|
SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
|
|
|
| Filetype: |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Entropy: |
7.99976297665572
|
| Filename: |
SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Filesize: |
20958060
|
| MD5: |
26851594f76e29aff0f4fc00f3849635
|
| SHA1: |
8ff94b1a64d4defa1857add81ddfffeab9ec18f4
|
| SHA256: |
2676f127b2b71d44f494027fbac4a20bc8be2257fe8a201b28b9780056bde24f
|
| SHA512: |
23326ea3429514c517840b5a20dde3ef52d24f170948d6b96ee70d0d1f185ca284f1129c3b8df298276a2f78c19bb65cbda86d54c51f48ce519881ae29ed56d4
|
| SSDEEP: |
393216:qcXVXEdLpOulHEHlXToZpsUs6MSgYZEetRF9Zslwsd6gv6XKNnWZ:qcX4lpkH50psUGp2Zsl/dHv8KN2
|
| Preview: |
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1
..PN..PN..PN.*_...PN..PO.JPN.*_...PN..s~..PN..VH..PN.Rich.PN.........................PE..L....C.f.................f...".....
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Contains functionality for read data from the clipboard |
Key, Mouse, Clipboard, Microphone and Screen Capturing |
|
| Contains functionality to shutdown / reboot the system |
System Summary |
Access Token Manipulation
|
| Detected potential crypto function |
System Summary |
Access Token Manipulation
|
| Drops PE files |
Persistence and Installation Behavior |
Access Token Manipulation
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
| Queries the volume information (name, serial number etc) of a device |
Language, Device and Operating System Detection |
|
| Stores files to the Windows start menu directory |
Boot Survival |
Registry Run Keys / Startup Folder
|
| Uses 32bit PE files |
Compliance, System Summary |
|
| Checks the free space of harddrives |
Malware Analysis System Evasion |
|
| Contains functionality to adjust token privileges (e.g. debug / backup) |
System Summary |
Access Token Manipulation
|
| Contains functionality to check free disk space |
System Summary |
|
| Contains functionality to enumerate / list files inside a directory |
Spreading, Malware Analysis System Evasion |
File and Directory Discovery
|
| Contains functionality to instantiate COM classes |
System Summary |
Access Token Manipulation
|
| Contains functionality to query windows version |
Language, Device and Operating System Detection |
|
| Creates files inside the program directory |
System Summary |
|
| Creates temporary files |
System Summary |
|
| Disables application error messsages (SetErrorMode) |
Hooking and other Techniques for Hiding and Protection |
|
| Enumerates the file system |
Spreading, Malware Analysis System Evasion |
|
| PE file has an executable .text section and no other executable section |
System Summary |
Access Token Manipulation
|
| Program exit points |
Malware Analysis System Evasion |
|
| Reads ini files |
System Summary |
|
| Reads software policies |
System Summary |
Access Token Manipulation
System Information Discovery
|
| SQL strings found in memory and binary data |
System Summary |
File and Directory Discovery
|
| Sample reads its own file content |
System Summary |
Access Token Manipulation
|
| Tries to load missing DLLs |
System Summary |
|
| Uses an in-process (OLE) Automation server |
System Summary |
Access Token Manipulation
|
| Writes ini files |
System Summary |
|
| Contains modern PE file flags such as dynamic base (ASLR) or NX |
Compliance, System Summary |
|
| Submission file is bigger than most known malware samples |
System Summary |
|
| Found installer window with terms and condition text |
Compliance, System Summary |
|
| Found GUI installer (many successful clicks) |
System Summary |
|
|
|
C:\Program Files (x86)\fluent-bit\Uninstall.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\Uninstall.exe
|
| Category: |
dropped
|
| Dump: |
Uninstall.exe.0.dr
|
| ID: |
dr_199
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Entropy: |
6.955917612498663
|
| Encrypted: |
false
|
| Ssdeep: |
3072:4Xv9qKohEb1gu7ceAzyqKlA7+lonLk/jvUT0nWPWcN7:4XsKoG3mzyqKlbo2bQmE
|
| Size: |
112736
|
| Whitelisted: |
false
|
| Reputation: |
low
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.dll
|
| Category: |
dropped
|
| Dump: |
fluent-bit.dll.0.dr
|
| ID: |
dr_33
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
6.686688629293495
|
| Encrypted: |
false
|
| Ssdeep: |
196608:qXkZehzRAhTRYjYliLP60gN7c09d2LcT:Ct6TRYjY2fgN7c09dEc
|
| Size: |
9607168
|
| Whitelisted: |
false
|
| Reputation: |
low
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.exe
|
| Category: |
dropped
|
| Dump: |
fluent-bit.exe.0.dr
|
| ID: |
dr_35
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (console) Intel 80386, for MS Windows
|
| Entropy: |
6.651937262662904
|
| Encrypted: |
false
|
| Ssdeep: |
196608:LIhFUygyrs0lwU/Uy9cvu5494kijkyhE0RdbMH04rY:khFUygyrsNy24FkyhE0RdwU
|
| Size: |
12074496
|
| Whitelisted: |
false
|
| Reputation: |
low
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.pdb
|
MSVC program database ver 7.00, 4096*18419 bytes
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\bin\fluent-bit.pdb
|
| Category: |
dropped
|
| Dump: |
fluent-bit.pdb.0.dr
|
| ID: |
dr_10
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
MSVC program database ver 7.00, 4096*18419 bytes
|
| Entropy: |
5.537606836017064
|
| Encrypted: |
false
|
| Size: |
75444224
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\bin\luajit.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\bin\luajit.exe
|
| Category: |
dropped
|
| Dump: |
luajit.exe.0.dr
|
| ID: |
dr_11
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (console) Intel 80386, for MS Windows
|
| Entropy: |
6.74989565586852
|
| Encrypted: |
false
|
| Ssdeep: |
24576:ryhPZFvYzxMJPcVTK93l83jMzrejZNNWzjYjMQh/:rOeTAeMzrejvoSZh/
|
| Size: |
1034752
|
| Whitelisted: |
false
|
| Reputation: |
low
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Program Files (x86)\fluent-bit\conf\fluent-bit.conf
|
Generic INItialization configuration [INPUT]
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\conf\fluent-bit.conf
|
| Category: |
dropped
|
| Dump: |
fluent-bit.conf.0.dr
|
| ID: |
dr_12
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
Generic INItialization configuration [INPUT]
|
| Entropy: |
4.553462624159214
|
| Encrypted: |
false
|
| Ssdeep: |
48:cyuQnQnxZyTEc/w3bcbFVR/q9vqEIw0brduYFZOWcGzQ5axIT:c9dneZI3bcbFVR/q1qE10bBuYFZORuQb
|
| Size: |
2531
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\conf\parsers.conf
|
ASCII text, with very long lines (709), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\conf\parsers.conf
|
| Category: |
dropped
|
| Dump: |
parsers.conf.0.dr
|
| ID: |
dr_13
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
ASCII text, with very long lines (709), with CRLF line terminators
|
| Entropy: |
5.415601731902053
|
| Encrypted: |
false
|
| Ssdeep: |
96:qDNwXhzNwXhSNw3b0aNwkOyNwYhNhSGuLq+NwoBvNw1JR8GNwK6oNwf51NwkS+N6:dkbvTfzuoTp
|
| Size: |
6621
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\conf\plugins.conf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\conf\plugins.conf
|
| Category: |
dropped
|
| Dump: |
plugins.conf.0.dr
|
| ID: |
dr_14
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
ASCII text, with CRLF line terminators
|
| Entropy: |
4.32534550038365
|
| Encrypted: |
false
|
| Ssdeep: |
3:/WFFs2bdlRiKyn:+/zlDy
|
| Size: |
47
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit.h
|
| Category: |
dropped
|
| Dump: |
fluent-bit.h.0.dr
|
| ID: |
dr_15
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.174096913069369
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1xLf6T/e/RjxfZj8jTCjAjYjXZjDjhjsGIj/:uqEe4+F8q0YH31ronjpxlcmog93VsFJ5
|
| Size: |
1432
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\calyptia_constants.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\calyptia_constants.h
|
| Category: |
dropped
|
| Dump: |
calyptia_constants.h.0.dr
|
| ID: |
dr_36
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.425629457479013
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rosugsIN4mtjT8xcFottA9PQfpkvACS3o3wZ8hD8B:Ce4+2qJHFroszsIN4mtjT8xcFottyPQV
|
| Size: |
2501
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf.h
|
| Category: |
dropped
|
| Dump: |
flb_cf.h.0.dr
|
| ID: |
dr_130
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.75145885005611
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroSxlQQyG5tfb7GFR0gtGrYyZN1gTsOgpx:Cex2qJHIQ4R0YyniTq
|
| Size: |
6589
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf_fluentbit.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf_fluentbit.h
|
| Category: |
dropped
|
| Dump: |
flb_cf_fluentbit.h.0.dr
|
| ID: |
dr_131
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.059509090016769
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ApZOtNAeQH:uqEe4+F8q0YH31rom4tXI
|
| Size: |
980
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf_yaml.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\config_format\flb_cf_yaml.h
|
| Category: |
dropped
|
| Dump: |
flb_cf_yaml.h.0.dr
|
| ID: |
dr_132
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.060438464643405
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ApXPOX3ZHs/:uqEe4+F8q0YH31romXWX35k
|
| Size: |
960
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_api.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_api.h
|
| Category: |
dropped
|
| Dump: |
flb_api.h.0.dr
|
| ID: |
dr_37
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.041158417057114
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A9VjxfZjsfJYGOmYZOHAGOlAZOWIy5ZadzI:uqEe4+F8q0YH31ro8xlsfuGIZ6AGyAZN
|
| Size: |
1509
|
| Whitelisted: |
false
|
| Reputation: |
low
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_avro.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_avro.h
|
| Category: |
dropped
|
| Dump: |
flb_avro.h.0.dr
|
| ID: |
dr_38
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.250006535618549
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro94/kLbLAam7pJLWKb8:Ce4+2qJHFro94/OLAzVJLWq8
|
| Size: |
1541
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_aws_credentials.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_aws_credentials.h
|
| Category: |
dropped
|
| Dump: |
flb_aws_credentials.h.0.dr
|
| ID: |
dr_39
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.120886676850548
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHlD0ka2QveSFtQXRe9iT+RpRl2Ccbp2ziF7/gJDor0fT:xNrD0kovD9zKx4orI
|
| Size: |
16356
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_aws_util.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_aws_util.h
|
| Category: |
dropped
|
| Dump: |
flb_aws_util.h.0.dr
|
| ID: |
dr_40
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.684890304735308
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroVQMHGRaBRv8z9/E9BceAj0wN4WX3mbMLhzg89pvvRAG3:Cex2qJHOLBRvUE96vANWnmehzb9FviG3
|
| Size: |
7007
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_base64.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_base64.h
|
| Category: |
dropped
|
| Dump: |
flb_base64.h.0.dr
|
| ID: |
dr_41
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.811782993481824
|
| Encrypted: |
false
|
| Ssdeep: |
96:Se4+2qJHFrovYmPOgVe4GGq3roiAsWfP/XjFsWfWNIb+:Sex2qJHxmPOgVetGq1u/Xj8NI+
|
| Size: |
4387
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_bits.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_bits.h
|
| Category: |
dropped
|
| Dump: |
flb_bits.h.0.dr
|
| ID: |
dr_42
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.267428626358941
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1An6UDVQIiIJPLbv5C9FMTbY:uqEe4+F8q0YH31ro7eV3RFLbv5Eqc
|
| Size: |
1239
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_bucket_queue.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_bucket_queue.h
|
| Category: |
dropped
|
| Dump: |
flb_bucket_queue.h.0.dr
|
| ID: |
dr_43
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.8103029749931805
|
| Encrypted: |
false
|
| Ssdeep: |
96:Se4+2qJHFro5dA9YoQ+FMnYjcExgdp39nb9zp6ZeT8nBHJZ:Sex2qJHpcExQp39b9zoZeYn3Z
|
| Size: |
4613
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_byteswap.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_byteswap.h
|
| Category: |
dropped
|
| Dump: |
flb_byteswap.h.0.dr
|
| ID: |
dr_44
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.317593154815062
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroWvcXllI/XXXqQF9FgP/XXXqwX9jhLgK/XXXqBg93VPZndPgK0Dq:Cex2qJHzcE/H6QFwP/H6wXcK/H6BgUK3
|
| Size: |
3105
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_callback.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_callback.h
|
| Category: |
dropped
|
| Dump: |
flb_callback.h.0.dr
|
| ID: |
dr_45
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.027969158680916
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roGxlON0j0U/e6610Xuu07ws07dcX07su07K:Ce4+2qJHFroGxlOKVD
|
| Size: |
1672
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_cfl_ra_key.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_cfl_ra_key.h
|
| Category: |
dropped
|
| Dump: |
flb_cfl_ra_key.h.0.dr
|
| ID: |
dr_56
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.804985803807275
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roKxlH798tjI0w2XA3HvMIqaM6to5MfMHmfqGA2:Ce4+2qJHFroKxlHGBI0k/MhaM6to5Mf5
|
| Size: |
2682
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_cfl_record_accessor.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_cfl_record_accessor.h
|
| Category: |
dropped
|
| Dump: |
flb_cfl_record_accessor.h.0.dr
|
| ID: |
dr_57
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.633247817590763
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roML/xl798H9jeYNr1iz+HQLMGDL8mTsfzcwUy05m1My9RX9hL:Ce4+2qJHFrouxlGHBHUMm80Gn93oO
|
| Size: |
3321
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_chunk_trace.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_chunk_trace.h
|
| Category: |
dropped
|
| Dump: |
flb_chunk_trace.h.0.dr
|
| ID: |
dr_58
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.028953438052485
|
| Encrypted: |
false
|
| Ssdeep: |
96:1e4+2qJHFro/n2UDUH9VxOqTPrGqzV6qGabn:1ex2qJHonxUtVWYn
|
| Size: |
3567
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_compat.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_compat.h
|
| Category: |
dropped
|
| Dump: |
flb_compat.h.0.dr
|
| ID: |
dr_59
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.156793207425703
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHZSxExxR/ecA6ERR80xdH1+tMbZtRGyNbnuYq3PkZnU6jGQXb+:xNXSxExjzA6WRHbVhzAv
|
| Size: |
6366
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_compression.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_compression.h
|
| Category: |
dropped
|
| Dump: |
flb_compression.h.0.dr
|
| ID: |
dr_60
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.9961001393483375
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ron5i/xlJ8dYFPKSPbu3/MS8cqZb69P9i7Cp7F/79J67FS7C:Ce4+2qJHFrogxlRjbDeTmR
|
| Size: |
2810
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_conditionals.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_conditionals.h
|
| Category: |
dropped
|
| Dump: |
flb_conditionals.h.0.dr
|
| ID: |
dr_61
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.007996512385417
|
| Encrypted: |
false
|
| Ssdeep: |
48:RRB4gF0CH317oZM1xlH798j8C7byG81h67ivkjpJwT6EQtwejrRmTGb5:54QPHF7oZ+xlHG4C7bah05jpJ8Idn
|
| Size: |
2741
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config.h
|
| Category: |
dropped
|
| Dump: |
flb_config.h.0.dr
|
| ID: |
dr_62
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.00685584583799
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHaTX75Qt4kHblEJRtEnE9bRKcpkSM+g3lkIJE:xNmO4kHblE2GRKc6SM+g3PJE
|
| Size: |
13933
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config_format.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config_format.h
|
| Category: |
dropped
|
| Dump: |
flb_config_format.h.0.dr
|
| ID: |
dr_63
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.245238908520689
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ApHOOjxfwZNMl1fWQNwoW:uqEe4+F8q0YH31romu2xSMLeoW
|
| Size: |
1052
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config_map.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_config_map.h
|
| Category: |
dropped
|
| Dump: |
flb_config_map.h.0.dr
|
| ID: |
dr_64
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.822455464165461
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roSFxlof3Hm17xDxK1fJoltg3TvdJQ7Jo/idcljlhAlcAPJG5q:Ce4+2qJHFroWxlofDPTivxZPWZk1
|
| Size: |
5113
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_connection.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_connection.h
|
| Category: |
dropped
|
| Dump: |
flb_connection.h.0.dr
|
| ID: |
dr_65
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.868960784645189
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroexlEHjGGFn1U9py71shFVGixUnLTFvFz7khu43a:Cex2qJHc2ZhFVGS6Ln7L/
|
| Size: |
6358
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_coro.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_coro.h
|
| Category: |
dropped
|
| Dump: |
flb_coro.h.0.dr
|
| ID: |
dr_76
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.286910640416737
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroNxxloE8/ncmK2zd8u3X2KixYNE5w6:Cex2qJHw92cm5zd8uWKGYN6
|
| Size: |
3169
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_crypto.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_crypto.h
|
| Category: |
dropped
|
| Dump: |
flb_crypto.h.0.dr
|
| ID: |
dr_77
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.153217092332069
|
| Encrypted: |
false
|
| Ssdeep: |
96:5e4+2qJHFroZxHifX3+HSxzkNcNutzoBAH:5ex2qJHwxC2ySeIC+H
|
| Size: |
3797
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_crypto_constants.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_crypto_constants.h
|
| Category: |
dropped
|
| Dump: |
flb_crypto_constants.h.0.dr
|
| ID: |
dr_78
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.229274147470064
|
| Encrypted: |
false
|
| Ssdeep: |
48:lTe4+F8q0YH31roZTamjctoFtCtQZ0FH2DvJXdhVaV5VSVsMV5UR:5e4+2qJHFroZTamjctoFtCtQZ0FH2DvS
|
| Size: |
1832
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_csv.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_csv.h
|
| Category: |
dropped
|
| Dump: |
flb_csv.h.0.dr
|
| ID: |
dr_79
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.8315616169690285
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rowxlHqXxdF2Sxepm1g:Ce4+2qJHFrowxlHqhdF2OeZ
|
| Size: |
1918
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_custom.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_custom.h
|
| Category: |
dropped
|
| Dump: |
flb_custom.h.0.dr
|
| ID: |
dr_80
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.596360625974792
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOxl9XfcfG0GPculqhJYlcDvUcwEccxGOGOG0uK9ZGAlIGM57:Ce4+2qJHFroOxl9X0tdDXPONDtn
|
| Size: |
4058
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_custom_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_custom_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_custom_plugin.h.0.dr
|
| ID: |
dr_81
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.829868886328657
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roqB3xlqErEGV79mG1EGxkyG0qXoFCO:Ce4+2qJHFromxlqErEO9mcEikyVq4FD
|
| Size: |
2555
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_dlfcn_win32.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_dlfcn_win32.h
|
| Category: |
dropped
|
| Dump: |
flb_dlfcn_win32.h.0.dr
|
| ID: |
dr_82
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.046121419847819
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1pHkSy1q2:uqEe4+F8q0YH31robHk9q2
|
| Size: |
920
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_downstream.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_downstream.h
|
| Category: |
dropped
|
| Dump: |
flb_downstream.h.0.dr
|
| ID: |
dr_83
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.633973197501207
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrozxlE19x1k7IdqQ1+GaAWS1eT1eDQ1w28j/j6:Cex2qJH5aALjm
|
| Size: |
3216
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_downstream_conn.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_downstream_conn.h
|
| Category: |
dropped
|
| Dump: |
flb_downstream_conn.h.0.dr
|
| ID: |
dr_84
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.135242633291128
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AgKALqjxfZjDIjXZjybewBn2u6/MwRq2l:uqEe4+F8q0YH31rouTxlE9ybBYu63RqI
|
| Size: |
1256
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_dump.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_dump.h
|
| Category: |
dropped
|
| Dump: |
flb_dump.h.0.dr
|
| ID: |
dr_85
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.131572222834613
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AmeD5RjxfZjXeBzn9:uqEe4+F8q0YH31roLk5FxlOD9
|
| Size: |
915
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_endian.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_endian.h
|
| Category: |
dropped
|
| Dump: |
flb_endian.h.0.dr
|
| ID: |
dr_96
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.2657465940738595
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rou2T33SPw+ElrXMyF72LLPwicPbPnlSPGHzPa8d:Ce4+2qJHFrozTDPdGTwiUbPsGTd
|
| Size: |
2107
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine.h
|
| Category: |
dropped
|
| Dump: |
flb_engine.h.0.dr
|
| ID: |
dr_97
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.09876071689395
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOxl9xDFsF1EK5MEI3i8ohELs6u6D6QA:Ce4+2qJHFroOxl9xRQsShEA
|
| Size: |
1692
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine_dispatch.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine_dispatch.h
|
| Category: |
dropped
|
| Dump: |
flb_engine_dispatch.h.0.dr
|
| ID: |
dr_98
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.060136060726194
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AuIenIrjxfZjx8uGIjXZjFbZBz/kJkzZ:uqEe4+F8q0YH31roAr/xlxDF9FbZBzke
|
| Size: |
1206
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_engine_macros.h
|
| Category: |
dropped
|
| Dump: |
flb_engine_macros.h.0.dr
|
| ID: |
dr_99
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.156322621099764
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro0xleiUsRv9kqk0fRCLsYv/8Wew3ollyAEdFC:Ce4+2qJHFro0xlei3Rv+sClEHEdU
|
| Size: |
3792
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_env.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_env.h
|
| Category: |
dropped
|
| Dump: |
flb_env.h.0.dr
|
| ID: |
dr_100
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.075501756220714
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Au7nKjxfZjsNOMUai8DngNEb65E5k4XxXRo:uqEe4+F8q0YH31roGxleOMhTF6i5ZXFy
|
| Size: |
1426
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_error.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_error.h
|
| Category: |
dropped
|
| Dump: |
flb_error.h.0.dr
|
| ID: |
dr_101
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.142903395257572
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rosUCW42+4d7yFVOhEyTr:Ce4+2qJHFroEm
|
| Size: |
1789
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_event.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_event.h
|
| Category: |
dropped
|
| Dump: |
flb_event.h.0.dr
|
| ID: |
dr_102
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.014073282102444
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ronXaX5xlHxA6mzQ+Qcfb5vF3O2ew4GDy4pWNyV6T1RSn1S:Ce4+2qJHFroXk5xlHx25tO/rp01s
|
| Size: |
2385
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_event_loop.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_event_loop.h
|
| Category: |
dropped
|
| Dump: |
flb_event_loop.h.0.dr
|
| ID: |
dr_103
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
3.957162965449234
|
| Encrypted: |
false
|
| Ssdeep: |
48:uECe4+F8q0YH31ronPi37tEdlqzEI8q8x93p5Hnm9nWfuVPGQioBnk6MGobiCio2:Se4+2qJHFro45EyaBui6Bp
|
| Size: |
4898
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_file.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_file.h
|
| Category: |
dropped
|
| Dump: |
flb_file.h.0.dr
|
| ID: |
dr_104
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.125529110880367
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nxibPWe4IQZWF8wsU0E+eHQk1tpsL1A5fiWjuI9D9+0:uECe4+F8q0YH31roCRx+0
|
| Size: |
997
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_filter.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_filter.h
|
| Category: |
dropped
|
| Dump: |
flb_filter.h.0.dr
|
| ID: |
dr_105
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.617733546474633
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroaxRwp9ix5dCNHcaWtUGS+D0tjuh:Cex2qJHrCW7S+DE2
|
| Size: |
6385
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_filter_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_filter_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_filter_plugin.h.0.dr
|
| ID: |
dr_116
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.86215028711435
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroYxlz1E1ru49JGE36qkaDnQltNSj:Cex2qJHmvtsNSj
|
| Size: |
3177
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_fstore.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_fstore.h
|
| Category: |
dropped
|
| Dump: |
flb_fstore.h.0.dr
|
| ID: |
dr_117
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.528094493620614
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roGxlhIez1a1nAqMNMTfM7+/f0t/VLHH/PfwtM/0kfbQ/AD8/b:Ce4+2qJHFroGxlBJeAq92rFwcCt
|
| Size: |
3689
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_gzip.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_gzip.h
|
| Category: |
dropped
|
| Dump: |
flb_gzip.h.0.dr
|
| ID: |
dr_118
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.992742425863843
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roUvFxlhBceYeJFv7pe:Ce4+2qJHFroKxlTP7JFle
|
| Size: |
1605
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hash.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hash.h
|
| Category: |
dropped
|
| Dump: |
flb_hash.h.0.dr
|
| ID: |
dr_119
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.746731892733893
|
| Encrypted: |
false
|
| Ssdeep: |
48:lTe4+F8q0YH31roED1KqCKyMTlYDEoWkJ4lTMfE76Q+eyTESaAD:5e4+2qJHFroOlTlMJ4pMs733SERAD
|
| Size: |
2801
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hash_table.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hash_table.h
|
| Category: |
dropped
|
| Dump: |
flb_hash_table.h.0.dr
|
| ID: |
dr_120
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.824073997694838
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroWxXiFD7J36o8FgUcuruu1Gpm:Cex2qJHf9NH
|
| Size: |
3175
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_help.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_help.h
|
| Category: |
dropped
|
| Dump: |
flb_help.h.0.dr
|
| ID: |
dr_121
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.250628662001761
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roSFxlHqxDFz1sDIZBpFjqcKZd4R3GX0GGiwc:Ce4+2qJHFroWxlHqxRz1OIR11A
|
| Size: |
1793
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hmac.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_hmac.h
|
| Category: |
dropped
|
| Dump: |
flb_hmac.h.0.dr
|
| ID: |
dr_122
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.66259449810066
|
| Encrypted: |
false
|
| Ssdeep: |
48:lTe4+F8q0YH31roeG5tfPOpdHAJ47uJcm:5e4+2qJHFroe+tfGTg2+z
|
| Size: |
2335
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client.h
|
| Category: |
dropped
|
| Dump: |
flb_http_client.h.0.dr
|
| ID: |
dr_123
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.743003321115201
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHRtDBZ24lQJx0qXGJ3PBb6JkuA8rk/SlB2yrlH:xNPtFOxgPBGSuZr3lvd
|
| Size: |
18448
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_debug.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_debug.h
|
| Category: |
dropped
|
| Dump: |
flb_http_client_debug.h.0.dr
|
| ID: |
dr_124
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.01011082956848
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Aj3jxfZjoreEF0ut0Mza:uqEe4+F8q0YH31ro8xlobF080Aa
|
| Size: |
1279
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_http1.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_http1.h
|
| Category: |
dropped
|
| Dump: |
flb_http_client_http1.h.0.dr
|
| ID: |
dr_125
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.8850340693986745
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rohaJdV46vH0F84tXuvIgvLXQvKIrFQIFHF7:Ce4+2qJHFro008UFztXAIWLXmKIBQIF5
|
| Size: |
1609
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_http2.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_client_http2.h
|
| Category: |
dropped
|
| Dump: |
flb_http_client_http2.h.0.dr
|
| ID: |
dr_136
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.898445627640093
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rohj4Kcf46O9KlF84tW9uO9n9gO9LW9QO9KWIFQW6HF7:Ce4+2qJHFro+KcQxQFztmV9HLmXKZQ95
|
| Size: |
1644
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_common.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_common.h
|
| Category: |
dropped
|
| Dump: |
flb_http_common.h.0.dr
|
| ID: |
dr_137
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.524419568665712
|
| Encrypted: |
false
|
| Ssdeep: |
96:Qe4+2qJHFro+zALCCyfO58Q4H5bKWea+tMMoinaayZCnBhO5qlQ3l0tcuabcqpT2:Qex2qJHl/MXnFyZCnBg/BMmqz
|
| Size: |
10821
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_server.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_http_server.h
|
| Category: |
dropped
|
| Dump: |
flb_http_server.h.0.dr
|
| ID: |
dr_138
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.216672728399483
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ojxfTWpp7z0lyllM7D:uqEe4+F8q0YH31roOx7sfi
|
| Size: |
1035
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_info.h
|
C source, ASCII text, with very long lines (568), with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_info.h
|
| Category: |
dropped
|
| Dump: |
flb_info.h.0.dr
|
| ID: |
dr_139
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with very long lines (568), with CRLF line terminators
|
| Entropy: |
5.260637779506608
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roXcTi/uzr3Rq1zseln8PQcjGmsROEDwJCWsH2snUZuKDV1FSZ:Ce4+2qJHFroCi/RzsymsROb4np8PcZ
|
| Size: |
3640
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input.h
|
| Category: |
dropped
|
| Dump: |
flb_input.h.0.dr
|
| ID: |
dr_140
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.569310012327722
|
| Encrypted: |
false
|
| Ssdeep: |
384:xNfrBZzd+vGCTD/PodQ6I9Z9ZLq9P2rz12dpBs:xhrBZzM7TzJ6IrqPVs
|
| Size: |
29727
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_blob.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_blob.h
|
| Category: |
dropped
|
| Dump: |
flb_input_blob.h.0.dr
|
| ID: |
dr_141
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.895482475006574
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro2xlxDFn2jXP9yKvYXdP7Zxo8YEZQDb:Ce4+2qJHFro2xlxRn2TsqQB7no8Yx
|
| Size: |
1632
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_chunk.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_chunk.h
|
| Category: |
dropped
|
| Dump: |
flb_input_chunk.h.0.dr
|
| ID: |
dr_142
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.885885020060363
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrogxlH92L6eRN8c17s27F6lcicZeXBAWiFQLFd:Cex2qJHEeGmIeuWld
|
| Size: |
5764
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_event.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_event.h
|
| Category: |
dropped
|
| Dump: |
flb_input_event.h.0.dr
|
| ID: |
dr_143
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.150613246024222
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AdXUIXQ6Yq33jAvA:uqEe4+F8q0YH31roWlQ6f33X
|
| Size: |
1026
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_log.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_log.h
|
| Category: |
dropped
|
| Dump: |
flb_input_log.h.0.dr
|
| ID: |
dr_144
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.443118067807851
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AIYjxfZjx8uPZ9H6ZoHGZpMt:uqEe4+F8q0YH31roOxlxDPZN6ZwGZp2
|
| Size: |
1737
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_metric.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_metric.h
|
| Category: |
dropped
|
| Dump: |
flb_input_metric.h.0.dr
|
| ID: |
dr_145
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.945879117508585
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AW3nt3ujxfZopo1L2ZZzGZPK:uqEe4+F8q0YH31rol3t3Wxl2ZZzGZPK
|
| Size: |
1307
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_input_plugin.h.0.dr
|
| ID: |
dr_156
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.865974709403175
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroGxlxRxCEW5u89/Goz6GkmDDclnEj:Cex2qJHlOj0Ej
|
| Size: |
3220
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_profiles.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_profiles.h
|
| Category: |
dropped
|
| Dump: |
flb_input_profiles.h.0.dr
|
| ID: |
dr_157
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.93925275306476
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AjMgVjxfZl4TymZPY/Y9Df6WZP4Y/Y9Dk:uqEe4+F8q0YH31ro2xOZQABfxZPjABk
|
| Size: |
1307
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_thread.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_thread.h
|
| Category: |
dropped
|
| Dump: |
flb_input_thread.h.0.dr
|
| ID: |
dr_158
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.8935742099853625
|
| Encrypted: |
false
|
| Ssdeep: |
96:Se4+2qJHFroGxRxl3zVStZP2XHeTyfqCzuMiS9FODIF7aF6AwXV6OM:Sex2qJHZ3S4LiSdoH
|
| Size: |
4849
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_trace.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_input_trace.h
|
| Category: |
dropped
|
| Dump: |
flb_input_trace.h.0.dr
|
| ID: |
dr_159
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.922150082067241
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A/HQOjxfZtnTZnArKZPsAA:uqEe4+F8q0YH31roYw2xHnTZArKZPJA
|
| Size: |
1261
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_intermediate_metric.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_intermediate_metric.h
|
| Category: |
dropped
|
| Dump: |
flb_intermediate_metric.h.0.dr
|
| ID: |
dr_160
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.156140749626773
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1zMIhJjU/ecPFqlGFN6nP7mBwj:uqEe4+F8q0YH31roxAq4AnCB4
|
| Size: |
1323
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_io.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_io.h
|
| Category: |
dropped
|
| Dump: |
flb_io.h.0.dr
|
| ID: |
dr_161
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.873110162629631
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roHxlkfn2og0pCu0lnd17nL:Ce4+2qJHFroHxlkf2WMjpnL
|
| Size: |
2184
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_jsmn.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_jsmn.h
|
| Category: |
dropped
|
| Dump: |
flb_jsmn.h.0.dr
|
| ID: |
dr_162
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.122680252036523
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AvKAyT:uqEe4+F8q0YH31rokKz
|
| Size: |
848
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kafka.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kafka.h
|
| Category: |
dropped
|
| Dump: |
flb_kafka.h.0.dr
|
| ID: |
dr_163
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.0532272791326385
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nxibPWe4IQZWF8wsU0E+eHQk1tpsL1ASURN/ecjxfZjXW4BVHC5ff94QD6:uECe4+F8q0YH31ropupxlBBl+94v
|
| Size: |
1425
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kernel.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kernel.h
|
| Category: |
dropped
|
| Dump: |
flb_kernel.h.0.dr
|
| ID: |
dr_164
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.185028011386924
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Ae4/CO/eEM8t/Hj6VRnA2Y:uqEe4+F8q0YH31roWCEM2Hj6LDY
|
| Size: |
1192
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kv.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_kv.h
|
| Category: |
dropped
|
| Dump: |
flb_kv.h.0.dr
|
| ID: |
dr_165
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.950143188024571
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A6EjxfZjT/es54uaV62Fw57bNC5tTkw57by:uqEe4+F8q0YH31roCxlV54usrG5X495C
|
| Size: |
1499
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_langinfo.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_langinfo.h
|
| Category: |
dropped
|
| Dump: |
flb_langinfo.h.0.dr
|
| ID: |
dr_176
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.939319541288401
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrovx8/ix278fpJtSYwFxYC9Ws:Cex2qJHg8/igYZaWs
|
| Size: |
3789
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lib.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lib.h
|
| Category: |
dropped
|
| Dump: |
flb_lib.h.0.dr
|
| ID: |
dr_177
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.908737356698436
|
| Encrypted: |
false
|
| Ssdeep: |
96:ae4+2qJHFro+o9R5ZuI6xUDEBlX4VKaOY22X45PzJ2p0cWN70bxts4/:aex2qJHuCUDslXuhOH2X45PzJ2CcWN7G
|
| Size: |
4541
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lock.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lock.h
|
| Category: |
dropped
|
| Dump: |
flb_lock.h.0.dr
|
| ID: |
dr_178
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.074530268683629
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roTT+qsQrhW2NcWKmKhD:Ce4+2qJHFromqDrhW2Nc/PhD
|
| Size: |
1586
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log.h
|
| Category: |
dropped
|
| Dump: |
flb_log.h.0.dr
|
| ID: |
dr_179
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.860870253859643
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHIUJ/6HfMH/MEbGtIMBkRPAkRJPZP:xNofgMBkRYkRJRP
|
| Size: |
8990
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event.h.0.dr
|
| ID: |
dr_180
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.285479497719027
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rokf5xlUv8ukcUy6yHsyVciq951Xg:Ce4+2qJHFrokf5xlUEv+Rzhqpg
|
| Size: |
1748
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_decoder.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_decoder.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_decoder.h.0.dr
|
| ID: |
dr_181
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.942572042664774
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrouv2v2UH4bT+O3F0FbaqpRZbS0nN4yfZK:Cex2qJHHv2vGTMaQRZW0ds
|
| Size: |
4026
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder.h.0.dr
|
| ID: |
dr_182
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.973581146397232
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFro2vOv2UH4YoC/hohuAjqHDD3A+hHFWg1H7TV9+RqiEI0ZMU:Cex2qJHrvOvI2hohVjqHDD3v1QU
|
| Size: |
13143
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_body_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_body_macros.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder_body_macros.h.0.dr
|
| ID: |
dr_183
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.967640234027247
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroiHQ65e6rHx59yKb3XJyxHd0PMZ/+GPMhs+h:Cex2qJHRJyx90iWGw1h
|
| Size: |
7762
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_dynamic_field.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_dynamic_field.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder_dynamic_field.h.0.dr
|
| ID: |
dr_184
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.791897344408577
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroOUHhxqFh55sijhisPxc5kmfhzkd:Cex2qJHQQ
|
| Size: |
3363
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_metadata_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_metadata_macros.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder_metadata_macros.h.0.dr
|
| ID: |
dr_185
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.971786732313505
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroK65e6/VHf59/iK33bC+tXxHd0P3y/rbP3Kirh:Cex2qJHgjdx906zbyih
|
| Size: |
8068
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_primitives.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_primitives.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder_primitives.h.0.dr
|
| ID: |
dr_202
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.637419293145861
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFronHoKjRIM2U6W02Q0cZKFkpDKCC/tL6DhrDc0XzV51ZdPoAgdPoqDk:Cex2qJHQlOZrp6hh0Vm7eMrQ
|
| Size: |
9221
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_root_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_log_event_encoder_root_macros.h
|
| Category: |
dropped
|
| Dump: |
flb_log_event_encoder_root_macros.h.0.dr
|
| ID: |
dr_203
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.951520892791496
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFro765e6zHZ59GKH3lGxHd0P3eaRTGeP3eaOSh:Cex2qJHzGx90lCeDh
|
| Size: |
8318
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lua.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_lua.h
|
| Category: |
dropped
|
| Dump: |
flb_lua.h.0.dr
|
| ID: |
dr_204
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.081669871147031
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rokxxlEHHCT5bF3xhCwiaF+iYKzNqjRfKYVzniYSiP:Ce4+2qJHFrokxxlEHimNaFXJzcjRfKYx
|
| Size: |
2961
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_luajit.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_luajit.h
|
| Category: |
dropped
|
| Dump: |
flb_luajit.h.0.dr
|
| ID: |
dr_205
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.0982782750239455
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Aek+7kLjxfZjXWJQdbG4GRQwe0juBQ/Wc/u:uqEe4+F8q0YH31roWxl+QxwdWzdLDPGC
|
| Size: |
1488
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_macros.h
|
| Category: |
dropped
|
| Dump: |
flb_macros.h.0.dr
|
| ID: |
dr_206
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.888133714952649
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro0W0bru8pF1tTp1SFQ:Ce4+2qJHFroL0by8ppp1Sm
|
| Size: |
1892
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mem.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mem.h
|
| Category: |
dropped
|
| Dump: |
flb_mem.h.0.dr
|
| ID: |
dr_207
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.169980089979238
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31romxlMZgq5Cy3k9a0WyaUNjP6wwPb5Nyp9zEuqqC:Ce4+2qJHFromxlCsk0WyHT6PtNyJE
|
| Size: |
3071
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_meta.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_meta.h
|
| Category: |
dropped
|
| Dump: |
flb_meta.h.0.dr
|
| ID: |
dr_208
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.1049804423382605
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Ae8jxfZjXOznD:uqEe4+F8q0YH31ro6xleDD
|
| Size: |
955
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_metrics.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_metrics.h
|
| Category: |
dropped
|
| Dump: |
flb_metrics.h.0.dr
|
| ID: |
dr_209
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.100546027034628
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOxlC4Fzexduk3MM3ilIb4/WLqv9RD/:Ce4+2qJHFroOxlC4F66qx6T
|
| Size: |
3406
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_metrics_exporter.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_metrics_exporter.h
|
| Category: |
dropped
|
| Dump: |
flb_metrics_exporter.h.0.dr
|
| ID: |
dr_210
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.193915528386819
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ojxfTWi7gaxjxfZjXZjAN8zL8zSAwVznaS6:uqEe4+F8q0YH31roOxxxl9AN8HQ6VDaB
|
| Size: |
1326
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_motd.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_motd.h
|
| Category: |
dropped
|
| Dump: |
flb_motd.h.0.dr
|
| ID: |
dr_211
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.0680365215211545
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A22bJHJ5MT/Alo/Xdwt4uBtXIeag:uqEe4+F8q0YH31ronT/Al8dwKitXIeag
|
| Size: |
3417
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mp.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mp.h
|
| Category: |
dropped
|
| Dump: |
flb_mp.h.0.dr
|
| ID: |
dr_0
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.906815464671568
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroboFPJEL3NAG5uNZFgfPaQBKgIsz+jo3+VFpi:Cex2qJHeN5TbBKgIszMo3ai
|
| Size: |
3276
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mp_chunk.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_mp_chunk.h
|
| Category: |
dropped
|
| Dump: |
flb_mp_chunk.h.0.dr
|
| ID: |
dr_1
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.972563717661475
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rofjKxl60qgwQGAwL9F8J2pugeggyrxdem6sdybo++dQ5:Ce4+2qJHFro2xlsBAWFii9f2
|
| Size: |
2516
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_msgpack_append_message.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_msgpack_append_message.h
|
| Category: |
dropped
|
| Dump: |
flb_msgpack_append_message.h.0.dr
|
| ID: |
dr_2
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.768342060425608
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqtgIe4IQZWF8wsU0E+eHQk1tpsL1AXnWonemg4j3E73xsgQ1:uqtHe4+F8q0YH31ro1UC310
|
| Size: |
1571
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_net_dns.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_net_dns.h
|
| Category: |
dropped
|
| Dump: |
flb_net_dns.h.0.dr
|
| ID: |
dr_3
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.082650560487291
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ACvyMQhl:uqEe4+F8q0YH31rony/
|
| Size: |
900
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_network.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_network.h
|
| Category: |
dropped
|
| Dump: |
flb_network.h.0.dr
|
| ID: |
dr_4
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.669184502130697
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHX0sPTzYFdGRlVRhdIxijXfFe3J:xNSsPTzYFdGTVRhdIxijI5
|
| Size: |
7787
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_notification.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_notification.h
|
| Category: |
dropped
|
| Dump: |
flb_notification.h.0.dr
|
| ID: |
dr_5
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.934515683347398
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro2txl9EKyKqbYaK4rYyKaXaKODyKkmaKkLyKwLyK6:Ce4+2qJHFroexl9EXbUaNljaqDmawGD
|
| Size: |
1721
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_oauth2.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_oauth2.h
|
| Category: |
dropped
|
| Dump: |
flb_oauth2.h.0.dr
|
| ID: |
dr_6
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.9679403572214085
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro+xlHgch7suFRuEFTRbTGUT5fTPT7RBhTR/TGWTLOTg:Ce4+2qJHFro+xlHgc5suFHhGC5r77315
|
| Size: |
2340
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output.h
|
| Category: |
dropped
|
| Dump: |
flb_output.h.0.dr
|
| ID: |
dr_7
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.382270017651084
|
| Encrypted: |
false
|
| Ssdeep: |
768:xsHq7BgZjBgP+ln/GSpRd033jlKVfurPcq:xnKQ+tOSXODlrp
|
| Size: |
48477
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_output_plugin.h.0.dr
|
| ID: |
dr_8
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.885442741189509
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFro+xlQEj4Iu09qG4M6WkdDtXlavj:Cex2qJHNjn57vj
|
| Size: |
3316
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output_thread.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_output_thread.h
|
| Category: |
dropped
|
| Dump: |
flb_output_thread.h.0.dr
|
| ID: |
dr_9
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.628298420478393
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrooxlg/G3sokPmIupFPIV/0He2n:Cex2qJHmpHPDuURQ
|
| Size: |
4724
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pack.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pack.h
|
| Category: |
dropped
|
| Dump: |
flb_pack.h.0.dr
|
| ID: |
dr_18
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.061394617659706
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrobtMxlHUz/Z6k3D3R0IEGoTSTtDPBEeJPN6azu3rBW7kndGJwHWOoY:Cex2qJHOtFZ6k3D3R0IEGwitrBfJPN6z
|
| Size: |
4989
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_parser.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_parser.h
|
| Category: |
dropped
|
| Dump: |
flb_parser.h.0.dr
|
| ID: |
dr_20
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.556978108756864
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroOxgWG9xv/hu7A3eMo1hm36Iz/4o9KnvXWnusgL:Cex2qJHYpv/huS/4o9gmnI
|
| Size: |
5078
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_parser_decoder.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_parser_decoder.h
|
| Category: |
dropped
|
| Dump: |
flb_parser_decoder.h.0.dr
|
| ID: |
dr_22
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.070901350688505
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rob8vT8v2xlHhpX4Vw0R2IoxOiXoX5AQlLXvT:Ce4+2qJHFrob8vT8v2xlHhpX4VwU2IoM
|
| Size: |
2560
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pipe.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pipe.h
|
| Category: |
dropped
|
| Dump: |
flb_pipe.h.0.dr
|
| ID: |
dr_24
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.183601385271042
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOu2idIcXd+dD0XKeQCX4RR:Ce4+2qJHFroOu2EIudkDGxdX4RR
|
| Size: |
1813
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_plugin.h.0.dr
|
| ID: |
dr_26
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.001381418880745
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roKBxxlVKG/swuTJEgLX2XyPzNVvy/:Ce4+2qJHFroGxl8GU5cAk
|
| Size: |
1972
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_plugin_proxy.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_plugin_proxy.h
|
| Category: |
dropped
|
| Dump: |
flb_plugin_proxy.h.0.dr
|
| ID: |
dr_28
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.77601271748244
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrooxlQxobdam9gEbdaTA1jzAFkJQQ3:Cex2qJH1tzddqEd3
|
| Size: |
3107
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_processor.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_processor.h
|
| Category: |
dropped
|
| Dump: |
flb_processor.h.0.dr
|
| ID: |
dr_29
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.440161896340976
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrosxlH9i1OoHKvGX8wdbcfngDfFYSQ62L3a/9DTL4GltZP38s74KP/S:Cex2qJHXoqv1ngub3oASMU4jnPDd
|
| Size: |
10382
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_processor_plugin.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_processor_plugin.h
|
| Category: |
dropped
|
| Dump: |
flb_processor_plugin.h.0.dr
|
| ID: |
dr_31
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.1197742841924985
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rox7lBW7pxlHE89j88XKgmx2Q70I0yk2a2K:Ce4+2qJHFroaxlHE8948agK2c0I0yk2+
|
| Size: |
1923
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pthread.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_pthread.h
|
| Category: |
dropped
|
| Dump: |
flb_pthread.h.0.dr
|
| ID: |
dr_32
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.17870187931621
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A1nRjxfTSs/4vZhO:uqEe4+F8q0YH31rogx+2
|
| Size: |
957
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_ra_key.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_ra_key.h
|
| Category: |
dropped
|
| Dump: |
flb_ra_key.h.0.dr
|
| ID: |
dr_34
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.852614890431411
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roexlH798SjIswywxA3HvMpmWMSdMAM0WPS8:Ce4+2qJHFroexlHG2Is42/MUWMSdMAM5
|
| Size: |
2572
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_random.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_random.h
|
| Category: |
dropped
|
| Dump: |
flb_random.h.0.dr
|
| ID: |
dr_46
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.057340714307608
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A3teOWYqZ:uqEe4+F8q0YH31roGfWH
|
| Size: |
945
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_record_accessor.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_record_accessor.h
|
| Category: |
dropped
|
| Dump: |
flb_record_accessor.h.0.dr
|
| ID: |
dr_47
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.733068671661013
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rovcCc/xl798HiXeYNzG2viMhxcX30nWD15EG0W9XQSeSb6QLT:Ce4+2qJHFrovdkxlGHgfilUhw6UMcL88
|
| Size: |
3193
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_regex.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_regex.h
|
| Category: |
dropped
|
| Dump: |
flb_regex.h.0.dr
|
| ID: |
dr_48
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.753962853771187
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roWxquHL4Iqvi67kR0s5Eq+frvPohLkVdD:Ce4+2qJHFroWxqu0vi693tvsS
|
| Size: |
2253
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_reload.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_reload.h
|
| Category: |
dropped
|
| Dump: |
flb_reload.h.0.dr
|
| ID: |
dr_49
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.207207982273252
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A3C4RjxfZjejXZjXdCPNZpyzPk6zcA2Xzl:uqEe4+F8q0YH31roSxlG9tChyg6z/2Dl
|
| Size: |
1390
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_ring_buffer.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_ring_buffer.h
|
| Category: |
dropped
|
| Dump: |
flb_ring_buffer.h.0.dr
|
| ID: |
dr_50
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.898822797230608
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rotF2de8iiOiP79dcKw1NjYePvSetm1etnm7etM9Eetj:Ce4+2qJHFrotF2QhiOiP79dcK8tPv7tW
|
| Size: |
1914
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_router.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_router.h
|
| Category: |
dropped
|
| Dump: |
flb_router.h.0.dr
|
| ID: |
dr_51
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.978401717570667
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro2xlxDFsfMGNKGjYkY/333iYgYwYYo+ZpG3EZhG/q6CHV:Ce4+2qJHFro2xlxRUoTq6C
|
| Size: |
2338
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_routes_mask.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_routes_mask.h
|
| Category: |
dropped
|
| Dump: |
flb_routes_mask.h.0.dr
|
| ID: |
dr_52
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.820895572004816
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roAVdNoXuRZEaVhOA2wZ55Eq7ZyQaX2aMuv+XqgaoXqoc:Ce4+2qJHFroAVdNoeRdP2yKqw1XPdEqT
|
| Size: |
2618
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_s3_local_buffer.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_s3_local_buffer.h
|
| Category: |
dropped
|
| Dump: |
flb_s3_local_buffer.h.0.dr
|
| ID: |
dr_53
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.880701345233383
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roZBlQfimvRA2G39Q4kTKBYHgwNjG1SnAL4O0:Ce4+2qJHFrorlQfHqQtgeG36
|
| Size: |
2415
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_scheduler.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_scheduler.h
|
| Category: |
dropped
|
| Dump: |
flb_scheduler.h.0.dr
|
| ID: |
dr_54
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.775448514703317
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFro0zVxl3oTH6M7PODFUNeQpRkGcTpS+xiXj46WGRT4dBO0rGRebz8vp:Cex2qJH8LdpR+TpSXXVWGRBhHoZus1ez
|
| Size: |
9200
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sds.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sds.h
|
| Category: |
dropped
|
| Dump: |
flb_sds.h.0.dr
|
| ID: |
dr_55
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.032781534049627
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFrom23xllG9dP9/4GH99DwA9YW9Y7LVCXlJlKjv:Cex2qJHMGMkUBLv
|
| Size: |
3283
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sds_list.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sds_list.h
|
| Category: |
dropped
|
| Dump: |
flb_sds_list.h.0.dr
|
| ID: |
dr_66
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.032733992389402
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AyUjT/esX3S52Fw5Wr9G9icKkGqww52Y:uqEe4+F8q0YH31roKVXC8Gkr9G9icKk/
|
| Size: |
1444
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_signv4.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_signv4.h
|
| Category: |
dropped
|
| Dump: |
flb_signv4.h.0.dr
|
| ID: |
dr_67
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.032948995953025
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOxllN7WeEgEgEgqGH0mI0vJ0X:Ce4+2qJHFroOxllVWevvv/VDY
|
| Size: |
1719
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_signv4_ng.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_signv4_ng.h
|
| Category: |
dropped
|
| Dump: |
flb_signv4_ng.h.0.dr
|
| ID: |
dr_68
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.018388034795968
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOxllN57f1eEgTjgL0gHRFHMY0vJeX:Ce4+2qJHFroOxllT1evT0LfzsTy
|
| Size: |
1830
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_simd.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_simd.h
|
| Category: |
dropped
|
| Dump: |
flb_simd.h.0.dr
|
| ID: |
dr_69
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.282004854121395
|
| Encrypted: |
false
|
| Ssdeep: |
192:Cex2qJHv0MAEp4BxSH2IEPFN14uDgMK0pqJOMCL7UQi9SIS6W3ZrlucrAMjCRHiv:xNh0MAEiBkWIE9DtgMK0QJOMCL7UQi9Y
|
| Size: |
9761
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_slist.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_slist.h
|
| Category: |
dropped
|
| Dump: |
flb_slist.h.0.dr
|
| ID: |
dr_70
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.980687684059064
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AYQjxfZjT/esTA2sNHACf2k2XHXItXPzo2s:uqEe4+F8q0YH31roOxlVTFsNxMXYJpGD
|
| Size: |
1596
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_snappy.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_snappy.h
|
| Category: |
dropped
|
| Dump: |
flb_snappy.h.0.dr
|
| ID: |
dr_71
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.179263211101389
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roOx5lLBvBsq+Qcrabl:Ce4+2qJHFroOxXFiq5crabl
|
| Size: |
2064
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_socket.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_socket.h
|
| Category: |
dropped
|
| Dump: |
flb_socket.h.0.dr
|
| ID: |
dr_72
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.292890859313826
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ATeorjuv6vYRpdLOVzCZZJO/B+pduMxy:uqEe4+F8q0YH31roiuSadKIJ0kgH
|
| Size: |
1586
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sosreport.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sosreport.h
|
| Category: |
dropped
|
| Dump: |
flb_sosreport.h.0.dr
|
| ID: |
dr_73
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.130288558856155
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AYAjxfZjXczY:uqEe4+F8q0YH31roGxlMc
|
| Size: |
932
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sqldb.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_sqldb.h
|
| Category: |
dropped
|
| Dump: |
flb_sqldb.h.0.dr
|
| ID: |
dr_74
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.72994442108558
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro624gub6sh8BjktoC2Y:Ce4+2qJHFro7ubiQoCd
|
| Size: |
1741
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_stacktrace.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_stacktrace.h
|
| Category: |
dropped
|
| Dump: |
flb_stacktrace.h.0.dr
|
| ID: |
dr_75
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.882344200564372
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roKkSk2xXOB4YenovIphRVziLTfkZR8p:Ce4+2qJHFroKkSk2xX7JoQHmkZy
|
| Size: |
2406
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_storage.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_storage.h
|
| Category: |
dropped
|
| Dump: |
flb_storage.h.0.dr
|
| ID: |
dr_86
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.022926805973054
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rouxvIif5QTvUF8dfrGHZGtwwdZNxbDEZkxDhZ29DkfJ:Ce4+2qJHFrouxROuKQ9WrVL
|
| Size: |
2869
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_str.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_str.h
|
| Category: |
dropped
|
| Dump: |
flb_str.h.0.dr
|
| ID: |
dr_87
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.0402036774444525
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31romxloXNLbU9n/Zn5N+d:Ce4+2qJHFromxloXBbU9/BI
|
| Size: |
1939
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_stream.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_stream.h
|
| Category: |
dropped
|
| Dump: |
flb_stream.h.0.dr
|
| ID: |
dr_88
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.759251788923664
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroGx1xlEZtF/+54N1POg/1ejCdLq5Is1M5gYP2uzgReRCnJiail1oUt:Cex2qJHQ+4OgGg5gYP2uzgReRCnJ+Ky5
|
| Size: |
5804
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_strptime.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_strptime.h
|
| Category: |
dropped
|
| Dump: |
flb_strptime.h.0.dr
|
| ID: |
dr_89
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.086976992246422
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1ALLs:uqEe4+F8q0YH31ro+s
|
| Size: |
886
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_task.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_task.h
|
| Category: |
dropped
|
| Dump: |
flb_task.h.0.dr
|
| ID: |
dr_90
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.618888346517612
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroIxlxvvgL31Sk0ZCAcvmDbZAsKhadLIfBSLIw1TEBZ2N1KMdJMoJFa:Cex2qJHbk31SPZDkauwudwRJ+cpaMq6U
|
| Size: |
9743
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_task_map.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_task_map.h
|
| Category: |
dropped
|
| Dump: |
flb_task_map.h.0.dr
|
| ID: |
dr_91
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.112885278243185
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AHH2yR/C6fL:uqEe4+F8q0YH31roW1C6fL
|
| Size: |
883
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_thread_pool.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_thread_pool.h
|
| Category: |
dropped
|
| Dump: |
flb_thread_pool.h.0.dr
|
| ID: |
dr_92
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.975562584164424
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ropVKnS/x+o+QaMa9+9dP0T7Z2b8K7X4inlxfConlj:Ce4+2qJHFropVKnS/x+oEutn
|
| Size: |
2442
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_thread_storage.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_thread_storage.h
|
| Category: |
dropped
|
| Dump: |
flb_thread_storage.h.0.dr
|
| ID: |
dr_93
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.251333071943586
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1Al3jxfwTSs/4vZhH0TW9BOaMngDKNrvaGPe:uqEe4+F8q0YH31ro+xnPrBKnVxznt0+y
|
| Size: |
1784
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_time.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_time.h
|
| Category: |
dropped
|
| Dump: |
flb_time.h.0.dr
|
| ID: |
dr_94
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.095506628959634
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFro6xlIqWRQOFOZPD8A1w1QP8z2ABDGyYN7D5:Cex2qJHlOFOZwAS1QP8chN7D5
|
| Size: |
3680
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_time_utils.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_time_utils.h
|
| Category: |
dropped
|
| Dump: |
flb_time_utils.h.0.dr
|
| ID: |
dr_95
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.002096980175126
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roexlgicybmjiy26ItvwM+hYfF8e/xtd7M3UeMI8:Ce4+2qJHFroexlgifC2yFuvDJfFPhgUZ
|
| Size: |
2083
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_typecast.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_typecast.h
|
| Category: |
dropped
|
| Dump: |
flb_typecast.h.0.dr
|
| ID: |
dr_106
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.973659599139294
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roee7CVqzy9xQF03kLyffiaOFwetW5sR:Ce4+2qJHFroee2PHQy0LgfaU+
|
| Size: |
2372
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_unescape.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_unescape.h
|
| Category: |
dropped
|
| Dump: |
flb_unescape.h.0.dr
|
| ID: |
dr_107
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.108311177388288
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AeA3OJOw:uqEe4+F8q0YH31roGw
|
| Size: |
1032
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_unicode.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_unicode.h
|
| Category: |
dropped
|
| Dump: |
flb_unicode.h.0.dr
|
| ID: |
dr_108
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.368108681563972
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AeOJeWStjj8FURVsUL4biFN/UqI/eGd2/Xl:uqEe4+F8q0YH31rotZgNUwisIF8YPolO
|
| Size: |
2387
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream.h
|
| Category: |
dropped
|
| Dump: |
flb_upstream.h.0.dr
|
| ID: |
dr_109
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.7167718340230165
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroHxlE19x1MyVrjSOxuToA8wctH12:Cex2qJHzrxuToAFz
|
| Size: |
4409
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_conn.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_conn.h
|
| Category: |
dropped
|
| Dump: |
flb_upstream_conn.h.0.dr
|
| ID: |
dr_110
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.110036802402258
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AYANjxfZjDIjXZjybm+MwRphwE/n2BL2neZ:uqEe4+F8q0YH31roTgxlE9ybm+fRpiEy
|
| Size: |
1425
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_ha.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_ha.h
|
| Category: |
dropped
|
| Dump: |
flb_upstream_ha.h.0.dr
|
| ID: |
dr_111
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.94361620789091
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roCxlHrMcwpxJAghEEc:Ce4+2qJHFroCxlHg8
|
| Size: |
1657
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_node.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_node.h
|
| Category: |
dropped
|
| Dump: |
flb_upstream_node.h.0.dr
|
| ID: |
dr_112
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.279502197917578
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31ro4xlHOibHBX3bxhEhGo/bSV2f0P1UR4uu:Ce4+2qJHFro4xlHOS3EDTkE4P
|
| Size: |
3601
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_queue.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_upstream_queue.h
|
| Category: |
dropped
|
| Dump: |
flb_upstream_queue.h.0.dr
|
| ID: |
dr_113
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.898070628815387
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A8jlCjxfwOjtD9MIGfcm/FErBthvndHm/nS:uqEe4+F8q0YH31ro2x/hmI02JnaBhVE
|
| Size: |
1580
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_uri.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_uri.h
|
| Category: |
dropped
|
| Dump: |
flb_uri.h.0.dr
|
| ID: |
dr_114
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.020888079170929
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rouxlG0dEBhfrC2ervXujBoe2jhrpGrfP:Ce4+2qJHFrouxlG0MxUWjBoZpWfP
|
| Size: |
2016
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_utf8.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_utf8.h
|
| Category: |
dropped
|
| Dump: |
flb_utf8.h.0.dr
|
| ID: |
dr_115
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.18941315722945
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1AcemOjxfZ/CLxvRj:uqEe4+F8q0YH31ro6m2xVClx
|
| Size: |
1140
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_utils.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_utils.h
|
| Category: |
dropped
|
| Dump: |
flb_utils.h.0.dr
|
| ID: |
dr_126
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.782161388176274
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roSxl39NBdXPR4i4dK+m1WRC/D/0kB:Ce4+2qJHFroSxl39jYyWg/DDB
|
| Size: |
3503
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_version.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_version.h
|
| Category: |
dropped
|
| Dump: |
flb_version.h.0.dr
|
| ID: |
dr_127
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.282407661710441
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roGWF2xlOcAbbw8uarYpWN3fhW6lIZ6hqN6146umm9xmQSEvO+:Ce4+2qJHFroG+2xlgbbw8uarYANrlIk4
|
| Size: |
3018
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_worker.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_worker.h
|
| Category: |
dropped
|
| Dump: |
flb_worker.h.0.dr
|
| ID: |
dr_128
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.932345438470516
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31roW3ULrCZJyZWZKxZbEXUQK1y648:Ce4+2qJHFroW8YyZTeUw2
|
| Size: |
1955
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_zstd.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\flb_zstd.h
|
| Category: |
dropped
|
| Dump: |
flb_zstd.h.0.dr
|
| ID: |
dr_129
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.1113595845240605
|
| Encrypted: |
false
|
| Ssdeep: |
24:2nqrIe4IQZWF8wsU0E+eHQk1tpsL1A/92CRjxfZL542eyie5ceyiP:uqEe4+F8q0YH31ro0NxHeLev
|
| Size: |
1042
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\simdutf\flb_simdutf_connector.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\simdutf\flb_simdutf_connector.h
|
| Category: |
dropped
|
| Dump: |
flb_simdutf_connector.h.0.dr
|
| ID: |
dr_133
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.280073305577357
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rouupeFfcifpbe+AjWtGi2Y:Ce4+2qJHFrouupeFFF6YGi2Y
|
| Size: |
4019
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\tls\flb_tls.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\tls\flb_tls.h
|
| Category: |
dropped
|
| Dump: |
flb_tls.h.0.dr
|
| ID: |
dr_134
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.64284426048191
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ce4+2qJHFroQxl9VwmySfUzGlF5T7sbDSjD3vA46ey3JVhqt:Cex2qJHBw9SfU2FWv4F
|
| Size: |
5382
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\tls\flb_tls_info.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\tls\flb_tls_info.h
|
| Category: |
dropped
|
| Dump: |
flb_tls_info.h.0.dr
|
| ID: |
dr_135
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.211447584302303
|
| Encrypted: |
false
|
| Ssdeep: |
48:uAe4+F8q0YH31rokslc5Yzzx/WmuYM2g4T/e:1e4+2qJHFrokslcIzxeMxHe
|
| Size: |
1638
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\fluent-bit\wasm\flb_wasm.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\fluent-bit\wasm\flb_wasm.h
|
| Category: |
dropped
|
| Dump: |
flb_wasm.h.0.dr
|
| ID: |
dr_146
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.74421893110191
|
| Encrypted: |
false
|
| Ssdeep: |
48:uqEe4+F8q0YH31rouWCxl9UvMb1mwsLmHKzLABFSP1gK5P3ZDm6XjDVgjJYD9:Ce4+2qJHFroqxl9Ukb1mLLmhg3Z1Z
|
| Size: |
3036
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\libco.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\libco.h
|
| Category: |
dropped
|
| Dump: |
libco.h.0.dr
|
| ID: |
dr_16
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.021112577918276
|
| Encrypted: |
false
|
| Ssdeep: |
6:UWKtZMe+HdWAQ0MyRAqz0jQ6z5D7P3XMOXIbBhXKaROq3vMz/0Av7Xz8NvXcjQ6w:UW8ye+Hd7Aqm53PaBYaRkj0YXYSLBHG
|
| Size: |
421
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\luajit\lauxlib.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\luajit\lauxlib.h
|
| Category: |
dropped
|
| Dump: |
lauxlib.h.0.dr
|
| ID: |
dr_147
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.046002252131516
|
| Encrypted: |
false
|
| Ssdeep: |
192:7pEkwtLJD9XqkT9PxyZJkn17HiJi/nElRG9:7wFElU
|
| Size: |
6189
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\luajit\lua.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\luajit\lua.h
|
| Category: |
dropped
|
| Dump: |
lua.h.0.dr
|
| ID: |
dr_148
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.282299195775625
|
| Encrypted: |
false
|
| Ssdeep: |
192:9+wLYPG8wMgM43hogB1O6per7jZGK5c0FgwUQHTa:9JsPTwjM43ho0YGe/dB5cd1qa
|
| Size: |
12726
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\luajit\luaconf.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\luajit\luaconf.h
|
| Category: |
dropped
|
| Dump: |
luaconf.h.0.dr
|
| ID: |
dr_149
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.479216666068353
|
| Encrypted: |
false
|
| Ssdeep: |
96:sZYTuHpQ2C6chDtzt+rtE4n22vb27JyWHwtf9evyRQ:QYTG+rDVCEP2vb27Jy8wtf9iyRQ
|
| Size: |
4737
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\luajit\luajit.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\luajit\luajit.h
|
| Category: |
dropped
|
| Dump: |
luajit.h.0.dr
|
| ID: |
dr_150
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.492452776154512
|
| Encrypted: |
false
|
| Ssdeep: |
48:FnIvNJcMPvBLqQHBsuIYtl3HxFIHo09DzmYFW8BVpzz52e77pkAtdaX4SzYw2zFb:lIHPpeQHDH8Ho09J/zdaIYYw0I8mEB
|
| Size: |
3064
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\luajit\lualib.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\luajit\lualib.h
|
| Category: |
dropped
|
| Dump: |
lualib.h.0.dr
|
| ID: |
dr_151
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.182131808266952
|
| Encrypted: |
false
|
| Ssdeep: |
24:LTuA2LvCc2/4ZaVi3/IYsIMjyWgcfRzsQkQlTyyJTd:SC9LVi3/IJ+kyyJTd
|
| Size: |
1209
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core.h
|
| Category: |
dropped
|
| Dump: |
mk_core.h.0.dr
|
| ID: |
dr_152
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.235043550820245
|
| Encrypted: |
false
|
| Ssdeep: |
48:e1YBie4+F8q0YH31ro4HRtxJpnSpRTy5XjONF9Kkw/J0M8YAW:Ke4+2qJHFrokrBnSpRTP9KH/J18YAW
|
| Size: |
1931
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_dep_unistd.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_dep_unistd.h
|
| Category: |
dropped
|
| Dump: |
mk_dep_unistd.h.0.dr
|
| ID: |
dr_153
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.903775923270596
|
| Encrypted: |
false
|
| Ssdeep: |
24:2r2yMEH0HtQPmduCK5eSMSFQERS3O5URUapVc2KVmkwyubrQALgqwwU5MMe6jdP0:jcKcxMMR4WUyzvluoumwY5er6+0cBnJx
|
| Size: |
1856
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_dirent.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_dirent.h
|
| Category: |
dropped
|
| Dump: |
mk_dirent.h.0.dr
|
| ID: |
dr_154
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.162965166714299
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1gPlwHwHZ5Sd:e1YBie4+F8q0YH31ros6
|
| Size: |
946
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event.h
|
| Category: |
dropped
|
| Dump: |
mk_event.h.0.dr
|
| ID: |
dr_155
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.978937949036249
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ke4+2qJHFroo2QQ1xJWzVMOx1gKLLDf0mgY0CiiLHHIjV1a5BxdriSLlSHA8fwel:Kex2qJHu1yzVj2KLLDff90diLHojfabw
|
| Size: |
5993
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_epoll.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_epoll.h
|
| Category: |
dropped
|
| Dump: |
mk_event_epoll.h.0.dr
|
| ID: |
dr_166
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
3.9016563425396202
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1oc2MbmfhrHjdr9rh:e1YBie4+F8q0YH31roxHbaNh5V
|
| Size: |
1991
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_kqueue.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_kqueue.h
|
| Category: |
dropped
|
| Dump: |
mk_event_kqueue.h.0.dr
|
| ID: |
dr_167
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.2209034820670155
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1kkZJaL54RWTNqoou25DUKOfrtHXjOrZrL8:e1YBie4+F8q0YH31roRJG47nbiVSVH8
|
| Size: |
2408
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_libevent.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_libevent.h
|
| Category: |
dropped
|
| Dump: |
mk_event_libevent.h.0.dr
|
| ID: |
dr_168
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
3.998194354716448
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL17U5Ny+JqdfD1HS6+rZ6:e1YBie4+F8q0YH31roRWkZxVK16
|
| Size: |
2013
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_poll.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_poll.h
|
| Category: |
dropped
|
| Dump: |
mk_event_poll.h.0.dr
|
| ID: |
dr_169
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
3.881968966662266
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBZge4IQZWF8wsU0E+eHQk1tpsL1o+rV2lryyqJ/QfZzH26ordR:e1YB6e4+F8q0YH31robV8yPGNoZR
|
| Size: |
2091
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_select.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_event_select.h
|
| Category: |
dropped
|
| Dump: |
mk_event_select.h.0.dr
|
| ID: |
dr_170
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.1134681082234525
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1hwHQZ+xxucQn3VqqdfD1HS6+rZLN7:e1YBie4+F8q0YH31roQ8fn3JxVK1LF
|
| Size: |
2267
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_file.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_file.h
|
| Category: |
dropped
|
| Dump: |
mk_file.h.0.dr
|
| ID: |
dr_171
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.070063630040242
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1ef0WJAIy5qdMaPldjfxMsTpoT:e1YBie4+F8q0YH31rocABTsDfxMs6
|
| Size: |
1375
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_getopt.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_getopt.h
|
| Category: |
dropped
|
| Dump: |
mk_getopt.h.0.dr
|
| ID: |
dr_172
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.123927009747822
|
| Encrypted: |
false
|
| Ssdeep: |
24:ul1YBie4IQZWF8wsU0E+eHQk1tpsL1CF20dlw8X6L1nZ3:m1YBie4+F8q0YH31rosFPBC
|
| Size: |
1000
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_iov.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_iov.h
|
| Category: |
dropped
|
| Dump: |
mk_iov.h.0.dr
|
| ID: |
dr_173
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.014662543144481
|
| Encrypted: |
false
|
| Ssdeep: |
48:e1YBie4+F8q0YH31roJIcnbNlZQ4wQy3um7mGBP8g1NYG83WwFNDH2xX:Ke4+2qJHFrohbiBEgnY3dIX
|
| Size: |
3456
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_limits.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_limits.h
|
| Category: |
dropped
|
| Dump: |
mk_limits.h.0.dr
|
| ID: |
dr_174
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.20781485415703
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL14e8m9nh:e1YBie4+F8q0YH31roL8O
|
| Size: |
970
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_list.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_list.h
|
| Category: |
dropped
|
| Dump: |
mk_list.h.0.dr
|
| ID: |
dr_175
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.774393504027331
|
| Encrypted: |
false
|
| Ssdeep: |
192:dcYex2qJH9USgYHcHyJRsytPyyJdXymtym8+VknuL9FzFH0:dczN7USXhB6zt0hU
|
| Size: |
6992
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_macros.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_macros.h
|
| Category: |
dropped
|
| Dump: |
mk_macros.h.0.dr
|
| ID: |
dr_186
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.284237842393955
|
| Encrypted: |
false
|
| Ssdeep: |
96:Ke4+2qJHFroVIpmohmdz83/MdnCp046HCC8D30i:Kex2qJHtpmohmdzi/MhN+30i
|
| Size: |
5937
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_memory.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_memory.h
|
| Category: |
dropped
|
| Dump: |
mk_memory.h.0.dr
|
| ID: |
dr_187
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.230652947952478
|
| Encrypted: |
false
|
| Ssdeep: |
48:e1YBie4+F8q0YH31roKz7CSgv29X4tNqnNvumtN0L9:Ke4+2qJHFroAgMoXUv9S
|
| Size: |
2724
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_pipe.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_pipe.h
|
| Category: |
dropped
|
| Dump: |
mk_pipe.h.0.dr
|
| ID: |
dr_188
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.205676707748628
|
| Encrypted: |
false
|
| Ssdeep: |
24:ul1YBie4IQZWF8wsU0E+eHQk1tpsL1YwMlwwPAHr6:m1YBie4+F8q0YH31rooPq6
|
| Size: |
1028
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_pthread.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_pthread.h
|
| Category: |
dropped
|
| Dump: |
mk_pthread.h.0.dr
|
| ID: |
dr_189
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.219689991573838
|
| Encrypted: |
false
|
| Ssdeep: |
24:ul1YBie4IQZWF8wsU0E+eHQk1tpsL1kwORlwg6hHlX:m1YBie4+F8q0YH31roim
|
| Size: |
1031
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_rconf.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_rconf.h
|
| Category: |
dropped
|
| Dump: |
mk_rconf.h.0.dr
|
| ID: |
dr_190
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.90315051904408
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL1I/BIX/WlebNmqhB71iYRyF2i04Q+zCi2A8:e1YBie4+F8q0YH31roDX+olMYIFzev
|
| Size: |
2404
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_sleep.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_sleep.h
|
| Category: |
dropped
|
| Dump: |
mk_sleep.h.0.dr
|
| ID: |
dr_191
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.298423786709315
|
| Encrypted: |
false
|
| Ssdeep: |
48:m1YBie4+F8q0YH31roO9yc+pxe64GqY0R5X:ie4+2qJHFroS+b41Yyl
|
| Size: |
1705
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_string.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_string.h
|
| Category: |
dropped
|
| Dump: |
mk_string.h.0.dr
|
| ID: |
dr_192
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.088502862558329
|
| Encrypted: |
false
|
| Ssdeep: |
48:e1YBie4+F8q0YH31roEYNkfwO4c/JH8jbOj2pOEOdEKKwmbHzmIiO1ME+uNiE/gq:Ke4+2qJHFroEYufHejaj2gEOypwe5hM0
|
| Size: |
2986
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_thread.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_thread.h
|
| Category: |
dropped
|
| Dump: |
mk_thread.h.0.dr
|
| ID: |
dr_193
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.199983243556978
|
| Encrypted: |
false
|
| Ssdeep: |
24:2lqtx/e4IQZWF8wsU0E+eHQk1tpsL1ohRJRS2pLxNYSTkq6bg38fbBZ1fVP1M:eKBe4+F8q0YH31roT2JdxT38ff1fVP1M
|
| Size: |
1531
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_thread_channel.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_thread_channel.h
|
| Category: |
dropped
|
| Dump: |
mk_thread_channel.h.0.dr
|
| ID: |
dr_194
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.008005285490624
|
| Encrypted: |
false
|
| Ssdeep: |
96:fBe4+2qJHFroYkgNFSFTo6HUXk4AumLToGzUXVyAZoyUo6nUXo4AuSL9NmomTUXA:fBex2qJHV6HUTADkGzUoAZj6nUvA37mP
|
| Size: |
4290
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_uio.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_uio.h
|
| Category: |
dropped
|
| Dump: |
mk_uio.h.0.dr
|
| ID: |
dr_195
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
4.84406523011137
|
| Encrypted: |
false
|
| Ssdeep: |
6:trAQ0S7rRAdBTVqLaowPueAC/rF0y9TSKHoyZAiTBAe:tUgNA7QLjwPhAiSkDZAiTBAe
|
| Size: |
202
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_unistd.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_unistd.h
|
| Category: |
dropped
|
| Dump: |
mk_unistd.h.0.dr
|
| ID: |
dr_196
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.189345354217238
|
| Encrypted: |
false
|
| Ssdeep: |
24:2l1YBie4IQZWF8wsU0E+eHQk1tpsL162kRlw1WIvZq:e1YBie4+F8q0YH31roDC
|
| Size: |
954
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_utils.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\monkey\mk_core\mk_utils.h
|
| Category: |
dropped
|
| Dump: |
mk_utils.h.0.dr
|
| ID: |
dr_197
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.105510592940218
|
| Encrypted: |
false
|
| Ssdeep: |
48:e1YBie4+F8q0YH31roWGq8TjE7S+ZnUrwdqD4BCcDtxsI+vpcUsI+dapcfoqIac:Ke4+2qJHFro08/eKwdqkCJvkdaIoqID
|
| Size: |
3415
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\include\settings.h
|
C source, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\include\settings.h
|
| Category: |
dropped
|
| Dump: |
settings.h.0.dr
|
| ID: |
dr_17
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
C source, ASCII text, with CRLF line terminators
|
| Entropy: |
5.026416400049364
|
| Encrypted: |
false
|
| Ssdeep: |
24:jFhqrQS+UWsOoxDAVJzAtkngtNdqZwG8z46ER/dlLE:58gUbY+tkgoZwz45i
|
| Size: |
1311
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Program Files (x86)\fluent-bit\lib\libluajit.lib
|
current ar archive
|
dropped
|
|
|
|
| File: |
C:\Program Files (x86)\fluent-bit\lib\libluajit.lib
|
| Category: |
dropped
|
| Dump: |
libluajit.lib.0.dr
|
| ID: |
dr_198
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
current ar archive
|
| Entropy: |
4.875694914630152
|
| Encrypted: |
false
|
| Ssdeep: |
24576:53fze/EDNTQfSj2x0Jstpaa9Ko8sHX2yU6ANYIjDaQwAgHgo1Mw4iWn9UGbstRs4:5RtSrpa2KohmXa4gH4/s8UR3XRI0
|
| Size: |
8122656
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\fluent-bit\Uninstall.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive,
ctime=Sat Apr 19 03:30:53 2025, mtime=Sat Apr 19 03:30:53 2025, atime=Sat Apr 19 03:30:53 2025, length=112736, window=hide
|
dropped
|
|
|
|
| File: |
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\fluent-bit\Uninstall.lnk
|
| Category: |
dropped
|
| Dump: |
Uninstall.lnk.0.dr
|
| ID: |
dr_200
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive,
ctime=Sat Apr 19 03:30:53 2025, mtime=Sat Apr 19 03:30:53 2025, atime=Sat Apr 19 03:30:53 2025, length=112736, window=hide
|
| Entropy: |
4.75147743456618
|
| Encrypted: |
false
|
| Ssdeep: |
24:8mUiEhdOE/UUfz4IzxF1Ar54dU4VhpdU4YQUUxPqyFm:8mUVhdOXyMIzrermdjVhpdjYFLyF
|
| Size: |
1117
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Stores files to the Windows start menu directory |
Boot Survival |
Registry Run Keys / Startup Folder
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\InstallOptions.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\InstallOptions.dll
|
| Category: |
dropped
|
| Dump: |
InstallOptions.dll.0.dr
|
| ID: |
dr_23
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
5.4709854684159085
|
| Encrypted: |
false
|
| Ssdeep: |
192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
|
| Size: |
15872
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\StartMenu.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\StartMenu.dll
|
| Category: |
dropped
|
| Dump: |
StartMenu.dll.0.dr
|
| ID: |
dr_30
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
4.64602897905866
|
| Encrypted: |
false
|
| Ssdeep: |
96:FxIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/t3lkCTcaqHCI:4hE+A0+sF6piUFkAxlncviI
|
| Size: |
7680
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\System.dll
|
| Category: |
dropped
|
| Dump: |
System.dll.0.dr
|
| ID: |
dr_201
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
5.804946284177748
|
| Encrypted: |
false
|
| Ssdeep: |
192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
|
| Size: |
12288
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\UserInfo.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\UserInfo.dll
|
| Category: |
dropped
|
| Dump: |
UserInfo.dll.0.dr
|
| ID: |
dr_19
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
| Entropy: |
3.3415738744933092
|
| Encrypted: |
false
|
| Ssdeep: |
48:qK5HC+J4apHT1wH8l9QcXygHg0ZShMmj3jk6TbGr7X:5QiRzuHOXTA0H6jk6nGr7X
|
| Size: |
4096
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Drops PE files |
Persistence and Installation Behavior |
|
| Found dropped PE file which has not been started or loaded |
Malware Analysis System Evasion |
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\ioSpecial.ini
|
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\ioSpecial.ini
|
| Category: |
dropped
|
| Dump: |
ioSpecial.ini.0.dr
|
| ID: |
dr_21
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
| Entropy: |
3.677666338933687
|
| Encrypted: |
false
|
| Ssdeep: |
24:Q+sxv5SAD5ylSjqWCs7y6J9anN9nq6k8lz4oKCxGzC965B4o4Ypmv:rsxwAQSjqQz9anO8lMoxPo4nv
|
| Size: |
1068
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
| Signature Hits |
Behavior Group |
Mitre Attack |
|
| Writes ini files |
System Summary |
File and Directory Discovery
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\modern-header.bmp
|
PC bitmap, Windows 3.x format, 150 x 57 x 8, image size 8666, resolution 2834 x 2834 px/m, cbSize 9744, bits offset 1078
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\modern-header.bmp
|
| Category: |
dropped
|
| Dump: |
modern-header.bmp.0.dr
|
| ID: |
dr_27
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PC bitmap, Windows 3.x format, 150 x 57 x 8, image size 8666, resolution 2834 x 2834 px/m, cbSize 9744, bits offset 1078
|
| Entropy: |
7.274136927028791
|
| Encrypted: |
false
|
| Ssdeep: |
192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
|
| Size: |
9744
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
|
C:\Users\user\AppData\Local\Temp\nswB491.tmp\modern-wizard.bmp
|
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
|
dropped
|
|
|
|
| File: |
C:\Users\user\AppData\Local\Temp\nswB491.tmp\modern-wizard.bmp
|
| Category: |
dropped
|
| Dump: |
modern-wizard.bmp.0.dr
|
| ID: |
dr_25
|
| Target ID: |
0
|
| Process: |
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.27857.7397.exe
|
| Type: |
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
|
| Entropy: |
1.9568109962493656
|
| Encrypted: |
false
|
| Ssdeep: |
24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
|
| Size: |
26494
|
| Whitelisted: |
false
|
| Reputation: |
timeout
|
|
