Analysis
- max time kernel
149s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/09/2026, 10:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
amindez24.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
amindez24.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
General
- Target amindez24.exe
- Size 19.6MB
- Sample260912-mdds4awze1
- SHA256 1c7568aa5a551ae6da3f0a826d0ac12b2f17aad93222de118cdd8d7150398512
- MD5 6fca54fe8cf0765d4980f70b37d5dafe
- SHA1 7ec5ec321cdbf49ba2d9e6f061d2760820bfb56e
- SHA512 c868864945c68d9085bd96dc5b08d7fa0837a9e10c9e0aca4946222847257b9efb725ddec13e58cd02275926da02092a6088869b6c167c71abb52a81f4525f9a
- SSDEEP 393216:UAj6HvjAf+rnUEOnplsR+LCyKg52IZeIgDX0jiQ735+WNhSh:UAisfcUNUGPK0tZnAOiQsWb
- TLSH T1DB2733E2E2F308E8E69B4CF5CBB0CDD7DE29FD170605254F75DE8A88665CD821D0186A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 25 IoCs
pid Process 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe 3188 amindez24.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3188 amindez24.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2260 wrote to memory of 3188 2260 amindez24.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\amindez24.exe"C:\Users\Admin\AppData\Local\Temp\amindez24.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2260 -
C:\Users\Admin\AppData\Local\Temp\amindez24.exeC:\Users\Admin\AppData\Local\Temp\amindez24.exe2⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:3188
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\iconengines\qsvgicon.dll
- Size 70KB
- SHA256 dcfe12e028e1fd694a99fbc18f6aebf08d36223f5fd99c1bc1e7bc85eee11281
- MD5 df5dee25db3c355c698a2e66a219b63f
- SHA1 ff9212b3ab6d1afbb5d55b015d3fddd3a4b9b4e5
- SHA512 d17612d3bd9fdded24ad6f3d876953e59aba72cc081ad2c43b592206ca28ecd2f66c1f29554dfdd507875a52938738fa0c5930972f97a500146adf465041a418
- SSDEEP 1536:2AaqA/RCDOhLqWyybvXKmZHyHkkaB1L0EfzR3RSoyfAuHPMM7upR:ZaIqFTdSHkkaB1L0EF3RSoyfAuHPMMo
- TLSH T116636B5367A41449E87BD63EC317861BEE72B41427A1E7DF13A1C8362F63BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qgif.dll
- Size 46KB
- SHA256 1ac71f48e08ee0aa405d55041f8340d56ed827fb94260bceda46ac0a50dfb7a5
- MD5 34fab6ad2c3ca6cc2f1128de0ec38777
- SHA1 a08dd0d38e99d95eb63167cac8dcaa39f1ba0fd4
- SHA512 df93830fd323cad5984c8addd3d1f927002314bc6365b8c2205e898643684976e3fab4f26336aeb17c8bc9b161849e113e59fe3231825f7d320c9bea303bb330
- SSDEEP 768:spTlEV6wdBj3NpVt/Mqs0VOIEmmfcyjcocTQz5Yiuip5ALTSZ:WTlEkw3j3XDB/VPmfcyjc1Q97u/SZ
- TLSH T14C237C86AAA044D8D123C234D9964E2EEBB6B5504B92C7DF4221C62E1F337C13E7D779
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qicns.dll
- Size 54KB
- SHA256 c20ad45b3c2891d9f7a501d7e9f6354e1734244bc455d185ffd45ec08fb3e43d
- MD5 51315eea43363fc39472435ae1955eb4
- SHA1 daf427dbe99fb1f4070f2548e81908feac643b37
- SHA512 dd140f851bfbf86a3838d3c6ba05a02c4964e7d54f790deb5d83c3d6b8075632f603c5bf79d63c5283450c95105d3e339ace8b02686d028a2026fbfdc161cd6d
- SSDEEP 768:EqiFFANo/raGE1T0EqGFRY/XPSpJxBXl6n+ORWxpxA5Yiui85ALZ:Eq4f+31/qGFRAX6JDX8+ORWxpxS7ua
- TLSH T12B437C17D3958285E417CAB4D646463AE772F4021B929BDF0260C92D2F733E27EBE394
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qico.dll
- Size 44KB
- SHA256 0eb08bc9d8f6c1ab05f3a837629eb10e41eb6aa72240d23e291056b801894794
- MD5 acb1c5151430eae36afcf007d5beb08a
- SHA1 fb71f2d2a8b16ff9a03125ce911381a8952c3eba
- SHA512 bcbbbd861765dc8901815e79f1cc0f6914f1322a69d429b738514b8b11b0583ab77ef0b1c4cd92918e582f8a7cdf2ee20cb01123b3a872d6d2419968740713c7
- SSDEEP 768:yzYsBkjz96XLC21FXtMJu7QzLXeQL5Yiuis5ALts:eBkjz967jFdMJu7QzLXeQ17uEs
- TLSH T106237C93A2780489E927CA78D8974E36E9B6F1605B52C7CF0261861E1F333D23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qjpeg.dll
- Size 564KB
- SHA256 bc3815c58443a01f43417ecac74bbf182c245d433ea82af0b3dc669c2cb064ab
- MD5 94754ca8e90cf6726634b09d9f36823c
- SHA1 20bc7474c63407b32b200b1261d28f7bec9cf51f
- SHA512 fcc66f30562e1d4a2210ebcf67f59f5d85fab42c2e0fe57b91b466be10883f7c6788020e386840714d70e1b26185625428aee9b8520c519806da4514054cfb37
- SSDEEP 6144:j2/1Vqt7fL5r5op+dBGGaxTJJTD3LwFU2b81crpyXN+S2z5wGLioXSDEXYGyxyEF:pg+STkkyESzIks
- TLSH T159C42942F6B51841C7A68478DE1AC966EB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qminimal.dll
- Size 60KB
- SHA256 c4f03a873f96edd8ab9c3016883f1705669743ba48d1ecbc5132704db48319c7
- MD5 ead0aeb48268956287fc93adfea59878
- SHA1 92a505234a8e946833268697aa7770fa26eed8d6
- SHA512 93b2952854dfce421d5654c32094743fa259773d769f2110acda9bcf707a9627f4585c9ba73586365d605f8bd0821c972d55cbe5daa273e120e62a1b93927728
- SSDEEP 768:qRkPddegaLP/vonN13x/ee17cff+TilM06ogrkwvQHRIPVJ5Yiuik5ALD:qRkbar4N13xme17ctHRIPVX7uY
- TLSH T11C531A421A350455D8368B7B81CB4E166835F2240B539FCF701B815E6FB9BC2397D6FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
- Size 111KB
- SHA256 7a3f14ab1f373e96e706db6f3f2d88a4eb7132f3d03e139fdc84a303ca974e22
- MD5 a541ec0ad6651eb5d700fbd56b8223a6
- SHA1 033fd4e4818a11c01f362a514a699062cdc1629b
- SHA512 ea88b13dee5024d489eb957ac480aa26d7cb0dcac00cdf3db6e4d7288ed14ccb5e1be4864d8cb44a2a20628f670369666b39477f3fb4b0bc875609805153ddd2
- SSDEEP 3072:6h64KOpNdP6DPiIQIEDJp683J5JoyApGQXcabhBV:6hbZnmKDJpB3J5JoyApGQsiz
- TLSH T173B3395226750085D836DA3AC2C70926E736F0140723DFEF615A815A6F6B7D22E3C7FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qwindows.dll
- Size 983KB
- SHA256 dd126e2a47f7f3d4a855981e9d4012076058b1440f6900b9a07aa950e4e4f20a
- MD5 4cae29bada2173718689e037d346ddac
- SHA1 435cf4ff7c94223ae11bf030ab415af9b01d0713
- SHA512 20f40799d6939493d532a01912eb84dd591fb9f851d446209260c5f79382d87d468e4de3131526c1ab295ffb7569542f3b86ec81b411f9527c951c62e0396b99
- SSDEEP 12288:bTtxVV2OA9YVQaF/pWjuh23xnI99zp4ztJ1IiYoxQIWBU7OPJ9et:bPNjVQaF/pWjuh23xITzp2tJ1IiYXjet
- TLSH T1BB256D1B63A80295E83AC07ECE5B8712D6B3746903A186DB4161DD1D7F377E23A3CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
- Size 225KB
- SHA256 093e3ac68dfdac52a2667a2f7ba00b336392f9d6bde08430494ef54dbd120541
- MD5 bd2dfc33c125920d140f1ab3bcaead59
- SHA1 28230291cdbebed7246d8bb58c34f1f8f57ddc07
- SHA512 eba46e8b356037de0f0428f6926413745c8e599b9f6ac8a491fe470619f83737d27bfe4f7a5073bea8d5b0e3c3fd116f52252a21627e8ecc66dec35d98f62994
- SSDEEP 6144:V2y6vOA/YRGmdZuEzvuG4PF0Odu2yydm6DS4oypnZSlvqmqiE6cs7lf:V2jvOiYRGuZzLlf
- TLSH T1E5341703739216C6C967C2B8C61B8A23F67330544356DAFF4167CAB42F632E2BD3A655
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtCore.pyd
- Size 2.5MB
- SHA256 91dd5166110b88a4f4d3acda6fe6c10ed699882dd3602328a59e9f656cc766b1
- MD5 477f328e542a3011dda5ec0d05cec056
- SHA1 6eb9462d209b082b51799772189217fbfa72493e
- SHA512 5dfba0251bef13bfad126e45176d59eaacc64696ef0beed3f2e0d159a984a61bb836d5b3f6a36e3273f4be3ea113021a9e408c5aa1abfc8a68687aabb9cad597
- SSDEEP 49152:h2/N8Ur9xjjUrJy7GdQrdMS6VyOzkAk0KmL/8rluepkD6M5hEFFRTX7Wqyh6cnEX:YjUrJy7GdQrdMS6VyOzkAk0KmL/8rlue
- TLSH T107C51753936520C8C0EBE639C61B460EFBF270550762A7EF05788B982F27BD5563DB88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtGui.pyd
- Size 2.2MB
- SHA256 cf5ae37fd119fb29a53f1f2cea1362fdf036d940191be45d83da0f98ce8752b8
- MD5 68419c7c16a356368bf5fce460282a7c
- SHA1 47bfdd2cba43fc3a36b5b272da1f5a4c1459b30e
- SHA512 819ea145012c62a83e8488172a6d2c236c2f69121a7be736d7745a51381ef123cf0b7ab101f2a807771622e2c901e6447c19f50945c558e2ff4d3256bf7cddb0
- SSDEEP 49152:BAmjthDOIwQU1Uv6qw7wfKdMg4WBlTPy+HaDQ0wtAK73jiJtj4tVtxfa4NrENax:UhUvDw7wQ
- TLSH T1BCB5E66393652088D0EBD63D842B460EFBF2706113A266DF05794BE87F67BC5593CB88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtMultimedia.pyd
- Size 433KB
- SHA256 1f30fea8a3327be317ab426e0e09ec5b34efb07c7f27fd4c9402f4b705d8fb3f
- MD5 8618c20649cf43c4797a96abd5f19dd5
- SHA1 fdc64d4062d5de46af71a45072daaa076088c1be
- SHA512 90452e000f7403c3fb162a33cada565baf5dbaced553ccc0fa791329ed384d92bce4638f8beecb8cadcba598f8cfacefcd2b85120bd13b508ffb76fbaf5e5a10
- SSDEEP 6144:tVpd/YVUl9IB0dUMupLQmQ+p4O9J3y2waqfnOPHKqpqHDFt7zNlORvg23DVka9Nd:tVzAVO9YbS7rk0jm
- TLSH T18594C36BE7006085E0D7917C992B850EA7F274A80362CBCF157C4B997F67BC5A93CB84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtNetwork.pyd
- Size 804KB
- SHA256 dc8a352ee9e67efa05bb7c59a266171faa0c0c40e0015fac9b31a9a6d058ec49
- MD5 f99158d1bd9edc60b2c7e23939432a66
- SHA1 142302b8c81c49833bf223a12d0d7665342ecb63
- SHA512 b98e2db05e36da5627b35e31f01b5e8e0f8beec8d9fa23c0a2e23f2145adc30c6c2c2ad8201f93101b5c0aa0f77575fef2bdf7a8ca5e1a4379eed41735a71ae3
- SSDEEP 6144:1b8lcw5ZNqKl5ZVvqGA+cLHirCtNp8dvZdsJ6suS/96k/GA3gRZk8bnJVTSU/R+L:1bpw53qKl5ZRqO17MeOHKpU9Wr3aT
- TLSH T18205290393656089D4EBD53AC917420EFBF27010039A9BDF4578ABAA2F67BD8973C744
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtWidgets.pyd
- Size 4.8MB
- SHA256 4f81361816e94e1ae05f178085b22d5b9b19e417713b1966dd481a4017aa3b21
- MD5 a1a3f9d449ac15577ac07b9f7e225f5d
- SHA1 9bdd0508688c642c74b772fa923a7293339e55c8
- SHA512 0748df098a6e40d461e5436d86368666fb6b6ac875dea344404bd0b15813665f186a2c3bd581f004ea5c82d6c759cad75ac6f19f845a43ad0e9285782eb8d96c
- SSDEEP 49152:edW8I4zpIoqkn0ZXrJZxzaOhWtbd13LrYxA/NCNNWAl5YKm3VWI3Y7l3eh5vINxB:ec8zIIYxAEe3WpKgOK
- TLSH T13436B3039B5A60C9D5EBD13ACA9B520DFAF230A0072657DF0C6A1B992F73BD0853D794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\sip.pyd
- Size 108KB
- SHA256 80e3122ad70cc48f71388f18b9094eb655c0950e129463967e33f7d102b78f4c
- MD5 bb3870a0070d62f390ef485509e04e95
- SHA1 4afbf52b94b5b8afb01b7327e03c93e7142ac70b
- SHA512 2f6866801c1606ba8277137677f8b52dbd452da305d6a8dc2f8e8662c259ff77f74eba56907ec17ae52d98c8bc9b70f110a3b0c3eea01a181de2d02bf1a03311
- SSDEEP 3072:ASxSNfn2BBrRfrlHM36dNt27K+99N1CdUZ7VbRK:A2G6jlHpJUK87VbR
- TLSH T186B3185A33D800C9E7A651BC89736517D3B2B0602B116BCF41A0C35A2F97EE63EBE751
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\Qt6Core.dll
- Size 10.0MB
- SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
- MD5 3b5c8f8981b2cca0c4741dcf09d7a79d
- SHA1 a5179fbfc72c59a5aca26ebdbb08d944ce5b864c
- SHA512 4bed16fef4c00773892fb6da163134cdf7819ccb165987e5bbdcf9153d7b042490be14eae984903e84b48b61fadc6f5735671df16641b3b131c0c0ecdb5260f2
- SSDEEP 98304:meAbhLTfRmoOKFdu9CwJsv6tnYNJMAA1gcV/3cNuWXelc:mhn8KFdu9CwJsv6tnuSA+/3cNuWXB
- TLSH T1A5B6390766FA0102F6FBDA34DAB75116DBB27C466B3096EF025861185D337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\AnonymousPro-Regular.ttf
- Size 37KB
- SHA256 306622afa0f022f842aa50a743aa6be1b3609e99433e93dc5ce030de1bc1387c
- MD5 e5d35a05cfc7f1e959b52ae7980c3dfa
- SHA1 6a7d36012093d46645ca3d74cc8759d0b4c773ac
- SHA512 1565adab9e054b35762f3730fb920c33ec808d2372d532a69f91a3af7e579910711fac83337d7b9d825448adc42c2a1eddd2b0c18a48b6d0303400e1b5ff6f8c
- SSDEEP 768:QhVNvkP7ywmYOtdxF8PWNDrpDZXspDZwPGYfJAVkZVkPk5xs/Gdor+6s0a2rcQU:QjCTyw7Otdn8PWBX8pDZwPGkTZV9xs/I
- TLSH T13D03F701EA82A11DCEAB667C989D83BF4936F53D364C0A6A3DCDC722584D8146CCDEF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\CourierPrime-Regular.ttf
- Size 42KB
- SHA256 4b024df3366ec63ce2cd2da79276e584db8f8c9b13babada706563b878189905
- MD5 b193574486a04c5b4217f8ea208b7e38
- SHA1 4264e713bbee5c4b1b33c18e71a00986cf7c93d4
- SHA512 86d3fa9c2ed302fd9350baaa7d0b65fadc1fadfce3e00d785a31e869ce94e678708d93511ea1da263f1e8ae45bdf704ebe7f00edcdb2d56e2ee9787f76c94d0f
- SSDEEP 768:tkryMfLn0MMoyrT344bhlTTlIBVnszQzpRp2T6Sw2LGMkqrSxwETH45GtFNcnGFn:t2DfLu40jgZubwFwkV
- TLSH T12D134D0FD323C65DF92A8E79C1B4E65687FEF5422A3A4347844B3576E8EA4C0CC4D195
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\FiraCode-Regular.ttf
- Size 55KB
- SHA256 b5bab20bd6c2529ecdf3f4e3e2c198e367e9b09ea05f61ad20fbaeddf67c3de5
- MD5 128900fe27e908c33952401c0f8668d0
- SHA1 ac80eecaadb96c9face3fe96d7f728b5af262dc4
- SHA512 9861c3d9786604b4ae2e912b73e37577d878ed9cb08cddd6420456ae584bc2ad046e1623c7ec94b779b427e38b8517c4afc4c66e06afb96fc3b09b6bd652b3b5
- SSDEEP 768:F1yL9rqbxLv4dgIR5s81h2h3e+037RHPL6LHjH/Ob5ae0kPFV6N9Jk+TBl+ETzd3:XEqdLehRRAhG7ZwHjHk0H/Y51sdAK7F
- TLSH T199431A16F3B2DC49C6638FBB94B713629BA3F5109327B35B508C761E5CC20F49A652E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\IBMPlexMono-Regular.ttf
- Size 39KB
- SHA256 62e691b7edd620394b3d635950f17546655bcaf4d5a364621dd13e0a48e6ce84
- MD5 48f2ec2399ffec5efa41384e1aa7f742
- SHA1 20af31f6e18d4f9d54038709e92edab43d1a0c02
- SHA512 fe3b69fd85fe7dd20e321a3a830d108dd3029715819901c892ebb0dc391c0bae5315f97b9653191102af279478cf1501ce4489dfa14750f79642d04efadbf80c
- SSDEEP 768:OGFsmzNRObmwHI5hsos+RSEhYHNiF/RBM9W3IvPjg5NHBn6nsUUu3vpx:bFsmzNQG5h5sYYtiF5BGW3ITgDDUUu3z
- TLSH T17D03710ADFFB5A17F30E4AF48DE9B3B90665BA13EF7621091E51D101C9CF288462B9D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\Inconsolata-Regular.ttf
- Size 34KB
- SHA256 dfc9b240b7529bcc8f0b4a720bcf38cdd29e3f16742ab6cc1a64c9103b47b25a
- MD5 0ed39936fc376585a5805c3ca8ba25f4
- SHA1 11951b4198b611f1cbe72c45e04be4733900ce13
- SHA512 969f9ae41540ea7c44b270299b9d0889ac7e74752dcb92972f00839cde42c07676a0fba311fb35b5333721c1b6bf43cb892d6673e993917f5f417d9a066a9407
- SSDEEP 768:gkq7wwgfaPgkFNf+NW/3kq5GyJU1ZeJ5AZ94Cv0YziBu8nmW7:gk8ZRIkTGNu0E6So4C/ziBu+
- TLSH T1BEF27D09B3239855E133BABD5CB1B36D1F46E12DA355432F800C679EAC5B281CCA67DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\JetBrainsMono-Regular.ttf
- Size 56KB
- SHA256 6ea82c387e7e298d824ae9893d7c043ca0fe9df26c1e882ca1a8df3efd05e1d8
- MD5 1b6dee10cac2d9e64054dc120fb85cf4
- SHA1 9517362ab90b77e986cc378f1e8b45a09456acac
- SHA512 d415ac3979c4927822b815515f7470a5e7c66ae224c4cb9f30768f9e925b18d213fda2a74d0932c6313e2c434e8240b0a7d4ff94d32d6856267c18a638fe0505
- SSDEEP 1536:dZ4C8Q1YgSke4nvRD4BaAKsNHjH92VYYU5QNy3:dZ4C8wYgSusosHjHbd
- TLSH T1D2435A1AF3A79E04E2635FBE517933709351E326A767A307604EB549ADC24CCDD2D2C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\RobotoMono-Regular.ttf
- Size 22KB
- SHA256 972568bd63bda288354aa136e244029bccf44cff23268cab8f9691ca67024dca
- MD5 e58ab2b2d65b9af0e4cfd48683bd1b24
- SHA1 b4a3ec1262f04faa6799ccf3f0285c9d6dd8fa84
- SHA512 bb95b5ac94011e7731e87dba75f19d91ab5a66af09837979cb45e01bd724c144faaf9d9e70fd3437a4552100b2ea3fa92cc1d011d6f3bf74029e4b0697f42781
- SSDEEP 384:fQWPzlDBqSHMJVMnaYvMR5DdMmTM7M7M8eMHjM7gWM6MGIMNMyMNM5oMyNM7lMr8:4eBfC0vWd/msXeGjRWLiO/uH/NMXs6dD
- TLSH T184A209114B134B4EE713337B22815391D1FFA617B3BF920FF1476E6B958A4906A8AE13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\SourceCodePro-Regular.ttf
- Size 23KB
- SHA256 b378a2005948e259f34c0aa601c254d949185185840a0818a14f7433074d8d6f
- MD5 5308966b166d85350ead5d7b50364c08
- SHA1 8f6bfb3454550deb671571280ce67ee8f2440b1c
- SHA512 11d4884d8eaa61f20993e0d569d6334be86388589a685b088057f13eed1b4a6f270b8c0d8562abfcfa9e3d8d3edd7ebed613693bd020fef232077bbc4311ce2e
- SSDEEP 384:0v4N2OKSR+BwIqYAoU/dTHlr9kwg/KcTUux8uz8P/3T3JXf1bEU+7+xggr4InZbz:0wN2O7HnYAj/dT8/nITDE7+WGnljZgiL
- TLSH T1FDB22A03F362C84DE6573EF89171A3D02116F934A6B69B8F85872759FC8F4E58D86342
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\SpaceMono-Regular.ttf
- Size 39KB
- SHA256 32b865cd8936981bf9d5e902e1b664ebe35c8f959346c6eb346b6d7642d878a4
- MD5 18f1ac69f6a449b22e21417944bbdec0
- SHA1 2b54933531b15be2a2689ffee70f347a8be6617e
- SHA512 b8e6bcc443ef989f96db30bf04d803a6d9fef73d1e2947893b6f965cd853e8a7cfca9b0e43b24d45df70f185662c6cf213eb8fb4fb2658f21397092ae33f1b76
- SSDEEP 768:/hE9Wr8MfLlaN//o1JKAxVY1YkubKsSHO7VlD/xjeGlN4QPvc0+Vax:n1fLeo1rxVY1YkuesSu7VzzX+I
- TLSH T1CD035C07FB45F304EE0B5E7C15B4639AC378FABC16AB034B818563AEAD874410D5A78B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\UbuntuMono-Regular.ttf
- Size 53KB
- SHA256 1f14bf559e2bae36df94a5c618bccab2e5d1d6a82dbe3ebfbe89bacb8c007fcd
- MD5 f4540c9e64562d23ba65538f1e70b880
- SHA1 b9c450358f7213ea14574b465780fcd02f04019d
- SHA512 f1dc4c7614e014584a0f367959fb2d757966111cd099c716d9cc0eaf12281a0b9059f476d50306e6a115ad247c690c4a906f739eb774f5e899f4ff297740be2a
- SSDEEP 1536:2IxUo1yNMpYm/WfWNQn04qVqLbYUZIAh3SLCd2E8H7O1j7t:txUOp404qVqwUZIAh3SLCd2E8H7O1j7t
- TLSH T133337D1DF3414F98D912A2BA3D9197B24BA1F8D8E34E437F13095A32A4CE8E06E15F5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\icon.png
- Size 1.0MB
- SHA256 bc059a9e1d63091b62ce3ea91ec5181e0baa1498352e516b8aef1fa70b69fdcb
- MD5 b8ca6d5a80da0f8c34dbc14d03bfc3b2
- SHA1 3da162ff1d461ab3b7a4f83006e114be12630126
- SHA512 250391bf2cee31d97af09724b6f3891ea89a55cb961e69b0aebb963e54482120b50b563f7390bae12ea4285bd6a59ce5ce336d11303a4200234d517f8ce00439
- SSDEEP 24576:KVpcdGNDdq7BH0PcYrQY345GZSrlacgrIfd447KWyhxNlRdCCNv8SK:ScAg9HDYcE4Dlvu47zWN7cSI
- TLSH T1233533C01AE00BC45DAE249B4A67BF17C797FF0FC04B60C75ACCC6099B89596CA72D69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\main.dll
- Size 5.3MB
- SHA256 b0f1c4da0c2a8c1d696ae00cc11a79bba6f45c4d3f2d137c2b5478bb6f1eda5a
- MD5 bf3da3d91367f832dd1c203d51b1b40c
- SHA1 bc00ceb1f19d05e460a09e8d128d02b0056e7f96
- SHA512 9fea2259e028714df2f0beca4aa7f30fd068d81aafcb02996e4a3f578794b841b7187d3cd2987fa93e920b24e63b4eb3d903fad1e137e3afa05469b42b8af3c0
- SSDEEP 98304:Qu2F4akAwXDJ5gL+oBAh4E3zdVQjQp94Y6dhqvxLZ3OqNDW6a3zpwPZOevmQBCr/:rZQiDyKC
- TLSH T155464982B6A2D4B7FC95F1F548160A5FB374F475B710E76320AB80752F4BAA09E285CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140_1.dll
- Size 35KB
- SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
- MD5 2a214cb2f0f9473e7765ee3b8db8651e
- SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
- SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
- SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
- TLSH T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140_2.dll
- Size 273KB
- SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
- MD5 3151333808c2c2339d5f5466df70b7dc
- SHA1 e48159bb2127ec812ff679f6fabc41141009f26a
- SHA512 8f1daa078e124dc89b51b84baab8d6cc2d77497be23b2ba95ef3fee54d9034e17bf5cd15a4043d025699972cae20f9c46d2e7bef48e4283f3ad9ca6b84fc64d1
- SSDEEP 3072:1J51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD799:1JbjwvnQo/iy5L/XxTWrNM
- TLSH T1AD543912B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9E2BB437FE3529
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\python3.dll
- Size 68KB
- SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
- MD5 962428e9e68d43ecc16f3e33f2ea8667
- SHA1 6d0f349ab2e795b138a64346b784fc7fcdb6d87f
- SHA512 a925586bbc4cc9d2f58f5b6eeed82e429c23dd57d7b33609c0067fc14ed66ed165ac8121eeec1db3f993412f28ba527e961e3d6bcc201d4cda2037f85931ffc5
- SSDEEP 768:BV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/s:BDmF61JFn+/OulIWL0vytH/9ifITgj
- TLSH T125637042BB54F893DBFA66FC7AD199CE642B12CC572984ECA47593D30D1A310A2E334D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\python312.dll
- Size 6.6MB
- SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
- MD5 de50496cece613ec7ebedbf9f2aefecd
- SHA1 6cd49527f647f7ea96872b89bb4fde20afbada1b
- SHA512 a8d22a6f6140280ff36476cdc7cda4a3ebc46f0ac63b2a3c44fbd5f45aa3d343121e63b092b320d1dd8dbb7bc586a679bbcf738f485f36502a34592521aaf7a8
- SSDEEP 98304:2nZOqBIZAopgdKJUskfih6ZizvmHDMiEXAbBu:IoJedKJnkf8ivs
- TLSH T12C666B15729CC0A9C96795B8CC13C28EE7B27C117F51434B30ABB71E2F733A1966A789
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6gui.dll
- Size 9.1MB
- SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
- MD5 5d0da93b83dc26e65d414ff04cf86e21
- SHA1 b50cf7f75e9003825e1097f7ad095157b3d564fb
- SHA512 cbdf076636b80c412fbdeda23593826e4cbe62b056f08d7357955b3be9719e4684c9b4db88c6b368b6783724eadc3a8826cc2da336f13d9bbfa16b6ba615aaba
- SSDEEP 98304:+frUrVK+HdzDGqLVUkG/9r1hzJbgseVxDVkqtjuQQ2SI:+fABfzDnUfr1hzJb7QxvjBQXI
- TLSH T147A68D57A2A911D8C47BD13C8B9B9517EBB2701503529FDB01A5CA162F33BF12ABF321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6multimedia.dll
- Size 1.2MB
- SHA256 653ae2dff699ae91dc6d2b412ee3e7b2b02a02d6b0f4ff5c212cba5c1e54f763
- MD5 900802ae394d058232fa4daaab43eb19
- SHA1 afd9552f3a1fecfab87ac270ca621d362dc49bf9
- SHA512 1101bec4a9c7606327a70c43abf2281b33d10dd620326e7ec60ba87d14701b3508e8a81e13e9357f3a58e0d69be3c1b3b189b60c802b3fddf4ad4b1e3188d385
- SSDEEP 12288:oY+1wTDdia1tLrnZicyJ4fJraY+X1Wb678NQxzTSzfdesr0:ohqk4rozJSrMX6NWz+zleD
- TLSH T1FC559D6BF7A441D6C46BD27DCA878A16E7B2B0040342CBCF16529A0A2F37BD16E7D750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6network.dll
- Size 1.7MB
- SHA256 0232076731e386b6cc353bdf743d5fb17e95a3493c2d02afac984db87ed47b96
- MD5 c1f79b2e138a1658d122eccc3c446a4b
- SHA1 4edee52c0faee2bb72dce08f635c9ff541047980
- SHA512 bc9280b4eb94ea1803b6e1299d62a6427a8a326a091457adfbcb9579dca79d73d0ba6743b4387585e3382a32ab79ed514caeb6548e76596c52598c5efa5948dc
- SSDEEP 24576:yQrj1h2y2YNJ+wPBqmgvR6YFamR2bvaKLhToqYkiaKD7:Prj18o+wsoQjQZLhTYkU
- TLSH T1F5857D57A3A54295C86EC17DCB4B860BFA72700483669BDF42658F152F73BE22B3D360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6widgets.dll
- Size 6.3MB
- SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
- MD5 fe194f3803df1543fad6f316a50477b8
- SHA1 b9433f51f6bc4c61fa0fdb79619b64861d567b1f
- SHA512 74ec1e7bc22cc3814b1906a647beaeb4d080fd7f40ee786811990f597d0f1537700ab90198776f2e5f5ec6cd9cff568d9be8bf659cf37a265645b7096b6cc5de
- SSDEEP 98304:vM+neySH06w0WYXVxRjYqnzIjWyHTM1R6wtO0MPS:vM+neym06wvYvRjYqnzIiyza6KqPS
- TLSH T15B666A5763EA0185C4ABD13DCB4B8A17EBB2700453629BCF0265CA592F737E22E7E351
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\vcruntime140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\vcruntime140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH