Analysis
- max time kernel
60s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/10/2026, 14:06
Behavioral task
behavioral1
Sample
Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe
Resource
win10v2004-20260911-en
9 signatures
60 seconds
General
- Target Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe
- Size 3.4MB
- Sample261006-relybacs4j
- SHA256 dc3a5b77cddf5e671d58c1e74e11163c20c7c8ecae4af2bacb5e6ffc7a040e0a
- MD5 e5b78f4be601dc059e6cdb3ee918a3ab
- SHA1 c44493123383236e7b3425b8f483597a9ef4342f
- SHA512 38acd38d1bdaf854cde8dabdf2afaacf427ad2fc21f41600ca90e92561c16e82a64cf8230bf6ca4d517c82ca4eb949e57493b45de95dd4ed17116fecc2363d4b
- SSDEEP 49152:tq+I5TdDCLamyZLukdJiKnLKZRSV6p1u3QPR6iGV+2XssjHH8Sh7mMHY6SJUX89+:cAametPGZQVs1u3QPRi+cISh1HeUs9Xu
- TLSH T191F5230173D3C076F1942A74CA17D0F96E2ABDB828D650272EB9FE0F39B93935938561
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 5364 Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp 3040 KeyboardDrv.exe - Loads dropped DLL 1 IoCs
pid Process 5364 Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 63 IoCs
description ioc Process File created C:\Program Files (x86)\Redragon K652-RGB-PRO\ET\is-OAD4F.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-TC6P0.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-QGNIV.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-P6U7U.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-VTVD8.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-9FVH6.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\Cartoon\is-ME5ON.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-NC6L1.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-61GIS.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-NAO89.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-SFIG3.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-9VH4S.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-3QSOS.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-4VMI0.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-NGTVU.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-UM10I.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\unins000.dat Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\Cartoon\is-03552.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\ET\is-R46KA.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-DQL7L.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-486BU.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-FIUTF.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-QIO0E.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-421BP.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-BOUTR.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-40DPC.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-CPS2U.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-BS63F.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-CT24I.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-EHO41.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\Cartoon\is-9L5QT.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\Cartoon\is-VDHUG.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-2OMNC.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-C47L6.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\ET\is-KGQ8Q.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-P02GQ.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-KQNOC.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-C9B67.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-3QFLR.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-2ISC2.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-1K3HO.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-684MA.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-687JP.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-A47NL.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-FOLNS.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-5582E.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-OAIV6.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-MV58H.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-J3IN9.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-9B61G.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File opened for modification C:\Program Files (x86)\Redragon K652-RGB-PRO\unins000.dat Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-SPCVL.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-QMASI.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-G35QO.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-VM96D.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-88OT4.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\is-2FO3J.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\ET\is-QMNH2.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-3I9L4.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-L8RP5.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-26BIR.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-L0SSU.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp File created C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-RQULQ.tmp Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KeyboardDrv.exe - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/3112-0-0x0000000000400000-0x0000000000440000-memory.dmp innosetup behavioral2/memory/3112-16-0x0000000000400000-0x0000000000440000-memory.dmp innosetup behavioral2/memory/3112-242-0x0000000000400000-0x0000000000440000-memory.dmp innosetup - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 3040 KeyboardDrv.exe 3040 KeyboardDrv.exe 3040 KeyboardDrv.exe 3040 KeyboardDrv.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3040 KeyboardDrv.exe 3040 KeyboardDrv.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3112 wrote to memory of 5364 3112 Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe 89 PID 5364 wrote to memory of 3040 5364 Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe"C:\Users\Admin\AppData\Local\Temp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3112 -
C:\Users\Admin\AppData\Local\Temp\is-QPCFM.tmp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp"C:\Users\Admin\AppData\Local\Temp\is-QPCFM.tmp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp" /SL5="$400A8,3164327,213504,C:\Users\Admin\AppData\Local\Temp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5364 -
C:\Program Files (x86)\Redragon K652-RGB-PRO\KeyboardDrv.exe"C:\Program Files (x86)\Redragon K652-RGB-PRO\KeyboardDrv.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3040
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\InitSetup.dll
- Size 55KB
- SHA256 72f5cfe575253eaff31e27ce8f70b4caaa079d2c42a4130515eecf7f0967115d
- MD5 3bb4a9fd05f14cc833291f7332565843
- SHA1 def4f41072c57ae0c66dce6b325e6d4f8c32504e
- SHA512 0aa11d6d10c8a8635db9e514e4b6781e7105c9b1ce568f1bd012eed39d46d36340004507233cdd692049bb9ebd8299a067cc5462bdf9eaa43d9ec6d38144f0fa
- SSDEEP 768:cf+qhvj1L2LsDAtFrhTjK91Lj7TLzFfAVhgOO13bnDL5OHmm:s+yZL24D+nKbDHzFfT3z5OHmm
- TLSH T177436A607950C032D18AA5395469C2A25E7EBC3127F9D8877FA6077D8F613D2F33A386
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\KeyboardDrv.exe
- Size 2.0MB
- SHA256 5aaa81905ec3afb82060803ed4437333668a3273ffd443875bd1e7bef1abfaac
- MD5 0099add2e86b644d89abcb7e75a881b0
- SHA1 9d7bf9cb936b0521437f66895f555adfc08da6b1
- SHA512 4d78c295fa7b29a05de2ee1081a06f0fbbfa28838e96c1d67ff838e490f66321172ac231b377369bd7629d3c118b51912ba57b67401d4596e2a03b5375167588
- SSDEEP 49152:2Rnnu4lPle2RMQEvB3U+/024bxqA+8j3d/s27F76Iex1UC0sKi:IXlNxMf3H/024bxqv8j3d/Z7FeIenU
- TLSH T144A59E213BD18076D2733D329D5AA37EA2A9B5701F3496C726941E3D1E30582E939F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\appico.ico
- Size 75KB
- SHA256 198d4e89686b1ee8cd23d602229ef31360c5eb5f134969d9a5b7ac083169aa19
- MD5 48efe97d816ae6891677650449a2376a
- SHA1 98ffc564c750b4432810c4f568113b49b2e57647
- SHA512 1755b3d1d5d25f68fa1ed31d08fb644f58cb62a28d89717b47c5cf79f2aadaff24344a76064819f043d9a2320cebfa3bb65446ef78a97c43e8da0d4880a5f5ae
- SSDEEP 768:dq6akykD4n9goikmihx4mfLMu/fr8kue0qXuG66oggKOisjpePp+Auk05ElqMn4B:ojiTihx4mjMuQ80qXuGUggKnLA2w/
- TLSH T15973F64176C7E822CBD8B138CB09C5F72317BE498A26A6573BB4BF273A7B3032555211
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\cfg.ini
- Size 6KB
- SHA256 03556291ef8371e3906b29ae53785696ef057ad965d2fff72dcf9a7e6380eef4
- MD5 2c43c02fa74c12987e6700a047080810
- SHA1 dc9426c1d0472c9825e2014375cd5976e3a6eeac
- SHA512 15e53bc361845ebd46a8f6574a544ab5fee0655ca9d8e785f9cbd2ac56331664cfad267b116241d46f5b96e7709f2b3259886c5e0f15c34435aa2061456c32ef
- SSDEEP 96:Imf0vsFb0PBRTFGdB/nkgkd9gXWfrXVtgOB9l+kjk3oC/tDliX:Imf0vsN0PpG7k/zgXQtkmkYC/tRw
- TLSH T171D1C8E6B224772EC9639B8AD381288111DDDC4379C9916DF2E35ED6E42DEC36E35380
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\btn_nr.png
- Size 2KB
- SHA256 08381c6a2df82875f53e318a0eccb6e5bc1feb5acc2cda47a09464448cae0ab1
- MD5 55fddeb96f8f4e2d284f2089f51185a0
- SHA1 59171d14f6723f7c3f0f9fce4f91c7354d97e390
- SHA512 a89993ac893a0eb547a5515e1e9114e700d8cf152f4cc94fa74b08e3339c9654935da01fdb5fa89f33894087f155f5ca9c7dda4247cc9ea8db77f58d94aa3ad8
- TLSH T1D2516D8C5450496E104E4BAA356FDE058B37E78093892F1C9EFE830EC630D513CB5B6B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\btn_ov.png
- Size 2KB
- SHA256 597e0ab3e0acf2002fcce2230d31998ef841014183a6e88a9fa1ab756dfc584e
- MD5 792ebc92c4e3ab8a4c9003ddebaa2c0a
- SHA1 c2e3abbad4f10f0d745a80a2d19eb27272978b92
- SHA512 f65962dbe772c025214f5016c56ed11d182e3c92ef97c47be475bbd10a091957bb899d97a634184a9539602f521a6593ef672cc0aa82660cd1fb30f745cd251f
- TLSH T101515D8D9444496E040E0ABA266FDD468767E7D4535D2D0C9DFE834EC720C917C31B5B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\button_dn.png
- Size 2KB
- SHA256 667ab0fe0c2bb99506789ab50b10a6977a74f623d7080b01574c67ebf9dc2f56
- MD5 af7c9e0a97276fd814b6004a030ce4fa
- SHA1 626beac92f060bcceb7b725b9de42a74e278b0d6
- SHA512 d3a7ca1091d842800429e39afd5c975ec7a09a2f45fdeed0aa1463828d3fb58d5d7cf52f995ca210ccc13c86a6e9a4ee685f0c1df2d21e99575336ad8ea0fbeb
- TLSH T1CE517F88A8444C6E144E0EE735BFDE064A2BEAD853596E0C9DFD824F8730C507C35F56
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\button_nr.png
- Size 2KB
- SHA256 15ec287db50c6966ba97d0c4f4ccfe954bdff25e5e9cfb4feaa645b01f288af0
- MD5 04690ae317f75268a219de545091b740
- SHA1 7a66ac09357ce139609d34d61de31deb250df588
- SHA512 a47c87dcbc0a387669be25f801f7339d3b0340d3a43b7dd33f99a4b167940cf67f8969e182e20b0011be5259079744d4ef724d22969a643e4acfc071d8c4de70
- TLSH T16F516D8C9944495E100E0BAB396BDD064A6BDBD4935E6E1CDDFF420F8720D013C71B5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\color.png
- Size 3KB
- SHA256 6f3a9337f02545fff4749c6be09647149a295d1507304beed08e902c78c337fa
- MD5 2161968b1612a5279fbb72427706be7d
- SHA1 1f9de94a919dd30b92e99d7a4964d7a4b204214c
- SHA512 4ceffa07deea0ae5a373aa99a263b136b4d645b8a4c56eff3a2e3b40ad1dfdab0b442eeabf20e047fe75ea76778696c6d212ab87590df7686a37fb59d8088ebd
- TLSH T17E516D8D9540041E144E067E36ABDE068B3ADAD452CD5E1CDAFE814FD620D503C34B9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\exit_nr.png
- Size 3KB
- SHA256 a801af805c6ee627fb9bc26449ad832cb1b3136378010d359599222c06a7c310
- MD5 ae910f8f3b314790522972829dfb3ceb
- SHA1 c502d444f44a1f0f67a77f130543b9cce3a5c9f7
- SHA512 23c14ffc75a3b6b7d84265e2c700481aa3bc78badf96151a3edfb16e5043037485f0e64bbc7373de899c9d1ffe67739647e3f684e4f29c1712f4d289bf81983b
- TLSH T12B515CC884014A69114D0ABA35EB9E074F6BE7C453A91F1CADBE838F8720C213C7565A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\exit_ov.png
- Size 3KB
- SHA256 9a325a47bdeb48a97b2446312ec813c0f9186bf0cb78b36f87dbd54f6852e638
- MD5 de3c8b5f7caa4d55028055388026c947
- SHA1 af9c785705792fe9a4522fefe3df041915c0131e
- SHA512 d0ddb7c90bc6cb67450232cdbd24ae5ca11569b1f636d27a695bab96c331ff4b83701b5cd30be29a4da7140167d94c655b7fd95252614ecd77045ac3cbc0b2ed
- TLSH T18B515E8DA4400D1A114A0AA6357BDE0745AAD7C093592F0CEEFF430FD610D527C31B9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-BOUTR.tmp
- Size 3KB
- SHA256 27066a6d29fd62982a02e72c1c4e5f6b3f6e18fe8598abea96f3a8a2852f4df9
- MD5 e6173fd5e6418452681d6342052baad4
- SHA1 c3545121d86b254e38bf3389a6b5f852204f6f56
- SHA512 0ad0ccf0080df2d2160fe2fb5dc4fe71cec448d790ad9f8bc1903e7a846e5f6189419864df5bbe41949e53deccda9913b712a9a72e78b07eea1125339db60f9b
- TLSH T1EB514D899454442D254E0AE5397BC9014977FBC8C38D6E1CAAFD424F8734D613C35B67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-P6U7U.tmp
- Size 2KB
- SHA256 c651f7c8550ea5fec0e195f397dd4e345468356be3e90c3f0770842dbe11ee25
- MD5 e0d25264311348163a8795c548d3296a
- SHA1 5f4bd993ef92e3cab5882053b4d1f7b71e48648a
- SHA512 1639b8f139b001efd7191143b38175e93bf93957aaced4e75153a64733ff14ccb8cc2f7342e3accda87d33836d6f036353d06de5c3897260ca4117aff640f5f4
- TLSH T139515D8A58444619104D0ABF356FDE0A4E27EAD4534D6E0C9DEF834FC634D917C35BAB
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\is-SFIG3.tmp
- Size 2KB
- SHA256 56ef3a325a86aec24f2a9f5daba1b1df4ecf24c6af1bf64774c0735e779d1646
- MD5 93adf0db6c18798e07321b37d92f2da2
- SHA1 aedbcc3c32ace003a2379a0b93575ab2095ceaf2
- SHA512 881d9834e7f6a8f92270b3cd30716532e0c83262a29289744e23dc0b907127772fdf47d9331d6ced5d055a916a09b2535fd82383813bb9e6ffcce968fdbdbcfe
- TLSH T1FA514BC89444451A000E07AA356BDE068B27ABD4A3992E0CDEEE820FCA20D513C75FAA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\keyimg.png
- Size 208KB
- SHA256 6e42b96e1481089a1bf52ced5e2359b65746707ce7a70499f93c539d0401e5bf
- MD5 8118c07345c7787210b74d83957c7678
- SHA1 afa087abbe9cd05368013e1cb33a13b9bdf1ee58
- SHA512 1314d4a30cabc302df4cab7ad675fb5e330f0f63f7e25b4e6a14390f7689437cf334a654a61cc9d9bce6a39688754f65743fa9edd5888079ee6f162299b925b4
- SSDEEP 6144:BKi3WkK0i8ZrZKuH/BG7GJ6Xxgn4YtAgRC:BKi9bi6K8/BGaJ6/UT0
- TLSH T17624121F45CB2276AF19A977B968B2C78FB04736CFC325E4C6E241C21A1D96C432C5CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\lbtn_nr.png
- Size 3KB
- SHA256 321a35f192e962ddba8d1b4756a3e045b2d98b6c781689e83c791e75af3a732e
- MD5 d7c7f2f493a52105a495bbefb0e31770
- SHA1 89af81b4959230086cb469ea67eee152bad4a0cd
- SHA512 fe554a62978b4a85f2a1ca048f83e62db148da74694796b6e694efcf5348c29ca66e434b2fc527ee984e2b5d8eebfc09d4355e65cf025b2f8c8df7c8a83d09a3
- TLSH T1C0515C8DA841862D210D0AE836F7CD068A27A794A3592F1CDDF9424FC721C613D75667
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\lbtn_ov.png
- Size 3KB
- SHA256 1da5178839a71f1fc6bfc1c6480015b5f305df5d5e8e0bde607c1ae567670f7f
- MD5 35c170ecf1ebb48e6225b031df8056cb
- SHA1 4f7efdf4bf8b291d58afbb59a3c9c6591e636df5
- SHA512 ecc59c78b8f04c1842f3225774d02488b40980b077f1139484f47a3e4b29ac1207f5ac5f6da144d566c269ea7a34995ded3977e2061cd67b9315e18f32ef9277
- TLSH T1CB615D48A845485B104D07D62A9BEE098B37EA90D39C2D0CEAFDC11F4620D623C35B5F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\main_nr.png
- Size 549KB
- SHA256 1eb27d3d2d5fca36016cccd9f2aa67e6dd56b42aa96655c1cf1e025d5ae612b5
- MD5 dace55e5011db404fa0de43024170fe3
- SHA1 6d9febf46930b816476e447482d6741d181d3ccb
- SHA512 7173f44cefd94fe42f60da47fa37b1686a54c6a3c625bf02f4f7b91628ffcca79ebd0c6e924a372ea86020174572b2386f48e75060df379f2b4689a1d3a9c82c
- SSDEEP 12288:2jfmB28KOi92MJH3cSl19vJUBO1GhFlG92BPX+lj4Q5rGa:2jfmJK592MdcIwh/G92UlZ5rGa
- TLSH T116C423C5788C0C55FB95256A2389366928CEF45890CB8CFACEC1AD072A47379472FDED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\mak.skn
- Size 520B
- SHA256 ef26a214e6831d58c06afea636df3e3fd51483fa4ee3e78a96c709c45b222692
- MD5 2d762ed865c119a3cf97720a97890f9b
- SHA1 c72457a8ec2609399cdb46b7f5da56d85c4b489e
- SHA512 5d79b571fd799b60a2eae0fbac572997345b7f3fb0edae3cff6e8667da3b29863b63b8be92db7e3170c61bdda45b41090f47fd7d307db70d6fd60a77dd7ac878
- TLSH T1D0F075518FA2CD826FF99CD6CE20C3444C30A572C0136D44A3B0D434A38E847734F80C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\menu_nr.bmp
- Size 11KB
- SHA256 4b920a134ffef15c5f46938051e122c673365f6a86fe56801671801147ac09d6
- MD5 eb926a5efe6dfdbc4901858797cbf399
- SHA1 7ad6fe22ac5be1ac65d245d541091c6322559b10
- SHA512 8b14668366e129223e2eaef2101d09fcbf0b56d58d2b8fe9f5865bf1a275bc0757313d0929cba060e73fa5df484af2f5304452e227e588e0111cefb4cdc64795
- SSDEEP 3:u+l/lJl/bc/lbtu/6R7777777777777777777777777777777777777777777773:ueMY/69
- TLSH T1A542041515000000D17C1070410C454453104575F144C113451130C0477514CC4473C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\menu_ov.bmp
- Size 11KB
- SHA256 8582b236f8d66eefac8be56cad74c8605dab54dc2b0476210836b79803a12dbc
- MD5 66d1bfbfe506ed308f9e1fff19303463
- SHA1 8bfaa2b026c660f7eea502f923b2948c35625c4b
- SHA512 5f8c7b7801a07801fc54810abc4fce6cd3b3c5a6b219cd94416993dd7e3ae5cf7c086453c63df8c104feb4e17ca1b43d015ab9f78ba936a7fd4e273cce11a445
- SSDEEP 3:u+l/lJl/bc/lbtu/6Mb4:ueMY/6Ms
- TLSH T1D242041535000000D57C1030C00C4D4CD1104575F144C113471104C0075514CC4473C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\menusub_nr.bmp
- Size 11KB
- SHA256 12a58b47e9619007717a15fb8fc70ad2c7a19adcaad20ec6d849111d8d25025b
- MD5 84839c291fd963d97611ea0bd883eb5e
- SHA1 2c7efd1dec6bfcb8856fa407510d3ae9d69f0a80
- SHA512 ffcb397abe763e1e5f4acb0161ae1d93b668d29094baca3ff507d053ed946b6b0517a152cc1c15c9a08b1a84ffe9d83fdd91df325d57bee6c6aff2c768986ff3
- SSDEEP 3:u+l/lJl/bc/lbtu/6R7777777777777777777777777777777777777777777779:ueMY/63Lf/SEQ/zXb2HloJpM9n
- TLSH T1D84217E7249C0550E2BCF8B6710A830002753C18BD8388517D0A35C0C7341C2CEF2D45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\menusub_ov.bmp
- Size 11KB
- SHA256 346219caabd1a0b7ceffaaf604f04c46c343ac8589c5dc25062c97b0b0ccea39
- MD5 1e17723397facad317873f74777038bd
- SHA1 65973f5cf94573bde377ce832ee6d0852804d4f2
- SHA512 af33c0969fc30fce1f268f5e4ace25298c9094e1420e781f71cf730d408570599c8321526daea9f127806596948ac630fd0b39efdf00860351658c301df2b73d
- SSDEEP 12:UXMVZmK8D5MrDU4DKDKnDZ/DvDccDFDdDlD5Mrm1baBF:qAZI9Mrn2SdjIcRpp9MrNBF
- TLSH T1B742BDC154212AD8C5686D37F019BE0DD03B1FBCDF08E610A71D7DA2077031D486E0C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\min_nr.png
- Size 2KB
- SHA256 73310a6b2b74477e79ab37df8213a9884d9aa7da5feef1db14bd0eccfdfb1c9e
- MD5 5f2b05bc64f0f2cbdd84b02b9934755d
- SHA1 3f4e8e559e4831b764071d5efdd66c00a929b211
- SHA512 1f70ee4cf78ca5a84f166b5b917add7ddfcc8754cdfabaf84337d72f250752aec0e25cf1a88f4ea65ac479b5a94200eb2884eac8747412ada9c9b1c3743df1c5
- TLSH T146516E8D9441495E104E0BAB36BFDE058A27EB8453992E0CDDFE934FC620C517C75B5B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\min_ov.png
- Size 2KB
- SHA256 aed40270574ec64f02709c8f8287850ba56d184b98e8d9c21dc52ab3bebab0a1
- MD5 6c17b41b21d7c1e732eb740bee67f918
- SHA1 84f2d4ce529b0d3adfdef15a6317067963fc6bab
- SHA512 0ecce0e07b66f72e99c48f54e73cfbaf06f310cff925053f663f2f868ea8bebd0392a6b4b21d71b9d826b6cf4a039cc98c5f841230b1dc2934375fa29d1ee843
- TLSH T167513A8D9844455A100E46AB2A7FDD068A27EAD453892E0C9AFF824F8620C113C75F56
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\msg_nr.png
- Size 92KB
- SHA256 7170781a0cebe40690cf855b1a77613be21ee100d208dbb1ab3fd46f097a92a5
- MD5 fe59821665371028e441be93c317ed27
- SHA1 840972e003bea1b5a576276032324f12ab5179ef
- SHA512 e2d1b9cd27aacc1ee233e19fc122deec7003f4fd6c3ed250c17d13cc535a654443c7329ba50347680e74495ba3ff61cadf5b9af7bf46fbb231bbf91bd0b4abe0
- SSDEEP 1536:Ka5PvwBhesXdCui0mbOxkoRZ/macr8IYFoZY9G3rxT5oxgAeq8wVeIbueA6F:35gXNt/Zx8aTRo33h/AawVeIxr
- TLSH T1A593127A0AC44275A741D234E1AFA71B3EC15E62F788684A002E8E2D4B435FF74D0A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\rbtn_nr.png
- Size 3KB
- SHA256 f99b2ad97fc7dfb8a52879450d4305f6d38d096642986110c1e2f2c5130fe5ab
- MD5 e382f9a8430b5dc416b24208c6d28b61
- SHA1 dfeb3ed904c1ce905871fc957b1b52ab6abf5b45
- SHA512 abcfa08dd1df98260513492ae509d4673e89bd02586d93f2b7b0413218acacda7cadb830dc17162a42cf65fd430841b610d0483e8b5c1079e87dab83ea024374
- TLSH T1E4514E899841496F104A0AFE356BEA064D679BD493DD7E0C8AFE830FC624D513C71B57
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\rbtn_ov.png
- Size 3KB
- SHA256 19d49b11532efe7ba415eecca73a2d6885e7605cd1536d84a13fb8594fd4da85
- MD5 5bc45d1321624f6795627105f929ad5b
- SHA1 d3e451f81d43477110a6451f0979094e2abf860f
- SHA512 45681b448c4670141a774cd028e16a959405973ffcf65b329fbd760846f7cdcca78c193b8720cdfc7650993d8d790f22387c7e66b97d61cc5881ffbd987ff5c1
- TLSH T1F4617E8C5844497A210A07E929BAEE024FDBA795439D5E2C8FFF820E4632C217C75B5B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\rcolor.png
- Size 40KB
- SHA256 1bedd0b2f77236ca6981f6ce8a238d4092e62b56151c80e561527681d3a82809
- MD5 b584a6d959ea85cd85fc1cb41398c54c
- SHA1 d121f0f8860266430e4a0b6f1faed3de493c9b96
- SHA512 5e11797c4370a7417e58be84fe8cbd077626c5a024888563b5058dcdae9930be46ac2d3a3f7ba593344efc5a2709fc525113e1831a60c04b6ffe3ec317a0ab94
- SSDEEP 768:+AVCdVQczZjHt/tvD0f5QD49KDDCpjrdB9nemsoWb0FiN6SKusyMXsa2aRS3E:+oKQctjVtr0f+BDedBBemsoWuXfj2lE
- TLSH T14E13F1DC97584E32CE20E152A29A4C2CF222A88CDDE7D69F615966CB0954E547B3DCB0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\slider.png
- Size 3KB
- SHA256 e0d952b9352e02a79569661417ecb8ce900a2662e2d22632dd0f6091e0c38449
- MD5 8afc823b14eeee18ede06a42a6575c7d
- SHA1 400415bb9dda033278925c642137756175cda1df
- SHA512 e34d473931fc7645eee44f72c767329eedd0ac58594f59bff18d6e31769d099d475412bc218827fb31019070c7b1fa25517d72900bf738cf3c1f9c168d283a0f
- TLSH T170516DC98844456E014A07BD392BDE064A13EA9443AD2E0CEDEE834F8620D613C7ABA7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\skins\text_nr.png
- Size 3KB
- SHA256 f3b1e96c590af2ea2ba35d049e154c16999423b573c402e84fa6a4b2064bcce9
- MD5 98d263ebbf85eaae5a39b5c060b9066e
- SHA1 10d6eced9f2bf27d4aa938dc455c6453aa4a6a09
- SHA512 2a2367635fd87168627c8f66aecf5f976c8f3d7fd0eb24bbb501a06716c46f6273d20da4f6ff9f56f892037898602c20f7c50f58453ce0f5bf1b436c9cd2e41c
- TLSH T19F517C88A044892F100A0ABF36BFED0A4A2BD7A043595E2CCEEE430F9630D513C70F67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\text.xml
- Size 18KB
- SHA256 9d559950665b472197f667b5c1df240ac5015f62246f976af988f163a6ccd673
- MD5 c9a89f7f671cd19ae59734890fad6acf
- SHA1 f099ffedb9ca8fdf0c6bf5eca54d6b5a3c26ccf3
- SHA512 99d4cbf6683b421d859460f491493f01cbff3482c090f435c4946e61d2ba64afb3558e1cc37e517adb70a6988d6803281a2f438f9001735cb0b0a4eae4c8fe57
- SSDEEP 96:YFIkHsD8dsA3TpWTDscs8mk8+W2zjw42Bt+LwX8wt8YdsI1LeOhR5wcbAw/cfn8b:/ki8bPMI0WETqPqyaCVCF0cZ71w
- TLSH T17182DE0727FE4199B1B2BD491A7044688F76B4D15D2DCD2C06A9104ED8E3E50BEF2BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Redragon K652-RGB-PRO\unins000.exe
- Size 1.2MB
- SHA256 b321c17094b37eaa42d5701ac8c3f1cb5831c06c466326113e93566b1ca8c26c
- MD5 631801370812cb4a711829b5c5e7bc39
- SHA1 86edad6eb8499b621ae497f891a96d101aeadbf6
- SHA512 26ed827cd65fbd2efc9ae11203cd2adedf0cce18dba0ce87aca7eacb50f1641e5d730f532962edfc4d8e6b69fc9880efed8e2cf333110b9022508ad40f607f90
- SSDEEP 24576:ig4CPlHDJpAABVPuUXRlsEaD21ypxJj/HehNDjB/6xPqMUroC8qPx9es:9/BJpAOVmkl5YpKN6JiN
- TLSH T150453B12A3D28437D1732F759D2BC2D45C36BD212E74E94A3EF8AE0D1E39B41A935392
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\RedragonKB\lang.ini
- Size 20B
- SHA256 2c5451afc3ee4f44c5dbf63d07377485ecfa52a024ac869f0ee113c9c1cf59f0
- MD5 3466966af42fca8c865339ffdf7bcdc1
- SHA1 634110e8670fb8a79cba5ca7525d9e4d6948e332
- SHA512 80e609b099f0390cbed23ad968ac36c5ea7f66ab05c7b188221c6d57ee1a9e9bcb2584795288342ea7b34035a85dfc1aac7ff478049b4cc819eaec06de26f843
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\is-QPCFM.tmp\Redragon_K652-RGB-PRO_Setup_V1.6.6_20230324.tmp
- Size 1.2MB
- SHA256 79b327db4ad8e17493570635de727d7171008e14249c075d48acbb420a492df0
- MD5 846c994f81b34d45e595ecffdeb25619
- SHA1 c2aaa8d2f777711ebcc1b73be0ecaa5efbe9c6d2
- SHA512 7aff5efbd0835d1a779889353ae74462474037c3688530b5b406c79137f38074e49779208e1acf1e0c0d8a15ac313d8191f3f3888d2a9c3eadeecf53f91f83b7
- SSDEEP 24576:ag4CPlHDJpAABVPuUXRlsEaD21ypxJj/HehNDjB/6xPqMUroC8qPx9eW:l/BJpAOVmkl5YpKN6JiR
- TLSH T187454B12A3D28437D1732F758D2BC6D45C22BD252E74A98B3EF8AE0D1E39B417935392
- MD5 SHA1 SHA512 SSDEEP TLSH