48869c407e39c51241993510e548b180b07062046c0c0d691714621d130ed299

Analysis

user interaction
yes
max time kernel
151s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 11:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BatXInstaller.exe
Size 68.8MB
Sample261102-n3gfysvx2j
SHA256 48869c407e39c51241993510e548b180b07062046c0c0d691714621d130ed299
MD5 3f27ec6f037519631d5fcac2f3ca0349
SHA1 b55ac10f1baaec7ccba105b4a15ff79e256fe64c
SHA512 82963e4f0ef59282cf82ac2cadaec35f21ab3d4050dfe8253a6a3a8a7a8a112adee98914d741c81467d473c302a69d74be09e42e1d0ada7fb046fa43b0fca629
SSDEEP 1572864:o+VsaAOePovO/nw1lGchRLjxKEQzSm51bAta4+gmH7r/Qg:o+Wa/vO/w1QARpzQe61bN4+Tbcg
TLSH
T18FF72356E2FD00E8E57AC0BCC6975517EBB23455133497EB62A48A692F33BE06E3D310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2456	BatXSetup.exe

Loads dropped DLL 62 IoCs

pid	Process
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
5624	BatXInstaller.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe
2456	BatXSetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BatXSetup.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BatXInstaller.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BatXInstaller.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BatXInstaller.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4632	msedgewebview2.exe
4632	msedgewebview2.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 5624 wrote to memory of 4632	5624	BatXInstaller.exe	89
PID 4632 wrote to memory of 3640	4632	msedgewebview2.exe	90
PID 4632 wrote to memory of 3724	4632	msedgewebview2.exe	91
PID 4632 wrote to memory of 3724	4632	msedgewebview2.exe	91
PID 4632 wrote to memory of 3724	4632	msedgewebview2.exe	91
PID 4632 wrote to memory of 3724	4632	msedgewebview2.exe	91
PID 4632 wrote to memory of 304	4632	msedgewebview2.exe	92
PID 4632 wrote to memory of 3736	4632	msedgewebview2.exe	93
PID 4632 wrote to memory of 3736	4632	msedgewebview2.exe	93
PID 4632 wrote to memory of 3736	4632	msedgewebview2.exe	93
PID 4632 wrote to memory of 1756	4632	msedgewebview2.exe	94
PID 4632 wrote to memory of 1756	4632	msedgewebview2.exe	94
PID 4632 wrote to memory of 1756	4632	msedgewebview2.exe	94
PID 4632 wrote to memory of 1756	4632	msedgewebview2.exe	94
PID 4632 wrote to memory of 1756	4632	msedgewebview2.exe	94
PID 2456 wrote to memory of 2948	2456	BatXSetup.exe	100
PID 2948 wrote to memory of 1352	2948	msedgewebview2.exe	101
PID 4632 wrote to memory of 4808	4632	msedgewebview2.exe	102
PID 4632 wrote to memory of 4808	4632	msedgewebview2.exe	102
PID 4632 wrote to memory of 4808	4632	msedgewebview2.exe	102
PID 4632 wrote to memory of 4808	4632	msedgewebview2.exe	102
PID 4632 wrote to memory of 4808	4632	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\BatXInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\BatXInstaller.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:5624
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5624.784.14559021119122917781 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView /prefetch:4 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7fff6bc55fd8,0x7fff6bc55fe4,0x7fff6bc55ff0
    3⤵
    PID:3640
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1384 --field-trial-handle=1720,i,18331130315517612346,8310042619691026901,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:3724
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2072 --field-trial-handle=1720,i,18331130315517612346,8310042619691026901,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:304
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2196 --field-trial-handle=1720,i,18331130315517612346,8310042619691026901,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
    3⤵
    PID:3736
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3400 --field-trial-handle=1720,i,18331130315517612346,8310042619691026901,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df /prefetch:1
    3⤵
    PID:1756
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --webview-exe-name=BatXInstaller.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4556 --field-trial-handle=1720,i,18331130315517612346,8310042619691026901,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df /prefetch:1
    3⤵
    PID:4808

C:\Users\Admin\AppData\Local\batx\BatXSetup.exe
"C:\Users\Admin\AppData\Local\batx\BatXSetup.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious use of WriteProcessMemory
PID:2456
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BatXSetup.exe --webview-exe-version=1.0.0+494dd17dec78b4ac8c4609a5043253f83fa5d22e --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2456.2480.16543367929176719359 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2948
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView /prefetch:4 /pfhostedapp:4b64525bac18a8239535d99f5da29c8ef90007df --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1c0,0x7fff6bc55fd8,0x7fff6bc55fe4,0x7fff6bc55ff0
    3⤵
    PID:1352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BatXSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\BatXSetup.dll
Size 79KB
SHA256 c0e42b4e303ddcb856529faa49c735a6ec3b8315115287b91517b10939ecdc23
MD5 6fae0886b441ede7907789a0b95b150b
SHA1 e178cf1c3fbabe40b91a04e55c8c386ca77b055a
SHA512 fe9ea10a3db47235fb69335d4e630dca9d489465b2efa657e929b4056835571367b01084b7377c1dd49ef8d22f7420131729151bb0d8b0e107cc4a29feb54329
SSDEEP 1536:Hl/1xqruReTd7hm0ua705d+12+hQCmJe/VNJPowsufnlt:Hl/18ruQTd7hm0ua705d+12C/JLdt
TLSH
T18C838D117369023AD2BF47B9ADB393899735E083A903DB1D79DC40ED0FA37944526BE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Registry.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\Microsoft.Win32.Registry.dll
Size 117KB
SHA256 e1e86b7e104e10ba1625ebee8b7dcae2775bb14f170ee8317beddda99d505125
MD5 3e38aa412ff3e6004b6d41bca44e73ca
SHA1 9aa07bb9c16961fd976d5d0fec161893fbbe64fd
SHA512 0cbff885dd824eb5ec75d2d77608f82dbcbc6769e5d2d0a4c9a330956d8bf9d3da2e23ae7145dc70f9788529c1dd8cfef4c6d2f2fbe10a7f4f7b1fd90cd99e4e
SSDEEP 3072:9W19NXwrxn7wECiD8oJSvEVcULVigPiD1dXj:CNI7FCW8oJSvEVzXqV
TLSH
T174C33A1177C4430BFAAFCA7898628985D272E1871701EECF96C5C16E3F5BBC6E671601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.SystemEvents.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\Microsoft.Win32.SystemEvents.dll
Size 93KB
SHA256 746a19d7f189af3bccaadfb6c23b6953228bc410f58ac2d47187f26be23f3322
MD5 0a6126053c7a377d3303d8f914519868
SHA1 7cc780732e19ed0e7c8e4067c0722597b8e75abf
SHA512 96001bdb2fcc922fa3587c698042ca615654ca56880343db9a53bf2f539d82f810b3845740b6f5d6a8647b5a1cedc52573ab955c8da10f230f29e36004f2a544
SSDEEP 1536:XlgeFaiNe6Qod3IljMj1dKCGi/4IGrhsDxjvSJJZzwT0:XCeIi06Qo2j+HvQIGrijsJZ0o
TLSH
T1DA934A1673940632DAAE8E3BAA238A01E534F5C76762FBDF51C691090F63FC2D775182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Concurrent.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Collections.Concurrent.dll
Size 269KB
SHA256 f9966b6f207b9b0fca7a8035008f414adc5ea2ba8baf83d847891781aa46a69f
MD5 493d5426b9d9d8a7ca8974232952b144
SHA1 a139bd6d5b505731673f441a1e6c29ed125aa633
SHA512 6069e8bac0a6c9a5125617e52727dba77a35493c531183adc331a59d9997ab06639960822d7532a643209b35902eb29db49574ce48b479e3bc7844cc8c464bf9
SSDEEP 6144:tPA2H4j4tByYOTblcFe4khyO2dIykwXL/:tI24j4tBypHfhD2dIrEb
TLSH
T11D445B2163884F12FC6F497D9693D514E2B6A8530322C2DF0274A9849FDFFD2AB77522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Collections.NonGeneric.dll
Size 101KB
SHA256 1f8e46621250baa782ac5b4c735f272059b80445c7b7c4975ae78a3b1f55ae2f
MD5 e7b7eb978f14fc39df4657497b4977d5
SHA1 a0868d2592a44b3a5446b9d96fe91055908373b3
SHA512 2481b0d521cad2743adec3f9a0a8c006b8554588010e129f6f849406a6253b1fc1e28d9d28ed0bc8c32a2e0bbc39030601f44c9c325a0841941ea003dd507568
SSDEEP 1536:7CV0tJVDX9LLIbwNC5IQ7XVrMZqz9Ae3W0Ud5RzI:7A0dzNLIc+IQLGZqzKW8s
TLSH
T1D1A3281633D80322C6AE6BFC81938A01E6B5F4D26717D1DF1618A98D1F9FBC2D6B2147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Specialized.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Collections.Specialized.dll
Size 101KB
SHA256 96c06abadeda1ef45bb9c9e9caca0fe1e6461ad61beab564c866f708685c621c
MD5 3df11041d0eec27c90b1f6f3705db9a2
SHA1 f6826366aa24f1b8d2be0a4f9f6e6fe258837de5
SHA512 c28b830493ea3b14a7db9ca2d9f3ca1910595e15a2d3d476e8be23163b90d4e84003a540b168f6928c8938e61b0e734acf9c23f55de7e99685c803f7286101f6
SSDEEP 1536:DnedRfAVP9WSJLeI620hCYCARk4YIAO8xocg950hd0VIOtzV:DnefAFpeJDPAOSocg9ahOBtp
TLSH
T1A0A35B2473D84B22CB3E92FC85978941E730F1E31362D2CF1559D9891E9BBC68B7612B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Collections.dll
Size 253KB
SHA256 a5116ecad89983a6c9670faeead52def6248bf9017acff9264d4972dfdb94062
MD5 ef9e22e895ffd37686590d59185595b9
SHA1 3217f09321e3fd0126fb715e238b655917b2aee6
SHA512 7f09c7b66cbf8683378332d4e63c5fcc3da3c338d0164255481e6e278d4f408158b1c95fe1bc2c3586d66674eb1fe185180a4d68e1aa90f292d290896923205c
SSDEEP 6144:inxoXLvDXDiKNYX8qTKfAyryS1rIgC3b8:qxCvDXDiQ+jTURrhF+b8
TLSH
T1B0444A2A778C4E12F56F457EE653C012D7B390A34B12D2CB06BEE5840E97BC2BEB6055
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.EventBasedAsync.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.ComponentModel.EventBasedAsync.dll
Size 45KB
SHA256 a89dadb4077947a5f6041dad22308d3e573ce0c04dc36717ce99b5100532b643
MD5 915c73c837316ac2a8fc6eb8a9fe3611
SHA1 a4dae314849525aa88424698ffc80a8bbdab6c74
SHA512 76faf755046ffcc17cb41d23ddd176f1b56634bed07f093ded72eb9b5367007412c40a4bcfd6fdc80a939e2909b32a7660a7127b81b81eb2495d42502719b17c
SSDEEP 384:OWvawWOETfjPadWBj/Dhhzq1c8dgfL9ikyr46JXfCvDXxO88+aEZ4jIwVNBvWN4h:CUctYlkB9n88IVrG8UKrr9zO20OlHT
TLSH
T117237D71439C0113FBAB4B7D8AB28A135578F6815743EAEF1478D20D1EE33C2977266A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.ComponentModel.Primitives.dll
Size 77KB
SHA256 c7368f5d4e32ff30600ab0efcd1272830c8d82852b82e21e872caa27ed20596b
MD5 533af8d98c9738d2f4f3213752143e39
SHA1 e02d0a34436bd29633c4edf960a5fb3373f3dead
SHA512 e51078f056db01c903f05d008f0e5c39f42302f84d025ca94a801a052a0bd603fed79fdc5627bfc9910ad882be83f13e08640767e896c92365fed11414df1349
SSDEEP 1536:KK5/UZMu4yhd+Cv8A/oqevD2olsWCbktOzR:K14I+S85qKD2omWCN1
TLSH
T112733B1823EC0126EBBD467C9573A921A574F6831713D9CF4AA0D90E1F9BBC2E27152F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.TypeConverter.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.ComponentModel.TypeConverter.dll
Size 729KB
SHA256 3276d54e3b2b3ea00feccc317a5fa276b6bed9c08214d53570919a7dce2f46d4
MD5 0ee945986b30ca417fed41ffa828c57d
SHA1 f8abbd6da1d95a222c08350fa0220bcef3c5ec26
SHA512 a5ab390816127196460b2b88121588a95f42a79e68103473a8a27dd3a2d1b182522228b9a9e2005aeaca1b78e8185125ce15641b3d2a772961de7c949bff6e2e
SSDEEP 12288:yLbWtrTElAqmrIofhCXvdb+/ipZ7FDf7EFBiXMSB37QLohk+xLRxz:yfWtrClmrNfhCXvdb+/iprDf7EFBiH3t
TLSH
T132F46B459BD84A05DABF8278E672C801D570AC87533A86CF19D5DBF51FA3FC2D23A122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.ComponentModel.dll
Size 29KB
SHA256 40559bb72151a338ca9b5da79e6e484aea4deef7f1cc5922996542480f452aff
MD5 e0d4e55c8bdd0c6ea873361332963338
SHA1 40997f5221850ac9091f468761d764f44be01b4b
SHA512 5ae9adc9b5ac365a3f9cc7377a910d7f40c35fbdfee0c9d4da111e4280dc1b7472e16d879ad264d35ffdd92433d0dd356679a8cdf3640613442b9a941f37dd22
SSDEEP 192:jyW451Wgqd4Ok7+Aex09u7GWF+GBTBWsea8W8i9CTsX01k9z3AZkIkIDM:mW451WgqdO+109M/lNAoR9zokIkIDM
TLSH
T1F7D25EA7D7A88213EDAA5E705ABCDB437D3DB7CA4E0286671196F1090C937C4AB3017D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Diagnostics.DiagnosticSource.dll
Size 405KB
SHA256 8aa37a917a3748647fc984f777d56e5a393022474fd66d09d7bb98fd3eb69c5e
MD5 79955a1701e476a3e3f175d12747feb0
SHA1 bf8ca2532d2e6cf558069f647207fee6284e51af
SHA512 8c2d6d07513217dbaf01005f4daae33f7b342956a56f1d38a0aca36c43db11e1429258cc54f136be91fd4dbfc3e3169b89e9718644768e80d571afa0fcf88fa0
SSDEEP 6144:gscTEcoc/FGWasNt2l4ru2jKw6xtQ7/tvjETqCZ03EdZuj4MKXU:zcTf/FGLsNtM4q2jStgjTj4MUU
TLSH
T14A946C24E3D40D72CE6B9979C1DBC430C172964257D2DBCBA900ADD8AF1FBC1AD3661A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.TraceSource.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Diagnostics.TraceSource.dll
Size 141KB
SHA256 ad5e60214e43e47930e282d52dbc21c137d780d6a9de57ca881d1566682c247e
MD5 3414d9eeacd06677d97a98f77497aaa5
SHA1 d59b6a3b95ce2381dcc07f81182ebfdb63339c52
SHA512 c0a053710b55e692ce174c9136cac16af07dcbf2d7a8ffd19ba97ddcffbdcf7a3ef9640bf6755dbe947d5e2b3ce3a93dcd294493a89bb88f80818671a001d9ba
SSDEEP 3072:ddiUYBgcTeY0dpwQn60x7cftbgZ7eIQUT5DF6/h:oBgnY6aQn60x7cftbgUSla
TLSH
T1A0E34A26B39C0507C76E87B88663C702F6B3E4870302D2CF5AA59D591ED7BD1BEB2485
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Common.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Drawing.Common.dll
Size 1.5MB
SHA256 9cc51fa0a3b3d6a1059b5d6d65865eebab0078b5aaa45ecbe43eec4f06a72964
MD5 1155d7d99f15508eedd64ab4aa92e380
SHA1 2ed1526b3ded08330fb795e68254b8f0de7c81fa
SHA512 1ff1d11bd9e368817010725fad8af6cf4cf81700ab03665f7937abca5127fd4aaa75b5c209a2b1a0e9c0574e1207fb3de001be19745c43c7cb3ce97c4400795d
SSDEEP 24576:tM12LHkg196JNYqaM+s9unBgBruaG2dXkOJxPvqM0dAcdsL:tM12T5iSLls9ungrua1dXkOJJ
TLSH
T172651A12B390592AE62ECA39C55AC504D270F81BEB02E9C715C1DA853F63BC3F77A1D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Drawing.Primitives.dll
Size 129KB
SHA256 9fd5ae89278c8db0fdd5804a210c69a1a59862af61fdc3b78817f97d253be5fb
MD5 60e31cdcd316c909723184478700fd43
SHA1 f8451da61c83ad73b2ef478510d4631c5c540bde
SHA512 d27d8d4ab9ab35645249e01ffb2a3272a6633428af028fe5966b8bca421c5fafc9396aa89e9ed46ec7cc45f34a1919f8da6ffb6a9fe45ed081453890b63c5c62
SSDEEP 3072:dORFFx4yeP4SyuvmH00N6no5WvCIZSoRc8uor:QFFHimpjRoGor
TLSH
T1C5D36B5DF34CC4ACDAAC577D61965826DA26B2460321E6CF9DC9808CBF023D9F5B31B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.ZipFile.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.IO.Compression.ZipFile.dll
Size 53KB
SHA256 22ee80573022e797a3e77688f4b66d50fb66fc8455bfcb5fd6a53c813450ea1a
MD5 5feebe38dc70c4fe1e22717b05798506
SHA1 86c562a9da4376693ee4205de26106a055cb9fcb
SHA512 ac13a5533f214bb1347e07ff28b6c7b51caa2dec259f09b3b50bbedc933660ecec5d643c6d5c6c1a46b04f31c94a2fe8fd1ce3cd167399e1c70d252f25d4a780
SSDEEP 1536:FHHjYlbejwSCGs6dQyvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvp:FHHc0jSpyvvvvvvvvvvvvvvvvvvvvvvB
TLSH
T10E334B4123EC5256EEBA493956629D46DBB0F6C70B138ECF0588E8CC2EA77C497760D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.IO.Compression.dll
Size 257KB
SHA256 4735ea7324369c962b301fd43a6232ed28ebc2f726f9b0798cf62a3381d4af51
MD5 b797830bc0ea606206ed517b0bb9bbd1
SHA1 4ff7921b3f258a157e33669644e08b4325152b19
SHA512 69f63ec0ed6a1116c07547788c92211580277dfb36b1a569ff6fa9cad6bdf53de4590dab19baac87d920046c0f569bff1c02c86785aa136d6549dae251989c4a
SSDEEP 3072:8htndQCtmTal13Vn7vUoD2+bkf/B3q1GqqcJIbaIksoRirnnMpDTp/RbC++xMDBN:mtdUg3tn3bwNKvco4roTpcaDBEamBH4
TLSH
T141446D6A63980D07F72E84BEC593C102D3B1A6921702CBCF6768E9D92E477D59EB1313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Linq.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Linq.dll
Size 529KB
SHA256 7108e362744f21f5d1002ce59ddcfa2deffd1fa778a4f0471b30cb19f94dd2f4
MD5 9b668f18df54127ac4fa6d812c71795a
SHA1 22b301bc762e26db9ade62046a961e1c23e1a94d
SHA512 b6e7cd39a8280babda517152071156d64a37f24d73359a7d4611a2662ed630b566442741f07a0f6fc029fdb568ec927d0032cabe6ff8a130a6d1a19d7aef6538
SSDEEP 6144:6NYb3GypY1hh8r4bdhR+JU1/0kxryufbFHJMyS5IHyYz2hMxjCkoTce:qYb3fS1hh8rwdh8UxeEvAELmb
TLSH
T182B46A2493B80F07C2AF86BFE553E151D7F1859283A2C1CF995CEE961E93BD165BB020
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Memory.dll
Size 153KB
SHA256 8c0c3e2561cdfabab3510ec3a5af174fb0ec6aadf2b02fe22685e39f8a28128f
MD5 68206183318123ddf839ece58771086b
SHA1 e1322d4f11a8d0c6db9f8584531bcb2012d3b177
SHA512 15618aa6e71f79674e91a8c02f9edf424ce5545d19f4f56eb8d32d318d98789885c417b1872a09e0374e429c286983bcf70ae988b38c8e0b63cdf7e9c71b430f
SSDEEP 3072:j/yy9N/j+0sbFbqX63vwZuIBo7M5F8966oYdeCBuqmwohtTihdcgpj:z9Cb6oIBo7qDGeCBuHhOj
TLSH
T15DF35B1BE2980657DA3FDAFAAD225302D7B36142572192CB4CE4DA841E53BD0FF734A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Http.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.Http.dll
Size 1.7MB
SHA256 32b82169fa80294b867b81c978cc6c1232e3706f509633e8477aaef9b6910f4c
MD5 ca31bd35399a38b873a1c93e117812d6
SHA1 915d9e0c7bfe3812c5558dc648a4fca436937731
SHA512 2928f519c7fd9fa1337314a8371993426b272c8b1c9d5c7fd66834074a47d5ad8aefc6e3279b32e209f18db51d46de8379f3288108ad6cf9f6cfdad44e377362
SSDEEP 24576:OJGbwz5OzlRn95LHfO6x4HAmo459b8iHxesIp616VNm8I:OJGbwVmB9BOI4HAmoOVZHEgv
TLSH
T1CC859E05B3E48612D62FC6B9C16B8412D671B4434711E6FF1588FED83FA37C19AB22A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.NameResolution.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.NameResolution.dll
Size 109KB
SHA256 91fde67fe46e11bae06a853a3f3db9d6076d633fb614c19a9811825e3af5d111
MD5 6e373036c8483b62be22d1e2c5c0d162
SHA1 ab3dbe7329fb5e8c8ab47446734a7dffa5d06a52
SHA512 c5cc852ead759438ded3b9d89a7a40efd879d8e53b120f1c86969b6bebf069a3be4508b5c6c7f28b51ce69d0c53888574b8f55ab6e71523788f8570e09d10335
SSDEEP 1536:3Oy9vC8jXWSR71kvhqIfLmxRKaR/FZDFsB3lZGUox04czLOI:3OEC8jXW0BkvUI6xRXt7DGtCU+oP
TLSH
T1A9B34914B3D40661DF7E59BC8A234E4AE3B2F0C20721DADF2988D54D1F937C6B27256A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.NetworkInformation.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.NetworkInformation.dll
Size 153KB
SHA256 63fce974e689befe1022edc446f281e529aa4f84cc531d60e21c7f68d43b05ba
MD5 a56547c296160f098a5226b6c8256d7c
SHA1 df35d442bff7fff1e73055dbf7207afefe85c611
SHA512 183b5e7877915d132fe48a1e1c2e97e757abca49342867b2531e31fd887e1c36727dfeb27ed1f920f9fd8be475954b18bf7b541b6450daf7ee7d821e29c5bb9c
SSDEEP 3072:QQspMzi2p/xRtqbqWNgbYU/bLVXyVMn7Uk2enki:YIiypRQbujX2q
TLSH
T175F36C1553C413D6FA9B923DA0FBAD13A17BD5C21312D5C70488DDAC1DABBCAB7321A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.Primitives.dll
Size 225KB
SHA256 4e464cf88666ae6e9af33d663054efa4885f8350e2c00a5aec193f022b7042f9
MD5 ca3a56b84429c0f34e8ebc30d7e0c876
SHA1 3ca1a81f5429c57e0327b11fe7dda04d22e32d51
SHA512 88c84acf656db43c217a3b5a96bd1bd6836f8475fbc92f574bc5b5a584c3be568314a42333f15c42bec462494080a9dd9fdb8d581a24af2b11e25a8b0b6b2f85
SSDEEP 3072:9EIBNI7bgpZrgyBHSchuzeQ4tRV10k6uJQ+Y6MFotSjoloV2O1w/qki:h7I7bgpZrB0cgeQeRV10oRJNtwBV2YAG
TLSH
T1D9346C2A73D44E03F66DC5BEC65BC501E372A9425711D6CB86A4B78F2F837D1AE32122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Security.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.Security.dll
Size 653KB
SHA256 7f373d8d95ce5fe80e8c2fa76169349db4936ac56cf2067ea79a7a32987b097b
MD5 de0a05d86835446b18fda1cb7f3de3f7
SHA1 646bc18fddb535ce01eab197f5a205fbb57c7fcd
SHA512 feb5b7765268b489575011e8abdd07c27eeabff1d12c4da5f5a87dbaf012665e3a859ecfe458a7d636d9d8e3c6f1f5a162af634c7a8c9be8d6e78377cc0b59c7
SSDEEP 12288:+LyPMgyt1nibfATQR0XbthEjHTDYSXRZr2gvfen2bYcBSq:qy0PlKvHJ/2gvm2UcT
TLSH
T1ACE47C2067D60F65E6AF8B3981364421D2F1A887A799DECF1540C88D2F53FD293B9327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Sockets.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Net.Sockets.dll
Size 533KB
SHA256 d536ed205297634940896f45fbb0e506270ceb7de469fb076448103338b7d534
MD5 a0691ced0f7e5e86c1e5bbac7e1d86e9
SHA1 522c279fdf3e4c17ac1ec97d5caaea19887f0247
SHA512 36ea0bab19c54e49579efbf7e1ef6c8fcd41d631cc4adc3e1640710b09a6adfba0f2e1cff595b9b0428bf03c3457d4348d0276d97a6a0f1609e3f3b81089814d
SSDEEP 12288:QZeV7iKwtxaGNUL2Sdr5Nzv0SGwNP+E/0NYu:QZe9iXtxaGDSzxGHEst
TLSH
T177C44A156BE40E06DA6F967CCD134042E7F0A5861B42D6CBC498DADA3F437C3A77A1A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Private.CoreLib.dll
Size 12.6MB
SHA256 e7816c58140bfae07f2a046779c7049048daa94fcd042cd866849865e5cff054
MD5 348cd5db616142f61164baf33989cc58
SHA1 698c630a226678fe093654fa14635ed4fcafeb8d
SHA512 cc7087d35dd5d0b80112e1e30a6feba349edaa0b5108a3db21ba8436ba3d7e28e18e503462de18fb7eecb9f79dcd02f43a7575d41c538d0ba4439aee40be21a4
SSDEEP 98304:tD92rlNlEJZylNtbFtggHV9gap9wkhotpF74S3phucMIXaRIfg:eNlEJZaTbrg8v9p9wkhAHNMIKRSg
TLSH
T1ECD68D11E3C85E16E56EC67D81A38281F770A4F2135292CF982DE7592F17BC16F3B262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Private.Uri.dll
Size 253KB
SHA256 18c7ab19dcbc6ba4927f0cbb6a536a6dd1d958369e4400e61fafc5c865c92c34
MD5 f32a3cd64e6b51931aa334abd4626900
SHA1 abbf9f09701ca42008eb56a8d7cdd81247c36679
SHA512 29679b038feed880f23f725b3fdb0a92ba0dfbcd0ad3e7d28673fa025dea0710d90cd22be41a34ba38d28ee73ed70666301ffd9e73976d49f9b07644d4874545
SSDEEP 6144:DfAAcZFInBPKCeDc6Ci9MG3CMeVmtGwFsGu6My7oop:EF7DciMG3HamtGwfuVAx
TLSH
T174448D25E3840E67F73DC2B981D3D112EAB270665315F7CB0AB5E1821F177C2AA36963
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Runtime.InteropServices.dll
Size 93KB
SHA256 db2cfc2b5e96fea5e79cbb84f0c4e4e670592dbd875e04d2a4d1e05024581231
MD5 090375b2bf0c92857118d8993efed81d
SHA1 2069a0dd1b238b52a28cad5de4dd6cec145c67d9
SHA512 992a59b0e6d49fbe2380bf9c35172b2ce2da6e01770637509b903410893cbd5e96d398ef712ad0bdd1098850da4a1f0f65f6fd7b37b208834933a929f2de7dc9
SSDEEP 1536:Fi6FupEelCtJfKS6+67NspnSPM+l5+ZkmVLKWHnVRz0s:Fi6E3lCto+dSPM+rakmlNnvn
TLSH
T1F1935A2037D8466ACA2A473C9C775D60D9B1F6C603A2E6DF4781885E1D9B7C0D3B23E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Claims.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Security.Claims.dll
Size 97KB
SHA256 80bb6cef3de39852ecdf7e51aa0d327e23da9aac171c0469193498334e70709a
MD5 99100af08c26de18256966ae03ab92b4
SHA1 1e451c7e53a77e890d939188f66674fbdbcfd3e6
SHA512 fb16c2718095162d44283ea7a2b27cc21b235bb6e558b1077ac3b7126ccccc106671073d5c5e8c56da4675ae2ff42da125905d800a3293dedda864abd64dc7e7
SSDEEP 1536:/w23/as3w2pm4X+bX5SdluDQu6O/U0xOQwQ7rzUU3q2bP6iLrSjYFj7ZzK:/Bj3LpmG+bJS7uP7jXSsFjF+
TLSH
T1DBA32B6437EC4222D2BA4F3C94E19909E9B4F9825772C7EF0939CA4D1E87BD1D930A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Security.Cryptography.dll
Size 2.0MB
SHA256 dddc9d393781aa1a5d729a4eb0ec5e6c48a37eb5dda8c878b6c0e226345d6324
MD5 004bce0e07d7799aa66ba06cd5643ad4
SHA1 fe5f83c961cc7c419be225e5ff0445a42c6b5b59
SHA512 e03ddcec4a0fb7a8071606acb71fe875b73fc4ed3963d9a60d98c005f2d9cbd60035669625ca9b36824bc33da826950c00d6584e1de34ebd8393141efd15cfe8
SSDEEP 49152:2mRKXpxajTJDMgmJE2Jjd1yxObmgwYa41e:2mR3JQgem41e
TLSH
T112957C18BBE45B5AD52EC57D83234002D670F48387829BCB6689CB592F53BC2C7B6367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Principal.Windows.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Security.Principal.Windows.dll
Size 181KB
SHA256 d911278230756f0bd75756e99227d6c5d40dd766c2153f59431c3e77e75b8f47
MD5 2e6de25eb4e939c2df5864cd9d4235cd
SHA1 48a07f33275f0cd40baebdcddcb1fec955af9d94
SHA512 ddfda4cac36c8b6523285fe48af8be9246aeec3505d723fc9460325ddc443cae905f3ee5d75892e100c66970d59f0b48e3a6fa6540b48329999f3431ebc17e0b
SSDEEP 3072:I+kZDNCIsCTyRdtl63xJYrkCsmBi170F2TOK1BguZ+E:OUIsC6Ll67YrXsmBfF2rPjN
TLSH
T145045B12A3D8050BE6AF9A7D81639601D2B3A4570717DACB5590C9DA1FA7FC2FF32213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Text.Encodings.Web.dll
Size 129KB
SHA256 7af35cc384947815d9882296c38b60fdd402c5aa7ef7f431f6fb32c45a2c3849
MD5 a4a5008202adeb3c668e3714f705e9b7
SHA1 c7f8e58dd91432c3a9fb958d40924ef67d18c035
SHA512 163bffe235913e13d2de320c53c6970751a423d9cfc5755888ee5f03b5c0edb546395642dc07b638e2490c16e7480f8fe946d57713d7389828352ce43a0a602b
SSDEEP 1536:76T6QlE37y9m3E5T+zpq5D3lhjdPTp8K76+d05HzdyRNXrCpm4+SqU9z7D:76T6QlZk3E16qvZ5N77uLINbCkSqU9/D
TLSH
T161D34D10B3CCDA49DB1D9A749153A2B7E5BABEF6032193D7156474481FB32C4B2BD0E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Text.Json.dll
Size 1.4MB
SHA256 5752903625e9cc781568588b0f40ed6d45cbfbf2513fd16580f76a32d06b927d
MD5 88f28bdc4b15145c570d70f3a64c4391
SHA1 6f7ed7e0ddeff25fb8672e8323391259d7b7a6c9
SHA512 4c5006c41ffd6e34e5b6fc496b12f21faf857f4499f44cd00ab3c76f44ec95dc1462ea7bd999e37c26d24e96fe54387e739e26c01c75ab54a7dc338a4ceab8f2
SSDEEP 24576:ltsm4ueql7dAfc1mK9U5MDv8rwAAjuR5K9Ge6RdtU3pM8cVnMBHlJSus:7SCmK9U5kv8rwBg5oG/8cT
TLSH
T1B6657D05EBD88717C52ED379C0B3C112CAF6E4225B11C3CB1464D9AE2E937C6967B1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.RegularExpressions.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Text.RegularExpressions.dll
Size 997KB
SHA256 b56c9187c58d890d2b76975d9af6a245969f5aa4fc5afaa17a76783a106f2241
MD5 5d99df695723eb368ac30d514f61b205
SHA1 f0ce239534ab7c7c8a716f34dd62f80d65011106
SHA512 cdc9b951d88f716bb06f61bec1ee7ec397e4e63d799c3a1adedee605afd20ff52ee3b168ad6b5e46047b61103005298cf9401eb2a14d635f65d1a49d367570e1
SSDEEP 24576:ix/dsnQ+B/b44HO2inDiv67tAEehjInQfr:tQEb44HKivIehj8A
TLSH
T116256C1593982F42C22FA23EC4978602D7B16C57636987CB4950FAE61F3B7C2E6F6113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Threading.dll
Size 81KB
SHA256 9dba530a9b5c3883f7a21cfc2fda1f17a11dcafcd1792159322861ae7ca914ea
MD5 a19e994e996af7a54fc2bf7e9419b608
SHA1 76f1effc29313ea186926474f2001e8179531f89
SHA512 40a4e3ff5ed8a5f3491fd194eef27f4b6ad67060421d3d86320515e6da77142ef3a257862e5b89ca3575bc9792882e7c71e5e217b6b85f3b29064713d1338ac8
SSDEEP 1536:oxgoICPL4ImrmODZcUBeZ8j0GEH9wdH3VGRm3LGgCzCoVGZ:oxgo9PLJFtZ8j0GEH9wdHkR4GgCuoAZ
TLSH
T12083591A7BE8001AFA7B07F9E9B29945D472FDD20711C6DF9049900C2E67BC1DAB2277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Windows.Forms.Primitives.dll
Size 2.9MB
SHA256 4f1eb01f08978d6aa737ecab9151a639648fca6616eb5d23ae98c1b0e61d2b52
MD5 66c82185266677a316234d5ff1928786
SHA1 f90809a41cb3556ca3c79b108265c355bd50230b
SHA512 1710b3855e0c1d78b73a6cc40970afc52aa4f801bdf3d45b19a365f47c148e075a5c3e731212f89bc79472fcb70ae0c77f62bbc7f8764d607c52cf01ab87786a
SSDEEP 24576:n+NWBwGGJ6udkncfb9/v3R7dL7VOyrnMHCH/PLvlvKJdnOLZwLIlcq7VHILra3S:+koJbdRh7ECH/PLvlvKJhx/mS
TLSH
T19CD56C00B3A627A1FD29CE7599254E419173AA476382DDE7D0C584B83ED3FC3AB3B191
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\System.Windows.Forms.dll
Size 12.9MB
SHA256 865cd709f662e6367659e8a6060ae2d4017b2be10f1bb6a126e45d361dd8b573
MD5 2d9e03c9494b5a0a6f4bc49de6ac5d5d
SHA1 bd9b1f4d532b8c232be033649b6019661be78acd
SHA512 1244cc83783ff7b011539bb95a78326137976166dc8ddce185b1c4718ea64a281330ee08490009029e4c7f68b76945c98e10363855e367813fff85a7c8e07a30
SSDEEP 98304:L0SAxsDDz9c0qTE0PydxeM2EpGCYoyR8dDawaMd:L0SAxeDzyTEIHhEpGCYoyRSDa5w
TLSH
T14CD65A5252ECBD86D23A4279E37393E0D7ACDC168351D2CF0590BE063ABE6837636395
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXInstaller\zys7SVI1EBCR\WebView2Loader.dll
Size 161KB
SHA256 9468470d6a4d11179ec179183d130465a380e0dedfdbe1fc2ab404c86c45a85e
MD5 61f430f292f85b18b57f06ea6d3d8b82
SHA1 03e31a690fa32364fea5ce73498f234adc544cd0
SHA512 73dfd28a27c10984abb382b7d868b3812aa8d0c89435a45b5b242fa82cc7890b91b2e89bc86cdee039b721befaaf0d14506b6c9c86ecbce6ba6d97824eb22dfb
SSDEEP 3072:dX1/Z3TlTRTFOYfThTNTvDbS2bT4wdovPEKdIMsb1Z5AalipTkYEtJ5+POFEv:dDTlTRTFOYfThTNTvDhvZkPEKdI7pUEQ
TLSH
T12CF36C5772E5007BE16B8274C9A34A11E777B4510B60ABEF03A4477A1F237D4AE3EB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Accessibility.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\Accessibility.dll
Size 20KB
SHA256 7f22f7b8441ffb1e704332ed0ae06897eb5f496d0a61f2a84e4796b2b386578b
MD5 e37a7dab73baa99bc158ad433fdcd4db
SHA1 860204e4f3980596336e1210a8d684dc13f48683
SHA512 09af1f2956668606bb0ebebd3a7252d08f7c1f10298530a3130c9f25deec9b8e44da92c356e97ab7df3fef0b7a28ae4d2239efbbd8d32c1bd06879506764caab
SSDEEP 384:BJBmy0h6gSGRDOcHiiW2k/WqlN3tR9zwUL4:BySQOcHgbP9z4
TLSH
T1FC926C93F758D013DCBB2A7159D9EA463E38E7866912CE17189DE20D0E437D98F1233A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\Microsoft.Web.WebView2.Core.dll
Size 575KB
SHA256 a5878dec68ba65280d0bb450b1029dad9bb380b9f24cdac4503ee6a919581e56
MD5 a312715b3b3e7c28be91c9ca11a2e8c8
SHA1 efb22e1496de7d5da74c740be51f92c8625efdff
SHA512 eb6308060b151ab3f7272ad9f99ae494627ddfa4be86eee5d615131cf8e228b31d76d9b4f1897564b5c94f76444c28ecf5305525784e38a2510f27f322085271
SSDEEP 12288:OmV+hdrrpQ322vy+uFKcDguRFNEMFeu+imQ269pRFZNIEJdIEY0lxEIPrEIgcvLB:TBI
TLSH
T1B3C45F2223FD461AF6F67BB5A47407308BFAFC96B9B8D75D0A98155C0D72B4099A0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 ddbec1edb9d94319101a7bd2e40bb27827d42814feb964587b35f24435f093fa
MD5 14bd07f3e2a9cec14854504865b11532
SHA1 87b5efd7a0c81833530f1bcaa0bf4bb73eaf0d26
SHA512 9d8a37a2bd641313308d28abebc2790e90b94a65c7d946ed71c7f7b382c6bb5b1341c116d56ce31de1202f29c21ceb9e0d0aa8365b145e1ff9a50c66ba8ee2bc
SSDEEP 768:9HNav/17oaKzbTttZDgcEST3p4Jjrjh2jJ+SG2au8vxJKia5/Zi/ZG4Kju6bo1Gi:LavYTttZDgcEST3p4JjrjaJ+SG2au4xr
TLSH
T1AC035B0043ACC627EAEF5F78A5B491620A797F833961D3AD5C84F1E90DB33E05A20767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\Microsoft.Win32.Primitives.dll
Size 14KB
SHA256 7fb0fbb9ff0686dfeaf79c07619135a1cd16d763b234a43c7893c5316373e3f2
MD5 0ea82a4d89437545cc2b37815e6b9f4f
SHA1 1bf94f6232a897ec048a5eac39575748d681e52f
SHA512 85bbf42482b0f6221ed886f0a5bd91868379855b14b044ef191b00e52baf19a6c0c0b53c7f6a6d8556a338d44d57bc576a882e10d065c0d21df0dd2f4dd5cd3b
SSDEEP 192:1EC+iBpYxjhWhP9pWHWF+GBTBWsea8WactTsX01k9z3AZkl+F1:1EC+iL21WhP9pWelNkctoR9zoklQ1
TLSH
T14A625AA287BC4203EDEBAEB19AA5DA433C3C53C74D219A2A15D5F0080C677C5DB3166F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Drawing.dll
Size 20KB
SHA256 12e63ea797e801e11fcf25afc6ae48759f60749fc818b1cdfbc3f9f8c40c0f52
MD5 190a103654cb14a6c256facf48999ee1
SHA1 c0e6df55d341b9c417a17c8d437577d48e9c90f2
SHA512 992ecc6080d9b31396746743ca28c8be40f9e7587ce2ecae5af058dbe7a89277b71299659a428909b193e8c2d2a7737169f44f834176973f4c502909b94bee91
SSDEEP 384:UUkzkXBQ+RGP7RYpYOOT/460vBSWx6tWvZlN9R9zcC4WJ4:T2LB69z5J4
TLSH
T1AAA24B874A288F16EDFF1B31A99BCD823BF4E3C104B1975A699DA004085B7C0A73D338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Numerics.Vectors.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Numerics.Vectors.dll
Size 15KB
SHA256 f31765d06e52cd9136041ba73de02b2873c957634972ee18b359729753cd8eb6
MD5 951e9ffe456d03e6ededaaf5b4abd177
SHA1 eac3b51cb4900796e8485029e71fe94295b1f40d
SHA512 eb5c57bdf2fbe790e2f98ccaad9cdec4829b22263e8b107194a16c0025dfca8dae06afced32e83447cc76055c06970a103aa5df66fc4e9dbf3fc6256301f35d5
SSDEEP 192:4hliexXEWaFBWvWCWKie1BzBWseawWbAjU9NBJYh5wE3X01k9z3A/B+9i:4hJ0WaFBWbZlNhAjU9xDE3R9z4B+k
TLSH
T181625AC6D76C8147FDEBADB099B4D9D33C3977C388919A5A06A8E1581C637C1DB30239
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.Extensions.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Runtime.Extensions.dll
Size 17KB
SHA256 67bc281769ba0a81e7d725ee0329d221f9827b2805988e62e91e72cf32c5549c
MD5 d4385536f0af0795fe804089e8544bdb
SHA1 fa2c1c0502b8c9042e94f50a5adfc9b658ee1d1f
SHA512 658f4b4cc1abaabe3bd3c002cb2d5eb0de7ede79f1e17b05f425419b9ad0ba996b623025e5caefdebba72b21e8f620bab98fd2dd33e55b03cf1ab17e7b462e80
SSDEEP 192:9G/Sj5r0SZ7r1x+DxA8uW8RNWNWCWKie1BzBWsea4We9R3JKX01k9z3AvlR4GaB0:Y/Sj5rt9x+diW8RNWlZlNksR9zaWB0
TLSH
T156824B92CF5C8153EDEB1FB09AB5DE8239B9B7C25970856B458AE04468233C0E73233C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Runtime.dll
Size 42KB
SHA256 e044d7caa0b903794245b593ae7ea793ee270374e2daacb3035fa11031f7fb57
MD5 4b10e1effae9e8fbcc9881f6a1e92276
SHA1 f22d30b08e1b17b1c2789125429340eb7a0d62bf
SHA512 8ed73d5dbea2afe92621c1c5a340772a7803deddef88a1b2b3437e4ffa2a14e3d95da642e1fe1acf62ff934f10cf537504237946f3d45b7a14f59e27fbdc0080
SSDEEP 768:D+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoDL7:9B/LuYdy50b4b7RSH7iozRD
TLSH
T1EC13B3B1AD484333CD8AAB729C73AC811DF273C4047A597ED88FD91A53867748236B6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encoding.Extensions.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Text.Encoding.Extensions.dll
Size 15KB
SHA256 99271fb38bf8dea56c91771b933a9e458c85ceca4e2cc64e8fb8c8463455b92f
MD5 4bc6e9f0ee07191abb536dfadf703550
SHA1 8782726f1d7e90a6299bd00d60dd9d27d9d02c32
SHA512 5271d7b0395e833fcc78677489fe6b23dd482cbfcedc19ee06d8c86af7c672bf266e5c351bde5b700c3378d10604ef0843faee465e70cef06de42bcb337787f5
SSDEEP 192:nmXhp/HxeUW6tJWQWCWKie1BzBWseawW47ms+3NxPOxFX01k9z3A5h5vY:mx79W6tJWcZlNj9fPOxFR9zyh5Q
TLSH
T12B623BD68B384113EEF66EB09AACE9823C7C67C25C21AA571AD9F1481C533C1DF30638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Tasks.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Threading.Tasks.dll
Size 16KB
SHA256 761fc15d6982272bf690b25d63b473021bbe6f00e55556077e1bacaee9340591
MD5 78b767d3b76d23daecc4f652c8077105
SHA1 901b3411c11619e2d0da49970d48cac53be0e392
SHA512 c65bb79ca2a73db6a8dab1a6bc7b8b1172ac205a01a6e0d1db87ad673d65d874ee07c8a4510fee1c7ff4fc567d08aa25ae6f08dcd1172aa187d1d42722d95dbb
SSDEEP 384:jaf4fk3CBq5oqK9b9WHvzWIZlN3U9xDE3R9z4Bh:jaf4BA5oCPULi9z4v
TLSH
T1FE726CD2CB6C4103FDAB6E74C5B5DD823C7AB7CA8D21896A1189F1481C633C9DB3162C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Thread.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.Threading.Thread.dll
Size 15KB
SHA256 6eba1e430e4ea204555b53c8cb0b3de62596b342efe780fca49f231d8c827d47
MD5 3c663e4da2d98f9a72a6759b2bb1f3d1
SHA1 ec19c3493d58b43460cb9ede7b352d2d5aa1d345
SHA512 7c2886f1b0f14b07c740142b057a0217be210ec44fd51204cf30bedcf4e1f95e1b0cd1fb788deec6ea88f3a4feb9b894eb14371cf3ee74170dc0a6467ef3896e
SSDEEP 384:KF4z2EK0K8aWc37WtZlNL1W9R9zjefAH8:KFOiXIY/9zCoH8
TLSH
T166625BD2CB6C8253FCE72EB095E4DAC33C3A77C68460D55A0996F1581C63381EB30A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\System.dll
Size 48KB
SHA256 3b43f811ed2e3e3ca97516708e659a58d31a569b641e8c1c09f92800d81e5933
MD5 b12595c5f3517f0149d67aafa4460233
SHA1 02bf088eb481cda8cd56571aa4d84495f144af8f
SHA512 e590804a14a92d3fb8ebb0658325d02bc3f3eabc18fce68533bdd05c51e260593ec1d433518aaf1d506d64b9cdee85c52e588ba171a651a98677437ddd951e6a
SSDEEP 768:JOlKhT46UA2Zi5wRNH5JVb0U502zq1Tntul3klU+9zZL:Mu6Zi5i5jzCkNF6zl
TLSH
T10C231832A246E772C9CF9775FE5B878107F943D320B1097A19D44481EBE3BD086B636A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BatXSetup\zys7SVI1EBCR\mscorlib.dll
Size 57KB
SHA256 dec19a9faa5c4787986568875f6022a95ce5a377fece41d0cd2444fbda2fec83
MD5 43482638d78adc6f48eb4f986ab65e11
SHA1 ce939817581ea7e106eb689b31923a0dd4f86fc5
SHA512 72cf63c9bb7deb0cfea528b2696e4ed9ae66ea392a95d0d324ba50a9548cf31c5066b0c90211ca8d98579f72eb0f93c119b8245cb510e0fdcdc629990a7a54e6
SSDEEP 768:ht51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCi3Y:htFcC3ZcYf5o4bZyGc1A4c3+gzC
TLSH
T1BC430872BD0C9733CC8BAB79DC77A48905F133C634761AA4A849D51714CE7A492337AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.css

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-665b8e7626614e3ab5ffc46e90c1eb04\app.css
Size 9KB
SHA256 707d3370e8ea729a7a6840796050b7efde43385cb8b1b3fff460d3ab3237059a
MD5 d53928955e62a1534c1255830e2060b2
SHA1 a99a00e3afccab34ac989c0235a650e4b7b1b3b8
SHA512 8414985a839409353037d3be6e493d07e7c6d3ca5d4480aa1b8ca2ab77c596d693d35b39d8a2ae36cb5e66f1861988a8376b89b8df78e7f8f73b6407314f9258
SSDEEP 192:zOSZq1X4kaR2KjTE0HrMh5uolFFBJDPibjNey1xGOdaibJk6Uj6wSFXX1fxcGyIe:I4kM2KH0phy1QC0j6JFXFdyD
TLSH
T1061274635211123C7253A794FFA7C38DB76CA041F606067CAEA610D9C3CD2FE826B795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-665b8e7626614e3ab5ffc46e90c1eb04\app.js
Size 6KB
SHA256 879b3d8aaaeddf5a109f94016f8a1b664609831b9623314685107ae8397bf7cf
MD5 0d7050f9233b87282504075d7699bd39
SHA1 3b73fc32b5e5544f1342c71cc0d691d5a6e16ecb
SHA512 7a68c0d558c9dae201ad50dd368dfad450ca2816c8b5b1ad56f2afa52961a6d4f7d680382af59c18d3357070349e3195252c3b1389a38f82acbd0c7b32a8a83a
SSDEEP 96:anbfK/+lAyW+5Yp04qLyGgj0S4xaJD3fBKT4KL6r57NzYXDlny4Bq:abC/+lFU24qeGc0SWaKHer57NzY9q
TLSH
T17FE19766A129113D44728266D7A7B31BE7298037134389933EFC81503FF26A77569FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-665b8e7626614e3ab5ffc46e90c1eb04\index.html
Size 4KB
SHA256 f2a4d61fb542366a4f467348d49cfbe2a22e60e35d049395e5f1c821488601e3
MD5 e5169d524025f416a3182ed942ddd009
SHA1 0511d8f111ab854a8341c148fc3b8de120da6a44
SHA512 fafb7257b1ccea7c9736fdb9fc0a4d4baed494b1fb0177253f484118f681d9efe10ed1f63d65d2c28b6372a29b28dfe8e7fe4cdad68ecaa256b662788ffc2aa5
SSDEEP 48:0W5yaStOt+6Et1H7b7vYIO1Zrk926SoZVj44XH7QOx7PkBCb6xpOfkyK:/OtOQHH7b7o1Zr02kVJ37rPka61
TLSH
T12381FD7150946C3A917380DEA216A36AF6E2D103C64F111076EDA3E35FF3D68A81F256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.js

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-UI-665b8e7626614e3ab5ffc46e90c1eb04\logo.js
Size 971B
SHA256 233778fc3459a897dd09b04ccbb7e38dd9586b88e74c4838cda0f0504068024e
MD5 a567f67abcbffce9b864412f84bcb401
SHA1 142d9e6774c074faaa6282e83033b810bb462cb6
SHA512 de48b176eb0d573ee6d4b62bde0285795443fb30e09013bcefaad17eedf291a31af8cd3a1735e562ef3de23e6696d9da4e0bc150c368668d660e124796b3bda5
TLSH
T16811541CB008E93F09335361B52EDAD0A513636700C51D26FAEC91122E74C6DFD01DE9
MD5 SHA1 SHA512 TLSH

Submit Download

225be176-9c73-415b-aed0-32174dc0e6ff.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\225be176-9c73-415b-aed0-32174dc0e6ff.tmp
Size 2KB
SHA256 85144e825c626087c70ba5b423f2edafe4fdd70d5c6ae1f7a221100001cd90a8
MD5 5de0310eef79c92841636d223bde3e1c
SHA1 22113ae30cd0586565205fe97ca4777debfa29f1
SHA512 ba02eee52e84f04c0eda91525634d9dad10f3ed5efeedeb55b95e0e2df511351ed3802456148fe7d55d442869f51450943e10c82b4e2322d5d1132409ac00e65
TLSH
T11D5163736C29AB3BD9F24A047A4B3F13DE755063AA513F1099ED0B0811D75AD2792C2B
MD5 SHA1 SHA512 TLSH

Submit Download

37f3086b-567d-4152-9134-702629bcf590.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\37f3086b-567d-4152-9134-702629bcf590.tmp
Size 3KB
SHA256 953f6841eca2c1e45ec02fab6575a14df52fcdd3d060a82eb372abafb490100f
MD5 0d2f1f727a82fcaf23aa95f3789d4ac7
SHA1 68be5ec4c205e692c53983b0c4f5e791952b19d6
SHA512 2a7d9eee6704f1f4c0bde7498256b3e2d5d54b081a516f5265dc7be331be6bb01c24ec6bf9fb9bcbaf999515afa379e90b26178bca4e39bfa0605d962741cc7b
TLSH
T1D46183376D39AA3B9DF38A04B9863F06ABA55023E9917F54D9EC0F0D11D72982392C17
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 385b52bdccfdcf61b7363e40e63a6751de9d9209d36b32622d686e214692b129
MD5 ac2fe835442be5d9e76d99d34fed9601
SHA1 5121658cab1c36f83f2b34cec1cee3ec009fb94a
SHA512 bbfc2d7e890a1d10c6032cf966754b0101185b2c0dfb07c5836eff0782f0fbb04c757f79a9c6d948d02aa2d55f0fdfb98f96613f9b40ee8e11ee97448fd75df5
TLSH
T16DD02B1123018B74C5305E331243E5091D91F12F8041C158A828C86C3D044E00E128D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e1e093eada661220795b4d37b3ead7e2364a859d38fb6a3b062ed1f137901c0e
MD5 e091e8b9700a3d351b77ba842ebca6e5
SHA1 b9b8ee62f6cd642e833bfc27b8c160af9d5173d5
SHA512 eebea58f010c0f40d9b4113483f276b5dc60e18e9bf6f699b407152fc08ac06131fec878fc984e490914c26a2de08abaaa1912db02bb17f0edf1b118e7af1688
TLSH
T197D004505515C113C4105771D01555440511443404D10F400430444434C04501013515
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b93834d77d484a984de354624f133241a993111ed1dcfc81f76cee264462f663
MD5 4dee17eba1f6f7ecbf1596c2946f30b5
SHA1 9316a4a1822788a7a16b5d1c9ee9468a067a2821
SHA512 15a1b7feddf36449cbb5c71d40bb66e47ec7b85e0c6126c8262f1141674e907e9bb05c104d58246afc4b7c6588a8a8d11da00f30c5060e038971378e5615bd8f
TLSH
T11CD0121236128235C42026735003754C0801C12F408545405838C95D3A444A01913852
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

666d2297-843a-4659-a497-50355c091850.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\666d2297-843a-4659-a497-50355c091850.tmp
Size 6KB
SHA256 a5df86b2beeafc59c740029f17cefdb941c4c44f207e38905aaa8d5582dd8fc4
MD5 a4a4ed017c96d16caf15b2330cd9fcf3
SHA1 1afadc5ca3d011eb00cd651631e1eeff20268f5c
SHA512 7a098446792453db081e7cb663eeb4182edff33accf2b72a0f1ad3ac02961336e3aac2d2002f2397487d0fa7d651f9cbaf9a23c36960650b0b4890cdd3d5d611
SSDEEP 96:st5U/dM+SVnypcfb9akjo5h16ZYNs7/x+6Mhmuec9B+/m1jeCK+gqvv28XM1C7K:st5YOVnJseoPNsV+FRB+/ej2wXG6K
TLSH
T113D1C8025E28797F4CC7E119BA35BB16E3F6606274D42E58EBF8461C14EB5DC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66e1b0f7-b41a-4783-8d5f-35b33fa89180.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\66e1b0f7-b41a-4783-8d5f-35b33fa89180.tmp
Size 6KB
SHA256 a840dfd8c05a92d806c3249a85a6af020e4f53e92f3333107003a846eb8f9d25
MD5 d6eaf3b1a04d04419908f203d2f09142
SHA1 8c573fa2565c32baab45f38c9cc4c9aeb87bc742
SHA512 9a1c706edee8d61bb6138840c1f57c3fe3c2548ea4db7e7811b1f9e620318c10f94cd85635004f415f4cd606f5f7b84503a2ae15e3c448cd83bf4eeb5d5cf49a
SSDEEP 96:st5U/dM+SVnypcfb9akqQco5h16ZYNs7/x+6Mhmuec9hF/AjeCK+gavMI8XM1C7K:st5YOVnJsqcoPNsV+FRhFYj2kUg6K
TLSH
T1D6D196025D28797F4CCBE519BA35BF56E3F9607264952E48EBF8462C14EB6DC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

865be8d7-3cbe-444c-949e-610d1357f013.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\865be8d7-3cbe-444c-949e-610d1357f013.tmp
Size 6KB
SHA256 6da193b91b701804071579da3a9bdfb7e78db2dbe6a42de0174200ee8541d4bc
MD5 9b5fa616b369596ff3e082783f26992c
SHA1 67d76c5bab123e5507abc7500df4ed961d426a09
SHA512 067e9f38d1bef549cc6c1974d0550f291b37216fb45af2f7ed85d00c5ca948abd6e6e5275489316c5a9f0f9dd3e9103bd49c405bdc59f0931fa91681b60329fa
SSDEEP 96:st5U/dM+SVnypcfb9akjo5h16ZYfs7/x+6Mhmuec9HEj0jeCK+g7O28XM1C7K:st5YOVnJseoPfsV+FRHE4j2pOG6K
TLSH
T100D1A7025E28797F4CCAE149BA39BE46D2F6606270D52D58EBF8462C14EB5DC730790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Cache\Cache_Data\f_000001
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Cache\Cache_Data\f_000002
Size 30KB
SHA256 83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be
MD5 b636a65da4f00129f08c7df6e5dd75ac
SHA1 4f27206c4b1caf8b7805597fcbc6922ff5805daa
SHA512 77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859
SSDEEP 768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x
TLSH
T152E2F274EA41CA57676335ED4203E99D015FA318EBF6FD40869CCAD2A506BCB7C4033A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 d1a450b655732459f992bb4920cac188c56789d13dde7efd0b74dfcd01868de0
MD5 a5af752967a69abe1e94c1b5a36e1f4c
SHA1 2c8f3bff5b6b293841a756a680eeafabb3fc0a81
SHA512 52c7e7c0d97275ea7c8f0649a0df50345363bf2f270388e0129f41fef66a1691c072bd68aa271cd2410494d5ff1263f8d0d39c33052e297413afe9880845e907
TLSH
T1C5A002A4454514C0C37C027660590D7927025C1459E15319A5B16379DD60180C301145
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 e405b4a74294da41efe2f4aab6e69fc652185e3a62072172706dad93b834e6be
MD5 9a66cdc63281069563f8d69c6e93570d
SHA1 b1b744976cc8fe13ee9b23a017df51638a16688b
SHA512 8beb705dba711ba0789c3eaa433ff09e30a40f90826436164396909b396852c88a0fb48de28a18867a7f4d06c8dc10619f98408841e2209972e59481a9c430dd
TLSH
T1E7A0026059410552C17C03F074D50159773A5C2016670A4190A54274CD743484501166
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 c375576442904e6509c861fa737e145622c24d89be98ef87d3b7294ba41372b4
MD5 decc4b6ed42ca290a6f7816417978cd8
SHA1 2b3c31db9d49f8c3e4413a26041a9c7cb139fdfb
SHA512 00eea48318d0a5a2b2e01df157b29fed7e6e35ab13a338e4086502315963be82996e32bc7d2fc95c526054d34c44d35f4d4587bc27b63b2f0105aa9933abe947
MD5 SHA1 SHA512

Submit Download

62f96693-c686-4d8c-82b0-8217cf193fdc.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\62f96693-c686-4d8c-82b0-8217cf193fdc.tmp
Size 785B
SHA256 952a7835c1933d7b201def8a374f9da45c09b02d5507670f5e0bcd9dc34362ae
MD5 23300e8e3718b48667996d07955c3207
SHA1 39203de50d1619b9a46dbd00ec73ae5265ddc5c8
SHA512 fd714040eb6510c6c8ad1788fcef45176130df32580017096cd65874cd4fd424518232f831432cd518cd46b7647448b34ca63202d7f4195137ffbdac87cbcbce
TLSH
T1FF0149B7C3E841AD895603F865247917CE6D081A422D3D5AC9E8BB9A93F04B5D21098F
MD5 SHA1 SHA512 TLSH

Submit Download

7ebb1c74-6fe5-45ac-a3b8-9188e6ff0063.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\7ebb1c74-6fe5-45ac-a3b8-9188e6ff0063.tmp
Size 356B
SHA256 b94d917c0d882b53c10d8e06f0a2af3f1f5362bcd95968255e327ec5a04fe278
MD5 19fe19bee04e19913a94652ca843efb7
SHA1 d09d8344a8f8b5926737b6dce1271733c4943a6e
SHA512 fa29ec312af1e692243e2b1c42ffed9701c73db3161e4beace9e5b5112232a58f6c7540c6c8ea6a4e9d2db6a5cfa9ac5cfad8a2d7fb25ae3f512764a1f2bb463
TLSH
T1D5E0C0D3407FB037202E8D360C407C015F36B035529164E9CD43437C60809E75706473
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 d61b6915082a7fb341fd47e958c8917439bd4a74ba880fcb85d8e11daf61f1d7
MD5 11d5374605872879efeb57a27be56359
SHA1 22eec76ab35d9829f7aff788b1910a20eb2c9cb2
SHA512 05e59c779c0e532798dc0a48b6e7aeaf3263a4ed57c67e1fa18ec2675a8c95360fcc817466e1a2adb7723c3f8db5989095b59a20d21f38189d66aadab2c49886
TLSH
T13FE020D7467EB07B103C49361D447D019E36B139515174E8D983C76CE0816E757074B3
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\Local State
Size 1KB
SHA256 130f49cbf37c6670110a5acb23ace77a0142fa26715c41751ee08d81c8678f7a
MD5 33c1fa98ea37e0a13f6bfaacc22e9524
SHA1 e37916e0587a3aa59051ddea413404394148125d
SHA512 e7c9f279afb0e391193aade3e9be8ae07bbc5e16d9b257a4c58224da378629a51abc628ff73a5fa910133c607d8b4ed44c2388813a17e63817e29f9d0207c456
TLSH
T1C62162B3DC295B33ECE2131533467E4BAE71106796009E00A9EE0B0912E75AD7BA7C37
MD5 SHA1 SHA512 TLSH

Submit Download

b18c89ab-ed63-46b0-9a2a-ff7c8b9c281d.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\b18c89ab-ed63-46b0-9a2a-ff7c8b9c281d.tmp
Size 17KB
SHA256 340acb5f402f23ed2f90821186ba9ddc8ec0d9d21744ef06b95c1684c8ebd68e
MD5 2a80f99c5864fb92404ef7b4d57e0abc
SHA1 d148be01e7d08b2e62537af528250a44c9fc568e
SHA512 cb0e8f62d9bb60b4740a633d69682df8c0a44ec811d2bbc2612c5defe43362673e713ae0eff07d450cff6cce11795e3f9b071b05a7cfbf3e821ec97ed051da2f
SSDEEP 384:M+OBqImmJvGBLx3NaFMJFK3NBS466UdvGD5n7oig6rY:tcvGtlNKPVUc17okM
TLSH
T1E2729D76986A9F377CF786497B4ABB8BCBB0125381C47BC4CCE84F0E119B58D1352815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0a96b47-d815-4466-b138-a2899d161a15.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\e0a96b47-d815-4466-b138-a2899d161a15.tmp
Size 15KB
SHA256 8537286b4b091334cc96f8386c10e7dca4042a847fe7d86e78a6da57cc3b6446
MD5 f4b429934591e2156613e121135b7a27
SHA1 ff55a88a6413ed5778f7a33bbe6273dc609a180f
SHA512 c7a49f0a6ac8a4a0c9722ebd30afd9d52b5af977352b9c4a7b2a1adf7cabdf007c665c6f94c6f1948850f61243dceb698d5fd18a4e0f3498c7afda19318a8f6a
SSDEEP 384:x+OBqImmJvGBLx3NaFMJFcNBS4GkjdDxCig6rY:8cvGtlNUHdtCkM
TLSH
T11872AE7A2C6A5E372CF78909BB8A3787CB716253C0D17BD4DDEC4F0F216A5842392916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f71ca9b4-814d-4394-a32a-816bc65ada31.tmp

Path C:\Users\Admin\AppData\Local\Temp\BatXSetup-WV2\EBWebView\f71ca9b4-814d-4394-a32a-816bc65ada31.tmp
Size 15KB
SHA256 211f557870da5ac11259c16975e2814b0a564a8dfbb4b6910c48be84ecc47fd5
MD5 1259ce3a11b4f2d977f4ef25711f1c75
SHA1 bbb8aa8b5bf17763b149544f67388811beea4717
SHA512 0d3204cb414ff049ba62efb3a62670c007ff1452bfa92264f9739113b211b1bf8bcf544d23d494bc6778ebbeb2de6ed8c1d0de16408ebf20dccf08d69891a6aa
SSDEEP 384:u+OBqImmJvGBLx3NaFMJFNNBS4GkjdDxCig6rY:rcvGtlNtHdtCkM
TLSH
T14772AE7A286A5E373CF78909BB8A3747CBA16253C0D17BD4DDEC8F0F217A4842352916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BatX.exe

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\BatX.exe
Size 3.8MB
SHA256 c826d60d17f84a74a4ad5df8a1c40c11c0ba371e172940c87272e08ebd158d9e
MD5 813ee4e7ffd6c154cce20844d480f70f
SHA1 5ded21b6767e2fcf361b9d9ec564d676f78a1f85
SHA512 28401c54c2edcdb2f4be610467b8bd9569c989fcca2c535abe45b0732e2a301cdd286b837dc23fdfe73f54fc138814ee57d5277074a96a77ef7346bb14055d65
SSDEEP 98304:RNCt9k+CJcR30GJuXvBZH7mmtVxJxGmKDM7:vCfk+CqV0qSZbmGlo
TLSH
T18506F19D726075DFCC6BC876DEA81C68EB50347B930B9203A06716ED9A0D997DF180F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\Microsoft.Web.WebView2.Core.dll
Size 681KB
SHA256 24b1a6be3a7956e00d0509d4eaebf08e418fc219e964b6c269d2e04439333685
MD5 ae915341870f891f090228905277064c
SHA1 749ebcdf4be274d7777124bd081f093403941cce
SHA512 aa3f2efed0a7e91dbfae414f344f41ca8a5ea5ab05d93436526c6360676e962969e1f29c3e05d428de07571bc5e774cd091af05d5fd3826f564ffcdb4f56f0bb
SSDEEP 12288:GJ4dCXzRKX4EcJupbSRi461R1VDrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI/:GJ4dCXzRKX4EcJAD1RvQy
TLSH
T1F9E4301223FD8619F5F27FB9997412609BBABC97BD78C34D0698642D0D72B819DA0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 c6221acfe974e74d2bcc629116301c8cfba9c2041ad5d81187b0036a0b45e278
MD5 4186b8c7af685f4d0bc110adf6c021d6
SHA1 fe1bfbd9a1c2e6d836b447a5e65c7d079f387d38
SHA512 e5722258003aaf7c35d9ba9e9c05191f72502a5a82011c589ab07b46590f40d95816ab32f70ea3a80e694492932427ac900e012b263afa4cb9e7560c1236f9f4
SSDEEP 768:rZQNb2vIYymJ22Mss+5dQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxb:rSb2vLbdQ+ZDgcEST3p4JjrjaeFSUyaf
TLSH
T1B4034C4083ECC517E6EB2FB8A874916107BABEC37DA1D7A91C88B1DA0C737D055153AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Module.dll

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\Module.dll
Size 7.3MB
SHA256 86980745c0509a73e167673ba6608abc241880be0d6cca88d396566b739e173f
MD5 b1fdbf21302e81af0a93243746be4062
SHA1 28794001627ce77a18457d4d512ad4db03f1e812
SHA512 afafa320336f3aa237d7946ee69bced0bb33c07af84441347a73f01de0b269c2a55aaa56083a024e316b5142bb20a53715c0b0c3df8facc95001bd2fce63140e
SSDEEP 196608:0w+ShIhXjIEibkxUX7LTVLJJ1QhhyJ1Fe:dlhTayLJjJu
TLSH
T1DE7622FA6158231CC41AC5745433FC16B3BA520FCBF9C5AAB6DB7A802FE78219546F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\RobloxPlayerBeta.dll
Size 33.9MB
SHA256 1eec5bab093c67b2676ed2a38670f16ae57fab6a4dc30608ba91215493df559d
MD5 a08319ef3b87c46f06dded4b5181b4bf
SHA1 994d62b7a2bf038f6a25f5ae13eaa3f4983c632b
SHA512 eb3189a2445dff9decb18b9e7d3efa8fa50916d35f06292cf33aabb53091c1a920caa826986ad5bcaf37e76abcfb7adde73aeec82c2523aba905c12fb2bd28d0
SSDEEP 786432:xp5a1+vMEdTuMzdov0e6AQOVxiPxTpesrBfUuD1fly4UDho4uuK/t:xp5a6MGdneRLjGxTpes5Umtuy4R8
TLSH
T1727733EE911C332CC01A45384933ED05B3F1491F1AE0C9A972DF7A857B9E575EA82F4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\WebView2Loader.dll
Size 160KB
SHA256 239a9d6614a6cfade62b47cdb0be36e3069eedc438c3e0647a9e7b7c84ef6ea0
MD5 cce1332e0af440bc54fdf04eb543d4a0
SHA1 c7f6c049ff3eee4ed337a98d3163fbb5c4686ff7
SHA512 3484febcb142beac708faa1775699450ff22f5ce13b7e90da4d6d27ac9bbedd1c2477dc33125cbcce00fc7d59d416588300fa7b3c1c607bda0d1e874cb0425a9
SSDEEP 3072:qjAuqhU/3A5evuBdyoioiVO7kKlU9tKTTnhTEtJI8w6lKIc:36642lioiVOAqnpEtJs6W
TLSH
T1ADF35C57B3E500BBE1B7C27885A74A46EB7678111B609AEF0364433A1F237D0AE3D761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

decompiler.exe

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\decompiler.exe
Size 8.1MB
SHA256 edac74e95727564c5fd48e3f6110dcdea9163f05ac2c9647c52df6d9ba675fe0
MD5 ba8e31a0a9139283cb37b7e51570e6f0
SHA1 acb55c4433b3435be1042a6f5e1a83c8fe7b8176
SHA512 7ef424f48e43beeb521b677e5a2f03a71e818c9f9b153572b8548cd5ef19662c6d8aa3e3028fcda1363b7ad0c25e8af388133c68778d76344a04c17a0314687f
SSDEEP 196608:TNsEHSTE5pjWCnuWOqFmM3KvlYwC/S1RXAeTk88bX:TNJuDumM6d937W8
TLSH
T1C48623FA351D236CE51A85398433FC05F2F6561E0AF5C5BA77DB3B852B9B420DA02B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inj.exe

Path C:\Users\Admin\AppData\Local\Temp\batx-stage-b930abaad6c04f668149a68f964ed354\inj.exe
Size 301KB
SHA256 3fbe1942f6953d2f43a094441ede3f8dca3afd814cd730c12d262a4c289aeb2f
MD5 e30eb0769277b78ef98cce27e97c34f3
SHA1 3e0bf2663ef4df1203f161eef4c6e4946b70ef61
SHA512 01c4b66992c98b39eb0f14677867bd15cd6da6ff61d8b8c5f4bd572c882b4983fcb636712d1f035099c3bab7f46ad9ffc186a100e41cabe77a35e8560defcf7a
SSDEEP 6144:aENQs6h7rPooG4TpKmuMkhaL1BaMF8Qi8b64jlS9Pwc:afduMkh4uQ3S
TLSH
T1B0646CA9ABA405F9DD778938CA425903FA22789407F8DECF57D449922F737D06A3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

roblox-version.txt

Path C:\Users\Admin\AppData\Local\batx\roblox-version.txt
Size 24B
SHA256 69adeba1381cc8b7933f9b51987edd6520e67d65a0bc8b4df73fc7a6e6ce38b0
MD5 86ab9ec41faffd536024051203cd1ba5
SHA1 aaa17958c80c7a82f8b569b47a4c8887024a53ce
SHA512 0140c1dfea5143d8a943c3d16d496f50e0411e069f3da252c95422483a8b6efed5ff855e6af81b4e3e3dde15625e6f86af56669d17e691a582a6c4cd4127d2c1
MD5 SHA1 SHA512

Submit Download

memory/1756-629-0x00007FFF8D1A0000-0x00007FFF8D1A1000-memory.dmp

Download

memory/3724-540-0x00007FFF8D1A0000-0x00007FFF8D1A1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads