Overview
overview
7Static
static
5ConfigApp_07261.exe
windows10-2004-x64
7ConfigApp_07261.exe
windows11-ltsc_2024-x64
7res/share/...7z.bat
windows10-2004-x64
3res/share/...7z.bat
windows11-ltsc_2024-x64
3res/share/......bat
windows10-2004-x64
3res/share/......bat
windows11-ltsc_2024-x64
3res/share/...li.bat
windows10-2004-x64
3res/share/...li.bat
windows11-ltsc_2024-x64
3res/share/...p2.bat
windows10-2004-x64
3res/share/...p2.bat
windows11-ltsc_2024-x64
3res/share/...ip.bat
windows10-2004-x64
3res/share/...ip.bat
windows11-ltsc_2024-x64
3res/share/...ea.bat
windows10-2004-x64
3res/share/...ea.bat
windows11-ltsc_2024-x64
3res/share/...ar.bat
windows10-2004-x64
3res/share/...ar.bat
windows11-ltsc_2024-x64
3res/share/...im.bat
windows10-2004-x64
3res/share/...im.bat
windows11-ltsc_2024-x64
3res/share/...xz.bat
windows10-2004-x64
3res/share/...xz.bat
windows11-ltsc_2024-x64
3res/share/...ip.bat
windows10-2004-x64
3res/share/...ip.bat
windows11-ltsc_2024-x64
3res/share/...aq.bat
windows10-2004-x64
3res/share/...aq.bat
windows11-ltsc_2024-x64
3res/share/...td.bat
windows10-2004-x64
3res/share/...td.bat
windows11-ltsc_2024-x64
3res/share/...rt.bat
windows10-2004-x64
3res/share/...rt.bat
windows11-ltsc_2024-x64
3res/share/...r).bat
windows10-2004-x64
3res/share/...r).bat
windows11-ltsc_2024-x64
3res/share/...op.bat
windows10-2004-x64
3res/share/...op.bat
windows11-ltsc_2024-x64
3Analysis
- user interaction
yes - max time kernel
298s - max time network
190s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/08/2026, 19:38
Behavioral task
behavioral1
Sample
ConfigApp_07261.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
ConfigApp_07261.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
res/share/batch/bat/Add to 7z.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
res/share/batch/bat/Add to 7z.bat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
res/share/batch/bat/Add to archive....bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
res/share/batch/bat/Add to archive....bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
res/share/batch/bat/Add to brotli.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
res/share/batch/bat/Add to brotli.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
res/share/batch/bat/Add to bzip2.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
res/share/batch/bat/Add to bzip2.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
res/share/batch/bat/Add to gzip.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
res/share/batch/bat/Add to gzip.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
res/share/batch/bat/Add to pea.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
res/share/batch/bat/Add to pea.bat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
res/share/batch/bat/Add to tar.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
res/share/batch/bat/Add to tar.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
res/share/batch/bat/Add to wim.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
res/share/batch/bat/Add to wim.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
res/share/batch/bat/Add to xz.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
res/share/batch/bat/Add to xz.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
res/share/batch/bat/Add to zip.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
res/share/batch/bat/Add to zip.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
res/share/batch/bat/Add to zpaq.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
res/share/batch/bat/Add to zpaq.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
res/share/batch/bat/Add to zstd.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
res/share/batch/bat/Add to zstd.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
res/share/batch/bat/Convert.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
res/share/batch/bat/Convert.bat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
res/share/batch/bat/Extract here (smart new folder).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
res/share/batch/bat/Extract here (smart new folder).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
res/share/batch/bat/Extract to Desktop.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
res/share/batch/bat/Extract to Desktop.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target ConfigApp_07261.exe
- Size 125.3MB
- Sample260818-yclyvsba29
- SHA256 e7ba33dd7e9d0c97281eca8e48fc6a0a650428080f6f21ab818d184bcf6b30fd
- MD5 8424755a7b81b0729dd0a90cd1ecae39
- SHA1 517efb356002d9c0a0c7cdadb956c37506430534
- SHA512 a93cdfefaef579eaa43c50292a204919acb47cb78b5c0c82dc062dad2cf90d70b8068b7682054c5da843a43ddeea6ba5d778a496e0f1064ba6cb9f8af61cb178
- SSDEEP 393216:bMUEI/RK9IYUuZx556oKz4qJdCzibm1fwY5RbmiaU:b7Z/UIYx556oKizib2ftXJaU
- TLSH T1EB58AA1C8B5E50C5A39F093ED33DA241F7A72979309C7AB0184765E22D8B7224BF6C6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1940 Zippex.exe - Loads dropped DLL 11 IoCs
pid Process 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1940 Zippex.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ConfigApp_07261.exe - Suspicious behavior: EnumeratesProcesses 14 IoCs
pid Process 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe 1200 ConfigApp_07261.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1200 wrote to memory of 1940 1200 ConfigApp_07261.exe 110
Processes
-
C:\Users\Admin\AppData\Local\Temp\ConfigApp_07261.exe"C:\Users\Admin\AppData\Local\Temp\ConfigApp_07261.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Programs\Zippex\Zippex.exe"C:\Users\Admin\AppData\Local\Programs\Zippex\Zippex.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1940
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\Zippex.exe
- Size 7.2MB
- SHA256 879e995719d9b7b9ce08f56799b0a71e0b29ce560986e7a9cdebdcf9c1d7750f
- MD5 2c3d2a6abdf462eede420fb83f28019c
- SHA1 79cc4020261f6421d2cba3dc80d3700be5efb7d9
- SHA512 e4d0c666290e7d34363164ca9550633f93b2e368d262667d35b3ab45787b0060d745db52c3d4afd5076cd1dad94f152544f1164735028188fab952f42e83fd8f
- SSDEEP 49152:N6Nvy2QHz64ITcYKRdtkqzGEKmImuA07ya2lUruRhnHk3ACJZmmzMhsbqp7uPLVK:NSvoSKRzh9Rhn3p+bqpGcshVHzMHbz
- TLSH T1E4764CBBB2318768C0D6C67014538BF28FB07E65057A27422185372E6F75D906FEB98E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\dragdropfilesdll.dll
- Size 2.7MB
- SHA256 e4acd142d36a3a16532c85c9a7ccd50f9abc25721fa35706b16f6ceec565b44c
- MD5 6f73e8b6c3e4bfca9732100db6367ab7
- SHA1 f59bca521053e1593b2a7fca2bb36bfa14281f4e
- SHA512 a30cce7a3e6a8326abc4e5c4d6e7861bfe35cc2e5a7e50a56fa57d77f14da9eca4ca22037673b41e16e93bb4a17278c897fa6cea71dbf9987c3ec1b6a970aaf1
- SSDEEP 49152:HvdUSfVPXpdbqjgnODT9mz/QM9wQcD2oj+6ByvRtI8/:HVUSf1bqjNP9+e+cSd
- TLSH T106D51ABFB132CB58C0CFC6B46097D9E25F207D6404A5034672CA172F9FB6E406D99A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\conf\bookmarks.txt
- Size 358B
- SHA256 e60664153706c5e25171abce34fd9e757bd372b8603d47631be220acec9ea777
- MD5 db473d9010d7cfd265a5d3ea1c0e1536
- SHA1 6f7911614182a514a9040957abf1c153d7fb82f7
- SHA512 71c9a539f309b75e6777b15b18471d1d468583650368e73b11d80847fe9ed7efa63159016e5107f37695be83df849319cbef6e1b96e3bbff227ae21d8d846d5e
- TLSH T14DE0EDB75CE3C647131081554320281DF5CD6914ADB8352D7BB04AE0079187EEB929AF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\conf\conf.txt
- Size 13KB
- SHA256 92b0a0e5c6a3c8bd6b13bf665d926bfc231899faea17ed67aa38200e76e64ca8
- MD5 8b4990c78ecc67d1fceb151ccea85e82
- SHA1 6b10b6e04a6aaa4cf6985e48e0f99970076bc70f
- SHA512 34aad3c8bd143e137da09e6b462c562550e989b323ae20228e6dbba19d5e0e8f1f5e78fa8dd7f9c2d9049154e3105e2c68f4a562d143f3e02c916fd866db71f8
- SSDEEP 384:tVCdNX1WEfELYMzt8Xh7P9yz899cDOm5q:tVqNlWEbMzt8p9e899cDX5q
- TLSH T18052B535B84BD229E7431445672215D0F3FC6888567B36AC38AD8E7420558BEF2EF2BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\icons\Zippex_cd.icns
- Size 97KB
- SHA256 053d7623f5d85ab568b7399dda69603d7347bceaf32aa32b39036e92ab760d53
- MD5 59986225479b36a47a33ed4839e5f582
- SHA1 419e582fd5148806049d2eb8bfd75e0864c3baef
- SHA512 882ffd6d00725144bf064e5eb991fd507b55f4eb38686727c91758bec6ca70615388471454ee393bd67987924ba3b200837d4c14df99017339482a309cfc868e
- SSDEEP 768:SL1vF+sGPfV9eT4ND/faGQxGX/KyBpYBa:SB9+sGPfV9eT4UxWSyEBa
- TLSH T1FDA3CDD1105A27A6E8102831F16F8FBF07399FC45185F5A2D959B376F9BACE4B3070A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\icons\zippex_block.png
- Size 28KB
- SHA256 4678798e9593f4f3f697142bd20c43ce7835686f6973486545c2e0437cb56f5b
- MD5 15a098beb44807944045533886869b17
- SHA1 5a18b4834cbdd7158adcd4c71a5d11a97252dd3f
- SHA512 f68467f54bbf439ae143b15fb5188ae89d6801eb83ab3ded32e46500f4f0bffa94de0bb23247b0915af70d0c9678ad2350489c4d01d828d44729ef96f7dc7ce0
- SSDEEP 384:DXxnx6fGFVPIup8tz908ZqceE+0TScczw0WXOMuwEVjVgSrjFtFZs3w7FBdbx/yu:DXXFGz5ZYieP8B+9wgjVdVhj1ynK50SV
- TLSH T13ED2D1738FC9D5B935DFADA6CB12FE5D5D1411638001937F083A608BE9C598CA836A6C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\lang\default.txt
- Size 73KB
- SHA256 d9634bd8c18e0ae905909201f5b68a572b4c270a57197478f5e204a89676616b
- MD5 32b2fda007dbc1c3cb12692b8f84d273
- SHA1 3dd0139e1f070662b7ed20a03915d218287bcacb
- SHA512 f1429b6c57183620ae85a9bc51c5cd29124b78f6ae90c968419b24f67053f5698a453d44dc61ac2cbe3e097717ad25e19a901f6b1ec51da1782208abb934216c
- SSDEEP 768:1/qZrBIcfwKBvwJw5E6ZQODiR5EB/zeuO7uhcH4JK6R++z6HgW/4NehBUB+03gej:FqZrBIcJvwwEW8EsZkVR1esgBS3Ien
- TLSH T19573FB0F7AC1713255F3599252016EA2E33D809FEB63029159EC8ECC61259EBF7F325A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\1.txt
- Size 3KB
- SHA256 d1e1f5344953311c8b13eebc2fdb6de5dd44f5bec3e4cf722353b04b2d6b2fc0
- MD5 6e5ffdce57c991366adf7d5a8d3bf8fc
- SHA1 86f4b729bb40fae4754ae202d2a8392c03903183
- SHA512 98a99df933855d8a337462982353137dcc732bda81f3e5d4e9561f6ece7ddc5964836a18ff42739244e5f337ad900702b1bddbbdfe4d37a67f549223b8534bf0
- TLSH T196718231E80651B32B5555DCFF466091F7CCB4881A337BE07CAD8AC4A064D9DB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\10.txt
- Size 3KB
- SHA256 04475d6f6707909869325cfa822bfebfe330f70294b7c624a906bc9d4d37472a
- MD5 ebe518fe8a3eb1317fe88650c6767c6e
- SHA1 3b7389841c80c0b0e0b0b4d8a1188cf5b914573e
- SHA512 7b98ee620b001ce910a0a31ffb0748f8ed7ec4c5487e513883f789e3b48c3a07878eb5ebad85967d8e5db80a4d52e6f8e402ce0d1532f2417ca32d49df7073b6
- TLSH T1C0718131E80651B32B5545DCFF466090F7CCB4881A337BE07CAD8AC4A164D9EB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\11.txt
- Size 3KB
- SHA256 215a1adf22fde53e62d3ebe07c06681bf5f9bc65fc14b2364385533cf71d25e0
- MD5 40a964a23ac38be30c2e62a67814c75e
- SHA1 6d99c9bad5c12d3b93379da49139e33f881d613d
- SHA512 d1d574eb9543d603a35443275dc07b04dcb01096818f045c5b1f155e1fa292e08a68b1347c59ce47fad7517f24fa2ef00c21d14f85088529483826fe0e042b75
- TLSH T15A71A331E80591B72B5555DCFF466090F7CCB0881A337BE07CAD8AC4A064D9EB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\12.txt
- Size 3KB
- SHA256 5b0d60b5b47aad33c8b45edf38365210482d1aa9156f9b2bfeb2c0edc5197a05
- MD5 8748f06aacde463096fe9d6768fd4536
- SHA1 356a4d99bf5bbdb1d612d552a0d8ec6c58ffdb00
- SHA512 d15bce5905402063e809640c3cbf26a33412b504a3ca19ada0cc26f46823b53bcaf3e06c9457a43ed805acce0996e1bc2c06f0bc9b24f22c832cf79b6bf085a9
- TLSH T1F6718231E80651B72B51559CFF466090F7CCB0881A337AE03CAD8AC4A164D9EB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\13.txt
- Size 3KB
- SHA256 8b3b9f9a55599d0f26138509f3e76a2ba689aaf0d0dc3fb7d8cd56e7dfa92ebb
- MD5 bb80786ca22857a6fd5aa8ea7021e4cb
- SHA1 310a1ae77cc34cf99066e4d3ffff1f33fb10df79
- SHA512 0e985e2cee06e0bc1b714da835cd7a56aed2a49db89ec51fcdb6d92a0b53ab5573637c7429fcea23be93f3c842a767a620722cfdb0ec97c242bba31016442164
- TLSH T15C718231E80651B72B15559CFF467090F7CCB0481A337BE03CAD8AC4A065D9DB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\14.txt
- Size 3KB
- SHA256 38dc6fe54c4af2e3b282f1540307c623ce59f5f649befcfae8f759260df07dc5
- MD5 53f2063ca45649f18a01372effa235bc
- SHA1 4eaee2132f60c475ff0f94dd14f7eb3a66863e9a
- SHA512 f6fdb72e953a43ccf8562c288e7a6bd1d8c9364b295dd7e6fb0ca82c2752b2b7e1f48ce04bd475c6633ff46f04f64acada068d43885c194d16f572e28d1c50e4
- TLSH T13F717131E80651B32B5555D8FF467090F7CCB0881A336AE07CAD8AC4A164DAEB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\15.txt
- Size 3KB
- SHA256 c487bb6f0c605aa08a7850c5fe6aa968bae36486015e40a0da2e3c8eea309218
- MD5 46e96d3ffa62aec1bc9d5ba7ed50a63d
- SHA1 f3d15d32b7172645d8c0b9a9d5c58bf0a8a01724
- SHA512 8b71583b01dc240277f599aa5b741cd378335fc5c59d805d476b89cce9e3be02f6466d41d0bc42c56f44a5e06dee74169d272bac1903ba93d3582e3dc3d8dba3
- TLSH T14A718231E84691B72B5555DCFF467090F7CCB0881A337AE03CAD8AC4A164D9DB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\2.txt
- Size 3KB
- SHA256 5b6fb7d3e360c069d70bea0a1663611f9f3e4b1db0abdb3185a024f241b58822
- MD5 7a73c38d2dc077feb412e67786dea821
- SHA1 cacc4189693dfb01b1ed740f55d2de185268e35c
- SHA512 c6699b3539c07cf8b7487443603d6696712bdf0af8623f58357c6e4417a4676261c02eb715671c23f4791416f7f8b852c3c2e2f74c848475257b069f95d711c9
- TLSH T1C6719231E80651B32B1545DCFF466090F3CCB0481A337BE03CAD8AC4A164DADB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\3.txt
- Size 3KB
- SHA256 a2ba94ad1d28c08abd1de0253be74ff5329faf05543144ab0d6b05d1794eb672
- MD5 3d566e25d2df292874a366ece9eb01ae
- SHA1 3d1f637769cb60505c1542c44867fc43773ea72b
- SHA512 2306b5cef83cbd3a39d0da9f353d8f6d9a6bbb049be1909553f1af8d58fd5211ab037a9c0d2ac79be660d35c6ad227e7c95f95ecce68b4c56863c1bf9e9c610a
- TLSH T13A718231E80651B32B15459CFF466090F3CCB4881A337AE03CAC8AC4A065DADB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\4.txt
- Size 3KB
- SHA256 dece44a80d8b5e2696466f1db1ea8ae0dc806eac2870c70239b0d7bcad2181a8
- MD5 04ea88e5f2159cb1b67833bac69d3dcf
- SHA1 0c240f926a5739d8c28d0e35401a65aefb37ed01
- SHA512 bad36e15d9a884fa1121a5f42fbd000c3b479d8645e398222c90476bbb08298ed481a6ee5e6d006cdf74c0d351a38bc9505f760633889e244786980fc3e8b9c5
- TLSH T12E716131E80651B32B5545E8FF466090F7CCB4881A336BE03CAD8AC4A065DADB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\5.txt
- Size 3KB
- SHA256 cc3edc015bb9baa33c6c9aa11b85cc5c1a8885e6acc9a42dcf0fc483773d1b0d
- MD5 59ebeb1995b81d207d59cb9e11a928f5
- SHA1 eb3e75e24e637dc2ca9b86f4a9d76795e685d2b8
- SHA512 2bf2dc7e035d414314a90cf1bbeb912ad767ae1b1896a8eff952416f0d0df7e231a0b1e0ec3ee54eb183f82f54ec6bfe97562f4ec5ef5319d271f4fc08afe99d
- TLSH T176718231E80651B72B15459CFF466090F3CCB0881A337AE03CAD8AC4A064DAEB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\6.txt
- Size 3KB
- SHA256 b36f2945783b82fab15f9f50dd3b352a7b164b826c28bccfde621a132e09e17a
- MD5 f96a8bf592997512ee63093ccdadc2cc
- SHA1 755e497ee31ea302b998b18f3684fd309045399e
- SHA512 9b488d63b0f69d3f534a5d05f4e10c3c38d4b6abcd40faebd927dd55b3498d703fb942ff6a379f8d4a8e06307c65076f346243f4664fa61d181a9eba436e2518
- TLSH T1B3717131E80651B72B15559CFF467090F3CCB0481A326AE03CAC8AC4A064DADB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\7.txt
- Size 3KB
- SHA256 e15d888027b460103feeee2f9c12a597706b0cd8cb4d9df785184928aef171c3
- MD5 aa92dc6246803e01abe325187918480a
- SHA1 30f32d34964e6b218f034fb7bfbe52aa4ce6aa7c
- SHA512 2d4b1b0e7a97780770aab2957a19dc89e1b683c16e1a015d3e8ebffe7a8d6d565712db70ff05a69c428f687c3a0f4fcac205bde95d90cbe8c55c8bc05533281c
- TLSH T110717231E80651B32B5545DCFF467090F7CCB4881A336AE07CAD8AC4A064D9DB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\8.txt
- Size 3KB
- SHA256 31b89aeee1baac2ca1897de7d3e82de797b4901fa8b9540ce20dc432361f263e
- MD5 52e1ca13c27a78a07dc185dd616f7d9e
- SHA1 a694a112d618fde600604ac7f4aca8a02d818c06
- SHA512 a4e42806cc4dc2d15a0b89297a8eafa745463147e5a8c63112ed8a511869f898ffaf2f12d6042c760dae9b8854065daf66afb5b3b59ba5ccb0af11586df76f47
- TLSH T114717131E80651B32B5545DCFF466090F7CCB4881A336AE07CAD8AC4A164DAEB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\presets\9.txt
- Size 3KB
- SHA256 6efd17bb26a1fc416ca31b0d4776dc3e4f368c956b70e28830c4f526be6aa67e
- MD5 443d4fd8d8148dce75cf30a83fb965db
- SHA1 e36e70176a93a313cd1d63e87084901cc4e3d927
- SHA512 6ae0f906887c224a8e99de7797ead3b3de5fccba421eeeb81edd820d84685b725a724c36ae757aed7a84e97672bd9643e9b0c4fbc6ada9fc6df93acc6edce76f
- TLSH T1D7718231E80651B72B1545DCFF466090F3CCB0481A337AE07CAC8AC4A064DADB3694EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Zippex\res\share\themes\main-embedded\fm-theme.bmp
- Size 70B
- SHA256 79e24644f5e406fbf21bdd952d0ddd498858e2420dccedcc88e87a2c90196549
- MD5 3d6671473367109f56345dc0bc73ce7a
- SHA1 caae46ddbef86285f0926ab1c21693435fd70f1d
- SHA512 24131cdf3f13d389d7b659cbdabf8aced3324d3b588ffe97195306cdc1d8ae4cb79d0d51493381f1f4ef200cf7ef40b6b35b715f7da1f28309609ae03b317028
- TLSH T1A1A0020319D8A587E00542B0808C4A1831217B553A0302621642D2814F102952124C40
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\INetC.dll
- Size 126KB
- SHA256 a3013fd47bcd03f176bd786499e67b0129cc14ccbf532865924cd5a74f0eddcb
- MD5 4a6bb1ca8bbc3e39c4ba33be14137fca
- SHA1 f7d4633449a559b10ffa926cfdda158c4f6a3c49
- SHA512 6ab75d3404897979969a638968074cdb6f6a7a09f9182af95886dd17e90045365d275c87b76983e37c7fc120ee63da00b1192d948594966ca465a1342bcd68e3
- SSDEEP 1536:JGln+UfGJ1CZiL9+nvL2mB7zte4Z9jJKxWSyEBxC:JGc6GPCZ4cVFJEfC
- TLSH T121C365C1525927EAF8202831617683BF0738AFC454CA44A7F56DB3B679BBC65F3091B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\nsProcess.dll
- Size 133KB
- SHA256 6750a9f3163745dd4666310534891f3f2b7b56f2dd138e37024c685079a99439
- MD5 4bc73a686c3b97278967b24e5dd62c8c
- SHA1 37703b4b56351b3a5b203ebef3b2a566010e2510
- SHA512 3733191d901930b21bd9cb9d3fcdf82e2db7fc001fb775e67b3b2c1031805f86d04a3d6cdbb079cc7a116357064e115c775c5abac0bd29c1793bf990fbe57745
- SSDEEP 3072:aQeXcoMRH89zIK5cilbRZalbnI/NsAqw8gKT5c:aQeXcvcJbRZIDkEO
- TLSH T1A6D37C0275E5C171D9BE153828709B645F7F7850CF60AEEB636409BA8E706C0DF31BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxA38.tmp\status.tmp
- Size 32B
- SHA256 54b3a5a8a4948445bfdd9b2ea1d288606a80bc7bb624ae594bd98d56eda3c95a
- MD5 07c79c86f2baff21607a25639b195a2d
- SHA1 9722f7e7b810f792a2b8f4d0f63455a4fcebe0d7
- SHA512 77010df065158979985282ae9aca8b19957e1c4a5f5c7190ae5bfc486c7bcd79463bda30554bbabdaae5f46a5c0e9a21650bbf2f76d13e927be89fe979926d70
- MD5 SHA1 SHA512