Analysis
- user interaction
yes - max time kernel
58s - max time network
25s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 18:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vertex Recode.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vertex Recode.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target Vertex Recode.exe
- Size 212.5MB
- Sample261029-w7glhsft8r
- SHA256 75b021a91cb798e5b0cb28a393686c44675969c9d87f5b19a0954b5e5647d54a
- MD5 ccfb32adf42da5c3caeae37f36af4f39
- SHA1 a397ce8b529a3cdf3f9aeb2675fc908551befecc
- SHA512 39d65c3e7aeab8882ae347d520c6f8d38db0171cec1e2a34ad6c436d2440401c82139aa9f0845d96bb59a8f2d3ab907607c917aba295983c308d1fc4a0b2b0fb
- SSDEEP 3145728:2+pkne/oa3UBrcelKalGGhzBrYl4b9X6KPuMYW9:1rUGelLlXj9X6KPug
- TLSH T14DB8D015A3E80615E27F827CD6638212EAB1B8531321D2CF0599DE493FA3BD19B36377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 34 IoCs
pid Process 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe 3904 Vertex Recode.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3904 Vertex Recode.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3904 Vertex Recode.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\DirectWriteForwarder.dll
- Size 470KB
- SHA256 fc065f3fe00941465596396cb51fc927ed9f9b03a2ffd18498ca0eba42ab29d8
- MD5 d6ffbc95fd9aa2af67a77ec7671a7560
- SHA1 548530633ed93bea13ec9e85ef44017a7a2eecae
- SHA512 57a8ba9b40fc212cc9398b07967070aeb7170df2ac4490c0cae244079c2827eba3e270f8cab02165d1345cd5f6a88cdf4b169630b016e6935026bbbf92456b14
- SSDEEP 12288:2gOPaNTfOf8JGy4fT4Lrl+RWo2q8Evtr9:L+aJfOfrJore2qxtr9
- TLSH T135A48E65B7C92663F81E82BA8343C162D630E9F25703E3C3C64186652D2F7C9D7376A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\Microsoft.Win32.Registry.dll
- Size 114KB
- SHA256 62064d17a313640f4dfb7b7f8116ccbb70b0b9f5b9643a821c99b6a544b8d8a3
- MD5 f97aa09853250bb3aec94ef881267d2d
- SHA1 2cea6aa98036ebd4082eef033af0d24108aaf76c
- SHA512 ad3019481e6369b62c5f0ef630492a1880ede427136b54de5bc410067cd2234946b75c7232eacfe21379dec22599d80db690e3ddde3bea378f1d49aa7bce86aa
- SSDEEP 3072:FQ2wrGx6bAYMtGJSvEdy7IViFnv5fatHi+iMN:OKVtGJSvEdEpR9+3
- TLSH T11AB36B207BC4410BEA7E45B89C734846E236F5961B41ABDF06D5C0DD2F63BCAF632562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\PresentationCore.dll
- Size 7.9MB
- SHA256 605fd26a2d1df0d81b3de3cb233365dc6091ec7c72c48b22fb805819c8f57654
- MD5 4bbadf1c623c7cde7ffca39d1ea78efa
- SHA1 bf98bf3671adc7d690baf985503357606e904677
- SHA512 041308e6d10f62eea70bfb09bfe67fa27f351ea5615661e139337cc088710a5e5d5d4a87533fa6fb945e15ec9fbdfa73fca7ff43a2cafff22bef7bff976975a6
- SSDEEP 196608:TJKHa+yJJqSCqa6SCc/4blNr+0s5PFxb0yNhQeT2kiYj:TJKrKJCg0RhQeTlXj
- TLSH T1B3868D18E3C94E25D23F85BDD2A34142F9B0A063571192CB386DDB1B2F93BD1AA77163
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\PresentationFramework.dll
- Size 15.1MB
- SHA256 8588aa2d06566d6b4ea1bb9e094384d3584b2ce085ce79395179a09481727ed5
- MD5 8c35b8fa16a56bc82861bf19f00526a8
- SHA1 6a21ce41254dbc1e946a5a62248993c4c206418a
- SHA512 b61143eddebffb9581605f65a0170e5c1762662bb4284be7d2e91084ae00bcb3cce5df3683d2eeb1454444fe288d7f479eba5d4cc899128ebcbf156b0b528e75
- SSDEEP 196608:b6P3bulljBxsHJVOd72ZCzkgr/erKHvAtccfgMbgDN:6eljBxsjOd72Ze3PAtcd
- TLSH T1D0F67D19E3D84A05D37EC1BF82632102E5F5F8B6937285DF0527DA492F83FC1A676262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 28e0f19f20f8cb6a5e558c674f3ae5dd88b62ea0bc0a890d95a33bc9b90667f2
- MD5 a99ffc4429a17decf6633a1a7e2210e9
- SHA1 7c353fca7da3bd4953c0738c91f9506c796848b2
- SHA512 2f984b58d1d9ad4740a0d6fd2332e4cef013b05b43e0915ad9283f3a21b661a038d88015d1c19de109183ff131ed584fac177cd93467069f0933a2b529809e2d
- SSDEEP 24576:5galtAn1r1sE33slrVCP0QSeDOM8zT3n6kcNbNUdah6ox3GmOBlIefATbpwwPQFw:snR+g8lYP00OM8zT3GbNUdvoxWZBlIuO
- TLSH T16F453A22E2E642E5C47FC1B8C6469717FBB1740A131C66DB87608B652F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Collections.Concurrent.dll
- Size 290KB
- SHA256 d1b550678fb1ef26d2dd0efdd9e2c72b3c4ac16cb22272b8494716e9def83e30
- MD5 328624ba0866f2bc115f1422222a8fa0
- SHA1 1d35d6a92528c911c48e3683ed382206596fbfe4
- SHA512 69450b082b842887313f07c9dc24cb2105c31db8db62b02bc27f1a0da5a583ad4462fa08d9999321e9cd48e6f27c523e3d363647ec9623a05f73c9e07f94db40
- SSDEEP 6144:v8j3LgMTswUG7nL75h6rg76qmc2csmd7mA4:vo3Lgfwt7nLEGUc2GC
- TLSH T112546C20F3880317EC6F593D99A3C605D57A545A1332E1EF0278E5446FAFBC36BB6192
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Collections.Immutable.dll
- Size 858KB
- SHA256 e6c6c20f5435b80be6cf2024f5279d823e73b537541cc74cbef10a54eb1ada9e
- MD5 a4bf98703e8a8901f5d6bf3735e2a29a
- SHA1 21041895a1dd0f6e20072238a3541f93a0c67cba
- SHA512 7f3e2b0e0e0b4da69da9958007f73efc36e7bd9cd0ed8c923d65265b49accadbc4a45bba36fa8cc3ec114d4acf2230edea36bf4038528d940312fb7b79c84bbf
- SSDEEP 24576:vvnroGV1p/UfINNeylsrk32dI2vN5IM8fgIs8L2lqY/CFeED49uPRymVXJGG/tAj:XXfg18L2lqHD6
- TLSH T141154919D38C0731E23F82BED5135195DA919413D3A292DF24EAF6B43FA37C1A6BB811
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Collections.NonGeneric.dll
- Size 102KB
- SHA256 1f4d13e03ecdaf1c1d4f0c8b14c13dde2e9bc06b9945a06d6d2207bfa3ef2958
- MD5 c1bb24fe3674e738dabb37f13e51b967
- SHA1 dc5eaf440f89c09b598cf0a3c6a789c66e94da12
- SHA512 66a25fdb7cbc152d97990956c26a6b2b9c76a3e590d1bfc15082a76579381c7c1547243b3308beeb23d222065f4948dbc8dcecb99a7b1cbedc9f1885558fa892
- SSDEEP 1536:HPKmtoofN5YHijJ3+IOj4mwsxmDagF79Jj51RlLHLFCb/Dyp5tzB:HTtoofyoJ3+Hwskm0LRljLFCnmHN
- TLSH T1DBA33829739C4722C6AA62BD91578446E3B0F5E32312D6DF1408988E1FA7BC5CBF3167
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Collections.Specialized.dll
- Size 102KB
- SHA256 3072922333368e079e861529faf49d2d5c29a64f2488637330a765bba55a9adb
- MD5 83b7e669c1e70ff3067f374d85e0e4e1
- SHA1 664e7ff89bfb199418490cbcf1897c0121954249
- SHA512 7d7176b6d68936d5e4de77983dd2cac6c61c0bb347881f48c948122edfac6baca93cef4ff35d4941695eba5ef011cfc33211afb303685bd726cd5249d986d407
- SSDEEP 1536:dN7ipvR0Eo1u7oNfE3A0Jivc9EywNSeNYnDRrhXzNBzv:dspvRKggMtTeNYnDRrhX3j
- TLSH T1FBA3392873888B25CB7E92FCD5A38A42E770F1D32352E6CF194AD4491E977C0867616F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Collections.dll
- Size 290KB
- SHA256 bf5bba7a132e68ae67fd0b53ecfb1d836e2801501917b4bbe691d1ecbe0a57f6
- MD5 d8759704bd412526139861a0230f11af
- SHA1 4f98882cbb00664bb0b8b5f8eb0bbe06addd49b3
- SHA512 954170f66f6e5ea362f39c70346e08742f6613432511c6dbf2d5645d88237f89412b49f8522d46f5d627ca1c698d8c0e8d234e82fd15c99602aede4cd05804a7
- SSDEEP 3072:TvzIFcW6cubePcZNweYP+ALH228/SOcS2QMsf0r3p9dJ2SAm0Gb0vw9DipyOJ2h2:zc6WbuaPcHh128/xcML8ph2wP0SgJ3Jz
- TLSH T1AD54172C738C6710FD7F41BAE693C006E37E9056835086EB06BEE5509F9BFD16ABA015
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.ComponentModel.Primitives.dll
- Size 78KB
- SHA256 ce31bc8a28036523ed7e5383ef115cf8e5fd7c0040c898e455a8a38d7772ecf6
- MD5 0cfad646731a10277c723cdedc957945
- SHA1 d537acb05e72ea7a7d9913e5727d84b84cb0f448
- SHA512 46693342dfc3aa132080f3d3491c1ae8495d3eb20dce6391f05bb978d15fcbd39d805a591522811afea6f394bab329cae59dc75c966b7a96e4b5e307460e3a18
- SSDEEP 1536:IEu9l7I7h4qjUzMJVLvrYu2nCs/ItsP/czTt:Ijl7I7h4BIrLvr52Cs/vUnt
- TLSH T1EF734B1813E80319EBAD567C96B39910D574F5971323D9CF46A0DA0E2F8F7C2F271A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.ComponentModel.TypeConverter.dll
- Size 750KB
- SHA256 bfe600605a704258c07a61765eb2bd1826be160d9a9f2c8c0e144a7c2667f3a0
- MD5 4a9d9007e2dd3b1ca1749d929b6ed721
- SHA1 511046ef307eb4e571f003688c965d2ee4cce6a0
- SHA512 6674c899a02f0f3f8c4a4b231b3dabfa735556761637bf6ca90524c71d9a1748848d3836a66d8d97d2496cdbb5abf010f8146781738a991e0a993591d6dabbda
- SSDEEP 12288:KMYOiL+h7kL83a2PN/Xivt7uP2oD4Tq0Wb52amhWe4rBvq+I/YM5V121a:s84Y3a29ivt7uP2Amq0Wbi4rBv8Yy15
- TLSH T106F47C18A7C86A36D7BE827EC6230502D271D883A372D6CB2694DD951FC37C0A7B5772
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.ComponentModel.dll
- Size 30KB
- SHA256 67166101dae5ab4799f3882210c82dfa732d294861a2947529893dbdbb0f0a04
- MD5 b9bd64069dcb1efe5941d2c4e64f5481
- SHA1 3e9612e523a9b0e4d2fae9a8493f4f766c82690c
- SHA512 1c7e25322b464d5ba9ba1754f2ab6b7c406e1ff34d570139c62cd28c44e596b1d61dde82ffddd44491ac824b6e449aa72ab6762bbca2a17e51eff3d853a57236
- SSDEEP 384:j+W4W1W+B0t46+U4+Yd/hljHRN7vtaRp9R9zSpp:j1L5sodDjvtaD/9zM
- TLSH T14DD25CE28BA88203EC671D7097FCEA437E3DA7D69E01826B0585F6452D53784AB3063D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Configuration.ConfigurationManager.dll
- Size 1022KB
- SHA256 9df7db26586bc78c301cdc5a04db47fda8275e07cc8d7d11f03299c1363aaad6
- MD5 961510d4e624d9af6d265c72d988305c
- SHA1 93b4894b6b6a38a49ffaede843fa27b78c1a5650
- SHA512 61f418e1e4c2db4aa582d0fa11566fd12da354b35be0d78fdb30d93e9496198e2967868e6ddfd2a1e353140b7c9ae34ad82064693b2d15c0476bc3fd42c9a738
- SSDEEP 12288:wIMTDBQp0Dv+3Mu6fOsdV0Z8oApKK1sPTdokGH5OTNWLOdNGsX0UNHyhvW6lfM/B:OTXvCGmDm+6lqg7oU8eMnZ
- TLSH T1D0254A2553D84B19F3BA1778D12A0A01DAF9AD570321C6CFD447B84E2F93BC296F2267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Diagnostics.Process.dll
- Size 322KB
- SHA256 f610d4dfbea961582cce987ac0f254910ef590bc089ce75a7e2e5e3d6a1dd4e3
- MD5 ff92d1e30c1084a1bd1eb3c2e66c8c8c
- SHA1 76f4edee3f7b585b70d4d092c80116acb42d1e96
- SHA512 11293f60fd63287588eb25ed91d2feef6a2e121faefbb625fd7f38a4ff734046f0fe5caa7babba8b645f6e853e0ba7346962ef3417f593724caf910a2cbb46c1
- SSDEEP 6144:bE3GXLBygGlS+LeRq9MMd9jb3bG1PjdlwOMWpNnJK3:bEW7BygGYqeR7uXcNnQ3
- TLSH T145649E286788150AFF6D5778E057E802E27DA44223C1EBDB0250DA692F9B3C3D777267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Diagnostics.StackTrace.dll
- Size 42KB
- SHA256 ffc96fa0ac97d86b6fe93bd1af4449d1bc40fe160cb7e68e5bec2c19386c6f1c
- MD5 59230b2a7d5c1af470fd68e3b8aaf9bf
- SHA1 ac29a04132c902d270f448431b79d86e4fe124c0
- SHA512 86df602b15712ef4e532fc4815ce603658a4de95e29808a383ff86c57ebe981c45723e131855f4b74ef921a6bcb53d0b25c9409ae048e25ddc9599a201f1ab35
- SSDEEP 768:DS/+iNYeWbBZTT8jnf1Cbo4mlFZwpDjP49zOO8r6:DS/+AYeWVZTT8L1h4mJKozOO8r6
- TLSH T18E137D6297A0E223DCAB4474BDF5E942187D9BC91752AFE71688EE1E5C437C0EB3012D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Diagnostics.TraceSource.dll
- Size 138KB
- SHA256 b74622c72a922f424d01807df7f56dff143a142d1bcbd447d65e6f0c27091d41
- MD5 d2551032dee9972686679039b24a071b
- SHA1 45380297ea582c365a09b3bb393aa533c4c7445e
- SHA512 f4aa08be404fed89763812ded488302055f05bd08f76093d7021b6e69b81fc778436aa5e72509f17cfe40fd0ddf6331337e45f84a840b186a510e3a8bad75ad8
- SSDEEP 1536:EFtz/ocSjpgkccwFjWDWApFe8zM25MbcWLgChzbAMwGXEuZtsRm94Xzw1X+2KYZQ:EIxMYnWsaAMCfm9Awd+2KdeBn6+teH
- TLSH T124D36C2523CC960ACB6E0978D6638A21E2B7D8930713DBCB49819C4F1F537D4FB764A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.IO.Packaging.dll
- Size 314KB
- SHA256 4eb0c02e89e92d35eb41384cdb41421060840c51b920766bce7e18ecb7b13135
- MD5 bae68b1973d8178ce6c982948475ab0e
- SHA1 2428298245933628b91b33cb0292c5c57a53c9b5
- SHA512 391b39b6be972ddcfb8df40ecdb5400e9911c1a6126ccca48f2a2e4ab7f98c5a9273ac74af0ccf25d4f5f99bd77d428bce349dba39a91e8b77669352432c7580
- SSDEEP 6144:d0J6TUxuA6WnSCLSF5y+//2WbEUy9vcfylKUV6L:d0JZxuAFSCeF//2WdwcFUML
- TLSH T1C964F72633E80506FBBB5BFC91F3A051E27AB45227A1D6CF0521D58D1A93BC18EB1763
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Memory.dll
- Size 158KB
- SHA256 34b3475af3a7b4c16a9215f15e8abb39d8474fb77f9355c029c3599e3ab0e471
- MD5 33f0b3eefef5042a5378b36966857a23
- SHA1 4a5aaec294b9b9186c569e5df1e3e962cc245706
- SHA512 15615e75902069c092ce93a4905f40c1fc4d5b4a78a22c05660abafcf4b1ee82101e0b183f0560bddce7ebf524e1816edfd213f89fcb53f12f15837272fc244a
- SSDEEP 3072:b3biB5cLJoVRXZsqhpw74pwaGrpXMKf4T/h/ID3RN:67cLaP07AwaGrLfw5/I9N
- TLSH T1ACF35A2BD3980257D92FCABA8716C202DF336051D701A2CB48E4DA491F53BD2BF77626
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Net.WebClient.dll
- Size 162KB
- SHA256 3251bbef435940bc313fa7f7b5fda3036aa0621115cb2fd74fd8c6bffe81b6ae
- MD5 6a0c3e85137299c704331d3ec6da53b4
- SHA1 c0dd8221ec3dcc408941793977ace6312934e06a
- SHA512 870f69bf4f1c5cf9ccc3ce3f8299bc09335e471ef68af7724d7eda800a7f481b9f57ace384956278368c6cd7e2931f548e3d63ca4d893aeb33350b1ee2ad6d61
- SSDEEP 3072:Bztp4GQVPPbVCBtYcY3ypJ9/idVPmQ7gU:Bt+G4rOSprl
- TLSH T122F3492B93D8C203C61F81B8C5678245F7B3A1974352E3CB5898D9581E97BC57EF21A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.ObjectModel.dll
- Size 78KB
- SHA256 7d58a7e50990046663b7ddf83a3cfc9ed706b6c3cf78b3bc7779de988df2164d
- MD5 3e27ce724f8ee2ea9dc99836edf45f09
- SHA1 9aaccbe84079c5772171701dec2ee7b2ec925a2d
- SHA512 45ef80084faad1925bb12123b88475995647c797d1be17f795baf5290ad2bfa4410fec79f6423340933008240553fbb0722616e845347673829157ced291ca3d
- SSDEEP 768:oU7gVH5JMigNdaAoJjJx7mkQFUUbmuGSnMjgPLuUAZ+X2yS47TB1xAnfFvSfDj9P:oU7gVHYiFBVmXaUbmJbQG479c9v6Yzi
- TLSH T11C737A2167C84729D6AF5639E4E35012E635F2F22722C9CF06F6A50E2F637F09B3511A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Private.CoreLib.dll
- Size 15.3MB
- SHA256 3d7f95a986304b99f5f7b00f88d755f215716f2a85c6f41d8a772367bac92d51
- MD5 86b72b608e0fb637bf37d3331f81e1ce
- SHA1 47a0ed448099e57c19fa2605da85786dc2222049
- SHA512 a92f1b90f5da72c531e195a5a27b726379f06a1babebe2df6194d0ab5b5249f911c1322ff5ffb03b72d3080899c9e2a31ad29535551c14d1bec2b23e2d6622ea
- SSDEEP 196608:APV6ccddXr5sF6lMlQEqg1b6hoD7rxIR1bIxWXa:eVGdFsF6+lQENb6hoHtIRCxGa
- TLSH T166F69D10E3C48B9AE26F83788197C215DD79F8525327C6CB0594EE893F23BC5673B662
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Private.Uri.dll
- Size 250KB
- SHA256 486860152a651e5b8467477821e3534ebc5b2e3ea9d716c1d187e2ca914b1fcc
- MD5 6f89adddf09b0f29e4c9712dee74097d
- SHA1 324ceb0fed84c0cbd6c28d02d2c70197d4520c2f
- SHA512 a246bb193dfcdfd732093c523e206fdcec88a02102b75eae3b8107b0aa511a8076b34709f908328e11677fbac4111f8d74e02691b0dda2d200ac035fcdef09ad
- SSDEEP 6144:G++oEOJ/tOhgnYGFr76LGZxJyjMjPhArX+AVSP3m/3tpeB9pSzF17K3O2djHMYYf:G+oO9tRhtNz+2+HtGa
- TLSH T112448D1FB3C82D6AFB2EC3BA85C7C192D272B5969301E7CB0A7494952F533C06A39553
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Private.Xml.dll
- Size 7.4MB
- SHA256 6ded5188c91af1f54095b384c7bf6d8662987ae79c2329d66f8126910c264fb8
- MD5 a5fcb6be823e87ec8f076d44b5905401
- SHA1 bda69f017c6695968d68c386e4f847987c945397
- SHA512 919f12d305306d9aaca538beee39566efd0c4ca96eb4d1b6265c5a38d9f7b6437b96371c6ee20ca201391b671f77eb0ed1619eec3e3471f216ba0a332cc5a271
- SSDEEP 98304:RmrFmXwjA1va2xQKt5TSJqjfOLZnKOIoTV:wFbm9xQ4TSAiZKORh
- TLSH T1CE767B54A3C40B15C32B86BD82238711E6F9BC631356DACF1685DEC11FA3BC18A7A56F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Reflection.Metadata.dll
- Size 1.1MB
- SHA256 e55347de508011ab04d3f89df0d66eea2fe45113b90b96cdc2fb6b6334da0002
- MD5 8de44e69f4e69fdfd26e980397be1b5c
- SHA1 0efce647bd9613051da5a4b161fea6a8a8ca3cfb
- SHA512 c2845957eccc7a30a9251c27155b546fea99793570117162c33d7d5b0a77d722e0b58763b81fc4a89216dfca17e50eaaaeea4fb824c18f94b50737663891da75
- SSDEEP 24576:ivPS3x3Gt4aOsYaGm5PdJUcQcOzGu09b3sMvaHB:gPS3x3GtlOsYSHQcOzGuvM6
- TLSH T13F359E1073984B1BC23E82BDC1A3452AD661B8525332D3DF6548BE1E6DA37C35B369B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Runtime.CompilerServices.VisualC.dll
- Size 30KB
- SHA256 d4d23491a9e98ad7747aa02869044d1d1bb864b6699971b6184e54106bbcad27
- MD5 5a95b760b215ed3365941e25d062666c
- SHA1 6a5ab67a9bf0657116b18ae2fb03af43118a1493
- SHA512 cd0afdce01e76448e3ae1fce462be9fac2023c47dfa807b1ae9845b12b8ae1288e06b5e3e814d8fa529335cbe676bfd0aa5081ab6efc85ad45447ad78fd40e17
- SSDEEP 384:hWsELWkXlpvUVoAPDHRN7/zddUcDR9zgHfc0jt8sst:2f7UR99zg/nusst
- TLSH T17DD26C74DB98C313EE66097096F9E6432E38B7969F925AEB119CE2061C913C49B30339
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Runtime.InteropServices.dll
- Size 110KB
- SHA256 f7859e1c452b38782db9cae3d92d3b8cc4070b9db0cd3f9538ddffd6eeb1890d
- MD5 a5423f46c467bfd6504d3dc3de97ad35
- SHA1 a9b1e0f0904cf64266e856195e43ad4e648c5d52
- SHA512 e7985ff92040e838a8c0c1b408a84234cebc7d241494062609117ae229ba5e977c712509699d9cf8bf010bb2b6ae521f08a5e229b15459a6b66ea2af29ebb2ec
- SSDEEP 1536:CdkzQtNQMAJNBKTerzicKDq5t4udNY/w2yVvO1ugF94RHPmF20gpzez3q:Cd4iNQMAVKTVC2udNY42yp4ut2corq
- TLSH T1FCB34B207B98863ACA66473898336D448EB3FEC69322E2CF8544C49D0FD77C067757A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Threading.dll
- Size 82KB
- SHA256 b2a0a558cf090b57e00fb1b16796d25d48ff557765c585e7b4c5dd881dab354c
- MD5 46fe29ec5874b9ec36e90de2f4396883
- SHA1 5a0ae55e37fe2a6f6b22080278474b281b77b9ae
- SHA512 51217206737adc55c0f03770cae5ef2010bb1bf7df3804897635b823c2faf1c0ca1faea4a0479f8d802c349db070a22c56c01a274a33d9deed41bbd0c8bc0c4a
- SSDEEP 1536:+lxlwVHH8OyQwXeisjb9RUd5bUF9o6ziond7zV:+zlMH8OxwXdsf9RUHAF9o6Gon1R
- TLSH T140835B11B3E8090AF67B17B9D6B75905C172FEE22B01D6CF4069D20D2FA77C096B126B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Windows.Extensions.dll
- Size 118KB
- SHA256 93d3ae796e6097a1dbfb380333d7fa7f14985f29d4f73baac6e03a163fdf37b3
- MD5 a34deff55f046c04fbe30669e777db08
- SHA1 becb53f785089089ca6a74bd82e2873513c48e01
- SHA512 9808402ff3f32566d8922f1d039a32a5e2ec21d530731ecec4bc88ad943ec706a6d207a08781cd2a82e8dcbbb77262f67072a1ce455eb9c89348db5534a73c6c
- SSDEEP 3072:LZXx0+n9s2F0XSJY4fAzASGGDgYHxh5LiCX:79sdCJnf+ASGcXhl7
- TLSH T12CC32B6173E40205FBFB6B39AAB6541186BBBC96AB31D79F0541408D4EA7BC1E670333
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\System.Xaml.dll
- Size 1.3MB
- SHA256 b2f10239bb8fb234d5d841855e3fb3a4297ab3d05f444658d36af40989debba7
- MD5 34ae79dc4a09651565f45400383ca9fc
- SHA1 073808ca3a12db5ce16c1c9ca71d6394fee6aca8
- SHA512 b5427b80ad2796311aa5044594f39484e5bc2cd3bd2df6476abca3ad046be30bc3833b7659d1a15f0c17e8ae230375e644a008dbc9cadc6e108448c0d6e77c94
- SSDEEP 24576:9/Dc7vpWmVYFzBzhJsHf0xOL0nsfr1ALiDvQAT9vjS+HaftV:mBCFzBzhJsGsfrhvQATN1Q
- TLSH T1E9556B2463E88615D7BB82BFD1938122D6F590531362C6CF8405EE6D2FD77C3AB72262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\WindowsBase.dll
- Size 2.1MB
- SHA256 a7bdc35ec37c1deb33d24d97213ba1077e3051abb66250913c9c1fa735b0d3bc
- MD5 21561c56f9be0a04deeb5db082b75bf2
- SHA1 9c41d296fe86419b6ce3a2f01927314e2add2893
- SHA512 c70bd1a4cc4f09140a2b3f80ff3c6f00361b1b4c4a9ee2669150b33be86423b69e509924eb5db1c043a9d42ec6244949d65126bc5a401d3cc4aba64708afa9de
- SSDEEP 24576:4WfXf7vpCb8ZvoX9OPIA9wxc/rYd1/Yph4R+uy6aERSvML:4Qf9CAeOPIowxMWmh1uyocQ
- TLSH T192A55A2473D84726CD7A82B9A6739112E677F457031ACBCF1809C62D2F97BC087762B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\cs-vertex.dll
- Size 251KB
- SHA256 ecb8e36f87308711580fb35b25dd5a6681a10ddbb97f906757c4a71f1e0100b3
- MD5 8f9ebe5d7622c131676d8bd646a8a163
- SHA1 31fe04b67039235e1640bbebf17b306ac22e06f4
- SHA512 e5a9ecd370b24ea9606078acd1101461f086816cdadd5000b49ecf74fecb9ed8d07221c8771215f63c185a90745f609993c9afaef920ddc27cbf282e04335490
- SSDEEP 3072:D7Hwvsurtgl5dXdb3gxNZ++M3T8YNOmNWQev:f+surml7dbCs8AOmNj
- TLSH T1F8446B0433B84A12C8BF47744C6343A0ABB47D17A2A1C79C1DCA74CE99FA7952B526F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Vertex Recode\0rMNQgx7FmY6\vcruntime140_cor3.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH