Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

latestReport
04.30 02:04
BEWERBUNG.pdf.htm
04.30 01:04
BEWERBUNG.pdf.htm
04.30 01:04
Adobe%20PDF.hta
04.30 01:04
VXCX.exe
04.30 01:04
test.ps1
04.30 01:04
rah.exe
04.30 01:04
Microsoft.hta
04.30 01:04
XZCADEEW22.exe
04.30 01:04
CZXZDTGS.exe
04.30 01:04
ui.exe

Latest News
04.30 02:04
노르마, UAE 알 파르단과 양자 R&a...
04.30 02:04
모니터랩, 인도 기업 ‘Velosting...
04.30 02:04
굿모닝아이텍, 클라우드 SaaS 사업부문 신설
04.30 02:04
Back to Reality with t...
04.30 02:04
넷앱, 스토리지 계층 사이버보안 표준 새...
04.30 02:04
Xiaomi Joins China AI ...
04.30 02:04
Toyota to Partner With...
04.30 02:04
한국핀테크지원센터, ‘2025년 핀테크 ...
04.30 02:04
KISA, 공공기관 고객만족도 조사 최고...
04.30 01:04
레퍼런스체크코리아, 커리어플랜과 전략적 ...

Dropped Files | ZeroBOX

Name	944799abab049d9d_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`75c25136ec86767b6416e7ef428d56d1`
SHA1	`826dcceaad7aedc9a52695a847cd32731c6be343`
SHA256	`944799abab049d9d9d6159cb087447b4390b901a4159f3130b7e99a3d199e7a7`
CRC32	`357947D5`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLscg6PCabR:r5u5/+mMks5qTp1mNqce9OoD6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	b4802fdd8f307558_devicemgr_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\devicemgr_theme.xml
Size	8.7KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`82ac5522db186a80be47c25019ec616f`
SHA1	`5609a0d949fa2cde7a00d60175606a4378767d48`
SHA256	`b4802fdd8f307558176b93026b5e353e97052d7be2b640612f3435409a5156d2`
CRC32	`32A42AE4`
ssdeep	`192:ipLKyz47WKUOwHya94c8ODGwlGO11BH6h2MhUmynNN9vGmM1toeId:itfgWKUOMhec8szcO1zah2MhUTn9i1tC`
Yara	None matched
VirusTotal	Search for analysis

Name	78e8a90643e329a5_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`5803971d9d6cbdf366aa3c470dcaf38b`
SHA1	`3abbacefe307edda3ffed166e50ffe0c786db5f2`
SHA256	`78e8a90643e329a57718f038f7452832111f2e22907657ed05f015523c764ef9`
CRC32	`3EDE8C83`
ssdeep	`768:UXPO9QPgCg44/x9ezpnTNUTlt1GHXTpjq5VgPrfrNnzQs3o6eCv:IgCgZCpTN+lt1GHX9+zGrd0s3reCv`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	07ed1d3443e7f9b2_crashreport.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\CrashReport.dll
Size	171.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`94a08d898c2029877e752203a477d22f`
SHA1	`d8a4c261b94319b4707ee201878658424e554f36`
SHA256	`07ed1d3443e7f9b2531aaa0b957a298ea6c5c81bcd321e7faf25a17a85063169`
CRC32	`81591712`
ssdeep	`3072:qUWvM9A5UEPeA9ggz/3ezHkta1D+ThXn/n9SGeM7:2Urcz/wEtZlf9b`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	95446cc85c28b111_ver.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\ver.ini
Size	19.0B
Processes	3780 (360TS_Setup.exe)
Type	Windows setup INFormation, ASCII text, with CRLF line terminators
MD5	`1da2adb833894ae9eb8a3e90364819fb`
SHA1	`301bce50ae8ae44bd5033cf58c454d6bd94444dc`
SHA256	`95446cc85c28b111ca058ff80b1da91023693263a25e448c18cfe26070cfe620`
CRC32	`EC1CEFA9`
ssdeep	`3:gfl4Qyn:gfXyn`
Yara	None matched
VirusTotal	Search for analysis

Name	1ce0649e2c816601_toolbox.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ToolBox.dll
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`18b951fd75f4444e7c946c991df2e1cf`
SHA1	`990cb4e664b586a3a547073cdca0bc2a045dad7d`
SHA256	`1ce0649e2c8166013010f0fed6667ebca8d67c24e6e1d7763960d4bcd6f5bb44`
CRC32	`BA0644C5`
ssdeep	`24576:j5mp+R8CaXc6fzE9XdOVZKdT7kh5EYvlNiZyI9pyg+600p9+Hmn1hB:FtPJdMKSHEYvlwyI9pyDn0p9+Q1hB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8b750884259dd004_xxjwl7ahbdc2dtgtj7u4y8hp.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\XxjwL7Ahbdc2DTGTJ7U4y8hP.exe
Size	10.9MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`d43ac79abe604caffefe6313617079a3`
SHA1	`b3587d3fa524761b207f812e11dd807062892335`
SHA256	`8b750884259dd004300a84505be782d05fca2e487a66484765a4a1e357b7c399`
CRC32	`A4FC4001`
ssdeep	`196608:SYvZvPF60956XHt6+YF+ELzL2Zjbn2YH0oD6DGcCwHbGkG:3Fcw5kHo5F+E+j7260oOYc`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	31b2596da4c6a411_i18n64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\I18N64.dll
Size	112.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`a9b8db4abbd6be9687306efdc7d09e5d`
SHA1	`50db31c79c881981eae4c2ecb25915c84b8f36e7`
SHA256	`31b2596da4c6a4111a5ff177392c07e377ef0f5666c65f58880cc06b4ce6ef67`
CRC32	`60CAEA51`
ssdeep	`3072:eZoB5Miv5jB4IUGcMRzZu9zbXJOkpQ0wU5biMIUIy:/B1v5F6MVizbbQ01ig`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ce0515dda14b9486_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4ad68ef515f495e2e4b7535e68a56c0d`
SHA1	`de104a699b3d657fa4271009161b7671527c1324`
SHA256	`ce0515dda14b94865e505785e2b0cb51e24248d2eabe71593dcbaa0915ddddc4`
CRC32	`D53BD08F`
ssdeep	`384:7zB60nZteI7nOSeMoWIja+tA8nQJ+MQ3jl+Z:HB60nZtdbGayAnJYm`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	cf8fde466611a9dd_commonbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\commonbase.dll
Size	1.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c33aea70eec7924564e91a21c060f82c`
SHA1	`91c21bcc38df1bc3ad91629ecdb8921f00de9495`
SHA256	`cf8fde466611a9dda3a335071255a56ade1d7bd47999caf48588ef4498d8e92d`
CRC32	`1394D96F`
ssdeep	`49152:njmq2wFkyVGnYIBj7h3oo43hrkg0TYT7a5l3C:329yiXBxq3hrkoaLS`
Yara	Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	340c8464c2007ce3_comachina.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000030001\CoMachina.exe
Size	162.0B
Processes	2388 (axplont.exe)
Type	HTML document, ASCII text, with CRLF line terminators
MD5	`1b7c22a214949975556626d7217e9a39`
SHA1	`d01c97e2944166ed23e47e4a62ff471ab8fa031f`
SHA256	`340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87`
CRC32	`CC58D737`
ssdeep	`3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu`
Yara	None matched
VirusTotal	Search for analysis

Name	475c6d9d9f224412_360patchmgr64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\modules\360PatchMgr64.exe
Size	347.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`a56506ebd1e08effa960f5a34164463b`
SHA1	`42231372db033e278f2f33039208c478aeab83d4`
SHA256	`475c6d9d9f224412b8e46328c853adbd20837e2caf35deaaa2721d3263ab4ae8`
CRC32	`D9DA6798`
ssdeep	`6144:aHdVCiZPn9ma6ymq0ZcGkyBU3xBj4Qft3nVoKumC8t/Hn:cdsiZP9maZGkf3fdRa8tvn`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f26b4c2ad118f883_h_3.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\endata\h_3.dat
Size	2.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`2b50f42c2666d6c34db2a1bbea715894`
SHA1	`8270036df2bd415e6fa0c3059f92971085f8b0a1`
SHA256	`f26b4c2ad118f8836b471f52cff3a69c8438869eae11c75864c74dbd79bf25c3`
CRC32	`4C04E632`
ssdeep	`48:DqhKcUr6LzMATINIv0Y5rSJFaY3dvsYTRqqfpZOlqHyZi5hiGREM4a:OUcUr6LzMATIpc+suMqNS40nM4a`
Yara	None matched
VirusTotal	Search for analysis

Name	b0355da831715564_dsurls.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\dsurls.dat
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`69d457234e76bc479f8cc854ccadc21e`
SHA1	`7f129438445bb1bde6b5489ec518cc8f6c80281b`
SHA256	`b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee`
CRC32	`7DC447FC`
ssdeep	`24:GkqR+lkMu9qSmjQXK9K1h2Y539HfsLlQNSfP0vHFZquB+fcQ:iIkx/69KO6fsB9CHFZmx`
Yara	None matched
VirusTotal	Search for analysis

Name	853800fbbc1b946f_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\spsafe64.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`a71f39f7baaec5873a21b62f14e37674`
SHA1	`5e81a3eaf58ee4cffea7246f59ee846e1eced9d5`
SHA256	`853800fbbc1b946f786f4e32ba3eba8649869939e89a33ddbe58971ccb9e6164`
CRC32	`3AB010CA`
ssdeep	`192:7wxMDN3yMrj1grjzR+vnr9ZCspE+TMAr/eknNvuB:7QKQM8z7eMwekmB`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	5319e72357f628cf_cacert.pem Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\cacert.pem
Size	227.1KB
Processes	3780 (360TS_Setup.exe)
Type	UTF-8 Unicode text, with CRLF line terminators
MD5	`899bc667a911b03dbd8361c30a6262f3`
SHA1	`80b1cdef778478f76167fc58f6829134a8c108e6`
SHA256	`5319e72357f628cfbd063cc5ce56db9cc0be8250a8f44ccc8ec673ee1fc08b2e`
CRC32	`8C9704EE`
ssdeep	`6144:u2PLl0vnlF+kkUNl1ROWAqcfCNkuSE2F9l3:zLlcldxVNkial`
Yara	None matched
VirusTotal	Search for analysis

Name	a1c782f62ca1b0ac_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\360SafeCamera.tpi.locale
Size	2.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`25665b80df4fa2beb2aff09f1279700a`
SHA1	`4bd781149215db4f45229aa64155d028fe23c412`
SHA256	`a1c782f62ca1b0ac12bafb286e91b1eb975e3cb028f88b3a914f4e794596bf16`
CRC32	`D739DA26`
ssdeep	`48:r+uNKlsBoT8FF527oT0LfTDuoT0ZTDjlb5YgM3lyDsDYoULXtI1:r3Nc6w8FC7w0L/uw0Z/jl9M3lEGYoAdo`
Yara	None matched
VirusTotal	Search for analysis

Name	0d9b393bb26615eb_lm_1001.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\endata\lm_1001.dat
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ee415356f54c7eb4c4bbe31efe9a47cb`
SHA1	`a692bcb9f1496f5d6bd4fafb35d4665783e14e63`
SHA256	`0d9b393bb26615ebda86412bb3c74d5bf777120f1fa0f857c610636d112d9bc8`
CRC32	`C08054CA`
ssdeep	`48:3FlLslm3oRdujZG750jf65ce+jdvur9KqzxLPiPP5UUo:fAlA4SjfPe+jdm9zdPiPPho`
Yara	None matched
VirusTotal	Search for analysis

Name	481748658e126b81_updatecfg.ini Submit file
Filepath	C:\Program Files (x86)\360\Total Security\updatecfg.ini
Size	58.3KB
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`b0b368f2ef3493bf2d35fce9e689f73e`
SHA1	`fab676ef8238922e9d2770496b035d17fb9f7db6`
SHA256	`481748658e126b81b86647944b442aff243a128c84fc7171fcf0aa4ebfa7c71b`
CRC32	`00877B84`
ssdeep	`384:m/DqTL7xMbnhP3maVd/1e+nDrmoMMdm4oFUWk:m/DqDxMhP3maVjzneoMMd/oFRk`
Yara	None matched
VirusTotal	Search for analysis

Name	9b697dfb647c51c5_pw_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\PopWndTracker\pw_theme.ui
Size	209.1KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`33927da4cd611de0d41d9106ec83ef39`
SHA1	`a7adac31651af6a82853e04a75efd65de1b3fb95`
SHA256	`9b697dfb647c51c53b24edd5551081c512623b2c16485b6b185074bb8baf0d42`
CRC32	`1290C325`
ssdeep	`1536:92a71pDlFw/QKDyCHbJxvlIDycNZgpnYc9+lxT8Aj6BKokgRO6w04n/:wsGye7IDycgtt9cxT8/Kokgd4`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	a035247743bd81b1_smllauncher.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SMLLauncher.dll
Size	198.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3aeab7472297a1b05f9852863c140777`
SHA1	`3fdc9f7d86139749b0829d594c9122b5efd37489`
SHA256	`a035247743bd81b12fca86c14547127fa2549600bf7226669d13559292c500e9`
CRC32	`F1D03C4D`
ssdeep	`3072:XQ8AwxOkvZxJSdHeIx0vhLeKcE07dlti855J5AyvszFV:Xf2kBelx05LeXrlttF8`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2da2abf3f9dd7442_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`56012f8992d44c15c3368a4ce6cea123`
SHA1	`f100856accab079beb5275c9596aa47579d8fb83`
SHA256	`2da2abf3f9dd74429acf0c93f05de7858112a681255267c9e07313439cb17ba2`
CRC32	`59B38CE8`
ssdeep	`24576:fMManNeMT9EHX23PMgMz+0+wIGqB8B3pEp/g+h38:WNFwX235Mz+fwI3CF`
Yara	None matched
VirusTotal	Search for analysis

Name	d23a10b3ff0c565e_gold.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000008001\gold.exe
Size	1.2MB
Processes	2388 (axplont.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`0b7e08a8268a6d413a322ff62d389bf9`
SHA1	`e04b849cc01779fe256744ad31562aca833a82c1`
SHA256	`d23a10b3ff0c565ea8ee7f54bcded0582e1e621ebad69d4523d6746f6d8e0e65`
CRC32	`A7E73F41`
ssdeep	`24576:i3KN/uUnwZcPggVmmNp7c/8B2LF8jfjiKriA4BthZ:i3KDwZqggVmmH7F258jfjiKr/4BB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e6d4d1b54219ea9e_360libdrvmgr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\360LibDrvmgr.dat
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a1291bdbff46a6d313ee0ceb7fab99d2`
SHA1	`8e45a6bfeee9c0684f3c56fa6eeb98f2b89857b1`
SHA256	`e6d4d1b54219ea9eacc5ace9542415f8e8e29080138d67fea7dcbe891748c04f`
CRC32	`B1FC6FAD`
ssdeep	`24:LhfUQHM5NH221XZoPe4f99WIgBgRZ73781j105oaDzC:LhUQs5NHR1yWq9WI8Ioj10bzC`
Yara	None matched
VirusTotal	Search for analysis

Name	95f5400a0e9e8bbd_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\dsconz.dat
Size	18.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a6a90122146a6378445d2870a0207c01`
SHA1	`c5b0b055abc4f8e234ee81d23308d99dae0d430b`
SHA256	`95f5400a0e9e8bbd11a0615427c53f69f14a6c5aa229a2bb5da714628ab8634f`
CRC32	`72E6B71B`
ssdeep	`384:eAG4SpbCJBCXTXdZWpXnTApE+0hWoX5WG8BoLJdFIaT8nHnYcQaV:+bCiXTX+pDAG+0D5WDBoDFIaT8nZdV`
Yara	None matched
VirusTotal	Search for analysis

Name	9327e539134100aa_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`5823e8466b97939f4e883a1c6bc7153a`
SHA1	`eb39e7c0134d4e58a3c5b437f493c70eae5ec284`
SHA256	`9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075`
CRC32	`B76BB230`
ssdeep	`192:7VCMqB8x3yMrj1grjzR+vnr9ZCspE+TMAruNNNQkG:7cXyCM8z7eMlVG`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	bc28985eb55a3f78_simpleime.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\SimpleIME.exe
Size	183.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`47a3459c7b41e93b279faa05bb792da2`
SHA1	`2aaec9be6bd963775d266da411258debbedd67ad`
SHA256	`bc28985eb55a3f78ca9b20fe84d570fe63add8846c7d529e126cc00a214984aa`
CRC32	`5F717AFD`
ssdeep	`3072:7V0Dy01wyOGl0p/a7cLiPPjLz+3C54NpShO3jmpFv:Bj1Za7cLiXXIvNpaqy`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	98a854ee586d985c_syssweeper.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\SysSweeper.dll
Size	1006.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`54584d1cc0308f82b31bb7643de61934`
SHA1	`b260886b47771ec1c9ebe06f348819002112effe`
SHA256	`98a854ee586d985c6c6b48c37c302b965750c3e7f8568440de1580a892cb8b6e`
CRC32	`DA1A939F`
ssdeep	`12288:xAatjEV8BANFtwnfXkw8GCj7vSEIYR2aZ+gEu5lsRuM7Tu0xMFGV7Ntwth8Q:hi8Bu7wfmGC85aZ+Pu5M7q0WMPw7`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3ba371cfe17be75f_360kpbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\360KPBase.dll
Size	652.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f9063cf9cccedc6435aaf28ed95ebdd7`
SHA1	`6b1b6d3d2345b981d19b2b217da02441369ecb32`
SHA256	`3ba371cfe17be75f51b1344ef57631eeb2ca348a7fc75b968bcdebec70fb7198`
CRC32	`25897D3F`
ssdeep	`12288:G/DCu1AqGbI2L34ttTRkydG1kZ9EZPaWOx0WYUaqIB2lhyd32jkIq:G/DC8A/Yad1k020WYUgB2lhydmjkp`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	1cce6ee6ca9f26a2_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\DsRes.dll
Size	116.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`255df9fd4246a6451068ab834ec0c14b`
SHA1	`c45295342fab41190176d9fe9cad4ecd1f5ca3e0`
SHA256	`1cce6ee6ca9f26a298a8bbb0aabefb8e7d76dd1c6d67c116d8b207dce0f0565a`
CRC32	`98ABB609`
ssdeep	`3072:C8VRo8a0XNRYl6nEEEPi/eBP3RjvxCCT8utT/n/jVsOZFJNF0MfMY3QT9myImXLa:FS9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c842c312a0d13835_360boxld.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360boxld.exe
Size	291.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`5a24234aa21b0f6b2a6f20b278adbfc2`
SHA1	`4cd60d8c0a442437f9669551bc77506a67fe85b6`
SHA256	`c842c312a0d13835effc9a84e2d7ba0ae857d3b6e3c56f4611a433707d504a54`
CRC32	`76B4185F`
ssdeep	`6144:Xgu6rh8ntL7ejsKRIA+546lPfYwJQ/iAW98:x6rh8ntWjsKRtx0flkiAW98`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	5153c8b3cac03951_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\libvi.dat
Size	793.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`855ddeb2e0e0ef82645844cb169ad93d`
SHA1	`2c010003323e598bea6206dd99477e4897bd4ad9`
SHA256	`5153c8b3cac03951852ddef293e4854a636b6a8efffc747d758b07d60c01327a`
CRC32	`5E09DD69`
ssdeep	`12288:Ijt5CQRUdpa9hnysVBhXRn1yZBjHYgCuosZUoQH2uO:SCQRUdI9hnysVrN8BTYgCuxUoP`
Yara	None matched
VirusTotal	Search for analysis

Name	e751410539c79055_sites64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Sites64.dll
Size	2.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`4bd489f48461de0098f046eeb0fcfb1e`
SHA1	`047c39f1b52602eb19655c4ce42d67e8aaabeb9a`
SHA256	`e751410539c790554ef7e3f198689b61ed06955a608dc1fcb392bb4b7fe522c6`
CRC32	`37A338AB`
ssdeep	`24576:wtvksjjbE3br5GT0m+8Au/K7YlWaP+K3uTj+F/Mocutf1I1EOBnW/9H:CMsu5GdvKa8Rw1I1E7`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	69ff61ec1147e66f_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\AntiAdwa.dll.locale
Size	93.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`91de8596106d58c1844f74f925a31609`
SHA1	`a84e5bc2cc73612e3c9278f8e29fd9e53b2573df`
SHA256	`69ff61ec1147e66f4cbe68c02b328dc477bd8332cf9f19517fc7fd457b2b8fb8`
CRC32	`081ABB18`
ssdeep	`1536:9mvblAch7lbRonR0isKCzvEwqn89DMBPOWsbdZ6:9ubRoR0ishvENAvWsbdZ6`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e1f053d679f66b04_360aqvm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\QVM\360AQVM.dll
Size	728.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8e11328c15cb3b6bd56aec12cb64643e`
SHA1	`c8b25536660bffdce039583d2c6b7eeac385b3aa`
SHA256	`e1f053d679f66b04c94a7271cc403060642fd7015840e42253cc7c78d8998bbc`
CRC32	`1A277E74`
ssdeep	`12288:o+K4/Vs+dm2jOa3lwSg4ffYhKTGEaHStZBrn9fvIfVpd:o74BTlwP4EKTGxwZhn9noVpd`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	978df251514c77b1_smurf.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\smurf\smurf.xml
Size	12.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`250dc012de09359503de146669b3d127`
SHA1	`27707f1a938fa6e8ce26853ece741f4e45dafc50`
SHA256	`978df251514c77b1cd34173e20a5feec49811a1312cee621cc70c5229fb10fd9`
CRC32	`13CEF449`
ssdeep	`384:TUK5R5p56pefMMvj5feWcBYLuXIfJkd/cr5Us:TUK5R5p56pefMMvj5feWcBYLkIfJkd/o`
Yara	None matched
VirusTotal	Search for analysis

Name	035c0f963551a005_wdblockij.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\wdblockij.dat
Size	57.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with no line terminators
MD5	`dcc85297d2fe96df8a09d7caf4ca0082`
SHA1	`0c15bfc8f814dd4308d899d36231eb6d48347e1d`
SHA256	`035c0f963551a0053772a18b2719100946ae16d12fa6742ec462e2a6dbc5e554`
CRC32	`9DE07244`
ssdeep	`3:xK4QRpXWRC+djnY4AZ:UR5WRlY48`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	6c6630ff0be4775e_config.ini Submit file
Filepath	C:\Program Files (x86)\360\Total Security\config.ini
Size	190.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`ced3f3d1b1ee172658d683cca992ef98`
SHA1	`07fef9e7cb3fe374408b1bac16dbbfde029496e4`
SHA256	`6c6630ff0be4775eac74682d1fd4a0de91fc3cf6c6fdeae1c8e9019828c542f8`
CRC32	`441E1DF6`
ssdeep	`3:QoylClLtlEllckpAmWlpD/lJlf2luNh4slMLlLjlfKAlROKg23Vml8l4vlW8MLlg:QoylClxellc4Ahltpf2lun+PlzyKp30p`
Yara	None matched
VirusTotal	Search for analysis

Name	2043e6da1639c6d1_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\DsRes.dll
Size	107.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ebfbab569250e750aa8b31ec3a147899`
SHA1	`2f4e6ec36ce1a5a8571dcbfef8244d76bbf212dc`
SHA256	`2043e6da1639c6d10e67d2748636bc622296c7158da74aeceab81c8cd2192bf1`
CRC32	`79D484E8`
ssdeep	`768:vy2lF/WFLLpAEl6Zh7laV5tO01Nt1oMRobqEsBV22fzBatT8P0gYagPxVESBJxyS:K2kLlARh7qXRobAkW0KpzqBJ9we`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	57ea3b32d293ff66_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\libsdi.dat
Size	102.2KB
Processes	3780 (360TS_Setup.exe)
Type	PGP\011Secret Key -
MD5	`9dfa9756e5f7148de404b29be3940669`
SHA1	`4bd38b2bd4f5d6367f44a1bbd6f29ddbcbed5510`
SHA256	`57ea3b32d293ff6649266c0f5427dbca3782079f96aaf002b9730d8a9d6c4d2b`
CRC32	`4205B1FA`
ssdeep	`1536:MPr8TPtonhgqroa39A3WCzRBv9FnutBHwHcK7GRY82E+2/K1gV5OvlU8VEoB:VPtoNrr9efDGtBHGT2/6ALkdB`
Yara	None matched
VirusTotal	Search for analysis

Name	aebe21e5eecd017f_act.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\act.dat
Size	993.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0914618bca857f401decbaf492d12f92`
SHA1	`399ebc873a2b9c56245f1df1d4415592781aaacb`
SHA256	`aebe21e5eecd017f308aa8a73e80d7b5a8be22f577e76eac60fdc47410a67312`
CRC32	`91027D82`
ssdeep	`24:PB4AfoR1y0spXIJotaOsrjbr3B20ZHFJUJotaOpJbypA9cBpJmipGxJ1:WwZVXIJlOKB2KHFJUJlO/2XB/HwxJ1`
Yara	None matched
VirusTotal	Search for analysis

Name	9db2c3a729c56ca6_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\AntiAdwa.dll.locale
Size	79.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`10740035c41a18d3dbec7c1174dc0c33`
SHA1	`fc5cc93d3159de6267af5b58bf89dd9c96b8716b`
SHA256	`9db2c3a729c56ca6253bffbe4c39395729a9db9c8c81358cd388473d7e39bbbb`
CRC32	`A9A63E22`
ssdeep	`1536:XmvblAch78FRoCcleEbj/JF4XKqIqqp6NZBPOtTbQ:XXFRoPljbaKqID02tTbQ`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	68f17d14e9468588_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\SelfProtectAPI2.dll.locale
Size	22.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`617d9e328008405dc12f6c45a4772b77`
SHA1	`c5a7618afb15a2437dbc71c6ad21ba6a431cb28c`
SHA256	`68f17d14e94685882455a85289210409f8df4d289e3b42277e73623f877b2ea9`
CRC32	`0736B8E7`
ssdeep	`192:7sEyKrntbmkshtVku+pdhh2eryHU8/7X8r9ZCspE+TM4rLjtuGksy6BHUckAwdVU:7tLtiJI70HVJeM9+tHljXQKvrfpMQ3ua`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	fb0e151c618b04ff_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\yhregd.dll.locale
Size	18.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`077aa40329d8501b19b8372b538aba21`
SHA1	`d4f0876b1b31985e0c43243b6da813960f31a9b6`
SHA256	`fb0e151c618b04ffa207e0b4dbc014cd0716c0ae43239d90d3da90005ee535df`
CRC32	`BFE12AD7`
ssdeep	`384:7c2dlkEyVyRtznYPLIeR3KJ1MABn58DGPhCW2QKvrfpMQ3oT:gaRtzE9KvMu58DGJ2QwuT`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	09e74c26846485d2_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`37a82af097f424199884182d0096c325`
SHA1	`40d2ecbfbcf483daf1acea1503d0e19dca1fed3c`
SHA256	`09e74c26846485d2305742cd25bc480e45969f7e58276dc6f7ad37c1b1e3c353`
CRC32	`F156AC33`
ssdeep	`192:7x80+LZ4oZyMrj6Pu7CrjzR+vnr9ZCspE+TMorlY:7x8zLZJIMCPHz7eMh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b1d16d59fbaaab04_lang.lang Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\lang.lang
Size	6.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`e414616edc9c54dc51babb9a65c30cfd`
SHA1	`6ad7ae62a908a076e6fe05725ea538a22cb739d1`
SHA256	`b1d16d59fbaaab04f51aae8c03488cbbb0236357b624391a2aadb3cb7f05a1cc`
CRC32	`091CFFDE`
ssdeep	`192:cLGrHzv6xnOznOToGo+XX0WrIn9uqcIk+Ne+BZ66iLCj1yuS:cLGrHzixn0nqXXyhcIk0D66NjsuS`
Yara	None matched
VirusTotal	Search for analysis

Name	dc8647d11c7dde49_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6d5102c1ac6eba0ebc2b755309d1eeb9`
SHA1	`7c650b556cf1c652ebb82db4ef17dc3bfce071f6`
SHA256	`dc8647d11c7dde497113a8517a9a9847eaf702c6f6ccd19bdd974df887b5442c`
CRC32	`075D9878`
ssdeep	`384:7SwB+9lDlEH2udnYPLIeR3KJ1MlSz7wDGPhCwb3wov05MQ38ou:WwUblEH24E9KvMlSz8DGNwojV`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c44a6e28beaffb64_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c02e7e48aa1220dde4ee603380e2edc6`
SHA1	`b6f4d3e6251630b63e8db325766a8c4c10af74b1`
SHA256	`c44a6e28beaffb6448250bbe99f633bde342c49b380ea409309c70da0baf6ab8`
CRC32	`80382FB2`
ssdeep	`384:78ktGdE7tDGtahJgI7nOSeMDt+jclA8nQJ+MQ3Zg:YktOSDGtaL/eclAnJ2g`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6ddff0beef053f64_dynlenv.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\dynlenv.dll
Size	556.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`63952a153caf0c01a3f02a3daf87dc55`
SHA1	`acfc41f95e2ebc11dafa2e643ebb8c611c2405a5`
SHA256	`6ddff0beef053f640d662d6f2c8df9ad2c01cb44e14fe88565815c17b911a2c0`
CRC32	`E2BD8371`
ssdeep	`12288:mbMIVo80kna5YTvKAVwpwhtmVfzHW8PToqPeg02HaKcGlVimE:yBt0t8G0OaGimE`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4130a04127ea3068_6ennuvydnriwm4a4uosmtac9.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000031001\6ENnuvYDNrIWM4a4uOSmTaC9.bat
Size	72.0B
Processes	1872 (jsc.exe)
Type	ASCII text, with no line terminators
MD5	`88ad29e6bd374cc15cefe7af50e216e8`
SHA1	`f075d4fef2527e2b31b4172b4c4810ce093dfb66`
SHA256	`4130a04127ea306846d7c5d7b5ae3fa57d81d7357c96e80702eb256a8a9e8a64`
CRC32	`C5124779`
ssdeep	`3:Ljn9m1mWxpcL4E2J5/B0dBmuZxLvKWn:fE1mQpcLJ23ZamiYW`
Yara	None matched
VirusTotal	Search for analysis

Name	5e5e114d90422bd8_360antihacker.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360AntiHacker.dll
Size	21.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`66cadf1188938f85a4325dde3841dd72`
SHA1	`d03d9120857755ebb40d402e6b616420f7d5f105`
SHA256	`5e5e114d90422bd815e5a35aaebeee9ee71e104a665b155679feeef276616c81`
CRC32	`4808CCB9`
ssdeep	`384:E5GyMClD74UI70HVJeMuH6MHlXLI/QKvrfpMQ3Y7:V40rQ1K6MFU/Qwq7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	9407f18e6de8e2ed_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	110.5KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`e2f925992b2e4c257ff1a954e9ab6659`
SHA1	`59ae992e127669d072fe6d767c8333889071f28b`
SHA256	`9407f18e6de8e2edf0ffee64340926a71d4fe4dc51775d6d41aad155df24f6aa`
CRC32	`59DE6B23`
ssdeep	`1536:80CJdOdIchUx4B7dxxgvewF5MZLSL8l43v/UvfRpKU/tsl5rz40XQvhBj7gBwmPY:8/MIdOcTMwLFopKWw5LCmI7`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	e0323ab741fd9aa0_drvmgrcore.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\DrvmgrCore.dll
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`914f6e9c83a858134b7aaa3aaf7d61c2`
SHA1	`485fd07cb6e0dd4798d2efd8c0ead19c624a626d`
SHA256	`e0323ab741fd9aa0b687ab39c4827ee67c055a3846c074435f7f5af2d1c0f5f1`
CRC32	`73081AF6`
ssdeep	`24576:r86z6k+jc1pJlYPcb/Ofo/qngIf/VJwY+P0Ehzlq1TLGZSFa+uH9S:Y6z6cgPcb/eo/qV7M4TKZSFNd`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	94362520d4d74275_safewrapper.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SafeWrapper.dll
Size	47.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5	`1a9ef86b95c1dc1ccf423c56caf3f900`
SHA1	`0fce479386872640bdd97ab3994aa194d1eb5a63`
SHA256	`94362520d4d74275a3967e0ae74c3fde114d438481d0c080946ddd5bddf7c46b`
CRC32	`7E3685B5`
ssdeep	`768:N6kJgNYg5gGn6FZNma//QphCODU9KyhaMzDGP3KjKj9MPgkR:NNXgGJZ4q/QGODU9leeMk`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	843855b8c531cbd8_gamemode.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\gamemode.tpi
Size	190.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b803f8310e3ce8d2424e136e44df3d9b`
SHA1	`c9af9cd35594b54b663e6b2dd817add99a6a3645`
SHA256	`843855b8c531cbd8cd349c3f54a0d13cacc2832321fadc991162ef8e8c7e19dd`
CRC32	`81D0CE97`
ssdeep	`3072:CPPiPKVGnzhfteMpjyrR+dWwgWmAaqUa6lqG+W/HGiKtF:CNGzhc7FsWwgWwVaMP1rK`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	5ca6db7332607c2a_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\SelfProtectAPI2.dll.locale
Size	21.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`41ffec1b16391ae8180e3b7860af61fb`
SHA1	`00f0c3eae7b65bdd379aaf3aebe7d1dec8d1fc1e`
SHA256	`5ca6db7332607c2a3c4d7d1293ffe29d0f12c1a71b2c0069032b235d31d0e9df`
CRC32	`89136554`
ssdeep	`384:7PSL63YiRhI70HVJeMrwIHl9tDQKvrfpMQ3bZ5:L4iRaQ1FwIF9tDQwFZ5`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	234184ee1c37f28e_360screencapture.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\Utils\360ScreenCapture.exe
Size	668.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`050132ace215b38e8311e8f3fc11a6f2`
SHA1	`ccaecaf99d9b8acafd1632e3735b89d567af5112`
SHA256	`234184ee1c37f28ef75a950501e91d6b55c829f66b96696a1a8e83a09bdbe883`
CRC32	`4343BEDF`
ssdeep	`12288:8k1udOg+5XvJComqEAUQLk//b43pPonzLCETseJVo:8kkY1BtEAoHApyzL5Tw`
Yara	Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d8e355b43c71cf34_spsafe.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\spsafe.dll
Size	577.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`28c481dadf6956e80d257f4c122c1f88`
SHA1	`9454297ec927bb244a556804ad793c5bccde97be`
SHA256	`d8e355b43c71cf34d967e21d86c35a4614f998ef6d65e4bf6ccad84b15152d88`
CRC32	`5D836F2A`
ssdeep	`12288:ymnWF4qfhahXwkw2dhOTFLrJU7KRsc4XCxnrp1/f3xT8a7kubpvxMSK9T2o795:MF4vGykrn/fhkubpvxC9T2o795`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9299a186a619471b_driverupdater.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DriverUpdater.xml
Size	994.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`40e8d502da19ff2ccdb99f30709547e9`
SHA1	`2ca82527652b12cd825983d26b2d17ba523c741a`
SHA256	`9299a186a619471b74329434e13a2a6368559da596aea63afd156d178118a0c9`
CRC32	`F0DDA932`
ssdeep	`12:QF/LXYRWe82yAitPvUqdgcHcj+Zywy4wEEx0Zp2vSlreEtEsxq1w4q1IAyPn:QlL+xTiF58KZywycEx+p0EqO2w42Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	0a8ff901aa555ebf_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	112.0KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`6010f12a111df54537b80fed2e21837d`
SHA1	`fc42eb15c753687614f0d0fc20aec49c34c49650`
SHA256	`0a8ff901aa555ebf8e5ade3ac4b59ecc6b00df174909f5775f9522d0405a234a`
CRC32	`9DA51B4F`
ssdeep	`3072:5OquxaHtx1hM2ivBRLwxnEAfqJ/3lXFU7oZ7zO+Jf6fL2:5DQetxPM1vBRL6EeqZFK+Jf6fL2`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	e22f0b8132837e9f_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\deepscan\DsRes.dll
Size	107.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f81dfcff6bfbc96256ddf60928c6d0cd`
SHA1	`89461f3c31c0deda19ab9129c510c1dce31aba37`
SHA256	`e22f0b8132837e9f5f4c77ac8a9ea30c99cc88c2293d186b132012f9160defdf`
CRC32	`DF929E8B`
ssdeep	`768:qy2lF/WFLLpAEl6Zh7laV5tg01jt1oMRobql4j/wWfZb/XFeoy5yFYECG5PgATST:D2kLlARh7c1Robe4bwYh5X26rBW9we`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	1f2ec7012d749102_360drwht.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360drwht.dat
Size	41.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0537bf26eb498fdaa065c094f30142be`
SHA1	`94b099484f232310363abae63d2390f4308f23c6`
SHA256	`1f2ec7012d74910267f23f0072f31cb90ab2b5d55237ec511040b40ae5a0fab8`
CRC32	`D786C8F1`
ssdeep	`192:kyf89t5+mn0olvxxpFPC2BLuhbb4kzMtPNguTI7N11j5i1D6SI:d8/5nTplCe6bH4ZNFCN1t5i1bI`
Yara	None matched
VirusTotal	Search for analysis

Name	df499c56a0b35bf0_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\cloudsec3.dll.locale
Size	67.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`877b714ab883f30aadf43ea86de89943`
SHA1	`459cff97a72ab0dd27cfcec64baab879bd1149bc`
SHA256	`df499c56a0b35bf015457f654ca0707ca10edf07751974d3a65c698193038acf`
CRC32	`8A0A2350`
ssdeep	`768:UimVVOWFbLpAEl6kh7lqFVx01qwoMRociNg++WSsku0JBPO109K0MeKgthDG/kQe:hmvblAch7rnRoNavJBPo09weug`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a4cea444407f6981_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\appd.dll.locale
Size	27.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c38a4153a625fdef6cfea60ebb554418`
SHA1	`dd620117ceb6c11a3f5590c0b1879b1d48ef9c98`
SHA256	`a4cea444407f69819624dd4f0c5a7f953b1f5f9605d9146bc85f3db54039fb59`
CRC32	`0C54A9D3`
ssdeep	`384:7lM+DzizJj27gJ7lD1p/rSeR3KJ1Mn8E9VFK4ijNzDsDGPhC15KFKjqfvGBkSzty:RqBp/j9KvM8EAzDsDGy5KFKcMkd`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d0ebcfcd419fcec6_wzapr_dpiv96wwl8olryipyv.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\WzaPR_DPIv96WWL8olrYiPyv.exe
Size	425.0KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`25950224173b63b1186866de39b3c2ce`
SHA1	`cd1db16a90ff328a6ac3e65d9b6eb667add94dbc`
SHA256	`d0ebcfcd419fcec68e08a6adcea24c2a9596a93be8b72e088d41f619b8411e22`
CRC32	`5942633D`
ssdeep	`6144:0rE9uVBLYlVvw3VpDZgEyunvqai9OwQCpLK38/RPXnda:oE9uVBcle3VpDZNL8LlpLfn`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2d7fa3af97a50240_BAPIDRV.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV.sys
Size	193.7KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`b7b91b32156973711fdba826e2fed780`
SHA1	`0caaa4c4b12801ea1dcfbc9bb46b5cc49cf74c2d`
SHA256	`2d7fa3af97a50240dec7540e4171772912d1dbb82259ac4acf039818417cde5d`
CRC32	`69D91B86`
ssdeep	`3072:obsd1Au3Cdwi2W11JSciFtvPPSJhEi5kNCx866FIPIWbS0uHinSkAP0gP0h:o+K+WXJSciFtv3SJyOxsFGEySH8Jh`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9ceb8067bcd33577_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`01c51b8deb92563910d5218b47e08d45`
SHA1	`2d467000d8c369f14f5bdd01724ea78998867c53`
SHA256	`9ceb8067bcd33577f67822ed6fc113dc5c67b35393bd351614f7dad212cd4d27`
CRC32	`49A6BDD2`
ssdeep	`24576:jMMZ16POkiYTP23w+3Jezzf7iQvTiB8B3p1pK6hX0:f6phP23PJezzDxvQF`
Yara	None matched
VirusTotal	Search for analysis

Name	2a946888f2b719eb_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\NetDefender.dll.locale
Size	25.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f5d9198d84038672a4a119d6add27a7a`
SHA1	`42694aded31f34c8762fe5812d56b0dac085f773`
SHA256	`2a946888f2b719eb4778d8f8d6dbff2fb13bc45f95a1ea9d664b822d730c0023`
CRC32	`00D6C9FE`
ssdeep	`384:7rBoh34dYpfF5mkhI76eR3KJ1MdN+nDGPhCYtov05MQ3i:XE3/b5mxb9KvMuDGZoP`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a622072bf199752c_theme_duplicatefile.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\theme_DuplicateFile.xml
Size	68.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`5d8fef28a68a6ba57ae4b75c9cb807d7`
SHA1	`1c36a550c55124a44d8251a41ea46b13d9002352`
SHA256	`a622072bf199752c487ea162ae235b7352b74e18947a2640950e2f8a101a5cb2`
CRC32	`F55CC659`
ssdeep	`192:LNK3RqRKNMgq3bn25HrOFqRyRTkyk294jTlj+NSljn2yljn+ylj+WlOljnsljne9:LNKBfppn9pnVvEpnspnepSZF4`
Yara	None matched
VirusTotal	Search for analysis

Name	fd4631ff9d952644_wdpaypro.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\WDPayPro.exe
Size	2.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`24d97a6259a068652a851a9aad091510`
SHA1	`65ffb22e9a4e4edce9b26ca108de2558eb17472a`
SHA256	`fd4631ff9d9526449db92c686a5dab4a228b54f04486572e57200a0b1be01c03`
CRC32	`6CDF6ED5`
ssdeep	`49152:H8sPNz8eJCVKpJmgO79slwQ2T5ym64dcrlrTxFr+q:H8s18eJC9t79dTTwm646fN`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	110ee1b3c8e43b36_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`96c7a6ef9f82ecce230f9557dd824768`
SHA1	`b8e6a1063082d7e6dad487f31def4d09b83708b0`
SHA256	`110ee1b3c8e43b36c0cdf3483768d8e1da2126ba08a40c0a79324041d406fd29`
CRC32	`D14B7975`
ssdeep	`384:7QhmeR3K+h1MeK6jzJJnDGPhCc8ov05MQ3W:s99K0MeKgXnDGwo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	13a7845581f693b6_filesmasher.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\FileSmasher.xml
Size	950.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`9f370e34bde9806542f75b4403b87be6`
SHA1	`a9e7c5f5598eef866de21943941d44163f96e17f`
SHA256	`13a7845581f693b629267ba07da582c656fb6c922e0136c835c28cb7726e66c3`
CRC32	`A60661E4`
ssdeep	`24:QlL+xTiZRpNE/NE/ZywyVExkp3Ej7O2w42Ny:y+xToRpy/yAnVw4EO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	46cf79c16a86cff0_datadriv.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\DataDriv.dat
Size	4.5KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
MD5	`28de3b5296a1233d4d02d4dcb924c5ba`
SHA1	`af059748b3b0e2c9de146c50ac1f1244ff750c25`
SHA256	`46cf79c16a86cff0f677536ff48e1966ddef8d3108b21a0e2fdaeb49315dc207`
CRC32	`1BBC4D9A`
ssdeep	`96:rOOiaJc6bQaTlQXjnpWaTlQ1AEaTlQmaTl1Ehjih1yBMAgpZyQR8:SIvCFLCEC7z9CQW`
Yara	None matched
VirusTotal	Search for analysis

Name	078fdccccba1e0d8_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`9272ea15b7a7e96843d6d82e41c6e3a5`
SHA1	`2ec803636aefe5d7becbf59c9de0066b68646413`
SHA256	`078fdccccba1e0d875b58aa1696164ae94e9e476882639d6f7b7ea6aa187d382`
CRC32	`26D9EDFF`
ssdeep	`48:r+uL4wVOQ5YiZZDerZyV70rfc+ENSY7QDkq4ee6NYIb:r3L4wVOUYatt7Ofc+ENSY7kkq9X/b`
Yara	None matched
VirusTotal	Search for analysis

Name	60590c27a7b6a815_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`548427395473234a306c29ae897d617a`
SHA1	`a7f0252a9375b150c07c1f21d77918c099882c9f`
SHA256	`60590c27a7b6a8158f5439d1ec4ebeb830a4e5b7d61e4b66436e18278b32f014`
CRC32	`CF11FF87`
ssdeep	`384:75JtBeR3K+h1MeK6jtNPUSDGPhClov05MQ3:FJts9K0MeKgfUSDGao`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	56f9a17afacbfb83_360Box64.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360Box64.sys
Size	341.7KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`a10789a8855e0926f95163c3b7f7eae6`
SHA1	`0d7fea5c2a51251afd04d88a671a034d962ad2ac`
SHA256	`56f9a17afacbfb83a5db939dc111ba487f3a9523584a8295d072daa67a709cbd`
CRC32	`A03C4D51`
ssdeep	`6144:FY8dYt37OfawVAGpnMmVP3YhGYyfOpcLTe4j:NI37OCNaMmV4pgKi`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	2db46b8aa5974420_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	111.2KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`de4a1fb1aa21742c4fc09af03ae7f90b`
SHA1	`7f5fa99fd53401dd14ea485b60b1870d8aa491b7`
SHA256	`2db46b8aa59744204d397dab272c967b3fab58457e0bd3240130f6e27a51abc5`
CRC32	`26431D6B`
ssdeep	`3072:KZTg8R911QmROodiTyPctF1MB3VDHhFfmmAbdoDS7z5PZlA:N611QeOoIx1Mdpj/ARoDS7a`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	d5b001910930a083_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\ssr.dat
Size	50.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`52772f739058806a94cb02b60070b20d`
SHA1	`4151b1650a679f48db309befd26ae5c40be5c51f`
SHA256	`d5b001910930a08353fc9cda175178746b0ac72ea0630a37e6ff72d61855d921`
CRC32	`3F184973`
ssdeep	`1536:qAKDjjkXXqqGPutgIowpUFXGhEas3PTzJwuJ:tKDEXaqGPualwp+yELLzCuJ`
Yara	None matched
VirusTotal	Search for analysis

Name	22d8b2e34d15eb41_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\DsRes.dll
Size	73.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`385714a0b2394e1170922fd2ab9334e1`
SHA1	`7111dd0cdec143d5775ef18109e294d8b3da1c01`
SHA256	`22d8b2e34d15eb411af820a4f2a8c72292ceabe983b6b83e6d75ce2185383916`
CRC32	`3F885846`
ssdeep	`1536:N2kLlARh7TYRobdm6m/mNXDLaBS9we79:N8YRohy/OHt9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	41179030857b60c9_uiitem.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\uiitem.dat
Size	582.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`39055d57c21f8f24c4afca36d20999bc`
SHA1	`cadf981b5c602b171d020ceb4055a0865fb76a94`
SHA256	`41179030857b60c9a2e96de9761152a5f8edc7ffca4e310ad8d8e52fc110da38`
CRC32	`832A93C7`
ssdeep	`12:yiLil08ZW7PZWiSgLEKelZRjC/L8RZ584u0wn2o5:Xo0wW7PZWeLZejRjCoRx/wn2o5`
Yara	None matched
VirusTotal	Search for analysis

Name	e871ea7da3e95a9e_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\360SPTool.exe.locale
Size	27.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9fb25a4ccf7c5aeaeff5c6e555d8b36f`
SHA1	`fd6459120a8a273284105105964e4bcc2822b8cf`
SHA256	`e871ea7da3e95a9e7bdd1bdf7b01fa1634fd700407133b75451f9e530403ac6c`
CRC32	`0C284B11`
ssdeep	`384:75wacsultAgwBAP3Excizfbl63KXHdRUvM8z7eMg:ut4B23ESYfZHL7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f47e685eb7528817_hookport_win10.cat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\hookport_win10.cat
Size	10.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4ad127499970cfca45d014d013acb062`
SHA1	`934a0ed8d53adf073a28cb35da0d13f4a6849a85`
SHA256	`f47e685eb7528817dac19be0692761bbaef8e3c734a6638f846be80134f1e7b4`
CRC32	`69E1F8BD`
ssdeep	`192:R53RDqnlyToxxmwBYyKaWFWQF5tCtkqnajbxL/:4bPCFRXJlPxj`
Yara	None matched
VirusTotal	Search for analysis

Name	0574b9283d232bde_siteuiproxy.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\SiteUIProxy.dll
Size	348.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`36f88da8ab5c25a1655ad0aaebb2ae50`
SHA1	`467abe06651b6d5b30204c012162090868f4c050`
SHA256	`0574b9283d232bdeac7c53cc86c5a89435d52ff399039cf5bb304628be286a6f`
CRC32	`9D08FA5E`
ssdeep	`6144:XsTEQD4zJ2lo5iYMHHb4iGb9LdDR6tL2EZoEN4b2oHN0L9c:cTEQDi2EiPH7QR6F2EZPN4b2Y0L9c`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e5b5d270fcc12ca1_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\dsr.dat
Size	59.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c3366c2d19259fe2451907d6b69ad1ea`
SHA1	`9d5550b7d7198482b33f9c5721f54281fc79f272`
SHA256	`e5b5d270fcc12ca1142db45a2cab314246ea6086e5cc9589844088c22ea328c7`
CRC32	`4D1030E2`
ssdeep	`768:JAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyA4:jM4A6UAHRHF4aIn`
Yara	None matched
VirusTotal	Search for analysis

Name	23207486c3d15f63_webprotection_firefox.xpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\webprotection_firefox.xpi
Size	158.3KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`26d6897d58c576139af20031f43016a5`
SHA1	`69a5c32703d07d184d85538ebb38604ef25ff5dc`
SHA256	`23207486c3d15f633d5f4c0bc1a978c951df54e443361d2c64f8c17d0c0e3b22`
CRC32	`8244F560`
ssdeep	`3072:pdEg5HZmJfhoza+aILetM7SO2bdNggr/eRJ7/vSef/xKAHjhsH9i9EkAW:v5HKuza+3F2TggjeRHvHjc+R`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	0d8b4bf9c886dd4f_360netmon_60.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netdrv\60\360netmon_60.sys
Size	78.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`a1c23f63e3b99d1760848fdd78318228`
SHA1	`536fe3e76d7fc54713e14665cf68ae02f92697f6`
SHA256	`0d8b4bf9c886dd4f28bc5a49efbc36e97d30494ac2695e21971e94e3a1e41e65`
CRC32	`92885F30`
ssdeep	`1536:k7+PEPwPhZj4xc2gTKSvocIN5jwH+PLnghf:CwExc2gWSghN5jwH4Lk`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9641699d61162380_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`9aa94b6e19b89b8c2530c2506bced7ce`
SHA1	`bc3612560f1d5b68c289c1338450e718038f4a9e`
SHA256	`9641699d61162380df6345e606671a0aadf24ac61089462fac5502d5a48b0bf1`
CRC32	`B28977AA`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsSg6PCabR:r5u5/+mMks5qTp1mNqce9OoJ6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	0daec0248273c448_fileprotector.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\FileProtector.xml
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`19af95d421c0824519e6bdd0890ac9ea`
SHA1	`637562c5b1d1cbcc40884ce4c3f1c35d3517a9a0`
SHA256	`0daec0248273c448f558e6a8743bc0cf3e2837b75ccc444f06a83fb061ec4749`
CRC32	`B259B450`
ssdeep	`48:y+xTB5SOVwAmmrvEFEU1F2VtVurvEFEU1FDBJ2F2Ny:BtVwHizy`
Yara	None matched
VirusTotal	Search for analysis

Name	c0af71bdb2b79c92_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\AntiAdwa.dll.locale
Size	139.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c077e17941a28d6a6c93f2928a00aff8`
SHA1	`e62a6ea1613205f7376993d5323ecc83a15f0ff6`
SHA256	`c0af71bdb2b79c9258577359d09ee41c394608e1f791e21bf6fa0a4fe3806f5a`
CRC32	`13DA5F83`
ssdeep	`768:jimVVOWFbLpAEl6kh7lqFVi01nwoMRoNVaTl5IO/Qojn/BPO7BcgzAnJuo:+mvblAch7o2RoN4XDj/BPOtYso`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f1a6ff673475d577_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`8f236d6b47ac06565e1696503752a6c6`
SHA1	`b178576154f67f590861557ffa55530f429e67f6`
SHA256	`f1a6ff673475d5772bbaa4a7aac1c904238e41482af71a526a1892023ff69d7a`
CRC32	`47040C9B`
ssdeep	`24576:gMMc16WcDBYoY23FMaTBC+mdaIhQaB8B3pjnpth2C:36dbY23xTBC+ahhqN`
Yara	None matched
VirusTotal	Search for analysis

Name	1eeb43c8c58b1f76_qhsafescanner.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\QHSafeScanner.exe
Size	670.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`caf4ffa5efeb186326d281ba78709cd7`
SHA1	`dccad16168b916ec00c12d3f0535b3d61b29860e`
SHA256	`1eeb43c8c58b1f765b5c8d7584b7be363112ff8695e6aa1007d90eb17ba171bc`
CRC32	`C0BEF6D4`
ssdeep	`12288:1G+m9bQYyW0ssQwuLw6aU4RGCs6AB/l03Kle3DVmvME+OCxzn5P/q5S7ZW6DDnDg:1G+mVpS1AB/l03Kle3IvOznhS5S7ZW6s`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	96bcec06264976f3_2d85f72862b55c4eadd9e66e06947f3d Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D
Size	1.4KB
Processes	2216 (Newoff.exe)
Type	data
MD5	`0cd2f9e0da1773e9ed864da5e370e74e`
SHA1	`cabd2a79a1076a31f21d253635cb039d4329a5e8`
SHA256	`96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6`
CRC32	`65E5A5B2`
ssdeep	`24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1`
Yara	None matched
VirusTotal	Search for analysis

Name	5a6a9fcbf327ce24_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`81707ba2e4c29c175660aec36c696492`
SHA1	`6ddb9368038bf2c44860215d937e1fb93f5652ab`
SHA256	`5a6a9fcbf327ce248fdb34f3a762cb1d4fa17e3c6bbb530479dd8ea63f605adf`
CRC32	`2036BE9E`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsXg6PCabR:r5u5/+mMks5qTp1mNqce9Oow6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	bb7623d080b900c8_fastanimation.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\FastAnimation.dll
Size	577.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e12c9319237eafb34f2becef00273561`
SHA1	`20689c2dcc3afadfb13ff763c74398eb6f416212`
SHA256	`bb7623d080b900c816f23a19c7b09082708151e3719aa69b7c34bf556c997b78`
CRC32	`0831B9EE`
ssdeep	`12288:rqHCKBmyl9FF2w9Tb+n6P6JAl4sPlcvTX5kS88:rwFjTbuJg4sPlcvur8`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0d94148048d56b1e_qex.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\qex.dll
Size	2.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`eea1d0d4ef886e716b00bf4b4b5fd206`
SHA1	`34020547a5eb84b59faa00b4b453c6705041b2f0`
SHA256	`0d94148048d56b1e93860fff884b1f06ce4f151f36335816b871cdaea362b557`
CRC32	`27BDB90D`
ssdeep	`49152:Z3UVETD+ZFk1Z/bwsnmgj3XRcZTKgWJmKY+xxH4:Z3HnF1Z/b5mgj3BcrW4`
Yara	Malicious_Library_Zero - Malicious_Library HWP_file_format - HWP Document File PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0c3b360609d304e7_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\bp.dat
Size	2.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`696655e1a69b7b3356c8dc089712c31d`
SHA1	`2a4a9d6b0bd445bde2d51ca267a3b86f2a527b38`
SHA256	`0c3b360609d304e7cc0808965501625573274591e52cc56711d1069c7a583c70`
CRC32	`9E4A246A`
ssdeep	`48:PyQbo+Gc75+Np16BSPwppSpew7nwBNmFwvMAenwM0Yagoxempn++OmM:Py0oBc75+Np164PwLSp97wzVRtAcM`
Yara	None matched
VirusTotal	Search for analysis

Name	af9144f854b07472_wdi18n.sign Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\wdi18n.sign
Size	588.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`9b677c3a6d99801c13b7a7091179a318`
SHA1	`1b362b8bce28d392f598cb67fac6dfb79b3f9bb3`
SHA256	`af9144f854b0747275149a5fd11bc51d747dc4469bbed21fa7692a4a6d1f9a5f`
CRC32	`D0CE5E95`
ssdeep	`12:CTlx8b6wMbJi3engMVY+gTulzHtlOMHKu32J9SZou:MlW6wLsYlm+VR+`
Yara	None matched
VirusTotal	Search for analysis

Name	dc346a2acb7a340a_BAPIDRV_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV_old.sys
Size	194.8KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`98ee79b8e82c1da453c71a6f9380d128`
SHA1	`7e9178bab13a14b4b5567994ada35d13fdb2b1be`
SHA256	`dc346a2acb7a340a3ebfec2ac684254defb66f5485726d0ef32b51a3247fab83`
CRC32	`2599D36E`
ssdeep	`3072:T/Fq1zuOKKtYy2+NQl1ScidH/oLnZsMK5vtbhk6a9wpIWb60spi/7y9uxki3uP08:TU/q+yl1ScidH/WnZ7EhU9Esj9O3L8`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	77f90a5b92124e33_account_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\Account\account_theme.ui
Size	1.9MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`c0aa9eedc58b2e7f554376752952446a`
SHA1	`99fb0e4ec56a8d6a97b153942daf9f2d06847821`
SHA256	`77f90a5b92124e339b7af3f933cfc45b80b6677f0880eb43015dd5cbca7fc06f`
CRC32	`E37CF5B7`
ssdeep	`24576:F/iLR8kw93fwjeuK12Fj1rwQPAXEGhdJV:diekwVww1+yv1V`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	41c2d54116e46610_udiskscanengine.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\UDiskScanEngine.dll
Size	327.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3434cc47c7a4d6ab732ea5c63702d636`
SHA1	`8d7c31a5079ef8c80be0a5f0a78431a07b647e20`
SHA256	`41c2d54116e466105dda4c0ea1bc3060cfdebee323c07ad48e0b683df79caa3c`
CRC32	`06432DB5`
ssdeep	`6144:WdcXDE6ZfWQwbKv6kHCFQa2SeRtoCo9TBHvZiX9o:WYo60db8RHCF7j6zo9TZvZb`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	30facd273acbed99_hit97au7r5amfz5fh0m6zp3o.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\HiT97au7R5aMfZ5fh0m6zP3O.exe
Size	3.7MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`811c3c2dcec63f181e7cf9b24708f987`
SHA1	`472ee9012641ee56cf8b6ab279c05f4f883098c6`
SHA256	`30facd273acbed99d5c4a67e35e357d353c8b252bbe1a0bc93492b4639824286`
CRC32	`10D1EF1D`
ssdeep	`49152:yj5JhOtynDOSB3kCn+o29Vqm+X9QUOHx0NUibWsDF5e8ap3CzPj6lnx:yNJsY9Vn+n9wQ0yiys63uin`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	eb5e123169b609d4_360hipspopwnd_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360hipsPopWnd\360hipsPopWnd_theme.ui
Size	223.5KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`162f022b7260a0040e1e6db1e69369dd`
SHA1	`984a53e332c7397f40a10e6ae53c5a686767f5b1`
SHA256	`eb5e123169b609d442d4293fba610083e141e277deed9d40fcdbe94d8e074e14`
CRC32	`8B7B14A3`
ssdeep	`3072:zNK4NRfL+5q3RMXfhafxnSoH5gg5fOEjWeTTPv5UwR8s4gbgO07rSd86I:zNHL7RMXfRa5fOIBZBR8XqgdPSU`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	8e5583274cbaca5d_360searchlite_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360searchlite_theme.xml
Size	24.7KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`bdc55a163963a6d2c5c1d1e7a450a3bc`
SHA1	`1f3b287d55d205648201fd61e950dbb9ce9c256c`
SHA256	`8e5583274cbaca5d557bd095cf739a5b5f8786337a575d5c1d5df67545befacc`
CRC32	`44F82327`
ssdeep	`96:hznTDu13e42XauZBGfXu+QGWuRQGWuI7RrmurOjXvXH5CeGTNUedDON7uqS6Iluh:m3+j7yxlqpV9V1OtN`
Yara	None matched
VirusTotal	Search for analysis

Name	71493d01f2824baf_sbx.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\sbx.dll
Size	409.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`92532bbd24eed5550bf59cb8d5250d37`
SHA1	`eff4a23342e235266144aff0d432e986ee28ba6c`
SHA256	`71493d01f2824baf454281c3b66fc1881eb73bf27fde6b7ecca7788b24669ffe`
CRC32	`0F46F22D`
ssdeep	`6144:vWmD5RSx5AgltncLAFzI+ua2sKvp4LEeTl09LafWOtcL1PWMj:vhRI5xtcL/vp4LxTl0Jaf23`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	495d23a0a624d168_360calaint.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360calaInt.dll
Size	483.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`81154b23d57fc0fa594331141f463ceb`
SHA1	`37e095c716fcc01bfa00964719181a75110b31fd`
SHA256	`495d23a0a624d1681a3b897e98c5cb2ee5a93b09fa629b10481a3faeb481d861`
CRC32	`AF3F19A6`
ssdeep	`6144:+3E8a+2egMKd6kshUJ597fwQ8KSwxggggMCUsP1eJNqCkfhTwMQ9i:9MKkksyAKPggggMCUsPOqzfyn9i`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a7682eace4e397d9_strings.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\mui\en\Strings.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`140a48489caacc9bd1f03dbcfee87565`
SHA1	`a6fbc59d7edb1af62ace0cb6057c8e879c281de1`
SHA256	`a7682eace4e397d92ac7dd3e89544ce5eb127d0f41b9b1d684d1a0bc64e42a31`
CRC32	`81345457`
ssdeep	`384:97oT49VBDGUB50g0mz28YSWjldJ65n0Wm+Cn9UE5dbV+YrmOoOzWA:97oTM/LB50g0m28JWjld450yC9UE5T0Y`
Yara	None matched
VirusTotal	Search for analysis

Name	ee05002e64e56177_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`dc4a1c5b62580028a908f63d712c4a99`
SHA1	`5856c971ad3febe92df52db7aadaad1438994671`
SHA256	`ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e`
CRC32	`AA19FA2B`
ssdeep	`768:VXHGdBPASgYoH6dzSnq5TmtzG3TpMtaTV2J8lAovrtd1tnQr:0ASgRcSqNmtzG39Mk5NAOrtLtna`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	2857fbe46d007307_icudtl.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\icudtl.dat
Size	9.7MB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`d03ad9a1189d190119209072d048e428`
SHA1	`aa954098e3ae4c00f67bace45b39a7b4a8242c6a`
SHA256	`2857fbe46d007307b1e204c6eb1b7e4988973b958ec8edb07445988f332c1ab5`
CRC32	`7EED4272`
ssdeep	`196608:L+7mOUgAjk3MVMP7mxl2b+2WYZjU15obkTQ89kxgc3bbHo4QY7iUT0ep:evWjk3mMP7mxl2b+2WYZjU15obkTQ89a`
Yara	None matched
VirusTotal	Search for analysis

Name	1ca1038f4e177b2f_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\AntiAdwa.dll.locale
Size	80.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ce615430b9b3d1bd9fdf3f622250df38`
SHA1	`5d940214755dd00067b33822bf14f8dc86b74d76`
SHA256	`1ca1038f4e177b2f459fc20a5300fc5cd1eb59e762c2fb015423372d64b31f0d`
CRC32	`1FE8481B`
ssdeep	`1536:smvblAch7O7RoWT13QQE90iloP3BPOJaRRjE3z:sB7RoY13Qf0iS88RRjE3z`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5ee31b5ada283f63_drvmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\drvmon.dat
Size	5.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c2a0ebc24b6df35aed305f680e48021f`
SHA1	`7542a9d0d47908636d893788f1e592e23bb23f47`
SHA256	`5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf`
CRC32	`9C67E246`
ssdeep	`96:FDUwO22iZ3EYFzdsmNmW6kTSUhdNGfU5wpWuCZb9ncY+2qdS+DQg3XwS2ULWPSL5:F4wO6NdMfBUyuCdCZmRU+DQGXUgUGAro`
Yara	None matched
VirusTotal	Search for analysis

Name	c055334b30326590_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9506540f8c42c98a30761f4f4d66632c`
SHA1	`de54c34d7efcc92e4ae4c9bb4b6ec542e5d744c3`
SHA256	`c055334b303265903ae6ae7ecbffe1fe915b075368137e29ae4d652c1800c1d7`
CRC32	`435E9E03`
ssdeep	`192:7L0Mdmo5yMrj1grjzR+vnr9ZCspE+TMArlET:7L0cmVM8z7eMSET`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e9385a17fd137914_cleanhelper64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\CleanHelper64.exe
Size	278.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`6ad1950d2748954c502fa2dd09366813`
SHA1	`e89954321c3688fec2c44aeef34f56e2a2b697d1`
SHA256	`e9385a17fd137914639b791215a0af1a83927d4e93ea8a2549b023797df8b8a4`
CRC32	`AB70102C`
ssdeep	`6144:xMvSunFlW+Gmpw+AnPTkJM3KDagdkNxIwyMsYh:xiSYFwBgwV7kbW2kNrTh`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	09eafeda04f79fd1_crashreport64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\CrashReport64.dll
Size	200.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`f0ec259bc74b69cac5789922187418b5`
SHA1	`99e738a12db4a60ee76316ad0a56604a5f426221`
SHA256	`09eafeda04f79fd1faf273efe104e877b719fb31689838aa12a3e6d3384a3da4`
CRC32	`FA995B2E`
ssdeep	`3072:vdgwkyK6saI/qiU8zpBoE0wIdFlPwhJHocy0jgD8dXPNwpaojmF55S9heMA:vdgLyK6vilMbdFlPwhJIA8YF1Am09s`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	65dbc8b5fc6e0492_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\safemon.dll.locale
Size	51.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e532ff70a775be1dc5e7f70faa4f3997`
SHA1	`fbd608b979de30a23efe23939ac4f3c27871b00a`
SHA256	`65dbc8b5fc6e04924a99fc3ec2b5930913378e5b5d8b922dcbafae7d4d5d782f`
CRC32	`303914C2`
ssdeep	`768:eCG11xWF7Lp/El6Eh7lKlJ01e+6JWQXNu2lZZ3P9PZ9MHWBATx:HGa7l/8h7x4JWZ2lWWBATx`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	631a884a2bedc649_appmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\appmon.dat
Size	30.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0c63887e990f62ae350597c9a27f2c12`
SHA1	`d10bf2f49153e067d3161e494c1da5278cc579df`
SHA256	`631a884a2bedc6499cdcf2902fe4459bff3e469dca78074dd3d683717c64bc02`
CRC32	`72AE8029`
ssdeep	`768:lq848eBPufhbPRHpVtz3vPdeaWOftP1iIz:Q848eBP+Tl3t7vrTV`
Yara	None matched
VirusTotal	Search for analysis

Name	07244498ba0e7625_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\Safemon.dll.locale
Size	50.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`010327dff990dae030f2a47a644a6e16`
SHA1	`dd6361d277660ade5a190a889fa970328bda817c`
SHA256	`07244498ba0e7625be05260ee3db3f876861f7da6c5fe66728ff8c83fbee461e`
CRC32	`F8CCEA29`
ssdeep	`768:kCG11xWF7Lp/El6Eh7lKlE01M+6JWi3+1OfV6BANP1q:xGa7l/8h7M+JWL1OfV6BANtq`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e794c636a50b5f51_360hvm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360hvm.dll
Size	23.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e540bc23b3f5934dee4d7b7b39fc3ac2`
SHA1	`465f0b0e4fe49b81a43980dd0cf40e068e98abed`
SHA256	`e794c636a50b5f51e0bd233c59c9144277a94792d3537460123a39c583d01421`
CRC32	`60BADD13`
ssdeep	`384:owfAc9ruFLJzyfGU6DXnYPLvReeMRksoPjH3RKnhU:Cd9yf++Uooq`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	20744c6e73e70a4e_systemregclean.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\SystemRegClean.xml
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`a4045ec6bf8f92f1106ce677bf2bfad2`
SHA1	`540bbc717cc96eaa0c77d152e5aaff490828096a`
SHA256	`20744c6e73e70a4e26bdd20f71c1804b671de79527d287ffe2252ca6e64145d4`
CRC32	`60F32B9B`
ssdeep	`24:QlL+xTixe4RGZJGZZZywLVEx0bps9sn+yeLseL77E3eR+Uiy4WBQBWJJ2w42Ny:y+xTmROjOVwP0Gf//+zQJJ2F2Ny`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	f2de4b4bd9e06709_360patchmgr.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\modules\360PatchMgr.exe
Size	284.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`4dc06fdc0a4f897a070a5d1e94fe509d`
SHA1	`bf524b1f1f848c4bc536d6519a5d147ec2ed5f11`
SHA256	`f2de4b4bd9e067095ff3f61423910a6d52ee9841e782c981f84141956a121c06`
CRC32	`62CCD542`
ssdeep	`6144:2b8kCnlGavNtWYBiTMaMsP4TeOIQjki8UJjyn:/l3vNtWgaMsP4yEjV8Ijyn`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	656c1ec3308eec42_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\deepscan\ssr.dat
Size	48.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`36f40d4765175a30a023652ec250c028`
SHA1	`2d210bcc0999fce743e11144cdb477435a4f2cf9`
SHA256	`656c1ec3308eec42f541e0bf1b719dab057b11b3f549060cb059ca70d525274a`
CRC32	`D47AFEB2`
ssdeep	`768:zx+WEbPFQa/XWPQDKIrETrAWRJCqZ2WFAeVPTbWjEdZFj0GAg3MBesLO1ERUTi:U/LFQa/mI7rEwW/2WFzrOEhnMBee3Rui`
Yara	None matched
VirusTotal	Search for analysis

Name	8d8714137c4d05c6_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\360SafeCamera.tpi.locale
Size	2.1KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`d9cc22869899744906100f7dafd02e68`
SHA1	`0548c013d4e82ee54eb32ba7f947230c80ce04b0`
SHA256	`8d8714137c4d05c68631c6a1edbc600efce28591c5689ac5992b54d019ecf959`
CRC32	`5987826D`
ssdeep	`48:r+uNyyTScYwx/NwOMITJEXenH4UnfUtKyc6fiP8iIG:r3NreJYpnc461iP`
Yara	None matched
VirusTotal	Search for analysis

Name	a7883c05518f9d1d_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`3997a6acd6764b3940c593b45bb45120`
SHA1	`16bd731772fef240ec000c38602c8fcc1b90dff7`
SHA256	`a7883c05518f9d1d2af9773f19f470b25ea94a865fb4d43b9e16518c3434424b`
CRC32	`DBD5DA72`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsKVg6PCabR:r5u5/+mMks5qTp1mNqce9Oo16aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	9784920fbe60c2e7_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3faa90f4248bd9ef47d51bab11729e84`
SHA1	`6a0405aaa9371046fcf8bdbca45f0a3029429a1e`
SHA256	`9784920fbe60c2e767fa82879a0e6dbfd67384d70ddcea9dc5d628f8045f653f`
CRC32	`DEC63A57`
ssdeep	`384:7sLB604ZWeI7nOSeMwmQj4A8nQJ+MQ3KYa:MB604ZwI4AnJ1t`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	728e90b31ca8ac6b_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`246ccaedf8a26d2141c4e90b74a0d3a2`
SHA1	`fbe747b36d8798f34db65513702fc6a647ff0954`
SHA256	`728e90b31ca8ac6bd5689b7cc0fd5868bdfb975e2db8db43871ee2da3d3260fa`
CRC32	`4E510B31`
ssdeep	`384:7AG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJpQaylSnHS8oav/nK8Q:rbSj0SbDQoYZlDT9cPJpQaywHS8oy/Kz`
Yara	None matched
VirusTotal	Search for analysis

Name	b86ff4265280324b_libredlist.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\libredlist.dat
Size	1.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a0e15f52bdde187619f750e96afa7e91`
SHA1	`394b03c1664782d1e8f9368dc35e26331b3fedc7`
SHA256	`b86ff4265280324b0fc8b089a768142528d11eb6495f7d13277c9673ad88c1cf`
CRC32	`6062D4F4`
ssdeep	`24:bfW/IdkoPWtO9WWyNV7mbkZ76jdREDovoJ+AP2+kI1yO8xpApbXPpmoorQ:bQgNPz97y3leuYn6k0FhbRNAQ`
Yara	None matched
VirusTotal	Search for analysis

Name	62f37b9efdc58cdd_fr7.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr7.dat
Size	13.0KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`1f668a15f6455349489f171169f0e83d`
SHA1	`da44166751e281f6f834f52fdf452cf5657cdc53`
SHA256	`62f37b9efdc58cddf3536f46c341a42482e0d368e79a5cd18bfbbea40a1cd4b8`
CRC32	`F418AA6C`
ssdeep	`384:1cVv2wCKIBJv3p7vuopk2CDpeCKx430C/4X:C+vMp/4X`
Yara	None matched
VirusTotal	Search for analysis

Name	979e461f06305928_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\safemon.dll.locale
Size	53.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8caee7ce780dcc341997a55378120104`
SHA1	`60b1dbabc68da3dd25b4242d438e14283146c284`
SHA256	`979e461f06305928a6529768292826e7d2f01d373c9c379a73c6ead728e4c21e`
CRC32	`7529593A`
ssdeep	`768:YCG11xWF7Lp/El6Eh7lKlJ01Q+6JW1xnYdA3acBAylh:lGa7l/8h7xCJW3EcBA0h`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	48f5af0ba3f96b3a_fr9.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr9.dat
Size	2.6KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`17742f92d26802ef790582e3eaa9c849`
SHA1	`d935d04b9c28b42c6e9ca31827837193ef433979`
SHA256	`48f5af0ba3f96b3a2cc8d8128930c9333a435c83f14481edb4ab69f2b237bd61`
CRC32	`5049E50C`
ssdeep	`48:Aaw8btgu6wbHaw4NBYR7dkSTMCNyDRbzJVyahU3v3ytSa4JWt0ig:7w8Zgzwz4fCmcXyZJPhOvNhJWmD`
Yara	None matched
VirusTotal	Search for analysis

Name	5c808c3880d6d8f7_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\spsafe64.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`99c0d5457100b426e9b2942ed1b9b178`
SHA1	`dee937345c22319debd95ec594823fb03db8dfb4`
SHA256	`5c808c3880d6d8f79685087619b5bb20a7543ded44505d55f94c8258db084c44`
CRC32	`CD371E5A`
ssdeep	`192:7Erm9zyMrj1grjzR+vnr9ZCspE+TMAr0UTRr:7um92M8z7eM1UTx`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	c19bf6537b6bd288_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`0b9c38b8319e762799690261c2030f63`
SHA1	`611dfe539f01a6eea5b60e55201a723b9858c9d7`
SHA256	`c19bf6537b6bd2889a49499c2dde9f7e209c4575a79235176976a4a07e38197d`
CRC32	`289393D0`
ssdeep	`24576:CMMZ8neD0oBlp23wYKba3EPVcgrVB8B3pXvcohXa:xndKp23Aba3EtcgzF`
Yara	None matched
VirusTotal	Search for analysis

Name	36d8620e207adf2f_driverupdater.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\DriverUpdater.exe
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ed08d4b6f81496ee0174868b02fe3f96`
SHA1	`56b1189e2b3711a57ebfef5f3e66e2661fd225b2`
SHA256	`36d8620e207adf2f59772cf1835698e925db5f6de9fb213549a836912cb4a4dd`
CRC32	`034CC695`
ssdeep	`24576:eq9sFAxQ3x9GgJpKd/pRnba4F+9vz3OyP+DSqAA+6LsegT2tP7XAtWrGpOk9u:HHxQ3xw2pKd/Fi3OyP++qAjgsegTkUtg`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	58286c9f943609d9_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`8785e4bc6d7ccba8d94085727d21a8a2`
SHA1	`b8cf1fe966bd3181f538424b163aa6f558cbee3b`
SHA256	`58286c9f943609d92416473817ca8618356f5c9a64cd83df4f5e9611d4e04cf4`
CRC32	`2943A257`
ssdeep	`12288:A/nCExkRpiJhfKNJhhD5PpS1t/PUTmuisxaA8Fnf2:CCExkRgJhfKNJLhctnUTmuTaAP`
Yara	None matched
VirusTotal	Search for analysis

Name	074f19878542b070_sites.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sites.dll
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d43fa5904a62445893fe1db320ff2e7b`
SHA1	`2f888949e9c3ce0f647b97ebc8289ae3f2f2eaae`
SHA256	`074f19878542b07060bcf7a10238aac2571eda75f6596fed6a0a1f7e884f2305`
CRC32	`337F3F26`
ssdeep	`24576:nrpLo6o/c+H8+VR3Nba2nTUQz5Qo4BdfWPW99g:n9Lofc4pn3NNAQz5QBdoWU`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c9e1188911939e93_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`437b746e0f469c41d075dacd54e4ad4f`
SHA1	`dd0cd555b54d47675f75fe438e8983684681b6d7`
SHA256	`c9e1188911939e93153ae9e14485dbf9910f20b3682db8ec9b08912098f3ba46`
CRC32	`A0179093`
ssdeep	`1536:HORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3R:HOBrUC4jyUJGKzgSg+hBa2QOF4`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	deddae3c60a724e1_360tscommon.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360TSCommon.dll
Size	483.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fd9ec3f6ae3ec4e72c7d8adb9d977480`
SHA1	`304b83eb514354a86c9b136ac32badcec616fed8`
SHA256	`deddae3c60a724e167107cda7d4ad0481d8ab451f61081eff7730d0f114da918`
CRC32	`A494F7E2`
ssdeep	`12288:Q3AzxdT6vLaBlWP+QoG6dzBSafmZ1DSpt9zqn6Kyb9l:PdG+QoD4TDSpt9z+6Kyb9l`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	daf8af060e15d4b6_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\filemgr.dll.locale
Size	20.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`59893e496444c4a34d77c6de2ce516f0`
SHA1	`359ad2793338e1257694e2584fdc3eb2af678c48`
SHA256	`daf8af060e15d4b6b1ab0a2038a061af1b8b7a4faf6038ee3d2a015d770cdc49`
CRC32	`B7BFED74`
ssdeep	`384:7ATP9JGQ+9lTEW9nYPLIeR3KJ1MtYDGPhCk4QKvrfpMQ3r2:0TP9JQrEW9E9KvMtYDGb4QwB2`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7d18de171a74f54c_sxin64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\SXIn64.dll
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`22256a18ebad8a6f8591fed0931a7755`
SHA1	`7ca423b90a67d6859075d36433bcc70c8c0cf9d0`
SHA256	`7d18de171a74f54c018c6a2e724062e2141c13120d3a46d15488b76a550ea05e`
CRC32	`330BFB4A`
ssdeep	`12288:TT14qTn2tvhw2dJ0pSZ2Bt9aiiBRGtEqK:iXJ0pSZ2H9aBqK`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ec82b3db6b7cab1e_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\DsRes.dll
Size	84.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`520d7010a344f8fb4af7b1a80f81025d`
SHA1	`805a98f9d334e540356356c3d113620feca3ad3e`
SHA256	`ec82b3db6b7cab1eba4c239217c208013de7289b83de1fa55f8bfcb2e14d2381`
CRC32	`C9A35638`
ssdeep	`1536:82kLlARh7AKRobMqR7RKJOnBhAIknRB5T/3WBjEL7Y1f6Bu9we:8fKRowqR7R6OBiRB5D3WpEL7YdF9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	307a151f663b808a_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\deepscan\DsRes.dll
Size	86.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1185f218e284279854792bb27f262c63`
SHA1	`0895f155f8c87cc557d230337263f558748643d4`
SHA256	`307a151f663b808afa6d704a13cbc0127d8903d658eb3c7e21198f4902a49f04`
CRC32	`A01D269B`
ssdeep	`768:vfdNM5q5mdMkMinwxnswwFT2yckIBxRjfteWhAg5ae3RtRk0W3ee9K0MeKgtGDG2:vFS5cVUTyq8jftVtte9we`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	8592fbfcaa695c0f_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\chrome\360webshield.exe.locale
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a64e6d290191910de23c6fcf242b47a3`
SHA1	`18adf54c983ccbedd850e8450646f6a198efdbab`
SHA256	`8592fbfcaa695c0f971b69390e48577aea47c62922d107073a0d5d75bca5cc63`
CRC32	`19FEBD7C`
ssdeep	`384:7wueR3K+h1MeK6jQDGPhC3QKvrfpMQ30lYJ:0z9K0MeKgQDGUQwylA`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	fd42e618223f510d_file300un.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000020001\file300un.exe
Size	579.2KB
Processes	2388 (axplont.exe)
Type	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
MD5	`a991da123f34074f2ee8ea0d798990f9`
SHA1	`3988195503348626e8f9185747a216c8e7839130`
SHA256	`fd42e618223f510d694c5fb2f8ecbc1a88cabf003bcf20da6227da30a1352a0f`
CRC32	`CB2E2FD3`
ssdeep	`12288:ntSXI9aVcVXyB7qngm/krqaeAPu3YNEYId/yhlJQNXU:neI9aucNSk2H+yCId/iQC`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	d57e8b48025e3c2d_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4d8a3e57f5ff4648715ffad1b71a0d06`
SHA1	`96c26d359b5f4dafcb3b9b85a57a9eb7cee9c7b3`
SHA256	`d57e8b48025e3c2db2296759501e515aead5db28c6b2f7d80edfba8f8a7d822f`
CRC32	`5D288B2A`
ssdeep	`384:7OOMtGLsJltDGQWjveCEI7nOSeM6jcA8nQJ+MQ3na:SOMt4KDGQWKmccAnJoa`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	444c62b6995a1de7_optadnnet.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\OptadnNet.dat
Size	11.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`8d603d135ea5b59b2d980dc704ba4bd9`
SHA1	`40fea323a7ed4be1fa0d1014df431408600ac443`
SHA256	`444c62b6995a1de7855b545b2fc922fc200d454af8d4719261352685daebbfa1`
CRC32	`83CC7209`
ssdeep	`192:E60NZz5IE0NnPpulzX8C4bPsIl60NFsCE360VXaCbfBTlzg6Z6pC/j2UCPm6ZKsC:k55yhu+PsIXFsdVXXf5lIwyvC`
Yara	None matched
VirusTotal	Search for analysis

Name	f3f3faa4a6ba4e81_360Box.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360Box.sys
Size	218.8KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`feb5d9ad5a6965849756344f9947a772`
SHA1	`5e24761e4e5b7d6c116c0146ded4851db55c8f7e`
SHA256	`f3f3faa4a6ba4e81271e25e99badf4318b84637784d563a84a017c5f46ce291e`
CRC32	`0D233A19`
ssdeep	`3072:ee7qtrnqJnmbEsfDBuGvb7I0KWsi7yGlyHTdO4k0Nmq65njo1C6dqwR4avmne7PA:l7KeZmYIDTb1CieGoHTdOqNiEqs4peIP`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	dfb299e78b489974_360qvm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\QVM\360QVM.dll
Size	824.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2b176fd7eaf84aca245ff1cf3e5dd858`
SHA1	`7f235cc85ccfd66e7b0dc924a619781691d84b2d`
SHA256	`dfb299e78b489974414fb70a9c5c8e5f2b1281c47573e49b356cbd0c04757abb`
CRC32	`2517B9EE`
ssdeep	`12288:Hgy52yLSsvsaUxkkSe9eT68NB6JmObwTCEM+XulMgIfYZUKhyyOtprorxAjLQTPw:D52WN6CCE6HIfOLI7t4WLWKtV`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2f8492601a4b3d9b_cacert.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\cacert.dat
Size	6.5KB
Processes	3780 (360TS_Setup.exe)
Type	PEM certificate
MD5	`822090007ed487f71bace44cc398f7eb`
SHA1	`e853ae0b3c71cf3bbee1af6fd5e1ecd28cd42d50`
SHA256	`2f8492601a4b3d9b6061573e947a5ce79245b647b36d12c1e45d52df2897bb11`
CRC32	`6EC90EBD`
ssdeep	`192:H0Hil17pc4ztUSP0cFQuosyGgEL+iZcm1sh:HQilo4zK8FQ6yGgELJZp1sh`
Yara	None matched
VirusTotal	Search for analysis

Name	3197f2b656c76ae3_somproxy.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SomProxy.dll
Size	489.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9fc415c22afaef5589c27e7fc51c69dc`
SHA1	`4a80183341d29ed1768c8d4921790304cba34758`
SHA256	`3197f2b656c76ae351b7c4c3fefc9b6831596477029efc3b1b958c30f256da5c`
CRC32	`5141DC7C`
ssdeep	`12288:j0fCiJUmeO8+zrmCzb+gbEyX6KZZ1aeHIcUCY7D17BcSFNlZLwt:x4yeHU17BBBGt`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0dd85f897c3ec777_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\360SafeCamera.tpi.locale
Size	1.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`90f56778fb26f0470dff604bb7c752f5`
SHA1	`2198b276cf24faf5826eb64d7607c33e1945f501`
SHA256	`0dd85f897c3ec777bf7e7ba56a2c7f81e5d75a5918b2a7e316b207a01ac78a14`
CRC32	`A1505B4C`
ssdeep	`24:Q++uNyxABhZ+h5e9OQvw2u+bwJ5CsmSHLxtHFvJ4+xN/Lhq6XwhR:r+uNym+TeMQvw5+bwJ55jHLHr4+fo1hR`
Yara	None matched
VirusTotal	Search for analysis

Name	c51c8ab109733500_wduicfg.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\wduicfg.dat
Size	10.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bf64e1dba91a7a7b545eb31cc445f7b5`
SHA1	`18c49f509fc4fb56a8f267c6a993109184447eb7`
SHA256	`c51c8ab109733500a7eafcffbc098f12af841c2cf958aa4dd9e93caccac59cb4`
CRC32	`9F40325A`
ssdeep	`192:56brFL/ebjiQBn6ayMKk5eQTTiP0QQb1kt/RAuEflVMO877skGdAu:QrF6Hjryrk55TaoafBO877skWZ`
Yara	None matched
VirusTotal	Search for analysis

Name	7e885136a20c3ab4_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3e88c42c6e9fa317102c1f875f73d549`
SHA1	`156820d9f3bf6b24c7d24330eb6ef73fe33c7f72`
SHA256	`7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e`
CRC32	`3875F79C`
ssdeep	`768:5y2lF/WFLLpAEl6Zh7laV5tX01StY+6JWgdvmBV2M3:A2kLlARh7vPJWgdvmBV2m`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a8e6676960784cb0_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale
Size	19.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d4a841157f48d7f44bf87c3b51c0b231`
SHA1	`cd4af1a0a48d5da7c52080162892884ee8570474`
SHA256	`a8e6676960784cb0ee523baa387d23b38f59998fcf7b2f84a9d1bb95c371d593`
CRC32	`40045DC9`
ssdeep	`384:71LzRk8PvXUI70HVJeMRHlm7TTQKvrfpMQ35RB:ZXvXrQ1TFgTTQw7RB`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4aa696ba49592783_syscleaner_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\SysCleaner\SysCleaner_theme.ui
Size	442.8KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`f5fd2cb95aab5bd3f4107f8ff8451289`
SHA1	`c76db0f220dd525fdd7aa11c3ca78886a65d8260`
SHA256	`4aa696ba4959278367bd248f01a5e4929bc406271f0165059bed427e2588087b`
CRC32	`B9396C83`
ssdeep	`3072:ndYwclvpmcANB2B635KYXakIVT6Xl8n1reB2EQs0g7rNRU8+6oGPJrkca5Q8sMs7:nwlBaB26Ky7rnNw1eUfwN`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	0203b48bb25929b2_promoutil_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\PromoUtil\PromoUtil_theme.ui
Size	146.4KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`fcfea9f3b9ec1db49475c92d4392fa01`
SHA1	`9225dc2c2c91d14a6e31af581e781f2c9797c5c5`
SHA256	`0203b48bb25929b279c14d9e18a3c556138b75b98c34b0a7f427f67922956d70`
CRC32	`2B29B8FE`
ssdeep	`1536:DYkyzlCUxucpY7jMYut0+Xb87GYB9GyUA+9dONd1W2ZhgL/NnVy:DYky/Ujxu1Xb8NwhA++Nd1rW/N4`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	ebe911d8eb2d2989_eainsthelper64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\EaInstHelper64.exe
Size	146.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`bebc39160a8446ec0e9693f5da3e8380`
SHA1	`9c4a2817429159eb4357ead9fca2d07d9d7c3f21`
SHA256	`ebe911d8eb2d2989becc8d9a965749e512914ff2bb42f1199e33c2550da46c56`
CRC32	`77E513D4`
ssdeep	`3072:r7AFygSGRAK0fcea1ZwmDYo+i+zfBjJvV7BuxCu5FttFM:HAJ0fRa1+27+HVue`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	09e69bac2fd5023d_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`a5e5a4dc0064c2cbaf31d5d0a10c3258`
SHA1	`31eb5894bb7d7ec19f92fd78e2c301a3641a5c75`
SHA256	`09e69bac2fd5023d8ee6fe67e5d072af4b69a7ac4fb172032ec3604c89b30b13`
CRC32	`A69146EA`
ssdeep	`192:7oMMf6DyMrj1grjzR+vnr9ZCspE+TMArk5CH+:7VOpM8z7eMHb`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	eed8df7dc1f0e59b_qutmload.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qutmload.dll
Size	111.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b2fd7b345d3683210a2a465a886ddb9e`
SHA1	`2aa774cbae5c9460945ffb850b990d3159c091f6`
SHA256	`eed8df7dc1f0e59b367cf49aa53c91f05953d0164f2d0900ab8ec738a413e5e1`
CRC32	`AE54370B`
ssdeep	`1536:hk9SnAawF8KdK3VaofKo6Zjhx9WMqjK3ySNjYVBD9GIS0B3xiPa9ly+eMyh:hkMZ58o8j18hShYVBD9GIS0lya99eM+`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	440c4036b4f0bf8a_dsbs.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsbs.dat
Size	375.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bb3c9accb3bae58d013c1deb172c1d75`
SHA1	`7de1fd7e1b4baaa46c91e51c24cb894232ecc950`
SHA256	`440c4036b4f0bf8ac89dfeaf9e5b00d0e3582604c7a588fbc45da8a44175f569`
CRC32	`E776614B`
ssdeep	`6144:0FO9GnpSQfa/aqVjnSVsBO0SEAiBxD/xuC0nAmOjrpuJ32EzvOPRI8mE438dGhHw:0A9GnpSQfa/aqVjnSVsBO0SEAiB1/xuA`
Yara	None matched
VirusTotal	Search for analysis

Name	630ec25361aca83c_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`c3d3ae517f69e19e104d9feca5028f42`
SHA1	`42b9ee20fb53a2e9db131e35073af5c4b9beca34`
SHA256	`630ec25361aca83caaeeb845168afe4378e7a058c27d375a604491e576d69987`
CRC32	`6B8F70B3`
ssdeep	`768:KXHGdBPASgYoH6dzSnq5TmtzG3TpMtaBV7s8lAKYQ7rtAMgZt:LASgRcSqNmtzG39MkbLAUrtNgZt`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	a4a6473251bcfff7_360tscommon64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360TSCommon64.dll
Size	618.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`40e115b8b079bead649964fccab4b2a8`
SHA1	`e2a80de5244ebf4007de8a74cd0003055ce87656`
SHA256	`a4a6473251bcfff7944d7b23f823dfdcb150a7353b1f2a54e20a3e2fbaf03e07`
CRC32	`3EC29AB0`
ssdeep	`12288:hOIrWOhPWUuUreStWUlUm8bgeLneq7aaHHHJhHCqn6l6j9Ym:hprWOhPWUuUreStWUl8vLeq7aKn2+6lq`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	c199773aaf87f664_safemonhlp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\safemonhlp.dll
Size	143.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`78216bbf05616f026d7384a0411f2ede`
SHA1	`a63f43cdd3fb88c3b419aaf7c963a5e46a91e111`
SHA256	`c199773aaf87f664c4d512f1472284f9f8f580a1884d1a9c79ac2ef97bbc2015`
CRC32	`DFC0925E`
ssdeep	`3072:T3ISufRZTs/5VL2vT9zLQ9ewr6EN05AIzITIX:70RzLQVr6otA`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	9ab652199f56149c_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\DsRes.dll
Size	73.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`75d8c648e822466ee0e6e6f188c78ab6`
SHA1	`bbf18898cc1e3f9b3c9b2760e1296a0466e6cd40`
SHA256	`9ab652199f56149cc69886d09a1e2f1e33ba05f6616e6667bff28cedf8666e71`
CRC32	`FC0B86A1`
ssdeep	`1536:12kLlARh7hdRobk5CajXoK5EB51+9weq:16dRoI5CnWI09`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9c81d5e552a09ff6_instantsetup.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\InstantSetup.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`38b0d3f6341c9ad46be72cc90f0b1a8d`
SHA1	`904e6d339601f98583b2a050116ac0412b532013`
SHA256	`9c81d5e552a09ff67bf1e53722d6d4127cc6fcbbe5260e4d9f6fe26a16224536`
CRC32	`7A9510D8`
ssdeep	`24:QlL+xTi6KHygZywLVEx8p//6UEEJO2w42Ny:y+xTMy3OVwAvRO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	8c455f8412aaa8ce_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\dsr.dat
Size	59.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c6013cf18162159cd775728ca1ae477f`
SHA1	`4917f160184f683237dd33ee839d68adeb28ad41`
SHA256	`8c455f8412aaa8cee69bdc70dbc2ccfd60aaaf4cdacd407be69beee08bdd0b50`
CRC32	`7A94D4AB`
ssdeep	`768:nAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAU:RM4A6UAHRHF4aI/`
Yara	None matched
VirusTotal	Search for analysis

Name	870748fa3829e6c6_moduleupdate.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\ModuleUpdate.exe
Size	575.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3abc35d52e7264b8612719147a11d5f7`
SHA1	`a23b8983077f66ec3cc10ca726560b64ef739437`
SHA256	`870748fa3829e6c6fe35f0120f3f2aa7520a7aa0b713c015b2475077a23e13be`
CRC32	`12F3F9F0`
ssdeep	`12288:DoNWXWUvZZa9J+FWY3aGSPO6R9J6qt/2vfo9TqGVH8:DKYuZZwqteY9TqGc`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	bc480d91eec08cbb_yhregd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\yhregd.dll
Size	462.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`617f4de9fb1dbf270c41d5449a1d6b22`
SHA1	`cd6074978efa34c5bf519d2cde2c2a6d2e3fe778`
SHA256	`bc480d91eec08cbb499524f2c17a2931825b75ec2a51746ba73fa3d673993a7f`
CRC32	`CBD11000`
ssdeep	`6144:T0whqOkEw8iuixrFF4Is2n/k0O54FQ6hUgsPRi2nCfa948U+HF+s4e49B:T02q0LifrFDhMjYhUgsPLur+Usy9B`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	bf6c7975331dea59_chrmsafe.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chrmsafe.dat
Size	585.9KB
Processes	3780 (360TS_Setup.exe)
Type	zlib compressed data
MD5	`e305491eb78a972962c5392e06dacf05`
SHA1	`9b6faf49294fd70b7a0fe0c5b70d4c8365d1b844`
SHA256	`bf6c7975331dea59d7c1a44ba07862905e87fdf8768899ba76371c7463386b65`
CRC32	`9F0F3D77`
ssdeep	`3072:/XgGukVPdef/qy+R6+Xmt5GvQ4L42+bYequK4ZXOzEVAbrcTMeS26:Iyvy+R6+Xmt5Gv5L422qWTWcTMeS1`
Yara	None matched
VirusTotal	Search for analysis

Name	2373b9945b751c8a_systemcompact.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\SystemCompact.xml
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`bd71c64d5f1bd7aacee9547c02f90b9b`
SHA1	`f9e6ee8553621f1d117b2cd0cc4b278d37091c7a`
SHA256	`2373b9945b751c8a527e680784277f193643c0a3f6d105a772efac4dd29834fb`
CRC32	`F03BDAF7`
ssdeep	`48:y+xT+w303xOVwCx0yIdIYwvF+2nPlU3nQCmJJ2F2Ny:B/aYVwaNu1Xm0IHy`
Yara	None matched
VirusTotal	Search for analysis

Name	6713d11ad09234b2_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	107.5KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`71b0aacfc9e5d072eed849ea80fd8452`
SHA1	`6da4213b680d1176bd16720fdde92687189aaac9`
SHA256	`6713d11ad09234b2991199cb0ebe3fe09402ed64e62b54c7ca5aa6e75c91ecc7`
CRC32	`A842D551`
ssdeep	`3072:OIgaXp4a6hP9Lh9lMHpxcMmVrF3D9WtwWG2pPHBe:3np4aKP9Qpx69swW7S`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	155163127c51eb29_dsark_win10.cat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsark_win10.cat
Size	11.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d3f8bf82ead0232cfd896a79a58834c7`
SHA1	`60dd4cdc57a2377b2b135042f9ab0c426179a552`
SHA256	`155163127c51eb291a8ce3be7a5bef7f7e3bdf414bc77f75b480eb58da2509f6`
CRC32	`C207DB5E`
ssdeep	`192:vIgUOZtymbMsyKtFWQFgXEYKKWDKHjj3SX01k9z3AKLSOFvl:3FRR+Hj+R9z1/vl`
Yara	None matched
VirusTotal	Search for analysis

Name	a36a4ed1a91fc9a0_360softmgrs.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360SoftMgrS.dll
Size	435.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`116c6b61cb9a9c8544b069e27ebe1d06`
SHA1	`469756700fa2d9c610ef271ddf011edbbee72b8d`
SHA256	`a36a4ed1a91fc9a0db7f6b78e751627eb90fd471bf28e150ec2cd151d5b82daf`
CRC32	`29FC131F`
ssdeep	`12288:+HOH/nbI0od/roaezM6g7CXblJnfCzq/P:+uHvA/kHrlJnKzkP`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	86af283b76825c38_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`3d574dde7d99ab751032a1c0c2f65d33`
SHA1	`15727c845dd91d2f9ea57943a8edb2e75cfacd6a`
SHA256	`86af283b76825c38aac536ed602e6e0a71f524d0cb110963b300b9082851c5f3`
CRC32	`0D7B4F6C`
ssdeep	`24576:MMM9kj60n0SKYbN23D/X1WgtjrY8Y0iWB8B3pGpTbhYG:gQ6rSVN2371WgtjkX0XJ`
Yara	None matched
VirusTotal	Search for analysis

Name	7bba0b3ca86ebea0_gno69z1olo0bemeyxik4ksaw.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\GNo69Z1OlO0bemEyXiK4KsAw.exe
Size	2.0MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3dd583bc804c0af17556ba366b3f9512`
SHA1	`6a1d4e13891948f7cb59df37c718017a6ef9bb89`
SHA256	`7bba0b3ca86ebea058f40fcd36f352a9f4db716a4010a2edf7202af39e1aefef`
CRC32	`57D40C07`
ssdeep	`49152:eqtdPVosJEsz/+VHA58ljrIY+96lJS9bZ:e6d9fJlc7jvedZ`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) mzp_file_format - MZP(Delphi) file format UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	b76103ff3d6faa46_360netctrl.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\360netctrl.dll
Size	382.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`30c9d5470142edf4d69b00aff040f822`
SHA1	`7c21ed33749b58c10ad7e1d95c922244eec62fcf`
SHA256	`b76103ff3d6faa46537d3db213270a086ae3b5b58fe6841b03cd5f9f73c54247`
CRC32	`9CD9ECB1`
ssdeep	`6144:eKxLTrf9skEzpB3oQw4BpQQZ2c3+HI8XurwzbysZcdLvB1gLB:eKxL/fykEzpB3zd//+HI8XurwzW/de`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e5d7f4ad270cd334_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\ssr.dat
Size	50.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`10071337891443defe6393b591081448`
SHA1	`61f51a5367c03bafe04611d22723a5a3871b279f`
SHA256	`e5d7f4ad270cd33411e75d1b3cb0f0485a16d33f5d9e405472174cd0d6c2b149`
CRC32	`2256A899`
ssdeep	`1536:Ge9iqHxGKE8+YsyIda6rcok0qUk4MSmuBMmOpc:Ge9iqfClQ6oLUTBB/`
Yara	None matched
VirusTotal	Search for analysis

Name	c31f87d86dfc2b8b_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`4f7cb0e939b745f0c12832a17cd15e07`
SHA1	`6d85603460e3b100fea53c670bb1567633f6c554`
SHA256	`c31f87d86dfc2b8bdefa115090a4c8ad2916abd60a720bb236500c19e57af069`
CRC32	`35AFBAA8`
ssdeep	`24576:/MMCrgeLMLros23YOpr0y2AipmACB8B3p/4udhHA:WgBQs23xr0y27pmqQ`
Yara	None matched
VirusTotal	Search for analysis

Name	61cc32466438bb3a_360antitrack.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360AntiTrack.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ccb5d0f9f8d96c447c235a76fa8d68db`
SHA1	`06a719748f54c87c2d20cdb108ddfae5622bba0f`
SHA256	`61cc32466438bb3afa457b63fd03f9fd2a4427358787a104e0726b8553bdfe96`
CRC32	`E0784CB1`
ssdeep	`24576:J/a9AxJchxOKJJch+w1NFTD+PMc9Q90sPz6XJ+6AlwnZ:lMIOcmuoWvTAMn0sPWXI/2Z`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	94e65a6aec394e2a_drvmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\drvmon.dat
Size	5.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7936193937f1eb728863fd5799974fb3`
SHA1	`5763759b19248ce13282d64b610bbe7d7a1cb003`
SHA256	`94e65a6aec394e2af767156594c0b2b3e7cb7e2dd7e7e6e7dc7aeb5d3a5d71cd`
CRC32	`AE33DA59`
ssdeep	`96:5mfPsz620WsSxcEOOKqCQqgJZjaO0TdYIt9qheTpvhQpNGJeh:AfPsmnz0XOBoq04OeDt9qhelypVh`
Yara	None matched
VirusTotal	Search for analysis

Name	a76263a6b5c969a0_en-us.pak Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\locales\en-US.pak
Size	39.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ea20f7ef299ca680a72e9163c8ed0093`
SHA1	`f9ef3b9cc76f34f83142e1fcb67bf5c3f9031953`
SHA256	`a76263a6b5c969a0b0a2cc90bdb86d35f3adaddef41884fa84832c24b0940192`
CRC32	`5EDB6AD8`
ssdeep	`768:obq1iD/eqv9gNfDggl+dON+VcCwEpgmA1EmW+BlnkVSI/SBURkSNl:obq1iIfDggl+dO/EpVAppBAS2MURkSD`
Yara	None matched
VirusTotal	Search for analysis

Name	272612ef005c8a83_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\Antiadwa.dll.locale
Size	135.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4c0551da2a0d18a3c9b7f7a2833ecf10`
SHA1	`d96b4139f0814fe4733aab583d14f27a0bd2c8ca`
SHA256	`272612ef005c8a830b1dfdd435b1dd280eda7bf52f8a792fe6e1e4f2b0280381`
CRC32	`642B2969`
ssdeep	`1536:5mvblAch7UzRoMlRELutEB2UTzEkVMx0Vz2z5jgBPOXA:5LzRojxY0Vz2z5j7XA`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8d4db964142a347b_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\cloudsec3.dll.locale
Size	87.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5f644b9b95942d0b2dd87a0b62c44242`
SHA1	`358c9a3ccf3e337b80d6c83a03d4ef0332121b39`
SHA256	`8d4db964142a347b5fcff3f0a5f7e7b7611b01d043c16265beb19e0af3c6bef4`
CRC32	`081BA71A`
ssdeep	`768:uimVVOWFbLpAEl6kh7lqFVH01wwoMRocH22fzBaTT8P0gYagU7SBPO1Tx9K0MeKR:XmvblAch7FhRogkc57SBPoTx9we`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d1b7bc9a125cf0ff_search_file_type.json Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\Utils\search_file_type.json
Size	1.0KB
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`28b79c423115a9f4c707c22b8fd33119`
SHA1	`61d190717506e84ece4bb870562e8b8885a2a9c3`
SHA256	`d1b7bc9a125cf0ffc0996bdedec5e1fa724212fab340103ceb5bc1be3c25e686`
CRC32	`C73EE283`
ssdeep	`24:Oq/yo/XbA3PCZneewP+R0C+tDAwizIh1NSJklV:Opo/rgCZfwbftNizgHU6`
Yara	None matched
VirusTotal	Search for analysis

Name	b065e3e3440e1c83_filemon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\filemon.dat
Size	15.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bfed06980072d6f12d4d1e848be0eb49`
SHA1	`bb5dd7aa1b6e4242b307ea7fabac7bc666a84e3d`
SHA256	`b065e3e3440e1c83d6a4704acddf33e69b111aad51f6d4194d6abc160eccfdc2`
CRC32	`7DA0BE6E`
ssdeep	`384:hhB+Vm5uzkRlTT8wLkAlTlG7xRXXc+4V3/JlyCmyPr:hh4Vmozk3qi+xRHkJ/zyoD`
Yara	None matched
VirusTotal	Search for analysis

Name	4fb3cfbf91bc27e8_360AvFlt64.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\filemon\360AvFlt64.sys
Size	98.2KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`12426837392e278838d1501a5f324398`
SHA1	`3be22df43e2bce3690c92188a76fa33a8a581d69`
SHA256	`4fb3cfbf91bc27e867d8f58081ffd3be361481e2270627825cdfd13eef50ec1d`
CRC32	`F53F252C`
ssdeep	`1536:PPzwDmyyTwGIfCWH0seX90ZbgOMw6t42RszQrtghXiCnBztcHqj4xmVzBGUhP0mD:P0DmsC8anO212A2XiCnVtcHeVGqP0mD`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	2995fa1cac878dba_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	109.0KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`bd5de21b8d405d50a0a5ff6d9fad9193`
SHA1	`44401457af40a3f35ff0544adf5777d02b7ea022`
SHA256	`2995fa1cac878dba3aa813a5530352d2111c96e77e5e16fe92fbdfa37934898e`
CRC32	`3A2C7B8B`
ssdeep	`3072:ilm49A1ChOn7/Quk5g9RZmBgux48lcwwVvGpdDBYCnwbJA:+akgQukmRZKgs48lcwwV+qLJA`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	a2ce3a0fa7d2a833_e0f5c59f9fa661f6f4c50b87fef3a15a Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
Size	893.0B
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	data
MD5	`d4ae187b4574036c2d76b6df8a8c1a30`
SHA1	`b06f409fa14bab33cbaf4a37811b8740b624d9e5`
SHA256	`a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7`
CRC32	`1C31685D`
ssdeep	`24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x`
Yara	None matched
VirusTotal	Search for analysis

Name	2842c9ad2532f94d_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f618559c65544f51d8f5b8a4daab61fe`
SHA1	`3fecd96e2c1955f2a558ce36f5155674b7cd858f`
SHA256	`2842c9ad2532f94d4eee1b452d7e4bbf452aba9c6745f218b3edfbe0de2c33d5`
CRC32	`D165BF83`
ssdeep	`48:PkVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PzZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	7e3e7c5b19d6b1b1_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\DsRes.dll
Size	113.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`22489a4701c2786210c07b4c2b119fd6`
SHA1	`bf65ad84d6c49ceda7e82083e31269fac8564258`
SHA256	`7e3e7c5b19d6b1b146c65d3a82bbc1c475ab511a62f6d9dd7122dc2841443ffc`
CRC32	`547C9D53`
ssdeep	`1536:q2kLlARh7cQRobnB07lT02pLOKwNZiIWWvDhn/yLGaBD9we:qzQRoa7lg2paKKZiIWahnJk9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	a213a922e2b2520f_appdef.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\appdef.dat
Size	2.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`622a9d33a8194b1d25134728843fda67`
SHA1	`2f94ec2e6c4c0a1f3355019f737390aa40f0687f`
SHA256	`a213a922e2b2520f86ee7d5f76c51b72639e7c7c42fa1df26e01741b75da8bb4`
CRC32	`072BC6EC`
ssdeep	`48:Ba4T7guR9qUcizaIBTcg9DXs6cXNUSfVaACJ+giWe3oU4AemkWqz0KF5G:BT7lR4cz5dH41X5CGLjeZle`
Yara	None matched
VirusTotal	Search for analysis

Name	8352d261171be837_360disproc_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360disproc_win10.sys
Size	82.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`4f52319cb75bd98b9c1d7186eb9413bc`
SHA1	`207b0be009e9a0bcbb80f0d147597a19d089a341`
SHA256	`8352d261171be837672e79a6fe313b8666f714d5fbfbdbd234f725a58ff4ec84`
CRC32	`1EC47CAB`
ssdeep	`1536:YL/MfxpOpEIrspt/OX0iNvCvhaMhD1KvLf0/hC00MPUMaGdJbNgowoB5aAk1b9gl:YL/MfzkwI0sRpl1b9AW5eME`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	d2995b2ec2e1da59_smlproxy64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SMLProxy64.exe
Size	249.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`34335c42f2efb00381fbabe5c0ca90ec`
SHA1	`fffa158b86fa1feea5d87745bea2744efe43e09b`
SHA256	`d2995b2ec2e1da5925fb2f6458e7837ce68de8953a131df89cf2d89a08a47f65`
CRC32	`21BE285E`
ssdeep	`6144:Ea0HGWFEqe+UnpsU4CXRXt6GaeWcAMtpp:30mkUnps4Zt6ned`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	d4551ea4ec7002cf_360ave_fp.def Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\360ave_fp.def
Size	1.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`cbeb6da6863879f6b7cdba1d5c1ad378`
SHA1	`5f65281c8c7833bd909b2123881aaf6119f78191`
SHA256	`d4551ea4ec7002cfd44235a9f27fe3c7f99e8d45cdc112bfd26ac55c61ec24bb`
CRC32	`11B33EF7`
ssdeep	`24:1JZwOGNhZIgHIutnu7JndV9VH3dQx+fr04JQH5TbrbtD4XYZHmxNZbcXrpSZJJZB:1sOchSg1gJHA+fr04J85Tbrbl4+m+9eP`
Yara	None matched
VirusTotal	Search for analysis

Name	74765ce78e9ec295_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\TR\SysSweeper.ui.dat
Size	102.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f91dc64b3f90fa8283e4541d338049a8`
SHA1	`d92826b98177d169ab2b1292c6ec80c99c55723c`
SHA256	`74765ce78e9ec2959e11ec4df305bc59e0065c63674468b94318226bd59cc0dd`
CRC32	`C760DC20`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3/gGBD:y01ECQTjvJYwTluz6`
Yara	None matched
VirusTotal	Search for analysis

Name	92bbaf30871bd32d_gpt.ini Submit file
Filepath	C:\Windows\System32\GroupPolicy\gpt.ini
Size	272.0B
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	ASCII text, with CRLF line terminators
MD5	`7d7b2946708e5254b8996d3ae964e0a7`
SHA1	`01e350de5cf78dd1ba5e8686fee884ff0f240e95`
SHA256	`92bbaf30871bd32d6fe34a6df757ad8acd375552918a80c45c935091c9df729e`
CRC32	`71B0380C`
ssdeep	`6:1WsMzYHxbnvEcvg+5Rnn3jGoanMzYHxbnPonn3k:1q0Hxbnt4UaM0HxbnX`
Yara	None matched
VirusTotal	Search for analysis

Name	607064603a0f3336_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\AntiAdwa.dll.locale
Size	149.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5fde8ac2839824b80a68a7d4fbb39188`
SHA1	`153aba9be28b48feb5d1544dfb63e6ac422587c0`
SHA256	`607064603a0f3336959a2ed9ef1029ab9ca4be33e76f6b80ada8540acbe6d9e2`
CRC32	`6FF5FFF6`
ssdeep	`1536:emvblAch7ygRom//cjG4AqAmrMBgvJEBPOSelw:eZgRoDjG4pAmYMJnSelw`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	60df0ae4378ab580_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\appd.dll.locale
Size	24.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d650918e3157a80d228634017b279f15`
SHA1	`2f5f3c539ce23a9a2eba007083107c39b1ab4165`
SHA256	`60df0ae4378ab5807f71ef6a4788d21aed84f87fb4129ccc47a1f529663dcb6f`
CRC32	`D71F62F7`
ssdeep	`768:Z2a2YFc3hQb9KvM8EAoISjNDGXjKFKcMk6:Z2arQhQb9pEFesIre`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	817937cb3e34bef8_360gmoptm.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\360gmoptm.dat
Size	374.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bb4e6253234a6b785675ed349f8424f9`
SHA1	`33238c2a7fbc40d787995dc3517bb54837f27d05`
SHA256	`817937cb3e34bef8467d25f0d8b3158b7b19390da0bc5b3f5301b54557991092`
CRC32	`5C758F19`
ssdeep	`192:JS9akPgURydLSLKPbt9wlKKAPwkGN92462qY4K6D:UzP9ZejtKlROw5N9UK6D`
Yara	None matched
VirusTotal	Search for analysis

Name	3ddc6a07a914cd4f_urlproc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\urlproc.dll
Size	684.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c7215de4d22c002f11c03734a9598b23`
SHA1	`b06fc8875e9136f89299c477341f4ca29937045f`
SHA256	`3ddc6a07a914cd4f66a06b12da14d8f38873ce47706415c5fa990d7ff7289598`
CRC32	`1E6E9820`
ssdeep	`12288:k1rSyRo7iAd+mI0anDXztjzXvTwrHSDY8ORDksyvRTqfhoFFTfJAO9io9TR6ER:Rye+CeY8Ot5uFFTxAs39T0ER`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e2ff76786458c111_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\wd.ini
Size	8.1KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`b7ad245726e39501192ab9c1e31e0985`
SHA1	`1f258e39bb3acf19ea54d942c43a1f91c446b200`
SHA256	`e2ff76786458c111bd57d33c5656eeb9eb300cd7fea85410576f3004d1e59f49`
CRC32	`F40C614A`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlktVWNjD20G4p8y2CWUbJ1J9Wc6tFWbmc:29+DgRgyCXG4p8ypWrFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	86ab9e530c066f49_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8644a59029d3aeebb23ffdac96341009`
SHA1	`fb87bea0612f08d5f0f393dbf1d07d5a6f155080`
SHA256	`86ab9e530c066f494718ce61538a481ad1316dd1ae0ec027acffa3f26bddfca5`
CRC32	`75B34802`
ssdeep	`384:7BRsgImz0QeR3K+h1MeK6jODGPhCvQKvrfpMQ3Pe:NugZ0R9K0MeKgODG0QwZe`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f0fa900623e37b41_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`cec5aef0b79861a6415c05877ee06221`
SHA1	`cba6d13e423fbd3fdc3479ded2caad6166285af1`
SHA256	`f0fa900623e37b41e0fad98fe3c79ff22928c809143bbff2bf30ddb549c2a0e0`
CRC32	`3A864A30`
ssdeep	`48:PcVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PLZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	f0902185c36e5c71_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\360SPTool.exe.locale
Size	20.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`63bfbb289632a1e8b98fb6464a83a517`
SHA1	`642b6b5806cf25701f03389ad74574eebfed0087`
SHA256	`f0902185c36e5c7166d066c10d91359fd31208ebb25ee5340f77d38359ebf473`
CRC32	`D672F1B8`
ssdeep	`384:7JGZuPMyeFR8qI7nOSeMj7tyj3Y5JNNzFwhhi:gZuUy1h3h43i3wh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	50d6affba667f447_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\filemgr.dll.locale
Size	22.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9fb94f810ae64f5bbfc031ae5e89b895`
SHA1	`2807124c7e51fda98d6909c2a27c5b125bcef19c`
SHA256	`50d6affba667f447a8a04b0616e4c7e6c3528e3a2885049ae17edc721c5b962a`
CRC32	`14F10DFA`
ssdeep	`384:7vp45+9llEEtX07nYPLIeR3KJ1MLU+zDGPhC/Uov05MQ3PKU:jSEtXcE9KvMLU+zDG4UorU`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6f95cb1c81cadc16_medalwall_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\MedalWall\MedalWall_theme.ui
Size	639.7KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`cb68bcd6aba9667c8ca6a874461c2925`
SHA1	`83352a51f44ee53839094942ed926dc0ea449efb`
SHA256	`6f95cb1c81cadc16e4310a5c713137435ff5346ea7a33c9ac47ab85fba332837`
CRC32	`41636CCD`
ssdeep	`12288:oe8Gs0qeXBgs1pjRxSmgiWGh6LYoQVsEmdInKaId7EmdS9cGK:32WxLcmgyMMoQVsndInKznd3`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	09f196aef97dd196_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\DsRes64.dll
Size	78.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b922913891078ee52f02a1affadacc1a`
SHA1	`b934e180d672de3cf85b51e318b7d2778e33a4f1`
SHA256	`09f196aef97dd1968e7eb779438bf5382119a8bf47c57f7fcfda378cb902d7a6`
CRC32	`293E1F4A`
ssdeep	`1536:aWPrlAMh74pKFRo8QqR7RLJOnmwAI8s6C5T/3WqjEv7v1BhBI0:alpKFRo8QqR7RVOm66C5D3WSEv7v`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	37b16e32e737bdd1_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`c35843a2bc3f6103a16154b9d2bb4748`
SHA1	`0327b9d3b66efbc964fa20793abbd5553fea8bbb`
SHA256	`37b16e32e737bdd1b49dcc5f3f6e477cd3ba8f6f99487fe0d7ef0e1ed75207b3`
CRC32	`663E1993`
ssdeep	`48:r+uLTlVf7rs4humKaBrWP6G1yY7IT3q9HeB9S:r3LTlVf7rsiuwo6YyY7KqZc9S`
Yara	None matched
VirusTotal	Search for analysis

Name	677f393462e24fb6_firstz.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000285001\FirstZ.exe
Size	2.5MB
Processes	2216 (Newoff.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`ffada57f998ed6a72b6ba2f072d2690a`
SHA1	`6857b5f0c40a1cdb0411eb34aa9fe5029bcdb84f`
SHA256	`677f393462e24fb6dba1a47b39e674f485450f91deee6076ccbad9fd5e05bd12`
CRC32	`75A335F8`
ssdeep	`49152:UjBP3/qGrdNJ8VZFhY++Yk/4aLq8wH7mm6qJsSRRjyl:aBPvfrAZF28k/RLbwH7mvcRRjy`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	95735196e09a5912_360av_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360AV\360AV_theme.ui
Size	294.4KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`38871e866871efff3f2a6bba63a8abd6`
SHA1	`376e1db821b747677ff12eca7ddddc97e133d270`
SHA256	`95735196e09a5912e8593fa94eb775b2c85ef7b85884d306d725c01112c27653`
CRC32	`8885F153`
ssdeep	`3072:XJzALaQglzQ14KJCEtArc8BNfwn3C7DvpglEN0fWxOHfDZAa+k33qZr:5e1KFjTZr`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	6de3eeb6fc048eac_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\Safemon.dll.locale
Size	50.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`97c001dcf5972a9bf5f889b4cb9c20d7`
SHA1	`0e29aa7beda72e5a2d14513ecba05ae1c0e9f55e`
SHA256	`6de3eeb6fc048eace57f847d0f95ac7b6eb5a464d4b57857022cf68ac1546da1`
CRC32	`6D680C70`
ssdeep	`768:bCG11xWF7Lp/El6Eh7lKlX013+6JW75gi5BALjorknK:GGa7l/8h73lJW1gi5BALkrknK`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9ac609b76382df35_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\art.dat
Size	38.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`e8a32f1bbcf2e12667ad6815f2d68789`
SHA1	`35c3e43f17a3e2bb7a701adc8e698b374821a629`
SHA256	`9ac609b76382df35952605fbbb808aada76446d2d6d1e70c49a7679b65505b32`
CRC32	`15A89CD0`
ssdeep	`384:ulHlwhUgl6E77ls7N1g4Q2zmWfh8BtgfOVkPIFyfUED9ySnSgSsDkaIteHzP2PGK:ukmg3I1g4Q2zmWfh8wcF`
Yara	None matched
VirusTotal	Search for analysis

Name	2e0a56efe0d518bb_traceclean.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\TraceClean.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`943ce53e4bf37dbbbf4d1f3b779c55e0`
SHA1	`e0b6461b2270f7f3e6efc8a101d91ccb78a0cfe7`
SHA256	`2e0a56efe0d518bb871efd4a37188ee83ced5d5d320bddbc72f4da0b6848d580`
CRC32	`41EF536E`
ssdeep	`24576:RHTI171IO1q8XwZTCT0X4L3ZQbGDJM+6e/r2w4:chIWqTqubGDBt/rj4`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3ac573a06bb12595_appmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\appmon.dat
Size	28.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ca20a9e36f1eaea010bf836d62754ea2`
SHA1	`c1d378385ea2e951ed416a4399c45fc272d17f45`
SHA256	`3ac573a06bb12595b0f1fdd1f8944753eaaf6aabe775148074c2e86273f87239`
CRC32	`E9E1DB79`
ssdeep	`768:W7VeyPvvs7UfmF/KEmw9/YFscFi0Zio7tLESauTMMj9:WUofmFJmbtFiw7auL9`
Yara	None matched
VirusTotal	Search for analysis

Name	aa1cfd7f3cb5436a_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\Sxin64.dll.locale
Size	47.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`e501b44bc1edc29bba33cf834ca65faf`
SHA1	`0f6e6591f947bfff7a1fa558b1a73f016855be4f`
SHA256	`aa1cfd7f3cb5436af5122a70f75106f1a4f6a039c38aae17fc8b997530674228`
CRC32	`BB58DA33`
ssdeep	`768:HXHGdBPASgYoH6dzSnq5TmtzG3TpMta2VPJ8lAobB+gDrtEw8Z9:CASgRcSqNmtzG39MkEOAGB+gDrtl8Z9`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	337031d5c6218395_C__Users_test22_Pictures_360TS_Setup.exe.trt Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\C__Users_test22_Pictures_360TS_Setup.exe.trt
Size	15.7KB
Processes	3020 (None)
Type	data
MD5	`ca83eacafa12c49b8e93a04b36ebabe9`
SHA1	`9b3425dc59a20e9e71b82ba690d4b69e9e6de0ad`
SHA256	`337031d5c621839531938b5ed753fc0a313f1bacb019434f10d132311eee4fbe`
CRC32	`11967021`
ssdeep	`384:0qU6x2s6co7/BV0Cf7bjMAbaBjU3CUNWOhb5d9OZEZRgzxK:0IXBm/v47BjnUAOhNdoZldK`
Yara	None matched
VirusTotal	Search for analysis

Name	edf443a3751d042f_sbmon.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\sbmon.dll
Size	366.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c0805da6b17d760418fd2fd031880934`
SHA1	`f9cf240f7bd4dbd31bc57913ab6517f0dc17d7a5`
SHA256	`edf443a3751d042fe16b8b11b484357a1b4702310bb50fb7aba9d68725803612`
CRC32	`D2751FFF`
ssdeep	`6144:DkIXyR2wEEnL/p+mlP9L/yxaYLVnb/y5Fro9TBbxlgl5Nw:DXk9FnL/omB9L/iaYLVb/qFro9TivNw`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c35150e66cbc23aa_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\udisk.locale
Size	516.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`604a209087951685a2827cc455c4ae68`
SHA1	`4357573a052848c4820ae06b040bdd403e60cb36`
SHA256	`c35150e66cbc23aa88bb2ba3878b8fd4ceb9ea51749497631862cd0ca3aa69f4`
CRC32	`CBD34F22`
ssdeep	`12:Q++ubxj5Ovb0GQMqKyglRfdThR4g5TgEczDcE9SxE9soh:Q++uZ5Y2glR1FTcDtSYsoh`
Yara	None matched
VirusTotal	Search for analysis

Name	1f319d71b2a51621_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\DsRes64.dll
Size	109.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`273c1645b790459b4dbf83fb9b2fab2f`
SHA1	`3ab8d81ca2516a2838e43878d3bb3162e90b537a`
SHA256	`1f319d71b2a51621c4bdefa1e5a4962bee04545a28e691c61b7a8eac24fd67a1`
CRC32	`1F682631`
ssdeep	`3072:rlpKFRooWJkkynEEEPi/eBPnRjvxPCm8utT/n/aVsOZFJNFBMfMY3li9myImXLMm:5Ej2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	92669de9efc8da3f_drvmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\drvmon.dat
Size	5.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`13d577e1fa2c3a42bd41cdfc3fe2da18`
SHA1	`7764ee8668f337c8bc618e897cf115787d45f884`
SHA256	`92669de9efc8da3fee08959d20e8522e77e081082cbc6184d11fbc2548e49b70`
CRC32	`1DF32B07`
ssdeep	`96:oaqbJElHxaTDuJ1uykXF9CCpqbbG6epsaBsfm306XLgtsEvTm:3qbiaPS1uyMfCCpqb/DaBsfm3LUZrm`
Yara	None matched
VirusTotal	Search for analysis

Name	9100859e5959f4a1_miniui.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\MiniUI.dll
Size	893.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`db2b7a54df401e07d76e6481755fd79b`
SHA1	`99a978cb17a6935185c36279098f544d22fa287f`
SHA256	`9100859e5959f4a130bc7df3367d87df3e6b208b0410010d99498bf7032f5226`
CRC32	`8D10E6FB`
ssdeep	`24576:XMBX4JiaFHndgAYlDdXqXhD7O8fJ/T0ekxB:Xk6Z5dgASRXm7OI9TVkxB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	5d90f8287ad1ccbc_360Box_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360Box_old.sys
Size	216.6KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`df38750f3f3e205e8795724d970189ea`
SHA1	`442952863db2e6466ec9ca116b1ce85876100a89`
SHA256	`5d90f8287ad1ccbc6e6c3c656b1a84467c50801590d8f730c10b0d106532294c`
CRC32	`0BF9E6CD`
ssdeep	`6144:+BfFCMIjeOKdZ1dTwwdLmmfXo7gGEsW39rB:+BfFdKepdrbKP7Xy9rB`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	07b44f39916b517e_360netcfg.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\360netcfg.exe
Size	215.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`25ed596561d66e0463824f12444ab3f3`
SHA1	`ed892ce2bddd96ebb03dbc4bae4394aad061d6a7`
SHA256	`07b44f39916b517e1af296b10b7efdcd3ba9196e877323be2161a5dab3162ac4`
CRC32	`CC65EFA8`
ssdeep	`6144:l6Vsw/g36H94PLULKUcmZnc7JesNK+XFzYDT:esw/g36HePQL9cmZi4FDT`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ad8d79fa85b27055_browseringprotection.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\BrowseringProtection.exe
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`0e19576ed0876d7c2c4d4eb941b0be43`
SHA1	`ae280a04a0c2640f9aab454c92c3c68f07dca27e`
SHA256	`ad8d79fa85b270557b486eb7cbc6cfc84498ae4d8573b2b19abdb0956c231a9c`
CRC32	`CAF6C742`
ssdeep	`24576:CbFZjXfcm0ljOguShwQ6n5P5YkRdLv+RgSqDPaOx+VE:CbFW2g56n4kj+RVVOUVE`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d5f222d8d0513a94_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5b8a6305bd03e499dddfcb39acbc28e6`
SHA1	`f9e03e882553f92d1ff446fc06d324b7f816f61f`
SHA256	`d5f222d8d0513a9485ac3a6e924b84876924f441941ef37ca1f86a50781fea6d`
CRC32	`1F250A38`
ssdeep	`384:7PmlSBeR3K+h1MeK6ja3DGPhC0GCov05MQ3:ql/9K0MeKguDGXo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e9a79ebf0049f940_dsurls.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\dsurls.dat
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`92557779bf8b94bc5f575dd8dbba9503`
SHA1	`e3f5f0be37f0fb763614874704c487c895239592`
SHA256	`e9a79ebf0049f940e2ba767f517a89efdf722d197e992b4a3e1316a57ae91ba0`
CRC32	`4A8A3B53`
ssdeep	`24:GV+kBGnSWNvseoWiO70N+AJ1ReA5qCbXgJuII4vOvacP:IJuZvseXXE16pvOycP`
Yara	None matched
VirusTotal	Search for analysis

Name	185ad85ab85be517_syscleanerui.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\SysCleanerUI.exe
Size	902.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`a7e3cb500ee56b376d40de18d31dacbf`
SHA1	`bc89bad1e8b491c904afcb55aa695e39cefdaf58`
SHA256	`185ad85ab85be5175bb9a8bfbdb969d8d93897561058c1f065938fc37004f8a8`
CRC32	`F8D8D90F`
ssdeep	`24576:2Yb8j7Sx5XctS7CaZ6H3il8eg4wysPeqH4N/zfkRp5G:nnstSWaZ6XiKSwysPelN/k5G`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7d9c0c4d88618bdd_natives_blob.bin Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\natives_blob.bin
Size	402.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`8f4d6515f4d321313a39a659c3c5ff01`
SHA1	`f4c95f1abd24c715a3dd4b3e4c9cff5decda7250`
SHA256	`7d9c0c4d88618bdd16bb0681fdec1dd736e2ed1141ae527a27b22fb93f27848f`
CRC32	`5AC01CCF`
ssdeep	`12288:ln3Cj7CQaMiyMzQ77Ua7Zm6ap4avfyM3G:lnk7CQWfy9`
Yara	None matched
VirusTotal	Search for analysis

Name	f6e07024b3b9785a_cloudcom2.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\cloudcom2.dll
Size	1.5MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a847c7e47eaffbc0f5dbfd5c60a11dd6`
SHA1	`abb96149cde600b9d4793b3fb7b94ee9d428775c`
SHA256	`f6e07024b3b9785a39145543cf793aa507f9b1c27b10d347bbc0e143bdf03846`
CRC32	`006EAFF0`
ssdeep	`24576:3MammxiwxUfnubILhJ59Z3Y2eSnPCHzlOlOvuvj799W1uvhEw9Ta4JqAhRvndcON:3TmmKiACHUS8t9TvhxTa4J7hRvndcOJ7`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	769549522693fd23_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\libvi.dat
Size	792.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`2b45b876d082ae05133588688b93d2fc`
SHA1	`7a9e2d9dddb88b7dc7568ff1da03cab24ccd9ce9`
SHA256	`769549522693fd235dbae7f245cad07980f2f9f8fa1e93365a5113d00a25e59b`
CRC32	`00B27E58`
ssdeep	`12288:x/nCExkRpiJhfKNJhvVdTTOfPd/mSuWNs7/wQH9jX:RCExkRgJhfKNJVHMPJmSuWA/wi`
Yara	None matched
VirusTotal	Search for analysis

Name	144fb28931e64d1b_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\dsr.dat
Size	58.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`24c596e28e6c10c7bf234a36fe6e3b90`
SHA1	`9ecae6107368153cd3c61b9f2b8eb9ed0939abee`
SHA256	`144fb28931e64d1b631b53202703d2c25665fe47f18904bf03998ce0b930d18f`
CRC32	`5D971ED8`
ssdeep	`768:nAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAS:RM4A6UAHRHF4aI7`
Yara	None matched
VirusTotal	Search for analysis

Name	c28de1802bdbcf51_lumma1234.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000006001\lumma1234.exe
Size	518.0KB
Processes	2388 (axplont.exe)
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`c4ffab152141150528716daa608d5b92`
SHA1	`a48d3aecc0e986b6c4369b9d4cfffb08b53aed89`
SHA256	`c28de1802bdbcf51c88cd1a4ac5c1decb0558fa213d83833cf5dbd990b9ae475`
CRC32	`0B65F2BA`
ssdeep	`12288:U/MDmKNcPcu1DY2Qdp4N7EPlXWc/LN8BRpxOv9q8:3mJadAEdXWELNaDxOE`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d3972848f049357f_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ef81ee8d0d3576979d8601dea4701034`
SHA1	`f8e279b8b6801f800066233b462a265dc3e97df6`
SHA256	`d3972848f049357fca4f33cb1864191fc47f461adc3ed314574307cbaeba3f27`
CRC32	`D36A9EB1`
ssdeep	`384:7wB600ZGYbI7nOSeM2kPj9C3A8nQJ+MQ3HC:0B600ZYKkL98AnJ8C`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e85427a24d0e2911_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\bp.dat
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d10ec088511d8ef60c5aff88a3c0c1e1`
SHA1	`7349e02311e6fa524e075bd900524a20e6be085b`
SHA256	`e85427a24d0e291190a1d4b296caf7cb22c643857c38affb538ed31bc4ff487b`
CRC32	`E49829D8`
ssdeep	`48:P6/5VGd70FaBp1Y/Y4+2m19zebXIBTXeQHRPtz:Pi5C7v/EYkm19zgkbeQHRPtz`
Yara	None matched
VirusTotal	Search for analysis

Name	f5c10e8220e5ea09_dailynews.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DailyNews.xml
Size	910.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`81dca1bb6824617be6f8ea016e72e3e6`
SHA1	`e7953f8cf3a740a8772448823894b77e58bfbb77`
SHA256	`f5c10e8220e5ea0912a894b00524c119d56ad7a973b0ca1282502ba0eab4888d`
CRC32	`21C82FCA`
ssdeep	`24:QlL+xTiv2FtFlZywLVExYpysEQIO2w42Ny:y+xTFFtF2OVwpsqO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	2359205d5f6e7b97_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\DsRes64.dll
Size	105.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0be86a32d90c1fe19e9cc89a51c49944`
SHA1	`795c605e04ece506bf1f3f7404b5761207f3c20f`
SHA256	`2359205d5f6e7b976464bf5a745b70b7845ace71373207e3070b01e9a16e81cf`
CRC32	`901FC446`
ssdeep	`1536:RWPrlAMh74pQFRoIqsw1hJrE4MSye3IECWjVBV0d:RlpQFRoIqsw1he4MSsW`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0552112a0bdb7991_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\wd.ini
Size	8.1KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`e577c61b9cb751d805caf1b71b7caf12`
SHA1	`fda4cbc74952f0237513adf15dc684c36f01151a`
SHA256	`0552112a0bdb79919bb46beb7e133a0a109b283248206c6b5efc77a265625845`
CRC32	`5341D518`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVl+AkPWKjLtapG4E8YQ7WTbJ1J9W66DFWbmc:29+DgRguDgG4E8YZWTFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	2aab2ca39749b218_swizzzz.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000009001\swizzzz.exe
Size	778.8KB
Processes	2388 (axplont.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`05b11e7b711b4aaa512029ffcb529b5a`
SHA1	`a8074cf8a13f21617632951e008cdfdace73bb83`
SHA256	`2aab2ca39749b21877d1c52526009f9f5d251d934205e9f671a9e84cecd55afa`
CRC32	`3FC09DF6`
ssdeep	`24576:IOuNAyNC+m6+Xs9Fp1RtKmYmy6Mmp78eR/VRgAiHIXOTR1/6:IOgCg+Xs9FpztKmYc78O9MIXq1/6`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	77faaf6c67ab95db_360hvm64.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360hvm64.sys
Size	331.8KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`37ef2ad85bca66cf21af216ab4e35707`
SHA1	`1569cb84354ed47f97844833807ed5a07dc5df92`
SHA256	`77faaf6c67ab95db1615275410d2dd611208fce0e80771bd009cf0f8f98cf74e`
CRC32	`734DAC79`
ssdeep	`6144:LW5PXePt2rYuzV+Bu6Te2+YhRohOsp3Kc:C5POPYoB1Te/`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3b5837689b433907_360netd.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\360netd.dat
Size	43.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d89ff5c92b29c77500f96b9490ea8367`
SHA1	`08dd1a3231f2d6396ba73c2c4438390d748ac098`
SHA256	`3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a`
CRC32	`33CA4A6D`
ssdeep	`768:xW0IjxiegKAqfTtW7mYcQhirhlimzWk+MUKfiZw+5xpVRTtST1vUX:kDjsyt6mY5hirhlbzWk+JVZXxvR5SVa`
Yara	None matched
VirusTotal	Search for analysis

Name	83cfe76c1f67390f_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`46ff9dad86f284b182a80ab2d2873dcc`
SHA1	`78c6c607b61e88520c8b2f9e54ec564806ef6855`
SHA256	`83cfe76c1f67390f3e6ec7d98b56f95c3abe88e7bdf440df7aea73623b235e58`
CRC32	`4E145E7F`
ssdeep	`384:7xItGztDGtutI7nOSeM1EjeZA8nQJ+MQ3Ss:9ItiDGtXJaeZAnJJs`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	66152d1316b674a9_360antihacker64.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360AntiHacker64.sys
Size	186.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`0e93f09b4e51c6a8a66cd1c9ceeb8ff3`
SHA1	`b868b7f8fd150cdd3b5d569738154e62350aef5c`
SHA256	`66152d1316b674a95ee0bd63844e6acb5a709a177934814aede80166bf2bc204`
CRC32	`69E90F71`
ssdeep	`3072:XEcVlx3NVmDYxP9ApGPVMGKraCv5ZE+ZCiygh+1XKNktV9NgeMJ:UOlx98YxP9A4dDiZJZC2ulj9N2`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	8ac85393f4a48136_smllauncher64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SMLLauncher64.dll
Size	229.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`a12eb83908bfa8ee4986cb2e83821309`
SHA1	`2b324ee7795e92c393f6986db53d1cd288b51037`
SHA256	`8ac85393f4a48136f6cdaab2f34cd2080bccc1fb71a0cce9d37bbdbcbfa7de76`
CRC32	`ED2FFEAD`
ssdeep	`6144:Yefple/yMkOVOYoA/F+K5EKR3e3scLuFZPE:YkklVOYzt+KR9XZs`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	8e6d8b5a004c8f21_fileosn.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000005001\fileosn.exe
Size	304.0KB
Processes	2388 (axplont.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`84bf36993bdd61d216e83fe391fcc7fd`
SHA1	`e023212e847a54328aaea05fbe41eb4828855ce6`
SHA256	`8e6d8b5a004c8f21bee1bbe4213c6d78cf80e439b38f587e963e9bb4569aaffa`
CRC32	`806BB155`
ssdeep	`3072:aq6EgY6igrUjXwwRwPfhlogDHGjZyTAZtAsiLVcZqf7D34leqiOLibBOO:ZqY6i7wPnpiZyTAfAPVcZqf7DIvL`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) RedLine_Stealer_b_Zero - RedLine stealer Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check detect_Redline_Stealer_V2 - (no description)
VirusTotal	Search for analysis

Name	ae77c394b3de5eaa_cuconfig.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\cuconfig.dat
Size	2.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7e0d95e7a59e4533fdf1221aaece2dd5`
SHA1	`03ad76160b7e586cf94cb4997852a724f027f0a8`
SHA256	`ae77c394b3de5eaa2b505ffa5bebe2ff5a3d3e652648310f7752f4f86c971add`
CRC32	`C2985574`
ssdeep	`6:ZtKlpjWjI2EUik2EUFvVKvZFfFAlF5WXGsFP/FCFRll8fFbll8SfFzkA7iFE:ZtKbhPkhGyy5WXbPNGRL8tbL8AHSE`
Yara	None matched
VirusTotal	Search for analysis

Name	f511a0eea52cb982_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\LibSDI.dat
Size	113.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`552dbf3af7b5615f2c7f5a0c64e03ca3`
SHA1	`a6773abc443d8ce49c88c1554bd7a4196189c614`
SHA256	`f511a0eea52cb982c60ec2a8758007a8d83f8a36bb4b23b27e320cd9441862f2`
CRC32	`AD4E53BA`
ssdeep	`3072:jHUDSlMiffBSae95WGeDZk1FNtQL5HDrL9Qbd:jHUDixp/eLW1MLtWjn98d`
Yara	None matched
VirusTotal	Search for analysis

Name	b6b073358e210644_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\filemgr.dll.locale
Size	19.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`36dba6de5f96094f7dd9be48f0809e4d`
SHA1	`56f3c5ee39fc2f9289f6f5367f9040e110aa50ac`
SHA256	`b6b073358e210644430469a3b3b4795ae76483319d31fb085880eba6c2a3fb03`
CRC32	`91A86522`
ssdeep	`384:7WWpuUElfXlenYPLIeR3KJ1MG/zqDGPhCWdov05MQ3Qh:ruUElPleE9KvMG/zqDGddofh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c942eea142b038d3_repair.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Repair.exe
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`edaf4e0f17f44b8ac66b42c41573a297`
SHA1	`ee10cbca23fb3cb5cc8319303d72a6dd48024fd4`
SHA256	`c942eea142b038d36a352015ce5346cdd4772430d014821962f30ef6b4dd9a8c`
CRC32	`D0B023A1`
ssdeep	`24576:kr2P4ULguiQ62MChZ9C1zj1SqdAGFQZIxpK545UJoeIo:zMCNazjYq+ZI2a5UJoeD`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) CAB_file_format - CAB archive file UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	bc5e9ceb7fd09b6c_360skinview.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360SkinView.exe
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`61d9783b5a1e4b01a737d4a2e4e4c776`
SHA1	`cb63dfa6abef40352b6172e410ced514de648669`
SHA256	`bc5e9ceb7fd09b6c4b945bc8d4ada428f2cf5d9311180bfdac7afd7ad480e7b4`
CRC32	`7AA80077`
ssdeep	`12288:UZTETjuQkaRUHEMuDZ+Haby+/RjnbpEw1P4YZgepD/H27+Bl2e5bjYcqn6MgWw6G:vjukpdpEaAYbpD/27Ul2afYc+6Mgyc9V`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f273b3b517846845_regmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\regmon.dat
Size	30.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b2b0a84326df25c0fbc5fa8a9b64a81b`
SHA1	`5d81bbc4a0c6f409e4bceeeb0594451295a63d85`
SHA256	`f273b3b5178468451b0f98af97cf43993feffad51b95b3a6c9c2ca5d524fbd41`
CRC32	`92FB860C`
ssdeep	`768:UFesxaRE6KZjbrrxDAw/5E92RBKeSvyLIcdbYN8/23p2xzxczV76k:ixa4jtDh/5E92IyLJb3qdzVOk`
Yara	None matched
VirusTotal	Search for analysis

Name	efd7b0e32e125209_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`015d57ea3ee95b22893b44d8d905bc07`
SHA1	`436a16dc438add3aa096099b4d404e26a5724ad9`
SHA256	`efd7b0e32e125209906f275f1d8f60df36427557e2afa2a863199941cff99394`
CRC32	`430A1E59`
ssdeep	`384:vAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJhs5p6I6Vukh6lXNTQ:XbSj0SbDQoYZlDT9cPJQ6I6o4mNc`
Yara	None matched
VirusTotal	Search for analysis

Name	7f74e76e318acfcb_360netmon_50.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netdrv\50\360netmon_50.sys
Size	344.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`61132d719d082de8d27254442e63556b`
SHA1	`8d88370d17e0e068502d219c854ee5151cd6231f`
SHA256	`7f74e76e318acfcb3d26ac014d92db39c2d130384f6c1214c373d24d0f4a68d1`
CRC32	`E3570AF1`
ssdeep	`768:rwQgnK5XD1eK1slb5V5OgWuXM0vtJzkPoWgU0gYNjEqjYA3whFW:IpuGb5VFjDNWoWgwcQMpghs`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	06892435869aa59f_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\yhregd.dll.locale
Size	18.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b0f6c73cc6b9c5fbbe5a7b63e2e9704e`
SHA1	`8dcbb262b5158330c7944ee7d46f11e159063c2f`
SHA256	`06892435869aa59f94f995e66bd142d13cf3243104418a6096fd0927c2b1cf0c`
CRC32	`CA7A4DA0`
ssdeep	`384:7VYvBEUOnYPLIeR3KJ1M7xw/bDGPhCCTiQKvrfpMQ3Md1:uvBEjE9KvM7S/bDG7iQwad1`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	919ae827ff59fcbe_newoff.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000031001\Newoff.exe
Size	418.5KB
Processes	2388 (axplont.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`0099a99f5ffb3c3ae78af0084136fab3`
SHA1	`0205a065728a9ec1133e8a372b1e3864df776e8c`
SHA256	`919ae827ff59fcbe3dbaea9e62855a4d27690818189f696cfb5916a88c823226`
CRC32	`A6900DC7`
ssdeep	`12288:5noAx+FnmuQhimtPURimLqevmipum+K4Y:5+FnmuGtpMLnLYY`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2e6979034cd8e70d_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\ssr.dat
Size	53.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`5d430463656af6e4667ca7735ad69b96`
SHA1	`01d783f6f8be36904204bc047bb9ab71a759fe3c`
SHA256	`2e6979034cd8e70dbed256164dbeda0e2ab1266e33e1b97d0b736d8e3571b93e`
CRC32	`E75A5F78`
ssdeep	`1536:bm+IaxVrtJLCXycT3RypYh+d9MfMcx+AvsudV2R:hIuVrtuzYp3nMpBHA`
Yara	None matched
VirusTotal	Search for analysis

Name	e4ed7bea026f0e0f_360camera.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Camera.sys
Size	42.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`abfe625ab51ea7ea4ec69e555cb52bf3`
SHA1	`7d44b348f7ff05b60f6a7feeed6461ebe01c2c45`
SHA256	`e4ed7bea026f0e0f4cada4cf44ea711b9bc9220b807405549c4867722ed06596`
CRC32	`A658989D`
ssdeep	`384:ZOEOVxhmxCxmeE57Ej+tM1EuZwtK784XnTdgi1hE0989WvVo/BClcNI70HVqUHeS:oVxhRsvI1En4Tz8YVoZ4Q1LLA3+ou`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	1e811932a32bffb0_clsid.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\clsid.dat
Size	21.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4171897c0507e6f29792a7ac0a2e3462`
SHA1	`755376b6934c818b18447d26c636a73e47c37056`
SHA256	`1e811932a32bffb0e7c4348efb0fcf0983df878d9d5ce1d0c48bca54370020d1`
CRC32	`91160001`
ssdeep	`96:ToZgaocrgOboksgk0kxoGUgAuoKXgKXo3gAoCTg+f:8u1cMOEkLk0kmUAhdpQHC0U`
Yara	None matched
VirusTotal	Search for analysis

Name	ee1aa27b15ec4046_360evtmgr_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360EvtMgr\360EvtMgr_theme.ui
Size	75.3KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`0463311d64de607dee248c9b24c75bb6`
SHA1	`1ca851a30ad439f42966ec1ee9bb25b79f421bff`
SHA256	`ee1aa27b15ec4046478f851350463c5d6fe28aac7c53ce3176f1e1df18ea8128`
CRC32	`86936418`
ssdeep	`768:j6HW1gS78TJ1kmnYDiTvaQ7Dnzmz+rbVHLzdlQ5KD4FVLMa6i:LNUjzUWaQ7mz3`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	16295273a233dbc4_360bsmon.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360bsmon.tpi
Size	286.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`39667ad8ca608535c7854cfc82380d23`
SHA1	`414f80c7796f80e4643efb7ba949ce51e6ade63e`
SHA256	`16295273a233dbc448687a970cc9df27e55c943c637ca0e5903f222816ab8877`
CRC32	`F587E829`
ssdeep	`6144:4cQOr6gMDyy1U/U/JBYnJgvHLRzINuqpEwESlz8TBJtcA7QTlHBM9q:Br6l1U/UN90uqpErW8TrR7X9q`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ff625b6678074125_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`12aeb8e96c186ea48f829b5d93b226d7`
SHA1	`108d12f998392b9d6bf0f8ee0c32026b160c7e9c`
SHA256	`ff625b6678074125e843583002b81decff263501fc29d8b8ff2a13e60bc088e3`
CRC32	`A3A14246`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsug6PCabR:r5u5/+mMks5qTp1mNqce9Oo96aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	f3fb6aede226a977_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`a78b3273b8cad0cda7b1d327ee3fbf4b`
SHA1	`e5b0a2367fd046c18580803e3397c4adbded7f42`
SHA256	`f3fb6aede226a9773c0b8349e7548fecedbe64eb316e69abc78b2b0976224c65`
CRC32	`D142B52A`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsZg6PCabR:r5u5/+mMks5qTp1mNqce9Ooa6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	c9f3f2363ada2ca3_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	10.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`86480218b103a3471e0322adbf15f50d`
SHA1	`5d752666da8626c27a1edc01617560aac9d59fd1`
SHA256	`c9f3f2363ada2ca3957c227b5ef26dcb172457d0803f5ad8bc8b724b0749af9e`
CRC32	`8B8E9FE5`
ssdeep	`192:7g0YYdxyMrj6Pu7CrjzR+vnr9ZCspE+TMor63dXMh:7gUdQMCPHz7eMRtXi`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d7a46b46b3fa7441_360gameidentify.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\360GameIdentify.dll
Size	237.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`667213b8f9afedc4d763c8a51829dab8`
SHA1	`049deda057944d1e209ee15710854754c23bfa4a`
SHA256	`d7a46b46b3fa7441ef9873f42c93d500809b5e8bdb10c739aa98cab389a00e57`
CRC32	`33BC4043`
ssdeep	`3072:n/Owr72s/KiZNTXnC6F7A1cSQnL/pPp59W6DY2UDGWf+37P/go9TBfMy4kmab5SF:n//7lhF7schPbW60HDGWXo9TBUy9gF`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	dcfedf6e12b086ac_dsmain.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsmain.exe
Size	478.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f2b85341a241bc9a8249f467ed3b6473`
SHA1	`80f60bf52f0c35ccd975d8cb499b07f66801d2cd`
SHA256	`dcfedf6e12b086ac39022d75d3cbd9e1cc0000536b763a4ccb9ef7b20020ddcf`
CRC32	`826AE95C`
ssdeep	`12288:zZvV1xWNBlphQ3rwoGXDsCmysPkq24SNT1f04pBESKE9A:R3x+lpS7xEmysPkjvT1frrKE9A`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	649ca00ba71a5f72_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`045e32511a0e333477ffc2361c3b589b`
SHA1	`47eeacaa6381ba81e90a78dcf67c327b9f17814f`
SHA256	`649ca00ba71a5f725ce94baaa4996a8c202103b1821a3529e84c20a8d882d35f`
CRC32	`A937ADE1`
ssdeep	`384:7v4B600ZdPYeBsI7nOSeM3bjhEoz2DDMQ37s:b4B600ZBYwTrv+ozk/s`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	523a2018584433b1_upfltr.def Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\UpFltr.def
Size	804.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4ae78a11c4f38095d76b675526be4e42`
SHA1	`e1dd203e99fbd060025306e812bddac0965e49d9`
SHA256	`523a2018584433b185eff9d8039b90ee14693f1ce0e1658854055a06a31e0bbd`
CRC32	`F3DD7985`
ssdeep	`24:7JZ163+qMQfXl4iNn1IjhrX0JZZJC1zZZpSy/Zk5NzZ8Zx8NZZ6Mfbs23:7B63+8jNn1CeKjNC5NsMfbs23`
Yara	None matched
VirusTotal	Search for analysis

Name	79eb282821aa728f_360AvFlt.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\filemon\360AvFlt.sys
Size	83.7KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`86d92ff1f211f9704d0a5ee744dc5c5e`
SHA1	`21120d96da72b7a592dfdbe918e2dd8656f0cd2d`
SHA256	`79eb282821aa728f0fdfdb07a1fba273af83768614e026bc8e371655e398bd50`
CRC32	`DD88E36F`
ssdeep	`1536:uX7Z6EaDLE8sy+Xbbs4Br8PeSd8SWJRM8a7DbfCQk54ImVzjU3P0e:0N6EaDgQ+XbY4Br8PeSa5JRM8a7DbfCF`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	bf1b96f5b56be51e_360P2SP.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\{3C408F7A-4CEF-40e4-933B-5AAFFD1E6BC5}.tmp\360P2SP.dll
Size	824.6KB
Processes	3020 (None)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fc1796add9491ee757e74e65cedd6ae7`
SHA1	`603e87ab8cb45f62ecc7a9ef52d5dedd261ea812`
SHA256	`bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60`
CRC32	`FACA414B`
ssdeep	`12288:HZcohgVGBmUpL8XOgh6LaISFP5FF6snXcscXt5KmR+M6Pt2H6qXco9TGUc:BYJUpL8sFXGmU7t2aq59Ts`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e7313a001c9fc17a_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1252d333d67bde2626596a3e3da27c1e`
SHA1	`24f44c6cbda7063bf75467059e4326686e831d2e`
SHA256	`e7313a001c9fc17af97c817c13468c1ff8319ab7a51a7168077751a7a110e9d4`
CRC32	`DA58590F`
ssdeep	`384:7gRsVeR3K+h1MeK6jhDGPhCaoQKvrfpMQ32h:Eu49K0MeKghDGroQwAh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5b64447141ffe714_360camera64.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Camera64.sys
Size	48.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`d85dac07f93d74f073729b89dc339251`
SHA1	`e628f85f1365d9164140391cb93a2b22a4fb8ba4`
SHA256	`5b64447141ffe714f04a4ae489dac020b5ca0c31011c8edcc22da8cbfe265256`
CRC32	`4936C500`
ssdeep	`768:hIeQ+aATLgCbIO5y/ULSUpT/r/dBBZyP1qYMUCM5aaU7AAQ1QA3BToWu:hE+aAHUENP5Ry/iAx1f33u`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	c209f06c521913f3_patt.enc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\patt.enc
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`74e2664a0982b244c301369c543b847f`
SHA1	`9e715e3706eff62ed26a009dc0e8716f13db14c1`
SHA256	`c209f06c521913f3266fe326ee8ac73a54f67052d84d8f317d86db5b63eda71f`
CRC32	`97737F25`
ssdeep	`24576:3d+tNku2Rvqwz3lQZj0rdivF9PKhgDlbBus:N+7kVRVO4BivvPKWDms`
Yara	None matched
VirusTotal	Search for analysis

Name	f2272e34c87ad953_smlcore.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SMLCore.dll
Size	1.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0149d019c707be80605c8e1df3f376e2`
SHA1	`f0cf7c3f8d3e4595c0490ce1dae1afa253458a61`
SHA256	`f2272e34c87ad953bc21487b68af0fe4c8b7dd1e54b51dc903c1a03744349610`
CRC32	`2608AD9C`
ssdeep	`49152:DyZdTwgn8EHTD9/CWvZ3ZJ9exT/zO9n/Ge:DM+EN/CWR3ZJ9e2`
Yara	Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	529fde10dd3afe5b_360udisk.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360UDisk.tpi
Size	748.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`972872a0667ff3e04b7e2be15296a07c`
SHA1	`ec138986a3e1a17e21080d377ae37d93ea1931cc`
SHA256	`529fde10dd3afe5b6dd4358c9557f04d4191089759e2ddc00f349de584a72ffc`
CRC32	`DDF359AB`
ssdeep	`12288:zSM/9QOSCX0cZp9J3KkbntLA9fjZD9rJvm8nePsh67gv1pNqu42zMw7wj3Tn:zS+9QEnnskbsfjs3PmpNquJzr7wT`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	1ad96c64fefe863e_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\DsRes.dll
Size	108.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a0378008530f488cc69062ec540c9af1`
SHA1	`a3b9d86e695e62250199816ee519627045f3d9f1`
SHA256	`1ad96c64fefe863ec03a034606e87fcbf8f231bfff38a496c7295679c5da999a`
CRC32	`5B3AFBC5`
ssdeep	`768:Py2lF/WFLLpAEl6Zh7laV5tE01Zt1oMRobq12dSSswdUdo5jP8QsBv9K0MeKgsD5:q2kLlARh7ArRobrdSSswF8QsBv9we`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0ff56f21de170ac5_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`61d4efee0bb5136988ffb2fc36a8c9a9`
SHA1	`94d08f366a5eda700b15a7f0425b1ed5289d3e99`
SHA256	`0ff56f21de170ac5be249a7ad7b3b28ea3a144002cf1211bc4e6891809c458fc`
CRC32	`FF201385`
ssdeep	`384:7J7B2qz+9l3En4anYPLIeR3KJ1Mb6sVDGPhCrxaQKvrfpMQ3PWK:yfEn4aE9KvMb6sVDGqaQwp7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	77ccd34c116ccb05_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`9489ca7b46900f2557e2bb560e4ddbe1`
SHA1	`78182cbba82475800a083d657534118bed80a12a`
SHA256	`77ccd34c116ccb0553a20ee7e9c00cbbda9a8e28a731d15481c595956bb210fa`
CRC32	`9264C487`
ssdeep	`24:Q++uLTCVKs4WZmMdlJa1QYDrtnwQZD3SKX7ZEiWALBJOeHiIDLJX:r+uLTCV9tTde1QYDBwQV3SY7ZEqyeCUV`
Yara	None matched
VirusTotal	Search for analysis

Name	c0a004a1f8b83fb5_lsv.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\lsv.dat
Size	89.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ba2a4a1ca63033b4b5e6b3c3bbc9dc3f`
SHA1	`306ef0915cfb3f481af6f981b16e5b3c18b2d810`
SHA256	`c0a004a1f8b83fb5ae2f5358705c98c62b70ac03caa396b713b59fedc41ec42d`
CRC32	`94A7D57C`
ssdeep	`1536:wFkyesmgJqNEwgMTb4rcgXXk66GNrJc+MCYcH8d3zrCRLFL+huk9zN8:DthNEVMv4Aok67UXqHhtd+hB1N8`
Yara	None matched
VirusTotal	Search for analysis

Name	436c7e1265eeabc4_360rp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\360rp.dll
Size	3.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`777b3facfa06f388f173c05a8ce26ebe`
SHA1	`71aa737d5aa09430d7879cf52313cb22b3c925ea`
SHA256	`436c7e1265eeabc485a4d15fc6d385aac72976b454ed3a12243d74d3d9c99fd5`
CRC32	`C5123652`
ssdeep	`49152:F1yxxfecVkCHgXezHFnNHRSlAuXcsgCOzor6kR4RLLhN47BDwsUn+PVGUtICh:+8eFNxigjkGNC1Gnw`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	175c19b72b3c05d0_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\DsRes.dll
Size	110.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0059416075d0c40064cf1d1eda3096ab`
SHA1	`07c485d5a2d9d6b5353aac614271374aaf546756`
SHA256	`175c19b72b3c05d0b5424a0936e93af7a4503e80d122271a3515fcf3dcbe5c7c`
CRC32	`9E5E6866`
ssdeep	`3072:sgjRoRXCNaJpQo3YHctPUwcCYrBnWE0N5mqN6XWEnp7nHJUi5MA+7ZhLCfq5Wi5e:nt9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	398ab517462332a3_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\360SafeCamera.tpi.locale
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`849786fd617cbe52ab01a0c9bae31ccb`
SHA1	`f4545c1b08f43eefd68075b1c62829c56d70ec47`
SHA256	`398ab517462332a379aa52f7c11a506011535f5db0508a213c671416e5ac8615`
CRC32	`17E7F181`
ssdeep	`24:Q++uNjBuam/xJWjYJWjqLJWHIUR2L+m/xJWjPxm4YNIJWj5CW/qDtxJWwovMkWK+:r+uNjEN5GatnnV/qJ/DgG8iII`
Yara	None matched
VirusTotal	Search for analysis

Name	23283e2c2bd6ccb0_360Box64_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360Box64_old.sys
Size	342.8KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`69c04d5da61c59c89bbd36cbaa13e9ae`
SHA1	`0369967f432d623a1fad7c5c1a7405104faaba44`
SHA256	`23283e2c2bd6ccb04436c90037282dd103bc8add9bc62e9f5d34842e2e336b11`
CRC32	`01151C1D`
ssdeep	`6144:R5Z0MqIIHVGSTjKUSsuYRWY1fu4zcf9S4vk:t0MqII1nKUSYzG9W`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	6e84f998253d7bff_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\NetDefender.dll.locale
Size	25.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4ce313a029ad128fb2f52b1a4e4bd418`
SHA1	`54269d242357e0d76aa21f2338cb7bc0c0089e55`
SHA256	`6e84f998253d7bffd47680b968c720f9bfe980e8093dacf50d32d42ebff32f67`
CRC32	`CA4316A6`
ssdeep	`768:vjo5DtbqPXTWM8J5gj28EGl+2wM2A5Iarb9KvMljDGsQwRF:bo5Dtbq7WM8J5gi8EGl+2wMrIaf9plpz`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4ea416eca78cc715_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`45a6719de4cb98e1aba3c1c463045b40`
SHA1	`834dd11c28edadc76678fc65e3ed8aa129ee0843`
SHA256	`4ea416eca78cc7159ff8d4a3c28b782a6068c297ecc958b7e9595b67d99304e6`
CRC32	`EB3F800F`
ssdeep	`384:76gMtGRtDGP9II7nOSeMbjjeA8nQJ+MQ35Wl:WgMtwDGPRziAnJCWl`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9a298070f9577752_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`523c60ac44a5e4e4021a696b8c1cd10e`
SHA1	`e3e6b47acd392a46748542d8562a9bf42859e8be`
SHA256	`9a298070f9577752e2149e1d3c82f794af0aba4f4476e991f9d53b978a6e7f11`
CRC32	`E9830217`
ssdeep	`384:3AG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJEB9Y3kbdoKbSYp:fbSj0SbDQoYZlDT9cPJEB9Y8r`
Yara	None matched
VirusTotal	Search for analysis

Name	7d821ce879f733ce_360calaint.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360calaInt.dat
Size	35.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0d0a06358eb643b813fdc2c713a68482`
SHA1	`d7dbae7ccd68453ec54ba951d214fed96c1fca21`
SHA256	`7d821ce879f733ce0b9b9acfc226346f84b4c06628a0a6d64a065e9ab0449cc5`
CRC32	`4EA287C0`
ssdeep	`768:8zQTM13o/8Ef0hPtDWLh9tsbML3R1JZowU1+42qSQrIjrzK+7sm:0BY/AlDWd9Sk1JNO+4dTrI/ztL`
Yara	None matched
VirusTotal	Search for analysis

Name	48576b671bd975e9_heavygate.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\heavygate.dll
Size	530.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`05ca1b329225c764141c57d03cfbf26b`
SHA1	`54b1829da74a6e75f5e8c040f6c6734f562817fe`
SHA256	`48576b671bd975e9ea9cc40e6c9ab1fc2c4ae5114ec59442086291d1c674c7d8`
CRC32	`71833FEF`
ssdeep	`12288:CX/IloUkT7i5bE6R3+Xpu5wpz9scrROuWPFgR6d09W8:s/I6Ukvi5Q6R3upu5gzehLOH9n`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	67f99f6c0e4d3d50_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\Sxin.dll.locale
Size	17.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4dcec790b7aa02a93691212ab12a5254`
SHA1	`3a789bfdc64be7bbb509dc5fc4dd1820cb1115d6`
SHA256	`67f99f6c0e4d3d50841202670a8bc08c961bc763c7d12d5f273682da89f882c4`
CRC32	`60FC0197`
ssdeep	`384:7GQXvXKqnNnI7nOSeM+UJjr+5JNNzFwhhiWl:NXvXKqNIvVM3wh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	51d43bf10637d3d5_diskanalyzer.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DiskAnalyzer.xml
Size	960.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`72c2e85261a05dda5f246427987b7247`
SHA1	`2f2227f1d01acaca493438db484faefe9a52cd6e`
SHA256	`51d43bf10637d3d519c68754791aaf8bd219aebcdb95974a611e484fc39e02bf`
CRC32	`2F22C53D`
ssdeep	`12:QF/LXYRWe82yAitPtZ2dgctiJYctiJk+Zywy4jEEx2pgSlreEpyfsxq1w4q1IAyP:QlL+xTiwAtAlZywyVEx2pSEIfO2w42Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	49a51d5707dd3331_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`939eb85395863fd79080046b3efe4336`
SHA1	`6243a537e855a1f877afd6ff58f55ecd06d10a7d`
SHA256	`49a51d5707dd3331576780eecbe095e90e60f833a1c95a318efd47eb0d12a429`
CRC32	`93E86860`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVl9ENqWIajuwapG4i8nc6WSbJ1J9Wd6AFWbmc:29+DgRg2zMG4i8nxWHFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	4649eedc3bafd98c_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\deepscan\dsr.dat
Size	59.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`504461531300efd4f029c41a83f8df1d`
SHA1	`2466e76730121d154c913f76941b7f42ee73c7ae`
SHA256	`4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad`
CRC32	`92A91F3D`
ssdeep	`768:vAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAA:JM4A6UAHRHF4aImg`
Yara	None matched
VirusTotal	Search for analysis

Name	882b78b7659c267b_qex.vdb.enc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\qex.vdb.enc
Size	765.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`868e8c37a8e4c39407db116efbb45a24`
SHA1	`a394a2e97e8b579a1e37ea89612d1a1febb666a3`
SHA256	`882b78b7659c267beef7cd4cec9901af0f0dc38310d610133b9cff51e29c8f56`
CRC32	`7C4D60A7`
ssdeep	`12288:+A8FCSM+GUoLBageOVTX2KYVKmyYKSc+fM8yq8VDfKSgoyW4cvttlO+8o/0:+A8FChneCXkVKcbchBZDfjltld/0`
Yara	None matched
VirusTotal	Search for analysis

Name	5e11c25e4d6e146c_360avflt.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\360AvFlt.dll
Size	53.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`da5e35c6395a34acaa5a0eb9b71ff85a`
SHA1	`5da7e723aaa5859ab8f227455d80d8afa7696e22`
SHA256	`5e11c25e4d6e146c5e10fcbc21b2cdb5e97ec47f25c416e5d263985f3d964172`
CRC32	`D10D8E02`
ssdeep	`768:AIxy3SYobgnDmPGwKsBjDaDGDoUSlcCmunI2gVoPoCb1mFD03hw:FbYoaDmeFsB3XSlRnImPo+1mFD03hw`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	70f19be3113626a7_qutmvd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\qutmvd.dll
Size	100.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2ceff7b131bf05f6d98318c309f225b7`
SHA1	`9a218dc20c839a7e64a82cc66ace83af210d4063`
SHA256	`70f19be3113626a79783d68f5eebc080d376f5df6b647fb95fb9c5d7479c4ffc`
CRC32	`A89261AD`
ssdeep	`1536:LvHAH74ugMR7NrUCga4UkvmWKvOT2lXgODuqAo+rvnyfe0qmofvghl:LAbQkNUhajPXjDuq7+rvyfe0qVS`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	f41bfa204e937824_eainsthelper.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\EaInstHelper.exe
Size	132.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`3e963e13c6ab3091e0384dcf4539a03d`
SHA1	`ca2c41403d392950eca218c5b3a8829d1f842c70`
SHA256	`f41bfa204e937824bbc509ec0716df5df62e174b73070d1fd80d3fb67a23b669`
CRC32	`CE4C3D22`
ssdeep	`3072:EkC27/AQ8nV9IL4lTV7O9TQPdnujXBuwcoLNjhpuxnTxkbDFv:EkC27/AQ8nW9sP2uwpRca`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8e98c8c0e80b86c3_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`230f5af6f177e15b62984b1c2295dc72`
SHA1	`aecc9d82bd086e8e97de4197a198a5cc878be996`
SHA256	`8e98c8c0e80b86c333e50dd03e651a765956b67673b3bba7a06e092232b1e979`
CRC32	`48164DE3`
ssdeep	`384:7KB60EZ8jHI7nOSeMN/KjZA8nQJ+MQ3T1:+B60EZIo5QZAnJs1`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b6d32f193cb13099_sysfilereps.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\sysfilerepS.dll
Size	289.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`080b406556b06942c740d1b27e35b76b`
SHA1	`df0e1aad009cfe0436c476619e9a046c74957f67`
SHA256	`b6d32f193cb1309963e0566ed54551854ece722660726460c76713e1358896a6`
CRC32	`86F89B82`
ssdeep	`6144:akQR4/gW/ulyJQks7fA8kbJHP9wgZLtGvZxZcy2:WRjW/ulyJQksrA8kFHP9wgFsvfw`
Yara	HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	6f6665aac2bcfbf0_safemon64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\safemon64.dll
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`e06cc3f41e78275afe359f84e4840a93`
SHA1	`7a78a88d3f5193c921d6551c1e73bedb8d6642e6`
SHA256	`6f6665aac2bcfbf0fe24905489a92f206d1fcc9aea91c925d50147cf6172068c`
CRC32	`A999FC88`
ssdeep	`24576:0wMV9GhYeUwZTZZ8cg6RH3MHYEh9TnQCSEU9f:e9GhYOtZ8cgw4nTnQCSP`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	f5d4933f83d83865_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\yhregd.dll.locale
Size	18.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c883f48d5a4ec3b2addb97030cb352d3`
SHA1	`0784fb4205c2695d8f562752dc287f59377dd6fc`
SHA256	`f5d4933f83d83865120d68eb29ef52317d05f1daec2c1db22213a3bde6daf559`
CRC32	`161FC1FC`
ssdeep	`384:75nlAI4aBnYPLIeR3KJ1MLRDGPhCZAQKvrfpMQ3pkh:NnlAI4cE9KvMLRDGeAQwfkh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	85a90892fee31cfc_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\dsr.dat
Size	60.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f4f74f2a95397a7638d79d6f4f6b86d5`
SHA1	`68eedf5bf65727e96370199961c545000a62372b`
SHA256	`85a90892fee31cfc6fa89cbea786bb8c5bb2ed4f5307bb824c990552f8163bbd`
CRC32	`2BD70F62`
ssdeep	`768:LAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAM:lM4A6UAHRHF4aId`
Yara	None matched
VirusTotal	Search for analysis

Name	c0b8f076377e3c74_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\Safemon64.dll.locale
Size	50.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`72d2bfe57765eee4b86c9be50b147c53`
SHA1	`7f94a9783cfa31af90961060e0db8a4418d0b5a2`
SHA256	`c0b8f076377e3c74292d4ec706e95a8a257385bb3ef40602cecb8add30b18ed6`
CRC32	`0424EE0E`
ssdeep	`768:33v+tnPKY4PWWYzpnD9UT1tFGHXjpjqrVk/rfroLovXNu2lZZ3P9PZ9MGx6U2M:QKJSpD9+1tFGHXt+RKre2lLQU2M`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	6bf48d7a9dee2e8d_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\art.dat
Size	40.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`1af9eb95f16d4748e7748d049083711b`
SHA1	`8209111425c3c6cf93c24662ce73615b0436ab18`
SHA256	`6bf48d7a9dee2e8d40824dda342f943e2e2107b64d32b5873fd591724d7ace09`
CRC32	`941021B4`
ssdeep	`384:XMHtUNSKbzEEbicmKo+UMRi4P24ONxhYaLHHjOAjO7ET6JjB:X7sKHEEbicmKex6`
Yara	None matched
VirusTotal	Search for analysis

Name	11a78f35eb93add0_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`c987fa593291587ad9dfe12be606b87c`
SHA1	`d13a2d6f93ae124538d690834c8583309eb37025`
SHA256	`11a78f35eb93add0d3c316ca49d0fecdb11938e56712c0672d30cf20a709d1ee`
CRC32	`7AB2FE64`
ssdeep	`768:XXHGdBPASgYoH6dzSnq5TmtzG3TpMtaIV/J8lAoHSrtq9uI:SASgRcSqNmtzG39MkyeAySrtuuI`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	eb848a9e2d174bfd_360connect.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360Connect.tpi
Size	1.6MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8f0d6845314d33f78052adb9352a3e24`
SHA1	`c51301ddf202e0c692df525441b333c1f6f596c1`
SHA256	`eb848a9e2d174bfd268dbc825947d9a1691a3df7e001f6b580976f31ca3889cd`
CRC32	`61538829`
ssdeep	`49152:TULYTkfK1cDqS46tR8by1HyqChaHg9I2M:VkoGu6j8bvsHxv`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e1fd277ffc74d675_33333.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000004001\33333.exe
Size	2.1MB
Processes	2388 (axplont.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`208bd37e8ead92ed1b933239fb3c7079`
SHA1	`941191eed14fce000cfedbae9acfcb8761eb3492`
SHA256	`e1fd277ffc74d67554adce94366e6fa5ebc81f8c4999634bcc3396164ba38494`
CRC32	`34A44351`
ssdeep	`49152:S4DsvdJ0ixyLyeioGg4dGABoUHt3TQ88u2q7xvDPnvTxlfBcZW:SzyLjioGpdzBoUHi88u2q7xvbvTxlJc`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	74b017897a5f4d6d_pwlog_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\ADMgr\pwlog_theme.ui
Size	74.0KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`f481bbe5e0cba464a9e7ecded41db45a`
SHA1	`0d67dc16405cfb2c194afc3fc627260bdef2c1bf`
SHA256	`74b017897a5f4d6d1dc1548b36926669eb964cea975a22fc4b9f26f477809e0d`
CRC32	`F3CA349A`
ssdeep	`768:l/LXjbTzqRewXJxmIQT1RxR6bstfAq3+Huad9LR:SJsrR6Atf3+Oml`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	e4c0380830b553df_360quarantplugin.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\360QuarantPlugin.dll
Size	263.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`af9c93176d78453523afccf44e895c1a`
SHA1	`aa9e2b49c2193d57492cf86135cd518f79bc104e`
SHA256	`e4c0380830b553df3991a96914cd527e3117bd5843d3cec62b416c3fd8d4620d`
CRC32	`C5B0DAC1`
ssdeep	`6144:jA8c+bjRCNF/Hz2QsB8ufR1SIkllIailZbOmVjNCDh4TFco7gmzD:NbjRKRHz2DiufKIkllIai3O0jNMh4TrN`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	98cf3f3ed723492e_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`596d51f844018cf3e37482fc2ecb7f92`
SHA1	`e6e3fa00a59e20fc904dc8e7a0562e94b547c67f`
SHA256	`98cf3f3ed723492edb93a00e805a30a50462ee6e6e5eee1af5455a5a85fae10d`
CRC32	`D35FD85E`
ssdeep	`192:76MRgSyMrj1grjzR+vnr9ZCspE+TMAruqqG:76cgRM8z7eM4qG`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	6e699811d5a1f66f_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\spsafe64.dll.locale
Size	17.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`33737a79eac8a6838ace20f88fdb2190`
SHA1	`79cbfec77eb2bc63786db254ba8338477e083bf8`
SHA256	`6e699811d5a1f66f505d89e0ec2919bc1740da5e9b23dfd6c6941e6fb7248905`
CRC32	`5D7B3ADA`
ssdeep	`384:7tZjtjuCI7nOSeME7jQ5JNNzFwhhi4rC:BZjpupaa3whfC`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	59966fe1163b45fa_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\Dumpuper.exe.locale
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
MD5	`084ed4db701833ed8087e95588fb53b4`
SHA1	`3c036468729730958d7a1788194caafe0bbc92f2`
SHA256	`59966fe1163b45fa6e13ced9b48dcca71e6e868e6679544965d02925f77405db`
CRC32	`51984B1E`
ssdeep	`48:r+uLTRVYxg8Ux8iEQgoB9L73GnduthNbGY7IfcuqeMY7ecBkvA:r3LTRVYxjUxHrv2uNyY7mbqX8UA`
Yara	None matched
VirusTotal	Search for analysis

Name	5c880a70ea8b4e35_qutmipc_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\qutmipc_win10.sys
Size	81.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`329762346802c2e93bb70e3762d3bdc2`
SHA1	`31a0770f9bf8982890f7eb1c7c67f24f9367e3b9`
SHA256	`5c880a70ea8b4e3573e9b6f80af637ee5489d438b31e9c022d73e763fcbec5b7`
CRC32	`DBDF4354`
ssdeep	`1536:JJyG/6h0njsg08zyQVp1IckfMTK1KuQD9i:2G/6h0jDzJzCckfMTKGU`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	8bd04af2c436367d_360ave_ex2.def Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\360ave_ex2.def
Size	3.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`07f363042baa79f4f12c2a50bee40049`
SHA1	`5eebab3fbabde6a36e05144a135593847235a190`
SHA256	`8bd04af2c436367ddec7665a875c19b8c22bb7c3d01fe2d8f81895e6383bddc5`
CRC32	`C8C65CA7`
ssdeep	`96:P3vL+nM5f6ShGf6Spy5f6Snf6Shf6SIOLf6SvR15f6S79f6SOf6yMh/R+MlALllD:PvEMYUSyYBfjTy1Yn+yMh/R+kgvs0`
Yara	None matched
VirusTotal	Search for analysis

Name	97474a459b009bb3_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\appd.dll.locale
Size	26.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d4e5ee91934b1d8151ef6a8a06fabdf8`
SHA1	`cc0607f80bf3a7a92e962f52de30df139f182e13`
SHA256	`97474a459b009bb3d6464993c29456841e81cfaaad2403293bd6590ade232623`
CRC32	`67EDFB8B`
ssdeep	`384:7ipc+C81wtncHeR3KJ1Mn8E9VFK4i22DGPhCkJKFKjqfvGBkSH:uSG1wtB9KvM8EAxDGrJKFKcMkG`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	838e0d6e4865c607_fr4.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr4.dat
Size	12.8KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`bc43e8286498916ce3e987e126905c14`
SHA1	`78f90dc726d67026a1c7dd375243a966406c3188`
SHA256	`838e0d6e4865c607ca0e5b8713b92cea43c35f8a1ff818675d9ffe0c4d12c6d2`
CRC32	`773E7778`
ssdeep	`192:fZWzwsWhsgXKtQOH/Ttlg62rsAQfGL9PI59PefCV54zZ/ukFqnUYKdCQX7q:fcdWh1KtQoiIAC69P29PeqfYDFuPKd9q`
Yara	None matched
VirusTotal	Search for analysis

Name	b945d5cf8fb361f8_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\DsRes64.dll
Size	66.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3c2666848b5e79c82a5e3ca6dec035db`
SHA1	`45717c11620b3a1576ca77491e730cf6c5364594`
SHA256	`b945d5cf8fb361f819621a0b43a9dbdd85de6be9cce80c26ae0ddea152859c94`
CRC32	`95BD2D80`
ssdeep	`768:6SWFluWFrLpAEl60h7l61Ht01nPoMRorxNg/lVyskuDyZXAbmkiZLBkbdm:zWPrlAMh744nFRorx6OXAK/Bkb0`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9bc130cfc8b4b59d_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\deepscan\cloudsec3.dll.locale
Size	53.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a07470619b7236f8f61729489500f888`
SHA1	`a217606560b2265578d837fdae4be0e47b63dd22`
SHA256	`9bc130cfc8b4b59dd1be4bf792eb867f7504965841316eb2377dbcacd518cf70`
CRC32	`422E547D`
ssdeep	`768:3fdNxalj/wWfZb/XFeoy5yFYECG5nPNU49K0MeKgxDGeQwd:3Fr4bwYh/U49weL`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	700b40aa7f7cca9e_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`14f7da8b09f1df7df1cc709499fac0bd`
SHA1	`c00bf7baf7a937ce9d882588740073e393358779`
SHA256	`700b40aa7f7cca9e852f7fcf01e9f52f5d25097dec44a20c9131c7a74ff99894`
CRC32	`9205ED7B`
ssdeep	`384:72B60MZGRI7nOSeM16exjIA8nQJ+MQ3AW:SB60MZxZ9IAnJDW`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0ba4355035fb6966_360ipc.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\360ipc.dat
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ea5fdb65ac0c5623205da135de97bc2a`
SHA1	`9ca553ad347c29b6bf909256046dd7ee0ecdfe37`
SHA256	`0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d`
CRC32	`30F9BE3F`
ssdeep	`24:mkmtPq0uzpweAExe8iBtD5aokH2shK2sFzhmNKrdcKQXbiaqLJthSFJYzjhG4jek:mzqx68e8etDhkWshKD3NCrOlHA+8xk`
Yara	None matched
VirusTotal	Search for analysis

Name	25006f654d50e7e6_cef_200_percent.pak Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\cef_200_percent.pak
Size	227.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`66fa52c0523ae2ec18c37960e4eb3e6a`
SHA1	`61ac3e8e84a7f84790a835998873431c4a086bd9`
SHA256	`25006f654d50e7e63f4557357437eff5f6bda3dc6e8bf86cf0bd5b02fdbf2a28`
CRC32	`8DAD5103`
ssdeep	`6144:HJW/jBysmlC9BzMklLwozV1oJoRc5QXfHgs4jTlnG:pW/lDmYmqh1qggs4jTM`
Yara	None matched
VirusTotal	Search for analysis

Name	19fa3cbec353223c_libdefa.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\libdefa.dat
Size	319.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`aeb5fab98799915b7e8a7ff244545ac9`
SHA1	`49df429015a7086b3fb6bb4a16c72531b13db45f`
SHA256	`19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4`
CRC32	`FDAC972C`
ssdeep	`6144:A0YRCPOEtLsgNI9vVtZeIJNb4Zj9+kbdhPW:BYRC7p9NYvVbNb4ZJ++dhPW`
Yara	None matched
VirusTotal	Search for analysis

Name	c19c2e2ce30c501e_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\it\SysSweeper.ui.dat
Size	101.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`023f1505b12ae9682932e622971c5bd1`
SHA1	`8f4690816c67861dffea293ada8dbfbb51791719`
SHA256	`c19c2e2ce30c501e35d2e43b08b3725a7fa1ac256f3039861ce8cf3987f82cb3`
CRC32	`70366008`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3y:y01ECQTjvJYwTluz`
Yara	None matched
VirusTotal	Search for analysis

Name	c7ef88c39b752e11_medalwall.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\MedalWall.exe
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`6e10b7d97ce3a8da723c80b5c187077b`
SHA1	`c8850d59f850e8af756ef7923f786f825bce2d31`
SHA256	`c7ef88c39b752e1113a3011d9ad58648add4801313b5a1f49fe0d4dccdaa0fae`
CRC32	`62ED0A37`
ssdeep	`24576:AUubv9vW7slUMcjdtsnFVZ+Ghc0zTxm+6S6+tIJT:AUuwGXOqFVZfhc0zM+6Sty5`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	62a61c309945f3c2_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\filemgr.dll.locale
Size	21.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3720d17eb0245364aedc8a0fe54199fe`
SHA1	`ecf28cfbb49160bc7840a493aa5f49522dc9e123`
SHA256	`62a61c309945f3c23aa09253037fef0132cc1003c0f9d9b09d2892da92ef381e`
CRC32	`907A15A0`
ssdeep	`384:7p+9lTlrEReRVwkLnYPLIeR3KJ1MTbXjDGPhCD2QKvrfpMQ3O/:YrlrERRkLE9KvMfTDGU2Qw4/`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b3a80f601bf98b4f_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f47ea52ab767ca8801d0d57b03d2212a`
SHA1	`4422d6021dea724eb983769fe5f081a54b2ce775`
SHA256	`b3a80f601bf98b4f1eba317b1b02f1f9151112025fb0a4d869e95327a801ff52`
CRC32	`12F253F7`
ssdeep	`384:lAG4SpbActshMBk2FGu9H50wh690PFzIWJugWXcE5tcvlkKU:5bAcSG19H50S5ccE5tcvCh`
Yara	None matched
VirusTotal	Search for analysis

Name	1a82123d0bc413d7_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\cloudsec3.dll.locale
Size	88.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`083639d44467a7372e47b67b09eee6ae`
SHA1	`4ba68cd67366371ec2b1a9b2ff82f14a92ff66b2`
SHA256	`1a82123d0bc413d79732f4ed915d0ab943e33b4d012fbdb91cc451a6ba71dce2`
CRC32	`76F1B0E5`
ssdeep	`1536:7PVmvblAch77CRoYdSSsgfxBPoYh9we9:58CRoYdSSsgfoYh9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8f96c00d97435b66_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\LibSDI.dat
Size	102.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`6e31f13a0f36c35c2b5dda4915a0b4ba`
SHA1	`998267fcfdd97c37130cda51b4768a73d4fff10d`
SHA256	`8f96c00d97435b6630706aee0b8d65bdc88b3e692050dfee6fc532a0ac5445d9`
CRC32	`3CA97E74`
ssdeep	`3072:j7wIE7URKxAN4Oc3iyf8XaJySAxDO/Uxrn1X:47URKxOSd8XSy9xSMxrn1X`
Yara	None matched
VirusTotal	Search for analysis

Name	06a5eb844a7ed576_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\ssr.dat
Size	48.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ce16e0c427bfe4637b621058e7d17122`
SHA1	`bde78c25e80abba339d79095299c4719845e2ad4`
SHA256	`06a5eb844a7ed5769653d1e59e79cc1a74dfc1722fe703b64ddbd73f41fcc97e`
CRC32	`3BDCD7CE`
ssdeep	`768:zfnjGRMoEvZEa9of1nCbj7MOQbMLvuTJH/W9sx8SpkunQDm:fGFIVenMj7MOVjQJH/msx8SWunQK`
Yara	None matched
VirusTotal	Search for analysis

Name	dcb710d597a8a726_qutmipc.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\qutmipc.sys
Size	72.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`bfaa9fcee08497162bb074b7573641e5`
SHA1	`1ce73394824fc62e54a2931e403e814a1ccb689e`
SHA256	`dcb710d597a8a72686e56534ac747a888bdd46024e8e60c3c18eea1a5757c1d8`
CRC32	`26874EB0`
ssdeep	`1536:xJyG/6h0njsg08zyQVp1IckfMToN13D9C:+G/6h0jDzJzCckfMT+pU`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	95043ac58cf8252b_360antitrack_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360AntiTrack\360AntiTrack_theme.ui
Size	179.7KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`7184b152d9585ed65f794567ccbdd4a4`
SHA1	`2d6e34804145daffc99eb4393dfdfd010f2756cd`
SHA256	`95043ac58cf8252be28ac1a06e1bdd257fbb0f62ada2760fc0faa359791ecd5a`
CRC32	`EDD9364A`
ssdeep	`1536:2qvhJO5QDEakqaazGLqLcNC05FP/wDwhNyyK:xJJO5QDEakqzGLQ8CUxYDwhNy3`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	e267aea25ff9f867_dswtb.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dswtb.dat
Size	44.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b0fe28192f10d352eb6241c522a2af6d`
SHA1	`03b27500f4b741687cf7fec88ba332f5c91ea485`
SHA256	`e267aea25ff9f867a6eb47a462cc365974c25d903460410830c41ac4a2ebb0c6`
CRC32	`96E68D45`
ssdeep	`768:TdeKWVEshf02nOEF1kPZRUyv905RpNRwb8ppkVr:TEnOEcPZOyO5dt0J`
Yara	None matched
VirusTotal	Search for analysis

Name	f1af6bd5576f5f52_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\SelfProtectAPI2.dll.locale
Size	21.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`65b3d8267604933b155c9c5635118a0e`
SHA1	`61728eab4d4212f7302dc9eb705ea53fa089a6aa`
SHA256	`f1af6bd5576f5f5268937182cd6248b23b5e01f6285375764e761d250ac0bd47`
CRC32	`D63B0029`
ssdeep	`384:7YYgIYkAI70HVJeMqSJvHlVSQKvrfpMQ3Uy:UYg9kfQ1s0vFVSQwKy`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	81eacdf339371b54_fr6.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr6.dat
Size	12.8KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`833fc4f29cbd7ce03aaff6ae53f1b4ec`
SHA1	`e2dca87856f5b30e81456bcd3b35cf85f1b5af2e`
SHA256	`81eacdf339371b54831e37aed340287f80644fcf0a70748196119f4b02470e74`
CRC32	`A3CEC08B`
ssdeep	`384:nkzi6MBdoSlt2DUxk75KmAt2blVDXQSlrsF6N8:nmcBdrlrk75KxsldXxltO`
Yara	None matched
VirusTotal	Search for analysis

Name	672309a4f5e39e75_backupsrv.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\backupsrv.dat
Size	505.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d006295a8456b1059984b1048d8cf049`
SHA1	`b753da8fb9e29f35d4b33226dc15d41512969f69`
SHA256	`672309a4f5e39e753846eadd14b252a4603487e938a8a5362e30fbff67361bc2`
CRC32	`417060A1`
ssdeep	`6:eVD3siiz/LcqIjCSHNA/CbcyLNLfHE1K1zbMhwQBl/5NfQ+sSqbpEuy95JEWxIaH:Riiz0A/CJLdfH3XMJLNT2NEue5uuz5/`
Yara	None matched
VirusTotal	Search for analysis

Name	f3eba2d8e7e6b11a_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\Dumpuper.exe.locale
Size	1.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`b004bceb8ea6b6cd6576512cf1a39d39`
SHA1	`5d99216f24ae98b247a84636a89e8b557106710e`
SHA256	`f3eba2d8e7e6b11a1fbe4897a82b1fb69512305230a98668bef0a4946f37ea72`
CRC32	`A7AF9D66`
ssdeep	`24:Q++uLjV+f0LZV9ULPRBeZxNKX7vQiWAx5exIoH:r+uLjV+f0L9ULPWRY7vQqjexzH`
Yara	None matched
VirusTotal	Search for analysis

Name	5d30af8a6a594541_largefilefinder.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LargeFileFinder.exe
Size	1.6MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`2d5302155b58cfa9cd5dd0df2ae69a7f`
SHA1	`b08f33a28845bbcd4437ccbe324320f1ea8422c1`
SHA256	`5d30af8a6a594541c532476a03b5320e25cbe06414f284b3f3d4c862c32712f3`
CRC32	`C5A3094C`
ssdeep	`24576:Im4KOSvZkFZSpBm0UDfEq25OfsFQPlV6eojqKVZCwPacmEc:FvgSps0OfzTfsFEV6eojXVZF3mEc`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	ef8addf7b32b592d_dynlbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\dynlbase.dll
Size	834.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`da433a919154394953b5c925d6c7946b`
SHA1	`4d582cdee8445d25e1d62fcc52ef75a51b868769`
SHA256	`ef8addf7b32b592d5fd0ca65fc9824e90d2dce200641756318e6089a9a02921b`
CRC32	`B64095F7`
ssdeep	`12288:DSm70eV/QhMgoRIbD4gj05tJtDPHaamSZAZDBOffG40N:F0eVUMgoRIb3jwRPHaamSyZDBO3G40N`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	44709e9665845062_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`61ad685fafa83328cc0f30981989fb17`
SHA1	`956ea5d113508d767c57f7c783d0f6f7f5f2c3b6`
SHA256	`44709e9665845062f7aed45d8480bab980fc685a622f4102d0ccda4b35107e6d`
CRC32	`1ADEEB82`
ssdeep	`48:r+uLgQVn9sdkRQJ8aR/9s4+0JY7Z18Lqo+eFoaJLZa:r3LgQV6d6QKaJ9s4jJY7z8LqDIoCLZa`
Yara	None matched
VirusTotal	Search for analysis

Name	1587d34c58ff2376_360box.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Box.dll
Size	50.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f398c9c333589ed57bb5a99eb2d32d13`
SHA1	`1fcac85e06506f332cae1d29451abe6808d8d39b`
SHA256	`1587d34c58ff2376384a0f3b279248d080724809eaf5f251cc2dda7896f04602`
CRC32	`3FBC963A`
ssdeep	`768:cjCu+VnfL2NOF1uTbzGwcnaIedCl5prTbb1oFx3hBi:pu+VnfLzQyaId59L1oFx3hB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	6de8913051a0281c_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\360SafeCamera.tpi.locale
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`fcca8b86bb7c349fe6bd71d9273fd3dc`
SHA1	`aa7b1f48cbc86d2b1d0df789cff750a77e5597c0`
SHA256	`6de8913051a0281cdc1f485233b419d91aedc1fa7428dab04e6fc20ce1e56aba`
CRC32	`8B3FAD56`
ssdeep	`24:Q++uNKxJWj3m/xJWjYJWjqLJWHIUR2L+m/xJWjPxm4YNIJWj5CW/qDtxJWwovMk4:r+uNKD5GatnnV/qJ/DgG8iII`
Yara	None matched
VirusTotal	Search for analysis

Name	3b9ba923df71b6c4_fr1.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr1.dat
Size	3.4KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`54370e4d60827c8c5f1176d79231288e`
SHA1	`b853c9ee21c5656bb642125eb466c5c27ae0b77b`
SHA256	`3b9ba923df71b6c4378d1a47dbe910bcd82cc133a2b37f6bd35fb706dd2ef763`
CRC32	`E46F6598`
ssdeep	`48:BuBt8B8RtdqSXWY4MIkIRi7V6H4MxEWPdEzduOf2O0ilaYnZ9JtRJLZIlQhXREzB:BItnrJmYxt6HIUErNDzzhE8W`
Yara	None matched
VirusTotal	Search for analysis

Name	960e6a926722b213_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`75de0adfc5611d385b10b8a6b63a2adb`
SHA1	`12867b2fb243885ec0a03af2773d633c41d2f9f8`
SHA256	`960e6a926722b21350e936542bb8ad74c5dcd18cda84704d1bdbcadda61d9ab2`
CRC32	`912312AA`
ssdeep	`384:74mHdleY+9l8/EKi74nYPLIeR3KJ1M15MDGPhCMqov05MQ36l:EmHdl0gEKZE9KvM12DGfqoT`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5333872d10a61fc9_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\360SafeCamera.tpi.locale
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`94ec0dfdc4e489c654dd8dce666d5eb0`
SHA1	`a27d55aa4e680c4cf32e01e12c7c0aa21a7583b9`
SHA256	`5333872d10a61fc99f16dfd6b648e08bdd4fd3b0afc273c71d0d0fdd8470bdaa`
CRC32	`C2BEEEE3`
ssdeep	`48:r+uNYNWWwqwVCrV0wS7whURlcxLDwrNNw1gnbYma8iIk:r3Ny//YsGrNRKenb7iJ`
Yara	None matched
VirusTotal	Search for analysis

Name	7f77165ea2b988cd_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\udisk.locale
Size	470.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`96f13109d95c2a36cad2b3800e9094b8`
SHA1	`fbb488ed0de52b4a9c56a43e8c6d592fcf445947`
SHA256	`7f77165ea2b988cdc6975a3bef3ac0bfecf0a01ef6e0857884ebea846c8fe57d`
CRC32	`969C4BC2`
ssdeep	`12:Q++ubx60GQF5sAlXmhR4jvgE5KE9QNIKAl/h8E966N3:Q++uSe5sA9NvFLnKAVhN66N3`
Yara	None matched
VirusTotal	Search for analysis

Name	34257623c1c563ab_dsark64.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\dsark64.sys
Size	177.7KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`b498f27ca312db96a0cbe6b7405b2027`
SHA1	`d35c9e5bcb3df23855130b783ea80fea8653a097`
SHA256	`34257623c1c563abf99085b4c483a672945bd6059009eb001266f003f315b356`
CRC32	`00F887AA`
ssdeep	`3072:kiRcMFyBrzkqHKhnrEXnGWZC5hP+qLyiukCtuVv2jM8GiEzJTn52fQhgP0:v1grlHMrE3GW45hLLEJtuVv2jM8G3QQJ`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	cb26f2f14b0c1518_checksm.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\CheckSM.exe
Size	184.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`229588c3f399615a6d25e442fb5ac431`
SHA1	`f3cdf748620b9da5960e195637bbfcca58f39948`
SHA256	`cb26f2f14b0c15180014a6262a8599bd0d8e4a0ef44445ee360725df3d18655e`
CRC32	`60EC98DC`
ssdeep	`3072:JPITtlxdh7MRmPHel44NPjLzPgbhP7q4vpf5Vt5MMpvfMRTT7fCpmA:JPoN6m14N7Lj6PG4v6MO0`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	0b3c710ef9a64086_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\AntiAdwa.dll.locale
Size	129.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`85b5fa3be8829b642f32fa8de120a003`
SHA1	`bdef663810c248608e8101786b47e45675b33816`
SHA256	`0b3c710ef9a640860f34e5cf1d492ea79735e9d44b69e8ebd02c781d12b7e407`
CRC32	`97BA4F38`
ssdeep	`3072:dhrRouVO1mKil9fZ80t5TVxFDvpkoQbz0m/INEx:7Kil0gRtgbTGa`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	542c8ae025240282_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\udisk.locale
Size	486.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`989119be7ff6df3c28f083245705884c`
SHA1	`caf674d426d1f59fe02bc60dd9e8e23ad4a487b9`
SHA256	`542c8ae02524028241a8fd9c375cf52d889c1970ed61a27e4adaf18af59bfd90`
CRC32	`2EBE2C08`
ssdeep	`12:Q++ubxP+Qb0GQEclSkl4FhR4C+XgE2lHpmE9yqWZo8E9HHpZ:Q++uJ+QZCwt+XKTpWZqH`
Yara	None matched
VirusTotal	Search for analysis

Name	3afbae47a4fade79_popwndtracker_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\popwndtracker_theme.xml
Size	37.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`7746e992fcbdc5620c9544ff12602278`
SHA1	`bcac211bc12bc14da57ae6eba4753af573d7af57`
SHA256	`3afbae47a4fade79c3a8d7cd5e0239eca76fa4fe48ead6b7aa98bba67ee91bd8`
CRC32	`5511EFD9`
ssdeep	`192:BFGRIGR2vGVM3RIRqGDRmWcc+e1lwaQwz3IXbNrIZkGOXzgKiL1vvFA4Bg:BFGRIGRgGGBIsGDRmWcFaFMP`
Yara	None matched
VirusTotal	Search for analysis

Name	ff86f7d58b0ca1ac_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\Sxin64.dll.locale
Size	47.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`39d2bcad99e1825f3bb1af4c84bdff50`
SHA1	`38718c6f7f93d52710864a0ec7b5ee17f6bc6dc0`
SHA256	`ff86f7d58b0ca1acfba64a3af59824d7a38bc2c8df495d10aba4a0a419584a23`
CRC32	`6BB151C9`
ssdeep	`768:tXHGdBPASgYoH6dzSnq5TmtzG3TpMtaNVNs8lAKYertA5/l5R:sASgRcSqNmtzG39MkflASrtQ/lP`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	4cafb7a2eeaf3b9f_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`54bfaeb52e3a4e20c1e01be85b2a9b73`
SHA1	`c98a80ebc770f277ae8032f986cb0ecb3d9e5580`
SHA256	`4cafb7a2eeaf3b9fb80bac8ad78281d194f46607ba9c5141700cd3548ca965cb`
CRC32	`24A4C218`
ssdeep	`384:7b1/tGKZmatDGAINI7nOSeMWzjvA8nQJ+MQ3/jLG:nVtaWDGAvWvAnJsjLG`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ba978851567b73d8_swverify64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\swverify64.dll
Size	143.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`073a479b27025e1fb8387e3e008b1a7b`
SHA1	`3ef2f65f0d6b7604fc1dca7d6315b1c937eb46c7`
SHA256	`ba978851567b73d8be47df1519e069ac3220c00b0ebb774abbf6aa27394b9ed5`
CRC32	`F957B18E`
ssdeep	`3072:8YTXz0MC53HHOBMdaYdiHtM8Cd0QgMtRCwGZ25CMJ1vX7F0lO:8i0F53L8S6tM8C7gMuwsMJ1SlO`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	a4982bd88dd65a1e_zb5wqyhn0djjyq0cadepmad2.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\zB5wqyHN0DJjyQ0CADePMad2.exe
Size	3.7MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`0a5373aeab2f28326313d2e613efb206`
SHA1	`d27557c045f36f6f268a3d17267f0509c426f1ed`
SHA256	`a4982bd88dd65a1ecfdfa9c32ed6c834e2ef5b69289fbdef8f05ad5b4665195c`
CRC32	`6DC9C013`
ssdeep	`49152:8qBrPo8HCpgLOyLHOVALCtFeYkS6Bir2mBMq+Tp6/8tOLocHCZwLe17od+vsZ/+1:nBGu2HY2espgsQ4vg6iKC9MtDJaDD`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4b9ec6ab057e01a7_devicemgr_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DeviceMgr\DeviceMgr_theme.ui
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`51af7bb28a578aa8cbfce690a3fbcb9f`
SHA1	`4a135fcd962b01a7774aecdf678ecac63be85482`
SHA256	`4b9ec6ab057e01a7cce9613620f7c5c0b8bc1947fee913883878d97fea1059ca`
CRC32	`0DA1E190`
ssdeep	`12288:h7oSZpMjiPkv35PZHG33ftz7RKiCzylr3fmVe/Mtkfp2n8eVbEHwiOr1:h1kiPkv5xm33l3pCzylr3f0e/yK3fC`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	3b81711731e79ea4_360AvFlt_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\filemon\360AvFlt_old.sys
Size	84.8KB
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`e855e9039f37523e6b01e05107cefeff`
SHA1	`c0882da58826de9fb9bc95c929a73fb71735fd78`
SHA256	`3b81711731e79ea45c3545b599f3ebc21ced95f608694332892c918e6b2faa17`
CRC32	`1FBFA5DC`
ssdeep	`1536:Ibd83hVT3hyznvF7GdZoI20ePPHKi3/m8WsHwHHbkoE9y1PxmUKP0D:q63hB4znvdG3oI20eF3/mBsQH789uxmC`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	07018715705d87c9_feedback_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\feedback\FeedBack_theme.ui
Size	139.2KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`5a7df04c5ae16702c6c2f005a7424e54`
SHA1	`98e9e79dd5432d161d7ba7ad29f92a27e9f316fe`
SHA256	`07018715705d87c9c74eead2f293fc6386813998d8b6d71fd0c3a01d344a4998`
CRC32	`90591A18`
ssdeep	`3072:D7ySwoSzUSzsby8SzUSzswzy/k43waahJ2rwvb7QWq:D99a+`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	f31351216bc1c855_urllib.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\urllib.dat
Size	586.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`8c64ae610ea35fb1ebd7a6dbe4f51534`
SHA1	`9af916676c573c5d164664c840578d027658bdf8`
SHA256	`f31351216bc1c8550dab806053a40c40e07873af1de14ff8bf848ef284673fa3`
CRC32	`F7250AD4`
ssdeep	`12288:E4AikY6dtgb+LGcHVs1KmtG2sXcGP5+XIgkCs6TRRN7WHOuu:TAiB6uJc21SLsNXIz25o2`
Yara	icon_file_format - icon file format
VirusTotal	Search for analysis

Name	73c50dc1961df13f_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	109.5KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`32893ca6d4e4dfad067312dbdad1314f`
SHA1	`d06095159554ecc58856e997c28847a4b7a6b91a`
SHA256	`73c50dc1961df13f20528c91ab09e12902b5207dcbedb44355c7d9bff39cf80b`
CRC32	`028827B1`
ssdeep	`3072:53dqFlVidIPUtNu2A8IIw4LpTq7NvDYDDJ96Ypp:BdwgTujAqRvDYDX9T`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	dd8bab44a18a96c5_360netmon.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360Netmon.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`9819a3666014fde7591be12b6705ff2c`
SHA1	`0442d7c42af8d3ae1876431659c58f2fa62927c5`
SHA256	`dd8bab44a18a96c52bdf5497cb4a70af2db76023deffdff0ee5862890cd2cb35`
CRC32	`0271E83A`
ssdeep	`24:QlL+xTibeHeluCIOZywyVExZpL36DEOmSO4O2w42Ny:y+xTueH6uCI1nVwL4EsO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	dc798f243abed35c_wqqdfqwf8ey962nqodfpoxvw.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\wqQDFQwf8EY962nqodfpoXVw.exe
Size	356.0KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`85d5f48936711b108ff2149102754e87`
SHA1	`e1648c7346786d409478fd587c89c1e927f79e7d`
SHA256	`dc798f243abed35c3c7345de86f8972b12ed0422fba5289bc1c47cd0a7224c74`
CRC32	`D7724FA4`
ssdeep	`6144:bXE9yggCg6Y648IlG9dInKkvDIl6NTqROrIXnda:7E9yggsY/8IlsAhMl6NTvqn`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9618b5c24c267963_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\NetDefender.dll.locale
Size	25.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`711c78e327a1f01624dec99c918a1f55`
SHA1	`5e0b00e66d15a8e0433e41510a2c7607b2f2ca19`
SHA256	`9618b5c24c267963277831d4c410e7cb6d627550b06e186e54b525c248bde3b9`
CRC32	`7D781DCC`
ssdeep	`384:7LtPSA+QssYf/5RcOfI76eR3KJ1M/ODGPhCZUQKvrfpMQ3/k:XtPSA+QssYf/5RcJb9KvM/ODGpQwJk`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	6fa6e7d13b2447f3_leakfixhelper64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LeakFixHelper64.dll
Size	386.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`2e54bd84069dc13b75779303c24e6fd6`
SHA1	`dc2d908c094cfe413c0e7f94fead2c9e5ac1d2ec`
SHA256	`6fa6e7d13b2447f33f3939594d6b280e091c3f67ab407f5db1b860954abe9644`
CRC32	`25359ABE`
ssdeep	`3072:ivYk5XyZGTAIFsttSaNQtbtZwClxUZlCKgmYPwOXGShnmgDbmDhG:ivYUyZGTFF0tSIybtZr7Qpgbkkx6k`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3a7b02d50f7e80ef_groupmaps.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\GroupMaps.ini
Size	1.5KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`dfdd4bc9a2762462f5349a57c17520b4`
SHA1	`cf979329b12407e3a1f97165ac06a08103b3d5e8`
SHA256	`3a7b02d50f7e80ef358f3b7e9e3ea139ba9292f127db458ef50bf186694df62a`
CRC32	`65E90362`
ssdeep	`24:QbnmQ26E+xp+UXN2GZFHuZ7kbtqHIZGokWRDdJ8ia/J/NA0mrlC:0nmQ7EhqN2E1e7kbtqHIZGyBaBlA08lC`
Yara	None matched
VirusTotal	Search for analysis

Name	7a6da62266c1dbe2_360tsliveupd.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360TsLiveUpd.exe
Size	1.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f5df8943bab4c0cfb57959f0dedefb19`
SHA1	`f84c1cb3fcadabed93d8eabae7a1b333a5e8a5bc`
SHA256	`7a6da62266c1dbe2cd0d715fb8b63db33e2893710a32cd30f9e4c2429d1c7a39`
CRC32	`E1426863`
ssdeep	`24576:bqyoppMC3ezCb30zKiKYl+jX+Bk5N9ndZlW0Uc04KzThfuvG51rI2d3VroatPg3+:jQbkzSYl+aFUUhf3LIE3VEarMly/`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	af61e910440903a4_e0f5c59f9fa661f6f4c50b87fef3a15a Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
Size	252.0B
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	data
MD5	`5befc1472b362bf2aba15cb1845d653c`
SHA1	`b9bb5f1a4cf254d1ceecb1afd74b3ac123a5a2cb`
SHA256	`af61e910440903a4d3429ce42c7484a7a017a6c5e3710d896ee1832a46cb3044`
CRC32	`07BC2753`
ssdeep	`3:kkFklvZ1fllXlE/E/KRkzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB8V7lnklc:kK+Z1xliBAIdQZV7I7kc3`
Yara	None matched
VirusTotal	Search for analysis

Name	2a82a1adedb1dcb6_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\ssr.dat
Size	51.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`84d5c1483b5283d06982a2eac2f38619`
SHA1	`8533d8a2e92734dc5e894a2972191061053a7cad`
SHA256	`2a82a1adedb1dcb67bb5246c8bf46ff0de6b43357bff4e3ecd9ee193d7a3a67e`
CRC32	`F55C98E4`
ssdeep	`768:HLe2tQrGeDtFhbYa5itKAH0xTlHWf/3GULEjtdv+GjAx8m2icSaYp7tBAqKMFl+K:SK+XDzhbYSitzHz/GUIj//8sbUtBcM7r`
Yara	None matched
VirusTotal	Search for analysis

Name	89dc41f5c407c2cf_bifdb.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\bifdb.dat
Size	30.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`313391b61034e22acb4d12d770ffdb08`
SHA1	`96ede06d1b5bb8cebb75110883b844fb94d07697`
SHA256	`89dc41f5c407c2cf03a2e402f978942f8d680280f925c8ce53eb0ec77fca7b2a`
CRC32	`7A18673C`
ssdeep	`768:EA5h8s33xdEHmdGjAAEUsZ0nrUOcTiMNjcji7Rf+rSUj:X/3EGdGjBs2UOO2i7V+j`
Yara	None matched
VirusTotal	Search for analysis

Name	3675b186ae04c302_inetsafe64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\iNetSafe64.dll
Size	597.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`2a37abc9d9a84af70224232fe3ddf72c`
SHA1	`13b007dcee749ebdad4cf57ea57288d522c0338e`
SHA256	`3675b186ae04c302c11b57b1b5c0c28145ae48b28c5dfc6f9943445a025b4b27`
CRC32	`D5D50847`
ssdeep	`12288:uirK793OLeQ8quQtTxArnhF5hyzazoTBm/w2mTh:uirKceQ8quQ6hFbv2BmI2a`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	63d925ac60e24e47_360safemonpro.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360safemonpro.tpi
Size	1.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dd71b2efcf4df3ec15d2631cccf9865e`
SHA1	`20c571bca718c6bc4abd5b2cc016d2bbaff8811d`
SHA256	`63d925ac60e24e47db65563304ee591d9986c60bbb74e29f4c83e7ab116fb69f`
CRC32	`162BF062`
ssdeep	`49152:1lh82MRazG7em1CfDQkTHQBwJ4T333SUoB2n:1lo2mOTHzQSUoi`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	dde9d81142e6baba_libzdtp64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\libzdtp64.dll
Size	573.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`b3d774b86a2939e519404397c517e108`
SHA1	`1ee0e935139a28f9c2cf240781d17f4f740418e6`
SHA256	`dde9d81142e6baba78d28da8ad0d66ac5b00e3cb97d509a865491928bb388f19`
CRC32	`30E0961A`
ssdeep	`6144:1WseHxm970nveE9FI4ZrMttPleVNrotXuYB7+sN+p8x4V1NpHXZHohyfMjOm05ZY:1W9sWveXPttPaNr6OhVNVoIfME450A9l`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	60ac2f8f4e204a83_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`77196bb0ac87b04b8018a3acd42b4b0e`
SHA1	`19af954e7c1ed4d40d6b0a3cac507a51611a2ac5`
SHA256	`60ac2f8f4e204a8324cd5b90b939c913afa8a770bb73f3d878b645529e4a3ff7`
CRC32	`9EEBBD04`
ssdeep	`384:7g7tGItDGiSmwUI7nOSeMOTjrA8nQJ+MQ3Voy:s7tjDGiSvKrAnJeL`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	28ac7925f440aee4_filemgr.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\FileMgr.dll
Size	548.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d23d79f0f6e048b6ad42179b73e305f3`
SHA1	`61e2692a0c34b273a84310ae38b7dc8802650b1c`
SHA256	`28ac7925f440aee4d71e25e0325ac8325c3517fcb3cac89cdfe096ae6695a401`
CRC32	`98AC1516`
ssdeep	`12288:nNsvNVA3/TgfpMaL8oIssXcEyPwwCrxONlP/u8GRLMdqEMhZ5Xup9Mw9j:N97AP33u8CM5Mn5+pZ9j`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3b47940bd8deaee7_smlhelper64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SMLHelper64.exe
Size	151.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`307208efbf8a7d1706e45c2dcdfdce6d`
SHA1	`8997863875b046d5a0ef6dbbc5056a72cce9a898`
SHA256	`3b47940bd8deaee7449bd14832440567fa47b2003891156359b82338e56076f7`
CRC32	`EDE072CD`
ssdeep	`3072:TtxaFrwK/1uTuZ75FzHzDSPq56/pakRUkIFujW:T6rwajZ75hHw/Ux1`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4d1a978e09c6dafd_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\ipc\NetDefender.dll.locale
Size	24.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cd37f1dbeef509b8b716794a8381b4f3`
SHA1	`3c343b99ec5af396f3127d1c9d55fd5cfa099dcf`
SHA256	`4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1`
CRC32	`B09D0BB9`
ssdeep	`384:7syVo1VK5ysI76eR3KJ1M81rDGPhCMov05MQ3d:nVAK5yTb9KvMcrDGroY`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c2f8e01f4058fede_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`532d591ea1ec4d0dbf7b4eacf534d91f`
SHA1	`c8499ce81b27e96e9ef0ebc3c9a05e8d6530bf00`
SHA256	`c2f8e01f4058fede2a926b21524abfa00b5c0fea0c3f71f595959f0e2f4381bb`
CRC32	`0F6551D7`
ssdeep	`768:ay2lF/WFLLpAEl6Zh7laV5tQ01xtY+6JWbrdvNBMUr1fE:z2kLlARh7IGJWbrdvNBMUrm`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	efb45c44b94103d7_hqq5hqzm_3a6mpkg76jah2q8.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\Hqq5HQzM_3A6mpKg76jah2q8.exe
Size	5.5MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`be8a94bb2f3ecd49e327ae7c3c6cf3dd`
SHA1	`de998d83fc381d8b351a9dec0950021c887a327b`
SHA256	`efb45c44b94103d74d36fce390231dea9c0a001ca181f9cba1f267b3e22757d2`
CRC32	`38FDE1CE`
ssdeep	`98304:m4MNANOeGxSe0pDIoBYayQrLb6C+A+THETp+GdFFPRbFXAyLrFU4WK7sy022Qy3:LyANsxSjMbXQrLmA0HE44FJ5QOJU4WK4`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) mzp_file_format - MZP(Delphi) file format Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	d1202ae5bbe15410_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`84422e85b69fc19673a307f95f7749f7`
SHA1	`d64ca005efccee8a3560259f5e28b3e849f7aa0e`
SHA256	`d1202ae5bbe15410d878214ba2f3a822dbc690ff0d4a5c9387524845bdca616a`
CRC32	`978ED091`
ssdeep	`768:D3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqrVO/rfroLotuu6ZP:8KJSpD9+1tFGHXt+R4r3uFZP`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	08b8229ffc49e416_bootleakfixer.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\BootLeakFixer.tpi
Size	410.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5cf559f92c327ad22772d673898f7394`
SHA1	`83f12fbcc170e03d2ea159ebe02dea17fcccf935`
SHA256	`08b8229ffc49e416b37280a9bfc64f7a97fe0be634632438e461e29cf5bfd690`
CRC32	`278D3D4E`
ssdeep	`6144:g49CUYaPQ805c8GU+08ZPkiNP3TJbyOFSCR3c1PSQ8BMsP0Oumh+h8vAmbrzDXd:gmC7a0uuEpNPDdyuBMsPihFm3zDN`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0edc6fad1b41b129_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\NetDefender.dll.locale
Size	21.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`eb5be74c35c493613d9742a729bf8cca`
SHA1	`1af1d062d3a10a2f14bbe416fc694e35ab19b49a`
SHA256	`0edc6fad1b41b129854021a1256c0b1832e164e3676fbe377bac94b79798e5f0`
CRC32	`C3E510A6`
ssdeep	`384:746NciJm+/U65pbKI76eR3KJ1MLfp6DGPhCcYXQKvrfpMQ3ygi:RC65p9b9KvMLx6DGdyQwcgi`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ea826c3bdf6a139a_quicksearch.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\QuickSearch.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`61f50f9740e19237338ecd759f8dfac6`
SHA1	`5195bd02fdaa1416193a25ca504cbcc7a17f66a2`
SHA256	`ea826c3bdf6a139ae2f3c8593508d4ca1ae5d910dcdebd3223e6d4caba858bd5`
CRC32	`54F093FA`
ssdeep	`24:QlL+xTidotNomqt2Bd2mqZywLVEpHp9X6UEkIh7l72w42Ny:y+xTMqNfqtmd55OVEvih72F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	41fc1d658e3d6795_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\deepscan\DsRes64.dll
Size	66.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b101afdb6a10a8408347207a95ea827a`
SHA1	`bf9cdb457e2c3e6604c35bd93c6d819ac8034d55`
SHA256	`41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be`
CRC32	`E1B1EC08`
ssdeep	`768:2E4ul5xBj/wWfZb/XFeoy5yFYECG51gATSQPA3MQIGduv+Pocc3Q73whrm:tBbwYh3X27dI+wJQ7gha`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	23abaa336e8eed44_antitrack.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\AntiTrack.dat
Size	2.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`1cdd0f17cbaed71d7e76bc111b19b7ca`
SHA1	`a5e6cfac37cac24f7610b14392f8e61ad657ac36`
SHA256	`23abaa336e8eed4465e630ad486cf5076d29dfeb936efea6369cf758d7721c30`
CRC32	`1F3FB104`
ssdeep	`48:MldwEXA7/W6MtbiBbOfSPUJmO18ZODJPj85hTxlT7vLFVE:UVX/6YhaimOmZOD9jonl/E`
Yara	None matched
VirusTotal	Search for analysis

Name	d7fd51f9baaa1734_temp.7z Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp.7z
Size	94.3MB
Processes	3780 (360TS_Setup.exe)
Type	7-zip archive data, version 0.3
MD5	`9205549170de0766aa992e21df6245b0`
SHA1	`be3b720cd8686cd94751c8127da97ca2e5869cfc`
SHA256	`d7fd51f9baaa173476eb4d426da85e4a9c42ca6c997c5b1f78080d0f3863b6e7`
CRC32	`BD5A2D6B`
ssdeep	`1572864:8M3EUdWBHVtVvHMLEjQIZcP1/DNfOB/MCYdGTiv+/AMxepV2fNr90coE3ElnH:D7diVE4jQIoxmB0kOG/7xoVU90JE0lnH`
Yara	None matched
VirusTotal	Search for analysis

Name	e51d16a15a76a1c1_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`8cf340cae39c8c92f61c31c34e22aa23`
SHA1	`f06aa290d5086d47ab7423d45cc6bda7929751d2`
SHA256	`e51d16a15a76a1c106e49bc10efc2db54b08d27152a3ab190bc1ed6bcbb24f76`
CRC32	`916A4AF3`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsNg6PCabR:r5u5/+mMks5qTp1mNqce9Oo26aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	c34be80126aee1cd_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\UDiskScanEngine.dll.locale
Size	16.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3bae95e828a72279cfae44586767f433`
SHA1	`98c39b7faba22044bfad0731c7586fad4bc3d7b6`
SHA256	`c34be80126aee1cd84b3732309d9360a501477661f87eb08f7ac6bd5468b497e`
CRC32	`F617776B`
ssdeep	`384:79Ep0SZ3fjc3I7nOSeMrvjV5JNNzFwhhizKeqy:ZEp0SZvjcYvrL3whs`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	2e07dc909efb9d93_cef.pak Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\cef.pak
Size	2.2MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4d991b6db94e823aac8cef6eb1959662`
SHA1	`84856f2eba08c5ad2df6a946e0eb7519bc9fb6cc`
SHA256	`2e07dc909efb9d9316e15452f168581966bdc7ad8fb607d3d3a339aaa8dc0266`
CRC32	`D0571B61`
ssdeep	`49152:m+jA+bQaVNVtw5uwB2UKO0GGxsbMFsEMtggb7xqk2UQfVGGG2pLTux:FDGGG2pLTux`
Yara	Javascript_Blob - use blob(Binary Large Objec) javascript
VirusTotal	Search for analysis

Name	b6057c0f78439eb2_antiadwa.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\AntiAdwa.dll
Size	2.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e8e931c6cb67081bf61678ecd8f02e88`
SHA1	`4a73a3a5498911a618e00fb4b108e21b6c55509f`
SHA256	`b6057c0f78439eb23a402fb53430e07e00bad0c7e460c2a1cea80b51f912e35b`
CRC32	`E2732738`
ssdeep	`49152:SGaGIFzKwpaUcqVCFWwn+MJT35EkdhHnUBfSe/I3QsPI8mlX1:vIFzeyCWwnZJT35EkLUBfvWQsPIR`
Yara	Malicious_Library_Zero - Malicious_Library Win32_Trojan_Emotet_RL_1_Zero - Win32 Trojan Emotet PE_Header_Zero - PE File Signature IsDLL - (no description) Win32_Trojan_Emotet_RL_2_Zero - Win32 Trojan Emotet DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Win32_Trojan_Emotet_RL_Gen_Zero - Win32 Trojan Emotet Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	54d66504718e7783_wdui2.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\wdui2.dll
Size	742.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e1223a3cf2e31dc4c39b23d9ddd416d7`
SHA1	`740c4da3149a78d639663931a13650d641e21b92`
SHA256	`54d66504718e7783fb2c3d377426763411d75a23c5ea71047a8bb7af6cb8e36f`
CRC32	`17192784`
ssdeep	`12288:IQEZMK46wyPtcHmYJVx7j3Zm66gjxfsEGTG5eKbHepeWO62TrypE/t5CRAsU:IQEZQ9HmK3Y8sE3onpeWO62TqFU`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7b72a29a90cd41c4_csp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\csp.dat
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bbe8a462228b1b4b5ce243b3e7354636`
SHA1	`cf25e103f461c77d41f1ae09770a2cbf7e13a7fe`
SHA256	`7b72a29a90cd41c487f0c7809b5e3351d5f6c0395addbe800009415bea406d67`
CRC32	`171E91BC`
ssdeep	`192:f3OiP31FTu2iYE/l3Afr2ZmQztTgfnViT/y+oGCnLMjLSq:fBP31FTudYQ1mQufng/ywZPz`
Yara	None matched
VirusTotal	Search for analysis

Name	28b071d494453123_360internationtray_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360InternationTray\360InternationTray_theme.ui
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`8b6d541292daeac20ad7bf57db5b2dd6`
SHA1	`7d3463bcf6132ff98647e211e9391bef67aa13f5`
SHA256	`28b071d4944531234b64bfa1bb9068c64220ee48c8a60afa3aace2a69a599198`
CRC32	`FEDE2F79`
ssdeep	`12288:ybpCj/c8o9bpfuZnhMipxVqe+gY4fEpOcWEHBUXP:eCD7obmZn3goBP`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	a8207439b9cc28ff_minirame.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\MiniRame.dat
Size	4.7MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`111a17b8ed53571845a67318927231d6`
SHA1	`7aa7776306978d2152a9af13306a7c0b3ea3ca03`
SHA256	`a8207439b9cc28ff790af1a6a9c5208d355fe0346d52876965ee7f27fd818867`
CRC32	`BC3497A0`
ssdeep	`98304:8n33YCEBpxshhJDzIGfp9bvP8AZYk0lh0G1vtGUtx:8n33vE3cvIsL8A/IhzLR`
Yara	None matched
VirusTotal	Search for analysis

Name	879c8f5963ae1e69_promoutil.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\PromoUtil.exe
Size	1.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`e398b0579e254ddb3aeb5333febf74c7`
SHA1	`948ecbf8527eab15a6d27b7108cd96e8b3169dcc`
SHA256	`879c8f5963ae1e69a59316a9e581dfe2ab825a6cb657be2b4f39b3eecfa71181`
CRC32	`CB50744C`
ssdeep	`49152:Lyh4vwR0DxlxC8E4JiQADg9PGmnlGrrAs/T:1DxlxCJKiQ8g9rcrn`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3568619f7b96a595_psconfig.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\psconfig.dat
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	SYMMETRY i386 .o not stripped version 1162167621
MD5	`f11da41444fc34600be2a0d012098d00`
SHA1	`eabbbb46d414f0eaa533cd76b04451eaf6d95bd9`
SHA256	`3568619f7b96a595cabc6657266f142ee907de43f3460ac0c4e2c43cb4c82de5`
CRC32	`C8C3E09C`
ssdeep	`12:VrWr9o3BXaLMKxZXZstzsAVKNnXqSn1V9hNVqXbC:Vr0sBXaVXXZstzsAVKNn6Sn1X7VqrC`
Yara	None matched
VirusTotal	Search for analysis

Name	0807681fdf3e18cb_360safecamera.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360SafeCamera.tpi
Size	430.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b069b9e19603f21de974803c8db1a8b5`
SHA1	`1bcde0cf0fd97721c70d132e2e2cf034a4edb886`
SHA256	`0807681fdf3e18cb3e6ea76bbfee9938fc9b1afd9b198f033d44467b3554fa19`
CRC32	`5514EF35`
ssdeep	`12288:KLdgN/zTpLsCK9yNl9sOERzCUsvyhtOp9cP0Q2liUlYa9I:s4vQAo0QabYa9I`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7fa8351d94f44fdb_netmon.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\netmon.tpi
Size	365.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1ac8d58c7da3b2c286b78352c4c2a73f`
SHA1	`5f85296795485f9bbc0631b786545ef1098a0e61`
SHA256	`7fa8351d94f44fdbc7a955dc916f9d55e9d521613c1855f51b4ab8c1131890b8`
CRC32	`1369BA97`
ssdeep	`6144:PLIW1XUU08US2hugzPCOuJctydKoyYclZ0lVJ/:DIWFdRgTCOuJcEd1yuJ/`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f6bde459185afe2d_cefutil.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\cefutil.exe
Size	10.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`81cbd2c27c1202cf9dfb8374366f24b9`
SHA1	`c55322c4e81bf96c3a1c451a9b2c2836a8b67d1a`
SHA256	`f6bde459185afe2d5b3a220d3693b7f3cc9e940234f7f9c923244dcb4701160e`
CRC32	`AE78B2A7`
ssdeep	`196608:y6T+7mOUgAjk3MVMP7mxl2b+2WYZjU15obkTQ89kxgc3bbHo4QY7iUT0el8:y5vWjk3mMP7mxl2b+2WYZjU15obkTQ83`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8934829166eb2ae4_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\DsRes64.dll
Size	66.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d73e159cce442bcc09a31bd3b5644df3`
SHA1	`5c9da18f04534053b752eb0fe1d1aa1702c2ddaf`
SHA256	`8934829166eb2ae44a7df7863a93cff3e97862d3bd48b6212075593b83f09bb8`
CRC32	`87568237`
ssdeep	`1536:vWPrlAMh74JcFRo7du8Im6m/mNXDpkBA0N:vlJcFRohu8Iy/ONo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	422a7f0396016351_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	111.7KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`f09f660eafeb53b9ea92655c5fa86008`
SHA1	`cf62c90bec5e36aee3dad00d1708599fa75acc4e`
SHA256	`422a7f039601635103ec417710f95a6d497f337395d3fe1f4de6f05dfe5bfdb4`
CRC32	`9D0DAFFB`
ssdeep	`1536:s3Xt3GzvyD7P6UDQV1q/Cc4eyqWHgnkNYyJwx6NTOt72re6pSSCgRljMBbPDr/aO:2XMzaSVWqc4eSrETqobPDrCzkxlZ`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	017cea758ba90084_360netrepair.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360NetRepair.xml
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`fd317b9c56d89a8a921d45d572af1f94`
SHA1	`b2ab0249ab7aa3a9dd0b4455f4d980ef987ff551`
SHA256	`017cea758ba90084f5d168afdcf8d3ebf7324a7b12d1ed7dcf31a276652b5b5e`
CRC32	`FD5E046E`
ssdeep	`48:y+xTPeakRc9cGOVh02dLbEcBqdY/4J2F2Ny:BP56hVhJdLpoYWy`
Yara	None matched
VirusTotal	Search for analysis

Name	301406355a71613b_disproc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\disproc.dll
Size	91.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a9c1f9dceda79a57bee414826a76a65a`
SHA1	`2f9ac9388520c77cc1b44d9e6af5214a97116f4c`
SHA256	`301406355a71613bb18fb67dadd18362fd0744e3dc1422df4214f728ad31e761`
CRC32	`F6A00AB3`
ssdeep	`1536:TGurKTzN/wkQtf617oRWwMksSiMloawyDJpauny8Due+fZG6KeZV/z9leLkeMu:8N/tQNctzCz9pauny2N6tZNz93eMu`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	9f6f6a3d8271aa36_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`feebf9f9e48147d1b623c67da7af2fbc`
SHA1	`16af1188b9560034fc072bb2fe11ea08408fa4ef`
SHA256	`9f6f6a3d8271aa360f18a55d4d093d13d38972697aeb4f4a090d96eb3da418d6`
CRC32	`FFCF65FE`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLs1g6PCabR:r5u5/+mMks5qTp1mNqce9Ooe6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	74b367520b64a746_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\Safemon.dll.locale
Size	53.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`281e48652ece01f31507279c24acea71`
SHA1	`62788b0564a87dfa01793bf5a5ba0ce9e421e0f8`
SHA256	`74b367520b64a7466d444f973e3311bb60157982783985993230e899bd47f1b6`
CRC32	`6BD51389`
ssdeep	`768:7CG11xWF7Lp/El6Eh7lKlL01H+6JWvMPJs0lBAxjV3:mGa7l/8h7D1JWMq0lBAxjx`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	63a73df41533120d_inetsafe.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\iNetSafe.dll
Size	571.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`142683cd14916a78ed38c8a8000b8584`
SHA1	`dc6721d202cdf40910c40258a681036ebfc90185`
SHA256	`63a73df41533120d0dd7062ad49cf69ef4cad42a4b405b84a76d228b12d0ac80`
CRC32	`26BB1A09`
ssdeep	`12288:HEczExa6SyUd5SGfZ7PVIa1j9N8ljqdT/PUS6Mo7SbXN2JBAusU/1BcBO9xrmZ:yc3eU87iXguuHBcB2xo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0ba6cb122ff80f4e_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1c2510825964b2c836f193d4c7ea3d98`
SHA1	`f55e2d59a8ef7bed2c0dfa192d79fef261d5d503`
SHA256	`0ba6cb122ff80f4ebdf9c6133ac97611f95e922f12c0c3891b2c10bae4471387`
CRC32	`57F69E39`
ssdeep	`384:7Ca4GB2neR3K+h1MeK6jm7zDGPhCPQKvrfpMQ3R7X:2a4GB2e9K0MeKgmnDGoQwj`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c0cf1e146c7cb4de_n8nzdy9invsubll0tqi3q6ii.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\N8Nzdy9inVSUbLl0TQI3q6II.exe
Size	2.8MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`940c9c1fb6ca5d3979e8d0bc6d9e1f14`
SHA1	`94ac619d3bfbd6586212c7632eb39b4d4e336c14`
SHA256	`c0cf1e146c7cb4ded04c4ea86e5e1451d0985ac502e9619944a99fca5c3761f9`
CRC32	`13FE612D`
ssdeep	`49152:TwCtop/TE81ubXW94LGyUgVJvcCjtggtc3TH3hu:TwCD81ub+47HJDgguH3hu`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d34cacc48a36200f_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\LibSDI.dat
Size	96.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`68e9db7650c40c6d774ea5a815023bb0`
SHA1	`55ceb980e8734bed4c980157fa3f29687be2f8cf`
SHA256	`d34cacc48a36200f59601500682b82b6595906e4ae05e8ee0b1c566b487f7f29`
CRC32	`0E485C48`
ssdeep	`1536:+2kxMiHBkI+0vtDDz1NmIEJQWzhlul52Zetw3TyjwboRsUzE8Mj/jUFmRnH6ol:wpBvxhNx5WuHwPobE9oGnHfl`
Yara	None matched
VirusTotal	Search for analysis

Name	b10d5fef165fc89e_!@t8245.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\!@t8245.tmp
Size	656.0B
Processes	3020 (None)
Type	Microsoft Cabinet archive data, 656 bytes, 1 file
MD5	`184a117024f3789681894c67b36ce990`
SHA1	`c5b687db3b27ef04ad2b2cbc9f4e523cb7f6ba7e`
SHA256	`b10d5fef165fc89e61cd16e02eac1b90b8f94ef95218bdd4b678cd0d5c8a925e`
CRC32	`4EB6CB38`
ssdeep	`12:wrtrk9cAyVu8J7KZxUxX+NrmAjs6jqtgja6Ti0eR/WAd1O69p:wauAcJeXUxXyxjVtBeR/Pd1Fp`
Yara	CAB_file_format - CAB archive file
VirusTotal	Search for analysis

Name	419c2ed5e04d78a3_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\DsRes64.dll
Size	101.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b1ef5e448df0e546dc29db3a5e93eece`
SHA1	`140df1e1f8251ec402ded93ace6f2aeb0260b602`
SHA256	`419c2ed5e04d78a3ef91dbe91a973e40ac175181552a5913b4ded3235429333f`
CRC32	`3B3B6FFB`
ssdeep	`768:bSWFluWFrLpAEl60h7l61HE01dPoMRoyLbhAk2dlbsUdUdemcnEwB1ZkdmU:2WPrlAMh74pdFRoy8dlbsClEwB1Zk0U`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	39e460cd1d2e0b0e_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\SelfProtectAPI2.dll.locale
Size	20.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8b33a3a035659528fb3d1a8fb1aedcda`
SHA1	`38741573f8a580945f3f573b3452ed6228b8f9e2`
SHA256	`39e460cd1d2e0b0ed161eee747aaa5987bcef723480be1104914af3f4baa1669`
CRC32	`5CEFD793`
ssdeep	`384:706huhpyGF/e2xNEPI7nOSeML/KhojGR5JNNzFwhhiO:BUhpyGxygvKQa3wh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	27493b9bf6590b38_networkmon.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\NetworkMon.exe
Size	1.9MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`125664a503f5e960de04cc059a97f692`
SHA1	`7f82b8a837c3b5d32556ff40f85c902ab62970d3`
SHA256	`27493b9bf6590b38982917b43bada415a13836a022897266cb83a53ac9cb44bf`
CRC32	`E9D34D63`
ssdeep	`24576:Wn0fN7NxI8h/CG8rG9YFnFBJ2+W4U5ToVVsnHzlqNwQnyNP:Wn0e8Qr8+nFB8b4U5TM6nTlVQYP`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	87eab081ea03e8ab_diagscantips.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\DiagScanTips.tpi
Size	380.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`13f814762509265c6a932ec0db47224c`
SHA1	`ce49c13f986e55b18aa5f5f008247c8b8042035b`
SHA256	`87eab081ea03e8ab44135f4d8435111643e2c2cde035f7592ff665608b7721f2`
CRC32	`A9F2E1F7`
ssdeep	`6144:P7P9814Ekoodei5FBQ8QNvB1JCea+lmGy6ls0dk4HGCcCWkUcu+lyxLdq19gcHni:h+kZJQNvB1Aslty6Jk4HGCcCQ1sP9DeK`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d3e92ccb3d89c640_qhtoasts.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\QHToasts.exe
Size	279.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`b71fe77ba3d0937f7a6b09c30f5770ff`
SHA1	`fae29d450d1583ed1f688f2190bff37cba395ad4`
SHA256	`d3e92ccb3d89c6402f7f4069ecb9f79198b126787abd1bca7c321d0ad8d8f400`
CRC32	`793EB333`
ssdeep	`3072:P5R8snAWBti0jRvgmPzhhVMRZEnY4F+i8YEIpEVzFEsMAl+Js3LBYKPiFQnp:P5R8sAWC0j59zzh00AbiF6`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d4c2e596a754cfa4_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1004136c5bc51ab2d5b824883ee73bb1`
SHA1	`7925c54bd17b5317d3b412645fc3fa88f068b4a8`
SHA256	`d4c2e596a754cfa45e517d0581b84063ad7cb0a5c9a99ecde7cf3f1d1c519ab6`
CRC32	`4F4DFDA1`
ssdeep	`384:7FutGwtIGjFKRnhI7nOSeM0TjmIA8nQJ+MQ3NWxO:JutjIGjUpayXAnJaWY`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c96464ed90edf2c9_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\appd.dll.locale
Size	26.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7ca3e47ceefb1d0854fd0d2d58148901`
SHA1	`dc8eb47966b856aff598b982ebf5c93bf2115743`
SHA256	`c96464ed90edf2c983557db8701d13dbdd2600f4ae150b40270d6e231a1dc215`
CRC32	`3A605B5C`
ssdeep	`384:7j4ZspTPHF9mAJM0Qtl16eR3KJ1Mn8E9VFK4iwKOSiiDGPhCFsYKFKjqfvGBkSuV:nnS0ql1H9KvM8EAyKRDGCsYKFKcMk7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	12feb4f47c623721_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ba400b2e72e778caf107a329588ffd46`
SHA1	`ed4d0bd719dddba8b5a3e17ae4267201607e2b6d`
SHA256	`12feb4f47c6237217afb846cda758528482a0b6393d5622ce836690eca9f2c47`
CRC32	`5012FCD3`
ssdeep	`768:uy2lF/WFLLpAEl6Zh7laV5tp01ltY+6JWDQfedv5B9PG5:H2kLlARh7ZqJWcfedv5B9P2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	19d32dcee8ad638e_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\LibSDI.dat
Size	101.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`6e780467019cb4b54808b185b514512d`
SHA1	`2aa61812069e8589a4565ca4419c745cb0bd16aa`
SHA256	`19d32dcee8ad638e53912db6f94b5ce42149096ae32b7532eea57590a731a7b3`
CRC32	`58D0B466`
ssdeep	`1536:s+WtM4SPIeKUfcdILnLpx+GVXWWhbwexe5iJBaEyXcR3ezf22lXmmOC+ND:ctneKZILLpxlFve5xcR3ezf22sJD`
Yara	None matched
VirusTotal	Search for analysis

Name	898bf5db34d9997b_7z.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\7z.dll
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e74067bfda81cd82fe3a5fc2fdb87e2b`
SHA1	`de961204751d9af1bab9c2a9ba16edc7a4ae7388`
SHA256	`898bf5db34d9997b3d90b87091f34ae4e3e9cf34b6f2ae7fb8fd86e8a1bb684e`
CRC32	`C3489972`
ssdeep	`24576:3W0UltW4A15Q+XlcGjHXipnalbw7V5WvzG2:ZUlM4Y5Q+XlcGj3YnalE5QB`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) ConfuserEx_Zero - Confuser .NET IsPE32 - (no description) CAB_file_format - CAB archive file Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet
VirusTotal	Search for analysis

Name	be488dbc62fd81fc_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\360SPTool.exe.locale
Size	30.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8f6e965a4fe38c5f1c35b6bb903f795d`
SHA1	`a4b0881fc2130b442def6d282882274450cddc7b`
SHA256	`be488dbc62fd81fc486c94c9e609dcf0f7e0309e3c0d818b7b3a71a8eff01739`
CRC32	`6116B453`
ssdeep	`384:73acsultAgwBAP3Excizfbm3/MCLz7eMCFM+5:vt4B23ESYfK3095`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d53821ee159bc323_libleak-64.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\libleak-64.dat
Size	3.7MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4e8bf72ba9d7975a1372066d89791604`
SHA1	`c0c0d992b9c5828e5affd98bd2ebb1f90be93adf`
SHA256	`d53821ee159bc32356b0b63164a52f45b942031a2920bc20140528071f17e49f`
CRC32	`D5210D8F`
ssdeep	`49152:gpMpkpNpUlVxUK0MVPIjNJLpOrpBNw7x1K1zUYjlVScV:gpMpkpNpUl+jNJLpYNw7x1K1zUi`
Yara	None matched
VirusTotal	Search for analysis

Name	f9f2da182ba3bd71_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\DsRes64.dll
Size	108.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4dc3dbc8cdbfa1affb76cc0a89dc31fe`
SHA1	`1c7f9962148daef70815dbdce0d7542eeb28d074`
SHA256	`f9f2da182ba3bd71a83288858bde9af9cb4602fec7bdf64987d8e4b5767f6f14`
CRC32	`6536CDAB`
ssdeep	`768:zSWFluWFrLpAEl60h7l61Hz01EPoMRoXg90Yy1a8zBnpTT8AvgYagjCMnSKJcyS2:+WPrlAMh746EFRoXoRepcErzWBBxo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e4bc20cb89a35695_360desktoplite_config.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\360desktoplite_config.xml
Size	2.7KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
MD5	`317389a32c0d48a482f8453e5bbde96b`
SHA1	`08c5d3524d5233ff9fcadd92f6277a0318cb1900`
SHA256	`e4bc20cb89a35695f6a154adf9f2da9b9e6e548c49dd08cbc858995235f2503b`
CRC32	`7E7C4591`
ssdeep	`48:y84jibnHiMjR6LAX3H69i8TRVzHKTxgHWvW/OMG4V4aQrkHTCO:txHpjR6LOHGTnH2CHWvz6ekHn`
Yara	None matched
VirusTotal	Search for analysis

Name	5826c791a86ace09_condrvfix.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\CondrvFix.exe
Size	129.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5	`ee99a8df97443b9a42ce28c9e4b81ae6`
SHA1	`b434d08cc74ca99cc2eada6b933b3626139ddd1b`
SHA256	`5826c791a86ace09a2a9c2d5b9aa5d5a32057c2d821fb68c980ffd0e6aecae4c`
CRC32	`28C7B74D`
ssdeep	`3072:kdRGsvFggQcyz3nYVQSY6CQPCkjkK8d8AKgTnfV/9R:k5CYVZFCQPXUGHm9R`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	0352b4b7908255b9_360boxmain.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360boxmain.exe
Size	923.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`209ee3f2b59730ba6e1413c3e0c6ee09`
SHA1	`de702e0f1571fdc0e9c31dd289572c6d5fd688ad`
SHA256	`0352b4b7908255b9487e3581a521152b7a0ab62e428f13186d23bf41c3e3941f`
CRC32	`86AA6930`
ssdeep	`12288:gIaLswXCEKCQDqu+Q67w8P4B2NoCplBC6fFLEbq8eH1RtI7ZU3rJqn6rQyaUJQ5H:K62k8wwE6fibNsRq7Z+rJ+6r9a/5D9x`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	ea8513f676a23f5b_hookport.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\hookport.sys
Size	73.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`a6df39c0432e7b4830bf3eb4e4663e71`
SHA1	`88386c8821bd8a3e33e6d66856bb7f32912ca731`
SHA256	`ea8513f676a23f5b460f3bf1d8697c14dbdf5d828ff2845b677ba9b19d3055c4`
CRC32	`B025E6B4`
ssdeep	`1536:CYrDDnUe2rg97Nd/itEYfdLdOBGD/AdyOVhrQWUSVQVu69+lNn8eoz798q3CP:CWDnkrgVNdzSOBG/AdhVh5WVD9+lN+7m`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0feaf59f9b608afa_axplont.job Submit file
Filepath	C:\Windows\Tasks\axplont.job
Size	272.0B
Processes	1712 (amers.exe)
Type	VAX-order 68k Blit mpx/mux executable
MD5	`2946e301e03a7e94c49d50c8dfbb09be`
SHA1	`5abb6f83bc43f84eced20534bf4e9eceb4ee0533`
SHA256	`0feaf59f9b608afab940ab507add344b78b0b694f36422a4f19f7c1ab2d2f668`
CRC32	`86F2CB57`
ssdeep	`6:diseF/VXE///UEZ+lX1SBiOlnPelVmlAtI4y0lPuet0:diFZk//Q1SBiO9e3G4Vtt0`
Yara	None matched
VirusTotal	Search for analysis

Name	0b07b21e564ee841_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a9c537eedfd7693e62e7fc0108442e22`
SHA1	`618164b6d5ef0fc181bd68c35bb246475db18d88`
SHA256	`0b07b21e564ee841d957c4f14b938c1926aed413c07bef20107b432f7e1b60a2`
CRC32	`1076F72C`
ssdeep	`384:7AMuQgM+9l5OEyIxVnYPLIeR3KJ1MKS+iSDGPhCkNrlov05MQ3u:FuQgLxOEyQE9KvM6LDGBNrloV`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	cfc2718b83d42a06_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\LibSDI.dat
Size	99.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d14131c28cfdb3f1bc0281d3e17a2c4c`
SHA1	`4773986b6ae0e059ebce0f99f8003f0ea4f4fd8e`
SHA256	`cfc2718b83d42a06dd3bb1c23155de63b512a65e851099f3d5745411d9b04a4c`
CRC32	`0C3915EE`
ssdeep	`1536:tzOCL10UoGnN912Ga4YvLP18QYEMP8/S1OMx2AST4vrg7ySps9oodOUuilMsIHJb:E01VoOjsT48a1Oa2AScas9niiGXJATgP`
Yara	None matched
VirusTotal	Search for analysis

Name	39ec30f60c267f22_360safewallet.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360SafeWallet.xml
Size	2.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`8b01b929afbe9dcba35a25c5b51b82df`
SHA1	`7a8ed22e99a755bffef0838b5d87d2d84246967c`
SHA256	`39ec30f60c267f22df2e93afa0e38d6e40f458fb9b1ae6fda6dc0630cfc524a8`
CRC32	`CF19024E`
ssdeep	`48:y+xTs7Xever/kL3rvpVFzFMdXdm4rvpVFzFywvF2Ny:BsnkZzmFgyz0xy`
Yara	None matched
VirusTotal	Search for analysis

Name	287a47dba7cbcb4c_cleancfg.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\cleancfg.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`fb489fae61ced725a87338699227fe91`
SHA1	`6f52e4f08a67cfd67696f9fc47fb518966809b66`
SHA256	`287a47dba7cbcb4c7688f82f17e2020280bd0ee0670abe3c91413bdd26aa9e34`
CRC32	`02A3B2F3`
ssdeep	`48:MlReLuHpGZP9sSLHzx1j2iMDzmcGKNRqT24fZqu1QSPYqih7:kcLapGF91LHzPC5DyKNUT24fZjQjL7`
Yara	None matched
VirusTotal	Search for analysis

Name	af0ce9d61376636d_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\zh-CN\SysSweeper.ui.dat
Size	97.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`002921fcc6a2c4c83c25f1a0cb49b980`
SHA1	`617817901b79f744e59164db8d0afe074e65aecf`
SHA256	`af0ce9d61376636d0e10c2082bd9ee2321e8aa0db73d182976df54b1dc90c484`
CRC32	`E1629AE7`
ssdeep	`1536:ZbI/3C1UDwzRb7Ql7vRcz6RxdYT3RIAJeJ+xQNV/lOzz9G:5I/CC0V7Ql7vy63dSRIeeJCQf/lOf9G`
Yara	None matched
VirusTotal	Search for analysis

Name	51475f2fa4cf26df_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\360procmon.dll.locale
Size	106.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7bdac7623fb140e69d7a572859a06457`
SHA1	`e094b2fe3418d43179a475e948a4712b63dec75b`
SHA256	`51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd`
CRC32	`AB542361`
ssdeep	`1536:PORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3e:POBrUC4jyUJGKzgSg+Yco46Fe`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	bf3585246cb2a0ec_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`9e6fef0bbbcd82f2cfe7cf25cfc44ff5`
SHA1	`1169664042a453daef070f762a03c600ce889bf6`
SHA256	`bf3585246cb2a0ecc4c987578209bcb651a0590d6fcae11466a8d83b18f0e4fc`
CRC32	`91EE13E1`
ssdeep	`384:uAG4Spbdq5EVT3GAlvnT6yUNywHXJSG5SxLWPdFO/BaRh:ObdAEkAZFUxXt5SxLWPdOaRh`
Yara	None matched
VirusTotal	Search for analysis

Name	8bf14ffc6ee05bb8_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\360SPTool.exe.locale
Size	29.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`33f98b36f108092766fa2f82506e199c`
SHA1	`bdf4c2cf372880c9b418df67d2ca7348d06d7fec`
SHA256	`8bf14ffc6ee05bb86c05669097fac69b573d82f97888f8d65c973c9b6be37525`
CRC32	`D989663E`
ssdeep	`384:7BYacsultAgwBAP3Excizfb/Dr7BAzK6vifLyLELDWLSx8M8z7eMIs:mt4B23ESYfrDPBAzK6vijYCDWLSxXE`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0940f591cb25b4d8_desktopplus_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\desktopplus_theme.xml
Size	73.3KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`02477fe3f7f3cb351c045672a105bf13`
SHA1	`7af1f4b90cc20297a07b767c5f1cdbe5bb2661e7`
SHA256	`0940f591cb25b4d8da7bb0651e66ea8ddc52810041bc91dd2da5723fc4367f38`
CRC32	`146F8B32`
ssdeep	`192:ybK2RB35VpTyslblxlIlgl2l2lYlfw0/LeUB2+aWtpDNbWh3Z:ybK2RBpPPxLC68cS1w0/LeUB2+aP`
Yara	None matched
VirusTotal	Search for analysis

Name	838adf933ab24e85_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2531d1b30e8dfc2760671731500aa429`
SHA1	`06a1231a3de53fd3db16cf72fc4d0fb3d024e7c9`
SHA256	`838adf933ab24e85ee72a27f68bacfaa447d0ed46ebd37db95c76435012485ac`
CRC32	`7C4431D2`
ssdeep	`192:7tMBKCMQ0zyMrj1grjzR+vnr9ZCspE+TMArZ3dXeoH:7t5CZ02M8z7eMy3dF`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7679ba7bedd3d4ff_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\360procmon.dll.locale
Size	21.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bdfe18b040b31ce5ddb95a0cbf45594d`
SHA1	`ee74de3324ebbb80c5d5b2307fc8c0c53d139ae4`
SHA256	`7679ba7bedd3d4ffaf3f350a3cfbfaabf23b5d391e78db20ee1c1fdfe484a2d8`
CRC32	`D0F535C5`
ssdeep	`384:7gpsrdJzrzel+ojjvGVQInbI7nOSeM5NjS85JNNzFwhhii1:kpQKlTv2rEVxh3wh/1`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d3de1a9f960942f6_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`2154035484a015a2103e7722fd1bf9c8`
SHA1	`19995dc1f4e7fdbb8f2685a11dd1b70b25e9fb0f`
SHA256	`d3de1a9f960942f6d71c1658c9bb246580ecbaf287c9591ba27d2705630b4fd4`
CRC32	`AE82DBCC`
ssdeep	`384:HAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJCvXr4HNSD:vbSj0SbDQoYZlDT9cPJsr`
Yara	None matched
VirusTotal	Search for analysis

Name	effc1ca8846a3900_bell.wav Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\bell.wav
Size	156.3KB
Processes	3780 (360TS_Setup.exe)
Type	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 11025 Hz
MD5	`bcca16edddd1ac7c3bb3a5f5a0d35af7`
SHA1	`82ed94f58c6f894d517357f2361b78beab7a419d`
SHA256	`effc1ca8846a39001e410b2d8351b76be093342d139b332aa6260db01ac820d3`
CRC32	`8ABBBE9C`
ssdeep	`3072:ZfhJ15D35SypCy40SpVkUWtaZm2vrNIXl6aXGlLByAfRrATBc/fA59:ZZ/5ADyKgyeQkGJdfRrAO/I7`
Yara	None matched
VirusTotal	Search for analysis

Name	9e5f2ff322e71374_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\udisk.locale
Size	338.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`22e0baab1c35aed7bd0c9286769921a1`
SHA1	`6b53ab47c1ce6d3a54307a422fbc8ec35024edfb`
SHA256	`9e5f2ff322e71374aa0174990e481ac1b8d69da4bd3746102b31c4eb98401eab`
CRC32	`8EB224FC`
ssdeep	`6:Q++uimVb89c0GPlpUss1hOQR4lo8FgEOP6KDEOPqaFecEOPqgIg5Rb:Q++ubxV0GQVhhR4HgEbKDE98E9gbd`
Yara	None matched
VirusTotal	Search for analysis

Name	d17477faa46ba23c_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2a7a7f903179394302cf47e52fcb997a`
SHA1	`ec5972a8f6ac68c1765a038538f5e3700b584835`
SHA256	`d17477faa46ba23cd8cc4ed28f175d4327a1ceabb666756b50b6a912545d48a9`
CRC32	`4AAFB507`
ssdeep	`192:7PRMIDyMrj1grjzR+vnr9ZCspE+TMArmreZGQC5y:7PRxGM8z7eMvrC3C5y`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	52b2167470e675cf_stx.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\stx.dll
Size	352.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b389153583106241865696b542a7603f`
SHA1	`0ce5825764b55fc7a961a73a3f8892659ff3cdfd`
SHA256	`52b2167470e675cf5a97f8c9f8f10eba3d5a7e5655bb9d72ad2d749e3e7cdbfd`
CRC32	`19715E75`
ssdeep	`6144:kxGGaZSZ/PDD8MXgyameXmMZoG8Mb5jdaxwrDrTUNGcAAq8:/xyvwixG5b5jdaxw/rwNfZ`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8dc22982025c06b0_patchup.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\PatchUp.xml
Size	954.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`94a8eda0dc201c6f675ca3e4c324155e`
SHA1	`8ab26af7afdca3ed5b7ea176672e9aab77490429`
SHA256	`8dc22982025c06b05405d37a7cb6c0e28e983315f3a0ba09c5e48b590a2fea13`
CRC32	`553B081F`
ssdeep	`24:QlL+xTiEAininZywLVExvpKlTEra+Ux2w42Ny:y+xTA6fOVwqJ+A2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	7eca7a4b155a53d7_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\NetDefender.dll.locale
Size	25.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d6dbcc7d45d3c02bb0048f66e66a471d`
SHA1	`0728eb1b3b12b2fa390486d69796d6aca9c1ca62`
SHA256	`7eca7a4b155a53d7be7518f2902913558cdf9135f6ba0e34ab61361220171e30`
CRC32	`4E544371`
ssdeep	`384:7J85B2CF1R0gU55i1SI76eR3KJ1MWVDDGPhCjov05MQ3Sn:t8hygO5i15b9KvMWVDDGson`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	badbe251c281e994_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`6e3e9beccb612a017e9dec64e3045450`
SHA1	`eba84c445d9884cf95ad82b1d95b91a3070d1499`
SHA256	`badbe251c281e99467aeb23674828bf2ceca6213953a35e8401ee0e48a7311b9`
CRC32	`E4956B58`
ssdeep	`384:etAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJlalIAbF3HQylJ9qHGkEw1o:ibSj0SbDQoYZlDT9cPJl2JbF3lJcmkEP`
Yara	None matched
VirusTotal	Search for analysis

Name	5f21575642ecf7d3_dumpuper.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Dumpuper.exe
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`bf7d946721599d16e0fa7ef49a4e0ee4`
SHA1	`74c6404d63ab52aad2e549b8d9061ee2c350ac5a`
SHA256	`5f21575642ecf7d38be30aef50be623f74dc3644603e0cb48d1b297ae2066614`
CRC32	`6C7038CB`
ssdeep	`24576:VfaQrkd3qdmrbcO7FGIJoZv3p7lRr8osPESs47X4und5GUEv5+6FxTPWtwFjI3XE:ZaAkd3caFGIJoZx7lRgosPEHcX4und54`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	053fb7ef1c144f23_promoutil_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\promoutil_theme.xml
Size	10.8KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`bc55d5dbb5befb3667b7c2e7e3ebf77d`
SHA1	`ebf98aadb469c2d8b2795dec61f9e3b6941f65d5`
SHA256	`053fb7ef1c144f23aad97de1297257da4d3c26e661b5c4297f953c053f161299`
CRC32	`9B424517`
ssdeep	`96:BAnI+W286rAXfM6MJMZMmMPM/Jym1XMlXMiM9MqMhMLurTArytOzMzRJz/eOlgPk:fXY68FTcyDfOXzgKiL1vvFt`
Yara	None matched
VirusTotal	Search for analysis

Name	c594d3875bdc9962_softmgrlite.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\SoftMgrLite.exe
Size	2.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`6439baab2c61892fc2669b4322d7cc71`
SHA1	`8daf55a68296bc322e62a0aacbe819ea22470638`
SHA256	`c594d3875bdc99625d12ce534e4ae17c38a17647f243f9463089eac68da96e8f`
CRC32	`7CB45E08`
ssdeep	`49152:lzfHoM2UyTx0TPb3mazHOu8YADoFPDHH8ZncCowD:20Tj3mazHMD2C`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	36c3286b5a7bb431_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\dsr.dat
Size	59.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`98a81dc239a8a0ee6a9f35b70f03af50`
SHA1	`87b71ee293c8670d0b996ce0bfb3c3186679b483`
SHA256	`36c3286b5a7bb431a33b19f3ecac3e80ef15fd8015aed1abf9f38e3cc06d270a`
CRC32	`8F9D20EF`
ssdeep	`768:iAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAu:qM4A6UAHRHF4aIkBPwf`
Yara	None matched
VirusTotal	Search for analysis

Name	2c8b2b0653ec0a00_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e5cca8512585bc7caea893cc8a1c8a84`
SHA1	`1223f2a176a05e13027c3832e1bcb74e0161c521`
SHA256	`2c8b2b0653ec0a0021171ceb9752d840ba70935bb0c3e6ebd0c5103f89b5e51e`
CRC32	`F4B67CAB`
ssdeep	`384:7cWgEX+9lGmES3+HnYPLIeR3KJ1MuoM/DGPhCoOsov05MQ3pj:++mESOHE9KvMuomDGHOsoyj`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	56c79fb3e3917d87_h_2.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\endata\h_2.dat
Size	2.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b8b1c3b61d375b52cbfde81111c46dcf`
SHA1	`8a2a6840b2c71032fca2bc5a54ed2edf181b7714`
SHA256	`56c79fb3e3917d876aff525bdf528b0888bd3212c519f95435ecd846f0195061`
CRC32	`C44A422E`
ssdeep	`48:zYT1f03VNLtx9mwuJMvJ6Dfnj2CWlOJ3WF68XKlR9pdTAWa5fO0Cqx:UT1cpTcJg0Dfnj2CW0dW/XKxpdHa5d`
Yara	None matched
VirusTotal	Search for analysis

Name	b004e8e86e2fdf24_360camera64_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Camera64_win10.sys
Size	56.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`bcc43be6e1c970aae8dbd3d807cae522`
SHA1	`88c0c1249189c4cad5c556c66e6f31b1ffc9d5a1`
SHA256	`b004e8e86e2fdf24a94237d9bdb42da1bcbfe3aeecce927c4ef2604a704758f7`
CRC32	`9FADA029`
ssdeep	`768:wIeQ+aATLgCbIO5y/ULSUpT/r/dBBZyP1qYMUCM5aaU7AKQ1YHL/HnQA3BToWO:wE+aAHUENP5Ry/iA71OjHf33O`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	5110fb7fc13bba14_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`81f07820f788366d528fe17e07098130`
SHA1	`8fcdf3cbb44bba2356ed661ecdd874d28ee34ab1`
SHA256	`5110fb7fc13bba143562e4a95637e9bdba636efd8c6522607096d70a6e1acb81`
CRC32	`44CEB95C`
ssdeep	`768:uXHGdBPASgYoH6dzSnq5TmtzG3TpMtaBV7s8lAKYSrtP6WB/:fASgRcSqNmtzG39MkbLAGrtye/`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	66627a536aefcf7d_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0963a8f7446fab3197079447a51bb3e5`
SHA1	`3685fd8f25059102ad4879d1b27edc0044849dc0`
SHA256	`66627a536aefcf7dc97121171a106f50a61632b4e001aa8c5e19a85bf99655b6`
CRC32	`74600E5D`
ssdeep	`48:PEVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PTZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	e5f0429661ff112e_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	111.1KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`1cbf1699ee55eb2b9c8bf422cdfcc7b1`
SHA1	`42c920126ac98dc6da4649f876fdf5bd2846c2dd`
SHA256	`e5f0429661ff112ed30bf8a02ccbc2d8f1831122157354268a7fc9cbdc17a389`
CRC32	`A8D2B987`
ssdeep	`3072:q5gDMYpVR4c3MY4DhjlGNa+2GHCyh47+2pz:q5KMYpgj5uNazdy67+Mz`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	26bf7c04a22a87e1_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\NetDefender.dll.locale
Size	25.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`51e15b3538505c319f6dbae2574ba1c1`
SHA1	`64f83d17da25ff8c5eb80714fab40928afd79374`
SHA256	`26bf7c04a22a87e171bbf9009239cb9cf629384da5d93c876bf222d70930af98`
CRC32	`5CE5828D`
ssdeep	`384:7w5xkJh9aI76eR3KJ1MsZ+sfDGPhCFYov05MQ3n:M5xk7b9KvMs+IDGZoG`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	47e83b1acc3231f7_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\360SafeCamera.tpi.locale
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`3d1b94ce05b95071695e734b3d3247ea`
SHA1	`bf6a3778b418edb5f4d3b7062837933044e93f0d`
SHA256	`47e83b1acc3231f757f16e098b930450a4db6589bd557920e5a72af0c8ac09b0`
CRC32	`6DFEEBAD`
ssdeep	`48:r+uNuM/+/z+W77RsDbcvX955+Wh/nnla+WK7nnlosuX+/K3+WMK64f3:r3NxSNqcvXh/nlJLnlokM3`
Yara	None matched
VirusTotal	Search for analysis

Name	a3d6ae52a0651761_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\udisk.locale
Size	480.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`0aabf786b8156d4d6b7765bb71c95736`
SHA1	`b95ba632e677766b86295e2d799c557dee0a4dd5`
SHA256	`a3d6ae52a065176108539ad567391b31a6e4afba5115fb4b70a9f33d6b5585ce`
CRC32	`2CD4223B`
ssdeep	`12:Q++ubxPR/WBg0GQ69kWx9hR48R/WHgEliE9smpAuHE9mXXo6:Q++u1RV1f52ZzvpAuemo6`
Yara	None matched
VirusTotal	Search for analysis

Name	f2bd2bef47be3758_360sandbox_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360sandbox\360sandbox_theme.ui
Size	317.7KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`a8cb4a639d867cf7cbe3a725e23e4ff5`
SHA1	`df84964258c46d8925f6be12fcb262942baf1a0c`
SHA256	`f2bd2bef47be3758f3622c517b2bdec4a57836148ff51f0b61847d69d3dcae32`
CRC32	`D6818FE4`
ssdeep	`3072:fKuFG4MMSdlA10dXfExJ0fTTbD54+4dlZ4KvMpuvt:fRGnUMQF`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	1307a1d827def940_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\es\SysSweeper.ui.dat
Size	117.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a44d0bb87c369b9da420602a091dfd59`
SHA1	`4e88d31c48f81b4944f60bb025a72ebf17b4eb60`
SHA256	`1307a1d827def94069ff89bb30d259275ad43b86e0944d84ff71f1eabc4442d6`
CRC32	`0B87A066`
ssdeep	`1536:IWn8FH+HJDqCVC+MVZ4Y+oO59AN2TAyiZnCASYHYXzTt7:I7FH+pDJVVMTEosA40yiZnC5Y0l`
Yara	None matched
VirusTotal	Search for analysis

Name	a66eb91ed6129682_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	109.8KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`95ed89bd379faa29fbed6cbb21006d65`
SHA1	`9ada158d9691b9702d064cfdbd9f352e51fc6180`
SHA256	`a66eb91ed6129682ad3b3a57f10a8abf45000062038abca73a78db34c6d66cae`
CRC32	`8C09DCEA`
ssdeep	`3072:mFdSHSxhiAL3EUfbErphi7CkMmn7ciggsS:mFMyxhtjEEbEFOC0nsS`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	a9e227eb98f19968_360kp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\360KP.dll
Size	196.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`564fd86867c6060692729a39ec5f8743`
SHA1	`6994e241d9dec4ae8899d88d4883d5e87577d929`
SHA256	`a9e227eb98f199688816a0d957816d589460786a110fe256bd00953c676898f3`
CRC32	`D8FDE81C`
ssdeep	`3072:ZTiHrGv02kqaJUCcLEMVEjUGTZcnEkrBeA+YGK0KzeO/T:1iavLklK2g6UGT+Brvek`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	3c9da5ab28427405_360hvm64_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\ipc\360hvm64_old.sys
Size	330.8KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`f93fa692aa3658422997643f51c1b7d8`
SHA1	`d00ddf850a7f937d1a75c401227a70fd80718171`
SHA256	`3c9da5ab28427405bf1099c1e7c3e77683c658c0c7c5fc458f606f368e7c6fc6`
CRC32	`D5103AFF`
ssdeep	`6144:p/SEJSyWXpOZJK6unrgBx4TZ2+YhRohO07K9QxMG9h:FNJSySP8H4TZPK9i`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	81f9a196a03b727f_360realpro.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360realpro.exe
Size	335.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`e0a6dc4b6ae59a1a174ee1e423b9e567`
SHA1	`479505febe2051521d5ff419ab786f29f2a489bf`
SHA256	`81f9a196a03b727fdae2282cc2a74130e53fbe3d2fe254b77ddfed3b7834596f`
CRC32	`4C33EC59`
ssdeep	`6144:54vxgH018gU1QqxiHpb9LEALu/Rs/u6X5PbKiK:54vCdF6pb9Di/CV2T`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3a3267279038b260_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`1d204d437ec35bdded0b741eeedb1462`
SHA1	`a6dffcbf1535dee5529868266dd77b2db97d8a08`
SHA256	`3a3267279038b2608e88ede90623a9d1e058e3b49b580952247009c5f3a94d17`
CRC32	`B7328625`
ssdeep	`48:r+uLVQQVOPukZfDerF6ujd0DNy3NSY7QDkqDq8e1UYIb:r3LWQVOm4Lkjd0D03NSY7kkq28yU/b`
Yara	None matched
VirusTotal	Search for analysis

Name	944ef806fa2e9338_360disproc.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360disproc.sys
Size	73.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`c5d3996b9c09d69bf170fddda270c0f1`
SHA1	`e8ab2d1dee6993363f40a654157309ff622a066c`
SHA256	`944ef806fa2e933870218fd98694e64cbd01611972453c7b4a283606f9503e2c`
CRC32	`2BF033C6`
ssdeep	`1536:SL/MfxpOpEIrspt/OX0iNvCvhaMhD1KvLf0/hC00MPUMaGdJbNgowoB5aAk1S9gp:SL/MfzkwI0sRpl1S9x5eMM`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	d85de5a6fc9055b0_cloudsec3.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\Cloudsec3.dll
Size	1.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d97a691ccea6e2fc9b079cf351f5b4c3`
SHA1	`7b94f99a1b4f147c70dec53f2d642733bb0e06e7`
SHA256	`d85de5a6fc9055b029bf9dd0135b6583eb66a29fb1cd957019565d101a19750c`
CRC32	`594907F9`
ssdeep	`49152:BnmftR/Ps1RWP3OTNeTPAFm29bJDsMaY6TAqA2:sn3s1RMeq`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	baddaffa266d0d74_signbwl.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\signbwl.dat
Size	684.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`36be3b220bfa586b08179546d51519d8`
SHA1	`378264409cd8db65262cd725ca76845b18bbfe6e`
SHA256	`baddaffa266d0d742f4b7a41251e518c75eb73ea0c1893ee530dfd7153ab9299`
CRC32	`B63CD4B4`
ssdeep	`12:CTl888mukDYfL8kTnSCJNBl4hr+Yypkhu+Pl:MlTifxhjBlkwpgxN`
Yara	None matched
VirusTotal	Search for analysis

Name	9d8b2541491048ca_sxin.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\SXIn.dll
Size	911.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d4cc468202e2a11f553d3fe992b2adcc`
SHA1	`a3f864b098688925210bfb70b9f47d459c0cd7b2`
SHA256	`9d8b2541491048ca4df4df6602cc496318c66bc0e6e92dfc96d9d46edec593ff`
CRC32	`9C780884`
ssdeep	`6144:dhT0UADzz7Y1A5sjbYzA4xszuL+dBmsr9qyhvyCsxycKEYT9H2fpXjJT:X09wOujbYzAqsSczr9P62cKTN2BXNT`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c42e1dfcbfce8b3d_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\dsr.dat
Size	59.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7b69a7462e6c8dae22795e2fd7d25a55`
SHA1	`3bc98911017850004f63b2e099b61d8f7b7ea4a9`
SHA256	`c42e1dfcbfce8b3d8ab4e70393bc66b82e56a6d99a184a5e2bc81a516c0a5458`
CRC32	`98F0F7A1`
ssdeep	`768:2AiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAV:+M4A6UAHRHF4aIi`
Yara	None matched
VirusTotal	Search for analysis

Name	b79b39bad9ac2a8c_scriptexecute.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\ScriptExecute.exe
Size	525.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`6ddaac57ef314ff52c84bc57b5d374d1`
SHA1	`dbcd2e1be83dbe6c36389441896f7f06022098e2`
SHA256	`b79b39bad9ac2a8c63fd94159834ac701dee9c07b57fc201153df945f1080b1c`
CRC32	`D52950AA`
ssdeep	`12288:oIv1nzNjApLVazhRNUJwq5JmkpcerTsCehED4V99:5ZzZMV+NiXDmkpcAT/ehQ4V99`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	025fc9c968de73fc_filemon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\filemon.dat
Size	15.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a5ed5279867ef5f3aae7d2dd342ce0e7`
SHA1	`75bebae82c7815206a9fbcd695d5215bbe50ef08`
SHA256	`025fc9c968de73fc750195ad89efbac43e4dbd6cf2532238b07dd97d36e25b32`
CRC32	`0FD2B6FC`
ssdeep	`192:yhBKVOiGtL8i1P2hlhVN/Dp+Emo3Xw5trhYABKeYen1psuFWP03eMlIPFOjcBfNy:MriGBpx2hLVNrgEmo3A5NSWdK03eq0Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	57d88ce3f2f234dc_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\chrome\360webshield.exe.locale
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2ab9f3047f7de52a7fc3643f18a57161`
SHA1	`6b77196bb471309db460fb8e28459ec06f9c7262`
SHA256	`57d88ce3f2f234dcdb93d549201d2ba80b515f1698bf2373eee08d38f4526236`
CRC32	`2F85DC05`
ssdeep	`384:78PuiGyzeR3K+h1MeK6jnLDJDGPhCWNvQKvrfpMQ3B:IPCyS9K0MeKgLDJDGtQwb`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	134fd8436772d047_360box64_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Box64_win10.sys
Size	343.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`fcaa82754bc5fef847524cc15140e876`
SHA1	`ca5803502d741cda28ead3f5b60b3db229506848`
SHA256	`134fd8436772d047d6ed483478ccf709c0759cb87d378661b6cdc027fb280858`
CRC32	`DB59C47B`
ssdeep	`6144:uZ0qbqeKCyaj6ovOTN1ZHKTiwFP3YhGYyfdzel:LeKraj6IOZ1Q+wFml`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	c142c911297c2452_driverupdater_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DriverUpdater\driverupdater_theme.ui
Size	540.0KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`222187cfd4f4d6939d1a87f54ad4064b`
SHA1	`cdedbc3eda7b270564f37865bb7534a55a1e98f2`
SHA256	`c142c911297c24522e6ab0310f25bf7aa78f1b1c361ec43fa4e3803d8b0e9a66`
CRC32	`807DDDFE`
ssdeep	`3072:XWGSPejGdCa1Vnqg02YIbpxIBgUdjrg0R+nLqo+jNVrNAwdEzu9efOVmS4VvQ7YZ:9C1Vnp5YIbpxs/j5gLRU+B`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	b54c85a919f972b0_firstprioritysupport.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\FirstPrioritySupport.xml
Size	964.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`f92198cd18b2daef9b7cf2e22635aa61`
SHA1	`61c006eb2fd890761c3d2107d71c7509c696ea5c`
SHA256	`b54c85a919f972b097953fd4297ac0d180263fcafca9b081e2c8adfff968a9c6`
CRC32	`DA6408EB`
ssdeep	`12:QF/LXYRWe82yAitPjF1QE6gFxFVjD+Zywy4jEEpPpSSlreELIm4sxq1w4q1IAyPn:QlL+xTibDT4ZywyVEpPpwELIDO2w42Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	faa5a6f21f0819d8_7z.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\7z.dll
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`eed3c31e622596028240edc1687c88cc`
SHA1	`314c30db64d4ccfd63a00a75716a10607e2e09ee`
SHA256	`faa5a6f21f0819d83fe17fbe23d7211e8203d61ac26fd90086052b0d30d928a0`
CRC32	`D28EADFA`
ssdeep	`24576:oNZ1kr6C8POFAJtZ76vbQDHhlFhdT0P0iPcnfjY0WPcYlPElIZpnkGljQQji92gw:oVr2qZ76vbOVhdTliUn80ccuMlI7/lJH`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) ConfuserEx_Zero - Confuser .NET Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e3ec36ebc0e554c5_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`868a5beed8ef699c997bad0599a8fd21`
SHA1	`774321c869a482e42ebbba8d588dddd3c074bb8e`
SHA256	`e3ec36ebc0e554c57c1f2251bcb68f2d5b1b5fe29cd232f5845631382c26af8e`
CRC32	`B4A79435`
ssdeep	`24576:IMMMG16QFvYoSrB23IFB9xJBgngj5wB8B3phzpGhbr:rY6SYxB23E9xJBygjtO`
Yara	None matched
VirusTotal	Search for analysis

Name	c4f495e888acd968_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	10.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9d946a13e391badcbff0ce2703ef0766`
SHA1	`5d514060b82e9ad56912e4e0fc1d630cea13ebe4`
SHA256	`c4f495e888acd96842ae984083c44f230453588f8f96f1d1b618ed98b2b57f57`
CRC32	`A301CABF`
ssdeep	`192:7R6309YrHwyMrj6Pu7CrjzR+vnr9ZCspE+TMorbFaR8F:7R63jr7MCPHz7eMI`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e7e68e6d20f0d81b_qshieldz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\Qshieldz.dat
Size	595.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`336954204a55488c436853af35bae6ba`
SHA1	`a65494404ec870f88c50bb2b812bb90878441bcd`
SHA256	`e7e68e6d20f0d81b794cafc0b0f6d776e0d9125fe3771d1641d58deb3c90f124`
CRC32	`0B5A1A72`
ssdeep	`12288:YV6gvB49Z1TiKF9MDPvFASv1g7Y8rY04eGnEdCZfgY:YV6gITgvF/v27DY0TGnEd+oY`
Yara	None matched
VirusTotal	Search for analysis

Name	110914328d4bf850_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\safemon.dll.locale
Size	53.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`770107232cb5200df2cf58cf278aa424`
SHA1	`2340135eef24d2d1c88f8ac2d9a2c2f5519fcb86`
SHA256	`110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103`
CRC32	`102FDF10`
ssdeep	`768:fCG11xWF7Lp/El6Eh7lKlI019+6JWaeNMXXbBA0bg:KGa7l/8h7I7JWpIXbBA0bg`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	bea2e3eaff38c03c_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`747273074c1fe78fdb9ae9ce6f15b331`
SHA1	`6c576015dc13ca2edeb266dbe10f693ea7772795`
SHA256	`bea2e3eaff38c03c8da0294603603312874161477678e5a2945033e49e8b1d4a`
CRC32	`9FB728D0`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsPg6PCabR:r5u5/+mMks5qTp1mNqce9OoI6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	dd08b1356c9b9bff_iv3voa4f8867tnyvpr0dn8cs.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Iv3voA4F8867tnyvPr0dN8Cs.exe
Size	7.3MB
Processes	1872 (jsc.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`08063da816c5db77ce64807c4ec2f7e8`
SHA1	`61ded712f36458ba6ffcec37edbf65d5927d2d92`
SHA256	`dd08b1356c9b9bffe1ae9c254d28411890204e5b8fe1f9b9af0a7a3e5b6ed61e`
CRC32	`86814B54`
ssdeep	`196608:91OOCCJNZewL5XGM5S7+zdo3mD33Uu+/pKGGFo8biHPnV8P3eGn:3OXC/ZBsM5SOoMkuMpDGFJiHPnKvXn`
Yara	Malicious_Library_Zero - Malicious_Library NPKI_Zero - File included NPKI PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	3305ad2718c9bb9b_x64for32lib.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\X64For32Lib.dll
Size	59.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bdce31fc701c9aa16ca392a561ba102d`
SHA1	`58bbdeb96e7819b00d60f0e6580dfc455774a9f7`
SHA256	`3305ad2718c9bb9bd1db19cde17a184e0d7e497ff3930050c74875bc50f9690b`
CRC32	`E154C572`
ssdeep	`1536:/l+SR4JFfLGV6R7+d8xJGBXbT91WFIm3hX:/l+SBfaJGBXbT9YFb`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description)
VirusTotal	Search for analysis

Name	73537d69d7e1f5b7_360evtmgr.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\modules\360EvtMgr.exe
Size	455.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f351ca96f0b9acd9b41ed7703c1b0040`
SHA1	`801b4d5047eae21b2641cbce58a250a3be3c8e32`
SHA256	`73537d69d7e1f5b7d358d2810315f6bf491089657d73c675389c06e283798b92`
CRC32	`6A8B87F9`
ssdeep	`12288:aNhJLFBtYrJjWRIzPX5h939ciScpxsPOgEPoXfj9:aNh7SaILPZ9pxsPfEPafj9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4e3a45c3657799dc_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`005b503f13710659d0aa872406665010`
SHA1	`613562e702d6339f89f5a3d1a92d1a2719f63265`
SHA256	`4e3a45c3657799dc91a1f1fff7ea4e488c7e5065cd285de6679d1da0f30a6810`
CRC32	`DC01997B`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsAg6PCabR:r5u5/+mMks5qTp1mNqce9Oo/6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	13f9b1633ae82499_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b6e89974ab197f4afc47cfd58c78bd64`
SHA1	`ee5a7a9357402849bb4f87a015414b737143848e`
SHA256	`13f9b1633ae8249968d2c1ed09049b26bf82aa6cbc07125f22b75286723f7025`
CRC32	`67CD6CE4`
ssdeep	`48:PxVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PkZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	cea6a90a2d22158a_datashield.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DataShield.xml
Size	1.3KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`df9308907a383f18d8b472cb22aa5009`
SHA1	`2b8dd154ea36468924b62a94ba7e6c20d7cb3e87`
SHA256	`cea6a90a2d22158ad9c2a3b0c43ac9b720b092d427545a53ce2e46e970cfbb94`
CRC32	`763B492A`
ssdeep	`24:QlL+xTiWqGrkRhmywyVEpHp9gb6UEUNYy4YJJ2w42Ny:y+xTbqGrkRVnV0cvdWYJJ2F2Ny`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	a63f7d889322302e_filemon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\filemon.dat
Size	15.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a3e96693ff8eced6cbc602ee6267366b`
SHA1	`401abca2d7256ef8012b314ea811a07bec4b9255`
SHA256	`a63f7d889322302e023bc3fa6d9abad763a7999786d9ba389a496fe05778a480`
CRC32	`6AF11DC0`
ssdeep	`192:CL1msfRX6IYZzBal/dd5KGkpjya4moYvq6DaRSJsrlUd9q3IxmdIqHk1a52syz5/:YnRXtYbald2Yaq6DPyUD+Gra0tpeYV`
Yara	None matched
VirusTotal	Search for analysis

Name	669a13733ce62eda_360util64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Util64.dll
Size	842.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`8b14a80d926ffdab593b6bc0b002b9c4`
SHA1	`c84c938543ef6d2c42ad0c61f970e3d1ccb3be44`
SHA256	`669a13733ce62edac298f91f957ebc7c748918d07c7730e94fd930d6141f8078`
CRC32	`929440FC`
ssdeep	`24576:pPSAAvHV4fZUvfgmaxpu1FCJ6xMYcMk9u:9SAWHV4fZUvfNazu1Hvc8`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	474a8984f7cd7390_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`15ad59775f51cc2e2a692f975098bdc7`
SHA1	`185526253eebac46d551dc2af328998cfed91416`
SHA256	`474a8984f7cd7390b41a005563564f80f761162a9a9a395af68af5e655e6f31b`
CRC32	`5C2107BB`
ssdeep	`384:7djtGhAfIGXgaZEpI7nOSeMLujROMov05MQ38:hjtvIGXLESfsROMoZ`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	eb0b967eb095cba1_360scovec.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360scovec.dll
Size	942.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`550da9197b7c931882819d78790d57e0`
SHA1	`42d325f8eea6faa441d347d469ed65cf456504de`
SHA256	`eb0b967eb095cba1242ec31eeaaa662551027c461a81ea3d765f6bd95b60cc67`
CRC32	`CDA9B90F`
ssdeep	`24576:+SChyYDO1JRzY6YVHpyUX0guKA54ZmXUXx9MdtTxrd9:+SCYtRYVHpyUNASnh9MdtTd`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e1790e4b0a9f7ba2_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\fr\SysSweeper.ui.dat
Size	102.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a2a5893f3f9f284404a7b722141443ab`
SHA1	`1035939751011664aa12a1899618f29f2f8aa9aa`
SHA256	`e1790e4b0a9f7ba21effe2c0e1d4c4d1c9d1148d0edc6e211f8cd61676448a78`
CRC32	`A3EB301D`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3h/:y01ECQTjvJYwTluq/`
Yara	None matched
VirusTotal	Search for analysis

Name	39c4758b2682b047_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\dsr.dat
Size	58.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`44e957f7ca905c793b2c0ef4602390ac`
SHA1	`6057597e00ada043a413f130b64ad6868fd7998f`
SHA256	`39c4758b2682b047deef48b50f1b3700d39961c4f732e4fec1e8853670e9b9d4`
CRC32	`4F63A614`
ssdeep	`768:VAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAM:vM4A6UAHRHF4aIn`
Yara	None matched
VirusTotal	Search for analysis

Name	886df41a3cc0c16d_datashield_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DataShield\DataShield_theme.ui
Size	171.8KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`94cb996bce563e7ac19bef13775ceb3a`
SHA1	`cd58ca30c13a819d23702114fa7c7046dde9c5f8`
SHA256	`886df41a3cc0c16dacf4a59473913059e0bb5a3d3b0f5983941c3b5969cb6a20`
CRC32	`EBC80BDF`
ssdeep	`3072:kAas0cWrVAaByXritfU7eQUjg1OPlkklA:YfU`
Yara	zip_file_format - ZIP file format Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e9ffa1a0215c124a_liveupd360.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LiveUpd360.dll
Size	417.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3f53f8f6f8ae27cd0b2c191130b22bc6`
SHA1	`d8f2439b39a953b73180e73ef3a647c91823c2d1`
SHA256	`e9ffa1a0215c124a9437fc013ad7e560452e0ad98d77a7a8d281860bf0a4f6f1`
CRC32	`B196834A`
ssdeep	`12288:2DDWGX8/v1s0g3B47bC9DsfTNtyaf96Sy4Nbb9T:0UjL/CihQafwtabb9T`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	ffee4d96ab913305_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`986cb6d1c02b3917fc1f528eb794a216`
SHA1	`2dc98c634975aa716d895874383d07a05fb0f058`
SHA256	`ffee4d96ab913305aa1f03098dac94b3ba85e25c5673555d04c1ac2ccf7cf023`
CRC32	`54EC652B`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVl2yYNNqWIajvWnwapG41iX8n8B6WSbJ1J9WNL6o52:29+DgRgizEG41s8n1WfFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	5206d37a69a0130e_registry.pol Submit file
Filepath	C:\Windows\System32\GroupPolicy\Machine\Registry.pol
Size	6.2KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	data
MD5	`f7753b0615ef6ee36277c1424efe3fd3`
SHA1	`17ce336910f42ac985d14b9df428d4e1bdfea3c3`
SHA256	`5206d37a69a0130e9825ea711f16ca227bf29c489656f262d934c468c8317ad2`
CRC32	`2ADBD390`
ssdeep	`192:FlRRCDN74hvoD5KL0+fLfYT7C0IhYY4WwDikcAzXEg:nRRCDN74hvoDEL0+fLf27C02YY4WwDig`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4f622357bb25b9d0_360netmon_x64.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netdrv\x64\360netmon_x64.sys
Size	85.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`b1e1e8c5420ca5d39a3868b4cf0251b8`
SHA1	`b70587c35379206fcdcc9b368567425bebd3b171`
SHA256	`4f622357bb25b9d0c211fa2472b1d2abce42c2fcb763bce6cbd89f7afe42e83c`
CRC32	`9B21B595`
ssdeep	`1536:8yp3RxT/m4r6HklEFEXqRkfJovlFJMZwgh+:8yhT/m4r6HkqFE+cJovlFJY0`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	77cee2e41fad6798_360util.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Util.dll
Size	676.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d9a8493f1ce7b60653f7fb2068514eff`
SHA1	`c8c0da14efeb1a597c77566beed299146e6c6167`
SHA256	`77cee2e41fad67986c6c6e1426bc6bdaa976b1dcd3b24f381376b201d201581c`
CRC32	`91B257EF`
ssdeep	`12288:IpsvoQzr56X7kRUiWs5a1uw1QVyRJB12sq8nqsPgR7A1f0TLgeodDMyL9S:Ipsv/zr56X70dGfnDnqsPOIf0HgZdIME`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c5d5f9e786399dc3_browserpro_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\BrowserPro\BrowserPro_theme.ui
Size	169.0KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`56d9329b8390d72a144e7377818f8152`
SHA1	`0f97aef9fcea7d258a324524b6c8e931c62aa6a9`
SHA256	`c5d5f9e786399dc386f025032753f7fa762245852017b4b467d7ecf4fb6a3ef8`
CRC32	`4D08082B`
ssdeep	`3072:2JOgEgJEGLP7S822AtDaQMUEzSxFEqWuI1Ihc6V4KDERATR:iO821tbMUEzSxFEqWz1Ihl4KDEG`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	1adb1901e78d6562_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\DsRes.dll
Size	113.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fd32c93f288339e08bfd3a6fe746fe58`
SHA1	`79c4e984216756cf2e7a6597c8919bae42620551`
SHA256	`1adb1901e78d65623bc536dbf42081d1d501072394605f57e128fe9a8c9609a7`
CRC32	`F43A7786`
ssdeep	`1536:e2kLlARh7q6RobjausblEJrE4MSye3InFk+yB89weJU:ex6RobsblE+4MSyk+n9u`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9fa80f0889358d9d_setup.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\!@t8245.tmp.dir\setup.ini
Size	830.0B
Processes	3020 (None)
Type	ASCII text, with CRLF line terminators
MD5	`e6edb41c03bce3f822020878bde4e246`
SHA1	`03198ad7bbfbdd50dd66ab4bed13ad230b66e4d9`
SHA256	`9fa80f0889358d9db3d249a2e747e27b7c01c6123b784d94d169c0e54cacf454`
CRC32	`7653150B`
ssdeep	`24:9L9A1koVWqaSzUPzXiyAJBouSOQOQdj3hTlfUJ:9LuioltzUDjAJ4/djhe`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	7e699e7cae94faef_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7428608fad09dd707035f242c0d8e346`
SHA1	`c596155945ec83ba907a2321c12f44854d3fdb12`
SHA256	`7e699e7cae94faef6d921221ed5da5c12f40ee7a46a46802b584b52679650e69`
CRC32	`39AB94BA`
ssdeep	`1536:qORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE38:qOBrUC4jyUJGKzgSg+eKf5FN`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e7520d167b869010_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\libsdi.dat
Size	102.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`13645f85faa870402c7692f02eff04e5`
SHA1	`26a804e90d158c33990e0b4e83d1461db85e8bc1`
SHA256	`e7520d167b869010870f3c3599915e5f7b5b28f6cd9dfe05a8a0f2d0aa3f7bc5`
CRC32	`7EF88544`
ssdeep	`1536:xtHzPK/xdGrjOr3K1Sd5sVgg8IWU76HrrBWgOdjgPWO+LUp93ylak1OA2a/M:xhSCj830Sd5w8IB7Acwput7E`
Yara	None matched
VirusTotal	Search for analysis

Name	ab2d2d7b7675450e_drvinst64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\DrvInst64.exe
Size	189.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (console) x86-64, for MS Windows
MD5	`2df474518017c2f1128ca122288d5407`
SHA1	`51e1af5e20ebd47895868a3d1cf1acd7d019c3ef`
SHA256	`ab2d2d7b7675450e7b17ef714c5d2ece0033c02a1383267ca4fc613897fa6d4e`
CRC32	`6723568D`
ssdeep	`3072:SNq+IFOAPjqF0rqpNv3AWs62/waQpNVBPI7BkW+oGLE5ANB78PpYj1WICCP+5Uv/:SNgzPPup1aAZPI7BnOEaNB78xm1WIDvd`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	975e305170db54a4_360selfprotection.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360SelfProtection.sys
Size	195.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`a190aaaa3dec18e80a47398fb17255d0`
SHA1	`7c60bad828cb115a296ff71061ad0dfad4e642c8`
SHA256	`975e305170db54a40577610024f11ca2312d68a33de546237a2a716575c0759c`
CRC32	`5E1F2FF4`
ssdeep	`3072:qdYrsP4L0KuHee7i5QM15T2MPcGu2E2x+G+7yPV95EJ:JstHoFT2s092Lyq95U`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	58b205eb51ff5397_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\spsafe.dll.locale
Size	17.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c3c563a8a35d95f359f7992cb98e2b6f`
SHA1	`9db4690373cb59f7d54e286fa57c61c6e82bd2b8`
SHA256	`58b205eb51ff539734d22476b867943377cff4d1a30fa55db0e69156cb81f183`
CRC32	`E035DC2C`
ssdeep	`384:79rhmhyTI7nOSeMG6W2j485JNNzFwhhiy:prhAysrWUH3whh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	312039322f6361a9_syssweeper.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\SysSweeper.dat
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ebf2fe6dc1b4e8bd82c626db0c176290`
SHA1	`4cd3f0d7c3f7d8d8c75e45c73a88decf1b222a03`
SHA256	`312039322f6361a9acc5f93507a41bd617269fec630d41e32f35aa395a593874`
CRC32	`6B6098ED`
ssdeep	`24576:syfZmDepYwtL1gUb1PGLbb3ZZbF9SufyK5hH1z2gS:syfZkeqsWeGLDF9EK5hH1zLS`
Yara	None matched
VirusTotal	Search for analysis

Name	b393ee16f011f8b4_snapshot_blob.bin Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\snapshot_blob.bin
Size	474.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`55f5330356ba23486e7374537f8fa33e`
SHA1	`1530fffcc70604c7a9e17286d3739389b9f44f4b`
SHA256	`b393ee16f011f8b48986e229f9e9494f3ea025ba0f42dbf6238fabeaf57033a6`
CRC32	`707DEC3D`
ssdeep	`6144:h5aHx1hJCulzMq2+ok7G6RzkkR1Kjg2zE7TGrG2:/aHXfMq2+93zk41Cg2zE7R2`
Yara	None matched
VirusTotal	Search for analysis

Name	5b505ce13a3f6972_sndw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\sndw.dat
Size	10.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`6c8fdf3c1540e6655217be763d4c048d`
SHA1	`2761810e992cf87d0314a57ed5c42bcbcb22397b`
SHA256	`5b505ce13a3f69728cbcb964b40d8d510e9b494ea2a33f2a965f68e39da4ffc6`
CRC32	`43B10374`
ssdeep	`192:meCljsgLGjtE7aJqb161R8hnCQeTwm9A3LTc+wKLgZpzXCHb45WxS8Gvn4Qan:mnwgLGjtaKkdn2Twm9qLAKLYXqb45eNZ`
Yara	None matched
VirusTotal	Search for analysis

Name	0b5c5af581cbf9a8_360p2sp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360P2SP.dll
Size	804.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b9bee9e7b47871c5018c819accbd6834`
SHA1	`d37c0b3a1dbd9a4a23f5abc13d50e2ec5104d7bd`
SHA256	`0b5c5af581cbf9a871e59653cf7a2645ce32773237736b034cce780c0a9647fd`
CRC32	`CF97EB39`
ssdeep	`24576:JBilJtWo6fWqxNflfY3orK1B+AFD63fA9TxD/:+4NfVY3oZY23fqTxD/`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	09c12770a6b54ad1_dlproc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\dlproc.dll
Size	716.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0b3a2a7a63f438a13dd6dde7131a74bb`
SHA1	`83cf9cfdf27f5a982f631e8383ba4100cde3bb3f`
SHA256	`09c12770a6b54ad1dbb1799472a53244dce083974dc797c67de1ba3f394a8f5a`
CRC32	`184DA37E`
ssdeep	`12288:EvLOfl0ManPdz5f0eNCDGPrtx+sIYU9BBk16Fj8PpJR/nGwy890ah4CWPcxjiPoB:EvLOfKManPdtfXNTJEwJaOWPoOA9TUM7`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	c746d998e7bfe627_360av.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360AV.tpi
Size	346.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`64d1ffd07a60d6bf48432c7ebf14f72c`
SHA1	`7ae2c9178eeaa79e3168632acc671bb98b4eb25f`
SHA256	`c746d998e7bfe627f1bf4db28f76e68388017a8a343305badd0b623534a0d2dc`
CRC32	`A1B3643B`
ssdeep	`6144:0mURJe4N265tsWSVCV4g7ACyL59H14GZT3urd7jN/r93nH64kPCAI2f5VTZNq7OB:0mURJeL6BSVCV4g7ACyL59H14GZT3uri`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	87063576bd9bf9b9_admgr_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\admgr_theme.xml
Size	78.9KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`519f295fe9c39df82116cf5551bccfb3`
SHA1	`c94c352f00a4079e553b5527a38dd97fb1722e83`
SHA256	`87063576bd9bf9b97939c0d412d0484b02801a1ce9889db074e3dc15f92666b1`
CRC32	`EC0CBEAE`
ssdeep	`768:dShlnxkRalnxcIBGEx4XIx360VlnxQkhlnxQllnx/Tl3/zzukr:BT7`
Yara	None matched
VirusTotal	Search for analysis

Name	a628b37df5260930_wscreg.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\WscReg.exe
Size	2.9MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`c7dbfd0d17929c83f12080eb4680595f`
SHA1	`210f608a7929bf4085815522ffe2695063125e69`
SHA256	`a628b37df526093026862a1180484beece436b5dfba83648551fe57ce9a5dd75`
CRC32	`437AFD5C`
ssdeep	`49152:cjG+xj8kwNaKd5hZu1hSPBpTmINewfM6SVzjYq+ZIqa5UJoec7:c5j8kwlHOhMBrBfM62jYqt7`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC Network_Downloader - File Downloader ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) CAB_file_format - CAB archive file UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2265a0b291d07eed_avlib.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\AVLib.dat
Size	359.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`e3bcd970502ec0d7ebb03bfb2c4a3bab`
SHA1	`5da1058a0be57b048a2c1b3442de44c576a4c913`
SHA256	`2265a0b291d07eed46ff162f10dda492aa62aed8ea8b5b6146cc995e15dcbab6`
CRC32	`BD70C74A`
ssdeep	`6144:i16Kppnih040IhohfhjhfBhkvU64tvwan8/Hq:i16KppnNtvwan8fq`
Yara	None matched
VirusTotal	Search for analysis

Name	ba8df913de44f5ce_vwallet.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\VWallet.dll
Size	241.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`02e31b34cd4052f696d2f41c992bc3ac`
SHA1	`6dc4ba93b2d95d6ac935e57a805b0f48e119249e`
SHA256	`ba8df913de44f5ce98182c8134472a9df6083e89c33c7e72f0188b0f5fe2121c`
CRC32	`CFF4F49F`
ssdeep	`6144:4g9z83hLJ0hZwcIBxyelSIPhiccIapJA5:4g9o3hLcZwRBlSyhWa`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	097410028d300aec_safespeedboot.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\safespeedboot.dat
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c5c819b1e32b2d044b64df126067f6b8`
SHA1	`518adf88f72beb4fdc39297e1e6c6d9f16a78668`
SHA256	`097410028d300aec85bde70806e396e7637e97429011db486e545d5f2fd68dba`
CRC32	`B1DF99C8`
ssdeep	`768:exSwZplWtYefRs4u19bV1golQVTAEGUr5jo5oj3Bf9I2YnH0cfq7rHxsWlBirkxq:WWYyNQl8tAT4jIw0/n+7ruWlErumZ`
Yara	None matched
VirusTotal	Search for analysis

Name	bbd4cfbe482fd7e5_leakfixhelper.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LeakFixHelper.dll
Size	348.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bb58da308657fca30466abff846a5f11`
SHA1	`9a0210fe0e5d67d5a34dccd658098f6c7d65128d`
SHA256	`bbd4cfbe482fd7e5551da78040666004cf233fd9c8baf514fd5f822eb2c9791d`
CRC32	`071E86BB`
ssdeep	`3072:/jzlAJLUi3q4P9B3vEesq686cQOQMOLBUExK/kFiUQmp3KgYdD:/jRAJLh64P9BMeBAOQbFLBYB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2bc8c1c9a907e410_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\deepscan\ssr.dat
Size	50.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ae5acf7680e09dceeb056a86217eedaf`
SHA1	`8404dcce1c58ec390e6abbd8255eb913e49eafc8`
SHA256	`2bc8c1c9a907e4105b967655378bbb79b8d427441a6a32b1476d84cbd2afdbf0`
CRC32	`D45F3681`
ssdeep	`1536:rI/pCpj90YfGgFT3vSc+cCOOrPK95bqpC26Zfzu8zSufV:sp4j9FfZJSc9KzKipzyutu9`
Yara	None matched
VirusTotal	Search for analysis

Name	a63d3270a133e5de_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c16c9c135c401d7fbf5ed6cf95a54d1a`
SHA1	`3750761615c149fa1256ccb3910f8a8de3f8e43b`
SHA256	`a63d3270a133e5debf22b549ac227e46178540bb1146f7dc5131a1edabfb4e3e`
CRC32	`717B1750`
ssdeep	`192:7h2leJMfss7yMrj6rrjzR+vnr9ZCspE+TMorvG+Rf8:7h2leJM0suMCLz7eMj6U`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ee8056b790e5c4e7_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\deepscan\dsconz.dat
Size	18.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4ab95bf13f19f97f76c01a3e8173b26e`
SHA1	`655a229559e87f7daa66b13ad0b7f2bdf34f08be`
SHA256	`ee8056b790e5c4e7d264d8dac29a929c94c291d412b1903a7a4d10c0f96abbe6`
CRC32	`C759E243`
ssdeep	`384:rAG4SpbSmn5h2Sdd4v5prn8h9n/0PZb+dm+OU/scA0qPpv:bbSTSdGjqePZb+dmgzhqP5`
Yara	None matched
VirusTotal	Search for analysis

Name	58f7ce00d589aaae_cef_100_percent.pak Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\cef_100_percent.pak
Size	141.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ad2ddfc39c78eedc734af6506a579a8c`
SHA1	`64e66d48ab3a98503948202dec3ff2f35470cd5b`
SHA256	`58f7ce00d589aaaebfaf3d0badac45924545e49f2d1531156f282eac7abb11b5`
CRC32	`45FA0920`
ssdeep	`3072:Z7qrTpJroFYgI1epIMIZOgl95h4vjWX6pCa8+1pq0YAhstEtTUuS/po:Z74JrEXjIZJlHavSqT1YZYstATJ1`
Yara	None matched
VirusTotal	Search for analysis

Name	063e660b1e32cbae_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`627cbb9d1671cd7a553cb9e59e765bbf`
SHA1	`4a4916f14c4ca7d26dac88ff4a5884761d8c5a70`
SHA256	`063e660b1e32cbaefb8b928f1fa638853bbcb6b996bb08496fc861fc5425a840`
CRC32	`6B4D2D23`
ssdeep	`384:7K5vtG1tDG87I7nOSeMCS5WjJoMA8nQJ+MQ3H9:e5vtkDG8kp50JoMAnJo9`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4f798cf1e27dd355_drvutility.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\DrvUtility.dll
Size	171.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bc8917f469a0e356c015ad6a31acc134`
SHA1	`a2e0fbcff53018ed92754065beb0a16e35339cf3`
SHA256	`4f798cf1e27dd355709c4ebe11a24b17ee832b4051f8952d9ae12942e0ccc5a9`
CRC32	`6A269B72`
ssdeep	`3072:OvAuavucXGI3gRwW/pjr4n8UPWtU6Kupw1xZ+DV4/S6SF8:uavucDMNOnlq92ks5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	09d58a2f0656a777_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	10.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5efd82b0e517230c5fcbbb4f02936ed0`
SHA1	`9f3ea7c0778fedf87a6ed5345e6f45fb1bd173fb`
SHA256	`09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b`
CRC32	`396BEF25`
ssdeep	`192:7jp0kvNyMrj6Pu7CrjzR+vnr9ZCspE+TMorCxu:7jpJMMCPHz7eMtu`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b1e6cb63ce3efe0d_macrodef.enc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\MacroDef.enc
Size	6.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`9fa1bfde0b3fdbc8b3386a674b74fabd`
SHA1	`7d14b0b25debcb2f360d8613297250d6ff54f4d2`
SHA256	`b1e6cb63ce3efe0d929508eaae7d7f54fa1f2586e804265df578fd55b1ee4890`
CRC32	`373779E2`
ssdeep	`192:H3Scxqw8cZIgaqQEcx/kwojmI3v1rb5sNNhQsaqhJjfV:XHkBcy8JcqwoFrb5sfhNaApV`
Yara	None matched
VirusTotal	Search for analysis

Name	a3c8dd27d5f6cbe3_360.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360.dat
Size	28.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b61bb7cc3dd2dcb9b3e093fc38df599a`
SHA1	`c9ff0529a1ced9ab8d6c30f30bb10f8e1ef3a084`
SHA256	`a3c8dd27d5f6cbe301e73c13828d4a07d34d888ec4ea6acd7af322366ea82c06`
CRC32	`DCA0DD13`
ssdeep	`768:ZwCGYdy9DVX9suel0zditgqqqqqqhjPEzDC/7k939pqHonAntUJ0VqefE:21ps+jPkckmost/oec`
Yara	None matched
VirusTotal	Search for analysis

Name	cf41f5b50d67b67e_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\deepscan\DsRes.dll
Size	74.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ee233f12c989d289c955237b62cdf888`
SHA1	`dc3e63c13e0fd8a2a2d13688b57f78f6a94158ea`
SHA256	`cf41f5b50d67b67e8adf54ac39c372d15716e371e1cf38d016b4e86bfab8162a`
CRC32	`81171602`
ssdeep	`768:KfdNl5qN9j/wWfZb/XFeoy5yFYECG5fgATSQPA3MQzQMuv9K0MeKgwDGxQwpB:KF35mbwYhJX20Mk9weD3`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	b25edda51e47a575_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\libvi.dat
Size	790.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`8fd189512d8cce198280374e7d9f60da`
SHA1	`d7b20273f823032a6e13c6c46fe23c0399efd19b`
SHA256	`b25edda51e47a5753d480fccb3a831fda1c8fef0e8ee58378a343090c47f371c`
CRC32	`5AEB9BC7`
ssdeep	`12288:l/nCExkRpiJhfKNJhhD5PpSpPd/m9muisxaAVpkf7:9CExkRgJhfKNJLh0PJm9muTaAA`
Yara	None matched
VirusTotal	Search for analysis

Name	06cf902f02c13ed9_wtaxhuqqhepreou3bxw4hpuh.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000031001\WTAXHuQqhEpReOU3bXw4HpUh.bat
Size	70.0B
Processes	1872 (jsc.exe)
Type	ASCII text, with no line terminators
MD5	`084d0f49878a2c5d6c1486e2e55677c5`
SHA1	`9be669b219ce9de4b37fe67c02ddca0e5ae2679f`
SHA256	`06cf902f02c13ed9ef84554830043d92095ff13d5c2a211c52c83f089790b81a`
CRC32	`46E0AF69`
ssdeep	`3:Ljn9m1mWxpcL4E2J5uIO+MBdukJW4iF:fE1mQpcLJ23uz+AKVF`
Yara	None matched
VirusTotal	Search for analysis

Name	8a0be81019cbf91f_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\udisk.locale
Size	254.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`d1b59e44f0cd63f732482dd2a5ab18cc`
SHA1	`44a732d457e8024dd675241b0910993f769379d4`
SHA256	`8a0be81019cbf91f12eb3cae1536754937e55b62adef74d7608013afb8d1d005`
CRC32	`70E51E2B`
ssdeep	`6:Q++uimVb8WSWlBADAoD0GPlpUsUVPiNAlK7kkcOQR4l8SWlBADANq:Q++ubxlLl2DND0GQ9V3lgOhR4GLl2DOq`
Yara	None matched
VirusTotal	Search for analysis

Name	b7fb6efcb47a6b0a_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\deepscan\ssr.dat
Size	45.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bde51bca28bd0919ccf3210da2337984`
SHA1	`393565f897f81270e2552b8b0e17b2044dfe2435`
SHA256	`b7fb6efcb47a6b0a74781d4377bdaa09bfe10e083506659d0aac07d882f0953e`
CRC32	`4E94A11C`
ssdeep	`768:A3uiBksVurwmMfrFc+5yRUg2TXy8aSK11n9dmrof3hLT4BzCbQBYgTgRiNXGNX:3ke4fhc/+gGTRK1PP3tjux72X`
Yara	None matched
VirusTotal	Search for analysis

Name	80765adb886050b0_360base64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Base64.dll
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`115ba98b5abe21c4a9124dda8995d834`
SHA1	`5dd5cae213a9dbe5ea7729c1d2acd080f75cfa39`
SHA256	`80765adb886050b0f87e30fa62336985db67c09b25f4d1760194a28ff78899d7`
CRC32	`D96F34AB`
ssdeep	`24576:kGtlqC59JiWdmE6r7DzyIzcRIfBFEUT62a3muq9Y+Hk3BRyTTAg521LSYyk9z:kGtlqs9JiWdtwBFjT62aSdHk3STTYv`
Yara	PhysicalDrive_20181001 - (no description) IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9a54e77edd072495_{C8756D80-AFC3-4708-9FF6-94739718A787}.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\{C8756D80-AFC3-4708-9FF6-94739718A787}.tmp
Size	413.3KB
Processes	3020 (None)
Type	Microsoft Cabinet archive data, 423228 bytes, 1 file
MD5	`7d883e7a121dd2a690e3a04bb196da6f`
SHA1	`73e8296646847932c495349c8ff8db6ef6a26cf9`
SHA256	`9a54e77edd072495d1a9c0bba781f14c63f344eaafa4f466d3de770979691410`
CRC32	`D8BC8C95`
ssdeep	`6144:84Cs29g7Owuqh51csTqqIe6WpdwNCGt6zoNsJLCwFwLNFtgsP83FrTMim:ZCsFlj1SWpdwN55u7FQZg9tTMX`
Yara	CAB_file_format - CAB archive file
VirusTotal	Search for analysis

Name	94c67e6db3755bd7_tools_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\tools\Tools_theme.ui
Size	803.9KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`bc5de1c1cac90ba9b71c6aa51113420c`
SHA1	`f8dd6292f4b4e9a69b31e19decd8b8ddba38d253`
SHA256	`94c67e6db3755bd752dd71d5695e2abe395c18f96402663537930797202748eb`
CRC32	`18BD1D91`
ssdeep	`12288:v44E4EfNWQI/zP5TXOjxYmcT48WlKFRhTizd3ztYD:v44hwnIT9XOjqWlQkzltC`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	b45e8e4c0ebc858e_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`a149e569e5d88d316a96ec505df120b5`
SHA1	`ed1c2e6291aff498c916f07c0091cb9e07f57f15`
SHA256	`b45e8e4c0ebc858e611db2026dfbca0f5bd7da5baadcc7fecf61d4b832025add`
CRC32	`EEE4199E`
ssdeep	`12288:g/nCExkRpiJhfKNJhCVdTTOfPd/m9mhNs7/U+n2ul:iCExkRgJhfKNJYHMPJm9mhA/Ue`
Yara	None matched
VirusTotal	Search for analysis

Name	cfae85ff290b42c9_C__Users_test22_AppData_Local_Temp_!@t8245.tmp.mem Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\C__Users_test22_AppData_Local_Temp_!@t8245.tmp.mem
Size	17.0B
Processes	3020 (None)
Type	MS Windows COFF PA-RISC object file
MD5	`d6de318d2ad70dc81a8b52b8586a03e0`
SHA1	`8bba08c9b34c6669ee512504dcb6489ceb745487`
SHA256	`cfae85ff290b42c99bee61bb949356e354bd51d74e3d90f215d840c6a9d4ec02`
CRC32	`2144DF1C`
ssdeep	`3:1l2lUfC:aUfC`
Yara	None matched
VirusTotal	Search for analysis

Name	53d819a12805b37d_dsfscan.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\DSFScan.dll
Size	437.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f5d999ec032786cb850c22e220dfb6cd`
SHA1	`0955724d94d614fe6615b7e131df345f4789410c`
SHA256	`53d819a12805b37d7b5083145af8b292d42e603c716d3a0f39f249e485e341cf`
CRC32	`F86A252A`
ssdeep	`12288:F3RxZhBu6jIidvI2fTEa1vd/P406y9qdfEDbmxLBQQI+4PP:Fhy6jy27p1vNw0lqdfvxLWbZPP`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c4589266ed0867c2_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\udisk.locale
Size	482.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`6f068bfadf0a6d759bbe9610bfa85a50`
SHA1	`7b08c50881130f7cd6369d9714e9d4d2c5fba127`
SHA256	`c4589266ed0867c2432429f44615a96795af9ce2ec01d1857542d91428420c19`
CRC32	`66B275A8`
ssdeep	`12:Q++ubxayD0GQWtqkXmhR4EgE5KE9dI0leE966N3:Q++ug0ztq+6FL20l/66N3`
Yara	None matched
VirusTotal	Search for analysis

Name	d7f10def753ef6b7_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\Safemon.dll.locale
Size	53.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b2075bee61bf4ad7eab80ec0977a8802`
SHA1	`a1ebc578277f1100e066e339641409c70d0e4ba6`
SHA256	`d7f10def753ef6b7332fe20a61b84b7d73033996f4e516cbe3d8aed08b32de3e`
CRC32	`1EE38D2D`
ssdeep	`768:dCG11xWF7Lp/El6Eh7lKlM01y+6JWnPZ5BAA3:0Ga7l/8h7osJWPZ5BAA3`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a71e57cafb118f29_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale
Size	21.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9d8db959ff46a655a3cd9ccada611926`
SHA1	`99324fdc3e26e58e4f89c1c517bf3c3d3ec308e9`
SHA256	`a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509`
CRC32	`64F5C821`
ssdeep	`192:7PEyLnAYEFPrQP8tVku+pdhh2eryHU8/7X8r9ZCspE+TM4rSEZsBHUckAwmTcViv:7iYsPVI70HVJeM3Hl7VLQKvrfpMQ3vmc`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	62010a1954d63ee2_netdefender.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\NetDefender.dll
Size	427.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9037cc729afd97fd6828c22d650b98e1`
SHA1	`136d3b1414cc4ba923466efca56ac038f736ba02`
SHA256	`62010a1954d63ee215bc6cb38071bda11df70c5442877f1654b26fd0057d9ddc`
CRC32	`E75E0B00`
ssdeep	`12288:g7kRHqtbfl8vf48H9kboOH5p36RpgsJBe/Rvk9u:/q1GINX36ZeRM9u`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f000ff1f380a3cd4_drvms.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\drvms.dat
Size	3.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4604358b1b1f1a3059e447174f39ec6d`
SHA1	`f0a301e1e8330226d27453cf3b6fb6a7836e494e`
SHA256	`f000ff1f380a3cd456cd2ea9d0ccd60380184ae25fff1d9627773faebef2b3c9`
CRC32	`67213399`
ssdeep	`96:uLuKuKuJgAgAgAEvljJJJoppSFVK3Mppp2iCiCiCF:itJQz`
Yara	None matched
VirusTotal	Search for analysis

Name	036bf153e4a600dd_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\AntiAdwa.dll.locale
Size	130.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`510fc87798c049bcbdd97bbba74baa01`
SHA1	`ca819b97dada6ec91f28e884439b1dc01907d7c8`
SHA256	`036bf153e4a600dd5fa574b89ec61701c129f24cc93a5ef45b4a56b6ce8f25b3`
CRC32	`62246580`
ssdeep	`3072:7b9RoAp+Xd48W3KKPFW4eMyUeFUiaxy7twnwzaA7BR0/Pc33utjK3S6vDGTRMNwr:dtnD`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	69d727f4daf22327_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\Safemon64.dll.locale
Size	52.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`2e798aa65c0b1b846e08bd842a86bbe8`
SHA1	`00d4af1d98d0ab9a4d89d10a860d3f6417a00f8e`
SHA256	`69d727f4daf223278a20d9d5de97921356dd8d7d795da5d3e74474e98103b12f`
CRC32	`AD886856`
ssdeep	`768:J3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqdV8/rfroLoktfu6jeDm:+KJSpD9+1tFGHXt+PCrofFje6`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	e692bb1cabb48bd7_360netul.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360NetUL.dll
Size	239.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2586f41adfba6687e18e52b75f69c839`
SHA1	`88d1099afd28ed6c3943107904dc766bb509ec40`
SHA256	`e692bb1cabb48bd7652f7fcc17c10f0c421304677128e199347ca54c75340ce5`
CRC32	`CBA1C724`
ssdeep	`6144:qVnmVCxQaQLqoHwkxw3SThfLo9TBlTIioUaC:qVmkxQaQLqwxwCJo9TjKC`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2cea7306fbae0790_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`fdd1e8bcde0ad6a16f74d726bec71fce`
SHA1	`6d9461e0bc5cf40424ee745d618b97fc4fe52263`
SHA256	`2cea7306fbae0790e183faf03cfcf026ba903912ed3f27520fc8dba331ff8484`
CRC32	`D5C0BCE1`
ssdeep	`24576:pMM6kj6Mv0SJYJG234hv1GE1n9i15C3B8B3php7GehEm:oQ67SCG23y1GE1nk15hp`
Yara	None matched
VirusTotal	Search for analysis

Name	a5f1583ee20bb266_qhfilesmasher.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\QHFileSmasher.exe
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`bb7275057b8024a57d701cf9534e8ccb`
SHA1	`bcb5ff939a88f3bda1ddfd5dc87d8b9cf94a370c`
SHA256	`a5f1583ee20bb266f3ade2bedf49fe1d2ec76afaaf04d6d6b2ef9a350bb54ea2`
CRC32	`3C452CC4`
ssdeep	`12288:0jwHlbKaWY6oL1T0uwJ34dW/QtQF5KXGOTBwfRzPZ15HVCjPNMOuEFcd+bZqA86C:0yHC/QtQF5kGXZPYV1BFcxAZJkwxj9Q`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	5404274faa61a9e6_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6e15038de4f4bf0c6c533582bbc1685a`
SHA1	`c1df2f1ea4cef5bf8074a160cf2d7349e0edd223`
SHA256	`5404274faa61a9e6d27538ac9e60e380d49112e7d83ac40d6bb5b361f22fd4c6`
CRC32	`222C7A8C`
ssdeep	`1536:pORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3H:pOBrUC4jyUJGKzgSg+se08GD0FS`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a82957db09c21550_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`87ff93dee950902ad30ec4e1fd04fcb3`
SHA1	`dd2a674d6aa6269ca58824a3819f635041c00b4e`
SHA256	`a82957db09c21550f709d71d8f6742c30b9cb7bf17c8d7ffb07dbaa7565410ca`
CRC32	`364A0181`
ssdeep	`192:7GMTvuGyMrj1grjzR+vnr9ZCspE+TMArb3ht:7GuoM8z7eMSxt`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4ab781fcd81c49cd_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\libvi.dat
Size	790.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`f186d371603b756bcb9b16f9905b83b4`
SHA1	`72ab2f3744ad7af8b5154b1fb5ef80ed7da9805c`
SHA256	`4ab781fcd81c49cd50e0e9943b5fa34f6aec6c38b007affeb29e8879ae2f80c9`
CRC32	`A147F6D7`
ssdeep	`12288:+/nCExkRpiJhfKNJhhD5PpS1t/PUPmuisxaA8Fnf7:ACExkRgJhfKNJLhctnUPmuTaAm`
Yara	None matched
VirusTotal	Search for analysis

Name	cf21c2bf7c67bc18_traceclean.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\TraceClean.xml
Size	938.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`235902814550cac9eb148900e0a83506`
SHA1	`8cf9f731f70db097773afca05e824224f572afdb`
SHA256	`cf21c2bf7c67bc18f4c3ad72847af2634f0b233a0c4d79bd3c20edcb78ad259d`
CRC32	`52A28AEA`
ssdeep	`24:QlL+xTiul0orJrZZywyVExRpFEflNO2w42Ny:y+xTEorJrinVwtsO2F2Ny`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	333c5d13dcd06240_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`56aabe314651b7cd647c7b7ee1963013`
SHA1	`9b51057d57a5805038b3df7ae89e026d367aab3a`
SHA256	`333c5d13dcd06240e40749a72743320c05ca708bd18d4fb1a2694863d562bce9`
CRC32	`FFBB4650`
ssdeep	`384:PAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJTChE3w6BJuA2NpD:3bSj0SbDQoYZlDT9cPJyE3vBcAIpD`
Yara	None matched
VirusTotal	Search for analysis

Name	b45d9f236b407a87_360internationsafe_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360InternationSafe\360InternationSafe_theme.ui
Size	8.8MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`46cc0c349fedcca216a21ea8a9fe86a9`
SHA1	`e946bdce27eec9807bad81e4a7aa4cd1b5196816`
SHA256	`b45d9f236b407a873cd7fed4587737405640c902433016dc604bfb3c6d89bec4`
CRC32	`3795D2E6`
ssdeep	`98304:d+Ewl7b1Kk6qMSvruF+l5omkUUBE86i/gXonTBP6NAt57:d+EQfCSruUXjkUd86WPkaj7`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	e00a185464266fdd_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\libvi.dat
Size	790.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`e799b79b1fe826868265dce4c8a6ac28`
SHA1	`44af1a3fe155b4ac2da06371a351d056441f409a`
SHA256	`e00a185464266fdd988edb2f4bd130b4ebdce7e064fedb45806f577f1bb19291`
CRC32	`EDF44E5A`
ssdeep	`12288:c/nCExkRpiJhfKNJhhD5PpS1t/PUTmuisxaA8F5f7:mCExkRgJhfKNJLhctnUTmuTaAQ`
Yara	None matched
VirusTotal	Search for analysis

Name	1b82bb5375bff557_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\libvi.dat
Size	790.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`81c109e98f419a26e0e7c5f89a32f484`
SHA1	`9414a83b2196e61ba05c9e5559a318dceddbf30e`
SHA256	`1b82bb5375bff557295b36971504f142d134213e37f80464754092b55fd0a3d5`
CRC32	`13CD63DF`
ssdeep	`12288:X/nCExkRpiJhfKNJhhD5PpS1t/PUjmuisxaA8Fkf7:fCExkRgJhfKNJLhctnUjmuTaAx`
Yara	None matched
VirusTotal	Search for analysis

Name	f481927066f2d50d_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\yhregd.dll.locale
Size	17.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ba06a5ce301f71de5699d38a2b566696`
SHA1	`263f29542afa19a3e90c46bcbe37503a8454117a`
SHA256	`f481927066f2d50ddf1fd42bf568a2af3a33e245b70f0f3eebc1aad8f23d4007`
CRC32	`71BA117C`
ssdeep	`384:7eyQE8bBnYPLIeR3KJ1MgeDGPhC8KqQKvrfpMQ3S0:qfEmBE9KvMgeDGFKqQwM0`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	15164d3600abd6b8_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\360SPTool.exe.locale
Size	31.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9259b466481a1ad9feed18f6564a210b`
SHA1	`ceaaa84daeab6b488aad65112e0c07b58ab21c4c`
SHA256	`15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964`
CRC32	`26769AAF`
ssdeep	`384:7baacsultAgwBAP3Excizfb5pei1QcMCPHz7eMKw8n:at4B23ESYf1Mi1+Hn`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8ca73b8eb82f1c74_360antihacker_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360AntiHacker_win10.sys
Size	170.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`6d58be92029ded20769fafbc730c2c57`
SHA1	`d182493d0df42d310ee4e57e51a9692c16ba13ca`
SHA256	`8ca73b8eb82f1c74152ec70a33a1f32625657a622b6c5ccd8763c91378806a8b`
CRC32	`845D5FED`
ssdeep	`3072:kAJy0G9rT4ll9G+EkATPAeJnyiRn69yDfdCJGL9unCtUeM:kNdAli1nPl3R6E7gGL9unE`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ab52fff1840b010a_360netbase64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360NetBase64.dll
Size	2.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`869470ff4d2d3dffc2ef004a208fa4ac`
SHA1	`98b2e5b7240567b046b47021e98c84702a39347a`
SHA256	`ab52fff1840b010a1e6be5e432c44ca0aa2857d5da3df6574fc0fbc0004edc7a`
CRC32	`C2010FEE`
ssdeep	`49152:CVIinTTBzBAr/XjSULaGtlq+1VwASOczhrzEIU6ii/CUP3w:CmvYD+i/Cow`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	3d1b69b19a8510d6_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`dde9f4e1fd3c706361cde23239baf8e6`
SHA1	`646f69dec3656fd19579606789d258fef5a45e96`
SHA256	`3d1b69b19a8510d6176ceb011b71d79859c13d4c61541ec7174f344d3a77bb24`
CRC32	`F282C604`
ssdeep	`24576:LMMmJ6pODUATD23jo3sANYM9TWLrB8B3phpc0hbB:86EHD23asANYUTW5q`
Yara	None matched
VirusTotal	Search for analysis

Name	d14d7de52c574954_menuex.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\MenuEx.dll
Size	315.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`273c2d00588d203a9f1486cabacc7c57`
SHA1	`cd7782e5836d645b2244bf30fe91c79fdcfc86d2`
SHA256	`d14d7de52c5749549a17e7614bd3df8278e8595ffca4110e6289c56a21eea6dc`
CRC32	`D7B876A9`
ssdeep	`6144:p9m1jvoDasPczGQtjejVVsW7Apf2YZHB5dtayloL8c/FdgHqW9+c9C:pAFoDasPcFtjnHoF69d9C`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d4d0ef1ad34b647f_360okcleannew.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\360OKCleanNew.dat
Size	7.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ae5642cecff7f604de74e94a4b95670c`
SHA1	`8764add968072855334dacbdc92f1f3051521401`
SHA256	`d4d0ef1ad34b647f8349e5d8ee532074819b1fb4a5ebc51782eaf34949707fac`
CRC32	`4C228697`
ssdeep	`192:HMIbqr/uo/DmxmRl+hOzjR5tmIQUy92y7IoSx0nQ7:HMIbqB/D0k+4jRiIY9BC6O`
Yara	None matched
VirusTotal	Search for analysis

Name	40920438eb1b1054_desktopplus64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\DesktopPlus64.exe
Size	3.6MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`addb69f9a976b47243ed7c621c7e5c10`
SHA1	`6f0d78c32984b7dc764df183b76802f2c2203a11`
SHA256	`40920438eb1b105449b565d669cbc7f74a7c8499a1ebdc683bbf62499c222a5f`
CRC32	`02B7B388`
ssdeep	`49152:yIqnYWKGWPPvjMM3jTcfsCnJqVlwoS4Y6KPJRQFqvpQP3TRTi:n3jYNvdhWG`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	282a547f1bb65fbf_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\Sxin.dll.locale
Size	48.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a1c688b58d67842b862cf529ef91bdc0`
SHA1	`60e3e6304b99aec159c403fdcb94a99bd6c2d696`
SHA256	`282a547f1bb65fbfa3e09512e9646d959dc7ffa9089eba3b0aa75866a41bd4c3`
CRC32	`CB5E45F8`
ssdeep	`768:1y2lF/WFLLpAEl6Zh7laV5tp01NtY+6JWIdvDBXm1M1:M2kLlARh7ZiJWIdvDBXmq`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	907d795e2dfd4a63_scanproxy.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\scanproxy.dll
Size	539.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`acbd126a6222d1f5efb729a62649b6de`
SHA1	`9f10a615ee883c60bb1dad29d04359427ec587cd`
SHA256	`907d795e2dfd4a63ecffbc03a063dc01ab251f497b312a5d749ead87d141624b`
CRC32	`51E36F69`
ssdeep	`12288:VwCQqHl9fmgXf62ktbJTFu+j67bGu3vOfKBEiT12DpZHuPjoEtcL8qTqfzqiZD:V4qOaGu3vOfKBEiT12FZHuUEtcLyzqil`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a6998b8150721996_fsrmgr.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\FsrMgr.dll
Size	303.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dcf6deaaf591b1c43a18b3e2cbdb5145`
SHA1	`a33de3ced30552a2753a19f639fe746d51455910`
SHA256	`a6998b8150721996f9b2032a878c025b6d350bd584ffa383dbb58749426ac744`
CRC32	`D28F1DBD`
ssdeep	`6144:LL0Ddua7HiAuNhZRK3nRZ7FJx/Ts/qOrlTZcqyXhyW:LWPCAwhi3z7F7/Ts/qOB7HW`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	22139b7d1ca93d31_360ss2map.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360ss2map.ini
Size	1.5KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`c919f93e36469e2f8134073ffb9ffa51`
SHA1	`f20e8882b771302573baabcbc3d95f5085b9e6fb`
SHA256	`22139b7d1ca93d31150773ca4ae95b3bd5afb6d8b6006dc316e0ea85cddce41f`
CRC32	`147F8380`
ssdeep	`48:OI4/jlBLSLjbO024Bqj0tzceWDFALzvTZL+F:OIgjLLsj6DgtzcRDFszvTZLo`
Yara	None matched
VirusTotal	Search for analysis

Name	9ad1b2e4f0250743_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2b7efe5248371a6ff34ba8ca2e926d4c`
SHA1	`58cec28dd2772cba94e5ce6789618b43cfd46aec`
SHA256	`9ad1b2e4f025074324428ee8d021c6a0188dc4cac2ca64da43c23b6513342595`
CRC32	`86C9D771`
ssdeep	`384:7l6tGRtDGrN+R6I7nOSeMnjgA8nQJ+MQ3TL:Z6toDGrN+LfgAnJML`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	476da4b871d76828_downloadmgr.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360DrvMgr\DownloadMgr.dll
Size	429.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`08e9944c8613da6fd35d2dd3253fdb8d`
SHA1	`5d7ba58497dbaf348b1c9870db61ca74abaa67b8`
SHA256	`476da4b871d76828345411d1f55ca1ff35ae91c0c6f55146c519fe384d02ccc7`
CRC32	`4296E076`
ssdeep	`12288:Uhe2bcfY3Ioj7ziFdiVB/cLEIKGJqu9TAQaLV2xWqnw9X:Q6oPzkxL9TpaLV2fw9X`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2d81642d55663235_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`0cb58560dc6e26fff4d9aa4da734dc8d`
SHA1	`5a1a55435077e39d753f96ee8a6452d90f7f8710`
SHA256	`2d81642d556632355d8b57b50ce2092c57e9e17f6a97cd60d28ed1180731adfa`
CRC32	`5993EC69`
ssdeep	`24576:8MMOn6EdKHovLM23i70bvocIvebCDgHRKB8B3phmRLghNW:T67HOM23NbvocIvImgHuLv`
Yara	None matched
VirusTotal	Search for analysis

Name	49f763dd55fb2bab_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\chrome\360webshield.exe.locale
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`55bd39c912ceb0abefe1a7a772b53415`
SHA1	`73da858bef4c06b2f57600c434a1d9740db8fc35`
SHA256	`49f763dd55fb2bab5d53d8f56d1d80e301beb9bd75f72782d901a29af494ab39`
CRC32	`FC8B85D5`
ssdeep	`384:7tHQqh5eR3K+h1MeK6j9xDGPhCqgQKvrfpMQ3l:1QqhU9K0MeKg9xDGqQw7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	11294e063fe9a5d5_menuex64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\MenuEx64.dll
Size	388.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`d569954dc1054b6e7d3b495782634034`
SHA1	`dfaf57da05704261aa54afaa658d4e61a64fa7f2`
SHA256	`11294e063fe9a5d5b6019a39b48bebb75f536e27ff92008c85e9357c95805b80`
CRC32	`72FF941B`
ssdeep	`6144:W0T3+GaWPxAe7HonHuu0LLt3i7cOTz85gW5+mQMc9fg:W0T3+G7PemHonHELWcYz8jT7c9o`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	36a5ba155fc04ad2_libzdtp.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\libzdtp.dll
Size	472.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`de0416c19c6bf28eb43764d5ae30cdda`
SHA1	`0544fe6d144ae01a0f7afd89342305ce80016c2a`
SHA256	`36a5ba155fc04ad24205583aec3cc185b13c0133f267731ed8219288bbe000c9`
CRC32	`A277D3D4`
ssdeep	`12288:7GufADwXTVKHaJqNFORPUo34T3Cn2hmunSq9C:9XTJqnORso2CnqmunSq9C`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	42a7c60ffcb859d8_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\360procmon.dll.locale
Size	105.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b296ca0196d0b79eb77cad154385e190`
SHA1	`069706942113be9d9e9cbee9cd24c0b145deb9c6`
SHA256	`42a7c60ffcb859d8ff0a6cbf90a7f88b2e41d5e166a3bb58e9daed403f20d377`
CRC32	`3461AD3C`
ssdeep	`1536:NORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3T:NOBrUC4jyUJGKzgSg+PZBVlFK`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0d57b6653ee465b3_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\art.dat
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ee6209ea99647fd02cc5bf6e0351e76b`
SHA1	`009ef554fe771d68f7bc1ac5734b12be0d42e4e2`
SHA256	`0d57b6653ee465b306341d98a1ff3be8c0b1cf24f1ff3259d8d47a699ddd8f64`
CRC32	`523D9533`
ssdeep	`384:9rHM8qmc1HnAv4x3aXdyI02HUxqZ21CIzmBcajFHZUVYAE41k03R3jB:9JDc1s4x3aVd8`
Yara	None matched
VirusTotal	Search for analysis

Name	b82735c11f8972b5_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\safemon.dll.locale
Size	53.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ef7a618fee40d27d9717da512a734a18`
SHA1	`d6e641747bfdb9fad40112b34cf41dcaaaaf090d`
SHA256	`b82735c11f8972b545dc7148ecdd7fe372b4218aa41e07f6712a85af6c141560`
CRC32	`986AAE99`
ssdeep	`768:7SWFluWFrLpAEl60h7l61HM01jO+6JWYznzQs3pBAGr:WWPrlAMh74xjoJWYT0s3pBAGr`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b8127da540c766fd_desktopassistance.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DesktopAssistance.xml
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`e1f63a575ea1798cd4e63a02e3ee399f`
SHA1	`deb4f5aad25a43814c299bcee32bacbf2bf8ea5f`
SHA256	`b8127da540c766fd49b7d8d16db454270588f653e978beb7a375c9de2e1724da`
CRC32	`345BE0E7`
ssdeep	`24:QlL+xTi9yOcOsHZywyVEphpiF+VycvTyCycvpGujw42Ny:y+xT2ylFonVIPTtpRjF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	235fb32d2cbd7c61_somkernl.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\somkernl.dll
Size	3.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dd7f41b9ee99c324d20c17694f9e141e`
SHA1	`f4c56cf3ea028561efbb6cfba44ffbf2487e9513`
SHA256	`235fb32d2cbd7c61e9a0ddf1a9693e6614bcc2654fc48bae65a2478797b43cdb`
CRC32	`3C326FD0`
ssdeep	`49152:YZMkQxMeXqSbbkZFtrLeXfVxCB38JQzAwi9rexOFpQmMx6Zumaww7mIolLHoJ772:YZYbbkZLJ8KAJ9y6amM8X1Hu77ugBw`
Yara	Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC Network_Downloader - File Downloader PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	ff90a92f395d6626_businessversion.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\BusinessVersion.xml
Size	1.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`717d4ac56031589197b81e4b4f73004b`
SHA1	`062489289b46282a5cb20155098a59be23b9534f`
SHA256	`ff90a92f395d66262010a8a063e542597589aa47d59f0fa44c1c8385ab2c04a2`
CRC32	`CC973B7C`
ssdeep	`24:QlL+xTi6aBxZywLVEpeaphqIELMCBw42Ny:y+xTHaB6OVXqqICMCBF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	3376967f3b18b6f9_fr5.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr5.dat
Size	13.0KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`ade7ba4f3faa34535fb44a0169822b17`
SHA1	`d3b800bdd06e4582ccd4be296faf344a41f2aa53`
SHA256	`3376967f3b18b6f9d1c0bb6949fccc300fb48af8d34280a9f299c34f387cd3f2`
CRC32	`69A52491`
ssdeep	`384:WXz/C+IHqIIVw9gIY5kVp+GfC4h0yDmgB9wDUv30LS:WXzaKuoe+X4ObyT`
Yara	None matched
VirusTotal	Search for analysis

Name	b6ee2f6e8bde9875_account_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\account_theme.xml
Size	38.7KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`fde2727f57890185b21b8d25b8a51d22`
SHA1	`78e1808fe61915092517b8624aff9769288d3558`
SHA256	`b6ee2f6e8bde9875a96dca0fb45764cec143ca12108fe30437f743d0a6c4f0f8`
CRC32	`572D6CBE`
ssdeep	`192:Nc52kIXdWgWqlklfiAuACpWOXzgKiL1vvFg:eSdBTe1upN`
Yara	None matched
VirusTotal	Search for analysis

Name	c4d3c39083fbfb6c_combineext.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\CombineExt.dll
Size	146.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`80e2f9967f757a6a7c5e0cb2d0196160`
SHA1	`33be217e5904dc3ec0e8fa9ac7cf56a0657bf8fc`
SHA256	`c4d3c39083fbfb6cef2fac14a17bb2fe1bda4464d693c1c63094c596d0a59132`
CRC32	`05A8ADC0`
ssdeep	`3072:R5VF7tVwj+U1KBQ7AxSnZvilziCkEjNlApXGLZiK1xAaAt45i9lIL:9aSenAxcvilOGlA8ViK1ihg`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	9cf9a98657671c65_360boxld64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360boxld64.exe
Size	358.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`73fdd2d0f52b02d85b39efd8fdd9ca25`
SHA1	`c231a5b6ffe52ce2e1c4a972c704cc4ec7ac40c9`
SHA256	`9cf9a98657671c653566fa16a9a70785f535e78343fc987b53ec3c1c17790354`
CRC32	`7B0D5A2B`
ssdeep	`6144:RN9XlrU9y5rhHTl8LtawYkUjaP0Q1aOcS/6Kd/V9pe:RNZdXrH5HkUjaPM8V9M`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4a7196870602f719_sml_taskbar.uiz Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\Skin\SML_TaskBar.uiz
Size	5.1KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`bca992d83c8618fb41027e3cd660bb9c`
SHA1	`b39981e572d907a2afb6becf4534f5c7e4369257`
SHA256	`4a7196870602f719e4e560ad52202a8e1fbd6015066b5240670b176203e70355`
CRC32	`B53D03B3`
ssdeep	`96:579FOp+gEzkS0n3pW7B6Jstfta8ooOJNuO0EXOw1k5YoRN1M:hOFEzk107BVjONf+Z5Ysc`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	9cf4e9e5386b5fff_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	109.1KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`e25b4e1ec827bb9cc669676d49c3889b`
SHA1	`ded11c1d11d02ad994713a2b21e0b7b676416fa0`
SHA256	`9cf4e9e5386b5fff30d50501198a1f1052ac2aae1f7ea691b60f46c26bccffad`
CRC32	`6B368D6D`
ssdeep	`3072:rkrWaSDSAGubUmDVxb930RTC8kipAkNKKV9NrUg:wrWdzGSUmDVsNA4LrUg`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	e7ef1827d19f0275_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\spsafe.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bc5c2e46ad7a64254be2686ec39f7786`
SHA1	`dbbe1a5da3e3d593c4428d8baa5ad63b09844d65`
SHA256	`e7ef1827d19f027536a5a12b2e24bbedb4f62b8d6405a15c5df4b6aab592e1eb`
CRC32	`187BD449`
ssdeep	`192:7e+bsqyMrj1grjzR+vnr9ZCspE+TMArAYDi:7Rbs5M8z7eM5YDi`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0414676c11629bb8_2d85f72862b55c4eadd9e66e06947f3d Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D
Size	192.0B
Processes	2216 (Newoff.exe)
Type	data
MD5	`12ca6b0e9f1db94d9de54ce59e1a610b`
SHA1	`2517f251288093b23aad3fa83cf4a0b9beabd532`
SHA256	`0414676c11629bb831e0e64a99c058865f87bc459e8f08ff1bf22252cb3319db`
CRC32	`523898B2`
ssdeep	`3:kkFkljb7VXfllXlE/HT8kANNX8RolJuRdxLlGB9lQRYwpDdt:kK1T8jNMa8RdWBwRd`
Yara	None matched
VirusTotal	Search for analysis

Name	50896d4a4764d960_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\Dumpuper.exe.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`ac425c345adaf8414bbcb1199f9df6f3`
SHA1	`c42cb326a643f4875f9eaef93385c8a38fa4ef4f`
SHA256	`50896d4a4764d960aeb45bcf8bf7832d4b33f94f119c0e91439c49b9d3da11af`
CRC32	`303890FD`
ssdeep	`48:r+uLuqQVDxiS6MmermMgWuKNycgCaabDfDaOXDwY7Irqh4ekg/:r3LuqQVDxPNKMu4yWa+bDfwY7qqh4U/`
Yara	None matched
VirusTotal	Search for analysis

Name	b1a1ac660c4e7806_datashield_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\datashield_theme.xml
Size	10.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`7c4b9e94bbe051814c36a4ba5433e7e7`
SHA1	`57cf01573f8b00a16f05f0957550670a76252a04`
SHA256	`b1a1ac660c4e78061972260fb452459af3e8faac11e9cf5bef5a31e735bc2176`
CRC32	`8DA7D90C`
ssdeep	`96:DRrwz+2Zung+29uf5e22uGLMLgjJOoaU7glFfhb+Jj2ZsYhu2bu2audnujZuWluO:BlWibOXzgKiL1vvFg`
Yara	None matched
VirusTotal	Search for analysis

Name	70f0b588bc107829_sysoptm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\sysoptm.dll
Size	285.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`94c44279545ec3e426dee2c8bd29e660`
SHA1	`c123b3c42230a8c18e56ddce4b1cd3a03cff8ebd`
SHA256	`70f0b588bc10782951dc4250299eca41812cba10a99fc68d7b5c7e14c0f123a8`
CRC32	`6AE68488`
ssdeep	`6144:3af3sK65dlg0ytSGATnCMVVwR31jx6t3UDTSH+FWNgsAIW:K/s35dldytp2nC8eNNx6tEDuH+FAAIW`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	69ba859d3503f5cf_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\deepscan\ssr.dat
Size	51.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`39a2a2443cee5c8b93448cec5507906c`
SHA1	`3e0ad1616f267682ac976d0157a932edfe67ed1a`
SHA256	`69ba859d3503f5cf5dd3b8a5b5af23dafa6db89cff9ed6085c04da8d291a3848`
CRC32	`830BB540`
ssdeep	`1536:veaePHiUF1jZIiqD1sX8OicL1WrFP8fcLfWhnFLrJ:vwD1NITD1zOLwFUfcExJ`
Yara	None matched
VirusTotal	Search for analysis

Name	2d2a0220668a3ab5_whitelist.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\WhiteList.dat
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with very long lines, with CRLF line terminators
MD5	`15e717cabcc91f6074cf6cf996d840b5`
SHA1	`84c74b86bb34a11a46a66c22babf9cb20239566b`
SHA256	`2d2a0220668a3ab5ff45b02e020077fea068a4316f0fcf4618ad182d5203add1`
CRC32	`7D81BF94`
ssdeep	`48:Q6FGqzHFGqZIpA0ys1zJFNjqW7Lkr+jc0bgBrt64ogTy3E+82+Le8dNuVQV:Q6Y4Yeqf13Nh7LYAwAhgEE+84MNue`
Yara	Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal	Search for analysis

Name	9957b602d1f3d510_vyvybt3kilzi1_flxm_v_jsk.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\vyvYBt3kIlzi1_flXm_V_JSK.exe
Size	3.0MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`1ec7eaf27e38d3ad11487f36201325ed`
SHA1	`2c497c7a97c0720324b9e845c330ff1bbecaa004`
SHA256	`9957b602d1f3d5103302ba2e773fba19a418153eac45784f8515b88b9f2941f6`
CRC32	`B3561706`
ssdeep	`98304:/v89tz7Hw1uwDn0rR7dqxk71+RhkjHHm95gVrr:/kvz7fwDn0rDqxO+RQnm95C`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file EnigmaProtector_IN - EnigmaProtector
VirusTotal	Search for analysis

Name	a3bab517fb82b901_regmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\regmon.dat
Size	30.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`fca0f4bba1c31e0aeb12fc0afe99e590`
SHA1	`e3f29998d6c9f14b0f1db5bbc300a70243285ed1`
SHA256	`a3bab517fb82b90142a2b93a7557bf3d7554e0fc3614a4802415d67d33febb6f`
CRC32	`C06432AF`
ssdeep	`768:L/3TP1SAs63v7uwoPGzkV0ahGAqWVWGjKse7hd820+t:L/3TP1zBulPGz80ahGWVkscy0t`
Yara	None matched
VirusTotal	Search for analysis

Name	5146a42b63c44d0c_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\DsRes64.dll
Size	104.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4fb1d7ccac4c6f50f8cae4027ef5c319`
SHA1	`c11dd65582c46322f90be0a96c4a988f26f509d6`
SHA256	`5146a42b63c44d0cc8eca86758012efa11ba4f34408533ddced0215dc488275f`
CRC32	`9C67BA5F`
ssdeep	`1536:4WPrlAMh74pEFRouT26PBY3NEY5rE5B+0s:4lpEFRouT26BYWYtE`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5de37f6f9f2f6f2a_popwndinit.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SDPlugin\PopWndInit.dat
Size	4.8KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`c7f41f9374ce2edeb014aab416b8cb63`
SHA1	`a1ff3fe46ce645cb0742ab8a084e346041f104c7`
SHA256	`5de37f6f9f2f6f2aacadcf88fb33e2d83f0434758c9fd44548d435bc6889d7a5`
CRC32	`BD609E20`
ssdeep	`48:31wB+RHzBUp1f+vHzBY3s1k++hHzB1cvccIFCcv3cIs19+iHzBTIxis1C+1QHzYA:W7sv3ivM/IdiW1d5cjmJodTkR/NSb`
Yara	None matched
VirusTotal	Search for analysis

Name	1a6782734dcd19ad_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`beec8c7c207fe28ec4d5465774c57b6b`
SHA1	`06a0eb1b6c8afec792ffda934408ba10efa4205c`
SHA256	`1a6782734dcd19addb01a716001643e1d26a370d5d2664cf1e2c2646943e1b32`
CRC32	`95C8288F`
ssdeep	`384:7cRskeR3K+h1MeK6jFj0DGPhC3eFov05MQ3QRv:YuN9K0MeKgFgDGzFoJV`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b0a2dd51d75609b4_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`47383c910beff66e8aef8a596359e068`
SHA1	`8ee1d273eca30e3fa84b8a39837e3a396d1b8289`
SHA256	`b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f`
CRC32	`16B6F31E`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVl5ENqWIajuwapG4i8nc6WSbJ1J9Wd6AFWbmc:29+DgRgizMG4i8nxWHFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	3c706596256255cc_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\Dumpuper.exe.locale
Size	1.2KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`3bc5e87e0f5f78e1c9ebc3845c129c6a`
SHA1	`17dbb327bf7c76d8a6cf33d51291b6d9124279b7`
SHA256	`3c706596256255cc9db5a37fc6e367e8bda56d0ddbf2f4f78e9e1dc71032dc48`
CRC32	`0B4AC9AF`
ssdeep	`24:Q++uLTa0VgzNVn0GZZFIeEzgWKchp4KMdZuYKX7xiWATejaIV:r+uLTa0VyNmGzueLWjhp4ZRY7xqTemW`
Yara	None matched
VirusTotal	Search for analysis

Name	401d8529a84f1d80_360netbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360NetBase.dll
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`14c6b4bbd31f6fd13530bc941cc71d1a`
SHA1	`ce4e38ac82a54f64d318507ddc28f9ffbb378f0f`
SHA256	`401d8529a84f1d80a439be8cd4e869202162458e5afb5e5bac97c4859bfe8eb5`
CRC32	`9CA330D8`
ssdeep	`24576:mAWxXgDTLtuxkPkoAGb+KpPderMvDjQIuL/w1MJD3ndPKrlL6p/nxoMki+22:NWxkTLtyNojf1LvJgVBndM0p/gi+22`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) ftp_command - ftp command IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7b2ac16f9e8f6e47_h_1.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\endata\h_1.dat
Size	6.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`1e132b8bb455348e10714b0dfd95aadd`
SHA1	`1b757a4a4ff71b517fc80bd12c1d7b18441d2e50`
SHA256	`7b2ac16f9e8f6e47af03c277c99e504327d219cb359d6a1277c2f9e9ef139278`
CRC32	`4E7D9EC8`
ssdeep	`96:ulrhAr3CYu3+kJVG0/0d/OcWMjMDH//bw7oI3QEBE6SKHoVEAPe84RvckH5yLE:UKr3CYujjG0/0N9juH/Tw1IKIuAgvcyP`
Yara	None matched
VirusTotal	Search for analysis

Name	4d1b690ff9350943_premiumtheme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\PremiumTheme.xml
Size	954.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`255f4a6420f878aa6027f25d5c772c7d`
SHA1	`bf07778f2a6112e51439417595ee38bea46efc12`
SHA256	`4d1b690ff93509435d9532dcd89c8fe432bdc147b9c90be638f5e33b5a041744`
CRC32	`1B069D78`
ssdeep	`24:QlL+xTiXwRliNW1WdHZywyVEp58pisEQpTtq2w42Ny:y+xTyDMUdonV0VszpTtq2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	957644dfbd6e73d7_scanbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\scanbase.dll
Size	118.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`67ba4fa42feb36323a08978428ab4bc9`
SHA1	`1e6de7bed8f573490f38cfe014c2e958826ed59e`
SHA256	`957644dfbd6e73d7aa99f81989f567958146dea69b9edf492d1c9c4d59518271`
CRC32	`AED66BF4`
ssdeep	`3072:gYr/IVanty6TScycy52HOkSlik+hfNTB90:5ecmIukL/VN90`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	c1e1e353eca103b5_safescan.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safescan.dll
Size	381.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d415e3e445ca369e3b6f1c42e1019d73`
SHA1	`a659183b422a8666207bc3de5f73772f8d134060`
SHA256	`c1e1e353eca103b5970dc436e911e3a23ceb3f898b2da3ae5c2460e770526b85`
CRC32	`2F64946F`
ssdeep	`6144:ZCKPSJZ+82L+isMQj66priqyFnEwCCJ9VYg2fEDOITTEWjTi/lhZatmJbwacjeYC:ZvPSP2L+isMQj66hiqy6w2fyTTEqTitr`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9f7a13268092b7c5_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\AntiAdwa.dll.locale
Size	126.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3f20d1eacd506ca0a0e8b7e40d3080fd`
SHA1	`eb75fc7ea50e6f24cd9941fd7526fb6b72dbd86f`
SHA256	`9f7a13268092b7c5bab83ccd78e8dbb2568c24600371aff9fae8d8b30dc15241`
CRC32	`E7F3B581`
ssdeep	`1536:FmvblAch7jyRouOK5v33b3vjXbtKvgVOgwzBPOxeF5u:FMyRo6agVOgwQxW5u`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	0bb2157d09ce2be9_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\spsafe64.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`9eac3d77855de8f5e44b9c9d73315e3e`
SHA1	`cae4af4c47854612ceed912d6ea8417fb83c875c`
SHA256	`0bb2157d09ce2be9bf8fa1bddff86206f0265f92a26fd058f9dfae1205c6819d`
CRC32	`4E080E74`
ssdeep	`192:7qhCMHSyMrj1grjzR+vnr9ZCspE+TMAraT/:7qwWRM8z7eMB/`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	94b8eff04d956b05_360elam.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360elam.sys
Size	16.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`df0c371fa00382885ce796db06e84c5d`
SHA1	`047dbaedc7a78e49caf7450bb045b27a9426516d`
SHA256	`94b8eff04d956b055050249550ad276f9ae433c004a2f20ab5c7c769a9a57f12`
CRC32	`4A30154F`
ssdeep	`192:Az/0xEfoeFv0Q9uW5CRDWHVWQ4eWjEduXqnajyChd8C:Az/yyTFsyOlmC/8C`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4e5bbad61bccad22_tjptvgy0_5p94sdw5pqwllac.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\tJptVGy0_5P94sdW5pqwLlAC.exe
Size	3.7MB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`91c075e601360acb3124080eb066453d`
SHA1	`183d6f4aa1a7c55bcdc485b5ffaa9f884e763cce`
SHA256	`4e5bbad61bccad2281c95e4b8f8197876ae8b633e56a2967f90d5e351e5af267`
CRC32	`14818AEE`
ssdeep	`49152:nuHSMVujp4kd0Rroqx8bm4yrIVn/+fYbEXsJeiMFto8izesB/EnRZ:ncSMVJWJyrIVnoYbEcJUizes6`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Is_DotNET_EXE - (no description) IsPE32 - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	9fb7e9dfa6791dbb_libleakres.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\libleakres.dat
Size	4.5MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c85918658b1b0794706feaa63faab882`
SHA1	`4e67a1ff11ffe6776b5af6cff29cff3230e8d169`
SHA256	`9fb7e9dfa6791dbb1772f1328e6d75b80045bccacf55a9d6926325ec780cbf6f`
CRC32	`2F7F543D`
ssdeep	`24576:bN4tdKfpLpPpUpkpOpJpBMp/UcU3B1Vxwch2aSJ:ZfpLpPpUpkpOpJpepE1Vxwch2aSJ`
Yara	None matched
VirusTotal	Search for analysis

Name	00a833752b088536_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\spsafe64.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`b971762be7c65dec2ee1e3f7031bf0db`
SHA1	`67b579094d0a47f77d5a0c17a8a47aeaece776f4`
SHA256	`00a833752b088536ca306527a93d582b90d88ce0ad9c0e1e8414db0ad38bf5fa`
CRC32	`94485109`
ssdeep	`96:73D+Oo+hLAYCiUZ87Eg4iEz7yMhtjv1/YrxBUwTO6+vf8vkrNXZCsnlTE+TVJoAo:7T1ZatyMrj1grjzR+vnr9ZCspE+TMArc`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	e52247f3ed8045cf_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale
Size	19.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f64237af9fb73e6b2204af4a8cb3d608`
SHA1	`57ad56254f47c20f90c62c9a318ec2eb11d6ea19`
SHA256	`e52247f3ed8045cfe5c49bc7716b21ce630c25321323d78086c428d663a32fb9`
CRC32	`13C8C3AE`
ssdeep	`192:7eui3O7LDvGTM2tVku+pdhh2eryHU8/7X8r9ZCspE+TM4rGSIgRYBHUckAwsu4V4:7v7PvAPI70HVJeMqmHl8HQKvrfpMQ3mu`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e0ab60c64fdb1e15_jcloudscan.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\jcloudscan.dll
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4c6a70443da0c8a40b2693e2df0c5998`
SHA1	`21ce7fa61c08f657a7c184e7449fd00d37b349c3`
SHA256	`e0ab60c64fdb1e15bad094f0fcda6170872fc132556769fd64a1ab939fa79cf9`
CRC32	`1BB83353`
ssdeep	`24576:oAtKrN1SMJW20gEwXf0msTxs32ykQjZjf4PBnO4xaThiMCoK9hs:oAtONQMJWDgEwvRWsf1z4IThiMCod`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	83205a49cf834b38_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\Safemon64.dll.locale
Size	22.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0f7116b2519c2d95ed9b93af34e8f5cf`
SHA1	`91f1590845699b2b0298c16e7edf4d7f28bf7d04`
SHA256	`83205a49cf834b38dea99ed7fbe451823234c8f6308725648ef6c562a2aeceb6`
CRC32	`DF3855C1`
ssdeep	`192:7w58lPyZEXa5VJA1YPJ5LttVku+pdhh2Br0588aX3r9ZCspE+TM4rk3+Ea5ciwwY:7w5owVSazvI7nOSeMCjs5JNNzFwhhi`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	df0dafab3c224c96_360central_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360Central\360Central_theme.ui
Size	569.3KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`febd9f086b1add21e352ef438b7599bd`
SHA1	`86906167e5f259f5aee687b8472c17e529e9bc5c`
SHA256	`df0dafab3c224c96e7a0e8c9fb6d2542edb0625d2f27d08227ae5c360be9c358`
CRC32	`742B78A9`
ssdeep	`6144:jYp1dePxAZXidGQk3qjx48n+xkL1Q0a76Jx8pvVFTt6pb54pQ6gB+pCzJJXtgrp3:GEAllxElNe0rERVdt8Ia4pC9xyrp3`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	1a3895d0a4d23981_360wdui_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360wdui\360wdui_theme.ui
Size	888.3KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`3540f265457a93151587ac2d82bb56e2`
SHA1	`ff102cccda667821507a8419cb66bbeca271a5b7`
SHA256	`1a3895d0a4d23981f0ea898d2876aa0c204d7e61de65698c63a50db583526873`
CRC32	`9D5B7069`
ssdeep	`6144:B9nihWY6znslVoSx7EI+yB4XHElRMgwH0WviUzx:3KWY6zslWk7EI+yBsHEW/`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	fcf83ac8a45e5b5e_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\appd.dll.locale
Size	26.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f3a3551afa48f475f1560572c7eb50db`
SHA1	`ad41ae9752f297e4995218416f7c837b54834f3b`
SHA256	`fcf83ac8a45e5b5ee79d2de3682dbeb240d5e7ab1e83a0fa3822bba3dfab9109`
CRC32	`3377CEE9`
ssdeep	`768:RrIU/xKNz1w3F26/9KvM8EAwiyDG3fKFKcMkb:R0U/xKNz4F26/9pENpIr3`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	abc0da03c59f60c7_360tray.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360Tray.exe
Size	403.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`57b51d223396dcd333a943859a9ae200`
SHA1	`fd809931771f535b2ae2b73c52f7c08bce319d9e`
SHA256	`abc0da03c59f60c7f99d40effda14c05057134082b681e776f18d2bbf21cf459`
CRC32	`A0AD3BE7`
ssdeep	`6144:SzRfZEg37ng2c/wFzIyNHO94JSgdJLUltGb9Ku/fw54LhA63r3n9:SzRfZXnzR9O94JSgdJASbh39b39`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	29378231a3289e54_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`d732603faf94c5b18e0caa1b2dc3b2b7`
SHA1	`107929a78aeaed846eb7d083735710be407f6245`
SHA256	`29378231a3289e542fa439eb8d100ec230c97e56bc36bdf4aba274f692dd4692`
CRC32	`193B99F4`
ssdeep	`192:7XLLtyLaMeWsEE1yMrj1grjzR+vnr9ZCspE+TMArfeXd:7XL4uPjMM8z7eM7d`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	3f15745104ca095f_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\yhregd.dll.locale
Size	18.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3679617c75c5e040a6274fe102898c8d`
SHA1	`260e1cd1dad0e435884e28bad67cffd5c6838c81`
SHA256	`3f15745104ca095fda0f889e32fd85eb00009ad5297c2ab686ba64fa591d3048`
CRC32	`AF25DD3F`
ssdeep	`384:7so1CeNZbEnYPLIeR3KJ1M/AKxDGPhCa1QKvrfpMQ3kQ:Yo1CeNZbEE9KvM/AKxDG11QweQ`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	215e52e2d4a637d4_360netmon.ini Submit file
Filepath	C:\Program Files (x86)\360\Total Security\netmon\360netmon.ini
Size	19.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`1072e7c64421a8d69659410abc2a89a2`
SHA1	`03d788b5f482dcfedab4acec754378c7ca700c1d`
SHA256	`215e52e2d4a637d4be9473646ec867de1fbe3b8bb43ef2a6b5a9e84fa2f72602`
CRC32	`30B8CFD0`
ssdeep	`3:Mm1W4Py:LM`
Yara	None matched
VirusTotal	Search for analysis

Name	90c1031ac9b5f82f_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\SelfProtectAPI2.dll.locale
Size	22.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7e7fde4fcca97619f736ccd6df721175`
SHA1	`e9c30aa8481e5709075351252b360d7587a76f44`
SHA256	`90c1031ac9b5f82f9fda4ed21309e1708a45ce1ae816e8ecdb42424bf3b31f0a`
CRC32	`2761B8F4`
ssdeep	`384:77YXJ+FUI70HVJeMyOHlbQC5QKvrfpMQ3wC:gXJ+FrQ11FbQC5Qw+C`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	404a69bd22159db9_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\360SafeCamera.tpi.locale
Size	1.7KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`3622d9547f45d52aaeca1500f37410bf`
SHA1	`a9602be92c9072c1611a71b7da5706df8029a89b`
SHA256	`404a69bd22159db9374b803e96dc16d753ae08d879c6dbdc31cee8b2bea1acc5`
CRC32	`AC5B77B4`
ssdeep	`24:Q++uNLF25f5ysAjRs3kFupEkFGMQEkFoHC2FFaYBvaf3RGjfzyWWAf:r+uNLF29ssERqkFuqkFBkFYmpZu7t7`
Yara	None matched
VirusTotal	Search for analysis

Name	f3129e585a49caa0_advtools.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\AdvTools.xml
Size	378.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`e611726fd24de11bc3f1a05b30bbceb4`
SHA1	`41667c4e0c340bbae1d60f507281f63f9691e4e7`
SHA256	`f3129e585a49caa025920b48d538c0e2a18ba7f940d9aed19e28e2154ffcd49f`
CRC32	`738B0E14`
ssdeep	`6:JiMVBdDewM9tveB6ffmFenvvXDNKOzC8lw9F9DN1ALzCAYdDIDNsGL8tMr:MMHdaXw6mYnh5znlw9x1MzEdDAsOtr`
Yara	None matched
VirusTotal	Search for analysis

Name	116fa978a295cbe5_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`387c062e4397e322338153687becffde`
SHA1	`afb6d7244a813ff01b9f416027eeead036ccb247`
SHA256	`116fa978a295cbe546ba330c0d06650c60961a5d4e68cd78e69a3830fd0dcdd6`
CRC32	`A7CF6EA8`
ssdeep	`384:7eWB60bZMI7nOSeM/Ijb0A8nQJ+MQ3XLo:6WB60bZzLGb0AnJkLo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7a02acf7853fde71_firstpriorityupdate.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\FirstPriorityUpdate.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`8a9888d0f6235943db9b385bb78a6f03`
SHA1	`a3bc726cfa6475822c70514b371719bc362576dc`
SHA256	`7a02acf7853fde71a179678ee0753bbf2e9a80b635a3ac87d686dd56b53a902b`
CRC32	`BF2C3E26`
ssdeep	`24:QlL+xTich94ch94hqHZywyVEpip1qtExUgE2w42Ny:y+xTvhqchqsonVPqt5gE2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	633baea38f3bec95_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\zh-TW\SysSweeper.ui.dat
Size	97.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`903294da1231e6f8b8d03ddabb1755ca`
SHA1	`f993e9546e7aeb4bde5277f9d0f866d2396eba37`
SHA256	`633baea38f3bec9583cad7afd291f0f9e575827492460eacf304f04ee9eae434`
CRC32	`425A9F0B`
ssdeep	`3072:fjHEFQxj/PWLrEdK8dk70z/KOL1gN6FSsVHDGvC:fvj/PLOQzSw1SNC`
Yara	None matched
VirusTotal	Search for analysis

Name	80c17d074f0c01ae_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\Sxin64.dll.locale
Size	47.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`00445ba8dc87dfa39e82978185603846`
SHA1	`ccb3fcfe5d0227cc401a0bd6a8f3cccacb662bfa`
SHA256	`80c17d074f0c01aec6fc14be7d7eaff718d0c38d1425e956cb89bae4f3a5f34e`
CRC32	`D8EC1296`
ssdeep	`768:eXHGdBPASgYoH6dzSnq5TmtzG3TpMta2VEJ8lAoXrtY37M0:PASgRcSqNmtzG39MkEzAqrtW7M0`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	45081d5d5e0b41d6_superkiller.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\SuperKiller.xml
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`d656b3313a998024fed7780402ffc6a3`
SHA1	`1d4fd909eb65d3951be755a43e66749cb3dd3384`
SHA256	`45081d5d5e0b41d6d2d50aa6f792c631847d4e6c499dd04d764de58ce435d961`
CRC32	`2703D5D2`
ssdeep	`24:QlL+xTiWXGb3f6fIZywLVEpabpdFF9sn+ubsxQbLD9MESmtCErmySmtCiJ2w42Ny:y+xTbXaSXOVFX02I+6BJ2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	78470a187bf69827_miniui.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\defaultskin\MiniUI.xml
Size	8.5KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
MD5	`97bb23ec30c1601a62674ea618018ac8`
SHA1	`d3c4381292da345b79316b0fd0dd30f75a274357`
SHA256	`78470a187bf698270269b556f9d2dd1b6def3b4803b78004c9a780f74809d530`
CRC32	`0957A2CC`
ssdeep	`96:uqaDq5DF0THCIDUrg8ScjN/cIGuDg0yRqfJyzoJ1sJE0LoyjPRcUwj8jVcxsuJTx:8kYJArDGutyofFmTLoUYuVme76D2h9q`
Yara	None matched
VirusTotal	Search for analysis

Name	d470e8d4382ad07c_vinfo.def Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\vinfo.def
Size	32.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`dbd72e66509a1fd9b859e2a73e38ef33`
SHA1	`bfd2db5d58257003ead84e7d99347b66e7da9301`
SHA256	`d470e8d4382ad07caaa1e1cbe364235ccbb76b5a7c607027aea45f00fb96563a`
CRC32	`A3150DF9`
ssdeep	`768:3FJ4xuA2ZnCZWecjoUZcgEhbOSXX+HJTwLT60S4ZG9P9I9m4qc:MoZO2joocN1tuHmO0tYPId`
Yara	None matched
VirusTotal	Search for analysis

Name	c978b71a2f700165_adblocker.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\AdBlocker.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`b17fb004f13f6edb366bde640ce58d2f`
SHA1	`d090103eb5646dc4f8a551282ae2675b28d18a39`
SHA256	`c978b71a2f700165f45087f31db70c2aca8571c5c86c5b776680fbc32218c379`
CRC32	`40D6365F`
ssdeep	`24:QlL+xTityWiwZywyVEpapMyU92Cdujw42Ny:y+xTWyWinnVDC8jF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	a3c6f16b05247787_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d9c6b8f21d7371b023b71ed7939cb5df`
SHA1	`0a053e5ebc8468e6fe2983c89efadbf9876607f8`
SHA256	`a3c6f16b052477870977ec63a0ef4d2054efa1aefc2009d263c36877ddfdf116`
CRC32	`79150A7E`
ssdeep	`384:7OPtGMtDGO4JI7nOSeMB4jcsoz2DDMQ3r:CPtTDGO4y8csozkP`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c97ed6f3320d5209_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\Sxin.dll.locale
Size	48.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cf6b7b66c421b8cc2422b1ffb65daa99`
SHA1	`9bde30ab29b606153d97f3c85078438ccf06068f`
SHA256	`c97ed6f3320d5209afcbd5b3140f57093b1b1491958c1f6429420c57e1f5c3d7`
CRC32	`C950F809`
ssdeep	`768:Uy2lF/WFLLpAEl6Zh7laV5tE01ItY+6JWydv7BfBK5y/:x2kLlARh789JWydv7BfByS`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	98bd63053ea4ca3d_ransomwaredecryptor.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\RansomwareDecryptor.xml
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`0190f7bbae83a041de837570d060efaf`
SHA1	`decf364de242eebb665bbd95333fd7797eab5d91`
SHA256	`98bd63053ea4ca3dfe0789268131870646c63d0044a4c34c82ace71cb9f7a584`
CRC32	`E7DDDCEB`
ssdeep	`48:y+xTsifRAyKAyjQ/kwQ3rvwVFZGVFVPrvwVFZbhF2Ny:BsiqyHy+kwRrCy`
Yara	None matched
VirusTotal	Search for analysis

Name	1063678546a73c68_wdsafedown.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\WDSafeDown.exe
Size	282.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`5f0ec71e12648d465454f03604faf817`
SHA1	`d6cd582aa57a130c1f91251adfc4f96fe90d83f9`
SHA256	`1063678546a73c6870bdff6fc8d8bff9975687bed13a2acb26a147eeebad3991`
CRC32	`7AF80652`
ssdeep	`6144:mn+UTkxwvcG1f0pFoNGH79AyFWLD0ff/bdULdoQMz/a6TB9:E+UTkxwkG1HGH7yyFWLMf/bSRRM7B9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	87a111b320167ff8_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1bd56abcbab17558ceb4962bfc4afb35`
SHA1	`b4e5ac479473a4e55219a17dfc142a55e611b0ae`
SHA256	`87a111b320167ff8e2ea6093ec99cb5056503232aa50b80ff627d0c36df5ced9`
CRC32	`B9A42914`
ssdeep	`1536:GORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3U:GOBrUC4jyUJGKzgSg+oXOjk0FB`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	44cc412173a88b32_appdext.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\appdext.dll
Size	182.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1976c7fc84a853a41355787923ce86cb`
SHA1	`cf8009485f909afeeb986bd377496a09ca673301`
SHA256	`44cc412173a88b321de3008742fd092a45bbb7edb65e7f25cc385908cd3da063`
CRC32	`E01BCEF3`
ssdeep	`3072:912TjokE581XxtogLyMkmoWWapS5YWcvZA7n1+DeuXHW39Flpjf:6TjXEmntTWWWacRcvyUBChT`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	389b50f3a5d238ab_360central.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Central.exe
Size	2.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`df3015f6e4a57c482d1d4cf95e8b490e`
SHA1	`36f7e3bf6a8e525df2e2fada809d2dc3779763fd`
SHA256	`389b50f3a5d238ab704ba2626f045ab1dffcf7812fe8700b606d0878d2b0e6b9`
CRC32	`F6A37B9A`
ssdeep	`49152:OBBkrG6xbn0toeeZNIPwG9NdJNGMyt6ptVXJRu8PUSVLX8n1EPaHutt7/MTzxI3:KV6xT0GeB9Xy1EPaH47WzI`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	d3d426943ab5dc1f_optconfig.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\optconfig.ini
Size	2.1KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`1f25495ad4a389c347dc028019c68ea7`
SHA1	`5c281c3c470a14e113fb60e01526d5f857c36bde`
SHA256	`d3d426943ab5dc1f2cf0d7c4194589b668e8621d62420b0c726a033b2d961af1`
CRC32	`659B80DF`
ssdeep	`48:rvDDEmpUqeDeOd+mfXh38iHVDgc6bDKvCC+o1:rvZpUqDOomfN8UVDgU++`
Yara	None matched
VirusTotal	Search for analysis

Name	b3d41a80df1be1e1_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`48f0a2f728aa55a1c5f569ec8526ef5b`
SHA1	`02a538120791fc0cd541c9a4736d734f57fa4657`
SHA256	`b3d41a80df1be1e1cff9ea07ab1ecbe818a426ee6c06adfe63ca12adb2374da7`
CRC32	`11DBF60E`
ssdeep	`12288:f/nCExkRpiJhfKNJhhNdTTOfPd/m9muisx3U+ck5l:nCExkRgJhfKNJLvMPJm9muT3UQ`
Yara	None matched
VirusTotal	Search for analysis

Name	d81e7765dacef70a_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`1b5647c53eadf0a73580d8a74d2c0cb7`
SHA1	`92fb45ae87f0c0965125bf124a5564e3c54e7adb`
SHA256	`d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106`
CRC32	`6B9CA6FE`
ssdeep	`48:PdVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PYZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	6446a80bb60506c8_whitecache.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\WhiteCache.dll
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c1c6ba99d732588fd19d8a18a6b7b31a`
SHA1	`51188cb320d5f54c0c7841f3591d9450fe71d24f`
SHA256	`6446a80bb60506c851d020973caf6a71fecb6d276bd4b6731a3abfdc94d53ce6`
CRC32	`64FD4FF9`
ssdeep	`24576:6V++6Ru2put/xYRabo6u4pFhSgfAwekCYbHBvqz:m+Rdg6Rabpu4pGgoweOBvqz`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	42f1fa261b0a3cca_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\art.dat
Size	40.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`2c7a6309700462961a7a49fba3f9a2d5`
SHA1	`3b4c0c4df0b445c6a888a89445a0c511a8e9d7ec`
SHA256	`42f1fa261b0a3cca04a9c8059405e17d09b2ed820ae304c49aa25a9eb43fe0f6`
CRC32	`66B6F6B1`
ssdeep	`384:qXHhC/cKbA0HGMxmLSl5qpRUfhqWlAc+OAa4KHrmaSfE3ML3gNgjB:qAkKxmRXF`
Yara	None matched
VirusTotal	Search for analysis

Name	531709f0a00f7cc4_leakfixhelper64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LeakFixHelper64.exe
Size	183.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`f7c391e766cd84b7ecf80f687b68ad10`
SHA1	`9feca041a9300a138bd8aab6c4439fbd9970ad72`
SHA256	`531709f0a00f7cc4f7e3014af47eb88cb7a210494792564a07da2b3e60832a96`
CRC32	`D839A84A`
ssdeep	`3072:4AvpDVQsl6ZWQTAy6OAoHtrqLbML6/N+RK7A5Yht13:4oZQslfYn9LNe664t5Ynt`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	43529fc4c6eda059_selfprotectapi2.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SelfProtectAPI2.dll
Size	315.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f30972b1f02bf8520dc60778b94d8a71`
SHA1	`3136254f220e7902470ccec4265bf3fc75119447`
SHA256	`43529fc4c6eda059c7091e1b7a91b662230b2c67df22f84769bccea96e17ecde`
CRC32	`341D1DFB`
ssdeep	`6144:IlW/cN0IlnXIUPbMnHiDvttzJuCdTlW5MKuNcsN2://wl4UPbMnqzUCBl2gNcW2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	eb04cc2139f21f62_360hipspopwnd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360hipsPopWnd.dll
Size	790.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c77481cac4c9411aa1ead1de68c7798d`
SHA1	`f2288af2ee58e25de2a11da09589bb61e94ae5cb`
SHA256	`eb04cc2139f21f62107afaf03939c49515730cce4ed0f0e6d12199445b5f377a`
CRC32	`D37B5531`
ssdeep	`24576:GjoFZpzy3B1YcrPk+8BZk1t+v6T+6jyKj9h:cDx9xWm1tkwyW`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	1673c02f87acb777_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7832728c3f513ec4ca8f7fb42fa48260`
SHA1	`290d88776155bafb71b995ad1aa33a966794eb79`
SHA256	`1673c02f87acb7770a7959256989e83c3324ca90b99a38e76dbc07b0a4068379`
CRC32	`A84E5D0B`
ssdeep	`384:7CcB60OZ+rjGI7nOSeMVr63jlwcoz2DDMQ3Q:OcB60OZ+rjVhSRozkU`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	468c661ea0a7f31d_dailynews.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\DailyNews.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`6c214be1d64db1c24f926203f6fddae6`
SHA1	`dfe630bb99df44f4ec31b1161abe7e663eebae2e`
SHA256	`468c661ea0a7f31d9b26940cdcdc562370459d6e5f48a211bec8edfd17376959`
CRC32	`02079864`
ssdeep	`24576:uXXfApLVA9+k5w2aq5NJKNrPf+6LImqBc6:SAQ9+k5w2FPJKNbWsIfBc6`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	90735d0065f4a55f_dsws.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsws.dat
Size	712.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`e97f1fcbf04b6b29400dcd5bf7e2abb9`
SHA1	`b7120ed56f35da4621e0c35e901c5fbc8ea3065a`
SHA256	`90735d0065f4a55fa24ebc2955daf1cb29d7d08ed770b6abc864100b13085d8b`
CRC32	`4AEF146A`
ssdeep	`12288:u7wKlzqO/l3QdtKJ7DhJIxVA4lJC9nq5hjtCIffY5RdZZiUGVFF7eHzt8/f56iHX:u7wKlzqO/l3QdtKJ7DhJIxVA4lJC9nq1`
Yara	None matched
VirusTotal	Search for analysis

Name	f3327793e3fd1f3f_TmpF9BC.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\TmpF9BC.tmp
Size	2.6KB
Processes	2892 (fileosn.exe)
Type	data
MD5	`1420d30f964eac2c85b2ccfe968eebce`
SHA1	`bdf9a6876578a3e38079c4f8cf5d6c79687ad750`
SHA256	`f3327793e3fd1f3f9a93f58d033ed89ce832443e2695beca9f2b04adba049ed9`
CRC32	`24D8A5AF`
ssdeep	`48:qJdHasMPAUha1DgSVVi59ca13MfyKjWwUmq9W2UgniDhiRhkjp9g:bhhEgSVVi59defyfW2sDgAj3g`
Yara	None matched
VirusTotal	Search for analysis

Name	497b04329a6005ba_i18ngi.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18ngi.dll
Size	97.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5f8b81a374fd57b5a1c41a8d70baf623`
SHA1	`70060c107f976bdaec9a96e53cb0de68203f74bb`
SHA256	`497b04329a6005ba7f2f23ebb3fb847ccab563fcbcb11ff383d5629357cfd5ce`
CRC32	`EA10A1BF`
ssdeep	`1536:Gn1vMwG3NaaFI27kMqAtfZzFasalDRL2HoRtr:bvNjFNlZfZbalDRL2HoRtr`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e426b91013f7ec7c_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\spsafe.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3e33f184fe8013844a44fb2c589c707c`
SHA1	`e47321add922547b0347bb3c1ac623f810fd3ffe`
SHA256	`e426b91013f7ec7cafa2a4018b10d8d449810b622cf519dd40cdc5b8c070f074`
CRC32	`8A234A6C`
ssdeep	`192:7kk5UI/NcyMrj1grjzR+vnr9ZCspE+TMArDa0gJ/Q:7Z5UIVM8z7eMj0IQ`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ed39c051647522b3_cqhclthttpw.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\CQhCltHttpW.dll
Size	441.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2b3a3d08bdd2501ccc5385c88468dc40`
SHA1	`e64a2ef85075752621cfc6d962ae9638ad3ac250`
SHA256	`ed39c051647522b3a3cdea16ca71362f0e636661169b8102b31d020516845aa9`
CRC32	`4189E8E6`
ssdeep	`12288:ywZNAenpvU0TEnMlKSD4R0gmsd09d0eLgYx92Wl80TGfb9:fs0MgSmsd2d0eLbx92WlBTGfb9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c869e21f6fb25a1a_360 total security.lnk Submit file
Filepath	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\360 Total Security.lnk
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu May 30 13:34:40 2024, mtime=Thu May 30 13:34:40 2024, atime=Tue Mar 26 20:20:21 2024, length=5203688, window=hideshowminimized
MD5	`86537522805cb241dc92883a40edcea1`
SHA1	`af692ca360609b38701d7e9bb8de75d1333e1a73`
SHA256	`c869e21f6fb25a1a4f187290be290c48e8701ed16f6bdb1a465dbfab66c81249`
CRC32	`3E21576E`
ssdeep	`24:8mVFirMdOEzVArfca1yA/0dPjLdP2pUPPyR:8mVFirMdOfnR/0dPPdP2inyR`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Lnk_Format_Zero - LNK Format
VirusTotal	Search for analysis

Name	109a21f6fd2b5525_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\dsr.dat
Size	59.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7503c338bbe0c8cf5938ea07043fb907`
SHA1	`819b2bd7aa27c88dec748258c9bb7e95fc91b5e6`
SHA256	`109a21f6fd2b5525c84335ece2370087beb189fe908c117841bd43cb707cbadd`
CRC32	`2CF5F07D`
ssdeep	`768:rAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAB:FM4A6UAHRHF4aI+`
Yara	None matched
VirusTotal	Search for analysis

Name	e32dffc830b94f20_safelive.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Safelive.dll
Size	446.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f851c4d7f7bffeb145c5be807c334980`
SHA1	`38e47d3b24a0e960cb93e1e02a645502874374db`
SHA256	`e32dffc830b94f2070bdd48dcb5bcda4b67f3ac22bdcb52274ba2690625e66a5`
CRC32	`5D002227`
ssdeep	`12288:DQhpjJguMHpnYIDlCfrMNRoTn9clRNdWs9zlhIukB9r:UyHsvjSXdplhVkB9r`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	17d8d68f75285031_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\deepscan\cloudsec3.dll.locale
Size	53.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`25193dea059e94b64b72d5d0a18af159`
SHA1	`aaf00c89a6bbcbe126fc9d469c0b054b89a385fc`
SHA256	`17d8d68f752850315ff43f0077ee3e036ae35fdf8ee4ce7defaaaaf3036d438a`
CRC32	`8604811E`
ssdeep	`768:IfdNeavj/wWfZb/XFeoy5yFYECG5nTUKI9K0MeKgiDGMo:IFombwYh5Ux9we`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	ed7a3c85cb3ddb07_somadvutilswrap.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SomAdvUtilsWrap.dll
Size	467.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a2a1326edc3b6c489a7814903d8f7458`
SHA1	`075402303c92660800ea40aba8b4a56aa397e5d1`
SHA256	`ed7a3c85cb3ddb071027e7ce35ebffa057087ac07e02a56d9105df19bf6040d1`
CRC32	`FE7258B6`
ssdeep	`12288:lSVQ04jEKRhv+R6OuOTy2odnlRE6dnSGiUR9Nt74o:xFf2o/RPSGiG9NZ`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	171dd502af5bb905_360net.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360net.dll
Size	479.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7d008ee2f8458e25e7934901df6f3de9`
SHA1	`e0150f13f5013df95c17d01834e421fef4a8713f`
SHA256	`171dd502af5bb9057401e35b4f659f12a3eb4db387da70ec12e0d05fbd7b1ef6`
CRC32	`EEEAAF57`
ssdeep	`12288:ZrnuBRzB5QEfBBPjoPbyf7RCEmK1eSEQA59QTl9h:ZruB5BMPbO0hSPA5aTlj`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	88034513b12b5483_360bps.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360bps.dat
Size	852.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b1886fd49b27c856a69c8a628ea0dd69`
SHA1	`bfc43fe076df9b7bd66ea4860bc96690867d7da7`
SHA256	`88034513b12b5483e96fe1b9493659d87e073626d12f60168a7bb8840955dba8`
CRC32	`6AE35AA3`
ssdeep	`24:Grly+mAUWRR9ZR1jil1Rpe3+P9/aucZY/19:6lyFAUWRR7R1w6nuDP`
Yara	None matched
VirusTotal	Search for analysis

Name	3b8be851f1702d5e_lcrd.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\lcrd.dat
Size	25.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`de1c87c3d251882db198419bdaa4749b`
SHA1	`4ad2a4241889d1db12da22404ac370effac3cd1a`
SHA256	`3b8be851f1702d5e23ddfe3a396bdaccf17467d70d54e8396e0eda380c54cd42`
CRC32	`1D08B405`
ssdeep	`768:p2Vhz8to7VAJMHkfs0QNos2/W6R1Q/o8rgrRPZ:p2l8t4qgisOQw+Le`
Yara	None matched
VirusTotal	Search for analysis

Name	e007f664f0a7635e_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\art.dat
Size	37.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`abd5cc651349c5fe15879068116f3e2f`
SHA1	`0d64badb2b3f45f3d768b23b167799bcfe6d5bc0`
SHA256	`e007f664f0a7635ea890433a91d26700566d4bf864d14aa42ae34acf7c51a08f`
CRC32	`3C0D2526`
ssdeep	`384:BAH/zJRprweTMH+sLuNXdzYdVe4F1QBU/noTfa7H7IvEhMJjO:BW1s0keSQw`
Yara	None matched
VirusTotal	Search for analysis

Name	71dd3802730dd350_sml_speednet.uiz Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SML\Skin\SML_SpeedNet.uiz
Size	167.6KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`2d5ced1ac751fe7639831ac4c1e64094`
SHA1	`d9221f2100dcdf9b48c6e4e3a359f72cdbe60be5`
SHA256	`71dd3802730dd35088a11a7f36374a1c52aa746f44d38dcbc42593435e22148c`
CRC32	`7EBEEC66`
ssdeep	`3072:fBn7v+CtIEhUp0EyoJwMWtEh5CcQh768J+uJrOraW:fpT+NEhDEylMWt0VzX`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	a03c604691154e43_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\AntiAdwa.dll.locale
Size	126.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3e5c2d008972836fc07e8a49b8bc237f`
SHA1	`93800eef4f391c97a6ea4bcee8603df850f8a02b`
SHA256	`a03c604691154e436eb21a7eb865c98baf33b83af18570a000ea31ce4ba844df`
CRC32	`DF4280E5`
ssdeep	`1536:ImvblAch7V7RotOM5vOob3v1XbtKvgVUglBBPOh3W1:I67RonUgVUgl+h3W1`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	13bf112cd67b2bae_dstpi.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\DsTpi.tpi
Size	233.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`839427c06ed1ea7fb6a2bf1eed742004`
SHA1	`e8411ea2eb0cd205364383ea538586dfefb2b866`
SHA256	`13bf112cd67b2bae307790570b7d93a5b979869ab8ce02062027d90780a79b5e`
CRC32	`62600962`
ssdeep	`3072:feVYSIpPbbaiOzWuTkqhnB38HDY2Be2DAFOH99qA1QjRCAYcMRP/3M54ND7RFFJ:fytGc3B3sMc90Od9XGjRecM9h5L`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a5a6a83fc134eb64_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\cloudsec3.dll.locale
Size	93.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`76bd17524f16fc1d284dd3cffe60b8c3`
SHA1	`f46142dbcc64e79881a7834b17cae0b882c289c7`
SHA256	`a5a6a83fc134eb64dac2852a9cc5a965b83c724b0bd56fcc123a7dbcfb6b4385`
CRC32	`765FF088`
ssdeep	`1536:cmvblAch7S4RovnEEEPi/eBP3RjBNxCCT8utT/n/jVsOZFJNF0MfMY3QT9myImXx:cJ4RovnEEEPi/eBP3RjvxCCT8utT/n/3`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7f78c86e9b84e20d_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\LibSDI.dat
Size	101.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`68f593f5476a358379ea9ad528fbc479`
SHA1	`526b9daf9e25ea88412b327c4babe10dd6c4d221`
SHA256	`7f78c86e9b84e20d05d9a00f035b2b9ad95dd78a9a7307198e6d8c901408a9d9`
CRC32	`D8D063B1`
ssdeep	`3072:sNHng0MenTD5aDlAeHoKCiZMIziG/+j2EOvOBh:EHg0LnTDgBHoKxmBh`
Yara	None matched
VirusTotal	Search for analysis

Name	a4b8153f4e10ed78_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0fdedf23f925021a4454665fbedd49cd`
SHA1	`f550b8478af8f61f2734e4e8009bd5d9c2704580`
SHA256	`a4b8153f4e10ed786c980692b5b08259ede3e45ca79b3f131339dcb6e22069b8`
CRC32	`0EBF917A`
ssdeep	`192:74yFNfT5T1GyMrj6rrjzR+vnr9ZCspE+TMorKGO8Z:74yFNL5rMCLz7eMpE`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6b13e572db1c22a8_tools_config.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\tools\Tools_config.dat
Size	400.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`923a0c674effdf4408c19589866a88e2`
SHA1	`3b1c073870a30cc2df670e1a54ef9e7398a84d5a`
SHA256	`6b13e572db1c22a865f41ae7ff0e3d8760a5d19042b346371fff2b0c4a09c85f`
CRC32	`79109383`
ssdeep	`12:65EJVVZvtPTNjHa5WoPudYzqAX7nxrn+Vp3DKGB:jLVT9Ha5WodX7nR+KGB`
Yara	None matched
VirusTotal	Search for analysis

Name	f84d50e6794cb64f_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`64bb678aaaac9dc49b27e0ee51e450f0`
SHA1	`9842a78ad64fddfcfdce0a4d5997bc6f318327d1`
SHA256	`f84d50e6794cb64f396efad821384f7fe4789b8bb5355593f9b5679a65280f14`
CRC32	`3B800D5A`
ssdeep	`768:Hy2lF/WFLLpAEl6Zh7laV5tj01GtY+6JWtdvABBCvLEi:S2kLlARh7LjJWtdvABBCvLj`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	41872e27b7a36989_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`51d27c65621516084ae5c62463fc70b2`
SHA1	`df6240acd69d619c0de1ac37414ce361f859cb65`
SHA256	`41872e27b7a36989868c15f33a542f97e1cb27e1af35f77472d003dc5925e4ed`
CRC32	`2560CB4F`
ssdeep	`192:7jM63yMrj1grjzR+vnr9ZCspE+TMArXEQJS:7jzCM8z7eMaJS`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	b46da2101bc89f83_360selfprotection_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360SelfProtection_win10.sys
Size	204.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`b91eb9971633e1e9977f78f812451e36`
SHA1	`a7fe979765ae8bdf2cd510e65eb9d5b33af66993`
SHA256	`b46da2101bc89f83a4dc004d1a456d014aa58bbd629aae83f69284d2bbe7c34a`
CRC32	`BE9BF916`
ssdeep	`3072:CdYrsP4L0KuHee7i5QM15T2MPcGu2E2x+G+7yPF9xEJ:xstHoFT2s092Lye9xU`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	6d7238c827a32051_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	116.3KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`3611226820578a26740ce52976fc2112`
SHA1	`c67956c2c30620c74db6ed888bf69e9c94e6a6b1`
SHA256	`6d7238c827a32051c8a86ec8aa0787578f13a8725ae32b3cc84e581572f700e3`
CRC32	`CEE152A2`
ssdeep	`3072:vsDCamNr3NxZAF0fRB6ZXnV4S2H33r+qQk0knaQvq5DiU:0kNBUF06oSgaXCNyIU`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	9ee7865e9dc0a25c_execrule.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\execrule.dat
Size	98.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f731a53ea773d1e8d6024afaa1c3b706`
SHA1	`835b48ebc132e3058ae11a4da915c4bce8b2045c`
SHA256	`9ee7865e9dc0a25c4b14b0d48f5f981a65d817c04c821b797a11f199a7d71a7d`
CRC32	`06FC067C`
ssdeep	`768:oW2hLZfc9GLRDnLjvnCcAw8YHZk9b9k+1x5TRBUNdGp02rjWq1LMIbMqPQ907DP/:yCQLRDn/nCcVHZ10fqcpJrjJL7TgQ+0`
Yara	None matched
VirusTotal	Search for analysis

Name	2e3f67ec7696cccb_pdown.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\PDown.dll
Size	227.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1e85022134e42c1993a94716f6a24c4b`
SHA1	`1aba2cdd07d63ea9b261bda0cc4325fd99c1dfb4`
SHA256	`2e3f67ec7696cccbc82700d973007ab52c6106c565b752341b49c4428f4fdb1c`
CRC32	`FE98E9CC`
ssdeep	`6144:SzjKdi9yZhCGKesvEvcqIlV2cqd4ksXBq93:7sAhCGKe0EvcqgwT93`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	5bfed64001c150a5_scheduledclean.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\ScheduledClean.xml
Size	1006.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`6939d7c55c879695fa7bd03380381590`
SHA1	`41290205da25b6d7a5a614b5761d7bf3966ddb03`
SHA256	`5bfed64001c150a52f8e1790d9d224fc0dcdd60837d86fb0b1922f91030d9fcc`
CRC32	`F83780FA`
ssdeep	`24:QlL+xTirTCp0+z0+dZywyVEp4pKl+ExUgO92w42Ny:y+xTmTCp0+z0+unV95gO92F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	81adb709eec2dfb3_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\deepscan\art.dat
Size	38.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0297d7f82403de0bb5cef53c35a1eba1`
SHA1	`e94e31dcd5c4b1ff78df86dbef7cd4e992b5d8a8`
SHA256	`81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374`
CRC32	`146D54BF`
ssdeep	`384:tXHhC/cKbA0HGMxVBZU/xly+amHdoPEbR9jB:tAkKxmkDq`
Yara	None matched
VirusTotal	Search for analysis

Name	8a5896d10fa74ccc_advutils.ini Submit file
Filepath	C:\Program Files (x86)\360\Total Security\softmgr\AdvUtils.ini
Size	74.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`b4786a486748b839257f7227ed99f3b2`
SHA1	`1013f7cb305dc887fd331fa40e9982d6cce1031e`
SHA256	`8a5896d10fa74ccccbe8d57bd1ea2fc7b28313fc1bad80f758da0e7965ef80bf`
CRC32	`6FB905DE`
ssdeep	`3:QV5/YlLllTKNSQRllTn:QVRYl5BDQzBn`
Yara	None matched
VirusTotal	Search for analysis

Name	6e53a26f5845c54b_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\libsdi.dat
Size	103.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`cdd1e6ed1e8a65a3a7bd793d4e54540b`
SHA1	`1a4999578766ecd8caf1a6552bec6ad6185df2f5`
SHA256	`6e53a26f5845c54b580b9171ca97f6a4adf7dd5f22ee1e40613cf124d6726459`
CRC32	`2FA77991`
ssdeep	`3072:t14ap84othyTn2v1GxUuv2CkiBKF09Mz+2o:t3i4otcT2vkxKJisJz+2o`
Yara	None matched
VirusTotal	Search for analysis

Name	a983da07a7ba4731_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\ssr.dat
Size	50.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d864a331b6509f6e99706c8359e82a37`
SHA1	`bdd41705acd7cc9f35bfca4695b0a200c66de946`
SHA256	`a983da07a7ba4731de6352f3c6aad2b9bdb2881294787298f27ed1b3e02e455f`
CRC32	`F629E181`
ssdeep	`768:rL8a/Sdt5TzesF3i7/0Ika1g4N1U8iqcHYJg625AR6/UlHYKLQih210jJ:P8jzcx7/0Ikam+6n4Jg62GyMYKkihHd`
Yara	None matched
VirusTotal	Search for analysis

Name	ee4b69186aeff519_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\appd.dll.locale
Size	23.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`812acb6ffe7c16e94d727fddf2d88373`
SHA1	`91a8635fc4bf7f81cede887b2e80993091994289`
SHA256	`ee4b69186aeff519edc879c274f0e67f6dd42129ec7dfd32da4a3a09e908a33c`
CRC32	`B17BDD57`
ssdeep	`384:7g3KjVoirzeR3KJ1Mn8E9VFK4io4xdDGPhCU0KFKjqfvGBkSjj:c3KjSi29KvM8EAvdDGn0KFKcMkIj`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	cbd9de6498c22914_spsafe64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\spsafe64.dll
Size	795.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`4de8276a50e3856a364ac67b3335c072`
SHA1	`4e48f52c8fd8cf5fd46562209b1754deb5c4fd0b`
SHA256	`cbd9de6498c22914b7465c5fd06b29e25ccf243a3c71cdf183ffb37357a83e11`
CRC32	`041F472B`
ssdeep	`12288:Jx+6W6V2TyWv9kRr6kW6xRuDT4bXv0SwSvSnH1eYuO9TENDLmo3Q9W:2Z7FkRr6QxkDkTsSwSvSH/9TENfT3Q9W`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	557da8b8fee2656d_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`06160e8a333b40b82ab3ac37242db65c`
SHA1	`f32eecc1b205b681b599ee9e48b97bca0e8a51ab`
SHA256	`557da8b8fee2656d80a5aa9e20f5f3dd4809ed2c93ee6d83a9fb6f954d29ee07`
CRC32	`E6D28563`
ssdeep	`384:7dntGHtDGkvI7nOSeMISjnAuaA8nQJ+MQ3sn6E:hntmDGkApnAuaAnJXnz`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e155e91469c39bf3_duplicatecleaner.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\DuplicateCleaner.xml
Size	1.4KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`3bdec511fb8c467f297323ccab548015`
SHA1	`93e0acb721992eb9fb80981cd6a374e9ff85b29e`
SHA256	`e155e91469c39bf3502edf12418fff80c0a0c3ff2056510e282462964fbcc11c`
CRC32	`1AFC19DE`
ssdeep	`24:QlL+xTiW6RSJ0u3SJ0uXmywyVEp0bpugb6UEbFdy4VSJJ2w42Ny:y+xTb6Rlu3lujnV0cvoFpVSJJ2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	de9d09f0e26cb454_qhwatchdog.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\QHWatchdog.exe
Size	173.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`5e6c05d3f8a06f263e1d53fc5c2c53b2`
SHA1	`d957050dfc3aed8f22d9ace3a5d22192f8527513`
SHA256	`de9d09f0e26cb4541f5d6788aee22183c6a380a1460f0955171316bbcac5dcb7`
CRC32	`8C42C420`
ssdeep	`3072:1H50cLgcmLDaSaCBLBB5OsA3ivrQgpEsMAl+5xuKjZo2bIlN5+FzE:1Z0cLgcmLuS9FwplLAX2cp5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	79553c8223596b5e_360quarant.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\360Quarant.dll
Size	481.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fccae501be77c15d4e11343ffad3aca3`
SHA1	`c920a2b8226d03887176b8976ddbf25c35dcc13c`
SHA256	`79553c8223596b5e5108370664e74afc1f6c04ebceace1f49046535a90ecd7d3`
CRC32	`35572F35`
ssdeep	`12288:Ak0euRcw3lPU2pDRkBC/+9oP18o9Ttn8NkRT/jc9w:HlWcw3lhXqCG9oP1J9Tt6kRT/jc9w`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	239824a487ae786d_i18n.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\I18N.dll
Size	95.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7e181b91215ae31b6717926501093bc4`
SHA1	`8fcf05c9ac64c46c87acc1ec67631e7b66363d9e`
SHA256	`239824a487ae786daadc9e556c185561378f47ec7ba6b216c17242aea3a78ff9`
CRC32	`04DF9774`
ssdeep	`1536:3iG78XouqRzgm2cGpEBP4O86uWkOz2FJt685pjEOBMlo:3iGgNWFGGBUNFD685pjBYo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	10696e7ee1bfadef_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\appd.dll.locale
Size	26.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`20df8242c5ac9c633c9a7999d5a344d8`
SHA1	`7f355a45d37a142f3c9852ec4ab5957e01f0534f`
SHA256	`10696e7ee1bfadefc7df5d3b9ccf7c0de8f8865093244a386b950a5e656b1622`
CRC32	`49F47732`
ssdeep	`384:7TZ76yAJHKTk4SWXbeR3KJ1Mn8E9VFK4iFeDGPhCX8Fdo0wKFKjqfvGBkSM:3Z7pPvSWXq9KvM8EAODGjFSNKFKcMk1`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	30423d3ca90c921d_ramengine.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\ramengine.dll
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2172263e6f1e7eefb2c54517b1215243`
SHA1	`0ef23327aa2f0ea7f2c74ba7a90c3fcd03a37238`
SHA256	`30423d3ca90c921d2a727b0a5f8c4cec1a63823283b84bb6135c866ce33fa23d`
CRC32	`1E27F214`
ssdeep	`12288:Y7q8Cmtvv8T/2xkz88j8F7mA2CgVuHjnbbpyqTsziz824xzoxzD9+zNzXXVoyf92:wKEMqxkzvIdTjbbwqT5z8YuXVRf92`
Yara	Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	834f7262204de241_speedup.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SpeedUp.dll
Size	190.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f8cf708f7e4ad1dd501718ad219a139e`
SHA1	`057c7b2c5170984138bf9dbca7a3d109e4e85bc1`
SHA256	`834f7262204de241b786e65acd2d51ed2c3d1f04639134e0bc89c0ac5d68cc91`
CRC32	`CEBC434B`
ssdeep	`3072:X6vyXhp2+VUmM34QLjh261CieiMQHcCC2xPzphkD5DXt1I5ta15zd7d:XlPqbniierV2pz0TPoKdB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	d5112b7c399eb7e9_360win10app.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360Win10App.xml
Size	1.5KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`2026f46b252bf5f3155b92a1f3c89e5d`
SHA1	`327d7fac1e7fd3ab6ef2338858ff1f402f36a678`
SHA256	`d5112b7c399eb7e911aabb7e2125b1b919580d859ed8364d70395104713fd156`
CRC32	`4D7C1757`
ssdeep	`24:QlL+xTs92zId6drYdrh3WtwCkExjpKlN+fbCRj8yLN97Knk+/c3dOtHiPw42Ny:y+xTsg8d6dkddQ/kwtgN0kecMtHiF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	4db4a9145dadc260_svcmonitor.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\svcMonitor.dll
Size	278.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`e6e8ca5733e2bda091327469391f4631`
SHA1	`c6ffacb21af418df14e713b59fa621f87275afb9`
SHA256	`4db4a9145dadc260a2f9b0972e2f1f75f79958e2dbf75e48b77162e06cc8136c`
CRC32	`37C474F4`
ssdeep	`6144:qdi8EayNA8KGjyUWm+sG2Dif1JcUnOw66XjOBN6HBGLRc6YZPI93:qdi8EayA8KGjyUWm+Tf16gOe2c6GI93`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4bf5122f344554c5_360hvm.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360hvm.dat
Size	1.0B
Processes	3780 (360TS_Setup.exe)
Type	very short file (no magic)
MD5	`55a54008ad1ba589aa210d2629c1df41`
SHA1	`bf8b4530d8d246dd74ac53a13471bba17941dff7`
SHA256	`4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a`
CRC32	`A505DF1B`
ssdeep	`3:k:k`
Yara	None matched
VirusTotal	Search for analysis

Name	4d173fdfca7922ff_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\LibSDI.dat
Size	102.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`719741ba3500d9506081a326d44f1847`
SHA1	`b79ec34280eee8ad0364dace70368ae9dadc74a5`
SHA256	`4d173fdfca7922ff9d4849013aa49535a34087c72feadf2c9e1dabe0cbcd0afa`
CRC32	`833A51E7`
ssdeep	`3072:2mQ+76bmOrXULt90yy3FWc19fZ6lLbx4l:q+EuOt0c13Obx+`
Yara	None matched
VirusTotal	Search for analysis

Name	d9e15bb8027ff52d_kvwrkfgid8kbozxxltl4ovqe.exe Submit file
Filepath	C:\Users\test22\AppData\Local\KVwRkFgid8KbozxXltl4ovqE.exe
Size	7.3KB
Processes	1872 (jsc.exe)
Type	HTML document, UTF-8 Unicode text, with very long lines
MD5	`77f762f953163d7639dff697104e1470`
SHA1	`ade9fff9ffc2d587d50c636c28e4cd8dd99548d3`
SHA256	`d9e15bb8027ff52d6d8d4e294c0d690f4bbf9ef3abc6001f69dcf08896fbd4ea`
CRC32	`B0DC8C43`
ssdeep	`192:5LP+u+v13xV1cSHYu+zogDLIIUObDz5p7KoxSR1yz:5D+hv13T1FH0fHIIPD9xKu`
Yara	None matched
VirusTotal	Search for analysis

Name	61193cec93cef960_phpex.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\PHPEX.dll
Size	464.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`86cc0b01d9955019fa8fcf326e4474dc`
SHA1	`61009865c4d5ddf242546a1ff9673aba4c59d48b`
SHA256	`61193cec93cef96053b53977b45825d7daebb21d84bf1a327d3a5628d1d94419`
CRC32	`CA9008C6`
ssdeep	`6144:+71dkfEIswIceUS6DK7blxdv7nl3MZAtt/gr3t2Y4ngTNIc11GLEK:CCjsBceUSVbZDl3MZm/gQbgTec114`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4eedebd7f5c88544_tfhinealxpbme9nrjy2ugnhi.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000031001\TFhinEalXpBME9nrJy2UgNHi.bat
Size	70.0B
Processes	1872 (jsc.exe)
Type	ASCII text, with no line terminators
MD5	`23d5b2c29147ecd45e6bbff47fb3a62d`
SHA1	`3a175dac01ce76f8c6677d3619f68f460f1fdeef`
SHA256	`4eedebd7f5c88544499e550f801ecb5b5f4598098a1cfe0e8ac8003bf3f48025`
CRC32	`F601DC42`
ssdeep	`3:Ljn9m1mWxpcL4E2J5VXXziqwtLTGk0sn:fE1mQpcLJ239DiqwNGk0s`
Yara	None matched
VirusTotal	Search for analysis

Name	4549968e8d16fcc4_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\360procmon.dll.locale
Size	103.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dcefe51599a59c329fcb5908c0e63d91`
SHA1	`b1b937b5f2083a5c98321328d722ac9298bc75b6`
SHA256	`4549968e8d16fcc42282fcff27adcb5c0f98e122d545aeda7c9ebcadfdb1515e`
CRC32	`8BE7DF59`
ssdeep	`1536:jORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3w:jOBrUC4jyUJGKzgSg+HRN5Fv`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	01d6c6cdae2f16aa_360rcbase.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360rcbase.dat
Size	4.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`fae24f818a5721a020be0c6cccde118c`
SHA1	`8480eab0734e8a3401666dfb9afc392a253338da`
SHA256	`01d6c6cdae2f16aa0f502b6c03e2db4b21b56b55599f2223e3eea2b6129ca17c`
CRC32	`C3645528`
ssdeep	`96:kLUN4gzNLVfMSZT7SaY1FJmBMoqEHv/qGqcfq8zgwjnS2PHxL26pecH2l+lL:P+IM3dm2G3PswjnS2PHxy0ecHl`
Yara	None matched
VirusTotal	Search for analysis

Name	d04697ca15344a1e_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\360SafeCamera.tpi.locale
Size	1.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`0e83d2999129b19ab8b9bca1ed8b4c2c`
SHA1	`a00c1eb6697a0d14ae0b7e7201e5c8dcd3142784`
SHA256	`d04697ca15344a1e70819b304f870d164de27bafa814f345c1b30d8c0d878f30`
CRC32	`05CE7F56`
ssdeep	`24:Q++uNtAPuF9iiwKnKeKn2CvmKbvEFvKKswJne/1O84nv:r+uNtAPuF9ii/C2IzsVS12v`
Yara	None matched
VirusTotal	Search for analysis

Name	b5cc42af6c3c5b84_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\safemon.dll.locale
Size	22.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f111bc3924a124defc9fbb5ce874a870`
SHA1	`a1fa6c0f12c2aae1c5665d49fd1334a76e40fbf1`
SHA256	`b5cc42af6c3c5b84b78dcaca06a4d5424ac24f72e59da30420b855909a64a86a`
CRC32	`DEF08E73`
ssdeep	`384:7G5o3Vp+hxdI7nOSeMRjAMH5JNNzFwhhi5Rz:y5oFghx+RAMd3wh2z`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	06b5025575dada68_manifest_firefox.json Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chrome\manifest_firefox.json
Size	224.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`cdfb4e35141a5911d79758df0709d73a`
SHA1	`94e11a26fe9b6cc95bfe8610ff182e2a92f1c9ef`
SHA256	`06b5025575dada684f4cbaa3695820849f6ebffd65b86241921be9c19eb1e59d`
CRC32	`C38AC8FF`
ssdeep	`3:3H9ifFwI0zjaHo8WAUNVimOzWEPqNFTHJY2RV17F4TvFFa8f0LpyZ64R2uqy0uEL:3HWz0/8e/ihvyXtY2RVbUvFFaF1hyzsL`
Yara	None matched
VirusTotal	Search for analysis

Name	e99348bcafd68e61_syscleaner.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\SysCleaner.dll
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`21e6a9a8fc4780acfbb257b0bb5a5382`
SHA1	`131619ce6bdec4030184bbba7747cd40d1397c5f`
SHA256	`e99348bcafd68e6170a20dfcf85fc59045c3eed3d26d57575e6701f7f78952f7`
CRC32	`37CB0211`
ssdeep	`24576:/PnMU7vq6NhCeuqf4sPvoz7o+6E6Yo8zNWMFTcGiSQaRrGUt:nz7NNs44sPvmoF/Yo5JDSdB/t`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	fb60dd1783b56196_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\filemgr.dll.locale
Size	19.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a4ae6abfac4e195c45b82d5040b337e3`
SHA1	`f323591e10b28503eea01f19173d0a001fa4dce6`
SHA256	`fb60dd1783b561965471f16450a399f414c8407caab69cb2fb3bc0bb3e1a85f9`
CRC32	`BBB93C2E`
ssdeep	`384:7N9Vbn+9l4ECm8LFnYPLIeR3KJ1Md0DGPhCfatov05MQ31:RDb+wECZJE9KvMd0DG+ato+`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f92155dee52d5dcb_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\360SPTool.exe.locale
Size	30.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a7af6edc42e5dacda4d7ac0d4bcee813`
SHA1	`6acd980dfd42018dcbaeff53ce3053f942945688`
SHA256	`f92155dee52d5dcb86f12a9d6b92ec84f1687644b2e3f327e6f2718149c5a80e`
CRC32	`A3587451`
ssdeep	`384:7NmOacsultAgwBAP3ExcizfbiEFM8z7eM0h:p1t4B23ESYfelhh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a8c410c5e3629ab5_noads.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\NoAds.xml
Size	942.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`3cf1995de72a91e11f86e4ad46cf887f`
SHA1	`bd6c9790e0ae72650e2b4d3693afb472f03b9024`
SHA256	`a8c410c5e3629ab542d3c5c90f2a4b6b3ba0e49a22effb59daf0d427e7873837`
CRC32	`EB58DDEC`
ssdeep	`24:QlL+xTiNIyTyLZywyVEpQapbq8EEw42Ny:y+xTOIG7nVCq8VF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	7ec7aaa925ddc569_360antitrack.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360AntiTrack.xml
Size	1.3KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`7304e2596930c0eb45f0f7e6de76504a`
SHA1	`9cea45b66917313394b2ebbc103a7b47fea91762`
SHA256	`7ec7aaa925ddc569b8da5ec81f35fc2e2345ea74ac1dcf0f938ac4c20a1c6ca2`
CRC32	`4A9FA577`
ssdeep	`24:QlL+xTiWkW1KzbnbnmywyVEptpdS3b6UEE1DYy4B15169JJ2w42Ny:y+xTbkQKzbnbTnVM2vdDWzL4JJ2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	5c1bdd99adc37f11_duplicatefile_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DuplicateFile\DuplicateFile_theme.ui
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`00c204f1d97d3b1b43ff782666f29efd`
SHA1	`c68dcda9205220609a29840412e36710b7375a27`
SHA256	`5c1bdd99adc37f11b4caf7c761d423273a74d577cc93abfa054e36b58ba80547`
CRC32	`1D3C701E`
ssdeep	`24576:DRKF1KdzDGSsRUV5gFdJo2gcRmPq8gP402f8ec8:DVJDGSjPWwploC80`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	d6998f97566661c2_360netmon_wfp.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netdrv\wfp\360netmon_wfp.sys
Size	86.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`a69babbd42f7e99e5e52be58948c558c`
SHA1	`ed0d246d78fef66254d8774af0cc81adb7bdde32`
SHA256	`d6998f97566661c2e39aac4dbc31a0fa4d8a0a1857ccdb87c6d8934a6ca6e751`
CRC32	`CDD206C0`
ssdeep	`1536:g7+PEPwPhZj4xc2gTKSvocINfjwH+AXrM/ghZ:+wExc2gWSghNfjwHXbT`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b94fe75ed0120a29_360privacyguard.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360PrivacyGuard.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`c22bed1a7a0b6f198fc91fac3351eb23`
SHA1	`9dc48886f3d0dc8e2b2386c4cb9c241f17e71d8d`
SHA256	`b94fe75ed0120a29dc1cff46cd7c2554006424c6f7d18219babd95b287e66846`
CRC32	`3EB7AC35`
ssdeep	`24576:6XiJleTz+MDLnaWjxgUC7Vz7XL+6gvfHcr8N9/t:6gSZNDC7VHKrvfHcrYt`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	57a54a995b483027_360camera_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360Camera_win10.sys
Size	51.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`7d7b0b2a0dffab06cd96c254b3886011`
SHA1	`2ce9f45546f032798f5d602cd4a76a3952a4295a`
SHA256	`57a54a995b483027e06f552d27587008dff04efefe14fd98daab057512187f46`
CRC32	`B866DE83`
ssdeep	`384:qOEOVxhmxCxmeE57Ej+tM1EuZwtK784XnTdgi1hE0989WvVo/BClKNI70HVqUHeb:DVxhRsvI1En4Tz8YVoZOQ1dHmA3+oO`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	81d1a559583ba63e_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3617d3c0a4511ac8108050d7bbf0341c`
SHA1	`04b44bcece9ef1c25a83f3693fae3a73ddabe4af`
SHA256	`81d1a559583ba63ed31006ff7d2757394524ec997924897069cf94093fdc1497`
CRC32	`3397751D`
ssdeep	`192:7YCW0v7asmI/yMrj6rrjzR+vnr9ZCspE+TMorL3nx:7bTmJMCLz7eME3nx`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b168c87cf09aaece_sc.con Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\sc.con
Size	554.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a565dae10ca9a5da0f3e1c6213be727d`
SHA1	`13762416b6b75a4daaf6a679a03775e76c9516bd`
SHA256	`b168c87cf09aaece1ff0e6807bb3692bfb9fd4638725e7d9c0768e78e7b64092`
CRC32	`9B8F3430`
ssdeep	`12:L7YceWeEr2suZy0Mt80+z5l9iaMsrx/IMw4Fuae+QT:4s488PNoqlnw4Fuaeb`
Yara	None matched
VirusTotal	Search for analysis

Name	968539900165afad_gamebooster.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\GameBooster.xml
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`e63b056706cd81dbda0d5fe1d5a2ca4f`
SHA1	`f684224a056934b6e79b833dd69336a1b3aab420`
SHA256	`968539900165afad914c4c780d736f3a859f2973d90b0169ec0dfbe46a9d3ade`
CRC32	`675D8DE9`
ssdeep	`24:QlL+xTi6KPKvZywLVExlp6nw9sn+lME3dy5GH8Hy9JJ2w42Ny:y+xT5y3OVwz0JkkS9JJ2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	1212c65ea6763fbd_360ave_ex.def Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\360ave_ex.def
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c6670cdc571644ec37cc427652a37e73`
SHA1	`ed885e00a020b1ca0948fd830a689fb921b7fcca`
SHA256	`1212c65ea6763fbd671ba3f72cd0ab5e183cbf815284740c376efd01822fc222`
CRC32	`FEA10123`
ssdeep	`24576:UwcZ24W8ywFwu5q8Dv4758nNF5Ho/z/1Skgb9OdKk:RcZ2cykvK5GNF5HWD1P25k`
Yara	None matched
VirusTotal	Search for analysis

Name	830d3975277fdee6_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d782b07838b80666b980623ca178d375`
SHA1	`73bb48484dac5ac2cb1e5154db9a89728fe18029`
SHA256	`830d3975277fdee69979dae592ed6c9715f7fe46fda6b467b4408377366620c2`
CRC32	`4E4E14BB`
ssdeep	`192:70C0+eCgxpyMrj6Pu7CrjzR+vnr9ZCspE+TMorPDLWH:70CzerYMCPHz7eMoD2`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	463916c13812228c_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\ipc\filemgr.dll.locale
Size	21.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3917cbd4df68d929355884cf0b8eb486`
SHA1	`917a41b18fcab9fadda6666868907a543ebd545d`
SHA256	`463916c13812228c4fb990a765cbb5d0ee8bb7a1e27de9bdcea1a63cc5095a6a`
CRC32	`6F2E78B6`
ssdeep	`384:7NIjhT+9lX4EnNBnYPLIeR3KJ1MDtDGPhCpahOov05MQ3KW:hZP4EnDE9KvMDtDGZhOo2`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	07025e347abf4495_360downloads.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360Downloads.ini
Size	269.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`3e30e5b4b1a8353375935a2f468138f4`
SHA1	`6e4e98913060906522765e5f164a20c66bff6c2f`
SHA256	`07025e347abf4495e63a4714bd04ec415d7c1dfdd771619994956271c0e69a05`
CRC32	`00DFBE0E`
ssdeep	`6:TMN4y0vC7RJyxh7R+vSV3gIC7RrVBx0H7RpMddLmy0kJ7R13LBn:AkvC78h7w03NC7bBx0H7Pidz0O7T3V`
Yara	None matched
VirusTotal	Search for analysis

Name	45502e9bbdfdde8f_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\yhregd.dll.locale
Size	17.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`824f2dcf79bbc41c2d83cb6ea92f46df`
SHA1	`455c2037a1e8fe4d5baf990ec3c0288a42621e0a`
SHA256	`45502e9bbdfdde8fe41ce4f7ae480253482b902c4186bd749a1cddfd30bfeb9b`
CRC32	`5C5A46F7`
ssdeep	`384:7p9B1ANjSnYPLIeR3KJ1Mkk1UsDGPhCGO9ov05MQ37:19vANjSE9KvMkk1UsDG89oo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	32d666899db66728_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\DsRes.dll
Size	111.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`824eb2b66ab8a4551c28af8e53c1c44a`
SHA1	`3c02c464d7cab1180d67ffca72e223f2dc075512`
SHA256	`32d666899db667284001a59b976bbab3c0b1f68d9fab2480550667f53858f1c1`
CRC32	`C54B471D`
ssdeep	`1536:Y2kLlARh7AFRobYPc25Q1O9FY9WEs/BA9wek:YfFRoCc2a1eYUEsC9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	530ae95ccd82ca69_sandbox.lnk Submit file
Filepath	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\Sandbox.lnk
Size	1.2KB
Processes	3780 (360TS_Setup.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu May 30 13:34:39 2024, mtime=Thu May 30 13:34:39 2024, atime=Tue Mar 14 23:02:35 2023, length=945632, window=hideshowminimized
MD5	`f940017a289d5e7ab98821cabe073cac`
SHA1	`e444b5bfd253802289c6c20d2395ca55f77dc426`
SHA256	`530ae95ccd82ca69b4d457190a328a9f9900aaf3d72cdc635a52faa3c141e4f1`
CRC32	`C05E13D3`
ssdeep	`24:8m8MhdOEzVArt/ct88ADO3dPdvdPd98UPPyUWP:8m8MhdOft/jDO3dP1dPvpnyt`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Lnk_Format_Zero - LNK Format
VirusTotal	Search for analysis

Name	066ecd6d3625f01b_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\udisk.locale
Size	490.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`b0e5831d4eb52321e0b3bff79bcafa21`
SHA1	`c18643b132e947c87bf616f2ec9539092d6c0b1f`
SHA256	`066ecd6d3625f01bc645fb345ce93fe7724ae49906143c671a7ee1766c65dc13`
CRC32	`DDA3C8A1`
ssdeep	`12:Q++ubxoBn0GQdDiCbhR4rBmgEbks8E9u9a9GCbE9Wksl:Q++u+aiCvvkuu9pCCWk0`
Yara	None matched
VirusTotal	Search for analysis

Name	4431c1ba11b9cc3d_patch up.lnk Submit file
Filepath	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\Patch Up.lnk
Size	1.2KB
Processes	3780 (360TS_Setup.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Thu May 30 13:34:40 2024, mtime=Thu May 30 13:34:40 2024, atime=Tue Mar 26 20:20:21 2024, length=5203688, window=hideshowminimized
MD5	`ee3e35c7d002ee25606de61d5437fa20`
SHA1	`8ca57896cd1d0308e925e947fae71e0cde78e144`
SHA256	`4431c1ba11b9cc3d5cebe14027772c9e4e67ec18326ed143559f77a348ad779f`
CRC32	`D3916DD2`
ssdeep	`24:8kFirMdOEzVArfca1yA/0dPjLdPDUPPyR:8kFirMdOfnR/0dPPdP4nyR`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Lnk_Format_Zero - LNK Format
VirusTotal	Search for analysis

Name	69c9afed42923357_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\deepscan\cloudsec3.dll.locale
Size	62.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`75924a26582cd5ca763c8742e971bba3`
SHA1	`b84130902fae31a5e5f252baa11bea352b577316`
SHA256	`69c9afed429233571166b89a4a55973f68310b368602e69e6d305014dfdd00c4`
CRC32	`B4F8BF41`
ssdeep	`768:XfdNma9UuMCMqKG+x/Hrx8y79hobSbF3IARQ7uOPpy2DC9K0MeKgFHDGaFoW:XFY0KDhX33pQ7nDC9wef`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	282ec0c4e43f13d7_drvmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\drvmon.dat
Size	6.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f95093cd6061d7d6528a1bc8d25aee02`
SHA1	`e2ad7eb22714d5d73cdb868a407e573de60c9a77`
SHA256	`282ec0c4e43f13d7cd8d533def74fe69d4db7c3f5f8e73223c6ec78f6c973f22`
CRC32	`68BA72E3`
ssdeep	`192:7tVRbHf/9rtNzAFp+cYqh/IkYhWOYQxaqNqPe4J:7tVRb//HCz+cXRwzYPe4J`
Yara	None matched
VirusTotal	Search for analysis

Name	8f32e7f32c643c98_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\Sxin64.dll.locale
Size	17.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9d9f13de112ae48f638ed8ad5c392f42`
SHA1	`abaaf408412c3fdc525cf06a62234a0f6aff364f`
SHA256	`8f32e7f32c643c981ce2536ae36c9babbbc66a8bf3b41aa2692d3f945efaeac1`
CRC32	`82C7DB22`
ssdeep	`384:7d/MxtUenxj/7I7nOSeMYDBUjh5JNNzFwhhiiv:hkxtU4xYMKn3wh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f5883765dc27f6d1_adpopwnd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SDPlugin\AdPopWnd.dll
Size	488.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fe942b71a343cf8813bc25d47f829436`
SHA1	`3277a962b178621542f4382f1c8d8981e71c4b9e`
SHA256	`f5883765dc27f6d169d09f8bda005b1d30e5ccab568512a5af3da369216935a0`
CRC32	`F7907BCC`
ssdeep	`12288:5bpiJxhGDomLKdGfr2Jb4C0AVhJwEbkEXadqQ:2Fe0JSC0KwEnXadq`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	56d60aed3e6e0fa0_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\360SafeCamera.tpi.locale
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`9d3c7e05f55b00748bed46b059d46abc`
SHA1	`564387f3617ec07acd778e61320f44c8eed5f2ba`
SHA256	`56d60aed3e6e0fa042a407f4eaf2683981173d5e23917734f4a127786a81d938`
CRC32	`D440263C`
ssdeep	`48:r+uNiwLeje2e+Me9e3geFde2eQ+MEeWAeX4O:r3N3G0n+RqO`
Yara	None matched
VirusTotal	Search for analysis

Name	942351a84a21e415_poptip.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\PopTip.exe
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`afdc523dce0775bd72fdb88bc4ef2f27`
SHA1	`ff92d5ff7c0c1e15e519cd35991c02e8b9e9161f`
SHA256	`942351a84a21e4152f570deb810f7b0e4d3d2a5aae8cc711010cde02fbe9c049`
CRC32	`4AFE7EB7`
ssdeep	`24576:wfXLj6lzrf11IhHDywsUwS7+TXxF8IsPi82Dh+6yhbF2TShiBe3N7:mXLjKzPMHDywsu78XQIsPx2DgphbF2TM`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	6b4540a2a2af4a6e_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`0d1dfcf969a26e5a69d96f22fd6674d6`
SHA1	`5b258115e128d57d7c50c6d30bf0cdca5f422f0f`
SHA256	`6b4540a2a2af4a6ee691988c8b23654be496276d94d53bbbc587a3eb08737182`
CRC32	`9EA15420`
ssdeep	`24576:WMM2r6uNypYCr23p5DR3zVujTvC7RB8B3pam6OhUH:x6ZZr23DR3zVwTKP7`
Yara	None matched
VirusTotal	Search for analysis

Name	5b512644e63817d0_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\Safemon64.dll.locale
Size	52.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`f53e13f3dfb04d945ae5985fc99c1bb0`
SHA1	`f755fc6c800657746602483ec2c2828fcfde3914`
SHA256	`5b512644e63817d06e2e6dfc210195a9f9a4388b8902111e992b5c773c121849`
CRC32	`24900088`
ssdeep	`768:g3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqrVN/rfroLomxnYdA1T6pj2z:LKJSpD9+1tFGHXt+R9rGjO52z`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	255370bbdf16cc8a_imaveng.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\ImAVEng.dll
Size	174.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d4bd98ae66f506b4770250d1938e88ee`
SHA1	`0418d9a2cb2eb077a7d9f63171a30c751f4e0174`
SHA256	`255370bbdf16cc8a82359ebcecc9d1052e20cd73a2e13c90a9f7225f9feb66b9`
CRC32	`A4D559FB`
ssdeep	`3072:jiDIuq4NUov4bsm+mWQ0xss54dG+Mhr41qMNhhwZcc8eye5/CdRCC:j6Ab5ITktMhsJjMcFMuX`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	445336a293700c55_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\spsafe.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b4825f6af164a0eb8df44903a8d481f0`
SHA1	`922c837ae05441cb44eec4ba7ffaa2220480b033`
SHA256	`445336a293700c55f948fef5acba873f65bb25a6930dc3d13d750f7b29bdbd32`
CRC32	`F58F783E`
ssdeep	`192:7NjAiMBKDvyMrj1grjzR+vnr9ZCspE+TMArf0cy8f:7OiYKDKM8z7eMaV`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	769629935efdfa35_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\ru\SysSweeper.ui.dat
Size	129.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7cac038a7ab169ab1d1f1dd60a1adc10`
SHA1	`d3dac7d0eec04ec7175ac9099d672e9414f9ba89`
SHA256	`769629935efdfa35f286469896c9c5391cb1c94f72e2bf50be8142463b817d1d`
CRC32	`5EF90908`
ssdeep	`3072:x1vjMCOTHhJp/iIVpxwetvAxXq+wsMfes8aOhUa4AzWoa:x1vjMCKHfp/iQNYxXqE4Aba`
Yara	None matched
VirusTotal	Search for analysis

Name	2733751871d07726_appd.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\appd.dll
Size	978.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`738e9325581840ec2330a60643709535`
SHA1	`e71c9e6c8ac7b49af0e65866a37e1a114a187c7e`
SHA256	`2733751871d0772659de62be727649e42af3d7f71ad044ec7daf6b7f705c9152`
CRC32	`06D7D6F6`
ssdeep	`24576:wuie1gN2375b5Aqzne0+srr16XZOwKgYNeSSaePm9ZutgR69GQhF+99dwPfXsJIu:wM75b5JznjmR+OtyDxVtxecBjV`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	11be27f2ba0af548_dsark64_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\dsark64_old.sys
Size	175.1KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`a4c68afa8fca59190ab429ae631399fd`
SHA1	`2a4e3d62661e564468e4dfb99761de099434e3e5`
SHA256	`11be27f2ba0af548e2fd5ad7baaa5ac3e10b928b0742680ab9f673d1ebf31521`
CRC32	`351CE2F2`
ssdeep	`3072:mmRc3wtFwZXzaPHYluEXnGWZC5hPxqLyNqk9tuY62V2di9AZs3vPBHfZh9r/390e:pnFeG+uE3GW45h4LjytuY62V2difx/9Z`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8a91b4cae02eddcc_dsark.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\DsArk.dll
Size	168.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b550a890c56811d8fadb70590e529d28`
SHA1	`a76e4239d520f5e2e988d9e82757b15ed704673a`
SHA256	`8a91b4cae02eddcc2e6534aab05b51ec422273dbef333fe7bcabed548207d13f`
CRC32	`13F8294A`
ssdeep	`3072:voR1xiZeoCtm10ceRxq5i2f9I/BxAVwyms5OkAL8zP0X:vo/xioo6gUq5i21M3AVwjKwX`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	65737d3b2816d6fa_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\360SafeCamera.tpi.locale
Size	1.9KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`80346c43eb48d20108874ce4f85e3d33`
SHA1	`a2a765e2ae1be97c035b1e90d6adf62c2a50e12b`
SHA256	`65737d3b2816d6faebd813b9caece12721f58bd56a1477ebac2dd4b2fcf8cb03`
CRC32	`6F62CCFF`
ssdeep	`24:Q++uNYCfqCfNtorF6+HVfLZHMf3HPC5NwuCf9HxmymJJv/1HFJCeq8SBpIfz:r+uNHB1C64K30e1bmymIV8i+b`
Yara	None matched
VirusTotal	Search for analysis

Name	f31ea236488f90b2_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\Sxin.dll.locale
Size	48.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f58ce9e8a9f3c3ab4b9f473c3147b0a7`
SHA1	`981f06bbb007f808ccffc20559d7b4774672a2de`
SHA256	`f31ea236488f90b2592e8e3318179f1cef0ee6bdae7d235b93c1ef207de7526c`
CRC32	`7D1CCD6C`
ssdeep	`768:Gy2lF/WFLLpAEl6Zh7laV5tj01ltY+6JWYB+g3dv1Bgxby:v2kLlARh7LqJWYB+g3dv1Bgxu`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	58ba706961dc3101_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\libvi.dat
Size	790.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`038b56f3901e4ab2a6d21ce626376c9e`
SHA1	`0d5250b733c7ca06e5bd141f5919a338ccbc7611`
SHA256	`58ba706961dc3101cf3917f302257a46783770702093fef096acde15945467fc`
CRC32	`0EF88EAD`
ssdeep	`12288:o/nCExkRpiJhfKNJhhD5PpSoPd/m9muisxaAVxkf7:qCExkRgJhfKNJLhxPJm9muTaAc`
Yara	None matched
VirusTotal	Search for analysis

Name	29bd36bb8355bbea_regmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\regmon.dat
Size	33.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`2adbe39c9ca9a07a4c1165f58ef1f00c`
SHA1	`86c16c9557cd71d1325e3a9c13ef5f00a9e3fb59`
SHA256	`29bd36bb8355bbea2d7dc45f25edde9f8670eaadec4d14e84839517a6d9d2c9e`
CRC32	`CA7C64E4`
ssdeep	`768:j5OyTWDmoxPXsjHLsbKYNPcJnWQgJ6BOlBcEMa0LVqMqYw:j5Oyetx4HLmHGnWQQ6ElmEZ0hi`
Yara	None matched
VirusTotal	Search for analysis

Name	c9badc3ebfd485c8_checksm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\CheckSM.dll
Size	284.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2e7d37f34c3877417788a8b080398bd9`
SHA1	`1d0a2e606dda2479f9c6da57d99f56df814cc902`
SHA256	`c9badc3ebfd485c87cd34144faa72b5893fa541808a94491e714d616cac238b5`
CRC32	`8D0B8CE8`
ssdeep	`6144:kToNyL35aczZrfAcIBP1hFLsvLzWw79MzQ+fsF0J2Q96fDo/ga3FR3:k8Ny1aUZrM3uz/+fTpSyR3`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	3acb8c2f6d48e848_ptype.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\ptype.dat
Size	3.4KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`0ea4f7cd0eb4da3fc36e6076d886e074`
SHA1	`72f9f3a09b7a9631b9f7a92e54d81856277f790c`
SHA256	`3acb8c2f6d48e8487332b5297623d571c745d5c573a7b4ef1cbaa51f6ea2547c`
CRC32	`8FB1CE4C`
ssdeep	`96:IIzUQ+v7GtkL4SNGfvCAL4wS/f6JfwLftqJqyScSedmi9f:IIzUQ+TGtkL4SEf6ALvS/AYL1IrScSeH`
Yara	None matched
VirusTotal	Search for analysis

Name	b6f7f98264eeb769_360verify.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Verify.dll
Size	96.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6a805c15a92dc7f7e3effe2696f10935`
SHA1	`a3809a2eddb96a34fbf6d90de3d4e5ef07a31104`
SHA256	`b6f7f98264eeb769a89e14eeb4090b056ee62f49f10bd4df9ebc30be517bf45d`
CRC32	`BB664F35`
ssdeep	`1536:BwfXtca5tCoudlkRLK5wkVTac6S0a5jixLII8:BQRL20dfa5jiVIP`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	3c7bf3ddbc49817a_appmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\appmon.dat
Size	29.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b7840011f97116390dae838b8be0a8b1`
SHA1	`f9b6dba404e861ffdc52f7d185b64b05fbd91be4`
SHA256	`3c7bf3ddbc49817a9c7d4aad9d1cd5f07359eba20830e9bae632b169cf751798`
CRC32	`565B89C8`
ssdeep	`768:H1E9KkXbVECTeGw35dOpJcJ/HleueD0BGt+xX:VeKkK350t3B+d`
Yara	None matched
VirusTotal	Search for analysis

Name	dc477a4b41ca92d9_qutmipc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\qutmipc.dll
Size	166.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7ee49a57339abcc35fcde25d3f5ee8d9`
SHA1	`7a7f471dadd973ca57c79c43d93828b4496570e8`
SHA256	`dc477a4b41ca92d94cb7092b458f35def2ef6f9a0b23a237a363e341e22aeabb`
CRC32	`06021341`
ssdeep	`3072:4JJiNkByXIzFu3wK672soO82qUyleRR2v6eY8lMnu+wqH6F3:477yIzFfKTsS2qUKeXC5lRR`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4c53a0ec712b0c87_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\ipc\NetDefender.dll.locale
Size	23.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`428a0555a34e3ab7741863a983c207fb`
SHA1	`78406acc6f42880661139f4489c53cc9be6ee1a9`
SHA256	`4c53a0ec712b0c87f818b222b90dc5722d863c11d50099897c7f4df971725c3f`
CRC32	`983FC97C`
ssdeep	`384:7as0Migg7U0BBAPct5Gl6I76eR3KJ1M6DGPhCgyov05MQ34:2RMsVBV5Glxb9KvM6DG8ot`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	df2cb55fb96ec4cd_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\spsafe.dll.locale
Size	8.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`405320f9265ce74c502f5a92dc2735af`
SHA1	`cec2aa07eb5f073dc3d46c37bd7ae92c025075d8`
SHA256	`df2cb55fb96ec4cd6ffd717fea63b33db3d6b39b7b4244659e3be3b1f34d8c19`
CRC32	`989351AF`
ssdeep	`192:71hCMFo4yMrj1grjzR+vnr9ZCspE+TMArlD93WR:71wEIM8z7eMSWR`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	885aa4f582973823_360conf.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Conf.dll
Size	294.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b98a1e65f209fe1f10f8564dec0f0c42`
SHA1	`cab41605d9b7241c134798723ecdf9d3dc2f2615`
SHA256	`885aa4f58297382396717563137d212fbcb4299f95426c40c43abcdcecf54246`
CRC32	`8C1D9D89`
ssdeep	`3072:ZT+U3PPxMBToCpGnKDa+VNdTTtVhl9GZcAHQO0MzUfPR/IVxOEvWTBfd7ZnYX1m2:BZt1+l/h2cv71fBIaEvWTBFz9RR6`
Yara	Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	32e035e47ad22a60_stsuglist.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\stsuglist.dat
Size	109.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ebcb9e86603862e385a4fab90dd08a71`
SHA1	`eddbc886d5c200df7f4b568a0ed537354c7a6718`
SHA256	`32e035e47ad22a60557d05e5d2175d8c89609f9af36ef2c48e921c0f3dd96cc3`
CRC32	`24E4EFDB`
ssdeep	`1536:wl6zCom9aZSwqjGxiqxOWDWOHNjOEaAh5wZMBq9pcvz1/L1dQeTM:Lq8iqxOWDWOHNjOEn36cvk`
Yara	None matched
VirusTotal	Search for analysis

Name	852217dceeead59b_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\360SPTool.exe.locale
Size	31.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`44d6531aa7031c983d8de709d8319bde`
SHA1	`a212b655cdaa5cf7567d43f2d5490f866abbed0f`
SHA256	`852217dceeead59be207b207ab56d8d7072b3738a017f8f14c7ffcfcdadc5569`
CRC32	`73CB5505`
ssdeep	`384:7KHyacsultAgwBAP3Excizfbdx/MCLz7eMXXB:e6t4B23ESYfZx0+`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	912207642af62c66_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\wd.ini
Size	8.4KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`bf48841628746becfead179c040ebf32`
SHA1	`1150814bbf80214cb88232b1265f09cd5ce64e45`
SHA256	`912207642af62c66516e28a4875e55897ab9d79f64a35a6fa5ffb00cf605b64d`
CRC32	`E6F1087A`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlAZNqWIajywapG4L8nzd6WSbJ1J9W0fsFWbmc:29+DgRgaz4G4L8nzeWLFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	911aa9455e82703e_360uac.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360uac.dat
Size	14.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`d312db6319598852379da7afb426958b`
SHA1	`2ac678fd93633ddab28fea4aafc74261a33050a1`
SHA256	`911aa9455e82703efd159a9305f0e852178feb59e57892efad5706b6a4630973`
CRC32	`4C1E62FD`
ssdeep	`192:9wzLKFRYVw2lSH63lHPdBWHNOSJkGpAeiK+0+wRygoY4nwX+tUZZMJiZbwB3N0w0:9wzQRX2oaVPb3KHXZZbwrATdPsZL2qA`
Yara	None matched
VirusTotal	Search for analysis

Name	92d35442715cb9c7_360sptool.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360SPTool.exe
Size	165.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`259affe7b271b29d4b04d678c94bc776`
SHA1	`073f326b4ce111ace97df011f8ffb78bbefcdbd2`
SHA256	`92d35442715cb9c7dee115e146daa72bbb5c408ae03bb6bb5b6f834ff1867444`
CRC32	`CA8AAEBA`
ssdeep	`3072:xmryqHeJ22Xs/l+ehDp4kZccLd2S5S+tDOOMs+eoz3nYwPruUoR:QZ+Jzc/bWkZccLkSS+UGkYwDCR`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	5ac7ecf3a2fb9e78_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	108.2KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`ae671225f65ff4e63a68751e71a0ab97`
SHA1	`a714b877b4fd3a7ff64e5204484fa0983467b717`
SHA256	`5ac7ecf3a2fb9e78d61b12208dad06e165c17d0ceb91ff46b9d008259570c8e4`
CRC32	`0E4B3E5D`
ssdeep	`1536:eecLND09e0d1oOxyLMqHJPg35RhLnmPkhS3CV3V9ueyVHjSeIS14dfD5GwUCcguR:qRv0d1ALM2PiLPS303V9TycVflZuHBf`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	13834e68224e65b8_safehmpg64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\safehmpg64.dll
Size	244.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`50034ef8c42bce4228644a65c86dd360`
SHA1	`90e82ee94129c13165b5186545721cfc36e9cce1`
SHA256	`13834e68224e65b8e57f030d044cd194056b068c0a5120331c2eda201bf50483`
CRC32	`94400221`
ssdeep	`6144:aJT26cVQrx/vRLcVvHvcTneFUDMGELGcd:Y2vVu/ZLoCDMtSs`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	5185490c7766eb08_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1f61944f692b8b77a6cbe1672647131d`
SHA1	`46410ff5700c4e3e17c9f4b8c8f0f6816b321a07`
SHA256	`5185490c7766eb08ed8d250606c5d1c43e7c2aafba5eba246fbe22ec5135728c`
CRC32	`9E87C3AF`
ssdeep	`1536:rORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3Y:rOBrUC4jyUJGKzgSg+S5O8DFC`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	20801dea7ab7cc10_valoopjt3slpvuwt56fudyw3.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\vAlOoPJt3SlPvuwt56FUDYW3.exe
Size	49.5KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5	`afff16f2a606ccd4720d5bd8e462c3f7`
SHA1	`d8ea0023a4e08ebf9f9de842a15f468e4fb68865`
SHA256	`20801dea7ab7cc1075276b52ce8fd79db8fac8497016bb091c06efb8e00e6cb9`
CRC32	`BFD4CBF8`
ssdeep	`768:G+ffIpwqJcTwurw8LgzmvxquRea9OsIbW0kFBrtGE9iUGqutpB7+JgR5Y+x9smvW:HIDmRrwOgaES0EmEwqutpBMgR5L5XUB`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature NSIS_Installer - Null Soft Installer IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	5648aa10e976c177_udiskscan.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\udiskscan.dat
Size	3.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ae230d057354c6af4295e7f86c0c6699`
SHA1	`1cdd1ce0642ea85cc1c763a1c8f300cb0580001a`
SHA256	`5648aa10e976c1774d4f9bf479fef51e718986e5b4c87a93def7b99a91431c57`
CRC32	`9B24AE1B`
ssdeep	`96:UKKL3PTHdOlpHtBjwfpqnZi0CVe+v2rEv7t/Xencr//aQ:UKKL3xUR7A400CVz8Ev7RXug/5`
Yara	None matched
VirusTotal	Search for analysis

Name	75a8014bc75e3d26_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`db2d93b8192594964a8e291fd87a62ca`
SHA1	`c412ef634f0dae0c953d969daffdcf06ee9c2485`
SHA256	`75a8014bc75e3d26c84a2060f8a9d6f7ca7b9c7b8e5d5ecb548999f56605a1bf`
CRC32	`AF3FC968`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlTeNqWIajOwapG4Y8nW6WSbJ1J9W36CFWbmc:29+DgRgiz8G4Y8nzWXFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	a25789fe20d207fa_somadvutils.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\SomAdvUtils.dll
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`02cd5da348f0133d810ce5c3f58e4428`
SHA1	`9b57598d711f7e879ee9d46467c6371ee81d8aa5`
SHA256	`a25789fe20d207fac96bbfccaf6338af7f4ddddef6cf9aaa1855ed8b083b0f24`
CRC32	`A2627A93`
ssdeep	`24576:YygvASnoyXXwIZCVJXHCZTVM4K/Px+b9SX5rqWGx9K:K/oyXAI04VMp/JuMXnGa`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4b2a5c099699985b_antitrack.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\AntiTrack.dll
Size	338.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0e7ba90f997552c070af8eeb3479bd55`
SHA1	`5ecd375ebad13d2ef721accab1870bb161897864`
SHA256	`4b2a5c099699985b16f265a1ecc4741fd9c2f57b8daaf66ac203f87bfe0d984c`
CRC32	`3FF299F7`
ssdeep	`6144:17+6zsP1Q8Q0HHpuchep4xm/u9SH6/k72I8fsPa5h0OFZawWEI2YiHQofjhmRvzn:l+csQ0HHp/hLxIq/k72I8fsPABYRvzqO`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e308a653a651f010_leakrepair.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\leakrepair.dll
Size	735.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a81cf3bfb75ec4111f4e9e2829dd7ce5`
SHA1	`9ba549374ee9e78863aa84e432bccbd402bf6b96`
SHA256	`e308a653a651f0101aad1969225ab34e68048568ccf2dcc44812f3579d62e66a`
CRC32	`DC4B31CD`
ssdeep	`12288:xtAfy5VZl8N9v/OxiDFpbuG68+VvYkFZ8lE1nzMJsvM2eKiZKtihQrdkr4Yq:qTOxiZhM8+VQiZcE1nzE2eKiotAQrdk4`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	297589ad8168809e_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ee38515f243ffc1f3d6101ac6f15fd30`
SHA1	`826a4f2d558bc1b6245307d68cd64febc7765ae4`
SHA256	`297589ad8168809e5a70ddf20f1bcecc0f998c93a84e7c14f77ec76a38f630bf`
CRC32	`EA976D3A`
ssdeep	`1536:6ORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3b:6OBrUC4jyUJGKzgSg+H9XnF1G`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	86506ad8b30fc115_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\ipc\appd.dll.locale
Size	25.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9cbd0875e7e9b8a752e5f38dad77e708`
SHA1	`815fdfa852515baf8132f68eafcaf58de3caecfc`
SHA256	`86506ad8b30fc115f19ea241299f000bce38626fe1332601c042ee6109031e89`
CRC32	`DA924DE2`
ssdeep	`384:7WAxwp/JNxmSRuTw3nheR3KJ1Mn8E9VFK4iIjDGPhCi+M8hKFKjqfvGBkSDK:iFkTw3M9KvM8EAyDGgM8hKFKcMkr`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e0d5b3fd9e47e0e5_dsark64_win10.cat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsark64_win10.cat
Size	10.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`c8000aff908a100760602d960cc1c20b`
SHA1	`7242baf12b70287ef01a0452a542ff1ed2587c01`
SHA256	`e0d5b3fd9e47e0e59d1165ba246558fb23ada6cae3b1cd335627aa2eb1d4d273`
CRC32	`96238954`
ssdeep	`192:E9/kSyyNwB/uyKAUFWQFQpbbTseUfX01k9z3ATj1qU:kOpUFRe/6fR9zyj1qU`
Yara	None matched
VirusTotal	Search for analysis

Name	bd6d9476c6ecf73d_edgeverlib.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\EdgeVerLib.dat
Size	664.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`95c121be02dd070c624c75feb60e6fe4`
SHA1	`95523e0c09e5aa61f1f8bf175bb8b0a01ec910d5`
SHA256	`bd6d9476c6ecf73d18f356aecc644278f9bfa9ebc5210755537d89e047f543c0`
CRC32	`B6FA6BA0`
ssdeep	`6:vnMrGUGTzUXHFbacmYr5F2YrHBiHFVur3wlRYMbzrlFhn4BWMaOgbgBAYZgbq64O:/L7c72q8Phn0DAWJU/J/SE6hnY93ln`
Yara	None matched
VirusTotal	Search for analysis

Name	ef82af2f455251c1_defaultskin.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\defaultskin\defaultskin.ui
Size	3.2KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`60ca0acdead9c4be83a1a5811732fd08`
SHA1	`271b6e2414deac1dc4ec100f149bc3a0f95a87a6`
SHA256	`ef82af2f455251c1db24d7028ce3332bd5abf284383ec751b7777d6532dd24a4`
CRC32	`B3812C32`
ssdeep	`48:rcP1kvnLXSpkmpb0J3y8SA3c0aUph54+JCF9vmyyIZzOz4spojyLmPex6asEOU69:oaMrb6S+FhyBmyyuM8e6XOBDOwxq`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	ac71cdbb6144faca_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\appd.dll.locale
Size	26.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fcc624cf640c7e8e8815c01e0a575429`
SHA1	`ea330508910dd52b407b8aab162acdeb9bd96cca`
SHA256	`ac71cdbb6144faca3c8f21b3292f418726d8b1884f0e6c528b53e701ae718461`
CRC32	`0A0D5C93`
ssdeep	`384:74301Ml5ZGa/w2eR3KJ1Mn8E9VFK4iPsGsDGPhCt21PKFKjqfvGBkSj:c3Vl5ZGa/wL9KvM8EAADGYGPKFKcMkW`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ff9300fd50350d78_3gidentify.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\3G\3GIdentify.dll
Size	210.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f2b8f1a361b07ae1d951b43de861b8d3`
SHA1	`b5518bec7f2dc411a83d85483b350c1e66cef89f`
SHA256	`ff9300fd50350d78c19cf977d7b3ea0ab7e4996c6ae4223fd64ff156e4a1cf27`
CRC32	`E3FBCAD2`
ssdeep	`3072:2LZ3v5xpPv87C1jgCH+r4NHWhEt0ZlIbHnsGaqNiucydyDm5dua4vv:2VxHEC1T+rGWhdynaqNiucyfF4vv`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	49d9d0fcdc7d9fed_tracehelper.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\Tracehelper.exe
Size	130.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`287e450e1838361efa36788a4c6cc473`
SHA1	`18e18d2514a66c09b910c23fb14197b7fff725c5`
SHA256	`49d9d0fcdc7d9fed4a6abbf39171b985d8c28b8843d1cb61efba822d0aac9cfa`
CRC32	`629C4B78`
ssdeep	`3072:6yNcIm7T7tN5C1aLBnw6VQYhe/5phz3nYRI:6yNcRfpsaL5Je3NY`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	47f38e49caee983b_adpopblocker.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\AdPopBlocker.tpi
Size	536.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d00f529859bbfb17a7a82fd02d22d932`
SHA1	`4b2876be0face18c40fe41ca195a79b9e75217e0`
SHA256	`47f38e49caee983b886bad9a3e3e91160cb79a71bcae3f841ee309a42cb58370`
CRC32	`4CCC5627`
ssdeep	`12288:osPSKq4TG/ldHx2V5BVot01uU8+1rNys+vm+qIEVCfK41rQmplNff:MfxurNyvVrXplNH`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	6859420dc99b4ae0_rpi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\rpi.dat
Size	972.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`996128c6816354d95790057cf2684974`
SHA1	`f80725777e4993bf52c2eabbec70ca09389f86a6`
SHA256	`6859420dc99b4ae0a74dbf4b5cc60c10ece3b342954bad96c67e6634f57f96b8`
CRC32	`E1935F22`
ssdeep	`24:Mleg3ZlR/wZaxCtcrpoqxLmI3BMqKjYHCn:Mlej4xCurpoq1lMqtHCn`
Yara	None matched
VirusTotal	Search for analysis

Name	32e8e4d48bfc2625_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\NetDefender.dll.locale
Size	21.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c27ded6278b84d39940dc0679b06fc8d`
SHA1	`92ca42c5111a95677de8564f7bd29567b095c74c`
SHA256	`32e8e4d48bfc262582243b3f9abbd90afb349c7b3692c6c6dcbcb7067d938669`
CRC32	`F4DD6368`
ssdeep	`384:7+dU3JlJrXsrbqJhqg5txS62mRxI76eR3KJ1MYfEDGPhC1ov05MQ39:4IJlJrXsrbqJhqg5txxQb9KvMhDG0oi`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8905048422c88bdd_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\art.dat
Size	42.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`096873b6c896726d50abf6e66fe93826`
SHA1	`aecda8c8c1707c853709ccca65979ed5775497d9`
SHA256	`8905048422c88bddeaeccb4650db9fcb03823a0f3a63e4acee298a5fdd01f1e4`
CRC32	`9DC56EC5`
ssdeep	`384:pqHtUfsIUAAHuICnLU5VUwqaoH9xsx3EbqLjB:pN0IMOICAsGH`
Yara	None matched
VirusTotal	Search for analysis

Name	b891e2a06e3fcd4a_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\cloudsec3.dll.locale
Size	90.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dfe01fa80280426c576d5b79ebf5e2ad`
SHA1	`63540d325ac27c5ecf4398384e381750c03414ff`
SHA256	`b891e2a06e3fcd4aceef10e5ea0fb2a14fdc302d9dbdf6b9130367a04144b6ef`
CRC32	`89E39472`
ssdeep	`1536:jmvblAch7FERoXoaJpQo3YHctPUwcCYrBnWE0N5mqN6XWEnp7nHJUpwIzizlBPoA:j+ERo4aJpQo3YHctPUwcCYrBnWE0N5mV`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4f5e58725834c33d_590aee7bdd69b59b.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms
Size	7.8KB
Processes	2308 (powershell.exe)
Type	data
MD5	`8bc2380530d9f5b47889ad3910c01cf5`
SHA1	`08eb1e0e83fda47e70ad8e0126a04b1e45de64a4`
SHA256	`4f5e58725834c33d8cb1d84b532b0f75d81f3862607e1812864e6302dee13e53`
CRC32	`D52255BA`
ssdeep	`96:0tuCeGCPDXBqvsqvJCwoBtuCeGCPDXBqvsEHyqvJCworDPtDHXyf2lUVul:0tvXoBtvbHnorxTyQ`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	2c7711889c56f2bf_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\udisk.locale
Size	374.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`ece823c7553e35870022f45bb4ddeee8`
SHA1	`20ffb1b67daa0211478c716ed9440926099890a4`
SHA256	`2c7711889c56f2bf9a1a498fc97e175e337ff21ff496d3f681ffca8a3a2633ec`
CRC32	`CC60EF9B`
ssdeep	`6:Q++uimVb8cW0GPlpUsjytUFOQR4lGMlS4gEOPPEOPqaot65EOPq10TlSr:Q++ubxi0GQBEhR4LU4gEgE998E910TUr`
Yara	None matched
VirusTotal	Search for analysis

Name	90ed429e5dbb6e52_360guardbase.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360GuardBase.dll
Size	221.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`56f3ed370a34a26261dfd509ff506a6d`
SHA1	`6c5124ac8567b6fc80f08b0a4b77ee737d85d35c`
SHA256	`90ed429e5dbb6e529db5fd04b6890545aa540c3a7b7b99968e8eb235e2a37848`
CRC32	`6C61FF09`
ssdeep	`3072:cv9v03dZChdRIXycLVFRfZfy39V5ni6L4/DIg+XFoLGjaa5HuX2IC:a8qAXtRZy35HL4rIgOTYC`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4cf06c823befd0e5_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`66b643f6a1011ab7f2c5bf97e493631f`
SHA1	`61e25eb3c4199d8e2f507a603f7317bffd8d9920`
SHA256	`4cf06c823befd0e5823a19fdfc1bd4f95c40bf93d89d943a91884380c5359fb4`
CRC32	`3210479A`
ssdeep	`768:CXHGdBPASgYoH6dzSnq5TmtzG3TpMtaNV8J8lAoKrt7hNZbxMu:jASgRcSqNmtzG39Mkf7APrtdNZiu`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	ad38ea5a38c6063b_rmt.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\rmt.exe
Size	31.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`51322e157dea6db76f043d8f54b5d94e`
SHA1	`111db39f6c886ec7d9c5d55a6b6ca0a61a572587`
SHA256	`ad38ea5a38c6063b4076d829e54332f230c809868960fbfc1f78157d8c0d604b`
CRC32	`209DB362`
ssdeep	`384:dwGBVvhNFmlRsB0Vh9fhSzFuOoakPbVZ4fnYPLdOSeM/PsgjhQhG5GEncTHT:uiVDFQmB0VjfwpuOo9TTWEU+LI`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e2e9896b2d083bce_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\Sxin.dll.locale
Size	48.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8075e40b548f6ca6baac9f0e927d8ef6`
SHA1	`1c40281482d10bf0791d8460b95573562f9658c7`
SHA256	`e2e9896b2d083bce5528839d646622a6a7542e3f7d5882fb3333515e2d0572e7`
CRC32	`D159AA2D`
ssdeep	`768:+y2lF/WFLLpAEl6Zh7laV5tf01NtY+6JWztWdvnB5dTb:X2kLlARh7HiJWJWdvnB5dv`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	1e25967bc53ef171_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\dsconz.dat
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`08bbfaa6c52f740240796f9b9a4a33db`
SHA1	`5b816b26089a01634f65240d62ddf4c7370c50d2`
SHA256	`1e25967bc53ef1716b7724ed9feb8c4cc632b4d486cb27af57311c8d1d5fe65f`
CRC32	`A937CC64`
ssdeep	`384:YAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJ8hzyB8l794tLB15Q1:sbSj0SbDQoYZlDT9cPJUzyBwhE21`
Yara	None matched
VirusTotal	Search for analysis

Name	e21893eb3b4e5325_360skinview_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360skinview\360skinview_theme.ui
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`44b6f370421a80c079fd2ef6c4a73bd9`
SHA1	`021927220427a93a3ee5d8d97216745c915272a6`
SHA256	`e21893eb3b4e532586581ac60da32871e271bdbf5251c22756be1ef614bea06e`
CRC32	`9593511B`
ssdeep	`24576:BX5oq6zp+q5eiva282MmXplanltCRfk2mlhJxRelc:BXmqqD5Q2planlDldac`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	f421332fd132d840_i18n.ini Submit file
Filepath	C:\Program Files (x86)\360\Total Security\i18n\i18n.ini
Size	246.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`dfc82f7a034959dac18c530c1200b62c`
SHA1	`9dd98389b8fd252124d7eaba9909652a1c164302`
SHA256	`f421332fd132d8405cad34871425c9922e4a1b172d74f86b9e4e7ee750205919`
CRC32	`63F53E8F`
ssdeep	`6:Qdiey8ellcb/lxellcjDIlIaDlw7ftlIOlivClIa0EUOlivClIasDfblivn:QdiewnG4noDIlIa5whl7iKlIa0nOliKb`
Yara	None matched
VirusTotal	Search for analysis

Name	31c368237801e595_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\360SPTool.exe.locale
Size	28.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b73bf2c7450765792f75b6bf32806542`
SHA1	`fffa7ecc269731a968400bc45e131b92594d3d01`
SHA256	`31c368237801e595526a7c13371c04e7b4c3f9092cba22ae80894430fb327c90`
CRC32	`2B35F814`
ssdeep	`384:7Z0acsultAgwBAP3ExcizfbxgLvfM8z7eMA1:qt4B23ESYfFgLvUn1`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a34f902b7fbc6dbd_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\udisk.locale
Size	476.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`9e4645cf4440764b3368010956c9c188`
SHA1	`016d2099fe7801b5f29ee1ebba46026185fbe795`
SHA256	`a34f902b7fbc6dbdb1046a254706b0411ff571696425d159546fbf2cd141558c`
CRC32	`DB4FB7B5`
ssdeep	`12:Q++ubxFem0GQvLpkRhR4kevgE5IxE9zeHMkZItE9YIEI:Q++uVGHaYzOMkZRVT`
Yara	None matched
VirusTotal	Search for analysis

Name	7c2334503834cac9_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`92440b3e7a15cb6e316747f15a8d1879`
SHA1	`68e3f062259b47dd39cb50f401f01ae858dc2d84`
SHA256	`7c2334503834cac94882d9b9842186a36d2132ce22f349396b8e2ae3c4de5eba`
CRC32	`3ABD9C27`
ssdeep	`12288:1/nCExkRpiJhfKNJhhVdTTOfPd/m9muisxac+ck9l:tCExkRgJhfKNJLHMPJm9muTacc`
Yara	None matched
VirusTotal	Search for analysis

Name	58f13d919f44d194_360base.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1717128838_00000000_base\360base.dll
Size	1.0MB
Processes	3184 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b192f34d99421dc3207f2328ffe62bd0`
SHA1	`e4bbbba20d05515678922371ea787b39f064cd2c`
SHA256	`58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73`
CRC32	`6D850621`
ssdeep	`24576:g2mj42MEVQPGEorkSYPuX/7DkbSrh/qtoT/cgB8SnLF:2jnMEVQuFkS/vkurNqtoTkgCSnJ`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	bb600e5ecd40b5b3_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`638b94a4675b4572e145c193cd222f89`
SHA1	`1016a257af80f5e123f59d54f4459addb08d8b4d`
SHA256	`bb600e5ecd40b5b3fcbeef92910837391ca11c34bce4019a74b8997c7111a349`
CRC32	`F5A8D5CC`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlujNqWIajWwapG4Bj8n5t6WSbJ1J9Wa5sFWbmc:29+DgRgiz0G4Bj8n5uWfFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	798bc37c3807ace8_360disproc64.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360disproc64.sys
Size	82.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`43e4f438fd80354687923aadddbcdbee`
SHA1	`c7e4bfad708cffc86d88910e4161ba0fa76a3419`
SHA256	`798bc37c3807ace8fce07e5fd24ef732f38eba373eb9ba6bd8d026d326fd0a51`
CRC32	`C3B10902`
ssdeep	`1536:9Y/b7GDfCEBFnynVyQKjbEUB92tGtt2ApZr9gV3oseMob:9Y2jrPygQKjbE62tGtt2Q99KBeMw`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	bb40d2760cb78bc1_libleak.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\libleak.dat
Size	7.1MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4c05e9d7398029282f6bc11595220274`
SHA1	`439a6421459efac4c36b1d0289f3fa0c06a222f0`
SHA256	`bb40d2760cb78bc13313673dfabed6e136e1e7b1a69315a7b12cd025cf1fecd3`
CRC32	`C6926750`
ssdeep	`98304:QKM7pPpZpXp2pip5C/egKOgKigKvtXaj3buDb:qpPpZpXp2pip5ttXaj3buDb`
Yara	None matched
VirusTotal	Search for analysis

Name	17f3f8c92d23bbcd_sandbox.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\Sandbox.xml
Size	934.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`4fd05cd8be37fc0dcef72c8881d10434`
SHA1	`e0b8084fd5b811553c2fa602b1a217f03bac2636`
SHA256	`17f3f8c92d23bbcdcad982aead237a194de1462c3f5dcf87a46462a24a757ca6`
CRC32	`AB06FAC9`
ssdeep	`24:QlL+xTiOlDeXae3oZywLVExEpKlyEcO2w42Ny:y+xT9lDeXaevOVwynO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	d83d1bf6aa9a21b4_360searchlite_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360searchlite\360searchlite_theme.ui
Size	146.2KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`63c5291258ff6e9ebab439096bd20936`
SHA1	`2dbac59459beeed1f8e409a628f04b92adf57124`
SHA256	`d83d1bf6aa9a21b4c57973548450b3b2da43bdbcb2e1af04e3aeabdf9d3f5f92`
CRC32	`51AFDE7D`
ssdeep	`768:Bq5EZuF+YiS8/qy4ppszVNbpwaLLU/gDzEJhj8HKwtI8yriY:xZuwYz8//RLLegs8HKw+`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	3801877fc8adb39b_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\LibSDI.dat
Size	97.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`3215976c24ba3eb83a117e2ff7e08260`
SHA1	`efca10c91a9da623fe89dcb0a1b4ae9a9b380832`
SHA256	`3801877fc8adb39b8f8f2acbed243d13a4c60bb75f56c91529db5c1b7617e540`
CRC32	`3436DAF9`
ssdeep	`3072:Cu3o3CRwNkJxpJUXL02yzqwjda/oE0rjdILDVD:jDQkJx3FqwEgEOjEhD`
Yara	None matched
VirusTotal	Search for analysis

Name	b1de4a0eb8f04f33_dsres.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\deepscan\DsRes.dll
Size	73.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f9953c280ce904cc8f84d658b1f2481e`
SHA1	`6568b698979adc13b02db380ac3d54fa3e9c3209`
SHA256	`b1de4a0eb8f04f3323b36a9c1d529ad961c2c43e02848cb26434af327798ec68`
CRC32	`4B969178`
ssdeep	`768:sfdNL5qYfj/wWfZb/XFeoy5yFYECG5lpgATSQPA3MQg+GiK9K0MeKg1DGkCDSQww:sF95xbwYhNX2YiK9weCW`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	1dade02f4d36d483_homeroutermgr.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\HomeRouterMgr.exe
Size	1.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f791b56733b56b97132351f7deda4297`
SHA1	`5528a47c2214a827e0f68ee564b789759eba81a1`
SHA256	`1dade02f4d36d483a918a455fad19dcf2f6ba993ad33bf8cac75184d5713ceda`
CRC32	`40A871BF`
ssdeep	`24576:yL3450FtfMqXPGezr5n0cnrYKMHnM+s/qzUBUO2FdAEY7VN+:CZtUqfHB0cn8hBsuUBdUAC`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	18cc1847583c20a7_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\yhregd.dll.locale
Size	18.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4f3dcbe1b1d3d33497701098376254de`
SHA1	`1a6ccee052f2555b21d49ca9ed31cac7ba4fc000`
SHA256	`18cc1847583c20a77b7e6346f86e120d203e376e2551d85233777f7240231a5b`
CRC32	`C9D99E94`
ssdeep	`384:7N3kyK4ckdfQ3enYPLIeR3KJ1MgzBDGPhCEQIC1QKvrfpMQ3Yf1:JDfQ3eE9KvMgzBDGRI1QwWd`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	aff146a384c90859_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\libaw.dat
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`eb0ce0e2336f4345ed8586ad8881d22f`
SHA1	`d0af75d196e74bee5f76f5cb417034b02ed8e713`
SHA256	`aff146a384c908594085c51199c6f01d318639261b97eee2b29befae94671dd5`
CRC32	`2804C357`
ssdeep	`24576:/MMFm6IT9dXbt23MnjukAj6x8VXBB8B3pJj2ZhL0:w6aNt23gukAjA8V/c`
Yara	None matched
VirusTotal	Search for analysis

Name	b16cb4fe0cfbb67c_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\LibSDI.dat
Size	114.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`fd950ee136ec0677dd50e62e09f323f1`
SHA1	`38e77d1de6488bcc1fb3e6e8651cf42c8f9f86c6`
SHA256	`b16cb4fe0cfbb67c5fe2908b3eb374863e7ba0f62266d902098dd71f828b03d9`
CRC32	`A9A8DA7C`
ssdeep	`3072:kAGVpuqnFPPLtiKsfYeCnQ9qPznWj/NEWI3Hw4nAyK:k7uqn9DFeCPzWjKWeAyK`
Yara	None matched
VirusTotal	Search for analysis

Name	e2f6fdad4e7704ea_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9de978afdb84ae279774398cdf20a236`
SHA1	`2ce89cdacb11e74d3d59548b5ac698750312d93a`
SHA256	`e2f6fdad4e7704eadff089096d6943b3d0db3d44afc50e2a996aae4156d379d6`
CRC32	`6489F24A`
ssdeep	`192:7ILLtyLqsMs92lyMrj1grjzR+vnr9ZCspE+TMArRwWUV:7IL4GsNU8M8z7eMHWg`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0197448bd98e9a1e_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\yhregd.dll.locale
Size	18.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f6232d0d119f107b3cf1a9926bcf242f`
SHA1	`aee3693a0d5e24b4670ab02de7dad4ea00026ea6`
SHA256	`0197448bd98e9a1e6e3ceeae1198dda3ffe045a20aa866019b4dec61172d82c0`
CRC32	`0AE6A1F0`
ssdeep	`384:7YHORq5mKQnrnYPLIeR3KJ1M1hIDGPhCc88ov05MQ3dt:+QnrE9KvM1hIDG188oc`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6edb05bc886e30ad_BAPIDRV64_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV64_old.sys
Size	223.3KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`92250774eb2f9dd1316fc5dca5a1d375`
SHA1	`df62deaf0a9eacdd74b6ab1c03767a4cb7af9221`
SHA256	`6edb05bc886e30adba4164cc852eb089630d936f106a5a29f4d30727f1a6535a`
CRC32	`437DC07C`
ssdeep	`3072:qKn23kbAa2OAQMDOPZ1CwJMuCmYoSjdLSKjSJYF24Bg9fTggif2VXei9uxO6P0M:lbjvXTCmYoSjNzjSJYF24i9ESN9B/M`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	6700143a2ad67f41_netgm.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\Netgm.dll
Size	412.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`e9dfecd52dd8f7e61dfdfdc2c9589808`
SHA1	`04d4ee32c5277d4ca58272a50e984ba21f5d77fe`
SHA256	`6700143a2ad67f41cb0776d02b6f304b25f7294c20abc55ec5d276a41c48a6b8`
CRC32	`1416E7B7`
ssdeep	`12288:/6G8mxfMfxNjVPcQA0eTRs9pSeqn6dc3Ik:/6G8mxojV+TRs9Qe+6dg`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	3130a56d7bc5ea3a_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\360SafeCamera.tpi.locale
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`7ab29b181e398328771f0baab539804a`
SHA1	`93c32f7918d27aa5e89376f7eba2521d343d59c5`
SHA256	`3130a56d7bc5ea3aa873dbf65700079f8b32972935cd49687b1ce530c0b1b849`
CRC32	`12E002AB`
ssdeep	`48:r+uNYDHADvDUDTw1lTxD0nuHD+nu7JUqDbt+jM8iIDf:r3Nc0vDgTw/T17jZ7mObti/iMf`
Yara	None matched
VirusTotal	Search for analysis

Name	826b4489dd0143f0_avei.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\AVEI.dll
Size	193.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`915407f35a4ff1a885b5c0016a2b9e9c`
SHA1	`d8a99b4b4ec6f8adb7646681b1fa133f50366b20`
SHA256	`826b4489dd0143f0111fca286c550c40306d2d7ded26ad10eaf8c93eff447af0`
CRC32	`73C8CE2D`
ssdeep	`3072:fOxOHJqe+hV22rO+0dTpPPF7aONEQebxGVQl5gNB+IIIliBcI4P0i:uOIeq22C/1FhNEQ84VQlSJUBBxi`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	39930b6350524454_360antihacker.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360AntiHacker.sys
Size	162.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`ae7b8e059bfca11fedf0eb69ac76bf39`
SHA1	`1daf83db9e3ed0b00917bb07d18b040946f22d18`
SHA256	`39930b6350524454df80245b3b4f9314c5b3c4e480e6f3a6a08a61cdb59624e2`
CRC32	`D2ECCE8E`
ssdeep	`3072:AAJy0G9rT4ll9G+EkATPAeJnyiRn69yDfdCJGz9YnvUeMf:ANdAli1nPl3R6E7gGz9Ynvk`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	555c7e40b7a386a1_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\udisk.locale
Size	334.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`728ab1fe958bfe11d476ff3aee19c7c5`
SHA1	`4dba9ba8100dcb9fec3d4549f4f1efdc4da4ceeb`
SHA256	`555c7e40b7a386a161a2a65df55040a0422bcf2589e32a3897b7d7551167cab3`
CRC32	`A63F532D`
ssdeep	`6:Q++uimVb89c0GPlpUslcip1hOQR4lo8FgEOP6wDEOPqa/9EOPqgMb:Q++ubxV0GQ6HhhR4HgEbEE9wE9gm`
Yara	None matched
VirusTotal	Search for analysis

Name	2406d48a6071c06c_filemon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\filemon.dat
Size	16.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b4a98baf847633c6e959775bf52385b1`
SHA1	`9e68ffdc526778e6bb12a4d48f2df6622d71b2ae`
SHA256	`2406d48a6071c06ccfa4396f970266a38c28f297ce9b68201d04da14b02b6eb2`
CRC32	`C2E184E4`
ssdeep	`384:aNDkKqNi+UELwQ6RpnwvBbhgug23zZuc8hRk:hTZgpnwD9FucV`
Yara	None matched
VirusTotal	Search for analysis

Name	e37c9744f2594d23_360ts_setup.exe Submit file
Filepath	c:\users\test22\pictures\360ts_setup.exe
Size	99.0MB
Processes	3020 (None)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ba320c501d0312bec018e22653081ccd`
SHA1	`0acd0fa90d944457cd2b4cce7612da9ef51fc96b`
SHA256	`e37c9744f2594d23b7156f7718ff1ddc63087c142032f1409e1cc0d8f3f826de`
CRC32	`FC64FB8D`
ssdeep	`1572864:xrJM3EUdWBHVtVvHMLEjQIZcP1/DNfOB/MCYdGTiv+/AMxepV2fNr90coE3Eln31:27diVE4jQIoxmB0kOG/7xoVU90JE0lnF`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a299b6a3f64891a2_feedback.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\FeedBack.exe
Size	1.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`8e11b5c3c4e619ed4aee8ff75fcbb9d8`
SHA1	`a0a431ec273ad5839c30e08888ebc0674f6cc8e7`
SHA256	`a299b6a3f64891a287530ef70ffb2d7e5c7cdb69fc2055fd60a6d2234661217c`
CRC32	`060F97A5`
ssdeep	`49152:sjbSSaacSl8Gb4CieDSmzDQfCHNU/bgHCpnfATKbt8:sjWSaacSl8Gb4CieDNDQfCmzgHCpG`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a45b487d06322669_wdrecord.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\WDRecord.dll
Size	187.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`45760e2ad0f54207d6d1435d0fde42a6`
SHA1	`0c4954c26d8ee24318cdbf739ba117008eac298a`
SHA256	`a45b487d063226695c641485dcf939c51f99626a23b440388b35f23aeb684ea4`
CRC32	`77D5FD00`
ssdeep	`3072:JaMEfq6ok7YfYINHDsLBbkqT+9HOfjh2N38n6PgNm/5aVm1xOAaFM:JaMESI7sfOLtkk+B+jh2N38n6I0E69`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4ab9e8f5d282c2ca_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\Dumpuper.exe.locale
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CRLF, CR line terminators
MD5	`74102b194668bb8ae8cb4f4910530ab6`
SHA1	`fe775291afd1e4985552087044c8004511c0d497`
SHA256	`4ab9e8f5d282c2ca25c2cfa7e864f7414a590b777ea2eef18c70afa564dfde7e`
CRC32	`A7F877A9`
ssdeep	`48:r+uLTDDpVC9AgN2GqkzVwZGdgTTRROk54xHVelY7Mshqm2egn:r3LTDtVujYGXJwZ132e4xHMlY7Mshqmw`
Yara	None matched
VirusTotal	Search for analysis

Name	50dc08fd484e40a9_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\appd.dll.locale
Size	26.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0974cd5a71fb389c29cb6a7b039ebfcc`
SHA1	`6aa1107d3caf78fede62b173d3bf6f65a8d13b8a`
SHA256	`50dc08fd484e40a9e72438e9584560656b86f373bbbdc3088c2468c31617e1c1`
CRC32	`8932EF98`
ssdeep	`384:7m886w9WmTeBr9Q10dJB+eR3KJ1Mn8E9VFK4ikDGaLDGPhCddR4KFKjqfvGBkST:bU10dJJ9KvM8EA2bLDGEdR4KFKcMky`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d261c799df635d96_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`07384e7799496910aea4d3e1bd2daef1`
SHA1	`40bf4a8272785cf0b2b4005bc7c7eb28c4e72537`
SHA256	`d261c799df635d960dc16d41db6e4a4b35fef556cbc9806758bf9f6d52e0feae`
CRC32	`7C7CBA72`
ssdeep	`768:by2lF/WFLLpAEl6Zh7laV5tQ018tY+6JWvdvSB6LSFpW:W2kLlARh7IxJWvdvSB6uG`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	71832e9474ad9d9c_qutmvd.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\qutmvd.tpi
Size	250.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`378fed355d6b9f0222c86501458441b5`
SHA1	`678437b54cd6f723ee7c88ea9c75b30c2a1ca19e`
SHA256	`71832e9474ad9d9c575ea1b8f54858af5cd0281f49c977d1fda917d41681d570`
CRC32	`82BF61BD`
ssdeep	`3072:Uqwb20mSFhpfTdt32Cjag7MQ3DK/8aEVnKXi3mt9cJtbzvw+8yXemV0jr/BMlXln:UJjJ3TWyVAmVoEXsN4YORtz4ux`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	6337dabcc3ceaf25_fr8.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\fr8.dat
Size	2.6KB
Processes	3780 (360TS_Setup.exe)
Type	lif file
MD5	`627329ba4494ad3a65c7046049d92d4d`
SHA1	`65472eddc4295f2b0e3d8ae1f4041cf07e56cf73`
SHA256	`6337dabcc3ceaf25ce29e135f4ad230c72b82dd10afa60106f5ab1ec9d4b8a75`
CRC32	`1528173C`
ssdeep	`48:rqrmbJfZPTb8Z7RX9ja0CXMtDo0vRCWSllmKU3KJZ0NxWAeE8OUeo:fdBPTYZ7l1a5ctD/7/suWAeECz`
Yara	None matched
VirusTotal	Search for analysis

Name	70e08af709b8575c_360netmon_x64_wfp.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netdrv\wfp\360netmon_x64_wfp.sys
Size	94.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`8a4afae6680b973ed303b67f7a82a6c1`
SHA1	`fd2c88542f8d295f253a1c229f8bab8a35d2c26d`
SHA256	`70e08af709b8575c5560a6d68e90e445685cf9a6dfd3e02077e9202a8897617c`
CRC32	`4B0B6025`
ssdeep	`1536:Fyp3RxT/m4r6HklEFE0qRkTJov2dcM8ghS:FyhT/m4r6HkqFEV4Jov2Wf`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	f366932fbb538a99_qutmdrv.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qutmdrv.sys
Size	384.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`055db53f3fb6ee60cabbcd608db3e164`
SHA1	`29aa4ccec75265ef77951005eef60dea419fc2c0`
SHA256	`f366932fbb538a9961967fcc22fe92cbf597c513f3c782a0f56f83e95046fc46`
CRC32	`B95E8360`
ssdeep	`6144:4FyGBI778Xbck6Jp+I8/LNdWWnbZHO6QetESeYAlaLe8pUhg40Pmzw9gK:GyHUXbWMp+sJO6QBWhUgvek9gK`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	050b900d2b507a15_360instantsetup.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360InstantSetup.exe
Size	2.9MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`be18605f193b3f3164fd3d65b9f007ba`
SHA1	`17c1edd08cc70aaab24ae49f3438ec2e1896ea3e`
SHA256	`050b900d2b507a159e62311b16af83109f85179da10af6358422a3f91601dc14`
CRC32	`5E1779C4`
ssdeep	`49152:eTTMqJcXQv/rsV89JsDGqoh5E7XDiRqKx53OBf/7IIV7cWamXH3Fe31cOduH0Lgm:8pJXsOfEi+Bf/7PbXH3Fe31cOdue`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	fdd2ecc99c326d01_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`db9af39e5001611c506cd637a189efd6`
SHA1	`c9d49de915788a5dad939ce749fcc20b65d072d8`
SHA256	`fdd2ecc99c326d014f0e63e7dc9e6a4c8f2b570dd636acee592a9c2160ddf3de`
CRC32	`75DEFFEB`
ssdeep	`768:X3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqmVH/rfroLoQPZo6uuSk:wKJSpD9+1tFGHXt+UbreZruuSk`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	8636f5ca55ce8cf2_driverupdater_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\driverupdater_theme.xml
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, ASCII text, with CRLF line terminators
MD5	`74a4be9c4edb9f93cc4e9a54a5f59845`
SHA1	`0db1196a09167b2fe21675ee756a941d32acb7a9`
SHA256	`8636f5ca55ce8cf2408803e5e13f3d566867f569e87ff594b8d82e848b70ebc2`
CRC32	`03FD0F28`
ssdeep	`192:iMHRzRjh6If7yTb0/Ub/TJKA1CotdSqrKo17eitlXHRGaHIGkS1y2iOC3:ikRzRjMqmTb08b/TEKCqdSsv7eiDXxOv`
Yara	None matched
VirusTotal	Search for analysis

Name	0d3b603e5f07b06a_360wifiprotect.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360WifiProtect.dll
Size	1.4MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`df19bf3d664fa2edb34a9f406d2863a7`
SHA1	`2bab7be76a1b8552fcae78c5d296f5adc61f9d53`
SHA256	`0d3b603e5f07b06afdc9f1874c16a6dcc80c37a3f8d17125259e9b6432f0c4c3`
CRC32	`07A2C486`
ssdeep	`24576:Zq0vJGpjv6bvO2mkG6qeRCZtW6GrI/ZiQjmXtvGUhpvGJGH1RTc+Wpx87Iw9Y:CpuvqrZwrAiQaJFzvGJqT5Wpx87I5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) ftp_command - ftp command Buhtrap_Group_IN - Buhtrap Group IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	93a815b01bcb43b9_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\NetDefender.dll.locale
Size	25.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c47840ccfd2693334834dae926993e66`
SHA1	`d4e93febad01994a2d0a7cdec8cb82aec69eec99`
SHA256	`93a815b01bcb43b9d29ff3a3d871b644bf1d307d4a9ce08acb9135d84e3af9da`
CRC32	`EF222BEF`
ssdeep	`384:7Uoh3ZAM0Dh/Q5DlI76eR3KJ1MXBTDGPhCnQKvrfpMQ3TUv:Yoh3ZAMYi5DWb9KvMZDGMQwpUv`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	ca2fd00fa0011907_writeable_test_20592062.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\writeable_test_20592062.dat
Size	2.0B
Processes	3780 (360TS_Setup.exe)
Type	ISO-8859 text, with no line terminators
MD5	`ab2a0d28de6b77ffdd6c72afead099ab`
SHA1	`a19f987b885f5a96069f4bc7f12b9e84ceba7dfa`
SHA256	`ca2fd00fa001190744c15c317643ab092e7048ce086a243e2be9437c898de1bb`
CRC32	`FFFF0000`
ssdeep	`3:Rn:R`
Yara	None matched
VirusTotal	Search for analysis

Name	81769d3da9178f00_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`9f13dfb9c17a660706dfba96889212b8`
SHA1	`0ecc7670567df42878261f5e49bf7eb802441a85`
SHA256	`81769d3da9178f0002af204a81f03ee78f09579eef7c50ab0974b563e6d9a2a4`
CRC32	`5B517E77`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlyHNqWIajuwapG4J8nX6WSbJ1J9WO6zFWbmc:29+DgRgSzMG4J8nAW3FWT`
Yara	None matched
VirusTotal	Search for analysis

Name	94c164cb7a8426e3_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\ssr.dat
Size	55.8KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0eced3dfe5ca006e3b948d3fe31b106a`
SHA1	`8057617397864780f81b8546964dbbf59260163d`
SHA256	`94c164cb7a8426e3c05f44e0ced4757e7d1d866bb9b70663bb67cc2e95ef3d30`
CRC32	`B12795DB`
ssdeep	`768:XcT1u+QCp00NmpDIeFFoH8+0wcliLU83hczfQSrCoeubzK3NmnobcPAZ3D8OZm4o:X4pQ4dm5IsFocNALUdE93NA+cdSm4ame`
Yara	None matched
VirusTotal	Search for analysis

Name	20ab2e0d45185900_dserror.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dserror.dat
Size	1016.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`547e43b324b091777c4c47a9e71e8e6f`
SHA1	`bcfdc205752c6a4541191ee16ffd4a23bf51d9c4`
SHA256	`20ab2e0d451859004503c220dce94ab195b6aedee255aeba6914135491994b4d`
CRC32	`CD68ADCD`
ssdeep	`24:Q+ktNcI41fxWYuk1wkfv4M+vYLkRj6j4AvM5FBMcb1pb71:rkkI41ZJuk1wkoM+vmkRj6j4AvM5QchP`
Yara	None matched
VirusTotal	Search for analysis

Name	d7d9621d627d93f9_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\safemon.dll.locale
Size	53.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`afd72f3e8c139f63fe74b93dbff61f26`
SHA1	`f13c1ce34a088e0fe5c2646322acdf070e3dd0cf`
SHA256	`d7d9621d627d93f9afb6fe26084176b158658ef396ea3eb29679e85eaaa4c0df`
CRC32	`D7DDDC71`
ssdeep	`768:4CG11xWF7Lp/El6Eh7lKlJ01O+6JWGjELBAS9RLN:FGa7l/8h7xoJWG4LBASP5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	23fb1afd207fd383_send.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\send.xml
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`bfd11f191d9da1c9fd156613b56ed3cc`
SHA1	`2fa97c936549190620c7254a3a1cb24876a3e569`
SHA256	`23fb1afd207fd3836f80dca8828604aeb4ed620cdd63d29cd459e5f2c80593c3`
CRC32	`8096E5C5`
ssdeep	`48:y+xTs9W/DP53rPcVF0KMp3MpZrPcVF0khF2Ny:Bs9IDMdAxyy`
Yara	None matched
VirusTotal	Search for analysis

Name	859c97494db9856d_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\bp.dat
Size	2.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ebbfe73fa35f23025dbe9c8634f4e2fb`
SHA1	`9df13595092a01c6c524e6510e060ced22cc0289`
SHA256	`859c97494db9856d551cfdf1b26563fbe15b335aefef3fd4119e1311dcd47d51`
CRC32	`8754E28C`
ssdeep	`48:P1bfo19T2bfA8FccQdhkzFD+ZwrXwa+x/QvMsGK5J1PdDfC+Y+jT7cLlx:P5fSnJcYkwZwrArYvDjDCEwRx`
Yara	None matched
VirusTotal	Search for analysis

Name	cf48dba9d5ecccf6_uninstall.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Uninstall.exe
Size	3.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`31e031cb8e0810e267ffca918a8b9319`
SHA1	`aeb0ba265f14f59cf93dd912500459393e1df326`
SHA256	`cf48dba9d5ecccf6693bef0562a188a46d9b3f93cb3abc3221dcc62c54790204`
CRC32	`C9A72D2E`
ssdeep	`49152:yXceEeNw8h6SMX0eqsJF4okitynQ9bZ48NwKNW+SKFQcG7SYjJ8inCHhOh6kpxM9:KceEQw8YSbcG7h6kpmkDUQ8f57oX2`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	6d984a7b1f7cbfbd_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3f4860d2e9c20406154d09c73ae31b6d`
SHA1	`66d13f17dcd6b1ef39aa1c131aa5b747a06145ce`
SHA256	`6d984a7b1f7cbfbdf17998f81829b723bfe7d38d3874a05f9bc3991c8ac3fb55`
CRC32	`56E0077D`
ssdeep	`768:oy2lF/WFLLpAEl6Zh7laV5tp01TtY+6JWLdvMBpfw2:l2kLlARh7ZIJWLdvMBpfb`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	324035491e916f87_optadn.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\Optadn.dat
Size	9.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7f46201b6f4d079420a257190ffb4832`
SHA1	`74d5ba9421cddf557c6f9da1f1a152b7ba2194bb`
SHA256	`324035491e916f87465256f7c7f42e3f9f4a7e56fba8f9938f0415031583cee5`
CRC32	`6F8A0FB8`
ssdeep	`192:FmEAGkgBFbrGUZMONCGt9MsadFfGyKG9Uz/HNGE5p4E5p9o9x2ro9x2Av:YPGkgj/GUyO0GtWDd6G9UxGuGuDov2rI`
Yara	None matched
VirusTotal	Search for analysis

Name	0c7f9e863f8a9eda_antitrack64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\AntiTrack64.dll
Size	429.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`1269c80f900329dd986cf0ff61609f85`
SHA1	`79ddc1f043ea2f328dd8089df4129cc77e4c1fc3`
SHA256	`0c7f9e863f8a9eda11990a131496b14aebba4efcee1f047e7b22314d33304f84`
CRC32	`E0533E72`
ssdeep	`6144:0YdP8UFUBrXh+jQ6dyS0CVcLmkRFEocNHPY7kMJPxo:08tqlx+jRyS0CVcLmkRaPQ7zc`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	e147270852044965_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\AntiAdwa.dll.locale
Size	128.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`033e5148eb4d4506008a3c2366346100`
SHA1	`e0aa9e25ea4b75c9015b157423d37b7d04ca5bdd`
SHA256	`e147270852044965db5d45413a5b6806e6d20997d354af97e9f8d4929f37bd2e`
CRC32	`AE5D037F`
ssdeep	`768:jimVVOWFbLpAEl6kh7lqFVT01/woMRoUrUK5/bGnO7Ecm7DcsaIGZwdWWfFKIfRa:+mvblAch7p+RoUnqzagfBPOMop0K`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f9796bb5a9c97d91_drvmk.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\drvmk.dat
Size	52.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`3a24ba31e34ad8f17ed7f74efe281dcf`
SHA1	`ea09a5c4448b92116ab9439864e36af3cbdcfbf6`
SHA256	`f9796bb5a9c97d91772061a41e9286651087c7b5c71720d10dcefd0dd570104e`
CRC32	`43BF7148`
ssdeep	`3:/lxY8l3R3Gllimcua/lEln:U8l3R3G/imcV/lEln`
Yara	None matched
VirusTotal	Search for analysis

Name	4816c3016e34d9a0_v5fotfxm9mllnt1ej6mqlt_g.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\v5FoTfxM9mlLnt1Ej6MqlT_G.exe
Size	330.0KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`cc4f51bde8d4e4d4b6f1c1fc0d2f5742`
SHA1	`89ad4a6ca6a7580f45cddf9baba9fe9a90a578fc`
SHA256	`4816c3016e34d9a0022a389cdb20f64ba49ef7435a3d16c9d96e31da17ddd87b`
CRC32	`26181E26`
ssdeep	`6144:0/E99w94XkSIBKTgD6Ml9lCG4MnMe4UDyDbmeXnda:4E99w9IkdigWM/sGLnDL+ln`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	ffa124d8647cf437_360advtoolexecutor.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\360AdvToolExecutor.exe
Size	730.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`809107b48ff3a7978d57d15e13e666be`
SHA1	`23f96cb8f41bc1cd5313f8171d807b3282d83f29`
SHA256	`ffa124d8647cf4371c4100924dbe6b323d0914115b49a24a23266f552144c01c`
CRC32	`227BE52E`
ssdeep	`12288:froxxe7MP6vY990AaGfVBrjMBucH+fOkEXRTrC6/mdD0o:zouYPB90Y7rjMB5/mdD0`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	da00018f703370b0_360liveupdate_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360liveupdate\360liveupdate_theme.ui
Size	182.4KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`d0f8d1db2d2b04fa9738d08707297f74`
SHA1	`722d4e43d9c7a9f54c0dbf9696199538b294aeb4`
SHA256	`da00018f703370b0b51efcaa12ca47fb4a0fb423df506f92bb8e16a04d029aa0`
CRC32	`BB77D7E9`
ssdeep	`1536:3RjGaLQw68UGZa0AaG+DiSz07sfTQ/pUkPr60QCzRD:hisQw64a0BDiSz07N/ikPZQCzN`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	192b065887382e27_powersaver.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\PowerSaver.exe
Size	145.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`a99cc896f427963a7b7545a85a09b743`
SHA1	`360dec0169904782cfe871ba32d0ed3563c8fa62`
SHA256	`192b065887382e2755b2223b6a956ff1670b78d561012e0b1cbf862d90b46559`
CRC32	`73820C19`
ssdeep	`3072:C2JW9le6e4g0iWLdf/3Q8YfkqiXk+bbRbcj9FXxY7LAr3lzi:nJW9k4zLdf/3Q8gdsk8cjLhYQJ2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	554b214da25a16ea_360zipc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360zipc.dll
Size	629.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cf1766748b6c8ec921ed1137b0550683`
SHA1	`4e4e9386f273a10524a2f80e8ff91922cc014b27`
SHA256	`554b214da25a16ea3242dd410ef5a59255481dbbd1826b86712019fa6acc3a56`
CRC32	`333A2874`
ssdeep	`12288:oFEX5YD8xMSJPPcNg1oevUzjtvA8hToBPaXsZO7olLIH/BeBOcgMeXwmptnz:oFEM8Pv8vtvA8hToBPc79fBeBOcgDHjz`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7cc8342e5ffd96e3_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\ssr.dat
Size	44.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`24d399a9dd5c24b193f574cea7913c56`
SHA1	`52563befdcef45e38e1f5c2b626a9091951dd535`
SHA256	`7cc8342e5ffd96e3506559156880637ed49dddb44b05ca4127db6c76ecfe1078`
CRC32	`68222D96`
ssdeep	`768:shlkKTYFz88W2NnYss/5KgeSfBdDt5OM0j8CDzz/KneR2w6R/hcX2VC:4lkLFzpnYssR7r5pt5O1ZDK42xA`
Yara	None matched
VirusTotal	Search for analysis

Name	fccfca2738c39d2f_syscleaner.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\SysCleaner.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`a5289d010d8c1d206492b6d7d2796dd5`
SHA1	`d3dafbd7be8c328ee29de5f4babb1c38c4e23ce8`
SHA256	`fccfca2738c39d2f8f6b0d3f69cfe88ce033f50d358473b57519e2c5a42084da`
CRC32	`13B948F9`
ssdeep	`24:QlL+xTiLGM3GMXZywyVEpxpkEnYy4fc7JJ2w42Ny:y+xTQl3lYnVrcWIJJ2F2Ny`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	11cdfc04adcf8bd1_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\deepscan\cloudsec3.dll.locale
Size	87.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c4ba560a993b0e6b25df45d99a8c7f86`
SHA1	`0a6924e9b3008e3cfbe9c08f870fdbf49652ad61`
SHA256	`11cdfc04adcf8bd115d8c18ea5f1a4ac64288cbf007776ea25b357bb7bc0854e`
CRC32	`4C1639F2`
ssdeep	`768:LimVVOWFbLpAEl6kh7lqFV4010woMRocEj/wWfZb/XFeoy5yFYECG5AaBPO1t9Ki:2mvblAch729Ro3bwYhaaBPot9we`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6e52647eff76f0cc_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\360SafeCamera.tpi.locale
Size	2.1KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`36021fde33f9a7db27a68edeb1e573fd`
SHA1	`0ba192fca03200822c1cc36b18fb004828b2a284`
SHA256	`6e52647eff76f0cc5ed91786d654dc000f08cd6e5fe2234286d9d4bfbff07bec`
CRC32	`EE455A8B`
ssdeep	`48:r+uNYWgXYeg40egL+r5gC4BYegeEaggnyULj1eg+K3Fdg5egl498fqIo:r3N+oc6FLP1dxCfq9`
Yara	None matched
VirusTotal	Search for analysis

Name	f5d2c33476defe44_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d71cf00d2fd825391f0e522c18cd63fc`
SHA1	`f8af62f0cfe37729f62ae89e7b37e3bb9fdb7e3c`
SHA256	`f5d2c33476defe44cf4d47cc7b1141a86a6634d31f30634081a119f7fb829b82`
CRC32	`817F3BEF`
ssdeep	`192:7MmTMvZKsVyMrj1grjzR+vnr9ZCspE+TMArMnJhEx:7NSZdsM8z7eM5J6x`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	c751c7b02c2c5e81_liboui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\3G\LibOui.dat
Size	357.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bd53083ae48ba64c983876ce726a09b0`
SHA1	`0b7f2ca4cb6e2d8871d29f258aa99407d94e8158`
SHA256	`c751c7b02c2c5e815abd46167da7225b8bcaaff9284c6881f72c337621f0b3c6`
CRC32	`F25A750A`
ssdeep	`6144:XUOfHjsIeShjgQHw4Qmm3/LFKo+HsGIuccOaAdd2FfHYtdfmiF9fgxC/fQ4w:ZfHQITjgQ9Rm3jFKMGIpdo5Edfmizgxf`
Yara	None matched
VirusTotal	Search for analysis

Name	94e04105121bde7d_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\Dumpuper.exe.locale
Size	1.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`7802b72235b3a53b9b2b365b9bc311c1`
SHA1	`2a94db826d48716c4a743322de0462872ce24ea4`
SHA256	`94e04105121bde7dde10d505049e6582f9925b20a86ed639ad026ff45e440ed3`
CRC32	`CE6C0CEA`
ssdeep	`24:Q++uLTuhV5AD/PxLZV9mgFzgDe8tU5ZAQKX7RiWA8veZIM:r+uLTAVE3xL9mgNgCS6nY7Rq8veZr`
Yara	None matched
VirusTotal	Search for analysis

Name	15cba5db63051302_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\en\SysSweeper.ui.dat
Size	101.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bb541b01343008f756ffa991b21d26ac`
SHA1	`41ad3ae228cf18a7d049aee1ae51b0e2ca4cc668`
SHA256	`15cba5db6305130277d5e8ec673e1c3b5b421b964bf9b368bdcd05ba090ffacb`
CRC32	`7413CA83`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3J5:y01ECQTjvJYwTlue`
Yara	None matched
VirusTotal	Search for analysis

Name	7de00bbe491eb293_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	10.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2ccb1135a31d4502cff25d0e53da89e2`
SHA1	`2655fe1aaf729f8bd018c46e31ae17a0c43c2504`
SHA256	`7de00bbe491eb293e5e55e3a9f2c15e7c1327b48f8c25f0045682a56b9cd587d`
CRC32	`A851487D`
ssdeep	`192:7E+FnVygH0HWlyMrj6Pu7CrjzR+vnr9ZCspE+TMorFZ+mf1Kyq:7EUHi/MCPHz7eME+mf1Pq`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9c692049c5b5d42a_fileprivacy.tpi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\FilePrivacy.tpi
Size	255.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f924af1199497fe1b0c08dab79ff7234`
SHA1	`c654ab264d010b6657860370e3bff724475d8ca1`
SHA256	`9c692049c5b5d42a5a34a69e259788336c9e103f7f60b63e9be1d007c5e93b17`
CRC32	`02750B91`
ssdeep	`6144:mT2eCPFGhk1grkAxUccBvv06vAOwHchS9CcF9PZ:v16kAxUcYrvvS9Ca9PZ`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	1986a34731b8dcc2_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bc1980bf423c85a79c5f797dbd474902`
SHA1	`a23e8db5882884a874b0264d2c5d3c0312f7e2ff`
SHA256	`1986a34731b8dcc2fc2a46b694e64d9a8b325380444f4fbfc7e503943fae90ec`
CRC32	`3D770527`
ssdeep	`48:PQbVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PdZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	2b1565289da42e92_trashclean.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\TrashClean.dll
Size	557.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`05e63d2e277cfb06975ad31fdf4c8e7a`
SHA1	`4f25be0bae3bd041f6a4a68ddeb5a005e65579a0`
SHA256	`2b1565289da42e92adce52ef80124c6ee78c9be5306d6848e19394910e4fa29b`
CRC32	`6A23E24E`
ssdeep	`12288:FILvpABeDQdFBg0MUqBkWhCTrJ89Y5nFdE6b:SLrKxqBcrJ89Y5FS6b`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c8a1ec1b919f9e76_popwndtracker.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\PopWndTracker.exe
Size	1.6MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`45003027576f06537d64cc11fe118049`
SHA1	`5829e85f27cc493136ea13845462ab19414044ea`
SHA256	`c8a1ec1b919f9e760a1a434e4c8e3db33f8c541739c94860132902a509dd0f6a`
CRC32	`D22A5016`
ssdeep	`24576:oUolrU/JboM0lOglm2nNPYs/9Wuy5gCkIurDsD7eXGzLervxqA9b:Kl4/BvOFm2nhL/9lyGDsD7SGzLezUG`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	88923a3d2d5acf7e_chromesafe64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chromesafe64.dll
Size	457.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`bb037dcc8f6549985422a96000244c8c`
SHA1	`4c7400e6b574885c63067053f0a29733a6beb914`
SHA256	`88923a3d2d5acf7e619d263c5bc7fcbb2b6125894e002aaf61384668457428b4`
CRC32	`4990E7F7`
ssdeep	`6144:OZwfuenpre3vU4mw2k/D46k0wuglvjIdFaCOaO60Tn27kcn/+VGZboh+Zn35ckMB:Oqf0/FBbs6h+8dkCV/Jo4n35cS8l`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	dc88990b4a44d1e5_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\Safemon64.dll.locale
Size	49.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`89b2b9cf5edb18b60850d6735f6a9a88`
SHA1	`58dabfdada4d1879d0ebd29fabb3235081d8d21f`
SHA256	`dc88990b4a44d1e5c059cc28754c87592658081f9f8b5a19ee923b32c3dd6331`
CRC32	`7B2D5ACC`
ssdeep	`768:83v+tnPKY4PWWYzpnD9UT1tFGHXjpjqaVf/rfroLoE5gRo6qB:HKJSpD9+1tFGHXt+ATrKgRrqB`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	9fc9f2a6e341005c_lockkrnl.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\lockkrnl.dll
Size	359.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`263e9cbec0b12b28f37b99fa855b1bad`
SHA1	`8a51ff5d5948ac2cec2997ff54b6bf67ea7e5a45`
SHA256	`9fc9f2a6e341005cac55975c1f07d10b3634a407ec3ecc1148dc879509f1bcfb`
CRC32	`A06DCD74`
ssdeep	`6144:3lfIt3gJi9OuMNZKnA0nsKnBPOqudUyNtWe3tNBcPrAGl2Y:1wt37ONZ+lBPOq5yL13tNWL2Y`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	f128caf017f5200d_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\Safemon64.dll.locale
Size	49.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`374d69e377a8675d9ef29b1810c77334`
SHA1	`d29ab761a4d177c4edbd20a11f031bfc43707f17`
SHA256	`f128caf017f5200df11652ad6ae68a8a728a95aab0dd12a608d9f3f5dfb191ff`
CRC32	`418DB835`
ssdeep	`768:q3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqaVd/rfroLor3+1OfdF67f:5KJSpD9+1tFGHXt+ANrI1OfdM7f`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	08b5f439a95ad729_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\SelfProtectAPI2.dll.locale
Size	20.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4bdc0414d62aa99541990d900e051abc`
SHA1	`f3380c0034da001b400284f6b8aa9577c0864004`
SHA256	`08b5f439a95ad7298cd3516b383650497751efadd7b5a17c5a7fabea81baa47b`
CRC32	`89CE17CA`
ssdeep	`384:7WLiDRWizS8xkK6aLELRI/zoYCsmbn9I70HVJeMWeHl3PQKvrfpMQ3t7L:4iDRWizS8xkK6ACRI/zdCrreQ1IeF3Pf`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	03669a19803354c6_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\360SPTool.exe.locale
Size	30.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`905ec6f2e42b1b3455b8f9e5b221b35c`
SHA1	`be6d385d11fe08b1442d7dba9d2ae942466aaccc`
SHA256	`03669a19803354c63829f7c3914c865f6533715dfbc2f09074d18418a4384bd2`
CRC32	`3E1DF6B3`
ssdeep	`384:7PF7acsultAgwBAP3Excizfbr8fW3mQCM8z7eM+:pt4B23ESYfD3TV`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d107ed3dadd9d554_axplont.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1b29d73536\axplont.exe
Size	1.8MB
Processes	1712 (amers.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f55d40b74d38f0fcea654437183a7b1e`
SHA1	`200a9623c12df8470efaac73d85a45927c2b3fad`
SHA256	`d107ed3dadd9d5544a569bd16e0c9eecee52f4f136e1def03c06de46267b4bec`
CRC32	`2087C371`
ssdeep	`24576:Nd/IWY2dGH6WZhJp44K5Yr7VeTpteCm5LpdldO9mnIBB3UEM98uEyoYudVFUNAZk:N9LY26bLJHrwptLm9avu8xTV+NiRy`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f396ea57808085d4_router.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\router.ini
Size	274.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`eb3203513e6acecced9219c608e3cbcd`
SHA1	`c25e3375d5f0786f0b8cc762961ab079f584c2ea`
SHA256	`f396ea57808085d4d87cb326b05523b927d45854da693e087216966bb0e46dd2`
CRC32	`B2638446`
ssdeep	`6:Q+HcQuUuURlUyOOuRlUyMuUdM8J22OudRkd1WOMXCyVAD6lEmbql9:Q+HcGFqw28M1kSWASEmbql9`
Yara	None matched
VirusTotal	Search for analysis

Name	b39da6d939ec2a07_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`4664da91938a093a33c849a4b8d49274`
SHA1	`f72162c20f52174f9e2d268c00dbcdd12b577259`
SHA256	`b39da6d939ec2a07a34a2693584f3bf3962f10d9cab444703b281d981924bfc5`
CRC32	`8CD1916A`
ssdeep	`384:7dKtGrtIG1jI7nOSeMUU7j2xoz2DDMQ3Kv:pKtaIG184UPwozkmv`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	17fc81f0d1d42116_smurf.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\smurf\smurf.ui
Size	1.6MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`1921c415bc0a6dbf2353ee8e7cdc6169`
SHA1	`eadcc6296779ab61ce4d1a4ee163603c2b1daad0`
SHA256	`17fc81f0d1d421160115feca57430cbe1709b12d1284da7db44b0e76d7168f3b`
CRC32	`81EEEED8`
ssdeep	`24576:kL77s5qov22FUzpzRkfTcdKLZzWn4IliNN/5CFn+TpsyPJd9b0N4zWm:kX7GqPlR2TcdWzowNfCFn+TfDFWm`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	85a96ead2a6bd2ad_libsdi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\LibSDI.dat
Size	114.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7e51c48007d288c12b6671fd7f9e0409`
SHA1	`0eff6e04409125be3eb42c1ca0351a3bd0e62bc2`
SHA256	`85a96ead2a6bd2adb42465742ee352a594cab05e2ae17088da9c55999bbea4ea`
CRC32	`572F4658`
ssdeep	`3072:9XDg0lkkKj6KcrrssAnxLxRxL6RXyuIWm9byiaFz3:B5LVr4s8LxHL6RXXh`
Yara	None matched
VirusTotal	Search for analysis

Name	58406e0be4c98e45_ssr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\ssr.dat
Size	55.9KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`f3fa8157378fe795f673219fe6808d54`
SHA1	`53a3cf314269ce346d6dbb87bb5eb0c4ec2ec59b`
SHA256	`58406e0be4c98e45b12fea17684ae7482ba1f7ed29f9ff70032f9046a2f5a93f`
CRC32	`C4444CA5`
ssdeep	`1536:ZbXGviTvhwuJcliKcqYj+UgTKzvQpSg4fJDwjFiBnNcNC/:ZbXGqPnESmQBEjA1NcNo`
Yara	None matched
VirusTotal	Search for analysis

Name	500d01e83b0db58e_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\safemon\360procmon.dll.locale
Size	104.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fab30ae7eb5c4d4bbd5d67e0391d53af`
SHA1	`48f84646d2858b614494b86f8b268a326f902319`
SHA256	`500d01e83b0db58e90dfe8be9c9c99d3805456d6ebaf95d0b782d51f649712d5`
CRC32	`13E6ADB5`
ssdeep	`1536:tORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3b:tOBrUC4jyUJGKzgSg+SW9CFx`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e65bc5a3a67d4f3d_dsns.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsns.dat
Size	2.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4a77e3a95368df0ee37a8c6ca97bcbfa`
SHA1	`923c61ab828b4aef6bf439bcaca0b540b90b53a8`
SHA256	`e65bc5a3a67d4f3df1d02cc0c9ef8c35871fbc1e17b70087e94b37e33bfa8bc5`
CRC32	`9C6130D5`
ssdeep	`48:RmU3+qvEQHcd+3doOH03oBvzXaJlprHOOwLe31v1062mDkHTgweMX4:RmmBP8YraoBaJHrpwLeFKi`
Yara	None matched
VirusTotal	Search for analysis

Name	fa380a06afb0080e_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`907e581a8a00bd2f6bccf53f88358935`
SHA1	`0b27ce970ec216eca6d034e1c018a86be0065172`
SHA256	`fa380a06afb0080e1edec0b898b2cf50b6cfcaa0c270224cc7b1409ff55924ef`
CRC32	`20AFCA02`
ssdeep	`1536:bKJSpD9+1tFGHXt+2XrQHS4hI5R3dHIudC94:bKJS19+1k+2XruS4hI5R3dHIudCu`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	4472baff3bb3d252_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\360SPTool.exe.locale
Size	38.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ead1123db0e873e270795d8cd5a2a208`
SHA1	`f013dde5e2676d770a33b7aeb823d97be6956ec8`
SHA256	`4472baff3bb3d2520c3d97dc7afd337d3d57f6ff6a85e06fd335037e5d26289a`
CRC32	`DE2E0F25`
ssdeep	`384:7SacsultAgwBAP3ExcizfbFpO3Nj1beQVnYPLdOSeMEm/eDh4jl+AHKnTu:Ot4B23ESYfRnQVg/Xlk6`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	b8ff6dbac771a71e_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\deepscan\dsconz.dat
Size	18.7KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`5c597e1400ed2e53a0ba2980497f415d`
SHA1	`04a780ffde24174e5938b014b48bd3a522f77013`
SHA256	`b8ff6dbac771a71e1f927776685b59b5d9c84b7f17c2197612a2067419e9eb71`
CRC32	`7B4E1179`
ssdeep	`384:dAG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJ220NZJwQ0kwS:RbSj0SbDQoYZlDT9cPJi1w+j`
Yara	None matched
VirusTotal	Search for analysis

Name	bbabbf0df0d9b09c_dsconz.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dsconz.dat
Size	18.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a426e61b47a4cd3fd8283819afd2cc7e`
SHA1	`1e192ba3e63d24c03cee30fc63af19965b5fb5e2`
SHA256	`bbabbf0df0d9b09cf348c83f8926fef859474e5c728936e75c88cd0ac15d9060`
CRC32	`0F134700`
ssdeep	`384:7AG4SpbwEKYAbje8a66SbGYQoYtIglDTuREcPJQZ6S2nRWRhp4BJBId:rbSj0SbDQoYZlDT9cPJZVJBId`
Yara	None matched
VirusTotal	Search for analysis

Name	296f97a993bc5ba8_efimon.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\EfiMon.sys
Size	43.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`9fa405b04082d6c73c826750b0ecffcf`
SHA1	`a7cb48833f5554c8098fc3da27573a8749f9b79d`
SHA256	`296f97a993bc5ba8c011f915592f8b53942d303d5a48d48ef778743ad8237977`
CRC32	`C7C9D6F2`
ssdeep	`768:wMB5jsAl3eP2S9qg89Kyh1MVfzbO7e6wA3pSVUValkjD8:xAm3eP24q79gVf3W/3oqsQ8`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	e2fa4a52ffbec327_desktopplus.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\DesktopPlus.exe
Size	2.6MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7186838bec4478b234b432d264658f10`
SHA1	`5ce0f57d2d176e89fd345caa30e1f0de0f63e24f`
SHA256	`e2fa4a52ffbec327e8678fb584cd6573c7966737251e6aa3cad113d63c3ca0e3`
CRC32	`6381BAC6`
ssdeep	`49152:IFJi+7OytIt34Ehz1/dggLOkJAwYzlbFks7CYVmyoZEhaTnMtSYXkNgj:IFJi+ayqxdggLBAjl97CymyougMdR`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	8fd17db3aab7028a_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3cb60a42574202cb0dc2ddc053275e12`
SHA1	`53e3f3ff71bbd6833a817f4da8250955a6940968`
SHA256	`8fd17db3aab7028a6092cd60e56e788309fc4b075cab8e4d5ced6249cb6a3cf3`
CRC32	`EDB77ABE`
ssdeep	`384:7tU7OeR3K+h1MeK6j3KDGPhCOov05MQ37:xUP9K0MeKgaDGpo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	73900d5889945807_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\Dumpuper.exe.locale
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
MD5	`bbdceb3c02aa63d8bb625d99cd6328a2`
SHA1	`60ff055adda01e20043c65e2a4fd9e5a6cf5ebd9`
SHA256	`73900d5889945807fcb28e4462e817c9e71171a37c0f2871cf91718af955c7d5`
CRC32	`161B1413`
ssdeep	`48:r+uL22QVgqeMD7div/xGJE9G+lus4SsJY733qbO8lJeViee:r3LHQVgqezxG29GDDSsJY7nqb/Ue`
Yara	None matched
VirusTotal	Search for analysis

Name	dc223ab49538c69e_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`ac5f431cba9c1100c5b3a1fdcaa953a0`
SHA1	`082c2948e1b6d2f2136de53035cd13383d29eab4`
SHA256	`dc223ab49538c69e2ca7ef6b67d274bf0ab84017a0c57469b774ebd06aebb502`
CRC32	`D5CADB8C`
ssdeep	`192:7WMBKtMiJQvA8yMrj1grjzR+vnr9ZCspE+TMArc4h:7W5tbWvA/M8z7eMCh`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	0f9b89a1d321941f_360procmon.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360procmon.dll
Size	470.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`83f8ed9de87847a744d5c9886497c35a`
SHA1	`ebd215ec6eff04b395f4ddffa77b5f06d43d2e74`
SHA256	`0f9b89a1d321941fe5c9e714aa4590dacf6e88f4014c2ae69e394cb4f3e5640b`
CRC32	`3EED712D`
ssdeep	`6144:ZoOB3xht8if82B4gnYmk5WznakAQC9CWp1VfcrZg5cC+5XlSPbgS9mG:LZxht8s82vYCAQIV1VfcrZg0HS9mG`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7f37df2064fb25d5_sxwrapper.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\SxWrapper.dll
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5	`59aa8b40f3122c0c7a37faf0a63238b2`
SHA1	`db8dd47fa4decb65628837cfe851e0d378cf5dfe`
SHA256	`7f37df2064fb25d595150ed902f6b5ac32f3715948a6dbcfed548c37c690761c`
CRC32	`31A1576B`
ssdeep	`192:EVlzYlSqPwOxkQJcdEsf7UNGmgCh1RYPw9yMrj6Pu7RZgjl7rePuXuu+vWr9ZCsx:EVlzLBCJcVQz9hvkMCPa6j8GuZeMk5`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	e4c4fcf88132c197_qhactivedefense.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\QHActiveDefense.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7e0bce805d94db8b88971a0fe03ec52e`
SHA1	`f4ce366ed9958d1f25426e5914b6806aa9790a33`
SHA256	`e4c4fcf88132c1970ccb9ec8f43dc7d1ee193ad552ccdef8ab166959a25696c2`
CRC32	`0123C35D`
ssdeep	`24576:8uh3MZ1z5SmBJ5cIlzAaUPGwXGnBvCELsEbtAY/vwlrmxe4dQ2phzLXqphrYMJdL:l35JJNewjUMJdUT1EefQNFf`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	0d252f660323cb32_360procmon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\360procmon.dll.locale
Size	106.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1211c6e9204aa1ed30bf691a713a6775`
SHA1	`b35131b18a5cd7b61448a3cdade2558882279e29`
SHA256	`0d252f660323cb32d26a3d48131f3e09cfbece9f93db37c900a2422eda6dc6df`
CRC32	`7EFA7A47`
ssdeep	`1536:+ORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3n:+OBrUC4jyUJGKzgSg+p6OiFF`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description)
VirusTotal	Search for analysis

Name	fc23d593de87bf9a_safehmpg.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\safehmpg.dll
Size	245.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`576a055e68aa71fc3f46a59191f1b16f`
SHA1	`bf46c824504ee9a51a5db209f1af278738e0c753`
SHA256	`fc23d593de87bf9abda3e88bab668fe1494dab077bce2b2fe0a9cb35177ef18b`
CRC32	`E577365D`
ssdeep	`3072:zg9+81ckaeMW3lep/P/vBgkYH00hWAJ97Knhs9/JGS2Aw+l7hSOxKjeJm352CRvW:z5WIpXZrmWAX7KniJGSL1JhSYH9CVRg`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4e58bf90b3603fa8_blackmirror.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\BlackMirror.dat
Size	52.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`a3b1ad9aee2a3b48d1360195e5676092`
SHA1	`26a7913633529c72e9fcad060326d0100e664bdb`
SHA256	`4e58bf90b3603fa8b96fd7688397c2eb09a325c82bf6f4e25f7d995a37fe2c99`
CRC32	`32A57B46`
ssdeep	`3:u6ZuUDOhDaRjCJ9Q:u6ZuUDOARjCzQ`
Yara	None matched
VirusTotal	Search for analysis

Name	97817cd258699236_C__Users_test22_Pictures_360TS_Setup.exe.mem Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\C__Users_test22_Pictures_360TS_Setup.exe.mem
Size	115.0B
Processes	3020 (None)
Type	data
MD5	`0aac18bd96fdcfc7aba638a0e56f7dd8`
SHA1	`e5f558190fa37d205f16552da8df829421ca02d8`
SHA256	`97817cd2586992360ffaef7173b92915a8bffb34ab66945827f6058617a459e2`
CRC32	`2144DF1C`
ssdeep	`3:ztmpR5:ztmj5`
Yara	None matched
VirusTotal	Search for analysis

Name	5d9abf5aea21b9f0_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\chrome\360webshield.exe.locale
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c3ab60dc2295563a1539b4d24da1aafb`
SHA1	`80e34f7c5a5a5a7ed6ed232af025379c528fd329`
SHA256	`5d9abf5aea21b9f049967775868a9cb4067ec0f5bb7742eb196305ccbbc70033`
CRC32	`D91488B5`
ssdeep	`384:7P+tAMoefDqleR3K+h1MeK6jO06DGPhC+6ov05MQ3E:L+tAMoKDqI9K0MeKgf6DGD6o`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d7c3e3535865383d_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\ipc\NetDefender.dll.locale
Size	25.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b304c9966af72cd7c07cbfbb2232baf2`
SHA1	`4f883f6d98678888aac9c7d6faffa7b9869fa8f7`
SHA256	`d7c3e3535865383dcddc2c7834bce521b7891e7c167081326127dbc2d0a0816a`
CRC32	`2E0E09C3`
ssdeep	`384:7XLhwAKz94p6UCy+5td9I76eR3KJ1Mr8yqDGPhCakov05MQ3m:jLhwAg9G6UF+5t8b9KvMrQDGvkoD`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9e63372c22753564_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\art.dat
Size	39.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`adce770e0002aaf63288645355e93299`
SHA1	`0f6e4da07f7fda9fd1854dfdf8dae37e544c5e78`
SHA256	`9e63372c22753564fbcaec9e64bb2d09796e57a4eb1a1abb66555ebb68422d72`
CRC32	`DE5D9168`
ssdeep	`384:QcHATfTHov+EYFbuGVh+O6IU6DFchaUH03PEcD0jB:QPrHDTFbuGVh+OMV`
Yara	None matched
VirusTotal	Search for analysis

Name	254161d567ed1ae9_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\safemon\udisk.locale
Size	444.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`2e58b2b687db6fb6cddd3bdf2a875ffa`
SHA1	`f4d700de450bde53877b824a1021dfd9b52f045a`
SHA256	`254161d567ed1ae96756809932715790f4bcc5851eba123bfa6942b2b2d1eb1f`
CRC32	`65682149`
ssdeep	`6:Q++uimVb8Fc0g0GPlpUsT4YlgDOQR4lvxXgEOPU70gEOPqaUf0gEOPqgTBf7:Q++ubxeo0GQYn+hR4VxgEbE9LDE9Qf7`
Yara	None matched
VirusTotal	Search for analysis

Name	4deb7cb3fc824674_360compro.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360compro.dll
Size	599.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`bd196c9e32f504a49e87507a9b816534`
SHA1	`85612512bc8d4cda811c2bf9cf76a5e2f417345c`
SHA256	`4deb7cb3fc824674a9191ab7e5d871b70a8b9bf08fb867bc2fa09e62dcf33735`
CRC32	`A2C20A05`
ssdeep	`12288:q6lIf2CegjegIUaEJve0VLOXlg7crPwnjUZGX1WevvpBwE1We:wjeGvvdcrojUZM1Jvow`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f44d4ed7646d9887_360zip.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360Zip.xml
Size	2.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`f33cb5f29dcda72bbacfad9ea039f84f`
SHA1	`88808be3b67a1f2034b1a2eee4d37db7dba1b3c0`
SHA256	`f44d4ed7646d98871e5b8b7746f5c435d6367887c2572be17b25c5c920bb50d7`
CRC32	`1B6FE9F0`
ssdeep	`48:y+xTsFEMi/Dd3rUhqdOzWyMpXMplrUhqd0XzWyFhF2Ny:BsFXsD2hxzLIFhBzzSy`
Yara	None matched
VirusTotal	Search for analysis

Name	e4cfb253ea441664_popsofteng.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\PopSoftEng.dll
Size	522.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`7680876d732e1cc64da70e32a977ba6d`
SHA1	`83a6bbe1c092b9775b5e77229d0a2a93055b71e3`
SHA256	`e4cfb253ea4416642e10d43d41d561cce517d6a6bdf0653fd2c15a533b7181b5`
CRC32	`EE2CF2EA`
ssdeep	`12288:al0j1T8QjTSBQAmysi0/Tz++04exJ152XM9D+/83fDR3YbJsSP4ikwjV4W:al0jJ8QjTmZm++W+/8bGJsSP4rAb`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	25371e45f9dd4f28_feedback.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\FeedBack.ini
Size	658.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`e4fb34ae85260230b8d44f2f7ce87f55`
SHA1	`50bcaff149cd9f9369555622de61a99d605e8e5d`
SHA256	`25371e45f9dd4f28ec11e7e6e06442e3c7f1bf5199e2c7b7e4fcb494e2021961`
CRC32	`EC204CBA`
ssdeep	`12:Q+7EZSgNl3CytZCaRio02kFfm6k1lxaiO6k1TYaiI6k1lxa6:Q+hg3ydIiL2kFtk1bjk1TYVk1bP`
Yara	None matched
VirusTotal	Search for analysis

Name	f65a35d33798fa94_safemon.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\safemon.dll
Size	1.5MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a829fea701ee2980b6809656483c201e`
SHA1	`e9d5ccefec76afe11e60ca4cb02e4e9d0c2e73f1`
SHA256	`f65a35d33798fa94d86c239b1ff73e6ac52854ee0aee25b712c814fb3483c5d7`
CRC32	`99AEC6E3`
ssdeep	`24576:CFh69Fnix1kHcPGlFERUmu4T/Wzmq3fjmNVYvpK0vMTuFU9Kr61B9E:u69FikjsYvjmN2vpX0TuF2Z1E`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	61c130d1436efba0_spsafe.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\safemon\spsafe.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`22a6711f3196ae889c93bd3ba9ad25a9`
SHA1	`90c701d24f9426f551fd3e93988c4a55a1af92c4`
SHA256	`61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e`
CRC32	`542DAA1F`
ssdeep	`192:7LyM4ZuyMrj1grjzR+vnr9ZCspE+TMAr3o7hu:7eVzM8z7eM97hu`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	1f5c6218ea6235b8_popwndlog.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\PopWndLog.exe
Size	1.5MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`752cd411438b1f94f485662749754316`
SHA1	`ba26c80a94bac5966daf5b766c825099d953ab05`
SHA256	`1f5c6218ea6235b851e8c10354e7d2a8feacc62c21c655832dfecf92575036b1`
CRC32	`F079F7DA`
ssdeep	`24576:roJYU1gkAUv2pE5jbhjjMxuReQnNBj1lFTMRNbIKydHTW9q1vgf99:r6gkAhE5PdjzReQtLM0KydHTCq1vg7`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	28afde07b1b77509_360webshield.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chrome\360webshield.exe
Size	351.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`58d7400e2a8efa0e6d34846c174e8b45`
SHA1	`1ae2c770bc39e419e2c837bbb31617dbb33736e6`
SHA256	`28afde07b1b77509dbdedd92ae443959a5dc431fe8ba7cb5708e1051cd72578d`
CRC32	`EC86B507`
ssdeep	`6144:EO/q/V7Lrgnie135sVgVsyFSQf/hosPkA52QQ8arHhsxbgvneH9T1wZec:EO/qtZe1pDwIhosPkAJUnedT1wMc`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c8c31cc2970be3c1_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\SelfProtectAPI2.dll.locale
Size	21.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b52351e6c1048430430e06f335696fb7`
SHA1	`c6353752f2759056154a7eb9746605adc3db9a43`
SHA256	`c8c31cc2970be3c1da979847d9003d355f225e20dc95f8d44f3386d65b61c0a3`
CRC32	`38BC991A`
ssdeep	`384:7LM3YE3wI70HVJeMBHlF7QKvrfpMQ3nm8:PMIE/Q1zFF7Qw5m8`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5640e67c3e3775a8_gameidentify.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\gameidentify.dat
Size	89.5KB
Processes	3780 (360TS_Setup.exe)
Type	zlib compressed data
MD5	`9d3d83ede03360b412ded14db46593ae`
SHA1	`290046cae3c66d5a70369433ca1e447ec931e004`
SHA256	`5640e67c3e3775a8bc4f99a618de18c6eb1bd4d674a41703ba28e570628baa7b`
CRC32	`0C9FF410`
ssdeep	`1536:2tIvQv/DVTLh9bQsyL2Amk9e728x7+i1PjrqD4+70bVJZYKI6F5JKMDT:2tIOhTLTbaL2X4e7227+i9j+4s0bNIKF`
Yara	None matched
VirusTotal	Search for analysis

Name	167b31798b2bec91_360AvFlt64_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\filemon\360AvFlt64_old.sys
Size	98.8KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`f14d2b6d2d2028ca0851a604cd69c408`
SHA1	`54fb598af2f9ec109973085322e5b79254856560`
SHA256	`167b31798b2bec91bb60eb64f50300a0c5e1605203349817754c6be161a84539`
CRC32	`DCF58F83`
ssdeep	`3072:J3a2wlbrRCh8HbzTwYoUzbCl9uxGaCP0Q:J3jwprRCGHXT/W9daXQ`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	9578de832c4768de_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`02f38553bde1e32a58b800a10aeec0de`
SHA1	`8d109bf9a08b06f7496566218e32dc90919e82f6`
SHA256	`9578de832c4768de9b2ce813ffa989096ff9ba586a685b0d699eadd90958aebb`
CRC32	`9B802932`
ssdeep	`768:O3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqEVs/rfroLoQMPpE6yfh:9KJSpD9+1tFGHXt+2yrNp/yp`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	1a062a0556bdf957_360common.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360Common.dll
Size	332.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b558000eb8730175ef241a108a4c437f`
SHA1	`f47854265b8138a58a6e623930d4f5f76dcd276f`
SHA256	`1a062a0556bdf9579507c89b2f1b6d00b725800284eb9024dde736c876e62ae1`
CRC32	`D5481F76`
ssdeep	`3072:jO0iCjQpBzY1ZydoXKOrBUhuLbTLQCjP4ca5C0B4rH6yHOUG5I6LfBWeHTQq5yA1:jJljzyOPrx7djP2CjrlrGJJa1wAo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	76b25c06ea617440_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`05a1e5f352e4bc7acae74b7357739ef4`
SHA1	`2b5c921c667854340dee64a4593a6433b929304a`
SHA256	`76b25c06ea617440a76ffacb68b27767d5925f262455d0be35f813bbb2c4ba37`
CRC32	`344DC78B`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlcCENqWIajewapG4Y8nc7WabJ1J9W16AFWbmc:29+DgRgEBz8G4Y8n+WHFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	6857eec84039a51f_urlsettings.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\UrlSettings.dll.locale
Size	22.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0ceb7469b7b39a0b784d46ccf57200ac`
SHA1	`7f1de56dcd3163dc41bc2103ec1e3fd548d3489c`
SHA256	`6857eec84039a51f1184c501c659af54c496d4a4d59361251e026dd0cf295342`
CRC32	`51C57DD3`
ssdeep	`384:7n3tG3tDGGiSmI7nOSeM5yYajsA8nQJ+MQ3JZU:L3tKDGGiaty5sAnJqZU`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a2aa5e1b3b679c7b_filemgr.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\ipc\filemgr.dll.locale
Size	21.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`319c66bbd0792a0f0863d1b326669a11`
SHA1	`33ea1ff8a20fd163a5035b7509313462d63b14cd`
SHA256	`a2aa5e1b3b679c7b6b3b16f82137a4ca6c58da4373a16840eea55de679915ce8`
CRC32	`83EBCA96`
ssdeep	`384:7kS7tpB+9lNwElK/248nYPLIeR3KJ1Mlm2DGPhCJKKov05MQ3o:QS7tpU1wElK/8E9KvMs2DGbKo7`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d2efcbe785f23779_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\appd.dll.locale
Size	26.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6765ce8219ab76e18d2d249d2c1d00b4`
SHA1	`6b9e10380c9596d7ca77ea52f7d2c53611a3ad86`
SHA256	`d2efcbe785f2377948f9e77b9d5f383533f07430a04389594eec6f76983e84f7`
CRC32	`999843D3`
ssdeep	`768:pvgRihKVpRyTz9KvM8EAvEDGcJKFKcMkN:pvgRihKVLyTz9pEvWIrh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	d7c7f3e06cc5d4db_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\ipc\yhregd.dll.locale
Size	18.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f538e0cee9e21b16e31b7c5ca5528ea3`
SHA1	`cb79410b96130f8c95f029f4207027e6ddd26d04`
SHA256	`d7c7f3e06cc5d4db29afae9a4b88a3910bdb0abbf414b875f03024707826a54a`
CRC32	`942633E0`
ssdeep	`384:72zlRnYLnYPLIeR3KJ1MPOjDGPhCyoKov05MQ3r:CzllQE9KvMPOjDGWKo0`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	25f65208e8c0532c_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\safemon\bp.dat
Size	2.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`4ff1bbc574705217149a3fb9b4ef76c6`
SHA1	`65a2cdd3e1e49d4b0b2c107a15f1aa31c540f1ba`
SHA256	`25f65208e8c0532c172f348c9cb7bdaa0d46fcb65c0b261184718904224963d9`
CRC32	`423BCA5E`
ssdeep	`48:PGXjKgZS6VoOuoiAqQkJDqPsKUO++4u+JC1OAz9tYa7R9ejxsFAWtXZF+jZsL:PGzKgp9kJDqP7UTH8dH4jxsFA0pYU`
Yara	None matched
VirusTotal	Search for analysis

Name	9c55d7b72b721034_360netd.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\ipc\360netd.dat
Size	43.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`bed1cdfa1bc4ca7749af8d4c9304ecc2`
SHA1	`3547d843fb9f5c00ed10eccbe83bdbce6fcceab9`
SHA256	`9c55d7b72b721034a0a76986d2d08287ba4867ec9cb3fa1b8f4de3c851eb7a8d`
CRC32	`CA89E28F`
ssdeep	`768:yWKsjvn5jKAqfMtWqmYcQ/ibhlwmzWk+MUKfiZw+5xpVRTtST9vlv:F5jxxtZmY5/ibhlpzWk+JVZXxvR5SFV`
Yara	None matched
VirusTotal	Search for analysis

Name	56db2b7759b0b88d_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\safemon\chrome\360webshield.exe.locale
Size	18.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`fa2c06d42dfdc85659bd79229f0b6672`
SHA1	`81126c531ee9b5cf3fce7e44d9e4ded04a0f4174`
SHA256	`56db2b7759b0b88d33c6afa329aff9689219d745c7c3d4a3a0f2c8d1f711bc68`
CRC32	`EAC28FA6`
ssdeep	`384:7I2len0eR3K+h1MeK6j5DGPhC0DQKvrfpMQ3w:82lend9K0MeKg5DGVQwG`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0920eff1ac8be663_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\Sxin64.dll.locale
Size	46.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`f6d9e350a3363ecc1306656bd82bd97e`
SHA1	`cb8cadbe0487d48637eb1ffc61e15fe9bb748d3f`
SHA256	`0920eff1ac8be66305847fdbf0747a2158ae061c9f67ddf5d15b9b73f2a8a40f`
CRC32	`405B8FB6`
ssdeep	`768:LXHGdBPASgYoH6dzSnq5TmtzG3TpMtaNVQJ8lAo1rtJJ6wqw:WASgRcSqNmtzG39Mkf3AArt7Nqw`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	b1c0c2b2077101ec_360leakfix_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360leakfix\360leakfix_theme.ui
Size	1017.1KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`151aa41aa007f7d0146538c1a2832b8e`
SHA1	`7036adab73b90be15c0f2c20fbdfbc8333f51063`
SHA256	`b1c0c2b2077101ecf9b9ffffd9b78663501993483d12d95fd942e8133d1c4cd5`
CRC32	`A1CDCAED`
ssdeep	`12288:x3y9XpPKKDAJrJE4aqMNKLiQGPkycxji8AMAmRNyuLMA/1knm:x3y7PKqAJrJEPqGzPkXA8CwMA5`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	469bff77f2ebe964_qhaccount.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\QHAccount.exe
Size	2.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7a484757431c6ab2f4de15bc4f071178`
SHA1	`c1ae9370e09b41955aa8b703970ce5c7747af7a7`
SHA256	`469bff77f2ebe9647c22799b9a7a61da3237426ced7554330528975f716256b4`
CRC32	`5B0C8ACB`
ssdeep	`49152:3am0+J0H8DzU2+zx9oFnVnCXDlyP2d9Z4L:3B0+KOH+V9oFVCzm`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4e943dc27c3db6b2_remotetrashinterface.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\RemoteTrashInterface.dll
Size	468.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3a604f30d608cb71a441e7fd2223ecea`
SHA1	`353dca9654c22fe92a21b86bea659574ff80e072`
SHA256	`4e943dc27c3db6b2c1aec21b17cb8a90aa60e9598065dc6cd4a396053ef9e892`
CRC32	`9F825F39`
ssdeep	`6144:WR+TsNqaaYLpG1AxiaNkasViN2hzZ4YZkijmk59rY13HlXE7e2tD:aMs0aaYLpG8iaNkasVi5SjmQrYFU7TtD`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f835dd6ec6838a82_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007009
MD5	`70647d27f50be853fef0c708c751d13f`
SHA1	`02eb7d07965635fd78427887556595f4545859da`
SHA256	`f835dd6ec6838a82c8bbb6a9a3f3bd203e25d99aa144610c3a9fcf71c18f440f`
CRC32	`3A2D8939`
ssdeep	`12288:ejt5CQRUdpa9hnysVBhXRn1yZBjHYgCuosZUoQH2ul:wCQRUdI9hnysVrN8BTYgCuxUo8`
Yara	None matched
VirusTotal	Search for analysis

Name	063e8489c954140e_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	3388 (powershell.exe)
Type	data
MD5	`575721a5a290ec4fdadb2aab4d0a7b93`
SHA1	`e153f821552ad84a3928cfeca969a4246304a430`
SHA256	`063e8489c954140e734879f6de50f319b3dbd040f2474e1cb2894120c8a98b62`
CRC32	`630CF83E`
ssdeep	`96:uftuCeGCPDXBqvsqvJCwoVftuCeGCPDXBqvsEHyqvJCworw7Hwx2lUVul:uftvXoVftvbHnorbxI`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	09da4e23872c00aa_mobilesecurity.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\MobileSecurity.xml
Size	1.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`5d60a4b60c81bf0d776f343e1ace68e6`
SHA1	`cf3a540478d69006436159415ac04942ab6f6d67`
SHA256	`09da4e23872c00aa3ba3925e091ca4de7facb4c07fbdf85a2d516d57355b7fd9`
CRC32	`56BC2A4F`
ssdeep	`24:QlL+xTs9u6aDEF4kDEFVYWtwCkExB4pu4yGrk+r39Tw42Ny:y+xTsMp4r4H3/kwBWkERF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	9d732b693478749a_browserprotection.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\BrowserProtection.xml
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`f9b11804e61b21699bb863eb91c62df5`
SHA1	`90eacd69098d0fdcf39a515bc8ccc4670afe8769`
SHA256	`9d732b693478749aab516c7c6a0e16f31420c2a5ebbdf29309112ec1fe88b464`
CRC32	`7780F765`
ssdeep	`24:QlL+xTi4zlZeGOJeGOZZywLVExFpWklPE5P4O2w42Ny:y+xTPZezOVwBlPFO2F2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	c3abe2119ec86bd9_pic_01.jpg Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
Size	108.8KB
Processes	3780 (360TS_Setup.exe)
Type	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x360, frames 3
MD5	`7fd8a81321483e2fd1dc4b67bb91a9b8`
SHA1	`b88f74e739e3bc3b08959ac976329fa7bd62f10a`
SHA256	`c3abe2119ec86bd98efbd6572c63c78426c0d7b34b925d355c70a7be9136a8a0`
CRC32	`C579F34C`
ssdeep	`1536:ohe1+QhJPgpc0W0jSppSZmzbL8AsFe1SkvRaYRnHuTIEEFPXWH4q3VvsP5Pi:oc1+iy20aAkzHzsFe4YlK4PGHN32BPi`
Yara	JPEG_Format_Zero - JPEG Format
VirusTotal	Search for analysis

Name	fe761465299e80fb_360central.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\360Central.xml
Size	940.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`3a38914a187c63db44cbcb8e21e4d716`
SHA1	`90070550fc0dfc5dc1da2dae8daf0d361dc852fe`
SHA256	`fe761465299e80fb7416807e1a82b3438518ee43cfdf1b61a8a093fed4f3854e`
CRC32	`866D6AA1`
ssdeep	`12:QF/LXYRWe82yAitP9UfgcFBc3+mywL4jEExIapqSlreEQ+sxq1w4q1IAyPn:QlL+xTin6IOmywLVExIap4EQ+O2w42Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	e11e6999b0f0e856_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\Sxin64.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5a06d1d04601ad5da6ef42a324245b88`
SHA1	`4021319fa27843fbf1d53d04bc64f71bf1979e95`
SHA256	`e11e6999b0f0e8562544e87a53aacf2e975d00ac0f9d06eefe73fe0853614aa8`
CRC32	`F6519F64`
ssdeep	`768:kSWFluWFrLpAEl60h7l61H+01hO+6JWa0ZrteBDG5:hWPrlAMh74nhoJWa0ZrteBDG5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	e98d9f32f79c3d9c_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`e315796741aa16c306e0bef23a45b9c8`
SHA1	`942c0d9fba70c745a5b60a0dc70a638c663f6f2a`
SHA256	`e98d9f32f79c3d9cbe82c986a96b23e754b123f1435f1178388ba80fca5403f1`
CRC32	`C07D8778`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsXg6PCabR:r5u5/+mMks5qTp1mNqce9Oow6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	9139c35f72fe7a6c_qhsafemain.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\QHSafeMain.exe
Size	5.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ed4a8c04176631109ee08346531310ee`
SHA1	`f3135840e175fb8df8e0f6e12e8a6b04915adce4`
SHA256	`9139c35f72fe7a6cc32bb40d7841301246ba6e9330990a240c1afb914bde5a7d`
CRC32	`8D623CC8`
ssdeep	`98304:1v8KPZfNfCRYo5VVHwfO4J7Ap1c/moZqMS/BlOYWuHZ2PaRE4:1v8qfNfuVYO+C2JZdS/BlOAl`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	af6bfd525c81961f_libcef.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\cef\2623\libcef.dll
Size	46.7MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`e7f79ede8cc1ed9fda5aeeae77e19953`
SHA1	`135d05bdc23c4a6f90c8057843d93e03cb1a7717`
SHA256	`af6bfd525c81961f77da85e99afac8462f5693081f73732ea0fbcefb93b4a867`
CRC32	`746553DA`
ssdeep	`786432:lIdLhtZuz/Uir7+l4lFz+tS0fu/AwIoLhxMdQz82hiLMlnd9uEZFe5lSzTPDi:OhyzzKl4lFz+tSsu/Ajo1xMWz82hiLMu`
Yara	Microsoft_Office_File_Downloader_Zero - Microsoft Office File Downloader Microsoft_Office_File_Zero - Microsoft Office File Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) win_smokeloader_auto - Detects win.smokeloader. Malicious_Packer_Zero - Malicious Packer anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	82ab9389f83e6751_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\safemon.dll.locale
Size	53.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ac824b2afadc09410489785d38bb3f2e`
SHA1	`caf0bf97ea928e64952934d21bd605a008b8b999`
SHA256	`82ab9389f83e67512334b04c02da344c3769eeb1fea65642d8327468fc193f59`
CRC32	`11A1B811`
ssdeep	`1536:vGa7l/8h7DtJWRHS4hI5R3dHIuNYBA+zw:vgtJWxS4hI5R3dHIuNZIw`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	f635978ce8fc3a30_appmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\appmon.dat
Size	28.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`3aacd65ed261c428f6f81835aa8565a9`
SHA1	`a4c87c73d62146307fe0b98491d89aa329b7b22e`
SHA256	`f635978ce8fc3a30589f20fd9129737585cc29e59d5170ec0d50f1be6aca14c4`
CRC32	`6379E3B2`
ssdeep	`768:AAsietytm/H4nxSNzaaeu9CFnwULaPwiyXXSsyEaR49cR:/mtH/HlNzaRFnFLaPwiyXwWqR`
Yara	None matched
VirusTotal	Search for analysis

Name	f668e0feeb009088_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`c4d97aa0f9a302c66e7da17cd90b32b8`
SHA1	`8bdffcc12dad54ca387f535a35bc7d7387ad2ffb`
SHA256	`f668e0feeb0090882ce24810467e48574530e9a356cbd739238fc4a1dc94c79c`
CRC32	`5CE0F43C`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsKg6PCabR:r5u5/+mMks5qTp1mNqce9OoB6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	2434b461b0a131b1_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\ipc\yhregd.dll.locale
Size	17.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`910ed39f065fb6bacefae5e820f74a73`
SHA1	`98963a025244f4c230b076d3b86a079238a1ca06`
SHA256	`2434b461b0a131b1fcad16b31f80480c8aa687430ce25030ad747ba73ede9fbc`
CRC32	`18854179`
ssdeep	`384:7aGOR+BnYPLIeR3KJ1MIODGPhCvVov05MQ3e:GGOR+BE9KvMIODGcVod`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	872485cd13604a6d_dswc.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\dswc.dat
Size	49.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`421dce00c7f6210b1500a02f45100965`
SHA1	`b253ee57a49e3b9babd0fafb3e3d12480679edb3`
SHA256	`872485cd13604a6d54d6005acc6d83e5c606eb767b4ce5c2fc5f0f4ea786a0c8`
CRC32	`29A031B0`
ssdeep	`768:y/XI3UFJDlYYVw0dDOY8GSB2fWl0ZCPhs6MvUT5OWuEJiA7UmQ5Ge2rC:yEUFJh9w6UNBfFKs4REJiAxQ5GlrC`
Yara	None matched
VirusTotal	Search for analysis

Name	a80efec307a15565_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ja\deepscan\cloudsec3.dll.locale
Size	73.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`3f69cf12a81490c6e54ec7ef6d6c29ff`
SHA1	`2efc4e276140081638efd8b46d6448dabdfe9c03`
SHA256	`a80efec307a15565951b9222a2c63d490f6584a3aa2964a5416736afade0eb70`
CRC32	`D368369D`
ssdeep	`1536:GmvblAch77tRoxqR7RKJOnBhAIkAY+BPoy9wedJ7:G8tRoxqR7R6OBkfy9R`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	11b9faf90f47a50b_instantsetup_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\InstantSetup\InstantSetup_theme.ui
Size	359.4KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`846e366126e938306b25e5cf307888ca`
SHA1	`4f7f9208e4c06a8e3e368fc9b7cf9a96ed4da82a`
SHA256	`11b9faf90f47a50beadf1d8be98475eaace91ba4997c13cc3159d8e2c165a86d`
CRC32	`ED4799F3`
ssdeep	`3072:hQ9WdPdALdGuGVhedqoCVUD20H64RBZawEIcYngysMDMqoloSXvR7RmRFsRRTuSJ:WesdDqu+gAgZmQFZg/7msd`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	51ffaa15c7d2be0e_360udisk_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\360UDisk\360UDisk_theme.ui
Size	233.4KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`d87cfba66a6e96c2fe296cb459320a3f`
SHA1	`11b959c973a27179692e8d97b4e0b595316adff2`
SHA256	`51ffaa15c7d2be0e4db83e3695d10453390f69aae7ac6d7afb0b6c078cf0b877`
CRC32	`8C8350FB`
ssdeep	`1536:zr7ltDvFrNS2r+oGlHBjT34YQIKCeBLT+05HPY+zj7LiAdkdlGvBY:zr7lpvFrNS63Gpz4YQIKCeLzX/7Lwdl7`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	149c39310cf7e145_sxin64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\ipc\Sxin64.dll.locale
Size	47.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`bde710c15580dc337efbbf8e0ae24069`
SHA1	`32a124abb080d30c010c5813fbd55b1cdff43423`
SHA256	`149c39310cf7e1451528675427508baab80b379a9d73b31d710a0ed5b5881654`
CRC32	`53421D6C`
ssdeep	`768:xXHGdBPASgYoH6dzSnq5TmtzG3TpMtaWVxs8lAKYRrtsPpN:wASgRcSqNmtzG39MkkxA9rtKpN`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	ef070cd93ce6e055_default_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\default_theme.ui
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`2fb109ab0459027cabd72f267a6ac333`
SHA1	`bdc77184595ec35165dfc4c1858e643efeb0b45a`
SHA256	`ef070cd93ce6e055f0651b83113d736e11c6a57352ef471aca794c5bd9167e69`
CRC32	`E72A50BE`
ssdeep	`24576:vTbnx58ZXeHep/QVWCBvlhYIbr6wc241AhMUBgFpz:JxepcW3Ibrbv4ACU+FF`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_download.exe Empty file or file not found
Filepath	C:\Users\test22\AppData\Local\Temp\1000286001\download.exe
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	ffc61cdb73b4540b_360shellpro.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360ShellPro.exe
Size	416.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`94628247ee8a82c02a066402d87fe27e`
SHA1	`1c0951501a9d113d7f5fa5111cf78f43fe7c22c0`
SHA256	`ffc61cdb73b4540b2e48beb2f5017a571f797d0ccac28719862207427d6f07dc`
CRC32	`217DF1C9`
ssdeep	`6144:rQnyLQCLBvaGjL5QvFY9XExKucH+fOkEXRTrC6kpitmdD019Y5:8CBaGjdQNsucH+fOkEXRTrC6/mdD0o5`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ce993f7583b1f253_netmstart.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\netmstart.dll
Size	169.9KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b1f70f9be9df8bb186c5bc5159690a1f`
SHA1	`0c9347ac3245cdeb8dcea9b3edf01fe4cfd33fe2`
SHA256	`ce993f7583b1f253c6d82027b89fd867390ea1563564da75684d293539edc6a2`
CRC32	`8528D3E4`
ssdeep	`3072:4kWyRk2rLXSNq94xXPyCgZLO8JztAhpFFRssaS5wHXmwnv1n:jWyBPh6x/yfBO8NkM31`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	bd1e88e661c29099_bp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\bp.dat
Size	2.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0a57be9bff642d3cda6fea045e7d2da4`
SHA1	`8c257c2d5b8140c223264aac0d5e31bce32238b5`
SHA256	`bd1e88e661c290994e7bf68bdb5434d2a6c629d9e3201569b877d31d6327a396`
CRC32	`07EA86A9`
ssdeep	`48:PqVMCWDNymxpIG0eKuV4ueJiJn+NJO3L4W4aSQj6xGa1FfiDeuONHoMl:PJZyqpIG0j7c8UfSxDVHT`
Yara	None matched
VirusTotal	Search for analysis

Name	e7391d69f7a73eae_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\cloudsec3.dll.locale
Size	90.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`294ae48db9e596596de3bd5b4c547090`
SHA1	`498d14b2ee7b5ae0415b7a59450cf1bd862d2780`
SHA256	`e7391d69f7a73eae230b50a4478d89d74d5dd8b719bf2cb46f82edd6145adaed`
CRC32	`BE7C0171`
ssdeep	`1536:rmvblAch72IRoi7lT02pLOKwNZiIWWvd8YBPoY9we:rNIRoi7lg2paKKZiIWQ8tY9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	fa0765961d530453_efiproc.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\EfiProc.dll
Size	108.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`32c4ff5de2f326d8644c7a7d328d29ab`
SHA1	`8809a073470ba2cb1cc50a20d2681e284d7dabb3`
SHA256	`fa0765961d53045360152fc8e9fd9a922c93c04d055400b5469c2e7961547e5b`
CRC32	`79CE9604`
ssdeep	`1536:xIIjgqtcdyItrRtLds5Fai/ABI2r/lg8JiChOXZsknkxsoTpxiJENn4LoCVv:XFCI8lt5oAPJiNmfxsoTpxiJE54UCVv`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	8e420fa59c5a4228_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\Antiadwa.dll.locale
Size	134.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9cd6c488d13986e2473c21140ee8bdca`
SHA1	`5bb29a54aa4b849137a700e407a918c0c41f7986`
SHA256	`8e420fa59c5a42281fc87047bb8195bf9ee0e50e35af053164f69a083bd263aa`
CRC32	`277BC76D`
ssdeep	`1536:gmvblAch7iURov8sapgFnSmrUQ0cL4lwX4Oi3VBPOCJ6+SEz:gJURov8JgFnSVQ0o4qX4Oi3qCUrEz`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	2305176a05ac17a6_xyar.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qex\xyar.dat
Size	2.2MB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`ab8bb63e3f7d8359ecba63bf65e5f299`
SHA1	`586b8664927de921e1dffcdd8b8c559063bc7c8f`
SHA256	`2305176a05ac17a67b613cf4352d6b6ae209ca58fdd13f277ff7b04500fe393c`
CRC32	`E32448AF`
ssdeep	`49152:vDeM7mijYfraq6kn9eZ3Ki6JMgaVoF1hVIhgOPMWSblMyFO27:LeM7mij0Ln9eZ6hJMgO47iQ`
Yara	None matched
VirusTotal	Search for analysis

Name	2d803542f2dd3b98_duplicatefile.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DuplicateFile.exe
Size	1.2MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f9df1c5dad49489c44dc630ad7ddd2b6`
SHA1	`72c454b57ee61b051780522f398f6ab459138f9d`
SHA256	`2d803542f2dd3b985248c172b1149a0c08addb8be6938dc4014007d682b72e0b`
CRC32	`8E250B49`
ssdeep	`24576:ui1ZNBp9G35phhuZ+1+4ZA5cq1Zd9CqdhAzwPFImdTbdnY:XFBKz2IYcq1b9CqdKuImdTbdnY`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7a73b8bd126beecd_chromesafe.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chromesafe.dll
Size	368.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`5e556243f4527eded0f72cbdca7d6bfd`
SHA1	`861102e93005dfa11fcf7da0fa9cff1c6c925491`
SHA256	`7a73b8bd126beecddcee95f098ef81be11503b1723f0b6aa20d2a48c27100627`
CRC32	`50D90589`
ssdeep	`6144:Q/tmOmZqZNoF4qY/tNLQ1a6rHL04kSF79AOHYtilOFEKTe954NR:emOmZqZNzya6rHL0VSTpY8OFEKTe90`
Yara	Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	39f54d4c41f69ca8_swverify32.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\swverify32.dll
Size	122.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`226a68710198fd152fddfd0e6db904d8`
SHA1	`20e0427a6dfe93b5bf65162e56a45baa149e57b9`
SHA256	`39f54d4c41f69ca88118bd134ab1fa38d9af3bf4b438cc9297e2c360d75ccc3d`
CRC32	`1F2D4387`
ssdeep	`1536:mIRmP3FRoFyd56KeIMd/ISminRItKRDBSdELOlDww+5j6b1oFIsM:mQmPV2FyLpPMBHut/xZR+5j6baFnM`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	ddcad9ae427569f6_desktopplus_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DesktopPlus\DesktopPlus_theme.ui
Size	2.6MB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v2.0 to extract
MD5	`e20b0d486caa3911ce0c425b5c8746f5`
SHA1	`59c181d2dfacc07fee7001adbe0f6301db18f553`
SHA256	`ddcad9ae427569f62da3215069239578f34efda606c0a175a1801a91d92b987a`
CRC32	`6BA85C7D`
ssdeep	`49152:wb/ocvV89OxsR3Xb3HUnC/ocvV89OxsR3Xb3HUnIl3:wbQc9nxM3r30CQc9nxM3r30Ip`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	c788e5439c0eccc5_wdui3.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\wdui3.dll
Size	988.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cc1f831df0ff4d64e69068701a421d70`
SHA1	`acd0dd28fbd990296f8ef239403ea1ee2fc00b44`
SHA256	`c788e5439c0eccc5d889ed5c94855a86801b27835adfea0549f3d9f825afbbc6`
CRC32	`E5E5EF28`
ssdeep	`24576:ekv8v4JDFERTNPfERcYQzrbO8ETbuVmrrg9R:EwpsTNPsRcYQzfO8ETKVgrw`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	2e7060837dd166e3_360opt.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360Opt.dll
Size	840.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`185087af06da6e9aa0d50b9f37b5d6df`
SHA1	`227ea66fe28c4eb9722ff2a047744cc98561f91a`
SHA256	`2e7060837dd166e3cb5406c20899c953a2445f57f2872502d0adfaaf4a025397`
CRC32	`BB6B312D`
ssdeep	`12288:d36I8z6OsHBsRiRh+jqkdz/bLkQmpDmdD7rnZ4x3KpcaUHEkeK7doyFSdU9QlMr:dqV6HB7H5y7W3eUHzeK7doyj+lMr`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	75b66c132fdf57ac_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\deepscan\cloudsec3.dll.locale
Size	90.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2e78beb9ecb6d475f30fa4563ec14634`
SHA1	`2d171e12fee4ba71b7c057da776e8c804e5a2fe3`
SHA256	`75b66c132fdf57ac469aea1b28a13c206d13f55e5a31ae0f8e1e80a1f2fd11a3`
CRC32	`1439447F`
ssdeep	`768:yimVVOWFbLpAEl6kh7lqFVh01swoMRocqg25QbCdh/lv0FvPLZVAFqfbVNlIBPO4:LmvblAch77FRoe25Q1B/IBPoY9we4`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	de496d02f5fadb91_acls.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\acls.ini
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`bc27adbde5c64034f93e22a1bd1dc636`
SHA1	`8d6dbb6ba9dfa967595bd516599b64095d82a627`
SHA256	`de496d02f5fadb91693b5af115f38eeb1ad6683c3591145de894a554bac3149e`
CRC32	`E4009881`
ssdeep	`24:Q+XqAFSk6lELipNo7k4+8Xongpu9UTndxdUKylXebI5MDKurpObRDdlOe3l3g26z:rt8/Ect4apLi2M`
Yara	None matched
VirusTotal	Search for analysis

Name	2b746128c1e11332_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\deepscan\cloudsec3.dll.locale
Size	67.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0ffff63842aa37607a6bd11ceadf981c`
SHA1	`239584d3b0cf9d71299898019ff76fcda7ae374b`
SHA256	`2b746128c1e11332a2cc50e6260cb0a70f4542b08b0431a6d1a0777bb7f8d33a`
CRC32	`5BA4E60C`
ssdeep	`1536:qmvblAch7F4Rolm6m/mNXDNdyBPoV9we2:qe4Roly/OHjV9i`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	39c129b7d17b1990_safewrapper32.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SafeWrapper32.dll
Size	33.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
MD5	`2c3d34316bdead418e7807730951ab6b`
SHA1	`765ef79bb2df0d5a87caea7084e738565fdee179`
SHA256	`39c129b7d17b1990d53b838e26402c95e683c216f7fead36b44c30f6c2bdec65`
CRC32	`AFD188F1`
ssdeep	`768:t1vFvooKnrpyZbu9KyhaM4iDG+IKjKj9MPgk5:7yoKnwZbu9l4feMQ`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	1c743d2e319cd634_regmon.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\regmon.dat
Size	30.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`9f2a98bad74e4f53442910e45871fc60`
SHA1	`7bce8113bbe68f93ea477a166c6b0118dd572d11`
SHA256	`1c743d2e319cd63426f05a3c51dfea4c4f5b923c96f9ecce7fcf8d4d46a8c687`
CRC32	`1F3F9A90`
ssdeep	`768:SGeAE2njM/nikLUkrVioGIZ0dI5FfSwqccbwJXKPw6oUy:SGeApnQnikQkrwop7fSwqcIwZK9Zy`
Yara	None matched
VirusTotal	Search for analysis

Name	e6243a7741708b91_bapi.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\BAPI.dll
Size	245.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`42e36cea45fe07a9e7f9bbd1b60511de`
SHA1	`7fa1e6bd83a606349e159cbf523ba0bbf47db20a`
SHA256	`e6243a7741708b911cc0c5233fbf1572309f372575c337116878a430740264df`
CRC32	`3918F70B`
ssdeep	`3072:Kc2b7tdR+40XFA2vZWTt0eE210vgiam93b8GkyEPBSLH4G62Wjl69oI5VqNmM53u:z2bZ+p1LvZsGn8M4PpB6GiVUf1c7Nsm`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	b1601a4a45b45184_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\hi\SysSweeper.ui.dat
Size	105.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`74a10e3dd917eb3a095f01e8711e91ef`
SHA1	`02157f964a7003889d5482ef30cf07c77f2d8b11`
SHA256	`b1601a4a45b4518424f646e8c67d209f813db3f6afc4d712b0d7220df8b8c681`
CRC32	`514A8130`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3xm:y01ECQTjvJYwTlu+m`
Yara	None matched
VirusTotal	Search for analysis

Name	5a0b7b0fa4be31aa_libvi.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\libvi.dat
Size	791.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`59142076feb5c4c0f3e11c1e038d1a83`
SHA1	`eee53bd52544dc563dc237f02127f4fc125bc247`
SHA256	`5a0b7b0fa4be31aabf8f249d398e8eb8387485cec93ad3c2758952c97960c96f`
CRC32	`77CFF3FB`
ssdeep	`12288:g/nCExkRpiJhfKNJhhD5PpS1t/PUdmuisxaA8Fsf3:iCExkRgJhfKNJLhctnUdmuTaAN`
Yara	None matched
VirusTotal	Search for analysis

Name	2bff74b83dc66fc7_kb931125-rootsupd.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\modules\KB931125-rootsupd.exe
Size	448.3KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive
MD5	`9909aa216b30b502f677bfff05000b0e`
SHA1	`01a26e5c75ff5b3e34fb6b763ace486fe6836aac`
SHA256	`2bff74b83dc66fc74df2f527071c1ca80a992ba2b887f6043b09564d1b814213`
CRC32	`07CEB4BB`
ssdeep	`12288:ikfk12vJnVGeGVbT5vQtYnObeJWDPO7RuXawA:Q1qnVGVV3nYeIjOQXawA`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Win32_Trojan_Emotet_RL_Gen_Zero - Win32 Trojan Emotet IsPE32 - (no description) Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet CAB_file_format - CAB archive file
VirusTotal	Search for analysis

Name	fad8b38cd4b93c80_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\ja\SysSweeper.ui.dat
Size	103.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`e827672670f2d76ea87c0b0f11b9b5cb`
SHA1	`1587c741dd60de40133fc3b726a188b1271c664d`
SHA256	`fad8b38cd4b93c80fdd377824b71c9219d7cf881542695ff2cabfd391fe4cd6f`
CRC32	`5A480C4A`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3Y/:y01ECQTjvJYwTlux`
Yara	None matched
VirusTotal	Search for analysis

Name	e53391b1a15b6a33_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cdfd0f5359532d12eb41ad95fe4e5873`
SHA1	`9866b620e84d47e9d9b2b649bd1031b3fff9ed9d`
SHA256	`e53391b1a15b6a336ece7de374e8ec510eead51fce85ce5e4be14937f60371e3`
CRC32	`EF180C16`
ssdeep	`384:7qtEB608ZyI7nOSeMLjl8jRXoz2DDMQ3xp:SEB608ZZHjAdozkFp`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	5c7fbba35a536f9b_dsr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\dsr.dat
Size	59.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`b3ae1ac64334f6982f37bd162b8b7231`
SHA1	`90553ead1fa8a610aae01aaee55d00ca1f8ac3fa`
SHA256	`5c7fbba35a536f9bec9bd6ff7aab7950c14f95d06ffe9f0ddf6557c337cc9cef`
CRC32	`C62A912A`
ssdeep	`768:9AiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAc:HM4A6UAHRHF4aId`
Yara	None matched
VirusTotal	Search for analysis

Name	f56c41c3d95488ef_manifest.json Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\chrome\manifest.json
Size	417.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`d5bd4cbb06205469d237e39c54549101`
SHA1	`94848ab9dcb5535d1e05e08c6b9435611a429595`
SHA256	`f56c41c3d95488ef6c813502c33f4722c4788815e6d121027345af1c114af4a2`
CRC32	`5E3B53B5`
ssdeep	`12:1HA0xnHvaAKRXLA1DCzpCjsJBjpCjtPi1Y:1HFxnPaACbA1OzpIWpIJX`
Yara	None matched
VirusTotal	Search for analysis

Name	7f3f8cde5989c733_360elam64.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\360elam64.sys
Size	16.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`67e72ee5dcd6e2c69d9c1f457fd0e3c9`
SHA1	`1da65ca2fd47f10ec7eac55fdb5bfce19bb90de3`
SHA256	`7f3f8cde5989c7339f4862dd44ecd827fbf06d0ae6152c17907e27e822e0bf82`
CRC32	`8247DDE1`
ssdeep	`192:JlI0Ytd9deFvy4GjuW5CRDWHVWQ4eWjMyuXqnajyCMO:JlIltdmF9ryr9lmCb`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature
VirusTotal	Search for analysis

Name	6f184df577264f0b_antiadwa.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\AntiAdwa.dll.locale
Size	144.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6c67671145297554ac805fcb9b4609c2`
SHA1	`3c7014ff5c11c7eb1803076bec304d8b7e151bd9`
SHA256	`6f184df577264f0bfebe7b8389845c211de85ba9d938bfe5c2da415ec235bac9`
CRC32	`B4648C69`
ssdeep	`3072:zvSRoqgsYJEtzFkzF/pQ4SHL/x7wjyxSGcw6F0+z8QmCIpFPqop7R3kYAIxLuR5a:pEh`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	a22358cb2fb1aa33_dsark_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\DsArk_win10.sys
Size	159.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`3d35317f967464aa670a52d3d632cd32`
SHA1	`a3f562399308be926071f745d13a321fa7278638`
SHA256	`a22358cb2fb1aa334272deaa24e2280425f9661862b46331cbdc786138ede8be`
CRC32	`8F82D417`
ssdeep	`3072:mf0Zxn4qjPB2HXksAJDb5XHcLHi1n73s7e5VKnFxw9uxOSWWP0pr:F12HXd+B7355VKXw9sWDB`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	c449ff8d1c87f6ef_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\deepscan\art.dat
Size	37.3KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`14bd07fca242bcb6fc2ec8a3f4cc798f`
SHA1	`533b82da9fa747a5c6ca87dcd43001cc621e7980`
SHA256	`c449ff8d1c87f6efd7ad41de6d03b75264011ff03f27b0277d777ff164b9f91b`
CRC32	`F7F26F56`
ssdeep	`384:ubHQt5WLrD5+UenNRLOUsFKlNayHkzREwv+jO:uK5IrwtnTps`
Yara	None matched
VirusTotal	Search for analysis

Name	5bf78b6d3f24a9e6_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c9d5d3932e653866e0ca41229a332d72`
SHA1	`f7244e11474b34b594f95e6be9c456e21471d290`
SHA256	`5bf78b6d3f24a9e66a3d3beb226096b6af9a733313432c9deb27a53a6314d67e`
CRC32	`3A21E27C`
ssdeep	`192:7TWDOE4emjfrmeKNQyMrj1grjzR+vnr9ZCspE+TMAr+Ps9p:7RDsJM8z7eMVs9p`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	d28c965f553a41d8_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\360SPTool.exe.locale
Size	31.8KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`b73a74ebf7c30079dbb1d1fcb370c956`
SHA1	`53ad86c8fba9d243fc19f489891de9553e7fe20b`
SHA256	`d28c965f553a41d8b545a7014fe452d6010818637e06c595541815fd68d4f781`
CRC32	`CC7EBD0D`
ssdeep	`384:7hmacsultAgwBAP3ExcizfbHUWgfMCPHz7eMLm:Qt4B23ESYfzUWgUGm`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	9dfa64775767fb72_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\ipc\yhregd.dll.locale
Size	18.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`63c252b4b75d3844702b2abe6600408e`
SHA1	`32a8642ff046d699307059e847c2910d37765e01`
SHA256	`9dfa64775767fb725f74040ace07eabee7e0b29f82b1fc0174bfe2e77bb61789`
CRC32	`EFEB7071`
ssdeep	`384:7W4l3hCnYPLIeR3KJ1MGPSDGPhCc1xEov05MQ3h4I:nl3hCE9KvMG6DG51xEoKP`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	791ef4757d9b81d8_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\DsRes64.dll
Size	103.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`edb0220b862394d234580c53068f7328`
SHA1	`6eac07b93895d20125cbfbe3f7ac5fba325afd69`
SHA256	`791ef4757d9b81d8cbd2e915266205d54ec7a23a819a89dc86548962cd661db5`
CRC32	`7D02B062`
ssdeep	`3072:clYPFRoY7+0VLaJpQo3YHctPUwcCYrBnWE0N5mqN6XWEnp7nHJUftA+7ZhLCfq5S:e2XD`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	129a724f898682a6_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\vi\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`dfe0aae9acca91c6f25ca8db4fdd8ae5`
SHA1	`6b374f013337908ad2b29bde29323c0fcb235398`
SHA256	`129a724f898682a6cd98e3b710c0f8610495d890d72febc460552137524d3360`
CRC32	`A48DD1BE`
ssdeep	`384:7/7B608Za0YI7nOSeMlejpBA8nQJ+MQ3yUH:r7B608Zdh87AnJZUH`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	dd29a6f6a9985739_networkmonui.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\netmon\NetworkMonUI.dll
Size	1.0MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`77115a94ff728666f5cb63c7de3715b8`
SHA1	`a873aa5d943bfa6fd62499f0c6ad23294c575a75`
SHA256	`dd29a6f6a9985739368ba52fd049c94ce31fad06a65831573cbdf06b66ea4a28`
CRC32	`EB2C3529`
ssdeep	`12288:Os55Re/qHpsfkfq/xXWo5mn2CMnPPV0yY+IFUULxELa8vDEXgW4gpmbGlhguISzX:BIGpsfMxNMXumDEeg4bahgulP/`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	6ff5338956ec58f8_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\SelfProtectAPI2.dll.locale
Size	21.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`84471cf670238c39266ed90db5053b92`
SHA1	`3fb31e1d7f1ac0b66d34728bce267a2ffea94e76`
SHA256	`6ff5338956ec58f8d53e289ea7ef8cc190a766e5c6ce75c0a38f0110fb659edd`
CRC32	`F752380A`
ssdeep	`384:7pnUh6YQQjcI70HVJeMVLEHlOZ0QKvrfpMQ3vdQZL:dnUhnQKDQ17EFs0QwJO`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6e88cd943736a938_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\ru\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`967e6a65955c40454dc619fe93cbd0fd`
SHA1	`9725fa4b7bed5821da4f1908fd28f5b58bd9d882`
SHA256	`6e88cd943736a938749dd920a8a93a44d0ec9928fad4c3e33dd2858f90dd8452`
CRC32	`BE9B8576`
ssdeep	`384:7qgB60TZHrOI7nOSeMsdGjxEA8nQJ+MQ37a:GgB60TZHh5qAnJMa`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8c4108d277eeef1f_mpvxwmauwkvooa27wkuzd6do.exe Submit file
Filepath	C:\Users\test22\Pictures\mpVxwmaUWkvooa27wKUZd6Do.exe
Size	7.8MB
Processes	1872 (jsc.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`9b73b0054185022266014a06aa83b5b7`
SHA1	`7b2cf66877aca0bb03a5bf88c2351f097932f3c8`
SHA256	`8c4108d277eeef1facfdb3af7202d319d5ca8fa7246047c67138609dfac05049`
CRC32	`86388128`
ssdeep	`196608:/V/HCDQXFsQCflWEFYMxy21YpVwcmjeOSB43IM091PkXn/WV:/QDaFEFYMxy21YpVwpNSq091Pkq`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	dd0e8944471f4418_1cp24gdx3ju3it5nevx8jpp9.exe Submit file
Filepath	C:\Users\test22\Pictures\1Cp24GDX3JU3iT5NEvx8jPp9.exe
Size	1.5MB
Processes	1872 (jsc.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`cd4acedefa9ab5c7dccac667f91cef13`
SHA1	`bff5ce910f75aeae37583a63828a00ae5f02c4e7`
SHA256	`dd0e8944471f44180dd44807d817e0b8a1c931fc67d48278cdb7354d98567e7c`
CRC32	`492793B8`
ssdeep	`24576:3D1YS7FpyUxT3DC2C1zj1SqdAGFQZIx2C45UJoeXH:OQ5xT3DDazjYq+ZIwL5UJoe3`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) CAB_file_format - CAB archive file UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	869f2823fd36e124_softdetect.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\softmgr\data\SoftDetect.dat
Size	9.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`3f23aeb682dd8b91e8fea63898d1c1cb`
SHA1	`a71850c0eb4f8c9952056e4221e3e97310955e84`
SHA256	`869f2823fd36e124084f1ffed596e820fd49204aeff49ee577c763110bcb4aa9`
CRC32	`8A786A7B`
ssdeep	`96:g8fHYUTpyIpBU5yct+GpKR6+WBeugMvPpCn8dpG9:jYoybKR6+UxxQ6G9`
Yara	None matched
VirusTotal	Search for analysis

Name	208ced4364e9d841_udisk.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\udisk.locale
Size	550.0B
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`a6fc63102781e90d66388e893e2874ef`
SHA1	`50405bf52ac67f5fe13d086ef4b8bbd401bbe6e4`
SHA256	`208ced4364e9d841b26b2a6d11b5b9ec968895d7d54d008223162fc7c79dba38`
CRC32	`4C4C8698`
ssdeep	`12:Q++ubxBq710GQufEWkmhR4Cq7EgEFqs2YHE9z7X3E988uEUEs2Y7f:Q++uzKnLzXKE5qs2YeG88ugs2Y7f`
Yara	None matched
VirusTotal	Search for analysis

Name	981a60800867ab7e_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\deepscan\DsRes64.dll
Size	106.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`86d8547fe262a69fa5834029c4b32ade`
SHA1	`f2d31b8038869441bd01a722d8ac7c971c730589`
SHA256	`981a60800867ab7ec3c3692b4ef293ed6c8a87e518a85745452c55ecbbbb3a61`
CRC32	`55F298CC`
ssdeep	`1536:EWPrlAMh74JwFRoadYaT0dpaOKwaZirWGv2y4eCB+SD0:ElJwFRoadYagdp1K9ZirWE`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	1c5c9f768f871141_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\vi\SysSweeper.ui.dat
Size	102.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`342017bdec8dc449d9d4bb7887f4ce10`
SHA1	`2b0a93eca0cb95472868944dedf0fdfb6dc63f74`
SHA256	`1c5c9f768f871141dd765b9cf59ba16972f2048201af9bffc4265c530f404157`
CRC32	`16A2B9E8`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3gsV:y01ECQTjvJYwTlu7M`
Yara	None matched
VirusTotal	Search for analysis

Name	2a9774963e218c10_360sptool.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\360SPTool.exe.locale
Size	31.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ea7e6b53c0bd6e5edfcfc836d121bf74`
SHA1	`b1ea730dd876ac93ae916f4f016f9b126e49eae4`
SHA256	`2a9774963e218c10cf93d573b04f41801c403a254346a5f6fa5e63198c427108`
CRC32	`F55DD00B`
ssdeep	`384:7p4acsultAgwBAP3Excizfbi97k4RBM8z7eM8m:Ot4B23ESYfW97kSS4`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	6cdc7dfba4f58de0_qhsafetray.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\QHSafeTray.exe
Size	1.8MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`8b7f5d6f682f89b7cd9d3f172db0b9fe`
SHA1	`90ed34ed3f75ba13b360b80290c20476cf6b54c3`
SHA256	`6cdc7dfba4f58de01e850d41b10a1d980ab3eaaec54318ec84b18266b3c84c39`
CRC32	`1E4E3C89`
ssdeep	`49152:6bOKhQf00Sk7bXfOK/h8ouCv7NNaD19hCiUbnT:6CKhQf0+vOK/hzNN8kLH`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software anti_vm_detect - Possibly employs anti-virtualization techniques IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	129a7ba4915d44a4_safemon64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\it\safemon\Safemon64.dll.locale
Size	52.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`a891bba335ebd828ff40942007fef970`
SHA1	`39350b39b74e3884f5d1a64f1c747936ad053d57`
SHA256	`129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b`
CRC32	`CCECA7BB`
ssdeep	`768:O3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqdV9/rfroLoZeNMXN+6Ampc:9KJSpD9+1tFGHXt+PtrgINVni`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	f07154c10668bd86_udiskscanengine.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\UDiskScanEngine.dll.locale
Size	17.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1bb8a4644dccfd4a6e8d380c81062b4c`
SHA1	`9d1e86ac19da2b8b682d3f764bceff60292da1e9`
SHA256	`f07154c10668bd86580dc6334e66f6f75ea326b5e762b3610cfb4edf93e10368`
CRC32	`6E6CD740`
ssdeep	`384:7ICXB60SZrI7nOSeMB47jsKA8nQJ+MQ3XF:UCXB60SZUliHAnJMF`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	35035495a36f8537_dsark.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\DsArk.sys
Size	147.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`98df4e7708fa2fd92a01c89ddd043d5e`
SHA1	`0590c7f1c5a0807fa8259e13fb7ebae42d3e4b4d`
SHA256	`35035495a36f8537e2a5f56031277cd884de557257b40b92bd39454877a264fb`
CRC32	`21794091`
ssdeep	`3072:Ll9eToqjHB2HXktWVFv5NBc5i91P73sPi5V63lxUR/9rS1905I:M2HXkQJ73h5V6HUR/9eM5I`
Yara	PE_Header_Zero - PE File Signature Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	7eb6ca2e50ec95bd_cleanup.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\CleanUp.xml
Size	2.2KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`00e640d59d1a161f73b23d24a4aa520e`
SHA1	`d999e9060c4428d11fe27a33a74f9ecf115ace56`
SHA256	`7eb6ca2e50ec95bd7bd1cf0907b5e7bb9858a5b71bb5b244bb455845ff59c33b`
CRC32	`4A182D60`
ssdeep	`48:y+xTOENEWOVwvx0ptFN+bgSV3+0g6J2F2Ny:BtORVwpetF4bgYu0gMy`
Yara	None matched
VirusTotal	Search for analysis

Name	582d8ce0519b8995_patchup.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\PatchUp.exe
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`b4daa6a2faedd1ebc51321f718c99e38`
SHA1	`385cd2c566ebdc062bdc2fe4e17518c442cddf9d`
SHA256	`582d8ce0519b899513ea7da1a84603a23a62ea7938fd67f2a2858244d531243b`
CRC32	`7136185D`
ssdeep	`24576:g7fGyyeUW7ju9TjzqPoKQ+2L7uUJtAsjxy5U2dTfG2W6:yfFU2C9TjzWoK0zJtAsI5U2dTfrW6`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	677400569783cc53_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\deepscan\art.dat
Size	39.0KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`66d945287112d2d4686d50619a71c967`
SHA1	`1bab6d4bb9a1da6f9488d7517f30757fe19bf278`
SHA256	`677400569783cc536cbb6774d0b79379fd9d740f9af94686d4584ae8f3b2b152`
CRC32	`9519C415`
ssdeep	`384:aoHRI1mQRA2HQJlsm9Xz2tP9XRH0YXFruelUk55tYnZacHUfDYEULAjB:aV8QFwJlsmR2tPnLrzTOnWV`
Yara	None matched
VirusTotal	Search for analysis

Name	1a0608428fa5afce_sxin.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\ipc\Sxin.dll.locale
Size	48.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`da00e0ec3e5501a5ecec686ce558753f`
SHA1	`c43af3a6a2ba5856b9724b38cf3daf5cf757f754`
SHA256	`1a0608428fa5afceca1156630c56325605a01289abf83e96292af1c9c096e6d7`
CRC32	`212ACE65`
ssdeep	`768:HSWFluWFrLpAEl60h7l61H601/O+6JWK0gdvyBB1j1:yWPrlAMh74r/oJWK0gdvyBBR1`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	912102c07fcabe6d_360netr.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\ipc\360netr.dat
Size	1.4KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`db5227079d3ca5b34f11649805faae4f`
SHA1	`de042c40919e4ae3ac905db6f105e1c3f352fb92`
SHA256	`912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238`
CRC32	`1DBC9CA0`
ssdeep	`24:FF30NaCrqZ7x24YSCw1Oo+Iyx20/78vOQpqjOLMDj3RymfvhC2lbwtv4RCeMBQ8Q:FF6amq1xtT3qIGSvOoQOLMD9pZCCbwtm`
Yara	None matched
VirusTotal	Search for analysis

Name	4dd579bab8cbed8c_homeroutermgr_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\HomeRouterMgr\HomeRouterMgr_theme.ui
Size	457.3KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`1afa2b81c81d7048938c38f45816cd73`
SHA1	`f68a4b19d3c075988010f952d34dc58dc9d6b257`
SHA256	`4dd579bab8cbed8ccdf320e617ad883334e3736f5b2134b79834d9fe7a61df50`
CRC32	`BE7E8885`
ssdeep	`3072:H57HKfM0f2DvKSe4RKCugWbvvvvvvvvvvvvvvvyvvvvvvvvvvvvvvvvvvvvvvvvB:Z7B48KSe4UprZ7Srf`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	12c05c0773786755_kmconfig.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\kmconfig.dat
Size	312.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`594768e842e58f4b63243fb85f249ed1`
SHA1	`d40703a848d25eb5338e95a3ea1ef8fa644d6bc1`
SHA256	`12c05c07737867555c5d023f678c443aafe0e2d6a72e681537a0034bef9483ab`
CRC32	`1615F8CD`
ssdeep	`3:LMqSsiCP5678H+zxgl9sSzgzHOc6zU64g6gcIgPLg8n8Kg6gOgwlllIBIY6U:gqSDCR6WMSm6cO5zN6TIKt8KgLPFizU`
Yara	None matched
VirusTotal	Search for analysis

Name	0b8e7c0e848fb604_spsafe64.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\safemon\spsafe64.dll.locale
Size	9.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`8fae06356c5aeaa6876b407615127064`
SHA1	`af123a72c6c04ab7c79987eba1d2768aa1b7ac9e`
SHA256	`0b8e7c0e848fb6041107d2c83225c4b37cdec37d61d349883fa0b02d6dbfb7ce`
CRC32	`89469615`
ssdeep	`192:7Dm4Mt1s/7yMrj1grjzR+vnr9ZCspE+TMAri9cR9:77g1smM8z7eMXcf`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature IsDLL - (no description)
VirusTotal	Search for analysis

Name	88fc25ef2a0713b9_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\pt\SysSweeper.ui.dat
Size	102.1KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`7ff0f2473030dd7e2fda74b0f744030b`
SHA1	`97aefc216d0f5b5efcfec2ac75799502e22a48f6`
SHA256	`88fc25ef2a0713b9b19603c5c854b870c55429b6fb72c2a89edfe718ed306453`
CRC32	`8A243142`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3vXb:y01ECQTjvJYwTluAb`
Yara	None matched
VirusTotal	Search for analysis

Name	7b79ca1ec9ea05d6_avcheck.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\filemon\AVCheck.dll
Size	321.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`0fc2f13d9e0cfbd4903a77051348d16a`
SHA1	`c1df2fe56cbd15271020e48751c39ab482f6eaca`
SHA256	`7b79ca1ec9ea05d6549218af8c646f8cb25c563e66d810ca8890340066cff72b`
CRC32	`81E63A72`
ssdeep	`6144:rdFCKJJeKF+vQfd6FsdGu5mTjyum9utd0T59a:rTCKTHF+vQfd6FsdGPTjyum9k2T59a`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	4df4e20bd4062e89_360FsFlt_old.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\360FsFlt_old.sys
Size	518.3KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`cd20d1dd4eab42c47d1ded235f97329f`
SHA1	`a4a21345c840854e3798a008d244db53217e42d7`
SHA256	`4df4e20bd4062e8971d85e8145b0b91b60922ec9f007702ba2b81d08029ba8e3`
CRC32	`2A8CDF74`
ssdeep	`12288:+2BPSuicLiwGHtC9VA6cF2wt9tu1FnnQp9X:vsSA6i2jVg9X`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	02e934cbf941d874_yhregd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\en\ipc\yhregd.dll.locale
Size	18.4KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8a6421b4e9773fb986daf675055ffa5a`
SHA1	`33e5c4c943df418b71ce1659e568f30b63450eec`
SHA256	`02e934cbf941d874ba0343587a1e674f21fd2edef8b4a0cc0354c068ec6fe58b`
CRC32	`EA41756C`
ssdeep	`384:792Phnecv1qanYPLIeR3KJ1MqSDGPhCvYGQKvrfpMQ3DMl/1:0v1qaE9KvMqSDGjGQwZM11`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	758fe125dd116d7c_cloudsec3.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\es\deepscan\cloudsec3.dll.locale
Size	89.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d370a46b849383374165f98ac5e92590`
SHA1	`3a40b71c8e79fd4e22a87ddee241c7a6045a0e3d`
SHA256	`758fe125dd116d7c6ff9daf3cf2d7c2b81a646fd64fc41a5c7999bd2662cd8dd`
CRC32	`341FE7C7`
ssdeep	`1536:KKmvblAch7UwRoDsblEJrE4MSye3IAdBPoUJG9weh:rDwRoDsblE+4MS90OG9`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	578df6969ce7f432_art.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\deepscan\art.dat
Size	39.5KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`827984db45fc9ae1754bd0341252a614`
SHA1	`f2b652d4bc16ed730980552dcb96eb9121a7d28b`
SHA256	`578df6969ce7f43288f25af73007f8a3d07dcbfbfcb86c5e9525b4518c18621f`
CRC32	`F68A80B7`
ssdeep	`384:YTHOpbvZMSHZP5xAkD0YDztUbB51Pa7HkT3En+TjB:YcLZRFFW1`
Yara	None matched
VirusTotal	Search for analysis

Name	b586a06db863cdd4_tracesweeper.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\tracesweeper.dat
Size	156.6KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`0368564d1bf5f50feae0f98eda02822c`
SHA1	`78e9c127c1873897c45958ccd918b4f51b82b62d`
SHA256	`b586a06db863cdd48ea60fa5296346d50689519824547753ddccacaaca86208a`
CRC32	`E22785CC`
ssdeep	`3072:QA93JvMbeVUJLIGccbyvugfUnfxWodmZGrMb0:Q8JvMyUTSugfqpxmZgx`
Yara	None matched
VirusTotal	Search for analysis

Name	f2009682ab5f9012_liveupdate360.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\LiveUpdate360.exe
Size	813.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f5058e30e379af4437e5f8eab34ba005`
SHA1	`469eba65c1cefabdb57ec62e5a10cf9ef67f8b0d`
SHA256	`f2009682ab5f90120505e4dfbeb0aac7e16457a6d97ec3f6bbf3c79e34f789f2`
CRC32	`6CC6E833`
ssdeep	`12288:s/PvxjEFCrQRvakoEhXzT+PVvaAdG3n6x4vkwaA49k971N3qkyilwXEAo1EQADV5:svtQvakoEhOPhaAdq9xNAil8EViDSd8`
Yara	Malicious_Library_Zero - Malicious_Library Network_Downloader - File Downloader PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	48b9596b3c7b1af2_360deskana64.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360DeskAna64.exe
Size	217.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`4b26b4b4f38fee644baccefc81716c6c`
SHA1	`6036d5f882e7e189859e58fbbd4421a2b09b58dc`
SHA256	`48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be`
CRC32	`E2A6623A`
ssdeep	`3072:MB1yXwSGX9Iu1NPDnmyIkGX91y1Wh3m7OaZBPvJrz3nYu9I:MB1uW1RDnmQoHyJC2ldYu9`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	76d2a501246207eb_specialoffer.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\tools\nodes\SpecialOffer.xml
Size	998.0B
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`14dcdf37e7c544360f3a7f7901ddd61c`
SHA1	`6c691c6e34cf1481e4a961f0a88d1f2adbd1e77f`
SHA256	`76d2a501246207eb3fb9f2b7f3af00091842160a32ef00192f87ee969371b222`
CRC32	`724D955C`
ssdeep	`24:QlL+xTiAxax2/3x2/XZywyVEptpKlLoq8E4xbw42Ny:y+xTjsxWxLnVfoq8pNF2Ny`
Yara	None matched
VirusTotal	Search for analysis

Name	9815b511aeb8759e_selfprotectapi2.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\tr\safemon\SelfProtectAPI2.dll.locale
Size	21.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`68061714c076fc56d8b61124f24bac28`
SHA1	`52c018ca008d9cbc0aee549b88b3b7af2e3025eb`
SHA256	`9815b511aeb8759e96626566df9e7204f47702f7864d0b08a024b00eae9869a2`
CRC32	`A2167280`
ssdeep	`384:7fpikHCmY7JI70HVJeMZHHlZqJO+QKvrfpMQ33C:AiCT7yQ1PHFZqo+QwtC`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	7ede5c9a102eddc5_360 total security.lnk Submit file
Filepath	C:\Users\Public\Desktop\360 Total Security.lnk
Size	1.1KB
Processes	3780 (360TS_Setup.exe)
Type	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu May 30 13:34:40 2024, mtime=Thu May 30 13:34:40 2024, atime=Tue Mar 26 20:20:21 2024, length=5203688, window=hideshowminimized
MD5	`a018b8703eb313718efcb4df2e6ddbef`
SHA1	`8f5157c00866c08dcd6b4c22f84c76ded1ca02ef`
SHA256	`7ede5c9a102eddc590c08719886265615c572eea91ff2e2c87cf8d31822e4fdd`
CRC32	`3C9DEB73`
ssdeep	`24:8mVFirMdOEzVArfca1yA/AdPjLdP2pUPPyR:8mVFirMdOfnR/AdPPdP2inyR`
Yara	lnk_file_format - Microsoft Windows Shortcut File Format Lnk_Format_Zero - LNK Format
VirusTotal	Search for analysis

Name	87c1dc55f5cd035c_dumpuper.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pl\Dumpuper.exe.locale
Size	1.6KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`880e5c62a78e5d11c9510f0a0482cb88`
SHA1	`e3b8b36176063545f3ece610851c4418bca6a55a`
SHA256	`87c1dc55f5cd035c6d880d14158e0dbcd193d69cc331001ec456b5b8dfc1753f`
CRC32	`6744A1A2`
ssdeep	`48:r+uLTCVpKGkIKNabIfLY4Bw+iDHupA+JY7+YbqcUeBg:r3LTCVkG0BZBw+iDGA+JY7+aqPUg`
Yara	None matched
VirusTotal	Search for analysis

Name	8d21a430b38d7415_360FsFlt.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\360FsFlt.sys
Size	540.7KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`b372e31c719a47b08fe4d377d5df4bde`
SHA1	`ea936fa64b8d11fa41825f07c2ceeb886804956c`
SHA256	`8d21a430b38d74157f5d73f8dfd4d508c2fff7f2945fa2987794f656b3acb58c`
CRC32	`5D388413`
ssdeep	`12288:DEhSm623kCPRrCDYi66qrtDF3Fg282r1tuRad+JuYk:AhSikMRBiDqXFO2GqQuT`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	81399a7379aebbbf_360searchlite.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DesktopPlus\Utils\360searchlite.exe
Size	915.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`85f76a8481c642654ae58caf6d1b35a0`
SHA1	`5925a1f3a265311e8d818407062ddf5cefffac3f`
SHA256	`81399a7379aebbbfbce8d8cbc2d482ca04c38ddc91919ae5c6ee3a0f8fb3ea9b`
CRC32	`4E683ABA`
ssdeep	`24576:cRwv6RBAJ5UP0Yyj4kflQaiZD5wlVUU0KKg3:SLGwPD5Gd07g3`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	547bcecfee3185a6_popwndtracker.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\SDPlugin\PopWndTracker.dat
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`ef7ebef28941211ce7e7ca59334ff830`
SHA1	`cd11943c230e43afee755d90e20aef94ebe0a7ca`
SHA256	`547bcecfee3185a686e4946bed468160069db5875eca1f107487e1611c793334`
CRC32	`A3D60D6A`
ssdeep	`96:d4zPJI7NsrLWMG48d3O2TUPQbSzd6T+YmemiRIx:yzC+nWte2TZbS0kTx`
Yara	Antivirus - Contains references to security software
VirusTotal	Search for analysis

Name	e8c4109e099c9052_traceclean_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\TraceClean\TraceClean_theme.ui
Size	698.6KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`cc05643d5ab2b8a926bdfa14920d6696`
SHA1	`774e2802fb1b5d9ab527d422dfeb6d5439f5c51b`
SHA256	`e8c4109e099c90528248c061ac397ca829bf63009ee239c93953101ba0591671`
CRC32	`ABC01411`
ssdeep	`3072:iQygCU/aXUjjYQ3ssBUuC9J9T6tj55JRdC6j0WcuUcDjjTXIDA8EIXKFNFqGeXwv:J5ck`
Yara	zip_file_format - ZIP file format Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	622df8b4dfce64ac_360antihacker64_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\360AntiHacker64_win10.sys
Size	195.2KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`4c253623ef3211fa2857a2cad8b2febe`
SHA1	`b601b324fd09ec02e8f2722d4b9b90714f56f4dc`
SHA256	`622df8b4dfce64ac7712b7bf855b2e31c6d135ac3b96568d13d0a7d07378365d`
CRC32	`E91E753B`
ssdeep	`3072:pEcVlx3NVmDYxP9ApGPVMGKraCv5ZE+ZCiygh+1XKNktV97ZgeM:SOlx98YxP9A4dDiZJZC2ul797Z`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	edde2232716629c0_BAPIDRV64.sys Submit file
Filepath	C:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV64.sys
Size	222.3KB
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`992de18c7b0d80d7b8531b90c3910888`
SHA1	`173c5c2afa64ce8b8d2243b5baa5d4a77c996e17`
SHA256	`edde2232716629c09ebbf6a5ddfe55fc8bc2edef91ccede9104b3186ffb170a0`
CRC32	`810325C1`
ssdeep	`3072:Dbqf/1pMk8F3WKYqX2wd/wuNnQI3lKjSJYF24Bg9fTggiyrDynbsnP0q:Me3CWd/wuNnQIQjSJYF24i9EoIYMq`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	f78eee64134aa2fc_360deskana.exe Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\360DeskAna.exe
Size	223.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`9c914da5ba91ec1854effa03c4ef6b27`
SHA1	`a2dfc7d70b5fedc961b0bc6126962139bc848ea3`
SHA256	`f78eee64134aa2fca1d6eecaa8ad2c3bf9e54c232554525ac4783768daa677e1`
CRC32	`3062F71B`
ssdeep	`3072:78oAPH6BdWT0N7JdQ8oH4SefaqNxTQPBFMmNWU4k/uwgUo9Bpqc8rz3nYDddyj9:CvdO1dQ8JxsPBhuwQq7Y09`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	4978844edecf89aa_tengine.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\TEngine.dll
Size	816.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`d261bb4addc4aba4b9fd64c2c3646160`
SHA1	`c384637a8fb0b8a8021f662b79db3f58fe3d8453`
SHA256	`4978844edecf89aaaab39d9bcb399b850fe17d68f99d00632271b8c1f9cb967d`
CRC32	`7FA3F896`
ssdeep	`12288:9B0uiDyvLWetgmUJL+Ln3pJsjNRn4LXKTvwMTDv6PoTsStvJV3nVkiHfA:jiDyvLWSeCZJw746TvwMTDvpTdtqiHfA`
Yara	PhysicalDrive_20181001 - (no description) Malicious_Library_Zero - Malicious_Library UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	b7e910c5e5d90638_dsres64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\deepscan\DsRes64.dll
Size	78.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ff5eb1d682bb78a2b8d3ad1b5081d86a`
SHA1	`0f13669de102c094638a61443fe6ba2cbc3820e8`
SHA256	`b7e910c5e5d9063816603e108acaa127359d26efe6b6a34797e59c49df6f48f0`
CRC32	`8B58296C`
ssdeep	`768:uVV4VfF3JTZdMkMinwxnswwFT2yckIBxRjfteWhAMae3RtRk0W3MWD97xk3whAnd:22TcVUTyq8jfVVtnuVkghAd`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	a30728f84cd71e37_netdefender.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\ipc\NetDefender.dll.locale
Size	25.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`a7d0fa3b56e58c336931642f2f1164e4`
SHA1	`c36e7bc98909b343be91d84bc51705bca5fb4384`
SHA256	`a30728f84cd71e37c6710163db33feb90c3669524510185de994347056e0b448`
CRC32	`440F6A87`
ssdeep	`384:7RM5G3mlhU85M0qI76eR3KJ1MORXDGPhCWov05MQ3q8:NyG2PU85M0hb9KvMEXDGto2`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	8ef46f51d3f23f40_qutmdrv_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\qutmdrv_win10.sys
Size	393.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`b2fc9a288bcbeb8d9d6adeae8596785b`
SHA1	`b65d232a789882cee271fc018422e165a68de1f6`
SHA256	`8ef46f51d3f23f40b6eff453b2a8a9a1fc62c141b7602e49026a98bd005a0ae3`
CRC32	`370722DF`
ssdeep	`6144:cFyGBI778Xbck6Jp+I8/LNdWWnbZHO6QetESeYAlaLe8pUhg40PmzY9bK:ayHUXbWMp+sJO6QBWhUgvec9bK`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	b766621493231bca_ts.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\TS.dat
Size	748.0B
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`595821681c2964b459f90ba1c42e48da`
SHA1	`f917875ff3ec0eecae51110409e760bbb4279589`
SHA256	`b766621493231bca31316b6706bd065ac0f604e74b1273601361602fa30dcde7`
CRC32	`C4F4D978`
ssdeep	`12:CBtlIHFY5FDVrOlag3bviyuT9OQ1zFCr2TUdPKyK:oisDxlg3jiyuT9OIzFCrGw7K`
Yara	None matched
VirusTotal	Search for analysis

Name	0463ad6297e656bb_qhver.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\QHVer.dll
Size	15.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`63a88250295528135e6ee41b0cbc255f`
SHA1	`15f146685c055360346e47e892f96238e6173489`
SHA256	`0463ad6297e656bbb54e5d0708563fd535019c79bc0520d727a9f8141e519d90`
CRC32	`43A5071D`
ssdeep	`192:QNA+I6kSDnicM+3Ps6iiXqFfL/CPjxnkbtBS+Shj2DWl6I4/C+Q3I7VkT:ORI6ki2cP0iwfLiJkfS+ShjmM6IGBkSq`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	de1d0fa92911957a_wd.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\wd.ini
Size	8.3KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`a134096bc6f63448b64cf48c6463b141`
SHA1	`7b4ef26f68ba2cd35365c4a158fc842445ce0874`
SHA256	`de1d0fa92911957aeb41a68403b53e96d2b8294a4bc6c3daca4cc2876fac1d8b`
CRC32	`CA304056`
ssdeep	`96:ra9kZ7sqnvJDgTBiYK/y2lVlujNqWIajWwapG4Bj8n5d6WSbJ1J9Wa5sFWbmc:29+DgRgiz0G4Bj8n5eWfFWT`
Yara	None matched
VirusTotal	Search for analysis

Name	d1ad01c9b9683a9f_360webshield.exe.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\de\safemon\chrome\360webshield.exe.locale
Size	19.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`cdef616333132e2765ad18a6def0f1fb`
SHA1	`08ad38ff7a0bc96439039ebb8c49d9f6ef0b66e0`
SHA256	`d1ad01c9b9683a9f5cc462b0931ed04557b3451106d0b0f405aa9234cb0a01eb`
CRC32	`776FF92B`
ssdeep	`384:7O5yNeR3K+h1MeK6jvduRDGPhC7kov05MQ3:y5yg9K0MeKgFuRDGXo`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	4e3cf28ef3ce5b80_dumpuper.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\DumpUper.ini
Size	255.0B
Processes	3780 (360TS_Setup.exe)
Type	ASCII text, with CRLF line terminators
MD5	`2668ce9c7e8941ea875256edf1a8ab80`
SHA1	`5633587d5840fb2d4caaa583bbb3068bafbeb904`
SHA256	`4e3cf28ef3ce5b806c632f99482560a5246de9f86aafb7a47cdc78e5b4b019a5`
CRC32	`7B9036A9`
ssdeep	`6:+FIx9o4hXAUqGXiKeln6HJqmjCCLDOCI4UKxLyKxOXKxV:+mBQln6VjnOCIjMeMIMV`
Yara	None matched
VirusTotal	Search for analysis

Name	5b2eb60e63475ec2_safemon.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\Safemon.dll.locale
Size	53.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`95c57dbe33c3e281d8fd91b96cb46a94`
SHA1	`cd86dfab366c43653abf575572ad889a63621f2c`
SHA256	`5b2eb60e63475ec2d26ee58108ee356a372308cdb4d021ecd4dc4e8cd7bfee30`
CRC32	`909A0FF7`
ssdeep	`768:1CG11xWF7Lp/El6Eh7lKlI01y+6JW6QtyLBAClf2:cGa7l/8h7IsJWdyLBAg2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	794331c530f22c23_syssweeper.ui.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\lang\de\SysSweeper.ui.dat
Size	102.2KB
Processes	3780 (360TS_Setup.exe)
Type	data
MD5	`98a38dfe627050095890b8ed217aa0c5`
SHA1	`3da96a104940d0ef2862b38e65c64a739327e8f8`
SHA256	`794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13`
CRC32	`5483ED35`
ssdeep	`3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3gomvov:y01ECQTjvJYwTlu4aq`
Yara	None matched
VirusTotal	Search for analysis

Name	bb0d11a1fc1911a8_wdk.ini Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\hi\safemon\wdk.ini
Size	3.0KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
MD5	`37ee17a2196510e7174bf1603bd82a2d`
SHA1	`017ae4073a164e23e3195275dcca5d8c8064397f`
SHA256	`bb0d11a1fc1911a8289258324b0d21e32fa8189d3978540a4324376b52aca7ab`
CRC32	`BC6ED3EB`
ssdeep	`48:rBPtE5/+GcfGx0uMkssYqTAMSQmGPtM4r+xcc/W9nOLsgg6PCabR:r5u5/+mMks5qTp1mNqce9Oof6aabR`
Yara	None matched
VirusTotal	Search for analysis

Name	d90f85007dda5d55_hookport_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\hookport_win10.sys
Size	82.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (native) Intel 80386, for MS Windows
MD5	`d5a83a2de681d02d2a6c4acd35a7663b`
SHA1	`817778b691c4eb3aea0fc813cb9e57e90661ed8c`
SHA256	`d90f85007dda5d5517316d52d4eaa54789234c69e3b244369eace95d9c864fc8`
CRC32	`EC5AB736`
ssdeep	`1536:CKrDDnUe2rg97Nd/itEYfdLdOBGD/AdyOVhrQWUSVQVu69+lNn8eozC983kJ3CV:CIDnkrgVNdzSOBG/AdhVh5WVD9+lN+CE`
Yara	PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	99b744cac9f6063c_cleanprivacy.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\CleanPrivacy.xml
Size	3.4KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, UTF-8 Unicode text, with CRLF line terminators
MD5	`ca393afd2ed50e3200a31d42dc3adbae`
SHA1	`f94f851ea8cfbc30df2a5b0a0d0b3982c4153d7a`
SHA256	`99b744cac9f6063c298afa597b46d15f73678c77e45921a4b1733e3eeff92ff0`
CRC32	`918FF02A`
ssdeep	`48:cUOQ7Tm3MDmTpnsSTtxLbToTY+Txgaa0+61VK5VVOJfiQo96Ver8bsKE6WTtsQ5R:Ssok+r3Kmrm15b4Px8ROz`
Yara	None matched
VirusTotal	Search for analysis

Name	e60ebfc7c03fab3f_avengine.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\AVE\AVEngine.dll
Size	1.3MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`ac9768394cb1b6b46f3c91624eebbbe6`
SHA1	`c86a89ddacf687157d4234e5ec3e00fd176c0176`
SHA256	`e60ebfc7c03fab3f2d6ba085beaa321b30c6b53681044fbdbdbbac126ed62d2f`
CRC32	`8CC9E760`
ssdeep	`24576:3+8mSuiCeZsmWYSDJ/3Mn2Z3z52WN6T2Sur26IRI:DEBDJ/V3oa0G`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	191ef546d4b2e8a9_360disproc64_win10.sys Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360disproc64_win10.sys
Size	90.7KB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (native) x86-64, for MS Windows
MD5	`0d4aa9a56f354a8a41c5c8e9829b72b4`
SHA1	`5fc2536ae29d7c2a5e00402aa1b496d55bbdc69d`
SHA256	`191ef546d4b2e8a90c9fd41cbeb3764ee98bdf07db8232ac8c3081bc030c7953`
CRC32	`3105C8B3`
ssdeep	`1536:9C/b7GDfCEBFnynVyQKjbEUB92tGtt2ApZb9gSz/xe3oseMob:9C2jrPygQKjbE62tGtt2Qt9wBeMw`
Yara	IsPE64 - (no description) PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file
VirusTotal	Search for analysis

Name	b0478cc2b7a533c8_55iw3repmqobsopvqqpqe5nj.bat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\1000031001\55iW3rEpmqoBsopVqqpqe5NJ.bat
Size	70.0B
Processes	1872 (jsc.exe)
Type	ASCII text, with no line terminators
MD5	`7dabbf7f4ba3096ff280f5a9c6d5eac9`
SHA1	`cf13faac6e930d6264e230d3b9ffe960e46bca51`
SHA256	`b0478cc2b7a533c8af2ac69f078393c78610ef78d9dee6ed9e2ad92ba74269b3`
CRC32	`F62F23E4`
ssdeep	`3:Ljn9m1mWxpcL4E2J5sazdec1vdmUln:fE1mQpcLJ23sOec1ca`
Yara	None matched
VirusTotal	Search for analysis

Name	f937173230148139_appd.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-TW\ipc\appd.dll.locale
Size	23.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`c79048112b6a805b9b86e4360145d9c9`
SHA1	`6123ab23b32432a2df171e96fb46d631e672f0a8`
SHA256	`f937173230148139ac666bc4af3faf663ff5ebc767832ba9b8c1b678808e1b34`
CRC32	`26B77FA8`
ssdeep	`384:78hyvFalLuceR3KJ1Mn8E9VFK4iWNEbvq6DGPhCIsKFKjqfvGBkSnPb:wMvFalLI9KvM8EATS6DGfsKFKcMk4Pb`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	45a9d2180bc3a6c5_360fastfind.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\sweeper\360FastFind.dll
Size	226.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`05a04412b0a86f848eb92a97e81f3821`
SHA1	`a6495836bb9915eec2c559077a44861d2c5c8182`
SHA256	`45a9d2180bc3a6c5716a5ccbf74b14d9e91fa706449aae4046c0835cc672f5e5`
CRC32	`CB6E4AAB`
ssdeep	`3072:kcUTb3+ZC842kctXc35QMKwnESS7nNKlPQLM/8aLhqI6eNWHMtEQKOKxn5rnONc:Gb3kZk2XI5QMx6MZ/8atq5eAsiPbxD`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	93ae225b437cfb70_nptswp.dll.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\fr\safemon\webprotection_firefox\plugins\nptswp.dll.locale
Size	17.1KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`8bba93db83f11291c3f6ced45a68739c`
SHA1	`0a9f67e6341c65c02e629960014df57d3e92bda5`
SHA256	`93ae225b437cfb70f8a5607c039ec1bb6d38ef9fd31a5d81abc16699a471b34a`
CRC32	`F1E7714F`
ssdeep	`384:772criFLI7nOSeMUYjqjQF5j5JNNzFwhhiM:n2Wa0w2hFX3wh`
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	791e9325ab64da4c_ipcservice.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\ipc\ipcService.dll
Size	653.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`664505f73901aeda1d2bb028093f1790`
SHA1	`4be4213fa3e2e8257cbb7e2410d937f74b4c8fa6`
SHA256	`791e9325ab64da4cfd8542bee9478846f90390efce704225fea85e00752a68f0`
CRC32	`C5081449`
ssdeep	`12288:YrxBCxjZfGoCorP9gUR6BZPuU+zThOgP7CpRUHV7r7VYdvw4NOixbgT/+o9T6P8A:YFBO1fGonEah57CcQCeOixbc/D9T6P8A`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	a38cdecd4cd697d5_scanstub.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\scanstub.dll
Size	182.6KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`2b7bebdfb41f8bc3bdf7bb9eb2280f77`
SHA1	`87ca326ade01c5114d3fe7eebe524275f3631a1a`
SHA256	`a38cdecd4cd697d55658fec8f0d1680d54c32c6941d9707f3d3fe31a433adffa`
CRC32	`8427F398`
ssdeep	`3072:7h20E0JBZIBwcBjLIP1AKHiJQs6TWvJa3hQYkHaq0jSgM5nt0X9R2:Y0E0qFlLiCK3HTWvJcQHaqRgWaX9R2`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	609ef2b560381e83_y37xv0sxqwdfm3jcy26afuzj.exe Submit file
Filepath	C:\Users\test22\Documents\SimpleAdobe\y37xv0SXqWdFM3jcY26AfUzJ.exe
Size	421.0KB
Processes	3052 (mpVxwmaUWkvooa27wKUZd6Do.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`1fc71d8e8cb831924bdc7f36a9df1741`
SHA1	`8b1023a5314ad55d221e10fe13c3d2ec93506a6c`
SHA256	`609ef2b560381e8385a71a4a961afc94a1e1d19352414a591cd05217e9314625`
CRC32	`E45AB23A`
ssdeep	`12288:dNs70wrxwDBwTGvwDYwC9woS/Cw4AvcqOh2Q0fPbU3FM1jJS:D20wrxwDBwTGvwDYwYwoS/Cw4/qVQWbr`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	764c78c45288fef3_duplicatefilecfg.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\Utils\DuplicateFileCfg.xml
Size	7.2KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
MD5	`dd9085d733f8407392da834ee46ac65e`
SHA1	`ef51fe0b7cb672d2eb85891f929a40616b5ea618`
SHA256	`764c78c45288fef3c36029a0e7e84c2f23a9beee3d75f058918939539d819bf9`
CRC32	`CE9C0E9D`
ssdeep	`96:tJNalgg5rp8UsN1PLt8ydzdLG7fgUlQoEOCoT9bsEXQzt/t40fXPkIq/NoW/7K6v:LN4gg5rgnP2ydzNafzEOVqBffkIqSKp`
Yara	Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	c4b60c2075bcdb5e_360safecamera.tpi.locale Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\pt\safemon\360SafeCamera.tpi.locale
Size	1.8KB
Processes	3780 (360TS_Setup.exe)
Type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`254b81c69801108377d0fcd2138b38e0`
SHA1	`cbf93737825091989395ea035b65343373a1eeeb`
SHA256	`c4b60c2075bcdb5e1e436b1ef8aa3b430ecbd3d215c399d133e8d9e31e3611cc`
CRC32	`B62AD350`
ssdeep	`48:r+uNjDNZDrDwNtbTnD3sfBDFsfbJUvBDBtKYlvHY48iIDf:r3NHnfwNJTD3iFFibmvFBtKi/KiMf`
Yara	None matched
VirusTotal	Search for analysis

Name	3097ccc783d5fe2a_360scovec64.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\safemon\360scovec64.dll
Size	1.1MB
Processes	3780 (360TS_Setup.exe)
Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5	`38e0d360f363d5265d9b1ce48fa4cbec`
SHA1	`a38ec88bcb8202cbc30d15dfd24187ac230d44a6`
SHA256	`3097ccc783d5fe2af87fb24a49d614c251fb708cc5f45a9f486adb67a92b5759`
CRC32	`D7BC02F1`
ssdeep	`24576:ydLT/dI2K1AKPRwr6b/IP/Ke5hsLO9Y36Z0D2VAvC94f3GZNwdddme/qLp3DBQmG:ydLT/dI2K1AKJwr6b/I3Kej4fbYTLppW`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f0db97d434b56eca_libaw.dat Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\i18n\zh-CN\libaw.dat
Size	1022.0KB
Processes	3780 (360TS_Setup.exe)
Type	SQLite 3.x database, last written using SQLite version 3007004
MD5	`562c352762be3fd61f555c31bb2436d5`
SHA1	`ca841d9fd4547c274275a2684fec535a16ddb7bf`
SHA256	`f0db97d434b56eca598735a5817264b299020cf87e639c41a7b04fc6da5d7470`
CRC32	`A33C8F57`
ssdeep	`24576:kMYC1Y3/1UI43ITQjnOgy4gMFbaB8B3puYhvcs:9AN1437jnvXNz`
Yara	None matched
VirusTotal	Search for analysis

Name	83c7cf0c71f9e2f7_theme.xml Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\theme.xml
Size	273.0KB
Processes	3780 (360TS_Setup.exe)
Type	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	`5f2fbfb033881b7279acf85de2b0a85c`
SHA1	`a7c5604c8599bda67e670159bfc3b767fdad73f5`
SHA256	`83c7cf0c71f9e2f7c32fca19e17cf8b069fb03e4335466c352943212f9ec6dad`
CRC32	`8AFEB269`
ssdeep	`384:1tZ1cAQcB6C9De7PBE1BIjE5sf6HX8/6KWmNloOrNsq4Kp4txEk88288E+engSLZ:1L1ZQgxKBE75sf6ooOrkEu+e2Er5`
Yara	None matched
VirusTotal	Search for analysis

Name	c290b029cb8e53c9_antice.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\AntiCe.dll
Size	232.5KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9d328d343a99de9df44d6a5541785e55`
SHA1	`de3f44bef3832a4489e5dc97e1a592f127306890`
SHA256	`c290b029cb8e53c970fb7ab36fa70109e362793fde1a6ebd3e2f61583ec628b2`
CRC32	`DED1F698`
ssdeep	`3072:FBrwvNZUMVE6RcxN8guMiQWXkgEzsyRpKhIJmL+gQ4FcS65qkooooyx8hAJFu:FBwvDRSNOHkgSsyRwOJG9Fcyq`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE32 - (no description) Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis

Name	65734ff419262395_dailynews_theme.ui Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\config\newui\themes\default\DailyNews\DailyNews_theme.ui
Size	127.8KB
Processes	3780 (360TS_Setup.exe)
Type	Zip archive data, at least v1.0 to extract
MD5	`a1bee30e519cffce257f6e721b38b2f3`
SHA1	`139802addd9cf3c03f3e480ac4ee77ac724599ca`
SHA256	`65734ff4192623951e51fe04837df98dee93e862b7b4b644ddbffeb9141e05da`
CRC32	`51271A67`
ssdeep	`1536:U0m8+zE/h+bo7S9J5egE4DejATs+lKIHiz+ec6P:U0m8+zTo4lE44A4AiqV6P`
Yara	zip_file_format - ZIP file format
VirusTotal	Search for analysis

Name	6b4e5d939258dec7_dssysrepair.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\DsSysRepair.dll
Size	463.0KB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`f1a65810ea2df9e3c5c679f621ad7a57`
SHA1	`72d2bf3479d568459bce16f25725652019f7b9be`
SHA256	`6b4e5d939258dec73f9d05be29f94a569dac58476a516a3afa3cf4fa6595fed0`
CRC32	`1AEADDCB`
ssdeep	`12288:oQvRX7kTciZCLIVNX2ANQ1lvTBN92Bd4o9TteyK2tp:oQ5r2NXxaF92Bd19Ttectp`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) Malicious_Packer_Zero - Malicious Packer IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis

Name	f0029a69542b8cc0_deepscan.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\360_install_20240531131406_20592046\temp_files\deepscan\deepscan.dll
Size	2.9MB
Processes	3780 (360TS_Setup.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`1c24736aa5a744b2a2c1f3a2e7a79610`
SHA1	`9a967f60070c0d1457df04f0f8ef0a63ac2f0edd`
SHA256	`f0029a69542b8cc0d28f84d14821723b00dc4b2895a68918fca8b3483f03ba30`
CRC32	`67D21AB7`
ssdeep	`49152:MP94CXKbyu7KA6XqrhsoA6mWpRUkDbiqrKzV7nYw7MPxViM:MPtKbz2A6XQsoANWpNCg`
Yara	PhysicalDrive_20181001 - (no description) HermeticWiper_Zero - HermeticWiper Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsDLL - (no description) DllRegisterServer_Zero - execute regsvr32.exe Malicious_Packer_Zero - Malicious Packer Antivirus - Contains references to security software IsPE32 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check
VirusTotal	Search for analysis