Analysis

  • user interaction
    yes
  • max time kernel
    526s
  • max time network
    597s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    02/10/2026, 20:18

General

  • Target
    Yammi_Setupx64 (1).exe
  • Size 239.7MB
  • Sample261002-y3mcbatves
  • SHA256 b496a0eeae13cb057070b7b81fa4940e36f3830272bf68f4138d3f32847c659d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes a file named after a Windows system binary 1 TTPs 1 IoCs

    The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

  • Loads dropped DLL 3 IoCs
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Yammi_Setupx64 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\Yammi_Setupx64 (1).exe"
    1⤵
    • Executes a file named after a Windows system binary
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2956
    • C:\Users\Admin\Desktop\YammiLoader.exe
      "C:\Users\Admin\Desktop\YammiLoader.exe"
      2⤵
        PID:416
        • C:\ProgramData\WindowsRunTime\payload\svchost.exe
          "C:\ProgramData\WindowsRunTime\payload\svchost.exe"
          3⤵
            PID:1652
            • C:\Windows\explorer.exe
              "explorer.exe" "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
              4⤵
                PID:5336
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:5372
          • C:\Windows\explorer.exe
            C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
            1⤵
              PID:5464
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
                2⤵
                  PID:5708
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
                    3⤵
                      PID:5944
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x304,0x7fffbb9fc188,0x7fffbb9fc194,0x7fffbb9fc1a0
                        4⤵
                          PID:5980
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,2441555131157507644,15473547829782836663,524288 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:3
                          4⤵
                          • System Time Discovery
                          PID:4932
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,8049211586788274043,11088944394027109195,262144 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
                          4⤵
                            PID:4832
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,11900296559302321595,14715377683367498662,524288 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:8
                            4⤵
                              PID:2888
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,10961042399126426055,4453270631395736327,2097152 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
                              4⤵
                                PID:1472
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,6065130381471487699,4622748791274718178,2097152 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                4⤵
                                  PID:4792
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4064,i,6797828285091427075,10282026841363758818,2097152 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
                                  4⤵
                                    PID:3084
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4068,i,15708769286410898730,8363220844360561230,2097152 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:2
                                    4⤵
                                      PID:4000
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,5740040677683857719,12712749415178442678,524288 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
                                      4⤵
                                        PID:4864
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,2761818617221890466,8823154105409577873,524288 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
                                        4⤵
                                          PID:4748
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,2940592288407707607,9831706105672150009,524288 --field-trial-handle=2408,i,7613093768133363368,9128604901239157677,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
                                          4⤵
                                            PID:2172

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          shez_debug.log

                                          • Path C:\ProgramData\WindowsRunTime\logs\shez_debug.log
                                          • Size 231B
                                          • SHA256 91dfc77f44ce4ee14be19b095d2a32ff84fa619f782ff22565f5f7a181057e83
                                          • MD5 SHA1 SHA512 TLSH

                                          shez_debug.log

                                          • Path C:\ProgramData\WindowsRunTime\logs\shez_debug.log
                                          • Size 769B
                                          • SHA256 8bb45c7ae7389bf0b4e158be8f601bf9d5237ac1cc76fb4fd085baf0c874ecea
                                          • MD5 SHA1 SHA512 TLSH

                                          Login Data

                                          • Path C:\ProgramData\WindowsRunTime\staging\collected\browser\Login Data
                                          • Size 40KB
                                          • SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          CURRENT_d53b00

                                          • Path C:\ProgramData\WindowsRunTime\staging\collected\browser_localstorage\CURRENT_d53b00
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          MANIFEST-000001_3be7a2

                                          • Path C:\ProgramData\WindowsRunTime\staging\collected\browser_localstorage\MANIFEST-000001_3be7a2
                                          • Size 41B
                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                          • MD5 SHA1 SHA512

                                          20e219d6-e96d-4846-ae8a-739e6b773cfd.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20e219d6-e96d-4846-ae8a-739e6b773cfd.tmp
                                          • Size 8KB
                                          • SHA256 11db34b29046243e9b885ff539bd6fff45efed899fc5d744eb9d86c732529812
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 67eec63ac68fbb0c1370804e730eb2380e37e239eeab08ad3acdbce09f2d4da7
                                          • MD5 SHA1 SHA512 TLSH

                                          8e8c3a6e-3ec4-4605-ad1b-4978bc2f7bc0.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8e8c3a6e-3ec4-4605-ad1b-4978bc2f7bc0.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          d199499e-387d-492a-8f58-7cc0a3ec612f.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d199499e-387d-492a-8f58-7cc0a3ec612f.tmp
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          ff6c165d-9b6e-4693-9c7c-76e0310902ea.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff6c165d-9b6e-4693-9c7c-76e0310902ea.tmp
                                          • Size 8KB
                                          • SHA256 d0f14bd681440398a79abc6a1e7b392c29a442b1f5bd996c78a3228a9a607b1b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          D3DCompiler_47_cor3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\D3DCompiler_47_cor3.dll
                                          • Size 4.5MB
                                          • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationNative_cor3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\PresentationNative_cor3.dll
                                          • Size 1.2MB
                                          • SHA256 0002f81ee5c803cb90329f2ab08556fd6de29d1ddd6d83446d1d4c19748f25e8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          wpfgfx_cor3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\wpfgfx_cor3.dll
                                          • Size 1.9MB
                                          • SHA256 f4f7a44a3480c0b7b2d5a603cb7d0c41d9ae9b2633a8b30eb59f66a2697045f3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          shez_debug.log

                                          • Path C:\Users\Admin\AppData\Local\Temp\shez_debug.log
                                          • Size 1KB
                                          • SHA256 50d1f3c88f86c855ca257763642dd10d7788f54709f668bd2acf77aadebe2185
                                          • MD5 SHA1 SHA512 TLSH

                                          shez_debug.log

                                          • Path C:\Users\Admin\AppData\Local\Temp\shez_debug.log
                                          • Size 2KB
                                          • SHA256 abf2d77a46d21de5d7b4a4fb77c4a922dd9aab2ede756f9d43726b5063dba493
                                          • MD5 SHA1 SHA512 TLSH

                                          shez_debug.log

                                          • Path C:\Users\Admin\AppData\Local\Temp\shez_debug.log
                                          • Size 3KB
                                          • SHA256 f08c7541dcad10f9dbee2c185545bfb429cdca397ac1eea16c63fc1af3d1b18d
                                          • MD5 SHA1 SHA512 TLSH

                                          selena_zodiac.jpg

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\Assets\selena_zodiac.jpg
                                          • Size 157KB
                                          • SHA256 9c18a4ec9916e45ab0faaf297fe6e363259f45b314f9b508536efb725e803cff
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          DirectML.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\DirectML.dll
                                          • Size 17.7MB
                                          • SHA256 9c9e6d822561c6c41b90e6994b3e8857cf1d66dbfb1e0c4c799c7c89b4e92da1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          DirectWriteForwarder.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\DirectWriteForwarder.dll
                                          • Size 470KB
                                          • SHA256 6c3f31ce627c2b89ef9b9a2c14d6298f0803a2f912563caca27134d5510a2de0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\Microsoft.VisualBasic.dll
                                          • Size 17KB
                                          • SHA256 2d332647624c5b26369f607affe64f31f9ca94e22b26f324caeba5ef8856a9a0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PenImc_cor3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PenImc_cor3.dll
                                          • Size 154KB
                                          • SHA256 d375b118832e672d8175d2c4610dc04cb416d6ab0da2bc0e1ba620007e4f45e4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationCore.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationCore.dll
                                          • Size 7.9MB
                                          • SHA256 964dbdf3bbb5b7e8606d40bd7c78727c46f9fbe3b5a0ff34aebb18706f3eaa50
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework-SystemCore.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework-SystemCore.dll
                                          • Size 38KB
                                          • SHA256 7d8d6216e4e5273149e9298d15b5d2d7ddd54cf578f21a96d12aba544e8b62a9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework-SystemData.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework-SystemData.dll
                                          • Size 34KB
                                          • SHA256 184a15e4d3d80ba41d2f6939efce78d975a022212765ee3598a385943830474a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework-SystemDrawing.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework-SystemDrawing.dll
                                          • Size 34KB
                                          • SHA256 5de0cb0ed48a887f65cf9ac19bd3ac49735a8246efaef35c35247d765d02007f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework-SystemXml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework-SystemXml.dll
                                          • Size 34KB
                                          • SHA256 c787bb800e0675b3ae74ab06c833a42c26169c609ab17a3ed42b900ab510289a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework-SystemXmlLinq.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework-SystemXmlLinq.dll
                                          • Size 30KB
                                          • SHA256 ee22aa4582d936356f1d7987f7c885943858c99abccb6c99a359e13c24c6f383
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Aero.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Aero.dll
                                          • Size 430KB
                                          • SHA256 717534238a8e121f117dd71f5ec2454c665e0675ca88a5a49c7e64fdb52c562e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Aero2.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Aero2.dll
                                          • Size 434KB
                                          • SHA256 11e49affaf827256262837cf48e50a0bab1aee6511138411354004844a3eaccd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.AeroLite.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.AeroLite.dll
                                          • Size 234KB
                                          • SHA256 b6ab63ed6e5dfb575c946188d9c4d25987634234944974a2ece5afec365c1b2a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Classic.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Classic.dll
                                          • Size 266KB
                                          • SHA256 0e07764432408135b1005b9e34c0388b0ed71d0cec51ee8392209f70d22787d6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Fluent.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Fluent.dll
                                          • Size 958KB
                                          • SHA256 7a1b385244bd92884c2a90c5d29c56d67124940be47934efaffe979f6de30245
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Luna.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Luna.dll
                                          • Size 654KB
                                          • SHA256 6ba672d1387e3c56cf73184fe4b497ce3ff12f5b5addc5adab4865b783a9a7fb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.Royale.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.Royale.dll
                                          • Size 326KB
                                          • SHA256 89de0ef9234473bdd5835fd1937f3256e3701822b9e5059a2dc7b64a9e9310a8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationFramework.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationFramework.dll
                                          • Size 15.1MB
                                          • SHA256 21bdb53902589b12f71af2bbb3138bf33b253330c33687137d15694d8868691e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          PresentationUI.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\PresentationUI.dll
                                          • Size 1.2MB
                                          • SHA256 a8d9ef8a5f9e383f078d614ac2b8e6ca4cc4a7d7cd55d6c910f01455b74fb817
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          ReachFramework.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\ReachFramework.dll
                                          • Size 1.5MB
                                          • SHA256 1747d6374417fff91992e20eb58fa957f2aa71aafe7b87e7d10219699d984601
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          ShidoK.exe

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\ShidoK.exe
                                          • Size 148KB
                                          • SHA256 4cfcd9df73030e8d372145a180bccc1bdd8f581cc7baaa54ddb5150a02af8dbc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Drawing.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Drawing.dll
                                          • Size 20KB
                                          • SHA256 97c156452c5a19365f6957438928ecbd7eac787bdaefeb0407676a66519ce1e9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Printing.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Printing.dll
                                          • Size 946KB
                                          • SHA256 644251e07e66f9460d0b593dfd54d870e97b4abc3b7d288c84a1c752608da61f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Controls.Ribbon.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Windows.Controls.Ribbon.dll
                                          • Size 1.4MB
                                          • SHA256 0c8281d003cf5851d4c22ccfec1abc541ab0b95c05f9fcd2766abfcca3f77479
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Input.Manipulations.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Windows.Input.Manipulations.dll
                                          • Size 138KB
                                          • SHA256 e2f1e318c9cbdd936248b96377231898a48068a8873fae14eeecfe30e97e5b93
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Presentation.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Windows.Presentation.dll
                                          • Size 30KB
                                          • SHA256 f8ff101c44d40a59872e625192aaef40d6bb31f280ed6ca5ed52dcb179cd22ac
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Windows.Primitives.dll
                                          • Size 378KB
                                          • SHA256 d3a2b66ccce1a92e2e2be0cd48c6f8921abf6ca19591a9b2fa9e436b163c2825
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xaml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\System.Xaml.dll
                                          • Size 1.3MB
                                          • SHA256 cd81c1e87ea2e6a2685aefa969981c0f15a990ae4feb7d41c15ca972584ece0c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          UIAutomationClient.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\UIAutomationClient.dll
                                          • Size 398KB
                                          • SHA256 6f5cd2aa9038bd0aee1af82d29190acc5d2bf83e70141a13bcef98aebee16aff
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          UIAutomationClientSideProviders.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\UIAutomationClientSideProviders.dll
                                          • Size 838KB
                                          • SHA256 d2401cb74729ce902f988d0137b7120a08321be20bb5b828a96873fe93723ed8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          UIAutomationProvider.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\UIAutomationProvider.dll
                                          • Size 62KB
                                          • SHA256 b43d58010595564ce9e189c59480816368036b6210f971891799a5b626e2a9c5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          UIAutomationTypes.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\UIAutomationTypes.dll
                                          • Size 290KB
                                          • SHA256 353eb09f5a0f05596817d6bbad52aca67c1ca4c6cdb3aeb029799fac485b8d37
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          WindowsBase.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\WindowsBase.dll
                                          • Size 2.1MB
                                          • SHA256 b1976b2206f757980ff35fed76d9f9e7cbf8f8cfb4d0e56a1e400918cd90492f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YammiLoader.Core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YammiLoader.Core.dll
                                          • Size 20KB
                                          • SHA256 ad05018f23ccc75faf079ef2c56d1d3b58de776144849ddf86f8ebd2193286a8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YammiLoader.deps.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YammiLoader.deps.json
                                          • Size 35KB
                                          • SHA256 79850294e48b14149c3296fc7ddaba2c7a6f7c97ed3feffee825d320ac76a3c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YammiLoader.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YammiLoader.dll
                                          • Size 49.7MB
                                          • SHA256 d7fe5920c5a74a15506aba9a40af85f14f1f9907e74a2d30f77d5b3e6346b404
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YammiLoader.exe

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YammiLoader.exe
                                          • Size 403KB
                                          • SHA256 422e712d642bf68b51ae838886a9a74f27108475433163a33b69d6a2bffe5102
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YmmiaV2.deps.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YmmiaV2.deps.json
                                          • Size 52KB
                                          • SHA256 49df09352fe2fa0ed094a35ba5b7aba14e7c9da9370ff7e9dd87479756ba18c3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YmmiaV2.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YmmiaV2.dll
                                          • Size 7.3MB
                                          • SHA256 35150f66d0cda782188649a5b195f89ab66038bd6834883ec346383fbd664296
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          YmmiaV2.runtimeconfig.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\YmmiaV2.runtimeconfig.json
                                          • Size 515B
                                          • SHA256 89ad1ea5c9c20b6b266547ef27c0ae3840cab5642d3c2aedf06b7026245671dd
                                          • MD5 SHA1 SHA512 TLSH

                                          mscordaccore_amd64_amd64_10.0.726.21808.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\mscordaccore_amd64_amd64_10.0.726.21808.dll
                                          • Size 1.3MB
                                          • SHA256 1319ec27d52a224b1eb79746995e14467b0188380faa98e7aca75225c2554c27
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          onnxruntime.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\onnxruntime.dll
                                          • Size 16.4MB
                                          • SHA256 f5131591edac6b0a8090d0e329040a49319d7a689cb5b465235fbf7030fa8027
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          onnxruntime_providers_shared.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\onnxruntime_providers_shared.dll
                                          • Size 21KB
                                          • SHA256 3b27e1417d12b73a6a34d80414c083e359e092d2f0ce572d7e67be8cdbe9e825
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Accessibility.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Accessibility.dll
                                          • Size 20KB
                                          • SHA256 94d6dc96386ad1dbafa2b846cb977f28f9a5a4706656fca2560d5ac4eaf9d7e0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Google.Apis.Auth.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Google.Apis.Auth.dll
                                          • Size 228KB
                                          • SHA256 1b6e02eb99aecf092e1293fcf911d47f7c590f6ba37e13fe432d89786af40d83
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Google.Apis.Core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Google.Apis.Core.dll
                                          • Size 83KB
                                          • SHA256 74d136e4dd40da052f6c70fd45dd8955a4428db18bfc6cdf788152542a225075
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Google.Apis.Drive.v3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Google.Apis.Drive.v3.dll
                                          • Size 171KB
                                          • SHA256 4d9ad2a6ef71f2413eaf4ba4ffd69af595e05743ea3eda4f32eaac2ea42135fc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Google.Apis.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Google.Apis.dll
                                          • Size 81KB
                                          • SHA256 4338f56da4d8f23270e3e21bed6c95243ee75e55e0f8a42ab510f7a4919b5759
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.CSharp.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.CSharp.dll
                                          • Size 958KB
                                          • SHA256 1216294a655485de747c175e9bc1891aa693581a75f041a4ee8a4469cc6621da
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.Data.Sqlite.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.Data.Sqlite.dll
                                          • Size 170KB
                                          • SHA256 86831b3786d98d7629c80faeaacf3bdc8caab18f18b2eb2905aade667127578c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.DiaSymReader.Native.amd64.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.DiaSymReader.Native.amd64.dll
                                          • Size 2.1MB
                                          • SHA256 315a61c47c41b8d4c815f4274bb6584c1d24b4640c7eedc354ed5b03a9a1361e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.VisualBasic.Core.dll
                                          • Size 1.1MB
                                          • SHA256 1737670fcff0099a1c1671fa311d15f6607cfe61b16fae6bf3c5e944949c3995
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.VisualBasic.Forms.dll
                                          • Size 242KB
                                          • SHA256 e8caa9c5d18e95652492187e6540540aa52865327b5e6c5ca9d8e63277d1183f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.VisualBasic.dll
                                          • Size 18KB
                                          • SHA256 aaa8e587da2680eef010a4442248baa5863a69f4b62f75eeab8d43666a200e21
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.Win32.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.Win32.Primitives.dll
                                          • Size 15KB
                                          • SHA256 11de423338b231e3deef5c305ec503c21b80125e9abea7f447ef24019d14cfae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.Win32.Registry.AccessControl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.Win32.Registry.AccessControl.dll
                                          • Size 34KB
                                          • SHA256 e48f00f647f6b03c5a3d0ddcf5d550913381e14213cfe1242829852cbb3d1574
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.Win32.SystemEvents.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Microsoft.Win32.SystemEvents.dll
                                          • Size 114KB
                                          • SHA256 a766b8de9eba2da537ee3d596d367efb92b3fdd848c33564001b4d00ba89f7d1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Newtonsoft.Json.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\Newtonsoft.Json.dll
                                          • Size 695KB
                                          • SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          SQLitePCLRaw.batteries_v2.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\SQLitePCLRaw.batteries_v2.dll
                                          • Size 5KB
                                          • SHA256 94ac800c6b93ae50a025f247547781debe18391110667c5e242f51d8ac188ffb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          SQLitePCLRaw.core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\SQLitePCLRaw.core.dll
                                          • Size 50KB
                                          • SHA256 3d2ed8e186f124f988ebdb45d0354185b424357be2433bba0033ab9ec31bd25b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          SQLitePCLRaw.provider.e_sqlite3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\SQLitePCLRaw.provider.e_sqlite3.dll
                                          • Size 36KB
                                          • SHA256 60ab6cfa2f3cc907bcee4d0c1264d5c36de0a3da701dbebf5efc9d542ce69fa2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.AppContext.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.AppContext.dll
                                          • Size 15KB
                                          • SHA256 ce6680f8c426d4faf30d2dcd56e0303803519bdfb7b853c854ea035fde8a0e76
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Buffers.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Buffers.dll
                                          • Size 15KB
                                          • SHA256 c5fd49c6c5b30b07f8a8c2d4b7de36974f5da3554edd07eba56e90d7a7b971d8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.CodeDom.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.CodeDom.dll
                                          • Size 466KB
                                          • SHA256 4b14091b990cc7cdd263e89c3e9c4c45cb043ca2a11e3980ae9b38d4cbc4401a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Collections.Concurrent.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Collections.Concurrent.dll
                                          • Size 198KB
                                          • SHA256 2c2ebaea56462b348a598056f158627c14e5ee581062d780ab9ccdf2b6c695c9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Collections.Immutable.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Collections.Immutable.dll
                                          • Size 926KB
                                          • SHA256 157b8930e8ca0cc931d42e79f96d2f22516e03c7e6f44967565c251bd19d83c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Collections.NonGeneric.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Collections.NonGeneric.dll
                                          • Size 102KB
                                          • SHA256 f86617cb33a02d52fb7b7102062b1f692d98067172c8e012cdfd5486b50e9496
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Collections.Specialized.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Collections.Specialized.dll
                                          • Size 102KB
                                          • SHA256 8ab70b670a55bde26b549aeb95c767c14b79dcfaf6f075096d9c0e84a5eae904
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Collections.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Collections.dll
                                          • Size 290KB
                                          • SHA256 11de530ddce2c99a0be5fcefa0e040062860cd41824834f42e06761a949af957
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.Annotations.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.Annotations.dll
                                          • Size 194KB
                                          • SHA256 6e78fc4a37107158e768e4e5017972ac7600097572707e243e0a64db68baf162
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.DataAnnotations.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.DataAnnotations.dll
                                          • Size 16KB
                                          • SHA256 cbe648bc8e2fc7deeb0b71d1bf30cd17fa36bc6fca88e8cd73d456a31fc1f91f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.EventBasedAsync.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.EventBasedAsync.dll
                                          • Size 46KB
                                          • SHA256 e35fd260fd7e549a5eff3060285ed4edfa4bb0b486722bc104a88fdc3a57a77f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.Primitives.dll
                                          • Size 78KB
                                          • SHA256 85485dd7639c9449b7d90e305e66612bcd46d14bfb2c216eb6b5c1572ddec1c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.TypeConverter.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.TypeConverter.dll
                                          • Size 750KB
                                          • SHA256 ad1c1c041a1ea4b59e7f5168d9061bcb67217c4d6d7f6389418cdbaaf7bd3dba
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ComponentModel.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ComponentModel.dll
                                          • Size 30KB
                                          • SHA256 e2bcbd02fdebb1d53b473d9b820b4849a6cafb7052f7bbdd4cc705cac7904bef
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Configuration.ConfigurationManager.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Configuration.ConfigurationManager.dll
                                          • Size 1022KB
                                          • SHA256 8fd8551e2c9be185cc6ff88081cda4adeeddf10059701b198c996bf0a9e26310
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Configuration.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Configuration.dll
                                          • Size 19KB
                                          • SHA256 633cf7e263cae05eaf52c9c10cf7b3e7b35b643781f81b0b2ab1ac75ca5caf53
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Console.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Console.dll
                                          • Size 166KB
                                          • SHA256 3e43370848acffb6fd9589139348505d7a205fa46fbed9c86a54110e0a285243
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Core.dll
                                          • Size 23KB
                                          • SHA256 1492e32a17b2596098eb824ecf35b4a8c3beee104309ec376b44f64fac26bc8c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Data.Common.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Data.Common.dll
                                          • Size 2.6MB
                                          • SHA256 27afad1abcfd8ebcfa70bcf5e8442d407d1cbfcaac8fe37f7e54f8ac387778bc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Data.DataSetExtensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Data.DataSetExtensions.dll
                                          • Size 15KB
                                          • SHA256 78c2cb1d66ea4dafa74199c0ba8429877a6689abf0bcc8a94feb36c578008c4d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Data.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Data.dll
                                          • Size 25KB
                                          • SHA256 f64d310f25e68254dd6d1a91f80feeac78d967857712a9a536146bf2a3fa6179
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Design.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Design.dll
                                          • Size 23KB
                                          • SHA256 d427b80aba298a7e2026438267394dc70f70f5134c46b77d96b7d940ab7f0172
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.Contracts.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.Contracts.dll
                                          • Size 16KB
                                          • SHA256 a21a82f1af74383b7bf72facbfac474625bdef3da58c02cff531299b5aae6650
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.Debug.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.Debug.dll
                                          • Size 15KB
                                          • SHA256 67c47156faaf5c3d05cc58dc0746c7ce6d752acd4e984d18d95f4d17a8413142
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.DiagnosticSource.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.DiagnosticSource.dll
                                          • Size 490KB
                                          • SHA256 44d30feb5d82c38553d63ce8b7890f0433483d17017f311de04131d68d4ff8d6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.EventLog.Messages.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.EventLog.Messages.dll
                                          • Size 782KB
                                          • SHA256 e0acaa275f33f652057c418f3f434f24b65321ecadcc220ffce58f65e2bf47f8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.EventLog.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.EventLog.dll
                                          • Size 358KB
                                          • SHA256 30c6365a74ba0d4007dfe6f97e0556e03b99e709ec051679fb6689ff85e09e87
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.FileVersionInfo.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.FileVersionInfo.dll
                                          • Size 46KB
                                          • SHA256 a9c6f786d783a0a8ddd8ba95a35afd88b2d4daf8867f32805e348549575c8574
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.PerformanceCounter.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.PerformanceCounter.dll
                                          • Size 294KB
                                          • SHA256 789a4fcc2b45beeb929bcc95b7e08fceb2f9da2fecad8ca2a12c4dcc9bb9c15e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.Process.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.Process.dll
                                          • Size 322KB
                                          • SHA256 786e7825067b48fd2cb9e10b1c971f547a0e83814a1a9b7951b8b64ca1e0b808
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.StackTrace.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.StackTrace.dll
                                          • Size 42KB
                                          • SHA256 17fa4be3871f8ed533547e735941195ec7a5511e7ffee946a1d221bc08055dae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.TextWriterTraceListener.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.TextWriterTraceListener.dll
                                          • Size 66KB
                                          • SHA256 eac81982e43947419ed7547eb86c27020c1faab60904c7dcdd15b5caecf2e4cc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.Tools.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.Tools.dll
                                          • Size 15KB
                                          • SHA256 f662787dfd4770572b07b47456861f2bbe11389fd23f57d2c60c6e82c513c8ef
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.TraceSource.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.TraceSource.dll
                                          • Size 138KB
                                          • SHA256 afa1a327cdac6fe57f80e9a4fd3639c2a02713f252a8bf74f2001da5ccbf6c94
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Diagnostics.Tracing.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Diagnostics.Tracing.dll
                                          • Size 16KB
                                          • SHA256 cefaec1cb1859c56a9283e22131125f8f80419847e3d44d81c12ebdc29e1ab4e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.DirectoryServices.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.DirectoryServices.dll
                                          • Size 998KB
                                          • SHA256 b10c12e963c2b7a467531098a16dd7c6259305285dacb86c48363155e547b6fd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Drawing.Common.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Drawing.Common.dll
                                          • Size 902KB
                                          • SHA256 affb145b0c5fd85890437e9ee6bedd59c4cf43ba94939a6cee9466099ef71bcc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Drawing.Design.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Drawing.Design.dll
                                          • Size 15KB
                                          • SHA256 7a72e762130658109366c81c81beaf585b975ce90615e6cc98caf7109aa596c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Drawing.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Drawing.Primitives.dll
                                          • Size 130KB
                                          • SHA256 901590c8843e3f1687484064856069da2b817644b59d49071207479cac31d008
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Drawing.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Drawing.dll
                                          • Size 20KB
                                          • SHA256 9e0f28238766c43f129104d6fbb8633b4e333f9b6b4d8acd8227164a0614c81c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Dynamic.Runtime.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Dynamic.Runtime.dll
                                          • Size 16KB
                                          • SHA256 67c7a1f6874a948aee4f6879793e5f134309f268a99c8e58819b715e5f574b89
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Formats.Asn1.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Formats.Asn1.dll
                                          • Size 234KB
                                          • SHA256 0187cc0406f9dd21cc2c65266f7d997b077015b0460419dd098b87aca12919f6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Formats.Nrbf.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Formats.Nrbf.dll
                                          • Size 134KB
                                          • SHA256 5b206a26d22aed5b8719fdbd0246a6dddaac245ad3b1af5a1af15fd47c58e323
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Formats.Tar.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Formats.Tar.dll
                                          • Size 262KB
                                          • SHA256 03ea8e585a168c7c72d173c2d3a516264783c966e5994b5cb4f5976b45878c4b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Globalization.Calendars.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Globalization.Calendars.dll
                                          • Size 15KB
                                          • SHA256 127810ad24d10baa543903cabda821b7f934b6dda4bbb2dc46cb948e00130b84
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Globalization.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Globalization.Extensions.dll
                                          • Size 15KB
                                          • SHA256 9ca281dcf2234807fc0302429ff19ad30fe94dce5a4d589effa093e01173cf56
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Globalization.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Globalization.dll
                                          • Size 15KB
                                          • SHA256 8d8b45c7e12310ffdd4e5c9159051721e1814b3dc88e3841a6c31c181b4458b5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Compression.Brotli.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Compression.Brotli.dll
                                          • Size 82KB
                                          • SHA256 1f49fe49559809ab37eddfe64ffe3deb13e85a7bd42a849f963758b5047bd9d8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Compression.FileSystem.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Compression.FileSystem.dll
                                          • Size 15KB
                                          • SHA256 64f6f7335253cc9ab6c5a961575ec988bd4b54b9235acda97cb4853076a53be6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Compression.Native.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Compression.Native.dll
                                          • Size 916KB
                                          • SHA256 0875eac9ca794560deed6c3fa93aeba8f4db1c40800cc17efbad830a2ce63b8b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Compression.ZipFile.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Compression.ZipFile.dll
                                          • Size 98KB
                                          • SHA256 75fbd96b17692d790f7dde3af1c2992f6e00830505b467de2698c808f3358f50
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Compression.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Compression.dll
                                          • Size 410KB
                                          • SHA256 f2c3e5790d0757f4a6b53fa3ea800093cc9672088e9ee63cf4a340b05f6d3029
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.FileSystem.AccessControl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.FileSystem.AccessControl.dll
                                          • Size 102KB
                                          • SHA256 b4d72ace86788e28d08f72fdd4fcf442f320906a1801177f3528b2eff93813ae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.FileSystem.DriveInfo.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.FileSystem.DriveInfo.dll
                                          • Size 54KB
                                          • SHA256 d65cc64e18463cc2c76f3b1255eab2f04a1251b4d530f6f3d62aa0b4cca57602
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.FileSystem.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.FileSystem.Primitives.dll
                                          • Size 15KB
                                          • SHA256 2428d1c27f8b5513ef51a318f312a35880fb1c8c765e811dce0316bdda32a355
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.FileSystem.Watcher.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.FileSystem.Watcher.dll
                                          • Size 86KB
                                          • SHA256 305adf0bdfd8599ef6448ce8fe3ec5da39edd7f3f41c266f5834487ad955d9e2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.FileSystem.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.FileSystem.dll
                                          • Size 15KB
                                          • SHA256 a469caa71ceab26dabc7beafb86badf0780c84927f0880516323435dff357998
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.IsolatedStorage.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.IsolatedStorage.dll
                                          • Size 86KB
                                          • SHA256 1ab92ac777fa9cb4d73117822ef0c8c743354d7594762998120f97fc91138129
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.MemoryMappedFiles.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.MemoryMappedFiles.dll
                                          • Size 82KB
                                          • SHA256 d4bfcdb355a1d3912d1cf1520f2271bba39b92062d8cd30916ad6ec74308e030
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Packaging.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Packaging.dll
                                          • Size 314KB
                                          • SHA256 745f0524409c555325738b6fffcbe8edf862dc13fadddc65b12d101b73514b96
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Pipelines.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Pipelines.dll
                                          • Size 186KB
                                          • SHA256 d01350d579b2b4bcbde583d80849f98e0bd73bb68108121fa00c18b117181106
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Pipes.AccessControl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Pipes.AccessControl.dll
                                          • Size 15KB
                                          • SHA256 b885108e3f4b229860ce87e87add32418b6df08808e7a51cdb03f68e468ead00
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.Pipes.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.Pipes.dll
                                          • Size 162KB
                                          • SHA256 436729bb97e389f9ed1371a3b085cb3362b557c0e625f79fe7f13fc86333904c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.UnmanagedMemoryStream.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.UnmanagedMemoryStream.dll
                                          • Size 15KB
                                          • SHA256 c1e8ee1588f0f9011c0bb3fc6c8b781457f20d82da1060c70c9886c995bdc50e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.IO.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.IO.dll
                                          • Size 15KB
                                          • SHA256 86c8f28afd8f46e401c329f10d534245ae318fd529fc35b074e925ad60ed4f70
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Linq.AsyncEnumerable.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Linq.AsyncEnumerable.dll
                                          • Size 1.2MB
                                          • SHA256 e654250c4ca49ce0c86f2e8d9d94c642fb099a5d1e4d303fd38537a36428367f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Linq.Expressions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Linq.Expressions.dll
                                          • Size 3.5MB
                                          • SHA256 9eac5e99d19e6ce344e1885150e743afb2a734947d2a17333b2552a3bf9137ab
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Linq.Parallel.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Linq.Parallel.dll
                                          • Size 758KB
                                          • SHA256 afbe319e7be32f5e8993e8b59239ea27f070ecc34c12e4a721f9b25ccdc61226
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Linq.Queryable.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Linq.Queryable.dll
                                          • Size 178KB
                                          • SHA256 e8ec42391d457691787d0785a6251812c0cba2c4491f0fff23eddcaaace1ec57
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Linq.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Linq.dll
                                          • Size 682KB
                                          • SHA256 5e36874e08bb3579aba965097ac9d3b2462ac5d631e8b095ead53289b10074e8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Management.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Management.dll
                                          • Size 306KB
                                          • SHA256 35f32eb5d4d34457dfae571998490e7d518d78c8eea294acbdf678d85f8a19cd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Memory.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Memory.dll
                                          • Size 158KB
                                          • SHA256 a8e1263bfb450d029562302f3784fd91106d8c67f28008a5104faf91503bba3e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Http.Json.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Http.Json.dll
                                          • Size 126KB
                                          • SHA256 b87e300bcb363c6f1055cea3c076d9e9a71d067a05f4e9b6bf183574f042f962
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Http.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Http.dll
                                          • Size 1.7MB
                                          • SHA256 d19df85033d5a0d390432f0a7c9158bec97a5b7ce1cdc62b4f42dea81eab9911
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.HttpListener.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.HttpListener.dll
                                          • Size 522KB
                                          • SHA256 6bb2f3d2165b166a859992e3d400053982e006894440de6634519efc147acbe2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Mail.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Mail.dll
                                          • Size 470KB
                                          • SHA256 0c38342886a74655182b83a11a7414d5581405697fdb61794de58c5a719a6fa6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.NameResolution.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.NameResolution.dll
                                          • Size 122KB
                                          • SHA256 1195e6cb29f96ca9d6bfcaad1c8f5c5943c7431caa0e19152931a49255a313a5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.NetworkInformation.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.NetworkInformation.dll
                                          • Size 154KB
                                          • SHA256 8a0e7156004e255b7f94d397bfb3f646c3fd0f8c3a286d3f7005ef49da453750
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Ping.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Ping.dll
                                          • Size 90KB
                                          • SHA256 e1ec6e414c454a537f5d38a630dd7b1880a9e2f6430bba3ef8153b54c0c30f1b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Primitives.dll
                                          • Size 206KB
                                          • SHA256 92639fa57d6ea7bbcbd47f5d108a615cafc75929f5dddda25ceae33db60e959c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Quic.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Quic.dll
                                          • Size 350KB
                                          • SHA256 5cc5c44c0d158575bae152e84be12c7c234baeae8165d96a50aa1c0c40a8c999
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Requests.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Requests.dll
                                          • Size 366KB
                                          • SHA256 7277099c9780debcd6c64e227db064245768833918ecbc5b9a816e1b78ac2b17
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Security.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Security.dll
                                          • Size 650KB
                                          • SHA256 0550c9d893ce86033569514d04f54eb6cb17974a2e201d091208158f57c0dc73
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.ServerSentEvents.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.ServerSentEvents.dll
                                          • Size 82KB
                                          • SHA256 a1d739af64446b38426c9fbcf906f322806ba00daf9e2202ae6f5d49e8250b5d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.ServicePoint.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.ServicePoint.dll
                                          • Size 15KB
                                          • SHA256 0ee26316320eb7e653519ed8ab9ed3130943de238ea64a4c54ae97c7bddf06dd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.Sockets.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.Sockets.dll
                                          • Size 518KB
                                          • SHA256 e819f4accc4db69beea71884e843149b6d2a27b6404a45523ba71183e259c719
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.WebClient.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.WebClient.dll
                                          • Size 162KB
                                          • SHA256 2345c292d96ae776812dc8865148efcf57b45d280097767417fa39695fc11a4b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.WebHeaderCollection.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.WebHeaderCollection.dll
                                          • Size 62KB
                                          • SHA256 c58d991a3b583a446ba25ab8d4d4c6995ac304b36719fb09e9c4d3cf9f9595eb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.WebProxy.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.WebProxy.dll
                                          • Size 42KB
                                          • SHA256 a9e363980946bd7e7cc4e9fa482f51ad2c1551a3247e7ab20a40a98dcd7b9bb3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.WebSockets.Client.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.WebSockets.Client.dll
                                          • Size 102KB
                                          • SHA256 d76b4a799fddf2a1928adadef630941fb3ea8ccc1a24fbd3587e420aeeef8504
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.WebSockets.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.WebSockets.dll
                                          • Size 238KB
                                          • SHA256 49fd3979a27fb9b2d1775b7d3c64ebeaf11c23fa42fd0bfd3c48d8f5e1f753e8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Net.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Net.dll
                                          • Size 17KB
                                          • SHA256 0bcc1a6b5b6ef78fc077f9c9cba323e3918655c1c5611b9329dade6d58749700
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Numerics.Vectors.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Numerics.Vectors.dll
                                          • Size 15KB
                                          • SHA256 6e1d77ccc29569523b7d89a32b8f8a077fec1a253b5eb11d8704c77e40b3bf6b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Numerics.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Numerics.dll
                                          • Size 15KB
                                          • SHA256 e0b64fad960ef94c2b0e1e3cd7cb349337d5f338cdcdf84528af53dd74f2bef9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ObjectModel.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ObjectModel.dll
                                          • Size 78KB
                                          • SHA256 a1249f4f3e07833ae08ee9094b0870d17f3506836fbebc5ff72c730ba963a19b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.DataContractSerialization.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.DataContractSerialization.dll
                                          • Size 2.0MB
                                          • SHA256 273582508431f527eaecd7c15dd47d6656c27998bb0e2207678d3031ac161fa9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.Uri.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.Uri.dll
                                          • Size 250KB
                                          • SHA256 d6ebdbc74e8f4df527fec1ce188822adba990a7c2e11020c89c415c80b61a34a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.Windows.Core.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.Windows.Core.dll
                                          • Size 1.8MB
                                          • SHA256 ee1e19fbf385fbe71bb1775bde38f263f57505b6c21011be8a30c0371b8d07e3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.Windows.GdiPlus.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.Windows.GdiPlus.dll
                                          • Size 418KB
                                          • SHA256 d2decdace719c3125fdfe9bb30ab17ba64cf3e56de9ded2a60900dc28bf7a544
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.Xml.Linq.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.Xml.Linq.dll
                                          • Size 382KB
                                          • SHA256 c028f975e4c4487a6266efe93106b17ed0e1020a1ef802efb2c971a7cabb2ad1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.Xml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Private.Xml.dll
                                          • Size 7.4MB
                                          • SHA256 9380bd61bfb15a0066cbf5c10f9a50729c8020d72c84a8eb37fb0074c582b392
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.DispatchProxy.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.DispatchProxy.dll
                                          • Size 74KB
                                          • SHA256 be4f2ccc9618986ab93e3d36bdfeaef97f5680532b21530706740ed3316d2745
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Emit.ILGeneration.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Emit.ILGeneration.dll
                                          • Size 15KB
                                          • SHA256 350ee31f24138ccc8d4d9c0a81657737094e7809fb14ba84e3beec453590ee3f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Emit.Lightweight.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Emit.Lightweight.dll
                                          • Size 15KB
                                          • SHA256 4660887f7581d2b6086c5de1957d935100f3e5c43ff9bae4cc0a2ad1fc810af0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Emit.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Emit.dll
                                          • Size 302KB
                                          • SHA256 919f6d308b547e49733c97f58920bd8a2424900ffd4407ea65220236084b5433
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Extensions.dll
                                          • Size 15KB
                                          • SHA256 c2fa29380bfd9f79f1448a098e11061951bd20fb71e2d2acfa8c9abef6c07e94
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Metadata.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Metadata.dll
                                          • Size 1.1MB
                                          • SHA256 a54aee93d721406412b227bc9c99d3537b1a7e26f87b40a5b5324ccd6723eca0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.Primitives.dll
                                          • Size 15KB
                                          • SHA256 ed0fffe7dfe849150866dbe84f0750ef7607e771accecdd11e1f603dda0ce2e3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.TypeExtensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.TypeExtensions.dll
                                          • Size 42KB
                                          • SHA256 51980a05d0d08516b409b937e09c4c35ee81f0b2c2e2e58fed8cf21f32874650
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Reflection.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Reflection.dll
                                          • Size 16KB
                                          • SHA256 7200a865a15397c510d0befbc56a8cb1470a4909d8b6ff3fe5369b0f15455094
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Resources.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Resources.Extensions.dll
                                          • Size 190KB
                                          • SHA256 6a077f6eaf7a8ffe8b51af6dec42fdbb0f6606d3ca95a7c26f704454965ee0bf
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Resources.Reader.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Resources.Reader.dll
                                          • Size 15KB
                                          • SHA256 a2d4266f4c92d14ab3108e75acbe174fdf14a92157ffaf4b8bedd66ce257cfc9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Resources.ResourceManager.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Resources.ResourceManager.dll
                                          • Size 15KB
                                          • SHA256 fe3395fc58df26ba95e63ae751e973efc6e1b45016107fb4e43b9039e5f6e2d3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Resources.Writer.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Resources.Writer.dll
                                          • Size 50KB
                                          • SHA256 9968cdf16886bbb245ac91e9e9f62780dad7cc4a94278c9c4a97bc617b5a2e46
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.CompilerServices.Unsafe.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.CompilerServices.Unsafe.dll
                                          • Size 15KB
                                          • SHA256 01e005456e184302e2abed7a82ad438804e9fd66230cf8d558dac28d6963ca2b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.CompilerServices.VisualC.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.CompilerServices.VisualC.dll
                                          • Size 30KB
                                          • SHA256 ac84d83968ad7bfa8dd01fbbcb084239a2f7011cd8f355aa64f2819ed4f35473
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Extensions.dll
                                          • Size 17KB
                                          • SHA256 90cb058739ffe22ab509f4a6fcd1ac9a2a8482d95b664274387e4a5fda129025
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Handles.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Handles.dll
                                          • Size 15KB
                                          • SHA256 f2c39a6c50b0e7164a908e581f014eef12adc666de4b6dbd825305d236d978f9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.InteropServices.JavaScript.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.InteropServices.JavaScript.dll
                                          • Size 50KB
                                          • SHA256 4c27a35139c5551dd832be8cf7f7a491e99507a7dc7ccc374d2d84b4de0c8226
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.InteropServices.RuntimeInformation.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.InteropServices.RuntimeInformation.dll
                                          • Size 15KB
                                          • SHA256 5e5cd672d7fccebc611f667255f41a9dc96072ecd7e15a7e75d8c73d03b89bed
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.InteropServices.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.InteropServices.dll
                                          • Size 110KB
                                          • SHA256 500ba5ed075420e8d6857bf38c79708a062f855d1ce87d505b3f1df9357806c6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Intrinsics.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Intrinsics.dll
                                          • Size 17KB
                                          • SHA256 4dfe18fc8e27047c217af162637e2d838940372e77ea41fbf96e190fbf5c8c49
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Loader.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Loader.dll
                                          • Size 15KB
                                          • SHA256 ce55718ba48bb4e795eba89d421942b3ed79728ab0e23643305063cebc1f997c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Numerics.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Numerics.dll
                                          • Size 346KB
                                          • SHA256 774062c99509e4f9e19f66ae52bb4108167fdde62e8e429ebb154ec20490e91c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Serialization.Formatters.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Serialization.Formatters.dll
                                          • Size 122KB
                                          • SHA256 fa9db442ecc83348b7b4e2d0fcf38e5ebb563fbff3cb3722474b2842dcd8f24b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Serialization.Json.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Serialization.Json.dll
                                          • Size 15KB
                                          • SHA256 4fb5a8e35deb731f8084d6af5d740fbdd09934ea6277bb68137be845b17eb05b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Serialization.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Serialization.Primitives.dll
                                          • Size 38KB
                                          • SHA256 b074fc4c44b9b28cabdbbc048bb916d57c13bee2300a148e54bc209ab1dbddfb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Serialization.Xml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Serialization.Xml.dll
                                          • Size 16KB
                                          • SHA256 fac309e540fad67c93dfbe0a8cd7a60179118712e338aef8a4b93ded7594633c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.Serialization.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.Serialization.dll
                                          • Size 17KB
                                          • SHA256 69a3b1ca73e92eb7667e37caf7308f4ec7e058a9cf1734ed59d2d12cbafdd127
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Runtime.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Runtime.dll
                                          • Size 44KB
                                          • SHA256 cc186c0b3b8f9ac63d80070584e01035c787833993b0c0bb4eb0be94cd871725
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.AccessControl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.AccessControl.dll
                                          • Size 222KB
                                          • SHA256 00935fdcfe40bd40cc3b87e78f1b73a841aee85d94e5a9e76bfe842481d3d030
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Claims.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Claims.dll
                                          • Size 98KB
                                          • SHA256 a57dc1dfd3d2cb774e517e826c05d3e81098d09cee868de4104cf6f1a8a7c4c5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Algorithms.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Algorithms.dll
                                          • Size 17KB
                                          • SHA256 5e6f143876c7caf8fe3763301c9f3ce97a2bdc00f10bb713b26a21704da146e2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Cng.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Cng.dll
                                          • Size 16KB
                                          • SHA256 9b495de22e989e1b62a909b30a065d6ad45c96e6bb13d2f92be4e435d4262b76
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Csp.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Csp.dll
                                          • Size 16KB
                                          • SHA256 7572cf5ea1bd7b1052deda0ff8688b5603aeaed011f561a2d4b55a145e1301bf
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Encoding.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Encoding.dll
                                          • Size 15KB
                                          • SHA256 905ec1b237ebeb3d2d55a38c8161a0648a169873f218f1e90093ae553aa6b476
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.OpenSsl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.OpenSsl.dll
                                          • Size 15KB
                                          • SHA256 642c46b067e36a52ce3a940fae00b7be00742348828463b35cb2b059381ecd17
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Pkcs.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Pkcs.dll
                                          • Size 750KB
                                          • SHA256 9ebfdb63f2f1c8fcb3a3b3c7b25589da8fc0d5535b6a7c0540309c9c855aae9c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Primitives.dll
                                          • Size 15KB
                                          • SHA256 950225eceb44c3eacb83eb127966e9db89dd449c8e2617024a8a0e52567e50c3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.ProtectedData.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.ProtectedData.dll
                                          • Size 58KB
                                          • SHA256 fd1188040f04a670df1f7bfbd904c13e83ead53c46d3c83d17d215ecadaeac56
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.X509Certificates.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.X509Certificates.dll
                                          • Size 16KB
                                          • SHA256 78176db6faa6daed742ad64e7d23f01b4704b34669167f3f4dff672a77543c33
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.Xml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.Xml.dll
                                          • Size 438KB
                                          • SHA256 1952e574c2dfbbf3f1af4c039436cc30412e6a5cb90c8b241a7ea9308e22b122
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Cryptography.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Cryptography.dll
                                          • Size 2.4MB
                                          • SHA256 b11f291573c6dbd6b3d1cadcd0e7a4f7eced94ff009e4061981d91f1315f721a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Permissions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Permissions.dll
                                          • Size 186KB
                                          • SHA256 2d268e0d1bfcdd671006681e79494abcf10c9282e646917f4bf7cfba45d7ce66
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Principal.Windows.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Principal.Windows.dll
                                          • Size 174KB
                                          • SHA256 972a50bb0fb2569e1b77c20465ce8783fc53dba9c2132a33a749ef72977a4c23
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.Principal.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.Principal.dll
                                          • Size 15KB
                                          • SHA256 2062cb052e3b129de61269679b3f6009067d6bd2ba36abfa112d11871f68d0ed
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.SecureString.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.SecureString.dll
                                          • Size 15KB
                                          • SHA256 8592f385033e5957f5557cff208cb012746f98f81b7b618cc73f2707ccc1fc0f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Security.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Security.dll
                                          • Size 18KB
                                          • SHA256 e4b159f946cd8a24f150e644b4a252d2283854e6803fbdf792deef1eedf43869
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ServiceModel.Web.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ServiceModel.Web.dll
                                          • Size 16KB
                                          • SHA256 d981d76cfc8be110b817c65f5eaf3d1ae7bbcb991f22a8a4908ef3729cfe6569
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ServiceProcess.ServiceController.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ServiceProcess.ServiceController.dll
                                          • Size 89KB
                                          • SHA256 ea5a19f84a144a74962d5060e63f65e10ecb32614f70acad33ddf7cfdb28f2c1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ServiceProcess.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ServiceProcess.dll
                                          • Size 15KB
                                          • SHA256 b1f211075bd6f647a933e93767ccac1dd983f84cd7bb783863818b62dada7ecb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.Encoding.CodePages.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.Encoding.CodePages.dll
                                          • Size 842KB
                                          • SHA256 57dcae9c3eb520a76d7e776fdca8485e0c3a0d5c694cfc9deebeccda271c26be
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.Encoding.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.Encoding.Extensions.dll
                                          • Size 15KB
                                          • SHA256 e3f16402a12ace1a58fdb8ff2a622312d181c0e9ceb947c13079072641544324
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.Encoding.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.Encoding.dll
                                          • Size 15KB
                                          • SHA256 e61784fabfefaefbe965eef809ee24608c57b003af7bbd2a6a4a7b7498196acd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.Encodings.Web.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.Encodings.Web.dll
                                          • Size 122KB
                                          • SHA256 7e3b262f5c49801817159d8a0d3bd1d442492638cb21e06860d70772d9ed4e44
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.Json.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.Json.dll
                                          • Size 1.8MB
                                          • SHA256 03bdedbcd34f950789e5d1a45025c0a548b9c908c4dbc4b1818258583288ab07
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Text.RegularExpressions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Text.RegularExpressions.dll
                                          • Size 1010KB
                                          • SHA256 7f02ebfcea58353fc8198e556d6cd98cec4546702146aa2dd5d026eb4164604e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.AccessControl.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.AccessControl.dll
                                          • Size 74KB
                                          • SHA256 97ea0375860e6cc9caeacdd529e3d57073ceb1f02480c4f300744ebe9a573ddf
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Channels.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Channels.dll
                                          • Size 154KB
                                          • SHA256 71515172b8087382eb311e75dd6dc9c48d4f0314fa6b5c0a8a7408ddd38c8b14
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Overlapped.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Overlapped.dll
                                          • Size 15KB
                                          • SHA256 8ae5a11d7e9f817de475e7cb7395fe1c9dc54331b928ebdd54080c24416c36e2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Tasks.Dataflow.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Tasks.Dataflow.dll
                                          • Size 462KB
                                          • SHA256 df40e2b453afd99421feefa494e4a31d81d5cb45597f3fbeddab699e7b149d2e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Tasks.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Tasks.Extensions.dll
                                          • Size 15KB
                                          • SHA256 cebb24b2937ed931c9cbce38cd67967c950c2f810bc2d4be7ffcc849a4f47485
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Tasks.Parallel.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Tasks.Parallel.dll
                                          • Size 130KB
                                          • SHA256 065e456a0021f522c2e49149f5d58573bf01b6fc3f3c8bb477ebba53317128c7
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Tasks.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Tasks.dll
                                          • Size 16KB
                                          • SHA256 b327cbaa317092db3d1c0c4471a7d070bc5ff9bfad1ee23667dcd0d4a08479b6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Thread.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Thread.dll
                                          • Size 15KB
                                          • SHA256 d6bec5a332a2613def0b9d19ded9f6719f6626f4df9ff831283a85fc3d48aab6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.ThreadPool.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.ThreadPool.dll
                                          • Size 15KB
                                          • SHA256 0d648780e9e3306fe0abb498dcf6c32af97a8884ae628f1b9f4c8e8f5dda1e9a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.Timer.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.Timer.dll
                                          • Size 15KB
                                          • SHA256 03d13fb126f20a364b84297b6c73d25671cca39a761db58688a50136792b2dc0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Threading.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Threading.dll
                                          • Size 82KB
                                          • SHA256 7175ac06b5908412692d2c2e124cb79f58aaee61ade19bb81118d14a92bb7694
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Transactions.Local.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Transactions.Local.dll
                                          • Size 626KB
                                          • SHA256 01eab2d51a9a651808d002c31d1d9564a4094bb09cbe5f58085ecb7d47232462
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Transactions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Transactions.dll
                                          • Size 16KB
                                          • SHA256 40b23da0a35c918c0da534452275441ab5609e826d87e669b59de7432a56214f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.ValueTuple.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.ValueTuple.dll
                                          • Size 15KB
                                          • SHA256 da2ad4c7c25f925c574b5a22a5b563b182f2a0b4e3158880127daaf34d259391
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Web.HttpUtility.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Web.HttpUtility.dll
                                          • Size 62KB
                                          • SHA256 117dfe2a7904a19544c6c53043b6cb1aee8173eee8891819c7face7ab56b01a3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Web.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Web.dll
                                          • Size 15KB
                                          • SHA256 7cc51af426e403d999bdd17d6cfe2df61077697d1ae6a2d6ede88a8c657f1cff
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Extensions.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.Extensions.dll
                                          • Size 118KB
                                          • SHA256 67a7d6dd5ebc4ee479373670b1fe95ba2a6de75b712837d24c6af47a0850f810
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.Editors.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.Forms.Design.Editors.dll
                                          • Size 16KB
                                          • SHA256 1a5b69181c46df5415da9fb4865dd3473e7ee26682710106f659bddbf8257127
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.Forms.Design.dll
                                          • Size 5.8MB
                                          • SHA256 5d9744e08ba9b124b7de027a1e4d2c58bcf54cab29afe239e001ac92a37401e3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.Forms.Primitives.dll
                                          • Size 3.5MB
                                          • SHA256 ec2fd9ed0f8c5126a4d7888a9e685581f8bcca3b06a1308063cb1e487b07d34c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.Forms.dll
                                          • Size 13.1MB
                                          • SHA256 705abce3a4a367f9f394374d71d9a57dbd346963a1e01d2c2f97ac0fa77b93bc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Windows.dll
                                          • Size 15KB
                                          • SHA256 6f0cf8721f31a497d14bf71cba65102ae42046ef4fad48e02bea12a1c5c11044
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.Linq.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.Linq.dll
                                          • Size 15KB
                                          • SHA256 5047d733af46e3bb072a349a00548832b77a4377676ef83a50e2af9ecae7623b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.ReaderWriter.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.ReaderWriter.dll
                                          • Size 21KB
                                          • SHA256 43bc374d683dee2a05d99d8d98e5b3287aec1a72e2b4a0a9a50dba3224273dd3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.Serialization.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.Serialization.dll
                                          • Size 16KB
                                          • SHA256 d42a4c387092fe2acaf9ebfd06b003b28b36f05dbdf660cf06bc75f9e0cf2c19
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.XDocument.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.XDocument.dll
                                          • Size 15KB
                                          • SHA256 412f5f408752c1933d9949df05451800b53d991f35c259bc5794f7ba1e13e472
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.XPath.XDocument.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.XPath.XDocument.dll
                                          • Size 30KB
                                          • SHA256 03b5e91ab788492bb1ecaa31fe8f0b6f80d7234008189d993cf75e64ba5c17d6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.XPath.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.XPath.dll
                                          • Size 15KB
                                          • SHA256 c4b89cc56c191a655c3d9680c82b37a74cd0f51473fd8faeda9009b703586c05
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.XmlDocument.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.XmlDocument.dll
                                          • Size 15KB
                                          • SHA256 21894f464c6a4b05e92f0493da5dfbe5d16bbe6e24592e8b5c6f663b88680625
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.XmlSerializer.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.XmlSerializer.dll
                                          • Size 17KB
                                          • SHA256 92b383612a32c7958f6f4653fcf6cf5f1a84b54aa6296feb80dc27f0b58797b2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Xml.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.Xml.dll
                                          • Size 23KB
                                          • SHA256 dbffe2d21148e35f9a2f588c2c35288771030148b75c83cbf1ecc2beefbec6f5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\System.dll
                                          • Size 49KB
                                          • SHA256 39e2bbc12e0216f0974b144406ef7909e3855a725136d8929bdbc5651a724b2c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          WindowsBase.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\WindowsBase.dll
                                          • Size 16KB
                                          • SHA256 2d078879ef7d948d5d251a954e23a8604e943898f6502afebe0718df97d95974
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          clretwrc.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\clretwrc.dll
                                          • Size 310KB
                                          • SHA256 f78f188261eeab85c705fd4cf6bd9916b27c9efa7f48d56d04ddf44b0b882518
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          clrgc.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\clrgc.dll
                                          • Size 657KB
                                          • SHA256 57aa82c35320ce7bcebce1571df596241d36b71fd312df2b2906d34fe3df2eef
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          clrgcexp.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\clrgcexp.dll
                                          • Size 692KB
                                          • SHA256 af49af5347b1d69248b7315afc80894dae5f0b59ce9dc2eeeeb4f5b9d94f10d7
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          clrjit.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\clrjit.dll
                                          • Size 2.0MB
                                          • SHA256 5b61a424e0e3aab28bedc506564ba28be05783f9921a16aaac6ce5dbb3e1b72e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          coreclr.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\coreclr.dll
                                          • Size 4.4MB
                                          • SHA256 dcb8a78e286fe3796aa037d5243be63c3e9370e1a8d964d1789938a44f9fbc2e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          createdump.exe

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\createdump.exe
                                          • Size 70KB
                                          • SHA256 5d438d5eaccef364981fa5a633d0f4f2cc060bf3560485706740ee7295f51b60
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\cs\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 20f28a6c1ad6cc1544913aaf022050c51bcba747a1f7f2d4d017cf79c941b75c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\cs\System.Windows.Forms.Design.resources.dll
                                          • Size 263KB
                                          • SHA256 cebde04735fe45c805e6819356c702c91df5f6b93f96c06f97e8a22c9282eaa8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\cs\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 2039d293b5495f2059629fa123b1ca9ed0eb62b6a274888cf61fc9453920b14f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\cs\System.Windows.Forms.resources.dll
                                          • Size 361KB
                                          • SHA256 7acc12cca509056530af09f42364099c084ba87080fafc29d4e4af517ecb1666
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\de\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 8fa6981e93b6a53bf792555791721e98269790638ec45e8815b126894d5ec0c6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\de\System.Windows.Forms.Design.resources.dll
                                          • Size 264KB
                                          • SHA256 2d43a4e88c9d922a22d0488e19fa3aea6f0a4506e8f81a30ef5c00d71211bb64
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\de\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 03e9076bf163020cebd8e2bfe829d93122327dcb5d8355a3607d0d346aa5aa9f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\de\System.Windows.Forms.resources.dll
                                          • Size 370KB
                                          • SHA256 a3fd5465e8256343aebde245f5a2dd3e0c06434a0dabd9f1a75dbcd08c35c3ed
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          e_sqlite3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\e_sqlite3.dll
                                          • Size 1.7MB
                                          • SHA256 4dcbb2ad197d893355efa004257e048f2c850feb1078158f4baab0f7b53ac45f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\es\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 4c26618ed063abecb3a2b90bddeb3b7e25e3f9650c215eebc4507267e313cd1d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\es\System.Windows.Forms.Design.resources.dll
                                          • Size 263KB
                                          • SHA256 fbbec7483d3d29e125fc151fef36c150d47b14361d78ca35e71abb229f5432df
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\es\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 20983a6788dc12b11efdde0996e099988f5423b2f27bb4c26f4a0edeeeb77bc4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\es\System.Windows.Forms.resources.dll
                                          • Size 362KB
                                          • SHA256 00d4f3bb8e24cb9462414e7d3c724cd448dca2f626c50247ab46e913ce964415
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\fr\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 3c6856a1b90df52be5be698bd369cd111702277b89c19c9999a1f9f3603c551e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\fr\System.Windows.Forms.Design.resources.dll
                                          • Size 264KB
                                          • SHA256 71c385143fbce223e8ac72f5e31705911f826f80cec0fd92606e89922cb04656
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\fr\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 9e389ed0f5d297876dd25ed8e1731c04f1f7eaf7e35b9934d917d727ce73595e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\fr\System.Windows.Forms.resources.dll
                                          • Size 369KB
                                          • SHA256 9ccb5c9e535c6b3eeadf9f7064fa6d0d0d0df7def6870f304229648eaa1cd272
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\it\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 067736290216b0453a33e13c5e0fc5690a8c4a646797a1c9864b4b4011ead894
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\it\System.Windows.Forms.Design.resources.dll
                                          • Size 264KB
                                          • SHA256 2808a53228d8c27ba764acbd4402630f182e1f2da3938ebef9e94f6b4eaa35ac
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\it\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 fa281847dfd92ea851d4d62f81871fb3e7de3dfab0847b01b9bd20e958eaa627
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\it\System.Windows.Forms.resources.dll
                                          • Size 364KB
                                          • SHA256 037e50d4d754d9e71263e375d07e210c3a622a9d5defb79ffdbbd1863a5737da
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ja\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 3b82245dc34038aecc627cd36dbee620173601a9b1e673612199e5746506fe20
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ja\System.Windows.Forms.Design.resources.dll
                                          • Size 270KB
                                          • SHA256 b6f5b19ac7be1d92c42f28bad028d4d66835badfa704eb02a03a23037ea05ca1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ja\System.Windows.Forms.Primitives.resources.dll
                                          • Size 16KB
                                          • SHA256 5c5bdef6bb99b40ca0ac3aae614a19b8e0b322abf6ff23593dd16dbc6382479d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ja\System.Windows.Forms.resources.dll
                                          • Size 404KB
                                          • SHA256 1c9f019f4abf32a6e951510332d1e57a63d8b6c6b7e27dd93ec4ab01f0dd2c51
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ko\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 4787362c5c4eb8d26997c54e7e035fc0d1559603d8e8876c99babf96a28754b2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ko\System.Windows.Forms.Design.resources.dll
                                          • Size 265KB
                                          • SHA256 bfd3dd9c21ac15f277bd3d024c388ac73f553a6dd799a401959b9cc96f3d3ef2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ko\System.Windows.Forms.Primitives.resources.dll
                                          • Size 16KB
                                          • SHA256 2a661cdea3c978040b026ca720de51c4eaadb7fc4d725a5cdc4a7d06818d49ee
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ko\System.Windows.Forms.resources.dll
                                          • Size 367KB
                                          • SHA256 428bab2afb2bfe44e3958e4a70176baa2b88b8fef618e48bd922ce1c82e66efb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          mscordbi.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\mscordbi.dll
                                          • Size 1.2MB
                                          • SHA256 24b15982d2f868c7964af6c9a56699644ebfaa5742d43a770716eb9224b18a85
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          mscorlib.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\mscorlib.dll
                                          • Size 58KB
                                          • SHA256 0669a7898f0c4a6869a1eb44032896d8f1b0755db02581cd15d46b408f23a591
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          mscorrc.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\mscorrc.dll
                                          • Size 131KB
                                          • SHA256 a208568ec94c363222e3e32cd642a0f96cfe8fcf9f75db3ecb12abec78053677
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          msquic.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\msquic.dll
                                          • Size 512KB
                                          • SHA256 bb89d7a5dfe8f5e794929bf48bbe2e29b35ed7b7246fabb9e74f486abc1afeeb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          netstandard.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\netstandard.dll
                                          • Size 98KB
                                          • SHA256 9f64ad816fe6ba25b271d52aa2055131988dddedb8afacad0716ac01334cbcea
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pl\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 a02e1a3d1e79eba3ab98963b334af6a687eb0760af37287ad74d01fe511b4999
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pl\System.Windows.Forms.Design.resources.dll
                                          • Size 263KB
                                          • SHA256 de1e133543a8be50f316211fbcba8c563644f4aa9e6e4c31f49d61c2bbea1e17
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pl\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 0b2239608d6c202dc30a14f2e8e8e9945551d419d7a3de7691dce712f8872f96
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pl\System.Windows.Forms.resources.dll
                                          • Size 362KB
                                          • SHA256 4ce3088f18dd2922caddd1ae91053ba3e64e487f50dee31156f9ddc84ea001d3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pt-BR\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 7f59d4db4ce587dfad3bafd54281226a40dce17490e1390e6b974913fec4a136
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pt-BR\System.Windows.Forms.Design.resources.dll
                                          • Size 263KB
                                          • SHA256 4548b818026e00271514aaeb442331c22a0b0a33c3502c68636c21030cdb8826
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pt-BR\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 dbead9f1a950f6e9207ffa98dfee08784bd6092b6a81b8b7e4ecb8b7e384fe1a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\pt-BR\System.Windows.Forms.resources.dll
                                          • Size 355KB
                                          • SHA256 8a74399d6b1281de21579141479ea705059dadcd4322deee2e9c1fec7c372b02
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ru\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 26KB
                                          • SHA256 55c6bee9fce74a8632e16bafb49453578de91d271c8b843122d2bf0f1ae00f3c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ru\System.Windows.Forms.Design.resources.dll
                                          • Size 279KB
                                          • SHA256 6e2e621a72f665fa35f47a122b0aa048c03253707f014ee7a08bd5bef751d366
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ru\System.Windows.Forms.Primitives.resources.dll
                                          • Size 16KB
                                          • SHA256 6eebef076d9031caab9863b1d4c4e62787c1c9a016609d12fed804a5aebe259e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\ru\System.Windows.Forms.resources.dll
                                          • Size 471KB
                                          • SHA256 a7a974eeb063305eb5c8f4eaed1f06e8c47d1400418225a36893dbc5714cb288
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          svchost.deps.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\svchost.deps.json
                                          • Size 39KB
                                          • SHA256 433c9ca02755f7384c93ccc91cd5234ad59a34934b320ca5e9a6581acf0f5315
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          svchost.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\svchost.dll
                                          • Size 157KB
                                          • SHA256 64adf989de30ababbba61cb99399dae7b59d2aba7f8a8cb2b892f9262bb88054
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          svchost.exe

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\svchost.exe
                                          • Size 158KB
                                          • SHA256 ebcd13645af19064d6423fb6415d9897d495f9ce86cf77e52c0698864231962f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          svchost.runtimeconfig.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\svchost.runtimeconfig.json
                                          • Size 527B
                                          • SHA256 c0ecf8b9d1a52c17060bad8fade57c750c33949712ad2c9b45ea2ad8f8c8f910
                                          • MD5 SHA1 SHA512 TLSH

                                          token.json

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\token.json
                                          • Size 656B
                                          • SHA256 b70679b60cbac20df7bb27cf96795f4e555dc910f9743613cc05469483468f89
                                          • MD5 SHA1 SHA512 TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\tr\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 25KB
                                          • SHA256 60414e4460bbdfabd742697e95628ea63dbeff2ccd85b219733a08ac58cfc64a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\tr\System.Windows.Forms.Design.resources.dll
                                          • Size 262KB
                                          • SHA256 e66c1a01d99ecfb5cfe168c6794280887d3de0bbb53f9696fea416eae7f5b268
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\tr\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 e2c901a2b6022154e601f46421f707c39506ec08340087bb77a169d60c710eca
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\tr\System.Windows.Forms.resources.dll
                                          • Size 357KB
                                          • SHA256 7efe7f39755cbc2eb3363f551069f1fda7aa691f58b33d32d408a8855abc8284
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hans\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 24KB
                                          • SHA256 756728b6ff905faec0391ce6408710322d512ce22ab63fb484a88849928330eb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hans\System.Windows.Forms.Design.resources.dll
                                          • Size 258KB
                                          • SHA256 dbb98cf2f20680344b761c46a74a804782c789d7c04290b56b94f96d5cc6a535
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hans\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 7f6b9d2ed8e93eb940adb21c8571a867172b21e34839c142cff65bec7bb6c08a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hans\System.Windows.Forms.resources.dll
                                          • Size 316KB
                                          • SHA256 0f2ee691f76c09dcbcccdaf38b4df8261e44127feb947dbf1e8055a1e52b4871
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.VisualBasic.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hant\Microsoft.VisualBasic.Forms.resources.dll
                                          • Size 24KB
                                          • SHA256 7e25e7cc471e10e063ac9a50135b2a24f97a397dc592881cc1929d5dd4ef7b57
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Design.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hant\System.Windows.Forms.Design.resources.dll
                                          • Size 258KB
                                          • SHA256 8d9ae56055ab998b7b804cc9f0c60991f0aaee61a81126bbea4580802ff5c28a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.Primitives.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hant\System.Windows.Forms.Primitives.resources.dll
                                          • Size 15KB
                                          • SHA256 df88c2f62f81fd2f162b91fafda6a66d7ca08d27f81214c8ab3d47010b2693f5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Windows.Forms.resources.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\payload\zh-Hant\System.Windows.Forms.resources.dll
                                          • Size 321KB
                                          • SHA256 7ba1d278f0a6a8910545e62ffe5039c31258c7a828e9b7eda84923066b42f2f0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          vcruntime140_cor3.dll

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\vcruntime140_cor3.dll
                                          • Size 121KB
                                          • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          yammi.ico

                                          • Path C:\Users\Admin\AppData\Local\Temp\yl_ext_c05e02bed7e3479cae6b74bbe61dffec\yammi.ico
                                          • Size 244KB
                                          • SHA256 1a43c0377e18f1653707b684b8b40afebd5c60300e19013ccda9f08cf3a1e377
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Microsoft.Win32.Registry.dll

                                          • Path C:\Users\Admin\Desktop\Microsoft.Win32.Registry.dll
                                          • Size 114KB
                                          • SHA256 31f5a1cb2046a26c7be2e3a0a18770d8445f0c9d7213ed7365a8403fcca77ab5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          System.Private.CoreLib.dll

                                          • Path C:\Users\Admin\Desktop\System.Private.CoreLib.dll
                                          • Size 15.3MB
                                          • SHA256 bb9a91b896447b666487d7c6538d0e1a79dbed3604ed913315a59a7c0ec6e7c6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          hostfxr.dll

                                          • Path C:\Users\Admin\Desktop\hostfxr.dll
                                          • Size 371KB
                                          • SHA256 8b34afc8dea90a2bb8d9668fe8800e27d1ff40029b2eeecae77d5bb19b937e40
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          hostpolicy.dll

                                          • Path C:\Users\Admin\Desktop\hostpolicy.dll
                                          • Size 370KB
                                          • SHA256 62817f2c82559f572bd5905b330431deba43169191a9ea03fb9f9d884e874655
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          memory/2956-113-0x00000268C0EC0000-0x00000268C0EE0000-memory.dmp

                                          memory/2956-93-0x00000268C0DA0000-0x00000268C0DC0000-memory.dmp

                                          memory/2956-97-0x00000268C0DE0000-0x00000268C0E00000-memory.dmp

                                          memory/2956-101-0x00000268C0E30000-0x00000268C0E40000-memory.dmp

                                          memory/2956-142-0x00000268C3790000-0x00000268C3800000-memory.dmp

                                          memory/2956-109-0x00000268C0F80000-0x00000268C1040000-memory.dmp

                                          memory/2956-121-0x00000268C2B00000-0x00000268C2B60000-memory.dmp

                                          memory/2956-138-0x00000268C3670000-0x00000268C3720000-memory.dmp

                                          memory/2956-125-0x00000268C2BA0000-0x00000268C2BE0000-memory.dmp

                                          memory/2956-129-0x0000026099E80000-0x0000026099E90000-memory.dmp

                                          memory/2956-146-0x000002609B5F0000-0x000002609B600000-memory.dmp

                                          memory/2956-117-0x00000268C1060000-0x00000268C1090000-memory.dmp

                                          memory/2956-105-0x00000268C0F30000-0x00000268C0F80000-memory.dmp

                                          memory/2956-34-0x00000268BE960000-0x00000268BF150000-memory.dmp

                                          memory/2956-150-0x00000268C3580000-0x00000268C3590000-memory.dmp

                                          memory/2956-154-0x00000268C9310000-0x00000268C9330000-memory.dmp

                                          memory/2956-159-0x00000268CC830000-0x00000268CC8A0000-memory.dmp

                                          memory/2956-2314-0x00000268CC8A0000-0x00000268CC990000-memory.dmp

                                          memory/2956-2310-0x00000268CCD60000-0x00000268CD0E0000-memory.dmp

                                          memory/2956-38-0x000002609B620000-0x000002609B640000-memory.dmp

                                          memory/2956-6-0x000002609CDB0000-0x000002609DD00000-memory.dmp

                                          memory/2956-42-0x00000260A94C0000-0x00000260A9540000-memory.dmp

                                          memory/2956-62-0x00000260AA4F0000-0x00000260AA510000-memory.dmp

                                          memory/2956-77-0x00000268BE060000-0x00000268BE160000-memory.dmp

                                          memory/2956-89-0x00000268C0D70000-0x00000268C0DA0000-memory.dmp

                                          memory/2956-85-0x00000268C1800000-0x00000268C1F70000-memory.dmp

                                          memory/2956-81-0x00000268C0CF0000-0x00000268C0D40000-memory.dmp

                                          memory/2956-66-0x00000268BE010000-0x00000268BE040000-memory.dmp

                                          memory/2956-70-0x00000260AA530000-0x00000260AA550000-memory.dmp

                                          memory/2956-58-0x00000260AA4B0000-0x00000260AA4D0000-memory.dmp

                                          memory/2956-50-0x00000260A9400000-0x00000260A9420000-memory.dmp

                                          memory/2956-54-0x00000260AA490000-0x00000260AA4B0000-memory.dmp

                                          memory/2956-46-0x000002609BE50000-0x000002609BE60000-memory.dmp

                                          memory/2956-26-0x00000260A92D0000-0x00000260A9310000-memory.dmp

                                          memory/2956-30-0x00000260A93A0000-0x00000260A93F0000-memory.dmp

                                          memory/2956-22-0x000002609B7B0000-0x000002609B800000-memory.dmp

                                          memory/2956-18-0x000002609B650000-0x000002609B7B0000-memory.dmp

                                          memory/2956-15-0x00000260A8EC0000-0x00000260A90E0000-memory.dmp

                                          memory/2956-10-0x00000268BCEF0000-0x00000268BDE10000-memory.dmp