FLSkinner Skins.zip
- SHA256 c0fc580fcf38b6d261aeead8d4a147f4837d60ebfe928ef8c09af8e859d15d5a
Password
food
Overview
overview
8Static
static
3FLSkinner Skins.zip
windows10-2004-x64
1FLSkinner Skins.zip
windows11-ltsc_2024-x64
1DarkChocoPurple.json5
windows10-2004-x64
3DarkChocoPurple.json5
windows11-ltsc_2024-x64
8DarkSkin_D....json5
windows10-2004-x64
3DarkSkin_D....json5
windows11-ltsc_2024-x64
3DarkSkin_D....json5
windows10-2004-x64
3DarkSkin_D....json5
windows11-ltsc_2024-x64
3Discordcol....json5
windows10-2004-x64
3Discordcol....json5
windows11-ltsc_2024-x64
3Fake Choco....json5
windows10-2004-x64
3Fake Choco....json5
windows11-ltsc_2024-x64
3Info about...r).txt
windows10-2004-x64
1Info about...r).txt
windows11-ltsc_2024-x64
1Links for ...er.txt
windows10-2004-x64
1Links for ...er.txt
windows11-ltsc_2024-x64
1MOD.1.json5
windows10-2004-x64
3MOD.1.json5
windows11-ltsc_2024-x64
3MOD.2.json5
windows10-2004-x64
3MOD.2.json5
windows11-ltsc_2024-x64
3MOD.3.json5
windows10-2004-x64
3MOD.3.json5
windows11-ltsc_2024-x64
3MOD.4.json5
windows10-2004-x64
3MOD.4.json5
windows11-ltsc_2024-x64
8MOD.5.json5
windows10-2004-x64
3MOD.5.json5
windows11-ltsc_2024-x64
3MixedType.json5
windows10-2004-x64
3MixedType.json5
windows11-ltsc_2024-x64
3MixedTypeV2.json5
windows10-2004-x64
3MixedTypeV2.json5
windows11-ltsc_2024-x64
3N.Mod_V1_Pink.json5
windows10-2004-x64
3N.Mod_V1_Pink.json5
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FLSkinner Skins.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
FLSkinner Skins.zip
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DarkChocoPurple.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
DarkChocoPurple.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral5
Sample
DarkSkin_Double_Color_GB_x1.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
DarkSkin_Double_Color_GB_x1.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
DarkSkin_Double_Color_YO_x2.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
DarkSkin_Double_Color_YO_x2.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
DiscordcolorSkin_WOB.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
DiscordcolorSkin_WOB.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Fake Chocolate V2.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
Fake Chocolate V2.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Info about making you own skins (by fl user).txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Info about making you own skins (by fl user).txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Links for Skins of Graut n Fl user.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Links for Skins of Graut n Fl user.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
MOD.1.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
MOD.1.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
MOD.2.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
MOD.2.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
MOD.3.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
MOD.3.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
MOD.4.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
MOD.4.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral25
Sample
MOD.5.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
MOD.5.json5
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
MixedType.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
MixedType.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
MixedTypeV2.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
MixedTypeV2.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
N.Mod_V1_Pink.json5
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
N.Mod_V1_Pink.json5
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target FLSkinner Skins.zip
- Size 10.1MB
- Sample260620-tttmtahs3w
- SHA256 c0fc580fcf38b6d261aeead8d4a147f4837d60ebfe928ef8c09af8e859d15d5a
- MD5 b0d9255d60905ef77dcdf1eeb98407e3
- SHA1 1e880c826a05f3de562f9a57aded8f92ef3be4d1
- SHA512 15a52f56c2f2d577e0e8cc55c1948be91a096f0d5259b4d695a9ed6367cc490c3568f31c301cbf41bcb3271a750f25ad982cea9be2968988ad23cf100852e8b0
- SSDEEP 98304:XdazopmbXMXXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEc9:XdazopGXMxnJ45/9iD54+V11bFv4zQ
- TLSH T161B6702CD904A76BD2B7C27881990A17F161951AF13D8B0E30CF1B693B52A837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/flskinner_x64 (1.0.45)/Interop.Shell32.dll unpack001/flskinner_x64 (1.0.45)/MaterialDesignColors.dll unpack001/flskinner_x64 (1.0.45)/MaterialDesignThemes.Wpf.dll unpack001/flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.Shell.dll unpack001/flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.ShellExtensions.dll unpack001/flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.dll unpack001/flskinner_x64 (1.0.45)/flskinner.exe unpack001/flskinner_x64 (1.0.45)/flskinner_core.dll unpack001/flskinner_x64 (1.0.45)/flskinner_payload.dll
File Explorer
-
FLSkinner Skins.zip.zip 10.1MB
-
DarkChocoPurple.json521KB
-
DarkSkin_Double_Color_GB_x1.json521KB
-
DarkSkin_Double_Color_YO_x2.json521KB
-
DiscordcolorSkin_WOB.json521KB
-
Fake Chocolate V2.json521KB
-
Info about making you own skins (by fl user).txt1KB
-
Links for Skins of Graut n Fl user.txt125B
-
MOD.1.json521KB
-
MOD.2.json521KB
-
MOD.3.json521KB
-
MOD.4.json521KB
-
MOD.5.json521KB
-
MixedType.json521KB
-
MixedTypeV2.json521KB
-
N.Mod_V1_Pink.json521KB
-
N.Mod_V2_Pink.json521KB
-
N.Mod_V3_Pink.json521KB
-
N.Mod_x_unnamed.json521KB
-
Simple.MOD.1.json521KB
-
SkinOneColorBlue.json521KB
-
SkinOneColorOrange.json521KB
-
SkinOneColorRed.json521KB
-
SkinOneColorYellow.json521KB
-
flskinner_x64 (1.0.45)/Interop.Shell32.dll.dll 38KB
-
flskinner_x64 (1.0.45)/MaterialDesignColors.dll.dll 292KB
-
flskinner_x64 (1.0.45)/MaterialDesignThemes.Wpf.dll.dll 7.1MB
-
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.Shell.dll.dll 574KB
-
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.ShellExtensions.dll.dll 37KB
-
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.dll.dll 111KB
-
flskinner_x64 (1.0.45)/Newtonsoft.Json.dll.dll 683KB
-
flskinner_x64 (1.0.45)/flskinner.exe.exe 27KB
-
flskinner_x64 (1.0.45)/flskinner_core.dll.dll 94KB
-
flskinner_x64 (1.0.45)/flskinner_payload.dll.dll 518KB
-
x Akatsuki Skin V1.json521KB
-
x Aurum.json521KB
-
x Clown SKIN.json521KB
-
x FLEngine_x64.Black.json523KB
-
x FLSk!nBlack+V1.json521KB
-
x FLSk!nBlack+V2.json521KB
-
x FLSk!nBlack+V3.json521KB
-
x Grub.json521KB
-
x Lily.json521KB
-
x MixedType2.1.json521KB
-
x Nice Color.json521KB
-
x Shift.json521KB
-
x Spew.json521KB
DarkChocoPurple.json5
- SHA256 957a4850dcc5b7c7742b6b5942853f2c778fec68dfa8af7a10469c32da808df3
- MD5 66efebfea67cac80e3ca623748e4ab1d
- SHA1 e4101ce11c879a361fe4722fc0112e809b51a751
- SHA512 ffd5e66b1257e1daed6efd2ee577aab85fa65cf581121afaf53710a0c848340a1b4e349bd82ddbcff5c80c1c9425989de091a8b47acad2bb93482830ad5428f5
- SSDEEP 192:61QpU4aOQRC27OkzwBZbV+DA1nWJQ+Nmd097jHHytEXNZEqQQ:hjcDGlxKQ05
- TLSH T1F6A2AAB6EE8D6C67113B166885544A82F2B5739F804C094F34FDE1AC1F7D8468CE9B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
DarkSkin_Double_Color_GB_x1.json5
- SHA256 04f1d3f54b0d5717d4e13b4c20b70316dccb0f89d91872846edd3c30ed679f9a
- MD5 5bc95f608dc9ba53d5b89d7dcd322b90
- SHA1 457e6f749e051c23f989e29dcaf273f17603c0f5
- SHA512 907dcdc4ffec4519b18f2c25f97fc3ea5345112b36ad8c2930f59bb47ae508db3042c3291e5773453006d95395d0d608942a138366149c844ab6933b194f3f04
- SSDEEP 192:G9Z/UQ4p6nRCqLPVIwqzApGwhP9kJ9yav1DkBYajAK7G:GAkIwNtH2fc+
- TLSH T118A2C8B6ED9C2C6B1277162896590981F2A5239FC04C465E32FDA1FC1F3D8424CADB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
DarkSkin_Double_Color_YO_x2.json5
- SHA256 6e36e4cbe00710be9481741298342e54af7af193f801e144ae0146907e95e247
- MD5 59cf46e6cce5b2ecdc89910ebda02255
- SHA1 a102268fbe8c11f53dbb020b3c572b02ccee89e9
- SHA512 b53d7ae3e1e6c82bad54018d515a46ed8078ec88f63110c71142ed9569d083730435ed87ce4dc61e56016971ce832b160963fbe67745ef38bd81b47285bf8ce7
- SSDEEP 192:GWkWnQ44d8RCQ6PVIBuMyLr3h59iJ9olv1gn8l758yC6:GGGiBGfJIBu1
- TLSH T1C9A2B6A7EE8C6C67123B1A28965509C1F6A5239FC05C054E30FFD1EC1F7D8429CADA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
DiscordcolorSkin_WOB.json5
- SHA256 dd4fdb2c148d341204e4a8b80746d1e06dea7c56a93fac11ae340173d95943fc
- MD5 ccb5345842c7a5b7a87ccc56ad03feb4
- SHA1 9f72d7f26c421daa7cf721d30b5633b5e0de7078
- SHA512 7f9da1086c0a3cefe0b72cb3d4c745041a3c22f830e0ef203762b98e0d1db2a5d96bc39cea6b44190a3f14dcc0f794c2155e7c83202a7e4bd4fca09c4f3862a6
- SSDEEP 384:A/z4dNhdM6T29g4ctkbTD9Advdl8Oct/ZmIVEabP0NN2gM3bHPN6u2iMkrdCtykD:vWbVD4z
- TLSH T196A2A9A6ED881D7B123B169897550981F2E5739F804C058F34FDA0AC2F7D8464EE9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Fake Chocolate V2.json5
- SHA256 4ebfcea6881d38ad224dbe116d0f7f183290a4d3c42998dffd2e615c3b745371
- MD5 6341f0fc7e1bf4ee7ab01e01286b216b
- SHA1 a5da7d9f3f85d363b4f9ef352c6b2ab6373bae5d
- SHA512 40b72bd7895b621d9d13af38cba4e4a084a9f022d82e22530fc1ac3b1284c59c70f690ce5a96b13e554b2178c947a82a9ec09b12e47b608d0652c138645b06e1
- SSDEEP 192:UMR/B4ly3zCdjHVKvFw0PJgBv9wTq90C1LXgxa2rs2Dj:MwdvpoSWdaL
- TLSH T15AA2EE66EEDC5C77123B56188A800581F6E5B39F805C054E34FEA4ECAF3D8454DAAB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Info about making you own skins (by fl user).txt
- SHA256 5f5b6371fdbbacea2167f00653a9fba9848bd831654caaee3ab383514fa0b93c
- MD5 764dab1cb3f83924e185fec22496f7b8
- SHA1 dba43b18c2a727ae691900ee04459e5936186342
- SHA512 6358ac782a4c9a28b0cc4e198c1cc39700c5999b836ebf6982e13e36e50824cfe3c802cf2272cddeb51644154fcd2259aa9868f8d8ae476c1b5d93617b13cb6a
- TLSH T1A93162AFF7490333116B0046225DE9D5F38E697DFA9A0AED3C2C408C2332112E2721DC
- MD5 SHA1 SHA512 TLSH
Links for Skins of Graut n Fl user.txt
- SHA256 aeb2dfe0168981009993a3076b8906c2056233f8cc4d48056e13d15b11152069
- MD5 4864521a73d7ea40693c7d9941958c45
- SHA1 5015839051eb0ad4acc9250c193a5c6d4212b186
- SHA512 8f88ac95967e86aaae01b5e81693e904dfd1452740e09c2624715a2b1dd3ddc2d5e04a33908e2b9044c04d4f158a09d514e971ebb01502f5892c875c226807d1
- TLSH T119B09BD37D1F5F059F1785A45A8D325C75E3735D29D5843D542D617314055BD00411A9
- MD5 SHA1 SHA512 TLSH
MOD.1.json5
- SHA256 a8bcfbb1a3ecfdbbda131b74b074ceed44a8b5ad79770817550f7735c1f683e2
- MD5 f65cfb3c8e0a24671aa79e63f114ae5d
- SHA1 5b824e0592d74954b409e3f73a88cc188bc7eec3
- SHA512 faa7294f5592de512fa99a8cd608f2754f341f2a59690b174e3b047e3125d01fa597647e5f08b129b49b46aeffb0200c35c33c743af2a483b68878e46809c0d2
- SSDEEP 192:cj81248x5RCs+2WV4Fe28+rmOlyqg9vFe1mVybca/9AaOu:D6/FGV1RJVy7V
- TLSH T139A29BB6EE8C5C67123B16A885510582F7E5339F805C064E34FDA5AC1F3D8858DAEBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
MOD.2.json5
- SHA256 0f71c7d2df40190bfcfc45ce5840b9f0b353ca0a9632669bb651f991a6c061dc
- MD5 0d12c9976a78f11e72c20d77c1e5fdc4
- SHA1 f44bfe362026a9c5c9187051e939f4deaf3f2daf
- SHA512 3cb11cc0d1d321658f9ec5ad17c326946c85e2a85a0dbf0842afb6349a58592b1d79eaf530cc470106f5bb43e9fc5c052ab4d83e9acd4956e89d18cf09656691
- SSDEEP 192:7Zg81/4jQcRC6xmVgvfEzPQ3W7yKg96Ee1V6zEk7wq1b:00Kvmmnxqit
- TLSH T18EA2DDA6EDCC6C7B223B16189A5545D1F6E5339F805C054E34FEA1AC1F3E8418CADB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
MOD.3.json5
- SHA256 97788fc31f67e97a666153a0f9fdba5e9122f3ad7e5fcc0f854e4480ddb9297d
- MD5 b48c0c325c61fc8aba1309910e20a67b
- SHA1 6015346ce583bbd00e1f1dde4d043130212316f8
- SHA512 3411f2161b30fe54811a77de5721011259e6eae6571e003d44d0f9117af57ce51761eb22fdbe54197f7676c390ce3830532c078c430bbdf03941cd3c6613cb9e
- SSDEEP 192:7s8N74PkQRCqtbVQPLM/t0TWDyKg9Gge1t+nEojw6JGo:OM3PewnxS2Eo
- TLSH T12DA2ECB6EE8C1C67163B566885490481F6E5339F804C458E34FEA9BC1F3D8824CADB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
MOD.4.json5
- SHA256 c9d61b352bdd6162128041426830ad339b4009bf192ec1a880367510bcd3b95a
- MD5 37a19623a7c742e27042bd7106dfbbd0
- SHA1 3a109a658b72ee20fb95c7d3843f7252e427f3da
- SHA512 bb9b162ee3835ebbcba6de4808395c3cf7390e9fa1d516ede0e09b300f486e45362f49edf9b3703558e0e3feb42cec29158b5fe405004a814b0b0bd39950a72b
- SSDEEP 192:XC8r74hieRCSP/VwTJM51+5W/yyg9Cie1t85EyvA6Td:aA/TisD5scN
- TLSH T1B6A2A8B6FE8D6CA7123B162886550582F6E5739F804C064E34FDA1AC1F3D8464CADBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
MOD.5.json5
- SHA256 a08d1971e6cff42a8740628e86eeb7f63610d8dd6a41ab019650b985f43a0993
- MD5 659738b2a7ccf4003a02dc26a1465777
- SHA1 c9e857476fc146bb4a57e5ce98fb21d30f3401ab
- SHA512 fb1895e388a725f87300f86f95e44ca0602e7a6de1357ca4968ed62c07a61cbefa88b82a24e2cdeb1c04d9ecfff44a6af7d84e4c70e158bc5413309cd2210a59
- SSDEEP 192:7L8pO4UpRRCQ6LVINSEsWDCWlyhg9u5e17HYE7JsGim:a6dNIxp+9R1
- TLSH T182A2CCA2EE8C5CAB223B155C85414582F7E573AFA04C058E34FDA1AC5F3D8454CADB9B
- MD5 SHA1 SHA512 SSDEEP TLSH
MixedType.json5
- SHA256 1b6e979712725ef3c9ca3111f4ce0a2cb7c8f4f25c3b86063aac6948a3fafd91
- MD5 9cda3983030e25b9677e15e54b503055
- SHA1 788091be4f58b0bf033c725bdf4bbb79ad3142ef
- SHA512 538b1899f781e6bc0e62bb6a43f848fb6cdae31d27458e5c919fedda1ff854820fa74786cb8afb4ccb538223293d042182ff661e92824d3923c5e431dad8d132
- SSDEEP 192:gvCiq4dIgRC6QnVZVyI/a0u6Z1ZdN9YDHufNnLFw4gmP:26zV/pZLHwy
- TLSH T133A2BAB6EE9C5C67123B162896954882F6E9339FC04C054E34BDB0EC5F3D9524CA9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
MixedTypeV2.json5
- SHA256 5499a10c6d301ae1e0fbfc9ee9100f9179ebc50dacfd0b2379a594aa2393b121
- MD5 5dedc6319dc9474bc637eab847c52a43
- SHA1 6e3aa610d21163f8879fbce52055cc3d25daa4db
- SHA512 fa1ef50fcbd3bd174477c1f2476ebf0965b96c781a1821555b6ff3b7c84f92d0d4a56a645e13f2407687d71718c893c8b9ccf7e4022a49568a53711f42df1eba
- SSDEEP 192:qZ6GA4d8qRCuOvVxK96/W0DXMlw9K92IcCLK6RPL6MZK:4G3KePN8Fj4
- TLSH T1D9A2DCA6EE8C5D77137B069896540942F2E573DF808C095E34BDA1AC1F3D8818D99BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
N.Mod_V1_Pink.json5
- SHA256 0d3f0890c2a268e5888b56e6582508ab46b7f2d63fff7e1e31545e62080f879b
- MD5 47ac1817365a52de18d71874a9813e6a
- SHA1 1e599ccc50bd92a21f79d35784e99fe2c2f82170
- SHA512 a64b35e6cab3d82eaacf8362d352224e7a57bf5d04b6549260537b8da06d0b4fe94515887958612b50471b157a5bfaa9e6dddc2ecb782c7f6ef3e56ba36c801a
- SSDEEP 192:HulRQ4dOKRC6LZVQkr9xMEnCPeWs90dy1qRz59HZ8yW0:MonkfTbZmRVX
- TLSH T1CBA2ABA6ED8C5C67123B1628A6510582F6E5339FC05C458F34FEA1AC1F3E8425CADB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
N.Mod_V2_Pink.json5
- SHA256 c2d90afbb7b2571bdb5d20b390fcd392287839d7e6b6f958be57c82bbf334ca1
- MD5 cab69373bd9ab8f31629c40b43167bc0
- SHA1 9b7374c9572a61d02791be1c23aa545be95fb5a8
- SHA512 4783917576ee75e79f3120d7bba38a7cc34dd25bf739718faac01591a66ac2f8bf8aa149fcea6d7ec461d38d5213bf48dda79f094a526d4c3bab969ae3fa9dfd
- SSDEEP 192:ky9lQ4lOKRC6PZVQkr9lME/WPaWg9MdK1GRz59HZ8yWb:1Qvk3L3NmRVw
- TLSH T157A2ABA6ED8C5C77123B2A58A6510582F6E5339F805C458F34FED1AC1F3E8425CADB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
N.Mod_V3_Pink.json5
- SHA256 257910b07a17e541d185622ac2dd84443eaaaf51e096b4239f1b8f837bb55599
- MD5 71d22be9c7fb68a8b483e0c020421c06
- SHA1 31a0c55ef2c5384cf0e018916919558e46d70e3d
- SHA512 931a84b7c6f063ddf552113b40e12d411997c6139b895d928105b3e7929311dbac40120f1444be6f5528e2400db9eba3e0f2a815a45d4c37b75efaaf4e1c1b70
- SSDEEP 192:mhq1FQ47wOKRC6DRVQkr9VMEnWPyWg9Ype1dzIs2Z8yW0:me7RrkrDLNtCX
- TLSH T110A2AAA6EDCC5C67123B1658A6510982F6E5339F809C458F34FED1AC1F3E8425CADB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
N.Mod_x_unnamed.json5
- SHA256 dc49a1ce8aeeb5449d1e696aa3fa2b86afab15cc3d240398f3d6588e366a0855
- MD5 4ff2189d647f91a8212b1f83f34861d0
- SHA1 085c47dfcf40c012a6c4001418ad2228375faef4
- SHA512 d6c3874e573055431483925bb5c06a5970f9d1412ffa603984abb8aafb83d9a06817acfeec52862844e44b28cb48e2d91e961fd735114b4d482b4dea83ef1ca5
- SSDEEP 192:tjQCQ4lR9RCcWRVARKoOJ7KWVy1g9LdK1Rz0hLd8yWo:p7jRm8VCmCX
- TLSH T1EEA2ACA6EDCC5C77123B5A2896514581F6E5339F804C058E34FEA1AC5F7E8818CADB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Simple.MOD.1.json5
- SHA256 112562ed0a3fc8dcb63bb44b38ddfcabec989dcbb3f40c3edc26a5f4614ca835
- MD5 48cf173c2a271109fc525e2535dd25b4
- SHA1 4ee4569ed6c6bc98998bd6d3c5e878227b6b1b31
- SHA512 9e0ca6720e4321a3fa5ea8c75b0ad2f6c3b97de711af5fb0ebbd560374d0526ee1622af5608178948a2338e99292ecb44d80f77994bf20514b24023231b60051
- SSDEEP 192:e6JVQ4h6WRCqDoVIkRwBsG1W7ykg9ree1aYNE+H8WXq:XMmkibL3+w+
- TLSH T103A2B8B6ED9C5C67127B1628864A0982F2E5239F804C855E35FDE1BC5F3D8424CADB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
SkinOneColorBlue.json5
- SHA256 248d3a8646ebae6bbf2408c1513e8e3e2f858930624cce7da72d03bf0b2d230f
- MD5 8414e28a97d9194d9163ca4f4c606471
- SHA1 36343138abf5f839e8e897e01a6688ea9582a8b4
- SHA512 02bbbda1b8804c1ee0e7c65ee33df99e408c1a81a7144a1468054db2b15e12489ca76f7035df3f2ba7f2bba5ba123992cb0850b25f534455a979868151f7bc5d
- SSDEEP 384:SxSPOYlMd9VVxR/vZP8VygtDIDmJDX51EJ4BL8fYGAhtQ+FZS:RNlMd9VVxR/vZP8VygtDIDmJDX51EJ4E
- TLSH T158A2DCABED8C1DB7023F169886544541F6E9638F808C498F35BD94AC1F3DC524EA9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
SkinOneColorOrange.json5
- SHA256 a5f7f70d98f15fdc962f4e7eecf4df1ecb7a0dca10229a9ee8cd50ad122a205e
- MD5 4b7dc673200a92c7a854b17f8b28ec5d
- SHA1 a7a42d8c3445fdcaf031087bb64427e2983f5cb1
- SHA512 5c118ad4971be0906e4394d6f19cfa76ff81782f2efd589c98d51817d09be63845266c3aa41369390966452b5391fa473d309387923221c6fee0346a1b349657
- SSDEEP 192:Mt81p4dRGRCU1QV1dXFNZ1KJ8nYYw92WqC9wAa4/QqnT:KPVdX2n3X/3
- TLSH T1E2A2DCA6ED8C1D77033B16988A540585F6E5638F808C494E35FD90AE6F3D8424EA9FCF
- MD5 SHA1 SHA512 SSDEEP TLSH
SkinOneColorRed.json5
- SHA256 88d4102190a80092bfb3c929d70d1df82dc28374adca265f3d87523728a65e80
- MD5 800e406c9ede7c522d83d768bee27364
- SHA1 8e0d9d9eead0b3a2cac59d85bb684854c109a646
- SHA512 32da6d9eaa8236f2eec33c69c37cb50ab21e414cca6afe5224f444092659264e76c7964453fe4310c792ba8ce3cbf8701d566cbda9a2dff2e8a77658e050f58d
- SSDEEP 192:t485a4dHSRCqYAV1jNQFUn18BYYf9optCHrFb1xcqO4:1tqjOAdcTRT
- TLSH T196A2DBA6ED8C1D77433B16988A540581F2E5739F808C494E34FDA0AD2F3D8524EA9BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
SkinOneColorYellow.json5
- SHA256 2758562fbce191c6f8e8d8bb7e03521aa7614346477576b895273f75e4beef33
- MD5 5c7893cdafa3c397cc7fdccd61865093
- SHA1 d5ece9d3b95521c3c84f743ac943ad1b939baa5a
- SHA512 23f79aba62706d5f1cc2561fd8e9b20722b77c1f1528b13338caf38a81bfd4b0f2d60ce2126e5717ad867e974d0f0513e2feee432ff6f8d475966cc0b582042a
- SSDEEP 192:Us8tm4d3iRCG4YV13Zg12Lp8tYYL9Il5CPbVLF1oy+S:Ctq3Cix87l1
- TLSH T1A0A2DDA6ED8C1D77033B169886540541F6E5638F808C495E36BDE0AE6F3D8424EA9FCF
- MD5 SHA1 SHA512 SSDEEP TLSH
flskinner_x64 (1.0.45)/Interop.Shell32.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f402135257c1a9b8a8ca04f8bffa9a55c65884af596085734d8e9fd7f71cfcc2
- MD5 4d4b5bc09cd3b307d1ee8a34ea121d6a
- SHA1 d19d1c597325f32a6eee66a4e585cf7eeaf3ca13
- SHA512 69f6d50a165ca91d1ffc120898c4f57b9df4714ae30012ddf3219d2b0b739cb62888d87dabb2a1945b6a9ad45c1b994c303d79d5b6ccb43857d48df21758b274
- SSDEEP 768:PFaVlopWJKihdKUvKJC6X0ia0Zw15S6oDuqj7tr+BJ/Fqd:daVlopmiUZ60iu7Vmd
- TLSH T1B103E5AA726C8224DD3E43FE86E76E505371D1055A73EF43146EA3290F075AC8E427BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
44830
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/MaterialDesignColors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 976eea4567656d536a6344b3834f958f2b9e27401b94c643681770437d5abc68
- MD5 39367419516f5f3df9ab1f9e5d0bbcd5
- SHA1 762c9acdb09bfdf40e700645131999202abbc871
- SHA512 20ea8a64a14579ef5403eae8a6345afa0f9b12229fdb8bc869f7a8cdd4e785093b9f60f9445be738266a161d75f53a8b8e42a69b2f9b4cbf4684f5dbf5113ae9
- SSDEEP 1536:2ZJb/nKyGMbYrE4jKg4J4A+0MDR1TU7fKoVxbYCCMIRFxcE5istk0uWE1Ci4oggj:2DDrYrE6oJU907fKoVxb+Y
- TLSH T17454735C1250D0FEDC13537A4838319A62277A36AB954F9AEEAF31BD9C1600B9F335E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
304930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MaterialDesignColors.Wpf\obj\Release\net45\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
290KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/MaterialDesignThemes.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 013a42b8c6ffa29e2198eed4faf6168247b6550a4c4ed5d82023a1d82a08e27e
- MD5 fbd761926164043ac71ee9b83ab37fd1
- SHA1 38d44b0f40fa31124ba139adeb6f7adc7e53ee19
- SHA512 c2a0be2d8b5b98dc19ad167aadc1e68905ad259e3b0e020cfb95a8a816964549c98a9c5bc44b8f4640147bfd8555e799216b8dba13bf0eefed9582782da552d2
- SSDEEP 98304:OXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fShTf:onJ45/9iD54+V11bFv4z
- TLSH T1D8762E2CC901A76BE2B7C26881DE4A17F162852AF53D5F0E30C71B6932469837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
7426462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MaterialDesignThemes.Wpf\obj\Release\net45\MaterialDesignThemes.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
7.1MB
Virtual Size
7.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.Shell.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ea25be49a4e96c43c20bc29eb1ced078f4e0bcec4673ce722271c77bc2fa121
- MD5 f6a0bdf17dbfdc16cec93537731571d4
- SHA1 22ef1d17448c01f9d06eddc0a4ace8827699a877
- SHA512 c665512ac8cd86b93b2f60061cc6101222709112a6f10b18bed76e94aaf6730aaef100c10bd28b71ee96c704f3576ff0641b13af618e1f3d4c2515109771789a
- SSDEEP 6144:PpXcF836yvCI++R1yjRbcq/9NlKCuAg496KqMbwFkguan+W86b8c3v6n9c6KwZE4:PPVCbbcC9P96K3wFvuI49Mmn
- TLSH T17AC429247BF5951EF09E977CE1AB162297B0D311F103DB1F0AC026AA1CE37514D89AAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
593246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\Shell\obj\Debug\Microsoft.WindowsAPICodePack.Shell.pdb
mscoree
_CorDllMain
Name
.text
Size
571KB
Virtual Size
571KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.ShellExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c21bc4847ac3c75db64b5f7afeb0fcb0e22ba436b7db80692523b4810b046d22
- MD5 7f616473bc928975d2d8e9897e41d1e3
- SHA1 6b665bf91c0de499b3c94ea94be1e9c44aab0abc
- SHA512 d7ebd31e30fc266fc2ca8d4e9f6d3ff2c595cd4f8d2cf60cfd662db2902e8f262f805da0236110979a563a09c08f7908cf66e327761c2e075580c0fd47466d02
- SSDEEP 384:3fSzdiw/AuYKDW/SSg5qGhei0kLmmZXLVyRohwhxrqwmzSgaVAap944G/NW2TslW:vI/ARK1Sg5nZXLVyRohe4zFABkMk7
- TLSH T1CB031A0457FD8637D4BE4678FCB2051047F0F543ED43EFAF4B94A19929A73A4C891AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
44078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\ShellExtensions\obj\Debug\Microsoft.WindowsAPICodePack.ShellExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/Microsoft.WindowsAPICodePack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21e140dcafa3e251373a712423bb111570737e95e4dcfb6f56868d7086af7686
- MD5 5d7da47c86475dd23094ce4bbb6c9001
- SHA1 af31272c451996c8eea7b2e56a79b8088c606c3b
- SHA512 cd193963d9c5a5959a8ec2503224079c806804d049ed927d654fe241113af2514d24fabf05489801ae283578f384224ecd1fb887a96123b19c70be0600e36faa
- SSDEEP 3072:ApN+OsJcYnyhiV6WPCeC0ImL6HKgqYw3Flih:Ap0OsPnt6WPCeUHxZ
- TLSH T1E8B3392577F8162AF9FF1BBCE4719120CB71B9826A13E72E0F94716E08A3740D858767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
119678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\Core\obj\Debug\Microsoft.WindowsAPICodePack.pdb
mscoree
_CorDllMain
Name
.text
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
food
Digest
8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
696798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
flskinner_x64 (1.0.45)/flskinner.exe
- SHA256 0595972510c00b1c6443a8531a26b39a10a92d329fd32b79177953717313d257
- MD5 22a927ae10747e2b3365cd1b9d83e15b
- SHA1 351966f77add77250d1829c08ac1f5841725feed
- SHA512 599e0551b6f26494c45fdc2a21374cf65f4a166947759a4871ef76833b933d305db2efb5f1294c63e163c66ae10fa1d8626e64319457f990acc3c0e1e6945440
- SSDEEP 384:TNJtbtbgzs7P28cjQXKJqutGiPnoYwiFVJOnKxgZ30xgZNOlMdn7WFr8rZu:RhC8cjjn/s/Oqdn6J8rw
- TLSH T1FCC2F904EA9C5E73C6AF07349032424252B2B747D855EF1D7ABD904C5FAD70B06BA3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
food
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
flskinner_x64 (1.0.45)/flskinner_core.dll
- IMPHASH 11fe60d9e8163b3572c91c8a4f81dc0c
- SHA256 1f3693c01cf6749d7ef588300afdb017bc5a42bdff8d41275ea77e40a2dc2978
- MD5 39b638afbeeab479d4e9a0a7d34935dd
- SHA1 19ddd11e690527ce20f3bf0a0226598425d04f64
- SHA512 0f380005aa47e5f84cdfbf0906eac2760c332752285670dce7a6a459890895fa6ebb13b62e56c3787d5d08ecdca5326a3c2fe589956bf73befe129899e9a7058
- SSDEEP 1536:tJAayGunAcgrp2n++QQxPPSTmOSyuZ8E/zn5J0d2sWhOmd09dlXUcm33It0:tJAayGun/uUn++QQZPimN2E/z5SdqZM
- TLSH T1B093496BB2A544BFE0738238C8670E25D776F8111A218B6F1764025E1F2B3D19E3AF71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6756
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
WriteProcessMemory
GetFullPathNameA
WaitForSingleObject
ResumeThread
OpenProcess
LoadLibraryA
GetProcAddress
VirtualAllocEx
CreateRemoteThread
CreateProcessA
VirtualFreeEx
WriteConsoleW
CloseHandle
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
user32
MessageBoxA
get_version
inject
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=133, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=33, id=261, version=28920,
count=5, id=257, version=27412,
count=95, id=1, productName=Unmarked objects,
count=1, id=265, version=29112,
count=1, id=256, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=255, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=258, productName=VS2019 v16.7.5 build 29112, version=29112,
flskinner_x64 (1.0.45)/flskinner_payload.dll
- IMPHASH cea5d8b7c02baa1de929b318a76816b4
- SHA256 15346d5aeaae4ce34651aeeaed940698a71b9df7deba690d401b97fa49722d75
- MD5 983ed4df4fbdb177fa034edc1f5237f3
- SHA1 1e4986c38a4446c2086b8d63dc5bad22e84d2f04
- SHA512 520d6ad0994581dc584451fe042ebb4e7d450c693dc5d1194cfacccd8e62c950ee5d74e8a234fe590aa96369b4b6c6fc5482ef90145c9998173f3c34e978f43e
- SSDEEP 6144:NDA3x4qVR+S9U+Vnt6GkJmbEMtGKDMQL1jjBXBE+ohPTohO4X6QBL3m8:NDAS4b9U+doGkkbbbjj0p9ooEjY
- TLSH T1A7B46B1A626403B9E0BBD13CC9579A46E7B1B89603618BEF13E006361F577E06E3F761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
209972
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
SizeofResource
VirtualProtect
VirtualAlloc
EnumResourceNamesA
FindResourceA
GetModuleHandleA
LockResource
LoadResource
GetCurrentProcess
K32GetModuleInformation
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
GetSystemInfo
VirtualQuery
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
LocalFree
FormatMessageA
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetLastError
SetLastError
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
GetFileSizeEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
OutputDebugStringW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
RtlUnwind
user32
MessageBoxA
shell32
SHGetKnownFolderPath
Name
.text
Size
368KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=19, id=260, version=27412,
count=174, id=261, version=27412,
count=14, id=260, version=28920,
count=10, id=259, version=28920,
count=71, id=261, version=28920,
count=1, id=262, version=27412,
count=7, id=257, version=27412,
count=138, id=1, productName=Unmarked objects,
count=7, id=265, version=29112,
count=1, id=259, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=255, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=258, productName=VS2019 v16.7.5 build 29112, version=29112,
x Akatsuki Skin V1.json5
- SHA256 14f6c5c7219c4e276a6e628542fbc8dc05d483ced609fecc20e4cfac5ba1938d
- MD5 d7a26de801883ae9246626b6819bcb02
- SHA1 358d07d92fbdde2a92f4d4457893db9322d98980
- SHA512 c6a3b411bf01811b8805cb3d2f400cf9439fc28ef3dc2236efdfaad9020cbf1398fdc3266bc5032f04e0751bd146616000af7c21b9e6ef51185db90dd0273b1b
- SSDEEP 192:/mBEh+44HDvCq88dl/mco0rG8v1Ys9RVRaOndPxRciaG:Pob/Azu/3Vt
- TLSH T10DA2C0A7EE886CBB1237573886414581FAA5339FC04D090E35BDA5BC1F7D9028C99BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
x Aurum.json5
- SHA256 3f3bb333bfb8cc67a3ab0461985db9fdb099024daedb73f406abe484002dde37
- MD5 9c24586d1e9465d4280d3d85c1227ef4
- SHA1 c9a17046ad550ea1971284f823d0647303e0ae12
- SHA512 f512ca563cbef745b253f49ef714ff106885ccb66a320603e4410821aa3484e424c300a213bf07b6b69ffc5b7511b72d5b7eaefb5abbbb57f1a354d2f09727e0
- SSDEEP 384:YwuW3edZHLCSsIi4/shhM1teayHpxEkHhdGf2oJI8AxhWvs43ERcsghcgiptbEBw:YwuW3edZrC3Ii4/shhM1teayHpxE6hd1
- TLSH T18BA2DFA2ED8C1D77023B0A5896598682FEE5339F804C065F35BD94AC1F3D8494D9AFCB
- MD5 SHA1 SHA512 SSDEEP TLSH
x Clown SKIN.json5
- SHA256 aeff26449c9d56f5eebba26873ce4ed6a36f909c810b53df4c748ace2b03cd10
- MD5 df90026e9c7f536516ca1db739761136
- SHA1 8a57dfae857cbbf44e6f5fad8bb2fcf4ddd0e8d5
- SHA512 82f662b31331f0ab8dabb92e8a85a6bd2b2a8234244d869d38db0ea658a6ad7d7f5c3e348e4092865aed9681f7f3ab152e0e2d12f64119495c59878a2770a891
- SSDEEP 192:k5boq4kYX/CheBVxer3KFt1Gv89YYZ9DTXW9dX5oiaarpN:9rfeTCupuy7V
- TLSH T169A2B0A6EE8C1CB7123B1618D5900942F6E573DF808C494E34FEA5AC1F7E8514D99BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
x FLEngine_x64.Black.json5
- SHA256 d4f5789acd7f2c900c2e296b0610efdd29e908d5f7f5d1058cf11cee03ac3612
- MD5 d3d13f954aee7b22b0476113bc74ce30
- SHA1 842dab89a0aaca8358ab989aba30fc210b0d65c9
- SHA512 70aa5516a21505e406439e2332756f8d792a063c4c3b7493bb8502f6a60b96830933b73363b7bb19a51a37fa71dfd087ea66f209cf2b6da78d72f6aa4e9bcc67
- SSDEEP 384:iNzhu1/xrTDCHHC54BGqoO5w8zKp5gQWWLr5y8S6vyEsS692pC4FkdzVS+FzGue:iNzhu1xDQC540qoO5w8zytWWLr5y8S6b
- TLSH T11CB2DFA7EE8C6C770137162892564982F2E573CB804C465E34BE90AC5F7EC854DADBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
x FLSk!nBlack+V1.json5
- SHA256 0190997fb79ba9b349724e07db3ff2a92d15c4456c63fb61964aaa1df2780495
- MD5 ed568a41f7df78671695678b05cea809
- SHA1 f8e497c88026e2a8536b4b9e936e3f7a45568c90
- SHA512 040f664226331d054a1b53917f931919300f59d6ce9af5e1a4d55971d1953f21dd431ea5b3c351e4e9ede358fa2452620dd6a7b10315870fe98a468b50fd6770
- SSDEEP 192:zLmwWNhjAXt7t74b6CTdAARCC5Zy2izzEVko13JPssf4B4S/Lq4Y814YP9+a2yfb:zWh/pYeBgx7/
- TLSH T1E4A2AEA7ED8C1C67123B166886550941F3A523DFA04C055E38BEE1EC1F7D8428DADBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
x FLSk!nBlack+V2.json5
- SHA256 8228ab335001e0b3de5d9fcd59b28819559864e6f4d04b8e2f3b849af1bd0fa7
- MD5 8a8735ee0eee3887e8abecc3de6af33c
- SHA1 1e4805c49cca04937ad2a1cc7ec748596d926b0d
- SHA512 dc9fc9916275ef03f30a85e216c0b42c5b8617553dcac707f7f6c13e73b7abd70725341af7bdc1a90f7155b01124ad98a5f0978df68929727644da24b4541852
- SSDEEP 192:ejA134bpLRCEDrVZJN1S/rqS681YYP9YkgyZ6SgyrgStH:wV3JgKJglTp
- TLSH T1D3A29DA7EE8C6C77123B1A2886554541F3A5339F804C054EB4BDA1EC5F7D8828DADBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
x FLSk!nBlack+V3.json5
- SHA256 d95298c0e9c49461421c4288066dc1b3eb8852483e31700a65dfda680822ec55
- MD5 ad1fac7032ea07aa235b3373085be48e
- SHA1 f9bf84158ceaf1e97e6ecad4a9e39689cdec4c4d
- SHA512 f2a587573f602f871c8d795217fc78d06a5bda5c78e42e1b9fd4dc28da3220c84d28d376377f64bc73c297132baa12f12c5ea738ccfec843ad037765daa471d0
- SSDEEP 192:XmwWNhjAXt7t74b6CTdAARCC5Zy2izoEVko13JDsDKT4BHPS/+4+yuqST8DYYC9K:Ch4JoDPV27/
- TLSH T15DA29DA6ED8C1C67123B166886550A41F3E523DFA04C056F38BEE1AC1F7D8418DADBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
x Grub.json5
- SHA256 cb98cd1d21f6db9bbe536efead9f8ef462baaaf512feebb8e462db81251c504e
- MD5 d17f7662d0395ac55a3df29a094fe0d0
- SHA1 c2840e6f40cff0b3f785e176455e7194ce30ed44
- SHA512 c770facbeb5855459aae4fcb9a5871cd8532b742c0f80f3d81bdd405d09a9dc8481aad5a746511b851675ca177ff3f7ea639303a3095315960f5fed656228ea3
- SSDEEP 192:zZs85O4VXCRCiEuVFUwF0oPzt8RYYL9pdZC3HJ/BJUiaH:1dcf/RNAaxc
- TLSH T179A2BCA6EE882D77033B1A5896900562F2E5738F804C455E34FD91FD1F3DC829D9AB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
x Lily.json5
- SHA256 9eb482eabb5efdf4115ebd3f21aed721a29e3d7f35e7090748120d23cc0a6c2e
- MD5 b179b4a9e711d1637a27e3ca5767aa51
- SHA1 3397961960a697234ce7c756e4762f2798a82ccd
- SHA512 3805444233cee7a88606ee2a67628d8b1ded84ca602a5d2a67387bc7f8eb514ee043c9355c5e41bee12990d56090977adde52c82e267e44547945b41f60d7e5f
- SSDEEP 192:VcUF34g1SRC8/KV1HnYGGp4B8b5YC9BYsWJOe8mrguthI:YWZHAW2dUPw
- TLSH T1C1A2ABA7ED8C9CA71137161895550881F6EA23DF804C052E38FEA1AC1F7E9464CEDEDB
- MD5 SHA1 SHA512 SSDEEP TLSH
x MixedType2.1.json5
- SHA256 6487fe3f47971e798f4c4a12e993906b0c8c72418eeb0dc96ccfbc54180f77f6
- MD5 ba047ee22bffdc1905799887ea091f18
- SHA1 b20a7653b0c3db8256501ce63604ab09eeb5846d
- SHA512 2f07e123372faf429a8d62cb0f44fd1111af0d43764191c4abcab6f718076ad6707572a4b04255a03960e40bc384d40cde43437b8ba536f7ea4d9a2059a0b2c6
- SSDEEP 192:cClGA4J85RC3zEVeh9MzxBGMlw9K9HIcjyKrRPL6MZJ:qiyheiN8E87
- TLSH T162A2BCE7EECC5C7713B7161896410942F2E563AF809C055E78BDA1AC1F3D8428D9EACB
- MD5 SHA1 SHA512 SSDEEP TLSH
x Nice Color.json5
- SHA256 d34b31a92ea8ca2f3a3aa1d0f5be5aca209eb97e6db04aad34c293579fe18c4c
- MD5 173a38b0af711776392f795ee3188fc4
- SHA1 4e8f2a7dcfee106e74e93af993212521c32e0a68
- SHA512 8299f01b9bc72d5b202d83215af4f9db3fca971e4c3b7621e2ac421f8e6bb04a9f1b63341cb30c929268f9c5f283c05f87a680b121e4f0b81e86f9ea15d379c0
- SSDEEP 192:O18NJ4X5GRCUVbV9iPdXKqp8HYYo9vOKCdooiwfgiXF:MJeiJlXHKHB
- TLSH T18CA2F0ABED8C1DBB033B56588A910582F3E5739F904C059E39BD51AC1F3D8814DA9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
x Shift.json5
- SHA256 b9c26bce6dc1135ea1523ddaf5c3a712a903c724e8adfc94d811cc638ff16468
- MD5 ce74c02172721603c214193990dc8b52
- SHA1 f5064b83e7654fdf4322b770dcc019b230ab7e8e
- SHA512 076ca1a8ca7f1eee5cf4703eaef7e85fb5ca79ae8ac363c2199e4377a0405c5c9680ec42f24e84e78f8f55081f2efa071ee03dd339fe998ea2e8ebe7648a21ef
- SSDEEP 192:OS8d04djWRC+awVVmh6yoO5B8dYYV9Z37Cbl3BfRQ+kD:ABImcwNuud6
- TLSH T141A2DCA7ED8C1D77123B16989A500685F2E56F9F804C094F34BD95EC1F3D8424DAABCB
- MD5 SHA1 SHA512 SSDEEP TLSH
x Spew.json5
- SHA256 b55ed7aed98896ae84ea4bee93433e35e0fbdc5e7eb6aaadac0bdbaf0496528e
- MD5 7b0acd1ade6f030e63656342d1d59ffa
- SHA1 9c962675147b141134e076f12c777d7384703536
- SHA512 9f0c9ab339451fe80eb65d9c4132242f7fa735b57213621d4c57a2a59e54a4fbb60853b79d0293e61a49ab81f7037df26bdbab1eb8840a13a0ae5c50a1cd1077
- SSDEEP 192:WWOFf4yFIRCpiIV+N15jeARADQw692sA7FWTUun4i1I:lUGNvrzxaUO
- TLSH T11FA29DE6EE881C7B1337592C85414582F6A5729F805C0A4E38FDA1FC5F7D8428D6EB8B
- MD5 SHA1 SHA512 SSDEEP TLSH