tsundere_reconstruction[.]zip

resource
unpack001/Tsundere_Reconstruction/originalpayloads/03_stage3_dotnet_loader.bin
unpack001/Tsundere_Reconstruction/originalpayloads/05_stage5_kryvexol_rat.bin
unpack001/Tsundere_Reconstruction/originalpayloads/16_pkg_Nexus_IO_Core_decrypted.dll
unpack001/Tsundere_Reconstruction/originalpayloads/17_pkg_Nexus_IO_Ext_decrypted.dll
unpack001/Tsundere_Reconstruction/originalpayloads/18_pkg_protobuf_net_decrypted.dll

tsundere_reconstruction.zip

SHA256 a794612b0f3ade254d99abad686514e588f1c1d15ebbb7f1f0beeb1a4e20d08a
MD5 810e836bad9ef7b2956ab6c058403c42
SHA1 4df5cdcee26cf67f62cc63ef47f7d6dd5fc9f7d4
SHA512 415386b91a2b65982996368aa3734e05df2fb19216bb06e00547693b965ea4f4a41abc7e5ce40fe972bfcd134cff6a2b6935ee244ac36aecbb58a0e958af9528
SSDEEP 196608:uTS/3LNhv5Rbukc2bPtyiHlbb4xZb3hv5ynG2f27budETwV:WI3hLQktdFbb4X3L9N+dEUV
TLSH
T126863338B1E9685CCCF213BF3C167CC1A2EE12027D9ED48DB26D257CEDB95526253286
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/README.md

SHA256 941f3981c2dc0fcfa7ea594fb921b513a3b36a15a1b4198a8b048e10cfb247a8
MD5 ef8fce579ff5d350daa935431a207e9e
SHA1 40bfb8f62cba4a3ae9d034b9bf497bf2e85c00bd
SHA512 f2c7980e481835c9a607abb6c75d9eb536d49abcbd27490fd339cdc7d5633e7642ee7db09a367b1dcfa16b81696449f487a6051c7ac07e84276b4a369a72b296
SSDEEP 192:1RxqyErd/IYaUZry+zV7mhGUJCghXhZfcFmD8lcJ9KzwZWP:rxqyE5I2uIV7OGUIghx5rYlRzVP
TLSH
T1EA4294361D192E3F2BE291CFE01F5ADB85197821DA0A5071B0EDF16CEBA5C701376A78
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/builder/Builder.cs

SHA256 ef265977e57bd00e94a4808b9d65187f22544b4da4c067040b30d8c29385f8d0
MD5 ac22da6c6d7cc8be9c0dc812c1c05ef1
SHA1 dd85ffa72c4f9a6ab9c5f1463ce07eca7c429cc0
SHA512 7b1945aeca78d41633075b38f9276c52f50c6a270f8c6e92f7a085449f96e51ac111fce9621fe0ce56b7187140083133fdefa5a56ad5a7a9672fb39f5e391bd2
SSDEEP 192:p9DyT4LgXOx9Ah2p+MnCVGW477ZPk8nC9L1w1uefEy/Rd8L:p9NEllVGPhVa5Gq
TLSH
T15B3284114C969EBD16B340A3FF2B8884B27B1F6B4174EE54B58DC2788F2486D097A4FD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/builder/Obfuscators/Obfuscators.cs

SHA256 304c335047dc6265810b2f034dc4ffcdf04bceefef181a4abcf2711b6f291240
MD5 7bb6c4c499af342b1cf0297c86bee62b
SHA1 882b67bdd43654421cc18d4dfde5eb0694308eea
SHA512 02f85d4d2c58571039b81d93423a4a8e485b50149e5f3de43e8b3c6755572724f2e104b4d2ba00e9340092efe22f223a53f0eac40a837a76840dcef5c7510278
SSDEEP 192:C4IF1zAjzax3C1vNFop0uwYRCI3gOhIgVU9ERLaJvCez6NcdDXYScSDLEUDGIWyx:C4I7o669iT3fhymK7rGIB
TLSH
T17F62C80268A7CAB91FC3807A5B5AD071B322B013625BED65F96F43045F06419867DEFE
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/loader/stage1_batch/client.bat

SHA256 f94aee4e4fdbbb079121eb794091b8ffca7dc1c1ee45fadf9cf76ba2f00f6d8f
MD5 db932f663105cb361e7ced86ad4b293a
SHA1 475b78b553e70425a6ec1915159a07948435e6b1
SHA512 c0dc8069999a64e4d523f98d36921a672bc62d8ba58a8d4f736ff265a1d11b5fdc4ec3dcff6074997c2120fc0c62eb1a02b51c600b4ceccb0a1ea7cf4249e812
SSDEEP 24576:0pHfGFTiVfQ4IFYx58DliQ4pSwbS4uSAJzBHrq1ouY5C:obXI+58cW0uNpBE
TLSH
T19235F0232947792ADE8870A472AD91845E5D9DDF738088CF60CF30E5262F3E447F79A9
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/loader/stage2_powershell/loader.ps1

SHA256 735837741cb4e92a4cc422ca2fbecec161a95f83d642ce84b06773ff78200b54
MD5 aaa07a0b24702bfd1d16fa017de9fae0
SHA1 0efee8b47dee1811f27634197e538f32edec888c
SHA512 cfb195e939df384726ee9561b70037fdf18bdbdc18a6979d69db2a958b49b962a827cba6960e649aaf8ad59fd61d906a5ebeca30d41f81b5c5029b81962df5e2
TLSH
T1C85120267B9143EAE8C5E5EC5099714641F1EE1930173A84FAD0CE43B43A9A03E28AF8
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/loader/stage3_dotnet/AssemblyInfo.cs

SHA256 470227c5728633d568343fd80bc26f77d20fa9540299f8077f6c66aeaa87a924
MD5 f494b57165c6765eef670c9243c6740a
SHA1 67b505e87a99ffed429217e0ef886455687f2b7d
SHA512 0a1d2870f5c969ff32bcf0a4693c2fa1e6eafd830f96cf24ca043df804352034ca051f3bf4ecc0e961a508a4491900bec85cadb32eeed05d7d571f60b5dba9cc
TLSH
T1D7D01729738AE3388E11C5836D72B1CD033B630525C34C54FBFC0442F8824AC823BE68
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/loader/stage3_dotnet/Loader.cs

SHA256 2e37b8095bb09fb3266d0d65e962d33c42ad266b50f545486d27403094c171d5
MD5 1ceaf744a34ae676aa93b83f076ca422
SHA1 a06c57233039b163f9b5ccf76ee4928f3d74fa48
SHA512 f184acb9109f5601c8568c1d69bacd8ceed9ec32e367eb7b6808eff857d51cc7eca96fab9b459de1b0a0c7376484e5d3a36c3660bcd76c184e4d4a54088fdf7a
SSDEEP 192:tG4RNhzv8FGoV8I16aTTJiTwJa2gE+zYQ5JTt/TrJLKXJ1iFThJMJz5HwGwG31Ix:tG4RNBO16aUx2q1AOFQ3wo3GT2Md3
TLSH
T10F327580FE2EE76E05F81028485196DBD47F823F16B48CB3BCADA744BD9845981BC7E1
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/loader/stage3_dotnet/deChdnlU

SHA256 81974ef0934006057428ab68853c0a9e8b9c8166f40346dd655d9a30882a542f
MD5 00f4c6fe981be645b62ec14b01a1e664
SHA1 dadbe833101c614106957522abf8ae5795b916e2
SHA512 6abdaa114b59170a29e30f7630b3c7e3e1080afb39810df0fd0e9c117c226ecb912388cb668cb678bd892c8708c3014388cfee32600b8eaedba328218eb16e69
SSDEEP 12288:yRs1UprMeEl7MaDjWQc0exH7y132drKGEImKUmCOrqrqcF7s/uC0vjPcS:vUpweEJMaDnc0e97m3ErKjzKVC3rqcF9
TLSH
T1C6E433ECF5A9106C0AD3310B2CCC7D5A74ABE5260906E39C61DA5B8CBDB50BAC1E75C9
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/loader/stage3_dotnet/stage3.csproj

SHA256 736440e6dd7b0e2696aeec490bbc894e3800c577554f2f0156a44ac34da5bc99
MD5 de7531d15541e4cf87947a85cc2875eb
SHA1 b6f34ea19e3681911b38931883fab7efdaf7e2db
SHA512 e8ad1feea0571e6b456fea85748aff7c6453027d3f11a9e1565b740d708c5e1e4cfe78dbeaecd8427b3ceb441758a28729511dac88b95a002329996b0a65cabb
TLSH
T1BC014C04D9EDAB7B877416319582AD184F6CC3D749F10948FB81FA4A87D29441407776
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Resources/LICENSE.txt

SHA256 1dcfd2bfba12ae99501a5f53bd4a7b179ab1d7985b42b826dbeb0ad363ac044a
MD5 4ddad30aa044adb78ac03f9c55fe3258
SHA1 1989c8d4a5d1c3c977c62762f60bd0a94b41e322
SHA512 88b02202c7aa7c8c85bc9eeb8beafa69cb4b13dc9332231ff3bf7654a5ed0ae406a26417bddc79174d3552014adfb78684943b2acc7b3ab3ba97309caa087709
TLSH
T169112168725AA33207A403F0291B00EEE70F7DF8252FA5D2F85AD8152B22D1847F84B6
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Resources/_.-c

SHA256 4860216143176a94122bb1caf72d0ff8a2db16a6ba09f85dc8b1496ef353c38d
MD5 414a70cbefb282438f595f12a7134914
SHA1 bd6829e6d31b4c7f32b661bc5fc4320dc259fa61
SHA512 b1c16bdeea81daf66038440a378c776ac96dd77e365c857b15c6d5d76ca6d530d250d0466363ef30ea56444583c6f91cdeffe14f91a636bcbd378c5e318c1ec4
TLSH
T1D6B0120C11E00F0400673A402623B3F51A5467DAC8090D5325624B009131C02ABAD05D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Resources/_.p

SHA256 2f6dd0196540445ca1fc2c65d77a3b16f44803f342abcba6f2c7ad1cfff47269
MD5 1c91f6612fd5be965b91804eec56de12
SHA1 625433b8b94966de25f2bf84e17abf8ce68401da
SHA512 870f27208d51b2587be97322cc5b0191108b0e330cf5ec2f39484d8935c24b33830ccb3946067e0659a17ab1aa2a9067af56be3dab4dd5576f1f1ba7f632ff6b
SSDEEP 6144:Rmn/6VNZiXXpviNZTpErArN/JgheGfirZg15Nzrgn1kFGm6TkmK93Yk:IqPKMTpFrNxUbeOVg1W0Te93H
TLSH
T1A174236552863A3B3D08220C0C108FF5FBB24B09DE58493FE7A74E6FAE995C176875A4
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Resources/abr.dat

SHA256 ecb85b54ead9d8e87862e5de1906de27bf11016b6c5c07e82560b6b0d452c28b
MD5 89cf6e3f16068d12d39aa3e05131e6ed
SHA1 4a8d4c90306a61269059c4aa2d32409f77f3d95a
SHA512 8f2b838290d2311ed796a191b79e814817a70b2a7f51ae1db4d6fcc84ec874bc77cdf706cc63db7092aac1036f8c4ec354fdf1c7409449ef7fb3aa2ab15f3f20
MD5 SHA1 SHA512

Tsundere_Reconstruction/mainpayload/Resources/bl.map

SHA256 6f58704cf40382cbd07f186594094f8bc00e19665c0ecd13c081810a6d920c1e
MD5 e1b969c2994165c3933aaf2835da57cc
SHA1 f20da13dcb6746f0bb4638e687666ed2230706d9
SHA512 c6a1df23200c189bc3e895529b7191588c7431c950b99f95595ea9877f95d05ab45bfc8d2d47a82f2f26ed565ba68b5751f738bb4e6b20ec54053f9e866bf837
TLSH
T1BA41A67D006928F79298A51E92F26665BF74C64FEB7C73D4015F443D896CC66082E31A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Resources/pkg.-k

SHA256 e63265fd09e59eb1b95268e5b85c4fd169d561cc4816f85a0a8d663f3ab82bee
MD5 0c95afb5fc7aef9c01ddbabcaa4f1d52
SHA1 b8f4f605e83ff2ad0ac11c00ae71ff738a1a2977
SHA512 da6e9e09c44f838f1638a9d9cc2b1abf1faba30529446fd2392089024a85297419e3283b05f3af4e68404e7f932ab6f9d240be4d588287b48e170269d1be0b48
MD5 SHA1 SHA512

Tsundere_Reconstruction/mainpayload/Resources/pkg.Nexus.IO.Core

SHA256 d7f2f379a3f414a176e01da3aab16518b48800874150970e7d97c34a495f3252
MD5 da439928fb9a720707ce41d29b67a382
SHA1 99cf06058ab8954b685adee13ed60251fa6bc99f
SHA512 6c509dc8ad1382c0f5d72519c11e10ff7abcbe7c6c7dedbc797d01d88277c501b76b989a3a5c7d5fa040779bd08500a0384118e931b880e919036f6d5e37d095
SSDEEP 768:VKUNgH4Z3Fda2AU2oEgXRiueXDIcrDfufKW9CWaHXViltgNksYjy3i9gBrIl/e6A:1hgU2oRIuEDFcFaa1sYj4i9cIl/ehb+w
TLSH
T18E13F157A4E49AA56343580CF90E055EB6B1C99F9E0CC80CB50DFD7426F09FECC86689
MD5 SHA1 SHA512 SSDEEP TLSH

pkg.Nexus.IO.Core

SHA256 4cef0d649124e609a464174ae104ba296ad5d97cefe8e57edb5bcd6386821302
MD5 df00ba8a33035fd43d72a0a442ba21c5
SHA1 d401055ab07149b35c992478ee76b10ff3c5db1a
SHA512 7dca6d68298241569067fd99d0228df582b16825153d80455f1c7a3e7025e82c9e3d2696395ccfa6b29fe9dd04ea1fcf0eb2b6f35a354d7cc7274c851402847d
SSDEEP 1536:Axp8M2v1MXUivMl7I6Idf0mT3+1yQfAc+paL:AkM29M0l7I6gTynAc+0L
TLSH
T14563BE2434D010E3FDD38D97E529C188A7222FBA9653BA7B00EE798376D3508D4DBC89
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Resources/pkg.Nexus.IO.Ext

SHA256 eaa92d622a7fbe1c530f11ab8016eb5f5ad8233c6080a581ed4f3f3fbbf34692
MD5 c8960a437a92a124f077ca3a531cdee1
SHA1 1ec9e6062986f1f42b5f64bb71f5c48f41fb5e16
SHA512 33b79e39d8b17bfa50bcf5dafaf38c10cc83ce4a04721c643ad3a20c3dd4c5edd4583b28b3d302069615985e22d2e8e36c84d4460eef2b6b230fe8ee8573e049
TLSH
T1FE819DC9A42439E061B3087EDF330D41C8CBDC0B001135AB2C026562D346ABAA7A9C36
MD5 SHA1 SHA512 TLSH

pkg.Nexus.IO.Ext

SHA256 13ced08cb4858b7663b53bcc6d6e9cb9d2d45b010fa9a5cbba5b6fd14af95d46
MD5 f688e82e8f3f570a33e1d7c864a76a10
SHA1 cd2464ea5df04554f5677be6fb4c0a8762ff2581
SHA512 98d388acec3403653556801430b6a34de9e8f3b91bbebb3baecb03618bd4045a61594ba49b56bbe0dd19225f63ea79aabf914a419d31229c97936bcf67272c86
SSDEEP 96:cbZKDs7y1awFQEs9h6r8H7bLDolsKJZLinl2Hr90cEvn/K0:8ZKDd17Q79h6e/3DhEq1vn/K0
TLSH
T1AEC1D38D729CA9DAFF071803B85EC1C8AB1683E64852A07330DDAE5730C76C19267DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Resources/pkg.protobuf-net

SHA256 fadd472afa495addef41c1f50568a0588e3efcbf31c608abc69f30746aaad3e5
MD5 268175f6d332f7800b6be0ead2dd2761
SHA1 95052ffb4d5fe789c1a74af7ed77807cd5dfacfd
SHA512 a2aa3d7c325479f80cef4cdce3580bc549477a8e78cfdf919c7fae0a51f4e8a309b154809794ef94ea5fc44c7908fb51a3772a2c84a71bd508d71a06089c6167
SSDEEP 3072:j9c5G9H3hDzydiVXdmgXK2f4YrRJ7vT7TyviGqHEmsugSO9oMAXU2hOht30C7cv:j9c5eH3omNla2gIfyvakmsFuXUceMv
TLSH
T115242345E81804AAE8877F3DB89618F49FC8F13B9830B4299F66DECDD95F6498433C16
MD5 SHA1 SHA512 SSDEEP TLSH

pkg.protobuf-net

SHA256 8d5f45209b209b06d509527fc428e7d575b8f83cdbb9a4e0b3db7e19083b0cbd
MD5 e08f81f28c1d09908c844449cce3c8e1
SHA1 0049180922320ec9ba506650af5cfadb0236902e
SHA512 6896ff04fd684cfa0e9663a48ff5ae997bf07b6f7d0f66bc62d105f9383466b1602f2cc5d5ad32fb2efcf0f3baa9b605761c227ef8ff12417996ad0870504a46
SSDEEP 6144:p/9sOEOdicWgVxUqyiyak1795sKPiS9eZArXstuXUc7++W:35EO/VxUBtR79qAP9eg82UPL
TLSH
T16554F1CC359830E6EF4B8A56946FD640EF55E72A1422A5A331ED8E0372C3D568387CBD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Resources/ptwrv.config.xml

SHA256 c655763d06e8cb55746f836892e1d5c9c5654942b65fa9d7cb7a1a12be5a0f1b
MD5 ea4311e6189a40451f458c4adc870791
SHA1 0462782b5cfb13402417c9fcfbbe02efdbe4bbe2
SHA512 79887874dbb71cb6fe72102b9b04dea740a127263925ea3e166724caa4ad6e7a9dd98bc753032fd0d39f83b1de9be314a873a5328f9ce3de41df3a54a1fc9472
TLSH
T193F0BE62AFE1DCE7ED511A2F6A344E406E7C69DF624554DCF87209E00E69DC003632D2
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Core/_ContainsImpl2232.cs

SHA256 150afb63c90f226a2c2cbdc4202e748f4e9d763a3bbd932cd4a6e2a6a191ab25
MD5 c9fa5a5e42b5fcc1d322b6273c4a3eab
SHA1 71f5297a2fb835a776b52e5b373ef10a4f9d323c
SHA512 45feacf23380aabd0e3c0ce7a474c643946da964be5db07c169e090c12da05e476de693db6b258f5949275997fc77e57a817bd6ec972e30e58a1d6b5f64822ca
SSDEEP 192:nmfLdfEFkUbXmbXNb+br334hUdMtRyH7uIw/E+1pFq7qoZkOPjf:n6BfEFXWXFezoiZw/vlokk
TLSH
T11E022EA4BF1DD92D965410AF1901D2C38A3C41330AACCCF5BC9D8A95E9D3D19C2BDFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Core/_ResolveBuilder766.cs

SHA256 39e38789a4a682387e8187f10a9159ea37f1cc495e352aecb4aebbc288acc15a
MD5 08a8fd27a59d6cc32769883c9fa89314
SHA1 bf30660bb2bc4c4912e375b0e437c480f4d913ba
SHA512 8073ff8e7c4cf3750c2f12aca8a0e911faf2df38b371721fa8b7a12757cf21f8cc1081e86530c7f7065cf382a097cf75f10369ee0eeeac7cff0289d3eb31c9d2
SSDEEP 192:tU3hJPqFbKGGK7AFPPFVg3bF3h/YgzCCho5i8z33hXClNgaIcyik4Al9CPL:tIzCAQ2PFVgRAChAiu3hXC3Ic3kM
TLSH
T1DE2282D0FF0DE56E46AD100E9820A1C61A7DA33B2AAC4CF3FD8DA615F99190D917DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/E6DD664.cs

SHA256 39c9f03c35080ad3aef6b64858305d7eb04a4deabbe942ee8595f810baa1323b
MD5 d29d25d5aeb139dc4bed37f73bf2844b
SHA1 f9fffd8a64d2290db2e969d52c680c4e05a0cf2c
SHA512 e420abe95bb497737084f183c837731a2fcfa28c90026f3d3122acdeaf138ec655e2b2bafaa2d4037a7969d904ca8580062c5bfbbdb7c2bd72263a08f6d23085
TLSH
T16C21702E6A89CB30064545C6DD11E9872AB791378FAD68B0D84F01DEE55740A017DF31
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/_BuildItem6843.cs

SHA256 b50be51f78baba72d18f7eec9db978e030f97292336f66a772ea251776963893
MD5 1fc3dba77c0d0d79b1426afa50525b0f
SHA1 8326b26d466e3eb821c5286bee0201b4c8b1ed9e
SHA512 12af6679538b34cc4278fc551e4147c2c91e3310a9311a0ca026716b3520ff1206c06454cf829df2b4f233d2ac49ad761a8483d2c482800e669f3289aff41772
SSDEEP 192:tFeDPVgynMaOZTNd0ZeF+NHf4bmhNWG7C2thkJxJqpasOo1OS3DKst0QZcZhrGxh:tIRid0i635C20XstBc++mReGgB+pbyds
TLSH
T13A4275A0EF4D951F02F4204C2D25DAC745AD87374A7CCCF1B8AC6A69E8D9E59A07CB34
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/_BuildResult6872.cs

SHA256 5c54217b57218bf94b65ecdfa608d2638d7d6b3dc8b5f75483fd99f5b9433835
MD5 487f2173dc49b9dbfeb0d3a1bc1e5700
SHA1 5b5c5e0d6ccf51b94c4f54ca1ed71e5d83a430e6
SHA512 c349bb0a2a9aa141e16721977e9d0512fbcad7140eeed7d82a274a5a4749c8650a2d448e9cef1eac682796300a385907b65639ff3107b15b84b0d74382863fd1
SSDEEP 192:tMe5hwONJy4Lm5VDA2Ns2+JzHlUOgai014ISuX:t5osJg5VDHH+RlUOfi0WIV
TLSH
T116D11252FF5FC20E1AA4282EC81496D7D56DD13537ECECB6EC6C2650E89684B817CA11
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/_GetCache2358.cs

SHA256 79b9da6c83eec5bdab4b240cbf409d4ab2ff337a5ceac2f7cbf4775f832349b3
MD5 bee2145e0a8735074de45b2cd1ed6bc6
SHA1 85b7f43c706892db8b4a79fcf75081a1b7c65966
SHA512 ccac961cb6d62472287e472eed04ea57f91d9319cf0a0f1c0da7ea30d372dddd86521890cc493c2427fb457e34770b51ec1d60ed61d08c0b222d132c8e5c86e1
TLSH
T1F0812161E74CD76948942059CD580CF2CB6E627F0B7888F7FCCD4618A8DAE0A51FCA67
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/_HrpWnM611.cs

SHA256 fb54812f229a64e6830405052e73348387df8b7335742100e7204d3532847e17
MD5 e00c9aa4a81d731797cbe517c25cd6af
SHA1 a4cc2c46d635a690c2d2b8c1c382c783fdbebe0b
SHA512 fbf7ff8311871c8d7c0677ced310c7cb9e02dabdea6f9fccc76473eab5fd89bf227e9fff2370a480ee11819b0b2d32e5f83b2b9850e56634fad0759a5781e1a5
SSDEEP 192:Fq7GNkhlzRixZ3nCPbiESd31G0AfpBiOvj4MQadlaQ2PZagTESv+Pt3Xx+XB5sta:FkPwxtCPbi/d31G0AfpBiOvj4MQMlaZ9
TLSH
T1923251A4AF5CDD3D988F615A8920E5C6923CD7362B68CCFA7E8F5F42B811119027E74C
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Helpers/_qNbjAF559.cs

SHA256 ad252a5cddfab4f00d1a9722c5a41e7b2dddd010d2fd691dc8df4f7fe1987812
MD5 26b374cb56af8dcd9ec579bc8bf1be4f
SHA1 7a876caf6f1a65b4a0f3bbaa4ab1c560c168b636
SHA512 f0f6d307e72b1d8b6c5620b3a3ebbf8cd18549a348a9ed006ce6978cd1fe22b6c044fc57d90f0ad5f21b253d1255edf666c91bb0fa411b42ac25432ef93aaf74
SSDEEP 192:tfnSOBoPgPN2AqIcLUjIgI/vqbXikewQihxx8NPC5oTZGBicnsTCY8Hi4O35778A:tfnSOBoqu94BACTx14u+CY4iX35nvdoe
TLSH
T131F17394DF0DD69E4A21205E0E21DBC78AAE433A1A5C8CF2BC9D9E19E1C5D5E553CF30
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Internal/Program.cs

SHA256 426a94e9144574bbe43ad4c24b9887fe9404fc61b7bdfcd9845a52fc986a655e
MD5 93b0f391c1bb5b034675d5e47abe966b
SHA1 bf90679330cd5b7bbc92b426e9cfc7d0bef84b37
SHA512 834445cd2b4c66f873e01943479c8b1b63efdc20fb9cca8b0b61c66d85b39e21a2bc1c5f005e5802770746153d43854dd1e76df704c83921092126b17e9d2fb2
SSDEEP 192:3RXTrIKiMqC4COZhxd59/GXoM5zQI7AmC69jEM/L94QZGdwZczxSw:3RzZqC4COZLFEow5Rl/LuQGdwczxD
TLSH
T1A1124190EE1EDA1E4AAA107E8C20DBC6C16E97370AACCCF2FC5D5E55E4D881D817CB14
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Internal/_ComputeInternal7324.cs

SHA256 ba08f666dd3892796aef7bf26e9504ddc0a1f7cd9599e841cca03d6d5f9a63e2
MD5 8f3f4cbf66bb31c060f48ea94bdb7bc2
SHA1 f6b291adbd435bbb990144fb580afdcde659ebd4
SHA512 8c32224d3513a6dd5d2da7d00992873bf3db7fd93e560f224a4ad3f12e421ba87bcf8c3b37489cea5aede9a739944e82eec60a1774fee88097d37013583f100f
SSDEEP 192:pgsz7mXIt92j2UqJz4i9yPDtOXIg/zOyM/YiLe+oseXFNFfgFdRXW5g:pvn3e5qJz4ifzVMwnmdFd
TLSH
T1190243B1EF6DD21D5568000DC484CCD7F97DB63E1AECCCB1F8CE2521A88664A86BDB49
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Runtime/_AvmA365.cs

SHA256 b5f1586ae15779e1efb3881fbcc131d1b73b7139238033d61bb762121d8d30c6
MD5 6a389dba649e3fb8ddd3e972d0d11d3c
SHA1 8b93f89fd113864df44c3ad646f50397a285ca9c
SHA512 4a67e89161aaf892a9d2164fb98906228855883a4a8962df422a5a6b7feeb82882b0559cb9a77cb685d6441708c7daca77a9a5950dc294e52fb1b894b2639e00
SSDEEP 96:CjPs2/mljf8Qn2xFXt8QewEMFXGfhku93xQfZN1rC05BOL3S1939U03LGvNkzYEK:wQgXGfdtKfZ/vBOrwt6cSyzYEezukGEH
TLSH
T191C15BAFBF88CF200AA514D5D950C5F3ABBA56378EED54F2F80D0A91F91244E407DB26
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Runtime/_StopItem4778.cs

SHA256 e971dec6890998b8d1a1535d13b9b45536d453d7977b054828e4baa5a5002400
MD5 149efa188b6d9e3da99b26188705bdd6
SHA1 8e5c076c06258ebafb4c95dc2fad37565c97bb2a
SHA512 43f2c96d64d89e24924361ac84b7b252e62108a895c7fcc4f336e4f897d74d210b9a01594a1aed0d2ad7823c6b4b080235dab3ed3ae0253c9851c43df2c6d999
SSDEEP 384:tb8DGLiiETHzHeQK3G2XyYkFqSyXtfkto32Pc:F8DGLiiEbLeQK3G2XyhFqSyXpyo320
TLSH
T11D42DD42BF0DC16D0E9A362DC1AE5981C2ADE13675E9BDF6FCBD2A01E49250F513CE44
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/Steam.Bootstrap.Services/_SmjJgu142.cs

SHA256 12458534ecd0d55bde6c51025b2d415d6c9af3b22e56478ff22ed7e01c128b14
MD5 e38f8fb63828edb87569494a875bae9f
SHA1 c614101c442368edab5dba5131e0112345c9e246
SHA512 2567b1e540b68ecd048f0bb0c30ad3f8a8f77b165ba9e5b8bc6484f97224de892cb5d0a40b462640b6958a65be92422823e8958d00a16b465dbf61fc15383d99
TLSH
T1E251E2128F2E853D1A162D6E9710A649EBEC553535EC6FFEEC7E2700D49640F4278C1D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Cryptography/Aes256.cs

SHA256 120651e5be5a83f171e9ad2f28499ab661a2a707af4866d2219aa7c880fef675
MD5 dc142ad1476d7125e69cf369b3bbcb47
SHA1 3069a2e8d85c9f017d31f6315c29d5ba3649af39
SHA512 9f2bfb8022a663b7a81d70f40717b2b7d3f38acad3f8f6a4da3f63ee109d139cda50f3b57f8aaa45bd0fa5db7f2229a763fcd1145bbf93933fe5b3c6f460aae8
SSDEEP 96:CjP+XKkZAJZTA4jZcSgOlAxZbANAPZrACPrgOX1b1MdOEA2ZbAQAAZGAgAZld6mM:D4xXjrgOlUNayJbPr1FxMdOEfN7F0rks
TLSH
T17AC132808E0DD5AF12D5307D0EA6D78682AEC53A257CCC753C6E7E5860D8C9C927CFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Cryptography/Sha256.cs

SHA256 c1a7ffa8414d12f7909cd8546b29bab789d4f7c500daa2b2f401e574f0a3b877
MD5 7bddc1d5b9ddbd3bfa447b1fe9fa8dbd
SHA1 c0d1d8ced1f0a0cd2d31d2d88eac38e7b2317bb9
SHA512 a0f6ef6c6b689f1c828e426eaf34bf939345d9ab63d57755dc5c90df5eaf81d52623743324dd0def142c5dff1c19aadc49613795ce648a6b8461211a33a8b13d
TLSH
T13501FE34BF0CC51DE4A4205D0926C24543AF223729318CF6FCDC6A689694C0D473CE19
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Helpers/FileHelper.cs

SHA256 945c5f0362797d24a651d558f68c57e0eddab84e46e36dc3672c4970e0722fa2
MD5 ab9ec2ec88dc6ce3fc0929104025e0d0
SHA1 948a7016e1c514bc67b1b91eb6485d480a65176e
SHA512 bf0b6522b38f82d41bad91e2138e580b9e465be5a6728395636d4d22a6fda2b6ad09dd8c96aaa648bd72c630fd522cf15c7f20d3fc4de8a4c5d16146ef1c7e01
TLSH
T1FA213738A65DFB3557D58B8CA856E496136D79F6071D4CB4E4C80351ED1AA4841BCCCC
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages.ReverseProxy/ReverseProxyConnect.cs

SHA256 28de28da24e76b3e0e50f43c23f069995141068b8d602e720d48ee004083c7cf
MD5 ad3688de08521c6855cd79131ed3122f
SHA1 c1ed8fdc53dbfdb2a34451537171231ed954fe0d
SHA512 93410d81958710bdbcada0d59b304bddafe01606115bba35bdba9f11345f454915497e628b236855380c3dd9e5bb32d8729e8d904e7ed93b67f6f0cddff45731
TLSH
T11DE0C20302929DED003D88A12891B80263BB4EC18E6AA0098ABE3176AE14DED80319A3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages.ReverseProxy/ReverseProxyConnectResponse.cs

SHA256 730c3deb22493c4ca7bf4782f26396f3a1266f2945c2ac36af45dfc8528b5b27
MD5 ca885b5de3deca3c4b5adea42baeb440
SHA1 6c72bc55b3402ab953dc146b181191ff7086fe57
SHA512 573e3d94c73e112f17770f9858b1932a53c928dea0f4c38b191f1ccef1b650d69e88f1b5817a20fc9977dda6d4f86aaa60fb4af5cb1a20f7baeebd61dfa27130
TLSH
T1F2E0D8074612999D013D89A22C93B801B77B4EC08E6E904B8AAEA275DE28DED84214D3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages.ReverseProxy/ReverseProxyData.cs

SHA256 1ee35f5b93283fe9b59eacb49a1d67f6f7cbe178a5b2d663a2f68f1c974a3f21
MD5 0bc8b506fd82f59d78368e8cc864616d
SHA1 ff8f42a27ba5b50a1dc08cca9936d163f5f2e61c
SHA512 778fe23e03a0a60492269bd229983542fb56f5c77f3a66b375f67b2e30f39b2e85e96af4bbb04bc58e737eb94b9b9f51409efce5a005537a7d609ab7c2cb6c76
TLSH
T1B8D0A7070552DFBD403D84E23412F80666BB5E82CEABA00A8AAE3266DE54DED9411B63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages.ReverseProxy/ReverseProxyDisconnect.cs

SHA256 5f0c56d0c8b4f85b85666e596c2526b96f2fd029ca20da75af0708a2112d461a
MD5 8bd9aefee74c9ef4ef842020a3c8a68a
SHA1 e8c39dc513207c885db31665aac7e7814b71ba91
SHA512 6adb3cacf9a0610438eaaf9f512b4fa9d1bd93bf0fcdd31128150da8d9572ae7339b5b0f9526c0420d6f26d85d068f5ba79effbf87835610df85f6ad481c2072
TLSH
T1EBC022070142AEAD403A85823001780257BB1E41CF4260028BAD31B29E54EFD8420A93
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/AcctQuery.cs

SHA256 626062556db478ef380762698bda9595217faaa76b88fb42f31019251a665c72
MD5 58f87bb69806d85b68fcc0b5d8955f9a
SHA1 ee5a971538036d20a709b1f683471b344d2b1794
SHA512 72778805f0eb7ab8371aade7cbd7c24f06bb08bb19a7d947902fa3a5d350a7d7f4174904235f0232ead55949255e5dd6102f87b8c195f7529e1b4ac3d57fd3f8
TLSH
T13DB092011AA2AF68803688403419796AAACB2A07CE162A429AAC32470B800A8D911E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/AcctQueryArchive.cs

SHA256 50eb252b0631b4fd6c44668b69e395a56496eb4c999aa9e8e57b9e1f79806a29
MD5 f749c749edae8bb6e5a81ef9156e0a2c
SHA1 8f463fce140c7a72ec9bd6b3bd16645354ababa9
SHA512 9ea85dd6643053ca52e73613f2349558b305f05a3c88df26e570afecc9100c07d752e1367134a56538d914545eedb4bf1050aaff1c097f73b96b62e90d104a09
TLSH
T161D0A7034652DF7C803984602811BD1ABA5B1AC6CF2AD289DAF913560D40C5CA421953
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/AcctQueryProgress.cs

SHA256 5350e534d1965118efdba214e811feb67d063041b0136fc80086ecbf6a94075e
MD5 15f1af5125e3632c803f1237895b9bf5
SHA1 ce310d0880ae7f5759441c0a085e2bd64b29d951
SHA512 b82c6f2fde0e667ad8419b849f88ae67fecbc3fb1f1c691b965d04b4097a3eb774820a96b3d268f2365b564842952f7e05c7440da1cbd1ce3c330caa9cd10aad
TLSH
T18CD02B0306569D7C80398DA02860BC1177AB8BC1CE2FA10DDAFD12674E44C6C9431853
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/AcctQueryResult.cs

SHA256 223313a2909defb14078f986d55049237a7e1a78b397d6938c40b72bbcf6e8d1
MD5 c9aac31006c3afbb987d5d4a8969b458
SHA1 e4ca3d89493f53d46c7815b3d6b93a8b7737bf2a
SHA512 7457f8a5e1c2c9c34fe60708fa54c42b382700921ac8b99b02607a111abf60c34b4f23e82be4ba9d4bebb89ef90c3bd81997e48193ab43ebcb06a479c75b13fd
TLSH
T148E07D0211528F78403DE5406855F9467B971F43CE1700445D9D31568E04C5C8031D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/BootkitInstallResult.cs

SHA256 c9760fcdbd0f4140a6b9eb9fe2e9bda8a20a38db132ef551cb3358749d02b944
MD5 8e93758ba0a4742c63196a84a6d2a40f
SHA1 4d6b1e0d90a305b356ea6d6d1aced8ededddc00c
SHA512 9597d1af4b4f792d050aa7c025cd941444c960c594cc9652d334d3adc08430e9aa9c72431a88dd2d713e4e72d71e7156f1ad1fa5c31b8de2ccd3e8b537d20aa3
TLSH
T1C0D023034552DE6D4039C4517C057E05FF871A41CF196145CEDD13575F44C9C5421D33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/BotKillResult.cs

SHA256 8d499e8a166d7d5c55cfe9e62253c94402de46648d7d0f406cc45ff4b25db369
MD5 e81ebe60353bcb90bb40ffabf729fe9a
SHA1 c42b4c6a453ddc78d3ba352265c5bec27bd2a81b
SHA512 304d61cfb5073320d3049ad35ed3712d50a0986305a1b52ba38e76df9a091543e8bd658d31c90115b379a200f2e603b50ebd9ec58c9b0bff5c291b768c9f518d
TLSH
T12FD0A703455A8E6C807DD5906C407D3AEF875A91CE3AA1858FDE51674F00CBC8420C23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/CapDirDelete.cs

SHA256 ec3f0b567944bf37da5c7b2e6cbc03d31e8db36b7df53af057b2f296fd8c5e83
MD5 17bbc16e37f29945a4b6bbbc303957d8
SHA1 96a11deda69e6396873106299161d9da0f309e5a
SHA512 d4b4c34f8b48646bc9498541775306ad83b28341b40312b65d7817ac62047cad46ab1435a161995b27f501252adf75198a6f836220f0c314f878efd2bbf1a0f4
TLSH
T12BC0800305539FAC90258450748479166B8B1E41CF1D5555C698265F4E40C6C4431D53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/CapDirQuery.cs

SHA256 9b2370a7106f7bdceae9b2e26790dd11dc78f04eb38b8d91e1af97c680b253fe
MD5 caa8d2ccd37062cdfff130f578030309
SHA1 7cbb0e3d3654a98821ff0dd8e157c82b5683cba9
SHA512 775a6e4e774e993ebffbff94c4df05c73f9b87b84d74e583e28af2e383ef8ba730a243b03daaada45be7c35fabf6d3e042bb50f48e914b98120b5482dc08b01d
TLSH
T1EBB092062AA2AFA89035884030197929AACB2A07CE26294686A82A4F0B800A8C950E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/CapDirResult.cs

SHA256 7f599e626719bf1a15d37931d79e831fab5d555d92082b0a20fc2a34947fff48
MD5 f2364e656dfcc2a8e9ec026e8f853c45
SHA1 690b6f2a76a350728d9f13a5aa7936cbf71d0309
SHA512 25928dc03475ddd2a9f749a764268ce653091dccda146963c781bcf96c49e24fdfd36d778dbf03e3800adea183eb098a37263ff11f2d1cebc355d5d1e7ff98d2
TLSH
T16AD0A7034556AF5C8029866064447906678F5E86CE29259D9F9C175B4E10C5C4570953
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ChatMessage.cs

SHA256 8a062d256f612ce528ce9a5ed0913cf1b5f392a9e65876bfceffdb39068ba660
MD5 9995225bc9194a4ef8f6113ab0ec865f
SHA1 06d9f696b3110c3ffa23580302b6035da1ee934a
SHA512 7b500320785d35c85196cee1b9a5576a99afa744c9bfa7754a075d9e1b41b3dada738ad01d2989deca06aa5d9b1ee97993ca27f84154c8efa12232782e742dde
TLSH
T15AD0230345529D5C403A84507C407D166B4B1B81CF397165CEEC12975F54CDC8430E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ClipperHit.cs

SHA256 f3fc4659edd9b9fa4af8316a8e2612228ff197f6bcfadbd893de5ae24807d304
MD5 328ce60124d09eddb90b011ee48b60f5
SHA1 d6d6583ea9f908b7044e66391d2e994d6db54fb4
SHA512 51f6830fb66a2c79e237d99d02e9be2be946e9ac6e3a271925a1748258dba2e1817d8d2c48b2e8f174009029719c8e8c57971de0a10d0d85290bdf2d835fd238
TLSH
T17DE0860346168DAD043AC87068C1BE1177A74E818F3EA54DDEEA12DB4D54C5C4431463
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoBotKill.cs

SHA256 32c55489b598eb6f08be9b6f87f1d1bf0333306c8178d458b808db72e6f56b3a
MD5 d11f1f1712f9185bbf7a5c6695f97c38
SHA1 12a5c77f47c7bdddebdd6a6bb6f5d8a976d0a515
SHA512 6c7cf867e4d0d943b4afd62e9a35bdc7e0905db19b975e09a589b50adefdd247083d543b491adbf9f506721a7c68f40616074a883b6a58ed66338e5b7c0b9b6c
TLSH
T1B5B092051992AF68E4258880300975199ACB2A4ACE262A8687A9A6574B815B8C810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoChangeRegistryValue.cs

SHA256 0e8dbb2cc57c6279da7ecb7555dfef00ecf2013029dfbe05fc6d735aa34d1e7a
MD5 8ffb6d149a2dec80e2f4593ec0a6fc50
SHA1 99fea62b47616287858054bae8817667d9ed75a1
SHA512 d92bcc62b1a3c901d3f7d0cb41e12aefbe753ac1069ca82cc1c7e5c73a81e16ced38c8cf19df3fef06fd407a038c0e5e3371e6a28657f27de1516b32831203be
TLSH
T109E086034A96CF7D007D98743851BD05BBAB5AC1CF3A9109DAAE13A65D10C9C5431967
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoChatClose.cs

SHA256 dae6b542d0a9df386d6ca561571531ddbb2254bfc4067ae4ee1f43c84cf202be
MD5 945feb01b708ff6e7f8c3033ede47714
SHA1 556e81a38ab0e5f77c2e1c14ee46d989a8914562
SHA512 cdd8e46e8c4c5015dce341786d9dd4878a64983ee8d3f1bc5c9f0d529e19df65dcb670f807d13837e4df8f1e51fa6ae9356df059bab74358ac41418ff68e5617
TLSH
T132B092112992EF6D80328855300975199E8B2A0ACF166A4296AC22670B808A88C50E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoCloseConnection.cs

SHA256 6e0d19dd2a88b73690635970b64fcb5b396741a651116b4a730557b5cfc2256f
MD5 da9f9cb34fca1a28db114430cdcd01e2
SHA1 e02cae1fe911eb07d1319cf43410573ec10cd5b8
SHA512 990c2fb59ab8466f03ddb03bc358bb3453fcd09b55f17456239c39f8165dbc0ab83c97832a02ca42b7066a25578c90e66bea858284c4539bfc45a364225447ee
TLSH
T173E020030A569D5C003DCD6028C2F81173A74DC08E3D514A9ABF55B64E14CAC5431493
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoCreateDirectory.cs

SHA256 81e02bd7d57d1f1059810696eddea7e1915811a9ffdc9b5a5177970e36e7fc8a
MD5 534325cc1f60f86f0018927f61988ea1
SHA1 d1352c53e5736b2f7bd391f260dc571dffc52e29
SHA512 ae0a70c4bd31f1b6c145e3d0258e9891395e45cf1142e7d61a524b3fcf381093c2c3433c2064026d5796a2e852a0ae2ade653294bd0d87712e5ecbee8941a8b0
TLSH
T14BC080034592EF5C402AC95024047A1597C75A87CF563549CB9C135B0F50C9C4870953
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoCreateRegistryKey.cs

SHA256 edb740086f5c79f466a1ba4c5a5a3e749b84115309dc788f2625eb9bd05c0f3f
MD5 d9d5c2963b83d73a5e80422735c3fa7a
SHA1 ef60b4c5e63a849bca267f4b9006a80912270a32
SHA512 39fb54895daba45564aaffd869fc24dce0f5d6d1c83ba412b64921422c4c45e27d50c4aa322dbfc78d40d03b8023b52b171ee1961249a348ae54a9ad63b5dce3
TLSH
T1A0C08003C5D3DF6C80298D6428447A1DA7C76E45CF563545DE9C225B4F40CDCC830963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoCreateRegistryValue.cs

SHA256 4ce5a205d86b83cd12ee74ad01099819e7bb141ca7cb96194d40735e14cafd04
MD5 450ad1483a74a1f5f13459b0eafbf10d
SHA1 cc8bdee18d659cf828555514864f164b116bbaf8
SHA512 d5bf94fd26fd6047f23fc31f4dbfc596805ba543fc257977136fe4b680ef83d2b8c46a7e7e4f9fb21e2be51177488429e5a72d81e54b3e94759ea301df090d47
TLSH
T1FFD0A70349928E5C40398D6838017A01B6D75E81CE1A6105DEAD12660E40C9C8431927
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDeleteRegistryKey.cs

SHA256 fb43e918e96987abdeda717f47634403e25d997531de8890bfcfe4f33d1ea1fd
MD5 79798ce29aa4f3e2d588a44d59dbfef9
SHA1 98135eba7e1f4fd75800a83e7194024be677c159
SHA512 ab10dbcca95883bf635c54592f1eece07aee426460363f3290e1fa5a08ae1987d4bfe28845bc7d6f12b760d13f4f549fdfe12b9c4e570dc2f27350f66bbd0249
TLSH
T174D0A70386939E6D40298D6468407D0A775B9A41CF266548DA9D22674E40CAC8430963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDeleteRegistryValue.cs

SHA256 3e7d4c034e70ad60a203015144e1d1c7553713a739d5aa1582876a70ad1f29e5
MD5 227c44793440c9f5c23c5434541d2eb8
SHA1 f488e1ccaf816553fbc7509307b942bc2ca39fb4
SHA512 6d6c853ee1cd9f23a177121bb766599960320c0985d0af96db3e60c50626cd1d0e32bce0c63ebe5bd1fc78317550120055da0c284fc65642d4843b5e95be7a45
TLSH
T13AD023030AD38F6D403D9C6878417A06BB9B2E41CF265644DEED13570E40CACD431D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDisableCMD.cs

SHA256 7b68a208cf4ddd8b7b8a702af93bde399708d717d8a8bd453397ee635911bd19
MD5 898882ff8891a5ea2810ee97e013caee
SHA1 c9910b791dacee5e846bfeec55e904ca9f18e174
SHA512 360366c4eec402a7049ae17cf80a65434f4b17cf75e97ec1df5a6af83e79dacfdd4f94bf2bd96fa00b783b00f3af65d8d3ac46f7111e55c957af3644c2c0a6d4
TLSH
T136B0920229D2FF6880228841300976599A8B2A06CF272A4286A8326B0B914A8C810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDisablePowershell.cs

SHA256 03ad8d017bcfa3d08ccc859824f7e0d24f4b300f8e7d73f37c3361a179edd02a
MD5 74fbc3fb008f777b333e86365bde4280
SHA1 3a083f825f6e907cb3c84883439d03df5753fd8c
SHA512 0c4cc24756f48a5c61217b42bedaf6caf6ec985c7b991cb6cb28a34bd0d21d9eb74b9f62d5928c9a207a6083fcad429753d201473eb23d8025eb34f0601c60b6
TLSH
T1ADB0921129D2AF6C902688543009751AAA8B2E47CE2A2682A7A86A5B4F814A8C811E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDisableResetting.cs

SHA256 6385ccbbbe3ef9b1afd4450b030cd5d5cdea408c7263c4cc638387b022f9766c
MD5 782bd3e0da91d2c0fdf6aaa941155ccc
SHA1 a7f31f2171a6d352aa25d03ef390cad00d2adb02
SHA512 fbb98b2ab00f2134b4f1384354b2c919e61e172dcbe0f25c99ec3f04a2bcb25c2229c6237e3b8476dd710a08fb7b8bed79e44e50e58f2cdd820bb3941eb3bebc
TLSH
T1F4B0920169D2BF6C80368850301976299A8F2A06CF2666638AAC365B1B814A8C820E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDisableSettings.cs

SHA256 daf19f222607288530854706b5283e8ebe440e261e80215c9fd9846fecb13f49
MD5 208a06173bcbda13fc1860e2234acea6
SHA1 bf981b43c8f22bd504ccd928e31c595515b1f136
SHA512 61bf6df71f08b9ff7fd6c8316d2444e3094cb9f8f62976cf44ecbfeb1e09ff0daeb2cbabdf9ad88d165016ce345c1a5fe00a907f4fc0be733c87ee4e69e52be6
TLSH
T172B0920529D2BF7C90668A40300A7A199B8B2A46CF16265286AC225B0B818A88990E27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDisableTaskManager.cs

SHA256 93b6c209b1a860fc8458efb615b3ffe3b9ce088d65c75d01399e29ea50c988ff
MD5 1be70caf3204b020e3c8291d9daf79da
SHA1 c2f91a0726a677d6256c26c0c21e7c01896c3abe
SHA512 b748363d8a330864bd7fb9df27b753757955cfa9d9c291efb0d7f1f092e39d8205b2ff27288a76c7a636be575e95ac0cb30a0de6adb95df875f59681b82189c5
TLSH
T1ADB09B0119D2AF59D0258441300975159F8B1A07CE1615418659215F0B415E48950E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDiscardFile.cs

SHA256 9ccb321dc9cd84c4571181e996d91497fa1ef1932c2a7b63728d886c8c966c38
MD5 74f6a4f24cb589581a11605a23891309
SHA1 1471fc2a786fb716ca23b3a66962dfd6a9b569e4
SHA512 8654618313b17028a7b6eee6e106c81ae1b59c6436fc6c52145735aca47408120855c68b4fc9152d192ab613cbed1a592fc1f16da5ca3cd684bfe62485db0dae
TLSH
T1D6C08C0306929F6CC029895024057A16AA8B5E46CF2B2386AAEC22670F40CAC8831E97
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDownloadFile.cs

SHA256 def86f840f95619d6b19cb80d403a32892dae3ffd3197edcf6d4e010da1b90c1
MD5 876e7a58b98fc96565c2afacf33a825b
SHA1 f09a0acbe635201be4f803ad99ad3b700ef690bd
SHA512 02e091211b02b3c0dff827f08b840fa587765881eb14813a9862faa37d7b930c4e628d6a255b2bbade80f50af3101420fd4191054b5949a6a74678e7308e8640
TLSH
T11FC080030593DF5CC02588502404751556875E46CF1613459EE811574E50C6C4430B53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDownloadFileResponse.cs

SHA256 8addf2a7e57b9a46d5e9ed4b7e9cbab7c186d219591e9c48f227798e51612199
MD5 b2f51ced05f7d8bedec3fdd9f1943944
SHA1 d241963ff7e020b23b19e760437323b26cbe5d6e
SHA512 56dc7cafc152aab958f462580286920fb1aa66c0b6522c568cc98d7b4e5678085d0a62800f982e572a4051f9c530908417b1724325f15c198cd05f590e2e3bb9
TLSH
T19CE086034A56CE6D803D88B02851BD01BA6B4A85CF7E914DDEAA13675D54C5C6431993
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoDrop.cs

SHA256 ddafbf4178442b1ceb326ebb746daf6959e71aaf8dd14fbd75e88754c5621ae9
MD5 97e8e6b3ca15f9efab9c9427a357e365
SHA1 54640b67f456a68c4d35159903c15f8cf4d9b533
SHA512 ae648c551b760a47bd91fff390a191c1efb6e6d47bea480bd6decf12a28c6ead19ef70223281bd1766494fa6cf4a1008e858a0fbc104ce6780fcd8a4db6cc828
TLSH
T15EB0920119E2AFA880A28840300A76199E8F2A0ACE1B264286A922575B804A88810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoEnableCMD.cs

SHA256 14ade6c70846702c1753eb1b3fd803e5b9956c0c492e1085f48219f63aedfac0
MD5 f9bb1bdfea76bbbb954486fbd3b99741
SHA1 54ee2dfe8cd5de133ebc6f36aafb5bb43df6363e
SHA512 3ac7b218f8a6e891e62fb10ac64cc84ad39c4d5cec0741cc9d6aad3eee98a0f01de1cd72165daaa1d6fb45419e7d1f28d9400b133fd86c25446d8e69c4182a11
TLSH
T177B0920219E2FF688021885130097659AA8B2E06CF272A4286AC366B0B804A8C810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoEnablePowershell.cs

SHA256 1d2e0c06e317eb44fc6eeac291237847fb75debaf257bd188bb9acc0d5dbdd9d
MD5 5ebfdceec3eb0112b27c85e46be04df3
SHA1 5805443ecdbb9a4f41ea1444974e134202c68b33
SHA512 55f2491a5f213edc635f2973b12586a5f7e8338509d0f2ac6c71c55780e5fc8ab426e73889913386eb1f8888269cf950498790a1075e888e55ff904ea4b2a6eb
TLSH
T1D8B0921119A2EF6C902588643009751AAA8B2E47CE2A2682A7AC2A5B4B804A8C811E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoEnableResetting.cs

SHA256 8e05b2285a29cb263d989ba8a400ccbf3dd704d2329d4a543916e3bf49c49caf
MD5 e64b664879440ae73028ecc0f172f33d
SHA1 5d347668b561cdd62fb9c8f7f7cb7b8a56e5aefa
SHA512 4c9f55b9d520231ac555884dffb1e1b0b4a57f027722c3792b994f766fbd6d194d7f07a89a050575aafc089d1db31c5e3dd7327fd6f9b34c5766693fbc2c64ca
TLSH
T169B0920159A2FF6C8035886030097629AA8F2E06CF2666638AAC3A5B1B804A8C820E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoEnableSettings.cs

SHA256 155b0eb361ca2b43920300b270d8514a65e2b0f5bca1443e21dbafb35140bb83
MD5 f8efa457924683518e7d23dd3d5fb95e
SHA1 fb8235f2a9c798e13d4c1036b5d96af8a3ab5427
SHA512 751564bc6aa85975984e6ffab86409fedf21bf7325782ec667cb0038c593894a44d1ba5d6ed7cb0bccb0b4da17289b5b7fbce97d8086245941cbf25ae050f740
TLSH
T178B0920529A2FF7C90658A50300A7A19AA8B2E46CF16265286AC265B0B808A88990E27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoEnableTaskManager.cs

SHA256 4e0f69d812b19ee3f64cc8bb298a0961bb69d6c3dbaefe812721a8b4d2ec4e88
MD5 6d015956c364c458d034d6ac4876be09
SHA1 aaac0fa38f9807cdd698410c36dcc46e0debf0ad
SHA512 4052eb1037b5002ac32eef89fdd338c3808e565264db7f9cf8ffe7743aca9ac489567ad60ea9410299b1dde2939c51fb79b6a34884b04d0dc7164b808f5a71c3
TLSH
T174B09B011992EF59D0258451300975159E8B2E07CE161541865D265F07415E48950E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoExecute.cs

SHA256 b9ac4953740dc4eb08f665636bf7e80bb57d3ad465f1c247c61911ba906a2257
MD5 8f300138a3955b3a0b7953759c1e1ab4
SHA1 86ce4b123af5625e24966822c585adbad541f7a1
SHA512 997d24db8168a95f4f106f4656c89233939ff936b8070ae06e4bab28effc484747a430f1d288256b7f1015fb0e5f2d27b9a9915f0b692f9beee8550320162abe
TLSH
T1B8D02E030A22CF6C803889B02C00B816BB9F6F85CE2E4008EAE993A79E48C9C4421963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHVNCClipboard.cs

SHA256 859449ab5cce071f373587b88c17693b01e5606c9b52bf01fe760e9a795fa7b6
MD5 80d94dc68a4b3b8627b62234e682c59a
SHA1 1d5aa80f592451983fe828ecb55ebf87299c6f48
SHA512 21fed0bc15ab30004dbb56794d47d803c03fe7ece749fc5e7a90381b4c613f9f80362278338866462a2f8c1a350bfb22895410f64f1c725a2b71d3a1df26fdaa
TLSH
T18AC08C0316D29F6CC12A885064057A16ABCB1B42CF2B67458AED22671F80CAC8831D13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHVNCKeyboard.cs

SHA256 65dc1407c8946684bcf69209cb91be28927c25370cca0afeabadebcab4f90aae
MD5 9bbf0e61a25638f12c9634c02054d7d1
SHA1 a822338cbccd24405e565a201173776ac28a452e
SHA512 f6ac27bea6042f1d1452c3c75f0dc47b96a2bc7ebf7d17bbdcadaf30051ecc12a496ceb203ec965c707479dffd1ce8788443af7a15d13f828626ec6e933eb815
TLSH
T198E0D8034696CD6D003C98712C51BC02BFAB9BC08D6F810C9ABB93A65D5CC9C1401453
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHVNCProcess.cs

SHA256 145f9f2e9e15a2ef7bf426ecbb0b2d4995fb7c93f63ec943724d5b26dd6eb715
MD5 2fba47314c2d52b7a0f26641404c1099
SHA1 fea2f55d07c4452117b65e60f3718effb79e382c
SHA512 faf5f94a6025624109f0441c146df57f3d881b81acde32827f8bb74ff7c0e613c8e2777ff398abb0663ab61b9bfa4f327f6ccc3c0bd8e14ab356684de91e711b
TLSH
T194C080030556AE7C407D8560744875166ECB1F41CF376155CAE812570F40C6C4430D57
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHVNCZOrder.cs

SHA256 7b1ee30d6dbefcc977e0ddcd23eb72abf67acab47659cf17c34163ad2d4e044a
MD5 40d83e2c5b8a5773392f190b8388e039
SHA1 36c2d083b89016ab388b4e93eccd7feb81a9a4d3
SHA512 307f76ccb6caa7bec9828ba2ddfa752fbd778a55e9d3355312fc5bf6ceba5ae8c3043961e2419ce2b7ec03563c425ee41501eb0a693d74848aba4cb7cbc83c30
TLSH
T168C08C031A92EEAE813CC8613804BA15BF8B1F46CF56611596A8226B1F80CA88811D63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHiddenRustDeskAction.cs

SHA256 e180ec344654e29276e0267220676d45e1b5d8b9e35971e6ee7290c7d0565bcc
MD5 c3d65b0703ff15fd9974e312e4d4796a
SHA1 b2081ff030814af62438a3c75eaa8b721c2f67b4
SHA512 7a0cdf72a463c30e0103b343a3c3e3d921e297a5bfcb4485a2a78b41db276b94cf085048abc33a57cc0a7391dadef603b7f7069a037ef0b676c7f370f04b5589
TLSH
T185E0270345219D9C443A996054467D0277F75F81CD2F5109CFE9017B4D65C5C4471417
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoHiddenRustDeskActionResponse.cs

SHA256 007a7d302482fe859fd3a41499cc25a6c8a40de3e992c6c13d5454e096d368e9
MD5 4ffca7e7536fdcd3cd190799dc9f8ba2
SHA1 8ff680e5b2bc65b081c3d38e0f1d8e38f1d96225
SHA512 5290922ca8fc19342b1577a84ba4a21ad6d365a7d238435af42bf59b4b99c2645f9be72962ba753ddf2754390997bc61fcab1d0349a55b9b227c1c9a4ea5a551
TLSH
T13EF0E9038A16DD6D003E88B1AC82BD017BB74E80CE2A911EDFEA429B9E2CC4C1031563
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoInstallBootkit.cs

SHA256 4e685f476f8fd8d551f1b1c3c0704de6c97ca253bda7aaaf2154aff11c042b11
MD5 9510e5973ae84db6e170fe86fb742267
SHA1 daabcd505b3bb43d2c50e8ee5d53f7ffd57abbe3
SHA512 5bd8b640e024c17c3efe75c91bbe26fee36426198f51a9064bbbde81786697e3a290290354c264eea2591911010f9e311b4ffd806704f8e18ac0169b4f5b45a7
TLSH
T1ABB09B151592EF7DD021454030057625998B1A56CF166542C69A265B57C0454C810D17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoKeyboardEvent.cs

SHA256 8fb7a8ba2b8caa80f8eaf5a6c2278f70e1444d29e0951b254839d91890bf59f5
MD5 29508ebb8018b3c016fd6f8c5a3a5200
SHA1 eedc3e2e448c92cf3d6d6a72dd023bd5e2c5a736
SHA512 dca98c262ae8e729c37525669c1cd2c4c432e31cf5e334ae71d1e428cf5d51dc80c8a5b69611f23a09b10d71073dd44fb9f24cea0886004f81108217a6ff0c82
TLSH
T15ED0A7034556DD6C4039846028447816BF9B9AC2CE2A91489AAA16664E14C7C4811913
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoLaunchExodus.cs

SHA256 679990eb82b87005f1f38a5a3ff8cec204ef125235bf47f5caac0d2b5a473797
MD5 1d01ddaaef5c50ecf07f37ae4fadf5b9
SHA1 025c70afd82c8cfcefbd8f6042457b200cbbb1c8
SHA512 8d8e212242e031297482fd91e4c1aeb624ce1f6813f59dde7ab5b5df4c92cd3e966758b5d0917bb18f3011c46c3aebcf4daccfb9629799db5b2adb577643de0f
TLSH
T1A0D0A70305529F7C507985607986FD25768B1E82CF262D85CEA812674E40C5C9431923
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoLaunchMullvad.cs

SHA256 5b9c2bc73f47b451f4a771974f96f8d6f4de9f02cb98ee44976bbe9d8825609c
MD5 9feb2809bacd74e96ad80d72a03a3033
SHA1 e1358b0130189b94699e3af393c5b3b6d11bed99
SHA512 c9bed8e7dcc68d6f266781a6945afe2fb4988ce188285e86b2b86573d6096fe77b0589376b93c7e9eb49ee588571ad05aa6f2461d5e57e1576c1e252715be8d2
TLSH
T12BD0A70306529F7C403E95603455FD3576871E82CF262989DEA812778E40C5C9431963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoLift.cs

SHA256 3aa4929868bdd228fc128132b9728a176b947ce39661137306946062e5b880a5
MD5 8930b96d2fedf9c76ed40e45781aff04
SHA1 444c5e8ece165c047b886198b3ef9b3a44eda497
SHA512 98d0c8b20f1dd80961968dd908cff8993bbbd298e51c2618c3bb86e1713727f05297367d54e583a92c2fea8293bd424c3d897ebd75df4d76107a44ec22834370
TLSH
T101B092051992AF6880228850300975199ACB2B26CE17264287A822571B804E88810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoLoadRegistryKey.cs

SHA256 93dedbc09c87a41eedabbbfbe6789e313ef079bd8ef4545ca4ca08c41f168a02
MD5 a219639b34c72855baa6082effe81273
SHA1 290265ccac53fce7878e6971ccf5de61a85c73cc
SHA512 43be2540eabf0345c5b640b51bfff0e0f3a566ac6a1cd5a44357ddb0130b9c6133f2075228a2d44f722af93185f1e4ceecfc7b8ef012734b1a9a8c64ac6fb157
TLSH
T176C080024A539EAD4079CC5068447E157B8F5E42CF165649D79813674F40C9C4430D67
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoMask.cs

SHA256 91150441034d76322ba681282a5a35ff1b5dfac5a11dc15bcefaa1db632ce6e9
MD5 25db1a8e6f4824e105a67423d2271fb8
SHA1 4003bcb516629c864089250366c91a3b0d83ceb2
SHA512 c53eea1ee9f3165a9649d7e736a3b14c58f74ca524fd79c13864fb6d1b89a5a2d72b155e7a2c31239e7cd6d0a98336c0d1832d8f50ef2a61af3b136cae7af86e
TLSH
T1EEC080030552DF7C4024C550240479156B971F46CE176509566912974E40CDC5451A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoMouseEvent.cs

SHA256 41b655ca5334de558a986821990f95fd0db8e0350d10fc461d6018f0b71bb63d
MD5 b25af88c9e6b7d76aeb3ffb9b658017b
SHA1 0c97a4f72d86bfb010a2a13f3b403210fb6fdd59
SHA512 0ba5373fab9c1de5a7cfb640cd093c1e5b834d22321b241ac62c8b647890d5c746aa88da418179d788987d32b103cc7adee8f5a27524cf7a88169db5ddad6989
TLSH
T183E092034656C99D4038DA712842BC01B66B9AC1CD6EA00D96AA13B64E18C6C1421422
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoOpenChat.cs

SHA256 d9ec758202898ecf2b831e4939db69b30d9b81334357a0bbf9d375db75167350
MD5 4691d19712019219d0e48ce4869ec235
SHA1 7f626b139f87caca728c8fc041df2d0a88128fdb
SHA512 bd86ade8a2b0eb11bc981059cad534ba6fd60380eb73837220c074b93b51c71f6785ecc99c790f4ae6358d6c729f2b24ccdc3503f1ffe7e05e3ae17a2b9785b5
TLSH
T1E5C0801305529F5C4025C9513404752597871E41CF166545C79D11574E40D5C8830D13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoPathDelete.cs

SHA256 7d7f671e72de3d6e1e6c15d46a271c16ada4fd4409740bbe45c35d3e85f9ff74
MD5 3e37982d9bdc6f2fe70cb2647c15269e
SHA1 5a56635561be981b5ba0cef43ac126500985f743
SHA512 9ce03df2f16ee58933d0369f3b63c08fcb0ef35d69cdae4a0ff207c4a1b72c43fbecc3b3afad50c33242a926508bd00352510dbbe932a3e7870678bfcf237ca1
TLSH
T175D0230305539F6C403C8F607400790267579AC1CF6A6105CADC31674F40C6C5431913
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoPathRename.cs

SHA256 ebcbd01ac4f97833a491ab54569e6ff69764e14f3c2c18b4dbee761bdf3c6c19
MD5 1a73db666c5719d0c5d63b226bfeaf84
SHA1 edef9bffe4cd92894bb83cf2fbc923d8b06c93ec
SHA512 a2b7d294caa792c5a0c7a5169032c9a8c80b2b9ea41cce04623e1292700e72701d328f504a17e42f8211e7a365f5c44192c3d06df4a2f9c79a5a2aaef8fbbc97
TLSH
T1F5D02B0305128E6C043C9B702840B90267578A81CE3B6108DADC11674E00C5C5430513
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoPlayAudio.cs

SHA256 20a26220a39ebc8dd523381bc9520f2e0e7ec8b35350cde6ea2773b1cea33712
MD5 ef66306902968b0a9d9fa2ac8eeb8da3
SHA1 f44f9e38eb94cbf47b8fb0be19bc8af5d997ef42
SHA512 f544bb636247e370720a04a2684639c6bd3d5f9a224ef8cd04757aac718d0ce85adf0c51a41b8fe882db747ee61ac559cca268a9bce1fe9c484ad339b62554b5
TLSH
T178C08C030593AF6C9039C99038457A25ABCB1E42CF262685DAA822A70F40CAC8831913
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoPlayTTS.cs

SHA256 91d0bbf9f56965bd92e53717e4a5a1af2c21c5ab87a73d16eecee064294c20e6
MD5 3f2f789b4b1398867c5a09cd4f88d5c8
SHA1 4dc6adc7d4f8af0dad3bc5a6d448ee2b7d5d95f4
SHA512 445986529faf4245770da6a733426fb780a536b24bd9dabe646bbc14c8a6691584683078334e04d9daa760306925426db731002ecd983f1fcbdf418f917ba834
TLSH
T18DC08C131592AF6CC039885474487E15ABCB1E42CF2762868AED22672E40CAC8830D17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoProcessEnd.cs

SHA256 f00c65cced35030e33469f8ca910c664960834a71715cdd98eb1daaaf4b541af
MD5 f7d91ed5d1872ad22892c039c3be5974
SHA1 3e1221933d6395a6ef7a9e6d12c6fe2196c0e5e6
SHA512 9ff58a5545b722948e07e961dae24dade37573be310ea5e4e119087ffeaacfe8fe697e6f1ce593297076b4ff17ae1e8c26c2d541cf4d91b0e12f54ced363074f
TLSH
T1BEC08C0305A29F6C80788D5134197A16AACB6E82CE2B65068AA832676F40CAA8920D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoProcessResponse.cs

SHA256 22acbd59bd1acb765e5cce84eae741397d5028502c38ba64289aec83145722b8
MD5 a287d2a1f7e2a2d3a54e04df30f106e0
SHA1 9be3ecc24c3bb836e80420c197e8bb98933e73be
SHA512 933c16c6cc9fcf425a4b9492ed328a3ae35b39e62b3ca127cc957984e36d320586574f3ca51a2facbad1623f235772dbd57e961633e718ff81e0ebf053eb2505
TLSH
T108D02303456AED5C403C9D6138437D45BE9B6A81CF1F9009DF6F92671F00C6C4811C27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoProcessStart.cs

SHA256 7a886bd15676ce0ed9680ec2407457c027cc912a2fc54df6c139e3cf1948ca31
MD5 a7d140d6220941d894c672c19491f687
SHA1 0a84f17b9322d823a92a2a701f8ccaac6805622e
SHA512 445bcada9d4edf144ccc7e46d9a737536686e20e4bf313bd94f34e136eeaa0b2e8246bd72a6adfde4e5a92800139a96b3035ef3287b3e7c11f98dd5b1c6fe0d3
TLSH
T1E1D02B030663CF7C803C89703C41BE027BDB5A85CF3F5158CAE912574D14C5C8031993
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoPurge.cs

SHA256 8ce53263d5bb30d085bd574cf3661beead46b1060d8d818f21478ae89a018c26
MD5 9b3622ea1f0811da9ddb55c614209762
SHA1 6e6a0797ad791723a62fdc5454676b9ef65417d8
SHA512 b59aea1759fb1916ec17857aad9c12b9a6713705c5e4fb6871bfecb11fa2f9b6eb079e060f27eed120a4924c64b7a48cfc99cae985708ada41e487e244123593
TLSH
T181B0920119A2AF68C0628844300975199A8B2A46CE16264286A862571B804A88810E17
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRenameRegistryKey.cs

SHA256 2d2c848a54965ee060e8c74dade420c92389c85abd0a10eb68acaf4dc438ba42
MD5 948c1ef1da9762f73bbf8bfbeb2543ae
SHA1 0647af5a75ff9daa7f2aa26049dab4e845269c8c
SHA512 577ebf52580ce2822e0ee4890df1753b38d0da381c2c949d8ca4b78a4c6c7b42dc7372cfdcfeff880b8824c97451893f60a35efd0a825d02acf18d71bcba990e
TLSH
T115E02B0386528E7D403D9CB02890BD05775B8E81CF3B6148DEDC13BB4E40C9C50318B3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRenameRegistryValue.cs

SHA256 4e62a4eed21abbcf3a3f795d5653509d5c37a468ff15bd4d8328177582b91d25
MD5 81f5b08871f6a34c44f8f604a6840aae
SHA1 36306221e515e940e335719f9197f92dc9dbe4ee
SHA512 d46b5bbd0d19ba7c628825a2008c629d806e0ea39a827e7da09f5aa293365b4980318574796e4a5b1c2cb81e0123a3019de2bd9bfc4ebf328475fb69173e05d2
TLSH
T17FE02B030A938DAD0039AC643C41BE05BB9B2E81CF3B5248DEED03AA0D40C9CB03187B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRestoreFile.cs

SHA256 035707343d422f69802c1396bd4055921d7a5c0135e871d0b96e349da4e1826d
MD5 5349f014f22200e6fdd8befe43978231
SHA1 c649f139207befd846f0022447b8271d7b332220
SHA512 2ac93b1bb411451c9ca0a412a231534dda90d97fdc55184befb2402202ac51020fa3aa0f7eb28e2d4498c71677533d09fa94f460019c2b745b12208b53109357
TLSH
T111C0804305569F6C8065C8503404751556871E45CF161756DEE921570E40C5C4430A53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRestoreFileResponse.cs

SHA256 2a9656743bc3267e36bf5a30b323c7dfc8b741fa79824d46e46135522d3c7db7
MD5 fbf3e848bc07c83be0f5f25faa708152
SHA1 861519f8f6f1a0e518444c10ba9ba18947be2112
SHA512 a506314595a682e7804a36d0362bcce1bc5e15a352fb1bb44a24057a8d664b9016b0da71725eaea1d5a05ff130a4abe8725d8bf1ea8fc17e4626462f75bf859f
TLSH
T1B2D023434556CD6C4039C8A03C017D117F8F0A81CF265556DEAD23575F04C9C8421D73
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRetry.cs

SHA256 893dc22b49a43a803cb62908a9fb7d300b5ead8e3b1577aa1463600470562042
MD5 d77cdb0cc7fc570bb6134c557051b919
SHA1 aac6ce5580b84af0882946e4c65e14f97b3eaf24
SHA512 ab646a89770d1c5cea5240d3e3eacc738b601b59b910369e182d66d0be0ae15d75ec0ad3aff75b1da076d5b8e7010308eb9449ef63925bd532c8ccad59bafb20
TLSH
T19AB0921219A2AF6DC0658840301979199ACB2E06CF1A2642C7A822671B804A88850E27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoRunCommand.cs

SHA256 fd0e77813354c93c000c61741b41133a974e1d051811d36b9dc5ea1978f5b3be
MD5 60b4cf8e3d0a1c37e0175c8c25f67a37
SHA1 0ae0ea4be482c3b0c157e76413382ac4c4d5a04d
SHA512 0eba61f1482b8c402bef1c88898c276dc2fb2218ffb977dd5297b55d14b8d98fb0fab4b420b5bd130090a510f2175265c74b0c12f4fc8902dd1889b8d827ba92
TLSH
T182D0230307A6CF5D4039886038407B15BBCB2F41CE1B5147CFBC36575D04C9C4420C63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoShellExecute.cs

SHA256 477fd940bdfb7a2e0b1818d661b42cf95e069034db9e066bb77b8859d1ffe3bb
MD5 1cacbf094be2d5ed08dcef76b26126cc
SHA1 1898ad9ae3ce242529e58a980e292bcd23d3b562
SHA512 e9d2369063562f36b1104dbdf8dccd3a150ce82ea75a49418f3c01f8eac5b231aa310bfb873bfe794d24216948407944d9b487982a354a4367d670aed138f4d5
TLSH
T1B0C0800705A79F5C8039CC502444775556C71F41CF165547D7BD25574E80C5C4471D57
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoShellExecuteResponse.cs

SHA256 a189ce727f5286f7b6e1a9a49b0930d5b33d0dfaf16b7d75fec74bd665433cf4
MD5 9ef94449afbdddb1b7b55332b7747885
SHA1 2a2033dd29d9cab9443b9da453328ef6282438d1
SHA512 717c9e94726b5f2776dfb06d885e8d38db24aaffd59a0236ff5d8acf5d42579c0ecda660483b7a771b2e292ac80aa394ca87c9c4f9aa7d5a0cb45f3bcb844cfc
TLSH
T114D0A7030A56DE5C403988A128017D51BB4B1B41CF169505DAEA56676D84C9CCC31D27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoShowMessageBox.cs

SHA256 38dad84a277323cef05468d65b8035a4a23601fc10bb117ab265ecbb5c2ab0ff
MD5 df5fedcf77b87d44834d7874742acb06
SHA1 4b645499d2fae25805c8076e329852ac082d0c52
SHA512 39c05fb63d80c88df5f0360b345f7485e433e4853ee138678840b2b59c7bc8bbf705ebc230acd5931f1282ca50679f2fb11e55550490e40e5750899f7e39709f
TLSH
T146E0860345528EAC443E9470ACC1BD05A76B5A818E3EA548DEFF129A4D04C9C4431457
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoShutdownAction.cs

SHA256 ed5824f83aa37ffe01942d7cf4b183e0c34a5c66ee08aedd426acdd9484ad936
MD5 ca27a2ecfa88fc010d1ad317365fd569
SHA1 6d8e0ed6ff1cf512d83e848360e28f6a0750cd07
SHA512 bbe36ce6ecad4021dd647ee39e1a133be500237844b858ae9cc32c01045ce5f411c9666c52c554fcf2369914c2a7e1cbda400ed271f19e32279d099995234a82
TLSH
T12EC0C0021052EF1CC0268A416442344495872A41CE06D001C35A11370F10C7C4821C1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoStartClipper.cs

SHA256 b609a7b7a7b7f20d2affe2164051df01d00cc49c6f034b00b68e55f1980ec92c
MD5 82baab839eab64aee9837e7123041fef
SHA1 4d957bf01550acecf2055c3b75053896511ce67f
SHA512 7c86ded76dc4b6c638aacebb9092e9f8785edd3f5c5b57fa7fe07c3dcdafa0cdc146832f364862bdfd9d155b5e2653e64fc872391ab13a6ae926aca8b118f75d
TLSH
T12CE09B034B55A95D443EC4616CC5B901636B59C18B3E61DCDEED62564E64C6C4831862
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoStartupItemAdd.cs

SHA256 6717241dab8699c228947efb8439e64ca2e391bac94b16fc72a407a82323bd8c
MD5 2b62d6a6ed70aa5ded2e6ae49b001b6c
SHA1 d911c12d82a7438a4fdd800e9115a572713279ac
SHA512 be07ae211e58cbc29e9dfe5f702302a09dc8d33ce7af0f3b6608ac8b7e7b3037945b3bd98f0ab64d2c5efddc4a78c096c2d75ba75d57ba7022fcbaac2575cc6c
TLSH
T1FFD05B0345529F6D443989706891FA11775B9A81CF6AA549DA9D12774E04C5C8431953
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoStartupItemRemove.cs

SHA256 9f4a55331a77056fe77d664b6f38fa7c1e64e607756c16fac5eb738a12a00cbe
MD5 8f1a045f5ac911209e857855e40dec10
SHA1 6346b018a596c6ed99b7ebc0a665765586f6a363
SHA512 95987ea378f09dd96e60c918d367037af2f288ac12269e63ba5ccbbc49b50b283a158bfa64b2bf556a4d84941a1d77e10a47b88064e1aea018557cd932a7f94b
TLSH
T16ED05E034A569F6D843989706881FA11BBAB8AC5CF6AA649DAED12674E04C9C8431A63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoStopAudio.cs

SHA256 a0200401e43a97bbb68d83394d2ec23fbe99d7fb64d57923b41043b0a3bc4484
MD5 af92f756bb07318897ac322d429a219b
SHA1 99c5398b50d252764ca8eb0891ae6838a4a83194
SHA512 ef09574c6ccf4bcc651ca9e14f700abb42c06a0a99616363c16e84efb7a36df7b159e5d8457d5947bfd37928428a4c743651c5a7cc8eee5ce09ad4e987fd05c5
TLSH
T11BB092125992AF69D022888534097699AA8F2A06CE262A4286AC32670B804A88820E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoStopClipper.cs

SHA256 0f4927b8488013afb053bfc5f4e83852100d01197d1b36a67570c581204ec7a6
MD5 110ad6104ffc7e43ac1bfe0879cf5de0
SHA1 e6be66145cfcff2a3a025a2fb2b89211c7f78012
SHA512 58f3088f96193063b3c2c7f76f38a897c7fc67d5cefb1127abe86f16cb8024052fd39bc950c44a47e4263e525672dcbd7c493ee1f83fd9aed79c1d0121a4b80d
TLSH
T121B092026992AF69C0228841300976599A8F2E46CF5A2A42C6AC62974B804A8C810E2B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoVSInfect.cs

SHA256 b2cad582cae09874eaeedd593b5b420520f94a7582bbab4ec7dc2e96a4b276eb
MD5 bf7510d66945fed10e5c6b33d8c2625c
SHA1 7ad25b88844971101093cd06902a139f72cbde28
SHA512 6d9a70ceecadc351791374a46d3056dccf80cd59f377c8cf3f3edce9597bbad7fc232646c90b59183422a5b60aa97581b7fd810a0a901a61c2db303c39f96116
TLSH
T1A0D022030657EF6C4138C8613801BD21BF9B2F86CE7A614DDAE852678F80CACC820823
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoVisitWebsite.cs

SHA256 f2b5864286f963a3737893d439e70a732c93ff40795dd20b634207848246a8a0
MD5 bafad7d40f21787ddebb66b30ff03a3d
SHA1 31341ec68a5d9d3c8941c52b9fb661db0123250d
SHA512 8d8173645e26c8a4f1dea44d072e282b38f75ddd7a86eb7789d2ec9a054cf97baf84774828376d87b53b9b0a4e41dba4018658d318ae9aec0641308c8e4bf363
TLSH
T184D023030557DF6C40398C6028017D357F8B7F41CE1F5144CFA856671E04CAC4422813
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/DoWebcamStop.cs

SHA256 9e558240d79a201655a4ff95bc478824cddb7ca63b0006bb048b13595eb5fc15
MD5 722c284b1701461fd841b78f9fdfa15e
SHA1 535e4c5fc4a122091770f0bdad93a829ad5fd4cf
SHA512 3212716ef12b288a0cdb1a3aa59b835a855814203963dbc24a3a71882d90e4aa7801b2cbeb9300437171927c512551c2aa6cbbda0ed32f03537a002e13330361
TLSH
T123B0921259A2AF6A806188403009B9599A8F2A0ADF1726468AA922570B814A88890E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ExtPush.cs

SHA256 15b6fcb40c5fed188d4dca78ad6c81e51e792c703ee6f2ad59c332e5fcab3f50
MD5 d8f1b55a32d48aaa3f7e03d4c704c0aa
SHA1 d9bc8233983b83db22648c3710b3ab1a9f1d754e
SHA512 acab43d48c4bd490e1791f4361f3c91f50932d9f34b0aa508b968e34f3cd098f8939102e3e396e37df6ed5fecfda96e156dd512f04daddc64a2caf434488852a
TLSH
T1B4D0A7034552DF6D403C84602405BD457A5F1F82CF26D049CBAD13564E40C7C8460E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ExtPushAck.cs

SHA256 e69a9989eb331e64510404a206f6dc70e011a12384aac6cfdc69c4a13aaa7d77
MD5 fcc48868f9a9a1207e8b91eb9cd513ed
SHA1 b10f06deeaf29070109875cd3180971768a5d787
SHA512 03e5b1c022af64309bb3b3b725fba4956c1e169c02222f6f5000bad04450894eb82ad43d3341826f9163fbbc3c9e818deb2d0317da1bb9886c9c8448e6aabe2a
TLSH
T1F1D0C2034652DD6D003C84603840BE017B9B1A81CF2AA088CEE912974F44CAC8421C63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/FileTransferCancel.cs

SHA256 ce774e9a73666a088c07423f91d3e319267a2a9e2e0f8a7cbfbcb5298faf0387
MD5 610f81ab9e0e28039be8743ab016ddf5
SHA1 cc7473548b02f52868fba69a80b82b6ed2e05efc
SHA512 d484ddb741225e55f7a80e0703fd50db5bf5ee54e98013fe0564280363cbbe97dfa629c7345a13d7976334bd0a925310f710f5526c5e36f727fa917c4f1db2f0
TLSH
T1D3C080038A529F5D9024855024447915758BDF45CF59604A579831675F40C5C8450D53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/FileTransferChunk.cs

SHA256 cddc7092009790129e99b040f505467862c11073ca51adcfcc47c861365d5561
MD5 be59e9d97adadabd5d25b9db41a13307
SHA1 6b0b4b2ed0ced4cb7a4c8de86a7e4570d7bf9e53
SHA512 96328418058f2bba1aaa3c60510babd1a3231d798c34d1fe0cb5c8195ac69ac5a49405459140e78308b4665b15b713e0c7d14dbe5218164c91a1b801311d15d3
TLSH
T101E0E5034A16CDAD503D99F02C91BC0672BB8BC4CF2EE00CEBAA12AA5D18C4C50114A3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/FileTransferComplete.cs

SHA256 e48798f74592ea4fa28e6ad8c5fd13142c15ff1ad224c2e54a9edab23563afc5
MD5 518a73a071b63b62175fd0bbfbad7838
SHA1 58939a37b39f106f31dd399810bd7624333b79a4
SHA512 0d01b19ea012440a680602b4c776f4f1f916c688d0d0c6f37b14634dc4a389c9d96d6c784037dfd246fe442848bf05e8b9fdf98357733c2627f4c6b938c6358c
TLSH
T1FFD0A70306568F5D8028896025417905768FCE99CF1D600D9B9811675E40C6C4421D63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/FileTransferRequest.cs

SHA256 f85b133455fa9dbdeff1a2738d6620defc089804399a7912bc0b20148dade916
MD5 481aa5123e6b3190153685fc2e8df51b
SHA1 0655df6d8ed1c5bc4d01b82cf261d2caea4310a6
SHA512 0a0af8b52fe2e55c03e52d85f9a14f6bc31ceb34e6871e23ec8d1b243542a1107c72cc693f9ee58822ff2b485c84c5f39c8e29e5805bd67541671d5fb335a80c
TLSH
T1ADD05B034A568E9D403C99606851BD15779BCED5CF69A00E9ADD11A75E44C5C4421A53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GeoLocationResult.cs

SHA256 29f8edee9d1248b3462e17d7b79f3a4302cf36c8f5164ab92b1c4e29386498cc
MD5 a449d4fccf68cf0946e439badb762b01
SHA1 84d28a2ae21a48f8fd0f177f8c9def477f07e59b
SHA512 3c9d0e0eb31fe9d5345c88fbf37a41c345dd8a807172099f57dfda03c6aeefa4ee9772011485a7c9def8bf88380adcfa4434b6a475bad1ed95c03f846042a092
TLSH
T1CBF0BB0F461ADD5F003C94F02C51FC02F6774AC0CE2AD04CDAAA52AB4D5CC4CA8219B3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetAvailableMicrophones.cs

SHA256 25fbbfbf3a9498a62a86d977613f19e6530bb3b88cb95fbbd4b8f326b408a94c
MD5 329c8d40cd63025c3c811011412cde43
SHA1 f862cb2c24c7d0e987036b62a193823891053fa8
SHA512 c569f440b798dc2f8de6c14229e34312f64f12943d02e4ee50f75e85c48bf1a78c2d67900e4c8c5810568fd3d3ea1205d27eba4a4b0a7047ffb7411a91d20442
TLSH
T13AB09B515D93EF69E1618444300579155B8F1A57CE25655186F836575781058C810E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetAvailableMicrophonesResponse.cs

SHA256 98ea0fffa6215563509006d7ca3969639f49ac66a653a83793f54b4533b6fef4
MD5 488ec6ae35d8a4712a56f5ebd4edd2e5
SHA1 5111ea5aaa08155aa2d9e73cbca466a072a5443d
SHA512 6043d5c7b71ae7193a0d52e3c40cf55b4f4075dd9ce557b451bd079b3b33b60a29c1a00b1b6f564dad04917e8f67d84fbdbe5f86b156d5e688db91028748f625
TLSH
T165C0C0024D43EF2C8037C4503C003D14A78F1A82CF32B5C28AF832230E40C9C8820E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetAvailableWebcams.cs

SHA256 44425d44cbada6fe7518afd6af0b323b2022ecaa1beff77b93b78d832887ba86
MD5 651f884797c6bf921c0d4f9eff8c0880
SHA1 cf9e4b47d97fc4f5e789aabdfc41c790d10166be
SHA512 366f82775fafb053a459ed6b7b13d5f11e8c9dbfa8f26b1cb8b083feb5862a4c60cf1c3a17c0bc4b3899a7029977fdc15c2d06f08db11d30b4cf9fdff5fcd7b0
TLSH
T17DB09B515592EF7AA0618444300579655B8B5A47CF15654596AC2A575B4105C8814D13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetAvailableWebcamsResponse.cs

SHA256 a84ed4ccdca97514ecf7a45d041a93deb6df22cc8347b9d3388f43707d63cd6e
MD5 0149e14c9cf70c41f6824fb58561e8d5
SHA1 b544262a751e0dd94bb700d6c33958aa431c6f4c
SHA512 caa13c347de25bfa653242ba385823330f5f3b6ced3292676ef8664964f0cb38315514cf757c0cfeff47aa94993b2f82ed44d1d0c4a95d13a60d9a2611af411e
TLSH
T12CC0C052C442EE3F5034C8A028003E70678FDB42CF22A0898AFC2B130E00C5C4838C23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetChangeRegistryValueResponse.cs

SHA256 1ce3df1368420b6d72130a27a09b5df947feeb338c0152f7066d76ecc15d026c
MD5 f50385f7af15b46a08aba5fb900b9daf
SHA1 f431988e36d7f67eb0ac48184d4ebc018f02d7b1
SHA512 6a41a575ba21e72714b61649790c3dbf0b9040ac2c1370561e79c58253dfce5b5a666f08a6ecc40792e7264f16e97125d0f2ca8581a220fa4d619320ce1b3025
TLSH
T1E5E026034A92CF7C003C98742841BD05B7AB5AC0CF3D900EEAAA03A64E04C8C5430963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetClipboard.cs

SHA256 96338fc3cc1f20b7b95c9bdbf05c2db879e10141255877096fc57a534b84ddf6
MD5 929dcc011968f2b292e0cd9822324dce
SHA1 6b450d4ac7b2b34b38bc57ad4f209323c58b695d
SHA512 715faf4bf9ce95046b33ac641bddc307bdcf0ae8ebfef0c85c6b9347333161ccb5ce02499462c36024de63dc697be691485f7ae713aeabf3f34111f58bd572c6
TLSH
T117B0920169D2EF6ED0228840300A751A9ACB2A16CF1A26429AA836570B800A88951E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetClipboardResponse.cs

SHA256 1837269073a0f42a737ef92cbfcbca925154dae75d51068ad70b65cd1002cc7b
MD5 16c5f458144b13816de35690f19db479
SHA1 bc9c993cd5149fc555da354e548fad39cf06f330
SHA512 55021704f4ab5509cdbbeedde570a8e540f3ded048d2e31192a65510c3bb4f3317d472ba4ee6d6113939c489f6660ca4edbc57036f3da0fb01a08d890f67afd0
TLSH
T1C6C0800255D6DE5DC027C460744679156A8B1A41CF1A75469EF912574F84C5C4831D53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetConnections.cs

SHA256 2222e7c5d99836f39d4cf9bfd11dca25edfcd1454ada4afcec264eb705d676dd
MD5 d813c63c1757ca662f5a022cf5fb1034
SHA1 78bb1f04a8d96cba48390fcef90a6f3bc2254975
SHA512 4de83de0dd876436d104f1c83447a6f5afc6e51d0a9a27336bc5d238e3bd5f39f76d58be5fb6b5bc65d2b5ef5d84c4f5ce7334d841b2f0e12e78a504d4a3ac84
TLSH
T179B092016992EF68A0678440300A7519AA9B2E06CF16254296B9226B5B901A88822E57
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetConnectionsResponse.cs

SHA256 b67bbc913140d29d790d46878eac4aeb51abb9718e65d641075536a79db38bf9
MD5 62de2fba7710bd40e6195ec7b8365a05
SHA1 6e649ef260e026b1fb73bf7425cfb7f7910408f0
SHA512 3f4e199c6b8a96b00ef9508ff3c97a233609bd04a147015dd3730235c444df7b3ae431a1a00a7a41c7c7d8a5e2ad0ecf8a2e6c3725c149a26d3625dbcb3eda13
TLSH
T1D7F027034A669D5C083EE8606CD2FD21B3676AC08D3FD5C9DEEE62AA4D2CC9C1031863
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetCreateRegistryKeyResponse.cs

SHA256 4fb681283eab5c8df8ee7d8af37bddb79b182376c16a2e904d42ddd8ae5a819c
MD5 27fc1c7a9be28bd32e5457ff3cdcea7d
SHA1 ce76b6da0aa2ede1897d63797d67e85cac8ed125
SHA512 f36049f1edf489c196d579c3c7d25b52c6d838a11d7e25ae8fc748810771cdba4975265324ac4c138f068f90a4fa36580b7f47886300b0ce6c69a72cd182866f
TLSH
T146D0A7038A929E6C40398DB428417D05BA9F5E81CF296545DEAD536B4F40C9C8430D63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetCreateRegistryValueResponse.cs

SHA256 d766f97686c1ee6b8d8ecba89947af8d1a2f4227f41e4cb571aa1be5580d660a
MD5 257a92c3727d64275f7cef1e547af984
SHA1 5da3f4513ffc1109c62403ed0eef179ec117ac9f
SHA512 59b2f41b35ab555bfabafe0a10c3ce8740b0f590dc475ca455ceed12e96020ec2b32fb69e78d43407c1b025dbccc8edbc1ee33076701eaa734e0c1344e026dde
TLSH
T121E02B034AD28E6C003D98742841BE01B7DF5EC1CF29A509EEED03660E40C9C9430C23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDeleteRegistryKeyResponse.cs

SHA256 42add181eda817d7836b0f1ad89fbe37d324ce0f1ffdac4d6fe64fd666a22434
MD5 3b3ed326b68f8aefdf2c7678c92b8127
SHA1 6d9b64912805f6fe04c2b9d82f99b1679686bd67
SHA512 a1d9c3487c24219f07fd872a8987990eee2bfd9859ab7e0a924f3ab97189971e57028f9e51be120ed0e8ee1ec8de8cf9d4b54ddff6e4f180b7349c5c0a9da4c7
TLSH
T169D0A7038A929E6C40298DB468417D067A9B5E41CF25A545DEAD23674E40CAC8430D63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDeleteRegistryValueResponse.cs

SHA256 eb5b017ebadb0a4fa44e023ac4c3b566285527330e5694c5faac1608f1e9ea8f
MD5 4ddce8ab7f280ed4fe23035fd5a82e20
SHA1 16171ec52df070f55b97ef866e1801272d45efe7
SHA512 7ed23f5f302447616a0a10fc8b918acd6412a5a6d492bb47b54ff190543e5419529b90fa8fa62dbd861ee800e1650bad608b3d587a0cd920d2543306af8babf7
TLSH
T1EAD0A7034A928E6C4039986868417A06BB8F2A41CF25A545DEED13560E40CACD430D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDeletedFiles.cs

SHA256 78ad15d16ab4c1123220645a10d2a80f3bcf877ac2975f86fc213bd67f413a5b
MD5 e9ece9c0be2359713971fc849355123f
SHA1 6befcfee039cb0b3ed884611675902cd9388fbb7
SHA512 c923ce46a2aa366e888d7522c6c32b0c0a88480f8e3549ce08eb599845ee691d4191dda369e4cb8d04ae078c9abd2ca83dfcf93d63fa9c2645abafdae3e35917
TLSH
T17DB092026A92EF6CE16184853009755A9E8B2A06CE1665468AAC325B0B805A88850E63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDeletedFilesResponse.cs

SHA256 9f6a7c4a53f0d0a2384490bd669264442f164c73df81f730b46ed9cc1d950ed6
MD5 05e2556d25131e68bcfe222202252a37
SHA1 b8c00aa5210e8a453e5ab8de8d2aec440ef60778
SHA512 741050057a0a5e2e7e9df93166d27559b2bcce5486fa1d1b1d1ee5c6b4dc8d1a55f546a574a54c3f244e05da652083093eb0713b84e42a25d1c13e2c5c954625
TLSH
T18DF037035A568D5D043DE4B07C92BD1672675A808D3BE1DCDEEA22564D64C9D5421C62
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDesktop.cs

SHA256 ab7d36c0f5aea078a7290870c27db82ebc2c3be2127c27139c9757da5fcb6765
MD5 490f1b95e55a8dbfedd880b4ab2ccc19
SHA1 ddf3cb064c4aa8d419bf5c018b1a6e2329202d21
SHA512 10f468b84b540e6fea7dcfdeedffeb8a9462f63d9a35f2a46e88933bd6b32e7a21d6f6d6b0069785c0da1afb1737be1efee6657d25fe7a1a60cfe6f4fe3e4fe5
TLSH
T1ACE048038556D96D403C99B12C51FD01FB6B8EC1CDAEE0099ABA53BB5E68C9C5431C63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDesktopAudio.cs

SHA256 1db9a0c8c41ee9304678787e019b470c2290b8a30dc325a6a7c90d761d1dbc9f
MD5 87fd07a5d64b0f599d38cbba90647145
SHA1 7a0174caabbd674aa6fb719e5cfb4272d5ad0f2e
SHA512 950fd6434013f9017ee7316543d29e4df04199b6ab0ea045e187fbe5ce0ae41e803853bac630b385d5e6218a395d408f1c89b5e16bb3b5e114f606445f2cb0b5
TLSH
T179C08C038992DE6D9038C495BC05BA19BFCB1E42CE66640686F933671F84CAC8820D13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDesktopAudioResponse.cs

SHA256 35cc55916897ebe1b63195693d34aa596d700c257b684e7dfa144e1b116a6846
MD5 17ac73e3f0eed9c1608b066ee632604a
SHA1 11fa14d16050e5a7c6c568087e90321374f5435d
SHA512 7758a67af3c09edb3eabc1e504df36c5296f5f59fc668d9e162f7ead2434c351636fae32096ef2ea5b824765458c2769adda27e819fba0fe76f94ce4a9796a5a
TLSH
T15AE086038956CE6D403CDDF03C45BC05BA6B9EC1CF6EE40AAAB9137B4F54C9C5451A93
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDesktopResponse.cs

SHA256 d42d0f37a65218a39970050247c2dd5832274f05777dc422e5d9087df065cab9
MD5 eedd2bda162157d5bf5539a07f1b3bb0
SHA1 602b7131ac819afec3c3b47de7be36a534b191f5
SHA512 af54c438e6ac0be27e904137428a3dde11cce8385dc80dc73a21834190545a901cf071e658490fed1cd1c7d2b6d6cf75561551261468d8abab56fa8ebe759bbf
TLSH
T104F0F9034A66D96D403C9D712C52FD05B67BCAC0CD6ED10DAAFA537A8D68C8D1021563
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDirectory.cs

SHA256 a967379ced884660c77c097d946bdd958e9924c57c521a332bc6ff2363d17214
MD5 f46813725abab4654fbcce8879b2598b
SHA1 31faaab63d5ae6e8e0fe08f60612e53b4f0e7407
SHA512 fd48becf9ffb0debdd2ce751937d1009452635fea9a7a1809508fe1d79eff6e08e3b13612dac6d85b920d50f6a8adf2915e86bbab22f5fdfec3b9089d015e586
TLSH
T16DC080024D92DF5C403D865074047D155BCB5E86CF1565458BAD23571E50C5C8430F13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDirectoryResponse.cs

SHA256 dfd23e8b9a4f59a7ffbd43da6f8cd64b7b1b7d360853790a4c238f595d19dded
MD5 2f96f5b8c280470f1853f6cdbdac9232
SHA1 d1d723e8a9baa22b792bcfe9c6cdf36ad5e9a540
SHA512 3c1f64952f6f57c9791cb0439e2c3cc57968ace0d47c922b5850cc819bd7f835768f537eb98ee53f07c252ed9f59a9a11ae626b9ab53304297d88cab6d1e2b87
TLSH
T1EAF0E5034A56CDAC443ED4B07C52FD15677B9B858E3FD0489EEE135A9C28C9C4035963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDrives.cs

SHA256 48c9c9ff30fc7489465e5525c3ef17e7bd15a188eb7bd56e854195422bf73fc6
MD5 cff4e0497dd61a9d1d56f37ad90aa909
SHA1 7838acd8c665926b352b5b8cda3fa4069059b8c5
SHA512 4f8801f836a962c675e94b5deb7a5efed34319fcbc9944cc9fd3bb20dd32f6a7be554b674cc56b559a784e80456caf0bd9c606fbe609251e15b2df00fbf75d74
TLSH
T16BB092015992EF6DA0A18440300A751A9E8F2A06CE166642C6A8235B4B800AC8850E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetDrivesResponse.cs

SHA256 870c2f247a44071cf744903659447b039d24330607359a56e978f380449507ee
MD5 629cc43f16bdc3dea0d5da72a0c59a50
SHA1 dbd914b5152adf8e8fb130caa43d7befa03299db
SHA512 f3c3b3008df7990a2cdd8b696b5b6057f8a7e43dbb0dcad3b25427752f25b710a28a2dd7b66adcd5ff0cc3fcf49ee1251724c82e6574d9bab8a50e9d3d3164d9
TLSH
T1A1D0A70349529DAD4439E4A02C467E267B9B5A82CE2AA38DDFE923574D48CAC4930E33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetHVNCDesktop.cs

SHA256 821a0e8932933177a5ffe28cc0bafb2abf2a36a9a9285b4417a4adc33818da89
MD5 7a1aa76364a5200b8bb1bf618928af8e
SHA1 70ebfeea6fea14784c6379293c9d219fa3008183
SHA512 448d15944055c730f9abdd6e13a3d1814404feecfe1fe81f0f8ecb097c972f45ab2798b2f52257aed91173651914fa2ab81cdf27ee10b7a282a10b6674cf1cdf
TLSH
T150E065038666C96E503CA9B02C52FD01BA6B8AC18DAED00DA6EA93774E68C9C5431963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetMicrophone.cs

SHA256 731c93cc0d1b4e92b2142a387025b4842935b63f68940e65bd696d8a0dbd0f8b
MD5 4a599ae7954be12011a89d7bb2bf170d
SHA1 1d6be437b334c216b66a531bd97e5d4e9924ee77
SHA512 3309808cacc2193c69678e68c71c0419a4bc6e352a7017bb5ae0d3c0d2b2ad07c19241cb585fe4d9d5772cada25a41c1ab2a9bdb8fa782b6f9f4d682f4a0be20
TLSH
T1EAC080025962DE5C8025C95028057D1559CF5EC1CE556546566932770F80C5C8410E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetMicrophoneResponse.cs

SHA256 dbf590aad2cfa06d86a7032de2f46c8caca71d7e39a44d8f169b7feb3b35f0a5
MD5 b9323d52b87d5124bdc940ffda797ace
SHA1 21a4a5ae2653c93a4215f69f21adef408355d170
SHA512 26d387f7ebf5f515af7eafc426e65ddc3c2db92cfe94df77cb5f007bda4582a8d52cbee56896cf53e291170229f3ea527df6a56c23ad9a2c5689adf00fd400a3
TLSH
T128C080024D52DF6C8124C49034057D157ACF5E81CF199549566933770F80C5CC810E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetMonitors.cs

SHA256 0456ce22cef0a5d3efc49a74216388aa95cf931463c0c34bcdd270393d69f34f
MD5 b98616bd68f3768925de2b7cb15780e3
SHA1 fd45232e2197d24bbcf8248f14cf2a7da8dbda41
SHA512 fa6c6dfb187f6b614c49b525870a07b55fb275e2dd3d45395aa4767a173150d63b42cf914203653cafb2dc3c521870da8f708bbea2509085b5558555ce70a352
TLSH
T1E4B092515992EF69A061945034097619AACB2A46CE16254286A8235B0B810A88921E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetMonitorsResponse.cs

SHA256 c5ad12eda6ebeea2f0902837c083df5e233694282691dc7ba41679e29d86dc77
MD5 6df353679e6da38b46d2b68186b73ec1
SHA1 7a7d22e7e476b9459f55b631c30032614e53702a
SHA512 614a15bdc28a87104eb95a38e24492f0b2f57c31c6189ef6614721b78cbea9408d586405d342bdd7531659ce5edbc492b5df1e54438e2e1b3d5ecaf5bd271ce5
TLSH
T147C080024952DE5C4024ADB02405791979CB5B81CF566407467912770F42C5C5830D13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetProcesses.cs

SHA256 dbe3c26ef77a25aa6a7b637620db49d49fde215651d125cbaed5193f358faab9
MD5 e97cb102e904d952dc3062d44aa4fe23
SHA1 6fe8a24a96ed70185043f87a03b7c6d8bcaa88e4
SHA512 a251fb9f7d10401cd05ba6c83c90d56231cfffb5562138b87171559502e426dc75fb06a439d73ff917d0ff1934268161e2fa5039bd862dd1dfb86f5b9cb51423
TLSH
T1FBB092415992EF68A0A584403409792A9ECF2B0ACE26654286A8225B4B810A88891E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetProcessesResponse.cs

SHA256 f1d2e3799ef21ba0eda2044dafef58de66ae23be1e433a305e4481a97a979f6b
MD5 052fbada65ba21d94f374c6f98d18423
SHA1 26af3a3c286eae004951b7758da1e18f35f249ee
SHA512 050a30adc7aca76b70f4b5b5cf3d692afa80055a883c7dec74952fd4fe7a8f94438466615b91a96c4067c8138e9652af076895c559c93db777540aea602391f2
TLSH
T1E1D02B038526CD6C087DE9703C41BD16769B5B81CD3BD199CEE922778F00C6C8461C33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetRegistryKeysResponse.cs

SHA256 33b8e3c8b20a78dc7cc467a65872bcaaab158a9bc34e0eaa3f4989bd95e01da9
MD5 745d2a01181269b105f4f46b4c8bce73
SHA1 0838eea1760be193ae4d95f654b29c0f2f0c4e1b
SHA512 e65c8c30c37dfc355e6e62a67884bcd0e3297bd9af719e77b15a4d293a6ee00dbd1b39a3e75f72091ff37ad48c55b446e1edec307345f70029a3c6d1b0366c24
TLSH
T195D0A70389579D5D4439D4A06C857D15769F5A82CF266545AEED12678E00CDC4431C63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetRenameRegistryKeyResponse.cs

SHA256 ed3773783128af901239833dc7aa70449eabff3e17284e8e9a7d9ce4e813b39a
MD5 fd878943923fc0d084d7a9ab9f869f50
SHA1 fd61f9df9b5ccc1286bbac52b82ccc2d54492d0e
SHA512 7d1fa6df697f111a542b12eac2b6a441ce397aa2c1de7048eed362b2abad74513b6a164950482ccd092487c8de897026196a5ff5f5ce7158ea93227ce00d6440
TLSH
T1A7E0C2038A568E7D40299CF02891BD057A9B8E818F2AA548DEEC137B4E40C9C54318B3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetRenameRegistryValueResponse.cs

SHA256 7cd4e88bac2d23911c83ce5f6303f72f89b2bb9eb1e672e1bbe28bc46c4f2f97
MD5 e85fb4fd19e37064eb22317774fed937
SHA1 825c3c253ba4cc02c5e31f9004b0dded6d5be04c
SHA512 5422862a334f4ac00f307b3ff53c337b76c70374ff5a0d286866b25795def96493cc0f8afa2dec498e94eeb3179b840caecf39ec476d35c80f5e8b34b7ffcb0a
TLSH
T180E02B034A938DAD0039A8746C41BE05B79F2EC1CF3AA248DEED03660D40C9CB431C67
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetStartupItems.cs

SHA256 6e38b7cb0e72c7e9acc39678f654c20e4661c0b591862e8bf62e38aa5390f9d1
MD5 df16dfd7afbee6a558822e876db29390
SHA1 3bba8264c7b73854f1441ece3aa8cbdf1b928e3b
SHA512 3f63860fdf6637d56727c0ec9baccb7c9d98bde913a23bec9b691cb62bb2d8449ff0354092263fd2bfecffe724f730de40d88308697e53e2a38f3aa42686323f
TLSH
T152B092016992EF7DE06184403809BA699A8B2A0BCF1A358297A8235B0B800ACC820E1B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetStartupItemsResponse.cs

SHA256 51d4d3af91e8c5998afa226f899235369bb91607691e4018beebf2fe57130b5c
MD5 b1ffedd3a7b005c990262b8539d65157
SHA1 21dafd40ba64925d2d199698ea5d89b4241aa8a5
SHA512 0c3bf4aa2762f45c24bc7206fee169927a7ff363f3a3d7be8070ed701ec532014e25e0ad6a34795556d816743215040a995ffb3750b3ae7c806a9619aea2b6e3
TLSH
T147C0120245529F7D842598902C45BA25A69B1A46CF5675C59BA923570E44C9D8830E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetSystemInfo.cs

SHA256 fe41bf4f9ecfe7003e276cad29d71975659476202cf403c1dd3664571e7676b2
MD5 f3a46cff4092bd4f6e9533bbff1d82ef
SHA1 685ab679ee1775efc53a6346674b197fbfea2901
SHA512 7ff35fb6bbf74387ba164050d5a5204de04c79d5d2250f7b1829b7e51d7d7418871b314fd56a455a2045ae0ccef720e6c48fc93401921cd029fae1b98eaf8ea1
TLSH
T109B092126A92EF6CE02584403409B51A9A8B2B06CF16A54287A822575B811AC8960E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetSystemInfoResponse.cs

SHA256 8e63f03c463d3bf4afd54c9a2e8302af60d8773529db62315be3d8c2e4d33d73
MD5 04c04d9574541fc354a8c95d7b14db9f
SHA1 be1be2c4494de80c339dfce51125843ef2902a76
SHA512 28c9997868fbfe5a9c0d7707f693ffbf65a5019aa943b0f9004a1e6ce4b00e9b6d43cc0d04494451eb1bca603febd955b96c65bf46492402e7d61ceba96ea205
TLSH
T171C0C0030A43CF1C803CC4903C44BD16668B5A01CF13E0818BED22574F00CAC4C30E03
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetWebcam.cs

SHA256 4b727be38160b79d8fefd8b51c65d59633d39652bbfa018a5e30cff2d0d9bb4b
MD5 366d5b67c1d1357c33aaae38aa9678f3
SHA1 0e9780f0983c59b7e868c8ae7325333e4bed2662
SHA512 01e7a3b70043ff7bd5afdcd67ce608438003153fb95bc71e4210207a77774a1271ac0e1bf6580d48b658e796129c6da3a4c73e812076427c1ca654faeaafe6a3
TLSH
T13CD013138A52DE5F8039C95034057955A55FDAC2CD5E740D57E913774F54CDC4461D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/GetWebcamResponse.cs

SHA256 d5a658b55f89a1cf31be42359b57485c16712e5f54fa14588af1d514a4e9b814
MD5 0932319478c38f48cd112df904df9102
SHA1 2483888aedbd04e246ea3dfc8db3f78beae6ac9d
SHA512 0578b472dec725a42938c1cd9a5437251a6b322cbf779849b55adecf0645fe07665eb62dd3031180b7c9359a9056ed91e80731003657b06bf48052a03c506af9
TLSH
T1F1D023138D52DEEE8038CCA03C057C15F99F8E82CF19E40E8AA913674F40C9C4410D33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/IMessage.cs

SHA256 393bc8084b31c537d144dfa2259ccfc1a0eb7f5ec3755faeab3fc9a81fecca71
MD5 046f26fcf893da6c7e4280288330349a
SHA1 f8e182b40cd9d112fb619108fb54724ff98015e2
SHA512 deec1d8e40aea8e473bb934884aeb3241e6b94700a661bbf6d7a70fb00f0c134fc6e9f153d6c20badc0988ef4e8bd02e4db28d11c1fdd9e73cda45cd8214ffd4
TLSH
T1F0A022200EA0CE2C00080A20300BF8208CCB008FC2022082CEBC20832F838C80000B23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/IMessageProcessor.cs

SHA256 60b4d988304eb04ee4acd606dc83731bc275f8f6f7d316d34da4104fdda276f2
MD5 e37cdc5291d4a4b173019effa2e242dd
SHA1 c499172eb6352b3f6b38bb9ee10d297678a91e30
SHA512 c14c39cbd1c17cd33e190854ded664523b56ba8e8e9f646ea2dc71a45f0a971efc587cf6d3617160f2d6dc1909c2747a73cb4ddab71b29b80289197cf33cd499
TLSH
T1DCD0A7440CB2EDDC60554E117C2A7E822DDF1B054B0F7DA9D59C90434B8558C0088795
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/MessageHandler.cs

SHA256 6b8abb97c1eaed469ffa93f6748d5d7da79e11ae152d21d1166e96fbdf029a5c
MD5 fc2d041baf99123f92ce7cff0a8d9818
SHA1 3ca61b8c061b77c80ea54412242f7658b4f7b179
SHA512 f61cdbbc315bdd113268ef2e691a7e4eee5d10b75afee9c774faf66bd7f3e75c2deae5027e8416d76984812c273ba4c2fd3ed2e4e886f21ba71690c261813fd7
TLSH
T1FC31CC14BE6CDF5808EF670CF424F8C70BAE1E79272D58B8B09DA247DF4958002BC91A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/MessageProcessorBase.cs

SHA256 e329bc3460f445aa68399311781b63412819551bb3b75685086067117142c870
MD5 77903730a52eb70c8b213f468373f329
SHA1 98dddd29c4263d87447c3846d73c8fc13c0cce0f
SHA512 ed37296921b3380ec62fdcf66e1c87d9a6237351836acbdefc87caa3f8b4809cc7e4c55ee9609277336a69c84bacdf7b31adfb6860259ea991ee1af758b8f460
TLSH
T104E0D8440EB2DDAD116509017C0E7D877DCB1E014B5E79B6E68DD3437F082CD0198722
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/NetHello.cs

SHA256 9168bd3834c217b930f1c5185185c084fb8a31e46d651a3071c477903c6b4309
MD5 ee58f5f0126cb47c771083b3086b60a3
SHA1 0925f62324da72e4dc43e542748adec2cacca608
SHA512 85cdb8438487c25b1eb8c438719682b4baa1801b28b6b0051116fa27a098ad5df4e9299a93f27d6bab183f270c7fd0b5c592b3c748d05f9e1fd3a4e7ada9bdf2
TLSH
T1431125078629896D443DA9B07CE2FE11B7778AC0CE39E25DEEFA035A8D58C8C54355A3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/NetHelloAck.cs

SHA256 3613f06fe1b201badfdda703c40b7232b9b2d3c7423d585f0dc5a8b8fbeceb72
MD5 bd7f4b20ffe555cc0707326ce3d3f1de
SHA1 4c21ed1f53c2722d3de17fb326a5fe8fc6c5d454
SHA512 390066c24ca5fe7b8a1e734e83e14454fc0f8749542b96d2a59845a13cb36baf38eed6b3ac36d792427b29fc49258be02a9073b2f6d04cc94dc8f89f3d662091
TLSH
T178C08C034596EE6C803C85517804BA19BF8B2E82CF2E3089CAAD62972E80CA89810D23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/Ping.cs

SHA256 78978a9b551cc7f95c552f552c41aeae2b1d8f366b44d8bbdb356375e3a9cddd
MD5 91aeb3e6dc4fe7fecf83cd889975c4ef
SHA1 2b3038b02b825aeac85b90601ef4d7cfeda64b14
SHA512 345afbc23b6acfe1b4ad590fca692ff909e08e601b7ccb15d36efa2e6acb0015a9fb393276d2320ced6222795bf703373adb68d470c0163b19f730d46d19b812
TLSH
T1EEB0920119D2AF6C80318440300975199A8B2A26CF16254286A836471B800A88920E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/Pong.cs

SHA256 331e13c1533a9eb994443a4117d8650e8949098bf5cf32ad57f03ae8dec17245
MD5 a6431f87e7257197898a9d5152a13bec
SHA1 364f0688b1ba7c59c7caf795c9bbf17a16550ae8
SHA512 6a0c10e75e7a35945e5ad519d390860aecf42b1a86140c4fab46223b4084fae81b2f22888617e56db8482fbcfed12542abf202edd2ca820aab9af6cf37ac78b7
TLSH
T1A6B0920119D2AF6C80318440300A751A9A8B2A56CF16264286A936571B801A98811E13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ReverseProxyData.cs

SHA256 6f3bfc2cb36ec7f02a311d137e7c997ea9a0f8bc7aefa6868d0f90427e6cbf88
MD5 28e5dc84f991d9104fd2e6d7c9f4b563
SHA1 1f7c3734725e28f6236182cde0af31ded5356e13
SHA512 fcadf1043375e9566f16e86d0e66095817ad316c07142a8337e2d3fbe01533913eecdfe1e19c5f3343a2378bf72ba3028e621e12c669d542030048f133dbe145
TLSH
T1B8D0A7030552DF6D403984A12402F80566B75E82CEAAA00A8AA922668E14CEC9411B63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ReverseProxyStart.cs

SHA256 189f79749a455377a84462d5349e2430ed20eeb14fed1c55a996ca019211e627
MD5 3b95767a7039b468190d45ee171630b0
SHA1 b2bc24f51a9ffac3ac2a4cb748f3e4bf7c4eebd9
SHA512 f887fbcf028ece47490647ad9bc480921a814f5f8fc3480b76099f54776bffe491c5dcc109d397bba07bd562388dacb62f5a042c99e6623c043d3da57bd35afd
TLSH
T102D05B0345969E9D403D8DA02851F91667B75EC1CE6AA009DEFE22769E14C9C5431963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ReverseProxyStop.cs

SHA256 b5153a7cc4af31dcf74248417050b4b9a2901d2d055f7b477d606db3f7ec4d74
MD5 1acaf92a0e4d49fd00359fd40488a384
SHA1 ff79ee9af118852706a32d12c2a496a8a0d0946e
SHA512 5ef853554a655badde1c00fcac7cc835fe14b7fe3f42a9840b0f52e66635fac4e274af443217880449a59c620b4e2cb27981c58f0ec8bc1b33a0f333eed38af3
TLSH
T143C0C0030042DF6C4039C5803001740156BB1E41CF83500286FD31734F00CEC8420F13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/ReverseProxyTunnelReady.cs

SHA256 ca97d5f619c5bad6b3ee3f512b384aeed3f98eff8b67e5d55c067fb1d7737f34
MD5 04ba63a2a1853ff2042dccd9ca84e6c9
SHA1 2b04e92ce4406a08fb7980d5e90c01bece97cd03
SHA512 5a0b639919b32dc1dab31349ae31209d15278f4657f8e0a01903459df3320ccfa604598ac9574d8decb50cb98258894116362d8c15f431b4890310625ad05366
TLSH
T1FCD0A7430553AE5C407D8DA03456B90167B79E85CE565406CAFD22779F24CAC8421963
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/SetClipboard.cs

SHA256 3f8758745fbbc3819cf5a52bdd92e3ae2d3422e735840602fc5f53765a27da1c
MD5 260d6390006d8f067ceb1850db54364e
SHA1 5f0091b058288ca2063ca25537e2573c8c13d7a1
SHA512 04b9b7b58c9f23f87ac4a18c231f739d295e00f14f45ad6e2b2e429f58cd8809ea4891e2fbdcabd05a2eb729801019787b8717d2db4a4fae18502788927b9b94
TLSH
T171C0800215D69E5DC027C4503445751656C71A43CF2635458AF921574F80D5C8471D53
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/SetStatus.cs

SHA256 8b4ee26136c8b462dc870db30cc50835606f34c1c32ec5ec5b366e1eedb98df8
MD5 e7a2d1f3dcddb23290a4c8cbd0871484
SHA1 f3972efd68ca3279640e62f435eae1beaad740f7
SHA512 6ddef23c67e3c6353fb34432a82692acb9f91d6624d1ec16e86600b0756c525042bd8b684a2e14d8379e33570f6315c44bc14a9cb6c6fdaa190dc082a56b9d01
TLSH
T1B3C08C0245A29E6C902A84503C05BA15AE8B1E43CF2A7146CAAC229B9F40CEC8830E23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/SetStatusFileManager.cs

SHA256 393ee84ce518ff03edf3a6a29a210dc732819b39585bee65125df8b9081127d5
MD5 e6d66b67f3baa71d1c07281fa4ba8b90
SHA1 9954289a52e912a5fb7003ac31c2669b12a4543a
SHA512 efcbb40e81529e01d9f6faa3c28e9eb9c28af4e7a43e745ec429812b2bf286ed4df8da787eebfcdf5ccca20222a579c227b0b9189be1d153b4c66301ee26fcee
TLSH
T101D0A70345A6DE5D803984A13C00BD157F8B5E83CF2A7009CE9913A76F14D9C9520E63
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/SetUserStatus.cs

SHA256 c6df0827a4afcd6909dc29e4f3f29fb9827899b0f34ef0295db313c16e06ba88
MD5 a2fc5007f9365effdbd020fdecd595de
SHA1 f86e37b430b811d4c52f0fbb758f4e06bd529624
SHA512 faf2d4cba5f4069498a135fc81301e1e0d4f186c674ef12bce93e83460d16356524a793bf13ef97147c11aab6cf05776fb4b39296101a77696981bd87c2b1bdf
TLSH
T11EC080424556FF6C803485513805B5156EC71E86CF276045D7E823574F40C98C410D5F
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealAppsResult.cs

SHA256 738986ca88a8520bee9cb2e1ceb8bb23920c9685c379c427579ca3b211bf779f
MD5 e7ce3fd1270f1049617c4a88f51e3314
SHA1 23a177bcfa74eacef5881185d0daad3f806bb738
SHA512 0747c05dacaed3bf710efc5f9fd6c752d1f3f5ece283a45fdc31a6e4eda629d927e4c3fbe09709b6352f0852738b865361db336f1ac27655fabd9b34d9ac058a
TLSH
T12DD0A7034596DF6C402884603441F8056A575A82CD2AA0098AAE12960E04C68A411A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealAutofillEntry.cs

SHA256 fa1bdc06d295f47f87573c6c2a7a08109ed973f7092afa6538d1c823b8f0fd2c
MD5 2f4f70a3dbf368566bb63b632cbeb29f
SHA1 4be4cc4e1d8359a14c9f567f6655dc47b843175b
SHA512 76574ed0bb0d48cff1ffa316a55ba5ea930688d307e912d0dbc51cf0ce96e806718bacc8cdb68ef027115d1c30bdab220e532741f9aba7216850e0d047b276bd
TLSH
T171D05B03825E5F6C4419A4604CD17A26BF5B8A82CF3E915CFDEE12570D50C4C80F5497
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealAutofillResult.cs

SHA256 3129a4eb9a0bb84ea818dc96cc91d0a50932c02ace7f06826b04fafd3dd7e0c3
MD5 48560fe92892745576292a6c65c5360d
SHA1 f10dc2dced6c4fe9f15478d2da20972d15ac3fe2
SHA512 7cdaddd1b6d08629f04490f3fca2bebc9cc838ddc484ae7101f6b39d0254450f4160bb1e68e334519b27daaeec16ffff280536eef725e858a8b5a4a70e9dae12
TLSH
T1AAD0951103D3EF5C60B5EC41A4047557CB5B17178F2100294DBC13165D03CC48071D0B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealCookieFile.cs

SHA256 80628da68cb1eb1514b3db448a2deb9eb4636fac1aa887f03a4479af8f671fc0
MD5 3ce8571f9f6c495513dbba328e059ab5
SHA1 6a794b1d74cb28b8b047bf3a9f7f6e55fa2f8ca9
SHA512 84cf08e5bed31215a5062cf976e6a8e23ecc420067b6019e0b8f7c4a4a856f6b217075bdd672fe1ba21e4d2a64993603c76ff0cc2fed18061bf09dd1cebca2c1
TLSH
T137D0A703815A4E6C8015C46008967A22AE4B9B46CB2A9045ADF912571D80C4C84F08D3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealCookiesResult.cs

SHA256 ac9209aefd90cc9a57fdc2176d311a27a5b2dd6c5b8cc0c42f9f0ed6413bebcb
MD5 fefee13da933c89eb0820dfaba33a7be
SHA1 442bab7cf3385b9395deefcab554f1474fc9c9e5
SHA512 08fc6fe9b1c24aece77dbac87c7875e2b5df8cf8fecb4f1beee8c8db38e17767ea3d11794539e13b4e6b810bf4a8502b4ec39271402b5306a70008a988a87dc5
TLSH
T1A9D097023063AF6C40B1D493780A7E3A8BDB5B228E6390040AAE52730E81C848CB0C97
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealCreditCardEntry.cs

SHA256 4fe502ba0306e2715250b7a1d27f02f20296412a7c57416c4ce904316094f2aa
MD5 8055e8570762bc0e08053d6a64ab1f07
SHA1 0c9cade6da50c2556926cea7fa71a4b9d4c25db7
SHA512 2fc222c836c9baa05bac54a1ca572fa191febfaf48b0ef378e1f74dbc1b3dea5bf2b760d57f0952e6034ebfcf5d43b9d44d34470a8af8b6bb613b287d418c37b
TLSH
T113E0D803C26E5E6C003DA8704CE17D26B6678BC1CA3EE40DBDEE027B0D55C8C50B5493
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealCreditCardsResult.cs

SHA256 1adb1590a0b8c0229fa785dbe6353b1e012dcc2481d8edfed9cb6ce3e9a5735a
MD5 b568b1cbaa2d7f777ed81b63e87b8826
SHA1 2ee8d07d1888e47364aae1ef66574931946f9a0f
SHA512 86af1ad8c806cef34c12c5f81e1850654c0d1f9304969ceb400ff350a30c6f2e83bb144f4f6ed3c09e064771633644ec2d21790e9b29b159e6bd18694a778155
TLSH
T12CD02EC282D2AF78463D8409E402BD266BBB1B928F320C048DAC12660A03CC48820D86
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealDiscordResult.cs

SHA256 a14d3561ea4cf8d76beddfce082f549ed3b5b8abdd3713c2bacb109901d94c9c
MD5 40afeaaa8ca5796a11170d3cd8792ed8
SHA1 7147282738438b8a93b40996b59d6460f28ca707
SHA512 d4080bebd22a4da4bd88b06a037cfaded0758ef08077f84bad1a053f9c81d2004d9bc128907596aa9de098b72384a253157a820dbfad5da837362c3405d9214b
TLSH
T117D0970399178F6C40F2A905AAC0B8961B9B5B128F2F32010A6C328E0E01C8C8032C07
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealDiscordToken.cs

SHA256 540e501889ee58108d833be82b3f52efa80d40c3053ba382f1245d44ab62bb44
MD5 50eeef342171741e1a0eba900551a963
SHA1 cef2b18d59e5e5d98233d1acd79712daaf80703b
SHA512 4a423c1f01d9467d73a2c799ca009d62ecb83df8562ac63cae88477a3af80147982c99f8fa17e7d7c14f3dd62a7f3589aed0d2438f515cac3e68ddfba91c3289
TLSH
T111F03103C21E8A5C043DA4705CE1B9217F679AC18A2EE059BDEE429A0D58C4C50B65D3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealExtensionsResult.cs

SHA256 a8b0f299355ca82f19c54bfe92cf33f492a09dab35ba61694401aaaa6bcae117
MD5 da9fca778c1bd2246bd525cce4aed296
SHA1 7c3fe12304434e85dc563a4e341ab03bab9cc737
SHA512 8c2cb92164528eefaf73123b250348782e615d11ea5bb4cd3357ca356aef4ad10b16cf365c5faf9fee57e9e6d78ab1a47a0f227550cb52925d664976451ef2ce
TLSH
T14FD0230345E6DF6C403CC460B881FC05BA675B82CD2DB009CFFF12974E14C6C9410A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealGamesResult.cs

SHA256 5dac7cd1e5515710c9ac0bec6a5802b9010fdb6540760b256349c42c806475eb
MD5 57427d1e44a71477677161690f1de2cc
SHA1 c43c3717e52d4b6643ada017a792c8eaad1d1ad8
SHA512 ef0018e6141eb0bd59f483e8dc9bbc569b8f746a727b52c28d843e6908ad2cfbd7598a2476b2e95dc3788c6a0221415857437793bee80bf3ace1f474150256d8
TLSH
T12ED0230385A6DF6C4078C5603841F90A7A575BC2CD2DB009DFFF52970E04C6C9421F23
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealHistoryFile.cs

SHA256 66fb116f355cbaffc88358330eaced3a3824250c4b4706a1d256c39cf4f83dd8
MD5 abee08c476ae01649a90642533d67471
SHA1 4785cee6a7f7249a5b0ca4838bc295f342d78364
SHA512 0e1f50ea648848976acce62f21e22b6eb4236327e66eba7152a3cb9b0cb4e50c0c7661352f9ede74315bad1102f73b9e25e89dba3ddc324a183eb6e093b8a31b
TLSH
T17AD0A707815A4E6880259460489579127F4B9A46CF2A6149ADF9125B1D80C4CC4F08D3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealHistoryResult.cs

SHA256 db82aee9a4a56d624594921781349bfef34d3b5c2e3840308e4f61e710aa7f44
MD5 54bbffd59a10c79d6d3aed1640f4c004
SHA1 b36329978eacfd63d901cea4745e43cdd77409cc
SHA512 f039dfad35957c9ed020381ab59b84aa97c09c4c8ff79999fa1868a5d96b648c34ceebd4082ae58e3f46a94918aec237c5c10cb4bbc7fccdcd28e5c8a289ba5a
TLSH
T11AD097071053DF7C40B1B491BD08786B2F5B5B228E26210A0CFC520B0E62C88C670C87
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealMessengersResult.cs

SHA256 83fb6416c3478d8f44a1dffd6c4aef630a094c2e02251cce7492fe67df6ed827
MD5 b1c9632ad9658821587a575fbe7e2f12
SHA1 448c9cf4472a5ad3ab2d409616fd30974d0bb979
SHA512 a0d7032fdeaa1d27cdeb5893bb705afa1440816648a4b0ecadb0cd34a37ba220898c39f80e1c21ffedeb8b8a08e738b8f0a26e41071422c09fca4a9361ad3e72
TLSH
T19FD0A7074596DF6C402885A03881B8056A675B82CD2DB009DAAE52970E04C6C9410A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealOtherResult.cs

SHA256 890ad4faa13541e0500c0be5fb2c8776e0b264195d0787ae73eecb6da5f42cf3
MD5 529ea113895734f2488623dbd2509ead
SHA1 76cf439459db9122185437278b59be60810de92d
SHA512 c8b8963ce2e4b3b7552c36a839cbfbbae87104f1ba576ecbb0aae83a6ea946a5e4ebd6b448a3842d752c2ca6ed6f710c176c1ade4b0cd9193484c6edd612d6d1
TLSH
T145D02303C5A6DF6C4038C4607845F80579675B83CD2DB009CFFE12570E04C6C9410A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealRobloxResult.cs

SHA256 3a5113dcc75c8a76e0c4790fad997555ab01e2d093a5b3dd508e3742a14b7335
MD5 1bebc8ef13812ec4f003434efa7e8d92
SHA1 81da64e896f6bb2da1ccad606f8ad42062451a45
SHA512 27dd15baa4fe6e52310de612b14dee1cbca23ac1756e1b674771be704221a160fa0ce00a87af93ce788fffcba1bd82aa780a833b3a5deb7a7d5caeedd651f680
TLSH
T18DD097A290178F6C4076C4416880B8960BDB6B929F3F060D88AC328A4E02C988832C87
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealRobloxToken.cs

SHA256 f85e9da45aedd658a103684c979adf81e283bcdeb4ee28d52e63a5517ec7475a
MD5 39295e188a705aaf83ac1f1760caff55
SHA1 4fcaff1d2c0a293aed0ea33dfcff7220b1d515a3
SHA512 e3c74f0ef3680f6f9e1ae9147562ad3c146330d4aa49d6648b897ff6f4711a58f53b2a98dcd27ee511f959277f94a0728c6dc88dc1af9bceb89942c63bbde2e7
TLSH
T15AD0C203825E1E5C4429A4A008D17A256E5B9A818B3E914CBDED115B0D50C4C84F94D3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealSystemResult.cs

SHA256 69d1ec41072114445bd18a03c64e6bd9653e7e028f352be79ce094a6e5d42d51
MD5 4df0bfb4a7f74e96b754c36fed980d54
SHA1 023e7f9950b1d6300bb1822c31bf9bfacb3fff3c
SHA512 ece95dfe3b809f8278571469c9eceeba0026671c15ba3618eca953146b5599a1abe9fc28b5a29b6aeb4f102e37f2f2462629521a9511c7cd9fed7d1370576f3e
TLSH
T141E0CD03C25A9EAC002595B16C92BE26BE5B5D858F3D61447EDD06574E14C4C80B5453
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealVpnResult.cs

SHA256 b63f28657729ca4af4541d65e127548ffff526ac8e1fb2d1e86ce9b8721deb9c
MD5 1280e42244f346357ac0de19f1988acf
SHA1 0db5ad62df24e7c8b811d27fcf418058e56c6397
SHA512 9aa597bd9f22fc5bd1086af0a19c50ca0c0eead67cbe6aa1e838d6d7250f2f9dc993e88cc05d31be0185b423291745cdd1b27356a13fdcbff8b6f923f1e17db5
TLSH
T1E4D0A7034597DF6C402885603845B90569A75B82CD29A0098AAB12560E04C689410A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealWalletsResult.cs

SHA256 6db7965b0887ce831d52fb93a84efddd1c31e3771adb93ecd19b3f2c5dacfda1
MD5 41539c80620973d893143e39c98667bc
SHA1 7618413a8b75a3cffc423dd4a8244dd3b57b7fec
SHA512 c7f2b1d4910c54deb40e3690234528c6b5db999ada6dd5888c580b5f18ebcaf170c5a393313b26fe3b1cb7e8190ff679b3f967d78a951d4f61080f933c3b3f7f
TLSH
T1E6D0A70345A6EF6C402885603841B815A9675A82CD29A0499AAF12960E04CB89420A13
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealWifiEntry.cs

SHA256 556c76c3d1586884d41c684c5b38898a62abdf86d0a03fc8eb0a63acecae8763
MD5 11461ace7988d9cc103d04ba66ff5a01
SHA1 1e1e3da011f859ae257a7ac3592488cef5530263
SHA512 1a1ae04c824e95628cf8862c654465f63ee8795dfa4101f614cfebedfb53ea6a045d0a31ae91fd3e4cf418131c7ecec2cf24ff348c2a5fb224a7040975e6cf11
TLSH
T1E7E08603C25E1E9C442AA8A48DD17A25BB6B8BC18E3EE158BDEE125B0D54C5CC0F54E3
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/StealWifiResult.cs

SHA256 fef590ffac9c0be2fb329e466195d9ea130c6014ed361442413144be90df154a
MD5 8230f8d7e979c9f4759c1037240dcea3
SHA1 ff31fb06f2a44e34c953e8bb00a6ae4c726117e3
SHA512 f9053eb2e8ea7bf28495a8cc9b25d7736a698f65163495237769f84952951d1d2a73b5e4fca0cba2f4adb29aea9c145f746197d0b8d6931fa4ecf32c095954b0
TLSH
T148D02B010992AF5840364881A9047916C65B17638D128013CDDC22264B01C54C0A0D2A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Messages/TypeRegistry.cs

SHA256 111d434c8ba10295619979aba6d2e74dba62f455c7f6003b4fe6863cac826b9e
MD5 db781aba40ff2443f55e461a5b13582e
SHA1 a26435420055c4eb2a695264681c974411007564
SHA512 cc6f4521ed259b4a606e1b7f8e8108b1ba4a569efc7de1519174f03100ff52941f34265a23c1f42fafd693fe4404b7babcf85260e829b8026cd1c6eadc031d77
TLSH
T18241ACB5BB28E71E04981ADCFD31F98143356A371A6DDDB1F4AC1250C81AD5A8278F2E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Models/AcctRow.cs

SHA256 df5cd59c5a108300d1b3ba2ad8e665df46f3a35dc514c903eb5f9b10b28d7907
MD5 c283ac333c8e24fe3c569b7291dddcca
SHA1 efbd529b7c94d64c924bcfa083dabda7d2db86b8
SHA512 13b8d771bb39be9f2a082403ce336da73b84ceff8ab04475d224f456cc63e5704cba58bb78f4398aa45709b21644171e023a5b692555960e94fa7e4c7a01d75a
TLSH
T162E0CD0342135AAC443D95B08892FE1277EB9EC1CF3E514CDEE512558E54C5C4533453
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Networking/ISender.cs

SHA256 d91bdc4bf9046d8a4d5d5cfcec507a8c72bfb29bd6379283307955112e304768
MD5 ec11cfb986bbd51bca4aed71b80260ce
SHA1 8d5455467c5b6379526cf7f9676a8ac6475c0a04
SHA512 cd61d8f6481f568eda81a116d9f68512779e0d7befabb0d3b0e9f39f7fec0de72dfa0f5fe271ba86d5f0f343d78bd0c1f31a6913a0dbb4edf6902811d6ee7d0a
TLSH
T170C0C0500D43AD3820448A1C30077C122AC3240F0B53148AC45F00670FC24CC4045733
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Networking/PayloadReader.cs

SHA256 69e0d867e77e492dbf35b138bc526026c5af23d9eda20e2eb33488bf15047c1a
MD5 ce3b28ccfe2b12ab24fcff0f2ad27694
SHA1 5ac850ba103e482bbde0e6611581b8d154ecb8e7
SHA512 57101551b897db37791616b3d951b3f19e844e25f609edd14abdefc0dc43406a0f43ec31bb040d775566766e882efdad8dbfacd9432512079378ebdf0c8ab581
TLSH
T1D811D0005FD1CEFB4AA144B45817EF225A622C270D5DCC61D45EC358ED9048D9078F1C
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Kryvexol.Common.Networking/PayloadWriter.cs

SHA256 0390d892d3ddbd3779b86bdc9edba4cf5858136856bab9744849f4547cd68f9b
MD5 0e8eacbe684d5baa6e3f444220dae429
SHA1 910ced729d42e3a4db0d4dac8540b5af043c9ae6
SHA512 edfde096a42cd6e4314a617f6f923f0411fab42b36ddb7c24d0bddb0b5a2984b3c1f033c776dc39c213fa13503ff5742554ad1030f235700009f294fdfef53c2
TLSH
T18411FC109F60CD7F44A450381C27EB456AAA58335C4C4CF6F81E8BA8DAA4C9D40BCF3D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/Properties/AssemblyInfo.cs

SHA256 635a72b62fe033233c13fb2b70e5dc4c09ca7c9ab3e3b5b9008ec6c9a82eb32d
MD5 fa12d62dd169062f4880662a456ff258
SHA1 f738190707998533a8f348d3f489d123fb49d319
SHA512 715c6256c2db8998a0474dd7075e0d6a5d974fb9492a20c52e55b8b5555b73dd0540488cd70ee2d4066a1e3e1425b213f9c9fd299cd99b4ed86921b6417b5e4c
TLSH
T1AAE065206341A36D9F128553BEA7B588037E373850D80C4C65ED2C13F64AE742322576
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Core/stage5_pkg.Nexus.IO.Core_decrypted.csproj

SHA256 46645b5b59782fc16c15e0f704322a5a343c07b06c34eccd1ff18fb6309c4d07
MD5 3db2218a87ea8f908bf52435048560d5
SHA1 9aff28063fedf24666140d6503e5b7d06c728938
SHA512 1b5270d74e01b46a1db353a86ecbaee82c67929db914d8290d52f7f9dccf81864635c9c493b74c63ac6f5cf3cac71bd247f9c06cbfca73ad5695c77d9fe3fcab
TLSH
T16FF08104DDA897B7877422309543EC188BB843E705F00548B3C5E78BD381D54140777B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Kryvexol.PluginSDK/IPlugin.cs

SHA256 9b279635d972a8ea7ee6c48b1a12520bc7ccaaed699321a277fd0589472090e9
MD5 ec05bca0377af2facca3e7c392fe7400
SHA1 e9ca66089910463fca13044642bc2f34c70b12cb
SHA512 0779a90273bde46cc2c519c6907897f59de39a7380ea39acbbf6abcb112eeb347624185234d611bef9e0dd3b1e0e437bb8a7c6909ec019c027a1ec4053607ba0
TLSH
T160E022152961DC28A1348A22786BBD413FB93B062B2BD4B9CEFE101BCE8448542B4BA5
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Kryvexol.PluginSDK/IPluginContext.cs

SHA256 a7be1bac7fc6ac01ee1f2cb97b6be9be18d963b10533698520ba5c834db644ed
MD5 a561a8355e74272ab7cc2405acbed2d3
SHA1 961893e0a1af1039ac57102001908733031a5192
SHA512 2002d2664039f3d8fe4b7e50d6fd9f46c746e56eb11ec598bf17aa42fc8979e8b30b6c9c93bbb09bb6ab1117c7cc8d1f9b15a0f447c72afb545a2eb413381c69
TLSH
T10EE07D223551E624107086259443FC0613B639CB1B3FC479D9FD0049CC9AC495174B61
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Kryvexol.PluginSDK/PluginAttribute.cs

SHA256 ddab8b36afa1815ab3517b7787e686964272fa3d4f2f213d73a43be9fc017b3a
MD5 0afcd9c6f04462a8eb2a8377a9db1645
SHA1 8ece3f179dfa3747fe7c8830ce185f64fe72db47
SHA512 ad7a50a7ec3118ac80c16a7d04d67c847810b4392838ecf945eddbb7e99772b3059b6ed214e7f5582fadc559359db708dec664401de9811ca915c255e5c2bc64
TLSH
T1A8E0653A0A02D2370CAE0552DC52ED95737623162A2ED5A4DEFFC202AC4899D8B72497
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Kryvexol.PluginSDK/PluginBase.cs

SHA256 4967304793b06e45907b9f2324e2a01c2d9e8ad8545ebb683b48b4aa10029ea1
MD5 bc4c72750eb3494771c6230e9d19c168
SHA1 937a0687251d1116c5153c3771ea1777b8868d26
SHA512 a68047025e379d5b823ba6a798cca1b42d1fa8d24730cf99aaf5cdeba8dee287becc4a57d55a48a7bf7e9407852ebc373b0ee3edb50597b9f4637b7a6551b192
TLSH
T1B2F0F92D1BA3CC65A2A8481B681FBD427F762E450E1DD4B1DAFF42076DC489D00F0666
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Kryvexol.PluginSDK/PluginHost.cs

SHA256 7edce342a052cccfdbb687bcde7ace776863e46e45965ffa577111ff87cdedf7
MD5 30a96a6a476bc29cc64bb461db608418
SHA1 603ece1109f83cd1771785e032e36b15abc8c9ca
SHA512 154505d14a8861c69eaa598c6948a8b6c5b098e703557bbcbf5c4f27db7cb30098d72c59a7d896d3436699a16eac33c882854f42dd84168422e4179c30d34ddc
TLSH
T17CE08015BFC5D0EA5565840188664CD5B1AE21771D7CC5F2E0BE0704EC5540D01BAE5B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/Properties/AssemblyInfo.cs

SHA256 f0625107071123fd6377edfe97e2c7e1a01c976da3ce96de51013bf53bdb337f
MD5 ba28b08ffa968be4bdf89d504d1c0b1c
SHA1 763ef6f87c485700e4b481d17535b5f5f6bf3dee
SHA512 aa1985d2a576a6ecbb9bcf2d18c404585935d5b84f8b2566b5e9310e086ea2daffa8286ace5992dd7b281d77fc5a88030e4999a32f0cea6175664d8aef9201e2
TLSH
T1BEE0E5646341A76D9F128543BFE7758803BE333851C85D4C24ED2C13F58AE781326676
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/Ext/stage5_pkg.Nexus.IO.Ext_decrypted.csproj

SHA256 c6aa3101fc93fe45dbb0d37a80cc8da018150523cdad76b1e08b10139b40195f
MD5 d3e5e29f340201b953b9718190124a77
SHA1 2746ab8a61e4ed748d932172d355ede9fa78508d
SHA512 08d158683cd8cef260895f3068a156c6ad6fabf53290bfc4721a6105d4265fd796c18464c06092c4381d354b520fddbd63219ab25f734d1dfca7bb459847a307
TLSH
T133F059049DA897A7C7B822309947AC188BB883E611F00A48F7C6EB4F93C5D14240777B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/Properties/AssemblyInfo.cs

SHA256 46f621b20d2b798aeb845ffb7c4f96f48e11bb6a967707370b2a51c4b75988ce
MD5 87ac02b5f335ff469080be92b7eae63a
SHA1 c18ec18ed0c7ad013e6d63a4de2c555ad0f823a8
SHA512 c8f921c23fb1514cb30e87d280f3735182108fb7139a50214f847e2d719531d8c72deaea5d4b431ab2f541975b5d88c9d9ca139cb5f2fee0416705bff5413982
TLSH
T1E0216BB5A349A37DCF039183FEE67088237D336889DA4C8421EC5C17F8026F84716A29
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Compiler/CodeLabel.cs

SHA256 4060b99e5d2af2a1e6691212318760d69207974fe654b93e2462eb03786e8a44
MD5 c319a27a9b9d890aa0fc4424e3824bd1
SHA1 7247ac9c7941429c6d22214b440cc0d6eda04949
SHA512 a24e64e617a3fb7cab568b8f196aa5e7dc64ff4fc83eb2639bb807e9cb22947da3f6b86c57f611308b7c3e809ed44aa7225b79cdfbf0add2cfb65ae7283b7540
TLSH
T116D0228C32CD5A60C20182C21E190E870EBBA708994D308C209A4230E8CE4A042AE732
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Compiler/CompilerContext.cs

SHA256 98b44472802d9d909821a172cbe7c0e5594828f1a67b20c72223253374895f79
MD5 70fe603882e6948ebc7338bfef61ac12
SHA1 4e6d284fb2d543b1b6547b7cf8461553ef48798a
SHA512 1af9544490257fcc6320ba1398b4c5823223cd6f60d3fd873116b6f8ba1cae0f60514f7b50ef5c5f6926c7910ab80771611d497139a98f65274d70cc10a1dc6e
SSDEEP 1536:0YRDc4wYuSJkMo2F/fLJKzIk7a0rNkpzqHMV5DmKFH:0YRDc4wYuSJkMo2F/fLJKzIk7a0rNkp9
TLSH
T14B33E2D0DE0F559A4BB420650E2246878CDDD27E66BCCC659D34AA7C70DCE6EB42EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Compiler/Local.cs

SHA256 0bfcd38cd2442d77d54a71ceafdd9726e44c6e18742528f530c9ee9d597b7e6a
MD5 ee13c2da53d363679df1acd032d21edb
SHA1 47c5508e723ca069787dce154c386f0bc2d44531
SHA512 c537468334ccaf8c3dbb646d37c68cfb56bcfc454b6f3e407074661a8d19ac6d33ce6230dbb40014366d8512717a42fead0992155472554cc4cf9e4fd6478d4b
TLSH
T15C21CDEEFF8FCD15822510649A4B45C341B9CA3B4A998CE779880060F0C5E2A807DB35
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Compiler/ProtoDeserializer.cs

SHA256 87fc5dc8d0781801955622f0ea45e6e6f1f52bb7cf495074633a48cca13c0d68
MD5 3f80440ae41f6e9c84bce523f41fb257
SHA1 7404ad410d2384c245d5e79eed0745b632f452ee
SHA512 eb19eb3a2e93803cd34be0da39fe9448d2406c10137458ebbc9bcf0e387000c8b139c84f03a728de1bb58f245cdb6dee8df005b761bfda780de735b6e6f4b2a5
TLSH
T14FB0921D2142CA004132E4C0A12508478E89C706E958209AC4E0858AC0D3408CE2EA2B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Compiler/ProtoSerializer.cs

SHA256 9d55f1861fa6e72d94acfcb231a3607bf425b28e59ad50d7d157b4e8df7880f9
MD5 8f8b4480f175221235876321744d7b60
SHA1 841ecfbf8186ce5fe5ba4808d315144eb5ad87c5
SHA512 99c1fac48619d2538afc9ffc964437f1e396479de44a2d1ed24cd9bbdf3dc940f0c8945b524b07fe924dfa962a84182c64f2eafe102ecdd2e5dd3789d6f0f2fb
TLSH
T1B1B0122C11C1CA464131E0C0F1204457CEC9C30EC5643481ECF48180D0C2008CA1DB36
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/AttributeMap.cs

SHA256 c88fca912e3f386b3fcd8c5da3664df8737550dece32ecf28137ed1a555ad863
MD5 4eb6cf15dec9ebcccf8b5ed3258627a3
SHA1 45af3ba1fee190da125fcb88c3b23fac76a9fa89
SHA512 3dc7f7f2ea33f8ed74f5c3854772e757501a662c8d4b06673c87e6ae98a262c46a3edbb4ff967e7b4fb3ffc99c625c49f770f17e0a6965e57dc001965a34033a
TLSH
T17851CE74BF6DCB7B0D59A045DE0ABDC2987B8132046B18F9B69DC103E85C91E02F89A7
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/BasicList.cs

SHA256 9d193d5050b2df1dd0f00e1a5f5e60e389cec98cfa939c1433c92f249b79e254
MD5 f39d48a40d4dadd016ea5f8189777ef1
SHA1 5ca057d4e61f1b76271930d20fed67fef9b5bb18
SHA512 3ce9d870d5315b4cc822c3bdfc62a0b444d00e3b7889b3a226636e931b25397984a8ad1b08414e7865549f6bc36ba77f3f857c83cc96362cdb8bcd7e6afcf14b
SSDEEP 96:Cj4J5EZtFQc3AKN1A494UvnAG41eGD+WiGAG5zF5z55z+E5oycQVvVYrU8kfAbq3:tLE9J3JjFHw2GHDy2YrUQeJEQSXJW
TLSH
T149B1F090FF4DC6BE05A6605D450148CA807DE13689D9ACFBBC885750F8C0D2E97BDF66
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/CallbackSet.cs

SHA256 61d9a839ab29f626f66b558db3a423e0477cab239e36517f01b441656abece48
MD5 2ee5c83b6b2615fc733f95d4e26d1e52
SHA1 a95ff8a3f56d9d6609320c41a200311b558244a8
SHA512 60b00e6779221a9ea80f056497909531424228b71c26baadb822732ba65510651242de96fe1ca0e710467b930fa829f46b9db65774183a566d3b23a1cb2ca07b
TLSH
T1E671BFC9FF0F8B1B4A7CA15B69200BD1D9BDD13B285C8CD2ACC61326B4C4DA99729F15
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/LockContentedEventArgs.cs

SHA256 822ee588246ef198c0810adb00ac83edacc8479dce3ccd73e4f659880188c4fc
MD5 efc2ca3c9ae920864691bca456ce3f09
SHA1 b16c9519536b29c4c8ed29cf255e7182bd366bcd
SHA512 2b09734c13ee8c925806fcaa5f4797f449b3e7464b68c6320e92c1599c65c858e4b0dafc5b8805ea2fe5581978e4bc6ec0143b01cb84cb2cad3ee6e757637988
TLSH
T184E08CB648DABA3D88266650ECC492368EDA6D564F3B26B6E8C0012C26D0080003097E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/LockContentedEventHandler.cs

SHA256 0fbfd3a0937452b643a666815ebf39e6dca724e8b5b74596ce40464ee2876571
MD5 a67989c877f280930d6efee8c9065710
SHA1 c9429e21301cc8663129c51478941d7f82176d0d
SHA512 348a4ff3a397df290149f6b1c5870114d14fac641f83410dcabf9f1bca44b1f070d98195b43f97ddee6548cb42eee9f3c48d87905cc044b81c034bfa389d81ea
TLSH
T10FB09BA9C1E1E4754375C4D4E9182D13CD82516D011914830CC1474955F11415455775
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/MetaType.cs

SHA256 9b33ac1b1942e09ac8b5908e69212977caf9e3e0968aa3bd8e5cab5c3c09e7c9
MD5 5221269d05dc14c4c1ddd1d92fe525f9
SHA1 ff5e7a31a8b751a1695c9c0aaf0b06ba97fb4f5c
SHA512 96fc7005337db8ee28e2bbdb216a6289780d9caae80a440ef731621ba82b8c26e3dcd7559dfb0db1aba58d3cc7a8aa2f3eb0c3b88e35cdb33e6535974e7a53fb
SSDEEP 1536:0BHtPMqNzfW40tQz8yubyt1v8LtWJfYXF:CtPMqNzfV0uwykyt1vI6oF
TLSH
T1E6537594FF0D896F4EA8205EAD1049CEA67CD63785988CF6FC948A23B444E4F617EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/MutableList.cs

SHA256 2f9a910f80effcb6719bd8a5f15b8332f8df69681646d948a5fd96c545c19eb1
MD5 873a06b78b590bd6b687fec18463396c
SHA1 d5904de74a9e68254c4072b7f244ed7302a70f40
SHA512 145049d2a0d334b8874826f2fc9e936f86b05f6ff0dde0c57edd200b0f0df2f5ff0930ce5f9ba5b97b653f6f9d944ac80524e6732bb347b3cbcc90877bc7f3fc
TLSH
T1A8E0C266DF81EFA21176904EB8254CA300A3A2779C8EC4F1A4AB4282A890982404CEA5
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/ProtoSyntax.cs

SHA256 072d1c3e0a83d8be1c93c90f761e21038cac1403df9d1fc7572304e450b4781d
MD5 3544cf33a72ccabcd36b799a62f482f6
SHA1 718b8f9192ebe8bd286e30505378b4e1886daa3e
SHA512 3fcac777d7379ad12fd69b6e7e8da54640fd07bf148c5c13b08d6a3acfd88d2a018db76f63f7c760655bdfc5cbfe9872dc69139dc671c4fbc857912ed3da171d
TLSH
T189A002604DA19837566ECAD8385D986704DF9799CE14C293C9A4074798D20230CD5D3B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/RuntimeTypeModel.cs

SHA256 d3237bec5384a7e87189bcc5f64199a638d795d53a0353ee087045f78aedb010
MD5 e4f9df35c88d4ce9d506a9b3fb8df875
SHA1 481da49ea2c889d84bf669217f52e9fcc60a7064
SHA512 a87ba83969dc114264c12fbf68702d20d286b0682734f57733f8c4867c4e29658b102120b077b64f72b276e3d11a8eafca8ce502ba9870187ec3493aa9ab3f91
SSDEEP 1536:Eu1RXEAdz3Ukjr3w6Zd22W8iJ4LJLAbhZmESWmwJW7+O:Eu1RXEAdz3Ukjr3w6Zd1zLwSWmwJW7+O
TLSH
T10B536394FF0E956B0BB430589E2141CB85BDD23B55A88CF2BC689678B0D8D5E953EF30
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/SubType.cs

SHA256 f3b5d069fcd9909cc16e473d0a2b8790c7031be0a364b238c6a7bf884f679d4e
MD5 53fa79952339f9a6b8713842df564b77
SHA1 fdf92ab61059eec8b61de6b7cd59c6fce6b355c1
SHA512 caee5391a5a82854596a1783a3a1471d1f28e677d4ae2569695e5ebd28fa5f41443880577003d9e15281871d3822e9a86ad1a615436c3312d7b9869e758c3423
TLSH
T17F414248FA0CD627026470B59E70D5CA62BED27FCAC858F3F868092474C28EE666DB45
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/TypeAddedEventArgs.cs

SHA256 2128f95def16df5cb1d6b67f8383bd4219748eba2d76099d0eb493e77db2738c
MD5 a710dc2ad2515410b1c2423e023cceca
SHA1 a603e57869efb70425c9de1c2143bfb7bc9d9526
SHA512 98a6ec64d1061b13d291092a5ad1e0bb1124c1aae149eaccb99ff40bfe2459505c6601e4a2bb09fcac92b08cfade7fe3fe61a637d93e55b56e80fc49de0d6e58
TLSH
T117E09263FBC3E43BC01DC457DF45849A0372C79B851E5420B89D56089D594135841F76
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/TypeFormatEventArgs.cs

SHA256 1cf8f7b6aa67900ec63bc2908e5e3be5bd3cd71a98308b55cad5f014973e8665
MD5 aa332f1431d02177b11c20ccaf32f5a0
SHA1 157217b83c54318009fb528bf5ddb58ecd470a17
SHA512 049066e0c6548b9847adc483bb3c96943e1570c632c4833564714de491334bf8c31bec7369082b56b322fd928e7d06a31eec4fa7a71ce83e9326cded13bb21c6
TLSH
T11D21A2C2DF0E966A065620DCDA8252874AEFE1BB5769CCB3FD54113470E4C4E545C712
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/TypeFormatEventHandler.cs

SHA256 3c0f1f716ad4e0c5ab4f7f9970c798ef9a4f03d3b23a0ee8a81c2f5a465453b1
MD5 6e6c2c63f023bea37645282883b63c0b
SHA1 fed16c9ef7eccaf2c3bdab10f1abf5bb497519d4
SHA512 630f04a280fe46a9278ebafda30187f83b3bb8387dc8147396868e60863f5352b4e06b0220cddd9eb9e1a1451c527b6bdc14465dc566c53c8300ca77715d64bc
TLSH
T13DB01244D3DDD234837D9040FE183E230FC1A1FE171950430CE197959CA1C017C587B6
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/TypeModel.cs

SHA256 b4d107543bee02d4a8f149f0a15573acb3a4c300929851fefdd7f2f405baff66
MD5 ac8a207ff6b2b20dd87d5e396ed32b84
SHA1 cfeb0d33f9c776553654e41cfd81d7cd9103f660
SHA512 54aadb8a7cc3f15af29a9a72df5e9c37050c249aef4ec36c1b2370dea715698ed72866542c4f1e04a728b77fa4c48570eeedd8b6d96d9d7ca459e3de9ec5a05e
SSDEEP 768:aqz52qd8mRVJ6FLmaMFPaXa5tzy5UOXvTRNeF21:wqd7aQ7FPCa5tzy/XvTRYF21
TLSH
T117135150FF0DDA57066820A9A92094C6997DDA33C668CCE2FCA8C975F4C1D8F923DF61
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Meta/ValueMember.cs

SHA256 4c64361a93239a5f3680b45eec1c755c82ddd636860e650ca6a3ebae33eca38f
MD5 c474d6f5ffa3d82efaf50867ed618a58
SHA1 bfa8e6358b345fb6760190f3f62075d4af543623
SHA512 a6fa1fbf804f77b648b399a57d9d8319c3085e65a6fe2a723449494c487c3223dcecf2ff49d8ebc029512758e04f2989438fd2d1146f0ad362da485aff933041
SSDEEP 192:tuaiMiD6Bm7ArWyip3MRLF10yZ3qXzNZnhYYxfGSGmQiIhTkCBdrfzNEDlUXCX1h:tuaUdA6w2nh+hiGO1kFm/NeJqJrY5uj
TLSH
T125B223D6FF4DCC4706683069BE2064DE99BC963B8558DCF7FC584A65F080C8AA62FB50
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ArrayDecorator.cs

SHA256 9316b226bf40997e1bbc5cefe0e6007bda56c14727cf6523e7c3d671d1242726
MD5 8345a38e86d0a0abd9732a28107c0fec
SHA1 086a328d2796a51cf8e0e3e9d91574dfb74cbe9a
SHA512 0356fce331423a5fa2ec988cc75bf1e888be78888b2a39e64605147a7a14b606f28d20785ab406209dbf63d271fe26ebc381f9171a38a20b3a5a17051ecd1f7f
SSDEEP 192:tuE0zXClZ3pFVxFwTR9rYeAf+G3UQC7gwr6Yo7vHRSL8k4KW8J8Eo9Qd:tuEoCr3nf+G3Uzr8fG
TLSH
T122028554FF8DC62A877C00EC9D5281970A2CE175D498FCF6BDAE4AA1F04915DE825F31
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/BlobSerializer.cs

SHA256 bffb5fd01b43533c6294b13b61477ecd66d9b61828269c15837bd69505f829ac
MD5 2c8c3db6cb6a52e8e83f1b296d965cb3
SHA1 1a83e055f09aed15b66fd920faa8819ce5ea07b6
SHA512 0ea5c5a0f5a19fbd8ccec59cc6e870fa2db415bf1a9e682793e876e5429e60777370312a6e611373e1b0dd3fcba80fc152b5026fbeff9594d08256e369b09ca6
TLSH
T1BD21CEDCFB99CC5A5350B0D2DC3188A3AA2CC372C9CC9DC4F0E840A9E0C645DD958D36
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/BooleanSerializer.cs

SHA256 340a6cec6e5be9318834bacd03d92e49600b2bfa3cdb091b7335f4beb18060f1
MD5 e47fead66ef84d0888337d62e14fc5dd
SHA1 119adba3f03eb9f6f171738d574e6448af25c668
SHA512 d84cf5243bb931b2ded3b4055437f1c4560ab65b9dc4316960530114ccf1ae02257ea608adfec8e301c0828735778e5c775316a21b16a3ef82e9e9adc5e95340
TLSH
T161119CAEB6DADC124220F0C1ED7481A3CF7D5329C84D68C4F4A8A128D0CC49DC954E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ByteSerializer.cs

SHA256 821536e1e8927c184bfd00ffacc1d775a7fe1ca3e8529df3717f3d2848eee00d
MD5 3a3130ab32a8ee26f25c8010aa1de837
SHA1 93c88a0edcb2cc248458ab873b8b249e658ee5cc
SHA512 9b852affd8883612c14b114bf244df9d0a534a2b625c722641550dea0b9d6e76debd21702bf807a60ce672921940b51a5ce6456ad847c9018f8cd2e67e8729e0
TLSH
T14D01AFADB69BCC228220B0D1ED7185E3FA7C5736DC4DA8C8F1ACC124D0C885DC968D3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/CharSerializer.cs

SHA256 50d2146c206e8b50ead0dc283b7323ab84df63b768fd0b86485afd6a4773b1de
MD5 f41cc059e46035383925107924a72e9c
SHA1 748f3e615948f3a0bd1541f59f12c5db0d78375b
SHA512 c6a5d60be32bb47f00c156961e4c09d8ab0462ce9fdabc8f1206982d322ec2d1d28fceee6bc5c2dca66a2f1238b87b45361b9d77a45e8ee0e3b752d9c8976ad9
TLSH
T1BFF0505DF291CD72822481C5FEF7C893D5765525CD1C5CC0F19CA524D8C945E8954F37
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/CompiledSerializer.cs

SHA256 66750ceab68ad8ece1deef91a4fcd015cd64f2ffd1d93968567272520fb8dc97
MD5 b4a064feb0e7a483500f6bf2c730dd19
SHA1 15ea88772d4c156b3e370730076ac55a5b7947f5
SHA512 d470dd454702161a3302fdc81c2fea332683d761ff0e8c0fa60f2001b25faf0e161a89dc6111920408804f9e08a806302e6876225891fefce13827335f90c2db
TLSH
T178417CADBA5FDE229A34B9D2BE310AE3E97D9217DC4C94E9E4964070D0C04C68324F3D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/DateTimeSerializer.cs

SHA256 0d5c658bb4a17cc9c65e5ca103fbf260455d3445052f335dfda3c39f75db4783
MD5 42288087340470d118baed8defd500bd
SHA1 ac9cffdcfa3b971cc0cf739f58721a60f25ae28f
SHA512 acaa986abffca368a0af8177c13b93fb9df920237340119c3e749cb61e5d44e4328067ed956cb5a8efb65522f6ef63a800f10c4095bab52cec01addfe50e4b18
TLSH
T1BF314A5DBB4DCC66462810E0DD2494D74B38E33A8F88DCE1B4DA4219F4C8C4D792EE2A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/DecimalSerializer.cs

SHA256 d107bd5c2642bcb26f19db5a93da14272e5b6ac12dfe3ff625d4a43e6c43b27b
MD5 c50b0a436e489db3736af3f0d581335d
SHA1 aa81d9fcec887f20122aaa1953116443bfae4c89
SHA512 87c453ad1c4a6c17d57cd103f65db240270e8ad66e0dec05aeb3fba814b388e4dff902f1f2385211476357b13bce7ad772897a3164f0d0f42b56abe91d110f68
TLSH
T127119BACB75BCC62423CA0D0ED798093CA78A335C58C6CC4F1E84525D4C885ECA1AE3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/DefaultValueDecorator.cs

SHA256 14d238492a49e807efbc2432e6d7d2a6cc42b18d811af1bf00d5ef8fb7d597b2
MD5 7e683ea2698816a46a241d90a43f34dc
SHA1 8e8908489602896d1b9d4073044e729c958cc477
SHA512 124a208d1f0c0d25df53ae521fb4d85e2219c37eedb5c8fecf97128e01fef0d422358769a8d8cf812826c4d8dbef0b82de7994e2b06d897c09ccc71a2e0492f0
SSDEEP 192:uqZTXQ7v7Z7U9dpBLgmI9MsZQ51AxhTWVa+Nq/aMacJj9:uWLcuO9
TLSH
T1A6D1CC50EF9CE468837890991E2154A6CC5DCB7ED464FCC1ACEA9A64F0CC85DF48DB22
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/DoubleSerializer.cs

SHA256 a875269b95103c350f706435b15a7b720098db9583db5f2ed08821ef7a49cbc8
MD5 824391736a074c5d97ca6c2ade12c82c
SHA1 81c34b01ba331617001cd180a88ca9bce80b3adc
SHA512 9c960d228e6bdeec06de80192f1b4531fc43926e6430e9fd52e72891550ab44a8c6c0326880d06a3078b2aa478a2e611ac154d1fef62f79a05f266c5bb9d87cc
TLSH
T13C1180ADB69BDC134220B0D0AD3594E3DABC5725D94DD8CCF9AC8124D0C485DCD58D3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/EnumSerializer.cs

SHA256 bdf8e68b93dbdf2f9821ad58c522ff375ca9608636495485ab68e822e8889262
MD5 1edf864e27b0a80582ec9114fa073d38
SHA1 9502b2de791ba062400386afb36df6c9d90c3a2f
SHA512 719ee032283acaf80e8d09a40c983777bb883c254a50de1c2573430801394a75a287c3bf6b159ab22760c414c3342ef2cb3dd4cfa7c56d286b3786f446c9f365
SSDEEP 192:LINJvDlVXfUl5R+8IeLmFBLKNFiEkThkRT4HK:Lu/WX
TLSH
T19CF11090FFCDC8A4423491E49E6555A3EA7FD636945CBCE5FC68A7A4F0C4C2DD028B22
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/FieldDecorator.cs

SHA256 790215fdf676f07c7924e87aeea5e54a83aa5632a7940d42a217ad714d029d21
MD5 ee0148cf844e9acd740563c9b915f305
SHA1 b2efd38bfa10ecda07ad367d36488975b96f0330
SHA512 12b8f5cc49b2d806177a7fc6344f63a076458dc6df22c4ab88a71f9e67604235bf2a3b96e4ad5df312ad81389993b27619bb3c29e25eba0eb801077147baee28
TLSH
T1B441AD9CFBCF8825573400C0AC6985A25F2CE676DC1C7CD2FFAD4566E48452CE58CA3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/GuidSerializer.cs

SHA256 9dbb62b0401e12aee65379c407434c8f3d3c4e2af5328fc4ed3970e25e6e3fa7
MD5 354c3da84e48a9c4c29aa3dc2cd995ef
SHA1 b224cbbb3a4d6c9d78d5cb9a6e72b920086125f5
SHA512 7b40621fc55c1548aa4afb260e0f05682ce4d8753600dfb6a9504324e1dfbcd6269957605ac6aa28d546d0b17511eb646ceca4cf7d9722d193e945aa39a7e585
TLSH
T14A11F0ECE94FCC624334B0D19D718197CAB8A325D66CACD8E5B84139D0C84ADD81AE3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/IProtoSerializer.cs

SHA256 3078040471b27c4181d72135f9cee44e588b3d77f0472f49fcc67912026cfab8
MD5 693605b445af7243bf1fc8eb4c8b148e
SHA1 505e27f36dfe55128f06d68c20b3625232d25dc1
SHA512 90c81ada5927970a081f49eb5f9c149ce2d0763cb204b3edeb992441790d793727dee2c8b7eb8c86e01b7bacf85af3ad6165ec0dd880909d24818d232071232e
TLSH
T13CE0AB3E3A87CC109330C0D0EEA29C93DFB89209FA0AE189E9F0C040C0C548CC9289B2
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/IProtoTypeSerializer.cs

SHA256 c6f62006175a5bdc8476f1bd4c58b6424a8832123476c045ff408d11f07b5762
MD5 716c49da5c01c44a4a4428825bf9f225
SHA1 e6d5d5bb248f29cb8c8ee8ebc35461c4e2a256c3
SHA512 c42be424694fa348b4f24261670926e6e4792f283d5e09054321c600b5def38ebaf9d213d43db76016954d5faf350f35aa6e677a7be7c4f068c85506599b0b74
TLSH
T16FF0599C316BEE00DD38DBD39FA41F6776AD9F00FC4DA0D448A78A84C1D40858369B29
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ISerializerProxy.cs

SHA256 c06710b5e1f9c35f21ac87923502674c421d5ddff8f1ed4a170ff70a5cbfeaf0
MD5 71383cc133b3164eb518eb852cd7cc83
SHA1 f7567f60575ea72e22631ad6dc6635339683b53d
SHA512 6f435a44246b4b9d2c5ea570a8431b0fefaa5a5f8c9ea8fd84a586b66281a27968871801545ec0f7848bd3c779d72962a946a9cfc8b319a82b7b0713e8daba1c
TLSH
T149B0920E00418C0A0039B7402CF65CE624BA5303C4BAA085D8300531C0C28D98708E8C
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ImmutableCollectionDecorator.cs

SHA256 ec7b7fb370acf443af9998a2e53ccc0c4b5cbcac4d9f2c0a3cd782724295c90a
MD5 9ad6a57e1958c28566bf73ac0def4dca
SHA1 f22c198848e8a0c08153374c9478690486665501
SHA512 85474f2c4be77375d0a6acaa6eea1d541dea001c70e35f7d7c35a53c7380f52a8fe26455abfcfc344df361bf6340ecf40b1f19dce161037f6df85f9fce519f25
SSDEEP 192:tuEY63SRXqfSAK7qHYclByUaiDTZaxTbWSUWuD8rstAq3xI:tuE5rK7pilD4xX
TLSH
T130126268FB4F4D3941AC515CFE6050E6993CE8BB006D6CD1BD990A62F025F1EC2BAF25
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/Int16Serializer.cs

SHA256 d5de63834afcf76f2a0943343a66b0b6c27d47786c0d4bfb0578ae6f12bc80ae
MD5 298f3f5ca3e659f828249875d50f3e29
SHA1 b1623565a6b0b8c0e81816f489d6b4b807c8210d
SHA512 4c18ac56b5adb8e13b46a0d2a167c7524c2e5e72d41c07cd36c4da0228f5c3dfb881fda2cfc9be8f567d05aa7610ff6d39b8f5b8601e1389ed493b3eef4ad3ba
TLSH
T1F311AFADB79ACC228224B0D0AD31C4E3DA7C5735ED4C68C8F5EC8138D0C846DC968E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/Int32Serializer.cs

SHA256 07e4c4532e09ca136ec768a1622e12a88425913397f25cb781b7b65f4f8716e5
MD5 b93377ca853a44f6eb76a3bb8005b33c
SHA1 ffc43a19a29581edfd723af28bb4e8045b82f53a
SHA512 cf1a1025ba3d077ba0af37656b8c4e248fb9638413cb87404ffdb19dda270aeb0c7bb6bae514852f268cb3140fb6893ae098106ebc9b9e9a1ea21987927c67a8
TLSH
T10A118CADB69ACC324224B0D0EE3185E3DA7C5725D84C68C4F5EC4178D0CD45DC958E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/Int64Serializer.cs

SHA256 da77cdba622e9557787aeaaeccfa6ddd79c03a00a11b6d5a9c85b5d07a7fcd5e
MD5 00740dc31c44f8b1905fc90197cad256
SHA1 00ea0bd1af6c8a8de9d2acff02586bae5f2e083f
SHA512 8c831f2743b37068e937ac7418f123239ea63e4e8b87350121e451b5d4ffadc5b1dca093ef88fbed55dcc187bf44913605358843e517f0ac3644a21669dcc5ca
TLSH
T100118CADB79ACC228220B0D0ED3185E3DA7C6726D84C68C8F5AC8174D0C949DC958E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ListDecorator.cs

SHA256 249372cd4561728683382e6904146ec2f4254173476c4f6fc3a96244ab5d4167
MD5 4846d836d7e8c397aff4f7358012e0f9
SHA1 ce89cc6b7a7b45b1149026f1f360f7e255ce17e1
SHA512 f3532b3879face4fb86652e137ce42711226715fdd171161504ad411801022f3104515c5009462316f353c4355c8a392eee03a9dcafdae77c32f0d03f4d6222e
SSDEEP 192:tuK2Og2GO2s0XYlfe2SXN2b+88hvl5wNFBXXpdGT486Q6OnZM0wNuGZ/rBmH9dgq:tuK2Og2CYd5EcA6X7Y1ENwfK5H6j
TLSH
T1FE72A650FF8E991A82BC10ECEE7140E7482CC5799488ACF1FDAD4E26F08D54DE59AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/MapDecorator.cs

SHA256 55424734b73c8facff4fe1518131022497abb1e6f2901dd94ef58dedecbe7869
MD5 5fa0bc35a6d90106ba942ac4a5147c39
SHA1 ca427d6051b07ae2c915dc96cda6c5e696439b19
SHA512 4e95fb0b58809db9b0b25eba550c7e1f665f19f6d97054d0786040ac76e6168f32dda862f1f7b59d71db3db0e5935090bedee7b3b0137143d8a73a72dacca764
SSDEEP 192:tuuVohtYfp0bbBbVZ1S4dvh1baYDTRjnSobrKLWkUTodJSAlrrIj1N2b+SpEvPAL:tuuVoQsH9VaYDTRjnSobWRMo
TLSH
T169228411FBCEA814C37C21D49D424592863D9676A1587CAABEAD4BB5E0CDC3CE84AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/MemberSpecifiedDecorator.cs

SHA256 06aa17b29cba209f14aa27cea02a373a40c737faaeeb8cf5ed261aa2528cbb93
MD5 f3697b810f0edc4ea1398f09fef78066
SHA1 d62b4da02e959ad09f050309300fc1190306bf94
SHA512 6690ea0d3be31aa80b3fcc9b3d8d3b4aa27f5fcf67066217a6059d971eadcd8f341c4936319bc6a8b32e8354742a8b0485c6d67ba899e9ab510d3ea54f89977d
TLSH
T10A41AB64AF478C28533C40D6DC62E5A2EF55906EC80DFEC3BDEB4358B08951CBD5A922
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/NetObjectSerializer.cs

SHA256 a9c9610ef3541a373091363927ed3e3f3e1e65ec39e4e07fa16a8671857b2aa4
MD5 5ceaba643f3ab97094d09879d81ba4ac
SHA1 a918ad44d57fcf1e27f6ab94bd527cae0ee650cc
SHA512 3fad7f6dd9f0c4b17147966a49a5d1ff7296d074080c8f2a28e6347e11d09acc2ea47e19ccd7aef633fab804159511c7aee66dada3e14fbb18a23c69f0ddff2d
TLSH
T18E31AC39F7ADC95052AA71C1EE244857C934E6659B8CFD5531A8E2E1D4C942CE483A33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/NullDecorator.cs

SHA256 f68051e92fc3377b39c45881b7ee7b507479f5e6386f742180dc32a16aaf6922
MD5 a8a5855252a1a8318f84ecccb8051136
SHA1 cc1c8d8a955706effdd5f28abe0ede0f879759dc
SHA512 059ffc6093b94ba2ec30569319a1609d8b877d239d4874f4af0105226fd9b916ed181fee74b8631fbe609e226185453f83fb9aad889701d05c489bab66fabe5a
SSDEEP 96:C5cW0A4xa4YQq9Ck4D4hX3ErdyKSDrlDAtaOOxRj7R4WUZpLCgSr7h:LW0XxBYP9Ck4D4ZEcFDrZAIDRj7R4WUm
TLSH
T15581EF64FB9EE824E33C44C09DA544924D1C9536A5C8BDD6FDAD0779E0CC42CE896F32
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ParseableSerializer.cs

SHA256 062609f485a318455118347fb4b3a8ab06c2cd8478ab08c0f12a6374650848c1
MD5 ce3610c76831535aed0589b11b9cf8a5
SHA1 37c0f219e359d294c1d40af526c3f994ef6fd7a8
SHA512 e883bf5e66fd84c70890a9ef67ebb5926e356595dee3fd7b06588b63ff077a6b3e2737e792b323786de1f9392aaf7f74e157eb75bec233fcda5cee80e7964345
TLSH
T19B4110A8BB1FCD61825CA0D4AD2044D7D17DA237859D9CF1FDD98120F49842E9A37F31
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/PropertyDecorator.cs

SHA256 a5ba5bdb80cb932b84d43a375f430485f0613e6e98e89b44b83c0abacdb898bc
MD5 4b6910eaa411482204caa4e411eef399
SHA1 3db6d9fa45103c10783b7069ee6a5c8cdf76371f
SHA512 3dbc92c500fc5935801d43ff24bde8d9957717a3054ac78933a602136068cdd6afa0d9940136bbb8fe4cc0ad6d2697308f73801aaeec95b9380c28b3c713fe65
SSDEEP 96:CjMcFnJb+MAwA+A4Pt8b1fiQ9hwA/uFy7rFA/7lZxRAgecV7ZBgArlS9SZ/JQpDM:uFJb+MX9Xm5/fuFy7rFAzlZxRgI7/gAj
TLSH
T18AB14280FF0E8D1842EC10986D6079EBDD6D803E943C5CA17F994326F48862D959EB33
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/ProtoDecoratorBase.cs

SHA256 b025e083f2aca7f419bb610f9543203aba6241dbcc2da845bdd90c7d55470c13
MD5 7c2f31df5c9e012accd025b94cc31b49
SHA1 3d4bbf3e91ae34c83816c49bd2f8a694083571fb
SHA512 9437b79004b93859bcd85a9cd9f14c21c0f048c535ac9b7b5e197aafbba3cb1fb139ba86e0f2373ada1a4e66f8b80f0e044d5a97604c09681091aecd43e8df37
TLSH
T1CB117AAC5FABCC5252A4B4D18D29DD8BEE786760E80CE4C9F5FFC204D0C80CCA524876
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/SByteSerializer.cs

SHA256 30ff026e9d1c299df3a919798df0ad00489fa8263deb75637a75731f2f40c807
MD5 e0ae323a1280a1923f5ce293c22b4d21
SHA1 b399166db431d74882fd176a36cf5625cf851f78
SHA512 eecc003d03c5b41a751c50d41965b08568e1774b92b8799117ef2cdd94901d3fa8ed5114e6f0d46c0606e18e8ffd32e4d90ab5c961a89b3dfaebffb441732cda
TLSH
T10A1180ADB69BCC324224B0D1ED3184E3EA7D5737D84D58C4F2BD8128D0C445DC955E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/SingleSerializer.cs

SHA256 73d69626c26a8a1d505a9851edf87eb73946beb459ed72d2903108278a67a0de
MD5 b4b7971c4d3414d04d65763b24e19e17
SHA1 1c78b04ead6ad8410dbcdebf82298f29b67754cc
SHA512 1716ca5c352ed7fd5106dc24bedcf66ab027212f6d5e8662422a7e1f2dfa4b91278423056a09b2f4c77a028f5140f6182fe2c42885cca826926da3d3aa45ec6e
TLSH
T1441159ADBADACD624224B0F1AD3185F3DA785735D84C68C4F1BC8124D0C885D8969E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/StringSerializer.cs

SHA256 a8265949463cb9758da7c6531073f6eccfa0d5f8a294fad931a665bbdcbc6733
MD5 123ce45fa4322a3c7388a75520b2130a
SHA1 346d7684c326822cad4daa26e5fdd78108646452
SHA512 a80f59f1063a26e9ea9a3128f90ec9dafc121108c370569d677d0057aeee553cb961cf1cc6b128c114269768f287cb609b79367a6fe2c025c950eb7205e9f1d3
TLSH
T12411A39DF6ABCC124224B0D0FD7184A3DABC5335C85CA8E5F5ED8124D0C545DC965F3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/SubItemSerializer.cs

SHA256 6e9ef48f83a8fb9dfbde202c3172c339d065bafaf3a0e46bf672b779deffa2c4
MD5 550289dd8c41068c9018b36b2b930245
SHA1 cb4d3edbc1e9f67d3b5bcea12ac653243aa801ab
SHA512 053124a30320fc6b36f6fba113e46076e3443f9e37e22178196d258274ba869839550bdb3f4667ab1ad870947364f5177150f5e693edb07d0a62d55533b82b90
SSDEEP 96:CjMFcXGHmJB+dJUA/AylW2s0ajZY/QpLcVk25HXycJt5c3g295cI:mJAqoJlW2sZVjcyc0D
TLSH
T1AC91CF9CFB0EDD66C67865D59D3105CB942DA332E548EDE5F9E481B0E0C888D822AF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/SurrogateSerializer.cs

SHA256 20b729df44d3fb4907a9358c64c356dbf1f21b3585b336a0f9c61b288ce1e5af
MD5 4d8d0d1f5f6e43a3472886e441fafd88
SHA1 b6259ad8eab9ad555b3b775676f69daee0daa646
SHA512 e38d71bb03c5a72bed9089679c45c9876d8297e25f8b41247e83569e30fd48c8de9c60ec5b98703f3a13fb7bc88500019c9179a44106cd2e8b77aa8969278347
SSDEEP 96:CjMcW0cbK4AM54AMijA+n47/WBcecvEdc/LJsAuWxo++YPPv:uWf3osjA+fW1mTWxomPPv
TLSH
T1B1912398FB0FCD65423861E6EE2405D7A47C6777640D9CE1BCD44390E0C8D5DA62EB39
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/SystemTypeSerializer.cs

SHA256 9dc0e53fc94db7c37eff1c7329ae6e42a6b11d3658421e9302cb04c484d4b63d
MD5 81c63f780d0f868ccb7d183b2cc4e037
SHA1 8f1c6ed638c46c8a59d5402c8ce6df7ede028c52
SHA512 aeb56bd4073f1f0776ec4794565655ad3cf5c9e939faadfe4ad73175d77f1a9cac13a8e15db04dde9d0a2021e2dec39e8fdd1b0db47a016491ae3ea1f304911a
TLSH
T1E9115CADB69ACC629210B0D1BD3180E7DA7C6725D849A8C8F1FC8124D0D585ECA28F39
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/TagDecorator.cs

SHA256 d38217ef18db2e706fcfcac9c1f7304be24e5ca278735c855f3a2b537c7cd994
MD5 6bd3901c52a518854c10f91d464a7e75
SHA1 3865a2fe71e7741d01641e2f4154d5634fd24e0f
SHA512 f5bf1aaf1ed7ee415e9e4fd4171f4640da908aa539f9f01287dfbd75eb4f5dd8ff70fd6613cde36d1b0c52a9fc10c6ed8cea9377bdc392b31fe571e08b838d76
TLSH
T1F151334EFF9AEC36D62494D3CD644987261E9631CC8CB8E5E5AA42B0F0C405E52B4F36
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/TimeSpanSerializer.cs

SHA256 edc78febb6904e49f0933182b66d3c89dfdb8b640d1a099aaf1eddf568b17f7d
MD5 662b59f4ab71cacdcdf2da83c7e72b5d
SHA1 abff4453ebdbc5ec6ab3cbee769fe81663404019
SHA512 fae515c171520d1a79b6ad00f28fc0b9e38e2adf473ba0aca7902fddfd198ed44df35f274a7d4377e54911992ae3572ff3bb055017d8a56840c8a5ea648e4a17
TLSH
T123319D98E90ACCA3032430D1DE75458B8FB9D375D7885C99B5AD4239F0C8C5DB91EF2A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/TupleSerializer.cs

SHA256 0615829501ccf8ccc668bc1480c9ab9653099c2131d24fa23440f049bb4e191c
MD5 be544a6e85c708971c4745245c788ed0
SHA1 ca39b71c462327b0c87f4eabf8600e346bd0bc74
SHA512 8c3e9f0c90f6c1c770a8810aad36f43c62e556512f4ba5047f25104dc4700dee1f0e2db0bb436875fba17b115d7f93f47afc5dbae9980a909a02d50a997086fb
SSDEEP 192:u5oImakS7UeSKUkKemFpRgSVmqbnO/zZCi9Dx7Nzmxp0YWsCTvEiD6D46kkEd0:ugalIDlB4zZ/pzm7
TLSH
T1FB225084FF4D981D473830A82D3159C6957CC237906CADE5FD799AA2F0C8D2EE16EB24
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/TypeSerializer.cs

SHA256 0a40070ddd77c34ee7056840f28fad3144d8acd54f6a12fcb9244544e3821c8a
MD5 ce07cbb35322878c07fdbcf252ebb8bd
SHA1 26ba4b66de9f6057446f3c47eda4045eff5291c6
SHA512 3e956e4fae15ace6002a49bc90b9ee9c6f2e9e258ba4139a813f1df954806a721872a55d5a85023e3357f4c8119fe01e0288bb75cb69feeec83cc88a1f0d118f
SSDEEP 384:+0dRYFJybELNIk9t0UVzTkLIEcZ2lDtF0LLq4AG7LK7rhvmcmS:yA8z+
TLSH
T148922D9CFF5EC91A8A34A2954D7045C6C92CD537A88C7CF1FCA916B0F0C8A5D926DF28
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/UInt16Serializer.cs

SHA256 eb42e75fee95e6427d16eb44dd7ded948d09b500af69ed33a8760cd25d97b1c4
MD5 3a7773dc0cd1d8ba11ed2cc09ece6582
SHA1 884c32d6fa3dca20cb2f7f18458a053da88e1583
SHA512 d494ac2a33f3c59e19297f041dc88acda49cc5e41dfe9e1e90d21dff21c1b6361980b3aea3c52b25217a5044647d0d2d3c7e13fc95f462e764de6b4422d1c98a
TLSH
T195119C9DBA9ACC224220B0D1AD3185A3DA796725ED4C6CC5F2BD8524D0C845D8529E3B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/UInt32Serializer.cs

SHA256 b6cd4c81a2681c8cf033237465bcf05a10761e5350634c85c73464729810882a
MD5 895a69f26bdf85e86317effc0bbeeb35
SHA1 02bc9af9b44705362fca20f7cf34b1a8aed4c3d7
SHA512 17b2c33d66dd049a53d5f4ea507a70c6694cda4229eab638fbc1646682beacb28d4ab964f9eca6aa74f0b775e60e01d180262f42096233caeb7df10b38092bfa
TLSH
T16A119C9DBAAACC324228B0D1ED3185EBDB786325D88C68C5F5F84124D0CC45DC569E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/UInt64Serializer.cs

SHA256 3856df6700870e19082ebbd6b5bd0ed90a0576b1a4ae07ddd34151d523303e5c
MD5 a68a1dacd0aa7c4abe534b9c5f2111de
SHA1 cf94413b5734a3b71fcc194847c41dc2c07a92fb
SHA512 0e04f0efdd155e1540485065e9ebf93d8b94660e1bb3fcc299d4760b44513719023aa5233f018260993362061a6b39b5b241055a229822a948f00cb48b30663d
TLSH
T1FF118CADBBAACC265224B0D0ED3185EBDA7C5725D84C6CC8F5BC8124D0C949DC969E3A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.Serializers/UriDecorator.cs

SHA256 c66c3c62c2208ecd104bc4a6eee284c62990944d6868d837d6000e2b0ef64d8f
MD5 22400affeddf6ee8e7ef271b7af7eb68
SHA1 677bb9ce26ac610d55472eef1e0904fd3e0148eb
SHA512 76df095ed7d42046fa7461ae62c135308ed78c6e283bf1a0878d942a3c6e80757092ee054f8b37e7c8df8211bc33b101d8dfbea5957e9dbc26b2faea99d3ec87
TLSH
T1FB312364E79AEC35E73840D05E164583CB5952B6D53CFDD1E6A842B8D0CC82DE865D33
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.ServiceModel/ProtoBehaviorAttribute.cs

SHA256 41dbf57a966013140d2ecccd88f04d2f45d07d6bc31f18f98860d5c95d96a6d5
MD5 3e0c5c5215f4994b73653b1385d14752
SHA1 7aa4de65e26d9886303b108344181a17c4dd4a9e
SHA512 dc76d64811d3ea6e115c2c14b9bce886f76b8566f88665faff1a9635af38940091fa2905dfdbfae37c11e1bb99b4011f865953f2fc120d187fab897485c07219
TLSH
T15F2123F45DC7EE9132B7C3934D39900A61362F281847D0083AED871AF549ED0AB2FA08
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.ServiceModel/ProtoBehaviorExtension.cs

SHA256 5be36e212ccae0c056d57466b8a79f35da4e88ac43942e244041cb10f87ae2a8
MD5 cf7f81fb5b7d19f81439afc9bac75b5d
SHA1 e08bb366568f20cbc68d17ec8370e6a9e819eb79
SHA512 d2290223ee88512456134e48bc7ef91c55d5f2d1f33576b7b031e4b0da4670141df198da93510e7527fdf14b75999b60dbbd0ba966d98ae496ef76c5370d359e
TLSH
T1B2E026A0B6DBC1E9623990839B0A440063B71F8C5D0B640072DC431CF7A04594536991
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.ServiceModel/ProtoEndpointBehavior.cs

SHA256 b264c90ac078eceb13b82e02a434edbb3dce47de6e37bf2196ef33e06cc9cb51
MD5 b1e38306234607e362980c46343ace1d
SHA1 b845632283b1baa451fa6645a1c478788e1b6d9f
SHA512 3980b288910d57736da049847274d1e5f710ee7e54ddd1ea1d2e331376e4f6fe1434b99918fee7e2591adb53a1b43d090d2bb8f12d0a9b505dc1d970ccf753b8
TLSH
T113410CC4BFC3DB9032EED713582A8095123A2F38098360957ADC232DF590CC66F3691E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.ServiceModel/ProtoOperationBehavior.cs

SHA256 6bbcf4eee75fe7030086284f6af4246bd06368a49dc68d8863ac73ec5ee27e7f
MD5 b4b526e8795ed07c0573501cec205343
SHA1 058a0f6c54c887cdb798da27478c763e8f3efb04
SHA512 6671585baa20c426aefa5b4a152fd5e085a6d85e3dc40c89c7d88c7ea30591ef89b2307430764fcb3657057f413c811cdf44a2195e225bd81407293e9c7cb5b9
TLSH
T17A2135C8FD87DA2206AA27631C31C48641F5577A465888E4759C5234F8E08D9632FF19
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf.ServiceModel/XmlProtoSerializer.cs

SHA256 27d62034ab2182f545e5a73315d44543067fdb752327b0b79f40e3983ed44303
MD5 c5ab3a08d182f0a16fd7d48f2df15880
SHA1 303f76ade8972f69825de65657cec35d84fd3a13
SHA512 8f078b845ee1a4310cde4bc9b72042f9de1666424fbd868b1012d97cf33f017704929bab7231d73cc9556bf2c1b1fdbe95e58b190d54adab275dc14bc572e353
SSDEEP 192:0av4XqRtXgeV0XgdXOXiV7kvDQLXQpeZrFKEtxZ:0pigGyygKQp0KE3Z
TLSH
T158D113C0DD0EED5F07E834A95A118ACB81EDC27BD69C4CB2BD24956DF0D4E9E942CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/BclHelpers.cs

SHA256 f0cfbde8954af088d061c4726a8f4ea8f44b727d1a62a954370e8823272c0ee4
MD5 92b19a8dc495af9c843df40c4162178e
SHA1 9f750b0dda731e9ac0a90c02d1a425a26c99728b
SHA512 0c37a08a885527f48f9508b5739df5f44102bcf4950885d496c0b3c22940e7d976ea25d3d63285e9836bb22ac466bc81ba148c8b9f02e45d64db390e7d7aaebb
SSDEEP 192:4JHEdrS4LZuj0Qyw6nvRSov2z59SHsd5IyqltNkwv3b7W7l5wZXr6Vhl4XU7Nu4a:0HfFBt84izkAB9ZbRRzxiDCDvL9FfR
TLSH
T15E826545DF0DD05B4A7430D88721518B9D6CA33AE2B89CFAFD3DD669F0D4C5EA02DA22
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/BufferExtension.cs

SHA256 af74dcc9ba71519979ab9eb31512d5f29b35ab5bec8aeee54e41adfffde53f37
MD5 ddef1ce8625053b21cb4cae98e0c1263
SHA1 b57b30f77f869fdae9231ba371c3e6f314718c7d
SHA512 d04b1efb044ab15f0ea4a67a8cec3717c4742fe6e65ae966454e10e216b5291c8f6044d3923817712cbddc1e0d0bbb5d415c18dbafbdd2ac287a9b265ea86bcf
TLSH
T15A31A0406F1DD57B0378E0698AB6ABCD82BCA9376445CC553CA99D38A0A4A49D03DED4
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/BufferPool.cs

SHA256 f941a8efe227ed0b09faf5b87448ffbf40eb4c29dceb3a4acd2fdaa9bc4948f6
MD5 102ac95e058bc26206cbedd16390acbb
SHA1 d09621dc2105ab440233de5c4be997a3d6bb5a54
SHA512 03b11740339b7869498626eeab9aacc7bfbfab99dd73dbd898aae9d4ded4b8607bffb24f50e9acfda6c39b52771fedd810b67cc81ba6fca96368741cbf3fd512
TLSH
T16351DE546F1CC43D0A65703B42A29EEF942CD033A7C99DE6BC831F64F49879DC96C561
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DataFormat.cs

SHA256 41d3a665fbfc6785c648bb991893b48d2a97c91f017d193bc7f301394db11c38
MD5 0a41f085bb87bac2ab78c621e534096f
SHA1 c51312cdfb554e139e07d0d28410dfccb9424f7b
SHA512 9b81196d6e374c34f6cc3217ff60b1f23a5cd47e5ee3726771ed34f82a88408dd70e9867ab83c92f43fb8713348b8a3411190baa447eba5409cf3253e7ab4912
TLSH
T1FFB092006294D825A05E82DC920EA92A2EA68BB98AA5C017A5B582821481860A4C9AAA
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion128.cs

SHA256 be82ee310951698702280dd6b3cfcda275a69b2b02e0464ae3ef36ee2fa6a93f
MD5 4cf5b25d7625db3d52bcca841a0ee3b4
SHA1 ad6a5d0dd598747c8fd80d80328d545e14336694
SHA512 8b858c84cb5f06eed21268c6c42200ddcfb5e766b0beecc7c4f7372e52c74dee0b26e5889eeb00041339674ce22ed40ebb74f627d30fc2a39107b947bb0dc22d
SSDEEP 96:Cj+MdZyeYAxJ17m/vnFT2AcAkbA4sn6Mbwu959Cu9n9Q9+9g9FTZiAXA2ZiAXAev:FT27ZbXsn6Mbwu959Cu9n9Q9+9g9FTZp
TLSH
T168A14164CD4C566A021432BD0F01C05376B693F925E868E5BCED516878CCECB9A2FB3E
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion128Object.cs

SHA256 6fc0a45ef514f7ba68a49018d977355f21cf8184f1bc78d058860b8f9521a026
MD5 1f1e2dcc849b43deb9c764b4707ed847
SHA1 182300fccaa9fb23092ea72a02fa250d25ab168d
SHA512 6d3564a7fe4a0e5c096570d780693420bf517d610a002b1f16792e3b69b31cb91a74c3f3dab8375cfbb89dfa79265bd6a0ebf968504fab942548d82e9786bc89
SSDEEP 96:Cj+MCZyeYAxJ17m/vtBnFZAcAkbA4065wu87umHvvRaTrAXA2rAXAes2+2jA8A1t:eZ7ZbX065wu87umHvvRaTrE/rEzxvCYM
TLSH
T105B10364CD4C9759011472BD0F01C093A6B682F525E8B4E5BCEC91A479CCACB572FA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion32.cs

SHA256 457d836cdcb48f4b20106d51049df7d2d60f549da333ffdbb604a2ea5e8cc3c5
MD5 eea09a945f0edb881caaf7e079fe8b13
SHA1 070597ee11703b94b4ee37d9792268a87ead7c92
SHA512 fcd933261a05ac73a26c8c86fa0d22b1dbc4ca803359c859496c26159e2f1340c4d76ed5fb4a42a5a2ae50e20ac27556e5df8f29ae04533e9b70194d2f91f584
TLSH
T17C41A9A9DD8C46560514737E4F01C062363642F929D874D2BCEDA135B8CC6C78B2FA3E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion32Object.cs

SHA256 7f499d377db3620d7479108f2e687823c32612516269e1d784c0747d07ad9328
MD5 0cbe9276551b81588b021ffb74c5cd2a
SHA1 68b938bb594969d7e4178c82bca4261471a82c95
SHA512 90e2a5f43a4cdab9560a8514071fca9a091cbd106eb764e05889ab8c36133bcebb062bf53679b7a4b2fef4f542668ea445db7378a6172444fd57184aec464bc4
TLSH
T17E518965DD4CC656041473BD8F00C496763642F925D8B4D2BCEDE1A5B8CC6C78A2EA3F
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion64.cs

SHA256 6d1b66f0c744325695259d1d96db969f8276f88c7b6abf97043cb6ee0a65ca27
MD5 5800922cd796237dffff7d37d1cb57f0
SHA1 b9de9fd0863fcf7c456b890e4620a7f78b492190
SHA512 fb187b2ae68e45aa5772171fcdf03c701f2445222cc13850582b1677537263cdf2e9d8f845df74d5974258f8d5d6223ee638d783e1a81f309ce620fbf1674a1c
TLSH
T14371EE69DE4C9359061472BD0F01C05376B252EA25D8A4D5BCFD5039B8CCACBDA2FA3E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnion64Object.cs

SHA256 a19c317b78ba1b35fd6a6179b7429b047f5fadaa4b6445ec15a732627a1612ec
MD5 dd795a8c6840df3afe028908df56e80a
SHA1 473c729e0cb025d335c0225170e478e6d7eafe3e
SHA512 48b2a63f5a86a82f1b5716b7d6a410298bd4b497af8f7e0d18e4665e03f2a1df75bb1e3bd9886fd9fbc90c98827ca8ba5afe69b6fdb387f69115983fc2abc8f2
SSDEEP 96:Cj+MlZyeYAxJ17m/bAyA486kwuFuuzU6EkRT6AXA2D2P2uAzAIr2Ly:9VX86kwuFuuzU6EkRT6E/IQLrmy
TLSH
T12891BD68DD4CD259052472BD0F11C063B27242F52998F4D5BCEDA065B9CCAC79A2FA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/DiscriminatedUnionObject.cs

SHA256 bb1fee8e29e64a26f149c48ae61e350831e4b582dc7918325122dc0382433b5b
MD5 16c9df721ac7e0869522d7b99e5f8712
SHA1 3c7b20725139277c49ef5cdbc60e0ec2d4c1ed0f
SHA512 96a2f4b0c1d705d23faeffb2aa46a1c0910852b17e6092b37954c3a6bc9edad188ff9b0c47e22c1cc00a6e250e2fd36fd593ac6ffc1143fbc5af5df2fb55aea7
TLSH
T1FC21CA64DE4CCA824560327D4B01C9D6653942BA16D4B4E26CECC175B8CCB96CB1AE3F
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/Extensible.cs

SHA256 f42aa9021e4504d069b5e14d7ab97d3166c73d4c225d8bec2a8b8251ff2b3fcc
MD5 f6653198986994b08399bc8f84316344
SHA1 dfd8fe71f2a069116c7a3640f356237f2a440273
SHA512 c97c0bd6d7a8fe4460a43e597cccd5f579213c0b4b1f3859b35a2ed1d99eb0a12340b3fabd79433031226213153fd78a437f91c89fbaed41cdf8575688fce09c
TLSH
T19D711324BFDDE7308C7A9041EE9455519F369636B8A4B4B358FE40A0FC22D02A3E596F
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ExtensibleUtil.cs

SHA256 972589f158b9e8c9dccef608c32f282d1cf50078bab4d9da51924e464e59cf8b
MD5 1a1931078e77dc1cec1625c211bc8b92
SHA1 85313633c88e2db6253b6099f94f753403c0d38f
SHA512 9bf2f5cd9348c3cb346a067a3a86bef2204431be531ca1a6038bb6c5aa5359976ee37f1f07e6b748b5ce8477a6edcdf75d42646ef8f1e0f5a0975493b7c27ca3
TLSH
T162514410FF0DEBA6457950A9DA6152C58B7DC237D1A16CF378AC8454F0D1D0E51ADF0E
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/Helpers.cs

SHA256 2b263b8233791fc24235ee9dee262865022ccff9602c44bc5bdfcf1d78e902e5
MD5 8810479241321ee18b13347b5a5470ff
SHA1 246e07ee6274c98b70db5eb5b146618cfc6c800a
SHA512 6a4d5a845155c7d4c562a6b8b21f9aa58d0363e68105687162a8ec58c482cae8245cc4f99f2bbdc8feb11df63df15dad01b6a2a3f3d03b97aef053dcabc091f5
SSDEEP 192:+gFexz1U5Pazk65wKmfAmDYL9piPazoLZNN:+gE1NmfAmD7N
TLSH
T161E141A2BF0EC8594BF850096D2154CBD5B9763392BCCCA1FE844B25F8C991BA13DF19
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IExtensible.cs

SHA256 6344d89154ec51851698112901a70cdccb9e6bf7c68167eabd3c98793a504de1
MD5 bc97336885aaa77ccdd080387e845883
SHA1 ef879d2622be818a4341b1c25ca5f646799a3bba
SHA512 5a11c71219219772ede842dadc98256124296416f31e8d0d0e887f3ec512827297b5852957d00075838b27adfd179ac5470577002c56cdc631bfa6f016f330f8
TLSH
T1E4B01250A248E790403DC681DFE79C694FD6295A3882B0170CE4C0F385B73A2951D847
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IExtension.cs

SHA256 b7cde87cc5b7f1d0885df69833efb026a4aea21cc4be9189ecbb9af6e1cdbc8c
MD5 327f79b15ffab66bd87372902490ad65
SHA1 d9552ef047992a0bbebabb595c29bbad50c05180
SHA512 9c2e486ede6174318c517eb74e061650d5a46a814f59aca6ba9a9605ec730c7b5cc14922fbaf1a06479a16e9b77801c437ad4363568bd76b2e5c4a62817cf8db
TLSH
T15CD0A9006AB287AA8038C52AC9FB9B200AFB310B7685980120A9C028DCC3099E03AF25
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IExtensionResettable.cs

SHA256 a5dfe7620c4cb27d209b268fcd9d62f89a8d621373fcba2f9d09db957526c469
MD5 6247d1dd49e6df381345ceafa39da4f9
SHA1 40ea819ad0a2c479efa720f710ab283e82ad754c
SHA512 40f3e93afd3cf1ddfe2114f3d5edf9fe42425190ec2643c5b9bffc926c8a45a6545853182118e4806ab657868ecb5162eb12eb601dc2b8f4dc6b0f68b2d2217e
TLSH
T12CB012003349E710413CC458C9A2C82A0FE61E443C13B0231CD500B1C5512A1480ECB2
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IMeasuredProtoOutput.cs

SHA256 452598456840c56342680c73491dbb3e398c48a28d42c84aa70b66c9c7a96f99
MD5 ac65649586cde1c3bdf713c9b87d1c4e
SHA1 f53c9c6b5e637b4deb0350cc7b24f9b216eb27f0
SHA512 c624b185cf6a0d95bd2f28f38aebfe2f320570b333e47ce565231c5c289e816a92d7656da3018c6837d01ae22ad0cea761d07cea1067d9abe8f39ac6b2587090
TLSH
T1AED0A71C3C949947C9248CB084190A9B1F7A33D8D896084776B68CF352C1C005A094B9
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IProtoInput.cs

SHA256 2b3793d860f364c7f9949dbf62b1fe0d28b7bc1d1ed53c51c44063085ebf4d84
MD5 41b5b93f645c30e24fbba0a96cf47afa
SHA1 6305f48fa5f1136f2bf9051d37c9ea6a39edd862
SHA512 ada3e0a65a67906aca174a1284a24eb566613723550bb83a111deead7d9d218dafbe26f83d116f6f8539972fd3afbbfd6bb2d0bf3f70fe4d4290b4bc7851ac19
TLSH
T184C08C382236C6089821988000D909A21CAB3A8A8A42204BB1F898E26591861EA2AB27
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/IProtoOutput.cs

SHA256 4a4c95a33251b263ff7a1cf9e2751dce88fbb12626a1108b8d7dec1db6835737
MD5 0853fafc922334b679c0eff33c326c79
SHA1 98e277e250312ad2b53e445b4c719f778a71753c
SHA512 77f4e4055145c23f8c46bdd8619a059579254d2d467ae4af45bdd6032d3c9210b4731b9ad313e3aa7ee152e5ba625a7532d0e1a1e1c2ce51144fb0f00bf9abb3
TLSH
T113C02B100D8CCF0485369460482149AB0EE7329D9992244777BFCCF24381C60881A43F
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ImplicitFields.cs

SHA256 0c23b25bc1adc82b15d159f6b56abefe87dce173f74ab53093f485667d13ac4a
MD5 14f319e5fe76602c85e24810b335ea3a
SHA1 65082d77b7ba3e8619fc603c6a4959d1385111c2
SHA512 4feb747ca85bab6d76ec474fcfa3ce26a6a25367c7e459eac9048f56aba3af081ca60e28f6a7f9e4ad711bf57fab5b0394edb7e8e6c4d0fd6eb7293eb53fb7b3
TLSH
T1D8A01210057044484368448C000C5813259A3ACC1C1802C346345443A9012311549432
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/MeasureState.cs

SHA256 c00ceb180ba10a236d7083d7ce3e92f5314e4ab5116b09528fb100bfd3ba9d7e
MD5 ceb406e7fdd10ec80dbf807d4567e74d
SHA1 81877823765a02349b8a9c4e1784f3f5f2f2f652
SHA512 77d19bf63c236fadb74aade1f9fbc007c2285961e9c9e7f68066188ba6d9f87870fa8da3ca9a7426f0502bdf8b891af07b33144731dcc1a822ddb5d490be4d77
TLSH
T174F00545E547D15587F430CD0C22960A49E3131D396C0C139D55013450EAF149029E11
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/MemberSerializationOptions.cs

SHA256 faf3d9052d6e521affc74d2c54fa061ae4ebc1f06e7f15833b1074834822b275
MD5 74211ad4d9836e1b753bd4bfa6fa802b
SHA1 13b8cd1744b20418d74205de9bba04bdbf8c3084
SHA512 1fe7533ca9866a90baf37c0ae9b5f113d536e6bbfb899e6f8c57c2833cdec7161b3639526b5c22a534f4616b1bf2f6bdabfe01682aad029174da27e7f47471f4
TLSH
T1DBD023240341998CD335EC55540ECA360F7B6357094AC1D7F05500378483CAFE253C37
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/NetObjectCache.cs

SHA256 db88668ddb1d4c3a334f57548201d06328af438f9ac1e4cae142d47aa5da74d3
MD5 4ea74c66de37352954627e17985357b7
SHA1 d42cff528c5ab256c05a10e47c2ae7725f53f9dc
SHA512 a342f9a0aafeacc46fda18993daf2f7969ba2fa5b9acbff5262ee4299e30f80389a5b439eb83e8b8ef291f0db1a7c1d0d32996ab66297e9fe70e0431b8aa190f
TLSH
T1D071EE44FE4EC04705A960AEA6A214CEC96DC57B44E5F8F7FCE4D0D5F084A8AC52DA2B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/PrefixStyle.cs

SHA256 dafb004ea1c7b23a0b6c78e563efb5989bf2850a431580c7dbd8c96bdd29a8fd
MD5 d8eb612f3dfaa5fed1a96a8c6fb767f5
SHA1 c8b385db76014c29bce5ee4da7952cf5f5af5f56
SHA512 a10a847ca430bdbe3d6cb4a1b8e14cb7016cae138bec3af86c0eb200dc5a8d554ea2fd1acaa67e4a19d8135fb1781f70af6a4da511eba1f9c737205a4a5b1410
TLSH
T11CB01210078574E242A4CDDC010D4C73195B4ECC0F3A85C744E020511E022220486CE6
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoAfterDeserializationAttribute.cs

SHA256 7578b966fae6b07d76a9cfc53f11b0fed924046c2733b210fa385bdd3c7ea375
MD5 3270dd9e4bbde3b9be9e09d6cbb804c9
SHA1 35634080f3850ebda49ecddea198e9ba63d3cf71
SHA512 ed80fc61c8b96699359f29936f962b8afe78553a7e6efa3c0df6e8ec6146557a884c6d5014815afa89d2082d146f58c15854a235b39c3b3cd4a496aad0a2dcd1
TLSH
T185D0A778B791D37F4C99C4825D20B51782BB3715CC0B989534C5C54795764A8063BC06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoAfterSerializationAttribute.cs

SHA256 c41040480fbf1d85a5d68534fb8d1eb18c3491f8ffe45c6f3739cbd1b2d5875f
MD5 eeffb63b9d7512dc3168b70f286ec81a
SHA1 a92800a72c6994bc476e6f4faa9b2f152e0fd1f1
SHA512 d0456921fa9d07c0a274a16dbffdd5c27c4aa071609aa534040811f023096159e53cf701825df10206a465f405a1e5b820ae2c7cebb51dbb1e0e1cc0469c2919
TLSH
T14ED0A7786791D37F4C9AC4829A10B51782BA3715CC07989534C5C54791B64A8023BC06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoBeforeDeserializationAttribute.cs

SHA256 9a89880be25ffbd3236b536cccffcb885b3d9f7642c672e25520657b663acb3b
MD5 b3993aff78eed861fecedd4695e3da4e
SHA1 7420dcfbb0fee73f9c37a0c88c5bdbcc43a9c98f
SHA512 44e90d3ee731b3c9731f83d98d3cab9026e2f17237b1a9c2908f8f991868eb4c203eab0bd62e9b2b59c0551547c7499773eb3f5813cad73cd3079796b6eb7b80
TLSH
T16FD0A7786791D37F4C99C4829910B6178ABA3715CC07989534C9C147D5754A8463BC06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoBeforeSerializationAttribute.cs

SHA256 e8f862d43b676192c86b55e7caed6e37566668d71ff350482b6af20c5967b131
MD5 7115ff3776dd826caacb72c33d882f03
SHA1 b9c007989bbb1df3d5867b93067528bd15a425f4
SHA512 fd38914bdbc64137f2a2969cc74089cfb906e840e72dd1f75f7eaf99947710e3e438efd7f9e2900149939b0167881428c840129c56466e21df74b0cf4940cd60
TLSH
T13FD0A7786791D37F4C99D4829910B61782BA3715CC0798953489C146D175498023BC06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoContractAttribute.cs

SHA256 f8538da7477a9e087710f30de1637f2ce26de358362da4461e5268a2e8595e44
MD5 864b4f2e5c43b242ceabb832ee2570c0
SHA1 bb62c66218fe08c744a82d0133920a6612a9facd
SHA512 6582f67022fb6ef7adcc4906ea24ba58e6dea21ac88245f721bb64f464b021b31ed73b7467aebec37d298e648b7eff2547da2b8f071c876928a9bde317c5a7c1
TLSH
T17D41CCABFFDDC59686740110DC1265C74F6B183B19CD8CF5BA2AD3347488C9E826CB59
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoConverterAttribute.cs

SHA256 b1493eb38fb4cf4cd179498ed6213c01113028d30cecfab3437e05441e05f7e1
MD5 ab7109ad2f245b02d2e4dfbf597db14c
SHA1 e2b67082a724aa90a0b843b8864c3bed87d59d6e
SHA512 dca10c639b134d3d8fa3f2005ec5c36f515a6bbd6dc74889b19c18629e012c5c4bd69ecb7d034cffaf4439a8f63621abc72c4ab31b0ec8c9c825bf76700d268d
TLSH
T18AC0803413C1D77F4C96C0816800B555C27F3615C80B9D14344CC10390A54944537803
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoEnumAttribute.cs

SHA256 158ecd66fc64807da2624dd4bdd92e3c44bf210e338e3aafd680bdf4d792a85b
MD5 4f247532964bf812f6d7e452db172b50
SHA1 118a4d952118be3545cb3a310b196f4a21645603
SHA512 0d81bfac555b5151d50fd5682bf0b8de54bf4e016acfcfdc88bd53edafe467e1d87f54891e0c159480f1680aa7181dd478ea8e4bb9d946efeb19061862cb913b
TLSH
T14BE02BAB5FD6C23A8C7880419C5059735DFB3A36498F98B5F4088221B8A445740BF92A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoException.cs

SHA256 f5924b03305a6f0cd8d214e01fb2166d5a7c1e5d881c3008b3c0616152049197
MD5 2f140dd16327b53868e2373050eb8bac
SHA1 1d18af7946f65fc76b122991b68626b6d6a77ab7
SHA512 3782b1599e46e340858207e375f0aec55eab30b8518d44e6338fcb0df4aa049e596c2fa622f79d49082716915f466e94fd538ef58edcd41a4156927119c5b1ed
TLSH
T1C8F02B10C942D92B9AE7E0E728B2D91706F75315855488D3E5CD0174FDC1011F227F0B
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoIgnoreAttribute.cs

SHA256 bc4698f71ecab9fe0c4d59585cf3974d312e7844ba98eddf4cc32e8d7136bb95
MD5 76d28d991dd3bdb8a38ffe0abbebd320
SHA1 e53c02ebd105d21885d0c7614669518985bdc601
SHA512 2e3306165b0b86ebd295221ff0790a237f7bfde5a7c699cf2f8d46e358e9348b62208de1de7e1f0bc5a85bfa253f7ec7c7fc0b5085335090455a1a7f72b4adc1
TLSH
T1C1C08C381781D3BF9CE6C081B800B6AA8ABB3A14C80B98243488C20390A98A8443BC03
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoIncludeAttribute.cs

SHA256 bfc8b808aa527612d9025e263aa45ef7c51279cdca791f3984aa6e0af3afd469
MD5 5d8b53ace9b230365ae6228b3966681a
SHA1 ad3491254e4d0d835a800d09ea9a16ff2219a0d8
SHA512 c6f300a700041da7f3018d1e733259d2a286259d381734ab617cecdb652aab08470dc82918892da4a8e75ffb43b2ca5deb81c59941c4834321d7a8adc4d7bbad
TLSH
T12E210010AE4BC1BE0E6860566D00E587ABB7F7E587DE887164E50B32F4D5C4A243D719
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoMapAttribute.cs

SHA256 c437543bac249f5bb2d07566a94018019657b501e15dec3d93f77aa1ecb93eb1
MD5 537061f561d7207dc3ad3cff95882cb6
SHA1 0fa62d435ec61837f18d49090f399a7ee0ad9260
SHA512 ce932e6f20eef7ab77372e9444c4ccdaf41278d3d7b678807101f437c34c3a31d41aefc950c664844404236e605ccb55e45fe284507628f73ee30b7192d95f5a
TLSH
T192D02B2707D9DE7B4C79C8A15850E95A0BB399A4866F842D393AC203FC68C800036A43
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoMemberAttribute.cs

SHA256 caff096f1fbddb1ade7935caf619fe921447d38f98021764b0c5abe0d6a3399c
MD5 2f9e438df2a9b1ca622d65240fec2fe9
SHA1 2b1e53d80c56c0ad40539afac894054ec3aed108
SHA512 d14c5f9a8a5bce5a56c8e48be4e93596b8b92031db12fe1a6a7f9d7ac188a4ede6e000dc54175753d9676195e0763ec72dc127e55d420cadc82ca1ccae41bcf1
TLSH
T1B47167D9EE4C872659D7A0A68E428CD5247DD33348C984FB7802D2A37485C8DD29FE39
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoPartialIgnoreAttribute.cs

SHA256 d87a940d29e48fe1c115045a36141f51b6a3a6593d5b0cd085a33ccb89d912f9
MD5 2741914aa2cdf9c763e561378e034cfb
SHA1 1e7ea62e346c33e6deb3cc52f8442376e0aa7dec
SHA512 c307ea7883473ea38f4d862121bb46c41b5e962c8487fb3757ab1845899319979241d779f932b99e22283f4427c02fce1676b1623257962d1e8c03c1537f6d59
TLSH
T128F097608D8082BF1CDAE0C2CC026F86EBEB9121DA2A0478A454892B74B8C58203FD06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoPartialMemberAttribute.cs

SHA256 a08f6ec4f3973d4a65344cdd9081f297d40f885e05b9a1b4efc3e9e0326e0193
MD5 83ca24b269bd3b2c9474366f115739ba
SHA1 5e4a792c36c3896117aca81e2e5185d8b259f92f
SHA512 7b399a048ff6fd6ec250e3e1a67ea04480204d6cc983a480221b64b5f6dd60eb926e215e618043d122b34313f6752a412452cfa1ed17c0d091da80219ca3bd8b
TLSH
T16BF0C9218DC9927F0DA690C28C006F03B9FB9625DA2A44BDA4588D2B74B4C4C303FA06
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoReader.cs

SHA256 0e5ab2907c85f089601c36d35dc8c9a827df8c131f7d873ef8f9b14d4f2e7cec
MD5 e852351cec8da7c311cc7d7e1cfe1286
SHA1 4f7b63c05203855e5c85f2371f534c02d4db8129
SHA512 e824ab6d019850cd961444b4b74a7ba6796fe7168edea01ef2e8cccbd0843c2ed1a360fedd26a72296bbe6c10b4f2475335320df87262374d77cf05e2f92bb3f
SSDEEP 768:gngk5BBGK2oTW6hi+HcK4oss0D4q1W7EyaE+ll4SZhEoh3mJ:G5BBGK2Kxi+HcK4Bsmw7EyaNllHXE23A
TLSH
T171E27086FF9D9427016460EC945019CB99AC82368AAC9CF7FC6E8D5CB0C999FD07DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoTypeCode.cs

SHA256 dee58be8d9b94208d42952bb967836b116ecd24717a807013b55b563f2a56ac1
MD5 4fbf8a75a8e17a2da06a7df533a7c050
SHA1 40b8ab0d7b2cf5e3b958dbd87954f0d9f76204e8
SHA512 fd4b8e95806dde780f07f82465b256d1582424ade3608483cea15c369b992498c18821b89cf86d5d461ba327f53da45671d5f6187855c6dea3c061cfa8115875
TLSH
T11BE086313B524A10765AFCED480EC41F1D3E6AA7DC19C06975317C0B1427497EDA4A60
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/ProtoWriter.cs

SHA256 7f9f6588965fb5778005ef4420eb1e4b56ba8fe1b2b7c6744dd0ed8dd04224ae
MD5 67a6be1d484be998e3a680039d97aab4
SHA1 4c8536947894d4491696324978b6678009dff8b3
SHA512 a8bd8da3149aec3902111d40e7bbe526e5e65eea2f546c2c0128628668734e3bd3c949d32d9686ac0dadeebb1a6a758c0376e34cce8a9cb6808a974484062e49
SSDEEP 768:nDuc0JdzW5ddTYNR6/ta68UtHggOxKfTp62iGiaMJ:nDuc0JdzuddTYNk/ta68UtHggOxKft/a
TLSH
T151C20F01FEC846AB13B531799661D68AC5AEC37DD9BC4EB39C298814F0C399F901E731
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/SerializationContext.cs

SHA256 341d2fcb1fa99e630c25836bb527a5b84591f2b78d0d90e650cae92914b647ed
MD5 20a0207aab65b67db5a38e00e28ac6fb
SHA1 d23eb079e604c3b2a4d303b9414909ab2c4e4618
SHA512 2da3b0bb9da4d97fcb6bf690f8fc6d046e930deaf8df070563ec3ffdc11bd634d60ecc810683cd04babe959114f644cc85fe42d3df2d6b557af37522c2cf681e
TLSH
T13651ACD4AD098A4F9BF0703A4902834386F6957B66ACDCF45C98586C70C4DF9A12EF00
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/Serializer.cs

SHA256 26308131473fd7be381b9b3ab3102c6540a33cda5a7809f62692ccd885f51d09
MD5 2e8b95e544433dbf884fe3e533a49cf0
SHA1 048e194fab3d10487ff051aec5adaae7df39da3a
SHA512 7687868408a153cec1233c64a0216d068b279e0e82dfd4669a9212194bccfb899efe307fe5d16cfbef9fc474c5f7716c475dc9b70ed063dbebb1caf946bf61bb
SSDEEP 192:tOJG1zl1XAQkLUVjQEuoiFEuoQERpm8XY2QGuYXuWQ8ZGYZJGQuXEuoi9vEuoQEV:tOIBl1XhhUPqdYjkuKG4kQufvX/hmJt
TLSH
T123322285FF1CC9530AA460720A315AC3826BC13785588CA1F87A8D747CDAE1F55BEF5A
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/SubItemToken.cs

SHA256 9b42be0fe968de4c2a4768972890903ec7ebc44b297c5b46f2398e99686b3e56
MD5 f8144236547377a84f6a6bd2b1b4f20b
SHA1 f6ec2455094717a5f8d7944355956b98a8886001
SHA512 7b029fe86e52fa84e34e9ba342ef9ef97d235e52c03e23bc648f25020c47d51aafb3212ae987a9caf33e71eb39efd0bcb87ffd0792df5b2b14c0f5db9c1a992d
TLSH
T11ED0C9927F86863069A5A1D04C9E090A18E21867EEDAA8CEF406435274E7C6350AD7AE
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/TimeSpanScale.cs

SHA256 be7536d60472aa35861e985bbac361a13c8ae9d845c862aa5d0a9f3de9268737
MD5 5624867e2870099a21911bea10c68720
SHA1 abcc409d709ac5a38c0f5415b67627725dca1040
SHA512 17ea52cec443721d39ccad31ba998618b161e1b047bd9e334776bfca164248027bafe80e678c1bcfd4c2804fe2b513a5a3b7c29861a64804fda0fde22c2f98bc
TLSH
T1EAC08C0820A27840073A206C038D66A16C529B55995EC84E5CD805234042C3BA0C9D16
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ProtoBuf/WireType.cs

SHA256 677d8346e2c54aa8c95b5f4f2b5cf5219c6dd63f6f9f1aeb532aa42c0edb80eb
MD5 e2991ece1e6552e9a5854be285d0cedd
SHA1 10cb64238545a00a03e0a31298fe976caa9f46a6
SHA512 9af31390b6e368846057c1a65b2b1ae19371689536d45567b9f12fae465d012f682483cdafd346b7df653c5f3c0926ce3ad2adcf7214ee1f13ac795fef80a11c
TLSH
T1FBC08CA24B8104B283299CBE80CC443A6CAA26C84B65B09754EE898C16294EB54F4AA1
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/ThisAssembly.cs

SHA256 39c1af45a317fc164b9a0d311a234cd11691c04abc0f66a61904520c3d7aaa1f
MD5 cf93b66920f249f0fe9c41c60833b768
SHA1 318233868c26fa1e7ae92959b95c5f8b049bd72f
SHA512 917a023332d3e44adc91c4b75098c14cf0a7fe4ddbf1c4a978b2c692db244954ff615d8dfc20f19f8293435e08cb9d32674a06c99f0d8d3e975ec2130acef927
TLSH
T18221CEF670475EB9DE0304D2889B359012B43223EAEAD4E53C8D4200B1C799CC73EA5C
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/plugins/protobuf-net/stage5_pkg.protobuf-net_decrypted.csproj

SHA256 bdc76ccc440635e1fa7acad613c50209e270fbc582f92d8e5398649ada8a775a
MD5 3b1acf2aad36e41cb95f375624c12cf1
SHA1 bb8fe6e7ebffc7644642f2ffec84531b2380b977
SHA512 eb8243a309a000b0bd8b6911dcb9298f6e6196ec82d6c10989b0e1743fccb985c28dc8b29cafa6e6b7d2629b1902e231ea8ba71c1bfaeef92d922185c72875c8
TLSH
T19BF07D24CAE897FB87B833319443EC084BB943E701F00948B7C1E64AD6C2C941507377
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/mainpayload/stage5.csproj

SHA256 2880fb45ea9af5e745cd1a5c36ff64cd44e33882ad1aa8014e944fcbaa8b6cc5
MD5 cb55de8a5a7389dc7f606fb6f8fc54d2
SHA1 7d0ca87b9669c00eb33b5dc9b24564b1474a9110
SHA512 4209f4efd1d3959a6971f8a0101982d4d5b15766877f7741b053c31638a217b2f3445c8b62ab5f20c6b598a02493fc97108e63fc5c99d0cfe9d4074150198716
TLSH
T14B312511C5FDDE3E43B01436A99A97140EA862EBCA70241CFB57E9C99BF1408162B7DC
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/originalpayloads/01_client.bat

SHA256 7f1fadf85554c4326086218aa9b62d34602b086edac9b1a47ce6236c36cb013f
MD5 a51828dc0940a872bbb0f7f5e182d6b0
SHA1 7c9dec32e0e2ada84b9242cafcfbf0f19f9dc911
SHA512 159b179157e1267cc5dc524df7e7f358fc00c29cd51ba5d5b8f9c811525eee5b2d32008049820882978527056109b854377aa81d37f967ef8ea8e210d153360c
SSDEEP 49152:fko5mRutaYS5g/SmBbpc025Lj6VdXI+58cW0uNpBZ:e
TLSH
T1FAE51201851E793BC6E4306428FD0D95AF5C4F8C20A4E9DB91FC78DA678FB5221FB698
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/02_embedded_base64_payload.b64

SHA256 31e9e598f399210b2a1fc842a341951cb6d53611258f5073ba8d812a6ecc90ed
MD5 4df9dc59945b15f4ce7e3814369ffe0a
SHA1 a8edf4d7ca97ee99cd7d0975b0ea3483094914e2
SHA512 bbf7b1ebc295cd5b6ce82a668e6cee04df3a89130fb4a287a0377b6d287024ca216313a803e508094d1ac0fe1f3dae83ed9dee9625f83b18866022c42696ae57
SSDEEP 24576:giVfQ4IFYx58DliQ4pSwbS4uSAJzBHrq1ouY5C:9XI+58cW0uNpBE
TLSH
T1A91533B06D6DD8AF0DF0420CB09AAC0D7F618EC5A884D4ED91C577AB2B1AB5347578DC
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/03_stage3_dotnet_loader.bin

SHA256 3e6230425d71b4f8a1309e2788820e804d05bcc853a2e021171cd26386864660
MD5 0f6dd041ce017e1a321bb6e176f3d934
SHA1 7d64861dfe3254d00db915732871b2f35f90c4d0
SHA512 3649f4288866ebdd1d61f0d53a7f206e25419dfb284fc68d4b33eb1393efc4735ccda78c532f96c1f95a0d87e7c5eaaf576b6652464860360a8049cddc2c3ef1
SSDEEP 12288:GRs1UprMeEl7MaDjWQc0exH7y132drKGEImKUmCOrqrqcF7s/uC0vjPc:DUpweEJMaDnc0e97m3ErKjzKVC3rqcFa
TLSH
T165E423ACF7E9006CCAD3323B1CCC6D5975B6E4260D07E75C21DA568C7DB50AA81E76C8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Tsundere_Reconstruction/originalpayloads/04_stage3_embedded_resource_deChdnlU.bin

SHA256 81974ef0934006057428ab68853c0a9e8b9c8166f40346dd655d9a30882a542f
MD5 00f4c6fe981be645b62ec14b01a1e664
SHA1 dadbe833101c614106957522abf8ae5795b916e2
SHA512 6abdaa114b59170a29e30f7630b3c7e3e1080afb39810df0fd0e9c117c226ecb912388cb668cb678bd892c8708c3014388cfee32600b8eaedba328218eb16e69
SSDEEP 12288:yRs1UprMeEl7MaDjWQc0exH7y132drKGEImKUmCOrqrqcF7s/uC0vjPcS:vUpweEJMaDnc0e97m3ErKjzKVC3rqcF9
TLSH
T1C6E433ECF5A9106C0AD3310B2CCC7D5A74ABE5260906E39C61DA5B8CBDB50BAC1E75C9
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/05_stage5_kryvexol_rat.bin

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3acc8b8d88f9e158be9a0642b02c405ca91dee7a573c0feab975f2282194150f
MD5 0ab4f11673acad82da7f843fd882858e
SHA1 498834e149a3a33a890618a0ade78805914ed931
SHA512 fb4981099a301e5a306e8d8021fdf5bf98c4c5647b88644aa15d4b9972ebfa6a574ea8aabbc8b82438d810b5accc799aaf567102d334aa597a4102f203ccce51
SSDEEP 12288:5OqPKMTpFrNxUbeOVg1W0Te93RQbKdqe5eXRNlk4yV+UDMaoc:5OqPxPxqFV67yC5e5SvlkL
TLSH
T1AFE4120022E86CEDD07A23390B62CFF85B72C5125611C7AD7F42C65A7AD9DC11F2B5BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

726654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Tsundere_Reconstruction/originalpayloads/06_stage5_resource_underscore_p.bin

SHA256 2f6dd0196540445ca1fc2c65d77a3b16f44803f342abcba6f2c7ad1cfff47269
MD5 1c91f6612fd5be965b91804eec56de12
SHA1 625433b8b94966de25f2bf84e17abf8ce68401da
SHA512 870f27208d51b2587be97322cc5b0191108b0e330cf5ec2f39484d8935c24b33830ccb3946067e0659a17ab1aa2a9067af56be3dab4dd5576f1f1ba7f632ff6b
SSDEEP 6144:Rmn/6VNZiXXpviNZTpErArN/JgheGfirZg15Nzrgn1kFGm6TkmK93Yk:IqPKMTpFrNxUbeOVg1W0Te93H
TLSH
T1A174236552863A3B3D08220C0C108FF5FBB24B09DE58493FE7A74E6FAE995C176875A4
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/07_stage5_resource_pkg_bang_k.bin

SHA256 e63265fd09e59eb1b95268e5b85c4fd169d561cc4816f85a0a8d663f3ab82bee
MD5 0c95afb5fc7aef9c01ddbabcaa4f1d52
SHA1 b8f4f605e83ff2ad0ac11c00ae71ff738a1a2977
SHA512 da6e9e09c44f838f1638a9d9cc2b1abf1faba30529446fd2392089024a85297419e3283b05f3af4e68404e7f932ab6f9d240be4d588287b48e170269d1be0b48
MD5 SHA1 SHA512

Tsundere_Reconstruction/originalpayloads/08_stage5_resource_pkg_Nexus_IO_Core.bin

SHA256 d7f2f379a3f414a176e01da3aab16518b48800874150970e7d97c34a495f3252
MD5 da439928fb9a720707ce41d29b67a382
SHA1 99cf06058ab8954b685adee13ed60251fa6bc99f
SHA512 6c509dc8ad1382c0f5d72519c11e10ff7abcbe7c6c7dedbc797d01d88277c501b76b989a3a5c7d5fa040779bd08500a0384118e931b880e919036f6d5e37d095
SSDEEP 768:VKUNgH4Z3Fda2AU2oEgXRiueXDIcrDfufKW9CWaHXViltgNksYjy3i9gBrIl/e6A:1hgU2oRIuEDFcFaa1sYj4i9cIl/ehb+w
TLSH
T18E13F157A4E49AA56343580CF90E055EB6B1C99F9E0CC80CB50DFD7426F09FECC86689
MD5 SHA1 SHA512 SSDEEP TLSH

08_stage5_resource_pkg_Nexus_IO_Core.bin

SHA256 4cef0d649124e609a464174ae104ba296ad5d97cefe8e57edb5bcd6386821302
MD5 df00ba8a33035fd43d72a0a442ba21c5
SHA1 d401055ab07149b35c992478ee76b10ff3c5db1a
SHA512 7dca6d68298241569067fd99d0228df582b16825153d80455f1c7a3e7025e82c9e3d2696395ccfa6b29fe9dd04ea1fcf0eb2b6f35a354d7cc7274c851402847d
SSDEEP 1536:Axp8M2v1MXUivMl7I6Idf0mT3+1yQfAc+paL:AkM29M0l7I6gTynAc+0L
TLSH
T14563BE2434D010E3FDD38D97E529C188A7222FBA9653BA7B00EE798376D3508D4DBC89
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/09_stage5_resource_pkg_Nexus_IO_Ext.bin

SHA256 eaa92d622a7fbe1c530f11ab8016eb5f5ad8233c6080a581ed4f3f3fbbf34692
MD5 c8960a437a92a124f077ca3a531cdee1
SHA1 1ec9e6062986f1f42b5f64bb71f5c48f41fb5e16
SHA512 33b79e39d8b17bfa50bcf5dafaf38c10cc83ce4a04721c643ad3a20c3dd4c5edd4583b28b3d302069615985e22d2e8e36c84d4460eef2b6b230fe8ee8573e049
TLSH
T1FE819DC9A42439E061B3087EDF330D41C8CBDC0B001135AB2C026562D346ABAA7A9C36
MD5 SHA1 SHA512 TLSH

09_stage5_resource_pkg_Nexus_IO_Ext.bin

SHA256 13ced08cb4858b7663b53bcc6d6e9cb9d2d45b010fa9a5cbba5b6fd14af95d46
MD5 f688e82e8f3f570a33e1d7c864a76a10
SHA1 cd2464ea5df04554f5677be6fb4c0a8762ff2581
SHA512 98d388acec3403653556801430b6a34de9e8f3b91bbebb3baecb03618bd4045a61594ba49b56bbe0dd19225f63ea79aabf914a419d31229c97936bcf67272c86
SSDEEP 96:cbZKDs7y1awFQEs9h6r8H7bLDolsKJZLinl2Hr90cEvn/K0:8ZKDd17Q79h6e/3DhEq1vn/K0
TLSH
T1AEC1D38D729CA9DAFF071803B85EC1C8AB1683E64852A07330DDAE5730C76C19267DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/10_stage5_resource_pkg_protobuf_net.bin

SHA256 fadd472afa495addef41c1f50568a0588e3efcbf31c608abc69f30746aaad3e5
MD5 268175f6d332f7800b6be0ead2dd2761
SHA1 95052ffb4d5fe789c1a74af7ed77807cd5dfacfd
SHA512 a2aa3d7c325479f80cef4cdce3580bc549477a8e78cfdf919c7fae0a51f4e8a309b154809794ef94ea5fc44c7908fb51a3772a2c84a71bd508d71a06089c6167
SSDEEP 3072:j9c5G9H3hDzydiVXdmgXK2f4YrRJ7vT7TyviGqHEmsugSO9oMAXU2hOht30C7cv:j9c5eH3omNla2gIfyvakmsFuXUceMv
TLSH
T115242345E81804AAE8877F3DB89618F49FC8F13B9830B4299F66DECDD95F6498433C16
MD5 SHA1 SHA512 SSDEEP TLSH

10_stage5_resource_pkg_protobuf_net.bin

SHA256 8d5f45209b209b06d509527fc428e7d575b8f83cdbb9a4e0b3db7e19083b0cbd
MD5 e08f81f28c1d09908c844449cce3c8e1
SHA1 0049180922320ec9ba506650af5cfadb0236902e
SHA512 6896ff04fd684cfa0e9663a48ff5ae997bf07b6f7d0f66bc62d105f9383466b1602f2cc5d5ad32fb2efcf0f3baa9b605761c227ef8ff12417996ad0870504a46
SSDEEP 6144:p/9sOEOdicWgVxUqyiyak1795sKPiS9eZArXstuXUc7++W:35EO/VxUBtR79qAP9eg82UPL
TLSH
T16554F1CC359830E6EF4B8A56946FD640EF55E72A1422A5A331ED8E0372C3D568387CBD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/originalpayloads/11_stage5_resource_underscore_bang_c.bin

SHA256 4860216143176a94122bb1caf72d0ff8a2db16a6ba09f85dc8b1496ef353c38d
MD5 414a70cbefb282438f595f12a7134914
SHA1 bd6829e6d31b4c7f32b661bc5fc4320dc259fa61
SHA512 b1c16bdeea81daf66038440a378c776ac96dd77e365c857b15c6d5d76ca6d530d250d0466363ef30ea56444583c6f91cdeffe14f91a636bcbd378c5e318c1ec4
TLSH
T1D6B0120C11E00F0400673A402623B3F51A5467DAC8090D5325624B009131C02ABAD05D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/originalpayloads/12_stage5_resource_ptwrv_config_xml.bin

SHA256 c655763d06e8cb55746f836892e1d5c9c5654942b65fa9d7cb7a1a12be5a0f1b
MD5 ea4311e6189a40451f458c4adc870791
SHA1 0462782b5cfb13402417c9fcfbbe02efdbe4bbe2
SHA512 79887874dbb71cb6fe72102b9b04dea740a127263925ea3e166724caa4ad6e7a9dd98bc753032fd0d39f83b1de9be314a873a5328f9ce3de41df3a54a1fc9472
TLSH
T193F0BE62AFE1DCE7ED511A2F6A344E406E7C69DF624554DCF87209E00E69DC003632D2
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/originalpayloads/13_stage5_resource_LICENSE_txt.bin

SHA256 1dcfd2bfba12ae99501a5f53bd4a7b179ab1d7985b42b826dbeb0ad363ac044a
MD5 4ddad30aa044adb78ac03f9c55fe3258
SHA1 1989c8d4a5d1c3c977c62762f60bd0a94b41e322
SHA512 88b02202c7aa7c8c85bc9eeb8beafa69cb4b13dc9332231ff3bf7654a5ed0ae406a26417bddc79174d3552014adfb78684943b2acc7b3ab3ba97309caa087709
TLSH
T169112168725AA33207A403F0291B00EEE70F7DF8252FA5D2F85AD8152B22D1847F84B6
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/originalpayloads/14_stage5_resource_abr_dat.bin

SHA256 ecb85b54ead9d8e87862e5de1906de27bf11016b6c5c07e82560b6b0d452c28b
MD5 89cf6e3f16068d12d39aa3e05131e6ed
SHA1 4a8d4c90306a61269059c4aa2d32409f77f3d95a
SHA512 8f2b838290d2311ed796a191b79e814817a70b2a7f51ae1db4d6fcc84ec874bc77cdf706cc63db7092aac1036f8c4ec354fdf1c7409449ef7fb3aa2ab15f3f20
MD5 SHA1 SHA512

Tsundere_Reconstruction/originalpayloads/15_stage5_resource_bl_map.bin

SHA256 6f58704cf40382cbd07f186594094f8bc00e19665c0ecd13c081810a6d920c1e
MD5 e1b969c2994165c3933aaf2835da57cc
SHA1 f20da13dcb6746f0bb4638e687666ed2230706d9
SHA512 c6a1df23200c189bc3e895529b7191588c7431c950b99f95595ea9877f95d05ab45bfc8d2d47a82f2f26ed565ba68b5751f738bb4e6b20ec54053f9e866bf837
TLSH
T1BA41A67D006928F79298A51E92F26665BF74C64FEB7C73D4015F443D896CC66082E31A
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/originalpayloads/16_pkg_Nexus_IO_Core_decrypted.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 77a50d2a83fdc4b1f80446cc96baf79f452d5390bb81092454d56b013e7e1786
MD5 6b370dc461a964dfa8349d2092298f5c
SHA1 39459f0ab8b21ec94e2fa43341e8cda2a6df80b4
SHA512 ae561cc4e9a0d3b234bd944bef722b3b5f4b73e31c7582dc0242d7577e0b692f9633172badaba573e59db6ef3a2e8a4f41f793e3b2c011e8cf778d698c61f5b5
SSDEEP 1536:Y/LTbJX1amqBU9akQIH7jYLH9H6h9EAAMPq:OrmUsjIHQLF6hyAAMPq
TLSH
T1256395B15E7C97BDCB9EC535F055C63A8262814A3105EEBAC720F89E3F267A1610C4F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

72730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Administrator\Desktop\web version - Copy\src\TsundereWeb.Common\obj\Release\net452\Nexus.IO.Core.pdb

Tsundere_Reconstruction/originalpayloads/17_pkg_Nexus_IO_Ext_decrypted.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d78c19651d98befad41f74bbaa1aad24678951acb99508ff17f27ee32a5c190
MD5 06a1deb332e414a3bfd26c4184e8ca44
SHA1 3ebdbd87270d1ef798489b46488bf1876c727aca
SHA512 3ebc33844227e2b36222c705ce69bd72fdd527d1631f833cc38486b4459069414ae3bfe909d64c3c0345b50edd15b88e89b49edd114c89c9088207c50873da49
SSDEEP 48:6cBdyilp5vgxD4jbVEIYiCCo8UU2Lbbipr9j/0URmKXh1pDff71Rx45H86NF8h6F:N7jhgxD4fYWHUUoI9z0cmWN/kvdcqh0
TLSH
T1E8C19622DBE4437ADD760B31BD6B43901779B260BD13CB7FA84CAA1AAC572144A31F35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Administrator\Desktop\web version - Copy\src\TsundereWeb.PluginSDK\obj\Release\net452\Nexus.IO.Ext.pdb

Tsundere_Reconstruction/originalpayloads/18_pkg_protobuf_net_decrypted.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ca6608346291ec82ee4acf8017c90e72db2ee7598015f695120c328d25319ec6
MD5 abc82ae4f579a0bbfa2a93db1486eb38
SHA1 faa645b92e3de7037c23e99dd2101ef3da5756e5
SHA512 e06ee564fdd3fe2e26b0dec744a969a94e4b63a2e37692a7dcc244cb7949b584d895e9d3766ea52c9fe72b7a31dacf4551f86ea0d7c987b80903ff43be9faed3
SSDEEP 3072:yRAISQ1tRSVB3zpKTEPn6Rc0qus/6GMzzeSXLifsE2s58IB7aoqng5YnDBzs39AH:yRFD1niy6n6KwhO5mIYpnNzgGD0u
TLSH
T132545C0467EC4A26E2FF63B4E87C191807F5F55A662EFB8D14A0D5FD1953B908A003BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

294506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

protobuf-net.pdb

Tsundere_Reconstruction/plugins/Bootkit/BootkitPlugin.cs

SHA256 2374c1d987c9d8beba48f77033887b8774e111e91d80ee41e6faaaf9a2a65301
MD5 475a0ab26397d9e0e59424f72d0ea4af
SHA1 d8fbb038bf5ac1024698bdb8484b9729c134106b
SHA512 f372468d7ee8fccbb073f7d5eebfa56113618fa553a800717025264b36d73c2189995f4af0dcd70e8a9cfb283b59d55dbb1de033cc89d6aa79a0c7279edbd24b
SSDEEP 192:XKbKrvWdAamr00FzPMItoSd90dvcOuQy2XN+C0ve15hdm1lFfFykgIrCVyH+FI0q:XxWCy0XiyFf8crh03qFsHg
TLSH
T16D6295880AA0AF7659E39134B38FBA56F607B01B66DDEC18B99F031C4FC651484B56CF
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Clipper/ClipperPlugin.cs

SHA256 480cf8b4384fc9fb8526deb4eb33b09cb407b451a859729c8e37adc3e8136448
MD5 23800141760ab499f842a7b80dac4abe
SHA1 7084f62c2bf1bb32fdd9b6448e9f64e79f6f6760
SHA512 550beaccbd07b6869b1122028b3ee4fbd4a7a4b3938dcaf192f87d783af491edaddaa2550746d1c99eb31711ae62c7ad26917ab1073d099e5c6fa3c41d2e73b2
SSDEEP 192:do8Gw4gkgSA+wzbSdSic+lrl5h6aFuSE7PSW3NFkioCf9ZuwhtL:Wtw4q5E3l7Aa8MG
TLSH
T1EBF1A90821556CA6D0137039AB4720460BB649A73FDDBD727F4D82C59FED02C8DBAB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Filesystem/FilesystemPlugin.cs

SHA256 19cf8291b53008ba5b143f7b787c880a6493c24ad379c4f82873f6b3e5bb3622
MD5 6f886318d7224d22d0e76d88196d1403
SHA1 54d68ca599f153b44794e103addb12ff0026c59a
SHA512 f73fca785fa5b33d16a3944da98d447e5551843fbf9af0c909618a61d27d1f66d1b87030f907a8be253cb53462549ec49c2786ae177d999d9cede49377f4b6cb
SSDEEP 192:qgDdZnhQA0V23ymd03sX4/37asSKC51zfqPT0fokCzGyt:xK3sn5JyuokSt
TLSH
T1002242164CE5292E495362B6F7975C836F0B8057071EA839BFCC4212AF504649FE8BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/HVNC/HvncPlugin.cs

SHA256 c76156f9a03ca407a8c9237294d6e89f810e4e463b06547724a3fe48f2d14a64
MD5 b4027c6e9223ca51b102603dfd21d5bb
SHA1 9c85ef30581a093b80715acd99193fb0b4536dea
SHA512 208555387072603d8f727069c19bcae2c4ef764d54b9c4041594bf48b091b85c42179a29d2195c42b75ec4b57fc380c4c0907972fb2840895df0f1e71041a9db
SSDEEP 192:l53uwrEhgUCDoMIfAKzr6bVl9reNJgwCrCQZgwGXrSYG4JQqz5VCJj26OL:z3uwrExCmAKzr8SJgIigwml
TLSH
T18C32305E0A6A45644423103DEF8BE14EFF1B4D371BDEAD257EDC42229F88420D1B9FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Microphone/MicrophonePlugin.cs

SHA256 364eeffc8fa26260a35694e02217e2ae4dfc0261610ffd3c284b627636baf5ff
MD5 b6bbdf78cf2fca52e6d9e729a0aa4a0f
SHA1 5b5a812433155d0ed57d89672ca6efe58e41a4fc
SHA512 05a089d21c3e56b67d44a71de944d7c314005da56d372eba837c0b4806b9a10c8e5b2be9d0ca563cbaf953780e02febc4f022a8add211a63202475349c613d24
SSDEEP 192:iC2hFtlyASs1x8xSY1Ud4c0NS8crBtC7zXAQw3S3/yo3CGSENSTfztn/2c0apMSP:l2NllP8xSY1Ud4c0cn6byPTpph
TLSH
T1304294140EA39D2940235029FBC76D46EF2FD12717DCBD71365E67729F05088EAB4B98
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/ProcessManager/ProcessManagerPlugin.cs

SHA256 3505eb74382fc94d3d9425813f62e60e889b8c811e5d3c828a6bb9e5437db806
MD5 741980e8b0b9f6b32769aee238e1d21f
SHA1 fc4776b2c31ef8814c23e30c51907de4f02ca304
SHA512 e3a95d5fd7c2184444b97b470fb9e73633f21e0d571bb2c3e77c5a6a4f1e46829640ab3e65e385469d576470d30378bdbfb5388c98d68f8b569ecbb98b83a626
SSDEEP 192:KLUm4qxCfrsm79ikm3lmF3/FhzWzKeenSaciCDCzK/cOsiSEvqGCUspHECUyL:K34qkwiHeXZROqBTEf
TLSH
T1C1225508D8A90C264EE71065BF5B3D532EAB420747AEEC3077ADC305AF4C16945E87EE
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Registry/RegistryPlugin.cs

SHA256 0f4ba30131dd883a1ca80f0488325919173eb32cc506b4e30fc633fb32dc4560
MD5 0f7bbad6ddc6424476d01c4fdec1fd78
SHA1 1a05e7106f6ba63ad889b45ab6154944cd4c0efe
SHA512 a473ceaee204aad7fa5cb072a7bc0715888f4fe7f81d2d4279ee4d5937c963d52acde03a20c60c20e181ce5499edfcf67431d71cfb19495aa0d97155f7d6d9cb
SSDEEP 192:tfwFwOa7yIqdz8jDC2n29Wdp38PGECYuVeeVU6MVINwrbVCyL:tO16d8PHu8eXMuNwrb9
TLSH
T13B02FF158EE305170BA3B5AEFE061802AF5B55974E4DFD24BECC5181AF800A698FD7BC
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/ReverseProxy/ReverseProxyPlugin.cs

SHA256 a4f972b5962119ef89140f6774864b8a964ea6f2eed57eb6def9d999e8610121
MD5 d9109a5d133bb6f7b12446451905d875
SHA1 0fd99e8c5b3a6e85be42907db9229c4ce799d8af
SHA512 a408f08d5c5f8c64ba5df15f5cd367f9015c69fdb784b1ec7f41ad15bf896cf8b726a33a13891517fb53050f51166f479462fc692e6d46be4debf28904bcaeb6
SSDEEP 192:gcDxoxk7yvXarB+2vibgDTCvoYiUSCZU2CnGSFOr3:gKoxqZB+2v3D1a3
TLSH
T104E111541DF154A251235C7ABB5F6A83672241470E4FEC20BE5C7310EF3A8AD1964FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/StartupManager/StartupManagerPlugin.cs

SHA256 8b8361aa2f309bbf8d09cdb05df731b242ccda9458e539011cf5ec4c4ca2c6d3
MD5 0c50daf0fb368585683ad663b3b249df
SHA1 d84fb5f370d14e2302822ad6d462f191fa6db5e0
SHA512 ad9a1ebfb56e284fa2ccd5935db019be23c2d6e1cd9f92b2ccbf6df516534cf213443bb56cfeb5345290a68398972e94e2af0c690f5dd3ac40211d963dab6841
SSDEEP 192:KbtP+4hDVTtOB0lP6m1Qd2S9Cl2C6KCxNvCOam2CRL:Kbvl4vNr0KlNVt
TLSH
T11602540A5C120967DF632166AF8B6A612B7753174249FC247BDE1210EF4406ECAF0BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/BrowserStealer.cs

SHA256 98aba389b0be92bb27c79e4beb56215cf65a109b1623e754df7e93af37a96e0c
MD5 5a2380a8e9d791bd1f4a8c28ff3bd2e2
SHA1 4ce33a08bdba5b7c37d77938169e2eace379b32c
SHA512 680a870478a40827c3a303adee9407c240a0707179b96269903ccf1ccd87d0fda3332c3f406eafc99123c626d1b9aeced94ec08fdd394aae20d5661ef1b07f8b
SSDEEP 768:qTGGybS34enfmV2dn+Md+Q8OqEf52H3yKA+w39kxRTiF5E:vGgkftbqQ5ayOO9c4nE
TLSH
T1CEC2944A8CE92A541F833266C39644533B74C50307AA8D65FFDE4A085F4259899FCBFE
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/DiscordStealer.cs

SHA256 595e5ca608199dc7e5ae2fecfbe866368f9679c2dc9477cd3ad93e75cbafc3bc
MD5 e4a772ea348d8c10366651f49c27ae8c
SHA1 b2ad5073622eeb745378965b0119ecb9deeae517
SHA512 76be1bf160880ab6f67b3f3ff928ce8006c84ee448ec31e9dd90e74e80113f4e192e0baede04284c0374fe3cb8d504120f0accaba1de6d2658b667870ab60bc0
SSDEEP 192:BIXFsGtggNt8xSCrO3DpYuIaecEsEH5I0+CyiScSPDr8t0ZN81SCe1zShffqL:uXFF9Nt85O3eaoBbTNDhe
TLSH
T1CE328013ACD10814178751669B9AE4123B65E50B065FEC81BFDF87882F0402D2BF9FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/IElevator.cs

SHA256 82dd94beb8ab92182373462c5abd8eb31c601629c8ee39b8bcd0623b60b7fed2
MD5 dba631e88ff971ae84b0704d3bbbecbd
SHA1 816555e07599f7ed980761a318ee1ee10f5aa5b6
SHA512 ef2a25ceb4997a3f17c1e5744050bba9d2cded22a613481ea1e5b3cb6758a891a9b36dfb541fb8c576279d0ec4fa885f0c21a93a65f86e48c42153ee40883912
SSDEEP 192:F4gEzKKbTM2F289koNS5SjACJGknGFxtTrO26iqiCnvHmiizzNIOMWubpqYq0Cp2:FCzK7fFAa0y1EBuzH8q+
TLSH
T15B72D9842DA2DD2543C3507AEFAAD142FB0691270A6EFE0135AF5B606F45138A3BD7C7
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/MiscStealer.cs

SHA256 c7f4464f8577951b0f8754b43d2a8958fc2526576bc503b067b84d640718adb4
MD5 5e3d0e5085dd9533384726f04bc1eaba
SHA1 84221e91a2333c33487f391acd82b68667793212
SHA512 c92f7d0a0a4e71d963cb87d7c598e2c3daf135bf19815ddf1e403382b2cf86acc2f9dd10eb6e18da4b1f96411de736a9035e1740a080a11b584e4eede5ab7d3f
SSDEEP 384:qzuCjyC0lHKcaKfPqkxB8OhmrOD6sW0Wsp4+ws9/To:hCjyC6jfPqkxB8WW0Wsp1RU
TLSH
T1D79294169CF9086726933136978B35617331C2171AAEDCA4BEDE57048F049681BF47FE
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/Stealer.csproj

SHA256 f6fedad9cd2cd4b6322beef9c120d31f89f0230bfb33bcfdb28fbd923e5d55af
MD5 42050e0a1551761d7d3e9f1a3db7fc4a
SHA1 9075a9b4caad68505fcf6fcf26b4e2ac4c894561
SHA512 d46ad690e3c8edbc039a75efc2b292bf3eef221cf3678007e0bfbf41a85cb1cfb08cccb187f3ced24ba5166b7a3d8b084ab0bafd391f8aaabcc35030802ed90b
TLSH
T12A217B30D1FC8FAD43A411364692EE8F0E8D73E31D85485577AD85CEDF42D641113AAB
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/plugins/Stealer/StealerPlugin.cs

SHA256 a50f4893c57a4b4747121b8367939fce3516ce24c57e32b418cb17e125474af1
MD5 ff0628f236b5977c624e7f5e4de91c29
SHA1 153f0bdce48184f5a441ecacfb52ba0994b3a9ea
SHA512 3b8f4a299034efbc891edee19122f5a446db5ed87f00245d41ca69ac8232fd56d316f429c50f81640c10a9c3121d67c609fb191d9d8ff3590a4e9f3d0e362db5
SSDEEP 96:DjVe9US9TbKOugR1ZAH/C6vN1GSp6qcUSnL:9eWkTbKO3m/C6vN1GSglUSnL
TLSH
T16EA1CB4644B60F3C2213A0ABAB0B92537F51880B9E9BFC20FBCD105EBF0617519A8F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Stealer/WalletStealer.cs

SHA256 4b6bb331ebcf4c0cf4d3ae662298543ad83e2559f01f03c70f63233409a300b7
MD5 13a92f1ff57139601b9066583c8a4cf3
SHA1 068b62f374e8d84059b5cd7b08c38a3aa57206c1
SHA512 8f77f5d50242c4fdfbd5e3d383fc5a75fa4f4d2bde9a8b955e6f5c0a6285f083c8994e7e99a46ba091a41f97f0fb964ff92bc08cd3cd599e08de8414b9258dc2
SSDEEP 192:nDsGweJlCwozRW0W7fE7tv4hxiSVs9liSCyqSASESBSEdu1WMaaim2iUSxliE6gr:npweJ7qRW0WjEpYc9ldeWMak8w3R
TLSH
T1347273569BE52B151A93236E879BA4F57B30CA2B07E88CB07BCE47045F049580EF43ED
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/SystemManager/SystemManagerPlugin.cs

SHA256 bd1f97a22c91f2eb69c3ff26027bed81b49b070dcb5c6e28159511fc4f83986b
MD5 39f9abfcc34911e1f6c3be19e5b5c6fa
SHA1 87f01878f9107b20816193d4506026972a639735
SHA512 7c0e5fdb844c9ad625ac80872a57059edf272ec1aa3f79c2b6701656ac92671ae0e1f5e7c59e0eb6ed7c0ad48efc786fe1604016226b98ded4dff937e8fd60b9
SSDEEP 192:+Aw2yVNIQXzIQEFhEU4yBzIzAulDuk+blwQbuNHKUmgCOLYjSsDEtjEpc4QhVryL:+AFCIB14qYTlDOuNHVN8JDEJe
TLSH
T14152620A8CBA1E6E85635165FF9B61826F2341171749FC34F68C8145AF2C0E48AF9BED
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/plugins/Webcam/WebcamPlugin.cs

SHA256 bf615707f5636c10e59a4864ab555e624e487720c152a341b4d2ab6520e6a2ee
MD5 ab4504cb6915bb652abaf47f73577ae1
SHA1 8ca81a520a61e0ab13c0b24e48c071853cfa4490
SHA512 40dc04b935a303826c6fdf1180a5a565ce4c1b7cabcac2482228f644b3162e82c87d999abc966aeb9db5b0b182b2699c2eb31a2fefb8cd113583291eefe953da
SSDEEP 192:o2rEzVEnaAuQygSC0yiSCN/4GSFVEq6Vlrg5y0S0JCn4cUS9OL:o2rEz7416Vlrg+4T
TLSH
T1FE3231A41AA148175823502CAF8F6996BF27C12B5BDCFD547FCC0125AF510A4C9BCBAD
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/analysis_report.txt

SHA256 6e1cfb2496e5e2acc2b3f83199aeb964f753b0f4076053127f21c606b1a91f6b
MD5 0ee7b3a50e315cb80ef82114d2e3476f
SHA1 7752d01ebc0d506a4129f5a76f0e465defdc54c5
SHA512 1dfc7ffc8fceef37cbf71a5d2b3873bf01bbc5d63b542ec4446aa387f5c5d13c37fff7b74afe841513fd3e6cfcf0e3ae1ffe206aa50be637d3a90e873e722717
SSDEEP 192:GGWz2v49fXT9H76w0eIoi38a0v5B0hkZzjTiVp06GCVP:GX6Ah9bJvYld+hS8C
TLSH
T16E32A7372D54163946F7C099310F5691EA7ED31BD32134A834EE400C9F9ABACD3BE656
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/features.txt

SHA256 cb2609431e9726af2c39cf023aa743f3a4315937da1a5fe203ad7a13482af916
MD5 2df06c122eb57027237516c50cf6ad3d
SHA1 3634b0de6db59f9d5633a1d435b75e4749eeae6d
SHA512 4e8bf44eeb1b42cbb030d8889bc733c3aa804f07a16558a35b996db99ef85bb8072b9defc0c801c1eca9aab98592d23f550de972675b32e1d33c7cc956ef03bb
SSDEEP 192:rAljf+Brq95qShtnXmq78HuHpXBhyfnFbyy+uryv:q7+hugBCbXefnFyyXryv
TLSH
T1E86293237D4C613B07938187A5825952FA758008FB89B5127ECE60CC6F4B3C8BEE55EB
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/hashes.txt

SHA256 44f4c9a40e86b9cba2c63a451f4dde2d18450bc743a7d6e492ddfa222c85b8de
MD5 f79f449da7e2a72abc023a78f0f20cba
SHA1 a786899a243e5253e9a7e4073305261b1969bac2
SHA512 5dd5969c2de04428b7c14c414601af027b23308fcf0ed056480a912a2ae9f7e96eb98f1b6c6464d4dbd5b9d71be7503fd182d0429e9fca77d3e551e2b2ba1f35
TLSH
T1A411C01C19487CE89A78444A177E9E402D668A63C511D97F78DC25C09E5E778CA02A5D
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/writeups/iocs.txt

SHA256 8f8fd26550b57c985f349a4692668285997af243c5d296d932f9af19b09f891d
MD5 c75c4a359b0697a59100a8f66c77dd1b
SHA1 5f8394bc57f8df269550aa3c662f212b214d2799
SHA512 1a93ddf9d5d0da357094f0adabf0a09b04db6886d91b48d50f3c411cbe99737c1598ab7095eab3bae1692f0cd393c219faf5d096826f2ccbc0f379377ca9c6d9
SSDEEP 96:COyZGfhs3dL1N+xQfcCLA0oG1a2i02li7O3eqMRWMtmZzLbcSW6EfXYYyXp:EohEaM1jirl5eRWFb8PfX6p
TLSH
T1DAC11933294C98B4EFBE441A344BC652F77AC947C669A03D74CE40086F1739C97F92AA
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/operator_assessment.md

SHA256 1a31d38de03940168b0ca4cd1a824e112d581611c93fce104220e568da71e028
MD5 9922c20e90f78938563a0fe809e41624
SHA1 c38f3b19383cd1cbe5ebd4fe8c4aecaa94477558
SHA512 bb3618dfe69187b420ebe087bb79365ada9de830f0493d45e7afbc5f9508d1517c0c1ee32091b273b12a76e3831d40bb1e74a136f5e6794553a2cee38a65f035
TLSH
T16D31B5363115677B433B9687A04E06FED5CE6681934891596A0D53CCF8508B827FB165
MD5 SHA1 SHA512 TLSH

Tsundere_Reconstruction/writeups/plugin_strings_decoded.txt

SHA256 4a3537b6151fa6c2b1df3202b9959bd6a05ccf4d4d7cd948bc15eb4bd6bd259d
MD5 26024a4ca67c0a5fbdf3b3f53e3e2d72
SHA1 5d41d12424e3fbebd79a11e589d052f36022f871
SHA512 ba12c606820697f7a019cc07dd43bbe3dfb7247d9c9d1854c3a6bf6572e9d4ceade7005381f5956c4bb41599497f6159935cf06386c94d727ac035f76a4fdff4
SSDEEP 192:+1LwPJiTOYYDIQ1yy237Q10pobRBefiBlGwxlR03:8woTO/IQgd3030fgGwLq3
TLSH
T1ABF1D5B200C49C3413794AE581DD639C6BB69093469E785E30FC74DA3F1AB1B893ED9D
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/stages.txt

SHA256 862b361cd3fca89f01d7fd38a7a54a50729a19a6bb0a5166f7c4ed64578e4cd7
MD5 65df0b7d509becb6ab848fa8abe72396
SHA1 e884456d68124246fa93a2bee0f8266bfbb1676f
SHA512 dd5cdf2bdd18b6fbdf6410ea05f67d99b0ac31e1a2afd661311b59ef372c7d0f00df4636052c4d8760e3801e7920cde28b82bb2ba19f937772cabc9bfc924dfb
SSDEEP 192:WCntAi6sXlIuBRn+LX8oC3UqPITWu/E/UDtfh6xOPW:F+FYlIceBX6mrDz6H
TLSH
T181E1D7136D11C2BC4F6BC2A67267E252AA3CD527821439AD74DE81086F4A37CE3A52E5
MD5 SHA1 SHA512 SSDEEP TLSH

Tsundere_Reconstruction/writeups/string_map.txt

SHA256 edc0eb6304a8314825cfb93b6416ce08951fe43e58cb745d6e1a200a4b1ef565
MD5 d6f144e42f46d73dfe0d9fdb8654ff8a
SHA1 6c850993c61c66a3f1d207f9e80e71bcac7c47cd
SHA512 5d4cb6c06e6e68d9a3ec4c58802c6aca04b91d00a78b27512d799733761f7adfbddd6a1f0013c11d08df55957595834b5d2c1f12a7152892cdfc3e94efb19804
SSDEEP 384:hWXOMC3GfeTW2gg3EKF/1NyCQYAqxqm46Cax:oXO3vWG3EmLyldqkmjCax
TLSH
T14B62F6F080D015FDAAB769B656E861B86F30A715AE0DF09D34DEC2CE7B41332F919948
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer