Analysis

  • user interaction
    yes
  • max time kernel
    118s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 00:33

General

  • Target
    StarDesk_1.4.4.exe
  • Size 108.2MB
  • Sample260910-awnd2ashlc
  • SHA256 2b5c7a0cd059063479e8bc9c54b51413797a23086a4244d39015b6f1f282ad55
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\StarDesk_1.4.4.exe
    "C:\Users\Admin\AppData\Local\Temp\StarDesk_1.4.4.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:2788
  • C:\Program Files\StarDesk\StarDeskService.exe
    "C:\Program Files\StarDesk\StarDeskService.exe" --service
    1⤵
    • Executes dropped EXE
    PID:5304

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MicrosoftEdgeWebview2Setup.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\MicrosoftEdgeWebview2Setup.exe
        • Size 1.6MB
        • SHA256 c4985b3d50104c12a535e45eca320c1dd462041ece252468386ef0b17788be71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nevaudiosdk.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Nevaudiosdk.dll
        • Size 1.3MB
        • SHA256 99544f558ddbcd5718e55bfb47d0f32506a1e0f9767f4deffef7989cf749e001
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PsExec64.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\PsExec64.exe
        • Size 813KB
        • SHA256 edfae1a69522f87b12c6dac3225d930e4848832e3c551ee1e7d31736bf4525ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Core.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Core.dll
        • Size 5.8MB
        • SHA256 44d46195963b1efd2cd3039a34164d7fe14d6d1831a3fe9ff1ac37a4016c599d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Gui.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Gui.dll
        • Size 6.5MB
        • SHA256 870047b3053a41780c542775602535e1dc08b74b92cf431cace43f25ff4c2c6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Network.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Network.dll
        • Size 1.3MB
        • SHA256 37ea4e109ad3106177d05af8590686874fa6bec31c63b0dde06fa1999bd77f78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Svg.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Svg.dll
        • Size 326KB
        • SHA256 924745636f305670d19d7d5cc04667f7f235d0a8eeb12cd7f2521ec44750720f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Widgets.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Widgets.dll
        • Size 5.3MB
        • SHA256 d8386fcc190ac03bd9b4477b7bac23c3ce07bebec1513c9c3806597df732ab40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5WinExtras.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5WinExtras.dll
        • Size 234KB
        • SHA256 aae429906afc41c7d6265de26b119cd8623dc3326881288e9deb62e5507037b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Xml.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Xml.dll
        • Size 213KB
        • SHA256 80680ff0528b939c78b283098eb0088b88c5aed508369fc3c6752d280ed2bdc3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RemoveUsbDrviers.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\RemoveUsbDrviers.exe
        • Size 270KB
        • SHA256 cea582a00fba4e08eea76f7ba35362bbcb66c6ee72882ac71e8ea88fb7430686
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StarDeskHealthd.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskHealthd.exe
        • Size 12.2MB
        • SHA256 cebd562644e0eb8ad52dc9cb621971955966cdfb41b934887e96d3d4570cc6eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StarDeskLauncher.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskLauncher.exe
        • Size 4.1MB
        • SHA256 081556284a9aac994276e11fed6b7ebc5c7177bb4faa726c9352500c5b724ed2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StarDeskServer.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskServer.exe
        • Size 29.4MB
        • SHA256 696976ca8f9cd72218eb05f156bf73bdacfaaad0aa9595989bdfe4b842409faa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StarDeskService.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskService.exe
        • Size 3.3MB
        • SHA256 7b9b13a7f13b71b75736b8ebf471a111b2ab5fd2c981bbff8413bfe606533fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StreamerCodecDetector.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\StreamerCodecDetector.exe
        • Size 3.3MB
        • SHA256 deb1d174a95a2ed24145a89883b7ccd71d8007bc835878825716d822d623635e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uninstall.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\Uninstall.exe
        • Size 478KB
        • SHA256 88880c9b0785eda38d42736ad2f4efcbc6385977e1278d7958d28ebd5651bf5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Upgrade.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\Upgrade.exe
        • Size 24.7MB
        • SHA256 89a7175fa316ca4b24b13f519f295f0efd5daa72c6b8ebcd5a5d30e173e0a794
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WebView2Loader.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\WebView2Loader.dll
        • Size 162KB
        • SHA256 609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        XInput9_1_0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\XInput9_1_0.dll
        • Size 21KB
        • SHA256 149c6862d8e47d38331ad3f38c4c81df98089d1a0cd9287a3455ba00ccb4ba87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-console-l1-1-0.dll
        • Size 18KB
        • SHA256 4cf1cc0dd16677d42e007886480407a2d5c252e00ea44d7ae9b09db3f482034b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-datetime-l1-1-0.dll
        • Size 18KB
        • SHA256 5e9c97c5d37b627205cad6b5520557d5c1b27992e5f2a216e8385e24785641c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-debug-l1-1-0.dll
        • Size 18KB
        • SHA256 adeead709b86084cb708a1bcdd1bba0048d37c07f960d2f92a69860dee5a8a40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 18KB
        • SHA256 74c45e4a9c0535be154795a143af24211288f490bc957a7a51348efe6a623575
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l1-1-0.dll
        • Size 21KB
        • SHA256 f6ccd74ccea1fda8173f737e8c80c51afa4b250d5effabaf7191c0f510f2fc29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 7f58f49a59c4c25c733b9745f52abd5b03e2c79625ce610550dbba8835bb5623
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 e1fe386e5b0f7f56ff2982d6959269041ae618ad74506db5887ade31e500841c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-handle-l1-1-0.dll
        • Size 18KB
        • SHA256 ad2be5da49cb7fa20865ad5db4b6f2efc4acf9d48a1484e5ade203e47842ca74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-heap-l1-1-0.dll
        • Size 18KB
        • SHA256 9f6ada34f789c1d36c2a0e3e9280c2fe7439cd71afbfe0214b8f1fee4f51b057
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 3d7ff518bb79515c4dc8dc7f2e255aa0c19b0314611a0b5da1249d4de413931e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 18KB
        • SHA256 857b6f69ab5a0ff7853b23d8de61b350af6d1b78bbab0ead8eea7ed92377db91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 8fd1d49ad7a04880004c5fdf9f88118f236d2d08fb2d09e9d6ba33143b3a69da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-memory-l1-1-0.dll
        • Size 18KB
        • SHA256 db1893e5adafba187a522488eff2fa20b509d43f59047a5e915674fa0c7c4e08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 18KB
        • SHA256 ae536d04c9f706894b51febe831afde7f421a9dc5e84d762d82a7bceef1d17d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 19KB
        • SHA256 39634e5c748c39f4c439aa3b76fe9149b236c6d10ae61d793c70a5d6e1567d40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 20KB
        • SHA256 8e79781634019a7fa7b03ab98846e73e48fc135f7a36625446ea81d1615ae951
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 d20bf4086cd6bae61a2546e2aaf6a1b3fe4e7c24422d13c8c05e1853dcf08973
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-profile-l1-1-0.dll
        • Size 17KB
        • SHA256 62c572488d41a3c7ad827299354e4e8a3727d9c1259ac667c142ca80c8755f99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 18KB
        • SHA256 733829e7aebdf3d4c8bd407d2ab84f67bb3044f82b41548cc11b573647b62c12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-string-l1-1-0.dll
        • Size 18KB
        • SHA256 e5575f0172daa016cba2c55a67dcd11d4b2598c28a60a5167089cbfbb262b884
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-synch-l1-1-0.dll
        • Size 20KB
        • SHA256 e3243a262841eb09e2baf5969568174efa7a3485087ce8fd8c1afe8ad3761b0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 68a36ccfb88ddba45e3c02190be4f2e09a37ba6883cb63c2418aa68ba0e13401
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 19KB
        • SHA256 768f92f8f1b26eed576cc7a65bc1817a6ee8e04f1e7a2166dc46946c93c9c6af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 03faaac34a7d25b8829da2508a4f8b476b5d5b895267f2b9852fb02ccf31da42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-util-l1-1-0.dll
        • Size 18KB
        • SHA256 082f08bfc404992a1056dad41cdbc014b35bfb8e60f9819d728d5cbe5841c428
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 055cb2699194f1550c5ab6b4412bf8f970a5878df6da14f034ab7c35a1bd3787
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 0dd70eb1936ca4cdf2d9f21798f85acfb6cb061cff04c60c9c7e4004cbc14c0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 dd6b5fbab8e14874e1d03757cec08df5ada023877377612911619f5b52e37709
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 3a2c1d0c99a9e49ad974508cd67587b0f017086973decbe787c779ae57f0e011
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 4e07b35c97f71fea5c93dbfdfc030bfbc05aff218855fda16d2856cb7153e98b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 9b299b18fe97191e3875d173b2d89295cfa8d006a0c9328fae867b8da9bdc23b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 177779ff31d2977ea5bb583d3fc50209edb64bbce8c40d6d14e34ea4446266e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 e4152a6d181f5ebbd79ebf0f441d95073aa0aaac8f5a6c77d9ab4ab17cfc353e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 680fd6211bfa8f0b591307d883410cfc3240702399e3c86b72213593f0e52216
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 59752e277397617768da4b76f3a839a7c9280c20ab3fe7be30de71399fc4440f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 b5a3c4681ff8c09ccf32e0e0bf7d183293b5171bbb6512fdb90585d6d88fbd70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 e3c4e66be42bdba47b3186f1935bf852620b9f6c507cf56321e21714814d1ea2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 0595b77b356f9a1dfba92515cb15d227b7039cb8beee3b0ca6be15b5f3913dd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 b724edd5f89b6c0b6d386d8283b3fd6fdb7563d4e886537d3d77cfa5e81128c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 a075f5c8dbd97be408da070324e661d0ecef76deeb8c77ac7a2161083140ccfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aria2c.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\aria2c.exe
        • Size 5.9MB
        • SHA256 8fb0ddd3cff741d97b87b6af1ba0659a8e7c1e1f32e72bd3fb4aadd5b031e861
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleanup_utils.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\cleanup_utils.exe
        • Size 10.2MB
        • SHA256 301e3ce173bd54a0b05499c364909165ed6dff52017adc33e40389f97798abd7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        devnode.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\client\devnode.exe
        • Size 722KB
        • SHA256 5e83bd4c49fb5178c80fd0783e5cfbad9f1abd94cb0347da1d9439dc86b0a1a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libusbip.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\client\libusbip.dll
        • Size 568KB
        • SHA256 9b2dce39ff432ae4c02815efc8e7f0d1a1e2a36065d658a4f84e54901af227f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\client\resources.dll
        • Size 12KB
        • SHA256 18df756ce0d58d726798eef881cc726f9b92912fdd4c4c3da04cfb6dd299d16d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        usbip.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\client\usbip.exe
        • Size 1.9MB
        • SHA256 14e71406a3b095eeabb8d4b5d7d7f2184df8924378d33f4eeb8072a23ca06814
        • MD5 SHA1 SHA512 SSDEEP TLSH

        comctl32.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\comctl32.dll
        • Size 570KB
        • SHA256 b8102cec6c4e0b4bd0d06d40ad5ae002fb8d214f7cc8481fb6ddfad67bf9c1c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        concrt140.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\concrt140.dll
        • Size 324KB
        • SHA256 fd85c7e6cf5493cb29c21e65820c3b23953a88fed513a6a51010d837678a86ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty_bridge.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\conpty_bridge.exe
        • Size 61KB
        • SHA256 50e42c650497884f4e99319294056aeeb236492bfdb2da8ad1da167b593ecefd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crashpad_handler.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\crashpad_handler.exe
        • Size 868KB
        • SHA256 a090b5abe9460afe8f1d093269fa086b3241edd465d9975f6bc8dbd07354b786
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\d3dcompiler_47.dll
        • Size 4.3MB
        • SHA256 8c88c162010a8d6b80f2c0433d4ce973ce626afcbc8da5be68bfa2ba68341eba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDIddDriver.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\drivers\SDIddDriver\SDIddDriver.dll
        • Size 66KB
        • SHA256 a82728d9a3dfe31fc9ba75072425cbe7c5cbbcbfd7ba75c7eca6ff076b2d9b68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        devcon.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\drivers\devcon.exe
        • Size 90KB
        • SHA256 b3fd009944347ed2f515626128ea018d054d89840be6098eafbeaa745cdaf99f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3-x64.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\libcrypto-3-x64.dll
        • Size 5.9MB
        • SHA256 66d319b5defce437f62e415142c9fe409a4b7a5a36cd2d42ee555e97f02840c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3-x64.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\libssl-3-x64.dll
        • Size 767KB
        • SHA256 114b12c0245082b5ecce15d8da382bd8da01b417770cc0ad036f96e2bc26e1f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140_1.dll
        • Size 30KB
        • SHA256 af589d441cd97638b1a0b9192a4014c52b64b35ecf5437caa65f27b3583e07aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_2.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140_2.dll
        • Size 200KB
        • SHA256 16e3048f14be7656f684a6c452077d49b7d97ffaa46d5e5d806a1925a014d635
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nemu-api.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\nemu-api.dll
        • Size 4.7MB
        • SHA256 eed24619771bec66fb4dde3fad8b4d3fa2430e1c7d0fc5a8b15576880dae9218
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nrd_renderer_ipc.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\nrd_renderer_ipc.dll
        • Size 180KB
        • SHA256 65a4015b80019507e651b5c14d71db99933f6ed845a409d81923713600eb7083
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qgif.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qgif.dll
        • Size 40KB
        • SHA256 62500f6c40884a1d2d2dadcb949aa19c4a20181445c108aae9342b07d83515e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qicns.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qicns.dll
        • Size 46KB
        • SHA256 fbc295f178160271da65900f73d36e95b0a0721c6be39614f9364e3055296a39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qico.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qico.dll
        • Size 39KB
        • SHA256 198d273ec01b37980c20fbba62373c641ead670d64d11b5a9240f8608f69bdc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qjpeg.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qjpeg.dll
        • Size 448KB
        • SHA256 69fc19244f0c4b84d8ef0afbe55a50d1ea315c4863b8001d79357ba1a91535e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qsvg.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qsvg.dll
        • Size 34KB
        • SHA256 72ffb62f5d1af139bd8f74c34fc1bbf30db85b048178f2b65bbf05fd689bf1a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qtga.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qtga.dll
        • Size 33KB
        • SHA256 4b6314d08cf65ccd582fbfc03c564c36b597c579836f4b32dd76ad0af733a573
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qtiff.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qtiff.dll
        • Size 396KB
        • SHA256 e740a1501655d9486d6abd56aa4282879c94dda706e3d601dda483d3eb28ed60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qwbmp.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qwbmp.dll
        • Size 32KB
        • SHA256 674665dceb886c7c7189fa8b0f80655931c976e5201851b4a8405bcbb86c5163
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qwebp.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qwebp.dll
        • Size 513KB
        • SHA256 65d04162598ba514a82b71c5da1548d5d99ce795266f4cb3804d8dffbf60174d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qdirect2d.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qdirect2d.dll
        • Size 1.5MB
        • SHA256 d77988ffc12c4fa9ce2dbdd9768deeffc73365048ccc8b0e930cb4c5cd45b661
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qminimal.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qminimal.dll
        • Size 863KB
        • SHA256 35d02f7eae99e953ed8d63d7a0f1e28b2484c7d9a0e6b4bfd486d18cd165370f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qoffscreen.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qoffscreen.dll
        • Size 778KB
        • SHA256 00dd36b1b727cc22538d12ea32798c33fc6896761787045731540eed69381e0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qwebgl.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qwebgl.dll
        • Size 477KB
        • SHA256 c77f478f6a6f6150dd09ae21df17f47eff1cd7755367ead169b9e9de38042ef7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qwindows.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qwindows.dll
        • Size 1.4MB
        • SHA256 807c71d3a8af4c1a22d144c5520af583784f8554b8dc37ce7d9d7d39f4b72f14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        remote-nemu-api.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\remote-nemu-api.dll
        • Size 4.7MB
        • SHA256 4464b49f9a7a87de666cab53d082ac57722d11da2870b8c2afd47e35dac82d07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        usbipd.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\server\usbipd.exe
        • Size 8.0MB
        • SHA256 fc3ac6076b678b409b1d48788efc755a9463c330f86b10c4c090cafa19dee4cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        stardeskmgr.exe

        • Path C:\Program Files\StarDesk\1.4.4.9323\stardeskmgr.exe
        • Size 1.5MB
        • SHA256 45da2f9c6717b43905072526d4ec760b0c0d85a89892b42efda895e348d0a8c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        streamer.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\streamer.dll
        • Size 17.1MB
        • SHA256 bd835a22bc195fddb8ed88badb1ac2274222496c9300f4407aa8bb3410284923
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\ucrtbase.dll
        • Size 969KB
        • SHA256 cd48756e96740f84a2aacd6c308997a4a36a953cd77f50cb54c27915a5c5c302
        • MD5 SHA1 SHA512 SSDEEP TLSH

        usbipmgr.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\usbipmgr.dll
        • Size 818KB
        • SHA256 ff6d2549223b68507836e1e5907c3e7825cb739a1543468d7ec25564f41a30bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vccorlib140.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\vccorlib140.dll
        • Size 357KB
        • SHA256 6373f18233d8b3a6e85ba8568a38dd3cc0b50ad854f61af334834e39dd6dd195
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\vcruntime140.dll
        • Size 83KB
        • SHA256 6cadb4fef773c23b511acc8b715a084815c6e41dd8c694bc70090a97b3b03fb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\StarDesk\1.4.4.9323\vcruntime140_1.dll
        • Size 43KB
        • SHA256 3b792da47040c3b3e0804cdc5153eef4e802b6975963029d8dc360cb824a7b62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AccessControl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\AccessControl.dll
        • Size 23KB
        • SHA256 1b4d25f2f544f520c20493ee1e9ac7b3043aab88e4ff87953390d357de4c2096
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogEx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\LogEx.dll
        • Size 52KB
        • SHA256 cf7b45a69a13551db95dcdefc8bfdd4128e1c1db67198347b43469b69c36b844
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SimpleSC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\SimpleSC.dll
        • Size 1.1MB
        • SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\System.dll
        • Size 12KB
        • SHA256 b6298637fea88a44e4de3f6b7fe254fb73857c08f1dcd8bd1af6f9eb5e6e7e3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        modern-wizard.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\modern-wizard.bmp
        • Size 25KB
        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 37c9c3b2f11c5b8e70fbcbba99eb58a99da35388430a43612d92e157a9c076cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsProcess.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc57B1.tmp\nsProcess.dll
        • Size 12KB
        • SHA256 44c14f1edfe7deef518264675e3e4edb6991d5ea0d50f0f6b18a819dc31bbcba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2788-13-0x0000000002CC0000-0x0000000002DDC000-memory.dmp

        memory/2788-3504-0x0000000021550000-0x000000002166C000-memory.dmp