b7270daca61c6be8da79a863806ddd9a0a7c226d4f14b9013d3d1dd2de6e616c

Analysis

user interaction
yes
max time kernel
104s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 01:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.exe
Size 168.3MB
Sample260930-byafmabg86
SHA256 b7270daca61c6be8da79a863806ddd9a0a7c226d4f14b9013d3d1dd2de6e616c
MD5 7abd3f11e3dad83367690dafa3ae7291
SHA1 7bbab4b67e67a9b750614b78ad8750d18c9576e3
SHA512 f11af619b0b648beb98ee0004e9bdf1b312aa23299b859b958124d1716c0b7c4dad5653c86ba1bafb8c8b4984b13964ceac0be54832ece84b71061903c791e2a
SSDEEP 3145728:jNv28aI0i0DXLV9N3SMST8xSUUrXTKUW78wndDwFtXCbv9ECR7ZGziv7b6Z:jxT2LN33RxXQXeUWbd+AvimdT+
TLSH
T12D883346EE4B2F34E502E2792805F3258ACE5DB817C5852B8DF8BD5F37675430A3A683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral1/files/0x000c00000001c52a-20.dat	acprotect
behavioral1/files/0x000c00000001c52b-31.dat	acprotect

Executes dropped EXE 5 IoCs

pid	Process
1948	Setup.tmp
5588	Serum_x64.exe
2192	Serum_x64.exe
5384	Serum_x64.exe
1136	Serum.exe

Loads dropped DLL 17 IoCs

pid	Process
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
1948	Setup.tmp
5588	Serum_x64.exe
2192	Serum_x64.exe
5384	Serum_x64.exe
1136	Serum.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\desktop.ini	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\desktop.ini	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\desktop.ini	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\desktop.ini	Setup.tmp

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\W:	Setup.tmp
File opened (read-only)	\??\Y:	Setup.tmp
File opened (read-only)	\??\G:	Setup.tmp
File opened (read-only)	\??\H:	Setup.tmp
File opened (read-only)	\??\M:	Setup.tmp
File opened (read-only)	\??\N:	Setup.tmp
File opened (read-only)	\??\T:	Setup.tmp
File opened (read-only)	\??\X:	Setup.tmp
File opened (read-only)	\??\Z:	Setup.tmp
File opened (read-only)	\??\S:	Setup.tmp
File opened (read-only)	\??\O:	Setup.tmp
File opened (read-only)	\??\Q:	Setup.tmp
File opened (read-only)	\??\B:	Setup.tmp
File opened (read-only)	\??\D:	Setup.tmp
File opened (read-only)	\??\K:	Setup.tmp
File opened (read-only)	\??\L:	Setup.tmp
File opened (read-only)	\??\R:	Setup.tmp
File opened (read-only)	\??\U:	Setup.tmp
File opened (read-only)	\??\A:	Setup.tmp
File opened (read-only)	\??\I:	Setup.tmp
File opened (read-only)	\??\J:	Setup.tmp
File opened (read-only)	\??\P:	Setup.tmp
File opened (read-only)	\??\V:	Setup.tmp

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x000c00000001c52b-31.dat	upx
behavioral1/memory/1948-35-0x0000000003F90000-0x0000000004036000-memory.dmp	upx
behavioral1/memory/1948-34-0x0000000003F90000-0x0000000004036000-memory.dmp	upx
behavioral1/memory/1948-215-0x0000000003F90000-0x0000000004036000-memory.dmp	upx

Drops file in Program Files directory 52 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.exe	Setup.tmp
File opened for modification	C:\Program Files (x86)\Steinberg\VSTPlugins\SerumFX.dll	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Uninstall\is-S5FLU.tmp	Setup.tmp
File opened for modification	C:\Program Files\Xfer Records\Serum\Uninstall\Skin.cjstyles	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\is-U5CCT.tmp	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\desktop.ini	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\is-KJ1CJ.tmp	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\is-CNL48.tmp	Setup.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\SerumFX_x64.dll	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Uninstall\unins000.dat	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Uninstall\is-BOKE8.tmp	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\desktop.ini	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\Win32\is-0QSJ9.tmp	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\is-3KNUB.tmp	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Xfer Serum (64Bit).lnk	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Uninstall\is-558QK.tmp	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\PlugIn.ico	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\x64\is-RJT1K.tmp	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\PlugIn.ico	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\x64\is-OL105.tmp	Setup.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\is-0QIDT.tmp	Setup.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\is-A302J.tmp	Setup.tmp
File opened for modification	C:\Program Files\Xfer Records\Serum\Uninstall\ISSkinU.dll	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\x64\is-T8OLJ.tmp	Setup.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\Serum_x64.dll	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Uninstall\is-0F0KR.tmp	Setup.tmp
File opened for modification	C:\Program Files\Xfer Records\Serum\Uninstall\xfs-r4e.ico	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\is-B8EGK.tmp	Setup.tmp
File opened for modification	C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.dll	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\Win32\is-88GM0.tmp	Setup.tmp
File created	C:\Program Files\Xfer Records\Serum\Xfer Serum (32Bit).lnk	Setup.tmp
File opened for modification	C:\Program Files\Xfer Records\Serum\Uninstall\unins000.dat	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\is-R3RTL.tmp	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\x64\is-0ORI8.tmp	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\is-GCK6S.tmp	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\Win32\is-6MRD9.tmp	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\desktop.ini	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\is-3IEES.tmp	Setup.tmp
File created	C:\Program Files (x86)\Steinberg\VSTPlugins\is-3ESDL.tmp	Setup.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\is-JE2BU.tmp	Setup.tmp
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe	Setup.tmp
File created	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\Win32\is-E5U4D.tmp	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\PlugIn.ico	Setup.tmp
File opened for modification	C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\desktop.ini	Setup.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\is-P1BTK.tmp	Setup.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\PlugIn.ico	Setup.tmp
File created	C:\Program Files (x86)\Steinberg\VSTPlugins\is-0MQSD.tmp	Setup.tmp
File created	C:\Program Files (x86)\Steinberg\VSTPlugins\is-RCRLL.tmp	Setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Serum.exe

Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5908-0-0x0000000000400000-0x0000000000439000-memory.dmp	innosetup

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	Setup.tmp

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1948	Setup.tmp
1948	Setup.tmp

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1632	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1632	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1948	Setup.tmp

Suspicious use of SetWindowsHookEx 15 IoCs

pid	Process
1948	Setup.tmp
5588	Serum_x64.exe
5588	Serum_x64.exe
2192	Serum_x64.exe
2192	Serum_x64.exe
5384	Serum_x64.exe
5384	Serum_x64.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe
1136	Serum.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 5908 wrote to memory of 1948	5908	Setup.exe	91
PID 1948 wrote to memory of 3660	1948	Setup.tmp	94
PID 1948 wrote to memory of 4608	1948	Setup.tmp	96
PID 1948 wrote to memory of 2828	1948	Setup.tmp	98
PID 1948 wrote to memory of 4560	1948	Setup.tmp	100
PID 1948 wrote to memory of 3460	1948	Setup.tmp	102

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4180

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5908
- C:\Users\Admin\AppData\Local\Temp\is-32N9J.tmp\Setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-32N9J.tmp\Setup.tmp" /SL5="$4009E,175782052,192512,C:\Users\Admin\AppData\Local\Temp\Setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops desktop.ini file(s)
  - Enumerates connected drives
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1948
- - C:\Windows\system32\reg.exe
    "reg.exe" add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Xfer Records Serum 1.35b1-r4e_is1" /v "DisplayVersion" /t "REG_SZ" /d "1.35b1" /f
    3⤵
    PID:3660
- - C:\Windows\system32\reg.exe
    "reg.exe" add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Xfer Records Serum 1.35b1-r4e_is1" /v "Publisher" /t "REG_SZ" /d "Xfer Records" /f
    3⤵
    PID:4608
- - C:\Windows\system32\reg.exe
    "reg.exe" add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Xfer Records Serum 1.35b1-r4e_is1" /v "Comments" /t "REG_SZ" /d "r4e 2022" /f
    3⤵
    PID:2828
- - C:\Windows\system32\reg.exe
    "reg.exe" add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Xfer Records Serum 1.35b1-r4e_is1" /v "URLInfoAbout" /t "REG_SZ" /d "https://www.xferrecords.com" /f
    3⤵
    PID:4560
- - C:\Windows\system32\reg.exe
    "reg.exe" add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Xfer Records Serum 1.35b1-r4e_is1" /v "EstimatedSize" /t "REG_DWORD" /d "225977" /f
    3⤵
    PID:3460

C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe
"C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:5588

C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe
"C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:2192

C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe
"C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:5384

C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.exe
"C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1136

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x000000000000049C 0x00000000000004B0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PlugIn.ico

Path C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\PlugIn.ico
Size 114KB
SHA256 55cd7afec149dc5accbb0821c98250785f8e503d0c29f1c0c989a7fea915c1ab
MD5 d26f40e07c4a966eaa00047b0ecd52c7
SHA1 9be25fd336f0440572c84b9a6151c33504ab4ce4
SHA512 88ae4281c7ddcdf673beb0fc1247716eb2462866e65bfbcbb56c71a9c3d127bdfe4627c7f137af1dfad45fb504b98b1a088a06d8e891c041f2e40e0ff8b9a631
SSDEEP 3072:cRLVcauHXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX7l:GLVkXXXXXXXXXXXXXXXXXXXXXXXXXXXJ
TLSH
T1D6B3E6627B02ED0BD22B4AB09865F3F5545DDDA0FE029113A6F1392B35B1AF01ECD6E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Program Files (x86)\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\desktop.ini
Size 126B
SHA256 5526ef6345adee7c693e58354dd72b095df152be62ff7298b4c6f6d0f91e2f83
MD5 798095cd31340606c8e81d0a5107d57e
SHA1 39d058c4d45ef84b188f7ece620106124eb3d74e
SHA512 9ca995c89d3f23cd2a977fb2826da1f75dc4caa4fe965f9aac3a6d486f6558429a44eaeea35217f85d94ba6d7c2c54ab520c9a1786133b2edd103e36159e53a1
TLSH
T190B09B15282F5020D57FC3071990BDCFF2041857985BE804C78287854EE17164FC855C
MD5 SHA1 SHA512 TLSH

Submit Download

Serum.dll

Path C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.dll
Size 4.1MB
SHA256 d2c3af1b3bd411b863dbc19eccf060a166f912a59001f73a5b1822d5ff3f3dc4
MD5 a16df944142d4d433445192f1cb10609
SHA1 6b84eda3213b9073fee78e72100666425907dd47
SHA512 c1f6c07d2bfab0a385c273178cd7c0c508d497506df8f273f93e71be76cfdf053a45fa9bf218dd2c0f169bc49b45471ae865ccf3044b0a18edf9f79fe39fcb36
SSDEEP 49152:QINVn8/o8KqqBjcJBI4/CbNPgYlejGvpZWxbaeDxT/A6DkQ6ltXLNT/TIZdg9y4f:QIX8AKSB7lMGREVaoxT/5DaKYkmv
TLSH
T10616AE21B182C079D9A81071AABEBBEF857F1775073C05D7A7C06DA898785D22BB3353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serum.exe

Path C:\Program Files (x86)\Steinberg\VSTPlugins\Serum.exe
Size 2.7MB
SHA256 5a0dfbf0555d6173e3ee233e0bc11365e081183e0ef7d23b20309a75f9456c81
MD5 d037dc4ccca679af7282d1afd87ed937
SHA1 e88c5027b6cd35e4611bac3fef025f33ffc00fbb
SHA512 e28cabc391be87f349bec31165a64c1fae6df3536780738d15194aa212241990f86ba1e2db7c6d7e8ffa00774252074166cad32ed76763c456dc2053631c367f
SSDEEP 49152:4ykyMhLWs2PRe2dRFx8gW96xJ3Hk2ZZeAgftYNM8QrDm9Ay2Xi57e9uaBI+5PWVE:LFVs2PRnRFx8gFxJ3E2ZZNgftYNM8Qrd
TLSH
T19ED57D30FA508075C663263C956AE67A6279BE201B3CD6C355D43E3F3EF45C3993922A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serum.aaxplugin

Path C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\Win32\Serum.aaxplugin
Size 4.2MB
SHA256 7aaecdffd3f252815f4f501c737755041d6f4f0bfb699374fcd8ce7d905ea428
MD5 02fbf6feea66d5dc2e109e118e52b6bf
SHA1 30045bcbceb595c0aab1ae73f61b529b1f94ad45
SHA512 a4884750a7ffb77256a570d10288d9161a20b2a2b8583a60b03bd25361cbd59c3199a98a36832d70d42734aa925028b91250a15063334d36dd910377ee74e98e
SSDEEP 49152:+Sb8KetZY9MZaVSwE+samIR+FShC6gtwEnStdjI30yn7vzahXOipDrM9X1y1oDT8:bb8Ke8ODqngmESTk30Erahk9Fy1iL3Q
TLSH
T155169D21B18280B9E5A811B0AA7EABEF963F5675073C05D3A7C05D6C5C795C23BB3393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serum.aaxplugin

Path C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Serum.aaxplugin\Contents\x64\Serum.aaxplugin
Size 5.0MB
SHA256 f0397cace49fdffd4ceeb4e71f7eb04fb88d87194b0fd6321071367c15f9b71f
MD5 105426c1b54915c10fda5e80a5734af5
SHA1 088a105c7244f8774e5233300a4718d3c010d256
SHA512 b9f03b0b846edc1c84478ebcda372971f53cfa3918ec8f1730d220b1f3efcfc5fa2fbb61eab8fd23bf6bc8c5a3df5cdd7808ff824402f351c65e529500f36e0c
SSDEEP 49152:HRyu200Vlz3t47UigPNFbRuxUqSc/NpbvTcH1ox8wrTUQWRUXAyXQd3NTATFcbq9:gZ9SxgHtw1Vfx0tygacc
TLSH
T18B368D8AA3641098C076D17DC777A157D3723809873457DF06E0A66A6FB7BE06EBB320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SerumFX.aaxplugin

Path C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\Win32\SerumFX.aaxplugin
Size 4.2MB
SHA256 1febcaeba16b6f3c3a83beb61525f18106a8f1e733b93577ba64afcd5241b868
MD5 4f080b499aba3ac3ca00ba9c8c8e3aaf
SHA1 a93e860f37da04bdb6d89b596c1e9326be40687a
SHA512 0bc9e5a77f6926c4a2fff6bee6f33722bc74f04e1b68e6321bcf9b15cf55260d0fa4072413853d631cba1e011319e391df49842d4a7617dfc26839161e17a071
SSDEEP 98304:B/RrF+60LUYY+bSlwkBVveerhHKUKvaEV2I3:B/RrFH3VZVWerhHG2
TLSH
T108169D21B182C075E5A951B0B66EBBBF963F2271073C80D7A7D05DA85C789D22FB3253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SerumFX.aaxplugin

Path C:\Program Files\Common Files\Avid\Audio\Plug-Ins\SerumFX.aaxplugin\Contents\x64\SerumFX.aaxplugin
Size 5.0MB
SHA256 658ca2d5c9804bcc483c618d1ce78cef71526f2074b2802f92887232486536f3
MD5 3b101f5dc71cb598cdeb5871b68d1637
SHA1 311a9638a196f562a675f7d8b2e50b119fc77a57
SHA512 397087af4321ccfbea92d6db0ab29657d263e94f0a71f1b9749a5f2e76c58ff25c76be612ea27c3e29b117e627800c26584fcfdff6fc4f2a6e5f061b939ee9de
SSDEEP 49152:0gqzh1/dS1RCNI08D56Gsf3hiFIO3T9GnR0cB1mdTx/+MALvRZYOqlq3mEYt9rTa:zQ7ftpydxM3Xk
TLSH
T1DF367C8BB37405A8C8B6D27D8167A127D27238258334A7FF46E4566A1F37BE05E7B310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serum_x64.dll

Path C:\Program Files\Steinberg\VSTPlugins\Serum_x64.dll
Size 4.9MB
SHA256 203994f44540321ab056bbbe78936fd216e8aec15adc7ab69f1679841d717bc8
MD5 34f2b4a82f2ab414223e069fb9463717
SHA1 e328fe065a571922c48a126b43fe320900a1e87a
SHA512 eb0986a8dc1c1abc2e2ae21f247d870249859ecb5364bbcf9fb36dd2362a01e9af9949dc2f54da1c9e5426f60ae80ca542009861966f1d3523f7b1a06529b3c3
SSDEEP 49152:Dx7E7nSRIgsT6Z3/ujdJJbtx2oxtXb9eVrLCGeFsV2eAt/LZYDI7ozbH2GJTXT5d:F1YEPIrXtpQXV2bUs7eFd
TLSH
T1BA368D86B37410A9C076D13D877BA557E3723809433456DF06E0A65A6FB7BE06ABB330
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serum_x64.exe

Path C:\Program Files\Steinberg\VSTPlugins\Serum_x64.exe
Size 3.7MB
SHA256 a86787531cb4b017f5843c93ab8ee6f9d9ba13bd29d8d9e7e8af5ff9cba993d8
MD5 69c521c8c68e7d7da15f0cafec8a3072
SHA1 a9f4ef0836c4ab6a798ede59ad3e9b6e6d5aa3da
SHA512 7341f6868a033ce97fc53ef0669acd78222893b3fb849a8a834072d533a1cc107a73ae49d1103e7fb16911952f193bb1f44336ff55843552fbab0e5dea0b8628
SSDEEP 98304:Xc49fIWLHFTaR2w5yoic8BTe/Laaaaaaaaaaaaaal:XgWrFTaqc8ex
TLSH
T15E065A59EAAC40D5D466803C8A46DA2AE6F27C404B34C7CB40E95E9F7FF76D14C3A722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-32N9J.tmp\Setup.tmp
Size 1.5MB
SHA256 34a973930e15c2e3cda1388e193cc726380a22343c24c8ed66e2316b88d11285
MD5 e9ee3b081270a7ce213a31b6299385b8
SHA1 8b5ab495541128892c987d4d075911128b6fe949
SHA512 52b3c387707567b6d376bcbbea12db3e8a9296f6614660df850b023c3c2d80ac41da5c7385b39cc3a917d7874c75350975533b5656ed4bcbec5c0705f729e828
SSDEEP 24576:gH9/gqpQYze0XKvc4BYCsCS3D4kjiIUjyeyXEDq8UbVlc3GYgl4KvjK4zfXexL+V:oIEJxCWluyZ8UbMcfOY
TLSH
T155654B12A2A24833E1733F358D1BC2A46D367D642E74948B3FF84E0D2E79B417D39696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BASS.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\BASS.dll
Size 91KB
SHA256 0bd42c13dd0a5c881e80f161f7548b093c4fd99a747c13568af983e2c76cd71a
MD5 26295a0baf87955f2e37735af135ca45
SHA1 97f468d3ebaca4774ce69f6f55c998b93a912540
SHA512 6760c5fe3621b1d9c84a5c974c28d796cfba83dba4ff0e9f9eb0ed19cb47a6fc6a1322f58193eb4d638e214f7e61e9543f6f9235c2be8888bcd075fa7650b20a
SSDEEP 1536:h2MO8WtzIzNcuLo/hVeiXSwhEoMx3xO1wthPd+4kXQ6oYuvLP6CbuVr2vzQWyNOj:cMORtScwiXpEoexzt9dSb1uv7394Oj
TLSH
T174930195B5D00E06D97B1D3E571386A2E0B43EEE9D2EDFCA6E082D7023FA5A91490F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CallbackCtrl.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\CallbackCtrl.dll
Size 4KB
SHA256 68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d
MD5 f07e819ba2e46a897cfabf816d7557b2
SHA1 8d5fd0a741dd3fd84650e40dd3928ae1f15323cc
SHA512 7ed26d41ead2ace0b5379639474d319af9a3e4ed2dd9795c018f8c5b9b533fd36bfc1713a1f871789bf14884d186fd0559939de511dde24673b0515165d405af
TLSH
T1F281BB43B3F81059F5B75BB07EE39B8729BAFD315E39C61E0A50011A2830A55AD36B33
MD5 SHA1 SHA512 TLSH

Submit Download

ISSkinU.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\ISSkinU.dll
Size 385KB
SHA256 ff1374abd93690f5e6e591bae23b49aacc8bbe8b7b05b539ec8aee755070a0e3
MD5 7d9087c4e2f9ab2db78a46ab52a7f360
SHA1 15624c6e5ae4b2689a6975a8faf9f0efbd940b7d
SHA512 70375fe15072531de481a0ff95473fa152178d2fd5f0610712cd4fd63ed9da9a40c669442021c23937465ee1e81c39e38332444f10463b5a4fda2048ec4f1d5a
SSDEEP 6144:BcHtGHaERiQ2lZjiwENOcmTBHvnHwEhdd:BcAiQ2rGccmT5vnhhv
TLSH
T15A845B02E5D240F4DB9E35392EE9E73A93B5924E0B27EAD3D325FE2D1D22082D139355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Music_Stroke.png

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\Music_Stroke.png
Size 2KB
SHA256 921b4e067067a29826ef3abc8a758ea6327be5177b333a87a8be27af71c4abcd
MD5 4de136ea1d0ef7f705721de73948f6cc
SHA1 c90a3caa5090ad43973224964dc917bc7bc947cd
SHA512 6bf01b9d5321c755dab9a4434876178395e34bee7d735d727fbf37e17e796c53e54713f3dcb98139f54a1ea1fde1edd8f89560cf8612baa0c65a65732d0e8d30
TLSH
T1CC41D944BA02FC606956F85619F4619FBF2322D06641501EECCC8E1BA6702FDEF95DC6
MD5 SHA1 SHA512 TLSH

Submit Download

PlayerBG.png

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\PlayerBG.png
Size 561B
SHA256 7d19086479b58651eac558e74101670a6343dd9eb3690980ef5842f1c71d7650
MD5 12266ac7625adf8b2d974dc7c456c4b0
SHA1 ce09c3bbcf49760adf9014f27886d4d762f338cb
SHA512 f583080f7bd70c826e06358998a4e4976b833a5aaf8df3c3044a37076b14e7ceee209fa67980211cf7e6c39306958495f43b949ce5a9143734ef5999325b8766
TLSH
T166F0E14997F1E559877E3325A53F2BA4A0D7A0C99922B19AE007C4266403596C0DAC56
MD5 SHA1 SHA512 TLSH

Submit Download

Skin.cjstyles

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\Skin.cjstyles
Size 381KB
SHA256 4fdae26567f43e9f936be5ef23bad8fca78bb53d9c2277afb65d0524529039a6
MD5 d050af615a4268b9229cf6e7e6589072
SHA1 a079cd3ce89e1b4c54fa22377bc44b26a445c569
SHA512 0630c309c37423c8032403655fc51017ad3eb12311a31be839e4b864fedde5c722c27f998fb4f1d8fef1b0d34a6b1e2ebd50375b2bdb36b69dc9b15de9d8fea7
SSDEEP 3072:W+5hRU3+XkIkZDZKT3UNPrwghy4Z6DSJ0GDl5URU3+CkIkZDZKG3tNKrglhydZ6j:4rwghy4Z6DSJ0GnrglhydZ6GSJhDY
TLSH
T1BD84A1012E99C257F26BA530FDBC58FD82237C595F7982AF70ECB94A63B1B506402397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VolMax.png

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\VolMax.png
Size 330B
SHA256 b3c2ee422a4e617d3e3e6d3a8c69bf79335b317a21ab95bb525bd710a8da17b5
MD5 d39a3a7a4cc172763c50c82f385926ef
SHA1 1e90a0207716e993d4535b5bcd66f091311db69f
SHA512 9ffb047bdbd58d33949208f8a372c6424dbd6bddba679221b23b038c529421d4c94f694ba80234d71c8378877288b5acf80854a6e5db145b9a1710de87712b25
TLSH
T1D6E028D196400F1F69545D3644337ED30837024442455A8C3D14B6100433D3C20D1F7F
MD5 SHA1 SHA512 TLSH

Submit Download

VolMin.png

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\VolMin.png
Size 250B
SHA256 f48bad936959242e695719b09439ca2dd05fa23c2a6fc0eaf9b4a4fe0ce7627b
MD5 439a83f5b3af1c9489a9018103e57095
SHA1 3095e60b35ebe91ebb264c24c2348aeb5a373b95
SHA512 3d22b5c7d9f414f5ecdcb01bd26944d57c73ad1e96ef2a302347d7ae2056d61f1449ac236d03f8aabc9db8c63e00f3d25ee3b69a059501a2dfc907caf1b8f3b6
TLSH
T19AD097E32BC22978C4900E23605C0841CA234D10A60FE20A311BC8160AF5A4466A5BEE
MD5 SHA1 SHA512 TLSH

Submit Download

VolSlider.png

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\VolSlider.png
Size 218B
SHA256 eccdbccd4870aded10ec95a86843dadaf1b385024d6616a9edb106ff9f2018a3
MD5 cf673f94267bbafd257f170beccb1584
SHA1 836799aece9156ea25932a9442338e1930e6bb17
SHA512 9c0c46075cddc1b66614fac060393be74eb8017087c47e4c7e7ce2520ef85a9ee743a5605379dc19c410aa90da456910346b322ebb0f0f6763ef36881af94ae7
TLSH
T1E0D023E5C1411CEED95CAB235234FC5886658CC66621159C5B2FF230347D4C55C4AAB4
MD5 SHA1 SHA512 TLSH

Submit Download

WaterLib.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\WaterLib.dll
Size 123KB
SHA256 57ec9023fddd0e0dedffc93bae937442eebd648a4d14383b22fb1a787582cbbc
MD5 b4ae1b26b68545a823f067738a6877f9
SHA1 a90a812cac906afb2fbe2a400746de67c845ecb0
SHA512 64b6e3ac5eba6231dabe61b73feb8bbeb2015cf871858aa0163fbc84b41912f8453aa16d6939f4d82f235929dbe333c5534965ceb2c83c67720f5f336ca3ccef
SSDEEP 3072:Hw7rNgtP0RbU1VQwViTnHH2yQuZtezMf3FnY7qub4xMNjCsyout3:eBgEbU1VzViTn2KZtfVY3NgoS
TLSH
T125C31207A2747B45D866EA352626C25A3538EC04BF48FBA11CD6342E5C437735DBF386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

botva2.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\botva2.dll
Size 41KB
SHA256 da7d0368712ee419952eb2640a65a7f24e39fb7872442ed4d2ee847ec4cfde77
MD5 ef899fa243c07b7b82b3a45f6ec36771
SHA1 4a86313cc8766dcad1c2b00c2b8f9bbe0cf8bbbe
SHA512 3f98b5ad9adfad2111ebd1d8cbab9ae423d624d1668cc64c0bfcdbfedf30c1ce3ea6bc6bcf70f7dd1b01172a4349e7c84fb75d395ee5af73866574c1d734c6e8
SSDEEP 768:DyNq+QImctzKKFyAE/PFqhezqSQrvYt4lYVuW0zMo4QHVoWyQK7OYwPPh:2Nq+QWJ7ds80mlde7s
TLSH
T125134B61E9E2C030C096DAFE6D35E215A36F7E101F260BB91A9D6ECCEE4BD43641C167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

imageanimator.dll

Path C:\Users\Admin\AppData\Local\Temp\is-K0ALS.tmp\imageanimator.dll
Size 236KB
SHA256 ee98ceb9c2ca4fc8cecc10346e42b06370b94b304eb48aeef86e9bd6869f45cf
MD5 eb1e975ff55d454aeef95752bbed4312
SHA1 7f848786b2a44c38d6b7115cebbc35df3c3378ee
SHA512 003a89e439c19a49a68bffd6134df46f975f1f64a585d3303652e76e2a2b11a6ebedc8761c38b491470c003fd0d9f69ce8cdd08f3f074c7df336787c718e1c1c
SSDEEP 3072:leLrk9ZUrbB+vkNvrbieMvz46oZi1Wik5ZJKxZTNsjwtn+DgC2A8I1VOQO8cv8J1:leLg9ZUrbBxPr1ZhDAgjydCZRrOQFc
TLSH
T1DE34121235FDB059D1E15237618F8FFE2226BC82EFC254E310683E7D98F96186E67A41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkinCacheInfo.txt

Path C:\Users\Admin\AppData\Local\Xfer\Serum\SkinCache\SkinCacheInfo.txt
Size 7B
SHA256 21b111cbfe6e8fca2d181c43f53ad548b22e38aca955b9824706a504b0a07a2d
MD5 7a1920d61156abc05a60135aefe8bc67
SHA1 808d7dca8a74d84af27a2d6602c3d786de45fe1e
SHA512 94abfc7b11f4311e8e279b580907fefc1118690479fb7e13f0c22ade816bc2b63346498833b0241eec2b09e15172e13027dc85024bacb7bc40c150f4131f7292
MD5 SHA1 SHA512

Submit Download

SerumPrefs.json

Path C:\Users\Admin\AppData\Roaming\Xfer\Serum\SerumPrefs.json
Size 1KB
SHA256 186b1e5a586c7a20637ee913dd2a7f34e31cbabd5637e39ceea64d155350bcff
MD5 dd5779ac98f88c1782588544375a15fb
SHA1 5f7fdb70a7014d65238bc3bfcaf9e77d06d8d651
SHA512 24517bc653cddf4642f6fc59a04c0a821a81896b8601912f5df5b48dc2c4129548ec799f10e00dc3b2e3c562a948411c461f4c0b6d18f88ce5f574214a9dd3b6
TLSH
T17921C040B51A5DBF373A63D9C45C93424EA85027D1C8DC5DF4F0548EAC1A23A3782DD9
MD5 SHA1 SHA512 TLSH

Submit Download

user.cfg

Path C:\Users\Admin\AppData\Roaming\Xfer\Serum\user.cfg
Size 5B
SHA256 b6dd0a34d444d9a74a6e987d9686841c5abdc7b0e5c1c88505b9064217f39dd6
MD5 4d58159c6dc97e1100be0deebfc8ce59
SHA1 b8edd65dad55bba32876319181e495b81d5f3815
SHA512 c83ebfec2b74710118a09a8c374314210abf547d1ccb7ce0ccdc4898d9596f2d1a155271135ee576c06306cf365cfed955f812ba4a70670977542afe08fde3be
MD5 SHA1 SHA512

Submit Download

bmp00128.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00128.png
Size 159KB
SHA256 ded4b985f2a39fd24f0c8ba4086dade41e40dd5a1f63555e54e30bb11653401d
MD5 96e242d0e6a78159e6d883cdb91b3aff
SHA1 375444531c0b0189b01054631bd2ea06c4048897
SHA512 69e2bb27a9de6d9e6677cdc6f3e3f9dc06002983276424b98acf90560a4cc85eaaadf574dd1145b8535abd588cf7dcb0a74871176406b10d1118ae6d1f7811f0
SSDEEP 3072:iqoW9cdic0fRAvqaONN0ibPfsI7HobTbbs3TINkzSIp8nUtNAvdhFY9gll:bvSsnZAvH9UsI7HoHbA3CkzSIp8UXAF9
TLSH
T1FEF3122FCAC3188452EAE9EAFB0723B5ADDFAC5911C0EB5765170E18DC64E48D01B2F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bmp00129.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00129.png
Size 857B
SHA256 b2d127e14e5e70db9eddf3c32cbcc598e39bef0d61055581b3ea9347fa947a55
MD5 675f36688fe0f8378a93b7815d25dd6a
SHA1 0668aea2ca4995a86a8659eb6a166f526fd36e38
SHA512 5909f00cb7edc1d44b0497d02eb1e57a4fffddf52e8087bbeb016a79cee98e0b2e592dae1f548d59715bdd0468d26712563a256d1c40254737202442468219bf
TLSH
T1E1111299BA0FBDA0884D6135DD39B9989D1F186D4DD9507815B4801B382FC9DD337346
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00130.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00130.png
Size 650B
SHA256 812e7e77ae50a714f57684390a381c0621e708f64452478e9117197623cb02f5
MD5 672600b4495baae8ca9997f45e1cce49
SHA1 a7969a341a352f545788bf7c286ee021dde99c62
SHA512 ef26b9a877443b05bf49cf1b5fd09ca4a9c2a87f63949b2ff416af1508c5f99922238dd6ad57631677cc1dcc4b2249dadf60adbdb7f263ad7d32c3705ff29734
TLSH
T14FF002E0BE258C45EE196DB4439128D1E055FC0D125496331292B69E153A10C98CC7A1
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00131.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00131.png
Size 272B
SHA256 20b0657eda025e243be03a4ecf546bd38688f2592107849be3920cfe4ac4d441
MD5 559a1e5ce19f067aa37b28a19b558514
SHA1 17cb1ca1573e67f99bec05502cbc463e7b99c366
SHA512 60218d29c82d2e2ab0df29570d5d925a655c9b33046b27f0230aeee245aee693287d5e3d6dcb67b9977cb31da982ff15fabe84a5a2154d21da1784510c7d9b63
TLSH
T1B1D097C3B601CC2A427F801A03EF8282CC393C0822E28003C400311D1E7904AA1F1363
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00132.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00132.png
Size 1KB
SHA256 7d30f40d3aaea1a3d57d39247293967dfef49511eb741493bfa824d972024bdb
MD5 883fb7462fdc1569ec08ed52d82260aa
SHA1 dbbef2d3a9aebf0e57624171b300ae54814fcc3a
SHA512 bd749710071fe6f5e9f2aca2c905a4cb8361d6539feaf0a7c1dca0152da75396903f08c550cb2eb421a259e5cca00ce6940a731a5f330b1820356b573246042d
TLSH
T17E21ACBD9716A4B2509AA4492A914201ED01CBC0D3E8641FFFC5C64D5A723596CDCEF6
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00133.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00133.png
Size 657B
SHA256 e113a7c9e1064f01306c1866b946d21b79515041a560f67e7ef02bd3c4beb95c
MD5 d0c513cd22f2a139d634870c9a0d792b
SHA1 a466e420e64982b253bd9df7b731cefd22db6f15
SHA512 8d908193da81db5ae3ae07a9ee251a6ac8eb9fdb23e1c0c30220192bfe22fa35f31660423194e2781f090bb0e5a14e5b2ad315ebb775c61693d787fb96d94e46
TLSH
T1B901D8EC32091E3FEAE786308C3A577900ED09C90C4754AE0C4283EA613D2840150A3A
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00135.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00135.png
Size 2KB
SHA256 5d3322eb79a0ed26a84487d378eeae4e2f88d2ce188ee5c0004189abcc6228ad
MD5 70760d0401065d9b0a769b8e4a2a4f18
SHA1 1fcf7153f9ec8ff988d2b7ce488ec840aa26c683
SHA512 5d7512450fd0a6f8c0a43ac796a1581ff53633bc94df9ae3d9f72ab3398f816b9484a8f784a1a2c6b19b951862b4ec50a7521da583d0b4305e2d62d288064c8f
TLSH
T123514A2CEC498D51089FF0AC93EA6437458E84A50E5BEE0EC59523AC4DECB41CE4C209
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00136.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00136.png
Size 206B
SHA256 277eb898f0731d5b270987bfc14922a4adb652e26bdc6760714fd0480ea57c18
MD5 66f8627002351797022adebe4653afff
SHA1 3ddf8d52679158d23865d5f0bc36210cc2e9f7e1
SHA512 410a41a72de7c49fcc70b0edf74d1e35e95efad7579f2dcb373abba073bc8e5b5072765d83055e6130c67d692ec33d8c0ef191d851e5334e830fd50501cbc9b4
TLSH
T149D022D76A6DEFA0CB2AC43F436A4060AE19240C1068491B58D6E939781E00C2080360
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00137.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00137.png
Size 281B
SHA256 e9bdb5f2c54dd059370b9533028c80ed976bbbbec80d1fa00fb9feec367a6e95
MD5 a962dbb2546feb5125b5b90a927b5178
SHA1 5336b009253653273f797dae25c6190fc28697bf
SHA512 08c81b58cc5d4ac1e1d37b44e64798f99b32e3d1e73bfe93f3e3b97b2ece0f134e159e815a84ebe5b1d3a78d7b558c5ce3b0ecccb5bcbec148e54908efe6862c
TLSH
T11AD02BF6B344DD58C6551D7B912D60719814042A3124D25FFA05D1C8436C485E7C9703
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00138.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00138.png
Size 2KB
SHA256 af64233b06595a13fb0c4f12b42753508c4f6832f9d7a3b9b4ba922154e543b1
MD5 b770bb573526021dcadd0c99c51f1a89
SHA1 70bc936c6c6a736f9c6062a34ad9f2dd5e9b898c
SHA512 791d13ebb024d6ecac7f3900707f6bf9343cad1d10622063899e9d4c165faf0d1222158019659a0b6f9d81f134735329fd56abd5643b48a2d6828eb8929df377
TLSH
T165517CAFBC78FD1B4021590A44248CBFC1F2829DD7B12C0787B7F9EA8408ADF4427889
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00139.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00139.png
Size 364B
SHA256 12c26cd7f0bc5ad8b8d2a97b15f6577682ee6fbd6b7af65f39d9bbb085176784
MD5 6bd451834bd47212b86f1631ffbbce37
SHA1 c113acc9130e161dbf3dd418042dc6854aa7f1ee
SHA512 e32b781ecfec34872015739e8dd77a8639edcad3f7252a8694ad225ea787635e78db5ba0b40e161293f1b9e38e31866e89d05660a2e58b4586c350ec581e01a0
TLSH
T130E07DB217EB8A7C4848D03953A1A321A9331579401D01027B8C40F75C6772C973D102
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00140.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00140.png
Size 389B
SHA256 de4f2a8e33447bc40777f2623e30b489a6da70206e202d8a8c7d95bd46e3042e
MD5 3f58ff0f3e90966a58bab70cace51422
SHA1 22a9191f949203358c31551fb3291931c2a51182
SHA512 ea277910cce0f4042d2aad523563475940ac13414dfbe11eeeaf14d89067544f04f3051ef0feabea35c973b75f81c4f30a1ece3c876493d6acdb428965f7e3dc
TLSH
T17FE07DD20A17497C42C9013D1292A1A4A1190FC9C20B45637D22CD55910CD48FC08EAB
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00141.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00141.png
Size 389B
SHA256 83f2921231a04a0d674b490641f863ea903c1b2cc91948561853daa433bf03a0
MD5 1aef3ad1492c452c7fa19d9976fb8221
SHA1 a0490d7a59c1be50ad0eebae3f3acac6cd16be07
SHA512 e0ea00506fe9297abb576aebdbacb08c7dff890bc47567298c46c6a9ed60ffa2ac68c29973848edeb8ce52903c549c838e660e8ecb391499a753cb34b0ce829b
TLSH
T139E072F2021BAD2CC08CC0AAA3B1F16035200A8903198A82AC668A5F068CF5950673C9
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00142.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00142.png
Size 367B
SHA256 9f48557e533dd86b8c24cc14f97910b406e8836c07dea5dd1cb14bdc0b2fbc39
MD5 2de9c147458e185545d12aab956e3e82
SHA1 cf6928ffcd4765056c86610252c3a229010bff5c
SHA512 8a7beec5b3085a8aeeaf12d3ab917c0f9dc58fb4df2d6c6f3ff2d3850dadb6a6c9bdf419a82f38bd6f9a85d755b044922cb1877534a92e38e3286b569cc66788
TLSH
T159E0C0D29DE34D18C49D692B83AA1E0168D5496E3084454FB9C4C303150F515D34974B
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00143.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00143.png
Size 744B
SHA256 2f1595c7cd0fce077f62382c9258d7d8f9735227d51f12a009c03ee5430db241
MD5 29c13df7d5385f4a2ff36f9d93492584
SHA1 8dc52cff79ba7f3a411c9282d531c728b9e38753
SHA512 098fce78d8974709bf710893e9ac4685a777441d510fcb442c99e6c88571e825edf9171c11eb96d99c26ef64f12b383a6f9da9934b4bea3880d0e9e385c5c785
TLSH
T1E60110C2F31479380D0511EA031FFDE75CB894BB444687AA5DF88E0A1F8A8842105617
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00144.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00144.png
Size 1KB
SHA256 41e57501a3c20cd4947f6900fc9e39a25fe0b1579f984148fa1bcc9f21bac8ad
MD5 65d15dbae9263730473dbf698191285e
SHA1 8ed6048eb56061c1ed13b04a3c56f13553348224
SHA512 db5f17ae8504d0840e62ab0f52352385838b3e4a769c909e6fa8e696e9e2ea3eae117fc093947b6a5c462810fe9688c2879d2571c6d93e4a0e2d73adfed7ff7e
TLSH
T10621954BE90059A2D1EBF5B115EA8823C93388C060E0D476389FC0276E323B5841AFC7
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00145.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00145.png
Size 599B
SHA256 9bf8c81083d0e50929e8f52de328d4d9baca1ad1c97f5bfe40df987b04bafe0c
MD5 cb3df4183ce77336975c4469d3ad8027
SHA1 ee32fc8dfac87d1434b1c3d3706d11d46cb5f748
SHA512 ff1eea2d97e0de2d33b884fc9e62337f080cea4ef2c47cfd75d36a09a136653dfa471acc85167d3bda87386d630ed5642f35d7352469597f7c2628d993e8e4b7
TLSH
T108F0E1716EEE8CF081B639E3407F53D3390D21F402660004CD89917A6A047CD6A89BBE
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00146.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00146.png
Size 2KB
SHA256 4168c925f004676f595ceb3de2a2f260db16672388da7fb34f88a19bdf88ca01
MD5 141b57f548c69653072a75c6130ed8d1
SHA1 e4c29a2f12df46eed7f140284ca770e436101d02
SHA512 d7a32c22d94b541d12480203f003fb74467237f1dbee0ff503e87d0d6e4cb4556b4e7d4efc8fedd5ef7299a72205f4da7927bc0f5a9912bd72590c51b8500f25
TLSH
T17951FC21E7AB34B0DA064972932A47A56726D4A2109E1B0BDB584510CDFD2B9EC55520
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00147.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00147.png
Size 449B
SHA256 56107fdfbbb2e25a9f88e62b086243dc2f1c7639e02f431c13d68cd691403bcb
MD5 b5eabf89452e63db83102bd7d38f44d6
SHA1 e7f7410e5868eb1bfa896cd3515648e0da8f75d4
SHA512 5f29c0f6f97d764c18e6b643f1377f10dbc28e9021a5359607d4b4199dfbc074c71e863f53b1467ce9ab2fc467466dafbf9aabc9ad004afbeab980a42b1a5bdb
TLSH
T143F0239335C5EC03E6FA86BA5F1D8080E50F05FDF1651B33CC18545098BE4992343240
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00148.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00148.png
Size 1KB
SHA256 8fcb2cd0432c46339403166c0f28c941cf58df881fb2fc52f4725d0c7b69b28d
MD5 ef07548eb96af5081f09ebb048ea784f
SHA1 66cd8c675f2038abbe54f4db2aeacbfd18678700
SHA512 9b49ac4f31caac71dee92193554850585a46180c971ffa2f1380d874f78ca6a55dd4339e6f7ae2d0cd7f2f1cf91c1c0e55de6401b9b97ef4d1e0028caba00aa4
TLSH
T1E531D851EB15FA79696B62FA83CBCF46054B032310A91028BA6765BA586583409C9F2A
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00149.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00149.png
Size 1KB
SHA256 2cdc53ada2f8fe7bb02279cb74b25ebf63448a007bd890422661a494ae6c9373
MD5 e8036ca0a96c000a66a7d669c884af09
SHA1 644f7aca2f1afcef259229d47367df443c8b35aa
SHA512 01e8de4f06e93b19bc3448f595ce0d02ffcefbcd401aa8037c9f3a74a9a8c39abfb3aec5d50b835cf086eb4d76143a920fc22780159dc6ea90aaacfda6407ac6
TLSH
T15331E9F3A649243BC648D85A0AD9277BCC3CB6AC64D467193D5F55A6CF5B388D8C0F08
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00150.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00150.png
Size 1KB
SHA256 9f389a145dd5e99604902901d66a75dcbaecb6a3da2186e3b210a93838b06f82
MD5 2732dd0bb9eaea69bbd26b02919d03f0
SHA1 2a3017ad2ba94ea295c8789b34728c0bcf896229
SHA512 dcaf4ba7095071a131c2e7b45e3cece50c634792e43f70920d83da3eeb00337e11f9bd3f1549a6352362304b46ab2397d728da8fb65ff592bf4522b08d35e180
TLSH
T1E521FB5543128BCA8D89C0F1C23DC9087070497FDD71631F8ECE58C060C9F85D61A41F
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00152.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00152.png
Size 2KB
SHA256 d6026a7c9ddc98e42833336ddd40a69ee1c9dcf1cbf912d9f45ac3eba9d66bae
MD5 6fb7a929ab189a590638f5ea57b8bca4
SHA1 022dac2cb5264cbca8f3eaeb4882d5a32d9a67cf
SHA512 ebc47b4d46d38c27d8e8109f05778aba74f936f7eabbf64a2a01e568210c9b6144d7a001c319e9c7246f6223cb4b769d073c23728ce1f649c2648b8c3828eac8
TLSH
T18C514AF9B933959C20F9E86507E695A02BBD6C296B34D0565C4BDA027F5C093C085F92
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00153.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00153.png
Size 525B
SHA256 e9d783941ca71c370131740daba339933e8ca3e23c11834262ba03c48e273c85
MD5 e0264acf2b9814278aadb7a1266f4e85
SHA1 587a9b63071f84a5263e34232727b7ff4860f832
SHA512 2869dd9184b6bc7976388d2242c5b8f48f54a4056bbcd741ccde9609502e18215cc619120ce3b3f5557aab16e6459ed4475d8f64b68b8fea0c52e5436b7179ff
TLSH
T107F0C08B7942EA2D6AF1F464B39B8163A467257F60854947D8120176649510FE0EF206
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00154.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00154.png
Size 1KB
SHA256 128de8f1efbb2fb972ffdfe38bbf7cd5413e116485b33083a74fe0c57a9e5ecb
MD5 35ace50dcdde9a1b2a163f36caf9c014
SHA1 19f56534f19d4b10b0e1b9132ba57a7546914bc7
SHA512 2afbfb7b9bd8089de87dc3877eab2dc6228639e024be28857949f69b3c0c3970836b1c0a0a06364b0495503df688ad4d13319bf218dd5fc36e5745ff75311a72
TLSH
T1C2312B43F0B59C19DE29117E529F1475B8BD04235B4AF10BAF86041A7668281D6C253F
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00155.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00155.png
Size 776B
SHA256 5089b18ba9a65688445acd8b12977599e4fef19ce18e691f2a8c9f4f50c5df0a
MD5 646f9b4387f02125c609e9d16e2d24be
SHA1 ddcc6fbd36aa06644917f45aa5f50287a355d065
SHA512 3874b9b65df2dabb33d030b02d9b6ffeea342bcc4c9fbfe319f9a6d08fe34abc2305ac5f8beb42e4d056bd2f8ee9f1c5b8af1c704db5cd613e1d023ea4529512
TLSH
T1C90120D62A23B9F99D8589EE830E35E78A594C6341658B1ED8B03C4613AA5049344677
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00156.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00156.png
Size 1KB
SHA256 f7cd10ecfa6590e2f284259d56c8d876c6e74654ba068fc558f4b7c484257820
MD5 9456e87de06fa9d5028863857bb5bd59
SHA1 ffa1ce14ebd80f1dd1555c34c8c12ee04c09f5d7
SHA512 cda0feadceeab10532e540581248e5720cd3ad81325fb993b9ffa43daa252bda6b9937ad8834ec5040e48934d98e67f47a498b95e9e1c3ae3633ab7c7483c125
TLSH
T11921F883D950DFBDD9E0A37183750CA6C1DAECAAC790A206043D84A887E33049838AC9
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00157.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00157.png
Size 1KB
SHA256 4990838b50bd668023fe6730278f0faa6871ff6179586801718297a4264c48a0
MD5 0352d3e4e16b65903a65e87945433e97
SHA1 b3c9900f4655f3c9533e35c710f5634d00cd9b06
SHA512 cceea1088dd632a502d5d5a90fa85b0410c8485ec6fc941ce9433227f8b91dcfdd671d5192dc15c6ec7151bb666a9dd5a14ddf70827bd768358f7686238d47e0
TLSH
T1BB21081D073F9D3851EA2F5687C2C8D0A03B820F0A89705CFD8C66B892FB120E06521B
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00158.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00158.png
Size 10KB
SHA256 c8031ec64f2347faad442bbf73751e64d3c038636067720aaf61ebd4cc21a88f
MD5 9a96c0361c858274710a458e82200d18
SHA1 61a0447e1e5994cc22957d1154e13f7c6bd51de6
SHA512 ee2c9902a870050ed8e88e947b886d49d3a85a91e43cbbeddad090002835bdbc74295c831372748dbccc9f34e60161e956bb3cfb1037a17849c0a37b2c385d2f
SSDEEP 192:wKFl3Ceoh4jBKWOgH2KOc31FYq05BkK3PZP2k4+EM/AyLt550aiJhxkcaICqDioD:wKb73sWOEOfP/k6jR9Lr50ThiZ8Wbv3M
TLSH
T1E422BF21AFAC8C2D5C65333DE88A7B3B63CAF961542F21552A27CB15124D16AEF06893
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bmp00159.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00159.png
Size 19KB
SHA256 05c77ae8a55bc0d8fa45e572d4b2e623976a682d86233e9b50215e4872b94c21
MD5 8b23519a8c8270133e1490f7f4ef36a2
SHA1 944205b5ccf19bf60c1deb0ebda8894eb7b7c098
SHA512 a62165cd240c2b31e203e9a523bbfbfad6b3dcde2c5c23b2ce2a794717eab4eb29d100e3aaa0b759697c4171df2e93423956f18912a112c7c92eae990cc7cb06
SSDEEP 384:8jEE//APcRWhcgLArr491STYMRDviXLoh4rJprQXld/FwNWZryu78WXWKp:8w9aWWtI91RXXkCrJpEXldNwNWr78wp
TLSH
T1B092E0CBAD7591E08C9E758410B8414933D4F0A22D65FED6C8FC991AEBCA732F0A8720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bmp00160.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00160.png
Size 4KB
SHA256 9816bb5f365192f248c18c5602e25a09fd7f3c83c72805c8e7efdd18f7314e4b
MD5 8ffada9673826c87c3568626e0f5fb8c
SHA1 af96866b92df8e7d28cc5daab6037cb7d4ef55ec
SHA512 84c6d072954dfdcc40632d61b332db4fba337436de0098cf3b5d89146188dbfdaf2a9fdadc99cc89b41cc010cb1f45617ebc5a85bbc54fa656abde66105e7791
SSDEEP 96:eAagX9Au/KdzG0Ui0mL1EAaaonc3UawY/L:eA59VidzhtLpWYz
TLSH
T15F916D458EC4C939426F5B0BAE3D75B132AB2488203087F257DED19FE2EAC611BD81C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bmp00161.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00161.png
Size 785B
SHA256 064ecb7bb33de6e6ba34d18b03240a4d7499e6661e922021afd5312619deaa28
MD5 e876c996c6d47a6800954a57b53fc810
SHA1 97e618441396d45c15e01416eb9730bc954681ab
SHA512 2b3d3ced44e7d3b610b56f5e938509f561c6c17de2e7cef6886c8a24b84fb8f7fb550e7d42b9eff27b60fa109063994066a8559cec87e1533bd6d6ec99a51748
TLSH
T10501BAC5237AFC1C035D39B9DD278B9CCC3C285D4D92085E7CD54C4218B555CE17B201
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00162.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00162.png
Size 845B
SHA256 050f2a50f7224e05e00ea40689bfc0d8773872f70b1065eda7d4f38c23dc6fae
MD5 feebd550c213f1334ac0fe8995b87a2b
SHA1 b3ee144023a9f16c37ba2d5a75a11e0bd7e1f189
SHA512 7e265ca15e0f0467cec092abfca5d24a6707fb3316c4f52ee841f947b4fc639f94fd564045917df64a500268c89f30955c603f56d1d7e02e17f74c04d6282e03
TLSH
T15701654B82C848E8D6D90537F1B33E6FF66B99C343910338F434115CF53958695409F0
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00163.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00163.png
Size 1KB
SHA256 2bfa0569fa76ea9dafc8cab3bbf38dedd18a88846afb4734696feab7d4576b77
MD5 98e1672a5c1632fceeeeef6389f3d45b
SHA1 fadca33faee7fe6d8f05a905c4dc4e9cfd2b35ff
SHA512 015081026d6e06ed377f1a948ad7a67b4f38be8012b7528c30db3702de530e9dee4c29d3b0f905bf8152df917df18620295c5ed6db49f0869e5e7e00ebdeb420
TLSH
T17B31F48ACAAD042BC02C016B8EC0E51CC89D289FF37684364D29BA23CDFD011B099766
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00164.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00164.png
Size 3KB
SHA256 7af0a9e99f8c27455fb6b82533bfa0f2774c3557661fa4746163526c81619718
MD5 ac6a09d23776dd38e6f4ef83bc578fae
SHA1 f1f6cae0d4331390401e59ccdaab299860a12ec3
SHA512 cd99fe864c9c2ae48fa7aaf16ff6f439d9a43f7c8821a8a36cc2bb3099f612c45642a48a74387cc36b6f0827b26af8b5e5ffc2c89c4975fc25feb859d77f4e2d
TLSH
T1B3717CD7F944ACE766C3D77E73B69899F405430ACB2701541B203ACC160AAAEA0EC463
MD5 SHA1 SHA512 TLSH

Submit Download

bmp00165.png

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\bmp00165.png
Size 4KB
SHA256 2c63d1f6443ee977eac9f36e34b0a5866103bfe24a98c2c9bd3894b33f054ae8
MD5 d1008e63f96a263e095c08939eeaaf65
SHA1 b55623eaac1b1e24fd169173f9c3e33be8f60e6e
SHA512 782de2d840b189ff231b71786d9724d6e4e965c21f6cf0d7b7a325ee1c992851266dcb94742059670e4d202647cf7eea0c6a07c60dc41f3f2246e88566a27344
SSDEEP 96:cGkyZrLWhyFXDBVozzWA5rE0lZcJjSQ0K2ZP2NFk3M/oNvag3:XPuyF4zyylZcBSHVMNV/o9ag3
TLSH
T15E917DE3F334D0F856C4901B7EA7A6615A7D2159C0448A9DE76B9F10E3BB21B02EB306
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-4LDTT.tmp

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Default\1x\is-4LDTT.tmp
Size 1KB
SHA256 a0a1c6ea69b0a6a1aa6d6bd6bd295e8df710ab4f819c1aeecf2c5786f26d1059
MD5 5bb22ab624d9c111ccff980846e21c99
SHA1 a200fec196a8f0a4b798d3fa73f2e715ed547835
SHA512 0b9c2a9a0b18bebe29790355affeab7cdfcf4955e7464c9660c08d737850ad3ec7c8457be8980e567a8d922fe28beec8f29ed4ae30ca4a1e05896669ea26736d
TLSH
T17C211AF582C84319B6378C7707B70645EB8AB09260E9C4362DCD6E202E4C3B849AF4DF
MD5 SHA1 SHA512 TLSH

Submit Download

is-1K23T.tmp

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Promethium\1x\is-1K23T.tmp
Size 1KB
SHA256 7f489f7a78e8153edd85b24f6f724a21895d10d5c8f40197c7af7e68960bda66
MD5 c2636cab1581b01001bd665189fda63c
SHA1 76b394eea28541efc8574bd7773a35e1fca67ce5
SHA512 5387376cc01d2d638c628d20c0471d582896641b9a5236bd78f76331a92b173d59a3d09cdda38fa2c648a07c3716972e657f5ab4868557d5bc928bcb36d721d7
TLSH
T1B23152C1299355E4E718D03BEE656C0716617D23361292FA0CF3A6567128A88DBB8317
MD5 SHA1 SHA512 TLSH

Submit Download

is-L81IF.tmp

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Promethium\1x\is-L81IF.tmp
Size 1KB
SHA256 d34652d56f2a61d28d1c350fc180a1ce1642c29bcb5fe05a77b9b256711468f4
MD5 3d370826d1b4c223b7975cbc2a064eb1
SHA1 8eabeabf9798ee63cf7cbe3df3f2c22c5aa4798c
SHA512 b502d2dd5e572705a7d7a75060ecd5c20e8f0f7307dfad659ebd3c62079d48bba0b3ba80117b62412ad2bc0eb114e8037c9e8ae9201b30acd72e9217861e4d6a
TLSH
T13931838A6E4B0AE8EB0A9537FEF54E0358D4FD23358424C10DFB80979830980D734B93
MD5 SHA1 SHA512 TLSH

Submit Download

is-2N030.tmp

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Promethium\2x\is-2N030.tmp
Size 2KB
SHA256 981ca03de861ee80f0049bd33abbbcc2322aaa23499f31c6bf274750cc14dfd8
MD5 2b4d9090fdb2bdedb973155412b06ab8
SHA1 11d7b407d00d081414fbed0f35b8cfb491e0e90f
SHA512 6d0428b866103203b38fb06b22364c8e3591adf23fcc0b32d7f5de048348a4af1e2d7913f39de84e7e47eca3c41995365959c2a1c77243a3d5f42809c5d14072
TLSH
T11A51D7852E4BECE0E73612BBFE925D7385583C23361AA8E499F34046007AD21D37E057
MD5 SHA1 SHA512 TLSH

Submit Download

is-BTPVQ.tmp

Path C:\Users\Admin\Documents\Xfer\Serum Presets\Skins\Promethium\2x\is-BTPVQ.tmp
Size 2KB
SHA256 f8e352e45b99c51541c641e79336b0ac71bed60de31f866caed96e42b42adae4
MD5 5d857b9000d78b502e2ffb8d0e6647de
SHA1 0e27ede07ddb9dcc6ddf1f9831c4c70988ca066c
SHA512 d3ebb20a9cff226947e477aa990982e0a8a4b27202e7b915d66622531e9e7832a3a1e9ecb86c5d27688498a88d3fbcec3b4272a340be8a4a03e52db99d5161f7
TLSH
T1E151E7834D23FCD5E7174137EE290D37A815BDB3BA8206C6A8FB506250B6894E375883
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1948-100-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-86-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-57-0x0000000076810000-0x0000000076835000-memory.dmp

Download

memory/1948-56-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-54-0x00000000744D0000-0x0000000074503000-memory.dmp

Download

memory/1948-53-0x0000000076810000-0x0000000076835000-memory.dmp

Download

memory/1948-52-0x00000000768F0000-0x000000007696E000-memory.dmp

Download

memory/1948-51-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-49-0x00000000768F0000-0x000000007696E000-memory.dmp

Download

memory/1948-47-0x00000000768F0000-0x000000007696E000-memory.dmp

Download

memory/1948-44-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-50-0x0000000076810000-0x0000000076835000-memory.dmp

Download

memory/1948-43-0x00000000768F0000-0x000000007696E000-memory.dmp

Download

memory/1948-177-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-178-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-179-0x0000000003E20000-0x0000000003E77000-memory.dmp

Download

memory/1948-66-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-61-0x0000000076EA0000-0x000000007747C000-memory.dmp

Download

memory/1948-70-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-209-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-72-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-228-0x00000000079E0000-0x0000000007A21000-memory.dmp

Download

memory/1948-233-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-236-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-239-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-238-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-237-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-74-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-76-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-78-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-80-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-215-0x0000000003F90000-0x0000000004036000-memory.dmp

Download

memory/1948-240-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-241-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-242-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-63-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-64-0x0000000074AF0000-0x0000000074D17000-memory.dmp

Download

memory/1948-65-0x0000000074320000-0x0000000074448000-memory.dmp

Download

memory/1948-68-0x00000000777E0000-0x0000000077935000-memory.dmp

Download

memory/1948-69-0x0000000076EA0000-0x000000007747C000-memory.dmp

Download

memory/1948-71-0x0000000074AF0000-0x0000000074D17000-memory.dmp

Download

memory/1948-73-0x0000000074320000-0x0000000074448000-memory.dmp

Download

memory/1948-77-0x0000000074AF0000-0x0000000074D17000-memory.dmp

Download

memory/1948-79-0x0000000074320000-0x0000000074448000-memory.dmp

Download

memory/1948-82-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-58-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-127-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-126-0x0000000074320000-0x0000000074448000-memory.dmp

Download

memory/1948-1573-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-141-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-139-0x00000000744D0000-0x0000000074503000-memory.dmp

Download

memory/1948-147-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-151-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-84-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-92-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-98-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-8-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-103-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-107-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-111-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-115-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-117-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-118-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-120-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-123-0x0000000076C60000-0x0000000076D11000-memory.dmp

Download

memory/1948-130-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-138-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-145-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-170-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-149-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-132-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-125-0x00000000753C0000-0x0000000075441000-memory.dmp

Download

memory/1948-75-0x0000000076EA0000-0x000000007747C000-memory.dmp

Download

memory/1948-67-0x0000000076980000-0x0000000076A62000-memory.dmp

Download

memory/1948-59-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-46-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-48-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-55-0x0000000010000000-0x0000000010061000-memory.dmp

Download

memory/1948-60-0x00000000777E0000-0x0000000077935000-memory.dmp

Download

memory/1948-62-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-45-0x00000000768F0000-0x000000007696E000-memory.dmp

Download

memory/1948-34-0x0000000003F90000-0x0000000004036000-memory.dmp

Download

memory/1948-35-0x0000000003F90000-0x0000000004036000-memory.dmp

Download

memory/1948-37-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-25-0x0000000003E20000-0x0000000003E77000-memory.dmp

Download

memory/1948-26-0x0000000003E20000-0x0000000003E77000-memory.dmp

Download

memory/1948-27-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/1948-9-0x0000000000400000-0x0000000000585000-memory.dmp

Download

memory/5908-2-0x000000000041E000-0x000000000041F000-memory.dmp

Download

memory/5908-0-0x0000000000400000-0x0000000000439000-memory.dmp

Download