61860909aa55898fa5adac8b555746502d1bffa14c532c21dc27ca300a7435f2

Analysis

user interaction
yes
max time kernel
22s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 03:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Redragon K589RGB.exe
Size 13.1MB
Sample260415-d78e5ad19j
SHA256 61860909aa55898fa5adac8b555746502d1bffa14c532c21dc27ca300a7435f2
MD5 1c69ef193b794ea3454ab16d35d2b304
SHA1 9f38b66c8d86ffb369e68fa171814ecca982e8b6
SHA512 81258d2480f1b725eaa2100a6048d14a0073318310759661630e3534124b400610155ac3015a2f9b4147b3ea68c1ebd15ae80165870ab04dd22ee1fec0abc67b
SSDEEP 196608:/+sRSsqDh9ID55Ene8MzQ5DcoiDrDzf7cclv8fksjfvf8kNyN+KN2zFg/6PDuyKj:/9IsohKDFQ5D0P3f7WfksrMpQFgH
TLSH
T19BD612E1BA9BC06FE3E64930B97736754AB1FF92D9E1891B33847D18183025A8523737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence ransomware

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4320	ISBEW64.exe
3364	Redragon K589RGB.exe

Loads dropped DLL 8 IoCs

pid	Process
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe
4952	Redragon K589RGB.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Launch 0 FwCustom = "C:\\Program Files (x86)\\Redragon K589RGB\\Redragon K589RGB.exe /Start"	Redragon K589RGB.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\layout.bin	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\InstallShield Installation Information	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\julo19ec.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\setu18d2.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\setup.ini	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\User199e.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\sjsu19ad.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt919cc.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\macr1a2a.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\rightover.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\user2up.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\data18c3.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\10.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\sjsd19ad.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\sjsu19ad.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\key_1a0b.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\lv.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\user1c7c.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Redr1921.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\User199e.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt1.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt7.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\key_over.jpg	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\language.ini	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\lanover.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\macro_mask.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\14198e.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt6.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt8.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\main_down.jpg	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\peizhi.ini	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\user1up.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\_Setup.dll	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\UserDengColor_3.userd	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\sjso19ad.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\macro_over.jpg	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\unin197e.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt10.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\updown.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\5198198e.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\key_19ec.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\lang1a0b.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\main_disable.jpg	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\main_mask.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\sjsover.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\0.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\User199f.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\main_normal.jpg	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\sjsup.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\user1over.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\setu18e2.rra	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\0197e.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\Color3.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\deng19ad.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\huang.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\jdt5.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\key_normal.jpg	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\main.psd	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Lang0409.ini	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\11.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\dengover.bmp	Redragon K589RGB.exe
File created	C:\Program Files (x86)\Redragon K589RGB\Skins\julo19cc.rra	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\Redragon K589RGB\Skins\user2over.bmp	Redragon K589RGB.exe
File opened for modification	C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\data1.hdr	Redragon K589RGB.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Redragon K589RGB.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Redragon K589RGB.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeBackupPrivilege	2184	vssvc.exe
Token: SeRestorePrivilege	2184	vssvc.exe
Token: SeAuditPrivilege	2184	vssvc.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3364	Redragon K589RGB.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3364	Redragon K589RGB.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3364	Redragon K589RGB.exe
3364	Redragon K589RGB.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 4320	4952	Redragon K589RGB.exe	79
PID 4952 wrote to memory of 3364	4952	Redragon K589RGB.exe	88

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Redragon K589RGB.exe
"C:\Users\Admin\AppData\Local\Temp\Redragon K589RGB.exe"
1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\ISBEW64.exe
  C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{828EEAAD-17E9-45AC-B008-DB8C55D08CBC}
  2⤵
  - Executes dropped EXE
  PID:4320
- C:\Program Files (x86)\Redragon K589RGB\Redragon K589RGB.exe
  "C:\Program Files (x86)\Redragon K589RGB\Redragon K589RGB.exe" /Start
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:3364

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:2184

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:3360

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data1.cab

Path C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\data1.cab
Size 588KB
SHA256 0f5000cf27c9b932eb3acd83dd97495a942314612b2cb7f7bd9befd54790ceb5
MD5 ae837473cd631b96d5f0a5efa75b66f2
SHA1 8da873e78229152ed62605e91d782733a01ac81b
SHA512 ba71d927434d42e939f3f4e8757953931d4421ae624f11577ce1bb11f3d24c5dc97aa97dcaa0cbc9f84adc12caa81d76821689d453ffcf65341bc5bffb7b5abb
SSDEEP 12288:goGJh32PAMsMDRbsbaVzHmmt1WHQxHis41ujxw1uVMSBiGZpKnzAxz:H2h3aAZMDRbsbAzGqYwxHipZ1upBiGq0
TLSH
T1DFD423DAFD8001B4E90B5534E5F2E85CBBB53B240BEE5E1ADE6E225A51E901409F813F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data18c3.rra

Path C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\data18c3.rra
Size 22KB
SHA256 68251144150d2ad1faa1c41a2a30466feb9b73be30350467dc1b9c282f5180ac
MD5 473008e9ff8e2210d86ee3e58461d440
SHA1 7d4964df166a62a646ab0400210daa9ad801d1cc
SHA512 60700033dc94106dbc9e4e77ea40929c9bed152ee656e6dd0e9d270f065aab27218a375508c34e299bab472c0dfbd9b5fdbfed8b2d4682587c21a18281e6f918
SSDEEP 192:4nXRpLwxDGbhtQUhhFffEyXfXzciuprMCONSTBoP9qC9WXQJsNumMZ6JVdddVfHZ:wRyxDK1LyIaFhCAAqEmMZQfHFf
TLSH
T1DAA25090F911DA2FD545E73921CBC77E76FAB2C093738B075A4884B83B633512C593AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

layout.bin

Path C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\layout.bin
Size 455B
SHA256 64e6ccfc96acdfc09c4570ab8d5161acd10866ce5cf69fd445419f3e09398c20
MD5 ad1c1f4fd08c4f10557a13d7c0bf9ca5
SHA1 7a9804b251c6583094f1df49cb2f1f10fb160563
SHA512 cd5ac8762d87132c9e549bd61870fdf381bab61b007a1cdffd202748d272746483345ef4db98572b5af0f91f7b79a77ed6e082962ff1955cf93f248105219f7d
TLSH
T16FF0122A1B675888F061FEBC093E06284EF170A20022C686234260472C3E708EF98283
MD5 SHA1 SHA512 TLSH

Submit Download

setu18d2.rra

Path C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\setu18d2.rra
Size 384KB
SHA256 350e4cfc8a692fc8382571d64ef00f6f4d4f997b85bb687e67ea222cdb2556ac
MD5 8d699c26857440661fad1aed839ffc79
SHA1 7c38f49f874da346a4a3e4f3850d7cc287d83576
SHA512 4053a6cefe15cd29dfc4ece4d5521e1473dfc8af6275dfb7cca8863722b3807fc3ee7cdba33f0ba6ef417b3530b2cabe8d74e6235dab0554f00201305b465b9c
SSDEEP 6144:5GWK9s2n1sDEo7SUknwoD6AaeICSj7kEoed0PFn0wccccccccX:59ysTOnKt7oUy
TLSH
T15C849D02FB99E0B2D74348B09B6F5BB6AAB89DE28D11444B77D4BD1C7830592C537B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.ini

Path C:\Program Files (x86)\InstallShield Installation Information\{39C48DAF-69EF-4C2D-A448-59270979595F}\setup.ini
Size 596B
SHA256 7ae2d45b6ead676a7efaeb9328b32140d47f177577947d0b2931352561c7f5c7
MD5 9f67766f4075402e67c105cbe9f02d62
SHA1 5f9dd1b61096a3215ed9d4748b30a7d488ca2d6a
SHA512 d351bf1540f8ed63cea27fbaaad583b07f441d3d02e31d9b01d1824cfd3882c1cd42da5dab8ad5b83377ff198bd72e0546de08b787c9f7df6f9d0e152c366cff
TLSH
T12FF0E1EBAA2D143E318697F53970029816D12AAC1D85C3CCC3C0992B6FD2E45F4A4113
MD5 SHA1 SHA512 TLSH

Submit Download

Lang0409.ini

Path C:\Program Files (x86)\Redragon K589RGB\Lang0409.ini
Size 20KB
SHA256 8ff5450345a3ee8907abc89a6737b2058addf64586366c457f761d09e3f38259
MD5 3f6748766f414d2b2e211c183c94af9e
SHA1 dc23782bd0eff2062b376413f9e467b86aecdd99
SHA512 1a54b0ca8b019f9ac99360bdee7a98c9912f5a75c491bd4b1ed8b24805269d97446529239b8f94a2b1ee7866877a6c084bf9e9e7c37f347c001e01e7d23354b1
SSDEEP 384:/oYoDDYWIAm4GZ6y3/mZcOMcMgYY+4cTTJr6xKu9FltVmDg+Xuom1KHazMnSkDC4:/oYoDDYWIAm4G5PmZcOMcMgYY+4cTTJX
TLSH
T1E792720232FD2099B2727AD29FE5C9348B2B78DD953B926F3290839B57D0D5249137B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Redragon K589RGB.exe

Path C:\Program Files (x86)\Redragon K589RGB\Redragon K589RGB.exe
Size 3.7MB
SHA256 d634e919716bbaa03e049414efbfae29e82c9242a5bc6d63b36527f7abb3e9e0
MD5 1507a4823fd74f6ae4ea005502c8c6a8
SHA1 3e92d8b0e9548cb2aaba7dbfd56781cd0b548cd3
SHA512 2bccc5699b672e42227324f9dc68d007af18345379c2a1cfcec068d1811e68a78b478a7f4fa5de4610756e87c04fbe8288aafe87ef91d9ecd4583bf2dd1cd010
SSDEEP 98304:7f12l9xkQJFqPRq9x58UGV4MZYEz4mfY8pOuQfHPS0bx+gjd4HF/Hk+eaFF4kbTa:K7kSXMhYVjvbV+gjd0/Hk+eaFF4kXa
TLSH
T1D80628F17A83C83FD3A22171AA5BB2695179DB61CAF50E8731503E392E340C7492B57B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0197e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\0197e.rra
Size 13KB
SHA256 f3210b3c632e1053c740d2fa1a3fcd14c121af6670ce4e5d58e2545cd271e6b3
MD5 c9ccb030793ba99178cb84f65faceba1
SHA1 5b98645ea8776ca0ffcea02c4adceb2a983e91ae
SHA512 d2cffcc06093d2c0329064277d70e03810e230c065cb70b0b2c89f17eef994fa615c2731ec487bc8b5d955783fae048a049c5b0f479e1ac75e62b3f7a06c4fde
SSDEEP 384:jYN1Tnb2uuor4I3y4963/m/mwDE9O9gIlF/Z95od/M/7WZ:Onb2uuoEI3Rs/m/Hy5yF/92/M/iZ
TLSH
T1DB52604AAF82BB6A016CE4551A775F8D24C2C70D96943054F738A81BC3CEECD6CDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1197e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\1197e.rra
Size 13KB
SHA256 8251cf6f84d06d502b13a38b9446a7ba83d3d178f80e61e91fad0aa0572f9f02
MD5 2dfc7102b5a38058c55d305d7b4a7b32
SHA1 5287dfd3d77409596a9bf10b1a0d686ab598825e
SHA512 a146073961e01ef47d0fe8f8c6ec3b0143bf6807b38bf0342a317bb2df1dd3e7b37e3b2e7db46da1b2fd5fd2fc962e61f72cf212cc8d2cdc504f006f368949c5
SSDEEP 384:jYN1Tn2b+c0FeNvJl/8/mwDE9O9gIlF/Z95od/M/7WZ:On2b+c0FeRb/8/Hy5yF/92/M/iZ
TLSH
T19752524AAF82BB6A016CE4555A775F8D24C2C70C96903055F738A81BC3CEECD6CDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12198e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\12198e.rra
Size 13KB
SHA256 d9d2e4996ff588498386a352e1278a1232469cf084d4fb24a5ad8ce07f06df66
MD5 f7fcd36f2e0a7b1e8089ede0cf2238f4
SHA1 c51fc6f21e669589a1efdfe3689652f5ff68e26b
SHA512 1412a0d14718f3e30f0518773dd159e4cf061e55c12943b98ca39c44c98d3d4f6e34afbac1e91b85547647d322474f1781befcb9a8095731413e256c084ef7ea
SSDEEP 384:jYN1TnjyNUmP6vsl/m/UwDE9O9gIlF/Z95od/M/7WZ:OnjyNUAEg/m/ly5yF/92/M/iZ
TLSH
T1E752514AAF82BF6A016CE4551A775F8D24C2C70C96907055F738A81BC3CAECD6CDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13198e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\13198e.rra
Size 13KB
SHA256 49ddeb1b2ee9ff27b25ba9aaaaa846b5d663cc27169ff4e32c3ea49b76a52b3b
MD5 8f774ca7cc48af0a826c517e92d8f6fb
SHA1 ab835c93034b5de67d777cf79ebd420497b5c32f
SHA512 42f7f168634961f3119cc0fd556c084b3caefe6d0f817bec59e62d73f3a0b4e7ff9deecee435c45ee36a0ccfeb7fae221191242c5917dce71c558821a09381c0
SSDEEP 384:jYN1TnryJWgiY8IK4Ll/m/sDE9O9gIlF/Z95od/M/7WZ:OnryJWgi/N4R/m/wy5yF/92/M/iZ
TLSH
T1F452634AAF82BF6A016CE4551A775F8D24C2C70D96903055F738A81BC38EECD6DDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14198e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\14198e.rra
Size 13KB
SHA256 7dc3b4c90cfdb73300d25ef0855694e91cfacaecd351e7440862d843463033e9
MD5 3ee9d13ed155c6e235bf8159b658a3ff
SHA1 c24d6a90aae57a269d12c85ffbdc0bd087df4023
SHA512 e6a474874e3c426c5f797fa6a62ddff077503116ff91a99d19364c66b2478eb5c2c6b7b60e71c3ab197df25a44acb29a76e765553bbc6f2434ce499818a42fc7
SSDEEP 384:jYN1Tn4/Fyr78MhmUNsl/m/mpDE9O9gIlF/Z95od/M/7WZ:On4/Fyr78OhNg/m/qy5yF/92/M/iZ
TLSH
T1E252624AAF82BF6A016CE4555A775F8D24C2C70C96907055F738A81BC38AECD6CDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15198e.rra

Path C:\Program Files (x86)\Redragon K589RGB\Skins\15198e.rra
Size 13KB
SHA256 0b923b9ec8e431bfad9caa085a637a81a67a788016e8889354b1804b2cdf7946
MD5 c1bb401e99c46669eea906bd6a9932e9
SHA1 83e31e35d8803914c221760521ec7da16fe74bc8
SHA512 775cd857a81310c30e4e55cfdc6bae49f19aef29279abcdb1f4d82ba6868dbf13ad91b8731d07bb4261870a0961b0ae100550c2e57b710b00a420d21d7f8b0a6
SSDEEP 384:jYN1L/cywuwZb6niKW/m/miTE9O91IEF/E957k/M/7Wi:u/cywuuWiKW/m/lyQrF/C4/M/Ki
TLSH
T13952514AAF82BF6A016CE4555A775F8C24C2C70D96907055F738A81BC3CAECD6CDBE06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Main.ini

Path C:\Program Files (x86)\Redragon K589RGB\Skins\Main.ini
Size 13KB
SHA256 513b00d760c33a8fc5be2eeb6cb4f0fd8234cf984fcc1a367c62197c70100c0d
MD5 fcfd74122e365076282a7df015cc120f
SHA1 4f6ecef588e09412678d7f9631de9d2c7f418546
SHA512 f0267f51ab62ba6ff37ef8835a7a121f7fc6358e941e14285fb1c136acfec0e44afbac1c8956b913f1f800a4ef7793ce9c7dbe410bddb9e270075404ee3aeda4
SSDEEP 192:weH8XSGFzYbDcTBnNPyXIy5ZaOlsfexkfLObBbJbaYbn6j686JlL6L6c6T6A6L6+:we4NuaOlWp4JIgGo8OoN1sSqniRB
TLSH
T1B752E22FDEA8201FA1F3D189EAC64D36932B595A153EDD1614F58F1E17D2802B4433AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserDengColor_0.userd

Path C:\Program Files (x86)\Redragon K589RGB\Skins\UserDengColor_0.userd
Size 24KB
SHA256 d87539339ff3f0395fbe8b4bf95d216ec09dcea29bfc094b3c1709263c01cc95
MD5 15291ba749311a0b02277763efe7ff1f
SHA1 54237a1a8d1a1f72fb1aa0a02e74687d303f0cf7
SHA512 40914745f57dc1c976d4ed1af6054c49138611f51fa3f87f909e2f13dd17b927a8375d273839121dbd8a12a9de4baf8458196c8bc77d088fe01357d856cb1ea3
SSDEEP 192:5wWUy7+LqxqmU8JPUH03Uq03Ux03UU03UT03UW03U3:KWULzmFP93Y3z3m3h3M3i
TLSH
T105B29AB8EBB113FC2065A6860A5F15D4349CDA0758C2488E31B97E98BF7ED799F0B074
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dengdown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\dengdown.bmp
Size 672B
SHA256 c6dc434a7d723939187636df03b864d10dac8021833a21752a1da49ca4caae07
MD5 dffe99c4d5bc247f9bdbaf42c562e0b4
SHA1 46bb93725f64f35e4710c9ebe13f13f71ea4d2c2
SHA512 34a7dd757e13daf7ff453da6d69ff86fe583f64407eb128419eb0721cdfc7b8a06ebe5ef81a6fd35b0b18476bc78edfb7258fe350bc545b7e901e7ff602288e4
TLSH
T18C0199C9D1BAC7F5A263F0B954CED4E2F118D1297A3E5D71420AE1F7210297285B4A64
MD5 SHA1 SHA512 TLSH

Submit Download

dengover.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\dengover.bmp
Size 672B
SHA256 89fdc6cc3a8c73ff2399fbba6076e73c6addcd80cda32ea5a70eb39f2f59898b
MD5 a2446a0aa6f9eb0186a8c31cbff6a852
SHA1 988cc4a5e2e6b48a4e1bd9579a18f8c3484405d6
SHA512 74ddbb215a3cbdee5c4c3c4a864890dd0f24b1a90da3bc7d817e0071ff2b3bca63eae2e5ca5b8fb6dc0baf497fdc8ccead11b092b27570e9bf1e0200fb5dca82
TLSH
T1C20192113042C402DC29423CCCCCC2F81321EDD2CC100247B083BF4F3430608B100384
MD5 SHA1 SHA512 TLSH

Submit Download

dengup.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\dengup.bmp
Size 840B
SHA256 f97a96dd435e03a7ce59de4af391185312b0238a7fa8da381510a547095413d9
MD5 a1ade0dbab7f7be4271972ff64cf3752
SHA1 59574ec409ddb6c528ee510857ec3a975d98c822
SHA512 1a29bcbd8bec59c2e2e7be0e1d66e70a3369cff625c53e6ab5e6e9e5e3de7efe1e3053ae804e021ee2996e8230457d7983b0908e8d8b2f36ac1f7b4c795676d3
TLSH
T15F010C00E088FE50A96510F495DFE4BBE87DD574A62AEC7D210F60E61243F858461E54
MD5 SHA1 SHA512 TLSH

Submit Download

downdown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\downdown.bmp
Size 1KB
SHA256 f149c43b9ff97d4f7416f2d5c6b60cf4cf920fe58a51753541cc78b702a86134
MD5 d19e023a5b7a4589843defde78774928
SHA1 e367aee0fa458ac35ad0286cb34eb26b43a9fb33
SHA512 2f8a14adc9797e47f748c61c0b898526799896d834aaa34b3f83279036db1234b9156cb98045a7f0f5c550e513d6279bec40c83f9b360c59209a15d571006b3c
TLSH
T1C911FE08BE20D12CE6550AFFAE89F7EC278D5FE1CD01244B3416728E3BB0D8900F658A
MD5 SHA1 SHA512 TLSH

Submit Download

downup.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\downup.bmp
Size 1KB
SHA256 2dbbc939824543765478f312a025b5c2a928f9ed353912fa517363b83239eb6b
MD5 99311c4813a0eb978d6859e00e6efb4d
SHA1 ab25666a9350c234ef9f90174ab939aee5128aba
SHA512 32dddc038a91b0e651926f6d51428324a29a266be6a4403640334ce2718cb7deb983e2c60ad0d5bb8b347adc7c42722bf61fea0f7217200e10988df09fec6311
TLSH
T15E11C918F948C22DE6A482B1CD04FDFC1209BD41CC016407B5D53F9F34B301D48083D6
MD5 SHA1 SHA512 TLSH

Submit Download

hong.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\hong.bmp
Size 13KB
SHA256 faf7805804ec989387f2660862eb5b10c6dc4cb0437e6bf6b5a638db82976fc3
MD5 e0693503b4d1a2351ee8c50ca181538f
SHA1 c684c2f435dec4c4e0781729621980fcb60e53dc
SHA512 8c4cf6bc42fdfc057c2983ac8de02ee5dadf75f911b1db8e23a8ca04973a8898c4047be8ea34f366337e212f3893478a5e8b57ed02385d3938d9467e4c3397d4
SSDEEP 384:nxHOX/D4kPOi5WiXyMIiw5z6tWvW7+E4YW:xHOX/D4yOiTXyNiw5zdy+E4X
TLSH
T1A452B676E388EB1355B10A8C95337A371AAACD49960EC953F9DFCC6030CF9AE6058748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hongok.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\hongok.bmp
Size 13KB
SHA256 c4c522aa0720c6c258e83e380d4386a3cd654088444904707a427ee42b083f06
MD5 36634b2e0bd66cf9c64cc8764e30cae9
SHA1 3a68b0a4cc802c2a44a8d0f566d9b19e7d489c88
SHA512 08fa5dc8464423d022b7d208818a4acf7611c52601e112737faa86245c1bef32ccc017deaecaf186ccdc4f0819f196f0078de3b0fc0a0cec2479af2944633790
SSDEEP 384:njcOBsk4khOiEWHUfMtOzi46JWZUXu+uYW:jcOBsk4YOP+UfYOzi4vUXu+uX
TLSH
T14352B976E34CEA0359B0198D913369372BA7DD4D964EC943F9DACD9130CFA7AB088784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

huang.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\huang.bmp
Size 13KB
SHA256 a234ef838fdbcfa7c02d299fbf47eabbf817bcedbdea2b7cf4367eda66eec2c6
MD5 3d358c20d9db5007c2f2ea79a0bc99b8
SHA1 36035d09dd796ab43efc4ad6e5520f2edecdb7d3
SHA512 6840a703f0e0fa77bd874c566b5805f7c6fd459147f33c58687a07d09789d84b2a1e2f7dd2f3b5e4e59b766a43312d0c3e3b39c7b65443512ca77f7979194f4c
SSDEEP 192:nM3KtFEKrM1A6zoUysK9AeZ1RPgdlzndQrqy:nM3Q+KrN60UysK9dvPgXdQrqy
TLSH
T16352875675C490289283703FA0C6379AA3A3C4296827E1E3172DAD23BF5710FDEE71E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

huangok.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\huangok.bmp
Size 13KB
SHA256 1c5cac75e5037b879f35c0d936ee3f2bf889e1db16effa8ea36460cf4291ab75
MD5 45763e7b24d1ab3289d5e71ddd0536ae
SHA1 9ebdefd7916682bc8a65cfff7d24945957874d2c
SHA512 e4bcd5bb5d92004fdd0138b394af5dec87e1317b43f81e39093079d33f61f2dec4e541f4b5ad01e7603705de54117a6f41f27ae4ccdce6458fa3405898ee70ba
SSDEEP 192:nL3IAFENrM/r6tCysx9AaZwRvgDsLUYNdQvy:nL3H+NrE6tCysx9JOvygUkQvy
TLSH
T1A052751A75C9901D9683703F60C6379AA3A3C41D6927E1D31628ED13BF2321BEED71E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt1.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt1.bmp
Size 13KB
SHA256 b552c19c54a89227b076fbada66bffddc6264cb7d33aa87729199285ec4d5081
MD5 178d28915cdbbce099a769c4695b6402
SHA1 d0d16df10996faa96fa8f691a45771ea3db284e5
SHA512 48dec0930ae38fe178f8143f94100d0726249ac1d1f0f8bfe225f7f25231cec2c3dbe9f70e5245bce0259ca8cb3df717b7d7a564a42c257e7b5584e404a4e55e
SSDEEP 384:taazKq66Sviguoma8NYZ+klgwdHsFobzn:VnUvDodGZ+kxdM6bzn
TLSH
T1FC5229E3B91C287F014DDC74A2429A0E5884A5678F1395341A7B78DBE339D32D057F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt10.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt10.bmp
Size 13KB
SHA256 4bf3202d4520b74bf5d2998827b25ba2d5c9d5dc2fa8ce9d2869b57745c386ac
MD5 493deb35907aeb7ff0b27f5b62e27ecf
SHA1 87c6d95145859ca7b91f692c0948f4d97dba3079
SHA512 43b9275757886b80357efaed6bccb2655f9526936394e1f20bf7fb11d3f909e5b0cfcf93c1c624cb8733709ac5d7c5e1ae8c1b12b3808157a70375e7652b7246
SSDEEP 384:tWBYmmof62oJnx0mmrIKYFZRmpxQfgZtaeuP:DmmofHGcrIr3mpafgf1uP
TLSH
T1ED5228E3BA09247F058DCC79A1421A0F6440E91B4F67A5381A3B3CEBD375672C1A7B71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt2.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt2.bmp
Size 13KB
SHA256 cdeae6a3715fe1d0f17dd6e9e14a2cff3d73a6e4bc709b4a914bd70064de102b
MD5 6d01458fcf354ff68dc5ed59055788e8
SHA1 112879bcf95823d4c091bf85549e98d387b5641f
SHA512 83fc9def32c41d9caadf47c2e48d70d400c6fde997558e853b80398f150c25f0351e71d1c7f80c39a07aae10f366091e963cf3409015e066c5b2ef6830713cda
SSDEEP 384:triTKWN6ukolr9/v1oyWUzMzLL3ExcG7UGn:enpk+/vuKwLgx9UGn
TLSH
T1825208E3B918297E0158DC78B245AA0F5544A6674F57A434163B38EFE378A32E063F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt3.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt3.bmp
Size 13KB
SHA256 fa51e553d9fa7dc89750786e5293653c02652780f75ff24b02c6cc125754b1c1
MD5 73da54c80710789bbead1788d5587662
SHA1 40828a596f2754cf122c0aeea940fb54c2f950bb
SHA512 4b20e867824f1e3b12832adf6077e022ad9bb850fdb1c157c0ca238eb91605711146298ddea5774995c734ee8da3e419ab1f37289712a4ec21bf4c296bc67aca
SSDEEP 384:tMfI3Va6+nrvA4dFcZq4kHnFcXBhG+ChGn:rUT0q4qFcXBAhGn
TLSH
T14C520AE3BD09292F455CCDB861466A0F5440D6270F5395251A3BB8EBE338E32E097FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt4.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt4.bmp
Size 13KB
SHA256 a928e46455a1bb924505294aa166f6fda7023c3fcf86c79ea518538689fb4a03
MD5 ca0514a068a2cc47d67f0133305c96cd
SHA1 5bab6d0e420121103eb6b4b1ef21620a9a5f49a1
SHA512 b3ac58896b13b38f6d40e96df9ae727e095c18b5181f726386f5e2738d08374acf7aec6eb1f6c3a6e8512989630fb328f1532e8d887e5c308e167c74f42d73cb
SSDEEP 192:t9MeElUN8xWo7oZK4RGuPyGXXjI0Onxzs+N/OkHKp5W6s5S9HSwHuTqUG0xDg4Gn:tlAm6ABaGDNYRsYOkHMs09aTqtz4Gn
TLSH
T1D452F9E3BA1D283E414DDC78A1476E0E5C05963B4F53A5341A7BB8DBE338A729053B72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt5.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt5.bmp
Size 13KB
SHA256 d357059f3a0269bef999e821252b69628a4bd3a88b0e0256f654987d653a27ad
MD5 f5dec5a5911e74de1db644808fcebde4
SHA1 cdb95d553e302d60b516e7031d22810014f8764f
SHA512 76cf174893de460e2c27e647290cf9797522f43fd84406eec99724465cbb78664cca3e00ad0ec19937ae1ed7f7a203d6734cf4f6de0ab380f3cdfc7be23f4a95
SSDEEP 384:tELc6yE86BaRwSH82HaQYOkHMs0/H4hz4Gn:qEhhWyvHqOGMs0/E4Gn
TLSH
T1FF5219E3B909287E054DD878A2476E0E5544D2378F5391242A7BACD7E378E32D057FB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt6.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt6.bmp
Size 13KB
SHA256 aaf69acdc900d27e6cd9ee414571adc7371d7a329c94bd92014542217e6ce89b
MD5 bf855286984d3308ff493d1b08d05c05
SHA1 37834802cfa146fe3f066a03a8996ed6559b2bc7
SHA512 64d039c2b4621a5b9062346de68ccf55b528542964722f2036e7189d41bea32e996c4488e85bcbd01a656d712d1535b6024ff62f621a292c5f2c42d252e8ebce
SSDEEP 192:tYnzRm6iFxKo7Lt1/52ilcVdw/RSy9eqv/08CeW6s5SqSwHuekUl0xDg4Gn:tMlcu6LB282mYMeqH0ys0Zekuz4Gn
TLSH
T1DC52F8E2BE1C297E0549DC7462472A0F5944967B4F139930167B78EBE339B32A053EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt7.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt7.bmp
Size 13KB
SHA256 c27193b3d16fddb193cc0206a46ba9ab3f753a4f37cd30407286a45547b4f255
MD5 e4ac62b4d84e171167c4d83ab92c26eb
SHA1 430367061d7a7cb822d23a8c276db551d08edc6e
SHA512 0d92bc495a826e65f40fe31f90d98bb8abb614063f9cc58b6625f5cac627c38460bc54433f22dcf7d41a0ab6f7a0b4830148b8a58cb97f53a2a1b917e16b2870
SSDEEP 192:tauMmQxBo7vJhm22guTUyFUXE5OXc/L2gqWccscRaf3SwHuU7UW0xDg4Gn:taxma692guPU05n1KcRafqU71z4Gn
TLSH
T1AD520AE2B91D287E0549E8B4A1029A0F5848D6774F53A931297B7CDFE378B31E053BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt8.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt8.bmp
Size 13KB
SHA256 191e4af226ddb778e8d1f8de5ea580c55da1c1a5d25f7c4c5d8899bdd432d3d4
MD5 494c11da781a05c047eca3f7ac76b101
SHA1 1150c8bcd33063d97329d57cf630a7fa7282bd78
SHA512 0c7bd92038bd1fa8e4ae29d62dd45eb6c541fd38c68c0f4a9d3e040d937a955f695bedbae5f2bc96514ad38052807c2f1a66f637e3cde9a1adb5665020305c66
SSDEEP 192:tay24Qxto7a2FG2Ip7y4hQO1aySUJoPi/pu1En1UX0fSwHuIOU10xDg4Gn:tal4W6u2WJ2O11Mkn1UECIOez4Gn
TLSH
T1F75219F1B90D196F450CD8B4E2426A0F9844D6670F23A575197B78DBE338A32D047BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdt9.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\jdt9.bmp
Size 13KB
SHA256 73112b7338d7b55d23177ee19edd5071a2d7ec0fd0efd1999f06310ad39aab54
MD5 1c52e0b462c0d853630bdc1a1119e6ec
SHA1 a23acbc7956b7da24a89825c603105e063b40c79
SHA512 47ba5b53013e175ea4bfed22297547ae2c9b0a098eded29391fcd455e60a422c16132c5d3a05550c86a6ad1347976b2f8d4a655cc681cdbee79e82683aa2c3a0
SSDEEP 192:tayKMQxwo7KuyQX23A57yYULHCv6/vbA/QEPFbC2P2DdDn0SwHuHkUC0xDg4Gn:tanMb6hX2w5eYUbCS/vW3gDnXHkhz4Gn
TLSH
T1CC521AF2B60D39AE095DDCB4A143A90F5840A6770F1395342A3B78DBE378E32A047B75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

julong.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\julong.bmp
Size 1KB
SHA256 735a21f1f732edc113ed9ffdcbc15e3cc66d7d8010f1ec8406e5d8835b6bd243
MD5 37a84ca9c723545434adc0dc4de9c206
SHA1 ce577cd87c4cce328a7211cb0d12715b2c8ea5b3
SHA512 089123ed4cc25eed937c477b436e08b06b4516a2f9d954ea9c04b27698af378f3fba267079961d7f63982e7485a605423225c33b197123b40d1be9787b458d06
TLSH
T1E031EC93E7E15077CCD12738C6809F1984D48C4579171ADBB21E3D5493B1C811F9F171
MD5 SHA1 SHA512 TLSH

Submit Download

julongdown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\julongdown.bmp
Size 1KB
SHA256 baa709b52f66585fea670f928e6ae15084c2ea5da21171ad6a5198a2dbe8c8c6
MD5 4a07eef473a84bc2c19912cba4b7a604
SHA1 d1da8c36205f082b97978eeef358b8ae5831135c
SHA512 50e5d9cb043c2fd2f529bd40f3eb95e5a28afacd1eb480d53423a541f17d4e39aa871e2ed0a01139799180f3201e9f485181dc58cba83acc75697e47f064337c
TLSH
T17131B716050EC06CEABA6379FA9118F702070D65E03133DB1B4DFD9037B6E98956094A
MD5 SHA1 SHA512 TLSH

Submit Download

key_mask.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\key_mask.bmp
Size 515KB
SHA256 f1c5b9aad270dbcbebdc716f82bd5e4d7461829ae565824ab88d09c9b8540ff2
MD5 ea02a70c7c05fabcf82f215839906011
SHA1 c780edbbb64ca6537ae3d8600617808dc0c77b74
SHA512 35493a65d727fd8ed06f8244bee4f3b6302fb51dba8686df1a58b1140b75784f60d6e4f5c468261ff81a2df45abccd9e0b7dbbec678ea6e874eb43c7f4580fea
SSDEEP 96:pcfO0ucgGogWdIa5mu1+m++++++++++++++++++++++++++++++++++++++++++z:qfOKZuoIh
TLSH
T12EB40DB4C9FC9911EE6E983435E1D90714DD5C86EAD2228CB3ECB0FDB1F7B941568901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kuosan.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\kuosan.bmp
Size 1KB
SHA256 8b9d529ee1666a1e5b9a69ae75bb4c353e6c32e5e1e55a669f187656fd81532b
MD5 2e3c15e9bcf1e087c6a4e48028f6171e
SHA1 96884b25d4bf5c83340dcd83e58b69204350e75e
SHA512 d02ff65b84e393bfc96f4eeeb7cc7ef73d453acd25b42c171e91ec6303d7d778659fba4632a746d774d8f143ff6f1e948613c7c81e03bd76a304efa42078213b
TLSH
T17A31E9826AF480B6CCF1953CC6D41E0480D24C05BF176A9BA12B3C49DA71D9266DD575
MD5 SHA1 SHA512 TLSH

Submit Download

kuosandown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\kuosandown.bmp
Size 1KB
SHA256 0662dffefd445683e3b6b0442a68f082e11042b181d819430f2fc1067cae9b0a
MD5 1a59ff7d8687d24b3666d2e5d4b49918
SHA1 149a0f638ba77c2c8af5cb1b89b85ab262d53464
SHA512 da1d0b278e99b31fda1bf1abf3931f6ea7505301487e10a574eb3d39d8cb803374094840730c6c271b300744e3dee3d66ed6ff08c374fdc6f5e4cdb9a69c4103
TLSH
T16731956A2069C858C2B84174E04FA4F54B064D12E52B368F9D293FA076F79C1F660B8B
MD5 SHA1 SHA512 TLSH

Submit Download

lan.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\lan.bmp
Size 13KB
SHA256 63df03f6053d6d14ec0aa941100ffaa69c533450cc52dd023457693683f6b1e6
MD5 ab74b5e351a11c4b4cdaf95179f98640
SHA1 eb5ea743eda1f31277bfb9229513ed0975e75636
SHA512 e06308c3c370adf2cb7e43eedb3d25874df0c8635e2539285417e44546325df61dd5281865e9368a7bf61727a4456ebba1559064a7e3de3dfe9ea1eaba118e59
SSDEEP 192:nTOJ0ysrGlQv6gTeXCB1jWtFDWQ9IBmYSiDE7Y3Bj8nta4PtgUeAFBTUqg0/j2R8:nUyCMEAurq/2/FdZiqpU+ZctPCDS6R
TLSH
T1FC521D85AD68AE334557C6CE8EFFA83B02BDC3D22A13C6B3542554E4FDE36881A80245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lanok.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\lanok.bmp
Size 13KB
SHA256 c7bbbe6f5b5f46bc8f5f27512d7b9a4d72ea102bb654ac070dee9d65f3f682ce
MD5 c5eb9a314c4e1a131103f5f9baa5b24b
SHA1 58076d5c8561dc70543b8b8a5f66a5aa828dfbaa
SHA512 1d49e715057cea6f066e2137b95523ba0e3063ff62c0ecf63a6ad719137a82ee4c53afdd0182774efe6f7c19b7f374a2ec44d6360718aa235bdce70e6178f13a
SSDEEP 192:nEyOJ0jsrGLQv6gTHXCA1jJtFDWQTBmYS7DE7z3Bj8Ita4ztgUe3YTUqg02j2R+j:nhMCMzAXr/SJ/RdoqAU+Zs3BUxi6R
TLSH
T1F4520A46AD7C9C274956D6DF9AFF983B42FA83C23B13C6A3983054D4FDF2B445A81242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

leftdown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\leftdown.bmp
Size 1KB
SHA256 76fd8e17a90ebbf3763c2b72bd6df2348d29dba456a88b8d4ff32a33c2db4cf9
MD5 a49fe6818eb6530510c51191ad10a0d2
SHA1 e88ac4d5d88599adeb4faaa67538e903016bf0a0
SHA512 c76a2151895aa2ebe59c0b59519ad707251e4807efa58cd335185045edb265213e8a8aa100fa2805811ee39a9efb0bf1c124aba97c718b08725f9478d08096ed
TLSH
T1C611470F63844AD0CA6D01F96B0960C58C1731F94C22A9D24FFB7F0121C936A494C2D3
MD5 SHA1 SHA512 TLSH

Submit Download

leftup.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\leftup.bmp
Size 1KB
SHA256 a9574449716dbb59e57073b10ed23d5beb09dbd1875f92f679012640aef6e710
MD5 3e2a4425a1a024385a45d4765dcf0cd7
SHA1 72bb2025fd05e5ee5fa15d7efda4360b7da1b0db
SHA512 86235c795cb6270377f03e48746fd3732e94a68288310b87a5aae45a9e27b6aa33bdececaa0008668192998b2901fbbc3e843f0c1543604c1d1b8edcd87e3848
TLSH
T11111A6C57140C822D12A03363C02C9CE2AEA3F02FE5617837CC9738F0AB26190867AB0
MD5 SHA1 SHA512 TLSH

Submit Download

lv.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\lv.bmp
Size 13KB
SHA256 5d9f185ca3eb0053a915bb8df95a65d9b94a82c4ff9c7604e7090f30aa723ab4
MD5 642daa8295dca62c7306e5c7d51fc0a9
SHA1 d7da887265caaae9956919a88e56534e7c9cf415
SHA512 c02dbfa838fa35546452ddddf30e4067ff9239cfc3110c2cae405f2f87e9f6f9e83b48bfb4a28057a51d3bb85e732f1e802351adaebaf90b85804ff28332201a
SSDEEP 384:nRS7EM7YZUNrrysdYOiRqL8QIqA/JOKr4LgSeP0iF+Z3b5EBBgLM+:RsEM7YZUNrrvdYOi4LoqA/wKrQeP0iFS
TLSH
T1D352E8A2A0C4BBD0957801B96374BFFF926E5C27C826D6B1B4CD9410AB700EC7778AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lvok.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\lvok.bmp
Size 13KB
SHA256 328997585c6e2b7e10fc57bd015d52411f2ad0ed99b82b57f0599140f3307453
MD5 a9c429f966de5b54bb16a62587687372
SHA1 8140eca4374f4f6b2baf7f87a5e85d9e79805f36
SHA512 e52ceb923f157fdcdd77225aa96cb7dadd60989ef36ebb3857c1606a7d5fb3f588791cecdaad3fd7e4241e9b464e5b4c6c5b204f9ef2295c8b5b68cbddb632d2
SSDEEP 384:n3S7/M9YZUNorLsdYciWq48QItAwJOFrELlSvPxiF+ZFb+UWiXLM+:3s/M9YZUNorQdYcir4otAwwFrdvPxiFm
TLSH
T12E52FA63A4C87A80A97811BA7374FFFF926B1C17C916E6B0B4C494019F704ED77A8AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

macro2_mask.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\macro2_mask.bmp
Size 725KB
SHA256 a563fe2ddf8524918bc43ccfd1143c07d1ee18fb60dac3a49374b7f6936b8d88
MD5 c780aa1fd91a1e33a58c8ca2fe5a2d56
SHA1 3ef9b1bd31209cecfdf0c5e8271828b422c5f87b
SHA512 bb5283dc63a26d82ce79a79b85732c9e899ede08a829f571a375833e5f9af3977dcd1fbf2b4b418c34d1540de91f2ffcccd2fe219d77851e46ab6736808795f9
SSDEEP 3:pnZsfScl0F:QSU0F
TLSH
T19BF404DF11C4000DD13C01FCC01103C7130DC401D1D40707004301C5145374F74C53D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_Mask.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\main_Mask.bmp
Size 2.4MB
SHA256 6faf0ac018f4cf9f699d12b3c7cc65f586c2b823e376935aba14d1a16c1c86c1
MD5 15406f732d826a62b39d2491ef569548
SHA1 617a9357fb86bf568a88e7c6da6f61525a5db9f6
SHA512 54d68678465ea45200892be0d75fb19f9ca26ba2598613a3ce43b8daf85fe659c099812fb8e41b0cbf38ab4e096e307298c57048e5d42c7ef7419a949c344dd6
SSDEEP 48:4U6TUmkqdEllY1ZG9LNC9DRNGoIQWZl8JphMC5bOQfDkYlvBML:+TUzqdE/Y1ZG94XIUfQOBML
TLSH
T1E3C5B466BD40D02ACA2C0570CCA8EAF412903C56DE095AE3B3D17F6F7D770961E2664F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_disable.jpg

Path C:\Program Files (x86)\Redragon K589RGB\Skins\main_disable.jpg
Size 260KB
SHA256 3e074af53197281dc7f696c0520732103d119a5a5a3d3b9b753cd64e5eb78e0c
MD5 5bf3d02b53859ff2e19ec61e6234f04f
SHA1 ac07a1b87652c191b8396e15dac5f447c8b43bd1
SHA512 38f23622f6749c897f3269108ba741b6381d29fe7b8b3dfc04e3c803d0d2a39195bff734ee58752bdd2a932d1112eb9f9858bf030b6439acb6c77abef52f6182
SSDEEP 6144:EkyigDHkLXaHzOQKyl/NJ6JYgW7mVWZIRbRBu8LPG:EagoaHzbKoJ6JY7mVFzBu8LPG
TLSH
T16A4412B629C5CA12F4A5713990FAC312E7A33FE0CEA3541E7AACD644EF314D56D8C05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_down.jpg

Path C:\Program Files (x86)\Redragon K589RGB\Skins\main_down.jpg
Size 258KB
SHA256 95b026c2f2d5c2c5e34fa09a99174c4d5032921bf17b3e560b41f0311cfd77b3
MD5 79ff703453bab297e24e722feb3e4cb8
SHA1 fcd1214d7ebf85483e9949db227f958394e0a902
SHA512 0449d3949e58d7a7a24feadf372659968d1fd65e052f22e2ea929e8d332c65902cfde8672a91c51f6ee24cda8856cfe311e5ed04a9c71cf85db7ce5864a26d94
SSDEEP 6144:ykrfwQc090pcJ8MBgnqfTGzExq/HhNlZpKTIg:JhmC0nwGAxqZH6Ig
TLSH
T16F44126AFF149C26F860BC3015D5E216E3635B698F32639EB90DD1183761DE49ECE0A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_normal.jpg

Path C:\Program Files (x86)\Redragon K589RGB\Skins\main_normal.jpg
Size 281KB
SHA256 7c17b6668753b3ad12520b48e3a1c8887a441f295374b32d86f4ee35cc82ea69
MD5 52140c4405356965e77b53531933d423
SHA1 f8c5ef72b4a22ba7374d61631249cfd44b050a17
SHA512 3513986960d04a1d63d90e0b0a1bc635aa2f307e14b78716072db6cd7858799ca359d384fabc27d49188a8fbb59f543d81c96c1bf9f9e249810674e3208be282
SSDEEP 6144:+LSLr/2wljpEk1AwZ/ylCzBeHk/p0fOdx8W/i:wsruk22/jzakB0fDyi
TLSH
T164540211B9938D56F0C6753CD5DAEA0883F3AAB59D72212F3A9CE9012B934DD5CCC12B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_over.jpg

Path C:\Program Files (x86)\Redragon K589RGB\Skins\main_over.jpg
Size 260KB
SHA256 c183a3c05fe1738f415c718168455cffc708ed014190e44ff77831f25ac2dd70
MD5 08eb7f1893aa044e896161bdabfef77d
SHA1 9aa2fd0a970344ddeeee4a8c49923e180e6fcde6
SHA512 ebaf89982782ec2cfe6fa0a7ec163b5fa7c9bb965f466d7e4c2f5b4e592ae6bd8ebab347442f284535e7728c703b87484c4f365f860f951f2923676fb977f65c
SSDEEP 6144:gsP46QUHErTKh/FgF/Jkmb8MfxZppsO188z/iZ6+:gsQ6FiTKh/FckYVFeOfWZ6+
TLSH
T1344412B87D9DE822F89EE234C0ECA246C3F70FB46BE9A235B6BC60544F914854DC9047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rightdown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\rightdown.bmp
Size 1KB
SHA256 d0a0012af2e12280872fbd121ee1d22aba63694493bbe9f1e1fe21e546c41650
MD5 ed93f09176a1ff7b2c2108feb36bc988
SHA1 c59c831bc48a218eb0c9a5b31d7d6e5d711152d6
SHA512 44fda8896d4edd0aff0bf9589226374328d65e61cd89a8992606f4943a5e646a9e569281d02a00b9fde5edb6239205d4cc57032f0106f34c1847a685082bd388
TLSH
T18911264F639946E1D86CC3B5239306C5EE1365BE841521E30FF7BFC055E27A0144A9E3
MD5 SHA1 SHA512 TLSH

Submit Download

rightup.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\rightup.bmp
Size 1KB
SHA256 8f4fd8a318d894b0ea480dfe774858d0b00b2d5a493e6ccb286ce5ee7569f856
MD5 0891631497ead76fe4f1da93f76ce6df
SHA1 9fabf5c750e80963ab7433f84c43b8e7ed128d61
SHA512 89332f3c6b9cd99d8e95a14fa711aafcd595de2dc44b1d2ae0bd9452cae1abb334accde5791b0f4db471aa359f3e17c6fe114b9b47eb952128afa7789145f3e1
TLSH
T1C111289C7114F800DC6853330D15C2D92AF97F15FC5057577DD0B7AF4D75A196870A82
MD5 SHA1 SHA512 TLSH

Submit Download

updown.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\updown.bmp
Size 1KB
SHA256 3322185d2620569c888ada777da69f390b5b5041cac9ae50b799c72737bcf5f1
MD5 c6823b7e7e49e687b64a06c3ac5acfc8
SHA1 4abff8eb754b8963be40763c0aad4768a7ef99d4
SHA512 c5266df0d23d56fd83b13fe7d4c242687bbfd67d0552feb2e8200714bc1290ef13b1471953991e8edf3cf960f2df442c8ebbe5eab9308c8982dd36028427f913
TLSH
T18411FE19BD21D12CE6550AFFAE95F6EC278D5FE1DD0120473516728E3BB0D8900F658A
MD5 SHA1 SHA512 TLSH

Submit Download

upup.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\upup.bmp
Size 1KB
SHA256 911325035c3c8e90e86015fc9e29d197b272e73845856f0c59a6e4a8e958b41d
MD5 ac4f7011822fe9d711a5aab8836a89e3
SHA1 5d423b92e4bc39e160b0f0a8b1a9af0992529896
SHA512 6e4cb5557d7e781d37d52a1b638425c628c490e86189541228367036323973eb9c6b9274639453f048a823ea3972d8519ca494cec4521d9b1c05c51a795a9a7d
TLSH
T154119528B928C22DE4A992B1DD09F8FC2209BE41DC02240BB5D63FAF70B201948083D6
MD5 SHA1 SHA512 TLSH

Submit Download

user1down.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\user1down.bmp
Size 1KB
SHA256 3708b62578fa1038642dd6cc5965c47ee05ad3c1d94ec40ea4b1e63178b49f4a
MD5 448a39793b4bcb248331d353f3f049bf
SHA1 77cc4c427a095aab2461f31492a665ed78c74573
SHA512 56b951444694ad34c16f006887001d45f15ceea49ef2a580bcd10370177d114d900b7e0a57257ce02b6e6aa0767399f58b5e46da0405aea194647ea9de9c13cc
TLSH
T1A911228372061D8FFC695330DFB6BFA0497C4749116CC8A5A8B24E8CAA53736680CAC2
MD5 SHA1 SHA512 TLSH

Submit Download

user1up.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\user1up.bmp
Size 1KB
SHA256 5191a5dfd71a102d6ea2bfa98b81740dfcfe02e24171947cdd330a9b0ad4c2bf
MD5 3ecb1bccdf386e40a50012d79b7ef41e
SHA1 f11057ad713f24bfeef6a893ed77390089499b2d
SHA512 f0b0d3ac6ed223937fc53c689e65b0955ec3f11d4c240ca4dc67f33afc0d3dadb4f16f44ddb411114277a71e45a16a25f6544ca76c1ac2b9a81d4c3c2758e9c5
TLSH
T1DC11A341AA06DE56E02C44780CB26B4C70C07F2A3292A3D65F3C7B9BD7757452BB7950
MD5 SHA1 SHA512 TLSH

Submit Download

user2down.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\user2down.bmp
Size 1KB
SHA256 a813c7819b49dee1b8dbc866bfacedb7d7586a63a0c31524840a4bed8193a3d6
MD5 15f02e900820a72f5c82519b45b80bd5
SHA1 6d8ac2c4979215750bf833866990170e4c40abd4
SHA512 ec3a57f218ea2085eb8c0ca7c0e28792a3f3bfd85a45e2b1ad73c7306d1f1f3e9f7241cfb0270536dc8e54051066603b798b719e1c99d301dc1888a11847ca48
TLSH
T1A3115F00B108ADCBD01CF57107820BC6EFDECA888607C2801B774FAC5A87328889DAE3
MD5 SHA1 SHA512 TLSH

Submit Download

user2up.bmp

Path C:\Program Files (x86)\Redragon K589RGB\Skins\user2up.bmp
Size 1KB
SHA256 f39c6ad330b589d6d4e7c19275e1f6a1467ab520be99694589dbf8e22fcd3c36
MD5 5240980a18717aa952587db2ab59b9c9
SHA1 0b912b631e109cd9d188e6360d6feb0479cf0def
SHA512 88b9bebc03dbe2215457db53defb479a87a2935db6cf609c5ac7966df1c58df862019e817f652c722ffa568ba3d88df18ca7d76de0974d39044b79b5b4f1edb2
TLSH
T1BF110201AE548BA1D07C503A5C331BAC50C14E09B442728BEF3CBF8AD379A9E945BF6D
MD5 SHA1 SHA512 TLSH

Submit Download

ISSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\{323F3C91-0994-4396-985E-F56C26B0ADF0}\Disk1\ISSetup.dll
Size 542KB
SHA256 7c173cdaea8e3a3cc95b7196681cb904f3996f81289d5890b30f38c99eba45ae
MD5 2dd1c4a68e2a8a401018f5efdab5adde
SHA1 13fc964947516230c70d38281d0312bc1afe13c0
SHA512 c69f3e46d36e07e6093f66cf072c83fc8c7249ff86c9cd84168ee46dbb7a621d562cee7de5685b408bd5f71889d6433e99ff8045955e5b8ab2c9eeb71941d165
SSDEEP 12288:dsQtvFayV47sBhOz/+IlMSbi0Na41VYuqNj:eQtvFayV47Wh2WIJbioa41VYlt
TLSH
T173C4D042FB83C9A2C84D0635985B57FA0FB0AC95AE13A31B3798776DBE333D1BA41154
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_Setup.dll

Path C:\Users\Admin\AppData\Local\Temp\{323F3C91-0994-4396-985E-F56C26B0ADF0}\_Setup.dll
Size 325KB
SHA256 35eef33d1890a6e34d647f86f24c730b4f741c9d33fcce01cfb12d2b8e55b5d1
MD5 7de2d19c870587b8ffc5a446e9b6e29a
SHA1 4818065b55bbe0469cb2135197d69caae359ac63
SHA512 bf2258b84f497e40670aac594e20f5a508cf603235f2cdd73e0c4e74613ece46468571b1beeaab5065ce214675e846a0641c9cb812b8e1fdf33a6ae0237ed3b3
SSDEEP 3072:8b9YfMX0E9QsJB9cWe7Ka2coNfCp5CvuGdwizJQpAPbK8nIi0nn4QfnmwnVCD4rB:8Klua8NfCp5CtdwE5X0bCG
TLSH
T1A4642E41A7FE424EF6F7AF30ECB50AA44EA67D96AE34C12D3641751C1834BA0D970B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.ini

Path C:\Users\Admin\AppData\Local\Temp\{323F3C91-0994-4396-985E-F56C26B0ADF0}\setup.ini
Size 522B
SHA256 4bef127f3b905ae8be69b80debf83b7f7c7a6440b1c3e236626223d7985a6388
MD5 57532b47476d3e0c531beee6dafecfc3
SHA1 bc9cf60918f7701915fe9f362e926bc79b003c2d
SHA512 eb3bbb946188de3ae6dcd532694c764ab779391c767f7dca0f7da0e2cb9d748659762a007575cbed260440117384a61cd2089eb582e93ec6716fe5cf1b6822b5
TLSH
T138F005D7561D143E35859BB43970535416C129AC4D45C3C8C3C4655B2F92B44F868113
MD5 SHA1 SHA512 TLSH

Submit Download

ISBEW64.exe

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\ISBEW64.exe
Size 114KB
SHA256 d3294cc8c750c4bd63016e87e9d2c53a501c173567f4edb9a3c6f1bd9836064a
MD5 2a276ba2b7782476302c59d0f760f4bc
SHA1 43bbb884a7b65534c417ae5a3f3f17f7e80e2f7d
SHA512 6bed8d3291ed422aed187637838bfb957ea59c772be3bc52c12242474712f411e174afe55ed6955b910a8ce3635f1552260063cf6db428a4e34bc76a4e3e01f6
SSDEEP 3072:AQboO98B8qDO2EyOLHbLu1YuhpCDZ39FLkZhNbW:hMO98HDO9yg21YQ0Cz
TLSH
T1E5B3295673A450F5D066827988C28A86EBB2B8601F7123CF2374A35E1F737D56E3E760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DIFxData.ini

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\DIFxData.ini
Size 86B
SHA256 1b9fd5c1f18357bd459be20bfcbf47ee18fa0c5d5cc42f6aed2705d5868b65f4
MD5 10baa5b67536f4433f37534b9c8bb828
SHA1 82e5c34b1279afda223b639b49078d03c52875f5
SHA512 49c6798ebb3b6137cafb78b88350d02094367523dcf8f9e580de1941e514b8b3df786d1d817090e5dab80ac4d0d015796b2ce28b296db31d111e0d0bbaeebb37
TLSH
T18DA0017783B9E720655448C3FF2C3047BAA5247041204F7262550BC3D87AE53D82F0D5
MD5 SHA1 SHA512 TLSH

Submit Download

FontData.ini

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\FontData.ini
Size 39B
SHA256 766ee687d90b0217eb41cb85aca04375bdc24db986a33536631f864b7ce1a08a
MD5 00f313e3e007599349a0c4d81c7807c4
SHA1 f0171f15aab836a1979d3833e46b5e59e4ea32e0
SHA512 8bb25a62c0b1640dec36403a493ed54c05f7cde7b7357c8faea785a79c4b76bbe6a3d6fe78db52b558a37abac90c2b2e8b13868a76294554d51670e9fa8764ad
MD5 SHA1 SHA512

Submit Download

VASData.ini

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\VASData.ini
Size 30B
SHA256 029f695d7a558a0070bdb42c07d35c7ae436fbd0688079b7ada58093505d9579
MD5 b16ff78e4420d4049da82fffe3026d31
SHA1 612be1fde59d3d4534a4d8e0947b65060ed6146b
SHA512 8042f5a1f12ef644b7def42c52c90a252ff4a6c099956530cff8147daf2edd8934f5bc79bb560f550d47755fead71a1d0fbe7d52fdc0fb30a0ad64471beaaf7a
MD5 SHA1 SHA512

Submit Download

_IsRes.dll

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\_IsRes.dll
Size 545KB
SHA256 682e00f308be80c69172b0e7d76f2ed555b7838be7b7f61774687aa1cdf1ce8b
MD5 936570437cdd944172b100e677603523
SHA1 97e56b29733846d4ffef7791830f3e9ae355783a
SHA512 d357c39570079e2ce64c0affb0c33b46033c41244df9812e69b7bff7cc75287ea103bbe27dc7ae775b41d4a2dc0fe1088ad04369b6b435dbdb5ef70145ab9df4
SSDEEP 6144:ihs4dodcOaOdFGkd+4skkkkknffCp5CrRKluaqkHVPKH:Ys4dodfaOdI5GqHVu
TLSH
T1B3C48100E6E5810EF1FEAB749CB21AA54EB23C559B3482FFBA95711D1871AD09C31F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isrt.dll

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\isrt.dll
Size 217KB
SHA256 5974ce20a780d384383cfc24af4dc62bc22ca67ce1d76ea9981c42631480ab63
MD5 0f68d760fb480a1b039ca7d6b877d24c
SHA1 259d101a49646c3abe17114111ff9aa7df1b8fc2
SHA512 d551553ceca5b9ba86f7422893df78ce71167096cbeae65319c344abf57601e8e6c8f9779a9a45ed28ce32c3e1c477b843d8ad4437e0643c0fabf56ab7f586d1
SSDEEP 6144:Kmt35i7PbF9OMOzjiYYTpMxo/j5AWeumDOy/:KmtpWHOXHiHmm9AaJE
TLSH
T11B241253E9910428D1D72F34E6F69C2AED93640809F5A19B2B7643DE0F95B1E0F6432F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.inx

Path C:\Users\Admin\AppData\Local\Temp\{698C6D5F-6E24-4ABA-9228-9A68D294CDBF}\{39C48DAF-69EF-4C2D-A448-59270979595F}\setup.inx
Size 227KB
SHA256 eaa3d43b0c9804ab63ba144dd7c817988e43901a11737ce1cfd1d1b90c1e1106
MD5 84ebf3564823a72f845d18412a047841
SHA1 1847e0e084d1bf8e91cd9f67893bcd0ddac80772
SHA512 716856a6e811e416d2c5c6b315cb01d17eadfdc439897e7301bacbc69e7be272fa26eee324f8fe3c745242598ba662ab980e32cc636f08b52d2348b9983b5c50
SSDEEP 3072:j2nKamA6IbZ7/c9CMNJ7EhvXXUeIJiGcW2ra2KYZQCpvWqV/PdCqJQQ5erTfkVz6:j2KaX66c0jIJsRaUQqKqWQwaZtziHiy
TLSH
T1AE34AFA84D920F8FB7388AE6F43708D035C6EC4DB2A545A793F2D590CF794FA509D09A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4952-97-0x0000000005320000-0x0000000005322000-memory.dmp

Download

memory/4952-96-0x0000000005AE0000-0x0000000005B68000-memory.dmp

Download

memory/4952-26-0x00000000027B0000-0x000000000294A000-memory.dmp

Download

memory/4952-27-0x00000000027B0000-0x000000000294A000-memory.dmp

Download

memory/4952-30-0x0000000000A20000-0x0000000000A22000-memory.dmp

Download

memory/4952-102-0x0000000005DA0000-0x0000000005E29000-memory.dmp

Download

memory/4952-130-0x0000000005AE0000-0x0000000005B68000-memory.dmp

Download

memory/4952-13-0x0000000000A60000-0x0000000000AB0000-memory.dmp

Download

memory/4952-129-0x00000000027B0000-0x000000000294A000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads