Automated Malware Analysis IOC Report for

Details

Filetype:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	7.9987189791354965
Filename:	AGLCStructuredSettlementsInstaller.exe
Filesize:	90597468
MD5:	a53cb926ff7c4af575102bc08594327f
SHA1:	03d6a95e1eec98cf7eaebe508166700748b153ea
SHA256:	f7139b8276726858e5f3e05939e012506beec45c93a062ea6469bfb76bd1958a
SHA512:	2efec8ba1120e4cd7d122e099c2648dd72b9be4cf00c3cb2b94022fffbfb5d068726fafa766d172f8f1f76289e48d25cf7aec398c89d0347a8275424974340e2
SSDEEP:	1572864:rL1lhn9IWjpZnj7YpYcAhMX0AOaQInK7dl0NLW1mF7xoVwTvUUSg9v/ELntup9MT:lv6GHj+YhIOrli1xLxSS/+tupLL6KarL
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$..........Q............jZ9.....jZ;.J...jZ:......................................9...............9..........&.............7......._....

Signature Hits	Behavior Group	Mitre Attack
Contains functionality to check if a debugger is running (IsDebuggerPresent)	Anti Debugging
Contains functionality to dynamically determine API calls	Data Obfuscation, Anti Debugging
Contains functionality to launch a program with higher privileges	HIPS / PFW / Operating System Protection Evasion	Exploitation for Privilege Escalation Access Token Manipulation
Contains functionality to query CPU information (cpuid)	Language, Device and Operating System Detection	System Information Discovery
Contains functionality to query locales information (e.g. system language)	Language, Device and Operating System Detection	Access Token Manipulation System Shutdown/Reboot
Contains functionality to read the PEB	Anti Debugging	Access Token Manipulation
Contains functionality to shutdown / reboot the system	System Summary	Access Token Manipulation System Shutdown/Reboot
Contains functionality which may be used to detect a debugger (GetProcessHeap)	Anti Debugging	Security Software Discovery
Detected potential crypto function	System Summary	Access Token Manipulation Archive Collected Data Encrypted Channel
Found evasive API chain checking for process token information	Malware Analysis System Evasion	Native API Access Token Manipulation
Found large amount of non-executed APIs	Malware Analysis System Evasion	Access Token Manipulation
Found potential string decryption / allocating functions	System Summary	Deobfuscate/Decode Files or Information Obfuscated Files or Information
PE file contains sections with non-standard names	Data Obfuscation	File Deletion
Uses 32bit PE files	Compliance, System Summary
Uses Microsoft's Enhanced Cryptographic Provider	Cryptography
Uses code obfuscation techniques (call, push, ret)	Data Obfuscation
Very long cmdline option found, this is very uncommon (may be encrypted or packed)	HIPS / PFW / Operating System Protection Evasion	Command and Scripting Interpreter
Checks the free space of harddrives	Malware Analysis System Evasion
Contains functionality to add an ACL to a security descriptor	HIPS / PFW / Operating System Protection Evasion
Contains functionality to adjust token privileges (e.g. debug / backup)	System Summary	Access Token Manipulation
Contains functionality to check free disk space	System Summary
Contains functionality to create a new security descriptor	HIPS / PFW / Operating System Protection Evasion	Access Token Manipulation
Contains functionality to enumerate / list files inside a directory	Spreading, Malware Analysis System Evasion
Contains functionality to instantiate COM classes	System Summary	Access Token Manipulation
Contains functionality to load and extract PE file embedded resources	System Summary
Contains functionality to query local / system time	Language, Device and Operating System Detection	Access Token Manipulation System Time Discovery
Contains functionality to query system information	Malware Analysis System Evasion
Contains functionality to query windows version	Language, Device and Operating System Detection
Contains functionality to read ini properties file for application configuration	Persistence and Installation Behavior
Contains functionality to register its own exception handler	Anti Debugging
Creates files inside the user directory	System Summary
Creates temporary files	System Summary
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion
PE file has an executable .text section and no other executable section	System Summary	Access Token Manipulation
Reads ini files	System Summary
Reads software policies	System Summary	Access Token Manipulation
Sample reads its own file content	System Summary	Access Token Manipulation
Tries to load missing DLLs	System Summary	DLL Side-Loading
Writes ini files	System Summary	File and Directory Discovery
PE file contains a valid data directory to section mapping	System Summary	Security Software Discovery
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a mix of data directories often seen in goodware	System Summary
Submission file is bigger than most known malware samples	System Summary

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\TallComponents.PDF.Controls.WinForms.dll
Category:	dropped
Dump:	TallComponents.PDF.Controls.WinForms.dll.3.dr
ID:	dr_27
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.3766758509415515
Encrypted:	false
Ssdeep:	98304:wrB8EYyw9qftizsIY7wQa+lK31iIp1k9Zv6:wrB8EYYMU7wQa+lK4Iv2Zv6
Size:	6159872
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Yara detected Generic Downloader	Networking
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Config.Msi\4889b4.rbs
Category:	modified
Dump:	4889b4.rbs.3.dr
ID:	dr_43
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	5.713498258393253
Encrypted:	false
Ssdeep:	1536:k4LMmklkkkkkkkkEEmhwaJNIGsBqFu5mlWmYZIZ2aBP0R3/iWjiZ0OKgVahLyjvY:mgXCxdq7k/
Size:	85022
Whitelisted:	false
Reputation:	low

Details

File:	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corebridge Financial\Structured Settlements\AGLC Structured Settlements.lnk
Category:	dropped
Dump:	AGLC Structured Settlements.lnk.3.dr
ID:	dr_35
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, Icon number=0, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
Entropy:	2.8878563003842874
Encrypted:	false
Ssdeep:	48:8V/7USDPVIYlJOtnPPVIYl+Ot6n8V5PPVIYl+OtHnSAq72WPPVIYl+Ot:8VTZuYePuYa8V5PuYJzq72WPuY
Size:	2839
Whitelisted:	false
Reputation:	low

Signature Hits	Behavior Group	Mitre Attack
Stores files to the Windows start menu directory	Boot Survival	Registry Run Keys / Startup Folder

Details

File:	C:\Users\Public\Desktop\AGLC Structured Settlements.lnk
Category:	dropped
Dump:	AGLC Structured Settlements.lnk0.3.dr
ID:	dr_37
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Icon number=0, Archive, ctime=Thu Oct 26 17:09:20 2023, mtime=Fri Apr 19 13:04:04 2024, atime=Thu Oct 26 17:09:20 2023, length=918016, window=hide
Entropy:	4.001942440208538
Encrypted:	false
Ssdeep:	48:8fFbyp747AM0dnHsBdWmjn8R35PPVIYlIvfiLSA4KkjWPPVIYlIvfiKY:8tWAAM0dHsbWQ8R35PuY/4WPuYi
Size:	2324
Whitelisted:	false
Reputation:	low

Details

File:	C:\Users\user\AppData\Local\Downloaded Installations\{2DAE1BFB-6F68-4AD8-A074-1F290D098EE1}\Structured Settlements.msi
Category:	dropped
Dump:	Structured Settlements.msi0.1.dr
ID:	dr_13
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: Installation Database, Comments: Contact: Your local administrator, Keywords: Installer,MSI,Database, Subject: Structured Settlements, Author: Corebridge Financial, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2023 29, Revision Number: {2DAE1BFB-6F68-4AD8-A074-1F290D098EE1}, Last Saved Time/Date: Fri Jan 19 10:07:06 2024, Create Time/Date: Fri Jan 19 10:07:06 2024, Last Printed: Fri Jan 19 10:07:06 2024, Code page: 1252, Template: Intel;1033
Entropy:	7.983243289223872
Encrypted:	false
Ssdeep:	1572864:lxd3U0gUk2abcyG+gVjx9M1a+6RjmQkeveqdZG4kxTcDByZnXWghc:lxNkTAyZgj9kag3MZdkiDqnB
Size:	91906560
Whitelisted:	false
Reputation:	low

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\0x0409.ini
Category:	dropped
Dump:	0x0409.ini.1.dr
ID:	dr_8
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with very long lines (308), with CRLF line terminators
Entropy:	3.4834020467841986
Encrypted:	false
Ssdeep:	384:CTmyuV//BiTbh/YgAwC2WrP2DBW5/Oa0Mhs+XVgv:CT6V//BiXh/t/lWr0pa0Mhs+XVgv
Size:	22914
Whitelisted:	false
Reputation:	moderate

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Category:	dropped
Dump:	AGLCStructuredSettlementsInstaller.exe.0.dr
ID:	dr_1
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	7.9987189791354965
Encrypted:	true
Ssdeep:	1572864:rL1lhn9IWjpZnj7YpYcAhMX0AOaQInK7dl0NLW1mF7xoVwTvUUSg9v/ELntup9MT:lv6GHj+YhIOrli1xLxSS/+tupLL6KarL
Size:	90597468
Whitelisted:	false
Reputation:	low

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
PE file contains sections with non-standard names	Data Obfuscation
Uses 32bit PE files	Compliance, System Summary
Very long cmdline option found, this is very uncommon (may be encrypted or packed)	HIPS / PFW / Operating System Protection Evasion	Command and Scripting Interpreter
Checks the free space of harddrives	Malware Analysis System Evasion	System Information Discovery
Creates files inside the user directory	System Summary	Masquerading
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
PE file has an executable .text section and no other executable section	System Summary
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading
URLs found in memory or binary data	Networking
PE file contains a valid data directory to section mapping	System Summary
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a mix of data directories often seen in goodware	System Summary
Submission file is bigger than most known malware samples	System Summary

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe:Zone.Identifier
Category:	dropped
Dump:	AGLCStructuredSettlementsInstaller.exe_Zone.Identifier.0.dr
ID:	dr_0
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	3.95006375643621
Encrypted:	false
Ssdeep:	3:ggPYV:rPYV
Size:	26
Whitelisted:	false
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
PE file contains sections with non-standard names	Data Obfuscation
Uses 32bit PE files	Compliance, System Summary
Checks the free space of harddrives	Malware Analysis System Evasion	System Information Discovery
Creates files inside the user directory	System Summary	Masquerading
Disables application error messsages (SetErrorMode)	Hooking and other Techniques for Hiding and Protection
May try to detect the Windows Explorer process (often used for injection)	HIPS / PFW / Operating System Protection Evasion	Process Injection Process Discovery
PE file has an executable .text section and no other executable section	System Summary
Spawns processes	System Summary	Process Injection
Tries to load missing DLLs	System Summary	DLL Side-Loading
URLs found in memory or binary data	Networking
PE file contains a valid data directory to section mapping	System Summary
PE file contains a debug data directory	System Summary
Contains modern PE file flags such as dynamic base (ASLR) or NX	Compliance, System Summary
PE file contains a mix of data directories often seen in goodware	System Summary
Submission file is bigger than most known malware samples	System Summary

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\Microsoft .NET Framework 4.0 Client (Web Download).prq
Category:	dropped
Dump:	Microsoft .NET Framework 4.0 Client (Web Download).prq.1.dr
ID:	dr_11
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Entropy:	5.335835372312326
Encrypted:	false
Ssdeep:	48:cRSUIW6t+ue1nOYnhj4YnhT4YntO4YntiYnt4YnhS4YntQYntLYn4eoEtrIYqGb4:BrW6t3anfnhj1nhT1n41nlnt1nhS1nTT
Size:	2309
Whitelisted:	false
Reputation:	low

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\Setup.INI
Category:	dropped
Dump:	Setup.INI.1.dr
ID:	dr_7
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	low

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\Structured Settlements.msi
Category:	dropped
Dump:	Structured Settlements.msi.1.dr
ID:	dr_12
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: Installation Database, Comments: Contact: Your local administrator, Keywords: Installer,MSI,Database, Subject: Structured Settlements, Author: Corebridge Financial, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2023 29, Revision Number: {2DAE1BFB-6F68-4AD8-A074-1F290D098EE1}, Last Saved Time/Date: Fri Jan 19 10:07:06 2024, Create Time/Date: Fri Jan 19 10:07:06 2024, Last Printed: Fri Jan 19 10:07:06 2024, Code page: 1252, Template: Intel;1033
Entropy:	7.983243289223872
Encrypted:	false
Ssdeep:	1572864:lxd3U0gUk2abcyG+gVjx9M1a+6RjmQkeveqdZG4kxTcDByZnXWghc:lxNkTAyZgj9kag3MZdkiDqnB
Size:	91906560
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\_ISMSIDEL.INI
Category:	dropped
Dump:	_ISMSIDEL.INI.0.dr
ID:	dr_2
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	2.8954618442383215
Encrypted:	false
Ssdeep:	3:Q+5lkrJ4l49:Q+s2l49
Size:	20
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Reads ini files	System Summary	File and Directory Discovery
Writes ini files	System Summary	File and Directory Discovery

Details

File:	C:\Users\user\AppData\Local\Temp\~2F9D.tmp
Category:	dropped
Dump:	~2F9D.tmp.0.dr
ID:	dr_3
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~2F9E.tmp
Category:	dropped
Dump:	~2F9E.tmp.0.dr
ID:	dr_4
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~2FBE.tmp
Category:	dropped
Dump:	~2FBE.tmp.0.dr
ID:	dr_5
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~2FBF.tmp
Category:	modified
Dump:	~2FBF.tmp.0.dr
ID:	dr_6
Target ID:	0
Process:	C:\Users\user\Desktop\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~320E.tmp
Category:	dropped
Dump:	~320E.tmp.1.dr
ID:	dr_9
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~321E.tmp
Category:	dropped
Dump:	~321E.tmp.1.dr
ID:	dr_10
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Local\Temp\~47BB.tmp
Category:	dropped
Dump:	~47BB.tmp.1.dr
ID:	dr_14
Target ID:	1
Process:	C:\Users\user\AppData\Local\Temp\{978B1B8A-E3CA-4B77-9A20-8153B898500E}\AGLCStructuredSettlementsInstaller.exe
Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Entropy:	3.730369655428694
Encrypted:	false
Ssdeep:	96:rEhkMaE6CMrRWuYOkokOr+ON/XsEbFWaEPRhS+gWPQPgWRGTwQbPrvnp6kY05w7e:YhcpHrRnxkElcuQaEZhdxoIWRGcQbPrj
Size:	5756
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Activation.dll
Category:	dropped
Dump:	AGLCSS.Activation.dll.3.dr
ID:	dr_297
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.986323337430565
Encrypted:	false
Ssdeep:	192:FMUc0BSrhG2hFDk67+tJTTJk5N05/muNWQ9Lg4byOTIPm8Mjpwy:Ftc0BO7FwPLFv/muNWQ9Lg4BEPmLj3
Size:	12288
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Agents.dll
Category:	dropped
Dump:	AGLCSS.Agents.dll.3.dr
ID:	dr_298
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.7833110474667935
Encrypted:	false
Ssdeep:	192:i5fSHRMsfxjhgmB7cyqmYehGK1rkfL8W2O:m6xMa/gkcyq/Up1gIWH
Size:	9728
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Calc.dll
Category:	dropped
Dump:	AGLCSS.Calc.dll.3.dr
ID:	dr_299
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.676355503970769
Encrypted:	false
Ssdeep:	1536:8xKxKxlx9fuS8mM1DrRRm3eY10QFADTY4vRji1OO4cYM96A5nC0TlVSV5:8xKxKxlxpuS8RJeDS5vRjiNJvhMV5
Size:	110080
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.ClientCaseInfo.dll
Category:	dropped
Dump:	AGLCSS.ClientCaseInfo.dll.3.dr
ID:	dr_300
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.875337413026049
Encrypted:	false
Ssdeep:	96:En39DWbVMcpimOIkv8lbGykb4fByBN1VZ5p8Fy56ci1qg3VV4F+cSJlWZHCm:EpWhzkElbGyXy9VZD8MIcKjzllWYm
Size:	10752
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.ClientInfo.dll
Category:	dropped
Dump:	AGLCSS.ClientInfo.dll.3.dr
ID:	dr_301
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.780864974947333
Encrypted:	false
Ssdeep:	768:Gqm9pH5Grnu1s9Qm/zybjbLkf4pldl7ysWzs:duH5GDoM/Lyrm6ld4Tzs
Size:	44544
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.ClientReader.dll
Category:	dropped
Dump:	AGLCSS.ClientReader.dll.3.dr
ID:	dr_302
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.723205152189448
Encrypted:	false
Ssdeep:	192:hIPcIWOi+BePL3xevxd45TFx9zfj+aL7f0/yAjL6fNIM:hIPcIWOi+BePLA45Fx5yaYL2h
Size:	12288
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Credit.dll
Category:	dropped
Dump:	AGLCSS.Credit.dll.3.dr
ID:	dr_343
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.7200392312457025
Encrypted:	false
Ssdeep:	768:jzh+BMgWn4YONz9vlrahR0UV7gwIx9Aioa1ox:jzmvplmqUV72Aio/
Size:	43520
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Data.dll
Category:	dropped
Dump:	AGLCSS.Data.dll.3.dr
ID:	dr_344
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.940808428901624
Encrypted:	false
Ssdeep:	1536:yUMsE7wG7SuwVoA9hcnOgPO7XMR1C+nCvmNEI86vCO:0sEsiSVAhOrMRhhNpv7
Size:	70656
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Deployment.dll
Category:	dropped
Dump:	AGLCSS.Deployment.dll.3.dr
ID:	dr_345
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.378007834009325
Encrypted:	false
Ssdeep:	96:ShrV8gB7mrAxVaw79NTa/VKy28/VKAesStSRnSO+IkZ:STIrmVaw7PTa/V528/ViBSg
Size:	7168
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Enumerations.dll
Category:	dropped
Dump:	AGLCSS.Enumerations.dll.3.dr
ID:	dr_349
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.292263588429404
Encrypted:	false
Ssdeep:	384:pYcXMkNgKZFhRmuxlQM5GzSUP6Q9SrHncno60Msnc5vWp:KcXMkNnFkP0Xc5O
Size:	16384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Helpers.dll
Category:	dropped
Dump:	AGLCSS.Helpers.dll.3.dr
ID:	dr_350
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.498286029340412
Encrypted:	false
Ssdeep:	384:JJEUFekGL+xzYcQCh/PN1i3KPX6vYWhX90Xa79dlUm8VBZMJQQcEoejhZeMb3EVn:JhFeNL+x7pNRQHhX9ZS2OQTeMb3EVCU
Size:	25088
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Messages.dll
Category:	dropped
Dump:	AGLCSS.Messages.dll.3.dr
ID:	dr_351
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.905730010729166
Encrypted:	false
Ssdeep:	192:4vpiYiwuo3n+TMwr/S3TXJl79awqp9tn6GX7hBPrVlWOA:upXii+TPUrJl795w9tn6y7hBzVlWd
Size:	8704
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Mortality.dll
Category:	dropped
Dump:	AGLCSS.Mortality.dll.3.dr
ID:	dr_352
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.585431889284719
Encrypted:	false
Ssdeep:	768:9XQZcGAojf4rMcwk5cJs9csohreyFeoq:xQZcHg8cNrey2
Size:	25600
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.PDFViewer.dll
Category:	dropped
Dump:	AGLCSS.PDFViewer.dll.3.dr
ID:	dr_383
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.884530722461495
Encrypted:	false
Ssdeep:	1536:YbIIJaS17fNY9hE7ELduDQrR/Ens61nP:YMIJaS17fNY9FBEns6t
Size:	55808
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Print.dll
Category:	dropped
Dump:	AGLCSS.Print.dll.3.dr
ID:	dr_384
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.422388945987697
Encrypted:	false
Ssdeep:	6144:dLiykHe0DefbejGqdJHCiphDFFL7VhLOB3eoEEj8v3PCbAwJ:dLiz+iZjtvn/LJoBkEkPsdJ
Size:	368640
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.ProductInfo.dll
Category:	dropped
Dump:	AGLCSS.ProductInfo.dll.3.dr
ID:	dr_385
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.630941730748361
Encrypted:	false
Ssdeep:	384:FfYTQjW3/SvinEAf3RVE9FXm+VPs4CUHT3U2qWIH:FYQSPM0hVadN0IXk
Size:	22016
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Splash.dll
Category:	dropped
Dump:	AGLCSS.Splash.dll.3.dr
ID:	dr_386
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.575439360311943
Encrypted:	false
Ssdeep:	3072:Ljn2tuVibVvW7HAO/+V/1OQ7HJSM4t8E0UD3To:LtitKA4+VdOQVSMW83M
Size:	131072
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.Validation.dll
Category:	dropped
Dump:	AGLCSS.Validation.dll.3.dr
ID:	dr_387
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.429039106627063
Encrypted:	false
Ssdeep:	768:NO2jVUQPfXlSvPKv2cUwxFMwfD/l0sp26:V5BXgvPKewDDfD/lt26
Size:	45568
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.exe
Category:	dropped
Dump:	AGLCSS.exe.3.dr
ID:	dr_388
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.356329926486251
Encrypted:	false
Ssdeep:	12288:irP8SrEppVCltJl/baoJ5Sf1kAiXxRcAiXxRZ6E4UGTldJ:NtppcDy9f1kAiXxeAiXxlDGTl7
Size:	918016
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\AGLCSS.exe.config
Category:	dropped
Dump:	AGLCSS.exe.config.3.dr
ID:	dr_389
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, ASCII text, with very long lines (410), with CRLF line terminators
Entropy:	5.148397299333294
Encrypted:	false
Ssdeep:	192:Le7l7Fr7l7T1LVd9zbGAyS+/nidDr+KS/pvrsJ+J/qJvK0ZKfghxh05n6X:LMl7FXl7T1xdNbcKail
Size:	12143
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Aspose.PDF.dll
Category:	dropped
Dump:	Aspose.PDF.dll.3.dr
ID:	dr_253
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.091664407895098
Encrypted:	false
Ssdeep:	393216:2BEhT0ALTLIC3DwM8hN+5dwd7sEGizd2Gxj0XVRDCAxvFXXarDervx:2BEF0KLIPSG7Cipxj0FRZdGDm
Size:	37363184
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Aspose.PDF.xml
Category:	dropped
Dump:	Aspose.PDF.xml.3.dr
ID:	dr_390
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, ASCII text, with very long lines (334), with CRLF line terminators
Entropy:	4.636781505500332
Encrypted:	false
Ssdeep:	12288:ZHYGh5NB2KwQ4hv+t5xJv1NV1pzJBJVXZmarNplbp/9Zv65Krvzxx:ZHYGh5NB2+m+t5xJv1NV1pzJBJVXZBjH
Size:	2044621
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Aspose.Total.NET.lic
Category:	dropped
Dump:	Aspose.Total.NET.lic.3.dr
ID:	dr_391
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, ASCII text
Entropy:	5.43490980259347
Encrypted:	false
Ssdeep:	12:TMFaFIc10RbskcZy8tYW6DbfiXpFJf601Z5DNeAFbLZf/DlnLpkMvT52Ue67dhiN:KaFxYYyC/aik0j5DHlRxisImdhnh9k
Size:	966
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Cases\Default Case.agss
Category:	dropped
Dump:	Default Case.agss.3.dr
ID:	dr_425
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.993602621685229
Encrypted:	true
Ssdeep:	768:SV458OcEGl1h7UZV8Ms/yZ1nSlCp803HSEhd7iM21:SV45Jel10MAnFx3Hdn7i1
Size:	28912
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Change.log
Category:	dropped
Dump:	Change.log.3.dr
ID:	dr_392
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.823316708001477
Encrypted:	false
Ssdeep:	24:WOzRj/FS8UOBnKP93dkMhldNc8puuujBpMjq:WMRj/FSunKV31lJu1rV
Size:	974
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Ciloci.Flee.dll
Category:	dropped
Dump:	Ciloci.Flee.dll.3.dr
ID:	dr_255
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.605433780638061
Encrypted:	false
Ssdeep:	3072:tDlMM+67dv38NX4m1ipcPEz8UgwV4awZgv:H+MgN1ipcPEMwVZ
Size:	217088
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.BonusSkins.v12.2.dll
Category:	dropped
Dump:	DevExpress.BonusSkins.v12.2.dll.3.dr
ID:	dr_258
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.859819019714371
Encrypted:	false
Ssdeep:	98304:ZX0hMZb9RXuBtGVqs7VpHryI/ZCC6sO4O6KOmQxgWpyfAFEIYI4+LdlGut/APDD5:ZTyaFvF/Zv6fMmgafAFI2GuB4DF
Size:	8572504
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Data.v10.2.dll
Category:	dropped
Dump:	DevExpress.Data.v10.2.dll.3.dr
ID:	dr_346
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.934841008678069
Encrypted:	false
Ssdeep:	49152:GEWnGIljGxTbN1rS7dn5tghHg1mu/pUoQUCv:qObN1e7hrC
Size:	2639872
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Data.v12.2.dll
Category:	dropped
Dump:	DevExpress.Data.v12.2.dll.3.dr
ID:	dr_262
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.207439740679152
Encrypted:	false
Ssdeep:	49152:NLCpB0/qFLCXtfTmRmIt0Kp5HV1AWn/VvMWpJ9zdKOmG3MO:S0iFLCX0Rmm1mG3MO
Size:	3012696
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Office.v12.2.Core.dll
Category:	dropped
Dump:	DevExpress.Office.v12.2.Core.dll.3.dr
ID:	dr_266
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.201949685048063
Encrypted:	false
Ssdeep:	6144:jZpLVr6Tt1l2KKLO/dfbdQhtzcR7H51dNhWU2YzYOHz5wOu2rJXLm9+gJlCvWWb1:jTLVr6TXrkOFDocR5Y0rLHF
Size:	270424
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Printing.v12.2.Core.dll
Category:	dropped
Dump:	DevExpress.Printing.v12.2.Core.dll.3.dr
ID:	dr_270
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.886309145114528
Encrypted:	false
Ssdeep:	24576:PRFrEK4zCsb43VLFHayTbdwmcaTcgvhHJ/tPmZMcLZqcdxeDbt7CrcBljjWU:JFrPTYtmwOhp/tPmmcL8gxe8rrU
Size:	2152536
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.RichEdit.v12.2.Core.dll
Category:	dropped
Dump:	DevExpress.RichEdit.v12.2.Core.dll.3.dr
ID:	dr_274
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.239158294923384
Encrypted:	false
Ssdeep:	49152:eeFHVVC7B+s4DRJKskaQPhG/zKbJPLOJSghDNHi5YPkQU:vF1VC78hDRYpP+KbCDi
Size:	5131352
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Utils.v10.2.dll
Category:	dropped
Dump:	DevExpress.Utils.v10.2.dll.3.dr
ID:	dr_347
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.458876368493957
Encrypted:	false
Ssdeep:	49152:q4G9UjxJyAitRYwPSj3F0xC/MTC1FgUki5BtAbca6UoYX1QPTDUMzFWc5Gw:xG9+xJDaPSjV0sMW1FgXuAIswcaYG
Size:	3409920
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Utils.v12.2.dll
Category:	dropped
Dump:	DevExpress.Utils.v12.2.dll.3.dr
ID:	dr_278
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	7.354053612194487
Encrypted:	false
Ssdeep:	49152:5aabjxTWAOfraPgyC30nv8Nm578EeoT06GxYg7pCKU0N82IG1B4s2CiUTSw:5XfxTWAOfraPgLoi48AKUlsL
Size:	3699288
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.Web.v12.2.dll
Category:	dropped
Dump:	DevExpress.Web.v12.2.dll.3.dr
ID:	dr_282
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.028911925904774
Encrypted:	false
Ssdeep:	49152:+/VS7jCWaUpWtEM9vAzLi3qE4KaS67J8h5O7iJ9mguqkORBfbrvN7Gp/8ZyKQYFu:+NS7jCWaUpCT3qLWO+PO
Size:	6828536
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraBars.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraBars.v12.2.dll.3.dr
ID:	dr_286
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.082193144017104
Encrypted:	false
Ssdeep:	98304:pboKqG38WAOfraPtWAOfraPTWAOfraPzhkYf:pboKuWAOfraPtWAOfraPTWAOfraPes
Size:	3829336
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraEditors.v10.2.dll
Category:	dropped
Dump:	DevExpress.XtraEditors.v10.2.dll.3.dr
ID:	dr_348
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.006535524959442
Encrypted:	false
Ssdeep:	24576:yDVfaMEV77ldLKqEC745uutCg74fBkXaE0WsOVySDgFY3P:yD5AXlTkT7+
Size:	1744896
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraEditors.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraEditors.v12.2.dll.3.dr
ID:	dr_303
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.095882030461041
Encrypted:	false
Ssdeep:	24576:DBxDx0ppROLdqZ6/XtQZjA6s+H/gI0I74pVGsuv5k5POFq3cEoJgnFFOejg:LKv6/X2ZjA6sakDnFy
Size:	2408536
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraGrid.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraGrid.v12.2.dll.3.dr
ID:	dr_305
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.09457590281721
Encrypted:	false
Ssdeep:	24576:m0ijUKJFl2lKbF0fQV71hHbztU7T2tSqOM9sbnE1Mc+/4ZZLjfIpMsd9Z4Gef5cD:Il2lKbF057T8KbzyXgef5c4NLc1
Size:	2231384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraLayout.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraLayout.v12.2.dll.3.dr
ID:	dr_308
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.145707529105092
Encrypted:	false
Ssdeep:	12288:WHYouxedCF2wRB0noktToCCAIPPZWP29mi6CkWoV:f7x+CFmokLNIVMWI
Size:	805464
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraNavBar.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraNavBar.v12.2.dll.3.dr
ID:	dr_312
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.294830947153117
Encrypted:	false
Ssdeep:	6144:TroJE82vxoaWAOfraPEoalR4YVVKBb6FlBMHuzHE3uNnYCzN09z8DW:V8+xoaWAOfraPEoalR/F3iz8y
Size:	362072
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraRichEdit.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraRichEdit.v12.2.dll.3.dr
ID:	dr_316
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.948221195904113
Encrypted:	false
Ssdeep:	12288:fuWNaUNhP5HWPtwiu96p76/Dg6ZMMMH91T321ID77h6J9rTXbv9w99fTw:1Iai37UtUX21I7Y+990
Size:	1646168
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DevExpress.XtraTreeList.v12.2.dll
Category:	dropped
Dump:	DevExpress.XtraTreeList.v12.2.dll.3.dr
ID:	dr_320
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.240664153224065
Encrypted:	false
Ssdeep:	6144:EeifECD+V+yLtYj9sqU7atkkDkrJge93A1s6DD6IBm4J7gS3xU7ISjZ1BYE81Rxb:1YlsP7dL9KTJhxtE81dj+y26dFuTa
Size:	868440
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\DotNetZip.dll
Category:	dropped
Dump:	DotNetZip.dll.3.dr
ID:	dr_324
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.813322972745781
Encrypted:	false
Ssdeep:	6144:BuCITwatNH6B1vHTSpbIeCHz927IWYgGtSV41kJDsTDD3sAJe6dwxLV/z:J/aOaIdHo72S4csfsqe6qfz
Size:	458752
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\EULA.rtf
Category:	dropped
Dump:	EULA.rtf.3.dr
ID:	dr_423
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025
Entropy:	5.004945711550832
Encrypted:	false
Ssdeep:	3072:IMws/8s2IOd1FgCR/qYkpZl1HKO+dH3VhOE7:9jed1FgCcYkpZl1HKRdH3VhOA
Size:	143990
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates license or readme file	Compliance, Persistence and Installation Behavior

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\EntityFramework.SqlServer.dll
Category:	dropped
Dump:	EntityFramework.SqlServer.dll.3.dr
ID:	dr_328
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.069668321990478
Encrypted:	false
Ssdeep:	6144:EcK9UcUZV25QiE0U0CxzB6zHK1HHYkIfPQG2puGeqVmjaVmnS4bfu65+:fcuV200veIJu65
Size:	591752
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\EntityFramework.dll
Category:	dropped
Dump:	EntityFramework.dll.3.dr
ID:	dr_332
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.097816081905885
Encrypted:	false
Ssdeep:	49152:9PrnRLX8ziolcD5jX24Y/g1YmNBayW5Ci72yEBzw9vb5:tnt8zi8o5jX24Y/fmLaZv7xt
Size:	4991352
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\IMG.WCF.BehaviourExtension.dll
Category:	dropped
Dump:	IMG.WCF.BehaviourExtension.dll.3.dr
ID:	dr_336
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	4.38344133265455
Encrypted:	false
Ssdeep:	96:9yFeOOHNrypFo/glkx81DacjzmJvufolzjrJj2nYSPQzdnWOiEeE:gFwNCedxwDacLfolzjrJj2vQRyE
Size:	7168
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\IntegratedCalculationEngine.exe
Category:	dropped
Dump:	IntegratedCalculationEngine.exe.3.dr
ID:	dr_15
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.157363258364149
Encrypted:	false
Ssdeep:	384:CcINOZi96Yf88aAY/Ai49eFPkTWRRmEHkSsVgk3WU:CcNZigYo/v8d
Size:	16384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\IntegratedCalculationEngine.exe.config
Category:	dropped
Dump:	IntegratedCalculationEngine.exe.config.3.dr
ID:	dr_424
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Entropy:	5.323127390109098
Encrypted:	false
Ssdeep:	48:3nLEkEWhiHORGCD6FjL86fWDd6HfuphJJYmrTI3NruK54YHJHHXsJNJ4YHKJyMHO:g9W8HORGm6FjLBeDd6HfuphYwTcNruKs
Size:	2976
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Kjs.AppLife.Update.Controller.dll
Category:	dropped
Dump:	Kjs.AppLife.Update.Controller.dll.3.dr
ID:	dr_16
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.830177574604078
Encrypted:	false
Ssdeep:	6144:NKZnByC3WOE+gqWMuFtejoAfrqS2U7CPekqVetXVq/j8Cqqajqshx7:WsCGYm2n21+OBjqKN
Size:	860160
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Layouts\defdocman.xml
Category:	dropped
Dump:	defdocman.xml.3.dr
ID:	dr_453
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text
Entropy:	4.787814045940871
Encrypted:	false
Ssdeep:	192:7wYTbw0qaWObwFqdFaIbw0Jb6b7bwFJ6Owbw0JqtXke:7wYnNWepakv6bfVOcutXke
Size:	11883
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Layouts\defmainbar.xml
Category:	dropped
Dump:	defmainbar.xml.3.dr
ID:	dr_454
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text
Entropy:	4.383491958546536
Encrypted:	false
Ssdeep:	384:dk6GLXEdrzrSA4GcB8zDtfNjOB7ZkZalLDuIDgwSDc1+pDtj5D1DuJflH5XdPpyZ:MvqxPcFSa3+t2GpqsqTXVWk2lQe
Size:	140602
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Layouts\docman.xml
Category:	dropped
Dump:	docman.xml.3.dr
ID:	dr_455
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text
Entropy:	4.776116560814963
Encrypted:	false
Ssdeep:	192:rL/qf/bvLbub5LbMLy3Frab5L27RLbWLifSnabUi4te:XqLebt/3FWU7V5fSqUi4te
Size:	12973
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Layouts\mainbar.xml
Category:	dropped
Dump:	mainbar.xml.3.dr
ID:	dr_456
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text
Entropy:	4.380756081200017
Encrypted:	false
Ssdeep:	384:7IoK/Tk2xQrcAqugVM9Q3TCi+bls9iRNReqjwSGt+hRXOUaEmEKxb9O0WYWE+XZ0:6YJs45knsE6zOzlvVukbtNiyeJe
Size:	168319
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\AGLCSS.Product.xml
Category:	dropped
Dump:	AGLCSS.Product.xml.3.dr
ID:	dr_459
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.99795133269306
Encrypted:	true
Ssdeep:	1536:JVoZMygBH5PEtvHmw8nkdJXDTUgFeb+oXZThuGkdcsg69h4lUj+i8FmG3fpQhXYt:JVqMygBH6QOTlFebVXZTUGkdWKfjV4vl
Size:	89808
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\CalcExpressionConfig.xml
Category:	dropped
Dump:	CalcExpressionConfig.xml.3.dr
ID:	dr_460
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.992065105427095
Encrypted:	true
Ssdeep:	384:3sXANRM+pIlXlWHOsYHmQssX5wUvFioDkOC09f3CZ9JTvNizrW/S+LCYKY8G8aEj:8RttlgnkIooL09fE3liz4tdKZmZt9mV
Size:	24944
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\VersionInfo.xml
Category:	dropped
Dump:	VersionInfo.xml.3.dr
ID:	dr_483
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.903226621688569
Encrypted:	false
Ssdeep:	48:vGih4kPhP+C+7oB8NMuRoa0sSh8AohBSD6j8tbIhlihiv1qIngn:v/i2V+7i8mzLJD6j8RIjYivEIngn
Size:	1984
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\ac.xml
Category:	dropped
Dump:	ac.xml.3.dr
ID:	dr_458
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.583620008070925
Encrypted:	false
Ssdeep:	12:imCEDsgTr/PL140hVbFia0t5qFL/7bV6tR/s/RP7xDk9lTFZTMLq5UIW:vNDswr/PB4SVboasALTbQtW/RP7xDkXE
Size:	496
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\states.xml
Category:	dropped
Dump:	states.xml.3.dr
ID:	dr_461
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.978909687584445
Encrypted:	false
Ssdeep:	192:OEfDIpAmEJb8n1BvnJRHqhHG2VPrYnUrIonxTtv:bDPVJgvJp0RVuUZxTtv
Size:	6896
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\validationmsgs.xml
Category:	dropped
Dump:	validationmsgs.xml.3.dr
ID:	dr_462
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.9939485136602615
Encrypted:	true
Ssdeep:	768:gCb7v4YZkS7xhVHHqUfECL9oJp3uy5R480oWWgCbxy:a27PZHqjCBo3PK7oWWLk
Size:	28352
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Metadata\version.xml
Category:	dropped
Dump:	version.xml.3.dr
ID:	dr_457
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Entropy:	5.171110677339082
Encrypted:	false
Ssdeep:	3:JLWMNHU8LdgCgNW2X4MKLbo6H50pWNtFYsXLKFfjmKcDJVmMCD0UW7zDNtA72X4T:JiMVBdmkMKn7DYsEfaVhUW/ANMKv
Size:	211
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Microsoft.CSharp.dll
Category:	dropped
Dump:	Microsoft.CSharp.dll.3.dr
ID:	dr_17
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.153243582041234
Encrypted:	false
Ssdeep:	12288:0A7evtKx2TDGyNXQ5RoYIIv6a6666/ENtGfVHbQlP:P7eV6GDGypYRD6a6666/ENtGfVHbW
Size:	483280
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Newtonsoft.Json.dll
Category:	dropped
Dump:	Newtonsoft.Json.dll.3.dr
ID:	dr_18
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.940787194132384
Encrypted:	false
Ssdeep:	12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
Size:	701992
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQA Form w-Atty Fee Language.pdf
Category:	dropped
Dump:	AGL UQA Form w-Atty Fee Language.pdf.3.dr
ID:	dr_485
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.331925058869466
Encrypted:	false
Ssdeep:	6144:NTHYfUWAdbadM7eRMe8suEDqAecfDErjBT0Y:NuUTVavmTEzecfDErjv
Size:	271191
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQA Form.pdf
Category:	dropped
Dump:	AGL UQA Form.pdf.3.dr
ID:	dr_484
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.900503114690352
Encrypted:	false
Ssdeep:	1536:Q20tw/fqLxI77gx+3Q6wNDKAZs0zSfkZFFqN1JzWpZhSVWo3F0z9Ja/ZpogcyPVp:QttJq5kKIX4UOPF0z9JyoryPcu/p
Size:	139318
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQAR Form - 2 Assignors w-Atty Fee Language.pdf
Category:	dropped
Dump:	AGL UQAR Form - 2 Assignors w-Atty Fee Language.pdf.3.dr
ID:	dr_486
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.9182011196458015
Encrypted:	false
Ssdeep:	3072:AB7GPGme17voHbEaghrY/8iyn+wRM228xkTtbaSfSXhE0UkBc544SE8c:AxGPReFvqbE9hG8wpN8xYaSqXe0UkBc9
Size:	166877
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQAR Form - 2 Assignors.pdf
Category:	dropped
Dump:	AGL UQAR Form - 2 Assignors.pdf.3.dr
ID:	dr_487
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.876931219988963
Encrypted:	false
Ssdeep:	3072:wUZz3ipxOQHdO/XxlmPVpggM0Tq1g0HN9g0H+0Xx:j3iPdOvDaXggPTq1nHN9nH3x
Size:	128842
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQAR Form revised w-Atty Fee Language.pdf
Category:	dropped
Dump:	AGL UQAR Form revised w-Atty Fee Language.pdf.3.dr
ID:	dr_488
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.868767802568745
Encrypted:	false
Ssdeep:	3072:HtS0bloOse/LHZhkJuvf6JxMTDUcbZb6oZdi:HtSzG/LrkJuaTKEoq
Size:	118997
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQAR Form single assignor.pdf
Category:	dropped
Dump:	AGL UQAR Form single assignor.pdf.3.dr
ID:	dr_489
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.85125155745619
Encrypted:	false
Ssdeep:	1536:MLk0h5s+dBBfjdvEKIfZlqoklF3+PowG4QISXMinqfohKBLvi+b:WNPpbdMKiZMoyJ+VxSX5UmKBF
Size:	85039
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGL UQARP Form.pdf
Category:	dropped
Dump:	AGL UQARP Form.pdf.3.dr
ID:	dr_490
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.932548893799598
Encrypted:	false
Ssdeep:	3072:ekVabKxzj0wYlFuysB9i9t7GKfsO8tdNuFzxzGpCM3D2c6:/VabKxzjhYlFuyA9IUOrzxzqCMy1
Size:	177091
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLC107709-2018NonCompact.pdf
Category:	dropped
Dump:	AGLC107709-2018NonCompact.pdf.3.dr
ID:	dr_491
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.998957552955985
Encrypted:	true
Ssdeep:	98304:PIBTrgMEPGvY1qHpWsopEMya/lPVkGPHXCBld6hGgL+TUSr4:Q8PGzL/M7NVkGPSBl6Grgv
Size:	4146669
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLC107709-DC-2018.pdf
Category:	dropped
Dump:	AGLC107709-DC-2018.pdf.3.dr
ID:	dr_492
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.996745937046274
Encrypted:	true
Ssdeep:	24576:G3hlsclT3ph7ACCtsKR7D85g4gMngbu0Lt9bp0BNpAkVS7R:G3XscZPYqH64gMgaBNprS7R
Size:	1201515
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLC107709-FL-2018.pdf
Category:	dropped
Dump:	AGLC107709-FL-2018.pdf.3.dr
ID:	dr_503
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.988002734173504
Encrypted:	false
Ssdeep:	12288:J9Emv4eK/KtDZbie/QEoBrBUkAqWaVZ+sSrXi6XCrl:J9EMLt9bp0BNpAkVS7K
Size:	531490
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLC107709-NY-2016.pdf
Category:	dropped
Dump:	AGLC107709-NY-2016.pdf.3.dr
ID:	dr_504
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.989782491078705
Encrypted:	false
Ssdeep:	12288:XzfHNH4m/Ewv4eK/KtDZbie/QEoBrBUkAqWaVZ+sSrXi6XCVB:7NxEmLt9bp0BNpAkVS7+
Size:	606861
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLNQAR.pdf
Category:	dropped
Dump:	AGLNQAR.pdf.3.dr
ID:	dr_505
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.884327149095471
Encrypted:	false
Ssdeep:	3072:z4xWxi4ez2I7Vzw5ZTfXJeIGEuUOkqV4OXbQLyg4/v2P:zqjePv0IuLVrbQ+YP
Size:	128144
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLNQARATTORNEYFEES.pdf
Category:	dropped
Dump:	AGLNQARATTORNEYFEES.pdf.3.dr
ID:	dr_506
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.545877206908681
Encrypted:	false
Ssdeep:	3072:tT49RAJEjfFCZXkzLBY5OIe+o+93ufu3AQtcsKoOKzJYLw1Nb0V8SVJi:tT49RAKrgkL+N593ufcJJFOKSCgV7Vs
Size:	229809
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLNQARATTORNEYFEESPR.pdf
Category:	dropped
Dump:	AGLNQARATTORNEYFEESPR.pdf.3.dr
ID:	dr_507
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.941456484030578
Encrypted:	false
Ssdeep:	3072:M+aFc4R3yoA64Lcx5pJd/oZ+qCGhOzfbn54FHAtueGIU45M6VPrAD8kIhiZpWaUe:A5+FIx/s+aCTGyU6ha8FQ/U36Wq
Size:	199285
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AGLNQARPR.pdf
Category:	dropped
Dump:	AGLNQARPR.pdf.3.dr
ID:	dr_508
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.849499681740413
Encrypted:	false
Ssdeep:	3072:QmtXwWKWcakhpAvlw9Vh9QbG8cvxMeyagLt5xWlqHn:QOwJ9A9w9VzQydvCpLt5xWlqH
Size:	107428
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\Application AGL.pdf
Category:	dropped
Dump:	Application AGL.pdf.3.dr
ID:	dr_509
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.829946404322489
Encrypted:	false
Ssdeep:	3072:2P6FCpYORpisDONgcdz3zYjZ2QwU0d74m0gFCQwj:lHgpwjCZ2F9imVC
Size:	141736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\Application USL.pdf
Category:	dropped
Dump:	Application USL.pdf.3.dr
ID:	dr_510
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.701870372082174
Encrypted:	false
Ssdeep:	1536:iK7vFmbYq5HYn+MQ9tC40vzVmk9YEFJ9uDJuVsrBCpsZX:v/4H+40rwKoZBCpsN
Size:	83317
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AttorneyW4W9.pdf
Category:	dropped
Dump:	AttorneyW4W9.pdf.3.dr
ID:	dr_511
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.995769660474603
Encrypted:	true
Ssdeep:	24576:QNnac74cfHmsrtP6pKK1EntiuKp45cOTo1BP5:QakCsQpQiB2Z4h
Size:	978457
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AttorneyW4W9NQAGL.pdf
Category:	dropped
Dump:	AttorneyW4W9NQAGL.pdf.3.dr
ID:	dr_512
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.9956413724992546
Encrypted:	true
Ssdeep:	24576:qnacDchHmFtP6pKK1EntiuKp45cOTo1BPr:qaI6pQiB2Z4j
Size:	955313
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\AttorneyW4W9NQUSL.pdf
Category:	dropped
Dump:	AttorneyW4W9NQUSL.pdf.3.dr
ID:	dr_523
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.995899412559434
Encrypted:	true
Ssdeep:	24576:Oy5Bnacd7kqcBHm/tP6pKK1EntiuKp45cOTo1BPq:OeaCQ6cpQiB2Z4C
Size:	1020953
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\FAQ_Beta.pdf
Category:	dropped
Dump:	FAQ_Beta.pdf.3.dr
ID:	dr_524
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.758442086366743
Encrypted:	false
Ssdeep:	49152:Q9fYdZVKYGZDqTRFgXu3i/Mxmg4+Q/g0B+Uc7NVLrPnnpDL4iSSK6+TVXO6dDXww:Q9+VKfVqTjgXu3i/Mxmg4+Q/gPUc7NVk
Size:	3003319
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\ICC18-107709Compact States.pdf
Category:	dropped
Dump:	ICC18-107709Compact States.pdf.3.dr
ID:	dr_525
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.987042825688715
Encrypted:	false
Ssdeep:	12288:BEv4eK/KtDZbie/QEoBrBUkAqWaVZ+sSrXi6XgtjW:4Lt9bp0BNpAkVS7D
Size:	513942
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\ICC18-107709PuertoRico.pdf
Category:	dropped
Dump:	ICC18-107709PuertoRico.pdf.3.dr
ID:	dr_526
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.990843799196708
Encrypted:	true
Ssdeep:	12288:GcHPbW8ojv4eK/KtDZbie/QEoBrBUkAqWaVZ+sSrXi6X6:vvbWlzLt9bp0BNpAkVS7c
Size:	642207
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\KeyNavGde.pdf
Category:	dropped
Dump:	KeyNavGde.pdf.3.dr
ID:	dr_527
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.7 (zip deflate encoded)
Entropy:	7.776947763413212
Encrypted:	false
Ssdeep:	768:Up5oMEOrUqebsL9elWE8E7FDckNFQW4ngWPQFOJVqsfhhDwEMnuzA:UpuMy5ME/wk14gSTVfhhDrMnQA
Size:	40509
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\Lockin.pdf
Category:	dropped
Dump:	Lockin.pdf.3.dr
ID:	dr_528
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.840028237607436
Encrypted:	false
Ssdeep:	1536:yvWvelLTdoW+fuhpr+UvvTz6/QtEHz1p3ZxsztmJ+0Qy9AiNL7n13JsjDFtTvtoy:IvoklaAE3Xqtms0Qy9j1p3+jvOjoNb4s
Size:	106603
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\SettlementAgreement.dot
Category:	dropped
Dump:	SettlementAgreement.dot.3.dr
ID:	dr_529
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1252, Title: Settlement Agreement and Release, Author: u40as36, Template: SettlementAgreement.dot, Last Saved By: u40as36, Revision Number: 4, Name of Creating Application: Microsoft Office Word, Total Editing Time: 01:04:00, Create Time/Date: Mon Dec 12 20:17:00 2011, Last Saved Time/Date: Thu Jan 12 18:10:00 2012, Number of Pages: 1, Number of Words: 2004, Number of Characters: 11427, Security: 0
Entropy:	4.109705261583923
Encrypted:	false
Ssdeep:	384:f4H0YxgeCJeoYV5/zZgSPqSUbKIL9k5SE4mQU49P:kIe1/zGSPqSYLx/P
Size:	49152
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USL UQA Form w-Atty Fee Language.pdf
Category:	dropped
Dump:	USL UQA Form w-Atty Fee Language.pdf.3.dr
ID:	dr_531
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.880008251251087
Encrypted:	false
Ssdeep:	6144:Qq+QMUb8d4/5w2PI81H3bYK8/qMtR5utY2mdM7eYSwtYehyjm:v8d422A81H98/qMn5smpi
Size:	272888
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USL UQA Form.pdf
Category:	dropped
Dump:	USL UQA Form.pdf.3.dr
ID:	dr_530
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.879255865935963
Encrypted:	false
Ssdeep:	3072:f/tvlkhwYklB1gTpW+ZCk8FJU1fa7ZBfT:3VMwVlCk+ZQU1UZB7
Size:	117222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USL UQAR Form revised - Fillable.pdf
Category:	dropped
Dump:	USL UQAR Form revised - Fillable.pdf.3.dr
ID:	dr_532
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.8977765803911995
Encrypted:	false
Ssdeep:	1536:sPfUe3gDAoKV4HOQMuwT0GCxuDS0/EJOsKMTBV/+XIjAK5FpQYYn1F5oVnxyQVdZ:he6bTRoFCxutsFlbEIjA4Q7n1o7NHd
Size:	106891
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USL UQAR Form revised w-Atty Fee Language.pdf
Category:	dropped
Dump:	USL UQAR Form revised w-Atty Fee Language.pdf.3.dr
ID:	dr_178
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.895360517616584
Encrypted:	false
Ssdeep:	3072:+dFKSyBPRrwpSCqxzrtV4lRr4/u/wToKLhm08sAtcRJ7idJ/urRtvK5cx:+nKSVSC6vtulR8m/wT9LosAt8udJ/YXH
Size:	139300
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USL UQARP Form.pdf
Category:	dropped
Dump:	USL UQARP Form.pdf.3.dr
ID:	dr_182
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.894479216888567
Encrypted:	false
Ssdeep:	3072:nWrmIaEC6s8wL58II/x7/Emp7y1NERCANJSsRx:n9RLy/pM1NGCoSI
Size:	128788
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USLNQAR.pdf
Category:	dropped
Dump:	USLNQAR.pdf.3.dr
ID:	dr_186
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.536509643577292
Encrypted:	false
Ssdeep:	3072:yQi9aMs7XfNYZfqsbyGzOBo1jNqx4u6P/S6teaspSk6UWbeTV31tXOV95V5c:yQlbfNYJXzIo1ZqnutRk6UWCTVnOVVK
Size:	227745
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Forms\USLNQARATTORNEYFEES.pdf
Category:	dropped
Dump:	USLNQARATTORNEYFEES.pdf.3.dr
ID:	dr_190
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PDF document, version 1.6 (zip deflate encoded)
Entropy:	7.604878287735513
Encrypted:	false
Ssdeep:	3072:fea/MAAT3vRSoGdxiADgITsVsMwuURRBIv1rlIuXF6RiXcTRiHB6jpmbn5ZKwb+:feb8iAcITNMsHBslzQCcT8HUpWZKwb+
Size:	251943
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Addendum_EN.enc
Category:	dropped
Dump:	Addendum_EN.enc.3.dr
ID:	dr_194
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.839865365169284
Encrypted:	false
Ssdeep:	3:tpe8vBnGEN82pzEyC9csmFonXZVtqQSp8DdmuzMP4dqJvXF1zl8jCueE/VlwMr6W:vjvBnGE22yvc6pVtbTkuzMP4KF1zlyCM
Size:	192
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Addendum_ES.enc
Category:	dropped
Dump:	Addendum_ES.enc.3.dr
ID:	dr_198
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.875374871367582
Encrypted:	false
Ssdeep:	3:tpe8vBnGEN82pzEyC9csmFonXZVtqQSp8DdmK5J4ncYI6vUxeu+Dz/pcl7dzn:vjvBnGE22yvc6pVtbTkKL4o6vUpQ/pst
Size:	176
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\ApplicationAgl_EN.enc
Category:	dropped
Dump:	ApplicationAgl_EN.enc.3.dr
ID:	dr_206
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.896648900445802
Encrypted:	false
Ssdeep:	24:Ti43H6roglgEW/ihIjkI8YQAk0HQFQkScnoJg9XLZL2tXXBjSmkm2zGPtrFGfsWm:T5aVlgEl4C8HkQkSksgTL2tnBNkmJrr5
Size:	1664
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\ApplicationDocFieldMapping_EN.enc
Category:	dropped
Dump:	ApplicationDocFieldMapping_EN.enc.3.dr
ID:	dr_209
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.972051077333097
Encrypted:	false
Ssdeep:	96:1tRbwFBfGVBOnVlSfsVkSqnW86xb9w0seHyiu65088BVQ3mifSYFox6/DQMfk:1tRkFBuBOVwfsInW8P3en5v8Ba3SYyEA
Size:	5952
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\ApplicationNonQual_EN.enc
Category:	dropped
Dump:	ApplicationNonQual_EN.enc.3.dr
ID:	dr_211
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.884898632562404
Encrypted:	false
Ssdeep:	48:TLwJtnY+NYgmbTAasvpQD8ZYmj8SMo05YZ:nc2+igiHsvpM8ZYmj05YZ
Size:	1824
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\ApplicationUsl_EN.enc
Category:	dropped
Dump:	ApplicationUsl_EN.enc.3.dr
ID:	dr_218
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.857431401205709
Encrypted:	false
Ssdeep:	24:TTAXzaPbBzca4AHUGAn4LWxK7hbY/kM2qdG9mFLRZ9bNtwI1X0s3eGcbcTZMyZCc:Ts+PbBga4AHmtA7hmkM2qzLZ1840X/cB
Size:	1456
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Application_EN.enc
Category:	dropped
Dump:	Application_EN.enc.3.dr
ID:	dr_202
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.864082728758728
Encrypted:	false
Ssdeep:	24:TDzQo+6tIwJ2mbSQ816qerQyJKosQJqktC2gqtYuh2qQQb54bwMvqcTKqvlMJCXi:TZum24rQK9JZ9Fh2WbowGBe+leN
Size:	1504
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\AssigneeCompanyDetailMapping_EN.enc
Category:	dropped
Dump:	AssigneeCompanyDetailMapping_EN.enc.3.dr
ID:	dr_222
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.874996185032126
Encrypted:	false
Ssdeep:	48:TqxUtdbVtCoBwHdGuTiAEyLDp7sQV2oCpe/UYklT/nVnVU:uoXkjHdpTiA5LDpwMCk/UY6RnO
Size:	1728
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Beneficiary_EN.enc
Category:	dropped
Dump:	Beneficiary_EN.enc.3.dr
ID:	dr_226
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.607307324168044
Encrypted:	false
Ssdeep:	3:tpe8vBnG9Z7hH4+s2yvqhwSuIx3xFmdiA9TwdYTwszM2OCcpn:vjvBnG77jXdhpx3yFKYbftcpn
Size:	128
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\BenefitDescription_EN.enc
Category:	dropped
Dump:	BenefitDescription_EN.enc.3.dr
ID:	dr_230
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.966391536523057
Encrypted:	false
Ssdeep:	96:MEc8Ugz+3gEcHFNpa9LvpqEjuo6fldLNGesuP+lz:MyScHToZuvZfDWt
Size:	4224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\BenefitDescription_ES.enc
Category:	dropped
Dump:	BenefitDescription_ES.enc.3.dr
ID:	dr_234
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.946967206386865
Encrypted:	false
Ssdeep:	96:AqNdCgOwRxSrVodewIb3MkiliHuFqa9dzVgqub0XbZhzFTt:CbCSeRIbckWFX7zyqMufRB
Size:	4224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\BenefitsSummary_EN.enc
Category:	dropped
Dump:	BenefitsSummary_EN.enc.3.dr
ID:	dr_238
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.89253140550766
Encrypted:	false
Ssdeep:	3:tpe8vBnGEN82pzEg24fPuVCqmfwS6zVaToNRdslKvcuILYnXmsUcWYjZrn:vjvBnGE22yZS2VCPfwS6zPR6lKvcBst/
Size:	176
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\BenefitsSummary_ES.enc
Category:	dropped
Dump:	BenefitsSummary_ES.enc.3.dr
ID:	dr_242
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.944890349733767
Encrypted:	false
Ssdeep:	3:tpe8vBnGEN82pzEg24fPuVCqmfwS6zVaToNRdsOy1bsG292oSMm7QaZPcMXq:vjvBnGE22yZS2VCPfwS6zPR6eGSm7POZ
Size:	192
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\DefendantReport_EN.enc
Category:	dropped
Dump:	DefendantReport_EN.enc.3.dr
ID:	dr_246
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.9611878984666165
Encrypted:	false
Ssdeep:	96:j95FMKQw3dtQ88IL68HyzLL0j6o6lKJ/V4KTdbJYIbK5PyHHAns9OJhAR:KittQ7M6Uw5tKJOkdbJfAyHHArJeR
Size:	5360
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\DefendantReport_ES.enc
Category:	dropped
Dump:	DefendantReport_ES.enc.3.dr
ID:	dr_249
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.9683794143328655
Encrypted:	false
Ssdeep:	96:30cq694+tRHxJhr+9eMx1+Yx3s+lG9Uv9up8me8JZXc8wvhTLI:ft94+tRHxD02Yxpg6v9up8me0ZzA5U
Size:	5888
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Footer_EN.enc
Category:	dropped
Dump:	Footer_EN.enc.3.dr
ID:	dr_251
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.630517046277045
Encrypted:	false
Ssdeep:	12:rvBnGLIbwuYLwWAa96EV4qqK1b4Xwe0HaeNYAUKhS4W0HzafGThhB:TFbDkH14qi0NUanTafYp
Size:	576
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Footer_ES.enc
Category:	dropped
Dump:	Footer_ES.enc.3.dr
ID:	dr_259
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.674078606755706
Encrypted:	false
Ssdeep:	12:rvBnGLIbwu24l2rsC71xDSdHoh+iCuY/ikGPZ24Zq2lnewL6FJpuOTap:TFbD24ErsC7/DSVo5yqkGB2EqunBGJUR
Size:	608
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\HoldHarmless_EN.enc
Category:	dropped
Dump:	HoldHarmless_EN.enc.3.dr
ID:	dr_263
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.960983393855239
Encrypted:	false
Ssdeep:	96:HpXzeBPXVWatIfRmGxx4PXRbbeYqshLyCXgH7Lkd8SceTafgnkvWQmiu:JjWPX0a6fRmGX4PXR3WoLTgvxerkvpu
Size:	5264
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\LockinData_EN.enc
Category:	dropped
Dump:	LockinData_EN.enc.3.dr
ID:	dr_267
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.842389824791204
Encrypted:	false
Ssdeep:	24:TKId8aT4gXwyMlrzdHD8AqspjeJsXFzO5McRe+CfaFI0JhbwCHyyr:TBd8alXwySzdj8CjeJsVzWre+XjHyW
Size:	1088
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\NQADocFieldMapping_EN.enc
Category:	dropped
Dump:	NQADocFieldMapping_EN.enc.3.dr
ID:	dr_271
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.776281204177369
Encrypted:	false
Ssdeep:	24:T6aS8UYQlj0lPQIjb/0B0qGtMv6Kj5HY12EgQ:T6a3UjqPh4ktMtdHYYPQ
Size:	784
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\NqaReportData_EN.enc
Category:	dropped
Dump:	NqaReportData_EN.enc.3.dr
ID:	dr_275
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.77581981832733
Encrypted:	false
Ssdeep:	24:T6aS+6xnbtAWAqRy9BYA2UlV+psIc/xsFcP45o2ba:T6a56zmqVA2+YpYiF245oOa
Size:	784
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Reinsurance_EN.enc
Category:	dropped
Dump:	Reinsurance_EN.enc.3.dr
ID:	dr_279
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.99118613297588
Encrypted:	true
Ssdeep:	384:Fj62W0CkEM27U/wT7nBfz0wh8PMt3sLig7viWdlDTDUVYi:U1kE/7UKwjMeuAiWdlDTDUVYi
Size:	19920
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\SettlementAgreement_EN.enc
Category:	dropped
Dump:	SettlementAgreement_EN.enc.3.dr
ID:	dr_283
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.779442681470254
Encrypted:	false
Ssdeep:	24:T7e5ZjWH+O0waTKsVpEcJc7ug6p8dIvL2aNug5RJ3poBGSjg3E:T7e5ZqPsVpZ2/Q8iSaAwsBGc
Size:	848
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\StateApplicationDocMapping_EN.enc
Category:	dropped
Dump:	StateApplicationDocMapping_EN.enc.3.dr
ID:	dr_287
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.96662951371874
Encrypted:	false
Ssdeep:	96:r91VPuv1tcEOPaEUewvE1tpmTb+bsILzQmONy0VK4/IVJYNDlJA:rnZue51jm2bsqzyNy0c4/IfYNDw
Size:	5008
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaAttorneyFees_EN.enc
Category:	dropped
Dump:	UqaAttorneyFees_EN.enc.3.dr
ID:	dr_292
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.731056890248617
Encrypted:	false
Ssdeep:	24:TzXO6Z0OkOG9SVc96hUgizrx/wy6peiFv1OR2:TzX9JyXwi+y6pQw
Size:	784
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaReleaseAttorneyFees_EN.enc
Category:	dropped
Dump:	UqaReleaseAttorneyFees_EN.enc.3.dr
ID:	dr_313
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.7337241383573785
Encrypted:	false
Ssdeep:	12:rvBnGpgazKLRGIlUqNYAsEH0OHig0fgOZ66DUJKUqU/O8WMV1SCoe3pMxNMcaejg:TZVLhnUkB266+8UEMVMreyRa4HA
Size:	800
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaReleaseMultipleAssignorsAttorneyFees_EN.enc
Category:	dropped
Dump:	UqaReleaseMultipleAssignorsAttorneyFees_EN.enc.3.dr
ID:	dr_321
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.778116163584163
Encrypted:	false
Ssdeep:	24:TZVLhnUkB266XLehsuJi9bOhJFQ8AnStn0:ThUkYbevGbOhJXt0
Size:	880
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaReleaseMultipleAssignors_EN.enc
Category:	dropped
Dump:	UqaReleaseMultipleAssignors_EN.enc.3.dr
ID:	dr_317
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.771458011084996
Encrypted:	false
Ssdeep:	24:Tt5ANDTmC/o6cQP8dSarX7snDqOK9c9RqusRU:Tt5GTmCA6cQPEXonBKavl9
Size:	864
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaReleasePledge_EN.enc
Category:	dropped
Dump:	UqaReleasePledge_EN.enc.3.dr
ID:	dr_325
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.7524023345574555
Encrypted:	false
Ssdeep:	12:rvBnGLw1fBTcz9iR4eGk/6rwA+ruuLlZV7/FzmuzWwFG5BygiKhz0XmkKkwxAeD+:Tj1fBQBiR4s6rwRrZLVjFVavi60kDTrK
Size:	768
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaRelease_EN.enc
Category:	dropped
Dump:	UqaRelease_EN.enc.3.dr
ID:	dr_309
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.747346092868503
Encrypted:	false
Ssdeep:	12:rvBnGpkjaGrotTLsIU5WQGLHwpreazfL+MsouXcQ3aexuBq8dNZ+8N1Z9MP7n8wz:Tt5ANDTmC/o6cQP8d/VPsnDOX23
Size:	784
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\UqaReport_EN.enc
Category:	dropped
Dump:	UqaReport_EN.enc.3.dr
ID:	dr_329
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.994605677947254
Encrypted:	true
Ssdeep:	768:5Az7KkQ38V5xjCB4/mAwEIbNC9aGRZc37pT3IBUx4vTmKIc3DOEukk:2nI38V5xjCB4OAsw03x9hODOz
Size:	33664
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Print\Metadata\Uqa_EN.enc
Category:	dropped
Dump:	Uqa_EN.enc.3.dr
ID:	dr_290
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.7524023345574555
Encrypted:	false
Ssdeep:	12:rvBnGLw1fBTcz9iR4eGk/6rwA+ruuLlZV7/FzmuzWwFG5BygiKhz0XmkKkwxAeD+:Tj1fBQBiR4s6rwRrZLVjFVavi60kDTrK
Size:	768
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\001.rat
Category:	dropped
Dump:	001.rat.3.dr
ID:	dr_333
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.998915661275358
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdH/N8i39/62M0a/k0HqZVH1hkPIsbxDvJ2Vs+M9SeQ:XDFhhKYaV3JVFj/OH1Hs7Bsb5vJ2Vs9q
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\002.rat
Category:	dropped
Dump:	002.rat.3.dr
ID:	dr_337
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01814504637121
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsahfOJ2Ih8i39/62M0a/k0HqZVH1hkPIsbxvDyj6Jwd:XDFhhKYaV3J7hfKthj/OH1Hs7Bsb1yj9
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\003.rat
Category:	dropped
Dump:	003.rat.3.dr
ID:	dr_340
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.039685313051348
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGpqyV9ZspJBafrXGSy7Qurzaf5cUbgaz9zcH+3:XDFhhKYaV3JBa2oxxcUshH+3
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\004.rat
Category:	dropped
Dump:	004.rat.3.dr
ID:	dr_342
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021115921003242
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsa0wCTHwXAAf2shjZCcHNmuS39kxzHc8UYtDEyWppxf:XDFhhKYaV3J75CTHwX5uCCsm8y8rZEIY
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\005.rat
Category:	dropped
Dump:	005.rat.3.dr
ID:	dr_356
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.975726060098659
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQkS94zxNSJ1xLpxCN+VJ2LEz1c4:XDFhhKYaV3JlRKR4
Size:	1148
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\008.rat
Category:	dropped
Dump:	008.rat.3.dr
ID:	dr_359
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.992778715175627
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQaqLlqxQhLWxGJO87xX6HlHkrp4/Lug/2uy3z6db06Ii:XDFhhKYaV3JNd/J/oHpg4zj/xsQ5Hn
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\010.rat
Category:	dropped
Dump:	010.rat.3.dr
ID:	dr_362
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.004584676978703
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7LyxwS94zxNSJ1xLpxCN+VJ2LEznqM9edx1C4:XDFhhKYaV3J7UBRKz7
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\011.rat
Category:	dropped
Dump:	011.rat.3.dr
ID:	dr_365
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0240763815070855
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ75qH5a6QhLWxGJO87xX6HlHkrp4/Lug/2uy3/4qaoO:XDFhhKYaV3J7Sq/J/oHpg4zj/xsXO
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\012.rat
Category:	dropped
Dump:	012.rat.3.dr
ID:	dr_368
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.97381999557733
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsEtFzhj8i39/62M0a/k0HqZVH1hkPIsbx+Y/vrl8fIg:XDFhhKYaV3JFvzhjj/OH1Hs7BsbpXrlw
Size:	1246
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\013.rat
Category:	dropped
Dump:	013.rat.3.dr
ID:	dr_371
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.044844130659177
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQuXAC4DcFAiuY8C+ZkdWa7DUQcrT0Rm:XDFhhKYaV3JuwC4Diz8ChWYzcrTV
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\014.rat
Category:	dropped
Dump:	014.rat.3.dr
ID:	dr_374
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.024298189674779
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsvfsxthP6AAf2shjZCcHNmuS39kxzHc8UYtDEySUHWP:XDFhhKYaV3JmWthi5uCCsm8y8rZEIXxK
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\015.rat
Category:	dropped
Dump:	015.rat.3.dr
ID:	dr_377
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.014956399176796
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLgcc9hGYTmfVHMhfgXwrPmT7sILoaKKMVfGLGD+MaOw:XDFhhKYaV3JUt9fmtHMhewrBuoB1sKD6
Size:	1226
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\016.rat
Category:	dropped
Dump:	016.rat.3.dr
ID:	dr_380
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020653264982716
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQohqZU5YTmfVHMhfgXwrPmT7sILoPeNmywk06bY8Z:XDFhhKYaV3JocHmtHMhewrBuoPeNmnyt
Size:	1224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\017.rat
Category:	dropped
Dump:	017.rat.3.dr
ID:	dr_382
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.039821539084274
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFcaHQyV9ZspJBafrXGSy7Qurzaf5cU0KhMdz1bfpxMO:XDFhhKYaV3JDH0a2oxxcUnMXDjn
Size:	1241
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\019.rat
Category:	dropped
Dump:	019.rat.3.dr
ID:	dr_396
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.034310560375662
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFZ0AAf2shjZCcHNmuS39kxzHc8UYtDEykYyk60UsG/:XDFhhKYaV3Jb05uCCsm8y8rZEF7/
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\020.rat
Category:	dropped
Dump:	020.rat.3.dr
ID:	dr_399
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021130529323992
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7yvAAf2shjZCcHNmuS39kxzHc8UYtDEyOxO/Y66rpF4:XDFhhKYaV3J7o5uCCsm8y8rZErE
Size:	1245
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\021.rat
Category:	dropped
Dump:	021.rat.3.dr
ID:	dr_402
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.001616178712039
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ75DMcBQQhLWxGJO87xX6HlHkrp4/Lug/2uy33qwzyjL:XDFhhKYaV3J7jf/J/oHpg4zj/xsOcq
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\022.rat
Category:	dropped
Dump:	022.rat.3.dr
ID:	dr_405
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.002209046520149
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFcIRsS94zxNSJ1xLpxCN+VJ2LEzsEHgk6xr24:XDFhhKYaV3JFc6RK+Hturl
Size:	1211
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\023.rat
Category:	dropped
Dump:	023.rat.3.dr
ID:	dr_408
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.011879788243852
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQeJdV8i39/62M0a/k0HqZVH1hkPIsbxwQqZ8+w3:XDFhhKYaV3JeJdVj/OH1Hs7BsbSc3
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\024.rat
Category:	dropped
Dump:	024.rat.3.dr
ID:	dr_411
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.038974097400482
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ06gXAC4DcFAiuY8C+ZkdWa7DUBdAKcBAUq:XDFhhKYaV3JDgwC4Diz8ChWYcvcmX
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\025.rat
Category:	dropped
Dump:	025.rat.3.dr
ID:	dr_414
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.994274469351358
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdz5M3JS94zxNSJ1xLpxCN+VJ2LEznrx2kk0FR:XDFhhKYaV3Jdq6RKcrxn
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\026.rat
Category:	dropped
Dump:	026.rat.3.dr
ID:	dr_417
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0072011646416925
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQcKQQhLWxGJO87xX6HlHkrp4/Lug/2uy3u6Pc14:XDFhhKYaV3Jr/J/oHpg4zj/xsy4
Size:	1196
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\027.rat
Category:	dropped
Dump:	027.rat.3.dr
ID:	dr_420
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.026258157652571
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRQKYkY9CwchdXaB0wypv7nzTsfjELTKckll:XDFhhKYaV3JRQdkcCwEa+w+vzzT6ETk/
Size:	1197
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\028.rat
Category:	dropped
Dump:	028.rat.3.dr
ID:	dr_422
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.055419295936139
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQo61EyV9ZspJBafrXGSy7Qurzaf5cUmYOpPn:XDFhhKYaV3Jo6Ca2oxxcUm5f
Size:	1193
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\029.rat
Category:	dropped
Dump:	029.rat.3.dr
ID:	dr_434
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0533986105355355
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQat5YTmfVHMhfgXwrPmT7sILo0JKtASZ+/Rb:XDFhhKYaV3JusmtHMhewrBuo0htl
Size:	1191
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\030.rat
Category:	dropped
Dump:	030.rat.3.dr
ID:	dr_436
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029354340226784
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQpN1TeYTmfVHMhfgXwrPmT7sILoRV/QhaTwzWDP:XDFhhKYaV3JxlmtHMhewrBuoRRQTOP
Size:	1204
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\031.rat
Category:	dropped
Dump:	031.rat.3.dr
ID:	dr_438
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.046995819317443
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQiD1ZoXAC4DcFAiuY8C+ZkdWa7DUwyuWyZ3zi:XDFhhKYaV3JiDMwC4Diz8ChWYzhZ3zi
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\032.rat
Category:	dropped
Dump:	032.rat.3.dr
ID:	dr_440
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.028356017723806
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQwOJf2YZ8i39/62M0a/k0HqZVH1hkPIsbxG5yZNawDz:XDFhhKYaV3JNpZj/OH1Hs7BsbA8z
Size:	1194
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\033.rat
Category:	dropped
Dump:	033.rat.3.dr
ID:	dr_442
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.011787451222408
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ3wvQhLWxGJO87xX6HlHkrp4/Lug/2uy32sfPBkxb9i9:XDFhhKYaV3J//J/oHpg4zj/xs2yBkZK
Size:	1187
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\034.rat
Category:	dropped
Dump:	034.rat.3.dr
ID:	dr_444
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.026498706222318
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQcDpG/XAC4DcFAiuY8C+ZkdWa7DUYISeFuT:XDFhhKYaV3JcGwC4Diz8ChWY0W
Size:	1216
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\035.rat
Category:	dropped
Dump:	035.rat.3.dr
ID:	dr_446
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016926896607743
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQvt1AAf2shjZCcHNmuS39kxzHc8UYtDEyaBgmXkpEPL4:XDFhhKYaV3JvT5uCCsm8y8rZEnc4E/
Size:	1216
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\036.rat
Category:	dropped
Dump:	036.rat.3.dr
ID:	dr_448
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.062907487621647
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQOJ26F65XAC4DcFAiuY8C+ZkdWa7DUaJzoYI6BMDO:XDFhhKYaV3JOWwC4Diz8ChWY5MK
Size:	1202
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\037.rat
Category:	dropped
Dump:	037.rat.3.dr
ID:	dr_450
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.010604195072306
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLCBs5UwD58i39/62M0a/k0HqZVH1hkPIsbx4OHVygI4:XDFhhKYaV3JFbNj/OH1Hs7BsbpEh4
Size:	1210
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\038.rat
Category:	dropped
Dump:	038.rat.3.dr
ID:	dr_452
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0441932013852355
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQw4N0QhLWxGJO87xX6HlHkrp4/Lug/2uy3Syuke5vSf:XDFhhKYaV3JV7/J/oHpg4zj/xsKkU4
Size:	1197
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\039.rat
Category:	dropped
Dump:	039.rat.3.dr
ID:	dr_464
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.044726376068022
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQYFcEYTmfVHMhfgXwrPmT7sILoicrBxN:XDFhhKYaV3JY2vmtHMhewrBuo1r9
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\040.rat
Category:	dropped
Dump:	040.rat.3.dr
ID:	dr_466
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.984616430596584
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFY5S94zxNSJ1xLpxCN+VJ2LEz9stFpdh:XDFhhKYaV3JK6RKSATh
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\041.rat
Category:	dropped
Dump:	041.rat.3.dr
ID:	dr_468
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.987816318838916
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdZ0lnQQhLWxGJO87xX6HlHkrp4/Lug/2uy3xtyuu6Qz:XDFhhKYaV3J2V/J/oHpg4zj/xsxr2wE
Size:	1209
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\050.rat
Category:	dropped
Dump:	050.rat.3.dr
ID:	dr_470
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.012923971875025
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQYY41AAf2shjZCcHNmuS39kxzHc8UYtDEyvFP6bBhB/:XDFhhKYaV3JYP5uCCsm8y8rZEwgbJ
Size:	1122
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\052.rat
Category:	dropped
Dump:	052.rat.3.dr
ID:	dr_472
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.068216784668287
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLsyV9ZspJBafrXGSy7Qurzaf5cUzgy5BEmrOl:XDFhhKYaV3Jka2oxxcU/DrOl
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\053.rat
Category:	dropped
Dump:	053.rat.3.dr
ID:	dr_474
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.976785249905686
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQIPXb6k8i39/62M0a/k0HqZVH1hkPIsbxuiqyhLz1sTW:XDFhhKYaV3JWb6kj/OH1Hs7Bsb/Zggay
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\054.rat
Category:	dropped
Dump:	054.rat.3.dr
ID:	dr_476
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0017936822471505
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7QhLWxGJO87xX6HlHkrp4/Lug/2uy3019VlqTTbbl:XDFhhKYaV3Ji/J/oHpg4zj/xsYPwPl
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\055.rat
Category:	dropped
Dump:	055.rat.3.dr
ID:	dr_478
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.022608499003199
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ6RVSx3EYTmfVHMhfgXwrPmT7sILo9zgn8UU73b:XDFhhKYaV3JU4VmtHMhewrBuoiS
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\056.rat
Category:	dropped
Dump:	056.rat.3.dr
ID:	dr_480
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.058652863809924
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQM/yV9ZspJBafrXGSy7Qurzaf5cUKmouFVqbsT7B:XDFhhKYaV3JMxa2oxxcUNoSB
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\057.rat
Category:	dropped
Dump:	057.rat.3.dr
ID:	dr_482
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.036403636871672
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQU7GFAAf2shjZCcHNmuS39kxzHc8UYtDEyZo9HBmCcjG:XDFhhKYaV3JU7GF5uCCsm8y8rZEy+HBB
Size:	1246
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\058.rat
Category:	dropped
Dump:	058.rat.3.dr
ID:	dr_493
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.039580137037343
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQVoXnXAC4DcFAiuY8C+ZkdWa7DU2zz1zlnKZH3CTr+w:XDFhhKYaV3JVowC4Diz8ChWYZjARw
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\059.rat
Category:	dropped
Dump:	059.rat.3.dr
ID:	dr_494
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021241936414713
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQIbEBYTmfVHMhfgXwrPmT7sILoZ6y5DYPqg:XDFhhKYaV3JgmtHMhewrBuoh0
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\060.rat
Category:	dropped
Dump:	060.rat.3.dr
ID:	dr_495
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.006277097511548
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQAsAS94zxNSJ1xLpxCN+VJ2LEzxFs41hgEL:XDFhhKYaV3J9xRK4s4cO
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\061.rat
Category:	dropped
Dump:	061.rat.3.dr
ID:	dr_496
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.99398001539508
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7e+tVMC2S94zxNSJ1xLpxCN+VJ2LEz2IylM5Trdug:XDFhhKYaV3J79MiRK3exD
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\062.rat
Category:	dropped
Dump:	062.rat.3.dr
ID:	dr_497
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0299387854773085
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0aSiXAC4DcFAiuY8C+ZkdWa7DUdpiabxYFsu0:XDFhhKYaV3JSiwC4Diz8ChWY5Ku0
Size:	1224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\063.rat
Category:	dropped
Dump:	063.rat.3.dr
ID:	dr_498
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.028126110050795
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQVZG+QhLWxGJO87xX6HlHkrp4/Lug/2uy3XGzcx8A:XDFhhKYaV3JXm/J/oHpg4zj/xsXGYeA
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\064.rat
Category:	dropped
Dump:	064.rat.3.dr
ID:	dr_499
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.992854465622392
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQeuTBJbGQhLWxGJO87xX6HlHkrp4/Lug/2uy3XUTELTI:XDFhhKYaV3Je29b/J/oHpg4zj/xsX+Eg
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\065.rat
Category:	dropped
Dump:	065.rat.3.dr
ID:	dr_500
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.055123885876645
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQTl4XAC4DcFAiuY8C+ZkdWa7DUfhWa6RduYfl:XDFhhKYaV3JTGwC4Diz8ChWYYMRdft
Size:	1215
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\066.rat
Category:	dropped
Dump:	066.rat.3.dr
ID:	dr_501
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.037659515999585
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ1X/dAAf2shjZCcHNmuS39kxzHc8UYtDEy6yk4T7isF:XDFhhKYaV3J1X/d5uCCsm8y8rZEzEt
Size:	1216
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\067.rat
Category:	dropped
Dump:	067.rat.3.dr
ID:	dr_502
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.044685691187419
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ6v67QYTmfVHMhfgXwrPmT7sILoQCdUCTml:XDFhhKYaV3JhmtHMhewrBuo5UN
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\068.rat
Category:	dropped
Dump:	068.rat.3.dr
ID:	dr_513
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.053035589217153
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQSQ1yPYTmfVHMhfgXwrPmT7sILoONOAL43Q3:XDFhhKYaV3J14KmtHMhewrBuoOMTq
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\069.rat
Category:	dropped
Dump:	069.rat.3.dr
ID:	dr_514
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01643935551246
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGxaYc8i39/62M0a/k0HqZVH1hkPIsbx5JzfN/ITGIDj:XDFhhKYaV3J+a9j/OH1Hs7BsbJN/qF
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\070.rat
Category:	dropped
Dump:	070.rat.3.dr
ID:	dr_515
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.044597918735164
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQrBec0XAC4DcFAiuY8C+ZkdWa7DU79TzIaeOVL:XDFhhKYaV3Jrh0wC4Diz8ChWYo6SJ
Size:	1186
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\071.rat
Category:	dropped
Dump:	071.rat.3.dr
ID:	dr_516
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01387330016364
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFkQE1AAf2shjZCcHNmuS39kxzHc8UYtDEyPRr+9RYPR:XDFhhKYaV3JFkQM5uCCsm8y8rZEaRrz
Size:	1189
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\072.rat
Category:	dropped
Dump:	072.rat.3.dr
ID:	dr_517
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.050878850028164
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ1ejbNECWoyV9ZspJBafrXGSy7Qurzaf5cUgkOXnKZLX:XDFhhKYaV3JYvxWsa2oxxcUgkKBc
Size:	1205
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\073.rat
Category:	dropped
Dump:	073.rat.3.dr
ID:	dr_518
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.030577795546407
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQPbAQhLWxGJO87xX6HlHkrp4/Lug/2uy3V2oJHHu:XDFhhKYaV3JPbl/J/oHpg4zj/xslc
Size:	1196
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\074.rat
Category:	dropped
Dump:	074.rat.3.dr
ID:	dr_519
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.032432159496323
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQP0lsCy8i39/62M0a/k0HqZVH1hkPIsbxyR+ySPuifA:XDFhhKYaV3JRCC/OH1Hs7BsboH
Size:	1191
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\075.rat
Category:	dropped
Dump:	075.rat.3.dr
ID:	dr_520
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.038178854957227
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQCvoYz9CwchdXaB0wypv7nzTxbri3K0KcyFjg:XDFhhKYaV3Jmo+CwEa+w+vzzTxS605yO
Size:	1199
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\076.rat
Category:	dropped
Dump:	076.rat.3.dr
ID:	dr_521
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.064367058272148
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGAqXAC4DcFAiuY8C+ZkdWa7DURrwMCuYMik:XDFhhKYaV3JGAqwC4Diz8ChWYAiw
Size:	1198
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\077.rat
Category:	dropped
Dump:	077.rat.3.dr
ID:	dr_522
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.05626878786215
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQKwCsWfuEXAC4DcFAiuY8C+ZkdWa7DUEMtKw:XDFhhKYaV3Jv/EwC4Diz8ChWYVw
Size:	1188
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\078.rat
Category:	dropped
Dump:	078.rat.3.dr
ID:	dr_115
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.067070304135949
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQYRHQyV9ZspJBafrXGSy7Qurzaf5cUt4L:XDFhhKYaV3JEH0a2oxxcUt4L
Size:	1185
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\080.rat
Category:	dropped
Dump:	080.rat.3.dr
ID:	dr_118
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0053536585354905
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRYbQhLWxGJO87xX6HlHkrp4/Lug/2uy3jeQpK30D+MT:XDFhhKYaV3JRz/J/oHpg4zj/xs3KEDWg
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\081.rat
Category:	dropped
Dump:	081.rat.3.dr
ID:	dr_121
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0341833590276215
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQpp5YikY9CwchdXaB0wypv7nzT6sw9qvYIJ9:XDFhhKYaV3JRYikcCwEa+w+vzzT6swE/
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\082.rat
Category:	dropped
Dump:	082.rat.3.dr
ID:	dr_124
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.022960712541121
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQXhc/oz3XAC4DcFAiuY8C+ZkdWa7DUEunw3o9QAZ:XDFhhKYaV3JxcawC4Diz8ChWYew35AZ
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\083.rat
Category:	dropped
Dump:	083.rat.3.dr
ID:	dr_127
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0199271101179255
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0BfQhLWxGJO87xX6HlHkrp4/Lug/2uy3gSTga/jpUiH:XDFhhKYaV3J02/J/oHpg4zj/xsTjpUiH
Size:	1226
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\084.rat
Category:	dropped
Dump:	084.rat.3.dr
ID:	dr_130
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.051056054843645
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQOXAC4DcFAiuY8C+ZkdWa7DUx/ZASZLRXT:XDFhhKYaV3JOwC4Diz8ChWYDCT
Size:	1202
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\085.rat
Category:	dropped
Dump:	085.rat.3.dr
ID:	dr_133
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.02161590947398
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRUJvBWQRQhLWxGJO87xX6HlHkrp4/Lug/2uy30U+5ub:XDFhhKYaV3JRoBWQI/J/oHpg4zj/xs22
Size:	1236
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\086.rat
Category:	dropped
Dump:	086.rat.3.dr
ID:	dr_136
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.041297988670199
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQZXAAf2shjZCcHNmuS39kxzHc8UYtDEykYBmn1shdGu:XDFhhKYaV3JZX5uCCsm8y8rZEFnWhsu
Size:	1215
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\087.rat
Category:	dropped
Dump:	087.rat.3.dr
ID:	dr_139
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021846277995259
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQq00Y8wLevT/QhLWxGJO87xX6HlHkrp4/Lug/2uy30LQ:XDFhhKYaV3Jq03LeS/J/oHpg4zj/xsWQ
Size:	1223
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\088.rat
Category:	dropped
Dump:	088.rat.3.dr
ID:	dr_141
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.033489988734817
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQUOCc1NQhLWxGJO87xX6HlHkrp4/Lug/2uy30fFTvMUw:XDFhhKYaV3Jh/U/J/oHpg4zj/xsQZMUw
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\089.rat
Category:	dropped
Dump:	089.rat.3.dr
ID:	dr_145
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0335282671876245
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ3XQLbP8i39/62M0a/k0HqZVH1hkPIsbx1wP2/yUKZL/:XDFhhKYaV3J3XMbPj/OH1Hs7BsbL626J
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\090.rat
Category:	dropped
Dump:	090.rat.3.dr
ID:	dr_148
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0262752285020085
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ1VcBIkY9CwchdXaB0wypv7nzT6gvx6mU2myK4:XDFhhKYaV3JNkcCwEa+w+vzzTncZ2myB
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\097.rat
Category:	dropped
Dump:	097.rat.3.dr
ID:	dr_151
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.030969009098695
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ/LuZuuQhLWxGJO87xX6HlHkrp4/Lug/2uy3dxtwvAW8:XDFhhKYaV3J/Oi/J/oHpg4zj/xsSvAGg
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\099.rat
Category:	dropped
Dump:	099.rat.3.dr
ID:	dr_154
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.043812059755567
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ+Trr5kyV9ZspJBafrXGSy7Qurzaf5cUWcs5f4Dv2Uu:XDFhhKYaV3J+TrtYa2oxxcUWcCCuD
Size:	1226
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\100.rat
Category:	dropped
Dump:	100.rat.3.dr
ID:	dr_157
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.015010993451843
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7RkY9CwchdXaB0wypv7nzT+1V3Xm7EFe:XDFhhKYaV3J7RkcCwEa+w+vzzT+1Vm+e
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\101.rat
Category:	dropped
Dump:	101.rat.3.dr
ID:	dr_160
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.031310918792879
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ75Dss5QYTmfVHMhfgXwrPmT7sILohUUa9v84:XDFhhKYaV3J7hscmtHMhewrBuohUUS/
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\102.rat
Category:	dropped
Dump:	102.rat.3.dr
ID:	dr_163
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020257064645733
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFs95nyWpiNkY9CwchdXaB0wypv7nzT+38dXId:XDFhhKYaV3JFs9wWpiNkcCwEa+w+vzze
Size:	1242
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\103.rat
Category:	dropped
Dump:	103.rat.3.dr
ID:	dr_166
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.99442955044858
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQrAAf2shjZCcHNmuS39kxzHc8UYtDEyI7qXZSIdw:XDFhhKYaV3Jr5uCCsm8y8rZEjx
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\104.rat
Category:	dropped
Dump:	104.rat.3.dr
ID:	dr_169
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.033051666169508
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ9xAAf2shjZCcHNmuS39kxzHc8UYtDEyoRQoK5:XDFhhKYaV3J9x5uCCsm8y8rZEzQX5
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\105.rat
Category:	dropped
Dump:	105.rat.3.dr
ID:	dr_171
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.97994742604029
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ9R0wSS94zxNSJ1xLpxCN+VJ2LEzBrqF1KNFl:XDFhhKYaV3JJzRK6PNFl
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\106.rat
Category:	dropped
Dump:	106.rat.3.dr
ID:	dr_175
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016822092423144
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQyMt6SFYTmfVHMhfgXwrPmT7sILoWasBleEKv:XDFhhKYaV3JyCImtHMhewrBuoCBHE
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\107.rat
Category:	dropped
Dump:	107.rat.3.dr
ID:	dr_179
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.003880441586364
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRXoAAf2shjZCcHNmuS39kxzHc8UYtDEyyYAcefRNb9n:XDFhhKYaV3JR45uCCsm8y8rZEv4efRiu
Size:	1224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\108.rat
Category:	dropped
Dump:	108.rat.3.dr
ID:	dr_183
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016070558353895
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQOBSQhLWxGJO87xX6HlHkrp4/Lug/2uy3CszIUiE0Kx:XDFhhKYaV3JOBn/J/oHpg4zj/xsTzIUj
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\109.rat
Category:	dropped
Dump:	109.rat.3.dr
ID:	dr_187
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.028435926936121
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQyNQhLWxGJO87xX6HlHkrp4/Lug/2uy3aR5EF6IC:XDFhhKYaV3JyU/J/oHpg4zj/xsho
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\110.rat
Category:	dropped
Dump:	110.rat.3.dr
ID:	dr_191
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.066036917010426
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQrXAC4DcFAiuY8C+ZkdWa7DUAX/h6kc:XDFhhKYaV3JrwC4Diz8ChWYvhO
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\111.rat
Category:	dropped
Dump:	111.rat.3.dr
ID:	dr_195
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.032181620414403
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdkEIgSgAAf2shjZCcHNmuS39kxzHc8UYtDEyCMSRHVI:XDFhhKYaV3JR5uCCsm8y8rZEnF6d
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\112.rat
Category:	dropped
Dump:	112.rat.3.dr
ID:	dr_199
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.024369444778746
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQF2xBG8i39/62M0a/k0HqZVH1hkPIsbxvIYUV4C:XDFhhKYaV3JFi0j/OH1Hs7BsbFUqC
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\113.rat
Category:	dropped
Dump:	113.rat.3.dr
ID:	dr_203
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.02658870160274
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQIqzSjC8DXAC4DcFAiuY8C+ZkdWa7DU1wa+MwW:XDFhhKYaV3JneG8DwC4Diz8ChWYGwawW
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\114.rat
Category:	dropped
Dump:	114.rat.3.dr
ID:	dr_207
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.010018841956587
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQKbQhLWxGJO87xX6HlHkrp4/Lug/2uy3vyyUiEJJ:XDFhhKYaV3JKC/J/oHpg4zj/xs9UiEJJ
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\115.rat
Category:	dropped
Dump:	115.rat.3.dr
ID:	dr_210
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.038976964669365
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQHL34YTmfVHMhfgXwrPmT7sILok8SwY5IRO:XDFhhKYaV3Jr7mtHMhewrBuoOz
Size:	1205
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\116.rat
Category:	dropped
Dump:	116.rat.3.dr
ID:	dr_215
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.032792245142549
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQKZ3V08i39/62M0a/k0HqZVH1hkPIsbxvPk+Mk6o4:XDFhhKYaV3JKgj/OH1Hs7Bsb2r
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\117.rat
Category:	dropped
Dump:	117.rat.3.dr
ID:	dr_219
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.047980945840833
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRuZyV9ZspJBafrXGSy7Qurzaf5cUukqdHVqyCoAO:XDFhhKYaV3JRuva2oxxcUCU1I
Size:	1241
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\118.rat
Category:	dropped
Dump:	118.rat.3.dr
ID:	dr_223
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.000516366719469
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQWk6kY9CwchdXaB0wypv7nzTvVgss/H8T5+:XDFhhKYaV3J36kcCwEa+w+vzzTv+HJ
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\119.rat
Category:	dropped
Dump:	119.rat.3.dr
ID:	dr_227
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.9866656926010045
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQKtWS94zxNSJ1xLpxCN+VJ2LEzMRUxY23:XDFhhKYaV3JERKFUms
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\120.rat
Category:	dropped
Dump:	120.rat.3.dr
ID:	dr_231
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.047667808127327
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQs2gJYTmfVHMhfgXwrPmT7sILohUS0n+tg:XDFhhKYaV3JZgcmtHMhewrBuohUzcg
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\121.rat
Category:	dropped
Dump:	121.rat.3.dr
ID:	dr_235
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.977856762365207
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQscC9Hn/S94zxNSJ1xLpxCN+VJ2LEzbuO0X7:XDFhhKYaV3J2oRKwpe7
Size:	1223
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\122.rat
Category:	dropped
Dump:	122.rat.3.dr
ID:	dr_239
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.015253183860827
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFjAlkY9CwchdXaB0wypv7nzTcsD4W+d5:XDFhhKYaV3JF8lkcCwEa+w+vzzTXD4d
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\123.rat
Category:	dropped
Dump:	123.rat.3.dr
ID:	dr_243
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.958751950575394
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQJtmS94zxNSJ1xLpxCN+VJ2LEzZL1exLJ7:XDFhhKYaV3JJtnRKzLJ7
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\124.rat
Category:	dropped
Dump:	124.rat.3.dr
ID:	dr_247
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0199609669955345
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQTgRwS94zxNSJ1xLpxCN+VJ2LEzTKZqS:XDFhhKYaV3JTgnRKB
Size:	1215
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\125.rat
Category:	dropped
Dump:	125.rat.3.dr
ID:	dr_250
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.050701785785945
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLwhYTmfVHMhfgXwrPmT7sILoIWjv/NuaOim:XDFhhKYaV3JHmtHMhewrBuoIW7/Djm
Size:	1242
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\126.rat
Category:	dropped
Dump:	126.rat.3.dr
ID:	dr_256
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.00819628714283
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQI4LS94zxNSJ1xLpxCN+VJ2LEzqm0OphpCDMbFn:XDFhhKYaV3JdERKjp0CDEn
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\127.rat
Category:	dropped
Dump:	127.rat.3.dr
ID:	dr_260
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.002098211707679
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ2WnZ8i39/62M0a/k0HqZVH1hkPIsbxTiubvbrjE:XDFhhKYaV3JnnZj/OH1Hs7BsbdiqjE
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\128.rat
Category:	dropped
Dump:	128.rat.3.dr
ID:	dr_264
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0103486076767645
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQoIMPEkY9CwchdXaB0wypv7nzTSuUYXfQV:XDFhhKYaV3JoIMPEkcCwEa+w+vzzT31y
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\129.rat
Category:	dropped
Dump:	129.rat.3.dr
ID:	dr_268
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.046375986305646
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQfCNaiQhLWxGJO87xX6HlHkrp4/Lug/2uy33j6yF6jDa:XDFhhKYaV3J6Nw/J/oHpg4zj/xs3eyFR
Size:	1233
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\130.rat
Category:	dropped
Dump:	130.rat.3.dr
ID:	dr_272
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020204757735029
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQoJV8i39/62M0a/k0HqZVH1hkPIsbxFD2sSQ8:XDFhhKYaV3Jojj/OH1Hs7Bsbv2r
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\131.rat
Category:	dropped
Dump:	131.rat.3.dr
ID:	dr_276
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.065525527241366
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQywMU7wyV9ZspJBafrXGSy7Qurzaf5cUKJ+T63:XDFhhKYaV3JyHa2oxxcUKX
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\132.rat
Category:	dropped
Dump:	132.rat.3.dr
ID:	dr_280
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029692696200994
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQoGbLXAAf2shjZCcHNmuS39kxzHc8UYtDEyiqh4IEUE8:XDFhhKYaV3JoGbL5uCCsm8y8rZESV
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\133.rat
Category:	dropped
Dump:	133.rat.3.dr
ID:	dr_284
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.038036024904783
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQhDmcQXAC4DcFAiuY8C+ZkdWa7DUa9c2vSO0:XDFhhKYaV3JhDmcQwC4Diz8ChWYnc2vA
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\134.rat
Category:	dropped
Dump:	134.rat.3.dr
ID:	dr_288
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.027826094897323
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdZZXAAf2shjZCcHNmuS39kxzHc8UYtDEy6/MwpzZFtk:XDFhhKYaV3JT15uCCsm8y8rZEvpjC
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\135.rat
Category:	dropped
Dump:	135.rat.3.dr
ID:	dr_291
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01610207774156
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ5p4UZkY9CwchdXaB0wypv7nzTnMAKZ/:XDFhhKYaV3Jb4ekcCwEa+w+vzzTn0B
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\136.rat
Category:	dropped
Dump:	136.rat.3.dr
ID:	dr_306
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.014096571561593
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQOmmeYe/S94zxNSJ1xLpxCN+VJ2LEzER8Rou4ZFtyT:XDFhhKYaV3JO4YeIRKjwWe
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\137.rat
Category:	dropped
Dump:	137.rat.3.dr
ID:	dr_310
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.984084023396346
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQqPLnsEBD8i39/62M0a/k0HqZVH1hkPIsbxPRsNvmwZg:XDFhhKYaV3JqPLDj/OH1Hs7BsbcI
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\138.rat
Category:	dropped
Dump:	138.rat.3.dr
ID:	dr_314
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.028904464600667
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQlx+xnAHAAf2shjZCcHNmuS39kxzHc8UYtDEy7dkcDfO:XDFhhKYaV3Jv+Za5uCCsm8y8rZEOkc7G
Size:	1243
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\139.rat
Category:	dropped
Dump:	139.rat.3.dr
ID:	dr_318
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.067778394611707
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQnLHyV9ZspJBafrXGSy7Qurzaf5cU9ywb6uCyFC:XDFhhKYaV3Jnla2oxxcUvYP
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\140.rat
Category:	dropped
Dump:	140.rat.3.dr
ID:	dr_322
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0724249080810315
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQs4ByV9ZspJBafrXGSy7Qurzaf5cUh9O6dzr3:XDFhhKYaV3JXa2oxxcUK6J3
Size:	1203
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\141.rat
Category:	dropped
Dump:	141.rat.3.dr
ID:	dr_326
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.009416148558042
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsc1gDQhLWxGJO87xX6HlHkrp4/Lug/2uy3GW8mdSbbT:XDFhhKYaV3JPgK/J/oHpg4zj/xsGW8mI
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\142.rat
Category:	dropped
Dump:	142.rat.3.dr
ID:	dr_330
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.038267886817372
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7hCHvaXAC4DcFAiuY8C+ZkdWa7DUaXdlFEH0P2Q:XDFhhKYaV3J7hCywC4Diz8ChWYZdLNPX
Size:	1216
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\143.rat
Category:	dropped
Dump:	143.rat.3.dr
ID:	dr_334
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.973828234077221
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQJxsXaS94zxNSJ1xLpxCN+VJ2LEzPtsfYCdZ16rnby:XDFhhKYaV3JJKXLRK1HdZ16i
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\144.rat
Category:	dropped
Dump:	144.rat.3.dr
ID:	dr_338
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.047979965080222
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7y0n1XAC4DcFAiuY8C+ZkdWa7DUZve5Gi1pA7:XDFhhKYaV3J7y0n1wC4Diz8ChWYEvdiC
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\145.rat
Category:	dropped
Dump:	145.rat.3.dr
ID:	dr_341
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.974625426212995
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0BsKWS94zxNSJ1xLpxCN+VJ2LEz4B+b8sB:XDFhhKYaV3J0BswRKsB
Size:	1207
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\146.rat
Category:	dropped
Dump:	146.rat.3.dr
ID:	dr_354
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008159423559416
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQi54dqmD8i39/62M0a/k0HqZVH1hkPIsbxZOR4hwdO5D:XDFhhKYaV3Ji547Dj/OH1Hs7BsbnW4hB
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\147.rat
Category:	dropped
Dump:	147.rat.3.dr
ID:	dr_357
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.036895309229509
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ5bYTmfVHMhfgXwrPmT7sILokMbqbmEM:XDFhhKYaV3J5OmtHMhewrBuoLeJM
Size:	1224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\148.rat
Category:	dropped
Dump:	148.rat.3.dr
ID:	dr_360
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0308769720323445
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQWC3YTmfVHMhfgXwrPmT7sILo92a9SRfddDZQJAXn:XDFhhKYaV3J2mtHMhewrBuotAfv6Jon
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\149.rat
Category:	dropped
Dump:	149.rat.3.dr
ID:	dr_363
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.027650317682284
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRFsVLntQhLWxGJO87xX6HlHkrp4/Lug/2uy3NKnuFLC:XDFhhKYaV3JRFQn0/J/oHpg4zj/xsRFC
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\150.rat
Category:	dropped
Dump:	150.rat.3.dr
ID:	dr_366
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.989213091069038
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ2vqLwS94zxNSJ1xLpxCN+VJ2LEzPfqb9ilD:XDFhhKYaV3JTLBRKeDD
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\175.rat
Category:	dropped
Dump:	175.rat.3.dr
ID:	dr_369
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020468766330052
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQM/J8CrkY9CwchdXaB0wypv7nzTHNI2IsZahtn:XDFhhKYaV3JMBjrkcCwEa+w+vzzTZun
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\180.rat
Category:	dropped
Dump:	180.rat.3.dr
ID:	dr_372
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.023805652502866
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQXSpc+YTmfVHMhfgXwrPmT7sILoO/HQMh6dE/:XDFhhKYaV3JCK5mtHMhewrBuoOPzhwE/
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\182.rat
Category:	dropped
Dump:	182.rat.3.dr
ID:	dr_375
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.073636266606844
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQxCCElQo4eZyV9ZspJBafrXGSy7Qurzaf5cUDANI0haQ:XDFhhKYaV3JxCCBoTa2oxxcUUvkVrC
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\183.rat
Category:	dropped
Dump:	183.rat.3.dr
ID:	dr_378
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.996008495590778
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ03h1gQhLWxGJO87xX6HlHkrp4/Lug/2uy3Rtp6OVoaQ:XDFhhKYaV3JgF/J/oHpg4zj/xsR3tAuK
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\187.rat
Category:	dropped
Dump:	187.rat.3.dr
ID:	dr_381
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.047902745747187
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQEZEXAC4DcFAiuY8C+ZkdWa7DUjWKZ86T:XDFhhKYaV3J0EwC4Diz8ChWYU8y
Size:	1206
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\188.rat
Category:	dropped
Dump:	188.rat.3.dr
ID:	dr_394
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.999720220239841
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQc35LUL2S94zxNSJ1xLpxCN+VJ2LEzEPAtY4rk6/Tr0w:XDFhhKYaV3JtLXRKOdrkDg
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\189.rat
Category:	dropped
Dump:	189.rat.3.dr
ID:	dr_397
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.026901369031782
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRhQO8i39/62M0a/k0HqZVH1hkPIsbxYSsWiEkQ:XDFhhKYaV3JRhQOj/OH1Hs7Bsb7riEkQ
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\401.rat
Category:	dropped
Dump:	401.rat.3.dr
ID:	dr_400
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.043109543727044
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsa5MPFxyV9ZspJBafrXGSy7Qurzaf5cUDda3sciE0Km:XDFhhKYaV3J7yFna2oxxcUDpciE05yw
Size:	1197
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\402.rat
Category:	dropped
Dump:	402.rat.3.dr
ID:	dr_403
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.017341822795235
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFIZ2AGm9CwchdXaB0wypv7nzTvVdBY0T39x:XDFhhKYaV3JFIiWCwEa+w+vzzTvz
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\403.rat
Category:	dropped
Dump:	403.rat.3.dr
ID:	dr_406
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.013591552098438
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQA6iGm9CwchdXaB0wypv7nzTTGNrrh2F:XDFhhKYaV3JAyWCwEa+w+vzzTTwrt2F
Size:	1211
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\404.rat
Category:	dropped
Dump:	404.rat.3.dr
ID:	dr_409
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.017361319201589
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQYphFQNdi39/62M0a/k0HqZVH1hkPIsbxOM78G:XDFhhKYaV3JHNG/OH1Hs7BsbUA
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\405.rat
Category:	dropped
Dump:	405.rat.3.dr
ID:	dr_412
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.010422996703042
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLg4Zx94zxNSJ1xLpxCN+VJ2LEzNgSIeqyC:XDFhhKYaV3JUiRKe8
Size:	1208
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\406.rat
Category:	dropped
Dump:	406.rat.3.dr
ID:	dr_415
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.030437055710318
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ73qGm9CwchdXaB0wypv7nzfgtQbFG:XDFhhKYaV3J73FWCwEa+w+vzzqUG
Size:	1201
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\407.rat
Category:	dropped
Dump:	407.rat.3.dr
ID:	dr_418
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008871498267967
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQHjbh9hLWxGJO87xX6HlHkrp4/Lug/2uy3M0TWi:XDFhhKYaV3JHnhr/J/oHpg4zj/xs9
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\408.rat
Category:	dropped
Dump:	408.rat.3.dr
ID:	dr_421
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016457113078556
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQW+rwNdi39/62M0a/k0HqZVH1hkPIsbxPEbX3wWV:XDFhhKYaV3J90NG/OH1Hs7BsbiXXV
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\409.rat
Category:	dropped
Dump:	409.rat.3.dr
ID:	dr_433
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.024172103554289
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0DhQDMYTmfVHMhfgXwrPmT7sILootK5:XDFhhKYaV3JmhQDXmtHMhewrBuoku
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\410.rat
Category:	dropped
Dump:	410.rat.3.dr
ID:	dr_435
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.987333026750008
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsYjxK94zxNSJ1xLpxCN+VJ2LEzsnUQib15:XDFhhKYaV3JZjCRK3UQY5
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\411.rat
Category:	dropped
Dump:	411.rat.3.dr
ID:	dr_437
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.055537811160559
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQscfpYQPfXAC4DcFAiuY8C+ZkdWa7DUlpIJTmgF:XDFhhKYaV3J13wC4Diz8ChWYupIj
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\412.rat
Category:	dropped
Dump:	412.rat.3.dr
ID:	dr_439
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.080835062953505
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQFlAIrkyV9ZspJBafrXGSy7Qurzaf5cU9q9u4ND+M9vQ:XDFhhKYaV3JF1rYa2oxxcUF4ND9I
Size:	1209
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\413.rat
Category:	dropped
Dump:	413.rat.3.dr
ID:	dr_441
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020170365448833
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQkxK1Z9hLWxGJO87xX6HlHkrp4/Lug/2uy3oTETL:XDFhhKYaV3JkQZr/J/oHpg4zj/xsRTL
Size:	1200
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\414.rat
Category:	dropped
Dump:	414.rat.3.dr
ID:	dr_443
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.006768827068809
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdPDfGm9CwchdXaB0wypv7nzT6fWZL5:XDFhhKYaV3JsWCwEa+w+vzzT1
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\415.rat
Category:	dropped
Dump:	415.rat.3.dr
ID:	dr_445
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008901726287558
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQgAf2shjZCcHNmuS39kxzHc8UYtDEyQ+WMg7Tq+u:XDFhhKYaV3JZuCCsm8y8rZEYVMu
Size:	1215
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\416.rat
Category:	dropped
Dump:	416.rat.3.dr
ID:	dr_447
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.031774668281339
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQMj9hLWxGJO87xX6HlHkrp4/Lug/2uy3Ig0pf2p:XDFhhKYaV3JKr/J/oHpg4zj/xsQ2p
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\417.rat
Category:	dropped
Dump:	417.rat.3.dr
ID:	dr_449
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.042738337428058
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQvOeGm9CwchdXaB0wypv7nzTGnIeb9BM2n:XDFhhKYaV3JvuWCwEa+w+vzzTiM2n
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\418.rat
Category:	dropped
Dump:	418.rat.3.dr
ID:	dr_451
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.047679400601578
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQjOp9hLWxGJO87xX6HlHkrp4/Lug/2uy3IgM13y:XDFhhKYaV3JjOpr/J/oHpg4zj/xsEpy
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\419.rat
Category:	dropped
Dump:	419.rat.3.dr
ID:	dr_463
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0416350647739225
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQq2q7kyV9ZspJBafrXGSy7Qurzaf5cU2BmwSF+:XDFhhKYaV3Jq2qka2oxxcU2Ee
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\420.rat
Category:	dropped
Dump:	420.rat.3.dr
ID:	dr_465
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.019702983811634
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ6rjyAf2shjZCcHNmuS39kxzHc8UYtDEygKKMg7T38tn:XDFhhKYaV3J4PuCCsm8y8rZEmpj
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\421.rat
Category:	dropped
Dump:	421.rat.3.dr
ID:	dr_467
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0085770196699055
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdnsE94zxNSJ1xLpxCN+VJ2LEzLO3s8Zgl:XDFhhKYaV3J+SRKOO88O
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\422.rat
Category:	dropped
Dump:	422.rat.3.dr
ID:	dr_469
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.03674068009553
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsE7b1VAf2shjZCcHNmuS39kxzHc8UYtDEy4jSn+3TK5:XDFhhKYaV3JFYuCCsm8y8rZE6n+i
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\423.rat
Category:	dropped
Dump:	423.rat.3.dr
ID:	dr_471
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0183747849568725
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQPufjYnAf2shjZCcHNmuS39kxzHc8UYtDEyoB52i+Bbv:XDFhhKYaV3JPufjLuCCsm8y8rZEN+tv
Size:	1208
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\424.rat
Category:	dropped
Dump:	424.rat.3.dr
ID:	dr_473
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.036797337800945
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsSMEg8XAC4DcFAiuY8C+ZkdWa7DUglm4ASZ7Tx:XDFhhKYaV3Jlpg8wC4Diz8ChWYnU3wx
Size:	1223
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\425.rat
Category:	dropped
Dump:	425.rat.3.dr
ID:	dr_475
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.013048056200911
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQathXAC4DcFAiuY8C+ZkdWa7DUc3X53/:XDFhhKYaV3Ja7wC4Diz8ChWY3Z3/
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\426.rat
Category:	dropped
Dump:	426.rat.3.dr
ID:	dr_477
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.041666367466282
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ4OQcXAC4DcFAiuY8C+ZkdWa7DUkDS0AGbh:XDFhhKYaV3JhBwC4Diz8ChWYjN7
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\427.rat
Category:	dropped
Dump:	427.rat.3.dr
ID:	dr_479
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.004421182050562
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRYQwWAf2shjZCcHNmuS39kxzHc8UYtDEyD3aOQ:XDFhhKYaV3JRfwLuCCsm8y8rZE+KN
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\428.rat
Category:	dropped
Dump:	428.rat.3.dr
ID:	dr_481
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01192942282126
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQWJiWhC94zxNSJ1xLpxCN+VJ2LEzIdXxk:XDFhhKYaV3JoiewRK2
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\429.rat
Category:	dropped
Dump:	429.rat.3.dr
ID:	dr_73
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.039365525625109
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQDgjeYTmfVHMhfgXwrPmT7sILofALD0TL:XDFhhKYaV3J8dmtHMhewrBuofCgL
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\430.rat
Category:	dropped
Dump:	430.rat.3.dr
ID:	dr_75
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.033297722483793
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQZboM6XAC4DcFAiuY8C+ZkdWa7DUKkzT2IF:XDFhhKYaV3JZ8M6wC4Diz8ChWYkzT2E
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\431.rat
Category:	dropped
Dump:	431.rat.3.dr
ID:	dr_77
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.037839614280827
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQTsrbwXAC4DcFAiuY8C+ZkdWa7DUL5KLCNtbqChWz:XDFhhKYaV3JTXwC4Diz8ChWY498Ccz
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\432.rat
Category:	dropped
Dump:	432.rat.3.dr
ID:	dr_79
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.054181079569776
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQSBXAC4DcFAiuY8C+ZkdWa7DUIUNohkb2CP/:XDFhhKYaV3JSBwC4Diz8ChWYdDhKX
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\433.rat
Category:	dropped
Dump:	433.rat.3.dr
ID:	dr_81
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008447495242746
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ3PIEZGm9CwchdXaB0wypv7nzTg60dwG3a66:XDFhhKYaV3JkWCwEa+w+vzzTgT13D6
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\434.rat
Category:	dropped
Dump:	434.rat.3.dr
ID:	dr_83
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0203458707638
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQduRdi4DGYTmfVHMhfgXwrPmT7sILomava4NDX0fJ9to:XDFhhKYaV3JcDi4DhmtHMhewrBuo5a4n
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\435.rat
Category:	dropped
Dump:	435.rat.3.dr
ID:	dr_85
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.035800738125786
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQswC4XAC4DcFAiuY8C+ZkdWa7DUXKv4:XDFhhKYaV3JdC4wC4Diz8ChWYcg4
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\436.rat
Category:	dropped
Dump:	436.rat.3.dr
ID:	dr_87
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.014372556566936
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQOBchBk69hLWxGJO87xX6HlHkrp4/Lug/2uy3JI3tmls:XDFhhKYaV3JOBW9r/J/oHpg4zj/xsJBe
Size:	1204
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\437.rat
Category:	dropped
Dump:	437.rat.3.dr
ID:	dr_89
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.974065039917839
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQkm94zxNSJ1xLpxCN+VJ2LEzwkKvP/LG:XDFhhKYaV3JkMRKTnLG
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\438.rat
Category:	dropped
Dump:	438.rat.3.dr
ID:	dr_91
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020811875261606
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQThAf2shjZCcHNmuS39kxzHc8UYtDEySunUYH:XDFhhKYaV3JKuCCsm8y8rZEY
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\439.rat
Category:	dropped
Dump:	439.rat.3.dr
ID:	dr_93
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016364951608323
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQi+Ccxl94zxNSJ1xLpxCN+VJ2LEz1h14u/0TWPO:XDFhhKYaV3JTCcxjRK84uTO
Size:	1241
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\440.rat
Category:	dropped
Dump:	440.rat.3.dr
ID:	dr_95
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.971942323811799
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQIW+59hLWxGJO87xX6HlHkrp4/Lug/2uy3uOV68jGBRX:XDFhhKYaV3JIrr/J/oHpg4zj/xs/yXX
Size:	1242
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\441.rat
Category:	dropped
Dump:	441.rat.3.dr
ID:	dr_97
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.993227356740179
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdFh0SNKXNdi39/62M0a/k0HqZVH1hkPIsbx2wNcG5:XDFhhKYaV3JZ0SN2NG/OH1Hs7Bsb8e
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\442.rat
Category:	dropped
Dump:	442.rat.3.dr
ID:	dr_99
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.044247273462979
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsahCMt3yV9ZspJBafrXGSy7Qurzaf5cU3x4NDX0fJ9T:XDFhhKYaV3J7hJa2oxxcU3x4NDX0xAAB
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\443.rat
Category:	dropped
Dump:	443.rat.3.dr
ID:	dr_101
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.035246413906201
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQDE1pXAC4DcFAiuY8C+ZkdWa7DUxN8ltswCvGg:XDFhhKYaV3JQ1pwC4Diz8ChWY5ltUeg
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\444.rat
Category:	dropped
Dump:	444.rat.3.dr
ID:	dr_103
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0068193929063005
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsazKXNdi39/62M0a/k0HqZVH1hkPIsbxd+MTVQRf:XDFhhKYaV3J7z2NG/OH1Hs7BsbDT6Rf
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\445.rat
Category:	dropped
Dump:	445.rat.3.dr
ID:	dr_105
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016072158412713
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQfylQXAC4DcFAiuY8C+ZkdWa7DUTraK5z8rh:XDFhhKYaV3JaQwC4Diz8ChWYar7w
Size:	1223
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\446.rat
Category:	dropped
Dump:	446.rat.3.dr
ID:	dr_107
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.045486741521697
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQN5yOOyV9ZspJBafrXGSy7Qurzaf5cULKKX3GbZ/7y:XDFhhKYaV3JN5Sa2oxxcU+VBW
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\447.rat
Category:	dropped
Dump:	447.rat.3.dr
ID:	dr_109
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.00320836919528
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQRA6Bj9hLWxGJO87xX6HlHkrp4/Lug/2uy3aGebj:XDFhhKYaV3JRAqr/J/oHpg4zj/xsaG0
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\448.rat
Category:	dropped
Dump:	448.rat.3.dr
ID:	dr_111
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.006556321833924
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0VficXAC4DcFAiuY8C+ZkdWa7DU0Z1Jf42xY:XDFhhKYaV3J0VPwC4Diz8ChWYrf3O
Size:	1243
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\449.rat
Category:	dropped
Dump:	449.rat.3.dr
ID:	dr_113
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029003918100463
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQabGm9CwchdXaB0wypv7nzTij9f25Mh:XDFhhKYaV3JaKWCwEa+w+vzzTiGa
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\450.rat
Category:	dropped
Dump:	450.rat.3.dr
ID:	dr_116
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016327246696451
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQETN499hLWxGJO87xX6HlHkrp4/Lug/2uy3mMrs+LWiu:XDFhhKYaV3Jsgr/J/oHpg4zj/xsjyAi
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\451.rat
Category:	dropped
Dump:	451.rat.3.dr
ID:	dr_119
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021414507810919
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQE2iAf2shjZCcHNmuS39kxzHc8UYtDEySRnqPc8:XDFhhKYaV3J9uCCsm8y8rZENAr
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\452.rat
Category:	dropped
Dump:	452.rat.3.dr
ID:	dr_122
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0094442036389
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQJyIEsZ2Ndi39/62M0a/k0HqZVH1hkPIsbx63c4HcBZ8:XDFhhKYaV3JEHPNG/OH1Hs7BsbM+0
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\453.rat
Category:	dropped
Dump:	453.rat.3.dr
ID:	dr_125
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0121304543655585
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQc9JKJaw2Ndi39/62M0a/k0HqZVH1hkPIsbx63CHdvfw:XDFhhKYaV3JIJKE/NG/OH1Hs7BsbM6v4
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\454.rat
Category:	dropped
Dump:	454.rat.3.dr
ID:	dr_128
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.013179868616311
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQhGm9CwchdXaB0wypv7nzTqF2FAN36/:XDFhhKYaV3JYWCwEa+w+vzzTVqNK/
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\455.rat
Category:	dropped
Dump:	455.rat.3.dr
ID:	dr_131
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.010482989044797
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQAp+hN9hLWxGJO87xX6HlHkrp4/Lug/2uy3jEL+hC:XDFhhKYaV3Jt3r/J/oHpg4zj/xsja
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\456.rat
Category:	dropped
Dump:	456.rat.3.dr
ID:	dr_134
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.022642738635626
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ7PJhXAC4DcFAiuY8C+ZkdWa7DU5N/0ZSqbq:XDFhhKYaV3J7PTwC4Diz8ChWYs3J
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\457.rat
Category:	dropped
Dump:	457.rat.3.dr
ID:	dr_137
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.990284184126828
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsfcXl7w2Ndi39/62M0a/k0HqZVH1hkPIsbxFbeqsTPY:XDFhhKYaV3Jsfil7/NG/OH1Hs7Bsb/eQ
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\458.rat
Category:	dropped
Dump:	458.rat.3.dr
ID:	dr_140
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.004870536338462
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ8en53W9hLWxGJO87xX6HlHkrp4/Lug/2uy3j2uOReMD:XDFhhKYaV3J8e53Wr/J/oHpg4zj/xsju
Size:	1239
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\459.rat
Category:	dropped
Dump:	459.rat.3.dr
ID:	dr_143
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.011533727082669
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQstp2Ndi39/62M0a/k0HqZVH1hkPIsbxZCmeXbU2HWq:XDFhhKYaV3JsWNG/OH1Hs7BsbnCmesq
Size:	1226
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\460.rat
Category:	dropped
Dump:	460.rat.3.dr
ID:	dr_146
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.02776691851909
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQjRhldPGgTVLXAC4DcFAiuY8C+ZkdWa7DU6uKbZPYbtA:XDFhhKYaV3JjRHdPBwC4Diz8ChWYr3
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\461.rat
Category:	dropped
Dump:	461.rat.3.dr
ID:	dr_149
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.057576147510126
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQuB07MyV9ZspJBafrXGSy7Qurzaf5cUJBdB6i5TrV6:XDFhhKYaV3JuB0ka2oxxcUNBe
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\462.rat
Category:	dropped
Dump:	462.rat.3.dr
ID:	dr_152
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.999925477313802
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQD23GmDGm9CwchdXaB0wypv7nzTrZqXMQ2qSPdD0:XDFhhKYaV3JaVSWCwEa+w+vzzT4XSzPy
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\463.rat
Category:	dropped
Dump:	463.rat.3.dr
ID:	dr_155
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029590247319015
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ+Qd1Gm9CwchdXaB0wypv7nzT6x8nYrML:XDFhhKYaV3J+QdsWCwEa+w+vzzT28iW
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\464.rat
Category:	dropped
Dump:	464.rat.3.dr
ID:	dr_158
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.992378323098034
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQeuP94zxNSJ1xLpxCN+VJ2LEzPtK7PcR0W:XDFhhKYaV3JRRKy0W
Size:	1212
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\465.rat
Category:	dropped
Dump:	465.rat.3.dr
ID:	dr_161
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.023201888957209
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQLNNdi39/62M0a/k0HqZVH1hkPIsbxPFRIJbQu7P:XDFhhKYaV3JLNNG/OH1Hs7Bsb7K2G
Size:	1237
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\466.rat
Category:	dropped
Dump:	466.rat.3.dr
ID:	dr_164
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.035627796998357
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQnYjd9hLWxGJO87xX6HlHkrp4/Lug/2uy3TnTO6SvxJS:XDFhhKYaV3JYRr/J/oHpg4zj/xsjcK
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\467.rat
Category:	dropped
Dump:	467.rat.3.dr
ID:	dr_167
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.056482141614462
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ6tlVFRyV9ZspJBafrXGSy7Qurzaf5cU9ZOS3+T5ng:XDFhhKYaV3J8l3Ha2oxxcUuSQg
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\468.rat
Category:	dropped
Dump:	468.rat.3.dr
ID:	dr_170
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.030826672488916
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQTzdyV9ZspJBafrXGSy7Qurzaf5cU5l6r9:XDFhhKYaV3JT3a2oxxcUnQ9
Size:	1223
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\469.rat
Category:	dropped
Dump:	469.rat.3.dr
ID:	dr_173
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.016057948776936
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGNGm9CwchdXaB0wypv7nzTGTOGjlbe6:XDFhhKYaV3JZWCwEa+w+vzzTlIK6
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\470.rat
Category:	dropped
Dump:	470.rat.3.dr
ID:	dr_176
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0413961445676
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdHAGm9CwchdXaB0wypv7nzTGxGLmX:XDFhhKYaV3JdHbWCwEa+w+vzzT8GmX
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\471.rat
Category:	dropped
Dump:	471.rat.3.dr
ID:	dr_180
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.997395929003033
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQj9hLWxGJO87xX6HlHkrp4/Lug/2uy3/X0MvdN:XDFhhKYaV3Jjr/J/oHpg4zj/xsf17
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\472.rat
Category:	dropped
Dump:	472.rat.3.dr
ID:	dr_184
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0314932666204575
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQAg6Gm9CwchdXaB0wypv7nzTYa+GzEl:XDFhhKYaV3JxWCwEa+w+vzzTyb
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\473.rat
Category:	dropped
Dump:	473.rat.3.dr
ID:	dr_188
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.058386755019486
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQZrBYTXAC4DcFAiuY8C+ZkdWa7DUDNqOJbJ:XDFhhKYaV3JZSTwC4Diz8ChWYc
Size:	1215
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\474.rat
Category:	dropped
Dump:	474.rat.3.dr
ID:	dr_192
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.9765358540093505
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQCymjGv94zxNSJ1xLpxCN+VJ2LEz0z1T0uTqYyt+:XDFhhKYaV3JFlRKNB0Xt+
Size:	1219
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\475.rat
Category:	dropped
Dump:	475.rat.3.dr
ID:	dr_196
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021974882989286
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQZH+0XAC4DcFAiuY8C+ZkdWa7DUDPoK0mk:XDFhhKYaV3JZ1wC4Diz8ChWYJmk
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\476.rat
Category:	dropped
Dump:	476.rat.3.dr
ID:	dr_200
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.989724143773184
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGRpvt9hLWxGJO87xX6HlHkrp4/Lug/2uy3QyxakL9pV:XDFhhKYaV3JGRRtr/J/oHpg4zj/xsokZ
Size:	1245
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\477.rat
Category:	dropped
Dump:	477.rat.3.dr
ID:	dr_204
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.005679821400762
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQjuaMho8iYTmfVHMhfgXwrPmT7sILosYq3ssDOTSPi:XDFhhKYaV3Jjua6oCmtHMhewrBuos7hi
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\478.rat
Category:	dropped
Dump:	478.rat.3.dr
ID:	dr_208
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.9950254179295435
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQYkzZqDt94zxNSJ1xLpxCN+VJ2LEz0pYooa0Y7:XDFhhKYaV3JpgHRKZ7
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\479.rat
Category:	dropped
Dump:	479.rat.3.dr
ID:	dr_213
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.025986414236437
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQQjDGXNdi39/62M0a/k0HqZVH1hkPIsbxJYtjbaGcv:XDFhhKYaV3JQSNG/OH1Hs7BsbfYtaRv
Size:	1236
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\480.rat
Category:	dropped
Dump:	480.rat.3.dr
ID:	dr_216
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.015742978311429
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQX9Tp9hLWxGJO87xX6HlHkrp4/Lug/2uy3QoeJD2lGU:XDFhhKYaV3JtTpr/J/oHpg4zj/xsJeJg
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\481.rat
Category:	dropped
Dump:	481.rat.3.dr
ID:	dr_220
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008866144681047
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQpg3vgXAC4DcFAiuY8C+ZkdWa7DUtQV2ZwszjbH2pZXi:XDFhhKYaV3Je3YwC4Diz8ChWY0VzWpZy
Size:	1242
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\482.rat
Category:	dropped
Dump:	482.rat.3.dr
ID:	dr_224
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029695589021443
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQxaQAjXNdi39/62M0a/k0HqZVH1hkPIsbxP6f2j2TJLb:XDFhhKYaV3JxaQATNG/OH1Hs7Bsb5IfJ
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\483.rat
Category:	dropped
Dump:	483.rat.3.dr
ID:	dr_228
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.027019670213331
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQySXnXAC4DcFAiuY8C+ZkdWa7DUSsSpDO7nBZtjP:XDFhhKYaV3JySXnwC4Diz8ChWYpVArBj
Size:	1245
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\484.rat
Category:	dropped
Dump:	484.rat.3.dr
ID:	dr_232
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.988802436921537
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQXMEVwE94zxNSJ1xLpxCN+VJ2LEz0PmoDKBr:XDFhhKYaV3J3wSRKh8Z
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\485.rat
Category:	dropped
Dump:	485.rat.3.dr
ID:	dr_236
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.041416336939899
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQSDKwYTmfVHMhfgXwrPmT7sILoGAesD:XDFhhKYaV3JSWjmtHMhewrBuoGAJ
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\486.rat
Category:	dropped
Dump:	486.rat.3.dr
ID:	dr_240
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.004098223899896
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQqetYTmfVHMhfgXwrPmT7sILorVI1YkiX:XDFhhKYaV3JymtHMhewrBuorVICX
Size:	1241
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\487.rat
Category:	dropped
Dump:	487.rat.3.dr
ID:	dr_244
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.9822862811906345
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQMT2s9hLWxGJO87xX6HlHkrp4/Lug/2uy3lv7LbC:XDFhhKYaV3JMVr/J/oHpg4zj/xstW
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\488.rat
Category:	dropped
Dump:	488.rat.3.dr
ID:	dr_248
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.005434217073922
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQEdg6gdX2o9hLWxGJO87xX6HlHkrp4/Lug/2uy3lkuPx:XDFhhKYaV3JmX4Dr/J/oHpg4zj/xs2Kx
Size:	1237
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\489.rat
Category:	dropped
Dump:	489.rat.3.dr
ID:	dr_254
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.049351617034392
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQMUJXXAC4DcFAiuY8C+ZkdWa7DUwGJI9o2jbTU:XDFhhKYaV3JMawC4Diz8ChWYWv2A
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\490.rat
Category:	dropped
Dump:	490.rat.3.dr
ID:	dr_257
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.981482215666936
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsQUhAOKvNu294zxNSJ1xLpxCN+VJ2LEzbB1i5ZBqH0s:XDFhhKYaV3JsQUhADRK2B1i5ZBDPU
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\491.rat
Category:	dropped
Dump:	491.rat.3.dr
ID:	dr_261
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0181604382468095
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQsp4Af2shjZCcHNmuS39kxzHc8UYtDEyM6qWK+SASZpg:XDFhhKYaV3JspBuCCsm8y8rZEp1Fagg
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\492.rat
Category:	dropped
Dump:	492.rat.3.dr
ID:	dr_265
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01778822370992
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ9v1va19hLWxGJO87xX6HlHkrp4/Lug/2uy3Q+EY3PFI:XDFhhKYaV3Jrgr/J/oHpg4zj/xsBv91+
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\493.rat
Category:	dropped
Dump:	493.rat.3.dr
ID:	dr_269
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.018601480016073
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQiFGm9CwchdXaB0wypv7nzT5QQJiK4dnjC/m:XDFhhKYaV3Ji8WCwEa+w+vzzT5QspWjN
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\494.rat
Category:	dropped
Dump:	494.rat.3.dr
ID:	dr_273
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.977415064853912
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQd3VVq194zxNSJ1xLpxCN+VJ2LEz0Pm3nkksHR7l:XDFhhKYaV3JdlViRKh4nkTZl
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\495.rat
Category:	dropped
Dump:	495.rat.3.dr
ID:	dr_277
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0071827375779705
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQKNdi39/62M0a/k0HqZVH1hkPIsbxl21GbbrQiydG:XDFhhKYaV3JKNG/OH1Hs7BsbYGkit
Size:	1238
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\496.rat
Category:	dropped
Dump:	496.rat.3.dr
ID:	dr_281
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.054085567352269
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ1DhgXAC4DcFAiuY8C+ZkdWa7DUDsXSt+MqBgR:XDFhhKYaV3J1DmwC4Diz8ChWYrXStqBs
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\497.rat
Category:	dropped
Dump:	497.rat.3.dr
ID:	dr_285
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.034571617747786
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQEZLrlGm9CwchdXaB0wypv7nzTGSguHvwan:XDFhhKYaV3J6rcWCwEa+w+vzzTcuH/
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\498.rat
Category:	dropped
Dump:	498.rat.3.dr
ID:	dr_289
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.020733003762628
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQUVBIKGm9CwchdXaB0wypv7nzTGd5D7upNit:XDFhhKYaV3JsB+WCwEa+w+vzzTsD7uit
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\499.rat
Category:	dropped
Dump:	499.rat.3.dr
ID:	dr_304
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.037836169669634
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQEpRluAf2shjZCcHNmuS39kxzHc8UYtDEyVpuupdTtzv:XDFhhKYaV3JuuCCsm8y8rZEm8uzJv
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\500.rat
Category:	dropped
Dump:	500.rat.3.dr
ID:	dr_307
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.982416673757881
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0MQD4b5ft94zxNSJ1xLpxCN+VJ2LEz0ZHEdbUf:XDFhhKYaV3Jy0RLRKfPf
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\501.rat
Category:	dropped
Dump:	501.rat.3.dr
ID:	dr_311
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029133091853192
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGCGm9CwchdXaB0wypv7nzTHT++jb9Xz2Ta:XDFhhKYaV3JYWCwEa+w+vzzTa0zp
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\502.rat
Category:	dropped
Dump:	502.rat.3.dr
ID:	dr_315
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0451277096011165
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ09LzsKvyV9ZspJBafrXGSy7Qurzaf5cUmdDOFXwya63:XDFhhKYaV3JiLvBa2oxxcUmc063
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\503.rat
Category:	dropped
Dump:	503.rat.3.dr
ID:	dr_319
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.021377908437268
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdt3ndAAf2shjZCcHNmuS39kxzHc8UYtDEyiml61Ti50:XDFhhKYaV3JdVnfuCCsm8y8rZEMq/
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\504.rat
Category:	dropped
Dump:	504.rat.3.dr
ID:	dr_323
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.010776919830711
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQGVJyy3jAf2shjZCcHNmuS39kxzHc8UYtDEyRXOz+Mn:XDFhhKYaV3JLuCCsm8y8rZEIOz5
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\505.rat
Category:	dropped
Dump:	505.rat.3.dr
ID:	dr_327
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.01969050287507
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ6sYTmfVHMhfgXwrPmT7sILoYz64q3o:XDFhhKYaV3J63mtHMhewrBuoJ44o
Size:	1221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\506.rat
Category:	dropped
Dump:	506.rat.3.dr
ID:	dr_331
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.023846462097828
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQCDXAC4DcFAiuY8C+ZkdWa7DUilZdaOx:XDFhhKYaV3JCDwC4Diz8ChWYB3x
Size:	1234
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\507.rat
Category:	dropped
Dump:	507.rat.3.dr
ID:	dr_335
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.008322721708812
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQvvdW8di39/62M0a/k0HqZVH1hkPIsbxvWZS9p4biA6n:XDFhhKYaV3J3dW8G/OH1Hs7BsbskFGU
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\508.rat
Category:	dropped
Dump:	508.rat.3.dr
ID:	dr_339
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0051910483683715
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQzt1XdAf2shjZCcHNmuS39kxzHc8UYtDEyx1VzcNFi8:XDFhhKYaV3JnXquCCsm8y8rZE6AK8
Size:	1240
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\509.rat
Category:	dropped
Dump:	509.rat.3.dr
ID:	dr_353
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.056729163413495
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ1gseyV9ZspJBafrXGSy7Qurzaf5cUmBFP1:XDFhhKYaV3J1X+a2oxxcUm5
Size:	1237
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\510.rat
Category:	dropped
Dump:	510.rat.3.dr
ID:	dr_355
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.006921799671215
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQv6YyvNAf2shjZCcHNmuS39kxzHc8UYtDEyyad/OGQ:XDFhhKYaV3JEyuCCsm8y8rZEI/OT
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\511.rat
Category:	dropped
Dump:	511.rat.3.dr
ID:	dr_358
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.964088754283126
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ/EvbOP94zxNSJ1xLpxCN+VJ2LEz0mwA/Jj6J:XDFhhKYaV3JMvCFRKPA/u
Size:	1244
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\512.rat
Category:	dropped
Dump:	512.rat.3.dr
ID:	dr_361
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.040305066191459
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQVWgLzm9CwchdXaB0wypv7nzT5QQJMtOvNH+:XDFhhKYaV3JVpLzWCwEa+w+vzzT5QkMh
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\513.rat
Category:	dropped
Dump:	513.rat.3.dr
ID:	dr_364
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.035251724791435
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQEGIInotthYspJBafrXGSy7Qurzaf5cUmk2:XDFhhKYaV3JEGWra2oxxcUmH
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\514.rat
Category:	dropped
Dump:	514.rat.3.dr
ID:	dr_367
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.995108653768684
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ/nxqace/xXTf2shjZCcHNmuS39kxzHc8UYtDEy1DO/j:XDFhhKYaV3J/n4e/xDuCCsm8y8rZEL1F
Size:	1235
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\515.rat
Category:	dropped
Dump:	515.rat.3.dr
ID:	dr_370
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.050855836724889
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ37TyFihZhYspJBafrXGSy7Qurzaf5cUmdOodb8dA:XDFhhKYaV3J36Fi1a2oxxcUmcoedA
Size:	1220
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\516.rat
Category:	dropped
Dump:	516.rat.3.dr
ID:	dr_373
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0259724015857445
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQXrjpXTf2shjZCcHNmuS39kxzHc8UYtDEyG3BmjBimy:XDFhhKYaV3JvpDuCCsm8y8rZEh3B1R
Size:	1217
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\517.rat
Category:	dropped
Dump:	517.rat.3.dr
ID:	dr_376
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.009300851745943
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0IXTf2shjZCcHNmuS39kxzHc8UYtDEyPFvm8ibzJS:XDFhhKYaV3J0IDuCCsm8y8rZEsZT
Size:	1224
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\518.rat
Category:	dropped
Dump:	518.rat.3.dr
ID:	dr_379
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.02258572075624
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ3JQjNhYspJBafrXGSy7Qurzaf5cUmVVDOtt6cgS:XDFhhKYaV3J5Q/a2oxxcUmV0vj
Size:	1231
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\519.rat
Category:	dropped
Dump:	519.rat.3.dr
ID:	dr_393
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.981156437406966
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQax52J7mM2GxGJO87xX6HlHkrp4/Lug/2uy3QgsyEus:XDFhhKYaV3J2587mHJ/oHpg4zj/xsfsT
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\520.rat
Category:	dropped
Dump:	520.rat.3.dr
ID:	dr_395
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.004347568894452
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ0rUzWO8/v2GxGJO87xX6HlHkrp4/Lug/2uy31XYzOVe:XDFhhKYaV3JwUX8iJ/oHpg4zj/xs9ZUP
Size:	1225
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\521.rat
Category:	dropped
Dump:	521.rat.3.dr
ID:	dr_398
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0379261824916775
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQbeluPmNooCwchdXaB0wypv7nzT5QQDS9TbLbO/:XDFhhKYaV3Jb2uPmqoCwEa+w+vzzT5QM
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\522.rat
Category:	dropped
Dump:	522.rat.3.dr
ID:	dr_401
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.046901262209346
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQtSa6ugNooCwchdXaB0wypv7nzT+iDG0LbI:XDFhhKYaV3JaugqoCwEa+w+vzzT1Cyk
Size:	1230
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\523.rat
Category:	dropped
Dump:	523.rat.3.dr
ID:	dr_404
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.027351203560866
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQdivUIEweJnyVeYTmfVHMhfgXwrPmT7sILosYPxXe/t:XDFhhKYaV3Jd1J+mtHMhewrBuosIxXel
Size:	1213
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\524.rat
Category:	dropped
Dump:	524.rat.3.dr
ID:	dr_407
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.029187356599049
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQD0j0ArYspJBafrXGSy7Qurzaf5cUmPMPOoIu4:XDFhhKYaV3J4j0AHa2oxxcUmP4OoIu4
Size:	1218
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\525.rat
Category:	dropped
Dump:	525.rat.3.dr
ID:	dr_410
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.0444523621419055
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQcjpNrYspJBafrXGSy7Qurzaf5cUmNGOT9a:XDFhhKYaV3JcjvHa2oxxcUmTxa
Size:	1214
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\526.rat
Category:	dropped
Dump:	526.rat.3.dr
ID:	dr_413
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.987869944226108
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQCVMTmVPGxGJO87xX6HlHkrp4/Lug/2uy3QyXUGtKS:XDFhhKYaV3JCjdJ/oHpg4zj/xsJUpS
Size:	1201
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\527.rat
Category:	dropped
Dump:	527.rat.3.dr
ID:	dr_416
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.019309325067962
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQvqhKjcSDjI9/62M0a/k0HqZVH1hkPIsbxnOJTJZSUTj:XDFhhKYaV3JXcoq/OH1Hs7BsbkFCT6n
Size:	1229
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\528.rat
Category:	dropped
Dump:	528.rat.3.dr
ID:	dr_419
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.074738566135895
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQhv4o6ThXBC4DcFAiuY8C+ZkdWa7DUxdjDjz0KKg:XDFhhKYaV3JWnVXBC4Diz8ChWYAPz0s
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\529.rat
Category:	dropped
Dump:	529.rat.3.dr
ID:	dr_36
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.02692454029315
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQU7+4U6v4zxNSJ1xLpxCN+VJ2LEzYZQ+q2Q7:XDFhhKYaV3JU7+IvRKI
Size:	1236
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\530.rat
Category:	dropped
Dump:	530.rat.3.dr
ID:	dr_38
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.022743931343555
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQAjELJjI9/62M0a/k0HqZVH1hkPIsbxAnifmnvubiSdx:XDFhhKYaV3JAgL1q/OH1Hs7BsbPenv2b
Size:	1228
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\531.rat
Category:	dropped
Dump:	531.rat.3.dr
ID:	dr_40
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.992238522231614
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQSwTnefGxGJO87xX6HlHkrp4/Lug/2uy3Ou2Qm:XDFhhKYaV3JBTnyJ/oHpg4zj/xsQ
Size:	1243
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\532.rat
Category:	dropped
Dump:	532.rat.3.dr
ID:	dr_42
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.058332668982316
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQmABGnC5KC4DcFAiuY8C+ZkdWa7DUbrckVAd:XDFhhKYaV3JWOKC4Diz8ChWYyctd
Size:	1232
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\533.rat
Category:	dropped
Dump:	533.rat.3.dr
ID:	dr_44
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.9927680610965055
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQAjeZvLjI9/62M0a/k0HqZVH1hkPIsbxCxqVJjjS:XDFhhKYaV3Jtnq/OH1Hs7BsbJS
Size:	1241
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\534.rat
Category:	dropped
Dump:	534.rat.3.dr
ID:	dr_46
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.040572543223151
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQt3grSsrf2shjZCcHNmuS39kxzHc8UYtDEyR6kIXb9w4:XDFhhKYaV3Jt+PuCCsm8y8rZElgvE
Size:	1227
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\535.rat
Category:	dropped
Dump:	535.rat.3.dr
ID:	dr_48
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1417
Entropy:	7.062897118774239
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ3Z+ThqsspNBGzXmSy7JDpHaf5cUOJjbrwnS2n:XDFhhKYaV3JpH7gzWP6xcUN
Size:	1222
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\536.rat
Category:	dropped
Dump:	536.rat.3.dr
ID:	dr_50
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.012388866820575
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQgun1GYVyVeYTmfVHMhfgXwrPmT7sILoYhWfCJs:XDFhhKYaV3J51amtHMhewrBuoYcKi
Size:	1243
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\537.rat
Category:	dropped
Dump:	537.rat.3.dr
ID:	dr_52
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	6.983404234474269
Encrypted:	false
Ssdeep:	24:XDFushnKs3Y+mea3yc3UQ/dhid4zxNSJ1xLpxCN+VJ2LEzYXH8nIVrY/Xn:XDFhhKYaV3JmdRKXH8nKUXn
Size:	1239
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\538.rat
Category:	dropped
Dump:	538.rat.3.dr
ID:	dr_54
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.744838331316132
Encrypted:	false
Ssdeep:	12:Xv9+hFHIo0kebwyZjUU0Fol/ztTAtB0NOGx2pUlV4NByNif4D/Fg6xTgS7p0O25v:X1+hWGOULFoJpsz0xl+eif4D/F1xTgSW
Size:	728
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\539.rat
Category:	dropped
Dump:	539.rat.3.dr
ID:	dr_56
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.723599323999286
Encrypted:	false
Ssdeep:	12:Xfl4XGECZsnHvh7zmxqvczLYy63u0qOakV7+UsZB9ODAIWG/Uvkpi+6BzKH:XN4WnZGpK6Tq+gUsTApwk4KH
Size:	736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\540.rat
Category:	dropped
Dump:	540.rat.3.dr
ID:	dr_58
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.707381661077072
Encrypted:	false
Ssdeep:	12:XMVdAZ1OkScsyBEXfSosbtkdcsEeaSPUiXPRiyWlC5yrL/OUeC+O2YeBEkZxhZ/o:XMVd81OAjp5bFsGeUkiVlkKWCfReB7Eb
Size:	726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\541.rat
Category:	dropped
Dump:	541.rat.3.dr
ID:	dr_60
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.701373262505341
Encrypted:	false
Ssdeep:	12:X+fn3+Cd6WTe/LMROoy8wm1JHXYwF5+XHWd1q4LqVja6AZmjIFuU:XpCd6p8HHIxXWTqLjZAZw2
Size:	735
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\542.rat
Category:	dropped
Dump:	542.rat.3.dr
ID:	dr_62
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.676678516545476
Encrypted:	false
Ssdeep:	12:XXvbtPzu9EpiU5TFf2z5exQi8K+RIOEQaqhBOqrQ9JBBF8zhigW2ZH7Ao9+RF7Uz:XXvJbuGpiuTFf2teqG+C3q3Oqcmzh2KX
Size:	725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\543.rat
Category:	dropped
Dump:	543.rat.3.dr
ID:	dr_64
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.66855892556756
Encrypted:	false
Ssdeep:	12:X/OwIbtmxmjOG+mexbLqexl086KSxf6BECorIexn/ZN4EzZfoAjLdd9U8d41DYSQ:XDIbtuGQZ+c0aNozxwEz1Vd9U8d4RQ
Size:	731
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\544.rat
Category:	dropped
Dump:	544.rat.3.dr
ID:	dr_66
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.654453008443303
Encrypted:	false
Ssdeep:	12:Xv9+EPlAdn2ScX8wO+7IyoFTdPXynpKlc37YsVkzoRppFx1CYbgjj1JR7f6jQ9a7:X1+r2ZX8wl7I7F5MkKUsVkMRppL1CYbn
Size:	729
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\545.rat
Category:	dropped
Dump:	545.rat.3.dr
ID:	dr_68
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.72820156378409
Encrypted:	false
Ssdeep:	12:XIBH9f0d3/Bqdvk20gERofbBXjBm+Za7dL0NdSG117j7jb0mid7I5VILH:XIBdf0l/BXgERcZjBbZaZot17jHWdk5w
Size:	726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\546.rat
Category:	dropped
Dump:	546.rat.3.dr
ID:	dr_69
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.725963863811352
Encrypted:	false
Ssdeep:	12:XMOyWuoZxegx8mhLy8J6IKa0ZVsKVBiEuqFC9Op6rWji7qh58U9u8ufg/:XMOu+xtx84Lyc6IslBiEXC9OpO7s5Zug
Size:	725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\547.rat
Category:	dropped
Dump:	547.rat.3.dr
ID:	dr_70
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.7210018916616034
Encrypted:	false
Ssdeep:	12:Xv9kpiZcECdEN13tsXCwZzw6RM42h0pdsk0tpE8taT59LMcoiGioKgISaWfZ3yHD:X1kvd+196NwEFetpva19YsQ4H83tu7
Size:	733
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\548.rat
Category:	dropped
Dump:	548.rat.3.dr
ID:	dr_71
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.669690218411782
Encrypted:	false
Ssdeep:	12:XIh2M2sVqr/DcELYz7bZuNbytX3ShUBTUcI94gNpP1yGKb/Cl9Dti2hk7OCuGNDc:XIhOJAEc/N2ytX3SOTzI94gNpP/9Dt2M
Size:	727
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\549.rat
Category:	dropped
Dump:	549.rat.3.dr
ID:	dr_72
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.778957360418689
Encrypted:	false
Ssdeep:	12:Xv9+KA8MkYJpJS0lN0adfyS+RH5A4/kVnU2MNhS31AOGpYbExj76GwYA8kdPM7:X1+KxY7J7N006l+nU01rGWbEllwT8ks
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\550.rat
Category:	dropped
Dump:	550.rat.3.dr
ID:	dr_74
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.692125409516789
Encrypted:	false
Ssdeep:	12:XLuZFdK5W1TPNgm4rh954TCvYy7W5CMe3+s3aVRw6U7oe1gawLluJPkGBr:XKE5W1ZAhKIjW5CMxI1gawLgJP5r
Size:	738
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\551.rat
Category:	dropped
Dump:	551.rat.3.dr
ID:	dr_76
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.645279468979766
Encrypted:	false
Ssdeep:	12:XZdZlSDa5rEgBdSW52VaFguakdPSIzChL6X5DEZ2Hx/pYYpSx4:XZdZlUa5rEgBdSW5Sk9euRRg4
Size:	723
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\552.rat
Category:	dropped
Dump:	552.rat.3.dr
ID:	dr_78
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.685578991653738
Encrypted:	false
Ssdeep:	12:XP9UL+eia/oScLJHVkoP/dgymSclIu2gCkkSuWTGOhTvOPMAk3cSlmawqcS/umz8:XyyTavcrky/eyhcCu2gdm7SvvcS/Tfiz
Size:	722
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\553.rat
Category:	dropped
Dump:	553.rat.3.dr
ID:	dr_80
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.6881091504613
Encrypted:	false
Ssdeep:	12:XrwaLVz++3WficC/kaHIU4R6tkDGQ0eD+hBFAQ44naLbpyf/DzI+gqb8CPPrk:XrwmV+I1cC8us4ODzD+ZAN4naMbzrgqI
Size:	723
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\554.rat
Category:	dropped
Dump:	554.rat.3.dr
ID:	dr_82
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.650529939180829
Encrypted:	false
Ssdeep:	12:X4gsFRi+0Oaucdpfec8LOTudYglA9BJ7inuYP0FsLyzaX59Nqk32O/aMmCN:X6w+XIGc8+udYwSfMc2Uc5z332O/aMt
Size:	727
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\555.rat
Category:	dropped
Dump:	555.rat.3.dr
ID:	dr_84
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.73598094383542
Encrypted:	false
Ssdeep:	12:XxYCXZu+/VntyM/wh6IN2Hd5c19Lt1PJ0saerkbNv1jaXoXwqtZXrp2A+/mcvQiY:XxYCXZdyXkzM3PJXTwO4Xwqzrpu/muZY
Size:	724
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\556.rat
Category:	dropped
Dump:	556.rat.3.dr
ID:	dr_86
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.661472594398708
Encrypted:	false
Ssdeep:	12:XZtTK3Vsji/ErX5OQODD2mlExcBwNGLOWv/FyUSQX4sG41IFJ2VSEqdc1s3mY7QZ:XZtelytrUhFvqcH3rSFDFwVPqS1sWBH5
Size:	739
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\557.rat
Category:	dropped
Dump:	557.rat.3.dr
ID:	dr_88
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.690694380531414
Encrypted:	false
Ssdeep:	12:X7+5EMoQPiCIs3wr2mcE1wr5Hmjuqw5d1n/5mGsH4q5I8AIkCi/saCSOyqHB1l0s:X7+5E+avVamcAwEfCnxmGcI8o/saYNlL
Size:	725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\558.rat
Category:	dropped
Dump:	558.rat.3.dr
ID:	dr_90
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.699704325893552
Encrypted:	false
Ssdeep:	12:Xid5Q6QeDoB+o3IzCMcgyqza1lUlqcfVbrOFbvT6ocR1o4ABinxmZpXTKEMz8k1g:XEQ6Qe07YzMgyqzTqAnOtuntABemZ5GE
Size:	730
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\559.rat
Category:	dropped
Dump:	559.rat.3.dr
ID:	dr_92
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.728179643224571
Encrypted:	false
Ssdeep:	12:Xv9+Fptq+7SbK+mN9ELfS++xVEQBhyFefCgW3s8Xcbr8UX12wRlQjBB49VmSIoYo:X1+FptF7Z+BLK1VEQm1PqrbFxoX49Acz
Size:	736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\560.rat
Category:	dropped
Dump:	560.rat.3.dr
ID:	dr_94
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.730537438732055
Encrypted:	false
Ssdeep:	12:XjtiIB4KMG8YP8NGz4SX8076lUD0wAyTP0a06b6EcG0PwVR2INdCNwKvW4BY3vKw:XjtrnMGfP8NGNT6lK0CYaqG0PQ2qdOwL
Size:	736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\561.rat
Category:	dropped
Dump:	561.rat.3.dr
ID:	dr_96
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.663011138475739
Encrypted:	false
Ssdeep:	12:Xv9ggM0ZsOde4Hi8L1tFJd7RH2mJ5gQytXhciy2+k/345s9OY9jgQlYN+:X1ggM0eQlxZjVB5gQOZP99OY9ELA
Size:	726
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\562.rat
Category:	dropped
Dump:	562.rat.3.dr
ID:	dr_98
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.7042243410601206
Encrypted:	false
Ssdeep:	12:XIUGCwhPjxiN7g8FFcuFWddb5H0CASTKGJkuaigM9fOMNZugK0n:XIU1whPjcMcFBFWnbBnGDIVkeZHK0
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\563.rat
Category:	dropped
Dump:	563.rat.3.dr
ID:	dr_100
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.691214581338291
Encrypted:	false
Ssdeep:	12:XKEZldPpmdiRw8vvIvB7gfdoVwgf9sstg8UmzpalkqrjQT7IxK0Tt/NeU:XKqdUuNHIvK103S0gAYWoQ3IxK0TJ4U
Size:	738
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\564.rat
Category:	dropped
Dump:	564.rat.3.dr
ID:	dr_102
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.7276718316726765
Encrypted:	false
Ssdeep:	12:Xzn4i/evoKUUBxtVQS9hV+bkuxQ6KKU14lNw0FbvyBONabjUeKExH7xEl:Xz4iGvorAx7p9T+jQpKUcw0EIN6jULE0
Size:	735
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\565.rat
Category:	dropped
Dump:	565.rat.3.dr
ID:	dr_104
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.6915639495458406
Encrypted:	false
Ssdeep:	12:XCWzOn4uHHTWusdPj7qTK5wX0fbKLLThpSzecn1ud+2pVmPIo73E6WQX:XCYRuHzHgiTKOuU/hgzecn8dXDDOX
Size:	722
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\566.rat
Category:	dropped
Dump:	566.rat.3.dr
ID:	dr_106
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.728468702091026
Encrypted:	false
Ssdeep:	12:XGRjyGumPias3dMoe8rT+TetLwCxjiCVf37GVo2VcZNDHFyfmUe/cbVavizI1G:XGpW37LhPxGCVGo2yZwl/bVzzIE
Size:	720
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\567.rat
Category:	dropped
Dump:	567.rat.3.dr
ID:	dr_108
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.697426444734248
Encrypted:	false
Ssdeep:	12:XjtcV5zHd++pazMyhTzqZp/CuKgsc3qeHcrk82OdHmz1o/aBCW/jG/DzdhH9cl:XjtcTzg+pazMyh6qu73ZHidwZ/jMNN9U
Size:	723
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\568.rat
Category:	dropped
Dump:	568.rat.3.dr
ID:	dr_110
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.733130058209454
Encrypted:	false
Ssdeep:	12:Xv9ICH4q8L6OT61/f1DQJxKQzGXAZxe8Q3hL3+5zWtA6XBF7yc9cfODR23vn:X1IVq8L6OSkJxjmAZxy3NsWe6xxy+u0S
Size:	720
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\569.rat
Category:	dropped
Dump:	569.rat.3.dr
ID:	dr_112
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.682291748302561
Encrypted:	false
Ssdeep:	12:Xkcoxkvgcq194wVvwbQMCvbXmpeXol5JH3Tuq8zOauf54seH8FIjxPxmgs7kNodh:X/S1pIQzWkO1juvOR67XxPVs7kNo+g
Size:	723
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\570.rat
Category:	dropped
Dump:	570.rat.3.dr
ID:	dr_114
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.665396167988646
Encrypted:	false
Ssdeep:	12:X9zJ++bal44/Dwo1ZovUYr79c8qkVx14WSZOjz49y/sgbgA5lmJFGlnwq:XNwzl1co1WvB9KcxKFZ5OtgA58FGRT
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\571.rat
Category:	dropped
Dump:	571.rat.3.dr
ID:	dr_117
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.695656348109879
Encrypted:	false
Ssdeep:	12:XkN8Z6lIc5RKe0Htz42sinp3cb7HIthw7DkRw7ntnQgE6QK+R/WCMM/P8JSNO1Xu:XkN8ZkISRF0HtzBz3cbEIDkQntnQg/QH
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\572.rat
Category:	dropped
Dump:	572.rat.3.dr
ID:	dr_120
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.693229331365368
Encrypted:	false
Ssdeep:	12:X/m4oUjznlB73QQv2wc6Z7RRkyzAlv0+AziAzpZ7FEuLqtxl:XeYHj7BU6Z78fvXG7CLxl
Size:	725
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\573.rat
Category:	dropped
Dump:	573.rat.3.dr
ID:	dr_123
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.645971303371302
Encrypted:	false
Ssdeep:	12:XiPxrAHIiQRPVp3d+GgusqXjH+EMwD29vZenKgH7sHhVHZeemIVRB7j3gn:XiPxcHIHdLPXjHAQKgH7sleMTI
Size:	710
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\574.rat
Category:	dropped
Dump:	574.rat.3.dr
ID:	dr_126
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.6821284387189
Encrypted:	false
Ssdeep:	12:XVE42+/obt28gAJa+Z2UJQc6BMlliBW10mdi1pDoxyDE5LgzmicGORPgn:Xi+/MOAhnQLMlliW10Ai1ley0L4cGCPg
Size:	698
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\575.rat
Category:	dropped
Dump:	575.rat.3.dr
ID:	dr_129
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.684858231445006
Encrypted:	false
Ssdeep:	12:XlvoT/j1TAPdeXCEqivE6wYL1hMz8IAy4zNh/dKfvq6lTW9fbKn3G2A7:XlObWuTFb1yyIX9lyR2A7
Size:	716
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\576.rat
Category:	dropped
Dump:	576.rat.3.dr
ID:	dr_132
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.666717071632614
Encrypted:	false
Ssdeep:	12:Xv9LYkSVnv7PSSYoHn3aj0uNy2YkOH1AX2ppVmOO/UXwCmY8zn0UJX97T/1YyAwE:X1c5RP15HKjjNLYkOamvVIsXvm9Vd97g
Size:	718
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\577.rat
Category:	dropped
Dump:	577.rat.3.dr
ID:	dr_135
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.70991115498731
Encrypted:	false
Ssdeep:	12:XVEkOooo3f6xYQlCBNLBBBW+1Xom1p10w3HSLycMbpJYPZWo5Ht4t676wVhws/:XdOoB6xK1W+1XFjGw3HEMbbkL6wMs/
Size:	703
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\578.rat
Category:	dropped
Dump:	578.rat.3.dr
ID:	dr_138
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.688737742822584
Encrypted:	false
Ssdeep:	12:XyYY49dHIq636Pkie0Og/3RS72VAZ/syGg9+PpPZYIBMWwh+Cgl:XyYnBIF36PkTFldmPFZYIKWNZl
Size:	711
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\579.rat
Category:	dropped
Dump:	579.rat.3.dr
ID:	dr_142
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.672159045579596
Encrypted:	false
Ssdeep:	12:XUzQE4nE+tpGg3dycFV18LhtaThotWQLTw+j/dJwiMP3cO0hoFfFdUAeAmTI:XUWl/GY18LhC2tWWTnMBP3iCkTI
Size:	708
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\580.rat
Category:	dropped
Dump:	580.rat.3.dr
ID:	dr_144
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.6947268767239425
Encrypted:	false
Ssdeep:	12:Xv9Xj1msqOnYWsonfj0MRflChD2o3C0YDoRdFWcQrgC8A1zJ6Z/CbEi7xoGtXahV:X1X0anYronfB42o3CEfWcQUCbb6Z/Cgr
Size:	724
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\581.rat
Category:	dropped
Dump:	581.rat.3.dr
ID:	dr_147
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.679221400614803
Encrypted:	false
Ssdeep:	12:Xv9rVsxO2ODiu5jCuSOgZ00E0gBjlIXFlE+8EOnuY502PmrPgIcGYWMWVygZTNhe:X1rG8+GxqY+8puYS2PA1cGhMWVRH5vG
Size:	714
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\582.rat
Category:	dropped
Dump:	582.rat.3.dr
ID:	dr_150
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.696697403022451
Encrypted:	false
Ssdeep:	12:XHI2CwRFMVUiZfa1coOP5qldcfaUUKYgzPCIXWL0hOgNyfLMj7J8LZxk+A+Nj3Kl:XHI2CwRFUUiGeqldAauDWYOtfL3xZA+Q
Size:	728
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\583.rat
Category:	dropped
Dump:	583.rat.3.dr
ID:	dr_153
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.719869424464713
Encrypted:	false
Ssdeep:	12:Xv9LCkovoUQ9P9Zun1PZEI9OX0kOjilXzyMUNPph5BQsG/wcD9y/Iyh1BJ+/8ll:X1GfQB9Qn1Pb9OWiD5UNPv5B7cD9x5E/
Size:	738
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\584.rat
Category:	dropped
Dump:	584.rat.3.dr
ID:	dr_156
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.686102036363411
Encrypted:	false
Ssdeep:	12:XIUkrCGNl39qD++3g532fEWZ81fLubSuOVEJwJax2kMhgU/ZQg//dZJa:XI/TiH42EG81KbSuOV9axS6URQg/d3a
Size:	738
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\585.rat
Category:	dropped
Dump:	585.rat.3.dr
ID:	dr_159
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.68554724487896
Encrypted:	false
Ssdeep:	12:XzkupZ4SocrNvKXPM2i1SCYJUpvOtFvm+JBNcEhurHu/2SuLWq3XadXYtFVsfDyY:Xz9pxocrNvKXPTiuJes6EhY01innYXeW
Size:	739
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\586.rat
Category:	dropped
Dump:	586.rat.3.dr
ID:	dr_162
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.695587538347959
Encrypted:	false
Ssdeep:	12:Xv9LqY9ZGyHCgQo68jiOn0SJ/2yncCxWPewZLftCV98DcBmvee8Bey8BHpOSycfM:X1OY9ZGq5Qf8jiihiyEDzcBzVBVQ8SDU
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\587.rat
Category:	dropped
Dump:	587.rat.3.dr
ID:	dr_165
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.710499043375526
Encrypted:	false
Ssdeep:	12:XhZF6uNrPPKylCGVg2StZU//Up845mIzABpXcTB/6acP:XMAxlPg/YUp845fcpaZ6acP
Size:	745
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\588.rat
Category:	dropped
Dump:	588.rat.3.dr
ID:	dr_168
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.68248200756813
Encrypted:	false
Ssdeep:	12:Xv9uyjh43XtCSrsXY+WksCVt6KG5xq042YhQ7BTc7+XY42ti680YT4TlUF+HOpt/:X1/jmFrsXrHsCVt1G5xqthQ7pc2YGJEU
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\589.rat
Category:	dropped
Dump:	589.rat.3.dr
ID:	dr_172
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.728438424812027
Encrypted:	false
Ssdeep:	12:XIvGqX0rQY8RDz3j3ffNg11IDltQwGxMbqX+K2OFC34nua7qjzpuNMf8kCDzG/n:XIv9X0rQY8RPbffq1IDIfMqXSOpua7qB
Size:	735
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\590.rat
Category:	dropped
Dump:	590.rat.3.dr
ID:	dr_174
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.70210254833098
Encrypted:	false
Ssdeep:	12:XMgSjCcSFcl6f3VHw2wZe4FcT7tIItWdzqoz9x3L2Ym7aLB3VVdt/qKnZtR:XMHjC3c0d4FA552d9xyYm7A3VdNxp
Size:	732
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\591.rat
Category:	dropped
Dump:	591.rat.3.dr
ID:	dr_177
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.715909644469863
Encrypted:	false
Ssdeep:	12:XIMmYl4/175p5fY8n+MliLcOdVwdHFZ+b2v+Bt485hCjlqHu4jBOE3NjDp44T/zn:XInYu/t5PfY8Y3YdHK2v+BqboOSthDDn
Size:	744
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\592.rat
Category:	dropped
Dump:	592.rat.3.dr
ID:	dr_181
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.697827200230793
Encrypted:	false
Ssdeep:	12:XEVX+UVuTzksm1t9U3BU+p9QcT6BKmQs+yJCJ7jD6eygN8ZA+48bmvUZk8FZizQF:XE9+UVuTutu3Brp9JTEbQ7+u/eguu8ys
Size:	734
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\593.rat
Category:	dropped
Dump:	593.rat.3.dr
ID:	dr_185
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.760374802043902
Encrypted:	false
Ssdeep:	12:XvWXKzuEjFRQSjy1fan5Geu6A3dt+HzVlCGwc3qpqoMUYpb313OFFjurcNb2rA:XeqjrQKS25du6Adt+iGwXpqoUpDooE2s
Size:	751
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\594.rat
Category:	dropped
Dump:	594.rat.3.dr
ID:	dr_189
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.733876695943081
Encrypted:	false
Ssdeep:	12:Xv9+X1CIthDv4WW6EcRHuvQaPUMi7NWJ9R4sHZJsMxCQf+2qQrSJdI5VfBq0m:X1+lCIthrpROIMi6OsH3V5f+23SJd4VC
Size:	740
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\595.rat
Category:	dropped
Dump:	595.rat.3.dr
ID:	dr_193
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.7480832924023995
Encrypted:	false
Ssdeep:	12:X4R7fQY+5dt9WQTSM2e0t/D1QQ9eQdJr1bQ7/6/4W8r+Ybex9FlIuUJuWQ0XkMa5:X4RjQYkNSMy739nlZ26wW+S9RUQKfaik
Size:	742
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\596.rat
Category:	dropped
Dump:	596.rat.3.dr
ID:	dr_197
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.686110263556316
Encrypted:	false
Ssdeep:	12:XvAlVtSNQeRktVrWENw5YLm+giKxBsphAwraWukXXQq2ioQ1NLTr+w0sXfo6PP9B:XCVJeRqaENw5wUfuTd3F25SRSpsPPEa
Size:	741
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\597.rat
Category:	dropped
Dump:	597.rat.3.dr
ID:	dr_201
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.735220739235601
Encrypted:	false
Ssdeep:	12:XPSxLpWxGy18/H/7/4HUDijg67wxrJBHsoMl0x5pzoP5EJw0DSoVInLVG+pTi3rw:XQp2T1c7rSg6kZJ9s1+oP5q2Jvi7PY
Size:	739
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\598.rat
Category:	dropped
Dump:	598.rat.3.dr
ID:	dr_205
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.658679103076978
Encrypted:	false
Ssdeep:	12:Xv/gfMC0TkAkw13l57BWkUjoc2H7vWQaD2/YMkDi8fT4ofq+M/fVJtg:XngfMVXVPWkUjmCQ+2/YlDPfTTMVg
Size:	729
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\599.rat
Category:	dropped
Dump:	599.rat.3.dr
ID:	dr_212
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.716818288165668
Encrypted:	false
Ssdeep:	12:X8GDCq5BFQuiJIlz5bXfPVM8wO5vRRYRnsR0IpCxzbSj5UG22su8MMIC//:X8GDJBFRlz5Tr13Q6gv2v29VMZCX
Size:	728
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\600.rat
Category:	dropped
Dump:	600.rat.3.dr
ID:	dr_214
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.677666026183545
Encrypted:	false
Ssdeep:	12:XjtY13gWN/TgPz2kkPbxuMkiaBdxW9Hhp+NH+4vmQzlVapZhvX8u0/MDsDKBnsEp:XjtYh5N/THkkP9DkDBrWfp6H9v7ipZ91
Size:	751
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWC\604.rat
Category:	dropped
Dump:	604.rat.3.dr
ID:	dr_217
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1418
Entropy:	7.681851004958819
Encrypted:	false
Ssdeep:	12:Xv9Lg0qpoBJuxvVon+7CjJFfz5aImHBIOhQMOXNp52sgHvQYfKlWvQTEtf8PLjXW:X1cViwxvVg+GjLb5aImHBpZ0osYyl7EZ
Size:	746
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECCO\QSW_ECCO.dat
Category:	dropped
Dump:	QSW_ECCO.dat.3.dr
ID:	dr_429
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1712
Entropy:	7.709551214947367
Encrypted:	false
Ssdeep:	12:XRzXyeZsG7VrRmJTqMHUNnRKqlrgmZBa++LPbLNNazDqkq+a6O+6U:XtXlF7JMF/HAnRKFmZBaFlQzZw+6U
Size:	667
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_04132019.sqlite
Category:	dropped
Dump:	QSW_ECC_04132019.sqlite.3.dr
ID:	dr_221
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.979699939129058
Encrypted:	false
Ssdeep:	6144:epU+qGWmFyLhNfARzBRBI9PrNHdF3ZIWO1rrZpT90Whd6M5LMYGN5RBxbG3GPx98:+U+omFyLVhdlpy
Size:	811008
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_05092020.sqlite
Category:	dropped
Dump:	QSW_ECC_05092020.sqlite.3.dr
ID:	dr_225
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.992174434520115
Encrypted:	true
Ssdeep:	98304:rdm4/kfyDKPSTE8EGr9wJH2DUw4vF4/8xr1gpu/AzzosJegK7++DQ1+8S71LEdjB:rdm4/kfyDKPST7Gw4vF4/8xEu/Azzosp
Size:	4468736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_05252021.sqlite
Category:	dropped
Dump:	QSW_ECC_05252021.sqlite.3.dr
ID:	dr_229
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.9915112744392145
Encrypted:	true
Ssdeep:	49152:m+vGsStRO7TZ9TihiCO8BDiUk/woTg3cw5Ao1AQfSUMrJC:m6GP3SQ
Size:	4468736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_07092020.sqlite
Category:	dropped
Dump:	QSW_ECC_07092020.sqlite.3.dr
ID:	dr_233
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.992176418069939
Encrypted:	true
Ssdeep:	98304:GuDsbsvbEfXa/Okafl9H7Qn3eWNvYBhpZM3K/8P7A0ondP8ws75us9GPXXQRbw4Z:GuDsbsvbEfXa/+cuWNvYBhQK/8P7A0o+
Size:	4468736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_07282020.sqlite
Category:	dropped
Dump:	QSW_ECC_07282020.sqlite.3.dr
ID:	dr_237
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.9918444451353965
Encrypted:	true
Ssdeep:	98304:qkJKnAl2TuU1lFiG1LQmUyLXycqDEjeHJ//9L7LC/gOQmkfVF:qkJKnAl2TuU1lFiGZ1I/E/gTVF
Size:	4468736
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_ECC_08112018.sqlite
Category:	dropped
Dump:	QSW_ECC_08112018.sqlite.3.dr
ID:	dr_241
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.979699939129058
Encrypted:	false
Ssdeep:	6144:epU+qGWmFyLhNfARzBRBI9PrNHdF3ZIWO1rrZpT90Whd6M5LMYGN5RBxbG3GPx98:+U+omFyLVhdlpy
Size:	811008
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWECC\QSW_RTS_ECC.sqlite
Category:	dropped
Dump:	QSW_RTS_ECC.sqlite.3.dr
ID:	dr_245
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	7.96218439648415
Encrypted:	false
Ssdeep:	192:vKkHKGGAHa3ZaRdAdIlKkHKGGAHaooFC2j1gYf:9HKQHa36aCHKQHaoozga
Size:	8192
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWM2\QSW_M2.dat
Category:	dropped
Dump:	QSW_M2.dat.3.dr
ID:	dr_431
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 54288840
Entropy:	7.896945732072271
Encrypted:	false
Ssdeep:	49152:GMK/5RpphE/E5jhIFnxKcyn7pGxeS9bb2T8JD99v7JKv69S:qE/Ethan8zMvdZFKSg
Size:	2095999
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWM\QSW_QSSR_USA.dat
Category:	dropped
Dump:	QSW_QSSR_USA.dat.3.dr
ID:	dr_430
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 20371024
Entropy:	7.995430595026383
Encrypted:	true
Ssdeep:	98304:zdjpa7bFTcIM7bAo/SB0A/d/QUe53SOQaEFaqk1aFvg6z:9paV4IM7EYAYiOMFTR5hz
Size:	4702023
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Rates\QSWWO\QSW_SPWO.dat
Category:	dropped
Dump:	QSW_SPWO.dat.3.dr
ID:	dr_432
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 8261
Entropy:	7.796580847003739
Encrypted:	false
Ssdeep:	24:XR+If60YjEL4CFxJehyEyJWR6wB/oZiMEfw5XGl0r:XR+H9gxME3WEXBr
Size:	1130
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Resources\AGLCStructuredSettlements.ico
Category:	dropped
Dump:	AGLCStructuredSettlements.ico.3.dr
ID:	dr_427
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows icon resource - 17 icons, 64x64, 16 colors, 4 bits/pixel, 48x48, 16 colors, 4 bits/pixel
Entropy:	7.251643732514519
Encrypted:	false
Ssdeep:	3072:2pdCtsE9jHCMXwbRubyV/qCnvBB7pCZwTILB65Cy3Mbd1mTDosub:MdCtsE9jHCMCgbY/FvBB7EwY6t+0ojb
Size:	186497
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Resources\Error_Message_Icon.jpg
Category:	dropped
Dump:	Error_Message_Icon.jpg.3.dr
ID:	dr_428
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x600, components 3
Entropy:	7.932237172549956
Encrypted:	false
Ssdeep:	384:frbUtELVjYjmLcRj8IPnSRxoVg5pMN3yj22xQw6hItat9T5o9t0hcAgDiPQAc6kQ:X2EL662FsksyFitatpiCpYerKw6Vq
Size:	26624
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Resources\agl.ico
Category:	dropped
Dump:	agl.ico.3.dr
ID:	dr_426
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows icon resource - 15 icons, 256x256, 16 colors with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 48x48, 16 colors, 4 bits/pixel
Entropy:	6.980693972285136
Encrypted:	false
Ssdeep:	768:O8ehHpdD3mQHv5Uj0hwNwOD7QusXa0jGiUJ08yTsNxdsNxPRskIM3:Zepp4GvYasGK0qo8esvdsvPRskb3
Size:	60485
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\RestSharp.dll
Category:	dropped
Dump:	RestSharp.dll.3.dr
ID:	dr_19
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.153290072885009
Encrypted:	false
Ssdeep:	3072:bcDieefd3nF+GhIVE+mvJOUc6XM42SuYA6qIGqskUi2m7FktfLJ19D:mq9nF+GmVBmQUt2Su2jGqskF
Size:	192000
Whitelisted:	true
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\System.Data.SQLite.EF6.dll
Category:	dropped
Dump:	System.Data.SQLite.EF6.dll.3.dr
ID:	dr_22
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.791245966136652
Encrypted:	false
Ssdeep:	1536:CyUY5ArG1uD4nl6KP8c33LEAvD0UZWZ+M8rAaDOmzxOkMabge9lh0Ep:Cq5AOR6KP8cHLE49scOhNaZ9T3p
Size:	186880
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\System.Data.SQLite.Linq.dll
Category:	dropped
Dump:	System.Data.SQLite.Linq.dll.3.dr
ID:	dr_23
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.788346512389375
Encrypted:	false
Ssdeep:	1536:/yUY5ArG17z6KP8c+wcIaQAaDOWzxOk9abge9lh0EQ:/q5AO/6KP8c1fa5cOxMaZ9T3Q
Size:	186880
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\System.Data.SQLite.dll
Category:	dropped
Dump:	System.Data.SQLite.dll.3.dr
ID:	dr_24
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.012891344079906
Encrypted:	false
Ssdeep:	6144:ohyPltgBtbhGtJnUu5ICkU32S4TbFNFaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpc7:hEWoFNFaFeFOFwcGF6cmFWc0FWc8cIc4
Size:	363520
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\System.Dynamic.dll
Category:	dropped
Dump:	System.Dynamic.dll.3.dr
ID:	dr_25
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.142920508554961
Encrypted:	false
Ssdeep:	3072:9XOCqdVs55ZN9R8PGRLI2O/dVDAd36CRSyfyh3:5qdVs55ZN9RxRLJ+yK3
Size:	125384
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\System.Numerics.dll
Category:	dropped
Dump:	System.Numerics.dll.3.dr
ID:	dr_26
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.06794646954052
Encrypted:	false
Ssdeep:	3072:/0xz3hn60Zo7iEpxqP54kazI4dbpU2xQusA:/UEpIKp6usA
Size:	138936
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Uninstall AGLC Structured Settlements.lnk
Category:	dropped
Dump:	Uninstall AGLC Structured Settlements.lnk.3.dr
ID:	dr_39
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has command line arguments, Archive, ctime=Sat Dec 7 08:10:02 2019, mtime=Fri Apr 19 13:03:44 2024, atime=Sat Dec 7 08:10:02 2019, length=59904, window=hide
Entropy:	4.6706760912903205
Encrypted:	false
Ssdeep:	24:8CArJvKHbBAgYwB+s3DPVIYlHRc6wbCyfm:8CKNsbSg13DPVIYlO6s
Size:	933
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Wnl.SS.Quote.QuoteProcessor.DataTransformationLayer.dll
Category:	dropped
Dump:	Wnl.SS.Quote.QuoteProcessor.DataTransformationLayer.dll.3.dr
ID:	dr_28
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.8123476781363985
Encrypted:	false
Ssdeep:	768:YZtQAGic6AwFRBuUdxJJfBur9DTvnJQKqvR1Q3Z0/wHf66666ekL7PpmCNbYjkJJ:ticCxjd49DTfJZ3RHqV3NbSDovKT8
Size:	77312
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\Wnl.SS.Quote.QuoteProcessor.DomainLayer.dll
Category:	dropped
Dump:	Wnl.SS.Quote.QuoteProcessor.DomainLayer.dll.3.dr
ID:	dr_29
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	5.83676566097515
Encrypted:	false
Ssdeep:	1536:S/txyKbo20iHFxMbxbkLGjS0H0ZlPt5xIOR9lWlvp9AO7:MysotRZtH0bYOflWb9AO7
Size:	74752
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\itextsharp.dll
Category:	dropped
Dump:	itextsharp.dll.3.dr
ID:	dr_30
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy:	6.159816921012735
Encrypted:	false
Ssdeep:	49152:R6mfqyG5rL0Oy+tAvjAsB+7RyZD9FDkE3Pj:Rvqvt05
Size:	3485696
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\x64\SQLite.Interop.dll
Category:	dropped
Dump:	SQLite.Interop.dll.3.dr
ID:	dr_20
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.5058415246996075
Encrypted:	false
Ssdeep:	24576:AdY5CDBvUllp6aN06t47Qa435hDGIf+cil3P3zuXVpuEU7cIFUz4mBSi9cOyasvj:aY5/160bphDG61il/3zuVpuZ7cIyzct
Size:	1662464
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Users\user\AppData\Roaming\AGL\Structured Settlements\x86\SQLite.Interop.dll
Category:	dropped
Dump:	SQLite.Interop.dll0.3.dr
ID:	dr_21
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.7808711663350625
Encrypted:	false
Ssdeep:	24576:IdP6QlwJ/goyutXYxB2Y+WeRRIBbXWlOcYUIRh1yN+Sm52Z4FstrB1sPID2Hcd5s:ErCJYTLQTIpyN+osP9H0ir
Size:	1343488
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Installer\4889b3.msi
Category:	dropped
Dump:	4889b3.msi.3.dr
ID:	dr_252
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: Installation Database, Comments: Contact: Your local administrator, Keywords: Installer,MSI,Database, Subject: Structured Settlements, Author: Corebridge Financial, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2023 29, Revision Number: {2DAE1BFB-6F68-4AD8-A074-1F290D098EE1}, Last Saved Time/Date: Fri Jan 19 10:07:06 2024, Create Time/Date: Fri Jan 19 10:07:06 2024, Last Printed: Fri Jan 19 10:07:06 2024, Code page: 1252, Template: Intel;1033
Entropy:	7.983243289223872
Encrypted:	false
Ssdeep:	1572864:lxd3U0gUk2abcyG+gVjx9M1a+6RjmQkeveqdZG4kxTcDByZnXWghc:lxNkTAyZgj9kag3MZdkiDqnB
Size:	91906560
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\4889b5.msi
Category:	dropped
Dump:	4889b5.msi.3.dr
ID:	dr_41
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: Installation Database, Comments: Contact: Your local administrator, Keywords: Installer,MSI,Database, Subject: Structured Settlements, Author: Corebridge Financial, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2023 29, Revision Number: {2DAE1BFB-6F68-4AD8-A074-1F290D098EE1}, Last Saved Time/Date: Fri Jan 19 10:07:06 2024, Create Time/Date: Fri Jan 19 10:07:06 2024, Last Printed: Fri Jan 19 10:07:06 2024, Code page: 1252, Template: Intel;1033
Entropy:	7.983243289223872
Encrypted:	false
Ssdeep:	1572864:lxd3U0gUk2abcyG+gVjx9M1a+6RjmQkeveqdZG4kxTcDByZnXWghc:lxNkTAyZgj9kag3MZdkiDqnB
Size:	91906560
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Deletes files inside the Windows folder	System Summary	File Deletion

Details

File:	C:\Windows\Installer\MSI9462.tmp
Category:	dropped
Dump:	MSI9462.tmp.3.dr
ID:	dr_294
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.031439625761109
Encrypted:	false
Ssdeep:	24576:jG9VmsEPAiXx79VmsEvzGZo3l9VmsEPAiXxt9VmsEPAiXxVFSo:W9MAW9+6eD9MAa9MAQ
Size:	2026652
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\SourceHash{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}
Category:	dropped
Dump:	SourceHash{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}.3.dr
ID:	dr_55
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.1692829762295167
Encrypted:	false
Ssdeep:	12:JSbX72FjO4iAGiLIlHVRp9h/7777777777777777777777777vDHFYfggLlJOWtr:JyQI5ZBgH2F
Size:	20480
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\inprogressinstallinfo.ipi
Category:	dropped
Dump:	inprogressinstallinfo.ipi.3.dr
ID:	dr_59
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	2.2438554975239176
Encrypted:	false
Ssdeep:	192:m1hzjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:mrzO6Y
Size:	28672
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}\ARPPRODUCTICON.exe
Category:	dropped
Dump:	ARPPRODUCTICON.exe.3.dr
ID:	dr_31
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	5.534755755479418
Encrypted:	false
Ssdeep:	6144:fbhDy1Lfy8PXjbNFnWRtaCdJZaJPdVv+o3iGE1uD9DeFbzA54s8xRXO:NDy1m8PXjbPnQEVmsE1uD9aAiXxRXO
Size:	477184
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Drops PE files	Persistence and Installation Behavior
Drops PE files to the windows directory (C:\Windows)	Persistence and Installation Behavior	Masquerading
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Installer\{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}\ApplicationShortcu_5528DECE9BBB4B31B1CE01660AA713F5.exe
Category:	dropped
Dump:	ApplicationShortcu_5528DECE9BBB4B31B1CE01660AA713F5.exe.3.dr
ID:	dr_33
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	5.534755755479418
Encrypted:	false
Ssdeep:	6144:fbhDy1Lfy8PXjbNFnWRtaCdJZaJPdVv+o3iGE1uD9DeFbzA54s8xRXO:NDy1m8PXjbPnQEVmsE1uD9aAiXxRXO
Size:	477184
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Drops PE files	Persistence and Installation Behavior
Drops PE files to the windows directory (C:\Windows)	Persistence and Installation Behavior	Masquerading
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Installer\{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}\DesktopShortcut_9CC916EFDE5E4C0BBC65AF72911A3204.exe
Category:	dropped
Dump:	DesktopShortcut_9CC916EFDE5E4C0BBC65AF72911A3204.exe.3.dr
ID:	dr_34
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	5.534755755479418
Encrypted:	false
Ssdeep:	6144:fbhDy1Lfy8PXjbNFnWRtaCdJZaJPdVv+o3iGE1uD9DeFbzA54s8xRXO:NDy1m8PXjbPnQEVmsE1uD9aAiXxRXO
Size:	477184
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Drops PE files	Persistence and Installation Behavior
Drops PE files to the windows directory (C:\Windows)	Persistence and Installation Behavior	Masquerading
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Installer\{7A470A9C-C6D5-411A-9E66-42C3D1BCC10D}\_1B086178_A74C_45CD_B17B_C24F85AAF899
Category:	dropped
Dump:	_1B086178_A74C_45CD_B17B_C24F85AAF899.3.dr
ID:	dr_32
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy:	7.029363885888886
Encrypted:	false
Ssdeep:	12288:ZDy1m8PXjbPnQEVmsE1uD9CtzPMFvIWY6o0o5O:u9VmsEvzGZo3
Size:	489472
Whitelisted:	false
Reputation:	timeout

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Drops PE files	Persistence and Installation Behavior
Drops PE files to the windows directory (C:\Windows)	Persistence and Installation Behavior	Masquerading
Drops files with a non-matching file extension (content does not match file extension)	Persistence and Installation Behavior	Masquerading
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
Category:	dropped
Dump:	ngen.log.3.dr
ID:	dr_293
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Entropy:	5.375168444162905
Encrypted:	false
Ssdeep:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauM:zTtbmkExhMJCIpErZ
Size:	432221
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF16A137F7FF8C93B8.TMP
Category:	dropped
Dump:	~DF16A137F7FF8C93B8.TMP.3.dr
ID:	dr_45
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.5864914034446365
Encrypted:	false
Ssdeep:	192:BvS9fsgjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:BveUgO6Y
Size:	49152
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF258D03A731DB941A.TMP
Category:	dropped
Dump:	~DF258D03A731DB941A.TMP.3.dr
ID:	dr_67
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Ssdeep:	3::
Size:	512
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF3515BCE99E77034E.TMP
Category:	dropped
Dump:	~DF3515BCE99E77034E.TMP.3.dr
ID:	dr_295
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.5864914034446365
Encrypted:	false
Ssdeep:	192:BvS9fsgjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:BveUgO6Y
Size:	49152
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF36801CD7254F4439.TMP
Category:	dropped
Dump:	~DF36801CD7254F4439.TMP.3.dr
ID:	dr_65
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	2.2438554975239176
Encrypted:	false
Ssdeep:	192:m1hzjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:mrzO6Y
Size:	28672
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF4BE9CB6273E93E7F.TMP
Category:	dropped
Dump:	~DF4BE9CB6273E93E7F.TMP.3.dr
ID:	dr_57
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.5890341504728168
Encrypted:	false
Ssdeep:	192:8kDqZXaE19DkdIV7QjbmDAfl5dwSxaE19DkdIV7QjbmDAflAtRBwP:GYDO
Size:	73728
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF555AEFA8D4921D5C.TMP
Category:	dropped
Dump:	~DF555AEFA8D4921D5C.TMP.3.dr
ID:	dr_61
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	2.2438554975239176
Encrypted:	false
Ssdeep:	192:m1hzjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:mrzO6Y
Size:	28672
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DF83079938CF65CAF9.TMP
Category:	dropped
Dump:	~DF83079938CF65CAF9.TMP.3.dr
ID:	dr_51
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Ssdeep:	3::
Size:	512
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DFB5B5EA49590CA550.TMP
Category:	dropped
Dump:	~DFB5B5EA49590CA550.TMP.3.dr
ID:	dr_53
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.07626004967499114
Encrypted:	false
Ssdeep:	6:2/9LG7iVCnLG7iVrKOzPLHKOz0fgg2q5PJHkQVky6lWt/:2F0i8n0itFzDHFYfggLlJOWt/
Size:	32768
Whitelisted:	false
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DFCCFE7D0F352BEDC6.TMP
Category:	dropped
Dump:	~DFCCFE7D0F352BEDC6.TMP.3.dr
ID:	dr_296
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Ssdeep:	3::
Size:	512
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DFD28DF2259181DCBD.TMP
Category:	dropped
Dump:	~DFD28DF2259181DCBD.TMP.3.dr
ID:	dr_47
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Ssdeep:	3::
Size:	512
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DFEE25EF6D638E8F5C.TMP
Category:	dropped
Dump:	~DFEE25EF6D638E8F5C.TMP.3.dr
ID:	dr_63
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Ssdeep:	3::
Size:	512
Whitelisted:	true
Reputation:	timeout

Details

File:	C:\Windows\Temp\~DFFBC6055796E92936.TMP
Category:	dropped
Dump:	~DFFBC6055796E92936.TMP.3.dr
ID:	dr_49
Target ID:	3
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.5864914034446365
Encrypted:	false
Ssdeep:	192:BvS9fsgjw9KSxaE19DkdIV7QjbmDAflAtVqZXaE19DkdIV7QjbmDAfl5dpY:BveUgO6Y
Size:	49152
Whitelisted:	false
Reputation:	timeout

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
AGLCStructuredSettlementsInstaller.exe

Files

Processes

URLs

Registry

Memdumps

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC ReportAGLCStructuredSettlementsInstaller.exe

Files

Processes

URLs

Registry

Memdumps

IOC Report
AGLCStructuredSettlementsInstaller.exe