Analysis
- max time kernel
153s - max time network
183s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 12:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Deskland-Setup.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Deskland-Setup.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
General
- Target Deskland-Setup.exe
- Size 260.4MB
- Sample261113-pj7dpsae36
- SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
- MD5 61afba3af36cc513c6232f53badadc2c
- SHA1 eeb735f70d9c7d57389f50788740e18d1ae272aa
- SHA512 cadc768163c85f8e943c87580363d856b5ab7c411f6f5076c5a12b572c2ec775578b5cc7ac3327a079a5041ab460ceb13388ad37d60200bce7a50aa978e37681
- SSDEEP 6291456:WSL8uRUdJ/HJB4C4r9Te3TE8jz91cunaJkAW7:WSL8E+ZHJBN2CE8jzkunaOb
- TLSH T129D8334D09457087F18582FD83A76E814E2EF88BE03F252FF164D70A27876D496CA99F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2056 Deskland.exe - Loads dropped DLL 4 IoCs
pid Process 1016 Deskland-Setup.exe 1016 Deskland-Setup.exe 1016 Deskland-Setup.exe 2056 Deskland.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Deskland.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Deskland.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Deskland.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Deskland-Setup.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe 2056 Deskland.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 Deskland.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 5644 msedgewebview2.exe 5644 msedgewebview2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2056 Deskland.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2056 Deskland.exe 2056 Deskland.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2056 Deskland.exe 2056 Deskland.exe - Suspicious use of WriteProcessMemory 21 IoCs
description pid Process procid_target PID 1016 wrote to memory of 2056 1016 Deskland-Setup.exe 93 PID 2056 wrote to memory of 5644 2056 Deskland.exe 94 PID 5644 wrote to memory of 1148 5644 msedgewebview2.exe 95 PID 5644 wrote to memory of 5564 5644 msedgewebview2.exe 96 PID 5644 wrote to memory of 5564 5644 msedgewebview2.exe 96 PID 5644 wrote to memory of 5564 5644 msedgewebview2.exe 96 PID 5644 wrote to memory of 5564 5644 msedgewebview2.exe 96 PID 5644 wrote to memory of 2360 5644 msedgewebview2.exe 97 PID 5644 wrote to memory of 5876 5644 msedgewebview2.exe 98 PID 5644 wrote to memory of 5876 5644 msedgewebview2.exe 98 PID 5644 wrote to memory of 5876 5644 msedgewebview2.exe 98 PID 5644 wrote to memory of 5064 5644 msedgewebview2.exe 99 PID 5644 wrote to memory of 5064 5644 msedgewebview2.exe 99 PID 5644 wrote to memory of 5064 5644 msedgewebview2.exe 99 PID 5644 wrote to memory of 5064 5644 msedgewebview2.exe 99 PID 5644 wrote to memory of 5064 5644 msedgewebview2.exe 99 PID 5644 wrote to memory of 5880 5644 msedgewebview2.exe 100 PID 5644 wrote to memory of 5880 5644 msedgewebview2.exe 100 PID 5644 wrote to memory of 5880 5644 msedgewebview2.exe 100 PID 5644 wrote to memory of 5880 5644 msedgewebview2.exe 100 PID 5644 wrote to memory of 5880 5644 msedgewebview2.exe 100
Processes
-
C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe"C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1016 -
C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe"C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2056 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2056.3420.8915666271314747348 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe13⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:5644 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView /prefetch:4 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff80c3b5fd8,0x7ff80c3b5fe4,0x7ff80c3b5ff04⤵PID:1148
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe14⤵PID:5564
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2248 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe14⤵PID:2360
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2420 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe14⤵PID:5876
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3436 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:14⤵PID:5064
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3780 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:14⤵PID:5880
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4860
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\19fdd0d0-2470-487f-8649-9669a65397c3.tmp
- Size 4KB
- SHA256 dcc78c8d2258aea9dfef10025d7082bba27516f791d6effc9fb850461d52bbbe
- MD5 b20d97fc417242c8571b4182f871a912
- SHA1 7d124bc85413301df871429ea14f0de1808aafa5
- SHA512 7437eccbca7ee7445ba7ccb14dcab05872066240e8f67cd5e0c8b6152750e19f8368bba748d1229465150b1bba49d8541f3150d72d60ede4a773d8b0c24f0652
- SSDEEP 96:9NkGSCOh5fmY8b8kh/cI9URoDoto+5FkBOci6RlMtyObZKUZvT4ZJJa:9NBS2Y+eoDUhiOcHMtyL0L4w
- TLSH T11FA17236E460EA375DF39685B6477B47ABB05213A6852BD4C9DC1E0C42D36DE2342C17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\85505ae4-8d58-4981-9912-8122174317b0.tmp
- Size 16KB
- SHA256 5840f918cdf832a833445236eb67d52b104e3e29ffb73860ca0e1b01b127ea72
- MD5 4cdbc3ad2711b91880aa56f15c0b606c
- SHA1 1d752891a627cb6dcbdb5ccbe2759ff6c8c0b0bf
- SHA512 4f10cb02f9d58f623faa2c69dc3b917a58bf9f9d5e8ec8d8456b8948b66ba3dcb42180119cd6fdf9f4222dd0c6f4802972197beac2b85ded0234a40ca017c470
- SSDEEP 384:p+OBqImmJvGBLx3NaFMJFNNBS7eZbstyg4Kg6rG:EcvGtlNKSng4MK
- TLSH T1CD728D3AA8659B372CF78689BA8A7787CBB0235381C577D4CCEC6F0E426B48D1352C15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\9f515f27-2bf7-4c04-b79d-f2086d9c332f.tmp
- Size 3KB
- SHA256 f344ff63c3eac6bda49d515f1b7f860a149af3b1808036f7a746a634dcf28a2f
- MD5 3222c98d972910121784e731855963b5
- SHA1 36dbfb38ecca80142ac639e4521014863f569421
- SHA512 23a410fefce778839f90c0b00b0c61c896647678e9aa49fb3d3b1aa13008b9f64bf61bc6730834f805f502f27f45cd2db10b0cbe5651d3b6458e23f0e2fcf8be
- TLSH T1A571523BA574AA774EF39605B9863B03ABA55063A5823F94C9EC0F0D01E72CD2342C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 7ffb122abc033b2f0c0a02c601f85f33f94486160d95ea33e053e797fbf7d49e
- MD5 79c8b970a02b7eaa5138ea66e778c882
- SHA1 5342e2f126a1c75ea7dd69bfb61a3b9cca3f1e7c
- SHA512 a23693913b18c6758fe6924ecae8a412fdb70b8ce8b0271268cf8ee21f76306d8748f95a613cdee6d7e64c47b7a72885d3bc97275df0cff735bcd0b457f558d0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 e50c68b24c4de544b72e570152fb42d6c77b6d0be365e951e57c52985f7161d6
- MD5 8b1835d9f6416aabcf104144cf48085f
- SHA1 cc557d95c9dd6e682fdd8eb7e25324484716cf5a
- SHA512 b4aa99d2613d4ee2039b55e72ec8f9d565bd28266158b7ab21ba70b019d0dd74f95170a169889b0c5109f060fd146bc6568897b9e0f2b8f5c67800fb742cba10
- TLSH T174D0123633014334C1103133002361890801E52F444550407428A61D1F8405019024C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\1913e5c4-1bd9-408e-b15c-64fc88ac1f25.tmp
- Size 6KB
- SHA256 afcd007eeeb317f63cef96b6afd05c015e5971ae497f6d850e657b05b3297fd7
- MD5 1fa3d064166c643c036e591f8f2dceb6
- SHA1 80e53ca2b6210660092df9b80d27ab71a03f16ab
- SHA512 6fe4efafa01f515630ec4778b2a11e87391d4093599b002c8beeec0c28eb1f8ce84410e3657b3de5c851adf52922fccfce8701289d6f768ee8801a8218ebabe4
- SSDEEP 96:stNI/dyavhnb9Lkkdo5h16ZdFs7/x+6MhmuecjQRMkkjepZK+gpU928XM1C7K:stNsLjlooFsV+F3QRwjFXeG6K
- TLSH T1B1D1A6025E24797B4CCBF158BE257B42E3F5503275D21E58EBF84A2C04EAADC6217C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 216B
- SHA256 eece69d29574ed8151e522e1348ac00970f8187d4532c607bfc97afe27129767
- MD5 00eea402a1f31f9efb4fadb12835f59a
- SHA1 9071b8e39853f9e84508239d67077fb874116c41
- SHA512 e08efea85d42e82fbf54733580161823417aabbb28272f2f14e64eca22107d80bef909ff79d9c4240b7cc7bf888889dd2579be1ba85a13b99fca328616b0c759
- TLSH T113D08C20441C12F8C308C9F28CE9F04A7C32382C12730F13E1DD5060F4233814615069
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 19643b6fdf8dded0c2c600cb800eeca660a17426e3897519d70ba95263335315
- MD5 3e1c531024f194a125b24ac520fd0263
- SHA1 d6e48c07aadba997bd2cfd0c5b8240bd2289cde3
- SHA512 53e770dcd225617ad221406b91b04c0002c45281fd41cb8688b4f91f51e4a2df4289aaa8c94bae1cac697ec70b29daca1e102afb58f25007c3f5ba7c742a8f1a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Extension Rules\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\0afa1091-7f38-42bf-8760-68604a8f91a7.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\Network Persistent State
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Preferences
- Size 5KB
- SHA256 ee65ee5007bde3ca63f4df056e208a20bd82f6c2c648cf2ae2fa1a13b5957573
- MD5 591f59cd118679bee1198edea3b14c4a
- SHA1 98206a83b735cb0e3e2fef9c0f494a86de108de4
- SHA512 908cd7462eb5aa1e1b8811facda404b14442fcd1b4eacfaca8be31e704978000e034dbddf634e209b12ac7ae8ebb4db8eeb5df56108ce01535aa2ae2951172fd
- SSDEEP 96:rNI/dyavhnb9Lkkdo616ZdFs7/x+6MhmuecjQRMkkjepZK+g628XM1C7K:rNsLjlovFsV+F3QRwjFEG6K
- TLSH T16EC1A6075E24797B4CC7F14CBA257A42D2F5503275D21E58EBF89A2C08EAADC6317C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\c84b8fb3-efa6-4421-bf7d-673cb67539ab.tmp
- Size 6KB
- SHA256 e2abd64ad78f3f705d1f5a45f0c5874bc75ff3f3f45b9c881c7fdb8f1999dd05
- MD5 02ae33ceb2e3a5107574cdf86ff5fdcf
- SHA1 94a0eec2df7381f2288e24c0939b972b6fe624a0
- SHA512 4eb3ace8c288c3184adfc3d5228e587424665351ce29086f15dd11840db226576b9bcdac4a135798d342e64435f7f792a2131d092607dd313b9dfec9ced70395
- SSDEEP 96:rNI/dyavhnb9Lkkdo5h16ZdFs7/x+6MhmuecjQRMkkjepZK+gpU928XM1C7K:rNsLjlooFsV+F3QRwjFXeG6K
- TLSH T142D1B6025E24797B4CCBF158BE257B42E2F9503275D21E48EBF84A2C04EAADC6317C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Local State
- Size 1KB
- SHA256 71f4276e35b45739bdbd3856b1e1ab3b9e79894bbd74f7880bd00484893b7a8a
- MD5 920b9156f1b5550b353c698a3dd20545
- SHA1 a347a07dacc5246fe72f786e1011fee2550fcb1d
- SHA512 276ced0f4ffa9c6b05397e87f4fb05ed486da8f676ee2f135ab917dcc8d0c5810557719ae9974201ed43bb44d8038fe6cd0c0b5f3211ae13cea2729449d7641c
- TLSH T1FE2195B3E1A45B73AEE73306B1467A535F30106791010F0084DD4E1C01A71CDE7A6C33
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\a39aa38e-0b60-472f-b3c2-f4468cc2118e.tmp
- Size 3KB
- SHA256 4ff69c8a37a6382b42ca35377f940fccb7caad04797826170820ab2d078a2952
- MD5 84bc25f0e67436c6c5d4202d78f65c12
- SHA1 fab78bda050df17790d94fb48c4532913be11777
- SHA512 24adc23dce70b0c58c82a99ac28adf7245c7bdddb00ad685f7c6724cd0762a6088be7fd318818d1b0b2b152dae56aab4ba04d6a4fcc33811cfc4a4dfbd736c62
- TLSH T19F61873BA974AA774EF39A05B9863B17ABB55123E5823F54C5EC0F0C01E72D82341C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\c251c255-dd3d-4623-976a-f5380fdb19e2.tmp
- Size 2KB
- SHA256 f4f486e90cca52bc7fd2296fec718759ce15ab2d91010642dcaa8903ddc54ef9
- MD5 244ca6f90ba2fb177cf03db5e0c38834
- SHA1 e7323a78ccc096dd633e90faf89ec8cf7910c3e2
- SHA512 72c4f82e54274319ddebaec2ac2c0b2618803f8936c7486115e25313004b511ccf684a183dec390ea621523d5d5bc2cd96e1987f5cc31dd7dc3535346eef3e91
- TLSH T1BB516433A824AB778EF35605B94B3F538F7551A2AA522F1089DD1F1C01E759D6342C37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\host.log
- Size 2KB
- SHA256 5d1b35700c7b011483a5b456837e61d9c6f1f3a8c6780034fc4514e30949a9a6
- MD5 c51c79697bc9803cf1edc84910cab80e
- SHA1 13e8833b3749481a5dda36b3c58ef12b82937a8f
- SHA512 de5fe8814113e05fbfab99a567ef29186a49547fbbe71434faa70a68f012a1526384511bcc50106f995f5e451652bc2b553d90091d7d8e4f6b7ab519bf63f31f
- TLSH T1264168B195C400BCC1E7C9277126DC4DEB5735B2BA0EA5C9B714D9486A00826B9FD45D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Deskland\host.log
- Size 3KB
- SHA256 42e57d5e9624e573eaf2640864078d2510c51313fd2cbfb3c68ed1cd53f80d01
- MD5 4c1f8acd32338bd4f30e86c0ac6327db
- SHA1 d1de60b85bf58ccd41491bd7411690f5bf7633f8
- SHA512 e78163c9a8ec2a051d13c42754575361f423d296834969cdd18ae26164c28562f2aaf13763722ea602b9d869ef300abba43d2d737e0604d35e168d359205b58c
- TLSH T1C97186B290D440B882D7C9297137AD5DEB9631B3BF4EB9CDF268C55C250043AA9E984C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\Uninstall.exe
- Size 105KB
- SHA256 ce7df6fb236a12eb1cb77afae3181f9d8a99301667ff7f60189e9ca14dd304d7
- MD5 9c25ace8f4d54aafe7a654bedc754e7e
- SHA1 5dc94c551937bed525fbcf622e915195713cfe13
- SHA512 581a701ab91955eb0fae1f6a530abc7dfcbd1fc63c71f230dd115a59224653fc87a3fc354d922f08d72492597230927f2390587403361d7e54b5c6729fb3b7b8
- SSDEEP 3072:ulnffjVrwUak7ux4z+WrItCRsM8QB78nC5Rsh:ulnhrwt6zNrItCRsSyC5mh
- TLSH T124B3D10567E0C433D0261B315EBBDBA7ABF9B211556C4B4BB7006B6A3D63681CE1EB43
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
- Size 211KB
- SHA256 b9a0f616c59262c6dd2a5c0c71b41891d00c237b71b156813202e80aaabec242
- MD5 4ce1e8dd3e1fefba798e7a8e95d48aa2
- SHA1 d408bab14263fc361f0df4deda399e20ea14fb55
- SHA512 4258953266bc0c5a975997e2a044791301d796f0c2993b66112212908e17b7c77ef4572f055af5cc0dce71d2ad94640b4dde31c830ef165253b45e8374fa1569
- SSDEEP 6144:xyogZS9e/bdgP9wh0qgjaFvmIZRcaSFqbere20qfvhtpYs5tC+zNr2:f4i9a0qgCv3ZRcaSFqbere20qfvx7XB2
- TLSH T1EC246C2873EC0A53E2BF9BBD943153248B36B543DA5EE74E4C8464FC0DA33D09A516A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.ico
- Size 39KB
- SHA256 eaa4b308d2ac37d26edebfbce4e0664c9463084ec1911b5b953728622996ce1a
- MD5 86ba585455fb732d0a664b7a38e8796a
- SHA1 5e2c8851de6330a8380fc314eee05bdf71c4f149
- SHA512 a01904de861be01b80cb647438efa26647af09ac35901492aeda2242491451b1182392b08429a99937b8395424a2a6c7d7387aa5a507d31ef7a40dd92a79b039
- SSDEEP 768:bSTtrgc0rLsUZvAltlpCOkf19tydI45esJgsRgcjior/v:bstWsGvotlcf1uy45B+Egctr/v
- TLSH T12103F24759C64522D40E3E292627EE786DEC07A2D51F088A9B16F8310DF33BCCA87D67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
- MD5 76a346cf8ff55b0516151470cb441a73
- SHA1 b1fd2a9dc354da2f34e4ade7bf3c4fd02b12ec09
- SHA512 ba5450ad79215d1a3423f5ed624a8ff188b5227d322e612a6eb4e089200cc8b4bf92e2e7c02f22ba1c5400375b476ffe5f0252666a60ed784b538150aab97e0a
- SSDEEP 12288:iJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIG:iJ4dCXzRKX4EcJAD1RrQ2
- TLSH T136E4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
- MD5 256624e11fef500d49e0f421138884dc
- SHA1 155e5a0e2d501e6aa4069d8662a757a7a9fa9066
- SHA512 a2d1a7d9bebc6455e0e9ec76a08b8f5c97752d4129c00eb8383a8cc7767a9dc8803d81f5c751f1ed5f3c3787c5e63fc715dfd1323584a1274b32f5d954d92681
- SSDEEP 768:yLQNb2vIYymJ22Mss+5ZQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxi:yob2vLbZQ+ZDgcEST3p4JjrjaeFSUyaG
- TLSH T12F033B4087ECC517E6EB5FB8A9B491610BBABEC37DA2D3980D84B1D90C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\WebView2Loader.dll
- Size 159KB
- SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
- MD5 0243cb84351c92ddea3fc0334f3a52ae
- SHA1 d80c01c98f0ed8af1be111abefcbbf6c9f3938bf
- SHA512 74314c87eed82b1c9415462be3259a6626599047a18821cadc73c0c0c62cbd54948d6311ad4de9955fc2d4f2098ccb17aebeee8929ac2741bafc38ceb51a9585
- SSDEEP 3072:d94EUQHTN8gVEeemaXpNbVf7W5AOVU9dPTwnhrEtJe6ub9VY/3A:3dzeDZNbbVf7W+cnhEtJC3H
- TLSH T194F35C57B3E500BBE1B7C234C9634A56E776B8115B609AEF03A4427A1F13BD0AE3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-airy.png
- Size 1.7MB
- SHA256 527cf4d2a9c21359b4340b6c70a8a9d25b6c708bb9bdf4556c5392325b31a12e
- MD5 eab60862c5734f7c8430ba0c9334483e
- SHA1 595b90a707dc48fbb95c122c7202417bb6a2b1cd
- SHA512 52beb1e523e8ebe7b00f0ac99172cd0a0aa99510c8bc85f85c817fe214607f35895a4c3942b7720a67edd5529b94072c1c17e8eaa85f1bc7142f0d73def62804
- SSDEEP 49152:iRSXWno1Ezcci9/dqBqmM0PiBkTXIsECzwc5emFmm:iRXnomQci9/dq5M0aBkcvMwm
- TLSH T12B8523A4BF4F08E7D69DB2786324138F83A3B5C31546782CA47E55CB4978A634879CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-arch.png
- Size 1.6MB
- SHA256 7172059c8458feba4f9b9084d521e9d84154091df2ab536d2e16c4a654ecb627
- MD5 b637bebc9348942d7986242770f6ee76
- SHA1 de4a7d5ae899a33ce42de7315ead1aa146453d2d
- SHA512 b72fb59d05d77c2ef5b21024d29aa12646af7d8fd0cb5cecaf318edf18fd73281fa2186dceb0a0b0fee394dc68f0d83bc005b3543aa70353ca801e19a9732e99
- SSDEEP 24576:Y5qzHlJWM832bMKgmw0r5d+Lrm78/V8GqiAF0Kn/xyKTfDmfmrk/2/IWOXT13eXh:3lJMUMKz75I/8Pn/AK9B/IlXT1O1pV
- TLSH T1F27523E4FB2F0AD3EB6B62F4B3B5835E83B111832899A5BE447503CE497539315A344E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-curved.png
- Size 1.9MB
- SHA256 f15fccb574e7e1e1026f8a08216f56eda00489cf824ceb0960c66fbe6ac0e076
- MD5 479792aa6b86596461d100684d52efc4
- SHA1 35a5c5d3111123aad1436030e3e6fd628a7e310c
- SHA512 f79fe7879a8345df30d7500094f76299cee9a023a52e4b90830f07b5778d31c157b94bc42fadb48b267b4051d9191b66a26ba7fab2cc60e1102ff5cf09f34034
- SSDEEP 49152:IMynFKoRt0AnqkD8Uqrk0Ot0OuGC7bKhOKziDJt6:ItKoRt08ofkHt0O4SOt0
- TLSH T1169523FC7B3F1CEBEF9FA6F46BB096A7063110836C4AA5AC01B595C3D655B4348B2049
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-v2.png
- Size 2.0MB
- SHA256 9c103d3b3fe5beb85ebb4c0c17fd0c6d3330bf56a3eb0c45db9f6534b754a5bf
- MD5 245a8e40268fb27a1085e1a9c32d81d6
- SHA1 f983c1a499bca57042a83ea5d7641363756f8589
- SHA512 6046f824a9eafd7876be4b38d58a1098e8622d852bd36ede567009e445df04e66edafa37cba3d54454641cb1c5cb18d891750135d6ec98e4360218bd0ff19550
- SSDEEP 49152:9iTgNyMauYAUGJXp7UhwqNLua/8BRKnDxSLj/cBQ1I3tC9FUrbkA:9HauTNJXp7SCAnNSLbL1I3t/gA
- TLSH T1D0A523E37B1F548AE9AEA6B533B0161F03E3B6D718166864086C1BCF4761E178D32D87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-windswept.png
- Size 1.6MB
- SHA256 6cbebd49e7204800827a2ea798e89f9a203e7ee09281978c07ffe88943024c96
- MD5 0dbb2edecd9a622e96f1c4d8ca404fd0
- SHA1 ef016cd392d9d5c3b4c2e103852b78df056bb2d6
- SHA512 6afe71fa41edd0db103ca10b9355fef9be2c9c7b4f79c0cf71727900cb7621d053afa98e8cc6cb11f7ccc3cd4f23d800bb98f68cfdb75373db82845a0fc0c520
- SSDEEP 24576:8RictoQ5l+SCS7zZzSwA8mtLj94oPjyOCPxUGGXpp1CYg4KTcl+mfhVRYrkkdNLB:0Z+SCS7zZz3+jTjyO3X+4X+mh8j
- TLSH T1797523F8AF7B1D93E61A61F563F6536A8BF001D21816762E967213C7C1493830DF298E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.css
- Size 3KB
- SHA256 a989d840870f7854697cbd6228e0a38e9172e2994162286ff9cc611fd5e15780
- MD5 3ce2a9712d4361ec2cf6c8f42710c2aa
- SHA1 3a1c0401546ec38ce41b39561c204f793f712fe5
- SHA512 8976e523faf6207742b032fb43754c6150f67c86113c6a1a2e1c841af7fcdc8b31ae3d68ad6687e6d94e0de3e18bc745a2532848e3a8aecfaab1d6c27ac55228
- TLSH T193710F23533062ADF897EB707796FBDFB20996436019A37C6C90108CC9CE7B2556B789
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.js
- Size 17KB
- SHA256 403462e8825cddb15102468a33fcc3071b102505dadefeff72afd92ee6322bd0
- MD5 b090731c45ed352897e12b566e6830e9
- SHA1 061674fb069af348257ae5d575cb460583711ed2
- SHA512 bc571ebcbe27cf3fa39b9c585951202977c624dc7f727edab0dbd9476cb6378515e3121b8bf7315bb1789cc6e1fdf77985bf7a11be0ae341074ea511a8dad744
- SSDEEP 192:c8DmKEuUADGnVxg3bKnriFqo1eA9Xxg2eQLucQNB98+es1EmxPv9p7FbLVdS4ukQ:c8DzdGA/T7ZxyS+L/72F
- TLSH T16A82449296B90C32F671113ED05572BB2F2B8811124AF9F2FE5E06043FEC599E3B64D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\beach-regions.js
- Size 1KB
- SHA256 39e6f5a4f4a2785c872720e2438d14547078356b88922e7eff01e35391021509
- MD5 866b9bc65d2e1a8757e295794d2adebd
- SHA1 213b825e053489c102ac63e1b1144533b3e18e9f
- SHA512 ad67fd700dedcc09eef19d654b1690c2332f3e26bbe0cb77b3d35560e632d01511442ebd3762aae1b5d3b2479dc0e1d9ca41c6b27aa3a2df23d6d54f3bacdc8d
- TLSH T18921331D012F000A42A6E64F4613981E9E59F093B20BDCA0779923940FBD964E5EEF69
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\bug-report-image.js
- Size 1KB
- SHA256 f7d0135f4dffbd0c61e489ad15f947a210975480c873ec5875df527486c41ca9
- MD5 64919236cbd664e4a02b4ddbab7226fd
- SHA1 79309db603637446d759e6813a39e1a4d856b1bc
- SHA512 5747da7e957f0cde728f97a51d3fac83ea6348fcadc11ec2f227468cdfbe2a7d09462140d1373021c58f71a84818a041bdf839fa6c2ce11223cf4256b87fb665
- TLSH T1223156A40573717F4A7221A7BF4FD009D5D0640318B9C740360DC214AFF865563BDBB5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\flat.html
- Size 69KB
- SHA256 2de08114b5e90acecefcb45bfb403447714879e109368d640943e508c5b0aa81
- MD5 96e0f864685134c73ab20a4a26ac065f
- SHA1 0db75d89733575c5163e987cab348b30a8cf4010
- SHA512 96a172f3d9c536e1d969c055d4c3441b2300ea1a7422d5ecfedcd588b7a3e386d1954ccf5532a49afa517cd9c52a8c2d965963193d2e573a6a8bf509878bd8df
- SSDEEP 1536:DF9iMyDA+hL9iM1t9Ch5kQGA6IikUEytE9a7oT8mYXE0K:DjohPfYh53GA6vkUDHoYE0K
- TLSH T16A634B4612F5143C512BE1EA8F43850D632ED453B906D998B91C42208F9B7B9CBFEFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\en.json
- Size 30KB
- SHA256 34ab3f7475d3fd0af41c84dd1a01e14a3e847b82387803a12e4ce4727b86e457
- MD5 370cd78dd439b7912f97e1a9da38387c
- SHA1 43b02ab9a88e864acc5c3eab49be6beab7620432
- SHA512 39944f0719973fa30e35c6faa4739faa2b6eb3b86407d330c0f8c117addcb207e2ea6dce65ab149038dfc9bf8b590c8476935b99be187561838dc8d27819fee8
- SSDEEP 768:hy9OHVIS4Z6pAe9oZG0mrpX3yEMM2qbOY3OYUNWwQmD7E:hyeAe9oZG0mrpX3NPk6qE
- TLSH T1A0E2A32BD7200E374AE132A6B86E9783372540A70F51382C7A5D820D1F5F91FA6B75AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\zh-CN.json
- Size 18KB
- SHA256 c1de13c72c1ec1166a711e7d3e5f64209a93446b3b7e6d8aa231506def8892fd
- MD5 1f3deb06ee68fb1c696dcc38213625fc
- SHA1 f0d409532f5a1e4a18fb3424bc60c95418768abb
- SHA512 97e4178773a78da1ef294fdd7c009a5e69986c5cf14e64bbd717bd91903fa4c20a998d6b981f6b0d6f66c85aee2705c4295ed187763008682071536b16fc89aa
- SSDEEP 384:6F/dziMb0LdmkhiMgXjbstLXzntcfW356TPIDiYm16j:8lziMbSmkh4jbwLXzntcfW356TPIDiY5
- TLSH T1B992C675C3F44EEB9448B3A41976521BB0059A9F2C38381CF7820D5E0F8F84F95B869E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\maldives-palms.js
- Size 9KB
- SHA256 ed2a33da1deea7d2dd23cd1377bee9a4751b87f8dfdef98aa1a116aa781d2d1c
- MD5 8f77051c495ee2329cbf3228d9bdfeb1
- SHA1 fbca395df986b2d5710d57cc87395b3db06942f4
- SHA512 93af98d91c86a3379efdd86bf57d57b25461ade6313d6e7817b51e94b3f09b4ee696f2b0c86c176af4657e611c4fa4968196b639f1c840d3424d8bf39cd30bbd
- SSDEEP 192:ROVcVKjJTuMyeM0tl3EfGofIxeba32/HJZ0+DBed0xFcm5BuBsHFkA+C8:ZkvLMml3Ef/ba32/HJu+oQFcmjlkA+C8
- TLSH T1A312D805127B24046153C0DABA4B804C25BDE053B217DB7A72DEE2604FFA539FBFCA98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\preview-runtime.js
- Size 1KB
- SHA256 e435aa03f901085096e2f85c1f277a90ebd612d0b4a00d06ce1ae8f8376d9121
- MD5 739b948c7f4b08cbaf761a0ecd6ae3dc
- SHA1 9918c9cbfd80207c6d4292d76bac8eca4f48e902
- SHA512 788a2b19f466829923e647b1f52df9a5791d1ced05742b5b4306c8794b9776925bc5073bc0d8b828198f9c92618d8575e0251a7049e653e828daeb6308794b1c
- TLSH T19141B0E911B6213444FBB33B66AF73713F2850226209D5A0B69C2B242F54517E7E3FE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\render-diagnostics.js
- Size 7KB
- SHA256 f578a6eef2bf00cb9c37c332d9ef00e7f0216af5f90c7c3f7ef8f302c2bfc3ec
- MD5 f02f8bc9f6c8d5f36cbdf7ddbff7b0d2
- SHA1 c77fdcbd55a258534c451e637bbe1bc5a802abc8
- SHA512 b77374b8d623cc251667940f357696a239c06634c20bdc17e2132621bc9b25a572b4a517cf292b049b93eed6026b750cee8adffa9cec7781718138347d750343
- SSDEEP 192:HnLWhmafkQtd3Qiky46xswaU/E5tVWJDZFaO3j5D2QG7dh9AVvMK5x2YgrxQSm4K:Ktew3xNSeUiMscYgo4Yn
- TLSH T144F1C85D29B26424139360693A8BB005B735EC23B209DCF0BA5C8A545FF8DEC53F678D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\settings.html
- Size 77KB
- SHA256 8bae20d2f9f20b5b0daf5973ad52985f13c0f26d2e23bef211d02450b337ac3b
- MD5 236a670783642536eb4271ed5752a1d6
- SHA1 6973030a5d9fc460738cfc120e9e80b1753a7741
- SHA512 8b59b2c7291defb918033f5509c064bac6c581ace77bd2831275628326736bf65438077032a652b3d48a78ae07e6e84d0aeabed6d2a0e9b4da584228ffa438f0
- SSDEEP 1536:Y3eqi8WvJwL9rzEcBH2DBftCQKwqVfZBi:E8IBWNfoi
- TLSH T1A2735C31B5F910399833D2A67A9BE31B771DB80391069170F9AC05588F8DDB4A7BF90E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\share.js
- Size 30KB
- SHA256 f0145c86e29c33984caafacfeb8163546a1f76f46319d609fcac6b425abdce36
- MD5 b0279ad91e6130b8097fd0dfddd6fa27
- SHA1 6ee4d68871bf0766509bfb1def0a51187dd34036
- SHA512 77ab6ac74f68f824741d3e2190d7efca227d08ee0e1abce0edbea7f443d49201e607264efab96f69b753f0320b523aaf94acdda1146f3548c56b53eb8c2f6fe2
- SSDEEP 384:D8LquJAL0O78IHG0e0IPAKd9/Vren3iF7EggnbWsDK4eRfz/CHPNhjp:EKjRvMden3iFLgnisBeRL/kNhjp
- TLSH T19DD2FA0911F338354137A1F95B47D81A6325A0237A09DC6DBE1FC3606FA2079D6BEEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\themes.json
- Size 66KB
- SHA256 d55d1dd4ca1abcde5812ce6574f58a2222aeedeca08856c59aa2a7c7b5e8090f
- MD5 5b535fb59890cb197af0cde9f82a3008
- SHA1 6505d1aaf560ac2b90d66b49ca5baf45fa26a4d2
- SHA512 afa7f63a3d5bbb6de4944d36b782a08819e1d382187d1e650c7e508a3e2eca88262260e4537966768f0c4e100a7c2d09e017d72c0ec82ad42fb803979c4d160e
- SSDEEP 384:hnyxbpFqp1SS+pFqF1S6xSAggsoDXiU0rrEaZGbX79e/u:Q7M1Shy1SBWsoDXH
- TLSH T10A638A77E058AD6B347963E89AB9930BFB519B1F9046381B373C288C4F3F5164488E6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs-data.js
- Size 818KB
- SHA256 3368bc499e2a4a8711e3c3b8bf375bf224dc81e67c753ac49a38fdbd92676797
- MD5 c5ee76de295e1d266a93c0b9a6125a8b
- SHA1 272cc95598d866973d0c77e7cc4ae9f91de0f3da
- SHA512 34a3cc39b217b0ed88d5c839968971fe205985025bc3c21a4326d960ccb2fb8870824dd8e0b22659ad47cf18d2520b4417f8e90081bb94951a77bc89789a9dbd
- SSDEEP 12288:hDc6DJlzG5rk2HxpS0To4QRyceke4ix7OOFoNTVyMNfGF90wcutlLj:FTerk0p04QecbNfGF9Gutln
- TLSH T146052334E5937FB2590C4C90E03E6D5A6F908CA7992198DD403A33DFE5EAB50ABCD874
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\beach.webp
- Size 65KB
- SHA256 017578bc5c8701fe25258b29130534c3d6c826bf0bdac407d627b6a83459058e
- MD5 6c9750c4510418963a0dbe3b9d30a06d
- SHA1 3aef3d585477af80df4d4af741412de411e783fa
- SHA512 c209b3772b01177e930a7b83b89666d1d053f505df13a07324bc20d5c874fcc577da493d22ba1fddabaa4f62d119125bcf9023f9af9087cb54cee98b647dc466
- SSDEEP 1536:XS8XzuxETj/kJR2fmu0VEUQ8H2Gxce5icbU2Eos+XAynDY:XRWEn6sO4UjL5VU2EoTHDY
- TLSH T1365302E7C4600A8741E8CBB29183226DAA761A83575ADCC560E357B1C3F96F2394F4FD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\colorful city.webp
- Size 83KB
- SHA256 501e0d3db353bcc86b95667d586fea0697ae827bb2413605b02e00587b249d16
- MD5 fe38c6f6fb16db5d3adb000b2cc878bc
- SHA1 8daf5f8b6a86194422a6325082e0eea00fc985c1
- SHA512 6dfeb85da3889b1b9d51aebe818449ebff3e659977fe10cfafad42ed6e9a983d54029241fad8d745e8b7158baf57b916fef9d2785a01136b75d277594b5c78a2
- SSDEEP 1536:Od3eey0Jk7vbpVX5khhuk2bVk1xLLBJFemKaVSE8SEk4k/vzK4Ayq:OYrbvXcd2pULLvvVal0vzPAL
- TLSH T15B83127B9C2BCCB1FC858078151D7989C96C4378B62AC87CFA22174A5677EF1D9C7064
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\forest.webp
- Size 69KB
- SHA256 d70cf321e5a53b1c1bd26b58faebe0ec4f31fd4aa035a22b573aab0274f8aa3f
- MD5 add210f99f57b7e3de6245921c6e0baa
- SHA1 db21bece1b44c9c378e06e92932b5a8d39460cae
- SHA512 91b9ebd76ad5a4d5e13456b5199100f53b67eaa39d7612bc5f75201fc8db2a20bdfe896a78d68c309e22f359893f728b9a566971e6a396827b20b9152227fe5c
- SSDEEP 1536:6td8zMw5cafwygB5eamDyRgC/sHJqCi+bHDalF/teHw/QBZnFRAw1f:mCfVgB8amjCUphi+bHpHw/QBDt1f
- TLSH T12E631244D0111672F2E6A5FA11CF2F9A8A4EB97B0B054E5933DAFF0FA1397B4E4960C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\hand draw city.webp
- Size 51KB
- SHA256 651f4911f803513b0a64fbd5ad2eeafee34ed5aad69e797d756eefcb97705050
- MD5 5316d17c754d6469248a212077c46eec
- SHA1 1bddf87d279f6ee487f8eb2039be636d8291d792
- SHA512 0213c3ebab0770f6242f86e2b33c611d55873b166f959c713d7a2cbc6195733349b02c8b93968415ad78556f5d151f0b0465432ff3b67743f3bbe3cb77b59835
- SSDEEP 768:H72B+398zwvbw3x4J8C606G7z3yTaOmnfrCC7V11mVzpvrTWYUhEHebKP85dMfU9:H7b7zPJ8C60nvOmnfOmrqx5IEHKW85oq
- TLSH T1F43302087E64B3966809C635C579EBE032BB9C9376A650EC240E3B467EDDF07710692E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lake.webp
- Size 44KB
- SHA256 e22cfe9d6aa709c4605759d3d64a230806dad468d0c30d0ec55e3b60d7651637
- MD5 7101bfc889a68e12c43695be5218e0c1
- SHA1 137572a286a60210ee56a2ae016a4c1a8455571b
- SHA512 46d45d1a9018191c393753f5a36c619ad265c726e9cc85506f98898495822daaacccbd9fa19a506e88f7a8a58757936f7a155ab6b1c8c704099fafb8a4240299
- SSDEEP 768:bv8fcBK8Gjo8s1qt+BKxqotE4B3cPIRhOPVTUO43SgeKYA778PicIzmYW6:r8UkfjKwtqKLE42PwhOtU5leBzKcTo
- TLSH T18B13F1A01E8486A4F6BF11F40BD8E213D7EB1CD145C3169F623F5A829921F26395BF23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lotus.webp
- Size 6KB
- SHA256 62f4aadd216123390ad4b76869815362f5eb5ca8fd42829fc7edf941e24772c6
- MD5 3c48d2b983ed0a323ab23309ce003983
- SHA1 31f11b0beed9aaa7d930abb97d3f9e158ac19b10
- SHA512 2b03784394660c5af49c8594b0ccd5a718c60b450a1d21c366499d17d73117f868ebb431fbf33fbc6373f91edb2d6848980470f5088827c493fe514d167326cf
- SSDEEP 96:2NElbw+iHQVEKhLKLZkn6Kl3bTBCyOTrkFvYwRdSsIsDZXkTjVyQkNg+eAJRteVY:JwrQWKZoZknRlrdGCT1t+jxgdRtgY
- TLSH T111D19F9383782504E3E97EF0EC053EB4133C67B11C99875FA2C0AB5A6DA6BEC0859385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\maldives.webp
- Size 61KB
- SHA256 4ebfbc8e82c91376b9d52103961a466bde38ad2faeb19deff8baeb88e9b2f476
- MD5 35419ae3d14884cb3685c6dc3a777673
- SHA1 02ec7ae645327e3e655ad3793a7fad91c6c76b3a
- SHA512 04f26b81e73469e20cd0adcece88f92bfe58be6a40cc55a64572bbf78ab6545790da558c56da949737a3db5c922ef8448261a5bc2cbe48734f38057b6e3148e1
- SSDEEP 1536:wh2R1PqoYtsbk8U8AfdcYd3XFu2IQNyvyTel:rRaGI87McYdFu8NyaCl
- TLSH T1005301E5EC4EDB9ADCF65A8394481DA08896CFCF4BDE664D807541F0CCB084B674B4BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\meadow.webp
- Size 42KB
- SHA256 5d36b1f2d4d59f6215298477d915a3b2e01a92c4f963be8ca7a4bbfa6bfea84d
- MD5 4a20d525af55e09a519e3850b20d5be4
- SHA1 83339d1ce5dd32245c64738951aa8761ed44dd0b
- SHA512 bfa6d332a7884e7288f291fbd30219cbf9b13ab92a18cf3371a674e4d25f9e527132b3efd9a9c1132416f9b850fcd97950165c4f87048ca2a60127eda8b7d732
- SSDEEP 768:rb8k3gGvKdX9K2JbXFXTIl7amdHgIMFalzCW7pOXNoTinUNRc1xTy7ERYZ:rb8kp2b1XTIsAgIM7W7pxiUNRcnyYRYZ
- TLSH T18513F1B1460759B0E9735BE83967162BE4AB0DAD0CCA0D4244775DE13CE94902BF673B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\nautical chart.webp
- Size 18KB
- SHA256 e8192416eff901efa8babafd964611597e4507371d4d4166d8b5abfbc16767c3
- MD5 738fb8caddd4330ab8f45113aec33065
- SHA1 525bc70df8cd596e5bc5873d1cf58c8d9ae994ea
- SHA512 08012d4b2460314d21e05d5a0302970bbc6fa971d30b1c6b8857c1c23d8918abfce22d4e7e20087c67d58a5c929a9267ca1ec9b91e7edd7deb8fae494a31da43
- SSDEEP 384:Yv2a4pJLHEuyVxT6n2Pevho109jCIiKuAq9m:YOa4pJLHERJPedrN7Om
- TLSH T1BC82F21DC76E2CEECC04953E22E66119ED4C639949C5C521C18A9E0FEF663AA51FF0F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\ocean.webp
- Size 45KB
- SHA256 a503d4f275ab1bf3ad9d34d1ef84deefd95aff16e9ace0cfdf50125f208b3ffb
- MD5 29b0008c656a559fb0d1ef36011710db
- SHA1 76a4e5c9bf81f342351d372ef0c6611abbf991f1
- SHA512 a7c664a6bf2171dd969fb5c1d03a75691669719218ce3c611b1a731362e2013d46e1b6ad37a0496eb4115cd365254663bdbcc4f366f71598317e1ae0d4e89bc7
- SSDEEP 768:iOKAAHX3xY3wLPLqoHz5RNda/g9iEKdQv5Mtn/ps2tBGPKJRnToC/OyOuImqKGXx:iOdAxEwLPLTio9iZdQv5a/pswGPix/lM
- TLSH T1D923025C1A505D17F63AC866C1076EC55F9AA7F1E5B08627C323211B60B8BEC21BDF39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\old map.webp
- Size 48KB
- SHA256 92fa0e21717236bac1ffa02881028bf754aee98a5e9513000582f13c5c305af1
- MD5 8269ac80a6602e04e31f57c8ff449291
- SHA1 4487d3aa5d5ca10d6f221d3d6189ed16ad3d95e8
- SHA512 28e4eb949fd02b8949587264980c5334965617c72e78804ccd97ec15cf6e4a8568b0653e40096f6dd5a12453c40f36c30d08fd993d39cb108ea67f3114928266
- SSDEEP 768:5RwRuP3Xl4VOLonSDD2aBPrEq+7cAUk2+nASDlsH7Pc6zJetoQM2FKuqdnTrD9lX:oRwXaKvRiIhV6lsHZdet7zFdq5FoyMjC
- TLSH T10E2302F4626EA05DFC065B3B5B843EC4CAADE029AC9FF9440DF6D2E79742615A80470B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\pink forest.webp
- Size 65KB
- SHA256 56b5ef811735ece52a9b65ab9c3bd928700eb76a7c12ef6b5f91b32d01926c5f
- MD5 3f7106b47d03c169573bc62700912962
- SHA1 6049e9683f9bca61df2e92c2a54f081c06cc55f9
- SHA512 bcbcf6664f13d9d74c42f5b3630307c62287ca28af4b51702f68152779ea036b0ec870ef3e82e643f33abca35bbb1d7b3a9046b91f84645010c335f32f371525
- SSDEEP 1536:uEE3aUtUYbeN/x16lxGZY3hV9GbOdv9UZdZgoiCrh:uxaUtwNp16hV9GbO3yViCF
- TLSH T14C63025FD7E820B2B1C0F9FBED1A1E723CFB60C61E905D98045AA516142C5BBAE144AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\sky.webp
- Size 11KB
- SHA256 d706a0326d80230ec1bca68b86fa0129493eaaf73d7823acdb9075fce86654cc
- MD5 82027bf82f49a1e2f172b65eb4c58e75
- SHA1 ca5b3f2818c9b29265ced06b7e4c286cfae278b3
- SHA512 44a3b8b2dd047a8f39e787bb87d58204c3ab24fff4a478be6a44fb283c824e16e33e81ba651f32a330c6a9997eb428a0702ce122a1fd1c748f11d601768dafe5
- SSDEEP 192:GXvO1h02zk7tgWiChqwAq9hyV/mU2D9fIMiOJnFkJlztrMI02sk:5h3zegWJqpnmH9XDnMl5rMI1x
- TLSH T1A032C0DF06229A49EDB24E744E0A41DB76DA1284EB0739EC3D8456973CB4B4D51F4C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\LangDLL.dll
- Size 5KB
- SHA256 3c8b2629048c118e4fcf80188cbcdaad3a668270e49fd95d2809feccc98fe220
- MD5 1154b69dd61f3d5594ed9dd1710da622
- SHA1 0aa4fc77cb6221be0055836f922f769665cd87e9
- SHA512 ea36422f3d2c7a468fca405818a984817fae1a70d97697e86c5273d21f13e473d05f35f3dcd28db907b35072449970a324f6d2d3162155ff09ebb9e00c663f41
- SSDEEP 48:S46+/iTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8msofjLl:zkuPbO5tCZBVEAWyMEFv2Cm/L
- TLSH T1ABC1A470B3D248B9C591413778A733D36612AE747784504FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\nsDialogs.dll
- Size 9KB
- SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
- MD5 79c27de4d1c6d295fefaa70f608f1c67
- SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
- SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
- SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
- TLSH T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH