a371f507daad8456417797172a22002c56ed29aeb5706c7df88d673cb9d3665e

Analysis

user interaction
yes
max time kernel
30s
max time network
34s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
27/10/2026, 01:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GenLauncherGO.exe
Size 54.1MB
Sample261027-cewp7acd88
SHA256 a371f507daad8456417797172a22002c56ed29aeb5706c7df88d673cb9d3665e
MD5 04db793af320dad3d22d4849c301321f
SHA1 2d9f8362384fce2c97fde1a053da65d47c825efb
SHA512 4a58b0645c0be0d15a86c2d846af62fd4dd348ca522d0deac483a90add28edbdd5f81761169edbc9645be932638afb2dde84de9f8ce6e5a19cb8d47af630e4dd
SSDEEP 786432:JbiI/ig5FDIe4I5gGhj6f+5cgsJ9m1A0hb49a0XnuavlL6zECOMBsew5:JwgMeJhjegUm1Jhb49a0eavlL6zECBtI
TLSH
T1A2C72256E2F900E8D4BBC1B8C6570527EBB1345603309BEF25A48A692F37BE16E7D311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
632	GenLauncherGO.exe
632	GenLauncherGO.exe
632	GenLauncherGO.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	GenLauncherGO.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	GenLauncherGO.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\MRUListEx = 00000000ffffffff	GenLauncherGO.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Downloads"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\MRUListEx = ffffffff	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	GenLauncherGO.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Documents"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\MRUListEx = ffffffff	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 0100000000000000ffffffff	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0 = 6c003100000000002b5d2ab210004f4e454e4f547e310000540009000400efbe2b5d29b22b5d2eb22e0000009e6c020000000100000000000000000000000000000007b9fd004f006e0065004e006f007400650020004e006f007400650062006f006f006b007300000018000000	GenLauncherGO.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	GenLauncherGO.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 00000000ffffffff	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\NodeSlot = "3"	GenLauncherGO.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 = 14002e80922b16d365937a46956b92703aca08af0000	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\NodeSlot = "4"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	GenLauncherGO.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	GenLauncherGO.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	GenLauncherGO.exe
Key created	\REGISTRY\USER\S-1-5-21-2545564138-786060179-1728272436-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	GenLauncherGO.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
632	GenLauncherGO.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
632	GenLauncherGO.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
632	GenLauncherGO.exe
632	GenLauncherGO.exe

C:\Users\Admin\AppData\Local\Temp\GenLauncherGO.exe
"C:\Users\Admin\AppData\Local\Temp\GenLauncherGO.exe"
1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

av_libglesv2.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\GenLauncherGO\KxwjP1dDq57F\av_libglesv2.dll
Size 5.1MB
SHA256 53191a77fe783cd757ca7767077c2a64a662e7043777a5b4ab74980d4a0b73e3
MD5 e6198925c32669264eb2a37a5c5706bb
SHA1 f2bad0cfc40bc642dfcd7242c3fcfe736b617eab
SHA512 d2836c7335e70171d2dc0e143b9752b1d4947d3b6fe424c2078118aeabf12ac008b7be91adcba6e2616e143c5732afa6a0089f412a5e2d97a3ad76aed6c99aa7
SSDEEP 49152:UrRhIIcDUAsu5h76YosYgIiiHtY+52ZKLArXaqxRyiEIrYeoEFjWhM+/9+XmEFqZ:aiQsmz2ZdKMyiEIrYeoRnL6Uyfq
TLSH
T190467C03F29250DEC41DD278875B9223F635B8450725B6DF26A893252F77FE06B3AB24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libHarfBuzzSharp.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\GenLauncherGO\KxwjP1dDq57F\libHarfBuzzSharp.dll
Size 1.7MB
SHA256 145ade963eba427027d5e1381db5d51a0ef9e98e9fef9efbfa6074ca20da246f
MD5 fdfc5facbb8d7ed52bcfeda911586cd6
SHA1 ae248fd8f3e3df80bab5dacdc098a0a7136ba94d
SHA512 d49b78bda3a0e70e5b70eb537ce5cf28b00c5578d8edd2e5bd0e9b8dbc3e6cb983bb5ea38dfda0170ff2851fecd78e702c00c7483628d920527546e94903a5b1
SSDEEP 49152:48lOq9ewF9RTbAsC0e+yPWojc7dGl09x4HJg:I2dclAJ
TLSH
T19C85AE4AE2AA10E9D9BFC078D666950BE7A274050314DFEF25E08695EF23FF5167E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libSkiaSharp.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\GenLauncherGO\KxwjP1dDq57F\libSkiaSharp.dll
Size 11.1MB
SHA256 7dec3ba900ab353491e6446f0083739924c6f8dd668832e2f09d38ebffdbbe1c
MD5 7b0859b4d5a23d2436bd165f86bf9d4c
SHA1 a8cb4ecdca12e2b07974b0478c9f5494e283d784
SHA512 0b87163b211c0da87af194f9438d397489e2a9d550b4f56613ce8e44ea7a48d3676fbb8161fe72050401618e69eefa7da12c0f7a3d7634ad78c461a572409de0
SSDEEP 98304:51DUue0xnR1JG+VyXb0UDfgFTdbkLhQgPLSmrQ7zMEGFD:51DVUDoPkOgPLS5MEGFD
TLSH
T1FCC65C02769B54BDC44AC4B4934B5A67AD2434CB0B35BCEF418592393FBABF42F39618
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/632-24-0x00000277675D0000-0x00000277675F0000-memory.dmp

Download

memory/632-16-0x0000027769F50000-0x0000027769FA0000-memory.dmp

Download

memory/632-4-0x0000027768560000-0x00000277694B0000-memory.dmp

Download

memory/632-28-0x0000027769FC0000-0x0000027769FE0000-memory.dmp

Download

memory/632-36-0x000002776A020000-0x000002776A050000-memory.dmp

Download

memory/632-32-0x000002776A090000-0x000002776A0D0000-memory.dmp

Download

memory/632-40-0x000002776A200000-0x000002776A2B0000-memory.dmp

Download

memory/632-12-0x0000027767510000-0x0000027767550000-memory.dmp

Download

memory/632-46-0x0000027700000000-0x0000027700010000-memory.dmp

Download

memory/632-8-0x0000027766D70000-0x0000027766D90000-memory.dmp

Download

memory/632-52-0x0000027703CD0000-0x0000027703D90000-memory.dmp

Download

memory/632-60-0x0000027703B10000-0x0000027703B30000-memory.dmp

Download

memory/632-56-0x00000277059F0000-0x0000027705A20000-memory.dmp

Download

memory/632-64-0x0000027705AD0000-0x0000027705B20000-memory.dmp

Download

memory/632-68-0x0000027703B50000-0x0000027703B70000-memory.dmp

Download

memory/632-72-0x0000027705D90000-0x0000027705E10000-memory.dmp

Download

memory/632-20-0x0000027766E20000-0x0000027766E40000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads