Analysis
- user interaction
yes - max time kernel
84s - max time network
90s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 03:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sakuracat-1.3.4-win64-setup.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
sakuracat-1.3.4-win64-setup.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
General
- Target sakuracat-1.3.4-win64-setup.exe
- Size 80.8MB
- Sample260802-d48aystdlg
- SHA256 580ed83dc73cec7e705a919f8d25c627cdc3b52ffd4840716d274ff53543cecd
- MD5 e2a95a0798aea25603398daaaaf0a99e
- SHA1 4b19983d17c3beb108c1c2c398a7f5f62f8b503f
- SHA512 1c1124fc1d763270350ba812fbf971f5c271f4ae35f49c4b099aea356bd08efa7c2f97199a6046e516e23e6172cd5f5df1952f931919120c4d38194a4d61723e
- SSDEEP 1572864:Ze6sSMaymR4Sy+FXEVnDfqa/wrjG0XG1GGXw7jsN:w8MM4SymXiXEjGPw7jsN
- TLSH T1E108E15772E414D4E4BAC0398B278503EBB1B82A1330ABEB16B0E5552F77EF4597E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 3668 SakuraCat VPN.exe - Loads dropped DLL 54 IoCs
pid Process 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
pid Process 9972 powershell.exe 5016 powershell.exe 4304 powershell.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Basic\ButtonGroup.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Material\ToolBar.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Fusion\Dialog.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\itemdelegate-background-highlighted.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\textfield-background-hovered.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\pageindicatordelegate-indicator-disabled.png sakuracat-1.3.4-win64-setup.exe File opened for modification C:\Program Files\SakuraCat VPN\qml\Qt\labs sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\Qt6QuickShapes.dll sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Universal\RangeSlider.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Imagine\ToolButton.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\editablecombobox-background-open.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\editablecombobox-indicator-hovered-open.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-background-disabled.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File opened for modification C:\Program Files\SakuraCat VPN\installerResources\com.sakuracat.app\1.3.4sqldrivers.txt sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Universal\RadioButton.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Fusion\impl\SwitchIndicator.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-groove-hovered.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-up-background-up-hovered.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\rangeslider-second-handle.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQml\Models\qmldir sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QML\plugins.qmltypes sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\Qt6QuickControls2Impl.dll sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Universal\impl\qtquickcontrols2universalstyleimplplugin.dll sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Basic\ScrollView.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\Qt6QuickControls2Universal.dll sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Dialogs\quickimpl\qml\+Material\FileDialogDelegate.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Material\RangeSlider.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Material\SelectionRectangle.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\checkbox-indicator-hovered.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Universal\BusyIndicator.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Imagine\StackView.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Fusion\PageIndicator.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Basic\plugins.qmltypes sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Dialogs\quickimpl\qml\+Universal\MessageDialog.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\RoundButton.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected] sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-icon-disabled.png sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\sqldrivers\qsqlpsql.dll sakuracat-1.3.4-win64-setup.exe File opened for modification C:\Program Files\SakuraCat VPN\installerResources\com.sakuracat.app\1.3.4platforms.txt sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Dialogs\quickimpl\qml\+Material\FontDialog.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Material\MenuBarItem.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\PageIndicator.qml sakuracat-1.3.4-win64-setup.exe File created C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected] sakuracat-1.3.4-win64-setup.exe - Hide Artifacts: Ignore Process Interrupts 1 TTPs 3 IoCs
Command interpreters often include specific commands/flags that ignore errors and other hangups.
pid Process 5016 powershell.exe 4304 powershell.exe 9972 powershell.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 10144 cmd.exe - Kills process with taskkill 1 IoCs
pid Process 10184 taskkill.exe - Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 5860 sakuracat-1.3.4-win64-setup.exe 3668 SakuraCat VPN.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4304 powershell.exe 4304 powershell.exe 9972 powershell.exe 9972 powershell.exe 5016 powershell.exe 5016 powershell.exe - Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 5860 sakuracat-1.3.4-win64-setup.exe 3668 SakuraCat VPN.exe - Suspicious use of AdjustPrivilegeToken 15 IoCs
description pid Process Token: SeDebugPrivilege 4304 powershell.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: 35 5860 sakuracat-1.3.4-win64-setup.exe Token: SeDebugPrivilege 9972 powershell.exe Token: SeDebugPrivilege 5016 powershell.exe - Suspicious use of FindShellTrayWindow 8 IoCs
pid Process 5860 sakuracat-1.3.4-win64-setup.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe 3668 SakuraCat VPN.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3668 SakuraCat VPN.exe - Suspicious use of WriteProcessMemory 15 IoCs
description pid Process procid_target PID 5860 wrote to memory of 4304 5860 sakuracat-1.3.4-win64-setup.exe 89 PID 5860 wrote to memory of 9608 5860 sakuracat-1.3.4-win64-setup.exe 92 PID 5860 wrote to memory of 9644 5860 sakuracat-1.3.4-win64-setup.exe 94 PID 5860 wrote to memory of 9680 5860 sakuracat-1.3.4-win64-setup.exe 96 PID 5860 wrote to memory of 9716 5860 sakuracat-1.3.4-win64-setup.exe 98 PID 5860 wrote to memory of 9752 5860 sakuracat-1.3.4-win64-setup.exe 100 PID 5860 wrote to memory of 9788 5860 sakuracat-1.3.4-win64-setup.exe 102 PID 5860 wrote to memory of 9824 5860 sakuracat-1.3.4-win64-setup.exe 104 PID 5860 wrote to memory of 9860 5860 sakuracat-1.3.4-win64-setup.exe 106 PID 5860 wrote to memory of 9896 5860 sakuracat-1.3.4-win64-setup.exe 108 PID 5860 wrote to memory of 9936 5860 sakuracat-1.3.4-win64-setup.exe 110 PID 5860 wrote to memory of 9972 5860 sakuracat-1.3.4-win64-setup.exe 112 PID 5860 wrote to memory of 10144 5860 sakuracat-1.3.4-win64-setup.exe 115 PID 10144 wrote to memory of 10184 10144 cmd.exe 117 PID 5860 wrote to memory of 5016 5860 sakuracat-1.3.4-win64-setup.exe 118
Processes
-
C:\Users\Admin\AppData\Local\Temp\sakuracat-1.3.4-win64-setup.exe"C:\Users\Admin\AppData\Local\Temp\sakuracat-1.3.4-win64-setup.exe"1⤵
- Drops file in Program Files directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5860 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference='SilentlyContinue';$appName='SakuraCat VPN';$roots=@('HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall');foreach($root in $roots){$path=Join-Path $root $appName;$props=Get-ItemProperty -LiteralPath $path -ErrorAction SilentlyContinue;if($props){$location=[string]$props.InstallLocation;if($location -and (Test-Path -LiteralPath (Join-Path $location 'maintenancetool.exe'))){Write-Output $location;exit 0;}}}foreach($root in $roots){Get-ChildItem -LiteralPath $root -ErrorAction SilentlyContinue | ForEach-Object {$props=Get-ItemProperty -LiteralPath $_.PSPath -ErrorAction SilentlyContinue;if($props.DisplayName -eq $appName){$location=[string]$props.InstallLocation;$uninstall=[string]$props.UninstallString;if($location -and $uninstall -like '*maintenancetool*' -and (Test-Path -LiteralPath (Join-Path $location 'maintenancetool.exe'))){Write-Output $location;exit 0;}}}}"2⤵
- Command and Scripting Interpreter: PowerShell
- Hide Artifacts: Ignore Process Interrupts
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4304
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v DisplayName /t REG_SZ /d "SakuraCat VPN" /f2⤵PID:9608
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v UninstallString /t REG_SZ /d "\"C:/Program Files/SakuraCat VPN\maintenancetool.exe\"" /f2⤵PID:9644
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v QuietUninstallString /t REG_SZ /d "\"C:/Program Files/SakuraCat VPN\maintenancetool.exe\" --silentuninstall" /f2⤵PID:9680
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v InstallLocation /t REG_SZ /d "C:/Program Files/SakuraCat VPN" /f2⤵PID:9716
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v DisplayIcon /t REG_SZ /d "C:/Program Files/SakuraCat VPN\SakuraCat VPN.exe" /f2⤵PID:9752
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v Publisher /t REG_SZ /d sakuracat /f2⤵PID:9788
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v URLInfoAbout /t REG_SZ /d https://example.com /f2⤵PID:9824
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v DisplayVersion /t REG_SZ /d 1.3.4 /f2⤵PID:9860
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v NoModify /t REG_DWORD /d 1 /f2⤵PID:9896
-
-
C:\Windows\SYSTEM32\reg.exereg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SakuraCat VPN" /v NoRepair /t REG_DWORD /d 1 /f2⤵PID:9936
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference='SilentlyContinue';$appName='SakuraCat VPN';$customKeyName='SakuraCat VPN';$targetDir='C:\Program Files\SakuraCat VPN';$roots=@('HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall');foreach($root in $roots){Get-ChildItem -LiteralPath $root -ErrorAction SilentlyContinue | ForEach-Object {$props=Get-ItemProperty -LiteralPath $_.PSPath -ErrorAction SilentlyContinue;$keyName=$_.PSChildName;if($props.DisplayName -eq $appName -and $keyName -ne $customKeyName){$uninstall=[string]$props.UninstallString;$quiet=[string]$props.QuietUninstallString;$icon=[string]$props.DisplayIcon;$location=[string]$props.InstallLocation;$isMaintenance=($uninstall -like '*maintenancetool*' -or $quiet -like '*maintenancetool*' -or $icon -like '*maintenancetool*');$sameInstall=([string]::IsNullOrWhiteSpace($location) -or $location.TrimEnd('\') -eq $targetDir.TrimEnd('\'));if($isMaintenance -and $sameInstall){New-ItemProperty -LiteralPath $_.PSPath -Name SystemComponent -PropertyType DWord -Value 1 -Force | Out-Null;}}}}"2⤵
- Command and Scripting Interpreter: PowerShell
- Hide Artifacts: Ignore Process Interrupts
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:9972
-
-
C:\Windows\SYSTEM32\cmd.execmd /c "taskkill /F /IM SakuraCat VPN.exe || exit /b 0"2⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:10144 -
C:\Windows\system32\taskkill.exetaskkill /F /IM SakuraCat VPN.exe3⤵
- Kills process with taskkill
PID:10184
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference='SilentlyContinue';$appName='SakuraCat VPN';$customKeyName='SakuraCat VPN';$targetDir='C:\Program Files\SakuraCat VPN';$roots=@('HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall','HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall');foreach($root in $roots){Get-ChildItem -LiteralPath $root -ErrorAction SilentlyContinue | ForEach-Object {$props=Get-ItemProperty -LiteralPath $_.PSPath -ErrorAction SilentlyContinue;$keyName=$_.PSChildName;if($props.DisplayName -eq $appName -and $keyName -ne $customKeyName){$uninstall=[string]$props.UninstallString;$quiet=[string]$props.QuietUninstallString;$icon=[string]$props.DisplayIcon;$location=[string]$props.InstallLocation;$isMaintenance=($uninstall -like '*maintenancetool*' -or $quiet -like '*maintenancetool*' -or $icon -like '*maintenancetool*');$sameInstall=([string]::IsNullOrWhiteSpace($location) -or $location.TrimEnd('\') -eq $targetDir.TrimEnd('\'));if($isMaintenance -and $sameInstall){New-ItemProperty -LiteralPath $_.PSPath -Name SystemComponent -PropertyType DWord -Value 1 -Force | Out-Null;}}}}"2⤵
- Command and Scripting Interpreter: PowerShell
- Hide Artifacts: Ignore Process Interrupts
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5016
-
-
C:\Program Files\SakuraCat VPN\SakuraCat VPN.exe"C:\Program Files\SakuraCat VPN\SakuraCat VPN.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3668
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\SakuraCat VPN\Qt6Core.dll
- Size 6.6MB
- SHA256 11e6605b8dc988163d58b66d36e63263fa38c584778f68c0a8ff6646125a5eb6
- MD5 4ab013871bcd937b47b9288987356b37
- SHA1 c8950cca53cd01c4dd3857a21e2ae2912eb81df4
- SHA512 1ecd9e636673287a42328e91c053bb6ec95b36703bb5e81b2af1508ec07e84ca1b3ce6f21f90de880cf4d60cd842a1e094c7279f8d34ac92991fc9451a75f723
- SSDEEP 196608:Y4zkX7Vb85tTa0qQJTeWL09ZVburbQIHVbUIcQuI2uzPGpXXM5f0lMXTzBDv/xl+:Y4zkX7Vb85tO0qQJTeWL09ZVburbQIHS
- TLSH T10E663A53E2A360ECC5BFC1344667A672B931781911347E6F1198EB352FB2E60237E729
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Gui.dll
- Size 10.4MB
- SHA256 e291ee18547d7578de01029ce6577a8a7f1208c14de8c4040847e4e2c104b0f8
- MD5 a47838b09aca608356528588529f28a2
- SHA1 560d656a7a7dcd345f9c9b9130844575aee74984
- SHA512 4cba76dc95a179fd8fc90f3c3504b55dd608ac6611953e9f3f6c91422413e7fcc5aa0f358fca6e2e4288b642ede99bf4be48fd0ea9c033c4225086b4bb7a5d33
- SSDEEP 196608:m+emRnbF2Ig51vwxnTpasEBamqUVSQwqxtsSAzTbHWqx+tSxb2PU0CxV/mdyxsoU:temRnbwIgvwxnTpasEBamqUVSQwqxtsM
- TLSH T134B65B57E2A260ECC06FC534476BE673B931781811347E6F5690CB392FA2EA0637EB15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Network.dll
- Size 1.9MB
- SHA256 03ef9d38cd31c45a0585a9bb739854ae8a0467dc4c9feeea5444b2f956fd8233
- MD5 93a5870371ce5910c2f004e72b42ea1c
- SHA1 a83e5b248f0dcd872648a4bdf3f7e4ef684a85d5
- SHA512 864fedffb4f28680de4e2e75195cd9e26d6e7c9396a2c923930f874edb2c2a0d9ff357314842b1fba788b408bec68c898d7654a4a92393ffac9da07026d019c0
- SSDEEP 49152:mOBxI3nMJfCnxn1SmjxTSCotjKxzt9wM0aQdXKQZmSTX7zjPNWFfsgBntodCdjda:HbrdmjxTSCohKxzjwM0aQdXKQZmSTX7L
- TLSH T109951967E26224ECC46FC1788657E332B931781912387E6F5754CB362FA2E60637E358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6OpenGL.dll
- Size 579KB
- SHA256 d7e63d140e486593280c8e78f5369183abcc9730f78c6346afcc74228f95965e
- MD5 e36bc8b4f3ce8321ca598a07945063e7
- SHA1 b3d1f430c9623d2beb9e92562ef05e42d1ceb7c4
- SHA512 e16de1f3965ea078517859f8f1749dc3730460eb6661abe184417a6bcbbe0d9facb12e625e10e958a2c68cd4a5ed721f52aef2443bdb54eb3fc92a87f22cc2a0
- SSDEEP 12288:p7y/UkdIQnQMyhpy1wgmbSf2P+TMWsimp1:U/UIWawgmbSf2P+TMWsim1
- TLSH T16EC44C96E29279B8C81BD639538BAA357671BC000174BF5BB14CD7362FE1E20137E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Qml.dll
- Size 5.6MB
- SHA256 c8b9043faeab0afbd1b776fe2572982aad1de1c2ce857449b36b04601efb338d
- MD5 f648b6b746b6f5e86ef97f2f712e3720
- SHA1 7e48e74eb7e378b26f21bddcf06a80ae2ad74aea
- SHA512 3aef755014466402a236a6ae40ffdf628ead215c2871e489cf85fd581abf1e4503fe0aabf9c61db389ecb1c25fae99af85e55ac0ba1e4e9f0c756985a3670967
- SSDEEP 98304:TOHuWiFAE0Mj8veRSZNIklh1GTQ6rCgjv4yMkjR+ZQRa0RqSxEvGzAW0xj2MgDMD:Qw0MjkLIklh1GTQ6rCgjv4yMkjR+ZQRO
- TLSH T105562967E2A224ECC06FD139475BE633B9327C1412347E6B5358DA362FA2E60237D794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6QmlMeta.dll
- Size 162KB
- SHA256 7cf3f6993d73ffb2e9c999af79a7e9c09545b65fa0ec4823648ad46f3bb52646
- MD5 7725078616b011dcea6f2b20124535c3
- SHA1 287db205225202362ef7c3402d57f3ae6ef534a4
- SHA512 10027f902cfbafd189e4b288b9547e3b7e6150811f9a449bdfc08615c4040f9234387aa5f78499f1feae8eeeabbc76b24df1f30cf53d9ad8587d1d8546815829
- SSDEEP 3072:y1qHpUScEd0JfF7H37tdbIQn0cTT5K/fKMO:y1qObRd7XT5rMO
- TLSH T19DF31827A26264E9C0AFC4788697D372B8317C641338BA6F5394CB772E90E60773E715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6QmlModels.dll
- Size 793KB
- SHA256 853eebf1c80017e0b22fe8c8416694915c70eba6c16ea811c714a1ea6ef1f617
- MD5 fef12ad37b3a4abb7d0830b07773604a
- SHA1 5e3ddf68a0c1b65f02c2e0432261226dbb397158
- SHA512 ab8ab3a595533dbb547cf87a7f224fc5b1eaa9e15f4ff901197279013a7e3ef6559ac6d968b8ec9292e9a704d6ab652a1bf542e30752d8fe5ed1097a6271ea82
- SSDEEP 24576:WUyJHK9ncXpMuSbwTULRg2zGlBrCd+9WZzB+EbMIuUadhWQ5bGDq:WJJKncXpMuSbwTULRg2zGlBr6+sZzBYd
- TLSH T19D051867E36624ECC06EC1394B9AE233B931B85912347A6F6184DA763FA3D70237D714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6QmlWorkerScript.dll
- Size 78KB
- SHA256 1b970f19f4c9f5aed458d6a0a9562bff20a0ccf15ecaffbdeb849251d408d3e5
- MD5 e1a8fb2704bcf822414e31f9343838bb
- SHA1 f6ac3ed4f39d701ee81aa337bc0f7fd12b5a2487
- SHA512 c880f308237f0674247c2a4c99ee2bfcf55acf85d61e0290091fa5507c3e9912ec0ad06d1a3fb37e2a3bd715e1dcc0ce757c3aed12ad99e29cc0b4949bfb036a
- SSDEEP 1536:RGQZbVZYNP1sFB+WyL5zCvXg8goJTM8T5IY6JkgKxngGPN:PY1sFB81zCvXBpM8T5CNKrN
- TLSH T1D1736D5B729615A8C4AEC13986FBD736AB3178611731FB1F40D0CB362E61BA12F3964C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Quick.dll
- Size 6.7MB
- SHA256 1ce9b363498dc44fba250eb80c6394182ce34694d6b20de7e37d522bf3da0b39
- MD5 fef2f237b22b4ec278a1f6090ff89cd2
- SHA1 bca6cf350ef724c89a5d3b83ded8831755a54d7e
- SHA512 b4a9425d57527e8661d770649e5f25a7cd951abd26e94926bb9f26df03f6d8db9ee03edb0d885be78b1a8740f0c359f462eb80c3be7b75d8e28775f65401bc15
- SSDEEP 196608:oRPK8nkCT0WcFZuVvSRepH1qvN/zANvsxfSERH82hQW0YheVxlF1xD2hKrBSwwox:+PK8nkCT0WcFZuVvSRepH1qvN/zANvsg
- TLSH T15D664D57E2A624ACC46FC1388657EE737931B89412347A2F1264D6362FA2E70337F764
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Sql.dll
- Size 320KB
- SHA256 a94b9f4c24df7dbdf267da38258a38c992f698eae32cdf67cf0eabde11a5c297
- MD5 312d0a66313c5355f05488e8046d69ec
- SHA1 6f1d9e64f2e966efdf5a933c4bc5da731236bb50
- SHA512 370aa899f7feea1d38a014c574fb3820e24c453ab69f7c0f4d76468a564db2da00e7a3e3c9ba824119503553ac9a96a51f0925658d7e1cdaedc12b957dc11715
- SSDEEP 6144:Nsz5/3z/0uTpVoNBeQQ4nw0z7qSEiH0g9knCBbviTN6:oLjV2BeQznw0XqSEiH0ekz6
- TLSH T162642867E36A24ECC06FC1788797D2327930781953783D2F9788CB363AA5EA0623D755
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Svg.dll
- Size 483KB
- SHA256 3a0a37258ca472c5fe781b5126aa40032d01ed3f5c411ce4d1d80a8aee9c8de8
- MD5 af1cff809b781c415da5e71f253d4d5d
- SHA1 fac1c36cdba326e2682dc3a4c3ec03ab56994735
- SHA512 14caf6611489d5aa980fe8bd6b77a8c42667c7673a08c24e8a6ab11a3d809817d41ec394e93837b969ad10f1e0630289d9765950e8c7652d9718be3cf81349c4
- SSDEEP 12288:UBFEDoJLZS4Z54/1uomkd3kGuUKVHcwL+43i3A:UBFEEfS1/komkd3k9UiZ+43AA
- TLSH T168B42A63E26126ECC0AFC47C8796E6727932381812747D2F5794CB362F91E60A27EF15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\Qt6Widgets.dll
- Size 6.7MB
- SHA256 487751ea99d859802ad23dd1667266edb1ad5b9c29dffcff87a1a5c110164714
- MD5 420c4e52dc429ab59309f069ab6dfb87
- SHA1 18b723afc5e5e69c1e03cf3e17165fc452bceff5
- SHA512 90a09615e790a865044e89c2f38ce43b187e39b9915fb8c774cd28520d8e91d9eb5375cf662374ff4b3a72202fcde59faa30979c3612919c8dd97a0fd0eb6b03
- SSDEEP 196608:pHbLKLHPq4HElHCyr94e1F4HD+79orUyYJHHfjjQPDvwaEJ+JPl/DlRfOrI7Z3pb:pHbLCHPq4HElHCyr94e1F4HD+79orUyR
- TLSH T1E0663B57E2E264ECC06FC5384797E272B931785812347E2F1694CE362FA1EA0237E765
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\SakuraCat VPN.exe
- Size 31.5MB
- SHA256 898c72ba63e75395e55641623a74d42872bfaa74e5c9589efb0e68dbb1996049
- MD5 459ff6e4bf9696dcfb79e3d7f0d27e62
- SHA1 2fd0af4e53417af8d76bcf2c563b545a550efa7d
- SHA512 1cf60bad7047b80ce843bab66a90c9716d672bab3cbedb5af6819b16ee5803cca42ca3a7a7de91bdf03d83f887a3ddbfae5286b94a47bc015a6797b0c88cbafa
- SSDEEP 786432:OONWz6C2J61QFMBwxTXcSjtH0xZVowI9l2lFJNu7T:SCTXraZUPMJq
- TLSH T1A7773A69B7142B7AD401C770C5C79B797EB0BD099B63E9B79A432F69E8F050002EF624
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\iconengines\qsvgicon.dll
- Size 71KB
- SHA256 e7fecd1df6d5467c0e48e8fcf9292c10fca6ed7bca523a8b4c345a132a59bc42
- MD5 896298b815bf8034446a56d9e2c85dbd
- SHA1 57cf702d5ce1a286f35c5abd3382b09a33789d18
- SHA512 b4d97406df93b2b18bd03b2bf5fc88fad7aafb5e9035c850884993edf422f9e1a86d09be75b35e3907b942f33221d21995e27ae4f8cb94394d89f7531e7c93ac
- SSDEEP 1536:j73v7rojzE1eRUpi/sE84EaBGDfZIgEVaDj0gEV1X/wjfcU2rTeI0NgKxngG6Imh:i41u4E84EaBGDfZIzaDj0z1YjkVrTenm
- TLSH T13A732BEFB36A10A9C09FC13446CBE333AE31F86117256BEE5254C5362EB1E642F25749
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\libgcc_s_seh-1.dll
- Size 106KB
- SHA256 5e27589147caa6d7a30f4cc058a14c455dc62233901ffff9a1797ede425e9f86
- MD5 852051b6302bb04cf0e4032ce5c778e9
- SHA1 a6c640a3e421ddaba838a3c91f6c4605e7f50187
- SHA512 245db11a589c93f63046d5b785c93b633acd654073aa8319f60101c7ee148f6ef6fa92a84bc34243cfb1fe44f2cac21ebcbd5b7b1a13f41313bcb68aa1d19277
- SSDEEP 1536:dBbhxEkrqIjo/Cxk793NK+qZGFW5w3Os3/gSrZ/JC15VC0hQXJ9gRk8yxO546w:d9L7/YCe79dTDkqFBrWoWQZKRGO54n
- TLSH T1CDB33B56B1F370BCC112C2318BA76AB59C37FC7442109EBB13D8FA391D62A845B66B53
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\libstdc++-6.dll
- Size 2.1MB
- SHA256 8013488c5528bad7966ca07f3ea2e7a9b743cacb258fe76b46a326f821cc83b0
- MD5 9a297f4a1a3c8da99d35ce8c65960b6e
- SHA1 6a57d9e108dccff7d2008fcab46bf81d98d99221
- SHA512 b33861d783605539cde7a329512a794dd0e41dc6896e9696a464a70a19b1c5c49378ce54064379692ce4220874df4a6c06658f873ae12d8b5bca2f85e85a3f5e
- SSDEEP 24576:uTgDgfMfz7Qh2sVlDXXm3jv7rryF/DOtmYnhSMXlrkPGR90d4:4gDgfMfz7QosVlDXXejrryF/D9YOe
- TLSH T1FDA54A03D6974DB8C9DBEBB4625B53759620FC298978BC2E5A9CC7306F52E40932FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\libwinpthread-1.dll
- Size 52KB
- SHA256 c7c7dced65fff71c7bb61f80c771c562f533d26d72722d9d6091129a3b03d5ce
- MD5 fe078245c5bd5d4bbc6985dc38cfeb3d
- SHA1 262bca04d3df3299d63427dd0e2e7685f659f291
- SHA512 2bc976fcf68fcbfa60f3a52369f6507f897ed26ede50d85e424b8a75787ae415ada37b26de7e90e38294c279084a1ffa91072fa2e478cd075e29e6b2fe6f46f4
- SSDEEP 768:DaoCXZKjTKiR0Hi93y8Dt+xbQq8EmX2g9lYWXLqWrN1baTrmPm3YZRvd//:XfjhR0Ha3y8R+mYWDNx7Pm3YZRvd//
- TLSH T13033F91A72A704FCC667C23445FA53726973F4202165AF1FE724DB322DA8D24AF2D99C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\maintenancetool.ini
- Size 4KB
- SHA256 7c90a5ca4b0460c7f7762aa465461cfc7e1565de149b050f6ba7a76dae5f9b7c
- MD5 7c7c0565d60cad89e72aee4cb2eb2540
- SHA1 5ce044067f91261d53dc37b8d0cac0908996bdc1
- SHA512 4f004822e47514a0f083bc2b83f3a0ff9442d3f149f7c956b931bfa6db251443485c87d6e18f91845b279f5a107f214fbc7c57dcf1267d823f9baff7aa63a5c7
- SSDEEP 48:1j5WRCtWWqzM/RkhY9kZ9kcCSghjT99PJKhUBBrrwED0+Tg:1FOOkkRKCdnnHzD0+Tg
- TLSH T10CA13ADADD59813580CE9A01EAF683888233B6697F0C7257F8943A5D1C8F7FD6864CC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\platforms\qwindows.dll
- Size 1.0MB
- SHA256 193848a07853f8ababccd97b027622d234f51ca46feadd8c5f10eee415552165
- MD5 18e97e8a6891e77de78f13206b28da23
- SHA1 acf3c9beeef34c4b9b5961a97959e59694d825c4
- SHA512 d08aec98bd25e645bb341dca3844e7ecc3f21fbb6a6e33d61c1f83ec77c32b804941da484c83cf0a0301fc6acaafe93b417bd4f06f51499705384f685a1e0821
- SSDEEP 24576:s/AAEjTe2qcdWbChY8J3X489xetf4sqAUlgDY/DC0H9hwrulC++NpTPTAt0:WS3eGWbqYS/9xetf4sqA6gDY/DC0H9h2
- TLSH T18535F97BE26260DCC46EC2798696A7737831BC1811347E2F9294CB367F91E60637E718
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\combobox-indicator-open-pressed.png
- Size 120B
- SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
- MD5 a9d763e92351af2d6d6fb16b17e36490
- SHA1 c45d83865e7c09c8ad6f790fdcb9640eca207a5e
- SHA512 563f33bafd2fa7263eba83b6285b84d47255d9e23fd3c41ec9684b64bf820723631ac8f162765ba36e6f393c00aaeb73f3c38406693a19d7ae13630c42cd53ad
- TLSH T193B02B92E0912824C7084133120CD550A8115448448900302700D431221E10C0050F33
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 167B
- SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
- MD5 5829742e78fdd6cb8f893903fc814778
- SHA1 e2e3a2ebaea56c3664004e7c5758967a04862d36
- SHA512 7e4ccedbf24842f9f00123415c16e4858ef70b76783358601e5024d22faabe128ac78b314f9846af8c79818363c2f64ab77902e6ee67e2ea802ff76bfc1e9b72
- TLSH T151C08CCA62B15C698EC8456B938620A49CC40C5D28218A638286767C5DB232AA983783
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 177B
- SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
- MD5 7a6d8bc2b7b89f67d0071fd478f03c56
- SHA1 debb609ccbf690c74690b13c424530b5fb6e1293
- SHA512 08939949b87639243e0dff61be03fedb314b76429c93248face3d8d159c3ba925b39405bfb88a70edec038312d0773cf8b770f9aab410df7b169be8ed8d52378
- TLSH T176C08CA763A09E32DE45A8F7C34A184584395D10ABA2029F8068B46F1A34192DA8AA63
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-handle-disabled.png
- Size 442B
- SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
- MD5 34b81abeeef2a5fcceb972f1e3cf2997
- SHA1 e262ba643aace4b66c93842989135209a7b8df85
- SHA512 e575c06e29890e63c6898b31754b419eeb73ff87d7d71d0787a8fcc3d2a30c82cdd83eb94139d9f0f25d9001da9e030d7c06ba1ea2392c191d6cd9e2112fe4f7
- TLSH T1E3F0ABDA6B9F28AA8409581A10A891228C2C1C00BC20FFCB6789B46C1570E9682C410B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 698B
- SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
- MD5 bac5eff99d83f1b5c73fde4cd05c9db9
- SHA1 4824a9748cce1bf329558dc887bac4a509d197b5
- SHA512 8c46a4bd86b8f5e8cc4634b6af3d4f81a5dfe7f9462fcaf6aabc818fb085cb3724508d926c84a0243c69af585c1bf9ad95e02c2ed25df38ba2107815467a18d6
- TLSH T1D90123D7505614D907412E6E436C54204DB80E1C7179B2176288F3FC497591C3CEC0AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 935B
- SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
- MD5 2f2fb4bb6e72e89435b356a6cf44c81e
- SHA1 11f3ee2d3f0cd0dd9002b33399a714d0721abf56
- SHA512 ac4bffda40907144446200808994e35c1a8512d95f3c71fc7bf6ccb41853e7dd44f63424ae1fb592a54677fb6bb3e778335541fdc6f0720b0f990cf72af93128
- TLSH T1B91163DB3918BCD685990A2F156A3211917A5E1D2025DB23A15CB8BB0F70F88A08E88A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-handle-hovered.png
- Size 493B
- SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
- MD5 9848e43810261e6570a4cf83c3752b4c
- SHA1 6c228608e331b9fa2cf9a44e74c7507c19af7d63
- SHA512 4fa4df1cb5e08f14d1e990280e834fface6270ed637ce1cdb1799f1e568e78be9aa7f440af1d2002c5f50e2f22a96199e1fea6d957d996d09cd05e0b2911801f
- TLSH T1BFF0A357321FEC47C904D6E888A84196EA2A7D97354A73B72A267CDC093EFD8C5C9143
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 875B
- SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
- MD5 775918baa819c1f84b2d51392985de66
- SHA1 1dc21dc416d21177ccd58bdbf93596cb5ecc997a
- SHA512 98d4cabd4361dc4e2226e0a2911c918a52e51cd8ce67348d0996dac0607922776b0fc72d6a527e6d46f8c12e71c606d6fa4634db9bbd18cfcc3a4a26d317f42f
- TLSH T1B5114652DA5F1477A9B0300895DD01D0DA611E4035693AF7858A7EE94036ED71C9C3A7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 1KB
- SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
- MD5 5eb1ce92eb912af9509c4277272943b5
- SHA1 77d4586a33e99ab715a628af2ba6adac2aa7e39d
- SHA512 b1865a0eb9fa04138ec132cefc0008f70f5f181c39e4125b694079f23feaee70c92bdc58f9f5d243cba9298785a3bd2eed35638ae4c322b2e1e0303b36b47b7d
- TLSH T1B9210AC634AE983370B15B9EA0CEC196FE862CF3092405A483DD78EA577BF8604681C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-background-up-pressed.png
- Size 317B
- SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
- MD5 d0b3581b97087f79fa2e265737f44eb1
- SHA1 34add1ba94fc3b95c7335ebd9a821487bfd6ca00
- SHA512 68125745776591cc7c9869f938c42c2b19021027aa0c1c08069e4b9cb9c4425389e88134b39558832051ad64762966642c9c07c8d71ff0979b3b5e34f2e8cf64
- TLSH T104E02BF68AD0192FC6CE8FF706680716D9212CEAB813B0145111F4191C30B0EE0DAA05
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 683B
- SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
- MD5 d0e50dd9b89b841d6ef1cd78d2e3d1f6
- SHA1 9018ef9ff9e0f1946be96597b5f344715efaa773
- SHA512 8d09c2d0f369a673c8d9b7092b46b0ad68320a217fd4936133727331e6125ae0129c4986c3503cccca8246058ff7b07e70cb30456f480c6950490fcaa87f4d0d
- TLSH T1B50162FB16C32956B604D0E19850B80C05397F26BE520DAF5538FD2E8472D0FE782A07
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 1KB
- SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
- MD5 16464a005372e7a0092f1721f96a3fb0
- SHA1 900e4a0b3744bd390f89592e236bc7e2358b16d1
- SHA512 1f854ecd6dc27978a54b4ab507c662eea0c2ad4209306b0c568b4ee8a4b2c2d37d5304eb91f180eff43db9d1ba9e1310c72a76c41312fd15de0dd3fede20b67a
- TLSH T1E0218683B5705D2B5971FE17D4284544AED18EAC3F6400EAD1B6312E3679941C35B33D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-icon.png
- Size 118B
- SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
- MD5 ed93c06f00fc6df9f9a60e049ee927df
- SHA1 35443a7419b91d784a93e7e89b686a4d6577dffd
- SHA512 d2b1cd6c0f6f416dd96ee9719357d088355bd9cfdb328ebc1b96d6273cfe4652ccc37e8f66d3b654f3be4b168e881b7b2f6fd8260ca2a115fb15090af2bd8723
- TLSH T16AB09BC5D15159FCCD41317B94491220D9356D2539594FD9551A553714D5045F14130D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 164B
- SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
- MD5 84b1c5af5460f1468c4cd17bfb7d7ffc
- SHA1 a9c6259103be4cde24e9a85e5ebd7f663ba3db97
- SHA512 a7394e01336bee9993ee2603bd7abcd56d86e815e502fab58d52311e998ffa512d3dba9a99bfb9dc7cf935d67b779059ab1b1baf53a6c9ec63c4b05cbdd5ac82
- TLSH T16AC080E01EB7597BF3040177655AD130ADB6471459195614C1DD9D3D984910EC055513
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 211B
- SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
- MD5 26568e7446e134efd965b6b5aa29c8d9
- SHA1 12eb2e9d03ea621dec674ba3c6bfbfc80656dbeb
- SHA512 29d11aa4bdf62dd609b7753a91503d50d589ca6c12761ad4d033f55d746a0f27b582a0737c319f0f5cfc1e2a213084195f81776ca4e1c91546f1b73dfe1741e5
- TLSH T1B3D012F293403C1E89D906B5529C4545C86A4E1D9E3252626418B42C7A3698481F8762
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-up-icon.png
- Size 118B
- SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
- MD5 199bb6520ab013968e74e85504c8544c
- SHA1 b1ebd8627cd955e44261b6f457f0229e17ab4579
- SHA512 543501c68c73ffb92379cf0eaf29e3c9cc9c950bf158a23afd49546df25ba55aa0a85abc4b6b822923bf69558badeb2ac822541530c40829faf7064f29e4eb3d
- TLSH T1F0B09BC16165793DCB16517E9605201485755B6821851768510BF4751417055D094745
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 150B
- SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
- MD5 48ca0e19d6ae84a966cf0a8dd4c1ff47
- SHA1 97cfdbdd03481d1b6ae8283a7bdbbdd70d2347f6
- SHA512 b60068add983d8a3e259feb0734a0d3060bace984d5693da01d3340c64949b7662956605cee90841cb0438e22bbadb9ee9aa5539d76314946e036fff22eb95c0
- TLSH T1A7C08CE26A8BB4A4A88A022660F64320D066842482D18089A954F1F841877495847A03
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
- Size 210B
- SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
- MD5 a53be3f2aac6ceb758f6d7669f5d3c1f
- SHA1 86f8e6e4553dbebcc5048f5ec922da300ecb76a8
- SHA512 4b58e4c8465df0dec6e022a1f91ea481ec50ae97e9ab88deaef59fd1e42e6e0030bf80b597b2c86f2a6d53b7b7b27547a778fb9e53cc225dc3f54f5c97c0fd12
- TLSH T198D012B5B209ADBF869B0753426C8209CC014D280A461156A406722D963140E9096A86
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\combobox-indicator-open-pressed.png
- Size 125B
- SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
- MD5 a189060065cfef46d1bc5a7150b390e5
- SHA1 73f7375aa440ceec13bb16ee7416f1033e6e4400
- SHA512 393cf37bbb82c5b3b5e91f989ef84bab4ca65c907d5bf4b242f0e75a056677fb5cdd55695881f70730d950adac90712e9b6074ba3824f9a42d0aca0a00840c0e
- TLSH T1F4B02BD22230287DCF4D0333490B80008D73323D454101018D05886F251DB0500DCD32
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 171B
- SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
- MD5 c5bf70b32da28a72b9907db3192fdc55
- SHA1 6fd954665a546c517567fc708645c02a33fd3f46
- SHA512 5d7c0924eee3f2b0be4f1cb71a118905131362f5871c2973bde24ba305739db51f541f491421f88beae78f586a3a1b4fee9fbd25c5e2527f6c159fc1b7c5ee35
- TLSH T176C08CE2A220AEE5C1CE003E4289210289EA8D1C3E274102F645D435AAE110E46C679F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 184B
- SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
- MD5 908266ce67b93472e143907653199c82
- SHA1 bba4cf1937a44620899437018fd8b5d6409efd05
- SHA512 7e33945d29a4f6e717e22c5eb32ab8ff9ad7900842bb08112f5ae2212fe8f01be38964cf60e1d5fa643bf998c46d478038f88e1c62c62b64c1f8bfdbd994bd34
- TLSH T170C080C7F7208DF4D598D53DA51C710949161914D936026F15E5D81D4513270855D545
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle-disabled.png
- Size 343B
- SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
- MD5 c193c11c9827a76d682c215d8fc81a2e
- SHA1 9f0b8a87122e7ff62cc3f62a713df9de12778cc5
- SHA512 ec4562cef1a338ed11a6cb9a214698515ff4c02d3ff7b0d7381c7480c63e52ddb50b21059b81fcf982134e210f4ce156306180506594648c5a7dc96726cd90fd
- TLSH T16CE07DB392463C1AC660AD7680185A60D329035A4CA5240F0231A99639F226B90D4D67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 590B
- SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
- MD5 698ffb59b04034eb202468c06c4f0f2b
- SHA1 c4869724b5182e9df7da9712731d0cf83d2655fc
- SHA512 056e014b701556c9af02e53fb268b53a5a2867bbb27d02072ebdfc1424d3bda4df28432d35e9137245d79037788fbfd63eca76ccfa5723adf41fe2a07b12bfb7
- TLSH T144F0C0368B61EA28CE0904B15F148DA18E10945DDA09C23D0DA6EBC99906EBEC58217A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 780B
- SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
- MD5 f0522340c01a7fe94c2774d6664674ad
- SHA1 95fc0e863573a37749d5c8c32461386d2f0e2b6b
- SHA512 d9bd3fe11d905090ea0088517b80f84cb78c608aff7366606dac0a7820d2a0945de1a219d2e94c1b959ea6131539e26096883e5f41579027dd033cd07cca7631
- TLSH T16E01E911C165A4B9CC7C007A5BD43C9075B33048D83BC129931A037431D32D28F411B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle-hovered.png
- Size 513B
- SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
- MD5 320ec974cd5352b0e0ece1548d6f658e
- SHA1 b19afe19067e1f976c34848ed9d760f68e16afbb
- SHA512 40dece1f2ec1640307a315eb6b761f2b01cd2b208c0c1a87c096778bf8d142e826d51f2cbe4351a0048603c875e364332254ef100cbe5b7b106db5a643f0b6ad
- TLSH T102F0758442C4ECB4CF87C5DD508C6924D83E5BDC8D8021A4CE504C126BC72F153E8CB3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
- MD5 c47a860f4d6d50af02b754ecb49956ba
- SHA1 091ff88d16d313ccdec4546372153ce9e4533cae
- SHA512 a69618d04414314b026d81b6d957991df794a1e1257ab54e5fae5ab872933df77163ae148e70baf15abc847d8dd91fe3803d1242b8ba7391d93d9fd13ea616d4
- TLSH T18711252F853B3DB5C1E2057B598E56449C3746ACFA610E51054FE96A9D353A110C3A94
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
- MD5 e9d1a856239067967890d74edd779f93
- SHA1 de390dcf922397ffdb8c1a0afb7ee915266fd404
- SHA512 f2ba5e6558516c3dcde9ae20c954b2ef46cc118934ddb07153924b9f0bf2fbb71aa2508ef300653806d35eb2a6a4a9179de8ca52808558466238f8fe1ca35a6d
- TLSH T1AE31C99982C89C62CC7D4DF30AE814EA1F73154ABD742D65499218D2093B2B95B94A44
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-background-up-pressed.png
- Size 438B
- SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
- MD5 59b236bbfcf80799730a41eb5db6e0d9
- SHA1 db0c6bac65a9cc0f8717447e06e16c92ca0408c6
- SHA512 14b8f4d94c53a23850d5f8414617e9cc6cab23a03f82d0d3f1f17c6e99c5f3a826cc3a4a4f3e448d7cc92a148dbde4eb659efe63d8121049f7d2f16b01938068
- TLSH T115F0FADCC450ACBCF15C743148D444782D760A9FC97941196107AC3C5C3530E0EDBD42
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 992B
- SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
- MD5 1d1c5a016cfd3ea6e3a2057599da0380
- SHA1 80023655baecfc69242efd3dc53c680b681f14a9
- SHA512 7d7165b0ab589e51fac7828300a9731688d0b50e69fe9aa366f364a5e98c14d89e62418cb8a4e9be63271f95debcb09ff4b7e2781c7c8dc5bc7d90eb54f13957
- TLSH T11D1165BF74F974AFDDA49771109818711B66D609255E4C0B930908BCC0F10885554C6B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 1KB
- SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
- MD5 9b74f84a472f3c247473daa320dc7e1a
- SHA1 e9a327d1850b175610700f50bcdba9eaf59d13e8
- SHA512 81b33dadb7213e8a3fb75e69b20e44b36432567aa6915cc4066b12b2ef4e9b094b50f994c48131534b1d416e1a04c9d040c23fac9f4aaab2a5692d98da920484
- TLSH T16731F6EA40215EEAE05F35F960DD08F8A851C03C93517012871FB8786D9A26C299315C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-down-background-up-pressed.png
- Size 83B
- SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
- MD5 abd4a5f439d8f789c9f460945c09fefd
- SHA1 dad89434297a1fcb7baa221f8c924fe1e0df9cfc
- SHA512 d73432e7014978d01ee440de8144ec6d9d62cbc3c8e040de94dc2b7c2aac4c62d5582ac3dea1c1619d7e4bb9582af8a96cdf836aa292149ae3b1bef74f5dfdf0
- TLSH T1D9A012E28F4068A8D09502778526D070C876010100B30008901A8230B540A0010C4302
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 92B
- SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
- MD5 c710613ae2b8f9e620c1663ebb8a8de5
- SHA1 fce48edc3b6183fedf5fc3ff29c68c7afcaea290
- SHA512 c35dc15a92d3df91ba6b0a2c1458b5841f4df5dcf8706566ebd7e72e609b96e7f09c8141cd099a805234318d127e147c21cb58601781b151f6bbdf61a44ab67a
- TLSH T108B012EB56400E28C0A2013B673A8040C4B072078A310104090584305C125440544352
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 101B
- SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
- MD5 27d3ae547e7e8ff9c88e8ca58a201f25
- SHA1 17a828d4ec352b0ae8b6f9aa7623baaa4a920c74
- SHA512 3f55067d9369c367a0da811f61369ab11e05026258fd80a546365b7cac776869e0bf222b79b75fcc7b0deb881e340271e084bd675efb51dd1473a510cf288dff
- TLSH T139B012D793754C3CC33481228B1C8113CB56073CE019415306499C650AB1216C3D8786
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-down-icon.png
- Size 138B
- SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
- MD5 432942b96cec036996b48617c5b38d4a
- SHA1 c783d444d450193cbba5de874ae323fc7395a29f
- SHA512 76d935f697e31f4521c0bfd281931bd9da0b7b1aae75806a3a5fb7c8f920bb80381fdfc988aebe2564c6cfbf07fb25a055ba69975003f79a0e72fe2999cfb9ff
- TLSH T118C02BC033D85DB48E02C37B535FB6815C2C71CC10AC204492087F726D71410E4C43C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 180B
- SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
- MD5 4cb9524e2fd47071b240da4bd839dbf0
- SHA1 6a2e10e02b4d5544159ad40a714c6b66508b7ffc
- SHA512 c093ed39741b06489928c7a3b60c812325403d6d5daf6aeba5dbb739e52d02607679293b41c8911bebb56c8949572373fb5862c8ce36a01b933af23d5d93467c
- TLSH T1D8C0C0F893C3F8F8C9C84531754B900CFF2E1150E300301560C4903C3ED1709214D382
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 215B
- SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
- MD5 f5c20c701ba0afaef155867a3259978f
- SHA1 bd78c42b1fbf4f7ca6ec8415e20358b09b5913d1
- SHA512 a7f553839456af8dcb8dd17ee63011548c0c015756c186c6feba293588ebe7523b8a60a043ae08feb17547b84dd69e5d014c67b79de2b9afcd1a2336eb9fb183
- TLSH T150D080DBFFD47D28D50301F7C15841EDCCE2473D29076A52D1106C395D15A0E8BC2781
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-icon.png
- Size 131B
- SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
- MD5 3340595b829e7ceebc4997ce038e90e9
- SHA1 921e0225ba2ed03be7257fa2b0ae0f958a4a1d5e
- SHA512 ef0b38ebe3b48a3e2808477c5947d44aceed6bfd238dc3cd72814c9ad664113e0b78bce8163bfa517eaaab631696b3c2844abadbb075af4aa1dad259a9e83d21
- TLSH T18DC02B83002CAC38CF4850B74342024CE6701AF011A8412F0013D0310B115ED8048709
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 164B
- SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
- MD5 42fd9607554573669c87044ee3472156
- SHA1 ef6a403c0581dbc7ce08eda9f1f69152242433cc
- SHA512 4f974de0e694ed5761e318fe52f2b3112cc33b86562dd374c607047e47f31b9cccd1ed1cc743492c3042289cdb948ea0865c027cd8c77056f6232942931288df
- TLSH T176C02BEE329C7C34C314153311C59110C531A6DC6082C70B044980321DE204FC1C23D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
- Size 206B
- SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
- MD5 10dafc29a0983b6524f168083824daf8
- SHA1 2f5197f1e9f10ba3c9a1b4c7a1c0aec5e905bb96
- SHA512 5142031c3627f6fb4e99ec899f66e918e55b714dbeb0e4ba46be4926b0161541ce1b29153b26e98cc170875b34cb238d461b82158d50586b14e8d4eac2ca5097
- TLSH T1CED0C0C21314EF91D151443BB07E010A82203C18D44BCE0424A0A40F48F9D80EDC4692
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\Imagine\impl\QuickControls2ImagineStyleImpl.qmltypes
- Size 215B
- SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
- MD5 2006d4b7d0da455aa4c7414653c0018a
- SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
- SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
- TLSH T18ED02352CEECF6A313451C16C44C47E72E53D1544731AD10F05401ED714771C36ABBC5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\qmldir
- Size 650B
- SHA256 003bd12670f67c7780924f104dd72b8ee5fda6a9fe79c63babe59e8989be375e
- MD5 3b2023c67a009d36aaca5f2692ce31a9
- SHA1 da9b39367864eb3742765eb0215da1f352d8de50
- SHA512 dc8e023ba7cca15003325a89bed119d4c21f2f0d267264497bfbbeb0bd184e6bcae1e5caf0259e26a80a5ddacec205fcc4b070127e24fc3e96a4f69e57d08f66
- TLSH T180F0865708FCA7B214756D583302CC6D6BBD2261F67AC20272627BE095D1154DCE3443
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Controls\qtquickcontrols2plugin.dll
- Size 47KB
- SHA256 b4a0213d2688c8dc835ad238ba50404985d4f0ed3959b490629aa9b68fbb248e
- MD5 aed248796586f660ef0bf6a67c230a25
- SHA1 acbc4ece1a015f0a2dbba9d68214dda70a6d8278
- SHA512 aa83bc7aff61db01d44a0e8d2543e4a056576ae108dd72aadd5a9052875e2120e04f7615de502735a6e1d2fb831050000f63d83d542c2fe2ce9c26bc9ba5c2fe
- SSDEEP 768:uHnbwsNSOt3g57tUtptIBzieO94dc8UG5ltsxgKxnVbGYJdiNO4:uHksJt3g57tUtptIzzOmc8T5LsxgKxn2
- TLSH T15A233B2FA35211A4D09AD9BC81DA9333BC3078147537AA7F5714CA766F91BB0E63A710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Window\qmldir
- Size 213B
- SHA256 cf518c3574e25f91acaec7ad8831e28c18fccfe15411672ea56809b2eb94077c
- MD5 94ebe16c3ede17a27d79716cf1b00d3c
- SHA1 34f50446b26c05a86018c2fe587d0cecdeb7db29
- SHA512 f19b2326600b902bb124a8c5b07d70ac2e6b6f65a02be9bf7f95b7641e9c44ca3faaf3a409b5e47b4203fcd1fa62eb49ca4f09eee0e95c7806428e58971ade6a
- TLSH T12AD0A79148DD614141301C0483072BBCB32041A06990D304B23802B0FC81C0352D65F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\Window\quickwindowplugin.dll
- Size 31KB
- SHA256 20694a713d2f1e712a2e33205dc7488996eb8aada6298d9ea6a46ef8d3604ad2
- MD5 96a57a2e06fa8faf904f5a47a0eab56b
- SHA1 f596964c0dcdb92497b60c16dfd858d77575bec2
- SHA512 2dc51ee2f0249a198848121ad35517f07effffb063f951af2b0eeff462bf45ad50fad5e0a4ec3eee66cf8b192a4fe50b15b86a6f05b02162923aa9f0366aceaf
- SSDEEP 384:RDqlRJ9w2+2MBS+RgE1xptAes/UG5nO7bGVEFP27xWkVbGW/JrZWtaP30b9NfNIY:RA/n+qmtiUG5ibOgKxnVbGYJ9/PYNd
- TLSH T1FAE24C4F17955A68E4AECA3650DAC333BCF4B9717B63C93A0130C539ADB0760B739266
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\qmldir
- Size 215B
- SHA256 137c386f9b2ba49fb3a3417b55096f6f1bd15a794a98613a862b490a6fe4fa79
- MD5 229c819d9d388357c948f58e96513964
- SHA1 9580844569cb3de2d0f728695d9c83c6713d5c74
- SHA512 61fb9d95be728ea658b31b137216ca2db2a52ae4523ebac1f7bd7b20fdfde4442b6570b03c7defe9047a96905227cffd0160a6e3f42940e27ad58dbf3b3383ca
- TLSH T1B9D0A762448C524329755AC5600598EE742853D2A6A0D24576B402F0DC40E7599E2596
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\SakuraCat VPN\qml\QtQuick\qtquick2plugin.dll
- Size 30KB
- SHA256 cf37a765fcadc6ba58055943211442525eb180920829660ad3431acfc97843f3
- MD5 c71bfe256eb2f271e080c9d343d1183a
- SHA1 d669251c6b15ad1d2cfdabb1f4326cd413e21cd5
- SHA512 06d283a8b3c530381f52e48e00ec5ef2927e68fb08de2c3fb3daa23733329d2f3f1076a6002280da55ebe8ecb31e82f5d53320226bd2c9eed359fac22114ba73
- SSDEEP 384:pvboq9GpIq2Mv3SgtOds/UG5COq51EFP27xWkVbGW/JrZWf19NfNKX:pkrIWCZUUG5wrgKxnVbGYJduN0
- TLSH T12AE24B8B12A956E1E4DECA3551DAD333BD74B8617363C87E0234C731AEB07607B35629
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\singbox.dll
- Size 34.4MB
- SHA256 54985cb1f775c1340c176b44d1d09d95b80d1718bf22575aa40285343daf6400
- MD5 606158d483b53ab74b653491b2359444
- SHA1 6a65e2c7dfd0629a3209621d3435a2be785c1dd6
- SHA512 5ceeaf008cb649cdfaf40461a7e550bb543101147f700d28828ac7b49c6e1a49b4eabd9810cd88fec18ce6e62da05e2ed1f05325bc6c7dbe2ced6993b05373f4
- SSDEEP 393216:dQgXhaaEvbAyPOqQqUk0LdeLkkNSCa9a9k:dQgXhaayMyPJ5Uk0LdeLkkNt9k
- TLSH T1D2873A47F85545E8C5A9D934C5669222BB70BC484B30B7D72BA0F7186E72BF0A7FA310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\sqldrivers\qsqlite.dll
- Size 1.4MB
- SHA256 4ceb3dfd8f9d5d113b33ffeb58c3c90ae711bece01ea5bbcef772576ac2d34d2
- MD5 81e5f5d3b51d448ce4e6d27b76ce0808
- SHA1 ff425dddd61ee597dffa5b8916013ee475bf4174
- SHA512 673295f1a9859ba56537c13fce1e6da1538af66880fb0ea46d75ba12026db4a1c9e584fedb5491be126db6b5130012a13b7a0af2abd0fa20f1db5f32d42797ad
- SSDEEP 24576:4f6+W5m0Jhdto9+uXa1XsQdUG4kisagTfd9CLNtc02dj:N+W5m0Jhdto9fYcQqXkirKf7CLN52Z
- TLSH T15E655C57E2A320ECC52FC274475BA773B831B82511347EBF5994CB312E52E60676EB28
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\sqldrivers\qsqlmimer.dll
- Size 93KB
- SHA256 8b0d6303ea3f272343e3c7fac4ca2054dafade8e77374c73668e5ca5ac6aa685
- MD5 b932dac774e0012f2d97161fd9b235ee
- SHA1 cec5d694f55c94f076b503e60911f6311ec067af
- SHA512 268132e0954d7944f968de181c79f71fcf8900b025cbe1670cf0745dc0069518d490d313421fa4975774cd006b2bff824f58234905fde419e21f148cf4b4f3c3
- SSDEEP 1536:PczJoFk/dm6zjjLEjwUGm/m7vBOELUpITHuxagKxngGR:0zJoi/dhzjb8/GRTOx3K1
- TLSH T1C3931A1AF3B161ACC56DC07899CA8732BB31782531316B6E5754DA366FD1F20BE38B24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\sqldrivers\qsqlodbc.dll
- Size 130KB
- SHA256 7193b471964f8e6cc5fae2cdd122b450e3f9e9b0417f868ed0e66678caee159e
- MD5 3880a39c6580fddd9f9866a4e34adc94
- SHA1 962a04f6070bbf94f60670e0129e71fdd4974e52
- SHA512 f44b69e90abad8b24b982adf8017e9cd193f0b04939dc43261038ddb95adeb09f758c30fe940f2f95f2e68b4899c57903af509f5bce39656ff98e75ed8ed8d4a
- SSDEEP 3072:dH3dY8ePCxh5PzZ6n4EGEjfohMWTq6KLn:dFHzZ6n4ZEMhrTEz
- TLSH T15DD30956F26220FCC0ABC67886CAA632B9327C9813367A6B4754DF312F51F64B63D714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\sqldrivers\qsqlpsql.dll
- Size 104KB
- SHA256 bf77a4a2be2f21302bd731e84cd04a73e186852279f0e3bacc5a672d1c36e51d
- MD5 0f664b21e8eab81f4d9df8c90875ba1c
- SHA1 8f204aff952ccbce8e6f0ace0180b87f4812e187
- SHA512 b658c9e2e9f40f340a134ca67dcc617999dce620911e7b9692cd008d3ff9faf6f9bb89b28be64bbdcefd8646d3dfdf3f649bba97a5cea259a39621bf776422c6
- SSDEEP 1536:eDovyAqNrydS0i7aKX2CDpy/qSygEVrXOd7wjz1yp75HgiimTsDcIygKxngGAI:Wr0aGR/qSyzrzjzG71T6H/KsI
- TLSH T188A32C27B26550ACD1EAC17C85DA9632AF327C505230776E9354DA3A3F60F20BE3CB65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\styles\qmodernwindowsstyle.dll
- Size 234KB
- SHA256 6bf6dbac5921260b8227b51d79f774b97de3fd98c8f4d182f28e9a3bb6aab3ee
- MD5 8579cd68734aaf31331b291185b9436f
- SHA1 278bc4bf99b6f37a54bf1fe3b64c1757f2a986c8
- SHA512 af86b8d61000ca57e2416de6fe13f2c507d335622097bd9ee58c1f626de7f9931bf4f789951fa9b6b939904c06f5962a1044ca7d7a0137d2bab0b0dbc6a3733d
- SSDEEP 3072:PC2LRciRp7DRFjO/wZNTH3cG1/WkuUgFLfwbquFCECsTxJgf3oKW:NpRFi4n3BWkuUgFzwbqubTeW
- TLSH T17C342C07F2925CE8DC5BC57C42DBE2B3B5B23C184674FA2B979096723E53E607229706
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\tls\qcertonlybackend.dll
- Size 101KB
- SHA256 b32cf4af957248135607648f6538d169bda26765f803213457112d90b8dc7811
- MD5 dcd8cf537cae030560fe5019a89fc94d
- SHA1 c088fef5cc91c91fe061d934d9f2c7e2b6d9df56
- SHA512 9dac0a1a28c5ff56941f69cc52c2c78f3a20b7a1c1a461acef95704e844bb55cf85b5ffe2b1240e69b11eb2403d79da4cc83b881c0e2c894577dc8b96c518d58
- SSDEEP 1536:TNY3sn3n19VezvhWmFiWUs8OKvIOXvAwNpa6SFY9rozv2STTlu9NWuoBNugKxngd:T7wWOysYqwNxKY9mlT7rKC
- TLSH T1BEA31927B29120FCD4AEC53C56DAE233BA71B85C21312B2E5754EA322E51E706F7D709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\tls\qschannelbackend.dll
- Size 251KB
- SHA256 7d5a708541a5359c1738bf0d9c29d1006c57871a9e15e8aab6e7904f317d14a8
- MD5 d134d0ad37b46cfa9826b9cd4197d012
- SHA1 9cc6fd392374a7e848362329d9142526ad7588cb
- SHA512 f10cdd3386e0e3f2b8f19c72a9ea953418c3f40de886888c1f58d052376ee2eaa9e68df0f77c1e15ccad35d16ecb70e6e4cefcd4b1a37dc7745a41caa486a80b
- SSDEEP 3072:lV7vbK8Ns1jEjDsNRcFI3HmJFVUy22krkZv6R0Xc5WzwME0vDK7xicTJIdK1:lV7m8Ns1cFzzf22kIZSRt5iDK7TTJ11
- TLSH T1E744F733E26224ECD46AC17C8697E233A971781D62347A5F6B94CF323F81E60A36D745
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\SakuraCat VPN\translations\qt_en.qm
- Size 33B
- SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
- MD5 aaea7ba475c961f941d0a23488457beb
- SHA1 2bf0054002c8f7d85dd080df332553bf9b3a8e26
- SHA512 5b408c36c8f93f71e73e3d3b1c0c2ad699e92a6088604b8adf8e588e8a75fc3fc92828199b7f00f5b05b224ae819220d07e56d610a76a267594870bec77172be
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
- Size 1KB
- SHA256 bcf8325db72c06bb7f6a8df3c4648a150d766a1857214c6b533c467029424ce8
- MD5 e6bcee6109b84febc5ffa8c6d9b2a547
- SHA1 eb5de5de4575f11fea9fb8a5f72aee1c8b5b3dab
- SHA512 3081253140a770e4c68087b76b905286143feb2fbafa1e0b284b50f69ec736153f85fad9305d7e7f1309d98cf470edea4ab89da3941e068631116d03cccf5333
- TLSH T1C6115733B3CC8624CC9A403650CEAC1036B587DB509EDF6BBB84D145B83F599DE61260
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
- Size 1KB
- SHA256 d88dd9fa42a06b3318f7d1edbe206b8e71a885579ef2dc68128447912841a5b8
- MD5 0a1b0cd037edfa69c1b163487eddf1aa
- SHA1 382e078f387e2c108126b606617ffa9d4a244078
- SHA512 c20e2c1fe47d29e8f817d506a41ade67b813a0940e906579c4e1c7f13e499ba30143ee99ab746208cdc5458225315c7a1e34cc96036bbf5f44a272b6d810d5b8
- TLSH T16C115733B3CC8724C89A403650CEAC1036B587DB509ECE6BBB84D144B43F699DE61260
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_jodupe55.3qv.ps1
- Size 60B
- SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
- MD5 d17fe0a3f47be24a6453e9ef58c94641
- SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
- SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
- TLSH T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\sakuracat\sakuracat.ini.lock
- Size 66B
- SHA256 268df60c8eb2bab2757204d4beda06d6402b4c6e1b9bc2f3beaf4e9cd8d6222e
- MD5 762eec2c50fa2271f985c2529cfed25b
- SHA1 3834fe0d51c9a47e74a272005c073068669f225d
- SHA512 0456bae2342efc816b4254702456af1240fcf62bb12c2d68a4ad3baa8455b59ecbbf7a21155c6254decc577013fd10886981b35cdf2b4fec4949fc77763cc6f6
- TLSH T1E7A02203028023CC222320B0BCF0C2A22222C00C30B82280E8080EC0220A3EF203A00F
- MD5 SHA1 SHA512 TLSH