windows · Index

mongodb Sep 11 windows

5d00b5acbcc531374a1ca935fefd70491ac6ed8f8dd041a00cf540d782b1378d K(Te)O₃(CaDyPr)H₇(Os₁₅CmCr₂DbF₆Po₆U)Md₃(Bi₆Pa₂Si₃)

64% Legitimate MongoDB installer

schemacrawler 17.15.2 Sep 11 windows

c8e1b1bde813056c3c37ea541d9bb181b5f1eaa67c6911e857239d42eac3300d K(Te)O₂(DyPr)H₆(DsF₃MgOs₁₂Po₉U)Md₃(Bi₆Pa₂Si₃)

postman Sep 11 windows

6762b5e95b4e3374092458b9cb4dec50baff13da8263c9de41326d2ab1fac3ed O₂(AsDy)H₇(CmDbF₅MgOs₈Po₅U)Md₃(Bi₄Si₄)

binary-metrics/shape

cubezombies.MidnightAthenaeum 0.17.0 Sep 11 windows

2bad93c1eacfbdd7cf3ca3b69ca025140db6b6bc75a8d91d2d01e63e922ac0fb K₂(Am₃Li₃₂)O₁₁(As₃SAl₂C₂Ca₃CoDy₂Er₃PPrXe)H₁₁(Cm₇₇Cr₁₉Db₃₈Ds₃F₄₁Hf₁₀Mg₅Os₄₅Po₅₇Ti₃U₁₆)Md₉(Bi₁₄Bk₂HeInPa₂₄Pt₂Si₄)Th

39% Legitimate Electron app installer

cyme v3.0.2-x86_64-pc-windows-gnu Sep 11 windows

e40d3d77bec7c42378ece627be832ce0d2fd6b1a571cbab5317a3fa76c5e7944 O₂(Al₂Dy)H₆(CmFHfMgOs₄Po₂)Md₄(Bi₂PtSi)

fingerprinting/host-bound

RobertoB.SussurroIA Sep 11 windows

a2a81aac49bb713bfe1d6448bcbb2406c2d54d4d81cc1a13afb3b7fa387fba98 K(Te)H₂(Os₄Po)Md₃(Bi₅Pa₂Si₃)

51% Standard WiX installer component

TanmoyTheBoT.PyDM Sep 11 windows

d63a942769add42964e84c31e392796925bfe0a86cccb21dabca71d974d42d35 K(Te)O₂(Dy₂Pr)H₇(Cr₂Db₃F₂Mg₂Os₈Po₄U)Md₃(Bi₆PaSi)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

docker-buildx Sep 11 windows

bdf356a5f2c8f3efd8a357b1f044860216e15e654a9a7105ca4e5dd5b5697ee4 O(I)H₅(Cm₁₃Cr₉Db₆Os₅Po₅)Md₄(Bi₂Si₄)

17% Signed Docker buildx binary

Anderix.luxc Sep 11 windows

af8638f12d1321ce5f8fe228a49828bb4c2ac3c9fa973f137001578a2a24387e O(Er)H₇(Cm₃DbDsFMgOs₂Po₅)Md₃(Bi₂Si)

injection/shellcode

Akka.Cli 0.74 Sep 11 windows

4399c7287f8327f4506e46633b73558f6021c8a3df67174578c5c6199d920122 O(As)H₄(Cm₉Cr₇Db₃Os₅)Md₄(Bi₂Bk)

embedded:pe:mscordaccore.dll@0x82ffd8 Sep 11 windows

0360e17136cea67ef4c16bdbeeb788ebbac7e0fe654d3735c8e54cb39bb72996 K(Li)O₂(ErPr)H₂(Os₂Po)Md₃(Bi₄PaSi₄)

CircleCI.CLI 0.50068_windows_arm64 Sep 11 windows

a9ee45c3394f5b7a4afe63c5576f469613e5cf822fb8deb1f14c0939f91ffbd3 K₂(AmLi₂)O₄(PCDy₂Pr)H₆(Po₈Cm₂₃Cr₁₀Db₄F₇Os₁₁)Md₃(BiBk₂)

47% Legitimate CircleCI CLI tool

mypal-portable 78.1.0 Sep 11 windows

1166bc48a3e3017a854ad29007a39a4e14b295e016710782f0c1a07b36431b8c K₂(Am₂Li₁₇)O₁₂(As₁₀C₅Ca₃CoEr₄AlDy₄EuLaPrSXe₄)H₁₂(Br₃Cm₆₆Cr₁₂Db₄₈Ds₂F₃₀Hf₁₁Mg₅Os₃₉Po₄₂Ti₄U₁₉)Md₁₀(Bi₁₄Bk₂LiPa₅PmPt₄Si₅)

67% Signed legitimate portable browser

lark-cli 1.0.95-windows-arm64 Sep 11 windows

61df77e3692b304959de43950c1b3337ce3d08aef09f73ca936d3afd4e536b0f K(Am)O₂(CDy₂)H₆(Cm₁₅Cr₉Db₄F₃Os₇Po₆)Md₃(BiBk)

25% Official Lark CLI tool

argo Sep 11 windows

5443ca6304a552db4e75d359576eb759204091e2ebd05368b3f6f172b331fef3 O(Dy)H₈(Cm₈Cr₈Db₅DsF₂MgOs₅Po₄)Md₃(Bi₂)Th

18% Legitimate Argo CD binary

antonreshetov.massCode Sep 11 windows

3a7f4ef53c5f82d604756c9f72f3536934459391da49e0a4d7f99b7058c96fd9 O₄(IAsC₂Dy)H₅(CmF₉Os₆Po₃U)Md₄(Bi₅PaSi)

system/shutdown

KDE.Dolphin Sep 11 windows

3d0c8f713eaf444fafae1cf1808de5a481ea88b567dcb938f4ba5e50f69bbbdf H₆(CmDbF₈Os₆Po₃U)Md₄(Bi₆BkSi₂)

ChrisLauinger77.QontrolPanel Sep 11 windows

15805d1bf634e34ff7afb78680d4a45e3a5271060b847e8b0967dd19c8702fd1 K(Te)O₄(AsCDy₂Pr)H₇(Cr₂Db₃F₂Mg₂Os₈Po₄U)Md₄(Bi₇PaPtSi)

83% Unsigned, high-entropy overlay, crypto refs

GetItSimple.SoundMixer Sep 11 windows

49b6d533ac212e356d91d55861755d938fb09c39b8b7355ed9860d93f1273aef K₂(AmLi₄)O₈(Al₂CDy₃Er₃IPrSXe)H₁₁(Po₂₈Cm₂₃Cr₁₈Db₁₁Ds₂F₂₇Hf₇Mg₆Os₃₁Ti₂U₅)Md₇(Bi₁₃BkLiPaPtSi₄)Th

60% Legitimate PyInstaller app

vals 0.46.1_windows_amd64 Sep 11 windows

83ecc3bd22868217f89f96af8a81684dd684bee482a44b401fe99307cd2625b6 K₂(LiTe)O(Ca)H₅(Cm₁₁Cr₉Db₇Os₅Po₂)Md₃(Bi₂Bk)

postgrest v16.3-windows-x86-64 Sep 11 windows

5ea4b57b10a26be45521e8e31476a91084c8fe91e060951f04985d86e79367fa O₇(CCoCaDyEr₂IP)H₉(Cm₁₁Cr₅Db₃F₁₅Mg₂Os₁₁Po₁₁TiU)Md₅(Bi₅BkPtSi)

loader/evasivefile-targeting/enumeration

deepstream 10.2.2 Sep 11 windows

e64666ff2b961a4f07941f5f84a626e7a996c2f962282728d4060fa12718dc19 K(Li₁₆)O₈(Er₂AlAs₃CoDyIS₄Xe)H₁₀(Cm₇₃Cr₁₅Db₃₆F₂₅HfMg₃Os₂₇Po₃₅Ti₂U₂)Md₁₀(Bi₈Bk₄He₂InPa₂₂PtSi₃)

security-bypass/tls

mise v2026.9.5-windows-arm64 Sep 11 windows

f008f7b8641d68183b540275645ab2c33d5039fcd26b020d120e6eaaeeea2fec Md(Bi)

Monkey1Wizard.GAL v0.2.2-windows-arm64 Sep 11 windows

8d1827d95f4fe1268167f66c6421613274aa8309246c6e463a803ff175d593e7 K(Am₃)O₃(CErXe)H₉(Cm₂₂Db₉DsF₁₂MgOs₇Po₁₄TiU₃)Md₅(Bi₂BkPaSi)

Iewnfod.LuminaTerminal Sep 11 windows

acfd2a9669e831b4472760b2e878513ea96a782ed122b4831a067f6a3e7cda9a O₃(IAsC₂)H₅(CmF₉Os₅Po₃U)Md₃(Bi₅PaSi)

system/shutdown

StablyAI.Orca Sep 11 windows

34f39ad60b8decd981cc99d98ae013bbcfa0102de618105a54c878706e815cd7 Md₂(Si₂)

kawayiYokami.P-ai Sep 11 windows

e54754c841d0fc837aae3186b3071006799c1b4a441dda56591fc54b93646039 O₃(IAsC₂)H₆(CmDbF₉Os₅Po₃U)Md₃(Bi₅PaSi)

system/shutdown

Jackett.Jackett Sep 11 windows

e5bc084333dd10d49f3c0a2c5bc9bc739b35df00842a56b2dccd98aa7e52fab0 K(Te)O₄(AsCDyPr)H₇(Cr₂Db₃F₂Mg₂Os₈Po₄U)Md₄(Bi₆PaPtSi)

payload/encryptedexecution/installer

Lody.Lody Sep 11 windows

5db1b32113182d86029c601489d6680c8522a74e4a46ee81fb0c3f0ab233c166 O₃(AsC₂Dy)H₅(CmF₉Os₆Po₃U)Md₄(Bi₅PaSi)

52% Unsigned installer, high entropy overlay

pyrefly Sep 11 windows

cfa729f6d82aedd628e15630396597925eef7bfbb071f068aa0a28a7721b2802 O(Dy)H₇(CmCrDsF₅Os₅Po₅Ti)Md₄(Bi₃BkSi)

Ardisk.Ardisk Sep 11 windows

20912a80bd785d2bc7a264d3db50b9c03666678e2d6ab2983fde1c527b98b7f7 K(Te)O₂(PPr)H₅(Cm₂F₅MgOs₁₀Po₃)Md₄(Bi₅Pa₂Si₄)

77% Unsigned installer, high-risk privileges

Defisym.FFmpeg.LGPL.Shared.8.1 34-g9b6c8969e0-win32-lgpl-shared-8.1 Sep 11 windows

a2463f661ad47f4275bc7e0d54e71da6b56965821bbafe82063b8f5823f266e5 K₂(AmLi₇)O₆(AlCa₂CoDyErXe)H₁₁(Cm₂₃Cr₁₄Db₅Ds₂F₁₄Hf₈Mg₂Os₁₄Po₁₇TiU₃)Md₆(Bi₄BkPaPtSi)

RigSmith.Rig 18.0_windows_arm64 Sep 11 windows

692eb1bd0ba2ca5dc7341cbadb7630753bbd946c962abf5f26bf50bad53ea00d K(Te)O₂(CDy)H₆(Cm₉Cr₉Db₃F₃Os₁₀Po₉)Md₄(BkPaSi₄)

51% Unsigned binary, process injection APIs

RigSmith.Rigsmith 18.0_windows_arm64 Sep 11 windows

8639f580de1b54283204078bd4646ef789319839c5d296e6c517928444c70be8 K(Te)O₄(CCaCoDy)H₆(Cm₉Cr₉Db₃F₈Os₁₁Po₁₃)Md₄(BkPaSi₄)

RigSmith.ClaudeRig 18.0_windows_arm64 Sep 11 windows

ea3b660a725845aaa8e25d2145dc8f7088e0d52af89a8a21e0fefbd7c35e2f9c K(Te)O₃(CaCoDy)H₆(Cm₈Cr₉Db₃F₈Os₈Po₁₁)Md₄(BkPaSi₄)

51% Unsigned binary, credential access

hledger Sep 11 windows

2921b1c61b4d8ff32622b5eff01de4d5e7e166cb456e89002d42640f474b6fde K(Am)O₆(C₂CaDy₂Er₂EuI)H₁₀(Cm₂₅Cr₁₀Db₆DsF₁₇MgOs₁₄Po₁₅Ti₃U₅)Md₅(Bi₅Bk₂PtSi)

37% legitimate hledger accounting software

yt-dlp.yt-dlp.nightly Sep 11 windows

22d85b4c6a814e0603a2a19a94b4c3a72aeebc0b611ab45a8f4689cde9d0e282 K₂(Am₂Li₈)O₈(C₂As₃Er₆AlCa₂DyPrS)H₁₀(Cm₅₃Cr₁₄Db₁₅DsF₂₂Mg₆Os₁₈Po₂₀Ti₂U₂)Md₆(Bi₁₃BkPa₃Pt₃Si₄)Th

66% Legitimate yt-dlp PyInstaller bundle

poco-ai.Agentero Sep 11 windows

b53a3635ae97b22ac63ea0b759e9c78dab3e1d7cdc1812d75e1deb70db049f81 K(Li₂)O₃(CDy₂Pr)H₁₁(Cm₁₂Cr₈Db₄DsF₁₉Hf₅Mg₂Os₁₀Po₁₀Ti₂U₂)Md₅(Bi₈BkPaSi)

34% Legitimate Tauri app installer

tgrep v1.0.7-aarch64-pc-windows-msvc Sep 11 windows

8d88b9482d586a886a09d0da51caadeed96d812bfe5c342bae9662d9c4a24c01 O₃(DyErPr)H₇(Cm₄F₃MgOs₃Po₂TiU)Md₅(Bi₃BkPaSi₄)

rumdl v0.2.71-x86_64-pc-windows-msvc Sep 11 windows

161ce75171f49ca37b51dcf887df426938d1b5ff569ca3733b5791d6ce247cc7 O(Dy)H₈(Cm₅CrDbF₇MgOs₅Po₄Ti)Md₆(Bi₂Bk₂PaPtSi)

circleci-cli 0.50006_windows_arm64 Sep 11 windows

91d0222e594d501c7518ab70eb8f43e1945f3b382278453857209ddd23e52727 K₂(AmLi₂)O₄(PCDy₂Pr)H₆(Po₈Cm₂₃Cr₁₀Db₄F₇Os₁₁)Md₃(BiBk₂)

47% Legitimate CircleCI CLI release

ruff Sep 11 windows

34befde8f261aae96a1edf8e84eeafa09e2ffc0df7e3ccaae52bcf39d29bd233 O(Dy)H₈(Cm₂CrDsF₄MgOs₄Po₆Ti)Md₄(Bi₂BkSi)

googlechrome Sep 11 windows

19d7113d92c9430f65902ad54b15d131f2d868d9356959806b3994bfbe0ab909 K(Am)O₃(AsDyEr)H₆(Cm₂DbF₄MgOs₁₀Po₄)Md₆(Bi₅PaSi₃)

65% Legitimate Google Chrome installer

gitlab-runner Sep 11 windows

cc0f2fd6204a6f46811260e4d0f24e58ddfab7819e555f715fd5fd1e911b5d17 K(Li)O₃(IAlDy)H₇(Cm₁₄Cr₈Db₅HfMgOs₅Po₃)Md₄(Bi₂Si₃)

4% Legitimate GitLab runner binary

PuTTY.PuTTY Sep 11 windows

f26059b6f6cfa7badd59a1f133af4338ad3ec68e8b0aeb0ec1dfd7d63e1c66d4 Md(Pa)

CMI.LehrerOfficeDesktop Sep 11 windows

faf8779388f77c03be6698287ec53250af7343c16cab98c755f3a70a8ab581c4

LovettSoftware.MyMoney.Net Sep 11 windows

1c84d1f0827ba4f44957463627947b10fd55a6d523a45348c670e71707aea796 K₂(AmLi₄)O₉(Al₂I₃As₃CCaDy₂Er₄Pr₂Xe)H₁₁(Cm₂₈Cr₁₇Db₂₀DsF₁₆Hf₆Mg₅Os₃₈Po₂₆Ti₂U₆)Md₆(Bi₁₂Bk₂Pa₂Pt₂Si₄)

deface/wallpaperdebugger-detect/hardware-breakpoints

M-Igashi.mp3rgain v3.7.0-windows-arm64 Sep 11 windows

4cc0ab55a7014ce408339558e841262e9a211380ecf0eb0ed5021bea9e6cfae6 H₆(DsF₄MgOs₃Po₂Ti)Md₃(Bi₂Si)

Abdk4Moura.Filament Sep 11 windows

4c2889f5d6421ad17b6c0af3d9feaf9ef18bfd5e7ebdbbcb899e515ec5405dd7 K(Li₂)O₂(DyEr)H₉(Cm₁₁Cr₇Db₂DsF₈Mg₂Os₁₇Po₁₁Ti)Md₅(Bi₅Bk₂PaSi₄)

Brave.Brave.Nightly Sep 11 windows

35432230b992183043c750ffb2b260689a6d9a5dbb22f1dd2e568c819d33fc98 H₃(CrFPo₄)Md₃(Bi₃Si₂)

Sakana-yuyu.cursor-byok Sep 11 windows

101e36bebf5cccdf21c00849633aa507e4cb0c9e156fd74c46dbc467f03ab5b0 O₄(C₂DyErPr)H₁₀(Cm₁₀Cr₇Db₆DsF₁₀HfMgOs₁₄Po₈U)Md₅(Bi₉BkPaSi₄)

67% Unsigned installer, withheld C2 findings

EdrawSoft.EdrawMind.CN Sep 11 windows

5089ee039743a3c04bf7c28fce696835b59dea2515afc2722d2e9c436446d6f0 K₃(Am₂Li₂₀Te₃)O₁₁(C₆Al₂As₉P₂Ca₂Dy₆Er₄EuI₃PrXe₂)H₁₁(Cm₇₅Cr₁₅Db₄₈Ds₂F₃₅Hf₁₀Mg₆Os₄₉Po₃₈Ti₄U₁₅)Md₁₂(Bi₁₆Bk₅HeLi₂Pa₉Pd₂Pt₅Si₄V)

66% Signed legitimate Wondershare installer

janet Sep 10 windows

ee5833f9969361e1ecec63292f7ead17af5465716943f7eaf2d34231c8f7d958 K(Te)H₂(Os₄Po)Md₃(Bi₅Pa₂Si₃)

uv Sep 10 windows

1efb2654b06e7063d4ac1fc9d49a9bda9a6704d82f035b589a2751a592f14151 K(Li)H₉(Cm₉Cr₈Db₃DsF₈MgOs₁₁Po₇Ti)Md₅(Bi₂Bk₂PtSi)

31% Legitimate uv Python package manager

signal-cli 0.14.8 Sep 10 windows

ccd408e831eff7e41ebaaf309704840bb00d78a7869f35ad700dbae5b5a5bb65 K₂(Li₈Te)O₄(CaAs₂C₂Er)H₉(Cm₂₅Cr₁₃Db₁₅Ds₂F₂₀MgOs₁₂Po₁₄Ti₃)Md₉(ArBi₇Bk₂He₂PaPtSi₃)Th

28% Legitimate Signal CLI release

mcp-toolbox Sep 10 windows

feb2d0d55c003b30af7a9afa22f11721239c70cc21812a2de66c425de76a2153 O₃(Ca₂DyEr)H₈(Cm₂₇Cr₁₂Db₁₆F₅MgOs₁₂Po₈U₂)Md₈(Bi₅BkInPtSi₃)Th

Win/REDFLARE

mongodb-atlas-cli 58.3_windows_x86_64 Sep 10 windows

d93529d433dcd4e4adf84893f21564cc79e2841c020dcc7baa0fcdca824c9706 K(Li₃)O₅(ICCa₂DyEr)H₆(Cm₁₅Cr₁₁Db₈F₂Os₁₁Po₈)Md₅(Bi₂BkSi₃V)

17% Official MongoDB CLI signed binary

CargoLambda.CargoLambda v1.9.2.windows-x64 Sep 10 windows

0ab876271d6283548f6d31f2f748e4c27c78802d4650b93d5f465b81e07e1332 K(Li)H₉(Cm₈Cr₆Db₄DsF₁₁MgOs₈Po₈Ti)Md₄(Bi₂BkPt)

apernet.Hysteria Sep 10 windows

717feb36a44e67ef9e2db6a139f8004c6cb97c1aaf4eb7d03ce4710e6fc21165 K₂(Li₂Lu)O₃(DyErPr)H₇(Cm₂₆Cr₁₀Db₅F₅MgOs₁₆Po₇)Md₃(Bi₅PaSi₄)

40% Legitimate Hysteria proxy tool

RSGames.RSGames.Client Sep 10 windows

74507f1c2cb95485a3b23784278ef4041aaaacf11ad0c00f507e16653028d0c4 K(Te)O₂(DyPr)H₇(Cr₂Db₃F₃Mg₂Os₈Po₄U)Md₃(Bi₆PaSi)

56% Unsigned, high-entropy overlay, crypto refs

charmbracelet.crush 92.0_Windows_arm64 Sep 10 windows

9ef5b476314c47482f75653f94a443bb4b697a0a73dab31aa4f5935ffbf8b262 K₂(LiTe)H₇(Cm₁₂Cr₈Db₅DsF₃Os₄Po₆)Md₄(Bi₂Bk)

38% Legitimate Charm Crush CLI

Mozilla.Firefox.ESR.sk Sep 10 windows

17cafb72f9b1de202c826ed7aa65a893b02a4cf2b60f0c2d1a4757d0265023e2 K(Am)O₂(AsC)H₅(DbF₄MgOs₂Po₃)Md₃(Bi₆PaSi₂)

voidtools.Everything.Beta 1.5.0.1423b.x64 Sep 10 windows

a218cebffccfd9dfaa5aa4bbb665d6e4b5533049b1b9ca7e3828385b5cb8142c K(Am)O₉(CoAsCDyErILaPPr)H₉(Cm₂Db₃DsF₁₆Hf₄Mg₂Os₁₆Po₉U₄)Md₄(Bi₄PaSi₄)

keylog/capture

mpv-prism-electron 0.1.0 Sep 10 windows

b3cee0605032d0e609633451f47140f03febddf410ac37c80d8f66e45d362aa3 K(Li)H₅(CmDbFOsTi)Md(Pa₅)

gopass 1.17.2-windows-arm64 Sep 10 windows

64fcc43781c388f156bf5057bd80215f0deed4b749c0a39cc68c61fa053b009e K₃(AmLiTe)O₄(IAsDy₂Er)H₈(Cm₁₅Cr₁₁Db₃DsF₄Hf₂Os₈Po₅)Md₂(Bk₂)

encrypt/filesystem

wasmtime v48.0.2-x86_64-windows Sep 10 windows

a2e7fadc4f54387c3b0ac371ab984113999f7ce824332eb67201526dfbff2bfe K(Li)O₂(AlEr)H₉(Cm₇CrDb₃DsF₆Mg₂Os₈Po₈U)Md₄(Bi₂BkSi)

debugger-detect/checkfileless/memory

gimp-portable 3.2.6 Sep 10 windows

fb39b54d080b636e5b7bd4127f529728aaf344faf6b77f119ff52989035bd791 O₂(CDy)H₅(CmF₁₀Os₅Po₃U)Md₃(Bi₆PaSi₃)

maki v0.5.3-x86_64-pc-windows-msvc Sep 10 windows

67ee9148e5373643ec226d612f17726a5e237f6b039a15e0e6f6af1d08763fdf O₃(CaAsDy)H₈(Cm₁₀Cr₂Db₂F₁₁MgOs₈Po₇U)Md₅(Bi₄Bk₂PaSi)

credential-manager/store-api

chromium-portable 152.0.7977.83 Sep 10 windows

9110edd30b68a9fe691fdf95a31179e5e3f9c971f4c39259d8b1b69b0a490b6c K₂(Li₆Te)O₆(Al₂CCaDy₂Er₃Pr)H₁₁(Cm₂₀Cr₇Db₆Ds₂F₁₈Hf₇Mg₆Os₃₄Po₂₄Ti₂U₅)Md₆(Bi₁₃PaPtSi₄)

19% Legitimate Chromium Portable installer

joplin-portable 3.7.16 Sep 10 windows

cca5e216bccce764a1dac2e5061a8eac24b807b8e0fd1d1fa9efdace24f6dd71 O₂(CDy)H₅(CmF₁₀Os₅Po₃U)Md₄(Bi₆PaSi₃)

29% Signed Joplin Portable installer

gvim-portable 9.2.1037 Sep 10 windows

e75a8e5fb69abe3313a30077dedf41eab20706177b2ed40c55bd29a07be8792d K(Te₃)O₇(Co₂C₂Dy₃ErPrSXe₃)H₁₀(Db₈Os₁₉Cm₁₅Cr₇F₁₉Hf₈Mg₂Po₂₂TiU₄)Md₅(Bi₁₄PaPt₂Si₃)

64% Legitimate gVim portable installer

thunderbird-portable-esr 153.2.0 Sep 10 windows

b1d2fafd11a688c3cc6bc1085567f09b6b2676721305d87a294fdd3169c06062 H₅(CmF₈Os₆Po₃U)Md₃(Bi₆PaSi₂)

telegram-desktop-portable 7.2.7 Sep 10 windows

e8437a893468bed427cff9ab46f02b92c4800f4772578b6e9147cb41f0fec9f7 K₂(Am₂Li₂)O₆(AsCDy₄ErIPr)H₁₀(Cm₁₄Cr₉DsF₁₁Hf₅Mg₂Os₂₁Po₁₆TiU₅)Md₆(Bi₁₂PaPtSi₄)

36% Legitimate Telegram Desktop portable

qownnotes-portable 26.9.1 Sep 10 windows

b7f99722d98cd4d00c284ff44543f4cdd15222d9fe28386a91e7dba640550f31 K(Li₄)O₇(Er₂I₂AlCCoDy₂Pr)H₁₁(Cm₃₁Cr₁₆Db₅Ds₂F₁₈Hf₇MgOs₂₃Po₂₀TiU₄)Md₆(Bi₁₃LiPaPtSi₄)

40% Legitimate portable app

google-chrome-portable 155-dev Sep 10 windows

6a867ce5e9efaa9f64137cb644b2c2f6d9efbffb987484009e00fa56539be8f0 K(Am)O₄(AsC₂ErXe)H₉(Cm₁₀Cr₂Db₄F₁₂MgOs₉Po₁₀TiU)Md₅(Bi₁₂PaPt₂Si₃)

thunderbird-portable 155.0.1_Portuguese Sep 10 windows

a56acfbbd55c3e57e08ee4b2ee8a3f21d15061fce19b1058dc39ab59d989c8f2 K₄(Am₄Li₈LuTe)O₆(As₃C₂Ca₃Dy₃Er₃Pr)H₁₁(Cm₃₄Cr₁₅Db₁₀DsF₂₆Hf₆Mg₇Os₃₇Po₂₇Ti₂U₈)Md₈(Bi₁₆BkHePa₂Pt₂Si₅)Th

62% Legitimate signed Thunderbird portable

tea Sep 10 windows

61b22607c6c03649abfddad7b0ba65b370b9f6c5480f2ba0c5cfbaa5ed213a95 K₂(AmLi)O₂(DyPr)H₆(Cm₁₅Cr₉Db₂F₄Os₈Po₃)Md₂(Bk)

65% Legitimate Go CLI tool

jdtls 1.62.0-202609101554 Sep 10 windows

469e403a0ee1f77a985ab65629f1abec3126c2704cd4be73fb525c410e36efbd K₃(AmLi₁₂Te)O₃(AsC₂Er)H₁₀(Cm₁₅Cr₃Db₁₄Ds₂F₂₀Mg₃Os₉Po₂₄Ti₃U₂)Md₁₀(ArBi₆BkHe₂LiPa₃PtSi₆)

qaac 07 Sep 10 windows

1fb3ab4aa81725e2607ac1b31afa0e13d2617ee6eb5900f5070c092f5271cbb3 O(As)H₇(Cm₃Db₂FMgOs₄Po₅Ti)Md₄(Bi₂Pt₂Si)

40% Legitimate audio encoder

gopass-jsonapi 1.17.2-windows-amd64 Sep 10 windows

295e1bf50a7d431d22ee7f2b014f94550e6c298142e73ae9f0912e827861a643 K(Li)O₄(AlCDyEr)H₉(Cm₁₂Cr₁₁Db₄DsF₄Hf₂Os₈Po₄Ti)Md₂(Bk)

46% Legitimate gopass password manager

c2patool v0.27.22-x86_64-pc-windows-msvc Sep 10 windows

2e6808719b5610f9ab096857f600f16938fda3c7388de3829f0dea1c2a345011 K(Li)O(Dy)H₈(Cm₉Cr₁₀DbDsF₆Os₉Po₄Ti)Md₄(PaBi₃Bk)

files/credentials

julia 1.13.0-win64 Sep 10 windows

17d915b68e32a948c28009e9822ec41b97fe37b1ee22101a7806836fb3bb475a K₂(Li₆Te)O₉(Al₄As₁₀C₄Ca₄CoDy₃Er₃I₂Xe₃)H₁₁(Cm₅₇Cr₁₉Db₂₄Ds₂F₃₂Hf₃Mg₄Os₄₁Po₃₉Ti₃U₈)Md₁₀(Bi₁₃Bk₆He₂LiPa₃Pt₄Si₄)

51% Official Julia distribution

terraform-provider-ibm 6.1_windows_amd64 Sep 10 windows

54eccec785a35329f76c1514e17f5d7dad7ec713e8ad2ea5a3676b526365bbdd K(Am)O(Xe)H₄(Cm₁₀Cr₉Db₆Os₇)Md₄(Bi₂Bk)

postman Sep 10 windows

44130334759919c24c63f12c6b09910d7c814428443697789b08f37eb01e722b O₂(AsDy)H₇(CmDbF₅MgOs₉Po₅U)Md₄(Bi₄Si₄)

binary-metrics/shape

vim 2.1061_arm64_signed Sep 10 windows

2b673e2630638bdf5effe6e2e832b68d6deeed894e5544478c7effb21cc8f6e6 K(Te₂)O₅(CDy₃ErS₂Xe₃)H₁₁(Db₇Cm₁₄Cr₇DsF₁₅Hf₈Mg₂Os₁₄Po₁₉TiU₃)Md₅(Bi₁₀Pa₂Pt₂Si₃)

data/plugin

laurentiu021.SysManager v1.88.2 Sep 10 windows

f99e3f6c25ec93830a8a6784ac6130ad3b6748117b94af326e893c3e598df720 K(Li)O₃(Er₃DyPr)H₈(Cm₃Db₆F₆HfMg₃Os₁₄Po₁₂U)Md₅(Bi₁₁PaSi₄)Th

99% AMSI patch, self-extract, evasion

t8y2.DBX Sep 10 windows

9773b68e5e7f449f1f511332b8754c5711bfab86041d89be8857aedf31b6a8f4 K(Li₃)O₄(Co₂CDy₃Pr)H₁₀(Cm₁₈Cr₁₂Db₁₆F₁₈Hf₆Mg₃Os₁₆Po₁₅TiU₇)Md₅(Bi₈BkPa₂Si₄)

83% High entropy, anti-analysis, screenshot capture

CertifyTheWeb.CertifySSLManager 7.2.1.0 Sep 10 windows

2c787e4d21d68612e77579a9c1513319dcee4589db188fe87f1022fcaf5b9f35 K(Te)O₃(CoDy₂Pr)H₈(CmCr₂DbF₃Mg₂Os₈Po₄U)Md₄(Bi₇PaPtSi₄)

atom Sep 10 windows

2da93b770405cf29fc5f39460a8377424e3182c86863fae2cc346e681bf3d23e O₂(AlC₂)H₅(Cm₃Db₆F₅Os₂Po₇)Md₄(BkPa₃Pt₂)

postman Sep 10 windows

a37593a8184e79c8ec834d48bd6e2529928e4ea5784f03c9d71617c9268bbdb6 O₂(AsDy)H₇(CmDb₂F₅MgOs₇Po₅U)Md₄(Bi₄Si₄)

binary-metrics/shape

Jianjing.XLJSCI Sep 10 windows

7790695aff8f03b4b6fcbfd1180ce21c7e197aecbcafbfbfc6eb309b67663156 H₅(CmF₈Os₇Po₃U)Md₆(Bi₆BkPaSi₂)

DonutWare.Fladder.Nightly Sep 10 windows

55745da8a87f4b48a3c81da737cfb19422ab312374c8f1fdf35feaa29833fdcb K(Te)O₃(DyErPr)H₇(Cr₂DbF₂Mg₂Os₈Po₄U)Md₄(Bi₆PaPtSi)

extraction/unexpected-loader-revisionextraction/loader-checksum-mismatch

ByteDance.Coze Sep 10 windows

f31f319ef151b88cce41b18b63f5e25d24902011e0ca0422184c3561b7273980 K₂(Am₅Li₄₄)O₁₃(Co₅Eu₃SAs₁₀C₇Ca₈Al₂Dy₆Er₄IP₃Pr₂Xe₂)H₁₂(Po₆₅BrCm₁₃₂Cr₂₇Db₆₁Ds₅F₅₅Hf₁₃Mg₅Os₇₁Ti₄U₂₂)Md₁₃(ArBi₁₈Bk₆HeInLi₅Pa₁₉Pt₄Si₆V)Th

66% Signed legitimate Coze installer

Roblox.RobloxStudio Sep 10 windows

14e3e506d5cccc03eeb3ae006f2d55611fb0af64ac8d176dd23d8a3966099b74 K(Li₂)O₃(Dy₄Er₂Pr)H₁₀(Cm₂₄Cr₁₃Db₉F₉HfMgOs₁₅Po₁₁Ti₂U₅)Md₅(Bi₇PaSi₃)

host/system

IObit.Uninstaller Sep 10 windows

a0a2494dc561955613c3e6b1e4a6d6e8f143ddb81927fe0c122e38fb4253529e K₃(Am₅Li₄Te₂)O₁₀(As₃C₃AlCaCo₂Dy₇Er₃I₃PPr₃)H₁₁(Cm₂₈Cr₁₄Db₉DsF₂₆Hf₄Mg₅Os₄₇Po₃₀TiU₅)Md₇(Bi₁₉BkHePaPt₂Si₄)Th₃

60% Vulnerable driver, process injection APIs

IObit.MalwareFighter Sep 10 windows

fb612dc439269253ad42a0a1481650737f2942a46adf3276780281c92abe5b44 K₂(AmTe)O₄(Dy₂ErPPr)H₇(CmDbF₃Mg₂Os₁₀Po₄U)Md₄(Bi₇PaPtSi₃)

38% Signed IObit installer

Ocenaudio.Ocenaudio Sep 10 windows

5d84163f673e00879b68a49645cd192d2365a5ac8409ecd763851fa442e8a55a K₂(Am₂Li₈)O₈(As₃C₂I₃Ca₂Dy₃ErLaPr)H₁₁(Cm₃₁Cr₁₆Db₉Ds₂F₂₀Hf₇Mg₃Os₂₆Po₂₀TiU₅)Md₇(Bi₁₄BkLiPa₂PtSi₄)

61% Legitimate audio editor installer

Microsoft.VisualStudioCode 1.137.0 Sep 10 windows

1de48031dedcb02e0c61008929198bafdd0ef9ba3128737a1e85bcfe86d59cb5 K(Te)O₃(DyErPr)H₆(Db₂F₂Mg₂Os₈Po₄U)Md₅(Bi₈PaPtSi₄)

railway v5.51.2-aarch64-pc-windows-msvc Sep 10 windows

2b65b5df3102ec3ad4e807d1b14f5372cf5b7fccbbab36fec994ee1c91e58efa K(Li)O₄(CaDyErP)H₉(Cm₈Cr₆Db₆DsF₁₁Mg₂Os₁₀Po₈Ti₂)Md₄(Bi₂BkPt)

spicetify-cli 2.45.0-windows-x64 Sep 10 windows

eac783be8564b41fea953c43d87ec9fc925e419be46d708146fce1fedbe250f8 O₄(AsCErDy)H₉(Cm₃₃Cr₉Db₁₃F₂Hf₂Os₇Po₉Ti₂U₁₀)Md₆(BiBkPtSi₃)

80% indicator-removal/timestampstasking/timing