09de71b741e8168bbcc8c359750c3f1c80b50030d5df15f127e75b4225808794

Analysis

max time kernel
124s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 09:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
Size 11.2MB
Sample260701-k9953aav2j
SHA256 09de71b741e8168bbcc8c359750c3f1c80b50030d5df15f127e75b4225808794
MD5 7d5a914ce2f92d01d1b908d8e0dd9138
SHA1 14b5b34a336b4cab31af890c50fb2bd236251bff
SHA512 958472a702981998ce9460c2fbbf621d498ab3d74e84bea81c08983f8a31b2f343a76ce1a1c55666e5f85f85a5b98b6fc3fe13d414bb213403f2e7beeae1554a
SSDEEP 196608:Qi+eSObaLur6ixGYTDXTDBoIbRF4u74Sa2kHFFHrp11QpWk0DrUOEX67lg6AvOz:Qbsr6ixGADXTSIVF4uu2kHpT1S6Amz
TLSH
T1D7C63391BAF2C2BBD7C552B504AA96094673AAD417EF4DC3F3C43D498E706D93A3B240
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

bootkit discovery persistence

Malware Config

Signatures

Modifies file permissions 1 TTPs 3 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
2528	icacls.exe
4892	icacls.exe
3164	icacls.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQPCMgr_Setup.exe	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQPCMgr_Setup.exe\GlobalFlag = "512"	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe

Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
File opened for modification	\??\PhysicalDrive0	QQPCMgr_Setup.exe
File opened for modification	\??\PhysicalDrive0	W.P.S.20.3279.exe
File opened for modification	\??\PhysicalDrive0	W.P.S.20.3279.exe

Drops file in System32 directory 51 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\vcamp140.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\msvcp140_1.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\msvcp140_2.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\msvcp140_codecvt_ids.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\vcomp140.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\vccorlib140.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\concrt140.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\msvcp140.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\msvcp140_atomic_wait.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\vcruntime140.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Windows\SysWOW64\ucrtbase.dll	QQPCMgr_Setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GFFtsysCustom.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\SystemAidBox\QMCommon.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMHttpNet.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\IconExceptionFix.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\PerfModeLow.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\QMHIPSEngine.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMTrayPlugin.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\CubeNetSpeedTest64.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\QMHwDetectTest.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\CubeConfig.ini	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMFileMonFrc.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMWebFWCtrl\QMWebFWCtrl.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\apps\AppUICtrlInfo\HWBenchmarkUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppCtrlInfo\QQPCLeakScanCtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\HWDiagnostics.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloaderInfo.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\LocalConfigMap.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMPublicTipsTrayPlugin\QMPublicTipsTrayPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMWebFWCfg.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\FullScan.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextScan64.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMAutoRunsMgrPlugin\QMProcessRunningTime.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMTrojanPlugin\QMTrojanPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\apps\AppUICtrlInfo\ScreenRecorderUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GarbageClearV2.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMGuidService.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\apps\AppUICtrlInfo\DocprotectCenterUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLspPing.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\apps\AppUICtrlInfo\NetworkMonUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AIPlugin\pcmgr-ai-security\bundle.js	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\qmbinsx64.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher\QMLib\vcruntime140.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMScriptHost.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQRepair.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\beacon_sdk.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\InjectHostExe64.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\SystemAidBox\TSSysKit64.sys	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMHIPSService.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMHungDll.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCPatch.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQSysMonX64_ev.sys	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\imageformats\qtga.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\NetworkMon.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\SoftWareUninstall.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\imageformats\qtiff.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMDlder.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMLoginPlugin\QMLoginPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\apps\AppUICtrlInfo\QMRemoteUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMHwDetect.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMTrayPlugin\QMRuleEngineTrayPlugin\rule_engine_config_complete.enc	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\ScreenShot.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GF.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMSysCleanLogic.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt5Network.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AIRootProc.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GLU32.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Images\softmgr_red_1num_32.png	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\SystemAidBox\TAVEng.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextMenuApp.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\qmsoftmgrupdate\QMSoftMgrUpdate.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\apps\AppLogo\QQPCLeakScan.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\concrt140.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMUpdate\imageformats\qtga.dll	QQPCMgr_Setup.exe

Executes dropped EXE 4 IoCs

pid	Process
5436	QQPCMgr_Setup.exe
1996	W.P.S.20.3279.exe
5624	W.P.S.20.3279.exe
2116	W.P.S.20.3279.exe

Loads dropped DLL 6 IoCs

pid	Process
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1996	W.P.S.20.3279.exe
1996	W.P.S.20.3279.exe
1996	W.P.S.20.3279.exe
1996	W.P.S.20.3279.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQPCMgr_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	W.P.S.20.3279.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	W.P.S.20.3279.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	W.P.S.20.3279.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSimpleVersionNetConfig = 7b74ea37	QQPCMgr_Setup.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
1996	W.P.S.20.3279.exe
1996	W.P.S.20.3279.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe
5436	QQPCMgr_Setup.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeBackupPrivilege	5436	QQPCMgr_Setup.exe
Token: SeRestorePrivilege	5436	QQPCMgr_Setup.exe
Token: SeBackupPrivilege	5436	QQPCMgr_Setup.exe
Token: SeRestorePrivilege	5436	QQPCMgr_Setup.exe
Token: SeDebugPrivilege	5436	QQPCMgr_Setup.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 5436	1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe	89
PID 5436 wrote to memory of 2620	5436	QQPCMgr_Setup.exe	90
PID 2620 wrote to memory of 2528	2620	cmd.exe	92
PID 5436 wrote to memory of 4200	5436	QQPCMgr_Setup.exe	93
PID 4200 wrote to memory of 4892	4200	cmd.exe	95
PID 5436 wrote to memory of 4844	5436	QQPCMgr_Setup.exe	96
PID 4844 wrote to memory of 3164	4844	cmd.exe	98
PID 1972 wrote to memory of 1996	1972	2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe	99
PID 5436 wrote to memory of 892	5436	QQPCMgr_Setup.exe	100
PID 1996 wrote to memory of 5624	1996	W.P.S.20.3279.exe	102

C:\Users\Admin\AppData\Local\Temp\2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-01_7d5a914ce2f92d01d1b908d8e0dd9138_elex_stop.exe"
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Writes to the Master Boot Record (MBR)
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe
  "C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe" /S ##silence=1&handle=1049148&update=1&supply=1701110411&forceinstall=1&qqpcmgr=0null&DownloadSetupInOne=1&installpath="C:\Program Files (x86)\Tencent\QQPCMgr"
  2⤵
  - Writes to the Master Boot Record (MBR)
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies data under HKEY_USERS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5436
- - C:\Windows\system32\cmd.exe
    cmd.exe /C icacls C:\Windows\System32\msvcp140.dll /grant Administrator:F
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2620
  - - C:\Windows\System32\icacls.exe
      icacls C:\Windows\System32\msvcp140.dll /grant Administrator:F
      4⤵
      Modifies file permissions
      PID:2528
- - C:\Windows\system32\cmd.exe
    cmd.exe /C icacls C:\Windows\System32\vcruntime140.dll /grant Administrator:F
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4200
  - - C:\Windows\System32\icacls.exe
      icacls C:\Windows\System32\vcruntime140.dll /grant Administrator:F
      4⤵
      Modifies file permissions
      PID:4892
- - C:\Windows\system32\cmd.exe
    cmd.exe /C icacls C:\Windows\System32\vcruntime140_1.dll /grant Administrator:F
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4844
  - - C:\Windows\System32\icacls.exe
      icacls C:\Windows\System32\vcruntime140_1.dll /grant Administrator:F
      4⤵
      Modifies file permissions
      PID:3164
- - C:\Windows\SysWOW64\cacls.exe
    "cacls" "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301" /t /e /c /g SYSTEM:f
    3⤵
    - System Location Discovery: System Language Discovery
    PID:892
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCSoftCmd.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCSoftCmd.exe" /command=SetSimpleVersionConfig /SimpleVersion=2 /From=Installer
    3⤵
    PID:5696
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe" -i
    3⤵
    PID:5336
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\7420.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\7420.exe" -i
    3⤵
    PID:5028
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextMenuApp.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextMenuApp.exe" /i
    3⤵
    PID:1712
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextUninstall64.dll"
    3⤵
    PID:3456
  - - C:\Windows\system32\regsvr32.exe
      /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMContextUninstall64.dll"
      4⤵
      PID:3940
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\qmlauncher-1.0.0-setup.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\qmlauncher-1.0.0-setup.exe" /D="C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher"
    3⤵
    PID:616
  - - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\QMLauncherEntrance64.exe
      "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher\..\Qt64\QMLauncherEntrance64.exe" --from=Prefetch
      4⤵
      PID:5344
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMExtraPackageSetup.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMExtraPackageSetup.exe" /S
    3⤵
    PID:1100
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe" -e
    3⤵
    PID:1484
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe" -s
    3⤵
    PID:5796
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCTray.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCTray.exe" /regrun
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\UpdateTrayIcon.exe
    "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\UpdateTrayIcon.exe" -t QQPCTray.exe -c 0 -p 1 -CheckRtp 1 -v 0 -h "" -d "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\"
    3⤵
    PID:2780
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMSignScan.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMSignScan.exe" /force
    3⤵
    PID:5500
- C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\Download\W.P.S.20.3279.exe
  "C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\Download\W.P.S.20.3279.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1996
- - C:\ProgramData\kingsoft\20260701_102119\W.P.S.20.3279.exe
    "C:\ProgramData\kingsoft\20260701_102119\W.P.S.20.3279.exe"
    3⤵
    - Writes to the Master Boot Record (MBR)
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:5624

C:\ProgramData\kingsoft\20260701_102119\W.P.S.20.3279.exe
"C:\ProgramData\kingsoft\20260701_102119\W.P.S.20.3279.exe" -downpower -msgwndname=wpssetup_message_E5AC351 -curinstalltemppath=C:\Users\Admin\AppData\Local\Temp\wps\~e5abc7b\
1⤵
- Writes to the Master Boot Record (MBR)
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2384

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCTray.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCTray.exe" /regrun
1⤵
PID:4268
- C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\InjectHostExe64.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\InjectHostExe64.exe"
  2⤵
  PID:5972
- C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMHwDrX64.exe
  QMHwDrX64.exe /starthwdetect
  2⤵
  PID:2672
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32 /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu64.dll"
  2⤵
  PID:1456
- - C:\Windows\system32\regsvr32.exe
    /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu64.dll"
    3⤵
    PID:1484
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32 /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu.dll"
  2⤵
  PID:4776

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe" -r
1⤵
PID:4108

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\qmudisk64_ev.sys
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMUdisk64_ev.sys"
1⤵
PID:920

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\7420.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\7420.exe" "-r"
1⤵
PID:6116

C:\Windows\system32\Drivers\TAOAcceleratorEx64_ev.sys
C:\Windows\system32\Drivers\TAOAcceleratorEx64_ev.sys
1⤵
PID:5372

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\TSSysKit64_ev.sys
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\TSSysKit64_EV.sys"
1⤵
PID:5340

C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCRTP.exe" -r
1⤵
PID:5888
- C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCSoftCmd.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QQPCSoftCmd.exe" /command=GetQimei
  2⤵
  PID:2880

C:\Windows\system32\Drivers\TAOKernelEx64_ev.sys
C:\Windows\system32\Drivers\TAOKernelEx64_ev.sys
1⤵
PID:5040

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004E0
1⤵
PID:4644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Defense Evasion

File and Directory Permissions Modification

T1222

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7z.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\7z.dll
Size 1.3MB
SHA256 6d1f9f24eb26c55bcdf849262644be901f86d98934219b54d79cbcfaeabb114c
MD5 32fed134a9bb0843b0ea7f11d3440e3e
SHA1 66a717de175c814126539eb5a5a1e48241de1e61
SHA512 b91e5edd3a822784db4d9c84d5a917da1cc9c1b1324c679c1d0b872ee1732dfd3a6f9d4c0750db70592befd128e5b1b5b29f6f4dbd40632285d89397349e51e9
SSDEEP 24576:OwwwwsvjbdnMKyfUEezl9jWsdmOByO1lf7b0ABbNxK76yVLtNove+0ye2DI7kmzE:OwwwwsvjpByfUEMJdm81bxK+yVPoJDMq
TLSH
T183558E32EA71C474D04E02304A28F7AD116EF636A72255DF77D47E9E1F31AD2E624A83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AIRootProc.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AIRootProc.dat
Size 2KB
SHA256 ea045bc1eaf8d20ee5ad1b245e2a8c86910ab53c665865e9bf24c94ba23552c0
MD5 6751246d3ac16607405050a2a527d043
SHA1 0fee6988a669b9bdb6b7c1f17afafd26abcf23b1
SHA512 50d0e0076aee4c14cfdb95d2985d05a1dab8b0e0b8b6d90a52f66546df9f4e783de3743bd4cf6db84ee5853e1e5246860bfbb382968d17dd6cc2d5d26fb80b2d
TLSH
T11C515C2A82BEF1F0592BA2AA351336C03C3B98950B0CFED4EA6CDC86070901DD5611E7
MD5 SHA1 SHA512 TLSH

Submit Download

AmISlowing.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AmISlowing.sys
Size 33KB
SHA256 924979c93e7e194d545eab65c69b4324b31274f504bfaf2b428aabdd7190520a
MD5 df298a38c3b0f674c2ac28432eed2fa7
SHA1 3a7c6bf97d3fe0c11706c1e7a510d1734b2ffaae
SHA512 4a41e048fb7f0f8186147d861916d4e6eca9c0bc0ab98e3f432b623651d68973925b641d413462d5ff93a47f844d2eff9e40da3c73e255070bd9f8a19ae02a03
SSDEEP 384:j977xC+pzTk0/+CwFbxoRR9K7hLQk3yrw41MhDGiy+aJGPxh8E9VF0NyaTlC:vzTkbN7mkSw2MhDGDGPxWEIxC
TLSH
T12AF25B20866C1C11ECDBD9B134ED5A35697AB7814F5282E7327DC0E05F883C4BAB91AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmISlowing64.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AmISlowing64.sys
Size 35KB
SHA256 3a12f336b72c59a874969a14638cc5d055646a5a7ecd94c2fc5dce13e7d796a7
MD5 75abcd24a9f62201a2b16b71c8facd1b
SHA1 eb35b44143728e931d7744d1ae6f9b108528be4a
SHA512 caf9fecf6315833db6fe5073834601db2fcbb5949ae0b75ba657a85d0fb296f9842d671492e9b7990d7a781fc4481b2738230f1e74534fb71b21cbec6e2f36a3
SSDEEP 768:QDHgH4YMPBWYG2u/PrUUTDw2M5DG1vPxWEFqG:QjgRqot5YUT8jePx9
TLSH
T1E1F27D5086542C96ED9A8975B1E88937FFB0BA41970492DF317CC0E05F423C4EABC79D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmISlowing64_ev.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AmISlowing64_ev.sys
Size 40KB
SHA256 689b462e62ca604b3e3c883b6c790697851bf9a35b010d51f35b05fb855360c2
MD5 617548a95f4934865ac8b906430e10c7
SHA1 81a72cf534c63bedd938bfff75e00fdf42c97b4f
SHA512 47bde0e3d3c1ef822808d62838d379cebb7aa6c0306c435a482779e05808e054eb1c7ee2b34f6a36e55fbfba62c5e39d13aca5907358547176ec45f942534c41
SSDEEP 768:ciufWrobI4wGW28zwxC/45Yi2gorw5ALr3FqF9zAl5:czuStbkeC/457Zg/Izq
TLSH
T157139E9289A81885D9578D30E2D8D933FD70BA865B4096DF317CD4A44F523C8EB7D27C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AmISlowing_ev.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AmISlowing_ev.sys
Size 39KB
SHA256 361ee23f8894500a636d16b953807ed30ead698114e9d35d20b74afe11121465
MD5 cea182534870a1a00e712c107b511c86
SHA1 ed668a2a6b90f0a4449e0deaddcb8bb16f6afd90
SHA512 1f45f4bcbbfe95fcf6e20ab5f9cd98ab1de541fc1d0fc150fda113d28226c997d62cd43f604aef0cc91d594304ec89bd269911e0f6b6ad5c43bb3554fa0b6c4f
SSDEEP 768:aVVO6AZz55ETJ6iJuYiQs5ALY3v7N9zI:rRzqY6u7Qwzvz
TLSH
T1B8037D6181A80801ED9B697061D8EA223C3FB7C74F4196DB326DD1E44F493C9BF752AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AntiRKX64.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AntiRKX64.sys
Size 52KB
SHA256 3dd19815252f983b022757982600ae72f78265fae76a8f39cf40f64351cdf800
MD5 ef8dcc0c9a6f7cc82d86a96192ba78d4
SHA1 695075a6e45414dd578f3fc63b118a4bd3d966a4
SHA512 f963dd6561471ca7143fe8e5414e989a669f14c0272bc4ef49ed4b9799ac0bafce40016bf3034d131ec8fae2d7a48af3cf8609144286657e6729362012f82204
SSDEEP 768:h4pZP8SKq2UZrMFhnXUsf3PSXYnitQkHUGd487gl6h+w2M/DGjyPxWEXD:h4XsKuFLf3g/ri+pjMyPxJ
TLSH
T1C2337D05C3A61895E9EBC979E6B98B37EFB0B805531482DF0368C4954F13BE0E678366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AntiRKX64_ev.sys

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\AntiRKX64_ev.sys
Size 60KB
SHA256 ee27a91ad25eca9d5382b8e188a82802889c26990ff4e6c6bab4db7f0f1b7917
MD5 3a8a28bcbef173d82b268baa1a2ca472
SHA1 884f9c9c8a5db38eb3906d60949cc30e9f84f9ce
SHA512 2b506b27b13de3461c37d2619fabca5807295bdba94e81ed4f191ca83e9b924570cb33ca00b7bb53a4917e37392a37e38fc31877ebafb4c71ee284e2d5b66665
SSDEEP 768:DIA4SXIuSQF4sT0U22agT2G0zs9jePSp8D4HNDXPUGndhrlo7HvjYi2gofK5ALkr:DhnM+ceqWpF9oTj7ZMeQnNzA/l
TLSH
T10C538C42C39954C4F9ABD939D6B9CA37EE70B809271486CF0764C9485F137E4E7383AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowserInfo.etf

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\BrowserInfo.etf
Size 3KB
SHA256 4748fc1d76da66bd0ccea8cfa553f1b60fff52caa0d1a91b8f791953219e9d14
MD5 cc1b0d0d6931f708235f704700baf461
SHA1 bf71c384f92e46fa73c1e3b59ac64fa14ea74a05
SHA512 b9b87f3785215597fa06ee130ca993051b645248a33ac946d138270bf90ef5ccfdb7f7a87ea9ae1bf9fb547e514f495dcb66840c73ca5c435227a0411da6466c
TLSH
T159716D02D3DE0F7B00F081E9DAA5A410BB3ADC59C254BEA5D450A26E9535DFF7E84C92
MD5 SHA1 SHA512 TLSH

Submit Download

BugReportRule.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\BugReportRule.dat
Size 3KB
SHA256 8c9271217d2fccd546f78f09aff58f380ce68031ce2ae467ab13cc4a9617448b
MD5 e5a0aa72dbfebdfbba4ae6ca337feb27
SHA1 276edaa944c202630f157f6d5352ddc06887bcb3
SHA512 58325f3f55c45b020cb1e7613c544b17421d9c1628ddc39df7d90ee4343e0c6b7df71192aeab874c3af98ed94e5da4ab09b40f3d98cecb08df330122fffd9690
TLSH
T1D2814362B1985B9BA5AB0C3AF4741CC10CFBB8F961298211B15F2BF3D2174DBB1425F9
MD5 SHA1 SHA512 TLSH

Submit Download

CheckAv.etf

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\CheckAv.etf
Size 3KB
SHA256 4a77a96ccfc6a132849e1432b1e92f4dd26e12b7e4276c23c1f5f45f4fbc405e
MD5 e7ac6b7a0a486a30ddffd6125298e743
SHA1 68b0e2df802adc0930e550cd6dbb1b8ea5ffea8d
SHA512 7d0633e3acf84caff1a37501dfaee8b9a3198b2eed4ec598a5535403d63450ce69481df241badf8e526cc380cf4efda712f5ab0471f2a9ecba2ffe9080344707
TLSH
T179616B2FA33EE03623CF175916494D436C6500AE4E713785462881CA0EABFE3EE3178D
MD5 SHA1 SHA512 TLSH

Submit Download

Common.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Common.dll
Size 3.6MB
SHA256 d23f1fd3033dd2d3a0a994ba712a455961a286b3e8bdc032f26b971ad01755c4
MD5 5d2e620748bf5ae31ad2d0a73866c82a
SHA1 3685390319f2ef5fbebbc292047291707743f0ca
SHA512 34db304b64a8a581e28fab990b6b0d59615fea719c0637d86040759cd16d2fc5b91d0b06eac34c81993ab378edc8f0fafbc703f007a08bb1d1d646a2abf3b25e
SSDEEP 49152:VrGdyNw3MevCkUAe+XvX5lhXE9rrhaikHjiWydZU2QDQk6BMeQ0rI2wzBTRBA+hG:VCdCw3MeoAeCXKRaiJsehreO
TLSH
T18D066C217691C039D2A74372ED2AE6AD4779B5795FF182EB33D822CD29309C27A35313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommonAdCfg.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\CommonAdCfg.dat
Size 6KB
SHA256 dec3bb95323d8bdf4b8e625e02f08cfabbb9f7ec87d8460904f8f6f326d5e6c4
MD5 60da343800b65d19b03123b5aab5e8ab
SHA1 dd75b15e7f79f1130dbceb1934acc11773902b2e
SHA512 2e3ac0992ec13576bc1ef2c4ba99f7a8d4bd1264d001418ccabcbef8ff248893dde583f383591bf0c05c33a9ef08fe41d11a654753a3dd5690b0b2ecfa34affe
SSDEEP 192:4Kbak2TIr0ChjQUS45kb6CD28K5q5qFcEukP40P:4Kbak2TPqjBLPE284q5q+lkZ
TLSH
T103D1A09C4DE5945EC0F5F908E35BD440697607B3C6A2D142EB5FCC8224F614B4B563DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ContextMenuMgrDll.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\ContextMenuMgrDll.dll
Size 602KB
SHA256 1c4e1106b0f013df1adc1056682a7b0c6e45ab18c838cccfa36fedfec6ae3ea3
MD5 1a9b459b990ebd14e9983374dffccc9a
SHA1 2ecfb0fbd098a0f749d788593cfa570202cf9602
SHA512 e8300db4f338c9271b938d51ced63ba8ffc393a18f06d8098fdef692de37689b684997f3965e408b765cc22ac86c4a0c6dd32f2727aa952b75db29df7b74a6ee
SSDEEP 12288:cbqa0SeqhpFCNGSEpG/SJn/x0UKOFl3vHg2KQnNwd29Y5H3SzOwFub8a2ntb:Gl3zhpFs1PKJn/x0UKOFl3vHg2KQnNwG
TLSH
T144D45D613D468275FAE902B259BCFF7E85BDA9190F3405CB835C1E1DD9606C32F32A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CubeConfig.ini

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\CubeConfig.ini
Size 108B
SHA256 6bae5d6884a894bf1f9773ff818b2e14a219f4a31db38b5f7d82597f3f0dea32
MD5 18de0dfcf5d4e1e75e45f0b6ff815bf7
SHA1 b79f0e5e3c6382ba609afdc271b4bcf21beadbd4
SHA512 a41128983af1a4c952ba1c1cfefde17ddda413dfbc6d6119cde532a34dac5c782044065021cd8f67d833c0cfec9e1fbf1cf5c5751349802b0809b749665d135f
TLSH
T1CAB012B42110F2FF4F12F0047304C1528902A0501C2680BCE3874E3F8C00B0541E7CB3
MD5 SHA1 SHA512 TLSH

Submit Download

DLProtectComm.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DLProtectComm.dll
Size 34KB
SHA256 b29b40996ef5f6a31cb7d7119949c48d4e4a6ccd5ea27832983acbb6f967833c
MD5 9b708cb1c9ee68726812383ee0be2dc3
SHA1 c79b37d9bda6a173d3fb11cba08a4cf83f37dcf0
SHA512 7b9ab6740790121a2894dcb5c5173e91b5f6471ce97f84c955776e5e36574c6e387dbee01ffa533e33e479cc39b85b26405d351fa23a5e4ec48a771d5ac7beae
SSDEEP 768:ebYZ+xaRnvs4PaZAJkId6rQZvY2g37ZYiDLk57d:A804CZAJN6kZ5g37Z72
TLSH
T12FF25C516F944872DA6F05313CF6EB7A8A75BD210FE185CB6BD28B1D0A603C3BB34525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DNSOptimization.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DNSOptimization.exe
Size 1.7MB
SHA256 1281afb02302f6dd666f9f11cdf6438bb12de1cf1fdcc4b054c4ba0c964f6ddc
MD5 74d6a3a2b483e12569b156429b5c7aae
SHA1 70ebd0cffe85b7d14289e417644363a1b6a297f6
SHA512 b7646fd0ddba541bc8c79870e6b9c0a257b6264d01a476107ab2b6d5eab54d3c5b8962a8a84a63c2dceb65c3e7a16ba40db21d75f8c516cc464defa3fee59e48
SSDEEP 49152:/JmMeG4pln/PwpQqLg2Ctat+jjj5Y33bDUpQ:2RweqLg2rZb
TLSH
T1AE8507F83B898135EE8D13B545A8AA9AC36DED253FE200C75F483A7B193C5D21F30656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DownloadStrategy.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloadStrategy.dat
Size 1KB
SHA256 d5e22a08ece55c6faa2de3c4f13091ccb5658da37be4855b7ef960284d246107
MD5 33fb9cb3c0fa3a32729ed0f0a5599e44
SHA1 b10bafe543773c24c3592106f41b0c210d820857
SHA512 542e536c118b43b014c5a1273a914ee124487ef5ccbae48862e38907fdf431260643cd695ce553583c55ca5ee8cafe66e78e26b9c636e2c012ba88b4fb2721ce
TLSH
T1E831D8CD423F2F8AD3C32642FBB2BD117BA864D0CA3682017F9254D821288AA5511D86
MD5 SHA1 SHA512 TLSH

Submit Download

DownloaderInfo.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloaderInfo.dat
Size 4KB
SHA256 088dc94e778fd28c2a3b765e548f763d9800669c3ed4d7ff1b6fb916e28e1659
MD5 ba3cd4b932ee6655fbf6af4980c17fa2
SHA1 1d37f88d7a8bcc79acb0f639c411e4d52767fc5b
SHA512 e42f96f1d0251eb50f95314b1fc56ca990e29b24e3f100db8ff229d8c9a98e4714d3f2e52a3a1b2bd6d57d580d9e04d80754d2102b7df8778b57a879b5c88d16
SSDEEP 96:FjfNx0vVK8kr2A6FNIz3JMzr5XnhbMEb5b/gDJOYva69NAAosG6W3:FjcvVv267CmJhoO78Jy6/AAbW3
TLSH
T1FD817D1C15E4953DA1A77B324F7290E62E9628B6E8C40709CF492240F68395A2C05EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DownloaderInfo.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloaderInfo.dll
Size 717KB
SHA256 53f66d48128cabf820047dddac4d772e6e495ff356e34b8046a9b3de51db7697
MD5 04f11c73019c41f22bf9243caa3aa650
SHA1 e7874514ede2f9edd4d3415b24d570692b7ac812
SHA512 cf5ef9edd402a03a8168046af45448c8092bce91bc9fce1de7d7a5bda8404124a888d40206c9887322b0dcadddbe960efd382fe3f4a5a0db05f4a2d166071cfa
SSDEEP 12288:gp7ZUPrBwljmW0h1gGaS8nIdUyt5wacSDlDX9Sz9y7YCSMIvHrMkFL/dwNiMwJnM:0iPrtW0h1g7IdUyt3cSDlDs93frMvizC
TLSH
T1CFF47C12EB02D079E4D600B061BAABF74978A5394B30C4DB66D1ADAD9D304E3763FB17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DownloaderManager.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloaderManager.dll
Size 880KB
SHA256 49b951e5b3e80784787e8739a6be78995cd4a5008dd19bcf55369f177092232f
MD5 d50394f9285587c4d2625e5b1311b8d5
SHA1 8bd19f8f43b7e183e054c7ec8a7ac03adcdcb480
SHA512 ecb0102f0ac0b70ccf5610bd00a3e9b9645b383bbeed29e91862274c4d076589f32cf6c5d696eb20aefb856e1a4f25122c109121fe5896f6e151ab8e29d1ced9
SSDEEP 24576:m/ErhclG28SjWRdtA63ucbScKe3iWGsey9jRw:m/eWcA63u7cPiAXw
TLSH
T1F9158D62BB52C035E5D611B069BE6BE78979B9354B3080CF5AC02DAD98304F3763AF17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DownloaderMgrScript.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\DownloaderMgrScript.dat
Size 4KB
SHA256 cb9cf261d5cdfb3e731a3ef8e4e34027015599df0885b32fade2be2b2e92332f
MD5 c4a425ecebf204a74bb49fe7f500d804
SHA1 b1f1ce5313faccdd29084f817fda81beba4fa4fe
SHA512 13332772dddf89ab1367bd44ff033410c67a25da38da93264f414ce39f9493ad3d1bb3106c748e78c6df888464f090d8a0dd6435221f135c5d3cda652660aceb
SSDEEP 96:kHh1GuAXJcSRHjroLaMOczwQCYK4jzGB/AD/sVvfbp:kHhcRHiaMXwQCYm4wVvjp
TLSH
T163915CB21D02B2A5FF160F711B276D62979BA41072B05A5E0848B6AF8D4DDE31CEF01A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FastUninstScpt.etf

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FastUninstScpt.etf
Size 279KB
SHA256 e35e54cc77cb3da6af370b078485560232cc02cb815f40f36cdd8900e0e04df9
MD5 a7869e34eed73a1f41f786251c722ca8
SHA1 39e7dd167961625ec97cecd9af70b67ed9e7acbe
SHA512 2128a4621fa799ef8c7fe1f1b86c9cb18e2a7ee59bc19ad1ae957d6eefa21f88ca5b37f637971d5e0f00330d52b2003bccaf959fe8016df233604c221adc8324
SSDEEP 6144:FzcwWZleiMp8uaBTmpTUupY9/wQ2GvY2hjRgkdNG6SC7gejHEEolqC2n:FzcbeDpF+28vdj+kdk6P7geDEEoYCS
TLSH
T16F5423517E76452E0709C222B60D2EE53DCA0E2E697819AFB7454AFB0A573D8F8378C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileLinkRepair.etf

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileLinkRepair.etf
Size 5KB
SHA256 ae81d69c6f0ced750455856a7a9059346bfe309b2b5e6b578b390ad0eb87ca4f
MD5 6ccbad2db2cd12cab94042957391d763
SHA1 b4f5ff6bc3683a324f8c3fa6ac8d7fb9e973aaff
SHA512 6278dc60c1d1e1cc59e444caf0510a77c85b6626676ded7d2b26e60795021de28faa3659e104ebc41beccf885aea728dd068ff5216f3af78b4084bd18f57bc6d
SSDEEP 96:FBjOlc7wAfMFHVS+XpYUb7JFKBwi7j9d/0KxoZYJ1z3OWLIJBgHSlp+OSuve:FBjOlswA0VxC4JsAKyZS534JBbi
TLSH
T169C18D5038540ABAF877248AAE3E3F8E9B7528251063256D9D7FDDD239872193645C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileOpen.etf

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileOpen.etf
Size 4KB
SHA256 1bab093b30813dd965e5ba860daec8ae312fbb0c5f1f77a720614163b7e334fa
MD5 7fab7ba99e55681a77b0da6e45cb06ae
SHA1 ca2c5988727c37235359209aae14bd4ed9930942
SHA512 77a67b8b3f76431fb5ca38dd6c50b17d6d8cb76332d7300ddb166da17cfe1c30163e25b7fd914e4b0e729a9acab62d275dae00a1397be0e7946f540268b0e996
SSDEEP 96:FfyL651TwVXKa0f8dHj+/v+pMg44csJbt1UQ5hek9dDD:FBsJDwAJ5Ak9l
TLSH
T1CD917ECCBE4051FAC645CE448355A40ED4AF77F610D4790D5487D38763A6FC15A3845E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileSmashMenu.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu.dll
Size 365KB
SHA256 724074d5fc1125ebd9350fc855d0d36bf7dff840adcdbf960049d096d94e3426
MD5 e67b3cd0d1cab77fd2ff22f689b19871
SHA1 b220f0e2e91471bd935c297f15c3e3d4a3663072
SHA512 f80f90d30c56158b9e2782aa97e5536a6cff3c0515b5b687ea8e32e44ba0002ee057e93ab3f8d8f0f4b8985aa12c43a1eb9dd66e80a8769f2f161cf40880e12d
SSDEEP 3072:XV+0g579dMzdz3YvNk0rDXuHcUQJj87lDAGK2dhqD8L7yX:XAPPcdMvNPDXie4PhqQLM
TLSH
T175844CD1F93BC164D9AE04315936ADA17A36BC653B5040B36ECD770B09B21B0ADE72CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileSmashMenu64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashMenu64.dll
Size 374KB
SHA256 3bfad3d0583f6ef06905cf9accc35f43f992fd8671cfa3d86f6325a5fe64f5ae
MD5 21754028ed8a1f583b3ca45b1631c155
SHA1 5522b051e44729662dbcc22326e13dc0634045fb
SHA512 f28a8f253aa8038c2a3539fd56c9c470e13862415205e99a72118e02ce11eb1f84e3a09126ff05d75b4bc9237bed45cb222a435ac788644e2a4a4981e589ba68
SSDEEP 3072:fq0FHLKGvGH8HKzg3B7Q6XXO+HcUQJj87lDAGK2dhIyd:fPHLQH8q85VXXOSe4PhIA
TLSH
T1D8845EC6F477C164D96E443489369D15BA32BC553B5042BB2ECC764F0AB22B09CEB6CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileSmashPro.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FileSmashPro.exe
Size 1.5MB
SHA256 8eb75f7aa43a74ddb0ee003c2512b9bcc9859f1d4237debe3ceeb57bb9e52b89
MD5 0f799887cba59b12e4a48723d2af2db4
SHA1 c6bdab9b22f57997b6b084097b367beef26af100
SHA512 61d3effa9c2700e618133a34a5b7448ed4654a28c8e177b8eeda12c27b1e3fbf16760d0203aa6429f9460204128b92d9d4078483833ae2e2e5a66282f645979d
SSDEEP 24576:I9RHuh+JsK6lZdYJa5vvEKRmibCQl7zg6LkReKirJe350R:W5u48YJwvEKRmWg6YReKirI350R
TLSH
T1027518F13B9A812ADDADD3B15939D656872CBD203BE104CB5EC47E3B047D5E20B34A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FilterService.ini

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FilterService.ini
Size 1KB
SHA256 2358d73a80a1a4d455f4f9b0182fc3b35e0f802bce5bf982cbbdb7578c6c6bc7
MD5 61566cacea2b793857954fddcfff112f
SHA1 8d55a8eea42bf1e900767144f9ed6207ca943055
SHA512 c7aefff6c8ec5200ebc03cce07abdc4666c3c4faf87df58b6166a0b47b1c36b53f9086b9dfb8d540dfe3d9fdeaf02849f31e355d9aefad935c2ec26552cda74d
TLSH
T14241F879F3C3469571B29B4ACD869AEDB0717500A1683F9C158FA910DECCFD387544C4
MD5 SHA1 SHA512 TLSH

Submit Download

FtSysCommonMgrGF.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FtSysCommonMgrGF.dat
Size 480B
SHA256 15de7bd89ec354f3952fe2f0cbb4deb87d62db3a194e8e637df7081b6d2fcff6
MD5 80ea5a01230ec6426ba9f9d97a412667
SHA1 f7f2bee7b50b62ddbb000900337a9ecf76139c5d
SHA512 4541d4b6b26e0697547d4a3383543458616f8054d2ab5110984a4a0194702b0e8adde71c66a1ada2a162c5f380668560844fa0a56a72c7246219943d38967c58
TLSH
T1E2F054E30813050E8E815D9035E134C680FC52DDF8871B88D159301AC2C6FE3B2DD39C
MD5 SHA1 SHA512 TLSH

Submit Download

FtsysSoftIcon.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\FtsysSoftIcon.dll
Size 190KB
SHA256 058a297b16a9c6eb122a67358c930426150b5112c258c0d358c5fe9711662623
MD5 ad85196e6a4dccb013ef3878869862e2
SHA1 235e4fa0dfacf0ddf6ae7a3bd816d4fae619a977
SHA512 bd1c6f7e94cdda38d28b7c23199f80a7828fddf0a2f271d291593b9041d90ad21ae8f98cfd3a9603ee2b14e3d28d8aede8ba86afe26f712984011e44e3cac2ef
SSDEEP 3072:qMGobtX2pUBgN+YVJjIdrNEToKGWVOXURoqjahGf8t1VDtwO7PVLErTCKm6KNS:6qs6drNE8KGW2okPVLKTC9NE
TLSH
T174143A223A99C439E7AB137959399667927FBD308F7081CB6394BE1EDD305C15E30A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GF.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GF.dll
Size 3.2MB
SHA256 4c6afe9332f1afbcd609f6b0159b43ffb058702f05e3b0e3c1e3a4562bed4a5c
MD5 3ac2ae85e70cfce9b85d32c0b5c611bf
SHA1 45c5836cc42673ec7aa471b09e79d9332fead180
SHA512 a351e26d9ae3a70eb5a3ef17b04e3f2bafab953676bba7d86b71d73b692140ee89c748194dac5dba29c6cecbb1283b2065613a196b24af91533e59d18e8478e4
SSDEEP 49152:/KkiiefHXvWP7V/EsTJWASbXi/Q8c4AfN2LNQmopZ8uaGaJQJ+eAT:/Kvief/AR/EsTJWpbS/QiCGGIQ2
TLSH
T151F5391237E0C425E1BB13B62E2AF7BD827EF9605F70C2EF1B98264D29719C25521727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GFCustom.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GFCustom.dll
Size 576KB
SHA256 b385442f3cb4ac73102a5e9f6cf6aeddc0c8473be22aef25400546a34e3af128
MD5 c0f9bea6e11633cd46d3875a2011c82a
SHA1 48efb403a99f57a58e7e37accb34663c11085426
SHA512 4cf5aa16383cba995ade2601964d4f2e6c2dca66667245ae16a52e4f885719595fc9caf1e650d88bb3c4ace6532fac1dd93d0c10f456416dc2894c2d3c598aaa
SSDEEP 6144:p7DZmQzXW6yniCcrOB0Z/fllCPLoIKuhkC0Vv:nrgRG/flgPLonv
TLSH
T11BC4085377A6C129FBAD817E192AA71A90EEF56003D081DFDC4859EB18639C209F7337
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GarbageCleaner.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GarbageCleaner.dll
Size 1.7MB
SHA256 919bfa2f8e8499655a2679bab7971b5364d64658822ccd5947a5d50c1f50d24e
MD5 61673f95e753158486e05cdab0eb10c2
SHA1 cae98cca3810b4ffdd98afa1b039158027a1a23d
SHA512 de0cc518fbd672c47316023c50f9dfcd1fdbb0a35461313f3afd36532c36617b78e98f93c51e36ed61911791ebf14bc12e7e51fe35626a8cc782f2bf4ef8a034
SSDEEP 24576:nOdQCJlt1nj81tkksRuVIvcI5x0scOn5amxqzukxC02XAL8KqJcc2Bka:Kjt18kEVIvc1sPxqCkZ8Jcc2Bka
TLSH
T12C856C227795C43AF4EA03B16979A7E68679F8315F3080DF63C43A5D5831AD23A32B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GarbageCleanerScript.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GarbageCleanerScript.dat
Size 139KB
SHA256 fdef96baaf2c42713927f44fb4f67da7f14d306e184c167f9dc2293d3aec72ff
MD5 a994b179a1dafaac2eea49a33f2071f9
SHA1 df8ee2a58d2e1863f41d43db8315a2c820a2cc75
SHA512 e8092cf3edd1b5f14b7f67b15724bf7a955bf4351806beb6074bf510b7d98138bfa233a7cd13d9d0e269ab8f1352f5e2cf1b8d3468441100ca3d0dcacfb8df28
SSDEEP 3072:X2+TLD9JEJ5DEfD4fXcQoEW7ATYJeFSffz2driou2s0V13SHe:motCJ5y6j27tJjfzUriosW0e
TLSH
T147E31203B6636F71DA1BBFED7C038B9D88DC57419058363B2AA015112DB3F99163A7B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GarbageClearBigFile.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GarbageClearBigFile.dat
Size 864B
SHA256 d2ec0ab8718b11d7d49ee3b5f9823f497954c3ac191293986fd91f2b149e4fc5
MD5 6e503ce0b08ae40afd94efc03f92af8c
SHA1 6bc319149009891983584f229612bd596be1780e
SHA512 bf660c71f6464faaef3f9a6801306d0de4bde1b0cab985110d3803290dcd7d77780ea3811b89d9f51179c029615a34269a6019b1b809e355bcb63004b113610d
TLSH
T123116386F4D2BF15E848F43DCEBE02C3FA156EB6206F088A03659287580A28C4294348
MD5 SHA1 SHA512 TLSH

Submit Download

GarbageClearV2.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GarbageClearV2.dat
Size 348KB
SHA256 300f586b02c8531b6453a0bf988c0cb5c34f51647b7615690b28ae51ec7a58e6
MD5 281e0471ec1d3186de011d01ff0edd22
SHA1 ad46d124526784f8b9ae5cc5bbded2c62a695f62
SHA512 e080584ccfda570f6970794a8124c4678de02596a3f9a4c0257ea71f2749251e8ff2d8a99107a3c64ea77503bcb901d1881e229cf42fadf5fc7e7f0541787382
SSDEEP 6144:c7ldWK0CDfqyS/IycitzGHc/ExOkDUjAwvoCGCh0l6GUGE8:QWYfHSwycitzAccnxwVGChsaGE8
TLSH
T1227423658A99E26F2CF0214FF27675A04339F07AAE0D6C42C93D5A181AF06C7F687C64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetDataIn64.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\GetDataIn64.exe
Size 249KB
SHA256 34a96935abc2c16eb09e677af7ee9504c72051142cebd11d0708fa4f8e74ceb4
MD5 1ba791f732eaf116abf7c7f4f06d5f27
SHA1 51fb052ee228957e746a9ef73909dedf75928764
SHA512 eb5ca4e296dfce87e917b6eb234d7c965396207e82494e3e31c1948cacf2efe63e0217fcf381ca80b77e636ca16cd7573162782021884a3830610f5011159e63
SSDEEP 3072:yLk9nt6oHS9oUISS15B2xM71ztMMUwYeiV7ix9rdxPcipHM5lMLY:qi71ztMIxPcdMLY
TLSH
T1AD449549B5E588D6FDB2D3F585A1712EB8B839581330B7CF554091CAFB32AD09C3872A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMGuid64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMGuid64.dll
Size 298KB
SHA256 adeb8eec4900868469de3f45222af712291b9d6918c8b7a0f4f55d07d438c862
MD5 eb3ca654da45a9edb54cb462c9373d0b
SHA1 e0be4d9a2be9cb7402a8bf97c071467ee2993838
SHA512 b58c473fd067e52965e66284f0c8a7e66d6ee863e8595d7e6fdd42de9c870a780a319ad406936e01a8cedcc7d1374a175607b7795d34129cf7624074f651e091
SSDEEP 3072:gzN0cig2X3W60NyCywG7+7HHTO3F1xyajGGjDqozLYYW9jwm4i9Vmck7+92cdmbC:gyd63G+TO3FNR3qVYWKVchmjXiR
TLSH
T1F9545A6672D904BDE5EBE27DA6979943F6B638030361DEDF0390092A1E537D0BE38760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMIpc64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMIpc64.dll
Size 313KB
SHA256 1f079b73c2a5f38aa2329e08558296a711da5647028d5ceb7794dcf322302db5
MD5 611f781415fe053c100ad8bd5aea8f21
SHA1 5289564687df6a3d2fd55b16219d1f06edcc5bf1
SHA512 3e5663267a749d26df3cd098fe3bde41566fb67067abd111b6a90e352b23851d87e9321dd87536cea7d389f6f733613451a302896b51f01e46971f8825bc138c
SSDEEP 6144:4op6CA+VtIJTNPUxCpvneBXrQ1IaN7Saf3vfb:D6gVtId94Cv1lAEb
TLSH
T1A1646C2AB3A805B5F1B78179CAA7C90BE7B3B8510751DBCF1260471A3F237E06A38751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMEventBus64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher\QMEventBus64.dll
Size 103KB
SHA256 ff630f76daadfee2f0287d7a366a014af1884f6a17877b9c272ab1177830ba15
MD5 dd282a042dc1afcf715e457fb1a04b87
SHA1 2ac4885d5f10d3e711863208e658ef1bed8647b7
SHA512 a506db42351f2cdf616a8a30d64976c144350a9655cab9ec8db47f0f1d158b2aa4086f4ee3ef104083cf78a74811f792db5b1028b5649729cabae193d93c8dc3
SSDEEP 3072:zmnXqLTvZA9ZTCKii+7M+XHwvY7lJUIm9SZP2XFHjlKtr:zmX8TvZA9ZTCKii+7M+XHwvMl0XFHjl0
TLSH
T1DCA34857B2D800A8E57BD67D9AE78907EBB2B45A1B21D7CF0320425E0F23BD16D39721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMLogEx64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher\QMLib\QMLogEx64.dll
Size 88KB
SHA256 b59295e18364c1a95a1d0191d7406dc3766f44013262a4c45121044dd09bfe4d
MD5 b292a899c3359f39b2f78fad58d64ba1
SHA1 520c37e42ec62e972b875628e8284f4ffad99c6b
SHA512 104ec85fddb32c3d485cd95f258922074e2ecd23b9dbd554939d53f4ea1707c072e02ee24c2c395aba3134dd8d2a0312a109de91926b9821c6b1259aeda0e2fb
SSDEEP 1536:z3R1pwyMMJErT5YBemcLKTDX3r+ygclpFVb75m:z3RPMMyp8cLKTDX3r+ygcbblm
TLSH
T1CA93055A72E800A9F5A792B99E778107D773F0224731A7CF5260C2192F337D46E36B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libprotobuf_dll64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMLauncher\libprotobuf_dll64.dll
Size 2.8MB
SHA256 2812c26aa8210733f89e4b8ec3593c935b7bac6de064ae49df9fe45a515dd112
MD5 c788208231129a2cbed65ff61dc3e4e3
SHA1 f8f1d83b6f1e1642c5e6d98e5393aeb39f717288
SHA512 8e89ab73b39b02f9fb7c1831ad3729174130f4d1dbd359dd7119969c9d1ff415d1fdc3e59658c7cbdccd0b3dcf266c9b4e3834dcb413876839c7fededce1b4b1
SSDEEP 49152:aIhf20yFeijPBpfKVmu8LOJccPth/dPJey0Ib2ouh2zLVJ2jazcIJxWciolStc5q:DZw5OUdwm+uMO
TLSH
T14CD51913728E42EBD0A7D27C8986470AD7F5380187829BCF01B59A061A676D6CF7F7B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libprotobuf_dll.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\QMUpdate\libprotobuf_dll.dll
Size 2.5MB
SHA256 e66e4b5d7dadcb5c0c524692c87d146708520ac19e0d6238dc6f8f9a2dcad554
MD5 fd8e77bf84fb03270291f1cbcc0c221b
SHA1 c5375e7270d2fe98f3c3b7dd6111c34b52a8bf3a
SHA512 988430520bfc7ac1ccce5b78c77710ad7a4188162dd9e88e7f3afec349fd487cab1231f40da6ecb1b186a63ff8e37ec21e3e23b6eb4c2930eb32086b085f6b93
SSDEEP 49152:QxqgCFez7R60kypspArpvDzi55XJ0dK1kgVTBfgWVIsCQnBZlStc5IEkZV+CBVS1:YqgCCZaszYm+uM5
TLSH
T163C52932B68BC277E187C2B14CAC571D83AC59048BA547DB52E8AE0A15711C3DF377BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMNetworkMgr64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\Qt64\QMNetworkMgr64.dll
Size 576KB
SHA256 ac6b670fc94606b4620927f926c84f2f92b1dff4a0ab5ad05ce2c796563944cf
MD5 32acd0e8a2651e7e409ebd2133d639fe
SHA1 fba314947f98f09053344a768c193264ee9831fc
SHA512 e1b198e6d17bb3041249a6714774deaa5970cab979586ee98dde38e69d6acb98aa9fa7085d7402ba25b488d8dacea0a2eacc866c50efb9311df560309bee4f78
SSDEEP 12288:tPd599HqgMcndpl+vmQs/WYgeWYg955/155/NFsp0BB:RF9HqgZl+dsOsp0b
TLSH
T1B6C48C16A7AA03B9E17B9178DAEB9913F6727C160791E6CF03A0564A0F737D04B3D321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SysOpt.ini

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\SysOpt.ini
Size 18B
SHA256 5fc49781c790e0af996ad15a2f91ff53e7ce82ac7e431fddc45475e68aa14f15
MD5 b433f0cd8ec11ca0d6939fd6402dfc29
SHA1 d30cbf3824ff8b761655e57d8f9dd950e2d5eac3
SHA512 59a4ae941fc73f2b37550ff60fe4a6b1cc58a5520cf73e9490156ea20667904ce7bb028915f67890a18703788850a934086ef1b7ba2d87b5454c09bff4952d12
MD5 SHA1 SHA512

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\WeChatOCR_1.0.1.28\msvcp140.dll
Size 426KB
SHA256 4190f0a1306257ced4975448794e1d42be312e334ffccfb4910a4a39cde9df57
MD5 0a0042fe544c91cd57bc2f7ef40bb974
SHA1 8bf31f44ba3e47b8b186c3d8cc219a4d2f67da63
SHA512 c4c56c06cd40213ebdcead6a256510b44beefc3a18d7f84efebcd05bac7bb1b942f97b7f7798420ca8ff0c1592f32301d751554fb63125b4703feadfced2f6be
SSDEEP 12288:/gc0BGzePo6+J+4P0xYv7IQgVhUgiW6QR7t5s03Ooc8dHkC2espkWK:R01Po6+J+dxYv7IQgy03Ooc8dHkC2egD
TLSH
T116943932BB464DF1E48913B971C9472193F9FC610362E3C397DAF12A2F566C6A633A50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\WeChatOCR_1.0.1.28\msvcp140_1.dll
Size 20KB
SHA256 f92ec09eb6b666e42cd52ef912f298fb79c264ef3272735f69f99684b88585df
MD5 4b30f6c86cf6932f2297ffc5e64d2bfb
SHA1 e16f032af4d319002a0db8514d97c1ca23fef42f
SHA512 9c1cca4ec49e40a955284be42bf38a3a9a1264aa04d69fc2bbfc6cb9ef2c32bf99b496740629b283eaa944d8b8166ce755443656640f5c65f98924940d295588
SSDEEP 384:Zv2tlmpNhYQjEy3d5Wc45gW8414gHRN74qJ/AlGskCu:Z+cgtyIP4K/x8u
TLSH
T1EBA23C82FF644963E99E183051B9E5536D78ABD01FE052D72B92F31E0CD67C2EE30919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_codecvt_ids.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\WeChatOCR_1.0.1.28\msvcp140_codecvt_ids.dll
Size 18KB
SHA256 e5fb7a7cf24a854463d6a00b2aebd50e4acef58d2c1535246069ff3f4a1dd027
MD5 4d24e093ee8fb09955109923b8951a7c
SHA1 e09b5cee8a7ee36a0cf0fc7a17859ec60799f03e
SHA512 2dd1403db4a1c47fba7ab0271d88d33bfaa8ab5c0f4e5e054596dea042c6fe74095b92ad4f2f78b98d5fa5713061321f8e38c1e2196702e89fd04691c15f5f9c
SSDEEP 384:NZDSdV3lIjIjG2dhWiyEW4O14gHRN7WuNzhKlROWt:NZc32jPZx7A
TLSH
T18C823BC2EB280887FDA71D7052E4E853AE3CBBD51D6091171B96F6181C97BC2FE24629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adconfig.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\adconfig.dat
Size 182KB
SHA256 d0c017870f62fc81969f4a0be7081aa6635be51810936ca975383d76b0e14334
MD5 5b208a618681d4d7dd23d1fcb44345f7
SHA1 415fb50995ba435086144795a144a8736cbeaa09
SHA512 56984efc99b201ee79ad044f1e723e9de2570ea3317125fddec3538bd09ed94a019d95cb12fc5bd222135c161d783f7fe5a7bd9f89755562b553f640414abee7
SSDEEP 3072:Vv9FwJapKQm06q8G+Qx9gOKWN5724v7Xi7pUQ/8dlt1mfIL+YL6lyM6OFRtQreKm:Vv9FgapKA8R8N579IpUQIlt1CYSy8Etm
TLSH
T10D042357ED390226AB5E724808DC36FB638F6BE009B96F50C1A29F14701C617F974E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ai_leakscan.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\ai_leakscan.exe
Size 1.8MB
SHA256 062c0d96329d3b4f852d842265a87f9d1041d27d64ff371550ff2a9427d03446
MD5 3197dd26153a8466de67e79cf483996b
SHA1 f91f4704bb19d23e5a3c7e28943b19c8d7beec0c
SHA512 4821072f0cd7091f1ed4933747635e557f1bc6f756e5060f25c21c9a77b09659d616ec6b295f620cd34ee8d0524fe4909d7177f9216548d011d32a1dd08595b9
SSDEEP 24576:9UAxT/XKSclgGZ3UZkmx3toUC6qb78DEjjFMlVIH06iyeaxqVI:9UAxTSrgGZ3Uamx3vC6QkyKIU6ipaxqO
TLSH
T1B4957C02BA9A99EDC199C8B4C3478B735E2674CB0A35B5FF11C551293E6EAF11F2C318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\beacon_sdk.dll
Size 1.5MB
SHA256 f528fe746e1d0c6ca283fe15a37ceb133cdd311c6471e3e066576ae22a85fd1f
MD5 b879924d162843d84efda41c44bdf086
SHA1 308329b0b79c6bc9d43b5aad41877fb8afddf4d9
SHA512 706a7229aa4795cbe72e3c1a98c3ee76f3ca01013436b6a6e4d30c660b98b612b94ff9ef7c97556a7b622b3116f670c777ee6590a479ca4d969744ce0ce7dc19
SSDEEP 49152:4ngFXLQshfyC2o/m4noFRDCKkyS6ISwpRTpms:l71ceKkkISM
TLSH
T19975AF237985C0B2E9CE02B162BA5BFA8D3DA525072955D3A7D42CA59D301E3373E70F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\beacon_sdk64.dll
Size 1.9MB
SHA256 85687b6b7f7499b9050399f891820c82a054ef383f3c64841a1bf3e649ed711f
MD5 6bb055cb8a55b38fdb56f74f206970bf
SHA1 0071bd311a7e2baddc3d3b3a14c6d724746ccf7e
SHA512 59cfe15a683bb1331534981b034035015c51682c7e3756f7483f1ff0b19e8cef171ef8ffb081c47f0058b217f819dd0bc3384aaf9c86610d7b0b5e4242669e13
SSDEEP 24576:5X+bOQSzklsgSM5TaPtyRQS/YSjdAEY//keL09uF/EFPXH74OWfUYuph/HP0TwKv:h+bOYsgwt+QuDC/cegAuFPzWfd6vsTws
TLSH
T1B7958E57A3A800F9C6ABD27CC6475A0BEBB1B40517619BDF03A48A7A1F13BE1177E314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bugreport.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\bugreport.exe
Size 705KB
SHA256 7f107ff14d410ae7798ea83cce26054a1c6e0fed21fc6237a8eb83b5af2a264d
MD5 36b005a49f63641efa5a190778c451b8
SHA1 8d1890315ffc087d3da9bc4c2d1da20fec06f3c2
SHA512 ebf08affc672c4a6741cf69734ac82e514339a4a3eb75a2e25e5f0832962cfaa1920381082dd098cd0e41d49f9770155df85721ba8813e3d9ceb5e2b7e4bf354
SSDEEP 6144:r63gWIIFaUPGO6C4r1zq5MDVO5fbpHSopi+9o0KVoKVBawUMUrepqMfHehW:rvILGQ4r13UbpHWYKVoKVBtqMGhW
TLSH
T13DE45A727B5BE032E95144F06B7CAA7EB569FE241F2649D763C43B291DB88C10A30F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bugreport64.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\bugreport64.exe
Size 877KB
SHA256 1d8758f29868b2e3666ba319e3120f87347c7843585308ab9e0aecb882f3a54e
MD5 a591f5fa94051a2d0b2bce03fbc9899e
SHA1 fb14485e82202aa15daca0bfb0bec38169fe4cba
SHA512 2bf638d380bfe595cd0840c85d01693b80f0549a28c1d13614b322a30d1c15fef0b3eab524adbb53d7a5e22345a9dd1cbc284ff890c60b96823c84daa8ba0ce1
SSDEEP 12288:xfMRtHReMx0GsUJcd2akzFBWYgeWYg955/155/HNFdKVoKVcv4g73qMmF:VM5rx0scd2a+wPdKVoKVcVbqMmF
TLSH
T1F4158E1763A900E5D176E0749AD7850AFBF23C920765CADF02A0BA5A3F379E10E3D761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\cacert.dat
Size 214KB
SHA256 91f37c55b354111137dd456aacb3a57592d5135478d81554f9c87ea37deaedb4
MD5 35e2b0bb0da6a0d17aeaabee80906b34
SHA1 3e9e2e1f60f443e5103e15771f69cfb0c49770ed
SHA512 bb632c93b0ae45dc07b92c7094bcfc4d3a09fd4383279dc492c4e0bee38d9fc884e0b5970dec57514b999685ec2546bef107b211b20b0bf087fb6c8eb7b91701
SSDEEP 3072:8hGvwW6JG7ITWYv0yoVH283rz9KdWqIAsjjg4DsUQS88UP4TFf3xVOVkCC554jMh:i5W+G8chWbm8xyvp5iIzB4CNxzaa
TLSH
T19D24AF9BCF526C5918D3E094C9AB025DD41A8363DEDA78A32D0A3801DF85B3E66FD48D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

communic.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\communic.dll
Size 51KB
SHA256 be4e45d73ccfa19977e5f2115bdbc4eded79d7d602679eec79c1a62a19193261
MD5 6bb7240ab52051d8d6084dd2667ca509
SHA1 288b4d3dba0664dd12b189dfda25683c3dd99fa8
SHA512 903869cc17de9ce448b5c7bcb58193ecb9ee7e82d8786bced9264b45b0e067a0ab5f3e3bb449f34b1989bd35fd83c0f8d6587d42aae8b28629d1bfdd60ec6501
SSDEEP 768:WCsxGNCKj+EmLNQf5VE8Kmwnb/fO05Zs53HQldSmsd6i/4WBIYiDLk5+2T+hK:cYCKjoLNQfYnL6XQlIhrg2I7B2ChK
TLSH
T1C4335C22298085B9D8E635B4349C723106BDB5B17BD091CFA65392EEDD747C2EE302DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\concrt140.dll
Size 237KB
SHA256 290f577461b2d4197db0b7d09341225c90cf066984f965e54c9fa4aa16ba6687
MD5 ec5a86b5e7bdffd50e022e431287273a
SHA1 f8ca0cd2955ee86c2f8ae2e9f1514071dba314fb
SHA512 d712c835da99cbc98bbb031301ebc339103df25ab651dbe6c0b4bb90e2646ef43680a93834f1846d84969e7e7d66ce7df91f3381c6a570fa723f02d704f3b262
SSDEEP 6144:ESM2yFExAZvA2LwG/LTEcDDsLIdKd3uNqW82Cfpu9vVQlSdu6bpIo12z/NpJ9YO:z1PfI4AqW82WEtu6bpI5zN
TLSH
T196346EA1344044F7F77B03328428E7B995BEE68027EB85D71F6CA65A1E346C1EA33593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

defaultapplist.dat

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\defaultapplist.dat
Size 6KB
SHA256 de0b366044bbecefc242b5284844f2a8525abb3efeb08e967f726a817e1326dd
MD5 5ea8648b805df1d1661542f37d8a48b0
SHA1 244d844c4f3d26d6427248a3f3afe8009ecaf5a7
SHA512 e32b048a5217ec74093c1ede97786ab1a819cafb5219f6453775aa4b34681edba3f574cf033f3cba0f97dad576a54fbb57ca775719760d1cc2c17b0d0551c063
SSDEEP 96:ALg8NeHxcmlTVStlDNz6KJ8hiwuTxtxgli2ik3Kw7mhRsMuep/HdBYMC/ELSXRMp:bWmlgtuK+SglhKLaM/vdqxELwMFeLU
TLSH
T123D19E38D618957A546B054E30B10C7D739CB9216A674D3639AD14C183FC4F66731A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

disklib.xml

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\disklib.xml
Size 116KB
SHA256 ee6e52b28e2e46f9abb6d40e7a30563e92780fa6b7aa4b02013445cc9a7dd657
MD5 778c144b29b9bae4498c598711ddf2d4
SHA1 17002adbaf408d8edaa56dd6edcb96523f84bc9d
SHA512 2945d0f580ea797d53a9ee4d328843043c293a4a0bb7acef8fae4d37085caf00806eef8b4bb24f13b6242fe0699c66bc7ab444884f893c4d7189392a0c0eb3df
SSDEEP 3072:q3VRuMljaArWkxmKeIX+8cOxvyELVZxTp+fYUb6LIIst:mRu2aArFleIVLhTp6YgKhs
TLSH
T135C33B63A6ACA923A2B31ED78330BF02B1DAF9269717201DE30C7573819F95BD971135
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dr.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\dr.dll
Size 328KB
SHA256 485c9a7959d190e3eed456bdb6cd038dc3670af6ffcaec28a76df7ba2910bd57
MD5 969defb810325ced85227fdd5fb47278
SHA1 a7a21fa899634a5e953170cd461a0f32cb77da6c
SHA512 9b7894838a94aed94b1b8ab407748542f268f57a6ae02de58ef1f8731c11eca4b8e715dc8774b953dd344526c5ff488bc613f3036b1aa957001a7f524b9122f4
SSDEEP 6144:ulIT8flbxzoQ4Rnq0nI+cWNCU4p/A/nYRIgeJ5camazmZbWQgz:78flbxzoQ4Rnq0nVcWEU4i/nYDwcaRKG
TLSH
T1EA642970F766B432E0A709F6687DA99A713EBE340F6596CFA3D8321D15714C08B31B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dr64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\dr64.dll
Size 346KB
SHA256 45c8ef69b6b461b470c33bab140aabe125dc0fdf03281ffad19804c7542e40f5
MD5 d327415285f8c1a684613b5b97e7a136
SHA1 3768a074c9be6b6b60ea53a01489c2a1bdae5002
SHA512 dcce05e910048056bc0c87a9cf94955fde855c5414b72d0187a6c1de3d404a31626f15333e35564a70356279765f8a2983c2553f62accb29ee0e30fe5b2df39e
SSDEEP 6144:Vc8WL8119MBYVlQVWYgeWYg955/155/ueVIdhG5naWl5AzEyCls973:qhg1dQVWYgeWYg955/155/ucI4SZ9j
TLSH
T100744B16EAB200E4E4B7F0359AA7A117FE713C584BA5E78B93505B4A2F33BD0A53D341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QQPCCommonMgr.rdb

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\QMNetMon\QQPCCommonMgr.rdb
Size 9.0MB
SHA256 0a835864e970a207f823df78170cabebf2b2ff4382133132a8b3ab45ef464bf2
MD5 34566e4ef0e363a547bc7bb3ad70252a
SHA1 ad3558994db5f2fa0a0ad91c748e8dc5f99b89e9
SHA512 2e6ef45ffc2fd8a9fa16aead266484effc8576bc1561f32aa7296ba3dd3713c1089fb3d1c1f75a43b44e039891f21442ffb240754ec18fd968fc4c93813232bc
SSDEEP 24576:PbfAazV/brfZWZOk2kECnRk34xaXmjkhZQwJ5nRl:PjpbrfZWZTwPBznRl
TLSH
T1E2A642D947A101EDFE582BE0CA8330E44FC48D557EC205AECEB97D25A7B899E2701E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\QMNetMon\sqlite.dll
Size 351KB
SHA256 d448b45d36661e0da82b5b9763abdc3a539229958810de02598293a6f2604555
MD5 9487d0308ccdad31ae8f88501bfa469d
SHA1 044fb6479507e526951bb8322f4a31e96d353511
SHA512 0a1400bbaac2b722ad28ee10fb0a743092d34c26fb2e7cd5fba9d35d0c9ead177d39c4ebc74da8b10f07f1605e209d9d277bb9c5a9c3ef7e3eced22b111e58ad
SSDEEP 6144:m2+/FrLtXGoZpgo0R45NUu5m0nR7HfZPrsjC8CXQgksEnYUGOjBoyU9P41tMLSnH:m2+VLal2E0nZRcmEnYOU141t3dwt+7Fb
TLSH
T12B74BE23D5928037E46310B0625A5EA29DFDF63016B594E7DFE42C899DB04E2A73F393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xGraphic32.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\plugins\QMNetMon\xGraphic32.dll
Size 531KB
SHA256 e782ec69bfbe96cf90852cc49c6417a8eb2257010989511d565d770f7be6239f
MD5 1173208a355034c9d257a352b3db8571
SHA1 3297451248673e1fdecc0a34c567f9ed77cdae75
SHA512 b9f2fcb8b62430ed0e7a9b25e7244979eade7cc700a622f2be012d4f5f1a31f7732ab9c649ded684f8a260500e0feda222c4ec79b18318b5d008c062d898a1fc
SSDEEP 12288:NjwONta6lxr5IlFNxII7x0f2QDDLRITDc5fGA3oxT:Tpzr5IlbxX7x0f2QDDLRBGT
TLSH
T180C46C93C6F3F1D3E0A61DB2937AEAFAA911776541268794CFC00F1DA0783B6A5105B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\ucrtbase.dll
Size 900KB
SHA256 1ff49fa3db1b3aa78459544594f72f7aebf2ba285476c2c8a064bd887ea7f565
MD5 d0d8cf4e5302fdef07168d7ce184de5d
SHA1 872b72e0910a3d5f142e85c309ed4295a8cbd95f
SHA512 a7569fcc47526da6532d97244172596e8d3900f2cc142709c0bb95ec2447dab5411ae0cc9bbf430470b6734781c5bc748857f5ff56d8a82980e93a40a5a86a09
SSDEEP 24576:+0qW/eQNMe7KtlQzn4pz+xJlEInEFmcvIZPoy4z1k0:X/eoF54prB
TLSH
T112156A617885C161CCFA61F81AAEF232057EB5944F70A8C337D40FFEE5651E02A3B65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcamp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\vcamp140.dll
Size 390KB
SHA256 aaa4364b8fd322f8878d91f8b76319ed71357e2a7e91d0f732d7857d067ceb2d
MD5 f89482c2c8a495993e2117d5d1bdf442
SHA1 fbda41c9a499f9d82e1cf69d06e4c6e16895f0f3
SHA512 121f882af64fd67afa86d0ac1b6b172b1dc9720078a0f6744a5c778911f22e4dd50b0c9d5509307c393dcc1131b3b5eff6d088da8d4c12d309b3facdc46a334a
SSDEEP 6144:sJDx2SAIFYoVXPxZqPzgb4CxEy4BtHYuqiUOA6u6M01kGcWEi:A2NABVf/N1cBNYuQOxu6nHh
TLSH
T132845A21F951C83BD26F0332381DD5EE60A5B6505FB1C1D37BAC972E1EBA9C29630D62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\vccorlib140.dll
Size 261KB
SHA256 517bd079e0108d150b6f3b42afcc578fc5ca690ee8dd0f638e23eb0df07af8a3
MD5 56c2c3a73f528f95a1b70f68d3704518
SHA1 40d1c3cb0a3d9a35ec580540ea6bae39fa6b8261
SHA512 5bbac3d08a1db6dd249c12b65dc49423ee6d12091d058d608b1eb193c7d11b0ba35c591041b721b35f9fe2cfe40eafd7c4cc17f06509d11dc615a9c34d7a17ee
SSDEEP 3072:c9WZnG3vxHdmJOHpxyBIBaQ0I/Iuljl1mc48MHbhwgSmiSO4:cmqTmJO/BH0IwuljKH8BgSJ4
TLSH
T1C9444A333D9C68B2D5BF5234DA849638426A74908FD1D7C76E58EBCA1DA43C09D30A7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcomp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\vcomp140.dll
Size 135KB
SHA256 ae780948e9ca4e6968dc72a2b32d55409b685e4326db735b0679e32512506cb3
MD5 49b855efea2ebe9e104fefa017cc9878
SHA1 29448f4b8d7678ba63a5c8e1fd3585a19bf307bb
SHA512 774429a80c04e35037a8494fdc0944f3dea22bd0610b1534847764e669025c90b1a092ca2c9d3a5f6c065fbb869682b9a5f22fa860657ce3a13934f1e9be2005
SSDEEP 3072:Uyrx4Lf0ZGQ62xfOW6Z34bL/MmPVyL/7aG5fn+EYExc:5GQ+ZaL/i/Wexc
TLSH
T10BD38D11B5C18072E4BF1D3D5F79EA621A7FB9600FF05CEB1B9540AA0A703C16B35A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.1.30225.301\vcruntime140.dll
Size 74KB
SHA256 44de8d0dc9994bff357344c44f12e8bfff8150442f7ca313298b98e6c23a588e
MD5 afa8fb684eded0d4ca6aa03aebea446f
SHA1 98bbb8543d4b3fbecebb952037adb0f9869a63a5
SHA512 6669eec07269002c881467d4f4af82e5510928ea32ce79a7b1f51a71ba9567e8d99605c5bc86f940a7b70231d70638aeb2f6c2397ef197bd4c28f5e9fad40312
SSDEEP 1536:L2HuqvERNjBwySXtVaSvrgOFw9RxKMniecbCerlLi:L2HZMRNjKySdLcOiHiecbCerhi
TLSH
T1BD739E4278C082B2D56E4A79057AF612673DAA200FD15FDB7FD85988AF75AC0EF31213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GlobalMgr.db

Path C:\ProgramData\Tencent\DeskUpdate\GlobalMgr.db
Size 190B
SHA256 c9b31622df7d7aa3c51046eb199ecdfff0b6d96178880ecc2bcc1fe482cbd389
MD5 38591729e188f3793a71b3c9f3617578
SHA1 4c9be58ffb613ae1c337541a8f860f1defcacee9
SHA512 5dbcfa6dbc48f26db1c13d6075b0f807829a47df882ef3efb82492ead8bd074f42cae9166a2a7fb0383c49a6403a494f93cb8dfa7ab8891c6faf6de7e53d6af2
TLSH
T145C012B3414C2AF35A8D4F07D6A15478AC5373D58ADA60451135B3CB5860704B1DD03C
MD5 SHA1 SHA512 TLSH

Submit Download

Guid.db

Path C:\ProgramData\Tencent\DeskUpdate\Guid.db
Size 1KB
SHA256 0e590d18471c6cdfcda215eddbdaecca6e05f8eccf24965e23001e8e39349819
MD5 889ad1bbb97aa70ae0fdc9b748cf1bdc
SHA1 e2e18df8da01d8bfa1ef1c887df9d7266584f5cc
SHA512 c9d2053857c74e9d0827735c8032a09930f490bd0bc61edcf75e8628b1c238d3deb91d4b30b9202fca063dc6cd0b6217d6a946e6f2418f21a6885d19451f0f9a
TLSH
T1D921BBA2921A0DBCC95F8342232138369D797303556774EE1FE6C54C6BAF7086A8E304
MD5 SHA1 SHA512 TLSH

Submit Download

Guid.db

Path C:\ProgramData\Tencent\DeskUpdate\Guid.db
Size 1KB
SHA256 810ebea4edeca07071421ffe9852a54b4a62b68f66d718f151b09ffbe1af0d15
MD5 b60691606e0cc2ab677fe1786049ad82
SHA1 2bbf87c74c28ac17b5b548b7587005fd86767fc6
SHA512 856fef04beb1782b034baf6e2ac189af792b0da9ca30b1f2037ce790e6d0af448f6ab319cd2ac4586cdb1537dbec9ec510d143c1aed67a51225ad5c88e25e5f2
TLSH
T11D219DE2921A0DBCC95F4341232138369D697303956774EE6FE6C54C66AF7086A9E304
MD5 SHA1 SHA512 TLSH

Submit Download

GuidInfo.db

Path C:\ProgramData\Tencent\DeskUpdate\GuidInfo.db
Size 320B
SHA256 4ce5b6c821505e99962646503d147f523f8f165fe5f0e2035e69732d4ac13bef
MD5 026323c2d4df1e89528ec04bca385c22
SHA1 763252d311c315d26c3808b207bf9e1fb3fd9185
SHA512 69dad47fe6141f03c18b43141a588d9e0e02880bc4e46e25c549d79ff108d035b5fe5aaa66c14cefb898073dc454724a1b8097b8276be74d636ec44b4455b660
TLSH
T161E020725534EF98368B14E103B2DEDC56765B520E951107149156432514ECC5C9E51C
MD5 SHA1 SHA512 TLSH

Submit Download

GuidList.db

Path C:\ProgramData\Tencent\DeskUpdate\GuidList.db
Size 221B
SHA256 67b9cddf525ef20920780b04718f5a01c0445413e3a657327cce57f87e0d1888
MD5 360d9bae15dd35ff515506bfe3191f0d
SHA1 9d53a0e4814777325cc9c6abd9c69da1f3c495e5
SHA512 b664ea1448219358cbd1c8b53296f0ce61d635e69e1a813095413498cca88d0d774635132ebab5b9b1945feff73975f96d9b6c19eaf9902651b70127feec882c
TLSH
T105D0A7F2913826A4978B01961AB2AE348A921282832B207612929987056069CB5DE109
MD5 SHA1 SHA512 TLSH

Submit Download

GuidReport.dat

Path C:\ProgramData\Tencent\DeskUpdate\GuidReport.dat
Size 818B
SHA256 7fd1df33f6d0c7ac2faa62d2bd13ca88b297dac2c9d2ee90195ba6d6a707f446
MD5 c3fad6f76988b85fdcbae9336dcf19ab
SHA1 3880b8d0ad5adca9b5d4abd3029ab4de11fdf636
SHA512 3f22b898b0cce4385cf7ddb8bc606c22e747a9b03f5f787414d3e4941a78ba2bea172332259c7f6e575f3ae156f11d4d9f9cad94f52dbd2b1bdedc2fc95108fb
TLSH
T1860112B05A4E6CBCC6BB8B4273213994F7C4F2C38F3534ED9F968368130D649860C008
MD5 SHA1 SHA512 TLSH

Submit Download

DatabaseInfo.db

Path C:\ProgramData\Tencent\QQPCMgr\DatabaseInfo.db
Size 12KB
SHA256 f481a86548061fbec469f161f9f1e069a1fbdbb490775927c1c348543a861a9e
MD5 b5ebc8e133bde1042d5d1bfc86a96322
SHA1 608c872978e86e4f69e896e65230299321d644e6
SHA512 ef96b7e7db7ab8dbfb3ac62b9d809cb7e3195a91c81c1d78c02a639aa5f8b28aeae9b484799cdcf4823230cdeaf5003c0cdd317739ea06462b10d355e9fcd73a
SSDEEP 96:tTMvP11XayNgvP11iWKKalV9Zy0vi4sZy88Q2KalHKaayNPK:tAvHOvH4vi4XQ
TLSH
T1CC421260B4E67324E91671FA8FC9D16A8B1BB2A8463BC43F305E66D347C7415BB01379
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QQPCMgrInstall_20260701102027.Log

Path C:\ProgramData\Tencent\QQPCMgr\QQPCMgrInstall_20260701102027.Log
Size 5KB
SHA256 8ee00573cf1f3f8eaedb3668ec6495a7e8fed88bcb64a8fcb1cdd7ffe4ce1aad
MD5 e8858a159c8d51f471a66f715fac2067
SHA1 aef031eaa264878af4e9fbc482d4edbefd7a3f98
SHA512 657c0063e9bc0938aaf3401845c169738a32acb4cc3930171813e004a2b1e5968f73738a5e7025f4ee011198b57be6ab60f4300bff910e37b0eb83374fe5414d
SSDEEP 96:r7kzUPToSRbRePm95o9MclpcLF5U8p2oQFBKFqYVQ/+PGJE8F+bhHM0c1biMZ3DI:vkzeTvRe+95GPiFGonQG2LwM0c1WMZs
TLSH
T117C1997F17A60487A972C743D8E742177A727CEA2A34E80C11C5934E2BB2545BC923EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmbDatabaseInfo.db

Path C:\ProgramData\Tencent\QQPCMgr\SmbDatabaseInfo.db
Size 19KB
SHA256 da32a751dfebd8ae26b014c40c1b7e4f3e95ed2ebff7cc25cf24526f257896b7
MD5 892f7f403a028b007f4d3c75a272bb3e
SHA1 e1de0e0008ce64e294b01bc67a72ba94024ad069
SHA512 1ebff1a6a0f87025b4f93ed13c5a588df492daaaf27bc580304b41c20b8eb27f0eaed905d18774dc9b59dda749a90c475113e65009a7134eaaf02bae02d3128d
SSDEEP 96:bV2Y42Yfqu3+/E6ggH63/5NQE48CkyS5NQ6oIkHoRl:B2Y42YfqE4a/52E48Z52fIkul
TLSH
T1DE925E41B1DB3229F916B5BA8FF9D1BA875B3ACD043B812F206D264343CB409EB05779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMPBEEx.db

Path C:\ProgramData\Tencent\QQPCMgr\TAVWfsDB\QMPBEEx.db
Size 23KB
SHA256 1d65085ec812a78caaf4f30df7cb8b7beec3a4bff42a9c98a5578c6caa7fe2db
MD5 04d1680795dc7f86d0af3717b9f7078e
SHA1 202375c9c2c066e58613b6ceaa952325c7e8702b
SHA512 619f73d1d53d5dca353ff24e929213ef196cf1e8ad5fc7208ae69257aca574f7f98dc1e0e710789171e77e3f3cf11dd59ad34bc269cf426d73d5bd8c0ae27165
SSDEEP 384:iMMP292hHZvPuEmtFO5SIEhtRouvtvzKGUPqomswFRqFMoqmVtlyIUocxoGU/3TO:PjyvPukkIEhtR9VxUlOwMRwtVIcvldXO
TLSH
T161B2F1057DE2AE9DC07185A79B1D6261AD0105FAB01440611F5AF70E7FE9C6FA2C0F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

riskcount.DB

Path C:\ProgramData\Tencent\QQPCMgr\TAVWfsDB\riskcount.DB
Size 2KB
SHA256 9d6ad02117bcc7314697fd2cc6a3ae9e54c39819716edee51e7402feaa150534
MD5 81eb984b66517806c16bf9b20d5b1461
SHA1 a070b77caefe48a472b1cb6103a1baf19ec80e11
SHA512 3234850df365aeb703088d7e8768f19b85c23ee1c5127ae9ed3447979eccb5dbb58e6beff82f32b8d1a9decd4904747128fd0d168a403fa73ae6dbc12fd5f671
TLSH
T15841A8C0F2C0A216F6B52F751DE4C55B9C133A030935868E80AC992ECAF3E8496B433F
MD5 SHA1 SHA512 TLSH

Submit Download

UserPolicy.db

Path C:\ProgramData\Tencent\QQPCMgr\UserPolicy.db
Size 4KB
SHA256 56b1f6bf2ad76c284f81d2dad9e68a2c080d0c13d3e8981937322ceeeb3318e8
MD5 0d8c1dc1502cdff35a56aa1dca5ce5e3
SHA1 6cdd283ec7e3aa62c7b800c74e8032b97fee6746
SHA512 8348724033e5ecd276c314ef44d3de12f55f6a84490b6fac0aab2ba866fe68d15a460f49fcc1997b6ef9f174e36bd5c8e1277fe4bf5d7948337861d02b834419
TLSH
T1EA819E41F74BD0646CA2A30B3542E8B8E98FE7901C64DC2C439CA39AFA9C941B12D4CB
MD5 SHA1 SHA512 TLSH

Submit Download

qmvext.db

Path C:\ProgramData\Tencent\QQPCMgr\qmvext.db
Size 3KB
SHA256 57f3f423ff93dff538024fb4234f9d43b355c812a76fb7cc58f55c180cde3ad9
MD5 802c883473536602fcd602f6b73f789f
SHA1 d5f0280437e820e37c61c194a3e02db9a32391f1
SHA512 514fc93a94a14bc7de882425552e109290668bd5f7e009d0d16b13ed7bc3cc83fb5331f69382ccfdf546f352388c4641a504755291902a4d5a4587bc3efc9d75
TLSH
T135517C92B801972C25C1C54CFA80C7DBA8CA9906134E5CCA2365C9389A42721C9AC962
MD5 SHA1 SHA512 TLSH

Submit Download

QQPCDownload.dll

Path C:\Users\Admin\AppData\Local\Temp\TencentDownload\~e58e2e9\QQPCDownload.dll
Size 11.8MB
SHA256 b81b28f03cc66932bd55c6d3144ec3e482d47d6fb07ca2c0d817795037d0fd05
MD5 b564ec3906f3e1124bf333e5c9253ff3
SHA1 8b4cfc829676560cac4bd388b7a005f0dc17dfd7
SHA512 960e3c09dc336bb920e66782782193726e4dbba38d49bb581837ca707db9bb107a195c423e1926c5f680837829732a54123a8337ab98972aa5030fcccf98a6bf
SSDEEP 196608:00JTaMawhAgqz+V5twWZ/Xfae6EeFGwapAktGuGKcxQFFQSPoJWR4:0GaMaw+vtWZ/SwKmAktGuMqsSPcWR4
TLSH
T1CBC6121132B5C03AFDBF57709A785B6B417F79211BA088DFE290A68D2C70DD25D31A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk.dll

Path C:\Users\Admin\AppData\Local\Temp\TencentDownload\~e58e2e9\beacon_sdk.dll
Size 1.3MB
SHA256 535e18dd5329571c20ca1a3ab945a135fd3602a43cff3e01f8dc63a3023b3761
MD5 1a644b8556328717153c81698803f7c1
SHA1 fd196908625d407dd9a37df8a64e1ac57a325e9c
SHA512 1e4b0bdf4c2360469418eb779309a53303d6571a087579365d30ad739c5980e21147274c97173170f3056e09550e011ad724b28499260265b639c7a6329db6c7
SSDEEP 24576:8QnAtm011POqOLUCkgHi1aRq0vCNd3+h9FIhPMD8DgSMesg+PjtzT/s3tVFjRQ:7nAt7xnOL2JIR3aNd3+9FIdzAPj5T/QS
TLSH
T15A559E12BE91C472F8CE01B692BA5FBE4D3D5624572944E397D01DA59D302E3BB3E30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x64\System64\vcruntime140.dll
Size 94KB
SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
MD5 a87575e7cf8967e481241f13940ee4f7
SHA1 879098b8a353a39e16c79e6479195d43ce98629e
SHA512 e112f267ae4c9a592d0dd2a19b50187eb13e25f23ded74c2e6ccde458bcdaee99f4e3e0a00baf0e3362167ae7b7fe4f96ecbcd265cc584c1c3a4d1ac316e92f0
SSDEEP 1536:yKHLG4SsAzAvadZw+1Hcx8uIYNUzU6Ha4aecbK/zJZ0/b:yKrfZ+jPYNz6Ha4aecbK/FZK
TLSH
T144936B4A76A442BBD06BD274C1E34A1AF770B8408B3053CF03B686AA5F67BE15E3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x64\System64\vcruntime140_1.dll
Size 36KB
SHA256 1554b5802968fdb2705a67cbb61585e9560b9e429d043a5aa742ef3c9bbfb6bf
MD5 37c372da4b1adb96dc995ecb7e68e465
SHA1 6c1b6cb92ff76c40c77f86ea9a917a5f854397e2
SHA512 926f081b1678c15dc649d7e53bfbe98e4983c9ad6ccdf11c9383ca1d85f2a7353d5c52bebf867d6e155ff897f4702fc4da36a8f4cf76b00cb842152935e319a6
SSDEEP 384:5GnvMCmWEyhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+XfbRuncS74G5WreKWn14gHc:rCm5yhUcwrHY/ntTxT6ovq7nt+dN
TLSH
T19FF24B9467788082E46B95B4C4E3AF27FB38F4615760938F0BA4825D2F637D0E63D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-console-l1-1-0.dll
Size 19KB
SHA256 8f28bbea2ac836fe993c2fccbc7920c6e0fb5cd3fba7956a85273ebe2282fb15
MD5 bcbfcd896e50e591b22e237c903fb523
SHA1 2358537e316afaca3b61ea797b58ff60c1ef99c0
SHA512 1a9812c4fe427e89254df346721cfc93ef52d5547d293a987516b43c21e7baa51ee76f6dacebe87334a67ba54b98633e603b4da21b8264240561e1801e922eeb
SSDEEP 384:ZWEhWoy36q0GftpBjX7WVjDERHRN7P7JZnlrltmA:Zwki1wDEBj1lt
TLSH
T11B9228D68EBC9543EC939DB012E8D9877C3DEBC71D20555521AAF1E928C33E1AB14A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-datetime-l1-1-0.dll
Size 18KB
SHA256 baa6eae9e3742c736327da12c0e2e586e65a0b6d667547c638fd1287886f022e
MD5 aab52e0385a66e157bb440cb5e3cd3db
SHA1 55421c5e58951921843c0944d18e22391bf05c8d
SHA512 4bdbb93d8259ee344ce6a6138cdda2fb19bef280f8aa06daa5640125754a808ee4a68302bdf1bc5a87362b886e826414c0f43643b068a7925966adb9bca0a487
SSDEEP 192:lPWEhWIWvEoOleFuDBks/nGfe4pBjSjvZ/fG8Wm78RFAII1RHnhWgN7aQW3/sVqt:tWEhWSMoq0GftpBjmwxERHRN7jlrltmh
TLSH
T134922AD6CABCD043ED935D7063B8D9477E3CABC72E2085561599F1D828C37D2AB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-debug-l1-1-0.dll
Size 18KB
SHA256 d9b96b975a90b0a8c08ffe6d2185b6714d75bd8fd3d8346aff4a069d44960f73
MD5 f97b671fac0baebca98059a9b099c4f9
SHA1 433f4850353d7ec03b3215d77cda5f0874e67439
SHA512 f2c8510f1b166248259781d4c910358bd89fca4d8e39b3963adfd26fa999b4991f08ca966c265ec3f9161d704844a15caf97dddc88fa2ae95cb075245e990063
SSDEEP 384:PWEhW4y36q0GftpBj2mERHRN7F7vlCADZgJ1:f8kidEBFcADZgX
TLSH
T1DF923AD1CBBC9483ED975C3063B8D9873C3CABC61D205A5504AAF5E928833D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-errorhandling-l1-1-0.dll
Size 18KB
SHA256 c8fc616e5591d0b77c592059e2fe2cecb54b1219a72d9a92fd09f396fd340cf7
MD5 7c1f03e83bcafe58ff99b3abb9e7de43
SHA1 15e8676f12f7ec0bf102b772839cb0bf8f1b551e
SHA512 e3206b7863795f3d6251ea788caea466fea6dc89678c8623ccbde27286dcdcde9158b3132296912ff06b3bd913f91bcb2ac9f21d0654f6389adc086870e9e0bd
SSDEEP 384:9pcWEhWWy36q0GftpBj9h/1zERHRN7Nowlrltmo:9p6mki3J1zEBdlR
TLSH
T134923AD58BBC9043EC93AD7022E8E9437D3DABC71D2055591599F6E928C33D1EB24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-file-l1-1-0.dll
Size 22KB
SHA256 c332a484a959a2241c43767f7eff8067855dfaff6ced79f03de154de99269b34
MD5 350e52ba8f75e06b370e7d7b60c97c7f
SHA1 24e81d8178a368b31e906a43ab70cd4912430dab
SHA512 31f7d32895e37aa35e89c5bdcadebb15eab87c30761c02aacac622048f05c91c2d52ded7b2225c2ef75cddcf8c58f714dbb8ebc579d0e58ff308df06c24e4411
SSDEEP 384:NPvVX3WEhWZ5q0GftpBjDOERHRN7iYlgHrIQ9:NPvVXX0ipOEBi9rIE
TLSH
T1FAA22B93C9B8E68BF88B9E3162A5D8437C3893C7082045861799E3ED3CD73C5E76895C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-file-l1-2-0.dll
Size 18KB
SHA256 ad487c96c39271db2c3340bb106fa8f3f2b401b100b3d342813c09fbfbddbd05
MD5 856be91f8f44394cf92be1af50530521
SHA1 6baebcc3dee03fa7dc17500d8540925307cb9beb
SHA512 8ae6f848c1ae7831fa012f87387e6334351545c185329d905ac9108694fab4b073487cba621154062e8fd357d65303938a47ba71b3d1047640bc30d5ca3d2ac1
SSDEEP 384:oWEhWwUMoq0GftpBjaQRk6ERHRN7ZNl28ws8h80u8i:+NairRk6EBZm8r9V8i
TLSH
T15A922AD5CEBC8083ED936C7063E8D9477D3CABC21E20955515AAF5E92CC33D1EA24A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-file-l2-1-0.dll
Size 18KB
SHA256 93b28bff2f9d64a02f8362224ca45bfe4d6bb7fa6f83403ba9adec300dc7904c
MD5 15f59e829f9f2020e9c47a10deee718c
SHA1 365522c1e3a230b19cd4d82d8f0bdc944ac8435e
SHA512 b8fbbf6403aa7db868cb2581ddabfff20c7e1912a4c41107fd91034c54020a344ce8f0fb4ca2f32f20e79486c5fe87177b2744f1ef593ddb5414d2adfd18b971
SSDEEP 384:h3WEhWY5q0GftpBjt9NERHRN7AUASl28ws8h86uR:15ixNEB9m8r9jR
TLSH
T1CE924AD1CABCD183ED939D7063E8E8477D3CA7C31920465A1599F6E82CC33D1EA2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-handle-l1-1-0.dll
Size 18KB
SHA256 d83d3edef8ddbecf31af7437653e66adeb303947ef3da31a1280a485422e475f
MD5 b801c68f8146904adb86869f5c3477a5
SHA1 ffb860ca10040ecaf5ae4a61a9c11db3e2eeeca6
SHA512 dbb7f1fb13d313da2047bff45ec0300d7e2f66337110fae20217137b9a6784663b42c56b135a4cae21b367d7f1650a9d158a71793bfd1822e527d6310ad6dd2a
SSDEEP 384:iWEhWuy36q0GftpBjRERHRN7lyQlDUyZa:QekijEB0eUyk
TLSH
T139924AD5CE7C8083EDA79D7013A8DA837D3CABC72D1099560196F5E828833D5F728A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-heap-l1-1-0.dll
Size 19KB
SHA256 47adb171040b53b068e2dc259ebc75562dcec8811d68b7c4b0c16a797d7388ba
MD5 db5013d1a02d899314b9518da6d0b2e0
SHA1 3e1e8df8f2f4a2184a50e11da015635a5558b477
SHA512 eaeae30f1427be40614e1818c67648448c0808ace554ce1ab0441b5525673ad1dde7ab4d124858442fe9590048a3bb241b639375d3f89ef7185bd15d4cf0024f
SSDEEP 384:KlCWEhWEC2Jq0GftpBjHePERHRN7mlgHrIQQb:5hLihePEBjrIP
TLSH
T1E6924BD9CEBCC543EDA79D3063E8E9877D3CA7C61920451605A9F1EE18833D1E728A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-interlocked-l1-1-0.dll
Size 19KB
SHA256 fe8c2607e57e6779b6485ae08e658bd7b98d79147946f262d6b3699de9259d43
MD5 86e369bd8455272049bb60a53624aeee
SHA1 b7ff6dc01ab07ca32cf030697fdaf1162112adcf
SHA512 606fd78d1a39996d623f4ce431401a4c91cf2a401bce6d04371bfe3a2b0e701f04167d9f7c897c9b73813544af0a474948ce3e23e7825b273af590b86907b92d
SSDEEP 384:5lYsFGWEhWILMoq0GftpBjmCERHRN7xSelrltm:SIaijEBxS8l
TLSH
T1A29238C6CABC9043E9A75D7013E8D9837D3CABC61D1055150AAAF5EC28C77D6EB24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-libraryloader-l1-1-0.dll
Size 19KB
SHA256 307ac04192de5a107ee66c9a4bdc16f95cede35ff39f50d811a8d5defe6e044c
MD5 f72de8f45343b9f0135f4d71a3b67fc2
SHA1 67cef9a3bc9891cf41146c25879835ad7b2defbe
SHA512 fdd8900264800117c238757abf62ed5c8883761a1895fcda4bb149534596690871ba3494523df34e4239cb45851a9db85266ff393fddbcb1e1ca3dd049c4475c
SSDEEP 384:avuBL3BWWEhW1Moq0GftpBjztm0ERHRN72tClDUyZ3u:1BL3BMPaiZhEB2OUypu
TLSH
T187924AD5CABC9183ECE74D3052A8E9437C3CA7C71D2099690599E2E82CD33D1EB14E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-localization-l1-2-0.dll
Size 21KB
SHA256 a6d2196e5c8b17851ea134f1ac02481846f78b0075860cb6eb4f90e0243449e6
MD5 a675093b0d146773b5a2010a0adfd021
SHA1 cfb93918c25c4359788680ccc140381fab1e9358
SHA512 56ad8adf41c7ed0f04ffc371dc7d538127ae245fea8783a4b0af5e92940656e0b41a0bcb88ac263b3d2efcf8396cf196993d882ffe0d74c1094b31f47558d27c
SSDEEP 384:nOMw3zdp3bwjGjue9/0jCRrndb9WEhWZC2Jq0GftpBjHBeERHRN7nhlgHrIQx:nOMwBprwjGjue9/0jCRrndblGLiFgEBe
TLSH
T1D8A23BD5CAB8D247F89F9C30326AD9437C3CA7861C20995502E6FBA938D33D5E764A1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-memory-l1-1-0.dll
Size 19KB
SHA256 01eca7b03ce90601768acb131d61875e418197234891fb71a2695aaa2f13857a
MD5 ce7d62974e002ed7736117fce3d25b38
SHA1 4225fbf9f73ffca92c18f04fb650452f80ea0fcf
SHA512 bd151a8d135b540ba573af01e6089e03a6981ef97fb1e6e3465312815787b563d7c205371f0fe06b674e1924b15fedaab239d012615e38b5192bf4d2170dd60b
SSDEEP 384:15WEhWqMoq0GftpBjdtdTTERHRN7Flp/m2O5h1JK:vgaihdPEBxcL+
TLSH
T114925AC4CEBC9443EC939C7063A8DA877C3D9BC32D60845505AAF5E928C33D6EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-namedpipe-l1-1-0.dll
Size 18KB
SHA256 082cff6fd2437f7208af7ebd56b8961bd16761255c6f1214499e93975301b300
MD5 ebceb63468278a061ce4b95d12d723c5
SHA1 9bd01a59d1986883410f09a1fbc76876edf57332
SHA512 f20f9888441caafb4e23d41e00282fbc37593d0492aec86bf7840c9b1136d070202391b809a70854634a738611017ba85f5c354a9983687277f46032fd2cd91d
SSDEEP 384:zWEhWY5q0GftpBjRO4Z+ERHRN76l28ws8h8BuL:rNiPmEBx8r9oL
TLSH
T1E9923A95CA7CC183ED975D7053E8E9477C3CA7C71D20991611AAF5E928C33D1EA24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-processenvironment-l1-1-0.dll
Size 19KB
SHA256 a10d248ecd4a326912a390066bac1314715ee3801332f4a9c64b5cff264883b4
MD5 66012263fdc48ac26001f3814bcabf20
SHA1 2839fca8a2eab6eef2be42d06fe903d24fbd4b7d
SHA512 5e3eab7bc734e7c2936ec061ac7702f1feda6bb772bb89e9a17b06dc722db226f9913ca4103c366be303070a879eaac4a41c8568a678347dfd170b69539f4e48
SSDEEP 384:OLWEhW3y36q0GftpBjnT1IGERHRN75T1c3lDUyZKD+j:URkih1IGEBN1cRUybj
TLSH
T178924AC5CABC9143ED975C7012ACE9937C3CA7D71D20855501A6F6E928D33E1EB28A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-processthreads-l1-1-0.dll
Size 20KB
SHA256 93bfe4c4663c0a2807f5cd3be67a8a21dc93c5b097b934c17aa3cb4c4374173c
MD5 08d5b94e8b88fc6aaaa67969b03640e2
SHA1 6bf348389a0a1ecd2a8e64a67d64433e264e0313
SHA512 58d09fbcc4e7c3ca1cb2ec2f9928629c18c0ac3603419e8ba02faa3adec33cb8285d5199785ff2049461ce04f784035c5c0d651b02f58d93e7e677fa9932b849
SSDEEP 384:bTk1JzNcKSIpWEhWbMoq0GftpBjzevERHRN7SHlrltmq5E:2cKSwZaiYvEBGl8
TLSH
T19EA229D5CABCD183F8979C7062A8E9533D3EDBC61D20452105A6F6E93DE73C2D62892C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-processthreads-l1-1-1.dll
Size 19KB
SHA256 85f410b3c539aaa2ac8b5be976af982a8765fea315671badf542c5a0c71d600d
MD5 94015263f243bf376bf138dfb1cb7b46
SHA1 3938fd323dea0686a83daba2da70060b5def2036
SHA512 20f86cab8de07309cc64aece34ffd334ae74a847afedeb48b93848381c3ff721c18270bf0515171c213b9260936960fbdab4f67c3d3211f27b7bac34808f88f1
SSDEEP 384:GDfIexWEhW7y36q0GftpBj+gCERHRN7uBlkETkDX:RehtkiPCEB9ETY
TLSH
T15C923AD5CABC9483ED975D7023A8ED473C3EEBC61D208525059AF2E929C33D1EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-profile-l1-1-0.dll
Size 18KB
SHA256 8bfe8d485bf8e6bf91833f6cf61e5f054f6edbf5dfb2095967ab3db0759d59a6
MD5 d6f950aede59a00c9ae0affe0b63b6a4
SHA1 abd6bdf43e4f3569474a26a7763327baabf155e0
SHA512 bc37453defe631089159b0f3ae9fe9eaa43465b32aaa88dd31212d0e50da01823395e5875447c9a2e7cc2d2edada1f62c0663b8adf0ba0b72e552715fd787a9d
SSDEEP 384:FuuWEhW85q0GftpBjEAXKBERHRN751olDUyZK:nxiZeEB5AUyI
TLSH
T1438229D5CEBC8083EDE39D7053E8E9837C3CA7D72E20565605A5F5E828833D1AB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 18KB
SHA256 6c14cdc684c2dff9170de29533c521f58c3501eb8cc088de9c9b930eee048c5f
MD5 e2dc3af0989b0f05159851ee4453cebd
SHA1 ec902ec05b855388c9a7c2a336f0de30f817d49b
SHA512 66b7eed319e92b9f87677496e2194388d291a520201c9615c139821981b7615713cf90fbe2479a45610bbaf8dc30a8d5c9ce6eb57a27645f655f4d3eff340fd7
SSDEEP 192:MGVPWEhW04BvEoOleFuDBks/nGfe4pBjSfbWm78RFAII1RHnhWgN7a8WWqnajnrg:MGdWEhW8Moq0GftpBjjERHRN73lrltm/
TLSH
T1238239D5CA7C9083ED935D7063E8D9877D3CABC72D20962614A9F5E928C33D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-string-l1-1-0.dll
Size 18KB
SHA256 a03360d7024a4aa1013cc2cca408c1343666c7dae6bff61501d0e80d44cfb759
MD5 1292ae17b93cc2f8504d025fd1b71a01
SHA1 02fd7c6e25bb418738ea393ef7003f770f8691a1
SHA512 10c0b9d8264918522eef08afa51b9d19e365d0664d7da6c6c64cf37627fa60b5603c5a47a5a4963c44922fe5d4fc3f19a549ae216e8bad9e4da3c671cbe67434
SSDEEP 384:3yMvxWEhWdGy36q0GftpBjBfERHRN7h0lp/m2O55H:3yMvhcki/EBec/
TLSH
T1D99219D5DABC9043ECA3ACB053E8E9877C3C97D7192045651199F1E928C33D5E728A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-synch-l1-1-0.dll
Size 20KB
SHA256 139736ebca31050f4ed7339a6979595755df0acce0cf97097cdfc937de8d32e1
MD5 230070639ef8c8833d67782526d9e8fc
SHA1 2ca8951ab202b8f2bf289d9ea08af74695626baf
SHA512 b8daa7c3365bc8bcf7ff76a3002d69e3c39ce0a0c052353317242ada8bad899ad034a1f079f9d75cf0dfbd6e680c2cf77dd37ce231a39217996a3bf89c6a2e47
SSDEEP 384:Pdv3V0dfpkXc0vVa3WEhWI5q0GftpBjKYCERHRN7JElgHrIQK:Pdv3VqpkXc0vVaX9iwjEBJxrIz
TLSH
T123A23B95CAF8A583F89BDD7053E9D9437C3C5BC70D20892614A5F6A93DD33D0AB2882D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-synch-l1-2-0.dll
Size 19KB
SHA256 e295a8633b5eaad0ab47707059bc5dc5da02dbea01b2d3c4bc8a19e466abddf4
MD5 e38bd734e85d06860085772a7ceac43e
SHA1 4c8c141c63462ff5400c8d961d4f05e4bba0f66f
SHA512 8c2ed8659b5e1f9bc871c8697bcf99ba9291a118586929af3cc599454c4edda88b4ccba2f0d824cb8c62c08c9966cbd5ac78f3a475425fdd4c35ada7cc8d7edf
SSDEEP 384:ctZ3gWEhWtMoq0GftpBjjNmERHRN74lgHrIQry:v/ai+EBdrIky
TLSH
T1A7923AE6CBBC9543FD939C7063E5E8877C3C9BC61A10491609AAF1E929D33D1EA14D2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-sysinfo-l1-1-0.dll
Size 19KB
SHA256 460fa4cb795fab56d0949518d1c1d76d48dd55b3f9a02b3db421e79f98a64619
MD5 f69d3b75d2becfc53a29ce3decf62fe7
SHA1 28ad9523af0b3d569f959803cdc01f1dee87cf53
SHA512 f2653f4006ccee2a2e06227e75a95c0a702a625622311f5879a3b689078bfc623606fd7e4dd051f9987c624e922980c4c3a7c4852ce8cfc98fc11aa7115e4ac0
SSDEEP 384:WgPUZWEhWZMoq0GftpBjp1ZERHRN7lNclgHrIQeaM:WgPUZ3ai71ZEB5rI4M
TLSH
T19C9228E2CEBC9142E8979D3063A8D9877D3C97C32920851905A9F6FD29D33D5EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-timezone-l1-1-0.dll
Size 18KB
SHA256 cfcd287ced91a432b1b0f5f30eb4f9bf6409420b3994fb51c87b0b4ca21535b0
MD5 4dab6a8fe6c24b68fb16a3a6b58c1faf
SHA1 fc0a753b747b8d24a1e2ef0c59a43b855c35fe9b
SHA512 69a9fd4134a3e09b9f22f660d8512fa2894684d6dc692d12435a7c4f73b0edabec7427e86d83519b43a544608850085b83cfebe26ffd0ca687f6cf491a5cf902
SSDEEP 384:IWEhW25q0GftpBj+4hekERHRN7tlp/m2O55f:e7ir4kEB5cD
TLSH
T1929218D6CAB88083ED935C7053B8E9877D3CA7D72D20551A049AF6E928C33D6EB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-core-util-l1-1-0.dll
Size 18KB
SHA256 a6f1d195bbb68a168a07f95c273e89fe5a5eb02bac3ac76dbeb46ccd7b85ed72
MD5 1d9c2a07188ccfaf5e0f550abd56386a
SHA1 5d24d2af2096b078af3a7af67c7977fdf3d72f07
SHA512 7fa9c78527975c6e5cc42170eb02f5d706a6edc6419484fc81cf0548fc129039337b756d5bdae942f3e5b545ed540559df5c37cb287cd24ebeca95e7464ac670
SSDEEP 384:wWEhW8Moq0GftpBjfVeERHRN7MJulDUyZIE:2OaiJVeEBMJQUyv
TLSH
T1159219D6CABC8483EC935C7053E8DE437D3CABC71E2055561599F5E828833D5EB28A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-conio-l1-1-0.dll
Size 19KB
SHA256 4ab9e0da1f2c4994b2f9c9debd4f543c3ab2404d13666816d7c4c74aa1ab2e2b
MD5 be3a982da0d0fd0b06d08ba4bb75e608
SHA1 ece449270ac8ee8283003a5ce3faa48ed63c0435
SHA512 acdf9ad191075d3c392a8144e0a8ab5afd4fcc5f6a647f697b305cfd70cc646663f769c9c19b04d89e3f62ab5b19109e0c79f32ee8ea52ecc0091a7597e97234
SSDEEP 384:ij0WEhWry36q0GftpBjYERHRN7Cvlp/m2O5p1:oi9kimEBCfcp
TLSH
T189924AD28ABC9543E8939E30A3F8DEC77D3D97D72D206565045AF1A828C33D6EB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-convert-l1-1-0.dll
Size 22KB
SHA256 c580b0002cfcfaac2449085b26df4dc13fd92aac7edb580a9133f252534abbe7
MD5 c08072b6f3943d9695fff0be053b7296
SHA1 8f41ca441cc2deb670ffd7ba851956304862f5b5
SHA512 c8cf719ba70919b0dd5c0f8d3010c4c7a2e6c893a3e7f22449c8713e8ab47c65a5784550c58af4604f63806ab33d5e4fd7a518c3034628c1bf0d2c5c6c715cb2
SSDEEP 384:+uyFWEhWly36q0GftpBji0UERHRN75HzlgHrIQX:6XkieEBNErI6
TLSH
T126B20783A6E86F52E99B1B7122FDDAD72D385B82195043B48207E59C38837C1BD67C1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-environment-l1-1-0.dll
Size 19KB
SHA256 3c56a518dac09ff5dc34d99a97129051ddc93a1c907cca8274e8d08aa9f77e3c
MD5 e5e1a3ef0c1cf856dca6f71c239bfcde
SHA1 1d66842144767280f835811644980f72dde28edd
SHA512 d885ed122f58026df16668df16cfde5d5cb81b51b9154305c3298cb4d6b1f5241a91a65c332c8d2cbfb8b5ff4faa25d2b085cd43862ede6397aef8521347b20b
SSDEEP 384:XWEhWYMoq0GftpBju6qERHRN7yIjlp/m2O5jA:3WaisbEByKc2
TLSH
T10A923AD58ABC9443ED939D7052F8ED877D3CABC65D10852A056AF5E828C33D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-filesystem-l1-1-0.dll
Size 20KB
SHA256 e861fbd1dd21bd09bede9ef4ced4fe32c1dd5e72f9d788cd41b7314290a638c5
MD5 4265854cf7082a0effaca9913ba1b584
SHA1 68ae4cd0f36c3b45da8810c7fe802feefc528396
SHA512 64c233c4922e6bb7982d4866fa20f7542c330b4b3a565720bf3dad97829cf85997f05b9c13656fdb52b93cf889e6450b02efe5a62ce3737f3d30e047313cb19c
SSDEEP 384:Oq6nWm5CdWEhWcMoq0GftpBjHMERHRN7tlp/m2O5tkjg:v6nWm5CFGaiNMEB5cLUg
TLSH
T14EA21A978AE8A943DDA31F7162FCDB8B3F3C9BC2195146254057E1A839C33C1BF25929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-heap-l1-1-0.dll
Size 19KB
SHA256 67a11355b9edc7cf9dd2e1e73ffbe00e00156926af8c93bcc1e254702b9ffa24
MD5 b811b6df1b996ecb5bc65ccb5275e3ce
SHA1 add783af63ed7453abcc0e7789bb424d1f3d5aee
SHA512 b3eb1cee930333fb257c05ef273bf963adf7ace6b3ee172b65db493eafc60e382be3d3330317cadc03e9af1a03d1ae1b68e1a8ee2e88c70d33241e44ddb5b6de
SSDEEP 384:MlWEhW45q0GftpBjEWBERHRN7zWNlp/m2O59Po:MdJi7BEBaZcjA
TLSH
T1CF924CD6CABC9483ED935D7063F8EE8B7D3DA7D66D104526005BF1E828833D1AB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-locale-l1-1-0.dll
Size 19KB
SHA256 54ad6fb80f28a8cd4424424f413c8f22a1cd6a617eb759aba2f7c2e90cbdc4f8
MD5 776384baba12ee60dd9caa8fc65ac017
SHA1 648aa40d1237fe6e9c19a14d543ba9cf3e9105a4
SHA512 96fecb891ee0d951eea77a1f7f587f8bd4bf1ec152340ac005e65ca42db33cca988b32477dfb7f8f2c0852ade748f42be5017182c7a7a02b2633aee6631bb147
SSDEEP 384:TWEhWXMoq0GftpBjxLAYERHRN7lIFAlrltm5:LtaiAYEBual+
TLSH
T111923AC6CABC9443E8935D7056B8EA877D3DABC31D20495A149BF5E828C33D9AB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-math-l1-1-0.dll
Size 29KB
SHA256 101427a9f932d4160b3c9be04065d495576ab40a8109d9117a4d33f8b542a30d
MD5 c45a47b83a34843225ecd6dda2114af4
SHA1 3c89bfd1fc20c1dd68fc2aa3eef98b97007d73fe
SHA512 173817ab46a55576ea4e3b540e61d69200335389a9f3366f17b36e6d0ae9963f4b0fef8e62e7dd0776ef3d23f3284b3b5ef9e505d2b67b77f41ae39451b51583
SSDEEP 384:t47isbM4Oe5grykfIgTmLKWEhWd5q0GftpBj81MdERHRN7ZtlgHrIQu:C1Mq5grxfInooidEBErID
TLSH
T1EAD2C68789ECBF63E4CB0B7312F4CBCA6A385BA155E065B5C897A1D834927C43E57908
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-multibyte-l1-1-0.dll
Size 26KB
SHA256 f42cfc5cf9682e31404f262d9954f7e4ba6de35a510ea7d7683097663840cb45
MD5 94d26026d6b10f2cea7b6125813471ba
SHA1 c4463518bbdf7d9019c822cf365455c562661632
SHA512 2de164f89b22c539e2927c266bd2e8c21a0af2dfff338d8dda26e3108318338a296061a72c528d96e75c893867e65144174921bbf4464be32a6ff11cf29fac1c
SSDEEP 384:py+Kr6aLPmIHJI6/CpG3t2G3t4odXLZWEhWTMoq0GftpBjmoqERHRN7Xlrltm4:pZKrZPmIHJI6rtaigEBplz
TLSH
T145C2B46B8EB82A12D58FC7F3B5F6C7C63A384F8115C07375A16795883842BE9BD52D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-private-l1-1-0.dll
Size 72KB
SHA256 705e20df0cf4de0299072b7294ed57302b26ecb76d409ed7ecf2f2fea3d59947
MD5 d7d5dc0cc105ea8cf525862b4567637f
SHA1 fb651705e958a9f2a436013e567624f18eba85f5
SHA512 515472b9604ce7f05ce70f9b3c2b0b84930de956534fb8360cd6d107577adee47e8e85d99bbe4cc143f1a8ce6605f4261f4c85fd445b7e89de3f28c28d42a41a
SSDEEP 1536:ct2b2De5c4bFX2Jy2cvxXWpD9d3334BkZnkPCwaKEBudw:cw2De5c4bFX2Jy2cvxXWpD9d3334BkZ5
TLSH
T1397329DB89E53F22E58FF7B367FB57C91B243A4418806170E9C795AB34853A9BC53A00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-process-l1-1-0.dll
Size 19KB
SHA256 5ab5fc3ba961a43d6d100933178121a7d8486b936f5ebc5e276e739f2e1da5b9
MD5 0b21712051d25cc0666f5e6d41b64bb8
SHA1 1d37f8f1facaf3205582608a9de3c3d212ecde0a
SHA512 3605f4902e08c901056071af76e09abf6e95572d69b6b0790f36be1dde7b79c3171df7fec229d51cd508abb0768200c195feb8f424e524c981242b43d80fca11
SSDEEP 384:jK0WEhW7y36q0GftpBjbrVeCERHRN7HG1lp/m2O5Amc:3BkizlEBHucJc
TLSH
T1BE924ADBCBBC9943E9A39D3042F8DA877E3ED7C32C109525445BF0D928833D5AB24928
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-runtime-l1-1-0.dll
Size 23KB
SHA256 d92e0f00c59425e74ed419c158414e2c1e34047d10072dcb9215a5c91b4050e0
MD5 fb2dc78b138f3fe4b7e5b3a3cf9760e4
SHA1 e9a82189ba821544bd63f5af6d78e757dce9a8cb
SHA512 1c0760a0dc6772b090fac8990d3a218f7c1c85d006e901896fcf09d2df34f6220e8101866ae627c9446d2169913b948d4724ff07af4b75cc3513a5dfaf9c9bd0
SSDEEP 384:3b7hrKwWEhWVy36q0GftpBjVERHRN70lCADZgJ1hd:3bNrK27kiXEBtADZgDL
TLSH
T1FEB229838AFC6E53E9876F7222F8DBC72E3997861A1095358457F0E934C33C1BE1A519
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-stdio-l1-1-0.dll
Size 24KB
SHA256 4ba617cadc3806532eecd00957b2329ea8472224891228b99da3aacb002b75e9
MD5 125c4539da3d6aee3a2942bced7f06a3
SHA1 7dcb0f9091831e017af66a7a21cc80e71ad8b804
SHA512 bd506a780ea711117b159ccfd167c995861964553f9091fbe386062d1b9bb75d79db8001601130973c57ed26de9bf2b666f61f0e4a247086ec8942e03beb5ff6
SSDEEP 384:HUFVhLWEhWMMoq0GftpBjeCJERHRN7dqlDUyZSIi:0l2ai1JEB+UyE
TLSH
T192B2188789EC6E42D6878B3366F9FBDB6A388783281075798007F4D835C63D9BE17418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-string-l1-1-0.dll
Size 24KB
SHA256 c6aff750c97c94a594f6cfd6db2998c45e3c0cd9b4f779df1e8e72dc7b606534
MD5 290a004945b199b2aed82959b1623626
SHA1 f19020da6f6b99045b912e45cce1c0e00bdb6efd
SHA512 cce8c4f606508aa90e279472107816337355bff09459db5175b8ae875dcdef26be09a82d498c09c97abdd119a72c1b3d39a1a40d97b6cb94c746217f0d72e1c6
SSDEEP 768:W6S5yguNvZ5VQgx3SbwA71IkFUhaiwEBiwtQ:Wl5yguNvZ5VQgx3SbwA71ILhavEBiwW
TLSH
T19BB2D78786F87F42C98B4BB256F9CBC72D384F46190013359067E5DC38827E2BE6A909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-time-l1-1-0.dll
Size 21KB
SHA256 5baa7efce0f3739812913e1a24d1cd326cd1fb53058719b415c835ecd2840e8a
MD5 dfd30f7dd0c43184de48d97d16cd5b41
SHA1 4462932615fb930deeb610f1354ee505845c7f82
SHA512 54c2101c6b404a5e77534bcb7ca07ba56af3ad7404b262339081e958df1b928eaa76a3542d17331639ed0fb2ca2b92ca714ec543a53c728be0e5130cd064d179
SSDEEP 384:0bWEhWq8y36q0GftpBjcJhERHRN7vD49lgHrIQa:gN7kiMEBvDrrIH
TLSH
T10FA21A838AA8AA47EDD34F7012FCDBDB7F3857C2199065664156E4E836833D4BE2281C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\api-ms-win-crt-utility-l1-1-0.dll
Size 19KB
SHA256 d793426ab222bdfc51f136f07663cdf34b31847ee32241e6f3589b3fc1886c22
MD5 156fb885f50d94624ca16289f21c1d66
SHA1 401e0ed9537cb1982dfbce4d869c664c22df5839
SHA512 8b03a50a7192bc35342f1c0e4c1931be8a60b29735d1dd5debe6f37b443cfa9adad5846ca5e2787e19d52cafe8a1f4f872f6858418bc00ad2612436d6f9c49e0
SSDEEP 384:IfhWEhWnMoq0GftpBjbaERHRN7egQ7lp/m2O5/q+:Ifx5aiUEBjQTcw+
TLSH
T10A924BD68EBCA543ED935D7093F8D9873D3C9BC72D208665045AF5E828833D1EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_2.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\msvcp140_2.dll
Size 162KB
SHA256 8aa3ddacd2b2cf998e5b641dda4bfed07f689849521a6794e0db4f9354d3edb5
MD5 3a28743d8c814cf347398ea2544a298f
SHA1 2530dd3f6ce41942e592f926dd30a08d8de3ad81
SHA512 238ed143f46c272377df78e7a1e33a7239bef7013ecab37e3ce93fd24c640ec62648bbd7ff01be05c147aa9576a0baa4e5a0ab978f151ecafb1c33f4eec308bb
SSDEEP 3072:8ZQg1ocb42/lCmyPieky8DbRhn0WoGgvQHwRvf567d3WoeiBGnO1O8O:8Zac8myP/u0h9f56JmpiAO08O
TLSH
T1FDF36CC3A92880A6D09F097FB4105B2F642DFD921BBE46DF2795410BDE38ED38DB2945
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_atomic_wait.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e59e342\library\Win_msvc2015\x86\System\msvcp140_atomic_wait.dll
Size 50KB
SHA256 bb2981af3a123a95822a55c0bd3c470ba6ed6c0151ffad09717583fc6abfcba0
MD5 792b0131510130442bb66c3a7d12ae90
SHA1 62ddb095d7e07020a69ed5ed704778a92b0be976
SHA512 38de9c71d9e95aa1b2ee31972c8a273afefd2f124de0ce3e6f247b123077db4a374aa32ca9f8b786fea4910119c71f1831af5f4c0273ea93b5e860afdce7e0e3
SSDEEP 384:Aj1lTFwTSloNYcSNXR5cHDIABta/FWFvug0yiT3UN9imfI/NVW0jdTq0Fzenw3GL:mLVT9kNWNLTJwwWDpQJYp0cM8Atu
TLSH
T122334A91EF2441BBDDEE12301526EE2BD97D6AD01FE05AFB1F136B480D927D1A93011A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh11C1.tmp\System.dll
Size 11KB
SHA256 b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655
MD5 b9f430f71c7144d8ff4ab94be2785aa6
SHA1 c5c1e153caff7ad1d221a9acc8bbb831f05ccb05
SHA512 c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099
SSDEEP 192:hClej3uzvJwqJMQKN4GbeWZksMI4ETWcEbcBZ8ep2Kra7yOG:hCm2HgN4GbeWmbI4Eybogia7yO
TLSH
T1BA324B259BA091F2E4A4827809A63D332B7A650452B50D5BDFF74885FC196D2BE3D323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AccessControl.dll

Path C:\Users\Admin\AppData\Local\Temp\nstAFCA.tmp\AccessControl.dll
Size 13KB
SHA256 933cadcd3a463484bbb3c45077afda0edbb539dfbe988efad79a88cae63bf95f
MD5 28c87a09fdb49060aa4ab558a2832109
SHA1 9213a24964cd479eac91d01ad54190f9c11d0c75
SHA512 413b3afe5a3b139a199f2a6954edc055eee3b312c3dffd568cfdbe1f740f07a7c27fbf7b2a0b6e3c3dd6ee358ce96cc1ca821883f055bf63ddebda854384700d
SSDEEP 192:V26NwF1FF1bl9UsZBpDOjH3RGz47gnrVsybWZeAW4MwNR5yRR4XLLF/NTNIXoslk:T+1bYsZBwWsySZeIBZdP40l
TLSH
T19D52D8260EAD03FBE1A216392791663397D6D20570C1570E9FC18ED72813BEBADBD217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nstAFCA.tmp\System.dll
Size 11KB
SHA256 ac9dfe3b35ea4b8932536ed7406c29a432976b685cc5322f94ef93df920fede7
MD5 0063d48afe5a0cdc02833145667b6641
SHA1 e7eb614805d183ecb1127c62decb1a6be1b4f7a8
SHA512 71cbbcaeb345e09306e368717ea0503fe8df485be2e95200febc61bcd8ba74fb4211cd263c232f148c0123f6c6f2e3fd4ea20bdecc4070f5208c35c6920240f0
SSDEEP 192:qPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4U:F7VpNo8gmOyRsVc4
TLSH
T1CB326D5503504AF3E996863C00263BBFAF796A2095F14D53CFA394C0FE2E5C9AD78352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v6svc_oem.dll

Path C:\Users\Admin\AppData\Local\Temp\nstAFCA.tmp\v6svc_oem.dll
Size 192KB
SHA256 d3378ee739debcaee8c715963403d96bf025db98bfbb55e54635429890db85c6
MD5 500318167948bdd3ad42a40721e1a72b
SHA1 24134691693e6d78d6eb0a0c64833c12a0090968
SHA512 0a2d3b55528cc53cfce5b47158997300c562afd2c7bb5596532b218d3f482380887ee7c204b13d42425dc0c4cc439a7f9ed167f3767bda7b6e205e7e8f454863
SSDEEP 1536:AanBx8ONbQ/mpe7GRkOp1qRGkmGWBhYGfxSELX/RdsbTh+u9S4A5S4n8GQMKWNwU:XbDG/GXbcRGkmGUNxBHC+VzS4n8NbULJ
TLSH
T14514AE1234548072E2970A3C84E6D2231E7E7972A7B9D48BFFD591E62EE47E1EB14307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\LICENSES.chromium.html
Size 14.6MB
SHA256 0af5dd50b3675106fbcb6727fb757a58d57fd77b7bbc671e3bb0b1c87cbbd9ba
MD5 a81c330a7f966de7fbd81e844ce9e66c
SHA1 deeb083e1d9b5c01995a9b8be4dcfa244bc17b91
SHA512 7409a1c638f2d00487a6ff52c9769da8ba2f2ffd94551c9dac454459802e113f516c2b8af1fbe118d339f21aec7915a41468de12d75d92ed6d8b29c637589441
SSDEEP 24576:f8Bd/jZ6JocjZ6X1jZ6QCjK6D0HwRiuTumfvKjr6ZjK6yjr6mjK6ajK6XjK6QjRv:f8Kfe8rn8mVRx2
TLSH
T139F6A42F7B48037306C642A2AB8B65CBF31E903F3B561654345CD1681F6BA2583FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm-browser-data.win32-x64-msvc.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\QMLib\qm-browser-data.win32-x64-msvc.node
Size 1.4MB
SHA256 8503d1d2731ea2116d1c0541105c72f6acef572355f18a40a67cd043ee4d70c6
MD5 ff3b52a5e920bfcfaaee6c78a6c801ad
SHA1 0132723bdd022944252b9a355b44b2647ed1fb2d
SHA512 9484adfe03d77d860a72e315b599c3108bbad91cc0f7a3b282e32b6a5188fe3cec9e7944a3f4381bea15976d8610b195d05930b95e5e48b17b888c8e78439760
SSDEEP 24576:mKc8YgbzMqzFfrVZo0gu5D1qPeuJ+e6xS/kVbQpKPvLFnIfy5g17kF7T:mMzFjzosWeuwnw/zaIfy61y
TLSH
T16565AF17F2A800A9D0BFD2B5CB175717EBB1B8461630A79F12E44B652F23F62272E315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm-launcher-ipc.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\QMLib\qm-launcher-ipc.node
Size 106KB
SHA256 e276990ff56089fdf5828c6d57fe981cbb31424157235d490b14584537da18f0
MD5 e472fd95ea110eadf72f15cce80fbb04
SHA1 3327e01a74b0f12ab77e3a2ab7016ee376981bb4
SHA512 ed87a369ff0cf7cb99f6c519f5ab661de94fe2549c736b70c26cfa6ca668438f9f13282eb2c0e934e69678943887f2c3eb5456c16c1496b7ea52454b1b1c9ea2
SSDEEP 3072:DEAw0HLXx1on8pscTL7ZRy+z7cZuKCGSS6F:DEAD+fcTLny+z7cZuYSDF
TLSH
T109B34A66A2DD10B8E1BBD27CD6A38A06D7B6B419077157CF0310861E0F73BD1AE39762
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qmcommon-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\QMLib\qmcommon-addon.node
Size 751KB
SHA256 bee894a78b4ca6ea155e131099699a313da6adaee8d4866b28f81d2a987a20d5
MD5 e570da789fddbdae27e0af736fdf0d86
SHA1 949e1b590eb47fbd3354cf2c2978fb3b1a5a6caf
SHA512 e094b8a902f57195d609d9d7b4ac9c583e734b0b8b360dddfc9577d7f27ac0a950d24d63e6bf17af410caf335708203b22915f38680f96a8984dfae86d00028a
SSDEEP 6144:f4eR6D9KuLXIACS9Wfq8ubfmFXrCak+7Hr27dY0/RRtNMPEM0iixJRG1NChWGyta:f4Lg0RHbaH7HC60pRt20iisrCIMwwa
TLSH
T181F40816ABF90168F1BBC77DAAB7C902EAB27C054775E9CF025045190E73BD18E39B21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qt-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\QMLib\qt-addon.node
Size 220KB
SHA256 6a7229687eab79b727346e727fabb9702bbb9dbc4b89e374c0b7e72b7b3df043
MD5 f969737040dcc3c3f82a9698b9bb02bd
SHA1 c8377700a4c70d010e010bd9ec4a4cb7100abce2
SHA512 068426af79be964292c073b3fbcf0fcad2b2767e160df21d76bc95c61026c87d97eb2f123015d6fcc39a3c720b740d29ed64415b839899b28936043f777ebbf8
SSDEEP 6144:kHZuY3D4A6CeO8/obWne56Arn5E2UL8wSOM:suY3D4q4oum
TLSH
T1FC24396B77AA02BDE5F7C239EB67C912E27274094324D9EF035146261E63BD1ED38312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\chrome_100_percent.pak
Size 163KB
SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
MD5 7bd1757ba953d8b304da1d6fb4fd7573
SHA1 4d5744d0ba3444405eeb7f43e74653f2ed3fd799
SHA512 12d7124511067f2cec4fc9f3a9022971867c540d9f01f6cc0b5dde834f106c065faf860bf7a421a836fceae9616221dfe97e8b1181f636576509cfb63f5bab5c
SSDEEP 3072:e4PisCv+/P9NebGz8LI1TwuLjQBHUP1L2o418Gb0+VRLf0ld0GY3cQ3ERVh2I:jYWFUbGz8LI1TnjQB05K18Gb0OV8ld0Q
TLSH
T120F3E1D7B7F0ED7DCA5B4AB797560071ECB30B2D0792124A5A8ED475252AB88D8C83C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\chrome_200_percent.pak
Size 252KB
SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
MD5 6a460ee2c4e796e53f9be9b050cca017
SHA1 52fb1eba7629f2896c6432969010f34f1903f8c2
SHA512 23ae8fdf5618582bd51b3690526efd135228f97649c6755e2d024b8048e214e4069f355fe4e7f09f82be45accccabf06dd6c065aecc6ed354de996f88a48ce03
SSDEEP 6144:rGQ+N6uSZQDQYakvyAkcjQB0ugx5GMRejnbdZnVE6Yoppx4:rQN6uS/fkvyAkcjK0a6edhVELoXx4
TLSH
T1FB44F1D773B8ED3DD9670AB3A21600F0FDB611290AB2525A569FDC393955EC888CD383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 a9930f12c33f1dae6e533303b27b1660aec5ab89a35cce34edfe567a2030ed4a
MD5 a2950153e313e913a8af78101bb58960
SHA1 ca966227a0c3bd302f5f54f186cc596f409f074d
SHA512 8dd676b860bef6f25d212acfb2496907d34ed1961eb0034c74e102109711175173561c5cb8a0aa2432ee9dba11bfb9612934c8ee7df57ea982dbf101dc3ad0dc
SSDEEP 49152:UCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRNq:zG2QCwmHjnog/pzHAo/AyD
TLSH
T16A367C5673E640B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\ffmpeg.dll
Size 2.9MB
SHA256 d25f766fdbe8f0e6d52a148d5ba88b4bc6db15286756a4093ade7a7fa117674f
MD5 33af3ad775a86e8d6b6a558fe24a01ad
SHA1 0a87c046c7a29c8be7f45b45ef935ff013c4f191
SHA512 77ada049278f06c90f031f17bd1b6e66b9c5faa692cdc72e196dbbbe2f2515adcf781f3636fa4f137580649502ec929b8d134e9c97a2a7365ff13c0573a1bc5b
SSDEEP 49152:Otnny1mPCxHF0JdPpn3Ukga12wLsbTTB0Hu1Gsys2S/5r6aBmuFKtWifHJPsN21c:Enz7dREkcQu1Gsys2S/5r6aBmuFKtWiI
TLSH
T144E5AD07F6D6109DD029C070979F9213F631344A4B205AEF26D08A253FABFD86E7E769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
MD5 4171402e385f07007de57f45ff540e9a
SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
TLSH
T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\libEGL.dll
Size 501KB
SHA256 b7aacf365dd6c62c454129356a101bb004406015fe551cce3ae8da9e4c5279cd
MD5 15ebfcc9b8423567317baa129e5fef88
SHA1 db181c2d77b25f441fc5e8f5370c0c38a4f7c641
SHA512 6c4a7245a3d8b37c9dee7e409a1f2ca427a894a7da8bcad3c30a9b314fe91fa41f4c058e6e9b004b623334f6c12ac691c70251afb0e7cf871551ca6ab1b99d27
SSDEEP 6144:Gpfoi6uFCajlPxXJTA7ilHxgg3YJeGcHJIA/Ieufc5LHyEpq:G9oYFC0X8iIg3YJeGcHJNIeufAO
TLSH
T1EEB49E15B3E945A9E06AC5348B438642DB7678460B65FBEF03E093792F37BE45B39320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\libGLESv2.dll
Size 7.7MB
SHA256 e415699b9f7ae7459a164ce9667f0bb78426df9be2a04378ee04deb83c3a565a
MD5 59a0cc1f0b5036011c86780691a705f1
SHA1 b9567be16cac7fdebbe66ea56f47eaab2eaf1497
SHA512 eb66ad3fbb0b45bec5b5346d81ed180fc8d6a864249907bd70833818e7cdee3919b3d1d29d8a6b8095ba70c32f35992af21da48824b20ebf9144d65e03c850cf
SSDEEP 98304:EiycUZFhamDIFSjsqjxFzohv/j5fFX+jPj:t/UVFxF8njJJSP
TLSH
T1E4867B03F29680D9D04DE2B4C75B9227FA34B8850734B6CF269457152F67FE0AB7AB24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\locales\en-US.pak
Size 503KB
SHA256 b9a2cccc13d7dac53210e37248dd70df32dbec43bd33d2c663c6290155fb751e
MD5 b9250d18cab3a4a1c738223a88a5643d
SHA1 146e75cf40b17d5a071342f13cedc7a7bd4d6aba
SHA512 b8ccde22534ed07c0330443aad2a4194e22ef26b70d908cbb2cda010f91ab2bbba25650cc1fa676060958f914be5ba19554ad4f985f74912e720876e8034d35e
SSDEEP 6144:qeSLg/aRhPAq0uWm9KYMP9e+QRt3faY7szalYA5ehj1JngH8/WAwf:5SLg/E2rxYMvQRt4w5Aj5wf
TLSH
T1D5B44C1FF7441269069352627F0995B2FF32D06CA39112563CBD812C33B7B6A83B76E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\locales\zh-CN.pak
Size 508KB
SHA256 13eee461d50e948a9ecd87d5936f0bd7729c41d199005384bcdad5005228dda9
MD5 7ea31f73e7dd65096c12e56250920ede
SHA1 b881add02725bef1592f4ca43e34e23a75f9d1c4
SHA512 21d7e09d2d99f098644d3b8a6bb0d702fa33cb9e3e964d8f162c9dd42d978dd47c5d170658806341324aa40be0e47aafc6d9775ce15bf668a61883f067564740
SSDEEP 6144:LErIcoBuK1Kpe7fSSyInZ76rxEEByVv59pacgI3CYG243KCv19Dlk:I8KpuSS1nwrxEEBev5z9jSY03xi
TLSH
T123B48DA911F9BDEC048650E03729613D7C40720BF66BAF366ED248DD2AA2F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\locales\zh-TW.pak
Size 503KB
SHA256 f9a52c98596818103180ae292c95fe0c7359d3065ae17ffd9a343e748d80595f
MD5 bfb8f220b006ec3b460033347d6b0807
SHA1 611698644720a930a714665bac63c74a3c1dfe8a
SHA512 c7e0d5a5b99e46949b7688f3e71ae0223fe757faf12c8370f95aabb774bb9718a8676d39f7f6f02328ffb23be8929d1950062c5063d3b298bd69e2bdcfefa996
SSDEEP 6144:SWqRvZdu4UcIRwyuo/VJRxr622Qu/jh7J5hnfVH6D/j6h62u9mnTX:yBdumkUoNxODjh7J5xfVHdN3
TLSH
T18DB46CBA08FBDBEF0901F884B7CD563ABC9B342CDD777636FC8518D42E66A580A61045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources.pak
Size 5.8MB
SHA256 6a2f2e63022779cdea1c3608a3eefad5aa20a3215ff5784cc9d86a95a8e04f0b
MD5 9dc983a9645389de62ac722c74bee510
SHA1 212ac44e48a7faa0fcc66479cb2e85aca4471d9f
SHA512 a3e2a9a79d07bf28b6c0ac93fa46bab85a5f77d34b41cd17f0643345b980a35b9804bf714549356399047efa2f637331f97fe05fc4474e60a39c32ce2a1f653f
SSDEEP 98304:FoTedLps9YPOX7P8+AROlaL/S3H9MnsRrwrC/ICGaZZJjoMzL9+CfLRneSmD0Pk:UeNps9YWX7E0l7tMsRkrCAGoMFnxCGk
TLSH
T1D45633C177E60D2FEA0493BD81A98271CF2D4829311A7046618CB169FC36B6FAFD157B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app-update.yml
Size 96B
SHA256 3c2035914ce457fd82c56bf9373d4a16fef878567d83757bf36ad428921de2ef
MD5 92b62f19701c946821c561caa8bee4d7
SHA1 3d6e94f60938230b4d5c9429982b727505fd2c8a
SHA512 7dc0ad3057bf38e772b05bba3f19700d2653fc671c0a789cd23f59f7cfdcf582d4db6d6578c7d07fbb1cc974f5832faf7c4310c95ae2b410f81ea623f59f03e8
TLSH
T19DB012660300C03243330A7938091535A0C4410580D34960D1DB104C8507D321E5A1CC
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar
Size 18.9MB
SHA256 7b0939ba798c8e120a9e8fb2483381244598bbb053e64daae451808cd807e686
MD5 8529ab9360b7fd8fc162254e1eaf5b2d
SHA1 f585eb5c8bbc88e1c04eedcded5ead3e4ea02529
SHA512 8040c8f5ae426a235905178c568fce9e2fac8bcbacc28177b7728b4e1f0141a3fa9fea0a93b3244524b979b539321b69751cd17d3416c2db98e87241a5e2ee41
SSDEEP 98304:9z+5Uni6VM/OxYJzci2/kIGN/ymFxP1/Z:9z+5Uni6VM/OxYJoj8dNZ3dR
TLSH
T17317F60D6AE61026D573323E8F9F4405FA35941B154AC508796CE2D9AFB4E3822F9FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\LICENSE
Size 1KB
SHA256 b90cc9a77052f1bfe290b4f24871396cc3a206981a36494a9a2d100fe7a377a9
MD5 ca06efca9569f6f9f67dcaccc0cc0176
SHA1 836be8e4adc7d7b5864f95a49636f953c2b067fd
SHA512 2b710ead41ff2002db40b255fba4f9c01088c7a4d716e400bee115677e9f591801b7be9d418a19deb5c0fb7d500ae6206c771d38c236e10541d4aa4156c1bcea
TLSH
T1ED11B61E72554373189257A01578ECC5F12BB14A7F6B1584302DF2051326418C9FFC64
MD5 SHA1 SHA512 TLSH

Submit Download

addon.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\build\Release\addon.node
Size 127KB
SHA256 3842c74feabaa455521fb10d3cc7dc512613b7a94049181af82a00af75b22d27
MD5 0d0abccad0ef32652c4825c16a03ca05
SHA1 966e38ceb3c2d0dd52e74013fc486f1ff1aba9c6
SHA512 c7fbfbede6f524da8d238455d4f1126219dfc8a6aca6dddba57a8ce0af63cb347ba6f0b405ed8b497674de076d993da1d875ab9be9ea471e66245a42ec3c3bc5
SSDEEP 3072:kVSdB5+mbIhGcMMIdNo+m/CVMiAtfMhWATv:kgBoLvMMIDJeCWA
TLSH
T1F3D35B5BA2E100AFE4368238C5675E01D7B6B45107A09BEF03A4425E5F637E19E3EF72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\dist\index.js
Size 373B
SHA256 1bccb6cecf95bffd7e840d725b017f42c812e82a5d4e82e64199a28843a0431b
MD5 bbfd0859bb75e5d972a0b0b15931d194
SHA1 1fe49321150d99285032b0f1ef4f6cd0d39d110d
SHA512 cc0e90ea84ca7e76fbd25dd56beb91bb3701a3e853c90bc53bd1c625bc8c038cdec4cd5b861ded042e9e17fd7dfc4f345ce0dab73918c62fe9d655d22ea69ae7
TLSH
T113E068C04BF1746253B05FD9C2420812F172E422ADC5C948BD2800D553A281040B5FF1
MD5 SHA1 SHA512 TLSH

Submit Download

index.js.map

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\dist\index.js.map
Size 425B
SHA256 4499b482275878db9030345480be711b397dd6093174e9854dce7a15fa056b94
MD5 3bd940d11838700205e930a593a47b78
SHA1 9cf598ec04a92991caabd3229214f8113736726f
SHA512 83de158e9f530d8df0767adf1484f6f70b3545d1aca0f750237895723be8e5c877e5b065300b430b173fef6dd2ac9b09ec8270f512096d24dd3ce2710ab93144
TLSH
T1CEE06D41807ADE2B786342CB488B09A76E49844EBC4CA9080848E600F2D2F3E7CE5822
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\package.json
Size 588B
SHA256 ec6c01da0373e9186331c4e50d514048154c6265751e2d55a5a9dd96cccc00eb
MD5 9d8398e6be5aa5ff9b2f31a871e3e820
SHA1 a6596b00870d559048d663ddbc0e3693310db1bd
SHA512 2b6b561d929354c961e5ac5948bf1651a0197125f1d46904d0cf815159ccade0ae99fb161c3c395e47fe526621e0bee65da01125ff0274181475d645a1d91691
TLSH
T185F0FC21D5D59D630BC918E4DCA50105B5630C5B8CAC7C4C37E3046C8B9E5EB24FC27C
MD5 SHA1 SHA512 TLSH

Submit Download

CONTRIBUTORS.md

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\CONTRIBUTORS.md
Size 7KB
SHA256 d569b84d0def333384c8505e785eaf7cb23ac38ff65a2bfebc79eb666460798c
MD5 8672d316790a4c5e557d44ad9b354a29
SHA1 ebaacf2b76130a97d4712be73928843645121261
SHA512 6481f8628489d18a1d50b997978d5f772325e41c37154e488eaa81d053a1c9db7e6d04de387a3024f0edda55de30a6149542e671d9e3e388c2ca2c1340da94ea
SSDEEP 48:jA/kCdlB16dds59r8Tc0Iw0Spg2L/L+j3Xk5bQh:lCdlB16ddcAI0BpV/A3Xnh
TLSH
T113E19EE75E0409D81F72D9C6549579DCFE32240D89AB9C8DF76E0027972AEB38B7E110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\LICENSE.md
Size 1KB
SHA256 4405f7d50c41c7811516d65e9925a6bafb17feded5da663da8c74aedd0df99f1
MD5 e1a9cad2ec6a1a98b7649e2c16abaa04
SHA1 c485d40000721ecfb5d80607d7fb781df3509937
SHA512 20bf0b59825ae81c5c30ad9bfa65b3e641868c14e9f2e824678f33fdbce77dd6e478c8f76c799f5833530f3ce025f7e3bda1c67eac98146b43a3c14f22b5f177
TLSH
T16D21B92E73550B661C9A17A055786CC5B13FB1AFBD5F2945106DF301232A06CC1FF848
MD5 SHA1 SHA512 TLSH

Submit Download

UPGRADING.md

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\UPGRADING.md
Size 4KB
SHA256 3f9b672b079ee4134b86c6f488a97a058703fd6b16be50d03d5eb0b989839f88
MD5 15d9095759b8f0e4247a393c97b6bc99
SHA1 8f043d40480725d23b9d08509f70e4d3cda54b59
SHA512 ebcbadb4caea19ef52803d2755a271b96ea4a7b90ec06ba38eedf9532848b6239c12bc2ffac9722bb91e1d0f7c68efb0490ad38b6eea670dfc47c233361bdad2
SSDEEP 48:CUNGlL9pQ/qoZiR6nryMcodnNgjp3QPpfckHAOJdzFTyAjf3JFlNM2GgvCUtvb+L:CJL/0qF6nrW7VA9gOJpjfPl6hpkvCTrz
TLSH
T1C991C626B342A3744CD760A0E20E6191DF36C0B4933579E53D9EDA5D32554BCE33F998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

binding.js

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\binding.js
Size 54B
SHA256 4e02fde8f9c61fef6fc42d64744b150de29a578dd7b6343d9dc2654c68d61843
MD5 5592afbf198fe53d9640fceae506ad91
SHA1 f6dc07d408612af023f29d9a89e4d4316cc313a0
SHA512 3cae4007e91816ae95323c907800e4fa5dc5dbf25bfc43abd4e84b3dc1c45daf5d5610c3bf8c24cae4001ca1042f984dc787e99daf6c5f89725a28913f43968a
TLSH
T19390027A1991BE522249C143F174466654E1C5A10480401AC15547D652459445952995
MD5 SHA1 SHA512 TLSH

Submit Download

chained-batch.js

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\chained-batch.js
Size 744B
SHA256 bdb748eb6a3de1af71e6d8534a73b0b6a83347fafe27cf67b1bf1a286454ff3c
MD5 0a377b47ae3012bd8c199ed14b7f5c17
SHA1 1d4b60715adb0e09c744c0673613a78d4aaa6049
SHA512 2bff88471de9e5385d06cb74d19358dc27795834474e5491b4635c81030e225fceeafff26f0460d43d4d49740d59b5680b5d3aeffaa324168fe356695a4395c7
TLSH
T1E1012B3635F1985096B238C8869E00081A1FC03EEF09C1FD3D5CE3C4C0ED47825A9568
MD5 SHA1 SHA512 TLSH

Submit Download

iterator.js

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\iterator.js
Size 1KB
SHA256 bf82741551785a61b16cf0d912a30fd1d5db66a723048add6ef8cf0c86465658
MD5 3e91159adc129570f897d1f78cea22ad
SHA1 2cb9f0a94f47bd29c8e067732722bb9d479ed766
SHA512 0e270d622fdee09ca8778c9a253be4f0565a369136725158d52ff012a1872e15fdeb1432c1238dd4722ee0c0db9bd17690f88916f3d47f13637fa8c7532e2bab
TLSH
T19021D57557FE6590A3453681984F034CB21EC0B4A50F8898795EEBC9F7F602413EDCB5
MD5 SHA1 SHA512 TLSH

Submit Download

leveldown.js

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\leveldown.js
Size 4KB
SHA256 755e961e81bb66656616419b564f9b9747b92de14748f1a694338b5ad6bfebcb
MD5 a1260f760afc36509b3f198356d4f237
SHA1 d2cf5bf92a46b615754eacc92854eceec4caa747
SHA512 e5bffacf87d85832de1cd1a6ed19c14310d2d2da43a11880128336d3896961e4bb6732dc1b25cb49fc437cf8a906abcb2a8420bb0a59e5f860a8b1befba60877
SSDEEP 48:TwpE2Gb9LSFDuOpjWWX2McMWiUPJXl+PUe6Zef2/MUEZ12/5kALX3AZvx8ohosQ2:T2gKDpDkNkALX48o5T9
TLSH
T15B91E261A9FA55E19EF2B0D1A09B6704A676C12D386C08F575C543E08BE017C6BEFE38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\package.json
Size 1KB
SHA256 692aaae73d5f8cd3ab14bdcffcc532af8329a73e6592673a32da8788137bc05e
MD5 bfff4b518ebba3f463eefae3f48e36fa
SHA1 6df10fc807b59f4cb9420e02b87071aa7894b164
SHA512 82583d3af91d789d9355c4f7273c2063c7c0ee67df8de1299d3d9f05d8fec9b79d9f959fb1d1b8e5500a4858167adea46b8f38fc33ae01d5131dbf13587fc76b
TLSH
T18E21FF75CD688CE30EC95AD8696C4212A2328D178D08B84D7783974C8F1D06F3ABAF1D
MD5 SHA1 SHA512 TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-x64\node.napi.node
Size 497KB
SHA256 276241da8c74732e527c19608e1773e77b89feb8f111d2c5c4e0d88a2d457be3
MD5 80154df757065cee96784f0b9ddac8e1
SHA1 af7fb872addef73a78f1c235665dde8fac9a65a0
SHA512 a3568407c8e410a7e422237adf2f2ca5e369f73eb5634075fde7a32b21cb80bc3f72013f7fe454bddeb3972f5def500dc6c572b8ce46aebfea1d5c5d38342c23
SSDEEP 12288:4cEmjFqLMaNB9wWWRxZJ2gOmHyddzPgTsVty+uI6MpDr:4aqLMoB9wWWRxOgOmSdzPgTsVzD6Mp/
TLSH
T1A3B46C2DAAA84561E166C17CC9A38946F7B234560F62DBCF4365D23D5F33BE00A3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clipboard.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\clipboard.asar
Size 836KB
SHA256 79889f7aee8ae38a46134e2267d36e160dc3c26d23316a9c14ad47c76802239f
MD5 4b2790aaddec582c7c2277162dcc3ac7
SHA1 fe74cd8cf0c503dd38fc89d7b378f6bd85a67d16
SHA512 155f27771029e69db86369cde56a87effdd2af1a9907d09731a8adad708256c363c67064f86e5da41b4e0a29db77e6ba96d60187ef456a9c7566b442e06b9984
SSDEEP 6144:qVcqauwyv/tGxhIXBztPGHt5+y3NP1M8tz3bu/WoJZ/7yp+1Zj0kSLNLM05XvbXR:Pq7Ntny3NFuuotziLM05XV
TLSH
T140054AC8B2C5B037D3B79579406F940AB3392E81A80898D0F15AE1D82EF9956D277F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

native-clipboard.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\clipboard.asar.unpacked\res\native-clipboard.node
Size 542KB
SHA256 f6e7e46af8f42ec1ae1234ce7fef037b75626fc4adcd6332b328d6d26b16b27f
MD5 1530a5c1aa60dce23e4cf3a03412d094
SHA1 478e692f1357cf7312a046802172372fdc25d955
SHA512 4d47745b4323bdb176a9bf124b524da9424ae48b347ca21517d40feb6864ac87e7dfa196b46869325f4b50f5862da0aea85bfab867f6790e5c935ae17ccf6bd1
SSDEEP 6144:fsdspr8+JXnxJVUtNQU2BEWnkm7aFHBKSBkXEtpu3B5R8aO8tqzKmqXOYFPMPEBY:UdsprdQQpbh7aVBL4fxSqwq7S6JZS
TLSH
T1C5C4185227F90268F1F7C37A9A7BC402DAB97EA55771D9CF124041590E33BC19E3AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file-search.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\file-search.asar
Size 434KB
SHA256 17549acee7c122453f7dc89164a0bdc7049fa64245523bbf4c129b44ee31f894
MD5 02569342c50992606a15cf1925d2b3d9
SHA1 0d8dc7c6275618a6a561a8c1c48191b0b8a8a52e
SHA512 dc6ce7b39a183dc803070b30651012869274d92578cfa76ca4ec13b46c80b08b46c72e868fd74c84fdef73161662e7d04c731b6f21ba1097579952dfdd0f3b62
SSDEEP 6144:XjqIETDFAcHNPqDa9OxXrQ1j78l2rBhmVrP9fwmHCGRT:X3AKpDu0XrQ1j78l2WrP9YW
TLSH
T123947C9DB1D77032C3B305B9516B6002B335AA43780CD4D4F1ADE7892FA9C4692B7FA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm_file_search_lib.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\file-search.asar.unpacked\res\qm_file_search_lib.node
Size 1.1MB
SHA256 1eb2a8b661fce3b03ef0f97201cea2e62e3a5d5c531ef54b49483e53295bee61
MD5 34c9e27e2e88c593ca7ccaeaa591faa2
SHA1 c40efc4b43f7da83dbcd1e007b1fdd895359fe60
SHA512 33128ebc49120bf50bb73008a028e86462856450c90aafb27b932cec18a96f32fd2ffcf5ea7bc9a283c0b43ae605198ead163cf144ad1dd04a8531b96e58a20c
SSDEEP 12288:kAr6TrzIN1N+lZGLUvonztsreSNXxgZSTmwjLpwp9BWu5:ZWTg/wluUvonBStMSTXo9Qu5
TLSH
T19A35296266FA0168F1BBC3399BB78813EA727C510779E9DF068046591F33BD09E39721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

local-app.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\local-app.asar
Size 64KB
SHA256 a565cc4520ce6bc60727049ae61b4a898d13cce6c58ec272e180f9aa4a37e098
MD5 a33599f236b863c0e8cef9e29b1a8142
SHA1 1256769d5a993c2e3191ca54d9f4fbae4b7c8ca1
SHA512 a00609f4d4dd26f7d1ff6d5ed6de9bdc83103f4030013f65d4fbd4319dc9c600f0d69d29d504314d71d95fafb28cb5923d5bc8415d8243f4b7c6fb84e42060dd
SSDEEP 768:oNL0vC/MfaxT1cbajWkrLj+VjxYf0aazDXE1azTcvLpuMNI7e6k+E3QLIJtcVNz7:oNc6BcGjbnRf0hzTcoMHx7gn39Sg
TLSH
T19353089D1EFB145301AB31BD4B5F4242352494832558DE18BBECA2882FCD52E62FBBDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recent-soft-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\local-app.asar.unpacked\res\recent-soft-addon.node
Size 412KB
SHA256 ac8c7daf178575960bea9c29c1988d79b4e9bcc77803e38def30400c69316ebe
MD5 e8e7a64af3aa24770961aeb427f61af8
SHA1 7f1fa52d606c39ee938a93bb349d249bb9ef88fd
SHA512 7e4a4dc8a544d6722e4da2235767deaafb625e0c471e749b8f6176cdad5bab82c89d51d0e5e541e5e9e4bb50e5d8172e56a2b3ca5df2b2f4ebb8e974bf6ae653
SSDEEP 6144:JqeYJhwfGdSI4IO6OME7xgHjkW2U5gGpE9BwI9AtCAvJ+xVdddZiaEGeVYfLIHb7:JqeKwp+gGpk+M0we+6Oa
TLSH
T18C944B2AEAAD01B9D0ABE23C96938912F6B97C4A03B18FDF039146371F177D16D39750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pcmanager.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\pcmanager.asar
Size 205KB
SHA256 de94d87ed080115d3ad75e2dd03958da3abf0421c58e680a3e8742d5c70d1503
MD5 ca238cfe5239e848c04190d6d65332c1
SHA1 12b399c8c827eef04a2e7937199d4d65190dbadc
SHA512 4bc7f6395d40dadb2cb7037774671c249bf3d27d0a85dd719554b7f80ad4a629032a6607775850da93bc50c343447146896b7c2d5cf764259052e2bdbb4222da
SSDEEP 3072:toBDuZ4bFvJY75TtTljgvQ2Eoqn6oNX7sonZS1NuU4hYt2HdG:tUDKgFBQXuvQ2Et57LZS1N54q/
TLSH
T15C249F67C2F98D6B40F67375194E0242F131460B4259A60FF8BC9A6D9FBBC05B84BB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

quick-access.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\quick-access.asar
Size 235KB
SHA256 55cc8611d42ded1c1d3c36b5f72195f57314e74e634bc873f1226f7fc6b4184d
MD5 9be8031e7c9aa3014916b1988512d729
SHA1 9a9a1d1f027073952843be387bcf55719277af0b
SHA512 60d8fa41b9d0449e77dcdb06ffcafb695b119281d76287d56dd0fb12f6c4e0f79120c57719c65d04c6e86b95dd6f658ab5d7acdbeb9969a5c6cdd448d8a924e7
SSDEEP 3072:nylqD5kDJQN4udgxSQko4X3FREkm8s4Ff6vzOozpQLBAZkNJZQefHCGc:7LN4uCxHGjmIPozpQ19ldHCGc
TLSH
T131344AA5B5E7707213B309FC017B5102B3359943740CC5E4F1ACA9993FAA46A82BBF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

quick-link.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\quick-link.asar
Size 353KB
SHA256 e1c243ec077c2aa168c75a0c7b64bc17ad3dd6a0c4fb8445d1fa91ef7174a168
MD5 915f36f583478a91bd4d2556b1a9e017
SHA1 84524cf2376fbcea7547c7e4164812a925dc3989
SHA512 c6d7362355c73d021d0084b5c96cfdf8d2567f0a97dc6774484615189de811e63401cb9534d9e50ba77a470561c9e1ee1abc1b984bc4ea0072444583df724842
SSDEEP 6144:xzl6DYKFc4QR123iHT+36KcUyngaCj7JGa/J6HCGz:8vS4QRs3ivKcWaVv
TLSH
T18D746C9CB1D6B023137389F8017B5406F2395A927C48C9D0F16CE5993FAAC9A91B7F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

system-feature.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\system-feature.asar
Size 113KB
SHA256 5d1a71cd4b95e44b7e2b9c418a3c5202dcb6d78fcacd113d955810fbe1b6b683
MD5 ed55f9dfaa38ce1aaf94cfcf8498f1b8
SHA1 fc92431102d3322d9efcadeae88d96ebd185c4f1
SHA512 cf6c3f8e0d1dbff29a4eb679bbdb9aa24e6ca6a36a9b71a3e86fa19186d6d765eb4dbc885b8098304a0403e112fb562f9230750cfc70e9abbd4bb1d562ce7c88
SSDEEP 3072:v2pzFISi5un+aLFdSRqZBOQTOa7szCVKU:+5Fi5kPSAKahKU
TLSH
T181B37B67D7AC0CBF00F65339990A8520F1158B0F11556B8FB9BCC39CAF3186A7697B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yuanbao.asar

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\yuanbao.asar
Size 11KB
SHA256 88331ee42ad9ddcd5a158e2fcae8dd5da141a8747f6f8baf5030a418182321db
MD5 66432b1eef7147c23d0e84f92a777049
SHA1 ee7ab8ecf1086e2ddf0bd9bc969edc307e8b4d7f
SHA512 3c8ce8b957f25487c54b56cca74dbb4dd9c8bca7a65c1f9a9b9a5d332d9994bfc0f7b11a54939c1a1060dae06cc182a4ed28540081d203e3fdf54f88b9648b60
SSDEEP 192:maRKW86FlVVIBwUqs6lOPiQWJ/bmf09spFeVgmFoPiiQCJZ5rF5+fvi69SP/X:3Ml6FlnISXDzspJmFuJT5rfbH
TLSH
T1CC3219AD96EB51C350B643304F2F4B93310557275E38CE4EB2BCA1817FB79BE014A989
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yuanbao-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\yuanbao.asar.unpacked\res\yuanbao-addon.node
Size 273KB
SHA256 926b3ccd66d03f6d2c766b8bdd47456d94c926233c77cf8b2d3a8916e3801866
MD5 a84b8d35913f2158c626cba174ef181e
SHA1 773b1514a4347b86bbbda9cf72e17e078efbeb3b
SHA512 b2986a98ac5fe1f8ffc09e2f7cf74c848a4fbcb8eed1de8bb44ddb70adc7aee5d28409d373512eb2a016fb187a1c2234e5b13345efde3c7bfa8b11552f1c884f
SSDEEP 6144:ka+Qba/tPxN1s9ffYbi76CIJk0uT7yXB2d2f:k8IruT7t
TLSH
T1BF54835AEA7699D1D5B9D1388662B227FC613C5DC378B39B8B918B031B61BD0F53E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addFavoriteIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\addFavoriteIcon.png
Size 1KB
SHA256 c5aa71ae429e5ff0294740d121a7e1e63387275d1fd9b6f8dd0c05410a068a7c
MD5 80d32bd364c306fbd988313ccc125829
SHA1 b8102299b7605ca14d871169c18ca09fa033ef0d
SHA512 9119154c0538f30a4079c86ec6c0d83a2d9eb5f91e60888634ec37c1a36cbbeaf6768c0e9805afcf4d34cf50121a6b2235bb3f9eaff8b426219bee08deffdab6
TLSH
T1C42128E16C240030C1F06FB04ED70BE2DA786C1A305D600819A5B91BAF1EB21CCF232F
MD5 SHA1 SHA512 TLSH

Submit Download

addToListIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\addToListIcon.png
Size 209B
SHA256 8dbd04f34e0129ba35be8815c24e79459c6567d7013a1c97dd2a84e6b1f96ce5
MD5 21d5c0dfad6c4fd99a81ff0395dc856c
SHA1 4258d44e9de05d8cc3f1cc60daf4a101be26eee2
SHA512 1aa851c017236455b211526d65afd07e364ebac050378db8fb671bfcf8f321975613c7e59dcc6e3422d1b026d729f9c8553ff8014d09557b237dcc547bc68314
TLSH
T15AD022C36F2584E8C45F0EFF12CA45B1E41A0A951601C20C6E2112A012396884592283
MD5 SHA1 SHA512 TLSH

Submit Download

authorize.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\authorize.png
Size 615B
SHA256 a6320e7da9e38659947af1ce84087b1f3d1b6c1fe499f3437075a5484edfcd09
MD5 f3c4086e75fce00336faa21e6a05834f
SHA1 c29ea0deb0f97a4b175c0ae2e55cac7a79c82587
SHA512 608d80566ea394ef88d08617642ab5e1712f9a03500f2f02c3826712a887cb85db99d09fc2983467b121fd11333aa7b3bec4f080782e44d0e03b15d8dadc12a5
TLSH
T123F068E66F5025E0F0DDDF2166324087C0DC1C082B2C310D346153768A361C401660F0
MD5 SHA1 SHA512 TLSH

Submit Download

browserIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\browserIcon.png
Size 1KB
SHA256 0dcc60900460d6442f9dbb9fdc02fd68d8548c903037a45026730bb04985c858
MD5 cea4c83e9003a027df2ae1ea4f7b4f04
SHA1 22463c9a8e4db76d3dd2fc51ffb2dcea693b8cb6
SHA512 aab81ab2cf7599104cb0082ac1c9081c54229df653d7738dddce6f9ebb5f01df6a946ddcfabb44f812d4928aee9006cafeeaba2f85054ae278853d71a830301c
TLSH
T14D11A5D3E2DCDDBD6588F56A42BB0451B6713C4023E70E3ED606A6052F23F9E1C81359
MD5 SHA1 SHA512 TLSH

Submit Download

copyFileIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\copyFileIcon.png
Size 310B
SHA256 d44b82e0761e588e99623619ec8568ae5685ab1eebb89a3a71f34d1dcb05a3dd
MD5 841033fe18bd0551806b4da5011549fa
SHA1 9442de1c96e435407db18aaa83085954bcc7a7d3
SHA512 aed05577dc6775bbbda6cd0932cb1098cb330e87a5bc9c8d5c6c57c8d19f7a4a01716ef0516b0fb614bb5e1f0e0a0591f9d8fbe0a727c3cd5e9c6c67e875c5de
TLSH
T17DE07DC2C6155E7CD41A8633ABA215E1D525201D9906425E0C012155C12EDA4C444512
MD5 SHA1 SHA512 TLSH

Submit Download

copyPathIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\copyPathIcon.png
Size 348B
SHA256 8c4888ab6624c4646a585d08e59f8fdd9f8eb0c4a85b08b8ad1133d7d20d4fdd
MD5 7adfdc84f97ac471c35d56615f5a7d5e
SHA1 961dda98560a3bcc92b4a5a62bbfb0723889bcf0
SHA512 78a175f1b9e470ad7bfe35e13d70cc5bf23afd7a4a278922dfaf615ad5d2003f2f49bb9dc837552176655bc63d2513b38bc2dea66c39897dc151592f8cf0c286
TLSH
T1B9E028D395500CD56C5F09B857B25B84BD1E24D10111C10DB4005A35C8FFE465C7B786
MD5 SHA1 SHA512 TLSH

Submit Download

feedbackIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\feedbackIcon.png
Size 400B
SHA256 2a6247c32c72290ae8a238f98dfe3316a3a18e291d7bc5a7ae9327ac26ed00ba
MD5 39291be3e78bab0433f05263fff6b54c
SHA1 e729006b270b636f2bdbb5c5ff77393295bd3ee3
SHA512 bb3b3d89571fb767553e2ec5b4178d8375c9ad1c31a8f00a07712f1f1dcbd0bef6b16ef856de49ef31d21e4602621b751034b11f12e82e189afd1cd2f39ada23
TLSH
T1C2E0FADB5D40245C45790E770703544CC4314F5557DD7F0F6C56161F4096B0429377C1
MD5 SHA1 SHA512 TLSH

Submit Download

guideIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\guideIcon.png
Size 442B
SHA256 f578a0061cf5667210db870af73199b76fffe3d5e1ca063d5771a1826f6876f4
MD5 ef332d298473b6301ee790d4dfe141fd
SHA1 1d9f07b65a3e10351be40660f05fa0b18abcd52e
SHA512 0c33e5244b3ffcc2d6be2d48d35b78a407f40febcf0034f920941235bb0c1b17b85f2754bc3fc24b49f0e6ed94b868f0a07a8d640193daee3d9e450fd40e13a8
TLSH
T1F7F0A3836A5544ECD00EC65BC3DE4B35FB1D1BC74D85DEDC0C5401B2ED0D2145498601
MD5 SHA1 SHA512 TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\icon.ico
Size 4KB
SHA256 c0b06df23f2efb5fa6223ca9fdc6f399f91018238f89370bfd465de738b7b4bf
MD5 c05bc1973200b66969a452f323dbdb8a
SHA1 388a8bc0e23f79d27c2acce7295c4bfe8a5fc376
SHA512 f25a67c97013252c736b1d8674894dce74aeef6245aba50259bc3a4d0c7c2694a5c6ea37f66b539cdf7889b9caac3b4d9f78e61bf17995d8b08a5935e906a527
SSDEEP 48:wHjP385WD9ckevzML/8uBel61t3OS1kMjyR:SdckevzML0uzGokx
TLSH
T1A091B98369EB0807CD554F3214AB4B164A27C813EDF950B22E132D36D72D1F027FC6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
Size 1KB
SHA256 d9b057b929241c4aac5a0b5d3634a86a44383457e7a9fe73dbb8aceb080e62f7
MD5 212fc4876f5a2857bb81d4fa404c427a
SHA1 e476bf1e39742b20023d9467697ddee3d81fe485
SHA512 94011a273b182aff6dafcb54b1c48e3e772a31537b4b390ef576cdb27a66d0999aa9429a95153f3923ef04c083828b298565ede153656e7e5c46c6656326cd68
TLSH
T157315AB810A8D890A9564238198B3216DF750A0C073C289CEA20F7F4F67F612A8837C3
MD5 SHA1 SHA512 TLSH

Submit Download

logoWithBG.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\logoWithBG.png
Size 3KB
SHA256 fcafb031750b2f53c96893b4dad970e32af0434080e7d784f6883ed328d1a739
MD5 6d5acdf92c53f46ee76bfb89828235f5
SHA1 bf900bbb914381252daf79d7988afe6a6a798ef6
SHA512 466f63b5fc6635203aa60929669ba45e5310e9b396988b019430fdfd650d5dba89bfd0e38bf84d72e1cded06bfba4cc86bae9393f5ee2d902b3a24121c9a6feb
TLSH
T1D0816EEA112456AD82C4EB716B1D0361EB3B064A55D275005C4D1F2DFC1376264BBFDF
MD5 SHA1 SHA512 TLSH

Submit Download

managePluginIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\managePluginIcon.png
Size 535B
SHA256 8c4f0d4b6269b8390b7485bb336799ca9b94e0775b6fc73ab3c6361b9ff33e5b
MD5 5babd46f8a2d455cd0e6bfa92a693541
SHA1 c3d774628ab2da1969cd8fff69a63faa522060fc
SHA512 3c8061bdd0f89f57bce45a2fe3d024dce3d9a05c7ad652e28702f265184e03c61a9dc31663a8f780efa1ccd5b12f2edec5694c66a31208cbc5548ff8ca59aa51
TLSH
T15BF020E24AC5E5EAAC66863273536242E87044426141D60DA740B7118F0A7408AE6783
MD5 SHA1 SHA512 TLSH

Submit Download

moveDownIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\moveDownIcon.png
Size 748B
SHA256 e0a47eb430109a6f16b3f2344e34b279ba84e2da8a6dfd6e30e7c3a78c7204da
MD5 ffb0a6fb71209c5201043e6aba6dfc31
SHA1 6a28c867b276562987497283cec593f6db7f837e
SHA512 e356b37f800a5e5bd4196b832f09be1c24133f228c7eaadfd7cbf7625a4f68b98ef02326b7b609bab1d2625673be377dac77ecf8186ac48e24909b63454a8bfe
TLSH
T18B0165F2819041B5D7E5A770864A2380C9B51C5C051BA17C3527BABB810B610808E2C7
MD5 SHA1 SHA512 TLSH

Submit Download

moveUpIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\moveUpIcon.png
Size 730B
SHA256 8c504ffcfb37418cc8cb0e3fc13052a807922699c889e99e31aa78aef45f2df9
MD5 046e36f9919e14a149564c37c3f8ea38
SHA1 4e35fceaef616fda871594d02d45f739b144d519
SHA512 c59b85810d2edbdd84c54863901b3c10b8636a98e10f5eb9ad09030e08e4e34a86f531e0cd0e1385dfeceef06d2bacd02ebb1709411eb111e6cc328a44d66e3c
TLSH
T1D50160B182644159E09863B85F9F02A0CDB90C46085F61682493FF16D24F711D06B3E7
MD5 SHA1 SHA512 TLSH

Submit Download

openFileIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\openFileIcon.png
Size 313B
SHA256 149c0d631fcec277e45850e2b3bde12c7cd26d42ddca2dc006434ba238a1b8b8
MD5 1e59d7e70d4dea899939f33b9ba6a8ba
SHA1 01f8b0ecf2e0ee35076940aa554626d1e7b5277d
SHA512 d4979c7eab5d56e7b3ccf1df304e97392fbbbca54a44669eb78abccd2adc5fcc59d297c773b7c4b3bacc0d07fb42d3a29e58bbb0c09c24227320657ac8224a30
TLSH
T1ECE07DE6C245ACEC9C5D07C69FB34175981A5988810140D41E11864B007AC54EA89381
MD5 SHA1 SHA512 TLSH

Submit Download

openFilePathIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\openFilePathIcon.png
Size 536B
SHA256 2c37b5756a5e1c80e56b94ff5cfd0692423986d37ee428c4183c59a223952b85
MD5 8b0329cf9afbf9a84d5b54596e9119fa
SHA1 b775f40c825612c6de8a97bc219f3d7c9250fe50
SHA512 500027f8f199ec928a0098167dbc962040a549ae78dc700647603c2e648ee7a89ccec3c771601d47572d65b7c008c5a7b73d4b94fe339babfdd5b607aae1448b
TLSH
T167F075E3ABA8B0DEE90A409FE7B705D4F27D0C0089268B0C4A802051737D3166173797
MD5 SHA1 SHA512 TLSH

Submit Download

openPluginIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\openPluginIcon.png
Size 408B
SHA256 1bc9de34646b2d7bb04981262661c9bde5498a8286463656884ebde2a9956008
MD5 ac12550fd15813f708648aac4e8dc4eb
SHA1 f14b4c3d6f4fa0096c76826b4e2721e68e618020
SHA512 3d17c91ff490b540d2129c27f973563948f1b622a141fa97cda97f47207bb2c830a33534b563930e9b05d0395a1dcc33557c8998c4f84c7856062efeefdf7791
TLSH
T13BE0ABC37B684A79AC18CCB958CB0623972E5E092306F71C5F3122281BA19588822642
MD5 SHA1 SHA512 TLSH

Submit Download

pcMgrIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\pcMgrIcon.png
Size 952B
SHA256 c054b6bdb4340d2501de6d0155486ba07435a3c8de67d1d9db74398acd8492eb
MD5 d6a5013d2f865d7ea530cf2de580a0b6
SHA1 9fcbcd745b04278325fcba25da732558a5a48adf
SHA512 f8eb828a8943826a9a8c95a4688d0c92587fcc57c2b80d391eb601077731e2fb1f3b22b4fad44df039f681eb9b6af230a8fcfd940e764df18eb38b243c3f3156
TLSH
T1E01154EEE8406CF4CE44729B8A7B3304E729D9520E04ED7A2D751711D420669F5C5165
MD5 SHA1 SHA512 TLSH

Submit Download

quitIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\quitIcon.png
Size 653B
SHA256 e920d5fac2b3317b8ae8727c729dd237673d747fd003836ffba59b839e1cf8a8
MD5 7b02da7f507a569c3d30badbdbf9f035
SHA1 2dd614ca2f74cc723069cf5e7617497e9361f8a0
SHA512 c5b135700bfd86664e7fe96f9a1cc4c138fb4521501987b882b4cf8e6506b0eaf8a34ca2a4fd2871445f2bc22aa0544c72ec792b705c949ce5b824eb5373219a
TLSH
T1BDF0684FDC6258EDC44817FFA39E0942763285AB60D42714E7C9C9504C5637DD24F54E
MD5 SHA1 SHA512 TLSH

Submit Download

removeFavoriteIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\removeFavoriteIcon.png
Size 1KB
SHA256 9385e11e5b82603df044c47c3e21c5ebdd3f768ca9a0e71b1f254623287be7a9
MD5 e74d49f8da1e5daf3bba6155672feb58
SHA1 369afae13da16c703511f364c99570c26579db21
SHA512 51c73931a81eaa166b5df1a500a05aa67dc221ad44d0b07c0fc207c09cd33f2e4e3246be5eedc02001b4129a2d656558e7386cd123de3c77b135251c9fd5805f
TLSH
T1522119988514F2BD507B3238C59F0393CAA630255F1980BC1239EF2DDB8FF6B400EA89
MD5 SHA1 SHA512 TLSH

Submit Download

saveIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\saveIcon.png
Size 351B
SHA256 7d3e22c0fa359f07a62f9383f1b631c6be2a70e7cb35aa765705da4fa0062770
MD5 98d6307a16c172749fcbc736ac135c88
SHA1 1df8d30d2b57208eeee160ef4aad4b96b1301006
SHA512 383f7d691506ede59edddf8f286502a200f06e8d0e0c78cd294573caccab01424bbf4c0b40ed111917c5287adf734be8639743f0c386eb719ba09055241f8325
TLSH
T14EE0C0F3D69A485D9B9ECF32016344DCDC352C8A3805011EB513962992533480441B83
MD5 SHA1 SHA512 TLSH

Submit Download

settingsIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\settingsIcon.png
Size 944B
SHA256 5ee498fb239a30fa1712e0215d42f76910fcda1ac8ccbe9edf8b7bd2fd73b76e
MD5 bf23c10fa77e09dbb82dd65bcb163ca5
SHA1 4e13b51a09b56eebdd91556de955f60ae5f29e69
SHA512 d04b2ac6a0b262ac1d8a6601919de298e5b5d146162e4acb22a8d078cf117390189c5cee8d120df268ab7cda431da1c6d6dbfe699a86a4cfb53e91fd26cad0b2
TLSH
T1491154C32610E7A6707A63C70E76185D6A3FC4542C86222D0A45D61DEB6A74CE427596
MD5 SHA1 SHA512 TLSH

Submit Download

startAsAdmin.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\startAsAdmin.png
Size 647B
SHA256 e88cec1a80754d6c218c08ce2bd8d19b0a121fb79586fec9b1e8d7016133a808
MD5 8ac5272a1f59c49616ba7c783dc7ee48
SHA1 c0348d2aee09566b218a05c6ce77f2f9ea6521c2
SHA512 7a644da85c69b6b4fd20fa34e7a4b775ed9b758f11d9f1264e6b97230316ef13ef8de08db7212564a3e83795864af0cc1b723d9d3254a50a450793cc8196a3e7
TLSH
T1ADF068E03B20E8B9E648C92173710125D16D504B1C15751DDF11696971A99632FA4687
MD5 SHA1 SHA512 TLSH

Submit Download

trashIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\trashIcon.png
Size 534B
SHA256 d0b8fc6601a49b19c8b091be3b8aea2d0d1e2a2b54ddc9ae45c3a545e5fb0e7d
MD5 9747bbca75d4850aabbb9e4c1822c667
SHA1 4190aff81ea620cb5910567115416fc045e288ee
SHA512 e8e8256a9e9edb680b488369baae8a62dd09e98dce4be1ad1fea900f74510e2996773e32293ed44f6f6e7e67a271f9defdae64f4faea2d4fe482b28b44947368
TLSH
T139F00591E3DB969F261B7715205F6188ED214BCC2729850C5B16DF47C61930DD4075D2
MD5 SHA1 SHA512 TLSH

Submit Download

unauthorize.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\unauthorize.png
Size 428B
SHA256 e9b4115af82f9225eac8f45cd3b15e07df81fbe8433ad248237b0d6b74ccd4a0
MD5 d74f8182d5039736ecb1f9a370d47626
SHA1 639b4dc365a136dd5a3908c7a13df1b26feb2349
SHA512 f2671c0dcb973d3cc8962ee97c3e191fe1ada537ed52a4e9c857993e1fc93d44d0b67fce053e7fd71c7d24b1d00e555b175d36c89b81314ff5a457dde3b91204
TLSH
T10BE08A831C4451FCC5B1C2BAE153F04EBCF950376800200F0E0314D05C37B415FD0141
MD5 SHA1 SHA512 TLSH

Submit Download

wechatIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\app.asar.unpacked\resources\wechatIcon.png
Size 973B
SHA256 da50b1d02cf4f2c0cb0f96f3bf0f5dd48da6b93693e469f8eb9df7293e2bae2c
MD5 91dc7d07f86c447ed1233e85cd379f14
SHA1 7d9eb4c3e10e9a183b40e3f43ee489625477f74f
SHA512 35a06543c84bd727ef6226e6c5393066ab0a72d47dd5df68c22cee9a030d91b2141d4ac974164a2d0ba33da36499037e7234b63fea63da382021473c6cc63d41
TLSH
T17C11CCCBF4088C4CB1B76E7105B4E87D91B600BD0696750C25D429BC9099AC9F7C4D15
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\resources\elevate.exe
Size 115KB
SHA256 a8d76658438d5a6ac6200fcd86fe5f7f1e41ea9172481046feb7e9b55d5d8dc5
MD5 0a37293cfe84c182d1e2657af1cd9df6
SHA1 b2140ee0b4178743c89fed63ff052d1631cef078
SHA512 4e5338c12bc94345b46855faeb94610ae23553e8f18b0009caa9227328efb11580b37dda98b219954b16c6015be3be91cedc1e00aa6c0284971dccb8ae5dadce
SSDEEP 3072:CMbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlL:DPrwRhte1XsE1l
TLSH
T1E5C37D1274C08471E9732A3559B4CA714E6DFD711E759EEB2398027A4F602C0AA3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\snapshot_blob.bin
Size 314KB
SHA256 f5799826224d193037fb019e793f4e3cb03c28d18d25948239bf45fb0e640171
MD5 9df16f6aa1b2ae47dbef18464a4b80e6
SHA1 96d16d9fd3142f94b95cc0b502de7c78f52c6745
SHA512 8f3ec5ed371865916c5096ef48d4bc21f2846646f71378c3e3a7c0c3dd0e7f87f43ee54bc9755a71cd394bfd26c546d72700d8092eb52da9ffda19861fda84d3
SSDEEP 3072:MRKUbt+xmR13ZcOol/lxwsG5enXqPy2VqEahdffawkSz2J:MRdt+yUFld2Fq2Vpah1fawkD
TLSH
T19164FF06B31EC737C95A2A7A4CE9AB853674B1CEAF86621B350943FD387057C4DA1B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\v8_context_snapshot.bin
Size 683KB
SHA256 9537f5ad5847faf38a7030e0688b2b77d1582d196c034a9f2d5f19038f11b813
MD5 d635b18dbc2a7b288603216c0c5b3fa8
SHA1 a6210b0bcf439eef14854797cb1f161acbd1014f
SHA512 e825955307c0668676186245ac77245c6a5499c45eafb8c11f0f67d10b13718086eb50933e37f42221719e6dd98c080ad3e3a9b4f1aaf521ac6a9818a5df3370
SSDEEP 6144:qqGRvt+yUQj/sFq2Vdk1p2VXy1fawkWe9YITbg1HoSFrUb6keXjxQOLL:qxMk1pX1y/We/Tb8HozbeTTX
TLSH
T182E46156A75FDF27CACE187D5EE59F453DB5B08EAF0B422B311803BCA43A2640A9530D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\vk_swiftshader.dll
Size 5.3MB
SHA256 c2b5814da5e86643c594ac345f38b3d9c8818a96ede943e868a7d99225c790e8
MD5 a9b5e0a3e90057d6842d70157004e6c8
SHA1 6d7f388fe620381e8aa0d714e6edd49f92a0abeb
SHA512 862ca2d056427333d7395d61e698ee8268277007fc5c43c0e81918ea6c744ed9469678e482627fb3e926d6053a2fb73917d35001f042f7a1ed1fa3bebe88bcd1
SSDEEP 49152:4PAcw1UehJoQQe9MNngGW18oksGCU7hg9nb5svav8Kxq7Rycb7GrRstpbQKYenMj:4PAcwautcivngiqhk
TLSH
T156463803F28980D9F05DD5B9875FA622F672B8814B2276DF52A01F192E77FE0A739701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\7z-out\vulkan-1.dll
Size 908KB
SHA256 3977fdbcf7044389ec214bc1db64071ac082bad10602a4c781edada976fff084
MD5 a5dfd9bc64336a93b48bf004346e655d
SHA1 a8016d6d57893c10b360375e37996cec0b642fdc
SHA512 9f838e4d25f089012d8c81b63eefb6e81f5173a99632db858b070ca316141cdab9f1fee3763441c2e951ebbab324b9b150cc80c85dae202ca801100bbdc40f50
SSDEEP 24576:8pgBtRYVwRJC3ljSGry1WR6Z5WRDYsHm6g3P0zAk7cw/u:egR1RJKl3G1WR6Z5WRDYsHm6g3P0zAkQ
TLSH
T146155B1296548969D576D038D9D28703CAB174822326B9CF02AC0718BF6FFF47B7DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nstEDBE.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tempinstall.ini

Path C:\Users\Admin\AppData\Local\tempinstall.ini
Size 382B
SHA256 bca613688e735ccd1fae7164550bd8ae90862028cd0bf31534c149ea0d7c9f60
MD5 6a5eea749583001de63b993fc66496ba
SHA1 fd41691ec4751e85be89917d46454f8533800b4e
SHA512 6a5b9b863bf139c87b5734d6e8310c7231a1015d8eceb15f76ccf7676d36f9107fd5d817a6f04ed47c3ee45be409073c837beee3c079abde5bc38233c98b9712
TLSH
T19EE09B1BA8D1B0ABDDB302E988979D14BAD43E9A026D23147762940D3C32918FF41D65
MD5 SHA1 SHA512 TLSH

Submit Download

QMAskAwayConfig.xml

Path C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\QMAskAway\QMAskAwayConfig.xml
Size 160B
SHA256 6b3f6a85bfb2c930d3cce4eb65d6b6fa760e44c1714ccea16f1abba87d1fcf93
MD5 44d21a67a415cee4bf5e6d1cd263c8a7
SHA1 41b74bc1c23e6a0041dc7d79e132ffab3b81597f
SHA512 5c5d613af6a29b3a9a45adfee6206006d77b7e882416d71f446f70e99b769eb48ca1be68cba86f7904be32dd0b435bfe6b7415445668b708a6850113327904da
TLSH
T11CC08C2C9248AC72426A483B4F52702DEF2DB0BA08282880C90B6876ADC9100562A8A1
MD5 SHA1 SHA512 TLSH

Submit Download

wpssetup.log

Path C:\Users\Admin\AppData\Roaming\kingsoft\office6\log\setup\wpssetup.log
Size 7KB
SHA256 2da971860bec335ce5d759ab57c4f5fe4537da7b053787f3d59cfaff2470c293
MD5 b4948b78edbb3dfc1dfaaddc4a001489
SHA1 ea3699a1de88dfb8b79677690f74cfecaedbd49c
SHA512 1351dd357132f932a518d7cc62d6a080cfd2105e5572e25b6af723de6726eeb42f8a5a4862ee631f123fd3e7d6a088c8554e435a7179cdb6fa13fa2f32503146
SSDEEP 96:7UHFNf82VOjq5wtDit7YOWJJGj0K0Z5tnEXtyF+PgQS:7CsPnS9Gjf
TLSH
T1C1E15A66917FC148077A0B3533738D0D2BD51A89A34935906B37ED8B4F9E833459F6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/920-2938-0x0000000000010000-0x000000000004E000-memory.dmp

Download

memory/3460-3084-0x0000000005FC0000-0x0000000005FC1000-memory.dmp

Download

memory/3460-3313-0x0000000005F30000-0x0000000005F31000-memory.dmp

Download

memory/3460-3314-0x0000000006DA0000-0x0000000006DA1000-memory.dmp

Download

memory/3460-3332-0x0000000006D50000-0x0000000006D51000-memory.dmp

Download

memory/4108-2932-0x000000006FBF0000-0x000000006FC00000-memory.dmp

Download

memory/4108-2934-0x000000006E550000-0x000000006E560000-memory.dmp

Download

memory/4108-2931-0x000000006FC00000-0x000000006FC10000-memory.dmp

Download

memory/4108-2933-0x000000006FBF0000-0x000000006FC00000-memory.dmp

Download

memory/4268-2924-0x000000006F1C0000-0x000000006F1D0000-memory.dmp

Download

memory/4268-3368-0x00000000078F0000-0x0000000007908000-memory.dmp

Download

memory/4268-3365-0x0000000003700000-0x000000000373C000-memory.dmp

Download

memory/4268-2941-0x000000006FE60000-0x000000006FE70000-memory.dmp

Download

memory/4268-2943-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/4268-2942-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/4268-2973-0x000000006DAB0000-0x000000006DAC0000-memory.dmp

Download

memory/4268-2974-0x000000006F380000-0x000000006F390000-memory.dmp

Download

memory/4268-3366-0x00000000038D0000-0x0000000003FBB000-memory.dmp

Download

memory/4268-3367-0x0000000004130000-0x0000000004154000-memory.dmp

Download

memory/4776-3331-0x000000006F1C0000-0x000000006F1D0000-memory.dmp

Download

memory/5028-2925-0x00007FFBFC0F0000-0x00007FFBFC100000-memory.dmp

Download

memory/5040-3345-0x0000000000010000-0x000000000002C000-memory.dmp

Download

memory/5336-2891-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/5336-2883-0x000000006F1C0000-0x000000006F1D0000-memory.dmp

Download

memory/5336-2892-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/5336-2890-0x000000006FD20000-0x000000006FD30000-memory.dmp

Download

memory/5340-3074-0x0000000000010000-0x000000000002D000-memory.dmp

Download

memory/5344-3756-0x00007FFBFE940000-0x00007FFBFE950000-memory.dmp

Download

memory/5344-3735-0x00007FFC1B680000-0x00007FFC1BBCD000-memory.dmp

Download

memory/5372-3016-0x0000000000010000-0x000000000002B000-memory.dmp

Download

memory/5500-3902-0x000000006E550000-0x000000006E560000-memory.dmp

Download

memory/5696-2848-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/5696-2845-0x000000006F1C0000-0x000000006F1D0000-memory.dmp

Download

memory/5696-2846-0x000000006E550000-0x000000006E560000-memory.dmp

Download

memory/5696-2847-0x000000006FC50000-0x000000006FC60000-memory.dmp

Download

memory/5888-3752-0x0000000007C40000-0x0000000007C64000-memory.dmp

Download

memory/5888-3751-0x0000000003820000-0x000000000385C000-memory.dmp

Download