15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

General Info
URL:

https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe

Full analysis:

https://app.any.run/tasks/e7b659fd-56fb-4863-b85e-aa0aac549b23
Malicious activity

Verdict:
Analysis date:June 10, 2024 at 09:38:19

OS:

Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)Indicators:
MD5:069670C93F460AB45BB9EC089DD508D7

SHA1:

0B039E37FF8DCB2C00CDA4BDD775CB80C1601D6B

SHA256:

E324510081EA2B0B9E63520874983E3EB2EE1055FC2B00B41093FF1480D5F934

SSDEEP:

3:N8SElQw0EIVEjR+XKdpJEpjXLd6Wg5kXr0QaA:2SKHJRhKNXnOekA

Software environment set and analysis options

Launch configuration
Task duration:

Heavy Evasion option: off

Network geolocation:

off

Additional time used: none

60 seconds

MITM proxy:off

Privacy:

Public submission

Fakenet option:

off

Route via Tor:

off

Autoconfirmation of UAC: on

Network:on

Software preset

Hotfixes

Internet Explorer 11.0.9600.19596 KB4534251

Client LanguagePack Package

Adobe Acrobat Reader DC (20.013.20064)

Client LanguagePack Package

Adobe Acrobat Reader DC (20.013.20064)

Client Refresh LanguagePack Package

Adobe Flash Player 32 ActiveX (32.0.0.453)

Client Refresh LanguagePack Package

Adobe Flash Player 32 ActiveX (32.0.0.453)

CodecPack Basic Package

Adobe Flash Player 32 NPAPI (32.0.0.453)

CodecPack Basic Package

Adobe Flash Player 32 NPAPI (32.0.0.453)

Foundation Package

Adobe Flash Player 32 PPAPI (32.0.0.453)

Foundation Package

Adobe Flash Player 32 PPAPI (32.0.0.453)

IE Hyphenation Parent Package English

Adobe Refresh Manager (1.8.0)

IE Hyphenation Parent Package English

Adobe Refresh Manager (1.8.0)

IE Spelling Parent Package English

CCleaner (6.14)

IE Spelling Parent Package English

CCleaner (6.14)

IE Troubleshooters Package

FileZilla 3.65.0 (3.65.0)

IE Troubleshooters Package

FileZilla 3.65.0 (3.65.0)

IE Troubleshooters Package

Google Chrome (109.0.5414.120)

IE Troubleshooters Package

Google Chrome (109.0.5414.120)

InternetExplorer Optional Package

Google Update Helper (1.3.36.31)

InternetExplorer Optional Package

Google Update Helper (1.3.36.31)

InternetExplorer Optional Package

Java 8 Update 271 (8.0.2710.9)

InternetExplorer Optional Package

Java 8 Update 271 (8.0.2710.9)

InternetExplorer Package TopLevel

Java Auto Updater (2.8.271.9)

InternetExplorer Package TopLevel

Java Auto Updater (2.8.271.9)

KB2479943

Microsoft .NET Framework 4.8 (4.8.03761)

KB2479943

Microsoft .NET Framework 4.8 (4.8.03761)

KB2491683

Microsoft .NET Framework 4.8 (4.8.03761)

KB2491683

Microsoft .NET Framework 4.8 (4.8.03761)

KB2506212

Microsoft Edge (109.0.1518.115)

KB2506212

Microsoft Edge (109.0.1518.115)

KB2506928

Microsoft Edge Update (1.3.175.29)

KB2506928

Microsoft Edge Update (1.3.175.29)

KB2532531

Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)

KB2532531

Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)

KB2533552

Microsoft Office Access MUI (French) 2010 (14.0.4763.1000)

KB2533552

Microsoft Office Access MUI (French) 2010 (14.0.4763.1000)

KB2533623

Microsoft Office Access MUI (German) 2010 (14.0.4763.1000)

KB2533623

Microsoft Office Access MUI (German) 2010 (14.0.4763.1000)

KB2534111

Microsoft Office Access MUI (Italian) 2010 (14.0.4763.1000)

KB2534111

Microsoft Office Access MUI (Italian) 2010 (14.0.4763.1000)

KB2545698

Microsoft Office Access MUI (Japanese) 2010 (14.0.4763.1000)

KB2545698

Microsoft Office Access MUI (Japanese) 2010 (14.0.4763.1000)

KB2547666

Microsoft Office Access MUI (Korean) 2010 (14.0.4763.1000)

KB2547666

Microsoft Office Access MUI (Korean) 2010 (14.0.4763.1000)

KB2552343

Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2552343

Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2560656

Microsoft Office Access MUI (Russian) 2010 (14.0.4763.1000)

KB2560656

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

1/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Microsoft Office Access MUI (Russian) 2010 (14.0.4763.1000)

KB2564958

Microsoft Office Access MUI (Spanish) 2010 (14.0.4763.1000)

KB2564958

Microsoft Office Access MUI (Spanish) 2010 (14.0.4763.1000)

KB2574819

Microsoft Office Access MUI (Turkish) 2010 (14.0.4763.1013)

KB2574819

Microsoft Office Access MUI (Turkish) 2010 (14.0.4763.1013)

KB2579686

Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)

KB2579686

Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)

KB2585542

Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)

KB2585542

Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)

KB2604115

Microsoft Office Excel MUI (French) 2010 (14.0.4763.1000)

KB2604115

Microsoft Office Excel MUI (French) 2010 (14.0.4763.1000)

KB2620704

Microsoft Office Excel MUI (German) 2010 (14.0.4763.1000)

KB2620704

Microsoft Office Excel MUI (German) 2010 (14.0.4763.1000)

KB2621440

Microsoft Office Excel MUI (Italian) 2010 (14.0.4763.1000)

KB2621440

Microsoft Office Excel MUI (Italian) 2010 (14.0.4763.1000)

KB2631813

Microsoft Office Excel MUI (Japanese) 2010 (14.0.4763.1000)

KB2631813

Microsoft Office Excel MUI (Japanese) 2010 (14.0.4763.1000)

KB2639308

Microsoft Office Excel MUI (Korean) 2010 (14.0.4763.1000)

KB2639308

Microsoft Office Excel MUI (Korean) 2010 (14.0.4763.1000)

KB2640148

Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2640148

Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2653956

Microsoft Office Excel MUI (Russian) 2010 (14.0.4763.1000)

KB2653956

Microsoft Office Excel MUI (Russian) 2010 (14.0.4763.1000)

KB2654428

Microsoft Office Excel MUI (Spanish) 2010 (14.0.4763.1000)

KB2654428

Microsoft Office Excel MUI (Spanish) 2010 (14.0.4763.1000)

KB2656356

Microsoft Office Excel MUI (Turkish) 2010 (14.0.4763.1013)

KB2656356

Microsoft Office Excel MUI (Turkish) 2010 (14.0.4763.1013)

KB2660075

Microsoft Office Groove MUI (French) 2010 (14.0.4763.1000)

KB2660075

Microsoft Office Groove MUI (French) 2010 (14.0.4763.1000)

KB2667402

Microsoft Office Groove MUI (German) 2010 (14.0.4763.1000)

KB2667402

Microsoft Office Groove MUI (German) 2010 (14.0.4763.1000)

KB2676562

Microsoft Office Groove MUI (Italian) 2010 (14.0.4763.1000)

KB2676562

Microsoft Office Groove MUI (Italian) 2010 (14.0.4763.1000)

KB2685811

Microsoft Office Groove MUI (Japanese) 2010 (14.0.4763.1000)

KB2685811

Microsoft Office Groove MUI (Japanese) 2010 (14.0.4763.1000)

KB2685813

Microsoft Office Groove MUI (Korean) 2010 (14.0.4763.1000)

KB2685813

Microsoft Office Groove MUI (Korean) 2010 (14.0.4763.1000)

KB2685939

Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2685939

Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2690533

Microsoft Office Groove MUI (Russian) 2010 (14.0.4763.1000)

KB2690533

Microsoft Office Groove MUI (Russian) 2010 (14.0.4763.1000)

KB2698365

Microsoft Office Groove MUI (Spanish) 2010 (14.0.4763.1000)

KB2698365

Microsoft Office Groove MUI (Spanish) 2010 (14.0.4763.1000)

KB2705219

Microsoft Office Groove MUI (Turkish) 2010 (14.0.4763.1013)

KB2705219

Microsoft Office Groove MUI (Turkish) 2010 (14.0.4763.1013)

KB2719857

Microsoft Office IME (Japanese) 2010 (14.0.4763.1000)

KB2719857

Microsoft Office IME (Japanese) 2010 (14.0.4763.1000)

KB2726535

Microsoft Office IME (Korean) 2010 (14.0.4763.1000)

KB2726535

Microsoft Office IME (Korean) 2010 (14.0.4763.1000)

KB2727528

Microsoft Office InfoPath MUI (French) 2010 (14.0.4763.1000)

KB2727528

Microsoft Office InfoPath MUI (French) 2010 (14.0.4763.1000)

KB2729094

Microsoft Office InfoPath MUI (German) 2010 (14.0.4763.1000)

KB2729094

Microsoft Office InfoPath MUI (German) 2010 (14.0.4763.1000)

KB2729452

Microsoft Office InfoPath MUI (Italian) 2010 (14.0.4763.1000)

KB2729452

Microsoft Office InfoPath MUI (Italian) 2010 (14.0.4763.1000)

KB2731771

Microsoft Office InfoPath MUI (Japanese) 2010 (14.0.4763.1000)

KB2731771

Microsoft Office InfoPath MUI (Japanese) 2010 (14.0.4763.1000)

KB2732059

Microsoft Office InfoPath MUI (Korean) 2010 (14.0.4763.1000)

KB2732059

Microsoft Office InfoPath MUI (Korean) 2010 (14.0.4763.1000)

KB2736422

Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2736422

Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2742599

Microsoft Office InfoPath MUI (Russian) 2010 (14.0.4763.1000)

KB2742599

Microsoft Office InfoPath MUI (Russian) 2010 (14.0.4763.1000)

KB2750841

Microsoft Office InfoPath MUI (Spanish) 2010 (14.0.4763.1000)

KB2750841

Microsoft Office InfoPath MUI (Spanish) 2010 (14.0.4763.1000)

KB2758857

Microsoft Office InfoPath MUI (Turkish) 2010 (14.0.4763.1013)

KB2758857

Microsoft Office InfoPath MUI (Turkish) 2010 (14.0.4763.1013)

KB2761217

Microsoft Office Language Pack 2010 - French/Français (14.0.4763.1000)

KB2761217

Microsoft Office Language Pack 2010 - French/Français (14.0.4763.1000)

KB2770660

Microsoft Office Language Pack 2010 - German/Deutsch (14.0.4763.1000)

KB2770660

Microsoft Office Language Pack 2010 - German/Deutsch (14.0.4763.1000)

KB2773072

Microsoft Office Language Pack 2010 - Italian/Italiano (14.0.4763.1000)

KB2773072

Microsoft Office Language Pack 2010 - Italian/Italiano (14.0.4763.1000)

KB2786081

Microsoft Office Language Pack 2010 - Japanese/日本語 (14.0.4763.1000)

KB2786081

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

2/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Microsoft Office Language Pack 2010 - Japanese/日本語 (14.0.4763.1000)

KB2789645

Microsoft Office Language Pack 2010 - Korean/한국어 (14.0.4763.1000)

KB2789645

Microsoft Office Language Pack 2010 - Korean/한국어 (14.0.4763.1000)

KB2799926

Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (14.0.4763.1000)

KB2799926

Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (14.0.4763.1000)

KB2800095

Microsoft Office Language Pack 2010 - Russian/русский (14.0.4763.1000)

KB2800095

Microsoft Office Language Pack 2010 - Russian/русский (14.0.4763.1000)

KB2807986

Microsoft Office Language Pack 2010 - Spanish/Español (14.0.4763.1000)

KB2807986

Microsoft Office Language Pack 2010 - Spanish/Español (14.0.4763.1000)

KB2808679

Microsoft Office Language Pack 2010 - Turkish/Türkçe (14.0.4763.1013)

KB2808679

Microsoft Office Language Pack 2010 - Turkish/Türkçe (14.0.4763.1013)

KB2813347

Microsoft Office O MUI (French) 2010 (14.0.4763.1000)

KB2813347

Microsoft Office O MUI (French) 2010 (14.0.4763.1000)

KB2813430

Microsoft Office O MUI (German) 2010 (14.0.4763.1000)

KB2813430

Microsoft Office O MUI (German) 2010 (14.0.4763.1000)

KB2820331

Microsoft Office O MUI (Italian) 2010 (14.0.4763.1000)

KB2820331

Microsoft Office O MUI (Italian) 2010 (14.0.4763.1000)

KB2834140

Microsoft Office O MUI (Japanese) 2010 (14.0.4763.1000)

KB2834140

Microsoft Office O MUI (Japanese) 2010 (14.0.4763.1000)

KB2836942

Microsoft Office O MUI (Korean) 2010 (14.0.4763.1000)

KB2836942

Microsoft Office O MUI (Korean) 2010 (14.0.4763.1000)

KB2836943

Microsoft Office O MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2836943

Microsoft Office O MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2840631

Microsoft Office O MUI (Russian) 2010 (14.0.4763.1000)

KB2840631

Microsoft Office O MUI (Russian) 2010 (14.0.4763.1000)

KB2843630

Microsoft Office O MUI (Spanish) 2010 (14.0.4763.1000)

KB2843630

Microsoft Office O MUI (Spanish) 2010 (14.0.4763.1000)

KB2847927

Microsoft Office O MUI (Turkish) 2010 (14.0.4763.1013)

KB2847927

Microsoft Office O MUI (Turkish) 2010 (14.0.4763.1013)

KB2852386

Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)

KB2852386

Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)

KB2853952

Microsoft Office OneNote MUI (French) 2010 (14.0.4763.1000)

KB2853952

Microsoft Office OneNote MUI (French) 2010 (14.0.4763.1000)

KB2857650

Microsoft Office OneNote MUI (German) 2010 (14.0.4763.1000)

KB2857650

Microsoft Office OneNote MUI (German) 2010 (14.0.4763.1000)

KB2861698

Microsoft Office OneNote MUI (Italian) 2010 (14.0.4763.1000)

KB2861698

Microsoft Office OneNote MUI (Italian) 2010 (14.0.4763.1000)

KB2862152

Microsoft Office OneNote MUI (Japanese) 2010 (14.0.4763.1000)

KB2862152

Microsoft Office OneNote MUI (Japanese) 2010 (14.0.4763.1000)

KB2862330

Microsoft Office OneNote MUI (Korean) 2010 (14.0.4763.1000)

KB2862330

Microsoft Office OneNote MUI (Korean) 2010 (14.0.4763.1000)

KB2862335

Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2862335

Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2864202

Microsoft Office OneNote MUI (Russian) 2010 (14.0.4763.1000)

KB2864202

Microsoft Office OneNote MUI (Russian) 2010 (14.0.4763.1000)

KB2868038

Microsoft Office OneNote MUI (Spanish) 2010 (14.0.4763.1000)

KB2868038

Microsoft Office OneNote MUI (Spanish) 2010 (14.0.4763.1000)

KB2871997

Microsoft Office OneNote MUI (Turkish) 2010 (14.0.4763.1013)

KB2871997

Microsoft Office OneNote MUI (Turkish) 2010 (14.0.4763.1013)

KB2872035

Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)

KB2872035

Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)

KB2884256

Microsoft Office Outlook MUI (French) 2010 (14.0.4763.1000)

KB2884256

Microsoft Office Outlook MUI (French) 2010 (14.0.4763.1000)

KB2891804

Microsoft Office Outlook MUI (German) 2010 (14.0.4763.1000)

KB2891804

Microsoft Office Outlook MUI (German) 2010 (14.0.4763.1000)

KB2893294

Microsoft Office Outlook MUI (Italian) 2010 (14.0.4763.1000)

KB2893294

Microsoft Office Outlook MUI (Italian) 2010 (14.0.4763.1000)

KB2893519

Microsoft Office Outlook MUI (Japanese) 2010 (14.0.4763.1000)

KB2893519

Microsoft Office Outlook MUI (Japanese) 2010 (14.0.4763.1000)

KB2894844

Microsoft Office Outlook MUI (Korean) 2010 (14.0.4763.1000)

KB2894844

Microsoft Office Outlook MUI (Korean) 2010 (14.0.4763.1000)

KB2900986

Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2900986

Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2908783

Microsoft Office Outlook MUI (Russian) 2010 (14.0.4763.1000)

KB2908783

Microsoft Office Outlook MUI (Russian) 2010 (14.0.4763.1000)

KB2911501

Microsoft Office Outlook MUI (Spanish) 2010 (14.0.4763.1000)

KB2911501

Microsoft Office Outlook MUI (Spanish) 2010 (14.0.4763.1000)

KB2912390

Microsoft Office Outlook MUI (Turkish) 2010 (14.0.4763.1013)

KB2912390

Microsoft Office Outlook MUI (Turkish) 2010 (14.0.4763.1013)

KB2918077

Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)

KB2918077

Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)

KB2919469

Microsoft Office PowerPoint MUI (French) 2010 (14.0.4763.1000)

KB2919469

Microsoft Office PowerPoint MUI (French) 2010 (14.0.4763.1000)

KB2923545

Microsoft Office PowerPoint MUI (German) 2010 (14.0.4763.1000)

KB2923545

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

3/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Microsoft Office PowerPoint MUI (German) 2010 (14.0.4763.1000)

KB2931356

Microsoft Office PowerPoint MUI (Italian) 2010 (14.0.4763.1000)

KB2931356

Microsoft Office PowerPoint MUI (Italian) 2010 (14.0.4763.1000)

KB2937610

Microsoft Office PowerPoint MUI (Japanese) 2010 (14.0.4763.1000)

KB2937610

Microsoft Office PowerPoint MUI (Japanese) 2010 (14.0.4763.1000)

KB2943357

Microsoft Office PowerPoint MUI (Korean) 2010 (14.0.4763.1000)

KB2943357

Microsoft Office PowerPoint MUI (Korean) 2010 (14.0.4763.1000)

KB2952664

Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2952664

Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2968294

Microsoft Office PowerPoint MUI (Russian) 2010 (14.0.4763.1000)

KB2968294

Microsoft Office PowerPoint MUI (Russian) 2010 (14.0.4763.1000)

KB2970228

Microsoft Office PowerPoint MUI (Spanish) 2010 (14.0.4763.1000)

KB2970228

Microsoft Office PowerPoint MUI (Spanish) 2010 (14.0.4763.1000)

KB2972100

Microsoft Office PowerPoint MUI (Turkish) 2010 (14.0.4763.1013)

KB2972100

Microsoft Office PowerPoint MUI (Turkish) 2010 (14.0.4763.1013)

KB2972211

Microsoft Office Professional 2010 (14.0.6029.1000)

KB2972211

Microsoft Office Professional 2010 (14.0.6029.1000)

KB2973112

Microsoft Office Proof (Arabic) 2010 (14.0.4763.1000)

KB2973112

Microsoft Office Proof (Arabic) 2010 (14.0.4763.1000)

KB2973201

Microsoft Office Proof (Basque) 2010 (14.0.4763.1000)

KB2973201

Microsoft Office Proof (Basque) 2010 (14.0.4763.1000)

KB2977292

Microsoft Office Proof (Catalan) 2010 (14.0.4763.1000)

KB2977292

Microsoft Office Proof (Catalan) 2010 (14.0.4763.1000)

KB2978120

Microsoft Office Proof (Dutch) 2010 (14.0.4763.1000)

KB2978120

Microsoft Office Proof (Dutch) 2010 (14.0.4763.1000)

KB2978742

Microsoft Office Proof (English) 2010 (14.0.6029.1000)

KB2978742

Microsoft Office Proof (English) 2010 (14.0.6029.1000)

KB2984972

Microsoft Office Proof (French) 2010 (14.0.6029.1000)

KB2984972

Microsoft Office Proof (French) 2010 (14.0.6029.1000)

KB2984976

Microsoft Office Proof (Galician) 2010 (14.0.4763.1000)

KB2984976

Microsoft Office Proof (Galician) 2010 (14.0.4763.1000)

KB2984976 SP1Microsoft Office Proof (German) 2010 (14.0.4763.1000)

KB2984976 SP1Microsoft Office Proof (German) 2010 (14.0.4763.1000)

KB2985461

Microsoft Office Proof (Italian) 2010 (14.0.4763.1000)

KB2985461

Microsoft Office Proof (Italian) 2010 (14.0.4763.1000)

KB2991963

Microsoft Office Proof (Japanese) 2010 (14.0.4763.1000)

KB2991963

Microsoft Office Proof (Japanese) 2010 (14.0.4763.1000)

KB2992611

Microsoft Office Proof (Korean) 2010 (14.0.4763.1000)

KB2992611

Microsoft Office Proof (Korean) 2010 (14.0.4763.1000)

KB2999226

Microsoft Office Proof (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB2999226

Microsoft Office Proof (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3004375

Microsoft Office Proof (Russian) 2010 (14.0.4763.1000)

KB3004375

Microsoft Office Proof (Russian) 2010 (14.0.4763.1000)

KB3006121

Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)

KB3006121

Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)

KB3006137

Microsoft Office Proof (Turkish) 2010 (14.0.4763.1013)

KB3006137

Microsoft Office Proof (Turkish) 2010 (14.0.4763.1013)

KB3010788

Microsoft Office Proof (Ukrainian) 2010 (14.0.4763.1000)

KB3010788

Microsoft Office Proof (Ukrainian) 2010 (14.0.4763.1000)

KB3011780

Microsoft Office Proofing (English) 2010 (14.0.6029.1000)

KB3011780

Microsoft Office Proofing (English) 2010 (14.0.6029.1000)

KB3013531

Microsoft Office Proofing (French) 2010 (14.0.4763.1000)

KB3013531

Microsoft Office Proofing (French) 2010 (14.0.4763.1000)

KB3019978

Microsoft Office Proofing (German) 2010 (14.0.4763.1000)

KB3019978

Microsoft Office Proofing (German) 2010 (14.0.4763.1000)

KB3020370

Microsoft Office Proofing (Italian) 2010 (14.0.4763.1000)

KB3020370

Microsoft Office Proofing (Italian) 2010 (14.0.4763.1000)

KB3020388

Microsoft Office Proofing (Japanese) 2010 (14.0.4763.1000)

KB3020388

Microsoft Office Proofing (Japanese) 2010 (14.0.4763.1000)

KB3021674

Microsoft Office Proofing (Korean) 2010 (14.0.4763.1000)

KB3021674

Microsoft Office Proofing (Korean) 2010 (14.0.4763.1000)

KB3021917

Microsoft Office Proofing (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3021917

Microsoft Office Proofing (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3022777

Microsoft Office Proofing (Russian) 2010 (14.0.4763.1000)

KB3022777

Microsoft Office Proofing (Russian) 2010 (14.0.4763.1000)

KB3023215

Microsoft Office Proofing (Spanish) 2010 (14.0.4763.1000)

KB3023215

Microsoft Office Proofing (Spanish) 2010 (14.0.4763.1000)

KB3030377

Microsoft Office Proofing (Turkish) 2010 (14.0.4763.1013)

KB3030377

Microsoft Office Proofing (Turkish) 2010 (14.0.4763.1013)

KB3031432

Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)

KB3031432

Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)

KB3035126

Microsoft Office Publisher MUI (French) 2010 (14.0.4763.1000)

KB3035126

Microsoft Office Publisher MUI (French) 2010 (14.0.4763.1000)

KB3037574

Microsoft Office Publisher MUI (German) 2010 (14.0.4763.1000)

KB3037574

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

4/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Microsoft Office Publisher MUI (German) 2010 (14.0.4763.1000)

KB3042058

Microsoft Office Publisher MUI (Italian) 2010 (14.0.4763.1000)

KB3042058

Microsoft Office Publisher MUI (Italian) 2010 (14.0.4763.1000)

KB3045685

Microsoft Office Publisher MUI (Japanese) 2010 (14.0.4763.1000)

KB3045685

Microsoft Office Publisher MUI (Japanese) 2010 (14.0.4763.1000)

KB3046017

Microsoft Office Publisher MUI (Korean) 2010 (14.0.4763.1000)

KB3046017

Microsoft Office Publisher MUI (Korean) 2010 (14.0.4763.1000)

KB3046269

Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3046269

Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3054476

Microsoft Office Publisher MUI (Russian) 2010 (14.0.4763.1000)

KB3054476

Microsoft Office Publisher MUI (Russian) 2010 (14.0.4763.1000)

KB3055642

Microsoft Office Publisher MUI (Spanish) 2010 (14.0.4763.1000)

KB3055642

Microsoft Office Publisher MUI (Spanish) 2010 (14.0.4763.1000)

KB3059317

Microsoft Office Publisher MUI (Turkish) 2010 (14.0.4763.1013)

KB3059317

Microsoft Office Publisher MUI (Turkish) 2010 (14.0.4763.1013)

KB3060716

Microsoft Office SharePoint Designer MUI (French) 2010 (14.0.4763.1000)

KB3060716

Microsoft Office SharePoint Designer MUI (French) 2010 (14.0.4763.1000)

KB3061518

Microsoft Office SharePoint Designer MUI (German) 2010 (14.0.4763.1000)

KB3061518

Microsoft Office SharePoint Designer MUI (German) 2010 (14.0.4763.1000)

KB3067903

Microsoft Office SharePoint Designer MUI (Italian) 2010 (14.0.4763.1000)

KB3067903

Microsoft Office SharePoint Designer MUI (Italian) 2010 (14.0.4763.1000)

KB3068708

Microsoft Office SharePoint Designer MUI (Japanese) 2010 (14.0.4763.1000)

KB3068708

Microsoft Office SharePoint Designer MUI (Japanese) 2010 (14.0.4763.1000)

KB3071756

Microsoft Office SharePoint Designer MUI (Korean) 2010 (14.0.4763.1000)

KB3071756

Microsoft Office SharePoint Designer MUI (Korean) 2010 (14.0.4763.1000)

KB3072305

Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3072305

Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3074543

Microsoft Office SharePoint Designer MUI (Russian) 2010 (14.0.4763.1000)

KB3074543

Microsoft Office SharePoint Designer MUI (Russian) 2010 (14.0.4763.1000)

KB3075226

Microsoft Office SharePoint Designer MUI (Spanish) 2010 (14.0.4763.1000)

KB3075226

Microsoft Office SharePoint Designer MUI (Spanish) 2010 (14.0.4763.1000)

KB3078667

Microsoft Office SharePoint Designer MUI (Turkish) 2010 (14.0.4763.1013)

KB3078667

Microsoft Office SharePoint Designer MUI (Turkish) 2010 (14.0.4763.1013)

KB3080149

Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)

KB3080149

Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)

KB3086255

Microsoft Office Shared MUI (French) 2010 (14.0.4763.1000)

KB3086255

Microsoft Office Shared MUI (French) 2010 (14.0.4763.1000)

KB3092601

Microsoft Office Shared MUI (German) 2010 (14.0.4763.1000)

KB3092601

Microsoft Office Shared MUI (German) 2010 (14.0.4763.1000)

KB3093513

Microsoft Office Shared MUI (Italian) 2010 (14.0.4763.1000)

KB3093513

Microsoft Office Shared MUI (Italian) 2010 (14.0.4763.1000)

KB3097989

Microsoft Office Shared MUI (Japanese) 2010 (14.0.4763.1000)

KB3097989

Microsoft Office Shared MUI (Japanese) 2010 (14.0.4763.1000)

KB3101722

Microsoft Office Shared MUI (Korean) 2010 (14.0.4763.1000)

KB3101722

Microsoft Office Shared MUI (Korean) 2010 (14.0.4763.1000)

KB3102429

Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3102429

Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3102810

Microsoft Office Shared MUI (Russian) 2010 (14.0.4763.1000)

KB3102810

Microsoft Office Shared MUI (Russian) 2010 (14.0.4763.1000)

KB3107998

Microsoft Office Shared MUI (Spanish) 2010 (14.0.4763.1000)

KB3107998

Microsoft Office Shared MUI (Spanish) 2010 (14.0.4763.1000)

KB3108371

Microsoft Office Shared MUI (Turkish) 2010 (14.0.4763.1013)

KB3108371

Microsoft Office Shared MUI (Turkish) 2010 (14.0.4763.1013)

KB3108664

Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)

KB3108664

Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)

KB3109103

Microsoft Office Single Image 2010 (14.0.6029.1000)

KB3109103

Microsoft Office Single Image 2010 (14.0.6029.1000)

KB3109560

Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)

KB3109560

Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)

KB3110329

Microsoft Office Word MUI (French) 2010 (14.0.4763.1000)

KB3110329

Microsoft Office Word MUI (French) 2010 (14.0.4763.1000)

KB3115858

Microsoft Office Word MUI (German) 2010 (14.0.4763.1000)

KB3115858

Microsoft Office Word MUI (German) 2010 (14.0.4763.1000)

KB3118401

Microsoft Office Word MUI (Italian) 2010 (14.0.4763.1000)

KB3118401

Microsoft Office Word MUI (Italian) 2010 (14.0.4763.1000)

KB3122648

Microsoft Office Word MUI (Japanese) 2010 (14.0.4763.1000)

KB3122648

Microsoft Office Word MUI (Japanese) 2010 (14.0.4763.1000)

KB3123479

Microsoft Office Word MUI (Korean) 2010 (14.0.4763.1000)

KB3123479

Microsoft Office Word MUI (Korean) 2010 (14.0.4763.1000)

KB3126587

Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3126587

Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3127220

Microsoft Office Word MUI (Russian) 2010 (14.0.4763.1000)

KB3127220

Microsoft Office Word MUI (Russian) 2010 (14.0.4763.1000)

KB3133977

Microsoft Office Word MUI (Spanish) 2010 (14.0.4763.1000)

KB3133977

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

5/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Microsoft Office Word MUI (Spanish) 2010 (14.0.4763.1000)

KB3137061

Microsoft Office Word MUI (Turkish) 2010 (14.0.4763.1013)

KB3137061

Microsoft Office Word MUI (Turkish) 2010 (14.0.4763.1013)

KB3138378

Microsoft Office X MUI (French) 2010 (14.0.4763.1000)

KB3138378

Microsoft Office X MUI (French) 2010 (14.0.4763.1000)

KB3138612

Microsoft Office X MUI (German) 2010 (14.0.4763.1000)

KB3138612

Microsoft Office X MUI (German) 2010 (14.0.4763.1000)

KB3138910

Microsoft Office X MUI (Italian) 2010 (14.0.4763.1000)

KB3138910

Microsoft Office X MUI (Italian) 2010 (14.0.4763.1000)

KB3139398

Microsoft Office X MUI (Japanese) 2010 (14.0.4763.1000)

KB3139398

Microsoft Office X MUI (Japanese) 2010 (14.0.4763.1000)

KB3139914

Microsoft Office X MUI (Korean) 2010 (14.0.4763.1000)

KB3139914

Microsoft Office X MUI (Korean) 2010 (14.0.4763.1000)

KB3140245

Microsoft Office X MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3140245

Microsoft Office X MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)

KB3147071

Microsoft Office X MUI (Russian) 2010 (14.0.4763.1000)

KB3147071

Microsoft Office X MUI (Russian) 2010 (14.0.4763.1000)

KB3150220

Microsoft Office X MUI (Spanish) 2010 (14.0.4763.1000)

KB3150220

Microsoft Office X MUI (Spanish) 2010 (14.0.4763.1000)

KB3150513

Microsoft Office X MUI (Turkish) 2010 (14.0.4763.1013)

KB3150513

Microsoft Office X MUI (Turkish) 2010 (14.0.4763.1013)

KB3155178

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)

KB3155178

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)

KB3156016

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)

KB3156016

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)

KB3159398

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)

KB3159398

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)

KB3161102

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)

KB3161102

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)

KB3161949

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)

KB3161949

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)

KB3170735

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (14.36.32532.0)

KB3170735

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (14.36.32532.0)

KB3172605

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (14.36.32532)

KB3172605

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (14.36.32532)

KB3179573

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (14.36.32532)

KB3179573

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (14.36.32532)

KB3184143

Mozilla Firefox (x86 en-US) (115.0.2)

KB3184143

Mozilla Firefox (x86 en-US) (115.0.2)

KB3185319

Mozilla Maintenance Service (115.0.2)

KB3185319

Mozilla Maintenance Service (115.0.2)

KB4019990

Notepad++ (32-bit x86) (7.9.1)

KB4019990

Notepad++ (32-bit x86) (7.9.1)

KB4040980

PowerShell 7-x86 (7.2.11.0)

KB4040980

PowerShell 7-x86 (7.2.11.0)

KB4474419

Skype version 8.110 (8.110)

KB4474419

Skype version 8.110 (8.110)

KB4490628

Update for Microsoft .NET Framework 4.8 (KB4503575) (1)

KB4490628

Update for Microsoft .NET Framework 4.8 (KB4503575) (1)

KB4524752

VLC media player (3.0.11)

KB4524752

VLC media player (3.0.11)

KB4532945

WinRAR 5.91 (32-bit) (5.91.0)

KB4532945

WinRAR 5.91 (32-bit) (5.91.0)

KB4536952
KB4536952
KB4567409
KB4567409
KB958488
KB958488
KB976902
KB976902
KB982018
KB982018
LocalPack AU Package
LocalPack AU Package
LocalPack CA Package
LocalPack CA Package
LocalPack GB Package
LocalPack GB Package
LocalPack US Package
LocalPack US Package
LocalPack ZA Package
LocalPack ZA Package
Package 21 for KB2984976
Package 21 for KB2984976

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

6/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
Package 38 for KB2984976
Package 38 for KB2984976
Package 45 for KB2984976
Package 45 for KB2984976
Package 59 for KB2984976
Package 59 for KB2984976
Package 7 for KB2984976
Package 7 for KB2984976
Package 76 for KB2984976
Package 76 for KB2984976
PlatformUpdate Win7 SRV08R2 Package TopLevel
PlatformUpdate Win7 SRV08R2 Package TopLevel
ProfessionalEdition
ProfessionalEdition
RDP BlueIP Package TopLevel
RDP BlueIP Package TopLevel
RDP WinIP Package TopLevel
RDP WinIP Package TopLevel
RollupFix
RollupFix
RollupFix
RollupFix
RollupFix
RollupFix
UltimateEdition
UltimateEdition
WUClient SelfUpdate ActiveX
WUClient SelfUpdate ActiveX
WUClient SelfUpdate Aux TopLevel
WUClient SelfUpdate Aux TopLevel
WUClient SelfUpdate Core TopLevel
WUClient SelfUpdate Core TopLevel
WinMan WinIP Package TopLevel
WinMan WinIP Package TopLevel

Behavior activities
MALICIOUS

SUSPICIOUS

INFO

Drops the executable file immediately after the start

Executable content was dropped or overwritten

Reads the computer name

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

wmpnscfg.exe (PID: 188)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

uninstall.exe (PID: 3000)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

uninstall.exe (PID: 3000)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

The process creates files with name similar to system filenames

Executable content was dropped or overwritten

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

msedge.exe (PID: 3968)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

msedge.exe (PID: 112)

uninstall.exe (PID: 3000)

Malware-specific behavior (creating "System.dll" in Temp)

uninstall.exe (PID: 3000)

Checks supported languages
wmpnscfg.exe (PID: 188)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

uninstall.exe (PID: 3000)

uninstall.exe (PID: 3000)

Application launched itself

The process uses the downloaded file

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)

msedge.exe (PID: 2612)

Searches for installed software

msedge.exe (PID: 3968)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

Drops the executable file immediately after the start

Creates/Modifies COM task schedule object

msedge.exe (PID: 112)

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

msedge.exe (PID: 3968)

Creates a software uninstall entry

Application launched itself

FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

msedge.exe (PID: 3968)

Manual execution by a user
wmpnscfg.exe (PID: 188)

Create files in a temporary directory
FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2428)
FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)
uninstall.exe (PID: 3000)

Creates files in the program directory
FileZilla_3.66.5_win64_sponsored2-setup.exe (PID: 2696)

Malware configuration
No Malware configuration.
https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

7/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Static information
No data.

Video and screenshots

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

8/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Processes
Total processes

Monitored processes

Malicious processes

Suspicious processes

60

24

4

0

Behavior graphmsedge.exe
no specs

msedge.exe
no specs

msedge.exe

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

startmsedge.exe
msedge.exe
no specs

wmpnscfg.exe
msedge.exe

no specs

no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

msedge.exe
no specs

filezilla_3.66.5_win64_sponsored2-setup.exe

filezilla_3.66.5_win64_sponsored2-setup.exe

uninstall.exe

msedge.exe
no specs

msedge.exe
no specs

Specs description
Program did not start

Low-level access to the HDD

Process was added to the startup

Debug information is available

Probably Tor was used

Behavior similar to spam

Task has injected processes

Executable file was dropped

Known threat

RAM overrun

Network attacks were detected

Integrity level elevation

Connects to the network

CPU overrun

Process starts the services

System was rebooted

Task contains several apps running

Application downloaded theexecutable file

Actions similar to stealing personal
data

Task has apps ended with an error

File is detected by antivirus software

Inspected object has suspicious PE
structure

Behavior similar to exploiting
the vulnerability

Task contains an error or was
rebooted

The process has the malware config

Process information
PID

CMD

Path

3968

"C:\Program Files\Microsoft\Edge\Application\msedge.exe""https://download.filezillaproject.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe"

C:\Program Files\Microsoft\Edge\Application\msedge.exe

Indicators

Parent process
explorer.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Version:109.0.1518.115

3992"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -type=crashpad-handler "--user-data-

C:\Program Files\Microsoft\Edge\Application\msedge.exe—

msedge.exe

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?_…

9/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data"/prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "-database=C:\Users\admin\AppData\Local\Microsoft\Edge\UserData\Crashpad" "--metricsdir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" -annotation=IsOfficialBuild=1 --annotation=channel= -annotation=chromium-version=109.0.5414.149 "-annotation=exe=C:\Program
Files\Microsoft\Edge\Application\msedge.exe" -annotation=plat=Win32 "--annotation=prod=Microsoft Edge" -annotation=ver=109.0.1518.115 --initial-clientdata=0xc8,0xcc,0xd0,0x9c,0xd8,0x6e05f598,0x6e05f5a8,0x6e05f
5b4
Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Version:109.0.1518.115

1136"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=gpu-process --gpupreferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAA
AAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojoplatform-channel-handle=1288 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:2—

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

112"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=network.mojom.NetworkService -lang=en-US --service-sandbox-type=none --mojo-platformchannel-handle=1396 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:3

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Version:109.0.1518.115

2036"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=storage.mojom.StorageService -lang=en-US --service-sandbox-type=service --mojo-platformchannel-handle=1636 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8—

msedge.exe—

msedge.exe—

msedge.exe—

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Version:109.0.1518.115

728"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=renderer --first-renderer-process --lang=en-US --js-flags=-ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 -enable-main-frame-before-activation --renderer-client-id=6 --mojoplatform-channel-handle=2232 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:1

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Version:109.0.1518.115

764"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=renderer --lang=en-US --js-flags=--ms-user-locale= --devicescale-factor=1 --num-raster-threads=2 --enable-main-framebefore-activation --renderer-client-id=5 --mojo-platform-channelhandle=2240 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:1

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Version:109.0.1518.115

1816"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-subtype=asset_store.mojom.AssetStoreService --lang=en-US -service-sandbox-type=asset_store_service --mojo-platformchannel-handle=3328 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

10/55

15/7/24, 3:12 p.m.
Exit code:

1792

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
0Version:109.0.1518.115"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-subtype=data_decoder.mojom.DataDecoderService --lang=en-US -service-sandbox-type=service --mojo-platform-channelhandle=3584 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8—

msedge.exe—

msedge.exe—

msedge.exe—

explorer.exe—

msedge.exe—

msedge.exe—

msedge.exe—

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

1812"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-subtype=edge_collections.mojom.CollectionsDataManager -lang=en-US --service-sandbox-type=collections --mojo-platformchannel-handle=3824 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

580"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=renderer --lang=en-US --js-flags=--ms-user-locale= --devicescale-factor=1 --num-raster-threads=2 --enable-main-framebefore-activation --renderer-client-id=11 --mojo-platform-channelhandle=3932 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:1

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Version:109.0.1518.115

188"C:\Program Files\Windows Media Player\wmpnscfg.exe"

C:\Program Files\Windows Media Player\wmpnscfg.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Windows Media Player Network Sharing Service Configuration Application

Exit code:0

Version:12.0.7600.16385 (win7_rtm.090713-1255)

2556"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=gpu-process --gpupreferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAA
AAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle--use-angle=swiftshader-webgl --mojo-platform-channelhandle=1596 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:2

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Version:109.0.1518.115

1332"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US -service-sandbox-type=service --mojo-platform-channelhandle=1580 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

2468"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-subtype=data_decoder.mojom.DataDecoderService --lang=en-US -service-sandbox-type=service --mojo-platform-channelhandle=4128 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information

960

User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US -service-sandbox-type=service --mojo-platform-channel-

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

11/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

handle=1544 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8
Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

2656"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-subtype=data_decoder.mojom.DataDecoderService --lang=en-US -service-sandbox-type=service --mojo-platform-channelhandle=4216 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8—

msedge.exe—

msedge.exe—

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

2612"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=quarantine.mojom.Quarantine -lang=en-US --service-sandbox-type=none --mojo-platformchannel-handle=4300 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

936"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=chrome.mojom.UtilReadIcon -lang=en-US --service-sandbox-type=icon_reader --mojo-platformchannel-handle=4260 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

LOW

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

2428"C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2setup.exe"

C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2setup.exe

msedge.exe

Information
User:

admin

Company:

Tim Kosse

Integrity Level:

MEDIUM

Description:

FileZilla FTP Client

Version:

3.66.52696"C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2setup.exe" /UAC:30188 /NCRC

C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2setup.exe

FileZilla_3.66.5_win64_sponsored2setup.exe

Information
User:

admin

Company:

Tim Kosse

Integrity Level:

HIGH

Description:

FileZilla FTP Client

Version:

3.66.52540"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US--service-sandbox-type=none --mojo-platform-channelhandle=1412 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8—

msedge.exe—

msedge.exe

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

2884"C:\Program Files\Microsoft\Edge\Application\msedge.exe" -C:\Program Files\Microsoft\Edge\Application\msedge.exe
type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US--service-sandbox-type=none --mojo-platform-channelhandle=4844 --field-trialhandle=1308,i,12539196381033591500,13981752063094605004,131072 /prefetch:8

Information
User:

admin

Company:

Microsoft Corporation

Integrity Level:

MEDIUM

Description:

Microsoft Edge

Exit code:0

Version:109.0.1518.115

3000"C:\Program Files\FileZilla FTP Client\uninstall.exe" /frominstall/keepstartmenudir _?=C:\Program Files\FileZilla FTP Client

C:\Program Files\FileZilla FTP Client\uninstall.exe

FileZilla_3.66.5_win64_sponsored2setup.exe

Information

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

12/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

User:

admin

Company:

Tim Kosse

Integrity Level:

HIGH

Description:

FileZilla FTP Client

Exit code:0

Version:3.65.0Registry activity
Total events

Read events

Write events

Delete events

17 00316 86910628

Modification events(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon

Operation:

write

Name:

failed_count(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon

Operation:

write

Name:

state

(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\ThirdParty

Operation:

write

Name:

StatusCodes(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\ThirdParty

Operation:

write

Name:

StatusCodes

Value: 0

Value: 2

Value:

Value: 01000000(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon

Operation:

write

Name:

state

(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}

Operation:

write

Name:

dr

(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\StabilityMetrics

Operation:

write

Name:

user_experience_metrics.stability.exited_cleanly(PID) Process:(3968) msedge.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D28C97FE7E9062}\LastWasDefault

Operation:

write

Name:

S-1-5-21-1302019708-1500728564-335382590-1000

Value: 1

Value: 1

Value: 0

Value: E1C41E8C1F792F00(PID) Process:(3968) msedge.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D28C97FE7E9062}\FirstNotDefault

Operation:

delete value

Name:

S-1-5-21-1302019708-1500728564-335382590-1000(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge

Operation:

write

Name:

UsageStatsInSample(PID) Process:(3968) msedge.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}

Operation:

write

Name:

usagestats(PID) Process:(3968) msedge.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}

Operation:

write

Name:

urlstats(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\IEToEdge

Operation:

delete value

Name:

DisabledPendingAutoUpdateConsent(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\Defaults

Operation:

write

Name:

is_dse_recommended(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\Defaults

Operation:

write

Name:

is_startup_page_recommended(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}

Operation:

write

Name:

lastrunKey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D28C97FE7E9062}\LastWasDefault

Value:

Value: 1

Value: 1

Value: 1

Value:

Value: 1

Value: 1

Value: 13362500308007031(PID) Process:(3968) msedge.exe

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

13/55

15/7/24, 3:12 p.m.
Operation:

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
write

Name:

S-1-5-21-1302019708-1500728564-335382590-1000

Value: 821F338C1F792F00(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\Commands\on-logonautolaunch

Operation:

write

Name:

Enabled(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CloudExperienceHost\Intent\ContinuousMigration

Operation:

write

Name:

ConsentState(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Operation:

delete value

Name:

MicrosoftEdgeAutoLaunch_29EBC4579851B72EE312C449CF839B1A(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default

Operation:

delete valueName:extensions.settings(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

delete key

Name:(default)(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

ahfgeienlihckogmohjhadlkjgocpleb

Value: 0

Value: 1

Value:

Value:

Value:

Value: 81543E37DACE40D5997878A282F2906C4CE1EAD19B287B07C54D6A0A83E28564(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

ampmimodbocknpfehkbdjolnnbongejb

Value: F012AC16CDEA58743F058D55915AA5A0037CB8CCBA37B156751E853B9B3E412A(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

dgiklkfkllikcanfonkcabmbdfmgleag

Value: 1F254FD0B1D6C811D002EFCEDEEB50E8246745BE7D92861A86A5D943E46FBFBC(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

fikbjbembnmfhppjfnmfkahdhfohhjmg

Value: 649927C62C83EE34A042641356F914AA99EFA9953900BAE73880CC9C9251CEBC(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

iglcjdemknebjbklcgkfaebgojjphkec

Value: A9096DF8AEED8B6DBC4E722128194BDEE11121A4E6C8BA18CE4163F2D4583B68(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

ihmafllikibpmigkcoadcmckbfhibefp

Value: 4098D22E2B3C12A88CF09A078ECAD8090BA1DE2E0B215A538ED927C28FBBE3D7(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

jdiccldimpdaibmpdkjnbmckianbfold

Value: 489106FB3D3D0BA139A31E4D883597801CA0233CAFEE2C7BBF438B30DBFF249B(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

jmjflgjpcpepeafmmgdpfkogkghcpiha

Value: 2B019BFF4E49634B526D2019E4E8784D0A3BE3D648A568F0015B551AAD6E4C74(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

mhjfbmdgcfjbbpaeojofohoefgiehjai

Value: 1F92FD59A968037F8590B038F1E93078C2172BF3C285B2C70265F809BAFDED3B(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

ncbjelpjchkpbikbpkcchkhkblodoama

Value: 0751777A039FFAE6ABB86F3981F478CB74AB5262DFAEA813F82D86A68408E319(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Edge\PreferenceMACs\Default\extensions.settings

Operation:

write

Name:

nkeimhogjdpnpccoofpliimaahmaaome

Value: 68F7713C1CAD1CC81AB11A4BCB0D21B9E6B55DCDFA48A6C9298F52A4117D79AE(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

ProxyBypass(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

IntranetName(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

UNCAsIntranet(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

AutoDetect

Value: 1

Value: 1

Value: 1https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

14/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Value: 0(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Operation:

write

Name:

ProxyEnable(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Operation:

delete value

Name:

ProxyServer(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Operation:

delete value

Name:

ProxyOverride(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Operation:

delete value

Name:

AutoConfigURL(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Operation:

delete value

Name:

AutoDetect(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Operation:

write

Name:

SavedLegacySettings

Value: 0

Value:

Value:

Value:

Value:

Value: 460000005D010000090000000000000000000000000000000400000000000000C0E333BBEAB1D3010000000000000000000000000100000002000000C0A8016B00000000000000000000000
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{FCC67766-6201-4AD1-A6B82F4553C93D47}

Operation:

write

Name:

WpadDecisionReason(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{FCC67766-6201-4AD1-A6B82F4553C93D47}

Operation:

write

Name:

WpadDecisionTime

Value: 1

Value: 8126DC833BBBDA01(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{FCC67766-6201-4AD1-A6B82F4553C93D47}

Operation:

write

Name:

WpadDecision(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{FCC67766-6201-4AD1-A6B82F4553C93D47}

Operation:

write

Name:

WpadNetworkName

Value: 0

Value: Network 3(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{FCC67766-6201-4AD1-A6B82F4553C93D47}

Operation:

delete value

Name:

WpadDetectedUrl(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\52-54-00-36-3e-ff

Operation:

write

Name:

WpadDecisionReason(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\52-54-00-36-3e-ff

Operation:

write

Name:

WpadDecisionTime

Value:

Value: 1

Value: 8126DC833BBBDA01(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\52-54-00-36-3e-ff

Operation:

write

Name:

WpadDecision(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\52-54-00-36-3e-ff

Operation:

delete value

Name:

WpadDetectedUrl(PID) Process:(2612) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum

Operation:

write

Name:

Implementing

Value: 0

Value:

Value: 1C00000001000000E807060001000A000D0026002D007200010000001E768127E028094199FEB9D127C57AFE(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

ProxyBypass(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

IntranetName(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

UNCAsIntranet

Value: 1

Value: 1https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

15/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

Value: 1(PID) Process:(3968) msedge.exe

Key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Operation:

write

Name:

AutoDetect(PID) Process:(3968) msedge.exe

Key:

HKEY_CLASSES_ROOT\Local Settings\MuiCache\182\52C64B7E

Operation:

write

Name:

LanguageList(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\FileZilla3CopyHook

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DB70412E-EEC9-479C-BBA9-BE36BFDDA41B}\InProcServer32

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DB70412E-EEC9-479C-BBA9-BE36BFDDA41B}

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla 3\fzshellext

Operation:

delete value

Name:

Enable(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla 3\fzshellext

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla 3

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager

Operation:

write

Name:

PendingFileRenameOperations

Value: 0

Value: en-US

Value:

Value:

Value:

Value: 

Value:

Value:

Value: 116

Value: 117

Value: 118

Value: \??\C:\Users\admin\AppData\Local\Temp\nshAF8E.tmp(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\filezilla.exe

Operation:

delete value

Name:

DumpType(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzsftp.exe

Operation:

delete value

Name:

DumpType(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzputtygen.exe

Operation:

delete value

Name:

DumpType(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzstorj.exe

Operation:

delete value

Name:

DumpType(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\filezilla.exe

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzsftp.exe

Operation:

delete key

Name:(default)

Value: 119

Value:

Value: 

Value: 

Value: 

Value: 

Value:

Value:

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

16/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzputtygen.exe

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzstorj.exe

Operation:

delete key

Name:(default)(PID) Process:(3000) uninstall.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\filezilla.exe

Operation:

delete key

Name:(default)(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla Client

Operation:

write

Name:

Version(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla Client

Operation:

write

Name:

Package(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla Client

Operation:

write

Name:

Updated(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

UninstallString

Value:

Value:

Value:

Value: 3.66.5

Value: 2

Value: 0

Value: "C:\Program Files\FileZilla FTP Client\uninstall.exe"(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

InstallLocation

Value: C:\Program Files\FileZilla FTP Client(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

DisplayName

Value: FileZilla 3.66.5(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

DisplayIcon

Value: C:\Program Files\FileZilla FTP Client\FileZilla.exe(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

DisplayVersion(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

URLInfoAbout

Value: 3.66.5

Value: https://filezilla-project.org/(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

URLUpdateInfo

Value: https://filezilla-project.org/(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

HelpLink

Value: https://filezilla-project.org/(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

Publisher

Value: Tim Kosse(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

VersionMajor(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

VersionMinor(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

NoModify

Value: 3

Value: 66

Value: 1https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

17/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

NoRepair(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

Operation:

write

Name:

EstimatedSize(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla Client

Operation:

write

Name:

Startmenu

Value: 1

Value: 44009

Value: FileZilla FTP Client(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\filezilla.exe

Operation:

write

Name:

DumpType(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzsftp.exe

Operation:

write

Name:

DumpType(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzputtygen.exe

Operation:

write

Name:

DumpType(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\fzstorj.exe

Operation:

write

Name:

DumpType(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\filezilla.exe

Operation:

write

Name:

Path

Value: 1

Value: 1

Value: 1

Value: 1

Value: C:\Program Files\FileZilla FTP Client(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DB70412E-EEC9-479C-BBA9-BE36BFDDA41B}\InProcServer32

Operation:

write

Name:

ThreadingModel

Value: Apartment(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla 3\fzshellext

Operation:

write

Name:

Enable(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter(PID) Process:(2696) FileZilla_3.66.5_win64_sponsored2-setup.exe

Key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Operation:

write

Name:

GlobalAssocChangedCounter

Value: 1

Value: 120

Value: 121

Value: 122

Files activity
Executable files

Suspicious files

Text files

Unknown types

40

162

719

6

Dropped files
PID

Process

Filename

3968

msedge.exe

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old~RF103838.TMP
MD5: —

3968

msedge.exe

msedge.exe

3968

msedge.exe—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgePushStorageWithConnectTokenAndKey\LOG.old~RF103858.TMP
MD5: ——SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old
MD5: —

3968

Type

—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgePushStorageWithConnectTokenAndKey\LOG.old—

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

18/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
MD5: —

3968

msedge.exe

MD5: —
3968

msedge.exe

msedge.exe

3992

msedge.exe

3968

msedge.exe

3968

msedge.exe

3992

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

text

SHA256: 4080C22F68EC4545FC075C08CD3C8AEF8946444329C307F7BA54C134F75E901A

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\optimization_guide_hint_cache_store\LOG.old~RF1040d3.TMP
MD5: —text

SHA256: 4B43F3226D55CFF096683C4C754F986FC68365C455103DB77722C03D2023C311

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\LOG.old
MD5: 93B76D13B273BF917AB2B451BC904403—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old~RF103a6b.TMP
MD5: 94E242CED875726AA733779F8CF2C7E6—SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\optimization_guide_model_metadata_store\LOG.old
MD5: —text

SHA256: 65A7BF11BD80C6FE73C58A20E4BB0F8FA653EEB70B707DA7D16DD9E7F954CA21

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\optimization_guide_model_metadata_store\LOG.old~RF1040d3.TMP
MD5: —text

SHA256: A64CF3605A045FB0FF7C20E8CE38499FCE7D297F3F28514F100B8D5DA32FBA70

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG.old
MD5: 00AA7B4B4257D481C40A58482D5D6B24

binarySHA256: CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old~RF103b17.TMP
MD5: F744962BAF4CBE61325C8E322E5131EA

text

SHA256: DD62528714CB288CEBB9FA24F1626E2B9FE8326DC9DF16B44E14554575DB2782

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\a8a96f48-9733-4104-b519-ddf88a47c0e6.tmp
MD5: 5058F1AF8388633F609CADB75A75DC9D

binarySHA256: F8AB6BDC92A88F06D66DBC8F4C6F36FC29A655D96A28F38B157148355A46A0AF

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\LOG.old~RF103a4c.TMP
MD5: E5E5915E51821697BD1878FF02BFE9FCtext

SHA256: 6D137151132C6D0847E71AE0438348FB624F4AABFE26228B637153353A266035

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\a211167d-b1bd-41c6-848f-57db8370e722.tmp
MD5: 48EBFF26DD94FB73998C382081418376

text

SHA256: ACFD3CD36E0DFCF1DCB67C7F31F2A5B9BA0815528A0C604D4330DFAA9E683E51

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old
MD5: B2E1E436F8C0098B209AB866ADCDDEC4

text

SHA256: 43C8C6C59477341650E102E67EE991E2414C4F098AD0EA0C1C4CEF3966F7CBDD

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Last Version
MD5: 61FE7896F9494DCDF53480A325F4FB85

text

SHA256: 7B83D8689750F64D31016F1E8AC2A4EB9D7DB406E4C9C66211D4ED17DEBFEAD9

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old
MD5: 3E3FAD7BC02D9F39F64DACB4E9DD2624

text

SHA256: 9A3A3979C14C0FE3187A2054464DB6F42D9C27ACBC6E1863EE24BAEB1A084985

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old
MD5: 646FEFDB4D82709E3056F5C71953783C

text

SHA256: E98D615C43993262B2C3058F9E445BA09A496ED4CEE663371CABD0600CBBF122

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old~RF103a1d.TMP
MD5: C2F5F0CF3799AE7C49D5998928742D2B

text

SHA256: 6DB71689542AA54221535B9135FD82321DFE987612818B1D3BBA1629C4DC2F63

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old
MD5: 2B5B565981E1565368EC9935843BD794

binarySHA256: C241C44AE5D29F84DEBE35F27D4C419DA1EDCE86399E9F55940EE8250286B86A

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
MD5: 4BDB64FCF217848BCEEF4FF1723E32A0

text

SHA256: 899DE7900989F710A925E38FA5AE4EA2C3B0EF47A1FEEFBF9EB57C21FA513A8E

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Local State~RF1036c1.TMP
MD5: 6EB6B80193BBD69C1814A257B64541C3

binarySHA256: F8AB6BDC92A88F06D66DBC8F4C6F36FC29A655D96A28F38B157148355A46A0AF

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old~RF103867.TMP
MD5: B1E05B031BC39D74E7AC1CA69AC72F82

binarySHA256: F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Local State
MD5: 48EBFF26DD94FB73998C382081418376

text

SHA256: 5A9F6E7DDB2557B2C5921117AE4D6A407BB2504F6728DD1352FF88492E0ECC3D

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Variations
MD5: 961E3604F228B0D10541EBF921500C86

binarySHA256: E5E13D53601100FF3D6BB71514CBCCC4C73FE9B7EF5E930100E644187B42948E

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old~RF103848.TMP
MD5: 0FFCDE9AA0F7BF34DC35C8AEADCA5BA5

text

SHA256: C549BD4A176A3744A5D91391D311E28F0503BB69213E38835A1CB213038D938C

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics.pma~RF102ec2.TMP
MD5: 886E82F2CA62ECCCE64601B30592078A

text

SHA256: 10C7C43629D03E5DC6E8FA460492F2BB5F65B4B1473FB046E0487C00D50AC39E

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old~RF103809.TMP
MD5: 72265FBF816F9AAE473C0CEB421DE724

binarySHA256: DB3C05D5EC0B6719A73E7F0BE84BCE9342772DA70567E7CE08CF6573480B38FF

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old~RF103923.TMP
MD5: EC5D7723F58A1AD13FB0C0F0788EFBCE

binarySHA256: E991057C2B1718A151C5FD06E1C153F57130D195454A1F94C8C4C20971697093

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics.pma
MD5: C612E96CBFAC63232FC2062E15600FB1—SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
MD5: A6EBC0D32A7B9304824D19DB63B4E37A—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\LOG.old
MD5: —

3968

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\LOG.old~RF103942.TMP—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\optimization_guide_hint_cache_store\LOG.old—

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

19/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
MD5: —

3968

msedge.exe

MD5: 9AD27C5448B3AF61BC5A717EAD26D36B
3968

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

msedge.exe

3968

msedge.exe

3968

msedge.exe

text

SHA256: 68EAFD49C714FB135CDFCBF3565E9CD2C4D1233F00A733F0BFF7EB5B7D5300A8

C:\Users\admin\AppData\Local\Temp\fcd17db8-b337-4f8e-b30f-3e3171342a40.tmp
MD5: 5058F1AF8388633F609CADB75A75DC9D

crx

SHA256: 67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old~RF103cdc.TMP
MD5: 8923DB2E81C957A6C6A4771CCECAF867

crx

SHA256: 67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550

C:\Users\admin\AppData\Local\Temp\scoped_dir3968_1395517570\8d8ccf1a-ef3b-4549-92fa-53a33b4da0ed.tmp
MD5: 78E47DDA17341BED7BE45DCCFD89AC87

executable

SHA256: 33E0A274D463E6BD1A2379EF78A827177A7F8B716EAAC41F3D9DA28695151C1F

C:\Users\admin\AppData\Local\Temp\8d8ccf1a-ef3b-4549-92fa-53a33b4da0ed.tmp
MD5: 78E47DDA17341BED7BE45DCCFD89AC87

3968

executable
SHA256: 33E0A274D463E6BD1A2379EF78A827177A7F8B716EAAC41F3D9DA28695151C1F

C:\Users\admin\Downloads\ddc227a4-37bd-46a3-bd8c-32d92a5d59f6.tmp
MD5: D732BF95EE75CBCD53CBB9382C35DD8F

binarySHA256: 375056D1E124B2F6178D1CEF869DA4A0C88E78A3E8A88736D6001FB2B9D60CB2

C:\Users\admin\Downloads\Unconfirmed 865187.crdownload
MD5: D732BF95EE75CBCD53CBB9382C35DD8F

binarySHA256: 0CB9FBC99A90845E0C674635ACF27663A914CF058E2D3CFAAE386B050C0CFF54

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
MD5: D135EE740D8A0872DDF8DCC4F8C9C76B

binarySHA256: 53B47C4F3A403686B7C3298CB866C743FCD845E5F52B86540B1EA48341D844D1

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
MD5: D9455BCBA99D6BF0C6A5191FCD80AFAA—SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
MD5: 36BBA017002591A861F938E2779C49AC—SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SignalStorageConfigDB\LOG.old
MD5: —

3968

binarySHA256: BA4F00B2AEA9C099AD1418F8ED93066EE1042FD8B79082F4E904E4B444583E05

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SignalStorageConfigDB\LOG.old~RF104400.TMP
MD5: —text

SHA256: 88613A447ABBA2BAD204314E0B0E333FA12062F64F7A5A195E39114F76C4A81C

C:\Users\admin\AppData\Local\Temp\cv_debug.log
MD5: FAE452C0F49F024D2DF29C6936792A8D

binarySHA256: 375056D1E124B2F6178D1CEF869DA4A0C88E78A3E8A88736D6001FB2B9D60CB2

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
MD5: 13A3D3B0CE8ABB435D702A17009B2D6F

text

SHA256: B77278871C4928C4BD5E46EF236F2FAC9E24F767DA216AC80C7EC71708B69F4C

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1
MD5: D135EE740D8A0872DDF8DCC4F8C9C76B

text

SHA256: 148FA281E7F8A00539FABE977F46F1E050C956204D830E6014BEEB8B4DD641F2

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old~RF103aa9.TMP
MD5: E77D4C53D3BB4C0BBB531568DF01409B

text

SHA256: 50BC2AE152862680DB51849904682C5D10BA6449315CE79F4CBDC878416DA346

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old
MD5: 5E14F5228D0155ACB62249CA5B6027C5

binarySHA256: 279BF453DD0572DCF4A326CB7DF9FA9D296A2921EF96ABDB1956A813268D78CB

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old
MD5: 4F516DF8B34DA06ABB78EA4BCACC44E8—SHA256: —C:\Users\admin\AppData\Local\Temp\scoped_dir3968_1395517570\CRX_INSTALL\manifest.json
MD5: B9D00380C0947D7BA5FD1EFCBB8A7347

3968

—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SignalDB\LOG.old
MD5: —

1332

binarySHA256: B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SignalDB\LOG.old~RF1042e7.TMP
MD5: —

3968—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
MD5: F50F89A0A91564D0B8A211F8921AA7DE

3968

—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SegmentInfoDB\LOG.old
MD5: —

3968

text

SHA256: 3AAAADA30D1B6FF7569300F16D603938E2212FC12F70EE328DB491978377B135

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Segmentation Platform\SegmentInfoDB\LOG.old~RF104279.TMP
MD5: —

3968—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old
MD5: BADE4DF440829FEA2D8C8B3F48EB98D7

3968

—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\BudgetDatabase\LOG.old
MD5: —

3968—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\BudgetDatabase\LOG.old~RF1040e3.TMP
MD5: —

3968—

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\AutofillStrikeDatabase\LOG.old
MD5: —

3968

text

SHA256: 1FA190AD3371BE1C1639C729ACB1D7F2D4DFAA714548786AC3115E1132DE0E76

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\AutofillStrikeDatabase\LOG.old~RF1040e3.TMP
MD5: —

3968

binarySHA256: 800EAAABED61A9A9EC6BA7625EECD006C138ECDF515B304CBB2527826347FC00

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG.old~RF103a6b.TMP
MD5: FB60EB0643AE21552CEB6610251F7B25

3968

SHA256: —C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

binarySHA256: CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

20/55

15/7/24, 3:12 p.m.
3968

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

msedge.exe

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist~RF10422b.TMP
MD5: 472D60105BF0F5E7A260435D91C6681E

3968

msedge.exe

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
MD5: 085CE502C8C88B965D9DC41CA4429823

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

960

msedge.exe

960

msedge.exe

3968

msedge.exe

112

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

3968

msedge.exe

112

msedge.exe

3968

msedge.exe

2428

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

960

msedge.exe

112

msedge.exe

3968

msedge.exe

112

msedge.exe

2612

msedge.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

2428

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

executable

SHA256: 4913D4CCCF84CD0534069107CFF3E8E2F427160CAD841547DB9019310AC86CC7

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\modern-wizard.bmp
MD5: CBE40FD2B1EC96DAEDC65DA172D90022

executable

SHA256: DBDE8A4BD71BB1FBC0511CDB657DFEFFDAEDC513AA425F856043532A7CBA6FCE

C:\Users\admin\AppData\Local\Temp\nsy8B5C.tmp\UserInfo.dll
MD5: D458B8251443536E4A334147E0170E95

executable

SHA256: 4913D4CCCF84CD0534069107CFF3E8E2F427160CAD841547DB9019310AC86CC7

C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2-setup.exe
MD5: 861C54A22491B35880F4EC629CFD699F

text

SHA256: EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\UserInfo.dll
MD5: D458B8251443536E4A334147E0170E95

binarySHA256: 8355B9ED0DCFAE31FAC174F5E9FCB204F8475C08C39602749BF4042FA6D38EDE

C:\Users\admin\Downloads\FileZilla_3.66.5_win64_sponsored2-setup.exe:Zone.Identifier
MD5: FBCCF14D504B7B2DBCB5A5BDA75BD93B

text

SHA256: EA2773D286863AC324395F408277E981483FACB2789618F5EF2A2E7FD68CC66B

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b65a2449-d680-44eb-99a7-6a98df7e270b.tmp
MD5: AAF12A04C083444FECF6AE760373946A

binarySHA256: 8355B9ED0DCFAE31FAC174F5E9FCB204F8475C08C39602749BF4042FA6D38EDE

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old
MD5: 05F34EB125E5B3EF3F1CC00F1B317471

ini

SHA256: D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
MD5: AAF12A04C083444FECF6AE760373946A

binarySHA256: E56CBEF8D44B3F37F7B8C4F8D349DC43C47092D2C686639C4898528F60824999

C:\Users\admin\AppData\Local\Temp\scoped_dir3968_1395517570\CRX_INSTALL\_metadata\verified_contents.json
MD5: 738E757B92939B24CDBBD0EFC2601315

executable

SHA256: 9111099EFE9D5C9B391DC132B2FAF0A3851A760D4106D5368E30AC744EB42706

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
MD5: 128133ADBD21CC2846E515DEC0C06EF4

binarySHA256: FAD4AAEF43B70081CAAEFFBEFAFEF3D1D1E7005C1A7C90E9D076A30A78737950

C:\Users\admin\AppData\Local\Temp\nsy8B5C.tmp\System.dll
MD5: 4ADD245D4BA34B04F213409BFE504C07

executable

SHA256: DBDE8A4BD71BB1FBC0511CDB657DFEFFDAEDC513AA425F856043532A7CBA6FCE

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
MD5: 525B236E739C14C7617FE125DBDFB9F9

binarySHA256: C7C2C8C9C6A95885B3E877E3BBA9CADDDE5BA14BCAEED7C8ECB03F8CC512D353

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
MD5: 861C54A22491B35880F4EC629CFD699F

binarySHA256: FAD4AAEF43B70081CAAEFFBEFAFEF3D1D1E7005C1A7C90E9D076A30A78737950

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF105eac.TMP
MD5: 4CEF3E8359E76E029F632C6C43204F1E

binarySHA256: E56CBEF8D44B3F37F7B8C4F8D349DC43C47092D2C686639C4898528F60824999

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\0793b892-59e8-4387-95c4-57e2c19a31fb.tmp
MD5: 525B236E739C14C7617FE125DBDFB9F9tss

SHA256: 5243BC3D7725937E915DE1562A84B6BC50F34001CA68256EE199FCA82378B84F

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\c2656c10-cedf-4c8c-9aa8-d1044739f3a6.tmp
MD5: 128133ADBD21CC2846E515DEC0C06EF4

binarySHA256: 0CF3987DAB8A011A5BD0E32C0E7D51C5BCC53E0346DDB0B5D65E04923DEF936B

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\9fa6f252-3d79-49af-8e89-40bbd1ef165a.tmp
MD5: 085CE502C8C88B965D9DC41CA4429823

text

SHA256: 33A059EAB33802965825971362BFE6D5C0A68692BBB3EA92EA4D4435AB69CFBC

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RF106284.TMP
MD5: CD395F4FF3210A7C8DFC3904010623D5

binarySHA256: 0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old
MD5: 37B50C6F0246FEAFDBC47F4F16936810

binarySHA256: D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A

C:\Users\admin\AppData\Local\Temp\scoped_dir3968_1395517570\CRX_INSTALL\content.js
MD5: 3D20584F7F6C8EAC79E17CCA4207FB79

text

SHA256: 69C14D9F6A791991954604FBBF5E4D3E3B95097F6D2A8609AD8A3663F85DDBA5

C:\Users\admin\AppData\Local\Temp\scoped_dir3968_1395517570\CRX_INSTALL\content_new.js
MD5: 3DE1E7D989C232FC1B58F4E32DE15D64

binarySHA256: F8AB6BDC92A88F06D66DBC8F4C6F36FC29A655D96A28F38B157148355A46A0AF

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old~RF10443e.TMP
MD5: C74E61D2EA06FA4395BE8A3FA39B8A35

text

SHA256: 9337C8EC1440E16768233BE75C9A72E4EFAC248AC04772ED7394F7BEAE2B631B

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Local State~RF105dd1.TMP
MD5: 48EBFF26DD94FB73998C382081418376

binarySHA256: B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old~RF10442f.TMP
MD5: 0B6636674CD4E49A70EFC710B929BCC1

binarySHA256: A4541558CF356F51B47C24FACDEB6D1AC8D177D6A016DA8768E7AA5B4F2574CB

C:\Users\admin\AppData\Local\Microsoft\Edge\UserData\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
MD5: 5D1D9020CCEFD76CA661902E0C229087

tss

SHA256: 5243BC3D7725937E915DE1562A84B6BC50F34001CA68256EE199FCA82378B84F

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\47e8c158-7001-4a9b-9bc8-eed085da9d47.tmp
MD5: 84E630814DA1F22E6D20396E50CA12DB

tss

SHA256: 4308CFEE7D81E2900871DC7DE43D43CD8BA8A18F492C96DE4FA06BF48F4E5AA9

image

SHA256: 3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\nsDialogs.dll

executable

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

21/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …
MD5: 1D8F01A83DDD259BC339902C1D33C8F1

3000

uninstall.exe

MD5: 83C7A3C549E69D9C0611883B4FEE89AD
3968

msedge.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

msedge.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3000

uninstall.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

uninstall.exe

2428

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

msedge.exe

uninstall.exe

uninstall.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

msedge.exe

2696

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

text

C:\Program Files\FileZilla FTP Client\libgmp-10.dll

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\fzputtygen.exe

C:\Program Files\FileZilla FTP Client\fzstorj.exe

C:\Program Files\FileZilla FTP Client\libpng16-16.dll
MD5: F396BFCAE04EF8EBE05491784910E822

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\libhogweed-6.dll
MD5: E66CBF2273CC95C2D2A9374CB02AA5C8

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

executable
SHA256: 5A48633810356D16D96004F343DF8B5AE361F2A170DE9BF92CB94578E034533C

C:\Program Files\FileZilla FTP Client\libgnutls-30.dll
MD5: AF720A660CF5DFB7BEDA9E57C008BDF8binarySHA256: A7C48E508930A62D66D4B11313F158D94168346527CAE888A3C09B4B8560997C

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF10a24d.TMP

MD5: 04EDCDCDBAE273E19E04AD0AB1116834
FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: A6027787B19D797917C5124A7546BD3025C2D51F3DDC13EDD44ED4C42BA3D0CB

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\7478a45b-cf53-49c1-ab6a-442f1bf0c79a.tmp

MD5: F202D64A47456E50ACBA6DFFEF26C65C

2696

executable

C:\Program Files\FileZilla FTP Client\libfilezilla-42.dll

MD5: 128133ADBD21CC2846E515DEC0C06EF4
2696

binarySHA256: A4541558CF356F51B47C24FACDEB6D1AC8D177D6A016DA8768E7AA5B4F2574CB

SHA256: 45F98D3DD4A9C7CF58D302E00EBB69A411C120FC4160E04304780DB03DFC2265

MD5: D5F8CA243676ED46B0FF017734D482E1
msedge.exe

executable
SHA256: F23586077288F615DBC1BACF7B1EBBE4AE266D2E0E1E2B4BC2961762102719F7

MD5: 6C0F745DF851F8C4D10E1789BFD19FF4

MD5: 34A1E09147A3B5BE04BDD3D549EDD11B

3968

image

SHA256: 3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2

C:\Program Files\FileZilla FTP Client\AUTHORS

MD5: A24E5C4B71E332E6A84168913E0676C8
2696

executable

SHA256: 7A9DDEE34562CD3703F1502B5C70E99CD5BBA15DE2B6845A3555033D7F6CB2A5

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Local State~RF10ad78.TMP
MD5: 84E630814DA1F22E6D20396E50CA12DB

binarySHA256: BCD9FFDF05F96B7022B000946508616FC23A9E7F12584A804671F4AED3135B2F

C:\Program Files\FileZilla FTP Client\filezilla.exe
MD5: 4851A345BFE906884E0AA95EAEFD2A99

3968

executable
SHA256: 2F7F8FC05DC4FD0D5CDA501B47E4433357E887BBFED7292C028D99C73B52DC08

C:\Users\admin\AppData\Local\Temp\nscAF6E.tmp\modern-wizard.bmp
MD5: CBE40FD2B1EC96DAEDC65DA172D90022

2696

executable
SHA256: 2F7F8FC05DC4FD0D5CDA501B47E4433357E887BBFED7292C028D99C73B52DC08

C:\Users\admin\AppData\Local\Temp\nscAF6E.tmp\System.dll
MD5: 564BB0373067E1785CBA7E4C24AAB4BF

3000

executable
SHA256: 3349497C7B523192E090734F3001B034687B0FBFA5640E0F37E5836205B2288B

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
MD5: 4D640109774D957E134BC729F1E82276

3000

SHA256: F7E89C1EDBBEF8BC837B47C48113A2416F1AF0CFC2B2218DA39085465EA1045C

C:\Users\admin\AppData\Local\Temp\nsy8B5C.tmp\UAC.dll
MD5: ADB29E6B186DAA765DC750128649B63D

1816

html

C:\Users\admin\AppData\Local\Temp\nscAF6E.tmp\UAC.dll
MD5: ADB29E6B186DAA765DC750128649B63D

executable

SHA256: 933F93A30CE44DF96CBC4AC0B56A8B02EE01DA27E4EA665D1D846357A8FCA8DE

C:\Program Files\FileZilla FTP Client\libnettle-8.dll
MD5: 5C6C18591C5F7CE67808796E9B482AFF

3000

executable
SHA256: 311488E3C21F1B3573BBE049F94D82135BB049A97128C26F2EDDED9EC6892ADF

C:\Program Files\FileZilla FTP Client\GPL.html
MD5: 11E176C5E0120EE94E365F999084BCE8

text

SHA256: C7A430EA092212B5572C7F360465ED857492C5A9CA630B6907D5FF6BAD723C74

C:\Users\admin\AppData\Local\Temp\nscAF6E.tmp\UserInfo.dll
MD5: 98FF85B635D9114A9F6A0CD7B9B649D0

executable

SHA256: 9111099EFE9D5C9B391DC132B2FAF0A3851A760D4106D5368E30AC744EB42706

C:\Program Files\FileZilla FTP Client\fzsftp.exe
MD5: F0814B8ED97027F251CF76403E1A12CE

binarySHA256: 9D6DFF71393E3A6DAD3ABB0F3C42ED3CD1E9BC154A1F24C665800566C726AC13

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
MD5: 6D9D428F570F0D6C6CF2FB2FFB697292

2696

SHA256: 2F7F8FC05DC4FD0D5CDA501B47E4433357E887BBFED7292C028D99C73B52DC08

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\System.dll
MD5: 4ADD245D4BA34B04F213409BFE504C07

1816

executable

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\8a5c13b7-efdb-4f38-bede-f322da48af14.tmp
MD5: 5EE7420F3ABC0DE563B51C190A2BD2D5

binarySHA256: F4CD27086EBA48BD48081034BDCB9697DDD0D27AC25CB45A9B6E32341482A410

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\UAC.dll
MD5: ADB29E6B186DAA765DC750128649B63D

2696

binarySHA256: A1977B353A536536E087556A12A6E103EF90699DBF625AF636E7969A4292EFDA

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF1067f3.TMP
MD5: ADABAA0FAF123741211D16D30968A426

2696

SHA256: 4B7D17DA290F41EBE244827CC295CE7E580DA2F7E9F7CC3EFC1ABC6898E3C9ED

C:\Users\admin\AppData\Local\Temp\nscAF6D.tmp

binarySHA256: E56CBEF8D44B3F37F7B8C4F8D349DC43C47092D2C686639C4898528F60824999
executable
SHA256: E71CF3010E46DB0922F0C25251885D1317F2E695E3F7E4FECC035F0D3D987FE5executable
SHA256: 35CC8B5548B8B5DE0F1A55AFC515214DF9DD109CC5133DF686445D82B3EA31DB
executable
SHA256: F57D4802B66961121B681618F2EDA4E08F6205655B0E8F215137A055F41E033E
executable
SHA256: A4F248E6D3E0BD8E1A9875C1E3BF997ABF6A9330DA58B6DCB960DBD50CB88536
executable
SHA256: 7111A50B040DA45681733C63FD993A613771D2E51A1418CA688C2722E39EAB2A

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

22/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\zlib1.dll
MD5: 731BB4F91FE8A41BF66C84D98B95309E

3000

uninstall.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

wav
SHA256: E98EBD6282CDBBD74B316F075971D61032FE8DED0A7EBA7F4F826877E16C9D43
image

SHA256: 3837185790FA51CF6A91655182B81F8AF988170FD693012A2F153EB7963FB9FA

C:\Program Files\FileZilla FTP Client\resources\default\480x480\auto.png
MD5: 77269A36DB7A4BFA680F7B013D848A75

image

SHA256: 7411D2321A7110EAF08A2816AB28ED209442AEF7D774A7A69A2A3AB40C07AF22

C:\Program Files\FileZilla FTP Client\resources\16x16\filezilla.png
MD5: F3C6E2F122398052A7AFE5D9924A32E7

image

SHA256: DD8D6DCE5B232BE9C8AFD5474D67A41C01A8C9C8A24EAD135AA582B04AA3157C

C:\Program Files\FileZilla FTP Client\resources\finished.wav
MD5: B495C090044C169829C4DBAC2FB97130

xml

SHA256: B9AA1A43C675179CDBB0EB55F68232A3FC792D93293D85E26D6C290974D5DFEA

C:\Program Files\FileZilla FTP Client\resources\32x32\filezilla.png
MD5: BAA555FA887E09927F18600880C5364D

image

SHA256: 640CEE2F245A1DD93DBC3CF6CB7D61875431D199DC4ED12C6578DE96E3DD4238

C:\Program Files\FileZilla FTP Client\resources\default\480x480\ascii.png
MD5: F0AE57C083B3ADA598C3ABB1074D9877

2696

SHA256: 02716BE5069A813438BD53A0DAF653828EB71461FB8A1D12476F1DB21CAF909D

C:\Program Files\FileZilla FTP Client\resources\xrc\netconfwizard.xrc
MD5: 559F64954BB06A2B504568C132D2D4B7

2696

executable

C:\Program Files\FileZilla FTP Client\resources\16x16\unknown.png
MD5: 03198F6783D16BE48CEA18301F1457DB

image

SHA256: 3C4B0072D9EC072C6BA94EEF2972DFC9A1C3EF6E466F29ACF8A663799E6047E7

C:\Program Files\FileZilla FTP Client\libsqlite3-0.dll
MD5: A0A2A39AA408B3267B89B433958F9B34

executable

SHA256: 98FF3BAD4501473ED90CDC3F8B5FA08B0BB24F10A76E0FAB652685FAE1B6BAFD

C:\Program Files\FileZilla FTP Client\resources\16x16\throbber.gif
MD5: 9279BC2F725A07944E01E3B56489466E

image

SHA256: ADCC02F2D63D265DA0254695E90C7AF672702DF1F274D614F01B358383B3EB8B

C:\Program Files\FileZilla FTP Client\wxbase32u_gcc_custom.dll
MD5: CA14507F4F12394BD1AA3499D724BC65

image

SHA256: 50EEEE967412EC62B165C3519425A387C61BCC52FDBBA74151A7F3E647EE357B

C:\Program Files\FileZilla FTP Client\resources\48x48\filezilla.png
MD5: DFABA6D62BCDA50ECCFB39EF591C207B

executable

SHA256: 64C130DA4BBCF563113EC697B44DD6A574C65D8010A656254C6FD9DDBA285F4C

C:\Program Files\FileZilla FTP Client\resources\480x480\filezilla.png
MD5: 95FEF4675F817D2D06A7CDDF9A109288

xml

SHA256: 2C08F2658767706C20E408200C2B3FB04BB4EAF93CBF7B9326C47E4E620152CF

C:\Program Files\FileZilla FTP Client\wxmsw32u_core_gcc_custom.dll
MD5: FDAACD9C1CCC76288A2D8C3070E6A1CF

executable

SHA256: 6F32D24290CAA13CAA3E656CF281F6D3CA87D00EDCF66CF8098E4570B8758D9C

C:\Program Files\FileZilla FTP Client\resources\xrc\dialogs.xrc
MD5: A67F007C8440E92C8706153F8D667A55

executable

SHA256: 1BEC025816C78A1C672E912F2CE218EA5C8140ACBD3B5B2836491260FAEECF91

C:\Program Files\FileZilla FTP Client\wxmsw32u_xrc_gcc_custom.dll
MD5: FF727A4828A89AF406B83D4A768B7C02

2696

executable
SHA256: 00CDFF6714F939FF105174138EAA40BB82F6EF7B68B7901BF1736DD921FB7EEA

C:\Program Files\FileZilla FTP Client\libfzclient-private-3-66-5.dll
MD5: 5592A615979491CDC811ECC1C277A336

executable

SHA256: CD2775C27240DF51A0788F96A74FCCA1833962FF352576A20ED56DBF498607FB

C:\Program Files\FileZilla FTP Client\libgcc_s_seh-1.dll
MD5: B9C02046616EA73BC6A98A295025D684

image

SHA256: 02ED6B1F90F7DB4143BBA9B7B622EE307E4409C7D3EAA67BA219859FE643F6CF

C:\Program Files\FileZilla FTP Client\wxbase32u_xml_gcc_custom.dll
MD5: B94A57A35472421EB6D85AD91FC723E3

xml

SHA256: 27B4C87E3F1A75CE58CCE51086D8445E3C33590111A258BE8344B842F74C05D0

C:\Program Files\FileZilla FTP Client\resources\24x24\unknown.png
MD5: D0C1B3BAFF23B05FFF6BB33ADDD5C94D

2696

executable
SHA256: E53B48E963266AB21D235067FD06EDD774D0C608F0102DEC10C6E4A1D0D925C2

C:\Program Files\FileZilla FTP Client\resources\defaultfilters.xml
MD5: 9994A10E6EE72A5AFD26CBB582E946E8

executable

SHA256: 44B1D3616AD095D7D9CA23B3CC77E76C372CE65E5F568FE619990D34CCAAAEAD

C:\Program Files\FileZilla FTP Client\libstdc++-6.dll
MD5: FDA1ECA80AEC551B364A2A5B549DBF35

executable

SHA256: 42176CEA5D61778E838C791B7D10E3C497662ED5E016AD20CC16613835CBBD24

C:\Program Files\FileZilla FTP Client\libfzclient-commonui-private-3-66-5.dll
MD5: 5E0DC1EC221D3A564BE50E9E416BF43D

2696

text
SHA256: 08DEC8C2E9678DDACF2DCF857177D46A8E69009606BF8B4F87691CB40F4EAC0D

C:\Program Files\FileZilla FTP Client\wxmsw32u_aui_gcc_custom.dll
MD5: DDF8D86E45314C948843F179F9FE419C

2696

executable
SHA256: E2DBC8AC85700DE7DD15F4844C356394C8C1A0AE717D6652902857D515C3F606

C:\Program Files\FileZilla FTP Client\NEWS
MD5: 46D9EA3B4EBA1AD0AC772D909EA47684

2696

SHA256: AE731D47BE35246D9C0F8F6058E635879E4A9DF0544917405DD468FD9E57CABB

C:\Users\admin\AppData\Local\Temp\nshAF8E.tmp
MD5: C0059824F380C47A4F12FE7E97805150

2696

executable

image

SHA256: B8485E4E544DA9CFBFE8D3D3960840BFC0A2933905652628C26C5FAB1C1EC2B1

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

23/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\20x20\unknown.png
MD5: 81865F3AC002213307807A172D3E2BA0

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: E72E2057AFE1C9C449C2F43A83129DC24D4349E34F40CE957B56F7F87ABA927A

C:\Program Files\FileZilla FTP Client\resources\default\480x480\lock.png
MD5: D4A4969B85930B19AE2790ED9BB70168

image

SHA256: 9BF88F5A0F4DEB7035CFD2930225596B4E0767010D34F01C3EE093C17164033F

C:\Program Files\FileZilla FTP Client\resources\default\480x480\refresh.png
MD5: F95D73543381834FD6AAD987DF30F157

image

SHA256: 930281B5E99BCF3C891B48A2830F5BCFD19D2AB03F9A2CFFC2594016233CCD14

C:\Program Files\FileZilla FTP Client\resources\default\480x480\logview.png
MD5: A5C2E72F7C61158A6E17AEA666DE99FD

image

SHA256: AE4050393D3D0AA4901550538EC3B0D2148F1F5BE462E1FB9BE235A7EF456AF3

C:\Program Files\FileZilla FTP Client\resources\default\480x480\processqueue.png
MD5: DC267D9678AFF17E9A8A557F0C9E690F

image

SHA256: BF67DEC586E7BADB5C358AC4734CB80C550CF03438EC70C5444068319BCC3753

C:\Program Files\FileZilla FTP Client\resources\default\480x480\help.png
MD5: BF8B87517AEF468F43AF11CEDF739078

image

SHA256: 1D6C546397E8EBF71503279D0D8DA8A9343908FEC4B9B1D97926EC5532EFB365

C:\Program Files\FileZilla FTP Client\resources\default\480x480\folderclosed.png
MD5: F41DA3306071CEF65632B5591CB57504

image

SHA256: A67AF84C06743847FFC0EDBC79FFC4A3CE93C89FF57C03C0F18C3782B5347988

C:\Program Files\FileZilla FTP Client\resources\default\480x480\leds.png
MD5: 87363ED4937B5B1633E6C756268A46A6

image

SHA256: 7F0899F331F7C33A0781BA909F80144BF6A58771C3AD8E2C13185FF372CF780F

C:\Program Files\FileZilla FTP Client\resources\default\480x480\localtreeview.png
MD5: E21443D7CAD7E6927FD6D798A4232BB4

image

SHA256: DE44AF39AAC7131AD05258246552DFC89E1C1634BAABD2989F4CBADA8D67598C

C:\Program Files\FileZilla FTP Client\resources\default\480x480\folderup.png
MD5: E562C94006CB02A351754462D36459D3

image

SHA256: 3E1A1E56E1B1B47FD85D83D0071EA146307F49E591A8A2CB8807E7EBAA6C4A18

C:\Program Files\FileZilla FTP Client\resources\default\480x480\folderback.png
MD5: 4FB33DFFF3371B53CF990BF3EF4577C2

image

SHA256: CA23648B2998ADA62394878E0A25D5272B5F45B04D17B670617E9958E37AEC33

C:\Program Files\FileZilla FTP Client\resources\default\480x480\find.png
MD5: 31CB1244F73290719DF3C7538B730AD9

image

SHA256: 4AF5B556C71DDF23E8102E34566A89DDE088A483CDF4BE6A2816A6DCF950BDE0

C:\Program Files\FileZilla FTP Client\resources\default\480x480\dropdown.png
MD5: 77997FF57AF571672F8EFC7EE809142E

image

SHA256: 5E67131EFFDE188B8C27D92982ECBFE9AAA313D0641243E69DE7EB982A97A782

C:\Program Files\FileZilla FTP Client\resources\default\480x480\folder.png
MD5: DAC7322EB12099122145D2431CAF1EF1

image

SHA256: 9EC4D7DFDCFD51CB756104BDFF72A974825BD274069CD6DA52C78BE89753B377

C:\Program Files\FileZilla FTP Client\resources\default\480x480\filter.png
MD5: 8BA37BA851FAD91B76C7C9B5DDAC18BF

image

SHA256: 4C7A9A59FFDBA87A0C8F25B7032D6B62E078AE31B7BADEB851585FC67998872E

C:\Program Files\FileZilla FTP Client\resources\default\480x480\file.png
MD5: 33774E40279BE08B64BEE8C287258678

image

SHA256: 496DA69784B29607A4B6510D8D7CAE7B1615D80EA4472B681F411FBD11CAC444

C:\Program Files\FileZilla FTP Client\resources\default\480x480\download.png
MD5: E08B0F6B99714332A5ED3817AF06F694

image

SHA256: BF0F361801F7DD78C748D611DAEB2180D50DBD9E3A284758BC4A5E6F773758D5

C:\Program Files\FileZilla FTP Client\resources\default\480x480\downloadadd.png
MD5: 4446C16BA6D4E7F0DA53623691E4D714

image

SHA256: 45C5391E3C1A2156846C742EE2DBC7779B3D3F498E7BAB7DE4F1D82086462F93

C:\Program Files\FileZilla FTP Client\resources\default\480x480\disconnect.png
MD5: E7A7E89F12DD8D49F9AFB73EB52E0466

image

SHA256: 7788BEBBA4F6FA835D285950DA618E348642E7479A662C961D9447AAFF1464A9

C:\Program Files\FileZilla FTP Client\resources\default\480x480\close.png
MD5: 96803292CBF69CB363327370B4646C95

image

SHA256: 314D5EC0DBEA36C3B37D48438E7BDD50178811B7BA04E46F438873DE3A5C1FE0

C:\Program Files\FileZilla FTP Client\resources\default\480x480\compare.png
MD5: 0B07B1EA2BDE56E41DCBD50E79BD65E3

image

SHA256: 60C7FF5130DC558BFFAC45C9041E161F1EBA7DF449F3A0D083D977CD694309D5

C:\Program Files\FileZilla FTP Client\resources\default\480x480\cancel.png
MD5: 4C2C126F11CE45B698336B49B24F8AFE

image

SHA256: F41C7079C17E20FB6C47E5A4B0C5F0884C85322EE338E2C5041BE3ED550BDF88

C:\Program Files\FileZilla FTP Client\resources\default\480x480\bookmark.png
MD5: 869CCAD7537A629A0E507D45E23C4C2F

image

SHA256: 40C0C7CF55787A53920D4D615AFB93FA6EF9C33EDADF02D14F6483779572B77F

C:\Program Files\FileZilla FTP Client\resources\default\480x480\bookmarks.png
MD5: AE88AA83EC926781DF9EC47CB8EA8AA0

xml

SHA256: 209F8ABD4D06BA609D1D92943CCD2B7EF8918E88CA3F159AB8D1D6FA82EBCDA1

C:\Program Files\FileZilla FTP Client\resources\default\480x480\binary.png
MD5: 576283CB669678FD8B462745115D8ACF

2696

SHA256: 979D50D9330CD9A8F915F822D4E40A62170483FC276D5866FB37E5951F913F98

C:\Program Files\FileZilla FTP Client\resources\default\theme.xml
MD5: 75A54B0F2673D762239BC479579AF93D

image

image

SHA256: 69A41DCFA17370F4DD0E6FA74943FA674DA8D860AEB35F3208AF21849AD314A7

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

24/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\default\480x480\queueview.png
MD5: 247CC463EC1C836C2388317B8C5FD91B

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

xml

SHA256: 0D2E249A171A07A0B412C9F3ECA041E772D530991D6333F9C96600C8C0935027

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\bookmark.png
MD5: 00AF3E61EE2B3FA856AD1B3FAFF8FF8B

image

SHA256: 0FFFCF51EC568BEF40C6EB3A471CC9E63899BB4CFB42B70F40207F819AA826F5

C:\Program Files\FileZilla FTP Client\docs\fzdefaults.xml.example
MD5: BC0AFACD8028E222472BB32474DB8148

xml

SHA256: AFB7D60E759AB43AE973EF1CEB8409E4F3DB135B9979D30CE9D2462F670AA250

C:\Program Files\FileZilla FTP Client\resources\default\480x480\synchronize.png
MD5: 3CE9C623FF201DA78CE5462EDCEEEB57

image

SHA256: 22E70C98254032BC9533FF40D2F818EFDF9D7790895F27FF8BD14FF4223ED534

C:\Program Files\FileZilla FTP Client\resources\blukis\theme.xml
MD5: 87F80751EC8504AF3D9C5B31F6F6A836

image

SHA256: EDD8D0E29F8D928A035C9301D78F2D13915164F761444DDF14A5F5C245EA20EC

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\binary.png
MD5: 7145960BCA9C6FADE0613C66A3B936B5

2696

executable
SHA256: D63A012F3145E5B36B75B02AB1CC4004D4A388A2B78A720290249F4FE46B217C

C:\Program Files\FileZilla FTP Client\resources\default\480x480\upload.png
MD5: 5DBB4A4639578D421340976E766F2C32

binarySHA256: 51DF95A73486E610B711EE934BA38BC92BEA5C0F6A14A6BB97AADF8571D28A3A

C:\Program Files\FileZilla FTP Client\uninstall.exe
MD5: EB980E08AC4416FBE3EE493CD45BBF66

image

SHA256: A0B7B5F58352ED7E017365E5A22921CEF46F70833CCCC2CE200AA424BA0CFB2C

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\~ileZilla.tmp
MD5: 85BDEA1740BC8625878A9301C1A51852

image

SHA256: 89D40A49886980D7F405B10C27BFAD5FB5980C3FD71C471CC40F391889E6E381

C:\Program Files\FileZilla FTP Client\resources\default\480x480\treeitem_collapsed_dark.png
MD5: E273DC1B158F4468373F96E8F7F9E5AF

image

SHA256: B7F788693DC5EB63A5DDAE21C114EE35E9E8A4629341AC5ACA1C59E6F1892AF1

C:\Program Files\FileZilla FTP Client\resources\default\480x480\sort_down_dark.png
MD5: BE55E6AFDA1D005973DBB0AA2709D20B

image

SHA256: D42AAD945404D1A5F66A168F6AF3A89D34BE856FCA13911EE0A5D3DA8AB7B084

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\compare.png
MD5: 93A6FEEB5D70E5C349E8618C8AA90E4E

image

SHA256: 8E6AF6C59A9C1FF2F7D0CB805C48570EA891E69E2A64092B187ABADA9023A3ED

C:\Program Files\FileZilla FTP Client\resources\default\480x480\speedlimits.png
MD5: B5AA21C3F5D77D5D55982FED0F46E12E

image

SHA256: 6322EF3887B166933AD21A5B69C54F4F1C02D822C047DE51A2AA7FF89F73A5ED

C:\Program Files\FileZilla FTP Client\resources\default\480x480\treeitem_collapsed_light.png
MD5: D1EFC64C8D183D6304489AEACA6BFC23

image

SHA256: B4C90CB537691557A35824C335B4A41E1B877A81C748CD0F9E9180A25A8BE94F

C:\Program Files\FileZilla FTP Client\resources\default\480x480\sort_up_light.png
MD5: 10AD50B05A6AB28861B99529A9863DA9

image

SHA256: 18E3E7D585191AAAAD145740530D6941C07A8F9ECFE2177C6782969E3532BFCC

C:\Program Files\FileZilla FTP Client\resources\default\480x480\server.png
MD5: 7560335F2F31BF8300AFC5A0BDBFC3CE

image

SHA256: 981892D7FD00D58C2ED41E33BFE1CC35FDA8F66D3EA1A533063CBA3058331683

C:\Program Files\FileZilla FTP Client\resources\default\480x480\symlink.png
MD5: 8EF619E2FD6613D80CD761C5FAB62092

binarySHA256: 83031CB11E80360F430AE8CEB37BC7842C2D1738CC242E809C70F10714124265

C:\Program Files\FileZilla FTP Client\resources\default\480x480\reconnect.png
MD5: C19505C35182FBC2D2C81ED60E62926B

image

SHA256: 7CC649C7DAD1289A984A80BB144A56C8493A61114625DFBDB5B04C4EE2D30600

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\FileZilla.lnk
MD5: 9A32A6085C825B869C73C23B291E727F

image

SHA256: E0B212D8EEA521F1B08F8192A21D2DC00EE192BEDE1404859820B40532BDDED9

C:\Program Files\FileZilla FTP Client\resources\default\480x480\uploadadd.png
MD5: 7CBF8BA09C12B4EA8341BAECBD27FB2B

image

SHA256: 9F5F8BCE887033CBBA6E8E94EBE06452FE25610835CF47D04BE2FCD32BF88936

C:\Program Files\FileZilla FTP Client\resources\default\480x480\sort_up_dark.png
MD5: 083ED0AC0DB9F49D3EA62444670AF4CA

image

SHA256: 19B2D2BE74DB5FA58DAA88DA1ECD8A5F97C3353B53362A9E1AF1B5D2AC043D4E

C:\Program Files\FileZilla FTP Client\resources\default\480x480\sort_down_light.png
MD5: 06AEA9DB718477BDD66BCDA4302CE28A

image

SHA256: 66D6C15DD8E819E7B62D277AA237FF77C8C595F65582A368CBBC15427F82BFD2

C:\Program Files\FileZilla FTP Client\resources\default\480x480\synctransfer.png
MD5: 58B47F061260769A0A6B2CBECD8F1AC0

image

SHA256: 151ADA50A20E640A599481D440A048C769E0EE10F6FCA3851B143E0027C0ED76

C:\Program Files\FileZilla FTP Client\resources\default\480x480\sitemanager.png
MD5: 810967A850E0F96F44874651F649A952

image

SHA256: 75A915C0CAF149C46DF534577F1FB089FAC8CF0EFDA8FBE6115B5118942391E5

C:\Program Files\FileZilla FTP Client\resources\default\480x480\showhidden.png
MD5: BA100276E608AFDADD0DFC761506145E

2696

SHA256: 444B408A816C39E965A7C960C44C8976ED99B1EF3263088B41B6A170F3747D9C

C:\Program Files\FileZilla FTP Client\resources\default\480x480\remotetreeview.png
MD5: 3DAED236D7DF410FF02684080378572D

image

image

SHA256: 8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

25/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\default\480x480\treeitem_expanded_dark.png
MD5: 084F031857785E083227F56E67616415

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: AA4767817BFB63E9D8431E28DBFC95B3055F4239BA1805084C31380AE6289343

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\binary.png
MD5: A6A40A9CF3DBF6ED6499A8C941D18964

image

SHA256: 7F2165A969FAE9F109587CB13415D6C4C0BD10073F5AD1DA0E05DA2B30434425

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\showhidden.png
MD5: 321BAC4AF0CE6A899C144C0EC774816B

image

SHA256: FBEE54092BFA8C72A0BC1532871496F64C8FE640694E6E7354A64539D205BEA2

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\reconnect.png
MD5: 5ED842E1BB5700A572CF1FBF603E4350

image

SHA256: FE57D88CE901EE23D92D6D9164F0A6718B9769163301B539F29DEA63268247B0

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\folderup.png
MD5: 6ECDB906CA7863F3A8FB3BE9C4D960B7

image

SHA256: E80E754EC1E92B8E65A13AEA3A07DA8556636C97614944B16ED7317B137E4D37

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\folder.png
MD5: 2D79689C872BC20DFD4B0538860DEAB9

image

SHA256: 8B58B62E6465CAB168A8F473A888D09C180EE6E54EFA521D3C022085F65D8923

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\file.png
MD5: A6ED3AAC6C8F8496DDB28B97EA88044A

image

SHA256: 1256AB2DCA022092AAA9CBFEDFC35944492614B971EA9D018A994F20F5FF5FAB

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\bookmarks.png
MD5: 00AF3E61EE2B3FA856AD1B3FAFF8FF8B

image

SHA256: 4D65E085E8F3E4E287848478A0AEC2AEB2FCFA657C54967726D95DD9DC184641

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\help.png
MD5: 4D548B980D125421C96220890B963053

image

SHA256: D8699A29870DA50582B088AE2E69B4E360988C24A294025B023A6D71E3267F69

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\downloadadd.png
MD5: 5FD0886A61D5B2141ECA5630F5617C56

image

SHA256: 922757556A97089AFDF0F27EC5BD7AA8D805344FE296EA1106E17E98CF1862E3

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\localtreeview.png
MD5: FBE18E0818E5E9C3558423C1AEEF1DF5

image

SHA256: 504EF10274474F61314ACB86A21EDBF6EC6D7C7BD5EB18ABE380A472D3CC5E58

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\symlink.png
MD5: BB02D9D5C7681D0C0B6D69B4C9D7B488

image

SHA256: 1B94BD92D4DDE13738C9CFB8CFF9F39A02208888C7D665336E2AA6274E0A8A2A

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\find.png
MD5: 9E25F52FFB35D68F867EE5F3C534F2FE

image

SHA256: 8F49F72F69E489BC19429141CFFE2F4DD55A2E249F87874377B662E6303D375D

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\lock.png
MD5: DA558196C46B839619A80EE4E98BE91D

image

SHA256: F613F0A904B7720813DB8B4C130D2E0ACD7B64D9FD0B4D6F2D36CB96839B69E8

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\download.png
MD5: 83FE2C7E0C844CC65CB233A4ACF48E42

executable

SHA256: E9E1BA410636698D666B328EEA71346B8287248D262E44DA07CE8B5FA24C5E5F

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\filter.png
MD5: 2D4888761F80A01D16A11D2551171731

binarySHA256: 3B1B5C8A14EDC00C48558DF2CB11342316FE87A6402DAAED6CFC070170B4F921

C:\Users\admin\AppData\Local\Temp\nsw954E.tmp\nsis_appid.dll
MD5: 19071761E91C43C115A16B52458869B7

image

SHA256: 8D2D5DD229B5B47F0C48C4128F1A715C1A0BD357C7DBBD65F338A2A8D681C327

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\Uninstall.lnk
MD5: 16AE50FF9053CA1E7327CAE7FAABF526

image

SHA256: A37885C0F5116A56D8C0FA7F74F07ED8171A4F027012DA158E5D82D465F2698A

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\disconnect.png
MD5: A621D469319033B95EFE33E25B1295A7

image

SHA256: 90BF623710CEBBC06AB764E25ED74F6189F3E6B279C75C7EB5C69E8564F0B1E7

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\folderback.png
MD5: D5372147FC21AD2EDFA1667101CD8C5D

image

SHA256: CB66227AB907DF6BB3F09E238CB818EBF11C240879E361C57BAA41834A310CF9

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\ascii.png
MD5: 349633C4CDC29C02CB34E8B605400B8A

image

SHA256: 8B35072F21559F3175583B2F5A90C578DD8583C735D6108657C163ED21813409

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\logview.png
MD5: 5C0F552147EAA7DE4CBA4F81FD5A18CC

binarySHA256: 83031CB11E80360F430AE8CEB37BC7842C2D1738CC242E809C70F10714124265

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\cancel.png
MD5: FBC5D88D9F0E29B6ACE7B88109308632

image

SHA256: FF847AD75181DD4C0A350B43741C5CC6D94258A323A675E406AFDD909F0AE31D

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\FileZilla.lnk~RF10c3de.TMP
MD5: 9A32A6085C825B869C73C23B291E727F

image

SHA256: E45294341BE154EC935A1F317FA7363535BA594E9EDC02DCF7B7EEB649596D40

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\auto.png
MD5: 434C26E5752C7A86ECA4D6F8452F4ECB

2696

SHA256: 3C1EFCAA6B3776634606940D6D4B68F1F52C75D72B66260946BC559961282535

C:\Program Files\FileZilla FTP Client\resources\default\480x480\treeitem_expanded_light.png
MD5: 511A92EF28D25E6EE856F9326D7A9549

image

image

SHA256: 2362E457D25CD18A76A3B8CA564AD4BAAD8E2A7EB89D4F8F9430602BF49A6308

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

26/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\compare.png
MD5: 6938C0E57B9071E48BB810C6C83A0D30

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: D91D9890D112C0D7C2D178572A5ABAF29A954011E2FD1E9ADC57EB7B31F7B5D2

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\cancel.png
MD5: B0EE00074CB9D0A3DA4672C658FC88A5

image

SHA256: DD0C339CA4DB44CC41EEC349950A68F994FBB7D15C51CFE5F2BD6A61437F3BFC

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\disconnect.png
MD5: A2F3344E4EE0B29493AC0B8A91D9D901

image

SHA256: CE8EDA54D26DDB11D08C134AD97AC3DFE3CA06EB5AA2897F15DCFAE2A6699C07

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\refresh.png
MD5: 802F4C28CDF440B5A9804A815783ACB3

image

SHA256: 3DA003ED224A867F683B533B4651901E48F1154E1007F2FF48C8D0D31BABF191

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\filter.png
MD5: FB2FDC4B0D0837F0F0CFA7284D9A0327

image

SHA256: 18280E6B773663D224D83F90749BE9A6E7B31D697C9C64EC24140A1A5CA5706F

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\auto.png
MD5: 0E1DF805D31BCBDB1A9B06D7427FC7A4

image

SHA256: CC9DCD7CC4CF015FC4CFD777494391A32A46A5BA7BAE71EEEEBF0E0F47634D36

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\help.png
MD5: 6B0D048126E4DBE97BC6A80BE67ABD00

image

SHA256: D2A2EFB6F4F3FAFBDCB6BB91975C69D90000F9DE16DC7C74EA197534074C60D8

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\showhidden.png
MD5: 9ABC44426E996935DBF2EE24602668C4

image

SHA256: 0EB389A2CC721FC85368286409AE1E277CF885A910591EF30170FA60A0742AF6

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\file.png
MD5: 1FFF5A25310A2F0E9AADF07D6DBF55B3

image

SHA256: 04016DFB34D195D077E8A6FF5BAAC808194B036F78280F07185FC2663352E414

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\folderback.png
MD5: D47E44124D8496F65F1839BD33D1983F

image

SHA256: C2E0F4D177FB49067CAB48B0FD1975AE26644BF9DAE5BAEB110C988B8C596521

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\downloadadd.png
MD5: 454C4F6D1F553429CCEC09E6CB696BC3

image

SHA256: 71F84B897ADA3B015FDB5582CC8FED63053799E4C897CA5B8A4040B7C2C40D7C

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\synchronize.png
MD5: 3FC22CDF6513A6A85C9447D2A1A032A1

image

SHA256: 9FE376C420D461C5E67500510E38E8533E3C60A91F42BEBA85F0AD8E178A52B5

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\upload.png
MD5: 66F6645979AC4E573797BA684B82A6F1

image

SHA256: 5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\server.png
MD5: 2578435CD4F1B2703C38785A361D79F6

image

SHA256: 6A1AC4F6C4C87DEBE4A40E62D153405A2B686BD9A79EC50CD15C5E118C04A200

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\bookmarks.png
MD5: 5A9DACDC3B1A421121F7FF5588C1D093

image

SHA256: C1A277D56033288A6C4EA17AB3757410D2CFC030D35F8C903A2C5F2EE9D93D70

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\folder.png
MD5: C5E55C44BA8E4F7B653D45AEC140962A

image

SHA256: 5F859219D5749258CB921C266BDE4A25825BA3EE36A7606C9904695CDBAF4990

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\ascii.png
MD5: 8937AE02C0F26EB8444864BC6EC61BA7

image

SHA256: 0A39CE70BF4105CFAEC872030221302BE6ED16F25D44D5ABAE668FF9FF7BC931

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\bookmark.png
MD5: 5A9DACDC3B1A421121F7FF5588C1D093

image

SHA256: A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\uploadadd.png
MD5: D48ABFBB9729A45D99D88839CBF41FF0

image

SHA256: 9A6E19A11B938FF5B28D10E880DC3F8BC0F6B09B97CAC3A82DF6AF3737D16250

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\speedlimits.png
MD5: A1C73D5A053CB0DE1E50563C9FCD30D3

image

SHA256: F77E5F30AC9CACD3C181706F85D7613B10757A80CDB296BC18B8583A0923F891

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\remotetreeview.png
MD5: 9B40B36993E7737C5699ED6E2F469752

image

SHA256: 3671A40156A7D5D396A40001DDE65CAAA924119115229549487EAC626AA31DB1

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\sitemanager.png
MD5: 39ED5FA30B56A0AEBB0A0EDC3609F7A8

image

SHA256: 10B4F5F8F02D9ACBF916066FD0F0F4321158E719C8DEBB9BD9FFBE5F21A8A7D8

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\folderclosed.png
MD5: B248E0142E589D10B1FB9A282464B4D9

image

SHA256: BB98173E1D739761CC52CFC654811340F943631888ECD6E3D6F67966F2868FE2

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\refresh.png
MD5: 16C03F6FAA711DDCE324AAB2E63FEEB0

image

SHA256: 0B3AE3F55208E4D443D0289C7BDFEEF0579F757257C5A91F27F1CE71C0BD968E

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\processqueue.png
MD5: A2DBD027AD3E7BFB8A1D362BA6F14A29

2696

SHA256: 239BF86478618992BC7739898C69E792632EA2B103245468D87A1E1667AF4FEC

C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\queueview.png
MD5: 895DAFDF31CF7C888160BA98ED646C3D

image

image

SHA256: 361555AC4D2A9CFB5B68E486A82AE4B37C3EA2F80ABF75DE878C74A0DE121522

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

27/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\folderup.png
MD5: 5B5BABD6635C9D179498A34C986BD4E1

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 869ACB4262F5792007870D5A6D58AD687B750F7D8DA23309BF3FFA9DAB949187

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\folderback.png
MD5: AAD279CD9C16D2B8D4B495565BD0070E

image

SHA256: 2E61CF4440B02B404E6FC16865A8604E0F1234290107CBD701660B6A0FA87294

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\download.png
MD5: 309698AFE2B6DDEF3E1117EB53D969C3

image

SHA256: 1DDDA9311F9C70C3A4029A274E9B68E252489260742B9A4B4B4D327C600E6041

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\speedlimits.png
MD5: 239A42D07D720EDA43D6532971027B49

image

SHA256: 4AD63C5835D83E818C21DF08556FEF7BC8377D2FCEFAA67553FEBF1346701C67

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\cancel.png
MD5: 6136C1F640BCC18CBBD83ECBB2B5B829

image

SHA256: 543FD0958DF96E06F411A6936BB8EDD840507F1485450A077EAA6A9091E54306

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\sitemanager.png
MD5: 713CC599592756C35BBF45B3299B42BE

image

SHA256: 24D2E3A7D7449F4A22BC2D10BEA0200EDD13D86682E86400F37D97094E1CE076

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\remotetreeview.png
MD5: 62BC6B0B63E417E0D51C129FCD62DAEF

image

SHA256: F42580F26340DF3B102BEDBE96F261532D544B9D63792EFA4823A07362BA7DFF

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\folderclosed.png
MD5: 8E64A8233007A4A79644A2886EDCBE14

image

SHA256: C74AF9EBA87BD964B7564B98C0BE0A50461B2B9DB79B817402D25BE4974A88A1

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\file.png
MD5: C8272BDFD0F4C8759C7139D62FA4CAEE

image

SHA256: A2AAFD72FB4CF2C956A8C80D780C552AEB69E5A43C0320E8F587158494650D7E

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\compare.png
MD5: C55F018B6ED23C4F94600EC41CF3C0D5

image

SHA256: 52233AA5BCE166B569A5E95B29F8915441289EEFEC50607BFD24BEDE7618523D

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\upload.png
MD5: 283073C3DA0BC7EE74EA49E810FA216C

image

SHA256: 4D08ECA18C2DF1852577174569EDC965D4125E91DF590737A7C8CCD3E291C006

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\symlink.png
MD5: 08295D744D44989A68AC6398CAD3328D

image

SHA256: A90FBCFB8449DCF5AB69DD49A7098C07F99869BFACF289B337C7756EECD4E3F0

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\queueview.png
MD5: D367B5F46042FF303993E7A1CC309435

image

SHA256: C3AE3774EBD8E3266140102F8AE4AE67BF6327F4C5B077C18D3886E945139E94

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\processqueue.png
MD5: 43E500FE466F958FAE5F9FD29EABCDC3

image

SHA256: 073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\disconnect.png
MD5: C38C1EF6EF5643A869E4D19F08066A68

image

SHA256: F699822F96B5CE2389D735C3057961D1EDBDC405073DE37F02AC15B1D82E0AE7

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\bookmarks.png
MD5: BA95DC4223903C4D79221308B9933527

image

SHA256: 0139736F1E4A1B9D867C34A97AB343DA4817E5C9B6027859A4CB16DF0443F476

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\reconnect.png
MD5: 2A9777860B33ACC15E7B54F5C0D22981

image

SHA256: F0E65D482B65359CFC9357BF0E780238888ED77253011EEEA8C3AD00B9544502

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\lock.png
MD5: 7EAB972BFFAC70AF18AD32F173C38EE0

image

SHA256: BB91A6D5EABF4AB5B376F7AD578CFE4879B19650F1DC3389903B0FE9D1C11988

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\ascii.png
MD5: F0F5758E14405F8C8BF3FCB1085FE95C

image

SHA256: 8B82DBB8E5F0E61762AA7ABDDB15BFA85567681B519BCFA5CF275F8AB6FE853E

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\binary.png
MD5: 23A970B367AD89FE98FD71BABF791094

image

SHA256: 09FF12506ED2DAE411E54C7FB479DA7F5B06177D30C79B2CEDEFC9652EE7B638

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\logview.png
MD5: 88F4D2A39C37B399396E848028C94CA8

image

SHA256: 1D2FB812EF1899E9BEE80BA138E818EDA6EB75E48CFE25E1262010779E4EB885

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\server.png
MD5: 1B60EB7C2906BD7BE68F834065CE39C1

image

SHA256: E581D22A48751C063B1A91A2587A5E785CF1BEA2379D0EA55CB337560991E65E

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\localtreeview.png
MD5: C48D1C49C7A6D89ABD08C8F7A9F78E1C

image

SHA256: B79FA30E18264EBB5B1CBE23252342C5123E91D3A13E4D66323A40E6B8CBAD4C

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\find.png
MD5: 6E77EA3192EA5B94D370F8F842B192F1

image

SHA256: 213CD61636652F4F97CC5E40DE29852F56804B4D952163DF22153F79FEA6ABFB

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\folderclosed.png
MD5: 9685762A4B5F435224BD488843F715D7

2696

SHA256: 039733DD7BDEBDADD267A56A5DAC00E973CF38F44BB7E8E460B5DC44D4918501

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\download.png
MD5: 7BD1094596464BC3091D9AA2E171D530

image

image

SHA256: 7E5DF7EDB5AC19FF5B373193C0F3779637A8197FFC5CBE81EA39167430309794

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

28/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\bookmark.png
MD5: BA95DC4223903C4D79221308B9933527

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 1D1E8B9203A09D2BFEA82D68CB28C5092C602872DD08F470B2EB1D15B0B4AE2D

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\uploadadd.png
MD5: 83A1907B8C025A93348079A25EB689C2

image

SHA256: DE598608E5ECC148A61434267BC9A08C2FF36DD24AE64D0D1FE895F4147DFF3A

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\speedlimits.png
MD5: 0DDD43DDF579002F9163888176D02CD2

image

SHA256: 963FBC54B22B6BF45F6815699DC3309F101A80AA6F5A309DDDBB6E0B652BFC98

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\sitemanager.png
MD5: A556BA848F4C875F1DA4DE20BE1C9C82

image

SHA256: F8AC90F8CE2F520A1FDE4660652AE9BBAAF3FD2BD5688120C3D23196C65DB6CA

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\synchronize.png
MD5: E0B07495846284FD7B641BDF4BF2B589

image

SHA256: 31CB3F50B32D107ED709E227D4983897E9C4A9EC0BF6C30DEFCB3C4C32125C47

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\symlink.png
MD5: 205E3AF9DD4D57B8C20A2C64C76858ED

image

SHA256: 6072651A62E89333C4F9C8135E9DEBD5E9F4BF8492964C1C9B85239C2DAA1561

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\upload.png
MD5: 020C44F480B87CE1F3EA678741B65539

image

SHA256: D774BA8CE3FFE911DC9A3C235B58B73199DA930D3C7E72664F6C3C4462BD455C

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\reconnect.png
MD5: CB903BCAA781B39524043E771629B1CC

image

SHA256: 49FD712F53751F8B0F124CB5B83C0EA48E2E279EB4B544CDA01ECCA03686AF09

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\showhidden.png
MD5: 6F6A4F0371895B25975608FD5C57C44B

image

SHA256: A450278FF8D5DB0EB5A705E9DB979CF6C76E4103ED561B35778B6BD5D6D04574

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\refresh.png
MD5: 785F5D73E9E92E8206AEB170BEDC0AB1

image

SHA256: 019B044CADAC109696C2C21F742125406039E27FDE582156CDCBE54C0F0C964D

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\server.png
MD5: 76E98F56F5327E70852A7D5765D9B1DE

image

SHA256: FD48956A0EC43D12B3E6672F551D64DD0C1A50661B3C942AE2C92F1C4CFDFDE4

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\remotetreeview.png
MD5: 65EB2BB0526D972D020B025D5D34A386

image

SHA256: C8A8DD1550497C1AF893F987FC4F7474FC786CD106F427BFEA45119585C05F26

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\queueview.png
MD5: 1BF26B8AE1745420322A8F53602CDE98

image

SHA256: 7578FE340FAF90D1B816A62DB9BA172B8F8C89807DBA403499859FC5F5FCD665

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\lock.png
MD5: 178717849AFEAA3CC9F6609E85599D3A

image

SHA256: 53A802EE16C72B7E5F82A5C5B70EB44B6428F2B4751FD282DCA08733A51159CC

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\help.png
MD5: 1060C960DA64CD56FAD45F93A518E61E

image

SHA256: 5B7DB20B2E748D94FCFFCA77DB0D82378702A16889FBC69BDC3EDEBED8FBCB51

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\folderup.png
MD5: C0942E80E6096D2FBEE61770401FC47B

image

SHA256: 641DAD2CA989390408618D30137422CA5455B874D794C3BD0DE361F150003549

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\filter.png
MD5: A8CAF932ED171295A67BEEB2EEBC7B93

image

SHA256: F5B3CC02279C119BFC0A40D461C0F49C089F7B826DD288E841D26D918D2464D5

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\downloadadd.png
MD5: 5C23C4F4A5BA59F1D3FA273AB1A7C13D

image

SHA256: 225D7824698CFFCF5C909356AAB0E825A0B6B0C68CD839505EFD0E37440CB22E

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\folder.png
MD5: 4631391B6F8FA1B0BFF28FC2F675F35B

image

SHA256: A921F04A8C9B9C28A51372939A5074895B507DD4FD4BB7AED9C1B08780440EA2

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\processqueue.png
MD5: 02B8F7AD4757D634DD02AD99C5FA51D7

image

SHA256: 5987428EFEC9E5B470A37DE7EA85F190C8C761EACC5C11B9A70F7D8FEC212E19

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\localtreeview.png
MD5: F224EBF437ED8CFBCB9FE5405866C9F1

image

SHA256: F52C6A7A9F0E0985ACA052C7B24809050C389C9DBE1340A604EB003E8AFA8856

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\logview.png
MD5: 07FDA58F24AF0B428458056D5720ECA9

image

SHA256: 095DD0FBAD7491167D397DDF6441931D2CB5A084FAA223BD136D759380778BCA

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\synchronize.png
MD5: F7B283632AA3E62BDAD4C1B435F93F26

image

SHA256: 84C53D562B5D1220C722EB128F2CFD6D861114188851E8BA76E8B3811AB6A35B

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\auto.png
MD5: 924347274EBA9CBF4B63FC26726A1D8B

image

SHA256: CD779BEC0F09E1C7A2CC61E17A0ED6885A3088F44CEF8AE48BBAA0EB0DB8B286

C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\uploadadd.png
MD5: C2DA077B823D446D6AB5F3AA63BB427F

2696

SHA256: 073A415017A07653662CA8D62A23EC8B96FE0A306225DEEE608BD4922E5C89CC

C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\find.png
MD5: 0FE36310805B6D56D29151678759786E

image

image

SHA256: 0AF2E5DB00AAE887A3854B5575502B27B6EF16B6693DB2EA427FA69D15D49837

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

29/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\classic\theme.xml
MD5: 3FE381E8906640CC0CFE3AA44C32477E

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 8A3B48F221FD4D5CD4376968B4B28BBBCFF254A4EB3632F656DEF088E2BDE023

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\speedlimits.png
MD5: A1C73D5A053CB0DE1E50563C9FCD30D3

image

SHA256: C9691E19B1D819764731085B45D7FC755D6EE5159D051A70238F5BC8B10F8EDB

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\symlink.png
MD5: E872DF7FA5DD21588A72F76200C20816

image

SHA256: 8FC76E8D13B0F5C554F28872907F804425F9A833D8AA4277E104B19839A0D04B

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\refresh.png
MD5: CF546B0EECBA2FE00DB8E684DD5D188C

image

SHA256: D6DEB4EA6594DB052C166BED17924D5C8ED402E055609C4141DE1A66275C5C4D

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\server.png
MD5: 2AE57E91F5E79B79A5FB3A3DAB0941C9

image

SHA256: 69E8A527253DD38DAEC908AD74F3AD24A7BF5E29F0AFD1E5E7A89F7CE1ED6AAD

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\sitemanager.png
MD5: 9CD1CF88890AF5DFBF98BA34629FB846

image

SHA256: 90BCA1916A70407BE7FB28666AC1F28CBD9113EA1E2F8A5E471AD116CE741CDA

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\processqueue.png
MD5: 16712A5C7C7E89DB36FA205315F900DD

image

SHA256: 8101A4842D2688CAE24D1CB12BBA6F23E265E3AFDBBF713EA13CBF1A28BA3D6D

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\logview.png
MD5: C41627853F97292EED3C268271BFBC03

image

SHA256: 35A9435E2D94F76B78B5519EDE1383CAE18205996F628504325A39314BE0AD8F

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\reconnect.png
MD5: 3040CFFEDC34A0183C4183AC0C8F8FB0

image

SHA256: 59EFD19F7C4A4332BCED0F51EB997D283589BA57CFB3DCF7E4678C02E254E0C0

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\lock.png
MD5: A6EF7A770F2A3F26988F6AFE917DF8FD

image

SHA256: 9437690465658A81FB5FAEB851D189704D744E6747AB6BB0B939654E582600B1

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\queueview.png
MD5: A64022375CC978969CB46B4F775F86B4

image

SHA256: 92CAEF64BA5E710A398E7A929988512396955C9D6C141D887CA655C696620EEB

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\localtreeview.png
MD5: BD5ED94432755D841D9A9B1C6883342D

image

SHA256: 365DAAF42471778B2A53A70EB9A535D9E0D586A1CDAC7694984BFBA4F27079A6

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\folderclosed.png
MD5: 3E39A240C29CCE9B942AA4741BDA3848

image

SHA256: A6E11C733726B32BFA967242C04B916BB4D4B31F1B3D348D8EF67C5A64BE183C

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\folder.png
MD5: CD9F4139C278266D430ACA09E4BD0785

image

SHA256: 878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\filter.png
MD5: D2532067959BB2DB3A6EDC469AF4F114

image

SHA256: 6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\find.png
MD5: 67011F382FD217C10690AE63599E3D34

image

SHA256: D6348FA61CDD5CA0118609D8690F3451AF8B2BD80012E02CED2307FD74A273D1

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\downloadadd.png
MD5: 806DC11465F984DF1BB17F449B626AFE

image

SHA256: 595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\file.png
MD5: BDB31C0053525F014B142A7FE375E15B

image

SHA256: C26F93A095D5474D349E6EA60F474AE71457C34944B7538567F7886DFEB05510

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\download.png
MD5: 1F9145F1B12133F3AC3D5F66DAFC0F15

image

SHA256: DE2D0FFB20682B52542772580E766A112825E308E21F806996F1936C2A9B3D15

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\disconnect.png
MD5: C085C91B1497549AC3031B9403274E70

image

SHA256: 188A49C693FBF3495B5DF7580E0E4F7856CACB3D6A0D57251125AA883D894D54

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\compare.png
MD5: DFBB80F1017873587B8E08802610A3BE

image

SHA256: 4DE4E8E49009B462494AB9065AFA606A5BFEED945B6B0B4F35A4F4C92FC52F04

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\cancel.png
MD5: BEAC4629ABB60901283963C2904F8CFA

image

SHA256: 3F4E4CA112F41B673FE236A8792E3056899AF6A503ABEC488DEAB2128595892B

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\binary.png
MD5: ACD5B09B303ABB67E1333FCFEE30D30F

image

SHA256: 10525319023C17576553C8E8BBF9DDE041202F7F3CFC9EA53FB8DBB5990F14DB

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\ascii.png
MD5: 97407AE8A1175FCB69A574DF8FE77F04

image

SHA256: 5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\auto.png
MD5: D998D4123DD00B840C51370798733B2C

2696

SHA256: D390CAA668232F9E52AE01E77081BD26A93FEC0BC0718DEFC2671DC6DCE317E4

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\bookmark.png
MD5: 481C496B10838B0985C58162733C0F15

xml

image

SHA256: A7DCF0626F73A1FAABD673DD740E26E0DA5A6B50A7DF338F8E789CBA58743099

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

30/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\remotetreeview.png
MD5: D6F0AE8BCBDCA7871BC5EEF3138B7074

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 13AF05EED207A88E66D98DBBF58062CAA0F940BDB31A8A761D498B60D3CE744C

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\refresh.png
MD5: D911483C65C7556F06D90057BDB5AD6C

image

SHA256: B2B5A8102F51DF20748227CBFF5A9E12C788EE71F74628A97223D2A8F4A808C7

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\reconnect.png
MD5: A5DBA22BD5B2DB3D7CB458975836EA6B

image

SHA256: F85E2C8403D2D89A5A93455C4D1E1DDE6EFA0F23A43A1AD3E0DECA8514AE973B

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\queueview.png
MD5: 0A26CE3CE82CEBF58455C26A9CC8C4E6

image

SHA256: F2FFF7111CF4D8FB6282F621D712A6CB766F8E1D88F06B2695DE5F5148EFAD69

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\processqueue.png
MD5: D0351FFBFCE212DF95D53C7E32C20DB2

image

SHA256: EBDF04DCF41ECF5641AACCE965275D2C4C8CA473E2300E986BDC9ACF9E9A9151

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\localtreeview.png
MD5: 8F42C78DC1738E14792FEB10E6F1DBB8

image

SHA256: B1FACD3651A831DB0B013C41C68A287FA0BEA4C871D2A19DDC63451F22391209

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\help.png
MD5: 38F7CDE82901278A2140FBEF28BABE4A

image

SHA256: B1D5DBB7AAD95066A0840E603F82EB7F29D09439CF5A148DF30E3CD0D5527B95

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\logview.png
MD5: 0B2ABEB72B48D34FDB051107A873F246

image

SHA256: E7916A860DDCB853922631780B95B9E0A4A017EB96C4191B404C56DFE7BD1DDE

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\folderback.png
MD5: D024C1DAD2299A850DD999210210CA53

image

SHA256: 4BC9F7B25AFCB1E34308CC4DCC21E70AB139648DC8526FB06100965D83CBF8E4

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\folderclosed.png
MD5: E69DDF7AF6005A76C8A177C0B3556FD3

image

SHA256: B1EAD50B331051C8BD05834B9F828DB981934A92850EB80AA2749337728C7258

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\folderup.png
MD5: 80FBDF824F1570176A0B6294452E5D93

image

SHA256: BFAEA2A65007C0EAE72F778E471D7F024CC00469FF0F087BCEAE338DA190717F

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\folder.png
MD5: 0BB0DE6B3E559B082358BAA36963D09C

image

SHA256: 595C06A53B6C8174B2E2D8F6ECE83418A3C6D92F96A833D5F50C4A32C0A93BA1

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\disconnect.png
MD5: 66701BD8596312113E0042F0D730B45F

image

SHA256: ED964193D53FFEAF2EF8B45B61ED04084C46AEB74BA1DD614A3967EDA160CBA0C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\download.png
MD5: 1F9145F1B12133F3AC3D5F66DAFC0F15

image

SHA256: 6408D2F47E8D61039FB16701C38DCC604D3F9819FB54EE8D8B24A4F5A5A9F59F

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\file.png
MD5: B39FEB65E483D91B36EB70E0E5733F3D

image

SHA256: F7FAAF7EDE3CA7BDB0BF0D77F19FD010E59EE30B8118A700ADD8B8CF13F2506C

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\downloadadd.png
MD5: 806DC11465F984DF1BB17F449B626AFE

image

SHA256: 5A9C5658CC4B82DCDB423D580054103C6AC7A40A93ACE1D141DA70C00E51EBD1

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\compare.png
MD5: ACF0B5DD79A6E543CB868A816D3A07FE

image

SHA256: 48011CE297F5D44836D4DB4B8C37A9D17532EC69C9FD1889F78632B14902E4C8

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\bookmark.png
MD5: 481C496B10838B0985C58162733C0F15

image

SHA256: 27634804AC1D3513B661B41FA04A33AC8689E80347F2AD1A2848B25975101394

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\cancel.png
MD5: 97796311160C86A57A37E3428D8533FC

image

SHA256: 19D2E09FB051AF2E7C43A3278D534794A45AF49709DA2ADFA1089CA103F8DD53

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\auto.png
MD5: 3E33267FA0F6AB1BAA7512E44C432610

xml

SHA256: D7556C00AEA0E6CA37274EDDEE3DE2A51A0628E5CD6EDFF10AA6065053ED8AD7

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\binary.png
MD5: A54567E2436DBB522431A51C00056099

image

SHA256: 809F073C5C3B0BC82192536DD2A0D6F5B4DC18535D8B4018D0B0911558FE80F1

C:\Program Files\FileZilla FTP Client\resources\cyril\theme.xml
MD5: 071CFB68143BB24DE6C59139839E99C1

image

SHA256: 297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\ascii.png
MD5: EB40D1EB8B7425F6996ADD48915746BD

image

SHA256: 83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\uploadadd.png
MD5: A30DF9F34DC7814120BA50F5DD0CE35A

image

SHA256: C42A4DC0C115E109CB4A77B845CD1134AFFAD6117CF34B2DCDF107F3ADC288E3

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\upload.png
MD5: 86616009BCB357544B0056012333E23B

2696

SHA256: AD7A6C6E5D25F5400B17B5A7A920C76C4BC2C735FCE9D7681D8E35A66993228A

C:\Program Files\FileZilla FTP Client\resources\classic\16x16\synchronize.png
MD5: 64A1BAB17BA5EDFE9261537E63AFA507

image

image

SHA256: 1260048FCF3FD414BD68C61EAF281A3746C4CF29AF0DFBAC1BA6E0290C18F150

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

31/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\remotetreeview.png
MD5: 0E2BFFD4BDFE5A992268C493AD21C92C

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: E6A7CC290CD9A878AFC7412C50A713934DBFD28DFE0ADEEA462C9E3932BBCAEEC:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\lock.png
MD5: 625804B0DA8E79E3E31B5A664E413EEB

image

SHA256: F1029BE550D5258055138D707017054C7F3B2D648D6A222BD6C9F5E8BDB51197

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\localtreeview.png
MD5: 91393DDC9493DD4F714DA035E76AE8DF

image

SHA256: BEBCCE52E3E8F61DAED6BB5D9C807BED44A148B5E18E41D28CA917D70C59AD1D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\leds.png
MD5: A34C5EE7AD964372622803F63F0B60A2

image

SHA256: 0BB90CC2902C9A9B9386137864267E40B44507C745D7A2347579A671E8B9FADC

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\folderclosed.png
MD5: 594D5849BCEE210458D71A7E73972F04

image

SHA256: 8E20DCA41C350BD2081603DDF55DD42310F15BCA2F13FECD1E0BAEB76431A277

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\folder.png
MD5: 7C3F5DFB8E30E246F247003254BE0AA4

image

SHA256: 6AD756F2BA1526759F04C778BC706F8E8FCCA1D911EDBCE572CB3981A322AB85

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\filter.png
MD5: 8C4257477AD350959B683DFCF193C8ED

image

SHA256: C33E12F993DA6C91FAC78BA3B259FF81C13C73938075E81556A823964CE66A23

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\find.png
MD5: AB8EF66EDE19BEBB12708C2366B53149

image

SHA256: 1AD78DC10FE08FD8BAC26AFD9D6DE513B3D63D141B0F8E51CB487251E9963A21

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\downloadadd.png
MD5: F639FC64785033EEB01CF56D647C001D

image

SHA256: B71CB2106CAC049EC3BB7663278EFA31C8ADCA7E898280E2A73ABA2E3EAD652F

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\file.png
MD5: 04C9BF0E976D58746509191EB544DD5C

image

SHA256: BA3354576FD955B00FA485D54C9979E563C4D6231D9EBE253F320A7B26DED29E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\download.png
MD5: 8DB82EF833AAF9D239AE3862100EF484

image

SHA256: 73B86CBB4073D7C2642FFC6A7EBD590134D11B3FAE21CC22E85378F5A2658D32

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\cancel.png
MD5: 989EAF92A59E8AF310365695629AF61C

image

SHA256: C2FF72BD759633AD8B4EE6D70C377220BA237C58AE67EBA0C129693C4FF6D183

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\disconnect.png
MD5: 702E99741F314CBFD4109657B06A9AC9

image

SHA256: 142D8DF4B61AA8DE96B58AFAFFD6B9EE89ABBC882061A533777B08E023C87566

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\compare.png
MD5: F5D5C63156F9F79D0C881F3E28DEB9D2

image

SHA256: DE18C305A576CF63065F0BE9422EDCCB20977EEE208FB3E79BED72F7EE7A357A

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\bookmark.png
MD5: 0598026856986DA9BC8D68C9D54DCE55

image

SHA256: 1C6F71323BB543922D8623281A390D772EF92BAF1D79083309C2E9D464CBB0CF

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\ascii.png
MD5: 1DAFC9FCAA6D1BFB1E3BA6AA8FB6E865

image

SHA256: 57BA9197221718B2CFA1655980F9DA18C63D9ADB841CCEDE61FCA577A28588FA

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\auto.png
MD5: B12CDE4CEC51BA2F84E09D9E045D257C

xml

SHA256: 41DDF7E633A3A56547933E7B58D4745BBBEA280261577358A54758B7A85E7013

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\binary.png
MD5: 6B5831512E5C666A6957FD141EA81E01

image

SHA256: 297B35A7D181F05BA6DD330DD4E39F4FEA7AD6F01A22213CE14E3CDECB164CD3

C:\Program Files\FileZilla FTP Client\resources\flatzilla\theme.xml
MD5: C9272D5C5355EBEBA772ABE9504EFF43

image

SHA256: 294163290886B12F22094C3AECD042CA203A4FFD441A7C384926FE0088FE60E5

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\uploadadd.png
MD5: A30DF9F34DC7814120BA50F5DD0CE35A

image

SHA256: 83940C38223C617478A6BE4993298CACE9A60657DCB3B48ABED9EB4892CE80BC

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\synchronize.png
MD5: 020253E72AE67390D60D7CA57FA77945

image

SHA256: F133AE3DEEEB584B6C5AB7E2FA74DFAEF9AB4C48D7F25127EA854BB14CF5C9BA

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\upload.png
MD5: 86616009BCB357544B0056012333E23B

image

SHA256: 1117E4F7B7B88E0DAEC3C27076788ED31216A5C02C7301D02312E8A3C9E4CC9B

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\showhidden.png
MD5: EBE775CC3289F84FFC82B81583CE11C9

image

SHA256: A4AF127C014532AC9DAEAB45212ABF75C2053F9641C3DF77DB1E8697D1A63247

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\sitemanager.png
MD5: 1C919B44BB21DB7B15736F380503FED3

image

SHA256: 76A825581BC97A70767B23C2B7C024DB5F2BFCFA296411ABAE2D8592EFA88D2D

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\speedlimits.png
MD5: 34C636AE220B1D3E367DFE06BAFC91E9

2696

SHA256: 5111661D61CFDA750D19E7DE4243A6A996178FBE98501C2C5C604A17FF0B67A8

C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\server.png
MD5: 65C2A73ECD3447EABF03082C934EE5F7

image

image

SHA256: 1446ADC561C5531B89543351BFCB0F925BF2023507C365340F702EE2EF0506E0

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

32/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\help.png
MD5: 26F157F55B230ACF358C0AB56B33B310

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 7D194E1E2F2C08124858BE9AD9DCAAFBE713EDE2243488308B506C2510FD130E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\help.png
MD5: 6BB536F8851BB9B09DC40C25E2CE937A

image

SHA256: 5C094635BA52273033E7E58FCE6464508E5D7FB671BBE6A0CB9C741D243CFA0C

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\find.png
MD5: C17844F31C2C465D9654EB678B8339EB

image

SHA256: C5DE1A69F932CBB7EC2F25E5D22092CA37033C1D1DCFA366E080DB9B271A6A71

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\downloadadd.png
MD5: 5F41EAC0D665C8F09FE2029CCE593372

image

SHA256: 6DBDCA9A1B77F3810634D2652C38A6327C49FF78AFD346B0B61B671B70C96AED

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\disconnect.png
MD5: 0151B253AA9748F37487150909477D10

image

SHA256: 106335897D934523FACB371122C197FE6155CF780DE1B3CB4A5A4058E7B34D74

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\filter.png
MD5: F5A5AC8F87E4E6A8D1DC6B7583D2614A

image

SHA256: 244C74E11F248FE30E324BFBDCF1EA36C8FA9C7A185940E83C7EB3F8927CCB32

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\download.png
MD5: 6EB5C63C607C3DEADF6CF144B3F82402

image

SHA256: D337EA13034EA808D6C1F42BE4E5EA548F297F4C24F617A52CEBEBD71422F2A5

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\file.png
MD5: EE6C02D4B8613DEA4746D8EBB1925488

image

SHA256: 8541E3327C66A84F2992EFCA3D3816ACF83D0595257725C65830324EFBE6B55F

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\bookmark.png
MD5: 448C9566157A6545B55BBC65EC035274

image

SHA256: 228CC19E705FCA59A99232DE6845C001AB5FC5A04815CF842A281C610B56077A

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\cancel.png
MD5: FFC4084C925A44B9A427CFACB60B0D0D

image

SHA256: 0BE651BA53E93E0D445E1B04823546140865498D506B90CAF039B2DCF9EDE48D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\compare.png
MD5: E94D9F352059F9FC26545563E046FED4

image

SHA256: B323AC62524DE6E0762AFA36232C3358979E991BCD1A94148F49CABAA6A6E9A2

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\binary.png
MD5: EE92146BF93ECB0A94122CD3C955E30D

image

SHA256: 80F945E32B6BDDBB23B5BF234DA17A8828C246D6331611A3CD0B51E4B1873174

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\auto.png
MD5: BC3780FC5B18962FEB8B65DCC502947F

image

SHA256: DBA3101B9841B204B7DD32A8120DBAD439367ABA633AEBB3672B917EF6005FC3

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\upload.png
MD5: E1A965661F46E68691390D35E366EF7A

image

SHA256: 48FFEA8EBF7AA5471B40E10EC19540550F155DB687F5BCFA12CAD1FA52A79196

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\uploadadd.png
MD5: 37AD622CB38008845D98CBE0BA8D4D68

image

SHA256: C063BDAEB8F6230E543D05E61A1A46865159A2EC4FFF230265D6D0D75FDC103C

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\ascii.png
MD5: FC4B7AAA20E1C0016CB37DA7A87B4187

image

SHA256: C2D357A18177CA549BEF2F6620593F4D3B314281123A4A1D0E9E4D23548DF75E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\synchronize.png
MD5: 100FC761A41F80BE64C52A74F64CDC93

image

SHA256: 04CF8D2BA9BA6361AA2B2CC8D1ED74DF1D1000339194D71AF568BBA3967A2E0E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\reconnect.png
MD5: CFEE3117C2DE2066E27F57CC9FD96817

image

SHA256: 14FC705B5CD6261A722C2228332695463B98A2F7FBAE97E457CF096886D07651

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\processqueue.png
MD5: 8173CF7E3B074B6EC28CC6DD45CA94F0

image

SHA256: F4D6DF9DF678C238D9CB471E79A8C1176B913574B4993ECEE83EA53F974E6885

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\speedlimits.png
MD5: D4D712A881146D80DFBD85AAB111072B

image

SHA256: AC97A63EBA30A43CE50D13779CFBD237564F282CF76D9ECAB9E0616E765181FC

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\refresh.png
MD5: CD9BAD2367655ECBF4F0C18F4F95F4EC

image

SHA256: 2F3E82E18D29078F0D04233DDF0E05AE840AF25E0983666B34DF09EDE4A72302

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\sitemanager.png
MD5: 856047460F44A3D0582F396D76367179

image

SHA256: B742D6EAA8271CD2BB0FA3B20C35188C840EC72D11DC750CE9683FB0702778E8

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\server.png
MD5: B7D268F710075D632C748655173A1E1A

image

SHA256: D2CCB02C79AE185B559C8E67F1B8C0548D8E4EC5CA3108E5A5E55E1B3A8A56EC

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\logview.png
MD5: 8E9484762E3CA06C612752B395EBCF3A

image

SHA256: 13FFB9AF847DB4E83B1D323405429919893FD6180FE0ADCE77A1B390273C1E5C

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\queueview.png
MD5: 4ED1E006F06AD3729510D7378A212ECA

2696

SHA256: 731AEF09E1554C428EF3DBB1D3ECF7889DB5B4EE680130F432DF95125E329BAF

C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\remotetreeview.png
MD5: F2D685B4359744ADBF97BF035D78F23B

image

image

SHA256: 324D6C797069BA43B0833CE66BF917CA7F91B8092EFB4A4E7CBDEF5BEBDE493A

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

33/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\folder.png
MD5: FC529382E4849ECCF70165A5D70E2F2B

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 54FE6596F5997C99501B0BB83959E25127D2A9AE39CBDD57C9AABC3527915249

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\filter.png
MD5: 5D8B8946A30BB2C937574BEEA0099799

image

SHA256: 4BAA62D7F150CEEBE6FCFCDC5723AD866FBD14F8F9812A6BD6F4D791627B020D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\download.png
MD5: 77350FB05779C6B1AF43FA9836C5ACC0

image

SHA256: 25D72CC3F67CEAE3E4761CF157333B3A856323C3869CCE90F6C19F0C5C65CB19

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\disconnect.png
MD5: 4C78D67A172724938B7912CF0243F560

image

SHA256: AFB397DB5228C74E78B2C98882716C666CD4E9C1B5678242DE47B0890ABFCE27

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\bookmark.png
MD5: B4AAFD8D37E7829359F93D87A5943790

image

SHA256: 4B8BA4D9F9CEA5AE61E705FE45DFE476AB8BB01C842325B7161A02CE29D401D3

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\compare.png
MD5: 5974610B7E07C4AD482DCE665C396D33

image

SHA256: 7FEA394F048495CF8AF39CB8E4755BDD809B83396E3120914CB528B51A2925D8

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\ascii.png
MD5: AFCA2ECBF5BADA1EB0233288A1B4E8BD

image

SHA256: 82759E6A82FE1E82BDD3722CD74A1F7ACD470061DB2AB53359A18598C0CAC5BE

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\binary.png
MD5: 96A2AB487D235858753561E2096C8746

image

SHA256: 91F02970471A42264D0C1BF9854FE48C5A3BF0DD787213F211ECB685ACC091EF

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\synchronize.png
MD5: 434F517BA9651744F02E323FB532F756

image

SHA256: 38B7CDC9E1C5F771708DBD05DC49B83C852432373DDF663C4A4F68493BA7439E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\cancel.png
MD5: 53A60FFF53A63577F011C5BA43C92D5E

image

SHA256: DA884EB12ECC8C7A4E1E1DE0896BB2C017E991EB675325AE5EC147D7AA20C975

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\uploadadd.png
MD5: 738A1CC5FB4CA61551C50378F8F300CA

image

SHA256: 6596427F5CD726826E803FF104D4083FBDAB8309CF8A8820536EE3851DF8DCDC

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\auto.png
MD5: 2A8B9ACC913021EDDFBDC2BB8C3B62A0

image

SHA256: 3901DC8F16DE446345BF86B850D467FEC9B0DCCEA282ED2C4D45B48201C59E02

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\upload.png
MD5: E4C0B2CC3A3630B0D69125D7C4146D55

image

SHA256: BDF75435E4642BA4CA958269ED9DD163F4DE4B5F09D04B667B6B090E329FF450

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\speedlimits.png
MD5: 4F7017135A468DEC89C9B0CCFE49A993

image

SHA256: 68A742F83F04F8481DC6B91C1422E866DC5AFB62B1EC50E299F03E3CECF94C74

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\remotetreeview.png
MD5: 301131E41538586B6B50B63C3F8C2B99

image

SHA256: 5CCA96991B2255836750A64F4C0011EB5891C2188E9B3D031B03F2ED5567E4B9

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\sitemanager.png
MD5: 9680A5B4290104352D298903725A8325

image

SHA256: AF68A95DA06062BB8DAC3C6CCED5E9E1FBF161DD61E19A8B624A6131A6DE0427

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\reconnect.png
MD5: FBE889615E9FFE0AC59730EB58C4E71E

image

SHA256: F3B5AFA03C7EDC495284DF9E7CDFCE7D0845DAE64B88CBB0578BE9A286C97ADE

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\server.png
MD5: 6C56C7AC973D6B891BD3CAAC98ACAA42

image

SHA256: 16CF7F6C392A2FB7927B1EBC01E7A3AF458BDF6C3DC849604A4EC805C4D4A582

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\refresh.png
MD5: 57127617C13FCC955B4C204C6C413763

image

SHA256: CDF55174EE7CB1AC6AB4F005B5FFCAB5F7A02CAAF1B12DBB1F6480FC70380644

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\logview.png
MD5: 37191ACBD970B504DB017FF511DC33EB

image

SHA256: C42D3E5C5D35BE83C587D86F81826A75D8A3CEAC1A874917A710F0A2331EC739

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\processqueue.png
MD5: BA74EF478B761BD4B154DEFFDF9265C6

image

SHA256: A6D3CA324CCD9A7CDE09F2F1FE652B4BCA2A7BB3572F746A83E03253B99FD6CA

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\queueview.png
MD5: 41CCDFDA66425EF91E665ECF9612D032

image

SHA256: 9B5D502A15760B6E6E18853C422CD88D4B0A76B977FA5E34CC6F747BF247E357

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\lock.png
MD5: 469F9922AB8B118250B9353291D3C6ED

image

SHA256: 38195DD0C38D027F9B72A5ED03D589BC34B7D7CD005A106EB830770C06DDF527

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\leds.png
MD5: F447322C7F61EFD1034741AEB8608D51

image

SHA256: 3953CCC93FA55F963A8CF997B3A4DA46590EDC7BC740D5075BD5E0D18681F7C5

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\folderclosed.png
MD5: 6A85ED30E0EFC752E16305A95EF4E849

2696

SHA256: 589CA772823495E7348CA5EA31E26BC1A0E32696AE6299815F7D1124E7235DC3

C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\localtreeview.png
MD5: F93B941291F95BBECAB8C1E53F5725CA

image

image

SHA256: 25069280D25BB2591BEACEEB66479CCE2F36C718313AF8930CFDE0BB64DF8A0D

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

34/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\file.png
MD5: 068B66A4C4B5A6F590DB1FB04C8B2E85

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 50956043E94D8A0320B7D4838149F10C9ECC920AC7998C645E0CCB25B6726546

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\auto.png
MD5: F96F2A63ECBBE7B9D8809F491FFEB21C

image

SHA256: 1300799C239A6AABD16B9F91D48E94FD243C0521E504C3408CBA3502825D3DB6

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\binary.png
MD5: 3D417650A2A0D686240CCB6EBE148985

image

SHA256: 3CD8D46168B74069292B4228D030270D3C25556A73BF273F21ED929350A5D100

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\disconnect.png
MD5: B3777D3E667C0936EF16516DFBEA708D

image

SHA256: 6D862EA747EC843AF0CFCAC450A98A503D1A9546CA2579A39A7A6C371A934601

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\file.png
MD5: CD61F1D70C3315F0C595624626E30CA1

image

SHA256: 641E3AA18B787F745646A8DCC5D127F1CEAC25B3EDD10175FF195E56F4B01B30

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\uploadadd.png
MD5: F9D1082584D7C2538D40183FE051D34F

image

SHA256: 4A266A0EAEF8540016907B4728084CB0877B93D593BA5DEA6F514680760E7108

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\ascii.png
MD5: 3FC4CB62A7CE4620823A958251A247FB

image

SHA256: 140B9AA9E5729BBBB9E85ECA5494F0A0A31D72DB184B41E140883111B3D3304D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\upload.png
MD5: 52AB93798B119CA20478CBE97A6B85C3

image

SHA256: 9D0690CB60E94BB6ECA6334356B68B1267384CB1B6A88248AA7B46A54B34C733

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\synchronize.png
MD5: 1BA91C1D13A2D292CED42FD957A5D1A5

image

SHA256: 13739929B7894139F62D67D807771C4221495AF1217BECAEF269074B2635051E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\speedlimits.png
MD5: 21723D62752E3F327181698FE3B6B33C

image

SHA256: 0A6342A748F6F0F8ABE80961E23A53C6509E5F5FE89C6B84EE73F30F5AB5C5D5

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\server.png
MD5: 3426E7498D09DD130EB4C934C2BDECAE

image

SHA256: C16895993B6319A6C38A607CAEA1CB095344AC52F59A054BF6B08186F9C8B422

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\sitemanager.png
MD5: 20D9AADC64F196C4A6F5F59940477FAD

image

SHA256: BD2C5844A0CDB51E1F47664AF9DA534427196082C6FB6705F60174AE010A8F50

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\remotetreeview.png
MD5: 56724AEAD4EF4DC66C207F27D1E18F6D

image

SHA256: EA1C9D26F6EE41713A53B2B96D5B4B6A12ECB70B966C96001BFBD014F61D8668

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\processqueue.png
MD5: EDCF58CB4674A1C184C9475EAD416077

image

SHA256: 0153D55F130FE4F8A70CB103875E4D73A7C132E20A573FE759E55A934C5A063E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\refresh.png
MD5: 7B0B19962119DE23988AA5CBE21540B4

image

SHA256: 7B840B9BF6F990940C61321345DF3F327CAE05944B02BCAAAC8E3AE815CD3952

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\lock.png
MD5: A88423CF7C371E66A49336A0874792AC

image

SHA256: 48F5BDB69B41C56EE042ECA1457AD46A004F06CB320FF3179200DB7D931BE551

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\leds.png
MD5: D1ACDC707E23F7EE928C86E5E5AEFC6F

image

SHA256: 0C01D885F5631C6728F6D2BF14B25362543F40F8848D6389C4C87E7E2BA17C27

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\folderclosed.png
MD5: EA3731B3EFD45B81ABA07F4AAEB59B25

image

SHA256: 83E16FB1C48509C8606C8EDF5D8CCF9606D799CC1FF29E23155D6B6D7D24B187

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\logview.png
MD5: 88C6CC7ED1BB843E2DF90D02A1E77BCC

image

SHA256: 2FE8B33BBEF00E5B80A9BB7605062C27EAC25F252F14883147D5DA9F7E899F34

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\help.png
MD5: 900DD3CF8073F00DDE69E14566482C23

image

SHA256: 3D1B47A135C990799040B66D9CFB1305A0C93ED5361B24DD0B9DCEB2AE7B2FD4

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\folder.png
MD5: DAB0B46E390CBC837F2A9E782DBB10B3

image

SHA256: 3D3253E71481BF0D32B8DDE24C2EFF441CD443D6B5D124A251F1AA9D222EBA5B

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\reconnect.png
MD5: E9E71E1953732D927B5EDC3122B72452

image

SHA256: 4BED7D2814E00835D8B5F8474153E0D6A0F3C4A925D2A4246C1B1D08F7A22F41

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\queueview.png
MD5: 47CA58185EFB86A3E8C52C6F0ECF08EB

image

SHA256: 798D544BF4999058189B7EC2B848ADBCEE3D8A407AC8E1322B3079C995E82773

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\localtreeview.png
MD5: B993FFA6DC32E0B71FCC7090848FD8F3

image

SHA256: 03679E8752ADAA16606C34C3AF796FE55E9629BC2B674635BC9333155CD008A2

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\downloadadd.png
MD5: 23C5C91CB1648C404F308D89F5390CA5

2696

SHA256: 66975981A4F7015B7242368B4C42E56CE08C2C9F34B2B66C9DB0E6B7D32727F5

C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\find.png
MD5: 571139604559E9727B009FC0F0A35026

image

image

SHA256: 6CDBE398FFF7D2F8F10AF52E949018CB778447872F8C0617D4688D9CD6EA3A55

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

35/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\download.png
MD5: 332D58CE0DBDFEDE64274D121764B14F

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 9192D0A199BCAE8B1B6DFEF50DB7B42EF7130EE150C7BD14D95F9D7BACA3196D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\uploadadd.png
MD5: A7B6F04ECA627B530E7FB354C5892900

xml

SHA256: FE6A9AF558557032B43792980C29A6C425F6C2162CDF4CF91721E3228D6B8116

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\ascii.png
MD5: 287F785D92FC38D925220CF93943C56F

image

SHA256: 25590743B8A8C2DA52FFBEAF993D0AC4C31F4B0BF6A5B3A7FB4F9FF8EE098914

C:\Program Files\FileZilla FTP Client\resources\lone\theme.xml
MD5: E1935C1F19C9BF407804F802F4D0E447

image

SHA256: 13BCF1EE293257E6574FF7BD93FBB52EDD581609180F7E463C8AA3CFF0F1408B

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\remotetreeview.png
MD5: 5E5864C1CCE24C7960B5D3ADF7AAD51F

image

SHA256: ED4C8B569F8CAD2FF40783F0CE8CE9D9095B1A5E124CB87040131C094B7EDD1B

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\server.png
MD5: 83EF20F610313A4652F5AC274C4ABDDD

image

SHA256: 7DD19E2D377D47C8F9985E43370DA6AD1A7ABBB26900B3269DBA6511DF518ACB

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\speedlimits.png
MD5: 01468117EF38F6C409E52E6AF4980499

image

SHA256: E8D622236EFA0521DC9061901D20E4999C77DD2847581F320C78F5DD3665F6A1

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\refresh.png
MD5: 77F2114CEE5D114FF955F70100E93E83

image

SHA256: 8E4E993FA5D35F52D91278798D3FF35182B0E284E7DC385A32847A7E62747313

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\reconnect.png
MD5: 42AA2F8AB212AE2F20C77FAB02E894D6

image

SHA256: 56B1CB2C63DE74670DB9D9823E47EBCC99DF8F067BB873D25C615818948CB0F6

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\sitemanager.png
MD5: 3074B911242301D208B68D18AD83327F

image

SHA256: A2542D8C3FD64E23FEA0CEF09BD69DAF5959CAB8DF41BB93A2F1CFB1C59019E0

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\queueview.png
MD5: 534F1574C5D441E0B5CDBFAA065E0F74

image

SHA256: 0C40122279993D27EB44FAB871F1CC3B77DB0C835F414374F721A63930F0682D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\synchronize.png
MD5: 98ED26C5379EF6C8230CEDB6A67F76F2

image

SHA256: D2CB80E80774006A574502622B7FE087FE835E12B7EAE3CBC2C7756DBD135EE8

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\logview.png
MD5: CF0BD15B312DBE7E9EB590C03BE039A0

image

SHA256: 92BC14CCDD53477D0E425845E535265CAA9A17BF520998CA88199EC763EB2FE2

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\processqueue.png
MD5: 8E29883E144B9CDAB46EA6939A9B561D

image

SHA256: 99F6E69336F2C6A6AF2B60A95C4392C81D5AA1C338D9F13AC1ACAA75D19E891A

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\lock.png
MD5: 60D8F0C9D2C780AF9EF8671CEA5B3EF0

image

SHA256: 0F6F8573DF3EADEA51A370F7E014115D6BF128E6D698C2BF197293B203C6F908

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\localtreeview.png
MD5: 4A3BB96193B345FA8CCFE1FAEBFC0BD5

image

SHA256: 0E03158440D914549E90D9859DAE04CEE8DA2CD7E7C2183438A02DFADAF14107

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\help.png
MD5: B0B42B523CAFE2271473DC75636BAE39

image

SHA256: B121263C2E0AD79FCA64F878786984952AB6EB764A3F7ED76D943B8E3026327D

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\folderclosed.png
MD5: D3CB5A8FF55B0CC0D62903282C960BC0

image

SHA256: 6732D8E506F2763B464B7496DE1F63C91355C230751D603A47B0233065056107

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\leds.png
MD5: E77DD22AE02A04794B54AC7F6756A91C

image

SHA256: 185102B4FFCDDDF54EF765C99B5C0D8CD6717B953685626263FD7017750E6204

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\find.png
MD5: 9602D5D19ECE2ED1E978BF83173CFD5E

image

SHA256: CADF696C9DE036928DA790FB32910562D7B20AA0AB5E09604566A8AC9270C0B8

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\downloadadd.png
MD5: FE226AE47525667611DC0BF2BC8F84E3

image

SHA256: 26A07FE2A258F8BD9E85CDEDA32CFD0E9BB97861F19975CEBD3D0DBC3437940E

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\cancel.png
MD5: 112F068BE3CEE29C386D56D797DE1CCD

image

SHA256: C74257338FBB21A560F1803943C47AAB25A923B9C5B6C06FB323B7674DA82091

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\filter.png
MD5: 12E35E1E47BC40C7CB960D30E2937A88

image

SHA256: 4EBD5826CA37368C3BF9C78D9C9FF58E07B7698CEEC2FC75081B396AC0448246

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\folder.png
MD5: 63EC3726F1ADB26C70DD1788DA40F5C1

image

SHA256: 11C08E4C4B75EAEE879EC71C1234564B4D3EDA0AC0CA22F5014A8B6F8123A133

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\compare.png
MD5: 8A31C63B80B52FC5985042D08BECFDC32696

SHA256: 90B3F995625461A74DA4015252F0217062646F50A79C62E1E90AD0982246E3D1

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\bookmark.png
MD5: A97E3E127BDFEABBB86A5958BC9E1943

image

image

SHA256: DACB68CF141608836A1941CA7A600CA5A2D9A532FDC2D5BA93288E5B5AF6CE5F

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

36/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\cancel.png
MD5: 5785882A04AB6AE21D14ECED3DDADD93

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: DD81A69D735DD824339B062300BC18C56F9E4AA3B3074901671AB77DBDE228C7

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\showhidden.png
MD5: A48C634409DE41185AC61958E307FFBC

image

SHA256: FEF8794F7FE34204F21CB25F0CFC78FBD2201D6A05A4E592150581A0D98DA57C

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\processqueue.png
MD5: 129B2F5BB4E320E9CF884A69C70D17B6

image

SHA256: DC206A42720B949333CCFA444CB79BA21AC897687927BD52643B4F1A7FDA49D6

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\refresh.png
MD5: 9C7E5A33EA3351DF96CA6F802EA8DA1B

image

SHA256: 592646A30752C8929AB69DA90539E9DB76394957E15401F759302299FB1CE353

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\remotetreeview.png
MD5: 86282037191DAADD1950E2E349C9DB03

image

SHA256: A37FA03767B9E4B35371A9C9879E5358E2257EBDD2A1C93A28043A8E3E2DE6C7

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\reconnect.png
MD5: 3EFD763DBD5243A9292436382AD8E4A4

image

SHA256: 2B13795B80F9092F3FFAE6E8ED409E05036670463F1062F220F352BFB2DAA2F7

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\logview.png
MD5: 76759F68EA832C7842256D82F8D309CB

image

SHA256: 6B671369C65F8819629A7A9516BF61B797D14A5523BF13781E6D7BDEA83EA542

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\server.png
MD5: 1657F37324D96E8DDAFE17C0470E4FA1

image

SHA256: 577ADDA90FBF60A98D41D59E36F93CB1BF31B22475E4A3E47E8F890068BA5461

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\queueview.png
MD5: C3B1C6B743EE75D59FDF2B3520A51A99

image

SHA256: 49FC0B57862ADFEF288D154DCDDC24564B8E588FD8E3AD93549FADCA75851243

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\folderback.png
MD5: D2822A13B177CFFB6A4AA5E9F5901AB9

image

SHA256: A3F36BCEF0BE4D07FC6DC90CD3D120045D2B1D5FDC1BE31AC018A8222F7C7435

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\folderup.png
MD5: 703552F782A5717CE26C9DAA1D515C86

image

SHA256: 468BBFB900BF78DB075230A212B8A9F996A410138CB55D7F0FD1BD89B99AF8EE

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\folderclosed.png
MD5: 44C07EE90F994CE9593EC02E5A0BC74F

image

SHA256: F84C85D94F6A3D778ACF2FAF3480DE4501114E4D0C68A5F38429E70F8CEE5C13

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\lock.png
MD5: D8919F4887B7EF96FE6AB720BFB07916

image

SHA256: 9EC8E5EFEF694B544FC8A7E5F5C9937DFECF56F450A80CA6E6D214C8D2BC9603

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\localtreeview.png
MD5: 38F2F93CA65081734AAB66870902580F

image

SHA256: 9A04046F9DCF003656ECC676AF9CD9C45B56A9FB4CFA11B882ED463C24357A9B

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\file.png
MD5: 33D473D11B06D3E2CDBBA0B46D0E1B74

image

SHA256: D099ACEFE7380030BC4B7765AAE122EA35287D787B195DEF45254C52302C2C3B

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\folder.png
MD5: 0FFFE8F4A29F40CA136728E248DD1C1E

image

SHA256: B461583348EA100C2FFA1FFF1FA6A23961EB313F9CAC1D4D29DCB4B35060CE3E

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\help.png
MD5: 21789851844E0697DD25F6FEA7F438F6

image

SHA256: E9206F2621664DC08A288D7675F3E81C66F608A2913FCA7EB6679BF447E624CC

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\filter.png
MD5: 94BDF8BA8D3EC665025B7F85517E8484

image

SHA256: AEC9DF3A2FB792A06DF6CADA76F1CBF2946C9FC22514E5052428C88DEC5BB252

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\download.png
MD5: 72577AE251F176D9E27E468B116DDF48

image

SHA256: 601B524D57E40080119435A031C0E651A83DFD00B8BC649FC42A488EAB7D60EF

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\downloadadd.png
MD5: 9BB0652E1B733849DA172C448A6F2026

image

SHA256: BFA61514A32380296F3C12B861B3A663E1018441A8AA08CF44CEE2E37C296358

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\disconnect.png
MD5: 58AD811474F09FE8D2483282A3A54D6F

image

SHA256: 13A8E8208D5936FF030683184B85C1BE3EB66DBDE32137CCA44140F7FB9E5730

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\compare.png
MD5: 6A719221BFC8F8D1EDB62FB4DE98A36A

image

SHA256: E52164809B22B8F85F61870873805A7227A4CDDB276987AABB0826361F3A1890

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\binary.png
MD5: CF888FDEE136C738F6CE18309F589CD4

image

SHA256: F81288BAB5D29831ADCF320E0E14E8B07B4933F0CC9B7BC4D46869B8590E90E5

C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\upload.png
MD5: 2EAEFBF6063C014EB0D0CB55DF1F41EC

image

SHA256: 4B9B3AA0D63BABCB0F9075194EECAB18FEE5D2D852E62A96720627AA3A5A27A8

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\bookmark.png
MD5: 90CDE1FE0183BB1D909A41AC064E0DDA

2696

SHA256: 1FC3A4B0A09BDB3020765091D18EE7877952527E9912E9879D22D2602E88B665

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\auto.png
MD5: 9821B72CFBC8649456B8D52EC5F2E171

image

image

SHA256: B28F9A3FFEB034D901FCB49FCB045F2E5C11ED45D6E871287924DDD6B18A08BB

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

37/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\synchronize.png
MD5: B09F75F68B10E5E6847E1DF05571370F

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 2D4C44B6C1016F8ED63EF686AB34BDCA44914C0080AD52A9A660127C340524A2

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\reconnect.png
MD5: 6EE1CDA983B082B09340F2F22FB6C767

image

SHA256: 734E3514D09C78A03CA2231D27CE9087610715193D8DC177AB95F6C5ACFA6EDB

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\processqueue.png
MD5: 0F77A3441E8578129A7FF4E49C81389B

image

SHA256: B86DB4F8C38598A2811BCF94EF666EE7E3F83F430C3397AE64FF526F05087276

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\logview.png
MD5: 465ACE9813FE91005360A178FF4F6123

image

SHA256: D2D67439D802E632F4C4AAF217678678760A387298C833D602157ECAF6221E71

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\localtreeview.png
MD5: DBA06AB15E6263486CE28315D0FD58DC

image

SHA256: 81EA31CC08E66F9281490C17AE19B3EE2D220B2D86C11F228724193394298CAC

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\lock.png
MD5: B2367AFA04C223B4E5932EBA393E1403

image

SHA256: 9F793D8265EBDD589ECA4095DA5234424D7191A8B2B77165DBEB0B23FD1E566B

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\help.png
MD5: E58B86105174AAC7DC9F987668A2CC55

image

SHA256: 9E1858549C0B18A8B1D71A596066CE03A9E2E6F4E64D5E2E563D14299EC0BF8C

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\folderup.png
MD5: 7BC8ADCB837D715AA95D5C5B726134FB

image

SHA256: FD794F32F1AC72EBC7DB8B53586C6111FAA30BF6EC9E115067B6D9F437E5EA62

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\folder.png
MD5: EC15FBBBD193EBBE104664EE7CE9B3C7

image

SHA256: F2248107E34D7E0AE7CD995ED1D30E97FE11DCDDA7C5A31D0E9F75CCF1D412C1

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\filter.png
MD5: 9782CC925B205531FD82F757089560CA

image

SHA256: 48CF48584A88AC33B86D201CFFD05DF6DDF3DBBCA672F8F76C572443E08CF24F

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\folderback.png
MD5: 67D308289EE1474FDCE90B41C51AEFDC

image

SHA256: 0953845EF159B739C9067D57643D180DC04B9D2ACD692DCADE599B7FE35BD85B

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\folderclosed.png
MD5: 38F3EF95D2C88E76DE8A86C2767DEDA0

image

SHA256: 1C956E14E45D41DE7F55FCE1855EF1BF04E33904AC8E4BBCF8C7D900C2731D07

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\disconnect.png
MD5: 1EFEC3BD1BD15BF4069801D03C8F187A

image

SHA256: 24FE6BF713952A9AE7D6CFACB067778B7142CAF12E5C8AF615852684F095EAB7

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\file.png
MD5: C6C23F237019311D1E9820F9A840537D

image

SHA256: 0F6082A88FBA5E8B9F31FDB35173AE83CA24CEBA4C5F8DC0740FCA5DD87ECA85

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\download.png
MD5: 1C3BA4BDB2B0BB052679BDB099D24CE0

image

SHA256: 847BF6503E2D0D2AC35CE6B81410899C94021C494CA075EB74620CA5968FEF31

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\compare.png
MD5: 6199A6543608CD62F1057EA313C73B2B

image

SHA256: C306E766C3064055AD4220698BD36AE0939BFE06E045C93B2731AE3681073BD1

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\cancel.png
MD5: 38A9D4C17DCED01B3D09A2D3ACDC6C6C

image

SHA256: F1A0E941CBB0D8F24B301AF2CC04B8B3AF013F5DA3B29AB5650814940DD49B25

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\downloadadd.png
MD5: D8F484059C6DA2B01D1BF36B8A8B5EFF

image

SHA256: FAFDBE163DAE7AE400D875A3B6C92AE108DDD864A94B368B8E0D1AADB58404C1

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\bookmark.png
MD5: 396C9DB62CA43EEE5234620E1F927C02

image

SHA256: E0D881951B2729F54E7793C0442D34EA8BA696C45E3F37B2E7AB6A5052CA87FF

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\binary.png
MD5: D14C43C45AAEE8A0555B0C101BD2069D

image

SHA256: 7289AF75F945E34C4469ED24AB2D8D2F64D835128CC67F91B366313F6EC63E6D

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\ascii.png
MD5: 7267294D33CA396D1E1138EF8FBA0733

image

SHA256: 0080E41B8DB8F6B9B8DAF50B22B0B915F52B065650D9BA648E1E95E824A07DC2

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\auto.png
MD5: 585E951EED607EFB6E3140F600540DDD

image

SHA256: 0B85A6417D6455687C2812381CB8F0B611C2C0ABDBF053D37AEDF8BF41F83CD4

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\uploadadd.png
MD5: 91FB39D65148161EA84FA5B6D807EF95

image

SHA256: B248A3D708596ADCEE5D6AFCDAB1205034A8F04E51682E5CE08C02301A5DCB06

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\upload.png
MD5: B261F25FF67480005CE97D63FA894E94

image

SHA256: 5F79E3B68AD372C7891743A6A9F4C5F260462034181ECA9DA74C7B7BCD2F2A48

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\sitemanager.png
MD5: E2AC4B4B68D1C9F8FE2B02AB77B9DBB1

2696

SHA256: F01C4325DE446566586A036A2EC1E4DA839582E81BE0985B40D51F036D90D2BD

C:\Program Files\FileZilla FTP Client\resources\lone\16x16\speedlimits.png
MD5: E9F84FBE853DD86D21EC410C10BB00F9

image

image

SHA256: 457B63EE020A89EBECBD8C2BEC4FE53763A2C13B996628F782E60798382DEAF9

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

38/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\queueview.png
MD5: 844C67E1160408699D307ADEC217F5B2

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 8BE9B0F22FE85B9679EE83E808CAEE2E2B4C009759D838F5BF4E377343326E2D

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\queueview.png
MD5: 8BD443E6CE5E87FE0785125E4A010205

image

SHA256: 18FD112C1F3EA512EBEA7AA1F8A1AAAAC1F319290565D0AB3167B33421B15783

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\reconnect.png
MD5: 22FB3B44DED101C8FAD11A7C752DDA8D

image

SHA256: C52236A3209DB62DF4BD68CD5B305C5194B0C7B0249BDC082B7327AE86E59B76

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\localtreeview.png
MD5: F2B7DA842ABDBE79311B8601C5C3C4AA

image

SHA256: 44B981A2CCBB2D1F53D98B667D103847E5D7C2B91124C01FBFB4B86CA666F633

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\folderclosed.png
MD5: E419AB77F821DDF38E96462F4CE29205

image

SHA256: 64D6AF2EB4732DE739FE438D981A0EC0E09D6BDD89BE0FA6C332A009ED0EF5E7

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\folderback.png
MD5: FFBA5ED86AA6CB1FABD91CDF29C7C818

image

SHA256: B654E469846083F157053C8CBBCEB94575AD5717A87C28D7B0D876157DBD710B

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\folder.png
MD5: 6AABE6412E6F1C85F6D72B5D4D2C3D04

image

SHA256: 0E05CFD53CD5AD24A9752CFA3E7B62532E107B5892E171264DD5EDE862BF955B

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\file.png
MD5: FA12DDD61EDC428242293516F84D1459

image

SHA256: 3E63ABEB4CAF4780D1D5B4D7FDC6FA0CBB831BA5401B543B092A1DD98DE12EF5

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\filter.png
MD5: 38C725C54639130D64B107192B0F9D73

image

SHA256: DE6CE90556D25A59EDE052F54B68E1C36B04E0C6FC34A01CA0895684471EB2EC

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\downloadadd.png
MD5: A19F6B61C0D8D767FCAC997893EC4EFB

image

SHA256: A97820FB66705BE9F2577EC9B0B91C82E611FB6FF87B58D4E430873DE9E67749

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\download.png
MD5: C65B2DE683E76F0CC41193B3DE27DA25

image

SHA256: 40908F88D2F0C55EA571FAB72A70D9D66C5DAFCD018E37A5942A070123A0E3DB

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\disconnect.png
MD5: ED4895D987F95765384883E26E97CF52

image

SHA256: CE4476801DDB21E930434A5E95DBFB633276BD47A184EEEE7F13715D17C97A4A

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\cancel.png
MD5: 6FAEA5A4CAA6BD9064007B90074FE532

image

SHA256: 2EBA5453C13F3624309326382BB28235781691C262DBF45E4B749308D254E4A6

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\compare.png
MD5: E4394CC2583E17054278BB007E8B4676

image

SHA256: 7FA7EB5416ADDA7091B6F3D460A36B4ECC0D41DAC4B867AFC4126E635FB6BA16

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\ascii.png
MD5: 5820281B66DE463951694B6B18E6185E

image

SHA256: FDC91F670A4B907C143FF18E1CCBA5868D8D71DECE8731A0694470B7176A305D

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\bookmark.png
MD5: DB7AC38CBD88E66B6D140C47AF2A0514

image

SHA256: 1732B05802AB5567B75A784D616E01673F74C454054D65B3CA980ECCB5A325D8

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\auto.png
MD5: 436024743C7DD6DA27DFEF9FB6973BC7

image

SHA256: 0E6EC88C54BBD99DCBCA7ED090B775E0EAEEC992AB20EEB1850A79A65F7E790C

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\binary.png
MD5: C1B755C20F9A313B1F5D0851CA2357D0

image

SHA256: E210FD66F470833B09196DEB999F05C4F296EF20BC24236575BC151042F163E3

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\upload.png
MD5: 890C208D968EB6C3CE0CB8267F53485C

image

SHA256: 43AE1112F6C1C7A4A3B3DB65925B421BB69D5339CDA4EC15AD31898D33285ED0

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\uploadadd.png
MD5: 3A28A1622D5191AE4B103026D995C8FF

image

SHA256: 891D70D1D77DF9691B3A0EC6E1E4A6E4703B9ECB5340E7F91D92B5033E272573

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\showhidden.png
MD5: 217FA1181DDAA3BD23CE7AAA98A36E26

image

SHA256: 38F31548EFD96187C765379F6726516AB8A5327A06D88861A5D1E5385B8721BE

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\synchronize.png
MD5: BA0F6AD63DF48313FD5338017EAC320B

image

SHA256: 1D6668E1298D6D597B25E7A694981C5657B15B82D3D51C51D420413A00B57E3A

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\speedlimits.png
MD5: F49B3220A64C71CACBD07C4982243B4A

image

SHA256: 748FC0A5B322D1D171E87D71E7DC2563485C72BD8AD0557B99D12477FAA1DDE7

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\sitemanager.png
MD5: 9A4B68DDF573F2F9FE8558E47D332134

image

SHA256: 9A80D24B7BCC958804B25376E5C39F6A085AA9023463296868DB0B9645E925A4

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\remotetreeview.png
MD5: 93656A2188798221023A385E5CEB374F

2696

SHA256: FCDB3A3A1BBBC138AF7C64A252E8FFCC5FE24AE5E36C4CD7BD4ED8E48AD33B21

C:\Program Files\FileZilla FTP Client\resources\lone\32x32\refresh.png
MD5: E9ECF626D6ABE0EA06FE28F04184D8F2

image

image

SHA256: F34C3F1F1B431F4C957B4352A5869ABBD638196FAC57B18CF8E259D88C11C370

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

39/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\logview.png
MD5: 75FC9278853F1361D2538531CBBDF467

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 9BCD4A6BF93F0BB529901FCDF52C11D32E9D34EEEADDE69CC0969FF1BCCB14F8

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\downloadadd.png
MD5: 6C1C086823111EA331268F43D06F45B9

image

SHA256: 9C062C7A4FEA4545FB69E4318616741B29207CBA0A59877074F04C87469C6D8F

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\compare.png
MD5: 62972FD79A0DE5F47F72876A8B8B2085

image

SHA256: A0B7C151A640F079ABBA849E68B84565E3E6BC91C119397CF29906C646CDE723

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\find.png
MD5: 9DF67D4F87DCF1A08ACAB597C3612846

image

SHA256: 4C82DBE6F5E908A685DB0A99777405B7313F7F78269B2E6389DB218A2B47E234

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\download.png
MD5: 5EB0F873C514DDB3AD34A73CD5BAF190

image

SHA256: C120D51344E33AFD21E3FD347CBC7C1D3439E2B6C1FC10A6B29BAF929C904EFD

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\cancel.png
MD5: 94202E205D87CA5BEE17DD254429708A

image

SHA256: 9F89DF560BEE91CC28527460E0F72B5DBB93271519BD0D8C8A967DC97EBD52BF

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\disconnect.png
MD5: 6CAD00290A05FEC073A4B2BFF0A61E91

image

SHA256: B8007C3FE22D9AB1BA1162ABF9FFCEF977EA559D7C4DEC24815BC4A57E1C9AC0

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\file.png
MD5: 603D8B4370A671D690D5D422CA94BEED

image

SHA256: ED7D1AF4F214414A0959F3F172FB4287A09FD3DAF525A2CBB35B20D0CB1EE52D

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\bookmarks.png
MD5: 5077045C5791253D61D133254D40CE0D

image

SHA256: 66F0A9E4BC950786FD81B69C2A296DEF1D39BC91E08AA67DFF42AE1FB69FC62B

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\auto.png
MD5: 07A8D183C3F4F232E309D9C223EDC582

image

SHA256: BB1230F4448E83604D0F13CFED907E76E444435B4577B3CFFBCBAF9D6F237A84

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\binary.png
MD5: B8ADB48407C71383C9EC32F725BAF04C

image

SHA256: C0D5EA62B0BAD930198D75B62A08FDD5A34B1F042EAAFF84BEADA907A0565290

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\bookmark.png
MD5: 6181E6C4639D7B0B83422B2068E8FCC8

image

SHA256: A68AF73B86B1466578841F4306D3ACCF7E354807EE9C295B3BF80A4D94BB408D

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\ascii.png
MD5: 7F3A43B9D43AE40886EF23FDAD044E5E

xml

SHA256: BF74E95FDCDCF1466CC9D45D560525FCF7CA87E687AC82885779797BC447766D

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\uploadadd.png
MD5: 72B0A7F7B84E12502744371AD1F06B8E

image

SHA256: 6191CB83840BAEEFDF9CC0B75863EDE281503497649F7FEAB93A3BCFFC35ED3D

C:\Program Files\FileZilla FTP Client\resources\minimal\theme.xml
MD5: 9635EA01558056F51261962768AE77C3

image

SHA256: 4AAFE95357E4147AEE94EE32F2B7FE9BC63EE587CDE4589BA775EB1B83D817B3

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\upload.png
MD5: 8A375BA8F9478D5DDDA1E56C5B712F43

image

SHA256: 605CD86DAD008896EE2583252C66BF6602C8F48F720A9584233EC1330071571A

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\processqueue.png
MD5: 23FB03E96EE59D6F8A4757CE5959970F

image

SHA256: 78CD3A0871C8A138863528DF4DB173014BB86EC49691D4BC771D19589FE270FC

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\synchronize.png
MD5: 5D73DDC4635BC87D88559D2507D9834E

image

SHA256: 2D9F1C42C7591532F6D182A683A97D9B23AEFB2CE6A46178BC1E5A48634BB375

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\sitemanager.png
MD5: 63F9C7BBA4EB213149B29A86BE75D8D5

image

SHA256: DEAA01CA5C552A0E8C2A8BAB044E2A680B752BF5A7296D755217B9B5AF290047

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\showhidden.png
MD5: 3E5B63CCEBBABF0C4C5E370B2F8697A4

image

SHA256: D5F1438E45C40F4C064F0A399D418B09B78858F366BFFDCD2EDB906EC4CC74D9

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\speedlimits.png
MD5: C32799EF0D36AD912646A53FF6321C4A

image

SHA256: 44F1AC82B6FD4372880C553814D84579D33DAC6B87A899957EF963B25DC35BBB

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\remotetreeview.png
MD5: 25B263DF6EB6B2D3FB2F68FD71738759

image

SHA256: 39941E1A7D07351E19435F072667A81548B7857F11A45363F516EDEB576C532C

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\folderup.png
MD5: B258DDE4C540BB7CC02E285BA60AC811

image

SHA256: 6DD5105CD1B810F2753F990438EB50FC3A59CC93DADD714AFEF9B06AB6DAC970

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\refresh.png
MD5: 7CB1973BCDE7A5F231FB826668649684

image

SHA256: 6645FB53F2195FB6B1693AEFCC5EA21EA7765C189D42A2F5D9708A300C58E07F

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\help.png
MD5: F1A152170ADF3111FACA8DBE8397AB4B

2696

SHA256: BE84A32CEF2D89E6DB8F055615F7E37B0EEC8250AA503F93B29985D573877D45

C:\Program Files\FileZilla FTP Client\resources\lone\48x48\lock.png
MD5: E4D56043A101142B29A04667A8EE1707

image

image

SHA256: 9C7C53A72AEA5646DF4A0ED9FDD9943E94FE4806B7CE76E2D3D1FFAC8F14AB88

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

40/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\folderclosed.png
MD5: 84281E2E1318A18D057378DE38937E91

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 5B7F643B59C9CEB15D6A2BE4F99783DFE881D5E228CB70DD094981CF31B2A15B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\binary.png
MD5: FA61B19B9CC28C333E3BD132472C96F6

image

SHA256: 19A88F4BF0C47CF71565E0789D1AE8E8EC6A4B47790A5ECBBB2BFB710F9A529D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\ascii.png
MD5: 87C5FFC9A15D5CDD8CD569CAF399ECCF

xml

SHA256: 2673D02AB9556121FF2ACFC2B90F1B9799C6B3554C3183D28EDC6D674B946435

C:\Program Files\FileZilla FTP Client\resources\minimal\32x32\file.png
MD5: 995DEFCB05B6B07983F430988A34A020

image

SHA256: BACED0B80BD22B31BA27C5E282F5BDA8D4F9961461DCDDF07F7FE42F731ADD6C

C:\Program Files\FileZilla FTP Client\resources\opencrystal\theme.xml
MD5: 882FFB378C599E3F75FA95790DFEC499

image

SHA256: 081507F7D6340F2F34960B82C1EEA8CC18284BCD2EB3C64DE676BB494BBFE7A3

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\auto.png
MD5: 15E2D4DC877FD021401095D683F1EDCF

image

SHA256: DFDEF00CBFE4FDE826A47733A8EACB3E141D27A649B017769923B0F0BEF7B5B2

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\uploadadd.png
MD5: A532BC7AF411B178E07C9A0AFF7A02FE

image

SHA256: BBEAC0FE83D3449CFFCBEF985600ABD8F6D87894C40F0D73887F9536C9E61501

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\remotetreeview.png
MD5: 2F61E637B813BCA9B871ECF235026B50

image

SHA256: 0A7DB44E27BF1601384E20BF80FEBE3C0908873B74E730CEACED27570E0EBEC7

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\refresh.png
MD5: 24B13549181DA2656B0FC201CCCB995C

image

SHA256: 0BCC6BFEB6C060AAE459E937585257F9606D74F3EA9849D387E403531319515C

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\showhidden.png
MD5: EE697ECCF7B40949F35206091B062423

image

SHA256: 979C2C56AE97F3E32F932ABE6D3ED2A5D09406EAF84A939AA001A70E48878880

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\synchronize.png
MD5: BB3914C0242330CAF1177D874D38ED1B

image

SHA256: 2E219AE3D40DB24218BD07BF3A4417DBA9CAF4640AAFA488F7E4C5BFFA08A047

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\speedlimits.png
MD5: CB8FE1299A47ED7990A83BAE9B3318C8

image

SHA256: 1162CB65F6D772E4332D9A01D22F5BA5CB1E44AF462F27706CB2079923B3D1F3

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\server.png
MD5: 2A6DE504BF1E7FE5E0F257C91DF8B46A

image

SHA256: 9F6F305FB9892B704BE8F3045EB026D33740A6168E94575A8F3B2BCA47A1E6E3

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\sitemanager.png
MD5: BBCA2D3CC54608BA638116EF0D874979

image

SHA256: 8A4E3397C871747968B34726470330D6C8B7A64FBDCE7230FB9D3A95E83C428A

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\upload.png
MD5: DD96FEDEAD6729D37FD1EBEA04301DCC

image

SHA256: D7AB3B1AC31E864CFE9F76A5687CBC3CE538F1D76C05C7B702AA74AB39DEF230

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\reconnect.png
MD5: FBE9EE1BEDA6A08863008F7496352E97

image

SHA256: 6E197169A68E7522122EF51E07A4593AB62C56F69B3360E961ABABC3873AEE48

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\localtreeview.png
MD5: 2510DDF07F2B9A525BA656D37DE25A9F

image

SHA256: CF6E2E84255A9D0552734C2647352CABE7202BA9EB26411EB4E8134913382E82

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\queueview.png
MD5: 075CF93A04F8FE691C4F80CC075DF4AD

image

SHA256: 99AD52EE1D5EE29AF9CD09C3EF7884453B943682E9AEB99FAFDC57C56D74A08B

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\processqueue.png
MD5: 6B267D137E6CDBB599E67DC7D3B4ED32

image

SHA256: D18E5BF43483EA1EE2B7860EA5EB5F4E90EFD0FC04BE57EF114B66B3C56E7D89

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\logview.png
MD5: 2226DCD0F25AEE9BBA5C64D0B4A8128D

image

SHA256: 1DBBB0FE6F576CE808D544A0C3A8EC066BB2C5C40B6AB5D21A994A46B256C06C

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\lock.png
MD5: F2073372D899FE4E0483E90B0653215D

image

SHA256: B1F088641A1FEC949BC505B86CB55FDEFB23D892EED6DB3D84A2A480F25C78CB

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\help.png
MD5: 368D0EECED2C75D5445879856ABF2ECA

image

SHA256: F1E76BE59DF5C0FF5D83F262E446F7C21E39C52463AFF2A7FDF8AB39B9BF7FE2

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\folder.png
MD5: BCA16103B467F279200CE0B7490028F4

image

SHA256: FBCAAC3E7380B257A536AEED385E063283E4169ADCD7B155FADCF09C1E05C230

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\folderback.png
MD5: E24D25C8AAB877F2EDE30F036195DC4C

image

SHA256: 76ED54BC79E6F2E3992483D4C18C3135A47EAC6DE8D3FC30814453A619FECF81

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\folderup.png
MD5: 1C64E432ECA60AE46C9C12C7B80ABDF0

2696

SHA256: B2083F672D8D86EBBBEC229028352BB76E330F8890B4FC0D4B9A1F8185705E76

C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\filter.png
MD5: 5F7487F77EF2E2718FDF49D70F5AA78A

image

image

SHA256: 96A7D4BEE2188BA7678CBD9538039CFE6F7753408C0505092FCBD5067084108D

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

41/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\compare.png
MD5: 76C81EEDD0279A4BD28FFCEC055C7348

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: C72217406E7F3C1BB45A5154E88376833AF99F6D288BBBD3A42C90888F4090DF

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\speedlimits.png
MD5: 42DA65F59EB24E40B497BB26C4F32BF6

image

SHA256: B9CDECDB91CF8412F80DB64042B51FF23A48C158A98502BC075887A7FEFB7C7F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\remotetreeview.png
MD5: 879AE3716290A114AC2E1DBA432EFD77

image

SHA256: B129567F65655B2133DED61F0DA9EB68330B892A282E797EC0FBE31645001482

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\showhidden.png
MD5: 19C26B4E74D39AD94B8B7F7D9712E588

image

SHA256: 32EF9005B6C120E5A314A4CA20F1F08F5F02A6584A3B4BBD2711DFD0CD359F5B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\sitemanager.png
MD5: 969D28E6AA56CA62359C57AF9D16AFE1

image

SHA256: A6122501B77A7B5C28FE876ACADE9B24A6890D2050EA34B0C8545FE92988C545

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\refresh.png
MD5: D3D1D467B8CED3D081CE9567FD21178F

image

SHA256: B90409186AD9EF894F146E2BCEFACEE818915CE14A1D4E42F75979D15323835F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\server.png
MD5: DCE954754C128B3FE51250C64309E87C

image

SHA256: 6D3046AD1956455323F8AF98BE89D4410DC3AC8234876D898F8EED9A3D3A88B6

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\queueview.png
MD5: 1395C6FCAEB46C0DF3CB8451252A08CF

image

SHA256: 9E646B0A9C11CB5106C8454D158DAABB2D2F4EC7EDB19E25D7AD7323BA68264D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\reconnect.png
MD5: B5CB370FCEC1442120FCCF82536014B9

image

SHA256: 1CCDFF248C2CD29D58C27AF1F29A18A2745AE0DC67723AC67351780EB5FE24E7

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\logview.png
MD5: 7ACE832D55D10A22C9B197C59899D06E

image

SHA256: 4A2F42067FC7CFD6CA98391195F21A8CC68F30089DE0673132C9D2F59507462D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\processqueue.png
MD5: ECBEB06605C1645E5ABD1E9E8169F95B

image

SHA256: 2617350A14E29058F2534A4497E9C1F226AD209D0CED53101393F0E3FF80EE1B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\localtreeview.png
MD5: 23C8E9C541DD306DECB5C066C759355A

image

SHA256: 6377353E0CDCE7FAAA80F66DE80787D92E0629B57326AB1658607EDF663618A3

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\folderup.png
MD5: 1A30DB573D845F5EEE2F24D78A7E2201

image

SHA256: D4CD5046A3D89A259BD0690CF76D0CF61F6A19448D77149C3AEC2C3194367275

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\folderclosed.png
MD5: F62B4DC63CE62618BD4366160EBBFC31

image

SHA256: 5589048C6E964F5FA1BB4A4FB1748F9BADB18C5A4D4F1F9D403F1CFC08E77372

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\lock.png
MD5: 681B21AB5DABED0CEF13F7D6E0F06F24

image

SHA256: C81CF883392446CEDC7776C8483885072F47496B2CAB6E66A2EC367F9FF30318

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\help.png
MD5: 98958934D95A95342F55B2C19DBBD45F

image

SHA256: 483A537A084732D6D248104222F4325E2D0550F096325B461F133D2047CE97DC

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\downloadadd.png
MD5: D9C835BDC68992D007B4C7D5F64DDA21

image

SHA256: 3D3A6FAD6F5FC366D8DD989AC06C747058298E01E5CE29A5B8CFFA650D16F9A1

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\folder.png
MD5: 6317D91C90DD11F5A148BA8600DBF490

image

SHA256: 93CFB2FEAEA7A22581BB67DE75F42450AF39805CC2F33F5DCBB0D959C81AC683

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\folderback.png
MD5: 204DDCD8271F4E9E14D653F6B55B568D

image

SHA256: EB05ECF138861F8148B4D2A9118147E5D7B4329269642D60B87638AA70C29992

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\download.png
MD5: 6F1EE5BBF770201BBCD0801B6C59BA84

image

SHA256: 878DC6515328A10C7C0B7522ACFF32FF62B065646E7A3DC916DF6F96134A3FF4

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\file.png
MD5: 52F974BAFAB1FA8618307EA8E96B83AC

image

SHA256: A62AD5301207902E9CF7071489CE5F176FAC7E012DC16A532D4FC996EB4C5E7A

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\find.png
MD5: 67011F382FD217C10690AE63599E3D34

image

SHA256: 12D03B79C33A8E2230EF691CE03FDD4B228FCB8B73B6640316CF6D2BBE77C86F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\disconnect.png
MD5: 6FDC07BC50534B83050EDAC3BF08C53F

image

SHA256: B1503DEDFCA7419511395FBA3377527BD9983DBF3F373B260A6AABBD89859DDF

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\filter.png
MD5: 8E715A8D58D1404D76CA577934514379

image

SHA256: 2EEBCEAA84E8E21A2058C81D25C88F268E027C666FE8D08AED67ABB4A9CAEED8

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\cancel.png
MD5: A7C392870E81052B555F190D48FFF8D62696

SHA256: 98DF84E579D4BEEA20950B22720641203F3ED67C4C845C7B4EC02C7551C85F9A

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\bookmark.png
MD5: 38575C4B0464A1672964FE6A30365A48

image

image

SHA256: B1D5B457E485017BBDDABE6B0C8986B58D0C064302E42EB5B7D804E65C8CCD09

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

42/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\synchronize.png
MD5: 921C942CC800D1FCE8854AFE1DA07FDD

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

3968

msedge.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: EF295ECE73C491782EB0F12997760EF4C8A01E563565AD32484CF10C035E0254

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\reconnect.png
MD5: 74B0E17AA2B3E17E8D18EF8E616946DE

image

SHA256: 35D59E268B673441363334C40F147E7A77BE6BC1CE86A849F96039F325E8BE86

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\processqueue.png
MD5: 21C3016F11243C71D1564CE32AC3CC51

image

SHA256: E55AF9AC9B510F8EB55213C69CB180AF99400D61E469CD4395AD7FF6AEF52AD8

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\logview.png
MD5: F59849839E62B9D856BA38A3B3C48758

image

SHA256: 265E50D2789EC687C8E0E4C829214EDF5C974FBB1E7E20AC7553BD7B2C64CD06

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\help.png
MD5: B911DB3473A8B5ACDB6BB97E74F5BCF8

binarySHA256: 9D6DFF71393E3A6DAD3ABB0F3C42ED3CD1E9BC154A1F24C665800566C726AC13

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\folderclosed.png
MD5: 7A4B9E47257D33B0BD8D44D686846584

image

SHA256: 7205D7DA612A07772E75219D0851AA8D54B137CC4E25F74EC8A84881123025C8

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF10d40b.TMP
MD5: 5EE7420F3ABC0DE563B51C190A2BD2D5

binarySHA256: 1333184C37CE43D596F8A06182EF7454D2521D1FDFDEBA46552911AB56776BF6

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\folderback.png
MD5: D0CE7905DDA7C98318182FCB5DB5744F

image

SHA256: AEC279CB68383C2C1BD05C64B80EF45F569E3CD0D4A9E7E412EAA5EEF52BB0ED

C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\e7c4fdc4-59a7-4135-ac3c-c7314e1daa18.tmp
MD5: 1557B15E13A7AD90D121107E2C800AE9

image

SHA256: B9ACDF5CA62EAF29A5C1789AD9EAB9AFFEDB7E7815F37C1EADEB8475466FA30B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\folder.png
MD5: B546C451FEE088F1FF783AF7A7F44B69

image

SHA256: E1FF7908B15FA5B4834614BD58A5FF9FF7D9A8C510D454241091126C7FA2A08B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\find.png
MD5: B9ED9A54C830833812738325C60CC503

image

SHA256: ECA4902B97BC5F63E7D87B4D4D9DD05423107B11B6B8033161515DDBF8A5F9F9

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\filter.png
MD5: 57AC2651B46E439F4D3A086A37D19246

image

SHA256: D9E39066B0D28A8E8041E61BFF8A5622FA02FAA544F97BDE894776867C1ED889

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\file.png
MD5: 536F485B8EDE79CE0B026B48BDE42B14

image

SHA256: 50D381430A7891765601E2A89223650BA237FC733990E767F28EAD4F26B435FB

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\download.png
MD5: 58A5F17A0A87DF5427CC17759A812CE6

image

SHA256: 41744AB44BD1B057196C7D7520DDFC13D8555CAC2309D8893BB0515AD6B4B4AB

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\downloadadd.png
MD5: A293E0AFC56E9ABC738ADBF446BF83B8

image

SHA256: B2D9AC7AA7B34D2737E0697713B3B3DFFDC4675966DD58AD2DA026EC80125588

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\compare.png
MD5: 0F35F49959B329237A5B3815DE59A78D

image

SHA256: DB40390A8621DD447131654B3D5F20FC90AD1506DA70227ADCC62B9AC26FC103

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\disconnect.png
MD5: 16A737D3C1055CC00BAFA178C43508F4

image

SHA256: 637D05BD0B454B1C019F8441DCBD1B226BCF949786EF45BEF2E70ADFC9B37133

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\auto.png
MD5: FFF6EAACF946EEEA7AC1635BF8B1C23C

image

SHA256: C9BB4563E2D58BCC4BFD559DE6CA3BF47C8B6354780676C895EFE0103FF1DED4

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\cancel.png
MD5: F9CD30014105F6D86E81961F23CFA194

image

SHA256: 33C3952751A550600AFF33060CA7D772FFF8B2A16BE8D51622DBCFF33ACA07E3

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\binary.png
MD5: 284DA2DA54F4711FD8A8137B229E33E7

image

SHA256: 6EB0C8A463C18C0E240C701ED020BA54327BC2C34B142ECF417B37B1C01F9FD9

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\ascii.png
MD5: F91571107734C4EEEF806FDEEBF80819

image

SHA256: A5FA2C20D415CE65E8ED8D1F8B0474C8243A595AA5F9101E6A4EAE2BA621E570

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\bookmark.png
MD5: 0AD600B0B6FD4B526FB11F90CBBAD530

image

SHA256: 1E30A6DDA5993A7F782CB75D2983AE9CB771D345E5CA5CD0C6102B492CAA8F51

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\uploadadd.png
MD5: A1004B232FE3EB85DBCC35C0D5EA9CE6

image

SHA256: 931D088B2DCF596A8EC89536CC022B11129F555716610B099D9C1005C205E311

C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\upload.png
MD5: F4456E8B033D43B45EB314741C412BB6

image

SHA256: EB2D4C913BF7AF9C4A2B1F6C61C99EBF50E8CC957DEFA33D0317F5AF9FE421E0

C:\Program Files\FileZilla FTP Client\resources\opencrystal\24x24\server.png
MD5: AB62AAC2744EBA861BF3703B53F4F0B1

2696

SHA256: 351740E63727868E193567F53873C10250471C003DCC8B279D00354C92CFF915

C:\Program Files\FileZilla FTP Client\resources\opencrystal\20x20\server.png
MD5: D15EFEE2EA2428E8E15D055C7D1843C3

image

image

SHA256: 5582EFF3EB69CAB38F91201DEBEDAAF242C28865F22832084E5C83B1004E771C

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

43/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\folderup.png
MD5: BD2C6CCE2735160A224CD5AECFB30456

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 56142FEFA0721D2F0E6133119E3AC1FB5D4E97C133CCDC6AC1D865D8AFF45580

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\folderup.png
MD5: D21C34B78A9DF856BD28C7C81CFA17E8

image

SHA256: 52FCE71D8475BBE35C945B87F9D65F49564DA0333D579D23F89146C5DB0B7AF3

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\file.png
MD5: 7E6FE83B01D0B919B2DB645EC751EFF2

image

SHA256: 9D2C5B388E3D82CB36BB300628E3D34DA5DB424A84F60EB3489A69D819278B7F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\folderback.png
MD5: 9845AA5006D73FC951F1EC7F8095D9B2

image

SHA256: EB5CA415E6A81F407521466186E6EC1B6A7BF3EFB0AF1C98563B301F297ED551

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\filter.png
MD5: 2D9CBCE358D8C1B66C2511A8B14CFFA4

image

SHA256: 11A2E0BE0FA54EB2AC0D86943447131A42C3BEA0FD79AC46CF71E09E49321E6F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\folder.png
MD5: D59ADE20B0C7C9B61729B0A19C451CD0

image

SHA256: E687D47C08F32FC0B1DAA5CD577F3E2112087E36DA2876EED3FABA573C7D5F3F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\compare.png
MD5: 34E1332DD39539CEEB6E50256E1A7D81

image

SHA256: 3897B0B6758F4222CAFD6BDD5BBD97EBEF8AC4D44EE8E9E263364A9A5B1275E0

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\cancel.png
MD5: A0395DBC01BC529F3876E7AE9A36C1E6

image

SHA256: C4A5E4D2DB551BBFFBBC178E74B4A0F07A18ABA964E4FA929FEDABFB90CAB0FA

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\disconnect.png
MD5: 11B5B38783CC4A49F83AFB327EC6FB28

image

SHA256: 4ED6C9B57BB6FB5609A65472EBDA9A09DC64509C16EAC5BE3FAC966ECAB10687

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\downloadadd.png
MD5: CA56E1B1AC534DC22C691DE0CF8F8BCA

image

SHA256: 44D9D04144C429AB147723EBCEC3E4B67499975671F9FD54DBFEEA65341D8ED7

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\download.png
MD5: E9F13FDE8AE115E31C3854101D5523F4

image

SHA256: 195F102BB4FB40DDC34288A1206BC82206DC9FB5F56BF313AED5CAE45DED1008

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\bookmark.png
MD5: 17F1CBB8781A293858A313B3565DAFC3

image

SHA256: FF0E8425930242427E9B5AB78DC181B65FEF6B73B54E93423E01225D412ACE3F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\binary.png
MD5: AA4957FA63DF6685B2A25EDCDE1BEF11

image

SHA256: BF2F064AA74DF7EFE0F04E1DE0A2EAD434B7375F8D27E8A660E5B172A0BDEAA9

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\auto.png
MD5: 927E70178104C85F31946F2C2647F2CB

image

SHA256: 09B06F8D4B0E21097A774FBD79B5054112A9910A08E3269DD56C35C018462157

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\ascii.png
MD5: 46297C04805EDB41238BD691E809731D

image

SHA256: F100E09709DE8DE0B8B6F219AD3C9F5FA55DE13EA9494B12977234B77DC084B5

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\uploadadd.png
MD5: D610191F5D672B3A91D648F8478475D6

image

SHA256: 4FFE31C7EABBEC8540DB9BF0AFE39CCC27C198BC3EEEBD04FAF50B1611C80C5A

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\synchronize.png
MD5: 9FD2443CD1987845102A5CA2DE3F9957

image

SHA256: 51300DC8F3578FE512B4D42A0109465D255057CAECF40E0090366D6B5D06717D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\upload.png
MD5: A73257C3ED8C413656242CA0C8ED2E70

image

SHA256: DB2724DCE56D66AB12D3D5598B582E770DBBE0564F9C5483DC16038802EEE201

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\speedlimits.png
MD5: 8F5822A03E7A8A0590DE413D73FF92E8

image

SHA256: 8F7E3776E96CF9656187F1287F0D91E4D70E088AE6CEA15FCC015BCC5B9607DE

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\sitemanager.png
MD5: 6B83C40D286D5D03B058720836FD150C

image

SHA256: EFB812C763A5BE67942400578C9F0C41F5CD96251B080F79799ECD69DBEBF483

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\remotetreeview.png
MD5: 327727EF3CB9960127601BBA2BE3BBED

image

SHA256: 122D141DA21261646A2921570EDBFBE07AA3E2ECE3528472AA03486E1084D96F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\showhidden.png
MD5: 65DE055EAC91F828A9D65D02F9E6EFF4

image

SHA256: 03310FD97655DED583501961FF7EAAD738BB4EBC34357FB3487258C13CB32666

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\refresh.png
MD5: 9F2F24382E68DEA83ADEDBF84E2AA62B

image

SHA256: C479FEE71F104A2EEC517A1ED8E63724F469E6DA68DCBDA7B10F682B0FFE4B8D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\queueview.png
MD5: A50B7A376F9C3BA09B37E2B252E9196B

image

SHA256: 43EDD30F00A02084EA4E65A270A181119550692F9E861B2A077FE1AB4C76B50D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\lock.png
MD5: 2C94D64626527D4C6481325177392F4E

2696

SHA256: 3897DCE652A4B4ADEA00304567A5C4D6BF5C37F7B1651A71C2CE7D246C6D512B

C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\localtreeview.png
MD5: 1571FBC96BE01FACD9350B9DD206ABA8

image

image

SHA256: 9A3A4493A981EC73606E54560E12B143876F91E5F1A6A78C2D490867BC5EF9AA

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

44/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\find.png
MD5: 49D929E443AEEF38D291EB7D70CDE363

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: B239406994D7B8D3E0C30E71EF6AA0E7383EB196CA28EDB4A834E9AC6F551BD9

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\downloadadd.png
MD5: E13B8306B9F5EF8F69247FA198CE998E

image

SHA256: CEDFC9DC75A9B787E17451B4086CE9040BE7A8873B8EE5A0C909CCF4B5191DFA

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\download.png
MD5: 9BAE989C1007DF6AA4EF3A90F38BF72F

image

SHA256: 95E08CD4DFE30D63CBC08367DCD60EC1032A5A31202DE9F4A1CA66B0B87EE0CD

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\compare.png
MD5: A50944541EA7D6DD25FC82F31712901B

image

SHA256: 55F9AAA59E203F9375779912431DC12E2151364CA1B79D994B11F4D9BC5DFF7C

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\cancel.png
MD5: 82816EF4221127FA3E95AD9DFD2ED927

image

SHA256: 45A3A8668CC26632295745B3FD6DB530FC4190E9957ED1DA4B454C22FE935431

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\speedlimits.png
MD5: B8791DF2018EC7E38D1719F159CB23ED

image

SHA256: BEAC754532E95667A3B2A9A47F232CC058E16ECE1D76BF6B0526FCB72FDDE3F8

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\bookmark.png
MD5: 59E972676124B8A04321E3837F0EA7F9

image

SHA256: 768E0DD28B098F82A5452BC062A231457A9A7B388E2BDEBFAC9B5A9C98A7F4D5

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\sitemanager.png
MD5: 352B058EB1BE00FB9286950A592FC5FB

image

SHA256: 230C5906C6460D660939D46AEF4A4AA474A051CB01BBFD04D74A6E2891F10551

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\uploadadd.png
MD5: 7E844E152ABF5F1AE60DFC580BFE8881

image

SHA256: 1DD1F82AF488876787108D8A9F6DAD338B8813B2DAEFD3BA2227CBF0DA2CE784

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\ascii.png
MD5: 4C966E3095C1741CAE0286EC2C35D75D

image

SHA256: 1473B63D7BC91DCE0E31FF05A1B7DA6F17E60743D812A43CA75F9F0FA12CF258

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\binary.png
MD5: 2DD096CFD1E5ADF70EB009A39246D77D

image

SHA256: 79F888E37D8993693F271762FC74B8592E02C8005C16D4D119637B2170E9D1E7

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\synchronize.png
MD5: B24FE8D9A6564FA51CC09C4D938537D9

image

SHA256: AF385720A4ED2527FBA63BE42FF9E0772C1E3AA285BDAABD1B835A1F55A491D5

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\upload.png
MD5: B14E641FF8F0DD167279AE4C888BEDC4

xml

SHA256: A1CCE1E84141E786FB6AD8FCB84F27F6729EA7635287B9F00B51A694BB4A5D1F

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\auto.png
MD5: 57695683E3438E7B488D5E9A7B8164E2

image

SHA256: FF65CB12D4940B314408E7357CAF7BAC6EEB9FC7E0954F20BAC8DC5EA97E8664

C:\Program Files\FileZilla FTP Client\resources\sun\theme.xml
MD5: 57D8662957CD827E2D97DDB53E39C4B9

image

SHA256: 53A23EA45F894152E14D51550AD53B74E27CCF31F34ACD354E2DC1FD26F69A57

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\remotetreeview.png
MD5: 7FFC8E1DE04D71113FF28DB7711E9C36

image

SHA256: 677D40A06D4AE77E15ADEAFFDB7BFCA7721AAB970C2D63EC54C010ABFA1CA415

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\showhidden.png
MD5: 47C32DD4059C0345C7B440189374C69D

image

SHA256: 65E102C9C97BC1DF82A8D749679C6CF183D10D6671F61050FC358746FCD61570

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\refresh.png
MD5: B270E3469A3B1EAB42EB388C6BEEBA3F

image

SHA256: 0A2D3761C7AA029767A7A531104D043AC350D2B750F5691D94A2337C389E5996

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\reconnect.png
MD5: A4F58BB4E259821DB6A3F302C58838B1

image

SHA256: C518463E1BBD770237BF0BE659E849C3985440B3D3D45A939D239B7074F5E07F

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\processqueue.png
MD5: 4D09C6A4B0195E4B0CF5C054E1A980C7

image

SHA256: B2431D3F074E6BE05DA61478FB0241AF9FE3FE14A3D8DFC9A9C5AE8C0581ECC7

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\queueview.png
MD5: E9B285A0C45379F0D9F851C0609C033F

image

SHA256: 72B9B5493BBB42CF1289721878DD2F60B531ABBF09C36DB68683B9DDD07CB5B9

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\logview.png
MD5: 067226F96B7AAA98A561CC444BD1E38F

image

SHA256: C6C29F35CE5D9E072CAB2B4021A635CF45AE76670B887505D1EBD032136A7C85

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\localtreeview.png
MD5: 8BE2218AE8174B8B1ACC9627F040EAC0

image

SHA256: FAA5B4774C6F868AE6A835BF5C82A43FA62C4064246A97B23E41CDE1624AC9B9

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\lock.png
MD5: 31F35396BD2C030D86964547EE6D4658

image

SHA256: 7EFEE51460BDEF793099C6E6D7B43A77EEC9D252020A2049BA8144054A554543

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\help.png
MD5: 35BC233BCD612C22DBF95ED0830E8AD0

2696

SHA256: 9DF2D9717F11EA52791C49EEDB35EC1AE2BEA7AE34690F7C459086E284AEAE9D

C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\folderclosed.png
MD5: 9924AA948E4F8A438CFAD52A7A9FB44C

image

image

SHA256: 12598DC838FCB1F85992565B4877328C2EC7E473BAD7C89762E915FA7C780700

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

45/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\filter.png
MD5: 6CFC69949D44167746C8B36E3A5443D9

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

xml

SHA256: 7D0309CFFCC39770B13F13FB18023F08E8D6B8A8FC9E9E1F7E35B02516229DDA

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\ascii.png
MD5: 242B43BEA5C3647B33C60BEAFFA30AA2

image

SHA256: C127AE5A624A015AAF9980EEABEED10D5F9D89607B00A595CA8229B76A4614B0

C:\Program Files\FileZilla FTP Client\resources\tango\theme.xml
MD5: CF05DE857D2A5E3F2C0E1B75F3221BF3

image

SHA256: 72163F387B782EC5E089D833C7E53A8735847E187EBDDDBF8195FA38C7670B40

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\auto.png
MD5: 2732C4722673E9F8B56C2DFDE9D8C370

image

SHA256: FA9CE842159DF141DF7106F21F0D9F528F79791C04DE517B6149943E4A04C3EB

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\uploadadd.png
MD5: F333E2CE6C8FAB863B826469EAE3BEE3

image

SHA256: 3CC449A439C84045108F5E1F520A4E1306675CEFEE4CC6A74F2A318F5539C5FD

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\upload.png
MD5: 1EEA7A5DC7250A180F66A51D9722F421

image

SHA256: E2298622E67F7266036058D8AEB2E282CFFF55EC50B3956F22A2BF1F6643E38E

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\synchronize.png
MD5: E2C5395E4256FA62DCDCBA24D521A751

image

SHA256: 2D1D67BE059CEC8AB770E0333599F1FD95967FCA75513345E26D352A576482DE

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\sitemanager.png
MD5: 7C2CB5B9436962404FD7CD88BAC15376

image

SHA256: E034152A92453C31DC88F1817DFA013B01661CB542E56E4A3EAB9FB6F987E5EB

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\speedlimits.png
MD5: 5B512F7C1940E6AF9E991DAD0CB28B1A

image

SHA256: B8D75F344E99A187F2DDD265E5BB76AE339255261658A9FBABC642465EC3A928

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\showhidden.png
MD5: 2B3064DC53FB2A3133B0F7D6486A8DB0

image

SHA256: AE3867E790DB34103F8A32396A8090C6D54C4392AD74527B477A18863EDE78FD

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\remotetreeview.png
MD5: BB1952637166CCD58F2771B8A240931D

image

SHA256: 23E2E406DD16C7587FBD2C2174513BE4781C4796C66ED3C7207109BCB4E60870

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\refresh.png
MD5: 1A3DF90C330E57BCB8EAE1684D809F11

image

SHA256: 721FB1358B80CC813773AD5BD63C4F895BD5BE7C1769C31E0BFE8F6FD502AFF3

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\reconnect.png
MD5: 203D5A2669348A380CE31CD46F2BB7A4

image

SHA256: 9EC6CFAAC2A53E47459E976D5584AA9A787BB4AFBA4DE8D15015795EEDD91F90

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\queueview.png
MD5: E5B9EC99980236547FB555C888093AD4

image

SHA256: 73F393E4948E67AE4690AD212791F9A9ED11EB4B71C3355AA84818081E762318

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\processqueue.png
MD5: 253A884029A69D4DE5F27A84EEA0FDA2

image

SHA256: 6AF7C916345A848AA39AE3F8E37EB89F0E9BFB042CD990B236939E33C67D7922

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\logview.png
MD5: 3FB36C132E4F5EC1D128F03EC57BF29A

image

SHA256: 7EC5BDA097B5D66FFD7ABC25C0FD6256B795CAAA969DF893D648C6A7B1E2C5CC

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\lock.png
MD5: C65E85D023A26170085149E8FC38025C

image

SHA256: 03B16F81B5CEE7340D7B222BEFE63E03AD08321838E517FD8F843A2536295A79

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\folderback.png
MD5: D96E11FF0520E77E4764FAD20C30BB54

image

SHA256: 487B170834E45A2F021BBADA62502F534D5C768FD4C9DF088698AE5BD3C3A410

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\folderclosed.png
MD5: 1B502DDB1728B98A357A62BB20C81CC1

image

SHA256: 01168B16079059729EBB8C8B1469C2B65D09BD6347D0E1D03E2C0D437748E71C

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\localtreeview.png
MD5: 0FF4E6044C03DD44EA861399939D3D52

image

SHA256: 713D47E025DFBACCB2F937C06764305674457022BA0B0B4DBFD55A049092D7F5

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\help.png
MD5: F5F0BB85D4971596CD27E2F91394CF10

image

SHA256: 24DA9AD9339D5CBFB3B7D19C6DF4C3FF6910DD22A5A0831919831A2C226AB82F

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\find.png
MD5: AC4EE9FE044C51B0362EB449DBD7833E

image

SHA256: 72582EE83B8A49F37F3C507CC750FAEC1F464BA522BF75B2D8067FA51764659C

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\folder.png
MD5: 41AEBB7C178D1149445D76AE2E8279E1

image

SHA256: E48CEC64DB8996CCC8AE60630DA8F37B2507EFDC48F94957D363F63190B7AEA6

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\folderup.png
MD5: 406F48B09D2D93776759412A436A4995

image

SHA256: ABC5391C49A4746F2E07D0DCD889BD07985BE9FF916A6DF63B44E2611C7CFAE8

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\file.png
MD5: DB8361145C750E48A71A28FECB7816A2

2696

SHA256: 20B086F67B1F3C8C7776787C01F4103C41086077A5D6BA419C2A4E5C628D28E2

C:\Program Files\FileZilla FTP Client\resources\sun\48x48\disconnect.png
MD5: E7D43FABA715A2EB24B94E1CE8A573C4

image

image

SHA256: 58761FCFEEDFE37252E0DF211429330FCCF699410512EF5EF1CDBF061C4FFB4E

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

46/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\binary.png
MD5: B5544B3F18AA63B9041FF92A9D404CE9

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\upload.png
MD5: 764E387CA1FBEE7561C35E479FAC4C55

image

SHA256: C0650E5B87B31EA35529E4A69FE379807043A540D1E965E30B90035B73ABCD4E

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\uploadadd.png
MD5: 93FA5220A2B95C60E9AFDD33B37B2789

image

SHA256: 4B9A0DFA310370DD63B9446F0DF9C7B8232BBCAB994A773C1CFC64938ECB4582

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\unknown.png
MD5: 3115823FE4FCB61CA3D2F0AF13E3060C

image

SHA256: 7D34B722C67738A9096FD29705277AC510C8D0BDE24A94DC784FEB0686AA88AD

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\synchronize.png
MD5: D98C98B92109B06FE5758865B8BD174D

image

SHA256: DBE5A7B1DC74E1BDD3075433E8E2DBEE47AD2B765944735F9B0FAA3361371472

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\sitemanager.png
MD5: C9F6766B443BE33B1E3FA0333814A1A3

image

SHA256: FE2F28AEB056A89662D53CE22F2D3C5CBCDA67CAD8892A8C3CBEE972CEA81A8A

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\server.png
MD5: 742C368BC4C19830ED2E088A253015EF

image

SHA256: 1119BF65771FB8649DBF3A2DFCA641D53F044D0BCF0B531CE77D64D709042A4C

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\remotetreeview.png
MD5: 5F9EE179D1CA0BBF31A283CB8A16149F

image

SHA256: 3DBAB7B4BCB5B6339A6A515EDB3519775BAC0D2A0E7BA6A274CF128641294589

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\refresh.png
MD5: F2FB93109620A752ABA1BEA43B80BBEC

image

SHA256: 60E035211FBA639384604778F4855330360DC715127C73624EECFE06B16DCFDB

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\reconnect.png
MD5: 4A2684BB12EA28587CEA33C2B60004D3

image

SHA256: 2DEA6DB15AB2B9813F9547F44C0B94CEB33A408E74974DCE347DFE99821D300C

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\queueview.png
MD5: 911E241C6F54A2E4D9C59B218430948E

image

SHA256: AA624FF13074B4FD2E21A4A4950AFDBE18D64522D91CF51FBE2789A384FD48B3

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\lock.png
MD5: D50FCCAE30BCC58EEDE752301EB81C2A

image

SHA256: 0A4D965E5173855649A30B45C6C26D2A8BA0A6FA2FC7B07F5FBCE42716C0AB70

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\processqueue.png
MD5: D5CE09461036A025BF5A2917231A8E6F

image

SHA256: 563A1C4A29962C073B77AED42B3A248BE35C88DDFE266E94E90444D206EEC88B

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\localtreeview.png
MD5: 2D8AFC5BAC213191EBA76678A1846817

image

SHA256: 207C59A844A6AA2101BAA4DCA5A867BF7F74A53A65912FB54649F98F5589A012

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\folderclosed.png
MD5: 2E7B092A6ED3A0AA0026DB8B89CB9642

image

SHA256: F46648E8C09114DB5C583C2C59A4EA0B6A17B8CF818B6B4275C0CC9590A51D33

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\logview.png
MD5: C5A7A7A7AB1ABCF5DBC2B9F6B13BF44A

image

SHA256: F0B6C7B80903B96E5CAACAFB25BCEEF99B8CBB033E93BD431FEB0B5DA813BAB3

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\folder.png
MD5: E38DF703A97FBAE931117568E50BF5DC

image

SHA256: B189DBB4EAFFAA19F22285EF1EB61E32736D8950080FEE814F897411567A7CDB

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\compare.png
MD5: E9793CB6E2AEB364267DC4A9D96F9915

image

SHA256: 370CA0C7C40BAD454B438ED418E11889B086329F04649D1D6A0E7D6A80C3B4B8

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\find.png
MD5: F900DAC414868E1EFD85617033BB8E3E

image

SHA256: AC96CDDC7EFB9771389DA52F4B6D5630EB938920E85890F80B851D55DFD02DB0

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\disconnect.png
MD5: FDAB37BDAC5E3A28A300D430336BBEEF

image

SHA256: 5BA196E809E58528953B99B30B7712181D75A6F1FA4185BA16D3D364E513B1AD

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\downloadadd.png
MD5: 93FA5220A2B95C60E9AFDD33B37B2789

image

SHA256: C8A393B8CD7886F30F1036B76E2CA4DA3564C7E3DD90FAD051543439AB0644B4

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\filter.png
MD5: 939666DC67B6ADE8D86A8B6567D82FD0

image

SHA256: ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\download.png
MD5: 6688AD83CD2C07A040070A4204CC405B

image

SHA256: 5A7604D79F362110357686B48598A1ECE1D2DB887F79462CDB639F6C85710618

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\file.png
MD5: B5544B3F18AA63B9041FF92A9D404CE9

image

SHA256: EDDD9D37C741484A4543CBE7D7DBEE2180E4DC61487A9E28E84524C2A7FD9E6B

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\cancel.png
MD5: 6F5D067D592A12089F3107821FE03853

2696

SHA256: ECC62EBFA9D52821E70B1D06D8F0A6FB5854CCE9838397D3F67957ACC80226BD

C:\Program Files\FileZilla FTP Client\resources\tango\16x16\bookmark.png
MD5: D3AD50547B7FF3C262C8866A60EFC222

image

image

SHA256: F689D7C0B8F8DC0C666EF49F548BCE9219F41B92E2371E69BA0A716E449A4C39

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

47/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\binary.png
MD5: F697FA0215B9CF824C67F6874E4EE0A7

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 5FA645026CFF5EC73D41EDA3C21DBDA0CA008401FBD7BA61169486E3FF462C56

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\synchronize.png
MD5: 516DC24F3EE5A9FCD4BB5997405FADD7

image

SHA256: 76BBE1F83A136633E30FCFF0A47AE88CA4D149A595FF8320AE47A53722EFD408

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\reconnect.png
MD5: 901CCE92D0A7C4DEC01BBBE6FE988C70

image

SHA256: B0074CF43CC1C0349757CDC96132D752A1A8441243FDDC11FE70BE9103A01488

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\upload.png
MD5: 25BC7296E2F6E9BBC20F50A0ED45D8EC

image

SHA256: D44678A0C955ADA88F5335B791F258EFE8B29D7FE3F91FBF7410CFB05C0B949B

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\sitemanager.png
MD5: 40968C1F1E8ADE30A661B901B152F927

image

SHA256: 1E21712503290748CBFC1588A3746A74D4EDA5F846A2A8E0F3B8E313CF3A58DA

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\server.png
MD5: 93568F9276505E35C4DDCEF82C8419F7

image

SHA256: A71C00264D99FCF1A1BCC2BCDB5B0F3B8CC7AE3EBB387C4D88B8432EE5CABE1F

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\refresh.png
MD5: F92EB5774133689D728AF776337F0945

image

SHA256: 9AECEA403F345300968674E0869FDD10B493520ABEA451EFEBE89FA00F80F57C

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\unknown.png
MD5: EA15E0D9E67BA036C4583AA35E840538

image

SHA256: DD79518BA7FD89DE6E00F6E25F6FA12C158D316A922498BB0E77232213BA8606

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\queueview.png
MD5: 84222D4A0FC4CE352D34746DDC54AE0E

image

SHA256: 7D2192A44C1BC190FE25A670C98F740DD9E41F303E877EE95E1A2D9D6BEA7D40

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\localtreeview.png
MD5: 30AEB749D4F4AF4F557B4AC3CD23D456

image

SHA256: 3E388755B702AC9C6207782D29594980678B8645DBAE56CC1A6FC465F33FDF96

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\folderclosed.png
MD5: 7E4E4E47715E5742A716D73B51891249

image

SHA256: D6BBF7732BD701770530DF7724F3A7729D99758A171DA947552D98D2EAB62DAF

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\logview.png
MD5: 2C02B6DDC4EBB751F97995900A462DA8

image

SHA256: 65DE672EDBE6242F051A5703FB3BDE256391662D6FF203152518A23690D5183A

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\processqueue.png
MD5: 68FD3F6DCD98DD9007A07EEECEFF296F

image

SHA256: C319D209C43F7BD11B19EE79F6CF14EC7F89240801961090B0A96284216CF2FB

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\lock.png
MD5: 20D5568A60308A123D83796BEAAE7E29

image

SHA256: 65F2A8D3629FC46A60934580A3A03AB04FEC6D82F6E681F6267EC6FE7FBE5D3B

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\folder.png
MD5: C13A4882A6686CBCA2E973294647518E

image

SHA256: 7159E988C41E1066526CF7CCB59AC6520533D43272B28CFBD9663492E1669F96

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\find.png
MD5: 3A4BA1F439585373A7292EBBC37D73A7

image

SHA256: FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\filter.png
MD5: BF5D35B2275410721E663F3867167007

image

SHA256: BB3C41D5E5B5A3105C7721BEEDB804A220135A4F847E81515BCD3942B058EFCE

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\downloadadd.png
MD5: 14D993A7709C9E5114A01AAAB315493D

image

SHA256: FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\download.png
MD5: 147C19751CD71C957E0E8FE38179A361

image

SHA256: FF9E0FBEBE9D74986BCBA9DA7EEF64D8CCAC851BF0B692ECD38032B4E93BC0D0

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\file.png
MD5: B0B28E8BCF6FEEA4F812E55DD3FB5C24

image

SHA256: D882B522556E723C2231F434F1DA9A1829DED713A59969F6925D86B5099A00BA

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\ascii.png
MD5: B0B28E8BCF6FEEA4F812E55DD3FB5C24

image

SHA256: 022D193B8D0B61477E5D8032DDB4C47D820DE9F121BECCE3B446B26D87F55DE5

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\compare.png
MD5: 75AC6E3542D2AD79179B69131439D52C

image

SHA256: 73CCD2E0ADC992E762126B1411147C4B310A2428587098DA49210BF78C3FCD86

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\bookmark.png
MD5: 6DBBA28A0845E323B1A847F669505EBD

image

SHA256: F44067334D0A09208A522EF63B3D9375273667893C2D990A9681FE28708ECA23

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\auto.png
MD5: 16F29DF276C6E99038EF268CA5BE85BD

image

SHA256: 86D17932B8ED7339D8086BD73540D223B5982B2395276BC2012ADF6A8E1C154A

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\disconnect.png
MD5: BD04CCA8D82FEE4DE9E9413C61895C48

2696

SHA256: 327D5965F0815CE72C2294D69CB9671CE2438C474D770F4715F94AED7863C185

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\cancel.png
MD5: AC127241B96FC12E91D636E0AAC4C262

image

image

SHA256: 2700DAFAA6CAF16BAD4D6683EBC95670B67E92EB2D2EF3F44D5A2EED8A8E2639

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

48/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\remotetreeview.png
MD5: DF82DC8672F50E7C523E90B0E84188F1

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

image

SHA256: 48506E6C4A09E27100C0DB5C789D2EB1780DE58EB5EB752843600D5CE31F6327

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\synchronize.png
MD5: 348FCA67F17E5E83D0126DCFEB12B782

image

SHA256: 729D421F2408A01474619BA5B29CA72A11B98217EBC42E21EC719C2A5451EDCE

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\server.png
MD5: B4800FCB5C8C98703E7F285699CDA3BB

image

SHA256: EC08DD5D9D04F4F513076915F82A1C6FB10A77B20FAC118D40307E545CECD875

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\remotetreeview.png
MD5: 6A49987F2B96B59D2FC706332F2266B0

image

SHA256: A1CBFA558A824E8E799F4EA0CA9CE1C8787F107BDED6A72A3F60C32B6B1D8F6C

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\localtreeview.png
MD5: 7D2D8047F89E29A825FAF45C2476059B

image

SHA256: 48B2C9C4743ECB6FBB8B6A22C3E14984441436D25AAE37EC88169997234E55BA

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\queueview.png
MD5: BA3DF3C0BBE4CA44738E96B70375532A

image

SHA256: 249A51F84DFAF1B86E10E08C7430C18AFFFB6BCFBE09B86EBC6B727D7E6F3FF4

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\lock.png
MD5: F6FBCE451E7AC370671E65AAAD372189

image

SHA256: 757A7823E97501926C27AB77FFF344C693FC842896EF35F2CE8985942B1FDAB9

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\refresh.png
MD5: 921395EB0850E453CD56C468CE2A28E2

image

SHA256: 1268FF3542A98272B712FAB43D6FB0FCB11BDCAEA087E7F336D1E5803AB87D23

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\reconnect.png
MD5: BBF3CD5FBE19966EA81451A29EF3E623

image

SHA256: C399A092C5157509775552F82E803771823285DB96D97F1AE23956738A643249

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\processqueue.png
MD5: 9DDDFFB20FA0247020676B3B7A1B7924

image

SHA256: 7109B43596AD9F909FA79418C800783A4F32DC05C9613911BC721952CF1A2116

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\logview.png
MD5: 9D60501A8CDAC3AB34C8FCA4111F326A

image

SHA256: 7F466B49D6CB2D881130CDA76EC35C22C6396F2480FFF80E27034A3CE74CFCF1

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\folderclosed.png
MD5: A0AF1E29C481A5DC89DAA6325DF07DB7

image

SHA256: 0059D89A1EF5FB36359652B7B2042A422641F7810007B8DFE1A0B3CF7ED0880F

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\folder.png
MD5: 9DC4CB6833ABDE58A8A36D4044BA8C47

image

SHA256: FC687FF2251BC921E99469FE061BC47B16D036F640672336F234F9218486E597

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\filter.png
MD5: 6895C926323D8F67FC625117AE5D2590

image

SHA256: 5D86F04F2D70B0B6394E9594E4BB969D3DEB1212B2B67A0EDD8458A67867A171

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\find.png
MD5: AEFFCB818F38E69BFD3753EB0F808860

image

SHA256: A83414762041356CD4AF6B82936626B558010C34886A4B6C49E4DDE51DF7564C

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\disconnect.png
MD5: DE1036EBE8D46AB7707F81B71A0AB448

image

SHA256: 7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\download.png
MD5: 855E4A2B22F216296E1889D2E33727A4

image

SHA256: 54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\file.png
MD5: 12D8C74406C83D429F22171ADC4B7C69

image

SHA256: 43794E4BCB9932D45C30A2FC560689648E02C3D9F7234221680144527EF527D0

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\downloadadd.png
MD5: B1392720DE6F62CC053754418ADE5AD8

image

SHA256: FC37900AC076661554F18A6F7D27E5ED6B7E254E945B01F61BEB0650BD2E88F7

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\compare.png
MD5: A092AA11A5F86EBF2B5241BEDD53181F

image

SHA256: 014005FBB489DC11E0E778CAD03C090054B93949727298109B05F5EF120B4653

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\binary.png
MD5: 766B3B9AD4A2C694C2A13A64793F58B9

image

SHA256: E6E7A14AEC6963C787C6AA5FF142433154F7875825323E264A6F896C55CCEF57

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\cancel.png
MD5: 1D8812ADBCE952079C66FD545C289879

image

SHA256: FB7DFFEE4A53DCAFB847B983015483198446B5844EC700D7DBF9C47209141A95

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\bookmark.png
MD5: F40C9D0076DA206C215C315BA0412A1E

image

SHA256: 4F19F553355FEFAD7F97214FDC8D5E5F3E13BE39C29E0D1EA32729C215D8A392

C:\Program Files\FileZilla FTP Client\resources\tango\32x32\uploadadd.png
MD5: 14D993A7709C9E5114A01AAAB315493D

image

SHA256: 7DC03B1EB21957A539D11D8DD73EA60FEF37F56ACEF5401C0DEE3DC06977580B

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\auto.png
MD5: 19F9B1196AF410D6464FBE5372A883B3

2696

SHA256: F629CF6AAB12FE6850F1D120637A9ACCC6D0D759C8330D1969DE71A5D1DDF81A

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\ascii.png
MD5: 12D8C74406C83D429F22171ADC4B7C69

image

image

SHA256: AF74F84098611387D43535436D4768E2AA3EE910C21F26328295EF3443891805

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

49/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\sitemanager.png
MD5: 827439559343AC93A533E316063FDA46

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\da\filezilla.moMD5: 3AF4F42B260938E3E4B5DABE7F4C9545

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\cy\filezilla.moMD5: 28B59BE1A204D5D3BBE4F3A9E44F247A
C:\Program Files\FileZilla FTP Client\locales\en\filezilla.moMD5: 807D27E041DD3ED1CD2C872C283A6E52

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\el\filezilla.moMD5: 3B1BC6E96603A7569FB792D6F9B0B6A8

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\de\filezilla.moMD5: 9DEAE53A5556CBA177D96E6CB4715F5D

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\es\filezilla.moMD5: D461E1037FF95F4261665EAF58543280

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\et\filezilla.moMD5: 1A91ADDEFE89137DF811131FD7FDE871
C:\Program Files\FileZilla FTP Client\locales\eu\filezilla.moMD5: 0809564FFBD110F64DC4123A99DC2761

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\fi_FI\filezilla.moMD5: 436D3CB16132573E1E70360D86050E2C

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\fa_IR\filezilla.moMD5: 15444C1895701FD0494FEF478D5628B6

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\gl_ES\filezilla.moMD5: DB80ED9940F3BBA84C53F7201AC3FA8A

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\fr\filezilla.moMD5: 3C995EDC8113083F52A29B2EE417C970
C:\Program Files\FileZilla FTP Client\locales\hr\filezilla.moMD5: F89CF8EFD940DF5C5441195CE2B0CDC6

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: 54037EF74BC2BCC4EF17383380EAED9B420C1B50A36B1DFCD102E70A61F24BAC
binarySHA256: D5513F0BC53285A941D9C180969E43569FD3AEA2054C0DFD57F395DF8BCD5604

C:\Program Files\FileZilla FTP Client\locales\cs_CZ\filezilla.moMD5: 448653F2A054F0462CF2AB613E9B08FF

C:\Program Files\FileZilla FTP Client\locales\he_IL\filezilla.moMD5: A6C3640074A559E5BB87705B2ACA6A69

binarySHA256: FE763C9A5CB7E884413AC5F745D0D234CD4F9AD7A628690D6C41B36A75A844E3

C:\Program Files\FileZilla FTP Client\locales\co\filezilla.moMD5: 5B255F4F2DBBAD985DFF50D4172C32D2

2696

binarySHA256: 8C53DA54FB3EC05B53DD4AB277F54126B41B821CDE35EFE87BEE96BC4DB25F1E

C:\Program Files\FileZilla FTP Client\locales\ca\filezilla.moMD5: B70047C5445538EDF0A51ECA9236ED48

binarySHA256: 15AEE820600F57B808D398F3828CE41653F6835F58D0D9BB2D4177F510E4CE8C

C:\Program Files\FileZilla FTP Client\locales\ca_ES@valencia\filezilla.moMD5: AE5EF82FB3E9EB97FE9D50751D40D5B1

2696

SHA256: 222C87918A4288B874FAA8FE0B6DBC43280E655AFAC4AA2B8655C3C0DC61C628

C:\Program Files\FileZilla FTP Client\locales\az\filezilla.moMD5: 872CAA9533ABD81EF6CB1BC6348CBFE0

2696

binaryC:\Program Files\FileZilla FTP Client\locales\bg_BG\filezilla.moMD5: 1BE5C73DB61969E7B243880DD340845C

2696

binarySHA256: 22E47976E0780065449060110EBA12DE93557822842E53F113D764C9685EE622

C:\Program Files\FileZilla FTP Client\locales\an\filezilla.moMD5: 9159691DADD2D57FD5B61C83A9B9F81A

image

SHA256: 54906BBDC39B746A9F373B3F58E63B29B579BE017F434110EE47147849B03405

C:\Program Files\FileZilla FTP Client\locales\ar\filezilla.moMD5: 4896CD3B242833DBA7E986CB3F91F708

image

SHA256: 2C75A2AE4A4ACA5E4434AF672386A2F30C21A86CF3580CE4E4B68CCBC80125BC

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\uploadadd.png
MD5: B1392720DE6F62CC053754418ADE5AD8

image

SHA256: D8D42A574006828DBE3C430D2035C5ED6367443F962DF20A6A8106CDB9A3AF25

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\upload.png
MD5: D9E53E4C4EB2CBE6FAD2357F58C0F32A

2696

SHA256: 613A8D75E343673290CCF90BBBCE2618351B96145B84B74B75F390A87596A9E9

C:\Program Files\FileZilla FTP Client\resources\tango\48x48\unknown.png
MD5: 6B99D53FCED3E148D3EC6DEECA0E4D95

image

binarySHA256: 45C69CEE970723E984397E364816E7077C50A6247C401A7501AB353CDB5EA4D9
binarySHA256: 7BCFAC4D555B319ACC291CAD79945DE565B0B088C0A8BFC79A4AAFF552D30217
binarySHA256: C074012C73EF3D60BEE7F357EF4BAC1DF327E9AB5EC02B92D07F624955F5C2A1
binarySHA256: DD0B523740C89630994264359E1ECCEF53C6848928EFC7C034F993C1B3E4B22F
binarySHA256: E94926468BEF1A1CD9952319A5F379D68C1EF7779E19D1681430F6F372733CE3
binarySHA256: 8006382B6D33CB5F40209FD80316F362B3C5FCF2EB3B6ADBB25289912A22E2E0
binarySHA256: E598121907A17501C79264FC249C2393BF64743999E508184F2ACB2D39D75B91
binarySHA256: 6CF56DC3FB1BD0C6862F27FA90A0E28691A49311CD590D6ACDB6F75C92BD7531
binarySHA256: B6E09CB98B181DECE067CBBA83418E97A619FEEEA050B82B963CBBACE45E4257
binarySHA256: 4274E3EE41F6EFD56DF42BF22174BF0E717885DADEB7E26BDF94B33D8D2587CE
binarySHA256: 289F522196BD8503BF7C2AB376C3C13EED7259A27570EBAE28A4DBE6B07C1097
binarySHA256: D6FF395FD36BFD6C87CA3C24D46FAB2207ECEF3468755436721379FDA2B712E2
binarySHA256: D31E92C79A6689593CF55A060EF99E385C9ECCFB81720B174B903940D1F80312
binarySHA256: C815CE9D910A8F31F9508A5DFD8ED76CECBC93B4256B198A956B3B531C89E383
binarySHA256: 33A2DD45A3B30FCBEA2EFA7F60817F31EDF3B47A82C00EF536CABFC88DC5C46B

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

50/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\hu_HU\filezilla.moMD5: 173C4317159B3AF7F3A2CD858487D61E

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: DDDA358DA42ECB3C98C840D8C73706AD9CF66964E857F70E5569EBDD6DEE1B18
binarySHA256: 33D2E1A06FFB4EEC725D0BD1A145391CCB31B444755701013262A28889DB603C

binarySHA256: F110BCE515C7DF0FBE6368D962E893E8470EDDAE0918824C1DA8E13F93B0C35D
binarySHA256: 84640730CE008DD6D90E761E241916519A79E9A220B4791D8D90F1B70F2A0400
binarySHA256: DE53073EBFBDC77563D6DEF604017E9EBCA479E86FBCAA07E2E71F2655DF2013
binarySHA256: D218CCC7578DDA2FD246DFEE910AC58BBA06975F962098BC6AB1926F18ADD5AB

C:\Program Files\FileZilla FTP Client\locales\sk_SK\filezilla.moMD5: 28AFCAF73409B4EA70C2E0BF809444C3

binarySHA256: C01262B213E6E009D26D83788D1DE5EC64D68E221DDCF686395B8ACE8A4292B5

C:\Program Files\FileZilla FTP Client\locales\ru\filezilla.moMD5: 76DAD57035CB1BC99CC4862A595CFB14

2696

binarySHA256: 6835F65DF3CBC627EDDEAA3FB039782D3162983BD08CB808E011258D43F6C144

C:\Program Files\FileZilla FTP Client\locales\sr\filezilla.moMD5: 163D31872EA5B3C3031B0D033CBD623D

binarySHA256: 651CCA56082EFF89BE5F522CE6D377CBF5BC637F6DAF81C057D8F5B70C8AF9C1

C:\Program Files\FileZilla FTP Client\locales\pt_BR\filezilla.moMD5: 16035C6925E5C4298803C254265C0197

binarySHA256: B4398A3A7AEE6F98DC051EA5D041F2ABF9FD6F88FC5CB1B2C9BDDABE3A59FD89

C:\Program Files\FileZilla FTP Client\locales\pt_PT\filezilla.moMD5: 02F89A6423A68AF96CCB8751FE8DA065

2696

binarySHA256: 76FDD98C2D073A4BA3E3FC64199E867DA7DD96A56F96A55C9C15D3F0CD0A13CE

C:\Program Files\FileZilla FTP Client\locales\nn_NO\filezilla.moMD5: A156378AE7BF794D888A43E8159F59FF

2696

SHA256: 02A8123360AAEEC9ECF4FF1A23F20B42D3CD2E32B420BA9CD8F983D780D498CA

C:\Program Files\FileZilla FTP Client\locales\oc\filezilla.moMD5: 3A91D18EC0A03BCAC687E923B88C9D19

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binaryC:\Program Files\FileZilla FTP Client\locales\nl\filezilla.moMD5: 1BC130E7C8493ED223CBD866D04FBE4A

2696

binarySHA256: A584A858D6EDF86967203A0F169CA108F52996BAF0DAD9C975E34C8D2A1AB74A

C:\Program Files\FileZilla FTP Client\locales\ne\filezilla.moMD5: C65401789CC8AFAB14984525E13A3F74

2696

binarySHA256: 38C05DF0E16F1BC57E108C6392BE5804F461B4D54EBBDF71E9A3F612C11DF349

C:\Program Files\FileZilla FTP Client\locales\mk_MK\filezilla.moMD5: C93028F2A76F5327013AFD699804616F

2696

SHA256: 33B1D7B4DEBD18AA603170BBE955EE46E6D2BB2279FA66802D112A6F560553C1

C:\Program Files\FileZilla FTP Client\locales\nb_NO\filezilla.moMD5: AFED53045F5CA22EE6B73E119D50FD87

2696

binaryC:\Program Files\FileZilla FTP Client\locales\lt_LT\filezilla.moMD5: A0FE1090E693AA0DF206A076D1CA150B

2696

binarySHA256: 2CD71B22ABB1F5CD02E83F19E7D93707CBA50314DF44AB7E31CA57AA4CC8ED53

C:\Program Files\FileZilla FTP Client\locales\lv_LV\filezilla.moMD5: 4CF82C334DD60ECB6AE7008F3F72D19A

binarySHA256: C8FBC56C527F5114E587436FF359BF5FE5688794D4586810D27BDF52A26AF397

C:\Program Files\FileZilla FTP Client\locales\ku\filezilla.moMD5: B4182064028E80E52F560C3C1F71B939

binarySHA256: F6DBDDCFA7E678C76598A577EB9D496C751AE7DA89712F6A9350C3459D456C76

C:\Program Files\FileZilla FTP Client\locales\ky\filezilla.moMD5: 74B5EFE09B4EE0D63A65EFCE86AD29D2

2696

binarySHA256: 530D216BB9014EA0E2EF753B23C813F9FCD3CB2C3783D847B25464F4329D3BD8

C:\Program Files\FileZilla FTP Client\locales\lo_LA\filezilla.moMD5: 53CDFCB0A69130EB16BF391E20AF777E

2696

SHA256: D834A07C46FE166F124439C165485ECF7181D768BFCDFA1B72BF42A465645281

C:\Program Files\FileZilla FTP Client\locales\ja_JP\filezilla.moMD5: D5F1D03B0C3C20B269899E2016FCADAA

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binaryC:\Program Files\FileZilla FTP Client\locales\km_KH\filezilla.moMD5: 2B5110DB4CF29BB59491E54230ADB438

2696

binarySHA256: E05737AC50B4B5BB1FBDE394B53F5958650E45DAAC3B1F723A1C120A8DC70BD2

C:\Program Files\FileZilla FTP Client\locales\ko_KR\filezilla.moMD5: 99EFA4529153453D76911014E2FEED23

2696

SHA256: 2B4841980EDCAE4511256166DA4CA76CED2713C48BC383194083CFF7A8BDB9E2

C:\Program Files\FileZilla FTP Client\locales\it\filezilla.moMD5: EE8110B16ECA95071355271F898190A4

2696

binaryC:\Program Files\FileZilla FTP Client\locales\kab\filezilla.moMD5: 801A9D37050ECA683092F82F8076984E

2696

binarySHA256: DC5AB5CD86A25693CFAB63467E1961ED520E14F2FEFC21500EE077E0FCA298A2

C:\Program Files\FileZilla FTP Client\locales\ka\filezilla.moMD5: 2662BDB070B4D7FEE28407B2062C8CE2

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: AD35805F576EF6D9F79ADD67C0AD2362A60D9AAE7D761BF1761320FA99479428

C:\Program Files\FileZilla FTP Client\locales\is\filezilla.moMD5: 7E8C7A16472037B3CCC16FBACD3DE47E

2696

binaryC:\Program Files\FileZilla FTP Client\locales\hy\filezilla.moMD5: 7235EB64C50A47062B0A926A3AF22054

2696

SHA256: 6FA055AF047F04A12E37E71EF4AB97366CC5FCA9344C1EFF389BCD6EC090B8CB

C:\Program Files\FileZilla FTP Client\locales\id_ID\filezilla.moMD5: E0C502F43796CB6AC0B626604BD9B08E

binarybinarySHA256: 36DEE922480B6C8DA0BB286BDE825670A53EB8884F2DFA320BE2BA6B545F260E

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

51/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\ro_RO\filezilla.moMD5: 8D7FCBED37A86E891D3B59BAAAC0EF05

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: 263F85F018CD13ADE5BBCEE9543ECEE9E2D1909D3ACEA5FB9B9F238E865B6F87
binarySHA256: E3DAA21D3381497DC96862CF2D5F20C24634A6901DE8420989AD89BA81AEFA76
binarySHA256: 3EDDA140F7FC66300EB304C4BC05E086187F124C0D2B3F61B24A120DA7DC963A
binarySHA256: 70E1678DF4928BF7FA7D988300B4A297967F8CCC85D0B637C96D274AE479FAE5
binarySHA256: 52E60A1E0D9A72407A0C5E529845CA45BB0D79A786469623A25F2CC63C48BC92

C:\Program Files\FileZilla FTP Client\locales\cs_CZ\libfilezilla.moMD5: 95D9B64531FD1D36473AC31E7DE7461D

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: B4FA9F93E558FBD9049424095A9ED358E0345159AF3454FE41C5C099A0985C11

C:\Program Files\FileZilla FTP Client\locales\el\libfilezilla.moMD5: AF620E0DCB310A03EDA039DEBA665F62

2696

binaryC:\Program Files\FileZilla FTP Client\locales\de\libfilezilla.moMD5: 1BC2A1ED88772E7EA54CB9858D7B44CE

2696

binarySHA256: 1202734516181C86E5F8C743D32390B99BC51E82AC4171E871E1C797AFC8FBBC

C:\Program Files\FileZilla FTP Client\locales\es\libfilezilla.moMD5: 00AE32765AAFBDFDE1371A120D876C6B

2696

binarySHA256: 76AB8D14BDD35A78A93115C3317EF1E13008FB7C88B7BAFF213F60987288FBE7

C:\Program Files\FileZilla FTP Client\locales\et\libfilezilla.moMD5: 5EFC220D09DD367B9F6F564CCCB9E8A4

binarySHA256: 6D8376F9B1EB29B81C4E889253152166A6366A3FCD7709515FFA4C5CB4E4485A

C:\Program Files\FileZilla FTP Client\locales\fa_IR\libfilezilla.moMD5: 21DAB03D2178D2A9B3540B70A994D676

binarySHA256: 1FBE29CA1338C9CAE13CDBF196DE30E67424A10A28B796505CBB4A1D8C273ED5

C:\Program Files\FileZilla FTP Client\locales\cy\libfilezilla.moMD5: AF4894F1C316BCFF81BBF9EBF611A32B

2696

binarySHA256: 1552F2E020E0538A37A04E39C4F99F7A953B0761FA6129FA126DFE039EEA9485

C:\Program Files\FileZilla FTP Client\locales\eu\libfilezilla.moMD5: CA0175CF709FF5DD4894FD0103B985EA

binarySHA256: 589EAD4511C2E86324AED0CB4DF6A88F204C0E4FA271F368B89CE2FC40673394

C:\Program Files\FileZilla FTP Client\locales\co\libfilezilla.moMD5: B5527C831A79EA79D24650DA73E70612

2696

binarySHA256: B263BEB33273A7C974642333FEDF8AA5FECF78F202AF091F68986FD4E25CB063

C:\Program Files\FileZilla FTP Client\locales\ca\libfilezilla.moMD5: C76C8B0BF8CAD94EC38A46128AC7F8C52696

binarySHA256: 0C0FBB98B241687F4C0DA574CCD431D613B18CFD783C96A156C29A96354715E7

C:\Program Files\FileZilla FTP Client\locales\bg_BG\libfilezilla.moMD5: 6AD349FF9F2F1C887AF162F8DBA6450B

binarySHA256: BE5A76FCE8FE06148EF51807F85C237729D295166F630946D281CE9D63FF1ACF

C:\Program Files\FileZilla FTP Client\locales\az\libfilezilla.moMD5: C690B37688DCBE96EA3D9741B19278D1

binarySHA256: DC80B9D9DB862CAC4A06AB8B4E38042455B50179CB8A2634A2996A6E36D0C50D

C:\Program Files\FileZilla FTP Client\locales\ca_ES@valencia\libfilezilla.moMD5: 7E2C4E079E8A1A2671BAC61EDD831995

binarySHA256: 4F1220A06905DB6C93D80F2E09C542B705B8639F08B7B02A805FC8F6E090FDF3

C:\Program Files\FileZilla FTP Client\locales\an\libfilezilla.moMD5: 37FE0FBD12807BDA24EE11E13B23224A

binarySHA256: 8B9AC26D2B747877DF34D009133F1FD621362A64D3BEB35681913C46B5E46015

C:\Program Files\FileZilla FTP Client\locales\ar\libfilezilla.moMD5: 8BF243D86E72225574F07D1C8A63044C

2696

binarySHA256: 5A7F66A52E0319F7C3DAC62BE0DC04A9B8D1C7B60A655D78EB185AECDE515E52

C:\Program Files\FileZilla FTP Client\locales\zh_TW\filezilla.moMD5: 3E5A0BDEBD172C9DD5FCBBB509E0798D

2696

SHA256: E7426C72EDE629570FEBE1D20CC71C1FC75D655FCEAC49A554794C4C1BAD4DB9

C:\Program Files\FileZilla FTP Client\locales\zh_CN\filezilla.moMD5: 399EEFBD65B21F4E7064133A7F6DC930

2696

binaryC:\Program Files\FileZilla FTP Client\locales\vi_VN\filezilla.moMD5: 7429167712CF3575957003B2F28158D9

binarySHA256: 9A7E572A296A810C7F4BCC8C151012CF4EF4F7E251056C5F27F271787FD91B94

C:\Program Files\FileZilla FTP Client\locales\uk_UA\filezilla.moMD5: FE139F6C00E067BEC1C14A7393BA0319

2696

SHA256: 762B43126F7CF4556D46000143E48ECF465A991AE10CB06240D4D897DD333AAF

C:\Program Files\FileZilla FTP Client\locales\tr\filezilla.moMD5: C6AADDFCC9062147583335C45A50A358

2696

binaryC:\Program Files\FileZilla FTP Client\locales\ta\filezilla.moMD5: 2B933FE0644AAD1DCCA04B95668F134D

2696

binarySHA256: 4E439ACE95FF2CAE4DAF5BE9DE5530BE0BBAEDE8EEC7D1CAE911E78C78D6AB4B

C:\Program Files\FileZilla FTP Client\locales\th_TH\filezilla.moMD5: DE60CE79825DD8D3423EB0358A5E334E

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: D716F0A779FB4A64A4945384583600776843358C88D6985D803703635C8E24DF

C:\Program Files\FileZilla FTP Client\locales\sv\filezilla.moMD5: 80B1A440683C8B8290067A959D21AC63

2696

binaryC:\Program Files\FileZilla FTP Client\locales\pl_PL\filezilla.moMD5: DADEBC84BBA1B0726B67C5EA3627AD0C

2696

SHA256: 5253A998640BB51C27D54C830B459299D881CAB9CD3916F1A40363C22C0000A9

C:\Program Files\FileZilla FTP Client\locales\sl_SI\filezilla.moMD5: E92C7492D7BB7D2CA2DD59A29CCD9050

binarybinarySHA256: F554A8709234232F23DC85831054951FE55AED08A828FF81EE9CDDAE3820C978

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

52/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\da\libfilezilla.moMD5: 2912398251DF424CD1525C2B974E0500

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: E574D5D624E78CE026B8C92A603B55677FE25D55D1DBA1A448A250CD7F282F1D
binarySHA256: 719B14C0E3B74EDFD11A5D8DBA68D85935E5FF8E70287556FD810F0A871CF35B
binarySHA256: 73C137B8F287A4EF622F85F86E4542456065B350A5EF8E600ABF623D7FF84A03
binarySHA256: 62E417EC1C6523A1534C7909CBC12153E3A544F81F6C7FC9A4858651CA578DB6

C:\Program Files\FileZilla FTP Client\locales\pt_BR\libfilezilla.moMD5: A4930D67E9AD80BF2350C87AA286D52B

binarySHA256: B5FC5367B7EB6648F67C1585259EB4AB6EE6488DAFD11E33829D5A55AD40D199

C:\Program Files\FileZilla FTP Client\locales\pl_PL\libfilezilla.moMD5: EBBEAB96D8AA3EBFCFF2942BF786C1A5

binarySHA256: 8E80536EFC73E3257B817CC6C0DF2EE232F0B73393735CA619E391CF1423CBFE

C:\Program Files\FileZilla FTP Client\locales\nn_NO\libfilezilla.moMD5: AB6590A0E85D3FA85665924BB7F26E63

binarySHA256: 3BA1382198BA0A0D3AAC6FBAC96F7CEAD6554A0DA948A63698865900CA1FE449

C:\Program Files\FileZilla FTP Client\locales\oc\libfilezilla.moMD5: 67747215DC2408178FE975B7CE166B30

binarySHA256: B85A7A42B4755E3B22C3BD2ECB36BC80E429EF1CAA355C180A208898A51F14B4

C:\Program Files\FileZilla FTP Client\locales\ne\libfilezilla.moMD5: 7D05EAA4F52F77E0800BE52DACE58C0A

2696

binarySHA256: A8FF4FE34A303CFA00D21E795C722B3F8B50C1B349041620532AEAF8A00DFE09

C:\Program Files\FileZilla FTP Client\locales\lv_LV\libfilezilla.moMD5: 180EDB0EFD351573CCCA6281FFF5EF22

2696

SHA256: F15E750C07EF781BEB22368CD97810AB1FB3B514901495E4F737E04F563B5ECF

C:\Program Files\FileZilla FTP Client\locales\mk_MK\libfilezilla.moMD5: 7E94E2D8D48B709C247A40473E07C87A

2696

binaryC:\Program Files\FileZilla FTP Client\locales\lt_LT\libfilezilla.moMD5: 51EB51DDE2168EFE894984675CABCF72

binarySHA256: D01791A6FAB4A63E15769383D1C039E9DA4D865F31CC3A89017F5303595004FF

C:\Program Files\FileZilla FTP Client\locales\nb_NO\libfilezilla.moMD5: C5B2B81905E3D57D226D155C719B6837

binarySHA256: 71652EDF5E78201362982ACE59771F2290EA601A028DD0D54FEE44EB982AE20E

C:\Program Files\FileZilla FTP Client\locales\nl\libfilezilla.moMD5: 3DB90A1D477AB46129C3EBB0F6EE54FB

binarySHA256: 9AC48D986DE1ED4D04969A7540B6339AADB11782F3685426492395FB0DC6D8DC

C:\Program Files\FileZilla FTP Client\locales\ky\libfilezilla.moMD5: 60288B4A6419B532452524A6C23ECEF82696

binarySHA256: C961206C8E570A356EB08E02F2A9874519E731938D4A2C89528CEB46A8295DA7

C:\Program Files\FileZilla FTP Client\locales\lo_LA\libfilezilla.moMD5: 52288DBEE33EA1486C884ABC9032CB87

binarySHA256: BA05EE9428FF6F5FD1BB4186C6E8A9F83D2207D7C19E036D9BC84A6314080DB6

C:\Program Files\FileZilla FTP Client\locales\ja_JP\libfilezilla.moMD5: 0FF3570F3F0F19F338B2CA4FAE0A7FED

binarySHA256: 566AF80F6F8FAAF4B48A755644409ECB4F96108452E61B9C3D7A0106D419C47E

C:\Program Files\FileZilla FTP Client\locales\ko_KR\libfilezilla.moMD5: 596E122032E2469496A04B9641D8F9F3

2696

SHA256: 837840EA54CE476A4954180619CCA71361C9C609751BB39F37D46885DF7BAD10

C:\Program Files\FileZilla FTP Client\locales\it\libfilezilla.moMD5: E286C5544F3D9D87AE88ED60C47832D0

2696

binaryC:\Program Files\FileZilla FTP Client\locales\kab\libfilezilla.moMD5: CC37AE27FDDCC590DEBEA38233E1BF58

2696

binarySHA256: A6DE37A294436B47B39568CCB5FCA92652864289AE696A862CAA5DAD5DC1F6D8

C:\Program Files\FileZilla FTP Client\locales\hu_HU\libfilezilla.moMD5: 866ADD9F73663C55DA6F6AF2474E572C

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: DD26168A6FB66F52FB6BB3CDA1708A4AD76D9843FE107363C3DA2BB028D3446F

C:\Program Files\FileZilla FTP Client\locales\hr\libfilezilla.moMD5: B68C4DA7D7E4DB18848B7B9B7E6A542D

2696

SHA256: B207CF284CC20713E03031451592CE48BBDA7ABA7AD56F88B79D38C2B9B50E3A

C:\Program Files\FileZilla FTP Client\locales\hy\libfilezilla.moMD5: F1CF847FD9307F45224D500A41659E53

2696

binaryC:\Program Files\FileZilla FTP Client\locales\is\libfilezilla.moMD5: 8CA844D6DF53D01EEF26691C1CC4DD59

binarySHA256: B01DE1679EF41B55E5014AB71E2771252BA87AF820ADEC288BF3F0417F88975D

C:\Program Files\FileZilla FTP Client\locales\fr\libfilezilla.moMD5: D293080740D59E95F516A952CB6BBE81

binarySHA256: FEF68C4F87F882DE690217E887D45C0C0B8D13B7CC5E73B439FB2AF72815228C

C:\Program Files\FileZilla FTP Client\locales\id_ID\libfilezilla.moMD5: 52D40E3C52EFC12CE4FBF75D061477AC

binarySHA256: C628FA6FCE34EB21749A6BA6D81AAD896A100D7BD5071E96F62DE0FE4D85DBD8

C:\Program Files\FileZilla FTP Client\locales\fi_FI\libfilezilla.moMD5: F5889732EB539EE6D922C8F268B90F22

binarySHA256: 515395C0F8D5EED699CA5777411C720B9CBE6C5BD037FC0D0FADB8C7409E173E

C:\Program Files\FileZilla FTP Client\locales\he_IL\libfilezilla.moMD5: CD866D5DE8316678CEC0532328D8C627

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: C2C497DF48091AC787E1716E24DE4F2D4CF143FC25C888DA9A7B56FA1CAD3A62

C:\Program Files\FileZilla FTP Client\locales\gl_ES\libfilezilla.moMD5: F656676E52A4651F9A3E428952858B28

2696

binarybinarySHA256: 4941885C4013C03FE74FFDA0E5BB3E2B382F5B10C929A7E05752137FBAA1C438

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

53/55

15/7/24, 3:12 p.m.
2696

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

C:\Program Files\FileZilla FTP Client\locales\sk_SK\libfilezilla.moMD5: 69BF86010132722D7FAF001E81DF896B

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

2696

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: 25567F52B6A1D6B8D977D4835604A15604CCBCCC4702E2D5C45293D6DBD4321C
binarySHA256: 95445DFC3F7121E466386189622C6677D4E5701F64BD98269887D25B167CA0EE
binarySHA256: 0C085A7062CE530780CABDCC9403050C33B6DAF079A46AF9BAEECC2F9239A2E1
binarySHA256: A2AD25FE9206B046D126CB7933E06522F62C11799BA6C71D340BB297DF6AD90E
binarySHA256: 896DDD34D4034080A5C9FCF122E3AD4BBD66A08C8BDFDEC17A70DF1C7E4DA6BB

C:\Users\Public\Desktop\FileZilla Client.lnk

binaryMD5: 19107C22EE89D2781F8556B7280338AF

SHA256: 4CE7E6AB79EA720667426C9F1AD536A906B24F6D39E0DB90FA3C0D8557367DC2

C:\Program Files\FileZilla FTP Client\fzshellext.dll
MD5: D02454E5E342D3F825B57137AA92A345

2696

binaryC:\Program Files\FileZilla FTP Client\locales\zh_TW\libfilezilla.moMD5: F5BFFE8389B57ABB36CCA99AA5EB42B4

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

binarySHA256: 3E9A085F53CA4687835C9CE292AA08B0EB71322FE4AEA3FBF1302B038368804B

C:\Program Files\FileZilla FTP Client\locales\zh_CN\libfilezilla.moMD5: 336C05F3A32545E23392F0096E2775FA

2696

binarySHA256: BB2F2C2B1EA7944229126F1490A4D95B63CEC0242F33BCCFBCC1790B312D16A7

C:\Program Files\FileZilla FTP Client\locales\vi_VN\libfilezilla.moMD5: 6A4DA2920F8BC850DDB8A9AB82959499

2696

SHA256: 790EA12C3702B9EA9311313E186C2F7ED6E490C18B95751C005A7A0F22C0B5AF

C:\Program Files\FileZilla FTP Client\locales\tr\libfilezilla.moMD5: 8C501012D1158DB14142FD23965A7B19

2696

binaryC:\Program Files\FileZilla FTP Client\locales\sv\libfilezilla.moMD5: 422617C51D6B6876973A1267F8270BC6

2696

binarySHA256: 649118FA6620B34022288F3A6BDDEA54045A185A61FD744604B3743EF535C1C6

C:\Program Files\FileZilla FTP Client\locales\sr\libfilezilla.moMD5: BDBC57157C4C4FC4BD1125527E7CA979

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: 88ADC555F6887263DEBEAC578F25681BF92237B3CA1DE21BB1C2FA5F20446546

C:\Program Files\FileZilla FTP Client\locales\th_TH\libfilezilla.moMD5: 829E10B9BEBC5FFCD3D3DB2887D8D444

2696

binaryC:\Program Files\FileZilla FTP Client\locales\sl_SI\libfilezilla.moMD5: 72213EFAB61DDA9D5F71B1B5261EB465

2696

binarySHA256: 526068AE2A7DE83F4CCD82F24B403C3D2C994EB1C2DF4A05FEF83F2F1716CEC0

C:\Program Files\FileZilla FTP Client\locales\uk_UA\libfilezilla.moMD5: 46E7D4965D4F0B97004012907CCF4BCA

2696

SHA256: EEBB5B2E99A407DB351FA34DE7118974A9415F4E8658F37E1109EA976BD28B0F

C:\Program Files\FileZilla FTP Client\locales\ro_RO\libfilezilla.moMD5: 243852DDD865013CB22D4A6A3410079F

2696

binaryC:\Program Files\FileZilla FTP Client\locales\pt_PT\libfilezilla.moMD5: C456FA1DECA8F79FCF54C8ACFFF26C79

FileZilla_3.66.5_win64_sponsor
ed2-setup.exe

SHA256: 1B60A2838F9ED7DB6AC94D7FE5C1D7397DF3D6A924FA185B3B3A8BC5CFC120E3

C:\Program Files\FileZilla FTP Client\locales\ru\libfilezilla.moMD5: 77C31C9B2DDC8E5582047098B2D63C02

2696

binaryFileZilla_3.66.5_win64_sponsor
ed2-setup.exe

executable
SHA256: B425A8E076DFCCF9245D724D3A228500BF128AEA9FB24795EE3C6020D2E9DF6A

C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
MD5: B4B951DD1A4084EBBA8240DB3BA8520E

executable
SHA256: 63B1CD78F95DED9CE7F686D1BCC32B99756526C179A79425A0E565A38743A13E

Network activity
HTTP(S) requests

TCP/UDP connections

DNS requests

Threats

0

13

12

0

HTTP requests
No HTTP requests
Connections
PID

Process

IP

DomainASN

CN

Reputation

4

System192.168.100.255:138

—

—

—

whitelisted

4

System192.168.100.255:137

—

—

—

whitelisted1088

svchost.exe

224.0.0.252:5355

—

—

—

unknown3968

msedge.exe

239.255.255.250:1900

—

—

—

unknown112

msedge.exe

13.107.42.16:443

config.edge.skype.com

MICROSOFT-CORP-MSN-AS-BLOCK

US

whitelisted

112

msedge.exe

49.12.121.47:443

download.filezilla-project.org

Hetzner Online GmbHDE

unknown112

msedge.exe

204.79.197.239:443

edge.microsoft.com

MICROSOFT-CORP-MSN-AS-BLOCK

US

unknownhttps://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

54/55

15/7/24, 3:12 p.m.

Malware analysis https://download.filezilla-project.org/client/FileZilla_3.66.5_win64_sponsored2-setup.exe Malicious activity | …

112

msedge.exe

23.48.23.62:443

msedgeextensions.sf.tlu.dl.delivery.mp.
microsoft.com

Akamai International B.V.

DE

unknown112

msedge.exe

13.107.21.239:443

edge.microsoft.com

MICROSOFT-CORP-MSN-AS-BLOCK

US

unknown3968

msedge.exe

224.0.0.251:5353

—

—

—

unknown112

msedge.exe

95.100.146.17:443

www.bing.com

Akamai International B.V.

CZ

unknown

DNS requests
DomainIP

Reputation

download.filezilla-project.org

49.12.121.47

whitelisted

config.edge.skype.com

13.107.42.16

whitelisted

edge.microsoft.com

204.79.197.239

whitelisted

13.107.21.239
msedgeextensions.sf.tlu.dl.delivery.mp. 23.48.23.62
microsoft.com
23.48.23.49

whitelistedwww.bing.com

whitelisted

95.100.146.17
95.100.146.16
95.100.146.40
95.100.146.35
95.100.146.8
95.100.146.10
95.100.146.33
95.100.146.34
95.100.146.11

Threats
No threats detected

Debug output strings
No debug info

Interactive malware hunting service ANY.RUN© 2017-2024 ANY.RUN LLC. ALL RIGHTS RESERVED

https://any.run/report/e324510081ea2b0b9e63520874983e3eb2ee1055fc2b00b41093ff1480d5f934/e7b659fd-56fb-4863-b85e-aa0aac549b23?…

55/55