5aebfaf0c3b4349bc2db534a2f8408685fad027eaf705021301d90e04810e7bb

Analysis

max time kernel
150s
max time network
62s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ib%20pro%20v2.0.6.0.exe
Size 26.9MB
Sample260620-pgln8aey7p
SHA256 5aebfaf0c3b4349bc2db534a2f8408685fad027eaf705021301d90e04810e7bb
MD5 acf46f800be8665870208319cb189d28
SHA1 08e2e9bc309c96cac32820bc333289a06ba5f3e1
SHA512 ca116e4e6e1af882bc60c90ba82e4c3d3ab0d4598156584e2c82684cc579bd34dca7071c7ea984ab9ba0f3e24ec6095baf403e10f6d9d0265dc8c127a7eb67fb
SSDEEP 786432:4INlr7gv5Q7s2CnEjdB0YZZz5gaoTnry9MuKoLPyyE:4wBgv5Q7fXjduYbfM2AoPyN
TLSH
T1B957333F725B653EE07A163A797691515A3BBE61A5064C07A3F0F88CCF320705E3E692
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2548	ib%20pro%20v2.0.6.0.tmp
3188	IboPlayerPro.exe

Loads dropped DLL 15 IoCs

pid	Process
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-FXIB2GD5WE.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-GLU0M6DG0V.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-APKTDARCKJ.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-LBO77K2GNL.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\is-ZZSNZ5IREE.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-5DRPCRENE1.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-GMG3262LJM.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-CKKTWVMRQ3.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\media_kit_libs_windows_video_plugin.dll	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\zlib.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-25PRB16PCP.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-GAVS86I1I5.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\packages\font_awesome_flutter\lib\fonts\is-NP1W4GON7K.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-U59WSK9LNH.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-GI273CN102.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-DMXVNSQ323.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-7Q7VCMVPIN.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\shaders\is-PNDW3FQMYR.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-WPS2NXYP9D.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-S79XPFTN6P.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-5THB55Y009.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\window_manager_plugin.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\is-LC1JJ3SPF1.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-ZF4N88SLH0.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-9CLBF3TOZK.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\libGLESv2.dll	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\vulkan-1.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-S78XKSAZH2.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\unins000.dat	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-8ELBK8CS2J.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-617UKJTU2U.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-R223TCPSSO.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-OOE7KJNI16.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-VPP722CEIE.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-BPXDH4MFJM.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-X1XB0FDB2W.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-QSLFQ29TPS.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\shaders\is-77OYFLAK6D.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-9M51DYNVOQ.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-9YR7JZ7GOQ.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-CW2559SYPE.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-QKVN01CD8Y.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\packages\media_kit\assets\web\is-H6KL9H0LL9.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-EHUJOWV9KG.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-WEX2I7P52S.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\packages\wakelock_plus\assets\is-VHCUWKFQEZ.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-IGXKBYITDI.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\vcruntime140_1.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-WSE65TX7Z8.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-AOTA6JQPLW.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-H0P0ATWF4Q.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-N5ZKB2YCEU.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\vk_swiftshader.dll	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\media_kit_video_plugin.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\is-ER9K495SMG.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-A0XOP7NOJ5.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-XAWYPA753J.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-XKHV20DN5I.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-KIVPI9WUQB.tmp	ib%20pro%20v2.0.6.0.tmp
File opened for modification	C:\Program Files (x86)\Ibo Player Pro\libmpv-2.dll	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-KDH3Q7922E.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\is-U3TW9CMJZ3.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-7R51517ZKH.tmp	ib%20pro%20v2.0.6.0.tmp
File created	C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\is-V70I6NHZ3E.tmp	ib%20pro%20v2.0.6.0.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ib%20pro%20v2.0.6.0.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ib%20pro%20v2.0.6.0.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/5156-0-0x0000000000FD0000-0x00000000010E9000-memory.dmp	innosetup
behavioral2/memory/5156-8-0x0000000000FD0000-0x00000000010E9000-memory.dmp	innosetup
behavioral2/memory/5156-241-0x0000000000FD0000-0x00000000010E9000-memory.dmp	innosetup

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
5388	ipconfig.exe

Modifies registry class 17 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\shell\open\command	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Applications\IboPlayerPro.exe\SupportedTypes	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications	ib%20pro%20v2.0.6.0.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.exe\OpenWithProgids\IboPlayerProv2.0.7.0.exe	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\IboPlayerProv2.0.7.0.exe\DefaultIcon	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\IboPlayerPro.exe\SupportedTypes	ib%20pro%20v2.0.6.0.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\ = "Ibo Player Pro v2.0.7.0"	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\IboPlayerProv2.0.7.0.exe\shell\open\command	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\shell	ib%20pro%20v2.0.6.0.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\shell\open\command\ = "\"C:\\Program Files (x86)\\Ibo Player Pro\\IboPlayerPro.exe\" \"%1\""	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\IboPlayerPro.exe	ib%20pro%20v2.0.6.0.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\DefaultIcon\ = "C:\\Program Files (x86)\\Ibo Player Pro\\IboPlayerPro.exe,0"	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe\shell\open	ib%20pro%20v2.0.6.0.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\IboPlayerPro.exe\SupportedTypes\.myp	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.exe\OpenWithProgids	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\IboPlayerProv2.0.7.0.exe	ib%20pro%20v2.0.6.0.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IboPlayerProv2.0.7.0.exe	ib%20pro%20v2.0.6.0.tmp

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2548	ib%20pro%20v2.0.6.0.tmp
2548	ib%20pro%20v2.0.6.0.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2548	ib%20pro%20v2.0.6.0.tmp

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe
3188	IboPlayerPro.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 5156 wrote to memory of 2548	5156	ib%20pro%20v2.0.6.0.exe	89
PID 2548 wrote to memory of 3188	2548	ib%20pro%20v2.0.6.0.tmp	91
PID 3188 wrote to memory of 3624	3188	IboPlayerPro.exe	92
PID 3624 wrote to memory of 5388	3624	cmd.exe	94

C:\Users\Admin\AppData\Local\Temp\ib%20pro%20v2.0.6.0.exe
"C:\Users\Admin\AppData\Local\Temp\ib%20pro%20v2.0.6.0.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5156
- C:\Users\Admin\AppData\Local\Temp\is-MMPQFG1I43.tmp\ib%20pro%20v2.0.6.0.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-MMPQFG1I43.tmp\ib%20pro%20v2.0.6.0.tmp" /SL5="$80234,26739013,1093632,C:\Users\Admin\AppData\Local\Temp\ib%20pro%20v2.0.6.0.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2548
- - C:\Program Files (x86)\Ibo Player Pro\IboPlayerPro.exe
    "C:\Program Files (x86)\Ibo Player Pro\IboPlayerPro.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3188
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd.exe /c ipconfig /all
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3624
    - - C:\Windows\system32\ipconfig.exe
        
        ipconfig /all
        5⤵
        Gathers network information
        
        PID:5388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

IboPlayerPro.exe

Path C:\Program Files (x86)\Ibo Player Pro\IboPlayerPro.exe
Size 192KB
SHA256 4a765a4f073b1367f9c481d3ca52c441035b12c8f394e1c6d8bd81fb1e1af0a8
MD5 28cec33733354e8c2371a6e44ced32f0
SHA1 8c11eaa9e8b5fa9029e988c09511f43513870594
SHA512 6eed679356f4cca3d15a7ebd67b6502ecf6b06f229c14e54d407d279a62cc81db550280f4ec6b24c4b4c4feca1fb85990cdcb2d93d33fe0c22da1914644fd9b3
SSDEEP 3072:DqRNvEziDhkI5tyRDoO5r+ijG/aM8gtNE8Bd3y7U9iw5iN8RowUSLPTit:DqR8iDlXGoO5r+ijG/aV8BI7U9kIZ6
TLSH
T12014AF26AB6550EEE216E8BDC6524A05DB72FCC507619BCF1B800E9B0F27ED90F3E511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Program Files (x86)\Ibo Player Pro\MSVCP140.dll
Size 627KB
SHA256 639342ea9a67c0009122238ce070a8257e2e04d367d627509fec29f8442afb42
MD5 6d318c1ba915d3d87f3f59dc6e3de276
SHA1 6da14daeaf9cf2c20670e83a37c393a94bb4e557
SHA512 b9ef17cc2ad61807b68d6b80ea8f084c2fa6d422aa73c455017d0992d35dd6f8d284d2a2ffabbf88fe97fc67f7684141a0e685675c017211e9d1327f22031ff7
SSDEEP 12288:0HyzMcAOctv6pOFoUn0uXptkQpytoJgweiQKW5mUeSOjHWtCje8ACU5bwfDwK4vh:0HyINNkQpyHbApTDwFvHPQEKZm+jWodK
TLSH
T187D41823774D02A0D195E2B9A1C74306E7F1BC464323A3C392EADA6D2F5B3D9677B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Program Files (x86)\Ibo Player Pro\d3dcompiler_47.dll
Size 4.7MB
SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
MD5 cb9807f6cf55ad799e920b7e0f97df99
SHA1 bb76012ded5acd103adad49436612d073d159b29
SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
SSDEEP 49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
TLSH
T19E367D5673E940A9C1BBD138CE478213EBB1781403345BEB5191C669EF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Program Files (x86)\Ibo Player Pro\data\app.so
Size 9.2MB
SHA256 5a37d4022ca435aa36e022cee4fddb4efc0c6ca0033d0399ef043951c00a30a9
MD5 5774ebd9e1ae0e4cd537bb1b72738d43
SHA1 8944525c3bfdc74f4b92e202dc13e83042b34e2a
SHA512 eb12385ea4c7ff0aac592d03b56263ea79445966aab5a95703fb44c023d1c5b8e244c05d89e022766983f639fd28e4c6a3a249b423e1e8597ae00212255c24f9
SSDEEP 196608:3NwiQ6MsaMAkOAB6EZvne+dDQklU0tqfK7iYhna8sQ:3NweMsaMAkOAB6EZvne+dDds
TLSH
T1B1A61987C0B447A0E472E772F75F7AA5AE2438DCCA30778A068456553E87DE04ACF672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.env

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\.env
Size 90B
SHA256 758db72edaaa3f592aa2f033f5588b0ec87de849fd30052ed918addb8e7602c9
MD5 3993635dd106847aa599c41fdd6b7642
SHA1 ec4eccae3b5d46c109186bc6294efb2fbf6e9e91
SHA512 08cff17da81c7643e27a182cf3b85a65ace78aaa5dbe1f504069437e406ac820bf8a708ff6d8ae8f073f6d91efdeae49897d1fa26e865685f14d2b3bde34d689
TLSH
T19FB01241104417405144469B6186C608DD8CBB4F330426406BC23A0140E15037108E90
MD5 SHA1 SHA512 TLSH

Submit Download

AssetManifest.bin

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\AssetManifest.bin
Size 4KB
SHA256 e161c61e3e5af1a40e73aa529f2b431d0700fc4eb2caddc44c09743c9c4e3b9e
MD5 c8542eaf1cf2951279bb9b3b945bc3d5
SHA1 c1a2700ae8dfd0110c832ad43cd8e5cb0a0196b6
SHA512 bb53bebbc032deba8bb84264bb187ddb021e1469a3988757471a5c0fc540645972fc63d0963c26538ea94dfee0cd3c482b9ad8816905349e0f377b7c1ea1c3e0
SSDEEP 96:v4EE1b+cWNaOSNydXocCSvpLukhfY+IG7NkZ2ZEmFXQw+XE6vn:v4bycWNaOAk6+xNrZEmF+XEQ
TLSH
T17DA11429872932CB2D85B404389F05A0EF0A0F449968E7EE333CD85AF4D1D6959FF9B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontManifest.json

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\FontManifest.json
Size 724B
SHA256 10f4c023c6fd7569af85d697981b7e7bc64ea03566a9a332b24c872430688e51
MD5 c75f7af11fb9919e042ad2ee704db319
SHA1 63e94befced83eda49ab19bda523176a0c0dc5c1
SHA512 3ae4fbcf97b3097c4f051733af1a4379c21a8e19c1a32077477d5931f63449b94017b3e7a594c2b4f2dd0f655c7b84073a3e3f24194b771a550f4e11ac496ad7
TLSH
T10001B90F8B1A16F5248DAD0BB47612716C482A957DD6F9DAF3784BD8C1E1A363236243
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

app-logo.png

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\app-logo.png
Size 92KB
SHA256 1405efd6b1d6a643fdf3599a7db5a31dcf97c74923b8696ffcddcd080df4f4bf
MD5 74d60427a94d0b10534114bfb5378dfd
SHA1 03ba3abab204e697dd5aff9efab403aa1624c127
SHA512 b1800ae35d0b5c40177667ab569396dfa565a733e1c66d0727b1e9595f6469aab47722fac17c680c55b9530a3e61855e4ccb3ef0258e2cac5e463b8108d5138d
SSDEEP 1536:xYjhFZHx2h8EJbZr8FcnBQBTM1bxIITTLRMvliPPlZztsjD1Aab03s8XpiPZRdVj:qhFS8MVr0M1bNTT2diPdPs31gc86dVj
TLSH
T1B093128E46DA707BCA212053DE63FF60B525B54C1BEB466C346CED719BEA902CD34C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\background.png
Size 227KB
SHA256 dd27d2097edfc3c75e0e619b15bea1a0e68efc775ce6be5bab94a614dfd4595c
MD5 090888fdbc916ef8ba64d5c68affec61
SHA1 283e03ef3e312029ecc0b90b420e3263f0248a68
SHA512 26f68da2dda91173037f03f6f5cce71094cab5beafa1ae9a7ed5fd90a2ad51a67a723c469cc9d8b489d6f16d8562c86d6c5003b58a065caeb0d2e8cfb448649a
SSDEEP 6144:1NUT4kejhwYK+/G3Fm0KyXHr12Fd9dHol7gpi5:1SOCIWU0KgHJEoOpc
TLSH
T18B34232593F945A501D3D9D7F0DE72A47DE839B9EA05C2967F9080620A10D0CEA78FFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\logo.png
Size 25KB
SHA256 3fcb0c6ebdfaf25a0d3aceb3e12a70a3c3ecc49ace3c346d6cb2e5dba0eb8c9d
MD5 1b4bfd7d7ffb856e5a02f4f57003ec18
SHA1 8285567dca647ae7313ed45f2956f0ec33dc6212
SHA512 79315a4737c113ddb0621af318cd55c863b4c00d7af9eb456c10c594963f47fe0df18633b60af6b2e6059f2e557eddb4b38825cc3d44e8d018dd74c90f17d887
SSDEEP 384:Q4rLS+RnfeEl7XoxyACSmOYFhSCncrltTbcj4mYBqsparrdod0m7PZQACZYe:Q4rTfz7XoWSmzF3netTiZYTpar+Pa7Ke
TLSH
T12AC2E0E08E856400BDD535B6111B86B0D562AC9C6286CB208647FF3E9806FE36DCBB7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qrcode.png

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\assets\images\qrcode.png
Size 17KB
SHA256 50ba96faa5a08e29e43d6a04ae34f56ae09e0b252a20c4e9bc8e1927aaaf3a8a
MD5 02424b9ccb5b2b1f37348b5a370c6ea5
SHA1 e3179364d69a1bc4b8d150a3e889470c66454556
SHA512 3ef61f651b89eb1072379e6dd671c664e354da029afe5d3627f6e2495acde0b8c438fb05a97fa4ab5c706005876660257d35077dd465781ced0529f7db8f1f3c
SSDEEP 384:U4hvCKhK6cnGGi5BMmv2mbhtPx9bOebtUe6rLTQQb/o9vmoK4XwHCMTulV/:UEvCKhKFnGnrSmbjOeeTrnKm6XcCMTun
TLSH
T15F82B0DE7853DFBA9E762811B6A3912306B1509BF21C024A0BC59F1936663F3E34563E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.otf

Path C:\Program Files (x86)\Ibo Player Pro\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Program Files (x86)\Ibo Player Pro\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files (x86)\Ibo Player Pro\flutter_windows.dll
Size 20.3MB
SHA256 a147927018fcc1a843fb3938ead58838d2e185ce7d840bc4191a7a1b90c21015
MD5 da6ee9a0525b9774f584020f9b7f7215
SHA1 488f97f1798ea4c6b083699c984a45b72d7b10fe
SHA512 9001dcabab5130841784ab0882164959cf6b179ce17ba3ba5cc780a1c39021baf8434cd4077d5fb71058e7f638b372ec69ff81cde3d8faf7551a2c9d41507360
SSDEEP 98304:zE7hoeyV+kw1ULtPbwDggwZr3hH5epehPTuwTlckSTKZSx8tkvMzVdD+cWUN25e:z3IgBfefQzH7wpuIFybvI9RA44
TLSH
T10E276C03E29640EDC059E179971BAA27F670B8490B20BADF3B5C47253F66BE01B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Program Files (x86)\Ibo Player Pro\libEGL.dll
Size 461KB
SHA256 b2590bd0692f0381fc45c20bf1c7f7f713c9ea19c7ea6bab62efdd1fadc4eaac
MD5 0f61da7cea39e89861117f3cb4620dae
SHA1 9ca286bf6d5617eb38101d5e166edac29497c9c5
SHA512 7dc2bbce9808e00122ae0d960ad6b0156d201494aedf4c4c9e261f50986b72dd19b41d443138ffdf1b2e5b8e29614f0a1e909e4c867262eab311f6675618369d
SSDEEP 6144:bAJGuTlLMP/jvtG0uMgvgZS+U85p+2uEA3sB9KeZTyT/tSOaj0yPepA9YK9f:oTaP/jvtG0urvgZS724sBbj0ZS7
TLSH
T156A48D15B79448A9D02AC074CA538643EA72B8960F64FADF13A0D37D1F777E85B3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Program Files (x86)\Ibo Player Pro\libGLESv2.dll
Size 7.1MB
SHA256 620bb6e38d7ed6c760a0cf4a8eb6a8f64b259b96ff286551cd32cefc6c35ca39
MD5 d22c92bee4e7a14d6c74e7376eca7605
SHA1 0592d72d5e0e38e5cfd9a090309260962bf8c4d9
SHA512 2aeec8ccf9db442a2b1e3b391e6c3e899de1266199e6ee6040aceeaf8931e1d10c55ea1ab9ebbd3cc662bf56aea698c09e38f75c7b3e8b0b27c02af63d36993f
SSDEEP 49152:fR1vq8X1ZxC721Mr+IqizQ0LQj7KxKT1wvIOCaDCmvWI2YQkGk6jouaLlbpx/fur:b/xO21eqnoIw+vknAYYszpuSxxZi8Y1
TLSH
T142765A03F69141EAD05DD2B98B5B9622F231BC861371B6DF229473153F76BE0AB3A314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmpv-2.dll

Path C:\Program Files (x86)\Ibo Player Pro\libmpv-2.dll
Size 28.4MB
SHA256 d5f0694b08c124e785d858d00082f3e3b158dd9138bfc48c0382bf1eb443a5fc
MD5 3a6bd0dc9ab32d7b450f06bca2359274
SHA1 b2be6a73be23b60f1d23543363ea559438218c72
SHA512 4c8133321833bc94c8a2f1ddc83523fd554d9699efa09d8dea6ef4aa9bbca0a4f041a10e4793b6424c8cffc4583e36c2a96039017f29465458a9a2e5510631ef
SSDEEP 196608:2E4MJL6OGzrpR79PnKPBv00IbW8p6NMA+31bGb34+1VVMjbCtuQ/OHAs4:CMMOap19/KPR0Zz50I+5Mjbou4Eb4
TLSH
T116676D07E29350ACC56BC170876AE733A631785D02B47A7F2695E7B02F22F90775EB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_kit_libs_windows_video_plugin.dll

Path C:\Program Files (x86)\Ibo Player Pro\media_kit_libs_windows_video_plugin.dll
Size 12KB
SHA256 5a493f3dcf53cc31faa79d1b140ab754eead348d42db0db02acebf4785d62b82
MD5 af6e36c6791aef097dd00143e8672fa3
SHA1 e140091b5bf96049187733549c8ffae5e943d39e
SHA512 127f83c658e7f4ce3cd94ce96b38ac6a3b900e0cdf6246227ed1a52b53e98a8a7904b7f703a77da4a9faf21986a681efb160880144198e63eacacf549faa10b8
SSDEEP 192:ajD69xiHLVKwgXrMvDKLzwlNrsIHqU4KfWSAvX2TrWDty6yfF9ZeP:eD69QKwQMvDKLslGg1FSP
TLSH
T1BF42E8477B590A95E23143BCA0930F00A6B5FC315BA267CB63E5915E0F677C9B07FA60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_kit_video_plugin.dll

Path C:\Program Files (x86)\Ibo Player Pro\media_kit_video_plugin.dll
Size 147KB
SHA256 a0d7d37f8bdd90837a49bb43cdf76a56f42d67cd33615ad32b9c5bbda54dd206
MD5 f1872edc48863e909a81bacc4eca72e3
SHA1 3818d5e05dc966b73fca0a729b2c2a42a4ed47bd
SHA512 3d39903072a9792b2f77390dc404d586edc5754157c2bf7f6295bb9229bb0d0e65828abb05fa18136d6fff46626fe9255014f2092d48d14be99be65b2d3d24a9
SSDEEP 3072:8wwF/k8+AMznSGJtjfti+r1zEHiE5F52ndoPC:Re+AKJ9li+5wHiE5F52ndoPC
TLSH
T1E3E33B2BB65940ABE22AD0BC89474D06EB72F885476167CB17904BEF0F17FE46E3E510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_windows_plugin.dll

Path C:\Program Files (x86)\Ibo Player Pro\screen_retriever_windows_plugin.dll
Size 117KB
SHA256 8ad37a5826bf987dff429c8602a3d09d84de7ab744f3cfbf079975390b70d42b
MD5 e0a165617888b0897de56e2232e4bbbc
SHA1 3326e0047c9e442a4fdf53df69e41e9ed63ce4dd
SHA512 a3dc84768520345bcc13ca9e60c70a62d68fc48bc0481445acfe22f31e4796b5a6f3731bde25b25bff95023517a6e788ea587c0851db7524813c3cb8abe8a0b1
SSDEEP 1536:Hc9Ys2aAdctejCjdpvW+HvEtIiAh4moShqU3l9Pw8W2VqPYWi5AuZCM/nnIjx:HcYhcMQLEtIiW7VbVr5AuZCM/n8
TLSH
T18AC31B2BB65D40ABE21AD4F8CA574D46DB72F8954BA167CB17800A9E0F17FE90F3E500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files (x86)\Ibo Player Pro\url_launcher_windows_plugin.dll
Size 96KB
SHA256 70efec4fc652fe18a1c78146be5ebcc94b9e894962e71a945b332b1555cf61b4
MD5 6dc65b99ea15859710dea01b1f9423d2
SHA1 e2978cdecd22de765d9d7723e29d45f625edab8b
SHA512 b9ee5d803ccdeda32a4cc06b81739d8cd679b967e4d4ea46f1a35e2079e5ffa801b9bfde6d00e4f98289a5924b409a24ad75abdbfe2a5c78d020f3b7d223e2be
SSDEEP 1536:5347yxZcZiRaWEi6X/j27otOqUJZmU5rUVVJ71zO:VDxZcZWnEiibfgR5rUVVJ71
TLSH
T1E2A31A2AEA5D40AFE22AD4BCCA574D01CB72FC85476167CF27905EDA0E27BD90E3E501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Ibo Player Pro\vcruntime140.dll
Size 174KB
SHA256 19c293ac482fdb882cd29d2b0e6d807419efdcada04068f03e5723670895e17d
MD5 2e79fe92ea9d573266021a1e0a9b17d3
SHA1 ddd96f94427ec7a1a43b1ce2eca79a8383ca2457
SHA512 bd68c5940f8f0756dec6390b4e8020b2a75ce996338e2f7de72b656d91396e22b7b8b0cd0d06bc0962b25aa7d892cf94c17a2229c48405d66d769b9c776f22fe
SSDEEP 3072:0Qf3XYZst/GrhA4gBSnSX3DQj0yeBrZHecbxvWjVWk:0QPYZsmBnSX3dyeBrZHecbxejt
TLSH
T1A6048D51B2CC00B2E52B86748CD6D953D6B5B0057B306ADF47A886782F33FF2A63DA05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Ibo Player Pro\vcruntime140_1.dll
Size 49KB
SHA256 a253a12e4a8e9e23ebfe0ced829f7751e4f42c60066986bf20515ced8dcc68cd
MD5 0e8274882579fd2cb2b4028d0847e5e4
SHA1 6359a51dd137998b579dc66876ff4e7abaf0cd7a
SHA512 8a84b7ceb1d9ae2136b2cf4a2ef8fbe16324a3976597f7025ac9f86210f47c95627ce812ad69307b9fc86418aee41e6354544a324d3f0a7b3773dde49b6a9662
SSDEEP 768:Vmhyc193JS7ySK0TAinfw4DYlrjZ9z0+Xnarr9zEJeui+:vcjZ0y6/fgpzpXGBz9+
TLSH
T1CB334B8497BC4086D8A798B081AAEF07BE3DB762575052DF4EA0E55C2D537C0E73C22A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path C:\Program Files (x86)\Ibo Player Pro\window_manager_plugin.dll
Size 127KB
SHA256 e5d8f63d123c24f6ed1e4898c498bd9e73f16ffcd9968f904da9da7cb6fddbb3
MD5 7c75862288b60aa7d20d393d7c14e652
SHA1 914bab906089ccc97ada8b6a6a6f7becfb37c1ac
SHA512 50375bd479f99ae1f06e026986b6267260b24b6fd0a4e54276b7b99888a70d7eb258ded26571fdf15e9d0b3d695c99145b19e95c9ddb047aa471976c83f3240e
SSDEEP 3072:D8FL0MR20nsOE5aUWi9nooZdYX2O/iPAsygzTGx+:YFL0Mo0nsOE5aji9noVX2YiPAsygzTGc
TLSH
T1AED34C2AF65C41ABE226E4F8CA434D06DBB2F885076167CF17904E9B0F17AE55E3F901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ib%20pro%20v2.0.6.0.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-MMPQFG1I43.tmp\ib%20pro%20v2.0.6.0.tmp
Size 4.4MB
SHA256 099c6d3d5f0927fb7d0b90cb55c68451bd0091cfdcdcea2ae6f3468c1f5d323f
MD5 1d3f25b73a0b17b15660ac391bd2aab7
SHA1 462143612db9fc008bc07ec9730ba08726b32ceb
SHA512 695ea67a66b14a83f5230ac12ec376f7212cb846e740bcdd688b924aa0a10e5300eaa2d2f1489f70c736e65f8b64d9a0cd5b4df9ddbc96008adeacaf02d52652
SSDEEP 98304:N9SZUvl30aj90ZFcvdQ0hdgvminQLMj+J3333O2:iItJj90Z6RgKwA
TLSH
T140268F03B388753EE4B71A3A883FA254583F7E213A16CD4B6BF4199C4F396416D2A747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2548-12-0x0000000000D80000-0x00000000011F5000-memory.dmp

Download

memory/2548-240-0x0000000000D80000-0x00000000011F5000-memory.dmp

Download

memory/2548-6-0x0000000000C80000-0x0000000000C81000-memory.dmp

Download

memory/2548-9-0x0000000000D80000-0x00000000011F5000-memory.dmp

Download

memory/2548-10-0x0000000000C80000-0x0000000000C81000-memory.dmp

Download

memory/2548-189-0x0000000000D80000-0x00000000011F5000-memory.dmp

Download

memory/3188-246-0x0000027843950000-0x0000027844279000-memory.dmp

Download

memory/3188-248-0x0000027843950000-0x0000027844279000-memory.dmp

Download

memory/3188-245-0x0000027843150000-0x0000027843151000-memory.dmp

Download

memory/3188-247-0x0000027843950000-0x0000027844279000-memory.dmp

Download

memory/3188-252-0x0000027843500000-0x0000027843580000-memory.dmp

Download

memory/3188-253-0x0000027843500000-0x0000027843580000-memory.dmp

Download

memory/3188-249-0x0000027843160000-0x0000027843161000-memory.dmp

Download

memory/3188-269-0x00007FFDEA0E0000-0x00007FFDEC1E8000-memory.dmp

Download

memory/5156-0-0x0000000000FD0000-0x00000000010E9000-memory.dmp

Download

memory/5156-241-0x0000000000FD0000-0x00000000010E9000-memory.dmp

Download

memory/5156-8-0x0000000000FD0000-0x00000000010E9000-memory.dmp

Download