C:\Program Files\QTTabBar\Tools\RestoreWindow.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (1) Automated Malware Analysis - Joe Sandbox Cloud Basic (1)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\MSI7D68.tmp | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (2) Automated Malware Analysis - Joe Sandbox Cloud Basic (2)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\MSI7C00.tmp | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (3) Automated Malware Analysis - Joe Sandbox Cloud Basic (3)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
Click to see the 97 hidden entries |
C:\Users\user\AppData\Local\Temp\QTTabBar\SetupHelper.exe.config | XML 1.0 document, ASCII text, with CRLF line terminators | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (4) Automated Malware Analysis - Joe Sandbox Cloud Basic (4)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\QTTabBar\SetupHelper.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (5) Automated Malware Analysis - Joe Sandbox Cloud Basic (5)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\QTTabBar\QTTabBar.dll | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (6) Automated Malware Analysis - Joe Sandbox Cloud Basic (6)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\MSI6353.tmp | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (7) Automated Malware Analysis - Joe Sandbox Cloud Basic (7)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\MSI619C.tmp | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (8) Automated Malware Analysis - Joe Sandbox Cloud Basic (8)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\ProgramData\Quizo\QTTabBar.dll | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (9) Automated Malware Analysis - Joe Sandbox Cloud Basic (9)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Distributor.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (10) Automated Malware Analysis - Joe Sandbox Cloud Basic (10)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\QTTabBarUpdater.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (11) Automated Malware Analysis - Joe Sandbox Cloud Basic (11)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\QTPopup.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (12) Automated Malware Analysis - Joe Sandbox Cloud Basic (12)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\ExplorerSafeMode.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (13) Automated Malware Analysis - Joe Sandbox Cloud Basic (13)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\DirectoryAnalyzer.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (14) Automated Malware Analysis - Joe Sandbox Cloud Basic (14)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\AttributesEditor.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (15) Automated Malware Analysis - Joe Sandbox Cloud Basic (15)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\ShellExt\ShellExecuteHook\EnableShellExecuteHook.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (16) Automated Malware Analysis - Joe Sandbox Cloud Basic (16)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\ShellExt\ViewColor\ViewColorSetter.exe | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (17) Automated Malware Analysis - Joe Sandbox Cloud Basic (17)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\ShellExt\ViewColor\ja\ViewColorSetter.resources.dll | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (18) Automated Malware Analysis - Joe Sandbox Cloud Basic (18)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\DotNetOpenAuth.DLL | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (19) Automated Malware Analysis - Joe Sandbox Cloud Basic (19)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Google.Apis.Authentication.OAuth2.DLL | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (20) Automated Malware Analysis - Joe Sandbox Cloud Basic (20)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Google.Apis.DLL | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (21) Automated Malware Analysis - Joe Sandbox Cloud Basic (21)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Google.Apis.Drive.v2.DLL | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (22) Automated Malware Analysis - Joe Sandbox Cloud Basic (22)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Newtonsoft.Json.Net35.DLL | PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (23) Automated Malware Analysis - Joe Sandbox Cloud Basic (23)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DFA06E0B1DDDEB79C5.TMP | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (24) Automated Malware Analysis - Joe Sandbox Cloud Basic (24)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\CFG7CFA.tmp | XML 1.0 document, ASCII text, with CRLF line terminators | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (25) Automated Malware Analysis - Joe Sandbox Cloud Basic (25)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\CFG63D4.tmp | XML 1.0 document, ASCII text, with CRLF line terminators | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (26) Automated Malware Analysis - Joe Sandbox Cloud Basic (26)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\L2D128LW\Windows[1].json | JSON data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (27) Automated Malware Analysis - Joe Sandbox Cloud Basic (27)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000023.db | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (28) Automated Malware Analysis - Joe Sandbox Cloud Basic (28)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000022.db | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (29) Automated Malware Analysis - Joe Sandbox Cloud Basic (29)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SetupHelper.exe.log | CSV text | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (30) Automated Malware Analysis - Joe Sandbox Cloud Basic (30)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\RegAsm.exe.log | CSV text | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (31) Automated Malware Analysis - Joe Sandbox Cloud Basic (31)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF915A1C7A4D690D5C.TMP | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (32) Automated Malware Analysis - Joe Sandbox Cloud Basic (32)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF79B85152B764FE93.TMP | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (33) Automated Malware Analysis - Joe Sandbox Cloud Basic (33)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Tools\QTPopup.exe.config | XML 1.0 document, ASCII text, with CRLF line terminators | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (34) Automated Malware Analysis - Joe Sandbox Cloud Basic (34)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DFBA7C39718AF5E395.TMP | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (35) Automated Malware Analysis - Joe Sandbox Cloud Basic (35)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
| data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (36) Automated Malware Analysis - Joe Sandbox Cloud Basic (36)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DFC495FCECFBB90C03.TMP | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (37) Automated Malware Analysis - Joe Sandbox Cloud Basic (37)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ms-gamingoverlay---.lnk | MS Windows shortcut, Item id list present, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (38) Automated Malware Analysis - Joe Sandbox Cloud Basic (38)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\c079df.msi | Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Create Time/Date: Mon Jun 21 08:00:00 1999, Name of Creating Application: Windows Installer, Security: 1, Code page: 1252, Template: x64;0, Number of Pages: (…) | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (39) Automated Malware Analysis - Joe Sandbox Cloud Basic (39)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\c079dd.msi | Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Create Time/Date: Mon Jun 21 08:00:00 1999, Name of Creating Application: Windows Installer, Security: 1, Code page: 1252, Template: x64;0, Number of Pages: (…) | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (40) Automated Malware Analysis - Joe Sandbox Cloud Basic (40)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\SourceHash{13016E80-C7E5-4610-B149-FA8381CEE008} | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (41) Automated Malware Analysis - Joe Sandbox Cloud Basic (41)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\MSI7EC1.tmp | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (42) Automated Malware Analysis - Joe Sandbox Cloud Basic (42)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log | Unicode text, UTF-8 (with BOM) text, with CRLF line terminators | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (43) Automated Malware Analysis - Joe Sandbox Cloud Basic (43)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF0BC6F7A00D2AB80E.TMP | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (44) Automated Malware Analysis - Joe Sandbox Cloud Basic (44)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTTabBar\Explorer SafeMode.lnk | MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, Icon number=0, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (45) Automated Malware Analysis - Joe Sandbox Cloud Basic (45)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ms-gamingoverlay--kglcheck-.lnk | MS Windows shortcut, Item id list present, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (46) Automated Malware Analysis - Joe Sandbox Cloud Basic (46)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Installer\inprogressinstallinfo.ipi | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (47) Automated Malware Analysis - Joe Sandbox Cloud Basic (47)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\The Internet.lnk | MS Windows shortcut, Item id list present, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (48) Automated Malware Analysis - Joe Sandbox Cloud Basic (48)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\dd7c3b1adb1c168b.automaticDestinations-ms | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (49) Automated Malware Analysis - Joe Sandbox Cloud Basic (49)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Roaming\Microsoft\Installer\{13016E80-C7E5-4610-B149-FA8381CEE008}\_10AF3B5263D675893899A9.exe | MS Windows icon resource - 6 icons, 32x32, 16 colors, 4 bits/pixel, 16x16, 16 colors, 4 bits/pixel | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (50) Automated Malware Analysis - Joe Sandbox Cloud Basic (50)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Users\user\AppData\Local\Temp\QTTabBar_p3t4skdl.5uv\QTTabBar Setup.msi | Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Create Time/Date: Mon Jun 21 08:00:00 1999, Name of Creating Application: Windows Installer, Security: 1, Code page: 1252, Template: x64;0, Number of Pages: (…) | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (51) Automated Malware Analysis - Joe Sandbox Cloud Basic (51)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF1C693136DBF679D8.TMP | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (52) Automated Malware Analysis - Joe Sandbox Cloud Basic (52)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF3A10634422B541B1.TMP | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (53) Automated Malware Analysis - Joe Sandbox Cloud Basic (53)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF3C1083B5AE9223FF.TMP | data | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (54) Automated Malware Analysis - Joe Sandbox Cloud Basic (54)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Windows\Temp\~DF4422D3750F2AF440.TMP | Composite Document File V2 Document, Cannot read section info | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (55) Automated Malware Analysis - Joe Sandbox Cloud Basic (55)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\closewindow.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (56) Automated Malware Analysis - Joe Sandbox Cloud Basic (56)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\reload.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (57) Automated Malware Analysis - Joe Sandbox Cloud Basic (57)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\recenttabs.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (58) Automated Malware Analysis - Joe Sandbox Cloud Basic (58)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\recentfile.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (59) Automated Malware Analysis - Joe Sandbox Cloud Basic (59)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\option.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (60) Automated Malware Analysis - Joe Sandbox Cloud Basic (60)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\openwindow.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (61) Automated Malware Analysis - Joe Sandbox Cloud Basic (61)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\lock.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (62) Automated Malware Analysis - Joe Sandbox Cloud Basic (62)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\group.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (63) Automated Malware Analysis - Joe Sandbox Cloud Basic (63)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\goup.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (64) Automated Malware Analysis - Joe Sandbox Cloud Basic (64)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\goforward.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (65) Automated Malware Analysis - Joe Sandbox Cloud Basic (65)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\goback.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (66) Automated Malware Analysis - Joe Sandbox Cloud Basic (66)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\copytools.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (67) Automated Malware Analysis - Joe Sandbox Cloud Basic (67)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\search.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (68) Automated Malware Analysis - Joe Sandbox Cloud Basic (68)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\closetabbut.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (69) Automated Malware Analysis - Joe Sandbox Cloud Basic (69)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\closetab.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (70) Automated Malware Analysis - Joe Sandbox Cloud Basic (70)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\closeright.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (71) Automated Malware Analysis - Joe Sandbox Cloud Basic (71)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\closeleft.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (72) Automated Malware Analysis - Joe Sandbox Cloud Basic (72)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\clonetab.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (73) Automated Malware Analysis - Joe Sandbox Cloud Basic (73)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\applications.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (74) Automated Malware Analysis - Joe Sandbox Cloud Basic (74)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\alwaysontop.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (75) Automated Malware Analysis - Joe Sandbox Cloud Basic (75)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Language File Editor.lnk | MS Windows shortcut, Item id list present, Points to a file or directory, Has Working directory, Icon number=1, Archive, ctime=Tue Jan 29 01:56:03 2013, mtime=Tue Jan 29 01:56:03 2013, atime=Tue Jan 29 01:54:00 2013, length=241152, window=hide | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (76) Automated Malware Analysis - Joe Sandbox Cloud Basic (76)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Download Language File.lnk | MS Windows shortcut, Item id list present, Points to a file or directory, Has Working directory, Has command line arguments, Icon number=135, Archive, ctime=Tue Jan 29 01:56:03 2013, mtime=Tue Jan 29 01:56:03 2013, atime=Tue Jan 29 01:54:00 2013, leng (…) | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (77) Automated Malware Analysis - Joe Sandbox Cloud Basic (77)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Distributor\Download Image Files.lnk | MS Windows shortcut, Item id list present, Points to a file or directory, Has Working directory, Has command line arguments, Icon number=16, Archive, ctime=Tue Jan 29 01:56:03 2013, mtime=Tue Jan 29 01:56:03 2013, atime=Tue Jan 29 01:54:00 2013, lengt (…) | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (78) Automated Malware Analysis - Joe Sandbox Cloud Basic (78)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\goback.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (79) Automated Malware Analysis - Joe Sandbox Cloud Basic (79)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\search.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (80) Automated Malware Analysis - Joe Sandbox Cloud Basic (80)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\reload.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (81) Automated Malware Analysis - Joe Sandbox Cloud Basic (81)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\recenttabs.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (82) Automated Malware Analysis - Joe Sandbox Cloud Basic (82)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\recentfile.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (83) Automated Malware Analysis - Joe Sandbox Cloud Basic (83)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\option.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (84) Automated Malware Analysis - Joe Sandbox Cloud Basic (84)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\openwindow.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (85) Automated Malware Analysis - Joe Sandbox Cloud Basic (85)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\lock.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (86) Automated Malware Analysis - Joe Sandbox Cloud Basic (86)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\group.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (87) Automated Malware Analysis - Joe Sandbox Cloud Basic (87)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\goup.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (88) Automated Malware Analysis - Joe Sandbox Cloud Basic (88)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\goforward.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (89) Automated Malware Analysis - Joe Sandbox Cloud Basic (89)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\stoppreview.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (90) Automated Malware Analysis - Joe Sandbox Cloud Basic (90)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\copytools.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (91) Automated Malware Analysis - Joe Sandbox Cloud Basic (91)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\closewindow.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (92) Automated Malware Analysis - Joe Sandbox Cloud Basic (92)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\closetabbut.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (93) Automated Malware Analysis - Joe Sandbox Cloud Basic (93)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\closetab.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (94) Automated Malware Analysis - Joe Sandbox Cloud Basic (94)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\closeright.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (95) Automated Malware Analysis - Joe Sandbox Cloud Basic (95)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\closeleft.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (96) Automated Malware Analysis - Joe Sandbox Cloud Basic (96)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\clonetab.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (97) Automated Malware Analysis - Joe Sandbox Cloud Basic (97)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\applications.png | PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (98) Automated Malware Analysis - Joe Sandbox Cloud Basic (98)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Nightmode\alwaysontop.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (99) Automated Malware Analysis - Joe Sandbox Cloud Basic (99)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |
C:\Program Files\QTTabBar\Resources\CommandBar\Monotone\stoppreview.png | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | # | ![Automated Malware Analysis - Joe Sandbox Cloud Basic (100) Automated Malware Analysis - Joe Sandbox Cloud Basic (100)](data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==) |