32-bit	-			... Memory Dump Actions Download Dump Go to process Go to AV Match

Local AV Matches (1)

»

Threat Name	Severity
Generic.Ransom.GlobeImposter.06C82D8E	Malicious

C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\base.js.badday

Dropped File

Text

Malicious

»

Also Known As	C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\base.js (Modified File)
Mime Type	text/javascript
File Size	1.22 MB
MD5	1414453de185e6fdab095f40d305405c
SHA1	4d74c4dd846a3aecd089040e997d5191b1ba978d
SHA256	dbe14194113ddae9c032fdc503f3de41fe8a387ef427a505650154bd3828976b
SSDeep	24576:A1OvYpOS4ihdJbeS7NyVtybwuTfCzlOc0tU:AtOSxdISI3uTqzoBi

YARA Matches (4)

»

Rule Name	Rule Description	Classification	Score	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	4/5	... YARA Actions Show Ruleset Show Match
JS_Unicode_escaped_bytes	JavaScript contains many unicode-escaped bytes; possible obfuscation	-	2/5	... YARA Actions Show Ruleset Show Match
JS_Eval	JavaScript calls eval function; possible obfuscation	-	2/5	... YARA Actions Show Ruleset Show Match
JS_charCodeAt	JavaScript references charCodeAt function; possible obfuscation	-	2/5	... YARA Actions Show Ruleset Show Match

C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\ui.js.badday

Dropped File

Text

Malicious

»

Also Known As	C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\ui.js (Modified File)
Mime Type	text/javascript
File Size	2.91 MB
MD5	2b5b77e2d09cf8291c66e04f58f78789
SHA1	62e4fda3a44e8364a3583e72657679c60754da81
SHA256	56b1232ea12c444079f94dea3477eaa0266d03038fbc5ea2efb7f9c22e45d76e
SSDeep	49152:IKyz0df29LxuRhWLo29OXb8yh7gFO4xWPS4GXS4qhLJYv5uRziVCVaGpwWck52d:IKyHrIrZgmJDRzcCM

YARA Matches (2)

»

Rule Name	Rule Description	Classification	Score	Actions
JS_High_Entropy	JavaScript has a high entropy; possible obfuscation	-	4/5	... YARA Actions Show Ruleset Show Match
JS_charCodeAt	JavaScript references charCodeAt function; possible obfuscation	-	2/5	... YARA Actions Show Ruleset Show Match

C:\Windows10Upgrade\appraiserxp.dll

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\appraiserxp.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	450.12 KB
MD5	5eb6ba9be43dce1f423043a436830853
SHA1	a9617644817d5d09c766af6da4b110ed243a38b3
SHA256	829f461e7e739b4937eec896a0d01834aab19054bb9ebaf797ed5fc6ebeb6cad
SSDeep	12288:NnhHnbzf4/ClRYoN6q8R01W8SdUalV3GSkWU+ion8sC:hpfQ/ClRX6qvE80lV3AWioHC

C:\Windows10Upgrade\DevInv.dll.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\DevInv.dll (Modified File)
Mime Type	application/octet-stream
File Size	323.12 KB
MD5	541e9f4cf5ead9a9db7171ed97fc4ffc
SHA1	e8e62b5246bd5fe7460d158c3638860d2ab7b953
SHA256	08432205bbfcfc7345b536569d991ca0f2b1a79ddf07af2ca1b3c182550b1a9d
SSDeep	6144:VtDr5awZcakghmewAlWTY2up+MO0S92jIR0ioY+vo8Da5z1dJtOk1ov91dhS:VZFk4nIRV55sdhS

C:\Windows10Upgrade\DW20.EXE

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\DW20.EXE.badday (Dropped File)
Mime Type	application/octet-stream
File Size	629.62 KB
MD5	288d3dbf5f62baeff300a26b52251164
SHA1	eeaf7610e82c393256b78aa1c70db4137bb83508
SHA256	3ec9adf4080541ccc75844c9b7df2e839002033570408d0101a4df7a29dfb46d
SSDeep	12288:PtPi1dJqki/V95q57qXnQ0dnyJNHve0RAwgHBrWfrSwm3OaTSkzqFe9pGJp6Qa2:PtPi1dJqkid9GSQ09ybHven6SxeaTSkG

C:\Windows10Upgrade\DWDCW20.DLL.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\DWDCW20.DLL (Modified File)
Mime Type	application/octet-stream
File Size	49.62 KB
MD5	fe55a6f4cb7b85ce7c7e356b3024f332
SHA1	c958d429996ea15c015891e361e14149f2226bc9
SHA256	b7b2c06da154b0980874257877083dd791f7fb060cc1e9152bef76aa3b432bc3
SSDeep	1536:ydovyT40jWSJHYwo4osqFHmQBBjDG8EhsibVdB:MOgMSJ5fWmQH9OsiZv

C:\Windows10Upgrade\DWTRIG20.EXE

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\DWTRIG20.EXE.badday (Dropped File)
Mime Type	application/octet-stream
File Size	45.62 KB
MD5	42678722089a98070ee22b885f6fa9c4
SHA1	8c98caa69fbfad1f0fbbaeebae992cb264f6717f
SHA256	f514e422da4fc4ef4a3b7059e469b7c96c58acd09ac2da195137df312f14496b
SSDeep	768:di5WpHQTsoFAFYaIylkOZMAE6x+iI1Hq6gxmk2hskMo8+6WohMdFzG:di5WiomyYclkOZbEDiaH4mk2vxzoGd4

C:\Windows10Upgrade\ESDHelper.dll.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\ESDHelper.dll (Modified File)
Mime Type	application/octet-stream
File Size	68.12 KB
MD5	66b8efb14428488cafa3d511795195b5
SHA1	84ad92f07fb9b7da4b6cf3b38fed4ba928a83f22
SHA256	557b65e67af74ad36a443e466b05f6a91feb854790b926e88aab940c7f140510
SSDeep	1536:Zy1oXug5lSaI3ie3ENczs0oLr15ZlObwWrD95EbfI:qaciGzs0oNLzWH9+jI

C:\Windows10Upgrade\esdstub.dll.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\esdstub.dll (Modified File)
Mime Type	application/octet-stream
File Size	40.62 KB
MD5	6103d491ec1ff0923edee1d57b441ca6
SHA1	09fa6f4de012e2ce197a8d0485e497abf75ba801
SHA256	701975867d40500edbc3b89204fdc93e8c7b220265d5dfd44aee3fe4004668bc
SSDeep	768:AgcoDjncLdVDDEZvT0L5Vqihazb6wHIezh:APOvINVqHGA

C:\Windows10Upgrade\GetCurrentOOBE.dll

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\GetCurrentOOBE.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	141.62 KB
MD5	1090b78ee07a39677453e5e018680107
SHA1	155399fdd1523765ea09d3b2530018a251c21fbd
SHA256	80ffc12694dc2456ddafbc60c53c76285be22cbf64b6631da0ddb8cbf083f9a0
SSDeep	3072:6cuWjpPRP/ogCJO6MxlfjuGCG6jQmb1sdu2yQw5Xf:rd/cwLGBb172y95Xf

C:\Windows10Upgrade\HttpHelper.exe

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\HttpHelper.exe.badday (Dropped File)
Mime Type	application/octet-stream
File Size	28.12 KB
MD5	34c1488040a07016efa31702835735f0
SHA1	b933a0ab85d4e886d2e11abb967d523b3c889af0
SHA256	1e13b3b93cc6692ddfedd035daccba4480b64656346858a4f040bcc3b0a0eff4
SSDeep	384:Q0YtmDPHtZRHpbSTs1UY4PtCb3Kmqr80aq0GftplnM4jbTMwUN5D+PGni34+SzV/:jlPbRHvUYiIakiGqbYPN5POgz5

C:\Windows10Upgrade\PostOOBEScript.cmd

Modified File

Batch

Unknown

»

Also Known As	C:\Windows10Upgrade\PostOOBEScript.cmd.badday (Dropped File)
Mime Type	application/x-bat
File Size	1.50 KB
MD5	c2af07a573470641bee3bbade392af7f
SHA1	2aaa71839fcdf1f268f5f5760d8b08adc866cfbb
SHA256	d798333dd9005e30354318309eb2055adfaef3ea6a8e1534a94a06a93e02fdad
SSDeep	24:39MnYHKd9EX/lBfQWVvdGtIoIyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVrq:39+YFV8tIbyzhQegGLJmBHY2IyVG

C:\Windows10Upgrade\upgrader_win10.log

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\upgrader_win10.log.badday (Dropped File)
Mime Type	application/octet-stream
File Size	21.00 KB
MD5	5ad4498224c95257d304f865b3fa4c89
SHA1	15cad1f9ddf2fb74094d9bd4c4a3061dd8942864
SHA256	c6114ae4dd7490078186f8e8cc453b976d82a1990d014735626ca9c709f8d5e9
SSDeep	384:aWYTUwFR6RGjbjFrJC0epRyfasYjPeLH5iKtFc/XkzVk:aWsUwORGjbRJC0eSasYjYHlAkzq

C:\Windows10Upgrade\wimgapi.dll

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\wimgapi.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	545.12 KB
MD5	abd9f99415b1488c3f22838c6f4a9866
SHA1	51477e30aff85f1e3eb9164d7d4a4a3c62050201
SHA256	b22d01bd1387b7d6651970baba5371c77fc7fded9df2dc0c1e95ff78c58e3ae0
SSDeep	12288:2rfRgDwF1b28VYOY9CpbDJ7JfhWSZj5BT9fmz7/hlwhcfP:ZwF1jVYOY94DhJfhWOzT+7Yha

C:\Windows10Upgrade\Windows10UpgraderApp.exe

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\Windows10UpgraderApp.exe.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.35 MB
MD5	f6126bf7094f9bf1d85fe1a7dceb54c6
SHA1	4b2c2bd02cb46842860838fde96ad0ea21f7fdb2
SHA256	274b56d5b1aef0c71b6f75479a7b54ec59a89fd36bc0e0ad5d48e34ce34bbc5a
SSDeep	24576:9h6dSsWLLuY0CnlvQwY3SnkojHBDBCWIO6Nb4eO:mdSOV/3qdh0WV4b4eO

C:\Windows10Upgrade\WinREBootApp32.exe.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\WinREBootApp32.exe (Modified File)
Mime Type	application/octet-stream
File Size	25.62 KB
MD5	95f44240200a3c0e72f25a00e8784fc9
SHA1	e7cd2b633c3edeec71e546263bbf1d95ca1b4b00
SHA256	a74bc16e4814b4b75ae564227374fa537a5dcc6d5609f3560b4ad53513a09586
SSDeep	384:d5zElQfac/l2nZKCR0EssGGXTMq0GftpBj8W3E+XpnQMIk0SERMwxJ4zVU:dmOfa0lCoC0yDuiF3XXpnTIk0SGMxzu

C:\Windows10Upgrade\resources\hwcompatShared.txt.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\hwcompatShared.txt (Modified File)
Mime Type	application/octet-stream
File Size	806.95 KB
MD5	3f78d6d3dfc7ff0a66eb4ea4635a6077
SHA1	c13a3fb3e4d9c74b093873a02b2539044f5f8609
SHA256	ac0c2ac3f2f694b49695431175fd9fd59d009790f4acf0d85114c2f2f23f662e
SSDeep	12288:58TJvvISo2QrDfB3KKbrorJHlSrd2aUYUvwiqcLFb:mRvISvc7hhPQJHlS8GUvaQb

C:\Windows10Upgrade\resources\ux\bluelogo.png

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\bluelogo.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	7.84 KB
MD5	da424db542877b588378a45af41ad330
SHA1	7e29c91b71f4ab5e030ef34d4be53231a36c7cb6
SHA256	dae891bed7533e0f372611bca2e8abfedede3c6d2f4bca461ae5b146e15adb07
SSDeep	192:X6gvHhOADdJDm2kyLGlx4Ja1UjSQbtVELEPrNB2BaQYi8n9+BVdA:XrHEAyhP1UOQLEy+aQYizVy

C:\Windows10Upgrade\resources\ux\bullet.png

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\bullet.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.14 KB
MD5	2ad4e075354cc8e0f4145c2f73da6bc9
SHA1	88c377155d10fcf04edce7d16f72b40081df9e5f
SHA256	53aee160d9f45cee719f2e6566c2a5656c1f1da4db51392c2c1d024d32424809
SSDeep	24:2O95fJGpqi4yzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVpK:9Tspt4yzhQegGLJmBHY2IyVpK

C:\Windows10Upgrade\resources\ux\default.css

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\default.css.badday (Dropped File)
Mime Type	application/octet-stream
File Size	6.56 KB
MD5	41ad1ed16404abf512230a158633b882
SHA1	95a59b6aa05f8ab0f5a68360b8465e1e3c5b0699
SHA256	fd1be1ab41030c502337853fed4eb7046e4212e1900c3a960c618e5a60b0236b
SSDeep	192:EqtlGROBbDwBk4xTGq9mP7QTxf0wtGfGHjFrtPailMd8n9+BVQ:btUR+V4JGcmzM009xrtPayMdzVQ

C:\Windows10Upgrade\resources\ux\default.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\default.htm.badday (Dropped File)
Mime Type	text/html
File Size	62.00 KB
MD5	5cbaf9683b6e937bd42bbc9bd10fee4c
SHA1	f3497c5678c612e209371056d84d0eb5532359b4
SHA256	e34f6de5ea108fdf0f5889d1d2bc3545667c2f449c46a12b8388a5d8bb8e5ec6
SSDeep	1536:FVq7akbhEa7xtkdL4+Ydo0TbCqFkBm0TEnsR9knGDRszxn01DSnWnU96BySTAxvp:FVq7hbmdL4+Ydo0TbCqFkBm0TEsRinG0
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\default_eos.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\default_eos.htm (Modified File)
Mime Type	text/html
File Size	55.48 KB
MD5	efd0e6ce87796e1bf882e305ec8b2635
SHA1	0ab539553a9cccec989811f5cc3495b89541bd0a
SHA256	88ff5f1946d8d632b55c4fd14a09b951d381abbb6d5add555328be72fc59aca1
SSDeep	1536:evu3niYPkczhYU009+suk1lnDWt1SunNE4B193Vq1m:evu3nGGhYU009+sn1lDWtsuNPB1q0
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\default_oobe.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\default_oobe.htm.badday (Dropped File)
Mime Type	text/html
File Size	65.09 KB
MD5	516cddc45e71ec57a92af6baff7bd0ce
SHA1	ccfc052ef62f7ff5b0ba27d063f2b6b41a341a27
SHA256	b411e7b8c3c40beab9c31f165ff706ad527f9016cde3d62826bb341d4174dbc6
SSDeep	1536:GjSebkjkISe6tOaZDjzOpntkSBn01e1evnUNw9agGVCs8lb:G+jVSeruDjzOptkSB08wvUNQagGVqb
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\GetStartedHoverOver.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\GetStartedHoverOver.png (Modified File)
Mime Type	application/octet-stream
File Size	4.91 KB
MD5	602f50bc8fe098eb0a2fe34fb11eb742
SHA1	2fd498fbbc0b7fb7fb4b3cb5646708e81dbd30e9
SHA256	9b78f6ffded7e7417273c953e08eb66822bdc4e866865a2140de7d0079870750
SSDeep	96:tog6pdYTZEnJ9LeZkYcPGKyr/YsL1IiZk/6EffmYOhrlRhP7WxX8fgG9mB4JyV4:tQ79yhyIzLx2/JfmYiBPiV8n9+BV4

C:\Windows10Upgrade\resources\ux\lock.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\lock.png (Modified File)
Mime Type	application/octet-stream
File Size	4.52 KB
MD5	9545db8d948a66fe8f70b402cd99022c
SHA1	60c23c31273daf196f0209139d4abb1a79789f80
SHA256	5c2b78a77aed62c92481b9f138d33043561e30f593d1f2048b395189144ec852
SSDeep	96:vjCHmGzcjjVA9o9L+Q/2Xg7dvF3t8j8fgG9mB4JyVT:LCCjuIOr8n9+BVT

C:\Windows10Upgrade\resources\ux\marketing.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\marketing.png (Modified File)
Mime Type	application/octet-stream
File Size	1.41 KB
MD5	95e8ecd42655a49008323df7a290f3c2
SHA1	f59e38d6f4c1d3576b2428180e1be59ec70122f0
SHA256	f6ced1c1ae1bd839ff1d8e7f85494991f468d8c29e1a2d376c566a9cf817b8a4
SSDeep	24:gPojnU9L7bgOLHfuUTfO23vM/5xNTi4yzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdv:sHEOrfBW23vI5XyzhQegGLJmBHY2IyVh

C:\Windows10Upgrade\resources\ux\NoNetworkConnection.png

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\NoNetworkConnection.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.05 KB
MD5	29a1299fbb254e12ab6364847f73aac2
SHA1	f951f24282cea7daf6013d195f70cdbd27bcffd8
SHA256	f592385088bd048789d552eb1c60fbbef49ac21bdcb0384b2302989fdb84f796
SSDeep	96:SoYSdZULi+1MyTtMhbn0UcItWx1qjzHc8fgG9mB4JyV/:nYSd+W+FMNny71Sc8n9+BV/

C:\Windows10Upgrade\resources\ux\NoNetworkConnectionHoverOver.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\NoNetworkConnectionHoverOver.png (Modified File)
Mime Type	application/octet-stream
File Size	3.09 KB
MD5	1de67a5ec9238e9fe7e2ce3fc8355a63
SHA1	63582c341a7fb72dfb1faf122574082ca19e1dfa
SHA256	fe034977ee435df28894d0f69fbde9fd385150e1ce5d9d937e7e49cd24361b7d
SSDeep	96:79ZnUHll1HBFsJwsqnlnXVJQ58fgG9mB4JyVkx:7/6NFJsqpXVJc8n9+BVs

C:\Windows10Upgrade\resources\ux\pass.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\pass.png (Modified File)
Mime Type	application/octet-stream
File Size	2.70 KB
MD5	a0b91ea548d8ebc66a8741fd90435d29
SHA1	6a17cb0f8c381cb4ec4cf65f46e8b5d6d4e86d4e
SHA256	ff1919cb3e62fa44749817878ed490d7698a5793fb188459255ba02b01ec6183
SSDeep	48:dTXDoElJCxBFtpjD+x9mFFPCPKd8iXqV7c24yO3jUeSk8yzhQegGLJmBHY2IyV6:dXDo/xD+fsd028H7c2KUeSk88fgG9mBO

C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\oobe-desktop.css.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\oobe-desktop.css (Modified File)
Mime Type	application/octet-stream
File Size	40.92 KB
MD5	7d4b469c1e5f8c257b0d3c7e770a2711
SHA1	ec76abbff124bba315be7dd3a7b98646b2fa80a4
SHA256	5f36c6184e7a8950c74fe8b50bfae159daeb6a34af1aa07547777f352997a691
SSDeep	384:8rz9ZjlkSv9Jg4axmqsDQdI4mcyBGbMybMzaTfFP3tgYSmKSjq+MNf2cVZFibZHC:8HRR/grmhcyBG9MzcbZyfTVZN8riwz+

C:\Windows10Upgrade\resources\ux\EULA\EULA_ar-sa.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_ar-sa.htm (Modified File)
Mime Type	text/html
File Size	108.78 KB
MD5	8bcf66dccc57ce5a19a8027b8e0da6b5
SHA1	a7cd262f409cd292fdf71353e1225da9dc60add9
SHA256	eb83a9a787ff9e9934317e82563c8a21dc90838d4d7f8b38e7b01dc0e435c25d
SSDeep	1536:mQTjhZgNsW/nURjwjn5tQZH1dDo0pZLihEzQVIpqgo8+YAR6eaBBvVnUJ/gX8RDT:jT2AUIo0vLih8LvVQLJ8SDHhB
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_bg-bg.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_bg-bg.htm (Modified File)
Mime Type	text/html
File Size	248.44 KB
MD5	13904263d9cfe08e13526372f9fb2d7b
SHA1	7a0489907db222b8cac861f88b2414fb32a711a2
SHA256	2d86693fc4413cd3b1ac45918a6d5d842d5878d4bbd8a7456a6aec525b5cd755
SSDeep	3072:r2qKWYLg0V2PDo80wIUvvOV9Yp0juZKngQK/h4FoJ3iJ+keDU:r2qKWYzhOWV6NX5O+6
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_cs-cz.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_cs-cz.htm.badday (Dropped File)
Mime Type	text/html
File Size	82.30 KB
MD5	79dd5de8f90a12e66b07e832463fce6f
SHA1	12fbb89dabef70367feac56560653883f20e02a2
SHA256	ce70c711a829a56f2ed5aeca3ef80eb3775d29234da8616655821c53c7f6e72e
SSDeep	1536:DjVYu7tapDvpAVgrkDyu9aE0mAMrrPl660gq9+Gdg7IdhSxRmQO/LeiPcQSRb8pj:DjVj4pDouMCQGIxEtaBzNX3cWMBs0
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_da-dk.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_da-dk.htm (Modified File)
Mime Type	text/html
File Size	64.57 KB
MD5	9411ef35654109bdbf8b417a52a405b7
SHA1	584c4da4e95a7ebdbb814c1e9b4bbc5f624ac263
SHA256	36fa9393245162283c94420e6b8fb898e6ac5694b86e42fba1fd4d33ddc57417
SSDeep	1536:hRySTVM4S79aEMwnZVpEb9fw2OUYBHmo5ghwPuZptjJ/CaGwP8+Y2TXYaQWOaUWn:hYSBQ39QfP8Xw
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_de-de.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_de-de.htm.badday (Dropped File)
Mime Type	text/html
File Size	69.73 KB
MD5	7a295c350ab0e6afb9190b3ba05bc5ee
SHA1	5948de79f515fce9e24210f7580ea3f2f53b7525
SHA256	eb9cd94c24c4de4159ebaaa383fb8267a7cbe0fa375e0854b1a40fad454420ea
SSDeep	1536:bLYM4Mz8ds462b5nDfr0Xtoj9+atDe83KMRKYCqbmdR51DxJr9e044R5HYGWvgGz:nX6+cAYods4RNYG0bQs8/Wr
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_el-gr.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_el-gr.htm.badday (Dropped File)
Mime Type	text/html
File Size	234.76 KB
MD5	50b3b20cc34ef7521964de2f77e47a7a
SHA1	2c47be044d849fc42262b03e18b329fb16ea72e3
SHA256	632861559af63a630a7e6ea885244031b92da967aab2dd5c5878f93e0fca5648
SSDeep	3072:rlASGwH6JmGg2XEPyNemHIsfe7/PVSxdGJQSD3TyMntHI:CSG/Jg2jNXvra53vto
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_en-gb.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_en-gb.htm (Modified File)
Mime Type	text/html
File Size	58.10 KB
MD5	2c2610b1a723b2ae329b2e7616d86525
SHA1	e2f41ba0fefe9dc04fe6ca64924ef185242f724f
SHA256	8dd54b52726696c97972f4d9d690c092753151109d20d736722a17f0e7ca57f3
SSDeep	1536:oRAeOg1JxtaSN/Bo/xftrYHpbAuIgCPszcHbGMavtHV3hemUswG+Z0BVPjLsGSk5:oRAq5CUYGqtHPFC
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_en-us.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_en-us.htm.badday (Dropped File)
Mime Type	text/html
File Size	58.10 KB
MD5	b038fe660958bff4f1e1265d982b9299
SHA1	27f40a509c26f0ac873d0dace096b1c35b8dce45
SHA256	2608660f0c23763420fa00408cb98372684e409a0d75e5cc6e34564ff563184a
SSDeep	1536:SKv/Dg1JxtaSN/Bo/xftrYHpbAYh0sf/01TpbGMavtHV3hemUsTygvMHBVPjLsGD:SKvCuisYjygvMuHicuGA
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_es-es.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_es-es.htm (Modified File)
Mime Type	text/html
File Size	69.11 KB
MD5	40853e96c8f10d8d6d38d195057bef8f
SHA1	96eacb709f9e1b9377668a06a2dce965aea67cd3
SHA256	bd186375292240980ea4b2834c0808b649a67181defa4df03d10dbf2b170a5d3
SSDeep	1536:G5dcxV1NILDBgpCCzDWLQ2fc9JVoEunZh7M0/1CGSGWrLwNkSU7A5rfq0h7g6OfC:Yddk9JiCGqSUEY0h7DSMmP2
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_es-mx.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_es-mx.htm.badday (Dropped File)
Mime Type	text/html
File Size	69.11 KB
MD5	8444a0953f7099a5f64b15335f56cc23
SHA1	1f5042b1a5ec021a419445c957592d863aae831b
SHA256	98d4479340e3d05efa7bba350c8baa330b03797916579c45c22e3107745bfa9c
SSDeep	1536:65+lgg5FxV1NILDBgpCCzDWLQ54pr/pUoEunZh7M0/Ll12iIHCGWrLwNkSU7A5rd:6Mlgg5grZPS6SUE0ZhSM15o
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_et-ee.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_et-ee.htm.badday (Dropped File)
Mime Type	text/html
File Size	62.54 KB
MD5	7a2af4a9f960160088709396a9cca77e
SHA1	575b29602682e76e9e9bfd7820cff9430818f9c3
SHA256	12fc74aba9bc2ae64ac7795b17992eb363a640448ed0d1cfc910fe65c533ae33
SSDeep	1536:1OdC00OSgY/TRBm5cMyIYH8fP8qojypmXRhsK5KQc+IWAcTicf0Zp15O3Ov2pcRE:sdClOSxjY/8c8GDM
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_fi-fi.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_fi-fi.htm (Modified File)
Mime Type	text/html
File Size	70.02 KB
MD5	2a95f2d60e8f194ff1dc2387d22d974c
SHA1	aec78ad6d3e4e39a73e2054f8441a8f1d305b913
SHA256	2ff6da4edf4d2a99740831e30ab4430098b270ba02b37c9afab45350ee00940d
SSDeep	1536:AU412we4/B4GW77k0ZAUprmP3V9+/Z5rbFTjF0DW8j7b3yBI75WQ97UbTnEsOlyz:ARMjmPqnF873D8wlyCc
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-ca.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-ca.htm.badday (Dropped File)
Mime Type	text/html
File Size	68.69 KB
MD5	89a3bb10a928d2c8086deb982227bd56
SHA1	48c0ad0dbbb46881a49f2f560175f6eb41a48aa1
SHA256	d3022f06fdf6076f397b07f36fc8a86d8042975a4cde512034e504108cb6984a
SSDeep	1536:lKIUXda06i69uMl7Meo5zpi3ZTTVOJaiVOZJUSSuj8FnyXO/K0ED+AQg/DkyDuo9:lKIUXPaHBUclDu/0MBHuQu1BSuT
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-fr.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-fr.htm.badday (Dropped File)
Mime Type	text/html
File Size	68.69 KB
MD5	6b685990592752d63446a6cf0c877f33
SHA1	9d72992684f474867ec58a0b1a0ff3f6d0733a9a
SHA256	9e33e2dc7e49398367d599aa7332ca14ea934c7b1f2206e8c159d953ea7426cd
SSDeep	1536:cmiCbiIp06i69uMl7Meo5zpi3ZTTVOdN/tj8FnyXO/K0ED+AQg/DfSijF4QWkDls:vxMgcr9TBAyadux1CUpe
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_he-il.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_he-il.htm (Modified File)
Mime Type	text/html
File Size	845.30 KB
MD5	12e4a42f425b24e2cf134a1b54f4c7a2
SHA1	b56baa45db7c2b514ac8c99b7deb30c32393a05a
SHA256	5e62fb3983139be74cd27fefe667caefd7d5992ac14696fd5cc294c5802cebfc
SSDeep	12288:sgFmfo57oFYRr1BE+dni0khcISRAedxYqGjK:HFmQ5UFYRXEkmtSiedqm
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_hr-hr.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_hr-hr.htm (Modified File)
Mime Type	text/html
File Size	64.27 KB
MD5	84318adbbfe3bb9b41d4addc8bc98032
SHA1	62c49776a22796a3ccded68e0cb75d4759385120
SHA256	ece3c05872765c6404638a7c486fa745878ab36f07f0fd07cc2c943e33f7a226
SSDeep	1536:R6En3ZlUgjuI4ZQco6L24kpwklW/dmslDuIIclCCBfhl43ZJLW8lT6gTF/4VUvhq:hKk1lWh03ZhYg7YF7n
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_hu-hu.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_hu-hu.htm.badday (Dropped File)
Mime Type	text/html
File Size	83.52 KB
MD5	68f36889abb492857c7cf04f4d7f3c01
SHA1	66b21f6f447d38254e7ae5c8707525073fb6d70f
SHA256	791d90e7d523c1fc4898b6552ff45589a1747754d04afbe3df39217243600b6a
SSDeep	1536:Lf9p4PAbLquTAAEuKddUUjJe0qr+bdHeIe9+J4dxfwxiABpMB2kHAy9D27whgjfY:LfjcZe0c5xI7BGziwIEWm
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_it-it.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_it-it.htm (Modified File)
Mime Type	text/html
File Size	68.78 KB
MD5	9f5643b0d3aaf032194445830c7a7423
SHA1	1e8c0e2e664a1d858545354022c98bc679be628b
SHA256	96deeaca79e1709d812e0c10ca7ae63720d60e112052c1520b9af2cfa2dc8610
SSDeep	1536:QhUXlmhLZNJwgSvRY+VxACUj28Ge7xF/rFPUUFoBrsE/G0pc+3qxsLGKjCe1GgPM:QuX7/bu76FscfGKog5hrgQ2r
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_ja-jp.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_ja-jp.htm.badday (Dropped File)
Mime Type	text/html
File Size	206.25 KB
MD5	9acf9f84c7782408abab60b6e4f2140f
SHA1	7d53eea167ebe660119eb1ce3f313549e4072a8e
SHA256	0e0978818c042acc1a7491467207fe6b4335539a0135ec3576269042f1272813
SSDeep	3072:u121a8vh5bsGp41TtEUaJHmRhgn5bGFk9OQOp+F:ucvbsk45sJYgnFGFo/OO
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_ko-kr.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_ko-kr.htm.badday (Dropped File)
Mime Type	text/html
File Size	620.14 KB
MD5	e5902d343bd6a8649ec2ba1a99c28cf3
SHA1	6a207ea128c3523342c585636f06cb7c7084f901
SHA256	a24edc88efc8a9aa130c3b1f55d61a1ebd3f2be7c476476fb3769187845fc2a1
SSDeep	6144:c1RNvYUghEj8+RXlF5QhW/7Rjp96IYe2cOdeGy143ftoEE4Wk5G7Un0FblH:c9YUljZRZQhWT96W2cOdeG643ff67blH
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_lt-lt.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_lt-lt.htm.badday (Dropped File)
Mime Type	text/html
File Size	75.23 KB
MD5	d1bf2cb8993889ab41ed8159b5be585a
SHA1	8ebe857e9be61afdbbe75019e1467edfcec5bf62
SHA256	ef3f308a9f793050651467731c7e8a99d5d1e39b6f3c5f4df47fb8a4d665d6fa
SSDeep	1536:HOLZy1uEaQ3KN7jhrQUm56k+dZqMrMQGm0wDodMxc7wFtGdfuz5CTxoVjnMeLHL8:uLZsQdbr29DwzpAy6pT
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_lv-lv.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_lv-lv.htm (Modified File)
Mime Type	text/html
File Size	82.88 KB
MD5	7c81c63d971e789a8fbd838a864d98fb
SHA1	b269c4b09362904ccd3afde47b7d261ee938ef84
SHA256	e640cf456f2c35ceac68a15ac448136e2649d39689d19ecebdcb98238129e6e7
SSDeep	1536:i3Ega7ZaRnraZuL/wog/Pj3DTVxIMMQRFOCycFm/8dgy0OxWJmJqHnX9xAVUMo/R:i3Kr9jTdbHMoxWJmZNHRLO5i5F4
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_nb-no.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_nb-no.htm (Modified File)
Mime Type	text/html
File Size	66.55 KB
MD5	8a404cd96f30717b47b1ad80ae042b5e
SHA1	601dfa19ed51eb8e385a64617514c56b7039b8d0
SHA256	4e6e83fbba5176ca15237cedce695db123969f7c41c564831d637433972aee98
SSDeep	1536:A3LTJjV1AleurzVZJi6kAoAvRuJh2bWdAywOZrkKli+3sjs/SfuUnHKgyTBgb3UX:OTJSMHFzi+I4gywyn
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_nl-nl.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_nl-nl.htm (Modified File)
Mime Type	text/html
File Size	66.58 KB
MD5	b8acd0ecaa2d980ec04830e27a088417
SHA1	8796dd9a3ab84c0ee78b077c05863e88b1b63379
SHA256	97e6df7718de439b5e69ebf5d610b492be3df782e4731ec4c311d66fc6fc73fe
SSDeep	1536:WaBikWvlRTOzJOZVnqR5ybL28m0r6gNvgh7pYqbq5xW2izz3gkH+DLY4IXaPTWRi:4kWxmgxNEELS4Da+
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_pl-pl.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_pl-pl.htm.badday (Dropped File)
Mime Type	text/html
File Size	80.82 KB
MD5	fb6f98804aa5b077eeb6081f6f786c45
SHA1	14f2d38fd35dc9f5e1683c0eb0c652b4a4ca7851
SHA256	8bf7232e1f2e85dbfa2f026ed5aeeed4be5c168c6d03a2bc77b08b6f771bce09
SSDeep	1536:B6fr2eGuXYZ91wL+lOo4YdaxIeQQJVYYCQW4SFyNoqwCkPJcfGVeBEWWKPVFpSYh:BSmYYYHW/pquCOyTtH/
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-br.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-br.htm.badday (Dropped File)
Mime Type	text/html
File Size	67.62 KB
MD5	40b4aa007cbfaec0b0682f342276bc3f
SHA1	8cfb08be2ef1575182b26cd98849cad8a564914a
SHA256	5afb13a0be48c4ecbcb004d25410d14ff56527e70ebcfb15922f126c86e32801
SSDeep	1536:v8DBz2D9xhI39aV9dNUl68w/R5/Vt76RowQJ2SdOfc6HGV1ht2jajRX1ZnK5fG1W:v8mhCowQzL0jawZtm6
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-pt.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-pt.htm.badday (Dropped File)
Mime Type	text/html
File Size	70.31 KB
MD5	6c7e85cf89a24020e5bfdb38ea6f59e9
SHA1	7fa7e8770dcc83ea248727500c80eda9b7ee9618
SHA256	529303fb60a486c5b7f555d00bff0b3e887338b3c1b9def78c50c5bf5b84abbf
SSDeep	1536:npzm4Bqu64lpEYDhr7UNyJcjNEqhCABOh+Qt8LeDFU2MVZWN7veGbV9KEr2+vZbv:npzfBqM7JpqCJbOi8+
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_ro-ro.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_ro-ro.htm.badday (Dropped File)
Mime Type	text/html
File Size	77.27 KB
MD5	f9b72e5671b9de399d32b81cc6c960c3
SHA1	f33bd37ae274ea984d896273bd516b5111b16bd9
SHA256	d54277560f48655a5c185a47a2144518585be1d6e1d96a6b727871dc404b56cb
SSDeep	1536:dM31SLBq3IPirANA7i9OGAUijgdzEgTeArG0wM4Xy9IgBGnCZxvJefnO65ds6IVg:m1TUiGJt4X18p16E1MeW
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_ru-ru.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_ru-ru.htm.badday (Dropped File)
Mime Type	text/html
File Size	278.12 KB
MD5	c8d9bb77191d043a4b8393cbbde0065c
SHA1	5f4bce1ec235156560a1e560f2aabbe1f0427fc1
SHA256	1060c9ae0914a0b1341e78fce1f5a3b3911c3306b0ae8895245aaea1549ba372
SSDeep	3072:4BJ5iho41rU41AJEl/ytqTYXJ3Cc8nmDfCn0lgJMEE:af3941eqywYJ/Em2qEE
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_sk-sk.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_sk-sk.htm.badday (Dropped File)
Mime Type	text/html
File Size	80.97 KB
MD5	944c12398c91437aab2304b36a9bff85
SHA1	4351529477b77d82fa4a52b8aa08ecd2d133d5d3
SHA256	1627b2e855700475fad7963a7e2112a5a24de2cf70d12042f6c702a714d608a8
SSDeep	1536:V+o1WWTGfcovLMS1M78hIVPwxU177S6zEMkTWDWcrRP3Qd1axIUt138+pJ9y7a4P:Vv1xuS177S6zERgPU+0nvqY
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_sl-si.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_sl-si.htm.badday (Dropped File)
Mime Type	text/html
File Size	65.53 KB
MD5	993b1c963dbd7e6f91f3f8aaf7fa1d7c
SHA1	96a638502b727eae234acad4b8fc8ff14d2c9fe6
SHA256	c1253dcb55638b82e451b552a7fed23202a66aeb4fe0e707652247f59aed780d
SSDeep	1536:yL09DcqaGlT34yU25bRUg2g5eTOlHrEuIQPWZ9F/dEpNNA0m1Qui4owxn7QkvglO:yw9DB5eal4PQRpN9BHjW
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_sr-latn-cs.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_sr-latn-cs.htm (Modified File)
Mime Type	text/html
File Size	74.70 KB
MD5	b496a5833678f135ba7343df1a0fbca6
SHA1	6cb2a50027fa2163e62af39433c57a173c359375
SHA256	1347ab16eccb011dc498edbffd8572d0a8f76ba007398b66c87c71ab87c3f1e1
SSDeep	1536:TGBp1zrG7LZbpV9L9r6whU/IxYMtthELrgnC3Sl+HBTrZEXuw/hBoiGFYsepS8js:WgkBTmIFNyTpjarF
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_sv-se.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_sv-se.htm.badday (Dropped File)
Mime Type	text/html
File Size	69.67 KB
MD5	3c285dff2dad9cf55d46271bbaefafd5
SHA1	6ed646c4fe7694f573d8d418978a923818f0d5ff
SHA256	4ea6002cee49c2dda7e6dd240e002da1fa6f3457b1185f511d9946cf09d175bf
SSDeep	1536:Ey7oIVp+/QYrr8ZcbCZ7wN91HsNp8t55cepXKiMW3wRmBFD1P9vIeHuWchnaUjc7:Ey7AseDUyPj
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_th-th.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_th-th.htm (Modified File)
Mime Type	text/html
File Size	249.11 KB
MD5	ee688296bb6db49907b8be43dec94b31
SHA1	50e8f7f71d2c45b49d7c9e8cabb8f85d19fa2799
SHA256	5515631829e4e24d435d6f1e46ea69847258208483bd6d215c32bf7b1df0a1c3
SSDeep	3072:N7aBW61bTnKCiFKL4DvB8DRcAkM8eYVschosrPQcS3f+3ZU2MSYEyvb:Nx68DZERpYVscOEPjt3ZUa3M
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_tr-tr.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_tr-tr.htm (Modified File)
Mime Type	text/html
File Size	74.30 KB
MD5	1238cb019e7d83ba10f773351409e8cb
SHA1	5639bd6a8c173c88ea1664e5ad21625d8ce6af2b
SHA256	b52ce46d2890ff1885d510088cedb27dfb2b155ad1c89eecad2b3c2c26aafc4d
SSDeep	1536:Dn37z9dG7GHrOky8O1XhvwqZkapF2rJo2pmMXKOh7AaCb9B0LNDk2EGuOUWDhSG/:jr587AmxQ5Nbzpv
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_uk-ua.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_uk-ua.htm (Modified File)
Mime Type	text/html
File Size	261.41 KB
MD5	d0bc2d8eaf18f6575da82622edc12550
SHA1	533cedd2c91622c9ad816bb2df083cee9bf63770
SHA256	fa1f13a7a5a235fe64950bd44618028b66fa5ae3908cdeba94c7b07ace38a09c
SSDeep	3072:6/4xggpceDfncFk/r7ALAgAk5XmzljgS2N5PIS97ex4:6/4GgpXfcu/r7AsqRmRUSgP17W4
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-cn.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-cn.htm (Modified File)
Mime Type	text/html
File Size	124.20 KB
MD5	47c1a3ae487e80d20ed8f62ebd076678
SHA1	d9ca23431a1bf106fb1c3f24a62f8f0569f99205
SHA256	a6a9a89641d568fbdbcef145565b129392e85269d3af5dfab0fe82e5b8f9aafb
SSDeep	1536:ynArLwlEXx7cbzyEtEv+R/jYKosaj6d9iUnatw1eLVb7rqP16SgfxbYgI3wNUHwu:yxNkuHiUn8vBY/wknELuV
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-hk.htm

Modified File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-hk.htm.badday (Dropped File)
Mime Type	text/html
File Size	144.61 KB
MD5	16a1d31a2767eda4eadde79bd0c5e8a3
SHA1	251b1f6111a42f4602d737ea3a759cb228de46ce
SHA256	8dc6d60cf1d9486eef662645c51d607f7abee66f7a2f2d1ab7194148e0910853
SSDeep	1536:V8/YHENYriyBiTrMCVabNpwpT3qhczaQrBDQBcwkUcvkSdlbDeNFzL2R/Y+BTr5X:m/YHqxT00rxXUuSpwK/AKgb
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-tw.htm.badday

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-tw.htm (Modified File)
Mime Type	text/html
File Size	144.61 KB
MD5	cd4aaa979027c9158528cdcf80192680
SHA1	c4f8cd07d7809281c4e29a0cbbd46e30437ed3c2
SHA256	811247e53a5ec4a22b19504b07014957592feec1f60222a584ea447508f21afe
SSDeep	1536:2hGu9Q0riyB+uCVabNpwpT+clZxDQBW82yvkSdlbEFwfxVL2RvAhhBTr5BT8VYzv:CGdXKomxZ7aT8XcwMYD
Parser Error Remark	Static engine was unable to completely parse the analyzed file

C:\Windows10Upgrade\resources\i386\hwexclude.txt

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\i386\hwexclude.txt.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.14 KB
MD5	ebf89d24a776b91f61ba79b3bf4e73a4
SHA1	3c42c259dcffa7f34da708be80dbedc766c47164
SHA256	5db8e4ad474158f134572484931b8db18e35b38f1a0ce5717f7a04cf5afd0afa
SSDeep	96:jY+KH5pm+yOxFtbVQQRKkWWAKG/5L8fgG9mB4JyVQXri:jKHbm+yEtBQQRwWA5L8n9+BVQm

C:\Windows10Upgrade\resources\i386\nxquery.cat.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\i386\nxquery.cat (Modified File)
Mime Type	application/octet-stream
File Size	10.55 KB
MD5	d78d98ea291c3930d5296f1ba711af1b
SHA1	30ac02f43b180ffc06650d332b4358e3b5312e34
SHA256	23fca866a59761c2a4dd6eee67736c7965e40d41f69ea7c7769466d12d4a08ee
SSDeep	192:d7mCxmQDm7Htv86uOyXjgt1KST00jol+ZqAU6YZts8OwpL7W+Kdg8n9+BVh:8Cx5y7HtvKXjgjKS0h4ZQVOwpL7mmzVh

C:\Windows10Upgrade\resources\amd64\hwexclude.txt

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\amd64\hwexclude.txt.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.19 KB
MD5	da734ad77b58adad7a0141e675065c54
SHA1	507867452979d10b1bd5ce80befe601fdac27366
SHA256	21740641c70db487e02aa891e6990b6ea796ff632edb93d47b63198a75cd9d8a
SSDeep	96:DL/xFCrWA6BDzbqw6dUb7924n5CvxC8fgG9mB4JyVB:n5FgWA6FOE7JoC8n9+BVB

C:\Windows10Upgrade\resources\amd64\nxquery.cat

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\amd64\nxquery.cat.badday (Dropped File)
Mime Type	application/octet-stream
File Size	10.60 KB
MD5	0f126c03a025609a5982555ca3eb88ce
SHA1	d935c03299466ee8fc00fda70a2c2befb175c1b1
SHA256	b63fa9da163f75b8621d8487820659477b00eecc8ab70184f05bfd7ef6114d52
SSDeep	192:mJ7pC7yOPMvE7SdWtK4LiQngH5bodNguJq/jq5dHRA179eddTYcKQ8n9+BVj:mJ87y+MMtK4yUNgjO5dHRAv3WzVj

C:\Windows10Upgrade\resources\amd64\nxquery.inf.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\amd64\nxquery.inf (Modified File)
Mime Type	application/octet-stream
File Size	2.39 KB
MD5	137f99444865f1f9824e4ae1eb30dd69
SHA1	552d1c9a685c52d8cdfd845c856cc7348640c2d9
SHA256	b8235c9de56ed06ce5804b85886c9aa9f3b3eb03c03ef9bade340a7cc7446df7
SSDeep	48:uv+8IhY+znM0EZ+MikxhqkM6MTX8dOhoyzhQegGLJmBHY2IyV2Sp:uv+Jm+g3Z+MikhXM6qo8fgG9mB4JyVRp

C:\Windows10Upgrade\resources\amd64\NXQuery.sys.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\amd64\NXQuery.sys (Modified File)
Mime Type	application/octet-stream
File Size	21.09 KB
MD5	cbda00057451afdffb0cc1c5fe45f882
SHA1	5db8a18a281c34e76a56528f9c4bd067011a328c
SHA256	9584fb1b90cb78f4735330376a247fefaddcd4310a19b51af36a779b642119d2
SSDeep	384:9FCCvY800kAAl4sIndHkstOMP0GftpBjczTMwWiPdoeUmlz6nhqlNzVp:qCt00kfInhkSEi+hJBYwzz

C:\Windows10Upgrade\dll1\wdscore.dll

Modified File

Stream

Unknown

»

Also Known As	C:\Windows10Upgrade\dll1\wdscore.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	237.12 KB
MD5	248e5c4352caafa0964513c3a23a8c47
SHA1	41e70da1114a8c575c9ec3aacb06292ab4c0cd7b
SHA256	97ea29a165dbfaf3e92f8b8128a7945935011dd98686a87b6d732cd4fe631f03
SSDeep	3072:VF5g7LwBETLPlBCrdpdd5Fm8rhS7yiYvzDPqxUs2gCS0zZO8CXyN874L:v50LSENBSdvd5Fm8rWmzDPqxIpCXx8L

C:\Users\desktop.ini.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.09 KB
MD5	ae2ff4e102f7f5e52597f1e518fbc48b
SHA1	ca2de67fe0dedaa1d49616a1a46e07d6c37aa8be
SHA256	3a1a79cf0dc4bf1d3a52e318734d6a494e326fa2f746ef745a889cfa266ca659
SSDeep	24:A5MzQclB0Y5bjyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVtj:ACzQcL9jyzhQegGLJmBHY2IyV9

C:\Users\Public\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\Public\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.09 KB
MD5	09dc03505d53093882ac8cb13946763d
SHA1	a05accedaf1c189454b8404332cc4d177a1cb0bb
SHA256	e170abdfe07a51b20d34db47c8e85abe913bb8ff01b873db9d5641a82212b866
SSDeep	24:0HZ7yFJ9HaG3dyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVPnV:vJ97yzhQegGLJmBHY2IyVt

C:\Users\Public\Videos\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\Public\Videos\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.30 KB
MD5	989538283e17800df208e09ff103365c
SHA1	a17c07695403d893d8c150030f7241f8da311ca7
SHA256	b61e3c827dfabe389dcee5be2c4bbe41fd3d460e7734e2120e23fe76fcd40063
SSDeep	24:PNM16wGGW6TZRJKJXQPijyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdV3t:P9n61uJXCOyzhQegGLJmBHY2IyV9

C:\Users\Public\Music\desktop.ini.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\Public\Music\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.30 KB
MD5	f89155910ca69abd1e144a23db91b713
SHA1	8dbbec246646384669c1e873faf35e3fdfa98c24
SHA256	e0b4b1d1fb12e6a60a291afff8ea42b393689e1b9e60c2f9dfea004fc55617a4
SSDeep	24:LyLx0bg5f9D7hVoYX7OawQyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVLF:L+rWY62yzhQegGLJmBHY2IyVB

C:\Users\Public\Libraries\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\Public\Libraries\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.09 KB
MD5	3ae8695ffb2ae2f8ab0e8c3fe75eca4b
SHA1	85d0da410db168cf770e0d73fa1a5485bca18974
SHA256	342bd5190cf3050b6dcdd590279b2e4cde8a195c1a6f779a4da159ff1ed9badc
SSDeep	24:8fRTUFGzTWFVISLzgvyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVm:8fRTSAsIvyzhQegGLJmBHY2IyVm

C:\Users\Public\Libraries\RecordedTV.library-ms.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\Public\Libraries\RecordedTV.library-ms (Modified File)
Mime Type	application/octet-stream
File Size	1.86 KB
MD5	4c4604ab0a2de15a4048ebab5df8ec7c
SHA1	345d54f6a28b1380dac356d4512680b3a0e49dfb
SHA256	a267e4049e52e6fb005a1dbd2833cb691dbc892b823bf297cde7e85b3abb621b
SSDeep	48:4pK7/a7mNYjkCGUoJrEAXWyzhQegGLJmBHY2IyV8J:x7bYVsW8fgG9mB4JyVg

C:\Users\Public\Downloads\desktop.ini.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\Public\Downloads\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.09 KB
MD5	269e7887ba44ee555304136268cf0d41
SHA1	5dedec43a9e6c13a685ef1905210740d98c74de0
SHA256	66f072f5d773934e649abd803ad7b4f041b5ba999261e7566fadfb5d7fd4080f
SSDeep	24:NE4bICS35+XPxlyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVC:N4BI//yzhQegGLJmBHY2IyVC

C:\Users\Public\Documents\desktop.ini.badday

Dropped File

Binary

Unknown

»

Also Known As	C:\Users\Public\Documents\desktop.ini (Modified File)
Mime Type	application/x-dosexec
File Size	1.20 KB
MD5	2d0770a3247d401acbb287537bf2677f
SHA1	b1592608e4c86eb12be9cd494fa7170a482afe3e
SHA256	0932aefe76a00864206686e2da428982c0141f8c5e5225c234b03cb34be5df3d
SSDeep	24:5LSAvhLkJd4qhuVbRHAcSF0eyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVzGQnj:8AZAv4qhuReyzhQegGLJmBHY2IyVzLj

C:\Users\Public\Desktop\Acrobat Reader DC.lnk

Modified File

Stream

Unknown

»

Also Known As	C:\Users\Public\Desktop\Acrobat Reader DC.lnk.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.02 KB
MD5	dde517821e43305aed9874388c6b71dd
SHA1	87f42131a11ff48edeb9ad675c14b194f290e246
SHA256	c740e39a24a250ba672a1322b2fa6ebfa30974e0a44df4cda51ef70c675c5bb7
SSDeep	96:qNuhsipivIxsHgs2Oo3iDWwKH8fgG9mB4JyVF:K0siswxsQOo3iDKH8n9+BVF

C:\Users\Public\Desktop\desktop.ini.badday

Dropped File

Compressed

Unknown

»

Also Known As	C:\Users\Public\Desktop\desktop.ini (Modified File)
Mime Type	application/zlib
File Size	1.09 KB
MD5	6f341cd88b45cec3e8089e4c5addf3b0
SHA1	79a7b57f0195d244cb506e0a285062f9312bcb92
SHA256	3bb068523c2a060e1c030e6ad7a791184935ab6b3b82344da77ceb9c6ea6e96a
SSDeep	24:3gs8hsD8aI+xI18+Vi2jvyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVO:3gspgaI+xGzVyzhQegGLJmBHY2IyVO

C:\Users\Public\AccountPictures\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\Public\AccountPictures\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.12 KB
MD5	d3278547225c5298cde92b1e341cab6e
SHA1	6c0dfcca04899a9e5e1bcf5ecab65a2b15de7585
SHA256	c72d8ae61cdf00451584f4e7185ca5e8a98bf2689ada0a494d4593d98ea93620
SSDeep	24:EtHPaxMNIMfmyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVKPtdpn:UgPLyzhQegGLJmBHY2IyVK1Tn

C:\Users\FD1HVy\ntuser.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\ntuser.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	976 bytes
MD5	23a95ae3509caf3b3d3a7646e003ca80
SHA1	039eea4daf504d29390c2522aaa714de80916c4d
SHA256	45d8d97f489a5a17b6e1e5ca42dfb3f16b974be9a5af77e1f66f1b307d5fed73
SSDeep	24:8/79g6PyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVnE:8/7uKyzhQegGLJmBHY2IyVE

C:\Users\FD1HVy\Videos\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.42 KB
MD5	c8bb0fdc550575b38502e39b83a819b2
SHA1	d6160a04f4b01f8269af203a5ac519224a65735e
SHA256	7b11c44ff81f964a7b111cc2a8cde99145baa23b505d89a473fe0af31a014354
SSDeep	24:zseWkds/mfxyt6/qBTfzy5ImoyyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdV0:mkq/m0A/QkImoyyzhQegGLJmBHY2IyV0

C:\Users\FD1HVy\Videos\HP3DxWFdt.flv.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\HP3DxWFdt.flv (Modified File)
Mime Type	application/octet-stream
File Size	18.95 KB
MD5	ca2683b32559c6f21b00e693e2df2278
SHA1	4ebe94350f6938179f9efc15e0d3a64eae02d66c
SHA256	f33dd35a5df8cf91a5f71a9b59175e7c29a0a62a0b28b92b2b404181de2d4ed3
SSDeep	384:zao+JAw20etHAQEXP2CjNBcVtFwNla1RzFNg7ACEDuAkW0SEpqUK0RqTbzVI:zao++0eKXP2KNWVvwNlehN+ACOuAkW0N

C:\Users\FD1HVy\Videos\uQKvcZcXTn5FWgo8.avi.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\uQKvcZcXTn5FWgo8.avi (Modified File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	c308bbdece8333c035c5748365786c36
SHA1	7ed13e4292237d423273771d7e7ca236b4dad9cb
SHA256	337c1c0414099fcef5c6c3cb8d4df55cab30e9aa3ccb4de4f1ccb6377a431e78
SSDeep	96:2b6nT6HTG2w673icRT/4MYQI4PEZDFOL8fgG9mB4JyVqPa:Q6OHa2w6DigzoQ8n9+BVqPa

C:\Users\FD1HVy\Videos\tyDH\oFdCkaz-kpeof_PBG7r.swf

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\tyDH\oFdCkaz-kpeof_PBG7r.swf.badday (Dropped File)
Mime Type	application/octet-stream
File Size	45.05 KB
MD5	6271bc915ee0a5e4e062e5b09fa2e013
SHA1	afb673546d7ff2063da3c70fc57318400c1dafb4
SHA256	66857f6d7725c6bdc8db30c812ed8264ee16d220f8e0c6d9637240b2c0376e88
SSDeep	768:zZPYgLzoIRxcd2G1KUY3Q75Qw6S7dgy3kjYw/B+g0HaW5UhX9VsgQh++JzV:dYgfhEKVtwky0jDcgDWaHsbD

C:\Users\FD1HVy\Videos\tyDH\wQ3UlUMOF_3Dfh2.avi

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\tyDH\wQ3UlUMOF_3Dfh2.avi.badday (Dropped File)
Mime Type	application/octet-stream
File Size	67.17 KB
MD5	a0545201c474b2facfb82a0842019554
SHA1	1cb87ffdd24bc9fea16bc5d1aa33a7b0480743be
SHA256	ff8d6df270256270cefcb5d3ceff2a8c5a2a97bd9119bad2e9d099d5704bdb0e
SSDeep	1536:xnwKYwbuFeKF1ZaEzd0rKvCWuHfUzq3BdvmE4ubbTVC8rh:RwKYwbuFzF1Zahd5HMiQqD

C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\Guh1FizS0G.swf.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\Guh1FizS0G.swf (Modified File)
Mime Type	application/octet-stream
File Size	58.78 KB
MD5	8ef04788f5685a8fc89dbfd00256f8d5
SHA1	da1317a454f24f6e24386857d16381f106a293ac
SHA256	a4b9a486a1381f979870fd55939ec7c73928ebd26536945f231c1fb32018751d
SSDeep	1536:Hkm5Y6BAHWXoqvJlYs0I0zlG5Akm1N/v2t0XHP1:HdhBnvJOs0IalGZEN+0XN

C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\LzzuM_RZQ_.swf.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\LzzuM_RZQ_.swf (Modified File)
Mime Type	application/octet-stream
File Size	4.86 KB
MD5	b17adbe8ab2923304088a78b5cd7d47f
SHA1	8655ad51e26402c36803c0b86eadd431cca47236
SHA256	27282f1a45f45f4b0f50bde8ac0a3a03581daace0b771961fbac8fe8b8e7d9da
SSDeep	96:pFhPx4lLYt3Y+DxYZKQvVHh4nhGdx+3dbhwOYvVRbeevs+6u8fgG9mB4JyVonM:vZx4lLEVDxYZKNgPcdbhwOYtRbeeUpuT

C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\tISGyI1coOjtK1.swf.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\tISGyI1coOjtK1.swf (Modified File)
Mime Type	application/octet-stream
File Size	73.91 KB
MD5	d283e5fa15e1b341959731a777ed997b
SHA1	faf2c7590d531e24f60155b8724e16a668260a19
SHA256	d10775bb93a6edc54b9f5c28385826d8d7b2ee521f24e8bdf5d82e0306d8b6d6
SSDeep	1536:wBizy43mmtn2xE/by1jknaLxQuZ1L/dV0FHRdn:wsz5mmJ2xEjy1jkadQa1pV0FxR

C:\Users\FD1HVy\Videos\6e8O\1n7ETFVaYrgydl5gq.mkv.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\1n7ETFVaYrgydl5gq.mkv (Modified File)
Mime Type	application/octet-stream
File Size	72.38 KB
MD5	1d0276478907ee7e04eebed06cc1b9d6
SHA1	a6a2680ad9f7b15a81c8cf2d5d85cecbbf4d9a85
SHA256	8790b4b1af3b7704dafbe642a00b399a73606c29b40e098afd93bae03612ff95
SSDeep	1536:qFCA6jQwC9ctSarauvtmJp89RS+9JlzUfD31hkQ2lYu42:yCnCG8araOtmJp89M+bl47FA+G

C:\Users\FD1HVy\Videos\6e8O\6Lij0gKo9eRZq3H17Jo.avi.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\6Lij0gKo9eRZq3H17Jo.avi (Modified File)
Mime Type	application/octet-stream
File Size	44.34 KB
MD5	fb88b6f9eda87315b26301ebde76d68a
SHA1	79447144f3ed919df1029586bc9868609cd81444
SHA256	8ed0ea335384ae2d0ad69fe179cf4285928a841b0115f9cd7cde537fa1a98d3f
SSDeep	768:DUmz2CJq0xmdR+L9ummu8LPiVHOMa2Wi0Q+40l15j1NEpghLsfYb7ePI+LonK2wq:DUx0x0Y9umPl5vWi0kW5XBlsfYmPI8yF

C:\Users\FD1HVy\Videos\6e8O\gzdBvh.flv.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\gzdBvh.flv (Modified File)
Mime Type	application/octet-stream
File Size	8.80 KB
MD5	6b50247ad1868228e80f1c70aa71d022
SHA1	f4697126b766e2923a426164ee80d4d8db72cab9
SHA256	e45390c9c68da319008109979602d70d95cc99189d16ddc8c2b1ce8be9c494f6
SSDeep	192:i7Kj03BAXie8UkLP9SDcftWUWSsE6/DxLOYq1OP7mwaEFHElJ8n9+BVq:iujieRkT9SDCtWlzV/DxOw7mhE5ElJz0

C:\Users\FD1HVy\Videos\6e8O\kLWn3V1nfw.flv.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\kLWn3V1nfw.flv (Modified File)
Mime Type	application/octet-stream
File Size	74.74 KB
MD5	a5beb3ad0d9ece655c8910829b9cfd01
SHA1	a8bcb6f7532d0c882b244e9eb50b869d00e99a12
SHA256	13b102162a3afea08535b5dc64fdc91565a6f936574fbb05edca1a3d6fa7a0b6
SSDeep	1536:JFExPvDtVGrYTVvQzfNWdwwHlWgfENqFilAPZH0J459DabXC8rup:P+Tt0rYTV0MZfENq8uUWUXep

C:\Users\FD1HVy\Videos\6e8O\QHejrY3S3.avi

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\QHejrY3S3.avi.badday (Dropped File)
Mime Type	application/octet-stream
File Size	10.04 KB
MD5	6ae4132cd6d2f790d53fa6d04946d0de
SHA1	f757a19d6c4d3ea14786fca174c8a6b0c1734bba
SHA256	794e7ea4901a943f75cdbc7a766cdd71b348cfe85c0e0cf8d9ebe9af1f9a8b5a
SSDeep	192:c+1S/qjhp7CtNCDMD50eaLmRorfWz+QHRAVosOhmHZytmbiT8n9+BVW+:cZCj7oYQ9aSerOqQHLmHZQmbiTzV1

C:\Users\FD1HVy\Videos\6e8O\R0WRBw\8g75R.mkv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\R0WRBw\8g75R.mkv.badday (Dropped File)
Mime Type	application/octet-stream
File Size	49.27 KB
MD5	8e8e9262c7d5de32f0521d3466a27f1a
SHA1	822237961e00b533b61d34761b014e2befbe1070
SHA256	228c4304f503e9ccb2078806a65821a999ca3617cc31ba6fbb1cb3b2c6c691a2
SSDeep	768:s7dZChsRAv7dRMOCszB55WauNPIOUvkHJAViM+wiKoRo0Noy1U+zW:sZshsRAvZmOnzB5kT/NGf+wiKo20N/u

C:\Users\FD1HVy\Videos\6e8O\R0WRBw\MOHiOUFK2fv.mp4

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\R0WRBw\MOHiOUFK2fv.mp4.badday (Dropped File)
Mime Type	application/octet-stream
File Size	28.71 KB
MD5	0431b0207b688a1af280b05a169d914c
SHA1	5d36435e4a5cd79f7e8cdb50aadf4aaa2b28994c
SHA256	11738ac72dec20110096058d17a88f0f6e9e254c200d9b69e310241a2efe800a
SSDeep	768:alu7QlH1l4BcRTEznaPdevgvK+hbX6xXNEC+K3xbEwprVFzF:alu8Z1l+wTEzmds4Th+XNEwx5

C:\Users\FD1HVy\Videos\6e8O\R0WRBw\XrZk1x_KLWc3.avi

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\R0WRBw\XrZk1x_KLWc3.avi.badday (Dropped File)
Mime Type	application/octet-stream
File Size	24.72 KB
MD5	e2d7aee56f73863761a522c31928bc59
SHA1	756a09172e7890c94ad1b57079bdc2d0fc38749d
SHA256	cec70339bb2e403f7a9cf128306cea88a5fcc7769037cdceb84a427b5884652d
SSDeep	768:V27bB66nljqLdh/EgUaeKunEc9/GEtDZdDPdzT:s7bB66d6t9UYYJ9/Z1Ld

C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\-EmJ.swf

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\-EmJ.swf.badday (Dropped File)
Mime Type	application/octet-stream
File Size	16.86 KB
MD5	a37e01e48a50ef8b4355810187f57353
SHA1	86c0c10034b9f19dcd433bdeaad80bb313ddb008
SHA256	a081e887a67304e74f16b5b367426e47d047398c9f04c1cda1dfb47ffadd79ec
SSDeep	384:oHusYOGdcrQek5bFg+LRsC7caM9bs6bww/pwQLDzVj:EnYOVrQ9VFg+tvoaMLvLDzt

C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\rNZwc0utSRhX.mp4

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\rNZwc0utSRhX.mp4.badday (Dropped File)
Mime Type	application/octet-stream
File Size	92.02 KB
MD5	64bf73dcd4538d66f9b436f1795d4f4d
SHA1	3646bf8d85da6f3a9207945156581488985eed4c
SHA256	f9968428af21d0849736b908276ca3182a8183d1ff7329398a0a3aa066312633
SSDeep	1536:Ih+/RgaD5iQD0QHP7RpMO/zI52UInMQO2gKKMAdFkwd3SQw5OZSEAGVQjxSzF55:IwgabD00P7RpH/zfMQORKKMWiOZllQW5

C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\XjEZhbdrdB0n.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\XjEZhbdrdB0n.flv.badday (Dropped File)
Mime Type	application/octet-stream
File Size	100.05 KB
MD5	ac7fc26e5b1cda7fdd69ce13124b07fd
SHA1	32b9771f973d4a2e86b637c067bf4289b0b6ba54
SHA256	8524acfdbcc521c28ac4b769524b7bf500d3f094b228c3f1dffafc30e3381949
SSDeep	3072:gGUyoKCZixyoyQdHH5B1dXDsXuQC5rMNs/ln8/:gMNCZiUovdldT3B5Gsdn8/

C:\Users\FD1HVy\Videos\5CXoE8Jcrysc\35_4bU6GNDoKE5zoFSV.flv

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\5CXoE8Jcrysc\35_4bU6GNDoKE5zoFSV.flv.badday (Dropped File)
Mime Type	application/octet-stream
File Size	74.21 KB
MD5	934a73766c6caa929bf089dc3f5931e1
SHA1	680fa1846e39d36632cd772fc5902f1d5ffdca48
SHA256	501c29938cca981e0498410b6d255facfb89c1aabfada56cad040ca3540fcf0b
SSDeep	1536:bAIfWnJux/KNFyQ1ps6QEQRIRpuYZEfEDODDf5uvsXj94u8BWIs:bAIeBiQ1WJESIRQfEDOX5nX5CU

C:\Users\FD1HVy\Videos\5CXoE8Jcrysc\WC_aDQtO.mkv.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Videos\5CXoE8Jcrysc\WC_aDQtO.mkv (Modified File)
Mime Type	application/octet-stream
File Size	7.83 KB
MD5	02c5137222746e996867664db60bfab2
SHA1	e6641f76096a8a64322e6dfe4f3a1e2ddebf93ed
SHA256	ae3e417dd33ca31eb18be83aa41f5afa2a9840850b8103ba6259363cc537e6f6
SSDeep	192:G3vAWOmTYCnet1jsukcGuY8tmYbOCCQlZE+8n9+BVM:G3vAWOmTfevQukBuPA2OCL/fzVM

C:\Users\FD1HVy\Searches\desktop.ini

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Searches\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.44 KB
MD5	fe05730d3f9eba1b978bcaaed9a64c03
SHA1	c6d32c7d0bdc09c21f35a91184fef67c8ba17388
SHA256	1828c50845369a9d509055cec402041372dfb7f26650836e1d957daea5a7bfc0
SSDeep	24:688ferP2egJE2YRtOScaoUAyyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVNc:Hm2ffLc7UAyyzhQegGLJmBHY2IyVy

C:\Users\FD1HVy\Searches\Indexed Locations.search-ms

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Searches\Indexed Locations.search-ms.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.17 KB
MD5	0937a9cea12e1ad84049e8a68115d2f7
SHA1	9a1a1095ae68b1d63f3588617c1e051f6b3f77b0
SHA256	7fd67f29e30b46d020bcec36d1720731e096618b66c9c4afc5caca107f1a9fcd
SSDeep	24:Mfr8tu+8Yq/1HSx2j+KUFJx/yzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVBh:dkYkjToX/yzhQegGLJmBHY2IyVz

C:\Users\FD1HVy\Searches\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Searches\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms (Modified File)
Mime Type	application/octet-stream
File Size	1.77 KB
MD5	eae3990c9f66b7d00f107521d1453658
SHA1	f1a41988e0d5abfe29041d6ff5d44502ee295510
SHA256	42956335de62bc10295439297ca360f376a5c4e3710430c38eebe6ca9fabc965
SSDeep	48:Brl2/VBg6eg5YpOWT4yzhQegGLJmBHY2IyVH:Brl2/hV5YAWc8fgG9mB4JyVH

C:\Users\FD1HVy\Pictures\5Tl9-nlGPlU4HXq_BVJ.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\5Tl9-nlGPlU4HXq_BVJ.jpg.badday (Dropped File)
Mime Type	application/octet-stream
File Size	12.45 KB
MD5	842b0e09dede841a35c9c53fbae9074c
SHA1	b8df43f78a866baac2a229b4b65fc7fb080906a9
SHA256	645e5d4d8a222e9a50a972c1e1c2ca6f07202868f16be7bf24c523bf8a525f54
SSDeep	192:W4TE3MAVJLhCYbd3C1p06pEKoCFKYLiRB5zUzAnkXdzvaLIRBJ62p/8n9+BVWZ:cwYb+p06ro6L8WzAkY2p/zVg

C:\Users\FD1HVy\Pictures\6i0XPBa.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\6i0XPBa.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	51.67 KB
MD5	903816adb8aa0acf1af84be7041853fe
SHA1	cdf39914f621eda2d0f4d1bbca1662c74e5a5734
SHA256	5a86f613410538c92daddd43299e31ff6d2cb3bf2db4a05b0fb73a24b61c8e51
SSDeep	1536:eyfHjj0YwI4omFfVyDlkELmJpU45zH3DnAeLK5d:1PjjdwI4omx6kr53Ae6d

C:\Users\FD1HVy\Pictures\7eHAXBK.png.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\7eHAXBK.png (Modified File)
Mime Type	application/octet-stream
File Size	31.93 KB
MD5	90b9756c8fa0e56cdffb5a7ee95fba44
SHA1	72286d2ee7c017b12b77bae6db4346a89bb0e7c0
SHA256	11420a4891eff2fa012822de45d42b55e74795d74ff18b7286931b0882fe4a5e
SSDeep	768:zag18vMtKMiV0FI08WyziOefsXRPMcDybdg9tzu:ZWEtKt2yziCRDWb

C:\Users\FD1HVy\Pictures\7FlJU.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\7FlJU.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	80.56 KB
MD5	5dea9eedaf991f569410d5d5ce9273de
SHA1	881bd5c6e7d705420ee940a33653c4a05cc1de56
SHA256	244dd7dbabbd508028d9ad9cecae555aabc14080c62b5e237a27864c790b7ca6
SSDeep	1536:Q2yTXgn21qcVzyQfECcE2AF9aK8j8ofoc/32Q1MDbTg0hm/P:8TIyVzpB2A/aK8oMo0mQGTgWg

C:\Users\FD1HVy\Pictures\cv6gt0ON6Ix6QVk1.bmp

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\cv6gt0ON6Ix6QVk1.bmp.badday (Dropped File)
Mime Type	application/octet-stream
File Size	55.11 KB
MD5	407e1444e11ac6e81486103cc1cafce1
SHA1	1500449aecb467aa50e58bf716a83be3f900811c
SHA256	8bac476fa3e0f261c35d7025aeea28c76c72b9ba3f18118d7a514b77b6ca8007
SSDeep	1536:x1mU92FfHVehBSPdB3AcwrwpIkwAMgHbx2xzX3Anq:x8U92FvVeSSrwpIkwst2xzXQq

C:\Users\FD1HVy\Pictures\dexFAA3X5.jpg.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\dexFAA3X5.jpg (Modified File)
Mime Type	application/octet-stream
File Size	45.37 KB
MD5	ebd697e938e24eb2e3e621b636bceb6a
SHA1	a3d3ec0f82833667699a53235464bd363b8a0613
SHA256	cf4064639f6ade2e53097d2b92bce67b7bddf71925ad3b66bc0b4dc2bd1aef3b
SSDeep	768:8hU4URd61uvYenAUOVAo5LpCZXbsy/fR8T/HY+zFCCJUr3d2T/z3:9YOA53L8sS+4UFCCJUr3d4

C:\Users\FD1HVy\Pictures\DKtTEXlFqyW.bmp

Modified File

Binary

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\DKtTEXlFqyW.bmp.badday (Dropped File)
Mime Type	application/x-dosexec
File Size	23.66 KB
MD5	599409becc4aed1941e411d010ac8250
SHA1	c284e5ddf4614ccd8408b0662a1748f5826b7d49
SHA256	4c8a447ab9040ff299ed1b9d24c0c867f855ec5f0ed9b300fb9ef0eaf3be63ba
SSDeep	384:rye8Z26xMQWpJL0hQf76Azxo7iXChxmKSRpmnhbMMOJbcqWxKWv/r++4SkSo5hT2:rQxM77Tf76mChxnSaZAJb7Wx7nrf4SkY

C:\Users\FD1HVy\Pictures\dXGHsWw6Vo vuCA8a.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\dXGHsWw6Vo vuCA8a.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	73.92 KB
MD5	3042af1650e9f59fc7dab0e8ccf44c6b
SHA1	ff2187459a89fe84f23de24ccb44fe065dffda0c
SHA256	89138ae0893bff7eaf524aa933ae5006e0accd42d7469e053869b0eb99a69301
SSDeep	1536:vaYG26ioVi8cAsZMQh6/sMvoKRqwKcgXM8OZ8a2FtBV2/7n9ulBT9r:vaYwvcAsZr0RoKRfc/dNWKTt

C:\Users\FD1HVy\Pictures\eZf09N.bmp

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\eZf09N.bmp.badday (Dropped File)
Mime Type	application/octet-stream
File Size	71.89 KB
MD5	5c2df5a02cbe9e8574efff2a95c17648
SHA1	0a4d20ac1c39309622c30e0d3b50224383c18273
SHA256	48d3f39f50bbaaddcec8df15b4754d6637945f106b258c689343927d5457283b
SSDeep	1536:S4D+KYaE3xiVwn8EjE3sMYaE6mMSTuZ6TGAZaAg5k:Sw+KDEBiz3xnlSqgTLZaAgy

C:\Users\FD1HVy\Pictures\HC9iT3nap_mIne.gif

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\HC9iT3nap_mIne.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	70.20 KB
MD5	46fc3e0c889fe5b49cfdace1d536928d
SHA1	aba7d58e7e8ddca974da3954da827740dd20816a
SHA256	dbc996c52920d74014030ff7bdb2e80f3bf2602211a08f4333a8698745139f20
SSDeep	1536:6fwCL3dSmHHfyWVcsKGcGgLRYFZclSqVNM9irF7:e9LNSmHHfyWrKEgDviirF7

C:\Users\FD1HVy\Pictures\hfrEp4B.bmp.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\hfrEp4B.bmp (Modified File)
Mime Type	application/octet-stream
File Size	23.34 KB
MD5	ff4983de4e91181199e21410f3beec9f
SHA1	581730dc7179d1820f17debb8a0cd42d2e3add68
SHA256	0214f88f136f2735d3e63d020a04bba75115d25b0e13ee3ec32920c5f6d2f0fe
SSDeep	384:fCKxy+8KT/fGIhDDU8mBcf22ZzWa9Uss6pC2mCqG/5aOUMHrX/FaBQ49FhVePgSy:fCNemIWS22s/x6qC5/5DX/F6Q49FhVeY

C:\Users\FD1HVy\Pictures\N jzD oSs.jpg.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\N jzD oSs.jpg (Modified File)
Mime Type	application/octet-stream
File Size	48.47 KB
MD5	bc1a8ef4d9eb4bd3a2528ade910bdc60
SHA1	8f2c0972fae48a2d9fca8ada164a450782afc8f3
SHA256	879812e2da907a9f8a0133b85fc42bd4c4a10e8d8aba8d12b1513bacb0023ebf
SSDeep	1536:SodqTsssyLs4gdx0bSKHBH6MJz7q5I8GfU:1dd2s4gdx0bSKri5n

C:\Users\FD1HVy\Pictures\pWWfwCCuDNgZkszxR.gif.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\pWWfwCCuDNgZkszxR.gif (Modified File)
Mime Type	application/octet-stream
File Size	80.19 KB
MD5	42d6ed59a254c02ae10ece721d205530
SHA1	dd984160891f9bdcb435754fcf1093830e3d82b9
SHA256	4bd1ff70a144a0cef82eb47d8922ad5645a34a87aed6318ba53ffe728cd0d425
SSDeep	1536:Sm7yuEQ+zLyVWDLvZ9Mb+pLLib3Ne2Mr0nUPMNmZ6CJw8RyF517py/VWOUHrs:3ynrwaZ9MbiO3NFnEkCu8RyFZaVWZrs

C:\Users\FD1HVy\Pictures\r5TUKzn.jpg

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\r5TUKzn.jpg.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.41 KB
MD5	7b7b71e7cb61218ba0b73ca869d0b656
SHA1	4d46f07f0e16c5216b77fe33b9f7f926f39f52ba
SHA256	82375531a527a965c00b19411b359df61a6f244f1f2dbbe2e1f454693b76f534
SSDeep	96:cigHXxL4YAy1govPJs3+1MDAbP23s8fgG9mB4JyVH:mxL4Y7FPJs+Qgx8n9+BVH

C:\Users\FD1HVy\Pictures\xJfN.png

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\xJfN.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	69.59 KB
MD5	309dcc1eb29c5375777f45b1831d22c8
SHA1	05c67bb998a27e1eb5bc925f961053c4db9ef11c
SHA256	165603a470c74b0403daf6cef3c409ade99517fd9cf3f3b31de2c268a2ef3216
SSDeep	1536:uzrF05N5RvZLY4bPIDAKsZ3uq++Xbfwf94z1njpLbJ:uzrFaN5RxL9IsKsQq+Ifq94zBhN

C:\Users\FD1HVy\Pictures\zkrbWP75zE7SN_NI.gif.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\zkrbWP75zE7SN_NI.gif (Modified File)
Mime Type	application/octet-stream
File Size	72.02 KB
MD5	98e736f0edf9d1b75b5375c3ebe58c2c
SHA1	a653c24728b8b7cb2c7a4142626dcb0bf0c32b43
SHA256	ae9d9ac7815cacd768ea0bf9335a536d08131f0904591d2dc14c7cd4c1c410b1
SSDeep	1536:JX6rAeGbUJRBTqmMRXtQhn1fifd0M+Pl3CSGJHLBoHH09iit1Vm:N6rAeGQJRtosn1sd0B3kLBK09Dm

C:\Users\FD1HVy\Pictures\zlbx_luMJl82t7kC.jpg.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\zlbx_luMJl82t7kC.jpg (Modified File)
Mime Type	application/octet-stream
File Size	17.14 KB
MD5	fecc9a9858880b51b3ba0848ed872572
SHA1	b3d15fbfd147d9532a768ce2dc669448138ef00c
SHA256	d43ad2e8b43051a084c572daab2500992230e631b212f6bf4862fb3ea21d3c5a
SSDeep	384:/tg2gUaLfx0cm3dy/GdxdeLCfUG4g3Z6+uP90xHJejw8zVM:y4aTxjm3dfXeOfUbSoSwc8z2

C:\Users\FD1HVy\Pictures\Camera Roll\desktop.ini.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Pictures\Camera Roll\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.11 KB
MD5	d1735a3ba6879a765579586ef765e643
SHA1	5fd13f039a4b80c07a9903e54a826a8606a0cf75
SHA256	947b4cf49698aaa48e8afca9f3dad5f42238e12b103a18e151790e43f8968803
SSDeep	24:BpAzkqYvyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVz:B2zz4yzhQegGLJmBHY2IyVz

C:\Users\FD1HVy\Music\pP4K9Uq.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\pP4K9Uq.wav.badday (Dropped File)
Mime Type	application/octet-stream
File Size	68.77 KB
MD5	846a9e457863c2f0dc0c563ac87749b6
SHA1	0ebce8f677f3fc5e9667783a7a40e57c0a18ac45
SHA256	1719843f1b37b0dac4bac9457e374f2fab18f4389b902e227de3c6ba40ba5bd7
SSDeep	1536:S+Jby+9gqwcRHdsIAAA7bM8VsZgfhXhvhiIWheM:Sqr/9sI9A71RhkX

C:\Users\FD1HVy\Music\zkju.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\zkju.wav.badday (Dropped File)
Mime Type	application/octet-stream
File Size	24.75 KB
MD5	63d4c6061327c6468e5eef4a8527a7b6
SHA1	96b75e502eb6b8f8ef83239baade3b4a83a310d3
SHA256	cda308c52968f27354af7c74ceaae653743d4f6be2a0d88c6e199a176951db4d
SSDeep	384:7XTNs4BGi1hQoLbd4QlzrMxsH8OpB4Tr6FQRO1sYd9WT53WS8hzyTCckezQn1fNl:zFVhQwIA3pB4T2FJ85X8SZE18SCz4

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\e_5HlcoeqsGxV1P9MI.wav.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\e_5HlcoeqsGxV1P9MI.wav (Modified File)
Mime Type	application/octet-stream
File Size	13.84 KB
MD5	5f8ff2867cf7e3bfca3d592ad23add83
SHA1	4594ac5990015cdb6affb9d3dca7cbeb2db6d3ed
SHA256	9a8adcd54abc7e579566b28f6d0fbcb383b7a6fbe1909963dab8919302658a4e
SSDeep	384:c+sjKJVg+ZGRw2OBoEjeeh8by0wSbywdXF6bzVJ:c2ZGRwpoEjej8zwj6bzf

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\XkaP5Zds4IiXNgn9.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\XkaP5Zds4IiXNgn9.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	31.91 KB
MD5	3f96a6944db7870b2223b3578a023056
SHA1	ca31291777dbef7aca2ea8a656e2fb1265436667
SHA256	a6eaa808ae0ad0a402ecd2b5afe3e5bfa46655c7dd8f4a7b71d5a5fef29eb451
SSDeep	768:nBrktL2dsRyCvTjQoS7iZ7GN5fDE2MEzX:nBryO5CvTjEM7Gfj

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\_bl_0Mvk1NQJvK.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\_bl_0Mvk1NQJvK.wav.badday (Dropped File)
Mime Type	application/octet-stream
File Size	80.33 KB
MD5	61be10d609f70beb0e2e8ddd8f0f65cd
SHA1	4adbda56aeaa6313b99ee26dab554cb1762953cf
SHA256	08e6ba900baffbfa748981fcb44d358bf6eec7bb4aae93d77b45e78cb21563f1
SSDeep	1536:SgPfoaW2OCUMHdoJK48q2NLCtCymKOafJC2wMdGMT6ApVaoS8Cfar5HQTUg6:3waW2Od7wGtGKOQn+AVad8J5Q6

C:\Users\FD1HVy\Music\-_HxTeiwDnv\17V4L.m4a.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\17V4L.m4a (Modified File)
Mime Type	application/octet-stream
File Size	87.36 KB
MD5	a87538c492c3e35a8ff4aa176decdfcf
SHA1	85ee19ba1b19422b9d2dc6d88c7bfac6b76b102b
SHA256	cd46fcd85664468c4c5da7d54a237069a5627ad1b240980034d6d1253fd9f1bb
SSDeep	1536:YSPwjGSGFsyO7q8PwR8molinexeoI2Um6Q3wWGD5IOSi7a+Np45B/Bg+7:YSHSGayZZ8m1exA29FzCSOSi7np45NB3

C:\Users\FD1HVy\Music\-_HxTeiwDnv\ShCUCPX1Tm3nyp.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\ShCUCPX1Tm3nyp.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	46.23 KB
MD5	37b3da1c79cf63fdf0a9effca4114e62
SHA1	60a2c1c07ef25d04b1707706121c35054f96a4a3
SHA256	06f6a274417aa31aed5cb18acde533e411a9cea5309bd3ffd54d24a252b041e8
SSDeep	768:wtttrOzJX5oN05gVyvvU0X2xQDmg9qyjWLwjTcPknXhg4Puezh:wt7r2J5oN0S0XsOmz5wjwP4Xh1L

C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\i0-C.m4a.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\i0-C.m4a (Modified File)
Mime Type	application/octet-stream
File Size	73.42 KB
MD5	8ca254f88dcecf81b1e8d498d37ac5b5
SHA1	11961590d6f8e9bd1630c5c4b9d00d9905821c5f
SHA256	11690689c77e36b4eb7d3d827393a2f980c633dbd13b662fa45af77c76b3f72e
SSDeep	1536:uplZtN4PfMB2fqmqRNPLqz09Dy+8iRCv476nLjkm5bwSQOt1jwLAdDD3IdTnx:IjMfMwSvPLcUDy+DRCv4unLjHwSzXjwx

C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\LS7 4Kwl5n8K6inM-QM.mp3.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\LS7 4Kwl5n8K6inM-QM.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	32.78 KB
MD5	2761193931bd788123aedcea29626020
SHA1	69492b1ee572a30e1bc161b800cd93b4c9e19be6
SHA256	62c10052e3e474ebc99ebdbed40dbb39a653295544934875a137eb6d1fdfde75
SSDeep	768:HIK7OUrCSfN1AGXQ+XDkN5MJGCFWMUBsRm4blVVJCuhs7EWEVzS:HIaCSfjXQGDkNOJGleFnJCl7JEM

C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\O9Jv0mJjMt4lQO_5.mp3

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\O9Jv0mJjMt4lQO_5.mp3.badday (Dropped File)
Mime Type	application/octet-stream
File Size	98.41 KB
MD5	e80276ae4ffb95b36c7003563b99cd33
SHA1	06014adb5d4013e808b51d8f9af1887e5a082385
SHA256	e4b74917434a8843c6fca373f558813b7f8c2d1b6763dcf9f0f29f6e8f2c1bb5
SSDeep	3072:QGn05VmzOGfauz2bYiySvi7JsvBC9Sgtpq7:7HyGiuzMxwJsvw9ZpA

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\WUmNdid8BFxHy.mp3.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\WUmNdid8BFxHy.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	56.20 KB
MD5	f830c93fec121e483b41c596fee32525
SHA1	4185342b2c15aa48b07b59f6fd86d21560525446
SHA256	34114b2a4c35bfc214f539066a76a8a8c50d0cf914f6b0d27a5121fbe0b981de
SSDeep	1536:0L/g+yjT9rH90JUgTgAXS0qPPFPSZgHk+eATTtZonM:EglryRTgiS0qXFQgDecToM

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\-Re6zKU.wav.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\-Re6zKU.wav (Modified File)
Mime Type	application/octet-stream
File Size	91.42 KB
MD5	362d651b0fe8e414dae48541c6b8c894
SHA1	1809d64172516590caa0980ac52c7a53d1757f06
SHA256	675a3f1169ab0ffb49ebd8ea69bcbbffaae7c251be759a4ae62e4a375df6b8ca
SSDeep	1536:NbKovC/H/27AbNnfEqmgtehy7VZ9NAkoJRX+FTGcvaQUwie2XofQNwV9zic:NWCCv/2UbNnfEUto8TgDRuVtSQUwCXox

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\D2BCRx0eUWpvmPQE.m4a.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\D2BCRx0eUWpvmPQE.m4a (Modified File)
Mime Type	application/octet-stream
File Size	12.71 KB
MD5	1a919cd0a07cd06bd658fbcbab2d6064
SHA1	460277f3fa1f4e83bbd36caa6197767d232da29d
SHA256	ada2f9c80f4174556bf297d0e7307ecbda22837a9d4a1b671602bffa065c2244
SSDeep	384:1xwtizs/kM2INPEhbyKCeyltyWQ/jjRXQ2/ASAzV1r:1Stizs/kM3Ms9pXevI5zvr

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\KZeMHUSx.m4a

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\KZeMHUSx.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	14.22 KB
MD5	ade5c0ad8d18894901857236a8ccb3d7
SHA1	e34ff95474d4225e242d3107044af1078578e905
SHA256	963ec685bce62c01e269184a688ef4a3bf4f37788deb81effcb617a8afdf069e
SSDeep	384:Dskd4qqKV83hCQ2lW6th8+ejFikRoL0sXY4FzV3:D5+3hCQjKh8bikmL0sdFzd

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\XO0m6otbWhGgXfzJAWw.mp3

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\XO0m6otbWhGgXfzJAWw.mp3.badday (Dropped File)
Mime Type	application/octet-stream
File Size	42.46 KB
MD5	592bcd4a5734aec0456140f0c48c68f0
SHA1	8390714ee99904c948de02cf4ec1508a1cd85849
SHA256	1090bf70fcd803fab2b5c43433bb61c1717218e3892a774fe8cac9e3be539288
SSDeep	768:zfXMQH/Qk9w6wtGCOM+qXMvokYQmDOuViHz/TvgtO1PHV2iUNzl:zc2/Qk9wPtGM+BAa+JgvgW8iU/

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\5Ju_ia.mp3.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\5Ju_ia.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	89.64 KB
MD5	798cdf9653aabf60a148c4a44c4adf09
SHA1	a135139548d385f21cd266819c22bdf6c2c56330
SHA256	10c3c4d54bad19005293ea42bb690c9202d6023598de142521c5f3934587ce82
SSDeep	1536:JRw1fZx3c9DUWHB9YqD65Ge3ugf0LFu+DYjAmrYD7R1Aq+mSyhpHPy4JJawWGZM:JRsZhwDUA7YqDyGe3uTu+csOK0qv9VaF

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\COSGhjpiH8tia.mp3.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\COSGhjpiH8tia.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	42.85 KB
MD5	ab7b43f8a141d153067397f6c7e7a264
SHA1	c1e2168491225d56e42e79802c703f6fc37f3952
SHA256	5e33674b54375828d7fce9973a007542752b3787ed81593bffc5b4a3f4f7e155
SSDeep	768:xvhnHw7XtU8m98vGUnrH48EQDCAXmniCFovA5xiA4B/K12BJDVMqrHMFYza:xvhnQ7XtUBvUnrH48EmCUaiC+45xN4dA

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\gywg7QEVcX.mp3.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\gywg7QEVcX.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	93.11 KB
MD5	593f96a537e7a157075e0e0b21dc1509
SHA1	06c46492efb22b9e1dfe457e21a23bbf92ed2db1
SHA256	48ee9645aeb3a20ff5b08a4ab52ab0a28a827f9ea965bb152d5371bc65275974
SSDeep	1536:vBoqIyXv/J2R6HdD38k2VtA2qcZDl0WzJ7XlEXOCUvjRRM5KX/Mr3kwu:hTXv/p9pctA2qcp9VEZUNRQKX/Mr0j

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\4zwf1aEWTn3ZAYls.wav

Modified File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\4zwf1aEWTn3ZAYls.wav.badday (Dropped File)
Mime Type	application/octet-stream
File Size	71.16 KB
MD5	a6fcd69fbc4dce7e4f77768b5a6aa096
SHA1	b00c1d8804f1dd98c60347c520fc92060c746665
SHA256	83fe251f9e88d6165b67bc71b9998154142ad260817b75333e9a57b18192fa8c
SSDeep	1536:ut9DA5RWyPS2IZ/fwFEhUn8F2IySJEEIDjzFB521DI8URX6zwO:utZ0RWP2IBwFE5F2IhEFhHA/KX6kO

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\yllHIAtlb\cuyyYduckDveb81gD.m4a.badday

Dropped File

Stream

Unknown

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\yllHIAtlb\cuyyYduckDveb81gD.m4a (Modified File)
Mime Type	application/octet-stream
File Size	52.08 KB
MD5	e32d28137147805903e65ac506709475
SHA1	9adcb034c5ac6909b9a2603f1a4b328312169521
SHA256	c75ada913dc5356912507360b979d8254215a3ce57dca6c07869d4f5a510cb36
SSDeep	768:2ldgIBpZX4DTUrqqIZHntNTbRv2SL4hgpY3aBNrveit5E4Ybr2Gq3J0blzL:udgopgMIH3dpugpY3yveit5kbaGqK

C:\Windows10Upgrade\resources\ux\EULA\how_to_back_files.html

Dropped File

Text

Unknown

»

Also Known As	C:\Windows10Upgrade\resources\i386\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\resources\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Pictures\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\6e8O\R0WRBw\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\resources\amd64\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\resources\ux\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\how_to_back_files.html (Dropped File) C:\Users\Public\Desktop\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Pictures\Camera Roll\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\OneDrive\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Searches\how_to_back_files.html (Dropped File) C:\Users\Public\Videos\how_to_back_files.html (Dropped File) C:\Users\Public\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\dll1\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\how_to_back_files.html (Dropped File) C:\Users\Public\Documents\how_to_back_files.html (Dropped File) C:\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\dll2\how_to_back_files.html (Dropped File) C:\Users\Public\AccountPictures\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Saved Games\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\6e8O\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\how_to_back_files.html (Dropped File) C:\Users\Public\Libraries\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\how_to_back_files.html (Dropped File) C:\Windows10Upgrade\2052\how_to_back_files.html (Dropped File) C:\Users\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\tyDH\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\how_to_back_files.html (Dropped File) C:\Users\Public\Pictures\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\how_to_back_files.html (Dropped File) C:\Users\Public\Music\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Pictures\Saved Pictures\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\how_to_back_files.html (Dropped File) C:\Users\Public\Downloads\how_to_back_files.html (Dropped File) C:\Users\FD1HVy\Videos\5CXoE8Jcrysc\how_to_back_files.html (Dropped File)
Mime Type	text/html
File Size	5.44 KB
MD5	6ab605c7337d5e46f2b3053d26258b3e
SHA1	830ec4345cdafde65f8505d723a2f2cc987a805f
SHA256	33d6aa89ba649604484f3e3c09760ce4e31a090a818397ce48b3869975e85cee
SSDeep	96:zXKuCnnWnoVCjmOY/ps8fgG9mB4JyVP3vcZtdxblvqh/fkR:zXKuCnnWnoVCjmOYq8n9+BV/vcZtXe/Q

C:\BOOTNXT.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\BOOTNXT (Modified File)
Mime Type	application/octet-stream
File Size	960 bytes
MD5	804a7c9c77062aac48452f1db2b7a7be
SHA1	0f0ccf89bd0dd74960cf626c1d1c81204b4ca1be
SHA256	73249486fc49829e4d1539a05a83b568fe3117564e6220baab75749749d69ad7
SSDeep	24:5cRbVCinvZKyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVrpHn:iVvvZKyzhQegGLJmBHY2IyVZ

C:\BOOTSECT.BAK

Modified File

Stream

Not Queried

»

Also Known As	C:\BOOTSECT.BAK.badday (Dropped File)
Mime Type	application/octet-stream
File Size	8.92 KB
MD5	6e9c0172495c53acf60893475cfa5716
SHA1	7a821c9b20ea8396c5ed4b3b610020d1a763d5d8
SHA256	9e4153cab6d5bd2d04116bd59a9bd789b4f56429f0f7605113184abb24bbd99f
SSDeep	192:+cDTYBULBlpQsTPGNleGSxEFekVU/1VvRQ8JlO3bD7kNSL18n9+BVj4:+kPLB1PGNleA0iSMYizVj4

C:\Windows10Upgrade\bootsect.exe

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\bootsect.exe.badday (Dropped File)
Mime Type	application/octet-stream
File Size	116.62 KB
MD5	9e643e7cce98517b2cd3303aefa3730e
SHA1	0a53d4a2d16bd4c8290d2bc003d4d0346b57d04c
SHA256	5e9e8f5746b11f96b313752f66e9941f59296fa19aabceca28904e380072a4c7
SSDeep	3072:hy96b/jmitN5B7F75TzNjf9v7NRsxhTc6DTY:h06bjm47PzNjfRvsbciY

C:\Windows10Upgrade\Configuration.ini

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\Configuration.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.14 KB
MD5	c48b81f5961108989c9d272cd4c31d88
SHA1	458c460e0f4ebac5ef08a941adbc906e56f4d14b
SHA256	ebe4452a35384c2088cb8b520cd165ef9a5870af7cb936df27465f2c3842e2dc
SSDeep	24:ItacBvLfzELcnSPJyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdV8:wvLfzEYSRyzhQegGLJmBHY2IyV8

C:\Windows10Upgrade\cosquery.dll

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\cosquery.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	61.12 KB
MD5	28f89affc1e6bf5e080eb30f84e5a7fa
SHA1	2821ed0b581ede578e36d9695b8ff61f4525de47
SHA256	e4e6595e8786e6b97448aef9147b7aeff8235f1e9363e68fe2ae6833afa7a587
SSDeep	1536:7qzWVeX9p/wnjViwevXV8XwzEgODA+VjCzjZBRnW/:7qzWVeX9p/AdAzEZDA+JwtnG

C:\Windows10Upgrade\downloader.dll

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\downloader.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	202.62 KB
MD5	804f478c1f70e2f8b35b23e8a99b16e5
SHA1	878fe8e677cf2b76d5cc1d9c345ad297335e9623
SHA256	c62c504bf42674fbe8cc7c270f17e73e937ed6cbabbafde206308230cb8d6226
SSDeep	6144:eddskZvC7tUrW4HG/qDA0dOFUsN5XEFaXAlO7m:ePlZAtgHG2nd8U25XEFa+n

C:\Windows10Upgrade\EnableWiFiTracing.cmd

Modified File

Batch

Not Queried

»

Also Known As	C:\Windows10Upgrade\EnableWiFiTracing.cmd.badday (Dropped File)
Mime Type	application/x-bat
File Size	10.50 KB
MD5	f215a7d9f1819c2d80aa5e06da3a9ce6
SHA1	d821baad11b2d1fcdb3165294d67197d3020daaa
SHA256	f3c9d1efb9dbe6a7f416d519ba9048674ef33c8271ccb8d1f525d8ad0629cd5b
SSDeep	192:P2ibG3HTaX4cXRiCCRxAtmiG6F20xH+rTNq4vewzZmZ93ffBD2BH1TR8Ki8n9+Bo:Ze9Atmr4srVvTzZyfo1VR81zVq

C:\Windows10Upgrade\GatherOSState.EXE

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\GatherOSState.EXE.badday (Dropped File)
Mime Type	application/octet-stream
File Size	552.62 KB
MD5	92a00e8ed298aa7296240bab2d047063
SHA1	e722daa4cc23129974098d95b57197506ff23a85
SHA256	fcd97840dfdcf40cd7ffba597e90390de884e069287e056a52b3e6f7233ab69e
SSDeep	12288:ktSTe+ZmfXWDT0o2h+AuaeuWtgZNVU80U9jazJjYLLqAbgtauGIZKDFE3Yl0Q:ktSTe+ZmfXWv0PMMkmNVU8POByLqA8t6

C:\Windows10Upgrade\GetCurrentDeploy.dll

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\GetCurrentDeploy.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	528.12 KB
MD5	87817421452136b5c86800954b996468
SHA1	b8fe6bcebc4f361f2d298347c75351a6768a9e88
SHA256	628a653f6390d27f7d18fc6a5d6aeb10c154c8f082f06a9d4f959c9d3edb69ab
SSDeep	12288:QeWnyOBclVej88TdQfuG+8fucqSFG8Zm0of64q:T6yOMVfeoj+eFG8Jl4q

C:\Windows10Upgrade\GetCurrentRollback.EXE

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\GetCurrentRollback.EXE.badday (Dropped File)
Mime Type	application/octet-stream
File Size	72.62 KB
MD5	29aefb54c2bc6688d5e217f9c2129cb9
SHA1	5f04f0498ab2da0aa3e695275d5d9200e549f7f7
SHA256	6a412c2e43d3cdd92c6355b347f44d8c20076afb2eb022758a32034417920c68
SSDeep	1536:G7I23QbE3Pvxbf52AGQgyNvgkmYzuB225X+O:eIgb3n5f52AWySdd

C:\Windows10Upgrade\upgrader_default.log.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\upgrader_default.log (Modified File)
Mime Type	application/octet-stream
File Size	245.25 KB
MD5	229c6e7b5aadb90d105fbcdf6918120b
SHA1	fd82d6479df94c3e3e1f9ea60f17ae8a94dcc58d
SHA256	8490aa43bc28526c07ec109b7319ef7859578b359dd8f4d1cc09352cd20e1c80
SSDeep	3072:qtkw2nOlO9Fw3kwXe4Sstm6kc1NP+pu2Urpe9YmPzA5rXUfahyirJ:qtNrXauBrcc5XyO

C:\Windows10Upgrade\windlp.dll.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\windlp.dll (Modified File)
Mime Type	application/octet-stream
File Size	895.12 KB
MD5	b25872f7cf2a9dfb82226cf9d1323a8c
SHA1	9a35aef8c06ea4412643c8deca9116a4cdeb27e7
SHA256	a9588087a5bcd4f34efec738770e4bcbd0ad47b1800b2926c12fda58fa168eb1
SSDeep	24576:d2r9xLu3bYTwAMMlJlw4VA8hC8Ju3pZHomzMn8NQ7F:d0vu+3uJ8tA3jqF

C:\Windows10Upgrade\WinREBootApp64.exe

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\WinREBootApp64.exe.badday (Dropped File)
Mime Type	application/octet-stream
File Size	26.12 KB
MD5	bd6bff9d54001278e58f0ba2fdf53463
SHA1	7cf453984159761325c968af0578d8f79459cd93
SHA256	e0d4c70646792c1384b14133052a7b526bc76291d561dfdbe7d039154efcdbb3
SSDeep	384:P62VYYEcur+qPOpg09WG80aq0GftpBjEJMlGm1F2w+fPYysDcSlupCwkzVA:PWYEjbPOpg0mi7lMwiTsQSdXzO

C:\Windows10Upgrade\resources\ux\block.png

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\block.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.83 KB
MD5	983a36fbe1558a78df5c642b8d46035a
SHA1	cb7a04d07eae09b52a6d2f907ba3cd4396e32aa2
SHA256	ea3d631f5eefb040397a0904d048c08b7bbe797edf2a23b6675f8dd511c8a9a4
SSDeep	48:lmQmgUGWtVaMc8TC9bKgmGYSOyzhQegGLJmBHY2IyVdO:lmQ07n/cJ9mqm8fgG9mB4JyVdO

C:\Windows10Upgrade\resources\ux\default_eos.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\default_eos.css.badday (Dropped File)
Mime Type	application/octet-stream
File Size	7.47 KB
MD5	c5d4124e25795f874f66165e942abcfb
SHA1	c44f3daebbad03882ca0bf57a3b34a12724b8b5b
SHA256	ca2693a42132c5aaf7f8f778b9592761d4ebfc62de3bac9de05935b06528a9ab
SSDeep	192:ddDxxikcSEcLcBL8KH7eY8qpH81ftOom8n9+BVh:XxxVuBwKSY8cc1fJmzVh

C:\Windows10Upgrade\resources\ux\default_oobe.css.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\default_oobe.css (Modified File)
Mime Type	application/octet-stream
File Size	6.03 KB
MD5	4d057803fc9d9d39357567ab981e9730
SHA1	c27d9968f55b07e0367827716eae85427863b65b
SHA256	85de32276e34d8bb014147a6eb35a6475329b7978eccaae685f36d0c69d79450
SSDeep	192:WihNc17BoImHgLFVAj25kqc8KkDJ308n9+BVk:WioQHgLFVAjckqccDt0zVk

C:\Windows10Upgrade\resources\ux\eula.css

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\eula.css.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.02 KB
MD5	0b66b4ca0113c6f6f524d2d55bddf6ff
SHA1	9ea785a53c8f9f180d06fffbb7f78d9a6cef4708
SHA256	160432e735a1ea2bf301be82b22be36e8301804c949ae68042253fe613d22857
SSDeep	24:erh4gyT97aDyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVIC0:4mgyT976yzhQegGLJmBHY2IyVIC0

C:\Windows10Upgrade\resources\ux\GetStarted.png

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\GetStarted.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	4.66 KB
MD5	39bf86714ff922d8affda937d60a9074
SHA1	bb33e4067531149df449cef149b73e74c674853b
SHA256	5949521a8bfe25b36c67e3416d20a4d3ba762bd04c2ed3de6ff9fdee6151170e
SSDeep	96:jUcf8CT0/0zOfLHe7L6iwy1RcubS3inaUfF0Rdvxmay0SrCnl8fgG9mB4JyVsD:jrk80/0wH1Rj9jzvxmrOl8n9+BV6

C:\Windows10Upgrade\resources\ux\loading.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\loading.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	17.92 KB
MD5	19cc478c885871aa51c503108796fbbd
SHA1	b55ce6be8d6b72bbe829b07b7554b6af704ee833
SHA256	30e61694956e773edc489c0e723b7b8df1959c02e45580a1c6ab631f772ef847
SSDeep	384:o5q7K7sWh2ey7pAYF+7WXg75BWRtH/Wsw/sjgmzlq9OzVg:ow7yLwA++7WE23wr6q9Ozu

C:\Windows10Upgrade\resources\ux\logo.png

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\logo.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.48 KB
MD5	53cb4d5a0aa1c855bb14d238c558a5f5
SHA1	5f9eeaf4b2f11bb0a11f61d64b0f30a92a1b559c
SHA256	c995e0557f32eb5b5deeda9d0a427d2d9468d53840fa5595db1b3e7f281588f0
SSDeep	96:tR5JmSffZhHyGqvlSZC26KTZ8fgG9mB4JyV6:tRPfaGqvlAC2BV8n9+BV6

C:\Windows10Upgrade\resources\ux\NetworkIssueFAQ.mht.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\NetworkIssueFAQ.mht (Modified File)
Mime Type	application/octet-stream
File Size	608.43 KB
MD5	ca48d981d8dfa65b0dc36f2e7f7b1929
SHA1	9c692bdf083118404a9a2bd5205de8b623c7e971
SHA256	555502c8ce1c5f938814226f74895cccfc316b5d28150e7ed4bd1e7dfbc3e52f
SSDeep	12288:1bCoXfWSk2xPIZPyMb5c0xmsRS9w7/v8xG0PihdaMM:1bCKfbzxPEi0xmj9wjvaGvTM

C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\ui-dark.css.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\ui-dark.css (Modified File)
Mime Type	application/octet-stream
File Size	263.78 KB
MD5	5788096d02372bee5df621c35910c66d
SHA1	0ca230b0cb29c6af39c4ee199363b860de7fbecc
SHA256	5e5f8a5d4c1de7c972f11935c491618b77004b2d898884c0b0058a8d71a5b641
SSDeep	6144:xjxXXcLEr/MIE72iYkOlxXFCcqaNnsgdjJNj:7cQr/jE6iYnXWgdz

C:\Windows10Upgrade\resources\i386\BiosBlocks.xml.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\i386\BiosBlocks.xml (Modified File)
Mime Type	application/octet-stream
File Size	90.42 KB
MD5	b1586c4f62ab31e990987d70715de3bd
SHA1	35a8d913b4a8546aaed98ccf4e6935f7b4448c39
SHA256	364477281444bfde1093ddfb653c9cba8d29cbd87fe50684dc0900d2c0a63de2
SSDeep	1536:iGi8kM+7AT/E3uzCPNnTsFwshz5t+xsC4dPqhi:G8ryIc3umVTk5t+iCECi

C:\Windows10Upgrade\resources\i386\hwcompat.txt.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\i386\hwcompat.txt (Modified File)
Mime Type	application/octet-stream
File Size	17.05 KB
MD5	dbcb0600b65e5907b800b778d82a54bc
SHA1	dc5b0d81cf5003661b15375ee0069ab5ccad4b0f
SHA256	94040672e697c1243217dad39608b4fc49c0ae4a2fe12ac370874568ac970bd2
SSDeep	384:0Vt5yKSOxKHxcPCGf5SgKUx+EsRNQW+CdcV0zV1:syaqxcPCGggQ1N7+CaGzf

C:\Windows10Upgrade\resources\i386\nxquery.inf.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\i386\nxquery.inf (Modified File)
Mime Type	application/octet-stream
File Size	2.39 KB
MD5	b894d360d704a63c7f2cbb05e21399d1
SHA1	ee002d59e948d042a23559af364b78264f5bfbeb
SHA256	7256f1759dc5739387c1ae972124c9b645dffe5edf9bf5956e4227688f0ecccd
SSDeep	48:w1uMrPWgLUXHx863UwVJ9HOwJ+NZgkY68yzhQegGLJmBHY2IyVX:ISgNw3ORNZK688fgG9mB4JyVX

C:\Windows10Upgrade\resources\i386\NXQuery.sys.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\i386\NXQuery.sys (Modified File)
Mime Type	application/octet-stream
File Size	20.59 KB
MD5	4b524d14a0515a1e99f8200fa81ff853
SHA1	70fd8e52269d44d418488222eac8798b8e85231b
SHA256	cd462067e275cfa6eb3411e48954e639362606e4da9cdb57307cbed0199c3426
SSDeep	384:Ndp2zn6LX4m7T5GbKLLspBjQ9aFwWEFJ2DU2zVR:R2znRm7T5GbKHma9BWDNzv

C:\Windows10Upgrade\resources\amd64\BiosBlocks.xml

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\amd64\BiosBlocks.xml.badday (Dropped File)
Mime Type	application/octet-stream
File Size	92.61 KB
MD5	187a237b0bc9a441c3cf8dfcd7b61326
SHA1	57deffff9a95c9744a60a5b3524307eaaf55857b
SHA256	d87a32008f54064eb40b745c60f20b4c1b6a93b4a4f6da200722773482dd0d06
SSDeep	768:SxrcwhO845QHlrcTWMil3/phs/uk5++JEVRb09k4R9l0bXjnJt6jAKpQ+jzC:Sbg/QFUf+vp6/0Rg9k4RunjWAs5q

C:\Windows10Upgrade\resources\amd64\hwcompat.txt.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\resources\amd64\hwcompat.txt (Modified File)
Mime Type	application/octet-stream
File Size	72.34 KB
MD5	d4d676d789ba9da6aefeabb24a0b1766
SHA1	63b851fc559fe43910546682c56f71a4c0d2ecb8
SHA256	c350b5e2a8bdbeb2cb7fe72a89e515479f8940d26b7c337f0c92b2bf274e9bce
SSDeep	768:oO4Z/PuUmvxWT7CYdT1lM/jt0nh9abe2kK+Hog5jn8gyP2FhgZ7lBhoqp1z3:od0a7CYDieVK+Ho6jn8/2/gB

C:\Windows10Upgrade\dll2\webservices.dll.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\dll2\webservices.dll (Modified File)
Mime Type	application/octet-stream
File Size	737.92 KB
MD5	bfbdaf209b03b8d0e3a1f62a0b91381d
SHA1	099ee50f7b73389911abd138300b91b24b96d34c
SHA256	607606a2f8fb5c24f9476edb86a5c12939a935e59f1942ec3894f1192c86e9cd
SSDeep	12288:WwqqVM97iHvOcqP5qXCTZkRXflcKudEtDywuPMbtXb:NqqG2vOdMXIZkRXfl4deywuPuXb

C:\Windows10Upgrade\dll1\cosqueryxp.dll.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\dll1\cosqueryxp.dll (Modified File)
Mime Type	application/octet-stream
File Size	130.12 KB
MD5	f29c0bd84945c0781ec775dda909e90c
SHA1	ffac0f62f6302beb76083849be1fa222aefe718e
SHA256	3c1e7091084d69eaa58f1d25857c1567fdcede09ec7c276543d2e3f5b8b302ab
SSDeep	3072:Fy7qjA/CmKdGRqWUHCyLGpVvfInlJgjiwjs57NpUlP9chcVae:8wA/CZY3UiGevf4F1rUbae

C:\Windows10Upgrade\dll1\webservices.dll

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\dll1\webservices.dll.badday (Dropped File)
Mime Type	application/octet-stream
File Size	936.62 KB
MD5	982bd3bdb57f0164dfb6c80577765495
SHA1	5d9f2c2c25a06d3160803bf456f00eab202f2d2a
SHA256	d9c46f12a54e785031f1529a683309e3c43a32f2c6155a74ed4669655fd1d7cc
SSDeep	12288:fWOVyO0JZbgmhDf+sBpaWa1WfigKvxBECuNzRc505Wba7Ek+KVcQNZSC:f4JZ0w+m/FevECuNzRc505Wm7EkqQ7SC

C:\Windows10Upgrade\2052\DWINTL20.DLL

Modified File

Stream

Not Queried

»

Also Known As	C:\Windows10Upgrade\2052\DWINTL20.DLL.badday (Dropped File)
Mime Type	application/octet-stream
File Size	116.62 KB
MD5	efe7143f7908c5f2c91e2da83d190443
SHA1	e27d4370f5891b198822d908b0abccc44d5fe780
SHA256	1e058d200a16f7eb7c663035a00f80bbda24704eb150de70e519eee028d784b0
SSDeep	1536:VdK7ej7RzepoeOnCydtNSYcZiMkuz44ejva1pbGAilmc:1jSozRtqkmC21p7ymc

C:\Users\Public\Pictures\desktop.ini.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\Public\Pictures\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.30 KB
MD5	c634a36894abb86981dde8d569e83ba4
SHA1	ce8c3c358f16306ad202ef88b5a3c677ad73e6ae
SHA256	cf7d0858f28ed29d361caf658995019cd2f1bbfff89fb86e9cb4611b98c44881
SSDeep	24:ooOw6SZxvR9kvwBpgq0zDt6yzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVcS84:oos244BDYsyzhQegGLJmBHY2IyVn

C:\Users\Public\Desktop\Google Chrome.lnk.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\Public\Desktop\Google Chrome.lnk (Modified File)
Mime Type	application/octet-stream
File Size	3.20 KB
MD5	7098ac50312800f8d3bcafb8c4e0180a
SHA1	25828dabbd05317075107d6ee6797b773c6f4dcf
SHA256	20d4c60800bd4b4cc0d86163f41afc9d1fc28eccff8b3c801a9030bd04287ef9
SSDeep	96:CB74hVBzouKYcrFeqzAZ2oZZ8fgG9mB4JyVj+:8EhLzbZ8n9+BVj+

C:\Users\Public\Desktop\Mozilla Firefox.lnk

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\Public\Desktop\Mozilla Firefox.lnk.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.91 KB
MD5	0203eced8bfaa3f637064fd82384fbb6
SHA1	619033278f1730b091b6d5b5b9807ac80e58a6c9
SHA256	9ea611c5bd47be9226d490b52c024fbcf101ca11e54e9baf235c1920e2077445
SSDeep	48:l52NmwnmxJvhHrC7jCh27PJ4B1j5oyzhQegGLJmBHY2IyVB:l52U0SJvBTh0I5o8fgG9mB4JyVB

C:\Users\FD1HVy\Videos\-jznahtE4kKp77.swf

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\-jznahtE4kKp77.swf.badday (Dropped File)
Mime Type	application/octet-stream
File Size	5.92 KB
MD5	8f6538ca93586c55ce5cf314e6c764ac
SHA1	93b2fdfee06e6a33fcbd2650b8779ef6b749eba3
SHA256	752625f0856a7731bd069243ffd3e5641560bfee71ea0b4328795f97960e58b6
SSDeep	96:yK0565gsSqH3LG+MQKdO+Dz8SzHFX7bvk9gmyPsvBiTt2gFGSnZdaPMIoorjiJ8O:Z0Qg6S+4/8SrFX7bL2BQtSQOBS8n9+BH

C:\Users\FD1HVy\Videos\SxDnaZ.mp4.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\SxDnaZ.mp4 (Modified File)
Mime Type	application/octet-stream
File Size	48.13 KB
MD5	19b4a48f96c2fe34e9395ba12f7989cb
SHA1	e1155f82ea8af1e9c3ff24dd4ebfa8b92fd04fc5
SHA256	94817a4cae73b1ed2247910439e1536740bef3d52737c905992cbc6dac4ca74f
SSDeep	768:Ed/6qqsxjOEZuyhsrglL2oH7Pz5MSiKp35nlWrSn6JL2CYjRL5geuIdWMzV:EiqfxHZPKglL2kz5Rb0O6JL2CoCe3J

C:\Users\FD1HVy\Videos\tyDH\lPwCUw8cEX.avi

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\tyDH\lPwCUw8cEX.avi.badday (Dropped File)
Mime Type	application/octet-stream
File Size	26.33 KB
MD5	15cf45abcb4a6ad551448448203e7b66
SHA1	419e5241bf76c2d61aaf1225ad4962e006aa775c
SHA256	c542f2b4105b0a249b7e798d49a7152e4292ce7dc82c6b868bb780936eac632e
SSDeep	768:xVWg5+YkGyTAJPIWDVS7gKt6tj38m4iPDz9:xVfRkGyTogWDVS7g/d8mX

C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\aaBmLyaBJYHF93.mkv.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\aaBmLyaBJYHF93.mkv (Modified File)
Mime Type	application/octet-stream
File Size	49.02 KB
MD5	f823df4c036666758305a51dbe6f2ead
SHA1	a884e381f1af966361ba3170d99a26b445d462fd
SHA256	19262627fa2e42e22d946d8bae8229a364b0b5d9df1067d884bb7ceb6a8385aa
SSDeep	1536:FsEO2pTG6m7jEBGeo8AimKzKJ+TyRVOUImQbXy:8CCjEMGAim83yFQLy

C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\WS5fX-K AYxB.swf

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\Dqz_0X9ePbor5mqd U_X\WS5fX-K AYxB.swf.badday (Dropped File)
Mime Type	application/octet-stream
File Size	88.02 KB
MD5	cd5cf6eb9a0e2d8a948a73fd9b84d4a0
SHA1	f7148330dc7700672dad06b5d8790fc915656e21
SHA256	8a4c38376589c5279a0df030d30b52acbc8fbb4ab0b710663aafaae2b6cece7c
SSDeep	1536:53y7nvZtIoMX8SnTuwkn3tm09TyFaxGOSpi8517UhCnDhzaNccEvEiQQrgAL:dy7xtLMHKw0dm3kGOSpt1cqDh1vd1rgk

C:\Users\FD1HVy\Videos\6e8O\AU-n-lqXxAjCSxxW55O.mp4

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\AU-n-lqXxAjCSxxW55O.mp4.badday (Dropped File)
Mime Type	application/octet-stream
File Size	81.66 KB
MD5	e2b65d5b82c07e7fce1cc18b6af0da9f
SHA1	49999445100b0382fa009b7579afd7bc101d2d72
SHA256	a5f852a7079343d3a43d9af4ad0d71ccedce01aca5c0eb23d42425c8f1c3a878
SSDeep	1536:o/aUib71FYYhWnqg/nqsJVHJAP7kKHlEhVRCc7FtBR0tXlaAapqu8ew9pxyRgTew:o/arjWBqsJvClIVRn/GXla7pJ8ew9mRA

C:\Users\FD1HVy\Videos\6e8O\Ik1BV8EWWpDx_je.swf.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\Ik1BV8EWWpDx_je.swf (Modified File)
Mime Type	application/octet-stream
File Size	29.53 KB
MD5	6d8a6aa8195e6d052345e2fd6945ee71
SHA1	65dfe68d01c0a09d23bb75db2a185e58a9532bf6
SHA256	13522905c355c5ccb4d129f359290db5f34b9d0a2bb48072c1701789f5ff5874
SSDeep	768:kYATFolLTjGNHc0iEe3VTh0Zd9DgpJkoJBoT5oZiIYX/WOz1:9Ae1jSaEcSn9Erk4qT5siXX/WU

C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\U-aWoLpVX.mkv.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Videos\6e8O\F-0VzNSZc2or1F\U-aWoLpVX.mkv (Modified File)
Mime Type	application/octet-stream
File Size	74.19 KB
MD5	1da88f1bed84276201f95fb0f3841684
SHA1	394f33289d434343595bc4b03f4fa5c52957d27c
SHA256	a47184428716f6e41890a91358580a4b0235123796921e2666324fc8e64156cf
SSDeep	1536:uWRYZ2BAyEBfIEhj/xMPOAZK5Gf6lD3UVOq:uWRYYAyEBftheNFf6RUVOq

C:\Users\FD1HVy\Searches\Everywhere.search-ms

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Searches\Everywhere.search-ms.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.17 KB
MD5	803677a93876d822bb61ad73c5c41011
SHA1	25522621f9626fbfb137ff9315e048a66023d298
SHA256	345207bf5b1e0fb4e6ab7f743465c43396aff2d13ba74cd4a3cdf02472a52409
SSDeep	24:9RPauiGGH4kBpuyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVPB:9FDwuyzhQegGLJmBHY2IyVPB

C:\Users\FD1HVy\Saved Games\desktop.ini.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Saved Games\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.20 KB
MD5	e0ce50e87ae01b7d2bda912e02082f7c
SHA1	53be922d922dd85d3f1995c2d454fbfd63d98194
SHA256	6830aa6175dce8877c0538b38b8c559ac9a6eab20064bc3d530a7e9c6fe5fcaa
SSDeep	24:higJKi5S9TG7zPpk3aomuyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVEO1:hLKi4FG7zi3aojyzhQegGLJmBHY2IyV9

C:\Users\FD1HVy\Pictures\-upO1oDZZj odXbta0.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\-upO1oDZZj odXbta0.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	78.40 KB
MD5	5eaa42f85e71e3474333330dd9d9f883
SHA1	2b2792a802d566fa752314946f86d2233071c271
SHA256	95fa2d0cdab2ed6e0e38ba05dc69ceaea00048a3113fcea1e177dba677683d42
SSDeep	1536:TxcXI3P46djHUV6dVLvT8h/7Z2qvupdOeZYDtUQqiZCNg/4bIUfAf:TxYaA6dgwfn87mptZYKQqiZCNg/4PQ

C:\Users\FD1HVy\Pictures\AhU08XjAC_Z6BrVkDX.gif.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\AhU08XjAC_Z6BrVkDX.gif (Modified File)
Mime Type	application/octet-stream
File Size	36.56 KB
MD5	ff355fe965151dcb4f03bd5d01f4d15e
SHA1	08880df39c9a2bff6c22e6711c0a7024fe6c8d61
SHA256	4e0849c2f7c5f736ce23a239929852a03f15b126dd6cf925af1d6b3d1be41dc2
SSDeep	768:av6geAYFsRjAG1oRgp/UCtY4GP1nJOdQoCcROgOsKps/TdTt4wi52VROFICzz:axwsRjAGiRgpsCtYdnUdB6ps/Tdh4TSq

C:\Users\FD1HVy\Pictures\bLaD6 4BFxrAKmcLy.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\bLaD6 4BFxrAKmcLy.jpg (Modified File)
Mime Type	application/octet-stream
File Size	70.47 KB
MD5	f1323d8e1b6263a46a5a72a82bc69300
SHA1	780b69fe5bea1c194705eda1898ffe88ecf3d3db
SHA256	99ef5f4fe5b6b0bc004827f744ec19a424fb323d8ffe44104efc89cf3c948f98
SSDeep	1536:oAxxz6gJbWQKGP2/djPTpyCfReScB7B1nw4ZU:Hd1JbWI2dP1PReScT1woU

C:\Users\FD1HVy\Pictures\cJMsK5xHa.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\cJMsK5xHa.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	20.48 KB
MD5	39d735c2f8df8e53257883ca81d10d29
SHA1	c73b01aee3adf23272c5dfe60bf054ccbc6ef31b
SHA256	f7f93672702f26dffdd8b944e05a32c10fb860a3c0ea3e597e772ce062e1f1be
SSDeep	384:rad5HUfHDpRUNk7YXgo6TrjB+/AfjclZvRU6QRSNijLjijW85G94x6yJM8zVf:Od60NLXgoOrIA7KZvSV8QjijW85GOx68

C:\Users\FD1HVy\Pictures\desktop.ini.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\desktop.ini (Modified File)
Mime Type	application/octet-stream
File Size	1.42 KB
MD5	09de3dce2c52e0751fa4995d1ba96e94
SHA1	f1f52aa8b6a8b75b0033cfa557c2abee612035a1
SHA256	12ad78f8351ad0fee6c22dfa70491673bdeb9067929524e7cce9a7bba241f3c8
SSDeep	24:qMFelIw+IUOML6LunWmvWeezxm6Rc2uyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdv:Zpj/OulZvfef2yzhQegGLJmBHY2IyVB

C:\Users\FD1HVy\Pictures\finsyJVX7-2TP3 3Y0.bmp

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\finsyJVX7-2TP3 3Y0.bmp.badday (Dropped File)
Mime Type	application/octet-stream
File Size	28.59 KB
MD5	97b475fe707b5a8e6ffe8a5455419e1e
SHA1	a9847f8a2087183d8fba8215358ed3fd0ef752ad
SHA256	c1de88a7cf5c9f7ac2ead61d76de81ccf633b0d1ea85ecb1fa3dd63f2beece12
SSDeep	768:B2WuJs8uhffdavwAIEB3ucC92brVviM/R7zo:09JSYvwyB3ucC9irVxO

C:\Users\FD1HVy\Pictures\G ytLRAxWAyPUn1.gif.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\G ytLRAxWAyPUn1.gif (Modified File)
Mime Type	application/octet-stream
File Size	82.67 KB
MD5	434059297de1b42a5ff1d347cb2ad4b4
SHA1	0c9e734feb7fc28b2cc1e2b61e8bf55ce188c103
SHA256	a2acd66d93c5721e7f9cbe2090102cb8340d46afe65e6a933cec1b3cb62e01fd
SSDeep	1536:keNygCEbA3eZQrvxVY4KQMHE5wWYs1QcNGYXxC+Z+eh876JwAf+3yMAY:kyygDE34QrvvlC2wWYsB7xaSwAYP

C:\Users\FD1HVy\Pictures\HP8XfCZ76P5IS2.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\HP8XfCZ76P5IS2.jpg (Modified File)
Mime Type	application/octet-stream
File Size	45.71 KB
MD5	458556a454c5e85de06ad99b9d6ce6a1
SHA1	5c1bf5a8ac9bd2400aae233a855e011d533b82c4
SHA256	5fff256d1cac3f1f5641b7d0171e3400b327f79f95e1e248ee5eaff45a715a5b
SSDeep	768:c8bGerfGWLGvkAQFc9GRYNjGFiocoBTOf4NksTzHtEoa0v3GHG6V2LlzT:bVGHXJjGcoDHkOzHtpvWHVe

C:\Users\FD1HVy\Pictures\Lr LCRY3Wt0.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\Lr LCRY3Wt0.jpg (Modified File)
Mime Type	application/octet-stream
File Size	65.97 KB
MD5	a90208dc6f1ce6c93bcde2699b62adbe
SHA1	26b0d34c5ebd99cb8d766fe89b3668b9a04e0067
SHA256	1047de906f8ef710324ea68aa939db7063965f0c619b9fcbd9baa0edad49324a
SSDeep	1536:wi6iRoa8h/XdIejXS8CfgLeBVYc5s1SIw+8C1INybM6:wYT8ZjjirfvYc5s1/w+8CXI6

C:\Users\FD1HVy\Pictures\maBolnnEN.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\maBolnnEN.jpg (Modified File)
Mime Type	application/octet-stream
File Size	5.16 KB
MD5	82dbdbdf03ff01404e9f52aaa53f0b04
SHA1	d4f9d61d7965f686e111f97af4d2788189b86a36
SHA256	d50d633d3a64b6404cf8e3a6a0b850a5f82609338538d3ad26212e90a4cb9a8c
SSDeep	96:n8mxYUGO/PNvCLonBdYBsDcLoBTw8Blr3R66p+ikYkOHeW4EhEbpfH8fgG9mB4JT:fZGOXNvMonYrLATwizxkJwerQiN8n9+U

C:\Users\FD1HVy\Pictures\Nc8HjJ.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\Nc8HjJ.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	31.80 KB
MD5	6361dddcf59b53188b29f37d77b389bf
SHA1	3e96ba5f778c437b6525f8159bfc572d6209d965
SHA256	891d6fd1e068708eb3d236461bfed35077c2b4590eb3e738e86dc7905f456658
SSDeep	768:0VA/TfP0ZamNqk1XG8LvVq6VK0GA48RvfaBgzo:0C/bP08Dk1XG8vVq6f4Wvfm

C:\Users\FD1HVy\Pictures\P4dujcYY.gif

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\P4dujcYY.gif.badday (Dropped File)
Mime Type	application/octet-stream
File Size	8.38 KB
MD5	9c19bcd2bc139d182f5f547d2769e836
SHA1	d6d082e21b720f11448bcbbbbb68e342f11736a8
SHA256	1d55da6b17a927ea1f17bd8b6a05f796bf29a8689397c134815a25fbb837c8f8
SSDeep	192:aiIfV2mUNqu+Gs0T32+AvWYspIzW3AX8pqFo8n9+BVz:aiI92mMVTGOYFW3+8IozVz

C:\Users\FD1HVy\Pictures\PNPW.gif.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\PNPW.gif (Modified File)
Mime Type	application/octet-stream
File Size	27.03 KB
MD5	bbf874f4a0e36bad8360b1c26b7dc1e4
SHA1	9649f06cf07b7e242fad8b7b114c0c3fd5d70bb8
SHA256	787339780dca1ea521457c3b1c01f6124078c94df6e2f0d6aa6f13fa7359c59c
SSDeep	768:hLpmQX2HYiJDGWOqZamyQnGjjUy70Gd8klJmEaRzV:hLpmI24i8qZalQnG8tM6Eaz

C:\Users\FD1HVy\Pictures\quS85jOlb7OtuRO2bX.bmp.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\quS85jOlb7OtuRO2bX.bmp (Modified File)
Mime Type	application/octet-stream
File Size	3.53 KB
MD5	fa1a3468c49dae18fbbd650a0f223088
SHA1	87e0e90e59b72f73bcff9f8455000e2002c4d924
SHA256	d1e8f2478f2d58ee481d1032989ce40f9781a3ffc4524929acbd759293c0721b
SSDeep	96:Uo/k8a7k1fg9X6Jxcn80X0XhFiG0y8fgG9mB4JyV4:U2nfO6e8g2iVy8n9+BV4

C:\Users\FD1HVy\Pictures\rS62yzPpzA9AKo62EeBB.jpg

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\rS62yzPpzA9AKo62EeBB.jpg.badday (Dropped File)
Mime Type	application/octet-stream
File Size	6.16 KB
MD5	0aea51dcec4a71b2026baf4235bb4e1d
SHA1	7138e8a17fd57d9a925a8df6c7dfe74398ebf1cb
SHA256	ab56f9ae319427a49650b04e82bea24227a0ed9c86fcb403c1c60e1e9801891d
SSDeep	192:RYoobkP2CD1T2Opt5YmUKlgaNqoKn8n9+BVK:zSgbpT9l5slzVK

C:\Users\FD1HVy\Pictures\SJWECaoeRjTcoTVp.bmp

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\SJWECaoeRjTcoTVp.bmp.badday (Dropped File)
Mime Type	application/octet-stream
File Size	51.94 KB
MD5	626c2e944e9a8baf272f47ab31161a45
SHA1	5cc3939de7cf4fbff535cee23e376771b5870125
SHA256	4a7bfffb9c74996d726aba18757db177dcc3b847a22693ac34ede82054683ff6
SSDeep	1536:lOqYQDjz1fO8xlC2Q3x8DuAcmsym3jjoUzsXw:lOqhjpO8fC2Qh8Knmsy0jBzWw

C:\Users\FD1HVy\Pictures\SOu61Emm.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\SOu61Emm.jpg (Modified File)
Mime Type	application/octet-stream
File Size	48.62 KB
MD5	7e040b97207c78bf566e786b58ab6626
SHA1	a5bc327c7cda9e836f8eac68d8e0af3a2bc95f17
SHA256	6add9522b458ed9d0d28c6c9978643cf6dce2f49064f658f9165c7d79f117fe5
SSDeep	768:T1SkO2Xfv+xCpc7d1eHCsbROIBcnO48FVnw1j2hWWDtlIfklE0+goZGtvOQCGBfV:T1+gfvUCpaeiWRxmj+1IfX0NYGtv79L

C:\Users\FD1HVy\Pictures\TA87QKnQ4W.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\TA87QKnQ4W.jpg (Modified File)
Mime Type	application/octet-stream
File Size	60.51 KB
MD5	e238c07a3b4e3cbbd61dc454c63c8a0a
SHA1	98a9421bc607a4c15ac731828a2aa331502be0ab
SHA256	374e8d43c6092bfd250bf6d2d37f0179e1721fa72fd9609af770b4d8c08e7f57
SSDeep	1536:zmxSJQfjuZ3RBymx54i7JfIRFdj/YFT61M5:zqS+rS3R0mcmJwFkFT1

C:\Users\FD1HVy\Pictures\tEUEPYba gybUS7y.jpg.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\tEUEPYba gybUS7y.jpg (Modified File)
Mime Type	application/octet-stream
File Size	67.97 KB
MD5	a503ce4dc7964a0db2df749dcdb95708
SHA1	1409b6d1b699c7fa4956dcf057abb25d48713df8
SHA256	5de56ec0f525452b2a554f88131bed36cd43a18fdc72417dda69f05c5ace3598
SSDeep	1536:gsPbR/7UA5i+uLIH9UtCa9B1LGUI2Z4+kCB6fof58fEse:gsF/Q7zI+tCK4UI2ZEa9se

C:\Users\FD1HVy\Pictures\TXtBpVWOhL2pZXbXXN0.png

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\TXtBpVWOhL2pZXbXXN0.png.badday (Dropped File)
Mime Type	application/octet-stream
File Size	97.30 KB
MD5	8c50ce9ef187b80b8699506cf030a6c6
SHA1	4d8e8a3cbd837d6da12bb7e2efbe56ac6a6768aa
SHA256	dd9ce9a3535fe9575a9ef400e8fc16100ae59039792aed6b6a6bdd3ecbfc813b
SSDeep	3072:2xOloizjhb0IasdB7EiB7sB5DPyC14uxcHCfg:28ltjhb9d5EiB7sBxPRTxcd

C:\Users\FD1HVy\Pictures\YTV8jbaYql.bmp.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\YTV8jbaYql.bmp (Modified File)
Mime Type	application/octet-stream
File Size	45.33 KB
MD5	a79a51f3a3cfa3bd40aa99c916df53dc
SHA1	cb8c258415334ff6ecb500d4e8d7d16816cc4eda
SHA256	dd7beda53c0a2cf79d3629492f450f3a259fbf151c98e858372226efba50e819
SSDeep	768:MNQ45SYuqEd4cbQixjeqsr6iGyXt8F1dTst0Tr6V7dZSptovRniEO9C+c3qaAzot:AQQSYuNQeqqoPXtYjT1TrQhZlRniEO9K

C:\Users\FD1HVy\Pictures\ZdIADFpA.png.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\ZdIADFpA.png (Modified File)
Mime Type	application/octet-stream
File Size	54.70 KB
MD5	24ca4ca75b5a1527584e7510e1fdbe00
SHA1	3525f3cfeb83ac3ed241326c5f6e901297be0e67
SHA256	b19c2da55714548540e2c1e5c76f5d0df2fdf0822e4b0bd1d27e88e22bd1bbfc
SSDeep	1536:vQJ9ONRd9d04xyPIQAEA5ge7fa7ikVJusUQS:g9ONRnVwgtEaF7CJu3

C:\Users\FD1HVy\Pictures\Saved Pictures\desktop.ini

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Pictures\Saved Pictures\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.11 KB
MD5	87d2d57ef45909c31a1c3870e9e6dc69
SHA1	b0dc1bb06625ba159424d24cb21847bb49f8cb55
SHA256	03618df812f4e47efb2dbc0fcec453179addd9e8a36103e53c1e5a3fa735f512
SSDeep	24:0EM71JwDEWyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVT:0lZ+EWyzhQegGLJmBHY2IyVT

C:\Users\FD1HVy\OneDrive\desktop.ini

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\OneDrive\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.03 KB
MD5	8c481e3e580dd524956b598db643601d
SHA1	4c3379bb42f99c4f10831f684e873e9f33953f91
SHA256	aa7fb0b942a41c5464b282ea052b0e4e6fcf3ecc80c679b9938660d1ceb5845a
SSDeep	24:wJnLfvdHu/m/bSyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVw:wRL7bSyzhQegGLJmBHY2IyVw

C:\Users\FD1HVy\Music\desktop.ini

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\desktop.ini.badday (Dropped File)
Mime Type	application/octet-stream
File Size	1.42 KB
MD5	6ea969eaf7ad664c9cedfa246119c1b8
SHA1	f4eaabbdc30d3aa9c26ff5a0551278868a877b30
SHA256	0ad874af6464cd7e39258681397cea1216320bf50996e88ad4b94f5c553459aa
SSDeep	24:94jtQbJrus2QQlyBGbHT4xE+KxtLnIyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVf:94jtCUQiSGjT4xknIyzhQegGLJmBHY2r

C:\Users\FD1HVy\Music\mTEBy2X ZKp66znunJe.m4a.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\mTEBy2X ZKp66znunJe.m4a (Modified File)
Mime Type	application/octet-stream
File Size	97.03 KB
MD5	7915eed0fea1481f7c4e0810cf75f254
SHA1	151d30e71ec56eda62380e4c102382d719c6f221
SHA256	0c213d5c2dfbab9632e1391bde237268c5c18d1aca352ff43b13be17f8a1c8d4
SSDeep	3072:zKDRjEkFZLZRfoCH9KtGIcTiS0207Qe21oHG:mFFZLZRfoCH/IcTqR7Qe21om

C:\Users\FD1HVy\Music\YqycESTrORFjWh41LkQj.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\YqycESTrORFjWh41LkQj.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	74.09 KB
MD5	9f52d0faa4e1785acf3a5df08f80cd7b
SHA1	36fe2f49f884caa64fede2b180b1d31c33cdf083
SHA256	7bca797e386936a762b1e467c0c51a88c5dcb7df5620c4c54aa23cf8e647a88a
SSDeep	1536:Jonv0S4+ig6dwIaEZxrXxYv88MWXH2g8P1Lin:Jov0S4w1IdrBc/MWGgwI

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\Hbvx2H x.m4a.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\Hbvx2H x.m4a (Modified File)
Mime Type	application/octet-stream
File Size	58.45 KB
MD5	eaed4f07fd1c7b8b797d1e3425918c3f
SHA1	38f7d727afad9f9db7345dd8ff3801b597df4253
SHA256	ba82baeeb5a674999bd34a09fd608a0d2e182ae284b373fb207b882a8620de77
SSDeep	768:Wug/1o7YxRiaTvaFJQFbV0TwtULpzIlULEBQAtYfbUkcJr99ihftc7wXH+x1vN0a:W1o70XmLyygjrJrihlWwXex1vN1TN

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\hMB7brPKqyg.mp3.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\hMB7brPKqyg.mp3 (Modified File)
Mime Type	application/octet-stream
File Size	62.34 KB
MD5	4833d6e9c7a3c349c3a6421342ff8b48
SHA1	7d9e99a760aa1fee38dd99ca8b8f1173e5bafcce
SHA256	9ea76fe490434a9b17e5d85c10ed458141a2a079ed16811e96cb78eec7e7e050
SSDeep	1536:Ff2o6EQijh77ROE9xRz5bhj20l2RtF1eoZMUgyBsWDqt91Cuk6/e1:wEQWxR//RzC0wRooGNf9431

C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\YZbwDty45.mp3

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\MjKsH57dDdaGklY\YZbwDty45.mp3.badday (Dropped File)
Mime Type	application/octet-stream
File Size	56.34 KB
MD5	02ebfaaf1cb2d49ccd43fb46a0b09d21
SHA1	3b380a617af009c0c3a521e8cca22b90684a8008
SHA256	9f6b96bfecf5b110b2bb28aee5878d38b9cb40b1bd1626a97b6333e6f9137878
SSDeep	1536:iMmVNAkLfa6TDm2pH2Uc/sK/erUVLK/aR:iMmV1jxTvpuVmrU9qaR

C:\Users\FD1HVy\Music\-_HxTeiwDnv\ydylpC67BxA8VJUuq.mp3

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\ydylpC67BxA8VJUuq.mp3.badday (Dropped File)
Mime Type	application/octet-stream
File Size	32.49 KB
MD5	5e9e9ddf189c69cc18fe65a9a008da58
SHA1	cb8f7a8a62eebd0ab242593b20b45c512e4cd75a
SHA256	064cff0727e8f45a57fcc2923d11ec3500338d8c2ce9fde0e41cc1dc7a67928c
SSDeep	768:qq5xCFC9i2UtPf/No6yooPmCxEh+yrec08ga1+lVVYRdUOXWTC1uzN:5xD9i2Q/SD9yreWga1+lVCjUaUL

C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\xf877UpwmBv_.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\eZ7MU-92EIvok\xf877UpwmBv_.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	29.54 KB
MD5	74d3ed352bc93a563e470e7139a44f02
SHA1	1d5fd837be901a314f4ed900de29bd7d6b4d6a60
SHA256	8947d3ce4a4edf44f2950c8a55a816717acd045a10d111599b17b6ab765f5c5b
SSDeep	768:kkTfkVUV/gkLgZgFxXMH45MORDpCCz3fZ58pWFOfHMsdLzU:k8c+lgkLpzAU/NN3fccOfMsdE

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\JgCxDEBm.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\JgCxDEBm.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	3.12 KB
MD5	ce4c74fb92504ecf6cf624da23eb2253
SHA1	efa7ea9aad131d9981633f3d3d7d4899cc9608f0
SHA256	50d7e4b4d1cafb4af28e06f7e87b5bf024729a6077ebc3e35ebc87084b95358f
SSDeep	96:xXsMrQqIcLw85368Sd8ft4eLG8fgG9mB4JyVqh:xVrrIQw8xlSd8ftO8n9+BVqh

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\9di9x.wav

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\9di9x.wav.badday (Dropped File)
Mime Type	application/octet-stream
File Size	60.40 KB
MD5	916996dd0e0e4b90428a250a2d2da2e9
SHA1	4cb645cec6a63b5cbaa5e0d77cf1601820a7899f
SHA256	a5e77d298ae058285e5483135d9fae702468ec35daaf242436417a19afa7a8d9
SSDeep	768:W0XwEbALDvpdk2jsp2lJMZ1bIoYVv7/ZWThBLbPj7m2LQkUWZSi+nimGrYpFFzG:xXxE/p220UO0P21B77trUW0ima

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\BZjyy S6Je.wav.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\BZjyy S6Je.wav (Modified File)
Mime Type	application/octet-stream
File Size	19.42 KB
MD5	effaef138c7e632199529dd39c950f01
SHA1	bf8e2a16cfb7fe779906397119fc1dc0067f09ff
SHA256	4e636b32d691c2bd52c6d72154a5267d6535934a781ee80c1896e24133a65b71
SSDeep	384:efD8e4FadJPgi5Y09RA8MzTR++3TqoPz1xL7FyxcUJCGX/JUhezVU:efDN4woi5YYA8MzTR+eZUzJfBvzS

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\JRnC0ugsmJw.m4a

Modified File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0kp4qjpzjBRulygy\v0MtQh\JRnC0ugsmJw.m4a.badday (Dropped File)
Mime Type	application/octet-stream
File Size	44.08 KB
MD5	641d600a6d430be49e8ab04d43d666af
SHA1	eee48128a3ac4d7adc389f8ff8667cae45bbbe07
SHA256	9b454e703d4980b4f32d7e89edbe7459e3fb49ce8301788aa2ab809b364b499d
SSDeep	768:dUXRORUg2wlIfPU0btrGgb8PoRVww0VmpDxUYTd54N5f5aWzA:+ORUpw9+4gn4mpDqYYn5aZ

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\cXbSoGgh8Nm_VYbbE6.m4a.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\cXbSoGgh8Nm_VYbbE6.m4a (Modified File)
Mime Type	application/octet-stream
File Size	17.33 KB
MD5	6636ec23f51a0af0ffc29640ab084325
SHA1	c717a38c08e5204b83aca98e342940fc46d1e402
SHA256	2fd923ca0516470cca6a57f978ec0d8731e363489d5876763f3ed12bf7484b7d
SSDeep	384:zlklHc9+5dV3SIllUOKpTZWmsRIGL5e54WdeedNzVo:zlkl89uV3VC5smEd5nWpzW

C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\QHrXRscO9x65L5UAe--.m4a.badday

Dropped File

Stream

Not Queried

»

Also Known As	C:\Users\FD1HVy\Music\-_HxTeiwDnv\0IT0Nf14ZLed\UgNFA9D3VjM\QHrXRscO9x65L5UAe--.m4a (Modified File)
Mime Type	application/octet-stream
File Size	17.80 KB
MD5	c9061898db8d2ccba2b62c9b85f097b5
SHA1	1c9e1730b410aff624f80f49935cf45e98849b21
SHA256	ca7209c7f753ad0f9a7986d46bcce5e7feb516de06b7509ee09db8bfba013b8b
SSDeep	384:yT6tPMrw31huIrf8r74jZylA11/IOXqWR/2IvKiuuzVO:oiMs1hu+uho3/BCiuuzk

C:\Users\Public\9707F881606F1A60E0A22D9BA3F754EDBD347C63B206910712C150A325D7D8E3

Dropped File

Text

Not Queried

»

Mime Type	text/plain
File Size	1.00 KB
MD5	dfb525e2192e450c49a278c82125e276
SHA1	d2f5b1924886474f3bd7b84c86f5360768b4cc87
SHA256	f099691a4905ea0bfe5849e5d3efcff9f3c74c9eed137b0ba2a5913a4fd3225d
SSDeep	24:seTYj4B+dFxyyzhfoOzAFGzlxh9ybZD+XmnBHFqxoIAdVa:pk0odFQyzhQegGLJmBHY2IyVa

Remarks (1/1)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After