windows · Index

AurelioAvila.PCTweaker Sep 14 windows

7bd85d0179f2647893f7cc552db17c53369c31d009f77dae798bbdbe636626e5 K(Li)O₃(CDy₂Pr)H₁₀(Cm₉CrDb₄F₁₅Hf₅Mg₂Os₁₅Po₁₃TiU₃)Md₄(Bi₉BkPaSi₄)Th

98% Signed, but heavy obfuscation and evasion

TIMi.TIMi Sep 14 windows

00e8146faef0e1cd80fa95214bba55b831cee0b3ef93ac18d407e022fb21e764 O₃(C₂DyI)H₆(CmDbF₉Os₆Po₃U)Md₅(Bi₇BkSi₃)

82% Signed PE modified post-signing

ipatool 2.6.0-windows-arm64 Sep 14 windows

76e9aa89b8c574459b99a30a13e1b7e28eb1939b67933fca352d9b16b352a109 K₃(AmLi₂Te)O(Dy)H₆(Cm₈Cr₁₀Db₄FOs₄Po)Md₄(BiBk₂)

10% Legitimate 1Password tool

chezmoi 72.2_windows_arm64 Sep 13 windows

831c6e354975bca78c93833db09af027d1e68171b306f3ab0a546f00ea809d2e K₂(LiLu)O₄(CoCCa₂Dy₂)H₆(Cm₃₃Cr₁₂Db₁₄F₁₁Os₁₁Po₁₄)Md₄(Bi₂Bk₂Pa)

64% legitimate dotfile manager

vacuum 0.30.5_windows_arm64 Sep 13 windows

dc3112c4655fe7a603345f339a4683ba60b12f5809d99b6ba8e4c6d9bb725915 K₂(AmLi)O₄(AsXeDyPr)H₈(Cm₂₂Cr₉Db₁₁DsF₅Os₈Po₇U₃)Md₃(Bi₂Bk)

35% Legitimate open-source CLI tool

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe Sep 13 windows

c6ecd2e7804c8bc60028459f804e208fc9fdf1855b4adde03e45b7226fbd1df9

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe/css/fonts Sep 13 windows

1721038cba897984539424e0b21c0d42e2fa493824f89d5b024a7ada8f1fb7fb

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe/Images Sep 13 windows

bcc5f8d33de16b6d04c1418fee662842f3f5852fac6ed7e155c3b1a5a14266da

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe Sep 13 windows

d7ae3118a43823bb312440fcfc185f8cf0a5f951e1b101c18204432abc9753ba

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe/css/fonts Sep 13 windows

e51d625b0cb3df945e2a274247361df65c152d376dc6be3f76a7ec721d23eeb1

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/8/Program Files/WindowsApps/Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe/Images Sep 13 windows

7bb853f0a3f8d3714123c7416ced2983469e6bbc3bcc2af6490f986928b51d02

hrzlgnm.zux Sep 13 windows

74f173662e8cc7b59a5a1d9950b5e3019c78fbcebcb4db5665b9056cc23c078f K(Li)O₃(CDyPr)H₁₁(Cm₈CrDb₂DsF₁₃Hf₅MgOs₁₀Po₈TiU₂)Md₃(Bi₈PaSi₄)

80% Self-signed, high entropy, obfuscated

lynx-portable 2.9.3 Sep 13 windows

0863f3174f0a7c3afc9acc4d605faab14ffafa84e94afc128b925963e776f6d4 H₅(CmF₈Os₅Po₃U)Md₃(Bi₆PaSi₂)

reviewdog 0.21.1_Windows_arm64 Sep 13 windows

5ee3ead188a6521eba614ca679a4f3a4ad5ad983bbb7118df7dbbf20e30ea5fc K₂(AmTe)O₂(AsCa)H₅(Cm₁₁Cr₉Db₃Os₃Po)Md(Bk)

11% Legitimate open-source tool

cliproxyapi 3.1_windows_aarch64 Sep 13 windows

b6177d2ed7c9db2a1dd0247cc73bb828826a477078674c8446dc2b1ef09682d6 K₂(AmLi)O₂(IAs)H₅(Cm₁₄Cr₉Db₉Os₄Po)Md₄(Bi₂Bk)

24% Legitimate API proxy tool

usql 0.21.5-windows-amd64 Sep 13 windows

7b2db302eb1d7debebdb4e4abe090bf60b09e1e2022ad547a5a91775c6097040 K(Li₂)O₅(C₂CaDyErPr)H₁₀(Cm₂₄Cr₁₂Db₁₄DsF₄MgOs₁₅Po₆TiU)Md₆(Bi₅Bk₂PtSi₄)

rat/recondispatch/shell

RyensX.OpenCodex Sep 13 windows

2a910aff1d359cec2bf16545ac0c593f24d134805bf60ec73c35e97754043593 K₂(Am₂Li₈)O₁₀(S₂Al₂AsCCaCoDyEr₂PPr)H₁₁(Cm₆₆Cr₁₁Db₂₆Ds₂F₃₅Hf₉Mg₅Os₄₁Po₄₂Ti₂U₁₆)Md₉(Bi₁₃BkInLiPa₁₁Pt₂Si₄)Th

80% High entropy, anti-analysis, obfuscation

fnox Sep 13 windows

14c907cc68d75b8a1e87c8116a17504fcae7f1d15382b5b889bd5adc2ee5dd42 K(Li)O(Ca₂)H₆(Cm₁₂Cr₉DsF₇Os₁₃Po₅)Md₄(Bi₂Bk₂Pt)

credential-manager/store-api

qsv 23.0.1-x86_64-pc-windows-msvc Sep 13 windows

b6340aa9c651c231498c607b161ffcc29286b6ad9128601eb48817559fa43de1 K(Li)O₂(Dy₃Er₂)H₁₀(Cm₁₀Cr₇Db₇DsF₁₃Hf₂Mg₃Os₁₄Po₁₃U₅)Md₄(Bi₅BkSi)

centrifugo 9.5_windows_amd64 Sep 13 windows

2bc65ae4ea388d02a64503e1a6e7ec886c24abfef370dd3eb0c22901985c500b H₆(Cm₇Cr₈Db₅FOs₄Po₄)Md₄(Bi₂Bk)

GregoryKieffer.MarkdownBlaze Sep 13 windows

e875251dbd5cb45ed6ffff4e8fd3335457bd5f1f5615a8fb3731104315a6d258 K(Te)O₃(DyErPr)H₇(Cr₂Db₃F₂Mg₂Os₉Po₄U)Md₃(Bi₆PaSi)

NTKERNEL.WireSockVPNClientCLI Sep 13 windows

94c124b3418c8f5c7d3888087b22feeed2e9cc50ddc5c2462dc81ca7ccd2c976 K(Te)O₅(AsErCPPr)H₉(Cm₄Cr₃Db₂F₇Hf₂MgOs₁₉Po₅Ti)Md₄(Bi₈PaSi₃)

96% PE disguised as PHP file

railway v5.54.1-aarch64-pc-windows-msvc Sep 13 windows

6fcb1fec35c0c7c952e109926f08996dd78135fa1ca3026d2deec3f7e612eadf K(Li)O₄(CaDyErP)H₉(Cm₈Cr₆Db₆DsF₁₃Mg₂Os₁₀Po₈Ti₂)Md₄(Bi₂BkPt)

47% Credential theft and persistence

prek Sep 13 windows

394ab47d1c42f2d563a995814291913105a21cccd070501e32052fb5b5cc8b40 K(Li)H₈(Cm₆Cr₇Db₂DsF₁₀Os₅Po₄Ti)Md₅(Bi₂BkPtSi)

helmfile 1.8.0_windows_arm64 Sep 13 windows

4084dfc4b2268285cb3b5c2fb7c20a774dd923a1a2a292239460e3b3b9ff0a29 K₂(Li₂Te)H₆(Cm₉Cr₈Db₅MgOs₅Po₂)Md₃(Bi₂Bk)

pkg:npm/%40microsoft/[email protected]?checksum=sha1:275c0fed00dac7f896e76bcf832bdae409c33cd1%2Csha512:135d1d702b418b2416c14ebbc4a5066ce3f390b193ef549a0c303ee4d95b658d219805c321b5ba3c3f4a3970d2d82c33d0f9b4a093f9761b3de90e302f74bf77 Sep 13 windows

b62e271f82db7acc10c60e29f5e9c7c3e3178872bf8e670646dd0450a841d048 H₃(CmDb₂U)Md₂(Pa₃V)

CreativeTechnology.CreativeApp Sep 13 windows

0754362c9d6d55310fcebfbf161bb33b7b897957c2d29d1f2216d7365eb97918 K₃(AmLi₂Te₂)O₇(As₄C₃IDy₂Er₃PPr)H₁₀(Cm₂₃Cr₁₃Db₁₉F₂₀Hf₅Mg₂Os₂₆Po₁₇Ti₂U₂)Md₉(Bi₁₆Bk₂HePa₂PdPtSi₄)Th

66% Legitimate Creative installer

topgrade v17.11.0-x86_64-pc-windows-msvc Sep 13 windows

73e991844fc9af7b84e55b66f75fc4c8316773276d7aeaefeede0af0fb8db34a K(Li)O(Dy)H₉(Cm₆Cr₅Db₂DsF₉MgOs₈Po₇U)Md₄(Bi₂BkSi)

smolvm 1.16.0-windows-x86_64 Sep 13 windows

8ad37bab044b7b9930f22b95158e9189958fd99cd5e2b382c6cf596daccf871a K₃(Am₂Li₃Te₄)O₈(As₆C₃P₂AlCaDy₄Er₃I)H₁₁(Mg₄Cm₄₉Cr₁₆Db₂₃Ds₂F₅₆Hf₃Os₃₇Po₃₀TiU₄)Md₆(Bi₇Bk₃He₃PtSi)

64% legitimate VM software

eac3to Sep 13 windows

c2e6e697a7e316edf166d0149f52c3af153fba59522e73180fad7907f06a7a9b O(As)H₃(Cm₅Db₃U)Th

81% Obfuscated JavaScript in archive

masaodev.quick-dash-launcher Sep 13 windows

51e55a5d7e010df60529c4d227f9f399d6e3b7c4fe58b077bdfe21704ccf008e O₃(IAsC)H₅(CmF₈Os₇Po₃U)Md₃(Bi₅PaSi)

system/shutdown

Logitech.LogiTune Sep 13 windows

7fd6cb0587ad9fc63fa93b51792bb7c2c632ef7077e402e5d904509010184352 K₂(AmTe)O₅(AsDyErPPr₂)H₁₀(Cm₆Cr₃Db₃F₇HfMgOs₂₀Po₈TiU)Md₇(Bi₁₁Bk₂PaSi₃)

54% Legitimate Logitech installer

Foundry376.Mailspring Sep 13 windows

920a0b72cd8f988f53b8e0d4255430d6e3de346263838133133036c2bbd0a33d O₂(AsDy)H₇(CmDbF₆MgOs₇Po₅U)Md₂(Bi₄)

binary-metrics/shape

everything-cli 1.1.0.38.ARM64 Sep 13 windows

86eddd4ae8925833e33be1d09e7faa2442110d00daf0e48a8e963cdeb7a141fe H₄(CmF₃Os₂Po₃)Md₄(Bi₂PaSi₄)

WinSCP.WinSCP Sep 13 windows

4c59f78024377003a96afbe079860d4b36593b76cc2d83fbbc306fc074605916 H₅(Cm₁₀Db₅HfPoU₄)Md

9% Legitimate SourceForge download page

mise v2026.9.6-windows-arm64 Sep 13 windows

c14001a22252bab3c00ba6cf874af22b9e26ce46bc9a42412634854acce1a302 K₃(Am₆LiTe₂)O₅(IAsC₂CaDy₂)H₉(Cm₂₅Cr₁₀Db₁₂DsF₁₅MgOs₁₈Po₂₀U)Md₆(Bi₄Bk₃InPtSi)

ransom/note

sqlpage Sep 13 windows

99ff0d63fb2bc72a60aadf0594b8f27bd9c059f3f7570ea2174e8b59141eda1c K(Li)H₆(Cm₉Cr₇Db₄F₈Os₈Po₄)Md₄(Bi₂BkSi₃)

38% Signed legitimate SQLPage binary

smolvm 1.15.1-windows-x86_64 Sep 13 windows

2ccba74c828340f893580c1c0ef74b43990e497e0648398d6837b8af105dda84 K₃(Am₂Li₃Te₄)O₈(As₆C₃P₂AlCaDy₄Er₃I)H₁₁(Mg₄Cm₄₉Cr₁₆Db₂₃Ds₂F₅₆Hf₃Os₃₇Po₃₀TiU₄)Md₆(Bi₇Bk₃He₃PtSi)

64% Legitimate VM software package

navidrome 64.0_windows_amd64 Sep 13 windows

5a1c9cd828aa989a6c929f9a8fe2a600ec706957f11852ed76470bdcd0c26f27 K(Li)H₃(Db₂OsPo)

PokerTH.PokerTH Sep 12 windows

65d7e136d973d598d3318ce61f8b5787df3f0e6aaf64a3fa79a8c5e6ed5e921d K₂(AmLi₃)O₅(As₃C₃Dy₂ErI₂)H₁₁(Cm₃₀Cr₁₆Db₁₀Ds₂F₂₀Hf₇Mg₄Os₂₅Po₁₆Ti₂U₇)Md₈(Bi₁₁Bk₂LiPaPt₂Si₃)

60% Legitimate PokerTH game installer

napxlexn.AILimits 0.6.4 Sep 12 windows

fa39a89f039bb4d533740dac7aa54d63de9ef3c982483a5263aa612c28561b8e

Trelby.Trelby 2.2 Sep 12 windows

1d8a55160b2814d76672d9fd45a07d00236cec242550b068b2bb558b48e217bb K(Li₃)O₆(Co₂Er₃As₂C₂CaPr)H₁₁(Hf₄Cm₁₄Cr₆Db₇DsF₂₁MgOs₁₇Po₁₈TiU₆)Md₆(Bi₁₂BkPaPtSi)

64% Legitimate Trelby installer

redumper Sep 12 windows

1ca82a40324ef37e51affff850dec36b497aa20b51c25486431a73a8fd077fdd H₅(F₄MgOsTiU)Md₂(BiSi)

railpack v0.39.0-arm64-pc-windows-msvc Sep 12 windows

e56a41402f1469217d3af00c0ed8fbab1d574c2b01e167d883a01b57bf142e7e H(Os₄)

51% legitimate tool binary

mysql-workbench 26.7.0-winx64 Sep 12 windows

a2abe0925d0cc0d31d9818e60342902d699cd965ba2b55515607bccb67787684 K₄(Am₅Li₂₃LuTe₅)O₁₃(C₅Ca₈Er₇I₃S₅Al₄As₅Co₃Dy₆La₃P₃Pr₂Xe₆)H₁₁(Cm₁₃₁Cr₂₄Db₆₇Ds₃F₅₇Hf₉Mg₇Os₇₄Po₇₃Ti₄U₂₂)Md₁₁(Bi₁₃Bk₆InLiPa₇Pt₄Si₄V₂)

65% Legitimate Oracle MySQL Workbench bundle, expected components

Voltius.Voltius Sep 12 windows

81ee7344671a6d8fa0e852a1b9e36d21908c7f93b4e0aa0c7c4947251bbfdbe2

MistralAI.MistralVibe.ACP 2.25.4 Sep 12 windows

2783edc3affc1cf0ea49667b69a4c0ea9b97304be0470bd84f1a3d1efed02bda K(Am)O₂(AlP)H₄(CmDbOs₅Po₄)Md(Si₂)Th

thinkrail Sep 12 windows

558b8e87009f02c7d1755d6599cd05db728a7a8a23bb74a9e90f09c0e48b1477 H₄(CmOs₅Po₃U)Md₃(Si₂)

29% Signed Bun runtime

cliproxyapi 2.159_windows_aarch64 Sep 12 windows

33a5fa5308725faf71067914f873dc86f84eaaedd7c879675b1ab9253998c998 H₂(Db₂Os)Md

Dimmy.Dimmy Sep 12 windows

ee0bf55ad2c1baa6ddb9a3f3abdebfb3718f3ce73fcd5099a9a0c6a56bb5bdb7 H₂(Os₂Po)Md₂(BiSi₂)

smolvm 1.15.0-windows-x86_64 Sep 12 windows

8ee2b0723297b3fb9568c7aa4e8d61649e06842328391ce422fec7dc30823d7f K(Am)O₂(PDy)H₃(Cm₄Os₇Po₃)

archive/path-traversalarchive/symlink-escape

Thorlabs.CCT Sep 12 windows

a949367a96b23c1455e9d42da03dffde0049b0922453cd2850c5cef425410397 K(Te)O(Dy)H₈(CmCr₂DbF₄Mg₂Os₁₁Po₄U)Md₇(Bi₇PaPtSi₂)

Thorlabs.MEMSVCSEL Sep 12 windows

43f6b3ff37d8cd7a0a0859e23951d2c6b28960918234cfe226222efcc090a7fa

TomTom.MyDriveConnect Sep 12 windows

6ed8dbab71d64dcc23d05e33ec79fada08cac171fa99966255f7e276886eea2d Md₂(BiSi₂)

nixpacks v1.39.0-x86_64-pc-windows-msvc Sep 12 windows

a857a34fc945f8936927bc36a0f5183b9fa3138205258692017033c8a71d8c63 H₂(Os₃Po)Md(Pa)

touchbyte.PhotoSync Sep 12 windows

f1516d44208b27c5fdd204022b80fdd7a56c2364f9da2602b79a60d126e55638 Md₂(BiSi₂)

conftest 70.0_Windows_x86_64 Sep 12 windows

e067213cdcc17bd8c614508af3dada70eba2af81b5f54288d8a705a73d18180c H₃(CmDbOs)Md

pocketbase 40.4_windows_arm64 Sep 12 windows

4f11d998a0c36677a6698841bb85ea414d4a57c394fe55f1a8449fd4a089f1ae O₅(AlCErXeDy₂)H₈(Cm₃₁Cr₁₀Db₈DsF₇Os₁₀Po₅U₂)Md₂(Bk)Th

63% Legitimate PocketBase server binary

gickup 10.46_windows_arm64 Sep 12 windows

98bf3b01816ab0720cd49446ad3169607f88e7d349587008662e62c23ecb4c65 H(Os₂)

dua v2.45.0-x86_64-pc-windows-msvc Sep 12 windows

52540d0fb8af6762cd462f281c9cc8aba1382e964c6aae152e88824419966b5c K(Te)O(Er)H₇(Cm₂Db₂DsF₆MgOs₅Po₃)Md₃(Bi₂Si)

50% Legitimate disk usage tool

SuperGness.Codey Sep 12 windows

97f43d8b977f960b3917a7fc0eaa31e14b13040c2d47fdbf86ada4cff4535253 K(Li)O₃(CDy₂I)H₁₀(Cm₁₀CrDb₅DsF₁₆MgOs₁₁Po₁₂TiU)Md₅(Bi₈BkPa₂Si)

37% Legitimate NSIS installer

lyswhut.lx-music-desktop Sep 12 windows

ac847014157e414f2946cfcdfb0fd4ae129ba38d782d0f05a9c94b91c50531f1

flaresolverr Sep 12 windows

309abd7c821546325ae6c509b40d969c5e39034be2314d21b3f5e0517feda7a7 K₃(Am₂Li₁₁Te)O₁₀(Ca₂Er₁₀C₂Co₂P₂Pr₂Al₃AsDy₂S)H₁₁(Po₃₆Cm₅₁Cr₁₃Db₁₆Ds₃F₃₇Hf₉Mg₇Os₄₁TiU₁₀)Md₈(Bi₁₂Bk₄HePa₅PtSi₆)Th

65% Legitimate FlareSolverr browser automation tool

postman Sep 12 windows

3dc8ac4d2715e19d2de8c66d0f8c138a1c5e5c2eb66901e7116917fd006c9a0d O₃(AsDyP)H₄(CmF₃OsPo₅)Md₄(Bi₃Si₄)

NimbusAgent.Nimbus Sep 12 windows

5c8a1a0c5981a80052b34877108737ffe77c3fb24aabe4cfdb250a5f6b57c42b Md₃(BiPa)

hapi Sep 12 windows

cb3973ac577e6f6e2fb894fb394ac2498e797bb1a60b1833bc493f6956ba02bc H₃(CmOs₆Po₂)Md

76% Embedded PE, debugger check

jvonscheidt.m3u-viewer v0.9.0-x86_64-pc-windows-msvc Sep 12 windows

d3765747e2db65b2d636aa7287d25abc868be96841e23fee064df4528871b9c2 K(Li)O(As)H₆(Cm₅DbDsF₂Os₃Po₂)Md₂(Bi₂)

instruction/junk

railway v5.54.0-aarch64-pc-windows-msvc Sep 12 windows

84cdfca02883b1bad5b4545b9681788f9073288ebb1c5540ea19374be74f39b9 K(Li)O₄(CaDyErP)H₉(Cm₈Cr₆Db₆DsF₁₃Mg₂Os₁₀Po₈Ti₂)Md₄(Bi₂BkPt)

47% Credential theft, persistence, evasion

SpyShelter.SpyShelter Sep 12 windows

c0a41791da56b2fa837594e1be2762486ddf018bdc8506c62101ea9514662196 K(Li₂)O₇(As₃Er₄P₂CCaDy₃Pr₂)H₁₁(Po₁₈Cm₂₁Cr₁₃Db₇DsF₁₉Hf₃Mg₄Os₃₅TiU₈)Md₇(Bi₁₁Bk₂HePa₂Pt₃Si₄)

65% Legitimate security software installer

Fidpa.Hablara Sep 12 windows

92df7fe3c5b57474c9fe0d239f8bd58e97499426f06b538eced7f331464d3889 O₃(IAsC)H₅(CmF₈Os₅Po₃U)Md₄(Bi₅PaSi)

system/shutdown

CryptographicTriangles.TrianglesQt Sep 12 windows

e4d5325a99283ec7f963c314884d850ab1ffc8a0d9eaa5aea01bf30e7289ef62 O₃(AsC₂Dy)H₇(CmDbF₁₀HfOs₅Po₃U)Md₂(Bi₅Si)

74% Unsigned, high-entropy overlay, withheld indicators

Filedini.Filedini Sep 12 windows

2a31bc97550e8ddb1c07b84194746a2e3a6dbf6428c5241a35c2e74d1ed25a2a K(Te)O₃(DyErPr)H₇(Cr₂DbF₂Mg₂Os₈Po₄U)Md₃(Bi₆PaSi)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

OOMOL.OOMOLStudio 25.20 Sep 12 windows

49c5c37baec0d9bdf670a851f69da45e654234c629e7ea56519287a8b2865611 Md₃(BiSi₂)

deja-vu 20.0_windows_arm64 Sep 12 windows

289afdba10cd9a023182f8749c74afa1eea95b0aec8ae616b7b80858c8ff81b9 K₂(Am₂Te)O₂(As₂Xe)H₆(Cm₉Cr₉Db₃F₃Os₈Po₇)Md₃(BkPa)

17% Legitimate open-source tool

twg v1.2.8 Sep 12 windows

dd3a0f1930d7c39c63aa6d66c4f6e1507f31f6889ee82158e203938b183f6629 K₂(Am₂Li₃)O₄(CoAsDy₂Er)H₁₀(Cm₃₀Cr₁₁Db₈DsF₂₃HfMg₂Os₂₀Po₂₃Ti)Md₆(Bi₈PaPtSi₄)Th

clipboard/capture

GaoyangZhang.RivonClaw Sep 12 windows

26abbd91c7fd56a15831c4f6db79bfc1174f2930e63c622434d505debc1ea4c8 Md

QZIndustries.QZTray Sep 12 windows

10e308b91d84b637520eb36096cb6814b33a66f3cabc317ce776253e759babc8 K₃(Am₂Li₅Te₂)O₈(Co₂AsAl₂C₅Ca₂Dy₆Er₄Pr₂)H₁₁(Hf₉Cm₄₅Cr₉Db₂₇Ds₂F₂₄Mg₅Os₂₈Po₂₈Ti₄U₈)Md₇(Bi₁₄Bk₂Pa₂PtSi₃)

64% Legitimate QZ Tray installer

Stardock.Start11.v2 Sep 12 windows

e3c203eddad37e51c7255dd8bace811327fed127b0f2a5fe10de6846f5f2b6ee O₂(As₂Er)H₄(Cm₂F₈Os₅Po₇)Md₆(Bi₇BkPaPtSi₄)

64% Legitimate Stardock installer

TossPlace.TossPOS Sep 12 windows

9f426334d7e2048ae21e6579725a7262152c64b971d815bcb96408c2716aba5f O₃(CDyI)H₆(CmCrF₁₀Os₆Po₄U)Md₄(Bi₅Pa)

20% Legitimate POS installer

dynamorio 11.91.20708 Sep 12 windows

739b86c2fc6b302d7c4480a212563eae19a34d3b8e780b5dca6260a8831cd9ac K₂(AmLi₃)O₁₁(C₂Al₃As₅Er₈P₂Pr₂Ca₂Co₂Dy₂IXe)H₁₁(Os₂₄Po₃₂Cm₂₀CrDb₂₀DsF₂₁Hf₆Mg₈Ti₄U₆)Md₇(Bi₁₁Bk₂HePaPdSi₄)

63% Legitimate DynamoRIO dynamic instrumentation toolkit

tgrep v1.0.8-aarch64-pc-windows-msvc Sep 12 windows

2021f95537887e299b01127e5403981dcebd0be771bcd24a70ccd0210c76b04b O₃(DyErPr)H₇(Cm₄F₃MgOs₃Po₂TiU)Md₅(Bi₃BkPaSi₄)

grok-cli Sep 12 windows

b2f72f093206c070945a792b2b38b0a00ca6e971143b312df1ef8eaed4c12536 K(Li)O₅(IAsC₂Dy₃P)H₁₀(Cm₁₇Cr₁₁Db₅DsF₁₇MgOs₁₅Po₁₃TiU)Md₅(Bi₄PtSi₃)

17% Signed X.AI CLI tool

fzf 0.74.4-windows_arm64 Sep 12 windows

558df4dac9c65a63c732909a06abc1891a42adcae4d6be92a9b0ccc0ef05b4ff K(Te)O(Dy)H₆(Cm₅Cr₂Db₂F₂Os₂Po₂)Md

22% Legitimate fzf release binary

rumdl v0.2.73-x86_64-pc-windows-msvc Sep 12 windows

bc6c86d61588e9c92ec9927903ed4973986d30b94d042732ddf62424755dd3c8 O(Dy)H₈(Cm₅CrDbF₇MgOs₅Po₄Ti)Md₆(Bi₂Bk₂PaPtSi)

Softplicity.PDFCombinePro Sep 12 windows

e442e20ea783c33a596d22b5e94f28d3ae9282a011fa9d705f229c21c1e5d35f K(Te)O₂(Dy₂Pr)H₇(Cr₂DbF₂Mg₂Os₈Po₄U)Md₅(Bi₈PaSi₃)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

Softplicity.TotalThunderbirdConverter Sep 12 windows

e086e97cd61fb75368ad2196f3a9cc1dda1187838274a05c715f48df39703372 K(Te)O₂(Dy₂Pr)H₈(CmCr₂Db₃F₃Mg₂Os₉Po₄U)Md₃(Bi₇PaSi₃)

43% Signed legitimate installer

Softplicity.TotalMailConverter Sep 12 windows

77fabb20aa646a596fb15057967b44ebedeb36ee6a35080c18735b787d6ab640 K(Te)O₂(Dy₂Pr)H₈(CmCr₂DbF₂Mg₂Os₉Po₄U)Md₃(Bi₈PaSi₃)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

zola v0.23.5-x86_64-pc-windows-msvc Sep 12 windows

878fccd4ec4f4cfe7babbff1c5bae2abac9c47181ea383ccde2322dcdf445be2 K(Li)O(As)H₈(Cm₇Cr₅DbDsF₁₀Os₆Po₇Ti)Md₅(Bi₄Bk₂Pa₃Si)

laurentiu021.SysManager v1.99.5 Sep 12 windows

04dddbac5bd5c910a9a9ea03a86f3b12ea5c40712c76c3ecc3768aa7a3d1d3a6 K(Li)O₃(Er₃DyPr)H₇(Cm₃Db₆F₆Mg₃Os₁₄Po₁₁U)Md₅(Bi₇PaSi)Th

platform/defenderanti-av/amsi

gogcli 40.0_windows_arm64 Sep 12 windows

13a30555b1b9ce9460035e0ceac1bbca4484f3d538d7c65673f3a7fdf96dc66a O₄(AsCa₂DyEr)H₆(Cm₁₈Cr₁₀Db₂F₅Os₉Po₇)Md₃(BiBk)

49% Legitimate Go CLI tool

jdtls 1.62.0-202609111927 Sep 12 windows

0ee4099ed8f07ab43cda42835bb843c2427cac06f36322d79b07ddf78defeb80 K₃(AmLi₁₂Te)O₃(AsC₂Er)H₁₀(Cm₁₅Cr₃Db₁₄Ds₂F₂₀Mg₃Os₉Po₂₅Ti₃U₂)Md₁₀(ArBi₆BkHe₂LiPa₃PtSi₆)

DeskRipple.DeskRipple Sep 12 windows

5bac65cd5bc1490243be0a35929f9dfda87bd4df0dbae85a9822ae0814b5f7b3 K₂(AmLi₃)O₄(As₂Dy₂Er₂Pr)H₁₁(Cm₉Cr₂Db₅DsF₁₃Hf₂Mg₃Os₂₀Po₁₅TiU)Md₇(Bi₁₃BkPa₃Si₄V)Th₂

86% AgentTesla infostealer payload embedded

TravisLane.SteamArtManager Sep 12 windows

7e4993199ee920a3aee2dca9108287f14a920f3c2608f0778ab72bb5ac0127e7 K(Te)H₂(Os₄Po)Md₃(Bi₅Pa₂Si₃)

Filamental.Filamental Sep 12 windows

c2eebc7f6cbe487dc6e9642108823af5837d11e904664708bfb4e2e56ec38983 O(I)H₅(CmF₈Os₅Po₃U)Md₂(Bi₅Pa)

Microsoft.AdvertisingEditor Sep 12 windows

6af2d95ec423fc596b74464e51d419798fad0d2ec84251b071778129aa8ae699 K₂(AmLi₂)O₄(AsDyEr₂Pr)H₁₀(Cm₃CrDb₃F₆Hf₂Mg₃Os₁₈Po₁₃TiU)Md₇(Bi₁₁BkPa₂Si₄)Th₂

Win/Agentteslav3

Wampserver.Wampserver Sep 11 windows

08bc458acb5974e3f93857c234c4daf72da8a4da842b736c1424d98b475e4fcd K(Te)O₃(Dy₂ErPr)H₇(Cr₂DbF₃Mg₂Os₈Po₄U)Md₄(Bi₈PaSi₃)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

Microsoft.Edge.Beta Sep 11 windows

dcd88f5bce085a622f2376e6aca7b8063ba3c0e657465ec04dde230f52610591 K(Am)O₂(ErPr)H₂(Os₂Po)Md₃(Bi₃Pa₂Si₄)

Mozilla.Firefox.sl Sep 11 windows

7fba2618a3b4efa6efdf3c19c86940d3e692b78e0b014b1a43bcb9c11df80399 K(Am)O₂(AsC)H₅(DbF₄MgOs₂Po₃)Md₃(Bi₆PaSi₂)

Mozilla.Firefox.id Sep 11 windows

9efc93c561e1d2d8f0079054adde1b21f517d0da1b51e48eb5cf471f63f62033 K(Am)O₃(AsCDy)H₅(DbF₅MgOs₂Po₃)Md₄(Bi₆PaSi₃)

Mozilla.Firefox.ESR.bs Sep 11 windows

8c60c2b6452da7ccf27259ace62dfef9ae6b9489a7e807d2ee6972d3279754b9 K(Am)O₂(AsC)H₅(DbF₄MgOs₂Po₃)Md₃(Bi₆PaSi₂)