Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/11/2023, 12:36

General

  • Target

    7992c95955b88441a5ab498bc0364f79.exe

  • Size

    10.7MB

  • MD5

    7992c95955b88441a5ab498bc0364f79

  • SHA1

    c3c9a322ecd8d73d4837dbecb021ced856b9abce

  • SHA256

    a5a50622347916cb03000c2ed2b704e43fd0f0768de9debb35c4b05092198af0

  • SHA512

    7e41d2f15fda7277c0af953be170cd7a4cbf70e42126f51394a04fdff7186b63b421e46862f52d077c719e98f7f50837e5c86596dff68111a9b7ec9844ff1eb2

  • SSDEEP

    196608:2f/vKjlpzQDjSRj92hctqRs4e0ValMnOEVyYFvNANoo3i7oiWL9GYttgHEMduyFA:2f/4lpzQD+RmG4eocMnOYojiWhGOgHEJ

Score
5/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • Loads dropped DLL 32 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7992c95955b88441a5ab498bc0364f79.exe
    "C:\Users\Admin\AppData\Local\Temp\7992c95955b88441a5ab498bc0364f79.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Program Files directory
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Extractor.exe
      "C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Extractor.exe" UnknownFileHunter
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4056
      • C:\Program Files (x86)\Comodo\UnknownFileHunter\UnknownFileHunter.exe
        "C:\Program Files (x86)\Comodo\UnknownFileHunter\UnknownFileHunter.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        PID:3264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.COT.Login.dll

    Filesize

    33KB

    MD5

    7997da0f9356849a86aa0ac6184caed1

    SHA1

    f7a895fbce695f791a782694c633fd3818b64b79

    SHA256

    025f26f5c4a360562f9ad2e41e0fa10b80f88de663dcb5ef1701d33adcbb9ff4

    SHA512

    1b3d5386342ff02d36622115228d2334abb70e423c9451f799193d4d504e0cc5956f2dfc3a28f86a66aa3f80c6984774f3b11e949701d25878bcf30f3e4c3040

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.COT.Login.dll

    Filesize

    33KB

    MD5

    7997da0f9356849a86aa0ac6184caed1

    SHA1

    f7a895fbce695f791a782694c633fd3818b64b79

    SHA256

    025f26f5c4a360562f9ad2e41e0fa10b80f88de663dcb5ef1701d33adcbb9ff4

    SHA512

    1b3d5386342ff02d36622115228d2334abb70e423c9451f799193d4d504e0cc5956f2dfc3a28f86a66aa3f80c6984774f3b11e949701d25878bcf30f3e4c3040

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.COT.Login.dll

    Filesize

    33KB

    MD5

    7997da0f9356849a86aa0ac6184caed1

    SHA1

    f7a895fbce695f791a782694c633fd3818b64b79

    SHA256

    025f26f5c4a360562f9ad2e41e0fa10b80f88de663dcb5ef1701d33adcbb9ff4

    SHA512

    1b3d5386342ff02d36622115228d2334abb70e423c9451f799193d4d504e0cc5956f2dfc3a28f86a66aa3f80c6984774f3b11e949701d25878bcf30f3e4c3040

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Common.dll

    Filesize

    44KB

    MD5

    856ddcc84a36739332be89060445ae6e

    SHA1

    39cb80a15955af744a30f25cb0b0f67c64f3057c

    SHA256

    51b8462cf30b59386863ee94de21e766f81d7764b382579b97af351795ddec8e

    SHA512

    1b30ea71d638c6f30a91bf9b5823dce2d42bdba14d00af97802ca92222c351bdda98f300de8000127dabd466303cc8ba1e1693c766b8c0077032e2a522a431d9

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Common.dll

    Filesize

    44KB

    MD5

    856ddcc84a36739332be89060445ae6e

    SHA1

    39cb80a15955af744a30f25cb0b0f67c64f3057c

    SHA256

    51b8462cf30b59386863ee94de21e766f81d7764b382579b97af351795ddec8e

    SHA512

    1b30ea71d638c6f30a91bf9b5823dce2d42bdba14d00af97802ca92222c351bdda98f300de8000127dabd466303cc8ba1e1693c766b8c0077032e2a522a431d9

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Common.dll

    Filesize

    44KB

    MD5

    856ddcc84a36739332be89060445ae6e

    SHA1

    39cb80a15955af744a30f25cb0b0f67c64f3057c

    SHA256

    51b8462cf30b59386863ee94de21e766f81d7764b382579b97af351795ddec8e

    SHA512

    1b30ea71d638c6f30a91bf9b5823dce2d42bdba14d00af97802ca92222c351bdda98f300de8000127dabd466303cc8ba1e1693c766b8c0077032e2a522a431d9

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Core.dll

    Filesize

    584KB

    MD5

    983217a36daaf65a15038cc1240ba0ae

    SHA1

    64c01d4df442577485229afb5514882e8100a069

    SHA256

    a20a3917b2815504f22616192ad9f7ed209d655f99d08390dbbf3787143c47ca

    SHA512

    24b44f0265984ac05c1e6f76bb4a6a7f0b82c1b194ff42393ea0286dc994f100b7e481786c83ea85d6f5ca5d0aa205a9261658e5e66fdd421c94f3bb00d2c458

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Core.dll

    Filesize

    584KB

    MD5

    983217a36daaf65a15038cc1240ba0ae

    SHA1

    64c01d4df442577485229afb5514882e8100a069

    SHA256

    a20a3917b2815504f22616192ad9f7ed209d655f99d08390dbbf3787143c47ca

    SHA512

    24b44f0265984ac05c1e6f76bb4a6a7f0b82c1b194ff42393ea0286dc994f100b7e481786c83ea85d6f5ca5d0aa205a9261658e5e66fdd421c94f3bb00d2c458

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Core.dll

    Filesize

    584KB

    MD5

    983217a36daaf65a15038cc1240ba0ae

    SHA1

    64c01d4df442577485229afb5514882e8100a069

    SHA256

    a20a3917b2815504f22616192ad9f7ed209d655f99d08390dbbf3787143c47ca

    SHA512

    24b44f0265984ac05c1e6f76bb4a6a7f0b82c1b194ff42393ea0286dc994f100b7e481786c83ea85d6f5ca5d0aa205a9261658e5e66fdd421c94f3bb00d2c458

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DAL.dll

    Filesize

    119KB

    MD5

    d744f7116ca13f6de7f0774d93d00bae

    SHA1

    beb8d43e38693e6d031f607a2651e6254a0806fe

    SHA256

    7d303d269ca95a16fec0f3a3e23ed290aff8a8dff943b38c513722838ceb4652

    SHA512

    eee0b2cdf4d6b18c208f160fc48994b51a2d1620c2528e3982a434e025202478ff33f4729da77d964e1b17819cd44f3ec1bd1f141bef4d5837301a24e3d6733d

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DAL.dll

    Filesize

    119KB

    MD5

    d744f7116ca13f6de7f0774d93d00bae

    SHA1

    beb8d43e38693e6d031f607a2651e6254a0806fe

    SHA256

    7d303d269ca95a16fec0f3a3e23ed290aff8a8dff943b38c513722838ceb4652

    SHA512

    eee0b2cdf4d6b18c208f160fc48994b51a2d1620c2528e3982a434e025202478ff33f4729da77d964e1b17819cd44f3ec1bd1f141bef4d5837301a24e3d6733d

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DAL.dll

    Filesize

    119KB

    MD5

    d744f7116ca13f6de7f0774d93d00bae

    SHA1

    beb8d43e38693e6d031f607a2651e6254a0806fe

    SHA256

    7d303d269ca95a16fec0f3a3e23ed290aff8a8dff943b38c513722838ceb4652

    SHA512

    eee0b2cdf4d6b18c208f160fc48994b51a2d1620c2528e3982a434e025202478ff33f4729da77d964e1b17819cd44f3ec1bd1f141bef4d5837301a24e3d6733d

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DeploymentCore.dll

    Filesize

    197KB

    MD5

    f23e1eadb8464e176f6c0e9a9749c87c

    SHA1

    0e4a189dfdf80693608abc30a4956d251646ebeb

    SHA256

    51b656246fa69cec0cdba4608b862bddbdd4ef887bc815631333309bd1d2b879

    SHA512

    cdc85204e1579290810a2ee4f9fa76f9a2507a16ece46114fab4e860e46b1d7cef624666fb2707406ad6573c012d1270a053638f3b6267bea022cf4239643dfb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DeploymentCore.dll

    Filesize

    197KB

    MD5

    f23e1eadb8464e176f6c0e9a9749c87c

    SHA1

    0e4a189dfdf80693608abc30a4956d251646ebeb

    SHA256

    51b656246fa69cec0cdba4608b862bddbdd4ef887bc815631333309bd1d2b879

    SHA512

    cdc85204e1579290810a2ee4f9fa76f9a2507a16ece46114fab4e860e46b1d7cef624666fb2707406ad6573c012d1270a053638f3b6267bea022cf4239643dfb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.DeploymentCore.dll

    Filesize

    197KB

    MD5

    f23e1eadb8464e176f6c0e9a9749c87c

    SHA1

    0e4a189dfdf80693608abc30a4956d251646ebeb

    SHA256

    51b656246fa69cec0cdba4608b862bddbdd4ef887bc815631333309bd1d2b879

    SHA512

    cdc85204e1579290810a2ee4f9fa76f9a2507a16ece46114fab4e860e46b1d7cef624666fb2707406ad6573c012d1270a053638f3b6267bea022cf4239643dfb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Extractor.exe

    Filesize

    15KB

    MD5

    f7e98b96f028752fb47a2495bd90db8b

    SHA1

    6c40be9879076cf24388918c8eaec8c32f083dfc

    SHA256

    b7a31b5e73b1069c76689cb7d8473cc4a3c59534ad2e6048f0cd41a000a06466

    SHA512

    b677016ccb5b68f34d9fb1f55f83db8d57acca3247ee05f069fe8754a031ab1711a91bb2593c8527160102aa107b4087e4c59c0887ecead3d0f1fbbd13445027

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Extractor.exe

    Filesize

    15KB

    MD5

    f7e98b96f028752fb47a2495bd90db8b

    SHA1

    6c40be9879076cf24388918c8eaec8c32f083dfc

    SHA256

    b7a31b5e73b1069c76689cb7d8473cc4a3c59534ad2e6048f0cd41a000a06466

    SHA512

    b677016ccb5b68f34d9fb1f55f83db8d57acca3247ee05f069fe8754a031ab1711a91bb2593c8527160102aa107b4087e4c59c0887ecead3d0f1fbbd13445027

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\APTAT.Extractor.exe

    Filesize

    15KB

    MD5

    f7e98b96f028752fb47a2495bd90db8b

    SHA1

    6c40be9879076cf24388918c8eaec8c32f083dfc

    SHA256

    b7a31b5e73b1069c76689cb7d8473cc4a3c59534ad2e6048f0cd41a000a06466

    SHA512

    b677016ccb5b68f34d9fb1f55f83db8d57acca3247ee05f069fe8754a031ab1711a91bb2593c8527160102aa107b4087e4c59c0887ecead3d0f1fbbd13445027

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\SimpleInjector.dll

    Filesize

    367KB

    MD5

    c163f7970710a03aad5a8c72b31e4081

    SHA1

    6b679e1b7d6ce81cc2c19d61463b33ea2ee774ae

    SHA256

    9e1b0b7ac50683ac9e09b55753edbcd643b1fb5325f0bdec1d28a25c8734ac85

    SHA512

    7e59f227309dbf88ad868c2b7f626795fc416611b5aaab3c4c8f6fe3a56664b24d120c945e7a871e413e2ac45e95bb7e8eb926a401a6d971495c88285ffde2bc

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\SimpleInjector.dll

    Filesize

    367KB

    MD5

    c163f7970710a03aad5a8c72b31e4081

    SHA1

    6b679e1b7d6ce81cc2c19d61463b33ea2ee774ae

    SHA256

    9e1b0b7ac50683ac9e09b55753edbcd643b1fb5325f0bdec1d28a25c8734ac85

    SHA512

    7e59f227309dbf88ad868c2b7f626795fc416611b5aaab3c4c8f6fe3a56664b24d120c945e7a871e413e2ac45e95bb7e8eb926a401a6d971495c88285ffde2bc

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\SimpleInjector.dll

    Filesize

    367KB

    MD5

    c163f7970710a03aad5a8c72b31e4081

    SHA1

    6b679e1b7d6ce81cc2c19d61463b33ea2ee774ae

    SHA256

    9e1b0b7ac50683ac9e09b55753edbcd643b1fb5325f0bdec1d28a25c8734ac85

    SHA512

    7e59f227309dbf88ad868c2b7f626795fc416611b5aaab3c4c8f6fe3a56664b24d120c945e7a871e413e2ac45e95bb7e8eb926a401a6d971495c88285ffde2bc

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.FixedDocumentViewers.dll

    Filesize

    362KB

    MD5

    00431823bf4948f62ed754307117eb83

    SHA1

    3f0323d65742dce88742ff377abe8f64dd688c50

    SHA256

    37e69b66d961b07e064d6bbae8b793856dc1a135fe12696cecf8ca8826d85d93

    SHA512

    fb7fbc084ad96887f95cd5099150dd9a85f8c7c4044c99681771b63972571f2d8d5a313794f42cf52bf1197dea5a907317a9c1b7f5ea901fd62395a3d1ae48eb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.FixedDocumentViewers.dll

    Filesize

    362KB

    MD5

    00431823bf4948f62ed754307117eb83

    SHA1

    3f0323d65742dce88742ff377abe8f64dd688c50

    SHA256

    37e69b66d961b07e064d6bbae8b793856dc1a135fe12696cecf8ca8826d85d93

    SHA512

    fb7fbc084ad96887f95cd5099150dd9a85f8c7c4044c99681771b63972571f2d8d5a313794f42cf52bf1197dea5a907317a9c1b7f5ea901fd62395a3d1ae48eb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.FixedDocumentViewers.dll

    Filesize

    362KB

    MD5

    00431823bf4948f62ed754307117eb83

    SHA1

    3f0323d65742dce88742ff377abe8f64dd688c50

    SHA256

    37e69b66d961b07e064d6bbae8b793856dc1a135fe12696cecf8ca8826d85d93

    SHA512

    fb7fbc084ad96887f95cd5099150dd9a85f8c7c4044c99681771b63972571f2d8d5a313794f42cf52bf1197dea5a907317a9c1b7f5ea901fd62395a3d1ae48eb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.GridView.dll

    Filesize

    2.6MB

    MD5

    516cb7d51d87e4f05ea6a5ad444e733e

    SHA1

    41558fc15c3bae04e44422ccd9962366f3838426

    SHA256

    a5f3f95bd5be3d3378ee6092855eb7509e57b96b820e13b7d0cb9bbfd9f1e88c

    SHA512

    085e9a1ab336e6d675d868c40c783d6fdec1e208ee86d6c53b97fceef60a0a20c5bd32316c52b28c9624560d2dd7a4a473db48a47fe437aeb06fa4a0e0f3f140

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.GridView.dll

    Filesize

    2.6MB

    MD5

    516cb7d51d87e4f05ea6a5ad444e733e

    SHA1

    41558fc15c3bae04e44422ccd9962366f3838426

    SHA256

    a5f3f95bd5be3d3378ee6092855eb7509e57b96b820e13b7d0cb9bbfd9f1e88c

    SHA512

    085e9a1ab336e6d675d868c40c783d6fdec1e208ee86d6c53b97fceef60a0a20c5bd32316c52b28c9624560d2dd7a4a473db48a47fe437aeb06fa4a0e0f3f140

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.GridView.dll

    Filesize

    2.6MB

    MD5

    516cb7d51d87e4f05ea6a5ad444e733e

    SHA1

    41558fc15c3bae04e44422ccd9962366f3838426

    SHA256

    a5f3f95bd5be3d3378ee6092855eb7509e57b96b820e13b7d0cb9bbfd9f1e88c

    SHA512

    085e9a1ab336e6d675d868c40c783d6fdec1e208ee86d6c53b97fceef60a0a20c5bd32316c52b28c9624560d2dd7a4a473db48a47fe437aeb06fa4a0e0f3f140

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.Navigation.dll

    Filesize

    3.2MB

    MD5

    43ad24f376875401218c55cf88afc2ff

    SHA1

    bb579e3b984cb57e98e9098e1321dc6883ca0c9f

    SHA256

    ea596afc86109647d25bca2735818ee6cae77a070eaa698e88ac10d44ec43a2d

    SHA512

    407e70616f757ef1ba1183c1e669d98de58ad2cad21388d8b47c0a933767562dfa73f3e38d676e96b28202501892fc0bfd898ce91a5f7283311d244c192a9a08

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.Navigation.dll

    Filesize

    3.2MB

    MD5

    43ad24f376875401218c55cf88afc2ff

    SHA1

    bb579e3b984cb57e98e9098e1321dc6883ca0c9f

    SHA256

    ea596afc86109647d25bca2735818ee6cae77a070eaa698e88ac10d44ec43a2d

    SHA512

    407e70616f757ef1ba1183c1e669d98de58ad2cad21388d8b47c0a933767562dfa73f3e38d676e96b28202501892fc0bfd898ce91a5f7283311d244c192a9a08

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.Navigation.dll

    Filesize

    3.2MB

    MD5

    43ad24f376875401218c55cf88afc2ff

    SHA1

    bb579e3b984cb57e98e9098e1321dc6883ca0c9f

    SHA256

    ea596afc86109647d25bca2735818ee6cae77a070eaa698e88ac10d44ec43a2d

    SHA512

    407e70616f757ef1ba1183c1e669d98de58ad2cad21388d8b47c0a933767562dfa73f3e38d676e96b28202501892fc0bfd898ce91a5f7283311d244c192a9a08

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.dll

    Filesize

    3.4MB

    MD5

    4e3699c8fff5572af79da01704579781

    SHA1

    1482e67e90c2bf09f5caa29882a976430c65bfb6

    SHA256

    c47c52404a508859af8971a4c5baf1e3cec2bcce43a54c3f59ecf0a5d622c869

    SHA512

    c5431177f160ffaf231edfa0a62f53a00e73468e1c3cc1c5427bbe85093156cbf0637b71c1e334bd484deda6e3711b16170660bd71ebcb33555d87c426b0106b

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.dll

    Filesize

    3.4MB

    MD5

    4e3699c8fff5572af79da01704579781

    SHA1

    1482e67e90c2bf09f5caa29882a976430c65bfb6

    SHA256

    c47c52404a508859af8971a4c5baf1e3cec2bcce43a54c3f59ecf0a5d622c869

    SHA512

    c5431177f160ffaf231edfa0a62f53a00e73468e1c3cc1c5427bbe85093156cbf0637b71c1e334bd484deda6e3711b16170660bd71ebcb33555d87c426b0106b

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Controls.dll

    Filesize

    3.4MB

    MD5

    4e3699c8fff5572af79da01704579781

    SHA1

    1482e67e90c2bf09f5caa29882a976430c65bfb6

    SHA256

    c47c52404a508859af8971a4c5baf1e3cec2bcce43a54c3f59ecf0a5d622c869

    SHA512

    c5431177f160ffaf231edfa0a62f53a00e73468e1c3cc1c5427bbe85093156cbf0637b71c1e334bd484deda6e3711b16170660bd71ebcb33555d87c426b0106b

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Data.dll

    Filesize

    462KB

    MD5

    64b0bf631a0c10e5f064ffff887859e3

    SHA1

    420f39d3e013cc46c2013b5039fa131c5ef1104c

    SHA256

    73a4bd7f814150dcdee834d4f48860ddba7286e6e84947d196c68e7a1ad6dd6f

    SHA512

    c58f9fa755e275852d6b37be9644a40e1fb32615a8adf6f654a0c2b509870497026672b24f3cf2bc1ad9b1a3db7c7f8463b90bb50310f3a7e2d7909f18f07e21

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Data.dll

    Filesize

    462KB

    MD5

    64b0bf631a0c10e5f064ffff887859e3

    SHA1

    420f39d3e013cc46c2013b5039fa131c5ef1104c

    SHA256

    73a4bd7f814150dcdee834d4f48860ddba7286e6e84947d196c68e7a1ad6dd6f

    SHA512

    c58f9fa755e275852d6b37be9644a40e1fb32615a8adf6f654a0c2b509870497026672b24f3cf2bc1ad9b1a3db7c7f8463b90bb50310f3a7e2d7909f18f07e21

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Data.dll

    Filesize

    462KB

    MD5

    64b0bf631a0c10e5f064ffff887859e3

    SHA1

    420f39d3e013cc46c2013b5039fa131c5ef1104c

    SHA256

    73a4bd7f814150dcdee834d4f48860ddba7286e6e84947d196c68e7a1ad6dd6f

    SHA512

    c58f9fa755e275852d6b37be9644a40e1fb32615a8adf6f654a0c2b509870497026672b24f3cf2bc1ad9b1a3db7c7f8463b90bb50310f3a7e2d7909f18f07e21

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Core.dll

    Filesize

    350KB

    MD5

    5c3a4fb4db2c240986600fe709f3f489

    SHA1

    9294dfd7e9191faf54c609a593b4ab6a41b4114c

    SHA256

    e337dcc1bcd59ebe5287fb88af48da62ef24b0c9d42ad03abadfff1d29643380

    SHA512

    12d1b89fdfd1e651dd914e0f07638a0b0e6e86025f9b8c49810ddf141a4bf63e7db9b1254650412ccddfe68734bccc04b3a06d431b9098bb9ab86ca676680546

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Core.dll

    Filesize

    350KB

    MD5

    5c3a4fb4db2c240986600fe709f3f489

    SHA1

    9294dfd7e9191faf54c609a593b4ab6a41b4114c

    SHA256

    e337dcc1bcd59ebe5287fb88af48da62ef24b0c9d42ad03abadfff1d29643380

    SHA512

    12d1b89fdfd1e651dd914e0f07638a0b0e6e86025f9b8c49810ddf141a4bf63e7db9b1254650412ccddfe68734bccc04b3a06d431b9098bb9ab86ca676680546

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Core.dll

    Filesize

    350KB

    MD5

    5c3a4fb4db2c240986600fe709f3f489

    SHA1

    9294dfd7e9191faf54c609a593b4ab6a41b4114c

    SHA256

    e337dcc1bcd59ebe5287fb88af48da62ef24b0c9d42ad03abadfff1d29643380

    SHA512

    12d1b89fdfd1e651dd914e0f07638a0b0e6e86025f9b8c49810ddf141a4bf63e7db9b1254650412ccddfe68734bccc04b3a06d431b9098bb9ab86ca676680546

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Fixed.dll

    Filesize

    2.1MB

    MD5

    c53444d75fbe518061fa4415c4b152b7

    SHA1

    12fff96d6c100787210553e4641a5f22c96c9178

    SHA256

    5e24ada38c903bba958674c3bd366683a8525861fd095b0ed00562d17fb586cf

    SHA512

    b59301d0dd544f351be04b56b728525332a7ae91f72f014673a110f1d4ed4e3502afc158917d364655fe3bc8e9ddb77a1c794abb163b4450137174a24f7ad075

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Fixed.dll

    Filesize

    2.1MB

    MD5

    c53444d75fbe518061fa4415c4b152b7

    SHA1

    12fff96d6c100787210553e4641a5f22c96c9178

    SHA256

    5e24ada38c903bba958674c3bd366683a8525861fd095b0ed00562d17fb586cf

    SHA512

    b59301d0dd544f351be04b56b728525332a7ae91f72f014673a110f1d4ed4e3502afc158917d364655fe3bc8e9ddb77a1c794abb163b4450137174a24f7ad075

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Documents.Fixed.dll

    Filesize

    2.1MB

    MD5

    c53444d75fbe518061fa4415c4b152b7

    SHA1

    12fff96d6c100787210553e4641a5f22c96c9178

    SHA256

    5e24ada38c903bba958674c3bd366683a8525861fd095b0ed00562d17fb586cf

    SHA512

    b59301d0dd544f351be04b56b728525332a7ae91f72f014673a110f1d4ed4e3502afc158917d364655fe3bc8e9ddb77a1c794abb163b4450137174a24f7ad075

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Themes.Windows8.dll

    Filesize

    1.8MB

    MD5

    0cc8a1978e173039f22032416c37b88f

    SHA1

    ba834d057906a2d0de887191fe5597b8a16abc38

    SHA256

    61157ddfdd516868e66ec8e31ac063ad653799c7a83ff1335e74a8d96a316667

    SHA512

    f22a7005faf71bbd67542236117725cc4aa5a126e38c07914af7ae2c7aa195c157b2b2715edd4da22c4e50f82e2ce441d1b0cbb99ca10513b4f7c25e3955b540

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Themes.Windows8.dll

    Filesize

    1.8MB

    MD5

    0cc8a1978e173039f22032416c37b88f

    SHA1

    ba834d057906a2d0de887191fe5597b8a16abc38

    SHA256

    61157ddfdd516868e66ec8e31ac063ad653799c7a83ff1335e74a8d96a316667

    SHA512

    f22a7005faf71bbd67542236117725cc4aa5a126e38c07914af7ae2c7aa195c157b2b2715edd4da22c4e50f82e2ce441d1b0cbb99ca10513b4f7c25e3955b540

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Themes.Windows8.dll

    Filesize

    1.8MB

    MD5

    0cc8a1978e173039f22032416c37b88f

    SHA1

    ba834d057906a2d0de887191fe5597b8a16abc38

    SHA256

    61157ddfdd516868e66ec8e31ac063ad653799c7a83ff1335e74a8d96a316667

    SHA512

    f22a7005faf71bbd67542236117725cc4aa5a126e38c07914af7ae2c7aa195c157b2b2715edd4da22c4e50f82e2ce441d1b0cbb99ca10513b4f7c25e3955b540

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Zip.dll

    Filesize

    149KB

    MD5

    7085f90b145faf32975833f2d3c916de

    SHA1

    70af607b4b20231b400ba47472f7f7217408ff4f

    SHA256

    d23fce0fca68076e695e37c8e5ca8e3ddd943df5ab666897284943f6e75f252b

    SHA512

    2e70bc56ad78ba1550db8a43f447a2910c39b8a8324c3fe47f3278c4c1cc49447bedea41ccedbb939a323cc1fe53e9041514f2420e10d5212bbea92461bbaff4

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Zip.dll

    Filesize

    149KB

    MD5

    7085f90b145faf32975833f2d3c916de

    SHA1

    70af607b4b20231b400ba47472f7f7217408ff4f

    SHA256

    d23fce0fca68076e695e37c8e5ca8e3ddd943df5ab666897284943f6e75f252b

    SHA512

    2e70bc56ad78ba1550db8a43f447a2910c39b8a8324c3fe47f3278c4c1cc49447bedea41ccedbb939a323cc1fe53e9041514f2420e10d5212bbea92461bbaff4

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Telerik.Windows.Zip.dll

    Filesize

    149KB

    MD5

    7085f90b145faf32975833f2d3c916de

    SHA1

    70af607b4b20231b400ba47472f7f7217408ff4f

    SHA256

    d23fce0fca68076e695e37c8e5ca8e3ddd943df5ab666897284943f6e75f252b

    SHA512

    2e70bc56ad78ba1550db8a43f447a2910c39b8a8324c3fe47f3278c4c1cc49447bedea41ccedbb939a323cc1fe53e9041514f2420e10d5212bbea92461bbaff4

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\UnknownFileHunter.exe

    Filesize

    2.1MB

    MD5

    806329f65e1059922b101906dda05215

    SHA1

    19a17b42e6a6cb96cab3a2120710a76e8fef10ab

    SHA256

    5feeca5e188d892df8bbfc8691c421c02b665089a402c8fbc8ed01f13a61bc63

    SHA512

    a9672f790adb5db5a5655c4c176e5c76c53395ff03e991512001231efc2d85b498572b850396cbe1474a14bb834c0acf3ce6aef34fabc899f6069a7a48ec8603

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\UnknownFileHunter.exe

    Filesize

    2.1MB

    MD5

    806329f65e1059922b101906dda05215

    SHA1

    19a17b42e6a6cb96cab3a2120710a76e8fef10ab

    SHA256

    5feeca5e188d892df8bbfc8691c421c02b665089a402c8fbc8ed01f13a61bc63

    SHA512

    a9672f790adb5db5a5655c4c176e5c76c53395ff03e991512001231efc2d85b498572b850396cbe1474a14bb834c0acf3ce6aef34fabc899f6069a7a48ec8603

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\UnknownFileHunter.exe.config

    Filesize

    4KB

    MD5

    eac2a03422137722b1d6cadb2b80f933

    SHA1

    b9f4039b01c1f2e0d0170d08906eba6bf8d3dbf1

    SHA256

    358adea58c5fdcfe0cbc92bfffbc6cdead25fe8235a5492848208dcd57275f2f

    SHA512

    ced76262932b3d631440310c8038466eab1cc86b8cb2aa488907037e8b0924931a99abbf888ca8abba7eb1fa42198589f55a6094cc3ddf6f0b3d09af039433bb

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Valkyrie.WebApiProvider.dll

    Filesize

    57KB

    MD5

    c9a19bf5040f9717cf61d6aae8aa5a34

    SHA1

    42729f07ca1bd15b9199e3060c504dc1dc83f7c2

    SHA256

    4d9683aee5448d33f04c63f494438ea667b58a4fe63eb84d7f511832a8609c9c

    SHA512

    f741b4a14ff7d67c6cfa8caf50aeb3ab7e106b5b0516b0636e854e2155c96459ff9b0ead835f0e99838c23f3489f3fd4794d3cff13682028a1e53e2e0b6ea3c1

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Valkyrie.WebApiProvider.dll

    Filesize

    57KB

    MD5

    c9a19bf5040f9717cf61d6aae8aa5a34

    SHA1

    42729f07ca1bd15b9199e3060c504dc1dc83f7c2

    SHA256

    4d9683aee5448d33f04c63f494438ea667b58a4fe63eb84d7f511832a8609c9c

    SHA512

    f741b4a14ff7d67c6cfa8caf50aeb3ab7e106b5b0516b0636e854e2155c96459ff9b0ead835f0e99838c23f3489f3fd4794d3cff13682028a1e53e2e0b6ea3c1

  • C:\Program Files (x86)\Comodo\UnknownFileHunter\Valkyrie.WebApiProvider.dll

    Filesize

    57KB

    MD5

    c9a19bf5040f9717cf61d6aae8aa5a34

    SHA1

    42729f07ca1bd15b9199e3060c504dc1dc83f7c2

    SHA256

    4d9683aee5448d33f04c63f494438ea667b58a4fe63eb84d7f511832a8609c9c

    SHA512

    f741b4a14ff7d67c6cfa8caf50aeb3ab7e106b5b0516b0636e854e2155c96459ff9b0ead835f0e99838c23f3489f3fd4794d3cff13682028a1e53e2e0b6ea3c1

  • memory/3264-175-0x000000000D190000-0x000000000D4C0000-memory.dmp

    Filesize

    3.2MB

  • memory/3264-183-0x000000000EC10000-0x000000000EE22000-memory.dmp

    Filesize

    2.1MB

  • memory/3264-160-0x0000000008130000-0x0000000008138000-memory.dmp

    Filesize

    32KB

  • memory/3264-161-0x00000000081B0000-0x00000000081E8000-memory.dmp

    Filesize

    224KB

  • memory/3264-162-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-163-0x0000000008180000-0x000000000818E000-memory.dmp

    Filesize

    56KB

  • memory/3264-158-0x000000000A0A0000-0x000000000A106000-memory.dmp

    Filesize

    408KB

  • memory/3264-167-0x0000000009090000-0x000000000909C000-memory.dmp

    Filesize

    48KB

  • memory/3264-193-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-136-0x0000000009540000-0x00000000098A8000-memory.dmp

    Filesize

    3.4MB

  • memory/3264-168-0x000000000C520000-0x000000000CAC4000-memory.dmp

    Filesize

    5.6MB

  • memory/3264-169-0x000000000C000000-0x000000000C092000-memory.dmp

    Filesize

    584KB

  • memory/3264-170-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-171-0x000000000C370000-0x000000000C37A000-memory.dmp

    Filesize

    40KB

  • memory/3264-116-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-157-0x00000000094D0000-0x00000000094E2000-memory.dmp

    Filesize

    72KB

  • memory/3264-124-0x0000000008260000-0x0000000008296000-memory.dmp

    Filesize

    216KB

  • memory/3264-159-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-145-0x0000000072BA0000-0x0000000073350000-memory.dmp

    Filesize

    7.7MB

  • memory/3264-153-0x0000000009420000-0x0000000009480000-memory.dmp

    Filesize

    384KB

  • memory/3264-112-0x0000000000090000-0x00000000002A6000-memory.dmp

    Filesize

    2.1MB

  • memory/3264-179-0x000000000D4C0000-0x000000000D68C000-memory.dmp

    Filesize

    1.8MB

  • memory/3264-144-0x0000000009340000-0x00000000093B8000-memory.dmp

    Filesize

    480KB

  • memory/3264-113-0x0000000072BA0000-0x0000000073350000-memory.dmp

    Filesize

    7.7MB

  • memory/3264-149-0x00000000093C0000-0x000000000941E000-memory.dmp

    Filesize

    376KB

  • memory/3264-120-0x0000000007970000-0x0000000007980000-memory.dmp

    Filesize

    64KB

  • memory/3264-115-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-187-0x000000000C460000-0x000000000C4BC000-memory.dmp

    Filesize

    368KB

  • memory/3264-140-0x00000000098B0000-0x0000000009B4C000-memory.dmp

    Filesize

    2.6MB

  • memory/3264-132-0x0000000008F70000-0x0000000009006000-memory.dmp

    Filesize

    600KB

  • memory/3264-188-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/3264-128-0x00000000082A0000-0x00000000082C2000-memory.dmp

    Filesize

    136KB

  • memory/3264-192-0x000000000BDD0000-0x000000000BDFA000-memory.dmp

    Filesize

    168KB

  • memory/4056-114-0x0000000072BA0000-0x0000000073350000-memory.dmp

    Filesize

    7.7MB

  • memory/4056-106-0x0000000000C50000-0x0000000000C58000-memory.dmp

    Filesize

    32KB

  • memory/4056-107-0x0000000072BA0000-0x0000000073350000-memory.dmp

    Filesize

    7.7MB