Overview
overview
7Static
static
3Squad.ICU ....1.exe
windows10-2004-x64
7Squad.ICU ....1.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3Accessibility.dll
windows10-2004-x64
1Accessibility.dll
windows11-21h2-x64
1AngleSharp.Css.dll
windows10-2004-x64
1AngleSharp.Css.dll
windows11-21h2-x64
1AngleSharp.dll
windows10-2004-x64
1AngleSharp.dll
windows11-21h2-x64
1CDY.WebVie...er.dll
windows10-2004-x64
1CDY.WebVie...er.dll
windows11-21h2-x64
1Castle.Core.dll
windows10-2004-x64
1Castle.Core.dll
windows11-21h2-x64
1D3DCompile...r3.dll
windows10-2004-x64
1DirectWrit...er.dll
windows10-2004-x64
1DirectWrit...er.dll
windows11-21h2-x64
1DnsClient.dll
windows10-2004-x64
1DnsClient.dll
windows11-21h2-x64
1HandyControl.dll
windows10-2004-x64
1HandyControl.dll
windows11-21h2-x64
1MainHost/index.html
windows10-2004-x64
7MainHost/index.html
windows11-21h2-x64
4MainHost/j...686.js
windows10-2004-x64
3MainHost/j...686.js
windows11-21h2-x64
3MainHost/j...86d.js
windows10-2004-x64
3Analysis
- user interaction
yes - max time kernel
109s - max time network
123s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 15:57
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Squad.ICU 战术小队全能助手v1.1.1.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Squad.ICU 战术小队全能助手v1.1.1.exe
Resource
win11-20260130-en
windows11-21h2-x64
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Accessibility.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Accessibility.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
AngleSharp.Css.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
AngleSharp.Css.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
AngleSharp.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
AngleSharp.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
CDY.WebView2Helper.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
CDY.WebView2Helper.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Castle.Core.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Castle.Core.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
D3DCompiler_47_cor3.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
DirectWriteForwarder.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
DirectWriteForwarder.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
DnsClient.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
DnsClient.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
HandyControl.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
HandyControl.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
MainHost/index.html
Resource
win10v2004-20260130-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral29
Sample
MainHost/index.html
Resource
win11-20260130-en
windows11-21h2-x64
11 signatures
150 seconds
Behavioral task
behavioral30
Sample
MainHost/js/16.ce572686.js
Resource
win10v2004-20260130-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
MainHost/js/16.ce572686.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
MainHost/js/170.6348d86d.js
Resource
win10v2004-20260130-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Squad.ICU 战术小队全能助手v1.1.1.exe
- Size 368.7MB
- Sample260426-teaamaes2l
- SHA256 b9d975b61efe303eb5bcb7bb6f0bce6d704b3dc1531aafafc83e8b1b7c939cb8
- MD5 d1c405ae5b3d5f434ae81f64a510b3c4
- SHA1 6354e750f93f3d4e4bfe400f8de6a7ed77b2314c
- SHA512 21d87ef0305b049f2962219d8469f80577f3c6d1edbb6500fd0e4a090d17fd9988b64f602cc3287e0d6f8e425be57390b46baae2fb3b51fece29b552e1459f19
- SSDEEP 6291456:CvOOQrcU6vWZSKlElcMJxhFmttycFhVdQ1jmIWIX9ZRp8bey1pvlfMPmwhQFJgMU:kme6SKlElx3hFeoiQ2IXpWBp9f+KK
- TLSH T1CC09338B4ED81812DA1BABB95DB90B0EA77CEC35590E661DF308700F2CDB8643D64BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1176 Squad.Helper.exe - Loads dropped DLL 64 IoCs
pid Process 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Squad.Helper.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\ru\T_map_helicopter_scout.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_boat_logistics.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\css\378.f1e12f6a.css Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_MATV_CROWS.362294cb.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\flag_GFI.7109d014.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\maps\mutaha\topomap.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\spawnGroup\IMF.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\vehicles\placeholder.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\fr\T_map_trackedapc_artillery.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\ru\T_map_jeep_antiair.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\DnsClient.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\icons\ally\vehicles\T_map_trackedapc_logistics.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\vehicles\AAVC-7A1.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\zh\T_map_trackedrecon.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Masuit.Tools.Core.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\PresentationFramework.Classic.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\T_AFU_1stTB_Armored.0a6a771e.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\icons\ally\vehicles\T_map_jeep_antiair.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\weapons\HIMARS.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\ru\map_trackedifv.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\zh\T_map_trackedapc_logistics.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\icons\ally\infantry\map_infantiair.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\vehicles\Mi-17.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\runtimes\win-x64\native\WebView2Loader.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Web.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\vehicles\Technical Kornet.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\locales\en\settings.json Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\locales\ru\maps.json Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\en\map_truck_antiair.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\zh\map_trackedjeep.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\PresentationFramework.AeroLite.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_MATV_TOW.f3361554.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_TAPV_C16_Desert.4c9b35ab.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\flag_USA.08fec3aa.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\vehicles\Sprut-SDM1.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.ComponentModel.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Xml.XmlDocument.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\flags\main.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\units\Combined Arms.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\locales\zh\vehicles.json Squad.ICU 战术小队全能助手v1.1.1.exe File opened for modification C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.ICU 战术小队全能助手.url Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_PARS3_Desert.316725f9.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\flags\BAF.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\units\Amphibious Assault.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\weapons\Ural-HellCannon.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\zh\map_antiair.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\clrjit.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_CSK131_RWS_Naval.0da10dec.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\T_AFU_58thIMIB_Motorized.c9c5762e.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_trackedifv.mp3 Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.ComponentModel.DataAnnotations.dll Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\cls.onnx Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\flag_TLF.4152c32e.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\js\396.0ea869ff.js Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\maps\albasrah\heightmap.json Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\maps\chora\basemap.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\units\Armored.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\VBCABLE_Driver_Pack45\vbaudio_cable64_2003.sys Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MainHost\img\BP_PMV_RWS.81831215.png Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\flags\PLANMC.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\icons\enemy\vehicles\T_map_helicopter_lightcas.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\icons\enemy\vehicles\map_motorcycle.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\maps\jensen\basemap.webp Squad.ICU 战术小队全能助手v1.1.1.exe File created C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\img\maps\kohat\terrainmap.webp Squad.ICU 战术小队全能助手v1.1.1.exe - Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp msedgewebview2.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Squad.ICU 战术小队全能助手v1.1.1.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216952045172371" msedgewebview2.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedgewebview2.exe - Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
pid Process 976 msedgewebview2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1176 Squad.Helper.exe - Suspicious use of FindShellTrayWindow 21 IoCs
pid Process 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe - Suspicious use of SendNotifyMessage 21 IoCs
pid Process 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe 1176 Squad.Helper.exe - Suspicious use of WriteProcessMemory 12 IoCs
description pid Process procid_target PID 4600 wrote to memory of 1176 4600 Squad.ICU 战术小队全能助手v1.1.1.exe 81 PID 1176 wrote to memory of 976 1176 Squad.Helper.exe 82 PID 976 wrote to memory of 580 976 msedgewebview2.exe 83 PID 976 wrote to memory of 5080 976 msedgewebview2.exe 84 PID 976 wrote to memory of 5080 976 msedgewebview2.exe 84 PID 976 wrote to memory of 5080 976 msedgewebview2.exe 84 PID 976 wrote to memory of 2772 976 msedgewebview2.exe 85 PID 976 wrote to memory of 4960 976 msedgewebview2.exe 86 PID 976 wrote to memory of 4960 976 msedgewebview2.exe 86 PID 976 wrote to memory of 4228 976 msedgewebview2.exe 87 PID 976 wrote to memory of 4228 976 msedgewebview2.exe 87 PID 976 wrote to memory of 4228 976 msedgewebview2.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\Squad.ICU 战术小队全能助手v1.1.1.exe"C:\Users\Admin\AppData\Local\Temp\Squad.ICU 战术小队全能助手v1.1.1.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4600 -
C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.exe"C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1176 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Squad.Helper.exe --webview-exe-version=0.9.0+3dd35d74fba001e0495805b9c3ec23ee960a4a5c --user-data-dir="C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-web-security --no-proxy-server --mojo-named-platform-channel-pipe=1176.3188.49573090331650161473⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:976 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0x1a0,0x7ffa4dc4b078,0x7ffa4dc4b084,0x7ffa4dc4b0904⤵PID:580
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView" --webview-exe-name=Squad.Helper.exe --webview-exe-version=0.9.0+3dd35d74fba001e0495805b9c3ec23ee960a4a5c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1696,i,404490394186138021,17800925245741610954,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:24⤵PID:5080
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView" --webview-exe-name=Squad.Helper.exe --webview-exe-version=0.9.0+3dd35d74fba001e0495805b9c3ec23ee960a4a5c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2004,i,404490394186138021,17800925245741610954,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:114⤵PID:2772
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView" --webview-exe-name=Squad.Helper.exe --webview-exe-version=0.9.0+3dd35d74fba001e0495805b9c3ec23ee960a4a5c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2296,i,404490394186138021,17800925245741610954,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:134⤵PID:4960
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView" --webview-exe-name=Squad.Helper.exe --webview-exe-version=0.9.0+3dd35d74fba001e0495805b9c3ec23ee960a4a5c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3568,i,404490394186138021,17800925245741610954,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:14⤵PID:4228
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\DirectWriteForwarder.dll
- Size 490KB
- SHA256 ba087aef5460adf1f2da4995884821cd86ea82c9e1f2a25c98eee5a9f6ee0e35
- MD5 a7e293a4cc6b8e8feba33888ff79534e
- SHA1 7d2f838bfdea1d81aafa79bf7db92f7bdff9c77e
- SHA512 4189b743c4f48ad9cb63ebe779a9cc374882f327468c4d751f246d70cda35a0904ce920d3d22ef758f7d036df4f833e2288ce00ed75f8f6a1745856e6acfb096
- SSDEEP 12288:mlxRNCHstpwoII46tdR08qCh0JoK/3HaM9Fm:qxRNCHstqrI5uoeD9Fm
- TLSH T1ABB49E14B7842B97E81DC6BF8353CA92D63099F15302E7C7C68186A61E2FBC1D77B192
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\locales\uk\maps.json
- Size 705B
- SHA256 2d024f1b213ba7df6cde7f00412499f8c076823aaa3d3768d9ea0bf1382e0500
- MD5 399ea2d7345740f0cfddf5938db567c4
- SHA1 3e07066b3fd866cdf828998d82f396156902c77c
- SHA512 565ef1f991a5e30b98f8881e1118e1d6838e06e93e39b23751cef2f67f887efcd8c571f275137124449cddf2f8383d29a085b47dcd3faa6b8a3992637e89fd02
- TLSH T12C0126B0C4528CA76ED40650206A1603B30683A70E497BFBB31822CD5F0E93F02B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\locales\zh\vehicles.json
- Size 6KB
- SHA256 8d2181bee485bd094fbe4b06599a9dd44964c5782b2a2c15e44e08f90465f588
- MD5 ab5abc02f2ff469fabd8221863896838
- SHA1 273c32bf2eda380132e66595c92d269dc86430ac
- SHA512 a989ed76ed166b03e1613043a7eb5b5acb93528e74ce629260c3e70598e407992acf0a03624d4279714722b43f8153e48179ebe73a1a22526f271c7f46f31fbe
- SSDEEP 192:MbuuEKN4BJdNxZY/yBHf/PJnbvLfnpLnD7xNX5d:MbYKT2npLnD7xNX5d
- TLSH T165D1CD88E1509E67268B7CA1D5C6589A729319738F41F5BAB353478E0FDC0BF82F290D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\fr\map_jeep.mp3
- Size 16KB
- SHA256 b6d611834547930b095e8aad27358be090dd5413d7b3f85acaa4f3b6191425a9
- MD5 2ae3d462ded828389c0213b1c9e45a10
- SHA1 a7711c32e9e5be57eb9e5ace010f2f7dff89caab
- SHA512 5cf9d5b313e7d18115fdf7b02982e8e11e9d9591f4cdd289137a26630d4a461edeb88b3ea0905a4efbd96d0741d0d588e3f24d81786705c3b79aadecdb9a82c4
- SSDEEP 384:m9DHn4lC8xvrfJED8gUBIWqgQe5taX1SAMUuw0v8Je7:m9DH4lCoOD7BwjA07v8Je7
- TLSH T1C2725B5F5B36901FBA2399FA22096F56D56BAC5CDF30C0EDAD94DBB0218B8C15F0B940
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\fr\map_trackedifv.mp3
- Size 16KB
- SHA256 344764812e6454c3b79ce16f5c5a85293b83a58bf37d1cbd30e1d1df5600c514
- MD5 4d961183504d1bbbd1b357c36ae7e6a1
- SHA1 66617a578e6c0a3a1ed2846647b47fa9721c2a4c
- SHA512 289499a23953afc0c6c807d5628a74f76f3b2c17c0697131389743355bb20c72ae6117c63291fd93beace0ab8e82bd8570c7fedb4a7365d2b2b5da7a8f8580cf
- SSDEEP 192:93sZ5nlreSSwTmZJvML+8Xqq4TcF8NQwAO6UMKUTI58xnnhRd0QbrO0:GVreSdSZOS8J4TcqAO6UMLTXnnhRdTO0
- TLSH T17B7238D3A2B380FDCF23AF6B25C6672240D3765EE015E0D95621B7764196CDAAC1CC8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_boat_logistics.mp3
- Size 16KB
- SHA256 1382f96741b7e40306cccb13ad49c97d08996efbeedb16cabe483f0c45ba7c2b
- MD5 2dafc7f5743d17429c201da343cff875
- SHA1 3604952a1d649e9f2c98be6d1bd685f907b39883
- SHA512 2a5be119fe29f2a12863822115bdbf848b55caab5c0d19d9ee302d530c30e7cf9a38fd12e9dba52f7f66e34f981c44cadcffb9ff11acd6d60a3f1eec4f9ef8ac
- SSDEEP 192:kHv5lfzuS7m+YgxyQmoWkp0XuJerVNPeFMPE30TRsSwFpAXEP1aa1lHk0BI:Sb5Y6fKkpQmFMjlsSwjAXEP1XO0BI
- TLSH T146724A9F8A62405EFB62AAFE25237B03D49FA40DCB3260C9E861FFF009134929F43505
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_boat_openturret.mp3
- Size 12KB
- SHA256 13e50f1577ca3a49ba9ca8fe7819bc5505c8cf51e0c63bf3cb4d80bc3ef15fc0
- MD5 c2c25ab892e07c48713169e2eba345ca
- SHA1 c25e1fdcc18367698e320c9d2205ab187f8fc278
- SHA512 0e3c86e8d670209002c60678c6bbcd19884ee8cbacc8a929f3433e0068594ae014959c5d1ac79aaa839add7058085850723bba42d7b3f5083e0b9ab0f0e2b8b1
- SSDEEP 192:m5t4TYyDz4q+hfvqrUsdHLNIONdJxmEKxQ:m5t4pgD4NIOJ6Q
- TLSH T18942E6C3E273D1A8DA73ABBB74DA771291E3358CE025C5C9A4A4A335D48BCD16F0881C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_helicopter_scout.mp3
- Size 17KB
- SHA256 307760c5d8a61328d513ba6f5425580fb698619a70f2485495d0b3ba11e33b6c
- MD5 6de30316656e804e940b17f3850c1016
- SHA1 9d7dbc1b26398789b2707103784aea7c1af83f75
- SHA512 47d153bbc7252c424f81bf3225c2cfb61f549a25de4868ff7b0fa21be37449fb2005885a577657f51df6af26848785c909178e2acfd52b9d32aa36325a28ae8a
- SSDEEP 384:ji5rPEwDKLUsv2a/LQlHgflxxK9e66AhWpZE+Bz:G54wDWv2ALQlADxK9e67kZpz
- TLSH T1CB825CC3B27790EDDB33BB9A159B731645D33648E264C0C9BC34A334A6A2CE56F4491C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_jeep_antiair.mp3
- Size 18KB
- SHA256 b3eb293800852b9abab3f15d456e564f6a36094eb335178381152a565375d0de
- MD5 82247abb9e72b2e05b1b96e0171757c9
- SHA1 1029cbe1d8c644f7b85d85af6b23bab499ce2c0a
- SHA512 1e794d377a82b183b26e7637e63c123907828188e68e639850ce5298ed2eae44e02c02435f5bcf8e6986642899f0eb918cdb8c2e948f33614e3bd5d62f8d7ada
- SSDEEP 384:U0XTb3ZNmH45iZr7ogUb/38WUvCQAvz7y:tRNq8iZr7oLb/kCQYz7y
- TLSH T1EF826CDF1A334AAEFE2205F6665B7743C99F201CCF72A8DBA8459F7255578426F02804
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_mgs.mp3
- Size 17KB
- SHA256 7009d69b7c21ee6f8e93ffb41c44c863ebe78c84ba0cfcefa4b1de93c1e070db
- MD5 4e114ad5d4c5e42028894976952f9727
- SHA1 b233eda0d00b1eb46266eaab0323fce97e57e55b
- SHA512 211f514c17bae12e12186820c13c5605eb3186a60b83e7ac5deacdaa982803acb5fb9338a3799ea4ea22d76ea6dcde7afe08836307efadb173703a58703487a0
- SSDEEP 384:Sw4+BktqPNBKmF/SIPaEp75jYYVNXzGrm:SPMsuGmYl6JPVRSrm
- TLSH T16D726CC7A36341BADE2BA7AF20C7731399E37858E168C2CA5455F730E986CD02E0885D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_trackedapc_artillery.mp3
- Size 16KB
- SHA256 7e688464a343437373d81bbb63f6bc69dd490c66a50a36b34703095a31aa6033
- MD5 77f19b63a364f4264b5d5e232096aec0
- SHA1 6287870ffd850d4f38943258d39b3c33766fb649
- SHA512 09a1ad29a6f6b3db2597bfda336178fdcbf64f628190308c4a03f1c1b2599a9bddd9ed04a20b08c69962a6f6f4d99e83aeb274c7f37b73562a947ecde4b4b0d4
- SSDEEP 192:aku7qaBOLXsmKu3DWU0ap2prkzV5t/f+/tF5BGej/ddZFzHzEBQS:f88L1l36faIKz7h+l5GgdjngQS
- TLSH T184724AD36AF784AAD73BB76701DBBB2254C37859E055D6CAA1247770C882CF02D48E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_trackedapc_logistics.mp3
- Size 16KB
- SHA256 5cbeed83ca1c5ebee4e27961ace6704d2a862fcc38785af401b1c9e418d859be
- MD5 2ba4133a169f4cc8df3fe38f0e44d9b6
- SHA1 14308c2d0a47bc688a481785e5182a6ab17da385
- SHA512 d6c0e42ec6f6a24ab3d612421acfe788fa27e9165912a9d6bf71ea630a0b9631ea969f8d37e3b7af9e3c0d9cb0fa1210594e75403d0005ae678b839e0a16e6c7
- SSDEEP 384:b1AUrb8Mgzp82u9T9GgUv6J/7HVXxFaC/mnTxAwh3N:NVgzGdG7iVj8C0qwhd
- TLSH T1C2726D9F1763803EF93698F9726F6B07D48F784DCB7254D9A4A1E3B040A78A28F07841
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_trackedapc_msv.mp3
- Size 14KB
- SHA256 641e9947c98c76b748b2e169561efd1a9d7a54f229d712173336aff8397b27a0
- MD5 5c6d654fd973eac744599db045a28759
- SHA1 e190d28cbcfa8e6adc6091341355598e6b8931aa
- SHA512 44a0547ff16734e9c5d165e9eba755e2e8aa28b5b7f5b779eb5681ec176631d35889ff8103b6f569d78e2d760c4fb17ec15cdd370c02a52031608a23030caa05
- SSDEEP 192:Y/DoZAcZ0/2zNmQ1Ad1ae0FatuTL+svLY9YcjAc7lefy:Y/CAVOzNmQ1AdxeWuOscJjAEiy
- TLSH T19C625BC7A3B785ACCE7BBB6E20D7372211C33849E464C0DC6165B33585E2DC8AD09859
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_trackedrecon.mp3
- Size 18KB
- SHA256 1ba0ec8e5cd4820dbe2c6b1a068e49fea42f01d7330655072345c3778ee80c68
- MD5 713f44322e08bf223757057ec1d77922
- SHA1 6530dca0d7b1ea203dda6c2dfd08bcdc7310ad35
- SHA512 16e55b1ae25a2c92073be3e981c0a52fced6c457eb28085a96d1f44961735034dff1506a720264bafabdbe1b5f766919fe73d65907fc21e3e1e11490d9325e2c
- SSDEEP 384:Y96fHc5FZ7Qg4VAwW9FCHLPKYJD4aa9tQVcYtz:nHMp4VAwOF6TKYZO9ecCz
- TLSH T118825BD7A677419CCE237B2A61CB13A685C3725DF620D6DC6121B33495E2CE65F08A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\T_map_truck_artillery.mp3
- Size 18KB
- SHA256 6e82297f5f4f7fba4323bd22ba644d6d8b9327214eb093e48f984c501d2309d2
- MD5 badf51861598c1d792a01ed3179986d1
- SHA1 d39c9cc5bf4676ad64f9acff6c5ecb39e1a39991
- SHA512 5768efe6eb7c877eb61bd72b6654dafad5c07d0a0803b9b6a26bd2d1cffc8eef126aeab379c8d8c0e21adccdb1efc3b8b6bdb09e8c5217a58ed7bdc7db9a5389
- SSDEEP 384:uj03Uj6O8Koa27DJttfjJd7fnsG09aLTnES:uYDBKoa23BjjfsGcafnES
- TLSH T1CC826C4F6A03D03BFBAB98FD66197B22C18FA64DC67240C999A4D67112935984F43D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\commander.mp3
- Size 14KB
- SHA256 796ca4bded7d7dc439348e0fb4caec4396c2ebf5d9ac16f819cb589450c6778a
- MD5 110bdcb1a06b3c66f04082f3981ef9c7
- SHA1 da287ac62ff4c0c59f253cc959bd417e6048edfa
- SHA512 468e95be05a163a0844676351f191ad88992dd9256d0451f2105e42c4c8806f5171514435160e19f659076ed03dad5e2d4d2ddde46ad8bca232dfa32ec00b871
- SSDEEP 384:14eLbPL6esf7Hy3tHew/HE9Aho7XZ5Vbf:14eWtS31emXyXZ5hf
- TLSH T1C36228D7AAB316EDDA13F37B74EAB7460193B849E420D1C8A810F774D8A2CD47E1950D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\drone.mp3
- Size 14KB
- SHA256 4a64455f8547a94a0b2fd58c52deb32a33358a08f7f9016d3895af65d83221bd
- MD5 0e08c54879299ffb3272931a83440ef7
- SHA1 82e30984c7b20edbe42200b839c01cf925fb6890
- SHA512 26b8b15eb93f6f34ef41d2c905a27c3697e75f1f8af5780786d4033081296bc2b8270232392eceb0fc21d26a1af623cce4802604e3969a32e68e4b6412723111
- SSDEEP 192:k5zewPRK5njL7xpq/r+ig8YsHEEtBf5h3LWTYExCXCJtyXztNE0Iyn/Di:uJPRKxq/yigt3YBf/Wjeuor7/+
- TLSH T1F852498B4A13802FBA27C6FEA35A6B06D08FA10DEB3091C7A894F7B5515BCD44F0B421
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_antiair.mp3
- Size 16KB
- SHA256 5cf858ef6a67e32fc11eef74332dfe3ca5b8d27c13af324756245cb848786eff
- MD5 3498341e12e25c3368cc7c9e1fb54304
- SHA1 651d39cb41670e9b14705e2a15e2066325aeb19b
- SHA512 f57661eac6ede080ddeae29cfc0c499c59f7cc50f6cc5e3b5c34779161853c0e79c64dc3bddaf889285f55d882bd10e6896950bce9a55def604b8475d29875bd
- SSDEEP 384:KCVgD5+YmfhEe3UPWBmfbosnTkxWdzyQlYKMy:KugVte3eTkwdX79
- TLSH T180724AD3B2A7819ACA677F6B31CA670225C3310AE166D0CAE579E23160E6DD52C18C5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_ifv.mp3
- Size 14KB
- SHA256 bfc6cc7b39c3293e9e297117f351d404da91eb15bdc9ffd8c199b24d4f082064
- MD5 1fe97c9cfd79749287a0c48426955c34
- SHA1 ca69e677caea5df2d76f5e0491ed23d056553711
- SHA512 014196cede7975ed716bd7072ab2eb1931ad66fa4c1faf2bd16c14cc40273d12d3fe4ac8726abb38c490dd8134e17b22aefc00f1b33661b55c5059a08352abaf
- SSDEEP 192:yRpIvS8KvHoxS+YZs+1JDxxYwXQy9e9JJBtDbvtJDXf8qR6gF8+vz:GpIvS8KvIxSft5JQTBtDbvtdXf9rz
- TLSH T1B5623A9F0B63942EBB7591FD725E6B02C4AF609CC73195EEA4A0EBB58083DC64F23501
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_jeep_antitank.mp3
- Size 18KB
- SHA256 99b4ba1ff488dd0654d31dd4db7301dc56464cabdb16905960ec09d40ac2602d
- MD5 30578c39e8a12760f4c4836ae19f2d1e
- SHA1 9e836495236c628dee4da8a2057aef6a1800ab3c
- SHA512 7e95aadd209c810880faf6313262685f7234ec0b8f7000d21367c09c8a646cf369a4d5f098f6a4e3a7cb4f110670cf00c69bab5f6c1a20d60f870be4a185a8cc
- SSDEEP 384:5N6oosR+skX52CJd98gaiMV/glpw3GMW7jQ8psCfu:5QooemX9rE2ALCjQ8xW
- TLSH T121826DE356B7886CDA27BB7E21C757070AC3755EF2A0A6D89062FB3401D6CE02E5C94D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_jeep_artillery.mp3
- Size 16KB
- SHA256 d12376039ab89b8a061e623ce11dabd010eb1727f4a2422e0f8d67130b493079
- MD5 4d297f271206d33a7880c1d1b279ac18
- SHA1 b6a77117e812538321b6b8ae97d21e3f8d0d368d
- SHA512 5e77c065707a9f2042b2772cb4719c53c752048ba9dc4eb11b7fde25bf6efb9f9ffe8a7c51bd3e6d239664228e9306e7b3e267b31a3140de3dce6e37fb5378ae
- SSDEEP 384:3LK7wiB/4YHw3urt1wzcrOfvepiJOB+SAz6B:3LYviurS8O0RYSAGB
- TLSH T1D5724D8F6653541EF952C5FF12572B1AC58FA00EEB3544CAA9F1E7B86123CD00F97894
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_jeep_logistics.mp3
- Size 16KB
- SHA256 8e2aefdc086fd2ab6313d8f463b7e3fdc926d06c4b2d6e5920983156108c6caf
- MD5 4108e0d92ebeda9c6c0cf3d124ea1679
- SHA1 0ae36fdebba5de747dfb6a7c811eae76c1d6a686
- SHA512 be7ba5c7e20cfc40c0ecfd4d1aded8ef9f862290db27c5a10589a30c07151a12686da3d71028a6efade0cc3246cbcfe3a6237b4cd3de65178207cc590659d73c
- SSDEEP 192:kW+m9te4KwNlXFeFJsVj/844unlUNkNcYRV61U64TpBPDJaiNY2Z8jCYKd:KlwNlXmJw/m2UNOtRH6+pPYLjCYm
- TLSH T1A8723AD376A791EDCA66B77B30DF670609E3384CE52880D8A560623490E3DD63E6CC9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_jeep_transport.mp3
- Size 15KB
- SHA256 e30324a30cf68756b8f9847dcbbf3d9ffa614abaa5bed5660ae3c4fe32aeabf8
- MD5 c835045036d3a521279a98141426b859
- SHA1 886fddbe57439d459ac7c814f749ed0095a5701c
- SHA512 792685b0c66e62e207588d53460cb4bb13c8ccb8ccb8f967b7c2e3ca0542ed8fbadab4e45eebed7c67c8134d9487c4a227f4ac9d4a220b14736dba965dd7f4f7
- SSDEEP 192:d626YnKqSYMSIsFYADlnRzpvdur7jrrTKhXP3OwzfdE1GCh6uNY9BdYP1sPq3h+D:4I0xMvljvQrvetOQfdEUW6uCCpxNO
- TLSH T16A724AD36BF3949BCA23BB6F64CA736614C33408E868C4C9E16563B1D4A6CD02E59C4D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_motorcycle.mp3
- Size 14KB
- SHA256 85f81960c33f710798af2430b9313124f8f431964318237fd596739ca3fedcad
- MD5 27f8e70f77b08412f5348639867d4c68
- SHA1 c1781c07dbf1bd8f92bafdc84acfc1897b6e8ccd
- SHA512 4e7cdc3ebd22eb72c6d5314380567fd27061b75ae19327c2215fd2c53a1871c1c3fd97d3c02af6e715330b79fee22ee5e5a4c8ca557ad44374992cbdd6698a6f
- SSDEEP 192:GzGoYbMmMvZ0LaREZm+YLW3O2j1ggpMGN7fTMh8nZU:HPb3MvZy+EZj6sVNbo8n+
- TLSH T174624A8F5A23A2AEF716E6F9622A6B93D0CFA54DCB3005CA69A1E7F11457D910F17800
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_tank.mp3
- Size 14KB
- SHA256 cb3be6fff305b9ca8ad3d504fb3200f80f393a6ce4c945dc8be0780477e0fbab
- MD5 8ec080d729c42e62e8a5e9c473b9d968
- SHA1 187e1670c2158ef259b585ba2a3ad72bb00cbe87
- SHA512 47dcb2b53976e9073717aa0005018d433c2a91dcd3a2fa248ea878c674bb7921fe32aeda77b3370d883925c7d79f4f42860d31701d32205660ea90f05952c33d
- SSDEEP 192:G9pf1F8Oixymz1MSg/OzA0ua5sL0ltSOAcO/CwRYcqlqTaOAv:Gbj8xQmz/g200uXqZkqLcDTaJv
- TLSH T15062298F4B53919D7B27C9FA324FBB02D1CFA20D9B7080D668A9EBB44123D825F43560
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_trackedapc.mp3
- Size 16KB
- SHA256 9effe435929c8c36a07dafe0e5cc015541b83663ef765b5b03f8f3c7caf567d4
- MD5 7833abc1411b913f8a09882284cc042a
- SHA1 f2c1982bcc77e6c68a7fd9e001ec012f9924b74d
- SHA512 a74390e04b0e71ff1dc4558a69d6dd9f6adaa61f7bd8e581c9cf90b333e466e378e7963b0a2dc72c2f7197e7d6ae17a67bc69052546a2c71f7a89f8f0e7b9296
- SSDEEP 384:95pveoIzLn4Mm2RJ9ZJvVzZgWT4gI4eUep2Q6pdfz:NveoIzFZveWT9j97
- TLSH T1EF725BC396A3A8E8CF26BF2B25DBA7120897740DE164E0C49229E77284C6DC46E09C1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_transporthelo.mp3
- Size 17KB
- SHA256 5bdb2e253b28fe187f7652042b83ba2944c0e37142c83e6ba84e36b52e72550a
- MD5 fa8a048c15ea68d9a7531d6091915f2f
- SHA1 875079a34c04a1a89b023ede71a99132e103693f
- SHA512 1a5becfe11b1eb9eb7c762370f088552c9bcb640871007e343c63637666bad1f0fd8b7e335692e0bfcd5355a27a115543ba2d57cf70a34bf1ce8db8980e2191c
- SSDEEP 384:VzW4UaQiCkP6TF6HiEtxiltTMKuBpats3G:VzxQpk9tx4tT58paC2
- TLSH T11E826C6B6667957EFDE289F561162721D0EBE64CC73489CBB89AFB3810238E41F0341D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_truck_antiair.mp3
- Size 16KB
- SHA256 d3d8cf070354de3d75a3bb49b0e655a00e34625508ba9b6915356a35606d52ce
- MD5 b65c15d17e1989665d88257ba11d7fb7
- SHA1 c52bd79c4bff5e255b16b42caa4748012542da4e
- SHA512 73d0921a9d2e1e66e0df4b90f4c6f3cb240efe5c8280675f36755e034a4f143de8d40ed075445421fc3306b539a921d7e512c4a1271ca86c391d883bf80fa457
- SSDEEP 384:X42OTfosl07EBKE7AoLn2rHJu5nRV+cGTF:X4TzQgEob2In0cGTF
- TLSH T14F725ADBB2F3D4E8CA07775B61DB637A82D335099560E8CAE534BBB04583CC86D1CA08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_truck_logistics.mp3
- Size 16KB
- SHA256 753f237400e168d174d4fb3b9df3425e75ed76eea789051d3cde875a5f0d0275
- MD5 91a5f41d719d5a24c135e4e9964a1df3
- SHA1 b420e542a835ed02e87321e8d8495fc87d8ec90f
- SHA512 512170d3a7ab8e9a54b4cff87f7b3cbf02e19f208f36efbb8738280060a263441fffabbcd2caf7be6eef59e15c29fe92b171849ee7c9ccbf59a80cc2cc639259
- SSDEEP 192:y8BbK8LY8OvUdgY4MtnFUzi8IUv5Tk9UksSKz8LIMj88klezf9Ekg5y1iY:1M8MveFU+8fRTenzt8NexDn
- TLSH T1F7725CC3E7B7A0A8CAB7FB6B21DA2B9758C73489E564D0DC7464B7308486CF16E0584D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\MapHost\sounds\uk\map_truck_transport.mp3
- Size 15KB
- SHA256 495f801e8eecb0405fc7cb26acf948cbb7daa34ad3f078ff4539cd220d894738
- MD5 8ad541918fff6b1e2a9e425a200dea75
- SHA1 2c8c2853445e6d54f1c2007c62268502ecb368d6
- SHA512 d5348141b103d4672a10ac29790f99cbf03fea6e5137d2b72aac3911c9d9087eb4939c8f52b1f719f61ed684b27f49737668feb2817c8e305db61de60696d836
- SSDEEP 192:kBCAAhxa6QnqHHfMtRH3Nlqi8t54New/HWZPMdhOVD25DWeSzO2M:GAhxfQ2fMtRH3/f3New2VxFBS1
- TLSH T1D3726CC3B5B69BA8CE33E72F79EABB5A00D7B159D460D8C8E070A73440978D51E41D1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Microsoft.Win32.Primitives.dll
- Size 15KB
- SHA256 d2ece2888e84009fa0d802b471a8a79a922cb76069a6dc083251aa258a9c3ce9
- MD5 6de6a4cf7eddec4902c38d74654d758b
- SHA1 86088d246dbdf92d9cda93650d4baac5cb984fb1
- SHA512 9c9e430192582b22769e07136f9e2a124b527b541b7e44063ebe0cc7aa6352e179b9a3c1b7b9a287ad1c1edfed0b58d904a67044387d9a9c9158bc6c303bb89a
- SSDEEP 384:7iLyx/HWhPFpW6/hljHRN7aYD9c7Qq/R9zZShDhy:7z6DDj3D9GQU9zZL
- TLSH T193625A91877C5247EDA75EB0C6A6DA833C3CA7C759809A6A0A84F9441CA7384DF3163A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Microsoft.Win32.Registry.dll
- Size 118KB
- SHA256 906b6d70e1630e7eb1d565f35eab0a72a3851a5f8a4710fd8c4d5b24e788e361
- MD5 b22aabfb0db3119a5e4e39e7c807eb82
- SHA1 82994ea2060f61ad07f0ec385f3a0d0485cf70b4
- SHA512 bd9d5cb6639166b9be1739b57587a182b0cad6102166aa0c2b85b9a1fcbe330269436a7d89d27af5bac3c8c1b94690412f89e9b410ed676edf4a26a88e6028eb
- SSDEEP 3072:AU11NXwrxR7wECisvqzJSvEVcULViWci51drk:RNIBFC6zJSvEVzqwS
- TLSH T169C33A1177C8430FFAABCA7988628985E172E0871701EECF96C5C16E3F5BBC6E671611
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\PresentationCore.dll
- Size 8.1MB
- SHA256 eae7bf6e97013c623cc4b562e4a686bf39200ada32257ee8936f52a70523a9b9
- MD5 cedc81b50cd975d1c762ed7e48b3a8b0
- SHA1 55501b93e63dc6bedf4bf414b389b6a22a89080c
- SHA512 8a89142a4891e5780c3fa0518ed83dda0c232d1d574d1a42070909f75a154e76f3b3a264029f0e4c17401e69c8948c365045523b1a156aa27a8f3315f41a501f
- SSDEEP 98304:UTcNd7eb9hTERRvMbxZwOroHy7xAz+BianjIhwTE6b4y6E94s:B7eLyYxZrrmanjIhwTEDy6ns
- TLSH T1FE867C14F3C40A15E3BF85BE82A34622F671E0535315D1CB745CEB292FAB7C1A6F6262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\PresentationFramework.dll
- Size 15.4MB
- SHA256 602e73aeab3131a14f6916b8307e057929a4b61326492e2bdb850587061f1a1e
- MD5 b1c81c56535dbd1447526e5051862a00
- SHA1 e8a044d8474cf6bc1d2503429a3fe9e49e84c8b4
- SHA512 df810a2422557e695751992db78b00190975ebfbd5f8ac3fe3e3992acae851509d43b421527342c2550d539e81edd39a64e95302ef0dea3dcb677f0ff92e64d5
- SSDEEP 196608:EsSCQJQ9kTMct7Yg/kj76xPgkTSZdYkxYA208Zhd2PCGv:EsSCQ2UM9g/kj76xPgkTSnpJmWPH
- TLSH T1D0F69E2593DC4A05D37EBEFCD2634102E9F0F4926B32D4CF8916D9092F877C1667AA62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 75fc0d383ea009ea9453a4589fa8d88d149abcac371bb5eb983d6ece8f1243eb
- MD5 a5e9f16c6a381a2241bef8eed1c20309
- SHA1 574d1412c55cb2321d2d6545cbb439368623e2a5
- SHA512 d9509720807f9298caa1af3abbb098348726700815559febd3417d929e57c7839f498391e92e2a02d8c984db9bf786d25170471fea71bc64c9329b29242244e7
- SSDEEP 24576:Tl8W6eU6UPXhA+JYCqX4T3MJj7OQ1Niqdhvc7PgNfb4i7fokJMpw5i2k1/m6eg9k:TH6emPXrYCqX4T3Q1Niqzc74xb4izMp7
- TLSH T118453A22D2E642E4C47FC1B8C646972BFBB17409231C66DB47608B652F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.deps.json
- Size 76KB
- SHA256 b3bd9797fecd1da0f6efce784650d553275352adccd755468276ea24d6fd160a
- MD5 ee026cad1e805bf525e6832a83e5815c
- SHA1 90ba2f2377b86c428ab8ddb6ba675188483b525f
- SHA512 0417b89626e41e8ee0a20634659af00f44a62fb04aa64a25c270b6213ccef522b34293b8b34eed90c495f43931ed7e30136c1135f3f5ee759f5b27ce9607a4c6
- SSDEEP 768:QCmwil9vR6fzhskx8JPrGuZpyLREByDnCC7z2wKKsX+QVewL6p7Ati:Y9vR6fzhskx8JPrGuZpy3DnCGz4KsNA
- TLSH T13B735825D8504EE70539BBEE68794282F275036F6044284EB8FC356D8F77EAA6095F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.dll
- Size 380KB
- SHA256 15de1dd34fcfef106891aa241680737ed7a2caf38876a5bdaf2612b3a6347c90
- MD5 e25c0fa7dd434bbe8e23af65927a1c50
- SHA1 8d438caf3d70d7a175c8909f7f81313f23b54dfb
- SHA512 1475659d88b57bb4af94dd09a4b05f9abb8d2073ab18b45555a590caa52ebd397f8c2f0c9ce8dd159b02fbb14066ae069d43c2215f0190631138504680eb2e28
- SSDEEP 6144:+hlfLgEF+eG7NsNH/hSijK9tg4otxLQiiv2+y9b49LmaW5MpFLRi454pRB8PAkLI:+zLgnShle9tg4otxLQiiv2cmaW5MpFdw
- TLSH T16E84AE1033B88A26D6AF4BB9F020165583B2F54BB56EDBCD4EC994ED2D5334A8501BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.exe
- Size 223KB
- SHA256 5015fb61ea4ce42917cb04699c259a1098fd7ab547b04294e955a16ceb45232d
- MD5 c0dbecab9ce90687d121305ec841e0b4
- SHA1 65b4e03ee5045a46abc134b6b76dfb5fbd96bd52
- SHA512 22a363b07a1351a6cdb41a7b61ba897901c1f74e73091d53b7cf4b4e69cf9f86b75cc57ba7fb995aa7f800183f30fd7e4f031ac8de47eafc8c4ebb4bbc5c2466
- SSDEEP 3072:GqvmgiYSo4k8uIPzlSRwa/5B26mdIgHo0BkLaagYL7Y03kylplFKQmUW/qLJ:G6ok83LlMvvuIgHtBha5NfuoJ
- TLSH T1A5249D07A2A850BEE1B6C679C9924C41FB7378598B71A3CF17504A761F77BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\Squad.Helper.runtimeconfig.json
- Size 508B
- SHA256 9441a0ed2ca26c7cceda97a6058c5a02e60bf916743bea133dbd869dfc4d6abc
- MD5 7bd0725d79f187d2d6777498f7b9e62c
- SHA1 eb123d8336f359787f2c17361414fe812edabbca
- SHA512 fc70af59085ee55997bc584a0bb5aa3dbfe663378ba029f884963661c553feaecae86693f562d1da820708bb9b237c0fe8a6000d9e8f8ee6af3cd6ac66e58806
- TLSH T104F02779D5246D731AF42B7DD02AD4C3FA30237700444D1279FE080C6F7A5A66022F89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Collections.NonGeneric.dll
- Size 102KB
- SHA256 37045a5334be120d61488fcd1d44e6751598e036c0cf6f5e4a5f62521d53aa22
- MD5 7affd9231d621e2b08ebcba43e389bd4
- SHA1 89ce10bd12e6b43ae824843f08d9e617e62f4675
- SHA512 577e8d7464fff5ff81b87816547b01cf031265e5e8df9054ee10da753fd45dc3899c7db4c3b2d207ab51cd7d84f9b948f45938997a640f5e669f3607d70553d9
- SSDEEP 1536:mo10tJVDX9L1IbwNC5IQ7XVrMZqz9ACWyUdKXVWzs1:mu0dzN1Ic+IQLGZqzKCjWG
- TLSH T1B2A3282637D80312C6AE6BFC81938A01E676F4D26717D1DF1618A9CC1F9BBC2C6B2153
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Collections.Specialized.dll
- Size 102KB
- SHA256 1fddf55a3f33a29c7ab165f961403669990043897d9f7933228f70b313500d1f
- MD5 32be37fbf350f12dd5e1e3ebd95362b8
- SHA1 c2499e1bc4f07bcdde0d1f05d52de71aa74bbbe3
- SHA512 4707a14f3c1d2002664f89082e580a06fb4f2b3e4cb50807fc3fb996e3fafae53b4ec2d09b3b31af65e2a47f3a261eab4182316e03840b6ad299aa26c670375d
- SSDEEP 1536:7txdRfAjP9WSJLeI620hCYCARk4YIAO8xocgr50rd0VIOgJdyLzjO:7txfATpeJDPAOSocgrarOBmdse
- TLSH T1DEA35B2433D84B22C73E92FC85978941E730F1E31362D2CF1958D9891E9BBC69B7612B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Collections.dll
- Size 254KB
- SHA256 574b3a1e5a3e33f0e03ba345f314b356bcb17b2e89563adbbf7551fd6dbd30c7
- MD5 9a084afc75acebf178bcfa82a7a9e2ca
- SHA1 4b82958a589ce2917c6fbfa92b02ffaed06416dc
- SHA512 f208161d33e8ee4f1a21e6a5f99c8b2ac33296f929844bd8992f00c497e74b752130dd83f9152b514d86dabaf259fe100b1349626041b78def5da34bae6933b7
- SSDEEP 6144:YznxoXLtDXDiKNYX8qTKfAyryS1rIgQ3py:YzxCtDXDiQ+jTURrhF0py
- TLSH T17B444A2A778C4E12F56F457EE663C012D7B390A30712D2CB06BEE5840E97BC2BEB6155
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.ComponentModel.Primitives.dll
- Size 78KB
- SHA256 524178733a71605b671b566e2c5512191c2f84231972c7a9323cdb334a404201
- MD5 3700a9e46eb5ef476b3e80fea0e00d5c
- SHA1 0276345d9a37886616eb19f39fc18156396cf67e
- SHA512 9800a3c05c5b00cdfba4ed9d416a51f545c938987e1ca2031f08b487f245874eb06fecb2e3e7c192db590f35b7ea60f611dd349d95705290f7914f8222e57b22
- SSDEEP 1536:sE5/UZMu4Yhd+Cv8A/oqevD2ols3EbktHW3wzDn:sf4y+S85qKD2om3Ev3wfn
- TLSH T13F734B1823EC0216EBBD467C9573A921A574F6831713D9CF4AA0D90E1F9BBC2E27153E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Configuration.ConfigurationManager.dll
- Size 431KB
- SHA256 a3f085301b756731545df7ad073fa4e28dcf1565e6cdc5be0ea05dbd7cf0d797
- MD5 e1e29069b6a4efa82ccbe6d9ea5c4fe0
- SHA1 7aac061d5bef052eec0afd0a844d4abca84555e5
- SHA512 cf03cc502a61a371b59ec15f0a5c1daaca81ca57d1a4ff49e6e06369c7c5ba85c82b49307d99ea862326a896d75de4a0f4c6142619af016178e7fd7567826539
- SSDEEP 12288:zK+vtmMbtze6Yhe0AQ+2/NVQ8GLa0Uh55T3lEC/IOPbZUNZz0drffOsdV0Z8oAp6:zK+vEf6FCryZ
- TLSH T1C194F62633F8472FF6EB0F35E43950145EF1F99A2226D74E5995B09D0C27B808AA2377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Diagnostics.Debug.dll
- Size 15KB
- SHA256 39b3c6d614edfa9e46b94863bb8f41aa70fef8d9dd1615c53672b3385d26e3b2
- MD5 7019c503abdb40f1805944dfc54c24bf
- SHA1 47e702923eed9c79d19dcfb22f1bf6869b35dddd
- SHA512 3fb26fc5ea8afc7e30f690e49acb2eabd5da9faa116e896e2d17987f9c3c57b5715856eca094d235e48743b3cc44054b24fd909bb874a2df89fde5f1e18da589
- SSDEEP 384:7aW2gmWMBPDHRN77+KP0GTYAsR9zObV1HT:7RkrP3Mj9ze1
- TLSH T199725AA4D7AC4203EEAB9E7097B9CA833C786BC75D21956A06D1F9050C63785FB3423D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Diagnostics.Process.dll
- Size 330KB
- SHA256 05d7f7bb7b30da3dccc19e95b395ddfbd662396e3390ab6aa6a0a387d228d7a7
- MD5 3b7b910357f8579e1abcbb29a4fcb8bf
- SHA1 295c1819e01a0e641c0a26d7970caa8c82e82598
- SHA512 65439988efac7254dcb6a65994b7d1b71a40733e88345127a1ea20443fc85de99412e4e75b8137d19667f800770294283fc02d3d6c279af0f98fb8a717188c92
- SSDEEP 6144:tikDCqaP75vD9eEIdghrT9jb3b41PlmFM3ZTdiX2JD:t3DCqAeDdqJr8D
- TLSH T198747D247B980506FE6E96388C63D502EB78949707D1EBD743A0DBDA3F4B7C2E632116
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.IO.Packaging.dll
- Size 286KB
- SHA256 49ccf47724861e33f96d857016c057357cae5ec1e322aef64e8172ab94537815
- MD5 288768fcc0c3009028df8294e3f82f3e
- SHA1 2d8a53cab3da17d79553981e3db80e5321369f44
- SHA512 cf1b1223330feaeeb9129667d587d477c22b47b71ac0d8a580691f73d83bdc369c162bbb80856a402e6a3b8d0f549eb657080f0dadd109fa3198c36a47098ea0
- SSDEEP 6144:89uGGgTmHmNRF7bLn8qsEYk7GkB1df4Xs:89yXmNXn8qR7GCOs
- TLSH T14454182677E80607FBBB9A789573E011E638B4921761C3DF46E4948D0F97BC18E71B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Memory.dll
- Size 154KB
- SHA256 9a3c726a0fd415df68b98c3d0a0b8b60d48aedde12aabd48b7825432f911a2c9
- MD5 4fc9de73d7b85055873be15e37133e27
- SHA1 41c6e54247fe6cd0c21ceab6db69d8a6c73001aa
- SHA512 b78767b9f9997c7111bd373cc96bca1ed33de1b2dc3af69f776b10aa8a3a355269f7a939efb820ab626aa768d8f14f52a2d0f8bb26a0aba2a9847b05a30249df
- SSDEEP 3072:tHyyvN/j+0sbFbqX63vwZuIBo7M5F8966oYdiCBuqmwqhtTihdCwV:lvCb6oIBo7qDGiCBulhnK
- TLSH T197F35B17E2980657DA3FCAFAAD625302DBB36152572092CB4CE4DA841E53BD0FF734A1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Private.CoreLib.dll
- Size 12.6MB
- SHA256 2e21e1ad264783854e394ce2afdafc330639af9387a0557025627eb0426253ab
- MD5 17c293fcabed201fa0e5a3d7d156446c
- SHA1 3d23807eaf780070963a827e390dea2a2ed7e46a
- SHA512 23cdd159e14421f2fdbf77e8bcb967e8bf511d6aeb632bf559e91a045a776174be9d7d70d60bfa77ff5d4b35fbd61c73d001f233cf0fe38821de5ad8dd5671cd
- SSDEEP 196608:Rmhw8mtl5F/v/M5ks5OtsFnyQvENT/k9B5M:qglb/vE5L5OtsFtENTaS
- TLSH T128D69E11B3C89F16E56EC27DC2635285F3B1F4A2135296CF980DEA882F13BC15B7B265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Private.Uri.dll
- Size 254KB
- SHA256 f1e9986e588153ea3a7edc490ae84246d4dc27d121ed4b34c4317f4a588ceac7
- MD5 55788288c3a4abd334ad07b1277a6d01
- SHA1 91be213b3c09a73cb354a3deec245b1a15f99934
- SHA512 4eedeae6e52770c31347c8390fe1a86f602795e1c06bd11152456b68843429b0abc062d666dfb65b750ece5f48ba756a063f12cdb25bcd95ad4c1507cc4565a1
- SSDEEP 6144:/fAAcZfInBPKCeDc6Ci9MG3CMeVmtG9FsGu6MyO:gFhDciMG3HamtG9fuVh
- TLSH T1B5448D25E3840E67F73DC2B881D3D112EAB270665315F7CB0AB5E1821F177C2AA36963
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Runtime.CompilerServices.VisualC.dll
- Size 30KB
- SHA256 560dd7d4a61331120571b1779074119efb25e5ed37858792474c713b8dfd8344
- MD5 5d7c6ccdcc8c3d1c0162dd0a97656a50
- SHA1 b762b27c36be0e053001ec047e26b1cf40755bbe
- SHA512 e8014869e1dc076cd2d822f96587c1ef04b0ef33bfcd5199c6d834cf51c9a84899fee0062bdfa18fd6e8ac73bded6011b7e6d94ad516332894dc74b4e81a2b95
- SSDEEP 384:UWsvLWV0jxoemVIvvPDHRN7HI3ucjR9zadz:yiammzo3uG9zS
- TLSH T1B1D25AA1DB98C222DF6B087096F9D7032D39F38A6B525BAB018DF1065C623C49B30779
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Runtime.Extensions.dll
- Size 17KB
- SHA256 f9efeb423cf180b5f264ebbe91babc8e5ac81151be42706b0f498ad9079ddbf4
- MD5 564327b81d7e918820627438dcfe53c3
- SHA1 50bee3ac560821582c67fce1591f9d44471529cd
- SHA512 d32b957a3419827e38d201eb453491690e41918138a4520cac1aef1c8965325644772479a3485fd15b1d535a076b6c7ff47180e6c98f73b2c2bc414b95da160b
- SSDEEP 384:b/Sj5rt9x+jldW8ZNWY/hljHRN7LYfkp9R9zYZca:bqj1tuVtDjsfC/9zw
- TLSH T130823BA69FAC8143DD676FB09AB6DA432DB873C26D70856F45CAF4441863384EB31738
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Runtime.InteropServices.dll
- Size 94KB
- SHA256 03426065bed16593440242ff29c625824a4e81c64bccf176edca9497885d4f42
- MD5 194fd6835972ac84e1f90ce9a9b601d2
- SHA1 baa3dbb5a6c4ee51c92426432a9ad14d0e126665
- SHA512 7253941c791bd3aa7b3976087dc6237a1a19b38bee6180f49970baf495452a0d9dccecdb154b444109dec83bbc2ce9da5680efd408cf0c003b1e3a8109567632
- SSDEEP 1536:vA6PupEelCtJfKS6+67NspnSPM+l5+MkmVVKWH7byLz1:vA6m3lCto+dSPM+rfkm7NvsB
- TLSH T159935A2037D8066ACA2A473C9C779D50C9B2F6C613A2E6DF4781895E1D9B7C0D3B13E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Runtime.dll
- Size 42KB
- SHA256 5578c98568873d24cb60da7c8a4f45dcc9f99f9fbc67f4b22da6e2877b6b72df
- MD5 a6106d3720b37304f0950d2b568d0275
- SHA1 6bfa7ae5c44007ce4e9318b583e452dfadc45a01
- SHA512 1bbc4f915ab8049e734faed23ef8630f15c129116569c16ab3d4dfc5b76b53b6897f1b7a62e8cdd239d4e781bdbbce4a91e63735de5fea85eaaa793d48818a46
- SSDEEP 768:t+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoDLm:XB/LuYdy50b4b7RSHr53agzOeRE
- TLSH T14713C375AE485337CD8BAB719C73AC810DF633C4047A197ED88EDA5A13863648236B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Threading.Thread.dll
- Size 15KB
- SHA256 e6fb545d4e6cf63f4f8f1e680f77ec6e699fe41a78f271b09606affb372bf1e3
- MD5 0fea42180455dbad328093ce99d5438e
- SHA1 64ce228dc56ebc6753841865d519a688b130a989
- SHA512 1159da9ca35d63b79132724bdee91fbdc3acf63f0638a2ee45b5f6538a6396d0819b67b720b67845dc7b55d17651901b5106cc65fa3cbe3edff9f98514a35460
- SSDEEP 384:oV4z2Ep0c82Wc/7WU/hljHRN7c4wGOrjR9zG2o8p:oVORFvDjZwGOrF9znr
- TLSH T173726CE58BAC4247DC771E7092A9D6833C3E77D369948A2A0AD1FA451C53384EF30738
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Threading.dll
- Size 82KB
- SHA256 82c123cb14b69307bc6437e6cdb2b7d0af7df46fe843533837ba931976188c7c
- MD5 4a410ddab76f9c5fd838eec09b30832f
- SHA1 c7fdcb52001648314ee88b3abd787c2df4b4d8c2
- SHA512 c99885b8d5852aac4e890c4b875e032f1598307d67666093e23e86ff274c90b9916244d5acd6f135de4bdb3968319cab7784fc4f991e15dd3bc4c00149ddd95c
- SSDEEP 1536:V1goICPLOImrmODZcUBeZ8j0GEH9wdl3XGRm3LGgqeSzgi:V1go9PLTFtZ8j0GEH9wdlGR4Gg2Mi
- TLSH T19A835B1A7BE80416FA7B47F9EA769906C471FCD20710C6DF9059900C2E67BC1DAB227B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Xaml.dll
- Size 1.4MB
- SHA256 c34276591747aab1224d10b0bc4d4437427cfdd9a825e1054f2c4ce50aea293b
- MD5 73521413ad892820ecc71ee8d06e61d4
- SHA1 eeb70fd1342a9cf5653d7056ec03df4151b69336
- SHA512 1aa6d3c31154a1b77b0fc0285732a6375067666bed962ce3173c9cad64abda9deb9bf2efc1641e3546dae1370ea2210e80e4212696687fd936923f9646a7a002
- SSDEEP 24576:3UNBQWY7d3p2Zz+I6hMza1IOME36EPQR8dqE+N:3UNRY7d3p8a/FqGQP
- TLSH T1E2655A2BABD88615CB7A83FD86A28521D5B1E1472321C1CF4411DEDD2F877C3AB7216B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\System.Xml.ReaderWriter.dll
- Size 21KB
- SHA256 86ab224e83736b171dfc5620473a53fe6ef14081eeec011930a140197f70e921
- MD5 ca36575b0b25846a12b68c0abc8e63d0
- SHA1 45f8f2f4ce84c8a31920462a99b6f2aafe938b2e
- SHA512 ec9915e81e62d727da4cf0701b12593da2cf6ba8b63eb93206119c2df4524a0f3d496255a62d3ab00e762f32773f61e461744e568216f20e3fc037cdc14c1471
- SSDEEP 384:R1G5qkxK67ex4FC67W1iAWV/hljHRN7vA9bFs0R9z1NJ:36LZTzDjvQZs49zR
- TLSH T153A2E7A08E64DE13ECAB7B70C6ABD5C33FF4629220719736D585A50B48A3385B737724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\WindowsBase.dll
- Size 2.2MB
- SHA256 2d66bbb052242133f8eb69324962bdee925b4b755a58859c9a3cb385d5bb2ddc
- MD5 0693c482f9250a859ccc57eca83ddac5
- SHA1 98e151407cf4cb7e3900aadb9713e99b8dd755ea
- SHA512 305924a9c33c1cd0e921ec9aa5172a58f6597c7ab85db1c4ebcb69848f83abe9e2e1a12a5e913b8c906bef2c080beeb52b6dd892b582bd3263d9f8365c2169f2
- SSDEEP 49152:lSgZ/FZzKTYMebksxP6AjRIOuou82SxVGG2hFGYrB45gk7+O:cg2W6A6ou82SxVGG2hFGY5O
- TLSH T1BBA58D1573C40B16CABA86BC81778101E1B1F8525312D6CFAC49EA3D6FD7FC18B7A266
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\clrjit.dll
- Size 1.7MB
- SHA256 0d93933ede5f919bcfe353ab01873ac2247ed37e15fc56098216f228394771f3
- MD5 c339a5b6c1fe3a17222403361502cc4c
- SHA1 711fb4fa43c7aaa4d076f1a5bbb6d63d6b79c888
- SHA512 cfcc0fd533bf3b2becb783209f911d01f90ab9793e11f47b89f5d514f231f2008108f2c815516c3b2ec88bcae24d0f41d6b71171530cec99de68efc5362f65a1
- SSDEEP 49152:qSQLg0khGTcN0/kaHF/W+tWp1V1q3+YsNbeIopSaUcrzzcT59LtrdE:/Phl2/kX+YTVotEbeI/aUKzc3c
- TLSH T120859E42A2F805FCD0AF9534C6574A1BEBB2B45913209FCF43F44A96AF237E2162E715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\coreclr.dll
- Size 4.8MB
- SHA256 d9fe4b48656df2a73a1a761c5e6a8d564a6171249f9ac9e5afec79f4f76bf987
- MD5 c8e3dd8c4bee6618c4c6be81bbd069d3
- SHA1 0edaa0c921c5ce4b102edd7cb86007ebdc85fa00
- SHA512 24a13e6196dbdfa388d2cd1c9104df9de899346b6b411a08caed01d5a89ac9d5388fb77efe438541f7c89553e3269d93d5bf75526e32b9e7575c61fb503fc1cc
- SSDEEP 49152:/K3aqe0fVUwpZaoK8tF4NrYGg9dHCyGmDjmAGPWxa7exJYgo3WmHrLbBQDmfjcKz:U/fVUwpZaoKUTG63tKV1r6165RnQ6
- TLSH T105369D56F2AD00D8D4BAC0B8CAD35527FBB178591B38DBEF02648A651F237E16A3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\hostfxr.dll
- Size 358KB
- SHA256 73bfba03fd339413d083dd5f04be7e8d122abc00340be81ed4c40a601a6e00d9
- MD5 185063a1d376a27f499aa7c13274e5c7
- SHA1 588e0e6f16ab712cab7b33b629c0c59f832b20a0
- SHA512 8383973abde490ad367149b80269f6b63b270ef7d8041dbff5b91254b9ec730e51b4432fcbf40bf1bc61c8a7a1b28cdc7be0babb75000120d8c0b0d9b65d6422
- SSDEEP 6144:4k7AEgQZhFfr82VvOgQJdNTfDIg6HjN3LQ2wtdnpbyAbqq2EhUPVD8sgvlx3X74G:ol2V+HCR7YR5EVIsIp4IXZKRwR
- TLSH T178741816D6E8017CF0B7D679CAB28901EB727C494BB196CF139099661E73BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Squad.ICU 战术小队全能助手\hostpolicy.dll
- Size 397KB
- SHA256 0eebe37a299bed18215511fdabcc5bcec364a30f33fd12dca0850634775f23c1
- MD5 10bf64953903bed3f9e858947839c7ce
- SHA1 2b622f07bc13fcacc639227a64b2dd7bdd066b03
- SHA512 6f182ff692eafdf76d59e5a2d0b36279ef52aa2ff37463bfeb9d55a333069dce512efbe366a5cf8f07093af3316c2ddad03c7ae338e04d9a9485b6730b1cd16f
- SSDEEP 6144:yvb154WmShbYTbtnUjYG/lFBfOt/oKT+Qc8V22FvC78gdFeYYQzZqfJ6JlSSnaB5:y1mNu7fFOtC05pBawiV6sT7PTT2d
- TLSH T141842816D6E80078F0B7E6798AB38941EB727C4E477196DF1390896A1F73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 db593d99292d1b0e6c860e5d92bc68add277c4056d008088b7f370fc965ab075
- MD5 f93b628ab3b510af5125ae33c30fbb94
- SHA1 c9838e1f28f233532a08b0e5051a2a55e4c4ff96
- SHA512 5a2c72686cc57e40c014b7d858928aedd27a9fcd66d608b5cae7e6c90cebfc22acc8340238d68130b3cc98e000e336671849247ebbdb62294cf1c6929af5a2dd
- TLSH T143D0121276014134C02031B30002F6180981D10B504581409C3CD51D9A080540A03443
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 384B
- SHA256 8a3339de7a1fffa4ac0a044aa9b89a6d6f9b36c9b0cdb7952116aea390039365
- MD5 0928b8e9bc15ea8d766ffca00adcf5fe
- SHA1 c893d36fcddd12d1b417c2c5165a7baf851e79a7
- SHA512 c1bd2c68c7afa61800c7392633a4481d827dec41ed05551376ea55dcf082b6581e65b04462c16e678916e8e52ce55afe54b2a55be33c55e2439bd6c2a3179f4d
- TLSH T1CEE0C216C337D000F3A20B7BE86204622D3C239835A4F37D91DC86956CE3CF46A0188C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe592bb9.TMP
- Size 48B
- SHA256 7cd9d4cb8e220301074cacb5a8aad78ba4e8cce4e4ece739ad753eae2bdc1e01
- MD5 7da41afc939bc07edeea1d192c6da659
- SHA1 a0e6834d97908eb390e010c0de45181c09224ff8
- SHA512 8702b7c5f74997813211610435c0a21bd67c51dce83c32583e11aae2a0413050b72e42c984683b6d97cac38dfa323acbc609f1a07b7dc0ce73c249fc382f8430
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Network\Network Persistent State
- Size 240B
- SHA256 dfabe581432f05ac2e13b6c7e05d633ec7e8dd1cd40da887bd248583957b9d08
- MD5 c27aa1d4434d0e15ff13d39008cb2ca3
- SHA1 0b531c504b28cd1ef8543d5baa43968a10e5992e
- SHA512 6459394e0bc02bb400f27d735ce5a458e11ee5aaa98a5e58b3c751c28fc2f53bd8a6daea7b10a59713de011cac7c5406beb9b77c4f070361fc8db8e66b385f0a
- TLSH T1BAD097A6A672EDFF0B4683E039246817CE7A0422022C0E3AC8A03B7603A207C942480B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Network\Network Persistent State~RFe59d596.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Preferences
- Size 6KB
- SHA256 5ed022ea8757c54bf0ba8c8ac6b2a953bcf6c347c58767e70843b5bb7c547517
- MD5 2ffdf4668cf5148900d43a36031f87fd
- SHA1 2549e5e00c4535977b962bc1941d23042ea772a8
- SHA512 67aef9369fa495c672aaff0be018d525dfa88e30e99c1479eaadfc3087c17ad543d27d15ad89edd23d6d9fa9361b7737d5fa3089c0c26ad14b669cc2012d41d8
- SSDEEP 96:stp05BDmab9EjwffOZ8i0vhEYkukm/7qx+WVHMSm+uecLndJ1idQjX+gd/wPMOB:stp0HqjwfWZ8paIt/S+WiFdJwdWH/YMC
- TLSH T172D1B6479E286D778CC7F6197A35BB42E2F6502262D11E58EBFC870C04E66CD620790F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Preferences~RFe5952aa.TMP
- Size 6KB
- SHA256 7680077bd9c776da5b115900a6d085f0a99ffa1dda54e555c80b6b0125559507
- MD5 7cb38b311fe360ae0d880118d3595d61
- SHA1 a3c35299f681f2eccbaa423c5bc9f4378f90c55e
- SHA512 6d36b1df8381e7dfc53ca72eb3469002ea9f0a56f79ff4e5976f5ac98b49a08fa96b5ed7c9cf37694b6e4428c8e08f4b8066bcc855f194502284181fa8f2d33d
- SSDEEP 96:stp05BDmab98jwffOZ8i0vhEYkukm/7qx+WVHMSm+uecLndJ1idQjX+gdqwPMEB:stp0HWjwfWZ8paIt/S+WiFdJwdWHqYM8
- TLSH T1BCD1A7469F2869774CC7F6197E35BB42D2FA502262E51E58EBFC861C08D66CC620790F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Local State
- Size 1KB
- SHA256 c9c97deee27651fa436c88b01e3dec645849c564f6ef48385d2075d157b3a601
- MD5 5f8a04a5de082fcef5543c64d8068bfa
- SHA1 4da239cf89a0870081d076b908e0584230b81e15
- SHA512 576decb600d58aabf8f22b1a023693873ea19100691f390fc29a20bbbcada48ca3b6fdead79f37f3dd38e0a19fc90184032412f3bd38dcb3f74a2cdc8ff82aa4
- TLSH T1173145B3A494AF735C91565670612ADB6E33507AC2604E44B5DD070C01E7A8CD667C37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Local State
- Size 2KB
- SHA256 adf397eed25c0fe9c5461e7a9c783e62646400ade6f5cb6cc37a67ed3733c31b
- MD5 e981ef72313ce0d9d2cbefe234028a7f
- SHA1 3afd7e3b0552d9ff66753d11cdceb3778990c3c0
- SHA512 c6d73e44a18db9e73e06fd12108224e99c369c08d158cfe8d4d1920ff62436465c2a466fef051dd1a82cb46b49bb84d3ce1a0f9e71c1897064940d7097ad2955
- TLSH T15451C4737854EF7788E28A0578663FA6AA329066D7A02F50A8DC0B0C00D7A5C2342C3B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Local State
- Size 3KB
- SHA256 007c8b2d39a81761368045eedeb3372072aeb0403c4a640c8086bffa4d920847
- MD5 23ed5935c35b57d65ba37d1741d7c1e1
- SHA1 9a52ca02a256ca08cc92ec74aebd1fd25fdbc750
- SHA512 857d756355f57bec075824fed786b3b22c1bdfde691a2f00b3d0e9a3dcd9e4e64270d54b53f44ee1b1dbd2be7f537395f1e85e98bec425ff6480e531e7b9d473
- TLSH T10671957769A4EB374DE29A05B8952B56B7625137D2D03FA4E9EC0F0C01D77982342C1B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Local State
- Size 15KB
- SHA256 c37a405d9874b5b89ca54df090afb488a293d2c11ae66bce6f7c283fe8301540
- MD5 ce282d89f19aa89e1457e3cce946466a
- SHA1 fc2b04966bd3938a0daf6b046f6ec6e9bffd9317
- SHA512 186634acbc780e8747c8fc0d6c5b9219c9978a863efc00f62c2074f061ef2e8eaca7b46f5335fb3b1ae9bbb1fc25036be82d58ae1acbc9aff6d4d75e86c418ea
- SSDEEP 384:z2fRE5BdEZfr0kuh9Rt/nP9yxNb+F/bb11VQ6uL6jOQ4:aRkurqhNsyFz58f6yQ4
- TLSH T13C72AF634A309E275CF7860A39056B06A5B5805996E12E98BCDD2F0C06D7B990363D37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Squad.Helper\WebViewCache\EBWebView\Local State~RFe58b205.TMP
- Size 1KB
- SHA256 e0a723d3e0903d8db4984877a6246e2cdc3fb413a199a4d7e645b1ac4459acaa
- MD5 6202e60f5a7ae8cab567b5e8480792e4
- SHA1 8e692ff919248cda3af9e6cc6d3843ded3892854
- SHA512 09d29692029a50ac8805793b7ca6dca901784ed6d1cbdb71ed8af68616798a89bfaa8dd2d7269d586ece17bd7fcbe52d963701e4f0edcdbaf2bb360b8f361ce8
- TLSH T1CB2187B3D094EF779891596670217EDF2E22907B93600E18E0DD030C01E7A9CD667C37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\FindProcDLL.dll
- Size 7KB
- SHA256 cffec7f0bbcfca2873c510d93666e0ebe95e236433c3c415358dffc50a70e44e
- MD5 81a424cbfa89976b1c40da870d8ad4bb
- SHA1 a43f1b04eb8726552eb8934b0db2e76c46535e35
- SHA512 555d28e23fe7dc97400356ae6c1e13b1e1e18633a153fc7ddafe76a11ccae8d166a550dc0c61c03a9041f691ea74b2501c0f5ad20bb8390375ceb63128e1af5e
- SSDEEP 96:PNrt9XBrYR9YVi4fl+l0tMh6VLuiXX8VASx3aPmh7z7GOVINv3vTx3mtJsBKz:Pv9XBrYR+jtyuLucgs+INv3vN34JGs
- TLSH T105F1B7435B011472C1F8943CB8DB45375BEDB23062B36787E92BA9263E991D07C7D7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\InstallOptions.dll
- Size 15KB
- SHA256 2a2845b8bc368a71f0973f30851c25f3ea70172bc5569792ff9222d12aa0d67d
- MD5 68bb5139954c236860a25cde611dac33
- SHA1 269755dff956cb5fe31dae6fa357a43fcf68928d
- SHA512 93b5c263fcfa5ab8fcaff331ba5f22b39a2c3d3e01c820497660f88e150d80b663dcf925e5d867af1addae2b1a5732474c3533897a583b271597675c07e6309d
- SSDEEP 384:0CNorf/mefeZBKJjIM9L5qu/b6o554+gmCUW:5oKefeBksMV5j/bTP3
- TLSH T110621A52BAC110F2DED2A67036E77F371FB2B51094D5880B97B33E475922261BE35362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\System.dll
- Size 12KB
- SHA256 245597797e73ddac0b2408a6736e883461c5030dfcaf2f2a6c08ba04b6989c34
- MD5 5e422c6ab294bb8cff15996622c8ccce
- SHA1 b63a4c61d8843f56058d9706167fa9b26e422f42
- SHA512 edae552c2af7a64fa7c1fe2b43c9f15585c0cffd4c652977333525a2dafaca70b9aaee589d69cb2efd358482e14f4ea95f444fd338b58c418d404b585168b1c5
- SSDEEP 192:f8TiS2p6uXjL1ZRcFsMaRqllbYIlcXvh0NqesZ6r6OMc5eWL:KiHXjpPcFsMvlls/SBZr6Ob5NL
- TLSH T154425C426BB25AF1FA25073625B67F170B3CAE5803D44A9B8FE79444E8B01E710367D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\ioSpecial.ini
- Size 1KB
- SHA256 e1171d908f600884802917c1d99ce48977cb6a6d9896b249051c398f516e69ab
- MD5 59607ec753b4f865e55cdef5974e63b8
- SHA1 b0278b22a04bc9d28d2186558cffeb02f30c9cce
- SHA512 ce70616ef4b606d725410889c77c2eea4ec812e43c9c5db05f39ed6d9f9ca6405a2bceca78cf1690976a0ffef8d6e02f71b9bbb8f795057972e1f8c61864be59
- TLSH T1102138133DE84605E1ABF58CEBF580359335745A884DC60F91C10E0F45E66814917FEF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\ioSpecial.ini
- Size 1KB
- SHA256 9543219f477751572b8116649889902773a7bee8d0b5f78c34a85d32e90bff3a
- MD5 0246ad6b2312497a12f89f387edd7bb8
- SHA1 644cf7488f6963a692997799b85d10502e9b086d
- SHA512 1e4b731db569592f0ad51e7a7a335767bcdbd03217c68db8591cd0df11f0f5ac44603f5efdc6bc55abc853cb73ec1f27d92fda27e0b63d7c9216b1244ce725a0
- TLSH T1AE2104173DE84615E1ABF58CEBF180399335745A884DC60F91C10E0F45EA6814917BEF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\ioSpecial.ini
- Size 1KB
- SHA256 046d7815e53456776b062b48cdcefa3949e9d148613409d536ed4ad6f839f711
- MD5 42fbde11b6191efb4c67f4261ca54826
- SHA1 208404155dd24d90bbd7833791cf1c902e55f086
- SHA512 5cd372fa3c36e2dbc93f8f85f7f71074f194168a18aa236cf7cfefacc059fbd5d77313e1ce905b8560537fd7fdc17fd55cef9e51910e1a985bd7cff58386eee7
- TLSH T14B11381339E95A05E36AB64CEBB48034433AB45A988DC60F81C14A0F44E9B418523FFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3F18.tmp\ioSpecial.ini
- Size 1KB
- SHA256 282e293a78edaaf66c29f48dd2046baf6c896d6e6c625336958eca8721f44494
- MD5 59ed2d3e62960b7c9850109e44a52cae
- SHA1 ec9b85d5bacd1561a0936af0a627740760c386eb
- SHA512 13bdd7f36a627eeec93a9be7e5a427791786b12dc6a57ebe01446a807947b7aaffc48b7723b989533591d0905e7109610b26d357072db5dbdec52d2fe7dfad1c
- TLSH T1E02136173DE90A05E36AB64CEBB440395339B456948DCA0F91C14A0F48EAA428913FFF
- MD5 SHA1 SHA512 TLSH