Analysis
- max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 21:49
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
General
- Target 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
- Size 9.2MB
- Sample260922-1pjelsshqf
- SHA256 015101597ba0c91321c4d34d0d61722a03023fc196e21a49f8108ae2b41d92f1
- MD5 270353d53db991d82924a2483f7e365b
- SHA1 d42495ecde9b5fef29f2c5479a325bc0abfa768b
- SHA512 e10980ee74148f6cf88799c46dc942ac352a8eb90a2bc6244f496a7b7c0da3bf8e2c2cef82707e2b90df2c0ef40a84a1f0fb796ad3188d3f82c0ea6ac2ef8b4a
- SSDEEP 196608:yIaqUBSx6irchOpF4TVxNgNjuVRjo1U2tku+kiOr3DQg9:ZaqUBI6ir9iDk6VRsHkuDHUE
- TLSH T1BBA6121337D38022E6A21530D6E9D33992AD6D745A22C99B53E07F1FBF789839935B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 64 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\A: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\L: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\X: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\I: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\B: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Q: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Y: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\L: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\E: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\O: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\U: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\P: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\U: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\R: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\W: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\A: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\N: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\K: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\N: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\M: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\K: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\P: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\O: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Q: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\Z: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\E: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\T: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\H: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\R: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\S: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\T: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\V: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\W: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\G: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\H: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\M: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\X: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Y: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Z: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\I: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\S: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000\Control Panel\International\Geo\Nation 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Drops file in System32 directory 19 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8 mousemux-v2-updater.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8 mousemux-v2-updater.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3689351193E7AE5701E3D3D5909A06A1 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3689351193E7AE5701E3D3D5909A06A1 mousemux-v2-updater.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\mousemux-v2-server-packages[1].htm mousemux-v2-updater.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-service.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-loader.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Kcursor\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple M\cursor_wait.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Purple\cursor_wait.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Green\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero White\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_text.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime XL\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow M\cursor_no.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Black Red\cursor_wait.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Red\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Chrome\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Cold\cursor_pen.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_wait.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black S\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black S\cursor_working.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Red\cursor_working.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero White\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blue Arrow\cursor_alternate.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Cold\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Elite\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals F\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Midnight\cursor_no.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Orange\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Azesis\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Black Plus\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Midnight\cursor_text.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black S\cursor_ext_custom_2.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - White M\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-04-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-winxp-64x64-speed-11-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blite\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_size_180.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_pen.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\OSX\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow S\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-winxp-64x64-speed-18-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blue jewel\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_ext_custom_3.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Turquoise M\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win10-64x64-speed-19-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Chrome\cursor_pen.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Radium\cursor_working.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink M\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_180.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-winxp-64x64-speed-13-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Orange\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black S\cursor_size_180.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-07-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win8-64x64-speed-15-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_text.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Entis\cursor_help.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fedora\cursor_working.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals B\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Obsidian\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals A\cursor_no.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black XL\cursor_pen.cur msiexec.exe - Drops file in Windows directory 18 IoCs
description ioc Process File opened for modification C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-22-daa0e70e8c015545-0ce72421 MSID190.tmp File opened for modification C:\Windows\Installer\MSIDB74.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSIDC7E.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSIF3E1.tmp msiexec.exe File opened for modification C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\mousemuxv2loader.exe msiexec.exe File created C:\Windows\Installer\e59cf9d.msi msiexec.exe File opened for modification C:\Windows\Installer\e59cf9b.msi msiexec.exe File opened for modification C:\Windows\Installer\MSID075.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSID190.tmp msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\mousemuxv2loader.exe msiexec.exe File created C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\icon.exe msiexec.exe File opened for modification C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\icon.exe msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\MSIDEF0.tmp msiexec.exe File created C:\Windows\Installer\e59cf9b.msi msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\Installer\SourceHash{161F23C2-4643-4E89-9CC5-AACAF8CEA964} msiexec.exe - Executes dropped EXE 11 IoCs
pid Process 2400 MSID190.tmp 3108 mousemux-v2-loader.exe 5140 mousemux-v2-service.exe 4380 mousemux-v2-loader.exe 3872 mousemux-v2-service.exe 5520 mousemux-v2-loader.exe 2004 mousemux-v2-main.exe 4416 mousemux-v2-daemon.exe 3196 mousemux-v2-daemon.exe 772 mousemux-v2-updater.exe 4056 mousemux-v2-uploader.exe - Loads dropped DLL 28 IoCs
pid Process 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 3784 MsiExec.exe 3784 MsiExec.exe 3784 MsiExec.exe 3924 MsiExec.exe 3924 MsiExec.exe 3924 MsiExec.exe 3924 MsiExec.exe 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 5140 mousemux-v2-service.exe 5140 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3784 MsiExec.exe 2004 mousemux-v2-main.exe 2004 mousemux-v2-main.exe 3196 mousemux-v2-daemon.exe 4416 mousemux-v2-daemon.exe 4416 mousemux-v2-daemon.exe 4416 mousemux-v2-daemon.exe 772 mousemux-v2-updater.exe 772 mousemux-v2-updater.exe 4056 mousemux-v2-uploader.exe 4056 mousemux-v2-uploader.exe 3196 mousemux-v2-daemon.exe 3196 mousemux-v2-daemon.exe 3196 mousemux-v2-daemon.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 2 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 5648 cmd.exe 2056 cmd.exe - System Location Discovery: System Language Discovery 1 TTPs 19 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MSID190.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-daemon.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe - Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 vssvc.exe - Modifies data under HKEY_USERS 64 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing mousemux-v2-daemon.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\updater\runcount = "0" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates mousemux-v2-updater.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-loader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\service\sid = "0cff8203" mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\service\runcount = "0" mousemux-v2-service.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28\52C64B7E\@%SystemRoot%\System32\fveui.dll,-843 = "BitLocker Drive Encryption" mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates mousemux-v2-service.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.64\sid = "0d00a763" mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust mousemux-v2-daemon.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs mousemux-v2-service.exe - Modifies registry class 24 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\DeploymentFlags = "3" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2C32F161346498E4C95CAAAC8FEC9A46\MainFeature msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\ProductName = "MouseMux V2" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\AuthorizedLUAApp = "0" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\PackageName = "mousemux-v2-setup-2.1.30.msi" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\PackageCode = "CED169BD0332F194D9F4D84DD8BD9D1E" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Language = "1033" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\722300262BDDB884EB875AF32CC4D93A\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Net msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\The MouseMux Company\\MouseMux V2 2.1.30\\install\\8CEA964\\" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media\DiskPrompt = "[1]" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\722300262BDDB884EB875AF32CC4D93A msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Version = "33619998" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Assignment = "1" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\AdvertiseFlags = "388" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media\1 = ";" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\ProductIcon = "C:\\Windows\\Installer\\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\\icon.exe" msiexec.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Clients = 3a0000000000 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\The MouseMux Company\\MouseMux V2 2.1.30\\install\\8CEA964\\" msiexec.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 0400000001000000100000001bfe69d191b71933a372a80fe155e5b50300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e0b00000001000000100000005300650063007400690067006f0000001d0000000100000010000000885010358d29a38f059b028559c95f901400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd253000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd9796254832000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 5c0000000100000004000000001000000400000001000000100000001bfe69d191b71933a372a80fe155e5b50300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e0b00000001000000100000005300650063007400690067006f0000001d0000000100000010000000885010358d29a38f059b028559c95f901400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd253000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd979625483190000000100000010000000ea6089055218053dd01e37e1d806eedf2000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 4484 msiexec.exe 4484 msiexec.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe 3872 mousemux-v2-service.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeSecurityPrivilege 4484 msiexec.exe Token: SeCreateTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTcbPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSecurityPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTakeOwnershipPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLoadDriverPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemProfilePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemtimePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeProfSingleProcessPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncBasePriorityPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePagefilePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePermanentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeBackupPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRestorePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeShutdownPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeDebugPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAuditPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemEnvironmentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeChangeNotifyPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRemoteShutdownPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeUndockPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSyncAgentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeEnableDelegationPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeManageVolumePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeImpersonatePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateGlobalPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTcbPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSecurityPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTakeOwnershipPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLoadDriverPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemProfilePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemtimePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeProfSingleProcessPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncBasePriorityPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePagefilePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePermanentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeBackupPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRestorePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeShutdownPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeDebugPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAuditPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemEnvironmentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeChangeNotifyPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRemoteShutdownPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeUndockPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSyncAgentPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeEnableDelegationPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeManageVolumePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeImpersonatePrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateGlobalPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious use of WriteProcessMemory 24 IoCs
description pid Process procid_target PID 4484 wrote to memory of 3784 4484 msiexec.exe 92 PID 2348 wrote to memory of 5448 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 103 PID 4484 wrote to memory of 1280 4484 msiexec.exe 116 PID 4484 wrote to memory of 3924 4484 msiexec.exe 118 PID 4484 wrote to memory of 2400 4484 msiexec.exe 119 PID 4484 wrote to memory of 3108 4484 msiexec.exe 121 PID 3108 wrote to memory of 5140 3108 mousemux-v2-loader.exe 122 PID 4380 wrote to memory of 3872 4380 mousemux-v2-loader.exe 126 PID 3784 wrote to memory of 5520 3784 MsiExec.exe 128 PID 3872 wrote to memory of 2004 3872 mousemux-v2-service.exe 129 PID 2004 wrote to memory of 4416 2004 mousemux-v2-main.exe 130 PID 2004 wrote to memory of 3196 2004 mousemux-v2-main.exe 131 PID 2004 wrote to memory of 772 2004 mousemux-v2-main.exe 132 PID 2004 wrote to memory of 4056 2004 mousemux-v2-main.exe 133 PID 2348 wrote to memory of 5648 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 134 PID 5648 wrote to memory of 5260 5648 cmd.exe 136 PID 2348 wrote to memory of 2056 2348 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 137 PID 5648 wrote to memory of 2176 5648 cmd.exe 139 PID 5648 wrote to memory of 2432 5648 cmd.exe 140 PID 5648 wrote to memory of 3156 5648 cmd.exe 141 PID 2056 wrote to memory of 4836 2056 cmd.exe 142 PID 2056 wrote to memory of 5392 2056 cmd.exe 143 PID 2056 wrote to memory of 5456 2056 cmd.exe 144 PID 2056 wrote to memory of 5440 2056 cmd.exe 145 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
- Views/modifies file attributes 1 TTPs 4 IoCs
pid Process 5260 attrib.exe 2176 attrib.exe 4836 attrib.exe 5392 attrib.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"1⤵
- Enumerates connected drives
- Checks computer location settings
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2348 -
C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe" /i "C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\mousemux-v2-setup-2.1.30.msi" CHAINERUIPROCESSID="2348Chainer" EXECUTEACTION="INSTALL" SECONDSEQUENCE="1" CLIENTPROCESSID="2348" ADDLOCAL="MainFeature" ACTION="INSTALL" CLIENTUILEVEL="0" PRIMARYFOLDER="APPDIR" ROOTDRIVE="F:\" EXE_CMD_LINE="/exenoupdates /exelang 0 /noprereqs " AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\" TARGETDIR="F:\" APPDIR="C:\Program Files (x86)\The MouseMux Company\MouseMux V2\"2⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
PID:5448
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\EXE4FBB.tmp.bat" "2⤵
- Executes a command shell one-liner
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5648 -
C:\Windows\SysWOW64\attrib.exeATTRIB -r "\\?\C:\Users\Admin\AppData\Roaming\THEMOU~1\MOUSEM~1.30\install\8CEA964\MOUSEM~1.MSI"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:5260
-
-
C:\Windows\SysWOW64\attrib.exeATTRIB -r "C:\Users\Admin\AppData\Local\Temp\EXE4FBB.tmp.bat"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:2176
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" del "C:\Users\Admin\AppData\Local\Temp\EXE4FBB.tmp.bat" "3⤵
- System Location Discovery: System Language Discovery
PID:2432
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" cls"3⤵
- System Location Discovery: System Language Discovery
PID:3156
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\EXE5088.tmp.bat" "2⤵
- Executes a command shell one-liner
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2056 -
C:\Windows\SysWOW64\attrib.exeATTRIB -r "\\?\C:\Users\Admin\AppData\Roaming\THEMOU~1\MOUSEM~1.30\install\8CEA964\MOUSEM~1.MSI"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:4836
-
-
C:\Windows\SysWOW64\attrib.exeATTRIB -r "C:\Users\Admin\AppData\Local\Temp\EXE5088.tmp.bat"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:5392
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" del "C:\Users\Admin\AppData\Local\Temp\EXE5088.tmp.bat" "3⤵
- System Location Discovery: System Language Discovery
PID:5456
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" cls"3⤵
- System Location Discovery: System Language Discovery
PID:5440
-
-
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4484 -
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 191933299E8C79DFE36543D326218B55 C2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3784 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --send-wait=service --send-test=service --exec-safe=any,main3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5520
-
-
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵PID:1280
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding F770CAF434493F9D180FD79894737DE92⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3924
-
-
C:\Windows\Installer\MSID190.tmp"C:\Windows\Installer\MSID190.tmp" --send-exit=uploader --send-exit=updater --send-exit=main --send-exit=daemon.32 --send-exit=daemon.64 --send-exit=service2⤵
- Drops file in Windows directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2400
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --flag-exec-wait=true --exec=any,service,--simple-install="\"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe\"""2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3108 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe" --simple-install="C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe""3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5140
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:5940
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --exec=any,service,--service-start=true1⤵
- Drops file in System32 directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:4380 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe" --service-start=true2⤵
- Drops file in System32 directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3872 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-main.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-main.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:2004 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe" --dummy=true4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:4416
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe" --disable-fsync=true --disable-cursors=true --disable-logwin=true --disable-gui=true4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:3196
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-updater.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-updater.exe" --sleep=30000 --config-gui=true --config-path-simple=true --package-update=true --package-registry=smart --package-purge=smart4⤵
- Drops file in System32 directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:772
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe" --clean-logs=smart --upload-watch=244⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:4056
-
-
-
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e59cf9c.rbs
- Size 248KB
- SHA256 7f57285fdc1dd68f81d3d1174f8f3aeabb7d7b42da437567169731d107d76b16
- MD5 ad70eb6df496826c62850649f3886a96
- SHA1 b39e4ee463d037f279414613c22cf51170a5b55d
- SHA512 beeac2b4944e911db9d1701b95f08514ffec245758a1be761be49b027a2c9bae34d7809faf279acc90c9fc69fb79dad356ad70e63f1cefdf6a6fe296c08e4761
- SSDEEP 3072:/TPZ7QKHzaBoP+cwK67mjfmXyD66NN+0sx1IsckIsoccIMW0EkQ4kQAYwwIII4RQ:7Q
- TLSH T19E44B318A52A41C7B243DBD723C92A0E72C5AD3E96D0B1A8717C4D09ACCB74737E947E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blank\cursor_alternate.cur
- Size 4KB
- SHA256 9f011729850ecb88ee53e6e82b557676679e10c4fa031e0fa50cba440a97ffb1
- MD5 7a0bef51b70f4546c3ed4e52aa2f532a
- SHA1 fd1d5d91a266e9221d33b824d05ccf851042a908
- SHA512 f87f3df244c81b06ae013924f26f294a84382f71af25298fe82b359c2c99ef7b3631044d076afe86b7d2bbad15d494573d7b4fd893ee71681096247a14d99eb1
- SSDEEP 3:GlFFGq5llfl/t+lV/l/9lvlklolBllLllLllelnRxaEaiaLkaTNaad:Gl/GqIl6HRxze
- TLSH T124910149B38018AAC9490B7480970786A3799D91BE26F383AD66381F6E373C47D26242
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Kcursor\cursor_arrow.cur
- Size 4KB
- SHA256 179b052c61a123551b5c9478525370dfa05578dee0e052177caace209c9ca6ba
- MD5 51c2e31d59a284fe6af6ea5bc8b3a712
- SHA1 d7fb2de7fa462a98ed1e0ad5c6d203f28ea7408e
- SHA512 ada950933cddfe485658e47bdec631870523963f98a061e86ff3907b55346b4c1964b134292e5695275d7a75977953d2e7fcad5eccd69c9447e7be1ba0052312
- SSDEEP 24:TMIqB66m/lOclFlS1lRyAqrbkStqzE0vbY/0+aR08P0BUaP0waubv0UT7RzNjYZX:QHA/pl61lRUkUtaG/aSvXNMZbRwK
- TLSH T130917942B3808A57E59AA3B9D49EC73023339DD687671B4343D57E1B3B733C60161156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Orange\cursor_arrow.ani
- Size 12KB
- SHA256 b4751abc9f94f64ed7ce02aa1ef1f26a21d2a211d21e103d8f8b0aaaf90ff24a
- MD5 ebfdfc63c1abce47aff79bd6802fd41c
- SHA1 36fc0b415e00d2c550aa693f2e74f45dda2b68ed
- SHA512 edb87f142b17464a1de61f30c8315c338d360546016f1289e2bf6e368481c4b5518a7a9b961fd9aa9930cbcea6b1d92f0eb5217c5f56f9753eb0f6cef9eefdd4
- SSDEEP 96:oO2NwQiaKBOYHIhEWwFiwvKBOYHIAfew3ipKBOYHIU:oOMiaKQYHI67isKQYHIsipKQYHIU
- TLSH T14E4274F6E3CC778FE1148BB19A6D0F4A631ACDF98BCA6745418CF04425F67088E15698
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Sublime\cursor_arrow.cur
- Size 4KB
- SHA256 fdea05779463495fa87084fe2e1cebd945cc57e4e5260bdec2f93b8413505bcb
- MD5 efb767752e0e86c9f25d55494820a107
- SHA1 3e227eff7962b68817438ed8165e32c00253ab5a
- SHA512 13705eaab3e85ee4a4e9f7e758aa49d26fcc6f9db8b21cb94bb49c4996f1cc91d575d1f8dabc1e3f5a0b90e2b2f9d84da4545b45623025f8efb606f947f3672d
- SSDEEP 24:D6DlFmkBGGfFYrysPqmlVwvgOxAMfxDyQ1BuXV9y3ZNSXWX6FWjf6o+IzUgd:wakbFCBhCIMJD1Bu3yJNSX+6FWjgSd
- TLSH T1949135C2F9DC859AD4042EBCF086D341C3431D6488D726B24C14BD1B85F10F8EDA74C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 L\cursor_no.cur
- Size 133KB
- SHA256 a52b35c4f529403dc1be4d157c51d3bda0b2f1aab54fbfd3198cc959262bd532
- MD5 45ebe6c0330b144e516ffbc42a09ca7d
- SHA1 f8ec805ccd7264902f08e735e50f1ed805324973
- SHA512 2639212120337e66d997c67e80e8cafbf696561e584d167329af5a9c47da2c91e1eadafb336ba73397c7f58b47f28bb105b926adde086cabbf8d66fa6ec8871c
- SSDEEP 1536:KunYKQQmDg9Qjz0ctYI+4uUKh+ZWmM1PgS9NRjYyB4+dR7:Kaxt
- TLSH T10DD37719BE80D452C86CE8718CAACD6626327D779D20905AFC917F4F3CF2226E5DB708
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-01-enhanced.ms
- Size 190KB
- SHA256 a0378c155498b6b41cf6e8fcaaa56105f9bcdef26753c6be479ef3ddecfc05a0
- MD5 44862f8bcf5912f9ff52a6e53fca0ab6
- SHA1 a77d7854c36c72f0c8a5e6d73c9c1b82c58b72f7
- SHA512 66d3938ef041a0a584e51310c9cfe58f76346e047c890430d4cb901146c5de93d48d20dbd55ba34db966beea38d607dc406bb303ba91459578308292187288b8
- SSDEEP 1536:ncRWWqtSb9VAIADRsQ58iOgG2yUhmf6AvcuXBgR8pGO3FYEzMzWvQ16:c0YossOgG2yUhmf6O71YEzMzWvQ16
- TLSH T14D1434A4E39550BCF25DEE11E8AB66FC20D73DD7B0C97FD907AD42C042A06916E9983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-02-enhanced.ms
- Size 190KB
- SHA256 58184940d37e0cf3ecfab130a442cf5f2e0411dff33f3b314f0d02b42db11f94
- MD5 610613ee7b5e6ebd7a4b17be8f8f3e6f
- SHA1 7b7e20f8c7996a35aaf460ed7cb8a29614bf18bf
- SHA512 d9ae921d070e8eabc05f6fbb99e94be0984235cd45b900042d00a3cd84e4a87880bca430becb595eb7c972e62d69b5214f31cbeba72c875fbf3702b2ab019114
- SSDEEP 1536:9KC9/SZx6VdSgcel105xj4f+r/UkWoj8gzflcfWJAeQFJcU3yNDHSox:gtOj124f+r/UkWojDo3cU3yNDHSox
- TLSH T1D81412B4C39951BCF294EF01EE6B6AFC24CB39D7B4C47BC403AD96C483A0645A95987C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-03-enhanced.ms
- Size 190KB
- SHA256 d17cb9196afd4fa870702d3d1a38dbfe51c25416bb8b0323648d08a390b0959b
- MD5 e258cea599a3257aeb2ad20a306ad51f
- SHA1 16cc416cfb3bb4a24aa9c9942c1d3f58bf93b19f
- SHA512 87c6d5f7735fab8faccf2503386b1fd1a8a032cb69dba93c8d4e708746d8ee8c2693a7abe824ecfbbbd43b1ac12412e5ccefc022e977099f69710d9d90dfdf8c
- SSDEEP 1536:N8pwSKZKO5PqtqXsb4XTjetmAWiuWNmYEaBOaYXOwr/XUxeGTo3oJ5b:C25KbCetmAWiuWNm2AkxeGTo3oJ5b
- TLSH T14F145754D39441BCF21AEE14E49B96ED28EB39DBF0C97FD9074D13C286D06816BA983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-04-enhanced.ms
- Size 190KB
- SHA256 de99389c3c16c42ba4bb2a49650e2b8bd4f60abdb3cf80968077c07c11a0f1b5
- MD5 a3bc2f811d601ce36f09b9fc41456d1d
- SHA1 a888f0b130276a233165f7d847cd800ba9154ba8
- SHA512 89bb7b54eac2a95c337b57050b51761e2faf916290f68d393d34d1f96474fcd4c5bbeea85294f7ee079e05185dbd2fc7361fc82405be35d2e9dba84f4d637e0f
- SSDEEP 1536:GNsd7IAjKCLgfRYi9HHHZuH46Bsfon+bbtjGdQ1nNUPhWsV7JfHrkrv:EtR795uH46Bsfon+XsUsV7JfHrkrv
- TLSH T1531411A4D3D991ACFA44ED01D8AB97ED61EB39D774CC3BD71B2C83D002A0761695A83C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-05-enhanced.ms
- Size 190KB
- SHA256 4fdb175522dec0c8d5f077b1e93047bd3f6c3ef513331ad2b56d7771027d3dc5
- MD5 d7629bf4f953bc8700f8b6ffa14ffda7
- SHA1 1791be079207906a659495dd216408c05b61c77b
- SHA512 d59401c6a67c2d91b96310361bc760db49db487b83b7b1444a3ef9aed403c41f145e248fac093b0967bd5423c3a96dbc559115752f2ac275fb6c6ae41e3b6784
- SSDEEP 1536:uZr3Td4jlJXqpqd9QerfiNmw9nJpC+1CLLCvz3K2zQUVpaTLisTO2F6:ElS5QNNmw9nJpC+1RJDaTLisTO2F6
- TLSH T1D1141261DF8941ECB3789E02E89B6AED10DB39D7B4C9BFF4360C82C9D2D0185A55687C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-06-enhanced.ms
- Size 190KB
- SHA256 813501483e11e4357ad82057a027adabb39ab39b62b1e6779232d89c79ffff31
- MD5 87a08c09cf119da2f5c0fd4559fa1811
- SHA1 e3ed25912fc983596c5ac3e6288ea19e5c36bab9
- SHA512 e9c806f8164db6f8b28b91c704b268da88c5a1ba25310ac382b9b4574d20194868ab5d671192d6f5e1c9af6119d04a0e1f94296e6e9c989d81cde2c6e6979525
- SSDEEP 1536:nLtFs/RsmyS//JuLoKAng5gNP61i7poI8g5NWQkiobtdgZ4nYBsMiZI14fOefaYK:LtFB3gs214fOefaYvlZwdz1r5mAbiUJ
- TLSH T1851463A4E359529CE294BD01F4AB72FD109B3D9FB4CDFAC42A5D03C6C6A01C9E54A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-07-enhanced.ms
- Size 190KB
- SHA256 e23774cb98bf451bfc535174aec58493ab331d399f2739cd8644d2947e715dea
- MD5 0381730cf0aaf883b22098e660f68f0a
- SHA1 9bf4038686c4c8be3d8f4369a99897cc5041ffc5
- SHA512 3fb1bcca63a1f285bdc23d6cfcc5586eb6e1be6dd588e42086e39e726e0bb8340100445678dc1620846705e78ac9b0b82abdf8d3e4bfcc5b425960a066c6daf0
- SSDEEP 1536:JRwT090lEmGGrfTMwuXr4c14qM3cR3wTJwigWZc7tCQ4z4wBamhIw4vpa:PwTPo/X34qM3cR3wTJtxJBamhIw4vpa
- TLSH T169146490C38C589CF25AEE01E8AB96FD25DB3EEBB0C9BBD4174D27D0469219172D583C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-08-enhanced.ms
- Size 190KB
- SHA256 c5e037b1bb79b373a4d9b7e9c637dc3cb9d80ffcee3acc8678d35c176f63b9a7
- MD5 27e040a790b12c0b3aae9113d197f6c6
- SHA1 a7e08899e6937f8b9609293ae4ed31835550a8ff
- SHA512 6af594fe80abd3eb97fdfe775f754e0125a97bae3a08e09e1402c1acdf0a65c0a3f1261dfe607d7012a21a62f4e535f046963ecfd9da8789d39336aedf5b4cda
- SSDEEP 1536:gLvOdRwHzpQKdclzBAQ/ArXR3K8cNuub5OK14GCyTzuGV2HvJjiPP3C:EiMUBSrXR3K8cNuujOG2HvJjiPP3C
- TLSH T12814E1A4D3E9919DF258AE00E97B56ED24CB38D7F0CC3BCA1B5CC7C002A19D1699987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-09-enhanced.ms
- Size 190KB
- SHA256 0c7bfd3d6181df7bad3a4aba114e3f82799d9befda412b117b7765c4f69eb82b
- MD5 eb3f867cb35e4a0fdd384b084747673b
- SHA1 7435b1212bc9bf980877e38cf9c244dd260ac6ff
- SHA512 ca3454c2f2a4f8fd3bb1f91c2507884cc4ede52d198ec60c3bb9875746b7725f6ae5189af96b68d9a95abf71706ecae2a0233c05019637dea8149d93f74f88d8
- SSDEEP 3072:V+DbU9w1Uy37Jg+IBMOv6SVg+jfgY+qAJ5:V+Dbswok
- TLSH T1701456E4D79410ECF254EE86E95BE6EC14C739D7B0C9BBD80B4D83E8C2D058A659983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-10-enhanced.ms
- Size 190KB
- SHA256 1b1836cbf0baab90c660038534e83f6c81b1ba2f00b4f66338a6f3d9e9576a1f
- MD5 8cb09e5ab421da09bf30015ff09fc00f
- SHA1 0cfc6db71f952431d46d4efb6129857acf9aa8ee
- SHA512 4989c87f26f2e103aa6eb836b65d4130d3072fb89a8b68d62c0a760e9c9813e55744d1cd882c6e33997d0fa310717f1a94706dbe22a637dd138c55a96ee14c25
- SSDEEP 1536:j3WIcpjsVoIH/gv0XcLwpOV/Pgizphk0HA9GOBn5f6RgkrAjce/jdsV:LYmBXVOV/PgizphkhSVrAjce/jdsV
- TLSH T1C914FBE4D09952EDE690EE05A58B736D2DDE396EF8CD6BC53ACD03C106931C0A50EA7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-11-enhanced.ms
- Size 190KB
- SHA256 89739f6bacc91e96cef27565796bb21b277127ba64ed0247d0d979845315426b
- MD5 2a59420b6d271620d2b34deaa7df921e
- SHA1 5c02a1d00f49fad5443f7b7ae5c0da9020171888
- SHA512 e9647b94664280b8b45f80a8d1c7ca18c0be3e543f9944aadf869f9c885221d8af2c9bcb2d66a1ea197755f2de02583ff34f2b38469af3715708cb92d7f96f85
- SSDEEP 1536:IBA9LAvUaCqPHtoiZLnQnRzk2lQ7EjSqcpIu+XCg5RENG45fdrTPInu:+B5rZ6Rzk2lQ7EjS0cI45fdrTPInu
- TLSH T1B61433A4E0D891ACFB52DD01E89B9FADEDE93D6774CC3B971B6C07D102A05E1644A83C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-12-enhanced.ms
- Size 190KB
- SHA256 be38032b6ca822f94e4d2799d74e16089a2dc0f1288702c725d486964a089514
- MD5 5f7d41c1c87e18d6f07135381308f95e
- SHA1 4c785507a9063b0122eb29340fbd5ddddbe7236b
- SHA512 cec501da84361cf17ad82bbd400ad3dfe4683beb6563daf7e2fcb8166d80a7ae64753f70f1d38a2ddfbeb61e019768e16c02511c64aa9d105913a001a0e0f624
- SSDEEP 1536:tLrXQntcrNZFSXgLAlQ8ujyt4H+mvC4HFkxPH0GwqgNpQIg79jR+IzKcD:hrXJfcQmt4H+mvC4HFTsV79jR+IzKcD
- TLSH T1A814A5A5E05552DCF2A4AD82B4BB77BD1CDE3C1EB4CDBBC42A5D07C606B01C9A44A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-13-enhanced.ms
- Size 190KB
- SHA256 9a3f646e6a0c2ad3da115774c631f219024b12f4a17b5860668572517b9a666a
- MD5 67065ad67c008a4ded80e801365c25b0
- SHA1 27e6a906f4b8ae0e517dc1892e70f4d4a4f81819
- SHA512 254292b5f80e859ee59c471309f4d0243ccb1061741f48b793475acf684fafdc9a6a0e552e26642f006bd9ba384fec2a80f62d22471151ae9ee40598090cdab6
- SSDEEP 1536:VmpqJL4J4ofPyPXYfjPeQzKDXYcPbOKygyHPY9oA9zxQY3BmeAxbswS3mH7EWQCb:cUQYBQ1T1L2ggRCSfiyCrzNnOzDDi
- TLSH T1A714F4A4D3E9D19CF25BDE00E97B5A6D3DEA3C1AF0C9378A1B4F47C142E0191688987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-14-enhanced.ms
- Size 190KB
- SHA256 ff3e14dd87020c62f934f024ef819428d4eb825ea6b1aa62a5435e807fe155bb
- MD5 8c48ffa150b5c081ebb81a699a2e777a
- SHA1 b6ab81dedf7e680972815935ab30acdd966e886a
- SHA512 cd5a88d3112e9dcc6326f53502e9af94cf120b189f90157beb55c936cfb1d520f7c2461aa51d4ec9597e2b355f02947a9890070f45964d99d87eac618806370d
- SSDEEP 1536:H3+AMpwbhYtkzwPcnMrncOlP/wSDZxUtEQWGhCc+vbuwE7QTsOPTtc8:X4OdnBOlP/wSDZxU6aF7QTsOPTtc8
- TLSH T12A14FAF4D09952EDF790AE05E58BF26E31DE396F98CD6BC92EDD07C106912C0A50E86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-15-enhanced.ms
- Size 190KB
- SHA256 ddb1989d1270e46dc5c10a2e1f4952c84eff13a5bad9a39cf75b5166e8127e12
- MD5 84c9a4d88f1244d6f850a02d6cb62d69
- SHA1 cf7db2709663370e2c18f3e71ca29afb3bd7b1a9
- SHA512 79ca4b7a36f5e21ba72b26f49c845bd686b9b090530f32ff526e438635f21cf9b8a1dfa7ed9bea5acbe95e626d82e857757a0d6207401160dfa78a4d3f0b8264
- SSDEEP 1536:IZItbkU/eivcPhA+FDnjGpD0e9Ars7C3fprWpMpX5YrdW4JvNbzf4HL:mdVnFWpD0e9Ars7CjEo4JvNbzf4HL
- TLSH T1581432F8D0DA91ACFB489D01ED9BB7AE71E93D1B54CC3B971E2D03C116A06E1644A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-16-enhanced.ms
- Size 190KB
- SHA256 e749e35672b080223b503d8145597e0e3e264e9e2e2d796506c08bb7248c1e35
- MD5 af15be9c0a748df2b8f83aa4d3d68dc8
- SHA1 c27d5160cd6178c0801bb2c7386ee3c001e776ce
- SHA512 3f9c098405031654ae29eed35392c188919446633c858ac4ef22e6b2bf8fb341b35e93fac7ab3689f7d026e078ad2307f48539418648028a44068f22e4f73a89
- SSDEEP 1536:RLQIkXlMkilVz8UbsRMc64bVgXmmXigndBSfI05/pHtI/Ig7tDxOoD68m:NQI9H4M6VgXmmXigndwkl7tDxOoD68m
- TLSH T1E21464F4E055929CE394ED00F9AB76BD30D9BDDFD4CCBAC52E5D07C606A01C9A48A86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-17-enhanced.ms
- Size 190KB
- SHA256 8cfc2f60a6ae3fb1b4d4d54e71b5434979f7152373719ace4b3550bb1435daad
- MD5 fb66466f0cb0376338cb02426b79bf32
- SHA1 96e55442275877c8c8c8e3832cfe493c1db216dc
- SHA512 5ecdaf06afb8c972e9a785252788cfa20e74325f89dd450181b785341aebe99b06e8aa9a73fe15633a17c3e78db9971e703687a3650565ed3cca75d14021740d
- SSDEEP 1536:i7DOxddmP5TvF8Z7VsA+rbT1z+ggZ6SIoiDtZr3/vsPqNi7jdXODzDh:a2MEV6bT1z+ggZ6SCCyi7jdXODzDh
- TLSH T1AB14F4F4D0EA919CF358DE04E97B766D36DA3D16E0C83B8B1FCD47C11AA0291688987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-18-enhanced.ms
- Size 190KB
- SHA256 e354ffed343a2f73931bbd8508830a90f7f062f171aeeb1e34492d5a77d7dae9
- MD5 97aa0aefaaebf10cdfd0b38015522d3c
- SHA1 7c5ad4c142c492fa2e1590f02b66a41d6c68de8c
- SHA512 f674ff3a0ecf058e3a15fc94ecc0b8e33b3109b3dd712f4bc5bd6661cfab7cb4df0010b68408e4a67e76352fb7eaabc05761f3be372b34818eb8a2087fdf36ab
- SSDEEP 1536:LHSskZ5+tAyJbY/gb0rSz+tHX4aLR5s+dA3WALx/3Qr4Ez4bEGnLV0r:Dg69b9+tHX4aLR5sL+9z4bEGnLV0r
- TLSH T16A14FFE6D0945AFDE2589F05A78F716D1BDEB92EB6CC6BCF2ACD03C105901C2650E86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-19-enhanced.ms
- Size 190KB
- SHA256 4db540b3201bd90fa49da0d43794bbb4cbaf3e5c70788be83749d264f2901aff
- MD5 750196ece9fa7165d21f43ba16a182d1
- SHA1 78887b1f4c2bea610a5d68aeca0c39759378bb44
- SHA512 422deee7d0c123373e804bf0110e5aa97eb4636913331940b13e212aa8b66775b54108e797755185793ae8906819f808567d7a83455c7e3100821cac4bcea246
- SSDEEP 1536:kZY+6t6WLffhgIR7kIDna1dCEyBNJ/zzdxoCMQ2sPXzBqDn7r7ScRBwgIggIAhCx:6RxrRqh3gqRcH4XOaU0clbpPX7Ubw
- TLSH T1651412A7D0DC9DBCF64C9F01999B9B6D6DD9F91B64CC3B9F1A6C03C002A2963644983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-20-enhanced.ms
- Size 190KB
- SHA256 e48ca186f88117ef78a141376314f0a6dca9d3f8c9ae25866b0f68bbf81d3345
- MD5 2408545f3980b07ad3729e89ab9253a7
- SHA1 4d2fb02fea4b6341f3b2cd70bd9eda1d19c7b842
- SHA512 fbcaced5542425f1b43176eae62b25d0566c708ea3b2763b0558a4fa3f0f83d2e0aa2e28f7d12aa293f4a5fe8e34f64cd06f48480d04bca73efd30047f630970
- SSDEEP 1536:v9yy7LL5Dck2rymfZnZstsuZgweFu1e375CZDgJYsQkMcjNLx6T9t60nerWXKmQd:NxF5r0AydQfG+3aw/NVANTFLZWgLy0B
- TLSH T1691498A7D4551ABCE69C9F00B5AF71BD28C9BE1EB4CCB6CF2A5D07C205B01DB644982C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MouseMux V2\MouseMux V2 Uninstall.lnk
- Size 1KB
- SHA256 649d288abcf74e9cfa7d4bafff8abb682ebc636b4af960f054454afcbbedc6b5
- MD5 3d6bfaf8ef389f024d609f6b0147c1b2
- SHA1 32dd892a872ccd5888b4c6c4aa7eb546f5b5e50a
- SHA512 cea95b1032698c10b22713c7da040b98ae34cddf65c5e4e319f2038a22603622fffe362b9faba80e16ac0acd5c3bf2ffb890696037658ad6c5f5cba9f145f98b
- TLSH T1D141F14D4EF707B6E3A14BBAE6735700A9F2FC62F5424F1F824585861C422019D25F7A
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MouseMux V2\MouseMux V2 Uninstall.lnk~RFe5a2721.TMP
- Size 1KB
- SHA256 7f51df4ff6e22a16909d801a151caaa19a3ac0c20e9024bf19089a4aa56505ff
- MD5 8ea628fc23c5e75112450d0347976a9b
- SHA1 8b1ddfe908ad511ea13361b08e9472a190eb2871
- SHA512 936770905db0e514323e22250b85d0f3e6930010554b59f852fefd23aa8cbb32ae8dc1dadcdef220a67c9c47ca4924ec7919a564c7ab03e7f832ff2bd783dd62
- TLSH T18441E14D4EF70BB6E3B18BBED5735B00A9F2FCA1E5524F0F8245854A08422029D25F7A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05
- Size 2KB
- SHA256 82b22b2289ac975cbf155f06fbdfdc7f284a3697a61ce93c6712489d262adfd6
- MD5 3b24ab7a919f605070a7ecc5bef255da
- SHA1 4bb68cd27e204a3cd5ebcabaf1d7bbf40cad0aec
- SHA512 e23ee2b1168fd1ece384136f247295d93559c2f6f2e4810e9c6de2cfca914967e044cc1a57386f37f3ee3c01bd5b4f15609131d5c8d1b80e049014fba417609a
- TLSH T1AF412BC38D4420108F45156BFBE2D3375DB4A8A509C1727A589DA19B2D8FFD8751E81D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B
- Size 638B
- SHA256 6d81d8bdcdefded7dc4fe400f03f55871fb41ab2d2b13d04a2e9ec9d43276ad7
- MD5 38e6ae5508425a5498b9b2453112f090
- SHA1 7f73a20a4eaee03c2139a7ad8f2eb3fa6b68f43e
- SHA512 46ddc1bc68dfc432428e3cc78c60789b3417f578d0128a02e8560492f4a66205f0fc9218a4f5b449cd67d1b8167da52c446592407cbfd893cd5626e85d540b09
- TLSH T1F4F02D7B6D6AEC80EB0A19C28654FEA1A0E2B33E70E109033935131D4BDBA6A91C7508
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05
- Size 492B
- SHA256 0dd084dbada3fa858e9045a513abf17ea3f57f749452ce6cb9ca4931356c0abb
- MD5 4e075835e2aa0913f15e2fe10a9d7354
- SHA1 89bdaed402b0447cab53b77e8ac0b889236f5ec3
- SHA512 3188c85b2c88e166b377b14f633d2a881e4e4d9f951c06825420050c8ea466268c37162f8ab91da84cd6aaaa0734f660ce7c023ba1c2189fe2baae150056978f
- TLSH T1A3F0551832FB412DF832EC7596E9E4AAA81EF1117C0055A60BD51A196E63F02AE33831
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B
- Size 500B
- SHA256 2f915db3aee94d5e8c4bd94bf696b081410596eececb5d74296c8022c0f8ed4e
- MD5 c1a56488c4b45c3cfbfcdeaed511cf01
- SHA1 5ca522d58a297faf770388bc0a0421c04f497005
- SHA512 d77d1573eaa885d135710f003c3df9949ce94adfbed64792ef31e4cf07f2d945ea7a213faa38f4f9ffe1d216f2ef7256f2e293507145d9f19b6020e95228d461
- TLSH T176F0AB7835FD614CF2338D7D03FCF2A9895AF227B6069FFE278202091901B512E5179A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2348\header.png
- Size 1KB
- SHA256 600de235b62feac94837d860ab21a03f357230ede7261df8f317279c5f420aef
- MD5 8bd342c427c0d893be4612a36098b841
- SHA1 eba9e92d61ce2ed9f07f001dbf7b9589ffe8a651
- SHA512 d86b446344154477d99906d2482dc0009c6b9e73d98941237f3c1be93b7409bb56a0309ed49a4aeb9cda66fcb57e4b8d22b4cda8eb8788c178af1ec1ccc67ce3
- TLSH T1EF3108A1FED844B28759952602D31208E06F078E2BA72877756894B9B34DADC04EA0A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2348\singlelogo.png
- Size 10KB
- SHA256 fa90c84876263a3c426fb3396e7356f4a02d6955203ab761ac79f4ac923af029
- MD5 2118e9dd6fc825560d4d8a4a46931779
- SHA1 4c3086efd9fc17bba9d76fc9e0370a3f66d3101b
- SHA512 4aca9155781ec9a77b18b5405e4e6b3226b8885911b4cf0f6ec56b70ea71d8a649937c5ecdc6a92932b666381bdd9eec91bcbce71766f0e60fc1211265d44d71
- SSDEEP 192:P6ByFd6AzLEeqV4HPmvTEuAhwH6gyomJeMaXHa301B8MzenX5HmLj4AQyL:SBq6AzLEeqV4vmrVOZfxJeLARMenXRmF
- TLSH T1E732B05DEC1DAB70BF292C9AB81EBB54F51B08D8D92F167023C2D538E30C2E80515D96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2348\whitebackground.png
- Size 156B
- SHA256 c6010f2418ddb482c1b1f3c8c5db5219901ef0eaf21bd02db4341f68a17cf0ff
- MD5 9b64d588d263a3ec997cb9325e8b4714
- SHA1 3f8c76cfee9a518655640ddce0699c3b20356ed2
- SHA512 c4e63c097ef0c715fd53ebcc90b956d2b8692cd25ef40d6a0f51eaae918d59bfaecf4d269642e3089b769453aced00d7c8bd0ac9d7e6a05f541aa0e2e8b73298
- TLSH T176C02BE36A0D4C7CD96B093F61BFD381C63B62490012111BDC13DC1C74F54908D61313
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI50C6.tmp
- Size 91KB
- SHA256 b3bc41b77a13c3a45d43fd2a7b1cdf37f5212798c602282e0e0d1ec52a4dbb8f
- MD5 3fe30e3727ac3e4a3b6e832b6a14a1c4
- SHA1 a27a7f7193f5255f4a7b4150a000998cb4a420cc
- SHA512 b842766faeb6ce7f641854f8d120d8c34808773d4c0916b3097f04f398bdf36e92405804ef998607ebbbf5299b42bdf35420f4cc99e4a82f1508b55a058e6827
- SSDEEP 1536:gs8qvAyBseBbMnt8JO/rWK2ilvKQtjEzDDPaSvi1MBnAJYZnEAj:FjBBbMnt8G2avKyCDvBAqZEAj
- TLSH T1B9932A4177E45179F5E369B02FFAD526CE76F8A8A472C42F4764080B49E0A52FB26333
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\PersonalFolder\MouseMux V2\Manual\MouseMux Manual.url
- Size 63B
- SHA256 d07ac2ed7ae432dfbfd2611a6bf17225892e4337c487ed4e46ed0f81200c84ef
- MD5 618f982b635b22b4c2bcd0d713c73b47
- SHA1 b807aaa7d0810d3c834f8587b9541f4a5ac444db
- SHA512 416ff043fb7e5040e7cbbec6c52186fbed6e6bdd7daa790b78103794d46956cc6a42884a6fa88fb89d1c832622131e4b3ddfdd9ab774e6f0247c1f53a83eeede
- TLSH T1AFA0024CC349E19B8813CE0C70F9C914EC2224F49173C8D5F2749E2569877D566C8318
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\mousemux-v2-setup-2.1.30.msi
- Size 1.7MB
- SHA256 18d9e63e7d33d377701cbc1e916933397e22c38ac6ba13246cfd87ad50775cba
- MD5 5814f18cc6a2d345a76a25fa9683b274
- SHA1 3671e601314202159d9431191c3adc70362bf12f
- SHA512 a910940762b901ee64c0d03b6fb06d2c821a9eef56106f0a857be298be701c10e9cf77346e4b1946cb5508ddfdab6fdef29bae721c26fd381f4e12f5b8f94dab
- SSDEEP 24576:LeF8XEldu0YYkbMQpPuVDo7CFsL3ajdfvJNERjRLmAFniXsf:LeFW8dRYYkb6qC2TaRXJyRjRLmABiXs
- TLSH T1D285B60365434462F196213ECBD2C33D0A2C6E78AD77A42B76E4BE1FFEB954359032A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\dbghelp.dll
- Size 1.2MB
- SHA256 d02cbb667150a927cf2c97e64592e882e1edf055dc5fe292a933ed32cf0523b3
- MD5 f5cb2c59a7039c2caccd95497418abf6
- SHA1 1a9deeed7d6a6b9bfff3e7bb81d4405ace89b78f
- SHA512 4c9f48a2e0e72895f332fb204d641cacd1dd2f0b69a1239220ada5df1f79c73e532260c1786e349036bed170aa70cf110e9f44bbfd86b50d0aebac78b9ee9f4c
- SSDEEP 24576:gAkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9p2:gWiOuRg/iyFzb2QN83XfeYab2
- TLSH T1C2453B31E641817DCCE731F656BD323D266CAAB2130422C722C81FF99B666E17E3459B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\exchndl.dll
- Size 36KB
- SHA256 5678485b413ada98c8a11bcd6c2f1658cf80d1a77009979fa82ff9f1371b63da
- MD5 aa922d6147569f09579a288dd0966ba8
- SHA1 d794f017d9daaa08125c0369a49845616a9ad273
- SHA512 07b2a0f7d9a5c2b4d0daa02675981ee256c905089a34a0614993b8f144ffba37cde2a310a89655e69c6c0a9ccaa7104984acf3a2a795fc6cd517df8d5238482e
- SSDEEP 768:32cZn4kgkmzEgYBX7KmAb9re4gGGwcTSbIwrYwbiRPJRT:32cZnyzSRAV9iSbzswbixH
- TLSH T16FF26C67BE0AA4E1EBA35E7041C6E737CCB2B902D5719873BB6DC2C4E953753121A036
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mgwhelp.dll
- Size 507KB
- SHA256 c566f6e2a36090f03ebee0e6fec4d43b2ab0feb361d1bed0123da9e54c09365c
- MD5 a6c25b869cbd8c7097cca71137b2f1ec
- SHA1 53e58d9d113f40ebbda2e320a8ac26ff1a187e81
- SHA512 3cacb269ccda309d98151309bed9e39720c7aeef32a85256930f04a87df1807fa009ed5e592783dea7da9ecbcc37e11f306d4cb8fe52917504551f8c4f1ede32
- SSDEEP 12288:QHQZdu8wgdWpMddk3IrdxQNltYJLsZVhtKa5bHTpj6:QHQZdp9kMdq3QxQNltzZVbrTpj6
- TLSH T117B42924FA4721F4EB534974814BF73F56207A01C025EEF6EB89DF86F873A222C15669
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe
- Size 478KB
- SHA256 40f212507a81377c08666d09fc7b44431d8eace9c41516c9670127ccbdd0d7c6
- MD5 a94067baeba765877dfab85b1b761d73
- SHA1 56c405f25b69fabe79966dde764c6985497e8f15
- SHA512 1522fab0c467eca543959ba7a084fa6263def2f81e1c8a2985f96c7bbba8b63b5d93e9bf74a19149c1b7cd33d1083375cac42f02ed3be6006ef87e35bc9f8cf2
- SSDEEP 6144:mTtggGVZlcOQ3fzbQc25F3a0AYJ+0WzsekvcO9AOOkEerO05P407s4X:nVP4z2faYoV2uOdPr9D7s4X
- TLSH T161A45A15E94288B0C91389737B8AD376C5F9DF16322E59B3DF887613E8321619A33D1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-installer.exe
- Size 1.7MB
- SHA256 7b541031d22d30ba3e59f7c4e2836173f0dd867507e4a51e33c534545df1eeb6
- MD5 7f08c455c0a47e9b025ecf54517fa621
- SHA1 19b310b3e761facb48e58a8dc2d3a1461ae1b559
- SHA512 72e4d11bd18f23c729631a41846867f99ff2b6e655e22436645628d759f0e33130461ae4c0b1299ab5f4f45c4d13f0193a9a4bb47dd60f546e9ecdf6a30c2c3c
- SSDEEP 49152:dd7OFo/5EJ1bfvFyeeeeeeeeeAeeeeeeeeeeeeeeeeeeeeeeu0+:nOahEvfvFyeeeeeeeeeAeeeeeeeeeeev
- TLSH T193851717AE5B8453E6810471F5C2C236492DEEF8412B9F236AE47E3F3EED513941A60E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-loader.exe
- Size 358KB
- SHA256 4ed972abbce6e67c69a039728c0bad46eac4bcd27c54ca2f16f4d0e3d77ceaa8
- MD5 b0888f8844523bcd49267f51f0c63198
- SHA1 df85312702e7adbce1c8d661213bba2ee1598bd7
- SHA512 0df9d5d8d0c2a3b51dc016f37a1a2e9e1cec4102fb6fd90f2f81ba768f577f0be9f9ae1b9cec3c742d8a6b5be9f6e4e7966d0b486b24f6f0baa1d9dd5db6fec3
- SSDEEP 6144:B62fDE/NYPKfIW3sekvcOopV4wLPCnDRF2wd:QMpP+V2+VDoDRIwd
- TLSH T11A744904A54789E3D92381308893D77B9E3D2F1D6224987FE7E8766BEF32D429E17148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-main.exe
- Size 1.4MB
- SHA256 5442ec94bac7196bc4e340c94f05fc6876f6b86b46dae5fb750b6593883503f9
- MD5 419ba75c4aa02102cf55b18d03a50949
- SHA1 d8061f367e98416352d48166a8f4998abc97037d
- SHA512 7355e513648694c56bba2bfc07ae8e3a3e9ae74c5f13916b9fa1fbb5bb903c7ff697042b880e96f72daffddaacd4d3e5cf3030e9c14eaee85020753306e2dafc
- SSDEEP 24576:kqIRS41yw+qR8Je/84kMASTObSDBvjT9pYql7ueD:VIwMpTbT9N7bD
- TLSH T147654C079347D0F1E6921230C5CAE73A5B6D5D394124CEB3EAE8BE2F7D7E653481920A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-reloader32.dll
- Size 290KB
- SHA256 73b1243f21f0c8ca0a5f3e45b303a6eba8e6bf364571d1dc9edeb94fa031337d
- MD5 d01744ff5669d60cc603dab2f182e480
- SHA1 1dd953605818a97196490de209bea8f613db1f3a
- SHA512 e03e2036298146da58b899356eed5ad926de54544cfdf655de452c49805d7156e779339e7177efcbcaa2333fc2bc6735cdc8dff998e2e2f5e2ab8737dcdd1e49
- SSDEEP 3072:84jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZr:84j1GWYXiBLdVTMxE5ZgavZr
- TLSH T1D3546D02E540C27BE5AE013511FBAEA21E7D9520276BD6CB8BF4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-reloader64.dll
- Size 344KB
- SHA256 3a7596c7954d099f3945d4423b6831e4d9e789d666670946adbf2ca87fceb573
- MD5 4f4133754ee326a51deb89aef3e98c1f
- SHA1 54f4b584a7fc1eb0a72bbfe9eaddce83dd0705ee
- SHA512 463fa2313c2dcc7b295d972c4dcfe62190a2c74af122e5b17897c5203bc5401817560ad7047c2e0837844d0b80999fdff11529c5bd4872a32909d9e124f4ce2a
- SSDEEP 6144:Diyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUb:DDhFyvqw1rZ3cNRFo8kb
- TLSH T1B2745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-service.exe
- Size 317KB
- SHA256 79d24dec28eb93e14b88cb35fb68da517ce85cfa6c085520fda85e28ee22cf3d
- MD5 5d2ac9a881a9795b0e2988c691e797a3
- SHA1 5979b17dd5e5a7471db8838553ffedb3bbfd48f9
- SHA512 761e7911bfeeee5d01dc1aaf99dd7c10ed278edc96611ba8bc0c505b8c2b14e38519a54c87a7b0da881ecf028f0ca948d2aa73d7575504354f361b3afc257601
- SSDEEP 3072:kZ7mxig43zhuiWkFoElsfX0BAvUUp2q2WTipkeLAVfWWc1M3nLm0W4Ew:07ekxlscOsA2q2WepkeLBsDzt
- TLSH T10664F746ABB288E0E677317AEF43D276DA23EE14A01CF557E3C5FB97743293A8105205
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-unloader32.dll
- Size 290KB
- SHA256 82feb4b6ec20a4863ff92c53d0b541da7e9bdf28280aecaac494e044cd84f86d
- MD5 c54219c886e161623c0b520426c72043
- SHA1 5b812c7e7e5c0a0e35f889bb182abc9e40353b2b
- SHA512 8fd2d361edd2b80353a9b02712e113e4bce00e616d26c4e4a0f90fdf8c2735fe1569c2c4b126657e7719b4e2f020836e1348114cc2a70b1a57ba2134113f121d
- SSDEEP 3072:C4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZC:C4j1GWYXiBLdVTMxE5ZgavZC
- TLSH T169546D02E540C27BE5AE013511FBAEA21E7D9520276BD6CB8BF4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-unloader64.dll
- Size 344KB
- SHA256 f2d1bbad9432cd393cf457c472ee1b5e88ca022bbd43941f3e1c63e2e07ac1c9
- MD5 8264d5a02e770bd05e3378823baf8817
- SHA1 0dba1410ba08e032ad0e6e51ba32b19953b45c74
- SHA512 14394709d6714e58b389d23a167ac58721ffb57c4d782f5a24ce583cba0d465b17686855bad414b098f57354c3b3400943bc8876d07013eecd1fe0bc04451f52
- SSDEEP 6144:2iyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUJ:2DhFyvqw1rZ3cNRFo8kJ
- TLSH T136745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-updater.exe
- Size 637KB
- SHA256 83a0dcbf30eb14988cde3edb0366b59b715553c94740234f985c678cb1920886
- MD5 dc161fd7777c328f470320e2b8daf539
- SHA1 de7856c6c847f951fd589c131af92a53498c75ef
- SHA512 35be641adec69ec081110dc9840d0d456326a51f4a4846ae1d32c9d1076e81d8c66c9a9c8d6aae18f190c756e42d8be70973cf77b4564bfa3f6be421236ee528
- SSDEEP 12288:tLg9/B9DfIcxOk9deDSb/JOzV27TbLZsSsmVW:tMNfIc4k9deGb/JtTvZsh
- TLSH T19BD44A06F74390F5C96F9171458BD37B91719E354020ADABEAC93EA7B637202F81B21B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-uploader.exe
- Size 568KB
- SHA256 d0336361f804ae74e4e941d7f2e875ec2e25ded84ca1f7badb7b79c4c9560fe2
- MD5 74272e03e3b0969347cdd802167fc065
- SHA1 73138266b292ce92334dcc64a1b2245c86bd3ceb
- SHA512 41428f905434cfb7bbb442ffb91af2f08f0e7fb24849e7c29c176bcb3bf27901df70361b97616685dca5cd2f93181ffe7ac97baada15c532411699808d7f0124
- SSDEEP 12288:TVfMgs7QIfTHLC6h/JGaV2/TDB/DyvHyY:TFBs7jfTrth/JYT1/DKf
- TLSH T132C42928D14370F7CD5E19304AC7E6BA92D05E014431D9ABFAD9BD56BB33A23EC0E256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\symsrv.dll
- Size 131KB
- SHA256 e1a7e32abd7cde0412702242d5979c22eb2f8f86e7df3694eac2481bf29c0fdb
- MD5 0dacc5240ca46ca2c7c400a8b1c03973
- SHA1 94ad384bcf05cb6dc164cb79aa9367a7d13c3577
- SHA512 a486bedb1b645d1a2d9fbebaf1a6260cfcd2ab5c51d6b0739ed4410cc52576d793c8c4f268992a836f77a94a89ec2a51bcd80a1854ace0e76e3dcdf2fe03a0ab
- SSDEEP 3072:o90KM+HDAeLRmLAf3xPD845jSkdcKExG2rStWJ19:t+HDAeLYEfxPD845jHcKsG27JL
- TLSH T1ACD31A00F240513AC9E221F48A6D2334A97DAAF2575341D733D4ABFD9A667E06F3835B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\dbghelp.dll
- Size 1.2MB
- SHA256 e157f8ff23878a348e1da57c1033295a61bb66198f70efbeaa5bd42ee7d54681
- MD5 bc9ef9414ec7dcba21ca157432e5cb4b
- SHA1 7e34a0100c669c8569b339f3fd6bcfaacfae9503
- SHA512 f387d61df6d5c399bf1bd3f18112f2c8d29e0f7fbec106ccfc362245fedb0d85784aa53097feb3ed19a595122b1ef81e12dd3817c8fdfc464187fe78d4eeaabf
- SSDEEP 24576:uAkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9pS:uWiOuRg/iyFzb2QN83XfeYabS
- TLSH T1FB453B31E641817DCCE731F656BD323D266CAAB2130422C722C81FF99B666E17E3459B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\exchndl.dll
- Size 37KB
- SHA256 4afc157e28a58c720d638bb276655020c66902fdbe4ea3a74f67fafc25604752
- MD5 00d2da406a826f5b93d47c1dc9805d74
- SHA1 c536445a6575f06feedd2ed62a843a5feb14d51a
- SHA512 0ca9f72d9e37aada6e7adc7c9ea60eb505936dba863773639cb9b77e0ef823981420dddd44ae11b3ccbf3636ab37a0dbebac4592582d6d14aa90ee8c50ca66d0
- SSDEEP 768:Cd4ikMivPsdjlXjOp/raVLe8+WydaLrYwbiRPPk:PMxou886daLswbix8
- TLSH T123035C6EB71228ADCA57C23440EB4733F8B1B46517308B6E2758D5312FA5FA0DB3D52A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mgwhelp.dll
- Size 440KB
- SHA256 7ef129a9525d5ce6ecd67a666cbb1a7d20791f99b61de20f62e593fb95af47f4
- MD5 dffee1cc56ada3f7613a5cac53f2a9aa
- SHA1 71eff5affba64aa0f057e1f09140e08f86fd0163
- SHA512 4fdfbf6a6b6127392babd0325ee2f419bb213a07ec1a37fb6cfcd0f62c679bd01a6e66e3fc1cb7af89878f34d08bc1f0d77e8bc1e34f2de72c391e0deeabee06
- SSDEEP 6144:Wqm+erdjoVQzIHkUe7ewWY+Wgxz+DGUJS6kJisTB3UMWW3d:6sTe7t+7syUJfkJisTVt
- TLSH T10FA40917F3A315BCC2ABC175839BE733B572B42512317FBA12A4DB721E10D949B2E618
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe
- Size 484KB
- SHA256 bb4386e7a61857294f3adfcb19e6e301b8b11ceb4c464aed6c47b1643ee604f3
- MD5 115e89f57e5dc006106ceeeb0a6fdfe1
- SHA1 9c06d191dd7f78e160734b6df7a8d518359c8998
- SHA512 6a16e4800ce0027b1f1655a5918320b578ceda227e81e9cafd9411d597d0e892c869e44ec2c9561a247904c02997882a5934d3b18ebd6cbdaeeccb31eba71d6e
- SSDEEP 6144:kv7cjSPGmZhnOQmnfN5moWgsekvcOY5pDEerO05P4AD:kDc2RON5XV2KpDPr9bD
- TLSH T16DB42906E10268F8C863C5737B46E272E4F5FE16326E24AB1B60B6337D71960D62BD17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-installer.exe
- Size 1.7MB
- SHA256 515eea92ed72d919e4cb02b7c856975519226831208ade2cf97a8e1f50e7f400
- MD5 793207406d499488227ef93855a271a2
- SHA1 ad0477ac7181ca85a10801d5cd78571af995ac3d
- SHA512 131b5ffa8cb111d24d51197b0de68f72cbf88ee8c0fcc6e8bfcbc18eb3dadbd3f48f4d0d0b131cdcd7ce8890c5c140b1f5ceee616f0c5f8af256b5f2af55b6c1
- SSDEEP 49152:fIHZq7OFo/5EJ1bfvFyeeeeeeeeeAeeeeeeeeeeeeeeeeeeeeeeu0u:gHOOahEvfvFyeeeeeeeeeAeeeeeeeeeP
- TLSH T1DE8528176A5B8453D6C10471F5C2C236492DEEF811279F272AE0BE3F3EED953A81A60D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-loader.exe
- Size 367KB
- SHA256 ed0a4553cf704ccdff9eff8afc5865a5f7a4ed9758c82172972dabf1607b06a6
- MD5 7d476078840632bd050109b4cf113483
- SHA1 3552b669f3fe34053b8ce6b730064b3e338967c6
- SHA512 41e8b78551d4a75f4dea65e98579c4ccc2f3f08a93aab5ac8b379e6538c432e82ab701293952075c476c060f41ec1e84ae09b7e5b2d69b5094c735a105398d9e
- SSDEEP 6144:PFp0Nyl66ItW9sekvcO2wc/4LPCnDR4B/:P/766xV2Bc/4oDR4p
- TLSH T192840605A10295EBD966C1748983D636AC3D7F1C2270A87F27E4B737EF34E50AE2B644
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-main.exe
- Size 1.4MB
- SHA256 6dc0b52f18b8058bae73293eb0f817d8992e7c0aacf092ace42b1e49ecfd0302
- MD5 b3010de3a42eac331d59ff3dcd37e9ce
- SHA1 630a1448483ffc655e48831f2662dc3ca63242cf
- SHA512 4e7f95fd1b06e0623229d3d73bc709ee1cedcdf042cd213abfcddd74bdb6657d68d05f806baa01504b8570a1a316bd4b85bd02b7a3fe4cb3cc893e3b37e9d1a6
- SSDEEP 12288:9WEkPLj87w0H7aRv2IjKIQNs+soBRjGKes1lV2et8hU1lHIYe7u/L3R:9KCw0H7aRvrjjkBBwKBdmhAql7u9
- TLSH T190652A079303A0E9D5958134C6D6D332B6AD7C390220AD6B16F4FF3F3F9DA528A2DA45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-reloader32.dll
- Size 290KB
- SHA256 973472c8503f98ac55767c8c3c8e05b00bcbe4304ae6124a97fc65f6468185e0
- MD5 aa6f2463213fbae97d48ab764a262ba8
- SHA1 29ec1902c75e06af6c57dd87e7f3d68bcf24cc32
- SHA512 905cb7cd3ffb76b3978a6d0b1167a3c3b7e443420fc57567dcb9231ffb6d6f88a2dbec14cec95796dde3efe2984cee40c48d98c5cd49ce238b5caf2af53e2175
- SSDEEP 3072:U4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZ2:U4j1GWYXiBLdVTMxE5ZgavZ2
- TLSH T1E8546D02E540C27BE5AE013511FBAEA21E7D952027ABD6CB87F4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-reloader64.dll
- Size 344KB
- SHA256 4ba34697efc55edc9260c16463e869809e4ef0b012d2bbb908c6780b7aa2bb7e
- MD5 17aa629d891209998273ada5e8a9b3a4
- SHA1 43e5a5a44f5ca37b4b5c1a44dda2c227d6a99d3b
- SHA512 b847243d68d9216ab40066547cd6c4a928842c3f0857ba54faa71abf4095ee4ebb81520da9dce12b5b5f5ea80ceaadef8a581ee01aa589c23e0b5f2647babc10
- SSDEEP 6144:Liyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUX:LDhFyvqw1rZ3cNRFo8kX
- TLSH T1D2745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-service.exe
- Size 323KB
- SHA256 67da950a2c286ae3987ee0c762e43e2452e6b48a09e649bf6d38e9c9969d6a11
- MD5 786a69820ae9569a533ed3c153e87e67
- SHA1 7b235ff6596f54e0aaed8b8398b6ca06f1b493e8
- SHA512 47b83ae2cf06fc7f7ba8185388a715ec605a2cef7f66a352326e504f7473e85c2a31465725b30ccd9e3ca995a18db5411b7100012fa68b3fef58a03b9980f7d8
- SSDEEP 3072:3YVAj7EFb6LJg6SGbAp+uZx6RDqWIFQwbZeTfWWc1M3nL9EMZ:fj6bGg6ShomwqWQQwbnsRP
- TLSH T1FB64E50AA73168E4E176B079EF57D132EA33BC00622CF55B66D0FB773935D3AA619204
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-unloader32.dll
- Size 290KB
- SHA256 c12ab899c74f8ba4d780100983a53bc15ada57b6799ddebbc1d6671688570f6b
- MD5 0118fac58a0bfdebe83de167f55e8e3b
- SHA1 eec2e14922a0f7712a57ca1f3bb0f3a0b7891c42
- SHA512 13a19e0dc3115670be0c6473a123fc39b5ec93c69a4aab99359c9fa04eb2b866c799578ce29de1de8b9a784c2063165010c71e4382750006352656cb748bc32c
- SSDEEP 3072:o4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZo:o4j1GWYXiBLdVTMxE5ZgavZo
- TLSH T18E546D02E540C27BE5AE013511FBAEA21E7D952027ABD6CB87F4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-unloader64.dll
- Size 344KB
- SHA256 a71fe514f03c76c9a0d37179564f5742ed73ff6f7f3058d539ee052c08e86372
- MD5 df7975bfd9723131a1cb586ce12ec2d9
- SHA1 1ef2fbebeb1205ea731b13f023e17825322514ba
- SHA512 d16d6f1ab8ce5af4d0209e907dd7001877ea2209c5c176d9611b7ef1e95b34e887c229157a671158122f4074edcded30c74a87f66e5e4d8fd950d354e9f58ced
- SSDEEP 6144:siyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUZ:sDhFyvqw1rZ3cNRFo8kZ
- TLSH T16D745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-updater.exe
- Size 632KB
- SHA256 ec1610fda4e7f46ba0f76aa42dba6cfbac0b644b172edf2337dbb8855c0187a2
- MD5 ba33817acc6e76e07e2d8417429bd604
- SHA1 af0370368dd533804ef2822b16c619c0b3a3d4e3
- SHA512 1894dc6764bdc1d8e0752ecebd722cf01eb9d2ac7b4822dec940c41bcce7fd62870992b67663938828540454b78df5b0a251d5516e7ecbae80f083b3598af59a
- SSDEEP 12288:n02xpQuqWKFwcGj+GbcV27TM7FuWHVmKub:n02xQWK+c++GbxTqFuWub
- TLSH T1A7D41827B3A298F8C4AFC030564786B6F471BC350670655A92D0FB733A36D60FA6F196
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe
- Size 564KB
- SHA256 d70da64d9303dfb5c4aefa92c8e4539cbf8bfc70da3825d18768ffefa12a447b
- MD5 ac4ed98a3917c7e3c763cd24140de0d5
- SHA1 dce03569d024fe28f32352c3aa6c7f9edee9447c
- SHA512 03c4d42418c285690ea42f413566e542eccc3d89cba46918201c5dc513e405f4240f7ced81d58b3983616d521190bde2f941d09a2cd00dddd0927ed3637443a5
- SSDEEP 12288:GFqrR8NL6M0KcS1NVKxIV2MTI1l7rvHSl:6qWNL6MCSnVKxiTgl7za
- TLSH T1E5C4083AD652B4DBCC9E84705BC285E6A6E07C440630E55A32D1F6323F37D72EE2E295
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\symsrv.dll
- Size 131KB
- SHA256 28d779bb8f09a453ae90745385e0c517dcea9134995ce4252eea954f557a2c83
- MD5 7d0fdb189feadf8fd22a0e184b80a120
- SHA1 f8dc6476f549c69dce80aaaaed98119da4df9831
- SHA512 4659c489db7f0dd33b2ca640ba803bbb275aeff4969ff5fcfa8d60d28de2b830ea34273a8626cfe1297994c8d0080720c3c23c636c5326126b7f9009a05957fc
- SSDEEP 3072:I90KM+HDAeLRmLAf3xPD845jSkdcKExG2rStWJ1F:N+HDAeLYEfxPD845jHcKsG27J/
- TLSH T1E9D31A00F240513AC9E221F48A6D2334A97DAAF2575341D733D4ABFD9A667E06F3835B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\symsrv.yes
- Size 1B
- SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- MD5 7215ee9c7d9dc229d2921a40e899ec5f
- SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\help\intro.html
- Size 473B
- SHA256 4bcaedfefbc86b18ebae2b870afe679744d8491541b04445ddcef89f1639f2e0
- MD5 590e7c1e8c4c52d896779635f0df0ad1
- SHA1 8d372afdd50be9e4c59eb46f8df22c972ec14609
- SHA512 6b12a624d9260507d8d267c3f4f71591c13dae271be0c0e3175446e13240113d27809f2ff77f73ed9c3f42891dbce75cfb1d83d1721002ef6e2e246f5db40dbf
- TLSH T1B8F09ECA9B46BE0B82D3017242936A619615521813111A067CAA728363D581DC6AEBBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\help\logo.png
- Size 9KB
- SHA256 f325010832fb8f5fa7b8ce164a8f1d72d2b2759f5ebe4e132f7ecbf37769b12e
- MD5 789df3066757086691ed233a75a30449
- SHA1 dfc0d46d621c1087668630b909a9363a58c41b70
- SHA512 91d1c07b34c3a4c68ff2c7a2dff42ec22107d9a1a7cb0f2a2d4adb545fbda9b1a40f3addca8e78201584fb82d99e96014ae0c7a284fd98b37da0c3ca6bfe6068
- SSDEEP 192:67HIX4fvRm1esTjwBTCGXAOND8ft9sk69UVZu5kLo0mMc0YbE:67oX4f+PjGXAONUtmlGvs/Mc0ME
- TLSH T17422AEB0DEFDD92BD047DA64EED847B750C30C1A0C1B2B78AD6B7E4496244DC27C8955
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Blue\cursor_move.cur
- Size 4KB
- SHA256 e75c27ce6aae6c7621cc5d6443fc3ecf5984856dbaf7e4cff03be3069ca66be0
- MD5 54a3fbcdd1cca6191a48dafe91a98af4
- SHA1 9f15f666395a30b372b0e547e9c9e3ff2abf4f30
- SHA512 cb5cbc6a9f3e7101dc55a50c205e6831db02f39670b527f3a1d313aad20930a472a564ddbe9f14c02e6ce23e28466ac81bbcbbff95559dcf3ff527d085546a38
- SSDEEP 48:Z7j2dL9G+pUSU/s6mO0lj6DUF8mSnkPSp:2LA/SssJdeHRngQ
- TLSH T1EB912D202B95EE49F1016AF5D06A61F80B191F11D37C159FCB9A3E1FB4BB8C1C18EE68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Purple\cursor_move.cur
- Size 4KB
- SHA256 728bdf93d6a5572ce1f8ecec9890b150db8e377eff842d9681694c818acc9ea7
- MD5 2066e6a0ac8fc7f66c4442154757a66a
- SHA1 5b4b6dc81ec3621e35c205495aa84cfb53939f42
- SHA512 ae26b8803c5b3d46bd37f6d6585aab918f300da07f78328ca4e44b29f02e3d647f3518bd7cd4b8e4546fd23d8d94fe955f221db631258a67edd47a82b605548c
- SSDEEP 48:tnDcTQwn4nQUC/1uK0aC+Mf3wCB3tIEaKZ+oEcjJ2rQ/kvpp:tnDcTp4nQXcK7C+MnHGYO
- TLSH T11191F91E26D4C1A5C41160B9CCCA00FAE3A67D03E16905F39EE03F1E733B30A99110DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Red\cursor_move.cur
- Size 4KB
- SHA256 db9de6c4f193b9bfa2c3d17378bf1f12fe35a1fe30c621129bf1e662328173f9
- MD5 39b322cb8f58e4001e44fe2ec531cf72
- SHA1 27db91261378bd2a87e3d53dae2823bda3d7d606
- SHA512 857a76af6af0cd866655eae9a59742c9e7bad2154a9a7306a7258cf03e4f4fbe2fbbfaca886475e22294007abcb85eee36dc88ee130ed63b713b8a9ca4582eae
- SSDEEP 48:D5wxATMZDxs1mNvGuvSJCIha+lRNAUvj4mXqyDWwp:D5xM3sYNuuvSJCIk+/Nlj4mXqyDWq
- TLSH T1CA912E64344AE78BC2271375CE48EEF42DF67D64F58120A3B1E13F9F74761119E84449
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_alternate.cur
- Size 4KB
- SHA256 e12b2bb99ec88e854843af4ad59aa2b7848fac401102a692896d5cb9ee7b3969
- MD5 edd96aef0347b025a8544d3fac0ce120
- SHA1 3709730eb773672e9f8baa072760708eeb83779c
- SHA512 0ce753bdd93ce44b8b6edc3f1e00209a5f218ae24c1f47b841a7fce3f88936557913d0948706527197c19831908e336896c9428be19ec7cb8f6d653a7990d277
- SSDEEP 24:f2lg386ati/sjtLYvXc/QY6SKANbarq7E3eOT:D3HOUvXc/h6SKANbarq7E3eM
- TLSH T145910886DE448808D46C2A7B82E6C2FE2E24AC12CE72527305E07FB3B4F327506CAD50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_link.cur
- Size 4KB
- SHA256 eeb61c78c583b09597a14de97c77c90bbecb3d9af9ed0b630f84a0bd35f2e56c
- MD5 91bee364d9731d7fbaeebe22d762918b
- SHA1 7e5ca8c2e122089ba9b57d3b4a4a0058d92516ad
- SHA512 424e51e8323cb967d639249685ccadb7f190b8fddf1a0547a4a085bee6209f28ac04471e58284f565848d636d77feec24c7e80d09f3ad273e2c2a5bd6b68b32d
- SSDEEP 24:cE3/1AawCHVgFrAaTpVu4u2up/wuw8wuwuqSwuwuRwu0wmwYwYwAwU:pv2ahNaTfm27BnBBNBny5bbAj
- TLSH T13891385DB3578AA5DFA442B0F80E853018D16CDAB073DF1885D7B86767F33232816509
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_115.cur
- Size 4KB
- SHA256 de8ca70a6bd0e8738200cfe5a9d2e50514c8274e39e9939493726cc307ea7df4
- MD5 6f2eb112fe01ee3c84bbbfa64092b079
- SHA1 e0ecdcc506e6b3ee6c25e3fa78ad8a7cd6a15476
- SHA512 b5c9eebecb25dfc2a8069e346381f3c401a4a9a6a568627a80fe131a87a6223d851e57578aa87c413943a22dab6dd88c43e617c02ca3130d90a194b87c6aa272
- SSDEEP 24:7yn8/ls/NzJaSlAkvaauqtms0o14yREyzbo5:ocaHAkei50o11REyzk5
- TLSH T1AA91F9AFFF4A078ECC67167EFAEF719181DB5C492913E75988413A3893F78403029949
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_180.cur
- Size 4KB
- SHA256 ae87e1be2012a8d22db328bec839cc01705776df4a8668a373d2d7efd918cc09
- MD5 f55ee079e1584126368a0a003cf5da52
- SHA1 7f9545c3da864c57ac5dd6aa2ece330249f8529b
- SHA512 776e5fb73980edf7413079bd63de42d92880a4d61e06cddcbde87f0a54b19eeb66d27825953dbcca75d3112e8830cfe3db96f06a0bff2392cd8d2e68ba0a5bb5
- SSDEEP 12:CWxNJrpDwJVzhw07rMGOCDD7+QZeIBJegBpBBJN9S:7jg1J7xDD7/prVzS
- TLSH T15B919D9CF33A4798CE6D6270F04F108652D91D59A8D7E4AB91B1B87833F72A0AE341A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_45.cur
- Size 4KB
- SHA256 26ba676103297f4fe9dba4d49238be80b1a7dbb1e869ec1a0986c6e7afdfd07b
- MD5 d3f4e3b187ded3f53cdc7435a10d23b2
- SHA1 76e95f1eefd8e7af946c9a6149a0b16824a6adb8
- SHA512 4ce0b8a8a01db56ecdbaaccb60f34ffd54496dfaca02c115fe358fd923b54e256196c7d2286d7644670ec0e4de9b796c2c3d659078868ce4ce6ce6a129227a04
- SSDEEP 24:7wPIykI2TPzu+zLOqTylvBccFcnull0Hmbor:8PTkHbzu+zSXW1A0Hmkr
- TLSH T1E191BDAFFF49438ECD2311BEF9AF30B184D79C192513E26958C27A3983F7551666C448
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_90.cur
- Size 4KB
- SHA256 093c36f1baa94b49498b173a197a99c72835381aa0b1823ae669eb19adfcc430
- MD5 d680063d9d9cae42bb1e00701533539b
- SHA1 1d9c43332989a4c872d7012f1601ac594160d9da
- SHA512 7a9711662261a6085434799c155aca145822e35586a1f8118b3c5828c2d49549e02855a09ae555d18c2ee83310d5fedeead90ba7d5e4fe60625ccb3878bfb841
- SSDEEP 12:CWhZpJewJe4ntwpewTewmeaCqewTBpe4hJJ6pZSSd8l:7ftaTesQTZ28l
- TLSH T16F91929DF3364798CEADB6B4F00F54C052E96C8D6953C82362A0787637F30532E39052
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_text.cur
- Size 4KB
- SHA256 df2de2269ac181eca37be88f50613d4e64fe1bb32e597b442f681e470db33b14
- MD5 fb4034a0dff9163fde813a30b2c1d1c1
- SHA1 735bc76fbd197699243a4033b419714c2b76de38
- SHA512 98b1e91d9fbf8e0ee5471ed93154e13b08b0f83e1a8858f717ed52d1111887ac3a610d25f412ea3844305db47d0434454cda0b7115b9f9c36e9c1dab3788e11b
- SSDEEP 12:CvUaui/RU11wR0MR0MR0MR0MR0MR0mFsWzwnti/4zrop:Kr2HwR0MR0MR0MR0MR0MR0mFsaocYk
- TLSH T108915956F8B6C80AC0984B384ED7C0FE22642C86DF1B860775E4FFAF7570295A295290
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_arrow.cur
- Size 4KB
- SHA256 8e4089397e0eb4115f0da06c85abb26d9e8e8e1e242f2d41d813dc70fd104f3d
- MD5 ea1df32175a3983a4577ebb20b3cbe10
- SHA1 55149e2c8a8cefb8bd496ab473a21e99240ead5d
- SHA512 33e6f355f2e3c51109781e9976d23fd1d3c5786b1cdebfc9da227efe205368a2800b1fd17fc204dd0e885edef75fb64f8d014c037c0bce6e3cf89c5071748465
- SSDEEP 12:C+v/SNkpa/lDiluJlGmobOSwum+GO9eEBuIB+cBOgBDBbc3:Dv/f8/lDiluJlGmoOaVVcEAIwcgg5i3
- TLSH T1B29124AEF32A4B84CC226EFBF41F06E400E71EA54A63D07720B2383533F7902A439012
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_cross.cur
- Size 4KB
- SHA256 82960bbb060bf78779c736e325c83a30fb44f8f5d4d05ba984f7594e2f7438b5
- MD5 e67d9223b642c25aabc6bc3e1b9067cc
- SHA1 7655e8328a20428f92cda20c3361e196614b9c7b
- SHA512 8d9d821b910fa253368c7c7ed4e59034c06eb728320424686b0bbf9a6815639a6d46627d7a6fecb2599a6d67104e853d47fa0660ab05ad74fec207013c7d79b8
- SSDEEP 24:o9YIGaZatEOZD1aZadaZat0C/0C/uOlCEnOOliIpm:a9GiiiOiI9hlZltg
- TLSH T1AF91E791B3F90E92EC41263884C0C7F013648CB18D26A31F5AC5FD9F3E362E1896BC24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_move.cur
- Size 4KB
- SHA256 54181c6b555396ba623781663dc20388edf85cfc49a7d86466dbb937dcead4b3
- MD5 e5dcb831e11ec5d8a0f2e51656bccba0
- SHA1 9d80e249984c5a835c361c86a8057132efe3b177
- SHA512 9ef4dbb16947b740dc747a57c4f5a109dde242f15e33533a73e295d6e6ec2a8a9307b59e9d3ff2716e4a77039df34596b3c335d93255374e7155e1c1875d975b
- SSDEEP 12:CWxNJWpDJ1IdSNn1VpH9VThJ5VT9plnmQnaUNteQKA/Ype4XwJJP1IptQtPzQQZy:7+IqpnH7aGrKAqJ6ZztOt/RT
- TLSH T195911C8DF7BA4B98CDAD7370F02F48C212E86D4859A3C43B5220347A37F3216AD36611
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_no.cur
- Size 4KB
- SHA256 05855974aa364fdfcb833660c1d7e4980eb01321c92224cf734c8840dd16d294
- MD5 96d6c5b746ba68b6334895c97dfb0c91
- SHA1 6751ed2567a12248976fe4d71bfd3c6920b513f6
- SHA512 d400c6ef2992da10af152a7e56ef247fd1309a5b6b9d0a260b8f5990923e45397580dda3a8c178556865d67e2ebb99bcb6007d439d1ddec4f9ceb3c7a04b5673
- SSDEEP 24:LzvlRGYvPPtmOEL7svDbXzn0cMNO5z4fYj3Cb4I:XGYXF4L7sLbXz+NO5vj3CMI
- TLSH T17A91E3536804E644D50DC8BBC1F1FDB6326B8D6FA453645359687D9F3336122DB2A3C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_pen.cur
- Size 4KB
- SHA256 7e99a350ddaf9d1bf939f26a0a365e6677b0770ef70332fc478729473598c46a
- MD5 8908dc992d2868e7cac099e5866169fa
- SHA1 0677d5f99f329f657dba1e511937df8e977cb51e
- SHA512 e2c3f3e2fdf18caf609c2b560475a55c3a1aefbd5462b56278179baf0176ab11b2af292ae61c6ac4134114884b5817eb702c4ab32d8aa608d30ab429d20e982c
- SSDEEP 12:C+ikn1884Il8dkNKXNbsNbBc3bB8gY/Z8gB8YxZ8YwYfYYSFSRNCNS+51k:DdKLQyMWSmrKZHbgPURNCNB1k
- TLSH T14691D70BF32D5EA0EDE512FBF10B04928AE2CC57C966C873106532A12EF7D099C95622
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_up.cur
- Size 4KB
- SHA256 7b39802b5903e24a9fc3c82187ef6dae5df72127a6a05b63ad7fa0c17b3969d4
- MD5 db8c64baa7f4431a4f1464a05a5e9850
- SHA1 1902cfa6c53300e94fa2482df7c1cc2cab73d783
- SHA512 da82060fffb4c14df3c58da204d12eb9723cdbd9ed65b169d35ad21e4444c236355dd7a8db8a366b8c42e2a45fe4d0ec4ae565bc2f7b6b59e98749b3a6659d3c
- SSDEEP 6:Gl/GelKSTLiMZJ0Ti9K8hyioTibYcd8xh0TSSdYR0TlAG0FazMehqB/loMeGcqBG:CT3i2MGOC7+F9eIBJegBpBBJNNO
- TLSH T1FE9113CCF339479CCD1D62B0F04F048722C81D4958E7E5AA52B1BC7933F7661A925090
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Red\cursor_help.cur
- Size 4KB
- SHA256 baf46f370b382b35dc43b33494263c21b31198421790353ac57303a3dcce696f
- MD5 d907d4f0c927b02787f6f3bef89f64e0
- SHA1 62700edb882ee349459bbf5f6fe68afa3979e005
- SHA512 f5f059cad31cdc413181b55ec9ca1e839cd14dcd3dde5b3bb99cde5a7fa1f1b71640d63054f0dc11bf632495c8e05c06d315247aa21d322f48237644f089106b
- SSDEEP 24:D8gAw3Kv/aA/lDaklu200UlGmsKCOnaVVcEAIwcgg5bbqqxtj:Y3w4ywmKuvlxfjnaVVcptBuqqD
- TLSH T1E991B8ADE36F0B8ADD226EFAF40F06E001E31EA24923C46321B2747A33F76816434112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Black Plus\cursor_no.cur
- Size 4KB
- SHA256 a79ede0b43e4693095b5171ed52a8c69e8e7c37d5330bd49ddd3f1c34a61638e
- MD5 126bdbcec5bda4889f79c883661c0a8c
- SHA1 2c94c0927618c9c16f735fb40ed4904913d30bfd
- SHA512 9eaa4b44a41a84677ec213208d8a061265147c6bbbf3e0ffaa43f20f0fddd6bea726448acbc26a9aeb09ed877d63be51b0c4c9a1e8a3f0b8d690fdef3cf237cd
- SSDEEP 24:HIr0PR3iQGc74jP8H+4dheh7AaPnmgX/p1LX2yCQuV9abosQa:or0JSPc7e8eqedAa5yn9V99K
- TLSH T18691746F57E4D539CAD03AF822D1654CA7B08D047A5FCF27584034A9667F3E6EC48294
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Blank\cursor_size_115.cur
- Size 4KB
- SHA256 f0085c6d759a7d0e7cbee953159c5a5d12f12c0b1eba63a9717c2c0b901ad08c
- MD5 b1321727ef1833cbc195bb367155cb44
- SHA1 c0a03bce8bd137442039fe04180d94a03242825d
- SHA512 99dd73aaac987683a6d86a2e552aaf12c655cced2acbabb8cc2008979697c7eabf7688a0f0c3984887320d301c95688fa085553136141063e19015f0071ee3e6
- SSDEEP 3:GlFFeGDllfl/t+lV/l/xN//BN//xR4RU:Gl/e1lPHrKU
- TLSH T1299102453300B14CCD4413BC082F96D6226A7F11FD7612433E223B0C69771644826EC0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Blue jewel\cursor_up.cur
- Size 4KB
- SHA256 3b2314f07c320f8144411b496ec6fd7e6da4ada69effa3226e29d18994c3ff35
- MD5 12890763ba15262f7842dcc58551cfa5
- SHA1 51977dcf1c4857385d2173c1ad11aa9f9cfa041d
- SHA512 4dc1bf24678d020e97ebed128c1845fce54d1d55724812182d58ef1e10b350323859373f74af1970f219671f0cc2b1dbd023c49bd89a5313dcf0e84d0d121572
- SSDEEP 48:pDUw155wx5T957QJ6s0wB5MxRVmdN5lpDr5ToS+sL2ctjH0K:pYA55wx5B1IhJUL8/5lVtTH+sLTHd
- TLSH T1DD91D70A3689D395C2AA6F72C513C3F2101D3C8AFD046B83B1C5BF4FB075095A826714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals A\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 5016dc6b6bad9fbaa5588bbf22331a7bc1273dc3bf9b9754bcda774fbea4b0d9
- MD5 75781742e20df040bb1e7e359f445231
- SHA1 63831aa1079e4194093ba1f13bcb569ac291ef20
- SHA512 63084a5a27d0c6604d3ca1f92bc5ba8e7866c9363480ac557ac90d954747f8a0ba2059bb7044000fce55c468d3334fdf5ac71d9879927d1b4769753cd8d07e81
- SSDEEP 12288:sFP6ZQsQ0h8NnSDFaFD6w+OU09eAO/KJA+92HGk:/4mleDtQyJAHmk
- TLSH T17E949E61B100E2E5EC3E8A32CA97F72946057FFDED814D9571C87B6E4071650EA2EB2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals B\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 3c3344b2aaae1cf7561903fa2809b385ef1e5a29b12830c0908ad4c240f647a1
- MD5 e1113a75f69c0b9707dd501265c9d285
- SHA1 04b22eec6583b1a7a0c7954beb9676e7a4d0ccb7
- SHA512 ba30b2a80425c0c6ff6666e6a47f650ed0c2dec0730e35f5a07d15c840726f59e8bc7e42fc852dbb8207fc71b9e908c4bda6f7a7e32121fb3b2a1cd3a63f6c16
- SSDEEP 6144:HCyJ/qyDe69G92JuxL0TV5clkXi8dZuSs:iylrQ2S0rk8dZ0
- TLSH T110946C96FD2EFD85DC3A18728C3153821F701DABA89649F1749CBF1C683607E971C6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 24bb1ae2ab0d6ed31f8aed88eaed264696c39012fe936754f75d0bd169e8e236
- MD5 6c7bd0417c8b1c70c259455df103ca1b
- SHA1 05a608ab92d0a61a8df50b25fa9a893993846137
- SHA512 55ca957aba7e156541ceca1d42a27aeb23b9f21bc994fbe81e0f2b7eb075bf20eb63c0680a130f38b2298ea8d175d6b1c3cb9fc0595427433ed1378afdc6693f
- SSDEEP 6144:tbo/vA6zI1Ar7i8d6xbNp124FfX6v9X173C0DypXtwPoD0c1xh:tcA/Ar7vS24FfXaX17yhpX661xh
- TLSH T19A947D253161D291DAE882F2CC4DBAF81B2D2DBFD9D4341BB084BFED70B1E68512D568
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 bf32d7b68fc07ec965b702881019bb111583bd68f528e113f9491d9c76b94660
- MD5 1b3162039ffc1b27974008c8e7000677
- SHA1 792c73da293ff6746b23191f2420fa5aa8c4d91b
- SHA512 fa2d361efe67befe7b40557fe10631bf1d470d42e001d72c2f548ae4dc7bdb809f4d33687cd4069e75258d592e99de18b87bd40e0c16ab7e527684565241b34f
- SSDEEP 6144:tXbnXOGzpxInwpVkTyoJFnUEK3u0csh+MQGj2OTfEkvwFPuwOrfB:tXb3wJKEyTj2gKPu5zB
- TLSH T1A094AE123D16AE48E50F8837C693D0686634BC155393BB92FA1A7F3EDE30940A78D57E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 0c372fa9b5db28ab4ac45cf4ba136a5fb2c507bf9976e950bff24a3865207a6b
- MD5 9df3baed050a5557723a67970377998b
- SHA1 42204ed41b3874f86b3e9dfa7d38d5850848cb53
- SHA512 affc43f70be859d5532bc28f4fdb144fa2c93b6ed3ed736831359cca2ad44c2f3b82e0fa1d9517ab389dcffc615fefce8b8dc2fb03c2f45336af960ba1e4f44d
- SSDEEP 6144:qCxXMsFPtDb8pzcdZMgFbLs4nQ95LkTGpP:dupzSZFbLTQ9jP
- TLSH T10B946B24B9119397DA6E97358693FF3C1B293DF9FE406C26B0887BEE643234C5105A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals F\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 339dcf965dc09477ea3bd0ec01f33588f297a5558aac5c1d56c480fb72bec7f7
- MD5 760db98270dd470a933ddfa08d30a3f3
- SHA1 bf119debcd626539c237427a34255190cd18f865
- SHA512 21b0a980754b3f75b22e02e4e5c1795f3876f8a7185e281c8dc77068ed8d742a91d5c1f161b8712bdd5cbcdd71603dc3ab7d8010e893178b1192cc7e1fb40554
- SSDEEP 3072:vduNsNDsIc5Tlb3klYgbg8YBdgm6p8AC9DtnFaGdFdEukgp9e9plHtHwngNK3trS:vduayIcllr8CvHAQRDdHkgzznL3tc/
- TLSH T1CB94AE573008C698DC1C0A31CD9FE5590755BDB9ACC10EEAB9CCBBAD3A70160B94AE7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_arrow.cur
- Size 478KB
- SHA256 39e1e25ba0bba1fea8127544709766edabc7a2ae0fedec7bd60f0283fdad826f
- MD5 d80cf99abc1a3e28a9dca82ea0efc683
- SHA1 e41b946a1d590b3b61c8cb6c4b6fda776d1264ff
- SHA512 12bab1785e455c8308c3399e7c8898b9b0ea1db609e830bc85d42b2dee19405de610533a1fd28aa793244f8adde83a46eb0299cad35e51259000eb79ec6cadb0
- SSDEEP 48:MbLCcX9x5j+4SVXW2EfiE4EuELE1R9ZReXYG+:MyW+/VG2EawuELEZfeV+
- TLSH T1C4A43932794D8A0CE66811B7C45EC67F348F3E98F719113242E44D9FBA86079F18AB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_cross.cur
- Size 478KB
- SHA256 b340d2174f14949b7cd8948fc50e78baea2ffed94f6edd044a70bf107427c173
- MD5 82f930bb37182837036f8377aba2b27d
- SHA1 2a0485d2476dbea7e82a4cfe1d7f8763622ecc52
- SHA512 bd9a4302169c8d97cc3db4a663db3ad305a9fb1289113875d25385af9275594ae9b0277bbd6d97d74b866323474f2fc0ed4f2a51530eb8577fc128e5f5535cf6
- SSDEEP 6:ElHrLk0/tHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHR:ElLQ0iaCE
- TLSH T1A5A4EA30721D489DE02146300C7FD33D1654BC5EED20470671E00D1F3CA2208F81D344
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_help.cur
- Size 478KB
- SHA256 e915aaefe544c5ff694ccbb00fda3cad1ad964160c83fe06c11feba7a08eee9c
- MD5 cba1ecaf57bfb9e4dace651c346a1ab5
- SHA1 ea720a31767641c58f9273137ba991bdec8c426e
- SHA512 5ff75a38c2f9151d579dff0a9ab2b153fa0b671caf69e19d60b645387ab34548a83ab1d33f63e7e1b6ed49d6b9e09fe8efe3575f529aeae6db73089509576b8f
- SSDEEP 192:MTQxmZcLCnKhj4NwbXhoIUS76hEMvwVcqkHIN91wclvWqZV:MQ+cYtKdx67vwX9aclu
- TLSH T1E7A40437778C2A8CD6A46176D02DC23F388B7E54F62901560AD94C5FBA5D23AF041FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_link.cur
- Size 478KB
- SHA256 0cc71f9833d07e1cac317676551cdaba2767078638ec53ec0cbdccdf89a2c9aa
- MD5 39a8f86181d9a6146e040601080d6737
- SHA1 a4460b7e08280c5806fb65a05601878a91c37bcb
- SHA512 f2c2462d087f37046fe9c183e6506d0a14987b4139fcda8323da69d7424c381f61eb4be255b836dcc588be4d92272ce64170b07353f39962d188a81cfc107dc6
- SSDEEP 192:Mb1LKZnhNPLI/mp7t6IhZa8OwTM35/fFvSYkLVS+xQQaEEO7w4l9:MB2hB976IhSwIrqLV
- TLSH T1EAA49331678C6E0CEA9090F184BEC07D64763F5CFB17142A26F48D9FBA99135F041BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_move.cur
- Size 478KB
- SHA256 de659b73708fc1bcc1cff34f5e9d3666aa50783fad300ae3ff9e12506d41ebfa
- MD5 eb6acd8438ac46d319fdf495c0ed4cee
- SHA1 8b8cbc6f4eff227608d4783036898a2c8eedb19f
- SHA512 97e54fc773ab5699e0ed829dc23092416904245003fcd4a045321440aaea6c98f7e39a50f67154a32db271f34823ebf7c561fefc335a1da508c740b8a553940e
- SSDEEP 96:MFnnYHvAgZhaK6qaK6S12G8+k+juuhSKaq6KaqgO/QwPXInnVHEOWOWOWOWOWO2o:MVHn9egk3AnUo
- TLSH T104A4AF373B4D75ACD16240B088BDCB7DA6CBEC1AE42129502BDFAD1F3A45426F581FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_no.cur
- Size 478KB
- SHA256 179a14617d055026948b9f20a9db018b08705c70576fae224bd3d58be1a7397d
- MD5 c2db76a345d49a6182b689d20c3903e3
- SHA1 a90fcac0df9ab01b144f924c6928720b6897ffb6
- SHA512 d4c4376aea59dd0fff5ce5b4695aa95e6dccdbe6e37b436833afeaaabd2b11b9b81d087825de6f5222c0cfd74615512cb9ecba4207ab6e448ccdac554cf11d4f
- SSDEEP 384:Mjp3CSv7H5PBNGVxeTPXylPPim/WRllmGHY5xydImTz:EZjZP+ePWqRvmGHY5xN+
- TLSH T10AA41232A24C5F4CD49CA276907EC23E398F5E69F115011740E98D0FBB9A33AF54AFA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_pen.cur
- Size 478KB
- SHA256 5d5015b5fb7a797c0b44fc8f0962820c53b5d7da0fe1d68fee8eae937c516b9a
- MD5 7dfb2165866daccb8a2993cb668ea136
- SHA1 c322e0156b66f7dfa58d87f6f562ae101f5e81e2
- SHA512 0b189fbc919efc3e7d3d1fe5266d6fee382bc1df637144ed5618fe97753c2347c75e2ced1ccff50f0af689c7f3dedd716daf4a4456980b83ef55a2a48828ab29
- SSDEEP 96:MVI82iJosA67yEKIQLfI8wmj3MWgs5/S+:MVIqJoeGjIufNwmLgsBS+
- TLSH T1A1A4D876B74C6D3DE0D4B97BE84FD23EBA4F8E46E011210644C54D6FBB0A254F68AB90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_115.cur
- Size 478KB
- SHA256 30d85b5a19b1d77827e73c1d33d1b2e78d43dcdf6766c431e4dec9d3fa552e51
- MD5 6235a5c141809046a92ed8a162364ae7
- SHA1 911c5e4e736140035520dca02ba770c96d8a5a9a
- SHA512 fef957f759b515d7eb3a7747f70fa84d59be908cffd494efb77ea9a3eda0f9a8519b80c5bca680374281903fa6837f2edf0ea34bd82b52e172018162c18da3b6
- SSDEEP 96:MEjopjV45IJYZop45IJYZop4967KLabqrEvmfWPG/2vmflENU:Mnpj
- TLSH T1F4A49137770CBBDCD58091B6E4EEC93E16DB8CAAD12215694BE90D0F3B89227F681750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_180.cur
- Size 478KB
- SHA256 acfed93aaf6817bbbc0f9f72d3c5ca8991653aa789d966be0e2508875b42118d
- MD5 c37e822cecdda74304288c38ed098a73
- SHA1 f1a4e2ada576cbb27c8d08a289892a7d6ab8dadc
- SHA512 16b22a8de3e32ca4c0d69bcd697a5098836aa75e29eafafb96a001314daaa67a21dad38b3dd6dd82d587764bf67c6a4ad12b501f9d9dc34554c203f2d954b994
- SSDEEP 96:MauTu13nXH3nXH3nXH3nXn3HpwnnnnnnXHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHX:MzK13nXH3nXH3nXH3nXn3Hp
- TLSH T168A40D37238C3ACDC4684272903DC67F0AEF5CBCE22751612AE18E9F754650AF949B36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_90.cur
- Size 478KB
- SHA256 6a1344ac7214579094293618da84d29e5ec1e159fd72e1ea504bf7d88cab1d09
- MD5 3b79a96b77a14969d2cba464a918cdee
- SHA1 856c72c4fd899fd277a51dbf9afd13465a6cbb80
- SHA512 856144f41679173fd794721a813c332f166cf9bacce3d4e3914c5b3a655465f6b0b74cc6635cde5a95a367d7c9c74a7fadbea69651b15f70b038c08c46365a7e
- SSDEEP 96:MH4+G+G+G+G+G+WOWOWO7+ueO+eO+ueO+ueO+uGmAH:MxmAH
- TLSH T147A4A2372B4F65ACD36240B0D4BDCB7D95CB9C19E02129601ADFAD1F7A86527F980FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_up.cur
- Size 478KB
- SHA256 f47c69eb83cf375138b2db2841ece07e9e0736a9e772bbccd76e05299f88ac90
- MD5 808e12dc7bc6d1eb5504b9e04e370fd1
- SHA1 a17201e84867e5d37bfdc7c265b29f840dc768d3
- SHA512 5cb0aeabd13868a251d802a36979343797acbc7292feff99f2218d0f351222d98b52b089a23a5a1f8f68dcf1f3d400bb0ebd6de9ec5b15b9c10143bfc1cd36a4
- SSDEEP 24:Eljuel/Y/18g4gMHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHU:Mjull/yx+6
- TLSH T1CDA40A72690D5F1CE3A403B1958FE5BE62CB3E58E339502542CA0D9FB6D64B1F902B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_wait.cur
- Size 478KB
- SHA256 f7f30230803070d3e748a4714dcd951c990cb6bfacf1d2dabf4929f3b4b73a36
- MD5 da8e7e7c37a394d8a74e363533652b57
- SHA1 be67e5b8153da2b6c84ddb808667cdf6a9023997
- SHA512 92372dd5219939662fd020c0be652502d75079c24c29ad5abdec7193b986c7935ea7754a4b7ef81c8fe15b506c9165ec4e617785f3b27e2a647ba2c47e33361c
- SSDEEP 48:MYzEDWKbfv/Pfv/Pfv/Pfv/Pfv/Pfv/Pfv/fP/vfP/vfP/vfP/vfP/vfP/vfP/vT:MYz
- TLSH T1C8A4DE36774C253CE06592B5CC3ECA3EA9CABC5EED24711634DAAE9F3944024F18CB94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_arrow.cur
- Size 264KB
- SHA256 70989f04f6640cb22561c7ad7f1671e7568211e1bc3c92bd157ebd79eb1692ca
- MD5 9169ef82c34abe813a05ac929ca6cb36
- SHA1 a786ef1c6f362e6c77e6fd182b8b7e1c52dcd4e8
- SHA512 ce02b022e7bdd66cf07f3ebe743d5d4b41d07670d932f6a2b4447f547a514f47b5ebb49ba446b684e02a178ba9aeed72f972ca184e77dfba01c2de05cd7f388f
- SSDEEP 48:OZj2KznLsUqv34P/xfgPw/AvQfgPw/AvQ3AvQfg:OZj2KznL9
- TLSH T14B4491BBA384D689E69850B254A1CCF75C4FBD44330202B65FEB7D9F718417A00988BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_cross.cur
- Size 264KB
- SHA256 62a45d7a78c92bddf24c05d55ed72e41707e96999f56c61be3480154b2c0765b
- MD5 5ffa2ad7daf7e8ca9790366967835254
- SHA1 b6864bbf6beb4c701cd14b8f9ecf53b5b95a5f57
- SHA512 8039f40745cf5583c60f153e287b6c8410202247e5934b38f1576e04f9e557769621e7a8f9b7c6c21ac1874135e4711cd010023c5f0689bea3e75dc7acebc2e4
- SSDEEP 6:Gl//bgl9+DnnnnnnnY00000007/Y00000007/Y00000007/Y00000007/Y00000D:C/kE
- TLSH T1484402707300C019C0101A300042DFF50ED4BC21453D5643BCD33F237D021480819143
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_help.cur
- Size 264KB
- SHA256 bd0ccb7c69a80a29ecc0322cadca6cc6ffcda339f40c1c03a2f1f5a9d2550c6a
- MD5 f3271df3bd9789b688eafb70ecbc0530
- SHA1 9dee16e0dc1e83dd8b17994e49b26559a4d2ef96
- SHA512 9aa1825b8f68029264d81c1bb6f948775ac2db449b7a28090c83c6c274d3a43ddc8ee85b4b8f4d149f345604538b3d6740c1d574937a155f173681bfbc7953f1
- SSDEEP 384:EZ8TbpMS/6NQS3yL6xjizSDCTyjuzSDCTyjizSDSWXmH23Gr23GnWn:acVMS/UjizSDCTyjuzSDCTyjizSD
- TLSH T10444B137A394D888F85861B650A6CDF75D8BBEA5334741AE1EE7BC9B711D03801884BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_link.cur
- Size 264KB
- SHA256 8377813ce421462ce412baeb67ee2b6e6aba4846509c4357c092b0881b7ff80d
- MD5 3cfb44a3e8ce7f5162d6ba20f7d22627
- SHA1 d3c740112381e58fdd86198143955f60d79cfa44
- SHA512 ef6564f3acb9d81e62c0a0455bb480c9fff0a54480623d09fc1a53e53cc2b5b8c764a27a90b0fc2bdf161726d4ff020870908a76df7d6841198eb5e5a6be321b
- SSDEEP 48:F69synHvLvOBr1pb2/+W5nkmULpQHDZ/G+kWDGa3LD0mehFJrlZnBkzXf9AIScx:cfHzvSDbW4F4TLD0JlpkzlA
- TLSH T1E6440279B388D48AEC54553908F5ECF66CB1BDC90E4014B67CEBBFABB2AC06501546B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_move.cur
- Size 264KB
- SHA256 005b2c0ef17f96dfc91b6b8ca3c022585695f22aebfdf92f2427bd6ccbc15421
- MD5 3bcfa05256eb8126085d950df79102f1
- SHA1 a2e59e27e6bafefe8815edfad0924f5d204b424e
- SHA512 6e7f29ef5c7c5d6d4076ce6ceee78ae127ec2c7a4a8a3e150ba7d6234e20b972ff97324a61ab64679eea6617d7b00ffac7dc7805eba4138e1af79e74212c4e91
- SSDEEP 768:ZP/vfP/vfP/vfP/vfP/vfP/vfP/n3KGLPfv/Pfv/Pfv/Pfvv/vfP/vfDP/vfP/fT:
- TLSH T17E44273BEB05C09ECE7944B269F1CCF85CE2AE19A6C644951FDFFE0B74D10218299A47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_no.cur
- Size 264KB
- SHA256 22fc9d9654be128f5295078a4aec548c32230ad1c4236ae9641eb8ed1ac7f6f2
- MD5 ba3e53f0d3deb5c2497fa7908d8fec87
- SHA1 efd460f9317df10e57ec166fce8fc2e30c2a8908
- SHA512 0928221c3361c1a54b6825192b46861bb20bc56d2b81a4d18cd5f3ec233789424399d8066eadfb541dac8da598d9bb0d8e2c2edae580f3749796e5124700065d
- SSDEEP 96:jFze7N+RJQ2kA0kje3w6hVdw81zztHaG/x/fCiFbhOm/Ys:jFzeB+RG2kpqeA6hDb1F6G/x/6h0T
- TLSH T10144FF76D3E4EE04F8CD62B950BDCCF6AE491FA90222115D2CE7BE73B2AC05514984E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_pen.cur
- Size 264KB
- SHA256 e4d539fb348f12944d3aa6878221ab474a6c846a226a166205ea832b4f143af2
- MD5 5ce4072ed375e73addd9f3a7d9614f12
- SHA1 00d94d80334f8e44344f39feecb1c40a21106bd5
- SHA512 7f9ea65771343ab614e3f355a5b0ffe10085824b57f5390b7c14f44ac42ff612405d8b60a5d0043bde67d371d0e8c3521d2eb11a3885598f96811a1ed6bfba8a
- SSDEEP 384:zqbr7Lbr7Lbr7Lbr7LzUTKypa7vGqi2W2W2W2W2WbxCCCCCCCCCCCCCCCCCCCCC+:z8q
- TLSH T1514406B97790E91BCEC4A1BAB2E1CCF75C7A0F05224A4147ACDF7D433209454C69E963
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_115.cur
- Size 264KB
- SHA256 52e0226c1c84c5c342c335b619386fa884a1a48e0e8fda34ed5e60b81c7f6423
- MD5 52a0f4807ca64fb21de9ab1c2ea84393
- SHA1 f729f50e14237bc8e4e53a06e209f2715f47ce45
- SHA512 eaebf5e1b0cc4f347c3a01b4235dd6ba97dedbba479f2501cf6d4d11bd813538b244a156b147289e5429604318b800cdb7108d9d606d5bf579ef8179a494ba0d
- SSDEEP 384:+f+PO/evuf+PO/evu7V32HmXWnG322ve/O+:
- TLSH T12344647FB3C1D6C1C2A8B2B555A0CDF35D973D73010903EA8EE77D63710AA2899A6853
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_180.cur
- Size 264KB
- SHA256 a4fd5c1a452a84e18b3bb49e35c994b0402949ca42a77d0cdf8d46de82c18aab
- MD5 c8583bd5d821dcc645f5aed0113bb76f
- SHA1 8422d6e5942602eda1503c8c715409d013ca79bb
- SHA512 c9698fafa9ec3afe6f2a380f1c0a4e7b922bb856f5d1c7540d40c19a99603a52ffe7dd5f9d6c7106e3456f0ae23214ebbc5134d8c50988a223eef1632ee843de
- SSDEEP 48:zfP/vfP/vfP/vfP/vfP/vfP/vfP/vQgPQAfP/vfP/vfP/vfP/vfP/vfP/vfP/b:
- TLSH T1BB442DF9278AD2CAC25D43F29820CEFB8D4B7CA7001553816EC77F23321885918A66E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_90.cur
- Size 264KB
- SHA256 5c2318e20bc9506e20baa662e6feee842a7fb8a8c6a7b9120261a005bbd7a047
- MD5 7cccbefb7b9397ab4ebd3f7d75a7ad9f
- SHA1 631fbd93a5d1b9611ecf90a5f768a9138926baab
- SHA512 90ffa7273acc5d1b7d658a8b0a093e3623425e693a55eaad7d5be4297aa59a0584865ea8a33d85777b27ddebf1adad93ae87fa6d26f6b1992fafef3dc8ea4080
- SSDEEP 768:d/vfP/vfP/vfP/vfv/vfP/vfPP/vfP/fPfv/PPfv/Pfv/vfv/Pfv/Pfv/Pfv/P:
- TLSH T1EC44143AEB05C09DCF3948B265E0CCF85CE29F09A7C644A41FDFBE0B34910628299E43
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_up.cur
- Size 264KB
- SHA256 5ff9990140db6827909f0da71b48d09640fcd0f1254abcce6914849d8ba13128
- MD5 c1e462054d3a4ecb9a6020126414f9d8
- SHA1 17affd9e2cf86270092f7a510a590b8df1cca5f3
- SHA512 32254c35096021fd49a8983bc5fefe27b4757bcb50a198221985d23539b99d844da57e5ff98eb2925b98692dd49125dbc131986ec4c096edec4eb1320fb9896a
- SSDEEP 48:QOhigQUa633nXH3nXH3nXH3nXH3nXH3nXH3nXH:a
- TLSH T10A4415BB2B81E149F48482700842DDF20D8BFD61BB2A01B4AED73CDF36910BA1501A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_wait.cur
- Size 264KB
- SHA256 fa726af7bd748a0b36a0fb6255e0f5c1db38a3fe323762d8f31fed5589e58d1f
- MD5 65055c4fa84d0ff4a5ba965951a81fc4
- SHA1 850861a8625f65ea036e214ab51b7b7e6f547cff
- SHA512 bff29abaa93920efa05bf593d14be1a716c09a5caf739b581290cfbd0312388309a22b1485d6733137d26f16398f2e8c7132d37ab8bca0ee9eb6b43f353f63f2
- SSDEEP 768:dGqrPfv/Pfv/Pfv/Pfv/Pfv/Pfv/PfvffP/vfP/vfP/vfP/vfP/vfP/vfP/b6W:
- TLSH T114440033BB58C12ECD6901B26461DDF90DE2BF02A296450B7CDBFF1378164349688A83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_ext_custom_1.cur
- Size 264KB
- SHA256 635c8aa249ca3799d6ee95263470454d2b0044abd860760c5b15a38716803b17
- MD5 87f8ceb1c18478a7b67ac733dc9a985c
- SHA1 4fa93a88d02de934fe14c97a875cf065f5f9a25d
- SHA512 f2765ba9c213c783c26879c6ad780659feb131d17e00c800e02bae2e0aea6ed23c4cd99d1aa609bbc60baf9afe567c5d9fe1cb4d93c266e70d949508e4cc1935
- SSDEEP 192:4KONFrGjTn4dHxLRTkr33a6s//kcvj2wej:4bNcQ9xRGlmkcqwE
- TLSH T1CB44F3A24144865CC868A036C0F7CBBB6C887E49511104B766FCBC177BCE16B1E7ECAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_ext_custom_2.cur
- Size 264KB
- SHA256 ed9ff8b593a906d3abc3d641cf574e10dd2acb6ed4197dc82df970e39be95c79
- MD5 0d85a5451d472686bbb8a0d886d75a8f
- SHA1 b27f1cc88c1b507fb296733e48fbbd694a655135
- SHA512 4941d8c2581a57c45eff4529ff6d790e7ef0be20b75fa718ea4a5dc729fd916da15e50522e0e5d71deaa0dc3c886634d0a2524a7f9608d4ff7e7553cfaf81955
- SSDEEP 96:P/Ff3qvFb2fKGlHtd5y9wJ56qScXgpAenDyIrbjkpI86Fc5UW3+sUAJeT:Ff3VyyHEqJIfpJTPi+63VUA0
- TLSH T1AA4400B17084051DCC64E03AC077DBBB6C682E88851624ABBAF07C27B69E36F5154F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 N\cursor_help.cur
- Size 133KB
- SHA256 19cc751b33c3952abd4bd9c318ece4a88e2eef400db6c606940fd615215ac42e
- MD5 a0866dce22dc8fddc3a25247f2a410ad
- SHA1 4700c2e29a25b6ff126e8b0491a28f333da49a23
- SHA512 14cfa01611525f759543e9a102687604a619e32f6a9dfb1afe8f21f319f786e19ddd521e5d97d398062e5cbae963e131388ec64bf42646994409a312a642b931
- SSDEEP 384:66JUirkfmOz4itnPQxf8eRBuoXfJqHOXyOCYvP5j+EO:6jirw40Khcohj+EO
- TLSH T19FD31E63B511D04ACD64A5B4DE9EF4FC27207C60DD91426B79C0FFAF7AB32299C10698
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\update\mousemux-v2-client-packages.json
- Size 1KB
- SHA256 0251e98f2db93fdf02bf8889310764731d0086b00b88f1f89b8571cb91eb4676
- MD5 cf2864c6ba474ecb8070b36fb2828285
- SHA1 99c8f73a714d14b0d5734d4beb9443535b428008
- SHA512 be8876acf6a174e41282e4948bae8d05ec4109301888ff7612806960608944093ecbb115a570f49378f19ff61a13a261cbd88a0d82db2f567e065f4214008856
- TLSH T1D631D162D169AC038437C798A8B9418FF1B2235F1285499732BCA40E4FF0E0BA10BB0F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\decoder.dll
- Size 127KB
- SHA256 4c8407743b0cda8bf5adcf6285c5f91c37f9a96b5d2bc20fa392f03aaec2f07b
- MD5 67d679eedd9779063db7c5efe08f2243
- SHA1 c57e96e427d8c60f67ef15fe51d953d6f19b86ab
- SHA512 2dbf85c49bf47612a70d5414ced222c37e7aac0282d81ec98259959fcb0b56cd334568485f3802e530b3a1be581159364901ba6e818e19ae6fb4b986eafdce79
- SSDEEP 3072:JJzYRnR1UrYpMxbkpG2/wI/Bf6zWcvEm+PGcIo:TYPqrKM5kA2j3v
- TLSH T18AD3AE213280C032F15B143E8547E7B59BBF7AA1C9A0998B7FA40A655F31392DF3D35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00b341-logging.txt
- Size 1KB
- SHA256 c0ef61408c5c18bf33b1e4a2fb9af00c609e200c9da8cbc379edc4fd2d6b4b3b
- MD5 402cd45b272a7fb33fd4ec9a4ccc20c9
- SHA1 48f3a684e2eafde3efc0acc4136ec7d02b65d12f
- SHA512 dcd428b36492a65d1ebc99d9fbea8e4a104980ceebff4d2f7cb9fcfb9dd8547450bbcbea8effac3d38013a230c49b2ef5da6bcdea1eadd73da9e2d29370515e7
- TLSH T11E212400A86685D72380D59545723BECE5E0BB9CEC5148F23D7C470CBB862126A8E3F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00b341-logging.txt
- Size 1KB
- SHA256 edac0403ffc4e1a548d0e56dce9390f4266a86816b03da2f0acbdde72cb6dcfe
- MD5 ac5ac0132885715750c13cd50a302e70
- SHA1 eb8ae2272833c2bb8d9b70dd806bda519943b304
- SHA512 fa4a621bf00c236eaff9e057e54d13900cc55337e18bd0b90f23b35db4b17b2b8f1b902bbae9cc9469c7db0314a077e9836154f59656a0dce409f44c5f074c84
- TLSH T11B31E641F86686C32380D5A544723BECE9D0B799EC8148B27EBD970CBBC52535A8E7F1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00b341-logging.txt
- Size 887B
- SHA256 7dce06a8b8d58130cd0bcfe368722e1d159d5c4267e1dbc6c3eefd0358f0a93a
- MD5 93042ea707edd7c0e083ab3192355193
- SHA1 a144197fac28b6471fcf62909b759948ca0e5a44
- SHA512 5910cb4927a172619ad6d3add3f8e13b90aade65e23287d347bf3b67286e0bdf9052f38c2be4fe5ba76daea89f9bfea1afca295292cc1035fe121fd07d3baf22
- TLSH T107112C02A14E51175744D4A680E17FFFF9F05355AD609473D7B89B4C6B8B18208665F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00b341-logging.txt
- Size 2KB
- SHA256 94592c25e716098f432884cb7c03df06907a8b6f8ab9930130e414f24df9ae75
- MD5 90843cd3ebf71af4391459aca914ae9e
- SHA1 efaab385efb809e4982757bc3a5fe480967a037e
- SHA512 51b4e87a86d21c94b29baf2ec040103fb4752911d318c0a78a44da3627809a3116c8e03eb20e0985ecf27169b710f6ceedad29f33fbae2c89bdc7a6c5341a533
- TLSH T17941DA01644F91634350CAE684F23FFEECE01399AE4050F2A2B9AF0D7B96543095B8F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00a763-logging.txt
- Size 3KB
- SHA256 ec1cbd1903d00e74f159bbd5fec452f6508145f5b9bf48af8fdb166105436173
- MD5 ac4a159183a236f4ba8d7efd24d29315
- SHA1 daca322675a67c690dd6b1c8ae4a2b4de305ad09
- SHA512 a5e3dd14755877d87dc4e0a12e9a3d0061e37dc06b8b27add9211de2e588fdb765eda6866647cc0b8993c74ae26b88e01d1a212cf0499c81fce2634484f2a24a
- TLSH T12C719C44A85B8CC39300CA9654E337ECDC92F7994DC241B1B73D1B4EB746A191BC71B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00a763-logging.txt
- Size 3KB
- SHA256 182127e11f8e57cbb09b260dbfcc71522742edfd98d35d73fea1413596eab02e
- MD5 77c94fd28c713cfd43a050570cc5a2b5
- SHA1 3aabcc63fd8788f70e6f35811f683f1b417c6d6a
- SHA512 7cd5c310512304eca21f457326ede70a8dc5ee31f2c524599aefbb8e9a7e3903af971a0bd2577ea1e5c82011dc7f6178c99f736c95af5d37a14d7fd9a97267b8
- TLSH T118819B04A86B8883D300CA9695E337EDDC82F79D4DC241B1B77D2B4EB706A195BC71B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00a763-logging.txt
- Size 548B
- SHA256 3da07284313e9d0282cfd8f8baf73e37cab4cf5554034f1e3f2f9828f5419e6d
- MD5 b9da66c12710842598e866009b6baa65
- SHA1 71fc1bbdc56aa62d2b23bc5743d802a30d59248e
- SHA512 989e1a796ec08be9c450a6045f17685c83502f263070842b90d6641302dbc73cd131f0212eddc4c5c7fb99d3ccdf1122d92041a33d0f76795332a32ad2c91299
- TLSH T1EBF02B00B455064B121BDBA670B234CD79628B3C030431E561FE3B5FA7CC84A27C7E79
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-44-daa0e70e8c015545-0cf9d08b-logging.txt
- Size 1KB
- SHA256 0ab061e73301fa2e3d9db39aec971241894bc4855c7a7917d10332d9cf7aee93
- MD5 0573a8efbdd16bcc14006373a62fdf86
- SHA1 8851c8368d7f517fe762b105acd2053ddddf3632
- SHA512 da3adbedcfad0aacd5e450858f7d7958953930cca4f1f91cdb5c88677d01403ed9ff4ef790368ed096b76bc0ba05e90a11ee158b76fa6b22024d779dbf412765
- TLSH T19D2149009EF6C8E36200C41949642BE974016B4F9CC354B979BE4E0BFFE312D97883E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-44-daa0e70e8c015545-0cf9d08b-logging.txt
- Size 2KB
- SHA256 643c2da9227d4780dafd5471b27e403b11d3fcfc829ddc023baf0332c2d64cfc
- MD5 8c4707e17d40262c060050977cf1bfc6
- SHA1 94a447090347ec09a64491af73ec0af248babc16
- SHA512 cbb61f172aeec46b1ac8027e777f0dbea0fa7e329a1d25e569c05fae80ecc7bb6a704dab89b3470df4fadde36bc134f16714bbd6815b42cbfedc45687f5390dd
- TLSH T17951BF018AFBD4E3A300C5155A953BA83402674F58C264B975FE4E0BFFD2A2D67D83E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-52-daa0e70e8c015545-0d00fa80-logging.txt
- Size 597B
- SHA256 249bb410a473aabd4d9abee05b8023d1df4e6d32a74c4f16a664d2ca5e07e9ea
- MD5 d260200dc8a2e6559812d5c309f1cedb
- SHA1 391d1a08ad3fc9aa1f074c5195e09d149d939646
- SHA512 1cb5aea0a8d77646f8e3a03790857ee1fae4dc91ae47d4ff807b3245be1e1d764a26a5b48670db1f9880caf9adb3f39127beee49d17656317c280dcc268ba89b
- TLSH T1EEF07D41857EC0DF2306C497E511379D7496ED6C898502B2343D1B0CFB845257644BED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-52-daa0e70e8c015545-0d00fa80-logging.txt
- Size 1KB
- SHA256 97238f33f1840a713c1b25435a6b33800de67c39ce540a4387b46e9124d5ccd6
- MD5 00c8e60fc4404277f9df4b5153f3d0b4
- SHA1 074b68ef5dbed479bf0846400ccc5ff9b41eab91
- SHA512 140204a7de2d4178fbe6bfa55d773dc24ada7638ee6be287b05d3a5f27d4f610af76f6a1e5d820d463c61e2fccf2932a9301042bde54490c1c59488b9ba5537c
- TLSH T1D221074289BAC4DF2306C49A99213B9D7899FE9C9A4341B2786D1B0CFB441317648BED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-52-daa0e70e8c015545-0d00fa80-logging.txt
- Size 1KB
- SHA256 d8fe0ab3696029fe890f6918fb23d163d7cc4aa56071b9a1eba707c75aed70c5
- MD5 93b88bdc90e2d30faf551acb49b0f7f7
- SHA1 9823e9e76534c4ac5830ff139ea8ed3fd025d7d1
- SHA512 72807ab15da9b77b6e2fe76876d0ec38ecb89aebdfb6559348b391066a994a8302186a754c4f2b9509fb1d7950dce8bf528c54c7e85fd07704e70691e146e823
- TLSH T1DC31264286B6C4CF1306C4A9D9213B9E78A9FE999E4341723C7E0B0CF7440306A48BFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-52-daa0e70e8c015545-0d00fa80-logging.txt
- Size 2KB
- SHA256 1caef3dd4ce81857ca8441fc1a9ee8eeb620b2ef8f0c039ea6d072927daa0c9a
- MD5 a4ab55f68abd9cce18be1a82eb7e8248
- SHA1 87345c9c3df589c2cd553f1590089cf4206b035c
- SHA512 8db72e356e0770654efffbe4ae2dd6992db9ea5f27c62418b3c74b28f2c7cfbc29da3251cd4abd9d77b189a55c14be399e16f61fc5e8bbda7ca9e75649818c42
- TLSH T189517B42867AC49F5306C4A9EA513B9E7999FE9D8A4241B33D7D0B0CB7441306A48BFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d004e5b-logging.txt
- Size 675B
- SHA256 8a15cb3023a8239a89f8cbcd7756275785c831d59e7d0dfec9ffca78b21a8dce
- MD5 47a248241a6fc889bded7a126d3c8d03
- SHA1 04ae88278b489193e3d27aed3ad66459f6ca2db3
- SHA512 29372cf87b6c989268ecbd0f08afffd01216b447b6e3bcc3fedd9e423e4508140e3886a2ae7b07b166ed53fe65b06817f7e8a40e53e777b4533faf01d0796dfa
- TLSH T1D0012B00C8A686D77200C5D653B13F5EB842EAEEBE0540F3357D4909FB4961827D82FD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d004e5b-logging.txt
- Size 1KB
- SHA256 9a654fab28341e4f2398db73d5cc29d6353548b284ad29cd2c82c776b6c0d68a
- MD5 3b375baea07935314c54695cba628b27
- SHA1 fc96c7092f44c6c139ee3b21c09a1e36b037bfb6
- SHA512 2fe704cb89fd0a77a3f8f9b55f768c0c58085e9f5ab263f87aa9b204e2aae2a7f158f329b2a38e51ce598831076461bce33f02aeb9f8e5b1e51321a620b64504
- TLSH T1CD11F900C8B69AE37200C4D946B23F9EF802FADDBE0740B3787E4608FB5521856982B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d004e5b-logging.txt
- Size 1KB
- SHA256 70b93663b61a5a42acccee7865c8695154563d74f2a9550146b055f4efaf1323
- MD5 9b0d6d55e9257ff803798345e75f7676
- SHA1 2af00b9847c3c7e2395855134b4032639c9402ca
- SHA512 d6cb0b7487bb8ed447195d5d3e594aec48bf57e2437d97e603c32da7351162b68c5ebb4ae55a646ad968a5d8768ed2368bbdbd154470d42fdf0584e7ac87ac9a
- TLSH T199310400C8B29EA3B200C5D545B23F9FF802F7DEBE0780B3787E4648FB556585A952B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d004e5b-logging.txt
- Size 3KB
- SHA256 22dea4aced4abdfb6857e58f551b70697123b84394f795557fce671237eeac32
- MD5 fa6853228d62d193924a03dab82bcb20
- SHA1 3f11266af26ebe3332a210ca289a811c1b247ae7
- SHA512 099d5a316fd8565bccedeff7313c9a9f4e645534fde2423ac2ee6210ac68aa19abf226323476d88dc70d50afc1e564d3eccc32094d38767dd871ce887067c0f3
- TLSH T18C81AC00886A9AE7F200CAD522B03FDEB543B7DDAE4140F3347D4649FB4A65C6BD52A9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-service-2-1-30-64bit-22-09-2026-22-50-44-daa0e70e8c015545-0cfa309b-logging.txt
- Size 1KB
- SHA256 4462b43c9f0624547af281da402949826bcd24fae01b2bbf15691bd5d2ce6011
- MD5 2d40123ba755a2f9e0e83275dccc3278
- SHA1 5e9c859160b044fa8fafeddb0a84dce71430142b
- SHA512 0fcba44e6c1be8b559cb621f47be40a73901fe0280c61b4a1cb9ea4a4d53cc203bb0c33c4a349b05f46f54c327000544ca6cc3010e0a201f1b535e3fa46e90fd
- TLSH T18021F7108CBAC8D72208DE1B45612F9924912A5C9D1649B67CBF1E44BFED7281F883E6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-service-2-1-30-64bit-22-09-2026-22-50-44-daa0e70e8c015545-0cfa309b-logging.txt
- Size 2KB
- SHA256 28ccf5b23dd23b941cf90d504c4704909f95e8b0b504754f70e7bcfa49fa5276
- MD5 fafed3c92d8a8b4af011dd62d5eefbae
- SHA1 1748edfe1b5f512182a588f8ee1a6381577d65a8
- SHA512 16268ca6f447025bd154fc2e38069ce1558facac575102f52d9bec2d6c320193623a490cfeabe88717e8cd41d894838f6224cb33ae290d86d42c45d64e9dcc9e
- TLSH T1EB41F5008CBAC8C32208DE1755612F9924912A599D1A49B67CBF1E84BFED7285F843E6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-updater-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d006bfe-logging.txt
- Size 2KB
- SHA256 80bff14765077681cc8a252355af78fc9dd7d10191a5822bdb8db60d48e60e32
- MD5 20dc5928a2ceb0f69f80006f04751ce6
- SHA1 dbaa4290fae73247323a317c0e55f56b025d2527
- SHA512 8115377b78f362a37e719a0e58a4ec0ae3206d91b710213be344a66da73a465aeb7a44fd8b4c584a7c4b3ee9ff80f878bb1244d1978a355b5503a2c2312afdb5
- TLSH T1DF41E4058C5E89C73724C5E758A73B9CBC04FBAD9B02C4B3B9AF0608B74D1145F9A2E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-uploader-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00c964-logging.txt
- Size 1KB
- SHA256 b29d95bf0129c0592daf2cfc9eb5608e88a27580ae973cbdf6c31e2e7720d990
- MD5 ff5fca4bd0007f704f6ecf2f8ed55b4b
- SHA1 4707c152a8f62049d43bcabded025028fd988bc5
- SHA512 03926153af0289137a85204a572184f42e20a2ea2762196f511f38fb70dc85072eac234386c20f283cd3a6de91cfc4b65b5ee9de71212e25aa99619d7bcb9448
- TLSH T16021F5049C6687C32304E45E65E23B9CEC056B7EAA01C0F9B87E4B4DFB4611396892F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-uploader-2-1-30-64bit-22-09-2026-22-50-52-57e4f66a8c015545-0d00c964-logging.txt
- Size 1KB
- SHA256 295aaaa747cf10f0eaaf22a89455938fb9800e4a2ee02afd30a41b9f6cd21c61
- MD5 fba60ecc553c0bad9a60cb2c7b2baf12
- SHA1 af47b9be3e930456eea849bbfcb04ba43aad83a7
- SHA512 438075acef5275492e311c72265966b02b8f22e710c6e6ad6c54c7748afa9f89d04144a299e45d3779b074778fb1f1b5a4866fa8aa03c61f827ade161079bcc0
- TLSH T17F412A05D87687C31300E4AE54E23B9CEC4477BEA901C0FAB87E9B4DF7465139A852F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\MSID190.tmp
- Size 358KB
- SHA256 2bdb966f293d41febd40249228467cdd4e058055347e1b62f5ab3fb8021d355e
- MD5 6092611c734068ca80a202ce00fcb0d8
- SHA1 ccaf4651247291ac79fff6c1a68c6b0529fe2d40
- SHA512 057f7593bb989946d2876a3a779d37bd51068f226f59ea25d9857410ad77e2357f4b9175140d139109112c054c1b53c51c299030810b519a249e901c310c6626
- SSDEEP 6144:X62fDE/NYPKfIW3sekvcOopV4wLPCnDRFbQ:KMpP+V2+VDoDRdQ
- TLSH T1B5743904E14789A3D92381709893D77B9E3D2F1D6220987FE7E8766BEF32D429E17148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSIDEF0.tmp
- Size 297KB
- SHA256 a8e60cec78db1fed07cb41ac52809b194cfaef00ba33f85286d1aeeeb19db1ed
- MD5 d8d0f609fae9ad424dd3e8f51f35dd41
- SHA1 61d039248b588c0198b4a3ac86cc8d3ae42f3e9b
- SHA512 1e0ae02f0f9301b8a8cd21ef916b42518f330014bad16367d0f3794710fb441d0a8a3349b7bc1fc73529a6f7a4b47b3b4846b152792a7dd1bea385bd79034b89
- SSDEEP 6144:UOxwjn+GDjTNlemnzJrxAhcOlipeRswB+e:UOxwjndjTNAuzJrxERjRLV
- TLSH T1A8547C2376E5C032D5AF0674AA25876886FCF57179A1C007F3E4861E5EB3AC3DA25B07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-22-daa0e70e8c015545-0ce72421
- Size 691B
- SHA256 063269c4fbd1181b36593141d31547b5648056ade1852197c75741e6bf4cbb82
- MD5 d2fc553bf2676008a71f2a8c5c5a4b1a
- SHA1 34cc577fe9b35a24e1389976ff21df999870f418
- SHA512 b6644b6a3043f3996c58644d7494c2273c1238457283216ec79d2a3cad1ffcc85914b279a31c0997499b561e4db915754d3ac15f4b015d2c75844399d4444fc7
- TLSH T12801F760D8E5C1F33344F8A9E9613BE57808BA8E490299F5396F1508FF470121D853FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-22-daa0e70e8c015545-0ce72421
- Size 1KB
- SHA256 5fd0142e8b03e3d77fe73e0ac7f0c6e9574a4faeeb9a0c1befc086f6fda2a3da
- MD5 d4dbdeebeedccfcf2c381ed49a8a06af
- SHA1 bc0a0a73a6ac66eb9f5f8a7a816a0cbb6a02137d
- SHA512 dcf1fdd3742665119915890e74fc10ed9eaa8d37b0f59724a101f90d0e9b47ac475803e56af64fd23e69dd71ba51e3e445d9613617dee63b194f54398ad5a8e4
- TLSH T13A210B21C8E1C6E33380E8A9DE607BE47808BA8E591385F17D5F1604FB470215E593FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-22-daa0e70e8c015545-0ce72421
- Size 4KB
- SHA256 e669966db73a1cbcaf1335235be0950e0794a6d5cf164b77b0236f15aabcfbb9
- MD5 71cb2872cc401a8b5b95d8497b45d629
- SHA1 506ae66fd123a9c6e916f7af4ce01e85762a67fa
- SHA512 8432d10f8b461b2fb26ac40ffe67ccaabf73b255a7a7d54a581323f57319f9c075ded135f43116e68afc67c13876cd7fb576d29c57fa0db1f1f9a7b2c010c582
- SSDEEP 96:oclCmssfsTs4V1swqo/Ts8qVTfsqqzOZsxq2z3RseqW:ksfms4V1zqo/TdqVTfZqzOZOq2LRJqW
- TLSH T1E2A17D15CAD2C6D363A0D8EAEEA437F4250A73AE44814AF27DAE4B04F74B0002D77778
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
- Size 24.1MB
- SHA256 1ece91f737c92fd94456da0a50f288c72e3acb908c26c91ec800c7e0da38f013
- MD5 9000aa41ce6b98e33497c62c5235dcf9
- SHA1 4a107c3c36cd5e66a825ddc79391eee3a82a22be
- SHA512 48a179cf01e6d6efd46f49662cf499f5adb5ba2caf91e1e25fbb8e106d3bbbb4096040050149f5ac300528a5d0b9a6a09280db85fcb4a178a930e326dde17798
- SSDEEP 24576:wu8m+1z2doO/vvTLbW4+9GK8JREDAlIykeGdKXpVA0apOvxV4PlxwuzhN:d
- TLSH T1D247B52436FD2110E7F79F3CA8F06A23493A7D57AC159E8D45411B4E0922BB1E872F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\Volume{8860bf69-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{38c52fa3-7d46-4203-b73e-91bb65f0e6aa}_OnDiskSnapshotProp
- Size 6KB
- SHA256 8594b6bf05fd568b62764e46979f903030d172f145f560d8c934dccdf88f44f3
- MD5 2d1ec91e478077919497da74de303d28
- SHA1 abf590dc902d014f719c2096e146b75a2daad333
- SHA512 40f0b36c9e1fb3ea6caedd83d899844344009c729a0569ac11e1db5a580e864c8a6478dcef2376f2d9d9603e99e7510f9d62b5a2fe8bdd035b6c2fcd34e3d602
- SSDEEP 96:FZJ1Ravc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:3Gb++ZVm
- TLSH T1EBD188085AE54311E2B3AB7229F14557A877B911EF33CB8E0298238E6671910F936F5B
- MD5 SHA1 SHA512 SSDEEP TLSH