Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
RazerSynapseInstaller.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
RazerSynapseInstaller.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
General
- Target RazerSynapseInstaller.exe
- Size 14.2MB
- Sample260804-w129msxcph
- SHA256 7abb81c5c5955427cdd83955204e99fa12a4d3c21b92ee6a0194363f0296e17b
- MD5 d44806e9be822b1b02830a2ffad96230
- SHA1 88524a31380d57f24382bf62a36cefebf8ef7068
- SHA512 f26077cb235902b544d956347b381522898023e531e781e8fb0e3c73c668f8f746f6ffd1d628e14425aba0138059a32168c825bea7d21bc03b852edaf1199a69
- SSDEEP 393216:19DEkf825KsN6f35HvPhSxByUWARAYmg5ovb:Ej3k1LR6g5ovb
- TLSH T10DE633472BF44E17D46BC370C8B586A582F67461EB3DCBCB9740156E2A533C8AA21B4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Control Panel\International\Geo\Nation RazerInstaller.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-mezpg3lf.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.CodeDom.dll RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.Net.Http.WinHttpHandler.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-aw4p4kvd.tmp RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Chroma_usp_1.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\SophieLite_toast_uninstall.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\GameBooster2_usp_1.png RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.Abstractions.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-k2sznyqd.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-h32wxl3l.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.Composition.AttributedModel.dll RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Diagnostics.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-hadm3pv3.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-510aflnk.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.IO.FileSystem.AccessControl.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-5llloylv.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-4dpk2mmt.tmp RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\GameBooster2_toast_default.png RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-zl1vlef0.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-wteedjm5.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Hub.dll.config RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.Runtime.CompilerServices.Unsafe.dll RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\systems.json RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\AWSSDK.Core.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-uh3hdj1v.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\PatchExceptionalEID.json RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-man4rdjo.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-rbi15rmh.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-y5v1was2.tmp RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Anne_usp_1.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Chroma_usp_3.png RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-3jpywbdt.tmp RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-1xdf2kmd.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\InstallerConfiguration.xml RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-4avqk4wo.tmp RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\MediaCache\GameBooster2_media_1.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\Sophie.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\MediaCache\Natalie_media_1.png RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\BLEConnectWrapper.dll RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\GameBooster2_usp_2.png RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-r2pto0hh.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.ShellScalingApi.dll RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Razer.Analytics.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-e5fllerr.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.Text.Encoding.CodePages.dll RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\MediaCache\Sequoia_media_1.mp4 RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Alisha_usp_1.png RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\RazerInstaller.exe RazerSynapseInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Mvvm.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-0qt2zjgj.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.Abstractions.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-y3fcx2bg.tmp RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\Anne_toast_default.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\Chroma_toast_default.png RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-25sd00oi.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Serilog.Sinks.Console.dll RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\Alisha.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Sophie_usp_2.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppIconCache\Natalie_toast_default.png RazerInstaller.exe File created C:\Windows\installer\Razer\installer2\AppUspCache\Natalie_usp_2.png RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Humanizer.dll RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\Microsoft.Bcl.AsyncInterfaces.dll RazerInstaller.exe File created C:\Windows\Installer\Razer\Installer2\App\DotNetZip-ou5tz4hk.tmp RazerInstaller.exe File opened for modification C:\Windows\Installer\Razer\Installer2\App\System.Buffers.dll RazerInstaller.exe - Executes dropped EXE 2 IoCs
pid Process 5048 RazerInstaller.exe 4640 RazerInstaller.exe - Loads dropped DLL 64 IoCs
pid Process 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe 4640 RazerInstaller.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language RazerSynapseInstaller.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language RazerInstaller.exe - Enumerates system info in registry 2 TTPs 4 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer RazerInstaller.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName RazerInstaller.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU RazerInstaller.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS RazerInstaller.exe - Modifies registry class 18 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\WOW6432Node\CLSID RazerInstaller.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId RazerInstaller.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\DisplayName = "Razer Installer" RazerInstaller.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\WOW6432Node RazerInstaller.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32\ = "\"C:\\Windows\\Installer\\Razer\\Installer2\\App\\RazerInstaller.exe\" -ToastActivated" RazerInstaller.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4} RazerInstaller.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32\ = "\"C:\\Windows\\Installer\\Razer\\Installer2\\App\\RazerInstaller.exe\" -ToastActivated" RazerInstaller.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\AppId = "{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}" RazerInstaller.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe RazerInstaller.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32 RazerInstaller.exe Key created \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4} RazerInstaller.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\RunAs = "Interactive User" RazerInstaller.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\IconUri = "C:\\Users\\Admin\\AppData\\Local\\ToastNotificationManagerCompat\\Apps\\90B626F9-3E0D-EFCA-4B8D-16DDF2B1F1F4\\Icon.png" RazerInstaller.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\IconBackgroundColor = "FFDDDDDD" RazerInstaller.exe Set value (int) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\Has7.0.1Fix = "1" RazerInstaller.exe Set value (str) \REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\CustomActivator = "{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}" RazerInstaller.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32 RazerInstaller.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4} RazerInstaller.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 RazerInstaller.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 RazerInstaller.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 RazerInstaller.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 RazerInstaller.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 RazerInstaller.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5048 RazerInstaller.exe 4640 RazerInstaller.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 5048 RazerInstaller.exe Token: SeDebugPrivilege 4640 RazerInstaller.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 4908 wrote to memory of 5048 4908 RazerSynapseInstaller.exe 85 PID 4908 wrote to memory of 4640 4908 RazerSynapseInstaller.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\RazerSynapseInstaller.exe"C:\Users\Admin\AppData\Local\Temp\RazerSynapseInstaller.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4908 -
C:\Windows\Installer\Razer\Installer2\RazerInstaller.exeC:\Windows\Installer\Razer\Installer2\RazerInstaller.exe2⤵
- Drops file in Windows directory
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5048
-
-
C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exeC:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe C:\Users\Admin\AppData\Local\Temp\RazerSynapseInstaller.exe /name RazerSynapseInstaller2⤵
- Checks computer location settings
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4640
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Installer\Razer\Installer2\App\AWSSDK.Core.dll
- Size 2.2MB
- SHA256 b724f082c2745f5cf6ec2449c2911ac54cccc7f53412a6baae1df42f95e7e4c7
- MD5 e9868b9fd8511d4a28aa5ec2319f06f5
- SHA1 7e6bbceb477cbd32233c0d03a6ffa436cd60ecce
- SHA512 408c3ffdd778c4dc9b2b947d57b4821d5210d6b647d816df42c4fae8de30987fadf0a2504284aa02e732662c43eec03cbe3335371d4f313f304322ab355f46dc
- SSDEEP 12288:UxcBcK4pYvMMuQ3GkJTeL+BBkpiCPiBgNT8o/oxstzDVqY+JRkfXlTg3OhcCtM/V:/34pYvHxGKT6xplNQo/oxstzDVkkU
- TLSH T193B5A418C5F04EB2E1EA313D9C3A0183B574A19BAFB86E5C7F0C950D4F0AB595CA97E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\AWSSDK.Kinesis.dll
- Size 171KB
- SHA256 87d617a97dee7148f1b90d16c57f1a0f6c7447d427c4556352820bbf14068c92
- MD5 99ac6ade65a07c48e0f618ae1fe9d07b
- SHA1 ce6e92ad57e61712d73682b061263634a0ca3078
- SHA512 0e65367657ed68db85012af40dff0329e9a94c287e8f0a2acf6a72bd1edb5ec1a436a5c71836ca23b3b049a783dc035ef6950731219d44983cf92cf7b62483bd
- SSDEEP 3072:srmIDzXDiqzIIQgoQErSw+UG8tsyuA9C9FZROXS/B5/p3I:srpPDiqzIIQgoQErSwhXtsPA9C9FQSnK
- TLSH T1ED042C116A6E471AC6FD933DB8B4891442B4FD2E2D51D2AE1F84F0DA18E7F508B207B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\AllSystems.json
- Size 707B
- SHA256 ae1fdc5f37e9a8382dc4e114f633612dbee04ecbb46ab86c0d1a39bdd8c3e527
- MD5 60174d20c177137f40f105103494955d
- SHA1 9f416a3648838b6b22a51f6b77ebb4a40af282cf
- SHA512 477378dd6533b32a5ae3b069b3eba9c097d53f5c5aa827ba2111f52f38eada730000df6e14f0d4c1950798d4bbd66946cfcff76468e4edab3ecc553e29aab161
- TLSH T1DC019BF8B5D208DD1AA806843ED01B8DD8876F8C10B00F1E70BD1B4CBA80EA9696136D
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\BLEConnect.dll
- Size 45KB
- SHA256 bd882b04e425ff50f6b95ae0a7c3c621063cb31c202af38da8b13ac4e17c19f2
- MD5 ba549837eca0ce18e7c0b3bbe0cb2292
- SHA1 d48a8fd14467fb211f52735e5e92ad4f12f07cee
- SHA512 21f6f6b01a00c592ffbf1c4e5a05609abdf9a0a91ae1a55d648f76c206a6d35f18d4acd66e4d00bc186de825402a102b630505091341bfbfb17e4273ba7e693e
- SSDEEP 768:vBYtgSk8JJUmLIPLriCfdz3BB2CEpYinAMxsMu5ktX:vutH1JczriaJRBW7HxsCtX
- TLSH T1A6234B0163DD8913EAEF2DFE2CA452564B32AB072524F7CA0CCDE0E56A567C01D593EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\BLEConnectWrapper.dll
- Size 183KB
- SHA256 315014358c49304953e4d50009b3295dd1350fa995477b3f17163282cfb7d807
- MD5 65611ed7ce210777ba8ae786a5d1a886
- SHA1 cb685859d0c4b616fbfda578d3af8369ca2e3ef4
- SHA512 f36256071f9a47ceb15dc57004f2a74bdc377582fe20317175181060ccc2d49f58ef71627eaacdd775946e40e531ed8941a2fec56a5c45323002fd216f7ddcd5
- SSDEEP 3072:Gp4bHP7pBO2xKIr6/uSGSar8RNUhtDhEfiHvm24zowbqc8QIt5i9RoelLwm2AM2:Gp4bHP7W2emSbC8RNUhBhEfiHvm24zoI
- TLSH T1FF043A2716E93EE6C4BA2271737387C4D32DEC602792E78E56D64192C4BC35BB152BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Common.dll
- Size 47KB
- SHA256 f8f24eb3b81aaeb2351872d352abd5ed2b806e364c94df03e1c8bc7687adfdd2
- MD5 6511120a6fc0afbf5071e8edb5b3a366
- SHA1 d9907e0386f19d7d205ef8b9473479d5c4e6b339
- SHA512 566eafdf64addd93ed05a814e9506ed143d9b8ede908a7127668dc0d1eef0c7b67de8209ecb5955f6158c62c8575d1b55347e12df744fad31d3f52175325f07e
- SSDEEP 768:d64AdaMttgYFp8RANdPY8F22EX5Yiz5ALV:d6bdaMEgdPij7a
- TLSH T135235C254BD43A13CE6B4E35B8E05613AD71F6826C52CE97214DC3588F633452BA8FBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Diagnostics.dll
- Size 109KB
- SHA256 ec40472e3d72584d5b3aee0fc157c44e94a5b218ff47def153f7f6e6488f8080
- MD5 c59d70cd3d9da4dba523944f4a467af6
- SHA1 05f69e43605d8c40b46c9bf7a5b645fca9143a06
- SHA512 a7b6913eda25ab654dc3034db4973b4f89d86aadb948618b73d5aef41df42cb42784dfdc1efe4f6af0759359c215fbe836c9a5d8b6886c2f93546f49fc9e78c6
- SSDEEP 1536:29qdD0FlBRvd9X0c1tKSNwOr4/s7KctFZhPmA97YB:PDEF9EctKSNwOrbKAbhP1Q
- TLSH T15FB3E75657BCA521C3FB593048F17400EA726883F4EFA35E358CE4E42A12768B6E73D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Mvvm.dll
- Size 124KB
- SHA256 6867b87c92701a8af5cb4d05f18bb87b02b2daff29ee45f348579f815f22ed14
- MD5 1de2d85afd7affc3217924fa0f54af82
- SHA1 94ece8dcaae27b8788455d3759d070771206992e
- SHA512 5af0cba5a53ce7b00d97f19ce5273ed3a9d52e7605d5ef452e9155ff971549cd9457e862503fc12aa7533a4eabf3f7f566ccd5a3284f0885e4cc9dcfbe7d2842
- SSDEEP 3072:p+c+yfwDziGuqRGia5iKYR2l+EaXcw+jP0N:p+8wHiGuri8iI+cY
- TLSH T166C37D0263E85E13EAFF0F7574A8504A8F72F607B932E39A698C93F405827915D533B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Humanizer.dll
- Size 313KB
- SHA256 9770f2a1c8da1ef083aaca871460533399350a276b65b67c8d4f816ce49fa319
- MD5 f308d8a14617b2aebabe6e529248e999
- SHA1 2485169d33345755fb69c960b58bbfc995a8d41f
- SHA512 529495d73bec7475c2a7fa7b844437cb1f136244e46e39ca02c47474760418320e9f9972557e6d1da96f7b50d99fe4e6b6ffc1ec524e3ade73d7152f7126e6a8
- SSDEEP 6144:WXULlyavR3au9F97QjF9f/QnsdcDePXgmT0jH5SS:xXwWDef2SS
- TLSH T197644CD817EC5811FBFE53B0E8B412108176B88E2953E74E14EDB0F80A37B699D857B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\InstallerConfiguration.xml
- Size 379B
- SHA256 ded4476e9983cd65a237ed6259fd6dd9d4b7ab0d9117af527d16b201cbe06486
- MD5 441363454ec3beaf9806db321d967e7f
- SHA1 d89687744eb1e07ab8497b625b2d7a8d1a37cb05
- SHA512 467610de667009c74da3b4ec3dd346063715194b0b3f7b60cc77bcd9ee57507b1a6a3cf689216e022a6b072ca053104601793d0ac326bf5c3c30a34c064267c4
- TLSH T118E09249EB07CE0D59C88316A32DC55D3719620584F064D4BCBF086B3FC26A82A1A035
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Bcl.AsyncInterfaces.dll
- Size 37KB
- SHA256 7870598ae9faef4edaec62ead9340ec01366c598f6b7c9d35ddc71e34b81313b
- MD5 ba6d51549455d232e33434087a81fc83
- SHA1 bcb4bd0cf9f7de46736935bc1b9586eb1a7d50a9
- SHA512 7b6efc49f2d1d4f41fc19f549c73f9ef3a9324c720af25657db0b835b69a4cb1345224c55ab073941c5b9ec69e36147c48f27bea08273aeb3b4a950a35506d6f
- SSDEEP 768:TulwGBhMQVv2wK5TdcBXFClIxEpw9z/M5Yif+W5AL2:CwiPtKpdcBViCEp4ze7f+Y
- TLSH T158038D2787582207CE6F6E70F4E4D6572E36E38A2C12D6EB214CE5951F473827B35238
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.Abstractions.dll
- Size 42KB
- SHA256 5a3d86003d924d2848e283813c7a3071bedb40d19336daca2a05d7df87f1793c
- MD5 f912129d6dcf5b993d247627e2944192
- SHA1 0084554890ecb303d5443ec07b3008a85d65291e
- SHA512 227765c84d22ca3709eca55085a72d4d952b5e0de725fc4d10421af208b6301011c9af64161a602f4022a1228c95d81e55e6cb1ab3ede9dad2e7722aa11e2c02
- SSDEEP 768:+EOEDAzHh/SolpZg7Wtr9zrnyKRqu5YiP5ALg:+bzYofZg7WtBzeMX7J
- TLSH T1EF137C2243AC432ACE7F0F70F8E4D8112E79D39A7812DAAA655EE1451F673C4536137E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.CommandLine.dll
- Size 39KB
- SHA256 12e0ff9c8edb3cb3e5d2f769eb8dc55901f8132c8af80a0581b1e75734bd8279
- MD5 33bca2f5e11ea796a54c7376d39f9765
- SHA1 215935f374ef0fe28f9c06e4454e4f8337078db4
- SHA512 64b99aadf5618b7e38888f1133005a17a0093c6e61b87b116b8ac1e1cbcc6ee988c839dfb3b4f60ef83a110db3693a8e9671f4393e8f16ef2b27a94129e246da
- SSDEEP 384:efcTDILvj1Q2swwkurUjd5oIW9jnW1IX6HRN7OWuR9zx1MRHQIYi/qCNay8RbmL1:SCijC2swwlLX+IWOWy9zC5YixA5AL1
- TLSH T172037C7247BC8716DD7B1D30BAF4E5222E39A7D22811D9EA654DE0090F67381AEB133D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.dll
- Size 58KB
- SHA256 85910a5b77e942c909f8fc741df4f445f1f2991e0357863ef3d4714b0c34d70b
- MD5 6c6ebb83d5cc56d38f6c36b42aa45a97
- SHA1 c1e83801db2cdf31156702456a1cd138618dd814
- SHA512 45193bc05288699ea74414b34694d6bb6a31f4c7216f5499b3b796e2c62fe984c85fb2fdd989c94fdf808d54f16475dc712d0aaf247e993ad21a0a61e9250928
- SSDEEP 768:+JuSggyqMPGswGi1n8COkEW1ajM2B1nAwZ+Rh/pvMWiK9zI5Yip5ALb:+JurgyqMPedJQjuwOhhvMWnz67S
- TLSH T171436C6243BC4B27CEBF1EB1F5E4A9161F39D2873541E76E599DF09909B73801A0223B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 74KB
- SHA256 450b936632439581489eb99c065955ddaff0e9b8bde43781b8cef6d945cc21a9
- MD5 0484e56f391f0824348eaa60fe2d44fc
- SHA1 66936ec002b6d03e85cd8eb27a5acc5014ff09e6
- SHA512 c4a9f4b4c60a52325e59b49de94057779068e2d399c8334fb8d0b91ae0c40e7be09c74b9dce1641f9e08b6b06f79ffb49a13e3616e35544a652d7b1c4cce155d
- SSDEEP 1536:26DVJaJ3loULUr8nKvhPhwBzgj1vWbwC4dezJe7rq:26DHawULUoKv/wRgxvlIwvq
- TLSH T17E734C6523FC8B16CBEE0A70B8B395109F35FE476103DB0E264DD0A516B3FC856A17A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.dll
- Size 106KB
- SHA256 49837dda93cbe70e22a86ea8712ed2c1f911f558b579806026784aa9b03ac822
- MD5 8e414557f244b455c6e233f91d6c155e
- SHA1 9ba13584cb701c890dc6734e2847981d784b561e
- SHA512 f8a805598f040dfbf890a6b1df5d88cf9f91936ac34398cf425a4461817959be5bc1f14970ceacdab9cdd9f34f85243f6c05f96f0747c7056ddf191eac94cd9e
- SSDEEP 3072:I6Mn89dsOdS+mm7WY7u1hIatvbpwGqvAwCn+d:I6MEdsOA+J7JoOatvNJxw5
- TLSH T1E2B38D3963FC8B26D7DB1D74A87451150F75E6CA7002E36D1E88A45E1A93FC30A633B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Http.dll
- Size 93KB
- SHA256 6594fb9ec682c74da5453e35810f77f7c73ddd0ae36c8b8f1098d1d062aadd2a
- MD5 ec8d929f6460a4e853eaef25242fe891
- SHA1 8755fa73edc1f5f60800e075b4fe0d3dbbd76350
- SHA512 4c8836294633f5871c001c9b460e385d22454378a94a1d98e8eb720ba4864e20d836675c7d9178e2fc022e191fcd842a56911204467bc78d83ad48610b95aab7
- SSDEEP 1536:pkb05kjwdUhHhmIQD8ECTkrkwYd9iLwYkc5w3izzB3oKxnWpDnzEcp78859:pzqY3mQrkwYd9iLwRWlnonJDX
- TLSH T1B9936C1263EC0217CFBB5A74F8B4E1168F36FAC22612F79A698D70DD0D627D19B50326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Logging.Abstractions.dll
- Size 79KB
- SHA256 1b9e857edf250978f2edd9125b110b618e0bfab2722e0bce012af3ca2cab01a0
- MD5 fa2c8dce7b54b77222598bf28595aaa8
- SHA1 dd9e3bccbc0c83c6f3a152efb24caaea14e411eb
- SHA512 065fcbb6d3959279b00f64f453fb7d9957c94c798bf44bf279789cd50ea55afecc316b6706f4b6433cf2ec62a4befca80eaa495f12a7b7cf343b826cddcb607b
- SSDEEP 1536:sALG9rlWRGGoCjoX1+0EM+Vr2iQ6ezP7oa:sAirYRGGo4pM22AeDEa
- TLSH T1AF837C2227EC0723CE7E5D71F0A4AA526B39C3A23146D3976ACCF52538AB7C45E41376
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Logging.dll
- Size 65KB
- SHA256 d490a83df270887df465a5fea8a268ea83bb13c5ad3d303aa6fb8278b7b998c0
- MD5 3018e83b6e89ec82b26a63fd3c5dc9ec
- SHA1 e4ed262b7530cf97485fca28894a7448aa586d0d
- SHA512 f6325062c4c280f00d32625b6ada312ff3824275c45e212140bf3842878f3ffb510e5c509af0da87cee23184e0d5b1bf8adb45a972fd3c4a11bf909949c5737e
- SSDEEP 768:IN35uJQoGEJSqIV2py9vS+c2tDjZ7tBITsJWTZl9zxEx5Yigq5AL21:INcKoDJSXsE9zZQTsJW93zxE/73
- TLSH T18A537C1247AC4767DE6F1E34F8E499458F36D78A3012E7A76ECCF4E006A37805A6127B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Options.dll
- Size 79KB
- SHA256 5452796a4d2181ad7cef0fabc614c2f3f04046c33deea33c6b9953fe7175e32b
- MD5 c4f7abcfc475ce79e5c2f1ca961316b0
- SHA1 58c1df647db41f5ff4a90ec00414f33573f6a130
- SHA512 919271aae281774b82e352c9bec78eae52b54152b8e30da6540400759cd299a6148b5715feb51d7c62886cf14d5c2c81f559e4c9ad8031169b627ca352e73c47
- SSDEEP 1536:tTOFzhcAI4rmPTM8BoeoGkhM9irkdyZ6ljs6AfSWppzB7j:tTGzhnlsTPBoeoGkVkdEoPAfSAlH
- TLSH T117836E138A949717CEAF8E71B8E8A5370F35D3077502E7BF428CF98429533496AA5738
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Primitives.dll
- Size 61KB
- SHA256 18fa818add0cfaec013cb33e0ad3ffb44fe9851c63c0ef4cb02eb94564696ebf
- MD5 e65f2e9d0f46745f309c544f06c94692
- SHA1 a1bfb7a4b440fac4fef2a7c2864147e781e4bd60
- SHA512 cee3901b33f307312b0a96d3dbef7c6e0c7a984e95f3a2edd96d949ab1205f45d790df17b284163391844a4dc68fa520457daf67e81353fb08fda4966156556b
- SSDEEP 1536:Cqi7hPAgcf7EH/Y8OPigcjZJuivk0YWrzj73h+:/GfcjYDOPigcjWi80YMHLh+
- TLSH T1A9539E2183AC4737CFBF0970B4D595924B35D3E9B512E7E72188D09A5AA33C246B13BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Toolkit.Uwp.Notifications.dll
- Size 170KB
- SHA256 efce14cd0ab4006ceddb6806ab7ee93be5375fcb3d0be90580b1a5ca1e06d776
- MD5 acbd52e25636b84a051aa37c7b96eda5
- SHA1 6117b9e987c72d5329f080fe781304e1603eae69
- SHA512 a621259a2f5b24e2933607043b79c2adf5510280bc43bb0bebaa0cf1b37752b190b0f96e45314cc85f6c962cd9d7a394a99d596848bb923b0991dacdf1fd30a9
- SSDEEP 3072:14burBkDijpS3+n1Sr5ePVM761+fAwbUx6K:1iikDiw3+1af761+r
- TLSH T19D046C2D33AC876AFAEF17B8F8F424254F77FA4B7425D2998608D1AD581378085523B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Win32.Registry.dll
- Size 37KB
- SHA256 0099a2fcba921d89f2c240da620a44eecaa91040f9c58445cbc1c595a7c6d8ed
- MD5 35d60f90bd97bc7033133340262a0279
- SHA1 031457fa314caad51e1c7b9388a9289f591e40ac
- SHA512 7520da8bac80387606fa901a286f696c6c1ca7b0a9b5b2c39a10b98f1ac69c0c52cc6e4c19a723d4c84d8520a40d3927088994c98a84272df332c39106ef3c4b
- SSDEEP 384:D4nLpSumfSQrlHViaCZYvLPQmlJLfjnWn6GWNdHRN7KvfVlGsa9YHQIYi/q3+y8B:D4QVrxViR9mlxdTK+U5Yip5ALW
- TLSH T186035C128FE4052BFFBB0E3179B0D5225DB6F6C62D02C59E2149D18A4FB27C9A671338
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\NLog.dll
- Size 841KB
- SHA256 b911867ef2213e93d6ddaedf37ceeb8022a6aadf2bd0da31dbc75040f3802b15
- MD5 6b99cc30bb8a163094cabd9454e3fb61
- SHA1 afbb727b1d827803bb326ab8c89e70602f85e1b0
- SHA512 75a9419e447e1b7b71391ae53052b3c58582b52636b4aee70c8dc0a6e837d74245533f380dcc270db1c25b8af406a5fc9a20026c56bb3506654229ae95536621
- SSDEEP 24576:eMfWnunGn2PG3ssAjzGHkRnnPiUQPnkbEXtNtFxdtv:lfWnunGn2PG3ssX3ntFxnv
- TLSH T10A054B2133E99A1FE59F97B5E47016298775F80A67E7E79F8A01E6A53E523008C013F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.AdvApi32.dll
- Size 61KB
- SHA256 694bc337d0a64e4b5aa4e2103ea867355fd77ad8ee15c2b80a6b79865744cab9
- MD5 790f1b95d82df35aff4e9793aad644c3
- SHA1 715c870bea2a937d03811eb8e68110fddf742b10
- SHA512 0bc844aac827988643c6dc135abfc0723d7de1bac954d91efbd9744ac3771958fa5e0d86ab2e7ba99d1c1c59421bbd27448e05c77bebb06567b8a634f991aaa3
- SSDEEP 1536:okxOYabYAHYTvY62yn2BjStrmUsDd01Z27vc3:o2OYabYAHYTv99n2BYmJyAro
- TLSH T112539E5587821B96DCAE4A39B0D214028AB0F145AD43EF6332CCF0A05AFB7DA07571FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Kernel32.dll
- Size 121KB
- SHA256 9cbf8fb1d82392c3ae635d75ade4ee7b49e5e308f48a7dba9f40f4946b1a7fe5
- MD5 035a98981d49344bad693bdad8beeca0
- SHA1 6101b436ab697285fdd3d2f7c86b1f04d5a82f7a
- SHA512 8c6a1d42035676469d16378e6d085cfcae1e7aa84dce63c85c247cbd2013e59b0dc25ef8f7f9ef8b4ce997abe5b72431b9c64bd1c6c956072151e7492a62a7b0
- SSDEEP 3072:YXYdNNLdaD72aJ6R/Y19tK66YXF/1V8PFm:T0D72Lg19tK66YXN1Mm
- TLSH T168C37C304FB04AA2C87D7979A0F21545CFF0B1895E62DB9727E4E0751ED37840EAA3E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.User32.dll
- Size 120KB
- SHA256 3e8bcf13859ad9223d290212645acb643f768305ebac3cb15ec14e96596c0d34
- MD5 d75131d9218ad6ff2d6403a2f078aa32
- SHA1 c012703a1b2e77ca150f0b2ca3f60991c2b1d382
- SHA512 02ffecc7493d05bb5b0fb95f5506bd61f023f46437fa26a0bc983eff8ca87fada51cb5d8f6de50f41a3232a472bd450a916af98772db5ab55908d63af755347a
- SSDEEP 1536:38KmJFNuLzdYnUOWf1Xg3kzibegbWGDbY6nS9CzQbraKzEZJKiUydt09VEC6azpb:GFNuFjOWW3pS4WGDIMspzEZJzIzU0h
- TLSH T174C37C109B6C6998CA9F1ABB34B70B06E6B0E4C9D82BC363529FC075A9737F5055C2F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.Core.dll
- Size 278KB
- SHA256 a1c8c5b0b932ba5d0f113d321c66a142d29287a617969d1daa6b7c730e16d2e8
- MD5 3e8172355586982a807ac9d0664614c2
- SHA1 056d240b9ff00ad6d6279d094e3f2aa3b09e1ef8
- SHA512 8243dfc2715e5c3c943d352f5c6f71557af371231eb0417219f1b0f9fff23c92287fcd8b8b2c34043e84cac7f4a8ca64e020913622b3993c3ae25229250a172a
- SSDEEP 6144:lkuJg7d5CkdNHmq2xOs11M/BCF0z3NTbAmf:lDg7XcN1W/Bc0jNz
- TLSH T11154A165AD123B6B8904847E3AFB1D8718D8D308130879789AFDF7CD31E887259746EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.ShellScalingApi.dll
- Size 29KB
- SHA256 91e39cf2922e2bd0b8d6aeb994dd6ca8f292a62f7d6a4970a93feeb5cd165974
- MD5 ee42003b6c8f62533a3785b96b8627ab
- SHA1 e66b7d2f0e1db43bcbe747ffbfa5dad3881db43d
- SHA512 b4c002f7ad7f8c721cb3ac80455d7dbf95a30df183277df711a015ae17103f9fb473a1323a8f65c1a8c61bcba500c7bfedde095d4bf6c3e11f717d4420303dc5
- SSDEEP 384:oM9Jxp50tyrag+tZSZmZPdT/Y/U4i/8E9VFL2UtQnHQIYi/qfDJy8RbmL4nNyi4:o+n0tymg+dd0/UeEdW5Yiy5ALH
- TLSH T166D26C77CA905C06ED27DEB174E59E13BD79B781AD90C5E72109C2508F813822FEA27D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.WtsApi32.dll
- Size 30KB
- SHA256 e2791af2a29c2e0225e218bedec75843976fce66d368e35f9106c2f5cc4c2480
- MD5 3cc4cc9c180d8733a537d1bfb17be277
- SHA1 adce304b40b8ed9970a68cc934b2e46d74250652
- SHA512 664a24003c98a1e93712570c7cd9d74c92d76fd662c6f3d31d0f127ac8f580c8d6bbc540d6be036b7f651da626d373a43d7eb8512122f613dda7df3eef338bf1
- SSDEEP 384:/LviC9e0ty5yTJZSZmZPdT/Y9rA4i/8E9VFL2Utpz2NHQIYi/qy0y8RbmL4nNy1f:/Dy0tysT5d09rAeEdER5Yim5ALP
- TLSH T1C3E28E768A905C16DD7B8F71B4E09A27AD71B7826D90C9D3214DC2508F817832FEA3BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\PatchExceptionalEID.json
- Size 131B
- SHA256 0f667d54883d3ba72a8a0cfa864431f79d74905e92976be0611706b1191c3c45
- MD5 1a102291d5eb3146ffd0be2969ee0eae
- SHA1 f35b9158d851d1ffe1a5dfde74cfecd2ec2bad94
- SHA512 56a987b077f88f0806b7daf1eda464fc393279a48859abed0b6ed942056e0d8f3bacdac7fbdcc40362fd1add47d6d81c7b9559083a567d37365c1b275c44e017
- TLSH T1C7C01231C4442C0D40B8C730549C4304D48433A744500A43307D2D1C3F3130C4BCFC5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Analytics.dll
- Size 43KB
- SHA256 68043991a9b6a9bba37725ed8f3e06e2719f82742a49cf6b9926e2db90416792
- MD5 f1e046586bf9ac1fb591a060bfadc912
- SHA1 407cb4105e490e093b73a8bfbf38d6c8ded79a97
- SHA512 b9271e6c2c8a4b39cab5c97792a3e6f32d370e0851a32893b379535a21cb00ea10580dd128940fed9aacd9a7b1d8efdb73c2b36535b7086abe6a94478e326854
- SSDEEP 768:T8mWQrXs3VyJQdx+Q1FISUWLIlKbd8XJ5Yu6kP1cJczyUS5Yic5ALv:dr8UWdxz1dU9oWZxRPecQ73
- TLSH T164138E01679CAA16CA5F8F78F8F091114671B7467812EBAF5ECCA4CF0A633425E1536F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.CompatibleV1.dll
- Size 109KB
- SHA256 039a39e987a44a415f6cdb9f1d96693194ca240ac3b91ca341751735c28e93ac
- MD5 a18ee440067e48cad69a8b590cf0c195
- SHA1 a12b77579ce134a8669ae40435c21a2ce318bf35
- SHA512 cf9cd440f348dfba1433e158ffc799b72ed80f822939e9f38181f48ab710a16bf1b4ac308108f4bcaf3ef4859235dc785fc65b296a1bf82e560aa185604f2432
- SSDEEP 1536:Gtccin1zvwUpx13vtIjLv3nR2CkvhgfEIVbhmPdL1q0advHISTT3ho7M:GtmRvrILRNWgdbiadvHISTTxoA
- TLSH T1E9B36C5883D88D72FADF5B7AF9310762C7B0E2053D5AEB9E4A4CE4EC364378199405B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Core.dll
- Size 256KB
- SHA256 2801e1af7b4ed4855a9e5a705be28117fd4a52aa7544aab49f40fe6141479a14
- MD5 7427a4efbc6ffe4a3cca1f5c9417723b
- SHA1 4d9db1cb902628e8c493f252f3534b789171fa71
- SHA512 e6af7f367c0d0c87ac3226f9eda3f735f334369ad5b470fd24c9250df4c0dafea066ffdccfcba675f348da39e1c7ff11bc0b370097f30a3615821c751cf79e1c
- SSDEEP 6144:vHploBFAdpolJCxXHv+w0D96+/xb/XTDhKmhNUlUsAF:fpkJ8xoXHo6F
- TLSH T144446C2523A88336E5AF5B35F5750926CBB2B503A57EEB8F0E8CA4DD3167341A4107B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.DetectManagerWrapper.dll
- Size 111KB
- SHA256 8c052aaca7654a17dd6868cfc5086e5309d0ecf0674cce92b5d111dd8bfc1941
- MD5 bbcc8fe4e721fdc042c9ec508cde0b37
- SHA1 5db4159750b991d40de674eda5d5f00df3feba36
- SHA512 6d103bb171092cb727b43a3b25af8fff58c53524204e21442da88f9c0b2d8bdb11625dcf1d1c538b2ad4ef645f605efd1aef9dee536342400a4851a51602e213
- SSDEEP 1536:lwjV2AQ2qOS36Y+Ql4o6JyCheQ4hE1oLHbOw7t07hS:lPGY+to6QDQ4hE1uKw7a0
- TLSH T18EB3F68316D578ABD4BD81753772C38082ABEC4469629F2F11C953A298BD2DF388D3F5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Hub.dll
- Size 63KB
- SHA256 06552b4a2e442b3818fd358d8917dde527e9ec091b9aa4111ecd10d15a734968
- MD5 0164ed51baa9726f9f352e9583bb09f1
- SHA1 777ffc87f5ea03bea4c237f4a613accecb3bedcd
- SHA512 21e306cad54f63e61884b4af74ccea342df2953c1c92025926b53da757aa57ae9bd75813b2bb3cac3c1f3de72d2d96a6489caa5b94ebf420819376d5314d55cd
- SSDEEP 1536:3qU+/EH0u4y9r6wqrZMVHUPoxzMGhWLexU74T:r+/Na2wqwUPolMGhWiy8
- TLSH T149533B0167684E33DAAF5BBD787A052F0B71F3469452E39A1ECDA0D9267334266143B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Hub.dll.config
- Size 1KB
- SHA256 6a98d3e7e998fc6001d391713517b97c1970fc898e9f51bd025788c472991c69
- MD5 26ff98b1784033a626e7932ba2335848
- SHA1 fd373d15937efa0906ea035915cdd66dd2db1102
- SHA512 c351d6bebabee9ba9c01ea3dbc6bc76ece086f98565f11e6a3963ccdb8ad348070f6904eb6978363cca8fbe47bde34b6edb0c0db65ad6e9f17b8278ff95f0565
- TLSH T1AA310C11A1C86FE40B7259F23E6F6818CB7D03B72C8D058DB0EE6F878F259594207076
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.UI.dll
- Size 9.4MB
- SHA256 8abf3602c034a3e296362014df14cbc036bde33a608ef7ba6b09e5e598612195
- MD5 ec89d0ce2091456a1f317197d993875b
- SHA1 a7687c7d24ff2bf22e4558774edd34b00077393d
- SHA512 757fc2064e00521a534f8e9cc25c743d6eabe8299d64f36e76c6c0722a837077dbe6e7b9019facbfae9d21c2a81ab985e0bbebf602e5f6ab44fb2316b6683a89
- SSDEEP 196608:9Q7ch+qTRv8CUfy7bvv/h3ShltqVQm8iSxFTB:9QU8Wv/hCd1DiSxJB
- TLSH T120A6D0FBE34149C3E09716741073C75566A36F292AE583071EBAFE397D672828DE2207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe
- Size 496KB
- SHA256 5624d092a60ec411cefba073c02251d8a63bcaa6fb64bda7c1cbe00c249e9ea7
- MD5 a550d59bf0316e223cb31f56fefb16b0
- SHA1 bc96bdc353a0bea161cdb92a8003ee865591d2f5
- SHA512 68deccad788f1badf9255f041d92f894436d4f742a4fb8351d13d8ba3e3b9012d33c76ac5e627e69c33c476037825d75cab83d3865bef6688993a9f85411dbfe
- SSDEEP 3072:+lfujKVbOmxrKKHbBTQXUPdywGyTmbOmxrKKHbBfQX4PTyw7y3XnH:kxrl7BBTwxrl7Bo3X
- TLSH T125B429CB2FB4BC4BC82CCA706D2285D1C4F66DE7D41CC611E3806A4E76AB38C7565A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe.config
- Size 3KB
- SHA256 d2521026d7133b275fe8b0a4b1f1aac347918b29b168ccbf25842fed090ac118
- MD5 271f3f2eec18eba4ba185494e4dfec37
- SHA1 ada656988758271205e20d14c3fc4447914dde95
- SHA512 1feb3dd09ac5b618ceacfa6bdd91cbccea2d021e97762bdb5c2c28ce4b9bb93a3b43920f9b9aad054851d39192d83c2dbf155dd427bad8959c239fbb84e1a967
- TLSH T167812B20D1C8ABD98F7255E23E6B6428CB6D03B7288C459DB0EE6E4B8F35D965207077
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Enrichers.Thread.dll
- Size 18KB
- SHA256 065455ad8a17c2eb7ad7141d3618b0c8a43a0e215045fac33d0dd80348788f24
- MD5 a2fca5c99a09271d48b539344c0f4868
- SHA1 932c59be5a140c7365db415eaf64ce22b6f1020d
- SHA512 ac5663afe1c33133f3ec07c9831b1559072568b954ed5cb4241fbb3ab3a78d33b53203b3312b5b9dc05d7393d8aacc187094b4a87ee1364c7f37e698a36f6674
- SSDEEP 384:pXYX3Jc4s0sw+F7HQIYi/qT1y8RbmL4nNy8o:SWI8r5Yi+5AL1
- TLSH T189827DE387DC2C16EC2B5F30F4E4A2276E72B5466DA2C7DB7008C1169F593422BD9279
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Extensions.Logging.dll
- Size 39KB
- SHA256 b820bc06762fa74ecc8e92b68eb2dac64f9c3d1af504f4d715389de46b4f196a
- MD5 6f8247aba955b136054f4fefe2bfc473
- SHA1 40d3f8adb2cf7ced06217750f550b2663597557f
- SHA512 7449c16149d6b0797141ef3f24bce12ae464d0a6a40989905a628a77d2b23cbfa7063066b80088263c8560ccfbb0efe3e5b382163a43d50e3fba5c6b4974dcc5
- SSDEEP 768:gAySqi6DHvlhTvQkcfMf+nyr5nbQQ5YiT5ALYg:gWqi4lZvc4jrVQC7S
- TLSH T13B035C11A7AC1B36CC9F0F34F4F596A02B74D2A5B421D68E358CA2A5CD7374217B226F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Sinks.Console.dll
- Size 51KB
- SHA256 8e36d6d11d5a83b3feadedf3b0ab6a136fed28c392b5cc20897ee8852c53dd1a
- MD5 1427b849fb5e05ef89ac99bd1e390d89
- SHA1 da6acb215ccc14e3671b291952cee00c24cda738
- SHA512 16eb4b18d703c9d6590b7ef50638932e80e8b36387946e3c5650a0b5af29949b38ea6eee6ede7321ffba981f0095af65e5aee7e4594b844117eeea649a3365be
- SSDEEP 768:ms/dJ7356ZseUE/k0SpjJL3dQF6xXOFIRoer6kFJHNsAWvwW5Yi1+Y5ALAZ:mMeseUy+dL3dQWeEDr6kjNsBYs7HZ
- TLSH T1DA337B8E23DC9607CA268B78F4D114168671E92D2613EB4CBE9DE5663B17B49334073F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Sinks.File.dll
- Size 43KB
- SHA256 6f75e2b941a8106878af3c41a691262e791deeb3193cb28c22770ed7ed7004fa
- MD5 1ab03704a4d8c912df5cc344d97c3073
- SHA1 276fd766e1ba352d04b35c7c70ca23bafe10f225
- SHA512 24a892b5d58ac1f94051ae499469a97bb7c906ca34fa4871097647da7bd790539235928155ced8f51b0ecb4eb19be472532c035ab6cfe06e8c7b36ad6617bbc3
- SSDEEP 768:45dLLyBMV/2zgqE2Rujcj/erZCCpz0PBHdDFJR/DW0FfrnNu2xl5YiY5ALZ:45puBMVOlBRuALerZCLPdJRasrjZ79
- TLSH T143137C466BDC561BD9AF5F38FBF011170B76F692F822C69E558C809E0E12B401E143BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\Serilog.dll
- Size 171KB
- SHA256 778b6ff3ec8dd3d40fcca303340e4d672f3931252146b846d609cb1382c6adfe
- MD5 0cee00a0771b8404b5dc74b5bdb4ab4b
- SHA1 eb7e09f61817441305e42d212e8f940ab4b8f81f
- SHA512 9ed4b32d4fe7b8fca53f37e7ca4901ba76c4c26e3666e0ff42ec40a8926d5bde123788de5bec9d9bbf57cae2549140b51e5889fc372c64d281cd6a577cbc73f3
- SSDEEP 3072:B0Q1QkRXfOBKnSvdEE+oy4E08Pz4OqLL/+jDsSkNVM97wRxy0K:B0Q1QkRXfOBKga3b4886UzG
- TLSH T182045B5563FC8F25EBDF1AB4F8B050140B71E58BA026E79F3A0C65FB0D6370A5A443A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Buffers.dll
- Size 35KB
- SHA256 31d406f95e27c580e06152571be01a079f5d70762aec7d2555d3ed168f0104ba
- MD5 78d44e1b5e2005fd152a8ef5aaad3654
- SHA1 0676afb082a073b590e9f0b0c1932c9644276d1e
- SHA512 9c5fa0f8aad93d311a5bcd7ed5c31b75e4bfe8fd026f09be891e9f3b87b287d0f9748cf948ccc97d93b174fcfb5d6073c6516a97bbce76b6a0a6362aec0c9ed6
- SSDEEP 384:uRJyzxhqFAB5n55560IxEFuAUTcxR+sDWY82WwX6HRN7IbJDtdQ5R9z1QUMtBHQH:4JyYkx60IxeuSMYW0ds9zw5YiSC5ALHz
- TLSH T19FF2AE22CBDC480ACE2F9D7075E8DA573D3653C66942D5EB114CD5081FD3386AB622BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.CodeDom.dll
- Size 41KB
- SHA256 ef8fa6dcd48fe378f5651caf294e8dee01a838526705a0d38b9ee49b91e81498
- MD5 6666c7cf8bb8caa5af4efebff717df86
- SHA1 e1f71bd56fdff5bb56580443eaf58b696a4c0241
- SHA512 4b7a60a5bed94c9077de871f5386e6e5c6d65e77176e81d3553c40ddc4706ee27b42a4679799a271ec75fe25985c6c5437d8a1b94fff92a8856ea369a4312064
- SSDEEP 768:rK2hTjaveEtYehzZ57FClo2l9zxE++5YiuF5ALM:OAsYeh155i73zxD07g
- TLSH T1D0138E6282E85D7EEE7B4F3074F7C1A61FB5B2D32821C29E1144E4091BD17D05A7277A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.ComponentModel.Annotations.dll
- Size 53KB
- SHA256 1e6d828c89b698468c3e371747c4df5ef429eed8460176460196e67b686964ba
- MD5 5e7a268dcb164a6cc07dc62778c79396
- SHA1 7728dcb52271e944783975d0afe91fb18f9943d1
- SHA512 9ae928a59f0af9e77d95f4eebf19fed96faca799222cedd596ac54f79bb05bbc0b4b0e4b4da44c5864df2707952a645d57bf4c1bb400415a27dc31ebeef4f48e
- SSDEEP 768:aXDQsPurQcR3y6JOnSHDYFDTViKLQJ05Yih5ALB:azPtcE6JhHEFnVFQJe7
- TLSH T154431952A7F81439FDF34B706A74ED9A5DBBBED62D21C15D2098D0CD09B13808BA173A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.AttributedModel.dll
- Size 32KB
- SHA256 2b951d178bf7c103916fba0ca2251b8ad43e6ca138d779a238596a8538e7b78e
- MD5 de13dec99ac2ff0c5a56403ad9eba44f
- SHA1 d8caf889b470f76a5feb7771b8bbae5bd1442d3f
- SHA512 32ff722b0f5c3dfcbfce191f2bb3a3b1b3c40b1130a28a5373b0f188d5c8b5b55048af1e14b31434858689817a00a8a810a8c28ac7b2b951b438715551cf1edb
- SSDEEP 384:WLSfXtK0uLBHSlSi/wRBQFcqWIMvVxyWb5kHRN7ZgNNPR9zbKeEHQIYi/qzyy8Ru:sScLuWBQFccMNxaZE9zG5YiL5ALl
- TLSH T173E29E7287989227CD574E30B1E0D9232E79B3852C51D9EF228DE5090F963872B3877E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Convention.dll
- Size 64KB
- SHA256 3629473b1a3c743dde15dddd9edf020bc697aac33ecf60a9a228a57cc9d2207c
- MD5 8557242debee1e77b3a561357ca5f71f
- SHA1 a0f7d0d70414881c646467c200de91edcc4a2b05
- SHA512 9bdbe057374a0d5a1af4f4307340a1e050a7f0b99cdd3abc758d1ffb71b64a76d36faca66b205aad6210e71616a0c0aa2d54c9a5a6662a44567442c0e16ea25c
- SSDEEP 768:cXOx6HCj7D7Aqg++wfNZZSS3lTYUBn7i6ll5GR2SuHVjPsxy/i/9zqZ5YiLh5ALE:YRCj7D7Hl+w3J7iUlMRl0iFzQ77
- TLSH T1CC536C1363EC825AFEEF4F74B274E5064B3ABAD51602D2EE294DA0B807267804771777
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Hosting.dll
- Size 66KB
- SHA256 fad5ea32f38445ac5e2d3cec88ec22dad6d55219b7302a416e0eb0fd5db3563d
- MD5 02198527c21c89930907bb4d6977eccc
- SHA1 d0b972ca976422d54d70de9cc071be8c247d5913
- SHA512 9a563b338bc99a1e66f7289c7c9ccc37a455f0cbaa58b4bd27427c859a3f8842e142554d9883b74bc4881cb721a1387b827d00494b5950b80d2b538277783ad6
- SSDEEP 1536:HI3LySqegjHauiS+yhjbjRfjdlVxuPiiiBzj7Q:HI3ed3DnhjbNjTVxuP4BPk
- TLSH T144634B136BEC0616EABF5E7435A4D4151E75BA822802EACE1DCCE1990BB37C41F6077A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Runtime.dll
- Size 38KB
- SHA256 2e19598864d69a9487805207d649fc65eef1a9cdf9924e4ac71c8663d60c4d19
- MD5 b50cf0586750e4c40873a67c236ae08e
- SHA1 497f9665742687bdf0f37a0bdc211b3042e141f9
- SHA512 71ef97ddac5df878d443808730e4478347f8d2836ce737b227c1bcb369330756050edde5aea3481719fe5ff194100727388dca1123b88282e76f83d5fae3b069
- SSDEEP 768:ZUdak6oDMsZT2YsSy9kr+ALH4nv7pWX0xae4n9zT8wW5YiD5ALus:ZUAk6oYsZ5sBmLWV8e49zTJs7js
- TLSH T12803AD2787BC6956DE6F5E30B4F0D4162E3BA7CA1C21D1DA218DE1181BF33816B6437A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.TypedParts.dll
- Size 76KB
- SHA256 de493f23129445b0a18cc7600c3aae0c74983d7dca37469040a6700979b689e4
- MD5 f213931b305ba8a7d5d70da18b354b5a
- SHA1 c205b4fbfc72348014c8e5061d5f87933b8df217
- SHA512 54ec437a662e12961e2c1f988f42ebd8f517e4877b90b98a4a4270200cb7330c4899f2e031612052221b7ed6c2dda58fb7d1fbd0e9c51a9f5daa71030b4cc466
- SSDEEP 1536:eslcbVKa7SF3i+Toe6jd6vI1tXHvbQUoJyqzT7rqZhd:lZF3i+Ee6jMStXHTQUoPXXqvd
- TLSH T19A736D1673AD9727CEEF1EB475E4E1550B75E3612802FB853C8CA1A50B633819B603BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Diagnostics.DiagnosticSource.dll
- Size 206KB
- SHA256 bb162d77b3cc0ff474c6aa015cbd522d38e0ec32a72ca53453ee1172351be9b9
- MD5 779eb17fcdf3c7958e72c84a61b3c884
- SHA1 5422f50f962296671bda2fc115387f0823957fa7
- SHA512 790eb2fd921797a924dbb4d33e9da6520ad36e349e11e0ef5ca3edd3ec8ce4aa2b691061de41092bce13a3307dac1aff4c0dacc5852ace28fd7c8f7aa1e41b10
- SSDEEP 3072:MbHMbFi807XeuAfVOAgY28IQykl0z45fgO7n+E5G1JLRAO:gHMbkV7XeuAfVIY284kzDv5Gvx
- TLSH T190246C50A3DC06AEDEEF2B71F0609C034BB2E95BB106D3AD7A48B5FD1813F41861566B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.IO.FileSystem.AccessControl.dll
- Size 39KB
- SHA256 6968fbdcbaa6dc583b866a49d12169e1b57c6540c4396fe5595bd9e9cdf608f2
- MD5 2f60a0e7c58f1d03acae3c165671a70c
- SHA1 b5526623ce3ea688b7a773181b156212fc465e7a
- SHA512 7368c6e5529f80037a47e017f57b929791bca9224c3f857a10e4257e71cc2ef8415beb1b221051975f6e8aff24d5982f0051d2e927301132ae6d5a0fc193ee74
- SSDEEP 768:ZCN9VYp/OiRcnZIfk8PEkT+5Yi3W65ALFn:ZQ9ycnn0Ek47mn
- TLSH T1FC036B1297F8461AEE3B4F307AB5D5227F35F2D53902C15E2504E18E0B93BC8AB62779
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.IO.Pipelines.dll
- Size 94KB
- SHA256 ec39218082ae384201a4b884f80561447f6381af1b502964f773491881cd065a
- MD5 6e200fa276050f53e833e0f4bf301d88
- SHA1 13dae47d9f438a0b39f4b7ab7ed2347313ef14e5
- SHA512 3f2f6f0f70f2c849bc13df203ebff41407e46399fb90c014d8a59aa0c5da4585c00e68cef626f3b777b6e46cf9b861e08b85e6a0c19771e645b6c00c4a6e4624
- SSDEEP 1536:0OBEtNwWq02pH6ZafBzoGrriJNNjrgFX94bsAbYo4bgN0xeR5evOjvjDXT4Oe5JZ:zBSNTAl6ZcBzoGQ8XkJYo4bgN0xeR5eJ
- TLSH T1E2936B6857BC4B1BEF9F1E7DB1A095120FB7D7166903E38A684CF9DD188338146142B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Memory.dll
- Size 153KB
- SHA256 605cb93c5dccf0c24031ca211e138bba0e768b7139c95a42cf340e1fac873b70
- MD5 0f4ff7e4ea76a7c197d0f95f85b2a477
- SHA1 56d729365b82e3199c770efd4cef37a8d30906eb
- SHA512 a2fb391043eece9cce7eefd5d2fe23e4a49cd6681ab73ad4e38f5e28162289a22fef8590658bda32e58bd490512e9241e24986fcb04db468bbdc58804142f4cb
- SSDEEP 3072:bPgSRYPuMbrhcabqwwwUtiPmu3XxNtvoIbp:zuPaaWwww7OuRsW
- TLSH T145E36DBC67C5DD02CB5F9C70A068621A5B31C63FAE42F7E215C8E4F436A27A536193D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Net.Http.Json.dll
- Size 83KB
- SHA256 ad7cab3a590e77515ad93730f0e7e5603ccb913c5e0621027c3989afa3d00e5c
- MD5 a957988f6d92305ae7d16cfa80d4fa44
- SHA1 629d4a66445ec5eef90582faa044e2baabbfa65d
- SHA512 e5bac40d6ffefa1a48c4d24828bb6d0fbe2320df1d7462c8f35ff5b1c7d846fefc235ec028fdaa8e3f17510eeb1c8a1ad76b4177c8940e46c642979a02260c43
- SSDEEP 1536:9kHOOOUuynS+v5lWHvXwjn5nQxWYCbq9Mk1s5vimzYq7Pi:97Sv5Mqn5nQ4YCbq9MkCvN/bi
- TLSH T1AF839E09579C9B13E99F6FFCF93893274B39EAD69902FB8B608CD0EC148334446647A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Net.Http.WinHttpHandler.dll
- Size 164KB
- SHA256 08c9ce61f548d237fbf4d4da912defd486d3538e7607ebb16e458153e5004512
- MD5 5923be02697cbf47bf620e8702ebc5be
- SHA1 7f77e08478685acf9dad9f2214d94b3160b7b471
- SHA512 7c8aef604ff69c2e21d30c13b74e3df8c1015df4889e113629ccbeb344ee7cf29e16e4841548d808b2f4c2d031ae5a8fa7fd917deb980f983ad8162c050d841f
- SSDEEP 3072:aeglmOqrmSfc3+Lkn3U4aMizytFktFBo9NHJzWTF3:ae5OXSfpLkOoLF9zWV
- TLSH T1E4F34B2073F80A19FAFB7F70F9F596518A7ABD826A31DB6E154050DE09A1B80C970377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Numerics.Vectors.dll
- Size 119KB
- SHA256 481290982fe8f326d51112910bffc29623dd655c4202099e41d144611b54f94b
- MD5 83ef8802f8354cab4b01ca3456300040
- SHA1 88547b6b5ee44bffe8507732d7a17fbcc0d9a175
- SHA512 94f919ffa40e3040588247610aac627ae4e3bcec609717f08862e23d29f47155a531c7dec1f56b7dcdcda57917889cdea4d36571ba859a7986167e3a6152caad
- SSDEEP 1536:puIaashZlF/cLecJE3+DWG/E2NstmOz+aAKWGdqitnzC7DH:pzaashZzWeca3+DWG/E2it5GKqsn+PH
- TLSH T1A1C300E22F6C655AD7CF9F7B20E65E120B331963C403D2E160DC67A227A736729421E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Reflection.Metadata.dll
- Size 487KB
- SHA256 c7773d310c1fde26df8606e1d2161b952780f4c5ff35e68e05be8d4f6a6faee5
- MD5 4cc9916bb911d46aa95fe68343854981
- SHA1 79119dd5c7a214f9b69d64adab2b0f98892d5672
- SHA512 bf123fd24e2c9cd3206f6878d865172e049b0a8e1cb61fabf8da73f75dee90d1a75c53dd5ccad79074024dde39b06e856729bb691d4048a809aff56daeeda596
- SSDEEP 6144:6baFj9DUmlrAb/atzuBNOvQMDHvGKKPTZ2ml0tERWsbZJG0pky180bVg:6bCKGtzoNcpHejZ2ml0W9G0F80bVg
- TLSH T178B46C2273FC762BDAEE8BB8F07144254B71E4072716E75F09DCA6A90D937899C20763
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Runtime.CompilerServices.Unsafe.dll
- Size 30KB
- SHA256 8f9f5bfe06985c1995507a726924f3bc4979e0b32617b8ca7b37ac723c8a195e
- MD5 cdd421d69e32aae0584de6e5a96208ea
- SHA1 3fd781c57a364f26a435db336dd71ec07d9117b4
- SHA512 b0a9173bb3cf30db1445b7d21f06a16753e68afba18369a571259192d4b757bc7c36bb2fb21a043c4e7849c8374294d17edf0175633e9e374e7270ac5450f822
- SSDEEP 384:vkGbUzdrbbxHKWgr2WRX6HRN7yX/7R9zXL/LYHQIYi/qkyTy8RbmL4nNyA+D:MGAdlQhWUF9z7zS5YimT5AL7
- TLSH T1E7E27C628B905803FE176E30B4D8E563BE38A7C6184193E73149D5761F963C67F6923C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Security.AccessControl.dll
- Size 44KB
- SHA256 a64b8a0af8d0d44cb14616d15ec5e421d265d85f0ce40b38f9409b94b14d0384
- MD5 cf3258e90d21e893011e4c6271e7022a
- SHA1 0febbac5d4d94f040811f406b1adbf76f77c9dae
- SHA512 40cb38327d53c350f22cd7f1be2b64880dd442f4b6e74024e232d03e560cbfa5e2d717b9b68cd7ecd1a3423e145f7d73e62c9fd9f20e6399929cb8790b282612
- SSDEEP 768:zAa3FuQwetxWBkyNE0kRbRVPD5Yi1b5ALXD:V3FuQw4AlhqbRVPt76D
- TLSH T18C2329529BFC1129FFBB0B70BDB499121DBBFAD53D12C20D1104D19E5AA1FC09A62736
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Security.Principal.Windows.dll
- Size 29KB
- SHA256 a8f613f00612d28ece1af1a0a7f7483ed4bf68da3402f5022168f9f8e288aaaa
- MD5 638bd89494ac369832b98c9909ca2d9a
- SHA1 d7864fbf211cb6c63dea528f747319f36f9d1907
- SHA512 6c387456d7c88d09153eb6c42a2482e60d5fbb8f76deefd579f10a9c40f7e8b03ad0abd2ce0ee48df0cbcaa2a6025986f64c98bb205b59e71e3d0fbc7fed7415
- SSDEEP 384:BEwo6eTs14YY4cWpOWXdHRN7hYpJAlGspU3HQIYi/qmm45vVy8RbmL4nNyGrz:qwDdT9q3X5YiF5AL8
- TLSH T130D27DA38BAC4913CD275E30A8F4D1237D39E3C62952C6EB624DD1055F923C6ABA537C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.ServiceProcess.ServiceController.dll
- Size 32KB
- SHA256 2b8f2f4ba64d0db422969f3a4fa1efb4a9e1a1cbc138967e60b1e1748b03f6c6
- MD5 558e2daad09b253a7a3d7b2e03021c81
- SHA1 eccb25c14c35a835f796d4d579c4c2e4babf3eaa
- SHA512 e540fbbdf845d879343e7b9e7339da9e0921f6dc7af6da7e22572316737afb708b7085b97a0f827ecbf4cc8495b62348fec8f30359321877e05d95ab31591eb9
- SSDEEP 768:1RvP2uIb8R1FClSvRxw9zlsou5YitS6mo5ALyyB:1RQb8RjiSvIzlsd7tS0yB
- TLSH T1F3E28D6287AC0A6ACE575D30F4F5E5272D74A3C22852C6AB52D4D4061FE238D7AB433C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Encoding.CodePages.dll
- Size 758KB
- SHA256 8b0e429dfd2dddd605731edc4f7e92a4ea3ef0a3a1345feeffc45f69aa4af668
- MD5 d96cf11a5a65b286fcf30a0c7f942a84
- SHA1 0eeb84ef00d39eb11af242c9cd85138116b3fe92
- SHA512 b9e0a4f10cbfd89b93fd6d1edae2be9fa3336b762b6000b3a681e7aa9ccc6fc4f01381efc35c7b73f24f01308db4fbd9ee5eb5a801e2a5d0e5bfbcfbc83fb13a
- SSDEEP 12288:/7i7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPDSC:z89km6k/IwRYbiBeKGCmp
- TLSH T1FEF49DA056A55B17F9BBCE3097F13012CAF6BC567E02483BB952634684D3BF01DD4A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Encodings.Web.dll
- Size 89KB
- SHA256 4b109c77c53db022f9757cb9ff07134de0b1da03a55ebde2b7f02819d83e7107
- MD5 0f50b3552660ffcd28b181a513ec3447
- SHA1 dab167bee63cfcd9ac55bbd6a8de3ceaac30e4e0
- SHA512 8ae1fb213889888e30f0cf5334233811f918ddf92f9bc93ea38094fd863449d273c9cc79ae5406c408463ae513cd8b26eb00070a934d9c4a3dce2c99a9571d7e
- SSDEEP 1536:yOOUnOOOc++v9mBkdQ3IWIxL1HFkzoA4Vnrpwp77ojJjn7NhWuzInp70:o+FmCQ3I077oljRh9EnpA
- TLSH T130937E2697888B2ECB3E563055A08571DBB0BF9B1292E3C25454B40F0B777CA671D2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Json.dll
- Size 721KB
- SHA256 ccc7c8167d9c0582ecb9d42d7521a347e099b81b176d6e9f2afedeefcc10c0dc
- MD5 a7ca16b2ca85b792aed136edccb8e139
- SHA1 713e8f38642844a25aac2903110d0877e9ee0c19
- SHA512 32057608075667eaece63dfc63b331b389d9d5b4cfa031946691b3a8c02f13370b72805a2b3e2efb62812487d80713f6b7a57fc63dea1bc289d4e91321fd2430
- SSDEEP 12288:Lt5CIBYtZN3lYQX/Qr/5ALzdT4qMZTZmYZfCa3k:jCGYtZNVkQoRCa3k
- TLSH T1E2F45A11BBEC5B27DAEFB374B07440048BB5E916A7EAD34B260485ED2C53BA09D503B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Threading.Channels.dll
- Size 83KB
- SHA256 eb4fca211cdb8355334a944597942383a4d26436eea212f9dafb6d34297fd249
- MD5 d595abd39e3fe32c6769d27468ae5f10
- SHA1 d0eb82470fe148d9e6a09eae4c61869b1663a367
- SHA512 997e01af9bd875303b12135fdaea15124daaa49712521cbc23f04bd2be51ab79b190915ba841ab5c5a0e3ed20603ed62bd44e37a302f5f4ce3c012279cc2a5e6
- SSDEEP 1536:PQtHBHSlEq5KNB9wGicFvTblcE0Bi9wzvQF7A:TlEgKz91NcE07jSc
- TLSH T1A0833A0163E82209FEFB2F76B5F465224E36BE517935E26D148C96ED09B3B018A70377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.Threading.Tasks.Extensions.dll
- Size 39KB
- SHA256 18230a3820ee6cff0c059b9d437e3bbf048516442a1d1670f0f478384a344bf6
- MD5 fef53034dc4e31b833d730cfb9b508f6
- SHA1 0ad7d73a37b591f2d68b29c0f001ddabb22f7680
- SHA512 9fa724519f5ec6df86505968b1b509ea346e14178ad3a9bc307c9682046a90a5ec3775001619667e79e844974168ceaed5852dfdbff75696090441eafdaad329
- SSDEEP 768:1PV0iug18Y+b5gU6EWFClyf9znQjW5YiAq5ALI:1eRk8Y+b5EtiylzQY7A+
- TLSH T10C03BF6287A46407CF1F4D71F1D4D927AF70B3866D01E2B626DCF2D40E533876AA6239
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\System.ValueTuple.dll
- Size 36KB
- SHA256 bcfa027b91580b00df858ac3257b439dbcbb497cabff50bd8ead0db68254b5e6
- MD5 b085df12ee157c0cb705c3d58af0959b
- SHA1 907e4bb0e400d295909f721fcac05929f7adb2dd
- SHA512 9a34df81c147e791e80344d2ea634a8d0c052c22b932f4919782f33fb0d4622242324428a0b74b167b022bb6263d6033123de3a27612689e8a767a8a2656b851
- SSDEEP 384:MyPa16oAL4D+wW9IWmDIW4IWYDvFm0GftpBj8rPaQHRN7VlmTpF/HQIYi/qO0y88:MWs6oqDjADKeDdViWzL05Yi65AL
- TLSH T1EBF27B528BFC6802EEA75E3075E4DA577C3EF7C35D21C59A205AE04A1A933C1AB2473D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\cpprest140_2_10.dll
- Size 4.4MB
- SHA256 22e4131cbb59bc3c912bfacc1b6b0fe58d9bda1ddf9024e811453c95bcc50f4c
- MD5 f95d420184a76405bd6deb6463bc9247
- SHA1 497d4b9bf0bd22181ef898b26de41cc8c5469950
- SHA512 1c8f73a35a26e8a88a7ec2a7e40763e92ae853361affdecdaef5b0448b4a4ef4d3b9d2131d4604e75fe9669f6c10c570c4510414f761b7ed6c20e2554b0ad2d6
- SSDEEP 49152:uKo8EP4vJkrIVK4sIU3HAeLvM5U0QxnoCfTkaPKHUjoRL5C2RElmCs2260a6:u9P4vJkrIVKDIU3HAeLE53WnuvUMfCI
- TLSH T125263A707F56CBBAEA8D02B79C7CEB6F541986850B7C42D7C6BC1A5A2D601D20F314A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\dockEID.json
- Size 108B
- SHA256 9c27c8e8af9db9c93bdec5981e8348758b8de6d21f7da7fd196f88e440c89561
- MD5 0ba7699b22971832fb281493db7c4545
- SHA1 84e905aa566baa398cd42b62670e438986559f84
- SHA512 7dbb7c75aec1fac2c83f9084368291508cffa5b6a8217c258c90b01b2908881b5f226ab4229f2c87a30529208fed2a344397f7843de010bb2553b38a477e7a3d
- TLSH T138B0023C50C30410037403602ECC3C44C6871A4FD0334F04786C570C7FB04240C0420C
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\dongle.json
- Size 109B
- SHA256 b692f6b0ef46cacfaa10f4069d4bc88ccd054e6149b55e15c5e245cc69d25ded
- MD5 5bfad26ad566016f436c5c87cb57bff4
- SHA1 a50b385d7e4d6fb20911119f3cde9abe8f3ebbad
- SHA512 806525138fb39c8a4c3c83f48151edc5775ec0d8453f0d8bd051f4f1a50504a6d4631a2579b5e39a2f17bddc9da380f5e471cdd2bd6f2906e8b12d54d49309d3
- TLSH T112B0012C70C310C5077807B03DC81E54C9822A5ED1320F04346C43583E70848284829C
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\dongleV2.json
- Size 388B
- SHA256 0173d100c17149d25f92959c50503d92dce947ce31c1b61720745e837a23b9a0
- MD5 62c31354dd80721a1f7b6ae29de61c9a
- SHA1 6f44195fcc6cb18b110b8b646e06c1ece4049198
- SHA512 5c9c5a7bcd591a883aceb17c669691b1dc16616cd66e2a8764e579d6ad66a96b032c933a82ee0869cbd1e930eff8cc438e90503ac93e478e8c0875aad93479b4
- TLSH T199E0762DACCE08921F247E942A9C2D6FE952BF3ED3335FC5756D835835247A4244828E
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\dummyProt.json
- Size 77B
- SHA256 731b66b46ae9477920e21e26f4e30fbb9e2e24bc135a0811568254d23598ce9b
- MD5 32a494aa96aeb6a5de217b3dce460c3a
- SHA1 6f25af72b649c174cf8357fc24b727d11edcf875
- SHA512 eb0c39951b79a8684153881881089af50d7fbb7a423e8cbefda226d895420adef80a9166d11111f74f4ff520416a2a1e918d842456ae4d6c160bb49aa6f56491
- MD5 SHA1 SHA512
- Path C:\Windows\Installer\Razer\Installer2\App\msvcp140.dll
- Size 433KB
- SHA256 f656f0f98cf2510f4e0fe5d5666643028a6b8bac50bf553c0a464456c0e82934
- MD5 a84a8a708751e2cb1f2bb117e9b7f390
- SHA1 a9378bae50093465e2ea1567958a1bb656d42149
- SHA512 609850f700a3147bbd1947c26ece31aeb0ca70249ec4dcd22f1bdc922fb24b0a20f569de827d4818f32983b65456bc9a9a0e9c23ba1e8eebe8520581a814bc49
- SSDEEP 12288:tH0R7WeZbuswwxRek5Y9OehUgiW6QR7t5s03Ooc8dHkC2esgK35d:tH0R6ehx9Hd03Ooc8dHkC2eZK35d
- TLSH T1DB944922BB424DF2E59E13B571C9432257F9FC254760E3C3A3CAF0692F696C26633A51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\rzS3detgmr_CWrapper.dll
- Size 96KB
- SHA256 ffdc4101d1fcace3df86228301804c88fcc77b8003c973ddaba75a4120c2f526
- MD5 b1ac7ebe477735ced53d0c369b228be4
- SHA1 45081236d2a45a2222e77fb27e410b352c390285
- SHA512 ef0fa61ce966b520d25aa0354309889320614515de1a02d5630b09493049d570d188ebdaff63697083b1bf35a5df6179c8a0b9ec8b5e5de070a93899f570668a
- SSDEEP 1536:hnH8EtL73tOLHARZHRb9dDdGVo0HNkhB9ACwE55tsMr7gwWsWScdwIEhyhtEf87l:JtHGyZ9ko01CwE51r74w9yhtEf85
- TLSH T10CA36A11B6D0D035D8BE19351868DA759B3EB920DFE0DDEB2789066E0F302C1DE35A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\rzS3detmgr.dll
- Size 850KB
- SHA256 5cffb048ce627bb0300b7ca4593ba553581b4102245cd5f49fb86b349d5e38e1
- MD5 0e65f7f5c7d529985250ce7c77e9d6de
- SHA1 2a6888ca18fd38b09bbd69f9d441728802baccfa
- SHA512 cce82f69b1e380f1c989e9844a2f2c6fa630e26874d9aacfdabd5b023b2c5d106beab09f0c21f271516096333138d4329d8ebebfbb4722b7e384938d9ef5596a
- SSDEEP 24576:G1W9Uumbeh8hyNn5rVPaMCBFry62pxMrTBFKxQbj:EW9U1q5rVPaMCBFrUxMrN8xQbj
- TLSH T17E057B203A0AC036E65E01B1583CEEBB627DA9721FB194D7B3C86E2E69705C25735F17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\systems.json
- Size 495B
- SHA256 2f2541706f13fd6d3eaad2628f7b4fa35f0648822edacb8b92d04cea42fc5537
- MD5 775c312110d971862864b91a2379794a
- SHA1 b5a7a80ebd352fd45493f3968ebb2c7735fecb11
- SHA512 3c3428222feef08d3be3896ccfa72a1ae6ee0cb06e9c11f005439041e3f8ab9263a07f04a6c054e0d82edabd48aef9a68ecc45e3fad8803dde365e668f9b58ff
- TLSH T1FDF001FC72C708D11BA816983EC02D42D8478F4DE4B24F4D78BC170CB9A0A6D2E2130E
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\Razer\Installer2\App\vcruntime140.dll
- Size 83KB
- SHA256 5695560a50ed9746696c0d647e55d77459f5981907c177d086df36656a978b19
- MD5 b7ebc19a5b23d0d32ff014e30be26061
- SHA1 efb3b58b31a27407402a2be0d41aee120519c282
- SHA512 922d94e80cdffeb51a1818c52b5c568597307225eed33c7c07e193322c2e9b0c7a5f17f3f4b57f2e22b8ad7f9509cb893bfc6d07d19af83360da6c0d807aa93a
- SSDEEP 1536:4jer1DQwLp57xeH8zIJBj3hGzHcL3CTsQ+Vbc8su0sRXdjjecb+4AXmUkEBd:4jeNQwFFxExBozHcL3CTsQ+Vbc/uecbU
- TLSH T153837D11B4C84071D16A4D3452AAEA73763DAA608FD44FDF6FAC4C9C19B93C1773622B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\Razer\Installer2\RazerInstaller.exe
- Size 13.8MB
- SHA256 7f0a48dad2c19a3dc7fe2e08b63a6cc125c877cd51aa432b2d16a9c47f277ab6
- MD5 f9137b0951cc1641241daa1bf35f1525
- SHA1 d953d86fc07a9c2f00634b54b3367fc0a83ca7e3
- SHA512 3e51766e11807c65e7c481e59a49aad060c6382033bfaac33af0e9d8ce3a9ffc56e533d846fb7a2429c93b0dcefa242e475a2b3cb280e4158be5f64e7df43658
- SSDEEP 393216:iDEkf825KsN6f35HvPhSxByUWARAYmg5ovv:Fj3k1LR6g5ovv
- TLSH T1E3E6334717F84E47E17BC3B0C4AA419592F374A2E93DCB8F9B51609E2987388D942B4F
- MD5 SHA1 SHA512 SSDEEP TLSH