Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    464s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 00:33

General

  • Target
    StarDesk_1.4.4.exe
  • Size 108.2MB
  • Sample260910-awnd2ashlc
  • SHA256 2b5c7a0cd059063479e8bc9c54b51413797a23086a4244d39015b6f1f282ad55
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\StarDesk_1.4.4.exe
    "C:\Users\Admin\AppData\Local\Temp\StarDesk_1.4.4.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:6180
  • C:\Program Files\StarDesk\StarDeskService.exe
    "C:\Program Files\StarDesk\StarDeskService.exe" --service
    1⤵
    • Executes dropped EXE
    PID:1388
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2332

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          MicrosoftEdgeWebview2Setup.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\MicrosoftEdgeWebview2Setup.exe
          • Size 1.6MB
          • SHA256 c4985b3d50104c12a535e45eca320c1dd462041ece252468386ef0b17788be71
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Nevaudiosdk.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Nevaudiosdk.dll
          • Size 1.3MB
          • SHA256 99544f558ddbcd5718e55bfb47d0f32506a1e0f9767f4deffef7989cf749e001
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PsExec64.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\PsExec64.exe
          • Size 813KB
          • SHA256 edfae1a69522f87b12c6dac3225d930e4848832e3c551ee1e7d31736bf4525ef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Core.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Core.dll
          • Size 5.8MB
          • SHA256 44d46195963b1efd2cd3039a34164d7fe14d6d1831a3fe9ff1ac37a4016c599d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Gui.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Gui.dll
          • Size 6.5MB
          • SHA256 870047b3053a41780c542775602535e1dc08b74b92cf431cace43f25ff4c2c6c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Network.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Network.dll
          • Size 1.3MB
          • SHA256 37ea4e109ad3106177d05af8590686874fa6bec31c63b0dde06fa1999bd77f78
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Svg.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Svg.dll
          • Size 326KB
          • SHA256 924745636f305670d19d7d5cc04667f7f235d0a8eeb12cd7f2521ec44750720f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Widgets.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Widgets.dll
          • Size 5.3MB
          • SHA256 d8386fcc190ac03bd9b4477b7bac23c3ce07bebec1513c9c3806597df732ab40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5WinExtras.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5WinExtras.dll
          • Size 234KB
          • SHA256 aae429906afc41c7d6265de26b119cd8623dc3326881288e9deb62e5507037b6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Xml.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\Qt5Xml.dll
          • Size 213KB
          • SHA256 80680ff0528b939c78b283098eb0088b88c5aed508369fc3c6752d280ed2bdc3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          RemoveUsbDrviers.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\RemoveUsbDrviers.exe
          • Size 270KB
          • SHA256 cea582a00fba4e08eea76f7ba35362bbcb66c6ee72882ac71e8ea88fb7430686
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StarDeskHealthd.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskHealthd.exe
          • Size 12.2MB
          • SHA256 cebd562644e0eb8ad52dc9cb621971955966cdfb41b934887e96d3d4570cc6eb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StarDeskLauncher.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskLauncher.exe
          • Size 4.1MB
          • SHA256 081556284a9aac994276e11fed6b7ebc5c7177bb4faa726c9352500c5b724ed2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StarDeskServer.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskServer.exe
          • Size 29.4MB
          • SHA256 696976ca8f9cd72218eb05f156bf73bdacfaaad0aa9595989bdfe4b842409faa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StarDeskService.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\StarDeskService.exe
          • Size 3.3MB
          • SHA256 7b9b13a7f13b71b75736b8ebf471a111b2ab5fd2c981bbff8413bfe606533fa5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StreamerCodecDetector.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\StreamerCodecDetector.exe
          • Size 3.3MB
          • SHA256 deb1d174a95a2ed24145a89883b7ccd71d8007bc835878825716d822d623635e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Uninstall.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\Uninstall.exe
          • Size 478KB
          • SHA256 88880c9b0785eda38d42736ad2f4efcbc6385977e1278d7958d28ebd5651bf5c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Upgrade.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\Upgrade.exe
          • Size 24.7MB
          • SHA256 89a7175fa316ca4b24b13f519f295f0efd5daa72c6b8ebcd5a5d30e173e0a794
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WebView2Loader.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\WebView2Loader.dll
          • Size 162KB
          • SHA256 609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
          • MD5 SHA1 SHA512 SSDEEP TLSH

          XInput9_1_0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\XInput9_1_0.dll
          • Size 21KB
          • SHA256 149c6862d8e47d38331ad3f38c4c81df98089d1a0cd9287a3455ba00ccb4ba87
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-console-l1-1-0.dll
          • Size 18KB
          • SHA256 4cf1cc0dd16677d42e007886480407a2d5c252e00ea44d7ae9b09db3f482034b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-datetime-l1-1-0.dll
          • Size 18KB
          • SHA256 5e9c97c5d37b627205cad6b5520557d5c1b27992e5f2a216e8385e24785641c9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-debug-l1-1-0.dll
          • Size 18KB
          • SHA256 adeead709b86084cb708a1bcdd1bba0048d37c07f960d2f92a69860dee5a8a40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 18KB
          • SHA256 74c45e4a9c0535be154795a143af24211288f490bc957a7a51348efe6a623575
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l1-1-0.dll
          • Size 21KB
          • SHA256 f6ccd74ccea1fda8173f737e8c80c51afa4b250d5effabaf7191c0f510f2fc29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 7f58f49a59c4c25c733b9745f52abd5b03e2c79625ce610550dbba8835bb5623
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 e1fe386e5b0f7f56ff2982d6959269041ae618ad74506db5887ade31e500841c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-handle-l1-1-0.dll
          • Size 18KB
          • SHA256 ad2be5da49cb7fa20865ad5db4b6f2efc4acf9d48a1484e5ade203e47842ca74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-heap-l1-1-0.dll
          • Size 18KB
          • SHA256 9f6ada34f789c1d36c2a0e3e9280c2fe7439cd71afbfe0214b8f1fee4f51b057
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 18KB
          • SHA256 3d7ff518bb79515c4dc8dc7f2e255aa0c19b0314611a0b5da1249d4de413931e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 18KB
          • SHA256 857b6f69ab5a0ff7853b23d8de61b350af6d1b78bbab0ead8eea7ed92377db91
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 8fd1d49ad7a04880004c5fdf9f88118f236d2d08fb2d09e9d6ba33143b3a69da
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-memory-l1-1-0.dll
          • Size 18KB
          • SHA256 db1893e5adafba187a522488eff2fa20b509d43f59047a5e915674fa0c7c4e08
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 18KB
          • SHA256 ae536d04c9f706894b51febe831afde7f421a9dc5e84d762d82a7bceef1d17d3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 19KB
          • SHA256 39634e5c748c39f4c439aa3b76fe9149b236c6d10ae61d793c70a5d6e1567d40
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 20KB
          • SHA256 8e79781634019a7fa7b03ab98846e73e48fc135f7a36625446ea81d1615ae951
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 d20bf4086cd6bae61a2546e2aaf6a1b3fe4e7c24422d13c8c05e1853dcf08973
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-profile-l1-1-0.dll
          • Size 17KB
          • SHA256 62c572488d41a3c7ad827299354e4e8a3727d9c1259ac667c142ca80c8755f99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 18KB
          • SHA256 733829e7aebdf3d4c8bd407d2ab84f67bb3044f82b41548cc11b573647b62c12
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-string-l1-1-0.dll
          • Size 18KB
          • SHA256 e5575f0172daa016cba2c55a67dcd11d4b2598c28a60a5167089cbfbb262b884
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-synch-l1-1-0.dll
          • Size 20KB
          • SHA256 e3243a262841eb09e2baf5969568174efa7a3485087ce8fd8c1afe8ad3761b0b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 68a36ccfb88ddba45e3c02190be4f2e09a37ba6883cb63c2418aa68ba0e13401
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 19KB
          • SHA256 768f92f8f1b26eed576cc7a65bc1817a6ee8e04f1e7a2166dc46946c93c9c6af
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 03faaac34a7d25b8829da2508a4f8b476b5d5b895267f2b9852fb02ccf31da42
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-core-util-l1-1-0.dll
          • Size 18KB
          • SHA256 082f08bfc404992a1056dad41cdbc014b35bfb8e60f9819d728d5cbe5841c428
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-conio-l1-1-0.dll
          • Size 19KB
          • SHA256 055cb2699194f1550c5ab6b4412bf8f970a5878df6da14f034ab7c35a1bd3787
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 0dd70eb1936ca4cdf2d9f21798f85acfb6cb061cff04c60c9c7e4004cbc14c0e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 dd6b5fbab8e14874e1d03757cec08df5ada023877377612911619f5b52e37709
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 3a2c1d0c99a9e49ad974508cd67587b0f017086973decbe787c779ae57f0e011
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-heap-l1-1-0.dll
          • Size 19KB
          • SHA256 4e07b35c97f71fea5c93dbfdfc030bfbc05aff218855fda16d2856cb7153e98b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 9b299b18fe97191e3875d173b2d89295cfa8d006a0c9328fae867b8da9bdc23b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-math-l1-1-0.dll
          • Size 27KB
          • SHA256 177779ff31d2977ea5bb583d3fc50209edb64bbce8c40d6d14e34ea4446266e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 26KB
          • SHA256 e4152a6d181f5ebbd79ebf0f441d95073aa0aaac8f5a6c77d9ab4ab17cfc353e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-private-l1-1-0.dll
          • Size 69KB
          • SHA256 680fd6211bfa8f0b591307d883410cfc3240702399e3c86b72213593f0e52216
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-process-l1-1-0.dll
          • Size 19KB
          • SHA256 59752e277397617768da4b76f3a839a7c9280c20ab3fe7be30de71399fc4440f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 b5a3c4681ff8c09ccf32e0e0bf7d183293b5171bbb6512fdb90585d6d88fbd70
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 e3c4e66be42bdba47b3186f1935bf852620b9f6c507cf56321e21714814d1ea2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 0595b77b356f9a1dfba92515cb15d227b7039cb8beee3b0ca6be15b5f3913dd9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 b724edd5f89b6c0b6d386d8283b3fd6fdb7563d4e886537d3d77cfa5e81128c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 a075f5c8dbd97be408da070324e661d0ecef76deeb8c77ac7a2161083140ccfb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          aria2c.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\aria2c.exe
          • Size 5.9MB
          • SHA256 8fb0ddd3cff741d97b87b6af1ba0659a8e7c1e1f32e72bd3fb4aadd5b031e861
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cleanup_utils.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\cleanup_utils.exe
          • Size 10.2MB
          • SHA256 301e3ce173bd54a0b05499c364909165ed6dff52017adc33e40389f97798abd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          devnode.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\client\devnode.exe
          • Size 722KB
          • SHA256 5e83bd4c49fb5178c80fd0783e5cfbad9f1abd94cb0347da1d9439dc86b0a1a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libusbip.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\client\libusbip.dll
          • Size 568KB
          • SHA256 9b2dce39ff432ae4c02815efc8e7f0d1a1e2a36065d658a4f84e54901af227f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\client\resources.dll
          • Size 12KB
          • SHA256 18df756ce0d58d726798eef881cc726f9b92912fdd4c4c3da04cfb6dd299d16d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          usbip.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\client\usbip.exe
          • Size 1.9MB
          • SHA256 14e71406a3b095eeabb8d4b5d7d7f2184df8924378d33f4eeb8072a23ca06814
          • MD5 SHA1 SHA512 SSDEEP TLSH

          comctl32.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\comctl32.dll
          • Size 570KB
          • SHA256 b8102cec6c4e0b4bd0d06d40ad5ae002fb8d214f7cc8481fb6ddfad67bf9c1c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          concrt140.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\concrt140.dll
          • Size 324KB
          • SHA256 fd85c7e6cf5493cb29c21e65820c3b23953a88fed513a6a51010d837678a86ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          conpty_bridge.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\conpty_bridge.exe
          • Size 61KB
          • SHA256 50e42c650497884f4e99319294056aeeb236492bfdb2da8ad1da167b593ecefd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          crashpad_handler.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\crashpad_handler.exe
          • Size 868KB
          • SHA256 a090b5abe9460afe8f1d093269fa086b3241edd465d9975f6bc8dbd07354b786
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\d3dcompiler_47.dll
          • Size 4.3MB
          • SHA256 8c88c162010a8d6b80f2c0433d4ce973ce626afcbc8da5be68bfa2ba68341eba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SDIddDriver.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\drivers\SDIddDriver\SDIddDriver.dll
          • Size 66KB
          • SHA256 a82728d9a3dfe31fc9ba75072425cbe7c5cbbcbfd7ba75c7eca6ff076b2d9b68
          • MD5 SHA1 SHA512 SSDEEP TLSH

          devcon.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\drivers\devcon.exe
          • Size 90KB
          • SHA256 b3fd009944347ed2f515626128ea018d054d89840be6098eafbeaa745cdaf99f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libcrypto-3-x64.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\libcrypto-3-x64.dll
          • Size 5.9MB
          • SHA256 66d319b5defce437f62e415142c9fe409a4b7a5a36cd2d42ee555e97f02840c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-3-x64.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\libssl-3-x64.dll
          • Size 767KB
          • SHA256 114b12c0245082b5ecce15d8da382bd8da01b417770cc0ad036f96e2bc26e1f3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140.dll
          • Size 544KB
          • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_1.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140_1.dll
          • Size 30KB
          • SHA256 af589d441cd97638b1a0b9192a4014c52b64b35ecf5437caa65f27b3583e07aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_2.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\msvcp140_2.dll
          • Size 200KB
          • SHA256 16e3048f14be7656f684a6c452077d49b7d97ffaa46d5e5d806a1925a014d635
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nemu-api.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\nemu-api.dll
          • Size 4.7MB
          • SHA256 eed24619771bec66fb4dde3fad8b4d3fa2430e1c7d0fc5a8b15576880dae9218
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nrd_renderer_ipc.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\nrd_renderer_ipc.dll
          • Size 180KB
          • SHA256 65a4015b80019507e651b5c14d71db99933f6ed845a409d81923713600eb7083
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qgif.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qgif.dll
          • Size 40KB
          • SHA256 62500f6c40884a1d2d2dadcb949aa19c4a20181445c108aae9342b07d83515e7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qicns.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qicns.dll
          • Size 46KB
          • SHA256 fbc295f178160271da65900f73d36e95b0a0721c6be39614f9364e3055296a39
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qico.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qico.dll
          • Size 39KB
          • SHA256 198d273ec01b37980c20fbba62373c641ead670d64d11b5a9240f8608f69bdc6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qjpeg.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qjpeg.dll
          • Size 448KB
          • SHA256 69fc19244f0c4b84d8ef0afbe55a50d1ea315c4863b8001d79357ba1a91535e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qsvg.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qsvg.dll
          • Size 34KB
          • SHA256 72ffb62f5d1af139bd8f74c34fc1bbf30db85b048178f2b65bbf05fd689bf1a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qtga.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qtga.dll
          • Size 33KB
          • SHA256 4b6314d08cf65ccd582fbfc03c564c36b597c579836f4b32dd76ad0af733a573
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qtiff.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qtiff.dll
          • Size 396KB
          • SHA256 e740a1501655d9486d6abd56aa4282879c94dda706e3d601dda483d3eb28ed60
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qwbmp.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qwbmp.dll
          • Size 32KB
          • SHA256 674665dceb886c7c7189fa8b0f80655931c976e5201851b4a8405bcbb86c5163
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qwebp.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\imageformats\qwebp.dll
          • Size 513KB
          • SHA256 65d04162598ba514a82b71c5da1548d5d99ce795266f4cb3804d8dffbf60174d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qdirect2d.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qdirect2d.dll
          • Size 1.5MB
          • SHA256 d77988ffc12c4fa9ce2dbdd9768deeffc73365048ccc8b0e930cb4c5cd45b661
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qminimal.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qminimal.dll
          • Size 863KB
          • SHA256 35d02f7eae99e953ed8d63d7a0f1e28b2484c7d9a0e6b4bfd486d18cd165370f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qoffscreen.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qoffscreen.dll
          • Size 778KB
          • SHA256 00dd36b1b727cc22538d12ea32798c33fc6896761787045731540eed69381e0d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qwebgl.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qwebgl.dll
          • Size 477KB
          • SHA256 c77f478f6a6f6150dd09ae21df17f47eff1cd7755367ead169b9e9de38042ef7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qwindows.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\plugins\platforms\qwindows.dll
          • Size 1.4MB
          • SHA256 807c71d3a8af4c1a22d144c5520af583784f8554b8dc37ce7d9d7d39f4b72f14
          • MD5 SHA1 SHA512 SSDEEP TLSH

          remote-nemu-api.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\remote-nemu-api.dll
          • Size 4.7MB
          • SHA256 4464b49f9a7a87de666cab53d082ac57722d11da2870b8c2afd47e35dac82d07
          • MD5 SHA1 SHA512 SSDEEP TLSH

          usbipd.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\server\usbipd.exe
          • Size 8.0MB
          • SHA256 fc3ac6076b678b409b1d48788efc755a9463c330f86b10c4c090cafa19dee4cd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          stardeskmgr.exe

          • Path C:\Program Files\StarDesk\1.4.4.9323\stardeskmgr.exe
          • Size 1.5MB
          • SHA256 45da2f9c6717b43905072526d4ec760b0c0d85a89892b42efda895e348d0a8c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          streamer.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\streamer.dll
          • Size 17.1MB
          • SHA256 bd835a22bc195fddb8ed88badb1ac2274222496c9300f4407aa8bb3410284923
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\ucrtbase.dll
          • Size 969KB
          • SHA256 cd48756e96740f84a2aacd6c308997a4a36a953cd77f50cb54c27915a5c5c302
          • MD5 SHA1 SHA512 SSDEEP TLSH

          usbipmgr.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\usbipmgr.dll
          • Size 818KB
          • SHA256 ff6d2549223b68507836e1e5907c3e7825cb739a1543468d7ec25564f41a30bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vccorlib140.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\vccorlib140.dll
          • Size 357KB
          • SHA256 6373f18233d8b3a6e85ba8568a38dd3cc0b50ad854f61af334834e39dd6dd195
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\vcruntime140.dll
          • Size 83KB
          • SHA256 6cadb4fef773c23b511acc8b715a084815c6e41dd8c694bc70090a97b3b03fb9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140_1.dll

          • Path C:\Program Files\StarDesk\1.4.4.9323\vcruntime140_1.dll
          • Size 43KB
          • SHA256 3b792da47040c3b3e0804cdc5153eef4e802b6975963029d8dc360cb824a7b62
          • MD5 SHA1 SHA512 SSDEEP TLSH

          AccessControl.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\AccessControl.dll
          • Size 23KB
          • SHA256 1b4d25f2f544f520c20493ee1e9ac7b3043aab88e4ff87953390d357de4c2096
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogEx.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\LogEx.dll
          • Size 52KB
          • SHA256 cf7b45a69a13551db95dcdefc8bfdd4128e1c1db67198347b43469b69c36b844
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SimpleSC.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\SimpleSC.dll
          • Size 1.1MB
          • SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\System.dll
          • Size 12KB
          • SHA256 b6298637fea88a44e4de3f6b7fe254fb73857c08f1dcd8bd1af6f9eb5e6e7e3c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          modern-wizard.bmp

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\modern-wizard.bmp
          • Size 25KB
          • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsDialogs.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\nsDialogs.dll
          • Size 9KB
          • SHA256 37c9c3b2f11c5b8e70fbcbba99eb58a99da35388430a43612d92e157a9c076cb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsProcess.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsv29E6.tmp\nsProcess.dll
          • Size 12KB
          • SHA256 44c14f1edfe7deef518264675e3e4edb6991d5ea0d50f0f6b18a819dc31bbcba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/6180-13-0x0000000002D20000-0x0000000002E3C000-memory.dmp

          memory/6180-3470-0x00000000220D0000-0x00000000221EC000-memory.dmp