floxif | 394d7c8a2b5f1b48aa258e2fa5cc5d3c3f2c27502365060243b0ff8edcb86d5e

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 02:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
Size 2.2MB
Sample260808-c4llhs1wgv
SHA256 394d7c8a2b5f1b48aa258e2fa5cc5d3c3f2c27502365060243b0ff8edcb86d5e
MD5 d49f03728f2f4ca0c64c5ec40cfaa95b
SHA1 76ad134a7907867fb544e90fda2f1c0e9d9dacfa
SHA512 dc5df27b4f913b35a39118eb8544d3a536ac5e74c2e21f9d1e31f1cd8989fb3be9dd379a16ea2b3517d62e89674f684479b1d017d929a608328831921433649c
SSDEEP 49152:JV28mEHKRzZkUIsQjOxNdP5btpFjT1Qw+BgJNBieEaRItZ20Ez0:JsDEqRz+gQixHPFhRQvGLAqRutEz0
TLSH
T11AB5330227E147FAC1E18072F1BD5F5898F5CBBC0A6C4293B31699576FBC11B652E227
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

adware backdoor discovery floxif persistence privilege_escalation spyware trojan upx

Malware Config

Signatures

Family: Floxif, Floodfix
Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.
backdoor trojan floxif

Detects Floxif payload 1 IoCs

backdoor

resource	yara_rule
behavioral2/files/0x000d000000019cd9-1.dat	floxif

Detects executables packed with SmartAssembly 2 IoCs

resource	yara_rule
behavioral2/files/0x000c00000001c62c-244.dat	INDICATOR_EXE_Packed_SmartAssembly
behavioral2/memory/2660-247-0x00000000000D0000-0x00000000001C6000-memory.dmp	INDICATOR_EXE_Packed_SmartAssembly

UPX dump on OEP (original entry point) 15 IoCs

resource	yara_rule
behavioral2/files/0x000d000000019cd9-1.dat	UPX
behavioral2/memory/3780-3-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/2068-165-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/1932-172-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/files/0x000c00000001c633-184.dat	UPX
behavioral2/memory/1932-189-0x0000000002650000-0x000000000265A000-memory.dmp	UPX
behavioral2/memory/1932-188-0x0000000002650000-0x000000000265A000-memory.dmp	UPX
behavioral2/memory/3780-281-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/2068-290-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/1932-293-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/1932-296-0x0000000002650000-0x000000000265A000-memory.dmp	UPX
behavioral2/memory/3780-295-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/2068-298-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/3780-303-0x0000000010000000-0x0000000010030000-memory.dmp	UPX
behavioral2/memory/3780-314-0x0000000010000000-0x0000000010030000-memory.dmp	UPX

Event Triggered Execution: AppInit DLLs 1 TTPs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
persistence privilege_escalation

AppInit DLLs
T1546.010

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral2/files/0x000d000000019cd9-1.dat	acprotect
behavioral2/files/0x000c00000001c633-184.dat	acprotect

Executes dropped EXE 5 IoCs

pid	Process
1932	EasyBCDPortable.exe
2660	EasyBCD.exe
5560	bootgrabber.exe
4480	UtfRedirect.exe
5996	bcdedit.exe

Loads dropped DLL 17 IoCs

pid	Process
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
2068	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
2068	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
2068	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\d:	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
behavioral2/files/0x000c00000001c62c-244.dat	SmartAssembly

UPX packed file 15 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x000d000000019cd9-1.dat	upx
behavioral2/memory/3780-3-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/2068-165-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/1932-172-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/files/0x000c00000001c633-184.dat	upx
behavioral2/memory/1932-189-0x0000000002650000-0x000000000265A000-memory.dmp	upx
behavioral2/memory/1932-188-0x0000000002650000-0x000000000265A000-memory.dmp	upx
behavioral2/memory/3780-281-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/2068-290-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/1932-293-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/1932-296-0x0000000002650000-0x000000000265A000-memory.dmp	upx
behavioral2/memory/3780-295-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/2068-298-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/3780-303-0x0000000010000000-0x0000000010030000-memory.dmp	upx
behavioral2/memory/3780-314-0x0000000010000000-0x0000000010030000-memory.dmp	upx

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\System\symsrv.dll	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
File created	\??\c:\program files\common files\system\symsrv.dll.000	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bcdedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EasyBCDPortable.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bootgrabber.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	UtfRedirect.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	EasyBCD.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	EasyBCD.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
1932	EasyBCDPortable.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
Token: SeDebugPrivilege	2068	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
Token: SeDebugPrivilege	1932	EasyBCDPortable.exe
Token: SeDebugPrivilege	2660	EasyBCD.exe
Token: 33	2660	EasyBCD.exe
Token: SeIncBasePriorityPrivilege	2660	EasyBCD.exe
Token: 33	2660	EasyBCD.exe
Token: SeIncBasePriorityPrivilege	2660	EasyBCD.exe
Token: 33	2660	EasyBCD.exe
Token: SeIncBasePriorityPrivilege	2660	EasyBCD.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3780 wrote to memory of 2068	3780	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe	89
PID 2068 wrote to memory of 1932	2068	2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe	90
PID 1932 wrote to memory of 5620	1932	EasyBCDPortable.exe	91
PID 1932 wrote to memory of 2660	1932	EasyBCDPortable.exe	93
PID 2660 wrote to memory of 5560	2660	EasyBCD.exe	95
PID 2660 wrote to memory of 4480	2660	EasyBCD.exe	97
PID 4480 wrote to memory of 5996	4480	UtfRedirect.exe	99

C:\Users\Admin\AppData\Local\Temp\2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe"
1⤵
- Loads dropped DLL
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3780
- C:\Users\Admin\AppData\Local\Temp\2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-08_d49f03728f2f4ca0c64c5ec40cfaa95b_elex_floxif_wannacry.exe" -sfxwaitall:0 "EasyBCDPortable.exe"
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2068
- - C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\EasyBCDPortable.exe
    "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\EasyBCDPortable.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:1932
  - - C:\Windows\system32\reg.exe
      "C:\Windows\system32\reg.exe" import "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\settings\EasyBCD.reg"
      4⤵
      PID:5620
  - - C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\EasyBCD.exe
      "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\EasyBCD.exe"
      4⤵
      Executes dropped EXE
      Modifies Internet Explorer settings
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:2660
    - - C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\bootgrabber.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\bootgrabber.exe" /tlist
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5560
    - - C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\UtfRedirect.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\UtfRedirect.exe"
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4480
      - C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\bcdedit.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\bcdedit.exe" /enum all
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

AppInit DLLs

T1546.010

Privilege Escalation

Event Triggered Execution

T1546

AppInit DLLs

T1546.010

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

symsrv.dll

Path C:\Program Files\Common Files\System\symsrv.dll
Size 67KB
SHA256 de055a89de246e629a8694bde18af2b1605e4b9b493c7e4aef669dd67acf5085
MD5 7574cf2c64f35161ab1292e2f532aabf
SHA1 14ba3fa927a06224dfe587014299e834def4644f
SHA512 4db19f2d8d5bc1c7bbb812d3fa9c43b80fa22140b346d2760f090b73aed8a5177edb4bddc647a6ebd5a2db8565be5a1a36a602b0d759e38540d9a584ba5896ab
SSDEEP 1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZL:c8y93KQjy7G55riF1cMo03V
TLSH
T17863F1372AB5807DDD210D37949F835AB771E5A76C20643FC25907D988B8DD0E3239AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

symsrv.dll.000

Path C:\Program Files\Common Files\System\symsrv.dll.000
Size 114B
SHA256 aefc503b1ed462d7b6280228a7b5b710792273b78934426f88325341ac5b5a92
MD5 e609411db8aa6775d0344c75c23ae79b
SHA1 1d2ff6194bf159ce36cd0461cd3da29486d1e97d
SHA512 6884ff5c07bc687132c965a59cb8c5a898a25da74c6c846c1d6089ddca8007cb7e4d2f8520bdce9fbcf6e2f9c9e5c28d8c8d6d049d3522470bdc7d38bbfa0ad0
TLSH
T1FFB09262AA2791EAE1AA224505A0248C1ED0B62AB48638002EBA5A4E93256A85916147
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCDPortable.ini

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\AppInfo\Launcher\EasyBCDPortable.ini
Size 2KB
SHA256 19a20cf0eda77e075300a692466d32badb0216619e1b8581c9588e73c8e17b9d
MD5 624c0610fc7ad1eab7e4e24829d99f35
SHA1 cab167d6706dcc144e0f26a8b44088d214fb5db7
SHA512 dca5363d31f348a48d805359e58936f7e0726e542a1d1c2c29e74dbae53864a7ccc4e5f0caf36cc27ff35995c1795017534abcecedd2ffeb9703acdeb94cbe79
TLSH
T12D41E406727CAAEF1060AD54FFC1E78A0FA551ABE1F76C7AF1623D4998200D406D4ADC
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCD.exe

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\EasyBCD.exe
Size 965KB
SHA256 6a6e16c176004128b918ef3f9ecf1d51d828e6099fba6542b5ac6abdb67c1030
MD5 e478c92160a3c73c77cdc9f515dfd8b0
SHA1 f0fa230f8c26bcbddc3b68f38ce0793d46c0ca2b
SHA512 3682b4f5bc31cd056c3f552da657309093e35b4757c073a223385c04765f622ce9ee000fb5dbc950c68ad7913ffdcc831ef65bd5ed7241f6179ea375b17be822
SSDEEP 24576:Ex3xciL6WoADwxT1wdMw8HvxDIDG1NBieKLjZRJ8ta:EtxOPADsT1FwA5gGNBieE1RGQ
TLSH
T11C25BF68FDD99AF5CADE0A3E60E29C28DFA04909DACCFF5A104B5CE43544FB1950B943
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EasyBCD.exe.Config

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\EasyBCD.exe.Config
Size 330B
SHA256 7ec2512b59e62a3aeb0a1025bf152a31291e17e7e469ce18efae153064665b03
MD5 3379ac7243adcfa51a02295dbedc956a
SHA1 469bbae4b1844832809196c89f198029beef4af8
SHA512 08d7101b21b87e11aff79cd8b47ec3ba2878cf72406e4d59771531ce6098609f8340607cd8b9ae0721c56f8fba5927c93f0412f0042879f04f2cd223d82430a4
TLSH
T143E0CD1585ACFD7B4C171B53726045A2AFF4E2D1B6565008B4BF6ED40B121CE438F3D6
MD5 SHA1 SHA512 TLSH

Submit Download

NeoSmart.Localization.dll

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\NeoSmart.Localization.dll
Size 25KB
SHA256 3a56005b2efb34620019ef432fe90eeb63726fc78b37be841f25c2aed82eb1db
MD5 ad0a59ae87d4ba106e965c62f0bc3d88
SHA1 5b39b6fd95b5bee72a17d79a1f4958256a5c4149
SHA512 562b2cbd3fdbbb71dee9fdb68bd24b9bbf27beab93de338a616baec837910f31ad3b13d75564d45a1cca26e1150517b47d0b3984bae7d08675593bde22bbea98
SSDEEP 768:VhBgzZSt4PP229G7Re7gs8KbYZDdXYGX6P1AAES:VhBSSWkRe718aGXs
TLSH
T150C2F808A3F4D71AE9BE477D6C72519003F1B61AA633DB6A4E94A08E1C733D44941F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootGrabber.exe

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\BootGrabber.exe
Size 183KB
SHA256 f9842333f0b562b4ab5349a09fc173b0b2971c1f600502c4284781c78a735d7e
MD5 2e12b37d32c8bcf8920f5ebb6d24a6b9
SHA1 7fcd9e4ebfa2c400d6340133440c087e56a3c9e6
SHA512 aa82f1ed984174a1b5a610eb28a422da6172dd027678d9d4b7a9714e85e050616403ad294a005ad1ab39032758a4d2fd8d498b1241dedda8c91698ffc7d3c527
SSDEEP 3072:GsBY0ds3votpUUKh3U240kfLCVvVdYD1P5SihxFPDiG+UB0okF6nxxHGqtK5Q8:1Q1hN40iLCX6twihziloOqqpf
TLSH
T1F9047B2179C1C032E0B319311AF8DA766D7DBE710B7095DBA398437D4EA0AE25A31B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UtfRedirect.exe

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\UtfRedirect.exe
Size 189KB
SHA256 5a87d9485f6e13ee2c3ba4ac289a3e237d17a43ed428b8a5bd5f00fc4800d1ac
MD5 5b40791899fa37507e7c08bc3d9f5294
SHA1 cb98852ec22251b5124507427d05b3dfe7ec53a7
SHA512 d2c0de00943d7e9961571a8e798688e46a8e7267086e15abaae8abca0fa7aedd02d5df3c5eb3dc6cfab0c5982694129bf5b9c0cb5d8e978fec0d76d54e441390
SSDEEP 3072:e9C94N9X3WrYt2pbr2ixnVWdneELvt/iTV73x4nPrXY/JeKum3f+T4+:e5ArYkRyixnVWdlLyeOzvv+T3
TLSH
T190146A21B881C072C173193049F8D775AA3DBD710B685ADF63984B2D8FB42D1A736AB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bcdedit.exe

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\bin\bcdedit.exe
Size 317KB
SHA256 8bf1b71182fed18d6b4112bdc4d496800b5bf6681de4c4f6536ba67378f38a12
MD5 a60cbaea0f8ac802d21c0cc7bc2589be
SHA1 f4c1f4b7f340968ba9c360f3fc1ef783a8bc7b2a
SHA512 24ab704e214758b9318a333bb3a466a05e4218fbef70752b266d782e5fe89de19db8e5d5a584245fcc6aaf32ea99a0764583b3cc56299e99a2b7cf6ec42c2ccb
SSDEEP 3072:E4grG16GoeiMyCN8JcgYX0ygF6ukNkl1QfhG+FgWAKaWJaRhdNV/ysXo3HD62xKN:ETBqyCNIcD4guUkng0lmKdGJLk
TLSH
T149641D1366E91104F1F33A745AB959B09A3BBCA1A97AC54E129C014E0FF3E80DD71BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AboutBox.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\AboutBox.xml
Size 1KB
SHA256 d1e45ca02de4d82c4abf4200487a3f9b759239cbc671b8f17fb21969b1c1ad6b
MD5 57c22bc804349d6b4c292e5e6fac5883
SHA1 4fbf2329b8db7273c2cac2159ef7e021abfc7d02
SHA512 b7edc55696746049c59d29d3af3cf029b3e9f21c1ad0024ed5421ee32f55d2a9f4d713a272e8a8b2ea359fa649e4451be911037a6e84dbb7ba3e3fcbad04ac5a
TLSH
T15721AB2E57B2F2E10ED2076B0E5584497B2C31AB537A01ECB84F04242FE884D47776B6
MD5 SHA1 SHA512 TLSH

Submit Download

BcdLibrary.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\BcdLibrary.xml
Size 2KB
SHA256 5b94b2efbf3ca74dc78dcf49c6c521cd6ff823d5ad238226a400e5e5a8e4b0fc
MD5 9b4be1d3d51da52e41e2a21fec4c97fd
SHA1 df4b2426d3f96e2ca9d59b3de0c98718990be442
SHA512 6e8fdf99a0998253aa8a6e45dea72cdb07065d914d79847344a6527635fdb103d8bf5be1500c49927e2569f815ada88494e8725cf2102a384110f8c6b8d8a3f8
TLSH
T1AC51D51E6BA2EA720EA5476F4F5440413B2D74AB076201FDA18B44646FD8E9C4B3B7F0
MD5 SHA1 SHA512 TLSH

Submit Download

DefragDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\DefragDialog.xml
Size 329B
SHA256 19a4765488f7574ff0fe54ee538df47968b3614f716369e2874a31735c007620
MD5 314b52187045ec5cb47d3270286cf1a8
SHA1 354e0faca02392bb1e3bc188127fa39dbf81e95b
SHA512 768173d405d0e6d271216fe81e856a3f3bd9af830d4a96721cb8098dccac49ceb7c532afb8baa1d74ca5f951b8f02b3e0aeac83a1ab0ff790c9ded6eb8ed5b07
TLSH
T138E0862A66A3E6714E11152B8E95C005365C759713F504ECE49F44205FD8F8D073B2A1
MD5 SHA1 SHA512 TLSH

Submit Download

DonationDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\DonationDialog.xml
Size 1KB
SHA256 7ebf9f1dce431c3ecc61f398751338517b2b6f7bac9a289f6232e26c663dc391
MD5 96d0729ab37766f2a749d6fb4f594936
SHA1 4d6239e47562df05b45f5b9e38a111317b623f1b
SHA512 bb3736acc931f5f99879c81cd8640e6f35815cce9becf666e14e706bcef57eac611efa1b850919c1fc4a4ca47d93e52a2b5eba1d32cc2fe55be792bf2e57389e
TLSH
T13011891FB632E5A10CE11B6F0A8090547B2D72AB736A06ECD48F14201FE998C473F6B0
MD5 SHA1 SHA512 TLSH

Submit Download

DriveSelect.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\DriveSelect.xml
Size 997B
SHA256 2f5186a8f12d42176de86d4962b5dbb6ddd9071d2f5d1cdc51eb2f124c6a50ac
MD5 e2fdc84096a9b2e5a9927070021c48de
SHA1 11d1ef6208b3ece6f3f280efd1ae2b55f55d1c82
SHA512 2bad387cccb4938b91272ef495dad91a7fdaee327d69959075217f00ecd3d11e9a9feca68c3c47957dd50d02049aefebedc8e9a8628a02643e0c753f9406cf09
TLSH
T14B11385D4296D5728E60996B4FD511857A9C30CF43B600FCF48E40142FEDA8C877B5B3
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCD.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\EasyBCD.xml
Size 18KB
SHA256 a941b2c1fdd614e5145161aadb56c0f5dae4836bfd6b29018bf6d5fb99280aac
MD5 6d85acdb10090c82a8ef6587c9dbb7c9
SHA1 4154908d0a05d93531eab09853c2053455456754
SHA512 dc261dfe778240913775389c687159e86d3ec1bcc3f8593ce76145c2b9185fa52e75fb8dbdd255085e313e8f860c25c578b1967c8d8cfe82b57fa8246bbd5527
SSDEEP 384:cdCc1Cvg7lsmlSPL2GfqjElp1hN2b/aZx3J5:cdCNvg7kPL3f4b/IT
TLSH
T194828E2E26B2F6720EA5176F5F8550457F2C30AF576601FCA48F40242FE8A984B7B6F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EasyRE.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\EasyRE.xml
Size 1KB
SHA256 daed6dc83fb3c08023cce6728b7c60b30174a00fdea7f97af65d04c34c5880a5
MD5 c33d9d4eae1c16fb973a1ff94dc759f2
SHA1 baa4871b1222c4ee140589d024af321ae9b3f11c
SHA512 ae492299285e085d00c6eeaf8d2c3971183267c8e223384349f7fc92616645bf34882ff3675a6baab0d451778cddfca11224df4ca695d46d3fb4dd3139f24485
TLSH
T1D921AA1E7A01FBB10D628A5B5B9590162B3C709307B114FD988F91289FEAD5E073BBF0
MD5 SHA1 SHA512 TLSH

Submit Download

LanguageDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\LanguageDialog.xml
Size 399B
SHA256 96c6c5effb537c5fdb8b3b8f907fef21bdb3eeaee6a4c6ff12f064bef342d209
MD5 928d365e6227dd6858ed623b28e21158
SHA1 85305451574575ab97141cf844c5ebcb60a6895b
SHA512 7d092bc0dfe2bedb7fb84e7ab56500bfb143c15b2baacbd001e06c6d36d43fe216ee5e68a8e328a64f5668be319dcf6b8e8b448b50953305ebeead7c05727295
TLSH
T137E0921AA772E5644E62162B4FC044483B1C348703B608ECF98B44104FE9A8C433F2A1
MD5 SHA1 SHA512 TLSH

Submit Download

LicenseDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\LicenseDialog.xml
Size 1KB
SHA256 33f23516c1853a17e41edc603d860b8ead64cb1bdb9c27925629282166a539d2
MD5 0fee3c196f488b5e0628989fda34c0df
SHA1 c41d95d996896769a6a745eac25802089b9963d8
SHA512 829b1948407d92036aee161d410606e79c23c7c477d874119c849bcb2004a44beff74f5cae881686e286e28dd134f85ad9b44a73e6adad61f6126ab52315f1d3
TLSH
T11631011EAA72EA734EE1476F5F8000097B2D349B076A01EDA45B05741FE9E885F7B2B0
MD5 SHA1 SHA512 TLSH

Submit Download

MainUI.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\MainUI.xml
Size 12KB
SHA256 eedfe23ab06b57b87774a19b5e4b8b5d7d59169b1a978197a28ffb7b7d46399b
MD5 e9f36537dfe6333eb2affc5fd010e290
SHA1 8eb2c560ec375830b3b699c65b8b9b8c68fe9014
SHA512 213b7fc186b8bc9400bd6bb78c97a4ac23279d33317ca684e076706ab3ed5801cc6830f7cdafb018e0a5e1fe42a36c73cbc55162fddc3a5de988cc733ff96241
SSDEEP 384:YEzf/9Ms4EkWedCm+5imRMobqmZS13J21C:bU+5imRf+UUUC
TLSH
T13542B92E66B2FB660EB4166F5F8444013B6C318B576602FCB4DF41242FEDA580B7B6B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptionsDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\OptionsDialog.xml
Size 2KB
SHA256 299f7cc883e64e72b093a8be83da0627d8fc87206d8b0f6a360200e8f9d85823
MD5 2175b75eec134dd2beae5c64465835af
SHA1 8b20b04f63fd4b5fd35b1c6e0500bfd741ebd85f
SHA512 95fa08e628b5b3ed5fd415e2e83e01c9956da18b37efe5c9f9e9a5874c1730df1177ed5cd01481105a33da77fd6e8601a57f36dad4a57b7bce6e1b85211e7819
TLSH
T1D951632E67A3EA754EA41A2F4F9141457F7C309B576601FCA18B40212FEDA980B7B3F0
MD5 SHA1 SHA512 TLSH

Submit Download

ProgressDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\ProgressDialog.xml
Size 360B
SHA256 787fae5a46c80688d65ef3ae0d238af468636747e1e80f48283ca22a8b46bb1c
MD5 b71bcfcd26da542cdc999461273a5f8d
SHA1 8ead413c2af8e562439d2493f53ea2213b408780
SHA512 135a1e12390601acaf7b3fe283f8d80856bffb031077939c998b7049d1d56855c374cec7b268e1061063494411aba646dcac725a01a02d7e4913fc5cbe2631cc
TLSH
T117E0260AA743E6724E61557F8FC08048672CB8CB03B688ECE49A04105FEDA8C073B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

SdiMaker.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\SdiMaker.xml
Size 782B
SHA256 a69e3291bdca335d32871d8615f1bb9e47e7132c157f87514d3843f07b29f86a
MD5 44e86fb9d4f0143d20c4bcebfd3a6a0b
SHA1 64b034817dec4764e3d03fb15df7e4187dbf3eb6
SHA512 08d6412a9a054da5f9d16d89015860efd099ee22510c73b7e1e49fee1433ddda7f7af7840262e421bb0fe595b9a6fa04f0d088fcf5506a254c0fdb10861c26db
TLSH
T12601491E9677D7704E62566B0F9B81003B5C74EB036A12EC988B04541FEAA184337AA1
MD5 SHA1 SHA512 TLSH

Submit Download

properties.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\en-US\properties.xml
Size 180B
SHA256 b8a414bfd8078839d7fc94ab64b63f03f75aa71016fe021a48fe6b3be3173126
MD5 b15bdc1412728c5baaef79cc09e73555
SHA1 998c68baee96c3d34035a3b63b49ba58203d3aff
SHA512 fd211b0517fb09075306a65eab59a195a0b41172e6fda1ea072dc8b240747c70068b993a76085f5a6f9f29c87df58f50b3eb140740ce8dc0f1c467c590d48d7d
TLSH
T173C01242E5939023871455ED0FB654052B51B29BD0190D41B422852CDF057DC27D3A54
MD5 SHA1 SHA512 TLSH

Submit Download

AboutBox.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\AboutBox.xml
Size 1KB
SHA256 c837c908319881a9781e454d6a8e6e91606fede069b5c9296ba121dafecf7a79
MD5 883eb174fb50732863fcb223bb689630
SHA1 85421afa904951f836275f6d9434970d099b419b
SHA512 10db1a874ff6fb34ec95f3f85c7390905fd1810fecad918f791a3a6b8dde4699c436dc3a3fa07069008d521dad214b44693b5607b13626f85cd16c62d0c1c495
TLSH
T1C131116A6973F6E10DD50A6B1FE094505B1CB0BF971B06CCEC4549505FDC9C9033B676
MD5 SHA1 SHA512 TLSH

Submit Download

BcdLibrary.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\BcdLibrary.xml
Size 3KB
SHA256 534a14891db815a7728a8bfd7d683584b39d118a7bca2e5323a3ae5e5e2479f2
MD5 219c12bbd4390df75ac7f6adcb5aff3d
SHA1 ca05e39b1b60fe53f5a4e2082197df4292618e39
SHA512 e7b0cc131641ecac16fca753309aa3c7db160baa4fa96f05d1f5f791d9e0050546e9cdf89a1c35ece021b9adfcc88b8b59e83b47c5536c0de838a4655f6cfc25
TLSH
T1C1510D5E6AF7E9A10EA50F6F0F849140771D749B576300ECA48B48205FE9B890B3B7F5
MD5 SHA1 SHA512 TLSH

Submit Download

DefragDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\DefragDialog.xml
Size 329B
SHA256 7084593701e3d7f0aceffb6b5d63bec611d103e41850d26ec90b2fd4a7944d98
MD5 8500ee43f1b0ea2a47a9637377902a7e
SHA1 69399c69041561fd018e4c0dd6c50b00a14ca242
SHA512 966d96e82aed98c90c702f6233e1372c4bc48fcfe8ae6e22324960476607e952b556894e6daba9527cb05244fa3cab1d486eed9c8a5e21dd69b25230b6e48c6a
TLSH
T124E0862A7663E5B14E11552F4ED1805436AC748713B604ECE49B48205F98A8C073B6B0
MD5 SHA1 SHA512 TLSH

Submit Download

DonationDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\DonationDialog.xml
Size 1KB
SHA256 318667ac37efbc88e9ef7e984e2caec11cc8b16b454c07adcd133784ac123f2e
MD5 1f6859a48903f308639e03ba3284e7f5
SHA1 be6cc001a5a4dcd8e04aefcb124889fb51a58a5d
SHA512 41eb5afd8d7aa78298825b25b669016f2695e478f5e57748f0c8d2e0dc4d4de105e74f62b3ff69c4554d16f944e625cd81c43d812c0f86f0b99d5f1a5b74d5c2
TLSH
T191219EAD6B63E6D54CA01A2B1E80D150AB1C7997732701ECA49A4D305FD9ADD0B3B5B0
MD5 SHA1 SHA512 TLSH

Submit Download

DriveSelect.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\DriveSelect.xml
Size 1KB
SHA256 9be6ef8e6644e87c68718df8f3f3dacfd760d6d8b6d51a4ea84dbdaa6ab68db4
MD5 dd35c3a5a530e2eec685855d2d3a37bb
SHA1 5fc3a189aaca5df055bb230744e5fbe91ebf8f74
SHA512 8b8dc2ce8112439461e0f3c99e6bccc98088bdbcba452152b2356b34e6660709f462238ed0a90e55e58211f9705235c24f820521ee6882fcc8e4a3923d53d190
TLSH
T13521802E64EAC1614EA1591F4FDCE24437DD38AB537200DCAC9A08206F9D74D073B2B7
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCD.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\EasyBCD.xml
Size 21KB
SHA256 a3a4eab70f088585ea57c4f278a848d22757c2b2cfb6d1c53c881b332c02379e
MD5 b1c31e3485b654f3687043e4fcc0b53f
SHA1 eae95c89e1f0a9485511e5a415fea3757411b193
SHA512 531146d2681967f884b68ff5167ef6c06b311c6c6ba9649cdb3059794cd082e80d1f414f7de040711179608fb28f3d12fc8c00bbace9fdc38f7b1190a1d676e0
SSDEEP 192:bBgHOLVgJ1ZRK6UY/MX35DRN9HGtpKQT4AINo1UFzT3eVRN/sKklLKDkZvONVq8R:WuERQV3HGtArp3O7UKklfhOXn/0/8
TLSH
T19FA2DE6E79F7E6911DA14A4F1FC4A100675C70BB576301ECE88B8C205FD9AC90B3B6B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EasyRE.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\EasyRE.xml
Size 1KB
SHA256 a10925561a251b5e3462f979478147b7e8d4e739d7f38038ff1ca0d516204ec3
MD5 ae8bb0e9b6e218a10be54da5899ae3e9
SHA1 665b44075d862e91da038501a43c64c3e5fa5f56
SHA512 7dd872b115e0122dc837eb21a095597a12366151f9ee7bfc82efc4b4fdd83f5fd8b0ed1f2a4d529c0880f009f52e0012001bfccef66567b5bd25d352ff0cb2e4
TLSH
T15121ED6E6AA3D1694CA00D9B0BE4D144571D70B3275701ECD84A89205FE9FCE0FBB7B4
MD5 SHA1 SHA512 TLSH

Submit Download

LanguageDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\LanguageDialog.xml
Size 381B
SHA256 e5c2e1197b9179f3960b347ccb1b1837148b540f35ba8c2a6550631061a886f6
MD5 dfc7dd6dd71c4ef40c9beec4b62a8ef4
SHA1 a1b4a01a4757ce8a5d8c87444b3b8f71a6634ede
SHA512 a40bf12014d1a251fa55115f81baf6622a3c34b2ffdc1205f1526e5590782af44bd5b601e8e472c0e611a7a2c34b1cfb4db01fc4882d78baa690cc08ae81983e
TLSH
T1D5E0D81A9762E5710E11262B0FD05048375C348B23B604ECE48A44204FE9A8C477F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LicenseDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\LicenseDialog.xml
Size 1KB
SHA256 f6851389f78a8b845b903cb42cd23c389368fcdaa9380e8e9573c629c11959ad
MD5 8acbb0cb7057a9dce9f9c7505e9797b4
SHA1 07dcab47155264545641f2e60213775ad2b3a295
SHA512 c8cef019b2081b4ab2229a6874be38d35cdccff71973e5d00686eb914b3c5effbbf8397b372eef7b8e8136e5fbc0f8e5e5ba7d4abfc96118a6789ace552f2069
TLSH
T16831271E7AB2EAB24DD10B5B1FD45044372C309F172605ECE84B09211FED9985F3BAB6
MD5 SHA1 SHA512 TLSH

Submit Download

MainUI.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\MainUI.xml
Size 13KB
SHA256 8cce773649c3d42bd0a65f4fe7c64364fe67dac8540ebdf5428b91a348768bf2
MD5 c1c82f45c3129dfbed570e515532e2d6
SHA1 ccd3fbe9b7716ca344e67242311751af2fce2cbb
SHA512 b5291539b48a3cb5ed2d5b6e27e8d6950c729837d9b8640c23926a787fca0ae8e24b14b9340ec08aad8220f88e0e572f411f38e27b980c2aea17f10c5ebd51f4
SSDEEP 384:7Ezf/9M/4EkWedCrxpvBL9RADRMYqZp3UOk:dNPvBL9RAVSZFI
TLSH
T17552EA2D7AB2FB620DF00A5F1FD445407B6C319B572606ECB09B45246FEEA580B7B2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptionsDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\OptionsDialog.xml
Size 2KB
SHA256 d51e336d8fd980e4afe130f93cb39c393e5646aaa64b4961975f78cdfca87565
MD5 9fb4355e9719fe7f36b5e449161382b7
SHA1 d98e4ed815676f90c66535f0e3d78d1e9b17ed62
SHA512 5718ebc206ead911aecffaaa4328721fc96fa8403f12a573fc8a012151108f59344afc7375240da2f197e90fade3bb642c49f36494ee8d0517b1c20cf7c29d59
TLSH
T10E516B2E7AB3E9710EA00A1F0F9451447B2C748F576605FDA5DB45252FEAA880B7F3B0
MD5 SHA1 SHA512 TLSH

Submit Download

ProgressDialog.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\ProgressDialog.xml
Size 380B
SHA256 373f68416d333cc97dc74a00bab8ada24ed861e621e0dded0edd92dbe3855341
MD5 f6d1c497ca3b282fec8cb468e056378a
SHA1 25e217a29a3345df6dc992b996805ea6b77824be
SHA512 a45a9d98ed6f04566c4f305ef72e2046a585b4e1c8ab5f0d9865ad00b388b162ec68155f051e4c7b94989abff12208cc9370e096b35216aeedc8089c6487f10e
TLSH
T165E0D81BA753D5714D51697B8FC08004276C748B576608EDE48A08105FEDD8C073F7F4
MD5 SHA1 SHA512 TLSH

Submit Download

SdiMaker.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\SdiMaker.xml
Size 840B
SHA256 9c65c1b4d2b0078d0a035ed2496978fe25ed9483922ff3f35dc8b077ffc97eee
MD5 684490c4336716dd4148ecf789c26121
SHA1 3f194d47c8b9185ae96fdbef46e56088f7d3fd8a
SHA512 7f456d84dc62b279f00870299f60ca1a3d4a2fe84d68db55ec99d3a1ab2b4206551f9702d7df233681e1cb836d778c47141e69717e2871d623245fbcdbddb904
TLSH
T1EA01AB6A61A3D2609E714E5F0FE291503B4C75FB139F15FCA8CA08504FD5A880337AE5
MD5 SHA1 SHA512 TLSH

Submit Download

properties.xml

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\App\EasyBCD\lang\ko\properties.xml
Size 182B
SHA256 f2b7e9d7e1dafe9335b53e39fd8570968358f4f0a3426012f0a510b1f7fec26d
MD5 06eaea5b0972b869dc5c643ecbb2fcfe
SHA1 05e31974657b1d5ba89f0709a009b2b8233ebcf2
SHA512 38b5cd2f7c762ff922a02389992bb1b77da9fbd6628873e156a152c5d31c46f6ac5e431198624e4d29ba0960b9467e6a8972e826e272c6e655ed1fbdaa88c0f3
TLSH
T1E1C01212EAA3C522C7045AAC0FBAA4043B21768BC05A0D81B422897CDF097CC37D7AA8
MD5 SHA1 SHA512 TLSH

Submit Download

PortableApps.comLauncherRuntimeData-EasyBCDPortable.ini

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\PortableApps.comLauncherRuntimeData-EasyBCDPortable.ini
Size 177B
SHA256 7ee837dc87e6f770994eda374df85087a01e5f7170d27ea86d8a509653b10a2d
MD5 5f664286fcaafb80d51dd9566f4a8f48
SHA1 eab145bda9c9da2cc8dff51f79eb26a549939a00
SHA512 cc295c192a5c493d4a9cc12284bc2b100e0d2ec484ecb8b8c51f48faa3ef6c2e6867aeeac9385971a6035f398c92b8820d05e08284ae56fd3e63b070b26d53fa
TLSH
T18AC0C080F4BCF5FB37045915669575CC00F84D48BFC10E0565008C0401B0D0C34F50EC
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCD.reg

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\settings\EasyBCD.reg
Size 376B
SHA256 038904913e4c865d584ae2bc208504a874d856bf8225265aa0d6186b2c033195
MD5 b6224686f84ff28ef6b44d791a3603e6
SHA1 7a73d441144a4e88a5e4979ded6cda9304b2eac6
SHA512 4867c888b53939543525906315974902b229816bc5f97300dc7df863270f648088d9db86d7b691a65d1a80a499acb6d4a365094f8efbe7d706ebe6db5e7b0af7
TLSH
T16FE01A2712E4310DB1F39B849AB499B44B36B9804E66959E51C94E0E41F04C4A561BE7
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCDPortableSettings.ini

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\settings\EasyBCDPortableSettings.ini
Size 148B
SHA256 5f61bdaa40e834a340af23c99f34922f5fe782308e807e525ccdd56f09e7d24f
MD5 cbfcb78607b2e91e6d2e5d24c9e50d73
SHA1 7dca4d193567c21e7c5e067a9883503784496b43
SHA512 8694bbc03fe23cc74c639e26e4b92993e9e3d1488a0fbbcc018d659d11641ce9dcd2f005f9b8587b69eb9efc8c3e4c0ee8b28c8bd0dece45bb0942d7ebf7d2b4
TLSH
T141C08C8C1AC03D0F06CDFBA0258A614801AEA601C04202789D273005081C3B68384CC7
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\settings\user.config
Size 2KB
SHA256 d11f92703f6746d484ea24b61a208def8b98118832a30778860cec6e7e35a979
MD5 e2d1eef09a2d39d6989fd4afa89d82fb
SHA1 e6a3ee2183dbf5e6cc10b827bf320d281028e556
SHA512 7b452650f4d20d37c9a6403057d8b13232da2c6c1f6d255b1b23b5d0961c516777f49db543b88a23a05d36ad3e17da4a6cd7ad51c99d68c5b61d0138381805af
TLSH
T186516D0C72CDAFAE11556A33E63112D1D4BBED235674B0F0A8BD7077B4508DA0AB2F99
MD5 SHA1 SHA512 TLSH

Submit Download

user.config

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\Data\settings\user.config
Size 3KB
SHA256 16881987b09ee929b037f8c9c3a6175c95093558173bb7d8e33056a126672f6d
MD5 96e548bd4f5aa789c98c4294113550e5
SHA1 ca927e6115e8d1590345a69d68ee5298dc5120cb
SHA512 9d8dd329d8efe2f14c355d4c86cc345c515a686f46ca90c23df9a3c778c946c3cdb353f0ff5e01d8e4704da3619f748423105fa67ca86540a8b7d1983ca77b88
TLSH
T1CE517D0C728DAFAE11556A33E63112D1D4BBED235674B0F0A8BD707774508DA0AB2B99
MD5 SHA1 SHA512 TLSH

Submit Download

EasyBCDPortable.exe

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\EasyBCDPortable.exe
Size 205KB
SHA256 bc7c905bab5d03ea91644ab9eb744fce3e0e060db80a46a71c18addad53aee17
MD5 0e8d64ec3c76fee99b3a1428cde987db
SHA1 992f6e92db5b494fdc87a321eade7f0f3ef6323f
SHA512 195e65709850d813a29224e7e71b533aca4ad5fc1769688b0ec525b704811d8d1fdb3f8b2ff19ac22f37421c06cd5c908759a31c963aa5341382cd17da8b4cd4
SSDEEP 3072:eweqOYEUXPnwoB/6edDC63YgS1NtGRoZXOeeKoZuXqGTDji/vc:rEUXUedDb+0UXaKoZuXhfB
TLSH
T17224CF116799C1A7F5B21EB2A9B6C5720936BC321DE4500F7394F70E2E316A2DA2DF07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EasyBCDPortable.ini

Path C:\Users\Admin\AppData\Local\Temp\7ZipSfx.000\EasyBCDPortable.ini
Size 205B
SHA256 147d4ec7475d009f2f6f2c74a96682d3cc74d438129d5fe6df6c91fb00cae910
MD5 44d871a48130fd09f99d08c07ade3a74
SHA1 4be35c2f58179b77322b2e5d19eca1393005d2e1
SHA512 4bcd4972e16f7c913c15085294fa683e37679d0afe4362ca8dbd1bf4bad7384c418a6480e5e3216d9b42ce0797be55ac6ff5f655ea979bb4d16acca59538dab1
TLSH
T145D02243129EE6E400FE4D8548CFC228EB3B9C8CFC8E011A7204B8C5100B838F726F56
MD5 SHA1 SHA512 TLSH

Submit Download

Banner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\Banner.dll
Size 4KB
SHA256 ec039186541c549f852b0a5731a6673f37ac3be57baa6ab9403d837e3a0ae548
MD5 adb9c008fe485853f97195bda33aea08
SHA1 d4e8b690a816e468defee5756cee4ffb01fef39a
SHA512 267acdab63574aa8c36dcfcb4a39c0cda0c75cd609d40afcef61d184a0f1e98a194d9723986c0e9e43f4b4468b417d62cd787f9914cb98baaa94278e56770d57
TLSH
T16981637BB2F04EF7E562023300830BD3259BE914672C461A496791ED764A997D53CB02
MD5 SHA1 SHA512 TLSH

Submit Download

ExecDos.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\ExecDos.dll
Size 6KB
SHA256 91d5481f576382164703e4ac244052265769377838ac30233ad79c983ed9d454
MD5 774e3b33d151413dc826bf2421cd51e8
SHA1 ab2928dcf6fa54bb9eb16e5f64bfcffaaeee90fa
SHA512 3cf955b13e81e4b6edb292df751ce7f64b0cf30979f57b1609f002859b4e68adc046b6674f76f7b7ce7144382316c344c11fed02d638e62fcc8464c32795a365
SSDEEP 96:38IgHUv7jr2GJ+dfuitjFVsDtwC6OcgHl7cFi1cyMV7WhWuaW:dCajridfjR6tw1OjHl7cE1KyhWua
TLSH
T172D1C639B7F40473E2FE16343EA1522357B9FC120B2686BE865329CD2CA1D50DD24B67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\System.dll
Size 11KB
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
TLSH
T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\UAC.dll
Size 9KB
SHA256 34c68143733dac84ab5e7b7a49e95b9bb1a061c4113d2ddab551f42c4253b28e
MD5 9b54a7f7ab2b340ab2e22e0eee5860a0
SHA1 8757037b59fcb8e46a0c442e274618a9c13a49ae
SHA512 23412e52e767347db06a5b3aa4c9d2ffb5f1a8770e197a51dfd307eda94ec267e5b72297fd3de589bb81f9b0aaa975cf0e3e4bc5b2248c5681ed78ea63394067
SSDEEP 192:6mX0ZodkQLOvnD0fn/Og9cjus9kT2WEpahhlmuzdb+W4B5h:ComD0fnGgWi1TYpczpdbeB5
TLSH
T16C128E6FF654805BCB18827A6D9204EC7062F9140AFDD3CA740DE0A7B45FB90D078E1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsisXML.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\nsisXML.dll
Size 12KB
SHA256 35e54b12771f671bd8d9677369eb8216b54de0608a07a92ef17a4c29a841935f
MD5 c5285d861243f3b41648af5c0ffd5678
SHA1 50012e20b898e2f1abad27a4bdca12033e618add
SHA512 92c687319e989199e392a81bbd16c00a551c1df9fc3535e98b2da0604424b148a4c379578837aacfa4e204d494c0f0b0ed4f7638cbf7462bc937b4e198631350
SSDEEP 192:3/ufSdX+LHASTxwSODR2bzdA74gB0jpYEfb:3mfSEL9lwpRv50FXj
TLSH
T1D542B5033FB6D9F7C84A1275BF8AA796D6F4630524800C06D3560E1E6F318AAFD7DA19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registry.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw460A.tmp\registry.dll
Size 24KB
SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
MD5 2b7007ed0262ca02ef69d8990815cbeb
SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
SSDEEP 384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
TLSH
T1FCB26B82B1D1E973D09F0479AB993F15E3EFAD507670EC5300667AC732A0AA2C769713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1932-172-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/1932-233-0x00000000087A0000-0x00000000087F9000-memory.dmp

Download

memory/1932-318-0x00000000087A0000-0x00000000087F9000-memory.dmp

Download

memory/1932-189-0x0000000002650000-0x000000000265A000-memory.dmp

Download

memory/1932-296-0x0000000002650000-0x000000000265A000-memory.dmp

Download

memory/1932-294-0x00000000739A4000-0x00000000739A5000-memory.dmp

Download

memory/1932-293-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/1932-188-0x0000000002650000-0x000000000265A000-memory.dmp

Download

memory/1932-182-0x00000000739A4000-0x00000000739A5000-memory.dmp

Download

memory/2068-165-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/2068-168-0x0000000000AD0000-0x0000000000B00000-memory.dmp

Download

memory/2068-298-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/2068-290-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/2068-291-0x0000000000AD0000-0x0000000000B00000-memory.dmp

Download

memory/2660-249-0x0000000002300000-0x000000000230C000-memory.dmp

Download

memory/2660-250-0x000000001AF90000-0x000000001B004000-memory.dmp

Download

memory/2660-252-0x000000001E4C0000-0x000000001E504000-memory.dmp

Download

memory/2660-247-0x00000000000D0000-0x00000000001C6000-memory.dmp

Download

memory/3780-295-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/3780-281-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/3780-3-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/3780-303-0x0000000010000000-0x0000000010030000-memory.dmp

Download

memory/3780-314-0x0000000010000000-0x0000000010030000-memory.dmp

Download