Overview
overview
7Static
static
3antimicrox...64.exe
windows7-x64
7antimicrox...64.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
1$PLUGINSDI...ns.dll
windows10-2004-x64
1$PLUGINSDI...nu.dll
windows7-x64
1$PLUGINSDI...nu.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
1$PLUGINSDI...fo.dll
windows7-x64
1$PLUGINSDI...fo.dll
windows10-2004-x64
1bin/Qt5Concurrent.dll
windows7-x64
1bin/Qt5Concurrent.dll
windows10-2004-x64
1bin/Qt5Core.dll
windows7-x64
1bin/Qt5Core.dll
windows10-2004-x64
1bin/Qt5Gui.dll
windows7-x64
1bin/Qt5Gui.dll
windows10-2004-x64
1bin/Qt5Network.dll
windows7-x64
1bin/Qt5Network.dll
windows10-2004-x64
1bin/Qt5Widgets.dll
windows7-x64
1bin/Qt5Widgets.dll
windows10-2004-x64
1bin/SDL2.dll
windows7-x64
1bin/SDL2.dll
windows10-2004-x64
1bin/antimicrox.exe
windows7-x64
1bin/antimicrox.exe
windows10-2004-x64
1bin/libEGL.dll
windows7-x64
1bin/libEGL.dll
windows10-2004-x64
1bin/libcry...64.dll
windows7-x64
1bin/libcry...64.dll
windows10-2004-x64
1bin/libgcc...-1.dll
windows7-x64
1bin/libgcc...-1.dll
windows10-2004-x64
1bin/libssl...64.dll
windows7-x64
1bin/libssl...64.dll
windows10-2004-x64
1Analysis
- max time kernel
103s - max time network
109s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
30/09/2024, 23:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
antimicrox-3.4.1-Windows-AMD64.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
antimicrox-3.4.1-Windows-AMD64.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240910-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
bin/Qt5Concurrent.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
bin/Qt5Concurrent.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
bin/Qt5Core.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
bin/Qt5Core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
bin/Qt5Gui.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
bin/Qt5Gui.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
bin/Qt5Network.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
bin/Qt5Network.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
bin/Qt5Widgets.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
bin/Qt5Widgets.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
bin/SDL2.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
bin/SDL2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
bin/antimicrox.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
bin/antimicrox.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral25
Sample
bin/libEGL.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
bin/libEGL.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
bin/libcrypto-1_1-x64.dll
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
bin/libcrypto-1_1-x64.dll
Resource
win10v2004-20240910-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
bin/libgcc_s_seh-1.dll
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
bin/libgcc_s_seh-1.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
bin/libssl-1_1-x64.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
bin/libssl-1_1-x64.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target antimicrox-3.4.1-Windows-AMD64.exe
- Size 13.5MB
- Sample240930-31pf4s1cpr
- SHA256 7c5b449226d2c3e8e65341baffb10b9393282d53b7f6fb164ed788ca2967bb99
- MD5 1943da99ebbe840ac89c3045fe24babb
- SHA1 a4ca3555efc9b12e515403a79d7316ccb69a7377
- SHA512 462aa3fb349c23f7b44b6ca049f3f96f363c8ce0596f6f18a09bf45c0087088d3c92f0a7195aeb69cce7c89cec38cb0df2d85c39a5defc017bf48c5308cc07f5
- SSDEEP 196608:OZh/vKV4AhS5RX0Ooll6Vv4eCklq7CZhKNbgANGvnU8T6slsWD7PdtSX6kcFCjuh:s/9AEuzC/rLWnNAnVmW/VtQ6kjjo
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1508 antimicrox.exe - Loads dropped DLL 19 IoCs
pid Process 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 3944 antimicrox-3.4.1-Windows-AMD64.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 42 IoCs
description ioc Process File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_pt_BR.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_tr.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\Qt5Gui.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libgcc_s_seh-1.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_fi.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_ru.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\gamecontrollerdb.txt antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_fr.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\platforms\qwindows.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\LICENSE_SDL_GameControllerDB antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_ca.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_pt.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\antimicrox.exe antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libEGL.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libstdc++-6.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_de.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_en.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_nb_NO.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_sv.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\Uninstall.exe antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\Qt5Concurrent.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libcrypto-1_1-x64.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_br.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_fa.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_hr.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_ko.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_rue.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_sr.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libssl-1_1-x64.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\libwinpthread-1.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_es.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_uk.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_vi.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_zh_CN.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\Qt5Network.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_it.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_ja.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_pl.qm antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\Qt5Core.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\Qt5Widgets.dll antimicrox-3.4.1-Windows-AMD64.exe File created C:\Program Files\AntiMicroX\bin\SDL2.dll antimicrox-3.4.1-Windows-AMD64.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 antimicrox.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags antimicrox.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 antimicrox.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags antimicrox.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1508 antimicrox.exe - Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe - Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe 1508 antimicrox.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\antimicrox-3.4.1-Windows-AMD64.exe"C:\Users\Admin\AppData\Local\Temp\antimicrox-3.4.1-Windows-AMD64.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
PID:3944
-
C:\Program Files\AntiMicroX\bin\antimicrox.exe"C:\Program Files\AntiMicroX\bin\antimicrox.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1508
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\AntiMicroX\bin\Qt5Core.dll
- Size 7.8MB
- SHA256 858abb9ddcb3cd4fa15c01d3cd64ff4371a79516b02bc3df20590a82161fba55
- MD5 f38f9d503157c6b2401801f9572fd048
- SHA1 52f999e93532349d0fca73f49e7a4e987b4a5e1f
- SHA512 c31966139cb1d5df66ea5cfde65b09449d5f25d5c4fc146cd44f0e0124e8106eef124fc40e2522aaee571e4685e605ebbcab8305a23d00ab9d7828c70a7f1be3
- SSDEEP 196608:N84evpspTjPCixOJsv6tWKFdu9CUGSFj+p:NNevpIT2TJsv6tWKFdu9C4g
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\Qt5Gui.dll
- Size 9.2MB
- SHA256 8bcf807aaf2419843a778994187fa4a2fe9e2d926435ed8add3e670935b3f9aa
- MD5 fc7d92feb89f055f7f19169e7a1f3621
- SHA1 5a0f1b5fa82f419020fb38010340032971495dcd
- SHA512 e97dbc3afc7875dd753c10804aa1c98abc6462f4a295ef88f9f96292a620d607f8d67fb3172a4eca72664f7c0e928e2709dfff42586f516c4ba3567fa4a334e0
- SSDEEP 98304:4jXCr0pPxu7Ve0VW0I4UZYS437MU1MXUDyfK:Oyr0pv0VW0qYDLMUX
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\Qt5Network.dll
- Size 2.6MB
- SHA256 7660849b5647d0cd1c893fd0f977474df7b968bfae17cec79dbc77359f4e01f3
- MD5 94da65cb700658388a9cc3478abee446
- SHA1 d6eb041d57a730ca203a00c925281bc112a99fda
- SHA512 d71046b4a48ee6b085d10131a4bdd77045258685d6d10cff8626e7c5ed1a02218e095dc5e3a63b57868d84ab71b41e1265b7f8cf87fe462c90e8d7ec1248e699
- SSDEEP 49152:duOO43/DCdP/4O5WPkryQ/HiCn3Ihf15PA3/ITe:dtFs/dn+hPI/ge
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\Qt5Widgets.dll
- Size 8.3MB
- SHA256 f1cdc4e0717d054a654373c52d98b8730d4dfd48eac0e5d9f518d9cede45fcdd
- MD5 f4cf06dedf04a732be32acd1291cf032
- SHA1 8b9f8b822722537cf3043bc0e3a0069c33c1c66b
- SHA512 e0dd90285afafeef96776c268672283604c61502f7ca7d165b054654e6ca960f0e9087f56693fad48d4d18c78b44fe7e5f05988739e789a1712440c3a742dc3a
- SSDEEP 49152:rSMPF2bpm2G9ZoRpLYAELJGZ+9gOfXFipQcwZR4XRDFT8wedoyq+QkniEDXvpTxW:rUpmSkLY+GDyC/qWjxLKg6fW+jVD8
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\SDL2.dll
- Size 2.3MB
- SHA256 ae168d45449e24b4bafe6aeed16bfb89e01453db4b83d7d0ac884f9f33125ed1
- MD5 b2514da39175d249b3d74caf2fd64004
- SHA1 0587d0f97c030d485fd6f8d4aa0b134873f58f00
- SHA512 04ba13e696afccf7e71b6e6bb78ba31efd2fed275380dfe643e5566a28e8d9d3e78e8b7c7246405d6bdb62d0347df740941b81303c2db3a7a284ffd3d49681fd
- SSDEEP 49152:JlqkzZJgT4aa2xQWpDAdB601qcuSZH2WFL/Pn90sMgRatmWZqJl:LRdB60qcu+2WFzPnebgRatTZqJl
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\antimicrox.exe
- Size 4.4MB
- SHA256 4d4d616c9345591e6d4832891a3634e151680aa84199623e8d92d2597957d52c
- MD5 74fb30272498eb73ef8376a973aef75b
- SHA1 8809cb445f2b9c7fb79a6afe35c112c67a6d120c
- SHA512 90cd289c720cd034f023af53b3413dc0e37234e418389cd92d5d04a7e8510b24487b0f53dc6c0363c1465268dd537b2b3411ba69e4b6d715642096689a5fa403
- SSDEEP 49152:Fo8S/MBg4pajysjYMOXJO4cSq7UamWZeUaGJz2el6HeLZ/qVxlsw7A7nDYn9D:OBEf/TMxSM7jJzD6Q4n9D
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\libcrypto-1_1-x64.dll
- Size 3.3MB
- SHA256 13071dc72a97cf3c84fa754714c99f3b91f3aa784393994401bec0a7869cdb51
- MD5 f57fd8bbfab9f786ccb60d663745c864
- SHA1 75b50bd80e01650f97119648f6aebfb736b89e99
- SHA512 7fd8b7c323d52188575d6054cbf561a05bbc688d002f8d80a0c0d915a6cfc9537755d520482126dac334e6f08d4519977be5f97ed52964076d8ba992222c92a1
- SSDEEP 49152:8VwASOryIU6ifZGtlqQ0Oh5PhTEeJ/nOCH0tpINuZdeKDYRTLaLa4NP6DN8831CB:Y1+4/mtO0a48DN8K1CPwDv3uFfJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\libgcc_s_seh-1.dll
- Size 147KB
- SHA256 b22b954397a52703579d92db64b57812af70f2afcafe2e742a009c1640b9ec1a
- MD5 25d035933434a273b7916e6eb443d3b6
- SHA1 f829301691214d24f6d989e7c948ffa8d8d64c37
- SHA512 e3c1620bc24ea117279074ee01810e99be342649add6a80728b42ffc06e223e9eb65f16f6632ccec93e96f880304536a1b8dd4f0ac8c2ead1550290e11cea1c0
- SSDEEP 3072:N8TG1KpEDJZkSjJDKW2R8cd6PM+MahQocoERNyN8B4M0F2:xKSjjJOBRw0bo0yo90F2
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\libssl-1_1-x64.dll
- Size 670KB
- SHA256 6ba837ce8bafe2bad595164f14bc3e85905e5c7fe88a0a0efb99a2ba9f025f72
- MD5 7d8cd03c4d24a26d5e5b2f188773d852
- SHA1 583613b44fc1bdd81559c15d281444ae82e9d9c4
- SHA512 c50f14e5126b28ed402314a641b969c1a0f47a5856a5a607ff0df9b5bbcde44a7ead460cc5dece25ba3ec8e00c9d165183f4a6420d60ef56e12be4f2e4cc60a7
- SSDEEP 12288:zofvFwEpp/ZYaDrN+9Qa3+YnkaZHEWFPTs73/MqFF8MXI/3ZtBPFj5U2lvz:ITp/JN+9Q1Gg73/ydRt35U2lvz
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\libstdc++-6.dll
- Size 2.3MB
- SHA256 0d9c01ab1771df439c75f144b2d855b4ac400243f006d14d9a043493de628f0d
- MD5 27bb0a7aeabfdc799ad34a6ae2a24c57
- SHA1 099bfb10b27edf7a52d0e75aee32b0ef5a04743a
- SHA512 4cf25bd823f447022f6ba5b70f8661321f0b0fb7dae1ba009d85e7ce13229d0d511ac092b26c3cbd7860ea43f99c600a3a2a66407d71df29e094b109d29f4b99
- SSDEEP 49152:DRVurPbtXLsFFE8vjqWQoEFmyBOYmv6YWwf0r+accrBD:DRVBFFE8vKoE+x6Uf0qaccrBD
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\libwinpthread-1.dll
- Size 59KB
- SHA256 5091b85a2a73b82aa3cf433f51af338f6245319d1c041bc26b42a61cbdb2f880
- MD5 0a96ae22a032189a0919737b4007ab74
- SHA1 6ccdd0955d223bbfd1c2c12bc84b20f9f9706243
- SHA512 74b693c3957dcba750dbb12817e0722406da00505611a583e23d7bf8883d6c50ec76581d34ae9166fb6323480abe919bd5017093e2dfad7d12f92d76e5a8d53c
- SSDEEP 1536:hP5y7i+gSv3jw/mjRSkmDlICejxPm3YyjYZd:hDqM/m9rmDHelPm3YkYZd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\bin\platforms\qwindows.dll
- Size 2.8MB
- SHA256 5420275c89725866b70bd24b7b556222ff7ea47fd1effdecef0d0a1c20405c43
- MD5 7c0f42ae64400b354ce7ea9bcaba32c5
- SHA1 d7615621225849c3d6f7e37c10e492ca8820f27a
- SHA512 c29d84e2685128e746808243d090497b6326196c32bd4385fabeee66e971989a1ecd57e87a01d5e222aba6edd0c27165212fb5aeee9029fb32e758cbb3726ea4
- SSDEEP 49152:/RBhEWeydmWHwbfaKUQS/zvlkp5Pj262L7jDYr:5Blbi06H7N2/jDa
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\share\antimicrox\gamecontrollerdb.txt
- Size 193KB
- SHA256 5080eef3f278b60b19c6a1de062370a8da7a99be9a0cf7f4310c18077c8f1e72
- MD5 a20bf8e012d950a67478f7aced384489
- SHA1 5e1c40190db6bb95e33c6db01a01474a5b745528
- SHA512 e1db2e835da1ad14545f5561f81a0efca2ef4ef5bcc38392c51aa63e53113eed69a4db1f28102ba2ec481e93cc65c24dc17da5ce3d79015e7e833f51cb166c43
- SSDEEP 1536:XLdNQGOkAS6tUUTt2K13VQnFh9Es9BMKZG2rJd/9npEVjiL3M8+1yLS1Tn4/N5ej:61f
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\AntiMicroX\share\antimicrox\translations\antimicrox_en.qm
- Size 128KB
- SHA256 13075383033ff4f0ec8b30c676f41a482d5dc71e9374f5f205db40b11d530f45
- MD5 f49f4482984aa91e015d701d510c76cc
- SHA1 8c6780ef9d0c41c84ce15987e796699028a4e147
- SHA512 8029bcacc2cbe1d6cc3da7ac4778a19d5b432afc1f2648e986975cda6d1550631df6cfd1367f746d5cc6f3cb3cd65f88ae1151a462f26d32f0ac1736f218b29e
- SSDEEP 1536:T/NVB/LIQ1u3qkwu6fRz/HB7QkHYi3OSoEgcrD:pV5LIQoobB7QmYieSoExD
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\InstallOptions.dll
- Size 30KB
- SHA256 c555c346cc1f80ff0cb9aeaab8875a10c15ea4e5cf445a0f1597363fcf686924
- MD5 a7d3a18ddc6206b7d980a40700ea6619
- SHA1 2da1598e44a0d7541c236d678bfffb28de805c08
- SHA512 53bffcd80bf3b8da2c1576b57bf4f993abed8a8c45f3831db4a983f05651bb6c22678b903e0c66fe2bc303fa2c8ef9b333826a998e0bf96719e4914c62efa374
- SSDEEP 384:U0gEkzxOCEhrPa9EGCuvLjMVAKZv7HTw+GkuKnb/N1f9J61j0G8mnWvr:U/0CE5a9ED6LWbcBkHpS
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\NSIS.InstallOptions.ini
- Size 1KB
- SHA256 46407f1bfdb16c8880881587001a142086bfd80316e1fc06946505885f152d21
- MD5 1478c5a8d40faf213ed27db7c67f7ec8
- SHA1 7a3e685cb17e1763ef4b31e82d83ab94239f1a63
- SHA512 dd0e648d4d07769b027d908ff58d813561ecaab282cb94b91de86bfe0efe1bd2b36d48830d2cfcf239918d34c3773a7c68332562110c53c94c4954e69991ec27
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\NSIS.InstallOptions.ini
- Size 1KB
- SHA256 a3d87acbd2c48db3dee50772d99447642188ee797e0228fd4f2753ecb10da52d
- MD5 a410f397b082b72a9f8f856ed4805d08
- SHA1 330ff7034e75b0c3f5b299fc653d4d8d2283984a
- SHA512 abbf136984762f80c9da7f95e65f6d86ebef40ac3b21e71209fe882434d6f40661b9c12fe2eb90d47e64829d20b268a48948ad90fbd138be6b5db89481fea080
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\StartMenu.dll
- Size 11KB
- SHA256 48765294aa273ec2fd55cc5f9301e138b4d56a9f6d00fcf24473788e64b52bfd
- MD5 65c301d9a85f4342cdef7fedeabafd5d
- SHA1 10606ffc00f2400fb2f52d404b30115cb33137e9
- SHA512 0dcdd78d8f472168614200900afd479a60106c94deda18c9999c32b1af497c32d9fd41f6039d94bfa28855121e61fb4031e4464b2f074d9fb7024f5f74950efd
- SSDEEP 192:fLB7OopThb4h9qRqsHUzKX9zvJkwTFkBo5BoE9c:fLB77pCh97s0zKZvaOc
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\System.dll
- Size 25KB
- SHA256 322e35bcdd0dd61cad8810bb446c425d8b91ceeba897b13fa0f50f1f48f88056
- MD5 46de30b73f6fa1d4ef62ba7b169e0191
- SHA1 59850382f1f5f30c840f502d8fc5fc228df33d6d
- SHA512 2e51a23297bbe74bb1b1ecc5a7257c546ea43d864e0691a437577431d022f6be5e653dc1ce186698095833245c869bb769c7088ece85851f539b9b763b2cef70
- SSDEEP 384:1xnVPk9nL3P0CMxzPJJKZvZvUq5PKpkuKnbyFJVA+:1lBkhP0CMxFwpSkUJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\UserInfo.dll
- Size 7KB
- SHA256 c9dd715d31c8cdf763f5edc92b8228df617bc528d7f558d6e531434c62a4b37b
- MD5 5df25c042bdda748d1f396b4fe070ede
- SHA1 e470ebe89bd49373f4175b5cf796c49ca1ee9a4e
- SHA512 29bfd4d17200286bb84b9956f21f43aa8ae470870835064d60f2de2ef535535115c17a7bce75935518c0aec18db4bde700740d4b7227ba18a34ac57bbaa4657f
- SSDEEP 96:8MaRo52x1kO2TPrdKX9zv+WI7jjPC2gwvTlQordUyJWRI:uRO7DJKX9zvmTDTlQ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\ioSpecial.ini
- Size 1KB
- SHA256 f26b3f2af4e113ba37ad5c2a8ae5b4bbf8ae2aec6030314415a6516a9220300b
- MD5 42c73674148ec68e7f75fbb998634b24
- SHA1 48ec87c5d0bd2759a23440f6343c6c063da303a1
- SHA512 e355a0b7d97d5a531ba74a5d7cdd3947fdebc4061c639ce50ca9e080b6e5c0ba6345de77dc219998a9683104a6a2ffd8de3a576fcb313c4183e8fab1a7f9b12a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\ioSpecial.ini
- Size 1KB
- SHA256 ce9f079b81884232fba556b4ade7e0d3e9b0f1b190d5264a38fe0104588ae9af
- MD5 6fcc836873cd05da9540f7fa5705df45
- SHA1 432e99e2eb3a04302385e07e78449ab410bc1d9c
- SHA512 2a9e2d9c160610d7ae8eae48aa8ae0c607837156d3aff249218e228b141b64553d7f45e8be05d396e959d30608ab724ed32f5857ee29ccd969f3ad997a6015ea
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsyA97F.tmp\ioSpecial.ini
- Size 1KB
- SHA256 e724bdd645edc9709e55a9887a05e7690d8a6a11116ab76102d062bc990d8de4
- MD5 37e6b4d9d9295e7548f9580f9830bb46
- SHA1 c8b2312902fff3f6b3a369e96fca6b8b47a1410f
- SHA512 c231b2d6a2ab9be76789ce60d365ba8af3a25849d11456a1cd2f9bd86cb228431d4f9f9b83568478767fbfeeb3f044d7dbd5be4a7d27f7836ff3f8521e4b827b
- MD5 SHA1 SHA512