Analysis
- max time kernel
165s - max time network
160s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 21:49
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
General
- Target 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
- Size 9.2MB
- Sample260922-1pjelsshqf
- SHA256 015101597ba0c91321c4d34d0d61722a03023fc196e21a49f8108ae2b41d92f1
- MD5 270353d53db991d82924a2483f7e365b
- SHA1 d42495ecde9b5fef29f2c5479a325bc0abfa768b
- SHA512 e10980ee74148f6cf88799c46dc942ac352a8eb90a2bc6244f496a7b7c0da3bf8e2c2cef82707e2b90df2c0ef40a84a1f0fb796ad3188d3f82c0ea6ac2ef8b4a
- SSDEEP 196608:yIaqUBSx6irchOpF4TVxNgNjuVRjo1U2tku+kiOr3DQg9:ZaqUBI6ir9iDk6VRsHkuDHUE
- TLSH T1BBA6121337D38022E6A21530D6E9D33992AD6D745A22C99B53E07F1FBF789839935B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 64 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\S: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\X: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\X: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\L: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\R: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\B: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\A: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\B: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\R: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Q: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\K: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\K: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\U: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\V: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\W: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\G: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\H: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\D: msiexec.exe File opened (read-only) \??\U: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\I: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\D: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\W: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Z: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\G: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\L: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\P: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Q: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\S: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\A: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\O: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\T: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\V: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Z: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\T: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\J: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\N: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\I: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\N: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\P: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\M: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\O: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\Y: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\M: 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Drops file in System32 directory 19 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12 mousemux-v2-updater.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3689351193E7AE5701E3D3D5909A06A1 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_61C59548714BA262EC78488233D74D05 mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8 mousemux-v2-updater.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3689351193E7AE5701E3D3D5909A06A1 mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-loader.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12 mousemux-v2-updater.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\mousemux-v2-server-packages[1].htm mousemux-v2-updater.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft mousemux-v2-loader.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B mousemux-v2-loader.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blueish\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Chrome\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_working.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Sublime\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - White S\cursor_working.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow M\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_alternate.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals A\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Ghost\cursor_size_180.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow S\cursor_ext_custom_1.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-14-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Black\cursor_wait.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Purple\cursor_no.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Orange\cursor_wait.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blue jewel\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Shadow\cursor_size_115.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Green S\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow M\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Red\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blite\cursor_working.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blueish\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Forma\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\White shadow\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black M\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Turquoise XL\cursor_size_90.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow XL\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_alternate.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Red\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Yellow\cursor_nesw.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blank\cursor_cross.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Chrome\cursor_alternate.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Elite\cursor_pen.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Entis\cursor_help.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Ubuntu\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Default\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Gold M\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Gold S\cursor_ext_custom_2.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Gold S\cursor_wait.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_up.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-08-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-09-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-18-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blite\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Orange\cursor_size_115.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime S\cursor_ext_custom_1.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink M\cursor_ext_custom_2.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow M\cursor_size_115.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Yellow M\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-13-standard.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-15-enhanced.ms msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Orange\cursor_move.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Azesis\cursor_move.ani msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Cold\cursor_size_45.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_help.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\OSX\cursor_alternate.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Black M\cursor_arrow.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Gold XL\cursor_link.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Aero Yellow\cursor_alt.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Colors\cursor_size_115.cur msiexec.exe File created C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals B\cursor_size_115.cur msiexec.exe - Drops file in Windows directory 22 IoCs
description ioc Process File opened for modification C:\Windows\Installer\MSI4A0C.tmp msiexec.exe File created C:\Windows\SystemTemp\~DF770EB64B8712A305.TMP msiexec.exe File opened for modification C:\Windows\Installer\MSI4D3A.tmp msiexec.exe File opened for modification C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\mousemuxv2loader.exe msiexec.exe File created C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\icon.exe msiexec.exe File created C:\Windows\SystemTemp\~DF8D7C997A77CFF77B.TMP msiexec.exe File opened for modification C:\Windows\Installer\e5a42c7.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI4E73.tmp msiexec.exe File created C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\mousemuxv2loader.exe msiexec.exe File created C:\Windows\Installer\e5a42c9.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI477B.tmp msiexec.exe File opened for modification C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-40-f85a0ee9b6f41a18-0cf7039e MSI477B.tmp File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\Installer\SourceHash{161F23C2-4643-4E89-9CC5-AACAF8CEA964} msiexec.exe File created C:\Windows\SystemTemp\~DF141C64F99B2EB4F6.TMP msiexec.exe File opened for modification C:\Windows\Installer\MSI5BB3.tmp msiexec.exe File opened for modification C:\Windows\Installer\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\icon.exe msiexec.exe File created C:\Windows\SystemTemp\~DFC2D5DD76CC223223.TMP msiexec.exe File created C:\Windows\Installer\e5a42c7.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\MSI4528.tmp msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe - Executes dropped EXE 11 IoCs
pid Process 1172 MSI477B.tmp 1660 mousemux-v2-loader.exe 4764 mousemux-v2-service.exe 4656 mousemux-v2-loader.exe 4864 mousemux-v2-service.exe 3384 mousemux-v2-loader.exe 4420 mousemux-v2-main.exe 2828 mousemux-v2-daemon.exe 5844 mousemux-v2-daemon.exe 4220 mousemux-v2-updater.exe 2936 mousemux-v2-uploader.exe - Loads dropped DLL 28 IoCs
pid Process 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 4532 MsiExec.exe 4532 MsiExec.exe 4532 MsiExec.exe 1776 MsiExec.exe 1776 MsiExec.exe 1776 MsiExec.exe 1776 MsiExec.exe 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 4764 mousemux-v2-service.exe 4764 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4532 MsiExec.exe 4420 mousemux-v2-main.exe 4420 mousemux-v2-main.exe 5844 mousemux-v2-daemon.exe 2828 mousemux-v2-daemon.exe 2828 mousemux-v2-daemon.exe 2828 mousemux-v2-daemon.exe 2936 mousemux-v2-uploader.exe 2936 mousemux-v2-uploader.exe 4220 mousemux-v2-updater.exe 4220 mousemux-v2-updater.exe 5844 mousemux-v2-daemon.exe 5844 mousemux-v2-daemon.exe 5844 mousemux-v2-daemon.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 2 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 236 cmd.exe 4856 cmd.exe - System Location Discovery: System Language Discovery 1 TTPs 19 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MSI477B.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-daemon.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mousemux-v2-loader.exe - Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 000000000400000020c1fdf03c8ae10a0000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c012000000000000000000000000270101000088380120c1fdf00000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e8410120c1fdf0000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e320c1fdf000000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e620c1fdf000000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe - Modifies data under HKEY_USERS 64 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed mousemux-v2-daemon.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" mousemux-v2-updater.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.32\runcount = "0" mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust mousemux-v2-updater.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs mousemux-v2-main.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.64\runcount = "0" mousemux-v2-daemon.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\updater\sid = "0d0da834" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-loader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28\52C64B7E\@%SystemRoot%\system32\NgcRecovery.dll,-100 = "Windows Hello Recovery Key Encryption" mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\main\did = "2cc319a5b6f41a18" mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing mousemux-v2-updater.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.32\did = "2cc319a5b6f41a18" mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.64\last_visit = "1790113868" mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs mousemux-v2-updater.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\uploader\last_visit = "1790113868" mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\daemon.64\version = "2.1.30-64bit" mousemux-v2-daemon.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\updater\version = "2.1.30-64bit" mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople mousemux-v2-uploader.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\service\version = "2.1.30-64bit" mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed mousemux-v2-updater.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs mousemux-v2-updater.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28\52C64B7E\@%SystemRoot%\system32\dnsapi.dll,-103 = "Domain Name System (DNS) Server Trust" mousemux-v2-loader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs mousemux-v2-main.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\The MouseMux Company\MouseMux V2\stats\daemon.64 mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\The MouseMux Company\MouseMux V2\stats\daemon.32 mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-daemon.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates mousemux-v2-updater.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\uploader\did = "2cc319a5b6f41a18" mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople mousemux-v2-uploader.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs mousemux-v2-service.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\The MouseMux Company\MouseMux V2\stats\service\runcount = "0" mousemux-v2-service.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs mousemux-v2-service.exe - Modifies registry class 24 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media\1 = ";" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2C32F161346498E4C95CAAAC8FEC9A46\MainFeature msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\The MouseMux Company\\MouseMux V2 2.1.30\\install\\8CEA964\\" msiexec.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Clients = 3a0000000000 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\The MouseMux Company\\MouseMux V2 2.1.30\\install\\8CEA964\\" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Language = "1033" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Version = "33619998" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\InstanceType = "0" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\722300262BDDB884EB875AF32CC4D93A msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\PackageCode = "CED169BD0332F194D9F4D84DD8BD9D1E" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\Assignment = "1" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\AdvertiseFlags = "388" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\722300262BDDB884EB875AF32CC4D93A\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\PackageName = "mousemux-v2-setup-2.1.30.msi" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Net msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\2C32F161346498E4C95CAAAC8FEC9A46 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\ProductName = "MouseMux V2" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\ProductIcon = "C:\\Windows\\Installer\\{161F23C2-4643-4E89-9CC5-AACAF8CEA964}\\icon.exe" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\AuthorizedLUAApp = "0" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\DeploymentFlags = "3" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\2C32F161346498E4C95CAAAC8FEC9A46\SourceList\Media\DiskPrompt = "[1]" msiexec.exe - Modifies system certificate store 2 TTPs 2 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 4608 msiexec.exe 4608 msiexec.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe 4864 mousemux-v2-service.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeSecurityPrivilege 4608 msiexec.exe Token: SeCreateTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTcbPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSecurityPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTakeOwnershipPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLoadDriverPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemProfilePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemtimePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeProfSingleProcessPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncBasePriorityPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePagefilePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePermanentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeBackupPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRestorePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeShutdownPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeDebugPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAuditPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemEnvironmentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeChangeNotifyPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRemoteShutdownPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeUndockPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSyncAgentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeEnableDelegationPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeManageVolumePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeImpersonatePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateGlobalPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTcbPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSecurityPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeTakeOwnershipPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLoadDriverPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemProfilePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemtimePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeProfSingleProcessPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncBasePriorityPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePagefilePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreatePermanentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeBackupPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRestorePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeShutdownPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeDebugPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAuditPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSystemEnvironmentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeChangeNotifyPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeRemoteShutdownPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeUndockPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeSyncAgentPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeEnableDelegationPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeManageVolumePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeImpersonatePrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateGlobalPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeCreateTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeAssignPrimaryTokenPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeLockMemoryPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeIncreaseQuotaPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe Token: SeMachineAccountPrivilege 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4608 msiexec.exe 4532 MsiExec.exe 1776 MsiExec.exe - Suspicious use of WriteProcessMemory 24 IoCs
description pid Process procid_target PID 4608 wrote to memory of 4532 4608 msiexec.exe 90 PID 5924 wrote to memory of 4712 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 92 PID 4608 wrote to memory of 5812 4608 msiexec.exe 97 PID 4608 wrote to memory of 1776 4608 msiexec.exe 99 PID 4608 wrote to memory of 1172 4608 msiexec.exe 100 PID 4608 wrote to memory of 1660 4608 msiexec.exe 101 PID 1660 wrote to memory of 4764 1660 mousemux-v2-loader.exe 102 PID 4656 wrote to memory of 4864 4656 mousemux-v2-loader.exe 110 PID 4532 wrote to memory of 3384 4532 MsiExec.exe 128 PID 4864 wrote to memory of 4420 4864 mousemux-v2-service.exe 113 PID 4420 wrote to memory of 2828 4420 mousemux-v2-main.exe 114 PID 4420 wrote to memory of 5844 4420 mousemux-v2-main.exe 115 PID 4420 wrote to memory of 4220 4420 mousemux-v2-main.exe 116 PID 4420 wrote to memory of 2936 4420 mousemux-v2-main.exe 117 PID 5924 wrote to memory of 236 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 118 PID 236 wrote to memory of 2460 236 cmd.exe 120 PID 5924 wrote to memory of 4856 5924 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe 121 PID 236 wrote to memory of 3548 236 cmd.exe 123 PID 4856 wrote to memory of 4524 4856 cmd.exe 124 PID 236 wrote to memory of 5684 236 cmd.exe 125 PID 236 wrote to memory of 2152 236 cmd.exe 126 PID 4856 wrote to memory of 2616 4856 cmd.exe 127 PID 4856 wrote to memory of 3384 4856 cmd.exe 128 PID 4856 wrote to memory of 2972 4856 cmd.exe 129 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
- Views/modifies file attributes 1 TTPs 4 IoCs
pid Process 4524 attrib.exe 2616 attrib.exe 2460 attrib.exe 3548 attrib.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"1⤵
- Enumerates connected drives
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5924 -
C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe" /i "C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\mousemux-v2-setup-2.1.30.msi" CHAINERUIPROCESSID="5924Chainer" EXECUTEACTION="INSTALL" SECONDSEQUENCE="1" CLIENTPROCESSID="5924" ADDLOCAL="MainFeature" ACTION="INSTALL" CLIENTUILEVEL="0" PRIMARYFOLDER="APPDIR" ROOTDRIVE="F:\" EXE_CMD_LINE="/exenoupdates /exelang 0 /noprereqs " AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\" TARGETDIR="F:\" APPDIR="C:\Program Files (x86)\The MouseMux Company\MouseMux V2\"2⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
PID:4712
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\EXEBB66.tmp.bat" "2⤵
- Executes a command shell one-liner
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:236 -
C:\Windows\SysWOW64\attrib.exeATTRIB -r "\\?\C:\Users\Admin\AppData\Roaming\THEMOU~1\MOUSEM~1.30\install\8CEA964\MOUSEM~1.MSI"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:2460
-
-
C:\Windows\SysWOW64\attrib.exeATTRIB -r "C:\Users\Admin\AppData\Local\Temp\EXEBB66.tmp.bat"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:3548
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" del "C:\Users\Admin\AppData\Local\Temp\EXEBB66.tmp.bat" "3⤵
- System Location Discovery: System Language Discovery
PID:5684
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" cls"3⤵
- System Location Discovery: System Language Discovery
PID:2152
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\EXEBC80.tmp.bat" "2⤵
- Executes a command shell one-liner
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4856 -
C:\Windows\SysWOW64\attrib.exeATTRIB -r "\\?\C:\Users\Admin\AppData\Roaming\THEMOU~1\MOUSEM~1.30\install\8CEA964\MOUSEM~1.MSI"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:4524
-
-
C:\Windows\SysWOW64\attrib.exeATTRIB -r "C:\Users\Admin\AppData\Local\Temp\EXEBC80.tmp.bat"3⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:2616
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" del "C:\Users\Admin\AppData\Local\Temp\EXEBC80.tmp.bat" "3⤵
- System Location Discovery: System Language Discovery
PID:3384
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" cls"3⤵
- System Location Discovery: System Language Discovery
PID:2972
-
-
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4608 -
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding B32A1F3EC66F1C7FE0293611A4F51198 C2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4532 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --send-wait=service --send-test=service --exec-safe=any,main3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3384
-
-
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵PID:5812
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 766B1C63DB47702F554D4E815C6A41912⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1776
-
-
C:\Windows\Installer\MSI477B.tmp"C:\Windows\Installer\MSI477B.tmp" --send-exit=uploader --send-exit=updater --send-exit=main --send-exit=daemon.32 --send-exit=daemon.64 --send-exit=service2⤵
- Drops file in Windows directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1172
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --flag-exec-wait=true --exec=any,service,--simple-install="\"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe\"""2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1660 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe" --simple-install="C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe""3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4764
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:1728
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\mousemux-v2-loader.exe" --exec=any,service,--service-start=true1⤵
- Drops file in System32 directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:4656 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-service.exe" --service-start=true2⤵
- Drops file in System32 directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4864 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-main.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-main.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:4420 -
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe" --dummy=true4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:2828
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe" --disable-fsync=true --disable-cursors=true --disable-logwin=true --disable-gui=true4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:5844
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-updater.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-updater.exe" --sleep=30000 --config-gui=true --config-path-simple=true --package-update=true --package-registry=smart --package-purge=smart4⤵
- Drops file in System32 directory
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:4220
-
-
C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe"C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe" --clean-logs=smart --upload-watch=244⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:2936
-
-
-
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e5a42c8.rbs
- Size 248KB
- SHA256 5dabe1553f50bec1f6f03089d848003829915a7a096e72d36be88c8fc5abe67b
- MD5 9447ab4d32cb78bd4654b76930f39463
- SHA1 bc68015d358f1806b9ebe949dba083192a64c6ad
- SHA512 33cde1ecad2025b3ae02e1cde17465ac6d600f8bde758514467dae6bf73626ea1d4a1da3d9f2c84979d57396196d35d0cb3d54637070789bd1ef8473a1f1720a
- SSDEEP 3072:iTPZ7QKHzaBoP+cwK67mjfmXyD66NN+0sx1IsckIsoccIMW0EkQ4kQAYwwIII4fQ:OQ
- TLSH T11C44B318A52A41C7B243DBD723C92A0E72C5AD3E96D0B1A8717C4D09ACCB74737E947E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Blank\cursor_alternate.cur
- Size 4KB
- SHA256 9f011729850ecb88ee53e6e82b557676679e10c4fa031e0fa50cba440a97ffb1
- MD5 7a0bef51b70f4546c3ed4e52aa2f532a
- SHA1 fd1d5d91a266e9221d33b824d05ccf851042a908
- SHA512 f87f3df244c81b06ae013924f26f294a84382f71af25298fe82b359c2c99ef7b3631044d076afe86b7d2bbad15d494573d7b4fd893ee71681096247a14d99eb1
- SSDEEP 3:GlFFGq5llfl/t+lV/l/9lvlklolBllLllLllelnRxaEaiaLkaTNaad:Gl/GqIl6HRxze
- TLSH T124910149B38018AAC9490B7480970786A3799D91BE26F383AD66381F6E373C47D26242
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Kcursor\cursor_arrow.cur
- Size 4KB
- SHA256 179b052c61a123551b5c9478525370dfa05578dee0e052177caace209c9ca6ba
- MD5 51c2e31d59a284fe6af6ea5bc8b3a712
- SHA1 d7fb2de7fa462a98ed1e0ad5c6d203f28ea7408e
- SHA512 ada950933cddfe485658e47bdec631870523963f98a061e86ff3907b55346b4c1964b134292e5695275d7a75977953d2e7fcad5eccd69c9447e7be1ba0052312
- SSDEEP 24:TMIqB66m/lOclFlS1lRyAqrbkStqzE0vbY/0+aR08P0BUaP0waubv0UT7RzNjYZX:QHA/pl61lRUkUtaG/aSvXNMZbRwK
- TLSH T130917942B3808A57E59AA3B9D49EC73023339DD687671B4343D57E1B3B733C60161156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Orange\cursor_arrow.ani
- Size 12KB
- SHA256 b4751abc9f94f64ed7ce02aa1ef1f26a21d2a211d21e103d8f8b0aaaf90ff24a
- MD5 ebfdfc63c1abce47aff79bd6802fd41c
- SHA1 36fc0b415e00d2c550aa693f2e74f45dda2b68ed
- SHA512 edb87f142b17464a1de61f30c8315c338d360546016f1289e2bf6e368481c4b5518a7a9b961fd9aa9930cbcea6b1d92f0eb5217c5f56f9753eb0f6cef9eefdd4
- SSDEEP 96:oO2NwQiaKBOYHIhEWwFiwvKBOYHIAfew3ipKBOYHIU:oOMiaKQYHI67isKQYHIsipKQYHIU
- TLSH T14E4274F6E3CC778FE1148BB19A6D0F4A631ACDF98BCA6745418CF04425F67088E15698
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Sublime\cursor_arrow.cur
- Size 4KB
- SHA256 fdea05779463495fa87084fe2e1cebd945cc57e4e5260bdec2f93b8413505bcb
- MD5 efb767752e0e86c9f25d55494820a107
- SHA1 3e227eff7962b68817438ed8165e32c00253ab5a
- SHA512 13705eaab3e85ee4a4e9f7e758aa49d26fcc6f9db8b21cb94bb49c4996f1cc91d575d1f8dabc1e3f5a0b90e2b2f9d84da4545b45623025f8efb606f947f3672d
- SSDEEP 24:D6DlFmkBGGfFYrysPqmlVwvgOxAMfxDyQ1BuXV9y3ZNSXWX6FWjf6o+IzUgd:wakbFCBhCIMJD1Bu3yJNSX+6FWjgSd
- TLSH T1949135C2F9DC859AD4042EBCF086D341C3431D6488D726B24C14BD1B85F10F8EDA74C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 L\cursor_no.cur
- Size 133KB
- SHA256 a52b35c4f529403dc1be4d157c51d3bda0b2f1aab54fbfd3198cc959262bd532
- MD5 45ebe6c0330b144e516ffbc42a09ca7d
- SHA1 f8ec805ccd7264902f08e735e50f1ed805324973
- SHA512 2639212120337e66d997c67e80e8cafbf696561e584d167329af5a9c47da2c91e1eadafb336ba73397c7f58b47f28bb105b926adde086cabbf8d66fa6ec8871c
- SSDEEP 1536:KunYKQQmDg9Qjz0ctYI+4uUKh+ZWmM1PgS9NRjYyB4+dR7:Kaxt
- TLSH T10DD37719BE80D452C86CE8718CAACD6626327D779D20905AFC917F4F3CF2226E5DB708
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-01-enhanced.ms
- Size 190KB
- SHA256 a0378c155498b6b41cf6e8fcaaa56105f9bcdef26753c6be479ef3ddecfc05a0
- MD5 44862f8bcf5912f9ff52a6e53fca0ab6
- SHA1 a77d7854c36c72f0c8a5e6d73c9c1b82c58b72f7
- SHA512 66d3938ef041a0a584e51310c9cfe58f76346e047c890430d4cb901146c5de93d48d20dbd55ba34db966beea38d607dc406bb303ba91459578308292187288b8
- SSDEEP 1536:ncRWWqtSb9VAIADRsQ58iOgG2yUhmf6AvcuXBgR8pGO3FYEzMzWvQ16:c0YossOgG2yUhmf6O71YEzMzWvQ16
- TLSH T14D1434A4E39550BCF25DEE11E8AB66FC20D73DD7B0C97FD907AD42C042A06916E9983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-02-enhanced.ms
- Size 190KB
- SHA256 58184940d37e0cf3ecfab130a442cf5f2e0411dff33f3b314f0d02b42db11f94
- MD5 610613ee7b5e6ebd7a4b17be8f8f3e6f
- SHA1 7b7e20f8c7996a35aaf460ed7cb8a29614bf18bf
- SHA512 d9ae921d070e8eabc05f6fbb99e94be0984235cd45b900042d00a3cd84e4a87880bca430becb595eb7c972e62d69b5214f31cbeba72c875fbf3702b2ab019114
- SSDEEP 1536:9KC9/SZx6VdSgcel105xj4f+r/UkWoj8gzflcfWJAeQFJcU3yNDHSox:gtOj124f+r/UkWojDo3cU3yNDHSox
- TLSH T1D81412B4C39951BCF294EF01EE6B6AFC24CB39D7B4C47BC403AD96C483A0645A95987C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-03-enhanced.ms
- Size 190KB
- SHA256 d17cb9196afd4fa870702d3d1a38dbfe51c25416bb8b0323648d08a390b0959b
- MD5 e258cea599a3257aeb2ad20a306ad51f
- SHA1 16cc416cfb3bb4a24aa9c9942c1d3f58bf93b19f
- SHA512 87c6d5f7735fab8faccf2503386b1fd1a8a032cb69dba93c8d4e708746d8ee8c2693a7abe824ecfbbbd43b1ac12412e5ccefc022e977099f69710d9d90dfdf8c
- SSDEEP 1536:N8pwSKZKO5PqtqXsb4XTjetmAWiuWNmYEaBOaYXOwr/XUxeGTo3oJ5b:C25KbCetmAWiuWNm2AkxeGTo3oJ5b
- TLSH T14F145754D39441BCF21AEE14E49B96ED28EB39DBF0C97FD9074D13C286D06816BA983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-04-enhanced.ms
- Size 190KB
- SHA256 de99389c3c16c42ba4bb2a49650e2b8bd4f60abdb3cf80968077c07c11a0f1b5
- MD5 a3bc2f811d601ce36f09b9fc41456d1d
- SHA1 a888f0b130276a233165f7d847cd800ba9154ba8
- SHA512 89bb7b54eac2a95c337b57050b51761e2faf916290f68d393d34d1f96474fcd4c5bbeea85294f7ee079e05185dbd2fc7361fc82405be35d2e9dba84f4d637e0f
- SSDEEP 1536:GNsd7IAjKCLgfRYi9HHHZuH46Bsfon+bbtjGdQ1nNUPhWsV7JfHrkrv:EtR795uH46Bsfon+XsUsV7JfHrkrv
- TLSH T1531411A4D3D991ACFA44ED01D8AB97ED61EB39D774CC3BD71B2C83D002A0761695A83C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-05-enhanced.ms
- Size 190KB
- SHA256 4fdb175522dec0c8d5f077b1e93047bd3f6c3ef513331ad2b56d7771027d3dc5
- MD5 d7629bf4f953bc8700f8b6ffa14ffda7
- SHA1 1791be079207906a659495dd216408c05b61c77b
- SHA512 d59401c6a67c2d91b96310361bc760db49db487b83b7b1444a3ef9aed403c41f145e248fac093b0967bd5423c3a96dbc559115752f2ac275fb6c6ae41e3b6784
- SSDEEP 1536:uZr3Td4jlJXqpqd9QerfiNmw9nJpC+1CLLCvz3K2zQUVpaTLisTO2F6:ElS5QNNmw9nJpC+1RJDaTLisTO2F6
- TLSH T1D1141261DF8941ECB3789E02E89B6AED10DB39D7B4C9BFF4360C82C9D2D0185A55687C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-06-enhanced.ms
- Size 190KB
- SHA256 813501483e11e4357ad82057a027adabb39ab39b62b1e6779232d89c79ffff31
- MD5 87a08c09cf119da2f5c0fd4559fa1811
- SHA1 e3ed25912fc983596c5ac3e6288ea19e5c36bab9
- SHA512 e9c806f8164db6f8b28b91c704b268da88c5a1ba25310ac382b9b4574d20194868ab5d671192d6f5e1c9af6119d04a0e1f94296e6e9c989d81cde2c6e6979525
- SSDEEP 1536:nLtFs/RsmyS//JuLoKAng5gNP61i7poI8g5NWQkiobtdgZ4nYBsMiZI14fOefaYK:LtFB3gs214fOefaYvlZwdz1r5mAbiUJ
- TLSH T1851463A4E359529CE294BD01F4AB72FD109B3D9FB4CDFAC42A5D03C6C6A01C9E54A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-07-enhanced.ms
- Size 190KB
- SHA256 e23774cb98bf451bfc535174aec58493ab331d399f2739cd8644d2947e715dea
- MD5 0381730cf0aaf883b22098e660f68f0a
- SHA1 9bf4038686c4c8be3d8f4369a99897cc5041ffc5
- SHA512 3fb1bcca63a1f285bdc23d6cfcc5586eb6e1be6dd588e42086e39e726e0bb8340100445678dc1620846705e78ac9b0b82abdf8d3e4bfcc5b425960a066c6daf0
- SSDEEP 1536:JRwT090lEmGGrfTMwuXr4c14qM3cR3wTJwigWZc7tCQ4z4wBamhIw4vpa:PwTPo/X34qM3cR3wTJtxJBamhIw4vpa
- TLSH T169146490C38C589CF25AEE01E8AB96FD25DB3EEBB0C9BBD4174D27D0469219172D583C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-08-enhanced.ms
- Size 190KB
- SHA256 c5e037b1bb79b373a4d9b7e9c637dc3cb9d80ffcee3acc8678d35c176f63b9a7
- MD5 27e040a790b12c0b3aae9113d197f6c6
- SHA1 a7e08899e6937f8b9609293ae4ed31835550a8ff
- SHA512 6af594fe80abd3eb97fdfe775f754e0125a97bae3a08e09e1402c1acdf0a65c0a3f1261dfe607d7012a21a62f4e535f046963ecfd9da8789d39336aedf5b4cda
- SSDEEP 1536:gLvOdRwHzpQKdclzBAQ/ArXR3K8cNuub5OK14GCyTzuGV2HvJjiPP3C:EiMUBSrXR3K8cNuujOG2HvJjiPP3C
- TLSH T12814E1A4D3E9919DF258AE00E97B56ED24CB38D7F0CC3BCA1B5CC7C002A19D1699987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-09-enhanced.ms
- Size 190KB
- SHA256 0c7bfd3d6181df7bad3a4aba114e3f82799d9befda412b117b7765c4f69eb82b
- MD5 eb3f867cb35e4a0fdd384b084747673b
- SHA1 7435b1212bc9bf980877e38cf9c244dd260ac6ff
- SHA512 ca3454c2f2a4f8fd3bb1f91c2507884cc4ede52d198ec60c3bb9875746b7725f6ae5189af96b68d9a95abf71706ecae2a0233c05019637dea8149d93f74f88d8
- SSDEEP 3072:V+DbU9w1Uy37Jg+IBMOv6SVg+jfgY+qAJ5:V+Dbswok
- TLSH T1701456E4D79410ECF254EE86E95BE6EC14C739D7B0C9BBD80B4D83E8C2D058A659983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-10-enhanced.ms
- Size 190KB
- SHA256 1b1836cbf0baab90c660038534e83f6c81b1ba2f00b4f66338a6f3d9e9576a1f
- MD5 8cb09e5ab421da09bf30015ff09fc00f
- SHA1 0cfc6db71f952431d46d4efb6129857acf9aa8ee
- SHA512 4989c87f26f2e103aa6eb836b65d4130d3072fb89a8b68d62c0a760e9c9813e55744d1cd882c6e33997d0fa310717f1a94706dbe22a637dd138c55a96ee14c25
- SSDEEP 1536:j3WIcpjsVoIH/gv0XcLwpOV/Pgizphk0HA9GOBn5f6RgkrAjce/jdsV:LYmBXVOV/PgizphkhSVrAjce/jdsV
- TLSH T1C914FBE4D09952EDE690EE05A58B736D2DDE396EF8CD6BC53ACD03C106931C0A50EA7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-11-enhanced.ms
- Size 190KB
- SHA256 89739f6bacc91e96cef27565796bb21b277127ba64ed0247d0d979845315426b
- MD5 2a59420b6d271620d2b34deaa7df921e
- SHA1 5c02a1d00f49fad5443f7b7ae5c0da9020171888
- SHA512 e9647b94664280b8b45f80a8d1c7ca18c0be3e543f9944aadf869f9c885221d8af2c9bcb2d66a1ea197755f2de02583ff34f2b38469af3715708cb92d7f96f85
- SSDEEP 1536:IBA9LAvUaCqPHtoiZLnQnRzk2lQ7EjSqcpIu+XCg5RENG45fdrTPInu:+B5rZ6Rzk2lQ7EjS0cI45fdrTPInu
- TLSH T1B61433A4E0D891ACFB52DD01E89B9FADEDE93D6774CC3B971B6C07D102A05E1644A83C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-12-enhanced.ms
- Size 190KB
- SHA256 be38032b6ca822f94e4d2799d74e16089a2dc0f1288702c725d486964a089514
- MD5 5f7d41c1c87e18d6f07135381308f95e
- SHA1 4c785507a9063b0122eb29340fbd5ddddbe7236b
- SHA512 cec501da84361cf17ad82bbd400ad3dfe4683beb6563daf7e2fcb8166d80a7ae64753f70f1d38a2ddfbeb61e019768e16c02511c64aa9d105913a001a0e0f624
- SSDEEP 1536:tLrXQntcrNZFSXgLAlQ8ujyt4H+mvC4HFkxPH0GwqgNpQIg79jR+IzKcD:hrXJfcQmt4H+mvC4HFTsV79jR+IzKcD
- TLSH T1A814A5A5E05552DCF2A4AD82B4BB77BD1CDE3C1EB4CDBBC42A5D07C606B01C9A44A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-13-enhanced.ms
- Size 190KB
- SHA256 9a3f646e6a0c2ad3da115774c631f219024b12f4a17b5860668572517b9a666a
- MD5 67065ad67c008a4ded80e801365c25b0
- SHA1 27e6a906f4b8ae0e517dc1892e70f4d4a4f81819
- SHA512 254292b5f80e859ee59c471309f4d0243ccb1061741f48b793475acf684fafdc9a6a0e552e26642f006bd9ba384fec2a80f62d22471151ae9ee40598090cdab6
- SSDEEP 1536:VmpqJL4J4ofPyPXYfjPeQzKDXYcPbOKygyHPY9oA9zxQY3BmeAxbswS3mH7EWQCb:cUQYBQ1T1L2ggRCSfiyCrzNnOzDDi
- TLSH T1A714F4A4D3E9D19CF25BDE00E97B5A6D3DEA3C1AF0C9378A1B4F47C142E0191688987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-14-enhanced.ms
- Size 190KB
- SHA256 ff3e14dd87020c62f934f024ef819428d4eb825ea6b1aa62a5435e807fe155bb
- MD5 8c48ffa150b5c081ebb81a699a2e777a
- SHA1 b6ab81dedf7e680972815935ab30acdd966e886a
- SHA512 cd5a88d3112e9dcc6326f53502e9af94cf120b189f90157beb55c936cfb1d520f7c2461aa51d4ec9597e2b355f02947a9890070f45964d99d87eac618806370d
- SSDEEP 1536:H3+AMpwbhYtkzwPcnMrncOlP/wSDZxUtEQWGhCc+vbuwE7QTsOPTtc8:X4OdnBOlP/wSDZxU6aF7QTsOPTtc8
- TLSH T12A14FAF4D09952EDF790AE05E58BF26E31DE396F98CD6BC92EDD07C106912C0A50E86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-15-enhanced.ms
- Size 190KB
- SHA256 ddb1989d1270e46dc5c10a2e1f4952c84eff13a5bad9a39cf75b5166e8127e12
- MD5 84c9a4d88f1244d6f850a02d6cb62d69
- SHA1 cf7db2709663370e2c18f3e71ca29afb3bd7b1a9
- SHA512 79ca4b7a36f5e21ba72b26f49c845bd686b9b090530f32ff526e438635f21cf9b8a1dfa7ed9bea5acbe95e626d82e857757a0d6207401160dfa78a4d3f0b8264
- SSDEEP 1536:IZItbkU/eivcPhA+FDnjGpD0e9Ars7C3fprWpMpX5YrdW4JvNbzf4HL:mdVnFWpD0e9Ars7CjEo4JvNbzf4HL
- TLSH T1581432F8D0DA91ACFB489D01ED9BB7AE71E93D1B54CC3B971E2D03C116A06E1644A87C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-vista-64x64-speed-16-enhanced.ms
- Size 190KB
- SHA256 e749e35672b080223b503d8145597e0e3e264e9e2e2d796506c08bb7248c1e35
- MD5 af15be9c0a748df2b8f83aa4d3d68dc8
- SHA1 c27d5160cd6178c0801bb2c7386ee3c001e776ce
- SHA512 3f9c098405031654ae29eed35392c188919446633c858ac4ef22e6b2bf8fb341b35e93fac7ab3689f7d026e078ad2307f48539418648028a44068f22e4f73a89
- SSDEEP 1536:RLQIkXlMkilVz8UbsRMc64bVgXmmXigndBSfI05/pHtI/Ig7tDxOoD68m:NQI9H4M6VgXmmXigndwkl7tDxOoD68m
- TLSH T1E21464F4E055929CE394ED00F9AB76BD30D9BDDFD4CCBAC52E5D07C606A01C9A48A86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-17-enhanced.ms
- Size 190KB
- SHA256 8cfc2f60a6ae3fb1b4d4d54e71b5434979f7152373719ace4b3550bb1435daad
- MD5 fb66466f0cb0376338cb02426b79bf32
- SHA1 96e55442275877c8c8c8e3832cfe493c1db216dc
- SHA512 5ecdaf06afb8c972e9a785252788cfa20e74325f89dd450181b785341aebe99b06e8aa9a73fe15633a17c3e78db9971e703687a3650565ed3cca75d14021740d
- SSDEEP 1536:i7DOxddmP5TvF8Z7VsA+rbT1z+ggZ6SIoiDtZr3/vsPqNi7jdXODzDh:a2MEV6bT1z+ggZ6SCCyi7jdXODzDh
- TLSH T1AB14F4F4D0EA919CF358DE04E97B766D36DA3D16E0C83B8B1FCD47C11AA0291688987D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-18-enhanced.ms
- Size 190KB
- SHA256 e354ffed343a2f73931bbd8508830a90f7f062f171aeeb1e34492d5a77d7dae9
- MD5 97aa0aefaaebf10cdfd0b38015522d3c
- SHA1 7c5ad4c142c492fa2e1590f02b66a41d6c68de8c
- SHA512 f674ff3a0ecf058e3a15fc94ecc0b8e33b3109b3dd712f4bc5bd6661cfab7cb4df0010b68408e4a67e76352fb7eaabc05761f3be372b34818eb8a2087fdf36ab
- SSDEEP 1536:LHSskZ5+tAyJbY/gb0rSz+tHX4aLR5s+dA3WALx/3Qr4Ez4bEGnLV0r:Dg69b9+tHX4aLR5sL+9z4bEGnLV0r
- TLSH T16A14FFE6D0945AFDE2589F05A78F716D1BDEB92EB6CC6BCF2ACD03C105901C2650E86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-19-enhanced.ms
- Size 190KB
- SHA256 4db540b3201bd90fa49da0d43794bbb4cbaf3e5c70788be83749d264f2901aff
- MD5 750196ece9fa7165d21f43ba16a182d1
- SHA1 78887b1f4c2bea610a5d68aeca0c39759378bb44
- SHA512 422deee7d0c123373e804bf0110e5aa97eb4636913331940b13e212aa8b66775b54108e797755185793ae8906819f808567d7a83455c7e3100821cac4bcea246
- SSDEEP 1536:kZY+6t6WLffhgIR7kIDna1dCEyBNJ/zzdxoCMQ2sPXzBqDn7r7ScRBwgIggIAhCx:6RxrRqh3gqRcH4XOaU0clbpPX7Ubw
- TLSH T1651412A7D0DC9DBCF64C9F01999B9B6D6DD9F91B64CC3B9F1A6C03C002A2963644983C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\The MouseMux Company\MouseMux V2\store\2.1.30\bin\data\mouse\tables\mouse-speed-curve-win7-64x64-speed-20-enhanced.ms
- Size 190KB
- SHA256 e48ca186f88117ef78a141376314f0a6dca9d3f8c9ae25866b0f68bbf81d3345
- MD5 2408545f3980b07ad3729e89ab9253a7
- SHA1 4d2fb02fea4b6341f3b2cd70bd9eda1d19c7b842
- SHA512 fbcaced5542425f1b43176eae62b25d0566c708ea3b2763b0558a4fa3f0f83d2e0aa2e28f7d12aa293f4a5fe8e34f64cd06f48480d04bca73efd30047f630970
- SSDEEP 1536:v9yy7LL5Dck2rymfZnZstsuZgweFu1e375CZDgJYsQkMcjNLx6T9t60nerWXKmQd:NxF5r0AydQfG+3aw/NVANTFLZWgLy0B
- TLSH T1691498A7D4551ABCE69C9F00B5AF71BD28C9BE1EB4CCB6CF2A5D07C205B01DB644982C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MouseMux V2\MouseMux V2 Uninstall.lnk
- Size 1KB
- SHA256 8c77d281c0f96938d69555f38f5706d827b10b0e6f98a67e475b6c7c85df9d6e
- MD5 d40135f2cbe4a2f3090e220bcc6bd51c
- SHA1 c9b0dcf8fc6123bedd50c7d6ad65d1ac8c141b0b
- SHA512 53a5e4fec4baf4a56c81af0b5371e7f6bbe2b67861b09389e0c880ebe725369ac368fa0e44402faf9812d56f2aa465f0914748e6a013e1f214fae220ea1fab90
- TLSH T1F741F1854EE70776E3A187FB9A731B506571F962F5214F0F828505871815101DD38F7A
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MouseMux V2\MouseMux V2 Uninstall.lnk~RFe5a95e8.TMP
- Size 1KB
- SHA256 71a8e15753685dfc36b07417d29bb6f13f585ba5754348fa86bfe4e720a0b4e1
- MD5 1276abbe258d74210613018f2ac228ef
- SHA1 828d6670770a890a64179db6247eee9beff9ae67
- SHA512 b624912e3f9a25b1e5307cafcb71c6ba7db44fb88efec8d582881288766b98e31613fb3933cd7f1807b27f2bde73c01334adae9529b1d102cc8e7165ac9da6f5
- TLSH T10A41E1854EF30776E3A187FB9A735B506571F962E9214F0F828505870415101E938F7A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3538626A1FCCCA43C7E18F220BDD9B02
- Size 1KB
- SHA256 56e0104adfc65bf84a7541ef2a39433d067d1a5cb5018f4bb1dfa7d545e1c9fb
- MD5 e1d8640b9691f4b1cc7dc47dbd8c5b84
- SHA1 ec4ec96166058776c9c9a15a8177b716392ae666
- SHA512 14f7a866523712f0d2ba3ea52e492c696a2fb1af9d2b9f836328737656e37ac11da6cdaf8b500ef6a6429e8006ae3f623cde166320ee0704c78af09bfbf9d3c2
- TLSH T16531359C49451233DD023E65D9E7ED93DCF032942BC0D02A4D695F410D61F6E4FC5292
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B
- Size 638B
- SHA256 6d81d8bdcdefded7dc4fe400f03f55871fb41ab2d2b13d04a2e9ec9d43276ad7
- MD5 38e6ae5508425a5498b9b2453112f090
- SHA1 7f73a20a4eaee03c2139a7ad8f2eb3fa6b68f43e
- SHA512 46ddc1bc68dfc432428e3cc78c60789b3417f578d0128a02e8560492f4a66205f0fc9218a4f5b449cd67d1b8167da52c446592407cbfd893cd5626e85d540b09
- TLSH T1F4F02D7B6D6AEC80EB0A19C28654FEA1A0E2B33E70E109033935131D4BDBA6A91C7508
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3538626A1FCCCA43C7E18F220BDD9B02
- Size 330B
- SHA256 d35c453ef06882ec897217931c059de9aff3fb476fe92f87158dbd306d4fd81c
- MD5 09f1a739c9d284dfa4420719cb352be4
- SHA1 1bd183a2f3ec7c662fe381fd64c30ad320849389
- SHA512 98dd1c4492e0ace130a9cdf258d875a915303799cebd1b900353393765c1254cb5588f16b979043e72c2b574363f99b84f00f873c95b9701d985128701bda174
- TLSH T107E02B75BBCD871AF2FA05BD0AA60C00BD62B8AB7901C6071A2B140F7460E41CCA030C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F7C05BDA57785AD928BFB21D59A76478_E78BA1217B49714D26AC5F3681BB9F7B
- Size 500B
- SHA256 da0ab1faec011ebbf1458f7631e5ebe1a83032d1cf98711e0dd1415e9f21ec7d
- MD5 f3647e7577ea177655f867eb2d2ba6a3
- SHA1 81fc73ef9aabe726e7f2b8df2d5254048d40f826
- SHA512 0b28a56a72a03fa416c0ffefc50b169488c86537950ac0dd188b93f007ff03a78ee57686a56598257de6b0be56f1a78f240303f1fd3279afb71e62da3d0f9e52
- TLSH T18EF0AB7435ED614CF2338D7D03ECF2A9895AF227B6019BFE278102091905B516E517AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_5924\header.png
- Size 1KB
- SHA256 600de235b62feac94837d860ab21a03f357230ede7261df8f317279c5f420aef
- MD5 8bd342c427c0d893be4612a36098b841
- SHA1 eba9e92d61ce2ed9f07f001dbf7b9589ffe8a651
- SHA512 d86b446344154477d99906d2482dc0009c6b9e73d98941237f3c1be93b7409bb56a0309ed49a4aeb9cda66fcb57e4b8d22b4cda8eb8788c178af1ec1ccc67ce3
- TLSH T1EF3108A1FED844B28759952602D31208E06F078E2BA72877756894B9B34DADC04EA0A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_5924\singlelogo.png
- Size 10KB
- SHA256 fa90c84876263a3c426fb3396e7356f4a02d6955203ab761ac79f4ac923af029
- MD5 2118e9dd6fc825560d4d8a4a46931779
- SHA1 4c3086efd9fc17bba9d76fc9e0370a3f66d3101b
- SHA512 4aca9155781ec9a77b18b5405e4e6b3226b8885911b4cf0f6ec56b70ea71d8a649937c5ecdc6a92932b666381bdd9eec91bcbce71766f0e60fc1211265d44d71
- SSDEEP 192:P6ByFd6AzLEeqV4HPmvTEuAhwH6gyomJeMaXHa301B8MzenX5HmLj4AQyL:SBq6AzLEeqV4vmrVOZfxJeLARMenXRmF
- TLSH T1E732B05DEC1DAB70BF292C9AB81EBB54F51B08D8D92F167023C2D538E30C2E80515D96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_5924\whitebackground.png
- Size 156B
- SHA256 c6010f2418ddb482c1b1f3c8c5db5219901ef0eaf21bd02db4341f68a17cf0ff
- MD5 9b64d588d263a3ec997cb9325e8b4714
- SHA1 3f8c76cfee9a518655640ddce0699c3b20356ed2
- SHA512 c4e63c097ef0c715fd53ebcc90b956d2b8692cd25ef40d6a0f51eaae918d59bfaecf4d269642e3089b769453aced00d7c8bd0ac9d7e6a05f541aa0e2e8b73298
- TLSH T176C02BE36A0D4C7CD96B093F61BFD381C63B62490012111BDC13DC1C74F54908D61313
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\EXEBB66.tmp.bat
- Size 442B
- SHA256 cd7f6ad76a6a5efe7f030523be866b810fe4796b4b7c2b23c9ac9100a28b23d1
- MD5 32e1408762240cd595c2bb714de77818
- SHA1 d4e855dc4bdd764fd179aa74209e6f3dc12297a0
- SHA512 f2c32664ca788998241781dc43ccf783a0b53b2e5c4b00968c4d9dc68e92747ea188c1efbfa64065d1f0bf629eba7b58d3368851ae5541ac4a55f5feddff54bc
- TLSH T148F0A7425AC1832DB44494DB1B7AD5CCA0959F9E2DDC7210B71ED1EE548386DF7C6502
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\EXEBC80.tmp.bat
- Size 442B
- SHA256 7e75773cea39c17b34def63112db4ef39279968bdf3c2ac2e32034a03b25a706
- MD5 9d89cda3b5ffab45d4b57e6dee3443c5
- SHA1 99115038976731b788d09db442800e93dcdbe19d
- SHA512 f91029ee727fa46b85b10cb39bc04fc5e8aeda7418b0bc97c68ed7517b17f2f08828c2dc5a52e93ff5358c3a2977681708c4e9b7f286b8bfc0d7633287a5cf10
- TLSH T1CFF0A7025AC1833DB44494DB1B76D5CC90559F9E2DDC7210B71DC5DE608386DF7C6502
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI7F67.tmp
- Size 91KB
- SHA256 b3bc41b77a13c3a45d43fd2a7b1cdf37f5212798c602282e0e0d1ec52a4dbb8f
- MD5 3fe30e3727ac3e4a3b6e832b6a14a1c4
- SHA1 a27a7f7193f5255f4a7b4150a000998cb4a420cc
- SHA512 b842766faeb6ce7f641854f8d120d8c34808773d4c0916b3097f04f398bdf36e92405804ef998607ebbbf5299b42bdf35420f4cc99e4a82f1508b55a058e6827
- SSDEEP 1536:gs8qvAyBseBbMnt8JO/rWK2ilvKQtjEzDDPaSvi1MBnAJYZnEAj:FjBBbMnt8G2avKyCDvBAqZEAj
- TLSH T1B9932A4177E45179F5E369B02FFAD526CE76F8A8A472C42F4764080B49E0A52FB26333
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\PersonalFolder\MouseMux V2\Manual\MouseMux Manual.url
- Size 63B
- SHA256 d07ac2ed7ae432dfbfd2611a6bf17225892e4337c487ed4e46ed0f81200c84ef
- MD5 618f982b635b22b4c2bcd0d713c73b47
- SHA1 b807aaa7d0810d3c834f8587b9541f4a5ac444db
- SHA512 416ff043fb7e5040e7cbbec6c52186fbed6e6bdd7daa790b78103794d46956cc6a42884a6fa88fb89d1c832622131e4b3ddfdd9ab774e6f0247c1f53a83eeede
- TLSH T1AFA0024CC349E19B8813CE0C70F9C914EC2224F49173C8D5F2749E2569877D566C8318
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\mousemux-v2-setup-2.1.30.msi
- Size 1.7MB
- SHA256 18d9e63e7d33d377701cbc1e916933397e22c38ac6ba13246cfd87ad50775cba
- MD5 5814f18cc6a2d345a76a25fa9683b274
- SHA1 3671e601314202159d9431191c3adc70362bf12f
- SHA512 a910940762b901ee64c0d03b6fb06d2c821a9eef56106f0a857be298be701c10e9cf77346e4b1946cb5508ddfdab6fdef29bae721c26fd381f4e12f5b8f94dab
- SSDEEP 24576:LeF8XEldu0YYkbMQpPuVDo7CFsL3ajdfvJNERjRLmAFniXsf:LeFW8dRYYkb6qC2TaRXJyRjRLmABiXs
- TLSH T1D285B60365434462F196213ECBD2C33D0A2C6E78AD77A42B76E4BE1FFEB954359032A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\dbghelp.dll
- Size 1.2MB
- SHA256 d02cbb667150a927cf2c97e64592e882e1edf055dc5fe292a933ed32cf0523b3
- MD5 f5cb2c59a7039c2caccd95497418abf6
- SHA1 1a9deeed7d6a6b9bfff3e7bb81d4405ace89b78f
- SHA512 4c9f48a2e0e72895f332fb204d641cacd1dd2f0b69a1239220ada5df1f79c73e532260c1786e349036bed170aa70cf110e9f44bbfd86b50d0aebac78b9ee9f4c
- SSDEEP 24576:gAkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9p2:gWiOuRg/iyFzb2QN83XfeYab2
- TLSH T1C2453B31E641817DCCE731F656BD323D266CAAB2130422C722C81FF99B666E17E3459B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\exchndl.dll
- Size 36KB
- SHA256 5678485b413ada98c8a11bcd6c2f1658cf80d1a77009979fa82ff9f1371b63da
- MD5 aa922d6147569f09579a288dd0966ba8
- SHA1 d794f017d9daaa08125c0369a49845616a9ad273
- SHA512 07b2a0f7d9a5c2b4d0daa02675981ee256c905089a34a0614993b8f144ffba37cde2a310a89655e69c6c0a9ccaa7104984acf3a2a795fc6cd517df8d5238482e
- SSDEEP 768:32cZn4kgkmzEgYBX7KmAb9re4gGGwcTSbIwrYwbiRPJRT:32cZnyzSRAV9iSbzswbixH
- TLSH T16FF26C67BE0AA4E1EBA35E7041C6E737CCB2B902D5719873BB6DC2C4E953753121A036
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mgwhelp.dll
- Size 507KB
- SHA256 c566f6e2a36090f03ebee0e6fec4d43b2ab0feb361d1bed0123da9e54c09365c
- MD5 a6c25b869cbd8c7097cca71137b2f1ec
- SHA1 53e58d9d113f40ebbda2e320a8ac26ff1a187e81
- SHA512 3cacb269ccda309d98151309bed9e39720c7aeef32a85256930f04a87df1807fa009ed5e592783dea7da9ecbcc37e11f306d4cb8fe52917504551f8c4f1ede32
- SSDEEP 12288:QHQZdu8wgdWpMddk3IrdxQNltYJLsZVhtKa5bHTpj6:QHQZdp9kMdq3QxQNltzZVbrTpj6
- TLSH T117B42924FA4721F4EB534974814BF73F56207A01C025EEF6EB89DF86F873A222C15669
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-daemon.exe
- Size 478KB
- SHA256 40f212507a81377c08666d09fc7b44431d8eace9c41516c9670127ccbdd0d7c6
- MD5 a94067baeba765877dfab85b1b761d73
- SHA1 56c405f25b69fabe79966dde764c6985497e8f15
- SHA512 1522fab0c467eca543959ba7a084fa6263def2f81e1c8a2985f96c7bbba8b63b5d93e9bf74a19149c1b7cd33d1083375cac42f02ed3be6006ef87e35bc9f8cf2
- SSDEEP 6144:mTtggGVZlcOQ3fzbQc25F3a0AYJ+0WzsekvcO9AOOkEerO05P407s4X:nVP4z2faYoV2uOdPr9D7s4X
- TLSH T161A45A15E94288B0C91389737B8AD376C5F9DF16322E59B3DF887613E8321619A33D1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-installer.exe
- Size 1.7MB
- SHA256 7b541031d22d30ba3e59f7c4e2836173f0dd867507e4a51e33c534545df1eeb6
- MD5 7f08c455c0a47e9b025ecf54517fa621
- SHA1 19b310b3e761facb48e58a8dc2d3a1461ae1b559
- SHA512 72e4d11bd18f23c729631a41846867f99ff2b6e655e22436645628d759f0e33130461ae4c0b1299ab5f4f45c4d13f0193a9a4bb47dd60f546e9ecdf6a30c2c3c
- SSDEEP 49152:dd7OFo/5EJ1bfvFyeeeeeeeeeAeeeeeeeeeeeeeeeeeeeeeeu0+:nOahEvfvFyeeeeeeeeeAeeeeeeeeeeev
- TLSH T193851717AE5B8453E6810471F5C2C236492DEEF8412B9F236AE47E3F3EED513941A60E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-loader.exe
- Size 358KB
- SHA256 4ed972abbce6e67c69a039728c0bad46eac4bcd27c54ca2f16f4d0e3d77ceaa8
- MD5 b0888f8844523bcd49267f51f0c63198
- SHA1 df85312702e7adbce1c8d661213bba2ee1598bd7
- SHA512 0df9d5d8d0c2a3b51dc016f37a1a2e9e1cec4102fb6fd90f2f81ba768f577f0be9f9ae1b9cec3c742d8a6b5be9f6e4e7966d0b486b24f6f0baa1d9dd5db6fec3
- SSDEEP 6144:B62fDE/NYPKfIW3sekvcOopV4wLPCnDRF2wd:QMpP+V2+VDoDRIwd
- TLSH T11A744904A54789E3D92381308893D77B9E3D2F1D6224987FE7E8766BEF32D429E17148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-main.exe
- Size 1.4MB
- SHA256 5442ec94bac7196bc4e340c94f05fc6876f6b86b46dae5fb750b6593883503f9
- MD5 419ba75c4aa02102cf55b18d03a50949
- SHA1 d8061f367e98416352d48166a8f4998abc97037d
- SHA512 7355e513648694c56bba2bfc07ae8e3a3e9ae74c5f13916b9fa1fbb5bb903c7ff697042b880e96f72daffddaacd4d3e5cf3030e9c14eaee85020753306e2dafc
- SSDEEP 24576:kqIRS41yw+qR8Je/84kMASTObSDBvjT9pYql7ueD:VIwMpTbT9N7bD
- TLSH T147654C079347D0F1E6921230C5CAE73A5B6D5D394124CEB3EAE8BE2F7D7E653481920A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-reloader32.dll
- Size 290KB
- SHA256 73b1243f21f0c8ca0a5f3e45b303a6eba8e6bf364571d1dc9edeb94fa031337d
- MD5 d01744ff5669d60cc603dab2f182e480
- SHA1 1dd953605818a97196490de209bea8f613db1f3a
- SHA512 e03e2036298146da58b899356eed5ad926de54544cfdf655de452c49805d7156e779339e7177efcbcaa2333fc2bc6735cdc8dff998e2e2f5e2ab8737dcdd1e49
- SSDEEP 3072:84jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZr:84j1GWYXiBLdVTMxE5ZgavZr
- TLSH T1D3546D02E540C27BE5AE013511FBAEA21E7D9520276BD6CB8BF4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-reloader64.dll
- Size 344KB
- SHA256 3a7596c7954d099f3945d4423b6831e4d9e789d666670946adbf2ca87fceb573
- MD5 4f4133754ee326a51deb89aef3e98c1f
- SHA1 54f4b584a7fc1eb0a72bbfe9eaddce83dd0705ee
- SHA512 463fa2313c2dcc7b295d972c4dcfe62190a2c74af122e5b17897c5203bc5401817560ad7047c2e0837844d0b80999fdff11529c5bd4872a32909d9e124f4ce2a
- SSDEEP 6144:Diyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUb:DDhFyvqw1rZ3cNRFo8kb
- TLSH T1B2745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-service.exe
- Size 317KB
- SHA256 79d24dec28eb93e14b88cb35fb68da517ce85cfa6c085520fda85e28ee22cf3d
- MD5 5d2ac9a881a9795b0e2988c691e797a3
- SHA1 5979b17dd5e5a7471db8838553ffedb3bbfd48f9
- SHA512 761e7911bfeeee5d01dc1aaf99dd7c10ed278edc96611ba8bc0c505b8c2b14e38519a54c87a7b0da881ecf028f0ca948d2aa73d7575504354f361b3afc257601
- SSDEEP 3072:kZ7mxig43zhuiWkFoElsfX0BAvUUp2q2WTipkeLAVfWWc1M3nLm0W4Ew:07ekxlscOsA2q2WepkeLBsDzt
- TLSH T10664F746ABB288E0E677317AEF43D276DA23EE14A01CF557E3C5FB97743293A8105205
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-unloader32.dll
- Size 290KB
- SHA256 82feb4b6ec20a4863ff92c53d0b541da7e9bdf28280aecaac494e044cd84f86d
- MD5 c54219c886e161623c0b520426c72043
- SHA1 5b812c7e7e5c0a0e35f889bb182abc9e40353b2b
- SHA512 8fd2d361edd2b80353a9b02712e113e4bce00e616d26c4e4a0f90fdf8c2735fe1569c2c4b126657e7719b4e2f020836e1348114cc2a70b1a57ba2134113f121d
- SSDEEP 3072:C4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZC:C4j1GWYXiBLdVTMxE5ZgavZC
- TLSH T169546D02E540C27BE5AE013511FBAEA21E7D9520276BD6CB8BF4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-unloader64.dll
- Size 344KB
- SHA256 f2d1bbad9432cd393cf457c472ee1b5e88ca022bbd43941f3e1c63e2e07ac1c9
- MD5 8264d5a02e770bd05e3378823baf8817
- SHA1 0dba1410ba08e032ad0e6e51ba32b19953b45c74
- SHA512 14394709d6714e58b389d23a167ac58721ffb57c4d782f5a24ce583cba0d465b17686855bad414b098f57354c3b3400943bc8876d07013eecd1fe0bc04451f52
- SSDEEP 6144:2iyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUJ:2DhFyvqw1rZ3cNRFo8kJ
- TLSH T136745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-updater.exe
- Size 637KB
- SHA256 83a0dcbf30eb14988cde3edb0366b59b715553c94740234f985c678cb1920886
- MD5 dc161fd7777c328f470320e2b8daf539
- SHA1 de7856c6c847f951fd589c131af92a53498c75ef
- SHA512 35be641adec69ec081110dc9840d0d456326a51f4a4846ae1d32c9d1076e81d8c66c9a9c8d6aae18f190c756e42d8be70973cf77b4564bfa3f6be421236ee528
- SSDEEP 12288:tLg9/B9DfIcxOk9deDSb/JOzV27TbLZsSsmVW:tMNfIc4k9deGb/JtTvZsh
- TLSH T19BD44A06F74390F5C96F9171458BD37B91719E354020ADABEAC93EA7B637202F81B21B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\mousemux-v2-uploader.exe
- Size 568KB
- SHA256 d0336361f804ae74e4e941d7f2e875ec2e25ded84ca1f7badb7b79c4c9560fe2
- MD5 74272e03e3b0969347cdd802167fc065
- SHA1 73138266b292ce92334dcc64a1b2245c86bd3ceb
- SHA512 41428f905434cfb7bbb442ffb91af2f08f0e7fb24849e7c29c176bcb3bf27901df70361b97616685dca5cd2f93181ffe7ac97baada15c532411699808d7f0124
- SSDEEP 12288:TVfMgs7QIfTHLC6h/JGaV2/TDB/DyvHyY:TFBs7jfTrth/JYT1/DKf
- TLSH T132C42928D14370F7CD5E19304AC7E6BA92D05E014431D9ABFAD9BD56BB33A23EC0E256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin32\symsrv.dll
- Size 131KB
- SHA256 e1a7e32abd7cde0412702242d5979c22eb2f8f86e7df3694eac2481bf29c0fdb
- MD5 0dacc5240ca46ca2c7c400a8b1c03973
- SHA1 94ad384bcf05cb6dc164cb79aa9367a7d13c3577
- SHA512 a486bedb1b645d1a2d9fbebaf1a6260cfcd2ab5c51d6b0739ed4410cc52576d793c8c4f268992a836f77a94a89ec2a51bcd80a1854ace0e76e3dcdf2fe03a0ab
- SSDEEP 3072:o90KM+HDAeLRmLAf3xPD845jSkdcKExG2rStWJ19:t+HDAeLYEfxPD845jHcKsG27JL
- TLSH T1ACD31A00F240513AC9E221F48A6D2334A97DAAF2575341D733D4ABFD9A667E06F3835B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\dbghelp.dll
- Size 1.2MB
- SHA256 e157f8ff23878a348e1da57c1033295a61bb66198f70efbeaa5bd42ee7d54681
- MD5 bc9ef9414ec7dcba21ca157432e5cb4b
- SHA1 7e34a0100c669c8569b339f3fd6bcfaacfae9503
- SHA512 f387d61df6d5c399bf1bd3f18112f2c8d29e0f7fbec106ccfc362245fedb0d85784aa53097feb3ed19a595122b1ef81e12dd3817c8fdfc464187fe78d4eeaabf
- SSDEEP 24576:uAkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9pS:uWiOuRg/iyFzb2QN83XfeYabS
- TLSH T1FB453B31E641817DCCE731F656BD323D266CAAB2130422C722C81FF99B666E17E3459B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\exchndl.dll
- Size 37KB
- SHA256 4afc157e28a58c720d638bb276655020c66902fdbe4ea3a74f67fafc25604752
- MD5 00d2da406a826f5b93d47c1dc9805d74
- SHA1 c536445a6575f06feedd2ed62a843a5feb14d51a
- SHA512 0ca9f72d9e37aada6e7adc7c9ea60eb505936dba863773639cb9b77e0ef823981420dddd44ae11b3ccbf3636ab37a0dbebac4592582d6d14aa90ee8c50ca66d0
- SSDEEP 768:Cd4ikMivPsdjlXjOp/raVLe8+WydaLrYwbiRPPk:PMxou886daLswbix8
- TLSH T123035C6EB71228ADCA57C23440EB4733F8B1B46517308B6E2758D5312FA5FA0DB3D52A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mgwhelp.dll
- Size 440KB
- SHA256 7ef129a9525d5ce6ecd67a666cbb1a7d20791f99b61de20f62e593fb95af47f4
- MD5 dffee1cc56ada3f7613a5cac53f2a9aa
- SHA1 71eff5affba64aa0f057e1f09140e08f86fd0163
- SHA512 4fdfbf6a6b6127392babd0325ee2f419bb213a07ec1a37fb6cfcd0f62c679bd01a6e66e3fc1cb7af89878f34d08bc1f0d77e8bc1e34f2de72c391e0deeabee06
- SSDEEP 6144:Wqm+erdjoVQzIHkUe7ewWY+Wgxz+DGUJS6kJisTB3UMWW3d:6sTe7t+7syUJfkJisTVt
- TLSH T10FA40917F3A315BCC2ABC175839BE733B572B42512317FBA12A4DB721E10D949B2E618
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-daemon.exe
- Size 484KB
- SHA256 bb4386e7a61857294f3adfcb19e6e301b8b11ceb4c464aed6c47b1643ee604f3
- MD5 115e89f57e5dc006106ceeeb0a6fdfe1
- SHA1 9c06d191dd7f78e160734b6df7a8d518359c8998
- SHA512 6a16e4800ce0027b1f1655a5918320b578ceda227e81e9cafd9411d597d0e892c869e44ec2c9561a247904c02997882a5934d3b18ebd6cbdaeeccb31eba71d6e
- SSDEEP 6144:kv7cjSPGmZhnOQmnfN5moWgsekvcOY5pDEerO05P4AD:kDc2RON5XV2KpDPr9bD
- TLSH T16DB42906E10268F8C863C5737B46E272E4F5FE16326E24AB1B60B6337D71960D62BD17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-installer.exe
- Size 1.7MB
- SHA256 515eea92ed72d919e4cb02b7c856975519226831208ade2cf97a8e1f50e7f400
- MD5 793207406d499488227ef93855a271a2
- SHA1 ad0477ac7181ca85a10801d5cd78571af995ac3d
- SHA512 131b5ffa8cb111d24d51197b0de68f72cbf88ee8c0fcc6e8bfcbc18eb3dadbd3f48f4d0d0b131cdcd7ce8890c5c140b1f5ceee616f0c5f8af256b5f2af55b6c1
- SSDEEP 49152:fIHZq7OFo/5EJ1bfvFyeeeeeeeeeAeeeeeeeeeeeeeeeeeeeeeeu0u:gHOOahEvfvFyeeeeeeeeeAeeeeeeeeeP
- TLSH T1DE8528176A5B8453D6C10471F5C2C236492DEEF811279F272AE0BE3F3EED953A81A60D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-loader.exe
- Size 367KB
- SHA256 ed0a4553cf704ccdff9eff8afc5865a5f7a4ed9758c82172972dabf1607b06a6
- MD5 7d476078840632bd050109b4cf113483
- SHA1 3552b669f3fe34053b8ce6b730064b3e338967c6
- SHA512 41e8b78551d4a75f4dea65e98579c4ccc2f3f08a93aab5ac8b379e6538c432e82ab701293952075c476c060f41ec1e84ae09b7e5b2d69b5094c735a105398d9e
- SSDEEP 6144:PFp0Nyl66ItW9sekvcO2wc/4LPCnDR4B/:P/766xV2Bc/4oDR4p
- TLSH T192840605A10295EBD966C1748983D636AC3D7F1C2270A87F27E4B737EF34E50AE2B644
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-main.exe
- Size 1.4MB
- SHA256 6dc0b52f18b8058bae73293eb0f817d8992e7c0aacf092ace42b1e49ecfd0302
- MD5 b3010de3a42eac331d59ff3dcd37e9ce
- SHA1 630a1448483ffc655e48831f2662dc3ca63242cf
- SHA512 4e7f95fd1b06e0623229d3d73bc709ee1cedcdf042cd213abfcddd74bdb6657d68d05f806baa01504b8570a1a316bd4b85bd02b7a3fe4cb3cc893e3b37e9d1a6
- SSDEEP 12288:9WEkPLj87w0H7aRv2IjKIQNs+soBRjGKes1lV2et8hU1lHIYe7u/L3R:9KCw0H7aRvrjjkBBwKBdmhAql7u9
- TLSH T190652A079303A0E9D5958134C6D6D332B6AD7C390220AD6B16F4FF3F3F9DA528A2DA45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-reloader32.dll
- Size 290KB
- SHA256 973472c8503f98ac55767c8c3c8e05b00bcbe4304ae6124a97fc65f6468185e0
- MD5 aa6f2463213fbae97d48ab764a262ba8
- SHA1 29ec1902c75e06af6c57dd87e7f3d68bcf24cc32
- SHA512 905cb7cd3ffb76b3978a6d0b1167a3c3b7e443420fc57567dcb9231ffb6d6f88a2dbec14cec95796dde3efe2984cee40c48d98c5cd49ce238b5caf2af53e2175
- SSDEEP 3072:U4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZ2:U4j1GWYXiBLdVTMxE5ZgavZ2
- TLSH T1E8546D02E540C27BE5AE013511FBAEA21E7D952027ABD6CB87F4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-reloader64.dll
- Size 344KB
- SHA256 4ba34697efc55edc9260c16463e869809e4ef0b012d2bbb908c6780b7aa2bb7e
- MD5 17aa629d891209998273ada5e8a9b3a4
- SHA1 43e5a5a44f5ca37b4b5c1a44dda2c227d6a99d3b
- SHA512 b847243d68d9216ab40066547cd6c4a928842c3f0857ba54faa71abf4095ee4ebb81520da9dce12b5b5f5ea80ceaadef8a581ee01aa589c23e0b5f2647babc10
- SSDEEP 6144:Liyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUX:LDhFyvqw1rZ3cNRFo8kX
- TLSH T1D2745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-service.exe
- Size 323KB
- SHA256 67da950a2c286ae3987ee0c762e43e2452e6b48a09e649bf6d38e9c9969d6a11
- MD5 786a69820ae9569a533ed3c153e87e67
- SHA1 7b235ff6596f54e0aaed8b8398b6ca06f1b493e8
- SHA512 47b83ae2cf06fc7f7ba8185388a715ec605a2cef7f66a352326e504f7473e85c2a31465725b30ccd9e3ca995a18db5411b7100012fa68b3fef58a03b9980f7d8
- SSDEEP 3072:3YVAj7EFb6LJg6SGbAp+uZx6RDqWIFQwbZeTfWWc1M3nL9EMZ:fj6bGg6ShomwqWQQwbnsRP
- TLSH T1FB64E50AA73168E4E176B079EF57D132EA33BC00622CF55B66D0FB773935D3AA619204
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-unloader32.dll
- Size 290KB
- SHA256 c12ab899c74f8ba4d780100983a53bc15ada57b6799ddebbc1d6671688570f6b
- MD5 0118fac58a0bfdebe83de167f55e8e3b
- SHA1 eec2e14922a0f7712a57ca1f3bb0f3a0b7891c42
- SHA512 13a19e0dc3115670be0c6473a123fc39b5ec93c69a4aab99359c9fa04eb2b866c799578ce29de1de8b9a784c2063165010c71e4382750006352656cb748bc32c
- SSDEEP 3072:o4jC67IUjLMWYi0i7vlLdt1M1m5ZMwaaR5rNznabPe+/2gGLLLLL5rUstZo:o4j1GWYXiBLdVTMxE5ZgavZo
- TLSH T18E546D02E540C27BE5AE013511FBAEA21E7D952027ABD6CB87F4C9742F313D26B3B561
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-unloader64.dll
- Size 344KB
- SHA256 a71fe514f03c76c9a0d37179564f5742ed73ff6f7f3058d539ee052c08e86372
- MD5 df7975bfd9723131a1cb586ce12ec2d9
- SHA1 1ef2fbebeb1205ea731b13f023e17825322514ba
- SHA512 d16d6f1ab8ce5af4d0209e907dd7001877ea2209c5c176d9611b7ef1e95b34e887c229157a671158122f4074edcded30c74a87f66e5e4d8fd950d354e9f58ced
- SSDEEP 6144:siyh28N5yvqwd3rZ3nAsXsNwjC6y5zogbXUZ:sDhFyvqw1rZ3cNRFo8kZ
- TLSH T16D745C06FB900993ED76423598E35912FEB239181366E7DF42700296EF2F3E2663B754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-updater.exe
- Size 632KB
- SHA256 ec1610fda4e7f46ba0f76aa42dba6cfbac0b644b172edf2337dbb8855c0187a2
- MD5 ba33817acc6e76e07e2d8417429bd604
- SHA1 af0370368dd533804ef2822b16c619c0b3a3d4e3
- SHA512 1894dc6764bdc1d8e0752ecebd722cf01eb9d2ac7b4822dec940c41bcce7fd62870992b67663938828540454b78df5b0a251d5516e7ecbae80f083b3598af59a
- SSDEEP 12288:n02xpQuqWKFwcGj+GbcV27TM7FuWHVmKub:n02xQWK+c++GbxTqFuWub
- TLSH T1A7D41827B3A298F8C4AFC030564786B6F471BC350670655A92D0FB733A36D60FA6F196
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\mousemux-v2-uploader.exe
- Size 564KB
- SHA256 d70da64d9303dfb5c4aefa92c8e4539cbf8bfc70da3825d18768ffefa12a447b
- MD5 ac4ed98a3917c7e3c763cd24140de0d5
- SHA1 dce03569d024fe28f32352c3aa6c7f9edee9447c
- SHA512 03c4d42418c285690ea42f413566e542eccc3d89cba46918201c5dc513e405f4240f7ced81d58b3983616d521190bde2f941d09a2cd00dddd0927ed3637443a5
- SSDEEP 12288:GFqrR8NL6M0KcS1NVKxIV2MTI1l7rvHSl:6qWNL6MCSnVKxiTgl7za
- TLSH T1E5C4083AD652B4DBCC9E84705BC285E6A6E07C440630E55A32D1F6323F37D72EE2E295
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\symsrv.dll
- Size 131KB
- SHA256 28d779bb8f09a453ae90745385e0c517dcea9134995ce4252eea954f557a2c83
- MD5 7d0fdb189feadf8fd22a0e184b80a120
- SHA1 f8dc6476f549c69dce80aaaaed98119da4df9831
- SHA512 4659c489db7f0dd33b2ca640ba803bbb275aeff4969ff5fcfa8d60d28de2b830ea34273a8626cfe1297994c8d0080720c3c23c636c5326126b7f9009a05957fc
- SSDEEP 3072:I90KM+HDAeLRmLAf3xPD845jSkdcKExG2rStWJ1F:N+HDAeLYEfxPD845jHcKsG27J/
- TLSH T1E9D31A00F240513AC9E221F48A6D2334A97DAAF2575341D733D4ABFD9A667E06F3835B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\bin64\symsrv.yes
- Size 1B
- SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- MD5 7215ee9c7d9dc229d2921a40e899ec5f
- SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\help\intro.html
- Size 473B
- SHA256 4bcaedfefbc86b18ebae2b870afe679744d8491541b04445ddcef89f1639f2e0
- MD5 590e7c1e8c4c52d896779635f0df0ad1
- SHA1 8d372afdd50be9e4c59eb46f8df22c972ec14609
- SHA512 6b12a624d9260507d8d267c3f4f71591c13dae271be0c0e3175446e13240113d27809f2ff77f73ed9c3f42891dbce75cfb1d83d1721002ef6e2e246f5db40dbf
- TLSH T1B8F09ECA9B46BE0B82D3017242936A619615521813111A067CAA728363D581DC6AEBBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\help\logo.png
- Size 9KB
- SHA256 f325010832fb8f5fa7b8ce164a8f1d72d2b2759f5ebe4e132f7ecbf37769b12e
- MD5 789df3066757086691ed233a75a30449
- SHA1 dfc0d46d621c1087668630b909a9363a58c41b70
- SHA512 91d1c07b34c3a4c68ff2c7a2dff42ec22107d9a1a7cb0f2a2d4adb545fbda9b1a40f3addca8e78201584fb82d99e96014ae0c7a284fd98b37da0c3ca6bfe6068
- SSDEEP 192:67HIX4fvRm1esTjwBTCGXAOND8ft9sk69UVZu5kLo0mMc0YbE:67oX4f+PjGXAONUtmlGvs/Mc0ME
- TLSH T17422AEB0DEFDD92BD047DA64EED847B750C30C1A0C1B2B78AD6B7E4496244DC27C8955
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Blue\cursor_move.cur
- Size 4KB
- SHA256 e75c27ce6aae6c7621cc5d6443fc3ecf5984856dbaf7e4cff03be3069ca66be0
- MD5 54a3fbcdd1cca6191a48dafe91a98af4
- SHA1 9f15f666395a30b372b0e547e9c9e3ff2abf4f30
- SHA512 cb5cbc6a9f3e7101dc55a50c205e6831db02f39670b527f3a1d313aad20930a472a564ddbe9f14c02e6ce23e28466ac81bbcbbff95559dcf3ff527d085546a38
- SSDEEP 48:Z7j2dL9G+pUSU/s6mO0lj6DUF8mSnkPSp:2LA/SssJdeHRngQ
- TLSH T1EB912D202B95EE49F1016AF5D06A61F80B191F11D37C159FCB9A3E1FB4BB8C1C18EE68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Purple\cursor_move.cur
- Size 4KB
- SHA256 728bdf93d6a5572ce1f8ecec9890b150db8e377eff842d9681694c818acc9ea7
- MD5 2066e6a0ac8fc7f66c4442154757a66a
- SHA1 5b4b6dc81ec3621e35c205495aa84cfb53939f42
- SHA512 ae26b8803c5b3d46bd37f6d6585aab918f300da07f78328ca4e44b29f02e3d647f3518bd7cd4b8e4546fd23d8d94fe955f221db631258a67edd47a82b605548c
- SSDEEP 48:tnDcTQwn4nQUC/1uK0aC+Mf3wCB3tIEaKZ+oEcjJ2rQ/kvpp:tnDcTp4nQXcK7C+MnHGYO
- TLSH T11191F91E26D4C1A5C41160B9CCCA00FAE3A67D03E16905F39EE03F1E733B30A99110DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Glass Red\cursor_move.cur
- Size 4KB
- SHA256 db9de6c4f193b9bfa2c3d17378bf1f12fe35a1fe30c621129bf1e662328173f9
- MD5 39b322cb8f58e4001e44fe2ec531cf72
- SHA1 27db91261378bd2a87e3d53dae2823bda3d7d606
- SHA512 857a76af6af0cd866655eae9a59742c9e7bad2154a9a7306a7258cf03e4f4fbe2fbbfaca886475e22294007abcb85eee36dc88ee130ed63b713b8a9ca4582eae
- SSDEEP 48:D5wxATMZDxs1mNvGuvSJCIha+lRNAUvj4mXqyDWwp:D5xM3sYNuuvSJCIk+/Nlj4mXqyDWq
- TLSH T1CA912E64344AE78BC2271375CE48EEF42DF67D64F58120A3B1E13F9F74761119E84449
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_alternate.cur
- Size 4KB
- SHA256 e12b2bb99ec88e854843af4ad59aa2b7848fac401102a692896d5cb9ee7b3969
- MD5 edd96aef0347b025a8544d3fac0ce120
- SHA1 3709730eb773672e9f8baa072760708eeb83779c
- SHA512 0ce753bdd93ce44b8b6edc3f1e00209a5f218ae24c1f47b841a7fce3f88936557913d0948706527197c19831908e336896c9428be19ec7cb8f6d653a7990d277
- SSDEEP 24:f2lg386ati/sjtLYvXc/QY6SKANbarq7E3eOT:D3HOUvXc/h6SKANbarq7E3eM
- TLSH T145910886DE448808D46C2A7B82E6C2FE2E24AC12CE72527305E07FB3B4F327506CAD50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_link.cur
- Size 4KB
- SHA256 eeb61c78c583b09597a14de97c77c90bbecb3d9af9ed0b630f84a0bd35f2e56c
- MD5 91bee364d9731d7fbaeebe22d762918b
- SHA1 7e5ca8c2e122089ba9b57d3b4a4a0058d92516ad
- SHA512 424e51e8323cb967d639249685ccadb7f190b8fddf1a0547a4a085bee6209f28ac04471e58284f565848d636d77feec24c7e80d09f3ad273e2c2a5bd6b68b32d
- SSDEEP 24:cE3/1AawCHVgFrAaTpVu4u2up/wuw8wuwuqSwuwuRwu0wmwYwYwAwU:pv2ahNaTfm27BnBBNBny5bbAj
- TLSH T13891385DB3578AA5DFA442B0F80E853018D16CDAB073DF1885D7B86767F33232816509
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_115.cur
- Size 4KB
- SHA256 de8ca70a6bd0e8738200cfe5a9d2e50514c8274e39e9939493726cc307ea7df4
- MD5 6f2eb112fe01ee3c84bbbfa64092b079
- SHA1 e0ecdcc506e6b3ee6c25e3fa78ad8a7cd6a15476
- SHA512 b5c9eebecb25dfc2a8069e346381f3c401a4a9a6a568627a80fe131a87a6223d851e57578aa87c413943a22dab6dd88c43e617c02ca3130d90a194b87c6aa272
- SSDEEP 24:7yn8/ls/NzJaSlAkvaauqtms0o14yREyzbo5:ocaHAkei50o11REyzk5
- TLSH T1AA91F9AFFF4A078ECC67167EFAEF719181DB5C492913E75988413A3893F78403029949
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_180.cur
- Size 4KB
- SHA256 ae87e1be2012a8d22db328bec839cc01705776df4a8668a373d2d7efd918cc09
- MD5 f55ee079e1584126368a0a003cf5da52
- SHA1 7f9545c3da864c57ac5dd6aa2ece330249f8529b
- SHA512 776e5fb73980edf7413079bd63de42d92880a4d61e06cddcbde87f0a54b19eeb66d27825953dbcca75d3112e8830cfe3db96f06a0bff2392cd8d2e68ba0a5bb5
- SSDEEP 12:CWxNJrpDwJVzhw07rMGOCDD7+QZeIBJegBpBBJN9S:7jg1J7xDD7/prVzS
- TLSH T15B919D9CF33A4798CE6D6270F04F108652D91D59A8D7E4AB91B1B87833F72A0AE341A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_45.cur
- Size 4KB
- SHA256 26ba676103297f4fe9dba4d49238be80b1a7dbb1e869ec1a0986c6e7afdfd07b
- MD5 d3f4e3b187ded3f53cdc7435a10d23b2
- SHA1 76e95f1eefd8e7af946c9a6149a0b16824a6adb8
- SHA512 4ce0b8a8a01db56ecdbaaccb60f34ffd54496dfaca02c115fe358fd923b54e256196c7d2286d7644670ec0e4de9b796c2c3d659078868ce4ce6ce6a129227a04
- SSDEEP 24:7wPIykI2TPzu+zLOqTylvBccFcnull0Hmbor:8PTkHbzu+zSXW1A0Hmkr
- TLSH T1E191BDAFFF49438ECD2311BEF9AF30B184D79C192513E26958C27A3983F7551666C448
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_size_90.cur
- Size 4KB
- SHA256 093c36f1baa94b49498b173a197a99c72835381aa0b1823ae669eb19adfcc430
- MD5 d680063d9d9cae42bb1e00701533539b
- SHA1 1d9c43332989a4c872d7012f1601ac594160d9da
- SHA512 7a9711662261a6085434799c155aca145822e35586a1f8118b3c5828c2d49549e02855a09ae555d18c2ee83310d5fedeead90ba7d5e4fe60625ccb3878bfb841
- SSDEEP 12:CWhZpJewJe4ntwpewTewmeaCqewTBpe4hJJ6pZSSd8l:7ftaTesQTZ28l
- TLSH T16F91929DF3364798CEADB6B4F00F54C052E96C8D6953C82362A0787637F30532E39052
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Pink\cursor_text.cur
- Size 4KB
- SHA256 df2de2269ac181eca37be88f50613d4e64fe1bb32e597b442f681e470db33b14
- MD5 fb4034a0dff9163fde813a30b2c1d1c1
- SHA1 735bc76fbd197699243a4033b419714c2b76de38
- SHA512 98b1e91d9fbf8e0ee5471ed93154e13b08b0f83e1a8858f717ed52d1111887ac3a610d25f412ea3844305db47d0434454cda0b7115b9f9c36e9c1dab3788e11b
- SSDEEP 12:CvUaui/RU11wR0MR0MR0MR0MR0MR0mFsWzwnti/4zrop:Kr2HwR0MR0MR0MR0MR0MR0mFsaocYk
- TLSH T108915956F8B6C80AC0984B384ED7C0FE22642C86DF1B860775E4FFAF7570295A295290
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_arrow.cur
- Size 4KB
- SHA256 8e4089397e0eb4115f0da06c85abb26d9e8e8e1e242f2d41d813dc70fd104f3d
- MD5 ea1df32175a3983a4577ebb20b3cbe10
- SHA1 55149e2c8a8cefb8bd496ab473a21e99240ead5d
- SHA512 33e6f355f2e3c51109781e9976d23fd1d3c5786b1cdebfc9da227efe205368a2800b1fd17fc204dd0e885edef75fb64f8d014c037c0bce6e3cf89c5071748465
- SSDEEP 12:C+v/SNkpa/lDiluJlGmobOSwum+GO9eEBuIB+cBOgBDBbc3:Dv/f8/lDiluJlGmoOaVVcEAIwcgg5i3
- TLSH T1B29124AEF32A4B84CC226EFBF41F06E400E71EA54A63D07720B2383533F7902A439012
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_cross.cur
- Size 4KB
- SHA256 82960bbb060bf78779c736e325c83a30fb44f8f5d4d05ba984f7594e2f7438b5
- MD5 e67d9223b642c25aabc6bc3e1b9067cc
- SHA1 7655e8328a20428f92cda20c3361e196614b9c7b
- SHA512 8d9d821b910fa253368c7c7ed4e59034c06eb728320424686b0bbf9a6815639a6d46627d7a6fecb2599a6d67104e853d47fa0660ab05ad74fec207013c7d79b8
- SSDEEP 24:o9YIGaZatEOZD1aZadaZat0C/0C/uOlCEnOOliIpm:a9GiiiOiI9hlZltg
- TLSH T1AF91E791B3F90E92EC41263884C0C7F013648CB18D26A31F5AC5FD9F3E362E1896BC24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_move.cur
- Size 4KB
- SHA256 54181c6b555396ba623781663dc20388edf85cfc49a7d86466dbb937dcead4b3
- MD5 e5dcb831e11ec5d8a0f2e51656bccba0
- SHA1 9d80e249984c5a835c361c86a8057132efe3b177
- SHA512 9ef4dbb16947b740dc747a57c4f5a109dde242f15e33533a73e295d6e6ec2a8a9307b59e9d3ff2716e4a77039df34596b3c335d93255374e7155e1c1875d975b
- SSDEEP 12:CWxNJWpDJ1IdSNn1VpH9VThJ5VT9plnmQnaUNteQKA/Ype4XwJJP1IptQtPzQQZy:7+IqpnH7aGrKAqJ6ZztOt/RT
- TLSH T195911C8DF7BA4B98CDAD7370F02F48C212E86D4859A3C43B5220347A37F3216AD36611
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_no.cur
- Size 4KB
- SHA256 05855974aa364fdfcb833660c1d7e4980eb01321c92224cf734c8840dd16d294
- MD5 96d6c5b746ba68b6334895c97dfb0c91
- SHA1 6751ed2567a12248976fe4d71bfd3c6920b513f6
- SHA512 d400c6ef2992da10af152a7e56ef247fd1309a5b6b9d0a260b8f5990923e45397580dda3a8c178556865d67e2ebb99bcb6007d439d1ddec4f9ceb3c7a04b5673
- SSDEEP 24:LzvlRGYvPPtmOEL7svDbXzn0cMNO5z4fYj3Cb4I:XGYXF4L7sLbXz+NO5vj3CMI
- TLSH T17A91E3536804E644D50DC8BBC1F1FDB6326B8D6FA453645359687D9F3336122DB2A3C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Purple\cursor_up.cur
- Size 4KB
- SHA256 7b39802b5903e24a9fc3c82187ef6dae5df72127a6a05b63ad7fa0c17b3969d4
- MD5 db8c64baa7f4431a4f1464a05a5e9850
- SHA1 1902cfa6c53300e94fa2482df7c1cc2cab73d783
- SHA512 da82060fffb4c14df3c58da204d12eb9723cdbd9ed65b169d35ad21e4444c236355dd7a8db8a366b8c42e2a45fe4d0ec4ae565bc2f7b6b59e98749b3a6659d3c
- SSDEEP 6:Gl/GelKSTLiMZJ0Ti9K8hyioTibYcd8xh0TSSdYR0TlAG0FazMehqB/loMeGcqBG:CT3i2MGOC7+F9eIBJegBpBBJNNO
- TLSH T1FE9113CCF339479CCD1D62B0F04F048722C81D4958E7E5AA52B1BC7933F7661A925090
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Red\cursor_help.cur
- Size 4KB
- SHA256 baf46f370b382b35dc43b33494263c21b31198421790353ac57303a3dcce696f
- MD5 d907d4f0c927b02787f6f3bef89f64e0
- SHA1 62700edb882ee349459bbf5f6fe68afa3979e005
- SHA512 f5f059cad31cdc413181b55ec9ca1e839cd14dcd3dde5b3bb99cde5a7fa1f1b71640d63054f0dc11bf632495c8e05c06d315247aa21d322f48237644f089106b
- SSDEEP 24:D8gAw3Kv/aA/lDaklu200UlGmsKCOnaVVcEAIwcgg5bbqqxtj:Y3w4ywmKuvlxfjnaVVcptBuqqD
- TLSH T1E991B8ADE36F0B8ADD226EFAF40F06E001E31EA24923C46321B2747A33F76816434112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Aero Red\cursor_pen.cur
- Size 4KB
- SHA256 7e99a350ddaf9d1bf939f26a0a365e6677b0770ef70332fc478729473598c46a
- MD5 8908dc992d2868e7cac099e5866169fa
- SHA1 0677d5f99f329f657dba1e511937df8e977cb51e
- SHA512 e2c3f3e2fdf18caf609c2b560475a55c3a1aefbd5462b56278179baf0176ab11b2af292ae61c6ac4134114884b5817eb702c4ab32d8aa608d30ab429d20e982c
- SSDEEP 12:C+ikn1884Il8dkNKXNbsNbBc3bB8gY/Z8gB8YxZ8YwYfYYSFSRNCNS+51k:DdKLQyMWSmrKZHbgPURNCNB1k
- TLSH T14691D70BF32D5EA0EDE512FBF10B04928AE2CC57C966C873106532A12EF7D099C95622
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Black Plus\cursor_no.cur
- Size 4KB
- SHA256 a79ede0b43e4693095b5171ed52a8c69e8e7c37d5330bd49ddd3f1c34a61638e
- MD5 126bdbcec5bda4889f79c883661c0a8c
- SHA1 2c94c0927618c9c16f735fb40ed4904913d30bfd
- SHA512 9eaa4b44a41a84677ec213208d8a061265147c6bbbf3e0ffaa43f20f0fddd6bea726448acbc26a9aeb09ed877d63be51b0c4c9a1e8a3f0b8d690fdef3cf237cd
- SSDEEP 24:HIr0PR3iQGc74jP8H+4dheh7AaPnmgX/p1LX2yCQuV9abosQa:or0JSPc7e8eqedAa5yn9V99K
- TLSH T18691746F57E4D539CAD03AF822D1654CA7B08D047A5FCF27584034A9667F3E6EC48294
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Blank\cursor_size_115.cur
- Size 4KB
- SHA256 f0085c6d759a7d0e7cbee953159c5a5d12f12c0b1eba63a9717c2c0b901ad08c
- MD5 b1321727ef1833cbc195bb367155cb44
- SHA1 c0a03bce8bd137442039fe04180d94a03242825d
- SHA512 99dd73aaac987683a6d86a2e552aaf12c655cced2acbabb8cc2008979697c7eabf7688a0f0c3984887320d301c95688fa085553136141063e19015f0071ee3e6
- SSDEEP 3:GlFFeGDllfl/t+lV/l/xN//BN//xR4RU:Gl/e1lPHrKU
- TLSH T1299102453300B14CCD4413BC082F96D6226A7F11FD7612433E223B0C69771644826EC0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Blue jewel\cursor_up.cur
- Size 4KB
- SHA256 3b2314f07c320f8144411b496ec6fd7e6da4ada69effa3226e29d18994c3ff35
- MD5 12890763ba15262f7842dcc58551cfa5
- SHA1 51977dcf1c4857385d2173c1ad11aa9f9cfa041d
- SHA512 4dc1bf24678d020e97ebed128c1845fce54d1d55724812182d58ef1e10b350323859373f74af1970f219671f0cc2b1dbd023c49bd89a5313dcf0e84d0d121572
- SSDEEP 48:pDUw155wx5T957QJ6s0wB5MxRVmdN5lpDr5ToS+sL2ctjH0K:pYA55wx5B1IhJUL8/5lVtTH+sLTHd
- TLSH T1DD91D70A3689D395C2AA6F72C513C3F2101D3C8AFD046B83B1C5BF4FB075095A826714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals A\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 5016dc6b6bad9fbaa5588bbf22331a7bc1273dc3bf9b9754bcda774fbea4b0d9
- MD5 75781742e20df040bb1e7e359f445231
- SHA1 63831aa1079e4194093ba1f13bcb569ac291ef20
- SHA512 63084a5a27d0c6604d3ca1f92bc5ba8e7866c9363480ac557ac90d954747f8a0ba2059bb7044000fce55c468d3334fdf5ac71d9879927d1b4769753cd8d07e81
- SSDEEP 12288:sFP6ZQsQ0h8NnSDFaFD6w+OU09eAO/KJA+92HGk:/4mleDtQyJAHmk
- TLSH T17E949E61B100E2E5EC3E8A32CA97F72946057FFDED814D9571C87B6E4071650EA2EB2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals B\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 3c3344b2aaae1cf7561903fa2809b385ef1e5a29b12830c0908ad4c240f647a1
- MD5 e1113a75f69c0b9707dd501265c9d285
- SHA1 04b22eec6583b1a7a0c7954beb9676e7a4d0ccb7
- SHA512 ba30b2a80425c0c6ff6666e6a47f650ed0c2dec0730e35f5a07d15c840726f59e8bc7e42fc852dbb8207fc71b9e908c4bda6f7a7e32121fb3b2a1cd3a63f6c16
- SSDEEP 6144:HCyJ/qyDe69G92JuxL0TV5clkXi8dZuSs:iylrQ2S0rk8dZ0
- TLSH T110946C96FD2EFD85DC3A18728C3153821F701DABA89649F1749CBF1C683607E971C6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals C\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 24bb1ae2ab0d6ed31f8aed88eaed264696c39012fe936754f75d0bd169e8e236
- MD5 6c7bd0417c8b1c70c259455df103ca1b
- SHA1 05a608ab92d0a61a8df50b25fa9a893993846137
- SHA512 55ca957aba7e156541ceca1d42a27aeb23b9f21bc994fbe81e0f2b7eb075bf20eb63c0680a130f38b2298ea8d175d6b1c3cb9fc0595427433ed1378afdc6693f
- SSDEEP 6144:tbo/vA6zI1Ar7i8d6xbNp124FfX6v9X173C0DypXtwPoD0c1xh:tcA/Ar7vS24FfXaX17yhpX661xh
- TLSH T19A947D253161D291DAE882F2CC4DBAF81B2D2DBFD9D4341BB084BFED70B1E68512D568
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals D\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 bf32d7b68fc07ec965b702881019bb111583bd68f528e113f9491d9c76b94660
- MD5 1b3162039ffc1b27974008c8e7000677
- SHA1 792c73da293ff6746b23191f2420fa5aa8c4d91b
- SHA512 fa2d361efe67befe7b40557fe10631bf1d470d42e001d72c2f548ae4dc7bdb809f4d33687cd4069e75258d592e99de18b87bd40e0c16ab7e527684565241b34f
- SSDEEP 6144:tXbnXOGzpxInwpVkTyoJFnUEK3u0csh+MQGj2OTfEkvwFPuwOrfB:tXb3wJKEyTj2gKPu5zB
- TLSH T1A094AE123D16AE48E50F8837C693D0686634BC155393BB92FA1A7F3EDE30940A78D57E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals E\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 0c372fa9b5db28ab4ac45cf4ba136a5fb2c507bf9976e950bff24a3865207a6b
- MD5 9df3baed050a5557723a67970377998b
- SHA1 42204ed41b3874f86b3e9dfa7d38d5850848cb53
- SHA512 affc43f70be859d5532bc28f4fdb144fa2c93b6ed3ed736831359cca2ad44c2f3b82e0fa1d9517ab389dcffc615fefce8b8dc2fb03c2f45336af960ba1e4f44d
- SSDEEP 6144:qCxXMsFPtDb8pzcdZMgFbLs4nQ95LkTGpP:dupzSZFbLTQ9jP
- TLSH T10B946B24B9119397DA6E97358693FF3C1B293DF9FE406C26B0887BEE643234C5105A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Fuzzy Animals F\cursor_ext_custom_2.cur
- Size 422KB
- SHA256 339dcf965dc09477ea3bd0ec01f33588f297a5558aac5c1d56c480fb72bec7f7
- MD5 760db98270dd470a933ddfa08d30a3f3
- SHA1 bf119debcd626539c237427a34255190cd18f865
- SHA512 21b0a980754b3f75b22e02e4e5c1795f3876f8a7185e281c8dc77068ed8d742a91d5c1f161b8712bdd5cbcdd71603dc3ab7d8010e893178b1192cc7e1fb40554
- SSDEEP 3072:vduNsNDsIc5Tlb3klYgbg8YBdgm6p8AC9DtnFaGdFdEukgp9e9plHtHwngNK3trS:vduayIcllr8CvHAQRDdHkgzznL3tc/
- TLSH T1CB94AE573008C698DC1C0A31CD9FE5590755BDB9ACC10EEAB9CCBBAD3A70160B94AE7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_arrow.cur
- Size 478KB
- SHA256 39e1e25ba0bba1fea8127544709766edabc7a2ae0fedec7bd60f0283fdad826f
- MD5 d80cf99abc1a3e28a9dca82ea0efc683
- SHA1 e41b946a1d590b3b61c8cb6c4b6fda776d1264ff
- SHA512 12bab1785e455c8308c3399e7c8898b9b0ea1db609e830bc85d42b2dee19405de610533a1fd28aa793244f8adde83a46eb0299cad35e51259000eb79ec6cadb0
- SSDEEP 48:MbLCcX9x5j+4SVXW2EfiE4EuELE1R9ZReXYG+:MyW+/VG2EawuELEZfeV+
- TLSH T1C4A43932794D8A0CE66811B7C45EC67F348F3E98F719113242E44D9FBA86079F18AB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_cross.cur
- Size 478KB
- SHA256 b340d2174f14949b7cd8948fc50e78baea2ffed94f6edd044a70bf107427c173
- MD5 82f930bb37182837036f8377aba2b27d
- SHA1 2a0485d2476dbea7e82a4cfe1d7f8763622ecc52
- SHA512 bd9a4302169c8d97cc3db4a663db3ad305a9fb1289113875d25385af9275594ae9b0277bbd6d97d74b866323474f2fc0ed4f2a51530eb8577fc128e5f5535cf6
- SSDEEP 6:ElHrLk0/tHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHR:ElLQ0iaCE
- TLSH T1A5A4EA30721D489DE02146300C7FD33D1654BC5EED20470671E00D1F3CA2208F81D344
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_help.cur
- Size 478KB
- SHA256 e915aaefe544c5ff694ccbb00fda3cad1ad964160c83fe06c11feba7a08eee9c
- MD5 cba1ecaf57bfb9e4dace651c346a1ab5
- SHA1 ea720a31767641c58f9273137ba991bdec8c426e
- SHA512 5ff75a38c2f9151d579dff0a9ab2b153fa0b671caf69e19d60b645387ab34548a83ab1d33f63e7e1b6ed49d6b9e09fe8efe3575f529aeae6db73089509576b8f
- SSDEEP 192:MTQxmZcLCnKhj4NwbXhoIUS76hEMvwVcqkHIN91wclvWqZV:MQ+cYtKdx67vwX9aclu
- TLSH T1E7A40437778C2A8CD6A46176D02DC23F388B7E54F62901560AD94C5FBA5D23AF041FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_link.cur
- Size 478KB
- SHA256 0cc71f9833d07e1cac317676551cdaba2767078638ec53ec0cbdccdf89a2c9aa
- MD5 39a8f86181d9a6146e040601080d6737
- SHA1 a4460b7e08280c5806fb65a05601878a91c37bcb
- SHA512 f2c2462d087f37046fe9c183e6506d0a14987b4139fcda8323da69d7424c381f61eb4be255b836dcc588be4d92272ce64170b07353f39962d188a81cfc107dc6
- SSDEEP 192:Mb1LKZnhNPLI/mp7t6IhZa8OwTM35/fFvSYkLVS+xQQaEEO7w4l9:MB2hB976IhSwIrqLV
- TLSH T1EAA49331678C6E0CEA9090F184BEC07D64763F5CFB17142A26F48D9FBA99135F041BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_move.cur
- Size 478KB
- SHA256 de659b73708fc1bcc1cff34f5e9d3666aa50783fad300ae3ff9e12506d41ebfa
- MD5 eb6acd8438ac46d319fdf495c0ed4cee
- SHA1 8b8cbc6f4eff227608d4783036898a2c8eedb19f
- SHA512 97e54fc773ab5699e0ed829dc23092416904245003fcd4a045321440aaea6c98f7e39a50f67154a32db271f34823ebf7c561fefc335a1da508c740b8a553940e
- SSDEEP 96:MFnnYHvAgZhaK6qaK6S12G8+k+juuhSKaq6KaqgO/QwPXInnVHEOWOWOWOWOWO2o:MVHn9egk3AnUo
- TLSH T104A4AF373B4D75ACD16240B088BDCB7DA6CBEC1AE42129502BDFAD1F3A45426F581FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_no.cur
- Size 478KB
- SHA256 179a14617d055026948b9f20a9db018b08705c70576fae224bd3d58be1a7397d
- MD5 c2db76a345d49a6182b689d20c3903e3
- SHA1 a90fcac0df9ab01b144f924c6928720b6897ffb6
- SHA512 d4c4376aea59dd0fff5ce5b4695aa95e6dccdbe6e37b436833afeaaabd2b11b9b81d087825de6f5222c0cfd74615512cb9ecba4207ab6e448ccdac554cf11d4f
- SSDEEP 384:Mjp3CSv7H5PBNGVxeTPXylPPim/WRllmGHY5xydImTz:EZjZP+ePWqRvmGHY5xN+
- TLSH T10AA41232A24C5F4CD49CA276907EC23E398F5E69F115011740E98D0FBB9A33AF54AFA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_pen.cur
- Size 478KB
- SHA256 5d5015b5fb7a797c0b44fc8f0962820c53b5d7da0fe1d68fee8eae937c516b9a
- MD5 7dfb2165866daccb8a2993cb668ea136
- SHA1 c322e0156b66f7dfa58d87f6f562ae101f5e81e2
- SHA512 0b189fbc919efc3e7d3d1fe5266d6fee382bc1df637144ed5618fe97753c2347c75e2ced1ccff50f0af689c7f3dedd716daf4a4456980b83ef55a2a48828ab29
- SSDEEP 96:MVI82iJosA67yEKIQLfI8wmj3MWgs5/S+:MVIqJoeGjIufNwmLgsBS+
- TLSH T1A1A4D876B74C6D3DE0D4B97BE84FD23EBA4F8E46E011210644C54D6FBB0A254F68AB90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_115.cur
- Size 478KB
- SHA256 30d85b5a19b1d77827e73c1d33d1b2e78d43dcdf6766c431e4dec9d3fa552e51
- MD5 6235a5c141809046a92ed8a162364ae7
- SHA1 911c5e4e736140035520dca02ba770c96d8a5a9a
- SHA512 fef957f759b515d7eb3a7747f70fa84d59be908cffd494efb77ea9a3eda0f9a8519b80c5bca680374281903fa6837f2edf0ea34bd82b52e172018162c18da3b6
- SSDEEP 96:MEjopjV45IJYZop45IJYZop4967KLabqrEvmfWPG/2vmflENU:Mnpj
- TLSH T1F4A49137770CBBDCD58091B6E4EEC93E16DB8CAAD12215694BE90D0F3B89227F681750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_180.cur
- Size 478KB
- SHA256 acfed93aaf6817bbbc0f9f72d3c5ca8991653aa789d966be0e2508875b42118d
- MD5 c37e822cecdda74304288c38ed098a73
- SHA1 f1a4e2ada576cbb27c8d08a289892a7d6ab8dadc
- SHA512 16b22a8de3e32ca4c0d69bcd697a5098836aa75e29eafafb96a001314daaa67a21dad38b3dd6dd82d587764bf67c6a4ad12b501f9d9dc34554c203f2d954b994
- SSDEEP 96:MauTu13nXH3nXH3nXH3nXn3HpwnnnnnnXHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHX:MzK13nXH3nXH3nXH3nXn3Hp
- TLSH T168A40D37238C3ACDC4684272903DC67F0AEF5CBCE22751612AE18E9F754650AF949B36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_size_90.cur
- Size 478KB
- SHA256 6a1344ac7214579094293618da84d29e5ec1e159fd72e1ea504bf7d88cab1d09
- MD5 3b79a96b77a14969d2cba464a918cdee
- SHA1 856c72c4fd899fd277a51dbf9afd13465a6cbb80
- SHA512 856144f41679173fd794721a813c332f166cf9bacce3d4e3914c5b3a655465f6b0b74cc6635cde5a95a367d7c9c74a7fadbea69651b15f70b038c08c46365a7e
- SSDEEP 96:MH4+G+G+G+G+G+WOWOWO7+ueO+eO+ueO+ueO+uGmAH:MxmAH
- TLSH T147A4A2372B4F65ACD36240B0D4BDCB7D95CB9C19E02129601ADFAD1F7A86527F980FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_up.cur
- Size 478KB
- SHA256 f47c69eb83cf375138b2db2841ece07e9e0736a9e772bbccd76e05299f88ac90
- MD5 808e12dc7bc6d1eb5504b9e04e370fd1
- SHA1 a17201e84867e5d37bfdc7c265b29f840dc768d3
- SHA512 5cb0aeabd13868a251d802a36979343797acbc7292feff99f2218d0f351222d98b52b089a23a5a1f8f68dcf1f3d400bb0ebd6de9ec5b15b9c10143bfc1cd36a4
- SSDEEP 24:Eljuel/Y/18g4gMHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHU:Mjull/yx+6
- TLSH T1CDA40A72690D5F1CE3A403B1958FE5BE62CB3E58E339502542CA0D9FB6D64B1F902B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Lime M\cursor_wait.cur
- Size 478KB
- SHA256 f7f30230803070d3e748a4714dcd951c990cb6bfacf1d2dabf4929f3b4b73a36
- MD5 da8e7e7c37a394d8a74e363533652b57
- SHA1 be67e5b8153da2b6c84ddb808667cdf6a9023997
- SHA512 92372dd5219939662fd020c0be652502d75079c24c29ad5abdec7193b986c7935ea7754a4b7ef81c8fe15b506c9165ec4e617785f3b27e2a647ba2c47e33361c
- SSDEEP 48:MYzEDWKbfv/Pfv/Pfv/Pfv/Pfv/Pfv/Pfv/fP/vfP/vfP/vfP/vfP/vfP/vfP/vT:MYz
- TLSH T1C8A4DE36774C253CE06592B5CC3ECA3EA9CABC5EED24711634DAAE9F3944024F18CB94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_arrow.cur
- Size 264KB
- SHA256 70989f04f6640cb22561c7ad7f1671e7568211e1bc3c92bd157ebd79eb1692ca
- MD5 9169ef82c34abe813a05ac929ca6cb36
- SHA1 a786ef1c6f362e6c77e6fd182b8b7e1c52dcd4e8
- SHA512 ce02b022e7bdd66cf07f3ebe743d5d4b41d07670d932f6a2b4447f547a514f47b5ebb49ba446b684e02a178ba9aeed72f972ca184e77dfba01c2de05cd7f388f
- SSDEEP 48:OZj2KznLsUqv34P/xfgPw/AvQfgPw/AvQ3AvQfg:OZj2KznL9
- TLSH T14B4491BBA384D689E69850B254A1CCF75C4FBD44330202B65FEB7D9F718417A00988BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_cross.cur
- Size 264KB
- SHA256 62a45d7a78c92bddf24c05d55ed72e41707e96999f56c61be3480154b2c0765b
- MD5 5ffa2ad7daf7e8ca9790366967835254
- SHA1 b6864bbf6beb4c701cd14b8f9ecf53b5b95a5f57
- SHA512 8039f40745cf5583c60f153e287b6c8410202247e5934b38f1576e04f9e557769621e7a8f9b7c6c21ac1874135e4711cd010023c5f0689bea3e75dc7acebc2e4
- SSDEEP 6:Gl//bgl9+DnnnnnnnY00000007/Y00000007/Y00000007/Y00000007/Y00000D:C/kE
- TLSH T1484402707300C019C0101A300042DFF50ED4BC21453D5643BCD33F237D021480819143
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_help.cur
- Size 264KB
- SHA256 bd0ccb7c69a80a29ecc0322cadca6cc6ffcda339f40c1c03a2f1f5a9d2550c6a
- MD5 f3271df3bd9789b688eafb70ecbc0530
- SHA1 9dee16e0dc1e83dd8b17994e49b26559a4d2ef96
- SHA512 9aa1825b8f68029264d81c1bb6f948775ac2db449b7a28090c83c6c274d3a43ddc8ee85b4b8f4d149f345604538b3d6740c1d574937a155f173681bfbc7953f1
- SSDEEP 384:EZ8TbpMS/6NQS3yL6xjizSDCTyjuzSDCTyjizSDSWXmH23Gr23GnWn:acVMS/UjizSDCTyjuzSDCTyjizSD
- TLSH T10444B137A394D888F85861B650A6CDF75D8BBEA5334741AE1EE7BC9B711D03801884BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_link.cur
- Size 264KB
- SHA256 8377813ce421462ce412baeb67ee2b6e6aba4846509c4357c092b0881b7ff80d
- MD5 3cfb44a3e8ce7f5162d6ba20f7d22627
- SHA1 d3c740112381e58fdd86198143955f60d79cfa44
- SHA512 ef6564f3acb9d81e62c0a0455bb480c9fff0a54480623d09fc1a53e53cc2b5b8c764a27a90b0fc2bdf161726d4ff020870908a76df7d6841198eb5e5a6be321b
- SSDEEP 48:F69synHvLvOBr1pb2/+W5nkmULpQHDZ/G+kWDGa3LD0mehFJrlZnBkzXf9AIScx:cfHzvSDbW4F4TLD0JlpkzlA
- TLSH T1E6440279B388D48AEC54553908F5ECF66CB1BDC90E4014B67CEBBFABB2AC06501546B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_move.cur
- Size 264KB
- SHA256 005b2c0ef17f96dfc91b6b8ca3c022585695f22aebfdf92f2427bd6ccbc15421
- MD5 3bcfa05256eb8126085d950df79102f1
- SHA1 a2e59e27e6bafefe8815edfad0924f5d204b424e
- SHA512 6e7f29ef5c7c5d6d4076ce6ceee78ae127ec2c7a4a8a3e150ba7d6234e20b972ff97324a61ab64679eea6617d7b00ffac7dc7805eba4138e1af79e74212c4e91
- SSDEEP 768:ZP/vfP/vfP/vfP/vfP/vfP/vfP/n3KGLPfv/Pfv/Pfv/Pfvv/vfP/vfDP/vfP/fT:
- TLSH T17E44273BEB05C09ECE7944B269F1CCF85CE2AE19A6C644951FDFFE0B74D10218299A47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_no.cur
- Size 264KB
- SHA256 22fc9d9654be128f5295078a4aec548c32230ad1c4236ae9641eb8ed1ac7f6f2
- MD5 ba3e53f0d3deb5c2497fa7908d8fec87
- SHA1 efd460f9317df10e57ec166fce8fc2e30c2a8908
- SHA512 0928221c3361c1a54b6825192b46861bb20bc56d2b81a4d18cd5f3ec233789424399d8066eadfb541dac8da598d9bb0d8e2c2edae580f3749796e5124700065d
- SSDEEP 96:jFze7N+RJQ2kA0kje3w6hVdw81zztHaG/x/fCiFbhOm/Ys:jFzeB+RG2kpqeA6hDb1F6G/x/6h0T
- TLSH T10144FF76D3E4EE04F8CD62B950BDCCF6AE491FA90222115D2CE7BE73B2AC05514984E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_pen.cur
- Size 264KB
- SHA256 e4d539fb348f12944d3aa6878221ab474a6c846a226a166205ea832b4f143af2
- MD5 5ce4072ed375e73addd9f3a7d9614f12
- SHA1 00d94d80334f8e44344f39feecb1c40a21106bd5
- SHA512 7f9ea65771343ab614e3f355a5b0ffe10085824b57f5390b7c14f44ac42ff612405d8b60a5d0043bde67d371d0e8c3521d2eb11a3885598f96811a1ed6bfba8a
- SSDEEP 384:zqbr7Lbr7Lbr7Lbr7LzUTKypa7vGqi2W2W2W2W2WbxCCCCCCCCCCCCCCCCCCCCC+:z8q
- TLSH T1514406B97790E91BCEC4A1BAB2E1CCF75C7A0F05224A4147ACDF7D433209454C69E963
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_115.cur
- Size 264KB
- SHA256 52e0226c1c84c5c342c335b619386fa884a1a48e0e8fda34ed5e60b81c7f6423
- MD5 52a0f4807ca64fb21de9ab1c2ea84393
- SHA1 f729f50e14237bc8e4e53a06e209f2715f47ce45
- SHA512 eaebf5e1b0cc4f347c3a01b4235dd6ba97dedbba479f2501cf6d4d11bd813538b244a156b147289e5429604318b800cdb7108d9d606d5bf579ef8179a494ba0d
- SSDEEP 384:+f+PO/evuf+PO/evu7V32HmXWnG322ve/O+:
- TLSH T12344647FB3C1D6C1C2A8B2B555A0CDF35D973D73010903EA8EE77D63710AA2899A6853
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_180.cur
- Size 264KB
- SHA256 a4fd5c1a452a84e18b3bb49e35c994b0402949ca42a77d0cdf8d46de82c18aab
- MD5 c8583bd5d821dcc645f5aed0113bb76f
- SHA1 8422d6e5942602eda1503c8c715409d013ca79bb
- SHA512 c9698fafa9ec3afe6f2a380f1c0a4e7b922bb856f5d1c7540d40c19a99603a52ffe7dd5f9d6c7106e3456f0ae23214ebbc5134d8c50988a223eef1632ee843de
- SSDEEP 48:zfP/vfP/vfP/vfP/vfP/vfP/vfP/vQgPQAfP/vfP/vfP/vfP/vfP/vfP/vfP/b:
- TLSH T1BB442DF9278AD2CAC25D43F29820CEFB8D4B7CA7001553816EC77F23321885918A66E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_size_90.cur
- Size 264KB
- SHA256 5c2318e20bc9506e20baa662e6feee842a7fb8a8c6a7b9120261a005bbd7a047
- MD5 7cccbefb7b9397ab4ebd3f7d75a7ad9f
- SHA1 631fbd93a5d1b9611ecf90a5f768a9138926baab
- SHA512 90ffa7273acc5d1b7d658a8b0a093e3623425e693a55eaad7d5be4297aa59a0584865ea8a33d85777b27ddebf1adad93ae87fa6d26f6b1992fafef3dc8ea4080
- SSDEEP 768:d/vfP/vfP/vfP/vfv/vfP/vfPP/vfP/fPfv/PPfv/Pfv/vfv/Pfv/Pfv/Pfv/P:
- TLSH T1EC44143AEB05C09DCF3948B265E0CCF85CE29F09A7C644A41FDFBE0B34910628299E43
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_up.cur
- Size 264KB
- SHA256 5ff9990140db6827909f0da71b48d09640fcd0f1254abcce6914849d8ba13128
- MD5 c1e462054d3a4ecb9a6020126414f9d8
- SHA1 17affd9e2cf86270092f7a510a590b8df1cca5f3
- SHA512 32254c35096021fd49a8983bc5fefe27b4757bcb50a198221985d23539b99d844da57e5ff98eb2925b98692dd49125dbc131986ec4c096edec4eb1320fb9896a
- SSDEEP 48:QOhigQUa633nXH3nXH3nXH3nXH3nXH3nXH3nXH:a
- TLSH T10A4415BB2B81E149F48482700842DDF20D8BFD61BB2A01B4AED73CDF36910BA1501A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Pink XL\cursor_wait.cur
- Size 264KB
- SHA256 fa726af7bd748a0b36a0fb6255e0f5c1db38a3fe323762d8f31fed5589e58d1f
- MD5 65055c4fa84d0ff4a5ba965951a81fc4
- SHA1 850861a8625f65ea036e214ab51b7b7e6f547cff
- SHA512 bff29abaa93920efa05bf593d14be1a716c09a5caf739b581290cfbd0312388309a22b1485d6733137d26f16398f2e8c7132d37ab8bca0ee9eb6b43f353f63f2
- SSDEEP 768:dGqrPfv/Pfv/Pfv/Pfv/Pfv/Pfv/PfvffP/vfP/vfP/vfP/vfP/vfP/vfP/b6W:
- TLSH T114440033BB58C12ECD6901B26461DDF90DE2BF02A296450B7CDBFF1378164349688A83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_ext_custom_1.cur
- Size 264KB
- SHA256 635c8aa249ca3799d6ee95263470454d2b0044abd860760c5b15a38716803b17
- MD5 87f8ceb1c18478a7b67ac733dc9a985c
- SHA1 4fa93a88d02de934fe14c97a875cf065f5f9a25d
- SHA512 f2765ba9c213c783c26879c6ad780659feb131d17e00c800e02bae2e0aea6ed23c4cd99d1aa609bbc60baf9afe567c5d9fe1cb4d93c266e70d949508e4cc1935
- SSDEEP 192:4KONFrGjTn4dHxLRTkr33a6s//kcvj2wej:4bNcQ9xRGlmkcqwE
- TLSH T1CB44F3A24144865CC868A036C0F7CBBB6C887E49511104B766FCBC177BCE16B1E7ECAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 - Purple XL\cursor_ext_custom_2.cur
- Size 264KB
- SHA256 ed9ff8b593a906d3abc3d641cf574e10dd2acb6ed4197dc82df970e39be95c79
- MD5 0d85a5451d472686bbb8a0d886d75a8f
- SHA1 b27f1cc88c1b507fb296733e48fbbd694a655135
- SHA512 4941d8c2581a57c45eff4529ff6d790e7ef0be20b75fa718ea4a5dc729fd916da15e50522e0e5d71deaa0dc3c886634d0a2524a7f9608d4ff7e7553cfaf81955
- SSDEEP 96:P/Ff3qvFb2fKGlHtd5y9wJ56qScXgpAenDyIrbjkpI86Fc5UW3+sUAJeT:Ff3VyyHEqJIfpJTPi+63VUA0
- TLSH T1AA4400B17084051DCC64E03AC077DBBB6C682E88851624ABBAF07C27B69E36F5154F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\2.1.30\bin\data\mouse\cursor\themes\Windows 10 N\cursor_help.cur
- Size 133KB
- SHA256 19cc751b33c3952abd4bd9c318ece4a88e2eef400db6c606940fd615215ac42e
- MD5 a0866dce22dc8fddc3a25247f2a410ad
- SHA1 4700c2e29a25b6ff126e8b0491a28f333da49a23
- SHA512 14cfa01611525f759543e9a102687604a619e32f6a9dfb1afe8f21f319f786e19ddd521e5d97d398062e5cbae963e131388ec64bf42646994409a312a642b931
- SSDEEP 384:66JUirkfmOz4itnPQxf8eRBuoXfJqHOXyOCYvP5j+EO:6jirw40Khcohj+EO
- TLSH T19FD31E63B511D04ACD64A5B4DE9EF4FC27207C60DD91426B79C0FFAF7AB32299C10698
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\8CEA964\store\update\mousemux-v2-client-packages.json
- Size 1KB
- SHA256 0251e98f2db93fdf02bf8889310764731d0086b00b88f1f89b8571cb91eb4676
- MD5 cf2864c6ba474ecb8070b36fb2828285
- SHA1 99c8f73a714d14b0d5734d4beb9443535b428008
- SHA512 be8876acf6a174e41282e4948bae8d05ec4109301888ff7612806960608944093ecbb115a570f49378f19ff61a13a261cbd88a0d82db2f567e065f4214008856
- TLSH T1D631D162D169AC038437C798A8B9418FF1B2235F1285499732BCA40E4FF0E0BA10BB0F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\The MouseMux Company\MouseMux V2 2.1.30\install\decoder.dll
- Size 127KB
- SHA256 4c8407743b0cda8bf5adcf6285c5f91c37f9a96b5d2bc20fa392f03aaec2f07b
- MD5 67d679eedd9779063db7c5efe08f2243
- SHA1 c57e96e427d8c60f67ef15fe51d953d6f19b86ab
- SHA512 2dbf85c49bf47612a70d5414ced222c37e7aac0282d81ec98259959fcb0b56cd334568485f3802e530b3a1be581159364901ba6e818e19ae6fb4b986eafdce79
- SSDEEP 3072:JJzYRnR1UrYpMxbkpG2/wI/Bf6zWcvEm+PGcIo:TYPqrKM5kA2j3v
- TLSH T18AD3AE213280C032F15B143E8547E7B59BBF7AA1C9A0998B7FA40A655F31392DF3D35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0d9b6a-logging.txt
- Size 1KB
- SHA256 85fbc93c184697e746c02880da8c5929f29f94a310cce40128eb1fa8a591e4d1
- MD5 c0e1bafa195c72039c05af8e383965e8
- SHA1 4d4bc66987610e92ca1478c93f90f0cb1a059171
- SHA512 3af587cb3b561f8a85834e07baed72594b0cb876a6d075ad3b6c11c92fa3345c1fe75f9e90b3ec3e9917736befb19909dd4c88ec58395d2fdb7b30f0d7eca35f
- TLSH T154214500C97D86DB3210D40987505BCA29907B0ED85162B238EF7F1ABB9E110639E3F9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.32-2-1-30-32bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0d9b6a-logging.txt
- Size 436B
- SHA256 a489acc3409f2f6a21c1e00ed2e52a31374dc4100d25a872b8fa7fbefb6e4e18
- MD5 d0788b2a911e7845200c21641da279e3
- SHA1 489b9364e9e6d39c7d80c32e74e89db485c1e84c
- SHA512 34927da7c68bdecaf7f5b0d10697752a09374f406a6c6d0025af516e500551de80d1f17a9057bb5602ade04ef748ba96bfc10539b9e5ff5ec915a215a8d8c00b
- TLSH T105E0C902D879AA832314D618C9124BA52D8CB64F4825707338FFA7D9774C1A0936E3B2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0e1216-logging.txt
- Size 1KB
- SHA256 d887dcae7886f03692677bfd9a69f8c7aff5e3f44a862870422dcad25d4ad486
- MD5 6165903ce3b590579700d7ad4020da19
- SHA1 e14ddc59f7ff368e8c4dbb0c7385abfb3c795a71
- SHA512 0e609c00dc0f7f0413927e13091dee497849f4abce470fd3bf3ab497ac3df7e16e20da0fa36f36c8345b9e3ed75e26a47de5b1a06c594c8d0b4ca85c9ff3ec99
- TLSH T10421F601CFB5C6E72627D84989540FFA2401FF0E9A0394B179BE4B06BB471646BAE3F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0e1216-logging.txt
- Size 2KB
- SHA256 83e900e3cfb572e4910f7586f1ca32b5eeb32971c4a8ab1261518d8371025f63
- MD5 2af0f4e80567e578b2e017dd3674b07e
- SHA1 ac25e8b5e5c7f6e97902f31319612c6c28f78f43
- SHA512 62c5cba150be1c23f920ac97b772221798bd33a9342d3a786f4bbbd7d3c4fd6b16b7448b461a8a5647a74b2a9f7c89b3694554d3daf7e9d68994b522d5791dd8
- TLSH T1CD41F601CFB5C6D35626D945CD502FFA2801FB0E9A83E4B179BE870AB74A1505BAE3B1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-daemon.64-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0e1216-logging.txt
- Size 3KB
- SHA256 7eb02be4224d862283d3cf442c0146415c8a4100e3d580c8e0163988cadfaca2
- MD5 ff0d0d8aad10f2b1a391fc647348cf7d
- SHA1 d55d71ef92c4cdc8a22c38e886b47c29e8287012
- SHA512 510af9b441ac8df292877cadd2fa15095a11140f9085180752403cebcc4d5a78471793e747892736d00021d676a515bdcfa4466018fbe4ffa398f1a04e58afe1
- TLSH T1A2718101CFBAC5C39615D645C9903FFB2801BF4E5A82A4B175BA8B0AB7064505BEE3B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-51-01-f85a0ee9b6f41a18-0d07c62b-logging.txt
- Size 1KB
- SHA256 f1e3d5d3f7975e062057685de7118d07c65b8f75f3037ed96f4396584ee3e298
- MD5 e256afaacbe50f046fcdf7480743d0bb
- SHA1 16219771482fc7a0c0369b481452cb8d719a8742
- SHA512 2c313a89efd7a1d59f72c1733c495ef11c4f195151fd93b57c6ea54498bc8f4bd6057b800133bc3ecb6b505b28051886586249d2c023a8369772a792847d018c
- TLSH T12F21FD0488FEC5D7620AE987DD841B9934013A0EAC57C1F37CFD9608FB4B929569A3F9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-51-01-f85a0ee9b6f41a18-0d07c62b-logging.txt
- Size 2KB
- SHA256 031a9b1d82b36253eed067ba056d8730b861c7dc825c697e953342b079c19afd
- MD5 20572ee93aed30ff189dc696e8cda4ef
- SHA1 3c390a2319c41341a0aaceb8feb63056bdf50e6d
- SHA512 96f51c18e4ba70832c50bec9a34edb9347900ee3c3b28ddb160433c055985044f8d9ad3344359a029de6285beb7323a2f2f348b3f4a2f35599ecb86be5c249cb
- TLSH T18A515E05847FC0D7A20BE98AE9841B953902360F5852C2F33CBD5B08F78A91966DA3B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-51-07-2cc319a5b6f41a18-0d0d4221-logging.txt
- Size 2KB
- SHA256 2a2bde8a501ce4c484790431cb665a9da12a668bebc502f4dafa4479d1565e85
- MD5 9544fbc98a05124893c9281560d91f61
- SHA1 6d59feff46c539656aac7c0e2ce68038694c31c3
- SHA512 1531518deabe733a71b5bea67953fcfcc4e7359efabd31f65e755e6b04be8b61a417d8a24714d6d2588bf715025042ddd9265a49e778f84dc2a113faac624491
- TLSH T191412841C8BDC2936308F4AEC5089B85AE63361EA841D0F336BE9745F789626536CBF1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-51-08-f85a0ee9b6f41a18-0d0da202-logging.txt
- Size 1KB
- SHA256 6dda8d3ee3c5133580e396b58878fba3f8b901b8329fa3dbd671bbcdc335e46f
- MD5 e0fd4bdacffd3fbb02528895ad1d7271
- SHA1 88e8b1fe760a845d4a0a740f4599384cda4f3c23
- SHA512 d457aeb0ff1a852aff27357fafb8784f5c6090abda8e8f5d5a9ddb3cae041da54f33ce2df51c2025b531428da6992a64b96266bae4070a03e957a26b05531062
- TLSH T13521DA05C879CCD73202E4CDDA411B9628417A0F9C8158B2B8BD0B2C7B4A126965BFFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-51-08-f85a0ee9b6f41a18-0d0da202-logging.txt
- Size 2KB
- SHA256 b14a56ee070ed5f5cee8583a5d8370e3bbde56d489cd78a702d339e8135e7b64
- MD5 d9c124a9a0feb192ab597982d1a2495f
- SHA1 ef640d3081c20096dc59c173fd725ec457b7b985
- SHA512 c853b8108dfce208c69640845737a41aee354ac664fc04bcb8e25c5330f529797f785c9ee05858698cf801a8493614c1b5c0b50f0486ad2791c749f9277016c8
- TLSH T116519D09C879CCA77601D5CED6011B9B2981760F89C068B2B4FD0F2D778A1265A6B7BF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0e644e-logging.txt
- Size 1KB
- SHA256 9f7dd8120aac62aa6dd0075874d08cc1a1350d1903bee4ff2ad9bd1c524a7642
- MD5 8b90b01e6d6bf0ff561345db01ef8e6c
- SHA1 028f4bf3b1ea351bf5a5835c4b4a7696164337a8
- SHA512 6a1e5098f4013d53969e7d6c68495f83db0da48dc365768096a2b1c3a0eef8accf2011f90c8d802299b6c9a6525b42a375383451c8bb5f5976c1f5f72df6ab0a
- TLSH T19C11D104DDBA84E33313D8CA8BC40B992C80FE0F991258B57ABD8F0A7B451B093583B5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-main-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0e644e-logging.txt
- Size 1KB
- SHA256 9e02d253226c377ccae64e526077b9088026652a688b86358d04ade86b14e4f6
- MD5 d62fa5a0e8cffd53143bd365942660ca
- SHA1 9237464d0f012a969179c2048380161068c17f20
- SHA512 7178478d40724f6c56aafcf782c4972dffcd9138308dad9390f20f514782a812510af713a971d1a8594f942e84aa3e342d2716784bb254134245cfe1ed2ea181
- TLSH T1DE417D04DEBE85E36313D9CA8BD40B992C41FF0F9911A4B139BD4F597B461B093543B5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-service-2-1-30-64bit-22-09-2026-22-51-01-f85a0ee9b6f41a18-0d08be7f-logging.txt
- Size 1KB
- SHA256 1a0503e9102691ae11eb3ea8da437aff9d77f868fc87922ced44c4c35b73a70a
- MD5 0f12ad0b7b723ad9d0c2f71bb9ae01d7
- SHA1 e2367c0f161c0ad59cef18761d919799c3efa467
- SHA512 78bdda46369641bcf556d0b40fedaa9dfe0e9219298165b1a6e703ef8068e66009d4bc351c3bcf834a6c468b485c1ddeadabed87d29538349d89c73e63d4cd82
- TLSH T1DD212500ECB78AD7B302D58ACB411FDB28113A5E990B40B17D7C2A4CBB8961C23497FD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-service-2-1-30-64bit-22-09-2026-22-51-01-f85a0ee9b6f41a18-0d08be7f-logging.txt
- Size 1KB
- SHA256 de026452cf497ae7b526ebc43869961f2d8734f83e912d7137fc666ecaeff8aa
- MD5 8ad5a9bb5d34bc4b210b64eb3bebc55c
- SHA1 416dad3c899b4ea14f28205479c34a24c171006f
- SHA512 1f7d8f2cbf0f6bb774672d822eab1a7d91b37b4c70fae3eb4f1a4fb87ef75f1ac994dfd3af59d6f839f4bc0facf7715ec44b56784263c52f5c3e8b687ce1a51a
- TLSH T16731A351F8778AC7A302D989CA411BDB29513B5E980A40B17C7D164CBB8962C63897BA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-service-2-1-30-64bit-22-09-2026-22-51-07-2cc319a5b6f41a18-0d0da099-logging.txt
- Size 2KB
- SHA256 d302af6fc5d647c001b31c3660a47cd1e5ff8cf98cceaa5c88f1dc94463a5666
- MD5 d799e4b77c6ad9f86d2c7a1e1fff3f17
- SHA1 c36ac5fb843e515c457c53e00432f166d544d547
- SHA512 6d63ecea675b062fb7cd73316e9cbc58f85357dd1378522f965092446fceccd71d7a34f2935a8278d1dda1a6b3c77ad6c9b0856fe1864a64af4bedc4e2daec8a
- TLSH T1ED415A43D8BA84EB9B44E459C8191BCB2C16770ECD02A0B579FF8B447B46825126EFBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-updater-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0da834-logging.txt
- Size 1KB
- SHA256 e5be5ed5edd4fd00af37892f6c9c76300d9ac4ed7580aab877f7c50f7c5c2d59
- MD5 0aceefb7d430efe556de6d67e9f84ecb
- SHA1 53b2a3f55ef76bfb10803307a548973101aa0c0a
- SHA512 9c26aa80a5e086cdaf12a4e2b7127e5052957b129bebe7937b4baf63c4b22efbbff91ec4d1fa5d59c4f6f2e3252aeca4908e1fd545a85546d13a4d52ac514c2b
- TLSH T1AC216300DA76D4DB2320D98A95408B9E6810BF0FF98791B678FE47857F8912613DE3F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-updater-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0da834-logging.txt
- Size 918B
- SHA256 a2a076a9e8345e96e382cce606fdd2ecfff541db2fe92ab40d0ed7ad9d0ca154
- MD5 afec498afa9c200ace6cb052855ef121
- SHA1 8c127c0f1576b3108d1109e9739a3376f080b636
- SHA512 ff1e06541bf3c956926554685b59f092680aad75c765d4e28f2e19f7567f531e39231404c304e1731d3837d6460077d5226241933258650da3c7deab00be2549
- TLSH T12411A303DB75A8C75720DAD9D851879E6824FA4ED907E0B338BA87843B1509193BE3B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-uploader-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0d861b-logging.txt
- Size 1KB
- SHA256 840bcd5b189f2234980b55f5b8d2080afa8368ac7bde728e9561869acea97ad2
- MD5 b2861f38257e9383b1c33ed6a9e91674
- SHA1 ed26e4758151321b8d615df03aa60b489a5ad911
- SHA512 c30c044d0d374ec4d4b9ab36451ad210eecdbb09527db49f162f57bada011820f096bb82b345162146fbabbaad9e1da80849c19b194345edd2816a6f5e65e990
- TLSH T13D21C821C9BDC4CB3200D64D87500B9A6A917B0F99419672797F0B28BF8911163673FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\MouseMux V2\User\Logs\mousemux-v2-uploader-2-1-30-64bit-22-09-2026-22-51-08-2cc319a5b6f41a18-0d0d861b-logging.txt
- Size 1KB
- SHA256 bca9fc7a067cc2bee0da7c0e1d5f5c1e00ca394aec3522737a8290e5d87eca6b
- MD5 5227c299287804f71eaa742a0bb10ded
- SHA1 642bfac690856f559aa14fa9d04959d9a72b093d
- SHA512 04073fd6af98728a42cfbe5d38b0fa03b2a00d9b3e0d955e55e973f9c6dbdcd454eacbcbaf0afcf335fb68fa982aebfaf844abeee9110ee8e2395d950ac2ec94
- TLSH T1E341B612C9BDC4C73200DA8D86104B9A2A913B0F9901E6B2797F0F187F8952162773FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\MSI477B.tmp
- Size 358KB
- SHA256 2bdb966f293d41febd40249228467cdd4e058055347e1b62f5ab3fb8021d355e
- MD5 6092611c734068ca80a202ce00fcb0d8
- SHA1 ccaf4651247291ac79fff6c1a68c6b0529fe2d40
- SHA512 057f7593bb989946d2876a3a779d37bd51068f226f59ea25d9857410ad77e2357f4b9175140d139109112c054c1b53c51c299030810b519a249e901c310c6626
- SSDEEP 6144:X62fDE/NYPKfIW3sekvcOopV4wLPCnDRFbQ:KMpP+V2+VDoDRdQ
- TLSH T1B5743904E14789A3D92381709893D77B9E3D2F1D6220987FE7E8766BEF32D429E17148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSI4E73.tmp
- Size 297KB
- SHA256 a8e60cec78db1fed07cb41ac52809b194cfaef00ba33f85286d1aeeeb19db1ed
- MD5 d8d0f609fae9ad424dd3e8f51f35dd41
- SHA1 61d039248b588c0198b4a3ac86cc8d3ae42f3e9b
- SHA512 1e0ae02f0f9301b8a8cd21ef916b42518f330014bad16367d0f3794710fb441d0a8a3349b7bc1fc73529a6f7a4b47b3b4846b152792a7dd1bea385bd79034b89
- SSDEEP 6144:UOxwjn+GDjTNlemnzJrxAhcOlipeRswB+e:UOxwjndjTNAuzJrxERjRLV
- TLSH T1A8547C2376E5C032D5AF0674AA25876886FCF57179A1C007F3E4861E5EB3AC3DA25B07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-40-f85a0ee9b6f41a18-0cf7039e
- Size 1KB
- SHA256 71192b29a0bb34dfc51088ca7fb4200cc247ef3de6fa0c256f0822cc9194207c
- MD5 d947a6db0321f9a7577ffe32800aef35
- SHA1 1c4e664d7a8583c2b21968c6d17819cbe74d22f4
- SHA512 1ffd5331024806e60b1b309a6ac557f05998070dfcc04bbfb4e0c4fcac3878b954db450b04d086883cd61b2a608b7fa2d9c8fd259353f69c450606093fda7d65
- TLSH T112212901A9BE8AD32320DC1448603BDE75067F8C583B01B938DF7245BB4125A9B6D3EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-40-f85a0ee9b6f41a18-0cf7039e
- Size 2KB
- SHA256 28878295d0c0bbbb964e2c271469f51ea15a683a7cba4dd284716cb8f8d8cfca
- MD5 15aca902527171e71407e73ac1b29830
- SHA1 4d48848016911ec62cbcff372f3c986597c4ad6e
- SHA512 92010ea8398f8461b20f79f3162d5b38a9a9bf610b158caeee232307cee34100affb48c1903b525f2a6c23893b3d229070445981d264a186e34dd80fd1334829
- TLSH T138516B05A9BEC9D30324DC2898AC3BD925037B8D487900B578EFB655F7052658B7F3EA
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Installer\mousemux-v2-loader-2-1-30-32bit-22-09-2026-22-50-40-f85a0ee9b6f41a18-0cf7039e
- Size 4KB
- SHA256 373ad532de61ca2320c081757d1fd0ab257075d70081b3f25be40c5d3aa07110
- MD5 e239d8b7ef0cb477fcad8de3acab41e4
- SHA1 6f94ce9635d736514a759ce3e8ef8d26e7438b17
- SHA512 56977443761b37d890db14fcecac79e1f7ec2d377ea913e69276ec79ca3ae11f3ea1bd8264428979469973350b62fa2dc9aeca46b2918966586b38b19fb809fc
- SSDEEP 96:oIpYzHDzsTNlCVeswmbk1vs8vSkn0sq+CcYsxV6zmoseWS:mHDzmNEVezmbk1vdakn0Z+CcYOV6KoJB
- TLSH T12FA19B09AAAEC9D34328DC69E8AC37D92503374D047400B574AEFB55F7092528F7F3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
- Size 26.1MB
- SHA256 85400fdbe973201e7949c71ba6ff90c7f5cec0a1fd2d32def5d281282773f62e
- MD5 9dab059757188543c4b97a9cde540a81
- SHA1 869e5336f962070c1afcdf6bd6ac0daa2ceff504
- SHA512 8ee604d6588d22170a7724ceb997aaf3429a2b4db178d8d84bb14776c4fc2bfb763f9f79fcaaa9e19ca65df119766d5cead02d36648d40c474d9e01259046d32
- SSDEEP 24576:EFo3DMPWdoO/vvTL/igWWyFgPbuMdLxlULwEd7I+gDY65hX2cYBmWPMXyu4:/HA
- TLSH T18057901436F92150E7F79E3CA8F0AA2349397D5B9C1ADE8D05411F4E0861FB1E872F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\Volume{f0fdc120-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{20e74eff-d4d8-4637-89a2-06fea0cb6418}_OnDiskSnapshotProp
- Size 6KB
- SHA256 70322954b56d6587a7a0e73e75ccab26575389634be096ec3aa8c512a88ea089
- MD5 284c183dc86b7b1347f8d08b7ee59fb5
- SHA1 4858d7ac47165912cf8caf97229300914ad9a365
- SHA512 3dac286c544bbed4a21b48645d5a6d0de8df0b13afc5bed9d845a6d3dd236bda512ad03b770eb34d9f13437954fa906ebe44451517d6b5a9055ea3add1f62dbe
- SSDEEP 96:FEa1+Uvc6DD84LTHzbOHXOHBlBRQn8Sc9XE56tOSVQpu:OYb++uVm
- TLSH T1C5D18A0C5AF54711E2B3AB3128F18557A877B911EF33CB8E0194238E2670910F976F6B
- MD5 SHA1 SHA512 SSDEEP TLSH