Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 10:59
Behavioral task
behavioral1
Sample
BarcodeScanner.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
General
- Target BarcodeScanner.exe
- Size 4.3MB
- Sample260730-m3wefawcng
- SHA256 64d92fe526b47e5756286ccf1df794e4a9a15e650658a42c9747cbd0f7d9c1ce
- MD5 1774c9df8542a341de31c51663d57d56
- SHA1 ab4ec9375c6139d639c5fdc0ec6036e372f60132
- SHA512 9760923627770641c0563d9ac8cb0a2c1fb15326c1dea4901a56481178b54eef4dac028b4c4f73f993bcfb38101b831dce7695be8e6e4e932cdfac26832cb871
- SSDEEP 98304:9mEs2BQ01agJCiA5kF4C50L/7joJu4EqVc+dzebxr3rfIKgg1l1iy5+eshLr:5s2BxrwF5kFOL/I9Eac+klrrwKJLYesR
- TLSH T11D263387A67C507CF8539374687EB073CBB47F52066EC58872FA19989B7A3788005AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 3 IoCs
pid Process 4984 BarcodeScanner.tmp 3808 BarcodeScanner.exe 2536 BarcodeScanner.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 27 IoCs
description ioc Process File created C:\Program Files\RKD\BarcodeScanner\Examples\Excel\is-CUJ79.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-19KKF.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\Properties\is-084HT.tmp BarcodeScanner.tmp File opened for modification C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\is-OT9G0.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-NHDLK.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-V7PUN.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\Properties\is-30QKO.tmp BarcodeScanner.tmp File opened for modification C:\Program Files\RKD\BarcodeScanner\Examples\VB6\Project1.exe BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\VB6\is-1AKOP.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\VB6\is-RI3AK.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\VB6\is-9HM72.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\VB6\is-6UF5I.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\IE\is-U0OF6.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-MT153.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-A5IS1.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\is-6JMS4.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\is-EQQHK.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\is-L780T.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\Properties\is-NR9UH.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\Properties\is-E0BQ3.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\Examples\C#\WindowsFormsApplication1\Properties\is-CAHI6.tmp BarcodeScanner.tmp File opened for modification C:\Program Files\RKD\BarcodeScanner\unins000.dat BarcodeScanner.tmp File opened for modification C:\Program Files\RKD\BarcodeScanner\ActivateSoft.exe BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\unins000.dat BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\is-BT3I3.tmp BarcodeScanner.tmp File created C:\Program Files\RKD\BarcodeScanner\is-1BRU4.tmp BarcodeScanner.tmp - Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\BarcodeScanner.INI BarcodeScanner.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BarcodeScanner.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BarcodeScanner.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BarcodeScanner.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BarcodeScanner.tmp - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/4144-0-0x0000000000400000-0x0000000000414000-memory.dmp innosetup behavioral2/memory/4144-12-0x0000000000400000-0x0000000000414000-memory.dmp innosetup behavioral2/memory/4144-139-0x0000000000400000-0x0000000000414000-memory.dmp innosetup - Modifies registry class 63 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader\ = "Reader Class" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\ProgID BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\LocalServer32\ = "\"C:\\Program Files\\RKD\\BarcodeScanner\\BarcodeScanner.exe\"" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0 BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\ = "BarcodeScanner 1.0 Type Library" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\HELPDIR\ = "C:\\Program Files\\RKD\\BarcodeScanner" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B} BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader.1\CLSID BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\VersionIndependentProgID\ = "BarcodeScanner.Reader" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\LocalServer32 BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader\CLSID BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader\CurVer BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\ProgID\ = "BarcodeScanner.Reader.1" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\FLAGS BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\0\win32\ = "C:\\Program Files\\RKD\\BarcodeScanner\\BarcodeScanner.exe" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07} BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib\Version = "1.0" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{3798D94E-FB78-43F3-8179-FDE964D98BC2} BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ = "IReader" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib\ = "{4895CB41-099B-41F5-B15A-90D76BCF02F2}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader\CurVer\ = "BarcodeScanner.Reader.1" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\Programmable BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\FLAGS\ = "0" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07} BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib\ = "{4895CB41-099B-41F5-B15A-90D76BCF02F2}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\ = "Reader Class" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib\ = "{4895CB41-099B-41F5-B15A-90D76BCF02F2}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib\Version = "1.0" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\BarcodeScanner.EXE\AppID = "{3798D94E-FB78-43F3-8179-FDE964D98BC2}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader.1\CLSID\ = "{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ = "_IReaderEvents" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B} BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader.1\ = "Reader Class" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2} BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\TypeLib\ = "{4895CB41-099B-41F5-B15A-90D76BCF02F2}" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\0\win32 BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ = "IReader" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib\ = "{4895CB41-099B-41F5-B15A-90D76BCF02F2}" BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib\Version = "1.0" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\TypeLib BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ProxyStubClsid32 BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\VersionIndependentProgID BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader\CLSID\ = "{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B}\TypeLib BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ProxyStubClsid32 BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ProxyStubClsid32 BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5091183D-D8A0-443D-A6E9-1151FB24372B}\ProxyStubClsid32 BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{3798D94E-FB78-43F3-8179-FDE964D98BC2}\ = "BarcodeScanner" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\HELPDIR BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib\Version = "1.0" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\BarcodeScanner.EXE BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader.1 BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{4895CB41-099B-41F5-B15A-90D76BCF02F2}\1.0\0 BarcodeScanner.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\ = "_IReaderEvents" BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BarcodeScanner.Reader BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A21F8BEF-B71C-469C-9A5E-64DC45F6EB1B} BarcodeScanner.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A302EF02-0125-400A-95A6-7163EE14BC07}\TypeLib BarcodeScanner.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4984 BarcodeScanner.tmp 4984 BarcodeScanner.tmp - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4984 BarcodeScanner.tmp - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3808 BarcodeScanner.exe 2536 BarcodeScanner.exe 2536 BarcodeScanner.exe - Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4144 wrote to memory of 4984 4144 BarcodeScanner.exe 90 PID 4984 wrote to memory of 3808 4984 BarcodeScanner.tmp 92 PID 4984 wrote to memory of 2536 4984 BarcodeScanner.tmp 93
Processes
-
C:\Users\Admin\AppData\Local\Temp\BarcodeScanner.exe"C:\Users\Admin\AppData\Local\Temp\BarcodeScanner.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4144 -
C:\Users\Admin\AppData\Local\Temp\is-3B833.tmp\BarcodeScanner.tmp"C:\Users\Admin\AppData\Local\Temp\is-3B833.tmp\BarcodeScanner.tmp" /SL5="$401BE,4177152,56832,C:\Users\Admin\AppData\Local\Temp\BarcodeScanner.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4984 -
C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe"C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe" /Register3⤵
- Executes dropped EXE
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3808
-
-
C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe"C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2536
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\RKD\BarcodeScanner\BarcodeScanner.exe
- Size 4.3MB
- SHA256 78fedeee50f1ab167a3fc4f6155000acb9286603457983c7eca95c24718947d0
- MD5 1c29a8c472220700c9f34f68c207e94f
- SHA1 6ef3075a2114dc35037dfece4cb5d7ed8c629d04
- SHA512 866fb0f35c2d2eb82134805df582755f9d0090946398479ba332c5d2644149bb00220ee9a109d9f73c7a5c9bcd4a41a17250261ac9dbcfdf6149c73d6632fb30
- SSDEEP 98304:HwpXib5L2daHpMVK0qegZIxEzkNysE2xfu5zsIXFLKf:oSV3GVK0PxN4z2sS
- TLSH T1AD26121EBBD2C8D1D423557C0CA9F2C9A923FA647E62062BF687275D2D752F44E2C123
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-3B833.tmp\BarcodeScanner.tmp
- Size 691KB
- SHA256 bae22f27c12bce1faeb64b6eb733302aff5867baa8eed832397a7ce284a86ff4
- MD5 9303156631ee2436db23827e27337be4
- SHA1 018e0d5b6ccf7000e36af30cebeb8adc5667e5fa
- SHA512 9fe100fafb1c74728109667b5a2261a31e49c45723de748adaa1d9cb9f8daa389b871056c70066fa3a05be82a5017c8dd590ae149a56d824a9e250d31091a40f
- SSDEEP 12288:7QszP8NRMXpc/rPx37/zHBA66pE+4p1YR71CERdH6rN9by7HaOMe3mxyF:7QQP8YXpc/rPx37/zHBA6plp+51CErzP
- TLSH T121E47C32F2A0C837D1B31E789D5B82D55936BE103E38A59736E81F4C4F796817A272D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\BarcodeScanner.INI
- Size 857B
- SHA256 2a27b4aaa8415f0907794c55b9bfb65bb21b012bb2753594abfa038d6ffc4f77
- MD5 1ec98bb527172744db2af27088aebc08
- SHA1 9f21e1d2ab6d901baa51ad468b444353cdfe6a5c
- SHA512 396faa0c5c81808246cca3b49c2d632e7ff7e55967b2e55017fe2955bd3ec9040f69df5e35b2d9e956a3c83fcb8b2730459518004d727fa8bd96bca102ef193e
- TLSH T1941159B1543CE287CCE590E334F61AB415DF2A9105401CF93F9A7AA9BE90C46B61F3E9
- MD5 SHA1 SHA512 TLSH