fda44a2b7badd9747964d52b61cb1d41a53c09f2126689d523372d76bfc2df51

Analysis

max time kernel
124s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 05:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
Size 11.9MB
Sample260825-fx2wpsfh77
SHA256 fda44a2b7badd9747964d52b61cb1d41a53c09f2126689d523372d76bfc2df51
MD5 a57c93f1b33be25842e10521cff3133b
SHA1 9764969b0650bd1edb78eac56d192e5d19e50f77
SHA512 1e0d874f7e011582c644abfab1c4e7512b3b4f4f94a444dbb5d279103e7cd02f8676289c324670267e2aed263d7d6315ba5a4682051520ce88ba069ddece8e88
SSDEEP 196608:ZLi8U6HBQZR0y0WFIxhtADw7K+jKDD3Jr9laj+YmCN8FRMPg4s2qZcQ9kwX87dzB:udZR0y0cIXtAt4qoeuZq6MRcC2
TLSH
T170C6334527E5C1BBEBC310F54896922E18779DD13BDA8EC7FBC43D1A4EB02CA2A35251
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

adware bootkit defense_evasion discovery execution persistence spyware

Malware Config

Signatures

Detects executables referencing combination of virtualization drivers 1 IoCs

resource	yara_rule
behavioral2/files/0x000b00000001c66b-389.dat	INDICATOR_SUSPICIOUS_VM_Evasion_VirtDrvComb

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

execution

PowerShell

T1059.001

pid	Process
9132	powershell.exe

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\TFsFltX64_ev.sys	QQPCMgr_Setup.exe

Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs

defense_evasion

Safe Mode Boot

T1562.009

description	ioc	Process
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\QQPCRTP	QQPCRTP.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\QQPCRTP\ = "service"	QQPCRTP.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
7816	icacls.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ QQPCTray = "\"C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QQPCTray.exe\" /regrun"	QQPCMgr_Setup.exe

Downloads MZ/PE file 1 IoCs

flow	pid	Process
13	1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	register.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQPCMgr_Setup.exe	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQPCMgr_Setup.exe\GlobalFlag = "512"	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe

Writes to the Master Boot Record (MBR) 1 TTPs 5 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	crashpad_handler.exe
File opened for modification	\??\PhysicalDrive0	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
File opened for modification	\??\PhysicalDrive0	QQPCMgr_Setup.exe
File opened for modification	\??\PhysicalDrive0	QQGameLauncher.exe
File opened for modification	\??\PhysicalDrive0	crashpad_handler.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\.tab_sdk_storage\mmkv.default	QQPCMgr_Setup.exe
File opened for modification	C:\Windows\SysWOW64\.tab_sdk_storage\mmkv.default.crc	QQPCMgr_Setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppCtrlInfo\AiSandBoxCtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\Search.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMHttpNet.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMPrivilege64.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\RefuseInject64.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\TsNetHlpX64_ev.sys	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\api-ms-win-core-sysinfo-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\ContextMenuMgr.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\TrustZone.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\QMScriptHost.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMUpdate\sqlite.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppCtrlInfo\GameModeCtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMTrayPlugin\QMRuleEngineTrayPlugin\QMRuleEngineTrayPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\api-ms-win-core-debug-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\api-ms-win-core-processthreads-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\api-ms-win-crt-convert-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\AIPlugin\pcmgr-ai-security\tsbx_sdk.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\dr.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMFileMonCyber.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\QMPrivilege64.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QtLottie.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\SoftWareUpgrade.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\GarbageClearV2.dat	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMExtInstaller.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QtRes\QQPCMgr_Basic.rcc	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Images\click_hide.gif	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\PopupBlock.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\imageformats\qgif.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\setting_plugins\QMGeneralSettingPlugin\QMGeneralSettingPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\CleanSmart.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\libcef.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Images\softmgr.ico	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMUpload.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\apps\AppUICtrlInfo\DefaultAppMgrUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\apps\AppUICtrlInfo\SpeedupRocketUICtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\api-ms-win-crt-stdio-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\HPScannerPlugin\hptrojanscan\HPTrojanScan.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\TSVulFixInc64.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Uninst.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\msvcp140_1.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppCtrlInfo\SmartScanCtrl.xml	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMTrayPlugin\QMAutoRunsMgrPlugin\QMProcessRunningTime.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\ContextMenuMgrPlugin\BlackList.etf	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\QMNetMon\ucrtbase.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\api-ms-win-core-console-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMContextScanWin11.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMTrayPlugin\QMRemoteTrayPlugin\QMRemoteTrayPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMUpdate\platforms\qwindows.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\imageformats\qwbmp.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\setting_plugins\QMSettingSafePagePlugin\QMSettingSafePagePlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCPatch.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMUpdate\api-ms-win-crt-utility-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\Yuanbao.svg	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMFileMon.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMToolBox.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\Qt5WinExtras.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\TSZip.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCWSCController.exe	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\plugins\QMAccountCenterPlugin\QMAccountCenterPlugin.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\traceclear.dat	QQPCMgr_Setup.exe
File opened for modification	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\vccorlib140.dll	QQPCMgr_Setup.exe
File opened for modification	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\vcruntime140.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\QMNetMon\api-ms-win-crt-runtime-l1-1-0.dll	QQPCMgr_Setup.exe
File created	C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\apps\AppLogo\Teenager.svg	QQPCMgr_Setup.exe

Executes dropped EXE 10 IoCs

pid	Process
1516	QQPCMgr_Setup.exe
5964	SSZB_1080001481_micro.exe
4572	QQGameLauncher.exe
5592	crashpad_handler.exe
7680	register.exe
7748	crashpad_handler.exe
8364	QQGameNet.exe
6384	QQPCSoftCmd.exe
6708	QQPCRTP.exe
7052	27411.exe

Loads dropped DLL 35 IoCs

pid	Process
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
4572	QQGameLauncher.exe
4572	QQGameLauncher.exe
4572	QQGameLauncher.exe
4572	QQGameLauncher.exe
4572	QQGameLauncher.exe
7680	register.exe
8296	regsvr32.exe
8280	regsvr32.exe
8280	regsvr32.exe
8280	regsvr32.exe
1516	QQPCMgr_Setup.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6384	QQPCSoftCmd.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
6708	QQPCRTP.exe
7052	27411.exe
7052	27411.exe
7052	27411.exe
7052	27411.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	register.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQPCSoftCmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQPCRTP.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	27411.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SSZB_1080001481_micro.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	crashpad_handler.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQPCMgr_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	crashpad_handler.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQGameNet.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	QQGameLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\PCMgrRepairIEExtensions	QQPCMgr_Setup.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\PCMgrRepairIEExtensions\WarnOnOpen = "0"	QQPCMgr_Setup.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\TestWritable = 7b74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_5 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e141774dd7bcab34d507bffac3944de6f8f05	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_13 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e1d176edd6bcaaf4d5e7b	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_21 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7dad83972697190ad87e8ef7cfe1bbfffb8d6	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_28 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fb0052b8cbf03f65e927a	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_39 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e001772dd7bcab24d487be8ac3244d96f	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_43 = 3874d037c712e567e705819e9fffc6764c1730e367920d563ac3e822842e23173bdd30cabe4d057bacac7e44f66fbf052b8cb103fa5e917a4beb61b7ed0058ab80ea5fb90928	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_54 = 3874d037c712e067e6058b9e8affc77671170de3329229563fc3ed22822e0c174bdd71caa54d497befac2544cf6f8f05	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_20 = 3874d037c712e267fc05809e9cffdb765a172ee31b920d563cc3ea22952e2317	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_32 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fb0052b8cbf03f65e927a79eb0cb7c20052ab9eea55b9092830bc56668e277a8233fb6685dc95eccc1a9b487077effa190e476ab7ebd82872477181ad88e8e67cef1b	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_2 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd82872657192ad9fe8ae7cc71bbfffa5d63177a167ccab712d14b2201c47de441fc2b84706	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_40 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_45 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea6eb91f2832bc40669627478210fb6a85c195	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_46 = 3874d037c712e067e6058b9e8affc77671170de3329229563fc3ed22822e0c175fdd77caa54d487bf7ac3244c46f8805378c	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defUninstControlpanel = 7a74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_16 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e14177edd6bcaad4d497bf5ac2744	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_26 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_37 = 3874d037c712e267fc05809e9cffdb765a172ee31b9238562ac3f722952e351776dd2bcaf44d	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_47 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea69b90e283ebc42668e27068229fb6a85dc95fdcc299b6f7076efc919204756b7efd831727771bcadaae8ea7ce71bb3ffa5d62d778e67e8ab712d1ab2331c5cde531fcab81406cbbbf7cada4803998a4e	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg	QQPCSoftCmd.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_56 = 3874d037c712e267fc05809e9cffdb765a172ee31b92395636c3f7228e2e251769dd7bcaa34d4e7b	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\UpdateTipsHistory	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defFloatingWidgetAIPluginGuideSelectHasShowEx = 7a74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_6 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e16177add6ecaa94d4f7bf3ac2344cf6f8f05	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_27 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ded82e726d718ead9fe8eb7cf81bfaff98d62c779267eeab772d18b2321c41de561f	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_34 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fb0052b8cbf03f65e927a79eb0cb7c20052ab9eea55b9092830bc56668e277a8233fb6685dc95eccc1a9b487077effa190f474db7fdd828726b7192ad92e8	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\UpdateVersion	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_11 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd82872657192ad9fe8ae7cc71bbfffa5d63177	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_30 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea69b90e283ebc42668e27068229fb6a85dc95fdcc299b6f7076efc919204756b7efd831727771bcadb8e8fa7ceb1ba8ffbfd631778d67	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defQuietSimpleVersion = 7a74ea37	QQPCSoftCmd.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_22 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea69b90e283ebc42668e27068229fb6a85dc95fdcc	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_24 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea69b90e283ebc42668e27068229fb6a85dc95fdcc299b6f7076efc919204756b7efd831727771bcadb8e8fa7ceb1ba8ffbfd631778d67	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_29 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd82872657192ad9fe8ae7cc71bbfffa5d63177a167ccab712d14b2201c47de441fc2b84706c3bbcbcac1480e998b4e866c9621d267	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_41 = 3874d037c712e267fc05809e9cffdb765a172ee31b9218562ac3f722b62e1f174cdd2ecaf24d	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\NewVersionAvailable	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_7 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd82872657192ad9fe8ae7cc71bbfffa5d63177a167ccab712d14b2201c47de441fc2b84706c3bbcbcac1480e998b4e866c9621d267	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_25 = 3874d037c712e067e6058b9e8affc77671170de3329229563fc3ed22822e0c175fdd7dcab54d567beeac3844da6f	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_38 = 3874d037c712e567e705819e9fffc6764c1730e367920d563ac3e822842e23173bdd30cabe4d057bacac7e44	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\FloatingWidgetEnabled = 7b74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpeedupRockeQQMsgGuidShowCnt = 7a74ea37	QQPCSoftCmd.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_19 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7c0d83972707197ad84e8fc7ce11bfaff98d62c779267eeab772d18b2321c41de561f	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_55 = 3874d037c712e067e6058b9e8affc77671170de3329229563fc3ed22822e0c174ddd71caa24d587bf5ac2444	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defNormalShowAppStore = 7a74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defCreateMainLinkTime = f551675d9b12b567	QQPCSoftCmd.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_35 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_36 = 3874d037c712e267fc05809e9cffdb765a172ee3	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpeedupSkinTipsLastVersion = 7474ea37	QQPCSoftCmd.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_8 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7dcd83972677185ad85e8fa7c	QQPCMgr_Setup.exe
Key created	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_14 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e061772dd7ccaa34d527be9ac	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_23 = 3874d037c712e567e705819e9fffc6764c1730e303922a5627c3e522bd2e1d1772dd7bcab44d527be9ac3844cc6f8805188c8b03fe5e907a41eb2eb7dc0042abb0ea69b90e283ebc42668e27068229fb6a85dc95fdcc299b6f7076efc919204756b7efd831727771	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_42 = 3874d037c712e567e705819e9fffc6764c1730e367920d563ac3e822842e23173bdd30cabe4d057bacac7e44	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_48 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd82872657192ad9fe8ae7cc71bbfffa5d63177a167ccab712d14b2201c47de441fc2b84706c3bbd9cad1480299904e9c6c8a21d167d3193a10660b696bc6b1d877fff7faa1d901095d7634d067a388	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_59 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fb0052b8cbf03f65e927a79eb0cb7c20052ab9eea55b9092830bc56668e277a8233fb6685dc95eccc1a9b487077effa19054751b7fcd832725871a2ad9ee8fc7ce41b	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSimpleVersionNetConfig = 7b74ea37	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_0 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e14177edd6bcaad4d497bf5ac2744	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_31 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e16177add6ecaa94d4f7bf3ac2344cf6f8f05	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_44 = 3874d037c712e567e705819e9fffc6764c1730e367920d563ac3e822842e23173bdd30cabe4d057bacac7e44f66fbf052b8cb103fa5e917a4beb61b7ed0058ab80ea5fb90928	QQPCMgr_Setup.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpeedupUserGuideConfig = 844beac7	QQPCSoftCmd.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defTipsBehaviourLocal = 7a74ea37	QQPCSoftCmd.exe
Set value (data)	\REGISTRY\USER\QMConfig\QQDoctor\QQDoctor\ComCfg\defSpecialFolderPath_Cache_9 = 3874d037c712e067e6058b9e8affc77671171ce3239226563ac3ea22bd2e11176bdd68ca824d5c7beeac3644f66fae052b8cbd03fa5e977a4beb26b7f7007cab85ea59b9082830bc43669527408210fb5385e595e1cc1b9b5b706befd119344778b7ddd839726a7184adbfe8e17c	QQPCMgr_Setup.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\MiscStatus\ = "0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4868AA69-875D-48AE-A7FF-1E6FA1EBBF8D}\VersionIndependentProgID	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGame\DefaultIcon	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{11250DED-D5FF-4F13-A5F3-44D4174A65D1}\NumMethods\ = "6"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA21B901-1642-4AB2-9C1C-A09B2412CC89}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{97CE68E3-6294-49BB-9482-BAD9604F7321}\ = "P2PHost.P2PHost"	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\P2PHost.EXE	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.qbox	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QQPCMgr.exe\"%1 "	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGameProtocol\DefaultIcon\ = "F:\\Tencent\\QQGameTempest\\QQGame.exe,1"	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{5E804802-9BC9-4096-BB0A-42FA90F747DE}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E2A79C5-48F1-4182-BCF9-E92857BDA980}\Shell\Open\Command\ = "C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QQPCSoftMgr.exe /page=uninst /parent=controlpanelitem"	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B2167A4F-BC4D-4DA7-90BF-C4BAF7D76714}\ = "_DCUQG"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1619AA66-FF6E-4CDF-BE0B-983463FF46B2}\1.0\0\win32	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQPCMgr.qbox\shell\command	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\DefaultIcon\ = "C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QQPCMgr.exe"	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\Shell\Open\Command	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B59750C3-29F1-44AA-BFA8-E5F6D3CE8596}	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA21B901-1642-4AB2-9C1C-A09B2412CC89}\ = "_DCUQGEvents"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\InprocServer32	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA21B901-1642-4AB2-9C1C-A09B2412CC89}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QMRemote\URL Protocol = "\"C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QMRemote.exe\""	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E2A79C5-48F1-4182-BCF9-E92857BDA980}\Shell	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGame\shell\open	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B2167A4F-BC4D-4DA7-90BF-C4BAF7D76714}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA21B901-1642-4AB2-9C1C-A09B2412CC89}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\ToolboxBitmap32\ = "F:\\Tencent\\QQGameTempest\\MiniGames\\CUQG.ocx, 1"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\MiscStatus\1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQPCMgr.qbox\shell\open	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QMSoft\URL Protocol = "\"C:\\Program Files (x86)\\Tencent\\QQPCMgr\\18.2.30836.301\\QQPCSoftMgr.exe\""	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B59750C3-29F1-44AA-BFA8-E5F6D3CE8596}\ProxyStubClsid32\ = "{B59750C3-29F1-44AA-BFA8-E5F6D3CE8596}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{68353829-557C-4906-875B-117F016CD73A}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\P2PHost.P2PHost.1\ = "P2PHost component"	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1619AA66-FF6E-4CDF-BE0B-983463FF46B2}	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Qgi.Package\DefaultIcon	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9C11AAFA-11F3-4AAF-BF90-DE9DA1DD7E1D}	QQGameNet.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B2167A4F-BC4D-4DA7-90BF-C4BAF7D76714}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1619AA66-FF6E-4CDF-BE0B-983463FF46B2}\1.0	QQGameNet.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QMRemote\Shell\Open\	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QMSoft	QQPCMgr_Setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{11250DED-D5FF-4F13-A5F3-44D4174A65D1}\ = "IGameSite"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B59750C3-29F1-44AA-BFA8-E5F6D3CE8596}\InprocServer32	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2D9A4629-EEAD-4568-9F9F-3D58F56AA6E2}\InprocHandler32\ = "ole32.dll"	QQGameLauncher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B2167A4F-BC4D-4DA7-90BF-C4BAF7D76714}\ = "_DCUQG"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{97CE68E3-6294-49BB-9482-BAD9604F7321}	QQGameNet.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B59750C3-29F1-44AA-BFA8-E5F6D3CE8596}\INPROCSERVER32\{11FC51AB-3CD3-43C6-A70A-91FF809717CD}	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{68353829-557C-4906-875B-117F016CD73A}\InprocServer32\ = "F:\\Tencent\\QQGameTempest\\MiniGames\\CUQG.ocx"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGame\shell	register.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGameProtocol\URL Protocol = "F:\\Tencent\\QQGameTempest\\QQGame.exe"	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4868AA69-875D-48AE-A7FF-1E6FA1EBBF8D}	QQGameNet.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1619AA66-FF6E-4CDF-BE0B-983463FF46B2}\1.0\0\win32\ = "F:\\Tencent\\QQGameTempest\\Hall.58955\\video\\QQGameNet.exe"	QQGameNet.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{11BEA40D-ED62-4996-B157-B6D9C637F2A5}\InprocServer32\ = "F:\\Tencent\\QQGameTempest\\MiniGames\\CUQG.ocx"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Qgi.Package	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQGameProtocol	register.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QMAi\Shell\Open\Command	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA21B901-1642-4AB2-9C1C-A09B2412CC89}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CUQG.CUQGCtrl.1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QQPCMgr.qbox\shell	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E2A79C5-48F1-4182-BCF9-E92857BDA980}	QQPCMgr_Setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2D9A4629-EEAD-4568-9F9F-3D58F56AA6E2}\InprocHandler32	QQGameLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QMSoft\Shell\Open\Command	QQPCMgr_Setup.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe
1516	QQPCMgr_Setup.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
828	Process not Found

Suspicious use of AdjustPrivilegeToken 29 IoCs

description	pid	Process
Token: SeBackupPrivilege	1516	QQPCMgr_Setup.exe
Token: SeRestorePrivilege	1516	QQPCMgr_Setup.exe
Token: SeBackupPrivilege	1516	QQPCMgr_Setup.exe
Token: SeRestorePrivilege	1516	QQPCMgr_Setup.exe
Token: SeDebugPrivilege	1516	QQPCMgr_Setup.exe
Token: SeDebugPrivilege	9132	powershell.exe
Token: SeIncreaseQuotaPrivilege	9132	powershell.exe
Token: SeSecurityPrivilege	9132	powershell.exe
Token: SeTakeOwnershipPrivilege	9132	powershell.exe
Token: SeLoadDriverPrivilege	9132	powershell.exe
Token: SeSystemProfilePrivilege	9132	powershell.exe
Token: SeSystemtimePrivilege	9132	powershell.exe
Token: SeProfSingleProcessPrivilege	9132	powershell.exe
Token: SeIncBasePriorityPrivilege	9132	powershell.exe
Token: SeCreatePagefilePrivilege	9132	powershell.exe
Token: SeBackupPrivilege	9132	powershell.exe
Token: SeRestorePrivilege	9132	powershell.exe
Token: SeShutdownPrivilege	9132	powershell.exe
Token: SeDebugPrivilege	9132	powershell.exe
Token: SeSystemEnvironmentPrivilege	9132	powershell.exe
Token: SeRemoteShutdownPrivilege	9132	powershell.exe
Token: SeUndockPrivilege	9132	powershell.exe
Token: SeManageVolumePrivilege	9132	powershell.exe
Token: 33	9132	powershell.exe
Token: 34	9132	powershell.exe
Token: 35	9132	powershell.exe
Token: 36	9132	powershell.exe
Token: 33	6708	QQPCRTP.exe
Token: SeIncBasePriorityPrivilege	6708	QQPCRTP.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
8280	regsvr32.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 1160 wrote to memory of 1516	1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe	90
PID 1160 wrote to memory of 5964	1160	2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe	91
PID 5964 wrote to memory of 4572	5964	SSZB_1080001481_micro.exe	92
PID 4572 wrote to memory of 5592	4572	QQGameLauncher.exe	94
PID 4572 wrote to memory of 7680	4572	QQGameLauncher.exe	95
PID 7680 wrote to memory of 7748	7680	register.exe	96
PID 7680 wrote to memory of 7816	7680	register.exe	97
PID 7680 wrote to memory of 8280	7680	register.exe	99
PID 7680 wrote to memory of 8296	7680	register.exe	100
PID 7680 wrote to memory of 8364	7680	register.exe	101
PID 1516 wrote to memory of 9112	1516	QQPCMgr_Setup.exe	104
PID 1516 wrote to memory of 9132	1516	QQPCMgr_Setup.exe	105
PID 1516 wrote to memory of 6384	1516	QQPCMgr_Setup.exe	109
PID 1516 wrote to memory of 6708	1516	QQPCMgr_Setup.exe	110
PID 1516 wrote to memory of 7052	1516	QQPCMgr_Setup.exe	111

C:\Users\Admin\AppData\Local\Temp\2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_a57c93f1b33be25842e10521cff3133b_elex_stop.exe"
1⤵
- Downloads MZ/PE file
- Event Triggered Execution: Image File Execution Options Injection
- Writes to the Master Boot Record (MBR)
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1160
- C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe
  "C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe" /S ##silence=1&handle=655812&update=1&supply=1701110181&forceinstall=1&qqpcmgr=0null&DownloadSetupInOne=1&installpath="C:\Program Files (x86)\Tencent\QQPCMgr"
  2⤵
  - Drops file in Drivers directory
  - Adds Run key to start application
  - Writes to the Master Boot Record (MBR)
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1516
- - C:\Windows\SysWOW64\cacls.exe
    "cacls" "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301" /t /e /c /g SYSTEM:f
    3⤵
    - System Location Discovery: System Language Discovery
    PID:9112
- - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "[Console]::OutputEncoding=[System.Text.Encoding]::UTF8; $OutputEncoding=[System.Text.Encoding]::UTF8; $ErrorActionPreference='Stop'; try { Add-MpPreference -ExclusionPath 'C:\Program Files (x86)\Tencent\QQPCMgr' -Force; Write-Host 'OK: Add-MpPreference done' } catch { Write-Host ('ERR: ' + $_.Exception.Message); exit 1 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious use of AdjustPrivilegeToken
    PID:9132
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCSoftCmd.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCSoftCmd.exe" /command=SetSimpleVersionConfig /SimpleVersion=2 /From=Installer
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies data under HKEY_USERS
    PID:6384
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe" -i
    3⤵
    - Impair Defenses: Safe Mode Boot
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:6708
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\27411.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\27411.exe" -i
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:7052
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMContextMenuApp.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMContextMenuApp.exe" /i
    3⤵
    PID:7648
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMContextUninstall64.dll"
    3⤵
    PID:7552
  - - C:\Windows\system32\regsvr32.exe
      /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMContextUninstall64.dll"
      4⤵
      PID:728
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmlauncher-1.0.0-setup.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmlauncher-1.0.0-setup.exe" /D="C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher"
    3⤵
    PID:7704
  - - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\QMLauncherEntrance64.exe
      "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\..\Qt64\QMLauncherEntrance64.exe" --from=Prefetch
      4⤵
      PID:6652
    - - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe
        
        "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe" --plugin=com.tencent.qmlauncher --feature=launcher-main --from=Prefetch --no-sandbox
        5⤵
        
        PID:9280
      - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe
        
        "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --disable-accelerated-mjpeg-decode --use-gl=disabled --user-data-dir="C:\Users\Admin\AppData\Roaming\腾讯电脑管家-全局搜" --secure-schemes=file --bypasscsp-schemes=file --cors-schemes=file --fetch-schemes=file --field-trial-handle=2256,i,67615950779075142,3552022329304137812,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=MojoIpcz,ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:11
        6⤵
        
        PID:4800
      - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe
        
        "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\腾讯电脑管家-全局搜" --secure-schemes=file --bypasscsp-schemes=file --cors-schemes=file --fetch-schemes=file --app-user-model-id=com.tencent.qmlauncher --app-path="C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --disable-accelerated-video-decode --disable-accelerated-video-encode --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2256,i,67615950779075142,3552022329304137812,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=MojoIpcz,ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3100 --process-type=launcher /prefetch:1
        6⤵
        
        PID:5308
      - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe
        
        "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\qmlauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\腾讯电脑管家-全局搜" --secure-schemes=file --bypasscsp-schemes=file --cors-schemes=file --fetch-schemes=file --app-user-model-id=com.tencent.qmlauncher --app-path="C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --disable-accelerated-video-decode --disable-accelerated-video-encode --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2256,i,67615950779075142,3552022329304137812,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=MojoIpcz,ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=4024 --process-type=shared-background-process /prefetch:1
        6⤵
        
        PID:3176
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMExtraPackageSetup.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMExtraPackageSetup.exe" /S
    3⤵
    PID:5632
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe" -e
    3⤵
    PID:4528
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe" -s
    3⤵
    PID:6884
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCTray.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCTray.exe" /regrun
    3⤵
    PID:8
- - C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\UpdateTrayIcon.exe
    "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\UpdateTrayIcon.exe" -t QQPCTray.exe -c 0 -p 1 -CheckRtp 1 -v 0 -h "" -d "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\"
    3⤵
    PID:7204
- - C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMSignScan.exe
    "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMSignScan.exe" /force
    3⤵
    PID:7744
- C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\Download\SSZB_1080001481_micro.exe
  "C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\Download\SSZB_1080001481_micro.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5964
- - C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\QQGameLauncher.exe
    "C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\QQGameLauncher.exe" AppID=10542 ChannelID=1080001481
    3⤵
    - Writes to the Master Boot Record (MBR)
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:4572
  - - C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\crashpad_handler.exe
      C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\qgsentry\QQGameLauncher --metrics-dir=C:\Users\Admin\AppData\Roaming\qgsentry\QQGameLauncher --url=https://sentryv2.qqgame.qq.com:443/api/4/minidump/?sentry_client=sentry.native/0.4.12&sentry_key=59b86d16f81c47dc90695f5ee1f7de39 --initial-client-data=0x390,0x394,0x398,0x36c,0x39c,0x71fa0838,0x71fa084c,0x71fa0860
      4⤵
      Writes to the Master Boot Record (MBR)
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:5592
  - - F:\Tencent\QQGameTempest\Hall.58955\register.exe
      F:\Tencent\QQGameTempest\Hall.58955\register.exe --green_install_init
      4⤵
      Enumerates connected drives
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:7680
    - - F:\Tencent\QQGameTempest\Hall.58955\crashpad_handler.exe
        
        F:\Tencent\QQGameTempest\Hall.58955\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\qgsentry\qqgame --metrics-dir=C:\Users\Admin\AppData\Roaming\qgsentry\qqgame --url=https://sentryv2.qqgame.qq.com:443/api/2/minidump/?sentry_client=sentry.native/0.4.12&sentry_key=ad85ba7002024a6d8b6616fd4b138be2 --initial-client-data=0x354,0x358,0x35c,0x330,0x360,0x700b9000,0x700b9014,0x700b9028
        5⤵
        Writes to the Master Boot Record (MBR)
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:7748
    - - C:\Windows\SysWOW64\icacls.exe
        
        C:\Windows\system32\icacls.exe F:\Tencent\QQGameTempest\ /grant YRWKJLDU\Admin:(OI)(CI)(F)
        5⤵
        Modifies file permissions
        System Location Discovery: System Language Discovery
        
        PID:7816
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        "C:\Windows\System32\regsvr32.exe" /s "F:\Tencent\QQGameTempest\MiniGames\CUQG.ocx"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of SetWindowsHookEx
        
        PID:8280
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        "C:\Windows\System32\regsvr32.exe" /s "F:\Tencent\QQGameTempest\MiniGames\Logic\CAAddins\GInterop.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:8296
    - - F:\Tencent\QQGameTempest\Hall.58955\video\QQGameNet.exe
        
        "F:\Tencent\QQGameTempest\Hall.58955\video\QQGameNet.exe" /regserver
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:8364

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:8444

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\27411.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\27411.exe" "-r"
1⤵
PID:6988

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe" -r
1⤵
PID:2140

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmudisk64_ev.sys
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMUdisk64_ev.sys"
1⤵
PID:7700

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCTray.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCTray.exe" /regrun
1⤵
PID:7920
- C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\InjectHostExe64.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\InjectHostExe64.exe"
  2⤵
  PID:9404
- C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMHwDrX64.exe
  QMHwDrX64.exe /starthwdetect
  2⤵
  PID:10140
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32 /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\FileSmashMenu64.dll"
  2⤵
  PID:4752
- - C:\Windows\system32\regsvr32.exe
    /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\FileSmashMenu64.dll"
    3⤵
    PID:4392
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32 /s "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\FileSmashMenu.dll"
  2⤵
  PID:1868

C:\Windows\system32\Drivers\TFsFltX64_ev.sys
system32\Drivers\TFsFltX64_ev.sys
1⤵
PID:8312

C:\Windows\system32\Drivers\TAOAcceleratorEx64_ev.sys
C:\Windows\system32\Drivers\TAOAcceleratorEx64_ev.sys
1⤵
PID:9468

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\TSSysKit64_ev.sys
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\TSSysKit64_EV.sys"
1⤵
PID:9488

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCRTP.exe" -r
1⤵
PID:9536
- C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCSoftCmd.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCSoftCmd.exe" /command=GetQimei
  2⤵
  PID:9688
- C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\VolSnapshotX64.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\VolSnapshotX64.exe" 00000003000000010501010000000000000205010000000000000003050150000000
  2⤵
  PID:9488
- C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmbinsx64.exe
  "C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmbinsx64.exe" /install
  2⤵
  PID:10196

C:\Windows\system32\Drivers\TAOKernelEx64_ev.sys
C:\Windows\system32\Drivers\TAOKernelEx64_ev.sys
1⤵
PID:3684

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x0000000000000504 0x00000000000004FC
1⤵
PID:5752

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
PID:9908

C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmbsrv.exe
"C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\qmbsrv.exe"
1⤵
PID:3364

C:\Windows\system32\drivers\qmbsecx64.sys
C:\Windows\system32\drivers\qmbsecx64.sys
1⤵
PID:5744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Image File Execution Options Injection

T1546.012

Defense Evasion

File and Directory Permissions Modification

T1222

Impair Defenses

T1562

Safe Mode Boot

T1562.009

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

QMCommon.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMCommon.dll
Size 1.3MB
SHA256 b33d22c75f7f72b3a0480a07cb6276a5f16e9d0be8fec63a367c178ca463131d
MD5 ea560b5e564306b1e5a544c6bb85851c
SHA1 47647d5ffaec0ae961faacb631cba6ca91e755c2
SHA512 fb8a9c21a0dc40247fbf29d4cd99ddc03901e485547c57aad24bfca00fbbc974a9c68c393ec3666ad01b4c6a9151f6db981f206c7d4adbd76594e33cee1935b7
SSDEEP 24576:YF6r8JHtgvsR5njEhH6TXcNyYWtCwRqXXzj7di+NQOtlHmnJBbBN+qx:YSHv2ot6TEyJ/qXjY+aOqn7+qx
TLSH
T1F7555C31379AC435E6B207B15D7EBA6E427ABC710F3681CFA3843A2DA9305D15B31B16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMGuid64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMGuid64.dll
Size 298KB
SHA256 88790dbe1ab245a7ab6238446fe7a2f51efcf910a82ff58c5545027113071218
MD5 01a9b9fa4727cbf902dee7fb7fd8b71b
SHA1 c64a102854fbbd1b31600eb17c1259bbe69b8499
SHA512 41543bae268f8f7476a4ecf48b20c7058afa102e443701d8c69d68edebfbf9ca969bfd6aeebef8a69b6598cd2e96dfb31da4862847f93443b23a7f8d825e803a
SSDEEP 3072:Lz1Ndg2X3W60NyCagG7H17HHTLAu9LSTahtqG6QLLm8e3AwmIG9Jdckn60fcdmb+:LHdavGbdTLAu9P3h6X8eDYchmjXul
TLSH
T15A545A6672D904BDE5EBE27DA6979943F6B638034361DEDF0390092A1E537D0BE38720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMIpc64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMIpc64.dll
Size 321KB
SHA256 754efcd529c0223d69165ae0fd0cc3c8c0fccad323bc02d74907bb0f6f632e63
MD5 b3b75585d26a23fd6b359908088bddd3
SHA1 ceccce18b9092c6449095d56eca8eed4020b62cd
SHA512 a6943adaa243dea34c85ffa791eac18509ca7d0699fed9c251593f359ee7127a56dd77a8b3c3214c6bd1ad98364a9f6949d377149ed7f20f8584d5afaca0f906
SSDEEP 6144:00w7Mcs/vZUeKw+VHqnGvFDXe0ShBZdknOExqjESGfWe:7wRcBUeKvKGvodZL5a
TLSH
T18C647C1AF3A801B5F1B7C13DC9A7D90AE7B3B86547A19BCF1260461A3F237D06A38751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMEventBus64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\QMEventBus64.dll
Size 103KB
SHA256 70fa0190ecf2e740f0f7d7b2bf5d83d23ce3aa6e01bd28d22e501dff3d9d4694
MD5 9ddc859ba52c08afa3819d77d4d729f8
SHA1 51a9c979c521ba6e2b6da9f2943c390085fa7108
SHA512 18536e9c10bd22531dd96e6cc99fd8beaa29512dbaf4bdf082d1baf58cff971f50633711ef960a7a8d1d9275431f3f276f13483f4ba3ba32afa8a7ee1ac922da
SSDEEP 3072:VmnXqLTvZA9ZTCKii+7M+XHwvY7l9UI+FW3K2XFHjlgV:VmX8TvZA9ZTCKii+7M+XHwvMlxXFHjlS
TLSH
T14DA34957B2D800A8E577D67D9AE78907EBB2B4591B21D7CF0320425E0F23BD26E39721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMLogEx64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\QMLib\QMLogEx64.dll
Size 89KB
SHA256 d39baedfb75bf082cf691b5b5fb29befa557631a5d7d773f4c8803e9f0b317f3
MD5 bf0a0fa025b6a8b74dd64f46ba394778
SHA1 396c629d73e244d446e0b05e18a46ba6a2120e83
SHA512 6e081b15b280b96f1f0b87f09e22fd49a62b7bd0fe8ec12804dfef0e70d8181b81b08eace5519eb174bea3bcecb295056187f4e63beac0d7681508c03d7cb4b6
SSDEEP 1536:W3PfsjRaMdvS2SWyBChzsLmcSDX3rqHqNggcJEs575O:W3HQaMda2ZzsLVSDX3rNggcys5lO
TLSH
T13C93065AB3E800A9F5A792BA9A778507D773F0225B31D7CF5260C2192F237D05E35B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abseil_dll.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\QMLib\abseil_dll.dll
Size 1.8MB
SHA256 94d0c8aefe4877f1e7face9b6412f7b5eb11dd6d1533be8121ed29baa4bb22b4
MD5 bba137e89a18f61b6b70c73444777c57
SHA1 6a51a3a183636c34a3fd54edea4ea8dadf3be86c
SHA512 6cc3c91b06a15c4a21dcb3b1bac871c2dbf846ecc252a8be063b80bc6ffb0ee3d56d61566ff4acb2390f54e4a6ee2901f97497e2a19668c2198fe2cc49f1a1af
SSDEEP 24576:2DsajDK9fH+rpmDr34AjWP5UJK5z+Faol+z+WJHR3cAP:2DsakfH1Db4ApJK56jl+z5JHR3cA
TLSH
T11F95C52352030492F8EA73749DCE96405379D486A38692C7A096EC550EE73D4EA7FEFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libprotobuf.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\QMLib\libprotobuf.dll
Size 10.8MB
SHA256 b2ec9063b2a07f2d156449f2a92b4e44902635ffa82152afa3f3e874829173d0
MD5 c343f3185af6c3a9fe6bd5b07cd4fd3e
SHA1 582f83cf8140ac7cb54eab01bb7102951f3da7ef
SHA512 d568239ba35f238c27f8be171b0c28efbcce512770d3a98e0a45983f291c5231ad57e247eec0c9256296b34e5f9ab81b1f8d9462f323ebe6944cea2dcbbf3683
SSDEEP 49152:q2GpgsStmfDnY5RTzll3Kt96ZIw8kaY3yHzyrrct3iObK/Pak24RzNqhrLhr9hrm:PY8lg83yTzhwz93+u+C
TLSH
T107B62113664B43E36492B2549894571093F85C42EBC5F78F40E6E9120EF72C9EB6BBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMNetworkMgr.ini

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QMLauncher\QMNetworkMgr.ini
Size 74B
SHA256 3003e5c3469be8bccf072bbf8680b03cec64c4cc9591da0fa61d5f29614ff7bd
MD5 270d8593cb4139a891e643e2599b63d9
SHA1 cf0cb86738820a9f1f3b62c74db4310aec034601
SHA512 cfbc6c1f8d25b38df2e27b3f25833cde81e7355dd539d019877f535a01cb5c9e3a6a5162b012c55078fe92e5582d3f9629d0713049509c79c5b510b56b16f8a0
TLSH
T1F6A00204799BECA09FAE542B1C08815A4639D54C843FC7E41BA7581A7C96261330BF90
MD5 SHA1 SHA512 TLSH

Submit Download

QQPCSoftMgr.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCSoftMgr.exe
Size 132KB
SHA256 88ce8294e639711bd72b417915a05d64d5536516579b27a0b9ed6a7726eae04c
MD5 5539b5705975a867d87026714a4c8895
SHA1 6e04f0744401f54fd9aadfed45c613e539cfc16f
SHA512 569442272844d2c1646a407fe43a379aa23f97481e94a5345a4bf72e6fcbf10eace167910a9b7eb7334de9216439dbd26771ef34dd29a5138fd6019892ca126b
SSDEEP 1536:2IWulzXJu8D0xhMNsrhEQo5Hteopd9k7B2elv:1WcJu/XMNQeBNeq9ktBlv
TLSH
T166D3E67AA9A3857DEC6385F67E558C3CA47FBC3035A382B1F141BA099B362546CD21E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QQPCTray.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\QQPCTray.exe
Size 190KB
SHA256 e5fbf2027c24e272168fe1f92486758c02728de91747bc2d4cb08305c3d6e3be
MD5 a3ee8fb03839c3cb5d5f2c7ef3c76512
SHA1 aab8e19fbe658cddd4c0e16db5c1b0f536d2a0b5
SHA512 e24a3a9e19871d172f3dc23cc2f524699fb9d579d1050bd1f954edca5b593b60573ff2dabbed38140edcd0f0ac7883f87ce801a1ecd8f145b1c85f26789f6484
SSDEEP 3072:HNtBwGthgRV974VQ1U/WoGFcp2BV3Y7m0ci5DEc6AHol3tt:t7wGtqeQVbcp2BV3Y7m07JcT
TLSH
T1E7147EC0265A6A23F7B6343D0F29FFED45786D1047C097AB3D962A1A1974DE32C2325E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMNetworkMgr64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\Qt64\QMNetworkMgr64.dll
Size 574KB
SHA256 aae03a152bb3c074c31e1aaf7355b3975036327d8751f47eb81e16d421697652
MD5 16943c5319c246ef72bb8b8bff7be8c4
SHA1 d649e5c39219c62bf517626fb6e54bb967c0e873
SHA512 ef5e9f1adad34c6b9db2df65ba0c091b1e97aa0a72ab8b81e75a48dd44f59b72ecf818fb3b8ff44ee62db0aa610b127c2373deaae2481d871406bf31edf164da
SSDEEP 12288:3PSHBjrRGN0pbDnhUPa5WYgeWYg955/155/5QNIf/+B:3gBjrZpbGaJNI3+B
TLSH
T1F0C48C1667AA03B9E17B9138DAEB9913F7B27C160791E6CF0390165A0F736E05B3D321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk64.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\SoftMgr\beacon_sdk64.dll
Size 1.9MB
SHA256 ccd98358202b02435a1f3c64aa56edeb9551fcfb61474b7d9bacc838cd0b67ca
MD5 6f709c06bb108e1835b8648c74aa0ea9
SHA1 9f7529d6b69b5d52d9de8963c1fff9f95ec35417
SHA512 41a3efa443d942ce6ac82772f7caa5ad2f0794ab05e93f19e30f02f0499a2ae4672f5083f11680871262b15dd5667be9c2c26ff696cd90c4c5e810b1d899a5dc
SSDEEP 49152:ArbO10PVY48zQDUwfevWG+yYW2wRU4TOMU:lopB
TLSH
T125958E47A7A800FDC6ABD27CC6475A0BEBB1B40617619BDF03948A7A1F13BE1167E314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SysOpt.ini

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\SysOpt.ini
Size 18B
SHA256 5fc49781c790e0af996ad15a2f91ff53e7ce82ac7e431fddc45475e68aa14f15
MD5 b433f0cd8ec11ca0d6939fd6402dfc29
SHA1 d30cbf3824ff8b761655e57d8f9dd950e2d5eac3
SHA512 59a4ae941fc73f2b37550ff60fe4a6b1cc58a5520cf73e9490156ea20667904ce7bb028915f67890a18703788850a934086ef1b7ba2d87b5454c09bff4952d12
MD5 SHA1 SHA512

Submit Download

concrt140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\concrt140.dll
Size 237KB
SHA256 290f577461b2d4197db0b7d09341225c90cf066984f965e54c9fa4aa16ba6687
MD5 ec5a86b5e7bdffd50e022e431287273a
SHA1 f8ca0cd2955ee86c2f8ae2e9f1514071dba314fb
SHA512 d712c835da99cbc98bbb031301ebc339103df25ab651dbe6c0b4bb90e2646ef43680a93834f1846d84969e7e7d66ce7df91f3381c6a570fa723f02d704f3b262
SSDEEP 6144:ESM2yFExAZvA2LwG/LTEcDDsLIdKd3uNqW82Cfpu9vVQlSdu6bpIo12z/NpJ9YO:z1PfI4AqW82WEtu6bpI5zN
TLSH
T196346EA1344044F7F77B03328428E7B995BEE68027EB85D71F6CA65A1E346C1EA33593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\msvcp140.dll
Size 426KB
SHA256 4190f0a1306257ced4975448794e1d42be312e334ffccfb4910a4a39cde9df57
MD5 0a0042fe544c91cd57bc2f7ef40bb974
SHA1 8bf31f44ba3e47b8b186c3d8cc219a4d2f67da63
SHA512 c4c56c06cd40213ebdcead6a256510b44beefc3a18d7f84efebcd05bac7bb1b942f97b7f7798420ca8ff0c1592f32301d751554fb63125b4703feadfced2f6be
SSDEEP 12288:/gc0BGzePo6+J+4P0xYv7IQgVhUgiW6QR7t5s03Ooc8dHkC2espkWK:R01Po6+J+dxYv7IQgy03Ooc8dHkC2egD
TLSH
T116943932BB464DF1E48913B971C9472193F9FC610362E3C397DAF12A2F566C6A633A50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\msvcp140_1.dll
Size 20KB
SHA256 f92ec09eb6b666e42cd52ef912f298fb79c264ef3272735f69f99684b88585df
MD5 4b30f6c86cf6932f2297ffc5e64d2bfb
SHA1 e16f032af4d319002a0db8514d97c1ca23fef42f
SHA512 9c1cca4ec49e40a955284be42bf38a3a9a1264aa04d69fc2bbfc6cb9ef2c32bf99b496740629b283eaa944d8b8166ce755443656640f5c65f98924940d295588
SSDEEP 384:Zv2tlmpNhYQjEy3d5Wc45gW8414gHRN74qJ/AlGskCu:Z+cgtyIP4K/x8u
TLSH
T1EBA23C82FF644963E99E183051B9E5536D78ABD01FE052D72B92F31E0CD67C2EE30919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_codecvt_ids.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\msvcp140_codecvt_ids.dll
Size 18KB
SHA256 e5fb7a7cf24a854463d6a00b2aebd50e4acef58d2c1535246069ff3f4a1dd027
MD5 4d24e093ee8fb09955109923b8951a7c
SHA1 e09b5cee8a7ee36a0cf0fc7a17859ec60799f03e
SHA512 2dd1403db4a1c47fba7ab0271d88d33bfaa8ab5c0f4e5e054596dea042c6fe74095b92ad4f2f78b98d5fa5713061321f8e38c1e2196702e89fd04691c15f5f9c
SSDEEP 384:NZDSdV3lIjIjG2dhWiyEW4O14gHRN7WuNzhKlROWt:NZc32jPZx7A
TLSH
T18C823BC2EB280887FDA71D7052E4E853AE3CBBD51D6091171B96F6181C97BC2FE24629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\ucrtbase.dll
Size 900KB
SHA256 1ff49fa3db1b3aa78459544594f72f7aebf2ba285476c2c8a064bd887ea7f565
MD5 d0d8cf4e5302fdef07168d7ce184de5d
SHA1 872b72e0910a3d5f142e85c309ed4295a8cbd95f
SHA512 a7569fcc47526da6532d97244172596e8d3900f2cc142709c0bb95ec2447dab5411ae0cc9bbf430470b6734781c5bc748857f5ff56d8a82980e93a40a5a86a09
SSDEEP 24576:+0qW/eQNMe7KtlQzn4pz+xJlEInEFmcvIZPoy4z1k0:X/eoF54prB
TLSH
T112156A617885C161CCFA61F81AAEF232057EB5944F70A8C337D40FFEE5651E02A3B65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\WeChatOCR_1.0.1.28\vcruntime140.dll
Size 74KB
SHA256 44de8d0dc9994bff357344c44f12e8bfff8150442f7ca313298b98e6c23a588e
MD5 afa8fb684eded0d4ca6aa03aebea446f
SHA1 98bbb8543d4b3fbecebb952037adb0f9869a63a5
SHA512 6669eec07269002c881467d4f4af82e5510928ea32ce79a7b1f51a71ba9567e8d99605c5bc86f940a7b70231d70638aeb2f6c2397ef197bd4c28f5e9fad40312
SSDEEP 1536:L2HuqvERNjBwySXtVaSvrgOFw9RxKMniecbCerlLi:L2HZMRNjKySdLcOiHiecbCerhi
TLSH
T1BD739E4278C082B2D56E4A79057AF612673DAA200FD15FDB7FD85988AF75AC0EF31213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\beacon_sdk.dll
Size 1.5MB
SHA256 a82d287f08ff26469531057853770c200279ee9c8b94de6d5ead22d1e4bc59f7
MD5 e61503a89be41c085ae42f590320da6e
SHA1 deb3ecc424729c2b3b115c84cf5797adcc2c191a
SHA512 75e790f60fdc679ae53bdd7eb955876674965e586a53b0cf1ece57c4b47a2f71dd58fd689daa0a3afe97b7801a67be636c5c0b45e6bcd9e99b66b3a88f98b1b1
SSDEEP 49152:jngFXLQshfyC2o/m4noFRDbxkBAN1LVST6Q:271cHxkWN1u
TLSH
T1E175AF237985C0B2E9CD02B162BA5BFA8D3DA925072955D3A7D42CA59C301E3373E71F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bugreport.exe

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\bugreport.exe
Size 696KB
SHA256 fb7cd7da732ef297766c7aec43d0242545cadb80d9bfd5391809d308225934f7
MD5 c3b0e2a8c9460073ecdcce4e2200d317
SHA1 2c584b125f701eade518c9fecfdc21f2bf30c0a2
SHA512 bcb90f154c1ab94cf3297f9712aa4d3af2b9c151db675468f121ec360df30d9511cadccdb7e323fdfb08fe170147749a6e788ff2cbc1108d13efc6c70dbd70c3
SSDEEP 6144:qMXSI6tEVmJq7x5r0Hyjhrl3Xd/VbDsk5UGHuoWRazVUzV49l7hiUrIpqMfHttz:j6HOhrzmk5UGVNzVUzV4fqqMzz
TLSH
T1A9E45B72BB4BE031D91250F16B7CAABEB469FE241F6559DB63C43B690CB84C10A30F56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_2.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\msvcp140_2.dll
Size 162KB
SHA256 8aa3ddacd2b2cf998e5b641dda4bfed07f689849521a6794e0db4f9354d3edb5
MD5 3a28743d8c814cf347398ea2544a298f
SHA1 2530dd3f6ce41942e592f926dd30a08d8de3ad81
SHA512 238ed143f46c272377df78e7a1e33a7239bef7013ecab37e3ce93fd24c640ec62648bbd7ff01be05c147aa9576a0baa4e5a0ab978f151ecafb1c33f4eec308bb
SSDEEP 3072:8ZQg1ocb42/lCmyPieky8DbRhn0WoGgvQHwRvf567d3WoeiBGnO1O8O:8Zac8myP/u0h9f56JmpiAO08O
TLSH
T1FDF36CC3A92880A6D09F097FB4105B2F642DFD921BBE46DF2795410BDE38ED38DB2945
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_atomic_wait.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\msvcp140_atomic_wait.dll
Size 50KB
SHA256 bb2981af3a123a95822a55c0bd3c470ba6ed6c0151ffad09717583fc6abfcba0
MD5 792b0131510130442bb66c3a7d12ae90
SHA1 62ddb095d7e07020a69ed5ed704778a92b0be976
SHA512 38de9c71d9e95aa1b2ee31972c8a273afefd2f124de0ce3e6f247b123077db4a374aa32ca9f8b786fea4910119c71f1831af5f4c0273ea93b5e860afdce7e0e3
SSDEEP 384:Aj1lTFwTSloNYcSNXR5cHDIABta/FWFvug0yiT3UN9imfI/NVW0jdTq0Fzenw3GL:mLVT9kNWNLTJwwWDpQJYp0cM8Atu
TLSH
T122334A91EF2441BBDDEE12301526EE2BD97D6AD01FE05AFB1F136B480D927D1A93011A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\QMNetMon\sqlite.dll
Size 351KB
SHA256 353334c3a74b55003ead80e3b90b430d218811e540f4dff0cc95032d0d7c59ba
MD5 5d7f9c12e6885244e19a8b6d04c57577
SHA1 5ee6948d682c22c5266f3f58ba7640d41cb233a4
SHA512 17259e5dcc9f88221d64c4ff7ee058853b0702589844fb34c534c34887491934ced9b9d49051efabb820d88311956fc7e8607816d53cbcfc48a33ab2b0ab37aa
SSDEEP 6144:V2+/FrLtXGoZpgo0R45NUu5m0nR7HfZPrsjC8CXQgksEnYUGOjBoyU9P41tMLSnP:V2+VLal2E0nZRcmEnYOU141t3dwu+7FY
TLSH
T1A674BE23D5928037E46310B0525A5EA29EFDF63016B594E7DFE42C899DB04E2A73F393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abseil_dll.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\abseil_dll.dll
Size 1.7MB
SHA256 a462f5eabd58e0aa0a1b4d9a3906b11f8c82a9fd32199669094a97d914c691f6
MD5 d12387b4a4a002699fb7c3fc7a26653b
SHA1 21c0963c5374a750d8fa4a3fa0955bcaf6737779
SHA512 60e557b008fadef8edafbd66d20e62c57148d0711bb0fc43ab32818b8246d4ecd1924b88ba11b5eb193b64404469cc3e5628eec37e0735773eb4475bd8e5399a
SSDEEP 24576:hDbyB7z+S5ycMMnY03sfDxUbCQlvol+LcuuCmxqjnlu:haJzT5yinLcfCbCcwl+KCmxqjn
TLSH
T1B885C53164074452F8D632B1AD8DA680033DC886A785A1D7A095FC560EE72E5DEBFEFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libprotobuf.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\plugins\SystemAidBox\libprotobuf.dll
Size 10.4MB
SHA256 b3ecd2bd19fcdc22ba48e85f7d25bb9f47d71dfad9f0ecaae892327f89353153
MD5 4a75558522283bebffa57f6e3abc94e7
SHA1 c02db1878d7d5246ec82a438e3f7c68f276e2a6f
SHA512 48876954bb469bd2152acc72ddc0f9e87e2c62a58e2c60d21519c03d746d81d9246540676e2f8d7d39991ccb625bde4efcb5f06affe056a5f63fcc9c24aa0035
SSDEEP 49152:83NA5mkXG1cWAR8PSAwMOnjrgd3R+HjVzmxcr4kMuaHGN5WbW3hAchA3hABb2IYM:Yq3XgTAvQkJaDM6+uaNy
TLSH
T18BB6F113A50B83A3A49272515894571453F89C42EBC5F78F80E6F9220EF72CADB677F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcamp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\vcamp140.dll
Size 390KB
SHA256 aaa4364b8fd322f8878d91f8b76319ed71357e2a7e91d0f732d7857d067ceb2d
MD5 f89482c2c8a495993e2117d5d1bdf442
SHA1 fbda41c9a499f9d82e1cf69d06e4c6e16895f0f3
SHA512 121f882af64fd67afa86d0ac1b6b172b1dc9720078a0f6744a5c778911f22e4dd50b0c9d5509307c393dcc1131b3b5eff6d088da8d4c12d309b3facdc46a334a
SSDEEP 6144:sJDx2SAIFYoVXPxZqPzgb4CxEy4BtHYuqiUOA6u6M01kGcWEi:A2NABVf/N1cBNYuQOxu6nHh
TLSH
T132845A21F951C83BD26F0332381DD5EE60A5B6505FB1C1D37BAC972E1EBA9C29630D62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\vccorlib140.dll
Size 261KB
SHA256 517bd079e0108d150b6f3b42afcc578fc5ca690ee8dd0f638e23eb0df07af8a3
MD5 56c2c3a73f528f95a1b70f68d3704518
SHA1 40d1c3cb0a3d9a35ec580540ea6bae39fa6b8261
SHA512 5bbac3d08a1db6dd249c12b65dc49423ee6d12091d058d608b1eb193c7d11b0ba35c591041b721b35f9fe2cfe40eafd7c4cc17f06509d11dc615a9c34d7a17ee
SSDEEP 3072:c9WZnG3vxHdmJOHpxyBIBaQ0I/Iuljl1mc48MHbhwgSmiSO4:cmqTmJO/BH0IwuljKH8BgSJ4
TLSH
T1C9444A333D9C68B2D5BF5234DA849638426A74908FD1D7C76E58EBCA1DA43C09D30A7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcomp140.dll

Path C:\Program Files (x86)\Tencent\QQPCMgr\18.2.30836.301\vcomp140.dll
Size 135KB
SHA256 ae780948e9ca4e6968dc72a2b32d55409b685e4326db735b0679e32512506cb3
MD5 49b855efea2ebe9e104fefa017cc9878
SHA1 29448f4b8d7678ba63a5c8e1fd3585a19bf307bb
SHA512 774429a80c04e35037a8494fdc0944f3dea22bd0610b1534847764e669025c90b1a092ca2c9d3a5f6c065fbb869682b9a5f22fa860657ce3a13934f1e9be2005
SSDEEP 3072:Uyrx4Lf0ZGQ62xfOW6Z34bL/MmPVyL/7aG5fn+EYExc:5GQ+ZaL/i/Wexc
TLSH
T10BD38D11B5C18072E4BF1D3D5F79EA621A7FB9600FF05CEB1B9540AA0A703C16B35A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GlobalMgr.db

Path C:\ProgramData\Tencent\DeskUpdate\GlobalMgr.db
Size 190B
SHA256 c1efdfad6cdd392e4c46573ddbc65f73b4c488fecedbcb43c4b98da1ef99133c
MD5 bb92084258de79a8e906f7b6ffe013e0
SHA1 4913698c4417d14457220062dc5aa3e4e1590ca9
SHA512 1dd25411e86d0c840a0cc4b7cfc4c9f50308ed7d258a97b2009045cf619f1ec5bff7e35ebe112368e2463e6e7355bef76f2c182eb6dd8f1ce8a9c24cb39efa80
TLSH
T157C012AFC15C5AE39E9D0F07D29098669C4592D1559B6084903531CB4875610F4DD579
MD5 SHA1 SHA512 TLSH

Submit Download

Guid.db

Path C:\ProgramData\Tencent\DeskUpdate\Guid.db
Size 1KB
SHA256 c43cde2b58e6a49597749c44430dab6ae5c989fde17b21bd86cf17c931fcad4d
MD5 7739e7afd74b8ac7911d1e37a661c0d2
SHA1 dc62d9747eedc12037c5217bc79bb0c4ac1d8d82
SHA512 3f17f20ae5094ac550f883abf4ab97b6e4065d968d0d58a83f702cbe3fbe64b2fc16caa1a043a68dea2b308738e0ea885115b7dd5ef5fd2c02bf165cf2036c94
TLSH
T1C821ABBA911C0EEC59AF438323603427DDBD721399AB38EF6FE9C51D16DF6116A8C600
MD5 SHA1 SHA512 TLSH

Submit Download

Guid.db

Path C:\ProgramData\Tencent\DeskUpdate\Guid.db
Size 1KB
SHA256 bbc90d527d35a49374373e8b7795c2a94d044347bdd0df9f4359cdf411751b9a
MD5 80f8b48ff704cc6661881f1874831ec9
SHA1 bb3d450917d2afa6cda0c3ff02cac38f1d46b100
SHA512 cd75a4fa9cf1adc664a6932f1dd719039d1bb2e1c6088245812267cdedb800d6df16abb9857523040e1a1ed85490ea5ad6c21cc13288a316bfd606bc9af6e9bc
TLSH
T1D4219ABA511C0EEC59AF438623603423EDAD721399AB38DF6FE9C55D16DF6116A8C600
MD5 SHA1 SHA512 TLSH

Submit Download

GuidInfo.db

Path C:\ProgramData\Tencent\DeskUpdate\GuidInfo.db
Size 320B
SHA256 0a4e39badc4fe712e816f2665622f9ae951abe7721c3ddd13d8b7c5e2ff0b0cf
MD5 84dca20fc4bd6c0c9a0054173b3a1b79
SHA1 1d4c2075375b4315e07714d600ce661738e2514f
SHA512 2e8af999e1d4c706b8ea423856e12ec158dcbf20f6590edf0da4943f163bbc8579c47499f79187feb4c7581410876e493efba81d074c5afcd6555fc06dd78974
TLSH
T1FFE0263AD2389BD9295B10E022E1EEDD5B1A26121DDA024A08950A030A20EE8AC8E50E
MD5 SHA1 SHA512 TLSH

Submit Download

GuidList.db

Path C:\ProgramData\Tencent\DeskUpdate\GuidList.db
Size 221B
SHA256 c85e65a97d95574b31ba7be4fda77a5128107c8f356a3e9bded0928bc79ff35d
MD5 ef7ec9cd01c27b503887a80169343ff7
SHA1 8bd83f883e6670202ff72e603f12fb8adc39fe9b
SHA512 8267104ef3f2a882ebaee9f916ed8721f2a75b7f4278ae5175d31bd95287bf960ffdfd0dcbea6f07d31607bcf9200e0876b9bd81076bcc5ff9262aab26a4f273
TLSH
T1D2D0A7B9C028139146AF008634E0ED3A9D5522C3195A106D195709474570574B8DE106
MD5 SHA1 SHA512 TLSH

Submit Download

GuidReport.dat

Path C:\ProgramData\Tencent\DeskUpdate\GuidReport.dat
Size 818B
SHA256 85b0d9a2ffe18d2bb9e96e1c894f7b3617fc0a205386a64a72dbac92ad5469cf
MD5 7c37d371f2961837cd42c7ac634e09ce
SHA1 6efa32faa5f87763e58b3b840e1f811a4bb51732
SHA512 3cb1ca997ba1c1466abcce8040eb7a339a62fa4e885eb8807cffe4633ff7e79064841e6863c3b58679138159ae9a137aa415e3c9c9827b6859275ba62d88744f
TLSH
T16301C239D54D55FC91F7828773113DA7FE98F143AD7A34D6EED2022D171D641450C44A
MD5 SHA1 SHA512 TLSH

Submit Download

DatabaseInfo.db

Path C:\ProgramData\Tencent\QQPCMgr\DatabaseInfo.db
Size 12KB
SHA256 f481a86548061fbec469f161f9f1e069a1fbdbb490775927c1c348543a861a9e
MD5 b5ebc8e133bde1042d5d1bfc86a96322
SHA1 608c872978e86e4f69e896e65230299321d644e6
SHA512 ef96b7e7db7ab8dbfb3ac62b9d809cb7e3195a91c81c1d78c02a639aa5f8b28aeae9b484799cdcf4823230cdeaf5003c0cdd317739ea06462b10d355e9fcd73a
SSDEEP 96:tTMvP11XayNgvP11iWKKalV9Zy0vi4sZy88Q2KalHKaayNPK:tAvHOvH4vi4XQ
TLSH
T1CC421260B4E67324E91671FA8FC9D16A8B1BB2A8463BC43F305E66D347C7415BB01379
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QQPCMgrInstall_20260825061714.Log

Path C:\ProgramData\Tencent\QQPCMgr\QQPCMgrInstall_20260825061714.Log
Size 10KB
SHA256 101f0bb6022c8de0a87d62a94447524ca564398bf2973c357a87a6dc99fef579
MD5 c672c804fb78b4ae0d442a5c6f8fdad7
SHA1 5ca64e26187a65b18a115edb47ddad8f3f33e3fc
SHA512 b72f82712a9e167e7bdbba9199fbd646b837fe46ac260707172e402dcd9543e3ee6a9b5cd1836ccaf0c7b6f2b562fbdfc2a30e002e4d60fddbb38e52cf994e18
SSDEEP 192:/0KCHht4WxdIOfJ3iFaoRnjVxD8R334rLooJ:/9CHhyWxdIOfJ3iFaoRnJFDM8
TLSH
T1AA22E97DA7D0014AB9B7DA03EAF79157FB7678993134E80D02C2430C2E7698978A172F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmbDatabaseInfo.db

Path C:\ProgramData\Tencent\QQPCMgr\SmbDatabaseInfo.db
Size 19KB
SHA256 da32a751dfebd8ae26b014c40c1b7e4f3e95ed2ebff7cc25cf24526f257896b7
MD5 892f7f403a028b007f4d3c75a272bb3e
SHA1 e1de0e0008ce64e294b01bc67a72ba94024ad069
SHA512 1ebff1a6a0f87025b4f93ed13c5a588df492daaaf27bc580304b41c20b8eb27f0eaed905d18774dc9b59dda749a90c475113e65009a7134eaaf02bae02d3128d
SSDEEP 96:bV2Y42Yfqu3+/E6ggH63/5NQE48CkyS5NQ6oIkHoRl:B2Y42YfqE4a/52E48Z52fIkul
TLSH
T1DE925E41B1DB3229F916B5BA8FF9D1BA875B3ACD043B812F206D264343CB409EB05779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QMPBEEx.db

Path C:\ProgramData\Tencent\QQPCMgr\TAVWfsDB\QMPBEEx.db
Size 23KB
SHA256 1d65085ec812a78caaf4f30df7cb8b7beec3a4bff42a9c98a5578c6caa7fe2db
MD5 04d1680795dc7f86d0af3717b9f7078e
SHA1 202375c9c2c066e58613b6ceaa952325c7e8702b
SHA512 619f73d1d53d5dca353ff24e929213ef196cf1e8ad5fc7208ae69257aca574f7f98dc1e0e710789171e77e3f3cf11dd59ad34bc269cf426d73d5bd8c0ae27165
SSDEEP 384:iMMP292hHZvPuEmtFO5SIEhtRouvtvzKGUPqomswFRqFMoqmVtlyIUocxoGU/3TO:PjyvPukkIEhtR9VxUlOwMRwtVIcvldXO
TLSH
T161B2F1057DE2AE9DC07185A79B1D6261AD0105FAB01440611F5AF70E7FE9C6FA2C0F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

riskcount.DB

Path C:\ProgramData\Tencent\QQPCMgr\TAVWfsDB\riskcount.DB
Size 2KB
SHA256 da00cb58bbf16c63794a756d43c075cf9a8c09f720236270aa2451a4a19ed791
MD5 00a5e32a7e818f287167e22726ae4cb9
SHA1 f23e222071e1ba87531fc545000c48a57f07f534
SHA512 95d7c949c665838b18a16501348c373418a47684d6fb38ac28ae7594b482aaaccbeac227f529274214538dbb1e8f8540355b9506d8a4ca9232106b0e3a455171
TLSH
T17A41A8C0F2C0A216F6B52F751DE4C55B9C133A030935868E80AC992ECAF3E8496B433F
MD5 SHA1 SHA512 TLSH

Submit Download

UserPolicy.db

Path C:\ProgramData\Tencent\QQPCMgr\UserPolicy.db
Size 4KB
SHA256 56b1f6bf2ad76c284f81d2dad9e68a2c080d0c13d3e8981937322ceeeb3318e8
MD5 0d8c1dc1502cdff35a56aa1dca5ce5e3
SHA1 6cdd283ec7e3aa62c7b800c74e8032b97fee6746
SHA512 8348724033e5ecd276c314ef44d3de12f55f6a84490b6fac0aab2ba866fe68d15a460f49fcc1997b6ef9f174e36bd5c8e1277fe4bf5d7948337861d02b834419
TLSH
T1EA819E41F74BD0646CA2A30B3542E8B8E98FE7901C64DC2C439CA39AFA9C941B12D4CB
MD5 SHA1 SHA512 TLSH

Submit Download

qmvext.db

Path C:\ProgramData\Tencent\QQPCMgr\qmvext.db
Size 3KB
SHA256 57f3f423ff93dff538024fb4234f9d43b355c812a76fb7cc58f55c180cde3ad9
MD5 802c883473536602fcd602f6b73f789f
SHA1 d5f0280437e820e37c61c194a3e02db9a32391f1
SHA512 514fc93a94a14bc7de882425552e109290668bd5f7e009d0d16b13ed7bc3cc83fb5331f69382ccfdf546f352388c4641a504755291902a4d5a4587bc3efc9d75
TLSH
T135517C92B801972C25C1C54CFA80C7DBA8CA9906134E5CCA2365C9389A42721C9AC962
MD5 SHA1 SHA512 TLSH

Submit Download

QQPCDownload.dll

Path C:\Users\Admin\AppData\Local\Temp\TencentDownload\~e593b98\QQPCDownload.dll
Size 12.5MB
SHA256 eb03e0cdf7c639544759479b47b4ef5f88ca23523d537da9efae8824d514a486
MD5 1c5e38a7748a3bb8ff6e477f6806afa9
SHA1 32e3eaef903acdf3b090e121307c0fe6f8e718b9
SHA512 0f86e1251e388696a538ac9e4b04b2ad4a90e7539e243e3db6540c70c9733ab84fac7c5f4d82f9849988e74c9ad95a9858eeaa65915b422ea082f351eba89500
SSDEEP 393216:Re7mgMaw+vtWZ/SwKmAktGuMcFY7CcmR:onq+VWZ/SwKHahFkCcm
TLSH
T17BD6120172A0C43AF9BF47719AB85B6B527EB8211BB49CCFD390994E6870DC15D31B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beacon_sdk.dll

Path C:\Users\Admin\AppData\Local\Temp\TencentDownload\~e593b98\beacon_sdk.dll
Size 1.9MB
SHA256 b3aaf6a53580029856b691519bbc05ac923bb28be6284fd7fa4fdcb03018db85
MD5 3dd9e6f6db041d5f038652957006c10f
SHA1 6c6bdf5c2baef3cb49c39a87040ca9792be7975e
SHA512 60864bbde27710d7f8d1a622f95dcd181afe9071083253f675b49cbff3e008bddb73e318f057c66a692ed91bd59e67524f9628201732b9886f5efdbf30301668
SSDEEP 49152:07HYIRuLnH3Dv3ouNB2l+smgNRzsZh/nIe3KKrdsTHOl3Bs:kYH3b7NB2l+smgTSJIell
TLSH
T16895AE22BA42C432E6CE01B6557A9BBE5D3C6A29073844D787D81EB69D300D3773B71B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-console-l1-1-0.dll
Size 19KB
SHA256 8f28bbea2ac836fe993c2fccbc7920c6e0fb5cd3fba7956a85273ebe2282fb15
MD5 bcbfcd896e50e591b22e237c903fb523
SHA1 2358537e316afaca3b61ea797b58ff60c1ef99c0
SHA512 1a9812c4fe427e89254df346721cfc93ef52d5547d293a987516b43c21e7baa51ee76f6dacebe87334a67ba54b98633e603b4da21b8264240561e1801e922eeb
SSDEEP 384:ZWEhWoy36q0GftpBjX7WVjDERHRN7P7JZnlrltmA:Zwki1wDEBj1lt
TLSH
T11B9228D68EBC9543EC939DB012E8D9877C3DEBC71D20555521AAF1E928C33E1AB14A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-datetime-l1-1-0.dll
Size 18KB
SHA256 baa6eae9e3742c736327da12c0e2e586e65a0b6d667547c638fd1287886f022e
MD5 aab52e0385a66e157bb440cb5e3cd3db
SHA1 55421c5e58951921843c0944d18e22391bf05c8d
SHA512 4bdbb93d8259ee344ce6a6138cdda2fb19bef280f8aa06daa5640125754a808ee4a68302bdf1bc5a87362b886e826414c0f43643b068a7925966adb9bca0a487
SSDEEP 192:lPWEhWIWvEoOleFuDBks/nGfe4pBjSjvZ/fG8Wm78RFAII1RHnhWgN7aQW3/sVqt:tWEhWSMoq0GftpBjmwxERHRN7jlrltmh
TLSH
T134922AD6CABCD043ED935D7063B8D9477E3CABC72E2085561599F1D828C37D2AB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-debug-l1-1-0.dll
Size 18KB
SHA256 d9b96b975a90b0a8c08ffe6d2185b6714d75bd8fd3d8346aff4a069d44960f73
MD5 f97b671fac0baebca98059a9b099c4f9
SHA1 433f4850353d7ec03b3215d77cda5f0874e67439
SHA512 f2c8510f1b166248259781d4c910358bd89fca4d8e39b3963adfd26fa999b4991f08ca966c265ec3f9161d704844a15caf97dddc88fa2ae95cb075245e990063
SSDEEP 384:PWEhW4y36q0GftpBj2mERHRN7F7vlCADZgJ1:f8kidEBFcADZgX
TLSH
T1DF923AD1CBBC9483ED975C3063B8D9873C3CABC61D205A5504AAF5E928833D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-errorhandling-l1-1-0.dll
Size 18KB
SHA256 c8fc616e5591d0b77c592059e2fe2cecb54b1219a72d9a92fd09f396fd340cf7
MD5 7c1f03e83bcafe58ff99b3abb9e7de43
SHA1 15e8676f12f7ec0bf102b772839cb0bf8f1b551e
SHA512 e3206b7863795f3d6251ea788caea466fea6dc89678c8623ccbde27286dcdcde9158b3132296912ff06b3bd913f91bcb2ac9f21d0654f6389adc086870e9e0bd
SSDEEP 384:9pcWEhWWy36q0GftpBj9h/1zERHRN7Nowlrltmo:9p6mki3J1zEBdlR
TLSH
T134923AD58BBC9043EC93AD7022E8E9437D3DABC71D2055591599F6E928C33D1EB24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-file-l1-1-0.dll
Size 22KB
SHA256 c332a484a959a2241c43767f7eff8067855dfaff6ced79f03de154de99269b34
MD5 350e52ba8f75e06b370e7d7b60c97c7f
SHA1 24e81d8178a368b31e906a43ab70cd4912430dab
SHA512 31f7d32895e37aa35e89c5bdcadebb15eab87c30761c02aacac622048f05c91c2d52ded7b2225c2ef75cddcf8c58f714dbb8ebc579d0e58ff308df06c24e4411
SSDEEP 384:NPvVX3WEhWZ5q0GftpBjDOERHRN7iYlgHrIQ9:NPvVXX0ipOEBi9rIE
TLSH
T1FAA22B93C9B8E68BF88B9E3162A5D8437C3893C7082045861799E3ED3CD73C5E76895C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-file-l1-2-0.dll
Size 18KB
SHA256 ad487c96c39271db2c3340bb106fa8f3f2b401b100b3d342813c09fbfbddbd05
MD5 856be91f8f44394cf92be1af50530521
SHA1 6baebcc3dee03fa7dc17500d8540925307cb9beb
SHA512 8ae6f848c1ae7831fa012f87387e6334351545c185329d905ac9108694fab4b073487cba621154062e8fd357d65303938a47ba71b3d1047640bc30d5ca3d2ac1
SSDEEP 384:oWEhWwUMoq0GftpBjaQRk6ERHRN7ZNl28ws8h80u8i:+NairRk6EBZm8r9V8i
TLSH
T15A922AD5CEBC8083ED936C7063E8D9477D3CABC21E20955515AAF5E92CC33D1EA24A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-file-l2-1-0.dll
Size 18KB
SHA256 93b28bff2f9d64a02f8362224ca45bfe4d6bb7fa6f83403ba9adec300dc7904c
MD5 15f59e829f9f2020e9c47a10deee718c
SHA1 365522c1e3a230b19cd4d82d8f0bdc944ac8435e
SHA512 b8fbbf6403aa7db868cb2581ddabfff20c7e1912a4c41107fd91034c54020a344ce8f0fb4ca2f32f20e79486c5fe87177b2744f1ef593ddb5414d2adfd18b971
SSDEEP 384:h3WEhWY5q0GftpBjt9NERHRN7AUASl28ws8h86uR:15ixNEB9m8r9jR
TLSH
T1CE924AD1CABCD183ED939D7063E8E8477D3CA7C31920465A1599F6E82CC33D1EA2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-handle-l1-1-0.dll
Size 18KB
SHA256 d83d3edef8ddbecf31af7437653e66adeb303947ef3da31a1280a485422e475f
MD5 b801c68f8146904adb86869f5c3477a5
SHA1 ffb860ca10040ecaf5ae4a61a9c11db3e2eeeca6
SHA512 dbb7f1fb13d313da2047bff45ec0300d7e2f66337110fae20217137b9a6784663b42c56b135a4cae21b367d7f1650a9d158a71793bfd1822e527d6310ad6dd2a
SSDEEP 384:iWEhWuy36q0GftpBjRERHRN7lyQlDUyZa:QekijEB0eUyk
TLSH
T139924AD5CE7C8083EDA79D7013A8DA837D3CABC72D1099560196F5E828833D5F728A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-heap-l1-1-0.dll
Size 19KB
SHA256 47adb171040b53b068e2dc259ebc75562dcec8811d68b7c4b0c16a797d7388ba
MD5 db5013d1a02d899314b9518da6d0b2e0
SHA1 3e1e8df8f2f4a2184a50e11da015635a5558b477
SHA512 eaeae30f1427be40614e1818c67648448c0808ace554ce1ab0441b5525673ad1dde7ab4d124858442fe9590048a3bb241b639375d3f89ef7185bd15d4cf0024f
SSDEEP 384:KlCWEhWEC2Jq0GftpBjHePERHRN7mlgHrIQQb:5hLihePEBjrIP
TLSH
T1E6924BD9CEBCC543EDA79D3063E8E9877D3CA7C61920451605A9F1EE18833D1E728A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-interlocked-l1-1-0.dll
Size 19KB
SHA256 fe8c2607e57e6779b6485ae08e658bd7b98d79147946f262d6b3699de9259d43
MD5 86e369bd8455272049bb60a53624aeee
SHA1 b7ff6dc01ab07ca32cf030697fdaf1162112adcf
SHA512 606fd78d1a39996d623f4ce431401a4c91cf2a401bce6d04371bfe3a2b0e701f04167d9f7c897c9b73813544af0a474948ce3e23e7825b273af590b86907b92d
SSDEEP 384:5lYsFGWEhWILMoq0GftpBjmCERHRN7xSelrltm:SIaijEBxS8l
TLSH
T1A29238C6CABC9043E9A75D7013E8D9837D3CABC61D1055150AAAF5EC28C77D6EB24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-libraryloader-l1-1-0.dll
Size 19KB
SHA256 307ac04192de5a107ee66c9a4bdc16f95cede35ff39f50d811a8d5defe6e044c
MD5 f72de8f45343b9f0135f4d71a3b67fc2
SHA1 67cef9a3bc9891cf41146c25879835ad7b2defbe
SHA512 fdd8900264800117c238757abf62ed5c8883761a1895fcda4bb149534596690871ba3494523df34e4239cb45851a9db85266ff393fddbcb1e1ca3dd049c4475c
SSDEEP 384:avuBL3BWWEhW1Moq0GftpBjztm0ERHRN72tClDUyZ3u:1BL3BMPaiZhEB2OUypu
TLSH
T187924AD5CABC9183ECE74D3052A8E9437C3CA7C71D2099690599E2E82CD33D1EB14E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-localization-l1-2-0.dll
Size 21KB
SHA256 a6d2196e5c8b17851ea134f1ac02481846f78b0075860cb6eb4f90e0243449e6
MD5 a675093b0d146773b5a2010a0adfd021
SHA1 cfb93918c25c4359788680ccc140381fab1e9358
SHA512 56ad8adf41c7ed0f04ffc371dc7d538127ae245fea8783a4b0af5e92940656e0b41a0bcb88ac263b3d2efcf8396cf196993d882ffe0d74c1094b31f47558d27c
SSDEEP 384:nOMw3zdp3bwjGjue9/0jCRrndb9WEhWZC2Jq0GftpBjHBeERHRN7nhlgHrIQx:nOMwBprwjGjue9/0jCRrndblGLiFgEBe
TLSH
T1D8A23BD5CAB8D247F89F9C30326AD9437C3CA7861C20995502E6FBA938D33D5E764A1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-memory-l1-1-0.dll
Size 19KB
SHA256 01eca7b03ce90601768acb131d61875e418197234891fb71a2695aaa2f13857a
MD5 ce7d62974e002ed7736117fce3d25b38
SHA1 4225fbf9f73ffca92c18f04fb650452f80ea0fcf
SHA512 bd151a8d135b540ba573af01e6089e03a6981ef97fb1e6e3465312815787b563d7c205371f0fe06b674e1924b15fedaab239d012615e38b5192bf4d2170dd60b
SSDEEP 384:15WEhWqMoq0GftpBjdtdTTERHRN7Flp/m2O5h1JK:vgaihdPEBxcL+
TLSH
T114925AC4CEBC9443EC939C7063A8DA877C3D9BC32D60845505AAF5E928C33D6EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-namedpipe-l1-1-0.dll
Size 18KB
SHA256 082cff6fd2437f7208af7ebd56b8961bd16761255c6f1214499e93975301b300
MD5 ebceb63468278a061ce4b95d12d723c5
SHA1 9bd01a59d1986883410f09a1fbc76876edf57332
SHA512 f20f9888441caafb4e23d41e00282fbc37593d0492aec86bf7840c9b1136d070202391b809a70854634a738611017ba85f5c354a9983687277f46032fd2cd91d
SSDEEP 384:zWEhWY5q0GftpBjRO4Z+ERHRN76l28ws8h8BuL:rNiPmEBx8r9oL
TLSH
T1E9923A95CA7CC183ED975D7053E8E9477C3CA7C71D20991611AAF5E928C33D1EA24A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-processenvironment-l1-1-0.dll
Size 19KB
SHA256 a10d248ecd4a326912a390066bac1314715ee3801332f4a9c64b5cff264883b4
MD5 66012263fdc48ac26001f3814bcabf20
SHA1 2839fca8a2eab6eef2be42d06fe903d24fbd4b7d
SHA512 5e3eab7bc734e7c2936ec061ac7702f1feda6bb772bb89e9a17b06dc722db226f9913ca4103c366be303070a879eaac4a41c8568a678347dfd170b69539f4e48
SSDEEP 384:OLWEhW3y36q0GftpBjnT1IGERHRN75T1c3lDUyZKD+j:URkih1IGEBN1cRUybj
TLSH
T178924AC5CABC9143ED975C7012ACE9937C3CA7D71D20855501A6F6E928D33E1EB28A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-processthreads-l1-1-0.dll
Size 20KB
SHA256 93bfe4c4663c0a2807f5cd3be67a8a21dc93c5b097b934c17aa3cb4c4374173c
MD5 08d5b94e8b88fc6aaaa67969b03640e2
SHA1 6bf348389a0a1ecd2a8e64a67d64433e264e0313
SHA512 58d09fbcc4e7c3ca1cb2ec2f9928629c18c0ac3603419e8ba02faa3adec33cb8285d5199785ff2049461ce04f784035c5c0d651b02f58d93e7e677fa9932b849
SSDEEP 384:bTk1JzNcKSIpWEhWbMoq0GftpBjzevERHRN7SHlrltmq5E:2cKSwZaiYvEBGl8
TLSH
T19EA229D5CABCD183F8979C7062A8E9533D3EDBC61D20452105A6F6E93DE73C2D62892C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-processthreads-l1-1-1.dll
Size 19KB
SHA256 85f410b3c539aaa2ac8b5be976af982a8765fea315671badf542c5a0c71d600d
MD5 94015263f243bf376bf138dfb1cb7b46
SHA1 3938fd323dea0686a83daba2da70060b5def2036
SHA512 20f86cab8de07309cc64aece34ffd334ae74a847afedeb48b93848381c3ff721c18270bf0515171c213b9260936960fbdab4f67c3d3211f27b7bac34808f88f1
SSDEEP 384:GDfIexWEhW7y36q0GftpBj+gCERHRN7uBlkETkDX:RehtkiPCEB9ETY
TLSH
T15C923AD5CABC9483ED975D7023A8ED473C3EEBC61D208525059AF2E929C33D1EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-profile-l1-1-0.dll
Size 18KB
SHA256 8bfe8d485bf8e6bf91833f6cf61e5f054f6edbf5dfb2095967ab3db0759d59a6
MD5 d6f950aede59a00c9ae0affe0b63b6a4
SHA1 abd6bdf43e4f3569474a26a7763327baabf155e0
SHA512 bc37453defe631089159b0f3ae9fe9eaa43465b32aaa88dd31212d0e50da01823395e5875447c9a2e7cc2d2edada1f62c0663b8adf0ba0b72e552715fd787a9d
SSDEEP 384:FuuWEhW85q0GftpBjEAXKBERHRN751olDUyZK:nxiZeEB5AUyI
TLSH
T1438229D5CEBC8083EDE39D7053E8E9837C3CA7D72E20565605A5F5E828833D1AB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 18KB
SHA256 6c14cdc684c2dff9170de29533c521f58c3501eb8cc088de9c9b930eee048c5f
MD5 e2dc3af0989b0f05159851ee4453cebd
SHA1 ec902ec05b855388c9a7c2a336f0de30f817d49b
SHA512 66b7eed319e92b9f87677496e2194388d291a520201c9615c139821981b7615713cf90fbe2479a45610bbaf8dc30a8d5c9ce6eb57a27645f655f4d3eff340fd7
SSDEEP 192:MGVPWEhW04BvEoOleFuDBks/nGfe4pBjSfbWm78RFAII1RHnhWgN7a8WWqnajnrg:MGdWEhW8Moq0GftpBjjERHRN73lrltm/
TLSH
T1238239D5CA7C9083ED935D7063E8D9877D3CABC72D20962614A9F5E928C33D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-string-l1-1-0.dll
Size 18KB
SHA256 a03360d7024a4aa1013cc2cca408c1343666c7dae6bff61501d0e80d44cfb759
MD5 1292ae17b93cc2f8504d025fd1b71a01
SHA1 02fd7c6e25bb418738ea393ef7003f770f8691a1
SHA512 10c0b9d8264918522eef08afa51b9d19e365d0664d7da6c6c64cf37627fa60b5603c5a47a5a4963c44922fe5d4fc3f19a549ae216e8bad9e4da3c671cbe67434
SSDEEP 384:3yMvxWEhWdGy36q0GftpBjBfERHRN7h0lp/m2O55H:3yMvhcki/EBec/
TLSH
T1D99219D5DABC9043ECA3ACB053E8E9877C3C97D7192045651199F1E928C33D5E728A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-synch-l1-1-0.dll
Size 20KB
SHA256 139736ebca31050f4ed7339a6979595755df0acce0cf97097cdfc937de8d32e1
MD5 230070639ef8c8833d67782526d9e8fc
SHA1 2ca8951ab202b8f2bf289d9ea08af74695626baf
SHA512 b8daa7c3365bc8bcf7ff76a3002d69e3c39ce0a0c052353317242ada8bad899ad034a1f079f9d75cf0dfbd6e680c2cf77dd37ce231a39217996a3bf89c6a2e47
SSDEEP 384:Pdv3V0dfpkXc0vVa3WEhWI5q0GftpBjKYCERHRN7JElgHrIQK:Pdv3VqpkXc0vVaX9iwjEBJxrIz
TLSH
T123A23B95CAF8A583F89BDD7053E9D9437C3C5BC70D20892614A5F6A93DD33D0AB2882D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-synch-l1-2-0.dll
Size 19KB
SHA256 e295a8633b5eaad0ab47707059bc5dc5da02dbea01b2d3c4bc8a19e466abddf4
MD5 e38bd734e85d06860085772a7ceac43e
SHA1 4c8c141c63462ff5400c8d961d4f05e4bba0f66f
SHA512 8c2ed8659b5e1f9bc871c8697bcf99ba9291a118586929af3cc599454c4edda88b4ccba2f0d824cb8c62c08c9966cbd5ac78f3a475425fdd4c35ada7cc8d7edf
SSDEEP 384:ctZ3gWEhWtMoq0GftpBjjNmERHRN74lgHrIQry:v/ai+EBdrIky
TLSH
T1A7923AE6CBBC9543FD939C7063E5E8877C3C9BC61A10491609AAF1E929D33D1EA14D2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-sysinfo-l1-1-0.dll
Size 19KB
SHA256 460fa4cb795fab56d0949518d1c1d76d48dd55b3f9a02b3db421e79f98a64619
MD5 f69d3b75d2becfc53a29ce3decf62fe7
SHA1 28ad9523af0b3d569f959803cdc01f1dee87cf53
SHA512 f2653f4006ccee2a2e06227e75a95c0a702a625622311f5879a3b689078bfc623606fd7e4dd051f9987c624e922980c4c3a7c4852ce8cfc98fc11aa7115e4ac0
SSDEEP 384:WgPUZWEhWZMoq0GftpBjp1ZERHRN7lNclgHrIQeaM:WgPUZ3ai71ZEB5rI4M
TLSH
T19C9228E2CEBC9142E8979D3063A8D9877D3C97C32920851905A9F6FD29D33D5EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-timezone-l1-1-0.dll
Size 18KB
SHA256 cfcd287ced91a432b1b0f5f30eb4f9bf6409420b3994fb51c87b0b4ca21535b0
MD5 4dab6a8fe6c24b68fb16a3a6b58c1faf
SHA1 fc0a753b747b8d24a1e2ef0c59a43b855c35fe9b
SHA512 69a9fd4134a3e09b9f22f660d8512fa2894684d6dc692d12435a7c4f73b0edabec7427e86d83519b43a544608850085b83cfebe26ffd0ca687f6cf491a5cf902
SSDEEP 384:IWEhW25q0GftpBj+4hekERHRN7tlp/m2O55f:e7ir4kEB5cD
TLSH
T1929218D6CAB88083ED935C7053B8E9877D3CA7D72D20551A049AF6E928C33D6EB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-core-util-l1-1-0.dll
Size 18KB
SHA256 a6f1d195bbb68a168a07f95c273e89fe5a5eb02bac3ac76dbeb46ccd7b85ed72
MD5 1d9c2a07188ccfaf5e0f550abd56386a
SHA1 5d24d2af2096b078af3a7af67c7977fdf3d72f07
SHA512 7fa9c78527975c6e5cc42170eb02f5d706a6edc6419484fc81cf0548fc129039337b756d5bdae942f3e5b545ed540559df5c37cb287cd24ebeca95e7464ac670
SSDEEP 384:wWEhW8Moq0GftpBjfVeERHRN7MJulDUyZIE:2OaiJVeEBMJQUyv
TLSH
T1159219D6CABC8483EC935C7053E8DE437D3CABC71E2055561599F5E828833D5EB28A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-conio-l1-1-0.dll
Size 19KB
SHA256 4ab9e0da1f2c4994b2f9c9debd4f543c3ab2404d13666816d7c4c74aa1ab2e2b
MD5 be3a982da0d0fd0b06d08ba4bb75e608
SHA1 ece449270ac8ee8283003a5ce3faa48ed63c0435
SHA512 acdf9ad191075d3c392a8144e0a8ab5afd4fcc5f6a647f697b305cfd70cc646663f769c9c19b04d89e3f62ab5b19109e0c79f32ee8ea52ecc0091a7597e97234
SSDEEP 384:ij0WEhWry36q0GftpBjYERHRN7Cvlp/m2O5p1:oi9kimEBCfcp
TLSH
T189924AD28ABC9543E8939E30A3F8DEC77D3D97D72D206565045AF1A828C33D6EB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-convert-l1-1-0.dll
Size 22KB
SHA256 c580b0002cfcfaac2449085b26df4dc13fd92aac7edb580a9133f252534abbe7
MD5 c08072b6f3943d9695fff0be053b7296
SHA1 8f41ca441cc2deb670ffd7ba851956304862f5b5
SHA512 c8cf719ba70919b0dd5c0f8d3010c4c7a2e6c893a3e7f22449c8713e8ab47c65a5784550c58af4604f63806ab33d5e4fd7a518c3034628c1bf0d2c5c6c715cb2
SSDEEP 384:+uyFWEhWly36q0GftpBji0UERHRN75HzlgHrIQX:6XkieEBNErI6
TLSH
T126B20783A6E86F52E99B1B7122FDDAD72D385B82195043B48207E59C38837C1BD67C1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-environment-l1-1-0.dll
Size 19KB
SHA256 3c56a518dac09ff5dc34d99a97129051ddc93a1c907cca8274e8d08aa9f77e3c
MD5 e5e1a3ef0c1cf856dca6f71c239bfcde
SHA1 1d66842144767280f835811644980f72dde28edd
SHA512 d885ed122f58026df16668df16cfde5d5cb81b51b9154305c3298cb4d6b1f5241a91a65c332c8d2cbfb8b5ff4faa25d2b085cd43862ede6397aef8521347b20b
SSDEEP 384:XWEhWYMoq0GftpBju6qERHRN7yIjlp/m2O5jA:3WaisbEByKc2
TLSH
T10A923AD58ABC9443ED939D7052F8ED877D3CABC65D10852A056AF5E828C33D1EB2492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-filesystem-l1-1-0.dll
Size 20KB
SHA256 e861fbd1dd21bd09bede9ef4ced4fe32c1dd5e72f9d788cd41b7314290a638c5
MD5 4265854cf7082a0effaca9913ba1b584
SHA1 68ae4cd0f36c3b45da8810c7fe802feefc528396
SHA512 64c233c4922e6bb7982d4866fa20f7542c330b4b3a565720bf3dad97829cf85997f05b9c13656fdb52b93cf889e6450b02efe5a62ce3737f3d30e047313cb19c
SSDEEP 384:Oq6nWm5CdWEhWcMoq0GftpBjHMERHRN7tlp/m2O5tkjg:v6nWm5CFGaiNMEB5cLUg
TLSH
T14EA21A978AE8A943DDA31F7162FCDB8B3F3C9BC2195146254057E1A839C33C1BF25929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-heap-l1-1-0.dll
Size 19KB
SHA256 67a11355b9edc7cf9dd2e1e73ffbe00e00156926af8c93bcc1e254702b9ffa24
MD5 b811b6df1b996ecb5bc65ccb5275e3ce
SHA1 add783af63ed7453abcc0e7789bb424d1f3d5aee
SHA512 b3eb1cee930333fb257c05ef273bf963adf7ace6b3ee172b65db493eafc60e382be3d3330317cadc03e9af1a03d1ae1b68e1a8ee2e88c70d33241e44ddb5b6de
SSDEEP 384:MlWEhW45q0GftpBjEWBERHRN7zWNlp/m2O59Po:MdJi7BEBaZcjA
TLSH
T1CF924CD6CABC9483ED935D7063F8EE8B7D3DA7D66D104526005BF1E828833D1AB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-locale-l1-1-0.dll
Size 19KB
SHA256 54ad6fb80f28a8cd4424424f413c8f22a1cd6a617eb759aba2f7c2e90cbdc4f8
MD5 776384baba12ee60dd9caa8fc65ac017
SHA1 648aa40d1237fe6e9c19a14d543ba9cf3e9105a4
SHA512 96fecb891ee0d951eea77a1f7f587f8bd4bf1ec152340ac005e65ca42db33cca988b32477dfb7f8f2c0852ade748f42be5017182c7a7a02b2633aee6631bb147
SSDEEP 384:TWEhWXMoq0GftpBjxLAYERHRN7lIFAlrltm5:LtaiAYEBual+
TLSH
T111923AC6CABC9443E8935D7056B8EA877D3DABC31D20495A149BF5E828C33D9AB1492C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-math-l1-1-0.dll
Size 29KB
SHA256 101427a9f932d4160b3c9be04065d495576ab40a8109d9117a4d33f8b542a30d
MD5 c45a47b83a34843225ecd6dda2114af4
SHA1 3c89bfd1fc20c1dd68fc2aa3eef98b97007d73fe
SHA512 173817ab46a55576ea4e3b540e61d69200335389a9f3366f17b36e6d0ae9963f4b0fef8e62e7dd0776ef3d23f3284b3b5ef9e505d2b67b77f41ae39451b51583
SSDEEP 384:t47isbM4Oe5grykfIgTmLKWEhWd5q0GftpBj81MdERHRN7ZtlgHrIQu:C1Mq5grxfInooidEBErID
TLSH
T1EAD2C68789ECBF63E4CB0B7312F4CBCA6A385BA155E065B5C897A1D834927C43E57908
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-multibyte-l1-1-0.dll
Size 26KB
SHA256 f42cfc5cf9682e31404f262d9954f7e4ba6de35a510ea7d7683097663840cb45
MD5 94d26026d6b10f2cea7b6125813471ba
SHA1 c4463518bbdf7d9019c822cf365455c562661632
SHA512 2de164f89b22c539e2927c266bd2e8c21a0af2dfff338d8dda26e3108318338a296061a72c528d96e75c893867e65144174921bbf4464be32a6ff11cf29fac1c
SSDEEP 384:py+Kr6aLPmIHJI6/CpG3t2G3t4odXLZWEhWTMoq0GftpBjmoqERHRN7Xlrltm4:pZKrZPmIHJI6rtaigEBplz
TLSH
T145C2B46B8EB82A12D58FC7F3B5F6C7C63A384F8115C07375A16795883842BE9BD52D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-private-l1-1-0.dll
Size 72KB
SHA256 705e20df0cf4de0299072b7294ed57302b26ecb76d409ed7ecf2f2fea3d59947
MD5 d7d5dc0cc105ea8cf525862b4567637f
SHA1 fb651705e958a9f2a436013e567624f18eba85f5
SHA512 515472b9604ce7f05ce70f9b3c2b0b84930de956534fb8360cd6d107577adee47e8e85d99bbe4cc143f1a8ce6605f4261f4c85fd445b7e89de3f28c28d42a41a
SSDEEP 1536:ct2b2De5c4bFX2Jy2cvxXWpD9d3334BkZnkPCwaKEBudw:cw2De5c4bFX2Jy2cvxXWpD9d3334BkZ5
TLSH
T1397329DB89E53F22E58FF7B367FB57C91B243A4418806170E9C795AB34853A9BC53A00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-process-l1-1-0.dll
Size 19KB
SHA256 5ab5fc3ba961a43d6d100933178121a7d8486b936f5ebc5e276e739f2e1da5b9
MD5 0b21712051d25cc0666f5e6d41b64bb8
SHA1 1d37f8f1facaf3205582608a9de3c3d212ecde0a
SHA512 3605f4902e08c901056071af76e09abf6e95572d69b6b0790f36be1dde7b79c3171df7fec229d51cd508abb0768200c195feb8f424e524c981242b43d80fca11
SSDEEP 384:jK0WEhW7y36q0GftpBjbrVeCERHRN7HG1lp/m2O5Amc:3BkizlEBHucJc
TLSH
T1BE924ADBCBBC9943E9A39D3042F8DA877E3ED7C32C109525445BF0D928833D5AB24928
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-runtime-l1-1-0.dll
Size 23KB
SHA256 d92e0f00c59425e74ed419c158414e2c1e34047d10072dcb9215a5c91b4050e0
MD5 fb2dc78b138f3fe4b7e5b3a3cf9760e4
SHA1 e9a82189ba821544bd63f5af6d78e757dce9a8cb
SHA512 1c0760a0dc6772b090fac8990d3a218f7c1c85d006e901896fcf09d2df34f6220e8101866ae627c9446d2169913b948d4724ff07af4b75cc3513a5dfaf9c9bd0
SSDEEP 384:3b7hrKwWEhWVy36q0GftpBjVERHRN70lCADZgJ1hd:3bNrK27kiXEBtADZgDL
TLSH
T1FEB229838AFC6E53E9876F7222F8DBC72E3997861A1095358457F0E934C33C1BE1A519
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-stdio-l1-1-0.dll
Size 24KB
SHA256 4ba617cadc3806532eecd00957b2329ea8472224891228b99da3aacb002b75e9
MD5 125c4539da3d6aee3a2942bced7f06a3
SHA1 7dcb0f9091831e017af66a7a21cc80e71ad8b804
SHA512 bd506a780ea711117b159ccfd167c995861964553f9091fbe386062d1b9bb75d79db8001601130973c57ed26de9bf2b666f61f0e4a247086ec8942e03beb5ff6
SSDEEP 384:HUFVhLWEhWMMoq0GftpBjeCJERHRN7dqlDUyZSIi:0l2ai1JEB+UyE
TLSH
T192B2188789EC6E42D6878B3366F9FBDB6A388783281075798007F4D835C63D9BE17418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-string-l1-1-0.dll
Size 24KB
SHA256 c6aff750c97c94a594f6cfd6db2998c45e3c0cd9b4f779df1e8e72dc7b606534
MD5 290a004945b199b2aed82959b1623626
SHA1 f19020da6f6b99045b912e45cce1c0e00bdb6efd
SHA512 cce8c4f606508aa90e279472107816337355bff09459db5175b8ae875dcdef26be09a82d498c09c97abdd119a72c1b3d39a1a40d97b6cb94c746217f0d72e1c6
SSDEEP 768:W6S5yguNvZ5VQgx3SbwA71IkFUhaiwEBiwtQ:Wl5yguNvZ5VQgx3SbwA71ILhavEBiwW
TLSH
T19BB2D78786F87F42C98B4BB256F9CBC72D384F46190013359067E5DC38827E2BE6A909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-time-l1-1-0.dll
Size 21KB
SHA256 5baa7efce0f3739812913e1a24d1cd326cd1fb53058719b415c835ecd2840e8a
MD5 dfd30f7dd0c43184de48d97d16cd5b41
SHA1 4462932615fb930deeb610f1354ee505845c7f82
SHA512 54c2101c6b404a5e77534bcb7ca07ba56af3ad7404b262339081e958df1b928eaa76a3542d17331639ed0fb2ca2b92ca714ec543a53c728be0e5130cd064d179
SSDEEP 384:0bWEhWq8y36q0GftpBjcJhERHRN7vD49lgHrIQa:gN7kiMEBvDrrIH
TLSH
T10FA21A838AA8AA47EDD34F7012FCDBDB7F3857C2199065664156E4E836833D4BE2281C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~e5a5100\library\Win_msvc2015\x86\System\api-ms-win-crt-utility-l1-1-0.dll
Size 19KB
SHA256 d793426ab222bdfc51f136f07663cdf34b31847ee32241e6f3589b3fc1886c22
MD5 156fb885f50d94624ca16289f21c1d66
SHA1 401e0ed9537cb1982dfbce4d869c664c22df5839
SHA512 8b03a50a7192bc35342f1c0e4c1931be8a60b29735d1dd5debe6f37b443cfa9adad5846ca5e2787e19d52cafe8a1f4f872f6858418bc00ad2612436d6f9c49e0
SSDEEP 384:IfhWEhWnMoq0GftpBjbaERHRN7egQ7lp/m2O5/q+:Ifx5aiUEBjQTcw+
TLSH
T10A924BD68EBCA543ED935D7093F8D9873D3C9BC72D208665045AF5E828833D1EB2492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh4FB5.tmp\System.dll
Size 11KB
SHA256 b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655
MD5 b9f430f71c7144d8ff4ab94be2785aa6
SHA1 c5c1e153caff7ad1d221a9acc8bbb831f05ccb05
SHA512 c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099
SSDEEP 192:hClej3uzvJwqJMQKN4GbeWZksMI4ETWcEbcBZ8ep2Kra7yOG:hCm2HgN4GbeWmbI4Eybogia7yO
TLSH
T1BA324B259BA091F2E4A4827809A63D332B7A650452B50D5BDFF74885FC196D2BE3D323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\LICENSES.chromium.html
Size 14.6MB
SHA256 0af5dd50b3675106fbcb6727fb757a58d57fd77b7bbc671e3bb0b1c87cbbd9ba
MD5 a81c330a7f966de7fbd81e844ce9e66c
SHA1 deeb083e1d9b5c01995a9b8be4dcfa244bc17b91
SHA512 7409a1c638f2d00487a6ff52c9769da8ba2f2ffd94551c9dac454459802e113f516c2b8af1fbe118d339f21aec7915a41468de12d75d92ed6d8b29c637589441
SSDEEP 24576:f8Bd/jZ6JocjZ6X1jZ6QCjK6D0HwRiuTumfvKjr6ZjK6yjr6mjK6ajK6XjK6QjRv:f8Kfe8rn8mVRx2
TLSH
T139F6A42F7B48037306C642A2AB8B65CBF31E903F3B561654345CD1681F6BA2583FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm-browser-data.win32-x64-msvc.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\QMLib\qm-browser-data.win32-x64-msvc.node
Size 1.4MB
SHA256 71e736d112a353bcbdd2e0bfe861be294f715ffcd1056d1f1615386ecb559041
MD5 93d847e2475ee225b180b43875d5f2ee
SHA1 ace620058df2586dd4c15ef1d96ed5d485cb1690
SHA512 9962a51510d16890c63aa622bb00986ebdcf65ad28fe338c9263357a4c5884b407fbe73ad47fecdccc11002e3370d903a3a07da7c07fe1662920302d4d93b273
SSDEEP 24576:8JtaDWloSdBKHE55De8YrkQCHmO3e8URFpJyWVAxi+vgFC4bYxAlGvn:85BKknD6amOO/rpUk9bYilQ
TLSH
T18F65AF17F2A800A9D0AFC1B5CB175617EBB1F8461630A79F12E44B662F27F72272E315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm-launcher-ipc.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\QMLib\qm-launcher-ipc.node
Size 96KB
SHA256 548d120ec6749825c5f5e92be24859a5e42a2c58774b3c2bd4e4d5ace967b9b4
MD5 57b38c290bf4840a0f3d8327aa14eaf7
SHA1 626b309099a00c195a29868a3714fb3856079829
SHA512 378dd2ab1302bdf408f55eac10007949b5bdcfed69483754cd7773d29f6f4c194a2f200daa88c2270176614dad473e3c1d4bd08ce960dd4430211b7aab144699
SSDEEP 1536:dyOdtZz0Gwvbxlhd5M+QpTqGqyKCNlbqDdH9io8qNOJQzWa:dnr2bFd5M+QpThKg1MF93nOJCW
TLSH
T12FA32866B2ED10B8E1BBD27CCAA38A06D7B6B419073257CF0350465E0F63BD19E39761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qmcommon-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\QMLib\qmcommon-addon.node
Size 861KB
SHA256 c175cc5b72e545226ddc3a0324f6197203fdb0d2189a4429f5b1684a4499643e
MD5 9795a8034ba63bca36e4842e87e285e9
SHA1 91fd1cb69e90779e51bcb3041b34c2e9deabf601
SHA512 5804f6efa21b78e981808cbcecfb0d13b8b7c5175af967a8f89a6ff6cf2e7173b59190fea9f90b501182ff877fde031208f8f8a2ae73f6a77c7b8097d6c0a883
SSDEEP 6144:0vFRZkjEMzDbRdBDBaN6rrRf1CgL6R20dnFnJVt4hfZHupdz+zC5v9HG9IR8M2h1:0veEMz3BNjr8axHw9+cQS4iBMiHQ
TLSH
T15315191277F9016CF1BBD779A9B79802E6B27C461778D9CF025046193E73BD08A39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qt-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\QMLib\qt-addon.node
Size 209KB
SHA256 801a54b409e47793096012478487d46d4e9afb11530bbd2782e2c0cb1aec9c73
MD5 c1bc8c3f47076415c4d288ffea097ff8
SHA1 d80412cedbb626e142012fc6dfee50045f71cc29
SHA512 22c7ec5f4d2376d4688fefab88a408c25d3e738709cbfa891c67c81e4bff16604017da336a0610e83f08fc6a919e66ecd0a7c8122c9bdbe2a721ba5055428f17
SSDEEP 6144:j3F93D4N4CkcL6Ox20ehx2frn5E2UL8wK:x93D4IcWODX
TLSH
T1A324296B77AA02BDE5F7C239EB678902E27374094325D9EF035146261E63BD0ED38712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\chrome_100_percent.pak
Size 163KB
SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
MD5 7bd1757ba953d8b304da1d6fb4fd7573
SHA1 4d5744d0ba3444405eeb7f43e74653f2ed3fd799
SHA512 12d7124511067f2cec4fc9f3a9022971867c540d9f01f6cc0b5dde834f106c065faf860bf7a421a836fceae9616221dfe97e8b1181f636576509cfb63f5bab5c
SSDEEP 3072:e4PisCv+/P9NebGz8LI1TwuLjQBHUP1L2o418Gb0+VRLf0ld0GY3cQ3ERVh2I:jYWFUbGz8LI1TnjQB05K18Gb0OV8ld0Q
TLSH
T120F3E1D7B7F0ED7DCA5B4AB797560071ECB30B2D0792124A5A8ED475252AB88D8C83C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\chrome_200_percent.pak
Size 252KB
SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
MD5 6a460ee2c4e796e53f9be9b050cca017
SHA1 52fb1eba7629f2896c6432969010f34f1903f8c2
SHA512 23ae8fdf5618582bd51b3690526efd135228f97649c6755e2d024b8048e214e4069f355fe4e7f09f82be45accccabf06dd6c065aecc6ed354de996f88a48ce03
SSDEEP 6144:rGQ+N6uSZQDQYakvyAkcjQB0ugx5GMRejnbdZnVE6Yoppx4:rQN6uS/fkvyAkcjK0a6edhVELoXx4
TLSH
T1FB44F1D773B8ED3DD9670AB3A21600F0FDB611290AB2525A569FDC393955EC888CD383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 452f31c177582907de49bbb6df3b4f44f1a7472fa4c8108b9db60c67826df63b
MD5 9f8561af4c5250a89c4780f2b568a342
SHA1 7f1426e2d96539620e1f45c85cc66c01c9079b6a
SHA512 b405b5b18a412a650dd349b0d66d4fa7ea1a46b91746c9f87dba1e76c844d0743b4e8d93588e11afadf0d4fff104c84a4b312c4e36735f75fc1403f1787ef656
SSDEEP 49152:DCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRNB:aG2QCwmHjnog/pzHAo/AyM
TLSH
T1A9367C5673E640B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\ffmpeg.dll
Size 2.9MB
SHA256 ae283cff9214f6478cdb7f239462e03d3b96ee4d228655ed4e203d3f8112d63a
MD5 09dd3a9bf2b4849428de2f12e254ebfb
SHA1 32075499b925693b0e9dd679f07ce783a6445415
SHA512 2ce0280b2c5a3aacc0758a56858be49e83a45a5be32b236122a37fec6e1034898560d9074fdcc39e58988a356f4d39a155de8c8e0cf030a616863d46074a3457
SSDEEP 49152:utnny1mPCxHF0JdPpn3Ukga12wLsbTTB0Hu1Gsys2S/5r6aBmuFKtWifHJPsN21K:knz7dREkcQu1Gsys2S/5r6aBmuFKtWim
TLSH
T12CE5AD07F6D6109DD029C070979F9213F671344A4B205AEF26D08A243FABFD86E7E769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
MD5 4171402e385f07007de57f45ff540e9a
SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
TLSH
T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\libEGL.dll
Size 501KB
SHA256 8d6d1c39c2a0f497bbfdde6175b25cd88c23c2f85ce811c8074bb59e0c9109cd
MD5 c3845e3d5a92c063175ab9a2fd473be9
SHA1 97a2024ee4a2af6b2d669e90c0a744fbf8747596
SHA512 28c6f31a5799baf7ee4cb923456b668cce34898e9219e21a30d9416c786793b0754d9db0907d48687a9bbb766f545da44753a5eb352ee908ad5484f48b7e9990
SSDEEP 6144:ppfoi6uFCajlPxXJTA7ilHxgg3YJeGcHJIA/Ieufc5LHy:p9oYFC0X8iIg3YJeGcHJNIeufA
TLSH
T1B0B49E15B3E945A9E06AC5348B438602DB7678460B65FBEF03E093792F37BE45B39324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\libGLESv2.dll
Size 7.7MB
SHA256 ddd2c42bad1c4c7f1779f877372e5ec4fb704f1d973a0c4d0fe9c670d480ecbd
MD5 2873fcc1061d4f0f4d14f0c85e27504e
SHA1 a185e04e8bd515fda626595b2d8120086b601a28
SHA512 16463d2d0999ac8ba6404fb4e3f9529c17140a1c1ab7c74bfa5b068e1f1ab9c92ac61eb5aca6aedd4fe350cce3bd1afdcd321b6da27144f48b461a2d62121925
SSDEEP 98304:WiycUZFhamDIFSjsqjxFzohv/j5fFX+jPj:n/UVFxF8njJJSP
TLSH
T1F4867B03F29680D9D04DE2B4C75B9227FA34B8850734B6CF269457152F67FE0AB7AB24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\locales\en-US.pak
Size 503KB
SHA256 b9a2cccc13d7dac53210e37248dd70df32dbec43bd33d2c663c6290155fb751e
MD5 b9250d18cab3a4a1c738223a88a5643d
SHA1 146e75cf40b17d5a071342f13cedc7a7bd4d6aba
SHA512 b8ccde22534ed07c0330443aad2a4194e22ef26b70d908cbb2cda010f91ab2bbba25650cc1fa676060958f914be5ba19554ad4f985f74912e720876e8034d35e
SSDEEP 6144:qeSLg/aRhPAq0uWm9KYMP9e+QRt3faY7szalYA5ehj1JngH8/WAwf:5SLg/E2rxYMvQRt4w5Aj5wf
TLSH
T1D5B44C1FF7441269069352627F0995B2FF32D06CA39112563CBD812C33B7B6A83B76E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\locales\zh-CN.pak
Size 508KB
SHA256 13eee461d50e948a9ecd87d5936f0bd7729c41d199005384bcdad5005228dda9
MD5 7ea31f73e7dd65096c12e56250920ede
SHA1 b881add02725bef1592f4ca43e34e23a75f9d1c4
SHA512 21d7e09d2d99f098644d3b8a6bb0d702fa33cb9e3e964d8f162c9dd42d978dd47c5d170658806341324aa40be0e47aafc6d9775ce15bf668a61883f067564740
SSDEEP 6144:LErIcoBuK1Kpe7fSSyInZ76rxEEByVv59pacgI3CYG243KCv19Dlk:I8KpuSS1nwrxEEBev5z9jSY03xi
TLSH
T123B48DA911F9BDEC048650E03729613D7C40720BF66BAF366ED248DD2AA2F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\locales\zh-TW.pak
Size 503KB
SHA256 f9a52c98596818103180ae292c95fe0c7359d3065ae17ffd9a343e748d80595f
MD5 bfb8f220b006ec3b460033347d6b0807
SHA1 611698644720a930a714665bac63c74a3c1dfe8a
SHA512 c7e0d5a5b99e46949b7688f3e71ae0223fe757faf12c8370f95aabb774bb9718a8676d39f7f6f02328ffb23be8929d1950062c5063d3b298bd69e2bdcfefa996
SSDEEP 6144:SWqRvZdu4UcIRwyuo/VJRxr622Qu/jh7J5hnfVH6D/j6h62u9mnTX:yBdumkUoNxODjh7J5xfVHdN3
TLSH
T18DB46CBA08FBDBEF0901F884B7CD563ABC9B342CDD777636FC8518D42E66A580A61045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources.pak
Size 5.8MB
SHA256 6a2f2e63022779cdea1c3608a3eefad5aa20a3215ff5784cc9d86a95a8e04f0b
MD5 9dc983a9645389de62ac722c74bee510
SHA1 212ac44e48a7faa0fcc66479cb2e85aca4471d9f
SHA512 a3e2a9a79d07bf28b6c0ac93fa46bab85a5f77d34b41cd17f0643345b980a35b9804bf714549356399047efa2f637331f97fe05fc4474e60a39c32ce2a1f653f
SSDEEP 98304:FoTedLps9YPOX7P8+AROlaL/S3H9MnsRrwrC/ICGaZZJjoMzL9+CfLRneSmD0Pk:UeNps9YWX7E0l7tMsRkrCAGoMFnxCGk
TLSH
T1D45633C177E60D2FEA0493BD81A98271CF2D4829311A7046618CB169FC36B6FAFD157B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app-update.yml
Size 96B
SHA256 3c2035914ce457fd82c56bf9373d4a16fef878567d83757bf36ad428921de2ef
MD5 92b62f19701c946821c561caa8bee4d7
SHA1 3d6e94f60938230b4d5c9429982b727505fd2c8a
SHA512 7dc0ad3057bf38e772b05bba3f19700d2653fc671c0a789cd23f59f7cfdcf582d4db6d6578c7d07fbb1cc974f5832faf7c4310c95ae2b410f81ea623f59f03e8
TLSH
T19DB012660300C03243330A7938091535A0C4410580D34960D1DB104C8507D321E5A1CC
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar
Size 41.3MB
SHA256 2488207b91840eacdfc73e9361e6b528ab1bba25cfd8d5db291edb8f4f237cfa
MD5 368df8a84d1c42053e2ffef25e62ea21
SHA1 0258504cc0f47efd53ea6ee7eddf680b276c95cd
SHA512 2c1d60c5515fb8192da69b9010fc05169f5ef0b465c89e40078ad914add5f915c445badffda6829f6c150cda6727c068af81ab4f90d614b93c3dabc7bef1552b
SSDEEP 786432:ez+5Uni6VM/OxYJoj8dNZ3d+kub5jadQ9ELtGdA:ez+5Uni6VM/OxYJoj8dNZ3d+kub5LEp5
TLSH
T121975C097AE710218573327E4F9F4406FA34941B1509D544B9ACD2D86FB9E38A2FAFF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\LICENSE
Size 1KB
SHA256 b90cc9a77052f1bfe290b4f24871396cc3a206981a36494a9a2d100fe7a377a9
MD5 ca06efca9569f6f9f67dcaccc0cc0176
SHA1 836be8e4adc7d7b5864f95a49636f953c2b067fd
SHA512 2b710ead41ff2002db40b255fba4f9c01088c7a4d716e400bee115677e9f591801b7be9d418a19deb5c0fb7d500ae6206c771d38c236e10541d4aa4156c1bcea
TLSH
T1ED11B61E72554373189257A01578ECC5F12BB14A7F6B1584302DF2051326418C9FFC64
MD5 SHA1 SHA512 TLSH

Submit Download

addon.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\build\Release\addon.node
Size 128KB
SHA256 e630a844bc53dacd1245932b5b045972aa97c9733f28ac01c16a8302b8a50237
MD5 8e5ec28429cf97b0fd8a4b0d5ccf5fb3
SHA1 55038f21e9d82f0fce76d324f13c3184538f3de6
SHA512 d1f907d0522b64d1c8f0123499b7da60e0844ab47290e1e2601cbd363d65b3463ab1193e1c8f3c287c9fbce46fca5f42cf908cacce705daa13ff7490af178266
SSDEEP 3072:fAd71iIzb0GdTxOu5jsx5e1r6WXJDBu0f8f1q40:f01iIX0SVr5jsx5AOb0Etqv
TLSH
T1CCD36C4BB3A400BBE1B78238C5634E41D776B86607619BDF0BA0425A1F637E19D3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\dist\index.js
Size 373B
SHA256 1bccb6cecf95bffd7e840d725b017f42c812e82a5d4e82e64199a28843a0431b
MD5 bbfd0859bb75e5d972a0b0b15931d194
SHA1 1fe49321150d99285032b0f1ef4f6cd0d39d110d
SHA512 cc0e90ea84ca7e76fbd25dd56beb91bb3701a3e853c90bc53bd1c625bc8c038cdec4cd5b861ded042e9e17fd7dfc4f345ce0dab73918c62fe9d655d22ea69ae7
TLSH
T113E068C04BF1746253B05FD9C2420812F172E422ADC5C948BD2800D553A281040B5FF1
MD5 SHA1 SHA512 TLSH

Submit Download

index.js.map

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\dist\index.js.map
Size 425B
SHA256 4499b482275878db9030345480be711b397dd6093174e9854dce7a15fa056b94
MD5 3bd940d11838700205e930a593a47b78
SHA1 9cf598ec04a92991caabd3229214f8113736726f
SHA512 83de158e9f530d8df0767adf1484f6f70b3545d1aca0f750237895723be8e5c877e5b065300b430b173fef6dd2ac9b09ec8270f512096d24dd3ce2710ab93144
TLSH
T1CEE06D41807ADE2B786342CB488B09A76E49844EBC4CA9080848E600F2D2F3E7CE5822
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\extract-file-icon\package.json
Size 588B
SHA256 ec6c01da0373e9186331c4e50d514048154c6265751e2d55a5a9dd96cccc00eb
MD5 9d8398e6be5aa5ff9b2f31a871e3e820
SHA1 a6596b00870d559048d663ddbc0e3693310db1bd
SHA512 2b6b561d929354c961e5ac5948bf1651a0197125f1d46904d0cf815159ccade0ae99fb161c3c395e47fe526621e0bee65da01125ff0274181475d645a1d91691
TLSH
T185F0FC21D5D59D630BC918E4DCA50105B5630C5B8CAC7C4C37E3046C8B9E5EB24FC27C
MD5 SHA1 SHA512 TLSH

Submit Download

CONTRIBUTORS.md

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\CONTRIBUTORS.md
Size 7KB
SHA256 d569b84d0def333384c8505e785eaf7cb23ac38ff65a2bfebc79eb666460798c
MD5 8672d316790a4c5e557d44ad9b354a29
SHA1 ebaacf2b76130a97d4712be73928843645121261
SHA512 6481f8628489d18a1d50b997978d5f772325e41c37154e488eaa81d053a1c9db7e6d04de387a3024f0edda55de30a6149542e671d9e3e388c2ca2c1340da94ea
SSDEEP 48:jA/kCdlB16dds59r8Tc0Iw0Spg2L/L+j3Xk5bQh:lCdlB16ddcAI0BpV/A3Xnh
TLSH
T113E19EE75E0409D81F72D9C6549579DCFE32240D89AB9C8DF76E0027972AEB38B7E110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\LICENSE.md
Size 1KB
SHA256 4405f7d50c41c7811516d65e9925a6bafb17feded5da663da8c74aedd0df99f1
MD5 e1a9cad2ec6a1a98b7649e2c16abaa04
SHA1 c485d40000721ecfb5d80607d7fb781df3509937
SHA512 20bf0b59825ae81c5c30ad9bfa65b3e641868c14e9f2e824678f33fdbce77dd6e478c8f76c799f5833530f3ce025f7e3bda1c67eac98146b43a3c14f22b5f177
TLSH
T16D21B92E73550B661C9A17A055786CC5B13FB1AFBD5F2945106DF301232A06CC1FF848
MD5 SHA1 SHA512 TLSH

Submit Download

UPGRADING.md

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\UPGRADING.md
Size 4KB
SHA256 3f9b672b079ee4134b86c6f488a97a058703fd6b16be50d03d5eb0b989839f88
MD5 15d9095759b8f0e4247a393c97b6bc99
SHA1 8f043d40480725d23b9d08509f70e4d3cda54b59
SHA512 ebcbadb4caea19ef52803d2755a271b96ea4a7b90ec06ba38eedf9532848b6239c12bc2ffac9722bb91e1d0f7c68efb0490ad38b6eea670dfc47c233361bdad2
SSDEEP 48:CUNGlL9pQ/qoZiR6nryMcodnNgjp3QPpfckHAOJdzFTyAjf3JFlNM2GgvCUtvb+L:CJL/0qF6nrW7VA9gOJpjfPl6hpkvCTrz
TLSH
T1C991C626B342A3744CD760A0E20E6191DF36C0B4933579E53D9EDA5D32554BCE33F998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

binding.js

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\binding.js
Size 54B
SHA256 4e02fde8f9c61fef6fc42d64744b150de29a578dd7b6343d9dc2654c68d61843
MD5 5592afbf198fe53d9640fceae506ad91
SHA1 f6dc07d408612af023f29d9a89e4d4316cc313a0
SHA512 3cae4007e91816ae95323c907800e4fa5dc5dbf25bfc43abd4e84b3dc1c45daf5d5610c3bf8c24cae4001ca1042f984dc787e99daf6c5f89725a28913f43968a
TLSH
T19390027A1991BE522249C143F174466654E1C5A10480401AC15547D652459445952995
MD5 SHA1 SHA512 TLSH

Submit Download

chained-batch.js

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\chained-batch.js
Size 744B
SHA256 bdb748eb6a3de1af71e6d8534a73b0b6a83347fafe27cf67b1bf1a286454ff3c
MD5 0a377b47ae3012bd8c199ed14b7f5c17
SHA1 1d4b60715adb0e09c744c0673613a78d4aaa6049
SHA512 2bff88471de9e5385d06cb74d19358dc27795834474e5491b4635c81030e225fceeafff26f0460d43d4d49740d59b5680b5d3aeffaa324168fe356695a4395c7
TLSH
T1E1012B3635F1985096B238C8869E00081A1FC03EEF09C1FD3D5CE3C4C0ED47825A9568
MD5 SHA1 SHA512 TLSH

Submit Download

iterator.js

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\iterator.js
Size 1KB
SHA256 bf82741551785a61b16cf0d912a30fd1d5db66a723048add6ef8cf0c86465658
MD5 3e91159adc129570f897d1f78cea22ad
SHA1 2cb9f0a94f47bd29c8e067732722bb9d479ed766
SHA512 0e270d622fdee09ca8778c9a253be4f0565a369136725158d52ff012a1872e15fdeb1432c1238dd4722ee0c0db9bd17690f88916f3d47f13637fa8c7532e2bab
TLSH
T19021D57557FE6590A3453681984F034CB21EC0B4A50F8898795EEBC9F7F602413EDCB5
MD5 SHA1 SHA512 TLSH

Submit Download

leveldown.js

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\leveldown.js
Size 4KB
SHA256 755e961e81bb66656616419b564f9b9747b92de14748f1a694338b5ad6bfebcb
MD5 a1260f760afc36509b3f198356d4f237
SHA1 d2cf5bf92a46b615754eacc92854eceec4caa747
SHA512 e5bffacf87d85832de1cd1a6ed19c14310d2d2da43a11880128336d3896961e4bb6732dc1b25cb49fc437cf8a906abcb2a8420bb0a59e5f860a8b1befba60877
SSDEEP 48:TwpE2Gb9LSFDuOpjWWX2McMWiUPJXl+PUe6Zef2/MUEZ12/5kALX3AZvx8ohosQ2:T2gKDpDkNkALX48o5T9
TLSH
T15B91E261A9FA55E19EF2B0D1A09B6704A676C12D386C08F575C543E08BE017C6BEFE38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\package.json
Size 1KB
SHA256 692aaae73d5f8cd3ab14bdcffcc532af8329a73e6592673a32da8788137bc05e
MD5 bfff4b518ebba3f463eefae3f48e36fa
SHA1 6df10fc807b59f4cb9420e02b87071aa7894b164
SHA512 82583d3af91d789d9355c4f7273c2063c7c0ee67df8de1299d3d9f05d8fec9b79d9f959fb1d1b8e5500a4858167adea46b8f38fc33ae01d5131dbf13587fc76b
TLSH
T18E21FF75CD688CE30EC95AD8696C4212A2328D178D08B84D7783974C8F1D06F3ABAF1D
MD5 SHA1 SHA512 TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-x64\node.napi.node
Size 486KB
SHA256 a5e7f1970623d39f7a51d512726b0a6a113d8ab0acb117758bfc9a3f407882f7
MD5 3bf27df572281823a301471650246c01
SHA1 9970f7dbc8b5a70710771226b3ca3b90699a9169
SHA512 2c3a5c158849f00b7197b068f0637d5f75307e2e33862faf2c813fd40bcf532addd4cde13720c4f248e5e76d1d0d7c5766029f9f5013c75492662a9466ab83be
SSDEEP 12288:XcEmjFqLMaNB9wWWRxZJ2gOmHyddzPgTsVty+uI6Mp:XaqLMoB9wWWRxOgOmSdzPgTsVzD6Mp
TLSH
T1F7B45C2DA6A84565E166C17CC9A38946F7B234560F62DBCF4361D23E5F33BE00A3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clipboard.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\clipboard.asar
Size 836KB
SHA256 cc5eb8d918df5a74432c01982510e5e861ecda1a0d6133991acebab4d6cf86cd
MD5 7e5ed14a703448886651ce58ffae3569
SHA1 c68ce59eababa054b888313b88618b245b12e108
SHA512 613f1d0407458dc1e565bac48da19faba37e9553a8fa89c290707e0c1dc1c74ce906dda124ace58d02896cb1d488c00867e2772681a30b4aa52a777d16f4fd78
SSDEEP 6144:AayqAuUdjqeG8N9T7Bt/mu3wTSy3PLGzHtf3bgyt3BZ/7m1vLifkSLGLM05gLNpN:QqjO/Xy3PEgU3AfLM05gF
TLSH
T1D1054AC8B2C5B077D3B75979406F940AB3392E81A80898D0F11AE1D82EF9956D277F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

native-clipboard.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\clipboard.asar.unpacked\res\native-clipboard.node
Size 537KB
SHA256 6cd559e0c9339087b3290964c5c3fed7cf03f8d6006a67a80269f7a0722cf20b
MD5 e7a4c7a6d8278bb5b4b2e2c3a64c31c7
SHA1 9a10d2549b8682bc430c7a95888a68fc397d2d42
SHA512 38f64f86e6961cfa671e11cbd2a27446e05e20de6ad11b076899617ab7d07cc543e67c229ddce0615128f440bcd2236c69da62335fe32ee9b58dc74e99688ab4
SSDEEP 12288:ckHlyexBFi56Sxe6xVtHojv7rS+Y6W7SU:zHlyeF+6S92v7rS+Y6W7S
TLSH
T14BC4175227F90268F1F7C37A9A7BC402DAB53EA65771D9CF125041590E33BD09E3AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file-search.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\file-search.asar
Size 2.9MB
SHA256 a896807ab1817cd7596e5c49f8f27d25ec5559f3de0bad440e690d9e579123b4
MD5 f82e1c09c715ed6f444e17b6aabea655
SHA1 20201e9e416e092b45a12d8f2bbb93ce43794f4c
SHA512 059c4f86f6e48c606ac599ccd0626b8a3de4ad2fa0f5205df9fde5cf0e0b302877d1c77e80724c4f5624dd8fb23476f8937e2a1179d08ede5c1f7cf6af973a63
SSDEEP 49152:0Fjug+7dqnOhYiATdELJWV1oFa4WLf3AJaFFV0XclnIlL0jSIYDIUOeKxbUb3PDd:0Fq7ANV0/gMccgS
TLSH
T11BE58DE4B295702743E295E2006B1107B13DB516B00C88A8F66CDEDE7FADC8651BBB7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qm_file_search_lib.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\file-search.asar.unpacked\res\qm_file_search_lib.node
Size 1.2MB
SHA256 d4bd0a9056c93458e14622b7258e725bad2538e696824e9bc8c0af78dcec4c60
MD5 6cd2209afa04069a4a96e722087eca6b
SHA1 54d61dfd9418f0d8e20d62e5861c8ba4a3cf7073
SHA512 7f927b5ceda13fb385b8adf4e1b5cdd3cdb164982d7ce677141c08c91a66bf47edb4677419c534a0dbe281f45d6932c7ca0b99e42a8e0af34c705e3ea6b22232
SSDEEP 24576:0nM7p4QtxG5IKCoDrbYQ0GOiJ8jWj41Mg:d7p4Qtx8DIgOimW
TLSH
T11F4529526AFE0168F1BBD339ABB68417EA727C511778E9DF0640461A1F33BD08E39721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

local-app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\local-app.asar
Size 64KB
SHA256 d58bdc7597196ae21a5f1852b143af270112ef038746cfea9fdf189f9aa4e6d5
MD5 fa05799beb71c3acc191e0f2f3b8a141
SHA1 cfd08b74be044554e6be574c62bd42413c63a4b7
SHA512 170da0fff62aa914308ab4fb745bee2bde51e8b8e76990539964e446ebbabeb420c2c39ce2fd4c4522d10c7a317c930f1a645c6ffd69f78560a00ce2dee8f80e
SSDEEP 768:oNL0vCYMfaxT1cbajWkrLj+VjxYf0aazDXE1azTcvLpuMNI7e6k+E3QLIJtcVNz7:oNc9BcGjbnRf0hzTcoMHx7gn39Sg
TLSH
T1A353089D1EFB145301AB71BD4B5F0242352494832558DE18BBECA2882FCD42E62FBBDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recent-soft-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\local-app.asar.unpacked\res\recent-soft-addon.node
Size 411KB
SHA256 5ee5569860a2438b47f53740492973441068140899ea0b884a3763b362cdfe63
MD5 48fc0187b2d47ea3cece1ebd0928df3c
SHA1 adb5fb5997b5071440da0fa5feece665168ecdc5
SHA512 189a45cb78d2448cda5887b42a977d688d85f03e8c702bdc717c0c32a914d1a50e8bcb2c0963a26fcf4324c33efb03392dc7bfe37fd1e50d3c3c95b0a2463289
SSDEEP 6144:G/YyKReUfcSf6EKCCkif4pidp488MdoL2CTMN1PiMJnvjtsQhf3JJgjJifryyKds:BQJH8MdoLhTU1Lv4fF
TLSH
T162946C1BEAAD01B9D0ABE27C8A978902F671784A03B59FDF039086371F177D06D39760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pcmanager.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\pcmanager.asar
Size 203KB
SHA256 cb8369acebdb476466740ce32090227481acc6b3930039d7e55e61026bedb136
MD5 c18906e865d491a90fb56dc538f87d35
SHA1 bf11b5f000f0cf8a19fcf38a493aa6efe62d1fdc
SHA512 cc6a7bc4146308a530b8b3ec88f6c5976a4794918e9fa4174d75c0e4c1b5fa84fb9725a84da9fda285a769159c053be04b4d4351877cc1e1bd91d2fd3794f818
SSDEEP 3072:RKybpuZ4bFvJY75TtTljgvQ2Eoqn6oNX7sonZS1NuU4hYt2HdG:RKkpKgFBQXuvQ2Et57LZS1N54q/
TLSH
T132149E67C2F88D6B40F67371194E0243F131460B8159A64FF8BC9A6D9FBBD05B84AB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

quick-access.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\quick-access.asar
Size 235KB
SHA256 55cc8611d42ded1c1d3c36b5f72195f57314e74e634bc873f1226f7fc6b4184d
MD5 9be8031e7c9aa3014916b1988512d729
SHA1 9a9a1d1f027073952843be387bcf55719277af0b
SHA512 60d8fa41b9d0449e77dcdb06ffcafb695b119281d76287d56dd0fb12f6c4e0f79120c57719c65d04c6e86b95dd6f658ab5d7acdbeb9969a5c6cdd448d8a924e7
SSDEEP 3072:nylqD5kDJQN4udgxSQko4X3FREkm8s4Ff6vzOozpQLBAZkNJZQefHCGc:7LN4uCxHGjmIPozpQ19ldHCGc
TLSH
T131344AA5B5E7707213B309FC017B5102B3359943740CC5E4F1ACA9993FAA46A82BBF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

quick-link.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\quick-link.asar
Size 353KB
SHA256 e1c243ec077c2aa168c75a0c7b64bc17ad3dd6a0c4fb8445d1fa91ef7174a168
MD5 915f36f583478a91bd4d2556b1a9e017
SHA1 84524cf2376fbcea7547c7e4164812a925dc3989
SHA512 c6d7362355c73d021d0084b5c96cfdf8d2567f0a97dc6774484615189de811e63401cb9534d9e50ba77a470561c9e1ee1abc1b984bc4ea0072444583df724842
SSDEEP 6144:xzl6DYKFc4QR123iHT+36KcUyngaCj7JGa/J6HCGz:8vS4QRs3ivKcWaVv
TLSH
T18D746C9CB1D6B023137389F8017B5406F2395A927C48C9D0F16CE5993FAAC9A91B7F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

system-feature.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\system-feature.asar
Size 113KB
SHA256 ecb26488ca39c7308063ab1f6b4473091b2603ad7f6fc667820c638213d797dc
MD5 a3dea17cc5ff259dd5bf8d03c2402335
SHA1 37e7a7c42b114daa40eb9991c59c66cbe186ce26
SHA512 31c5c92ba60e74d293c990ca0c8e7c2de97508e59163f9e7c578f4b573d928916c37ec77204b481192b567eea7af8e515602a0ce947043bc054038427dcdfb52
SSDEEP 3072:7QpzFISi5un+aLFdSRqZBOQTOa7szCVKU:M5Fi5kPSAKahKU
TLSH
T18BB37B67D7AC0CBF00F65338990A8520F1158B0F11556B8FB9BCC39CAF3186A7697B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yuanbao.asar

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\yuanbao.asar
Size 11KB
SHA256 3c527e20ce4b6d0d83a15bf96abc275420145635e1b4bcddd3bc62315dda8bab
MD5 c417ca641e1361c76a1a8dd7858ea11f
SHA1 e5e40033d7ce3b07c56d201b07d8a8a8a99d97a1
SHA512 ebee8f1f15d4fae8456988f79c345ef1df5637832e4ecc16f8a6efd936aeeabed4e91299d3fc984ce41ed766fa65141a7b13020a860224433d1df5939c526a00
SSDEEP 192:maRKW86FmFVIBwUqs6lOPiQWJ/bmf09spFeVgmFoPiiQCJZ5rF5+fvi69SP/X:3Ml6Fm3ISXDzspJmFuJT5rfbH
TLSH
T1803219AC56EB51C350B643304F2F0B93310557279E38CE4EB2BCA1817FB79BE054A98A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yuanbao-addon.node

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\plugins_asar\yuanbao.asar.unpacked\res\yuanbao-addon.node
Size 382KB
SHA256 52a504b0ddab6a19222d9dfde87f9918f3e22a9bbc6b63a93779edbdf3083304
MD5 609185f9514b689bbcedf9d2263bd33c
SHA1 4189f76725c9a2f08d9dd8e388622342b9e7555c
SHA512 2afb1004720ca405b6f08e76bbf11808e593b054124aaadada8bd3de68c8e617c55c5c9b8d0838843e6895175c19a4bcd970bed11fe98e5b66bdbae3f1a1b1b6
SSDEEP 6144:GoP220m7HOnS4seUDSqbsNgQmRX+Jx8J49temiZaOBO0tom:GZ+0xYYetn
TLSH
T17A84A35AEA3680D5D5B9E13C8662B627FC613C5DC33863D78B949B521B71BE0E63E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addFavoriteIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\addFavoriteIcon.png
Size 1KB
SHA256 c5aa71ae429e5ff0294740d121a7e1e63387275d1fd9b6f8dd0c05410a068a7c
MD5 80d32bd364c306fbd988313ccc125829
SHA1 b8102299b7605ca14d871169c18ca09fa033ef0d
SHA512 9119154c0538f30a4079c86ec6c0d83a2d9eb5f91e60888634ec37c1a36cbbeaf6768c0e9805afcf4d34cf50121a6b2235bb3f9eaff8b426219bee08deffdab6
TLSH
T1C42128E16C240030C1F06FB04ED70BE2DA786C1A305D600819A5B91BAF1EB21CCF232F
MD5 SHA1 SHA512 TLSH

Submit Download

addToListIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\addToListIcon.png
Size 209B
SHA256 8dbd04f34e0129ba35be8815c24e79459c6567d7013a1c97dd2a84e6b1f96ce5
MD5 21d5c0dfad6c4fd99a81ff0395dc856c
SHA1 4258d44e9de05d8cc3f1cc60daf4a101be26eee2
SHA512 1aa851c017236455b211526d65afd07e364ebac050378db8fb671bfcf8f321975613c7e59dcc6e3422d1b026d729f9c8553ff8014d09557b237dcc547bc68314
TLSH
T15AD022C36F2584E8C45F0EFF12CA45B1E41A0A951601C20C6E2112A012396884592283
MD5 SHA1 SHA512 TLSH

Submit Download

authorize.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\authorize.png
Size 615B
SHA256 a6320e7da9e38659947af1ce84087b1f3d1b6c1fe499f3437075a5484edfcd09
MD5 f3c4086e75fce00336faa21e6a05834f
SHA1 c29ea0deb0f97a4b175c0ae2e55cac7a79c82587
SHA512 608d80566ea394ef88d08617642ab5e1712f9a03500f2f02c3826712a887cb85db99d09fc2983467b121fd11333aa7b3bec4f080782e44d0e03b15d8dadc12a5
TLSH
T123F068E66F5025E0F0DDDF2166324087C0DC1C082B2C310D346153768A361C401660F0
MD5 SHA1 SHA512 TLSH

Submit Download

browserIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\browserIcon.png
Size 1KB
SHA256 0dcc60900460d6442f9dbb9fdc02fd68d8548c903037a45026730bb04985c858
MD5 cea4c83e9003a027df2ae1ea4f7b4f04
SHA1 22463c9a8e4db76d3dd2fc51ffb2dcea693b8cb6
SHA512 aab81ab2cf7599104cb0082ac1c9081c54229df653d7738dddce6f9ebb5f01df6a946ddcfabb44f812d4928aee9006cafeeaba2f85054ae278853d71a830301c
TLSH
T14D11A5D3E2DCDDBD6588F56A42BB0451B6713C4023E70E3ED606A6052F23F9E1C81359
MD5 SHA1 SHA512 TLSH

Submit Download

copyFileIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\copyFileIcon.png
Size 310B
SHA256 d44b82e0761e588e99623619ec8568ae5685ab1eebb89a3a71f34d1dcb05a3dd
MD5 841033fe18bd0551806b4da5011549fa
SHA1 9442de1c96e435407db18aaa83085954bcc7a7d3
SHA512 aed05577dc6775bbbda6cd0932cb1098cb330e87a5bc9c8d5c6c57c8d19f7a4a01716ef0516b0fb614bb5e1f0e0a0591f9d8fbe0a727c3cd5e9c6c67e875c5de
TLSH
T17DE07DC2C6155E7CD41A8633ABA215E1D525201D9906425E0C012155C12EDA4C444512
MD5 SHA1 SHA512 TLSH

Submit Download

copyPathIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\copyPathIcon.png
Size 348B
SHA256 8c4888ab6624c4646a585d08e59f8fdd9f8eb0c4a85b08b8ad1133d7d20d4fdd
MD5 7adfdc84f97ac471c35d56615f5a7d5e
SHA1 961dda98560a3bcc92b4a5a62bbfb0723889bcf0
SHA512 78a175f1b9e470ad7bfe35e13d70cc5bf23afd7a4a278922dfaf615ad5d2003f2f49bb9dc837552176655bc63d2513b38bc2dea66c39897dc151592f8cf0c286
TLSH
T1B9E028D395500CD56C5F09B857B25B84BD1E24D10111C10DB4005A35C8FFE465C7B786
MD5 SHA1 SHA512 TLSH

Submit Download

feedbackIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\feedbackIcon.png
Size 400B
SHA256 2a6247c32c72290ae8a238f98dfe3316a3a18e291d7bc5a7ae9327ac26ed00ba
MD5 39291be3e78bab0433f05263fff6b54c
SHA1 e729006b270b636f2bdbb5c5ff77393295bd3ee3
SHA512 bb3b3d89571fb767553e2ec5b4178d8375c9ad1c31a8f00a07712f1f1dcbd0bef6b16ef856de49ef31d21e4602621b751034b11f12e82e189afd1cd2f39ada23
TLSH
T1C2E0FADB5D40245C45790E770703544CC4314F5557DD7F0F6C56161F4096B0429377C1
MD5 SHA1 SHA512 TLSH

Submit Download

guideIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\guideIcon.png
Size 442B
SHA256 f578a0061cf5667210db870af73199b76fffe3d5e1ca063d5771a1826f6876f4
MD5 ef332d298473b6301ee790d4dfe141fd
SHA1 1d9f07b65a3e10351be40660f05fa0b18abcd52e
SHA512 0c33e5244b3ffcc2d6be2d48d35b78a407f40febcf0034f920941235bb0c1b17b85f2754bc3fc24b49f0e6ed94b868f0a07a8d640193daee3d9e450fd40e13a8
TLSH
T1F7F0A3836A5544ECD00EC65BC3DE4B35FB1D1BC74D85DEDC0C5401B2ED0D2145498601
MD5 SHA1 SHA512 TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\icon.ico
Size 4KB
SHA256 c0b06df23f2efb5fa6223ca9fdc6f399f91018238f89370bfd465de738b7b4bf
MD5 c05bc1973200b66969a452f323dbdb8a
SHA1 388a8bc0e23f79d27c2acce7295c4bfe8a5fc376
SHA512 f25a67c97013252c736b1d8674894dce74aeef6245aba50259bc3a4d0c7c2694a5c6ea37f66b539cdf7889b9caac3b4d9f78e61bf17995d8b08a5935e906a527
SSDEEP 48:wHjP385WD9ckevzML/8uBel61t3OS1kMjyR:SdckevzML0uzGokx
TLSH
T1A091B98369EB0807CD554F3214AB4B164A27C813EDF950B22E132D36D72D1F027FC6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
Size 1KB
SHA256 d9b057b929241c4aac5a0b5d3634a86a44383457e7a9fe73dbb8aceb080e62f7
MD5 212fc4876f5a2857bb81d4fa404c427a
SHA1 e476bf1e39742b20023d9467697ddee3d81fe485
SHA512 94011a273b182aff6dafcb54b1c48e3e772a31537b4b390ef576cdb27a66d0999aa9429a95153f3923ef04c083828b298565ede153656e7e5c46c6656326cd68
TLSH
T157315AB810A8D890A9564238198B3216DF750A0C073C289CEA20F7F4F67F612A8837C3
MD5 SHA1 SHA512 TLSH

Submit Download

logoWithBG.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\logoWithBG.png
Size 3KB
SHA256 fcafb031750b2f53c96893b4dad970e32af0434080e7d784f6883ed328d1a739
MD5 6d5acdf92c53f46ee76bfb89828235f5
SHA1 bf900bbb914381252daf79d7988afe6a6a798ef6
SHA512 466f63b5fc6635203aa60929669ba45e5310e9b396988b019430fdfd650d5dba89bfd0e38bf84d72e1cded06bfba4cc86bae9393f5ee2d902b3a24121c9a6feb
TLSH
T1D0816EEA112456AD82C4EB716B1D0361EB3B064A55D275005C4D1F2DFC1376264BBFDF
MD5 SHA1 SHA512 TLSH

Submit Download

managePluginIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\managePluginIcon.png
Size 535B
SHA256 8c4f0d4b6269b8390b7485bb336799ca9b94e0775b6fc73ab3c6361b9ff33e5b
MD5 5babd46f8a2d455cd0e6bfa92a693541
SHA1 c3d774628ab2da1969cd8fff69a63faa522060fc
SHA512 3c8061bdd0f89f57bce45a2fe3d024dce3d9a05c7ad652e28702f265184e03c61a9dc31663a8f780efa1ccd5b12f2edec5694c66a31208cbc5548ff8ca59aa51
TLSH
T15BF020E24AC5E5EAAC66863273536242E87044426141D60DA740B7118F0A7408AE6783
MD5 SHA1 SHA512 TLSH

Submit Download

moveDownIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\moveDownIcon.png
Size 748B
SHA256 e0a47eb430109a6f16b3f2344e34b279ba84e2da8a6dfd6e30e7c3a78c7204da
MD5 ffb0a6fb71209c5201043e6aba6dfc31
SHA1 6a28c867b276562987497283cec593f6db7f837e
SHA512 e356b37f800a5e5bd4196b832f09be1c24133f228c7eaadfd7cbf7625a4f68b98ef02326b7b609bab1d2625673be377dac77ecf8186ac48e24909b63454a8bfe
TLSH
T18B0165F2819041B5D7E5A770864A2380C9B51C5C051BA17C3527BABB810B610808E2C7
MD5 SHA1 SHA512 TLSH

Submit Download

moveUpIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\moveUpIcon.png
Size 730B
SHA256 8c504ffcfb37418cc8cb0e3fc13052a807922699c889e99e31aa78aef45f2df9
MD5 046e36f9919e14a149564c37c3f8ea38
SHA1 4e35fceaef616fda871594d02d45f739b144d519
SHA512 c59b85810d2edbdd84c54863901b3c10b8636a98e10f5eb9ad09030e08e4e34a86f531e0cd0e1385dfeceef06d2bacd02ebb1709411eb111e6cc328a44d66e3c
TLSH
T1D50160B182644159E09863B85F9F02A0CDB90C46085F61682493FF16D24F711D06B3E7
MD5 SHA1 SHA512 TLSH

Submit Download

openFileIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\openFileIcon.png
Size 313B
SHA256 149c0d631fcec277e45850e2b3bde12c7cd26d42ddca2dc006434ba238a1b8b8
MD5 1e59d7e70d4dea899939f33b9ba6a8ba
SHA1 01f8b0ecf2e0ee35076940aa554626d1e7b5277d
SHA512 d4979c7eab5d56e7b3ccf1df304e97392fbbbca54a44669eb78abccd2adc5fcc59d297c773b7c4b3bacc0d07fb42d3a29e58bbb0c09c24227320657ac8224a30
TLSH
T1ECE07DE6C245ACEC9C5D07C69FB34175981A5988810140D41E11864B007AC54EA89381
MD5 SHA1 SHA512 TLSH

Submit Download

openFilePathIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\openFilePathIcon.png
Size 536B
SHA256 2c37b5756a5e1c80e56b94ff5cfd0692423986d37ee428c4183c59a223952b85
MD5 8b0329cf9afbf9a84d5b54596e9119fa
SHA1 b775f40c825612c6de8a97bc219f3d7c9250fe50
SHA512 500027f8f199ec928a0098167dbc962040a549ae78dc700647603c2e648ee7a89ccec3c771601d47572d65b7c008c5a7b73d4b94fe339babfdd5b607aae1448b
TLSH
T167F075E3ABA8B0DEE90A409FE7B705D4F27D0C0089268B0C4A802051737D3166173797
MD5 SHA1 SHA512 TLSH

Submit Download

openPluginIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\openPluginIcon.png
Size 408B
SHA256 1bc9de34646b2d7bb04981262661c9bde5498a8286463656884ebde2a9956008
MD5 ac12550fd15813f708648aac4e8dc4eb
SHA1 f14b4c3d6f4fa0096c76826b4e2721e68e618020
SHA512 3d17c91ff490b540d2129c27f973563948f1b622a141fa97cda97f47207bb2c830a33534b563930e9b05d0395a1dcc33557c8998c4f84c7856062efeefdf7791
TLSH
T13BE0ABC37B684A79AC18CCB958CB0623972E5E092306F71C5F3122281BA19588822642
MD5 SHA1 SHA512 TLSH

Submit Download

pcMgrIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\pcMgrIcon.png
Size 952B
SHA256 c054b6bdb4340d2501de6d0155486ba07435a3c8de67d1d9db74398acd8492eb
MD5 d6a5013d2f865d7ea530cf2de580a0b6
SHA1 9fcbcd745b04278325fcba25da732558a5a48adf
SHA512 f8eb828a8943826a9a8c95a4688d0c92587fcc57c2b80d391eb601077731e2fb1f3b22b4fad44df039f681eb9b6af230a8fcfd940e764df18eb38b243c3f3156
TLSH
T1E01154EEE8406CF4CE44729B8A7B3304E729D9520E04ED7A2D751711D420669F5C5165
MD5 SHA1 SHA512 TLSH

Submit Download

quitIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\quitIcon.png
Size 653B
SHA256 e920d5fac2b3317b8ae8727c729dd237673d747fd003836ffba59b839e1cf8a8
MD5 7b02da7f507a569c3d30badbdbf9f035
SHA1 2dd614ca2f74cc723069cf5e7617497e9361f8a0
SHA512 c5b135700bfd86664e7fe96f9a1cc4c138fb4521501987b882b4cf8e6506b0eaf8a34ca2a4fd2871445f2bc22aa0544c72ec792b705c949ce5b824eb5373219a
TLSH
T1BDF0684FDC6258EDC44817FFA39E0942763285AB60D42714E7C9C9504C5637DD24F54E
MD5 SHA1 SHA512 TLSH

Submit Download

removeFavoriteIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\removeFavoriteIcon.png
Size 1KB
SHA256 9385e11e5b82603df044c47c3e21c5ebdd3f768ca9a0e71b1f254623287be7a9
MD5 e74d49f8da1e5daf3bba6155672feb58
SHA1 369afae13da16c703511f364c99570c26579db21
SHA512 51c73931a81eaa166b5df1a500a05aa67dc221ad44d0b07c0fc207c09cd33f2e4e3246be5eedc02001b4129a2d656558e7386cd123de3c77b135251c9fd5805f
TLSH
T1522119988514F2BD507B3238C59F0393CAA630255F1980BC1239EF2DDB8FF6B400EA89
MD5 SHA1 SHA512 TLSH

Submit Download

saveIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\saveIcon.png
Size 351B
SHA256 7d3e22c0fa359f07a62f9383f1b631c6be2a70e7cb35aa765705da4fa0062770
MD5 98d6307a16c172749fcbc736ac135c88
SHA1 1df8d30d2b57208eeee160ef4aad4b96b1301006
SHA512 383f7d691506ede59edddf8f286502a200f06e8d0e0c78cd294573caccab01424bbf4c0b40ed111917c5287adf734be8639743f0c386eb719ba09055241f8325
TLSH
T14EE0C0F3D69A485D9B9ECF32016344DCDC352C8A3805011EB513962992533480441B83
MD5 SHA1 SHA512 TLSH

Submit Download

settingsIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\settingsIcon.png
Size 944B
SHA256 5ee498fb239a30fa1712e0215d42f76910fcda1ac8ccbe9edf8b7bd2fd73b76e
MD5 bf23c10fa77e09dbb82dd65bcb163ca5
SHA1 4e13b51a09b56eebdd91556de955f60ae5f29e69
SHA512 d04b2ac6a0b262ac1d8a6601919de298e5b5d146162e4acb22a8d078cf117390189c5cee8d120df268ab7cda431da1c6d6dbfe699a86a4cfb53e91fd26cad0b2
TLSH
T1491154C32610E7A6707A63C70E76185D6A3FC4542C86222D0A45D61DEB6A74CE427596
MD5 SHA1 SHA512 TLSH

Submit Download

startAsAdmin.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\startAsAdmin.png
Size 647B
SHA256 e88cec1a80754d6c218c08ce2bd8d19b0a121fb79586fec9b1e8d7016133a808
MD5 8ac5272a1f59c49616ba7c783dc7ee48
SHA1 c0348d2aee09566b218a05c6ce77f2f9ea6521c2
SHA512 7a644da85c69b6b4fd20fa34e7a4b775ed9b758f11d9f1264e6b97230316ef13ef8de08db7212564a3e83795864af0cc1b723d9d3254a50a450793cc8196a3e7
TLSH
T1ADF068E03B20E8B9E648C92173710125D16D504B1C15751DDF11696971A99632FA4687
MD5 SHA1 SHA512 TLSH

Submit Download

trashIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\trashIcon.png
Size 534B
SHA256 d0b8fc6601a49b19c8b091be3b8aea2d0d1e2a2b54ddc9ae45c3a545e5fb0e7d
MD5 9747bbca75d4850aabbb9e4c1822c667
SHA1 4190aff81ea620cb5910567115416fc045e288ee
SHA512 e8e8256a9e9edb680b488369baae8a62dd09e98dce4be1ad1fea900f74510e2996773e32293ed44f6f6e7e67a271f9defdae64f4faea2d4fe482b28b44947368
TLSH
T139F00591E3DB969F261B7715205F6188ED214BCC2729850C5B16DF47C61930DD4075D2
MD5 SHA1 SHA512 TLSH

Submit Download

unauthorize.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\unauthorize.png
Size 428B
SHA256 e9b4115af82f9225eac8f45cd3b15e07df81fbe8433ad248237b0d6b74ccd4a0
MD5 d74f8182d5039736ecb1f9a370d47626
SHA1 639b4dc365a136dd5a3908c7a13df1b26feb2349
SHA512 f2671c0dcb973d3cc8962ee97c3e191fe1ada537ed52a4e9c857993e1fc93d44d0b67fce053e7fd71c7d24b1d00e555b175d36c89b81314ff5a457dde3b91204
TLSH
T10BE08A831C4451FCC5B1C2BAE153F04EBCF950376800200F0E0314D05C37B415FD0141
MD5 SHA1 SHA512 TLSH

Submit Download

wechatIcon.png

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\app.asar.unpacked\resources\wechatIcon.png
Size 973B
SHA256 da50b1d02cf4f2c0cb0f96f3bf0f5dd48da6b93693e469f8eb9df7293e2bae2c
MD5 91dc7d07f86c447ed1233e85cd379f14
SHA1 7d9eb4c3e10e9a183b40e3f43ee489625477f74f
SHA512 35a06543c84bd727ef6226e6c5393066ab0a72d47dd5df68c22cee9a030d91b2141d4ac974164a2d0ba33da36499037e7234b63fea63da382021473c6cc63d41
TLSH
T17C11CCCBF4088C4CB1B76E7105B4E87D91B600BD0696750C25D429BC9099AC9F7C4D15
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\resources\elevate.exe
Size 115KB
SHA256 482898f77c438d4a8e74fd9e293a24cd4bcb4722e006279c036cdbb2ce9a9616
MD5 9b4220af4124acfd1ebe92c28d68490a
SHA1 2d5e46a13bd664058da301671d2a327f823947d8
SHA512 9a41ac542d2a5b539fd10c8907f53b2863d831c10c6a201e9763994c29f05b55e3119f2535d3488ce87726f5fff18eb8bea745703a60f3cf26553c1b1960e304
SSDEEP 3072:TMbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlL:gPrwRhte1XsE1l
TLSH
T1E5C37C1274C08471E5732A3559B4DA714AADFD700E75DFAB6398027A4FA02C0AB39FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\snapshot_blob.bin
Size 314KB
SHA256 f5799826224d193037fb019e793f4e3cb03c28d18d25948239bf45fb0e640171
MD5 9df16f6aa1b2ae47dbef18464a4b80e6
SHA1 96d16d9fd3142f94b95cc0b502de7c78f52c6745
SHA512 8f3ec5ed371865916c5096ef48d4bc21f2846646f71378c3e3a7c0c3dd0e7f87f43ee54bc9755a71cd394bfd26c546d72700d8092eb52da9ffda19861fda84d3
SSDEEP 3072:MRKUbt+xmR13ZcOol/lxwsG5enXqPy2VqEahdffawkSz2J:MRdt+yUFld2Fq2Vpah1fawkD
TLSH
T19164FF06B31EC737C95A2A7A4CE9AB853674B1CEAF86621B350943FD387057C4DA1B4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\v8_context_snapshot.bin
Size 683KB
SHA256 9537f5ad5847faf38a7030e0688b2b77d1582d196c034a9f2d5f19038f11b813
MD5 d635b18dbc2a7b288603216c0c5b3fa8
SHA1 a6210b0bcf439eef14854797cb1f161acbd1014f
SHA512 e825955307c0668676186245ac77245c6a5499c45eafb8c11f0f67d10b13718086eb50933e37f42221719e6dd98c080ad3e3a9b4f1aaf521ac6a9818a5df3370
SSDEEP 6144:qqGRvt+yUQj/sFq2Vdk1p2VXy1fawkWe9YITbg1HoSFrUb6keXjxQOLL:qxMk1pX1y/We/Tb8HozbeTTX
TLSH
T182E46156A75FDF27CACE187D5EE59F453DB5B08EAF0B422B311803BCA43A2640A9530D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\vk_swiftshader.dll
Size 5.3MB
SHA256 dad72e911ef86bc4dfb1073eb3cb8bb466c23bc9054e203576a8527a9013459d
MD5 d8e89677c6b3e6bedb646a9a9485f408
SHA1 558e9527b630646760f4570d35b65ac264d8901c
SHA512 f7b82fe4c703f038b817b5d59652d38aade4448fe05e8ff40e4deee4f7c2e21a1020c8e7a3d898d669d4a8773171b5097190b333dc6b53b212dd424f5808ff62
SSDEEP 49152:RPAcw1UehJoQQe9MNngGW18oksGCU7hg9nb5svav8Kxq7Rycb7GrRstpbQKYenM4:RPAcwautcivngiqh
TLSH
T123463803F28980D9F05DD5B9875FA622F672B8814B2276DF52A01F192E77FE0A739701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\7z-out\vulkan-1.dll
Size 908KB
SHA256 14409f9a4bffaf3a192a96cf5571c81cc1a1e24e2e36d5cf28516a3b9d77d456
MD5 7196f7b41aca894825270554e1f7c813
SHA1 bdfe7191c54fab75431dda20f657f38b6c35b313
SHA512 0d91dd74e5b245114db96bf15854cc7b7aaf2bb4e2470880435a8a9ef9dff949abb54caba7ede19094c1d87102edf348c5d1fbae1d7abe7ad28ae381b19b8e2a
SSDEEP 24576:5pgBtRYVwRJC3ljSGry1WR6Z5WRDYsHm6g3P0zAk7cw/u:bgR1RJKl3G1WR6Z5WRDYsHm6g3P0zAkQ
TLSH
T144155B1296548969D576D038D9D28703CAB174822326B9CF02AC0718BF6FFF47B7DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn2C2E.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

QQGameLauncher.exe

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\QQGameLauncher.exe
Size 2.7MB
SHA256 9d08b6946d548e56be01cebaa910f02fadc409258679f4ce582b630581608df6
MD5 7d8b3236a87d8035fdc9833808333724
SHA1 f4d28f5653a0489c53802c9c327c32d5e6de79f4
SHA512 0a51cc7640e397a227a5667ab1dcadca26d68fa3e5aa5982d1f460a198d98fbbff8b2a685561462d288f86a87c33eaf8ea0365238a463731a9cd58a48843dc6a
SSDEEP 49152:Rq8RoT+BsO+mV2hcr4jLBb7GOm0ZzXC3N2dZntLutfwPn3jh8psyaDmCdY:Rq8C+6O/2C4PB3GEXC3N2dZRuRDp/
TLSH
T12BD59E217645C172E5520171A9BDBBAF5838BB340B7950CBF3C42E3E2D315C36A39A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QQNTOpenSDK.dll

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\QQNT\1.0.0.5\QQNTOpenSDK.dll
Size 9.5MB
SHA256 8efddd6f058f375d068b7fdf3b505ff342019155ba1c0854d000e0b2b38a26d9
MD5 a2550ca022d07b5fa9a30fa85615af50
SHA1 d9444fd3d893a8e0f5e51fa7f2f09e4e5e232594
SHA512 afa5ac1e4cf077935f51abea274383f730eb0bbb513f6c5206139ce17406a1c1853016cf630973373ea9f3a6413670ce495474d8e51b131bd3f4fa410cb07e3a
SSDEEP 98304:1Ki2sbz2jKWD9Xnl9OZuvPEBGe0hB2i9ei2UtS9p0WfGwJZ73ohXQ:172sxcV9OZ8EBd0hwi9ei9/65Z73iXQ
TLSH
T13FA69E12F902C1B3D09E83B1F16D577ED9298B204B7504DBAFD46EA419334E2B936F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSOCommon.dll

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\TXSSO\2.0.0.126\Bin\SSOCommon.dll
Size 1.5MB
SHA256 714c3199d0fc6ecf396a266b5dd817ef8dbe951a8c616acbf9bdd77cf923f697
MD5 c4e3e23e71ef55593e303ed17e9207a7
SHA1 5088d9270840243c9639350f5c2bec3e6059b5eb
SHA512 d628806a73ff202a4a03c8265fd4a2256b74f1fb3ee4defafce1ef9dae785db3aef8bf46d594149a6131b482d0c4722964a360ad6d4cea596c2f8ce9b6459211
SSDEEP 24576:NJJ+uynd/eWFBfDSA/fI5QdPt46gD3+TTn/hgQQIDczFN:JghSAYC4dOTTznC
TLSH
T106759E12F7D1C471C67343309928ABA962FEF6314D31879BA7941B1C4EF0AC19D2A7A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSOHelpSdk.dll

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\TXSSO\2.0.0.126\Bin\SSOHelpSdk.dll
Size 875KB
SHA256 11e7f24ae19c17371285091e70fede18e6e540ea42618aa8e8cf915739c7f6f7
MD5 56ff373fb2da1e236eaf8641f3adef6b
SHA1 e48d879f470befd1d744c8d1d920d6b302aeba59
SHA512 64e12f0ecf65c65a016d16d1f5254633b255f359804fcf041b6a1913cdee1255e54a5f3299be362b38eb8dbad5ca817ce14bb7ad6dc8f55b83724198cac97847
SSDEEP 24576:TmdUYc41plyAsyjlWhjPGLUTeX55SLErHoE2FT3L54ADuqKcR6yc:Ue41uSZ++4TeXTHoE2FT3+FhcR6Z
TLSH
T15A15AF107DC1C032D56A127054B9AB7B567DBD329B7084CFA3E03A696E782D38B71B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSOPlatform.dll

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\TXSSO\2.0.0.126\Bin\SSOPlatform.dll
Size 2.6MB
SHA256 69cd70628fdac7d60ea15f3a9283fc04119659903a3919e5389b21ab64bad1f6
MD5 e932e76caa2a2b3be439b9b65c92f37b
SHA1 9a2abdae2bd04a37643cd240cbe25fea0153f1ed
SHA512 2e14860f62c097e9975cf38c26f44c8586b38549ec1c582fe04944fa1dee59e4ac0ec190249eb60db3e816e4758cdbd8d774fb815c68c8937138a50b9cae8d77
SSDEEP 49152:biKupal/dJvMVZOcBWgSPe4UcKy4i9sqdzX+r+:biKug9g/Otg94dd
TLSH
T11ED5AE13FBDD40D5F8B302B4AAFA93BE5A7BB9304B34D2DB62A4551E4C314D09936722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler.exe

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\crashpad_handler.exe
Size 1.6MB
SHA256 f481ccb7e4aca2bb40d493dd82f354ec2dcf3dbaf2dc82599546ccbb0909d3c6
MD5 1f264f445424d9b912957939d19fd5e3
SHA1 5c000e9255a4d55904a98d5224eefc7f515b3212
SHA512 5efeb0d1c92c8bebdbe9150584a12e5d5ee72321bb2deafc94f76426f7ae7cbe788948e9940fa198de71958832625c7140b1923f4638e49ecbd8b5339d2407e8
SSDEEP 49152:fGnkVhJDuc0lPDPD3qTyyThrM4UnPQXEdOkrHTwaoH:f950lLu
TLSH
T1EE75AF203D758133E85012B0947B5FE661EC9B255BB109E7A3D8AF3C7A706E32E31A57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Config.ini

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\data\10542\1.1\Config.ini
Size 288B
SHA256 7b36de4b0f8cd009a6ca9c6149a84e15c7be06b0ea43c6f26e7ca570c50cd0d0
MD5 c53a314dbef020b46e835fba0ba539a7
SHA1 8f792f05c1c284bb6eb468a09fcc2d61b6402bc8
SHA512 e328722d99495f9c3a963de7fc575068f3278df62e4eea829a249bd9f94cacf964dcbe1ebdb6861e49cd86bcf5627a57f826fd42d0545289a86e44e43cb87262
TLSH
T1C0D0676B62FD3216D0735B50E7B200E596757C561E29C05CB1D6A10B0AE4E409D177F7
MD5 SHA1 SHA512 TLSH

Submit Download

spr.png

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\data\10542\1.1\skin\spr.png
Size 99KB
SHA256 802d24c09dad2732575fb152b0c94f4f0f08477daf7ea46998fc407cd5f53855
MD5 a40a6006a8c44504e51a231de31fd57a
SHA1 a6f595fba72f3c82899f363b8905d6bacf5f8cad
SHA512 d239081010510ef60e92d95239905a8c33e611549d6f090bbccfe6cb2c76db3d1dfb68cd314bfc660b10fcf1f216d6b5f93949a1ad9d63d6215372a50f3126a2
SSDEEP 3072:vLj28ijT6XC+b+q7hW1uqhImQjjBnnIhf8kp:v2jT6yJ+MJZQjjlM8kp
TLSH
T1B2A31247DA8E6E5CDCC670633FAB71E612BB9E00AA93B3F58A64337208109D0089F755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sentry.dll

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\sentry.dll
Size 474KB
SHA256 02e25a7b2af2dd2f855ace71236094499d2d87f6f532daef13df3d450889e4b8
MD5 921f938de4e20960ac73e435f3faa4b7
SHA1 bfb34db298cf6b51d6dde35d48d515fb4cf3c8d7
SHA512 855fc7bf32ed79774f3236149751b06ab2723745d76828cc428d0b662565f4b704d46ad7609161ddfb5ae3150111a7131c014fc6519f3b689bc3d7e2ebcae7b4
SSDEEP 12288:kTgTR8ybWw+OreyyEb1tpGVWSnhcj0LGTaDUmBc3Nc1lDSapBngoI8Et:UgYw5SyPWWGGTqUAFSapaNt
TLSH
T1DEA4AE107882C072D9AE01705578DF7A477DA9254B3D5AD7A3E40ABB6E302C3AE35F1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Roaming\Tencent\QQGameLauncher\settings.ini
Size 81B
SHA256 e5b9732f53fdcc046b36fa58a326927a1460a525ea9f44c72e868aad23f6affa
MD5 d02334bed951b371a5ceec22a35eb8b7
SHA1 739a2b5c93e7e73f700139ebaab8f4640634c9b2
SHA512 016f3a8c4cd2756de6e0f7a45d7d0c8dc23757c23e714a88011c401c67a0570f4e0f7d85b17daa07f10cf68345fd861697f660a486acff3034edb74ba7e78f27
TLSH
T10EA0222023283CB020A0033A08BCB2E083F303F3C000823C2080BC82EB0802F338BB3A
MD5 SHA1 SHA512 TLSH

Submit Download

SSZB_1080001481_micro.exe

Path C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\Download\SSZB_1080001481_micro.exe
Size 1.6MB
SHA256 6e9f1d809448cd0895c37280a7ca20617a7c374bcd8379b5c834603ad5100a2a
MD5 5dbe963a710948385ad3d327b16a20f6
SHA1 ac593322b0fe668518a5fcb7c3c36e706de90fc5
SHA512 24898f2c3b2e66d680d2290c5f656a1df4ae1505d7629e2368405225d7ea10b05f951e1c256b831157546160655bc2302996c2da9a79071ea50673be3479c38b
SSDEEP 49152:bdOKUri9/FRnqjf90otVDCIItol7kGWQs:bdOKUrO/nqbzVDge2GWQs
TLSH
T1948533258B9691E6F1A60EBCF0BBA025CFF4AD358439A23E4384F05DB532509D76B743
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\qgsentry\QQGameLauncher\settings.dat
Size 40B
SHA256 ffc9519e496ce3d7a738e43490391d0338ee47bab7fd5a8ab9b44b68043b7917
MD5 665ef0f590ba78d8d8850681482fa89b
SHA1 b63e4a181db2f326db3127f48f8d689485dbfcaf
SHA512 0516f518c1a00ec26d28941e46fcb8c1632d6e3459d5bae16e6e39b2814e320ad808c2232affd6507aea797921677d7780ef3146f26bb8eb4ea1ea339469c7c0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\qgsentry\qqgame\settings.dat
Size 40B
SHA256 c44b0f03f159853c6d9f431a4df3414bbbbc814c165a256a8c9b24fb4efb7e18
MD5 eaf628b6224d764250ef686e871a8be1
SHA1 867b2e743a61dea8adcb8b51013ac8c2eff0cd27
SHA512 9ce3989386926e9e02e53971314fc33159ebe532d707aec73e37d71ce8aa7562ca1414ad1d7cee2d73204e068cd792ce3b119108ff3aef750ba1d939753eb86e
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\腾讯电脑管家-全局搜\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\腾讯电脑管家-全局搜\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

蛇蛇争霸.lnk

Path C:\Users\Admin\Desktop\蛇蛇争霸.lnk
Size 2KB
SHA256 77b845b9ad9aa6476c923a8b55c4246bad2b2a48e2f91e9a82ed742359b509d0
MD5 398ef8f8eb1481f37338c99072eacff3
SHA1 b25ed7f4fefadc560a9adc75e8fa63964674cfa4
SHA512 2e0226929362ad5c96eb707707e2cdbcf5cffd1c93b55f950c4a50785523278de13343fe4e6ff0d121085358a72e35b50d4f98a8bc4710c0f603cbee71e6bf96
TLSH
T14941B85226DF275AE3BB03B412FA65F1CB30FC165E0AB65E5400E26B5C60E645E01B3B
MD5 SHA1 SHA512 TLSH

Submit Download

dynamic_config_original.cfg

Path F:\Tencent\QQGameTempest\Hall.58955\config\dynamic\dynamic_config_original.cfg
Size 30KB
SHA256 a3fb4cfff7c2c126013a77f7672c4cd741ce98ae80e919f33432c6f9342f515c
MD5 72429932e2581d7a131fbe0ccace791c
SHA1 2e11256f983204db3212b3a492bab3111b7e90dd
SHA512 1895ae5453d6f1128879a60958c9c0cb75ac5d72e56be476383b752163d1e0631fe8f8153f2c78e7287f8a43547fe1ff62357d93838d2f71efcd17dc01718b5e
SSDEEP 384:6ptUHeEz/+Ya3DIguhChH3JLkfl/QE0LC9iKlYShw9pEKzrEgkiwcRXM2Ltcu9jZ:uCHeEb+YaTIguAhH3Kfl/QdE+Rv+ccbM
TLSH
T12FE261733B8A01FF90F96A779130E90400FDD69F92496DEFBEB55D0604E513263A660E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler.exe

Path F:\Tencent\QQGameTempest\Hall.58955\crashpad_handler.exe
Size 1.6MB
SHA256 906fc95d29613a4b54621fc2fa0191fdc43384280ab345e6b379e15b6d94f53e
MD5 8442fab2c0427029f892d324692c8883
SHA1 6f1d0ee06b648996f276695a005c581d12e36a03
SHA512 bf93f7fea3d5b1460b556f2da3867d0ca0a2babb2bf280ad956d5d9d8b7b86541f3fb742e95e868458292ca60e9994031d9979c17348d2b88c39aaa71754830e
SSDEEP 49152:XqQZYHQlrX4kBFp7DyaAFJTSyMZ7gPQXldWh9IT5dua5LcR5Mm+0f:XDZ7X4k3pxoR5
TLSH
T10F759E107E728477D85002B0D87B9FFA65DC9B241BA10AD7A3D86B3CB9706D31E32A57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sentry.dll

Path F:\Tencent\QQGameTempest\Hall.58955\sentry.dll
Size 1.2MB
SHA256 faf7628f32e0becedab06d46f34d74d9d7c3d3d2a301135d406e05b65ecea526
MD5 06e9453d9c4d10d231a8224d73cba948
SHA1 06516cd5b3628c14a4a9eadffafe79eac9006a30
SHA512 4e2fbcb0939b4fce6dd462a7fbd2e341840bd65907942f01efb6aa9d457c597b0b02383b3728eebc1aefd79894f3f9b6712989357fad0c1289bc7d97de2c3d79
SSDEEP 24576:JC3cq4AyIlmP05peS2x4i8bPrZm5G8eQPPsh+VsMG88aM5pwmYT:JC3cqvyspen8bPrnMG88aM5pwmU
TLSH
T166458D213C818231EEEE12F585FCBE7A055D94B40B7946CB56C81BFA9A601D32F33A57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_bottom_50.mif

Path F:\Tencent\QQGameTempest\MiniGames\GameShow\item\Default\MM\default_bottom_50.mif
Size 58KB
SHA256 5a1d98bbce603291cf65c2e06c9f8f3c1903182e0d9720fa7277bce0e5127c9b
MD5 1352db53d177196413e95cb06b316595
SHA1 86ee26ba4327dcc7ac7042c3586aefef25437d12
SHA512 ff139f5772339fd1da885fc577396827720513bbe06aa2206eecb0ac78afad1c153f59011a186d087acb6e138f3ba8148d2460963e8de437a25df1323dfa9965
SSDEEP 48:b6QzqlAOPns0BTmTJTeTxT2T5TuThTGTpTdTuT1T2TtThT3TyTyTyTyTyTyTyT7y:bIst1sYA2XdyHdG/vS2kSD8thQLQ
TLSH
T1CD43C8B2BE550367F428E0F97489BD0F9C9A0C692E60501638AEF614BF3E6F944BD443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.mif

Path F:\Tencent\QQGameTempest\MiniGames\GameShow\item\hu.mif
Size 58KB
SHA256 d08b4ce29ab1b337dc6a5a00b8cf290a7f38318a88ba4df402f5bc045e8f1da5
MD5 21b71e8284af03a0a8772db1beaa0cd9
SHA1 760790086e17692580ff75384c263620a5538447
SHA512 74ce42d0f91a208e832156070ca91544abe67740a62357ec306f05519a301f35970ae1f26001c0b70509a013c0be13759f279a8c7b54f7be6c7816a25a67a056
SSDEEP 12:Uu/kC1tCvjSecyFUIjA6vuXkVMKhSgjU:uSecyFUpXm/hS
TLSH
T1F943B7D736848347E8A4D63383630D456B8217C40854AD3B772C52DD1BE7F8A24F0D46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python24.dll

Path F:\Tencent\QQGameTempest\MiniGames\Logic\python24.dll
Size 1.8MB
SHA256 bdaf52d0a63d0173933dee1323a6b3e8486293ef5b81d2764bfcd168c39351d6
MD5 5cd9f0e2eed99e384a8a0d82251f1a40
SHA1 3f358329ab3b0aa77f981018c38d338807a51c83
SHA512 d74a1756a00f11d7afc5fab78cb34093e1686ebbaa46ea2203ca54740968db859067a09b57a5e9ee85513bbe9cbe6f60cc736afafe2a37864100546277f2d82d
SSDEEP 24576:1DQzXBKGl07vtd/SCcG3NlKHa1IXrN/fBHN3znAMdIP3uq5BbuwxhLOB:PVjxltANnBHNjnAMyPF5YwxEB
TLSH
T106957D41F742C8B2D55154B952B76F36BB374EBA112EF692C728F8818733121E62F389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.ini

Path F:\Tencent\QQGameTempest\MiniGames\OnlineGameLauncher\config.ini
Size 326B
SHA256 05f2d0eca87a485f5abe86e060c81e36da0d2202cbea79c273248d03d4223fe3
MD5 2ed620bdb5b06402d06a11df4eac98af
SHA1 2670f3a7160082a6fee0f7a3220dc50a1d6330ce
SHA512 c48aa16e78e21d069b964534b987937cfafd766be3878914844f5da6329857abac54f1e65a6d37dee7fdf437977b7fc75fc82e141bd83095dbafebbbc55bcddf
TLSH
T105E07D0062624523D9E4BF800602508776FC1611040C5ABCC6EC90431E0DC6CFF58F29
MD5 SHA1 SHA512 TLSH

Submit Download

msvcp120.dll

Path F:\Tencent\QQGameTempest\MiniGames\OnlineGameLauncher\msvcp120.dll
Size 444KB
SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
MD5 fd5cabbe52272bd76007b68186ebaf00
SHA1 efd1e306c1092c17f6944cc6bf9a1bfad4d14613
SHA512 1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5
SSDEEP 12288:uZ/8wcqw2oe+Z3VrfwfNOOoWhUgiW6QR7t5ss3Ooc8DHkC2e77/:W/8wVwHZFTwFOOos3Ooc8DHkC2e77/
TLSH
T11AA45B237B864CF2D19E53B231C9531557FAFC6441B1F343ABEEE1692FA6282E123611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcr120.dll

Path F:\Tencent\QQGameTempest\MiniGames\OnlineGameLauncher\msvcr120.dll
Size 948KB
SHA256 86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f
MD5 034ccadc1c073e4216e9466b720f9849
SHA1 f19e9d8317161edc7d3e963cc0fc46bd5e4a55a1
SHA512 5f11ef92d936669ee834a5cef5c7d0e7703bf05d03dc4f09b9dcfe048d7d5adfaab6a9c7f42e8080a5e9aad44a35f39f3940d5cca20623d9cafe373c635570f7
SSDEEP 12288:LBmFyjLAOQaYkxGXPfY7eiWWcpOKnpTVOIxhK765qlRRb6x4pI23IbJQV:dmFyjLF847eiWWcoGZVOIxh/WxIAIbGV
TLSH
T10F25BE12B982C0B2C57202B1152DE772197FBA71443598B7BBD98F0E1DB46C0FB67A63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandVip.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip.png
Size 3KB
SHA256 06b85a02b92ab979045bcdeb3c6f80da3654c2721f988f37abced6393c117105
MD5 b3005559957cfd82caa325aba786e0a1
SHA1 57c40d44c279812cf4f21fd26bee7b8a70b88997
SHA512 82dde287a629fca19324d6fb60537d9ff0e79ea9846523de53a724ebee469c7a7e4ae654ba169a3bd6783438d04a5edc6e1561d5e6259638b036a89e62d9151f
TLSH
T1FC616E896480866D100A0BBA3537ED454A1BB6C043897F0CAFFD530FD610D513CB666A
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip1.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip1.png
Size 3KB
SHA256 b76b53c496dd8a7c6c55546036dd85a0b487103bf2f2f1e3f4c4fff1e0f1fce2
MD5 1b58e89b86f32de12eb0b9c4ec3fc0a0
SHA1 6930655fa444dfbc20dae94b0ab41b8937c65075
SHA512 c0e263536f1734c6d0106408febda24e893c8b4cb52bf048b18091fef3f9c8a99729208b6b4f49ce8a63ee5ab8cf02836700073a416b313b05fe125ccf3b9a70
TLSH
T1FD616C4CA441057E10098A69376BE9464B17D75193AD3F0C9EFA430FCB26C227D71B3B
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip1_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip1_gray.png
Size 3KB
SHA256 2c1b3eeafccf674fe2b9a733065110fec00e51a20d795eb12cb5d7d0eb0bbaa5
MD5 7c4f0d00a9a806cf037e9ebc056ba3bf
SHA1 e3f35d5326f9dff022e92e2bfdea463298ddee1e
SHA512 936802468ea884fd25ee540f9c17f041ea5328002611b2cba2fce2c45adbfdd4e99129ca3d10c8e9228abc13cf5b5ddb52cca59b8e0d3e02e93248974d1fec42
TLSH
T176616E89D410541E248F066E366BDA028A3BD7C083982D0CFDFE434FC725D513D76B5A
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip2.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip2.png
Size 3KB
SHA256 49921fad6584c97c81ffc18df3de5f5097ad44882651828f01631476cf20f42f
MD5 0956a1f417a13116af8ef613704dd0d8
SHA1 55c609a5dd413333a33374092f281440e68cfbe3
SHA512 dc28caed677d050aa4c4c2e27b4613efcbb969ec80e3df1623a0a3d797125edbd536c960f4110c42105868eece76e4503f2d5997677b1bd974c21c8b1052ed8a
TLSH
T125616E85A80445F9114B0BAA352BE8018B376A9412DC3F0CDDFB938FC720D513C35B96
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip2_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip2_gray.png
Size 3KB
SHA256 c93071c02b841b4c1d4ffbbef6d0df58002180bf4b7928ad4c6b8c0571f0fcf0
MD5 a155c808fdea1567b9fb8216c2387dc3
SHA1 5f2ecc1f94d412dc90e1a3f2ae98dcbfaa8049a5
SHA512 3522359eb2a51e8660146b8fe512a1eb35741bce014933982bc539ed871dad8da009b324ffee9e27c22f0b5dfbc142aba265ef2df7a3188922e36753f93f9c2c
TLSH
T1E0615DCC6551096B144D0B66397BEA058B6B9BD443593E1CAEEA834F8620CB03C75F9B
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip3.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip3.png
Size 3KB
SHA256 191d8f1511bf3d27c513642f5d3d6c99fc1d9a1f5daac223a59b1d75e05a069a
MD5 f1e5cc72494e3faa23a65ca4755a9345
SHA1 9b5d097f4c85c3c4dd5fdacc7425a35d39728a85
SHA512 5d3869b6ed22c024d59578b2089fc00e287122efc7b157da0825d5386c00622a16661cb0034d362ced35d891bcb68fa22b4dd6c6832d31b782fd7e6a3decbe28
TLSH
T18E617F4C58514919108E0BBE25EFDD074917A6C8530D6E1CAEFE428FC724C70BCF4766
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip3_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip3_gray.png
Size 3KB
SHA256 df0a45d00b9869dfd04b305c4d5baa97651076f06e18a3583c625723cfd5616e
MD5 f79e9950a05bcd8749f0533d77f5a496
SHA1 0559f4d02243d98916567cf85d4ad44f51068f7b
SHA512 a4c8bcb1cc3393434fcdc0ec8523926bea09b3ed58527df088624a1e0ad50c6f889a6b5d9cf509af4a431c4a532d4ddfc984915c1cc729b1dd934e48fd966dc1
TLSH
T199617D899440845E000E0B9A392FED118A7BDB8083ED6D1C9CFD825F8F20D913D79FAB
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip4.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip4.png
Size 3KB
SHA256 ee33ab3ee60278aed00cab93c10c071c115f6383db5f73580db1828bc1834156
MD5 78c19dd0c781284afc3def691a7aef82
SHA1 0e92953a181cda25b2d53cf86b66ef6b3b021885
SHA512 04c6efba89308f64e0d401e21299b25a1ef9bf41bc3281a4ad9e70a2042a6e6b0a67c2d0f44a07573ba7713d2ab52fe7a2dba2bfba939e03da9078451c86dbb3
TLSH
T12B617E8CC449055A100D0A69396FDE468E03D9D8438C6E4C6EFE434FC921D613D31BAB
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip4_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip4_gray.png
Size 3KB
SHA256 1105e16c4e78409ecccad5132a6b6600fdd80c2b75f8a4811bcc73a78699868e
MD5 b0888f8088adb9c8c2f642e4cd45cb82
SHA1 6888dca412598998a90ae731909605bcc2e914c7
SHA512 e35582ce515604a2403e48d7562238276297200adc9794c85f884a10e50e323358af95bfc0c731cb065c6a00eaff744e86bbd5dfb75012dc1c2211eddfe88fb3
TLSH
T102614BC9A49446A9154F066B34AFED014A2BF29482982E0CDDFE420F9525C957D31FAB
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip5.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip5.png
Size 3KB
SHA256 4c48446ec12af3bc4dfd2e2116c501101a66d5e3a32decabbc445fd332907d9f
MD5 6f6977ee3411b0aecf3d15c2952a4735
SHA1 7167182439a59e47fbda5a760da97eb5e77aa8a0
SHA512 d8f7aebf913ea42fd1e263f3e118da71b3080298f2fb45433a717e34789a177d115eda58af3a606d885a7b608d6c9781d806dfae25869b369e3bcdbfb46f284c
TLSH
T19C617FCAD801886A104D0B692167DD074537E7E493496E5CAEFEC35F4A35E903C21B6F
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip5_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip5_gray.png
Size 3KB
SHA256 cc566f498227ce2d5feeeb30c8bde1067dbd30c15d27015fcfbc3cd64ebea780
MD5 28574c12af7f6fb80f3df58ed98cfcac
SHA1 65f7320730ed27112bb8897ae28b2c84bfe528fa
SHA512 06ffa7586700f73a0b7a810b59e275dbcb53b17f41bd715d3498cf91452006900f85cc17c34f88ec4ef8aa8ace35175be356277a02b631b3a117f696426eeab4
TLSH
T107615D8CE844495A110E0FA6277BDA054E276794D26A2E0859EE830FC634DA23C72B5A
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip6.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip6.png
Size 3KB
SHA256 94c35c94d7f725b8249f75d906d96e75ebe464ad7cff3eca60540ff03c4347f9
MD5 7bbce43d1144205c6899fcb4368acf12
SHA1 f02e67ac419e398a2fc73a01109a1eacfbae65f7
SHA512 2160fc37f43d4c89f838272eaca6a3b839fe38b780acde6f85d5f7dc31c77821f0416071a5157ead027d1e06ec54e0c9696fc3ec9681ae89b4fd56e6f5532b3d
TLSH
T1B1615C49E550089E210E06ED35AFDE468A2FEA9853982E1CDDFAC14F8320D103C34B5B
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip6_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip6_gray.png
Size 3KB
SHA256 8a7b438681def93630fd6057a9931aab8cff39c40c404deeae7fa8cbb69a3b6d
MD5 6ec763f88d30463e0116420a4340cd83
SHA1 e098dd147b3db6fb9242a10828a1961ebf48bc54
SHA512 a38d7695ab3d88f27493614847fee4f2f812cd887fb188ea66c7ca41ac3afd8e4cf6a08ebcb5dd9aaabbc745afd3a939e8d4aae1d56e988539a968322cdaac01
TLSH
T11C617D8C90450C9801090EFC3377EA06CA67E59813DD1D189DBA824F8634D413D76B6E
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip7.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip7.png
Size 3KB
SHA256 ddc37f881bf641e62aaa0ae4e3eb3b947168f6155c428fb0574850389db2306e
MD5 af58fe9fee7e5dcd652769b62d805303
SHA1 3977baa04c0d5a0cca1aa680d9fff35b4cbe8c67
SHA512 8cc7dcc135a637e841723d89089f7c02b6cdfb6fba072e109db2426a071943130a5d2251dc4999e1447316e0918ecd2e1686f08cca5c6733a288e9c1900e7bc6
TLSH
T188617CC99440011A100D065E397BAA0B8A37E18093AD2E1C9DFB428EC725C627CB4BAF
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip7_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip7_gray.png
Size 3KB
SHA256 001e801a2554ee4c58623de0b3df65aef4a0f398168f9203b0aab611c27f6594
MD5 dbe3558d5336e78153071d0cbd4da2b3
SHA1 86b6b27fd391c0fff55dea8b4c27d6186a785523
SHA512 1c51502b5f8d8dff82f533c3dd157afe4cf9aa7386fbce2854edc18a4a59f14229b93f8c9886ff6673d47d576a28e86c446cb6396c318be05898fe7e0abf72cb
TLSH
T1FF615C845448481B140E0FED357AED054AB6FAD883892F0CADED420ED631D613CB27A7
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip8.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip8.png
Size 3KB
SHA256 fddfc6514269dc6afe281eb52e9f71a1372e86bf46c5c4d51af8b17a20e95c8a
MD5 d5388439bb87f105f3fd6b7781d905f1
SHA1 4dfc9f04bc671e82e555d125f7fbeb19b82f6749
SHA512 404f0e4606666738c582e00e3970bfefe13918b788e8de0a86bd07a9f0b69ba6ead45cdb2f6c3906d4255df785411bad74fee3aea9c99d499cffcf6bcaceb679
TLSH
T1B9618E896904086A110A0BFE357BFA058667DF88939C6E0CDEFE830E4724D113CB2B5F
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip8_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip8_gray.png
Size 3KB
SHA256 c4c41af8c95552e2448b073276f77531aa52ddb2f2b1bebc9d635e1aa2e999fa
MD5 35b01b60224b8eb437411e7168804cab
SHA1 8644d0389aecbb901c32e137cb4de224316fb25a
SHA512 a1b093eaba3c4a36cee1b487ece0f94744c8aa42b404dc90a4327f0b940c9374f19362caeda75be10b2b85fa8c74bb43456cc6d9508463eedf31b6daf053d515
TLSH
T1F4616F8C9444491A100E0B7A366F9E02861796D493DD7D4C9B7F834ED920D213C79B17
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip9.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip9.png
Size 3KB
SHA256 76c1a495174222a49abe2d86e9bfc523262763b7b871612d631e6dd918fa0e8b
MD5 93aace5bc2b54194f56d70267e760628
SHA1 d4869cc3eaa02a4034cb1decdb1e8b089237f07c
SHA512 25c67afc334156983d2653d2186d0176234d6d9969d010ec5daa4b86af2183a8ee06b2ae3a4791df9f8cb3856446d925c97a84f403fa989d137849a9ae689a30
TLSH
T1B56190895810442E190D06DF35BBEE07085BFFC8C2992E0CD9BB420F8738D513C74B6A
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip9_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip9_gray.png
Size 3KB
SHA256 92228b38dc6896621d3f8f00c195a07d4dd43ce743a9f98392c88f3c408add13
MD5 80d92123074f97530a764760ab23c7df
SHA1 4871d8425f0aa5071a664dbe0f0d0b0160c3d4a4
SHA512 12cf713dcaf55382e04998ce7d94ab4bb410a09296d71cdf32b5ee448bd2b617e2eaef658e6cccbaae988d558b769106754099e32955380bb59d404448e88faa
TLSH
T176616D885440081F004E06BE396FDD068A67E694839D6D08DEEE434F8A20C617D75767
MD5 SHA1 SHA512 TLSH

Submit Download

ExpandVip_gray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\ExpandVip_gray.png
Size 3KB
SHA256 bc0eaedb76be53ae1995a032a2c4b21d60d5d96a8158963d3c2ddbaf76186195
MD5 22f8d645ec83a38b025dcd4e3344b70c
SHA1 30ba7d436e41a0d69ff76116bfcbf1abeb83dbfd
SHA512 f142a37db299c9e6e1c5342557ff5493e4d9c0b4080b858cdfe0be4602fc177c51cb8c8a179c8027217953116ddf6d53234955ae4a31f543c5fb4625373c18ce
TLSH
T1F8617D4464910859540D4BBE34ABDD074E1BFBC453592E089DBF930E9724D313C79B76
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-01.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ-01.png
Size 3KB
SHA256 fc309e56f200043b6b2de5733f4d420e5d8e90754f113f1c37659f9c12f4e074
MD5 1262499fc7a9103d05480e2b997d2c92
SHA1 f6d6ba9bd28f97babf50d0319bdc453d5cba7860
SHA512 f566a220aedfeb821f7e873f3be9b0fe792551b71de85f6cdbcf1f1c255e6ced46fa76ab5a05c493395fec021560ec952fab5f3cc0fb9281a565ff27748a7722
TLSH
T1E6616D4ABC00865C150D06EA267FEF4B8637EA94939C6E0CA9AE424FC724D523C75B13
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-02.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ-02.png
Size 3KB
SHA256 3d6f57a849d9726c72a7216a57cc7326297877eccd58785ff91857029c14edc5
MD5 d6be687cd9650377f0e8a4fee3656aa3
SHA1 ff8afa9e509ff185d0354d620f274a050adcf00f
SHA512 e367f10e0c7da142922c1bd2d61afdd38dcf36251d2dfd7d613765b3cfdfa6d1b849e10dd6bfcefc7bad0bb33dbd7e68f31ab403c6045a20a66189a21f2aa434
TLSH
T19E6170855C05455D144D0E95356FDE064FA7A5C4D399AE1CDDFE820F8730C523C71B8B
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-03.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ-03.png
Size 3KB
SHA256 055950b5ce6603f008482854cb9e9a0176d591c823573cb4cba03ae263979684
MD5 5c3292f0d4d24cbea32de7200546c767
SHA1 f6feb287bd20c6935bf7b90afa3acbd82f212b2d
SHA512 62ade362a41c29d3de5856d0a21b63155eb7c0ca65c196d752286257ac44584a36828ef2b08c6bae547c77e14037777249c0991d0610c33f94c92f0fc33c2784
TLSH
T110616E895440895E104E0EEE35BBDB49463AE2D0538D2D08ACBA438F8720D927D7DB67
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-04.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ-04.png
Size 3KB
SHA256 e26167a6ecb6a3b0634a0f16b66acd8b09bd02ac00f468f848e529b05ccff4c0
MD5 290c70752efec66c7aae9a9a100aceeb
SHA1 39da704c10496aa3ca02bf908d256c080cd4d17b
SHA512 03312b36400eb2929b44428b48a05281a6ed04c04b433fc29b52f1856b16b904658d5cecd191fd11e002546945ee85cde99dee6b37aaa6d207c1d7a4f0c633ca
TLSH
T1A5616D859845825A244D0F613DBFCF07462F9A84834D2E4CDEAD830F9620D403DA5BA6
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-07.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ-07.png
Size 3KB
SHA256 d7c03f5382347177a9968128c5f64baebb7b2e7cf7d2f781c0fbf84404f4e746
MD5 ea05d7234a6bfc65a063820766a1037b
SHA1 da5628b20f7af4a6bece5fee3a4de9cd1a4bda00
SHA512 7f4d2fb0e954cfa418271203e3f60488b662e6ee3530a0c8ea179a6bb42130c2334cd62d03ad0842415cac4a3a2f33704dace63ce3eecc248c862970d4b05165
TLSH
T1AC616B8C48415D2E200F0ABD26EBCF0E8A2F954492D91D588DFD824FCB11C917D71B03
MD5 SHA1 SHA512 TLSH

Submit Download

LZ.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\LZ.png
Size 3KB
SHA256 2d138d9d971b2adb3fa7a399a6695f29035e63b61228eaf1cd423949ead620fa
MD5 5855e7edfb33fe541e47bdd4a09480c8
SHA1 10a6a2a84dbd6bfbfbca467f09d232ede2a1c250
SHA512 cae374584824fd569f586f102a47662371891c60e6107831602455ce2f37e3f8c510e47b8af3be707cebf83465f2e3f86bf12067bde47c7a0ff2c22f32f02afb
TLSH
T159615E489C40891F100A4BBE256FDD064A26F784A3696D1CDDFF420F8B34D617C32B6A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury5.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury5.png
Size 3KB
SHA256 8aec1d360e4d05336f075084943015c4a8c4a03437007f2cc975f168c713c61a
MD5 28ecac19c530f45e1f8528466d356989
SHA1 fd15b642cd154d4901a209b4cf232c58d80c3212
SHA512 4d708fc7f85a3fa031e253600b31d5742825813fc17b6eded799b638ca19a9afe5d1f2290a7aae1b610f5749f6a368ad5badc309f448b9cf541fddb4b0d157e8
TLSH
T11C615ECDD854441E100D066D357BDA424A37A69093D56E68CAFFC34EC625C953C36B7A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury6.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury6.png
Size 3KB
SHA256 8ca2d88bcbb85ab8a23ffba9653b4b4959a48e3c711ba01f6ee1bd4799c774bf
MD5 893580531dac5db9c899a6b898b84d78
SHA1 fe386257980d6b31ed5458afb6ebac82ad61d544
SHA512 a6037eddf13ac3d3149dc53432baf047b0e70354fb9530b27db3386c9baa01a04299b5b0966c52edf8e78726f3818122a9365ffa458c5ecef60a45d35cdd5920
TLSH
T116615CC8D990061A00490BAA2AABE9058A97EB8453CD2D1CDEFE810FD634D903D76B57
MD5 SHA1 SHA512 TLSH

Submit Download

luxury7.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury7.png
Size 3KB
SHA256 83e7a442c04175ac14efe154bd3e17466361f0a5bb76953e6146c7f8d2c23203
MD5 c8e0da5d6d81b981d6c77240a6f80a89
SHA1 e761f8edf7f1ccd21f7a86ea0f8e4c01669dbff3
SHA512 13183d2a89791f9ccb30d17ec75aeb5de5ceecd837f945292a5c8c521621bc197fb16128318cf9cd8d9cc00e7326041cc02133e1c9fafde432f241e1ba39e440
TLSH
T1F1614DAADC65095F10490BAB367B9D45465BAA9443DD2D08EFEEC30E8A20C513C3579A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury8.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury8.png
Size 3KB
SHA256 b5f1d89f2cf69839f793c9e96eb833d50cc80a6dd38f97eded35c6fb944482b6
MD5 2264c0d6c37ae89360199c4f9c697438
SHA1 6e2696d7a871e70a8049e659795fa36ea53478d0
SHA512 456e577fd5d58aa1753763bbf34037b475b9c93762888a6c1efbef4ce0f7b3cfe937b5aebafc2b44ba4bb58977e08683e6589787fa5dca5aa3454697c7f85a56
TLSH
T132618EC99404545D2049036E35ABEE05832BE7C5826A1D0CDEFE821F4E30D202D72F5F
MD5 SHA1 SHA512 TLSH

Submit Download

luxury9.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury9.png
Size 3KB
SHA256 a2ef2cbf63925f1acb347c7c4e761a1ee8551b6d1a8147b3903abfd56980e105
MD5 489265a4743236356fbf1102d5da418d
SHA1 61ebfacfb01a466f90c294338a3ea8633a418853
SHA512 6bebc68dbc20cb8461e868b5c628feae17ab557a43123710ee7ba14b32ecd0f42870f02cc7e19df31ca4d81f8dd186fa65c7878ec7e53f70efcc0271927c2ead
TLSH
T1B4615C8C64041D2D040E0B7F3867DD038A27F99453986D0C99FE424FC621C627CB1FA6
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray1.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray1.png
Size 3KB
SHA256 16863bc2376fbdd7f8380f5a0fed2d8ee10786a1061e6423a0892a96b9f44c53
MD5 5631735f4f37e13924535fbc39685fa7
SHA1 de16599d2397b057d45d3b93aed74b6461e58194
SHA512 05ee05c6bbf920fdcde0c5adc474b45d48d3b19833922a8d55a951026c09f1fa7e5045604e3c0cf3723afc6d0a3dac40be2e9512e95cb42e1e4d2d3449b8ea44
TLSH
T195616F4959910566100D079A3577EE024D6BE6C4A3AC3E1CAEFDC34EC624C603C3173F
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray2.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray2.png
Size 3KB
SHA256 0e7610c05b1cd1fc393b50ff77688d861391e8b790e07f1936759d498f637bcb
MD5 6888b8b9167490a9881c729b992cfbb8
SHA1 16f203706809145e399a91c46009f57f19d50ebb
SHA512 d47e5249a31771e7a23db070a3d7df867b1b17407913a8d7abb1005c8ca1acc4bbaadf4f762b9566a663bf8dc437ad4233d53f60ee170eb50c69f2f5ea053509
TLSH
T1F7615E859845182A110E0AA7297FEE094F17D78443491E18DEFA828FC734C51BD36F17
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray3.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray3.png
Size 3KB
SHA256 700fe63da210a2f0a84a762331f3e2cd7b0e71b9e66ddfaabacb3730f8382f3c
MD5 05a956dcdb323048e5daea0d39666570
SHA1 b4d143f7cf413b3237ee966741778a432ad2bc9a
SHA512 6f38bb54e4936c407af224704cd4741ba21a7b460a4c80cfdcb5c4fc3344618d3b32bb7bf0a5b7d3de54c9724056b74f05335aacde15b5db1e1268534551630b
TLSH
T152616C85AE54552A214E4B662A7BED050737E3E8938A1D0CEEFD420F9731D313C31B7A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray4.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray4.png
Size 3KB
SHA256 c93023f4cd7bf38393d7616e208dab405a125ce951ea844c3d34776e6e787ae2
MD5 462ef8aa96f9f1380baae33597f10010
SHA1 ec642cf1c95278de96109523355473cce8944adc
SHA512 2f92baf3ed58987bbeaf66a1733f28546bde81144f40ec6c52cd7cfe15995e7a19f09d0aad42a663519c333dd2e535de3075155b552c8c137358fdd6c27df276
TLSH
T136618E45D9150429210E0A9A346BEE058B1FEB9853897D088FFA824FC714D603C32B6E
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray5.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray5.png
Size 3KB
SHA256 d47c8bd3087c0c895f60344175748e15c0629f488035fc10b60537c0e7cf2251
MD5 8aca19dc8cef8e6d58203b9834346cc7
SHA1 c7a639221ee7dc3eaeb74a9cc953738420c87c64
SHA512 1e197eb347d344a605b2096b5a9abd3e339e8749d58fafc0c8661f2f5f0a13136c98dcc29527d28e5f0f94a4152ec96482b98595af0e71a13b21d91d4e3be958
TLSH
T1BF615E89A494066A104E067E3E6BDE094E27DA5943665F0C5EE9830F8930D903D757B7
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray6.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray6.png
Size 3KB
SHA256 c94a550369b07f2d957b405498038c487c65d1d4e01947060bddc52bc62b36b8
MD5 74d87c45b168d1e2f43e02e050c25d79
SHA1 8be7ecd8cfe7e91acd4a503eb3ec1dbb8eba3484
SHA512 7304e2138b252ea41811c2ba76a38c6bea0bd48d45fd2a1741c02c2795360d0b40081b3edb45b746a5ca7fb7cb6e16d7200d047f9a56fa19d64a0d15b630ac04
TLSH
T16D616C886440096A204E07B92A7FDD464B16DB98A3592F1CADFA434FC630C513D75B7A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray7.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray7.png
Size 3KB
SHA256 a5b283f0be49fb133dd1178538e382bd239e5cae78cdb3b6da85a6d33c6cf86b
MD5 7cd6c194f777a629b6651d55f9042da9
SHA1 ba9b6b3fb1bb37f1a4ceeeae48aaccc62934dc6d
SHA512 5723990c5edcf988d9633cf251d8bd8940aeb7f2de029cf913f2eadf934677b35674540a4fc44330d337000acbc92dd8bcc1a8bf1a4407b9d90af4901062803e
TLSH
T158615C499848482A440F06A938AEEE06CA1BE6D4938E1E0CEEEEC25FD754D513D3576A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray8.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\luxury_gray8.png
Size 3KB
SHA256 e2857b970e11393e463de4c84591bfe503e0ff96005853057099fcec3f7c8f45
MD5 16aeb99e1920db27e17c300e7b592b21
SHA1 970fc26b65a61d5a9cfdbfdb3b34692f0914b06a
SHA512 a99a27e9dcafc5df6534d122f9141d0391739fdacc7248030c507a92d5c37d446abe1eee55e6d1ca8bf4abd477227dbe082f2e7cf9995fc186432ee052f3659f
TLSH
T102616C486854454A004A466B3CABDF164B67E78892693F0C99FB921E4A25C413D74F6B
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray0.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray0.png
Size 3KB
SHA256 79a4ffbd472ccc2673bcb26e0d78d820c599c19c77e07dc2e2292055e32ea2fd
MD5 023f672a9e41cd7119f50a886bba82b5
SHA1 1d18dab1d23ad2989bc3201fbe2353f0dca9f935
SHA512 73e8d8074ee09a16de536102c68df629dd0f178e0934807b080a3d655b004ba9202cdfe5fe7d4d31994e4c054fb38a94cbf9adb0af89c3592dd7e3753fe26466
TLSH
T1A9617DDDEC510829000B0F6936ABEF05862BE350928A2E0CDDFD421F8630C017CBD79B
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray1.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray1.png
Size 3KB
SHA256 da3724add133fd8c125640a6d96abef221c65643a25b68405ff86d0098a8083e
MD5 5e775cc46bde9ce34501fd155db0d390
SHA1 8019a802e3267b551e0a4da5d758f2a0c58740eb
SHA512 a5a989844e01b7a62e49d0363767056f027393b4b47f65d7d7ec8f40bd10ac4c62538b5d7082468f7018075d54276a977cd653d29bebce8c384cea35f2888c24
TLSH
T1C8615C8D9841485E04094BAE3577EA0B4A6BE6C4538B3E1CADFD834E9620D903C75B7B
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray2.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray2.png
Size 3KB
SHA256 545b23187bd1461626488e755997a363aa12c7d354688ebf86556f11077ba400
MD5 acdcd02152e3a87f62fec0cb8d77c071
SHA1 a92d2437658544ea341160020b05552fccc1bbbf
SHA512 039efc83ada9d82556e5f3317e2a502534f10a6ceb9057252540e98282c2d9f2db289e82c5140d0bd99df54e3d3ede3dce2d6bcee83bb39d7b92d3c382293ba6
TLSH
T16E615CCD9895453B100A4AAA347BDE4A0F27E7C853596E18DDEEC20FC610D503D76797
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray5.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray5.png
Size 3KB
SHA256 b3aa7321e09d193797f8c27c0d454f5633e65fe5fe7ce48a4709a47037e4cdd8
MD5 ad75b8ed439495ad572cbcbef8961ecb
SHA1 d9ca9367af9eb12d5e2f9176a1de53c65be36b19
SHA512 b2bf9aa8274da30e4a3366a9bcb23a6d6499c987dcbc7bce2bfa1c15858a626e4d23bebf3c9968ec56b254d095692a34821d6ed3a979d4a381e3b567e390d02d
TLSH
T1A3616D89A841081E150F066A3DBBDD058A57E694439D1F0CAEFE434FC630D517D79FAE
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray6.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray6.png
Size 3KB
SHA256 c8a81f34885b0ae3b4052c767f4fade7edfb10b3db94a6b89a1f8f59016c5120
MD5 38ae469d0ead8df4afef241ad5cc9c7c
SHA1 333860df34417f07a0d453a9ce201334242adad2
SHA512 775420bd41520c94a0cee40bb932da28740021c0d7776a595154d6b4289d28d1bf71478ad23fead940da0f3e9f641583674a967977005e5e8f38c5cb89385d7e
TLSH
T111616D895440497E104D0AD9386BE9068A57E6C063592E0C9EFD930F8611D513CB5FAB
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray7.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\lz_gray7.png
Size 3KB
SHA256 3269413f7732c07985cba02a7efda0eba01ca69ae6557869d953424a214bef92
MD5 1dbfbf61c294f88cf8ed5f430e69cde3
SHA1 1400eb20032cac4105a4e9da5f9641d4ecae509b
SHA512 45d195b0349ded506548f7b885c941637b8ccb7ad80754a77e5a6ed5fd256742d1d12fd8c1535912a1061509a70f45d7643ecd3e971a3c1a8a84039d05ae126a
TLSH
T1B2616F895800091B010E07A63CBBED058D17E784D35D2D1CA9FE434F9711D927D75B2A
MD5 SHA1 SHA512 TLSH

Submit Download

nian.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\nian.png
Size 1KB
SHA256 33721661162c3a13dc0dfeacc498f4258764bb6bd914667096324280553e2641
MD5 a6f71f8684e78ee8d0401359e9e7549b
SHA1 f2c1edb958c339c3446d7b8cc8153aa4c0b27252
SHA512 1779c77d6ecadab8da23f331217751ff07156161f75f52dc3400479933369a3dcc17d85a1c6f54910cd0fe4e82114d57bfea43f57756b278f90a378d8b11052f
TLSH
T15621B94EFAD1A54082D8C48438DA5077D6CB089096CAF576ADCAC44B4CB8073956F6C2
MD5 SHA1 SHA512 TLSH

Submit Download

niangray.png

Path F:\Tencent\QQGameTempest\MiniGames\res\Common\icon\niangray.png
Size 1KB
SHA256 131df136a4ac157a80c73742d99f3f5f05fbe42d0e4a208b8ef766e9143505b7
MD5 7bc4ca3abebce533f1d34391eda2843d
SHA1 9c68c894416f1c2fec9df85105f31bafb879509a
SHA512 b2d3b0bae09d898a0e6e683d90f3a86a9dfdb4182ba4b567521402d1f85487f2c4021f7b99e2e2f6733c75dd73bb3f382d69523b0be8446f410e8ed03a46ff86
TLSH
T155215358FA959502904CAE8219E3042BAA53494099E1A6B67DCFC8219C751B691462EB
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-05.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\LZ-05.png
Size 3KB
SHA256 984acb205806d72d8c1184ac8927eb66e67b5c206dec3fc9183cbbf01545b53f
MD5 ca8666ee16a32746a631a2297e03dde9
SHA1 5cc668a84837bfea407bcf288ae593188327ac48
SHA512 604f7575f40903a5dcd7d79aa689d63b597fd248e996d4e28489efa9325242d56d4fae672051d067b9e1b471bf8e9b5e466fd1dda5fd96634bd9b97997991b50
TLSH
T1F5619D05A8041B6D244E07B62977DE0B4E27E984179D2E1CDEEE134FC520E127C74BC7
MD5 SHA1 SHA512 TLSH

Submit Download

LZ-06.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\LZ-06.png
Size 3KB
SHA256 6da47c74a492e38d030328ddd9758c45d0da79bb9268dbe92f71f6d8909835c6
MD5 3a60904b72efeb4316b21d3d932d03dc
SHA1 33089a3a0849e189056e029b0838b67df5225ab5
SHA512 67401573a6a98ba512211643309652eb8765cf3f72ad5b79325ca397b0c43eeaf8151371f7de1547a74d79c2a3f3b124ac092eae95c75ebf276231bfd813bc77
TLSH
T15B614CCC7548469D104E07E629BB9D034A6FE684539A6D0C9DFD924F8620C413C76B5A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\luxury.png
Size 3KB
SHA256 93a5cd2112d855a724fe44efcfd1cac981b7930624b2a0ac9199f291124eb2fa
MD5 2299fa1d094fb6cb85276bdca58f9be4
SHA1 6779b29b739f3c81a734bfb31e6349675e89096b
SHA512 feacf35b8626cb88647346993a749b7f61e8fc3b211af08405476b97ea01650e65d5023e666832b1b2a245c3607b5da0d4febbd8d0db30dadc084f7cbbacdf1d
TLSH
T138616D8964440C1A044D07BE256BEE05491BF6E483993E5CBDED824FC731C913D75F5B
MD5 SHA1 SHA512 TLSH

Submit Download

luxury2.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\luxury2.png
Size 3KB
SHA256 e7c8a65eed725fedbc44b519bae6d9fb66014251e939c9db7862ce2aa85adc1f
MD5 204d56fa5a52bcd49de8083b3f11007d
SHA1 73b63fe49b6fafcc7330fbe10c053f15f91be2c6
SHA512 ccd5a49cad9047306983a86d30548a1d5de7312520f9d760439cc94e35735cb46307d959236d1cff5ae81a9b8c77515edd2f5dcea43deee725777485e557c456
TLSH
T178616F497844042A110E0EBB2D5FED06897BEBD4915E2E289EFFD28FD620D813D71F56
MD5 SHA1 SHA512 TLSH

Submit Download

luxury4.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\luxury4.png
Size 3KB
SHA256 336f6da3ec04bdfe61699beb71d148695687fe8912bb06848460daad8f61458e
MD5 9daa3c1ab52258884f0b05e5adfbd8a6
SHA1 02129bfd0be77e6f2fd0f4e693382f2eeffec899
SHA512 6a8950a1e24b9b25ca2fe2e8c0818bc41834b7a09638db37f50b5314a9fae30bbaa3b3119b44d4a82ef8d14d6a5ec8b080831f235f086818cf766998a1bbb8c3
TLSH
T1DE615C8C5900485A104E0AA6357BDF094B9ADFC883DD2E0CDEEED20ED620C513C66B6A
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray3.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\lz_gray3.png
Size 3KB
SHA256 c354ec0917d49e0db0668bee5f7484b5152d69a58b5dc857f3ec6018a533f10f
MD5 f5508a6822cfdae485f42743e01d9a06
SHA1 91fdcbc601a6b265bb47a419a26adc0f432c7225
SHA512 9762120194293a5efd800be12c7bbe8bc7b8ecb2882cda78c77faa0367a73a35f4f0ff19416a8ec076d8e18d67c8aec938876046658a00953bda25b6bf14d7d0
TLSH
T11F616CC5B445492A100A4BAA2967D906CA27F6C453696E0CD9BBC20FCA21D513C7175B
MD5 SHA1 SHA512 TLSH

Submit Download

lz_gray4.png

Path F:\Tencent\QQGameTempest\MiniGames\res\vip\lz_gray4.png
Size 3KB
SHA256 c62d0c04ab5ef0694e353f765cda99f34f16816eea20564b407ba09eb151a183
MD5 7a742e60b2f93d428df680303a65c39b
SHA1 dcc56f1955874dd95e536ca7c229e9c629b47f89
SHA512 1ef2309d7b42ecada69e8c10bb7a3a2ea9daf001adb10f749a70b2133f2682cc46afc9a6130a07c536621c3c91b208061a4c5b5fcef6db274e4aec2f7dfa3d71
TLSH
T166616C88E845453E190E07AA257BEA060577EAD8538D2D0C9DFE820EDA36CA07D3675A
MD5 SHA1 SHA512 TLSH

Submit Download

config.ini

Path F:\Tencent\QQGameTempest\MiniGames\snakesnake\config.ini
Size 195B
SHA256 beca451988cb7f9bef07be2d6773a13c35c8b2227f339cba5035cb087aa814cc
MD5 f32dbbeeb3b6fd0dff3c7f85c8d0de6c
SHA1 96a2e2eed3d0f9237bfc90ca7c21e7203f3ada13
SHA512 fc9c45d624750ddbad69e53df302439ba217b5ec2a6bdc3062d9d55136f3e3da5833bc429c851afb8d4e81b477575810d13a950c245992d49841be87e701664b
TLSH
T136D02280402863088394898928097887E9DBB8308A098078DBCC224B2E60CA1B93F03B
MD5 SHA1 SHA512 TLSH

Submit Download

7z.dll

Path F:\Tencent\QQGameTempest\hall.58955\7z.dll
Size 1003KB
SHA256 8e4950571c365203737a847d7f21f0cd78d512b16ee33befac8c8e32df575cb2
MD5 7bce746cf67b6cc3ce24232608b1d18f
SHA1 4ed54770857ed2039eb93654519b79ca9961d5e1
SHA512 7dbf150bf3e3f034f3a45c0cee7b933f23c02455041ccc774ef3afffdd5f72e9463386fda76944a39302161388216243ed5c5e07f334d00f638025404bc4f3ca
SSDEEP 12288:D3vvLIYH/00aEduCL5ONjAlULIDTOuc98kIcLHDC1+me6GlLa8UdeKYoP3K2g:D3vvLIYH/hEAllDT5YLjCne9UY23KB
TLSH
T18425AE1175D08872DD9E2231053CFB7957FEA5600B208ADB9B9827FEAF604C1DB3964B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7za.exe

Path F:\Tencent\QQGameTempest\hall.58955\7za.exe
Size 584KB
SHA256 58d7f2a7af5b7f04a9f0908b3497cec265ff50dd8d9696b06553d1f66296d13a
MD5 243eb9af40dfd1b71bbfa768ca56083d
SHA1 afe4dde3309ac0be4bee692eb8e4b7a944d1852d
SHA512 c6262fa24033bd032bab565830a86d12a894b1c8a14652b720aaffe6dc95998e7da0dba7fd8033ac03cb0bcaee7e396f8412e52a4ee51a7f2f53aec19c8e32c7
SSDEEP 12288:gyyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRIg:gKvyNhXCV4E8BXAfrnkcAqU0A5
TLSH
T1C4D47C263AE5C079D65215308B6E5BF6D0F693680F2308C72794DF2C1E359D6CA3AE39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-BASE.sys

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-BASE.sys
Size 4.0MB
SHA256 3d9bce1ee10462bafb36cc742c0e7c4c6fbdb32fbc6f98468a4196a2123b2691
MD5 a3198823360961305c7a38251f5d6e78
SHA1 c46943345c03fcbcf403c19327fbebaaba95e0ab
SHA512 d21a1f7c3ee38de14aaa346ef482173114eb6a466c8e26a7b896bd78ed9a1290a2b0d93bb2ce5de2e998d80873b1d3ee91b05d154cc1d4e010b5710d3f79c9d3
SSDEEP 49152:+bcHyi9P7qMxx2TPngrSk2ZrzinQhnqbDiVrS:+e7qWiguk2FhMF
TLSH
T1ED166D1BDFB612ABCCBBE47D4A4B210DA5137902CF3E6BDB2219540629707C937B8758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-Base.dat

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-Base.dat
Size 66KB
SHA256 e478a1a4a2574514e37b7d3f64657f8bbc67b15c99d7c87b534e1f1e0b28743b
MD5 46579b1f6c4a55f57df9325ba6c38749
SHA1 b629d4264b6b589045389520f3c1a878e948914c
SHA512 7c3e341e22fe20d30da32f7b11e14bb54ed9a9e3c97190d1d6f8bb2f5d4d8e4c86d09c00707bdb527512d4f06950a2c3d261eab88f6bc6d0aabf83c50926e75d
SSDEEP 1536:YsHBKwJwFUh4Zl8bf+m/hJjy/N5wu/CpVd0qgS+uHeMHd5:bBKYjh6KbmaDjy/Yu/CCqgs5
TLSH
T1BE6302903CEAC7CF2246A640B5F74D26FC668F52764E67EE698A12F87141071278A533
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-CORE.sys

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-CORE.sys
Size 3.7MB
SHA256 9f0db867923da261c37d94d5f92aaf1a5adc621c41d732e41772fffd6ae8b0c6
MD5 d78fce54974fadfac7d9ecb2f2e47e66
SHA1 b13f20c2bd5420c4f36f93a0850fe8ff818f068f
SHA512 74199030e39fe2b11c219378fa5f097f27f9d8768df38f3949b4f2eed76bef254aef2580cd6386a6a7986fdd44b84d5456603df1c648f9be34995541ba58e775
SSDEEP 49152:QLH0NMtV6aikfpDY/IGq7Dzp6qkb/nwbTEHdJ80ZAacNs:+0etV6gPvZ6zbov+w2
TLSH
T1DC064B169FA6135FCDABE9BE4F8B150D95036A02CF6E6BEB2119940614707DA33F870C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-CORE.sys2

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-CORE.sys2
Size 3.0MB
SHA256 52eb33cdc1be6d756100c52d5bd3963a582e8c44059ef5c62388a1e4ca63a907
MD5 748728b1e949c3fd12bdd9e48baf22a5
SHA1 c5432b48df94016689084efd2421ab6e1f124057
SHA512 e90df324e00f030988940c1d27a23a41227ebf2288ce0d92fdd89bc9d455307ed75ce8bd25a9be145fcbe63094f6690145aaa2dbf1b1663d39ca32ba76f9b1e1
SSDEEP 24576:zQ4KeCdCGceLg8Lti3mDiM1cLChrI1XUQcyYDEjgaBI17YlMyHOXtLa0k7gXUkOh:z/K3CigINDwrXU9qjgE8xyWfJq
TLSH
T18EE53A169FA6136BCDB7F9BE4F8B150D9502EB02CF6E2BDB2119544A14F06CA33B5708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-CORE.sysa

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-CORE.sysa
Size 1.6MB
SHA256 abf69136be347884d8de4aae6860a10b698b0bfdd92cf0555bf6c581b8ed50ee
MD5 155fa1c0c4770325b502ccc9a0c5a3a8
SHA1 158b726334fba248234b077ea28e8d882552a2de
SHA512 4b33493628f6bfd6f84fc8c4cd85629eb19ed886466e38a7005abc54750273b1d8117b2c7f226ca4ff9f7c1015cb41454204d7c98ff6e471a8ab8cfed0fdbc12
SSDEEP 24576:KCP1X41owLpqFnJ0Y6TMSTnZTdS5NTnLvGjgoWaLO3PSRUaIEa3w3:LF6ovv6gSTnZTdS5NLbyxcKRU3J3w3
TLSH
T1907528145F3F6E8FE54179B89DB9046E3839A02A4328C8DB51E2055CE2F9DEF8670973
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-CORE.sysa2

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-CORE.sysa2
Size 1.5MB
SHA256 47e61a173c6505c8c68767ad99ce8bc8cd3f446ade1144ad978396285fd1c4bf
MD5 41cbf0c1a99a60d4cd0bf07629464d3e
SHA1 77d0cfa35be5b98c6baeac50af5261dc3214e1cb
SHA512 281c378cbf9975483fb9908fa9104d1918e982d887f61f98045f9d9cd9972f7958d0e50a88cb5c1c5dda9e398f8e801c693d0fffc53c2839e3b29a79202e7e68
SSDEEP 24576:2AW6InbJkzf6rNlLFcgSSL2tTarSQnhUSjzj66y:2AW6InbJ2f6rbLSarSehHzG
TLSH
T150753A155E7F6D8FE64075789DBA006E3839A82A4318C8DF20E2255CE2F5EFE8570673
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-Helper.dat

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-Helper.dat
Size 37KB
SHA256 d6bb544caaac1ac8b65956d41f61d6873a8734540b1ba686d5b946b02940952a
MD5 72e740c65d9881b713ebaad3cec1bae3
SHA1 c6aba71fdefc2f25b792c15237f40bade3684839
SHA512 5d08acbd0471e7f2f225aafaf96126b229d890c3480d8b4fa08096879f064a9f8f54b62033f95e82c3a0564eb060d07bc807eced5950286f46691689d2abe3ca
SSDEEP 768:75cPQYDfB5bkhv7MXJ3wGZQ6iBBH90pvvL4cg/2viF/g22w222w222wC:1cPrDfB1k17UFRZx4avvL+iu/e
TLSH
T17B03D10D6B129447E2444E7206D70D23EE53DC165EE0C9BBB9EF803B6E341E85B8B697
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-Helper.exe

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-Helper.exe
Size 3.7MB
SHA256 8cdec74e517405a630890c348a20345f4c2844dfd9c3fa8718ececefe4feb7e6
MD5 0b9fba682fc5ce062788bebc13066e7c
SHA1 95ff5b89e5f2b1e40ac14f596d3e29455c3ac7d4
SHA512 8a6f46b8366813372319cf7cb7ff76482ce8b38f0ec5520a29f6e842ba1b4cfd3d669e6ce6d0d7c36c6ac61682d88882c2a2b5844478e8f5840616a9f6c25ff0
SSDEEP 98304:/LkCqK9jITuvn4LNfYWVV0FLOAkGkzdnEVomFHKnPW:DkCqM5AnV0FLOyomFHKnPW
TLSH
T11506BF117DE904B6D06713328EE9F63C757EBD743739019B2294372EBA313921A2A53B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-Service64.exe

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-Service64.exe
Size 3.1MB
SHA256 0ec6a2a493f9010b1f761bf312f97fbfeb9a72ceca84d7dd50c5daa0d9ccc656
MD5 7b7572ebada3aa0e41fd9e43cde7cf5c
SHA1 1696a70ac96dd8dc4ca31829ef6a4aa4afba0483
SHA512 ab1ff5f7496bcecd863962d910e5d19dc15cc8a365e7409d90f38c80a40690aa7960c67582dc10ebf937f97cfe93e4272c0ccaceaef2fd389e22a3d34a89946c
SSDEEP 49152:6J5NxNvk8M5FsG1cxoqIuG6M66ZaO3hvOq+R8gydTTzKiPvtVYt3c2m3c2D:A2bDuMB/U8gqmAtVYtMzMw
TLSH
T14DE58D66E3B900E8D9B7C13CC9524607E7B2B81413629BCF17B54AAA1F177E61E3E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ACE-Setup64.exe

Path F:\Tencent\QQGameTempest\hall.58955\AntiCheatExpert\ACE-Setup64.exe
Size 878KB
SHA256 69fb70e3caf1c2c9a8766d651b516ce2f35e45596983f41fc150e07957526e1b
MD5 13b6b56c871fa93a575fed59814be73b
SHA1 4110c5b1035b81c3fb2200f6c8aff398d6d3f57f
SHA512 d2e6fd10ee034ec62a1ac36b492063567d9368d8ed88205a1081aecbd7e45fe774549eb4cb818480f18641377d58ab5ce47d7b4ddf5da4702633822ae36b64e8
SSDEEP 12288:pAD/BQQXYdXluitQXCbSE+vnG29TGicsquv:p6CeuXICbSE4TTGvsq
TLSH
T15A153B52D29901EBE56B463887021936E6767C7E07709ACF0FD4B9A31E379D18E39BC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client_extension.dll

Path F:\Tencent\QQGameTempest\hall.58955\Bugly\client_extension.dll
Size 929KB
SHA256 49a0ee1371f1a985bf26b90455d95919dfb5025c1062e070ed61d3dae96c9d89
MD5 cf56eaad260158ce9fef701b461a8bb4
SHA1 21ac89d54a756231818093774640e62b51022047
SHA512 cc2021ee428b807f7ede4b5651b54ec898788e0d8f96fd263c1e5766ccd2d213bdd0c357eb13d91b385e4528894f13afea1d6cbebe2c0bb5456d0f9f7e1a3cb7
SSDEEP 24576:z3dCTwwPzE3ruG0eq4ZpPMUbJQk4JB4TRrxvg2:DdCTwCzE3SG0eq4LMUbP4J+5J
TLSH
T10D158D5B63A801BDC5BBD1788A575906E7B1B84A03709BCF03E056A63F63BE05E7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler.exe

Path F:\Tencent\QQGameTempest\hall.58955\Bugly\crashpad_handler.exe
Size 2.8MB
SHA256 ff3dba53732a635bd6c390990f157f2edb1d26aec9a602fb9229e5dbfe4908ef
MD5 afc28e43e60c453a6746d2b9d9d86b87
SHA1 58c154d3a2866b13d29e8a655ca583600c1138dd
SHA512 bbe3c5e2d3aa3370490974e89b67442eac466a1dc4bc651decd0c5276a66f59c0949ad1c60bd512507a854ab3ec63092b39cd03bbef72e5da19bf3ae564bc0f1
SSDEEP 49152:BWSU6kCqW4D7PxcYpNWUlYw+SWBotVBwk0vo/cKsSxydP9xgT73/MfJw:BWh6kCU2VUl910nOyzx8PMfJw
TLSH
T1CED58D56A7A401E9C9B7C138D9274903E3F5BD4513709BEB03B0A6A52F23BE15E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler_extension.exe

Path F:\Tencent\QQGameTempest\hall.58955\Bugly\crashpad_handler_extension.exe
Size 330KB
SHA256 0b81f963ac0abf438dba820a595587135bb3ff6912b02615ee81cc0f4a0c83fe
MD5 28930e34a22eb6a80ed161ae3db801cd
SHA1 a5a3292dfb367e9d7404ecfff300bb2bcff1e7ac
SHA512 3dfbb799a17dce6a3dce91c807842141fd21f1384ec4ab043d733756e7fa08280b9dfab20e6bf5e513a801333daebc87b111f6fab3119423512186d3ab60ccd7
SSDEEP 6144:Y3bGerg5uHXJExbTx1wYq5I8TB0t4LeK0cPPQCtIW:Y5LHXivx1wrI8eteeKLD
TLSH
T174746C1AF6A404F9E5B7D238C9828906E7B6BC160760D7CF23A046563F237E09D7E761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckRepair.exe

Path F:\Tencent\QQGameTempest\hall.58955\CheckRepair.exe
Size 430KB
SHA256 78e40d33192d7c4a896e31ef0c00834d63d3b428c56759ab33091c5aad48c2e4
MD5 84ac1c5a575c9277cab9246484640c62
SHA1 56fb8a8821982200bfa23e6128c0de3ab428c167
SHA512 f1fbd7296811bf8b2f5b263237de11f72d80392edd73c6493afcadc8c9a74428c6ec58eb69c762a3bf6f914f079557a99a7c4db3b48aaecaab37029ab4f0455d
SSDEEP 12288:gqzege4BOF3jeZt+vcjyBMUv+uIO+HMnY3+D:vzJBOFeZEfMzuIO+qO+D
TLSH
T167949C2178D2C032C4B252712E69DBB565BCB9700F6559DFB3D80FBE5E202C1AB34B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CyberGameLauncher.exe

Path F:\Tencent\QQGameTempest\hall.58955\CyberGameLauncher.exe
Size 2.0MB
SHA256 25b285ac91cc2a0c0fa27e63a0f10911ddfc207a7931fac923859fa3039e01d6
MD5 2db93e30bcce3f174aad5784608fd984
SHA1 0e65f149cafc2ead9078518a369c3c06675a0652
SHA512 c632346479322d05e7b4faf32c2943370dcfad7612cde417289540d1b157fe470783f2e48dd69901bf35c18369b965cbdd372d8b357616bca916181c4eb6e6ae
SSDEEP 49152:4NL7x8fXe0ZQ6bZiAnoHG9skSJJxcziaOcgq8x:4NL72fLZ96JJxcziaOcIx
TLSH
T101A59E10FBC6C1B6D693197A44BEE31E5775F65067244AC3E3482E0F9D703D1AE3A28A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GdiPlus.dll

Path F:\Tencent\QQGameTempest\hall.58955\GdiPlus.dll
Size 1.7MB
SHA256 32d9b253e15fcf7a58e06a7ce1210fdb50fdb65927a09d5d2d623dba30453b9c
MD5 0e8b5676cd1802a0bc7a29ce0cae1bf0
SHA1 93752bdba9dcfed2419331d7fbd8bd0a7b84640f
SHA512 cdbdfa92c0fe2b067d3e265d203b165032396d59356ebe698df02b8eeddbbff56cbdaa2caf09b655b751c0bb11a83dd6df78b3966252852d98048bd36f9212ef
SSDEEP 24576:2xnzzlD7ReVXjqvyigpv71+h3A6DZq0PCFUm1zfvDf73zJAMd5fUzDHyZ201pKKX:2BzpD700KVwh3TA0PCUuz73aknXKKX
TLSH
T103856C21B143E035C4227274526E3374F2BDDF32043E765B7A94DE2DE9A4891EB28B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HardwareDetect.exe

Path F:\Tencent\QQGameTempest\hall.58955\HardwareDetect.exe
Size 23KB
SHA256 10b3e08f2a144809ed178e5b7e8382439ffaef8bf1e351cda606453e07ee5c1e
MD5 a3b2cf55c7370fb05e26a788ede52342
SHA1 ee699ba7eee607dc98638fd1bb6ff6be9852d60f
SHA512 51bff44116e1d5e7018e60023b882cf1c8f0198b7396b50d1ae5f00f5e93979b9131f897f4f593af27d9f298f56268fa98ec1d301ea49b2cf4e04a7e512342b7
SSDEEP 384:CwhRG4nEHv8dWS8nYPLQRIA9eMBnNIAQY1mYfTUujH3RKnhsq:FhRG4nQ28ouvEaq
TLSH
T191B24CC71E255013EFC6CDB0A2D6C26B9D79A391BFC514E7A5B680C22EC1BE1375A01E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSOConfig.xml

Path F:\Tencent\QQGameTempest\hall.58955\TXSSO\I18N\SSOConfig.xml
Size 394B
SHA256 32f912e1eceb0000e04ddb3c627b00c4533e882cc34e3d8117bc9cafeb2faf8b
MD5 2b563ba463450a8fd6f4bb7789503b44
SHA1 3cb6c17b613682106f3382d212d29b8af10df13e
SHA512 b392808aa0686ff4b374c0e99af68428b361e6880f22dd5d59ca08e78228ad3162927d3fc347b53b26dae2bfbafbc795209fa5d1606af69604b9d2dc689affb4
TLSH
T15DE02B0415A66C220354D4E7AAF366456F32BCDB393C6FA0B4173D6B6D5B0286302393
MD5 SHA1 SHA512 TLSH

Submit Download

avif.dll

Path F:\Tencent\QQGameTempest\hall.58955\avif.dll
Size 1.1MB
SHA256 ace619114a386d8f4bbe7b298c008b910ed8be1f6986755a7ee0c0ea66aaa492
MD5 80723045dc0a7ef3e645d5120701eee9
SHA1 48ba987111b1a6a8a87d3080085d9477d0065273
SHA512 cfe4c7da5dad1860da10b4b6789f36a9b1da241383f8456b8b5ef02e46628e0d82d6b3ab67cc18bb74dabe55b3a21d9e286636427ae2e35073025eb75c58e301
SSDEEP 24576:V9gsDHTq1m2SVCUXq2jX/yYcLkjtLd/75HTaUeCkvJQwIjhdq3MMi:V9gsDHrCAGerRelvJQwIbq3MMi
TLSH
T1C1458CD1E1D39660D12708B086BDAD96B52E0ABD133090F377AC4570F3B6BC4A759F8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

biz_ui.dll

Path F:\Tencent\QQGameTempest\hall.58955\biz_ui.dll
Size 7.8MB
SHA256 e238469e60f6e99b54b53048a088f24137f7c4d5a9d592ba288eba2dc8a7a03d
MD5 1a79ca5d84884613e42330bc9aca0b71
SHA1 6cc83e006aba1fad1da34c69a48558432af078b9
SHA512 e8cd43ec8a4de366d181f0afc38204bfa0c05bd4144bb2755debffa339380f61b9de972856cbc083de30888623f819fc9b230da65d0310c1b4f6fa9394191ff0
SSDEEP 98304:bquA3qvdCyrFOVmbuUJJk1VbC60GL58yXLem/w8hPivT4GXwhs8XSuGHWNqG2:e3qvcqU1gGLvXLFwEivshs3ukV
TLSH
T1CE867C317646C125D09D01B2B63CABBBD16CAA751BB544DBA3E47F2E5430AC32A32F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path F:\Tencent\QQGameTempest\hall.58955\cacert.pem
Size 223KB
SHA256 3eae9a0e2628e6a2a9b8789c16320df39ef1752e62b863243626323c4a100b4a
MD5 f7644166c0074466ed6f1d4b110e7897
SHA1 e61479b9e1b26a0cd24a609f533a7fea40cd3aca
SHA512 efc2a17cd1649fb3a5a34e8893086032385eaf1faec741e7de1faaccb96646fc37dcbc48b84b929ebe596d1730856910589468459022f2ceee25177908a74895
SSDEEP 3072:sT6JvZYv0yoVu3rz9WqIAsjjg4DsUQS88UP4TFf3xVOVkCC554jMN/dfR2E/o32h:A+qchR8xyvp5iIZB4CNxzaqMT+5jT
TLSH
T13724BF9BCF426C5918D3F0D4C9AB0259D81E93629EDA78A32D463801DF85B3E62FD48D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

check_pc_mgr_module_cfg.bin

Path F:\Tencent\QQGameTempest\hall.58955\check_pc_mgr_module_cfg.bin
Size 1KB
SHA256 32014adcb4f919fa7fed521fcac04fa49deed267b68f42dc33dad6e7d3563fa5
MD5 e907f4975552990c8d06c3cb05b187b1
SHA1 286536879238b3bd0a2c46c53142fbae458c019b
SHA512 1c9eaf7df6c9272cd9aa99c3177132728be752afa6011a96e1bb3e2a07e1d0e938b68758c929fd7958b2b5dfe5f1c84928c40f6b3e755b364e24b4e43bf3c576
TLSH
T13431296B088CA914C3951043F075FD8A71495CBC8B050FFA153B67726474B6E0563324
MD5 SHA1 SHA512 TLSH

Submit Download

9999.data

Path F:\Tencent\QQGameTempest\hall.58955\config\dynamic\MyAppList\9999.data
Size 36B
SHA256 c30d9b6998ddf6a5e22d9b11d00c1978775182ddf493cfe1b2e8fe84aba057ac
MD5 a7bab6b3d02400857927dabae64a72e0
SHA1 1c67c98b6cf1a70162e66782ffad66c2ef2e44b5
SHA512 c23deafc9aea6e0fb15ec23b514bcef21a35922d58ef6df1810d76ec2ba2e7051b012690e9ee128ed776c314a3fdf2adc70eabef497fdab24f43129083cf4941
MD5 SHA1 SHA512

Submit Download

refuse_inject_dynamic.cfg

Path F:\Tencent\QQGameTempest\hall.58955\config\dynamic\refuse_inject_dynamic.cfg
Size 781B
SHA256 6d4ecfad5cc8e32a454e1034c403a4f4bd59082f5ad1117ace6d47c5d41fdc87
MD5 a7df4f73879d7ec9f9bbbd5284d1090d
SHA1 0a8c55cf9188506145dc84de715f97939d20059f
SHA512 094f3f501bad2ba98fb1f7fb0da67793871ccc6387c82a670bcf031bff49be5a2b32cd1f0afd125419fb89b9794f214c3b4aee36154c6bdd72a9e43e35e3dc6f
TLSH
T19E012669E604C9C631B29E06DF5938ED30302C21D71D35CC818EA910DFCD2D7E7880C8
MD5 SHA1 SHA512 TLSH

Submit Download

servers_ip_config_original.cfg

Path F:\Tencent\QQGameTempest\hall.58955\config\dynamic\servers_ip_config_original.cfg
Size 1KB
SHA256 62591be09ac2ba8d1dc2b108f2ef54bdf45c7ec830cf5f5eec9ba2629068e7a2
MD5 8db551bd8226c9108498e3837c110b54
SHA1 2a6ec47835277955943cc335ebecd1df8c620ce4
SHA512 109506c3f7d60685848cf5ec23977a936d5ee79b4e9b16cb8dda07b9c174f32ef17886e799c1d2e8eef580373ab320a39f983239734ea660ae48ee5c3ee24c51
TLSH
T1513182E733CF86AD84E5895E1139D4DA20EEC08FD1985CF639DA7A95C8B4131947630A
MD5 SHA1 SHA512 TLSH

Submit Download

AmdSupport.ini

Path F:\Tencent\QQGameTempest\hall.58955\config\original\AmdSupport.ini
Size 39B
SHA256 146bd83faa18045d4dbf62fb089575bcbd84086fcc0c26c8a325d79aa8c783b1
MD5 230f19b5af4265dd9df774859b7a1fea
SHA1 c0eb7bca7cc68d1109d89fb41536db33ac8fc305
SHA512 1027e953536c3d4300d770c746d8af13603fcc03458dc4acb846a8d0451bbcf0c565c864a5e6bcc2908751d790d64d48ecaf9d9f0962e68ba946130928836d1b
MD5 SHA1 SHA512

Submit Download

NewDirSvrs.ini

Path F:\Tencent\QQGameTempest\hall.58955\config\original\NewDirSvrs.ini
Size 1KB
SHA256 a89c7901893d7a3dde317d45eefc07931fe0f7def0e5e19e2c1b88344d210eb9
MD5 62ee286c5a88fdd85355c5488cadc88e
SHA1 ea87f6118b01f8cb3f58e43d4b2045f64ff51707
SHA512 8310d1c30a3e14e13b57ecb7b47785811c5fd72577a7b2dcab0206fddde443c4b445dd5d977cd64f9d5104e0ebfaaa08d20fc3d193646f584686ffb8455e401b
TLSH
T1192191CF68573E9A18B9BC7D42B019AA79D3053DC8443173A5F53B6409DEA32AC4A81C
MD5 SHA1 SHA512 TLSH

Submit Download

Runtimes.xml

Path F:\Tencent\QQGameTempest\hall.58955\config\original\Runtimes.xml
Size 8KB
SHA256 62c5fcc278d25195968fd055e8d8963f1235b1ea5fe11f1bb21e94bfb41120b9
MD5 543f7363b269c1cddf4f634043eb1648
SHA1 df862ae34a32ca354b35381611693b018c9bd579
SHA512 af3a21897f4d162f6ff0c682b3faba9bf455bd7287946d4cc3a5b9ca8f0797d773e23fa76c82ba15ce4efe247868a70df103a5828772f9fe12f962e266d54820
SSDEEP 192:7Q1v5XfpsIRz1V9e9z8xBSGRdiKszpSQ3bqH6pGv805txmRJ5zWjBOBUp4vE:7QR5XfpsIRRV9e9gBSadiKszpSQ3bqHX
TLSH
T173022F04F66AFD7A8121163E2A751D8523AE475F334E52C4E4BAB0325AD34572D3D3B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

update_svr_cfg.data

Path F:\Tencent\QQGameTempest\hall.58955\config\original\update_svr_cfg.data
Size 383B
SHA256 3ef044588d6495c9b039ac39d83a461aa14ca55da5f897d1a0acf5223919f0e8
MD5 1dd0484411f98449dc990f42ee8946ab
SHA1 ab56dd493df5084d247342cd4cdac7e20236bdb1
SHA512 606ba1ffdf5f0464a513ab70a8bd5e3278c926dfc430f98729ddb5936e1b8fcd1645c8b518a2b21b55d48be83533a628cdceb1b89f54a9502a7335b86c199752
TLSH
T13AE08C15D4504E1B8EF2615E7E8A9621F0A4A30F40C0849BBE7F06CE2FB8637C465A1C
MD5 SHA1 SHA512 TLSH

Submit Download

settings_config.json

Path F:\Tencent\QQGameTempest\hall.58955\config\settings_config.json
Size 7KB
SHA256 e998d14081f1995a29f090cb8e995e5eef6e90f31349b97dd805261641f3cba7
MD5 691a0b5b953c8f654c9925a6b907b994
SHA1 c01aede193cca1f6a0f843efb2297a69f0c60795
SHA512 442d3a13819163f3d8b8940eb1856b3c9f0b65f4dfbf862e9dbe9779d85e3df9567ad6b2c110dddebb1befbaa663fe7782b0c39dc7ea8d8556af1f09f003af4c
SSDEEP 192:LWpuL3t0OSEijFceIu0O0JoGoCzb/JHIMdcxRYzlBIbRi4LaJ2KLyF5U:LdzHfCjEb3N
TLSH
T184F1618CA2F57244F2E63A532FB619654F36BFD1582AED5EA0C2DC8F18B2B017410727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

download.dll

Path F:\Tencent\QQGameTempest\hall.58955\download.dll
Size 496KB
SHA256 30e1644020167321050c121e4f820ad8b969a14e04798222d34d27ecfeaa64df
MD5 edff2efb0636e3f25d83e50fe04c9bd7
SHA1 4e46a9681abe00646df5b6192b746484ead649ea
SHA512 c10c3b95cf3991768e64582c89b28874178463baec8131ee7c8386cc424ae1ff548fbf3930e6361e1dd235576f0f0513f8977769faa6c70d662dcd9abb1ddceb
SSDEEP 12288:xS0ISiL1r5+n06tNM6AstuK3ALHygfQIVW:xS0a5+nrNtuvHvFW
TLSH
T11FB48E20B186C032D46E4271152D9FFA62BCB9600BB959DFA3D41E7F5DB05C3AA31E27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

downloader_module_cfg.bin

Path F:\Tencent\QQGameTempest\hall.58955\downloader_module_cfg.bin
Size 1KB
SHA256 351e5009ffb737c5085965c7169cb7c1eea7c742e19f35ce6253335a6af217d0
MD5 00a2784ed5ee1d73a2fd7a616ba1b3e4
SHA1 50f1909bc9d4ce4be3b5acff2390e7ecbb1d2c76
SHA512 102ce839fec9bf6484bd73cac3fb6012e208f6dddfa305065c4a44c5126cdf29ea57ea18b2510b5d29f185847a9722c19bceae62c2bb9f47e9d330a207d391d7
TLSH
T18731D73230096A866CE062C584173175A88A3DD91F859A4C365B136AD0E883E8089C21
MD5 SHA1 SHA512 TLSH

Submit Download

framework.dll

Path F:\Tencent\QQGameTempest\hall.58955\framework.dll
Size 1.6MB
SHA256 c7cbccc6126de1f5be4bd54fc7d442a44366cba1c1946827935ca7a838d6eb95
MD5 729ec0b18b5771b0d47c0e898b0e4506
SHA1 9c148f6b2b386916c847da57f17f08b2e1b42ec3
SHA512 6fc1e916796f5cdd52abcc1a1793d606532f5effd5920f8c1011e411d6a49e6a2e183dcd81b64ebfb5bb07c1000a32518b3240b6720a98a01f55028a50690adc
SSDEEP 49152:pmB4liXA1UBlNh6Ai6gc9ZCyu4gQe90jTP/mdqPxCKXb:A0KDlNh6ANgcPG
TLSH
T139757B213646C071D49D42F06A3DAFEBA2ACAD741BB545DFB3D43E7A98301C22E31E56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path F:\Tencent\QQGameTempest\hall.58955\register.exe
Size 1.4MB
SHA256 af806ae0afebd573deed11f624043616e7ab236cc2f23a017f06f3cba269bcec
MD5 9a60c946a15c28f0c640dd5556ed3e7f
SHA1 5acbe35b2ab382593452316d8a14ce05c95547cf
SHA512 d61d3e053ec75f663e7405cb61bc0c52993e02cbb722842d8bba7433d8987e41b07a040fbb7664f428788a6a78dea9ac63cc2b20f1f62630265d3c834ba783b5
SSDEEP 24576:Si36bcToN4VUX0wGqavd5d+ZPUAgDrEIrfLFVzNkcNb/SVLXiaqhSMXlL2JhQHaz:ZcU2aUk5TpD3/NkcRSVLSatMOf78S
TLSH
T14F659E1077C3C0B1E89142B29129EFBF567C6D25176284DFE7C42F7B9C206C2AE35A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

企鹅跑0001.png

Path F:\Tencent\QQGameTempest\hall.58955\res\anim\企鹅跑0001.png
Size 4KB
SHA256 1e56c5d96eada369eef17d2512fc641ac6e0bc60575dc73b20e19b0e91e024aa
MD5 e586349b5a04ed9955ffb602fd23f619
SHA1 4b9ef35a9f50c69c4dba51c52ccbd9a18423ff78
SHA512 a3fbdc65e0dac11100e22aa6ef0118ae136489bc29e9ec854b2f32664bdfc1a288b31636b4f86714c3f7a0828e2f68a03f74c6b2560efdcc42ca02016bc1a18d
SSDEEP 96:0+KEHqLm54Vm6DsAr7WEdAc8XbnpfVaWwUqm:0+KEHq0J6LhCrpPwUn
TLSH
T17A915B972C8FE5950DC838974511A22888E3ED0DD279BDB1210BFA2A4130995A0FBB6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HLDou.png

Path F:\Tencent\QQGameTempest\hall.58955\res\approom\HLDou.png
Size 805B
SHA256 a98cb0c13f83711a89f3536ada7c12473464f3534d0d285942cda34f9193026a
MD5 eac13f2a63c4dcc715317ec8d673028a
SHA1 d04f87a834ae5ae9a12bd8eaeec483efe95403c7
SHA512 242bfb4d619c4f5391a71192e5565456d15b50fb02c5521f92b5bc92d999ca92049a4f7bb03d3d2aac2969f0b0d7085cd3b861d6849f1c364b44b5131529bc46
TLSH
T1DF01866770EC7D58C54086EAC902C0401C4B6DCEE8211508F391C4563299F1694FA357
MD5 SHA1 SHA512 TLSH

Submit Download

checkbox.png

Path F:\Tencent\QQGameTempest\hall.58955\res\login\checkbox.png
Size 1KB
SHA256 722e2809cf06151f086a05bb3b6ecc0d0c8f557c08ffd0efccc15e26a1f870c6
MD5 6e0acd5ff8fba3566c5971ed0ec0a07f
SHA1 c4a5a6c4c5bcdc37b10acf6eb60a9dfb9b354e73
SHA512 5e0a24d9ce1a83d57a1d14aed5a32e577493bbb67d0a8afff33e6aa5c9c0fb468525f9802af5425d3f3aed0a31aa12781082a2c4d5b958d2b71df0dcd8e8b66c
TLSH
T16511659CFF413994A5E98E8216FA5027DE374640CAC0F025FCCACD266C325F780998CB
MD5 SHA1 SHA512 TLSH

Submit Download

close.png

Path F:\Tencent\QQGameTempest\hall.58955\res\mainwindow\setting\close.png
Size 1KB
SHA256 b73340fc589473acd97cce440fac75b217caee47394522d968ee14edb884675e
MD5 151d1ec77cacd7eec128770f9dc5fd3a
SHA1 ccd881802664e9d65e87c981989da45db021f347
SHA512 3e01d36225acd54c67a61ffa2d1accd505105cb324c028fac120b082bd3ae92065972fcb9859ba20a36ef6d5cbcdeb14d619288107629d48caa50621f800d290
TLSH
T18B31938BF5827D82F68DA65214FAA0338D4B0890D890F4D2F4E6D18129382FC042C8EF
MD5 SHA1 SHA512 TLSH

Submit Download

luxury1.png

Path F:\Tencent\QQGameTempest\hall.58955\res\vip\luxury1.png
Size 3KB
SHA256 c4cf246a7a59419a6f998eb025bc1ff75d949b3a00e50306ec1c3a32d37c097a
MD5 1c9fafc6fcb0a6d598730bc1df559d65
SHA1 3bf9a1d0486ab13a0fa5b9ffac139a4ebe6757a6
SHA512 1e1b295dede3ea8e3576225a96f69c529c33ab0897132f43b05f02068c676579964ffed975a44983a82b4e3955023651bf7de465a5aca53eac44f8eea1d2ab4c
TLSH
T128617C89A044856E140F095A142FEE018E3BEA94C7A91E1C9CFF420F8730D553C37B6B
MD5 SHA1 SHA512 TLSH

Submit Download

luxury3.png

Path F:\Tencent\QQGameTempest\hall.58955\res\vip\luxury3.png
Size 3KB
SHA256 e744d8a820b689b9879f0a84f331c05fc0a2f103fd21a3b31d5972b475fc5e05
MD5 6c176a7506aa1353abf9f29205342521
SHA1 6c8490f9a6ff3b701a13b30f00f8b2bd69f08703
SHA512 324e019a4ac99a5f424faa0a4d327aacb2c432bafa3b8d9e76db50f4c8781a602fa80f2d1ad442bfb3d24941a6c7e09b7e60ba2f831d3d93b48f686724719c71
TLSH
T164613C49A8090D2E110D0BA9256BDD068B67DB98C3452E28EEFB838FC6309413D75F6A
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray.png

Path F:\Tencent\QQGameTempest\hall.58955\res\vip\luxury_gray.png
Size 3KB
SHA256 3dcb87ed9062f74ed0f1508e65c5d88cc2a3eac31492f5eb30fba6e70e48270e
MD5 f9f35391980cba2d2e9a25e6a6555772
SHA1 437ae3c8cefba793704c2268bf0f3024db7d92cf
SHA512 c4a3b8b6a9673f78d0d4aa614c35baf0db60ea3216c7c5d2dd05c8e37cd44450dc7abf373b4f383ffce27b1cbbc005bb7abd6adc9752e4a73831132f08d74f88
TLSH
T19B616DC8B844445F000D4BBA756BC9068A1BD7D883942E08DEFE435F9A24C503D35B66
MD5 SHA1 SHA512 TLSH

Submit Download

luxury_gray9.png

Path F:\Tencent\QQGameTempest\hall.58955\res\vip\luxury_gray9.png
Size 3KB
SHA256 ec436f3496a079add2daec427550b98e3220cbb9bc8dd99bd863aba0e45bcd10
MD5 4577bdfb15f67894d72f11e94c2f015d
SHA1 a2da25839badc33c2d4c9a1dcec72276be992d44
SHA512 132f849f4ee131cca8caf2bfd667eb4e96e63a5d62de1da9d81a5cb6b73c495bc1d83ef99d15dd7ce27224f6d773d513fc00e5c6267a5700f98cfe6d757cb152
TLSH
T109616E8FB800441A040E0BA935B7DD084B1BF1D483992E1CADFF464E8625DA13D72B72
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1296-6740-0x0000000007680000-0x0000000007681000-memory.dmp

Download

memory/1296-6739-0x00000000074B0000-0x00000000074B1000-memory.dmp

Download

memory/1296-6762-0x0000000005F70000-0x0000000005F71000-memory.dmp

Download

memory/1296-6670-0x0000000007660000-0x0000000007661000-memory.dmp

Download

memory/1296-6668-0x0000000007670000-0x0000000007671000-memory.dmp

Download

memory/1296-7484-0x0000000007AB0000-0x0000000007AB1000-memory.dmp

Download

memory/1296-7483-0x0000000007690000-0x0000000007691000-memory.dmp

Download

memory/1868-6774-0x000000006EDA0000-0x000000006EDB0000-memory.dmp

Download

memory/2140-6456-0x000000006EDD0000-0x000000006EDE0000-memory.dmp

Download

memory/2140-6459-0x000000006D000000-0x000000006D010000-memory.dmp

Download

memory/3684-6773-0x0000000000010000-0x000000000002C000-memory.dmp

Download

memory/4572-165-0x000000006DE20000-0x000000006DE30000-memory.dmp

Download

memory/5744-7515-0x0000000000010000-0x0000000000017000-memory.dmp

Download

memory/6384-6324-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/6384-6325-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/6384-6322-0x000000006EDA0000-0x000000006EDB0000-memory.dmp

Download

memory/6384-6323-0x000000006D000000-0x000000006D010000-memory.dmp

Download

memory/6652-7218-0x00007FFC27870000-0x00007FFC27880000-memory.dmp

Download

memory/6652-7202-0x00007FFC45BB0000-0x00007FFC460FD000-memory.dmp

Download

memory/6708-6377-0x000000006EDA0000-0x000000006EDB0000-memory.dmp

Download

memory/6708-6381-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/6708-6380-0x000000006EE50000-0x000000006EE60000-memory.dmp

Download

memory/6708-6382-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/6988-6796-0x0000000002E50000-0x00000000038B2000-memory.dmp

Download

memory/6988-6433-0x000000006D000000-0x000000006D010000-memory.dmp

Download

memory/7052-6392-0x000000006EDA0000-0x000000006EDB0000-memory.dmp

Download

memory/7052-6397-0x000000006F120000-0x000000006F130000-memory.dmp

Download

memory/7052-6441-0x0000000004200000-0x0000000004C62000-memory.dmp

Download

memory/7052-6398-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/7052-6399-0x000000006E160000-0x000000006E170000-memory.dmp

Download

memory/7680-4044-0x000000006DE20000-0x000000006DE30000-memory.dmp

Download

memory/7700-6455-0x0000000000010000-0x000000000004E000-memory.dmp

Download

memory/7744-7227-0x000000006D000000-0x000000006D010000-memory.dmp

Download

memory/7920-7468-0x00000000043B0000-0x0000000004AED000-memory.dmp

Download

memory/7920-6465-0x000000006CD30000-0x000000006CD40000-memory.dmp

Download

memory/7920-6466-0x000000006CD20000-0x000000006CD30000-memory.dmp

Download

memory/7920-6865-0x0000000008AB0000-0x0000000008AC0000-memory.dmp

Download

memory/7920-6866-0x0000000008AC0000-0x0000000008AD8000-memory.dmp

Download

memory/7920-6860-0x00000000043B0000-0x0000000004AED000-memory.dmp

Download

memory/7920-7470-0x0000000008AB0000-0x0000000008AC0000-memory.dmp

Download

memory/7920-6864-0x00000000057C0000-0x0000000006222000-memory.dmp

Download

memory/8312-6460-0x0000000000010000-0x0000000000044000-memory.dmp

Download

memory/9132-4197-0x000002427A720000-0x000002427A72A000-memory.dmp

Download

memory/9132-4190-0x000002427A390000-0x000002427A3B2000-memory.dmp

Download

memory/9132-4195-0x000002427A640000-0x000002427A65E000-memory.dmp

Download

memory/9132-4196-0x000002427A660000-0x000002427A712000-memory.dmp

Download

memory/9280-7485-0x00007FFC26240000-0x00007FFC26250000-memory.dmp

Download

memory/9280-7517-0x00007FFC438B0000-0x00007FFC43DFD000-memory.dmp

Download

memory/9468-6664-0x0000000000010000-0x000000000002C000-memory.dmp

Download

memory/9488-6669-0x0000000000010000-0x000000000002D000-memory.dmp

Download

memory/10140-6732-0x00007FFC26240000-0x00007FFC26250000-memory.dmp

Download