5adf4117c6d71308da2d68dc57d5d2818eaf489628063bb864041a6fdb24efa6

Analysis

user interaction
yes
max time kernel
52s
max time network
57s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 17:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BatXInstaller.exe
Size 68.8MB
Sample261030-wca59ady4y
SHA256 5adf4117c6d71308da2d68dc57d5d2818eaf489628063bb864041a6fdb24efa6
MD5 6f3852f2ff6df126ce76dacb8c334891
SHA1 5ad0a9e20a8a90faa0aa5426ad77e7a8bf7cae81
SHA512 e4457b6ff8eadf6a37a272d4b5b292659a4867bd89e4b819772f1803116dc65b3388b499118ed7df8101df6885c51d308083e4a7d6a01a66a8d02a7b81ca88b7
SSDEEP 1572864:i+VsaAOePovO/nw1lGchRLjxKEQzSm51bAta4+gmH7r/Q0:i+Wa/vO/w1QARpzQe61bN4+Tbc0
TLSH
T146F72356E2FD00E8E57AC0BCC6975517EBB23455133497EB62A48A692F33BE06E3D310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Loads dropped DLL 36 IoCs

pid	Process
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe
5144	BatXInstaller.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BatXInstaller.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BatXInstaller.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BatXInstaller.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1960	msedgewebview2.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 5144 wrote to memory of 1960	5144	BatXInstaller.exe	89
PID 1960 wrote to memory of 5928	1960	msedgewebview2.exe	90
PID 1960 wrote to memory of 1200	1960	msedgewebview2.exe	91
PID 1960 wrote to memory of 1200	1960	msedgewebview2.exe	91
PID 1960 wrote to memory of 1200	1960	msedgewebview2.exe	91
PID 1960 wrote to memory of 1200	1960	msedgewebview2.exe	91
PID 1960 wrote to memory of 2728	1960	msedgewebview2.exe	92
PID 1960 wrote to memory of 5948	1960	msedgewebview2.exe	93
PID 1960 wrote to memory of 5948	1960	msedgewebview2.exe	93
PID 1960 wrote to memory of 5948	1960	msedgewebview2.exe	93
PID 1960 wrote to memory of 920	1960	msedgewebview2.exe	94
PID 1960 wrote to memory of 920	1960	msedgewebview2.exe	94
PID 1960 wrote to memory of 920	1960	msedgewebview2.exe	94
PID 1960 wrote to memory of 920	1960	msedgewebview2.exe	94
PID 1960 wrote to memory of 920	1960	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\BatXInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\BatXInstaller.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:5144
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+3a1d97d95ece5de97e2a8b8a029273805581f78b --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5144.2352.13578823117167491439 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1960
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView /prefetch:4 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd57ef5fd8,0x7ffd57ef5fe4,0x7ffd57ef5ff0
    3⤵
    PID:5928
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+3a1d97d95ece5de97e2a8b8a029273805581f78b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1392 --field-trial-handle=1740,i,10638390652943813503,1040594069198914429,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:1200
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+3a1d97d95ece5de97e2a8b8a029273805581f78b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2180 --field-trial-handle=1740,i,10638390652943813503,1040594069198914429,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:2728
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+3a1d97d95ece5de97e2a8b8a029273805581f78b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2204 --field-trial-handle=1740,i,10638390652943813503,1040594069198914429,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+3a1d97d95ece5de97e2a8b8a029273805581f78b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3364 --field-trial-handle=1740,i,10638390652943813503,1040594069198914429,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df /prefetch:1
    3⤵
    PID:920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BatXSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\BatXSetup.dll
Size 73KB
SHA256 5f6f6911ca3ea246cab6791f651616dcfe614deb70a679d9dd805695a3cc24be
MD5 8251ad7825df71bbc4231d1d68dcf05f
SHA1 a365b106df0d396737ee2254651e77e5186dbf93
SHA512 31d972a8b683b763517a39aabbeac9a5d5342e14ad2899d95714a0086087d23bf4a64bcbfb530425d93c8b175a73ce1e62191b467c39e8f13f38a3864d3bc8af
SSDEEP 1536:9K8bcM4HwZ0g04OHD5cnuGUxOwq9QCmrsvCJvowsufnlt:9K8bcJHwH04OHD5cnuGUxOFvyLdt
TLSH
T16E737D2173A8023AD67B07B8A963C389C739A143B512D75D3DDC50E91FA37A44826FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.SystemEvents.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\Microsoft.Win32.SystemEvents.dll
Size 93KB
SHA256 746a19d7f189af3bccaadfb6c23b6953228bc410f58ac2d47187f26be23f3322
MD5 0a6126053c7a377d3303d8f914519868
SHA1 7cc780732e19ed0e7c8e4067c0722597b8e75abf
SHA512 96001bdb2fcc922fa3587c698042ca615654ca56880343db9a53bf2f539d82f810b3845740b6f5d6a8647b5a1cedc52573ab955c8da10f230f29e36004f2a544
SSDEEP 1536:XlgeFaiNe6Qod3IljMj1dKCGi/4IGrhsDxjvSJJZzwT0:XCeIi06Qo2j+HvQIGrijsJZ0o
TLSH
T1DA934A1673940632DAAE8E3BAA238A01E534F5C76762FBDF51C691090F63FC2D775182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Concurrent.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Collections.Concurrent.dll
Size 269KB
SHA256 f9966b6f207b9b0fca7a8035008f414adc5ea2ba8baf83d847891781aa46a69f
MD5 493d5426b9d9d8a7ca8974232952b144
SHA1 a139bd6d5b505731673f441a1e6c29ed125aa633
SHA512 6069e8bac0a6c9a5125617e52727dba77a35493c531183adc331a59d9997ab06639960822d7532a643209b35902eb29db49574ce48b479e3bc7844cc8c464bf9
SSDEEP 6144:tPA2H4j4tByYOTblcFe4khyO2dIykwXL/:tI24j4tBypHfhD2dIrEb
TLSH
T11D445B2163884F12FC6F497D9693D514E2B6A8530322C2DF0274A9849FDFFD2AB77522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Collections.NonGeneric.dll
Size 101KB
SHA256 1f8e46621250baa782ac5b4c735f272059b80445c7b7c4975ae78a3b1f55ae2f
MD5 e7b7eb978f14fc39df4657497b4977d5
SHA1 a0868d2592a44b3a5446b9d96fe91055908373b3
SHA512 2481b0d521cad2743adec3f9a0a8c006b8554588010e129f6f849406a6253b1fc1e28d9d28ed0bc8c32a2e0bbc39030601f44c9c325a0841941ea003dd507568
SSDEEP 1536:7CV0tJVDX9LLIbwNC5IQ7XVrMZqz9Ae3W0Ud5RzI:7A0dzNLIc+IQLGZqzKW8s
TLSH
T1D1A3281633D80322C6AE6BFC81938A01E6B5F4D26717D1DF1618A98D1F9FBC2D6B2147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Specialized.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Collections.Specialized.dll
Size 101KB
SHA256 96c06abadeda1ef45bb9c9e9caca0fe1e6461ad61beab564c866f708685c621c
MD5 3df11041d0eec27c90b1f6f3705db9a2
SHA1 f6826366aa24f1b8d2be0a4f9f6e6fe258837de5
SHA512 c28b830493ea3b14a7db9ca2d9f3ca1910595e15a2d3d476e8be23163b90d4e84003a540b168f6928c8938e61b0e734acf9c23f55de7e99685c803f7286101f6
SSDEEP 1536:DnedRfAVP9WSJLeI620hCYCARk4YIAO8xocg950hd0VIOtzV:DnefAFpeJDPAOSocg9ahOBtp
TLSH
T1A0A35B2473D84B22CB3E92FC85978941E730F1E31362D2CF1559D9891E9BBC68B7612B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Collections.dll
Size 253KB
SHA256 a5116ecad89983a6c9670faeead52def6248bf9017acff9264d4972dfdb94062
MD5 ef9e22e895ffd37686590d59185595b9
SHA1 3217f09321e3fd0126fb715e238b655917b2aee6
SHA512 7f09c7b66cbf8683378332d4e63c5fcc3da3c338d0164255481e6e278d4f408158b1c95fe1bc2c3586d66674eb1fe185180a4d68e1aa90f292d290896923205c
SSDEEP 6144:inxoXLvDXDiKNYX8qTKfAyryS1rIgC3b8:qxCvDXDiQ+jTURrhF+b8
TLSH
T1B0444A2A778C4E12F56F457EE653C012D7B390A34B12D2CB06BEE5840E97BC2BEB6055
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.EventBasedAsync.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.ComponentModel.EventBasedAsync.dll
Size 45KB
SHA256 a89dadb4077947a5f6041dad22308d3e573ce0c04dc36717ce99b5100532b643
MD5 915c73c837316ac2a8fc6eb8a9fe3611
SHA1 a4dae314849525aa88424698ffc80a8bbdab6c74
SHA512 76faf755046ffcc17cb41d23ddd176f1b56634bed07f093ded72eb9b5367007412c40a4bcfd6fdc80a939e2909b32a7660a7127b81b81eb2495d42502719b17c
SSDEEP 384:OWvawWOETfjPadWBj/Dhhzq1c8dgfL9ikyr46JXfCvDXxO88+aEZ4jIwVNBvWN4h:CUctYlkB9n88IVrG8UKrr9zO20OlHT
TLSH
T117237D71439C0113FBAB4B7D8AB28A135578F6815743EAEF1478D20D1EE33C2977266A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.ComponentModel.Primitives.dll
Size 77KB
SHA256 c7368f5d4e32ff30600ab0efcd1272830c8d82852b82e21e872caa27ed20596b
MD5 533af8d98c9738d2f4f3213752143e39
SHA1 e02d0a34436bd29633c4edf960a5fb3373f3dead
SHA512 e51078f056db01c903f05d008f0e5c39f42302f84d025ca94a801a052a0bd603fed79fdc5627bfc9910ad882be83f13e08640767e896c92365fed11414df1349
SSDEEP 1536:KK5/UZMu4yhd+Cv8A/oqevD2olsWCbktOzR:K14I+S85qKD2omWCN1
TLSH
T112733B1823EC0126EBBD467C9573A921A574F6831713D9CF4AA0D90E1F9BBC2E27152F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.TypeConverter.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.ComponentModel.TypeConverter.dll
Size 729KB
SHA256 3276d54e3b2b3ea00feccc317a5fa276b6bed9c08214d53570919a7dce2f46d4
MD5 0ee945986b30ca417fed41ffa828c57d
SHA1 f8abbd6da1d95a222c08350fa0220bcef3c5ec26
SHA512 a5ab390816127196460b2b88121588a95f42a79e68103473a8a27dd3a2d1b182522228b9a9e2005aeaca1b78e8185125ce15641b3d2a772961de7c949bff6e2e
SSDEEP 12288:yLbWtrTElAqmrIofhCXvdb+/ipZ7FDf7EFBiXMSB37QLohk+xLRxz:yfWtrClmrNfhCXvdb+/iprDf7EFBiH3t
TLSH
T132F46B459BD84A05DABF8278E672C801D570AC87533A86CF19D5DBF51FA3FC2D23A122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.ComponentModel.dll
Size 29KB
SHA256 40559bb72151a338ca9b5da79e6e484aea4deef7f1cc5922996542480f452aff
MD5 e0d4e55c8bdd0c6ea873361332963338
SHA1 40997f5221850ac9091f468761d764f44be01b4b
SHA512 5ae9adc9b5ac365a3f9cc7377a910d7f40c35fbdfee0c9d4da111e4280dc1b7472e16d879ad264d35ffdd92433d0dd356679a8cdf3640613442b9a941f37dd22
SSDEEP 192:jyW451Wgqd4Ok7+Aex09u7GWF+GBTBWsea8W8i9CTsX01k9z3AZkIkIDM:mW451WgqdO+109M/lNAoR9zokIkIDM
TLSH
T1F7D25EA7D7A88213EDAA5E705ABCDB437D3DB7CA4E0286671196F1090C937C4AB3017D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Diagnostics.DiagnosticSource.dll
Size 405KB
SHA256 8aa37a917a3748647fc984f777d56e5a393022474fd66d09d7bb98fd3eb69c5e
MD5 79955a1701e476a3e3f175d12747feb0
SHA1 bf8ca2532d2e6cf558069f647207fee6284e51af
SHA512 8c2d6d07513217dbaf01005f4daae33f7b342956a56f1d38a0aca36c43db11e1429258cc54f136be91fd4dbfc3e3169b89e9718644768e80d571afa0fcf88fa0
SSDEEP 6144:gscTEcoc/FGWasNt2l4ru2jKw6xtQ7/tvjETqCZ03EdZuj4MKXU:zcTf/FGLsNtM4q2jStgjTj4MUU
TLSH
T14A946C24E3D40D72CE6B9979C1DBC430C172964257D2DBCBA900ADD8AF1FBC1AD3661A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.TraceSource.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Diagnostics.TraceSource.dll
Size 141KB
SHA256 ad5e60214e43e47930e282d52dbc21c137d780d6a9de57ca881d1566682c247e
MD5 3414d9eeacd06677d97a98f77497aaa5
SHA1 d59b6a3b95ce2381dcc07f81182ebfdb63339c52
SHA512 c0a053710b55e692ce174c9136cac16af07dcbf2d7a8ffd19ba97ddcffbdcf7a3ef9640bf6755dbe947d5e2b3ce3a93dcd294493a89bb88f80818671a001d9ba
SSDEEP 3072:ddiUYBgcTeY0dpwQn60x7cftbgZ7eIQUT5DF6/h:oBgnY6aQn60x7cftbgUSla
TLSH
T1A0E34A26B39C0507C76E87B88663C702F6B3E4870302D2CF5AA59D591ED7BD1BEB2485
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Common.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Drawing.Common.dll
Size 1.5MB
SHA256 9cc51fa0a3b3d6a1059b5d6d65865eebab0078b5aaa45ecbe43eec4f06a72964
MD5 1155d7d99f15508eedd64ab4aa92e380
SHA1 2ed1526b3ded08330fb795e68254b8f0de7c81fa
SHA512 1ff1d11bd9e368817010725fad8af6cf4cf81700ab03665f7937abca5127fd4aaa75b5c209a2b1a0e9c0574e1207fb3de001be19745c43c7cb3ce97c4400795d
SSDEEP 24576:tM12LHkg196JNYqaM+s9unBgBruaG2dXkOJxPvqM0dAcdsL:tM12T5iSLls9ungrua1dXkOJJ
TLSH
T172651A12B390592AE62ECA39C55AC504D270F81BEB02E9C715C1DA853F63BC3F77A1D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Drawing.Primitives.dll
Size 129KB
SHA256 9fd5ae89278c8db0fdd5804a210c69a1a59862af61fdc3b78817f97d253be5fb
MD5 60e31cdcd316c909723184478700fd43
SHA1 f8451da61c83ad73b2ef478510d4631c5c540bde
SHA512 d27d8d4ab9ab35645249e01ffb2a3272a6633428af028fe5966b8bca421c5fafc9396aa89e9ed46ec7cc45f34a1919f8da6ffb6a9fe45ed081453890b63c5c62
SSDEEP 3072:dORFFx4yeP4SyuvmH00N6no5WvCIZSoRc8uor:QFFHimpjRoGor
TLSH
T1C5D36B5DF34CC4ACDAAC577D61965826DA26B2460321E6CF9DC9808CBF023D9F5B31B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.ZipFile.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.IO.Compression.ZipFile.dll
Size 53KB
SHA256 22ee80573022e797a3e77688f4b66d50fb66fc8455bfcb5fd6a53c813450ea1a
MD5 5feebe38dc70c4fe1e22717b05798506
SHA1 86c562a9da4376693ee4205de26106a055cb9fcb
SHA512 ac13a5533f214bb1347e07ff28b6c7b51caa2dec259f09b3b50bbedc933660ecec5d643c6d5c6c1a46b04f31c94a2fe8fd1ce3cd167399e1c70d252f25d4a780
SSDEEP 1536:FHHjYlbejwSCGs6dQyvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvp:FHHc0jSpyvvvvvvvvvvvvvvvvvvvvvvB
TLSH
T10E334B4123EC5256EEBA493956629D46DBB0F6C70B138ECF0588E8CC2EA77C497760D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.IO.Compression.dll
Size 257KB
SHA256 4735ea7324369c962b301fd43a6232ed28ebc2f726f9b0798cf62a3381d4af51
MD5 b797830bc0ea606206ed517b0bb9bbd1
SHA1 4ff7921b3f258a157e33669644e08b4325152b19
SHA512 69f63ec0ed6a1116c07547788c92211580277dfb36b1a569ff6fa9cad6bdf53de4590dab19baac87d920046c0f569bff1c02c86785aa136d6549dae251989c4a
SSDEEP 3072:8htndQCtmTal13Vn7vUoD2+bkf/B3q1GqqcJIbaIksoRirnnMpDTp/RbC++xMDBN:mtdUg3tn3bwNKvco4roTpcaDBEamBH4
TLSH
T141446D6A63980D07F72E84BEC593C102D3B1A6921702CBCF6768E9D92E477D59EB1313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Memory.dll
Size 153KB
SHA256 8c0c3e2561cdfabab3510ec3a5af174fb0ec6aadf2b02fe22685e39f8a28128f
MD5 68206183318123ddf839ece58771086b
SHA1 e1322d4f11a8d0c6db9f8584531bcb2012d3b177
SHA512 15618aa6e71f79674e91a8c02f9edf424ce5545d19f4f56eb8d32d318d98789885c417b1872a09e0374e429c286983bcf70ae988b38c8e0b63cdf7e9c71b430f
SSDEEP 3072:j/yy9N/j+0sbFbqX63vwZuIBo7M5F8966oYdeCBuqmwohtTihdcgpj:z9Cb6oIBo7qDGeCBuHhOj
TLSH
T15DF35B1BE2980657DA3FDAFAAD225302D7B36142572192CB4CE4DA841E53BD0FF734A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Http.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.Http.dll
Size 1.7MB
SHA256 32b82169fa80294b867b81c978cc6c1232e3706f509633e8477aaef9b6910f4c
MD5 ca31bd35399a38b873a1c93e117812d6
SHA1 915d9e0c7bfe3812c5558dc648a4fca436937731
SHA512 2928f519c7fd9fa1337314a8371993426b272c8b1c9d5c7fd66834074a47d5ad8aefc6e3279b32e209f18db51d46de8379f3288108ad6cf9f6cfdad44e377362
SSDEEP 24576:OJGbwz5OzlRn95LHfO6x4HAmo459b8iHxesIp616VNm8I:OJGbwVmB9BOI4HAmoOVZHEgv
TLSH
T1CC859E05B3E48612D62FC6B9C16B8412D671B4434711E6FF1588FED83FA37C19AB22A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.NameResolution.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.NameResolution.dll
Size 109KB
SHA256 91fde67fe46e11bae06a853a3f3db9d6076d633fb614c19a9811825e3af5d111
MD5 6e373036c8483b62be22d1e2c5c0d162
SHA1 ab3dbe7329fb5e8c8ab47446734a7dffa5d06a52
SHA512 c5cc852ead759438ded3b9d89a7a40efd879d8e53b120f1c86969b6bebf069a3be4508b5c6c7f28b51ce69d0c53888574b8f55ab6e71523788f8570e09d10335
SSDEEP 1536:3Oy9vC8jXWSR71kvhqIfLmxRKaR/FZDFsB3lZGUox04czLOI:3OEC8jXW0BkvUI6xRXt7DGtCU+oP
TLSH
T1A9B34914B3D40661DF7E59BC8A234E4AE3B2F0C20721DADF2988D54D1F937C6B27256A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.NetworkInformation.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.NetworkInformation.dll
Size 153KB
SHA256 63fce974e689befe1022edc446f281e529aa4f84cc531d60e21c7f68d43b05ba
MD5 a56547c296160f098a5226b6c8256d7c
SHA1 df35d442bff7fff1e73055dbf7207afefe85c611
SHA512 183b5e7877915d132fe48a1e1c2e97e757abca49342867b2531e31fd887e1c36727dfeb27ed1f920f9fd8be475954b18bf7b541b6450daf7ee7d821e29c5bb9c
SSDEEP 3072:QQspMzi2p/xRtqbqWNgbYU/bLVXyVMn7Uk2enki:YIiypRQbujX2q
TLSH
T175F36C1553C413D6FA9B923DA0FBAD13A17BD5C21312D5C70488DDAC1DABBCAB7321A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.Primitives.dll
Size 225KB
SHA256 4e464cf88666ae6e9af33d663054efa4885f8350e2c00a5aec193f022b7042f9
MD5 ca3a56b84429c0f34e8ebc30d7e0c876
SHA1 3ca1a81f5429c57e0327b11fe7dda04d22e32d51
SHA512 88c84acf656db43c217a3b5a96bd1bd6836f8475fbc92f574bc5b5a584c3be568314a42333f15c42bec462494080a9dd9fdb8d581a24af2b11e25a8b0b6b2f85
SSDEEP 3072:9EIBNI7bgpZrgyBHSchuzeQ4tRV10k6uJQ+Y6MFotSjoloV2O1w/qki:h7I7bgpZrB0cgeQeRV10oRJNtwBV2YAG
TLSH
T1D9346C2A73D44E03F66DC5BEC65BC501E372A9425711D6CB86A4B78F2F837D1AE32122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Security.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.Security.dll
Size 653KB
SHA256 7f373d8d95ce5fe80e8c2fa76169349db4936ac56cf2067ea79a7a32987b097b
MD5 de0a05d86835446b18fda1cb7f3de3f7
SHA1 646bc18fddb535ce01eab197f5a205fbb57c7fcd
SHA512 feb5b7765268b489575011e8abdd07c27eeabff1d12c4da5f5a87dbaf012665e3a859ecfe458a7d636d9d8e3c6f1f5a162af634c7a8c9be8d6e78377cc0b59c7
SSDEEP 12288:+LyPMgyt1nibfATQR0XbthEjHTDYSXRZr2gvfen2bYcBSq:qy0PlKvHJ/2gvm2UcT
TLSH
T1ACE47C2067D60F65E6AF8B3981364421D2F1A887A799DECF1540C88D2F53FD293B9327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Sockets.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Net.Sockets.dll
Size 533KB
SHA256 d536ed205297634940896f45fbb0e506270ceb7de469fb076448103338b7d534
MD5 a0691ced0f7e5e86c1e5bbac7e1d86e9
SHA1 522c279fdf3e4c17ac1ec97d5caaea19887f0247
SHA512 36ea0bab19c54e49579efbf7e1ef6c8fcd41d631cc4adc3e1640710b09a6adfba0f2e1cff595b9b0428bf03c3457d4348d0276d97a6a0f1609e3f3b81089814d
SSDEEP 12288:QZeV7iKwtxaGNUL2Sdr5Nzv0SGwNP+E/0NYu:QZe9iXtxaGDSzxGHEst
TLSH
T177C44A156BE40E06DA6F967CCD134042E7F0A5861B42D6CBC498DADA3F437C3A77A1A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Private.CoreLib.dll
Size 12.6MB
SHA256 e7816c58140bfae07f2a046779c7049048daa94fcd042cd866849865e5cff054
MD5 348cd5db616142f61164baf33989cc58
SHA1 698c630a226678fe093654fa14635ed4fcafeb8d
SHA512 cc7087d35dd5d0b80112e1e30a6feba349edaa0b5108a3db21ba8436ba3d7e28e18e503462de18fb7eecb9f79dcd02f43a7575d41c538d0ba4439aee40be21a4
SSDEEP 98304:tD92rlNlEJZylNtbFtggHV9gap9wkhotpF74S3phucMIXaRIfg:eNlEJZaTbrg8v9p9wkhAHNMIKRSg
TLSH
T1ECD68D11E3C85E16E56EC67D81A38281F770A4F2135292CF982DE7592F17BC16F3B262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Private.Uri.dll
Size 253KB
SHA256 18c7ab19dcbc6ba4927f0cbb6a536a6dd1d958369e4400e61fafc5c865c92c34
MD5 f32a3cd64e6b51931aa334abd4626900
SHA1 abbf9f09701ca42008eb56a8d7cdd81247c36679
SHA512 29679b038feed880f23f725b3fdb0a92ba0dfbcd0ad3e7d28673fa025dea0710d90cd22be41a34ba38d28ee73ed70666301ffd9e73976d49f9b07644d4874545
SSDEEP 6144:DfAAcZFInBPKCeDc6Ci9MG3CMeVmtGwFsGu6My7oop:EF7DciMG3HamtGwfuVAx
TLSH
T174448D25E3840E67F73DC2B981D3D112EAB270665315F7CB0AB5E1821F177C2AA36963
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Runtime.InteropServices.dll
Size 93KB
SHA256 db2cfc2b5e96fea5e79cbb84f0c4e4e670592dbd875e04d2a4d1e05024581231
MD5 090375b2bf0c92857118d8993efed81d
SHA1 2069a0dd1b238b52a28cad5de4dd6cec145c67d9
SHA512 992a59b0e6d49fbe2380bf9c35172b2ce2da6e01770637509b903410893cbd5e96d398ef712ad0bdd1098850da4a1f0f65f6fd7b37b208834933a929f2de7dc9
SSDEEP 1536:Fi6FupEelCtJfKS6+67NspnSPM+l5+ZkmVLKWHnVRz0s:Fi6E3lCto+dSPM+rakmlNnvn
TLSH
T1F1935A2037D8466ACA2A473C9C775D60D9B1F6C603A2E6DF4781885E1D9B7C0D3B23E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Claims.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Security.Claims.dll
Size 97KB
SHA256 80bb6cef3de39852ecdf7e51aa0d327e23da9aac171c0469193498334e70709a
MD5 99100af08c26de18256966ae03ab92b4
SHA1 1e451c7e53a77e890d939188f66674fbdbcfd3e6
SHA512 fb16c2718095162d44283ea7a2b27cc21b235bb6e558b1077ac3b7126ccccc106671073d5c5e8c56da4675ae2ff42da125905d800a3293dedda864abd64dc7e7
SSDEEP 1536:/w23/as3w2pm4X+bX5SdluDQu6O/U0xOQwQ7rzUU3q2bP6iLrSjYFj7ZzK:/Bj3LpmG+bJS7uP7jXSsFjF+
TLSH
T1DBA32B6437EC4222D2BA4F3C94E19909E9B4F9825772C7EF0939CA4D1E87BD1D930A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Security.Cryptography.dll
Size 2.0MB
SHA256 dddc9d393781aa1a5d729a4eb0ec5e6c48a37eb5dda8c878b6c0e226345d6324
MD5 004bce0e07d7799aa66ba06cd5643ad4
SHA1 fe5f83c961cc7c419be225e5ff0445a42c6b5b59
SHA512 e03ddcec4a0fb7a8071606acb71fe875b73fc4ed3963d9a60d98c005f2d9cbd60035669625ca9b36824bc33da826950c00d6584e1de34ebd8393141efd15cfe8
SSDEEP 49152:2mRKXpxajTJDMgmJE2Jjd1yxObmgwYa41e:2mR3JQgem41e
TLSH
T112957C18BBE45B5AD52EC57D83234002D670F48387829BCB6689CB592F53BC2C7B6367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Principal.Windows.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Security.Principal.Windows.dll
Size 181KB
SHA256 d911278230756f0bd75756e99227d6c5d40dd766c2153f59431c3e77e75b8f47
MD5 2e6de25eb4e939c2df5864cd9d4235cd
SHA1 48a07f33275f0cd40baebdcddcb1fec955af9d94
SHA512 ddfda4cac36c8b6523285fe48af8be9246aeec3505d723fc9460325ddc443cae905f3ee5d75892e100c66970d59f0b48e3a6fa6540b48329999f3431ebc17e0b
SSDEEP 3072:I+kZDNCIsCTyRdtl63xJYrkCsmBi170F2TOK1BguZ+E:OUIsC6Ll67YrXsmBfF2rPjN
TLSH
T145045B12A3D8050BE6AF9A7D81639601D2B3A4570717DACB5590C9DA1FA7FC2FF32213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Text.Encodings.Web.dll
Size 129KB
SHA256 7af35cc384947815d9882296c38b60fdd402c5aa7ef7f431f6fb32c45a2c3849
MD5 a4a5008202adeb3c668e3714f705e9b7
SHA1 c7f8e58dd91432c3a9fb958d40924ef67d18c035
SHA512 163bffe235913e13d2de320c53c6970751a423d9cfc5755888ee5f03b5c0edb546395642dc07b638e2490c16e7480f8fe946d57713d7389828352ce43a0a602b
SSDEEP 1536:76T6QlE37y9m3E5T+zpq5D3lhjdPTp8K76+d05HzdyRNXrCpm4+SqU9z7D:76T6QlZk3E16qvZ5N77uLINbCkSqU9/D
TLSH
T161D34D10B3CCDA49DB1D9A749153A2B7E5BABEF6032193D7156474481FB32C4B2BD0E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Text.Json.dll
Size 1.4MB
SHA256 5752903625e9cc781568588b0f40ed6d45cbfbf2513fd16580f76a32d06b927d
MD5 88f28bdc4b15145c570d70f3a64c4391
SHA1 6f7ed7e0ddeff25fb8672e8323391259d7b7a6c9
SHA512 4c5006c41ffd6e34e5b6fc496b12f21faf857f4499f44cd00ab3c76f44ec95dc1462ea7bd999e37c26d24e96fe54387e739e26c01c75ab54a7dc338a4ceab8f2
SSDEEP 24576:ltsm4ueql7dAfc1mK9U5MDv8rwAAjuR5K9Ge6RdtU3pM8cVnMBHlJSus:7SCmK9U5kv8rwBg5oG/8cT
TLSH
T1B6657D05EBD88717C52ED379C0B3C112CAF6E4225B11C3CB1464D9AE2E937C6967B1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Threading.dll
Size 81KB
SHA256 9dba530a9b5c3883f7a21cfc2fda1f17a11dcafcd1792159322861ae7ca914ea
MD5 a19e994e996af7a54fc2bf7e9419b608
SHA1 76f1effc29313ea186926474f2001e8179531f89
SHA512 40a4e3ff5ed8a5f3491fd194eef27f4b6ad67060421d3d86320515e6da77142ef3a257862e5b89ca3575bc9792882e7c71e5e217b6b85f3b29064713d1338ac8
SSDEEP 1536:oxgoICPL4ImrmODZcUBeZ8j0GEH9wdH3VGRm3LGgCzCoVGZ:oxgo9PLJFtZ8j0GEH9wdHkR4GgCuoAZ
TLSH
T12083591A7BE8001AFA7B07F9E9B29945D472FDD20711C6DF9049900C2E67BC1DAB2277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Windows.Forms.Primitives.dll
Size 2.9MB
SHA256 4f1eb01f08978d6aa737ecab9151a639648fca6616eb5d23ae98c1b0e61d2b52
MD5 66c82185266677a316234d5ff1928786
SHA1 f90809a41cb3556ca3c79b108265c355bd50230b
SHA512 1710b3855e0c1d78b73a6cc40970afc52aa4f801bdf3d45b19a365f47c148e075a5c3e731212f89bc79472fcb70ae0c77f62bbc7f8764d607c52cf01ab87786a
SSDEEP 24576:n+NWBwGGJ6udkncfb9/v3R7dL7VOyrnMHCH/PLvlvKJdnOLZwLIlcq7VHILra3S:+koJbdRh7ECH/PLvlvKJhx/mS
TLSH
T19CD56C00B3A627A1FD29CE7599254E419173AA476382DDE7D0C584B83ED3FC3AB3B191
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\System.Windows.Forms.dll
Size 12.9MB
SHA256 865cd709f662e6367659e8a6060ae2d4017b2be10f1bb6a126e45d361dd8b573
MD5 2d9e03c9494b5a0a6f4bc49de6ac5d5d
SHA1 bd9b1f4d532b8c232be033649b6019661be78acd
SHA512 1244cc83783ff7b011539bb95a78326137976166dc8ddce185b1c4718ea64a281330ee08490009029e4c7f68b76945c98e10363855e367813fff85a7c8e07a30
SSDEEP 98304:L0SAxsDDz9c0qTE0PydxeM2EpGCYoyR8dDawaMd:L0SAxeDzyTEIHhEpGCYoyRSDa5w
TLSH
T14CD65A5252ECBD86D23A4279E37393E0D7ACDC168351D2CF0590BE063ABE6837636395
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\RhjD_SmtNk-Z\WebView2Loader.dll
Size 161KB
SHA256 9468470d6a4d11179ec179183d130465a380e0dedfdbe1fc2ab404c86c45a85e
MD5 61f430f292f85b18b57f06ea6d3d8b82
SHA1 03e31a690fa32364fea5ce73498f234adc544cd0
SHA512 73dfd28a27c10984abb382b7d868b3812aa8d0c89435a45b5b242fa82cc7890b91b2e89bc86cdee039b721befaaf0d14506b6c9c86ecbce6ba6d97824eb22dfb
SSDEEP 3072:dX1/Z3TlTRTFOYfThTNTvDbS2bT4wdovPEKdIMsb1Z5AalipTkYEtJ5+POFEv:dDTlTRTFOYfThTNTvDhvZkPEKdI7pUEQ
TLSH
T12CF36C5772E5007BE16B8274C9A34A11E777B4510B60ABEF03A4477A1F237D4AE3EB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.css

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-864b96cf90364279b51138c07355851a\app.css
Size 9KB
SHA256 707d3370e8ea729a7a6840796050b7efde43385cb8b1b3fff460d3ab3237059a
MD5 d53928955e62a1534c1255830e2060b2
SHA1 a99a00e3afccab34ac989c0235a650e4b7b1b3b8
SHA512 8414985a839409353037d3be6e493d07e7c6d3ca5d4480aa1b8ca2ab77c596d693d35b39d8a2ae36cb5e66f1861988a8376b89b8df78e7f8f73b6407314f9258
SSDEEP 192:zOSZq1X4kaR2KjTE0HrMh5uolFFBJDPibjNey1xGOdaibJk6Uj6wSFXX1fxcGyIe:I4kM2KH0phy1QC0j6JFXFdyD
TLSH
T1061274635211123C7253A794FFA7C38DB76CA041F606067CAEA610D9C3CD2FE826B795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-864b96cf90364279b51138c07355851a\app.js
Size 6KB
SHA256 079cc1f390d14395c225cb08ee2f029dffbb98f4951504450f8a4fe8946cb180
MD5 485b4f0885e9f2eebf5e045e22c176c4
SHA1 dfbe9fc0528ddbdb1db9a343b3bcd13ec5cd1da7
SHA512 f87df0112301666775c83f10d7c38f830e1376ee4681fe3429d8eef7fee76e858a16bdf77c8f9ed193751cc166ac9ab3f0bb6cae086ddc06f5715e113b3f146d
SSDEEP 96:anbfK/+lAyW+5Yp04qLyGgj0S4xaJD3fBKT4Ksr57NbYXAnyp:abC/+lFU24qeGc0SWaKHsr57NbYn
TLSH
T145D1A5626529123D44728266D7A7B31BE7398037134389A33EFC81503FF26A67569FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-864b96cf90364279b51138c07355851a\index.html
Size 3KB
SHA256 8d1566498035475092f8f5e3a764dbb12d25e8c292b799c382374cccfd543b3b
MD5 22c40ab97faff6fa8801e24e7a9dcbf0
SHA1 1ee9bec4d243a4fdaf83d60af18c6d54f00e0576
SHA512 66cfcfb8bd5c2730d1a17c2ba03779186663ee638f1911ba3da1a858ee60fbbf30f38b0f7e1c7db0bd805ff44560265dbcab80e8885c37d64e1b01716ed5cbb0
TLSH
T176810E7150D46C3A917380EEA21663AAF6E2D103C74F111076EDA3E35FF3D68A82F256
MD5 SHA1 SHA512 TLSH

Submit Download

logo.js

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-864b96cf90364279b51138c07355851a\logo.js
Size 971B
SHA256 233778fc3459a897dd09b04ccbb7e38dd9586b88e74c4838cda0f0504068024e
MD5 a567f67abcbffce9b864412f84bcb401
SHA1 142d9e6774c074faaa6282e83033b810bb462cb6
SHA512 de48b176eb0d573ee6d4b62bde0285795443fb30e09013bcefaad17eedf291a31af8cd3a1735e562ef3de23e6696d9da4e0bc150c368668d660e124796b3bda5
TLSH
T16811541CB008E93F09335361B52EDAD0A513636700C51D26FAEC91122E74C6DFD01DE9
MD5 SHA1 SHA512 TLSH

Submit Download

75031e22-8656-4fdf-9a8b-fdd233d49dda.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\75031e22-8656-4fdf-9a8b-fdd233d49dda.tmp
Size 2KB
SHA256 95875a46aa010648712c7dd632a20249dd593a35869dd78db4428647f13ddffd
MD5 6293816171ca3718dcce980f97b7ca1a
SHA1 ff1f0b49ff6cabb29f5a86b1ec50cfa2b7fb28c5
SHA512 1e2c8d199af38dcf580b9c3637468c4ac6dbe3c2c0b8595012d3452a4cd1863d9d7cfc6203074ed179fbc88a334c1dc68bc011f272e87ad048ac53e8fb11b481
TLSH
T1305194337D60AB3799F7CB047A4A3A13DE29A1A9BA622F10A6DD0B1901D715C2302C77
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d7d0b1138012a07731dad4c15c41c277f6754939c30d146525d965bbf1df3873
MD5 dc58bbe89475128ead8c13b69a378c2c
SHA1 512404595f784f5d3bc7d231422646f0c231e80d
SHA512 0ad5020ec836a7231b58f5e289687e12344572773739ddf2416a84e2cc2bee5b7aa322f431179fb1118bb8b8941b37fc7972148198c91aa1444b6660aae9b3df
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 595b9b3980023c0e055ce1535e58b58f7366d335cb01d9a88610e057b0c43f71
MD5 35a0f0e8b35b7b20f275451107169c8c
SHA1 6dbc89e9018d73c86e530facebc857114aca3f47
SHA512 e5a403db49280e058b3466a32c8d6baa8fe9aed99c6627ebc9f6fead0e9db0db4c31e7354c83112c8a2f00bc93fa280f762903f0f23329a2306fabf8ca731ead
TLSH
T182D0113333020238C830203B08A3A2080800CA2F800A8200A82FAAAE2F082A02A0B882
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

8b23cf77-0ea5-4615-a7b5-e82f79cdf071.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\8b23cf77-0ea5-4615-a7b5-e82f79cdf071.tmp
Size 6KB
SHA256 13405c64d1d8d424494ea85697fc546df9993fc77bd5ef2a2852dc2c8fe0571b
MD5 97b422c6aa5147209bb68485014890ce
SHA1 2d176c93b9fc78abd33735215f0af45fc2404c50
SHA512 130e7de9af583c76cec1556e114e31e2e60623c5bc690c65d86d94eb4aa33bb54ec5e3af1bf36c9e59b25414615907e39155fb8f0bfc3ee3e4a17620a8038fe0
SSDEEP 96:stu/dM+SVgEkKb9UkFo5h16ZYds7/x+6Mhmuec9Rhj0jeFK+gUOE+28XM1C7K:st2OVgFkoPdsV+FRRh4jDyOE+G6K
TLSH
T180D1C8026E28797B4CCBE519BA25BA02E2F9603275D41E58E7FC472C04EB6CD2303D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 5bb1e25ba031b3ebaa077cfd56b27a6477981ff4cc8ab2081c5622a4a7e8ad9c
MD5 09ca550bc213489e0e883c11d115efb0
SHA1 c3967a44d6f5d6a84266bcd9ac0a0283d24604d1
SHA512 148486276504c1b6640809a8e6374cc0f8dd0bd73018d6abe952364545386cedf0ce8645da981c175bb18fced97bb104260ee62018a32b60390c3f1ba83b7501
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 605cf090f7b1f540c8ded7feb53971a20579e27c453fee670b49853de66db6d9
MD5 9a40c8347089caf807e7fc2cc08d0f6f
SHA1 ae49d25bf087c20b17bb5b2938398ef85bdc4511
SHA512 5e1c8867e44166405c1cabe1f70417347100e1bd6413ae304c965e91fc3711425c141bcfd6809109b05b3447479f2728eb4df886696f97df3a0ee5403854a718
TLSH
T112A0025041924366D5A5137035F182CCB73588B40743260181A04274CD60F404119005
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Local State
Size 1KB
SHA256 1b8d6272b01e0e56744cc4ceeee3b7545837e0061e08fb766c58787d2c7ed3e0
MD5 00d4502c358071eb6a4ca6dfd0339be5
SHA1 bd342ab250c044d7ca9f6d3eda81116d046981a2
SHA512 23760046da105bd4492dc861215f3a8ce18deafd2b80327e687efd975405e62d5693e589ba798e6ee98539cd9f353a644a8d1ce99dc501646f08f1cbb5ef3369
TLSH
T152216873A9F05733ECB6E70622563943DE115179B2104E00A2DD0F2A16D318DE62AC32
MD5 SHA1 SHA512 TLSH

Submit Download

ebfb8c54-2dc2-49b4-b46f-c99d106dc8cc.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\ebfb8c54-2dc2-49b4-b46f-c99d106dc8cc.tmp
Size 3KB
SHA256 70ec03e1e0379e4a3716e513b6b115d633cd3095d714af2bf01df1183b7ca233
MD5 acb236c82ed9709eb05a1c2cd4437d76
SHA1 1866318fe5755fd279c8dfec8ec17bf60be1546c
SHA512 3b9b663dd3a071aa99c491ce49b72467b3c853db8ee59e97054d4acbcd6ec39827de123c35315876c6a57df963eeef55676b5db995d813501fb1d25c3671871a
TLSH
T16361A2376DB0AA2B8DF7DA04B9863B02EB696126F5953F55D6EC0F0D01D729C2342C27
MD5 SHA1 SHA512 TLSH

Submit Download

f52257cf-edba-431b-a10d-0d5919ed0456.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\f52257cf-edba-431b-a10d-0d5919ed0456.tmp
Size 15KB
SHA256 0cb5193a12a21cecdc7fa259c3d9d4bca6bda96620a2d2c62c97a82c2fab3969
MD5 ef27398fcf01be6a52066cb933d71209
SHA1 5db8902ce6264b9fef345ae595ef77dd21484988
SHA512 472ec517c0ba5f01fe52cff6d63aa70034283c97bbf623a58ad310aa2b92a171c53c05e7c518ccf2a1bf13658a68a17fd0787fd5892112e346ff04b59665b65b
SSDEEP 384:m+OBqImmJvGBLx3NaFMJFNNBS1rWu1XTg6ro:TcvGtlNmf1X5U
TLSH
T10972BE762CB56E272CFBCA0ABA8E3343CB6462A3D0957BD4DDEC5F0F11AB0441352916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/920-630-0x00007FFD7ACA0000-0x00007FFD7ACA1000-memory.dmp

Download

memory/1200-540-0x00007FFD7ACA0000-0x00007FFD7ACA1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads