Extracted

• • Target

    CrystalDecisions.Shared.dll

  • Size

    852KB

  • MD5

    f419312956d2b6e6ade22e0c497d51cb

  • SHA1

    4e074c21bbf328fa15f548d8a18a6540abbc5586

  • SHA256

    ad4a2b8fb64dd0f398ecc42ad05ae07400e9d3a0fb211c45ee1e3efd87c72947

  • SHA512

    da1eb3629327f85e6ffce57c714fb55020e2602c5419d12e3baf2b226ada8e72d7a95e5a079d20573af0ef3f8f114b28e0b71442dc915b6ede6918beb13c3ecc

  • SSDEEP

    24576:TISsu9W+nlJBgugwJ3c94yRj0PHOe8gAIw:TI+taj0PHpw

  Score

  1^/10
  behavioral1behavioral2

• • Target

    Templates/Schemas/SchemaDoctoXML/DTE_v10.xsd

  • Size

    227KB

  • MD5

    99698c6701e170558d641ce32c8068db

  • SHA1

    b375c216832e1746dfd4bb29b2371a791898bbc6

  • SHA256

    7ce52bf95354489f52ce48bebde9c70f3e16a575e2524caa13699dbaf3f5093e

  • SHA512

    1f746c053881ef2e58fc3f066d49c8c5e29bf1f76f4771cfb7068c76c2e9c801a337a924a7240e1cbbbc42fe92a72aca4d96486a7980640cea68ec3a12af7bd3

  • SSDEEP

    3072:3LuRMZhM4KVlH04tytiOoHr5oC8n1uq5oVmThObx49Vp7THmQGGqSCPuAJcbs89/:j

  Score

  1^/10
  behavioral3behavioral4

• • Target

    Templates/Schemas/SchemaDoctoXML/SchemaDoctoXML.xsd

  • Size

    4KB

  • MD5

    44aa46d229dd7403617b2fe00d9a7e40

  • SHA1

    5de95b2d1d263e0e3c14491c89bdf196ea4077d3

  • SHA256

    33ea8dd38c895c359dddbcd21feb5acf8a4717f7f67524a6b0dd9a83d76920eb

  • SHA512

    953857d6899c2f277d77372b9e19917aac8791045dc9e8a11b4783dd166f5b5bdc715c3fceafd31965ea392e7eb611bb2912344af6d22791f0d1add2078d24ef

  • SSDEEP

    96:TC/lnlgWcLQtG32Cod18V1FZb1Mzx1DF1mrvm4S73SORuEpR3jPadsIRchMdZ:EnKN0c32nd18V1FZb1Sx1DF1mru4SzSr

  Score

  1^/10
  behavioral5behavioral6

• • Target

    Templates/Schemas/SchemaDoctoXML/SiiTypes_v10.xsd

  • Size

    30KB

  • MD5

    dc45c51a2e3256a437e727cb0d7b4735

  • SHA1

    f65a9958aae3a87938d1da0857144410435dabd6

  • SHA256

    d10038241464c73d759949ec6f04f52c32c7a478e9e294bf91dc867b06d9fdee

  • SHA512

    451353d5fd0b9f62ab52c33bb6f22fa9659c4f354cfdcd68b6a05c5137a50dae062f250a85608dc529b9c449590a0ac2b24ab4812589263a0914a0f4d3a551fd

  • SSDEEP

    768:oBlcB/pB/wLOEMMsjeyD1AaZGVJ/EP171iPyr4KFTRUhlU1Hpx3:oBeBxBoLOEMMsjxxAaZGVJsP17cPyr4Y

  Score

  1^/10
  behavioral7behavioral8

• • Target

    Templates/Schemas/SchemaDoctoXML/xmldsignature_v10.xsd

  • Size

    6KB

  • MD5

    8b83aaae477a57d829b075230237102c

  • SHA1

    b6daeb29f298258b405317300754d2ac64ecba33

  • SHA256

    427e3225cd379ae92bae464b892dbf964665af92d453ac61774cffab38b95edb

  • SHA512

    51ebca226a8d85f0226f2c9782e245810e3a3e61c01eb5d20bc0e7baee203247405bd296a34f8048876be0e343a279ed90e0656cd940bd269c97943111ac1542

  • SSDEEP

    192:jBjpgkBmsT2anwzs+umSL511v1biu8sJoo3F3L51wx3Y3d3b3L51uOsYIiu4sJic:RpgWmsaanwzs+umSL511v1biu8sJoo30

  Score

  1^/10
  behavioral10behavioral9

• • Target

    Templates/TemplateCorreoCliente.htm

  • Size

    2KB

  • MD5

    ce4c1f3ba9e690c4119e8ed39aa8eb78

  • SHA1

    dc2da00c92b51431c01c5e598de4665c9989e856

  • SHA256

    e17621dc67919e53a0d1be6a03fa0d97f01c8932f8d8912d556327e620310432

  • SHA512

    daf95e6329b060fe230096fc7a594cf0a13801e2dcf9869affa5530a2d03bf6c0dd2d9340be5c312b82d41dad48057f86811a23b23fba93b0dc9a478986ac4ef

  Score

  1^/10
  behavioral11behavioral12

• • Target

    TradingView Сomplete_beta v3.15.exe

  • Size

    781.5MB

  • MD5

    4f16f4ed9bb364c3e4150335cc4527ef

  • SHA1

    26ae81e8b34e09598b6733e6e2679fc0205cb57a

  • SHA256

    5237e2a5ae90d66c260eb4ec8f3118d627d60a2ea0768a476ba1a9d85ede5078

  • SHA512

    db0f29cd3ee586d333d7c04a275b67e38f72f81a9501bdb57358cf857fbf8345dfdc212b7548ba8af358de2b73df93f289215f99c0265855123bbef4cefde6c3

  • SSDEEP

    24576:emCddUT2rPrci84yp3w1SmnWv6Ecl+c1JpQ9Q5Y:ebdiT2TrL8rxAS+Wvsl7r4Q5Y

  Score

  10^/10

  vidar74add1c619f652e60c7692dbc0048f64stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Suspicious use of SetThreadContext

  behavioral13behavioral14