Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    476s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 13:35

General

  • Target
    ValkAI.exe
  • Size 123.6MB
  • Sample260925-qvxt3stsdv
  • SHA256 c2ac62eb8ed00aaffd47dbf592ea54b4fb258d7bb418b25e2d5c3107e65d76b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ValkAI.exe
    "C:\Users\Admin\AppData\Local\Temp\ValkAI.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1664

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        556xi.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\680\icons\weapons\556xi.bmp
        • Size 161KB
        • SHA256 e59351f329f6174c78557f6b6bec18a281a5aa5d478055cab08014dfed678d59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectML.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\DirectML.dll
        • Size 13.4MB
        • SHA256 5ab77cc5db8e1544d386fd28586598317da8dcbef098fb86d8d8a60e739e0e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DirectWriteForwarder.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\DirectWriteForwarder.dll
        • Size 248KB
        • SHA256 f9ee23aa49b1243baa13d30489d4ca953f5be9334ef41193f52440b53f17c08c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.CSharp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\Microsoft.CSharp.dll
        • Size 392KB
        • SHA256 b2a884fcde6194566bfd1ec90e659811fde3f75ee03229e2481cdd08cff3c569
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Win32.Registry.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\Microsoft.Win32.Registry.dll
        • Size 56KB
        • SHA256 234d4dbc42770131745490d410f542008e61a464771c22edd5a4b340e4f5d93a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Newtonsoft.Json.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\Newtonsoft.Json.dll
        • Size 700KB
        • SHA256 7ab9e727f89764c121751bbfbb2820d9e34f31838eebdad2d46a9f556f0e5e22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationCore.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\PresentationCore.dll
        • Size 3.3MB
        • SHA256 78d5a22deebbf626a3c8bc4a182c3abc17456a767c47026919971f517a102c0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework-SystemXml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\PresentationFramework-SystemXml.dll
        • Size 20KB
        • SHA256 91b2b58749ea415cb8fe38a4bfedd0c7c570864f647f95056c53b2e6e15bdfd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.Aero2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\PresentationFramework.Aero2.dll
        • Size 252KB
        • SHA256 97fa1d61054ed889a4e6e29eeba44d2c46f3b79880da4ba3ad12b94d9fee07e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationFramework.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\PresentationFramework.dll
        • Size 5.7MB
        • SHA256 150a1b8bd2610953b4fda645b2c90bbed8a16c5b13dee57671d1c0c47df6e499
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 75fc0d383ea009ea9453a4589fa8d88d149abcac371bb5eb983d6ece8f1243eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Collections.Concurrent.dll
        • Size 88KB
        • SHA256 54b6561d958b189503e7bccec256ac8b0f7bb5e727bd01b53a6571c2bb783612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.NonGeneric.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Collections.NonGeneric.dll
        • Size 48KB
        • SHA256 a62bc51f108eaefd95386d31f722fbb0ea7821af09a5f8195fff981701ca9138
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Specialized.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Collections.Specialized.dll
        • Size 48KB
        • SHA256 bc2a54257bc480241e5cd619564bc35dae96ac0bed892b4c162eb949352ab0c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Collections.dll
        • Size 104KB
        • SHA256 123e90fc3467338559b49e92b4230e7e8f2c2a9bb760534255dbeb3fbdc6db58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.ComponentModel.Primitives.dll
        • Size 44KB
        • SHA256 cd18e9a49d5299875a89cd385ee80b9788b0092a152478fd74e0f641eb072f17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.ComponentModel.TypeConverter.dll
        • Size 300KB
        • SHA256 97b4fe808f7939c2af6a109c3cf8ecef04e2eca1a02306d68879fd68bce94b99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.ComponentModel.dll
        • Size 20KB
        • SHA256 7134bd359c45f59c87016aa52e75d58546f9043f3cab8d3326ff2fad91937597
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Configuration.ConfigurationManager.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Configuration.ConfigurationManager.dll
        • Size 436KB
        • SHA256 bc9babbe9a0cac931f21f037628e09d63cec83c4d2c05f83c0eead96358c643b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Console.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Console.dll
        • Size 84KB
        • SHA256 a46a394855d72fd07aa3bbbefe291d81aba60fd6403132c191ed4c1570a1bb1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Debug.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Diagnostics.Debug.dll
        • Size 16KB
        • SHA256 1cf8d56146c15d77dadc6396e944adbb226af8e797f54b9d02fa74cf3b92184a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.DiagnosticSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Diagnostics.DiagnosticSource.dll
        • Size 164KB
        • SHA256 4ca3fb6b99f45a8d7d44507281d005626380351e15d236ff563521e2e51a7aea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Process.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Diagnostics.Process.dll
        • Size 144KB
        • SHA256 d05f875e2b3affe5d7c15762af2da67ba61ebc20129438df30498c4f9ba8c32b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.TraceSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Diagnostics.TraceSource.dll
        • Size 60KB
        • SHA256 1c1456b226b7e22eeee31a0e4576d9dbb8f44c5148403e76bb18fb7b57c096c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.Tracing.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Diagnostics.Tracing.dll
        • Size 20KB
        • SHA256 98bdc652beee2ef5def8911dc11f1bcaff17b0eea654fb145d65f0f4dae5d979
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Packaging.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.IO.Packaging.dll
        • Size 140KB
        • SHA256 f3ca902724f9e8c3e41ad21f7ad8bd73f3e52c8043e4289162f4035c74025c38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.Expressions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Linq.Expressions.dll
        • Size 572KB
        • SHA256 9a0c6c45813e8d625d302ae6bded638f44166a1fb49bc6a90e98e2cea19c4b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Linq.dll
        • Size 164KB
        • SHA256 cee4781118f1291d9934c88e0e5b70000a1bb15f459630a3c6a6037f764d0d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Memory.dll
        • Size 56KB
        • SHA256 acecb54a664682bb4a43eafcde389e1436b2f64ecbd2f9097f7a212c3560916d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Http.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.Http.dll
        • Size 644KB
        • SHA256 366511c26206ecaca2271cb9f9b84e185e4414a2f7eef531b20925254cda81c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.Primitives.dll
        • Size 100KB
        • SHA256 2c9e00ede2a3f25f61ba6ba0eb0d96c8574452e4488fba9ebb6b30513ef1fb88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Requests.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.Requests.dll
        • Size 148KB
        • SHA256 8e6c91928d984a69128fc092110413fb73f952d9586ca1546bb2d7bf3068a681
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Security.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.Security.dll
        • Size 260KB
        • SHA256 f27ac63c9f8fa19fec1dc0225c915a3ad9291e309eea6eb9f42fcaeb04bb767b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.ServicePoint.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.ServicePoint.dll
        • Size 28KB
        • SHA256 bf8b8e4f51a796dffe871745452f199e06e538ae8a589b23cbbd68b381f0411a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebClient.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.WebClient.dll
        • Size 72KB
        • SHA256 7b55f2c23d4b6eafb86dad092c948496acb3ad8fe847e03fde2e126dd419fa63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebHeaderCollection.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Net.WebHeaderCollection.dll
        • Size 36KB
        • SHA256 6f6031fc4f52bf93ade6f36971675d0efa0495de16e4be724ebed35137fb5aca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ObjectModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.ObjectModel.dll
        • Size 40KB
        • SHA256 3c0d562d4e983614c5745db23306f4ec7ef5fe916d5bed9899c7525c1164ac2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Private.CoreLib.dll
        • Size 4.5MB
        • SHA256 17893c96a0b6750aa585631cca8c30d43aace57c64fe06e53905edc2cb20f520
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Private.Uri.dll
        • Size 104KB
        • SHA256 31f9d82c21c402361b50fed0f2c804e3a8960a25ff489069add6cb3db1ad03e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Private.Xml.dll
        • Size 3.0MB
        • SHA256 13d7499a341754b8e66b78ccd88365a1ea34e5921e9b0d4e152bebb0a36e794d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reflection.Emit.ILGeneration.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Reflection.Emit.ILGeneration.dll
        • Size 16KB
        • SHA256 2231174be2b3e754b9912c81a742911cf9e1830f2052b573a1e96ee6bf2b80e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reflection.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Reflection.Primitives.dll
        • Size 20KB
        • SHA256 a462312af2e138eb91b17e6ce01197430ecf06605c13af74046e8791afa84daa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.CompilerServices.VisualC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.CompilerServices.VisualC.dll
        • Size 20KB
        • SHA256 0bd3ac6725e08e7320da97695af55474759e693bb46a060ad8a5adba12623b30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.Extensions.dll
        • Size 20KB
        • SHA256 498a4cd6a65735d818fff0e2526e58c32b883f641946e45a4f91b06598e1ea55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.InteropServices.dll
        • Size 60KB
        • SHA256 242235290a5916b1c6717af475b1e51228972753e3155b5d6de2f0aa16666e57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Loader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.Loader.dll
        • Size 16KB
        • SHA256 42584c68b98afcce2ae524ab2c6bcf72d41a4753d395d7547609bce0a053dc45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Numerics.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.Numerics.dll
        • Size 128KB
        • SHA256 6b0649ab923e56a8621d402ccf20fb1a9ec0019677720abab725892c7d7cc83b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Serialization.Formatters.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.Serialization.Formatters.dll
        • Size 136KB
        • SHA256 162d16098277c02d011c2c81f7cb19cb588d9cf3abe2af21f7f52a868d757ada
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Serialization.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.Serialization.Primitives.dll
        • Size 24KB
        • SHA256 bcc610b325681abcd46d6fbe49e06f060203cbbf5aa8d6c5293ae420097d3153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Runtime.dll
        • Size 44KB
        • SHA256 6717c69e167fd98dcfd78bf08f6b248ceda884701ce20335ce2ede818eab936d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Cryptography.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Security.Cryptography.dll
        • Size 748KB
        • SHA256 ea394260dd9765451be581c3b39d3be4852f4757fc8d86d12154cf42186557fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.Thread.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Threading.Thread.dll
        • Size 16KB
        • SHA256 11611720a10f2dcb465261ae529816cbee254c1c9d309e0363bcc588df8abd8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Threading.dll
        • Size 44KB
        • SHA256 e6a86eab9e6046dbd7f89731602bfd0073ec4f4cc19c3f610396cef4375f797c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Controls.Ribbon.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Windows.Controls.Ribbon.dll
        • Size 736KB
        • SHA256 866af1146d4fa02cb624e2506b3c5c6c339019cec4e48096c9fb47212887a961
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Windows.Extensions.dll
        • Size 72KB
        • SHA256 ec09986994ddbe309ed969fcd693483b0cc06edef42b75613503a780c6b7e7c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Xaml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Xaml.dll
        • Size 564KB
        • SHA256 ee7e8c189572b3a933523362d8db75ebd4315a81b3816d94ab29c9307f9bc7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Xml.ReaderWriter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\System.Xml.ReaderWriter.dll
        • Size 24KB
        • SHA256 fd02354dc164355c839b752ddd299b35a1b12d98084fa7d404f6212aa27a4a10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UIAutomationProvider.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\UIAutomationProvider.dll
        • Size 44KB
        • SHA256 e7e89eb499e75a2f01f9271020848076f8c529459e6142d567d45e221210030e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UIAutomationTypes.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\UIAutomationTypes.dll
        • Size 224KB
        • SHA256 1b4fc46ae454eaa948c8281cedc6efee62aa1d15075307c92e4ba393b66c5341
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ValkAI.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\ValkAI.dll
        • Size 22.7MB
        • SHA256 eb662eb7d966e848478895b80fc88b2860ad43952597df5bb5c8cdce4416559e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WindowsBase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\WindowsBase.dll
        • Size 1.0MB
        • SHA256 59d26e0e0278c6cc0eea7404a9e7559030a2b524b4000446d8fe7988add67597
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AutoSave.cfg

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\bin\configs\AutoSave.cfg
        • Size 3KB
        • SHA256 deb29f370fac42cea8ac456a83a68986d1977e410b28c6ed45ec079a1bbed3b2
        • MD5 SHA1 SHA512 TLSH

        AutoSave.cfg

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\bin\configs\AutoSave.cfg
        • Size 3KB
        • SHA256 8573bcd2582a7d6dd6c3d465dbf1a4235dcadf58612daa2d8e0b27a8d9488561
        • MD5 SHA1 SHA512 TLSH

        AutoSave.cfg

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\bin\configs\AutoSave.cfg
        • Size 3KB
        • SHA256 6d715813d3f1f417e7ebdfce89d8e1acbbd0caaf457c2acfde5d1b99f1822f4e
        • MD5 SHA1 SHA512 TLSH

        AutoSave.cfg.3773420e19fc4f829f112bcf04f036d5.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\bin\configs\AutoSave.cfg.3773420e19fc4f829f112bcf04f036d5.tmp
        • Size 3KB
        • SHA256 1728ef4e4e5d2d3f3b52b6f4e67c4a1a72e5f757ed9f97e320dd270ef8889a80
        • MD5 SHA1 SHA512 TLSH

        Valk.onnx

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\bin\models\Valk.onnx
        • Size 11.7MB
        • SHA256 59c5c2b4f52e40448eb9244a7d078941eed3f3afb9787cf909d43b28ced3e92a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ValkAI\ik8muriICOHW1jEM2mEnM3SqxQq9Jqc=\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 1ccb4943ef0d472d70e1cb4738f89fb457010e12fa82379daf2dc64cf59d6e9b
        • MD5 SHA1 SHA512 SSDEEP TLSH